WfHC.dll

Description: Windows Defender Firewall Helper Class

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: ae7d7daa9b091bf25278e67c7d3170f4

File Size: 88.5 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 4

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x5730)
  • DllGetClassObject (Ordinal: 2, Address: 0x5770)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x18000f080)
  • CoInitializeEx (Address: 0x18000f060)
  • CoTaskMemAlloc (Address: 0x18000f058)
  • CoTaskMemFree (Address: 0x18000f070)
  • CoTaskMemRealloc (Address: 0x18000f078)
  • CoUninitialize (Address: 0x18000f068)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18000f0a8)
  • RaiseException (Address: 0x18000f0a0)
  • SetUnhandledExceptionFilter (Address: 0x18000f090)
  • UnhandledExceptionFilter (Address: 0x18000f098)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18000f0c8)
  • HeapAlloc (Address: 0x18000f0b8)
  • HeapDestroy (Address: 0x18000f0e0)
  • HeapFree (Address: 0x18000f0c0)
  • HeapReAlloc (Address: 0x18000f0d0)
  • HeapSize (Address: 0x18000f0d8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18000f0f0)
  • LocalFree (Address: 0x18000f0f8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x18000f110)
  • GetModuleFileNameA (Address: 0x18000f130)
  • LoadResource (Address: 0x18000f108)
  • LoadStringW (Address: 0x18000f118)
  • LockResource (Address: 0x18000f120)
  • SizeofResource (Address: 0x18000f128)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18000f140)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18000f158)
  • GetCurrentProcessId (Address: 0x18000f168)
  • GetCurrentThreadId (Address: 0x18000f150)
  • TerminateProcess (Address: 0x18000f160)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18000f178)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x18000f188)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x18000f198)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x18000f1a8)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x18000f1b8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18000f1e8)
  • DeleteCriticalSection (Address: 0x18000f1d0)
  • EnterCriticalSection (Address: 0x18000f1d8)
  • InitializeCriticalSection (Address: 0x18000f1f0)
  • LeaveCriticalSection (Address: 0x18000f1e0)
  • ReleaseSRWLockExclusive (Address: 0x18000f1c8)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x18000f200)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18000f218)
  • GetTickCount (Address: 0x18000f210)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x18000f248)
  • EventRegister (Address: 0x18000f240)
  • EventSetInformation (Address: 0x18000f238)
  • EventUnregister (Address: 0x18000f230)
  • EventWriteTransfer (Address: 0x18000f228)
api-ms-win-security-base-l1-1-0.dll
  • IsValidSid (Address: 0x18000f258)
ext-ms-win-shell-shlwapi-l1-1-0.dll
  • AssocQueryStringW (Address: 0x18000f268)
FirewallAPI.dll
  • FWAddFirewallRule (Address: 0x18000f008)
  • FwAlloc (Address: 0x18000efe0)
  • FWClosePolicyStore (Address: 0x18000f010)
  • FWDeleteFirewallRule (Address: 0x18000eff0)
  • FwFree (Address: 0x18000efd8)
  • FWFreeFirewallRules (Address: 0x18000f000)
  • FWGetGlobalConfig (Address: 0x18000efe8)
  • FWOpenPolicyStore (Address: 0x18000efc8)
  • FWQueryFirewallRules (Address: 0x18000eff8)
  • FWSetFirewallRule (Address: 0x18000efd0)
fwbase.dll
  • FwStringCopy (Address: 0x18000f278)
fwpuclnt.dll
  • FwpmEngineClose0 (Address: 0x18000f298)
  • FwpmEngineOpen0 (Address: 0x18000f288)
  • FwpmFilterGetById0 (Address: 0x18000f290)
  • FwpmFreeMemory0 (Address: 0x18000f2a0)
msvcrt.dll
  • __C_specific_handler (Address: 0x18000f388)
  • __CxxFrameHandler3 (Address: 0x18000f3a0)
  • __dllonexit (Address: 0x18000f318)
  • _amsg_exit (Address: 0x18000f3b0)
  • _callnewh (Address: 0x18000f2e0)
  • _CxxThrowException (Address: 0x18000f358)
  • _initterm (Address: 0x18000f3b8)
  • _lock (Address: 0x18000f300)
  • _onexit (Address: 0x18000f328)
  • _purecall (Address: 0x18000f370)
  • _unlock (Address: 0x18000f308)
  • _vscwprintf (Address: 0x18000f2c0)
  • _vsnwprintf (Address: 0x18000f378)
  • _XcptFilter (Address: 0x18000f3a8)
  • ??_V@YAXPEAX@Z (Address: 0x18000f390)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x18000f2f8)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18000f338)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18000f340)
  • ??1exception@@UEAA@XZ (Address: 0x18000f348)
  • ??1type_info@@UEAA@XZ (Address: 0x18000f330)
  • ??3@YAXPEAX@Z (Address: 0x18000f310)
  • ?terminate@@YAXXZ (Address: 0x18000f2f0)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x18000f350)
  • free (Address: 0x18000f368)
  • malloc (Address: 0x18000f2e8)
  • memcpy (Address: 0x18000f360)
  • memcpy_s (Address: 0x18000f2b8)
  • memmove (Address: 0x18000f398)
  • memmove_s (Address: 0x18000f320)
  • memset (Address: 0x18000f3c0)
  • toupper (Address: 0x18000f2d8)
  • vswprintf_s (Address: 0x18000f2c8)
  • wcsncmp (Address: 0x18000f380)
  • wcsnlen (Address: 0x18000f2b0)
  • wcsstr (Address: 0x18000f2d0)
ntdll.dll
  • RtlCaptureContext (Address: 0x18000f3d0)
  • RtlLookupFunctionEntry (Address: 0x18000f3d8)
  • RtlVirtualUnwind (Address: 0x18000f3e0)
RPCRT4.dll
  • RpcStringFreeW (Address: 0x18000f020)
  • UuidCreate (Address: 0x18000f028)
  • UuidToStringW (Address: 0x18000f030)
WS2_32.dll
  • htons (Address: 0x18000f040)
  • ntohs (Address: 0x18000f048)