wintrust.dll

Description: Microsoft Trust Verification APIs

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: 3be70167bcfe1b4868c7d977801ea9c7

File Size: 347.6 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 11

Exported Functions

  • ComputeFirstPageHash (Ordinal: 1, Address: 0x30c80)
  • CryptCATVerifyMember (Ordinal: 2, Address: 0x32440)
  • CryptSIPGetInfo (Ordinal: 3, Address: 0x369b0)
  • CryptSIPGetRegWorkingFlags (Ordinal: 4, Address: 0x369a0)
  • GenericChainCertificateTrust (Ordinal: 5, Address: 0x3a280)
  • GenericChainFinalProv (Ordinal: 6, Address: 0x3a520)
  • HTTPSCertificateTrust (Ordinal: 7, Address: 0x145c0)
  • SoftpubDefCertInit (Ordinal: 8, Address: 0x3aae0)
  • SoftpubFreeDefUsageCallData (Ordinal: 9, Address: 0x3abb0)
  • SoftpubLoadDefUsageCallData (Ordinal: 10, Address: 0x3abf0)
  • WTHelperCertFindIssuerCertificate (Ordinal: 11, Address: 0x2cc00)
  • AddPersonalTrustDBPages (Ordinal: 12, Address: 0x3ad30)
  • CatalogCompactHashDatabase (Ordinal: 13, Address: 0x17ef0)
  • ConfigCiFinalPolicy (Ordinal: 14, Address: 0x3bc30)
  • ConfigCiPackageFamilyNameCheck (Ordinal: 15, Address: 0x3c0c0)
  • CryptCATAdminAcquireContext2 (Ordinal: 16, Address: 0x32e50)
  • CryptCATAdminAcquireContext (Ordinal: 17, Address: 0xbbf0)
  • CryptCATAdminAddCatalog (Ordinal: 18, Address: 0x32f10)
  • CryptCATAdminCalcHashFromFileHandle2 (Ordinal: 19, Address: 0x331f0)
  • CryptCATAdminCalcHashFromFileHandle3 (Ordinal: 20, Address: 0x33270)
  • CryptCATAdminCalcHashFromFileHandle (Ordinal: 21, Address: 0x332d0)
  • CryptCATAdminEnumCatalogFromHash (Ordinal: 22, Address: 0xc990)
  • CryptCATAdminPauseServiceForBackup (Ordinal: 23, Address: 0x33370)
  • CryptCATAdminReleaseCatalogContext (Ordinal: 24, Address: 0x176d0)
  • CryptCATAdminReleaseContext (Ordinal: 25, Address: 0x16fa0)
  • CryptCATAdminRemoveCatalog (Ordinal: 26, Address: 0x333b0)
  • CryptCATAdminResolveCatalogPath (Ordinal: 27, Address: 0x333f0)
  • CryptCATAllocSortedMemberInfo (Ordinal: 28, Address: 0x157f0)
  • CryptCATCDFClose (Ordinal: 29, Address: 0x34820)
  • CryptCATCDFEnumAttributes (Ordinal: 30, Address: 0x348a0)
  • CryptCATCDFEnumAttributesWithCDFTag (Ordinal: 31, Address: 0x348d0)
  • CryptCATCDFEnumCatAttributes (Ordinal: 32, Address: 0x34910)
  • CryptCATCDFEnumMembers (Ordinal: 33, Address: 0x349d0)
  • CryptCATCDFEnumMembersByCDFTag (Ordinal: 34, Address: 0x34a20)
  • CryptCATCDFEnumMembersByCDFTagEx (Ordinal: 35, Address: 0x34a60)
  • CryptCATCDFOpen (Ordinal: 36, Address: 0x34aa0)
  • CryptCATCatalogInfoFromContext (Ordinal: 37, Address: 0x17610)
  • CryptCATClose (Ordinal: 38, Address: 0x15050)
  • CryptCATEnumerateAttr (Ordinal: 39, Address: 0xec50)
  • CryptCATEnumerateCatAttr (Ordinal: 40, Address: 0xeb90)
  • CryptCATEnumerateMember (Ordinal: 41, Address: 0x32490)
  • CryptCATFreeSortedMemberInfo (Ordinal: 42, Address: 0x32550)
  • CryptCATGetAttrInfo (Ordinal: 43, Address: 0x32590)
  • CryptCATGetCatAttrInfo (Ordinal: 44, Address: 0x32610)
  • CryptCATGetMemberInfo (Ordinal: 45, Address: 0x32680)
  • CryptCATHandleFromStore (Ordinal: 46, Address: 0x17e90)
  • CryptCATOpen (Ordinal: 47, Address: 0x32730)
  • CryptCATPersistStore (Ordinal: 48, Address: 0x32840)
  • CryptCATPutAttrInfo (Ordinal: 49, Address: 0x32880)
  • CryptCATPutCatAttrInfo (Ordinal: 50, Address: 0x329f0)
  • CryptCATPutMemberInfo (Ordinal: 51, Address: 0x32c00)
  • CryptCATStoreFromHandle (Ordinal: 52, Address: 0x17e90)
  • CryptSIPCreateIndirectData (Ordinal: 53, Address: 0x15d70)
  • CryptSIPGetCaps (Ordinal: 54, Address: 0x15cc0)
  • CryptSIPGetSealedDigest (Ordinal: 55, Address: 0x36a00)
  • CryptSIPGetSignedDataMsg (Ordinal: 56, Address: 0x181b0)
  • CryptSIPPutSignedDataMsg (Ordinal: 57, Address: 0x36a90)
  • CryptSIPRemoveSignedDataMsg (Ordinal: 58, Address: 0x36b30)
  • CryptSIPVerifyIndirectData (Ordinal: 59, Address: 0x36bb0)
  • DllRegisterServer (Ordinal: 60, Address: 0x2ced0)
  • DllUnregisterServer (Ordinal: 61, Address: 0x2cf10)
  • DriverCleanupPolicy (Ordinal: 62, Address: 0xfc40)
  • DriverFinalPolicy (Ordinal: 63, Address: 0xf060)
  • DriverInitializePolicy (Ordinal: 64, Address: 0xf7e0)
  • FindCertsByIssuer (Ordinal: 65, Address: 0x3dc60)
  • GetAuthenticodeSha256Hash (Ordinal: 66, Address: 0x3c3a0)
  • HTTPSFinalProv (Ordinal: 67, Address: 0x10410)
  • IsCatalogFile (Ordinal: 68, Address: 0x35b70)
  • MsCatConstructHashTag (Ordinal: 69, Address: 0x35e80)
  • MsCatFreeHashTag (Ordinal: 70, Address: 0x35f10)
  • OfficeCleanupPolicy (Ordinal: 71, Address: 0x3df80)
  • OfficeInitializePolicy (Ordinal: 72, Address: 0x3df80)
  • OpenPersonalTrustDBDialog (Ordinal: 73, Address: 0x3ad50)
  • OpenPersonalTrustDBDialogEx (Ordinal: 74, Address: 0x3ad70)
  • SoftpubAuthenticode (Ordinal: 75, Address: 0xfe90)
  • SoftpubCheckCert (Ordinal: 76, Address: 0x17e00)
  • SoftpubCleanup (Ordinal: 77, Address: 0x12950)
  • SoftpubDllRegisterServer (Ordinal: 78, Address: 0x3e5d0)
  • SoftpubDllUnregisterServer (Ordinal: 79, Address: 0x3e800)
  • SoftpubDumpStructure (Ordinal: 80, Address: 0x3f150)
  • SoftpubInitialize (Ordinal: 81, Address: 0x12960)
  • SoftpubLoadMessage (Ordinal: 82, Address: 0x11870)
  • SoftpubLoadSignature (Ordinal: 83, Address: 0x117a0)
  • SrpCheckSmartlockerEAandProcessToken (Ordinal: 84, Address: 0x40ec0)
  • TrustDecode (Ordinal: 85, Address: 0x2f370)
  • TrustFindIssuerCertificate (Ordinal: 86, Address: 0x2f400)
  • TrustFreeDecode (Ordinal: 87, Address: 0x2f570)
  • TrustIsCertificateSelfSigned (Ordinal: 88, Address: 0x2f5a0)
  • TrustOpenStores (Ordinal: 89, Address: 0x2f610)
  • WTConvertCertCtxToChainInfo (Ordinal: 90, Address: 0x3c580)
  • WTGetBioSignatureInfo (Ordinal: 91, Address: 0x31740)
  • WTGetPluginSignatureInfo (Ordinal: 92, Address: 0x318c0)
  • WTGetSignatureInfo (Ordinal: 93, Address: 0xb2e0)
  • WTHelperCertCheckValidSignature (Ordinal: 94, Address: 0x2fef0)
  • WTHelperCertIsSelfSigned (Ordinal: 95, Address: 0x2cc30)
  • WTHelperCheckCertUsage (Ordinal: 96, Address: 0x2ff20)
  • WTHelperGetAgencyInfo (Ordinal: 97, Address: 0x30010)
  • WTHelperGetFileHandle (Ordinal: 98, Address: 0x300a0)
  • WTHelperGetFileHash (Ordinal: 99, Address: 0x2fce0)
  • WTHelperGetFileName (Ordinal: 100, Address: 0x300e0)
  • WTHelperGetKnownUsages (Ordinal: 101, Address: 0x30170)
  • WTHelperGetProvCertFromChain (Ordinal: 102, Address: 0x301f0)
  • WTHelperGetProvPrivateDataFromChain (Ordinal: 103, Address: 0x30220)
  • WTHelperGetProvSignerFromChain (Ordinal: 104, Address: 0x17da0)
  • WTHelperIsChainedToMicrosoft (Ordinal: 105, Address: 0x30280)
  • WTHelperIsChainedToMicrosoftFromStateData (Ordinal: 106, Address: 0x30390)
  • WTHelperIsInRootStore (Ordinal: 107, Address: 0x30430)
  • WTHelperOpenKnownStores (Ordinal: 108, Address: 0x304f0)
  • WTHelperProvDataFromStateData (Ordinal: 109, Address: 0x17e90)
  • WTIsFirstConfigCiResultPreferred (Ordinal: 110, Address: 0x3c5d0)
  • WTLogConfigCiScriptEvent (Ordinal: 111, Address: 0x3c630)
  • WTLogConfigCiSignerEvent (Ordinal: 112, Address: 0x3c970)
  • WTValidateBioSignaturePolicy (Ordinal: 113, Address: 0x319e0)
  • WVTAsn1CatMemberInfo2Decode (Ordinal: 114, Address: 0x17b90)
  • WVTAsn1CatMemberInfo2Encode (Ordinal: 115, Address: 0x2d560)
  • WVTAsn1CatMemberInfoDecode (Ordinal: 116, Address: 0x2d600)
  • WVTAsn1CatMemberInfoEncode (Ordinal: 117, Address: 0x2d6b0)
  • WVTAsn1CatNameValueDecode (Ordinal: 118, Address: 0x174d0)
  • WVTAsn1CatNameValueEncode (Ordinal: 119, Address: 0x2d6f0)
  • WVTAsn1IntentToSealAttributeDecode (Ordinal: 120, Address: 0x2d740)
  • WVTAsn1IntentToSealAttributeEncode (Ordinal: 121, Address: 0x2d7d0)
  • WVTAsn1SealingSignatureAttributeDecode (Ordinal: 122, Address: 0x2d800)
  • WVTAsn1SealingSignatureAttributeEncode (Ordinal: 123, Address: 0x2d8b0)
  • WVTAsn1SealingTimestampAttributeDecode (Ordinal: 124, Address: 0x2d950)
  • WVTAsn1SealingTimestampAttributeEncode (Ordinal: 125, Address: 0x2da00)
  • WVTAsn1SpcFinancialCriteriaInfoDecode (Ordinal: 126, Address: 0x2da50)
  • WVTAsn1SpcFinancialCriteriaInfoEncode (Ordinal: 127, Address: 0x2dae0)
  • WVTAsn1SpcIndirectDataContentDecode (Ordinal: 128, Address: 0x2db10)
  • WVTAsn1SpcIndirectDataContentEncode (Ordinal: 129, Address: 0x2dc40)
  • WVTAsn1SpcLinkDecode (Ordinal: 130, Address: 0x2dd10)
  • WVTAsn1SpcLinkEncode (Ordinal: 131, Address: 0xa910)
  • WVTAsn1SpcMinimalCriteriaInfoDecode (Ordinal: 132, Address: 0x2ddc0)
  • WVTAsn1SpcMinimalCriteriaInfoEncode (Ordinal: 133, Address: 0x2de50)
  • WVTAsn1SpcPeImageDataDecode (Ordinal: 134, Address: 0x2de80)
  • WVTAsn1SpcPeImageDataEncode (Ordinal: 135, Address: 0x18f20)
  • WVTAsn1SpcSigInfoDecode (Ordinal: 136, Address: 0x2df70)
  • WVTAsn1SpcSigInfoEncode (Ordinal: 137, Address: 0x2e000)
  • WVTAsn1SpcSpAgencyInfoDecode (Ordinal: 138, Address: 0x2e040)
  • WVTAsn1SpcSpAgencyInfoEncode (Ordinal: 139, Address: 0x2e250)
  • WVTAsn1SpcSpOpusInfoDecode (Ordinal: 140, Address: 0x2e3f0)
  • WVTAsn1SpcSpOpusInfoEncode (Ordinal: 141, Address: 0x2e500)
  • WVTAsn1SpcStatementTypeDecode (Ordinal: 142, Address: 0x2e5d0)
  • WVTAsn1SpcStatementTypeEncode (Ordinal: 143, Address: 0x2e6d0)
  • WinVerifyTrust (Ordinal: 144, Address: 0x10a20)
  • WinVerifyTrustEx (Ordinal: 145, Address: 0x2fda0)
  • WintrustAddActionID (Ordinal: 146, Address: 0x2e770)
  • WintrustAddDefaultForUsage (Ordinal: 147, Address: 0x2f740)
  • WintrustCertificateTrust (Ordinal: 148, Address: 0x12cf0)
  • WintrustGetDefaultForUsage (Ordinal: 149, Address: 0x2f950)
  • WintrustGetRegPolicyFlags (Ordinal: 150, Address: 0x2ebf0)
  • WintrustLoadFunctionPointers (Ordinal: 151, Address: 0xfa30)
  • WintrustRemoveActionID (Ordinal: 152, Address: 0x2e8f0)
  • WintrustSetDefaultIncludePEPageHashes (Ordinal: 153, Address: 0x37f50)
  • WintrustSetRegPolicyFlags (Ordinal: 154, Address: 0x2ec80)
  • WintrustUserWriteabilityCheck (Ordinal: 155, Address: 0x3cbc0)
  • mscat32DllRegisterServer (Ordinal: 156, Address: 0x17f70)
  • mscat32DllUnregisterServer (Ordinal: 157, Address: 0x17f70)
  • mssip32DllRegisterServer (Ordinal: 158, Address: 0x36ca0)
  • mssip32DllUnregisterServer (Ordinal: 159, Address: 0x36ee0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x4764f020)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatA (Address: 0x4764f02c)
  • GetTimeFormatA (Address: 0x4764f028)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x4764f038)
  • IsDebuggerPresent (Address: 0x4764f034)
  • OutputDebugStringA (Address: 0x4764f03c)
  • OutputDebugStringW (Address: 0x4764f040)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x4764f048)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x4764f050)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x4764f060)
  • SetLastError (Address: 0x4764f064)
  • SetUnhandledExceptionFilter (Address: 0x4764f05c)
  • UnhandledExceptionFilter (Address: 0x4764f058)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x4764f07c)
  • CreateDirectoryW (Address: 0x4764f0a4)
  • CreateFileW (Address: 0x4764f074)
  • FindClose (Address: 0x4764f088)
  • FindFirstFileW (Address: 0x4764f080)
  • FindNextFileW (Address: 0x4764f084)
  • GetFileAttributesExW (Address: 0x4764f070)
  • GetFileAttributesW (Address: 0x4764f08c)
  • GetFileInformationByHandle (Address: 0x4764f094)
  • GetFileSize (Address: 0x4764f078)
  • GetFileSizeEx (Address: 0x4764f0ac)
  • ReadFile (Address: 0x4764f098)
  • SetEndOfFile (Address: 0x4764f0a0)
  • SetFileAttributesW (Address: 0x4764f0a8)
  • SetFilePointer (Address: 0x4764f06c)
  • SetFilePointerEx (Address: 0x4764f09c)
  • WriteFile (Address: 0x4764f090)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x4764f0b8)
  • DuplicateHandle (Address: 0x4764f0b4)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x4764f0c8)
  • HeapAlloc (Address: 0x4764f0c4)
  • HeapFree (Address: 0x4764f0c0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x4764f0d0)
  • LocalFree (Address: 0x4764f0d8)
  • LocalReAlloc (Address: 0x4764f0d4)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x4764f0e0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CreateFileMappingA (Address: 0x4764f0e8)
  • FindResourceExA (Address: 0x4764f0ec)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x4764f120)
  • FreeLibrary (Address: 0x4764f10c)
  • FreeResource (Address: 0x4764f0f4)
  • GetModuleFileNameA (Address: 0x4764f104)
  • GetModuleHandleExA (Address: 0x4764f11c)
  • GetModuleHandleExW (Address: 0x4764f0f8)
  • GetModuleHandleW (Address: 0x4764f108)
  • GetProcAddress (Address: 0x4764f100)
  • LoadLibraryExA (Address: 0x4764f0fc)
  • LoadResource (Address: 0x4764f118)
  • LockResource (Address: 0x4764f110)
  • SizeofResource (Address: 0x4764f114)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryA (Address: 0x4764f12c)
  • LoadLibraryW (Address: 0x4764f128)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x4764f134)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x4764f140)
  • MapViewOfFile (Address: 0x4764f13c)
  • UnmapViewOfFile (Address: 0x4764f144)
api-ms-win-core-memory-l1-1-1.dll
  • VirtualUnlock (Address: 0x4764f14c)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsA (Address: 0x4764f164)
  • ExpandEnvironmentStringsW (Address: 0x4764f158)
  • GetCurrentDirectoryW (Address: 0x4764f160)
  • GetEnvironmentVariableA (Address: 0x4764f15c)
  • GetEnvironmentVariableW (Address: 0x4764f154)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x4764f17c)
  • GetCurrentProcessId (Address: 0x4764f16c)
  • GetCurrentThread (Address: 0x4764f180)
  • GetCurrentThreadId (Address: 0x4764f170)
  • OpenProcessToken (Address: 0x4764f178)
  • OpenThreadToken (Address: 0x4764f174)
  • TerminateProcess (Address: 0x4764f184)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x4764f18c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x4764f1b4)
  • RegCreateKeyExW (Address: 0x4764f1c0)
  • RegDeleteKeyExW (Address: 0x4764f1b8)
  • RegEnumKeyExA (Address: 0x4764f1c4)
  • RegEnumValueA (Address: 0x4764f1a8)
  • RegGetValueW (Address: 0x4764f1bc)
  • RegOpenKeyExA (Address: 0x4764f1a4)
  • RegOpenKeyExW (Address: 0x4764f19c)
  • RegQueryInfoKeyA (Address: 0x4764f194)
  • RegQueryValueExA (Address: 0x4764f1b0)
  • RegQueryValueExW (Address: 0x4764f1a0)
  • RegSetValueExA (Address: 0x4764f1ac)
  • RegSetValueExW (Address: 0x4764f198)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x4764f1cc)
  • WideCharToMultiByte (Address: 0x4764f1d0)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpA (Address: 0x4764f1dc)
  • lstrlenA (Address: 0x4764f1d8)
  • lstrlenW (Address: 0x4764f1e0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x4764f208)
  • AcquireSRWLockShared (Address: 0x4764f1f0)
  • CreateEventA (Address: 0x4764f1f8)
  • CreateMutexA (Address: 0x4764f20c)
  • CreateMutexExW (Address: 0x4764f1f4)
  • CreateSemaphoreExW (Address: 0x4764f230)
  • DeleteCriticalSection (Address: 0x4764f214)
  • EnterCriticalSection (Address: 0x4764f228)
  • InitializeCriticalSection (Address: 0x4764f238)
  • InitializeCriticalSectionEx (Address: 0x4764f1ec)
  • LeaveCriticalSection (Address: 0x4764f224)
  • OpenSemaphoreW (Address: 0x4764f200)
  • ReleaseMutex (Address: 0x4764f234)
  • ReleaseSemaphore (Address: 0x4764f21c)
  • ReleaseSRWLockExclusive (Address: 0x4764f218)
  • ReleaseSRWLockShared (Address: 0x4764f1fc)
  • ResetEvent (Address: 0x4764f22c)
  • SetEvent (Address: 0x4764f210)
  • WaitForMultipleObjectsEx (Address: 0x4764f220)
  • WaitForSingleObject (Address: 0x4764f1e8)
  • WaitForSingleObjectEx (Address: 0x4764f204)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x4764f240)
  • Sleep (Address: 0x4764f244)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x4764f260)
  • GetSystemDirectoryW (Address: 0x4764f254)
  • GetSystemInfo (Address: 0x4764f250)
  • GetSystemTimeAsFileTime (Address: 0x4764f25c)
  • GetTickCount (Address: 0x4764f24c)
  • GetTickCount64 (Address: 0x4764f258)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x4764f270)
  • CreateThreadpoolTimer (Address: 0x4764f268)
  • SetThreadpoolTimer (Address: 0x4764f274)
  • WaitForThreadpoolTimerCallbacks (Address: 0x4764f26c)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x4764f27c)
api-ms-win-core-version-l1-1-0.dll
  • VerQueryValueW (Address: 0x4764f284)
api-ms-win-core-version-private-l1-1-0.dll
  • GetFileVersionInfoByHandle (Address: 0x4764f28c)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x4764f2a0)
  • EventSetInformation (Address: 0x4764f294)
  • EventUnregister (Address: 0x4764f298)
  • EventWriteTransfer (Address: 0x4764f29c)
api-ms-win-security-base-l1-1-0.dll
  • AddAccessAllowedAceEx (Address: 0x4764f2b0)
  • AddAce (Address: 0x4764f2c8)
  • AllocateAndInitializeSid (Address: 0x4764f2ec)
  • CopySid (Address: 0x4764f2b8)
  • EqualSid (Address: 0x4764f2e4)
  • FreeSid (Address: 0x4764f2d4)
  • GetAce (Address: 0x4764f2d8)
  • GetAclInformation (Address: 0x4764f2d0)
  • GetFileSecurityW (Address: 0x4764f2dc)
  • GetLengthSid (Address: 0x4764f2e0)
  • GetSecurityDescriptorDacl (Address: 0x4764f2c0)
  • GetSidIdentifierAuthority (Address: 0x4764f2a8)
  • GetSidSubAuthority (Address: 0x4764f2e8)
  • GetSidSubAuthorityCount (Address: 0x4764f2c4)
  • GetTokenInformation (Address: 0x4764f2bc)
  • InitializeAcl (Address: 0x4764f2f4)
  • InitializeSecurityDescriptor (Address: 0x4764f2f0)
  • IsValidSid (Address: 0x4764f2b4)
  • SetFileSecurityW (Address: 0x4764f2ac)
  • SetSecurityDescriptorDacl (Address: 0x4764f2cc)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x4764f33c)
  • __dllonexit (Address: 0x4764f324)
  • _amsg_exit (Address: 0x4764f354)
  • _callnewh (Address: 0x4764f308)
  • _CxxThrowException (Address: 0x4764f318)
  • _except_handler4_common (Address: 0x4764f348)
  • _initterm (Address: 0x4764f34c)
  • _itow_s (Address: 0x4764f39c)
  • _lock (Address: 0x4764f330)
  • _ltoa (Address: 0x4764f378)
  • _memicmp (Address: 0x4764f3a0)
  • _onexit (Address: 0x4764f370)
  • _purecall (Address: 0x4764f364)
  • _stricmp (Address: 0x4764f3a4)
  • _unlock (Address: 0x4764f31c)
  • _vsnprintf (Address: 0x4764f37c)
  • _vsnprintf_s (Address: 0x4764f338)
  • _vsnwprintf (Address: 0x4764f36c)
  • _wcsicmp (Address: 0x4764f2fc)
  • _wcsnicmp (Address: 0x4764f3a8)
  • _wtol (Address: 0x4764f384)
  • _XcptFilter (Address: 0x4764f350)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x4764f30c)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x4764f310)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x4764f358)
  • ??0exception@@QAE@XZ (Address: 0x4764f35c)
  • ??1exception@@UAE@XZ (Address: 0x4764f360)
  • ??1type_info@@UAE@XZ (Address: 0x4764f344)
  • ?what@exception@@UBEPBDXZ (Address: 0x4764f314)
  • atol (Address: 0x4764f334)
  • bsearch (Address: 0x4764f374)
  • free (Address: 0x4764f300)
  • malloc (Address: 0x4764f304)
  • memcmp (Address: 0x4764f340)
  • memcpy (Address: 0x4764f320)
  • memcpy_s (Address: 0x4764f368)
  • memmove (Address: 0x4764f328)
  • memmove_s (Address: 0x4764f32c)
  • memset (Address: 0x4764f3b0)
  • qsort (Address: 0x4764f390)
  • qsort_s (Address: 0x4764f38c)
  • towupper (Address: 0x4764f380)
  • wcscat_s (Address: 0x4764f388)
  • wcschr (Address: 0x4764f394)
  • wcsrchr (Address: 0x4764f3ac)
  • wcstol (Address: 0x4764f398)
ntdll.dll
  • LdrResSearchResource (Address: 0x4764f414)
  • NtQueryEaFile (Address: 0x4764f3bc)
  • NtQuerySecurityAttributesToken (Address: 0x4764f3b8)
  • NtQuerySecurityObject (Address: 0x4764f3c8)
  • NtQuerySystemInformation (Address: 0x4764f3e0)
  • RtlAllocateHeap (Address: 0x4764f3e8)
  • RtlAppendUnicodeStringToString (Address: 0x4764f3ec)
  • RtlCompareUnicodeString (Address: 0x4764f418)
  • RtlCopyUnicodeString (Address: 0x4764f400)
  • RtlCreateUnicodeString (Address: 0x4764f3c4)
  • RtlEqualSid (Address: 0x4764f40c)
  • RtlEqualUnicodeString (Address: 0x4764f3f0)
  • RtlFreeHeap (Address: 0x4764f3e4)
  • RtlFreeUnicodeString (Address: 0x4764f3d4)
  • RtlGetAce (Address: 0x4764f3f8)
  • RtlGetDaclSecurityDescriptor (Address: 0x4764f410)
  • RtlGetNtSystemRoot (Address: 0x4764f404)
  • RtlGetOwnerSecurityDescriptor (Address: 0x4764f3fc)
  • RtlGetVersion (Address: 0x4764f3c0)
  • RtlImageNtHeaderEx (Address: 0x4764f3cc)
  • RtlInitializeSidEx (Address: 0x4764f408)
  • RtlInitUnicodeString (Address: 0x4764f3d0)
  • RtlNtStatusToDosError (Address: 0x4764f3dc)
  • RtlPrefixUnicodeString (Address: 0x4764f3f4)
  • ZwQueryVolumeInformationFile (Address: 0x4764f3d8)
RPCRT4.dll
  • NdrClientCall2 (Address: 0x4764f018)
  • RpcBindingFree (Address: 0x4764f000)
  • RpcBindingFromStringBindingW (Address: 0x4764f004)
  • RpcBindingSetAuthInfoExW (Address: 0x4764f00c)
  • RpcEpResolveBinding (Address: 0x4764f014)
  • RpcStringBindingComposeW (Address: 0x4764f008)
  • RpcStringFreeW (Address: 0x4764f010)