Windows 10 DLL File Information - rpcnsh.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | RPC Netshell Helper |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
File Size: | 27 KB |
Total Number of Exported Functions: | 1 |
Total Number of Exported Functions With Names: | 1 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 19,968 Bytes | 70.9% | Read, Execute | Code |
.data | 0x00006000 | 1,024 Bytes | 3.6% | Write, Read | Initialized Data |
.idata | 0x00008000 | 2,560 Bytes | 9.1% | Read | Initialized Data |
.rsrc | 0x00009000 | 1,536 Bytes | 5.5% | Read | Initialized Data |
.reloc | 0x0000a000 | 2,048 Bytes | 7.3% | Read, Discardable | Initialized Data |
Static Linking
rpcnsh.dll is statically linked to the following files:msvcrt.dll
ntdll.dll
NETSH.EXE
WS2_32.dll
ADVAPI32.dll
IPHLPAPI.DLL
KERNEL32.dll
RPCRT4.dll
fwpuclnt.dll
This means that when rpcnsh.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, rpcnsh.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 59 | 12,608 Bytes | 44.8% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 2 | 1,112 Bytes | 3.9% |
Total | 61 | 13,720 Bytes | 48.7% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
String ID | String Text |
---|---|
10010 | Creates an Add list of subnets. |
10011 | Usage: %1!s! [subnet] [subnet] ... Remarks: Creates an Add list of subnets. Example: add 128.238.220 157.59.244.1 |
10110 | Creates a Delete list of subnets. |
10111 | Usage: %1!s! [subnet] [[subnet]...] Remarks: Creates a delete list of subnets. Example: delete 128.238.220 157.59.244.1 |
10210 | Displays the selective binding settings in the registry. |
10211 | Usage: %1!s! Remarks: Displays the selective binding settings. |
10310 | Resets the selective binding settings to 'none' (listen on all interfaces). |
10311 | Usage: %1!s! Remarks: Reset the selective binding settings to 'none' (listen on all interfaces). |
10410 | Displays the selective binding state for each subnet on the system. |
10411 | Usage: %1!s! Remarks: Displays the selective binding state for each subnet on the system. |
10510 | Adds configuration entry to a table. |
10511 | Deletes configuration entry from a table. |
10512 | Displays information. |
10513 | Adds an RPC firewall filter. |
10514 | Usage: %1!s! Remarks: Adds an RPC firewall filter. A rule and one or more conditions must be added before adding a filter. Example: add filter |
10515 | Deletes RPC firewall filter(s). |
10516 | Usage: %1!s! [filterkey=]<string> Parameters: Tag Value filterkey - Uuid of the RPC firewall filter to delete. Use all to delete all RPC firewall filters. Remarks: Deletes RPC firewall filter(s). Examples: delete filter filterkey=11111111-1111-1111-1111-111111111111 delete filter filterkey=all |
10517 | Lists all RPC firewall filters. |
10518 | Usage: %1!s! Remarks: Lists all RPC firewall filters. Example: show filter |
10519 | Adds a condition to an existing RPC firewall filter rule. |
10520 | Usage: %1!s! [field=]<string> [matchtype=]<string> [data=]<string> Parameters: Tag Value field - One of the following values: For layer = um if_uuid if_version if_flag dcom_app_id image_name protocol auth_type auth_level sec_encrypt_alg sec_key_size remote_user_token local_addr_v4 local_addr_v6 remote_addr_v4 remote_addr_v6 local_port pipe For layer = epmap if_uuid if_version protocol auth_type auth_level sec_encrypt_alg sec_key_size remote_user_token local_addr_v4 local_addr_v6 remote_addr_v4 remote_addr_v6 local_port pipe For layer = ep_add process_with_if_uuid protocol ep_value ep_flags For layer = proxy_conn server_name server_port proxy_auth_type client_token client_cert_key_name client_cert_oid For layer = proxy_if if_uuid if_version server_name server_port proxy_auth_type client_token client_cert_key_length client_cert_oid matchtype - One of the following values: equal greater less greater_or_equal less_or_equal range all_set any_set none_set data - Value associated with the field paramter. Remarks: Adds a condition to the RPC firewall rule. Examples: add condition field=if_uuid matchtype=equal data=11111111-1111-1111-1111-111111111111 add condition field=protocol matchtype=equal data=ncacn_ip_tcp |
10521 | Adds an RPC firewall filter rule. |
10522 | Usage: %1!s! [layer=]<string> [actiontype=]<string> [[filterkey=]<string>] [[persistence=]volatile] [[audit=]enable] Parameters: Tag Value layer - One of the following values: um epmap ep_add proxy_conn proxy_if actiontype - One of the following values: block permit continue persistence - Filter will be persistent. This is the default. filterkey - Uuid to uniquely identify the RPC firewall filter. audit - Enable auditing for this filter Only permit action type is allowed for audit rules. Audit rules are not allowed at ep_add layer. Remarks: Adds an RPC firewall filter rule. Examples: add rule layer=um actiontype=block add rule layer=epmap actiontype=permit filterkey=11111111-1111-1111-1111-111111111111 |
10523 | Deletes the RPC firewall filter rule. |
10524 | Usage: %1!s! Remarks: Deletes the RPC firewall filter rule. Example: delete rule |
10525 | Adds configuration entry to a table. |
10526 | Adds configuration entry to a table. |
20001 | Must specify at least one subnet |
20002 | Subnets must be specified in dotted decimal notation. INVALID: %1!S! |
20501 | Invalid uuid %1!s! |
20502 | Unknown layer %1!s! |
20503 | Unknown LayerId: |
20504 | Unknown action type %1!s! |
20505 | Unknown action type 0x%1!x! |
20506 | Unknown condition %1!s! |
20507 | Unknown FieldId: |
20508 | Unknown match type %1!s! |
20509 | Unknown field %1!s! |
20510 | Unknown DataType %1!i! |
20511 | Invalid Switch: %1!s! |
20512 | Create a rule and one or more conditions before adding a filter |
20513 | Create a rule before adding a condition |
20514 | Invalid string |
20515 | Deleting filter with filterKey: |
20516 | Deleting all RPC Filters. |
20517 | Listing all RPC Filters. |
20518 | Permit is the only allowed actionType for ep_add filter |
20519 | Delete or add the current rule before adding a new one |
20520 | There is no rule to delete |
20521 | Audit is not allowed at ep_add layer |
20522 | Permit is the only action allowed with audit rules |
20601 | Unknown error returned %1!u! |
20602 | Out of memory |
20603 | Could not access the selective binding registry key for writing |
20604 | The selective binding settings are corrupt |
20605 | %1!S! failed -- %2!lu! (0x%2!08X!) |
20606 | Invalid Ipv6 address %1!s! |
20607 | Invalid Parameter %1!s! |
20608 | Not Implemented |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:InitHelperDll |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _callnewh _except_handler4_common _initterm _vsnprintf _wcsicmp _wtoi atol free malloc memcpy memset printf swscanf wcsrchr - ntdll.dll:
CsrIdentifyAlertableThread WinSqmAddToAverageDWORD - NETSH.EXE:
MatchToken PreprocessCommand PrintError PrintMessage PrintMessageFromModule RegisterContext RegisterHelper - WS2_32.dll:
WSAGetLastError WSAStartup WSAStringToAddressW inet_ntoa inet_pton - ADVAPI32.dll:
ConvertSecurityDescriptorToStringSecurityDescriptorW ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegCreateKeyExA RegDeleteKeyExA RegGetValueA RegOpenKeyExA RegSetValueExA - IPHLPAPI.DLL:
GetIfEntry GetIpAddrTable - KERNEL32.dll:
GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetSystemTimeAsFileTime GetTickCount LocalFree QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter - RPCRT4.dll:
UuidCreateNil UuidCreateSequential UuidEqual UuidIsNil - fwpuclnt.dll:
FwpmEngineClose0 FwpmEngineOpen0 FwpmFilterAdd0 FwpmFilterCreateEnumHandle0 FwpmFilterDeleteByKey0 FwpmFilterDestroyEnumHandle0 FwpmFilterEnum0 FwpmFreeMemory0