wintrust.dll
Description: Microsoft Trust Verification APIs
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 32-bit
Operating System: Windows NT
SHA256: 3be70167bcfe1b4868c7d977801ea9c7
File Size: 347.6 KB
Uploaded At: Dec. 1, 2025, 8:07 a.m.
Views: 11
Exported Functions
- ComputeFirstPageHash (Ordinal: 1, Address: 0x30c80)
- CryptCATVerifyMember (Ordinal: 2, Address: 0x32440)
- CryptSIPGetInfo (Ordinal: 3, Address: 0x369b0)
- CryptSIPGetRegWorkingFlags (Ordinal: 4, Address: 0x369a0)
- GenericChainCertificateTrust (Ordinal: 5, Address: 0x3a280)
- GenericChainFinalProv (Ordinal: 6, Address: 0x3a520)
- HTTPSCertificateTrust (Ordinal: 7, Address: 0x145c0)
- SoftpubDefCertInit (Ordinal: 8, Address: 0x3aae0)
- SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x3abb0)
- SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x3abf0)
- WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0x2cc00)
- AddPersonalTrustDBPages (Ordinal: 12, Address: 0x3ad30)
- CatalogCompactHashDatabase (Ordinal: 13, Address: 0x17ef0)
- ConfigCiFinalPolicy (Ordinal: 14, Address: 0x3bc30)
- ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x3c0c0)
- CryptCATAdminAcquireContext2 (Ordinal: 16, Address: 0x32e50)
- CryptCATAdminAcquireContext (Ordinal: 17, Address: 0xbbf0)
- CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x32f10)
- CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 19, Address: 0x331f0)
- CryptCATAdminCalcHashFromFileHandle3 (Ordinal: 20, Address: 0x33270)
- CryptCATAdminCalcHashFromFileHandle (Ordinal: 21, Address: 0x332d0)
- CryptCATAdminEnumCatalogFromHash (Ordinal: 22, Address: 0xc990)
- CryptCATAdminPauseServiceForBackup (Ordinal: 23, Address: 0x33370)
- CryptCATAdminReleaseCatalogContext (Ordinal: 24, Address: 0x176d0)
- CryptCATAdminReleaseContext (Ordinal: 25, Address: 0x16fa0)
- CryptCATAdminRemoveCatalog (Ordinal: 26, Address: 0x333b0)
- CryptCATAdminResolveCatalogPath (Ordinal: 27, Address: 0x333f0)
- CryptCATAllocSortedMemberInfo (Ordinal: 28, Address: 0x157f0)
- CryptCATCDFClose (Ordinal: 29, Address: 0x34820)
- CryptCATCDFEnumAttributes (Ordinal: 30, Address: 0x348a0)
- CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 31, Address: 0x348d0)
- CryptCATCDFEnumCatAttributes (Ordinal: 32, Address: 0x34910)
- CryptCATCDFEnumMembers (Ordinal: 33, Address: 0x349d0)
- CryptCATCDFEnumMembersByCDFTag (Ordinal: 34, Address: 0x34a20)
- CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 35, Address: 0x34a60)
- CryptCATCDFOpen (Ordinal: 36, Address: 0x34aa0)
- CryptCATCatalogInfoFromContext (Ordinal: 37, Address: 0x17610)
- CryptCATClose (Ordinal: 38, Address: 0x15050)
- CryptCATEnumerateAttr (Ordinal: 39, Address: 0xec50)
- CryptCATEnumerateCatAttr (Ordinal: 40, Address: 0xeb90)
- CryptCATEnumerateMember (Ordinal: 41, Address: 0x32490)
- CryptCATFreeSortedMemberInfo (Ordinal: 42, Address: 0x32550)
- CryptCATGetAttrInfo (Ordinal: 43, Address: 0x32590)
- CryptCATGetCatAttrInfo (Ordinal: 44, Address: 0x32610)
- CryptCATGetMemberInfo (Ordinal: 45, Address: 0x32680)
- CryptCATHandleFromStore (Ordinal: 46, Address: 0x17e90)
- CryptCATOpen (Ordinal: 47, Address: 0x32730)
- CryptCATPersistStore (Ordinal: 48, Address: 0x32840)
- CryptCATPutAttrInfo (Ordinal: 49, Address: 0x32880)
- CryptCATPutCatAttrInfo (Ordinal: 50, Address: 0x329f0)
- CryptCATPutMemberInfo (Ordinal: 51, Address: 0x32c00)
- CryptCATStoreFromHandle (Ordinal: 52, Address: 0x17e90)
- CryptSIPCreateIndirectData (Ordinal: 53, Address: 0x15d70)
- CryptSIPGetCaps (Ordinal: 54, Address: 0x15cc0)
- CryptSIPGetSealedDigest (Ordinal: 55, Address: 0x36a00)
- CryptSIPGetSignedDataMsg (Ordinal: 56, Address: 0x181b0)
- CryptSIPPutSignedDataMsg (Ordinal: 57, Address: 0x36a90)
- CryptSIPRemoveSignedDataMsg (Ordinal: 58, Address: 0x36b30)
- CryptSIPVerifyIndirectData (Ordinal: 59, Address: 0x36bb0)
- DllRegisterServer (Ordinal: 60, Address: 0x2ced0)
- DllUnregisterServer (Ordinal: 61, Address: 0x2cf10)
- DriverCleanupPolicy (Ordinal: 62, Address: 0xfc40)
- DriverFinalPolicy (Ordinal: 63, Address: 0xf060)
- DriverInitializePolicy (Ordinal: 64, Address: 0xf7e0)
- FindCertsByIssuer (Ordinal: 65, Address: 0x3dc60)
- GetAuthenticodeSha256Hash (Ordinal: 66, Address: 0x3c3a0)
- HTTPSFinalProv (Ordinal: 67, Address: 0x10410)
- IsCatalogFile (Ordinal: 68, Address: 0x35b70)
- MsCatConstructHashTag (Ordinal: 69, Address: 0x35e80)
- MsCatFreeHashTag (Ordinal: 70, Address: 0x35f10)
- OfficeCleanupPolicy (Ordinal: 71, Address: 0x3df80)
- OfficeInitializePolicy (Ordinal: 72, Address: 0x3df80)
- OpenPersonalTrustDBDialog (Ordinal: 73, Address: 0x3ad50)
- OpenPersonalTrustDBDialogEx (Ordinal: 74, Address: 0x3ad70)
- SoftpubAuthenticode (Ordinal: 75, Address: 0xfe90)
- SoftpubCheckCert (Ordinal: 76, Address: 0x17e00)
- SoftpubCleanup (Ordinal: 77, Address: 0x12950)
- SoftpubDllRegisterServer (Ordinal: 78, Address: 0x3e5d0)
- SoftpubDllUnregisterServer (Ordinal: 79, Address: 0x3e800)
- SoftpubDumpStructure (Ordinal: 80, Address: 0x3f150)
- SoftpubInitialize (Ordinal: 81, Address: 0x12960)
- SoftpubLoadMessage (Ordinal: 82, Address: 0x11870)
- SoftpubLoadSignature (Ordinal: 83, Address: 0x117a0)
- SrpCheckSmartlockerEAandProcessToken (Ordinal: 84, Address: 0x40ec0)
- TrustDecode (Ordinal: 85, Address: 0x2f370)
- TrustFindIssuerCertificate (Ordinal: 86, Address: 0x2f400)
- TrustFreeDecode (Ordinal: 87, Address: 0x2f570)
- TrustIsCertificateSelfSigned (Ordinal: 88, Address: 0x2f5a0)
- TrustOpenStores (Ordinal: 89, Address: 0x2f610)
- WTConvertCertCtxToChainInfo (Ordinal: 90, Address: 0x3c580)
- WTGetBioSignatureInfo (Ordinal: 91, Address: 0x31740)
- WTGetPluginSignatureInfo (Ordinal: 92, Address: 0x318c0)
- WTGetSignatureInfo (Ordinal: 93, Address: 0xb2e0)
- WTHelperCertCheckValidSignature (Ordinal: 94, Address: 0x2fef0)
- WTHelperCertIsSelfSigned (Ordinal: 95, Address: 0x2cc30)
- WTHelperCheckCertUsage (Ordinal: 96, Address: 0x2ff20)
- WTHelperGetAgencyInfo (Ordinal: 97, Address: 0x30010)
- WTHelperGetFileHandle (Ordinal: 98, Address: 0x300a0)
- WTHelperGetFileHash (Ordinal: 99, Address: 0x2fce0)
- WTHelperGetFileName (Ordinal: 100, Address: 0x300e0)
- WTHelperGetKnownUsages (Ordinal: 101, Address: 0x30170)
- WTHelperGetProvCertFromChain (Ordinal: 102, Address: 0x301f0)
- WTHelperGetProvPrivateDataFromChain (Ordinal: 103, Address: 0x30220)
- WTHelperGetProvSignerFromChain (Ordinal: 104, Address: 0x17da0)
- WTHelperIsChainedToMicrosoft (Ordinal: 105, Address: 0x30280)
- WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 106, Address: 0x30390)
- WTHelperIsInRootStore (Ordinal: 107, Address: 0x30430)
- WTHelperOpenKnownStores (Ordinal: 108, Address: 0x304f0)
- WTHelperProvDataFromStateData (Ordinal: 109, Address: 0x17e90)
- WTIsFirstConfigCiResultPreferred (Ordinal: 110, Address: 0x3c5d0)
- WTLogConfigCiScriptEvent (Ordinal: 111, Address: 0x3c630)
- WTLogConfigCiSignerEvent (Ordinal: 112, Address: 0x3c970)
- WTValidateBioSignaturePolicy (Ordinal: 113, Address: 0x319e0)
- WVTAsn1CatMemberInfo2Decode (Ordinal: 114, Address: 0x17b90)
- WVTAsn1CatMemberInfo2Encode (Ordinal: 115, Address: 0x2d560)
- WVTAsn1CatMemberInfoDecode (Ordinal: 116, Address: 0x2d600)
- WVTAsn1CatMemberInfoEncode (Ordinal: 117, Address: 0x2d6b0)
- WVTAsn1CatNameValueDecode (Ordinal: 118, Address: 0x174d0)
- WVTAsn1CatNameValueEncode (Ordinal: 119, Address: 0x2d6f0)
- WVTAsn1IntentToSealAttributeDecode (Ordinal: 120, Address: 0x2d740)
- WVTAsn1IntentToSealAttributeEncode (Ordinal: 121, Address: 0x2d7d0)
- WVTAsn1SealingSignatureAttributeDecode (Ordinal: 122, Address: 0x2d800)
- WVTAsn1SealingSignatureAttributeEncode (Ordinal: 123, Address: 0x2d8b0)
- WVTAsn1SealingTimestampAttributeDecode (Ordinal: 124, Address: 0x2d950)
- WVTAsn1SealingTimestampAttributeEncode (Ordinal: 125, Address: 0x2da00)
- WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 126, Address: 0x2da50)
- WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 127, Address: 0x2dae0)
- WVTAsn1SpcIndirectDataContentDecode (Ordinal: 128, Address: 0x2db10)
- WVTAsn1SpcIndirectDataContentEncode (Ordinal: 129, Address: 0x2dc40)
- WVTAsn1SpcLinkDecode (Ordinal: 130, Address: 0x2dd10)
- WVTAsn1SpcLinkEncode (Ordinal: 131, Address: 0xa910)
- WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 132, Address: 0x2ddc0)
- WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 133, Address: 0x2de50)
- WVTAsn1SpcPeImageDataDecode (Ordinal: 134, Address: 0x2de80)
- WVTAsn1SpcPeImageDataEncode (Ordinal: 135, Address: 0x18f20)
- WVTAsn1SpcSigInfoDecode (Ordinal: 136, Address: 0x2df70)
- WVTAsn1SpcSigInfoEncode (Ordinal: 137, Address: 0x2e000)
- WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 138, Address: 0x2e040)
- WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 139, Address: 0x2e250)
- WVTAsn1SpcSpOpusInfoDecode (Ordinal: 140, Address: 0x2e3f0)
- WVTAsn1SpcSpOpusInfoEncode (Ordinal: 141, Address: 0x2e500)
- WVTAsn1SpcStatementTypeDecode (Ordinal: 142, Address: 0x2e5d0)
- WVTAsn1SpcStatementTypeEncode (Ordinal: 143, Address: 0x2e6d0)
- WinVerifyTrust (Ordinal: 144, Address: 0x10a20)
- WinVerifyTrustEx (Ordinal: 145, Address: 0x2fda0)
- WintrustAddActionID (Ordinal: 146, Address: 0x2e770)
- WintrustAddDefaultForUsage (Ordinal: 147, Address: 0x2f740)
- WintrustCertificateTrust (Ordinal: 148, Address: 0x12cf0)
- WintrustGetDefaultForUsage (Ordinal: 149, Address: 0x2f950)
- WintrustGetRegPolicyFlags (Ordinal: 150, Address: 0x2ebf0)
- WintrustLoadFunctionPointers (Ordinal: 151, Address: 0xfa30)
- WintrustRemoveActionID (Ordinal: 152, Address: 0x2e8f0)
- WintrustSetDefaultIncludePEPageHashes (Ordinal: 153, Address: 0x37f50)
- WintrustSetRegPolicyFlags (Ordinal: 154, Address: 0x2ec80)
- WintrustUserWriteabilityCheck (Ordinal: 155, Address: 0x3cbc0)
- mscat32DllRegisterServer (Ordinal: 156, Address: 0x17f70)
- mscat32DllUnregisterServer (Ordinal: 157, Address: 0x17f70)
- mssip32DllRegisterServer (Ordinal: 158, Address: 0x36ca0)
- mssip32DllUnregisterServer (Ordinal: 159, Address: 0x36ee0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x4764f020)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatA (Address: 0x4764f02c)
- GetTimeFormatA (Address: 0x4764f028)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x4764f038)
- IsDebuggerPresent (Address: 0x4764f034)
- OutputDebugStringA (Address: 0x4764f03c)
- OutputDebugStringW (Address: 0x4764f040)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x4764f048)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x4764f050)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x4764f060)
- SetLastError (Address: 0x4764f064)
- SetUnhandledExceptionFilter (Address: 0x4764f05c)
- UnhandledExceptionFilter (Address: 0x4764f058)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x4764f07c)
- CreateDirectoryW (Address: 0x4764f0a4)
- CreateFileW (Address: 0x4764f074)
- FindClose (Address: 0x4764f088)
- FindFirstFileW (Address: 0x4764f080)
- FindNextFileW (Address: 0x4764f084)
- GetFileAttributesExW (Address: 0x4764f070)
- GetFileAttributesW (Address: 0x4764f08c)
- GetFileInformationByHandle (Address: 0x4764f094)
- GetFileSize (Address: 0x4764f078)
- GetFileSizeEx (Address: 0x4764f0ac)
- ReadFile (Address: 0x4764f098)
- SetEndOfFile (Address: 0x4764f0a0)
- SetFileAttributesW (Address: 0x4764f0a8)
- SetFilePointer (Address: 0x4764f06c)
- SetFilePointerEx (Address: 0x4764f09c)
- WriteFile (Address: 0x4764f090)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x4764f0b8)
- DuplicateHandle (Address: 0x4764f0b4)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x4764f0c8)
- HeapAlloc (Address: 0x4764f0c4)
- HeapFree (Address: 0x4764f0c0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x4764f0d0)
- LocalFree (Address: 0x4764f0d8)
- LocalReAlloc (Address: 0x4764f0d4)
api-ms-win-core-io-l1-1-0.dll
- DeviceIoControl (Address: 0x4764f0e0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- CreateFileMappingA (Address: 0x4764f0e8)
- FindResourceExA (Address: 0x4764f0ec)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x4764f120)
- FreeLibrary (Address: 0x4764f10c)
- FreeResource (Address: 0x4764f0f4)
- GetModuleFileNameA (Address: 0x4764f104)
- GetModuleHandleExA (Address: 0x4764f11c)
- GetModuleHandleExW (Address: 0x4764f0f8)
- GetModuleHandleW (Address: 0x4764f108)
- GetProcAddress (Address: 0x4764f100)
- LoadLibraryExA (Address: 0x4764f0fc)
- LoadResource (Address: 0x4764f118)
- LockResource (Address: 0x4764f110)
- SizeofResource (Address: 0x4764f114)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryA (Address: 0x4764f12c)
- LoadLibraryW (Address: 0x4764f128)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x4764f134)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x4764f140)
- MapViewOfFile (Address: 0x4764f13c)
- UnmapViewOfFile (Address: 0x4764f144)
api-ms-win-core-memory-l1-1-1.dll
- VirtualUnlock (Address: 0x4764f14c)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsA (Address: 0x4764f164)
- ExpandEnvironmentStringsW (Address: 0x4764f158)
- GetCurrentDirectoryW (Address: 0x4764f160)
- GetEnvironmentVariableA (Address: 0x4764f15c)
- GetEnvironmentVariableW (Address: 0x4764f154)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x4764f17c)
- GetCurrentProcessId (Address: 0x4764f16c)
- GetCurrentThread (Address: 0x4764f180)
- GetCurrentThreadId (Address: 0x4764f170)
- OpenProcessToken (Address: 0x4764f178)
- OpenThreadToken (Address: 0x4764f174)
- TerminateProcess (Address: 0x4764f184)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x4764f18c)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x4764f1b4)
- RegCreateKeyExW (Address: 0x4764f1c0)
- RegDeleteKeyExW (Address: 0x4764f1b8)
- RegEnumKeyExA (Address: 0x4764f1c4)
- RegEnumValueA (Address: 0x4764f1a8)
- RegGetValueW (Address: 0x4764f1bc)
- RegOpenKeyExA (Address: 0x4764f1a4)
- RegOpenKeyExW (Address: 0x4764f19c)
- RegQueryInfoKeyA (Address: 0x4764f194)
- RegQueryValueExA (Address: 0x4764f1b0)
- RegQueryValueExW (Address: 0x4764f1a0)
- RegSetValueExA (Address: 0x4764f1ac)
- RegSetValueExW (Address: 0x4764f198)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x4764f1cc)
- WideCharToMultiByte (Address: 0x4764f1d0)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpA (Address: 0x4764f1dc)
- lstrlenA (Address: 0x4764f1d8)
- lstrlenW (Address: 0x4764f1e0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x4764f208)
- AcquireSRWLockShared (Address: 0x4764f1f0)
- CreateEventA (Address: 0x4764f1f8)
- CreateMutexA (Address: 0x4764f20c)
- CreateMutexExW (Address: 0x4764f1f4)
- CreateSemaphoreExW (Address: 0x4764f230)
- DeleteCriticalSection (Address: 0x4764f214)
- EnterCriticalSection (Address: 0x4764f228)
- InitializeCriticalSection (Address: 0x4764f238)
- InitializeCriticalSectionEx (Address: 0x4764f1ec)
- LeaveCriticalSection (Address: 0x4764f224)
- OpenSemaphoreW (Address: 0x4764f200)
- ReleaseMutex (Address: 0x4764f234)
- ReleaseSemaphore (Address: 0x4764f21c)
- ReleaseSRWLockExclusive (Address: 0x4764f218)
- ReleaseSRWLockShared (Address: 0x4764f1fc)
- ResetEvent (Address: 0x4764f22c)
- SetEvent (Address: 0x4764f210)
- WaitForMultipleObjectsEx (Address: 0x4764f220)
- WaitForSingleObject (Address: 0x4764f1e8)
- WaitForSingleObjectEx (Address: 0x4764f204)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x4764f240)
- Sleep (Address: 0x4764f244)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetLocalTime (Address: 0x4764f260)
- GetSystemDirectoryW (Address: 0x4764f254)
- GetSystemInfo (Address: 0x4764f250)
- GetSystemTimeAsFileTime (Address: 0x4764f25c)
- GetTickCount (Address: 0x4764f24c)
- GetTickCount64 (Address: 0x4764f258)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x4764f270)
- CreateThreadpoolTimer (Address: 0x4764f268)
- SetThreadpoolTimer (Address: 0x4764f274)
- WaitForThreadpoolTimerCallbacks (Address: 0x4764f26c)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x4764f27c)
api-ms-win-core-version-l1-1-0.dll
- VerQueryValueW (Address: 0x4764f284)
api-ms-win-core-version-private-l1-1-0.dll
- GetFileVersionInfoByHandle (Address: 0x4764f28c)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x4764f2a0)
- EventSetInformation (Address: 0x4764f294)
- EventUnregister (Address: 0x4764f298)
- EventWriteTransfer (Address: 0x4764f29c)
api-ms-win-security-base-l1-1-0.dll
- AddAccessAllowedAceEx (Address: 0x4764f2b0)
- AddAce (Address: 0x4764f2c8)
- AllocateAndInitializeSid (Address: 0x4764f2ec)
- CopySid (Address: 0x4764f2b8)
- EqualSid (Address: 0x4764f2e4)
- FreeSid (Address: 0x4764f2d4)
- GetAce (Address: 0x4764f2d8)
- GetAclInformation (Address: 0x4764f2d0)
- GetFileSecurityW (Address: 0x4764f2dc)
- GetLengthSid (Address: 0x4764f2e0)
- GetSecurityDescriptorDacl (Address: 0x4764f2c0)
- GetSidIdentifierAuthority (Address: 0x4764f2a8)
- GetSidSubAuthority (Address: 0x4764f2e8)
- GetSidSubAuthorityCount (Address: 0x4764f2c4)
- GetTokenInformation (Address: 0x4764f2bc)
- InitializeAcl (Address: 0x4764f2f4)
- InitializeSecurityDescriptor (Address: 0x4764f2f0)
- IsValidSid (Address: 0x4764f2b4)
- SetFileSecurityW (Address: 0x4764f2ac)
- SetSecurityDescriptorDacl (Address: 0x4764f2cc)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x4764f33c)
- __dllonexit (Address: 0x4764f324)
- _amsg_exit (Address: 0x4764f354)
- _callnewh (Address: 0x4764f308)
- _CxxThrowException (Address: 0x4764f318)
- _except_handler4_common (Address: 0x4764f348)
- _initterm (Address: 0x4764f34c)
- _itow_s (Address: 0x4764f39c)
- _lock (Address: 0x4764f330)
- _ltoa (Address: 0x4764f378)
- _memicmp (Address: 0x4764f3a0)
- _onexit (Address: 0x4764f370)
- _purecall (Address: 0x4764f364)
- _stricmp (Address: 0x4764f3a4)
- _unlock (Address: 0x4764f31c)
- _vsnprintf (Address: 0x4764f37c)
- _vsnprintf_s (Address: 0x4764f338)
- _vsnwprintf (Address: 0x4764f36c)
- _wcsicmp (Address: 0x4764f2fc)
- _wcsnicmp (Address: 0x4764f3a8)
- _wtol (Address: 0x4764f384)
- _XcptFilter (Address: 0x4764f350)
- ??0exception@@QAE@ABQBD@Z (Address: 0x4764f30c)
- ??0exception@@QAE@ABQBDH@Z (Address: 0x4764f310)
- ??0exception@@QAE@ABV0@@Z (Address: 0x4764f358)
- ??0exception@@QAE@XZ (Address: 0x4764f35c)
- ??1exception@@UAE@XZ (Address: 0x4764f360)
- ??1type_info@@UAE@XZ (Address: 0x4764f344)
- ?what@exception@@UBEPBDXZ (Address: 0x4764f314)
- atol (Address: 0x4764f334)
- bsearch (Address: 0x4764f374)
- free (Address: 0x4764f300)
- malloc (Address: 0x4764f304)
- memcmp (Address: 0x4764f340)
- memcpy (Address: 0x4764f320)
- memcpy_s (Address: 0x4764f368)
- memmove (Address: 0x4764f328)
- memmove_s (Address: 0x4764f32c)
- memset (Address: 0x4764f3b0)
- qsort (Address: 0x4764f390)
- qsort_s (Address: 0x4764f38c)
- towupper (Address: 0x4764f380)
- wcscat_s (Address: 0x4764f388)
- wcschr (Address: 0x4764f394)
- wcsrchr (Address: 0x4764f3ac)
- wcstol (Address: 0x4764f398)
ntdll.dll
- LdrResSearchResource (Address: 0x4764f414)
- NtQueryEaFile (Address: 0x4764f3bc)
- NtQuerySecurityAttributesToken (Address: 0x4764f3b8)
- NtQuerySecurityObject (Address: 0x4764f3c8)
- NtQuerySystemInformation (Address: 0x4764f3e0)
- RtlAllocateHeap (Address: 0x4764f3e8)
- RtlAppendUnicodeStringToString (Address: 0x4764f3ec)
- RtlCompareUnicodeString (Address: 0x4764f418)
- RtlCopyUnicodeString (Address: 0x4764f400)
- RtlCreateUnicodeString (Address: 0x4764f3c4)
- RtlEqualSid (Address: 0x4764f40c)
- RtlEqualUnicodeString (Address: 0x4764f3f0)
- RtlFreeHeap (Address: 0x4764f3e4)
- RtlFreeUnicodeString (Address: 0x4764f3d4)
- RtlGetAce (Address: 0x4764f3f8)
- RtlGetDaclSecurityDescriptor (Address: 0x4764f410)
- RtlGetNtSystemRoot (Address: 0x4764f404)
- RtlGetOwnerSecurityDescriptor (Address: 0x4764f3fc)
- RtlGetVersion (Address: 0x4764f3c0)
- RtlImageNtHeaderEx (Address: 0x4764f3cc)
- RtlInitializeSidEx (Address: 0x4764f408)
- RtlInitUnicodeString (Address: 0x4764f3d0)
- RtlNtStatusToDosError (Address: 0x4764f3dc)
- RtlPrefixUnicodeString (Address: 0x4764f3f4)
- ZwQueryVolumeInformationFile (Address: 0x4764f3d8)
RPCRT4.dll
- NdrClientCall2 (Address: 0x4764f018)
- RpcBindingFree (Address: 0x4764f000)
- RpcBindingFromStringBindingW (Address: 0x4764f004)
- RpcBindingSetAuthInfoExW (Address: 0x4764f00c)
- RpcEpResolveBinding (Address: 0x4764f014)
- RpcStringBindingComposeW (Address: 0x4764f008)
- RpcStringFreeW (Address: 0x4764f010)