FwRemoteSvr.dll

Description: Windows Defender Firewall Remote APIs Server

Version: 10.0.19041.6328

Architecture: 32-bit

Operating System: Windows NT

SHA256: fce6f84c7f8b767532651918f8ede490

File Size: 59.0 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 6

Exported Functions

FwRpcAPIsInitialize (Ordinal: 1, Address: 0x5560)
FwRpcAPIsShutdown (Ordinal: 2, Address: 0x5670)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1000e104)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1000e10c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1000e118)
SetUnhandledExceptionFilter (Address: 0x1000e11c)
UnhandledExceptionFilter (Address: 0x1000e114)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1000e124)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1000e12c)
GetCurrentProcessId (Address: 0x1000e140)
GetCurrentThread (Address: 0x1000e138)
GetCurrentThreadId (Address: 0x1000e13c)
OpenThreadToken (Address: 0x1000e134)
TerminateProcess (Address: 0x1000e130)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1000e148)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1000e150)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1000e15c)
GetTickCount (Address: 0x1000e158)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x1000e164)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x1000e16c)

FirewallAPI.dll

FWAddAuthenticationSet (Address: 0x1000e084)
FWAddConnectionSecurityRule (Address: 0x1000e024)
FWAddCryptoSet (Address: 0x1000e09c)
FWAddFirewallRule (Address: 0x1000e070)
FWAddMainModeRule (Address: 0x1000e00c)
FWClosePolicyStore (Address: 0x1000e028)
FWDeleteAllAuthenticationSets (Address: 0x1000e090)
FWDeleteAllConnectionSecurityRules (Address: 0x1000e018)
FWDeleteAllCryptoSets (Address: 0x1000e0ac)
FWDeleteAllFirewallRules (Address: 0x1000e074)
FWDeleteAllMainModeRules (Address: 0x1000e000)
FWDeleteAuthenticationSet (Address: 0x1000e088)
FWDeleteConnectionSecurityRule (Address: 0x1000e01c)
FWDeleteCryptoSet (Address: 0x1000e0b0)
FWDeleteFirewallRule (Address: 0x1000e078)
FWDeleteMainModeRule (Address: 0x1000e004)
FWDeletePhase1SAs (Address: 0x1000e014)
FWDeletePhase2SAs (Address: 0x1000e010)
FWEnumAdapters (Address: 0x1000e030)
FWEnumAuthenticationSets (Address: 0x1000e094)
FWEnumConnectionSecurityRules (Address: 0x1000e0b4)
FWEnumCryptoSets (Address: 0x1000e0a8)
FWEnumFirewallRules (Address: 0x1000e07c)
FWEnumMainModeRules (Address: 0x1000e098)
FWEnumNetworks (Address: 0x1000e034)
FWEnumPhase1SAs (Address: 0x1000e0a4)
FWEnumPhase2SAs (Address: 0x1000e048)
FWEnumProducts (Address: 0x1000e058)
FWGetConfig (Address: 0x1000e068)
FWGetConfig2 (Address: 0x1000e064)
FWGetGlobalConfig (Address: 0x1000e054)
FWGetGlobalConfig2 (Address: 0x1000e050)
FWOpenPolicyStore (Address: 0x1000e02c)
FWQueryAuthenticationSets (Address: 0x1000e03c)
FWQueryConnectionSecurityRules (Address: 0x1000e044)
FWQueryCryptoSets (Address: 0x1000e038)
FWQueryFirewallRules (Address: 0x1000e060)
FWQueryMainModeRules (Address: 0x1000e040)
FWRestoreDefaults (Address: 0x1000e080)
FWSetAuthenticationSet (Address: 0x1000e08c)
FWSetConfig (Address: 0x1000e05c)
FWSetConnectionSecurityRule (Address: 0x1000e020)
FWSetCryptoSet (Address: 0x1000e0a0)
FWSetFirewallRule (Address: 0x1000e06c)
FWSetGlobalConfig (Address: 0x1000e04c)
FWSetMainModeRule (Address: 0x1000e008)

fwbase.dll

FwAlloc (Address: 0x1000e184)
FwCloseHandle (Address: 0x1000e174)
FwFree (Address: 0x1000e180)
FwHResultToWindowsError (Address: 0x1000e188)
FwSizeTMultiply (Address: 0x1000e17c)
FwStringCopy (Address: 0x1000e178)

msvcrt.dll

_amsg_exit (Address: 0x1000e1a8)
_except_handler4_common (Address: 0x1000e190)
_initterm (Address: 0x1000e19c)
_XcptFilter (Address: 0x1000e194)
free (Address: 0x1000e1a4)
malloc (Address: 0x1000e1a0)
memset (Address: 0x1000e198)

RPCRT4.dll

I_RpcBindingIsClientLocal (Address: 0x1000e0ec)
NdrServerCall2 (Address: 0x1000e0c4)
RpcBindingInqAuthClientW (Address: 0x1000e0e0)
RpcBindingToStringBindingW (Address: 0x1000e0e8)
RpcBindingVectorFree (Address: 0x1000e0f4)
RpcEpRegisterW (Address: 0x1000e0fc)
RpcEpUnregister (Address: 0x1000e0f8)
RpcImpersonateClient (Address: 0x1000e0bc)
RpcRevertToSelf (Address: 0x1000e0c0)
RpcServerInqBindings (Address: 0x1000e0dc)
RpcServerInqDefaultPrincNameW (Address: 0x1000e0c8)
RpcServerRegisterAuthInfoW (Address: 0x1000e0cc)
RpcServerRegisterIf3 (Address: 0x1000e0d8)
RpcServerUnregisterIfEx (Address: 0x1000e0f0)
RpcServerUseProtseqW (Address: 0x1000e0d4)
RpcStringBindingParseW (Address: 0x1000e0e4)
RpcStringFreeW (Address: 0x1000e0d0)