AlscEfsCore.dll

Description:

Version: 1.0.6.11110

Architecture: 64-bit

Operating System: Windows NT

SHA256: a520df891b3554dff552c143acdba670

File Size: 993.1 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Exported Functions

EfsReporterInit (Ordinal: 1, Address: 0x17d90)
EfsReporterInit2 (Ordinal: 2, Address: 0x17db0)
EfsReporterSend (Ordinal: 3, Address: 0x17e50)

Imported DLLs & Functions

ADVAPI32.dll

CryptAcquireContextW (Address: 0x1800b6030)
CryptCreateHash (Address: 0x1800b6020)
CryptDestroyHash (Address: 0x1800b6010)
CryptDestroyKey (Address: 0x1800b6038)
CryptEncrypt (Address: 0x1800b6028)
CryptGetHashParam (Address: 0x1800b6000)
CryptHashData (Address: 0x1800b6018)
CryptImportKey (Address: 0x1800b6008)
CryptReleaseContext (Address: 0x1800b6040)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800b61f0)
CloseHandle (Address: 0x1800b61c0)
CompareStringW (Address: 0x1800b63c8)
CopyFileA (Address: 0x1800b6088)
CreateEventW (Address: 0x1800b6250)
CreateFileW (Address: 0x1800b6380)
CreateThread (Address: 0x1800b6358)
DecodePointer (Address: 0x1800b60b0)
DeleteCriticalSection (Address: 0x1800b60a8)
EncodePointer (Address: 0x1800b6218)
EnterCriticalSection (Address: 0x1800b61a0)
EnumSystemLocalesW (Address: 0x1800b63f0)
ExitProcess (Address: 0x1800b6378)
ExitThread (Address: 0x1800b6360)
ExpandEnvironmentStringsA (Address: 0x1800b62d8)
FileTimeToSystemTime (Address: 0x1800b63a0)
FindClose (Address: 0x1800b6188)
FindFirstFileExW (Address: 0x1800b6180)
FindNextFileW (Address: 0x1800b6178)
FlushFileBuffers (Address: 0x1800b6410)
FormatMessageA (Address: 0x1800b6200)
FreeEnvironmentStringsW (Address: 0x1800b6140)
FreeLibrary (Address: 0x1800b6300)
FreeLibraryAndExitThread (Address: 0x1800b6368)
GetACP (Address: 0x1800b6168)
GetCommandLineA (Address: 0x1800b6158)
GetCommandLineW (Address: 0x1800b6150)
GetConsoleMode (Address: 0x1800b63b8)
GetConsoleOutputCP (Address: 0x1800b6400)
GetCPInfo (Address: 0x1800b6230)
GetCurrentDirectoryW (Address: 0x1800b6130)
GetCurrentProcess (Address: 0x1800b6280)
GetCurrentProcessId (Address: 0x1800b6078)
GetCurrentThreadId (Address: 0x1800b61d8)
GetDriveTypeW (Address: 0x1800b6388)
GetEnvironmentStringsW (Address: 0x1800b6148)
GetFileAttributesExA (Address: 0x1800b6098)
GetFileAttributesExW (Address: 0x1800b6418)
GetFileInformationByHandle (Address: 0x1800b6390)
GetFileSizeEx (Address: 0x1800b6408)
GetFileType (Address: 0x1800b6308)
GetFullPathNameW (Address: 0x1800b6128)
GetLastError (Address: 0x1800b60e0)
GetLocaleInfoW (Address: 0x1800b63d8)
GetLocalTime (Address: 0x1800b60b8)
GetModuleFileNameW (Address: 0x1800b6100)
GetModuleHandleA (Address: 0x1800b6058)
GetModuleHandleExW (Address: 0x1800b6370)
GetModuleHandleW (Address: 0x1800b6068)
GetOEMCP (Address: 0x1800b6160)
GetPrivateProfileStringA (Address: 0x1800b6090)
GetProcAddress (Address: 0x1800b6060)
GetProcessHeap (Address: 0x1800b6070)
GetStartupInfoW (Address: 0x1800b62a0)
GetStdHandle (Address: 0x1800b62e8)
GetStringTypeW (Address: 0x1800b6228)
GetSystemDirectoryW (Address: 0x1800b62b8)
GetSystemTimeAsFileTime (Address: 0x1800b6208)
GetTickCount (Address: 0x1800b6080)
GetTickCount64 (Address: 0x1800b6210)
GetTimeZoneInformation (Address: 0x1800b63b0)
GetUserDefaultLCID (Address: 0x1800b63e8)
GetUserDefaultUILanguage (Address: 0x1800b6050)
HeapAlloc (Address: 0x1800b60c0)
HeapFree (Address: 0x1800b6108)
HeapReAlloc (Address: 0x1800b60d8)
HeapSize (Address: 0x1800b60f0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800b6238)
InitializeCriticalSectionEx (Address: 0x1800b60f8)
InitializeSListHead (Address: 0x1800b6298)
InitializeSRWLock (Address: 0x1800b61e0)
InterlockedFlushSList (Address: 0x1800b6320)
InterlockedPushEntrySList (Address: 0x1800b6318)
IsDebuggerPresent (Address: 0x1800b6190)
IsProcessorFeaturePresent (Address: 0x1800b6290)
IsValidCodePage (Address: 0x1800b6170)
IsValidLocale (Address: 0x1800b63e0)
LCMapStringEx (Address: 0x1800b6220)
LCMapStringW (Address: 0x1800b63d0)
LeaveCriticalSection (Address: 0x1800b61a8)
LoadLibraryExW (Address: 0x1800b6350)
LoadLibraryW (Address: 0x1800b62c0)
MultiByteToWideChar (Address: 0x1800b60e8)
OutputDebugStringW (Address: 0x1800b6198)
PeekNamedPipe (Address: 0x1800b62f8)
QueryPerformanceCounter (Address: 0x1800b61b0)
QueryPerformanceFrequency (Address: 0x1800b61b8)
RaiseException (Address: 0x1800b60c8)
ReadConsoleW (Address: 0x1800b63c0)
ReadFile (Address: 0x1800b62e0)
ReleaseSRWLockExclusive (Address: 0x1800b61e8)
ResetEvent (Address: 0x1800b6248)
RtlCaptureContext (Address: 0x1800b6258)
RtlLookupFunctionEntry (Address: 0x1800b6260)
RtlPcToFileHeader (Address: 0x1800b6328)
RtlUnwind (Address: 0x1800b60a0)
RtlUnwindEx (Address: 0x1800b6310)
RtlVirtualUnwind (Address: 0x1800b6268)
SetEndOfFile (Address: 0x1800b6118)
SetEnvironmentVariableW (Address: 0x1800b6138)
SetEvent (Address: 0x1800b6240)
SetFilePointerEx (Address: 0x1800b63a8)
SetLastError (Address: 0x1800b62a8)
SetStdHandle (Address: 0x1800b6120)
SetUnhandledExceptionFilter (Address: 0x1800b6278)
Sleep (Address: 0x1800b61d0)
SleepEx (Address: 0x1800b62b0)
SystemTimeToTzSpecificLocalTime (Address: 0x1800b6398)
TerminateProcess (Address: 0x1800b6288)
TlsAlloc (Address: 0x1800b6330)
TlsFree (Address: 0x1800b6348)
TlsGetValue (Address: 0x1800b6338)
TlsSetValue (Address: 0x1800b6340)
TryEnterCriticalSection (Address: 0x1800b61f8)
UnhandledExceptionFilter (Address: 0x1800b6270)
VerifyVersionInfoW (Address: 0x1800b62d0)
VerSetConditionMask (Address: 0x1800b62c8)
WaitForMultipleObjects (Address: 0x1800b62f0)
WaitForSingleObjectEx (Address: 0x1800b61c8)
WideCharToMultiByte (Address: 0x1800b60d0)
WriteConsoleW (Address: 0x1800b6110)
WriteFile (Address: 0x1800b63f8)

SHELL32.dll

SHCreateDirectoryExA (Address: 0x1800b6430)
SHGetFolderPathA (Address: 0x1800b6428)

SHLWAPI.dll

PathIsDirectoryA (Address: 0x1800b6448)
PathIsRootA (Address: 0x1800b6440)

USER32.dll

GetSystemMetrics (Address: 0x1800b6458)

WLDAP32.dll

(Address: 0x1800b64e0)
(Address: 0x1800b64d8)
(Address: 0x1800b64d0)
(Address: 0x1800b64c8)
(Address: 0x1800b64c0)
(Address: 0x1800b64b8)
(Address: 0x1800b64b0)
(Address: 0x1800b64a8)
(Address: 0x1800b6498)
(Address: 0x1800b64a0)
(Address: 0x1800b6468)
(Address: 0x1800b6470)
(Address: 0x1800b6478)
(Address: 0x1800b6480)
(Address: 0x1800b6488)
(Address: 0x1800b6490)

WS2_32.dll

__WSAFDIsSet (Address: 0x1800b6570)
accept (Address: 0x1800b65a8)
bind (Address: 0x1800b6560)
closesocket (Address: 0x1800b6550)
connect (Address: 0x1800b6520)
freeaddrinfo (Address: 0x1800b6580)
getaddrinfo (Address: 0x1800b6588)
gethostname (Address: 0x1800b65b0)
getpeername (Address: 0x1800b6540)
getsockname (Address: 0x1800b6538)
getsockopt (Address: 0x1800b6518)
htons (Address: 0x1800b6510)
ioctlsocket (Address: 0x1800b6578)
listen (Address: 0x1800b65a0)
ntohs (Address: 0x1800b6528)
recv (Address: 0x1800b64f8)
recvfrom (Address: 0x1800b6598)
select (Address: 0x1800b6568)
send (Address: 0x1800b6500)
sendto (Address: 0x1800b6590)
setsockopt (Address: 0x1800b6508)
socket (Address: 0x1800b6530)
WSACleanup (Address: 0x1800b65b8)
WSAGetLastError (Address: 0x1800b64f0)
WSAIoctl (Address: 0x1800b6558)
WSASetLastError (Address: 0x1800b6548)
WSAStartup (Address: 0x1800b65c0)