offlinelsa.dll

v10.0.19041.1940 64-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
132.8 KB
Uploaded
2025-12-01 08:17
Views
40
SHA-256
f0663b50397c5e113cd411be24f273df

Exported functions 19

LsaOfflineAddAccountRights #1 · 0x95b0
LsaOfflineAddPrivilegesToAccount #2 · 0x9320
LsaOfflineClose #3 · 0x99b0
LsaOfflineCreateAccount #4 · 0x90b0
LsaOfflineDelete #5 · 0x9b20
LsaOfflineEnumerateAccountRights #6 · 0x9490
LsaOfflineEnumerateAccounts #7 · 0x8fc0
LsaOfflineEnumeratePrivilegesOfAccount #8 · 0x9270
LsaOfflineFreeMemory #9 · 0x9bc0
LsaOfflineGetSystemAccessAccount #10 · 0x9860
LsaOfflineOpenAccount #11 · 0x9190
LsaOfflineOpenPolicy #12 · 0x8ba0
LsaOfflineOpenPolicyExternal #13 · 0x8d90
LsaOfflineOpenPolicyForInstaller #14 · 0x8cb0
LsaOfflineQueryInformationPolicy #15 · 0x8ef0
LsaOfflineRemoveAccountRights #16 · 0x9710
LsaOfflineRemovePrivilegesFromAccount #17 · 0x93d0
LsaOfflineSetSystemAccessAccount #18 · 0x9910
LsaOfflineSyskeyRequest #19 · 0x9bf0

Imported DLLs & functions 127

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x180016590
SetUnhandledExceptionFilter 0x180016588
UnhandledExceptionFilter 0x180016598
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x1800165a8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800165b8
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1800165d0
LocalFree 0x1800165c8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x1800165e0
api-ms-win-core-libraryloader-l1-1-0.dll 1
DisableThreadLibraryCalls 0x1800165f0
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x180016610
VirtualProtect 0x180016608
VirtualQuery 0x180016600
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x180016638
GetCurrentProcessId 0x180016620
GetCurrentThreadId 0x180016648
OpenProcessToken 0x180016640
SetThreadStackGuarantee 0x180016628
TerminateProcess 0x180016630
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x180016658
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180016668
api-ms-win-core-synch-l1-1-0.dll 3
AcquireSRWLockExclusive 0x180016680
InitializeSRWLock 0x180016688
ReleaseSRWLockExclusive 0x180016678
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180016698
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x1800166b8
GetSystemTimeAsFileTime 0x1800166a8
GetTickCount 0x1800166b0
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1800166d8
GetTraceEnableLevel 0x1800166d0
GetTraceLoggerHandle 0x1800166e0
RegisterTraceGuidsW 0x1800166f0
TraceMessage 0x1800166e8
UnregisterTraceGuids 0x1800166c8
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x180016710
GetLengthSid 0x180016700
GetTokenInformation 0x180016708
IsValidSid 0x180016718
api-ms-win-security-cryptoapi-l1-1-0.dll 3
CryptAcquireContextW 0x180016738
CryptGenRandom 0x180016728
CryptReleaseContext 0x180016730
api-ms-win-security-lsalookup-l2-1-0.dll 2
LookupPrivilegeNameW 0x180016750
LookupPrivilegeValueW 0x180016748
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x180016768
ConvertStringSidToSidW 0x180016760
bcrypt.dll 9
BCryptCloseAlgorithmProvider 0x1800167a0
BCryptCreateHash 0x1800167b8
BCryptDestroyHash 0x180016778
BCryptDestroyKey 0x180016780
BCryptEncrypt 0x1800167b0
BCryptFinishHash 0x180016798
BCryptGenerateSymmetricKey 0x180016788
BCryptHashData 0x1800167a8
BCryptOpenAlgorithmProvider 0x180016790
msvcrt.dll 11
__C_specific_handler 0x1800167e0
_amsg_exit 0x1800167f0
_initterm 0x1800167d8
_purecall 0x180016808
_vsnwprintf 0x1800167d0
_wcsicmp 0x180016800
_XcptFilter 0x1800167f8
free 0x1800167c8
malloc 0x1800167e8
memcpy 0x180016810
memset 0x180016818
ntdll.dll 60
DbgPrintEx 0x180016830
NtAdjustPrivilegesToken 0x1800168a8
NtClose 0x1800169d8
NtCreateKey 0x1800169c8
NtDeleteKey 0x180016960
NtDeleteValueKey 0x180016938
NtDuplicateToken 0x1800168d8
NtFlushKey 0x180016998
NtLoadKey 0x1800169a8
NtOpenKey 0x1800169f0
NtOpenProcessToken 0x1800168e0
NtOpenThreadToken 0x1800168b8
NtQueryInformationToken 0x1800168c0
NtQueryKey 0x180016968
NtQuerySystemInformation 0x1800168d0
NtQueryValueKey 0x180016918
NtSetInformationThread 0x1800168c8
NtSetSecurityObject 0x180016940
NtSetValueKey 0x180016928
NtUnloadKey2 0x180016990
RtlAddAccessAllowedAce 0x180016888
RtlAllocateAndInitializeSid 0x180016978
RtlAllocateHeap 0x180016840
RtlAnsiStringToUnicodeString 0x180016a00
RtlCaptureContext 0x180016868
RtlCompareUnicodeString 0x1800168e8
RtlCopySid 0x1800169d0
RtlCreateAcl 0x180016878
RtlCreateSecurityDescriptor 0x180016870
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x1800169a0
RtlEqualSid 0x1800168b0
RtlEqualUnicodeString 0x1800169c0
RtlFormatCurrentUserKeyPath 0x180016850
RtlFreeAnsiString 0x180016910
RtlFreeHeap 0x180016988
RtlFreeSid 0x180016970
RtlFreeUnicodeString 0x180016900
RtlGetAce 0x180016890
RtlGetDaclSecurityDescriptor 0x180016920
RtlGetGroupSecurityDescriptor 0x180016930
RtlGetOwnerSecurityDescriptor 0x180016948
RtlGetSaclSecurityDescriptor 0x180016950
RtlImageNtHeader 0x180016908
RtlInitAnsiString 0x1800168f0
RtlInitializeRXact 0x1800169b0
RtlInitUnicodeString 0x1800169e8
RtlLengthSecurityDescriptor 0x1800169b8
RtlLengthSid 0x1800169e0
RtlLookupFunctionEntry 0x180016860
RtlNewSecurityObject 0x180016880
RtlpNtEnumerateSubKey 0x180016958
RtlRaiseStatus 0x180016848
RtlReAllocateHeap 0x180016838
RtlSetDaclSecurityDescriptor 0x180016898
RtlSetOwnerSecurityDescriptor 0x1800168a0
RtlSubAuthoritySid 0x180016980
RtlUnicodeStringToAnsiString 0x1800168f8
RtlUpcaseUnicodeChar 0x180016828
RtlValidSid 0x1800169f8
RtlVirtualUnwind 0x180016858
RPCRT4.dll 3
RpcStringFreeW 0x180016568
UuidCreate 0x180016570
UuidToStringW 0x180016578