efsadu.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Download
Description
File Encryption Utility
Authors
© Microsoft Corporation. All rights reserved.
File size
106.5 KB
Uploaded
2025-12-01 07:56
Views
58
SHA-256
4b9534f14e97a8ab403b85b26007ce89

Exported functions 14

AddUserToObjectW #1 · 0xb460
BackCurrentEfsCert #2 · 0xb2f0
EfsDetail #3 · 0x9050
EfsUIUtilCheckScardStatus #4 · 0x8ac0
EfsUIUtilCreateSelfSignedCertificate #5 · 0x8a40
EfsUIUtilEncryptMyDocuments #6 · 0x8c00
EfsUIUtilEnrollEfsCertificate #7 · 0x8be0
EfsUIUtilEnrollEfsCertificateEx #8 · 0x8b70
EfsUIUtilInstallDra #9 · 0x82d0
EfsUIUtilKeyBackup #10 · 0x8540
EfsUIUtilPromptForPin #11 · 0x8720
EfsUIUtilPromptForPinDialog #12 · 0x8510
EfsUIUtilSelectCard #13 · 0x8750
EfsUIUtilShowBalloonAndWait #14 · 0x84e0

Imported DLLs & functions 360

ADVAPI32.dll 16
AddUsersToEncryptedFile 0x67bb3018
ConvertStringSidToSidW 0x67bb3034
CryptSetProvParam 0x67bb3000
EncryptFileW 0x67bb303c
EventWriteTransfer 0x67bb3038
FreeEncryptionCertificateHashList 0x67bb3014
LsaClose 0x67bb302c
LsaFreeMemory 0x67bb3028
LsaLookupSids 0x67bb3024
LsaOpenPolicy 0x67bb3020
QueryRecoveryAgentsOnEncryptedFile 0x67bb3010
QueryUsersOnEncryptedFile 0x67bb300c
RegGetValueW 0x67bb3030
RemoveUsersFromEncryptedFile 0x67bb301c
SetUserFileEncryptionKeyEx 0x67bb3004
UsePinForEncryptedFilesW 0x67bb3008
api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x67bb33fc
CoInitializeEx 0x67bb33f8
CoTaskMemAlloc 0x67bb33ec
CoTaskMemFree 0x67bb33f4
CoUninitialize 0x67bb33f0
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x67bb340c
IsDebuggerPresent 0x67bb3408
OutputDebugStringA 0x67bb3410
OutputDebugStringW 0x67bb3404
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x67bb3418
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x67bb3420
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x67bb3430
SetLastError 0x67bb3428
SetUnhandledExceptionFilter 0x67bb3434
UnhandledExceptionFilter 0x67bb342c
api-ms-win-core-file-l1-1-0.dll 5
FindClose 0x67bb343c
FindFirstFileExW 0x67bb3444
FindNextFileW 0x67bb3440
GetFileAttributesW 0x67bb344c
GetFullPathNameW 0x67bb3448
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x67bb3454
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x67bb345c
HeapAlloc 0x67bb3464
HeapFree 0x67bb3460
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x67bb3470
LocalFree 0x67bb346c
api-ms-win-core-libraryloader-l1-2-0.dll 7
GetModuleFileNameA 0x67bb3488
GetModuleFileNameW 0x67bb3484
GetModuleHandleA 0x67bb3480
GetModuleHandleExW 0x67bb3490
GetModuleHandleW 0x67bb347c
GetProcAddress 0x67bb348c
LoadStringW 0x67bb3478
api-ms-win-core-libraryloader-l1-2-1.dll 2
LoadLibraryA 0x67bb3498
LoadLibraryW 0x67bb349c
api-ms-win-core-localization-l1-2-0.dll 4
FormatMessageW 0x67bb34a8
GetLocaleInfoEx 0x67bb34a4
GetUserPreferredUILanguages 0x67bb34ac
IdnToAscii 0x67bb34b0
api-ms-win-core-processenvironment-l1-1-0.dll 2
GetCurrentDirectoryW 0x67bb34bc
SetCurrentDirectoryW 0x67bb34b8
api-ms-win-core-processthreads-l1-1-0.dll 8
CreateThread 0x67bb34c4
GetCurrentProcess 0x67bb34dc
GetCurrentProcessId 0x67bb34e0
GetCurrentThread 0x67bb34d4
GetCurrentThreadId 0x67bb34cc
OpenProcessToken 0x67bb34d8
OpenThreadToken 0x67bb34c8
TerminateProcess 0x67bb34d0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x67bb34e8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x67bb34f4
RegCreateKeyExW 0x67bb3500
RegOpenKeyExW 0x67bb34fc
RegQueryValueExW 0x67bb34f8
RegSetValueExW 0x67bb34f0
api-ms-win-core-synch-l1-1-0.dll 10
AcquireSRWLockExclusive 0x67bb3514
CreateMutexExW 0x67bb3518
CreateSemaphoreExW 0x67bb351c
OpenEventW 0x67bb3510
OpenSemaphoreW 0x67bb352c
ReleaseMutex 0x67bb3524
ReleaseSemaphore 0x67bb3520
ReleaseSRWLockExclusive 0x67bb350c
WaitForSingleObject 0x67bb3528
WaitForSingleObjectEx 0x67bb3508
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x67bb3534
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x67bb353c
GetTickCount 0x67bb3540
api-ms-win-eventing-provider-l1-1-0.dll 6
EventEnabled 0x67bb354c
EventProviderEnabled 0x67bb3550
EventRegister 0x67bb3554
EventSetInformation 0x67bb3558
EventUnregister 0x67bb3548
EventWrite 0x67bb355c
api-ms-win-security-base-l1-1-0.dll 5
CheckTokenMembership 0x67bb3574
CopySid 0x67bb3564
EqualSid 0x67bb356c
GetLengthSid 0x67bb3568
GetTokenInformation 0x67bb3570
api-ms-win-security-credentials-l1-1-0.dll 2
CredFree 0x67bb3580
CredMarshalCredentialW 0x67bb357c
api-ms-win-service-management-l1-1-0.dll 3
CloseServiceHandle 0x67bb3590
OpenSCManagerW 0x67bb358c
OpenServiceW 0x67bb3588
api-ms-win-service-management-l2-1-0.dll 1
ChangeServiceConfigW 0x67bb3598
credui.dll 3
CredPackAuthenticationBufferW 0x67bb35a0
CredUIPromptForWindowsCredentialsW 0x67bb35a8
CredUnPackAuthenticationBufferW 0x67bb35a4
CRYPT32.dll 21
CertAddCertificateContextToStore 0x67bb3078
CertAddCertificateLinkToStore 0x67bb3054
CertCloseStore 0x67bb3084
CertCreateCertificateContext 0x67bb3094
CertEnumCertificatesInStore 0x67bb3058
CertFindCertificateInStore 0x67bb3088
CertFindExtension 0x67bb3064
CertFreeCertificateChain 0x67bb3090
CertFreeCertificateContext 0x67bb307c
CertGetCertificateChain 0x67bb3050
CertGetCertificateContextProperty 0x67bb3074
CertGetEnhancedKeyUsage 0x67bb3068
CertGetNameStringW 0x67bb305c
CertOpenStore 0x67bb308c
CertSetCertificateContextProperty 0x67bb3070
CertVerifyCertificateChainPolicy 0x67bb304c
CertVerifyTimeValidity 0x67bb306c
CryptBinaryToStringW 0x67bb3080
CryptDecodeObject 0x67bb3060
CryptEncodeObjectEx 0x67bb3044
CryptStringToBinaryW 0x67bb3048
CRYPTUI.dll 2
CryptUIDlgSelectCertificateW 0x67bb309c
CryptUIWizExport 0x67bb30a0
DSROLE.dll 2
DsRoleFreeMemory 0x67bb30a8
DsRoleGetPrimaryDomainInformation 0x67bb30ac
EFSUTIL.dll 11
EfsUtilApplyGroupPolicy 0x67bb30c8
EfsUtilCheckCurrentKeyCapabilities 0x67bb30b8
EfsUtilCreateSelfSignedCertificate 0x67bb30d0
EfsUtilGetCertContextFromCertHash 0x67bb30c4
EfsUtilGetCurrentKey 0x67bb30d4
EfsUtilGetCurrentUserInformation 0x67bb30cc
EfsUtilGetSmartcardProviderName 0x67bb30dc
EfsUtilGetUserKey 0x67bb30c0
EfsUtilReleaseUserKey 0x67bb30b4
EfsUtilSetSmartcardPin 0x67bb30bc
EfsUtilSmartcardCredsNeededError 0x67bb30d8
FeClient.dll 4
EfsClientFreeKeyInfo 0x67bb30ec
EfsClientFreeProtectorList 0x67bb30e8
EfsClientGetKeyInfo 0x67bb30f0
EfsClientQueryProtectors 0x67bb30e4
KERNEL32.dll 8
DeleteCriticalSection 0x67bb310c
EnterCriticalSection 0x67bb3100
FreeLibrary 0x67bb3110
GetComputerNameW 0x67bb30f8
InitializeCriticalSection 0x67bb3108
LeaveCriticalSection 0x67bb3104
LoadLibraryExW 0x67bb3114
lstrlenW 0x67bb30fc
logoncli.dll 1
DsGetDcNameW 0x67bb35b0
MFC42u.dll 126
0x67bb311c
0x67bb3120
0x67bb3124
0x67bb3128
0x67bb312c
0x67bb3130
0x67bb3134
0x67bb3138
0x67bb313c
0x67bb3140
0x67bb3144
0x67bb3148
0x67bb314c
0x67bb3150
0x67bb3154
0x67bb3158
0x67bb315c
0x67bb3160
0x67bb3164
0x67bb3168
0x67bb316c
0x67bb3170
0x67bb3174
0x67bb3178
0x67bb317c
0x67bb3180
0x67bb3184
0x67bb3188
0x67bb318c
0x67bb3190
0x67bb3194
0x67bb3198
0x67bb319c
0x67bb31a0
0x67bb31a4
0x67bb31a8
0x67bb31ac
0x67bb31b0
0x67bb31b4
0x67bb31b8
0x67bb31bc
0x67bb31c0
0x67bb31c4
0x67bb31c8
0x67bb31cc
0x67bb31d0
0x67bb31d4
0x67bb31d8
0x67bb31dc
0x67bb31e0
0x67bb31e4
0x67bb31e8
0x67bb31ec
0x67bb31f0
0x67bb31f4
0x67bb31f8
0x67bb31fc
0x67bb3200
0x67bb3204
0x67bb3208
0x67bb320c
0x67bb3210
0x67bb3214
0x67bb3218
0x67bb321c
0x67bb3220
0x67bb3224
0x67bb3228
0x67bb322c
0x67bb3230
0x67bb3234
0x67bb3238
0x67bb323c
0x67bb3240
0x67bb3244
0x67bb3248
0x67bb324c
0x67bb3250
0x67bb3254
0x67bb3258
0x67bb325c
0x67bb3260
0x67bb3264
0x67bb3268
0x67bb326c
0x67bb3270
0x67bb3274
0x67bb3278
0x67bb327c
0x67bb3280
0x67bb3284
0x67bb3288
0x67bb328c
0x67bb3290
0x67bb3294
0x67bb3298
0x67bb329c
0x67bb32a0
0x67bb32a4
0x67bb32a8
0x67bb32ac
0x67bb32b0
0x67bb32b4
0x67bb32b8
0x67bb32bc
0x67bb32c0
0x67bb32c4
0x67bb32c8
0x67bb32cc
0x67bb32d0
0x67bb32d4
0x67bb32d8
0x67bb32dc
0x67bb32e0
0x67bb32e4
0x67bb32e8
0x67bb32ec
0x67bb32f0
0x67bb32f4
0x67bb32f8
0x67bb32fc
0x67bb3300
0x67bb3304
0x67bb3308
0x67bb330c
0x67bb3310
msvcrt.dll 29
__CxxFrameHandler3 0x67bb35e0
__dllonexit 0x67bb35e8
_amsg_exit 0x67bb35f8
_CxxThrowException 0x67bb3610
_except_handler4_common 0x67bb35dc
_initterm 0x67bb35f4
_lock 0x67bb35f0
_ltow_s 0x67bb3604
_onexit 0x67bb35e4
_unlock 0x67bb35ec
_vsnprintf_s 0x67bb3624
_vsnwprintf 0x67bb35c4
_wcsicmp 0x67bb3600
_wcsnicmp 0x67bb3618
_XcptFilter 0x67bb35fc
??_V@YAXPAX@Z 0x67bb35c8
??0exception@@QAE@ABV0@@Z 0x67bb35d4
??0exception@@QAE@XZ 0x67bb35d0
??1exception@@UAE@XZ 0x67bb35c0
??1type_info@@UAE@XZ 0x67bb3628
free 0x67bb3608
malloc 0x67bb360c
memcmp 0x67bb3614
memcpy 0x67bb35d8
memcpy_s 0x67bb35bc
memmove 0x67bb35cc
memset 0x67bb35b8
toupper 0x67bb3620
wcsncmp 0x67bb361c
netutils.dll 1
NetApiBufferFree 0x67bb3630
ntdll.dll 4
NtQueryInformationToken 0x67bb3640
RtlAllocateAndInitializeSid 0x67bb363c
RtlFreeSid 0x67bb3644
RtlNtStatusToDosError 0x67bb3638
ole32.dll 1
CoInitialize 0x67bb364c
OLEAUT32.dll 3
SysAllocString 0x67bb3320
SysFreeString 0x67bb3318
SysStringByteLen 0x67bb331c
RPCRT4.dll 5
RpcStringFreeW 0x67bb3330
UuidCreate 0x67bb3338
UuidCreateNil 0x67bb332c
UuidFromStringW 0x67bb3328
UuidToStringW 0x67bb3334
SHELL32.dll 6
0x67bb3348
0x67bb3354
SHChangeNotifySuspendResume 0x67bb334c
SHCreateItemFromParsingName 0x67bb3344
Shell_NotifyIconW 0x67bb3340
SHGetFolderPathW 0x67bb3350
SHLWAPI.dll 2
0x67bb3360
StrDupW 0x67bb335c
urlmon.dll 1
CreateUri 0x67bb3654
USER32.dll 14
DefWindowProcW 0x67bb339c
DestroyWindow 0x67bb338c
DispatchMessageW 0x67bb3368
EnableWindow 0x67bb3398
GetClientRect 0x67bb3390
GetMessageW 0x67bb3380
KillTimer 0x67bb3374
LoadIconW 0x67bb3370
MessageBoxW 0x67bb3388
PostMessageW 0x67bb3384
PostQuitMessage 0x67bb336c
SendMessageW 0x67bb3394
SetTimer 0x67bb337c
TranslateMessage 0x67bb3378
USERENV.dll 1
RefreshPolicy 0x67bb33a4
VAULTCLI.dll 4
VaultCloseVault 0x67bb33b4
VaultFree 0x67bb33b0
VaultGetItem 0x67bb33b8
VaultOpenVault 0x67bb33ac
WLDAP32.dll 10
0x67bb33c0
0x67bb33c4
0x67bb33c8
0x67bb33cc
0x67bb33d0
0x67bb33d4
0x67bb33d8
0x67bb33dc
0x67bb33e0
0x67bb33e4