offlinesam.dll

v10.0.19041.2780 64-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
275.1 KB
Uploaded
2025-12-01 08:17
Views
45
SHA-256
b431b183d31f19223ac6fa01cc3b1363

Exported functions 25

SamOfflineAddMemberToAlias #1 · 0x10770
SamOfflineCloseHandle #2 · 0x112d0
SamOfflineConnect #3 · 0xf9d0
SamOfflineConnectExternal #4 · 0xfbc0
SamOfflineConnectForInstaller #5 · 0xfae0
SamOfflineCreateAliasInDomain #6 · 0x102d0
SamOfflineCreateUserInDomain #7 · 0x10e10
SamOfflineDeleteAlias #8 · 0x10610
SamOfflineDeleteUser #9 · 0x11130
SamOfflineEnumerateAliasesInDomain #10 · 0x10a60
SamOfflineEnumerateDomainsInSamServer #11 · 0xfd20
SamOfflineEnumerateUsersInDomain2 #12 · 0x10ba0
SamOfflineFreeMemory #13 · 0x11440
SamOfflineGetMembersInAlias #14 · 0x10960
SamOfflineLookupDomainInSamServer #15 · 0xfe50
SamOfflineLookupNamesInDomain #16 · 0x10080
SamOfflineOpenAlias #17 · 0x101b0
SamOfflineOpenDomain #18 · 0xff50
SamOfflineOpenUser #19 · 0x10cf0
SamOfflineQueryInformationAlias #20 · 0x10420
SamOfflineQueryInformationUser #21 · 0x10f50
SamOfflineRemoveMemberFromAlias #22 · 0x10880
SamOfflineRidToSid #23 · 0x11220
SamOfflineSetInformationAlias #24 · 0x10510
SamOfflineSetInformationUser #25 · 0x11040

Imported DLLs & functions 155

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x18001f5b8
SetUnhandledExceptionFilter 0x18001f5a8
UnhandledExceptionFilter 0x18001f5b0
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x18001f5c8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18001f5d8
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x18001f5e8
LocalFree 0x18001f5f0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x18001f600
api-ms-win-core-libraryloader-l1-1-0.dll 3
DisableThreadLibraryCalls 0x18001f620
FreeLibrary 0x18001f610
LoadLibraryExW 0x18001f618
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x18001f640
VirtualProtect 0x18001f630
VirtualQuery 0x18001f638
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x18001f668
GetCurrentProcessId 0x18001f658
GetCurrentThreadId 0x18001f678
OpenProcessToken 0x18001f670
SetThreadStackGuarantee 0x18001f650
TerminateProcess 0x18001f660
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18001f688
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18001f698
api-ms-win-core-string-l1-1-0.dll 1
CompareStringEx 0x18001f6a8
api-ms-win-core-synch-l1-1-0.dll 3
AcquireSRWLockExclusive 0x18001f6c0
InitializeSRWLock 0x18001f6b8
ReleaseSRWLockExclusive 0x18001f6c8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18001f6d8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x18001f6f8
GetSystemTimeAsFileTime 0x18001f6e8
GetTickCount 0x18001f6f0
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x18001f730
GetTraceEnableLevel 0x18001f708
GetTraceLoggerHandle 0x18001f728
RegisterTraceGuidsW 0x18001f720
TraceMessage 0x18001f710
UnregisterTraceGuids 0x18001f718
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x18001f758
GetLengthSid 0x18001f740
GetTokenInformation 0x18001f748
IsValidSid 0x18001f750
api-ms-win-security-cryptoapi-l1-1-0.dll 6
CryptAcquireContextA 0x18001f790
CryptCreateHash 0x18001f788
CryptDestroyHash 0x18001f770
CryptGetHashParam 0x18001f780
CryptHashData 0x18001f768
CryptReleaseContext 0x18001f778
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x18001f7a0
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertStringSidToSidW 0x18001f7b0
bcrypt.dll 12
BCryptCloseAlgorithmProvider 0x18001f7f0
BCryptCreateHash 0x18001f7d0
BCryptDecrypt 0x18001f800
BCryptDestroyHash 0x18001f7e0
BCryptDestroyKey 0x18001f7e8
BCryptEncrypt 0x18001f818
BCryptFinishHash 0x18001f810
BCryptGenerateSymmetricKey 0x18001f7d8
BCryptGetProperty 0x18001f808
BCryptHashData 0x18001f7c8
BCryptOpenAlgorithmProvider 0x18001f7f8
BCryptSetProperty 0x18001f7c0
CRYPTBASE.dll 3
SystemFunction001 0x18001f578
SystemFunction003 0x18001f570
SystemFunction036 0x18001f568
msvcrt.dll 13
__C_specific_handler 0x18001f848
_amsg_exit 0x18001f858
_initterm 0x18001f838
_purecall 0x18001f840
_vsnwprintf 0x18001f880
_wcsicmp 0x18001f878
_XcptFilter 0x18001f870
free 0x18001f828
malloc 0x18001f830
memcmp 0x18001f868
memcpy 0x18001f860
memmove 0x18001f850
memset 0x18001f888
ntdll.dll 69
DbgPrintEx 0x18001f8d0
NtAdjustPrivilegesToken 0x18001f950
NtClose 0x18001f8a8
NtCreateKey 0x18001f8b8
NtDeleteKey 0x18001f998
NtDeleteValueKey 0x18001f970
NtDuplicateToken 0x18001f9c8
NtFlushKey 0x18001faa0
NtLoadKey 0x18001fab0
NtOpenKey 0x18001f898
NtOpenProcessToken 0x18001f9d0
NtOpenThreadToken 0x18001f9a8
NtQueryInformationToken 0x18001f9b0
NtQueryKey 0x18001f9a0
NtQuerySystemInformation 0x18001f9c0
NtQuerySystemTime 0x18001fa80
NtQueryValueKey 0x18001f958
NtSetInformationThread 0x18001f9b8
NtSetSecurityObject 0x18001f978
NtSetValueKey 0x18001f960
NtUnloadKey2 0x18001fa98
RtlAbsoluteToSelfRelativeSD 0x18001fa08
RtlAddAccessAllowedAce 0x18001fa10
RtlAddAuditAccessAce 0x18001fa00
RtlAllocateAndInitializeSid 0x18001fa18
RtlAllocateHeap 0x18001f8e0
RtlAppendUnicodeStringToString 0x18001f948
RtlAppendUnicodeToString 0x18001f918
RtlCaptureContext 0x18001f908
RtlCompareUnicodeString 0x18001f9d8
RtlConvertSidToUnicodeString 0x18001fa68
RtlCopySid 0x18001f8b0
RtlCopyUnicodeString 0x18001f938
RtlCreateAcl 0x18001f9f8
RtlCreateSecurityDescriptor 0x18001f9e8
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x18001faa8
RtlEqualSid 0x18001fa88
RtlFindMessage 0x18001f910
RtlFormatCurrentUserKeyPath 0x18001f8f0
RtlFreeHeap 0x18001fa90
RtlFreeUnicodeString 0x18001fa60
RtlGetAce 0x18001fa20
RtlGetDaclSecurityDescriptor 0x18001f9e0
RtlGetGroupSecurityDescriptor 0x18001f968
RtlGetOwnerSecurityDescriptor 0x18001f980
RtlGetSaclSecurityDescriptor 0x18001f988
RtlIdentifierAuthoritySid 0x18001f940
RtlImageNtHeader 0x18001f8c0
RtlInitializeRXact 0x18001fab8
RtlInitializeSid 0x18001fa38
RtlInitUnicodeString 0x18001f8a0
RtlIntegerToUnicodeString 0x18001f920
RtlLengthRequiredSid 0x18001f930
RtlLengthSid 0x18001fa50
RtlLookupFunctionEntry 0x18001f900
RtlMapGenericMask 0x18001fa30
RtlpNtEnumerateSubKey 0x18001f990
RtlRaiseStatus 0x18001f8e8
RtlReAllocateHeap 0x18001f8d8
RtlSetDaclSecurityDescriptor 0x18001fa28
RtlSetGroupSecurityDescriptor 0x18001f9f0
RtlSetOwnerSecurityDescriptor 0x18001fa40
RtlSetSaclSecurityDescriptor 0x18001fa48
RtlSubAuthorityCountSid 0x18001fa58
RtlSubAuthoritySid 0x18001fa70
RtlUpcaseUnicodeChar 0x18001f8c8
RtlUpcaseUnicodeStringToOemString 0x18001f928
RtlValidSid 0x18001fa78
RtlVirtualUnwind 0x18001f8f8
offlinelsa.dll 7
LsaOfflineClose 0x18001fae0
LsaOfflineFreeMemory 0x18001faf0
LsaOfflineOpenPolicy 0x18001fac8
LsaOfflineOpenPolicyExternal 0x18001fad8
LsaOfflineOpenPolicyForInstaller 0x18001fad0
LsaOfflineQueryInformationPolicy 0x18001faf8
LsaOfflineSyskeyRequest 0x18001fae8
RPCRT4.dll 3
RpcStringFreeW 0x18001f588
UuidCreate 0x18001f598
UuidToStringW 0x18001f590