winsta.dll

Description: Winstation Library

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: a4dcc89d9580aa16c05eee6225e6f95c

File Size: 373.8 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 10

Exported Functions

  • WinStationRegisterConsoleNotificationEx2 (Ordinal: 1, Address: 0x1d2e0)
  • LogonIdFromWinStationNameA (Ordinal: 2, Address: 0x2d320)
  • LogonIdFromWinStationNameW (Ordinal: 3, Address: 0x206f0)
  • RemoteAssistancePrepareSystemRestore (Ordinal: 4, Address: 0x2d360)
  • ServerGetInternetConnectorStatus (Ordinal: 5, Address: 0x2d3a0)
  • ServerLicensingClose (Ordinal: 6, Address: 0x2c5d0)
  • ServerLicensingDeactivateCurrentPolicy (Ordinal: 7, Address: 0x2c650)
  • ServerLicensingFreePolicyInformation (Ordinal: 8, Address: 0x2c720)
  • ServerLicensingGetAadInfo (Ordinal: 9, Address: 0x2c780)
  • ServerLicensingGetAvailablePolicyIds (Ordinal: 10, Address: 0x2c8a0)
  • ServerLicensingGetPolicy (Ordinal: 11, Address: 0x2c9b0)
  • ServerLicensingGetPolicyInformationA (Ordinal: 12, Address: 0x2caa0)
  • ServerLicensingGetPolicyInformationW (Ordinal: 13, Address: 0x2cb10)
  • ServerLicensingLoadPolicy (Ordinal: 14, Address: 0x2cc90)
  • ServerLicensingOpenA (Ordinal: 15, Address: 0x2ccc0)
  • ServerLicensingOpenW (Ordinal: 16, Address: 0x2cd00)
  • ServerLicensingSetAadInfo (Ordinal: 17, Address: 0x2ce60)
  • ServerLicensingSetPolicy (Ordinal: 18, Address: 0x2cf70)
  • ServerLicensingUnloadPolicy (Ordinal: 19, Address: 0x2cc90)
  • ServerQueryInetConnectorInformationA (Ordinal: 20, Address: 0x2d3e0)
  • ServerQueryInetConnectorInformationW (Ordinal: 21, Address: 0x2d420)
  • ServerSetInternetConnectorStatus (Ordinal: 22, Address: 0x2d460)
  • WTSRegisterSessionNotificationEx (Ordinal: 23, Address: 0x30530)
  • WTSUnRegisterSessionNotificationEx (Ordinal: 24, Address: 0x305d0)
  • WinStationActivateLicense (Ordinal: 25, Address: 0x2d4a0)
  • WinStationAutoReconnect (Ordinal: 26, Address: 0x2d4e0)
  • WinStationBroadcastSystemMessage (Ordinal: 27, Address: 0x1df00)
  • WinStationCheckAccess (Ordinal: 28, Address: 0x2d520)
  • WinStationCheckLoopBack (Ordinal: 29, Address: 0x2d560)
  • WinStationCloseServer (Ordinal: 30, Address: 0x19010)
  • WinStationConnectA (Ordinal: 31, Address: 0x2d5a0)
  • WinStationConnectAndLockDesktop (Ordinal: 32, Address: 0x1a010)
  • WinStationConnectCallback (Ordinal: 33, Address: 0x2d5e0)
  • WinStationConnectEx (Ordinal: 34, Address: 0x2d620)
  • WinStationConnectW (Ordinal: 35, Address: 0x1a160)
  • WinStationConsumeCacheSession (Ordinal: 36, Address: 0x1ea00)
  • WinStationCreateChildSessionTransport (Ordinal: 37, Address: 0x1e200)
  • WinStationDisconnect (Ordinal: 38, Address: 0xa9d0)
  • WinStationEnableChildSessions (Ordinal: 39, Address: 0x1a2d0)
  • WinStationEnumerateA (Ordinal: 40, Address: 0x1a3e0)
  • WinStationEnumerateContainerSessions (Ordinal: 41, Address: 0x1a4e0)
  • WinStationEnumerateExW (Ordinal: 42, Address: 0x20a90)
  • WinStationEnumerateLicenses (Ordinal: 43, Address: 0x2d660)
  • WinStationEnumerateProcesses (Ordinal: 44, Address: 0x1a600)
  • WinStationEnumerateW (Ordinal: 45, Address: 0x51b0)
  • WinStationEnumerate_IndexedA (Ordinal: 46, Address: 0x2d6a0)
  • WinStationEnumerate_IndexedW (Ordinal: 47, Address: 0x2d6e0)
  • WinStationFreeConsoleNotification (Ordinal: 48, Address: 0x1d2f0)
  • WinStationFreeEXECENVDATAEX (Ordinal: 49, Address: 0x9f30)
  • WinStationFreeGAPMemory (Ordinal: 50, Address: 0x1a6c0)
  • WinStationFreeMemory (Ordinal: 51, Address: 0xa050)
  • WinStationFreePropertyValue (Ordinal: 52, Address: 0x1a700)
  • WinStationFreeUserCertificates (Ordinal: 53, Address: 0x1a780)
  • WinStationFreeUserCredentials (Ordinal: 54, Address: 0x1eb30)
  • WinStationFreeUserSessionInfo (Ordinal: 55, Address: 0x11d0)
  • WinStationGenerateLicense (Ordinal: 56, Address: 0x2d720)
  • WinStationGetAllProcesses (Ordinal: 57, Address: 0x1a7d0)
  • WinStationGetAllSessionsEx (Ordinal: 58, Address: 0x42d0)
  • WinStationGetAllSessionsW (Ordinal: 59, Address: 0x20d70)
  • WinStationGetAllUserSessions (Ordinal: 60, Address: 0x3390)
  • WinStationGetChildSessionId (Ordinal: 61, Address: 0x1a940)
  • WinStationGetConnectionProperty (Ordinal: 62, Address: 0x32c0)
  • WinStationGetCurrentSessionCapabilities (Ordinal: 63, Address: 0x1f60)
  • WinStationGetCurrentSessionConnectionProperty (Ordinal: 64, Address: 0x1aa60)
  • WinStationGetCurrentSessionTerminalName (Ordinal: 65, Address: 0x1210)
  • WinStationGetDeviceId (Ordinal: 66, Address: 0x1ab80)
  • WinStationGetInitialApplication (Ordinal: 67, Address: 0x1acf0)
  • WinStationGetLanAdapterNameA (Ordinal: 68, Address: 0x2d760)
  • WinStationGetLanAdapterNameW (Ordinal: 69, Address: 0x2d7a0)
  • WinStationGetLastWinlogonNotification (Ordinal: 70, Address: 0x1eb90)
  • WinStationGetLoggedOnCount (Ordinal: 71, Address: 0x1ae70)
  • WinStationGetMachinePolicy (Ordinal: 72, Address: 0x2d7e0)
  • WinStationGetParentSessionId (Ordinal: 73, Address: 0x1afa0)
  • WinStationGetProcessSid (Ordinal: 74, Address: 0x1b0f0)
  • WinStationGetRedirectAuthInfo (Ordinal: 75, Address: 0x1ed20)
  • WinStationGetRestrictedLogonInfo (Ordinal: 76, Address: 0x1ee70)
  • WinStationGetSessionIds (Ordinal: 77, Address: 0x1b1a0)
  • WinStationGetTermSrvCountersValue (Ordinal: 78, Address: 0x1b340)
  • WinStationGetUserCertificates (Ordinal: 79, Address: 0x1b4c0)
  • WinStationGetUserCredentials (Ordinal: 80, Address: 0x1efc0)
  • WinStationGetUserProfile (Ordinal: 81, Address: 0x1f240)
  • WinStationInstallLicense (Ordinal: 82, Address: 0x2d820)
  • WinStationIsBoundToCacheTerminal (Ordinal: 83, Address: 0x1f380)
  • WinStationIsChildSessionsEnabled (Ordinal: 84, Address: 0x1b710)
  • WinStationIsCurrentSessionRemoteable (Ordinal: 85, Address: 0x43f0)
  • WinStationIsHelpAssistantSession (Ordinal: 86, Address: 0x1f4b0)
  • WinStationIsSessionPermitted (Ordinal: 87, Address: 0xb330)
  • WinStationIsSessionRemoteable (Ordinal: 88, Address: 0x3f90)
  • WinStationNameFromLogonIdA (Ordinal: 89, Address: 0x2d860)
  • WinStationNameFromLogonIdW (Ordinal: 90, Address: 0x5a00)
  • WinStationNegotiateSession (Ordinal: 91, Address: 0xb5a0)
  • WinStationNtsdDebug (Ordinal: 92, Address: 0x2d8a0)
  • WinStationOpenServerA (Ordinal: 93, Address: 0x19040)
  • WinStationOpenServerExA (Ordinal: 94, Address: 0x19170)
  • WinStationOpenServerExW (Ordinal: 95, Address: 0x192a0)
  • WinStationOpenServerW (Ordinal: 96, Address: 0x19340)
  • WinStationPreCreateGlassReplacementSession (Ordinal: 97, Address: 0xaa60)
  • WinStationPreCreateGlassReplacementSessionEx (Ordinal: 98, Address: 0xaa80)
  • WinStationQueryAllowConcurrentConnections (Ordinal: 99, Address: 0x2d8e0)
  • WinStationQueryCurrentSessionInformation (Ordinal: 100, Address: 0x9810)
  • WinStationQueryEnforcementCore (Ordinal: 101, Address: 0x2d050)
  • WinStationQueryInformationA (Ordinal: 102, Address: 0x2d920)
  • WinStationQueryInformationW (Ordinal: 103, Address: 0x7e90)
  • WinStationQueryLicense (Ordinal: 104, Address: 0x2d960)
  • WinStationQueryLogonCredentialsW (Ordinal: 105, Address: 0x2d9a0)
  • WinStationQuerySessionVirtualIP (Ordinal: 106, Address: 0x30680)
  • WinStationQueryUpdateRequired (Ordinal: 107, Address: 0x2d9e0)
  • WinStationRcmShadow2 (Ordinal: 108, Address: 0x1b850)
  • WinStationRedirectErrorMessage (Ordinal: 109, Address: 0x1f4f0)
  • WinStationRedirectLogonBeginPainting (Ordinal: 110, Address: 0x1f5f0)
  • WinStationRedirectLogonError (Ordinal: 111, Address: 0x1f6f0)
  • WinStationRedirectLogonMessage (Ordinal: 112, Address: 0x1f850)
  • WinStationRedirectLogonStatus (Ordinal: 113, Address: 0x1f9a0)
  • WinStationRegisterConsoleNotification (Ordinal: 114, Address: 0x23a0)
  • WinStationRegisterConsoleNotificationEx (Ordinal: 115, Address: 0x1d330)
  • WinStationRegisterCurrentSessionNotificationEvent (Ordinal: 116, Address: 0x1760)
  • WinStationRegisterNotificationEvent (Ordinal: 117, Address: 0x1d350)
  • WinStationRemoveLicense (Ordinal: 118, Address: 0x2da20)
  • WinStationRenameA (Ordinal: 119, Address: 0x2da60)
  • WinStationRenameW (Ordinal: 120, Address: 0x2daa0)
  • WinStationReportLoggedOnCompleted (Ordinal: 121, Address: 0x1fad0)
  • WinStationReportUIResult (Ordinal: 122, Address: 0x1fc10)
  • WinStationReset (Ordinal: 123, Address: 0x1b9d0)
  • WinStationRevertFromServicesSession (Ordinal: 124, Address: 0x1bac0)
  • WinStationSendMessageA (Ordinal: 125, Address: 0x1bbc0)
  • WinStationSendMessageW (Ordinal: 126, Address: 0x1bd60)
  • WinStationSendWindowMessage (Ordinal: 127, Address: 0xad90)
  • WinStationServerPing (Ordinal: 128, Address: 0x2d250)
  • WinStationSetAutologonPassword (Ordinal: 129, Address: 0x1e2f0)
  • WinStationSetInformationA (Ordinal: 130, Address: 0x2dae0)
  • WinStationSetInformationW (Ordinal: 131, Address: 0x1c090)
  • WinStationSetLastWinlogonNotification (Ordinal: 132, Address: 0x3930)
  • WinStationSetPoolCount (Ordinal: 133, Address: 0x2db20)
  • WinStationSetRenderHint (Ordinal: 134, Address: 0x30830)
  • WinStationShadow (Ordinal: 135, Address: 0x1c200)
  • WinStationShadowAccessCheck (Ordinal: 136, Address: 0x1c3b0)
  • WinStationShadowStop (Ordinal: 137, Address: 0x1c500)
  • WinStationShadowStop2 (Ordinal: 138, Address: 0x1c680)
  • WinStationShutdownSystem (Ordinal: 139, Address: 0x1c7b0)
  • WinStationSwitchToServicesSession (Ordinal: 140, Address: 0x1c7c0)
  • WinStationSystemShutdownStarted (Ordinal: 141, Address: 0x1fd10)
  • WinStationSystemShutdownWait (Ordinal: 142, Address: 0x1fe40)
  • WinStationTerminateGlassReplacementSession (Ordinal: 143, Address: 0x1ff30)
  • WinStationTerminateProcess (Ordinal: 144, Address: 0x1c8c0)
  • WinStationUnRegisterConsoleNotification (Ordinal: 145, Address: 0x1e30)
  • WinStationUnRegisterNotificationEvent (Ordinal: 146, Address: 0x16d0)
  • WinStationUserLoginAccessCheck (Ordinal: 147, Address: 0x200b0)
  • WinStationVerify (Ordinal: 148, Address: 0x1ca50)
  • WinStationVirtualOpen (Ordinal: 149, Address: 0x1cbc0)
  • WinStationVirtualOpenEx (Ordinal: 150, Address: 0xafe0)
  • WinStationWaitSystemEvent (Ordinal: 151, Address: 0x1d380)
  • _NWLogonQueryAdmin (Ordinal: 152, Address: 0x2db60)
  • _NWLogonSetAdmin (Ordinal: 153, Address: 0x2dba0)
  • _WinStationAnnoyancePopup (Ordinal: 154, Address: 0x2dbe0)
  • _WinStationBeepOpen (Ordinal: 155, Address: 0x1cc70)
  • _WinStationBreakPoint (Ordinal: 156, Address: 0x2dc20)
  • _WinStationCallback (Ordinal: 157, Address: 0x2dc60)
  • _WinStationCheckForApplicationName (Ordinal: 158, Address: 0x2dca0)
  • _WinStationFUSCanRemoteUserDisconnect (Ordinal: 159, Address: 0x2dce0)
  • _WinStationGetApplicationInfo (Ordinal: 160, Address: 0x2dd20)
  • _WinStationNotifyDisconnectPipe (Ordinal: 161, Address: 0x2dd60)
  • _WinStationNotifyLogoff (Ordinal: 162, Address: 0x2dda0)
  • _WinStationNotifyLogon (Ordinal: 163, Address: 0x2dde0)
  • _WinStationNotifyNewSession (Ordinal: 164, Address: 0x2de20)
  • _WinStationOpenSessionDirectory (Ordinal: 165, Address: 0x2de60)
  • _WinStationReInitializeSecurity (Ordinal: 166, Address: 0x2dea0)
  • _WinStationReadRegistry (Ordinal: 167, Address: 0x1d040)
  • _WinStationSessionInitialized (Ordinal: 168, Address: 0x1d040)
  • _WinStationShadowTarget (Ordinal: 169, Address: 0x1ccc0)
  • _WinStationShadowTarget2 (Ordinal: 170, Address: 0x1cd30)
  • _WinStationShadowTargetSetup (Ordinal: 171, Address: 0x1d040)
  • _WinStationUpdateClientCachedCredentials (Ordinal: 172, Address: 0x2dee0)
  • _WinStationUpdateSettings (Ordinal: 173, Address: 0x2df20)
  • _WinStationUpdateUserConfig (Ordinal: 174, Address: 0x2df60)
  • _WinStationWaitForConnect (Ordinal: 175, Address: 0xb440)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18003fd60)
  • IsDebuggerPresent (Address: 0x18003fd70)
  • OutputDebugStringA (Address: 0x18003fd68)
  • OutputDebugStringW (Address: 0x18003fd58)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18003fd80)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18003fd90)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18003fda0)
  • SetLastError (Address: 0x18003fdb8)
  • SetUnhandledExceptionFilter (Address: 0x18003fdb0)
  • UnhandledExceptionFilter (Address: 0x18003fda8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18003fdd0)
  • DuplicateHandle (Address: 0x18003fdc8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18003fdf0)
  • HeapAlloc (Address: 0x18003fde8)
  • HeapFree (Address: 0x18003fde0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18003fe00)
  • LocalFree (Address: 0x18003fe08)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetComputerNameW (Address: 0x18003fe18)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18003fe58)
  • FreeLibrary (Address: 0x18003fe50)
  • GetModuleFileNameA (Address: 0x18003fe28)
  • GetModuleFileNameW (Address: 0x18003fe38)
  • GetModuleHandleExA (Address: 0x18003fe30)
  • GetModuleHandleExW (Address: 0x18003fe68)
  • GetModuleHandleW (Address: 0x18003fe60)
  • GetProcAddress (Address: 0x18003fe48)
  • LoadLibraryExW (Address: 0x18003fe40)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18003fe78)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18003fe88)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x18003fec8)
  • GetCurrentProcess (Address: 0x18003fee0)
  • GetCurrentProcessId (Address: 0x18003fea0)
  • GetCurrentThread (Address: 0x18003feb8)
  • GetCurrentThreadId (Address: 0x18003fed8)
  • GetExitCodeThread (Address: 0x18003fec0)
  • OpenProcessToken (Address: 0x18003feb0)
  • OpenThreadToken (Address: 0x18003fe98)
  • ProcessIdToSessionId (Address: 0x18003fea8)
  • TerminateProcess (Address: 0x18003fed0)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x18003fef0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18003ff00)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18003ff20)
  • RegOpenKeyExW (Address: 0x18003ff18)
  • RegQueryValueExW (Address: 0x18003ff10)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18003ff38)
  • AcquireSRWLockShared (Address: 0x18003ff70)
  • CreateEventW (Address: 0x18003ff80)
  • CreateMutexExW (Address: 0x18003ffa0)
  • CreateSemaphoreExW (Address: 0x18003ff60)
  • DeleteCriticalSection (Address: 0x18003ff90)
  • EnterCriticalSection (Address: 0x18003ff88)
  • InitializeCriticalSection (Address: 0x18003ff98)
  • InitializeCriticalSectionEx (Address: 0x18003ff48)
  • LeaveCriticalSection (Address: 0x18003ff50)
  • OpenEventW (Address: 0x18003ffb8)
  • OpenSemaphoreW (Address: 0x18003ffb0)
  • ReleaseMutex (Address: 0x18003ffc0)
  • ReleaseSemaphore (Address: 0x18003ff58)
  • ReleaseSRWLockExclusive (Address: 0x18003ff30)
  • ReleaseSRWLockShared (Address: 0x18003ff68)
  • SetEvent (Address: 0x18003ffa8)
  • WaitForSingleObject (Address: 0x18003ff78)
  • WaitForSingleObjectEx (Address: 0x18003ff40)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x18003ffd0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18003ffe8)
  • GetTickCount (Address: 0x18003ffe0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180040008)
  • CreateThreadpoolTimer (Address: 0x18003fff8)
  • SetThreadpoolTimer (Address: 0x180040000)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180040010)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • QueueUserWorkItem (Address: 0x180040020)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x180040030)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180040058)
  • EventSetInformation (Address: 0x180040040)
  • EventUnregister (Address: 0x180040048)
  • EventWriteTransfer (Address: 0x180040050)
KERNELBASE.dll
  • WTSGetServiceSessionId (Address: 0x18003fd48)
msvcrt.dll
  • __C_specific_handler (Address: 0x180040188)
  • __CxxFrameHandler3 (Address: 0x180040160)
  • __dllonexit (Address: 0x180040138)
  • _amsg_exit (Address: 0x1800400e8)
  • _callnewh (Address: 0x1800400b0)
  • _CxxThrowException (Address: 0x180040080)
  • _initterm (Address: 0x180040168)
  • _lock (Address: 0x180040158)
  • _onexit (Address: 0x180040130)
  • _purecall (Address: 0x1800400d8)
  • _resetstkoflw (Address: 0x180040178)
  • _strnicmp (Address: 0x1800400f0)
  • _unlock (Address: 0x180040150)
  • _vsnprintf (Address: 0x180040100)
  • _vsnwprintf (Address: 0x180040140)
  • _wcsicmp (Address: 0x180040098)
  • _XcptFilter (Address: 0x180040148)
  • ??_V@YAXPEAX@Z (Address: 0x180040170)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800400a0)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180040090)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180040088)
  • ??1exception@@UEAA@XZ (Address: 0x180040070)
  • ??1type_info@@UEAA@XZ (Address: 0x1800400a8)
  • ??3@YAXPEAX@Z (Address: 0x180040118)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180040068)
  • free (Address: 0x180040108)
  • malloc (Address: 0x180040110)
  • memcmp (Address: 0x180040120)
  • memcpy (Address: 0x1800400c0)
  • memcpy_s (Address: 0x180040180)
  • memmove (Address: 0x180040078)
  • memmove_s (Address: 0x1800400e0)
  • memset (Address: 0x180040128)
  • rand (Address: 0x1800400b8)
  • srand (Address: 0x1800400d0)
  • time (Address: 0x1800400c8)
  • wcscmp (Address: 0x1800400f8)
ntdll.dll
  • EtwEventUnregister (Address: 0x1800401f8)
  • NtClose (Address: 0x180040220)
  • NtOpenProcess (Address: 0x180040238)
  • NtOpenProcessToken (Address: 0x180040260)
  • NtQueryInformationProcess (Address: 0x180040240)
  • NtQueryInformationToken (Address: 0x180040230)
  • NtQuerySystemInformation (Address: 0x180040250)
  • NtQuerySystemTime (Address: 0x180040258)
  • NtTerminateProcess (Address: 0x180040200)
  • RtlAdjustPrivilege (Address: 0x180040218)
  • RtlAllocateAndInitializeSid (Address: 0x1800401a8)
  • RtlCaptureContext (Address: 0x1800401c0)
  • RtlCaptureStackBackTrace (Address: 0x1800401a0)
  • RtlCopySid (Address: 0x180040210)
  • RtlDeleteCriticalSection (Address: 0x1800401f0)
  • RtlEnterCriticalSection (Address: 0x1800401e8)
  • RtlFreeSid (Address: 0x180040198)
  • RtlGetSuiteMask (Address: 0x1800401d0)
  • RtlInitializeCriticalSection (Address: 0x1800401d8)
  • RtlLeaveCriticalSection (Address: 0x1800401c8)
  • RtlLengthSid (Address: 0x180040228)
  • RtlLookupFunctionEntry (Address: 0x1800401b8)
  • RtlMultiByteToUnicodeN (Address: 0x180040270)
  • RtlNtStatusToDosError (Address: 0x180040208)
  • RtlUnicodeToMultiByteN (Address: 0x180040248)
  • RtlUnicodeToMultiByteSize (Address: 0x1800401e0)
  • RtlValidSid (Address: 0x180040268)
  • RtlVirtualUnwind (Address: 0x1800401b0)