nshwfp.dll

Description: Windows Filtering Platform Netsh Helper

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: c31ee3bede52160119fae51126c503be

File Size: 771.5 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 6

Exported Functions

IdpConfigAddPolicy (Ordinal: 1, Address: 0x61d0)
IdpConfigAllocateAndGetPolicy (Ordinal: 2, Address: 0x7bc0)
IdpConfigFreePolicy (Ordinal: 3, Address: 0x7c30)
IdpConfigInitDefaultPolicy (Ordinal: 4, Address: 0x6e10)
IdpConfigRemovePolicy (Ordinal: 5, Address: 0x6430)
InitHelperDll (Ordinal: 6, Address: 0x1110)
WfpCaptureExportedW (Ordinal: 7, Address: 0x3d30)
WfpCaptureStop (Ordinal: 8, Address: 0x4480)

Imported DLLs & Functions

api-ms-win-core-console-l1-1-0.dll

GetConsoleOutputCP (Address: 0x180030820)

api-ms-win-core-console-l1-2-0.dll

AttachConsole (Address: 0x180030830)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180030840)
SetUnhandledExceptionFilter (Address: 0x180030850)
UnhandledExceptionFilter (Address: 0x180030848)

api-ms-win-core-file-l1-1-0.dll

CreateFileA (Address: 0x180030870)
CreateFileW (Address: 0x180030880)
DeleteFileA (Address: 0x180030868)
DeleteFileW (Address: 0x180030888)
FileTimeToLocalFileTime (Address: 0x180030890)
GetFileAttributesA (Address: 0x180030878)
GetFileInformationByHandle (Address: 0x180030860)
WriteFile (Address: 0x180030898)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800308a8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800308e0)
HeapAlloc (Address: 0x1800308d0)
HeapCreate (Address: 0x1800308c0)
HeapDestroy (Address: 0x1800308b8)
HeapFree (Address: 0x1800308d8)
HeapReAlloc (Address: 0x1800308c8)
HeapSize (Address: 0x1800308e8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800308f8)
LocalFree (Address: 0x180030900)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

FileTimeToDosDateTime (Address: 0x180030910)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180030930)
GetModuleHandleExW (Address: 0x180030938)
GetProcAddress (Address: 0x180030928)
LoadStringW (Address: 0x180030920)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180030948)

api-ms-win-core-processenvironment-l1-1-0.dll

GetStdHandle (Address: 0x180030958)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180030998)
ExitProcess (Address: 0x180030988)
GetCurrentProcess (Address: 0x180030978)
GetCurrentProcessId (Address: 0x180030968)
GetCurrentThreadId (Address: 0x180030970)
GetExitCodeProcess (Address: 0x180030990)
TerminateProcess (Address: 0x180030980)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800309a8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800309b8)
RegEnumValueW (Address: 0x1800309d0)
RegOpenKeyExW (Address: 0x1800309d8)
RegQueryInfoKeyW (Address: 0x1800309c8)
RegQueryValueExW (Address: 0x1800309c0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x1800309e8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180030a00)
WideCharToMultiByte (Address: 0x1800309f8)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180030a38)
DeleteCriticalSection (Address: 0x180030a28)
EnterCriticalSection (Address: 0x180030a18)
InitializeCriticalSectionAndSpinCount (Address: 0x180030a10)
LeaveCriticalSection (Address: 0x180030a20)
OpenEventW (Address: 0x180030a40)
SetEvent (Address: 0x180030a30)
WaitForSingleObject (Address: 0x180030a48)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180030a58)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180030a70)
GetSystemTimeAsFileTime (Address: 0x180030a68)
GetTickCount (Address: 0x180030a78)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180030a88)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x180030a98)
StartTraceW (Address: 0x180030aa0)

api-ms-win-eventing-legacy-l1-1-0.dll

EnableTrace (Address: 0x180030ab0)

api-ms-win-security-base-l1-1-0.dll

GetLengthSid (Address: 0x180030ac0)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountNameW (Address: 0x180030ad0)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x180030ae8)
LsaFreeMemory (Address: 0x180030af0)
LsaOpenPolicy (Address: 0x180030af8)
LsaQueryInformationPolicy (Address: 0x180030ae0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x180030b10)
ConvertSidToStringSidW (Address: 0x180030b08)
ConvertStringSidToSidW (Address: 0x180030b18)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180030b30)
OpenSCManagerW (Address: 0x180030b28)
OpenServiceW (Address: 0x180030b38)

api-ms-win-service-management-l2-1-0.dll

QueryServiceStatusEx (Address: 0x180030b48)

Cabinet.dll

(Address: 0x180030740)
(Address: 0x180030748)
(Address: 0x180030750)
(Address: 0x180030758)

CRYPT32.dll

CertCreateCertificateContext (Address: 0x180030720)
CertFreeCertificateContext (Address: 0x180030730)
CertGetNameStringW (Address: 0x180030718)
CertNameToStrW (Address: 0x180030728)

FirewallAPI.dll

FWEnumDynamicKeywordAddressesByType0 (Address: 0x180030768)
FWFreeDynamicKeywordAddressData0 (Address: 0x180030770)

fwpuclnt.dll

FwpmCalloutCreateEnumHandle0 (Address: 0x180030dd8)
FwpmCalloutDestroyEnumHandle0 (Address: 0x180030db8)
FwpmCalloutEnum0 (Address: 0x180030dc8)
FwpmCalloutGetByKey0 (Address: 0x180030b60)
FwpmCalloutGetSecurityInfoByKey0 (Address: 0x180030b80)
FwpmCalloutSetSecurityInfoByKey0 (Address: 0x180030e20)
FwpmCalloutSubscribeChanges0 (Address: 0x180030c60)
FwpmCalloutSubscriptionsGet0 (Address: 0x180030ce0)
FwpmCalloutUnsubscribeChanges0 (Address: 0x180030bf0)
FwpmEngineClose0 (Address: 0x180030cc0)
FwpmEngineGetOption0 (Address: 0x180030be8)
FwpmEngineGetSecurityInfo0 (Address: 0x180030c28)
FwpmEngineOpen0 (Address: 0x180030e50)
FwpmEngineSetOption0 (Address: 0x180030bd0)
FwpmEngineSetSecurityInfo0 (Address: 0x180030e00)
FwpmFilterAdd0 (Address: 0x180030d88)
FwpmFilterCreateEnumHandle0 (Address: 0x180030e08)
FwpmFilterDeleteByKey0 (Address: 0x180030c98)
FwpmFilterDestroyEnumHandle0 (Address: 0x180030df8)
FwpmFilterEnum0 (Address: 0x180030e58)
FwpmFilterGetByKey0 (Address: 0x180030b68)
FwpmFilterGetSecurityInfoByKey0 (Address: 0x180030c00)
FwpmFilterSetSecurityInfoByKey0 (Address: 0x180030e40)
FwpmFilterSubscribeChanges0 (Address: 0x180030c48)
FwpmFilterSubscriptionsGet0 (Address: 0x180030cd8)
FwpmFilterUnsubscribeChanges0 (Address: 0x180030c08)
FwpmFreeMemory0 (Address: 0x180030b70)
FwpmGetAppIdFromFileName0 (Address: 0x180030bc0)
FwpmLayerCreateEnumHandle0 (Address: 0x180030db0)
FwpmLayerDestroyEnumHandle0 (Address: 0x180030da0)
FwpmLayerEnum0 (Address: 0x180030da8)
FwpmLayerGetSecurityInfoByKey0 (Address: 0x180030d80)
FwpmLayerSetSecurityInfoByKey0 (Address: 0x180030be0)
FwpmNetEventCreateEnumHandle0 (Address: 0x180030c90)
FwpmNetEventDestroyEnumHandle0 (Address: 0x180030c80)
FwpmNetEventEnum5 (Address: 0x180030c88)
FwpmNetEventsGetSecurityInfo0 (Address: 0x180030bb8)
FwpmNetEventsLost0 (Address: 0x180030c50)
FwpmNetEventsSetSecurityInfo0 (Address: 0x180030d98)
FwpmNetEventSubscribe4 (Address: 0x180030c30)
FwpmNetEventSubscriptionsGet0 (Address: 0x180030cd0)
FwpmNetEventUnsubscribe0 (Address: 0x180030c10)
FwpmProviderContextAdd3 (Address: 0x180030c38)
FwpmProviderContextCreateEnumHandle0 (Address: 0x180030df0)
FwpmProviderContextDeleteByKey0 (Address: 0x180030e48)
FwpmProviderContextDestroyEnumHandle0 (Address: 0x180030de0)
FwpmProviderContextEnum3 (Address: 0x180030de8)
FwpmProviderContextGetByKey3 (Address: 0x180030b90)
FwpmProviderContextGetSecurityInfoByKey0 (Address: 0x180030e38)
FwpmProviderContextSetSecurityInfoByKey0 (Address: 0x180030d90)
FwpmProviderContextSubscribeChanges0 (Address: 0x180030c70)
FwpmProviderContextSubscriptionsGet0 (Address: 0x180030cb8)
FwpmProviderContextUnsubscribeChanges0 (Address: 0x180030bc8)
FwpmProviderCreateEnumHandle0 (Address: 0x180030d78)
FwpmProviderDestroyEnumHandle0 (Address: 0x180030d68)
FwpmProviderEnum0 (Address: 0x180030d70)
FwpmProviderGetByKey0 (Address: 0x180030b98)
FwpmProviderGetSecurityInfoByKey0 (Address: 0x180030c40)
FwpmProviderSetSecurityInfoByKey0 (Address: 0x180030e30)
FwpmProviderSubscribeChanges0 (Address: 0x180030c78)
FwpmProviderSubscriptionsGet0 (Address: 0x180030cc8)
FwpmProviderUnsubscribeChanges0 (Address: 0x180030ba8)
FwpmSessionCreateEnumHandle0 (Address: 0x180030d60)
FwpmSessionDestroyEnumHandle0 (Address: 0x180030d50)
FwpmSessionEnum0 (Address: 0x180030d58)
FwpmSubLayerCreateEnumHandle0 (Address: 0x180030d48)
FwpmSubLayerDestroyEnumHandle0 (Address: 0x180030d38)
FwpmSubLayerEnum0 (Address: 0x180030d40)
FwpmSubLayerGetByKey0 (Address: 0x180030b58)
FwpmSubLayerGetSecurityInfoByKey0 (Address: 0x180030bf8)
FwpmSubLayerSetSecurityInfoByKey0 (Address: 0x180030dc0)
FwpmSubLayerSubscribeChanges0 (Address: 0x180030c68)
FwpmSubLayerSubscriptionsGet0 (Address: 0x180030cb0)
FwpmSubLayerUnsubscribeChanges0 (Address: 0x180030bd8)
FwpmSystemPortsGet0 (Address: 0x180030dd0)
FwpmTransactionAbort0 (Address: 0x180030bb0)
FwpmTransactionBegin0 (Address: 0x180030c20)
FwpmTransactionCommit0 (Address: 0x180030c18)
FwpsAleEndpointCreateEnumHandle0 (Address: 0x180030cf8)
FwpsAleEndpointDestroyEnumHandle0 (Address: 0x180030ce8)
FwpsAleEndpointEnum0 (Address: 0x180030cf0)
IkeextGetStatistics1 (Address: 0x180030ca8)
IkeextSaCreateEnumHandle0 (Address: 0x180030d30)
IkeextSaDbGetSecurityInfo0 (Address: 0x180030d08)
IkeextSaDbSetSecurityInfo0 (Address: 0x180030b78)
IkeextSaDestroyEnumHandle0 (Address: 0x180030d20)
IkeextSaEnum2 (Address: 0x180030d28)
IPsecDospGetStatistics0 (Address: 0x180030ba0)
IPsecDospStateCreateEnumHandle0 (Address: 0x180030e28)
IPsecDospStateDestroyEnumHandle0 (Address: 0x180030e10)
IPsecDospStateEnum0 (Address: 0x180030e18)
IPsecGetStatistics1 (Address: 0x180030ca0)
IPsecSaContextCreateEnumHandle0 (Address: 0x180030d18)
IPsecSaContextDestroyEnumHandle0 (Address: 0x180030d00)
IPsecSaContextEnum1 (Address: 0x180030d10)
IPsecSaDbGetSecurityInfo0 (Address: 0x180030c58)
IPsecSaDbSetSecurityInfo0 (Address: 0x180030b88)

IPHLPAPI.DLL

GetAdaptersAddresses (Address: 0x180030780)

msvcrt.dll

__C_specific_handler (Address: 0x180030fa0)
__dllonexit (Address: 0x180030f88)
_amsg_exit (Address: 0x180030fc0)
_close (Address: 0x180030e90)
_errno (Address: 0x180030ea8)
_get_errno (Address: 0x180030f10)
_i64toa_s (Address: 0x180030ed8)
_initterm (Address: 0x180030fa8)
_lock (Address: 0x180030f98)
_lseek (Address: 0x180030e88)
_ltoa_s (Address: 0x180030ee0)
_onexit (Address: 0x180030f80)
_open (Address: 0x180030eb0)
_read (Address: 0x180030ea0)
_set_errno (Address: 0x180030f20)
_snwprintf_s (Address: 0x180030f40)
_tempnam (Address: 0x180030e78)
_ui64toa_s (Address: 0x180030ed0)
_ultoa_s (Address: 0x180030f08)
_ultow_s (Address: 0x180030f38)
_unlock (Address: 0x180030f90)
_vsnprintf (Address: 0x180030f68)
_vsnwprintf (Address: 0x180030f60)
_wcsicmp (Address: 0x180030f48)
_wcsnicmp (Address: 0x180030ec0)
_write (Address: 0x180030e98)
_XcptFilter (Address: 0x180030fc8)
bsearch (Address: 0x180030e70)
free (Address: 0x180030fb8)
isprint (Address: 0x180030ee8)
malloc (Address: 0x180030fb0)
memcmp (Address: 0x180030f70)
memcpy (Address: 0x180030f78)
memset (Address: 0x180030e68)
qsort (Address: 0x180030ec8)
remove (Address: 0x180030e80)
sprintf_s (Address: 0x180030ef0)
strcpy_s (Address: 0x180030eb8)
strpbrk (Address: 0x180030f00)
strstr (Address: 0x180030ef8)
swprintf_s (Address: 0x180030f30)
wcsncmp (Address: 0x180030f28)
wcstol (Address: 0x180030f50)
wcstoul (Address: 0x180030f18)
wprintf (Address: 0x180030f58)

NETSH.EXE

MatchEnumTag (Address: 0x180030798)
PreprocessCommand (Address: 0x1800307b8)
PrintMessage (Address: 0x180030790)
PrintMessageFromModule (Address: 0x1800307a0)
RegisterContext (Address: 0x1800307a8)
RegisterHelper (Address: 0x1800307b0)

NSI.dll

NsiGetAllParameters (Address: 0x1800307d0)
NsiSetAllParameters (Address: 0x1800307c8)

ntdll.dll

EtwEventWriteTransfer (Address: 0x180031000)
EtwTraceMessage (Address: 0x180031018)
RtlApplicationVerifierStop (Address: 0x180031008)
RtlCaptureContext (Address: 0x180031030)
RtlEthernetAddressToStringA (Address: 0x180030fe0)
RtlIpv4AddressToStringA (Address: 0x180030ff0)
RtlIpv4StringToAddressW (Address: 0x180030ff8)
RtlIpv6AddressToStringA (Address: 0x180030fe8)
RtlIpv6AddressToStringW (Address: 0x180030fd8)
RtlIpv6StringToAddressW (Address: 0x180031038)
RtlLookupFunctionEntry (Address: 0x180031028)
RtlNtStatusToDosError (Address: 0x180031010)
RtlVirtualUnwind (Address: 0x180031020)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x180030800)
MesDecodeBufferHandleCreate (Address: 0x180030808)
MesEncodeDynBufferHandleCreate (Address: 0x1800307f0)
MesHandleFree (Address: 0x1800307f8)
NdrMesTypeDecode3 (Address: 0x180030810)
UuidCreate (Address: 0x1800307e0)
UuidFromStringW (Address: 0x1800307e8)