efsext.dll - Online Dependency Analysis & Download

Description

EFSEXT.DLL

Authors

File size

54.5 KB

Uploaded

2025-12-01 07:56

Views

SHA-256

794527871454cbcfedc494e2303ebdd1

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 12

EdpPlatform_QueryUserSessionState #1 · 0x4cc0

EdpPlatform_RegisterUserSessionNotification #2 · 0x4c80

EdpPlatform_ShowDialog #3 · 0x4aa0

EdpPlatform_ShowUI #4 · 0x4c50

EdpPlatform_UnregisterUserSessionNotification #5 · 0x4370

EfsPlatform_GetCallerID #6 · 0x4600

EfsPlatform_IsCallerAutomaticallyDelegated #7 · 0x4680

EfsPlatform_LaunchPromptUI #8 · 0x4740

EfsPlatform_SuspendNotificationsAndEncryptFile #9 · 0x4590

EfsPlatform_UnpackSecurePin #10 · 0x48d0

FVE_LaunchConsentPromptUI #11 · 0x4f20

FVE_LaunchSDCardUI #12 · 0x5070

Imported DLLs & functions 156

api-ms-win-appmodel-runtime-l1-1-0.dll 6

ClosePackageInfo 0x1000c0bc

GetCurrentPackageInfo 0x1000c0b0

GetPackageFamilyName 0x1000c0ac

GetPackageFullName 0x1000c0a8

GetPackageInfo 0x1000c0b4

OpenPackageInfoByFullName 0x1000c0b8

api-ms-win-core-com-l1-1-0.dll 8

CoCreateFreeThreadedMarshaler 0x1000c0c4

CoCreateInstance 0x1000c0e0

CoGetMalloc 0x1000c0d4

CoInitializeEx 0x1000c0cc

CoTaskMemAlloc 0x1000c0d0

CoTaskMemFree 0x1000c0c8

CoTaskMemRealloc 0x1000c0dc

CoUninitialize 0x1000c0d8

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x1000c0ec

IsDebuggerPresent 0x1000c0f0

OutputDebugStringW 0x1000c0e8

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x1000c0f8

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x1000c100

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x1000c10c

SetLastError 0x1000c110

SetUnhandledExceptionFilter 0x1000c114

UnhandledExceptionFilter 0x1000c108

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x1000c11c

api-ms-win-core-heap-l1-1-0.dll 3

GetProcessHeap 0x1000c12c

HeapAlloc 0x1000c124

HeapFree 0x1000c128

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x1000c138

LocalFree 0x1000c134

api-ms-win-core-libraryloader-l1-2-0.dll 8

FindResourceExW 0x1000c158

GetModuleFileNameA 0x1000c148

GetModuleHandleExW 0x1000c154

GetModuleHandleW 0x1000c144

GetProcAddress 0x1000c14c

LoadResource 0x1000c150

LoadStringW 0x1000c140

LockResource 0x1000c15c

api-ms-win-core-localization-l1-2-0.dll 1

FormatMessageW 0x1000c164

api-ms-win-core-processthreads-l1-1-0.dll 8

CreateProcessAsUserW 0x1000c16c

GetCurrentProcess 0x1000c188

GetCurrentProcessId 0x1000c180

GetCurrentThread 0x1000c170

GetCurrentThreadId 0x1000c17c

OpenProcessToken 0x1000c178

OpenThreadToken 0x1000c174

TerminateProcess 0x1000c184

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x1000c190

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x1000c198

api-ms-win-core-psapi-l1-1-0.dll 1

QueryFullProcessImageNameW 0x1000c1a0

api-ms-win-core-registry-l1-1-0.dll 5

RegCloseKey 0x1000c1b8

RegCreateKeyExW 0x1000c1ac

RegOpenCurrentUser 0x1000c1a8

RegOpenKeyExW 0x1000c1b0

RegQueryValueExW 0x1000c1b4

api-ms-win-core-registry-l1-1-1.dll 2

RegDeleteKeyValueW 0x1000c1c0

RegSetKeyValueW 0x1000c1c4

api-ms-win-core-string-l1-1-0.dll 1

CompareStringOrdinal 0x1000c1cc

api-ms-win-core-synch-l1-1-0.dll 9

CreateEventW 0x1000c1f0

CreateMutexExW 0x1000c1e8

CreateSemaphoreExW 0x1000c1ec

OpenSemaphoreW 0x1000c1e0

ReleaseMutex 0x1000c1d4

ReleaseSemaphore 0x1000c1d8

SetEvent 0x1000c1dc

WaitForSingleObject 0x1000c1e4

WaitForSingleObjectEx 0x1000c1f4

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x1000c1fc

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemTimeAsFileTime 0x1000c208

GetSystemWindowsDirectoryW 0x1000c204

GetTickCount 0x1000c20c

api-ms-win-eventing-classicprovider-l1-1-0.dll 1

TraceMessage 0x1000c214

api-ms-win-eventing-provider-l1-1-0.dll 4

EventRegister 0x1000c220

EventSetInformation 0x1000c228

EventUnregister 0x1000c224

EventWriteTransfer 0x1000c21c

api-ms-win-security-base-l1-1-0.dll 5

AllocateAndInitializeSid 0x1000c23c

DuplicateTokenEx 0x1000c238

EqualSid 0x1000c230

FreeSid 0x1000c240

GetTokenInformation 0x1000c234

api-ms-win-security-credentials-l1-1-0.dll 1

CredUnprotectW 0x1000c248

api-ms-win-security-sddl-l1-1-0.dll 1

ConvertStringSidToSidW 0x1000c250

api-ms-win-service-management-l1-1-0.dll 4

CloseServiceHandle 0x1000c25c

OpenSCManagerW 0x1000c260

OpenServiceW 0x1000c258

StartServiceW 0x1000c264

api-ms-win-service-winsvc-l1-1-0.dll 1

QueryServiceStatus 0x1000c26c

api-ms-win-shcore-taskpool-l1-1-0.dll 1

SHTaskPoolQueueTask 0x1000c274

CRYPT32.dll 2

CryptBinaryToStringW 0x1000c004

CryptStringToBinaryA 0x1000c000

DUI70.dll 20

?_ZeroRelease@Value@DirectUI@@AAEXXZ 0x1000c028

?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z 0x1000c03c

?Click@TouchButton@DirectUI@@SG?AVUID@@XZ 0x1000c038

?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z 0x1000c048

?CreateBool@Value@DirectUI@@SGPAV12@_N@Z 0x1000c024

?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z 0x1000c040

?Destroy@DUIXmlParser@DirectUI@@QAEXXZ 0x1000c04c

?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z 0x1000c058

?GetCheckedState@TouchCheckBox@DirectUI@@QAE?AW4CheckedStateFlags@2@XZ 0x1000c030

?GetClassInfoPtr@TouchCheckBox@DirectUI@@SGPAUIClassInfo@2@XZ 0x1000c00c

?GetClassInfoPtr@TouchHyperLink@DirectUI@@SGPAUIClassInfo@2@XZ 0x1000c010

?MultipleClick@TouchButton@DirectUI@@SG?AVUID@@XZ 0x1000c034

?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z 0x1000c020

?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z 0x1000c044

?VisibleProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ 0x1000c01c

InitProcessPriv 0x1000c018

InitThread 0x1000c050

StrToID 0x1000c02c

UnInitProcessPriv 0x1000c014

UnInitThread 0x1000c054

msvcrt.dll 25

__CxxFrameHandler3 0x1000c290

__dllonexit 0x1000c28c

_amsg_exit 0x1000c2a0

_callnewh 0x1000c2cc

_CxxThrowException 0x1000c2b4

_except_handler4_common 0x1000c280

_initterm 0x1000c298

_lock 0x1000c294

_onexit 0x1000c288

_purecall 0x1000c2ac

_unlock 0x1000c2d8

_vsnprintf_s 0x1000c2b8

_vsnwprintf 0x1000c2c0

_XcptFilter 0x1000c2a4

??0exception@@QAE@ABV0@@Z 0x1000c2c8

??0exception@@QAE@XZ 0x1000c2c4

??1exception@@UAE@XZ 0x1000c2d4

??1type_info@@UAE@XZ 0x1000c284

free 0x1000c2a8

malloc 0x1000c29c

memcpy 0x1000c27c

memcpy_s 0x1000c2bc

memset 0x1000c2dc

wcschr 0x1000c2d0

wcsncmp 0x1000c2b0

ntdll.dll 6

NtQueryInformationToken 0x1000c2e8

RtlAllocateHeap 0x1000c2f0

RtlCompareUnicodeString 0x1000c2f8

RtlFreeHeap 0x1000c2e4

RtlInitUnicodeString 0x1000c2ec

RtlNtStatusToDosErrorNoTeb 0x1000c2f4

RPCRT4.dll 8

NdrClientCall4 0x1000c078

RpcBindingFree 0x1000c07c

RpcBindingFromStringBindingW 0x1000c068

RpcBindingSetAuthInfoExW 0x1000c070

RpcImpersonateClient 0x1000c064

RpcRevertToSelf 0x1000c060

RpcStringBindingComposeW 0x1000c06c

RpcStringFreeW 0x1000c074

SHELL32.dll 6

0x1000c084

0x1000c08c

0x1000c094

SHChangeNotifySuspendResume 0x1000c090

ShellExecuteExW 0x1000c088

ShellExecuteW 0x1000c098

USER32.dll 1

MsgWaitForMultipleObjects 0x1000c0a0