PeerDistSh.dll

Description: BranchCache Netshell Helper

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: e1064845da3dd39da8acee4fbdf0c111

File Size: 335.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 13

Exported Functions

  • InitHelperDll (Ordinal: 1, Address: 0x1d690)

Imported DLLs & Functions

ADVAPI32.dll
  • GetExplicitEntriesFromAclW (Address: 0x10050010)
  • GetNamedSecurityInfoW (Address: 0x10050008)
  • OpenProcessToken (Address: 0x10050000)
  • OpenThreadToken (Address: 0x10050004)
  • RegOpenKeyTransactedW (Address: 0x1005000c)
  • SetEntriesInAclW (Address: 0x10050014)
  • SetNamedSecurityInfoW (Address: 0x10050018)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x10050170)
  • CoInitializeEx (Address: 0x10050168)
  • CoUninitialize (Address: 0x1005016c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10050178)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10050180)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10050188)
  • SetUnhandledExceptionFilter (Address: 0x10050190)
  • UnhandledExceptionFilter (Address: 0x1005018c)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x10050198)
  • DeleteFileW (Address: 0x1005019c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100501a4)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x100501ac)
api-ms-win-core-libraryloader-l1-2-0.dll
  • LoadStringW (Address: 0x100501b4)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100501bc)
api-ms-win-core-localization-private-l1-1-0.dll
  • LoadStringByReference (Address: 0x100501c4)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100501cc)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100501e4)
  • GetCurrentProcessId (Address: 0x100501d8)
  • GetCurrentThreadId (Address: 0x100501dc)
  • SetThreadToken (Address: 0x100501d4)
  • TerminateProcess (Address: 0x100501e0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100501ec)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x100501f4)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10050204)
  • CreateEventW (Address: 0x1005020c)
  • DeleteCriticalSection (Address: 0x100501fc)
  • LeaveCriticalSection (Address: 0x10050210)
  • ReleaseSRWLockExclusive (Address: 0x10050200)
  • WaitForSingleObject (Address: 0x10050208)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x10050218)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10050224)
  • GetTickCount (Address: 0x10050220)
api-ms-win-security-base-l1-1-0.dll
  • CreateWellKnownSid (Address: 0x10050244)
  • EqualSid (Address: 0x10050238)
  • GetAce (Address: 0x1005023c)
  • GetAclInformation (Address: 0x10050240)
  • GetSecurityDescriptorControl (Address: 0x1005024c)
  • GetSecurityDescriptorDacl (Address: 0x10050260)
  • GetSecurityDescriptorGroup (Address: 0x10050268)
  • GetSecurityDescriptorOwner (Address: 0x10050264)
  • GetTokenInformation (Address: 0x10050230)
  • InitializeSecurityDescriptor (Address: 0x10050234)
  • IsValidAcl (Address: 0x1005025c)
  • IsValidSecurityDescriptor (Address: 0x10050250)
  • SetSecurityDescriptorControl (Address: 0x10050254)
  • SetSecurityDescriptorDacl (Address: 0x10050258)
  • SetSecurityDescriptorGroup (Address: 0x1005022c)
  • SetSecurityDescriptorOwner (Address: 0x10050248)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x10050274)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10050278)
  • ConvertStringSidToSidW (Address: 0x10050270)
api-ms-win-service-core-l1-1-1.dll
  • EnumDependentServicesW (Address: 0x10050280)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x10050294)
  • OpenSCManagerW (Address: 0x1005028c)
  • OpenServiceW (Address: 0x10050290)
  • StartServiceW (Address: 0x10050288)
api-ms-win-service-management-l2-1-0.dll
  • ChangeServiceConfig2W (Address: 0x100502a0)
  • ChangeServiceConfigW (Address: 0x100502a4)
  • NotifyServiceStatusChangeW (Address: 0x100502ac)
  • QueryServiceConfigW (Address: 0x100502a8)
  • QueryServiceStatusEx (Address: 0x1005029c)
api-ms-win-service-winsvc-l1-1-0.dll
  • ControlService (Address: 0x100502b4)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x100502e0)
  • BCryptCreateHash (Address: 0x100502c0)
  • BCryptDecrypt (Address: 0x100502d4)
  • BCryptDestroyHash (Address: 0x100502bc)
  • BCryptEncrypt (Address: 0x100502d0)
  • BCryptFinishHash (Address: 0x100502e4)
  • BCryptGenerateSymmetricKey (Address: 0x100502c4)
  • BCryptGenRandom (Address: 0x100502d8)
  • BCryptGetProperty (Address: 0x100502c8)
  • BCryptHashData (Address: 0x100502dc)
  • BCryptOpenAlgorithmProvider (Address: 0x100502cc)
KERNEL32.dll
  • AcquireSRWLockShared (Address: 0x10050108)
  • CloseThreadpoolCleanupGroup (Address: 0x10050044)
  • CloseThreadpoolCleanupGroupMembers (Address: 0x10050040)
  • CloseThreadpoolWork (Address: 0x1005004c)
  • CompareStringW (Address: 0x100500f4)
  • CreateFileW (Address: 0x10050058)
  • CreateThread (Address: 0x100500b4)
  • CreateThreadpoolCleanupGroup (Address: 0x1005003c)
  • CreateThreadpoolWork (Address: 0x10050048)
  • DeleteTimerQueueEx (Address: 0x10050110)
  • EnterCriticalSection (Address: 0x100500f8)
  • FindClose (Address: 0x10050070)
  • FindFirstFileExW (Address: 0x10050080)
  • FindNextFileW (Address: 0x10050078)
  • FreeLibrary (Address: 0x100500d8)
  • GetCurrentThread (Address: 0x100500e0)
  • GetDiskFreeSpaceExW (Address: 0x10050084)
  • GetExitCodeThread (Address: 0x100500bc)
  • GetFileSizeEx (Address: 0x10050054)
  • GetFullPathNameW (Address: 0x10050050)
  • GetModuleFileNameW (Address: 0x100500dc)
  • GetModuleHandleExW (Address: 0x100500cc)
  • GetProcAddress (Address: 0x100500d4)
  • GetProcessHeap (Address: 0x1005006c)
  • GetProcessMitigationPolicy (Address: 0x1005002c)
  • GetTickCount64 (Address: 0x100500a0)
  • GetVolumeInformationW (Address: 0x100500f0)
  • GetVolumePathNameW (Address: 0x100500ec)
  • GetWindowsDirectoryW (Address: 0x100500c4)
  • HeapAlloc (Address: 0x10050034)
  • HeapFree (Address: 0x10050024)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100500fc)
  • InitializeSRWLock (Address: 0x10050104)
  • LoadLibraryW (Address: 0x100500d0)
  • LocalAlloc (Address: 0x10050030)
  • lstrcmpW (Address: 0x1005007c)
  • RaiseFailFastException (Address: 0x1005005c)
  • ReadFile (Address: 0x100500e8)
  • RegCloseKey (Address: 0x100500b8)
  • RegCreateKeyExW (Address: 0x10050094)
  • RegDeleteTreeW (Address: 0x100500c8)
  • RegDeleteValueW (Address: 0x10050090)
  • RegEnumValueW (Address: 0x10050088)
  • RegGetKeySecurity (Address: 0x10050068)
  • RegGetValueW (Address: 0x100500a4)
  • RegNotifyChangeKeyValue (Address: 0x100500a8)
  • RegOpenKeyExW (Address: 0x100500ac)
  • RegQueryInfoKeyW (Address: 0x1005008c)
  • RegSetKeySecurity (Address: 0x10050064)
  • RegSetValueExW (Address: 0x1005009c)
  • ReleaseSRWLockShared (Address: 0x1005010c)
  • RemoveDirectoryW (Address: 0x10050074)
  • SetEvent (Address: 0x100500c0)
  • SetEventWhenCallbackReturns (Address: 0x10050098)
  • SetLastError (Address: 0x10050028)
  • SleepEx (Address: 0x10050060)
  • SubmitThreadpoolWork (Address: 0x10050038)
  • TryEnterCriticalSection (Address: 0x10050100)
  • WaitForMultipleObjectsEx (Address: 0x100500b0)
  • WideCharToMultiByte (Address: 0x10050020)
  • WriteFile (Address: 0x100500e4)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10050324)
  • __dllonexit (Address: 0x1005030c)
  • _amsg_exit (Address: 0x10050328)
  • _callnewh (Address: 0x10050340)
  • _CxxThrowException (Address: 0x10050330)
  • _except_handler4_common (Address: 0x10050360)
  • _initterm (Address: 0x1005031c)
  • _lock (Address: 0x10050318)
  • _onexit (Address: 0x100502f8)
  • _purecall (Address: 0x1005035c)
  • _unlock (Address: 0x100502f4)
  • _vsnwprintf (Address: 0x10050320)
  • _wcsnicmp (Address: 0x100502f0)
  • _wcstoui64 (Address: 0x10050358)
  • _XcptFilter (Address: 0x1005032c)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10050348)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x10050344)
  • ??0exception@@QAE@XZ (Address: 0x10050334)
  • ??1exception@@UAE@XZ (Address: 0x1005034c)
  • ??1type_info@@UAE@XZ (Address: 0x10050304)
  • ?terminate@@YAXXZ (Address: 0x10050300)
  • ?what@exception@@UBEPBDXZ (Address: 0x10050350)
  • free (Address: 0x1005033c)
  • iswspace (Address: 0x10050354)
  • malloc (Address: 0x10050338)
  • memcmp (Address: 0x100502fc)
  • memcpy (Address: 0x100502ec)
  • memmove (Address: 0x10050308)
  • memset (Address: 0x10050364)
  • wcschr (Address: 0x10050314)
  • wcsncmp (Address: 0x10050310)
NETSH.EXE
  • MatchEnumTag (Address: 0x10050118)
  • MatchToken (Address: 0x10050124)
  • PreprocessCommand (Address: 0x1005011c)
  • PrintError (Address: 0x1005012c)
  • PrintMessage (Address: 0x10050128)
  • PrintMessageFromModule (Address: 0x10050134)
  • RegisterContext (Address: 0x10050120)
  • RegisterHelper (Address: 0x10050130)
ntdll.dll
  • EtwEventActivityIdControl (Address: 0x10050380)
  • EtwGetTraceEnableFlags (Address: 0x10050378)
  • EtwGetTraceEnableLevel (Address: 0x1005037c)
  • EtwGetTraceLoggerHandle (Address: 0x10050384)
  • EtwRegisterTraceGuidsW (Address: 0x10050374)
  • EtwTraceMessage (Address: 0x1005036c)
  • EtwUnregisterTraceGuids (Address: 0x10050370)
profapi.dll
  • (Address: 0x1005038c)
RPCRT4.dll
  • NdrClientCall4 (Address: 0x10050140)
  • RpcBindingFree (Address: 0x10050144)
  • RpcBindingFromStringBindingW (Address: 0x1005014c)
  • RpcBindingSetAuthInfoExW (Address: 0x10050148)
  • RpcStringBindingComposeW (Address: 0x1005013c)
  • RpcStringFreeW (Address: 0x10050150)
SHLWAPI.dll
  • PathCanonicalizeW (Address: 0x10050160)
  • PathIsDirectoryEmptyW (Address: 0x10050158)
  • PathIsDirectoryW (Address: 0x1005015c)