FirewallOfflineAPI.dll

Description: Windows Defender Firewall Offline API

Version: 10.0.19041.1704

Architecture: 32-bit

Operating System: Windows NT

SHA256: 7c72a795c9f8e7738c6559fc5ab4d205

File Size: 206.4 KB

Uploaded At: Dec. 1, 2025, 8:33 a.m.

Views: 30

Exported Functions

FwAddRule (Ordinal: 1, Address: 0xcd60)
FwAlloc (Ordinal: 2, Address: 0x27560)
FwAllocCheckSize (Ordinal: 3, Address: 0x274f0)
FwClosePolicyStore (Ordinal: 4, Address: 0xd520)
FwDeleteRule (Ordinal: 5, Address: 0xcbe0)
FwEnumRules (Ordinal: 6, Address: 0xc920)
FwFree (Ordinal: 7, Address: 0x275a0)
FwFreeRules (Ordinal: 8, Address: 0xa770)
FwOpenOfflinePolicyStore (Ordinal: 9, Address: 0xe320)
FwSetRule (Ordinal: 10, Address: 0xcf40)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1002f01c)
CoCreateGuid (Address: 0x1002f014)
CoTaskMemFree (Address: 0x1002f00c)
StringFromCLSID (Address: 0x1002f010)
StringFromGUID2 (Address: 0x1002f018)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1002f024)
IsDebuggerPresent (Address: 0x1002f028)
OutputDebugStringW (Address: 0x1002f02c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002f03c)
SetLastError (Address: 0x1002f038)
SetUnhandledExceptionFilter (Address: 0x1002f034)
UnhandledExceptionFilter (Address: 0x1002f040)

api-ms-win-core-file-l1-1-0.dll

GetLongPathNameW (Address: 0x1002f048)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002f050)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1002f058)
HeapAlloc (Address: 0x1002f05c)
HeapFree (Address: 0x1002f060)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree (Address: 0x1002f068)

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls (Address: 0x1002f07c)
FreeLibrary (Address: 0x1002f078)
GetModuleFileNameA (Address: 0x1002f088)
GetModuleHandleExW (Address: 0x1002f084)
GetModuleHandleW (Address: 0x1002f070)
GetProcAddress (Address: 0x1002f080)
LoadLibraryExW (Address: 0x1002f074)
LoadStringW (Address: 0x1002f08c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1002f094)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1002f09c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1002f0a4)
GetCurrentProcessId (Address: 0x1002f0a8)
GetCurrentThreadId (Address: 0x1002f0ac)
TerminateProcess (Address: 0x1002f0b0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002f0b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1002f0e0)
RegCreateKeyExW (Address: 0x1002f0d4)
RegDeleteValueW (Address: 0x1002f0cc)
RegEnumKeyExW (Address: 0x1002f0d8)
RegEnumValueW (Address: 0x1002f0dc)
RegOpenKeyExW (Address: 0x1002f0c0)
RegQueryInfoKeyW (Address: 0x1002f0c4)
RegQueryValueExW (Address: 0x1002f0d0)
RegSetValueExW (Address: 0x1002f0c8)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathCanonicalizeW (Address: 0x1002f0e8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

SHLoadIndirectString (Address: 0x1002f0f0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1002f0fc)
CompareStringW (Address: 0x1002f0f8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1002f104)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1002f114)
AcquireSRWLockShared (Address: 0x1002f120)
CreateMutexExW (Address: 0x1002f12c)
CreateSemaphoreExW (Address: 0x1002f110)
DeleteCriticalSection (Address: 0x1002f140)
EnterCriticalSection (Address: 0x1002f148)
InitializeCriticalSectionAndSpinCount (Address: 0x1002f10c)
InitializeCriticalSectionEx (Address: 0x1002f144)
LeaveCriticalSection (Address: 0x1002f11c)
OpenSemaphoreW (Address: 0x1002f138)
ReleaseMutex (Address: 0x1002f130)
ReleaseSemaphore (Address: 0x1002f128)
ReleaseSRWLockExclusive (Address: 0x1002f118)
ReleaseSRWLockShared (Address: 0x1002f124)
WaitForSingleObject (Address: 0x1002f13c)
WaitForSingleObjectEx (Address: 0x1002f134)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1002f150)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1002f160)
GetTickCount (Address: 0x1002f164)
GetTickCount64 (Address: 0x1002f158)
GetVersionExW (Address: 0x1002f15c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1002f170)
CreateThreadpoolTimer (Address: 0x1002f178)
SetThreadpoolTimer (Address: 0x1002f16c)
WaitForThreadpoolTimerCallbacks (Address: 0x1002f174)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1002f180)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1002f188)

api-ms-win-security-base-l1-1-0.dll

GetAce (Address: 0x1002f198)
GetSecurityDescriptorDacl (Address: 0x1002f194)
IsValidSecurityDescriptor (Address: 0x1002f190)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1002f1a4)
ConvertSidToStringSidW (Address: 0x1002f1a8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002f1a0)
ConvertStringSidToSidW (Address: 0x1002f1ac)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002f204)
__dllonexit (Address: 0x1002f1ec)
_amsg_exit (Address: 0x1002f1b4)
_CxxThrowException (Address: 0x1002f214)
_except_handler4_common (Address: 0x1002f220)
_initterm (Address: 0x1002f1c4)
_lock (Address: 0x1002f1e0)
_onexit (Address: 0x1002f1fc)
_purecall (Address: 0x1002f244)
_ultow (Address: 0x1002f1f0)
_unlock (Address: 0x1002f1e4)
_vsnprintf_s (Address: 0x1002f230)
_vsnwprintf (Address: 0x1002f238)
_wcsicmp (Address: 0x1002f21c)
_wcsnicmp (Address: 0x1002f1f8)
_XcptFilter (Address: 0x1002f1dc)
??0exception@@QAE@ABV0@@Z (Address: 0x1002f228)
??0exception@@QAE@XZ (Address: 0x1002f22c)
??1exception@@UAE@XZ (Address: 0x1002f240)
??1type_info@@UAE@XZ (Address: 0x1002f1d8)
??3@YAXPAX@Z (Address: 0x1002f23c)
?terminate@@YAXXZ (Address: 0x1002f1d4)
free (Address: 0x1002f1bc)
iswalpha (Address: 0x1002f1cc)
iswdigit (Address: 0x1002f208)
malloc (Address: 0x1002f1c0)
memcmp (Address: 0x1002f210)
memcpy (Address: 0x1002f20c)
memcpy_s (Address: 0x1002f234)
memmove (Address: 0x1002f200)
memmove_s (Address: 0x1002f224)
memset (Address: 0x1002f248)
qsort (Address: 0x1002f1d0)
towupper (Address: 0x1002f1b8)
wcschr (Address: 0x1002f1e8)
wcsncmp (Address: 0x1002f218)
wcspbrk (Address: 0x1002f1c8)
wcstoul (Address: 0x1002f1f4)

ntdll.dll

EtwTraceMessage (Address: 0x1002f264)
RtlCopySid (Address: 0x1002f254)
RtlIpv4AddressToStringW (Address: 0x1002f268)
RtlIpv4StringToAddressW (Address: 0x1002f260)
RtlIpv6AddressToStringW (Address: 0x1002f250)
RtlIpv6StringToAddressW (Address: 0x1002f25c)
RtlLengthSid (Address: 0x1002f258)

WS2_32.dll

htonl (Address: 0x1002f000)
ntohl (Address: 0x1002f004)