efslsaext.dll

v10.0.19041.6328 64-bit Windows NT Analyzed
Download
Description
LSA extension for EFS
Authors
© Microsoft Corporation. All rights reserved.
File size
85.5 KB
Uploaded
2025-12-01 07:27
Views
92
SHA-256
0b4ae104fade167f02344ed0b6b20e65

Exported functions 1

InitializeLsaExtension #1 · 0x1cb0

Imported DLLs & functions 132

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1800102e0
IsDebuggerPresent 0x1800102e8
OutputDebugStringW 0x1800102d8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800102f8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180010308
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180010328
SetLastError 0x180010330
SetUnhandledExceptionFilter 0x180010320
UnhandledExceptionFilter 0x180010318
api-ms-win-core-featurestaging-l1-1-0.dll 3
RecordFeatureUsage 0x180010348
SubscribeFeatureStateChangeNotification 0x180010350
UnsubscribeFeatureStateChangeNotification 0x180010340
api-ms-win-core-file-l1-1-0.dll 8
CreateFileW 0x180010390
DeleteFileW 0x180010398
GetDriveTypeW 0x180010370
GetFileAttributesW 0x180010388
GetFinalPathNameByHandleW 0x180010368
GetVolumeInformationByHandleW 0x180010360
GetVolumePathNameW 0x180010378
RemoveDirectoryW 0x180010380
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800103a8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800103c0
HeapAlloc 0x1800103c8
HeapFree 0x1800103b8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1800103e0
LocalFree 0x1800103d8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
GetComputerNameW 0x1800103f0
api-ms-win-core-libraryloader-l1-2-0.dll 4
GetModuleFileNameA 0x180010418
GetModuleHandleExW 0x180010400
GetModuleHandleW 0x180010410
GetProcAddress 0x180010408
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180010428
api-ms-win-core-memory-l1-1-0.dll 2
VirtualAlloc 0x180010440
VirtualFree 0x180010438
api-ms-win-core-processthreads-l1-1-0.dll 7
GetCurrentProcess 0x180010458
GetCurrentProcessId 0x180010480
GetCurrentThread 0x180010460
GetCurrentThreadId 0x180010470
OpenThreadToken 0x180010450
SetThreadToken 0x180010478
TerminateProcess 0x180010468
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180010490
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x1800104a8
RtlLookupFunctionEntry 0x1800104b0
RtlVirtualUnwind 0x1800104a0
api-ms-win-core-string-l1-1-0.dll 1
CompareStringW 0x1800104c0
api-ms-win-core-synch-l1-1-0.dll 10
AcquireSRWLockExclusive 0x180010510
CreateMutexExW 0x1800104d0
CreateSemaphoreExW 0x180010518
OpenSemaphoreW 0x1800104d8
ReleaseMutex 0x1800104f8
ReleaseSemaphore 0x180010508
ReleaseSRWLockExclusive 0x1800104f0
SleepEx 0x1800104e0
WaitForSingleObject 0x180010500
WaitForSingleObjectEx 0x1800104e8
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x180010528
InitOnceComplete 0x180010538
Sleep 0x180010530
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetComputerNameExW 0x180010550
GetSystemTimeAsFileTime 0x180010548
GetTickCount 0x180010558
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x180010568
EventRegister 0x180010578
EventSetInformation 0x180010588
EventUnregister 0x180010580
EventWriteTransfer 0x180010570
api-ms-win-security-base-l1-1-0.dll 2
AdjustTokenPrivileges 0x1800105a0
RevertToSelf 0x180010598
api-ms-win-service-management-l1-1-0.dll 4
CloseServiceHandle 0x1800105b8
OpenSCManagerW 0x1800105c8
OpenServiceW 0x1800105c0
StartServiceW 0x1800105b0
api-ms-win-service-management-l2-1-0.dll 2
NotifyServiceStatusChangeW 0x1800105e0
QueryServiceStatusEx 0x1800105d8
msvcrt.dll 20
__C_specific_handler 0x180010638
__dllonexit 0x180010618
_amsg_exit 0x180010660
_initterm 0x180010640
_lock 0x180010630
_onexit 0x180010610
_unlock 0x180010620
_vsnwprintf 0x180010668
_wcsicmp 0x1800105f0
_wcsnicmp 0x180010680
_XcptFilter 0x180010650
??3@YAXPEAX@Z 0x180010678
free 0x180010658
malloc 0x180010648
memcmp 0x180010628
memcpy 0x180010608
memcpy_s 0x180010670
memmove 0x180010600
memset 0x180010688
toupper 0x1800105f8
netutils.dll 1
NetApiBufferFree 0x180010698
ntdll.dll 19
EtwEventEnabled 0x180010720
EtwEventRegister 0x180010700
EtwEventUnregister 0x1800106f8
EtwEventWrite 0x180010738
NtClose 0x1800106d8
NtCreateFile 0x1800106e8
NtFsControlFile 0x1800106c0
NtQueryInformationFile 0x1800106e0
NtQueryVolumeInformationFile 0x180010718
NtReadFile 0x1800106b8
NtWriteFile 0x1800106b0
RtlAllocateHeap 0x180010708
RtlDosPathNameToNtPathName_U 0x1800106c8
RtlFreeHeap 0x1800106f0
RtlInitUnicodeString 0x1800106d0
RtlLengthSid 0x180010728
RtlNtStatusToDosError 0x180010710
RtlQueryPackageClaims 0x1800106a8
RtlValidSid 0x180010730
RPCRT4.dll 17
I_RpcBindingIsClientLocal 0x1800102b8
I_RpcExceptionFilter 0x180010270
NdrClientCall3 0x180010288
NdrServerCall2 0x1800102b0
NdrServerCallAll 0x1800102c8
RpcBindingFree 0x1800102a8
RpcBindingFromStringBindingW 0x180010250
RpcBindingInqAuthClientW 0x180010268
RpcBindingSetAuthInfoW 0x180010248
RpcBindingToStringBindingW 0x1800102c0
RpcImpersonateClient 0x180010290
RpcRaiseException 0x180010260
RpcRevertToSelf 0x180010278
RpcServerRegisterIfEx 0x180010280
RpcStringBindingComposeW 0x180010258
RpcStringBindingParseW 0x180010298
RpcStringFreeW 0x1800102a0