negoexts.dll

Description: NegoExtender Security Package

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: 39937dc48758a72e330d9f02161ec0b8

File Size: 151.0 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 6

Exported Functions

  • SpLsaModeInitialize (Ordinal: 1, Address: 0x4c80)
  • SpUserModeInitialize (Ordinal: 2, Address: 0x14420)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180020218)
  • IsDebuggerPresent (Address: 0x180020210)
  • OutputDebugStringW (Address: 0x180020208)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180020228)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180020238)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180020260)
  • SetLastError (Address: 0x180020248)
  • SetUnhandledExceptionFilter (Address: 0x180020258)
  • UnhandledExceptionFilter (Address: 0x180020250)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180020270)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180020280)
  • HeapAlloc (Address: 0x180020288)
  • HeapFree (Address: 0x180020290)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1800202a0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800202b8)
  • GetModuleFileNameA (Address: 0x1800202c0)
  • GetModuleFileNameW (Address: 0x1800202b0)
  • GetModuleHandleExW (Address: 0x1800202c8)
  • GetModuleHandleW (Address: 0x1800202d0)
  • GetProcAddress (Address: 0x1800202d8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800202e8)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualAlloc (Address: 0x180020300)
  • VirtualProtect (Address: 0x180020308)
  • VirtualQuery (Address: 0x1800202f8)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x180020318)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180020350)
  • GetCurrentProcessId (Address: 0x180020328)
  • GetCurrentThreadId (Address: 0x180020330)
  • SetThreadStackGuarantee (Address: 0x180020338)
  • SetThreadToken (Address: 0x180020340)
  • TerminateProcess (Address: 0x180020348)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180020360)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180020370)
  • RegOpenKeyExW (Address: 0x180020380)
  • RegQueryValueExW (Address: 0x180020378)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800203a0)
  • RtlLookupFunctionEntry (Address: 0x180020398)
  • RtlVirtualUnwind (Address: 0x180020390)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800203b0)
  • AcquireSRWLockShared (Address: 0x1800203f0)
  • CreateMutexExW (Address: 0x1800203c0)
  • CreateSemaphoreExW (Address: 0x180020408)
  • DeleteCriticalSection (Address: 0x1800203b8)
  • EnterCriticalSection (Address: 0x1800203d8)
  • InitializeCriticalSectionEx (Address: 0x1800203d0)
  • LeaveCriticalSection (Address: 0x180020418)
  • OpenSemaphoreW (Address: 0x1800203f8)
  • ReleaseMutex (Address: 0x180020400)
  • ReleaseSemaphore (Address: 0x180020410)
  • ReleaseSRWLockExclusive (Address: 0x1800203e8)
  • ReleaseSRWLockShared (Address: 0x180020420)
  • WaitForSingleObject (Address: 0x1800203c8)
  • WaitForSingleObjectEx (Address: 0x1800203e0)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180020430)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x180020440)
  • GetSystemTimeAsFileTime (Address: 0x180020450)
  • GetTickCount (Address: 0x180020448)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180020468)
  • CreateThreadpoolTimer (Address: 0x180020460)
  • SetThreadpoolTimer (Address: 0x180020478)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180020470)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1800204b0)
  • GetTraceEnableLevel (Address: 0x1800204a8)
  • GetTraceLoggerHandle (Address: 0x180020498)
  • RegisterTraceGuidsW (Address: 0x180020488)
  • TraceMessage (Address: 0x1800204a0)
  • UnregisterTraceGuids (Address: 0x180020490)
api-ms-win-security-base-l1-1-0.dll
  • RevertToSelf (Address: 0x1800204c0)
CRYPT32.dll
  • CertCloseStore (Address: 0x1800201d0)
  • CertFindCertificateInStore (Address: 0x1800201c0)
  • CertFreeCertificateContext (Address: 0x1800201c8)
  • CertGetCertificateContextProperty (Address: 0x1800201a8)
  • CertOpenStore (Address: 0x1800201b8)
  • CryptAcquireCertificatePrivateKey (Address: 0x1800201b0)
CRYPTBASE.dll
  • SystemFunction036 (Address: 0x1800201e0)
CRYPTSP.dll
  • CryptGetProvParam (Address: 0x1800201f0)
  • CryptReleaseContext (Address: 0x1800201f8)
msvcrt.dll
  • __C_specific_handler (Address: 0x180020518)
  • __dllonexit (Address: 0x180020500)
  • _amsg_exit (Address: 0x180020560)
  • _callnewh (Address: 0x1800204f0)
  • _initterm (Address: 0x180020538)
  • _lock (Address: 0x1800204d8)
  • _onexit (Address: 0x180020520)
  • _purecall (Address: 0x180020528)
  • _unlock (Address: 0x1800204d0)
  • _vsnprintf (Address: 0x180020568)
  • _vsnwprintf (Address: 0x180020548)
  • _XcptFilter (Address: 0x1800204e0)
  • free (Address: 0x1800204e8)
  • malloc (Address: 0x1800204f8)
  • memcmp (Address: 0x180020508)
  • memcpy (Address: 0x180020510)
  • memcpy_s (Address: 0x180020540)
  • memmove_s (Address: 0x180020530)
  • memset (Address: 0x180020578)
  • tolower (Address: 0x180020570)
  • wcschr (Address: 0x180020550)
  • wcsrchr (Address: 0x180020558)
ntdll.dll
  • NtClose (Address: 0x180020640)
  • NtDuplicateObject (Address: 0x180020590)
  • NtQueryInformationToken (Address: 0x180020588)
  • RtlAcquireResourceExclusive (Address: 0x180020618)
  • RtlAcquireResourceShared (Address: 0x180020630)
  • RtlAnsiStringToUnicodeString (Address: 0x180020598)
  • RtlCompareUnicodeString (Address: 0x180020608)
  • RtlConvertSharedToExclusive (Address: 0x1800205e0)
  • RtlCreateUnicodeStringFromAsciiz (Address: 0x1800205b0)
  • RtlDeleteCriticalSection (Address: 0x1800205f8)
  • RtlDeleteElementGenericTable (Address: 0x180020658)
  • RtlDeleteElementGenericTableAvl (Address: 0x1800205d0)
  • RtlDeleteResource (Address: 0x180020610)
  • RtlEnterCriticalSection (Address: 0x180020668)
  • RtlEnumerateGenericTable (Address: 0x180020660)
  • RtlEnumerateGenericTableAvl (Address: 0x1800205c0)
  • RtlEqualUnicodeString (Address: 0x180020620)
  • RtlFreeUnicodeString (Address: 0x180020698)
  • RtlGetElementGenericTable (Address: 0x1800205f0)
  • RtlGUIDFromString (Address: 0x1800205a0)
  • RtlImageNtHeader (Address: 0x1800205a8)
  • RtlInitializeCriticalSection (Address: 0x180020680)
  • RtlInitializeGenericTable (Address: 0x180020678)
  • RtlInitializeGenericTableAvl (Address: 0x1800205b8)
  • RtlInitializeResource (Address: 0x180020638)
  • RtlInitUnicodeString (Address: 0x180020690)
  • RtlInsertElementGenericTable (Address: 0x180020600)
  • RtlInsertElementGenericTableAvl (Address: 0x1800205d8)
  • RtlIpv6StringToAddressExW (Address: 0x180020688)
  • RtlLeaveCriticalSection (Address: 0x180020650)
  • RtlLookupElementGenericTable (Address: 0x180020648)
  • RtlLookupElementGenericTableAvl (Address: 0x1800205e8)
  • RtlNumberGenericTableElements (Address: 0x180020670)
  • RtlNumberGenericTableElementsAvl (Address: 0x1800205c8)
  • RtlReleaseResource (Address: 0x180020628)