rpcnsh.dll

v10.0.19041.6157 32-bit Windows NT Analyzed
Download
Description
RPC Netshell Helper
Authors
© Microsoft Corporation. All rights reserved.
File size
52.0 KB
Uploaded
2025-12-01 08:03
Views
63
SHA-256
1ed146eef87eaf5f9e99a310a4505822

Exported functions 1

InitHelperDll #1 · 0x3210

Imported DLLs & functions 106

ADVAPI32.dll 8
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1000e004
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1000e010
RegCloseKey 0x1000e008
RegCreateKeyExA 0x1000e000
RegDeleteKeyExA 0x1000e014
RegGetValueA 0x1000e00c
RegOpenKeyExA 0x1000e01c
RegSetValueExA 0x1000e018
fwpuclnt.dll 8
FwpmEngineClose0 0x1000e150
FwpmEngineOpen0 0x1000e144
FwpmFilterAdd0 0x1000e13c
FwpmFilterCreateEnumHandle0 0x1000e14c
FwpmFilterDeleteByKey0 0x1000e140
FwpmFilterDestroyEnumHandle0 0x1000e138
FwpmFilterEnum0 0x1000e148
FwpmFreeMemory0 0x1000e134
IPHLPAPI.DLL 2
GetIfEntry 0x1000e024
GetIpAddrTable 0x1000e028
KERNEL32.dll 45
AcquireSRWLockExclusive 0x1000e080
AcquireSRWLockShared 0x1000e058
CloseHandle 0x1000e078
CloseThreadpoolTimer 0x1000e084
CreateMutexExW 0x1000e060
CreateSemaphoreExW 0x1000e0b0
CreateThreadpoolTimer 0x1000e06c
DebugBreak 0x1000e044
DeleteCriticalSection 0x1000e054
EnterCriticalSection 0x1000e0bc
FormatMessageW 0x1000e0e0
GetCurrentProcess 0x1000e030
GetCurrentProcessId 0x1000e050
GetCurrentThreadId 0x1000e0d8
GetLastError 0x1000e0a8
GetModuleFileNameA 0x1000e0ac
GetModuleHandleA 0x1000e0a4
GetModuleHandleExW 0x1000e0c4
GetModuleHandleW 0x1000e048
GetProcAddress 0x1000e064
GetProcessHeap 0x1000e09c
GetSystemTimeAsFileTime 0x1000e094
GetTickCount 0x1000e098
HeapAlloc 0x1000e068
HeapFree 0x1000e0b4
InitializeCriticalSectionEx 0x1000e0cc
IsDebuggerPresent 0x1000e040
LeaveCriticalSection 0x1000e0c8
LocalFree 0x1000e05c
OpenSemaphoreW 0x1000e07c
OutputDebugStringW 0x1000e088
QueryPerformanceCounter 0x1000e090
ReleaseMutex 0x1000e0dc
ReleaseSemaphore 0x1000e0c0
ReleaseSRWLockExclusive 0x1000e08c
ReleaseSRWLockShared 0x1000e070
SetLastError 0x1000e0b8
SetThreadpoolTimer 0x1000e074
SetUnhandledExceptionFilter 0x1000e034
Sleep 0x1000e03c
TerminateProcess 0x1000e04c
UnhandledExceptionFilter 0x1000e038
WaitForSingleObject 0x1000e0d4
WaitForSingleObjectEx 0x1000e0a0
WaitForThreadpoolTimerCallbacks 0x1000e0d0
msvcrt.dll 25
__dllonexit 0x1000e180
_amsg_exit 0x1000e164
_callnewh 0x1000e158
_except_handler4_common 0x1000e1b0
_initterm 0x1000e174
_lock 0x1000e178
_onexit 0x1000e184
_purecall 0x1000e198
_unlock 0x1000e17c
_vsnprintf 0x1000e1ac
_vsnwprintf 0x1000e1a8
_wcsicmp 0x1000e1a0
_wtoi 0x1000e16c
_XcptFilter 0x1000e160
atol 0x1000e170
free 0x1000e15c
malloc 0x1000e188
memcmp 0x1000e168
memcpy 0x1000e1b4
memcpy_s 0x1000e1a4
memmove_s 0x1000e18c
memset 0x1000e1b8
printf 0x1000e194
swscanf 0x1000e19c
wcsrchr 0x1000e190
NETSH.EXE 7
MatchToken 0x1000e0ec
PreprocessCommand 0x1000e0f8
PrintError 0x1000e0f4
PrintMessage 0x1000e0f0
PrintMessageFromModule 0x1000e0fc
RegisterContext 0x1000e100
RegisterHelper 0x1000e0e8
ntdll.dll 2
WinSqmIncrementDWORD 0x1000e1c0
WinSqmIsOptedIn 0x1000e1c4
RPCRT4.dll 4
UuidCreateNil 0x1000e10c
UuidCreateSequential 0x1000e108
UuidEqual 0x1000e114
UuidIsNil 0x1000e110
WS2_32.dll 5
inet_ntoa 0x1000e124
inet_pton 0x1000e12c
WSAGetLastError 0x1000e120
WSAStartup 0x1000e11c
WSAStringToAddressW 0x1000e128