offlinelsa.dll

v10.0.19041.3684 32-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
113.5 KB
Uploaded
2025-12-01 08:37
Views
52
SHA-256
f1f26d57dd570c078949a6907ab44882

Exported functions 19

LsaOfflineAddAccountRights #1 · 0xce40
LsaOfflineAddPrivilegesToAccount #2 · 0xcc10
LsaOfflineClose #3 · 0xd1a0
LsaOfflineCreateAccount #4 · 0xc9b0
LsaOfflineDelete #5 · 0xd2d0
LsaOfflineEnumerateAccountRights #6 · 0xcd50
LsaOfflineEnumerateAccounts #7 · 0xc8f0
LsaOfflineEnumeratePrivilegesOfAccount #8 · 0xcb70
LsaOfflineFreeMemory #9 · 0xd360
LsaOfflineGetSystemAccessAccount #10 · 0xd060
LsaOfflineOpenAccount #11 · 0xca90
LsaOfflineOpenPolicy #12 · 0xc580
LsaOfflineOpenPolicyExternal #13 · 0xc730
LsaOfflineOpenPolicyForInstaller #14 · 0xc670
LsaOfflineQueryInformationPolicy #15 · 0xc840
LsaOfflineRemoveAccountRights #16 · 0xcf40
LsaOfflineRemovePrivilegesFromAccount #17 · 0xccb0
LsaOfflineSetSystemAccessAccount #18 · 0xd100
LsaOfflineSyskeyRequest #19 · 0xd380

Imported DLLs & functions 124

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x10019018
SetUnhandledExceptionFilter 0x10019014
UnhandledExceptionFilter 0x10019010
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x10019020
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10019028
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10019030
LocalFree 0x10019034
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1001903c
api-ms-win-core-libraryloader-l1-1-0.dll 1
DisableThreadLibraryCalls 0x10019044
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x1001904c
VirtualProtect 0x10019054
VirtualQuery 0x10019050
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x10019068
GetCurrentProcessId 0x1001905c
GetCurrentThreadId 0x1001906c
OpenProcessToken 0x10019064
SetThreadStackGuarantee 0x10019070
TerminateProcess 0x10019060
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x10019078
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10019080
api-ms-win-core-synch-l1-1-0.dll 3
AcquireSRWLockExclusive 0x1001908c
InitializeSRWLock 0x10019090
ReleaseSRWLockExclusive 0x10019088
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x10019098
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x100190a8
GetSystemTimeAsFileTime 0x100190a0
GetTickCount 0x100190a4
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x100190b8
GetTraceEnableLevel 0x100190b4
GetTraceLoggerHandle 0x100190bc
RegisterTraceGuidsW 0x100190c4
TraceMessage 0x100190c0
UnregisterTraceGuids 0x100190b0
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x100190d4
GetLengthSid 0x100190cc
GetTokenInformation 0x100190d0
IsValidSid 0x100190d8
api-ms-win-security-cryptoapi-l1-1-0.dll 3
CryptAcquireContextW 0x100190e8
CryptGenRandom 0x100190e0
CryptReleaseContext 0x100190e4
api-ms-win-security-lsalookup-l2-1-0.dll 2
LookupPrivilegeNameW 0x100190f4
LookupPrivilegeValueW 0x100190f0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x100190fc
ConvertStringSidToSidW 0x10019100
bcrypt.dll 9
BCryptCloseAlgorithmProvider 0x10019124
BCryptCreateHash 0x10019128
BCryptDestroyHash 0x1001910c
BCryptDestroyKey 0x1001911c
BCryptEncrypt 0x10019110
BCryptFinishHash 0x10019118
BCryptGenerateSymmetricKey 0x10019108
BCryptHashData 0x10019114
BCryptOpenAlgorithmProvider 0x10019120
msvcrt.dll 11
_amsg_exit 0x10019144
_except_handler4_common 0x10019138
_initterm 0x10019134
_purecall 0x10019150
_vsnwprintf 0x10019130
_wcsicmp 0x1001914c
_XcptFilter 0x10019148
free 0x10019140
malloc 0x1001913c
memcpy 0x10019154
memset 0x10019158
ntdll.dll 57
DbgPrintEx 0x10019164
NtAdjustPrivilegesToken 0x10019194
NtClose 0x1001922c
NtCreateKey 0x10019224
NtDeleteKey 0x100191f0
NtDeleteValueKey 0x100191dc
NtDuplicateToken 0x100191ac
NtFlushKey 0x1001920c
NtLoadKey 0x10019214
NtOpenKey 0x10019238
NtOpenProcessToken 0x100191b0
NtOpenThreadToken 0x1001919c
NtQueryInformationToken 0x100191a0
NtQueryKey 0x100191f4
NtQuerySystemInformation 0x100191a8
NtQueryValueKey 0x10019240
NtSetInformationThread 0x100191a4
NtSetSecurityObject 0x100191e0
NtSetValueKey 0x100191d4
NtUnloadKey2 0x10019208
RtlAddAccessAllowedAce 0x10019184
RtlAllocateAndInitializeSid 0x100191fc
RtlAllocateHeap 0x1001916c
RtlAnsiStringToUnicodeString 0x100191c4
RtlCompareUnicodeString 0x100191b4
RtlCopySid 0x10019228
RtlCreateAcl 0x1001917c
RtlCreateSecurityDescriptor 0x10019178
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x10019210
RtlEqualSid 0x10019198
RtlEqualUnicodeString 0x10019220
RtlFormatCurrentUserKeyPath 0x10019174
RtlFreeAnsiString 0x100191c8
RtlFreeHeap 0x10019204
RtlFreeSid 0x100191f8
RtlFreeUnicodeString 0x100191c0
RtlGetAce 0x10019188
RtlGetDaclSecurityDescriptor 0x100191d0
RtlGetGroupSecurityDescriptor 0x100191d8
RtlGetOwnerSecurityDescriptor 0x100191e4
RtlGetSaclSecurityDescriptor 0x100191e8
RtlImageNtHeader 0x100191cc
RtlInitAnsiString 0x100191b8
RtlInitializeRXact 0x10019218
RtlInitUnicodeString 0x10019234
RtlLengthSecurityDescriptor 0x1001921c
RtlLengthSid 0x10019230
RtlNewSecurityObject 0x10019180
RtlpNtEnumerateSubKey 0x100191ec
RtlRaiseStatus 0x10019170
RtlReAllocateHeap 0x10019168
RtlSetDaclSecurityDescriptor 0x1001918c
RtlSetOwnerSecurityDescriptor 0x10019190
RtlSubAuthoritySid 0x10019200
RtlUnicodeStringToAnsiString 0x100191bc
RtlUpcaseUnicodeChar 0x10019160
RtlValidSid 0x1001923c
RPCRT4.dll 3
RpcStringFreeW 0x10019000
UuidCreate 0x10019004
UuidToStringW 0x10019008