PeerDistSh.dll

v10.0.19041.3636 32-bit Windows NT Analyzed
Download
Description
BranchCache Netshell Helper
Authors
© Microsoft Corporation. All rights reserved.
File size
335.5 KB
Uploaded
2025-12-01 08:02
Views
58
SHA-256
e1064845da3dd39da8acee4fbdf0c111

Exported functions 1

InitHelperDll #1 · 0x1d690

Imported DLLs & functions 197

ADVAPI32.dll 7
GetExplicitEntriesFromAclW 0x10050010
GetNamedSecurityInfoW 0x10050008
OpenProcessToken 0x10050000
OpenThreadToken 0x10050004
RegOpenKeyTransactedW 0x1005000c
SetEntriesInAclW 0x10050014
SetNamedSecurityInfoW 0x10050018
api-ms-win-core-com-l1-1-0.dll 3
CoCreateInstance 0x10050170
CoInitializeEx 0x10050168
CoUninitialize 0x1005016c
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x10050178
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x10050180
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x10050188
SetUnhandledExceptionFilter 0x10050190
UnhandledExceptionFilter 0x1005018c
api-ms-win-core-file-l1-1-0.dll 2
CreateDirectoryW 0x10050198
DeleteFileW 0x1005019c
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x100501a4
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x100501ac
api-ms-win-core-libraryloader-l1-2-0.dll 1
LoadStringW 0x100501b4
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100501bc
api-ms-win-core-localization-private-l1-1-0.dll 1
LoadStringByReference 0x100501c4
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100501cc
api-ms-win-core-processthreads-l1-1-0.dll 5
GetCurrentProcess 0x100501e4
GetCurrentProcessId 0x100501d8
GetCurrentThreadId 0x100501dc
SetThreadToken 0x100501d4
TerminateProcess 0x100501e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100501ec
api-ms-win-core-string-l2-1-1.dll 1
SHLoadIndirectString 0x100501f4
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x10050204
CreateEventW 0x1005020c
DeleteCriticalSection 0x100501fc
LeaveCriticalSection 0x10050210
ReleaseSRWLockExclusive 0x10050200
WaitForSingleObject 0x10050208
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x10050218
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10050224
GetTickCount 0x10050220
api-ms-win-security-base-l1-1-0.dll 16
CreateWellKnownSid 0x10050244
EqualSid 0x10050238
GetAce 0x1005023c
GetAclInformation 0x10050240
GetSecurityDescriptorControl 0x1005024c
GetSecurityDescriptorDacl 0x10050260
GetSecurityDescriptorGroup 0x10050268
GetSecurityDescriptorOwner 0x10050264
GetTokenInformation 0x10050230
InitializeSecurityDescriptor 0x10050234
IsValidAcl 0x1005025c
IsValidSecurityDescriptor 0x10050250
SetSecurityDescriptorControl 0x10050254
SetSecurityDescriptorDacl 0x10050258
SetSecurityDescriptorGroup 0x1005022c
SetSecurityDescriptorOwner 0x10050248
api-ms-win-security-sddl-l1-1-0.dll 3
ConvertSidToStringSidW 0x10050274
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x10050278
ConvertStringSidToSidW 0x10050270
api-ms-win-service-core-l1-1-1.dll 1
EnumDependentServicesW 0x10050280
api-ms-win-service-management-l1-1-0.dll 4
CloseServiceHandle 0x10050294
OpenSCManagerW 0x1005028c
OpenServiceW 0x10050290
StartServiceW 0x10050288
api-ms-win-service-management-l2-1-0.dll 5
ChangeServiceConfig2W 0x100502a0
ChangeServiceConfigW 0x100502a4
NotifyServiceStatusChangeW 0x100502ac
QueryServiceConfigW 0x100502a8
QueryServiceStatusEx 0x1005029c
api-ms-win-service-winsvc-l1-1-0.dll 1
ControlService 0x100502b4
bcrypt.dll 11
BCryptCloseAlgorithmProvider 0x100502e0
BCryptCreateHash 0x100502c0
BCryptDecrypt 0x100502d4
BCryptDestroyHash 0x100502bc
BCryptEncrypt 0x100502d0
BCryptFinishHash 0x100502e4
BCryptGenerateSymmetricKey 0x100502c4
BCryptGenRandom 0x100502d8
BCryptGetProperty 0x100502c8
BCryptHashData 0x100502dc
BCryptOpenAlgorithmProvider 0x100502cc
KERNEL32.dll 61
AcquireSRWLockShared 0x10050108
CloseThreadpoolCleanupGroup 0x10050044
CloseThreadpoolCleanupGroupMembers 0x10050040
CloseThreadpoolWork 0x1005004c
CompareStringW 0x100500f4
CreateFileW 0x10050058
CreateThread 0x100500b4
CreateThreadpoolCleanupGroup 0x1005003c
CreateThreadpoolWork 0x10050048
DeleteTimerQueueEx 0x10050110
EnterCriticalSection 0x100500f8
FindClose 0x10050070
FindFirstFileExW 0x10050080
FindNextFileW 0x10050078
FreeLibrary 0x100500d8
GetCurrentThread 0x100500e0
GetDiskFreeSpaceExW 0x10050084
GetExitCodeThread 0x100500bc
GetFileSizeEx 0x10050054
GetFullPathNameW 0x10050050
GetModuleFileNameW 0x100500dc
GetModuleHandleExW 0x100500cc
GetProcAddress 0x100500d4
GetProcessHeap 0x1005006c
GetProcessMitigationPolicy 0x1005002c
GetTickCount64 0x100500a0
GetVolumeInformationW 0x100500f0
GetVolumePathNameW 0x100500ec
GetWindowsDirectoryW 0x100500c4
HeapAlloc 0x10050034
HeapFree 0x10050024
InitializeCriticalSectionAndSpinCount 0x100500fc
InitializeSRWLock 0x10050104
LoadLibraryW 0x100500d0
LocalAlloc 0x10050030
lstrcmpW 0x1005007c
RaiseFailFastException 0x1005005c
ReadFile 0x100500e8
RegCloseKey 0x100500b8
RegCreateKeyExW 0x10050094
RegDeleteTreeW 0x100500c8
RegDeleteValueW 0x10050090
RegEnumValueW 0x10050088
RegGetKeySecurity 0x10050068
RegGetValueW 0x100500a4
RegNotifyChangeKeyValue 0x100500a8
RegOpenKeyExW 0x100500ac
RegQueryInfoKeyW 0x1005008c
RegSetKeySecurity 0x10050064
RegSetValueExW 0x1005009c
ReleaseSRWLockShared 0x1005010c
RemoveDirectoryW 0x10050074
SetEvent 0x100500c0
SetEventWhenCallbackReturns 0x10050098
SetLastError 0x10050028
SleepEx 0x10050060
SubmitThreadpoolWork 0x10050038
TryEnterCriticalSection 0x10050100
WaitForMultipleObjectsEx 0x100500b0
WideCharToMultiByte 0x10050020
WriteFile 0x100500e4
msvcrt.dll 31
__CxxFrameHandler3 0x10050324
__dllonexit 0x1005030c
_amsg_exit 0x10050328
_callnewh 0x10050340
_CxxThrowException 0x10050330
_except_handler4_common 0x10050360
_initterm 0x1005031c
_lock 0x10050318
_onexit 0x100502f8
_purecall 0x1005035c
_unlock 0x100502f4
_vsnwprintf 0x10050320
_wcsnicmp 0x100502f0
_wcstoui64 0x10050358
_XcptFilter 0x1005032c
??0exception@@QAE@ABQBD@Z 0x10050348
??0exception@@QAE@ABV0@@Z 0x10050344
??0exception@@QAE@XZ 0x10050334
??1exception@@UAE@XZ 0x1005034c
??1type_info@@UAE@XZ 0x10050304
?terminate@@YAXXZ 0x10050300
?what@exception@@UBEPBDXZ 0x10050350
free 0x1005033c
iswspace 0x10050354
malloc 0x10050338
memcmp 0x100502fc
memcpy 0x100502ec
memmove 0x10050308
memset 0x10050364
wcschr 0x10050314
wcsncmp 0x10050310
NETSH.EXE 8
MatchEnumTag 0x10050118
MatchToken 0x10050124
PreprocessCommand 0x1005011c
PrintError 0x1005012c
PrintMessage 0x10050128
PrintMessageFromModule 0x10050134
RegisterContext 0x10050120
RegisterHelper 0x10050130
ntdll.dll 7
EtwEventActivityIdControl 0x10050380
EtwGetTraceEnableFlags 0x10050378
EtwGetTraceEnableLevel 0x1005037c
EtwGetTraceLoggerHandle 0x10050384
EtwRegisterTraceGuidsW 0x10050374
EtwTraceMessage 0x1005036c
EtwUnregisterTraceGuids 0x10050370
profapi.dll 1
0x1005038c
RPCRT4.dll 6
NdrClientCall4 0x10050140
RpcBindingFree 0x10050144
RpcBindingFromStringBindingW 0x1005014c
RpcBindingSetAuthInfoExW 0x10050148
RpcStringBindingComposeW 0x1005013c
RpcStringFreeW 0x10050150
SHLWAPI.dll 3
PathCanonicalizeW 0x10050160
PathIsDirectoryEmptyW 0x10050158
PathIsDirectoryW 0x1005015c