adrclient.dll

Description: Microsoft® Access Denied Remediation Client

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7e3ba04edc4ee6c37bb9c7133369abe7

File Size: 98.0 KB

Uploaded At: Dec. 1, 2025, 7:52 a.m.

Views: 5

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x3ab0)
  • DllGetClassObject (Ordinal: 2, Address: 0x3ad0)
  • DllRegisterServer (Ordinal: 3, Address: 0x3af0)
  • DllUnregisterServer (Ordinal: 4, Address: 0x3b00)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x100170b8)
  • CoTaskMemAlloc (Address: 0x100170bc)
  • CoTaskMemFree (Address: 0x100170b0)
  • CoTaskMemRealloc (Address: 0x100170b4)
api-ms-win-core-debug-l1-1-0.dll
  • OutputDebugStringA (Address: 0x100170c4)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100170cc)
  • SetLastError (Address: 0x100170d0)
  • SetUnhandledExceptionFilter (Address: 0x100170d4)
  • UnhandledExceptionFilter (Address: 0x100170d8)
api-ms-win-core-file-l1-1-0.dll
  • GetDriveTypeW (Address: 0x100170e0)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x100170e8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100170f0)
api-ms-win-core-heap-l1-1-0.dll
  • HeapDestroy (Address: 0x100170f8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x10017104)
  • LocalFree (Address: 0x10017100)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10017128)
  • FreeLibrary (Address: 0x10017120)
  • GetModuleFileNameW (Address: 0x10017114)
  • GetModuleHandleA (Address: 0x1001711c)
  • GetModuleHandleW (Address: 0x10017118)
  • GetProcAddress (Address: 0x10017124)
  • LoadLibraryExW (Address: 0x1001710c)
  • LoadStringW (Address: 0x10017110)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryA (Address: 0x10017130)
  • LoadLibraryW (Address: 0x10017134)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1001713c)
  • GetThreadLocale (Address: 0x10017140)
api-ms-win-core-processenvironment-l1-1-0.dll
  • GetCommandLineW (Address: 0x10017148)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x10017154)
  • GetCurrentProcess (Address: 0x10017168)
  • GetCurrentProcessId (Address: 0x1001715c)
  • GetCurrentThread (Address: 0x10017160)
  • GetCurrentThreadId (Address: 0x10017158)
  • OpenProcessToken (Address: 0x10017164)
  • OpenThreadToken (Address: 0x10017150)
  • TerminateProcess (Address: 0x1001716c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10017174)
api-ms-win-core-synch-l1-1-0.dll
  • DeleteCriticalSection (Address: 0x10017188)
  • EnterCriticalSection (Address: 0x10017180)
  • InitializeCriticalSection (Address: 0x1001717c)
  • LeaveCriticalSection (Address: 0x10017184)
  • WaitForSingleObject (Address: 0x1001718c)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x10017194)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1001719c)
  • GetTickCount (Address: 0x100171a0)
api-ms-win-eventlog-legacy-l1-1-0.dll
  • DeregisterEventSource (Address: 0x100171b0)
  • RegisterEventSourceW (Address: 0x100171ac)
  • ReportEventW (Address: 0x100171a8)
api-ms-win-security-base-l1-1-0.dll
  • CopySid (Address: 0x100171bc)
  • GetFileSecurityW (Address: 0x100171c4)
  • GetLengthSid (Address: 0x100171b8)
  • GetSecurityDescriptorOwner (Address: 0x100171c0)
  • GetTokenInformation (Address: 0x100171c8)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupAccountSidW (Address: 0x100171d0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x100171d8)
dfscli.dll
  • NetDfsGetClientInfo (Address: 0x100171e0)
DUI70.dll
  • ?_ZeroRelease@Value@DirectUI@@AAEXXZ (Address: 0x10017004)
  • ?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ (Address: 0x10017010)
  • ?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z (Address: 0x1001702c)
  • ?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z (Address: 0x10017024)
  • ?CreateString@Value@DirectUI@@SGPAV12@PBGPAUHINSTANCE__@@@Z (Address: 0x1001700c)
  • ?Destroy@DUIXmlParser@DirectUI@@QAEXXZ (Address: 0x1001701c)
  • ?EndDefer@Element@DirectUI@@QAEXK@Z (Address: 0x10017014)
  • ?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z (Address: 0x10017038)
  • ?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z (Address: 0x10017018)
  • ?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z (Address: 0x10017008)
  • ?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z (Address: 0x10017028)
  • CreateDUIWrapper (Address: 0x10017020)
  • InitProcessPriv (Address: 0x10017040)
  • InitThread (Address: 0x10017030)
  • StrToID (Address: 0x10017034)
  • UnInitProcessPriv (Address: 0x1001703c)
  • UnInitThread (Address: 0x10017000)
mi.dll
  • MI_Application_InitializeV1 (Address: 0x100171e8)
MPR.dll
  • WNetGetUniversalNameW (Address: 0x10017048)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10017244)
  • _amsg_exit (Address: 0x10017230)
  • _callnewh (Address: 0x100171f8)
  • _CxxThrowException (Address: 0x10017200)
  • _except_handler4_common (Address: 0x1001723c)
  • _initterm (Address: 0x10017234)
  • _purecall (Address: 0x10017248)
  • _snwscanf_s (Address: 0x10017224)
  • _vsnprintf (Address: 0x10017220)
  • _vsnwprintf (Address: 0x10017228)
  • _wcsnicmp (Address: 0x10017210)
  • _XcptFilter (Address: 0x1001722c)
  • ??_V@YAXPAX@Z (Address: 0x1001725c)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10017208)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x100171fc)
  • ??0exception@@QAE@XZ (Address: 0x100171f4)
  • ??1exception@@UAE@XZ (Address: 0x1001720c)
  • ??1type_info@@UAE@XZ (Address: 0x10017240)
  • ??3@YAXPAX@Z (Address: 0x10017214)
  • ?terminate@@YAXXZ (Address: 0x10017238)
  • ?what@exception@@UBEPBDXZ (Address: 0x10017254)
  • free (Address: 0x10017218)
  • iswalpha (Address: 0x10017204)
  • iswdigit (Address: 0x1001721c)
  • malloc (Address: 0x100171f0)
  • memcmp (Address: 0x10017250)
  • memcpy (Address: 0x10017260)
  • memmove (Address: 0x1001724c)
  • memset (Address: 0x10017264)
  • wcsncmp (Address: 0x10017258)
netutils.dll
  • NetApiBufferFree (Address: 0x1001726c)
ntdll.dll
  • NtOpenFile (Address: 0x10017284)
  • RtlDosPathNameToNtPathName_U (Address: 0x10017280)
  • RtlFreeUnicodeString (Address: 0x10017278)
  • WinSqmIncrementDWORD (Address: 0x1001727c)
  • WinSqmIsOptedIn (Address: 0x10017274)
OLEAUT32.dll
  • GetErrorInfo (Address: 0x10017050)
  • LoadRegTypeLib (Address: 0x1001705c)
  • SysAllocString (Address: 0x10017058)
  • SysFreeString (Address: 0x10017060)
  • SysStringLen (Address: 0x10017054)
SHELL32.dll
  • ShellExecuteW (Address: 0x10017068)
SrmTrace.DLL
  • (Address: 0x10017070)
  • (Address: 0x10017074)
  • (Address: 0x10017078)
  • (Address: 0x1001707c)
  • (Address: 0x10017080)
  • (Address: 0x10017084)
  • (Address: 0x10017088)
  • (Address: 0x1001708c)
USER32.dll
  • SendMessageW (Address: 0x10017094)
wkscli.dll
  • NetGetJoinInformation (Address: 0x1001728c)
WS2_32.dll
  • FreeAddrInfoW (Address: 0x100170a8)
  • GetAddrInfoW (Address: 0x100170a0)
  • WSACleanup (Address: 0x100170a4)
  • WSAStartup (Address: 0x1001709c)