negoexts.dll

Description: NegoExtender Security Package

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6328

Architecture: 32-bit

Operating System: Windows NT

SHA256: b4654ae7ce20b0a1be1f7590877ce96c

File Size: 123.0 KB

Uploaded At: Dec. 1, 2025, 8:01 a.m.

Views: 14

Exported Functions

  • SpLsaModeInitialize (Ordinal: 1, Address: 0x8420)
  • SpUserModeInitialize (Ordinal: 2, Address: 0x13dd0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1001f034)
  • IsDebuggerPresent (Address: 0x1001f030)
  • OutputDebugStringW (Address: 0x1001f038)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1001f040)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1001f048)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1001f058)
  • SetLastError (Address: 0x1001f05c)
  • SetUnhandledExceptionFilter (Address: 0x1001f054)
  • UnhandledExceptionFilter (Address: 0x1001f050)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1001f064)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1001f070)
  • HeapAlloc (Address: 0x1001f074)
  • HeapFree (Address: 0x1001f06c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1001f07c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1001f094)
  • GetModuleFileNameA (Address: 0x1001f090)
  • GetModuleFileNameW (Address: 0x1001f088)
  • GetModuleHandleExW (Address: 0x1001f08c)
  • GetModuleHandleW (Address: 0x1001f084)
  • GetProcAddress (Address: 0x1001f098)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1001f0a0)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x1001f0a8)
  • VirtualProtect (Address: 0x1001f0ac)
  • VirtualQuery (Address: 0x1001f0b0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1001f0b8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1001f0cc)
  • GetCurrentProcessId (Address: 0x1001f0c4)
  • GetCurrentThreadId (Address: 0x1001f0c8)
  • SetThreadStackGuarantee (Address: 0x1001f0d0)
  • SetThreadToken (Address: 0x1001f0c0)
  • TerminateProcess (Address: 0x1001f0d4)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1001f0dc)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1001f0ec)
  • RegOpenKeyExW (Address: 0x1001f0e4)
  • RegQueryValueExW (Address: 0x1001f0e8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1001f11c)
  • AcquireSRWLockShared (Address: 0x1001f110)
  • CreateMutexExW (Address: 0x1001f0f8)
  • CreateSemaphoreExW (Address: 0x1001f124)
  • DeleteCriticalSection (Address: 0x1001f12c)
  • EnterCriticalSection (Address: 0x1001f118)
  • InitializeCriticalSectionEx (Address: 0x1001f108)
  • LeaveCriticalSection (Address: 0x1001f0fc)
  • OpenSemaphoreW (Address: 0x1001f120)
  • ReleaseMutex (Address: 0x1001f0f4)
  • ReleaseSemaphore (Address: 0x1001f104)
  • ReleaseSRWLockExclusive (Address: 0x1001f114)
  • ReleaseSRWLockShared (Address: 0x1001f10c)
  • WaitForSingleObject (Address: 0x1001f100)
  • WaitForSingleObjectEx (Address: 0x1001f128)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1001f134)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x1001f144)
  • GetSystemTimeAsFileTime (Address: 0x1001f13c)
  • GetTickCount (Address: 0x1001f140)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1001f154)
  • CreateThreadpoolTimer (Address: 0x1001f150)
  • SetThreadpoolTimer (Address: 0x1001f158)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1001f14c)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1001f170)
  • GetTraceEnableLevel (Address: 0x1001f168)
  • GetTraceLoggerHandle (Address: 0x1001f174)
  • RegisterTraceGuidsW (Address: 0x1001f160)
  • TraceMessage (Address: 0x1001f16c)
  • UnregisterTraceGuids (Address: 0x1001f164)
api-ms-win-security-base-l1-1-0.dll
  • RevertToSelf (Address: 0x1001f17c)
CRYPT32.dll
  • CertCloseStore (Address: 0x1001f000)
  • CertFindCertificateInStore (Address: 0x1001f014)
  • CertFreeCertificateContext (Address: 0x1001f00c)
  • CertGetCertificateContextProperty (Address: 0x1001f004)
  • CertOpenStore (Address: 0x1001f010)
  • CryptAcquireCertificatePrivateKey (Address: 0x1001f008)
CRYPTBASE.dll
  • SystemFunction036 (Address: 0x1001f01c)
CRYPTSP.dll
  • CryptGetProvParam (Address: 0x1001f028)
  • CryptReleaseContext (Address: 0x1001f024)
msvcrt.dll
  • __dllonexit (Address: 0x1001f18c)
  • _amsg_exit (Address: 0x1001f1a0)
  • _callnewh (Address: 0x1001f1b0)
  • _except_handler4_common (Address: 0x1001f198)
  • _initterm (Address: 0x1001f19c)
  • _lock (Address: 0x1001f194)
  • _onexit (Address: 0x1001f184)
  • _purecall (Address: 0x1001f1bc)
  • _unlock (Address: 0x1001f190)
  • _vsnprintf (Address: 0x1001f1d0)
  • _vsnwprintf (Address: 0x1001f1c8)
  • _XcptFilter (Address: 0x1001f1a8)
  • free (Address: 0x1001f1ac)
  • malloc (Address: 0x1001f1b4)
  • memcmp (Address: 0x1001f1b8)
  • memcpy (Address: 0x1001f188)
  • memcpy_s (Address: 0x1001f1c4)
  • memmove_s (Address: 0x1001f1c0)
  • memset (Address: 0x1001f1d8)
  • tolower (Address: 0x1001f1d4)
  • wcschr (Address: 0x1001f1cc)
  • wcsrchr (Address: 0x1001f1a4)
ntdll.dll
  • NtClose (Address: 0x1001f23c)
  • NtDuplicateObject (Address: 0x1001f1e4)
  • NtQueryInformationToken (Address: 0x1001f1e0)
  • RtlAcquireResourceExclusive (Address: 0x1001f228)
  • RtlAcquireResourceShared (Address: 0x1001f234)
  • RtlAnsiStringToUnicodeString (Address: 0x1001f1e8)
  • RtlCompareUnicodeString (Address: 0x1001f220)
  • RtlConvertSharedToExclusive (Address: 0x1001f20c)
  • RtlCreateUnicodeStringFromAsciiz (Address: 0x1001f1f4)
  • RtlDeleteCriticalSection (Address: 0x1001f218)
  • RtlDeleteElementGenericTable (Address: 0x1001f248)
  • RtlDeleteElementGenericTableAvl (Address: 0x1001f204)
  • RtlDeleteResource (Address: 0x1001f224)
  • RtlEnterCriticalSection (Address: 0x1001f250)
  • RtlEnumerateGenericTable (Address: 0x1001f24c)
  • RtlEnumerateGenericTableAvl (Address: 0x1001f1fc)
  • RtlEqualUnicodeString (Address: 0x1001f22c)
  • RtlFreeUnicodeString (Address: 0x1001f268)
  • RtlGetElementGenericTable (Address: 0x1001f214)
  • RtlGUIDFromString (Address: 0x1001f1ec)
  • RtlImageNtHeader (Address: 0x1001f1f0)
  • RtlInitializeCriticalSection (Address: 0x1001f25c)
  • RtlInitializeGenericTable (Address: 0x1001f258)
  • RtlInitializeGenericTableAvl (Address: 0x1001f1f8)
  • RtlInitializeResource (Address: 0x1001f238)
  • RtlInitUnicodeString (Address: 0x1001f264)
  • RtlInsertElementGenericTable (Address: 0x1001f21c)
  • RtlInsertElementGenericTableAvl (Address: 0x1001f208)
  • RtlIpv6StringToAddressExW (Address: 0x1001f260)
  • RtlLeaveCriticalSection (Address: 0x1001f244)
  • RtlLookupElementGenericTable (Address: 0x1001f240)
  • RtlLookupElementGenericTableAvl (Address: 0x1001f210)
  • RtlNumberGenericTableElements (Address: 0x1001f254)
  • RtlNumberGenericTableElementsAvl (Address: 0x1001f200)
  • RtlReleaseResource (Address: 0x1001f230)