NtlmShared.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Download
Description
NTLM Shared Functionality
Authors
© Microsoft Corporation. All rights reserved.
File size
80.3 KB
Uploaded
2025-12-01 07:35
Views
104
SHA-256
ee52e3a4cedfc8b839e4d63f22bb9e47

Exported functions 34

MsvpCachePasswordsToCredential #1 · 0x90a0
MsvpCalculateNtlm2Challenge #2 · 0x72c0
MsvpCalculateNtlm2ChallengeNew #3 · 0x73d0
MsvpCalculateNtlm2SessionKeys #4 · 0x7580
MsvpCalculateNtlm2SessionKeysNew #5 · 0x7680
MsvpCalculateNtlm3Owf #6 · 0x7830
MsvpCompareCredentials #7 · 0x8f30
MsvpComputeSaltedHashedPassword #8 · 0x8960
MsvpCredentialToCachePasswords #9 · 0x9060
MsvpDecryptDpapiMasterKey #10 · 0x9100
MsvpDeriveSecureCredKey #11 · 0x8cd0
MsvpGMSACred #12 · 0xa6b0
MsvpLm20GetNtlm3ChallengeResponse #13 · 0x86b0
MsvpLm3Response #14 · 0x7b50
MsvpLm3ResponseNew #15 · 0x7d80
MsvpLm3ValidateResponse #16 · 0xaf30
MsvpLm3ValidateResponseNew #17 · 0xb000
MsvpMakeSecretPasswordNT5 #18 · 0x8af0
MsvpNtlm3Response #19 · 0x8100
MsvpNtlm3ResponseNew #20 · 0x8330
MsvpNtlm3ValidateResponse #21 · 0xb130
MsvpNtlm3ValidateResponseNew #22 · 0xb360
MsvpPasswordValidate #23 · 0xb6d0
MsvpPutClearOwfsInPrimaryCredential #24 · 0x8b90
MsvpUpdateSharedConfiguration #25 · 0xaa80
MsvpValidateSupplementalCreds #26 · 0xbe70
MsvpValidateSupplementalCredsBuffer #27 · 0xbe90
NtLmAlterRtlEqualUnicodeString #28 · 0xaaf0
NtlmSharedAllocate #29 · 0xaa00
NtlmSharedAllocatePrivateHeap #30 · 0xaa40
NtlmSharedCleanup #31 · 0xa980
NtlmSharedFree #32 · 0xaa20
NtlmSharedFreePrivateHeap #33 · 0xaa60
NtlmSharedInit #34 · 0xa6c0

Imported DLLs & functions 98

api-ms-win-core-crt-l1-1-0.dll 7
__C_specific_handler 0x18000e1a0
_vsnwprintf_s 0x18000e180
memcmp 0x18000e198
memcpy 0x18000e190
memcpy_s 0x18000e178
memmove_s 0x18000e188
memset 0x18000e1a8
api-ms-win-core-crt-l2-1-0.dll 5
__dllonexit3 0x18000e1b8
_initterm 0x18000e1d8
_initterm_e 0x18000e1d0
_onexit 0x18000e1c0
_purecall 0x18000e1c8
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18000e1f0
IsDebuggerPresent 0x18000e1e8
OutputDebugStringW 0x18000e1f8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18000e208
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18000e218
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18000e238
SetLastError 0x18000e228
SetUnhandledExceptionFilter 0x18000e240
UnhandledExceptionFilter 0x18000e230
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000e250
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18000e268
HeapAlloc 0x18000e260
HeapFree 0x18000e270
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18000e280
LocalFree 0x18000e288
api-ms-win-core-libraryloader-l1-2-0.dll 6
DisableThreadLibraryCalls 0x18000e2c0
GetModuleFileNameA 0x18000e2b8
GetModuleFileNameW 0x18000e2a8
GetModuleHandleExW 0x18000e2a0
GetModuleHandleW 0x18000e2b0
GetProcAddress 0x18000e298
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18000e2d0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18000e2f8
GetCurrentProcessId 0x18000e2f0
GetCurrentThreadId 0x18000e2e8
TerminateProcess 0x18000e2e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000e308
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18000e350
AcquireSRWLockShared 0x18000e378
CreateMutexExW 0x18000e370
CreateSemaphoreExW 0x18000e368
DeleteCriticalSection 0x18000e380
EnterCriticalSection 0x18000e358
InitializeCriticalSection 0x18000e338
InitializeCriticalSectionEx 0x18000e388
LeaveCriticalSection 0x18000e328
OpenSemaphoreW 0x18000e320
ReleaseMutex 0x18000e330
ReleaseSemaphore 0x18000e348
ReleaseSRWLockExclusive 0x18000e360
ReleaseSRWLockShared 0x18000e340
WaitForSingleObject 0x18000e390
WaitForSingleObjectEx 0x18000e318
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x18000e3a0
GetTickCount 0x18000e3a8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18000e3c8
CreateThreadpoolTimer 0x18000e3b8
SetThreadpoolTimer 0x18000e3c0
WaitForThreadpoolTimerCallbacks 0x18000e3d0
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x18000e3e0
EncodePointer 0x18000e3e8
bcrypt.dll 12
BCryptCloseAlgorithmProvider 0x18000e430
BCryptCreateHash 0x18000e400
BCryptDecrypt 0x18000e448
BCryptDeriveKeyPBKDF2 0x18000e450
BCryptDestroyHash 0x18000e440
BCryptDestroyKey 0x18000e418
BCryptFinishHash 0x18000e428
BCryptGenerateSymmetricKey 0x18000e3f8
BCryptGetProperty 0x18000e438
BCryptHash 0x18000e420
BCryptHashData 0x18000e408
BCryptOpenAlgorithmProvider 0x18000e410
cryptdll.dll 1
PBKDF2 0x18000e460
ntdll.dll 22
EtwEventRegister 0x18000e490
EtwEventSetInformation 0x18000e4b0
EtwEventUnregister 0x18000e488
EtwGetTraceEnableFlags 0x18000e4b8
EtwGetTraceEnableLevel 0x18000e4e0
EtwGetTraceLoggerHandle 0x18000e4d0
EtwRegisterTraceGuidsW 0x18000e4e8
EtwTraceMessage 0x18000e470
EtwUnregisterTraceGuids 0x18000e480
NtQuerySystemTime 0x18000e510
RtlCaptureContext 0x18000e4a8
RtlCompareMemory 0x18000e4c0
RtlConvertSidToUnicodeString 0x18000e508
RtlDowncaseUnicodeString 0x18000e4f0
RtlEqualUnicodeString 0x18000e478
RtlFreeUnicodeString 0x18000e4f8
RtlInitUnicodeString 0x18000e4c8
RtlLookupFunctionEntry 0x18000e4a0
RtlNtStatusToDosError 0x18000e4d8
RtlUpcaseUnicodeString 0x18000e500
RtlUpperChar 0x18000e518
RtlVirtualUnwind 0x18000e498