sechost.dll

v10.0.19041.6328 32-bit Windows NT Analyzed
Description
Host for SCM/SDDL/LSA Lookup APIs
Authors
© Microsoft Corporation. All rights reserved.
File size
473.7 KB
Uploaded
2025-12-01 08:04
Views
175
SHA-256
306918c2a2bc69bb78174c521aa9cd45

Exported functions 217

I_ScSetServiceBitsA #1 · 0x4cb60
I_ScSetServiceBitsW #2 · 0x26310
AuditComputeEffectivePolicyBySid #3 · 0x26470
AuditEnumerateCategories #4 · 0x54140
AuditEnumeratePerUserPolicy #5 · 0x54240
AuditEnumerateSubCategories #6 · 0x542c0
AuditFree #7 · 0x26090
AuditLookupCategoryNameW #8 · 0x543c0
AuditLookupSubCategoryNameW #9 · 0x544d0
AuditQueryGlobalSaclW #10 · 0x545e0
AuditQueryPerUserPolicy #11 · 0x26540
AuditQuerySecurity #12 · 0x54630
AuditQuerySystemPolicy #13 · 0x265c0
AuditSetGlobalSaclW #14 · 0x546e0
AuditSetPerUserPolicy #15 · 0x54730
AuditSetSecurity #16 · 0x547c0
AuditSetSystemPolicy #17 · 0x548b0
BuildSecurityDescriptorForSharingAccess #18 · 0x22670
BuildSecurityDescriptorForSharingAccessEx #19 · 0x226a0
CapabilityCheck #20 · 0x221a0
CapabilityCheckForSingleSessionSku #21 · 0x4c590
ChangeServiceConfig2A #22 · 0x4ccb0
ChangeServiceConfig2W #23 · 0x26380
ChangeServiceConfigA #24 · 0x4cde0
ChangeServiceConfigW #25 · 0x158f0
CloseServiceHandle #26 · 0x18450
CloseTrace #27 · 0x16990
ControlService #28 · 0x15ae0
ControlServiceExA #29 · 0x4cf90
ControlServiceExW #30 · 0x15990
ControlTraceA #31 · 0x50710
ControlTraceW #32 · 0x18ab0
ConvertSDToStringSDRootDomainW #33 · 0x34e90
ConvertSecurityDescriptorToStringSecurityDescriptorW #34 · 0x11610
ConvertSidToStringSidW #35 · 0x15670
ConvertStringSDToSDDomainA #36 · 0x34ef0
ConvertStringSDToSDDomainW #37 · 0x34fb0
ConvertStringSDToSDRootDomainW #38 · 0x35030
ConvertStringSecurityDescriptorToSecurityDescriptorW #39 · 0x115b0
ConvertStringSidToSidW #40 · 0x11680
CreateIsolatedProcess #41 · 0x61bc0
CreateIsolationContainer #42 · 0x61c30
CreateServiceA #43 · 0x4d090
CreateServiceEx #44 · 0x4d430
CreateServiceW #45 · 0x4d6c0
CredBackupCredentials #46 · 0x54aa0
CredDeleteA #47 · 0x54bd0
CredDeleteW #48 · 0x237f0
CredEncryptAndMarshalBinaryBlob #49 · 0x55aa0
CredEnumerateA #50 · 0x54c80
CredEnumerateW #51 · 0x23b20
CredFindBestCredentialA #52 · 0x54d70
CredFindBestCredentialW #53 · 0x54e50
CredFree #54 · 0x26090
CredGetSessionTypes #55 · 0x54f30
CredGetTargetInfoA #56 · 0x54fb0
CredGetTargetInfoW #57 · 0x55090
CredIsMarshaledCredentialW #58 · 0x25f60
CredIsProtectedA #59 · 0x55ad0
CredIsProtectedW #60 · 0x230c0
CredMarshalCredentialA #61 · 0x55b40
CredMarshalCredentialW #62 · 0x24e90
CredParseUserNameWithType #63 · 0x22fe0
CredProfileLoaded #64 · 0x55170
CredProfileLoadedEx #65 · 0x20c20
CredProfileUnloaded #66 · 0x551f0
CredProtectA #67 · 0x55ba0
CredProtectEx #68 · 0x24ca0
CredProtectW #69 · 0x24c70
CredReadA #70 · 0x55270
CredReadByTokenHandle #71 · 0x55350
CredReadDomainCredentialsA #72 · 0x55440
CredReadDomainCredentialsW #73 · 0x55530
CredReadW #74 · 0x55620
CredRestoreCredentials #75 · 0x55700
CredUnmarshalCredentialA #76 · 0x55cb0
CredUnmarshalCredentialW #77 · 0x23160
CredUnprotectA #78 · 0x55d20
CredUnprotectEx #79 · 0x25550
CredUnprotectW #80 · 0x55e60
CredWriteA #81 · 0x55830
CredWriteDomainCredentialsA #82 · 0x558e0
CredWriteDomainCredentialsW #83 · 0x559c0
CredWriteW #84 · 0x23880
CredpConvertCredential #85 · 0x23910
CredpConvertOneCredentialSize #86 · 0x24630
CredpConvertTargetInfo #87 · 0x55e90
CredpDecodeCredential #88 · 0x25ff0
CredpEncodeCredential #89 · 0x24c00
CredpEncodeSecret #90 · 0x560a0
DeleteIsolationContainer #91 · 0x61ca0
DeleteService #92 · 0x4d900
EnableTraceEx2 #93 · 0x190f0
EnumDependentServicesW #94 · 0x23540
EnumServicesStatusExW #95 · 0x177d0
EnumerateIdentityProviders #96 · 0x21600
EnumerateTraceGuidsEx #97 · 0x22e50
EtwQueryRealtimeConsumer #98 · 0x4fdd0
EventAccessControl #99 · 0x50d60
EventAccessQuery #100 · 0x50db0
EventAccessRemove #101 · 0x50f60
FreeContainer #102 · 0x56830
FreeTransientObjectSecurityDescriptor #103 · 0x22210
GetDefaultIdentityProvider #104 · 0x25eb0
GetEmbeddedContainerIsolationPolicy #105 · 0x56870
GetEmbeddedImageMitigationPolicy #106 · 0x22020
GetIdentityProviderInfoByGUID #107 · 0x25e10
GetIdentityProviderInfoByName #108 · 0x32fa0
GetServiceDirectory #109 · 0x26400
GetServiceDisplayNameW #110 · 0x235e0
GetServiceKeyNameW #111 · 0x236c0
GetServiceProcessToken #112 · 0x4d980
GetServiceRegistryStateKey #113 · 0x15b40
I_QueryTagInformation #114 · 0x179a0
I_RegisterSvchostNotificationCallback #115 · 0x22f90
I_ScBroadcastServiceControlMessage #116 · 0x23770
I_ScIsSecurityProcess #117 · 0x26b90
I_ScPnPGetServiceName #118 · 0x234f0
I_ScQueryServiceConfig #119 · 0x178c0
I_ScRegisterDeviceNotification #120 · 0x22310
I_ScRegisterPreshutdownRestart #121 · 0x4da10
I_ScReparseServiceDatabase #122 · 0x4dab0
I_ScRpcBindA #123 · 0x4ea80
I_ScRpcBindW #124 · 0x260a0
I_ScSendPnPMessage #125 · 0x180a0
I_ScSendTSMessage #126 · 0x23770
I_ScUnregisterDeviceNotification #127 · 0x22d50
I_ScValidatePnPService #128 · 0x23450
LocalGetConditionForString #129 · 0x23f50
LocalGetReferencedTokenTypesForCondition #130 · 0x36380
LocalGetStringForCondition #131 · 0x37280
LocalRpcBindingCreateWithSecurity #132 · 0x4c700
LocalRpcBindingSetAuthInfoEx #133 · 0x4c8b0
LookupAccountNameLocalA #134 · 0x33060
LookupAccountNameLocalW #135 · 0x14b90
LookupAccountSidLocalA #136 · 0x33170
LookupAccountSidLocalW #137 · 0x14ee0
LsaAddAccountRights #138 · 0x52c80
LsaClose #139 · 0x211c0
LsaCreateSecret #140 · 0x53500
LsaDelete #141 · 0x52e80
LsaEnumerateAccountRights #142 · 0x23aa0
LsaEnumerateAccountsWithUserRight #143 · 0x52d20
LsaFreeMemory #144 · 0x222c0
LsaICLookupNames #145 · 0x20cd0
LsaICLookupNamesWithCreds #146 · 0x52f10
LsaICLookupSids #147 · 0x21080
LsaICLookupSidsWithCreds #148 · 0x53070
LsaLookupClose #149 · 0x153d0
LsaLookupFreeMemory #150 · 0x222c0
LsaLookupGetDomainInfo #151 · 0x14b20
LsaLookupManageSidNameMapping #152 · 0x155a0
LsaLookupNames2 #153 · 0x20c80
LsaLookupOpenLocalPolicy #154 · 0x15430
LsaLookupSids2 #155 · 0x53200
LsaLookupSids #156 · 0x20f40
LsaLookupTranslateNames #157 · 0x26630
LsaLookupTranslateSids #158 · 0x15200
LsaLookupUserAccountType #159 · 0x15530
LsaOpenPolicy #160 · 0x20950
LsaOpenSecret #161 · 0x53620
LsaQueryInformationPolicy #162 · 0x20ea0
LsaQuerySecret #163 · 0x53740
LsaRemoveAccountRights #164 · 0x52de0
LsaRetrievePrivateData #165 · 0x25980
LsaSetInformationPolicy #166 · 0x53230
LsaSetSecret #167 · 0x53b40
LsaStorePrivateData #168 · 0x53d00
NotifyServiceStatusChange #169 · 0x17420
NotifyServiceStatusChangeA #170 · 0x10940
NotifyServiceStatusChangeW #171 · 0x17420
OpenSCManagerA #172 · 0x182a0
OpenSCManagerW #173 · 0x18390
OpenServiceA #174 · 0x10710
OpenServiceW #175 · 0x18320
OpenTraceW #176 · 0x16160
ProcessTrace #177 · 0x166f0
QueryAllTracesA #178 · 0x510e0
QueryAllTracesW #179 · 0x51100
QueryLocalUserServiceName #180 · 0x4db50
QueryServiceConfig2A #181 · 0x4dd80
QueryServiceConfig2W #182 · 0x17d40
QueryServiceConfigA #183 · 0x4dfd0
QueryServiceConfigW #184 · 0x18160
QueryServiceDynamicInformation #185 · 0x4e2a0
QueryServiceObjectSecurity #186 · 0x4e090
QueryServiceStatus #187 · 0x17940
QueryServiceStatusEx #188 · 0x18220
QueryTraceProcessingHandle #189 · 0x4fe40
QueryTransientObjectSecurityDescriptor #190 · 0x10bf0
QueryUserServiceName #191 · 0x17b70
QueryUserServiceNameForContext #192 · 0x4e140
RegisterServiceCtrlHandlerA #193 · 0x4e310
RegisterServiceCtrlHandlerExA #194 · 0x158a0
RegisterServiceCtrlHandlerExW #195 · 0x16e40
RegisterServiceCtrlHandlerW #196 · 0x15a60
RegisterTraceGuidsA #197 · 0x68929
ReleaseIdentityProviderEnumContext #198 · 0x21870
RemoveTraceCallback #199 · 0x50030
RpcClientCapabilityCheck #200 · 0x22100
SetLocalRpcServerInterfaceSecurity #201 · 0x4c970
SetLocalRpcServerProtseqSecurity #202 · 0x4ca10
SetServiceObjectSecurity #203 · 0x26250
SetServiceStatus #204 · 0x17c80
SetTraceCallback #205 · 0x50110
StartServiceA #206 · 0x10770
StartServiceCtrlDispatcherA #207 · 0x260c0
StartServiceCtrlDispatcherW #208 · 0x160c0
StartServiceW #209 · 0x16de0
StartTraceA #210 · 0x51120
StartTraceW #211 · 0x19c90
StopTraceW #212 · 0x26060
SubscribeServiceChangeNotifications #213 · 0x15bf0
TraceQueryInformation #214 · 0x515c0
TraceSetInformation #215 · 0x518b0
UnsubscribeServiceChangeNotifications #216 · 0x22fb0
WaitServiceState #217 · 0x16580

Imported DLLs & functions 338

ApiSetQueryApiSetPresence 0x1006c088
_errno 0x1006c0a8
_except_handler4_common 0x1006c118
_ftol2 0x1006c0f4
_i64tow_s 0x1006c0b0
_stricmp 0x1006c0c4
_ui64tow_s 0x1006c0ac
_ultow 0x1006c0a0
_ultow_s 0x1006c10c
_vsnwprintf_s 0x1006c120
_wcsicmp 0x1006c114
_wcsnicmp 0x1006c0bc
_wcstoi64 0x1006c090
_wcstoui64 0x1006c0ec
iswctype 0x1006c09c
memcmp 0x1006c0f8
memcpy 0x1006c0fc
memcpy_s 0x1006c0e0
memmove 0x1006c100
memmove_s 0x1006c0e8
memset 0x1006c104
qsort_s 0x1006c0f0
strchr 0x1006c0c8
strnlen 0x1006c0d8
strrchr 0x1006c0cc
strstr 0x1006c0d0
swprintf_s 0x1006c094
towlower 0x1006c0e4
wcscat_s 0x1006c0b4
wcschr 0x1006c11c
wcscpy_s 0x1006c110
wcsncmp 0x1006c0dc
wcsncpy_s 0x1006c108
wcsnlen 0x1006c0c0
wcsrchr 0x1006c0d4
wcsstr 0x1006c0b8
wcstok_s 0x1006c0a4
wcstoul 0x1006c098
__dllonexit3 0x1006c12c
_initterm 0x1006c138
_initterm_e 0x1006c128
_onexit 0x1006c130
_purecall 0x1006c134
DebugBreak 0x1006c144
IsDebuggerPresent 0x1006c148
OutputDebugStringW 0x1006c140
DelayLoadFailureHook 0x1006c150
ResolveDelayLoadedAPI 0x1006c158
GetLastError 0x1006c160
RaiseException 0x1006c168
SetLastError 0x1006c164
CreateFileW 0x1006c170
GetDiskFreeSpaceExW 0x1006c178
GetFileAttributesExW 0x1006c174
GetFullPathNameA 0x1006c17c
GetFullPathNameW 0x1006c180
ReadFile 0x1006c184
CloseHandle 0x1006c18c
GetProcessHeap 0x1006c19c
HeapAlloc 0x1006c1a0
HeapFree 0x1006c198
HeapReAlloc 0x1006c194
LocalAlloc 0x1006c1a8
LocalFree 0x1006c1b0
LocalReAlloc 0x1006c1ac
DeviceIoControl 0x1006c1bc
GetOverlappedResult 0x1006c1b8
DisableThreadLibraryCalls 0x1006c1e0
FreeLibrary 0x1006c1cc
GetModuleFileNameA 0x1006c1d8
GetModuleFileNameW 0x1006c1c8
GetModuleHandleExW 0x1006c1dc
GetModuleHandleW 0x1006c1c4
GetProcAddress 0x1006c1d0
LoadLibraryExW 0x1006c1d4
FormatMessageW 0x1006c1e8
VirtualAllocEx 0x1006c1f8
VirtualFree 0x1006c1f0
VirtualFreeEx 0x1006c1f4
CreateProcessAsUserW 0x1006c20c
CreateProcessW 0x1006c204
CreateThread 0x1006c21c
GetCurrentProcess 0x1006c248
GetCurrentProcessId 0x1006c238
GetCurrentThread 0x1006c234
GetCurrentThreadId 0x1006c220
GetProcessTimes 0x1006c240
GetThreadPriority 0x1006c23c
InitializeProcThreadAttributeList 0x1006c208
OpenProcessToken 0x1006c244
OpenThread 0x1006c214
OpenThreadToken 0x1006c228
ResumeThread 0x1006c224
SetThreadPriority 0x1006c22c
TerminateThread 0x1006c218
TlsAlloc 0x1006c210
TlsGetValue 0x1006c200
TlsSetValue 0x1006c24c
UpdateProcThreadAttribute 0x1006c230
GetProcessMitigationPolicy 0x1006c254
RegCloseKey 0x1006c268
RegDeleteValueW 0x1006c260
RegEnumKeyExW 0x1006c278
RegNotifyChangeKeyValue 0x1006c264
RegOpenKeyExA 0x1006c274
RegOpenKeyExW 0x1006c26c
RegQueryValueExA 0x1006c27c
RegQueryValueExW 0x1006c25c
RegSetValueExW 0x1006c270
RtlCompareMemory 0x1006c284
CompareStringOrdinal 0x1006c28c
CompareStringW 0x1006c290
AcquireSRWLockExclusive 0x1006c2e8
AcquireSRWLockShared 0x1006c2a8
CreateEventA 0x1006c2ec
CreateEventExW 0x1006c2b8
CreateEventW 0x1006c2b0
CreateMutexExW 0x1006c2a4
CreateSemaphoreExW 0x1006c298
EnterCriticalSection 0x1006c2bc
InitializeSRWLock 0x1006c2e4
LeaveCriticalSection 0x1006c2c0
OpenEventW 0x1006c2c8
OpenSemaphoreW 0x1006c2a0
ReleaseMutex 0x1006c2e0
ReleaseSemaphore 0x1006c29c
ReleaseSRWLockExclusive 0x1006c2d8
ReleaseSRWLockShared 0x1006c2dc
ResetEvent 0x1006c2c4
SetEvent 0x1006c2d0
SleepEx 0x1006c2cc
WaitForMultipleObjectsEx 0x1006c2d4
WaitForSingleObject 0x1006c2ac
WaitForSingleObjectEx 0x1006c2b4
GetComputerNameExW 0x1006c2fc
GetSystemDirectoryW 0x1006c300
CloseThreadpoolWork 0x1006c30c
CreateThreadpoolWork 0x1006c308
SubmitThreadpoolWork 0x1006c310
DecodePointer 0x1006c318
EncodePointer 0x1006c31c
IsWow64Process2 0x1006c324
EventRegister 0x1006c330
EventSetInformation 0x1006c32c
EventUnregister 0x1006c334
EventWriteTransfer 0x1006c338
AddAccessAllowedAce 0x1006c340
AddAccessDeniedAce 0x1006c344
AdjustTokenGroups 0x1006c390
AdjustTokenPrivileges 0x1006c394
AllocateAndInitializeSid 0x1006c36c
CreateRestrictedToken 0x1006c378
EqualDomainSid 0x1006c380
EqualSid 0x1006c38c
FreeSid 0x1006c374
GetAclInformation 0x1006c370
GetLengthSid 0x1006c348
GetSecurityDescriptorDacl 0x1006c34c
GetSecurityDescriptorSacl 0x1006c350
GetSidSubAuthority 0x1006c368
GetSidSubAuthorityCount 0x1006c37c
GetTokenInformation 0x1006c384
InitializeSecurityDescriptor 0x1006c364
IsValidSecurityDescriptor 0x1006c388
IsValidSid 0x1006c354
SetKernelObjectSecurity 0x1006c358
SetSecurityDescriptorDacl 0x1006c35c
SetSecurityDescriptorSacl 0x1006c360
BCryptCloseAlgorithmProvider 0x1006c3b0
BCryptCreateHash 0x1006c3a0
BCryptDecrypt 0x1006c3bc
BCryptDestroyHash 0x1006c3ac
BCryptDestroyKey 0x1006c3c4
BCryptEncrypt 0x1006c3c8
BCryptFinishHash 0x1006c3b4
BCryptGenerateSymmetricKey 0x1006c39c
BCryptGenRandom 0x1006c3cc
BCryptGetProperty 0x1006c3c0
BCryptHashData 0x1006c3a8
BCryptOpenAlgorithmProvider 0x1006c3b8
BCryptSetProperty 0x1006c3a4
_vsnwprintf 0x1006c544
DbgPrintEx 0x1006c5b8
EtwDeliverDataBlock 0x1006c4dc
EtwEnumerateProcessRegGuids 0x1006c4e4
EtwpGetCpuSpeed 0x1006c4fc
EtwProcessPrivateLoggerRequest 0x1006c524
EtwSendNotification 0x1006c4e0
LdrQueryModuleServiceTags 0x1006c488
LdrResSearchResource 0x1006c538
NtCancelIoFile 0x1006c4c4
NtClose 0x1006c580
NtOpenKey 0x1006c454
NtOpenProcessToken 0x1006c588
NtOpenProcessTokenEx 0x1006c434
NtOpenThreadToken 0x1006c57c
NtQueryInformationFile 0x1006c4c0
NtQueryInformationThread 0x1006c48c
NtQueryInformationToken 0x1006c584
NtQueryIntervalProfile 0x1006c4f4
NtQueryPerformanceCounter 0x1006c510
NtQuerySystemInformation 0x1006c4f0
NtQueryValueKey 0x1006c45c
NtQueueApcThread 0x1006c4b0
NtSetEvent 0x1006c528
NtSetInformationThread 0x1006c480
NtSetIntervalProfile 0x1006c4ec
NtSetSystemInformation 0x1006c4e8
NtTerminateProcess 0x1006c554
NtTraceControl 0x1006c4c8
NtWaitForMultipleObjects 0x1006c504
RtlAbsoluteToSelfRelativeSD 0x1006c408
RtlAcquireSRWLockExclusive 0x1006c59c
RtlAcquireSRWLockShared 0x1006c49c
RtlAddAccessAllowedAce 0x1006c440
RtlAddAccessAllowedAceEx 0x1006c3f4
RtlAddAccessAllowedObjectAce 0x1006c414
RtlAddAccessDeniedAceEx 0x1006c410
RtlAddAccessDeniedObjectAce 0x1006c418
RtlAddAce 0x1006c400
RtlAddAuditAccessAceEx 0x1006c3ec
RtlAddAuditAccessObjectAce 0x1006c3d4
RtlAddMandatoryAce 0x1006c444
RtlAllocateAndInitializeSid 0x1006c53c
RtlAllocateHeap 0x1006c44c
RtlAnsiStringToUnicodeString 0x1006c5a8
RtlCapabilityCheck 0x1006c46c
RtlCapabilityCheckForSingleSessionSku 0x1006c460
RtlCaptureContext 0x1006c550
RtlCheckTokenCapability 0x1006c470
RtlCheckTokenMembership 0x1006c464
RtlCheckTokenMembershipEx 0x1006c468
RtlCompareUnicodeString 0x1006c574
RtlConvertSidToUnicodeString 0x1006c3e4
RtlCopySecurityDescriptor 0x1006c5bc
RtlCopySid 0x1006c594
RtlCopyUnicodeString 0x1006c564
RtlCreateAcl 0x1006c448
RtlCreateSecurityDescriptor 0x1006c424
RtlCreateServiceSid 0x1006c484
RtlDecompressBufferEx 0x1006c51c
RtlDeleteCriticalSection 0x1006c42c
RtlDeriveCapabilitySidsFromName 0x1006c540
RtlDllShutdownInProgress 0x1006c5a0
RtlEqualPrefixSid 0x1006c570
RtlEqualSid 0x1006c568
RtlEqualUnicodeString 0x1006c56c
RtlFirstFreeAce 0x1006c41c
RtlFreeAnsiString 0x1006c4cc
RtlFreeHeap 0x1006c458
RtlFreeUnicodeString 0x1006c598
RtlGetAce 0x1006c3e8
RtlGetCompressionWorkSpaceSize 0x1006c518
RtlGetControlSecurityDescriptor 0x1006c450
RtlGetCurrentServiceSessionId 0x1006c520
RtlGetDaclSecurityDescriptor 0x1006c428
RtlGetGroupSecurityDescriptor 0x1006c404
RtlGetNativeSystemInformation 0x1006c508
RtlGetNtProductType 0x1006c52c
RtlGetOwnerSecurityDescriptor 0x1006c3f8
RtlGetPersistedStateLocation 0x1006c4d0
RtlGetSaclSecurityDescriptor 0x1006c3e0
RtlGUIDFromString 0x1006c5b0
RtlInitAnsiString 0x1006c5b4
RtlInitializeBitMap 0x1006c50c
RtlInitializeCriticalSectionEx 0x1006c430
RtlInitializeSid 0x1006c490
RtlInitializeSRWLock 0x1006c558
RtlInitUnicodeString 0x1006c5ac
RtlInitUnicodeStringEx 0x1006c534
RtlInterlockedClearBitRun 0x1006c514
RtlLengthRequiredSid 0x1006c43c
RtlLengthSecurityDescriptor 0x1006c438
RtlLengthSid 0x1006c560
RtlMakeSelfRelativeSD 0x1006c474
RtlMultiByteToUnicodeN 0x1006c40c
RtlNtStatusToDosError 0x1006c58c
RtlNtStatusToDosErrorNoTeb 0x1006c5a4
RtlQueryPerformanceFrequency 0x1006c500
RtlQueryRegistryValueWithFallback 0x1006c4d4
RtlQueryTimeZoneInformation 0x1006c4f8
RtlQueryWnfStateData 0x1006c4b4
RtlReleaseSRWLockExclusive 0x1006c494
RtlReleaseSRWLockShared 0x1006c4a0
RtlRunOnceExecuteOnce 0x1006c4a4
RtlSetDaclSecurityDescriptor 0x1006c3dc
RtlSetGroupSecurityDescriptor 0x1006c420
RtlSetLastWin32Error 0x1006c4bc
RtlSetOwnerSecurityDescriptor 0x1006c548
RtlSetSaclSecurityDescriptor 0x1006c55c
RtlSetThreadSubProcessTag 0x1006c478
RtlSubAuthorityCountSid 0x1006c3fc
RtlSubAuthoritySid 0x1006c3d8
RtlSubscribeWnfStateChangeNotification 0x1006c4ac
RtlUnhandledExceptionFilter 0x1006c54c
RtlUnicodeStringToAnsiString 0x1006c47c
RtlUnicodeToMultiByteSize 0x1006c590
RtlUnsubscribeWnfNotificationWaitForCompletion 0x1006c4b8
RtlUnsubscribeWnfStateChangeNotification 0x1006c4a8
RtlValidAcl 0x1006c498
RtlValidRelativeSecurityDescriptor 0x1006c4d8
RtlValidSid 0x1006c578
RtlxAnsiStringToUnicodeSize 0x1006c3f0
RtlxUnicodeStringToAnsiSize 0x1006c530
I_RpcExceptionFilter 0x1006c078
I_RpcMapWin32Status 0x1006c07c
NdrAsyncClientCall2 0x1006c004
NdrClientCall4 0x1006c074
RpcAsyncCancelCall 0x1006c018
RpcAsyncCompleteCall 0x1006c01c
RpcAsyncInitializeHandle 0x1006c020
RpcBindingBind 0x1006c054
RpcBindingCreateW 0x1006c058
RpcBindingFree 0x1006c064
RpcBindingFromStringBindingW 0x1006c070
RpcBindingServerFromClient 0x1006c02c
RpcBindingSetAuthInfoExW 0x1006c048
RpcBindingSetAuthInfoW 0x1006c000
RpcBindingSetOption 0x1006c03c
RpcBindingToStringBindingW 0x1006c034
RpcImpersonateClient 0x1006c040
RpcRevertToSelf 0x1006c038
RpcRevertToSelfEx 0x1006c044
RpcServerInqCallAttributesA 0x1006c028
RpcServerRegisterIf3 0x1006c04c
RpcServerUseProtseqW 0x1006c050
RpcSmDestroyClientContext 0x1006c00c
RpcSsDestroyClientContext 0x1006c080
RpcSsGetContextBinding 0x1006c024
RpcStringBindingComposeW 0x1006c06c
RpcStringBindingParseW 0x1006c030
RpcStringFreeW 0x1006c068
UuidCreate 0x1006c008
UuidEqual 0x1006c014
UuidFromStringW 0x1006c060
UuidIsNil 0x1006c010
UuidToStringW 0x1006c05c