nshipsec.dll

Description: Net Shell IP Security helper DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 76f0fd06904dbe92ca344a19cf1c6711

File Size: 325.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 11

Exported Functions

  • InitHelperDll (Ordinal: 1, Address: 0x3990)

Imported DLLs & Functions

ACTIVEDS.dll
  • (Address: 0x1004f000)
  • (Address: 0x1004f004)
  • (Address: 0x1004f008)
  • (Address: 0x1004f00c)
  • (Address: 0x1004f010)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatW (Address: 0x1004f268)
  • GetTimeFormatW (Address: 0x1004f26c)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1004f274)
  • SetUnhandledExceptionFilter (Address: 0x1004f27c)
  • UnhandledExceptionFilter (Address: 0x1004f278)
api-ms-win-core-file-l1-1-0.dll
  • FileTimeToLocalFileTime (Address: 0x1004f284)
api-ms-win-core-libraryloader-l1-2-0.dll
  • LoadStringW (Address: 0x1004f28c)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1004f2a0)
  • GetCurrentProcessId (Address: 0x1004f2a8)
  • GetCurrentThreadId (Address: 0x1004f298)
  • OpenProcessToken (Address: 0x1004f294)
  • OpenThreadToken (Address: 0x1004f2a4)
  • TerminateProcess (Address: 0x1004f29c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1004f2b0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1004f2c0)
  • RegCreateKeyExW (Address: 0x1004f2cc)
  • RegOpenKeyExW (Address: 0x1004f2c8)
  • RegQueryValueExW (Address: 0x1004f2b8)
  • RegRestoreKeyW (Address: 0x1004f2c4)
  • RegSetValueExW (Address: 0x1004f2bc)
api-ms-win-core-string-l1-1-0.dll
  • WideCharToMultiByte (Address: 0x1004f2d4)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1004f2dc)
  • GetTickCount (Address: 0x1004f2e0)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1004f2e8)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1004f2f0)
  • OpenSCManagerW (Address: 0x1004f2f4)
  • OpenServiceW (Address: 0x1004f2f8)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x1004f300)
CRYPT32.dll
  • CertCloseStore (Address: 0x1004f028)
  • CertEnumCertificatesInStore (Address: 0x1004f030)
  • CertFindChainInStore (Address: 0x1004f038)
  • CertFreeCertificateContext (Address: 0x1004f01c)
  • CertGetCertificateContextProperty (Address: 0x1004f024)
  • CertGetEnhancedKeyUsage (Address: 0x1004f02c)
  • CertNameToStrW (Address: 0x1004f020)
  • CertOpenStore (Address: 0x1004f018)
  • CertStrToNameW (Address: 0x1004f034)
DNSAPI.dll
  • DnsValidateName_W (Address: 0x1004f040)
FirewallAPI.dll
  • FwEmptyWFAddresses (Address: 0x1004f048)
KERNEL32.dll
  • CloseHandle (Address: 0x1004f064)
  • DelayLoadFailureHook (Address: 0x1004f07c)
  • FileTimeToSystemTime (Address: 0x1004f058)
  • FormatMessageW (Address: 0x1004f05c)
  • GetComputerNameW (Address: 0x1004f054)
  • GetCurrentThread (Address: 0x1004f060)
  • GetProcessHeap (Address: 0x1004f070)
  • HeapAlloc (Address: 0x1004f084)
  • HeapFree (Address: 0x1004f078)
  • LocalAlloc (Address: 0x1004f050)
  • LocalFree (Address: 0x1004f088)
  • RegDeleteKeyExW (Address: 0x1004f06c)
  • RegEnumKeyExW (Address: 0x1004f068)
  • ResolveDelayLoadedAPI (Address: 0x1004f080)
  • Sleep (Address: 0x1004f074)
msvcrt.dll
  • __dllonexit (Address: 0x1004f340)
  • _amsg_exit (Address: 0x1004f32c)
  • _callnewh (Address: 0x1004f334)
  • _CIpow (Address: 0x1004f308)
  • _except_handler4_common (Address: 0x1004f314)
  • _initterm (Address: 0x1004f328)
  • _lock (Address: 0x1004f324)
  • _onexit (Address: 0x1004f318)
  • _unlock (Address: 0x1004f320)
  • _vsnprintf (Address: 0x1004f338)
  • _vsnwprintf (Address: 0x1004f34c)
  • _wcsicmp (Address: 0x1004f378)
  • _wcsnicmp (Address: 0x1004f368)
  • _wremove (Address: 0x1004f344)
  • _XcptFilter (Address: 0x1004f330)
  • calloc (Address: 0x1004f370)
  • free (Address: 0x1004f384)
  • isdigit (Address: 0x1004f350)
  • iswdigit (Address: 0x1004f360)
  • malloc (Address: 0x1004f36c)
  • memcpy (Address: 0x1004f30c)
  • memmove (Address: 0x1004f310)
  • memset (Address: 0x1004f38c)
  • swscanf (Address: 0x1004f35c)
  • swscanf_s (Address: 0x1004f364)
  • time (Address: 0x1004f31c)
  • wcschr (Address: 0x1004f37c)
  • wcsncmp (Address: 0x1004f348)
  • wcsrchr (Address: 0x1004f354)
  • wcsspn (Address: 0x1004f374)
  • wcsstr (Address: 0x1004f380)
  • wcstok (Address: 0x1004f358)
  • wcstoul (Address: 0x1004f388)
  • wprintf (Address: 0x1004f33c)
NETSH.EXE
  • MatchEnumTag (Address: 0x1004f098)
  • MatchTagsInCmdLine (Address: 0x1004f0a4)
  • MatchToken (Address: 0x1004f0a0)
  • PreprocessCommand (Address: 0x1004f09c)
  • PrintMessageFromModule (Address: 0x1004f094)
  • RegisterContext (Address: 0x1004f090)
  • RegisterHelper (Address: 0x1004f0a8)
ntdll.dll
  • EtwGetTraceEnableFlags (Address: 0x1004f39c)
  • EtwGetTraceEnableLevel (Address: 0x1004f398)
  • EtwGetTraceLoggerHandle (Address: 0x1004f394)
  • EtwRegisterTraceGuidsW (Address: 0x1004f3a0)
  • EtwTraceMessage (Address: 0x1004f3c0)
  • EtwUnregisterTraceGuids (Address: 0x1004f3a4)
  • RtlCompareMemory (Address: 0x1004f3bc)
  • RtlIpv4AddressToStringExW (Address: 0x1004f3b8)
  • RtlIpv4StringToAddressW (Address: 0x1004f3b0)
  • RtlIpv6AddressToStringExW (Address: 0x1004f3b4)
  • RtlIpv6StringToAddressW (Address: 0x1004f3a8)
  • RtlNtStatusToDosError (Address: 0x1004f3ac)
ole32.dll
  • CoCreateInstance (Address: 0x1004f3d0)
  • CoInitialize (Address: 0x1004f3cc)
  • CoTaskMemAlloc (Address: 0x1004f3d8)
  • CoTaskMemFree (Address: 0x1004f3c8)
  • StringFromGUID2 (Address: 0x1004f3d4)
OLEAUT32.dll
  • SysAllocString (Address: 0x1004f0b0)
  • SysFreeString (Address: 0x1004f0b4)
  • VariantClear (Address: 0x1004f0b8)
POLSTORE.DLL
  • IPSecAssignPolicy (Address: 0x1004f158)
  • IPSecClosePolicyStore (Address: 0x1004f0e4)
  • IPSecCopyFilterData (Address: 0x1004f134)
  • IPSecCopyNegPolData (Address: 0x1004f140)
  • IPSecCopyNFAData (Address: 0x1004f0e8)
  • IPSecCopyPolicyData (Address: 0x1004f128)
  • IPSecCreateFilterData (Address: 0x1004f0dc)
  • IPSecCreateISAKMPData (Address: 0x1004f164)
  • IPSecCreateNegPolData (Address: 0x1004f150)
  • IPSecCreateNFAData (Address: 0x1004f14c)
  • IPSecCreatePolicyData (Address: 0x1004f0c8)
  • IPSecDeleteFilterData (Address: 0x1004f0c0)
  • IPSecDeleteISAKMPData (Address: 0x1004f148)
  • IPSecDeleteNegPolData (Address: 0x1004f144)
  • IPSecDeleteNFAData (Address: 0x1004f0fc)
  • IPSecDeletePolicyData (Address: 0x1004f0c4)
  • IPSecEnumFilterData (Address: 0x1004f138)
  • IPSecEnumNegPolData (Address: 0x1004f100)
  • IPSecEnumNFAData (Address: 0x1004f124)
  • IPSecEnumPolicyData (Address: 0x1004f12c)
  • IPSecExportPolicies (Address: 0x1004f0d0)
  • IPSecFreeFilterData (Address: 0x1004f110)
  • IPSecFreeFilterSpec (Address: 0x1004f108)
  • IPSecFreeMulFilterData (Address: 0x1004f130)
  • IPSecFreeMulNegPolData (Address: 0x1004f13c)
  • IPSecFreeMulPolicyData (Address: 0x1004f118)
  • IPSecFreeNegPolData (Address: 0x1004f104)
  • IPSecFreePolicyData (Address: 0x1004f154)
  • IPSecGetAssignedPolicyData (Address: 0x1004f160)
  • IPSecGetFilterData (Address: 0x1004f168)
  • IPSecGetISAKMPData (Address: 0x1004f120)
  • IPSecGetNegPolData (Address: 0x1004f11c)
  • IPSecImportPolicies (Address: 0x1004f0d4)
  • IPSecIsDomainPolicyAssigned (Address: 0x1004f0cc)
  • IPSecOpenPolicyStore (Address: 0x1004f114)
  • IPSecSetFilterData (Address: 0x1004f10c)
  • IPSecSetISAKMPData (Address: 0x1004f0f8)
  • IPSecSetNegPolData (Address: 0x1004f0ec)
  • IPSecSetNFAData (Address: 0x1004f0f4)
  • IPSecSetPolicyData (Address: 0x1004f0f0)
  • IPSecUnassignPolicy (Address: 0x1004f15c)
  • RegCreateNFAData (Address: 0x1004f0d8)
  • RegCreatePolicyData (Address: 0x1004f0e0)
RPCRT4.dll
  • UuidCompare (Address: 0x1004f17c)
  • UuidCreate (Address: 0x1004f180)
  • UuidCreateNil (Address: 0x1004f170)
  • UuidFromStringW (Address: 0x1004f178)
  • UuidIsNil (Address: 0x1004f174)
USERENV.dll
  • FreeGPOListW (Address: 0x1004f188)
  • GetAppliedGPOListW (Address: 0x1004f18c)
WINIPSEC.DLL
  • (Address: 0x1004f1b4)
  • (Address: 0x1004f1d8)
  • (Address: 0x1004f234)
  • (Address: 0x1004f1d4)
  • (Address: 0x1004f1d0)
  • (Address: 0x1004f1cc)
  • (Address: 0x1004f1c8)
  • (Address: 0x1004f1c4)
  • (Address: 0x1004f1c0)
  • (Address: 0x1004f1bc)
  • (Address: 0x1004f1b8)
  • (Address: 0x1004f230)
  • (Address: 0x1004f1b0)
  • (Address: 0x1004f1ac)
  • (Address: 0x1004f1a8)
  • (Address: 0x1004f1a4)
  • (Address: 0x1004f1a0)
  • (Address: 0x1004f19c)
  • (Address: 0x1004f198)
  • (Address: 0x1004f194)
  • (Address: 0x1004f208)
  • (Address: 0x1004f1dc)
  • (Address: 0x1004f1e0)
  • (Address: 0x1004f1e4)
  • (Address: 0x1004f1e8)
  • (Address: 0x1004f1ec)
  • (Address: 0x1004f1f0)
  • (Address: 0x1004f1f4)
  • (Address: 0x1004f1f8)
  • (Address: 0x1004f1fc)
  • (Address: 0x1004f200)
  • (Address: 0x1004f204)
  • (Address: 0x1004f22c)
  • (Address: 0x1004f20c)
  • (Address: 0x1004f210)
  • (Address: 0x1004f214)
  • (Address: 0x1004f218)
  • (Address: 0x1004f21c)
  • (Address: 0x1004f220)
  • (Address: 0x1004f224)
  • (Address: 0x1004f228)
WLDAP32.dll
  • (Address: 0x1004f240)
  • (Address: 0x1004f23c)
WS2_32.dll
  • freeaddrinfo (Address: 0x1004f260)
  • getaddrinfo (Address: 0x1004f248)
  • gethostbyaddr (Address: 0x1004f25c)
  • htonl (Address: 0x1004f258)
  • inet_addr (Address: 0x1004f254)
  • inet_ntoa (Address: 0x1004f24c)
  • ntohl (Address: 0x1004f250)