aadWamExtension.dll

Description: AAD WAM extension DLL

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: c970aba14b996bf8ecaad694315cb35c

File Size: 148.9 KB

Uploaded At: Dec. 1, 2025, 7:52 a.m.

Views: 5

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7980)
DllGetActivationFactory (Ordinal: 2, Address: 0x78d0)
DllGetClassObject (Ordinal: 3, Address: 0x78f0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1001b02c)
IsDebuggerPresent (Address: 0x1001b028)
OutputDebugStringA (Address: 0x1001b034)
OutputDebugStringW (Address: 0x1001b030)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1001b03c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1001b044)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001b04c)
RaiseException (Address: 0x1001b05c)
SetLastError (Address: 0x1001b050)
SetUnhandledExceptionFilter (Address: 0x1001b054)
UnhandledExceptionFilter (Address: 0x1001b058)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1001b064)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001b080)
HeapAlloc (Address: 0x1001b06c)
HeapDestroy (Address: 0x1001b074)
HeapFree (Address: 0x1001b070)
HeapReAlloc (Address: 0x1001b078)
HeapSize (Address: 0x1001b07c)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1001b08c)
LocalFree (Address: 0x1001b088)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x1001b094)
GetModuleFileNameA (Address: 0x1001b0a8)
GetModuleHandleExW (Address: 0x1001b0a4)
GetModuleHandleW (Address: 0x1001b0a0)
GetProcAddress (Address: 0x1001b0ac)
LoadResource (Address: 0x1001b098)
LockResource (Address: 0x1001b0b0)
SizeofResource (Address: 0x1001b09c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1001b0b8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1001b0c0)
VirtualProtect (Address: 0x1001b0c4)
VirtualQuery (Address: 0x1001b0c8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1001b0e0)
GetCurrentProcessId (Address: 0x1001b0d0)
GetCurrentThreadId (Address: 0x1001b0d8)
SetThreadStackGuarantee (Address: 0x1001b0dc)
TerminateProcess (Address: 0x1001b0d4)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001b0e8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1001b0f0)
WideCharToMultiByte (Address: 0x1001b0f4)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1001b13c)
AcquireSRWLockShared (Address: 0x1001b134)
CreateMutexExW (Address: 0x1001b130)
CreateSemaphoreExW (Address: 0x1001b118)
DeleteCriticalSection (Address: 0x1001b0fc)
EnterCriticalSection (Address: 0x1001b100)
InitializeCriticalSection (Address: 0x1001b104)
InitializeCriticalSectionEx (Address: 0x1001b12c)
InitializeSRWLock (Address: 0x1001b120)
LeaveCriticalSection (Address: 0x1001b124)
OpenSemaphoreW (Address: 0x1001b128)
ReleaseMutex (Address: 0x1001b10c)
ReleaseSemaphore (Address: 0x1001b114)
ReleaseSRWLockExclusive (Address: 0x1001b11c)
ReleaseSRWLockShared (Address: 0x1001b138)
WaitForSingleObject (Address: 0x1001b110)
WaitForSingleObjectEx (Address: 0x1001b108)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1001b148)
InitOnceComplete (Address: 0x1001b150)
InitOnceExecuteOnce (Address: 0x1001b144)
Sleep (Address: 0x1001b14c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1001b160)
GetSystemTimeAsFileTime (Address: 0x1001b158)
GetTickCount (Address: 0x1001b15c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1001b170)
CreateThreadpoolTimer (Address: 0x1001b168)
SetThreadpoolTimer (Address: 0x1001b16c)
WaitForThreadpoolTimerCallbacks (Address: 0x1001b174)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1001b17c)
EncodePointer (Address: 0x1001b180)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1001b19c)
GetTraceEnableLevel (Address: 0x1001b188)
GetTraceLoggerHandle (Address: 0x1001b198)
RegisterTraceGuidsW (Address: 0x1001b18c)
TraceMessage (Address: 0x1001b190)
UnregisterTraceGuids (Address: 0x1001b194)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1001b1b0)
EventRegister (Address: 0x1001b1ac)
EventSetInformation (Address: 0x1001b1a4)
EventUnregister (Address: 0x1001b1a8)
EventWriteTransfer (Address: 0x1001b1b4)

CRYPT32.dll

CryptStringToBinaryW (Address: 0x1001b000)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001b258)
__dllonexit (Address: 0x1001b244)
_amsg_exit (Address: 0x1001b218)
_callnewh (Address: 0x1001b1c8)
_CxxThrowException (Address: 0x1001b20c)
_errno (Address: 0x1001b1c4)
_except_handler4_common (Address: 0x1001b24c)
_ftol2 (Address: 0x1001b1f8)
_initterm (Address: 0x1001b230)
_lock (Address: 0x1001b23c)
_onexit (Address: 0x1001b25c)
_purecall (Address: 0x1001b210)
_unlock (Address: 0x1001b240)
_vscwprintf (Address: 0x1001b1d4)
_vsnprintf (Address: 0x1001b27c)
_vsnprintf_s (Address: 0x1001b204)
_vsnwprintf (Address: 0x1001b22c)
_wcsicmp (Address: 0x1001b1e8)
_wcsnicmp (Address: 0x1001b1dc)
_wtof (Address: 0x1001b270)
_XcptFilter (Address: 0x1001b214)
??_V@YAXPAX@Z (Address: 0x1001b254)
??0exception@@QAE@ABQBD@Z (Address: 0x1001b200)
??0exception@@QAE@ABQBDH@Z (Address: 0x1001b238)
??0exception@@QAE@ABV0@@Z (Address: 0x1001b1fc)
??0exception@@QAE@XZ (Address: 0x1001b1f0)
??1exception@@UAE@XZ (Address: 0x1001b224)
??1type_info@@UAE@XZ (Address: 0x1001b250)
??3@YAXPAX@Z (Address: 0x1001b208)
?terminate@@YAXXZ (Address: 0x1001b234)
?what@exception@@UBEPBDXZ (Address: 0x1001b1f4)
free (Address: 0x1001b21c)
isalpha (Address: 0x1001b26c)
isdigit (Address: 0x1001b260)
isxdigit (Address: 0x1001b264)
malloc (Address: 0x1001b220)
memcmp (Address: 0x1001b248)
memcpy (Address: 0x1001b1bc)
memcpy_s (Address: 0x1001b228)
memmove (Address: 0x1001b1c0)
memmove_s (Address: 0x1001b1ec)
memset (Address: 0x1001b280)
realloc (Address: 0x1001b1cc)
strtol (Address: 0x1001b268)
swprintf_s (Address: 0x1001b278)
swscanf (Address: 0x1001b1e4)
time (Address: 0x1001b1e0)
vswprintf_s (Address: 0x1001b1d0)
wcschr (Address: 0x1001b1d8)
wcsnlen (Address: 0x1001b274)

ntdll.dll

RtlAllocateHeap (Address: 0x1001b288)
RtlFreeHeap (Address: 0x1001b298)
RtlImageNtHeader (Address: 0x1001b294)
RtlInitString (Address: 0x1001b28c)
RtlNtStatusToDosError (Address: 0x1001b290)

RPCRT4.dll

UuidCreate (Address: 0x1001b008)

SspiCli.dll

LsaCallAuthenticationPackage (Address: 0x1001b020)
LsaConnectUntrusted (Address: 0x1001b018)
LsaDeregisterLogonProcess (Address: 0x1001b010)
LsaFreeReturnBuffer (Address: 0x1001b01c)
LsaLookupAuthenticationPackage (Address: 0x1001b014)