| Windows 10 DLL File Information - PeerDistSh.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | BranchCache Netshell Helper |
| File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 349 KB |
| Total Number of Exported Functions: | 1 |
| Total Number of Exported Functions With Names: | 1 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 330,240 Bytes | 92.4% | Read, Execute | Code |
| .data | 0x00052000 | 1,536 Bytes | 0.4% | Write, Read | Initialized Data |
| .idata | 0x00053000 | 7,680 Bytes | 2.1% | Read | Initialized Data |
| .didat | 0x00055000 | 512 Bytes | 0.1% | Write, Read | Initialized Data |
| .rsrc | 0x00056000 | 1,536 Bytes | 0.4% | Read | Initialized Data |
| .reloc | 0x00057000 | 14,848 Bytes | 4.2% | Read, Discardable | Initialized Data |
Static Linking
PeerDistSh.dll is statically linked to the following files:msvcrt.dll
ntdll.dll
RPCRT4.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-string-l2-1-1.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
SHLWAPI.dll
ADVAPI32.dll
NETSH.EXE
KERNEL32.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
bcrypt.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-service-winsvc-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-delayload-l1-1-1.dll
profapi.dll
api-ms-win-core-localization-private-l1-1-0.dll
ktmw32.dll
This means that when PeerDistSh.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, PeerDistSh.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 245 | 40,358 Bytes | 11.3% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 2 | 1,144 Bytes | 0.3% |
| Total | 247 | 41,502 Bytes | 11.6% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
| String ID | String Text |
|---|---|
| 1000 | Displays configuration parameters. |
| 1001 | Sets configuration parameters. |
| 2000 | Displays the location of the hosted cache. |
| 2001 | Sets the status of the BranchCache service. |
| 2002 | Sets the location of the local cache. |
| 2003 | Sets the size of the local cache. |
| 2004 | Displays the current status of the BranchCache service. |
| 2005 | Displays the status of the local cache. |
| 2006 | Resets the BranchCache service. |
| 2008 | Generates a new content information key. |
| 2009 | Exports the content information key. |
| 2010 | Imports a new content information key. |
| 2011 | Flushes the contents of the cache. |
| 2012 | Displays the status of the local publication cache. |
| 2013 | Sets the location of the local publication cache. |
| 2014 | Sets the size of the local publication cache. |
| 2015 | Sets BranchCache SMB latency. |
| 2016 | Displays BranchCache SMB latency settings. |
| 3000 | Usage: show hostedcache Remarks: Displays the location of the hosted cache Examples: show hostedcache |
| 3001 | Usage: set service [mode=]{DISABLED|LOCAL|DISTRIBUTED|HOSTEDSERVER|HOSTEDCLIENT} [[location]=<Host Name>] [[clientauthentication]={DOMAIN|NONE}] [[serveonbattery]={TRUE|FALSE}] Parameters: Tag Value mode - Set the status of the BranchCache Service DISABLED - Disable the service LOCAL - Uses Local Caching Only DISTRIBUTED - Distributed Caching Enabled HOSTEDSERVER - Set as a Hosted Cache Server HOSTEDCLIENT - Set as a Hosted Cache Client location - Set the location of the Hosted Cache Server. This tag is only necessary if the mode tag is set to HOSTEDCLIENT and is invalid otherwise. clientauthentication - Set the mechanism used by a Hosted Cache Server to authenticate clients. This tag is only used if the mode tag is set to HOSTEDSERVER and is invalid otherwise. DOMAIN - Clients of the hosted cache must be members of the same domain NONE - No authentication mechanism is used serveonbattery - Enables the local client to respond to peers for requests for cached data while on battery power This tag is only used if the mode tag is set to DISTRIBUTED and is invalid otherwise. TRUE - Enables serving data while on battery power. FALSE - Disables serving data while on batter power. Remarks: Sets the status of the BranchCache service. This command will also ensure that the necessary firewall configuration for the chosen mode is in place. It is strongly recommended that you provide a fully qualified domain name as the location of the Hosted Cache when setting Hosted Cache Client mode. Examples: set service DISABLED set service mode=DISTRIBUTED set service mode=HOSTEDCLIENT location=SERVER123 set service mode=HOSTEDSERVER clientauthentication=DOMAIN |
| 3002 | Usage: set localcache [directory=]{DEFAULT|<File Path>} Parameters: Tag Value directory - The fully qualified path to the directory in which the local cache should be stored. Set to DEFAULT to restore the default cache location. Remarks: Sets the location of the BranchCache service's local cache. Note that the service will be stopped and restarted if necessary in order to complete the change. Any existing cache files will be moved to the new location. Examples: set localcache DEFAULT set localcache directory=C:\BranchCache\Localcache |
| 3003 | Usage: set cachesize [size=]{DEFAULT|<number>} [[percent=]{TRUE|FALSE}] Parameters: Tag Value size - The size of the cache. Entered as either a percentage or an exact number of bytes. Set to DEFAULT to restore the default configuration percent - Determines if the size tag is treated as a percentage of the size of the hard disk or as an exact number of bytes. Ignored if the size tag is set to DEFAULT. TRUE - size is a percentage of the size of the hard disk FALSE - size is an exact number of bytes (Default) Remarks: Sets the size of the BranchCache service's local cache. The size can be entered as either an exact number of bytes, or as a percentage of the size of the disk. Note that this refers to the size of the disk on which the cache is located, not the total size of all disks present on this computer. Examples: set cachesize DEFAULT set cachesize 20971520 set cachesize size=20 percent=TRUE |
| 3004 | Usage: show status [[detail=]{BASIC|ALL}] Parameters: Tag Value detail - The level of detail to display (Optional) BASIC - Display only basic information (Default) ALL - Display all available information Remarks: Displays the current status of the BranchCache service. Examples: show status show status ALL show status detail=ALL |
| 3005 | Usage: show localcache Remarks: Displays the status of the local cache. The maximum size of the cache can be configured as either an exact number of bytes or as a percentage of the size of the disk. Note that this refers to the size of the disk on which the cache is located, not the total size of all disks present on this computer. Examples: show localcache |
| 3006 | Usage: reset Remarks: Resets the BranchCache service. Flushes the local and publication caches. Every configuration parameter of BranchCache will be reset to its default value. Examples: reset |
| 3008 | Usage: set key [[passphrase=]<Pass Phrase>] Parameters: Tag Value passphrase - A passphrase to use to generate the key. If a passphrase is not provided, a random key will be generated. Two keys generated using the same passphrase will always be identical. Using a passphrase is a convenient way to duplicate the same key on another machine. (Optional) Remarks: Generates a new key for the BranchCache service to use to protect content information. If the service is currently running, this command will stop and restart it in order to begin using the new key. Examples: set key set key passphrase="I want my content to be secure" |
| 3009 | Usage: exportkey [outputfile=]<File Path> [passphrase]=<Pass Phrase> Parameters: Tag Value outputfile - The directory path and name of the file to which the key should be exported passphrase - A passphrase required in order to import the key Remarks: This command will export the key which the BranchCache service uses to protect content information. The key can then be imported on another machine by using the importkey command. Examples: exportkey %%TMP%%\secret.key "Key file password" exportkey outputfile=C:\KeyDirectory\secret.key "Key file password" |
| 3010 | Usage: importkey [inputfile=]<File Path> [passphrase]=<Pass Phrase> Parameters: Tag Value inputfile - The location of the file from which the key should be imported passphrase - The passphrase used when exporting the key using the exportkey command Remarks: This command will import a new key for the BranchCache service to use to protect content information. The key must have been previously exported by means of the exportkey command. If the service is currently running, this command will stop and restart it in order to begin using the new key. Examples: importkey %%TMP%%\secret.key "Key file password" importkey inputfile=C:\KeyDirectory\secret.key "Key file password" |
| 3011 | Usage: flush Flushes the contents of the local and publication caches. Examples: flush |
| 3012 | Usage: show publicationcache Remarks: Displays the status of the local publication cache. The maximum size of the cache can be configured as either an exact number of bytes or as a percentage of the size of the disk. Note that this refers to the size of the disk on which the cache is located, not the total size of all disks present on this computer. Examples: show publicationcache |
| 3013 | Usage: set publicationcache [directory=]{DEFAULT|<File Path>} Parameters: Tag Value directory - The fully qualified path to the directory in which the local publication cache should be stored. Set to DEFAULT to restore the default cache location. Remarks: Sets the location of the BranchCache service's local publication cache. Note that the service will be stopped and restarted if necessary in order to complete the change. Examples: set publicationcache DEFAULT set publicationcache directory=C:\BranchCache\PublicationCache |
| 3014 | Usage: set publicationcachesize [size=]{DEFAULT|<number>} [[percent=]{TRUE|FALSE}] Parameters: Tag Value size - The size of the cache. Entered as either a percentage or an exact number of bytes. Set to DEFAULT to restore the default configuration percent - Determines if the size tag is treated as a percentage of the size of the hard disk or as an exact number of bytes. Ignored if the size tag is set to DEFAULT. TRUE - size is a percentage of the size of the hard disk FALSE - size is an exact number of bytes (Default) Remarks: Sets the size of the BranchCache service's local publication cache. The size can be entered as either an exact number of bytes, or as a percentage of the size of the disk. Note that this refers to the size of the disk on which the cache is located, not the total size of all disks present on this computer. Examples: set publicationcachesize DEFAULT set publicationcachesize 20971520 set publicationcachesize size=20 percent=TRUE |
| 3015 | Usage: set latency [latency=]<number> Parameters: Tag Value latency - Minimum link latency to the branch office before SMB will use BranchCache caching. In milliseconds |
| 3016 | Usage: get Parameters: None |
| 4000 | Query Hosted Cache Location |
| 4001 | Set Local Cache Location |
| 4002 | Set Local Cache Size |
| 4003 | Set Service Mode |
| 4004 | Set Service Status |
| 4005 | Configure Networking |
| 4007 | Warn if Firewall is disabled |
| 4008 | Warn if inbound traffic is blocked |
| 4009 | Print Header Separator Line |
| 4010 | Print General Status Header |
| 4011 | Print Cache Status Header |
| 4012 | Print Firewall Status Header |
| 4013 | Display Service Mode |
| 4014 | Display Service Status |
| 4015 | Display Service Start Type |
| 4016 | Display Maximum Cache Size |
| 4017 | Display Local Cache Location |
| 4018 | Display URL Reservation Status |
| 4019 | Display Firewall Rule Group Status |
| 4020 | Display Hosted Cache Certificate Status |
| 4021 | Set Service Start Type |
| 4022 | Set Key |
| 4023 | Export Key |
| 4024 | Import Key |
| 4025 | Flush Cache |
| 4026 | Display Current Cache Size |
| 4027 | Reset Local Registry Defaults |
| 4028 | Set Service Shutdown Timeout |
| 4029 | Display Client Authentication Mode |
| 4030 | Delete Cache Files |
| 4031 | Disable and Stop Service |
| 4034 | Display Publication Cache Maximum Size |
| 4035 | Display Publication Cache Location |
| 4036 | Set Publication Cache Location |
| 4037 | Set latency |
| 4038 | Show Latency |
| 4039 | Begin Alignment Range |
| 4040 | End Alignment Range |
| 4041 | Render Output |
| 4042 | Configure cache |
| 4043 | Refresh configuration settings |
| 4044 | Set service startup configuration check override |
| 5000 | Error Executing Action %1!s!: %2!s! |
| 5001 | Could not retrieve value from system registry |
| 5002 | Could not set value in system registry |
| 5003 | Could not retrieve string resource |
| 5004 | Could not print to console |
| 5005 | Internal BranchCache context error |
| 5006 | Unable to read from file |
| 5007 | Could not query service control manager |
| 5008 | Could not configure service start type |
| 5009 | Could not start service |
| 5010 | Could not query HTTP Server configuration |
| 5011 | Could not set HTTP Server configuration |
| 5012 | Could not query Windows Firewall configuration |
| 5013 | Could not set Windows Firewall configuration |
| 5014 | Group Policy is preventing successful firewall configuration |
| 5015 | Could not query secret store |
| 5016 | Out of memory |
| 5017 | Could not export key. Please ensure the output directory exists |
| 5018 | Could not import key. Please ensure the import file exists and the passphrase is correct |
| 5019 | Could not generate new key. |
| 5020 | Could not stop service |
| 5021 | Could not create an RPC binding to the service |
| 5022 | Could not release an RPC binding to the service |
| 5023 | Error flushing the local cache |
| 5024 | Error querying cache information |
| 5025 | Error calling RPC method |
| 5026 | An error occurred while resolving the hosted cache location |
| 5027 | The specified hosted cache location is not valid. Please enter a valid hosted cache location |
| 5028 | A host name is required. Please enter a valid host name. |
| 5029 | Could not configure cache directory security |
| 5030 | Could not stop service |
| 5031 | Could not restore registry defaults |
| 5032 | Could not configure service shutdown timeout |
| 5033 | The hosted cache connection port is invalid |
| 5034 | Failed to move cache files |
| 5035 | Failed to delete cache files |
| 5036 | The specified cache size exceeds the disk size |
| 5037 | Error refreshing configuration |
| 6000 | This machine is currently configured as a hosted cache server. |
| 6001 | This machine is not configured as a hosted cache client. |
| 6002 | Hosted Cache Location |
| 6003 | Setting Local Cache Location... |
| 6004 | This command can only be executed from an elevated command prompt. |
| 6005 | The cache size entered is not valid |
| 6006 | Setting Cache Size... |
| 6007 | Hosted Cache Server Mode cannot be used in this version of Windows |
| 6008 | A Hosted Cache location is required. |
| 6009 | Setting Service Mode... |
| 6010 | Setting Service Start Type to %1!s!... |
| 6011 | Starting Service... |
| 6012 | Configuring URL Reservation url=%1!s!, sddl=%2!s! ... |
| 6013 | Enabling firewall rule group %1!s!... |
| 6014 | Disabling firewall rule group %1!s!... |
| 6015 | ------------------------------------------------------------------------------- |
| 6016 | BranchCache Service Status: |
| 6017 | Local Cache Status: |
| 6018 | Networking Status: |
| 6019 | Service Mode |
| 6020 | Current Status |
| 6021 | Service Start Type |
| 6024 | Local Cache Location |
| 6025 | = %1!s! (Default) |
| 6032 | # ---------------------------------------- # BranchCache Configuration # ---------------------------------------- pushd BranchCache set service status=%1!s! %2!s! set cachesize size=%3!s! percent=%4!s! set localcache directory=%5!s! popd |
| 6033 | Stopping Service... |
| 6034 | The service is currently disabled. Please use the "set service" command to enable the service |
| 6035 | Exporting Key... |
| 6036 | Importing Key... |
| 6037 | Generating Key... |
| 6039 | Flushing Cache... |
| 6041 | Resetting Local Registry Defaults... |
| 6042 | This command can only be executed when BranchCache is installed. |
| 6043 | SSL Certificate Bound To Hosted Cache Port |
| 6044 | Client Authentication |
| 6045 | The specified passphrase is invalid. Please enter a valid passphrase. |
| 6046 | The %1!s! parameter is not valid for this service mode. |
| 6047 | Temporarily disabling the service while moving the cache... |
| 6048 | The specified directory does not exist. |
| 6049 | Enabling the service... |
| 6050 | Moving cache files... |
| 6051 | = Default |
| 6052 | Deleting cache files... |
| 6053 | Disabling and stopping service... |
| 6054 | Publication Cache Status: |
| 6058 | Publication Cache Location |
| 6061 | Setting Publication Cache Location... |
| 6062 | Removing cache files... |
| 6063 | The specified directory is not on an NTFS volume. |
| 6064 | The specified directory path is too long. |
| 6065 | Serve peers on battery power |
| 6066 | SMB Latency=%1!d! ms |
| 6067 | SMB Latency=%1!d! ms %2!s! |
| 6068 | The SMB Latency value could not be retrieved from the registry |
| 6069 | BranchCache SMB Configuration: |
| 6070 | The latency value is invalid. Allowed values (0 - 2147483647) |
| 6071 | = %1!s! |
| 6072 | = %1!s! %2!s! |
| 6073 | Maximum Cache Size |
| 6074 | = %1!I64u! Bytes [%2!d!%%%%] %3!s! |
| 6075 | = %1!I64u!%%%% of hard disk %2!s! |
| 6076 | Active Current Cache Size |
| 6077 | = %1!I64u! Bytes |
| 6078 | = %1!s! |
| 6079 | %1!s! |
| 6080 | Modifying cache settings... |
| 6081 | The destination directory must be empty |
| 7000 | (Set By Group Policy) |
| 7001 | Cannot alter this setting because it is configured by Group Policy |
| 7002 | Succeeded |
| 7003 | The specified directory location does not exist |
| 7004 | Manual |
| 7005 | Automatic |
| 7006 | Failed |
| 7007 | Disabled |
| 7008 | Local Caching |
| 7009 | Distributed Caching |
| 7010 | Hosted Cache Server |
| 7011 | Hosted Cache Client |
| 7012 | Running |
| 7013 | Paused |
| 7014 | Stopped |
| 7015 | Default |
| 7016 | Policy Refresh in Progress |
| 7017 | Enabled |
| 7018 | Disabled |
| 7019 | Configured |
| 7020 | Not Configured |
| 7021 | (Required) |
| 7022 | (Not Required) |
| 7023 | Domain Authentication |
| 7024 | No Authentication |
| 7025 | Enabled |
| 7026 | [Multiple Servers] |
| 8000 | The local cache file location change will not take effect until the service is restarted. |
| 8001 | Warning: The Windows Firewall is Currently Disabled. |
| 8002 | Warning: The Windows Firewall is Configured to block all Inbound Connections |
| 8003 | Warning: An HTTP URL Reservation is required but not configured. |
| 8004 | Warning: A Firewall Rule Group is required but not enabled. |
| 8005 | Warning: There is no certificate bound to the Hosted Cache Port. A Hosted Cache SSL Certificate is required to serve Windows 7 clients or to serve Vista clients which are using the BITS protocol. |
| 8006 | Warning: It is recommended that a fully qualified domain name is used to specify the name of the Hosted Cache server. |
| 8007 | Warning: Current group policy configuration prevents local firewall rules from being applied. The BranchCache configuration will be changed, but changes to the local BranchCache firewall rules will not take effect. |
| 9000 | BranchCache - Content Retrieval (Uses HTTP) |
| 9001 | BranchCache - Peer Discovery (Uses WSD) |
| 9002 | BranchCache - Hosted Cache Server (Uses HTTPS) |
| 9003 | BranchCache - Hosted Cache Client (Uses HTTPS) |
| 10000 | BranchCache Content Retrieval (HTTP-In) |
| 10001 | BranchCache Content Retrieval (HTTP-Out) |
| 10002 | BranchCache Peer Discovery (WSD-In) |
| 10003 | BranchCache Peer Discovery (WSD-Out) |
| 10004 | BranchCache Hosted Cache Server (HTTP-In) |
| 10005 | BranchCache Hosted Cache Server(HTTP-Out) |
| 10006 | BranchCache Hosted Cache Client (HTTP-Out) |
| 11000 | Inbound rule for BranchCache to allow data transfer using HTTP [TCP 80] |
| 11001 | Outbound rule for BranchCache to allow data transfer using HTTP [TCP 80] |
| 11002 | Inbound rule for BranchCache to allow peer discovery [UDP 3702] |
| 11003 | Outbound rule for BranchCache to allow peer discovery [UDP 3702] |
| 11004 | Inbound rule for BranchCache to allow communication between a hosted cache and its clients [TCP] |
| 11005 | Outbound rule for BranchCache to allow communication between a hosted cache and its clients [TCP] |
| 11006 | Outbound rule for BranchCache to allow connection to a hosted cache server [TCP] |
| 12000 | Content Retrieval Firewall Rules |
| 12001 | Peer Discovery Firewall Rules |
| 12002 | Hosted Cache Server Firewall Rules |
| 12003 | Hosted Cache Client Firewall Rules |
| 13000 | Content Retrieval URL Reservation |
| 13001 | Hosted Cache URL Reservation |
| 13002 | Hosted Cache HTTP URL Reservation |
| 19000 | With BranchCache, clients use HTTP to retrieve content from each other in the distributed mode, and from the hosted cache in hosted cache mode. This firewall rule opens up the HTTP port (port 80) for clients to provide encrypted data to other requesting clients. |
| 19001 | With BranchCache, clients use the WS Discovery protocol to lookup content availability on the local subnet. This firewall rule opens the port for WS Discovery so that clients can watch for these incoming requests and respond to them. |
| 19002 | With BranchCache, clients can be configured to use the hosted cache. This firewall rule opens up the needed ports on the clients to facilitate communication with the hosted cache. |
| 19003 | With BranchCache, clients can be configured to use a hosted cache. This firewall rule opens up the needed ports on the hosted cache to allow clients to communicate with the hosted cache. |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| InitHelperDll |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_CxxThrowException _XcptFilter __CxxFrameHandler __dllonexit _amsg_exit _callnewh _except_handler4_common _initterm _lock _onexit _purecall _unlock _vsnwprintf _wcsnicmp _wcstoui64 free iswspace malloc memcmp memcpy memmove memset public: __thiscall exception::exception(char const * const &) public: __thiscall exception::exception(class exception const &) public: __thiscall exception::exception(void) public: virtual __thiscall exception::~exception(void) public: virtual __thiscall type_info::~type_info(void) public: virtual char const * __thiscall exception::what(void)const strchr void __cdecl terminate(void) wcschr wcsncmp - ntdll.dll:
EtwEventActivityIdControl EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids - RPCRT4.dll:
NdrClientCall4 RpcBindingFree RpcBindingFromStringBindingW RpcBindingSetAuthInfoExW RpcStringBindingComposeW RpcStringFreeW - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventW KernelBase!Sleep KernelBase!WaitForSingleObject ntdll!RtlDeleteCriticalSection ntdll!RtlLeaveCriticalSection - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-libraryloader-l1-2-0.dll:
KernelBase!LoadStringW - api-ms-win-core-com-l1-1-1.dll:
combase!CoCreateInstance combase!CoInitializeEx combase!CoUninitialize - api-ms-win-core-processenvironment-l1-2-0.dll:
KernelBase!ExpandEnvironmentStringsW - api-ms-win-core-file-l1-2-1.dll:
KernelBase!CreateDirectoryW KernelBase!DeleteFileW - api-ms-win-core-string-l2-1-1.dll:
KernelBase!SHLoadIndirectString - api-ms-win-core-localization-l1-2-1.dll:
KernelBase!FormatMessageW - api-ms-win-core-heap-l2-1-0.dll:
KernelBase!LocalFree - api-ms-win-core-processthreads-l1-1-2.dll:
KernelBase!SetThreadToken kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThreadId kernel32!TerminateProcess - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount - SHLWAPI.dll:
PathCanonicalizeW PathIsDirectoryEmptyW PathIsDirectoryW - ADVAPI32.dll:
GetExplicitEntriesFromAclA GetNamedSecurityInfoW OpenProcessToken OpenThreadToken RegOpenKeyTransactedW SetEntriesInAclW SetNamedSecurityInfoW - NETSH.EXE:
MatchEnumTag MatchToken PreprocessCommand PrintError PrintMessage PrintMessageFromModule RegisterContext RegisterHelper - KERNEL32.dll:
CompareStringW CreateFileW CreateThread CreateThreadpoolCleanupGroup CreateThreadpoolWork DeleteFileTransactedW DeleteTimerQueueEx FindClose FindFirstFileExW FindFirstFileTransactedW FindNextFileW FreeLibrary GetCurrentThread GetDiskFreeSpaceExW GetExitCodeThread GetFileSizeEx GetFullPathNameW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessHeap GetTickCount64 GetVolumeInformationW GetVolumePathNameW GetWindowsDirectoryW HeapFree InitializeCriticalSectionAndSpinCount KernelBase!RaiseFailFastException LoadLibraryW LocalAlloc ReadFile RegCloseKey RegCreateKeyExW RegDeleteTreeW RegDeleteValueW RegEnumValueW RegGetKeySecurity RegGetValueW RegNotifyChangeKeyValue RegOpenKeyExW RegQueryInfoKeyW RegSetKeySecurity RegSetValueExW RemoveDirectoryTransactedW RemoveDirectoryW SetEvent SetLastError SleepEx WaitForMultipleObjectsEx WideCharToMultiByte WriteFile lstrcmpW ntdll!RtlAcquireSRWLockExclusive ntdll!RtlAcquireSRWLockShared ntdll!RtlAllocateHeap ntdll!RtlEnterCriticalSection ntdll!RtlInitializeConditionVariable ntdll!RtlReleaseSRWLockExclusive ntdll!RtlReleaseSRWLockShared ntdll!RtlTryEnterCriticalSection ntdll!TpCallbackSetEventOnCompletion ntdll!TpPostWork ntdll!TpReleaseCleanupGroup ntdll!TpReleaseCleanupGroupMembers ntdll!TpReleaseWork - api-ms-win-security-sddl-l1-1-0.dll:
sechost!ConvertSidToStringSidW sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW sechost!ConvertStringSidToSidW - api-ms-win-security-base-l1-2-0.dll:
KernelBase!CreateWellKnownSid KernelBase!EqualSid KernelBase!GetAce KernelBase!GetAclInformation KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorGroup KernelBase!GetSecurityDescriptorOwner KernelBase!GetTokenInformation KernelBase!InitializeSecurityDescriptor KernelBase!IsValidAcl KernelBase!IsValidSecurityDescriptor KernelBase!SetSecurityDescriptorControl KernelBase!SetSecurityDescriptorDacl KernelBase!SetSecurityDescriptorGroup KernelBase!SetSecurityDescriptorOwner - bcrypt.dll:
BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDecrypt BCryptDestroyHash BCryptEncrypt BCryptFinishHash BCryptGenRandom BCryptGenerateSymmetricKey BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider - api-ms-win-service-management-l1-1-0.dll:
sechost!CloseServiceHandle sechost!OpenSCManagerW sechost!OpenServiceW sechost!StartServiceW - api-ms-win-service-management-l2-1-0.dll:
sechost!ChangeServiceConfig2W sechost!ChangeServiceConfigW sechost!NotifyServiceStatusChange sechost!QueryServiceConfigW sechost!QueryServiceStatusEx - api-ms-win-service-winsvc-l1-2-0.dll:
sechost!ControlService - api-ms-win-service-core-l1-1-1.dll:
sechost!EnumDependentServicesW - api-ms-win-core-delayload-l1-1-1.dll:
KernelBase!DelayLoadFailureHook KernelBase!ResolveDelayLoadedAPI - profapi.dll:
- api-ms-win-core-localization-private-l1-1-0.dll:
KernelBase!LoadStringByReference - ktmw32.dll:
CommitTransaction CreateTransaction