XblAuthManager.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Description
Xbox Live Auth Manager
Authors
© Microsoft Corporation. All rights reserved.
File size
1.0 MB
Uploaded
2025-12-01 07:46
Views
75
SHA-256
77c45619934e5ce58a72f81ba1691219

Exported functions 1

ServiceMain #1 · 0x98b0

Imported DLLs & functions 337

api-ms-win-appmodel-identity-l1-2-0.dll 1
AppContainerDeriveSidFromMoniker 0x1800d66e8
api-ms-win-appmodel-runtime-l1-1-0.dll 2
GetPackageFamilyName 0x1800d6700
GetPackagesByPackageFamily 0x1800d66f8
api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800d6710
api-ms-win-core-com-l1-1-0.dll 19
CoAddRefServerProcess 0x1800d6780
CoCreateFreeThreadedMarshaler 0x1800d67b0
CoCreateGuid 0x1800d6758
CoCreateInstance 0x1800d6750
CoDecrementMTAUsage 0x1800d6738
CoDisconnectContext 0x1800d6790
CoGetCallContext 0x1800d6740
CoGetStandardMarshal 0x1800d67a0
CoImpersonateClient 0x1800d6748
CoInitializeSecurity 0x1800d6720
CoRegisterClassObject 0x1800d6728
CoReleaseServerProcess 0x1800d6768
CoResumeClassObjects 0x1800d67a8
CoRevertToSelf 0x1800d6788
CoRevokeClassObject 0x1800d6798
CoTaskMemAlloc 0x1800d6760
CoTaskMemFree 0x1800d6730
CoWaitForMultipleHandles 0x1800d6770
StringFromGUID2 0x1800d6778
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800d67d0
IsDebuggerPresent 0x1800d67c0
OutputDebugStringW 0x1800d67c8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800d67e0
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800d67f0
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800d6800
RaiseException 0x1800d6820
SetLastError 0x1800d6810
SetUnhandledExceptionFilter 0x1800d6818
UnhandledExceptionFilter 0x1800d6808
api-ms-win-core-file-l1-1-0.dll 11
CreateDirectoryW 0x1800d6850
CreateFileW 0x1800d6860
DeleteFileW 0x1800d6858
FindClose 0x1800d6878
FindFirstFileW 0x1800d6870
FindNextFileW 0x1800d6880
GetFileAttributesExW 0x1800d6830
GetFileAttributesW 0x1800d6848
GetFileSize 0x1800d6840
ReadFile 0x1800d6868
WriteFile 0x1800d6838
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800d6890
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800d68a8
HeapAlloc 0x1800d68a0
HeapFree 0x1800d68b0
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x1800d68c0
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800d68d0
api-ms-win-core-libraryloader-l1-2-0.dll 5
DisableThreadLibraryCalls 0x1800d6900
GetModuleFileNameA 0x1800d68f8
GetModuleHandleExW 0x1800d68e8
GetModuleHandleW 0x1800d68e0
GetProcAddress 0x1800d68f0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1800d6910
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1800d6928
MapViewOfFile 0x1800d6930
UnmapViewOfFile 0x1800d6920
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x1800d6940
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x1800d6950
GetCurrentProcessId 0x1800d6968
GetCurrentThread 0x1800d6970
GetCurrentThreadId 0x1800d6960
OpenProcessToken 0x1800d6978
OpenThreadToken 0x1800d6988
SetThreadToken 0x1800d6980
TerminateProcess 0x1800d6958
api-ms-win-core-processthreads-l1-1-1.dll 2
IsProcessorFeaturePresent 0x1800d6998
OpenProcess 0x1800d69a0
api-ms-win-core-profile-l1-1-0.dll 2
QueryPerformanceCounter 0x1800d69b8
QueryPerformanceFrequency 0x1800d69b0
api-ms-win-core-psapi-l1-1-0.dll 1
K32GetModuleFileNameExW 0x1800d69c8
api-ms-win-core-registry-l1-1-0.dll 13
RegCloseKey 0x1800d69f0
RegCreateKeyExW 0x1800d6a18
RegDeleteKeyExW 0x1800d69d8
RegDeleteTreeW 0x1800d6a38
RegDeleteValueW 0x1800d69e8
RegEnumKeyExW 0x1800d6a10
RegEnumValueW 0x1800d6a30
RegGetValueW 0x1800d6a28
RegOpenCurrentUser 0x1800d69e0
RegOpenKeyExW 0x1800d6a00
RegQueryInfoKeyW 0x1800d6a08
RegQueryValueExW 0x1800d69f8
RegSetValueExW 0x1800d6a20
api-ms-win-core-registry-l1-1-1.dll 2
RegDeleteKeyValueW 0x1800d6a48
RegSetKeyValueW 0x1800d6a50
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800d6a70
RtlLookupFunctionEntry 0x1800d6a60
RtlVirtualUnwind 0x1800d6a68
api-ms-win-core-shutdown-l1-1-0.dll 1
InitiateSystemShutdownExW 0x1800d6a80
api-ms-win-core-string-l1-1-0.dll 3
CompareStringOrdinal 0x1800d6a98
MultiByteToWideChar 0x1800d6aa0
WideCharToMultiByte 0x1800d6a90
api-ms-win-core-synch-l1-1-0.dll 23
AcquireSRWLockExclusive 0x1800d6ae8
AcquireSRWLockShared 0x1800d6b08
CreateEventExW 0x1800d6ae0
CreateEventW 0x1800d6b28
CreateMutexExW 0x1800d6b00
CreateSemaphoreExW 0x1800d6ab8
DeleteCriticalSection 0x1800d6b30
EnterCriticalSection 0x1800d6b20
InitializeCriticalSection 0x1800d6b50
InitializeCriticalSectionAndSpinCount 0x1800d6b40
InitializeCriticalSectionEx 0x1800d6b48
InitializeSRWLock 0x1800d6ab0
LeaveCriticalSection 0x1800d6b18
OpenSemaphoreW 0x1800d6ac8
ReleaseMutex 0x1800d6ad8
ReleaseSemaphore 0x1800d6ac0
ReleaseSRWLockExclusive 0x1800d6b10
ReleaseSRWLockShared 0x1800d6af0
ResetEvent 0x1800d6b38
SetEvent 0x1800d6af8
WaitForMultipleObjectsEx 0x1800d6b58
WaitForSingleObject 0x1800d6ad0
WaitForSingleObjectEx 0x1800d6b60
api-ms-win-core-synch-l1-2-0.dll 2
InitOnceExecuteOnce 0x1800d6b78
Sleep 0x1800d6b70
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTime 0x1800d6b98
GetSystemTimeAsFileTime 0x1800d6b88
GetTickCount64 0x1800d6b90
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1800d6ba8
CreateThreadpoolTimer 0x1800d6bc0
SetThreadpoolTimer 0x1800d6bb0
WaitForThreadpoolTimerCallbacks 0x1800d6bb8
api-ms-win-core-threadpool-legacy-l1-1-0.dll 4
ChangeTimerQueueTimer 0x1800d6be0
CreateTimerQueueTimer 0x1800d6bd8
DeleteTimerQueueTimer 0x1800d6bd0
QueueUserWorkItem 0x1800d6be8
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1800d6bf8
EncodePointer 0x1800d6c00
api-ms-win-core-winrt-error-l1-1-0.dll 3
RoOriginateError 0x1800d6c20
RoOriginateErrorW 0x1800d6c10
RoTransformError 0x1800d6c18
api-ms-win-core-winrt-l1-1-0.dll 6
RoActivateInstance 0x1800d6c30
RoGetActivationFactory 0x1800d6c50
RoInitialize 0x1800d6c38
RoRegisterActivationFactories 0x1800d6c58
RoRevokeActivationFactories 0x1800d6c48
RoUninitialize 0x1800d6c40
api-ms-win-core-winrt-string-l1-1-0.dll 9
WindowsCompareStringOrdinal 0x1800d6c80
WindowsCreateString 0x1800d6c90
WindowsCreateStringReference 0x1800d6c68
WindowsDeleteString 0x1800d6ca0
WindowsDuplicateString 0x1800d6c70
WindowsGetStringLen 0x1800d6ca8
WindowsGetStringRawBuffer 0x1800d6c98
WindowsIsStringEmpty 0x1800d6c78
WindowsStringHasEmbeddedNull 0x1800d6c88
api-ms-win-crt-private-l1-1-0.dll 47
__C_specific_handler 0x1800d6d78
__CxxFrameHandler3 0x1800d6d80
__CxxFrameHandler4 0x1800d6e18
__std_terminate 0x1800d6e10
_CxxThrowException 0x1800d6d88
_o___std_exception_copy 0x1800d6e08
_o___std_exception_destroy 0x1800d6e00
_o___std_type_info_destroy_list 0x1800d6df8
_o___stdio_common_vsnprintf_s 0x1800d6df0
_o___stdio_common_vswprintf 0x1800d6de8
_o__callnewh 0x1800d6db8
_o__cexit 0x1800d6db0
_o__configure_narrow_argv 0x1800d6da0
_o__crt_atexit 0x1800d6d90
_o__errno 0x1800d6da8
_o__execute_onexit_table 0x1800d6d98
_o__i64tow_s 0x1800d6cb8
_o__initialize_narrow_environment 0x1800d6cc0
_o__initialize_onexit_table 0x1800d6cc8
_o__invalid_parameter_noinfo 0x1800d6cd0
_o__invalid_parameter_noinfo_noreturn 0x1800d6cd8
_o__mkgmtime64 0x1800d6ce0
_o__purecall 0x1800d6ce8
_o__register_onexit_function 0x1800d6cf0
_o__seh_filter_dll 0x1800d6cf8
_o__wcsicmp 0x1800d6d00
_o__wcsnicmp 0x1800d6d08
_o__wcstoui64 0x1800d6d10
_o__wctime64_s 0x1800d6d18
_o__wtoi64 0x1800d6d28
_o_free 0x1800d6d30
_o_iswdigit 0x1800d6d38
_o_malloc 0x1800d6d40
_o_realloc 0x1800d6d48
_o_terminate 0x1800d6d50
_o_towlower 0x1800d6d58
_o_towupper 0x1800d6d60
_o_wcstol 0x1800d6d68
_o_wcstoul 0x1800d6d70
memcmp 0x1800d6e20
memcpy 0x1800d6e28
memmove 0x1800d6d20
strchr 0x1800d6dd8
strrchr 0x1800d6dc0
wcschr 0x1800d6dd0
wcsrchr 0x1800d6de0
wcsstr 0x1800d6dc8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800d6e38
_initterm_e 0x1800d6e40
api-ms-win-crt-string-l1-1-0.dll 4
memset 0x1800d6e68
wcscmp 0x1800d6e50
wcsncmp 0x1800d6e58
wcsnlen 0x1800d6e60
api-ms-win-crt-time-l1-1-0.dll 1
_time64 0x1800d6e78
api-ms-win-eventing-provider-l1-1-0.dll 4
EventRegister 0x1800d6e90
EventSetInformation 0x1800d6e98
EventUnregister 0x1800d6ea0
EventWriteTransfer 0x1800d6e88
api-ms-win-power-setting-l1-1-0.dll 2
PowerSettingRegisterNotification 0x1800d6eb8
PowerSettingUnregisterNotification 0x1800d6eb0
api-ms-win-security-base-l1-1-0.dll 7
AdjustTokenPrivileges 0x1800d6ef0
DuplicateToken 0x1800d6ef8
DuplicateTokenEx 0x1800d6ee8
GetTokenInformation 0x1800d6ee0
ImpersonateLoggedOnUser 0x1800d6ed0
MakeAbsoluteSD 0x1800d6ed8
RevertToSelf 0x1800d6ec8
api-ms-win-security-capability-l1-1-0.dll 1
CapabilityCheck 0x1800d6f08
api-ms-win-security-credentials-l1-1-0.dll 4
CredDeleteW 0x1800d6f20
CredFree 0x1800d6f28
CredReadW 0x1800d6f30
CredWriteW 0x1800d6f18
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1800d6f40
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800d6f58
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800d6f50
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x1800d6f70
SetServiceStatus 0x1800d6f68
api-ms-win-service-management-l1-1-0.dll 4
CloseServiceHandle 0x1800d6f98
OpenSCManagerW 0x1800d6f90
OpenServiceW 0x1800d6f88
StartServiceW 0x1800d6f80
api-ms-win-service-management-l2-1-0.dll 1
QueryServiceStatusEx 0x1800d6fa8
api-ms-win-service-winsvc-l1-1-0.dll 2
ControlService 0x1800d6fc0
QueryServiceStatus 0x1800d6fb8
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x1800d6fd0
AppXAllUserStore.dll 1
FamilyMonikerStringToSid 0x1800d6530
bcrypt.dll 13
BCryptCloseAlgorithmProvider 0x1800d7028
BCryptCreateHash 0x1800d7018
BCryptDestroyHash 0x1800d7030
BCryptDestroyKey 0x1800d6ff8
BCryptExportKey 0x1800d7008
BCryptFinalizeKeyPair 0x1800d6fe0
BCryptFinishHash 0x1800d7038
BCryptGenerateKeyPair 0x1800d6fe8
BCryptGetProperty 0x1800d7010
BCryptHashData 0x1800d7020
BCryptImportKeyPair 0x1800d7040
BCryptOpenAlgorithmProvider 0x1800d6ff0
BCryptSignHash 0x1800d7000
combase.dll 4
0x1800d7050
0x1800d7058
0x1800d7060
0x1800d7068
CRYPT32.dll 12
CertAddCertificateContextToStore 0x1800d6558
CertAddEncodedCertificateToStore 0x1800d6540
CertCloseStore 0x1800d6560
CertCompareCertificate 0x1800d6578
CertDeleteCertificateFromStore 0x1800d6580
CertDuplicateCertificateContext 0x1800d6588
CertEnumCertificatesInStore 0x1800d6568
CertFindCertificateInStore 0x1800d6548
CertFreeCertificateContext 0x1800d6570
CertGetCertificateContextProperty 0x1800d6598
CertOpenStore 0x1800d6550
CryptQueryObject 0x1800d6590
IPHLPAPI.DLL 1
GetAdaptersAddresses 0x1800d65a8
msvcp_win.dll 24
_Wcscoll 0x1800d70f8
_Wcsxfrm 0x1800d7100
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x1800d7090
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x1800d70c0
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ 0x1800d70e0
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x1800d7118
?_Incref@facet@locale@std@@UEAAXXZ 0x1800d7088
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x1800d70a8
?_Xbad_alloc@std@@YAXXZ 0x1800d7078
?_Xlength_error@std@@YAXPEBD@Z 0x1800d70b0
?_Xout_of_range@std@@YAXPEBD@Z 0x1800d7098
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x1800d70b8
??0_Locinfo@std@@QEAA@PEBD@Z 0x1800d70e8
??0_Lockit@std@@QEAA@H@Z 0x1800d70f0
??0facet@locale@std@@IEAA@_K@Z 0x1800d7110
??1_Locinfo@std@@QEAA@XZ 0x1800d70d0
??1_Lockit@std@@QEAA@XZ 0x1800d70d8
??1facet@locale@std@@MEAA@XZ 0x1800d7108
??Bid@locale@std@@QEAA_KXZ 0x1800d7128
?id@?$collate@G@std@@2V0locale@2@A 0x1800d7130
?id@?$ctype@G@std@@2V0locale@2@A 0x1800d7120
?is@?$ctype@G@std@@QEBA_NFG@Z 0x1800d70c8
?tolower@?$ctype@G@std@@QEBAGG@Z 0x1800d70a0
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z 0x1800d7080
ncrypt.dll 6
NCryptCloseProtectionDescriptor 0x1800d7148
NCryptCreateProtectionDescriptor 0x1800d7160
NCryptStreamClose 0x1800d7150
NCryptStreamOpenToProtect 0x1800d7168
NCryptStreamOpenToUnprotect 0x1800d7140
NCryptStreamUpdate 0x1800d7158
ntdll.dll 8
DbgPrintEx 0x1800d7180
NtQueryInformationToken 0x1800d7188
RtlFreeSid 0x1800d7178
RtlIpv4AddressToStringW 0x1800d7190
RtlPublishWnfStateData 0x1800d71a8
RtlQueryWnfStateData 0x1800d71a0
RtlSubscribeWnfStateChangeNotification 0x1800d7198
RtlUnsubscribeWnfStateChangeNotification 0x1800d71b0
OLEAUT32.dll 1
SysFreeString 0x1800d65b8
RPCRT4.dll 10
Ndr64AsyncClientCall 0x1800d6610
RpcAsyncCancelCall 0x1800d6608
RpcAsyncCompleteCall 0x1800d65d0
RpcAsyncInitializeHandle 0x1800d65e8
RpcBindingFree 0x1800d65f8
RpcBindingFromStringBindingW 0x1800d65d8
RpcBindingSetAuthInfoExW 0x1800d6600
RpcSsDestroyClientContext 0x1800d65c8
RpcStringBindingComposeW 0x1800d65e0
RpcStringFreeW 0x1800d65f0
SspiCli.dll 1
LogonUserExExW 0x1800d6620
urlmon.dll 1
CreateUri 0x1800d71c0
USERENV.dll 1
ExpandEnvironmentStringsForUserW 0x1800d6630
WINHTTP.dll 13
WinHttpCloseHandle 0x1800d6688
WinHttpConnect 0x1800d6648
WinHttpCrackUrl 0x1800d66a0
WinHttpOpen 0x1800d6658
WinHttpOpenRequest 0x1800d6650
WinHttpQueryHeaders 0x1800d6678
WinHttpReadData 0x1800d6680
WinHttpReceiveResponse 0x1800d6670
WinHttpSendRequest 0x1800d6698
WinHttpSetDefaultProxyConfiguration 0x1800d6668
WinHttpSetOption 0x1800d6690
WinHttpSetStatusCallback 0x1800d6660
WinHttpSetTimeouts 0x1800d6640
WININET.dll 2
InternetQueryOptionW 0x1800d66b8
InternetSetOptionW 0x1800d66b0
WS2_32.dll 3
htonl 0x1800d66c8
InetPtonW 0x1800d66d8
WSAGetLastError 0x1800d66d0