aadauthhelper.dll

Description: Microsoft® AAD Auth Helper

Version: 10.0.19041.6216

Architecture: 32-bit

Operating System: Windows NT

SHA256: e4be95f115d38c419300daacd2f47218

File Size: 334.5 KB

Uploaded At: Dec. 1, 2025, 7:52 a.m.

Views: 7

Exported Functions

CloseFidoAuthenticationSession (Ordinal: 1, Address: 0x18260)
CreateAuthBuffer (Ordinal: 2, Address: 0x18060)
CreateResourceAccountAuthBuffer (Ordinal: 3, Address: 0x180c0)
CreateTokenAuthBuffer (Ordinal: 4, Address: 0x18080)
CreateTokenAuthBufferEx (Ordinal: 5, Address: 0x180a0)
GetFidoAuthenticationSessionStatus (Ordinal: 6, Address: 0x181a0)
GetSerializedAuthBuffer (Ordinal: 7, Address: 0x18490)
StartChangingFidoPin (Ordinal: 8, Address: 0x183d0)
StartFidoAuthenticationSession (Ordinal: 9, Address: 0x180e0)
StartSigningFidoClientData (Ordinal: 10, Address: 0x18310)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x1004f06c)
CoInitializeEx (Address: 0x1004f064)
CoTaskMemAlloc (Address: 0x1004f060)
CoUninitialize (Address: 0x1004f068)
StringFromGUID2 (Address: 0x1004f070)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1004f078)
IsDebuggerPresent (Address: 0x1004f084)
OutputDebugStringA (Address: 0x1004f07c)
OutputDebugStringW (Address: 0x1004f080)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1004f08c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1004f094)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1004f0ac)
RaiseException (Address: 0x1004f0a4)
SetLastError (Address: 0x1004f0a8)
SetUnhandledExceptionFilter (Address: 0x1004f09c)
UnhandledExceptionFilter (Address: 0x1004f0a0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1004f0b4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1004f0bc)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1004f0d0)
HeapAlloc (Address: 0x1004f0cc)
HeapDestroy (Address: 0x1004f0d4)
HeapFree (Address: 0x1004f0c4)
HeapReAlloc (Address: 0x1004f0d8)
HeapSize (Address: 0x1004f0c8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1004f0e0)
LocalFree (Address: 0x1004f0e4)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x1004f0f8)
GetModuleFileNameA (Address: 0x1004f104)
GetModuleHandleExW (Address: 0x1004f0ec)
GetModuleHandleW (Address: 0x1004f108)
GetProcAddress (Address: 0x1004f0f4)
LoadResource (Address: 0x1004f100)
LockResource (Address: 0x1004f0fc)
SizeofResource (Address: 0x1004f0f0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1004f110)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1004f118)
VirtualProtect (Address: 0x1004f11c)
VirtualQuery (Address: 0x1004f120)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1004f130)
GetCurrentProcessId (Address: 0x1004f12c)
GetCurrentThreadId (Address: 0x1004f134)
SetThreadStackGuarantee (Address: 0x1004f138)
TerminateProcess (Address: 0x1004f128)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1004f144)
QueryPerformanceFrequency (Address: 0x1004f140)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1004f170)
RegCreateKeyExW (Address: 0x1004f16c)
RegDeleteValueW (Address: 0x1004f178)
RegEnumKeyExW (Address: 0x1004f15c)
RegFlushKey (Address: 0x1004f14c)
RegGetValueW (Address: 0x1004f158)
RegLoadKeyW (Address: 0x1004f150)
RegOpenCurrentUser (Address: 0x1004f160)
RegOpenKeyExW (Address: 0x1004f154)
RegQueryInfoKeyW (Address: 0x1004f174)
RegQueryValueExW (Address: 0x1004f164)
RegSetValueExW (Address: 0x1004f168)
RegUnLoadKeyW (Address: 0x1004f17c)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x1004f184)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrNW (Address: 0x1004f190)
StrRStrIW (Address: 0x1004f18c)
StrStrIW (Address: 0x1004f194)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1004f1a4)
MultiByteToWideChar (Address: 0x1004f19c)
WideCharToMultiByte (Address: 0x1004f1a0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1004f1ac)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1004f1d4)
AcquireSRWLockShared (Address: 0x1004f1b4)
CreateEventW (Address: 0x1004f1c4)
CreateMutexExW (Address: 0x1004f1b8)
CreateSemaphoreExW (Address: 0x1004f1bc)
DeleteCriticalSection (Address: 0x1004f1c0)
EnterCriticalSection (Address: 0x1004f1e4)
InitializeCriticalSection (Address: 0x1004f1c8)
InitializeCriticalSectionEx (Address: 0x1004f1e8)
LeaveCriticalSection (Address: 0x1004f1f0)
OpenSemaphoreW (Address: 0x1004f1cc)
ReleaseMutex (Address: 0x1004f1dc)
ReleaseSemaphore (Address: 0x1004f1f4)
ReleaseSRWLockExclusive (Address: 0x1004f1d8)
ReleaseSRWLockShared (Address: 0x1004f1f8)
SetEvent (Address: 0x1004f1ec)
WaitForSingleObject (Address: 0x1004f1e0)
WaitForSingleObjectEx (Address: 0x1004f1d0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1004f208)
InitOnceComplete (Address: 0x1004f20c)
Sleep (Address: 0x1004f210)
SleepConditionVariableSRW (Address: 0x1004f200)
WakeAllConditionVariable (Address: 0x1004f204)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1004f21c)
GetSystemTimeAsFileTime (Address: 0x1004f218)
GetTickCount (Address: 0x1004f220)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1004f22c)
CreateThreadpoolTimer (Address: 0x1004f230)
SetThreadpoolTimer (Address: 0x1004f228)
WaitForThreadpoolTimerCallbacks (Address: 0x1004f234)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1004f23c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1004f24c)
GetTraceEnableLevel (Address: 0x1004f250)
GetTraceLoggerHandle (Address: 0x1004f244)
RegisterTraceGuidsW (Address: 0x1004f258)
TraceMessage (Address: 0x1004f248)
UnregisterTraceGuids (Address: 0x1004f254)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1004f260)
EventRegister (Address: 0x1004f270)
EventSetInformation (Address: 0x1004f268)
EventUnregister (Address: 0x1004f26c)
EventWriteTransfer (Address: 0x1004f264)

api-ms-win-security-cryptoapi-l1-1-0.dll

CryptAcquireContextW (Address: 0x1004f27c)
CryptGenRandom (Address: 0x1004f280)
CryptReleaseContext (Address: 0x1004f278)

api-ms-win-security-lsalookup-l1-1-0.dll

LookupAccountNameLocalW (Address: 0x1004f288)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x1004f290)

cryptngc.dll

NgcGetSymmetricPopKeyTransportKey (Address: 0x1004f298)

msvcp110_win.dll

?_Syserror_map@std@@YAPBDH@Z (Address: 0x1004f2b0)
?_Winerror_map@std@@YAPBDH@Z (Address: 0x1004f2ac)
?_Xbad_alloc@std@@YAXXZ (Address: 0x1004f2a4)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1004f2a0)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1004f2a8)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1004f30c)
__dllonexit (Address: 0x1004f310)
_amsg_exit (Address: 0x1004f2e4)
_beginthread (Address: 0x1004f34c)
_beginthreadex (Address: 0x1004f354)
_CxxThrowException (Address: 0x1004f2c4)
_endthreadex (Address: 0x1004f350)
_errno (Address: 0x1004f398)
_except_handler4_common (Address: 0x1004f2fc)
_ftol2 (Address: 0x1004f2c0)
_ftol2_sse (Address: 0x1004f2bc)
_initterm (Address: 0x1004f2e0)
_lock (Address: 0x1004f2cc)
_mbsinc (Address: 0x1004f390)
_onexit (Address: 0x1004f308)
_purecall (Address: 0x1004f318)
_snwprintf_s (Address: 0x1004f3a4)
_time64 (Address: 0x1004f35c)
_unlock (Address: 0x1004f2c8)
_vscwprintf (Address: 0x1004f330)
_vsnprintf (Address: 0x1004f388)
_vsnprintf_s (Address: 0x1004f348)
_vsnwprintf (Address: 0x1004f338)
_wcserror (Address: 0x1004f39c)
_wcsicmp (Address: 0x1004f32c)
_wcslwr (Address: 0x1004f3ac)
_wcslwr_s (Address: 0x1004f368)
_wcsnicmp (Address: 0x1004f3b0)
_wtof (Address: 0x1004f3b4)
_wtoi (Address: 0x1004f360)
_XcptFilter (Address: 0x1004f2e8)
??_V@YAXPAX@Z (Address: 0x1004f2f4)
??0exception@@QAE@ABV0@@Z (Address: 0x1004f344)
??0exception@@QAE@XZ (Address: 0x1004f340)
??1exception@@UAE@XZ (Address: 0x1004f33c)
??1type_info@@UAE@XZ (Address: 0x1004f304)
?terminate@@YAXXZ (Address: 0x1004f2dc)
?what@exception@@UBEPBDXZ (Address: 0x1004f3a8)
calloc (Address: 0x1004f378)
free (Address: 0x1004f2ec)
isalpha (Address: 0x1004f37c)
isdigit (Address: 0x1004f2d0)
iswspace (Address: 0x1004f324)
isxdigit (Address: 0x1004f2d8)
malloc (Address: 0x1004f2f0)
memcmp (Address: 0x1004f314)
memcpy (Address: 0x1004f2b8)
memcpy_s (Address: 0x1004f31c)
memmove (Address: 0x1004f2f8)
memmove_s (Address: 0x1004f320)
memset (Address: 0x1004f3b8)
realloc (Address: 0x1004f300)
strtol (Address: 0x1004f2d4)
swprintf_s (Address: 0x1004f38c)
vswprintf_s (Address: 0x1004f334)
wcschr (Address: 0x1004f358)
wcscpy_s (Address: 0x1004f328)
wcscspn (Address: 0x1004f370)
wcsncmp (Address: 0x1004f364)
wcsncpy_s (Address: 0x1004f3a0)
wcsnlen (Address: 0x1004f394)
wcspbrk (Address: 0x1004f384)
wcsrchr (Address: 0x1004f380)
wcsspn (Address: 0x1004f36c)
wcsstr (Address: 0x1004f374)

netutils.dll

NetApiBufferFree (Address: 0x1004f3c0)

ntdll.dll

NtQueryWnfStateData (Address: 0x1004f3e8)
RtlAllocateHeap (Address: 0x1004f3e4)
RtlFreeHeap (Address: 0x1004f3d8)
RtlGetPersistedStateLocation (Address: 0x1004f3c8)
RtlGetVersion (Address: 0x1004f3cc)
RtlImageNtHeader (Address: 0x1004f3d4)
RtlInitString (Address: 0x1004f3dc)
RtlNtStatusToDosError (Address: 0x1004f3d0)
RtlPublishWnfStateData (Address: 0x1004f3e0)

RPCRT4.dll

MesBufferHandleReset (Address: 0x1004f01c)
MesEncodeFixedBufferHandleCreate (Address: 0x1004f020)
MesHandleFree (Address: 0x1004f018)
NdrMesTypeAlignSize2 (Address: 0x1004f010)
NdrMesTypeEncode2 (Address: 0x1004f014)
RpcStringFreeW (Address: 0x1004f004)
UuidCreate (Address: 0x1004f00c)
UuidFromStringW (Address: 0x1004f024)
UuidIsNil (Address: 0x1004f000)
UuidToStringW (Address: 0x1004f008)

wkscli.dll

NetGetJoinInformation (Address: 0x1004f3f0)

WLDAP32.dll

(Address: 0x1004f058)
(Address: 0x1004f054)
(Address: 0x1004f050)
(Address: 0x1004f04c)
(Address: 0x1004f048)
(Address: 0x1004f044)
(Address: 0x1004f040)
(Address: 0x1004f03c)
(Address: 0x1004f038)
(Address: 0x1004f034)
(Address: 0x1004f030)
(Address: 0x1004f02c)