keymgr.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
Stored User Names and Passwords
Authors
© Microsoft Corporation. All rights reserved.
File size
58.5 KB
Uploaded
2025-12-01 07:31
Views
98
SHA-256
6c0fca174fbf27013053111a16b9e2f2

Exported functions 10

CPlApplet #1 · 0x2c80
DllCanUnloadNow #2 · 0x1b30
DllGetClassObject #3 · 0x1b50
DllMain #4 · 0x2d40
KRShowKeyMgr #5 · 0x2dc0
PRShowRestoreFromMsginaW #6 · 0x7ee0
PRShowRestoreWizardExW #7 · 0x7ee0
PRShowRestoreWizardW #8 · 0x7ab0
PRShowSaveFromMsginaW #9 · 0x7e90
PRShowSaveWizardExW #10 · 0x7e00

Imported DLLs & functions 171

ADVAPI32.dll 14
CredRenameW 0x18000b668
CryptAcquireContextW 0x18000b6a0
CryptDestroyKey 0x18000b6a8
CryptExportKey 0x18000b698
CryptGenKey 0x18000b688
CryptReleaseContext 0x18000b648
GetLengthSid 0x18000b690
GetUserNameW 0x18000b670
LogonUserW 0x18000b678
LookupAccountNameW 0x18000b680
LsaClose 0x18000b650
LsaFreeMemory 0x18000b658
LsaOpenPolicy 0x18000b6b0
LsaQueryInformationPolicy 0x18000b660
api-ms-win-core-com-l1-1-0.dll 1
CoCreateInstance 0x18000b900
api-ms-win-core-debug-l1-1-0.dll 1
OutputDebugStringW 0x18000b910
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18000b920
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18000b930
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18000b960
SetErrorMode 0x18000b958
SetLastError 0x18000b950
SetUnhandledExceptionFilter 0x18000b940
UnhandledExceptionFilter 0x18000b948
api-ms-win-core-file-l1-1-0.dll 10
CreateFileW 0x18000b9b8
DeleteFileW 0x18000b978
GetDiskFreeSpaceW 0x18000b990
GetDriveTypeW 0x18000b998
GetFileAttributesExW 0x18000b9a0
GetLogicalDriveStringsW 0x18000b970
ReadFile 0x18000b988
SetFileAttributesW 0x18000b9b0
SetFilePointer 0x18000b9a8
WriteFile 0x18000b980
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000b9c8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18000b9d8
LocalFree 0x18000b9e0
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x18000b9f0
api-ms-win-core-libraryloader-l1-2-0.dll 6
DisableThreadLibraryCalls 0x18000ba00
GetModuleFileNameW 0x18000ba08
GetModuleHandleW 0x18000ba20
GetProcAddress 0x18000ba28
LoadLibraryExW 0x18000ba10
LoadStringW 0x18000ba18
api-ms-win-core-memory-l1-1-0.dll 2
VirtualAlloc 0x18000ba40
VirtualFree 0x18000ba38
api-ms-win-core-processthreads-l1-1-0.dll 6
CreateProcessW 0x18000ba68
CreateThread 0x18000ba78
GetCurrentProcess 0x18000ba50
GetCurrentProcessId 0x18000ba60
GetCurrentThreadId 0x18000ba58
TerminateProcess 0x18000ba70
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000ba88
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x18000bab8
RegOpenKeyExA 0x18000baa0
RegOpenKeyExW 0x18000ba98
RegQueryValueExA 0x18000baa8
RegQueryValueExW 0x18000bab0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18000bad0
RtlLookupFunctionEntry 0x18000bad8
RtlVirtualUnwind 0x18000bac8
api-ms-win-core-synch-l1-1-0.dll 2
CreateMutexW 0x18000baf0
WaitForSingleObject 0x18000bae8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18000bb00
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetComputerNameExW 0x18000bb18
GetSystemDirectoryW 0x18000bb10
GetSystemTimeAsFileTime 0x18000bb20
GetTickCount 0x18000bb28
GetVersionExW 0x18000bb30
api-ms-win-security-credentials-l1-1-0.dll 7
CredDeleteW 0x18000bb58
CredEnumerateW 0x18000bb48
CredFree 0x18000bb70
CredGetSessionTypes 0x18000bb40
CredIsMarshaledCredentialW 0x18000bb60
CredReadW 0x18000bb50
CredWriteW 0x18000bb68
CRYPT32.dll 5
CertCreateCertificateContext 0x18000b6c0
CertFreeCertificateContext 0x18000b6d0
CryptEncodeObject 0x18000b6e0
CryptExportPublicKeyInfo 0x18000b6c8
CryptSignAndEncodeCertificate 0x18000b6d8
GDI32.dll 3
CreateFontIndirectW 0x18000b700
DeleteObject 0x18000b6f0
GetDeviceCaps 0x18000b6f8
KERNEL32.dll 7
ActivateActCtx 0x18000b740
CreateActCtxW 0x18000b720
DeactivateActCtx 0x18000b738
ExpandEnvironmentStringsA 0x18000b710
GetComputerNameW 0x18000b730
LoadLibraryExA 0x18000b728
ReleaseActCtx 0x18000b718
msvcrt.dll 16
__C_specific_handler 0x18000bba0
_amsg_exit 0x18000bb98
_callnewh 0x18000bb80
_initterm 0x18000bb88
_vsnwprintf 0x18000bbc0
_waccess 0x18000bbe0
_wcsicmp 0x18000bbe8
_wcsnicmp 0x18000bbc8
_XcptFilter 0x18000bb90
free 0x18000bbd0
malloc 0x18000bbb8
memcpy 0x18000bbb0
memset 0x18000bbf8
wcschr 0x18000bbd8
wcsncmp 0x18000bbf0
wcstol 0x18000bba8
netutils.dll 2
NetApiBufferAllocate 0x18000bc10
NetApiBufferFree 0x18000bc08
ntdll.dll 11
NtClose 0x18000bc30
NtOpenFile 0x18000bc38
NtOpenSymbolicLinkObject 0x18000bc50
NtQuerySymbolicLinkObject 0x18000bc40
NtQueryVolumeInformationFile 0x18000bc20
RtlInitUnicodeString 0x18000bc68
WinSqmAddToStream 0x18000bc48
WinSqmEndSession 0x18000bc60
WinSqmIsOptedIn 0x18000bc28
WinSqmSetString 0x18000bc58
WinSqmStartSession 0x18000bc70
ole32.dll 2
OleInitialize 0x18000bc88
OleUninitialize 0x18000bc80
RPCRT4.dll 7
NdrClientCall3 0x18000b760
RpcBindingFree 0x18000b750
RpcBindingFromStringBindingW 0x18000b780
RpcEpResolveBinding 0x18000b770
RpcStringBindingComposeW 0x18000b778
RpcStringFreeW 0x18000b768
UuidCreate 0x18000b758
SHELL32.dll 3
ShellExecuteW 0x18000b798
SHFormatDrive 0x18000b790
SHGetFileInfoW 0x18000b7a0
SHLWAPI.dll 6
0x18000b7d8
PathAppendW 0x18000b7c8
PathGetDriveNumberW 0x18000b7b8
UrlCanonicalizeW 0x18000b7d0
UrlGetPartW 0x18000b7c0
UrlIsW 0x18000b7b0
USER32.dll 34
CallWindowProcW 0x18000b858
CreateWindowExW 0x18000b7e8
DialogBoxParamW 0x18000b8f0
EnableWindow 0x18000b8c8
EndDialog 0x18000b8a0
FindWindowW 0x18000b818
GetActiveWindow 0x18000b7f8
GetClientRect 0x18000b888
GetDC 0x18000b7f0
GetDlgItem 0x18000b8c0
GetForegroundWindow 0x18000b808
GetParent 0x18000b848
GetPropW 0x18000b8d0
GetWindowRect 0x18000b890
IsDlgButtonChecked 0x18000b8b0
IsWindow 0x18000b8d8
KillTimer 0x18000b838
LoadCursorW 0x18000b820
LoadIconW 0x18000b880
MessageBoxW 0x18000b8e8
MoveWindow 0x18000b810
PostMessageW 0x18000b860
ReleaseDC 0x18000b850
SendDlgItemMessageW 0x18000b878
SendMessageW 0x18000b898
SetCursor 0x18000b828
SetFocus 0x18000b8b8
SetPropW 0x18000b8e0
SetTimer 0x18000b800
SetWindowLongPtrW 0x18000b870
SetWindowLongW 0x18000b830
SetWindowPos 0x18000b868
ShowWindow 0x18000b8a8
SystemParametersInfoW 0x18000b840