offlinesam.dll

v10.0.19041.1704 32-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
231.4 KB
Uploaded
2025-12-01 08:37
Views
48
SHA-256
b21cbe6fdc261096b8e2f4e93b961be6

Exported functions 25

SamOfflineAddMemberToAlias #1 · 0xf0b0
SamOfflineCloseHandle #2 · 0xfa10
SamOfflineConnect #3 · 0xe5d0
SamOfflineConnectExternal #4 · 0xe780
SamOfflineConnectForInstaller #5 · 0xe6c0
SamOfflineCreateAliasInDomain #6 · 0xed10
SamOfflineCreateUserInDomain #7 · 0xf610
SamOfflineDeleteAlias #8 · 0xefc0
SamOfflineDeleteUser #9 · 0xf8b0
SamOfflineEnumerateAliasesInDomain #10 · 0xf310
SamOfflineEnumerateDomainsInSamServer #11 · 0xe890
SamOfflineEnumerateUsersInDomain2 #12 · 0xf410
SamOfflineFreeMemory #13 · 0xfb10
SamOfflineGetMembersInAlias #14 · 0xf250
SamOfflineLookupDomainInSamServer #15 · 0xe970
SamOfflineLookupNamesInDomain #16 · 0xeb40
SamOfflineOpenAlias #17 · 0xec20
SamOfflineOpenDomain #18 · 0xea40
SamOfflineOpenUser #19 · 0xf510
SamOfflineQueryInformationAlias #20 · 0xee30
SamOfflineQueryInformationUser #21 · 0xf720
SamOfflineRemoveMemberFromAlias #22 · 0xf190
SamOfflineRidToSid #23 · 0xf980
SamOfflineSetInformationAlias #24 · 0xeef0
SamOfflineSetInformationUser #25 · 0xf7f0

Imported DLLs & functions 152

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x1001c028
SetUnhandledExceptionFilter 0x1001c020
UnhandledExceptionFilter 0x1001c024
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x1001c030
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1001c038
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1001c040
LocalFree 0x1001c044
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1001c04c
api-ms-win-core-libraryloader-l1-1-0.dll 3
DisableThreadLibraryCalls 0x1001c05c
FreeLibrary 0x1001c058
LoadLibraryExW 0x1001c054
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x1001c064
VirtualProtect 0x1001c06c
VirtualQuery 0x1001c068
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x1001c084
GetCurrentProcessId 0x1001c078
GetCurrentThreadId 0x1001c080
OpenProcessToken 0x1001c088
SetThreadStackGuarantee 0x1001c074
TerminateProcess 0x1001c07c
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x1001c090
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1001c098
api-ms-win-core-string-l1-1-0.dll 1
CompareStringEx 0x1001c0a0
api-ms-win-core-synch-l1-1-0.dll 3
AcquireSRWLockExclusive 0x1001c0a8
InitializeSRWLock 0x1001c0ac
ReleaseSRWLockExclusive 0x1001c0b0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1001c0b8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x1001c0c4
GetSystemTimeAsFileTime 0x1001c0c0
GetTickCount 0x1001c0c8
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1001c0e4
GetTraceEnableLevel 0x1001c0d0
GetTraceLoggerHandle 0x1001c0e0
RegisterTraceGuidsW 0x1001c0dc
TraceMessage 0x1001c0d4
UnregisterTraceGuids 0x1001c0d8
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x1001c0f8
GetLengthSid 0x1001c0ec
GetTokenInformation 0x1001c0f0
IsValidSid 0x1001c0f4
api-ms-win-security-cryptoapi-l1-1-0.dll 6
CryptAcquireContextA 0x1001c114
CryptCreateHash 0x1001c110
CryptDestroyHash 0x1001c104
CryptGetHashParam 0x1001c10c
CryptHashData 0x1001c100
CryptReleaseContext 0x1001c108
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1001c11c
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertStringSidToSidW 0x1001c124
bcrypt.dll 12
BCryptCloseAlgorithmProvider 0x1001c150
BCryptCreateHash 0x1001c134
BCryptDecrypt 0x1001c14c
BCryptDestroyHash 0x1001c13c
BCryptDestroyKey 0x1001c158
BCryptEncrypt 0x1001c154
BCryptFinishHash 0x1001c144
BCryptGenerateSymmetricKey 0x1001c138
BCryptGetProperty 0x1001c140
BCryptHashData 0x1001c130
BCryptOpenAlgorithmProvider 0x1001c148
BCryptSetProperty 0x1001c12c
CRYPTBASE.dll 3
SystemFunction001 0x1001c008
SystemFunction003 0x1001c004
SystemFunction036 0x1001c000
msvcrt.dll 13
_amsg_exit 0x1001c178
_except_handler4_common 0x1001c168
_initterm 0x1001c164
_purecall 0x1001c16c
_vsnwprintf 0x1001c18c
_wcsicmp 0x1001c188
_XcptFilter 0x1001c184
free 0x1001c174
malloc 0x1001c160
memcmp 0x1001c180
memcpy 0x1001c17c
memmove 0x1001c170
memset 0x1001c190
ntdll.dll 66
DbgPrintEx 0x1001c1b4
NtAdjustPrivilegesToken 0x1001c1e8
NtClose 0x1001c1a0
NtCreateKey 0x1001c1a8
NtDeleteKey 0x1001c20c
NtDeleteValueKey 0x1001c1f8
NtDuplicateToken 0x1001c224
NtFlushKey 0x1001c290
NtLoadKey 0x1001c298
NtOpenKey 0x1001c198
NtOpenProcessToken 0x1001c228
NtOpenThreadToken 0x1001c214
NtQueryInformationToken 0x1001c218
NtQueryKey 0x1001c210
NtQuerySystemInformation 0x1001c220
NtQuerySystemTime 0x1001c280
NtQueryValueKey 0x1001c1ec
NtSetInformationThread 0x1001c21c
NtSetSecurityObject 0x1001c1fc
NtSetValueKey 0x1001c1f0
NtUnloadKey2 0x1001c28c
RtlAbsoluteToSelfRelativeSD 0x1001c244
RtlAddAccessAllowedAce 0x1001c248
RtlAddAuditAccessAce 0x1001c240
RtlAllocateAndInitializeSid 0x1001c24c
RtlAllocateHeap 0x1001c1bc
RtlAppendUnicodeStringToString 0x1001c1e4
RtlAppendUnicodeToString 0x1001c1cc
RtlCompareUnicodeString 0x1001c22c
RtlConvertSidToUnicodeString 0x1001c274
RtlCopySid 0x1001c1a4
RtlCopyUnicodeString 0x1001c1dc
RtlCreateAcl 0x1001c23c
RtlCreateSecurityDescriptor 0x1001c234
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x1001c294
RtlEqualSid 0x1001c284
RtlFindMessage 0x1001c1c8
RtlFormatCurrentUserKeyPath 0x1001c1c4
RtlFreeHeap 0x1001c288
RtlFreeUnicodeString 0x1001c270
RtlGetAce 0x1001c250
RtlGetDaclSecurityDescriptor 0x1001c230
RtlGetGroupSecurityDescriptor 0x1001c1f4
RtlGetOwnerSecurityDescriptor 0x1001c200
RtlGetSaclSecurityDescriptor 0x1001c204
RtlIdentifierAuthoritySid 0x1001c1e0
RtlImageNtHeader 0x1001c1ac
RtlInitializeRXact 0x1001c29c
RtlInitializeSid 0x1001c25c
RtlInitUnicodeString 0x1001c19c
RtlIntegerToUnicodeString 0x1001c1d0
RtlLengthRequiredSid 0x1001c1d8
RtlLengthSid 0x1001c268
RtlMapGenericMask 0x1001c258
RtlpNtEnumerateSubKey 0x1001c208
RtlRaiseStatus 0x1001c1c0
RtlReAllocateHeap 0x1001c1b8
RtlSetDaclSecurityDescriptor 0x1001c254
RtlSetGroupSecurityDescriptor 0x1001c238
RtlSetOwnerSecurityDescriptor 0x1001c260
RtlSetSaclSecurityDescriptor 0x1001c264
RtlSubAuthorityCountSid 0x1001c26c
RtlSubAuthoritySid 0x1001c278
RtlUpcaseUnicodeChar 0x1001c1b0
RtlUpcaseUnicodeStringToOemString 0x1001c1d4
RtlValidSid 0x1001c27c
offlinelsa.dll 7
LsaOfflineClose 0x1001c2b0
LsaOfflineFreeMemory 0x1001c2b8
LsaOfflineOpenPolicy 0x1001c2a4
LsaOfflineOpenPolicyExternal 0x1001c2ac
LsaOfflineOpenPolicyForInstaller 0x1001c2a8
LsaOfflineQueryInformationPolicy 0x1001c2bc
LsaOfflineSyskeyRequest 0x1001c2b4
RPCRT4.dll 3
RpcStringFreeW 0x1001c014
UuidCreate 0x1001c010
UuidToStringW 0x1001c018