offlinelsa.dll

v10.0.19041.3205 64-bit Windows NT Analyzed
Description
Windows
Authors
© Microsoft Corporation. All rights reserved.
File size
167.4 KB
Uploaded
2025-12-01 08:17
Views
53
SHA-256
33ba17b14fcb60816c76efe087efbf9f

Exported functions 19

LsaOfflineAddAccountRights #1 · 0x10690
LsaOfflineAddPrivilegesToAccount #2 · 0x10400
LsaOfflineClose #3 · 0x10a90
LsaOfflineCreateAccount #4 · 0x10190
LsaOfflineDelete #5 · 0x10c00
LsaOfflineEnumerateAccountRights #6 · 0x10570
LsaOfflineEnumerateAccounts #7 · 0x100a0
LsaOfflineEnumeratePrivilegesOfAccount #8 · 0x10350
LsaOfflineFreeMemory #9 · 0x10ca0
LsaOfflineGetSystemAccessAccount #10 · 0x10940
LsaOfflineOpenAccount #11 · 0x10270
LsaOfflineOpenPolicy #12 · 0xfc80
LsaOfflineOpenPolicyExternal #13 · 0xfe70
LsaOfflineOpenPolicyForInstaller #14 · 0xfd90
LsaOfflineQueryInformationPolicy #15 · 0xffd0
LsaOfflineRemoveAccountRights #16 · 0x107f0
LsaOfflineRemovePrivilegesFromAccount #17 · 0x104b0
LsaOfflineSetSystemAccessAccount #18 · 0x109f0
LsaOfflineSyskeyRequest #19 · 0x10cd0

Imported DLLs & functions 163

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18001e5d8
IsDebuggerPresent 0x18001e5e0
OutputDebugStringW 0x18001e5e8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18001e608
SetLastError 0x18001e5f8
SetUnhandledExceptionFilter 0x18001e600
UnhandledExceptionFilter 0x18001e610
api-ms-win-core-file-l1-1-0.dll 1
GetFileAttributesW 0x18001e620
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18001e630
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18001e648
HeapAlloc 0x18001e650
HeapFree 0x18001e640
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x18001e668
LocalFree 0x18001e660
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
WTSGetActiveConsoleSessionId 0x18001e678
api-ms-win-core-libraryloader-l1-1-0.dll 5
DisableThreadLibraryCalls 0x18001e6a0
GetModuleFileNameA 0x18001e690
GetModuleHandleExW 0x18001e688
GetModuleHandleW 0x18001e6a8
GetProcAddress 0x18001e698
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18001e6b8
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x18001e6c8
VirtualProtect 0x18001e6d0
VirtualQuery 0x18001e6d8
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x18001e708
GetCurrentProcessId 0x18001e6f0
GetCurrentThreadId 0x18001e6f8
OpenProcessToken 0x18001e6e8
SetThreadStackGuarantee 0x18001e700
TerminateProcess 0x18001e710
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x18001e720
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18001e730
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18001e760
AcquireSRWLockShared 0x18001e748
CreateMutexExW 0x18001e770
CreateSemaphoreExW 0x18001e758
DeleteCriticalSection 0x18001e750
EnterCriticalSection 0x18001e7a0
InitializeCriticalSectionEx 0x18001e790
InitializeSRWLock 0x18001e788
LeaveCriticalSection 0x18001e768
OpenSemaphoreW 0x18001e7b0
ReleaseMutex 0x18001e7b8
ReleaseSemaphore 0x18001e7a8
ReleaseSRWLockExclusive 0x18001e778
ReleaseSRWLockShared 0x18001e740
WaitForSingleObject 0x18001e780
WaitForSingleObjectEx 0x18001e798
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18001e7c8
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x18001e7d8
GetSystemTimeAsFileTime 0x18001e7e0
GetTickCount 0x18001e7e8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18001e810
CreateThreadpoolTimer 0x18001e808
SetThreadpoolTimer 0x18001e7f8
WaitForThreadpoolTimerCallbacks 0x18001e800
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x18001e830
GetTraceEnableLevel 0x18001e820
GetTraceLoggerHandle 0x18001e848
RegisterTraceGuidsW 0x18001e828
TraceMessage 0x18001e838
UnregisterTraceGuids 0x18001e840
api-ms-win-security-base-l1-1-0.dll 4
DuplicateTokenEx 0x18001e868
GetLengthSid 0x18001e870
GetTokenInformation 0x18001e860
IsValidSid 0x18001e858
api-ms-win-security-cryptoapi-l1-1-0.dll 3
CryptAcquireContextW 0x18001e888
CryptGenRandom 0x18001e890
CryptReleaseContext 0x18001e880
api-ms-win-security-lsalookup-l2-1-0.dll 2
LookupPrivilegeNameW 0x18001e8a0
LookupPrivilegeValueW 0x18001e8a8
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x18001e8c0
ConvertStringSidToSidW 0x18001e8b8
bcrypt.dll 9
BCryptCloseAlgorithmProvider 0x18001e8f0
BCryptCreateHash 0x18001e8d8
BCryptDestroyHash 0x18001e908
BCryptDestroyKey 0x18001e8e0
BCryptEncrypt 0x18001e8e8
BCryptFinishHash 0x18001e910
BCryptGenerateSymmetricKey 0x18001e8d0
BCryptHashData 0x18001e900
BCryptOpenAlgorithmProvider 0x18001e8f8
msvcrt.dll 18
__C_specific_handler 0x18001e940
__dllonexit 0x18001e9a0
_amsg_exit 0x18001e988
_initterm 0x18001e978
_lock 0x18001e938
_onexit 0x18001e958
_purecall 0x18001e960
_unlock 0x18001e920
_vsnwprintf 0x18001e980
_wcsicmp 0x18001e930
_XcptFilter 0x18001e950
free 0x18001e998
malloc 0x18001e990
memcmp 0x18001e970
memcpy 0x18001e968
memcpy_s 0x18001e928
memmove_s 0x18001e948
memset 0x18001e9a8
ntdll.dll 60
DbgPrintEx 0x18001e9c0
NtAdjustPrivilegesToken 0x18001ea38
NtClose 0x18001eb68
NtCreateKey 0x18001eb58
NtDeleteKey 0x18001eaf0
NtDeleteValueKey 0x18001eac8
NtDuplicateToken 0x18001ea68
NtFlushKey 0x18001eb28
NtLoadKey 0x18001eb38
NtOpenKey 0x18001eb80
NtOpenProcessToken 0x18001ea70
NtOpenThreadToken 0x18001ea48
NtQueryInformationToken 0x18001ea50
NtQueryKey 0x18001eaf8
NtQuerySystemInformation 0x18001ea60
NtQueryValueKey 0x18001eaa8
NtSetInformationThread 0x18001ea58
NtSetSecurityObject 0x18001ead0
NtSetValueKey 0x18001eab8
NtUnloadKey2 0x18001eb20
RtlAddAccessAllowedAce 0x18001ea18
RtlAllocateAndInitializeSid 0x18001eb08
RtlAllocateHeap 0x18001e9d0
RtlAnsiStringToUnicodeString 0x18001eb90
RtlCaptureContext 0x18001e9f8
RtlCompareUnicodeString 0x18001ea78
RtlCopySid 0x18001eb60
RtlCreateAcl 0x18001ea08
RtlCreateSecurityDescriptor 0x18001ea00
RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x18001eb30
RtlEqualSid 0x18001ea40
RtlEqualUnicodeString 0x18001eb50
RtlFormatCurrentUserKeyPath 0x18001e9e0
RtlFreeAnsiString 0x18001eaa0
RtlFreeHeap 0x18001eb18
RtlFreeSid 0x18001eb00
RtlFreeUnicodeString 0x18001ea90
RtlGetAce 0x18001ea20
RtlGetDaclSecurityDescriptor 0x18001eab0
RtlGetGroupSecurityDescriptor 0x18001eac0
RtlGetOwnerSecurityDescriptor 0x18001ead8
RtlGetSaclSecurityDescriptor 0x18001eae0
RtlImageNtHeader 0x18001ea98
RtlInitAnsiString 0x18001ea80
RtlInitializeRXact 0x18001eb40
RtlInitUnicodeString 0x18001eb78
RtlLengthSecurityDescriptor 0x18001eb48
RtlLengthSid 0x18001eb70
RtlLookupFunctionEntry 0x18001e9f0
RtlNewSecurityObject 0x18001ea10
RtlpNtEnumerateSubKey 0x18001eae8
RtlRaiseStatus 0x18001e9d8
RtlReAllocateHeap 0x18001e9c8
RtlSetDaclSecurityDescriptor 0x18001ea28
RtlSetOwnerSecurityDescriptor 0x18001ea30
RtlSubAuthoritySid 0x18001eb10
RtlUnicodeStringToAnsiString 0x18001ea88
RtlUpcaseUnicodeChar 0x18001e9b8
RtlValidSid 0x18001eb88
RtlVirtualUnwind 0x18001e9e8
RPCRT4.dll 3
RpcStringFreeW 0x18001e5c0
UuidCreate 0x18001e5b8
UuidToStringW 0x18001e5c8