ngcsvc.dll
Description: Microsoft Passport Service
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 64-bit
Operating System: Windows NT
SHA256: ec66cd9f44656f3615b3c8c3e29d4e66
File Size: 926.0 KB
Uploaded At: Dec. 1, 2025, 7:35 a.m.
Views: 6
Exported Functions
- NgcServiceMain (Ordinal: 1, Address: 0x3c360)
- SvchostPushServiceGlobals (Ordinal: 2, Address: 0x3d3c0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800a68f0)
api-ms-win-core-com-l1-1-0.dll
- CLSIDFromString (Address: 0x1800a6918)
- CoCreateGuid (Address: 0x1800a6900)
- CoCreateInstance (Address: 0x1800a6930)
- CoGetMalloc (Address: 0x1800a6940)
- CoInitializeEx (Address: 0x1800a6908)
- CoTaskMemAlloc (Address: 0x1800a6938)
- CoTaskMemFree (Address: 0x1800a6928)
- CoTaskMemRealloc (Address: 0x1800a6920)
- CoUninitialize (Address: 0x1800a6910)
- StringFromCLSID (Address: 0x1800a6948)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800a6958)
- IsDebuggerPresent (Address: 0x1800a6960)
- OutputDebugStringW (Address: 0x1800a6968)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800a6978)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800a6988)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800a69b8)
- RaiseException (Address: 0x1800a69a0)
- SetLastError (Address: 0x1800a6998)
- SetUnhandledExceptionFilter (Address: 0x1800a69a8)
- UnhandledExceptionFilter (Address: 0x1800a69b0)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1800a69e0)
- FindClose (Address: 0x1800a69d8)
- FindFirstFileW (Address: 0x1800a69c8)
- FindNextFileW (Address: 0x1800a69d0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800a69f0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800a6a08)
- HeapAlloc (Address: 0x1800a6a10)
- HeapFree (Address: 0x1800a6a18)
- HeapSize (Address: 0x1800a6a00)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800a6a28)
- LocalFree (Address: 0x1800a6a30)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalSize (Address: 0x1800a6a40)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800a6a50)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- UnregisterWait (Address: 0x1800a6a60)
- WTSGetActiveConsoleSessionId (Address: 0x1800a6a68)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1800a6a80)
- FreeLibrary (Address: 0x1800a6a98)
- GetModuleFileNameA (Address: 0x1800a6ab0)
- GetModuleHandleExW (Address: 0x1800a6a88)
- GetModuleHandleW (Address: 0x1800a6a90)
- GetProcAddress (Address: 0x1800a6a78)
- LoadLibraryExA (Address: 0x1800a6aa8)
- LoadStringW (Address: 0x1800a6aa0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800a6ac0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800a6ad0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessAsUserW (Address: 0x1800a6b00)
- GetCurrentProcess (Address: 0x1800a6af0)
- GetCurrentProcessId (Address: 0x1800a6ae0)
- GetCurrentThread (Address: 0x1800a6b20)
- GetCurrentThreadId (Address: 0x1800a6b28)
- GetPriorityClass (Address: 0x1800a6b08)
- OpenProcessToken (Address: 0x1800a6ae8)
- OpenThreadToken (Address: 0x1800a6b18)
- SetPriorityClass (Address: 0x1800a6b10)
- TerminateProcess (Address: 0x1800a6af8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1800a6b38)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800a6b50)
- QueryPerformanceFrequency (Address: 0x1800a6b48)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800a6b80)
- RegCreateKeyExW (Address: 0x1800a6bb8)
- RegDeleteKeyExW (Address: 0x1800a6ba0)
- RegDeleteTreeW (Address: 0x1800a6b78)
- RegDeleteValueW (Address: 0x1800a6b88)
- RegEnumKeyExW (Address: 0x1800a6b90)
- RegFlushKey (Address: 0x1800a6bc8)
- RegGetValueW (Address: 0x1800a6bd0)
- RegLoadKeyW (Address: 0x1800a6b60)
- RegOpenCurrentUser (Address: 0x1800a6b68)
- RegOpenKeyExW (Address: 0x1800a6bb0)
- RegQueryInfoKeyW (Address: 0x1800a6ba8)
- RegQueryValueExW (Address: 0x1800a6b98)
- RegSetValueExW (Address: 0x1800a6bc0)
- RegUnLoadKeyW (Address: 0x1800a6b70)
api-ms-win-core-registry-l1-1-1.dll
- RegDeleteKeyValueW (Address: 0x1800a6be0)
- RegSetKeyValueW (Address: 0x1800a6be8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800a6c00)
- RtlLookupFunctionEntry (Address: 0x1800a6c08)
- RtlVirtualUnwind (Address: 0x1800a6bf8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x1800a6c18)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpiW (Address: 0x1800a6c28)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800a6ce8)
- AcquireSRWLockShared (Address: 0x1800a6c50)
- CreateEventExW (Address: 0x1800a6cb8)
- CreateEventW (Address: 0x1800a6c68)
- CreateMutexExW (Address: 0x1800a6c70)
- CreateSemaphoreExW (Address: 0x1800a6cc8)
- DeleteCriticalSection (Address: 0x1800a6cc0)
- EnterCriticalSection (Address: 0x1800a6cb0)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800a6cd8)
- InitializeCriticalSectionEx (Address: 0x1800a6c90)
- InitializeSRWLock (Address: 0x1800a6c80)
- LeaveCriticalSection (Address: 0x1800a6c98)
- OpenEventW (Address: 0x1800a6cd0)
- OpenSemaphoreW (Address: 0x1800a6c40)
- ReleaseMutex (Address: 0x1800a6c78)
- ReleaseSemaphore (Address: 0x1800a6ca8)
- ReleaseSRWLockExclusive (Address: 0x1800a6c60)
- ReleaseSRWLockShared (Address: 0x1800a6c38)
- ResetEvent (Address: 0x1800a6ce0)
- SetEvent (Address: 0x1800a6c58)
- TryAcquireSRWLockExclusive (Address: 0x1800a6ca0)
- WaitForSingleObject (Address: 0x1800a6c88)
- WaitForSingleObjectEx (Address: 0x1800a6c48)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800a6d00)
- InitOnceComplete (Address: 0x1800a6cf8)
- Sleep (Address: 0x1800a6d08)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1800a6d38)
- GetSystemTime (Address: 0x1800a6d20)
- GetSystemTimeAsFileTime (Address: 0x1800a6d18)
- GetTickCount (Address: 0x1800a6d30)
- GetVersionExW (Address: 0x1800a6d28)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetSystemFirmwareTable (Address: 0x1800a6d48)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolCleanupGroup (Address: 0x1800a6d88)
- CloseThreadpoolCleanupGroupMembers (Address: 0x1800a6d68)
- CloseThreadpoolTimer (Address: 0x1800a6d58)
- CreateThreadpoolCleanupGroup (Address: 0x1800a6d78)
- CreateThreadpoolTimer (Address: 0x1800a6d70)
- SetThreadpoolTimer (Address: 0x1800a6d60)
- TrySubmitThreadpoolCallback (Address: 0x1800a6d90)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800a6d80)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1800a6da0)
- SystemTimeToFileTime (Address: 0x1800a6da8)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1800a6dc0)
- RoInitialize (Address: 0x1800a6dc8)
- RoUninitialize (Address: 0x1800a6db8)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateString (Address: 0x1800a6dd8)
- WindowsCreateStringReference (Address: 0x1800a6df0)
- WindowsDeleteString (Address: 0x1800a6de0)
- WindowsGetStringRawBuffer (Address: 0x1800a6de8)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800a6ec8)
- __CxxFrameHandler3 (Address: 0x1800a6ed0)
- __CxxFrameHandler4 (Address: 0x1800a6f58)
- __std_terminate (Address: 0x1800a6f50)
- _CxxThrowException (Address: 0x1800a6ed8)
- _o___std_exception_copy (Address: 0x1800a6f48)
- _o___std_exception_destroy (Address: 0x1800a6f40)
- _o___std_type_info_destroy_list (Address: 0x1800a6f38)
- _o___stdio_common_vsnprintf_s (Address: 0x1800a6f30)
- _o___stdio_common_vswprintf (Address: 0x1800a6f28)
- _o__callnewh (Address: 0x1800a6f20)
- _o__cexit (Address: 0x1800a6f18)
- _o__configure_narrow_argv (Address: 0x1800a6f10)
- _o__crt_atexit (Address: 0x1800a6f08)
- _o__difftime64 (Address: 0x1800a6ef8)
- _o__errno (Address: 0x1800a6ef0)
- _o__execute_onexit_table (Address: 0x1800a6ee8)
- _o__get_errno (Address: 0x1800a6ee0)
- _o__initialize_narrow_environment (Address: 0x1800a6e00)
- _o__initialize_onexit_table (Address: 0x1800a6e08)
- _o__invalid_parameter_noinfo (Address: 0x1800a6e10)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1800a6e18)
- _o__purecall (Address: 0x1800a6e20)
- _o__register_onexit_function (Address: 0x1800a6e28)
- _o__seh_filter_dll (Address: 0x1800a6e30)
- _o__set_errno (Address: 0x1800a6e38)
- _o__wcserror (Address: 0x1800a6e40)
- _o__wcsicmp (Address: 0x1800a6e48)
- _o_free (Address: 0x1800a6e58)
- _o_iswascii (Address: 0x1800a6e60)
- _o_iswcntrl (Address: 0x1800a6e68)
- _o_iswdigit (Address: 0x1800a6e70)
- _o_iswlower (Address: 0x1800a6e78)
- _o_iswpunct (Address: 0x1800a6e80)
- _o_iswspace (Address: 0x1800a6e88)
- _o_iswupper (Address: 0x1800a6e90)
- _o_malloc (Address: 0x1800a6e98)
- _o_terminate (Address: 0x1800a6ea0)
- _o_toupper (Address: 0x1800a6ea8)
- _o_wcsncpy_s (Address: 0x1800a6eb0)
- _o_wcstoull (Address: 0x1800a6eb8)
- _o_wmemcpy_s (Address: 0x1800a6ec0)
- memcmp (Address: 0x1800a6f60)
- memcpy (Address: 0x1800a6f68)
- memmove (Address: 0x1800a6e50)
- wcsstr (Address: 0x1800a6f00)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800a6f80)
- _initterm_e (Address: 0x1800a6f78)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1800a6f90)
- wcscmp (Address: 0x1800a6fa0)
- wcsnlen (Address: 0x1800a6f98)
api-ms-win-crt-time-l1-1-0.dll
- _time64 (Address: 0x1800a6fb0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800a6fe0)
- EventProviderEnabled (Address: 0x1800a6fd8)
- EventRegister (Address: 0x1800a6fc8)
- EventSetInformation (Address: 0x1800a6fe8)
- EventUnregister (Address: 0x1800a6fd0)
- EventWriteTransfer (Address: 0x1800a6fc0)
api-ms-win-power-setting-l1-1-0.dll
- PowerSettingRegisterNotification (Address: 0x1800a6ff8)
- PowerSettingUnregisterNotification (Address: 0x1800a7000)
api-ms-win-security-accesshlpr-l1-1-0.dll
- FreeTransientObjectSecurityDescriptor (Address: 0x1800a7010)
- QueryTransientObjectSecurityDescriptor (Address: 0x1800a7018)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1800a7070)
- AdjustTokenPrivileges (Address: 0x1800a7028)
- AllocateAndInitializeSid (Address: 0x1800a7060)
- CopySid (Address: 0x1800a7080)
- DuplicateTokenEx (Address: 0x1800a7088)
- EqualSid (Address: 0x1800a7078)
- FreeSid (Address: 0x1800a7068)
- GetLengthSid (Address: 0x1800a7048)
- GetTokenInformation (Address: 0x1800a7040)
- ImpersonateLoggedOnUser (Address: 0x1800a7038)
- IsValidSid (Address: 0x1800a7050)
- IsWellKnownSid (Address: 0x1800a7058)
- MapGenericMask (Address: 0x1800a7030)
- RevertToSelf (Address: 0x1800a7090)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenCapability (Address: 0x1800a70a8)
- CheckTokenMembershipEx (Address: 0x1800a70a0)
api-ms-win-security-credentials-l1-1-0.dll
- CredProtectW (Address: 0x1800a70b8)
api-ms-win-security-lsalookup-l1-1-0.dll
- LookupAccountNameLocalW (Address: 0x1800a70c8)
- LookupAccountSidLocalW (Address: 0x1800a70d0)
api-ms-win-security-lsalookup-l1-1-2.dll
- LsaLookupUserAccountType (Address: 0x1800a70e0)
api-ms-win-security-lsalookup-l2-1-0.dll
- LookupPrivilegeValueW (Address: 0x1800a70f0)
api-ms-win-security-lsapolicy-l1-1-0.dll
- LsaClose (Address: 0x1800a7120)
- LsaFreeMemory (Address: 0x1800a7110)
- LsaLookupSids2 (Address: 0x1800a7100)
- LsaOpenPolicy (Address: 0x1800a7108)
- LsaQueryInformationPolicy (Address: 0x1800a7118)
api-ms-win-security-provider-l1-1-0.dll
- GetNamedSecurityInfoW (Address: 0x1800a7130)
- SetEntriesInAclW (Address: 0x1800a7138)
- SetNamedSecurityInfoW (Address: 0x1800a7140)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1800a7150)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800a7158)
- ConvertStringSidToSidW (Address: 0x1800a7160)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x1800a7178)
- SetServiceStatus (Address: 0x1800a7170)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1800a7188)
- OpenSCManagerW (Address: 0x1800a7198)
- OpenServiceW (Address: 0x1800a7190)
api-ms-win-service-management-l2-1-0.dll
- ChangeServiceConfigW (Address: 0x1800a71a8)
api-ms-win-service-winsvc-l1-1-0.dll
- ControlService (Address: 0x1800a71b8)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1800a71c8)
AUTHZ.dll
- AuthzAccessCheck (Address: 0x1800a6708)
- AuthzFreeContext (Address: 0x1800a6720)
- AuthzFreeResourceManager (Address: 0x1800a6700)
- AuthzInitializeContextFromSid (Address: 0x1800a6710)
- AuthzInitializeResourceManager (Address: 0x1800a6718)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x1800a71e0)
- BCryptCreateHash (Address: 0x1800a7210)
- BCryptDecrypt (Address: 0x1800a7200)
- BCryptDestroyHash (Address: 0x1800a71e8)
- BCryptDestroyKey (Address: 0x1800a7248)
- BCryptEncrypt (Address: 0x1800a71f0)
- BCryptExportKey (Address: 0x1800a7250)
- BCryptFinalizeKeyPair (Address: 0x1800a7228)
- BCryptFinishHash (Address: 0x1800a7238)
- BCryptGenerateKeyPair (Address: 0x1800a7218)
- BCryptGenerateSymmetricKey (Address: 0x1800a7208)
- BCryptGenRandom (Address: 0x1800a7240)
- BCryptGetProperty (Address: 0x1800a71d8)
- BCryptHashData (Address: 0x1800a7220)
- BCryptImportKey (Address: 0x1800a7230)
- BCryptImportKeyPair (Address: 0x1800a71f8)
- BCryptOpenAlgorithmProvider (Address: 0x1800a7258)
- BCryptSetProperty (Address: 0x1800a7260)
CRYPT32.dll
- CertCloseStore (Address: 0x1800a6740)
- CertCreateCertificateContext (Address: 0x1800a6758)
- CertDuplicateCertificateContext (Address: 0x1800a6770)
- CertFindCertificateInStore (Address: 0x1800a6798)
- CertFindExtension (Address: 0x1800a6768)
- CertFreeCertificateContext (Address: 0x1800a6778)
- CertGetCertificateContextProperty (Address: 0x1800a6788)
- CertOpenStore (Address: 0x1800a6748)
- CertVerifySubjectCertificateContext (Address: 0x1800a6730)
- CryptBinaryToStringW (Address: 0x1800a6790)
- CryptDecodeObjectEx (Address: 0x1800a6760)
- CryptImportPublicKeyInfoEx2 (Address: 0x1800a6780)
- CryptProtectData (Address: 0x1800a6738)
- CryptUnprotectData (Address: 0x1800a6750)
DEVOBJ.dll
- DevObjCreateDeviceInfoList (Address: 0x1800a67d0)
- DevObjDestroyDeviceInfoList (Address: 0x1800a67c8)
- DevObjEnumDeviceInfo (Address: 0x1800a67c0)
- DevObjEnumDeviceInterfaces (Address: 0x1800a67b8)
- DevObjGetClassDevs (Address: 0x1800a67a8)
- DevObjOpenDevRegKey (Address: 0x1800a67b0)
msvcp_win.dll
- _Mtx_destroy_in_situ (Address: 0x1800a7288)
- _Mtx_init_in_situ (Address: 0x1800a7290)
- _Mtx_lock (Address: 0x1800a7280)
- _Mtx_unlock (Address: 0x1800a7278)
- ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z (Address: 0x1800a7310)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x1800a72a0)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x1800a72f8)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x1800a72a8)
- ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z (Address: 0x1800a7308)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1800a7270)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800a7298)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1800a7330)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800a7340)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800a7338)
- ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z (Address: 0x1800a72b8)
- ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ (Address: 0x1800a72b0)
- ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x1800a7328)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x1800a7318)
- ?do_always_noconv@?$codecvt@GDU_Mbstatet@@@std@@MEBA_NXZ (Address: 0x1800a72f0)
- ?do_encoding@?$codecvt@GDU_Mbstatet@@@std@@MEBAHXZ (Address: 0x1800a72e0)
- ?do_in@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z (Address: 0x1800a72d8)
- ?do_length@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z (Address: 0x1800a72c0)
- ?do_max_length@?$codecvt@GDU_Mbstatet@@@std@@MEBAHXZ (Address: 0x1800a72e8)
- ?do_out@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z (Address: 0x1800a72d0)
- ?do_unshift@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x1800a72c8)
- ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1800a7320)
- ?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z (Address: 0x1800a7300)
ncrypt.dll
- NCryptCreatePersistedKey (Address: 0x1800a7358)
- NCryptDecrypt (Address: 0x1800a7378)
- NCryptDeleteKey (Address: 0x1800a7370)
- NCryptEncrypt (Address: 0x1800a7350)
- NCryptExportKey (Address: 0x1800a7368)
- NCryptFinalizeKey (Address: 0x1800a7390)
- NCryptFreeBuffer (Address: 0x1800a7398)
- NCryptFreeObject (Address: 0x1800a73a0)
- NCryptGetProperty (Address: 0x1800a7388)
- NCryptImportKey (Address: 0x1800a73b0)
- NCryptOpenKey (Address: 0x1800a7380)
- NCryptOpenStorageProvider (Address: 0x1800a73b8)
- NCryptSetProperty (Address: 0x1800a7360)
- NCryptVerifyClaim (Address: 0x1800a73a8)
netutils.dll
- NetApiBufferFree (Address: 0x1800a73c8)
ntdll.dll
- NtQueryInformationToken (Address: 0x1800a7428)
- NtQuerySystemInformation (Address: 0x1800a73d8)
- NtQueryWnfStateData (Address: 0x1800a73e0)
- RtlDeriveCapabilitySidsFromName (Address: 0x1800a7418)
- RtlFreeAnsiString (Address: 0x1800a73f8)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1800a7458)
- RtlGetPersistedStateLocation (Address: 0x1800a7410)
- RtlHashUnicodeString (Address: 0x1800a7450)
- RtlInitAnsiString (Address: 0x1800a7438)
- RtlInitUnicodeString (Address: 0x1800a7440)
- RtlIsMultiSessionSku (Address: 0x1800a7400)
- RtlNtStatusToDosError (Address: 0x1800a7408)
- RtlPublishWnfStateData (Address: 0x1800a73f0)
- RtlQueryPackageIdentity (Address: 0x1800a7448)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800a7420)
- RtlUnicodeStringToAnsiString (Address: 0x1800a7430)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800a73e8)
profapi.dll
- (Address: 0x1800a7468)
RPCRT4.dll
- I_RpcBindingInqLocalClientPID (Address: 0x1800a67f0)
- I_RpcExceptionFilter (Address: 0x1800a6860)
- Ndr64AsyncServerCallAll (Address: 0x1800a6898)
- NdrAsyncServerCall (Address: 0x1800a68a8)
- NdrClientCall3 (Address: 0x1800a6858)
- NdrServerCall2 (Address: 0x1800a6878)
- NdrServerCallAll (Address: 0x1800a68a0)
- RpcAsyncAbortCall (Address: 0x1800a68b0)
- RpcAsyncCompleteCall (Address: 0x1800a6838)
- RpcBindingBind (Address: 0x1800a67e0)
- RpcBindingCreateW (Address: 0x1800a67e8)
- RpcBindingFree (Address: 0x1800a6828)
- RpcExceptionFilter (Address: 0x1800a6868)
- RpcImpersonateClient (Address: 0x1800a6800)
- RpcRaiseException (Address: 0x1800a6848)
- RpcRevertToSelf (Address: 0x1800a6830)
- RpcRevertToSelfEx (Address: 0x1800a67f8)
- RpcServerInterfaceGroupActivate (Address: 0x1800a6818)
- RpcServerInterfaceGroupClose (Address: 0x1800a6808)
- RpcServerInterfaceGroupCreateW (Address: 0x1800a6820)
- RpcServerInterfaceGroupDeactivate (Address: 0x1800a6810)
- RpcServerTestCancel (Address: 0x1800a6840)
- RpcStringFreeW (Address: 0x1800a6890)
- UuidEqual (Address: 0x1800a6870)
- UuidFromStringW (Address: 0x1800a6880)
- UuidIsNil (Address: 0x1800a6850)
- UuidToStringW (Address: 0x1800a6888)
SspiCli.dll
- LsaConnectUntrusted (Address: 0x1800a68d8)
- LsaDeregisterLogonProcess (Address: 0x1800a68c0)
- LsaFreeReturnBuffer (Address: 0x1800a68d0)
- LsaLogonUser (Address: 0x1800a68e0)
- LsaLookupAuthenticationPackage (Address: 0x1800a68c8)