wintrust.dll

Description: Microsoft Trust Verification APIs

Version: 10.0.26100.8036

Architecture: 64-bit

Operating System: Windows NT

SHA256: d43a0492d940c79451a0721199ae8c37

File Size: 526.0 KB

Uploaded At: March 31, 2026, 3:10 p.m.

Views: 10

Exported Functions

ComputeFirstPageHash (Ordinal: 1, Address: 0x426a0)
CryptCATVerifyMember (Ordinal: 2, Address: 0x43280)
CryptSIPGetInfo (Ordinal: 3, Address: 0x46ba0)
CryptSIPGetRegWorkingFlags (Ordinal: 4, Address: 0x33690)
GenericChainCertificateTrust (Ordinal: 5, Address: 0x1deb0)
GenericChainFinalProv (Ordinal: 6, Address: 0x29520)
HTTPSCertificateTrust (Ordinal: 7, Address: 0x1be50)
SetMessageDigestInfo (Ordinal: 8, Address: 0x4a7a0)
SoftpubDefCertInit (Ordinal: 9, Address: 0x4aa50)
SoftpubFreeDefUsageCallData (Ordinal: 10, Address: 0x4ab50)
SoftpubLoadDefUsageCallData (Ordinal: 11, Address: 0x4aba0)
WTHelperCertFindIssuerCertificate (Ordinal: 12, Address: 0x38a00)
AddPersonalTrustDBPages (Ordinal: 13, Address: 0x4acf0)
CatalogCompactHashDatabase (Ordinal: 14, Address: 0x274c0)
ConfigCiFinalPolicy (Ordinal: 15, Address: 0x2dbf0)
ConfigCiPackageFamilyNameCheck (Ordinal: 16, Address: 0x2e470)
CryptCATAdminAcquireContext (Ordinal: 17, Address: 0x1c60)
CryptCATAdminAcquireContext2 (Ordinal: 18, Address: 0x36a0)
CryptCATAdminAddCatalog (Ordinal: 19, Address: 0x28110)
CryptCATAdminCalcHashFromFileHandle (Ordinal: 20, Address: 0x9030)
CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 21, Address: 0x267f0)
CryptCATAdminCalcHashFromFileHandle3 (Ordinal: 22, Address: 0x2a1d0)
CryptCATAdminEnumCatalogFromHash (Ordinal: 23, Address: 0x4760)
CryptCATAdminPauseServiceForBackup (Ordinal: 24, Address: 0x43b10)
CryptCATAdminReleaseCatalogContext (Ordinal: 25, Address: 0x91b0)
CryptCATAdminReleaseContext (Ordinal: 26, Address: 0x3500)
CryptCATAdminRemoveCatalog (Ordinal: 27, Address: 0x29e60)
CryptCATAdminResolveCatalogPath (Ordinal: 28, Address: 0x43b60)
CryptCATAllocSortedMemberInfo (Ordinal: 29, Address: 0x95b0)
CryptCATCDFClose (Ordinal: 30, Address: 0x45380)
CryptCATCDFEnumAttributes (Ordinal: 31, Address: 0x45430)
CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 32, Address: 0x45450)
CryptCATCDFEnumCatAttributes (Ordinal: 33, Address: 0x454a0)
CryptCATCDFEnumMembers (Ordinal: 34, Address: 0x455c0)
CryptCATCDFEnumMembersByCDFTag (Ordinal: 35, Address: 0x45630)
CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 36, Address: 0x45650)
CryptCATCDFOpen (Ordinal: 37, Address: 0x456a0)
CryptCATCatalogInfoFromContext (Ordinal: 38, Address: 0xcbe0)
CryptCATClose (Ordinal: 39, Address: 0x23d0)
CryptCATEnumerateAttr (Ordinal: 40, Address: 0x11a40)
CryptCATEnumerateCatAttr (Ordinal: 41, Address: 0x1d7b0)
CryptCATEnumerateMember (Ordinal: 42, Address: 0x11950)
CryptCATFreeSortedMemberInfo (Ordinal: 43, Address: 0xa940)
CryptCATGetAttrInfo (Ordinal: 44, Address: 0x11860)
CryptCATGetCatAttrInfo (Ordinal: 45, Address: 0x1d9b0)
CryptCATGetMemberInfo (Ordinal: 46, Address: 0x1dc40)
CryptCATHandleFromStore (Ordinal: 47, Address: 0x28a70)
CryptCATOpen (Ordinal: 48, Address: 0x9410)
CryptCATPersistStore (Ordinal: 49, Address: 0x432d0)
CryptCATPutAttrInfo (Ordinal: 50, Address: 0x43310)
CryptCATPutCatAttrInfo (Ordinal: 51, Address: 0x434f0)
CryptCATPutMemberInfo (Ordinal: 52, Address: 0x43760)
CryptCATStoreFromHandle (Ordinal: 53, Address: 0x28a70)
CryptSIPCreateIndirectData (Ordinal: 54, Address: 0xfee0)
CryptSIPGetCaps (Ordinal: 55, Address: 0x100d0)
CryptSIPGetSealedDigest (Ordinal: 56, Address: 0x46be0)
CryptSIPGetSignedDataMsg (Ordinal: 57, Address: 0x10160)
CryptSIPPutSignedDataMsg (Ordinal: 58, Address: 0x46ca0)
CryptSIPRemoveSignedDataMsg (Ordinal: 59, Address: 0x46d70)
CryptSIPVerifyIndirectData (Ordinal: 60, Address: 0xffa0)
DllRegisterServer (Ordinal: 61, Address: 0x3cea0)
DllUnregisterServer (Ordinal: 62, Address: 0x3cef0)
DriverCleanupPolicy (Ordinal: 63, Address: 0x24ae0)
DriverFinalPolicy (Ordinal: 64, Address: 0x2e840)
DriverInitializePolicy (Ordinal: 65, Address: 0x16370)
FindCertsByIssuer (Ordinal: 66, Address: 0x4ff70)
GetAuthenticodeSha256Hash (Ordinal: 67, Address: 0x29c30)
HTTPSFinalProv (Ordinal: 68, Address: 0x1e080)
IsCatalogFile (Ordinal: 69, Address: 0x286a0)
MsCatConstructHashTag (Ordinal: 70, Address: 0xebe0)
MsCatFreeHashTag (Ordinal: 71, Address: 0x277c0)
OfficeCleanupPolicy (Ordinal: 72, Address: 0x4a7a0)
OfficeInitializePolicy (Ordinal: 73, Address: 0x4a7a0)
OpenPersonalTrustDBDialog (Ordinal: 74, Address: 0x4ad20)
OpenPersonalTrustDBDialogEx (Ordinal: 75, Address: 0x4ad30)
SoftpubAuthenticode (Ordinal: 76, Address: 0x1e1c0)
SoftpubCheckCert (Ordinal: 77, Address: 0x25b60)
SoftpubCleanup (Ordinal: 78, Address: 0x23010)
SoftpubDllRegisterServer (Ordinal: 79, Address: 0x506e0)
SoftpubDllUnregisterServer (Ordinal: 80, Address: 0x50960)
SoftpubDumpStructure (Ordinal: 81, Address: 0x51550)
SoftpubInitialize (Ordinal: 82, Address: 0x22250)
SoftpubLoadMessage (Ordinal: 83, Address: 0x11e30)
SoftpubLoadSignature (Ordinal: 84, Address: 0x147b0)
SrpCheckSmartlockerEAandProcessToken (Ordinal: 85, Address: 0x522a0)
TrustDecode (Ordinal: 86, Address: 0x13df0)
TrustFindIssuerCertificate (Ordinal: 87, Address: 0x3f070)
TrustFreeDecode (Ordinal: 88, Address: 0x23f70)
TrustIsCertificateSelfSigned (Ordinal: 89, Address: 0x3f260)
TrustOpenStores (Ordinal: 90, Address: 0x168e0)
WTConfigCiFreePrivateData (Ordinal: 91, Address: 0x4e820)
WTConvertCertCtxToChainInfo (Ordinal: 92, Address: 0x4e8b0)
WTGetBioSignatureInfo (Ordinal: 93, Address: 0xdc20)
WTGetPluginSignatureInfo (Ordinal: 94, Address: 0x49a80)
WTGetSignatureInfo (Ordinal: 95, Address: 0xcce0)
WTHelperCertCheckValidSignature (Ordinal: 96, Address: 0x41b60)
WTHelperCertIsSelfSigned (Ordinal: 97, Address: 0x2c970)
WTHelperCheckCertUsage (Ordinal: 98, Address: 0x41b90)
WTHelperGetAgencyInfo (Ordinal: 99, Address: 0x41d00)
WTHelperGetFileHandle (Ordinal: 100, Address: 0x24a20)
WTHelperGetFileHash (Ordinal: 101, Address: 0x2a0e0)
WTHelperGetFileName (Ordinal: 102, Address: 0x24340)
WTHelperGetKnownUsages (Ordinal: 103, Address: 0x41e00)
WTHelperGetProvCertFromChain (Ordinal: 104, Address: 0x1eec0)
WTHelperGetProvPrivateDataFromChain (Ordinal: 105, Address: 0x24070)
WTHelperGetProvSignerFromChain (Ordinal: 106, Address: 0x22460)
WTHelperIsChainedToMicrosoft (Ordinal: 107, Address: 0x41eb0)
WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 108, Address: 0x42050)
WTHelperIsInRootStore (Ordinal: 109, Address: 0x42130)
WTHelperOpenKnownStores (Ordinal: 110, Address: 0x16040)
WTHelperProvDataFromStateData (Ordinal: 111, Address: 0x28a70)
WTIsFirstConfigCiResultPreferred (Ordinal: 112, Address: 0x2ba40)
WTLogConfigCiScriptEvent (Ordinal: 113, Address: 0x2ad90)
WTLogConfigCiScriptEvent2 (Ordinal: 114, Address: 0x2ae00)
WTLogConfigCiSignerEvent (Ordinal: 115, Address: 0x4e940)
WTLogSmartAppControlDefenderInfo (Ordinal: 116, Address: 0x4ebd0)
WTValidateBioSignaturePolicy (Ordinal: 117, Address: 0xe300)
WVTAsn1CatMemberInfo2Decode (Ordinal: 118, Address: 0x244f0)
WVTAsn1CatMemberInfo2Encode (Ordinal: 119, Address: 0x3d280)
WVTAsn1CatMemberInfoDecode (Ordinal: 120, Address: 0xf270)
WVTAsn1CatMemberInfoEncode (Ordinal: 121, Address: 0x3d340)
WVTAsn1CatNameValueDecode (Ordinal: 122, Address: 0xedd0)
WVTAsn1CatNameValueEncode (Ordinal: 123, Address: 0x3d3a0)
WVTAsn1IntentToSealAttributeDecode (Ordinal: 124, Address: 0x3d410)
WVTAsn1IntentToSealAttributeEncode (Ordinal: 125, Address: 0x3d4c0)
WVTAsn1SealingSignatureAttributeDecode (Ordinal: 126, Address: 0x3d500)
WVTAsn1SealingSignatureAttributeEncode (Ordinal: 127, Address: 0x3d5e0)
WVTAsn1SealingTimestampAttributeDecode (Ordinal: 128, Address: 0x3d6a0)
WVTAsn1SealingTimestampAttributeEncode (Ordinal: 129, Address: 0x3d7c0)
WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 130, Address: 0x3d820)
WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 131, Address: 0x3d8e0)
WVTAsn1SpcIndirectDataContentDecode (Ordinal: 132, Address: 0x1f2c0)
WVTAsn1SpcIndirectDataContentEncode (Ordinal: 133, Address: 0x3d920)
WVTAsn1SpcLinkDecode (Ordinal: 134, Address: 0xf190)
WVTAsn1SpcLinkEncode (Ordinal: 135, Address: 0x1fa60)
WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 136, Address: 0x3da10)
WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 137, Address: 0x3dad0)
WVTAsn1SpcPeImageDataDecode (Ordinal: 138, Address: 0xfa60)
WVTAsn1SpcPeImageDataEncode (Ordinal: 139, Address: 0x1f880)
WVTAsn1SpcSigInfoDecode (Ordinal: 140, Address: 0xf0d0)
WVTAsn1SpcSigInfoEncode (Ordinal: 141, Address: 0x32680)
WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 142, Address: 0x3db10)
WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 143, Address: 0x3dda0)
WVTAsn1SpcSpOpusInfoDecode (Ordinal: 144, Address: 0xf3a0)
WVTAsn1SpcSpOpusInfoEncode (Ordinal: 145, Address: 0x3df70)
WVTAsn1SpcStatementTypeDecode (Ordinal: 146, Address: 0x3e060)
WVTAsn1SpcStatementTypeEncode (Ordinal: 147, Address: 0x3e190)
WinVerifyTrust (Ordinal: 148, Address: 0xb3e0)
WinVerifyTrustEx (Ordinal: 149, Address: 0x29840)
WintrustAddActionID (Ordinal: 150, Address: 0x3e290)
WintrustAddDefaultForUsage (Ordinal: 151, Address: 0x3f2f0)
WintrustAddProviderToProcess (Ordinal: 152, Address: 0x3e500)
WintrustCertificateTrust (Ordinal: 153, Address: 0x2d410)
WintrustGetDefaultForUsage (Ordinal: 154, Address: 0x3f5b0)
WintrustGetHash (Ordinal: 155, Address: 0x4eda0)
WintrustGetRegPolicyFlags (Ordinal: 156, Address: 0x108d0)
WintrustLoadFunctionPointers (Ordinal: 157, Address: 0x16670)
WintrustRemoveActionID (Ordinal: 158, Address: 0x3e470)
WintrustSetDefaultIncludePEPageHashes (Ordinal: 159, Address: 0x48140)
WintrustSetRegPolicyFlags (Ordinal: 160, Address: 0x3e700)
WintrustUserWriteabilityCheck (Ordinal: 161, Address: 0x4ee70)
mscat32DllRegisterServer (Ordinal: 162, Address: 0x2a3c0)
mscat32DllUnregisterServer (Ordinal: 163, Address: 0x2a3c0)
mssip32DllRegisterServer (Ordinal: 164, Address: 0x46e00)
mssip32DllUnregisterServer (Ordinal: 165, Address: 0x470c0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18005fb68)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatA (Address: 0x18005fb80)
GetTimeFormatA (Address: 0x18005fb78)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18005fba0)
IsDebuggerPresent (Address: 0x18005fb90)
OutputDebugStringA (Address: 0x18005fba8)
OutputDebugStringW (Address: 0x18005fb98)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18005fbb8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18005fbc8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18005fbf0)
SetLastError (Address: 0x18005fbd8)
SetUnhandledExceptionFilter (Address: 0x18005fbe8)
UnhandledExceptionFilter (Address: 0x18005fbe0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18005fc30)
CreateDirectoryW (Address: 0x18005fc18)
CreateFileW (Address: 0x18005fc50)
FindClose (Address: 0x18005fc00)
FindFirstFileW (Address: 0x18005fc70)
FindNextFileW (Address: 0x18005fc08)
GetFileAttributesExW (Address: 0x18005fc48)
GetFileAttributesW (Address: 0x18005fc68)
GetFileInformationByHandle (Address: 0x18005fc20)
GetFileSize (Address: 0x18005fc38)
GetFileSizeEx (Address: 0x18005fc28)
ReadFile (Address: 0x18005fc60)
SetEndOfFile (Address: 0x18005fc80)
SetFileAttributesW (Address: 0x18005fc78)
SetFilePointer (Address: 0x18005fc58)
SetFilePointerEx (Address: 0x18005fc40)
WriteFile (Address: 0x18005fc10)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18005fc98)
DuplicateHandle (Address: 0x18005fc90)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18005fcb8)
HeapAlloc (Address: 0x18005fcb0)
HeapFree (Address: 0x18005fca8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18005fcd0)
LocalFree (Address: 0x18005fcd8)
LocalReAlloc (Address: 0x18005fcc8)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x18005fce8)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CreateFileMappingA (Address: 0x18005fcf8)
FindResourceExA (Address: 0x18005fd00)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18005fd20)
FreeLibrary (Address: 0x18005fd50)
FreeResource (Address: 0x18005fd30)
GetModuleFileNameA (Address: 0x18005fd18)
GetModuleFileNameW (Address: 0x18005fd60)
GetModuleHandleExA (Address: 0x18005fd10)
GetModuleHandleExW (Address: 0x18005fd68)
GetModuleHandleW (Address: 0x18005fd78)
GetProcAddress (Address: 0x18005fd28)
LoadLibraryExA (Address: 0x18005fd58)
LoadLibraryExW (Address: 0x18005fd70)
LoadResource (Address: 0x18005fd38)
LockResource (Address: 0x18005fd48)
SizeofResource (Address: 0x18005fd40)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18005fd98)
LoadLibraryA (Address: 0x18005fd90)
LoadLibraryW (Address: 0x18005fd88)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18005fda8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18005fdc0)
MapViewOfFile (Address: 0x18005fdb8)
UnmapViewOfFile (Address: 0x18005fdc8)

api-ms-win-core-memory-l1-1-1.dll

VirtualUnlock (Address: 0x18005fdd8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x18005fdf0)
ExpandEnvironmentStringsW (Address: 0x18005fe08)
GetCurrentDirectoryW (Address: 0x18005fdf8)
GetEnvironmentVariableA (Address: 0x18005fde8)
GetEnvironmentVariableW (Address: 0x18005fe00)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18005fe18)
GetCurrentProcessId (Address: 0x18005fe28)
GetCurrentThread (Address: 0x18005fe38)
GetCurrentThreadId (Address: 0x18005fe30)
OpenProcessToken (Address: 0x18005fe48)
OpenThreadToken (Address: 0x18005fe40)
TerminateProcess (Address: 0x18005fe20)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18005fe58)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18005fe80)
RegCreateKeyExW (Address: 0x18005fe68)
RegDeleteKeyExW (Address: 0x18005fea8)
RegEnumKeyExA (Address: 0x18005fe98)
RegEnumValueA (Address: 0x18005feb8)
RegGetValueW (Address: 0x18005fe90)
RegOpenKeyExA (Address: 0x18005fe78)
RegOpenKeyExW (Address: 0x18005feb0)
RegQueryInfoKeyA (Address: 0x18005fea0)
RegQueryValueExA (Address: 0x18005fec8)
RegQueryValueExW (Address: 0x18005fe88)
RegSetValueExA (Address: 0x18005fec0)
RegSetValueExW (Address: 0x18005fe70)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18005fed8)
RtlLookupFunctionEntry (Address: 0x18005fee8)
RtlVirtualUnwind (Address: 0x18005fee0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18005fef8)
WideCharToMultiByte (Address: 0x18005ff00)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x18005ff28)
lstrcmpW (Address: 0x18005ff18)
lstrlenA (Address: 0x18005ff10)
lstrlenW (Address: 0x18005ff20)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18005ffd8)
AcquireSRWLockShared (Address: 0x18005ff70)
CreateEventA (Address: 0x18005ff68)
CreateMutexA (Address: 0x18005ff58)
CreateMutexExW (Address: 0x18005ff78)
CreateSemaphoreExW (Address: 0x18005ffc0)
DeleteCriticalSection (Address: 0x18005ffb8)
EnterCriticalSection (Address: 0x18005ff60)
InitializeCriticalSection (Address: 0x18005ff80)
InitializeCriticalSectionEx (Address: 0x18005ff50)
LeaveCriticalSection (Address: 0x18005ff38)
OpenSemaphoreW (Address: 0x18005ffa0)
ReleaseMutex (Address: 0x18005ff98)
ReleaseSemaphore (Address: 0x18005ff40)
ReleaseSRWLockExclusive (Address: 0x18005ffd0)
ReleaseSRWLockShared (Address: 0x18005ff90)
ResetEvent (Address: 0x18005ffb0)
SetEvent (Address: 0x18005ff48)
WaitForMultipleObjectsEx (Address: 0x18005ffc8)
WaitForSingleObject (Address: 0x18005ff88)
WaitForSingleObjectEx (Address: 0x18005ffa8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18005ffe8)
Sleep (Address: 0x18005fff0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x180060020)
GetSystemDirectoryW (Address: 0x180060010)
GetSystemInfo (Address: 0x180060008)
GetSystemTimeAsFileTime (Address: 0x180060000)
GetTickCount (Address: 0x180060028)
GetTickCount64 (Address: 0x180060018)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180060048)
CreateThreadpoolTimer (Address: 0x180060040)
SetThreadpoolTimer (Address: 0x180060038)
WaitForThreadpoolTimerCallbacks (Address: 0x180060050)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180060060)

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW (Address: 0x180060070)

api-ms-win-core-version-private-l1-1-0.dll

GetFileVersionInfoByHandle (Address: 0x180060080)

api-ms-win-core-wow64-l1-1-1.dll

IsWow64Process2 (Address: 0x180060090)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800600b8)
EventSetInformation (Address: 0x1800600a0)
EventUnregister (Address: 0x1800600a8)
EventWrite (Address: 0x1800600c0)
EventWriteTransfer (Address: 0x1800600b0)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAceEx (Address: 0x180060100)
AddAce (Address: 0x180060128)
AllocateAndInitializeSid (Address: 0x180060148)
CopySid (Address: 0x180060168)
EqualSid (Address: 0x180060150)
FreeSid (Address: 0x1800600e0)
GetAce (Address: 0x180060110)
GetAclInformation (Address: 0x180060160)
GetFileSecurityW (Address: 0x1800600d8)
GetLengthSid (Address: 0x180060108)
GetSecurityDescriptorDacl (Address: 0x180060138)
GetSidIdentifierAuthority (Address: 0x180060118)
GetSidSubAuthority (Address: 0x180060158)
GetSidSubAuthorityCount (Address: 0x1800600e8)
GetTokenInformation (Address: 0x180060120)
InitializeAcl (Address: 0x1800600f8)
InitializeSecurityDescriptor (Address: 0x1800600f0)
IsValidSid (Address: 0x1800600d0)
SetFileSecurityW (Address: 0x180060140)
SetSecurityDescriptorDacl (Address: 0x180060130)

msvcrt.dll

__C_specific_handler (Address: 0x180060270)
__CxxFrameHandler3 (Address: 0x1800601c8)
__CxxFrameHandler4 (Address: 0x1800601b8)
__dllonexit (Address: 0x1800601f0)
_amsg_exit (Address: 0x180060188)
_callnewh (Address: 0x180060240)
_CxxThrowException (Address: 0x1800601e0)
_initterm (Address: 0x180060190)
_itow_s (Address: 0x1800602d8)
_lock (Address: 0x1800601a0)
_ltoa (Address: 0x180060288)
_memicmp (Address: 0x1800602e0)
_onexit (Address: 0x1800601f8)
_purecall (Address: 0x1800601d8)
_snwprintf_s (Address: 0x1800602f8)
_snwscanf_s (Address: 0x1800602b0)
_stricmp (Address: 0x1800602e8)
_unlock (Address: 0x1800601e8)
_vsnprintf (Address: 0x180060290)
_vsnwprintf (Address: 0x180060268)
_wcsicmp (Address: 0x1800601b0)
_wcsnicmp (Address: 0x1800602f0)
_wtol (Address: 0x1800602a0)
_XcptFilter (Address: 0x180060178)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180060278)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180060238)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180060248)
??0exception@@QEAA@XZ (Address: 0x180060250)
??1exception@@UEAA@XZ (Address: 0x180060258)
??1type_info@@UEAA@XZ (Address: 0x180060198)
?what@exception@@UEBAPEBDXZ (Address: 0x180060208)
atol (Address: 0x1800601d0)
bsearch (Address: 0x180060280)
free (Address: 0x180060218)
malloc (Address: 0x180060230)
memcmp (Address: 0x180060228)
memcpy (Address: 0x1800601a8)
memcpy_s (Address: 0x180060260)
memmove (Address: 0x180060180)
memmove_s (Address: 0x1800601c0)
memset (Address: 0x180060220)
qsort (Address: 0x1800602c0)
qsort_s (Address: 0x1800602b8)
strcmp (Address: 0x180060200)
towupper (Address: 0x180060298)
wcscat_s (Address: 0x1800602a8)
wcschr (Address: 0x1800602c8)
wcscmp (Address: 0x180060300)
wcsrchr (Address: 0x180060210)
wcstol (Address: 0x1800602d0)

ntdll.dll

LdrResSearchResource (Address: 0x180060400)
NtQueryEaFile (Address: 0x180060320)
NtQuerySecurityAttributesToken (Address: 0x180060318)
NtQuerySecurityObject (Address: 0x180060338)
NtQuerySystemInformation (Address: 0x180060368)
RtlAcquireSRWLockExclusive (Address: 0x180060418)
RtlAcquireSRWLockShared (Address: 0x180060398)
RtlAllocateHeap (Address: 0x180060390)
RtlAppendUnicodeStringToString (Address: 0x1800603b0)
RtlCompareUnicodeString (Address: 0x1800603a8)
RtlCopyUnicodeString (Address: 0x180060310)
RtlCreateUnicodeString (Address: 0x180060330)
RtlEqualSid (Address: 0x1800603f0)
RtlEqualUnicodeString (Address: 0x1800603b8)
RtlFreeHeap (Address: 0x180060410)
RtlFreeUnicodeString (Address: 0x180060358)
RtlGetAce (Address: 0x1800603d0)
RtlGetDaclSecurityDescriptor (Address: 0x1800603f8)
RtlGetNtSystemRoot (Address: 0x1800603e0)
RtlGetOwnerSecurityDescriptor (Address: 0x1800603d8)
RtlGetPersistedStateLocation (Address: 0x180060408)
RtlGetVersion (Address: 0x180060328)
RtlImageNtHeaderEx (Address: 0x180060340)
RtlInitializeSidEx (Address: 0x1800603e8)
RtlInitializeSRWLock (Address: 0x180060380)
RtlInitUnicodeString (Address: 0x180060350)
RtlIsNameInUnUpcasedExpression (Address: 0x1800603c8)
RtlIsStateSeparationEnabled (Address: 0x180060378)
RtlNtStatusToDosError (Address: 0x180060370)
RtlPrefixUnicodeString (Address: 0x1800603c0)
RtlReleaseSRWLockExclusive (Address: 0x180060388)
RtlReleaseSRWLockShared (Address: 0x1800603a0)
RtlRunOnceExecuteOnce (Address: 0x180060348)
ZwQueryVolumeInformationFile (Address: 0x180060360)

RPCRT4.dll

NdrClientCall3 (Address: 0x18005fb40)
RpcBindingFree (Address: 0x18005fb38)
RpcBindingFromStringBindingW (Address: 0x18005fb50)
RpcBindingSetAuthInfoExW (Address: 0x18005fb58)
RpcEpResolveBinding (Address: 0x18005fb30)
RpcStringBindingComposeW (Address: 0x18005fb48)
RpcStringFreeW (Address: 0x18005fb28)