consumeresumgr.dll

vUnknown 64-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
673.0 KB
Uploaded
2025-12-01 08:11
Views
77
SHA-256
d963644e1fd1469ea5e395c589ed31ff

Exported functions 17

EnrollUsingBackupV1 #1 · 0xdb10
EnrollUsingBackupV2 #2 · 0x10aa0
EnrollUsingBingRewardsV1 #3 · 0xe5b0
EnrollUsingBingRewardsV2 #4 · 0x11530
EnrollUsingMicrosoftAccountV1 #5 · 0xf120
EnrollUsingMicrosoftAccountV2 #6 · 0x120e0
EnrollUsingPurchaseForEEAV1 #7 · 0xcad0
EnrollUsingPurchaseForEEAV2 #8 · 0xd2f0
EnrollUsingPurchaseV1 #9 · 0xbd20
EnrollUsingPurchaseV2 #10 · 0x12ce0
GetBingRewardsESUOfferPriceV1 #11 · 0xbbc0
GetBingRewardsPointsV1 #12 · 0xba60
GetCachedEligibilityStatus #13 · 0xb3f0
GetESUEligibilityStatusV1 #14 · 0xb900
GetESUEligibilityStatusV2 #15 · 0x12b80
RunESUEnrollmentV1 #16 · 0xfbc0
RunESUEnrollmentV2 #17 · 0x10330

Imported DLLs & functions 298

api-ms-win-appmodel-runtime-l1-1-0.dll 1
PackageNameAndPublisherIdFromFamilyName 0x18007b968
api-ms-win-core-com-l1-1-0.dll 12
CoCreateFreeThreadedMarshaler 0x18007b9b8
CoCreateGuid 0x18007b998
CoCreateInstance 0x18007b988
CoIncrementMTAUsage 0x18007b9c8
CoInitializeEx 0x18007b9c0
CoInitializeSecurity 0x18007b9a0
CoQueryProxyBlanket 0x18007b9d0
CoSetProxyBlanket 0x18007b990
CoUninitialize 0x18007b978
CoWaitForMultipleHandles 0x18007b9a8
IIDFromString 0x18007b9b0
StringFromGUID2 0x18007b980
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18007b9e0
IsDebuggerPresent 0x18007b9e8
OutputDebugStringW 0x18007b9f0
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18007ba00
RaiseException 0x18007ba08
SetLastError 0x18007ba18
SetUnhandledExceptionFilter 0x18007ba20
UnhandledExceptionFilter 0x18007ba10
api-ms-win-core-file-l1-1-0.dll 1
CompareFileTime 0x18007ba30
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18007ba40
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18007ba58
HeapAlloc 0x18007ba60
HeapFree 0x18007ba50
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18007ba70
LocalFree 0x18007ba78
api-ms-win-core-interlocked-l1-1-0.dll 2
InitializeSListHead 0x18007ba88
InterlockedPushEntrySList 0x18007ba90
api-ms-win-core-libraryloader-l1-2-0.dll 6
FreeLibrary 0x18007baa8
GetModuleFileNameA 0x18007bac0
GetModuleFileNameW 0x18007bab0
GetModuleHandleExW 0x18007bac8
GetModuleHandleW 0x18007baa0
GetProcAddress 0x18007bab8
api-ms-win-core-localization-l1-2-0.dll 3
FormatMessageW 0x18007bad8
GetUserGeoID 0x18007bae0
LCMapStringEx 0x18007bae8
api-ms-win-core-processthreads-l1-1-0.dll 5
GetCurrentProcess 0x18007bb18
GetCurrentProcessId 0x18007bb00
GetCurrentThreadId 0x18007bb08
OpenProcessToken 0x18007baf8
TerminateProcess 0x18007bb10
api-ms-win-core-processthreads-l1-1-1.dll 2
GetProcessMitigationPolicy 0x18007bb28
IsProcessorFeaturePresent 0x18007bb30
api-ms-win-core-profile-l1-1-0.dll 2
QueryPerformanceCounter 0x18007bb40
QueryPerformanceFrequency 0x18007bb48
api-ms-win-core-registry-l1-1-0.dll 10
RegCloseKey 0x18007bb88
RegCreateKeyExW 0x18007bb80
RegDeleteValueW 0x18007bb60
RegGetValueW 0x18007bb90
RegLoadKeyW 0x18007bb98
RegOpenCurrentUser 0x18007bb70
RegOpenKeyExW 0x18007bba0
RegQueryValueExW 0x18007bb58
RegSetValueExW 0x18007bb78
RegUnLoadKeyW 0x18007bb68
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18007bbb0
RtlLookupFunctionEntry 0x18007bbc0
RtlVirtualUnwind 0x18007bbb8
api-ms-win-core-string-obsolete-l1-1-0.dll 2
lstrcmpiW 0x18007bbd8
lstrcmpW 0x18007bbd0
api-ms-win-core-synch-l1-1-0.dll 20
AcquireSRWLockExclusive 0x18007bc40
AcquireSRWLockShared 0x18007bc00
CreateEventExW 0x18007bc58
CreateEventW 0x18007bbe8
CreateMutexExW 0x18007bc08
CreateSemaphoreExW 0x18007bc68
DeleteCriticalSection 0x18007bbf8
EnterCriticalSection 0x18007bc18
InitializeCriticalSectionAndSpinCount 0x18007bc80
InitializeCriticalSectionEx 0x18007bc78
LeaveCriticalSection 0x18007bc48
OpenSemaphoreW 0x18007bc30
ReleaseMutex 0x18007bc60
ReleaseSemaphore 0x18007bc28
ReleaseSRWLockExclusive 0x18007bc50
ReleaseSRWLockShared 0x18007bc20
ResetEvent 0x18007bbf0
SetEvent 0x18007bc10
WaitForSingleObject 0x18007bc70
WaitForSingleObjectEx 0x18007bc38
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x18007bca0
InitOnceComplete 0x18007bc90
Sleep 0x18007bc98
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetSystemTimeAsFileTime 0x18007bcb0
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetProductInfo 0x18007bcc0
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18007bce0
CreateThreadpoolTimer 0x18007bcd0
SetThreadpoolTimer 0x18007bcd8
WaitForThreadpoolTimerCallbacks 0x18007bce8
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x18007bcf8
SystemTimeToFileTime 0x18007bd00
api-ms-win-core-winrt-error-l1-1-0.dll 1
GetRestrictedErrorInfo 0x18007bd10
api-ms-win-core-winrt-error-l1-1-1.dll 1
RoOriginateLanguageException 0x18007bd20
api-ms-win-core-winrt-l1-1-0.dll 2
RoActivateInstance 0x18007bd38
RoGetActivationFactory 0x18007bd30
api-ms-win-core-winrt-string-l1-1-0.dll 7
WindowsCompareStringOrdinal 0x18007bd78
WindowsCreateString 0x18007bd70
WindowsCreateStringReference 0x18007bd60
WindowsDeleteString 0x18007bd58
WindowsGetStringLen 0x18007bd68
WindowsGetStringRawBuffer 0x18007bd50
WindowsIsStringEmpty 0x18007bd48
api-ms-win-crt-private-l1-1-0.dll 52
__C_specific_handler 0x18007be80
__CxxFrameHandler3 0x18007bf20
__CxxFrameHandler4 0x18007bf08
__std_terminate 0x18007bf00
_CxxThrowException 0x18007be88
_o___std_exception_copy 0x18007bef8
_o___std_exception_destroy 0x18007bef0
_o___std_type_info_destroy_list 0x18007bee8
_o___stdio_common_vsnprintf_s 0x18007bee0
_o___stdio_common_vsprintf_s 0x18007bed8
_o___stdio_common_vswprintf 0x18007bed0
_o___stdio_common_vswprintf_s 0x18007bec8
_o__callnewh 0x18007bec0
_o__cexit 0x18007beb8
_o__configure_narrow_argv 0x18007beb0
_o__crt_atexit 0x18007bea8
_o__errno 0x18007bea0
_o__execute_onexit_table 0x18007be98
_o__fseeki64 0x18007be90
_o__initialize_narrow_environment 0x18007bd88
_o__initialize_onexit_table 0x18007bd90
_o__invalid_parameter_noinfo 0x18007bd98
_o__invalid_parameter_noinfo_noreturn 0x18007bda0
_o__localtime64 0x18007bda8
_o__lock_file 0x18007bdb0
_o__mkgmtime64 0x18007bdb8
_o__purecall 0x18007bdc0
_o__register_onexit_function 0x18007bdc8
_o__seh_filter_dll 0x18007bdd0
_o__unlock_file 0x18007bdd8
_o_fclose 0x18007bde8
_o_fflush 0x18007bdf0
_o_fgetc 0x18007bdf8
_o_fgetpos 0x18007be00
_o_fgetwc 0x18007be08
_o_fputwc 0x18007be10
_o_free 0x18007be18
_o_fsetpos 0x18007be20
_o_fwrite 0x18007be28
_o_malloc 0x18007be30
_o_mbstowcs 0x18007be38
_o_setvbuf 0x18007be40
_o_terminate 0x18007be48
_o_towlower 0x18007be50
_o_ungetc 0x18007be58
_o_ungetwc 0x18007be60
_o_wcsftime 0x18007be68
_o_wcstoll 0x18007be70
_o_wcstoull 0x18007be78
memcmp 0x18007bf10
memcpy 0x18007bf18
memmove 0x18007bde0
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x18007bf30
_initterm_e 0x18007bf38
api-ms-win-crt-string-l1-1-0.dll 3
memset 0x18007bf48
wcscmp 0x18007bf50
wcsnlen 0x18007bf58
api-ms-win-crt-time-l1-1-0.dll 1
_time64 0x18007bf68
api-ms-win-eventing-provider-l1-1-0.dll 4
EventRegister 0x18007bf88
EventSetInformation 0x18007bf80
EventUnregister 0x18007bf78
EventWriteTransfer 0x18007bf90
api-ms-win-security-base-l1-1-0.dll 4
CheckTokenMembership 0x18007bfa8
CreateWellKnownSid 0x18007bfb0
DuplicateToken 0x18007bfb8
GetTokenInformation 0x18007bfa0
api-ms-win-security-cryptoapi-l1-1-0.dll 10
CryptAcquireContextW 0x18007c010
CryptCreateHash 0x18007bfc8
CryptDecrypt 0x18007bfd0
CryptDestroyHash 0x18007bfe8
CryptDestroyKey 0x18007bff0
CryptEncrypt 0x18007bfe0
CryptGetHashParam 0x18007bff8
CryptHashData 0x18007bfd8
CryptImportKey 0x18007c008
CryptReleaseContext 0x18007c000
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertSidToStringSidW 0x18007c020
CLIPC.dll 6
ClipClose 0x18007b8a8
ClipGetFileIdFromAssociateId 0x18007b8a0
ClipGetQueryResults 0x18007b8b0
ClipOpen 0x18007b8b8
ClipQueryAssociateId 0x18007b8c8
ClipUninstallLicense 0x18007b8c0
CRYPT32.dll 9
CertCloseStore 0x18007b8f8
CertDuplicateCertificateContext 0x18007b918
CertFindCertificateInStore 0x18007b8e8
CertFindExtension 0x18007b8e0
CertFreeCertificateContext 0x18007b910
CertGetCertificateContextProperty 0x18007b8d8
CertOpenStore 0x18007b8f0
CryptBinaryToStringW 0x18007b908
CryptDecodeObjectEx 0x18007b900
MDMRegistration.DLL 1
IsDeviceRegisteredWithManagement 0x18007b928
msvcp_win.dll 91
_Query_perf_counter 0x18007c230
_Query_perf_frequency 0x18007c238
_Xtime_get_ticks 0x18007c1a0
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z 0x18007c1a8
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x18007c100
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z 0x18007c2b0
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18007c260
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18007c2c8
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z 0x18007c200
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ 0x18007c188
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ 0x18007c278
?_Incref@facet@locale@std@@UEAAXXZ 0x18007c108
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ 0x18007c290
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x18007c0e0
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z 0x18007c1f8
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x18007c060
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ 0x18007c2d8
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z 0x18007c0d8
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ 0x18007c118
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ 0x18007c148
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ 0x18007c040
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ 0x18007c150
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ 0x18007c068
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ 0x18007c2d0
?_Xbad_alloc@std@@YAXXZ 0x18007c220
?_Xlength_error@std@@YAXPEBD@Z 0x18007c1e0
?_Xout_of_range@std@@YAXPEBD@Z 0x18007c300
??0_Lockit@std@@QEAA@H@Z 0x18007c190
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x18007c030
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ 0x18007c160
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x18007c048
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z 0x18007c138
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z 0x18007c280
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ 0x18007c1b8
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ 0x18007c168
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z 0x18007c0f0
??1_Lockit@std@@QEAA@XZ 0x18007c198
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18007c050
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x18007c130
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18007c0c0
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x18007c2e8
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x18007c270
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ 0x18007c058
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ 0x18007c2f0
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ 0x18007c2f8
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z 0x18007c0e8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z 0x18007c0b0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x18007c0a8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z 0x18007c0b8
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z 0x18007c0d0
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z 0x18007c1d8
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z 0x18007c0c8
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z 0x18007c268
??Bid@locale@std@@QEAA_KXZ 0x18007c2b8
?always_noconv@codecvt_base@std@@QEBA_NXZ 0x18007c240
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ 0x18007c1b0
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ 0x18007c140
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z 0x18007c038
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z 0x18007c158
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBG4@Z 0x18007c1f0
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ 0x18007c2a0
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ 0x18007c110
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A 0x18007c2a8
?id@?$ctype@G@std@@2V0locale@2@A 0x18007c178
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A 0x18007c210
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z 0x18007c0a0
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z 0x18007c120
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z 0x18007c248
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z 0x18007c250
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z 0x18007c090
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z 0x18007c208
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z 0x18007c0f8
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z 0x18007c128
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x18007c1d0
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ 0x18007c070
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ 0x18007c298
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z 0x18007c1c0
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z 0x18007c2e0
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z 0x18007c1c8
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z 0x18007c170
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x18007c098
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ 0x18007c1e8
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ 0x18007c078
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ 0x18007c288
?uncaught_exception@std@@YA_NXZ 0x18007c180
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z 0x18007c258
?widen@?$ctype@G@std@@QEBAGD@Z 0x18007c2c0
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z 0x18007c080
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z 0x18007c228
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z 0x18007c088
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z 0x18007c218
netutils.dll 1
NetApiBufferFree 0x18007c310
ntdll.dll 3
NtQueryInformationToken 0x18007c320
RtlGetVersion 0x18007c328
RtlPublishWnfStateData 0x18007c330
OLEAUT32.dll 3
SysAllocString 0x18007b948
SysFreeString 0x18007b940
VariantInit 0x18007b938
RPCRT4.dll 1
UuidCreate 0x18007b958
wkscli.dll 1
NetGetJoinInformation 0x18007c340