ntdsa.dll

Description: NT5DS

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4474

Architecture: 64-bit

Operating System: Windows NT

SHA256: fe47e3811f46a76eba76d647030e0d03

File Size: 100.5 KB

Uploaded At: Dec. 1, 2025, 8:11 a.m.

Views: 13

Exported Functions

  • AppendRDN (Ordinal: 1, Address: 0x5a30)
  • AttrTypeToKey (Ordinal: 2, Address: 0xb2d0)
  • ConvertReplicaLinkToNative (Ordinal: 3, Address: 0xb340)
  • CountNameParts (Ordinal: 4, Address: 0xb3a0)
  • CrackSingleName (Ordinal: 5, Address: 0x6320)
  • DBDsReplBackupUpdate (Ordinal: 6, Address: 0xb3f0)
  • DBUpdateBackupTimeStamps (Ordinal: 7, Address: 0xb480)
  • DNSHostNameValueCheckForNetlogon (Ordinal: 8, Address: 0xb4e0)
  • DSInstanceCompare (Ordinal: 9, Address: 0xb550)
  • DSInstanceFromNTDSAddrEx (Ordinal: 10, Address: 0xb5c0)
  • DSInstanceFromNameEx (Ordinal: 11, Address: 0xb630)
  • DSInstanceFromSetupEx (Ordinal: 12, Address: 0xb6a0)
  • DSNAMEToHashKeyExternal (Ordinal: 13, Address: 0xb720)
  • DSNAMEToMappedStrExternal (Ordinal: 14, Address: 0x5d10)
  • DSStrToHashKeyExternal (Ordinal: 15, Address: 0xb780)
  • DSStrToMappedStrExternal (Ordinal: 16, Address: 0xb7f0)
  • DbgPrintErrorInfo (Ordinal: 17, Address: 0xb860)
  • DebPrintV (Ordinal: 18, Address: 0xb8b0)
  • DebugTest (Ordinal: 19, Address: 0xb940)
  • DirAddEntry (Ordinal: 20, Address: 0xb9b0)
  • DirBind (Ordinal: 21, Address: 0x4d20)
  • DirCompare (Ordinal: 22, Address: 0xba20)
  • DirErrorToNtStatus (Ordinal: 23, Address: 0xba90)
  • DirErrorToWinError (Ordinal: 24, Address: 0x54f0)
  • DirFindEntry (Ordinal: 25, Address: 0x50b0)
  • DirGetDomainHandle (Ordinal: 26, Address: 0x5330)
  • DirModifyDN (Ordinal: 27, Address: 0xbb00)
  • DirModifyEntry (Ordinal: 28, Address: 0x5390)
  • DirNotifyRegister (Ordinal: 29, Address: 0x4d90)
  • DirNotifyUnRegister (Ordinal: 30, Address: 0xbb70)
  • DirOperationControl (Ordinal: 31, Address: 0xbbe0)
  • DirPrepareForImpersonate (Ordinal: 32, Address: 0xbc50)
  • DirProtectEntry (Ordinal: 33, Address: 0xbcd0)
  • DirRead (Ordinal: 34, Address: 0x5e20)
  • DirRemoveEntry (Ordinal: 35, Address: 0xbd30)
  • DirReplicaAdd (Ordinal: 36, Address: 0xbda0)
  • DirReplicaDelete (Ordinal: 37, Address: 0xbe50)
  • DirReplicaDemote (Ordinal: 38, Address: 0xbed0)
  • DirReplicaGetDemoteTarget (Ordinal: 39, Address: 0xbf60)
  • DirReplicaModify (Ordinal: 40, Address: 0xbff0)
  • DirReplicaReferenceUpdate (Ordinal: 41, Address: 0xc0b0)
  • DirReplicaReplSingleObj (Ordinal: 42, Address: 0xc140)
  • DirReplicaSetCredentials (Ordinal: 43, Address: 0xc1d0)
  • DirReplicaSynchronize (Ordinal: 44, Address: 0xc250)
  • DirSearch (Ordinal: 45, Address: 0x5b90)
  • DirStopImpersonating (Ordinal: 46, Address: 0xc2e0)
  • DirTransactControl (Ordinal: 47, Address: 0x5dd0)
  • DoAssert (Ordinal: 48, Address: 0xc350)
  • DoLogEventAndTrace (Ordinal: 49, Address: 0xc3c0)
  • DoLogEventW (Ordinal: 50, Address: 0xc410)
  • DoLogMsgOverride (Ordinal: 51, Address: 0x57a0)
  • DoLogOverride (Ordinal: 52, Address: 0xc4d0)
  • DoLogUnhandledError (Ordinal: 53, Address: 0xc540)
  • DoLogUnhandledError2 (Ordinal: 54, Address: 0xc5b0)
  • DsCanRODCHostNdncForNetLogon (Ordinal: 55, Address: 0xc630)
  • DsChangeBootOptions (Ordinal: 56, Address: 0xc6b0)
  • DsCheckConstraint (Ordinal: 57, Address: 0xc740)
  • DsFreeDomainControllerInfoForNetLogon (Ordinal: 58, Address: 0xc7c0)
  • DsFreeServersAndSitesForNetLogon (Ordinal: 59, Address: 0x5800)
  • DsGetBootOptions (Ordinal: 60, Address: 0xc830)
  • DsGetDefaultObjCategory (Ordinal: 61, Address: 0x5950)
  • DsGetDomainControllerInfoForNetLogon (Ordinal: 62, Address: 0xc890)
  • DsGetEventConfig (Ordinal: 63, Address: 0x4c80)
  • DsGetServersAndSitesForNetLogon (Ordinal: 64, Address: 0x5850)
  • DsInitialize (Ordinal: 65, Address: 0x4f10)
  • DsInitializeForSAM (Ordinal: 66, Address: 0x45e0)
  • DsIsBeingBackSynced (Ordinal: 67, Address: 0x60a0)
  • DsIsDCReadOnly (Ordinal: 68, Address: 0xc930)
  • DsIsDLLLoaded (Ordinal: 69, Address: 0xc990)
  • DsLoadDLL (Ordinal: 70, Address: 0x6510)
  • DsPrepareUninitialize (Ordinal: 71, Address: 0xc9b0)
  • DsQueryDnsHostNameForNetLogon (Ordinal: 72, Address: 0xca10)
  • DsRegisterServiceStateCallback (Ordinal: 73, Address: 0x9690)
  • DsTraceEvent (Ordinal: 74, Address: 0xcce0)
  • DsUninitialize (Ordinal: 75, Address: 0x4ce0)
  • DsUninitializeForServiceStartError (Ordinal: 76, Address: 0xcde0)
  • DsUnloadDLL (Ordinal: 77, Address: 0xce20)
  • DsUnregisterServiceStateCallback (Ordinal: 78, Address: 0xb090)
  • DsWaitUntilDelayedStartupIsDone (Ordinal: 79, Address: 0xce80)
  • DsaDisableUpdates (Ordinal: 80, Address: 0xcec0)
  • DsaEnableUpdates (Ordinal: 81, Address: 0xcf20)
  • DsaSetInstallCallback (Ordinal: 82, Address: 0x4f70)
  • FindNetbiosDomainName (Ordinal: 83, Address: 0xcf80)
  • GCVerifyCacheLookup (Ordinal: 84, Address: 0xd000)
  • GetConfigDsName (Ordinal: 85, Address: 0xd070)
  • GetConfigParam (Ordinal: 86, Address: 0xd0d0)
  • GetConfigParamAllocW (Ordinal: 87, Address: 0xd150)
  • GetConfigParamW (Ordinal: 88, Address: 0xd1d0)
  • GetConfigurationInfo (Ordinal: 89, Address: 0x41b0)
  • GetConfigurationName (Ordinal: 90, Address: 0x5f30)
  • GetConfigurationNamesList (Ordinal: 91, Address: 0x4640)
  • GetDnsRootAlias (Ordinal: 92, Address: 0x46d0)
  • GetRDNInfoExternal (Ordinal: 93, Address: 0x5120)
  • GuidBasedDNSNameFromDSName (Ordinal: 94, Address: 0xd250)
  • ImpersonateAnyClient (Ordinal: 95, Address: 0x3c70)
  • InitCommarg (Ordinal: 96, Address: 0x6000)
  • InitializeSamDsExtension (Ordinal: 97, Address: 0x8f10)
  • IsFullDCInSiteForNetlogon (Ordinal: 98, Address: 0xd2b0)
  • IsMangledRDNExternal (Ordinal: 99, Address: 0x4e90)
  • IsRODCInSiteForNetlogon (Ordinal: 100, Address: 0x4740)
  • IsStringGuid (Ordinal: 101, Address: 0x5560)
  • IsValidDSInstance (Ordinal: 102, Address: 0xd320)
  • MapSpnServiceClass (Ordinal: 103, Address: 0xd380)
  • MatchCrossRefByNetbiosName (Ordinal: 104, Address: 0xd3e0)
  • MatchCrossRefBySid (Ordinal: 105, Address: 0xd460)
  • MatchDomainDnByDnsName (Ordinal: 106, Address: 0xd4e0)
  • MatchDomainDnByNetbiosName (Ordinal: 107, Address: 0xd560)
  • MtxAddrFromTransportAddr (Ordinal: 108, Address: 0xd5e0)
  • MtxSame (Ordinal: 109, Address: 0xd640)
  • NTDSServiceMain (Ordinal: 110, Address: 0x4470)
  • NameMatched (Ordinal: 111, Address: 0x7df0)
  • NameMatchedStringNameOnly (Ordinal: 112, Address: 0xd6b0)
  • NamePrefix (Ordinal: 113, Address: 0x5040)
  • NtdsaiDeRegisterKdcAcctChangeNotif (Ordinal: 114, Address: 0xd720)
  • NtdsaiRegisterKdcAcctChangeNotif (Ordinal: 115, Address: 0x47b0)
  • NtdsaiUpdateKrbtgtAccounts (Ordinal: 116, Address: 0x51b0)
  • QuoteRDNValue (Ordinal: 117, Address: 0x55d0)
  • ReplicaLinkSizeFromParts (Ordinal: 118, Address: 0xd780)
  • ReplicaLinkUpdateDSInstance (Ordinal: 119, Address: 0xd7f0)
  • SamIAmIGC (Ordinal: 120, Address: 0xd850)
  • SamIDsResetBadPwdCountOnPdc (Ordinal: 121, Address: 0xd900)
  • SamIGCLookupNames (Ordinal: 122, Address: 0x5230)
  • SamIGCLookupSids (Ordinal: 123, Address: 0xda00)
  • SamISameSite (Ordinal: 124, Address: 0x52d0)
  • SampDsControl (Ordinal: 125, Address: 0xde60)
  • SampExistsDsTransaction (Ordinal: 126, Address: 0x5d70)
  • SampGetClassAttribute (Ordinal: 127, Address: 0xf740)
  • SampSetDsa (Ordinal: 128, Address: 0x5fb0)
  • StartDsaServiceMain (Ordinal: 129, Address: 0x44d0)
  • THAlloc (Ordinal: 130, Address: 0x6270)
  • THClearErrors (Ordinal: 131, Address: 0x6050)
  • THCreate (Ordinal: 132, Address: 0x5ad0)
  • THDestroy (Ordinal: 133, Address: 0x5b30)
  • THFree (Ordinal: 134, Address: 0x62d0)
  • THGetErrorString (Ordinal: 135, Address: 0x4fe0)
  • THQuery (Ordinal: 136, Address: 0x7b00)
  • THReAlloc (Ordinal: 137, Address: 0x56a0)
  • THRestore (Ordinal: 138, Address: 0x7700)
  • THSave (Ordinal: 139, Address: 0x7500)
  • THVerifyCount (Ordinal: 140, Address: 0xf7d0)
  • TransportAddrFromMtxAddr (Ordinal: 141, Address: 0xf830)
  • TrimDSNameBy (Ordinal: 142, Address: 0x5640)
  • UnImpersonateAnyClient (Ordinal: 143, Address: 0x3d50)
  • UpdateDSPerfStats (Ordinal: 144, Address: 0xf890)
  • phoneticDisplayNameABView (Ordinal: 145, Address: 0xf900)
  • showInAddressBookArrayV1 (Ordinal: 146, Address: 0xf9c0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180010130)
  • IsDebuggerPresent (Address: 0x180010128)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180010140)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180010150)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180010160)
  • SetUnhandledExceptionFilter (Address: 0x180010168)
  • UnhandledExceptionFilter (Address: 0x180010170)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180010180)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180010198)
  • LocalFree (Address: 0x180010190)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x1800101b0)
  • GetProcAddress (Address: 0x1800101b8)
  • LoadLibraryExW (Address: 0x1800101a8)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800101c8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800101f0)
  • GetCurrentProcessId (Address: 0x1800101e0)
  • GetCurrentThreadId (Address: 0x180010210)
  • TerminateProcess (Address: 0x1800101e8)
  • TlsAlloc (Address: 0x1800101f8)
  • TlsFree (Address: 0x180010208)
  • TlsGetValue (Address: 0x180010200)
  • TlsSetValue (Address: 0x1800101d8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180010220)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180010230)
  • RegGetValueW (Address: 0x180010238)
  • RegOpenKeyExW (Address: 0x180010240)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180010250)
  • RtlLookupFunctionEntry (Address: 0x180010258)
  • RtlVirtualUnwind (Address: 0x180010260)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180010280)
  • AcquireSRWLockShared (Address: 0x1800102a0)
  • DeleteCriticalSection (Address: 0x180010290)
  • EnterCriticalSection (Address: 0x180010288)
  • InitializeCriticalSection (Address: 0x180010270)
  • InitializeSRWLock (Address: 0x180010298)
  • LeaveCriticalSection (Address: 0x1800102b0)
  • ReleaseSRWLockExclusive (Address: 0x180010278)
  • ReleaseSRWLockShared (Address: 0x1800102a8)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800102c0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800102d8)
  • GetTickCount (Address: 0x1800102d0)
bcd.dll
  • BcdCloseObject (Address: 0x1800102e8)
  • BcdCloseStore (Address: 0x1800102f8)
  • BcdOpenObject (Address: 0x1800102f0)
  • BcdOpenSystemStore (Address: 0x180010308)
  • BcdSetElementData (Address: 0x180010300)
msvcrt.dll
  • __C_specific_handler (Address: 0x180010340)
  • __dllonexit (Address: 0x180010338)
  • _amsg_exit (Address: 0x180010358)
  • _beginthread (Address: 0x180010368)
  • _beginthreadex (Address: 0x180010328)
  • _initterm (Address: 0x180010370)
  • _lock (Address: 0x180010348)
  • _onexit (Address: 0x180010330)
  • _unlock (Address: 0x180010350)
  • _XcptFilter (Address: 0x180010360)
  • free (Address: 0x180010320)
  • malloc (Address: 0x180010318)
ntdll.dll
  • DbgPrint (Address: 0x180010380)