sechost.dll

v10.0.26100.8246 64-bit Windows NT Analyzed
Description
Host for SCM/SDDL/LSA Lookup APIs
Authors
© Microsoft Corporation. All rights reserved.
File size
679.4 KB
Uploaded
2026-04-21 06:43
Views
168
SHA-256
6edfc9e0b4c668c01692782867c2810e

Exported functions 246

#1000 · 0x4f940
#1001 · 0x50b00
#1002 · 0x50b10
I_ScSetServiceBitsA #1003 · 0x48890
I_ScSetServiceBitsW #1004 · 0x488c0
AuditComputeEffectivePolicyBySid #1005 · 0x59950
AuditEnumerateCategories #1006 · 0x59af0
AuditEnumeratePerUserPolicy #1007 · 0x59c20
AuditEnumerateSubCategories #1008 · 0x59c90
AuditFree #1009 · 0x273a0
AuditLookupCategoryNameW #1010 · 0x59de0
AuditLookupSubCategoryNameW #1011 · 0x59f40
AuditQueryGlobalSaclW #1012 · 0x5a0a0
AuditQueryPerUserPolicy #1013 · 0x5a110
AuditQuerySecurity #1014 · 0x5a180
AuditQuerySystemPolicy #1015 · 0x5a240
AuditSetGlobalSaclW #1016 · 0x5a2b0
AuditSetPerUserPolicy #1017 · 0x5a320
AuditSetSecurity #1018 · 0x5a380
AuditSetSystemPolicy #1019 · 0x5a4c0
BuildSecurityDescriptorForSharingAccess #1020 · 0x26810
BuildSecurityDescriptorForSharingAccessEx #1021 · 0x26830
CapabilityCheck #1022 · 0x1fda0
CapabilityCheckForSingleSessionSku #1023 · 0x48130
ChangeServiceConfig2A #1024 · 0x48c50
ChangeServiceConfig2W #1025 · 0x48e10
ChangeServiceConfigA #1026 · 0x48ee0
ChangeServiceConfigW #1027 · 0x491b0
CloseServiceHandle #1028 · 0xd900
CloseTrace #1029 · 0x24dc0
ControlService #1030 · 0x1ec80
ControlServiceExA #1031 · 0x49350
ControlServiceExW #1032 · 0x24160
ControlTraceA #1033 · 0x9ea0
ControlTraceW #1034 · 0xb700
ConvertSDToStringSDRootDomainW #1035 · 0x2f4e0
ConvertSecurityDescriptorToStringSecurityDescriptorW #1036 · 0xfa60
ConvertSidToStringSidW #1037 · 0xf7a0
ConvertStringSDToSDDomainA #1038 · 0x2f560
ConvertStringSDToSDDomainW #1039 · 0x2f6b0
ConvertStringSDToSDRootDomainW #1040 · 0x2f780
ConvertStringSecurityDescriptorToSecurityDescriptorW #1041 · 0x1a1a0
ConvertStringSidToSidW #1042 · 0x13fb0
CreateIsolatedProcess #1043 · 0x67550
CreateIsolationContainer #1044 · 0x67600
CreateServiceA #1045 · 0x494a0
CreateServiceEx #1046 · 0x49b80
CreateServiceW #1047 · 0x49f60
CredBackupCredentials #1048 · 0x5a750
CredDeleteA #1049 · 0x5a8d0
CredDeleteW #1050 · 0x5a970
CredEncryptAndMarshalBinaryBlob #1051 · 0x5b860
CredEnumerateA #1052 · 0x5aa10
CredEnumerateW #1053 · 0x1aca0
CredFindBestCredentialA #1054 · 0x5ab20
CredFindBestCredentialW #1055 · 0x5ac20
CredFree #1056 · 0x273a0
CredGetSessionTypes #1057 · 0x5ad20
CredGetTargetInfoA #1058 · 0x5ad90
CredGetTargetInfoW #1059 · 0x5ae70
CredIsMarshaledCredentialW #1060 · 0x5b890
CredIsProtectedA #1061 · 0x5b8e0
CredIsProtectedW #1062 · 0x22790
CredMarshalCredentialA #1063 · 0x5b980
CredMarshalCredentialW #1064 · 0x5b9f0
CredParseUserNameWithType #1065 · 0x5d2f0
CredProfileLoaded #1066 · 0x5af50
CredProfileLoadedEx #1067 · 0x1ab60
CredProfileUnloaded #1068 · 0x5afc0
CredProtectA #1069 · 0x5bbe0
CredProtectEx #1070 · 0x5bd60
CredProtectW #1071 · 0x5bef0
CredReadA #1072 · 0x5b030
CredReadByTokenHandle #1073 · 0x5b130
CredReadDomainCredentialsA #1074 · 0x5b270
CredReadDomainCredentialsW #1075 · 0x5b380
CredReadW #1076 · 0x1aa60
CredRestoreCredentials #1077 · 0x5b4a0
CredUnmarshalCredentialA #1078 · 0x5bf10
CredUnmarshalCredentialW #1079 · 0x22870
CredUnprotectA #1080 · 0x5bfc0
CredUnprotectEx #1081 · 0x5c160
CredUnprotectW #1082 · 0x5c2a0
CredWriteA #1083 · 0x5b600
CredWriteDomainCredentialsA #1084 · 0x5b6a0
CredWriteDomainCredentialsW #1085 · 0x5b780
CredWriteW #1086 · 0x1abd0
CredpConvertCredential #1087 · 0x1ba30
CredpConvertOneCredentialSize #1088 · 0x1b050
CredpConvertTargetInfo #1089 · 0x5c2c0
CredpDecodeCredential #1090 · 0x27670
CredpEncodeCredential #1091 · 0x5c830
CredpEncodeSecret #1092 · 0x5c8c0
DecodeAttributeName #1093 · 0x2fd90
DeleteIsolationContainer #1094 · 0x67680
DeleteService #1095 · 0x4a320
EnableTraceEx2 #1096 · 0x93c0
EncodeAttributeName #1097 · 0x2ffa0
EnumDependentServicesW #1098 · 0x4a390
EnumServicesStatusExW #1099 · 0x18b60
EnumerateIdentityProviders #1100 · 0x1e810
EnumerateTraceGuidsEx #1101 · 0x16e60
EventAccessControl #1102 · 0x50f40
EventAccessQuery #1103 · 0x51140
EventAccessRemove #1104 · 0x26bd0
FreeContainer #1105 · 0x5dda0
FreeOperandValue #1106 · 0x15d90
FreeTransientObjectSecurityDescriptor #1107 · 0x1f3f0
GetCharFromDigit #1108 · 0x30140
GetDefaultIdentityProvider #1109 · 0x2cb80
GetDigitFromChar #1110 · 0x30160
GetEmbeddedContainerIsolationPolicy #1111 · 0x5ddf0
GetEmbeddedImageMitigationPolicy #1112 · 0x220c0
GetIdentityProviderInfoByGUID #1113 · 0x1e6e0
GetIdentityProviderInfoByName #1114 · 0x25dc0
GetOperandValue #1115 · 0x15220
GetOperatorCodeAtIndex #1116 · 0x30270
GetOperatorIndexByToken #1117 · 0x1cd30
GetOperatorUnaryAtIndex #1118 · 0x30290
GetPrintableOperandValue #1119 · 0x1ce30
GetServiceDirectory #1120 · 0x4a540
GetServiceDisplayNameW #1121 · 0x4a5c0
GetServiceKeyNameW #1122 · 0x25050
GetServiceProcessToken #1123 · 0x4a690
GetServiceRegistryStateKey #1124 · 0x264d0
GetSharedServiceDirectory #1125 · 0x4a700
GetSharedServiceRegistryStateKey #1126 · 0x4a780
I_QueryTagInformation #1127 · 0x1d5d0
I_RegisterSvchostNotificationCallback #1128 · 0x273e0
I_ScBroadcastServiceControlMessage #1129 · 0x4a800
I_ScIsSecurityProcess #1130 · 0x4bb60
I_ScPnPGetServiceName #1131 · 0x26ef0
I_ScQueryServiceConfig #1132 · 0x1dc40
I_ScRegisterDeviceNotification #1133 · 0x232f0
I_ScRegisterPreshutdownRestart #1134 · 0x4a8d0
I_ScReparseServiceDatabase #1135 · 0x4a980
I_ScRpcBindA #1136 · 0x4c900
I_ScRpcBindW #1137 · 0x4c910
I_ScSendPnPMessage #1138 · 0xd310
I_ScSendTSMessage #1139 · 0x4a800
I_ScUnregisterDeviceNotification #1140 · 0x24950
I_ScValidatePnPService #1141 · 0x23830
IsArrayType #1142 · 0x303f0
IsValueSizeFixed #1143 · 0x15d40
LocalGetConditionForString #1144 · 0x148d0
LocalGetReferencedTokenTypesForCondition #1145 · 0x304c0
LocalGetSidForString #1146 · 0x14770
LocalGetStringForCondition #1147 · 0x29290
LocalGetStringForRelativeAttribute #1148 · 0x1c410
LocalRpcBindingCreateWithSecurity #1149 · 0x48380
LocalRpcBindingSetAuthInfoEx #1150 · 0x48530
LookupAccountNameLocalA #1151 · 0x27bc0
LookupAccountNameLocalW #1152 · 0x17530
LookupAccountSidLocalA #1153 · 0x17c80
LookupAccountSidLocalW #1154 · 0x17ec0
LsaAddAccountRights #1155 · 0x56c70
LsaClose #1156 · 0x22b80
LsaCreateSecret #1157 · 0x57970
LsaDelete #1158 · 0x56f40
LsaEnumerateAccountRights #1159 · 0x56d00
LsaEnumerateAccountsWithUserRight #1160 · 0x56dd0
LsaFreeMemory #1161 · 0x20dd0
LsaICLookupNames #1162 · 0x1ff60
LsaICLookupNamesWithCreds #1163 · 0x56fc0
LsaICLookupSids #1164 · 0x26f40
LsaICLookupSidsWithCreds #1165 · 0x571a0
LsaIOpenPolicyWithCreds #1166 · 0x57500
LsaLookupClose #1167 · 0x184a0
LsaLookupFreeMemory #1168 · 0x20dd0
LsaLookupGetDomainInfo #1169 · 0x17430
LsaLookupManageSidNameMapping #1170 · 0x276c0
LsaLookupNames2 #1171 · 0x575f0
LsaLookupOpenLocalPolicy #1172 · 0x18400
LsaLookupSids #1173 · 0x26620
LsaLookupSids2 #1174 · 0x57660
LsaLookupTranslateNames #1175 · 0x174d0
LsaLookupTranslateSids #1176 · 0x17ad0
LsaLookupUserAccountType #1177 · 0x23d30
LsaOpenPolicy #1178 · 0x21b70
LsaOpenSecret #1179 · 0x57b00
LsaQueryInformationPolicy #1180 · 0x242b0
LsaQuerySecret #1181 · 0x57c90
LsaRemoveAccountRights #1182 · 0x56ea0
LsaRetrievePrivateData #1183 · 0x580d0
LsaSetInformationPolicy #1184 · 0x57670
LsaSetSecret #1185 · 0x58460
LsaStorePrivateData #1186 · 0x58690
NotifyServiceStatusChange #1187 · 0x26320
NotifyServiceStatusChangeA #1188 · 0x26600
NotifyServiceStatusChangeW #1189 · 0x26320
OpenSCManagerA #1190 · 0xd470
OpenSCManagerW #1191 · 0xdf40
OpenServiceA #1192 · 0x25d40
OpenServiceW #1193 · 0x1dd00
OpenTraceFromBufferStream #1194 · 0x4f9c0
OpenTraceFromFile #1195 · 0x4fb80
OpenTraceFromRealTimeLogger #1196 · 0x4fd80
OpenTraceFromRealTimeLoggerWithAllocationOptions #1197 · 0x4fda0
OpenTraceW #1198 · 0x25560
ProcessTrace #1199 · 0x22dd0
ProcessTraceAddBufferToBufferStream #1200 · 0x50090
ProcessTraceBufferDecrementReference #1201 · 0x501c0
ProcessTraceBufferIncrementReference #1202 · 0x502d0
QueryAllTracesA #1203 · 0x51470
QueryAllTracesW #1204 · 0xb570
QueryLocalUserServiceName #1205 · 0x4aa20
QueryServiceConfig2A #1206 · 0x4ad60
QueryServiceConfig2W #1207 · 0x18df0
QueryServiceConfigA #1208 · 0x4b1f0
QueryServiceConfigW #1209 · 0x1d440
QueryServiceDynamicInformation #1210 · 0x4bb70
QueryServiceObjectSecurity #1211 · 0x4b310
QueryServiceStatus #1212 · 0x20bf0
QueryServiceStatusEx #1213 · 0x1e040
QueryTraceProcessingHandle #1214 · 0x50380
QueryTransientObjectSecurityDescriptor #1215 · 0x1ecf0
QueryUserServiceName #1216 · 0xe500
QueryUserServiceNameForContext #1217 · 0x4b3d0
RegisterServiceCtrlHandlerA #1218 · 0x4bc10
RegisterServiceCtrlHandlerExA #1219 · 0x4bc80
RegisterServiceCtrlHandlerExW #1220 · 0x28120
RegisterServiceCtrlHandlerW #1221 · 0x4bd00
RegisterTraceGuidsA #1222 · 0x965aa
ReleaseIdentityProviderEnumContext #1223 · 0x23e00
RemoveTraceCallback #1224 · 0x50710
ReparseServiceConfig #1225 · 0x4b470
RpcClientCapabilityCheck #1226 · 0x27400
ScSendSynchronousPowerMessage #1227 · 0x4b4e0
SetLocalRpcServerInterfaceSecurity #1228 · 0x48640
SetLocalRpcServerProtseqSecurity #1229 · 0x48720
SetServiceObjectSecurity #1230 · 0x4b5c0
SetServiceStatus #1231 · 0xf480
SetTraceCallback #1232 · 0x508d0
StartServiceA #1233 · 0x4b710
StartServiceCtrlDispatcherA #1234 · 0x4bd20
StartServiceCtrlDispatcherW #1235 · 0xcb40
StartServiceW #1236 · 0x22b10
StartTraceA #1237 · 0x51510
StartTraceW #1238 · 0xa650
StopTraceW #1239 · 0x51bf0
SubscribeServiceChangeNotifications #1240 · 0x1db00
TraceConfigureLastBranchRecord #1241 · 0x51c10
TraceQueryInformation #1242 · 0x1f5d0
TraceSetInformation #1243 · 0x51db0
UnsubscribeServiceChangeNotifications #1244 · 0x20d90
WaitServiceState #1245 · 0x1d8a0

Imported DLLs & functions 308

ApiSetQueryApiSetPresence 0x18007ca78
_errno 0x18007cb40
_i64tow_s 0x18007cb30
_stricmp 0x18007caf8
_ui64tow_s 0x18007cb38
_ultow 0x18007cb50
_ultow_s 0x18007cb98
_vsnwprintf_s 0x18007ca90
_wcsicmp 0x18007cba8
_wcsnicmp 0x18007cb70
_wcstoi64 0x18007cb58
_wcstoui64 0x18007cb68
iswctype 0x18007cb90
memcmp 0x18007caa0
memcpy 0x18007ca98
memcpy_s 0x18007cab8
memmove 0x18007caa8
memmove_s 0x18007cad0
memset 0x18007ca88
qsort_s 0x18007cb18
strchr 0x18007caf0
strncmp 0x18007cb00
strnlen 0x18007cac8
strrchr 0x18007cae8
strstr 0x18007cae0
swprintf_s 0x18007cb80
towlower 0x18007cac0
wcscat_s 0x18007cb28
wcschr 0x18007cb78
wcscmp 0x18007cab0
wcscpy_s 0x18007cba0
wcsncmp 0x18007cb08
wcsncpy_s 0x18007cb60
wcsnlen 0x18007cb10
wcsrchr 0x18007cad8
wcsstr 0x18007cb20
wcstok_s 0x18007cb48
wcstoul 0x18007cb88
__dllonexit3 0x18007cbd8
_initterm 0x18007cbd0
_initterm_e 0x18007cbb8
_onexit 0x18007cbc8
_purecall 0x18007cbc0
DebugBreak 0x18007cbe8
IsDebuggerPresent 0x18007cbf0
OutputDebugStringW 0x18007cbf8
DelayLoadFailureHook 0x18007cc08
ResolveDelayLoadedAPI 0x18007cc18
GetLastError 0x18007cc28
RaiseException 0x18007cc38
SetLastError 0x18007cc30
CreateFileW 0x18007cc48
GetDiskFreeSpaceExW 0x18007cc70
GetFileAttributesExW 0x18007cc50
GetFullPathNameA 0x18007cc60
GetFullPathNameW 0x18007cc68
ReadFile 0x18007cc58
CloseHandle 0x18007cc80
GetProcessHeap 0x18007cc90
HeapAlloc 0x18007cc98
HeapFree 0x18007cca0
LocalAlloc 0x18007ccb8
LocalFree 0x18007ccc0
LocalReAlloc 0x18007ccb0
DeviceIoControl 0x18007ccd0
GetOverlappedResult 0x18007ccd8
DisableThreadLibraryCalls 0x18007cd08
FreeLibrary 0x18007cd18
GetModuleFileNameA 0x18007cd20
GetModuleFileNameW 0x18007cd00
GetModuleHandleExW 0x18007cd10
GetModuleHandleW 0x18007ccf8
GetProcAddress 0x18007ccf0
LoadLibraryExW 0x18007cce8
FormatMessageW 0x18007cd30
VirtualAllocEx 0x18007cd48
VirtualFree 0x18007cd40
VirtualFreeEx 0x18007cd50
CreateProcessAsUserW 0x18007cd80
CreateProcessW 0x18007cdb0
CreateThread 0x18007cd98
GetCurrentProcess 0x18007cd88
GetCurrentProcessId 0x18007cde8
GetCurrentThread 0x18007cdc0
GetCurrentThreadId 0x18007cdf0
GetProcessTimes 0x18007cdc8
GetThreadPriority 0x18007cd90
InitializeProcThreadAttributeList 0x18007cd60
OpenProcessToken 0x18007cdd0
OpenThread 0x18007cd70
OpenThreadToken 0x18007cda0
ResumeThread 0x18007cd78
SetThreadPriority 0x18007cd68
TerminateThread 0x18007cde0
TlsAlloc 0x18007cdf8
TlsGetValue 0x18007cdd8
TlsSetValue 0x18007cdb8
UpdateProcThreadAttribute 0x18007cda8
GetProcessMitigationPolicy 0x18007ce08
RegCloseKey 0x18007ce58
RegDeleteValueW 0x18007ce40
RegEnumKeyExW 0x18007ce18
RegNotifyChangeKeyValue 0x18007ce30
RegOpenKeyExA 0x18007ce28
RegOpenKeyExW 0x18007ce48
RegQueryValueExA 0x18007ce50
RegQueryValueExW 0x18007ce20
RegSetValueExW 0x18007ce38
RtlCompareMemory 0x18007ce68
CompareStringOrdinal 0x18007ce78
CompareStringW 0x18007ce80
AcquireSRWLockExclusive 0x18007cee8
AcquireSRWLockShared 0x18007cf48
CreateEventA 0x18007cef8
CreateEventExW 0x18007cf28
CreateEventW 0x18007ceb0
CreateMutexExW 0x18007cf40
CreateSemaphoreExW 0x18007cef0
DeleteCriticalSection 0x18007cea8
EnterCriticalSection 0x18007cf00
InitializeCriticalSectionEx 0x18007cea0
InitializeSRWLock 0x18007cee0
LeaveCriticalSection 0x18007cf10
OpenEventW 0x18007cf20
OpenSemaphoreW 0x18007cf38
ReleaseMutex 0x18007cf18
ReleaseSemaphore 0x18007ced0
ReleaseSRWLockExclusive 0x18007ced8
ReleaseSRWLockShared 0x18007cec8
ResetEvent 0x18007ce90
SetEvent 0x18007ceb8
SleepEx 0x18007ce98
WaitForMultipleObjectsEx 0x18007cec0
WaitForSingleObject 0x18007cf08
WaitForSingleObjectEx 0x18007cf30
Sleep 0x18007cf58
SleepConditionVariableSRW 0x18007cf60
WakeConditionVariable 0x18007cf68
GetComputerNameExW 0x18007cf78
GetSystemDirectoryW 0x18007cf80
CloseThreadpoolTimer 0x18007cfa0
CloseThreadpoolWork 0x18007cfa8
CreateThreadpoolTimer 0x18007cfb0
CreateThreadpoolWork 0x18007cfc0
SetThreadpoolTimer 0x18007cf90
SubmitThreadpoolWork 0x18007cfb8
WaitForThreadpoolTimerCallbacks 0x18007cf98
DecodePointer 0x18007cfd8
EncodePointer 0x18007cfd0
IsWow64Process2 0x18007cfe8
EventActivityIdControl 0x18007d018
EventRegister 0x18007d008
EventSetInformation 0x18007d010
EventUnregister 0x18007cff8
EventWriteTransfer 0x18007d000
AddAccessAllowedAce 0x18007d0b8
AddAccessDeniedAce 0x18007d0b0
AdjustTokenGroups 0x18007d068
AdjustTokenPrivileges 0x18007d0c0
AllocateAndInitializeSid 0x18007d060
CreateRestrictedToken 0x18007d0a0
EqualDomainSid 0x18007d080
EqualSid 0x18007d038
FreeSid 0x18007d0c8
GetAclInformation 0x18007d0d0
GetLengthSid 0x18007d0a8
GetSecurityDescriptorDacl 0x18007d098
GetSecurityDescriptorSacl 0x18007d090
GetSidSubAuthority 0x18007d048
GetSidSubAuthorityCount 0x18007d040
GetTokenInformation 0x18007d030
InitializeSecurityDescriptor 0x18007d078
IsValidSecurityDescriptor 0x18007d050
IsValidSid 0x18007d088
SetKernelObjectSecurity 0x18007d028
SetSecurityDescriptorDacl 0x18007d058
SetSecurityDescriptorSacl 0x18007d070
__C_specific_handler 0x18007d4e8
_vsnwprintf 0x18007d488
DbgPrintEx 0x18007d2d0
EtwDeliverDataBlock 0x18007d3a0
EtwEnumerateProcessRegGuids 0x18007d3b0
EtwEventWriteTransfer 0x18007d370
EtwpGetCpuSpeed 0x18007d3e0
EtwProcessPrivateLoggerRequest 0x18007d448
EtwSendNotification 0x18007d3a8
LdrQueryModuleServiceTags 0x18007d2e8
LdrResSearchResource 0x18007d470
NtAllocateVirtualMemoryEx 0x18007d3f8
NtCancelIoFile 0x18007d368
NtClose 0x18007d120
NtFreeVirtualMemory 0x18007d400
NtOpenKey 0x18007d280
NtOpenProcessToken 0x18007d110
NtOpenProcessTokenEx 0x18007d240
NtOpenThreadToken 0x18007d128
NtQueryInformationFile 0x18007d358
NtQueryInformationThread 0x18007d2f0
NtQueryInformationToken 0x18007d118
NtQueryIntervalProfile 0x18007d3d0
NtQueryLicenseValue 0x18007d360
NtQueryPerformanceCounter 0x18007d420
NtQuerySystemInformation 0x18007d3c8
NtQueryValueKey 0x18007d290
NtQueueApcThread 0x18007d338
NtSetEvent 0x18007d450
NtSetInformationThread 0x18007d2d8
NtSetIntervalProfile 0x18007d3c0
NtSetSystemInformation 0x18007d3b8
NtTerminateProcess 0x18007d4a8
NtTraceControl 0x18007d378
NtWaitForMultipleObjects 0x18007d3f0
RtlAbsoluteToSelfRelativeSD 0x18007d1e8
RtlAcquireSRWLockExclusive 0x18007d308
RtlAcquireSRWLockShared 0x18007d310
RtlAddAccessAllowedAce 0x18007d258
RtlAddAccessAllowedAceEx 0x18007d1c0
RtlAddAccessAllowedObjectAce 0x18007d200
RtlAddAccessDeniedAceEx 0x18007d1f8
RtlAddAccessDeniedObjectAce 0x18007d4f0
RtlAddAce 0x18007d1d8
RtlAddAuditAccessAceEx 0x18007d1b0
RtlAddAuditAccessObjectAce 0x18007d180
RtlAddMandatoryAce 0x18007d260
RtlAllocateAndInitializeSid 0x18007d478
RtlAllocateHeap 0x18007d270
RtlAnsiStringToUnicodeString 0x18007d498
RtlCapabilityCheck 0x18007d4a0
RtlCapabilityCheckForSingleSessionSku 0x18007d298
RtlCaptureContext 0x18007d4b0
RtlCheckTokenCapability 0x18007d2b8
RtlCheckTokenMembership 0x18007d2a0
RtlCheckTokenMembershipEx 0x18007d2a8
RtlCompareUnicodeString 0x18007d138
RtlConvertSidToUnicodeString 0x18007d1a0
RtlCopySecurityDescriptor 0x18007d278
RtlCopySid 0x18007d0f8
RtlCopyUnicodeString 0x18007d490
RtlCreateAcl 0x18007d268
RtlCreateSecurityDescriptor 0x18007d220
RtlCreateServiceSid 0x18007d2e0
RtlDecompressBufferEx 0x18007d438
RtlDeleteCriticalSection 0x18007d230
RtlDeriveCapabilitySidsFromName 0x18007d480
RtlDllShutdownInProgress 0x18007d4b8
RtlEqualPrefixSid 0x18007d140
RtlEqualSid 0x18007d150
RtlEqualUnicodeString 0x18007d148
RtlFirstFreeAce 0x18007d210
RtlFreeAnsiString 0x18007d380
RtlFreeHeap 0x18007d288
RtlFreeUnicodeString 0x18007d2b0
RtlGetAce 0x18007d1a8
RtlGetCompressionWorkSpaceSize 0x18007d430
RtlGetControlSecurityDescriptor 0x18007d178
RtlGetCurrentServiceSessionId 0x18007d440
RtlGetDaclSecurityDescriptor 0x18007d228
RtlGetGroupSecurityDescriptor 0x18007d1e0
RtlGetNativeSystemInformation 0x18007d408
RtlGetNtProductType 0x18007d458
RtlGetOwnerSecurityDescriptor 0x18007d1c8
RtlGetPersistedStateLocation 0x18007d388
RtlGetSaclSecurityDescriptor 0x18007d198
RtlGUIDFromString 0x18007d208
RtlInitAnsiString 0x18007d0f0
RtlInitializeBitMap 0x18007d410
RtlInitializeCriticalSectionEx 0x18007d238
RtlInitializeSid 0x18007d170
RtlInitializeSRWLock 0x18007d2f8
RtlInitUnicodeString 0x18007d4e0
RtlInitUnicodeStringEx 0x18007d468
RtlInterlockedClearBitRun 0x18007d428
RtlInterlockedSetBitRun 0x18007d418
RtlLengthRequiredSid 0x18007d250
RtlLengthSecurityDescriptor 0x18007d248
RtlLengthSid 0x18007d0e0
RtlLookupFunctionEntry 0x18007d4c8
RtlMakeSelfRelativeSD 0x18007d2c0
RtlMultiByteToUnicodeN 0x18007d1f0
RtlNtStatusToDosError 0x18007d108
RtlNtStatusToDosErrorNoTeb 0x18007d4c0
RtlQueryPerformanceFrequency 0x18007d3e8
RtlQueryRegistryValueWithFallback 0x18007d390
RtlQueryTimeZoneInformation 0x18007d3d8
RtlQueryWnfStateData 0x18007d340
RtlReleaseSRWLockExclusive 0x18007d300
RtlReleaseSRWLockShared 0x18007d318
RtlRunOnceExecuteOnce 0x18007d320
RtlSetDaclSecurityDescriptor 0x18007d190
RtlSetGroupSecurityDescriptor 0x18007d218
RtlSetLastWin32Error 0x18007d350
RtlSetOwnerSecurityDescriptor 0x18007d168
RtlSetSaclSecurityDescriptor 0x18007d160
RtlSetThreadSubProcessTag 0x18007d2c8
RtlSubAuthorityCountSid 0x18007d1d0
RtlSubAuthoritySid 0x18007d188
RtlSubscribeWnfStateChangeNotification 0x18007d330
RtlUnhandledExceptionFilter 0x18007d4d8
RtlUnicodeStringToAnsiString 0x18007d0e8
RtlUnicodeToMultiByteSize 0x18007d100
RtlUnsubscribeWnfNotificationWaitForCompletion 0x18007d348
RtlUnsubscribeWnfStateChangeNotification 0x18007d328
RtlValidAcl 0x18007d158
RtlValidRelativeSecurityDescriptor 0x18007d398
RtlValidSid 0x18007d130
RtlVirtualUnwind 0x18007d4d0
RtlxAnsiStringToUnicodeSize 0x18007d1b8
RtlxUnicodeStringToAnsiSize 0x18007d460