nshwfp.dll

v10.0.19041.5915 32-bit Windows NT Analyzed
Download
Description
Windows Filtering Platform Netsh Helper
Authors
© Microsoft Corporation. All rights reserved.
File size
601.0 KB
Uploaded
2025-12-01 08:02
Views
60
SHA-256
6827607be5c04ec3249a94d15f30f1c2

Exported functions 8

IdpConfigAddPolicy #1 · 0x609b0
IdpConfigAllocateAndGetPolicy #2 · 0x61c50
IdpConfigFreePolicy #3 · 0x61ca0
IdpConfigInitDefaultPolicy #4 · 0x61270
IdpConfigRemovePolicy #5 · 0x60b90
InitHelperDll #6 · 0x5c9b0
WfpCaptureExportedW #7 · 0x5ea40
WfpCaptureStop #8 · 0x5f000

Imported DLLs & functions 253

api-ms-win-core-console-l1-1-0.dll 1
GetConsoleOutputCP 0x10090084
api-ms-win-core-console-l1-2-0.dll 1
AttachConsole 0x1009008c
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x1009009c
SetUnhandledExceptionFilter 0x10090094
UnhandledExceptionFilter 0x10090098
api-ms-win-core-file-l1-1-0.dll 8
CreateFileA 0x100900b4
CreateFileW 0x100900c0
DeleteFileA 0x100900b0
DeleteFileW 0x100900ac
FileTimeToLocalFileTime 0x100900bc
GetFileAttributesA 0x100900a4
GetFileInformationByHandle 0x100900b8
WriteFile 0x100900a8
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x100900c8
api-ms-win-core-heap-l1-1-0.dll 7
GetProcessHeap 0x100900d0
HeapAlloc 0x100900dc
HeapCreate 0x100900e4
HeapDestroy 0x100900e8
HeapFree 0x100900d4
HeapReAlloc 0x100900e0
HeapSize 0x100900d8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x100900f4
LocalFree 0x100900f0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
FileTimeToDosDateTime 0x100900fc
api-ms-win-core-libraryloader-l1-2-0.dll 4
DisableThreadLibraryCalls 0x10090104
GetModuleHandleExW 0x10090110
GetProcAddress 0x1009010c
LoadStringW 0x10090108
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x10090118
api-ms-win-core-processenvironment-l1-1-0.dll 1
GetStdHandle 0x10090120
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateProcessW 0x1009012c
ExitProcess 0x10090128
GetCurrentProcess 0x1009013c
GetCurrentProcessId 0x10090140
GetCurrentThreadId 0x10090138
GetExitCodeProcess 0x10090130
TerminateProcess 0x10090134
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10090148
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x1009015c
RegEnumValueW 0x10090158
RegOpenKeyExW 0x10090154
RegQueryInfoKeyW 0x10090150
RegQueryValueExW 0x10090160
api-ms-win-core-shlwapi-legacy-l1-1-0.dll 1
PathFindExtensionW 0x10090168
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x10090174
WideCharToMultiByte 0x10090170
api-ms-win-core-synch-l1-1-0.dll 8
CreateEventW 0x10090180
DeleteCriticalSection 0x10090198
EnterCriticalSection 0x10090184
InitializeCriticalSectionAndSpinCount 0x1009017c
LeaveCriticalSection 0x10090188
OpenEventW 0x1009018c
SetEvent 0x10090194
WaitForSingleObject 0x10090190
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x100901a0
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x100901ac
GetSystemTimeAsFileTime 0x100901b0
GetTickCount 0x100901a8
api-ms-win-core-timezone-l1-1-0.dll 1
FileTimeToSystemTime 0x100901b8
api-ms-win-eventing-controller-l1-1-0.dll 2
ControlTraceW 0x100901c0
StartTraceW 0x100901c4
api-ms-win-eventing-legacy-l1-1-0.dll 1
EnableTrace 0x100901cc
api-ms-win-security-base-l1-1-0.dll 1
GetLengthSid 0x100901d4
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupAccountNameW 0x100901dc
api-ms-win-security-lsapolicy-l1-1-0.dll 4
LsaClose 0x100901f0
LsaFreeMemory 0x100901e8
LsaOpenPolicy 0x100901ec
LsaQueryInformationPolicy 0x100901e4
api-ms-win-security-sddl-l1-1-0.dll 3
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x10090200
ConvertSidToStringSidW 0x100901fc
ConvertStringSidToSidW 0x100901f8
api-ms-win-service-management-l1-1-0.dll 3
CloseServiceHandle 0x10090208
OpenSCManagerW 0x1009020c
OpenServiceW 0x10090210
api-ms-win-service-management-l2-1-0.dll 1
QueryServiceStatusEx 0x10090218
Cabinet.dll 4
0x10090014
0x10090018
0x1009001c
0x10090020
CRYPT32.dll 4
CertCreateCertificateContext 0x1009000c
CertFreeCertificateContext 0x10090004
CertGetNameStringW 0x10090008
CertNameToStrW 0x10090000
FirewallAPI.dll 2
FWEnumDynamicKeywordAddressesByType0 0x1009002c
FWFreeDynamicKeywordAddressData0 0x10090028
fwpuclnt.dll 97
FwpmCalloutCreateEnumHandle0 0x10090248
FwpmCalloutDestroyEnumHandle0 0x1009023c
FwpmCalloutEnum0 0x10090240
FwpmCalloutGetByKey0 0x10090250
FwpmCalloutGetSecurityInfoByKey0 0x10090230
FwpmCalloutSetSecurityInfoByKey0 0x10090260
FwpmCalloutSubscribeChanges0 0x100902b8
FwpmCalloutSubscriptionsGet0 0x10090300
FwpmCalloutUnsubscribeChanges0 0x100902a4
FwpmEngineClose0 0x10090354
FwpmEngineGetOption0 0x1009026c
FwpmEngineGetSecurityInfo0 0x10090340
FwpmEngineOpen0 0x10090224
FwpmEngineSetOption0 0x1009025c
FwpmEngineSetSecurityInfo0 0x10090228
FwpmFilterAdd0 0x10090360
FwpmFilterCreateEnumHandle0 0x1009029c
FwpmFilterDeleteByKey0 0x10090394
FwpmFilterDestroyEnumHandle0 0x1009028c
FwpmFilterEnum0 0x10090290
FwpmFilterGetByKey0 0x10090244
FwpmFilterGetSecurityInfoByKey0 0x10090288
FwpmFilterSetSecurityInfoByKey0 0x10090220
FwpmFilterSubscribeChanges0 0x100902b4
FwpmFilterSubscriptionsGet0 0x100902fc
FwpmFilterUnsubscribeChanges0 0x100902a8
FwpmFreeMemory0 0x1009038c
FwpmGetAppIdFromFileName0 0x10090258
FwpmLayerCreateEnumHandle0 0x10090238
FwpmLayerDestroyEnumHandle0 0x10090388
FwpmLayerEnum0 0x10090234
FwpmLayerGetSecurityInfoByKey0 0x10090358
FwpmLayerSetSecurityInfoByKey0 0x10090268
FwpmNetEventCreateEnumHandle0 0x100902d8
FwpmNetEventDestroyEnumHandle0 0x100902d0
FwpmNetEventEnum5 0x100902d4
FwpmNetEventsGetSecurityInfo0 0x10090254
FwpmNetEventsLost0 0x1009034c
FwpmNetEventsSetSecurityInfo0 0x10090378
FwpmNetEventSubscribe4 0x100902b0
FwpmNetEventSubscriptionsGet0 0x100902f0
FwpmNetEventUnsubscribe0 0x100902ac
FwpmProviderContextAdd3 0x10090344
FwpmProviderContextCreateEnumHandle0 0x10090280
FwpmProviderContextDeleteByKey0 0x1009024c
FwpmProviderContextDestroyEnumHandle0 0x10090278
FwpmProviderContextEnum3 0x100903a0
FwpmProviderContextGetByKey3 0x10090270
FwpmProviderContextGetSecurityInfoByKey0 0x1009027c
FwpmProviderContextSetSecurityInfoByKey0 0x10090368
FwpmProviderContextSubscribeChanges0 0x100902c8
FwpmProviderContextSubscriptionsGet0 0x100902e8
FwpmProviderContextUnsubscribeChanges0 0x10090298
FwpmProviderCreateEnumHandle0 0x1009037c
FwpmProviderDestroyEnumHandle0 0x10090370
FwpmProviderEnum0 0x10090374
FwpmProviderGetByKey0 0x10090274
FwpmProviderGetSecurityInfoByKey0 0x10090348
FwpmProviderSetSecurityInfoByKey0 0x1009039c
FwpmProviderSubscribeChanges0 0x100902cc
FwpmProviderSubscriptionsGet0 0x100902ec
FwpmProviderUnsubscribeChanges0 0x10090294
FwpmSessionCreateEnumHandle0 0x1009036c
FwpmSessionDestroyEnumHandle0 0x1009035c
FwpmSessionEnum0 0x10090364
FwpmSubLayerCreateEnumHandle0 0x10090334
FwpmSubLayerDestroyEnumHandle0 0x1009032c
FwpmSubLayerEnum0 0x10090330
FwpmSubLayerGetByKey0 0x10090264
FwpmSubLayerGetSecurityInfoByKey0 0x10090284
FwpmSubLayerSetSecurityInfoByKey0 0x10090380
FwpmSubLayerSubscribeChanges0 0x100902c4
FwpmSubLayerSubscriptionsGet0 0x100902e4
FwpmSubLayerUnsubscribeChanges0 0x100902a0
FwpmSystemPortsGet0 0x10090384
FwpmTransactionAbort0 0x10090304
FwpmTransactionBegin0 0x1009033c
FwpmTransactionCommit0 0x10090338
FwpsAleEndpointCreateEnumHandle0 0x10090310
FwpsAleEndpointDestroyEnumHandle0 0x10090308
FwpsAleEndpointEnum0 0x1009030c
IkeextGetStatistics1 0x100902e0
IkeextSaCreateEnumHandle0 0x10090328
IkeextSaDbGetSecurityInfo0 0x10090398
IkeextSaDbSetSecurityInfo0 0x1009022c
IkeextSaDestroyEnumHandle0 0x10090320
IkeextSaEnum2 0x10090324
IPsecDospGetStatistics0 0x100902f8
IPsecDospStateCreateEnumHandle0 0x100902f4
IPsecDospStateDestroyEnumHandle0 0x100902bc
IPsecDospStateEnum0 0x100902c0
IPsecGetStatistics1 0x100902dc
IPsecSaContextCreateEnumHandle0 0x1009031c
IPsecSaContextDestroyEnumHandle0 0x10090314
IPsecSaContextEnum1 0x10090318
IPsecSaDbGetSecurityInfo0 0x10090350
IPsecSaDbSetSecurityInfo0 0x10090390
IPHLPAPI.DLL 1
GetAdaptersAddresses 0x10090034
msvcrt.dll 45
__dllonexit 0x10090438
_amsg_exit 0x10090454
_close 0x100903bc
_errno 0x100903c8
_except_handler4_common 0x10090444
_get_errno 0x100903fc
_i64toa_s 0x100903e0
_initterm 0x10090448
_lock 0x10090440
_lseek 0x100903b8
_ltoa_s 0x100903e4
_onexit 0x10090434
_open 0x100903cc
_read 0x100903c4
_set_errno 0x10090404
_snwprintf_s 0x10090414
_tempnam 0x100903b0
_ui64toa_s 0x100903dc
_ultoa_s 0x100903f8
_ultow_s 0x10090410
_unlock 0x1009043c
_vsnprintf 0x10090428
_vsnwprintf 0x10090424
_wcsicmp 0x10090418
_wcsnicmp 0x100903d4
_write 0x100903c0
_XcptFilter 0x10090458
bsearch 0x100903ac
free 0x10090450
isprint 0x100903e8
malloc 0x1009044c
memcmp 0x1009042c
memcpy 0x10090430
memset 0x100903a8
qsort 0x100903d8
remove 0x100903b4
sprintf_s 0x100903ec
strcpy_s 0x100903d0
strpbrk 0x100903f4
strstr 0x100903f0
swprintf_s 0x1009040c
wcsncmp 0x10090408
wcstol 0x1009041c
wcstoul 0x10090400
wprintf 0x10090420
NETSH.EXE 6
MatchEnumTag 0x10090040
PreprocessCommand 0x10090048
PrintMessage 0x1009003c
PrintMessageFromModule 0x10090044
RegisterContext 0x10090050
RegisterHelper 0x1009004c
NSI.dll 2
NsiGetAllParameters 0x1009005c
NsiSetAllParameters 0x10090058
ntdll.dll 10
EtwEventWriteTransfer 0x10090478
EtwTraceMessage 0x10090484
RtlApplicationVerifierStop 0x1009047c
RtlEthernetAddressToStringA 0x10090464
RtlIpv4AddressToStringA 0x1009046c
RtlIpv4StringToAddressW 0x10090470
RtlIpv6AddressToStringA 0x10090468
RtlIpv6AddressToStringW 0x10090460
RtlIpv6StringToAddressW 0x10090474
RtlNtStatusToDosError 0x10090480
RPCRT4.dll 7
I_RpcExceptionFilter 0x10090074
MesDecodeBufferHandleCreate 0x10090064
MesEncodeDynBufferHandleCreate 0x10090068
MesHandleFree 0x10090078
NdrMesTypeDecode2 0x10090070
UuidCreate 0x1009007c
UuidFromStringW 0x1009006c