efscore.dll - Online Dependency Analysis & Download

Description

EFS Core Library

Authors

File size

1.1 MB

Uploaded

2025-12-01 07:27

Views

119

SHA-256

7b0862900f4f06ffefb39f77f3add143

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 73

EfsDllDplAppKeyCachingFeatureEnabled #1 · 0xd800

EdpDllAllowFileAccessForProcess #2 · 0x41080

EdpDllCredSvcControl #3 · 0xcba0

EdpDllCredentialCreate #4 · 0xc030

EdpDllCredentialDelete #5 · 0xc310

EdpDllCredentialExists #6 · 0xc210

EdpDllCredentialQuery #7 · 0xc120

EdpDllDplUpgradePinInfo #8 · 0xcb30

EdpDllDplUpgradeVerifyUser #9 · 0xcb50

EdpDllDplUserCredentialsSet #10 · 0xcb70

EdpDllDplUserUnlockComplete #11 · 0xcb90

EdpDllDplUserUnlockStart #12 · 0xcb90

EdpDllGetCredServiceState #13 · 0xc970

EdpDllGetLockSessionUnwrappedKey #14 · 0xc730

EdpDllGetLockSessionWrappedKey #15 · 0xc6c0

EdpDllGetTfaCache #16 · 0x41d20

EdpDllPurgeAppLearningEvents #17 · 0x449b0

EdpDllQueryDplEnforcedPolicyOwnerIds #18 · 0xc5e0

EdpDllQueryRevokedPolicyOwnerIds #19 · 0xc4f0

EdpDllQueueFileForEncryption #20 · 0x3dee0

EdpDllRmsClearKeys #21 · 0xccf0

EdpDllRmsContainerizeFile #22 · 0xcd10

EdpDllRmsDecontainerizeFile #23 · 0xd3c0

EdpDllRmsGetContainerIdentity #24 · 0xd0b0

EdpDllServiceFileEncryptionQueue #25 · 0x3e050

EdpWriteAppLearningLog #26 · 0x449d0

EdpWriteSiteLearningLog #27 · 0x44ba0

EfsDllAddUsersToFileSrv #28 · 0xace0

EfsDllAllocateHeap #29 · 0xbef0

EfsDllCheckFileAccess #30 · 0xd680

EfsDllCloseFileRaw #31 · 0xa3e0

EfsDllConstructEFS #32 · 0xb130

EfsDllDecryptFek #33 · 0xbd10

EfsDllDecryptFileSrv #34 · 0xaa10

EfsDllDisabled #35 · 0xa4e0

EfsDllDuplicateEncryptionInfoFileSrv #36 · 0xae10

EfsDllEncryptFileSrv #37 · 0xaa00

EfsDllErrorToNtStatus #38 · 0xbee0

EfsDllFileKeyInfoSrv #39 · 0xae20

EfsDllFreeHeap #40 · 0xbf30

EfsDllFreeUserInfo #41 · 0xa980

EfsDllGetLocalFileName #42 · 0xbf70

EfsDllGetLogFile #43 · 0xa500

EfsDllGetUserInfo #44 · 0xa970

EfsDllGetVolumeRoot #45 · 0xa4f0

EfsDllIsConsumerProtectionEnforced #46 · 0xc410

EfsDllIsNonEfsSKU #47 · 0xa4d0

EfsDllLoadUserProfile #48 · 0xa990

EfsDllMarkFileForDelete #49 · 0xa9b0

EfsDllOefsAcquireExclusiveOperation #50 · 0xd660

EfsDllOefsCheckSupportByFilePath #51 · 0x489a0

EfsDllOefsReleaseExclusiveOperation #52 · 0xd670

EfsDllOnSessionChange #53 · 0xa510

EfsDllOnSessionUserChange #54 · 0xa730

EfsDllOpenFileRaw #55 · 0xa3c0

EfsDllQueryProtectorsSrv #56 · 0xac20

EfsDllQueryRecoveryAgentsSrv #57 · 0xab20

EfsDllQueryUsersOnFileSrv #58 · 0xaa20

EfsDllReadFileRaw #59 · 0xa3f0

EfsDllRemoveUsersFromFileSrv #60 · 0xad50

EfsDllReprotectFile #61 · 0x14a50

EfsDllSetFileEncryptionKeySrv #62 · 0xadb0

EfsDllShareDecline #63 · 0xbf80

EfsDllSsoFlushUserCache #64 · 0xa9d0

EfsDllUnloadUserProfile #65 · 0xa9a0

EfsDllUsePinForEncryptedFilesSrv #66 · 0xae30

EfsDllValidateEfsStream #67 · 0xa9c0

EfsDllWriteEncryptedFileWithHeader #68 · 0xa410

EfsDllWriteFileRaw #69 · 0xa400

EfsInitialize #70 · 0xa2c0

EfsProcessRecoveryPolicy #71 · 0x1cce0

EfsUnInitialize #72 · 0xa380

EfsValidateEfsStream #73 · 0x22c80

Imported DLLs & functions 475

api-ms-win-appmodel-runtime-l1-1-0.dll 1

PackageFamilyNameFromFullName 0x1800ec780

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x1800ec790

api-ms-win-core-com-l1-1-0.dll 10

CoCreateFreeThreadedMarshaler 0x1800ec7c0

CoCreateGuid 0x1800ec7b8

CoDecrementMTAUsage 0x1800ec7e0

CoIncrementMTAUsage 0x1800ec7a0

CoTaskMemAlloc 0x1800ec7d8

CoTaskMemFree 0x1800ec7e8

CoTaskMemRealloc 0x1800ec7a8

CoWaitForMultipleHandles 0x1800ec7c8

StringFromCLSID 0x1800ec7d0

StringFromGUID2 0x1800ec7b0

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x1800ec7f8

IsDebuggerPresent 0x1800ec808

OutputDebugStringW 0x1800ec800

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x1800ec818

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x1800ec828

api-ms-win-core-errorhandling-l1-1-0.dll 5

GetLastError 0x1800ec858

RaiseException 0x1800ec838

SetLastError 0x1800ec840

SetUnhandledExceptionFilter 0x1800ec850

UnhandledExceptionFilter 0x1800ec848

api-ms-win-core-file-l1-1-0.dll 30

CompareFileTime 0x1800ec8b8

CreateDirectoryW 0x1800ec938

CreateFileW 0x1800ec948

DeleteFileW 0x1800ec890

FindClose 0x1800ec8f0

FindFirstFileExW 0x1800ec940

FindFirstFileW 0x1800ec928

FindFirstVolumeW 0x1800ec8f8

FindNextFileW 0x1800ec918

FindNextVolumeW 0x1800ec900

FindVolumeClose 0x1800ec910

FlushFileBuffers 0x1800ec908

GetDriveTypeW 0x1800ec880

GetFileAttributesExW 0x1800ec868

GetFileAttributesW 0x1800ec8d0

GetFileInformationByHandle 0x1800ec8b0

GetFileSizeEx 0x1800ec8d8

GetFileTime 0x1800ec8c8

GetFinalPathNameByHandleW 0x1800ec8e0

GetFullPathNameW 0x1800ec898

GetTempFileNameW 0x1800ec950

GetVolumeInformationByHandleW 0x1800ec920

GetVolumeInformationW 0x1800ec870

GetVolumePathNameW 0x1800ec8a8

ReadFile 0x1800ec8e8

RemoveDirectoryW 0x1800ec888

SetFileInformationByHandle 0x1800ec878

SetFilePointer 0x1800ec930

SetFileTime 0x1800ec8c0

WriteFile 0x1800ec8a0

api-ms-win-core-file-l1-2-0.dll 2

GetVolumeNameForVolumeMountPointW 0x1800ec968

GetVolumePathNamesForVolumeNameW 0x1800ec960

api-ms-win-core-file-l2-1-0.dll 4

CopyFile2 0x1800ec990

GetFileInformationByHandleEx 0x1800ec988

MoveFileExW 0x1800ec978

ReplaceFileW 0x1800ec980

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x1800ec9a0

api-ms-win-core-heap-l1-1-0.dll 6

GetProcessHeap 0x1800ec9d8

HeapAlloc 0x1800ec9d0

HeapCreate 0x1800ec9b0

HeapDestroy 0x1800ec9b8

HeapFree 0x1800ec9c8

HeapSetInformation 0x1800ec9c0

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x1800ec9e8

LocalFree 0x1800ec9f0

api-ms-win-core-io-l1-1-0.dll 1

DeviceIoControl 0x1800eca00

api-ms-win-core-kernel32-legacy-l1-1-0.dll 3

GetComputerNameW 0x1800eca18

RegisterWaitForSingleObject 0x1800eca10

UnregisterWait 0x1800eca20

api-ms-win-core-libraryloader-l1-2-0.dll 10

FindResourceExW 0x1800eca48

FreeLibrary 0x1800eca38

GetModuleFileNameA 0x1800eca78

GetModuleFileNameW 0x1800eca40

GetModuleHandleExW 0x1800eca70

GetModuleHandleW 0x1800eca30

GetProcAddress 0x1800eca68

LoadLibraryExW 0x1800eca50

LoadResource 0x1800eca58

LockResource 0x1800eca60

api-ms-win-core-localization-l1-2-0.dll 2

FormatMessageW 0x1800eca88

IdnToAscii 0x1800eca90

api-ms-win-core-memory-l1-1-0.dll 7

CreateFileMappingW 0x1800ecab0

MapViewOfFile 0x1800ecad0

UnmapViewOfFile 0x1800ecac0

VirtualAlloc 0x1800ecab8

VirtualFree 0x1800ecaa0

VirtualProtect 0x1800ecaa8

VirtualQuery 0x1800ecac8

api-ms-win-core-memory-l1-1-1.dll 4

GetProcessWorkingSetSizeEx 0x1800ecaf8

SetProcessWorkingSetSizeEx 0x1800ecae0

VirtualLock 0x1800ecaf0

VirtualUnlock 0x1800ecae8

api-ms-win-core-path-l1-1-0.dll 1

PathCchRemoveFileSpec 0x1800ecb08

api-ms-win-core-processenvironment-l1-1-0.dll 1

GetEnvironmentVariableW 0x1800ecb18

api-ms-win-core-processthreads-l1-1-0.dll 13

CreateThread 0x1800ecb80

GetCurrentProcess 0x1800ecb30

GetCurrentProcessId 0x1800ecb78

GetCurrentThread 0x1800ecb58

GetCurrentThreadId 0x1800ecb88

GetThreadId 0x1800ecb50

OpenProcessToken 0x1800ecb28

OpenThreadToken 0x1800ecb68

ResumeThread 0x1800ecb38

SetThreadStackGuarantee 0x1800ecb40

SetThreadToken 0x1800ecb48

TerminateProcess 0x1800ecb60

TerminateThread 0x1800ecb70

api-ms-win-core-processthreads-l1-1-1.dll 2

GetProcessMitigationPolicy 0x1800ecba0

OpenProcess 0x1800ecb98

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x1800ecbb0

api-ms-win-core-registry-l1-1-0.dll 14

RegCloseKey 0x1800ecc00

RegCreateKeyExW 0x1800ecbf0

RegDeleteTreeW 0x1800ecbd0

RegDeleteValueW 0x1800ecc08

RegEnumKeyExW 0x1800ecc20

RegEnumValueW 0x1800ecbe0

RegFlushKey 0x1800ecc28

RegGetValueW 0x1800ecc18

RegNotifyChangeKeyValue 0x1800ecbf8

RegOpenCurrentUser 0x1800ecc10

RegOpenKeyExW 0x1800ecbd8

RegQueryInfoKeyW 0x1800ecbc8

RegQueryValueExW 0x1800ecbc0

RegSetValueExW 0x1800ecbe8

api-ms-win-core-registry-l1-1-1.dll 1

RegSetKeyValueW 0x1800ecc38

api-ms-win-core-rtlsupport-l1-1-0.dll 4

RtlCaptureContext 0x1800ecc50

RtlCompareMemory 0x1800ecc58

RtlLookupFunctionEntry 0x1800ecc60

RtlVirtualUnwind 0x1800ecc48

api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1

PathFindExtensionW 0x1800ecc70

api-ms-win-core-string-l1-1-0.dll 4

CompareStringOrdinal 0x1800ecc80

GetStringTypeW 0x1800ecc90

MultiByteToWideChar 0x1800ecc88

WideCharToMultiByte 0x1800ecc98

api-ms-win-core-synch-l1-1-0.dll 27

AcquireSRWLockExclusive 0x1800eccb8

AcquireSRWLockShared 0x1800ecd28

CancelWaitableTimer 0x1800eccd0

CreateEventExW 0x1800ecd68

CreateEventW 0x1800eccf0

CreateMutexExW 0x1800ecd18

CreateMutexW 0x1800eccb0

CreateSemaphoreExW 0x1800eccc8

CreateWaitableTimerExW 0x1800ecce0

DeleteCriticalSection 0x1800ecd30

EnterCriticalSection 0x1800ecca8

InitializeCriticalSection 0x1800ecd70

InitializeCriticalSectionEx 0x1800ecd78

InitializeSRWLock 0x1800ecd40

LeaveCriticalSection 0x1800ecd20

OpenSemaphoreW 0x1800ecd08

ReleaseMutex 0x1800ecce8

ReleaseSemaphore 0x1800eccc0

ReleaseSRWLockExclusive 0x1800ecd48

ReleaseSRWLockShared 0x1800ecd10

ResetEvent 0x1800ecd60

SetEvent 0x1800ecd00

SetWaitableTimerEx 0x1800eccd8

TryAcquireSRWLockShared 0x1800ecd58

TryEnterCriticalSection 0x1800ecd38

WaitForSingleObject 0x1800ecd50

WaitForSingleObjectEx 0x1800eccf8

api-ms-win-core-synch-l1-2-0.dll 5

InitOnceBeginInitialize 0x1800ecd88

InitOnceComplete 0x1800ecd90

Sleep 0x1800ecd98

SleepConditionVariableSRW 0x1800ecda8

WakeAllConditionVariable 0x1800ecda0

api-ms-win-core-synch-l1-2-1.dll 1

WaitForMultipleObjects 0x1800ecdb8

api-ms-win-core-sysinfo-l1-1-0.dll 8

GetComputerNameExW 0x1800ecde0

GetLocalTime 0x1800ecde8

GetSystemInfo 0x1800ecdc8

GetSystemTime 0x1800ece00

GetSystemTimeAsFileTime 0x1800ecdd0

GetTickCount 0x1800ecdf0

GetTickCount64 0x1800ecdf8

GetVersionExW 0x1800ecdd8

api-ms-win-core-threadpool-l1-2-0.dll 21

CallbackMayRunLong 0x1800ece28

CloseThreadpool 0x1800ece78

CloseThreadpoolCleanupGroup 0x1800ece38

CloseThreadpoolCleanupGroupMembers 0x1800ece40

CloseThreadpoolTimer 0x1800ece70

CloseThreadpoolWait 0x1800ece50

CloseThreadpoolWork 0x1800ece30

CreateThreadpool 0x1800ecea0

CreateThreadpoolCleanupGroup 0x1800ece48

CreateThreadpoolTimer 0x1800ece20

CreateThreadpoolWait 0x1800ece90

CreateThreadpoolWork 0x1800ece88

IsThreadpoolTimerSet 0x1800ecea8

SetThreadpoolThreadMaximum 0x1800ece80

SetThreadpoolThreadMinimum 0x1800ece98

SetThreadpoolTimer 0x1800ece60

SetThreadpoolWait 0x1800ece68

SubmitThreadpoolWork 0x1800ece10

WaitForThreadpoolTimerCallbacks 0x1800eceb0

WaitForThreadpoolWaitCallbacks 0x1800ece58

WaitForThreadpoolWorkCallbacks 0x1800ece18

api-ms-win-core-threadpool-legacy-l1-1-0.dll 4

CreateTimerQueueTimer 0x1800ecec8

DeleteTimerQueueTimer 0x1800eced8

QueueUserWorkItem 0x1800ecec0

UnregisterWaitEx 0x1800eced0

api-ms-win-core-timezone-l1-1-0.dll 3

FileTimeToSystemTime 0x1800ecef0

SystemTimeToFileTime 0x1800ecef8

SystemTimeToTzSpecificLocalTime 0x1800ecee8

api-ms-win-core-util-l1-1-0.dll 2

DecodePointer 0x1800ecf10

EncodePointer 0x1800ecf08

api-ms-win-core-winrt-l1-1-0.dll 3

RoGetActivationFactory 0x1800ecf28

RoInitialize 0x1800ecf30

RoUninitialize 0x1800ecf20

api-ms-win-core-winrt-string-l1-1-0.dll 3

WindowsCreateStringReference 0x1800ecf48

WindowsDeleteString 0x1800ecf40

WindowsGetStringRawBuffer 0x1800ecf50

api-ms-win-eventing-provider-l1-1-0.dll 6

EventActivityIdControl 0x1800ecf60

EventProviderEnabled 0x1800ecf88

EventRegister 0x1800ecf68

EventSetInformation 0x1800ecf70

EventUnregister 0x1800ecf80

EventWriteTransfer 0x1800ecf78

api-ms-win-security-base-l1-1-0.dll 16

AdjustTokenPrivileges 0x1800ecfa8

CheckTokenMembership 0x1800ecfb8

CopySid 0x1800ecfd8

CreateWellKnownSid 0x1800ed008

DuplicateToken 0x1800ecfb0

DuplicateTokenEx 0x1800ecfe0

EqualSid 0x1800ecfc8

GetLengthSid 0x1800ed010

GetSidSubAuthority 0x1800ecff0

GetSidSubAuthorityCount 0x1800ecfa0

GetTokenInformation 0x1800ecf98

ImpersonateLoggedOnUser 0x1800ed000

IsValidSid 0x1800ecfe8

PrivilegeCheck 0x1800ecfd0

RevertToSelf 0x1800ecff8

SetTokenInformation 0x1800ecfc0

api-ms-win-security-sddl-l1-1-0.dll 2

ConvertSidToStringSidW 0x1800ed028

ConvertStringSidToSidW 0x1800ed020

api-ms-win-service-private-l1-1-0.dll 1

I_QueryTagInformation 0x1800ed038

api-ms-win-stateseparation-helpers-l1-1-0.dll 1

GetPersistedRegistryLocationW 0x1800ed048

AUTHZ.dll 8

AuthzFreeAuditEvent 0x1800ec5e8

AuthziAllocateAuditParams 0x1800ec5b0

AuthziFreeAuditEventType 0x1800ec5d8

AuthziFreeAuditParams 0x1800ec5d0

AuthziInitializeAuditEvent 0x1800ec5c8

AuthziInitializeAuditEventType 0x1800ec5b8

AuthziInitializeAuditParams 0x1800ec5c0

AuthziLogAuditEvent 0x1800ec5e0

bcrypt.dll 25

BCryptCloseAlgorithmProvider 0x1800ed080

BCryptCreateHash 0x1800ed0c8

BCryptDecrypt 0x1800ed0a0

BCryptDeriveKey 0x1800ed078

BCryptDestroyHash 0x1800ed100

BCryptDestroyKey 0x1800ed0e8

BCryptDestroySecret 0x1800ed090

BCryptDuplicateKey 0x1800ed0b8

BCryptEncrypt 0x1800ed0d8

BCryptExportKey 0x1800ed0d0

BCryptFinalizeKeyPair 0x1800ed0e0

BCryptFinishHash 0x1800ed110

BCryptGenerateKeyPair 0x1800ed0f8

BCryptGenerateSymmetricKey 0x1800ed108

BCryptGenRandom 0x1800ed0c0

BCryptGetFipsAlgorithmMode 0x1800ed098

BCryptGetProperty 0x1800ed058

BCryptHash 0x1800ed0b0

BCryptHashData 0x1800ed118

BCryptImportKey 0x1800ed088

BCryptImportKeyPair 0x1800ed0a8

BCryptKeyDerivation 0x1800ed0f0

BCryptOpenAlgorithmProvider 0x1800ed070

BCryptSecretAgreement 0x1800ed060

BCryptSetProperty 0x1800ed068

CRYPT32.dll 17

CertAddEncodedCertificateToStore 0x1800ec668

CertCloseStore 0x1800ec608

CertCreateCertificateContext 0x1800ec640

CertDeleteCertificateFromStore 0x1800ec660

CertDuplicateCertificateContext 0x1800ec638

CertFindCertificateInStore 0x1800ec670

CertFreeCertificateChainEngine 0x1800ec600

CertFreeCertificateContext 0x1800ec648

CertGetCertificateContextProperty 0x1800ec628

CertOpenStore 0x1800ec618

CertSetCertificateContextProperty 0x1800ec620

CertVerifyTimeValidity 0x1800ec658

CryptBinaryToStringW 0x1800ec5f8

CryptImportPublicKeyInfoEx2 0x1800ec678

CryptProtectMemory 0x1800ec650

CryptStringToBinaryW 0x1800ec610

CryptUnprotectMemory 0x1800ec630

DSROLE.dll 2

DsRoleFreeMemory 0x1800ec690

DsRoleGetPrimaryDomainInformation 0x1800ec688

iertutil.dll 1

CreateUri 0x1800ed128

msvcrt.dll 64

___lc_codepage_func 0x1800ed178

___lc_handle_func 0x1800ed180

___mb_cur_max_func 0x1800ed190

__C_specific_handler 0x1800ed270

__crtLCMapStringW 0x1800ed1e0

__CxxFrameHandler3 0x1800ed2f8

__dllonexit 0x1800ed240

__pctype_func 0x1800ed168

__uncaught_exception 0x1800ed158

_amsg_exit 0x1800ed230

_callnewh 0x1800ed1d0

_CxxThrowException 0x1800ed1c0

_errno 0x1800ed188

_initterm 0x1800ed238

_ismbblead 0x1800ed170

_lock 0x1800ed1a0

_onexit 0x1800ed248

_purecall 0x1800ed310

_unlock 0x1800ed198

_vsnprintf 0x1800ed2d8

_vsnprintf_s 0x1800ed2a8

_vsnwprintf 0x1800ed328

_wcsdup 0x1800ed140

_wcsicmp 0x1800ed268

_wcslwr 0x1800ed290

_wcsnicmp 0x1800ed1f8

_wcsrev 0x1800ed2c8

_wsetlocale 0x1800ed138

_wtoi64 0x1800ed1f0

_XcptFilter 0x1800ed228

??0bad_cast@@QEAA@AEBV0@@Z 0x1800ed218

??0bad_cast@@QEAA@PEBD@Z 0x1800ed208

??0exception@@QEAA@AEBQEBD@Z 0x1800ed220

??0exception@@QEAA@AEBQEBDH@Z 0x1800ed1c8

??0exception@@QEAA@AEBV0@@Z 0x1800ed2b0

??0exception@@QEAA@XZ 0x1800ed2b8

??1bad_cast@@UEAA@XZ 0x1800ed210

??1exception@@UEAA@XZ 0x1800ed308

??1type_info@@UEAA@XZ 0x1800ed2f0

??3@YAXPEAX@Z 0x1800ed318

?terminate@@YAXXZ 0x1800ed258

?what@exception@@UEBAPEBDXZ 0x1800ed250

abort 0x1800ed150

calloc 0x1800ed160

free 0x1800ed200

iswspace 0x1800ed300

malloc 0x1800ed1d8

memcmp 0x1800ed1e8

memcpy 0x1800ed1b8

memcpy_s 0x1800ed320

memmove 0x1800ed1b0

memmove_s 0x1800ed2a0

memset 0x1800ed148

setlocale 0x1800ed1a8

swprintf_s 0x1800ed260

toupper 0x1800ed2c0

wcschr 0x1800ed280

wcscmp 0x1800ed330

wcsncmp 0x1800ed2e8

wcsnlen 0x1800ed2e0

wcsrchr 0x1800ed288

wcsstr 0x1800ed298

wcstok_s 0x1800ed278

wcstoul 0x1800ed2d0

ncrypt.dll 14

NCryptCloseProtectionDescriptor 0x1800ed378

NCryptCreateProtectionDescriptor 0x1800ed368

NCryptDeriveKey 0x1800ed358

NCryptExportKey 0x1800ed388

NCryptFreeObject 0x1800ed348

NCryptGetProperty 0x1800ed3a8

NCryptGetProtectionDescriptorInfo 0x1800ed390

NCryptImportKey 0x1800ed350

NCryptOpenKey 0x1800ed398

NCryptOpenStorageProvider 0x1800ed340

NCryptProtectSecret 0x1800ed370

NCryptSecretAgreement 0x1800ed360

NCryptSetProperty 0x1800ed3a0

NCryptUnprotectSecret 0x1800ed380

netutils.dll 1

NetApiBufferFree 0x1800ed3b8

ntdll.dll 79

EtwEventEnabled 0x1800ed3d0

EtwEventRegister 0x1800ed578

EtwEventUnregister 0x1800ed3c8

EtwEventWrite 0x1800ed3d8

NtClose 0x1800ed490

NtCreateFile 0x1800ed550

NtFlushBuffersFile 0x1800ed508

NtFsControlFile 0x1800ed538

NtOpenThreadToken 0x1800ed4a0

NtQueryInformationFile 0x1800ed540

NtQueryInformationToken 0x1800ed5b0

NtQueryObject 0x1800ed478

NtQuerySecurityAttributesToken 0x1800ed588

NtQuerySystemTime 0x1800ed5f0

NtQueryVolumeInformationFile 0x1800ed510

NtQueryWnfStateData 0x1800ed5e0

NtReadFile 0x1800ed470

NtSetInformationFile 0x1800ed530

NtSetInformationThread 0x1800ed498

NtSetInformationToken 0x1800ed438

NtUpdateWnfStateData 0x1800ed408

NtWriteFile 0x1800ed520

RtlAcquireResourceExclusive 0x1800ed600

RtlAcquireResourceShared 0x1800ed638

RtlAcquireSRWLockExclusive 0x1800ed500

RtlAcquireSRWLockShared 0x1800ed3e8

RtlAddAccessAllowedAceEx 0x1800ed4b8

RtlAllocateHeap 0x1800ed3e0

RtlAnsiStringToUnicodeString 0x1800ed4e0

RtlAppendUnicodeStringToString 0x1800ed428

RtlAppendUnicodeToString 0x1800ed430

RtlCompareUnicodeString 0x1800ed458

RtlConvertSidToUnicodeString 0x1800ed5a0

RtlCopySid 0x1800ed5c0

RtlCopyUnicodeString 0x1800ed440

RtlCreateSecurityDescriptor 0x1800ed4b0

RtlCreateSystemVolumeInformationFolder 0x1800ed418

RtlDeleteCriticalSection 0x1800ed5d8

RtlDeleteResource 0x1800ed5c8

RtlDoesFileExists_U 0x1800ed420

RtlDosPathNameToNtPathName_U 0x1800ed558

RtlDosPathNameToNtPathName_U_WithStatus 0x1800ed410

RtlEnterCriticalSection 0x1800ed468

RtlEqualSid 0x1800ed568

RtlFreeHeap 0x1800ed548

RtlFreeUnicodeString 0x1800ed4f0

RtlGetDaclSecurityDescriptor 0x1800ed528

RtlImageNtHeader 0x1800ed450

RtlInitAnsiString 0x1800ed4e8

RtlInitializeCriticalSection 0x1800ed5e8

RtlInitializeResource 0x1800ed5f8

RtlInitializeSid 0x1800ed4d0

RtlInitializeSRWLock 0x1800ed5b8

RtlInitUnicodeString 0x1800ed560

RtlIsCloudFilesPlaceholder 0x1800ed580

RtlIsMultiSessionSku 0x1800ed5d0

RtlLeaveCriticalSection 0x1800ed460

RtlLengthRequiredSid 0x1800ed4d8

RtlLengthSid 0x1800ed4c0

RtlNtStatusToDosError 0x1800ed570

RtlPublishWnfStateData 0x1800ed3f8

RtlQueryPackageClaims 0x1800ed448

RtlQueryWnfStateData 0x1800ed630

RtlReleaseResource 0x1800ed480

RtlReleaseSRWLockExclusive 0x1800ed4f8

RtlReleaseSRWLockShared 0x1800ed3f0

RtlSetDaclSecurityDescriptor 0x1800ed4a8

RtlSubAuthoritySid 0x1800ed4c8

RtlSubscribeWnfStateChangeNotification 0x1800ed598

RtlUnsubscribeWnfNotificationWaitForCompletion 0x1800ed590

RtlUnsubscribeWnfStateChangeNotification 0x1800ed488

RtlUpcaseUnicodeChar 0x1800ed400

RtlValidSid 0x1800ed5a8

ZwClose 0x1800ed618

ZwOpenProcessTokenEx 0x1800ed620

ZwOpenThreadTokenEx 0x1800ed610

ZwQueryInformationProcess 0x1800ed628

ZwQueryInformationToken 0x1800ed608

ZwQueryWnfStateData 0x1800ed518

OLEAUT32.dll 1

SysFreeString 0x1800ec6a0

profapi.dll 1

0x1800ed648

SspiCli.dll 4

LsaFreeReturnBuffer 0x1800ec6b8

LsaGetLogonSessionData 0x1800ec6c0

LsaRegisterPolicyChangeNotification 0x1800ec6b0

LsaUnregisterPolicyChangeNotification 0x1800ec6c8

USERENV.dll 7

EnterCriticalPolicySection 0x1800ec6f0

ExpandEnvironmentStringsForUserW 0x1800ec6d8

LeaveCriticalPolicySection 0x1800ec6e8

LoadUserProfileW 0x1800ec708

RegisterGPNotification 0x1800ec6f8

UnloadUserProfile 0x1800ec6e0

UnregisterGPNotification 0x1800ec700

WINHTTP.dll 12

WinHttpAddRequestHeaders 0x1800ec750

WinHttpCloseHandle 0x1800ec738

WinHttpConnect 0x1800ec758

WinHttpCrackUrl 0x1800ec730

WinHttpOpen 0x1800ec760

WinHttpOpenRequest 0x1800ec720

WinHttpQueryDataAvailable 0x1800ec770

WinHttpQueryHeaders 0x1800ec728

WinHttpReadData 0x1800ec748

WinHttpReceiveResponse 0x1800ec768

WinHttpSendRequest 0x1800ec718

WinHttpSetOption 0x1800ec740