hgclientservice.dll

Description: Host Guardian Client Service

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 34ca7e52a139d76a6c8ed26ceb46345c

File Size: 140.5 KB

Uploaded At: Dec. 1, 2025, 8:11 a.m.

Views: 15

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x4160)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0x4550)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180019ec0)
CoCreateInstance (Address: 0x180019eb0)
CoDecrementMTAUsage (Address: 0x180019ef0)
CoDisconnectContext (Address: 0x180019ed0)
CoIncrementMTAUsage (Address: 0x180019ee0)
CoRegisterClassObject (Address: 0x180019ec8)
CoResumeClassObjects (Address: 0x180019ed8)
CoRevokeClassObject (Address: 0x180019ee8)
CoTaskMemAlloc (Address: 0x180019ef8)
CoTaskMemFree (Address: 0x180019eb8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180019f08)
IsDebuggerPresent (Address: 0x180019f10)
OutputDebugStringW (Address: 0x180019f18)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180019f28)
SetLastError (Address: 0x180019f30)
SetUnhandledExceptionFilter (Address: 0x180019f40)
UnhandledExceptionFilter (Address: 0x180019f38)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180019f78)
CreateDirectoryW (Address: 0x180019f60)
CreateFileW (Address: 0x180019f58)
GetFileAttributesW (Address: 0x180019f80)
GetFileInformationByHandle (Address: 0x180019f68)
ReadFile (Address: 0x180019f50)
WriteFile (Address: 0x180019f70)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180019f90)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180019fa8)
HeapAlloc (Address: 0x180019fb0)
HeapFree (Address: 0x180019fa0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180019fc0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

UnregisterWait (Address: 0x180019fd0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001a008)
FreeLibrary (Address: 0x18001a000)
GetModuleFileNameA (Address: 0x180019fe0)
GetModuleHandleExW (Address: 0x180019ff8)
GetModuleHandleW (Address: 0x180019fe8)
GetProcAddress (Address: 0x180019ff0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18001a018)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001a028)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18001a038)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18001a068)
GetCurrentProcess (Address: 0x18001a060)
GetCurrentProcessId (Address: 0x18001a050)
GetCurrentThreadId (Address: 0x18001a048)
TerminateProcess (Address: 0x18001a058)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18001a078)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001a088)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001a0a8)
RegGetValueW (Address: 0x18001a0a0)
RegOpenKeyExW (Address: 0x18001a098)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001a148)
AcquireSRWLockShared (Address: 0x18001a130)
CreateEventExW (Address: 0x18001a100)
CreateEventW (Address: 0x18001a0b8)
CreateMutexExW (Address: 0x18001a0d0)
CreateSemaphoreExW (Address: 0x18001a138)
DeleteCriticalSection (Address: 0x18001a0d8)
EnterCriticalSection (Address: 0x18001a0f0)
InitializeCriticalSectionAndSpinCount (Address: 0x18001a110)
InitializeCriticalSectionEx (Address: 0x18001a0e0)
LeaveCriticalSection (Address: 0x18001a0e8)
OpenSemaphoreW (Address: 0x18001a0c0)
ReleaseMutex (Address: 0x18001a0f8)
ReleaseSemaphore (Address: 0x18001a120)
ReleaseSRWLockExclusive (Address: 0x18001a158)
ReleaseSRWLockShared (Address: 0x18001a140)
ResetEvent (Address: 0x18001a128)
SetEvent (Address: 0x18001a150)
TryEnterCriticalSection (Address: 0x18001a118)
WaitForSingleObject (Address: 0x18001a108)
WaitForSingleObjectEx (Address: 0x18001a0c8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18001a168)
Sleep (Address: 0x18001a170)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18001a188)
GetSystemTime (Address: 0x18001a190)
GetSystemTimeAsFileTime (Address: 0x18001a180)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18001a1a0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18001a1b8)
EncodePointer (Address: 0x18001a1b0)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18001a1c8)
RoOriginateErrorW (Address: 0x18001a1d0)

api-ms-win-core-winrt-l1-1-0.dll

RoRegisterActivationFactories (Address: 0x18001a1e8)
RoRevokeActivationFactories (Address: 0x18001a1e0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x18001a208)
WindowsDeleteString (Address: 0x18001a218)
WindowsGetStringRawBuffer (Address: 0x18001a210)
WindowsIsStringEmpty (Address: 0x18001a1f8)
WindowsStringHasEmbeddedNull (Address: 0x18001a200)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x18001a228)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18001a298)
__CxxFrameHandler3 (Address: 0x18001a2a0)
__CxxFrameHandler4 (Address: 0x18001a308)
__std_terminate (Address: 0x18001a300)
_CxxThrowException (Address: 0x18001a2a8)
_o___std_exception_copy (Address: 0x18001a2f0)
_o___std_exception_destroy (Address: 0x18001a2e8)
_o___std_type_info_destroy_list (Address: 0x18001a2e0)
_o___stdio_common_vsnprintf_s (Address: 0x18001a2d0)
_o___stdio_common_vswprintf (Address: 0x18001a2c8)
_o__callnewh (Address: 0x18001a2c0)
_o__cexit (Address: 0x18001a2b8)
_o__configure_narrow_argv (Address: 0x18001a2b0)
_o__crt_atexit (Address: 0x18001a2f8)
_o__difftime64 (Address: 0x18001a2d8)
_o__errno (Address: 0x18001a238)
_o__execute_onexit_table (Address: 0x18001a240)
_o__initialize_narrow_environment (Address: 0x18001a248)
_o__initialize_onexit_table (Address: 0x18001a250)
_o__invalid_parameter_noinfo (Address: 0x18001a258)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18001a260)
_o__purecall (Address: 0x18001a268)
_o__register_onexit_function (Address: 0x18001a270)
_o__seh_filter_dll (Address: 0x18001a278)
_o_free (Address: 0x18001a288)
_o_malloc (Address: 0x18001a290)
memcpy (Address: 0x18001a310)
memmove (Address: 0x18001a280)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18001a328)
_initterm_e (Address: 0x18001a320)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18001a338)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x18001a348)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18001a368)
EventSetInformation (Address: 0x18001a360)
EventUnregister (Address: 0x18001a358)
EventWriteTransfer (Address: 0x18001a370)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18001a388)
SetServiceStatus (Address: 0x18001a380)

bcrypt.dll

BCryptGenRandom (Address: 0x18001a398)

combase.dll

(Address: 0x18001a3c0)
(Address: 0x18001a3b8)
(Address: 0x18001a3b0)
(Address: 0x18001a3a8)

CRYPT32.dll

CertCreateCertificateContext (Address: 0x180019e30)
CertFreeCertificateContext (Address: 0x180019e38)

msvcp_win.dll

_Mtx_destroy_in_situ (Address: 0x18001a3f0)
_Mtx_init_in_situ (Address: 0x18001a3e8)
_Mtx_lock (Address: 0x18001a3f8)
_Mtx_unlock (Address: 0x18001a3d0)
?_Throw_C_error@std@@YAXH@Z (Address: 0x18001a3e0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001a400)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18001a3d8)

ntdll.dll

NtClose (Address: 0x18001a420)
NtCreateUserProcess (Address: 0x18001a418)
RtlCaptureContext (Address: 0x18001a438)
RtlCreateProcessParametersEx (Address: 0x18001a430)
RtlDestroyProcessParameters (Address: 0x18001a410)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18001a458)
RtlFreeHeap (Address: 0x18001a450)
RtlInitUnicodeString (Address: 0x18001a428)
RtlLookupFunctionEntry (Address: 0x18001a440)
RtlVirtualUnwind (Address: 0x18001a448)

OLEAUT32.dll

SysAllocString (Address: 0x180019e48)
SysFreeString (Address: 0x180019e58)
SysStringLen (Address: 0x180019e50)

RPCRT4.dll

NdrClientCall3 (Address: 0x180019e78)
RpcBindingFree (Address: 0x180019e98)
RpcBindingFromStringBindingW (Address: 0x180019e70)
RpcBindingSetAuthInfoExW (Address: 0x180019ea0)
RpcBindingSetOption (Address: 0x180019e90)
RpcEpResolveBinding (Address: 0x180019e68)
RpcStringBindingComposeW (Address: 0x180019e80)
RpcStringFreeW (Address: 0x180019e88)