samsrv.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Description
SAM Server DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
911.5 KB
Uploaded
2025-12-01 07:38
Views
139
SHA-256
2a5bcd3308ee5cf2c6b62f2ecfdeb393

Exported functions 334

RtlDeleteElementGenericTable2 #1 · 0xeee0
RtlInitializeGenericTable2 #2 · 0x23ef0
RtlInsertElementGenericTable2 #3 · 0x36e0
RtlLookupElementGenericTable2 #4 · 0x4910
SAM_MIDL_user_allocate #5 · 0xb7d0
SAM_MIDL_user_free #6 · 0x100f0
SamDsExtAlloc #7 · 0xb7d0
SamDsExtFree #8 · 0x100f0
SamIAccountRestrictions #9 · 0x2edf0
SamIAddDSNameToAlias #10 · 0x1a860
SamIChangePasswordForeignUser #11 · 0x8d720
SamIClaimIsValid #12 · 0x708f0
SamIConnect #13 · 0x315f0
SamIConvertSecurityAttributesToClaimsBlob #14 · 0x709b0
SamICopyCurrentDomainAccountSettings #15 · 0x95b70
SamICreateKrbTgt #16 · 0x77e60
SamIDecodeClaimsBlob #17 · 0x70c20
SamIDecodeClaimsBlobIntoClaimsSet #18 · 0x70c70
SamIDecodeClaimsBlobToAuthz #19 · 0x60be0
SamIDemote #20 · 0x7f9b0
SamIDemoteUndo #21 · 0x7fa50
SamIDoFSMORoleChange #22 · 0x74550
SamIFreeAuthzSecurityAttributesInfo #23 · 0x60c30
SamIFreeClaimsBlob #24 · 0x20ad0
SamIFreeDecodedClaimsSet #25 · 0x70cf0
SamIFreeLookupNamesInfo #26 · 0x86ab0
SamIFreeLookupSidsInfo #27 · 0x86bf0
SamIFreeOidList #28 · 0x95b90
SamIFreeRealmList #29 · 0xff40
SamIFreeSecurityAttributesInfo #30 · 0x70db0
SamIFreeSidAndAttributesList #31 · 0xfc10
SamIFreeSidArray #32 · 0xfc90
SamIFreeVoid #33 · 0x100f0
SamIFree_SAMPR_DISPLAY_INFO_BUFFER #34 · 0x86dc0
SamIFree_SAMPR_DOMAIN_INFO_BUFFER #35 · 0x23f20
SamIFree_SAMPR_ENUMERATION_BUFFER #36 · 0x29760
SamIFree_SAMPR_GET_GROUPS_BUFFER #37 · 0x86e00
SamIFree_SAMPR_RETURNED_USTRING_ARRAY #38 · 0xff90
SamIFree_SAMPR_ULONG_ARRAY #39 · 0xfef0
SamIFree_SAMPR_USER_INFO_BUFFER #40 · 0xfdd0
SamIFree_UserInternal6Information #41 · 0x2fe20
SamIGetAliasMembership #42 · 0x79c0
SamIGetConfigurationOidList #43 · 0x95bd0
SamIGetDefaultAdministratorName #44 · 0x96dc0
SamIGetResourceGroupMembershipsTransitive #45 · 0xdd50
SamIGetResourceGroupMembershipsTransitive2 #46 · 0x13fd0
SamIGetUserLogonInformation #47 · 0x95cc0
SamIGetUserLogonInformation2 #48 · 0x2f190
SamIGetUserLogonInformation3 #49 · 0x20e40
SamIGetUserLogonInformationEx #50 · 0x21870
SamIHandleObjectUpdate #51 · 0x158f0
SamIImpersonateNullSession #52 · 0x22ea0
SamIInitialize #53 · 0x25db0
SamIIsDownlevelDcUpgrade #54 · 0x8af40
SamIIsExtendedSidMode #55 · 0x7a160
SamIIsRebootAfterPromotion #56 · 0x8af50
SamIIsSetupInProgress #57 · 0x25da0
SamILoadDownlevelDatabase #58 · 0x7fa80
SamILookupNamesBySid #59 · 0x74590
SamILookupNamesInDomain #60 · 0x6fa0
SamILookupSidsByName #61 · 0x74880
SamILoopbackConnect #62 · 0x20600
SamILoopbackConnectEx #63 · 0x38650
SamIMixedDomain #64 · 0x235b0
SamIMixedDomain2 #65 · 0x21720
SamINT4UpgradeInProgress #66 · 0x24020
SamINetLogonPing #67 · 0x13dd0
SamINotifyRoleChange #68 · 0x74b60
SamIOpenUserByAlternateId #69 · 0x8db30
SamIPromote #70 · 0x10fd0
SamIPromoteUndo #71 · 0x7fc80
SamIPurgeSecrets #72 · 0x95d10
SamIQueryAccountSecretsCachability #73 · 0x95df0
SamIQueryCapabilities #74 · 0x14960
SamIQueryRealmList #75 · 0x314b0
SamIQueryServerRole #76 · 0x20ec0
SamIQueryServerRole2 #77 · 0x237a0
SamIRandomizeStoredPassword #78 · 0x7d160
SamIRandomizeStoredPasswordWithoutExpirationCheck #79 · 0x7d860
SamIRemoveDSNameFromAlias #80 · 0x5d190
SamIReplaceDownlevelDatabase #81 · 0x7fca0
SamIReplicateAccountData #82 · 0x96eb0
SamIResetBadPwdCountOnPdc #83 · 0x7d8a0
SamIRetrieveMultiplePrimaryCredentials #84 · 0x148b0
SamIRetrieveNGCKeyCredential #85 · 0x727c0
SamIRetrievePrimaryCredentials #86 · 0x72860
SamIRevertNullSession #87 · 0x228e0
SamIScorePassword #88 · 0x14400
SamISetAuditingInformation #89 · 0x96ff0
SamISetMachinePassword #90 · 0x8dc10
SamISetPasswordForeignUser2 #91 · 0x8dc90
SamISetPasswordForeignUser3 #92 · 0x8dcd0
SamISetPasswordInfoOnDc #93 · 0x7d8f0
SamIStorePrimaryCredentials #94 · 0x728c0
SamITransformClaims #95 · 0x70e00
SamIUPNFromUserHandle #96 · 0x141a0
SamIUnLoadDownlevelDatabase #97 · 0x80050
SamIUninitialize #98 · 0x86e40
SamIUpdateLogonStatistics #99 · 0x2c1c0
SamIValidateAccountName #100 · 0x97060
SamIValidateNewAccountName #101 · 0x12a70
SampAccountControlToFlags #102 · 0x20240
SampAcquireReadLock #103 · 0xb8c0
SampAcquireSamLockExclusive #104 · 0x11e70
SampAcquireWriteLock #105 · 0x2c080
SampAddAccountToGroupMembers #106 · 0x1b890
SampAddAccountsAndApplyMemberships #107 · 0x800e0
SampAddDeltaTime #108 · 0x4e70
SampAddNonLocalDomainRelativeMemberships #109 · 0x80370
SampAddSameDomainMemberToGlobalOrUniversalGroup #110 · 0x1b030
SampAddUserToGroup #111 · 0x7a330
SampAlInvalidateAliasInformation #112 · 0x22ec0
SampAllocateNextCurrentRidFromIndex #113 · 0x971f0
SampApplyDomainUpdatesForAllDomains #114 · 0x24430
SampAssignPrimaryGroup #115 · 0x8e2b0
SampAuditAccountEnableDisableChange #116 · 0x20150
SampAuditAccountNameChange #117 · 0x84080
SampAuditAnyEvent #118 · 0x24f0
SampAuditGroupTypeChange #119 · 0x84790
SampAuditSidHistory #120 · 0x84ae0
SampBuildDsNameFromSid #121 · 0x1e980
SampBuildSamProtection #122 · 0x2a4d0
SampCalculateLmAndNtOwfPasswords #123 · 0x14ce0
SampChangeAliasAccountName #124 · 0x5d340
SampChangeGroupAccountName #125 · 0x7a3f0
SampChangeUserAccountName #126 · 0x8edc0
SampCheckForAccountLockout #127 · 0x8f1b0
SampCheckGroupTypeBits #128 · 0x227f0
SampCheckSidType #129 · 0x1e670
SampCommitBufferedWrites #130 · 0x20440
SampCompareDisplayStrings #131 · 0x1ec70
SampComputePasswordExpired #132 · 0x152b0
SampConnect #133 · 0x7af0
SampConvertUiListToApiList #134 · 0x979f0
SampCopyUserSupplementalCredentialsForDCPromo #135 · 0x1e010
SampCreateAccountContext2 #136 · 0x5b30
SampCreateAliasInDomain #137 · 0x138b0
SampCreateContextEx #138 · 0x5f90
SampCreateDefaultUPN #139 · 0x12150
SampCreateFullSid #140 · 0xdf90
SampCreateGroupInDomain #141 · 0x12530
SampCreateUserInDomain #142 · 0x18a60
SampCurrentThreadOwnsLock #143 · 0x4830
SampDeReferenceContext #144 · 0xa7c0
SampDecrementActiveThreads #145 · 0x14990
SampDecryptCredentialData #146 · 0x20d10
SampDeleteContext #147 · 0xbfa0
SampDeleteDsDirsToDeleteKey #148 · 0x81d00
SampDeleteKeyForPostBootPromote #149 · 0x81dc0
SampDeltaChangeNotify #150 · 0x1f990
SampDsChangePasswordUser #151 · 0x8fe60
SampDsConvertReadAttrBlock #152 · 0x1ca40
SampDsGetPrimaryDomainStart #153 · 0xf710
SampDsInitializeSingleDomain #154 · 0x1dbd0
SampDsIsRunning #155 · 0x26710
SampDsMakeAttrBlock #156 · 0x1c840
SampDsSetBuiltinDomainPolicy #157 · 0x1e550
SampDsSetDomainPolicy #158 · 0x1e4a0
SampDsSetPasswordUser #159 · 0x14e50
SampDsUpdateContextAttributes #160 · 0x1bef0
SampDuplicateGroupInfo #161 · 0x72fa0
SampDuplicateMachineInfo #162 · 0x72fa0
SampDuplicateOemGroupInfo #163 · 0x73050
SampDuplicateOemUserInfo #164 · 0x73050
SampDuplicateUnicodeString #165 · 0x15370
SampDuplicateUserInfo #166 · 0x730b0
SampEncryptCredentialData #167 · 0x17f00
SampExamineSid #168 · 0x2ce30
SampExtendDefinedDomains #169 · 0x23fe0
SampFlagsToAccountControl #170 · 0x15920
SampFlagsToAccountControlEx #171 · 0x3b380
SampFreeGroupInfo #172 · 0x73220
SampFreeMachineInfo #173 · 0x73220
SampFreeOemGroupInfo #174 · 0x73250
SampFreeOemUserInfo #175 · 0x73250
SampFreeUnicodeString #176 · 0x4000
SampFreeUserInfo #177 · 0x73280
SampGenerateRandomPassword #178 · 0x825d0
SampGetAccessAttribute #179 · 0x60970
SampGetAccountDomainInfo #180 · 0x2b2a0
SampGetBehaviorVersion #181 · 0x226f0
SampGetCurrentOwnerAndPrimaryGroup #182 · 0x23050
SampGetDisableOutboundRSO #183 · 0x980c0
SampGetDisableRSOOnPDCForward #184 · 0x980d0
SampGetDisableResetBadPwdCountForward #185 · 0x980e0
SampGetDisableSingleObjectRepl #186 · 0x980f0
SampGetDnsDomainNameFromIndex #187 · 0x216c0
SampGetDomainContextFromIndex #188 · 0x20f70
SampGetDomainObjectFromAccountContext #189 · 0x98100
SampGetDomainObjectFromIndex #190 · 0x23e40
SampGetDomainServerRoleFromIndex #191 · 0x98130
SampGetDomainSidFromAccountContext #192 · 0x20120
SampGetDomainSidFromIndex #193 · 0x23560
SampGetDomainSidListForSam #194 · 0x114b0
SampGetDomainUpgradeTasks #195 · 0x23ff0
SampGetDownLevelDomainControllersPresent #196 · 0x216f0
SampGetExtendedAttribute #197 · 0xe480
SampGetExternalNameFromIndex #198 · 0x98150
SampGetFixedAttributes #199 · 0x2a9b0
SampGetHasNeverTime #200 · 0x98170
SampGetIgnoreGCFailures #201 · 0x98180
SampGetLogLevel #202 · 0x20eb0
SampGetNT4UpgradeInProgress #203 · 0x24020
SampGetNewAccountSecurityNt4 #204 · 0x887b0
SampGetNextUnmodifiedRidFromIndex #205 · 0x98190
SampGetNoGcLogonEnforceKerberosIpCheck #206 · 0x981b0
SampGetNoGcLogonEnforceNTLMCheck #207 · 0x981c0
SampGetObjectSD #208 · 0x30640
SampGetObjectTypeNameFromIndex #209 · 0x20f50
SampGetPasswordMustChangeWithUF_UAC #210 · 0x905e0
SampGetReverseMembershipTransitive #211 · 0x6850
SampGetSamSubsystemName #212 · 0x21710
SampGetSerialNumberDomain2 #213 · 0x75020
SampGetServerObjectName #214 · 0x24010
SampGetSidArrayAttribute #215 · 0xf100
SampGetSidAttribute #216 · 0x2a8f0
SampGetSuccessAccountAuditingEnabled #217 · 0x22780
SampGetUlongArrayAttribute #218 · 0x239f0
SampGetUnicodeStringAttribute #219 · 0x9ab0
SampGetUserAccountControlComputed #220 · 0x90710
SampGetUserAccountSettings #221 · 0x67c0
SampGetWillNeverTime #222 · 0x981d0
SampImpersonateClient #223 · 0xd2e0
SampIncreaseBadPwdCountLoopback #224 · 0x7da90
SampIncrementActiveThreads #225 · 0xccb0
SampIncrementNetlogonChangeLogSerialNumber #226 · 0x981e0
SampInvalidateDomainCache #227 · 0x235e0
SampIsAccountBuiltIn #228 · 0x21850
SampIsAuditingEnabled #229 · 0x20e10
SampIsBuiltinDomain #230 · 0x20df0
SampIsDomainHosted #231 · 0x1f120
SampIsInternetAccount #232 · 0xe3d0
SampIsServiceRunning #233 · 0x982a0
SampIsSetupInProgress #234 · 0x287f0
SampLogPrint #235 · 0x7cbf0
SampLookupContext #236 · 0x7e40
SampMarkPerAttributeInvalidFromWhichFields #237 · 0x1ce80
SampNeedUserAccountSettingsDuringQuery #238 · 0xb7f0
SampNetLogonNotificationRequired #239 · 0x1ea00
SampNotifyAuditChange #240 · 0x1f4c0
SampNotifyReplicatedInChange #241 · 0x11d10
SampPasswordChangeNotify #242 · 0x20a30
SampPasswordChangeNotifyWorker #243 · 0x1f1f0
SampPositionOfHighestBit #244 · 0x984f0
SampQueryCapabilities #245 · 0x149b0
SampQueryDSRMAccountName #246 · 0x35150
SampQueryInformationUserInternal #247 · 0x7ee0
SampQueryUserSupplementalCredentialsRegistry #248 · 0x20ba0
SampReadExtendedAttributes #249 · 0xe7b0
SampRecordSystemSchemaVerisonInRegistry #250 · 0x8cc80
SampReferenceContext #251 · 0x203b0
SampRegObjToDsObj #252 · 0x1d4a0
SampReleaseReadLock #253 · 0xc940
SampReleaseSamLockExclusive #254 · 0x11cd0
SampReleaseWriteLock #255 · 0x2d5f0
SampRemoveAccountFromGroupMembers #256 · 0x7a8d0
SampRemoveSameDomainMemberFromGlobalOrUniversalGroup #257 · 0x7ab00
SampRemoveUserFromGroup #258 · 0x7abc0
SampRenameKrbtgtAccount #259 · 0x10d90
SampReplaceUserLogonHours #260 · 0x911b0
SampReplaceUserV1aFixed #261 · 0x2dd30
SampRetrieveGroupV1Fixed #262 · 0x21570
SampRetrieveMultipleCredentials #263 · 0x15e50
SampRetrieveUserPasswords #264 · 0x7100
SampRetrieveUserV1aFixed #265 · 0x7a70
SampRevertToSelf #266 · 0x2bc0
SampRtlWellKnownPrivilegeCheck #267 · 0x2ca0
SampSetAccessAttribute #268 · 0x1d8c0
SampSetAdminPassword #269 · 0x83730
SampSetAttributeAccess #270 · 0x1e930
SampSetComputerObjectDsName #271 · 0x23e70
SampSetDSRMPasswordWorker #272 · 0x780f0
SampSetExtendedAttributeAccess #273 · 0x10b20
SampSetFixedAttributes #274 · 0x2ddb0
SampSetGlobalDsSids #275 · 0x23170
SampSetPassword #276 · 0x83860
SampSetPasswordInfoOnPdcByHandle #277 · 0x7e730
SampSetPasswordInfoOnPdcByIndex #278 · 0x7e7c0
SampSetSerialNumberDomain2 #279 · 0x76570
SampSetTransactionDomain #280 · 0x4740
SampSetTransactionWithinDomain #281 · 0x98c40
SampSetUnicodeStringAttribute #282 · 0x19990
SampSetUserAccountControl #283 · 0x12f80
SampSplitSid #284 · 0x293c0
SampStoreObjectAttributes #285 · 0x2e000
SampStringFromGuid #286 · 0x98e90
SampTraceEvent #287 · 0xad70
SampUpdateAccountDisabledFlag #288 · 0xb830
SampUpdateComputedUserAccountControlBits #289 · 0x6d30
SampUpdateMixedModeAndFindDomain #290 · 0x203c0
SampUpdatePerformanceCounters #291 · 0xfa30
SampUpgradeUserParmsActual #292 · 0x22840
SampUsingDsData #293 · 0x24f90
SampValidateDomainCacheCallback #294 · 0x11430
SampValidateDomainControllerCreation #295 · 0x8a560
SampValidatePwdSettingAttempt #296 · 0x15160
SampValidateRegAttributes #297 · 0xcd70
SampWriteEventLog #298 · 0x30750
SampWriteGroupType #299 · 0x13ee0
SamrAddMemberToAlias #300 · 0x2b750
SamrAddMemberToGroup #301 · 0x7ae80
SamrCloseHandle #302 · 0xa090
SamrCreateUser2InDomain #303 · 0x769a0
SamrCreateUserInDomain #304 · 0x76b40
SamrDeleteAlias #305 · 0x5e4b0
SamrDeleteGroup #306 · 0x7b010
SamrDeleteUser #307 · 0x92430
SamrEnumerateDomainsInSamServer #308 · 0xf3f0
SamrEnumerateUsersInDomain #309 · 0xfb20
SamrEnumerateUsersInDomain2 #310 · 0x21d0
SamrGetAliasMembership #311 · 0x31ac0
SamrGetGroupsForUser #312 · 0x31990
SamrGetMembersInAlias #313 · 0x2680
SamrLookupDomainInSamServer #314 · 0xf730
SamrLookupIdsInDomain #315 · 0xe060
SamrLookupNamesInDomain #316 · 0x102f0
SamrLookupNamesInDomain2 #317 · 0x4be0
SamrOpenAlias #318 · 0xece0
SamrOpenDomain #319 · 0x7d70
SamrOpenGroup #320 · 0x215f0
SamrOpenUser #321 · 0xd7d0
SamrQueryDisplayInformation #322 · 0x73a50
SamrQueryInformationDomain #323 · 0x233d0
SamrQueryInformationUser #324 · 0x4b30
SamrQueryInformationUser2 #325 · 0x4b40
SamrQuerySecurityObject #326 · 0x10560
SamrRemoveMemberFromAlias #327 · 0x5eb70
SamrRemoveMemberFromGroup #328 · 0x7b9c0
SamrRidToSid #329 · 0xdeb0
SamrSetInformationAlias #330 · 0x5ef10
SamrSetInformationGroup #331 · 0x7bb50
SamrSetInformationUser #332 · 0x92e90
SamrSetSecurityObject #333 · 0x89770
SamrValidatePassword #334 · 0x11890

Imported DLLs & functions 401

ApiSetQueryApiSetPresence 0x1800abd50
SetConsoleCtrlHandler 0x1800abd60
DebugBreak 0x1800abd78
IsDebuggerPresent 0x1800abd80
OutputDebugStringW 0x1800abd70
DelayLoadFailureHook 0x1800abd90
ResolveDelayLoadedAPI 0x1800abda0
GetLastError 0x1800abdb8
SetErrorMode 0x1800abdb0
SetLastError 0x1800abdc8
SetUnhandledExceptionFilter 0x1800abdd0
UnhandledExceptionFilter 0x1800abdc0
CompareFileTime 0x1800abdf0
CreateDirectoryW 0x1800abe00
CreateFileW 0x1800abe30
DeleteFileW 0x1800abe18
FindClose 0x1800abe20
FindFirstFileExW 0x1800abe10
FindFirstFileW 0x1800abe38
FindNextFileW 0x1800abe40
FlushFileBuffers 0x1800abde0
GetFileSize 0x1800abe08
RemoveDirectoryW 0x1800abdf8
SetFileInformationByHandle 0x1800abe48
SetFilePointer 0x1800abde8
WriteFile 0x1800abe28
CloseHandle 0x1800abe58
GetProcessHeap 0x1800abe68
HeapAlloc 0x1800abe78
HeapFree 0x1800abe70
LocalAlloc 0x1800abe88
LocalFree 0x1800abe90
InitializeSListHead 0x1800abea0
GetComputerNameW 0x1800abeb0
MoveFileW 0x1800abeb8
FreeLibrary 0x1800abed0
GetModuleFileNameA 0x1800abee0
GetModuleFileNameW 0x1800abed8
GetModuleHandleExW 0x1800abee8
GetModuleHandleW 0x1800abec8
GetProcAddress 0x1800abef8
LoadLibraryExW 0x1800abef0
FormatMessageW 0x1800abf08
VirtualAlloc 0x1800abf28
VirtualProtect 0x1800abf18
VirtualQuery 0x1800abf20
GetPrivateProfileStringW 0x1800abf38
ExpandEnvironmentStringsW 0x1800abf50
GetEnvironmentVariableW 0x1800abf48
CreateThread 0x1800abf88
GetCurrentProcess 0x1800abfa8
GetCurrentProcessId 0x1800abf68
GetCurrentThreadId 0x1800abfb0
SetProcessShutdownParameters 0x1800abf98
SetThreadStackGuarantee 0x1800abf60
TerminateProcess 0x1800abf78
TlsAlloc 0x1800abf90
TlsFree 0x1800abfa0
TlsGetValue 0x1800abf80
TlsSetValue 0x1800abf70
GetProcessMitigationPolicy 0x1800abfd0
IsProcessorFeaturePresent 0x1800abfc8
OpenProcess 0x1800abfc0
QueryPerformanceCounter 0x1800abfe0
QueryFullProcessImageNameW 0x1800abff0
RegCloseKey 0x1800ac010
RegCreateKeyExA 0x1800ac060
RegCreateKeyExW 0x1800ac000
RegDeleteKeyExA 0x1800ac058
RegEnumValueW 0x1800ac030
RegGetValueW 0x1800ac028
RegLoadKeyW 0x1800ac040
RegNotifyChangeKeyValue 0x1800ac018
RegOpenKeyExA 0x1800ac048
RegOpenKeyExW 0x1800ac078
RegQueryInfoKeyA 0x1800ac050
RegQueryInfoKeyW 0x1800ac070
RegQueryValueExA 0x1800ac080
RegQueryValueExW 0x1800ac038
RegSetValueExA 0x1800ac020
RegSetValueExW 0x1800ac068
RegUnLoadKeyW 0x1800ac008
RtlCaptureContext 0x1800ac090
RtlCompareMemory 0x1800ac098
RtlLookupFunctionEntry 0x1800ac0a8
RtlVirtualUnwind 0x1800ac0a0
CompareStringEx 0x1800ac0b8
CompareStringW 0x1800ac0c0
GetStringTypeW 0x1800ac0c8
AcquireSRWLockExclusive 0x1800ac100
AcquireSRWLockShared 0x1800ac120
CreateEventW 0x1800ac160
CreateMutexExW 0x1800ac0f8
CreateSemaphoreExW 0x1800ac110
DeleteCriticalSection 0x1800ac128
EnterCriticalSection 0x1800ac170
InitializeCriticalSection 0x1800ac130
InitializeCriticalSectionEx 0x1800ac0f0
InitializeSRWLock 0x1800ac148
LeaveCriticalSection 0x1800ac150
OpenSemaphoreW 0x1800ac108
ReleaseMutex 0x1800ac158
ReleaseSemaphore 0x1800ac118
ReleaseSRWLockExclusive 0x1800ac168
ReleaseSRWLockShared 0x1800ac140
SleepEx 0x1800ac178
WaitForSingleObject 0x1800ac0e8
WaitForSingleObjectEx 0x1800ac138
InitOnceExecuteOnce 0x1800ac190
Sleep 0x1800ac188
GetComputerNameExW 0x1800ac1a8
GetLocalTime 0x1800ac1c8
GetSystemDirectoryW 0x1800ac1c0
GetSystemInfo 0x1800ac1e0
GetSystemTimeAsFileTime 0x1800ac1d8
GetTickCount 0x1800ac1b8
GetTickCount64 0x1800ac1a0
GetVersionExW 0x1800ac1b0
GetWindowsDirectoryW 0x1800ac1d0
VerSetConditionMask 0x1800ac1f0
CloseThreadpoolTimer 0x1800ac200
CloseThreadpoolWork 0x1800ac228
CreateThreadpoolTimer 0x1800ac210
CreateThreadpoolWork 0x1800ac218
SetThreadpoolTimer 0x1800ac208
SubmitThreadpoolWork 0x1800ac220
WaitForThreadpoolTimerCallbacks 0x1800ac230
FileTimeToSystemTime 0x1800ac240
GetTimeZoneInformation 0x1800ac248
__C_specific_handler 0x1800ac370
__CxxFrameHandler3 0x1800ac300
_CxxThrowException 0x1800ac2f8
_o___std_exception_copy 0x1800ac360
_o___std_exception_destroy 0x1800ac358
_o___std_type_info_destroy_list 0x1800ac350
_o___stdio_common_vsprintf 0x1800ac348
_o___stdio_common_vswprintf 0x1800ac340
_o___stdio_common_vswprintf_s 0x1800ac338
_o__callnewh 0x1800ac330
_o__cexit 0x1800ac328
_o__configure_narrow_argv 0x1800ac320
_o__crt_atexit 0x1800ac318
_o__errno 0x1800ac310
_o__execute_onexit_table 0x1800ac308
_o__initialize_narrow_environment 0x1800ac258
_o__initialize_onexit_table 0x1800ac260
_o__invalid_parameter_noinfo 0x1800ac268
_o__purecall 0x1800ac270
_o__register_onexit_function 0x1800ac278
_o__seh_filter_dll 0x1800ac280
_o__ultow 0x1800ac288
_o__wcsicmp 0x1800ac290
_o__wcsnicmp 0x1800ac298
_o__wcsupr 0x1800ac2a0
_o__wtoi 0x1800ac2b0
_o_bsearch_s 0x1800ac2b8
_o_free 0x1800ac2c0
_o_malloc 0x1800ac2c8
_o_qsort_s 0x1800ac2d0
_o_wcscpy_s 0x1800ac2d8
_o_wcsncpy_s 0x1800ac2e0
_o_wcstok 0x1800ac2e8
_o_wcstoul 0x1800ac2f0
memcmp 0x1800ac378
memcpy 0x1800ac380
memmove 0x1800ac2a8
wcsstr 0x1800ac368
_initterm 0x1800ac398
_initterm_e 0x1800ac390
memset 0x1800ac3b8
wcscmp 0x1800ac3b0
wcscspn 0x1800ac3a8
GetTraceEnableFlags 0x1800ac3f0
GetTraceEnableLevel 0x1800ac3d8
GetTraceLoggerHandle 0x1800ac3e8
RegisterTraceGuidsW 0x1800ac3d0
TraceMessage 0x1800ac3e0
UnregisterTraceGuids 0x1800ac3c8
ControlTraceW 0x1800ac400
EnableTraceEx2 0x1800ac408
StartTraceW 0x1800ac410
EventWriteTransfer 0x1800ac420
CheckTokenMembership 0x1800ac468
EqualSid 0x1800ac430
GetLengthSid 0x1800ac458
GetSecurityDescriptorDacl 0x1800ac460
GetSecurityDescriptorLength 0x1800ac440
ImpersonateLoggedOnUser 0x1800ac450
IsValidSid 0x1800ac438
RevertToSelf 0x1800ac448
EnumerateIdentityProviders 0x1800ac490
GetIdentityProviderInfoByGUID 0x1800ac488
GetIdentityProviderInfoByName 0x1800ac478
ReleaseIdentityProviderEnumContext 0x1800ac480
NotifyServiceStatusChangeW 0x1800ac4a0
BCryptCloseAlgorithmProvider 0x1800ac4e0
BCryptCreateHash 0x1800ac500
BCryptDecrypt 0x1800ac4c0
BCryptDeriveKeyPBKDF2 0x1800ac510
BCryptDestroyHash 0x1800ac4e8
BCryptDestroyKey 0x1800ac518
BCryptEncrypt 0x1800ac4b0
BCryptFinishHash 0x1800ac4d8
BCryptGenerateSymmetricKey 0x1800ac508
BCryptGenRandom 0x1800ac4d0
BCryptGetProperty 0x1800ac4b8
BCryptHashData 0x1800ac4f0
BCryptOpenAlgorithmProvider 0x1800ac4c8
BCryptSetProperty 0x1800ac4f8
CertCloseStore 0x1800abc70
CertDuplicateCertificateContext 0x1800abc90
CertFindCertificateInStore 0x1800abc68
CertFindExtension 0x1800abc88
CertFreeCertificateContext 0x1800abc50
CertGetCertificateContextProperty 0x1800abc58
CertOpenStore 0x1800abc60
CryptBinaryToStringW 0x1800abc80
CryptDecodeObjectEx 0x1800abc78
LsaIAdtAuditingEnabledByCategory 0x1800abce8
LsaIAuditNotifyPackageLoad 0x1800abcc0
LsaIAuditSamEvent 0x1800abcd8
LsaIChangeSecretCipherKey 0x1800abd10
LsaIFree_LSAPR_POLICY_INFORMATION 0x1800abcd0
LsaIHealthCheck 0x1800abd18
LsaILookupWellKnownName 0x1800abd38
LsaINoConnectedUserPolicy 0x1800abcb8
LsaINotifyChangeNotification 0x1800abcb0
LsaIOpenPolicyTrusted 0x1800abcf0
LsaIQueryInformationPolicyTrusted 0x1800abca0
LsaIRegisterNotification 0x1800abd08
LsaIRegisterPolicyChangeNotificationCallback 0x1800abce0
LsaIRetrieveCurrentUserSid 0x1800abcf8
LsaISafeMode 0x1800abcc8
LsaISamIndicatedDsStarted 0x1800abca8
LsaISetNewSyskey 0x1800abd00
LsarClose 0x1800abd28
LsarQueryDomainInformationPolicy 0x1800abd30
LsarQueryInformationPolicy 0x1800abd40
LsarSetInformationPolicy 0x1800abd20
DbgPrint 0x1800ac798
EtwEventRegister 0x1800aca10
EtwEventUnregister 0x1800aca20
EtwEventWrite 0x1800aca18
EtwGetTraceEnableFlags 0x1800ac658
EtwGetTraceEnableLevel 0x1800ac540
EtwGetTraceLoggerHandle 0x1800ac528
EtwLogTraceEvent 0x1800ac608
EtwRegisterTraceGuidsW 0x1800ac548
EtwTraceMessage 0x1800ac9c8
EtwUnregisterTraceGuids 0x1800ac5f8
LdrGetProcedureAddress 0x1800ac6d0
LdrUnloadDll 0x1800ac6c0
NtAccessCheck 0x1800ac618
NtAccessCheckAndAuditAlarm 0x1800ac728
NtAdjustPrivilegesToken 0x1800ac550
NtAllocateLocallyUniqueId 0x1800ac530
NtClose 0x1800ac958
NtCloseObjectAuditAlarm 0x1800ac770
NtCreateEvent 0x1800ac9e8
NtCreateToken 0x1800ac7f8
NtDelayExecution 0x1800ac978
NtDeleteKey 0x1800ac5e0
NtDeleteObjectAuditAlarm 0x1800ac570
NtDeleteValueKey 0x1800ac648
NtDuplicateObject 0x1800ac690
NtEnumerateKey 0x1800ac5c8
NtFlushKey 0x1800ac838
NtImpersonateAnonymousToken 0x1800ac750
NtOpenKey 0x1800ac5c0
NtOpenProcess 0x1800ac6b8
NtOpenProcessToken 0x1800ac538
NtOpenThread 0x1800ac808
NtOpenThreadToken 0x1800ac5d8
NtPrivilegeCheck 0x1800ac5d0
NtPrivilegedServiceAuditAlarm 0x1800ac968
NtQueryInformationToken 0x1800ac708
NtQueryKey 0x1800ac5e8
NtQueryObject 0x1800ac9f0
NtQuerySystemTime 0x1800ac8f8
NtQueryValueKey 0x1800ac8c0
NtRaiseHardError 0x1800ac588
NtRestoreKey 0x1800ac9f8
NtSetEvent 0x1800ac670
NtSetInformationThread 0x1800ac830
NtSetValueKey 0x1800ac590
RtlAbortRXact 0x1800ac6f8
RtlAbsoluteToSelfRelativeSD 0x1800ac818
RtlAcquireResourceExclusive 0x1800ac680
RtlAcquireResourceShared 0x1800ac6a8
RtlAddAccessAllowedAce 0x1800ac820
RtlAddAccessDeniedAce 0x1800ac598
RtlAddAce 0x1800ac5b0
RtlAddActionToRXact 0x1800ac9b0
RtlAddAttributeActionToRXact 0x1800ac8c8
RtlAddAuditAccessAce 0x1800ac7d8
RtlAdjustPrivilege 0x1800ac5a8
RtlAllocateAndInitializeSid 0x1800ac5b8
RtlAllocateHeap 0x1800ac8e0
RtlAnsiStringToUnicodeString 0x1800ac6c8
RtlAppendUnicodeStringToString 0x1800ac890
RtlAppendUnicodeToString 0x1800ac870
RtlApplyRXactNoFlush 0x1800ac790
RtlAreAllAccessesGranted 0x1800ac760
RtlCheckTokenCapability 0x1800ac7b0
RtlCheckTokenMembershipEx 0x1800ac9d8
RtlClearAllBits 0x1800ac8b8
RtlCompareString 0x1800ac678
RtlCompareUnicodeString 0x1800ac9d0
RtlCompareUnicodeStrings 0x1800ac910
RtlConvertSidToUnicodeString 0x1800ac858
RtlCopySecurityDescriptor 0x1800ac638
RtlCopySid 0x1800ac940
RtlCopyUnicodeString 0x1800ac928
RtlCreateAcl 0x1800ac7d0
RtlCreateAndSetSD 0x1800ac730
RtlCreateSecurityDescriptor 0x1800ac7c0
RtlCreateUnicodeString 0x1800ac710
RtlCreateUnicodeStringFromAsciiz 0x1800aca00
RtlDecompressBufferEx 0x1800ac778
RtlDeleteResource 0x1800ac6b0
RtlDeleteSecurityObject 0x1800ac720
RtlDnsHostNameToComputerName 0x1800ac578
RtlDuplicateUnicodeString 0x1800ac718
RtlEnterCriticalSection 0x1800ac918
RtlEqualComputerName 0x1800ac7b8
RtlEqualDomainName 0x1800ac908
RtlEqualSid 0x1800ac938
RtlEqualUnicodeString 0x1800ac758
RtlFindMessage 0x1800ac810
RtlFreeAnsiString 0x1800ac580
RtlFreeHeap 0x1800ac8d8
RtlFreeSid 0x1800ac5f0
RtlFreeUnicodeString 0x1800ac848
RtlGetAce 0x1800ac850
RtlGetCompressionWorkSpaceSize 0x1800ac780
RtlGetDaclSecurityDescriptor 0x1800ac788
RtlGetGroupSecurityDescriptor 0x1800ac9a0
RtlGetNtProductType 0x1800ac840
RtlGetOwnerSecurityDescriptor 0x1800ac660
RtlGetProductInfo 0x1800ac600
RtlGetSaclSecurityDescriptor 0x1800ac640
RtlGetSuiteMask 0x1800ac950
RtlIdentifierAuthoritySid 0x1800ac700
RtlImageNtHeader 0x1800ac7a8
RtlInitializeBitMap 0x1800ac768
RtlInitializeCriticalSection 0x1800ac6f0
RtlInitializeCriticalSectionAndSpinCount 0x1800ac930
RtlInitializeGenericTableAvl 0x1800ac988
RtlInitializeResource 0x1800ac688
RtlInitializeRXact 0x1800ac8a8
RtlInitializeSid 0x1800ac898
RtlInitString 0x1800ac748
RtlInitUnicodeString 0x1800ac9c0
RtlInitUnicodeStringEx 0x1800ac698
RtlInsertElementGenericTableAvl 0x1800ac990
RtlIntegerToUnicodeString 0x1800ac8e8
RtlIsMultiSessionSku 0x1800ac740
RtlLeaveCriticalSection 0x1800ac900
RtlLengthRequiredSid 0x1800ac920
RtlLengthSecurityDescriptor 0x1800ac620
RtlLengthSid 0x1800ac960
RtlLookupElementGenericTableAvl 0x1800ac998
RtlMakeSelfRelativeSD 0x1800ac628
RtlMapGenericMask 0x1800ac880
RtlNtStatusToDosError 0x1800ac6e0
RtlNtStatusToDosErrorNoTeb 0x1800ac568
RtlOemStringToUnicodeString 0x1800ac800
RtlpNtCreateKey 0x1800ac888
RtlpNtEnumerateSubKey 0x1800ac738
RtlpNtOpenKey 0x1800ac980
RtlpNtQueryValueKey 0x1800ac948
RtlpNtSetValueKey 0x1800ac860
RtlQueryInformationAcl 0x1800ac650
RtlQueryRegistryValuesEx 0x1800ac6d8
RtlReleaseResource 0x1800ac6a0
RtlSetAllBits 0x1800ac8f0
RtlSetBits 0x1800ac8d0
RtlSetDaclSecurityDescriptor 0x1800ac868
RtlSetGroupSecurityDescriptor 0x1800ac7c8
RtlSetOwnerSecurityDescriptor 0x1800ac8a0
RtlSetSaclSecurityDescriptor 0x1800ac8b0
RtlSetSecurityObject 0x1800ac5a0
RtlStartRXact 0x1800ac7e0
RtlStringFromGUID 0x1800ac9a8
RtlSubAuthorityCountSid 0x1800ac828
RtlSubAuthoritySid 0x1800ac878
RtlSubscribeWnfStateChangeNotification 0x1800ac560
RtlTimeToTimeFields 0x1800ac6e8
RtlUnicodeStringToAnsiString 0x1800ac7e8
RtlUnicodeStringToInteger 0x1800ac9b8
RtlUnicodeToOemN 0x1800aca08
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800ac558
RtlUpcaseUnicodeStringToOemString 0x1800ac7f0
RtlValidAcl 0x1800ac610
RtlValidateUnicodeString 0x1800ac668
RtlValidRelativeSecurityDescriptor 0x1800ac630
RtlValidSid 0x1800ac9e0
RtlVerifyVersionInfo 0x1800ac970
RtlxUnicodeStringToOemSize 0x1800aca28
wcsncmp 0x1800ac7a0