sfc_os.dll
Description: Windows File Protection
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4842
Architecture: 64-bit
Operating System: Windows NT
SHA256: 0492b97f73998df5ae07a19b5a434d72
File Size: 58.2 KB
Uploaded At: Dec. 1, 2025, 7:39 a.m.
Views: 7
Exported Functions
- BeginFileMapEnumeration (Ordinal: 1, Address: 0x4aa0)
- CloseFileMapEnumeration (Ordinal: 2, Address: 0x4b10)
- GetNextFileMapContent (Ordinal: 3, Address: 0x4b70)
- SRSetRestorePointA (Ordinal: 4, Address: 0x4d20)
- SRSetRestorePointW (Ordinal: 5, Address: 0x4dd0)
- SfcClose (Ordinal: 6, Address: 0x3810)
- SfcConnectToServer (Ordinal: 7, Address: 0x3820)
- SfcFileException (Ordinal: 8, Address: 0x3820)
- SfcGetNextProtectedFile (Ordinal: 9, Address: 0x4c40)
- SfcInitProt (Ordinal: 10, Address: 0x4e80)
- SfcInitiateScan (Ordinal: 11, Address: 0x3820)
- SfcInstallProtectedFiles (Ordinal: 12, Address: 0x3820)
- SfcIsFileProtected (Ordinal: 13, Address: 0x1010)
- SfcIsKeyProtected (Ordinal: 14, Address: 0x4ce0)
- SfcTerminateWatcherThread (Ordinal: 15, Address: 0x3810)
- SfpDeleteCatalog (Ordinal: 16, Address: 0x4e80)
- SfpInstallCatalog (Ordinal: 17, Address: 0x4e80)
- SfpVerifyFile (Ordinal: 18, Address: 0x4e90)
Imported DLLs & Functions
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180008680)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180008690)
api-ms-win-core-errorhandling-l1-1-0.dll
- RaiseException (Address: 0x1800086a0)
- SetLastError (Address: 0x1800086b8)
- SetUnhandledExceptionFilter (Address: 0x1800086b0)
- UnhandledExceptionFilter (Address: 0x1800086a8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800086c8)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x1800086e0)
- LocalFree (Address: 0x1800086d8)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x180008710)
- FreeLibrary (Address: 0x180008708)
- GetModuleFileNameW (Address: 0x1800086f0)
- GetProcAddress (Address: 0x1800086f8)
- LoadLibraryExW (Address: 0x180008700)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180008738)
- GetCurrentProcessId (Address: 0x180008728)
- GetCurrentThreadId (Address: 0x180008730)
- TerminateProcess (Address: 0x180008720)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180008748)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180008758)
- RegGetKeySecurity (Address: 0x180008768)
- RegOpenKeyExW (Address: 0x180008760)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x180008780)
- GetTickCount (Address: 0x180008778)
api-ms-win-security-base-l1-1-0.dll
- GetAce (Address: 0x180008790)
- GetAclInformation (Address: 0x180008798)
- GetSecurityDescriptorDacl (Address: 0x1800087a0)
ntdll.dll
- __C_specific_handler (Address: 0x180008848)
- memcpy (Address: 0x180008898)
- memmove (Address: 0x180008858)
- memset (Address: 0x1800088a0)
- NtClose (Address: 0x1800087b8)
- NtOpenFile (Address: 0x1800087f8)
- NtQueryDirectoryFile (Address: 0x1800087e8)
- NtQueryInformationFile (Address: 0x1800087c8)
- NtReadFile (Address: 0x1800087d0)
- RtlAllocateHeap (Address: 0x180008838)
- RtlCaptureContext (Address: 0x180008870)
- RtlCopyMappedMemory (Address: 0x180008860)
- RtlCopyUnicodeString (Address: 0x180008820)
- RtlCreateServiceSid (Address: 0x180008800)
- RtlCreateUnicodeString (Address: 0x180008810)
- RtlDosPathNameToNtPathName_U (Address: 0x180008818)
- RtlEqualSid (Address: 0x180008808)
- RtlFreeHeap (Address: 0x1800087d8)
- RtlFreeUnicodeString (Address: 0x180008830)
- RtlInitUnicodeString (Address: 0x180008828)
- RtlLookupFunctionEntry (Address: 0x180008868)
- RtlNtStatusToDosError (Address: 0x180008880)
- RtlReAllocateHeap (Address: 0x1800087b0)
- RtlSetLastWin32Error (Address: 0x180008878)
- RtlVirtualUnwind (Address: 0x180008850)
- ShipAssertMsgW (Address: 0x180008888)
- ZwClose (Address: 0x1800087f0)
- ZwCreateSection (Address: 0x180008890)
- ZwMapViewOfSection (Address: 0x1800087c0)
- ZwQueryInformationFile (Address: 0x1800087e0)
- ZwUnmapViewOfSection (Address: 0x180008840)