XboxNetApiSvc.dll
Description: Xbox Live Networking Service
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.3636
Architecture: 64-bit
Operating System: Windows NT
SHA256: 0bc42c3b0fedaacd8d75d5dde3b0b2e7
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 7:46 a.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ServiceMain (Ordinal: 1, Address: 0x5990)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- GetApplicationUserModelId (Address: 0x1801111d0)
- GetPackageFullName (Address: 0x1801111d8)
api-ms-win-appmodel-runtime-l1-1-1.dll
- GetStagedPackagePathByFullName (Address: 0x1801111e8)
api-ms-win-core-com-l1-1-0.dll
- CoAddRefServerProcess (Address: 0x180111248)
- CoCreateFreeThreadedMarshaler (Address: 0x1801111f8)
- CoCreateGuid (Address: 0x180111220)
- CoCreateInstance (Address: 0x180111240)
- CoDisconnectContext (Address: 0x180111260)
- CoInitializeEx (Address: 0x180111228)
- CoRegisterClassObject (Address: 0x180111210)
- CoReleaseServerProcess (Address: 0x180111250)
- CoResumeClassObjects (Address: 0x180111218)
- CoRevokeClassObject (Address: 0x180111208)
- CoTaskMemAlloc (Address: 0x180111200)
- CoTaskMemFree (Address: 0x180111238)
- CoUninitialize (Address: 0x180111258)
- CoWaitForMultipleHandles (Address: 0x180111230)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x180111270)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180111280)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180111290)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1801112b8)
- RaiseException (Address: 0x1801112a0)
- SetUnhandledExceptionFilter (Address: 0x1801112a8)
- UnhandledExceptionFilter (Address: 0x1801112b0)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x1801112c8)
- GetFileAttributesW (Address: 0x1801112d8)
- ReadFile (Address: 0x1801112d0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1801112e8)
- DuplicateHandle (Address: 0x1801112f0)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x180111300)
- LocalFree (Address: 0x180111308)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180111328)
- GetModuleHandleW (Address: 0x180111320)
- LoadStringW (Address: 0x180111318)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateThread (Address: 0x180111338)
- GetCurrentProcess (Address: 0x180111368)
- GetCurrentProcessId (Address: 0x180111378)
- GetCurrentThread (Address: 0x180111350)
- GetCurrentThreadId (Address: 0x180111348)
- GetExitCodeThread (Address: 0x180111370)
- OpenProcessToken (Address: 0x180111340)
- OpenThreadToken (Address: 0x180111360)
- TerminateProcess (Address: 0x180111358)
api-ms-win-core-processthreads-l1-1-1.dll
- OpenProcess (Address: 0x180111388)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180111398)
- QueryPerformanceFrequency (Address: 0x1801113a0)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1801113b0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1801113c8)
- RegDeleteValueW (Address: 0x1801113e0)
- RegGetValueW (Address: 0x1801113d0)
- RegOpenKeyExW (Address: 0x1801113d8)
- RegQueryValueExW (Address: 0x1801113c0)
- RegSetValueExW (Address: 0x1801113e8)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x180111400)
- WideCharToMultiByte (Address: 0x1801113f8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180111468)
- AcquireSRWLockShared (Address: 0x180111428)
- CreateEventW (Address: 0x180111458)
- CreateWaitableTimerExW (Address: 0x180111440)
- DeleteCriticalSection (Address: 0x180111418)
- EnterCriticalSection (Address: 0x180111470)
- InitializeCriticalSection (Address: 0x180111430)
- InitializeSRWLock (Address: 0x180111420)
- LeaveCriticalSection (Address: 0x180111480)
- ReleaseSRWLockExclusive (Address: 0x180111460)
- ReleaseSRWLockShared (Address: 0x180111478)
- ResetEvent (Address: 0x180111488)
- SetEvent (Address: 0x180111448)
- SetWaitableTimer (Address: 0x180111410)
- WaitForMultipleObjectsEx (Address: 0x180111438)
- WaitForSingleObject (Address: 0x180111450)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x180111498)
- Sleep (Address: 0x1801114a0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x1801114d0)
- GetSystemTimeAsFileTime (Address: 0x1801114c0)
- GetTickCount (Address: 0x1801114b8)
- GetTickCount64 (Address: 0x1801114c8)
- GetVersionExW (Address: 0x1801114b0)
api-ms-win-core-timezone-l1-1-0.dll
- GetTimeZoneInformation (Address: 0x1801114e0)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1801114f8)
- EncodePointer (Address: 0x1801114f0)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x180111508)
- RoOriginateError (Address: 0x180111530)
- RoOriginateErrorW (Address: 0x180111510)
- RoSetErrorReportingFlags (Address: 0x180111518)
- RoTransformError (Address: 0x180111528)
- SetRestrictedErrorInfo (Address: 0x180111520)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x180111540)
- RoGetMatchingRestrictedErrorInfo (Address: 0x180111548)
- RoReportFailedDelegate (Address: 0x180111550)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x180111570)
- RoGetActivationFactory (Address: 0x180111588)
- RoInitialize (Address: 0x180111580)
- RoRegisterActivationFactories (Address: 0x180111578)
- RoRevokeActivationFactories (Address: 0x180111568)
- RoUninitialize (Address: 0x180111560)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
- RoGetBufferMarshaler (Address: 0x180111598)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x1801115d0)
- WindowsCreateString (Address: 0x1801115a8)
- WindowsCreateStringReference (Address: 0x1801115c8)
- WindowsDeleteString (Address: 0x1801115e0)
- WindowsDuplicateString (Address: 0x1801115c0)
- WindowsGetStringRawBuffer (Address: 0x1801115b8)
- WindowsIsStringEmpty (Address: 0x1801115b0)
- WindowsStringHasEmbeddedNull (Address: 0x1801115d8)
api-ms-win-downlevel-kernel32-l2-1-0.dll
- MulDiv (Address: 0x1801115f0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x180111628)
- GetTraceEnableLevel (Address: 0x180111608)
- GetTraceLoggerHandle (Address: 0x180111600)
- RegisterTraceGuidsW (Address: 0x180111618)
- TraceMessage (Address: 0x180111620)
- UnregisterTraceGuids (Address: 0x180111610)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180111640)
- EventSetInformation (Address: 0x180111648)
- EventUnregister (Address: 0x180111638)
- EventWriteTransfer (Address: 0x180111650)
api-ms-win-security-base-l1-1-0.dll
- CopySid (Address: 0x180111678)
- CreateWellKnownSid (Address: 0x180111680)
- EqualSid (Address: 0x180111670)
- GetLengthSid (Address: 0x180111668)
- GetTokenInformation (Address: 0x180111660)
api-ms-win-security-cryptoapi-l1-1-0.dll
- CryptAcquireContextA (Address: 0x1801116b0)
- CryptDestroyKey (Address: 0x1801116a0)
- CryptExportKey (Address: 0x180111698)
- CryptGetProvParam (Address: 0x1801116a8)
- CryptReleaseContext (Address: 0x180111690)
api-ms-win-security-sddl-l1-1-0.dll
- ConvertSidToStringSidW (Address: 0x1801116c0)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1801116c8)
api-ms-win-service-core-l1-1-0.dll
- RegisterServiceCtrlHandlerExW (Address: 0x1801116e0)
- SetServiceStatus (Address: 0x1801116d8)
api-ms-win-service-core-l1-1-1.dll
- EnumServicesStatusExW (Address: 0x1801116f0)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x180111710)
- OpenSCManagerW (Address: 0x180111700)
- OpenServiceW (Address: 0x180111708)
api-ms-win-service-management-l2-1-0.dll
- QueryServiceConfig2W (Address: 0x180111720)
- QueryServiceStatusEx (Address: 0x180111728)
CRYPT32.dll
- CertAddCertificateContextToStore (Address: 0x180110f28)
- CertCloseStore (Address: 0x180110f18)
- CertCreateCertificateChainEngine (Address: 0x180110ed0)
- CertCreateCertificateContext (Address: 0x180110f30)
- CertDeleteCertificateFromStore (Address: 0x180110f10)
- CertEnumCertificatesInStore (Address: 0x180110f38)
- CertFindCertificateInStore (Address: 0x180110ea0)
- CertFreeCertificateChain (Address: 0x180110ec8)
- CertFreeCertificateChainEngine (Address: 0x180110f20)
- CertFreeCertificateContext (Address: 0x180110ed8)
- CertGetCertificateChain (Address: 0x180110e70)
- CertGetCertificateContextProperty (Address: 0x180110ea8)
- CertGetEnhancedKeyUsage (Address: 0x180110eb0)
- CertGetNameStringW (Address: 0x180110ec0)
- CertIsRDNAttrsInCertificateName (Address: 0x180110ef0)
- CertOpenStore (Address: 0x180110eb8)
- CertStrToNameW (Address: 0x180110e88)
- CertVerifyCertificateChainPolicy (Address: 0x180110e78)
- CertVerifyTimeValidity (Address: 0x180110f40)
- CryptAcquireCertificatePrivateKey (Address: 0x180110e68)
- CryptBinaryToStringW (Address: 0x180110f08)
- CryptDecodeObject (Address: 0x180110e80)
- CryptExportPublicKeyInfo (Address: 0x180110ee8)
- CryptFindCertificateKeyProvInfo (Address: 0x180110ee0)
- CryptSignAndEncodeCertificate (Address: 0x180110ef8)
- CryptStringToBinaryW (Address: 0x180110f00)
- PFXImportCertStore (Address: 0x180110e90)
- PFXIsPFXBlob (Address: 0x180110e98)
FirewallAPI.dll
- FWAddAuthenticationSet (Address: 0x180110fc0)
- FWAddCryptoSet (Address: 0x180110f78)
- FWAddFirewallRule (Address: 0x180110fa8)
- FWAddSecurityRealm (Address: 0x180110f68)
- FWClosePolicyStore (Address: 0x180110f90)
- FWDeleteAuthenticationSet (Address: 0x180110f60)
- FWDeleteCryptoSet (Address: 0x180110f80)
- FWDeleteFirewallRule (Address: 0x180110fb0)
- FWDeleteSecurityRealm (Address: 0x180110f50)
- FWEnumProducts (Address: 0x180110f88)
- FWFreeProducts (Address: 0x180110fc8)
- FWGetConfig (Address: 0x180110fb8)
- FWGetGlobalConfig (Address: 0x180110fa0)
- FWOpenPolicyStore (Address: 0x180110f70)
- FWRevertTransaction (Address: 0x180110f98)
- FWSetAuthenticationSet (Address: 0x180110f58)
fwpuclnt.dll
- FwpmEngineClose0 (Address: 0x180111770)
- FwpmEngineOpen0 (Address: 0x180111750)
- FwpmFilterAdd0 (Address: 0x1801117b0)
- FwpmFilterDeleteById0 (Address: 0x1801117b8)
- FwpmFreeMemory0 (Address: 0x180111778)
- FwpmProviderAdd0 (Address: 0x180111760)
- FwpmProviderContextAdd2 (Address: 0x180111798)
- FwpmProviderContextDeleteByKey0 (Address: 0x1801117a0)
- FwpmProviderContextGetById2 (Address: 0x1801117a8)
- FwpmProviderDeleteByKey0 (Address: 0x180111768)
- FwpmProviderGetByKey0 (Address: 0x180111758)
- FwpmTransactionAbort0 (Address: 0x180111790)
- FwpmTransactionBegin0 (Address: 0x180111780)
- FwpmTransactionCommit0 (Address: 0x180111788)
- FwppGetMD5HashBytes (Address: 0x180111740)
- IkeextSaCreateEnumHandle0 (Address: 0x1801117f0)
- IkeextSaDestroyEnumHandle0 (Address: 0x180111738)
- IkeextSaEnum2 (Address: 0x180111748)
- IPsecSaContextCreateEnumHandle0 (Address: 0x1801117d0)
- IPsecSaContextDeleteById0 (Address: 0x1801117c0)
- IPsecSaContextDestroyEnumHandle0 (Address: 0x1801117e0)
- IPsecSaContextEnum1 (Address: 0x1801117d8)
- IPsecSaContextGetById1 (Address: 0x1801117c8)
- IPsecSaInitiateAsync0 (Address: 0x1801117e8)
IPHLPAPI.DLL
- CancelMibChangeNotify2 (Address: 0x180111010)
- DeleteIpNetEntry2 (Address: 0x180110ff8)
- FreeMibTable (Address: 0x180110ff0)
- GetAdaptersAddresses (Address: 0x180110fe8)
- GetBestRoute2 (Address: 0x180111020)
- GetIpForwardTable2 (Address: 0x180110fe0)
- GetIpNetEntry2 (Address: 0x180110fd8)
- InitializeIpForwardEntry (Address: 0x180111000)
- NotifyIpInterfaceChange (Address: 0x180111028)
- NotifyRouteChange2 (Address: 0x180111018)
- NotifyUnicastIpAddressChange (Address: 0x180111008)
msvcrt.dll
- __C_specific_handler (Address: 0x1801118b8)
- __CxxFrameHandler3 (Address: 0x180111800)
- __dllonexit (Address: 0x180111898)
- _amsg_exit (Address: 0x1801118d8)
- _initterm (Address: 0x1801118c0)
- _lock (Address: 0x1801118a8)
- _onexit (Address: 0x180111890)
- _purecall (Address: 0x1801118e8)
- _snwprintf_s (Address: 0x180111860)
- _ultow_s (Address: 0x180111820)
- _unlock (Address: 0x1801118a0)
- _vsnprintf_s (Address: 0x180111838)
- _vsnwprintf (Address: 0x180111810)
- _wcsicmp (Address: 0x180111870)
- _wcstoui64 (Address: 0x180111878)
- _XcptFilter (Address: 0x1801118e0)
- ?terminate@@YAXXZ (Address: 0x1801118b0)
- free (Address: 0x1801118d0)
- malloc (Address: 0x1801118c8)
- memcmp (Address: 0x180111840)
- memcpy (Address: 0x180111880)
- memcpy_s (Address: 0x180111808)
- memmove (Address: 0x180111888)
- memmove_s (Address: 0x180111848)
- memset (Address: 0x1801118f0)
- realloc (Address: 0x180111828)
- strtoul (Address: 0x180111868)
- swprintf_s (Address: 0x180111858)
- vswprintf_s (Address: 0x180111830)
- wcschr (Address: 0x180111818)
- wcscpy_s (Address: 0x180111850)
ncrypt.dll
- NCryptCreatePersistedKey (Address: 0x180111918)
- NCryptDeleteKey (Address: 0x180111900)
- NCryptExportKey (Address: 0x180111908)
- NCryptFinalizeKey (Address: 0x180111928)
- NCryptFreeObject (Address: 0x180111930)
- NCryptOpenStorageProvider (Address: 0x180111920)
- NCryptSetProperty (Address: 0x180111910)
NSI.dll
- NsiGetAllParameters (Address: 0x180111038)
ntdll.dll
- RtlCaptureContext (Address: 0x180111958)
- RtlCreateServiceSid (Address: 0x180111960)
- RtlInitUnicodeString (Address: 0x180111940)
- RtlLookupFunctionEntry (Address: 0x180111950)
- RtlVirtualUnwind (Address: 0x180111948)
OLEAUT32.dll
- SysAllocString (Address: 0x180111048)
- SysFreeString (Address: 0x180111058)
- VariantChangeType (Address: 0x180111060)
- VariantClear (Address: 0x180111050)
- VariantInit (Address: 0x180111068)
POWRPROF.dll
- PowerSettingRegisterNotification (Address: 0x180111078)
- PowerSettingUnregisterNotification (Address: 0x180111080)
RPCRT4.dll
- NdrClientCall3 (Address: 0x180111098)
- RpcBindingBind (Address: 0x1801110a8)
- RpcBindingCreateW (Address: 0x1801110a0)
- RpcBindingFree (Address: 0x1801110b8)
- RpcBindingUnbind (Address: 0x1801110b0)
- RpcServerInqCallAttributesW (Address: 0x180111090)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x1801110f8)
- WinHttpConnect (Address: 0x1801110e0)
- WinHttpOpen (Address: 0x1801110c8)
- WinHttpOpenRequest (Address: 0x1801110d8)
- WinHttpQueryHeaders (Address: 0x1801110f0)
- WinHttpQueryOption (Address: 0x180111100)
- WinHttpReadData (Address: 0x180111108)
- WinHttpReceiveResponse (Address: 0x1801110e8)
- WinHttpSendRequest (Address: 0x1801110d0)
WINNSI.DLL
- NsiConnectToServer (Address: 0x180111128)
- NsiDisconnectFromServer (Address: 0x180111130)
- NsiRpcDeregisterChangeNotification (Address: 0x180111120)
- NsiRpcRegisterChangeNotification (Address: 0x180111118)
WS2_32.dll
- bind (Address: 0x180111148)
- closesocket (Address: 0x1801111c0)
- freeaddrinfo (Address: 0x1801111b0)
- FreeAddrInfoW (Address: 0x180111188)
- getaddrinfo (Address: 0x1801111a8)
- GetAddrInfoW (Address: 0x180111198)
- GetNameInfoW (Address: 0x1801111a0)
- getsockname (Address: 0x180111140)
- ntohs (Address: 0x1801111b8)
- setsockopt (Address: 0x180111150)
- WSACleanup (Address: 0x180111170)
- WSAGetLastError (Address: 0x180111158)
- WSAGetOverlappedResult (Address: 0x180111178)
- WSARecvFrom (Address: 0x180111190)
- WSASendTo (Address: 0x180111180)
- WSASocketW (Address: 0x180111160)
- WSAStartup (Address: 0x180111168)