offlinelsa.dll

v10.0.19041.3266 32-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
137.8 KB
Uploaded
2025-12-01 08:37
Views
51
SHA-256
167d7930b93e6c5a98281f46b23290c5

Exported functions 19

LsaOfflineAddAccountRights #1 · 0x12530
LsaOfflineAddPrivilegesToAccount #2 · 0x12300
LsaOfflineClose #3 · 0x12890
LsaOfflineCreateAccount #4 · 0x120a0
LsaOfflineDelete #5 · 0x129c0
LsaOfflineEnumerateAccountRights #6 · 0x12440
LsaOfflineEnumerateAccounts #7 · 0x11fe0
LsaOfflineEnumeratePrivilegesOfAccount #8 · 0x12260
LsaOfflineFreeMemory #9 · 0x12a50
LsaOfflineGetSystemAccessAccount #10 · 0x12750
LsaOfflineOpenAccount #11 · 0x12180
LsaOfflineOpenPolicy #12 · 0x11c70
LsaOfflineOpenPolicyExternal #13 · 0x11e20
LsaOfflineOpenPolicyForInstaller #14 · 0x11d60
LsaOfflineQueryInformationPolicy #15 · 0x11f30
LsaOfflineRemoveAccountRights #16 · 0x12630
LsaOfflineRemovePrivilegesFromAccount #17 · 0x123a0
LsaOfflineSetSystemAccessAccount #18 · 0x127f0
LsaOfflineSyskeyRequest #19 · 0x12a70

Imported DLLs & functions 160

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1001f010
IsDebuggerPresent 0x1001f018
OutputDebugStringW 0x1001f014
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1001f02c
SetLastError 0x1001f028
SetUnhandledExceptionFilter 0x1001f020
UnhandledExceptionFilter 0x1001f024
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x1001f034
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1001f03c
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1001f04c
HeapAlloc 0x1001f044
HeapFree 0x1001f048
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1001f058
LocalFree 0x1001f054
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1001f060
api-ms-win-core-libraryloader-l1-1-0.dll 5
DisableThreadLibraryCalls 0x1001f06c
GetModuleFileNameA 0x1001f068
GetModuleHandleExW 0x1001f078
GetModuleHandleW 0x1001f070
GetProcAddress 0x1001f074
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1001f080
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x1001f090
VirtualProtect 0x1001f08c
VirtualQuery 0x1001f088
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x1001f098
GetCurrentProcessId 0x1001f0a8
GetCurrentThreadId 0x1001f09c
OpenProcessToken 0x1001f0a4
SetThreadStackGuarantee 0x1001f0a0
TerminateProcess 0x1001f0ac
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x1001f0b4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1001f0bc
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1001f0c8
AcquireSRWLockShared 0x1001f100
CreateMutexExW 0x1001f0ec
CreateSemaphoreExW 0x1001f0e8
DeleteCriticalSection 0x1001f0c4
EnterCriticalSection 0x1001f0dc
InitializeCriticalSectionEx 0x1001f0f4
InitializeSRWLock 0x1001f0f0
LeaveCriticalSection 0x1001f0cc
OpenSemaphoreW 0x1001f0f8
ReleaseMutex 0x1001f0fc
ReleaseSemaphore 0x1001f0d8
ReleaseSRWLockExclusive 0x1001f0e4
ReleaseSRWLockShared 0x1001f0e0
WaitForSingleObject 0x1001f0d4
WaitForSingleObjectEx 0x1001f0d0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1001f108
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x1001f110
GetSystemTimeAsFileTime 0x1001f114
GetTickCount 0x1001f118
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x1001f120
CreateThreadpoolTimer 0x1001f128
SetThreadpoolTimer 0x1001f12c
WaitForThreadpoolTimerCallbacks 0x1001f124
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1001f138
GetTraceEnableLevel 0x1001f13c
GetTraceLoggerHandle 0x1001f134
RegisterTraceGuidsW 0x1001f140
TraceMessage 0x1001f144
UnregisterTraceGuids 0x1001f148
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x1001f154
GetLengthSid 0x1001f150
GetTokenInformation 0x1001f158
IsValidSid 0x1001f15c
api-ms-win-security-cryptoapi-l1-1-0.dll 3
CryptAcquireContextW 0x1001f16c
CryptGenRandom 0x1001f168
CryptReleaseContext 0x1001f164
api-ms-win-security-lsalookup-l2-1-0.dll 2
LookupPrivilegeNameW 0x1001f174
LookupPrivilegeValueW 0x1001f178
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1001f180
ConvertStringSidToSidW 0x1001f184
bcrypt.dll 9
BCryptCloseAlgorithmProvider 0x1001f1a4
BCryptCreateHash 0x1001f1ac
BCryptDestroyHash 0x1001f190
BCryptDestroyKey 0x1001f19c
BCryptEncrypt 0x1001f198
BCryptFinishHash 0x1001f18c
BCryptGenerateSymmetricKey 0x1001f1a0
BCryptHashData 0x1001f194
BCryptOpenAlgorithmProvider 0x1001f1a8
msvcrt.dll 18
__dllonexit 0x1001f1bc
_amsg_exit 0x1001f1d8
_except_handler4_common 0x1001f1e4
_initterm 0x1001f1c8
_lock 0x1001f1c4
_onexit 0x1001f1b8
_purecall 0x1001f1f0
_unlock 0x1001f1c0
_vsnwprintf 0x1001f1f4
_wcsicmp 0x1001f1e8
_XcptFilter 0x1001f1dc
free 0x1001f1d4
malloc 0x1001f1cc
memcmp 0x1001f1d0
memcpy 0x1001f1b4
memcpy_s 0x1001f1ec
memmove_s 0x1001f1e0
memset 0x1001f1f8
ntdll.dll 57
DbgPrintEx 0x1001f204
NtAdjustPrivilegesToken 0x1001f234
NtClose 0x1001f2cc
NtCreateKey 0x1001f2c4
NtDeleteKey 0x1001f290
NtDeleteValueKey 0x1001f27c
NtDuplicateToken 0x1001f24c
NtFlushKey 0x1001f2ac
NtLoadKey 0x1001f2b4
NtOpenKey 0x1001f2d8
NtOpenProcessToken 0x1001f250
NtOpenThreadToken 0x1001f23c
NtQueryInformationToken 0x1001f240
NtQueryKey 0x1001f294
NtQuerySystemInformation 0x1001f248
NtQueryValueKey 0x1001f2e0
NtSetInformationThread 0x1001f244
NtSetSecurityObject 0x1001f280
NtSetValueKey 0x1001f274
NtUnloadKey2 0x1001f2a8
RtlAddAccessAllowedAce 0x1001f224
RtlAllocateAndInitializeSid 0x1001f29c
RtlAllocateHeap 0x1001f20c
RtlAnsiStringToUnicodeString 0x1001f264
RtlCompareUnicodeString 0x1001f254
RtlCopySid 0x1001f2c8
RtlCreateAcl 0x1001f21c
RtlCreateSecurityDescriptor 0x1001f218
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x1001f2b0
RtlEqualSid 0x1001f238
RtlEqualUnicodeString 0x1001f2c0
RtlFormatCurrentUserKeyPath 0x1001f214
RtlFreeAnsiString 0x1001f268
RtlFreeHeap 0x1001f2a4
RtlFreeSid 0x1001f298
RtlFreeUnicodeString 0x1001f260
RtlGetAce 0x1001f228
RtlGetDaclSecurityDescriptor 0x1001f270
RtlGetGroupSecurityDescriptor 0x1001f278
RtlGetOwnerSecurityDescriptor 0x1001f284
RtlGetSaclSecurityDescriptor 0x1001f288
RtlImageNtHeader 0x1001f26c
RtlInitAnsiString 0x1001f258
RtlInitializeRXact 0x1001f2b8
RtlInitUnicodeString 0x1001f2d4
RtlLengthSecurityDescriptor 0x1001f2bc
RtlLengthSid 0x1001f2d0
RtlNewSecurityObject 0x1001f220
RtlpNtEnumerateSubKey 0x1001f28c
RtlRaiseStatus 0x1001f210
RtlReAllocateHeap 0x1001f208
RtlSetDaclSecurityDescriptor 0x1001f22c
RtlSetOwnerSecurityDescriptor 0x1001f230
RtlSubAuthoritySid 0x1001f2a0
RtlUnicodeStringToAnsiString 0x1001f25c
RtlUpcaseUnicodeChar 0x1001f200
RtlValidSid 0x1001f2dc
RPCRT4.dll 3
RpcStringFreeW 0x1001f000
UuidCreate 0x1001f008
UuidToStringW 0x1001f004