NcaSvc.dll

Description: Microsoft Network Connectivity Assistant Service

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7b0187be9705ed2f925616c13b3744ba

File Size: 167.5 KB

Uploaded At: Dec. 1, 2025, 7:34 a.m.

Views: 6

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x47e0)
  • SvchostPushServiceGlobals (Ordinal: 2, Address: 0x4c00)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x18001ee30)
  • CoInitializeEx (Address: 0x18001ee18)
  • CoSetProxyBlanket (Address: 0x18001ee20)
  • CoUninitialize (Address: 0x18001ee28)
api-ms-win-core-debug-l1-1-0.dll
  • OutputDebugStringA (Address: 0x18001ee40)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18001ee68)
  • SetLastError (Address: 0x18001ee58)
  • SetUnhandledExceptionFilter (Address: 0x18001ee50)
  • UnhandledExceptionFilter (Address: 0x18001ee60)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x18001ee88)
  • GetLongPathNameW (Address: 0x18001ee98)
  • GetTempFileNameW (Address: 0x18001ee90)
  • ReadFile (Address: 0x18001ee80)
  • SetFilePointer (Address: 0x18001eea0)
  • WriteFile (Address: 0x18001ee78)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x18001eeb0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18001eec0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18001eed0)
  • HeapAlloc (Address: 0x18001eed8)
  • HeapFree (Address: 0x18001eee0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18001eef0)
  • LocalFree (Address: 0x18001eef8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18001ef08)
  • LoadStringW (Address: 0x18001ef10)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18001ef20)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessAsUserW (Address: 0x18001ef30)
  • CreateProcessW (Address: 0x18001ef40)
  • CreateThread (Address: 0x18001ef90)
  • GetCurrentProcess (Address: 0x18001ef60)
  • GetCurrentProcessId (Address: 0x18001ef50)
  • GetCurrentThread (Address: 0x18001ef80)
  • GetCurrentThreadId (Address: 0x18001ef68)
  • OpenProcessToken (Address: 0x18001ef78)
  • OpenThreadToken (Address: 0x18001ef88)
  • QueueUserAPC (Address: 0x18001ef38)
  • ResumeThread (Address: 0x18001ef58)
  • SetThreadToken (Address: 0x18001ef70)
  • TerminateProcess (Address: 0x18001ef48)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18001efa0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18001efc8)
  • RegCreateKeyExW (Address: 0x18001efb8)
  • RegDeleteValueW (Address: 0x18001efd8)
  • RegEnumValueW (Address: 0x18001efc0)
  • RegNotifyChangeKeyValue (Address: 0x18001efd0)
  • RegOpenKeyExW (Address: 0x18001efb0)
  • RegQueryInfoKeyW (Address: 0x18001efe0)
  • RegQueryValueExW (Address: 0x18001eff0)
  • RegSetValueExW (Address: 0x18001efe8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18001f008)
  • RtlCompareMemory (Address: 0x18001f018)
  • RtlLookupFunctionEntry (Address: 0x18001f000)
  • RtlVirtualUnwind (Address: 0x18001f010)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathCanonicalizeW (Address: 0x18001f028)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x18001f038)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18001f048)
  • AcquireSRWLockShared (Address: 0x18001f068)
  • CreateEventW (Address: 0x18001f088)
  • DeleteCriticalSection (Address: 0x18001f0a0)
  • EnterCriticalSection (Address: 0x18001f060)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18001f070)
  • InitializeSRWLock (Address: 0x18001f0b8)
  • LeaveCriticalSection (Address: 0x18001f058)
  • ReleaseSRWLockExclusive (Address: 0x18001f078)
  • ReleaseSRWLockShared (Address: 0x18001f090)
  • ResetEvent (Address: 0x18001f0b0)
  • SetEvent (Address: 0x18001f050)
  • SetWaitableTimer (Address: 0x18001f098)
  • WaitForSingleObject (Address: 0x18001f0a8)
  • WaitForSingleObjectEx (Address: 0x18001f080)
api-ms-win-core-synch-l1-2-0.dll
  • InitializeConditionVariable (Address: 0x18001f0c8)
  • Sleep (Address: 0x18001f0d0)
  • SleepConditionVariableCS (Address: 0x18001f0f0)
  • SleepConditionVariableSRW (Address: 0x18001f0d8)
  • WakeAllConditionVariable (Address: 0x18001f0e0)
  • WakeConditionVariable (Address: 0x18001f0e8)
api-ms-win-core-synch-l1-2-1.dll
  • CreateWaitableTimerW (Address: 0x18001f108)
  • WaitForMultipleObjects (Address: 0x18001f100)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x18001f128)
  • GetSystemTime (Address: 0x18001f138)
  • GetSystemTimeAsFileTime (Address: 0x18001f120)
  • GetTickCount (Address: 0x18001f118)
  • GetTickCount64 (Address: 0x18001f130)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18001f1a0)
  • CloseThreadpoolWait (Address: 0x18001f190)
  • CloseThreadpoolWork (Address: 0x18001f198)
  • CreateThreadpoolTimer (Address: 0x18001f160)
  • CreateThreadpoolWait (Address: 0x18001f178)
  • CreateThreadpoolWork (Address: 0x18001f148)
  • LeaveCriticalSectionWhenCallbackReturns (Address: 0x18001f158)
  • SetThreadpoolTimer (Address: 0x18001f168)
  • SetThreadpoolWait (Address: 0x18001f180)
  • SubmitThreadpoolWork (Address: 0x18001f150)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18001f170)
  • WaitForThreadpoolWaitCallbacks (Address: 0x18001f188)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x18001f1d8)
  • GetTraceEnableLevel (Address: 0x18001f1b0)
  • GetTraceLoggerHandle (Address: 0x18001f1c0)
  • RegisterTraceGuidsW (Address: 0x18001f1c8)
  • TraceMessage (Address: 0x18001f1d0)
  • UnregisterTraceGuids (Address: 0x18001f1b8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x18001f1f0)
  • EventSetInformation (Address: 0x18001f1e8)
  • EventUnregister (Address: 0x18001f200)
  • EventWriteTransfer (Address: 0x18001f1f8)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x18001f248)
  • CheckTokenMembership (Address: 0x18001f240)
  • CopySid (Address: 0x18001f238)
  • DuplicateTokenEx (Address: 0x18001f210)
  • EqualSid (Address: 0x18001f228)
  • GetLengthSid (Address: 0x18001f218)
  • GetTokenInformation (Address: 0x18001f230)
  • RevertToSelf (Address: 0x18001f220)
api-ms-win-security-lsalookup-l1-1-0.dll
  • LookupAccountSidLocalW (Address: 0x18001f258)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18001f270)
  • ConvertStringSidToSidW (Address: 0x18001f268)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x18001f280)
  • SetServiceStatus (Address: 0x18001f288)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x18001f298)
  • OpenSCManagerW (Address: 0x18001f2a0)
  • OpenServiceW (Address: 0x18001f2a8)
api-ms-win-service-management-l2-1-0.dll
  • NotifyServiceStatusChangeW (Address: 0x18001f2b8)
bcrypt.dll
  • BCryptGetFipsAlgorithmMode (Address: 0x18001f2c8)
DNSAPI.dll
  • DnsFreePolicyConfig (Address: 0x18001eb60)
  • DnsGetPolicyTableInfo (Address: 0x18001eb68)
FirewallAPI.dll
  • FWChangeNotificationCreate (Address: 0x18001eb80)
  • FWChangeNotificationDestroy (Address: 0x18001eb78)
fwpuclnt.dll
  • FwpmEngineClose0 (Address: 0x18001f2e8)
  • FwpmEngineOpen0 (Address: 0x18001f2f0)
  • FwpmNetEventSubscribe4 (Address: 0x18001f2d8)
  • FwpmNetEventUnsubscribe0 (Address: 0x18001f2e0)
httpprxp.dll
  • ProxyHelperProviderConnectToServer (Address: 0x18001f300)
  • ProxyHelperProviderDisconnectFromServer (Address: 0x18001f318)
  • ProxyHelperProviderRegisterForEventNotification (Address: 0x18001f308)
  • ProxyHelperProviderUnregisterEventNotification (Address: 0x18001f310)
IPHLPAPI.DLL
  • CancelMibChangeNotify2 (Address: 0x18001ebc0)
  • CreateSortedAddressPairs (Address: 0x18001ebb8)
  • FreeMibTable (Address: 0x18001ebb0)
  • GetAdaptersAddresses (Address: 0x18001ebc8)
  • Icmp6CreateFile (Address: 0x18001eba8)
  • Icmp6SendEcho2 (Address: 0x18001eb98)
  • IcmpCloseHandle (Address: 0x18001eb90)
  • NotifyIpInterfaceChange (Address: 0x18001eba0)
  • NotifyRouteChange2 (Address: 0x18001ebd8)
  • NotifyUnicastIpAddressChange (Address: 0x18001ebd0)
KERNEL32.dll
  • AssignProcessToJobObject (Address: 0x18001ec18)
  • CreateJobObjectW (Address: 0x18001ebf0)
  • GetComputerNameW (Address: 0x18001ebe8)
  • RegisterWaitForSingleObject (Address: 0x18001ebf8)
  • TerminateJobObject (Address: 0x18001ec08)
  • UnregisterWait (Address: 0x18001ec10)
  • UnregisterWaitEx (Address: 0x18001ec00)
msvcrt.dll
  • __C_specific_handler (Address: 0x18001f380)
  • _amsg_exit (Address: 0x18001f348)
  • _initterm (Address: 0x18001f390)
  • _vsnprintf_s (Address: 0x18001f358)
  • _vsnwprintf (Address: 0x18001f370)
  • _wcsicmp (Address: 0x18001f368)
  • _wcsnicmp (Address: 0x18001f338)
  • _XcptFilter (Address: 0x18001f350)
  • free (Address: 0x18001f340)
  • malloc (Address: 0x18001f328)
  • memcpy (Address: 0x18001f388)
  • memset (Address: 0x18001f330)
  • strchr (Address: 0x18001f378)
  • wcschr (Address: 0x18001f360)
  • wcscmp (Address: 0x18001f398)
ntdll.dll
  • EtwTraceMessage (Address: 0x18001f3a8)
  • RtlIpv6AddressToStringW (Address: 0x18001f3b0)
  • WinSqmIsOptedIn (Address: 0x18001f3b8)
  • WinSqmSetDWORD (Address: 0x18001f3c0)
OLEAUT32.dll
  • SysAllocString (Address: 0x18001ec38)
  • SysFreeString (Address: 0x18001ec28)
  • VariantClear (Address: 0x18001ec40)
  • VariantInit (Address: 0x18001ec30)
RPCRT4.dll
  • I_RpcBindingIsClientLocal (Address: 0x18001ecb0)
  • Ndr64AsyncServerCallAll (Address: 0x18001ec80)
  • NdrAsyncServerCall (Address: 0x18001ec90)
  • NdrServerCall2 (Address: 0x18001ec98)
  • NdrServerCallAll (Address: 0x18001ec88)
  • RpcAsyncAbortCall (Address: 0x18001ecf0)
  • RpcAsyncCompleteCall (Address: 0x18001ece8)
  • RpcBindingInqAuthClientW (Address: 0x18001ecc8)
  • RpcBindingToStringBindingW (Address: 0x18001ecb8)
  • RpcBindingVectorFree (Address: 0x18001eca0)
  • RpcEpRegisterW (Address: 0x18001ecd8)
  • RpcEpUnregister (Address: 0x18001ec60)
  • RpcImpersonateClient (Address: 0x18001ecf8)
  • RpcRevertToSelf (Address: 0x18001ed00)
  • RpcServerInqBindings (Address: 0x18001ec50)
  • RpcServerInqDefaultPrincNameW (Address: 0x18001ec78)
  • RpcServerRegisterAuthInfoW (Address: 0x18001ec70)
  • RpcServerRegisterIfEx (Address: 0x18001ec58)
  • RpcServerUnregisterIfEx (Address: 0x18001eca8)
  • RpcServerUseProtseqW (Address: 0x18001ece0)
  • RpcStringBindingParseW (Address: 0x18001ecc0)
  • RpcStringFreeW (Address: 0x18001ec68)
  • UuidEqual (Address: 0x18001ecd0)
SspiCli.dll
  • AcceptSecurityContext (Address: 0x18001ed58)
  • AcquireCredentialsHandleW (Address: 0x18001ed40)
  • DeleteSecurityContext (Address: 0x18001ed20)
  • FreeContextBuffer (Address: 0x18001ed10)
  • FreeCredentialsHandle (Address: 0x18001ed38)
  • GetUserNameExW (Address: 0x18001ed18)
  • ImpersonateSecurityContext (Address: 0x18001ed50)
  • InitializeSecurityContextW (Address: 0x18001ed28)
  • QuerySecurityPackageInfoW (Address: 0x18001ed30)
  • RevertSecurityContext (Address: 0x18001ed48)
UMPDC.dll
  • PdcNotificationClientRegister (Address: 0x18001ed70)
  • PdcNotificationClientUnregister (Address: 0x18001ed68)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x18001ed88)
  • DestroyEnvironmentBlock (Address: 0x18001ed80)
  • RegisterGPNotification (Address: 0x18001ed90)
  • UnregisterGPNotification (Address: 0x18001ed98)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x18001edd8)
  • WinHttpConnect (Address: 0x18001edb8)
  • WinHttpCrackUrl (Address: 0x18001eda8)
  • WinHttpOpen (Address: 0x18001edc0)
  • WinHttpOpenRequest (Address: 0x18001edb0)
  • WinHttpSendRequest (Address: 0x18001edc8)
  • WinHttpSetStatusCallback (Address: 0x18001edd0)
WS2_32.dll
  • FreeAddrInfoW (Address: 0x18001ee08)
  • GetAddrInfoW (Address: 0x18001ede8)
  • InetPtonW (Address: 0x18001edf8)
  • WSACleanup (Address: 0x18001edf0)
  • WSAStartup (Address: 0x18001ee00)