Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winipsec.dll Base=0x180000000 SHA-256=4B9E39F6B466DDFCC6CA2D2C131E816B0794784A6AA10A8BC1F563B49254E5EF
PDB: winipsec.pdb GUID={BAA0C2C5-F857-35D2-99DB97BC888683D5} Age=1

338 located named symbols:
0x180012860: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18000C27C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180008AE0: AddTransportFilterEx
0x18000BFF0: "__cdecl FindPESection" _FindPESection
0x180015A60: guFatalExceptions
0x1800045B0: GetMMPolicyByID
0x1800176A4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003130: GetMMPolicy
0x180002EC0: SetMMPolicy
0x180018020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003950: SetMMFilter
0x180015AE8: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180003AF0: GetMMFilter
0x18000BABC: "__cdecl CRT_INIT" _CRT_INIT
0x1800127D0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001410: AddTransportFilter
0x180001030: WppControlCallback
0x18000C510: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180012888: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x1800185F8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUrkhvxhsiUlyquivUznwGEUkivxlnkOlyq@ipsecshr" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUnkhhexUrkhvxUrkhvxhsiUlyquivUznwGEUkivxlnkOlyq@ipsecshr
0x1800012C0: SPDApiBufferAllocate
0x180017604: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006F60: CloseMMFilterHandle
0x18000B3F0: V6AddressesConflictNew
0x180012940: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000B570: ValidateTransportFilterNew
0x180005250: QueryIKENegotiationStatus
0x18000A210: V6AddressesConflict
0x180005250: InitiateIKENegotiation
0x1800128A8: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180009D90: STRING_HANDLE_unbind
0x18000BFD0: "__cdecl XcptFilter" _XcptFilter
0x180012948: "__cdecl _xc_a" __xc_a
0x180005260: CloseIKENotifyHandle
0x1800127B0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000C437: "__cdecl lock" _lock
0x180015AC8: WPP_2c59ae87f65a324776e9bafd7d46823a_Traceguids
0x180012B00: "__cdecl _guard_iat_table" __guard_iat_table
0x18000A350: ValidateTransportFilter
0x180012918: "__cdecl _imp_memset" __imp_memset
0x1800091A0: GetTransportFilterEx
0x180012760: "__cdecl _imp_htonl" __imp_htonl
0x18000B8B0: ApplyMulticastFilterValidationNew
0x18000C1AF: "__cdecl initterm" _initterm
0x180012868: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180009000: SetTransportFilterEx
0x180017668: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800185E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180012820: "__cdecl _imp_Sleep" __imp_Sleep
0x180012970: "__cdecl _xi_z" __xi_z
0x1800185C0: "long g_Mem_lModuleInitCount" ?g_Mem_lModuleInitCount@@3JA
0x180012780: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000BFC4: "__cdecl _C_specific_handler" __C_specific_handler
0x180002830: AddMMPolicy
0x1800013D0: MIDL_user_free
0x180005260: QueryIKENotifyData
0x1800128C0: "__cdecl _imp__onexit" __imp__onexit
0x1800127A8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180003360: AddMMFilter
0x180018628: WPP_REGISTRATION_GUIDS
0x180001BA0: GetTransportFilter
0x180012898: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180007040: OpenTransportFilterHandle
0x180001A00: SetTransportFilter
0x18000C48C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180012708: "__cdecl _imp_RpcSsDestroyClientContext" __imp_RpcSsDestroyClientContext
0x180001210: SPDDestroyClientContextHandle
0x180018600: WPP_MAIN_CB
0x180015A90: WPP_9f64e96ca35c369d7782aec51f44a263_Traceguids
0x18000BFDC: "__cdecl amsg_exit" _amsg_exit
0x180005260: CloseIKENegotiationHandle
0x1800185C4: "class CMemMgr g_IPSecMemoryManager" ?g_IPSecMemoryManager@@3VCMemMgr@@A
0x1800128C8: "__cdecl _imp__lock" __imp__lock
0x180015A80: WPP_ThisDir_CTLGUID_MpsIpsecClient
0x18000B0D0: VerifyV6AddressesNew
0x18000C250: atexit
0x18000B220: VerifyV6SubNetAddress
0x180005AD0: QueryIKEStatistics
0x180012870: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180012790: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180012858: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000A150: VerifyV6Addresses
0x180005260: RegisterIKENotifyClient
0x180008D20: EnumTransportFiltersEx
0x1800127C8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000C44F: "__cdecl _dllonexit" __dllonexit
0x180006A20: MatchTunnelFilter
0x18000B370: bIsValidIPAddress
0x1800185D8: "__cdecl _native_startup_lock" __native_startup_lock
0x1800010C0: DllMain
0x180015AD8: "ipsec" ??_C@_1M@JEONLKOG@?$AAi?$AAp?$AAs?$AAe?$AAc?$AA?$AA@
0x180012910: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180012800: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800127C0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180012768: "__cdecl _imp_ntohl" __imp_ntohl
0x180012778: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180018010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000C468: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180012900: "__cdecl _imp_memcmp" __imp_memcmp
0x1800127D8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000B450: HtoNAddressesConflictNew
0x180009830: OpenTransportFilterHandleEx
0x18000C0A0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180012720: "__cdecl _imp_RpcEpResolveBinding" __imp_RpcEpResolveBinding
0x18000AFC0: VerifyV4AddressesNew
0x180017618: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800092F0: MatchTransportFilterEx
0x1800127A0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180009B00: STRING_HANDLE_bind
0x180012718: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18000BD00: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180009F70: VerifyV4Addresses
0x1800128D0: "__cdecl _imp__initterm" __imp__initterm
0x180012730: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x18000A270: HtoNAddressesConflict
0x180009A60: StringCchPrintfW
0x1800185C8: "__cdecl _onexitend" __onexitend
0x18000C443: "__cdecl unlock" _unlock
0x180012938: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180018630: winipsec_bhandle
0x1800127E0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800049E0: DeleteMMAuthMethods
0x180012840: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180012960: "__cdecl _xi_a" __xi_a
0x18000A980: ValidateTnFilterTemplate
0x180012838: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800128D8: "__cdecl _imp__unlock" __imp__unlock
0x180006130: AddTunnelFilter
0x1800086D0: MatchMMFilterEx
0x180012890: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180005260: AddSAs
0x180018000: WPP_GLOBAL_Control
0x180017654: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180007660: EnumIPSecInterfaces
0x1800011D0: WPP_SF_D
0x1800176E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0
0x1800185F0: "__cdecl pRawDllMain" _pRawDllMain
0x180012710: "__cdecl _imp_RpcRaiseException" __imp_RpcRaiseException
0x1800128B8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180015A10: "Security=Impersonation Dynamic F" ??_C@_1EK@JJEDDIEE@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$DN?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AA?5?$AAF@
0x180001650: DeleteTransportFilter
0x1800176F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180006D30: OpenMMFilterHandle
0x18000BFA0: "__cdecl _security_check_cookie" __security_check_cookie
0x180012958: "__cdecl _xc_z" __xc_z
0x1800127E8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180007270: CloseTransportFilterHandle
0x180009E00: ValidateMMFilter
0x180001F20: DeleteQMPolicy
0x180007580: CloseTunnelFilterHandle
0x180015AF8: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x180009600: OpenMMFilterHandleEx
0x180012830: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180012798: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800176CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x180015B28: "PolicyAgent" ??_C@_1BI@PKNNGCIA@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAA?$AAg?$AAe?$AAn?$AAt?$AA?$AA@
0x18000ACD0: ValidateMMAuthMethods
0x180012818: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180007CC0: QuerySpdPolicyState
0x180012750: "__cdecl _imp_RpcBindingSetOption" __imp_RpcBindingSetOption
0x18001767C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800128A0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1800127F8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180012978: "__cdecl _guard_fids_table" __guard_fids_table
0x1800013D0: IpsecFreeMem
0x180012920: msvcrt_NULL_THUNK_DATA
0x180005CC0: QueryIPSecStatistics
0x180007350: OpenTunnelFilterHandle
0x180012600: "__cdecl load_config_used" _load_config_used
0x18000A720: ValidateTunnelFilter
0x1800013D0: SPDApiBufferFree
0x180008100: EnumMMFiltersEx
0x180002A60: DeleteMMPolicy
0x180012738: "__cdecl _imp_RpcBindingSetAuthInfoW" __imp_RpcBindingSetAuthInfoW
0x1800035A0: DeleteMMFilter
0x18000B1B0: VerifySubNetAddress
0x180012740: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x1800128E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180015AA0: "This function is not implemented" ??_C@_0CC@HMPGGJAO@This?5function?5is?5not?5implemented@
0x18000B750: ValidateTxFilterTemplateNew
0x1800127B8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800068D0: GetTunnelFilter
0x180012808: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006370: DeleteTunnelFilter
0x1800127F0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180007B00: GetConfigurationVariables
0x180006730: SetTunnelFilter
0x180007900: SetConfigurationVariables
0x180005EB0: EnumQMSAs
0x180005290: EnumMMSAs
0x180015B10: "host//%s." ??_C@_1BE@POBCMCNE@?$AAh?$AAo?$AAs?$AAt?$AA?1?$AA?1?$AA?$CF?$AAs?$AA?4?$AA?$AA@
0x180012728: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180012810: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000AB80: ValidateQMFilterAddresses
0x180009DB0: MIDL_user_allocate
0x18000C270: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000C4ED: memcmp
0x180005030: GetMMAuthMethods
0x180004E10: SetMMAuthMethods
0x180006450: EnumTunnelFilters
0x180004370: GetQMPolicyByID
0x1800025F0: GetQMPolicy
0x180012878: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000AEA0: ValidateMMFilterNew
0x180002380: SetQMPolicy
0x1800128F0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004BA0: EnumMMAuthMethods
0x180012930: ntdll_NULL_THUNK_DATA
0x1800176B8: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x180007EC0: AddMMFilterEx
0x180012850: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180012848: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180018018: "__cdecl _security_cookie" __security_cookie
0x180001730: EnumTransportFilters
0x180012770: WS2_32_NULL_THUNK_DATA
0x1800055F0: DeleteMMSAs
0x180017690: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800185D0: "__cdecl _onexitbegin" __onexitbegin
0x1800128F8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180012928: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x180012788: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000C0D4: "__cdecl _security_init_cookie" __security_init_cookie
0x180003C40: MatchMMFilter
0x1800175DC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A5A0: ValidateTxFilterTemplate
0x180012908: "__cdecl _imp_malloc" __imp_malloc
0x1800175F0: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000A560: VerifyPortsForProtocol
0x180002C50: EnumMMPolicies
0x180002110: EnumQMPolicies
0x180004060: MatchTransportFilter
0x180005870: DeleteQMSAs
0x180012758: RPCRT4_NULL_THUNK_DATA
0x180001290: I_RpcExceptionFilter
0x18000C2C0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000C1BC: "__cdecl onexit" _onexit
0x1800128B0: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA
0x1800185E0: "__cdecl _native_startup_state" __native_startup_state
0x1800047D0: AddMMAuthMethods
0x180012880: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180012748: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180001CF0: AddQMPolicy
0x180003680: EnumMMFilters
0x180017640: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180008580: GetMMFilterEx
0x1800128E0: "__cdecl _imp_free" __imp_free
0x18000C040: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180012828: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800083E0: SetMMFilterEx
0x18001762C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000B900: StartPolicyAgentSvcIfNeeded
0x18000C4F9: memset
0x180017708: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]