keyiso.dll

v10.0.19041.5438 32-bit Windows NT Analyzed
Description
CNG Key Isolation Service
Authors
© Microsoft Corporation. All rights reserved.
File size
65.5 KB
Uploaded
2025-12-01 07:59
Views
44
SHA-256
9c0d571b79170575d061e7e09c8f8a85

Exported functions 2

KeyIsoServiceMain #1 · 0x60d0
KeyIsoSetAuditingInterface #2 · 0xe904

Imported DLLs & functions 91

GetLastError 0x10010038
SetLastError 0x1001003c
CloseHandle 0x10010044
DuplicateHandle 0x10010048
LocalAlloc 0x10010050
LocalFree 0x10010054
FreeLibrary 0x10010060
GetModuleFileNameW 0x1001006c
GetModuleHandleExW 0x10010064
GetProcAddress 0x1001005c
LoadLibraryExW 0x10010068
ExpandEnvironmentStringsW 0x10010074
GetCurrentProcess 0x1001007c
GetCurrentThread 0x10010084
OpenProcessToken 0x10010080
OpenThreadToken 0x10010088
RegCloseKey 0x10010094
RegOpenKeyExW 0x10010090
RegQueryValueExW 0x10010098
AcquireSRWLockExclusive 0x100100a0
AcquireSRWLockShared 0x100100b4
CreateEventW 0x100100ac
DeleteCriticalSection 0x100100b0
EnterCriticalSection 0x100100c0
InitializeCriticalSection 0x100100a4
InitializeSRWLock 0x100100bc
LeaveCriticalSection 0x100100c4
ReleaseSRWLockExclusive 0x100100b8
ReleaseSRWLockShared 0x100100c8
SetEvent 0x100100a8
GetSystemDirectoryW 0x100100d0
DuplicateTokenEx 0x100100d8
EqualSid 0x100100e0
GetTokenInformation 0x100100e4
IsWellKnownSid 0x100100dc
CapabilityCheck 0x100100ec
ConvertSidToStringSidW 0x100100f8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100100fc
ConvertStringSidToSidW 0x100100f4
RegisterServiceCtrlHandlerExW 0x10010108
SetServiceStatus 0x10010104
BCryptDestroyKey 0x10010120
BCryptExportKey 0x10010114
BCryptFinalizeKeyPair 0x10010124
BCryptFreeBuffer 0x10010118
BCryptGenerateKeyPair 0x1001011c
BCryptResolveProviders 0x10010110
SystemFunction040 0x10010000
NCryptFreeObject 0x1001012c
NCryptImportKey 0x10010138
NCryptOpenStorageProvider 0x10010130
NCryptSetProperty 0x10010134
_wcsicmp 0x10010180
EtwGetTraceEnableFlags 0x1001016c
EtwGetTraceEnableLevel 0x10010198
EtwGetTraceLoggerHandle 0x100101a4
EtwRegisterTraceGuidsW 0x10010168
EtwTraceMessage 0x100101a0
EtwUnregisterTraceGuids 0x10010190
LdrDisableThreadCalloutsForDll 0x1001015c
memcpy 0x10010158
memset 0x100101ac
NtAdjustPrivilegesToken 0x10010150
NtClose 0x100101a8
NtOpenProcess 0x10010164
NtQueryInformationToken 0x10010188
NtTerminateProcess 0x1001019c
RtlAllocateHeap 0x10010170
RtlCompareUnicodeString 0x1001017c
RtlDeleteCriticalSection 0x10010194
RtlEnterCriticalSection 0x10010144
RtlFreeHeap 0x10010178
RtlInitializeCriticalSection 0x10010148
RtlInitUnicodeString 0x10010184
RtlIsMultiSessionSku 0x1001018c
RtlLeaveCriticalSection 0x10010140
RtlNtStatusToDosError 0x10010154
RtlSizeHeap 0x10010174
RtlUnhandledExceptionFilter 0x1001014c
RtlUnwind 0x10010160
I_RpcBindingInqLocalClientPID 0x10010024
NdrServerCall2 0x1001000c
RpcBindingVectorFree 0x10010008
RpcEpRegisterW 0x10010030
RpcEpUnregister 0x1001002c
RpcImpersonateClient 0x10010018
RpcRevertToSelf 0x10010020
RpcServerInqBindings 0x10010028
RpcServerRegisterIf3 0x10010010
RpcServerUnregisterIfEx 0x10010014
RpcServerUseProtseqW 0x1001001c