AlscEfsCore.dll

v1.0.6.11110 64-bit Windows NT Analyzed
Download
Description
—
Authors
Copyright (C) 2021
File size
993.1 KB
Uploaded
2025-12-02 14:41
Views
30
SHA-256
a520df891b3554dff552c143acdba670

Exported functions 3

EfsReporterInit #1 · 0x17d90
EfsReporterInit2 #2 · 0x17db0
EfsReporterSend #3 · 0x17e50

Imported DLLs & functions 179

ADVAPI32.dll 9
CryptAcquireContextW 0x1800b6030
CryptCreateHash 0x1800b6020
CryptDestroyHash 0x1800b6010
CryptDestroyKey 0x1800b6038
CryptEncrypt 0x1800b6028
CryptGetHashParam 0x1800b6000
CryptHashData 0x1800b6018
CryptImportKey 0x1800b6008
CryptReleaseContext 0x1800b6040
KERNEL32.dll 122
AcquireSRWLockExclusive 0x1800b61f0
CloseHandle 0x1800b61c0
CompareStringW 0x1800b63c8
CopyFileA 0x1800b6088
CreateEventW 0x1800b6250
CreateFileW 0x1800b6380
CreateThread 0x1800b6358
DecodePointer 0x1800b60b0
DeleteCriticalSection 0x1800b60a8
EncodePointer 0x1800b6218
EnterCriticalSection 0x1800b61a0
EnumSystemLocalesW 0x1800b63f0
ExitProcess 0x1800b6378
ExitThread 0x1800b6360
ExpandEnvironmentStringsA 0x1800b62d8
FileTimeToSystemTime 0x1800b63a0
FindClose 0x1800b6188
FindFirstFileExW 0x1800b6180
FindNextFileW 0x1800b6178
FlushFileBuffers 0x1800b6410
FormatMessageA 0x1800b6200
FreeEnvironmentStringsW 0x1800b6140
FreeLibrary 0x1800b6300
FreeLibraryAndExitThread 0x1800b6368
GetACP 0x1800b6168
GetCommandLineA 0x1800b6158
GetCommandLineW 0x1800b6150
GetConsoleMode 0x1800b63b8
GetConsoleOutputCP 0x1800b6400
GetCPInfo 0x1800b6230
GetCurrentDirectoryW 0x1800b6130
GetCurrentProcess 0x1800b6280
GetCurrentProcessId 0x1800b6078
GetCurrentThreadId 0x1800b61d8
GetDriveTypeW 0x1800b6388
GetEnvironmentStringsW 0x1800b6148
GetFileAttributesExA 0x1800b6098
GetFileAttributesExW 0x1800b6418
GetFileInformationByHandle 0x1800b6390
GetFileSizeEx 0x1800b6408
GetFileType 0x1800b6308
GetFullPathNameW 0x1800b6128
GetLastError 0x1800b60e0
GetLocaleInfoW 0x1800b63d8
GetLocalTime 0x1800b60b8
GetModuleFileNameW 0x1800b6100
GetModuleHandleA 0x1800b6058
GetModuleHandleExW 0x1800b6370
GetModuleHandleW 0x1800b6068
GetOEMCP 0x1800b6160
GetPrivateProfileStringA 0x1800b6090
GetProcAddress 0x1800b6060
GetProcessHeap 0x1800b6070
GetStartupInfoW 0x1800b62a0
GetStdHandle 0x1800b62e8
GetStringTypeW 0x1800b6228
GetSystemDirectoryW 0x1800b62b8
GetSystemTimeAsFileTime 0x1800b6208
GetTickCount 0x1800b6080
GetTickCount64 0x1800b6210
GetTimeZoneInformation 0x1800b63b0
GetUserDefaultLCID 0x1800b63e8
GetUserDefaultUILanguage 0x1800b6050
HeapAlloc 0x1800b60c0
HeapFree 0x1800b6108
HeapReAlloc 0x1800b60d8
HeapSize 0x1800b60f0
InitializeCriticalSectionAndSpinCount 0x1800b6238
InitializeCriticalSectionEx 0x1800b60f8
InitializeSListHead 0x1800b6298
InitializeSRWLock 0x1800b61e0
InterlockedFlushSList 0x1800b6320
InterlockedPushEntrySList 0x1800b6318
IsDebuggerPresent 0x1800b6190
IsProcessorFeaturePresent 0x1800b6290
IsValidCodePage 0x1800b6170
IsValidLocale 0x1800b63e0
LCMapStringEx 0x1800b6220
LCMapStringW 0x1800b63d0
LeaveCriticalSection 0x1800b61a8
LoadLibraryExW 0x1800b6350
LoadLibraryW 0x1800b62c0
MultiByteToWideChar 0x1800b60e8
OutputDebugStringW 0x1800b6198
PeekNamedPipe 0x1800b62f8
QueryPerformanceCounter 0x1800b61b0
QueryPerformanceFrequency 0x1800b61b8
RaiseException 0x1800b60c8
ReadConsoleW 0x1800b63c0
ReadFile 0x1800b62e0
ReleaseSRWLockExclusive 0x1800b61e8
ResetEvent 0x1800b6248
RtlCaptureContext 0x1800b6258
RtlLookupFunctionEntry 0x1800b6260
RtlPcToFileHeader 0x1800b6328
RtlUnwind 0x1800b60a0
RtlUnwindEx 0x1800b6310
RtlVirtualUnwind 0x1800b6268
SetEndOfFile 0x1800b6118
SetEnvironmentVariableW 0x1800b6138
SetEvent 0x1800b6240
SetFilePointerEx 0x1800b63a8
SetLastError 0x1800b62a8
SetStdHandle 0x1800b6120
SetUnhandledExceptionFilter 0x1800b6278
Sleep 0x1800b61d0
SleepEx 0x1800b62b0
SystemTimeToTzSpecificLocalTime 0x1800b6398
TerminateProcess 0x1800b6288
TlsAlloc 0x1800b6330
TlsFree 0x1800b6348
TlsGetValue 0x1800b6338
TlsSetValue 0x1800b6340
TryEnterCriticalSection 0x1800b61f8
UnhandledExceptionFilter 0x1800b6270
VerifyVersionInfoW 0x1800b62d0
VerSetConditionMask 0x1800b62c8
WaitForMultipleObjects 0x1800b62f0
WaitForSingleObjectEx 0x1800b61c8
WideCharToMultiByte 0x1800b60d0
WriteConsoleW 0x1800b6110
WriteFile 0x1800b63f8
SHELL32.dll 2
SHCreateDirectoryExA 0x1800b6430
SHGetFolderPathA 0x1800b6428
SHLWAPI.dll 2
PathIsDirectoryA 0x1800b6448
PathIsRootA 0x1800b6440
USER32.dll 1
GetSystemMetrics 0x1800b6458
WLDAP32.dll 16
0x1800b64e0
0x1800b64d8
0x1800b64d0
0x1800b64c8
0x1800b64c0
0x1800b64b8
0x1800b64b0
0x1800b64a8
0x1800b6498
0x1800b64a0
0x1800b6468
0x1800b6470
0x1800b6478
0x1800b6480
0x1800b6488
0x1800b6490
WS2_32.dll 27
__WSAFDIsSet 0x1800b6570
accept 0x1800b65a8
bind 0x1800b6560
closesocket 0x1800b6550
connect 0x1800b6520
freeaddrinfo 0x1800b6580
getaddrinfo 0x1800b6588
gethostname 0x1800b65b0
getpeername 0x1800b6540
getsockname 0x1800b6538
getsockopt 0x1800b6518
htons 0x1800b6510
ioctlsocket 0x1800b6578
listen 0x1800b65a0
ntohs 0x1800b6528
recv 0x1800b64f8
recvfrom 0x1800b6598
select 0x1800b6568
send 0x1800b6500
sendto 0x1800b6590
setsockopt 0x1800b6508
socket 0x1800b6530
WSACleanup 0x1800b65b8
WSAGetLastError 0x1800b64f0
WSAIoctl 0x1800b6558
WSASetLastError 0x1800b6548
WSAStartup 0x1800b65c0