IPSECSVC.DLL

Description: Windows IPsec SPD Server DLL

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 829b1f354414eaad06f44f384d48175a

File Size: 452.5 KB

Uploaded At: Dec. 1, 2025, 7:29 a.m.

Views: 7

Exported Functions

SpdServiceMain (Ordinal: 1, Address: 0x5a30)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800603c0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800603d0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800603f0)
SetUnhandledExceptionFilter (Address: 0x1800603e8)
UnhandledExceptionFilter (Address: 0x1800603e0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180060400)
SetHandleInformation (Address: 0x180060408)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180060420)
HeapAlloc (Address: 0x180060428)
HeapFree (Address: 0x180060418)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x180060438)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleHandleW (Address: 0x180060448)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180060458)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180060488)
GetCurrentProcessId (Address: 0x180060470)
GetCurrentThreadId (Address: 0x180060468)
OpenProcessToken (Address: 0x180060480)
TerminateProcess (Address: 0x180060478)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180060498)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800604c0)
RegCreateKeyExW (Address: 0x1800604e0)
RegDeleteKeyExW (Address: 0x1800604d8)
RegDeleteValueW (Address: 0x1800604c8)
RegEnumKeyExW (Address: 0x1800604b8)
RegOpenKeyExW (Address: 0x1800604b0)
RegQueryValueExW (Address: 0x1800604a8)
RegSetValueExW (Address: 0x1800604d0)

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte (Address: 0x1800604f0)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180060520)
DeleteCriticalSection (Address: 0x180060538)
EnterCriticalSection (Address: 0x180060510)
InitializeCriticalSectionAndSpinCount (Address: 0x180060528)
LeaveCriticalSection (Address: 0x180060530)
ResetEvent (Address: 0x180060500)
SetEvent (Address: 0x180060508)
WaitForMultipleObjectsEx (Address: 0x180060518)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180060548)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180060558)
GetTickCount (Address: 0x180060560)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x180060580)
AddAccessDeniedAce (Address: 0x1800605d8)
AdjustTokenPrivileges (Address: 0x180060598)
AllocateAndInitializeSid (Address: 0x180060578)
FreeSid (Address: 0x1800605c0)
GetAce (Address: 0x180060570)
GetLengthSid (Address: 0x1800605c8)
GetSecurityDescriptorLength (Address: 0x1800605b8)
InitializeAcl (Address: 0x1800605a8)
InitializeSecurityDescriptor (Address: 0x1800605b0)
MakeSelfRelativeSD (Address: 0x1800605d0)
SetSecurityDescriptorDacl (Address: 0x1800605a0)
SetSecurityDescriptorGroup (Address: 0x180060590)
SetSecurityDescriptorOwner (Address: 0x180060588)

api-ms-win-security-grouppolicy-l1-1-0.dll

FreeGPOListInternalW (Address: 0x1800605e8)
GetGPOListInternalW (Address: 0x1800605f0)
RefreshPolicyInternal (Address: 0x1800605f8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180060608)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180060620)
SetServiceStatus (Address: 0x180060618)

AUTHZ.dll

AuthzAccessCheck (Address: 0x1800602a8)
AuthzFreeAuditEvent (Address: 0x1800602b8)
AuthziFreeAuditEventType (Address: 0x1800602a0)
AuthziInitializeAuditEvent (Address: 0x180060298)
AuthziInitializeAuditEventType (Address: 0x180060288)
AuthziInitializeAuditParams (Address: 0x180060290)
AuthziLogAuditEvent (Address: 0x1800602b0)

FirewallAPI.dll

FWChangeNotificationCreate (Address: 0x1800602d8)
FWChangeNotificationDestroy (Address: 0x1800602d0)
FwIsRemoteManagementEnabled (Address: 0x1800602c8)

fwpuclnt.dll

FwpmEngineClose0 (Address: 0x180060648)
FwpmEngineOpen0 (Address: 0x180060678)
FwpmFilterAdd0 (Address: 0x180060638)
FwpmFilterDeleteByKey0 (Address: 0x1800606e8)
FwpmFreeMemory0 (Address: 0x180060658)
FwpmIPsecTunnelAdd0 (Address: 0x1800606f8)
FwpmIPsecTunnelDeleteByKey0 (Address: 0x1800606c0)
FwpmProviderAdd0 (Address: 0x1800606a0)
FwpmProviderContextAdd0 (Address: 0x180060700)
FwpmProviderContextDeleteByKey0 (Address: 0x1800606e0)
FwpmTransactionAbort0 (Address: 0x1800606d0)
FwpmTransactionBegin0 (Address: 0x1800606f0)
FwpmTransactionCommit0 (Address: 0x1800606b0)
IkeextGetConfigParameters0 (Address: 0x1800606a8)
IkeextGetStatistics0 (Address: 0x180060670)
IkeextSaCreateEnumHandle0 (Address: 0x180060630)
IkeextSaDeleteById0 (Address: 0x180060690)
IkeextSaDestroyEnumHandle0 (Address: 0x180060688)
IkeextSaEnum0 (Address: 0x1800606b8)
IkeextSetConfigParameters0 (Address: 0x1800606d8)
IPsecGetStatistics0 (Address: 0x1800606c8)
IPsecSaContextCreateEnumHandle0 (Address: 0x180060698)
IPsecSaContextDeleteById0 (Address: 0x180060680)
IPsecSaContextEnum0 (Address: 0x180060668)
IPsecSaCreateEnumHandle0 (Address: 0x180060640)
IPsecSaDestroyEnumHandle0 (Address: 0x180060650)
IPsecSaEnum0 (Address: 0x180060660)

FwRemoteSvr.DLL

FwRpcAPIsInitialize (Address: 0x1800602e8)
FwRpcAPIsShutdown (Address: 0x1800602f0)

msvcrt.dll

__C_specific_handler (Address: 0x180060740)
__dllonexit (Address: 0x180060778)
_amsg_exit (Address: 0x180060768)
_initterm (Address: 0x180060748)
_lock (Address: 0x180060738)
_mkgmtime (Address: 0x180060728)
_onexit (Address: 0x180060780)
_snwscanf_s (Address: 0x180060730)
_unlock (Address: 0x180060758)
_vsnwprintf (Address: 0x180060798)
_wcsicmp (Address: 0x1800607a0)
_wtol (Address: 0x180060710)
_XcptFilter (Address: 0x180060770)
free (Address: 0x180060760)
malloc (Address: 0x180060750)
memcmp (Address: 0x180060790)
memcpy (Address: 0x180060788)
memset (Address: 0x1800607a8)
wcschr (Address: 0x180060720)
wcsstr (Address: 0x180060718)

ntdll.dll

EtwEventRegister (Address: 0x1800607d0)
EtwEventUnregister (Address: 0x180060818)
EtwEventWrite (Address: 0x1800607d8)
EtwGetTraceEnableFlags (Address: 0x1800607f0)
EtwGetTraceEnableLevel (Address: 0x180060800)
EtwGetTraceLoggerHandle (Address: 0x1800607f8)
EtwRegisterTraceGuidsW (Address: 0x180060808)
EtwTraceMessage (Address: 0x180060810)
EtwUnregisterTraceGuids (Address: 0x1800607e8)
RtlCaptureContext (Address: 0x1800607c0)
RtlLookupFunctionEntry (Address: 0x1800607b8)
RtlVirtualUnwind (Address: 0x1800607e0)
WinSqmSetDWORD (Address: 0x1800607c8)

RPCRT4.dll

I_RpcBindingIsClientLocal (Address: 0x180060360)
NdrServerCall2 (Address: 0x180060370)
NdrServerCallAll (Address: 0x180060368)
RpcBindingInqAuthClientW (Address: 0x180060378)
RpcBindingToStringBindingW (Address: 0x180060348)
RpcBindingVectorFree (Address: 0x180060310)
RpcEpRegisterW (Address: 0x180060388)
RpcEpUnregister (Address: 0x180060398)
RpcFreeAuthorizationContext (Address: 0x180060308)
RpcGetAuthorizationContextForClient (Address: 0x180060350)
RpcImpersonateClient (Address: 0x180060340)
RpcRevertToSelf (Address: 0x180060338)
RpcServerInqBindings (Address: 0x180060380)
RpcServerInqDefaultPrincNameW (Address: 0x180060390)
RpcServerRegisterAuthInfoW (Address: 0x1800603a0)
RpcServerRegisterIfEx (Address: 0x1800603a8)
RpcServerUnregisterIfEx (Address: 0x1800603b0)
RpcServerUseProtseqEpW (Address: 0x180060318)
RpcServerUseProtseqW (Address: 0x180060328)
RpcStringBindingParseW (Address: 0x180060320)
RpcStringFreeW (Address: 0x180060358)
UuidCreate (Address: 0x180060330)
UuidIsNil (Address: 0x180060300)