wintrust.dll

Description: Microsoft Trust Verification APIs

Version: 10.0.19041.630

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8c6c791e8db8728f9a610def238c61be

File Size: 373.7 KB

Uploaded At: April 3, 2026, 8:58 p.m.

Views: 8

Exported Functions

ComputeFirstPageHash (Ordinal: 1, Address: 0x22430)
CryptCATVerifyMember (Ordinal: 2, Address: 0x23d70)
CryptSIPGetInfo (Ordinal: 3, Address: 0x2a2f0)
CryptSIPGetRegWorkingFlags (Ordinal: 4, Address: 0x2a2e0)
GenericChainCertificateTrust (Ordinal: 5, Address: 0x2ea60)
GenericChainFinalProv (Ordinal: 6, Address: 0x2eda0)
HTTPSCertificateTrust (Ordinal: 7, Address: 0xad50)
SoftpubDefCertInit (Ordinal: 8, Address: 0x2f580)
SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x2f680)
SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x2f6d0)
WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0x1c4b0)
AddPersonalTrustDBPages (Ordinal: 12, Address: 0x2f820)
CatalogCompactHashDatabase (Ordinal: 13, Address: 0xf040)
ConfigCiFinalPolicy (Ordinal: 14, Address: 0x312c0)
ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x316d0)
CryptCATAdminAcquireContext (Ordinal: 16, Address: 0x1310)
CryptCATAdminAcquireContext2 (Ordinal: 17, Address: 0x24ae0)
CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x24bc0)
CryptCATAdminCalcHashFromFileHandle (Ordinal: 19, Address: 0x24f10)
CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 20, Address: 0x24f70)
CryptCATAdminCalcHashFromFileHandle3 (Ordinal: 21, Address: 0x24ff0)
CryptCATAdminEnumCatalogFromHash (Ordinal: 22, Address: 0x3390)
CryptCATAdminPauseServiceForBackup (Ordinal: 23, Address: 0x25060)
CryptCATAdminReleaseCatalogContext (Ordinal: 24, Address: 0x13b0)
CryptCATAdminReleaseContext (Ordinal: 25, Address: 0x10f0)
CryptCATAdminRemoveCatalog (Ordinal: 26, Address: 0x250b0)
CryptCATAdminResolveCatalogPath (Ordinal: 27, Address: 0x25100)
CryptCATAllocSortedMemberInfo (Ordinal: 28, Address: 0x8240)
CryptCATCDFClose (Ordinal: 29, Address: 0x26dc0)
CryptCATCDFEnumAttributes (Ordinal: 30, Address: 0x26e70)
CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 31, Address: 0x26e90)
CryptCATCDFEnumCatAttributes (Ordinal: 32, Address: 0x26ee0)
CryptCATCDFEnumMembers (Ordinal: 33, Address: 0x27090)
CryptCATCDFEnumMembersByCDFTag (Ordinal: 34, Address: 0x27100)
CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 35, Address: 0x27150)
CryptCATCDFOpen (Ordinal: 36, Address: 0x271a0)
CryptCATCatalogInfoFromContext (Ordinal: 37, Address: 0x1020)
CryptCATClose (Ordinal: 38, Address: 0x3050)
CryptCATEnumerateAttr (Ordinal: 39, Address: 0xb8f0)
CryptCATEnumerateCatAttr (Ordinal: 40, Address: 0xb950)
CryptCATEnumerateMember (Ordinal: 41, Address: 0x23dc0)
CryptCATFreeSortedMemberInfo (Ordinal: 42, Address: 0x23eb0)
CryptCATGetAttrInfo (Ordinal: 43, Address: 0x23ef0)
CryptCATGetCatAttrInfo (Ordinal: 44, Address: 0x23fa0)
CryptCATGetMemberInfo (Ordinal: 45, Address: 0x24030)
CryptCATHandleFromStore (Ordinal: 46, Address: 0xeec0)
CryptCATOpen (Ordinal: 47, Address: 0x24100)
CryptCATPersistStore (Ordinal: 48, Address: 0x24260)
CryptCATPutAttrInfo (Ordinal: 49, Address: 0x242a0)
CryptCATPutCatAttrInfo (Ordinal: 50, Address: 0x24480)
CryptCATPutMemberInfo (Ordinal: 51, Address: 0x24720)
CryptCATStoreFromHandle (Ordinal: 52, Address: 0xeec0)
CryptSIPCreateIndirectData (Ordinal: 53, Address: 0x7c80)
CryptSIPGetCaps (Ordinal: 54, Address: 0x7bf0)
CryptSIPGetSealedDigest (Ordinal: 55, Address: 0x2a360)
CryptSIPGetSignedDataMsg (Ordinal: 56, Address: 0x2a440)
CryptSIPPutSignedDataMsg (Ordinal: 57, Address: 0x2a560)
CryptSIPRemoveSignedDataMsg (Ordinal: 58, Address: 0x2a640)
CryptSIPVerifyIndirectData (Ordinal: 59, Address: 0x2a6e0)
DllRegisterServer (Ordinal: 60, Address: 0x1c7e0)
DllUnregisterServer (Ordinal: 61, Address: 0x1c830)
DriverCleanupPolicy (Ordinal: 62, Address: 0xe580)
DriverFinalPolicy (Ordinal: 63, Address: 0xb490)
DriverInitializePolicy (Ordinal: 64, Address: 0x1980)
FindCertsByIssuer (Ordinal: 65, Address: 0x33a10)
GetAuthenticodeSha256Hash (Ordinal: 66, Address: 0x319f0)
HTTPSFinalProv (Ordinal: 67, Address: 0xda90)
IsCatalogFile (Ordinal: 68, Address: 0x28fc0)
MsCatConstructHashTag (Ordinal: 69, Address: 0x29460)
MsCatFreeHashTag (Ordinal: 70, Address: 0x29310)
OfficeCleanupPolicy (Ordinal: 71, Address: 0x33e20)
OfficeInitializePolicy (Ordinal: 72, Address: 0x33e20)
OpenPersonalTrustDBDialog (Ordinal: 73, Address: 0x2f850)
OpenPersonalTrustDBDialogEx (Ordinal: 74, Address: 0x2f860)
SoftpubAuthenticode (Ordinal: 75, Address: 0xba30)
SoftpubCheckCert (Ordinal: 76, Address: 0xebb0)
SoftpubCleanup (Ordinal: 77, Address: 0xefc0)
SoftpubDllRegisterServer (Ordinal: 78, Address: 0x34610)
SoftpubDllUnregisterServer (Ordinal: 79, Address: 0x34880)
SoftpubDumpStructure (Ordinal: 80, Address: 0x354e0)
SoftpubInitialize (Ordinal: 81, Address: 0xc0e0)
SoftpubLoadMessage (Ordinal: 82, Address: 0x8670)
SoftpubLoadSignature (Ordinal: 83, Address: 0xc8d0)
SrpCheckSmartlockerEAandProcessToken (Ordinal: 84, Address: 0x37c50)
TrustDecode (Ordinal: 85, Address: 0x20320)
TrustFindIssuerCertificate (Ordinal: 86, Address: 0x20410)
TrustFreeDecode (Ordinal: 87, Address: 0x20630)
TrustIsCertificateSelfSigned (Ordinal: 88, Address: 0x20660)
TrustOpenStores (Ordinal: 89, Address: 0x206f0)
WTConvertCertCtxToChainInfo (Ordinal: 90, Address: 0x31c00)
WTGetBioSignatureInfo (Ordinal: 91, Address: 0x236f0)
WTGetPluginSignatureInfo (Ordinal: 92, Address: 0x238b0)
WTGetSignatureInfo (Ordinal: 93, Address: 0xa120)
WTHelperCertCheckValidSignature (Ordinal: 94, Address: 0x212b0)
WTHelperCertIsSelfSigned (Ordinal: 95, Address: 0x1c4f0)
WTHelperCheckCertUsage (Ordinal: 96, Address: 0x212e0)
WTHelperGetAgencyInfo (Ordinal: 97, Address: 0x21450)
WTHelperGetFileHandle (Ordinal: 98, Address: 0x21550)
WTHelperGetFileHash (Ordinal: 99, Address: 0x21070)
WTHelperGetFileName (Ordinal: 100, Address: 0x9890)
WTHelperGetKnownUsages (Ordinal: 101, Address: 0x21580)
WTHelperGetProvCertFromChain (Ordinal: 102, Address: 0x14b0)
WTHelperGetProvPrivateDataFromChain (Ordinal: 103, Address: 0x21630)
WTHelperGetProvSignerFromChain (Ordinal: 104, Address: 0xe7b0)
WTHelperIsChainedToMicrosoft (Ordinal: 105, Address: 0x21690)
WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 106, Address: 0x21840)
WTHelperIsInRootStore (Ordinal: 107, Address: 0x21920)
WTHelperOpenKnownStores (Ordinal: 108, Address: 0x21a30)
WTHelperProvDataFromStateData (Ordinal: 109, Address: 0xeec0)
WTIsFirstConfigCiResultPreferred (Ordinal: 110, Address: 0x31c90)
WTLogConfigCiScriptEvent (Ordinal: 111, Address: 0x31cf0)
WTLogConfigCiSignerEvent (Ordinal: 112, Address: 0x320d0)
WTValidateBioSignaturePolicy (Ordinal: 113, Address: 0x23ac0)
WVTAsn1CatMemberInfo2Decode (Ordinal: 114, Address: 0xe250)
WVTAsn1CatMemberInfo2Encode (Ordinal: 115, Address: 0x1d2c0)
WVTAsn1CatMemberInfoDecode (Ordinal: 116, Address: 0x1d370)
WVTAsn1CatMemberInfoEncode (Ordinal: 117, Address: 0x1d450)
WVTAsn1CatNameValueDecode (Ordinal: 118, Address: 0xc700)
WVTAsn1CatNameValueEncode (Ordinal: 119, Address: 0x1d4b0)
WVTAsn1IntentToSealAttributeDecode (Ordinal: 120, Address: 0x1d520)
WVTAsn1IntentToSealAttributeEncode (Ordinal: 121, Address: 0x1d5d0)
WVTAsn1SealingSignatureAttributeDecode (Ordinal: 122, Address: 0x1d610)
WVTAsn1SealingSignatureAttributeEncode (Ordinal: 123, Address: 0x1d6f0)
WVTAsn1SealingTimestampAttributeDecode (Ordinal: 124, Address: 0x1d7b0)
WVTAsn1SealingTimestampAttributeEncode (Ordinal: 125, Address: 0x1d890)
WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 126, Address: 0x1d8f0)
WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 127, Address: 0x1d9b0)
WVTAsn1SpcIndirectDataContentDecode (Ordinal: 128, Address: 0x1d9f0)
WVTAsn1SpcIndirectDataContentEncode (Ordinal: 129, Address: 0x1dba0)
WVTAsn1SpcLinkDecode (Ordinal: 130, Address: 0x1dc90)
WVTAsn1SpcLinkEncode (Ordinal: 131, Address: 0xdce0)
WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 132, Address: 0x1dd70)
WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 133, Address: 0x1de30)
WVTAsn1SpcPeImageDataDecode (Ordinal: 134, Address: 0x1de70)
WVTAsn1SpcPeImageDataEncode (Ordinal: 135, Address: 0x10450)
WVTAsn1SpcSigInfoDecode (Ordinal: 136, Address: 0x1dfa0)
WVTAsn1SpcSigInfoEncode (Ordinal: 137, Address: 0x1e060)
WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 138, Address: 0x1e0d0)
WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 139, Address: 0x1e460)
WVTAsn1SpcSpOpusInfoDecode (Ordinal: 140, Address: 0x1e610)
WVTAsn1SpcSpOpusInfoEncode (Ordinal: 141, Address: 0x1e760)
WVTAsn1SpcStatementTypeDecode (Ordinal: 142, Address: 0x1e840)
WVTAsn1SpcStatementTypeEncode (Ordinal: 143, Address: 0x1e970)
WinVerifyTrust (Ordinal: 144, Address: 0x1da0)
WinVerifyTrustEx (Ordinal: 145, Address: 0x21160)
WintrustAddActionID (Ordinal: 146, Address: 0x1ea30)
WintrustAddDefaultForUsage (Ordinal: 147, Address: 0x20850)
WintrustCertificateTrust (Ordinal: 148, Address: 0xa970)
WintrustGetDefaultForUsage (Ordinal: 149, Address: 0x20ba0)
WintrustGetRegPolicyFlags (Ordinal: 150, Address: 0x1f790)
WintrustLoadFunctionPointers (Ordinal: 151, Address: 0x1ba0)
WintrustRemoveActionID (Ordinal: 152, Address: 0x1ec50)
WintrustSetDefaultIncludePEPageHashes (Ordinal: 153, Address: 0x2bc30)
WintrustSetRegPolicyFlags (Ordinal: 154, Address: 0x1f850)
WintrustUserWriteabilityCheck (Ordinal: 155, Address: 0x32320)
mscat32DllRegisterServer (Ordinal: 156, Address: 0xefc0)
mscat32DllUnregisterServer (Ordinal: 157, Address: 0xefc0)
mssip32DllRegisterServer (Ordinal: 158, Address: 0x2a7f0)
mssip32DllUnregisterServer (Ordinal: 159, Address: 0x2aa40)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800443b0)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatA (Address: 0x1800443c0)
GetTimeFormatA (Address: 0x1800443c8)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x1800443d8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800443e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800443f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180044408)
SetLastError (Address: 0x180044418)
SetUnhandledExceptionFilter (Address: 0x180044420)
UnhandledExceptionFilter (Address: 0x180044410)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180044448)
CreateDirectoryW (Address: 0x180044460)
CreateFileW (Address: 0x180044438)
FindClose (Address: 0x180044488)
FindFirstFileW (Address: 0x1800444b0)
FindNextFileW (Address: 0x180044498)
GetFileAttributesExW (Address: 0x180044430)
GetFileAttributesW (Address: 0x180044480)
GetFileInformationByHandle (Address: 0x180044490)
GetFileSize (Address: 0x180044470)
GetFileSizeEx (Address: 0x1800444a0)
ReadFile (Address: 0x180044450)
SetEndOfFile (Address: 0x180044468)
SetFileAttributesW (Address: 0x1800444a8)
SetFilePointer (Address: 0x180044478)
SetFilePointerEx (Address: 0x180044440)
WriteFile (Address: 0x180044458)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800444c8)
DuplicateHandle (Address: 0x1800444c0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800444e0)
HeapAlloc (Address: 0x1800444d8)
HeapFree (Address: 0x1800444e8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800444f8)
LocalFree (Address: 0x180044508)
LocalReAlloc (Address: 0x180044500)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180044518)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CreateFileMappingA (Address: 0x180044530)
FindResourceExA (Address: 0x180044528)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180044578)
FreeLibrary (Address: 0x180044550)
FreeResource (Address: 0x180044570)
GetModuleHandleExA (Address: 0x180044568)
GetProcAddress (Address: 0x180044548)
LoadLibraryExA (Address: 0x180044540)
LoadResource (Address: 0x180044558)
LockResource (Address: 0x180044560)
SizeofResource (Address: 0x180044580)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryA (Address: 0x180044598)
LoadLibraryW (Address: 0x180044590)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800445b0)
MapViewOfFile (Address: 0x1800445b8)
UnmapViewOfFile (Address: 0x1800445a8)

api-ms-win-core-memory-l1-1-1.dll

VirtualUnlock (Address: 0x1800445c8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x1800445f0)
ExpandEnvironmentStringsW (Address: 0x1800445d8)
GetCurrentDirectoryW (Address: 0x1800445f8)
GetEnvironmentVariableA (Address: 0x1800445e8)
GetEnvironmentVariableW (Address: 0x1800445e0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180044610)
GetCurrentProcessId (Address: 0x180044608)
GetCurrentThread (Address: 0x180044638)
GetCurrentThreadId (Address: 0x180044630)
OpenProcessToken (Address: 0x180044628)
OpenThreadToken (Address: 0x180044620)
TerminateProcess (Address: 0x180044618)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180044648)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180044698)
RegCreateKeyExW (Address: 0x180044688)
RegDeleteKeyExW (Address: 0x180044690)
RegEnumKeyExA (Address: 0x180044670)
RegEnumValueA (Address: 0x1800446a8)
RegGetValueW (Address: 0x1800446b0)
RegOpenKeyExA (Address: 0x180044660)
RegOpenKeyExW (Address: 0x180044680)
RegQueryInfoKeyA (Address: 0x180044658)
RegQueryValueExA (Address: 0x1800446b8)
RegQueryValueExW (Address: 0x180044668)
RegSetValueExA (Address: 0x1800446a0)
RegSetValueExW (Address: 0x180044678)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800446d8)
RtlLookupFunctionEntry (Address: 0x1800446c8)
RtlVirtualUnwind (Address: 0x1800446d0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1800446e8)
WideCharToMultiByte (Address: 0x1800446f0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x180044700)
lstrlenA (Address: 0x180044708)
lstrlenW (Address: 0x180044710)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180044788)
AcquireSRWLockShared (Address: 0x180044790)
CreateEventA (Address: 0x180044778)
CreateMutexA (Address: 0x180044770)
DeleteCriticalSection (Address: 0x180044730)
EnterCriticalSection (Address: 0x180044750)
InitializeCriticalSection (Address: 0x180044758)
LeaveCriticalSection (Address: 0x180044738)
ReleaseMutex (Address: 0x180044760)
ReleaseSRWLockExclusive (Address: 0x180044748)
ReleaseSRWLockShared (Address: 0x180044780)
ResetEvent (Address: 0x180044728)
SetEvent (Address: 0x180044740)
WaitForMultipleObjectsEx (Address: 0x180044768)
WaitForSingleObject (Address: 0x180044720)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800447a0)
Sleep (Address: 0x1800447a8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1800447c0)
GetSystemDirectoryW (Address: 0x1800447d0)
GetSystemInfo (Address: 0x1800447e0)
GetSystemTimeAsFileTime (Address: 0x1800447b8)
GetTickCount (Address: 0x1800447c8)
GetTickCount64 (Address: 0x1800447d8)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1800447f0)

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW (Address: 0x180044800)

api-ms-win-core-version-private-l1-1-0.dll

GetFileVersionInfoByHandle (Address: 0x180044810)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180044830)
EventSetInformation (Address: 0x180044828)
EventUnregister (Address: 0x180044838)
EventWriteTransfer (Address: 0x180044820)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAceEx (Address: 0x1800448c8)
AddAce (Address: 0x180044880)
AllocateAndInitializeSid (Address: 0x180044868)
CopySid (Address: 0x180044870)
EqualSid (Address: 0x180044850)
FreeSid (Address: 0x180044898)
GetAce (Address: 0x1800448b0)
GetAclInformation (Address: 0x180044878)
GetFileSecurityW (Address: 0x1800448a8)
GetLengthSid (Address: 0x180044858)
GetSecurityDescriptorDacl (Address: 0x1800448b8)
GetSidIdentifierAuthority (Address: 0x180044890)
GetSidSubAuthority (Address: 0x180044848)
GetSidSubAuthorityCount (Address: 0x1800448d0)
GetTokenInformation (Address: 0x1800448a0)
InitializeAcl (Address: 0x1800448d8)
InitializeSecurityDescriptor (Address: 0x1800448e0)
IsValidSid (Address: 0x180044860)
SetFileSecurityW (Address: 0x180044888)
SetSecurityDescriptorDacl (Address: 0x1800448c0)

msvcrt.dll

__C_specific_handler (Address: 0x180044910)
__CxxFrameHandler3 (Address: 0x180044990)
__dllonexit (Address: 0x1800448f0)
_amsg_exit (Address: 0x180044948)
_callnewh (Address: 0x180044958)
_initterm (Address: 0x180044940)
_itow_s (Address: 0x1800449b8)
_lock (Address: 0x180044900)
_ltoa (Address: 0x180044a00)
_memicmp (Address: 0x1800449c0)
_onexit (Address: 0x1800448f8)
_stricmp (Address: 0x1800449c8)
_unlock (Address: 0x180044908)
_vsnprintf (Address: 0x1800449f8)
_vsnwprintf (Address: 0x180044970)
_wcsicmp (Address: 0x180044978)
_wcsnicmp (Address: 0x1800449d0)
_wtol (Address: 0x1800449e8)
_XcptFilter (Address: 0x180044950)
atol (Address: 0x180044980)
bsearch (Address: 0x180044a08)
free (Address: 0x180044968)
malloc (Address: 0x180044960)
memcmp (Address: 0x180044930)
memcpy (Address: 0x180044928)
memcpy_s (Address: 0x180044998)
memmove (Address: 0x180044920)
memset (Address: 0x180044918)
qsort (Address: 0x1800449a0)
qsort_s (Address: 0x180044938)
strcmp (Address: 0x180044988)
towupper (Address: 0x1800449f0)
wcscat_s (Address: 0x1800449e0)
wcschr (Address: 0x1800449a8)
wcscmp (Address: 0x180044a10)
wcsrchr (Address: 0x1800449d8)
wcstol (Address: 0x1800449b0)

ntdll.dll

LdrResSearchResource (Address: 0x180044a78)
NtQueryEaFile (Address: 0x180044a28)
NtQuerySecurityAttributesToken (Address: 0x180044a20)
NtQuerySecurityObject (Address: 0x180044a40)
NtQuerySystemInformation (Address: 0x180044ac8)
RtlAllocateHeap (Address: 0x180044a70)
RtlAppendUnicodeStringToString (Address: 0x180044a58)
RtlCompareUnicodeString (Address: 0x180044a50)
RtlCopyUnicodeString (Address: 0x180044a88)
RtlCreateUnicodeString (Address: 0x180044a38)
RtlEqualSid (Address: 0x180044aa0)
RtlEqualUnicodeString (Address: 0x180044a60)
RtlFreeHeap (Address: 0x180044ad0)
RtlFreeUnicodeString (Address: 0x180044ab0)
RtlGetAce (Address: 0x180044a80)
RtlGetDaclSecurityDescriptor (Address: 0x180044aa8)
RtlGetNtSystemRoot (Address: 0x180044a90)
RtlGetVersion (Address: 0x180044a30)
RtlInitializeSidEx (Address: 0x180044a98)
RtlInitUnicodeString (Address: 0x180044a48)
RtlNtStatusToDosError (Address: 0x180044ac0)
RtlPrefixUnicodeString (Address: 0x180044a68)
ZwQueryVolumeInformationFile (Address: 0x180044ab8)

RPCRT4.dll

NdrClientCall3 (Address: 0x180044390)
RpcBindingFree (Address: 0x180044388)
RpcBindingFromStringBindingW (Address: 0x180044398)
RpcBindingSetAuthInfoExW (Address: 0x1800443a0)
RpcEpResolveBinding (Address: 0x180044380)
RpcStringBindingComposeW (Address: 0x180044370)
RpcStringFreeW (Address: 0x180044378)