sspicli.dll - Security Support Provider Interface

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	sspicli.dll
size	163328 (0x27e00)
md5	506ed8b466d5acf33dd6326bc25573af

type	PE32+ executable (DLL) (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
147	30729	4
187	30716	1
185	30716	33
1	0	129
188	30716	12
184	30716	1
198	30716	27
183	30716	1
186	30716	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x50108ac5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	10.10
SizeOfCode	0x22a00
SizeOfInitializedData	0x5200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1380
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.2
ImageVersion	6.2
SubsystemVersion	6.2
Reserved1	0
SizeOfImage	0x2c000
SizeOfHeaders	0x400
CheckSum	0x29740
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x228fc	0x22a00	R-X CODE
.data	0x24000	0x1020	0x1000	RW- IDATA
.pdata	0x26000	0x1fd4	0x2000	R-- IDATA
.idata	0x28000	0x1560	0x1600	R-- IDATA
.rsrc	0x2a000	0x410	0x600	R-- IDATA
.reloc	0x2b000	0x310	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xaa70	0xd09
IMPORT	0x28438	0x17c
RESOURCE	0x2a000	0x410
EXCEPTION	0x26000	0x1fd4
SECURITY	0	0
BASERELOC	0x2b000	0x310
DEBUG	0x21308	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x28000	0x438
Delay_IAT	0x21178	0x60
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	940	0

module_name	hint	function_name
api-ms-win-core-crt-l1-1-0.dll	2074	memcmp
api-ms-win-core-crt-l1-1-0.dll	2075	memcpy
api-ms-win-core-crt-l1-1-0.dll	2024	_wcsicmp
api-ms-win-core-crt-l1-1-0.dll	2077	memmove
api-ms-win-core-crt-l1-1-0.dll	2020	_vsnprintf_s
api-ms-win-core-crt-l1-1-0.dll	2101	strncpy_s
api-ms-win-core-crt-l1-1-0.dll	2094	strcpy_s
api-ms-win-core-crt-l1-1-0.dll	2140	wcsstr
api-ms-win-core-crt-l1-1-0.dll	2138	wcsrchr
api-ms-win-core-crt-l1-1-0.dll	2125	wcschr
api-ms-win-core-crt-l1-1-0.dll	1963	__C_specific_handler
api-ms-win-core-crt-l1-1-0.dll	2079	memset
api-ms-win-core-crt-l2-1-0.dll	1376	_initterm_e
api-ms-win-core-crt-l2-1-0.dll	1375	_initterm
ntdll.dll	957	RtlGetNtProductType
ntdll.dll	625	RtlAcquireResourceShared
ntdll.dll	426	NtQueryEvent
ntdll.dll	1204	RtlReleaseResource
ntdll.dll	624	RtlAcquireResourceExclusive
ntdll.dll	1019	RtlInitializeResource
ntdll.dll	661	RtlAllocateHeap
ntdll.dll	806	RtlDeleteResource
ntdll.dll	712	RtlCompareUnicodeString
ntdll.dll	306	NtDuplicateObject
ntdll.dll	667	RtlAnsiStringToUnicodeString
ntdll.dll	915	RtlFreeUnicodeString
ntdll.dll	864	RtlEqualUnicodeString
ntdll.dll	1289	RtlStringFromGUID
ntdll.dll	772	RtlCreateUnicodeStringFromAsciiz
ntdll.dll	34	DbgPrintEx
ntdll.dll	1010	RtlInitializeCriticalSection
ntdll.dll	849	RtlEnterCriticalSection
ntdll.dll	709	RtlCompareMemory
ntdll.dll	436	NtQueryInformationToken
ntdll.dll	390	NtOpenProcessToken
ntdll.dll	1079	RtlLeaveCriticalSection
ntdll.dll	398	NtOpenThreadToken
ntdll.dll	797	RtlDeleteCriticalSection
ntdll.dll	329	NtFreeVirtualMemory
ntdll.dll	1003	RtlInitUnicodeString
ntdll.dll	376	NtOpenEvent
ntdll.dll	600	NtWaitForSingleObject
ntdll.dll	237	NtClose
ntdll.dll	399	NtOpenThreadTokenEx
ntdll.dll	538	NtSetInformationThread
ntdll.dll	1082	RtlLengthSid
ntdll.dll	739	RtlCopySid
ntdll.dll	742	RtlCopyUnicodeString
ntdll.dll	435	NtQueryInformationThread
ntdll.dll	1366	RtlVirtualUnwind
ntdll.dll	1103	RtlLookupFunctionEntry
ntdll.dll	688	RtlCaptureContext
ntdll.dll	199	NtAllocateLocallyUniqueId
ntdll.dll	1361	RtlValidSid
ntdll.dll	910	RtlFreeHeap
ntdll.dll	1002	RtlInitString
ntdll.dll	1321	RtlUnicodeStringToAnsiString
ntdll.dll	1122	RtlNtStatusToDosError
ntdll.dll	1437	RtlxAnsiStringToUnicodeSize
ntdll.dll	1439	RtlxUnicodeStringToAnsiSize
ntdll.dll	179	NlsMbCodePageTag
ntdll.dll	1123	RtlNtStatusToDosErrorNoTeb
RPCRT4.dll	514	RpcStringBindingComposeW
RPCRT4.dll	65	I_RpcMapWin32Status
RPCRT4.dll	384	RpcBindingUnbind
RPCRT4.dll	361	RpcBindingFree
RPCRT4.dll	503	RpcSsDestroyClientContext
RPCRT4.dll	363	RpcBindingFromStringBindingW
RPCRT4.dll	518	RpcStringFreeW
RPCRT4.dll	154	NdrClientCall3
RPCRT4.dll	295	NdrServerCall2
RPCRT4.dll	296	NdrServerCallAll
RPCRT4.dll	46	I_RpcExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	1121	SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	1165	SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	1266	UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	422	GetLastError
api-ms-win-core-file-l1-2-0.dll	404	GetFileTime
api-ms-win-core-file-l1-2-0.dll	131	CreateFileW
api-ms-win-core-handle-l1-1-0.dll	92	CloseHandle
api-ms-win-core-heap-l1-2-0.dll	472	GetProcessHeap
api-ms-win-core-heap-l1-2-0.dll	582	HeapFree
api-ms-win-core-libraryloader-l1-1-1.dll	442	GetModuleFileNameW
api-ms-win-core-libraryloader-l1-1-1.dll	709	LoadLibraryExW
api-ms-win-core-libraryloader-l1-1-1.dll	189	DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-1-1.dll	308	FreeLibrary
api-ms-win-core-libraryloader-l1-1-1.dll	468	GetProcAddress
api-ms-win-core-registry-l1-1-0.dll	944	RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	939	RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	981	RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	986	RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll	984	RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	948	RegDeleteKeyExW
api-ms-win-core-registry-l1-1-0.dll	993	RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	957	RegEnumValueW
api-ms-win-core-synch-l1-2-0.dll	1172	Sleep
api-ms-win-core-heap-obsolete-l1-1-0.dll	976	LocalFree
api-ms-win-core-heap-obsolete-l1-1-0.dll	979	LocalReAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll	972	LocalAlloc
api-ms-win-core-string-obsolete-l1-1-0.dll	1584	lstrlenA
api-ms-win-core-processthreads-l1-1-1.dll	1425	TlsFree
api-ms-win-core-processthreads-l1-1-1.dll	1424	TlsAlloc
api-ms-win-core-processthreads-l1-1-1.dll	1427	TlsSetValue
api-ms-win-core-processthreads-l1-1-1.dll	557	GetCurrentThread
api-ms-win-core-processthreads-l1-1-1.dll	553	GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll	1406	TerminateProcess
api-ms-win-core-processthreads-l1-1-1.dll	554	GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-1.dll	558	GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-1.dll	1426	TlsGetValue
api-ms-win-core-profile-l1-1-0.dll	907	QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-0.dll	517	GetSystemInfo
api-ms-win-core-sysinfo-l1-2-0.dll	521	GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll	537	GetTickCount
api-ms-win-core-util-l1-1-0.dll	320	EncodePointer
api-ms-win-core-util-l1-1-0.dll	280	DecodePointer
api-ms-win-core-delayload-l1-1-1.dll	1205	ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-1.dll	284	DelayLoadFailureHook

ord	entry_va	function_name
1	0x1618c	SecDeleteUserModeContext
2	0x16198	SecInitUserModeContext
3	0x12ba8	SspiUnmarshalAuthIdentityInternal
4	0x9a20	AcceptSecurityContext
5	0x7bf0	AcquireCredentialsHandleA
6	0x5d20	AcquireCredentialsHandleW
7	0x17b68	AddCredentialsA
8	0x17cac	AddCredentialsW
9	0x13ea0	AddSecurityPackageA
10	0x13f00	AddSecurityPackageW
11	0x8ab0	ApplyControlToken
12	0x17ff0	ChangeAccountPasswordA
13	0x18040	ChangeAccountPasswordW
14	0x17ab8	CompleteAuthToken
15	0x2c50	CredMarshalTargetInfo
16	0x26a0	CredUnmarshalTargetInfo
17	0x4020	DecryptMessage
18	0x4340	DeleteSecurityContext
19	0x18188	DeleteSecurityPackageA
20	0x18188	DeleteSecurityPackageW
21	0x3e60	EncryptMessage
22	0x92b0	EnumerateSecurityPackagesA
23	0x7ef0	EnumerateSecurityPackagesW
24	0x1750c	ExportSecurityContext
25	0xa070	FreeContextBuffer
26	0x5f10	FreeCredentialsHandle
27	0x13e88	GetSecurityUserInfo
28	0x1ce0	GetUserNameExA
29	0x1230	GetUserNameExW
30	0x17a48	ImpersonateSecurityContext
31	0x17364	ImportSecurityContextA
32	0x17438	ImportSecurityContextW
33	0xa2c0	InitSecurityInterfaceA
34	0xa290	InitSecurityInterfaceW
35	0x8f10	InitializeSecurityContextA
36	0x51e0	InitializeSecurityContextW
37	0x2140	LogonUserExExW
38	0xa5a0	LsaCallAuthenticationPackage
39	0x8630	LsaConnectUntrusted
40	0xa6a0	LsaDeregisterLogonProcess
41	0xe330	LsaEnumerateLogonSessions
42	0xa500	LsaFreeReturnBuffer
43	0x8510	LsaGetLogonSessionData
44	0x8860	LsaLogonUser
45	0xa700	LsaLookupAuthenticationPackage
46	0xa7b0	LsaRegisterLogonProcess
47	0xe4d0	LsaRegisterPolicyChangeNotification
48	0x15ed4	LsaUnregisterPolicyChangeNotification
49	0x17634	MakeSignature
50	0x8ff0	QueryContextAttributesA
51	0x5410	QueryContextAttributesW
52	0x17800	QueryCredentialsAttributesA
53	0x8460	QueryCredentialsAttributesW
54	0x95b0	QuerySecurityContextToken
55	0x17b38	QuerySecurityPackageInfoA
56	0x8d20	QuerySecurityPackageInfoW
57	0x179d8	RevertSecurityContext
58	0x185c4	SaslAcceptSecurityContext
59	0x18bf8	SaslEnumerateProfilesA
60	0x18bec	SaslEnumerateProfilesW
61	0x19178	SaslGetContextOption
62	0x18b88	SaslGetProfilePackageA
63	0x18b40	SaslGetProfilePackageW
64	0x181e4	SaslIdentifyPackageA
65	0x181ac	SaslIdentifyPackageW
66	0x187c0	SaslInitializeSecurityContextA
67	0x1897c	SaslInitializeSecurityContextW
68	0x19070	SaslSetContextOption
69	0x3e60	SealMessage
70	0xe780	SecCacheSspiPackages
71	0x8a10	SeciAllocateAndSetCallFlags
72	0x8900	SeciAllocateAndSetIPAddress
73	0x89c0	SeciFreeCallContext
74	0x17890	SetContextAttributesA
75	0x17934	SetContextAttributesW
76	0x176b8	SetCredentialsAttributesA
77	0x1775c	SetCredentialsAttributesW
78	0x11e60	SspiCompareAuthIdentities
79	0x124f0	SspiCopyAuthIdentity
80	0x141bc	SspiDecryptAuthIdentity
81	0x141d0	SspiDecryptAuthIdentityEx
82	0x3560	SspiEncodeAuthIdentityAsStrings
83	0x131b0	SspiEncodeStringsAsAuthIdentity
84	0x14574	SspiEncryptAuthIdentity
85	0x14584	SspiEncryptAuthIdentityEx
86	0x11a28	SspiExcludePackage
87	0x12448	SspiFreeAuthIdentity
88	0x14854	SspiGetComputerNameForSPN
89	0x11d68	SspiGetTargetHostName
90	0x140c0	SspiIsAuthIdentityEncrypted
91	0x3730	SspiLocalFree
92	0x12ec8	SspiMarshalAuthIdentity
93	0x36c0	SspiPrepareForCredRead
94	0x39e0	SspiPrepareForCredWrite
95	0x12b9c	SspiUnmarshalAuthIdentity
96	0x12a30	SspiValidateAuthIdentity
97	0x123e4	SspiZeroAuthIdentity
98	0x4020	UnsealMessage
99	0x175ac	VerifySignature

module_name	SspiCli.dll
flags	0
timestamp	2012-07-26 00:09:41
version	0.0
ordinal_base	1
nFunctions	99
nNames	99
Names(99)	0xac24
Functions(99)	0xaa98
NameOrdinals(99)	0xadb0

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Security Support Provider Interface
FileVersion	6.2.9200.16384 (win8_rtm.120725-1247)
InternalName	sspicli.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	sspicli.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.2.9200.16384

VS_FIXEDFILEINFO

FileVersion	6.2.9200.16384
ProductVersion	6.2.9200.16384
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	157744	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

sspicli.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

sspicli.dll
-