FirewallOfflineAPI.dll

Description: Windows Defender Firewall Offline API

Version: 10.0.19041.3205

Architecture: 32-bit

Operating System: Windows NT

SHA256: aa3f692c4019ef85de205708c67a2d8e

File Size: 201.3 KB

Uploaded At: Dec. 1, 2025, 8:34 a.m.

Views: 23

Exported Functions

FwAddRule (Ordinal: 1, Address: 0xce90)
FwAlloc (Ordinal: 2, Address: 0x26430)
FwAllocCheckSize (Ordinal: 3, Address: 0x263c0)
FwClosePolicyStore (Ordinal: 4, Address: 0xd650)
FwDeleteRule (Ordinal: 5, Address: 0xcd10)
FwEnumRules (Ordinal: 6, Address: 0xca50)
FwFree (Ordinal: 7, Address: 0x26470)
FwFreeRules (Ordinal: 8, Address: 0xa760)
FwOpenOfflinePolicyStore (Ordinal: 9, Address: 0xe440)
FwSetRule (Ordinal: 10, Address: 0xd070)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1002e01c)
CoCreateGuid (Address: 0x1002e014)
CoTaskMemFree (Address: 0x1002e00c)
StringFromCLSID (Address: 0x1002e010)
StringFromGUID2 (Address: 0x1002e018)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1002e02c)
IsDebuggerPresent (Address: 0x1002e028)
OutputDebugStringW (Address: 0x1002e024)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002e038)
SetLastError (Address: 0x1002e03c)
SetUnhandledExceptionFilter (Address: 0x1002e040)
UnhandledExceptionFilter (Address: 0x1002e034)

api-ms-win-core-file-l1-1-0.dll

GetLongPathNameW (Address: 0x1002e048)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002e050)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1002e058)
HeapAlloc (Address: 0x1002e05c)
HeapFree (Address: 0x1002e060)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree (Address: 0x1002e068)

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls (Address: 0x1002e074)
FreeLibrary (Address: 0x1002e080)
GetModuleFileNameA (Address: 0x1002e088)
GetModuleHandleExW (Address: 0x1002e08c)
GetModuleHandleW (Address: 0x1002e07c)
GetProcAddress (Address: 0x1002e078)
LoadLibraryExW (Address: 0x1002e084)
LoadStringW (Address: 0x1002e070)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1002e094)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1002e09c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1002e0a8)
GetCurrentProcessId (Address: 0x1002e0ac)
GetCurrentThreadId (Address: 0x1002e0a4)
TerminateProcess (Address: 0x1002e0b0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002e0b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1002e0cc)
RegCreateKeyExW (Address: 0x1002e0c4)
RegDeleteValueW (Address: 0x1002e0d0)
RegEnumKeyExW (Address: 0x1002e0d8)
RegEnumValueW (Address: 0x1002e0d4)
RegOpenKeyExW (Address: 0x1002e0c8)
RegQueryInfoKeyW (Address: 0x1002e0dc)
RegQueryValueExW (Address: 0x1002e0e0)
RegSetValueExW (Address: 0x1002e0c0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathCanonicalizeW (Address: 0x1002e0e8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

SHLoadIndirectString (Address: 0x1002e0f0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1002e0f8)
CompareStringW (Address: 0x1002e0fc)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1002e104)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1002e11c)
AcquireSRWLockShared (Address: 0x1002e124)
CreateMutexExW (Address: 0x1002e10c)
CreateSemaphoreExW (Address: 0x1002e118)
DeleteCriticalSection (Address: 0x1002e13c)
EnterCriticalSection (Address: 0x1002e148)
InitializeCriticalSectionAndSpinCount (Address: 0x1002e110)
InitializeCriticalSectionEx (Address: 0x1002e144)
LeaveCriticalSection (Address: 0x1002e114)
OpenSemaphoreW (Address: 0x1002e130)
ReleaseMutex (Address: 0x1002e134)
ReleaseSemaphore (Address: 0x1002e12c)
ReleaseSRWLockExclusive (Address: 0x1002e120)
ReleaseSRWLockShared (Address: 0x1002e128)
WaitForSingleObject (Address: 0x1002e138)
WaitForSingleObjectEx (Address: 0x1002e140)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1002e150)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1002e15c)
GetTickCount (Address: 0x1002e158)
GetTickCount64 (Address: 0x1002e160)
GetVersionExW (Address: 0x1002e164)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1002e16c)
CreateThreadpoolTimer (Address: 0x1002e178)
SetThreadpoolTimer (Address: 0x1002e174)
WaitForThreadpoolTimerCallbacks (Address: 0x1002e170)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1002e180)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1002e188)

api-ms-win-security-base-l1-1-0.dll

GetAce (Address: 0x1002e198)
GetSecurityDescriptorDacl (Address: 0x1002e194)
IsValidSecurityDescriptor (Address: 0x1002e190)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1002e1a8)
ConvertSidToStringSidW (Address: 0x1002e1a0)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002e1a4)
ConvertStringSidToSidW (Address: 0x1002e1ac)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002e218)
__dllonexit (Address: 0x1002e1fc)
_amsg_exit (Address: 0x1002e1d0)
_CxxThrowException (Address: 0x1002e20c)
_except_handler4_common (Address: 0x1002e1c4)
_initterm (Address: 0x1002e1bc)
_lock (Address: 0x1002e1d8)
_onexit (Address: 0x1002e21c)
_purecall (Address: 0x1002e244)
_ultow (Address: 0x1002e1ec)
_unlock (Address: 0x1002e1f4)
_vsnprintf_s (Address: 0x1002e230)
_vsnwprintf (Address: 0x1002e238)
_wcsicmp (Address: 0x1002e1dc)
_wcsnicmp (Address: 0x1002e220)
_XcptFilter (Address: 0x1002e1e0)
??0exception@@QAE@ABV0@@Z (Address: 0x1002e228)
??0exception@@QAE@XZ (Address: 0x1002e22c)
??1exception@@UAE@XZ (Address: 0x1002e240)
??1type_info@@UAE@XZ (Address: 0x1002e1c8)
??3@YAXPAX@Z (Address: 0x1002e23c)
?terminate@@YAXXZ (Address: 0x1002e214)
free (Address: 0x1002e1e4)
iswalpha (Address: 0x1002e1c0)
iswdigit (Address: 0x1002e200)
malloc (Address: 0x1002e1e8)
memcmp (Address: 0x1002e208)
memcpy (Address: 0x1002e204)
memcpy_s (Address: 0x1002e234)
memmove (Address: 0x1002e1f8)
memmove_s (Address: 0x1002e224)
memset (Address: 0x1002e248)
qsort (Address: 0x1002e1cc)
towupper (Address: 0x1002e1b4)
wcschr (Address: 0x1002e1d4)
wcsncmp (Address: 0x1002e210)
wcspbrk (Address: 0x1002e1b8)
wcstoul (Address: 0x1002e1f0)

ntdll.dll

EtwTraceMessage (Address: 0x1002e264)
RtlCopySid (Address: 0x1002e254)
RtlIpv4AddressToStringW (Address: 0x1002e268)
RtlIpv4StringToAddressW (Address: 0x1002e260)
RtlIpv6AddressToStringW (Address: 0x1002e250)
RtlIpv6StringToAddressW (Address: 0x1002e25c)
RtlLengthSid (Address: 0x1002e258)

WS2_32.dll

htonl (Address: 0x1002e000)
ntohl (Address: 0x1002e004)