sfc_os.dll
Description: Windows File Protection
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4842
Architecture: 32-bit
Operating System: Windows NT
SHA256: 72c44d76fbae892d9b9431146cd162be
File Size: 50.1 KB
Uploaded At: Dec. 1, 2025, 8:04 a.m.
Views: 8
Exported Functions
- BeginFileMapEnumeration (Ordinal: 1, Address: 0x7400)
- CloseFileMapEnumeration (Ordinal: 2, Address: 0x7450)
- GetNextFileMapContent (Ordinal: 3, Address: 0x7490)
- SRSetRestorePointA (Ordinal: 4, Address: 0x75f0)
- SRSetRestorePointW (Ordinal: 5, Address: 0x7670)
- SfcClose (Ordinal: 6, Address: 0x76f0)
- SfcConnectToServer (Ordinal: 7, Address: 0x7700)
- SfcFileException (Ordinal: 8, Address: 0x7710)
- SfcGetNextProtectedFile (Ordinal: 9, Address: 0x7510)
- SfcInitProt (Ordinal: 10, Address: 0x7720)
- SfcInitiateScan (Ordinal: 11, Address: 0x7730)
- SfcInstallProtectedFiles (Ordinal: 12, Address: 0x7740)
- SfcIsFileProtected (Ordinal: 13, Address: 0x4050)
- SfcIsKeyProtected (Ordinal: 14, Address: 0x7580)
- SfcTerminateWatcherThread (Ordinal: 15, Address: 0x5dd0)
- SfpDeleteCatalog (Ordinal: 16, Address: 0x7750)
- SfpInstallCatalog (Ordinal: 17, Address: 0x7760)
- SfpVerifyFile (Ordinal: 18, Address: 0x7770)
Imported DLLs & Functions
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1000b000)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1000b008)
api-ms-win-core-errorhandling-l1-1-0.dll
- RaiseException (Address: 0x1000b010)
- SetLastError (Address: 0x1000b014)
- SetUnhandledExceptionFilter (Address: 0x1000b018)
- UnhandledExceptionFilter (Address: 0x1000b01c)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1000b024)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- LocalAlloc (Address: 0x1000b02c)
- LocalFree (Address: 0x1000b030)
api-ms-win-core-libraryloader-l1-1-0.dll
- DisableThreadLibraryCalls (Address: 0x1000b03c)
- FreeLibrary (Address: 0x1000b044)
- GetModuleFileNameW (Address: 0x1000b038)
- GetProcAddress (Address: 0x1000b048)
- LoadLibraryExW (Address: 0x1000b040)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1000b054)
- GetCurrentProcessId (Address: 0x1000b050)
- GetCurrentThreadId (Address: 0x1000b05c)
- TerminateProcess (Address: 0x1000b058)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1000b064)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1000b06c)
- RegGetKeySecurity (Address: 0x1000b074)
- RegOpenKeyExW (Address: 0x1000b070)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1000b07c)
- GetTickCount (Address: 0x1000b080)
api-ms-win-security-base-l1-1-0.dll
- GetAce (Address: 0x1000b090)
- GetAclInformation (Address: 0x1000b08c)
- GetSecurityDescriptorDacl (Address: 0x1000b088)
ntdll.dll
- memcmp (Address: 0x1000b100)
- memcpy (Address: 0x1000b104)
- memmove (Address: 0x1000b0ec)
- memset (Address: 0x1000b108)
- NtClose (Address: 0x1000b0a0)
- NtOpenFile (Address: 0x1000b0b4)
- NtQueryDirectoryFile (Address: 0x1000b0ac)
- NtQueryInformationFile (Address: 0x1000b09c)
- NtReadFile (Address: 0x1000b0d0)
- RtlAllocateHeap (Address: 0x1000b0e0)
- RtlCopyMappedMemory (Address: 0x1000b0e8)
- RtlCopyUnicodeString (Address: 0x1000b0c8)
- RtlCreateServiceSid (Address: 0x1000b0b8)
- RtlCreateUnicodeString (Address: 0x1000b0c0)
- RtlDosPathNameToNtPathName_U (Address: 0x1000b0c4)
- RtlEqualSid (Address: 0x1000b0bc)
- RtlFreeHeap (Address: 0x1000b0a4)
- RtlFreeUnicodeString (Address: 0x1000b0d8)
- RtlInitUnicodeString (Address: 0x1000b0d4)
- RtlNtStatusToDosError (Address: 0x1000b0f8)
- RtlReAllocateHeap (Address: 0x1000b0cc)
- RtlSetLastWin32Error (Address: 0x1000b0f4)
- RtlUnwind (Address: 0x1000b0f0)
- ShipAssertMsgW (Address: 0x1000b0fc)
- ZwClose (Address: 0x1000b0b0)
- ZwCreateSection (Address: 0x1000b0dc)
- ZwMapViewOfSection (Address: 0x1000b098)
- ZwQueryInformationFile (Address: 0x1000b0a8)
- ZwUnmapViewOfSection (Address: 0x1000b0e4)