WfHC.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
Windows Defender Firewall Helper Class
Authors
© Microsoft Corporation. All rights reserved.
File size
88.5 KB
Uploaded
2025-12-01 07:42
Views
64
SHA-256
ae7d7daa9b091bf25278e67c7d3170f4

Exported functions 2

DllCanUnloadNow #1 · 0x5730
DllGetClassObject #2 · 0x5770

Imported DLLs & functions 108

api-ms-win-core-com-l1-1-0.dll 6
CoCreateInstance 0x18000f080
CoInitializeEx 0x18000f060
CoTaskMemAlloc 0x18000f058
CoTaskMemFree 0x18000f070
CoTaskMemRealloc 0x18000f078
CoUninitialize 0x18000f068
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18000f0a8
RaiseException 0x18000f0a0
SetUnhandledExceptionFilter 0x18000f090
UnhandledExceptionFilter 0x18000f098
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x18000f0c8
HeapAlloc 0x18000f0b8
HeapDestroy 0x18000f0e0
HeapFree 0x18000f0c0
HeapReAlloc 0x18000f0d0
HeapSize 0x18000f0d8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18000f0f0
LocalFree 0x18000f0f8
api-ms-win-core-libraryloader-l1-2-0.dll 6
FindResourceExW 0x18000f110
GetModuleFileNameA 0x18000f130
LoadResource 0x18000f108
LoadStringW 0x18000f118
LockResource 0x18000f120
SizeofResource 0x18000f128
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18000f140
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18000f158
GetCurrentProcessId 0x18000f168
GetCurrentThreadId 0x18000f150
TerminateProcess 0x18000f160
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000f178
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathFindFileNameW 0x18000f188
api-ms-win-core-string-l1-1-0.dll 1
CompareStringW 0x18000f198
api-ms-win-core-string-l2-1-1.dll 1
SHLoadIndirectString 0x18000f1a8
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrcmpiW 0x18000f1b8
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x18000f1e8
DeleteCriticalSection 0x18000f1d0
EnterCriticalSection 0x18000f1d8
InitializeCriticalSection 0x18000f1f0
LeaveCriticalSection 0x18000f1e0
ReleaseSRWLockExclusive 0x18000f1c8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18000f200
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x18000f218
GetTickCount 0x18000f210
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x18000f248
EventRegister 0x18000f240
EventSetInformation 0x18000f238
EventUnregister 0x18000f230
EventWriteTransfer 0x18000f228
api-ms-win-security-base-l1-1-0.dll 1
IsValidSid 0x18000f258
ext-ms-win-shell-shlwapi-l1-1-0.dll 1
AssocQueryStringW 0x18000f268
FirewallAPI.dll 10
FWAddFirewallRule 0x18000f008
FwAlloc 0x18000efe0
FWClosePolicyStore 0x18000f010
FWDeleteFirewallRule 0x18000eff0
FwFree 0x18000efd8
FWFreeFirewallRules 0x18000f000
FWGetGlobalConfig 0x18000efe8
FWOpenPolicyStore 0x18000efc8
FWQueryFirewallRules 0x18000eff8
FWSetFirewallRule 0x18000efd0
fwbase.dll 1
FwStringCopy 0x18000f278
fwpuclnt.dll 4
FwpmEngineClose0 0x18000f298
FwpmEngineOpen0 0x18000f288
FwpmFilterGetById0 0x18000f290
FwpmFreeMemory0 0x18000f2a0
msvcrt.dll 35
__C_specific_handler 0x18000f388
__CxxFrameHandler3 0x18000f3a0
__dllonexit 0x18000f318
_amsg_exit 0x18000f3b0
_callnewh 0x18000f2e0
_CxxThrowException 0x18000f358
_initterm 0x18000f3b8
_lock 0x18000f300
_onexit 0x18000f328
_purecall 0x18000f370
_unlock 0x18000f308
_vscwprintf 0x18000f2c0
_vsnwprintf 0x18000f378
_XcptFilter 0x18000f3a8
??_V@YAXPEAX@Z 0x18000f390
??0exception@@QEAA@AEBQEBD@Z 0x18000f2f8
??0exception@@QEAA@AEBQEBDH@Z 0x18000f338
??0exception@@QEAA@AEBV0@@Z 0x18000f340
??1exception@@UEAA@XZ 0x18000f348
??1type_info@@UEAA@XZ 0x18000f330
??3@YAXPEAX@Z 0x18000f310
?terminate@@YAXXZ 0x18000f2f0
?what@exception@@UEBAPEBDXZ 0x18000f350
free 0x18000f368
malloc 0x18000f2e8
memcpy 0x18000f360
memcpy_s 0x18000f2b8
memmove 0x18000f398
memmove_s 0x18000f320
memset 0x18000f3c0
toupper 0x18000f2d8
vswprintf_s 0x18000f2c8
wcsncmp 0x18000f380
wcsnlen 0x18000f2b0
wcsstr 0x18000f2d0
ntdll.dll 3
RtlCaptureContext 0x18000f3d0
RtlLookupFunctionEntry 0x18000f3d8
RtlVirtualUnwind 0x18000f3e0
RPCRT4.dll 3
RpcStringFreeW 0x18000f020
UuidCreate 0x18000f028
UuidToStringW 0x18000f030
WS2_32.dll 2
htons 0x18000f040
ntohs 0x18000f048