efsadu.dll

v10.0.19041.4355 64-bit Windows NT Analyzed
Download
Description
File Encryption Utility
Authors
© Microsoft Corporation. All rights reserved.
File size
130.0 KB
Uploaded
2025-12-01 07:27
Views
112
SHA-256
d42e0eab514b7d5749161bf549ce6d4e

Exported functions 14

AddUserToObjectW #1 · 0xc320
BackCurrentEfsCert #2 · 0xc0f0
EfsDetail #3 · 0x8d70
EfsUIUtilCheckScardStatus #4 · 0x8770
EfsUIUtilCreateSelfSignedCertificate #5 · 0x86d0
EfsUIUtilEncryptMyDocuments #6 · 0x88f0
EfsUIUtilEnrollEfsCertificate #7 · 0x88d0
EfsUIUtilEnrollEfsCertificateEx #8 · 0x8870
EfsUIUtilInstallDra #9 · 0x7b00
EfsUIUtilKeyBackup #10 · 0x7e30
EfsUIUtilPromptForPin #11 · 0x80d0
EfsUIUtilPromptForPinDialog #12 · 0x7e10
EfsUIUtilSelectCard #13 · 0x8110
EfsUIUtilShowBalloonAndWait #14 · 0x7dd0

Imported DLLs & functions 367

ADVAPI32.dll 16
AddUsersToEncryptedFile 0x180012938
ConvertStringSidToSidW 0x180012920
CryptSetProvParam 0x1800128e0
EncryptFileW 0x180012950
EventWriteTransfer 0x180012918
FreeEncryptionCertificateHashList 0x180012930
LsaClose 0x180012900
LsaFreeMemory 0x180012908
LsaLookupSids 0x180012910
LsaOpenPolicy 0x180012948
QueryRecoveryAgentsOnEncryptedFile 0x180012928
QueryUsersOnEncryptedFile 0x1800128e8
RegGetValueW 0x1800128f8
RemoveUsersFromEncryptedFile 0x180012940
SetUserFileEncryptionKeyEx 0x1800128d8
UsePinForEncryptedFilesW 0x1800128f0
api-ms-win-core-com-l1-1-0.dll 5
CoCreateInstance 0x1800130e8
CoInitializeEx 0x1800130f0
CoTaskMemAlloc 0x1800130f8
CoTaskMemFree 0x1800130d8
CoUninitialize 0x1800130e0
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x180013108
IsDebuggerPresent 0x180013110
OutputDebugStringA 0x180013120
OutputDebugStringW 0x180013118
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180013130
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180013140
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180013150
SetLastError 0x180013168
SetUnhandledExceptionFilter 0x180013158
UnhandledExceptionFilter 0x180013160
api-ms-win-core-file-l1-1-0.dll 5
FindClose 0x180013178
FindFirstFileExW 0x180013190
FindNextFileW 0x180013180
GetFileAttributesW 0x180013198
GetFullPathNameW 0x180013188
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800131a8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800131c8
HeapAlloc 0x1800131b8
HeapFree 0x1800131c0
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800131d8
LocalFree 0x1800131e0
api-ms-win-core-libraryloader-l1-2-0.dll 6
GetModuleFileNameA 0x180013218
GetModuleFileNameW 0x1800131f0
GetModuleHandleExW 0x180013200
GetModuleHandleW 0x180013208
GetProcAddress 0x180013210
LoadStringW 0x1800131f8
api-ms-win-core-libraryloader-l1-2-1.dll 1
LoadLibraryW 0x180013228
api-ms-win-core-localization-l1-2-0.dll 4
FormatMessageW 0x180013248
GetLocaleInfoEx 0x180013238
GetUserPreferredUILanguages 0x180013250
IdnToAscii 0x180013240
api-ms-win-core-processenvironment-l1-1-0.dll 2
GetCurrentDirectoryW 0x180013268
SetCurrentDirectoryW 0x180013260
api-ms-win-core-processthreads-l1-1-0.dll 8
CreateThread 0x180013280
GetCurrentProcess 0x180013288
GetCurrentProcessId 0x180013278
GetCurrentThread 0x1800132b0
GetCurrentThreadId 0x1800132a0
OpenProcessToken 0x180013290
OpenThreadToken 0x1800132a8
TerminateProcess 0x180013298
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800132c0
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x1800132f0
RegCreateKeyExW 0x1800132d8
RegOpenKeyExW 0x1800132e0
RegQueryValueExW 0x1800132e8
RegSetValueExW 0x1800132d0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180013300
RtlLookupFunctionEntry 0x180013310
RtlVirtualUnwind 0x180013308
api-ms-win-core-synch-l1-1-0.dll 10
AcquireSRWLockExclusive 0x180013340
CreateMutexExW 0x180013328
CreateSemaphoreExW 0x180013338
OpenEventW 0x180013358
OpenSemaphoreW 0x180013350
ReleaseMutex 0x180013320
ReleaseSemaphore 0x180013330
ReleaseSRWLockExclusive 0x180013360
WaitForSingleObject 0x180013348
WaitForSingleObjectEx 0x180013368
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180013378
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x180013390
GetTickCount 0x180013388
api-ms-win-eventing-provider-l1-1-0.dll 6
EventEnabled 0x1800133c8
EventProviderEnabled 0x1800133a8
EventRegister 0x1800133b0
EventSetInformation 0x1800133a0
EventUnregister 0x1800133b8
EventWrite 0x1800133c0
api-ms-win-security-base-l1-1-0.dll 5
CheckTokenMembership 0x1800133e0
CopySid 0x1800133f0
EqualSid 0x1800133f8
GetLengthSid 0x1800133e8
GetTokenInformation 0x1800133d8
api-ms-win-security-credentials-l1-1-0.dll 2
CredFree 0x180013410
CredMarshalCredentialW 0x180013408
api-ms-win-service-management-l1-1-0.dll 3
CloseServiceHandle 0x180013428
OpenSCManagerW 0x180013420
OpenServiceW 0x180013430
api-ms-win-service-management-l2-1-0.dll 1
ChangeServiceConfigW 0x180013440
credui.dll 3
CredPackAuthenticationBufferW 0x180013460
CredUIPromptForWindowsCredentialsW 0x180013450
CredUnPackAuthenticationBufferW 0x180013458
CRYPT32.dll 21
CertAddCertificateContextToStore 0x1800129d0
CertAddCertificateLinkToStore 0x180012970
CertCloseStore 0x180012a00
CertCreateCertificateContext 0x1800129e0
CertEnumCertificatesInStore 0x1800129f8
CertFindCertificateInStore 0x1800129f0
CertFindExtension 0x180012968
CertFreeCertificateChain 0x180012990
CertFreeCertificateContext 0x1800129b8
CertGetCertificateChain 0x180012980
CertGetCertificateContextProperty 0x1800129c8
CertGetEnhancedKeyUsage 0x1800129a0
CertGetNameStringW 0x180012960
CertOpenStore 0x1800129e8
CertSetCertificateContextProperty 0x1800129b0
CertVerifyCertificateChainPolicy 0x180012988
CertVerifyTimeValidity 0x1800129a8
CryptBinaryToStringW 0x1800129c0
CryptDecodeObject 0x1800129d8
CryptEncodeObjectEx 0x180012978
CryptStringToBinaryW 0x180012998
CRYPTUI.dll 2
CryptUIDlgSelectCertificateW 0x180012a10
CryptUIWizExport 0x180012a18
DSROLE.dll 2
DsRoleFreeMemory 0x180012a30
DsRoleGetPrimaryDomainInformation 0x180012a28
EFSUTIL.dll 11
EfsUtilApplyGroupPolicy 0x180012a58
EfsUtilCheckCurrentKeyCapabilities 0x180012a70
EfsUtilCreateSelfSignedCertificate 0x180012a60
EfsUtilGetCertContextFromCertHash 0x180012a48
EfsUtilGetCurrentKey 0x180012a90
EfsUtilGetCurrentUserInformation 0x180012a68
EfsUtilGetSmartcardProviderName 0x180012a80
EfsUtilGetUserKey 0x180012a40
EfsUtilReleaseUserKey 0x180012a88
EfsUtilSetSmartcardPin 0x180012a50
EfsUtilSmartcardCredsNeededError 0x180012a78
FeClient.dll 4
EfsClientFreeKeyInfo 0x180012aa8
EfsClientFreeProtectorList 0x180012ab0
EfsClientGetKeyInfo 0x180012aa0
EfsClientQueryProtectors 0x180012ab8
KERNEL32.dll 13
ActivateActCtx 0x180012ad0
CreateActCtxW 0x180012b28
DeactivateActCtx 0x180012ac8
DeleteCriticalSection 0x180012af0
EnterCriticalSection 0x180012b08
FindActCtxSectionStringW 0x180012ad8
FreeLibrary 0x180012ae8
GetComputerNameW 0x180012b18
InitializeCriticalSection 0x180012af8
LeaveCriticalSection 0x180012b00
LoadLibraryExW 0x180012ae0
lstrlenW 0x180012b10
QueryActCtxW 0x180012b20
logoncli.dll 1
DsGetDcNameW 0x180013470
MFC42u.dll 126
0x180012b38
0x180012b40
0x180012b48
0x180012b50
0x180012b58
0x180012b60
0x180012b68
0x180012b70
0x180012b78
0x180012b80
0x180012b88
0x180012b90
0x180012b98
0x180012ba0
0x180012ba8
0x180012bb0
0x180012bb8
0x180012bc0
0x180012bc8
0x180012bd0
0x180012bd8
0x180012be0
0x180012be8
0x180012bf0
0x180012bf8
0x180012c00
0x180012c08
0x180012c10
0x180012c18
0x180012c20
0x180012c28
0x180012c30
0x180012c38
0x180012c40
0x180012c48
0x180012c50
0x180012c58
0x180012c60
0x180012c68
0x180012c70
0x180012c78
0x180012c80
0x180012c88
0x180012c90
0x180012c98
0x180012ca0
0x180012ca8
0x180012cb0
0x180012cb8
0x180012cc0
0x180012cc8
0x180012cd0
0x180012cd8
0x180012ce0
0x180012ce8
0x180012cf0
0x180012cf8
0x180012d00
0x180012d08
0x180012d10
0x180012d18
0x180012d20
0x180012d28
0x180012d30
0x180012d38
0x180012d40
0x180012d48
0x180012d50
0x180012d58
0x180012d60
0x180012d68
0x180012d70
0x180012d78
0x180012d80
0x180012d88
0x180012d90
0x180012d98
0x180012da0
0x180012da8
0x180012db0
0x180012db8
0x180012dc0
0x180012dc8
0x180012dd0
0x180012dd8
0x180012de0
0x180012de8
0x180012df0
0x180012df8
0x180012e00
0x180012e08
0x180012e10
0x180012e18
0x180012e20
0x180012e28
0x180012e30
0x180012e38
0x180012e40
0x180012e48
0x180012e50
0x180012e58
0x180012e60
0x180012e68
0x180012e70
0x180012e78
0x180012e80
0x180012e88
0x180012e90
0x180012e98
0x180012ea0
0x180012ea8
0x180012eb0
0x180012eb8
0x180012ec0
0x180012ec8
0x180012ed0
0x180012ed8
0x180012ee0
0x180012ee8
0x180012ef0
0x180012ef8
0x180012f00
0x180012f08
0x180012f10
0x180012f18
0x180012f20
msvcrt.dll 30
__C_specific_handler 0x180013518
__CxxFrameHandler3 0x180013568
__dllonexit 0x1800134c8
_amsg_exit 0x1800134e8
_CxxThrowException 0x1800134d8
_initterm 0x1800134e0
_lock 0x180013538
_ltow_s 0x180013500
_onexit 0x1800134c0
_unlock 0x1800134d0
_vsnprintf_s 0x180013520
_vsnwprintf 0x180013490
_wcsicmp 0x1800134f8
_wcsnicmp 0x180013540
_XcptFilter 0x1800134f0
??_V@YAXPEAX@Z 0x180013488
??0exception@@QEAA@AEBV0@@Z 0x180013528
??0exception@@QEAA@XZ 0x180013558
??1exception@@UEAA@XZ 0x1800134a0
??1type_info@@UEAA@XZ 0x1800134a8
free 0x180013508
malloc 0x180013510
memcmp 0x180013530
memcpy 0x180013560
memcpy_s 0x180013498
memmove 0x180013480
memset 0x1800134b8
strcmp 0x1800134b0
toupper 0x180013550
wcsncmp 0x180013548
netutils.dll 1
NetApiBufferFree 0x180013578
ntdll.dll 4
NtQueryInformationToken 0x1800135a0
RtlAllocateAndInitializeSid 0x180013590
RtlFreeSid 0x180013598
RtlNtStatusToDosError 0x180013588
ole32.dll 1
CoInitialize 0x1800135b0
OLEAUT32.dll 3
SysAllocString 0x180012f30
SysFreeString 0x180012f40
SysStringByteLen 0x180012f38
RPCRT4.dll 5
RpcStringFreeW 0x180012f50
UuidCreate 0x180012f68
UuidCreateNil 0x180012f58
UuidFromStringW 0x180012f70
UuidToStringW 0x180012f60
SHELL32.dll 6
0x180012f88
0x180012f98
SHChangeNotifySuspendResume 0x180012f80
SHCreateItemFromParsingName 0x180012fa0
Shell_NotifyIconW 0x180012f90
SHGetFolderPathW 0x180012fa8
SHLWAPI.dll 2
0x180012fb8
StrDupW 0x180012fc0
urlmon.dll 1
CreateUri 0x1800135c0
USER32.dll 14
DefWindowProcW 0x180012ff0
DestroyWindow 0x180013020
DispatchMessageW 0x180012fd8
EnableWindow 0x180012fd0
GetClientRect 0x180013008
GetMessageW 0x180013030
KillTimer 0x180013038
LoadIconW 0x180012fe8
MessageBoxW 0x180013000
PostMessageW 0x180013018
PostQuitMessage 0x180012ff8
SendMessageW 0x180013010
SetTimer 0x180012fe0
TranslateMessage 0x180013028
USERENV.dll 1
RefreshPolicy 0x180013048
VAULTCLI.dll 4
VaultCloseVault 0x180013070
VaultFree 0x180013058
VaultGetItem 0x180013068
VaultOpenVault 0x180013060
WLDAP32.dll 10
0x180013080
0x180013088
0x180013090
0x180013098
0x1800130a0
0x1800130a8
0x1800130b0
0x1800130b8
0x1800130c0
0x1800130c8