aadauthhelper.dll

Description: Microsoft® AAD Auth Helper

Version: 10.0.19041.6216

Architecture: 64-bit

Operating System: Windows NT

SHA256: c4264495bbf61b965645589d5070cf26

File Size: 460.5 KB

Uploaded At: Dec. 1, 2025, 7:21 a.m.

Views: 17

Exported Functions

CloseFidoAuthenticationSession (Ordinal: 1, Address: 0x3500)
CreateAuthBuffer (Ordinal: 2, Address: 0x3280)
CreateResourceAccountAuthBuffer (Ordinal: 3, Address: 0x32c0)
CreateTokenAuthBuffer (Ordinal: 4, Address: 0x3290)
CreateTokenAuthBufferEx (Ordinal: 5, Address: 0x32b0)
GetFidoAuthenticationSessionStatus (Ordinal: 6, Address: 0x33f0)
GetSerializedAuthBuffer (Ordinal: 7, Address: 0x3800)
StartChangingFidoPin (Ordinal: 8, Address: 0x3700)
StartFidoAuthenticationSession (Ordinal: 9, Address: 0x32d0)
StartSigningFidoClientData (Ordinal: 10, Address: 0x3600)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18004d980)
CoInitializeEx (Address: 0x18004d968)
CoTaskMemAlloc (Address: 0x18004d970)
CoUninitialize (Address: 0x18004d960)
StringFromGUID2 (Address: 0x18004d978)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004d9a8)
IsDebuggerPresent (Address: 0x18004d998)
OutputDebugStringA (Address: 0x18004d990)
OutputDebugStringW (Address: 0x18004d9a0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004d9b8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004d9c8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004d9d8)
RaiseException (Address: 0x18004d9f0)
SetLastError (Address: 0x18004d9e0)
SetUnhandledExceptionFilter (Address: 0x18004d9f8)
UnhandledExceptionFilter (Address: 0x18004d9e8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18004da08)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004da18)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004da48)
HeapAlloc (Address: 0x18004da50)
HeapDestroy (Address: 0x18004da38)
HeapFree (Address: 0x18004da28)
HeapReAlloc (Address: 0x18004da30)
HeapSize (Address: 0x18004da40)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18004da68)
LocalFree (Address: 0x18004da60)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x18004da78)
GetModuleFileNameA (Address: 0x18004da88)
GetModuleHandleExW (Address: 0x18004daa0)
GetModuleHandleW (Address: 0x18004daa8)
GetProcAddress (Address: 0x18004da98)
LoadResource (Address: 0x18004da80)
LockResource (Address: 0x18004da90)
SizeofResource (Address: 0x18004dab0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004dac0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x18004dad8)
VirtualProtect (Address: 0x18004dae0)
VirtualQuery (Address: 0x18004dad0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004daf0)
GetCurrentProcessId (Address: 0x18004db00)
GetCurrentThreadId (Address: 0x18004daf8)
SetThreadStackGuarantee (Address: 0x18004db10)
TerminateProcess (Address: 0x18004db08)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004db28)
QueryPerformanceFrequency (Address: 0x18004db20)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004db80)
RegCreateKeyExW (Address: 0x18004db68)
RegDeleteValueW (Address: 0x18004db70)
RegEnumKeyExW (Address: 0x18004db50)
RegFlushKey (Address: 0x18004db90)
RegGetValueW (Address: 0x18004db88)
RegLoadKeyW (Address: 0x18004db58)
RegOpenCurrentUser (Address: 0x18004db38)
RegOpenKeyExW (Address: 0x18004db98)
RegQueryInfoKeyW (Address: 0x18004db78)
RegQueryValueExW (Address: 0x18004db40)
RegSetValueExW (Address: 0x18004db60)
RegUnLoadKeyW (Address: 0x18004db48)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x18004dba8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004dbc8)
RtlLookupFunctionEntry (Address: 0x18004dbc0)
RtlVirtualUnwind (Address: 0x18004dbb8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrNW (Address: 0x18004dbd8)
StrRStrIW (Address: 0x18004dbe8)
StrStrIW (Address: 0x18004dbe0)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x18004dc00)
MultiByteToWideChar (Address: 0x18004dc08)
WideCharToMultiByte (Address: 0x18004dbf8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18004dc18)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004dc30)
AcquireSRWLockShared (Address: 0x18004dc58)
CreateEventW (Address: 0x18004dc78)
CreateMutexExW (Address: 0x18004dc50)
CreateSemaphoreExW (Address: 0x18004dca0)
DeleteCriticalSection (Address: 0x18004dc68)
EnterCriticalSection (Address: 0x18004dca8)
InitializeCriticalSection (Address: 0x18004dc70)
InitializeCriticalSectionEx (Address: 0x18004dcb0)
LeaveCriticalSection (Address: 0x18004dc60)
OpenSemaphoreW (Address: 0x18004dc28)
ReleaseMutex (Address: 0x18004dc48)
ReleaseSemaphore (Address: 0x18004dc98)
ReleaseSRWLockExclusive (Address: 0x18004dc40)
ReleaseSRWLockShared (Address: 0x18004dc38)
SetEvent (Address: 0x18004dc80)
WaitForSingleObject (Address: 0x18004dc90)
WaitForSingleObjectEx (Address: 0x18004dc88)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18004dcc8)
InitOnceComplete (Address: 0x18004dce0)
Sleep (Address: 0x18004dcd8)
SleepConditionVariableSRW (Address: 0x18004dcd0)
WakeAllConditionVariable (Address: 0x18004dcc0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x18004dd00)
GetSystemTimeAsFileTime (Address: 0x18004dcf8)
GetTickCount (Address: 0x18004dcf0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004dd18)
CreateThreadpoolTimer (Address: 0x18004dd20)
SetThreadpoolTimer (Address: 0x18004dd28)
WaitForThreadpoolTimerCallbacks (Address: 0x18004dd10)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18004dd38)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18004dd70)
GetTraceEnableLevel (Address: 0x18004dd68)
GetTraceLoggerHandle (Address: 0x18004dd48)
RegisterTraceGuidsW (Address: 0x18004dd60)
TraceMessage (Address: 0x18004dd50)
UnregisterTraceGuids (Address: 0x18004dd58)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18004dda0)
EventRegister (Address: 0x18004dd88)
EventSetInformation (Address: 0x18004dd90)
EventUnregister (Address: 0x18004dd80)
EventWriteTransfer (Address: 0x18004dd98)

api-ms-win-security-cryptoapi-l1-1-0.dll

CryptAcquireContextW (Address: 0x18004ddc0)
CryptGenRandom (Address: 0x18004ddb8)
CryptReleaseContext (Address: 0x18004ddb0)

api-ms-win-security-lsalookup-l1-1-0.dll

LookupAccountNameLocalW (Address: 0x18004ddd0)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18004dde0)

cryptngc.dll

NgcGetSymmetricPopKeyTransportKey (Address: 0x18004ddf0)

msvcp110_win.dll

?_Syserror_map@std@@YAPEBDH@Z (Address: 0x18004de10)
?_Winerror_map@std@@YAPEBDH@Z (Address: 0x18004de20)
?_Xbad_alloc@std@@YAXXZ (Address: 0x18004de00)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004de18)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004de08)

msvcrt.dll

__C_specific_handler (Address: 0x18004de78)
__CxxFrameHandler3 (Address: 0x18004dee8)
__dllonexit (Address: 0x18004de38)
_amsg_exit (Address: 0x18004de88)
_beginthread (Address: 0x18004df58)
_beginthreadex (Address: 0x18004df68)
_CxxThrowException (Address: 0x18004dee0)
_endthreadex (Address: 0x18004df60)
_errno (Address: 0x18004dff0)
_initterm (Address: 0x18004de80)
_lock (Address: 0x18004de50)
_mbsinc (Address: 0x18004dfe0)
_onexit (Address: 0x18004de40)
_purecall (Address: 0x18004def0)
_snwprintf_s (Address: 0x18004e008)
_time64 (Address: 0x18004df78)
_unlock (Address: 0x18004de30)
_vscwprintf (Address: 0x18004df20)
_vsnprintf (Address: 0x18004dfd0)
_vsnprintf_s (Address: 0x18004df50)
_vsnwprintf (Address: 0x18004df30)
_wcserror (Address: 0x18004dff8)
_wcsicmp (Address: 0x18004df18)
_wcslwr (Address: 0x18004e018)
_wcslwr_s (Address: 0x18004df90)
_wcsnicmp (Address: 0x18004e020)
_wtof (Address: 0x18004de70)
_wtoi (Address: 0x18004df80)
_XcptFilter (Address: 0x18004de90)
??_V@YAXPEAX@Z (Address: 0x18004dea8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18004df48)
??0exception@@QEAA@XZ (Address: 0x18004df40)
??1exception@@UEAA@XZ (Address: 0x18004df38)
??1type_info@@UEAA@XZ (Address: 0x18004de48)
?terminate@@YAXXZ (Address: 0x18004de58)
?what@exception@@UEBAPEBDXZ (Address: 0x18004e010)
calloc (Address: 0x18004dfb0)
free (Address: 0x18004de98)
isalpha (Address: 0x18004dfb8)
isdigit (Address: 0x18004deb0)
iswspace (Address: 0x18004df08)
isxdigit (Address: 0x18004de68)
malloc (Address: 0x18004dea0)
memcmp (Address: 0x18004ded8)
memcpy (Address: 0x18004ded0)
memcpy_s (Address: 0x18004def8)
memmove (Address: 0x18004dec8)
memmove_s (Address: 0x18004df00)
memset (Address: 0x18004deb8)
realloc (Address: 0x18004dec0)
strtol (Address: 0x18004de60)
swprintf_s (Address: 0x18004dfd8)
vswprintf_s (Address: 0x18004df28)
wcschr (Address: 0x18004df70)
wcscmp (Address: 0x18004e028)
wcscpy_s (Address: 0x18004df10)
wcscspn (Address: 0x18004dfa0)
wcsncmp (Address: 0x18004df88)
wcsncpy_s (Address: 0x18004e000)
wcsnlen (Address: 0x18004dfe8)
wcspbrk (Address: 0x18004dfc8)
wcsrchr (Address: 0x18004dfc0)
wcsspn (Address: 0x18004df98)
wcsstr (Address: 0x18004dfa8)

netutils.dll

NetApiBufferFree (Address: 0x18004e038)

ntdll.dll

NtQueryWnfStateData (Address: 0x18004e088)
RtlAllocateHeap (Address: 0x18004e080)
RtlFreeHeap (Address: 0x18004e068)
RtlGetPersistedStateLocation (Address: 0x18004e048)
RtlGetVersion (Address: 0x18004e050)
RtlImageNtHeader (Address: 0x18004e060)
RtlInitString (Address: 0x18004e070)
RtlNtStatusToDosError (Address: 0x18004e058)
RtlPublishWnfStateData (Address: 0x18004e078)

RPCRT4.dll

MesBufferHandleReset (Address: 0x18004d8a8)
MesEncodeFixedBufferHandleCreate (Address: 0x18004d8b0)
MesHandleFree (Address: 0x18004d8a0)
NdrMesTypeAlignSize3 (Address: 0x18004d8c0)
NdrMesTypeEncode3 (Address: 0x18004d8b8)
RpcStringFreeW (Address: 0x18004d8d8)
UuidCreate (Address: 0x18004d8c8)
UuidFromStringW (Address: 0x18004d8e8)
UuidIsNil (Address: 0x18004d8e0)
UuidToStringW (Address: 0x18004d8d0)

wkscli.dll

NetGetJoinInformation (Address: 0x18004e098)

WLDAP32.dll

(Address: 0x18004d900)
(Address: 0x18004d8f8)
(Address: 0x18004d908)
(Address: 0x18004d950)
(Address: 0x18004d948)
(Address: 0x18004d940)
(Address: 0x18004d938)
(Address: 0x18004d930)
(Address: 0x18004d928)
(Address: 0x18004d920)
(Address: 0x18004d918)
(Address: 0x18004d910)