Windows 7 DLL File Information - FWPUCLNT.DLL |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | FWP/IPsec User-Mode API |
File Version: | 6.1.7100.0 (winmain_win7rc.090421-1700) |
Company: | Microsoft Corporation |
Product Name: | Microsoft Windows Operating System |
DLL popularity | Medium - 16 other DLL files in system32 directory are statically linked to this file. |
File Size: | 211 KB |
Total Number of Exported Functions: | 185 |
Total Number of Exported Functions With Names: | 185 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 207,360 Bytes | 95.7% | Read, Execute | Code |
.data | 0x00034000 | 512 Bytes | 0.2% | Write, Read | Initialized Data |
.rsrc | 0x00035000 | 1,536 Bytes | 0.7% | Read | Initialized Data |
.reloc | 0x00036000 | 6,144 Bytes | 2.8% | Read, Discardable | Initialized Data |
Static Linking
FWPUCLNT.DLL is statically linked to the following files:msvcrt.dll
ntdll.dll
KERNEL32.dll
RPCRT4.dll
This means that when FWPUCLNT.DLL is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, FWPUCLNT.DLL won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 412 | 71,226 Bytes | 32.9% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 2 | 1,120 Bytes | 0.5% |
Total | 414 | 72,346 Bytes | 33.4% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
String ID | String Text |
---|---|
1 | WFPv4 |
2 | WFPv4 |
3 | WFPv4 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 4. |
5 | Inbound Packets Discarded/sec |
6 | Inbound Packets Discarded/sec |
7 | Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. |
9 | Outbound Packets Discarded/sec |
10 | Outbound Packets Discarded/sec |
11 | Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. |
13 | Packets Discarded/sec |
14 | Packets Discarded/sec |
15 | Packets Discarded per Second is the rate at which the total of inbound and outbound packets are discarded by the Windows Filtering Platform. |
17 | Blocked Binds |
18 | Blocked Binds |
19 | Blocked Binds is the number of network resource assignment requests blocked by the Windows Filtering Platform since the computer was last started. |
21 | Inbound Connections Blocked/sec |
22 | Inbound Connections Blocked/sec |
23 | Inbound Connections Blocked per Second is the rate at which inbound connections are being blocked by the Windows Filtering Platform. |
25 | Outbound Connections Blocked/sec |
26 | Outbound Connections Blocked/sec |
27 | Outbound Connections Blocked per Second is the rate at which outbound connections are being blocked by the Windows Filtering Platform. |
29 | Inbound Connections Allowed/sec |
30 | Inbound Connections Allowed/sec |
31 | Inbound Connections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. |
33 | Outbound Connections Allowed/sec |
34 | Outbound Connections Allowed/sec |
35 | Outbound Connections Allowed per Second is the rate at which outbound connections are being allowed by the Windows Filtering Platform. |
37 | Inbound Connections |
38 | Inbound Connections |
39 | Inbound Connections is the number of inbound connections allowed by the Windows Filtering Platform since the computer was last started. |
41 | Outbound Connections |
42 | Outbound Connections |
43 | Outbound Connections is the number of outbound connections allowed by the Windows Filtering Platform since the computer was last started. |
45 | Active Inbound Connections |
46 | Active Inbound Connections |
47 | Active Inbound Connections is the number of current inbound connections allowed by the Windows Filtering Platform. |
49 | Active Outbound Connections |
50 | Active Outbound Connections |
51 | Active Outbound Connections is the number of current outbound connections allowed by the Windows Filtering Platform. |
53 | Allowed Classifies/sec |
54 | Allowed Classifies/sec |
55 | Allowed Classifies per Second is the rate of Windows Filtering Platform security rule evaluations which allow network activity. |
57 | WFPv6 |
58 | WFPv6 |
59 | WFPv6 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 6. |
63 | WFP is the set of Windows Filtering Platform counters that do not apply to any specific Internet Protocol version. |
65 | Provider Count |
66 | Provider Count |
67 | Provider Count is the number of providers registered with the Windows Filtering Platform. |
69 | IPsec Driver |
70 | IPsec Driver |
71 | IPsec Driver is the set of Internet Protocol security (IPsec) driver counters that apply to traffic over Internet Protocol version 4 and Internet Protocol version 6. |
73 | Active Security Associations |
74 | Active Security Associations |
75 | Active Security Associations is the number of active quick mode security associations. |
77 | Pending Security Associations |
78 | Pending Security Associations |
79 | Pending Security Associations is the number of pending quick mode security associations. |
81 | Incorrect SPI Packets |
82 | Incorrect SPI Packets |
83 | Incorrect SPI packets is the number of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. |
85 | Incorrect SPI Packets/sec |
86 | Incorrect SPI Packets/sec |
87 | Incorrect SPI packets per Second is the rate of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. |
89 | Bytes Received in Tunnel Mode/sec |
90 | Bytes Received in Tunnel Mode/sec |
91 | Bytes Received in Tunnel Mode per Second is the rate of bytes received using tunnel mode. |
93 | Bytes Sent in Tunnel Mode/sec |
94 | Bytes Sent in Tunnel Mode/sec |
95 | Bytes Sent in Tunnel Mode per Second is the rate of bytes sent using tunnel mode. |
97 | Bytes Received in Transport Mode/sec |
98 | Bytes Received in Transport Mode/sec |
99 | Bytes Received in Transport Mode per Second is the rate of bytes received using transport mode. |
101 | Bytes Sent in Transport Mode/sec |
102 | Bytes Sent in Transport Mode/sec |
103 | Bytes Sent in Transport Mode per Second is the rate of bytes sent using transport mode. |
105 | Offloaded Security Associations |
106 | Offloaded Security Associations |
107 | Offloaded Security Associations is the number of active quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. |
109 | Offloaded Bytes Received/sec |
110 | Offloaded Bytes Received/sec |
111 | Offloaded Bytes Received per Second is the rate of bytes received using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. |
113 | Offloaded Bytes Sent/sec |
114 | Offloaded Bytes Sent/sec |
115 | Offloaded Bytes Sent per Second is the rate of bytes sent using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. |
117 | Packets That Failed Replay Detection |
118 | Packets That Failed Replay Detection |
119 | Packets That Failed Replay Detection is the number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. |
121 | Packets That Failed Replay Detection/sec |
122 | Packets That Failed Replay Detection/sec |
123 | Packets That Failed Replay Detection per Second is the rate of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. |
125 | Packets Not Authenticated |
126 | Packets Not Authenticated |
127 | Packets Not Authenticated is the number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. |
129 | Packets Not Authenticated/sec |
130 | Packets Not Authenticated/sec |
131 | Packets Not Authenticated per Second is the rate of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. |
133 | Packets Not Decrypted |
134 | Packets Not Decrypted |
135 | Packets Not Decrypted is the number of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. |
137 | Packets Not Decrypted/sec |
138 | Packets Not Decrypted/sec |
139 | Packets Not Decrypted per Second is the rate of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. |
141 | SA Rekeys |
142 | SA Rekeys |
143 | SA Rekeys is the number of successful rekey operations for quick mode security associations since the computer was last started. |
145 | Security Associations Added |
146 | Security Associations Added |
147 | Security Associations Added is the number of security associations added since the computer was last started. |
149 | Packets That Failed ESP Validation |
150 | Packets That Failed ESP Validation |
151 | Packets That Failed ESP Validation is the number of packets received that failed ESP validation since the computer was last started. |
153 | Packets That Failed ESP Validation/sec |
154 | Packets That Failed ESP Validation/sec |
155 | Packets That Failed ESP Validation per Second is the rate of packets received that failed ESP validation since the computer was last started. |
157 | Packets That Failed UDP-ESP Validation |
158 | Packets That Failed UDP-ESP Validation |
159 | Packets That Failed UDP-ESP Validation is the number of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. |
161 | Packets That Failed UDP-ESP Validation/sec |
162 | Packets That Failed UDP-ESP Validation/sec |
163 | Packets That Failed UDP-ESP Validation per Second is the rate of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. |
165 | Packets Received Over Wrong SA |
166 | Packets Received Over Wrong SA |
167 | Packets Received Over Wrong SA is the number of packets received over the wrong security association since the computer was last started. |
169 | Packets Received Over Wrong SA/sec |
170 | Packets Received Over Wrong SA/sec |
171 | Packets Received Over Wrong SA per Second is the rate of packets received over the wrong security association since the computer was last started. |
173 | Plaintext Packets Received |
174 | Plaintext Packets Received |
175 | Plaintext Packets Received is the number of clear text packets received since the computer was last started. |
177 | Plaintext Packets Received/sec |
178 | Plaintext Packets Received/sec |
179 | Plaintext Packets Received per Second is the rate of clear text packets received since the computer was last started. |
181 | Total Inbound Packets Received |
182 | Total Inbound Packets Received |
183 | Total Inbound Packets Received is the total number of inbound packets successfully processed by IPsec, since the computer was last started. |
185 | Inbound Packets Received/sec |
186 | Inbound Packets Received/sec |
187 | Inbound Packets Received per Second is the rate of inbound packets successfully processed by IPsec. |
189 | Total Inbound Packets Dropped |
190 | Total Inbound Packets Dropped |
191 | Total Inbound Packets Dropped is the total number of inbound packets dropped by IPsec, since the computer was last started. |
193 | Inbound Packets Dropped/sec |
194 | Inbound Packets Dropped/sec |
195 | Inbound Packets Dropped per Second is the rate of inbound packets dropped by IPsec. |
197 | IPsec IKEv1 IPv4 |
198 | IPsec IKEv1 IPv4 |
199 | IPsec IKEv1 IPv4 is the set of Internet Protocol security (IPsec) Internet Key Exchange version 1 (IKEv1) counters that apply to traffic and connections over Internet Protocol version 4. |
201 | Active Main Mode SAs |
202 | Active Main Mode SAs |
203 | Active Main Mode SAs is the number of currently active main mode security associations. |
205 | Pending Main Mode Negotiations |
206 | Pending Main Mode Negotiations |
207 | Pending Main Mode Negotiations is the number of pending main mode negotiations. |
209 | Main Mode Negotiations |
210 | Main Mode Negotiations |
211 | Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. |
213 | Main Mode Negotiations/sec |
214 | Main Mode Negotiations/sec |
215 | Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. |
217 | Successful Main Mode Negotiations |
218 | Successful Main Mode Negotiations |
219 | Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. |
221 | Successful Main Mode Negotiations/sec |
222 | Successful Main Mode Negotiations/sec |
223 | Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. |
225 | Failed Main Mode Negotiations |
226 | Failed Main Mode Negotiations |
227 | Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. |
229 | Failed Main Mode Negotiations/sec |
230 | Failed Main Mode Negotiations/sec |
231 | Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. |
233 | Main Mode Negotiation Requests Received |
234 | Main Mode Negotiation Requests Received |
235 | Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. |
237 | Main Mode Negotiation Requests Received/sec |
238 | Main Mode Negotiation Requests Received/sec |
239 | Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. |
241 | Active Quick Mode SAs |
242 | Active Quick Mode SAs |
243 | Active Quick Mode SAs is the number of currently active quick mode security associations. |
245 | Pending Quick Mode Negotiations |
246 | Pending Quick Mode Negotiations |
247 | Pending Quick Mode Negotiations is the number of pending quick mode negotiations. |
249 | Quick Mode Negotiations |
250 | Quick Mode Negotiations |
251 | Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. |
253 | Quick Mode Negotiations/sec |
254 | Quick Mode Negotiations/sec |
255 | Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. |
257 | Successful Quick Mode Negotiations |
258 | Successful Quick Mode Negotiations |
259 | Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. |
261 | Successful Quick Mode Negotiations/sec |
262 | Successful Quick Mode Negotiations/sec |
263 | Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. |
265 | Failed Quick Mode Negotiations |
266 | Failed Quick Mode Negotiations |
267 | Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. |
269 | Failed Quick Mode Negotiations/sec |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:FwpmCalloutAdd0 | FwpmCalloutCreateEnumHandle0 |
FwpmCalloutDeleteById0 | FwpmCalloutDeleteByKey0 |
FwpmCalloutDestroyEnumHandle0 | FwpmCalloutEnum0 |
FwpmCalloutGetById0 | FwpmCalloutGetByKey0 |
FwpmCalloutGetSecurityInfoByKey0 | FwpmCalloutSetSecurityInfoByKey0 |
FwpmCalloutSubscribeChanges0 | FwpmCalloutSubscriptionsGet0 |
FwpmCalloutUnsubscribeChanges0 | FwpmDiagnoseNetFailure0 |
FwpmEngineClose0 | FwpmEngineGetOption0 |
FwpmEngineGetSecurityInfo0 | FwpmEngineOpen0 |
FwpmEngineSetOption0 | FwpmEngineSetSecurityInfo0 |
FwpmEventProviderCreate0 | FwpmEventProviderDestroy0 |
FwpmEventProviderFireNetEvent0 | FwpmEventProviderIsNetEventTypeEnabled0 |
FwpmFilterAdd0 | FwpmFilterCreateEnumHandle0 |
FwpmFilterDeleteById0 | FwpmFilterDeleteByKey0 |
FwpmFilterDestroyEnumHandle0 | FwpmFilterEnum0 |
FwpmFilterGetById0 | FwpmFilterGetByKey0 |
FwpmFilterGetSecurityInfoByKey0 | FwpmFilterSetSecurityInfoByKey0 |
FwpmFilterSubscribeChanges0 | FwpmFilterSubscriptionsGet0 |
FwpmFilterUnsubscribeChanges0 | FwpmFreeMemory0 |
FwpmGetAppIdFromFileName0 | FwpmIPsecTunnelAdd0 |
FwpmIPsecTunnelAdd1 | FwpmIPsecTunnelAddConditions0 |
FwpmIPsecTunnelDeleteByKey0 | FwpmLayerCreateEnumHandle0 |
FwpmLayerDestroyEnumHandle0 | FwpmLayerEnum0 |
FwpmLayerGetById0 | FwpmLayerGetByKey0 |
FwpmLayerGetSecurityInfoByKey0 | FwpmLayerSetSecurityInfoByKey0 |
FwpmNetEventCreateEnumHandle0 | FwpmNetEventDestroyEnumHandle0 |
FwpmNetEventEnum0 | FwpmNetEventEnum1 |
FwpmNetEventSubscribe0 | FwpmNetEventSubscriptionsGet0 |
FwpmNetEventUnsubscribe0 | FwpmNetEventsGetSecurityInfo0 |
FwpmNetEventsLost0 | FwpmNetEventsSetSecurityInfo0 |
FwpmProcessNameResolutionEvent0 | FwpmProviderAdd0 |
FwpmProviderContextAdd0 | FwpmProviderContextAdd1 |
FwpmProviderContextCreateEnumHandle0 | FwpmProviderContextDeleteById0 |
FwpmProviderContextDeleteByKey0 | FwpmProviderContextDestroyEnumHandle0 |
FwpmProviderContextEnum0 | FwpmProviderContextEnum1 |
FwpmProviderContextGetById0 | FwpmProviderContextGetById1 |
FwpmProviderContextGetByKey0 | FwpmProviderContextGetByKey1 |
FwpmProviderContextGetSecurityInfoByKey0 | FwpmProviderContextSetSecurityInfoByKey0 |
FwpmProviderContextSubscribeChanges0 | FwpmProviderContextSubscriptionsGet0 |
FwpmProviderContextUnsubscribeChanges0 | FwpmProviderCreateEnumHandle0 |
FwpmProviderDeleteByKey0 | FwpmProviderDestroyEnumHandle0 |
FwpmProviderEnum0 | FwpmProviderGetByKey0 |
FwpmProviderGetSecurityInfoByKey0 | FwpmProviderSetSecurityInfoByKey0 |
FwpmProviderSubscribeChanges0 | FwpmProviderSubscriptionsGet0 |
FwpmProviderUnsubscribeChanges0 | FwpmSessionCreateEnumHandle0 |
FwpmSessionDestroyEnumHandle0 | FwpmSessionEnum0 |
FwpmSubLayerAdd0 | FwpmSubLayerCreateEnumHandle0 |
FwpmSubLayerDeleteByKey0 | FwpmSubLayerDestroyEnumHandle0 |
FwpmSubLayerEnum0 | FwpmSubLayerGetByKey0 |
FwpmSubLayerGetSecurityInfoByKey0 | FwpmSubLayerSetSecurityInfoByKey0 |
FwpmSubLayerSubscribeChanges0 | FwpmSubLayerSubscriptionsGet0 |
FwpmSubLayerUnsubscribeChanges0 | FwpmSystemPortsGet0 |
FwpmSystemPortsSubscribe0 | FwpmSystemPortsUnsubscribe0 |
FwpmTraceRestoreDefaults0 | FwpmTransactionAbort0 |
FwpmTransactionBegin0 | FwpmTransactionCommit0 |
FwpsAleEndpointCreateEnumHandle0 | FwpsAleEndpointDestroyEnumHandle0 |
FwpsAleEndpointEnum0 | FwpsAleEndpointGetById0 |
FwpsAleEndpointGetSecurityInfo0 | FwpsAleEndpointSetSecurityInfo0 |
FwpsAleExplicitCredentialsQuery0 | FwpsAleGetPortStatus0 |
FwpsClassifyUser0 | FwpsFreeMemory0 |
FwpsGetInProcReplicaOffset0 | FwpsLayerCreateInProcReplica0 |
FwpsLayerReleaseInProcReplica0 | FwpsOpenToken0 |
FwpsQueryIPsecDosFWUsed0 | FwpsQueryIPsecOffloadDone0 |
GetUnifiedTraceHandle | IPsecDospGetSecurityInfo0 |
IPsecDospGetStatistics0 | IPsecDospSetSecurityInfo0 |
IPsecDospStateCreateEnumHandle0 | IPsecDospStateDestroyEnumHandle0 |
IPsecDospStateEnum0 | IPsecGetStatistics0 |
IPsecGetStatistics1 | IPsecKeyModuleAdd0 |
IPsecKeyModuleDelete0 | IPsecKeyModuleUpdateAcquire0 |
IPsecSaContextAddInbound0 | IPsecSaContextAddInbound1 |
IPsecSaContextAddOutbound0 | IPsecSaContextAddOutbound1 |
IPsecSaContextCreate0 | IPsecSaContextCreate1 |
IPsecSaContextCreateEnumHandle0 | IPsecSaContextDeleteById0 |
IPsecSaContextDestroyEnumHandle0 | IPsecSaContextEnum0 |
IPsecSaContextEnum1 | IPsecSaContextExpire0 |
IPsecSaContextGetById0 | IPsecSaContextGetById1 |
IPsecSaContextGetSpi0 | IPsecSaContextGetSpi1 |
IPsecSaContextSetSpi0 | IPsecSaContextUpdate0 |
IPsecSaCreateEnumHandle0 | IPsecSaDbGetSecurityInfo0 |
IPsecSaDbSetSecurityInfo0 | IPsecSaDestroyEnumHandle0 |
IPsecSaEnum0 | IPsecSaEnum1 |
IPsecSaInitiateAsync0 | IkeextGetConfigParameters0 |
IkeextGetStatistics0 | IkeextGetStatistics1 |
IkeextSaCreateEnumHandle0 | IkeextSaDbGetSecurityInfo0 |
IkeextSaDbSetSecurityInfo0 | IkeextSaDeleteById0 |
IkeextSaDestroyEnumHandle0 | IkeextSaEnum0 |
IkeextSaEnum1 | IkeextSaGetById0 |
IkeextSaGetById1 | IkeextSaUpdateAdditionalAddressesByTunnelId0 |
IkeextSaUpdatePreferredAddressesByTunnelId0 | IkeextSetConfigParameters0 |
NamespaceCallout | WSADeleteSocketPeerTargetName |
WSAImpersonateSocketPeer | WSAQuerySocketSecurity |
WSARevertImpersonation | WSASetSocketPeerTargetName |
WSASetSocketSecurity |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _except_handler4_common _initterm _wcsicmp _wcslwr _wcslwr_s free malloc memcpy memset wcschr - ntdll.dll:
EtwEventActivityIdControl EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids NtQueryObject RtlAbsoluteToSelfRelativeSD RtlContractHashTable RtlCopySid RtlCreateHashTable RtlCreateSecurityDescriptor RtlDeleteHashTable RtlEndEnumerationHashTable RtlEnumerateEntryHashTable RtlEqualSid RtlExpandHashTable RtlGetControlSecurityDescriptor RtlGetDaclSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetNextEntryHashTable RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetThreadPreferredUILanguages RtlInitEnumerationHashTable RtlInsertEntryHashTable RtlLengthSecurityDescriptor RtlLengthSid RtlLookupEntryHashTable RtlNtStatusToDosError RtlRemoveEntryHashTable RtlSetDaclSecurityDescriptor RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSetSaclSecurityDescriptor RtlValidSid - KERNEL32.dll:
CloseHandle CompareStringW CreateEventW CreateFileW CreateSemaphoreW CreateThread DelayLoadFailureHook DeleteTimerQueueEx DeleteTimerQueueTimer DisableThreadLibraryCalls DuplicateHandle ExpandEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleHandleExA GetModuleHandleExW GetProcAddress GetProcessHeap GetSystemTimeAsFileTime GetThreadId GetTickCount HeapCreate HeapDestroy HeapFree InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedExchangeAdd InterlockedIncrement LoadLibraryExA OpenEventW OpenProcess QueryPerformanceCounter QueueUserWorkItem RegDeleteKeyExW RegEnumKeyExW RegEnumValueW RegisterWaitForSingleObject ReleaseSemaphore SetEvent SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter UnregisterWaitEx WaitForSingleObject ntdll!RtlAllocateHeap ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInterlockedCompareExchange64 ntdll!RtlLeaveCriticalSection ntdll!RtlReAllocateHeap ntdll!RtlTryEnterCriticalSection - RPCRT4.dll:
I_RpcExceptionFilter MesDecodeBufferHandleCreate MesEncodeDynBufferHandleCreate MesHandleFree NdrAsyncClientCall NdrClientCall2 NdrMesTypeDecode2 NdrMesTypeEncode2 RpcAsyncCompleteCall RpcAsyncInitializeHandle RpcBindingBind RpcBindingCreateW RpcBindingFree RpcBindingSetOption RpcSsDestroyClientContext