FirewallOfflineAPI.dll

Description: Windows Defender Firewall Offline API

Version: 10.0.19041.5071

Architecture: 32-bit

Operating System: Windows NT

SHA256: b18bf147fef66e3863b20d99c5822dca

File Size: 197.0 KB

Uploaded At: Dec. 1, 2025, 8:36 a.m.

Views: 28

Exported Functions

FwAddRule (Ordinal: 1, Address: 0x7130)
FwAlloc (Ordinal: 2, Address: 0x252e0)
FwAllocCheckSize (Ordinal: 3, Address: 0x25270)
FwClosePolicyStore (Ordinal: 4, Address: 0x78f0)
FwDeleteRule (Ordinal: 5, Address: 0x6fb0)
FwEnumRules (Ordinal: 6, Address: 0x6cf0)
FwFree (Ordinal: 7, Address: 0x25320)
FwFreeRules (Ordinal: 8, Address: 0x4d10)
FwOpenOfflinePolicyStore (Ordinal: 9, Address: 0x8730)
FwSetRule (Ordinal: 10, Address: 0x7310)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1002d01c)
CoCreateGuid (Address: 0x1002d014)
CoTaskMemFree (Address: 0x1002d00c)
StringFromCLSID (Address: 0x1002d010)
StringFromGUID2 (Address: 0x1002d018)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1002d028)
IsDebuggerPresent (Address: 0x1002d02c)
OutputDebugStringW (Address: 0x1002d024)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002d038)
SetLastError (Address: 0x1002d034)
SetUnhandledExceptionFilter (Address: 0x1002d040)
UnhandledExceptionFilter (Address: 0x1002d03c)

api-ms-win-core-file-l1-1-0.dll

GetLongPathNameW (Address: 0x1002d048)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002d050)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1002d05c)
HeapAlloc (Address: 0x1002d058)
HeapFree (Address: 0x1002d060)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree (Address: 0x1002d068)

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls (Address: 0x1002d070)
FreeLibrary (Address: 0x1002d074)
GetModuleFileNameA (Address: 0x1002d08c)
GetModuleHandleExW (Address: 0x1002d088)
GetModuleHandleW (Address: 0x1002d07c)
GetProcAddress (Address: 0x1002d078)
LoadLibraryExW (Address: 0x1002d084)
LoadStringW (Address: 0x1002d080)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1002d094)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1002d09c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1002d0a4)
GetCurrentProcessId (Address: 0x1002d0ac)
GetCurrentThreadId (Address: 0x1002d0a8)
TerminateProcess (Address: 0x1002d0b0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002d0b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1002d0c4)
RegCreateKeyExW (Address: 0x1002d0d8)
RegDeleteValueW (Address: 0x1002d0e0)
RegEnumKeyExW (Address: 0x1002d0cc)
RegEnumValueW (Address: 0x1002d0d4)
RegOpenKeyExW (Address: 0x1002d0c8)
RegQueryInfoKeyW (Address: 0x1002d0dc)
RegQueryValueExW (Address: 0x1002d0d0)
RegSetValueExW (Address: 0x1002d0c0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathCanonicalizeW (Address: 0x1002d0e8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

SHLoadIndirectString (Address: 0x1002d0f0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1002d0fc)
CompareStringW (Address: 0x1002d0f8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1002d104)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1002d148)
AcquireSRWLockShared (Address: 0x1002d13c)
CreateMutexExW (Address: 0x1002d110)
CreateSemaphoreExW (Address: 0x1002d118)
DeleteCriticalSection (Address: 0x1002d128)
EnterCriticalSection (Address: 0x1002d134)
InitializeCriticalSectionAndSpinCount (Address: 0x1002d10c)
InitializeCriticalSectionEx (Address: 0x1002d130)
LeaveCriticalSection (Address: 0x1002d114)
OpenSemaphoreW (Address: 0x1002d11c)
ReleaseMutex (Address: 0x1002d120)
ReleaseSemaphore (Address: 0x1002d124)
ReleaseSRWLockExclusive (Address: 0x1002d140)
ReleaseSRWLockShared (Address: 0x1002d12c)
WaitForSingleObject (Address: 0x1002d144)
WaitForSingleObjectEx (Address: 0x1002d138)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1002d150)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1002d160)
GetTickCount (Address: 0x1002d164)
GetTickCount64 (Address: 0x1002d158)
GetVersionExW (Address: 0x1002d15c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1002d178)
CreateThreadpoolTimer (Address: 0x1002d170)
SetThreadpoolTimer (Address: 0x1002d16c)
WaitForThreadpoolTimerCallbacks (Address: 0x1002d174)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1002d180)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1002d188)

api-ms-win-security-base-l1-1-0.dll

GetAce (Address: 0x1002d198)
GetSecurityDescriptorDacl (Address: 0x1002d194)
IsValidSecurityDescriptor (Address: 0x1002d190)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1002d1a0)
ConvertSidToStringSidW (Address: 0x1002d1ac)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002d1a4)
ConvertStringSidToSidW (Address: 0x1002d1a8)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002d228)
__dllonexit (Address: 0x1002d1f8)
_amsg_exit (Address: 0x1002d21c)
_CxxThrowException (Address: 0x1002d210)
_except_handler4_common (Address: 0x1002d1fc)
_initterm (Address: 0x1002d1dc)
_lock (Address: 0x1002d1e8)
_onexit (Address: 0x1002d224)
_purecall (Address: 0x1002d1ec)
_ultow (Address: 0x1002d1f0)
_unlock (Address: 0x1002d1f4)
_vsnprintf_s (Address: 0x1002d218)
_vsnwprintf (Address: 0x1002d23c)
_wcsicmp (Address: 0x1002d238)
_wcsnicmp (Address: 0x1002d240)
_XcptFilter (Address: 0x1002d1b4)
??0exception@@QAE@ABV0@@Z (Address: 0x1002d244)
??0exception@@QAE@XZ (Address: 0x1002d220)
??1exception@@UAE@XZ (Address: 0x1002d1c8)
??1type_info@@UAE@XZ (Address: 0x1002d1e4)
??3@YAXPAX@Z (Address: 0x1002d1cc)
?terminate@@YAXXZ (Address: 0x1002d1e0)
free (Address: 0x1002d1d0)
iswalpha (Address: 0x1002d1c0)
iswdigit (Address: 0x1002d230)
malloc (Address: 0x1002d1c4)
memcmp (Address: 0x1002d20c)
memcpy (Address: 0x1002d208)
memcpy_s (Address: 0x1002d214)
memmove (Address: 0x1002d200)
memmove_s (Address: 0x1002d204)
memset (Address: 0x1002d248)
qsort (Address: 0x1002d1d4)
towupper (Address: 0x1002d1b8)
wcschr (Address: 0x1002d1d8)
wcsncmp (Address: 0x1002d234)
wcspbrk (Address: 0x1002d1bc)
wcstoul (Address: 0x1002d22c)

ntdll.dll

EtwTraceMessage (Address: 0x1002d264)
RtlCopySid (Address: 0x1002d254)
RtlIpv4AddressToStringW (Address: 0x1002d268)
RtlIpv4StringToAddressW (Address: 0x1002d260)
RtlIpv6AddressToStringW (Address: 0x1002d250)
RtlIpv6StringToAddressW (Address: 0x1002d25c)
RtlLengthSid (Address: 0x1002d258)

WS2_32.dll

htonl (Address: 0x1002d000)
ntohl (Address: 0x1002d004)