NgcCtnrGidsHandler.dll

Description: Microsoft Passport Container GIDS Handler

Version: 10.0.19041.4474

Architecture: 64-bit

Operating System: Windows NT

SHA256: ca786326bba3c9c93a1d379f9cb2ec40

File Size: 450.0 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 8

Exported Functions

InitializeHandler (Ordinal: 1, Address: 0x5c90)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoGetMalloc (Address: 0x18005c490)
CoInitializeEx (Address: 0x18005c4a0)
CoTaskMemAlloc (Address: 0x18005c4a8)
CoTaskMemFree (Address: 0x18005c488)
CoUninitialize (Address: 0x18005c498)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18005c4c0)
IsDebuggerPresent (Address: 0x18005c4c8)
OutputDebugStringW (Address: 0x18005c4b8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18005c4f0)
RaiseException (Address: 0x18005c4d8)
SetLastError (Address: 0x18005c4f8)
SetUnhandledExceptionFilter (Address: 0x18005c4e8)
UnhandledExceptionFilter (Address: 0x18005c4e0)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x18005c508)

api-ms-win-core-file-l1-1-0.dll

FindClose (Address: 0x18005c528)
FindNextFileW (Address: 0x18005c530)
GetFileSizeEx (Address: 0x18005c520)
ReadFile (Address: 0x18005c518)
WriteFile (Address: 0x18005c538)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18005c548)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18005c568)
HeapAlloc (Address: 0x18005c560)
HeapFree (Address: 0x18005c558)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18005c578)
LocalFree (Address: 0x18005c580)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18005c590)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18005c5a0)
GetModuleFileNameA (Address: 0x18005c5b8)
GetModuleHandleExW (Address: 0x18005c5b0)
GetModuleHandleW (Address: 0x18005c5c0)
GetProcAddress (Address: 0x18005c5a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18005c5d0)
GetCPInfoExW (Address: 0x18005c5d8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18005c600)
GetCurrentProcessId (Address: 0x18005c5f8)
GetCurrentThreadId (Address: 0x18005c5f0)
TerminateProcess (Address: 0x18005c5e8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18005c610)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18005c620)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18005c638)
RtlLookupFunctionEntry (Address: 0x18005c630)
RtlVirtualUnwind (Address: 0x18005c640)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenA (Address: 0x18005c650)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18005c6b8)
AcquireSRWLockShared (Address: 0x18005c6a8)
CreateEventW (Address: 0x18005c660)
CreateMutexExW (Address: 0x18005c6d8)
CreateSemaphoreExW (Address: 0x18005c690)
DeleteCriticalSection (Address: 0x18005c6c8)
EnterCriticalSection (Address: 0x18005c698)
InitializeCriticalSectionAndSpinCount (Address: 0x18005c678)
InitializeCriticalSectionEx (Address: 0x18005c688)
InitializeSRWLock (Address: 0x18005c6d0)
LeaveCriticalSection (Address: 0x18005c6a0)
OpenSemaphoreW (Address: 0x18005c6e0)
ReleaseMutex (Address: 0x18005c6f0)
ReleaseSemaphore (Address: 0x18005c680)
ReleaseSRWLockExclusive (Address: 0x18005c6c0)
ReleaseSRWLockShared (Address: 0x18005c6b0)
ResetEvent (Address: 0x18005c668)
SetEvent (Address: 0x18005c670)
WaitForSingleObject (Address: 0x18005c6f8)
WaitForSingleObjectEx (Address: 0x18005c6e8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18005c708)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18005c720)
CreateThreadpoolTimer (Address: 0x18005c730)
SetThreadpoolTimer (Address: 0x18005c718)
WaitForThreadpoolTimerCallbacks (Address: 0x18005c728)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18005c818)
__CxxFrameHandler3 (Address: 0x18005c7a0)
__CxxFrameHandler4 (Address: 0x18005c828)
__std_terminate (Address: 0x18005c820)
_CxxThrowException (Address: 0x18005c7a8)
_o___std_exception_copy (Address: 0x18005c810)
_o___std_exception_destroy (Address: 0x18005c808)
_o___std_type_info_destroy_list (Address: 0x18005c800)
_o___stdio_common_vsnprintf_s (Address: 0x18005c7f8)
_o___stdio_common_vsprintf_s (Address: 0x18005c7f0)
_o___stdio_common_vswprintf (Address: 0x18005c7e8)
_o__beginthreadex (Address: 0x18005c7d0)
_o__callnewh (Address: 0x18005c7c8)
_o__cexit (Address: 0x18005c7c0)
_o__configure_narrow_argv (Address: 0x18005c7b8)
_o__crt_atexit (Address: 0x18005c7b0)
_o__errno (Address: 0x18005c7e0)
_o__execute_onexit_table (Address: 0x18005c7d8)
_o__initialize_narrow_environment (Address: 0x18005c740)
_o__initialize_onexit_table (Address: 0x18005c748)
_o__invalid_parameter_noinfo (Address: 0x18005c750)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18005c758)
_o__itoa_s (Address: 0x18005c760)
_o__purecall (Address: 0x18005c768)
_o__register_onexit_function (Address: 0x18005c770)
_o__seh_filter_dll (Address: 0x18005c778)
_o__strtoui64 (Address: 0x18005c848)
_o_free (Address: 0x18005c788)
_o_malloc (Address: 0x18005c790)
_o_terminate (Address: 0x18005c798)
memchr (Address: 0x18005c830)
memcmp (Address: 0x18005c838)
memcpy (Address: 0x18005c840)
memmove (Address: 0x18005c780)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18005c860)
_initterm_e (Address: 0x18005c858)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18005c870)
wcscmp (Address: 0x18005c878)
wcsnlen (Address: 0x18005c880)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x18005c890)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18005c8a8)
EventRegister (Address: 0x18005c8b8)
EventSetInformation (Address: 0x18005c8b0)
EventUnregister (Address: 0x18005c8c0)
EventWriteTransfer (Address: 0x18005c8a0)

api-ms-win-security-base-l1-1-0.dll

CheckTokenMembership (Address: 0x18005c8d0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18005c8e8)
ConvertStringSidToSidW (Address: 0x18005c8e0)

KERNEL32.dll

CreateDirectoryTransactedW (Address: 0x18005c3f0)
CreateFileTransactedW (Address: 0x18005c400)
DeleteFileTransactedW (Address: 0x18005c408)
FindFirstFileTransactedW (Address: 0x18005c410)
RemoveDirectoryTransactedW (Address: 0x18005c418)
SetFileAttributesTransactedW (Address: 0x18005c3f8)

ktmw32.dll

CommitTransaction (Address: 0x18005c8f8)
CreateTransaction (Address: 0x18005c900)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18005c920)
_Thrd_detach (Address: 0x18005c918)
_Thrd_id (Address: 0x18005c938)
_Thrd_join (Address: 0x18005c940)
?_Throw_C_error@std@@YAXH@Z (Address: 0x18005c950)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18005c948)
?_Xbad_function_call@std@@YAXXZ (Address: 0x18005c910)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18005c930)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18005c928)

ntdll.dll

EtwTraceMessage (Address: 0x18005c968)
RtlFreeAnsiString (Address: 0x18005c990)
RtlInitUnicodeString (Address: 0x18005c960)
RtlNtStatusToDosError (Address: 0x18005c978)
RtlUnicodeStringToAnsiString (Address: 0x18005c970)
WinSqmIncrementDWORD (Address: 0x18005c988)
WinSqmIsOptedIn (Address: 0x18005c980)

RPCRT4.dll

NdrClientCall3 (Address: 0x18005c460)
NdrServerCall2 (Address: 0x18005c468)
NdrServerCallAll (Address: 0x18005c470)
RpcBindingBind (Address: 0x18005c478)
RpcBindingCreateW (Address: 0x18005c448)
RpcBindingFree (Address: 0x18005c458)
RpcExceptionFilter (Address: 0x18005c450)
RpcImpersonateClient (Address: 0x18005c438)
RpcRaiseException (Address: 0x18005c430)
RpcRevertToSelfEx (Address: 0x18005c440)
UuidToStringW (Address: 0x18005c428)