ntdsapi.dll

Description: Active Directory Domain Services API

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 46e05d42cac9128752865b0d417ae736

File Size: 150.5 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 9

Exported Functions

DsAddCloneDCW (Ordinal: 1, Address: 0xfd80)
DsAddSidHistoryA (Ordinal: 2, Address: 0x7240)
DsAddSidHistoryW (Ordinal: 3, Address: 0x7450)
DsBindA (Ordinal: 4, Address: 0x7d30)
DsBindByInstanceA (Ordinal: 5, Address: 0x7f70)
DsBindByInstanceW (Ordinal: 6, Address: 0x13f0)
DsBindToISTGA (Ordinal: 7, Address: 0x8110)
DsBindToISTGW (Ordinal: 8, Address: 0x81a0)
DsBindW (Ordinal: 9, Address: 0x7d60)
DsBindWithCredA (Ordinal: 10, Address: 0x7d90)
DsBindWithCredW (Ordinal: 11, Address: 0x1310)
DsBindWithSpnA (Ordinal: 12, Address: 0x7dc0)
DsBindWithSpnExA (Ordinal: 13, Address: 0x85f0)
DsBindWithSpnExW (Ordinal: 14, Address: 0x13020)
DsBindWithSpnExWWorker (Ordinal: 15, Address: 0x13c0)
DsBindWithSpnW (Ordinal: 16, Address: 0x7df0)
DsBindingSetTimeout (Ordinal: 17, Address: 0x8740)
DsClientMakeSpnForTargetServerA (Ordinal: 18, Address: 0x12580)
DsClientMakeSpnForTargetServerW (Ordinal: 19, Address: 0x12700)
DsCrackNamesA (Ordinal: 20, Address: 0x8b40)
DsCrackNamesW (Ordinal: 21, Address: 0x12f0)
DsCrackNamesWWorker (Ordinal: 22, Address: 0x20e0)
DsCrackSpn2A (Ordinal: 23, Address: 0x22fca)
DsCrackSpn2W (Ordinal: 24, Address: 0x22fec)
DsCrackSpn3W (Ordinal: 25, Address: 0x2300e)
DsCrackSpn4W (Ordinal: 26, Address: 0x23030)
DsCrackSpnA (Ordinal: 27, Address: 0x23051)
DsCrackSpnW (Ordinal: 28, Address: 0x23071)
DsCrackUnquotedMangledRdnA (Ordinal: 29, Address: 0x230a0)
DsCrackUnquotedMangledRdnW (Ordinal: 30, Address: 0x230de)
DsFinishDemotionW (Ordinal: 31, Address: 0xf450)
DsFreeCloneDcResult (Ordinal: 32, Address: 0xff30)
DsFreeDomainControllerInfoA (Ordinal: 33, Address: 0x9580)
DsFreeDomainControllerInfoW (Ordinal: 34, Address: 0x9580)
DsFreeDomainControllerInfoWWorker (Ordinal: 35, Address: 0x95a0)
DsFreeNameResultA (Ordinal: 36, Address: 0x1340)
DsFreeNameResultW (Ordinal: 37, Address: 0x1340)
DsFreeNameResultWWorker (Ordinal: 38, Address: 0x1e80)
DsFreeNgcKey (Ordinal: 39, Address: 0x131c0)
DsFreeNgcKeyWorker (Ordinal: 40, Address: 0xf430)
DsFreePasswordCredentials (Ordinal: 41, Address: 0x13a0)
DsFreePasswordCredentialsWorker (Ordinal: 42, Address: 0x1250)
DsFreeSchemaGuidMapA (Ordinal: 43, Address: 0x11930)
DsFreeSchemaGuidMapW (Ordinal: 44, Address: 0x11940)
DsFreeSpnArrayA (Ordinal: 45, Address: 0x12960)
DsFreeSpnArrayW (Ordinal: 46, Address: 0x12970)
DsGetBindAddrW (Ordinal: 47, Address: 0x87b0)
DsGetBindAnnotW (Ordinal: 48, Address: 0x87e0)
DsGetBindInstGuid (Ordinal: 49, Address: 0x8800)
DsGetDomainControllerInfoA (Ordinal: 50, Address: 0x97c0)
DsGetDomainControllerInfoW (Ordinal: 51, Address: 0x13040)
DsGetDomainControllerInfoWWorker (Ordinal: 52, Address: 0x9a50)
DsGetRdnW (Ordinal: 53, Address: 0x232f3)
DsGetSpnA (Ordinal: 54, Address: 0x129e0)
DsGetSpnW (Ordinal: 55, Address: 0x3ca0)
DsInheritSecurityIdentityA (Ordinal: 56, Address: 0x7a60)
DsInheritSecurityIdentityW (Ordinal: 57, Address: 0x7b50)
DsInitDemotionW (Ordinal: 58, Address: 0xf5c0)
DsIsMangledDnA (Ordinal: 59, Address: 0x2336e)
DsIsMangledDnW (Ordinal: 60, Address: 0x23394)
DsIsMangledRdnValueA (Ordinal: 61, Address: 0x233c0)
DsIsMangledRdnValueW (Ordinal: 62, Address: 0x233f2)
DsListDomainsInSiteA (Ordinal: 63, Address: 0x11e10)
DsListDomainsInSiteW (Ordinal: 64, Address: 0x11e80)
DsListInfoForServerA (Ordinal: 65, Address: 0x11ef0)
DsListInfoForServerW (Ordinal: 66, Address: 0x11f30)
DsListRolesA (Ordinal: 67, Address: 0x11f80)
DsListRolesW (Ordinal: 68, Address: 0x11fd0)
DsListServersForDomainInSiteA (Ordinal: 69, Address: 0x12020)
DsListServersForDomainInSiteW (Ordinal: 70, Address: 0x12090)
DsListServersInSiteA (Ordinal: 71, Address: 0x12100)
DsListServersInSiteW (Ordinal: 72, Address: 0x12140)
DsListSitesA (Ordinal: 73, Address: 0x12190)
DsListSitesW (Ordinal: 74, Address: 0x121e0)
DsLogEntry (Ordinal: 75, Address: 0x13060)
DsMakePasswordCredentialsA (Ordinal: 76, Address: 0x7e20)
DsMakePasswordCredentialsW (Ordinal: 77, Address: 0x1380)
DsMakePasswordCredentialsWWorker (Ordinal: 78, Address: 0x1010)
DsMakeSpnA (Ordinal: 79, Address: 0x2356a)
DsMakeSpnW (Ordinal: 80, Address: 0x23588)
DsMapSchemaGuidsA (Ordinal: 81, Address: 0x11980)
DsMapSchemaGuidsW (Ordinal: 82, Address: 0x11ce0)
DsQuerySitesByCostA (Ordinal: 83, Address: 0x12230)
DsQuerySitesByCostW (Ordinal: 84, Address: 0x123f0)
DsQuerySitesFree (Ordinal: 85, Address: 0xff30)
DsQuoteRdnValueA (Ordinal: 86, Address: 0x23609)
DsQuoteRdnValueW (Ordinal: 87, Address: 0x23633)
DsReadNgcKeyA (Ordinal: 88, Address: 0x13220)
DsReadNgcKeyW (Ordinal: 89, Address: 0x131e0)
DsReadNgcKeyWWorker (Ordinal: 90, Address: 0x132c0)
DsRemoveDsDomainA (Ordinal: 91, Address: 0xf6a0)
DsRemoveDsDomainW (Ordinal: 92, Address: 0xf7b0)
DsRemoveDsServerA (Ordinal: 93, Address: 0xf8f0)
DsRemoveDsServerW (Ordinal: 94, Address: 0xfaa0)
DsReplicaAddA (Ordinal: 95, Address: 0xff60)
DsReplicaAddW (Ordinal: 96, Address: 0x100b0)
DsReplicaConsistencyCheck (Ordinal: 97, Address: 0x104b0)
DsReplicaDelA (Ordinal: 98, Address: 0x10580)
DsReplicaDelW (Ordinal: 99, Address: 0x10650)
DsReplicaDemotionW (Ordinal: 100, Address: 0xfc10)
DsReplicaFreeInfo (Ordinal: 101, Address: 0x107d0)
DsReplicaGetInfo2W (Ordinal: 102, Address: 0x10ae0)
DsReplicaGetInfoW (Ordinal: 103, Address: 0x10db0)
DsReplicaModifyA (Ordinal: 104, Address: 0x10df0)
DsReplicaModifyW (Ordinal: 105, Address: 0x10f20)
DsReplicaSyncA (Ordinal: 106, Address: 0x11240)
DsReplicaSyncAllA (Ordinal: 107, Address: 0xe670)
DsReplicaSyncAllW (Ordinal: 108, Address: 0xed20)
DsReplicaSyncW (Ordinal: 109, Address: 0x112c0)
DsReplicaUpdateRefsA (Ordinal: 110, Address: 0x11430)
DsReplicaUpdateRefsW (Ordinal: 111, Address: 0x11500)
DsReplicaVerifyObjectsA (Ordinal: 112, Address: 0x116f0)
DsReplicaVerifyObjectsW (Ordinal: 113, Address: 0x11770)
DsServerRegisterSpnA (Ordinal: 114, Address: 0x12c60)
DsServerRegisterSpnW (Ordinal: 115, Address: 0x39a0)
DsUnBindA (Ordinal: 116, Address: 0x1360)
DsUnBindW (Ordinal: 117, Address: 0x1360)
DsUnBindWWorker (Ordinal: 118, Address: 0x1f90)
DsUnquoteRdnValueA (Ordinal: 119, Address: 0x2387f)
DsUnquoteRdnValueW (Ordinal: 120, Address: 0x238ad)
DsWriteAccountSpnA (Ordinal: 121, Address: 0x12d10)
DsWriteAccountSpnW (Ordinal: 122, Address: 0x4230)
DsWriteNgcKeyA (Ordinal: 123, Address: 0x133e0)
DsWriteNgcKeyW (Ordinal: 124, Address: 0x13200)
DsWriteNgcKeyWWorker (Ordinal: 125, Address: 0x13480)
DsaopBind (Ordinal: 126, Address: 0xeeb0)
DsaopBindWithCred (Ordinal: 127, Address: 0xeee0)
DsaopBindWithSpn (Ordinal: 128, Address: 0xef10)
DsaopExecuteScript (Ordinal: 129, Address: 0xf280)
DsaopPrepareScript (Ordinal: 130, Address: 0xf330)
DsaopUnBind (Ordinal: 131, Address: 0xf3d0)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001c430)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001c440)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001c468)
RaiseException (Address: 0x18001c458)
SetUnhandledExceptionFilter (Address: 0x18001c450)
UnhandledExceptionFilter (Address: 0x18001c460)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001c478)

api-ms-win-core-heap-l1-1-0.dll

HeapAlloc (Address: 0x18001c488)
HeapCreate (Address: 0x18001c4a0)
HeapDestroy (Address: 0x18001c490)
HeapFree (Address: 0x18001c498)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001c4c0)
LocalFree (Address: 0x18001c4b8)
LocalReAlloc (Address: 0x18001c4b0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x18001c4d0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001c4e8)
GetModuleHandleExW (Address: 0x18001c4e0)

api-ms-win-core-localization-l1-2-0.dll

GetACP (Address: 0x18001c4f8)
GetUserDefaultLCID (Address: 0x18001c500)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18001c520)
GetCurrentProcessId (Address: 0x18001c510)
GetCurrentThreadId (Address: 0x18001c528)
TerminateProcess (Address: 0x18001c518)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001c538)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001c558)
RtlLookupFunctionEntry (Address: 0x18001c550)
RtlVirtualUnwind (Address: 0x18001c548)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x18001c578)
MultiByteToWideChar (Address: 0x18001c568)
WideCharToMultiByte (Address: 0x18001c570)

api-ms-win-core-synch-l1-1-0.dll

CreateEventA (Address: 0x18001c590)
ResetEvent (Address: 0x18001c5a8)
SetEvent (Address: 0x18001c5a0)
WaitForMultipleObjectsEx (Address: 0x18001c598)
WaitForSingleObject (Address: 0x18001c588)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18001c5c0)
Sleep (Address: 0x18001c5b8)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18001c5d0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18001c5f0)
GetSystemTimeAsFileTime (Address: 0x18001c5e0)
GetTickCount (Address: 0x18001c5e8)

api-ms-win-security-activedirectoryclient-l1-1-0.dll

DsBindWithSpnExW (Address: 0x18001c610)
DsCrackNamesW (Address: 0x18001c600)
DsFreeDomainControllerInfoW (Address: 0x18001c620)
DsFreeNameResultW (Address: 0x18001c608)
DsFreePasswordCredentials (Address: 0x18001c628)
DsGetDomainControllerInfoW (Address: 0x18001c618)
DsMakePasswordCredentialsW (Address: 0x18001c630)
DsUnBindW (Address: 0x18001c638)

api-ms-win-security-activedirectoryclient-l1-1-1.dll

DsFreeNgcKey (Address: 0x18001c648)
DsReadNgcKeyW (Address: 0x18001c650)
DsWriteNgcKeyW (Address: 0x18001c658)

msvcrt.dll

__C_specific_handler (Address: 0x18001c670)
_amsg_exit (Address: 0x18001c678)
_beginthreadex (Address: 0x18001c668)
_endthreadex (Address: 0x18001c6c8)
_initterm (Address: 0x18001c6d0)
_itow (Address: 0x18001c700)
_vsnprintf (Address: 0x18001c6e8)
_vsnwprintf (Address: 0x18001c698)
_wcsicmp (Address: 0x18001c6a8)
_wcsnicmp (Address: 0x18001c6a0)
_XcptFilter (Address: 0x18001c6f8)
free (Address: 0x18001c6f0)
iswdigit (Address: 0x18001c710)
iswxdigit (Address: 0x18001c708)
malloc (Address: 0x18001c680)
memchr (Address: 0x18001c6d8)
memcpy (Address: 0x18001c6e0)
memset (Address: 0x18001c728)
strncmp (Address: 0x18001c688)
towlower (Address: 0x18001c718)
wcschr (Address: 0x18001c6b0)
wcsncmp (Address: 0x18001c6c0)
wcsstr (Address: 0x18001c690)
wcstol (Address: 0x18001c6b8)
wcstoul (Address: 0x18001c720)

ntdll.dll

DbgPrint (Address: 0x18001c760)
RtlIpv4AddressToStringExW (Address: 0x18001c740)
RtlIpv4StringToAddressExW (Address: 0x18001c750)
RtlIpv6AddressToStringExW (Address: 0x18001c758)
RtlIpv6StringToAddressExW (Address: 0x18001c748)
RtlNtStatusToDosError (Address: 0x18001c738)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x18001c3d0)
I_RpcGetExtendedError (Address: 0x18001c3c8)
Ndr64AsyncClientCall (Address: 0x18001c350)
NDRCContextBinding (Address: 0x18001c380)
NdrClientCall3 (Address: 0x18001c3d8)
RpcBindingFree (Address: 0x18001c358)
RpcBindingFromStringBindingW (Address: 0x18001c3a0)
RpcBindingInqAuthInfoA (Address: 0x18001c338)
RpcBindingSetAuthInfoExW (Address: 0x18001c340)
RpcBindingSetOption (Address: 0x18001c370)
RpcBindingToStringBindingW (Address: 0x18001c3a8)
RpcEpResolveBinding (Address: 0x18001c360)
RpcIfInqId (Address: 0x18001c3b0)
RpcMgmtEpEltInqBegin (Address: 0x18001c3c0)
RpcMgmtEpEltInqDone (Address: 0x18001c3b8)
RpcMgmtEpEltInqNextW (Address: 0x18001c390)
RpcSsDestroyClientContext (Address: 0x18001c378)
RpcSsGetContextBinding (Address: 0x18001c348)
RpcStringBindingComposeW (Address: 0x18001c398)
RpcStringBindingParseW (Address: 0x18001c388)
RpcStringFreeW (Address: 0x18001c368)

WS2_32.dll

FreeAddrInfoW (Address: 0x18001c420)
GetAddrInfoW (Address: 0x18001c3f8)
GetNameInfoW (Address: 0x18001c418)
ntohs (Address: 0x18001c3e8)
WSALookupServiceBeginW (Address: 0x18001c410)
WSALookupServiceEnd (Address: 0x18001c400)
WSALookupServiceNextW (Address: 0x18001c3f0)
WSAStartup (Address: 0x18001c408)