sspicli.dll - security.dll - Security Support Provider Interface

filename	sspicli.dll
size	104960 (0x19a00)
md5	2bd37e490b7e8deb27fdf8eda0917af9

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
147	30729	4
205	65501	2
206	65501	8
203	65501	37
1	0	130
202	65501	1
211	65501	31
201	65501	1
204	65501	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x54503d7c
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x16600
SizeOfInitializedData	0x3600
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb290
BaseOfCode	0x1000
BaseOfData	0x18000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.3
ImageVersion	6.3
SubsystemVersion	6.3
Reserved1	0
SizeOfImage	0x1e000
SizeOfHeaders	0x400
CheckSum	0x273bf
Subsystem	3
DllCharacteristics	0x4140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x16457	0x16600	R-X CODE
.data	0x18000	0x8a0	0x400	RW- IDATA
.idata	0x19000	0x1266	0x1400	R-- IDATA
.rsrc	0x1b000	0x418	0x600	R-- IDATA
.reloc	0x1c000	0x1050	0x1200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x16730	0xd27
IMPORT	0x19248	0x1a4
RESOURCE	0x1b000	0x418
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1c000	0x1050
DEBUG	0x1280	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3488	0x5c
Bound_IAT	0	0
IAT	0x19000	0x244
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	952	0

module_name	hint	function_name
api-ms-win-core-crt-l1-1-0.dll	51	memcpy
api-ms-win-core-crt-l1-1-0.dll	55	memset
api-ms-win-core-crt-l1-1-0.dll	67	strncpy_s
api-ms-win-core-crt-l1-1-0.dll	24	_wcsicmp
api-ms-win-core-crt-l1-1-0.dll	53	memmove
api-ms-win-core-crt-l1-1-0.dll	62	strcpy_s
api-ms-win-core-crt-l1-1-0.dll	22	_vsnprintf_s
api-ms-win-core-crt-l1-1-0.dll	94	wcsstr
api-ms-win-core-crt-l1-1-0.dll	93	wcsrchr
api-ms-win-core-crt-l1-1-0.dll	83	wcschr
api-ms-win-core-crt-l1-1-0.dll	50	memcmp
api-ms-win-core-crt-l1-1-0.dll	3	_except_handler4_common
api-ms-win-core-crt-l2-1-0.dll	6	_initterm
api-ms-win-core-crt-l2-1-0.dll	7	_initterm_e
ntdll.dll	329	NtFreeVirtualMemory
ntdll.dll	302	NtDeviceIoControlFile
ntdll.dll	1007	RtlInitUnicodeString
ntdll.dll	603	NtWaitForSingleObject
ntdll.dll	539	NtSetInformationThread
ntdll.dll	400	NtOpenThreadTokenEx
ntdll.dll	235	NtClose
ntdll.dll	377	NtOpenEvent
ntdll.dll	748	RtlCopySid
ntdll.dll	751	RtlCopyUnicodeString
ntdll.dll	1096	RtlLengthSid
ntdll.dll	436	NtQueryInformationThread
ntdll.dll	176	NlsMbCodePageTag
ntdll.dll	196	NtAllocateLocallyUniqueId
ntdll.dll	1377	RtlValidSid
ntdll.dll	306	NtDuplicateObject
ntdll.dll	707	RtlCheckTokenMembershipEx
ntdll.dll	1006	RtlInitString
ntdll.dll	865	RtlEqualSid
ntdll.dll	635	RtlAcquireResourceShared
ntdll.dll	963	RtlGetNtProductType
ntdll.dll	1216	RtlReleaseResource
ntdll.dll	723	RtlCompareUnicodeString
ntdll.dll	811	RtlDeleteResource
ntdll.dll	634	RtlAcquireResourceExclusive
ntdll.dll	1024	RtlInitializeResource
ntdll.dll	671	RtlAllocateHeap
ntdll.dll	917	RtlFreeHeap
ntdll.dll	1014	RtlInitializeCriticalSection
ntdll.dll	379	NtOpenFile
ntdll.dll	437	NtQueryInformationToken
ntdll.dll	720	RtlCompareMemory
ntdll.dll	391	NtOpenProcessToken
ntdll.dll	1093	RtlLeaveCriticalSection
ntdll.dll	804	RtlDeleteCriticalSection
ntdll.dll	427	NtQueryEvent
ntdll.dll	399	NtOpenThreadToken
ntdll.dll	853	RtlEnterCriticalSection
ntdll.dll	34	DbgPrintEx
ntdll.dll	779	RtlCreateUnicodeStringFromAsciiz
ntdll.dll	1444	RtlxUnicodeStringToAnsiSize
ntdll.dll	1135	RtlNtStatusToDosErrorNoTeb
ntdll.dll	1134	RtlNtStatusToDosError
ntdll.dll	1442	RtlxAnsiStringToUnicodeSize
ntdll.dll	922	RtlFreeUnicodeString
ntdll.dll	867	RtlEqualUnicodeString
ntdll.dll	1336	RtlUnicodeStringToAnsiString
ntdll.dll	677	RtlAnsiStringToUnicodeString
ntdll.dll	1301	RtlStringFromGUID
RPCRT4.dll	66	I_RpcMapWin32Status
RPCRT4.dll	379	RpcBindingUnbind
RPCRT4.dll	358	RpcBindingFromStringBindingW
RPCRT4.dll	48	I_RpcExceptionFilter
RPCRT4.dll	513	RpcStringFreeW
RPCRT4.dll	290	NdrServerCall2
RPCRT4.dll	156	NdrClientCall2
RPCRT4.dll	498	RpcSsDestroyClientContext
RPCRT4.dll	509	RpcStringBindingComposeW
RPCRT4.dll	356	RpcBindingFree
CRYPTBASE.dll	10	SystemFunction041
CRYPTBASE.dll	9	SystemFunction040
api-ms-win-security-lsalookup-l1-1-1.dll	12	LsaLookupOpenLocalPolicy
api-ms-win-security-lsalookup-l1-1-1.dll	8	LsaLookupClose
api-ms-win-security-lsalookup-l1-1-1.dll	10	LsaLookupGetDomainInfo
api-ms-win-security-lsalookup-l1-1-1.dll	9	LsaLookupFreeMemory
api-ms-win-security-lsapolicy-l1-1-0.dll	5	LsaFreeMemory
api-ms-win-security-lsapolicy-l1-1-0.dll	1	LsaClose
api-ms-win-security-lsapolicy-l1-1-0.dll	15	LsaQueryInformationPolicy
api-ms-win-security-lsapolicy-l1-1-0.dll	13	LsaOpenPolicy
api-ms-win-core-errorhandling-l1-1-1.dll	11	UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	3	GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	9	SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	10	SetUnhandledExceptionFilter
api-ms-win-core-file-l1-2-1.dll	5	CreateFileW
api-ms-win-core-file-l1-2-1.dll	41	GetFileTime
api-ms-win-core-handle-l1-1-0.dll		CloseHandle
api-ms-win-core-heap-l1-2-0.dll		GetProcessHeap
api-ms-win-core-heap-l1-2-0.dll	6	HeapFree
api-ms-win-core-libraryloader-l1-2-0.dll	10	FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll	19	GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll	14	GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll	1	DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll	21	LoadLibraryExW
api-ms-win-core-registry-l1-1-0.dll	5	RegDeleteKeyExW
api-ms-win-core-registry-l1-1-0.dll	31	RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	28	RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	40	RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	3	RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	14	RegEnumValueW
api-ms-win-core-registry-l1-1-0.dll		RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	33	RegQueryValueExW
api-ms-win-core-synch-l1-2-0.dll	43	Sleep
api-ms-win-core-heap-obsolete-l1-1-0.dll	8	LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll	12	LocalReAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll	10	LocalFree
api-ms-win-core-string-obsolete-l1-1-0.dll	8	lstrlenA
api-ms-win-core-processthreads-l1-1-2.dll	67	TlsAlloc
api-ms-win-core-processthreads-l1-1-2.dll	68	TlsFree
api-ms-win-core-processthreads-l1-1-2.dll	70	TlsSetValue
api-ms-win-core-processthreads-l1-1-2.dll	15	GetCurrentThread
api-ms-win-core-processthreads-l1-1-2.dll	11	GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll	65	TerminateProcess
api-ms-win-core-processthreads-l1-1-2.dll	16	GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll	12	GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll	69	TlsGetValue
api-ms-win-core-profile-l1-1-0.dll		QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-1.dll	17	GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll	14	GetSystemInfo
api-ms-win-core-sysinfo-l1-2-1.dll	21	GetTickCount
api-ms-win-core-util-l1-1-0.dll	1	DecodePointer
api-ms-win-core-util-l1-1-0.dll	3	EncodePointer

ord	entry_va	function_name
1	0x11fb0	SecDeleteUserModeContext
2	0x11f10	SecInitUserModeContext
3	0x9060	SspiUnmarshalAuthIdentityInternal
4	0x13050	AcceptSecurityContext
5	0x127a0	AcquireCredentialsHandleA
6	0x12770	AcquireCredentialsHandleW
7	0x12ae0	AddCredentialsA
8	0x12a00	AddCredentialsW
9	0xb120	AddSecurityPackageA
10	0xb0d0	AddSecurityPackageW
11	0x13450	ApplyControlToken
12	0x12600	ChangeAccountPasswordA
13	0x125d0	ChangeAccountPasswordW
14	0x13620	CompleteAuthToken
15	0x42f0	CredMarshalTargetInfo
16	0x4610	CredUnmarshalTargetInfo
17	0x13d60	DecryptMessage
18	0x133a0	DeleteSecurityContext
19	0xb190	DeleteSecurityPackageA
20	0xb190	DeleteSecurityPackageW
21	0x13cf0	EncryptMessage
22	0x13540	EnumerateSecurityPackagesA
23	0x134c0	EnumerateSecurityPackagesW
24	0x13e30	ExportSecurityContext
25	0xb010	FreeContextBuffer
26	0x12bc0	FreeCredentialsHandle
27	0xaff0	GetSecurityUserInfo
28	0xc320	GetUserNameExA
29	0xc220	GetUserNameExW
30	0x13690	ImpersonateSecurityContext
31	0x13f60	ImportSecurityContextA
32	0x13eb0	ImportSecurityContextW
33	0x13dd0	InitSecurityInterfaceA
34	0x13e00	InitSecurityInterfaceW
35	0x12c70	InitializeSecurityContextA
36	0x12c30	InitializeSecurityContextW
37	0x15ac0	LogonUserExExW
38	0x38f0	LsaCallAuthenticationPackage
39	0x36e0	LsaConnectUntrusted
40	0x39f0	LsaDeregisterLogonProcess
41	0x12330	LsaEnumerateLogonSessions
42	0x3550	LsaFreeReturnBuffer
43	0x12360	LsaGetLogonSessionData
44	0x38b0	LsaLogonUser
45	0x37f0	LsaLookupAuthenticationPackage
46	0x35c0	LsaRegisterLogonProcess
47	0x122d0	LsaRegisterPolicyChangeNotification
48	0x12300	LsaUnregisterPolicyChangeNotification
49	0x13c10	MakeSignature
50	0x13860	QueryContextAttributesA
51	0x137f0	QueryContextAttributesW
52	0x13a70	QueryCredentialsAttributesA
53	0x139f0	QueryCredentialsAttributesW
54	0x13700	QuerySecurityContextToken
55	0x135f0	QuerySecurityPackageInfoA
56	0x135c0	QuerySecurityPackageInfoW
57	0x13780	RevertSecurityContext
58	0x15030	SaslAcceptSecurityContext
59	0x14cd0	SaslEnumerateProfilesA
60	0x14cf0	SaslEnumerateProfilesW
61	0x14650	SaslGetContextOption
62	0x14d10	SaslGetProfilePackageA
63	0x14d70	SaslGetProfilePackageW
64	0x154b0	SaslIdentifyPackageA
65	0x154e0	SaslIdentifyPackageW
66	0x14ef0	SaslInitializeSecurityContextA
67	0x14db0	SaslInitializeSecurityContextW
68	0x14760	SaslSetContextOption
69	0x13cf0	SealMessage
70	0xef30	SecCacheSspiPackages
71	0x15570	SeciAllocateAndSetCallFlags
72	0x15510	SeciAllocateAndSetIPAddress
73	0x155c0	SeciFreeCallContext
74	0x12390	SeciIsProtectedUser
75	0x13960	SetContextAttributesA
76	0x138d0	SetContextAttributesW
77	0x13b80	SetCredentialsAttributesA
78	0x13af0	SetCredentialsAttributesW
79	0x9c70	SspiCompareAuthIdentities
80	0x9480	SspiCopyAuthIdentity
81	0xc120	SspiDecryptAuthIdentity
82	0xbf60	SspiDecryptAuthIdentityEx
83	0x7b90	SspiEncodeAuthIdentityAsStrings
84	0x88b0	SspiEncodeStringsAsAuthIdentity
85	0xbdd0	SspiEncryptAuthIdentity
86	0xbbf0	SspiEncryptAuthIdentityEx
87	0xa190	SspiExcludePackage
88	0x9950	SspiFreeAuthIdentity
89	0xc4d0	SspiGetComputerNameForSPN
90	0xa0c0	SspiGetTargetHostName
91	0xc1d0	SspiIsAuthIdentityEncrypted
92	0x7750	SspiLocalFree
93	0x8d60	SspiMarshalAuthIdentity
94	0xaf80	SspiPrepareForCredRead
95	0xab10	SspiPrepareForCredWrite
96	0x9340	SspiUnmarshalAuthIdentity
97	0x9360	SspiValidateAuthIdentity
98	0x99e0	SspiZeroAuthIdentity
99	0x13d60	UnsealMessage
100	0x13c80	VerifySignature

module_name	SspiCli.dll
flags	0
timestamp	2014-10-29 00:14:57
version	0.0
ordinal_base	1
nFunctions	100
nNames	100
Names(100)	0x168e8
Functions(100)	0x16758
NameOrdinals(100)	0x16a78

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Security Support Provider Interface
FileVersion	6.3.9600.17415 (winblue_r4.141028-1500)
InternalName	security.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	security.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion	6.3.9600.17415
ProductVersion	6.3.9600.17415
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	104960	DLL	10/29/2014 01:06:04	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi	Support Me on Ko-fi
Yandex.Money
Thank you!

everything is OK

sspicli.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

sspicli.dll
-