Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\ipfltdrv.sys Base=0x1C0000000 SHA-256=04C6CD091ACED90A2905A6CE13E62BC6116F1E999316D49B352BB389B2848378
PDB: ipfltdrv.pdb GUID={924CAE56-3B59-DF74-06C9D597FE838F5E} Age=1
438 located named symbols:
0x1C0002640: IpfOutboundIpV6ClassifyCallout
0x1C00102D0: "RRAS IP Filter Driver" ??_C@_1CM@CLBFLCIA@?$AAR?$AAR?$AAA?$AAS?$AA?5?$AAI?$AAP?$AA?5?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x1C001B8E0: IsOnSpecialFilterList
0x1C000CFE0: WppClassicProviderCallback
0x1C000DA50: WPP_SF_dddddddddddddddddddddd
0x1C001BECC: NewInterface
0x1C000D444: UpdateBindingInformationEx
0x1C001C820: DeleteByHandle
0x1C0005E8C: SetInterfaceBinding2
0x1C000441C: DereferenceFilterInterface
0x1C000628C: NotifyFastPathIf
0x1C0002380: IpfForwardIpClassifyCallout
0x1C000CE08: ValidateHeader
0x1C0010640: "Used by IP filter driver" ??_C@_1DC@HMFGHDGI@?$AAU?$AAs?$AAe?$AAd?$AA?5?$AAb?$AAy?$AA?5?$AAI?$AAP?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x1C0004EAC: ClearAnyCacheEntry
0x1C000D158: DeleteFilterList
0x1C00120F8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C001C5E0: WppTraceCallback
0x1C0019000: "__cdecl _imp_NdisGetDataBuffer" __imp_NdisGetDataBuffer
0x1C0016AD0: g_FcbSpin
0x1C0010438: "Parameters" ??_C@_1BG@PGIGMDPA@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C00125DC: g_dwHashLists
0x1C0016AB0: g_bDriverRunning
0x1C00190D8: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C0019270: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0007B20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00106D0: "Local send V6 filter driver filt" ??_C@_1EG@PBOBLNFK@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAs?$AAe?$AAn?$AAd?$AA?5?$AAV?$AA6?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt@
0x1C00010D0: MatchFilterp
0x1C000D5A4: UpdateLateBoundFilter
0x1C0016AC0: g_freeOutFiltersV6
0x1C001BD9C: DoIpIoctl
0x1C0019230: "__cdecl _imp_RtlGetNextEntryHashTable" __imp_RtlGetNextEntryHashTable
0x1C0019218: "__cdecl _imp_RtlInsertEntryHashTable" __imp_RtlInsertEntryHashTable
0x1C0019090: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C0017300: g_llFragCacheBlocksV6
0x1C0002EB0: IpfRegisterCallouts
0x1C000D2E8: GetSynCountTotal
0x1C0019160: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C00190F0: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C00191D8: "__cdecl _imp_SeQueryInformationToken" __imp_SeQueryInformationToken
0x1C0012124: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUiizhUrkUuoghsrnUlyquivUznwGEUkivxlnkOlyq@ipfltshim" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUiizhUrkUuoghsrnUlyquivUznwGEUkivxlnkOlyq@ipfltshim
0x1C000EF24: MonitorIoDispatch
0x1C0010908: "IpfRegisterCallout" ??_C@_0BD@NCIMKACH@IpfRegisterCallout?$AA@
0x1C0002F34: IpfRegisterCallout
0x1C0005810: ClearFragCache
0x1C00125D8: g_dwNumFragsAllocsV6
0x1C00103C0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0019118: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C000E284: FragCacheV6Update
0x1C0019038: "__cdecl _imp_NdisWaitEvent" __imp_NdisWaitEvent
0x1C0019260: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0016B00: FilterAddressLock
0x1C000D364: RemoveFilterWorker
0x1C0019200: "__cdecl _imp_IoQueueWorkItemEx" __imp_IoQueueWorkItemEx
0x1C00121C0: g_IpTableLock
0x1C0004FF0: TraceFilterDescription
0x1C0019350: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00192D8: "__cdecl _imp_ExDeletePagedLookasideList" __imp_ExDeletePagedLookasideList
0x1C000F300: TimerNotificationCallback
0x1C0019060: "__cdecl _imp_NdisInitializeReadWriteLock" __imp_NdisInitializeReadWriteLock
0x1C0010978: "IpfRegisterFilters" ??_C@_0BD@NMKAFMEB@IpfRegisterFilters?$AA@
0x1C0019210: "__cdecl _imp_IoCsqRemoveNextIrp" __imp_IoCsqRemoveNextIrp
0x1C00190E0: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000F600: CsqReleaseLock
0x1C0019040: "__cdecl _imp_NdisInitializeEvent" __imp_NdisInitializeEvent
0x1C0019198: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C001C908: UnSetFiltersEx
0x1C0010420: "DosDevices" ??_C@_1BG@NKCPFBJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1C0017400: gPfV6HookFn
0x1C0017408: gPfV4HookFn
0x1C0006664: LocalIpLook
0x1C000F418: UninitializeMonitoring
0x1C0017280: paged_slist
0x1C00192C0: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C001D3F0: PFReadRegistryParameters
0x1C00192E8: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C000EA20: DereferenceRefCount
0x1C000DC5C: CheckFilterAddress
0x1C000F650: AdvanceLocalBuffer
0x1C0010870: "FragmentThreshold" ??_C@_1CE@JOMEIOLM@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x1C000D1D0: FindAndRemovePagedFilter
0x1C00102B8: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0003380: InitFragCacheParameters
0x1C0007B40: memcpy
0x1C00108A8: "DROP" ??_C@_04DENHKGOL@DROP?$AA@
0x1C00062FC: GetIpStackIndex
0x1C00192C8: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C00191F0: "__cdecl _imp_RtlRemoveEntryHashTable" __imp_RtlRemoveEntryHashTable
0x1C0006CB0: AllocateCacheStructures
0x1C0019318: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0016C70: pfnWppGetVersion
0x1C000EEAC: InitializeIrpQueue
0x1C00078BD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0016C20: g_ktTimer
0x1C0007B40: memmove
0x1C00035C0: FilterDriverDispatch
0x1C001BCF4: MakePagedFilter
0x1C0019300: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0019208: "__cdecl _imp_IoCsqInitialize" __imp_IoCsqInitialize
0x1C00107C0: "Local send filter driver filter" ??_C@_1EA@ODHIPNPA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAs?$AAe?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0019048: "__cdecl _imp_NdisSetTimer" __imp_NdisSetTimer
0x1C000793C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0004BC8: ExFreeToPagedLookasideList
0x1C0019050: "__cdecl _imp_NdisResetEvent" __imp_NdisResetEvent
0x1C00108D8: "NetioRetreatNetBuffer" ??_C@_0BG@EEHKBFHC@NetioRetreatNetBuffer?$AA@
0x1C00190C8: fwpkclnt_NULL_THUNK_DATA
0x1C0019068: NDIS_NULL_THUNK_DATA
0x1C000F1C0: ReturnInnerFlowInfo
0x1C0004AE8: FreePagedFilterList
0x1C000E808: WPP_SF_ssdDDDs
0x1C00075A8: FilterDriverLookupInterface
0x1C00125E0: WPP_MAIN_CB
0x1C00192A8: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C0012660: g_filters
0x1C00108B8: "FORWARDED" ??_C@_09PGOEABI@FORWARDED?$AA@
0x1C000F5D0: CsqPeekNextIrp
0x1C000E958: ActivateMonitoringSession
0x1C0010680: "Forward V6 packet filter driver " ??_C@_1EO@KNBLMFND@?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAV?$AA6?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5@
0x1C0010610: "\Device\IPFILTERDRIVER" ??_C@_1CO@DHHPKOOH@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAI?$AAP?$AAF?$AAI?$AAL?$AAT?$AAE?$AAR?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
0x1C00026A0: IpfInboundIpV6ClassifyCallout
0x1C00190A0: "__cdecl _imp_FwpiCalloutUnregisterAndDeleteByKey0" __imp_FwpiCalloutUnregisterAndDeleteByKey0
0x1C0019128: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C0010518: WPP_04e9592f70c43c37576e429d9a304392_Traceguids
0x1C00190E8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00192E0: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C0016C80: pfnWppQueryTraceInformation
0x1C0010400: "IPFILTERDRIVER" ??_C@_1BO@PJCPPJKN@?$AAI?$AAP?$AAF?$AAI?$AAL?$AAT?$AAE?$AAR?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
0x1C0016B88: g_dwMakingNewTable
0x1C0016AA0: g_ulBoundInterfaceCount
0x1C0012630: g_freeInFilters
0x1C000F8A4: WfpReportSysErrorAsNtStatus
0x1C00121A8: g_dwCacheSize
0x1C0019010: "__cdecl _imp_NdisRetreatNetBufferDataStart" __imp_NdisRetreatNetBufferDataStart
0x1C00079A4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C0019338: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C001B8FC: DeletePagedInterface
0x1C0019020: "__cdecl _imp_NdisCancelTimer" __imp_NdisCancelTimer
0x1C00191A8: "__cdecl _imp_RtlQueryRegistryValuesEx" __imp_RtlQueryRegistryValuesEx
0x1C00192D0: "__cdecl _imp_ExFreePool" __imp_ExFreePool
0x1C0019148: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0019188: "__cdecl _imp_KeReleaseSpinLockFromDpcLevel" __imp_KeReleaseSpinLockFromDpcLevel
0x1C0010538: "RaMgmtSvc\Parameters" ??_C@_1CK@KNBOEEEE@?$AAR?$AAa?$AAM?$AAg?$AAm?$AAt?$AAS?$AAv?$AAc?$AA?2?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C0010850: "AddressHashSize" ??_C@_1CA@PIKPJPDP@?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AAH?$AAa?$AAs?$AAh?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C00191D0: "__cdecl _imp_RtlCreateHashTable" __imp_RtlCreateHashTable
0x1C0007918: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0019070: "__cdecl _imp_NetioAllocateMdl" __imp_NetioAllocateMdl
0x1C00103E0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0012140: FilterListResourceLock
0x1C0010590: "IpfGetIpPacketBuffer" ??_C@_0BF@PPAKFFLD@IpfGetIpPacketBuffer?$AA@
0x1C0010528: WPP_8a411ff1ff52386dca8361edda5889e7_Traceguids
0x1C0019158: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C0019220: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C00104C8: "FragmentLifetime" ??_C@_1CC@OGFOPENH@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AA?$AA@
0x1C00192A0: "__cdecl _imp_ZwCreateFile" __imp_ZwCreateFile
0x1C000F530: CsqAcquireLock
0x1C001BCB0: IsOnPagedInterface
0x1C0004FCC: WildFilter
0x1C0012120: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUmvgrlUdukUyzhvUpvimvoUlyquivUznwGEUkivxlnkOlyq@km_base" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUmvgrlUdukUyzhvUpvimvoUlyquivUznwGEUkivxlnkOlyq@km_base
0x1C0016C60: pfnEtwRegisterClassicProvider
0x1C0019394: "__cdecl _IMPORT_DESCRIPTOR_NETIO" __IMPORT_DESCRIPTOR_NETIO
0x1C000ED78: IfdHashtableDestroy
0x1C0019008: "__cdecl _imp_NdisAdvanceNetBufferDataStart" __imp_NdisAdvanceNetBufferDataStart
0x1C000F6D4: IpfDeregisterFilters
0x1C00192F0: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C0010568: "MaxSkipPacketCount" ??_C@_1CG@OEEONKNJ@?$AAM?$AAa?$AAx?$AAS?$AAk?$AAi?$AAp?$AAP?$AAa?$AAc?$AAk?$AAe?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1C0010720: "Local receive V6 filter driver f" ??_C@_1EM@EIBHANBM@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAr?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AA?5?$AAV?$AA6?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAf@
0x1C000669C: ClearV6FragCache
0x1C00190B0: "__cdecl _imp_FwpiCalloutRegisterAndAddWithoutDevice0" __imp_FwpiCalloutRegisterAndAddWithoutDevice0
0x1C0010300: "\Device\Tcp" ??_C@_1BI@NIJLNOJP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAT?$AAc?$AAp?$AA?$AA@
0x1C0010328: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C000CE7C: WPP_SF_
0x1C00190C0: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C00190B8: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C0016C88: pfnEtwUnregister
0x1C0016AE0: g_freeOutFilters
0x1C0019028: "__cdecl _imp_NdisInitializeTimer" __imp_NdisInitializeTimer
0x1C000E048: FragCacheUpdate
0x1C0019380: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C0005078: InitFilterDriver
0x1C0010770: "Forward packet filter driver fil" ??_C@_1EI@FMHGJBOJ@?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl@
0x1C0005958: MakeFilterInfo
0x1C0016B80: g_lInFilterLockV6
0x1C000D1A4: DeleteFilters
0x1C0016BB8: g_pleFragTableV6
0x1C0004F84: ComputeMatchHashIndex
0x1C00192B8: "__cdecl _imp_ZwDeviceIoControlFile" __imp_ZwDeviceIoControlFile
0x1C001D010: GsDriverEntry
0x1C0019348: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0010894: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C00192B0: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C0010938: "FwpmTransactionBegin0" ??_C@_0BG@GOMHJOIK@FwpmTransactionBegin0?$AA@
0x1C0019298: "__cdecl _imp_KeSetTimerEx" __imp_KeSetTimerEx
0x1C000DCE8: ClearCacheEntry
0x1C0004E60: ExFreeToNPagedLookasideList
0x1C0001DD0: IpfInboundIpClassifyCallout
0x1C00104F0: "FragmentCacheSize" ??_C@_1CE@EAJKPKAE@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAC?$AAa?$AAc?$AAh?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C0002C00: NetioAdvanceNetBuffer
0x1C001B8BC: FindInterfaceOnHandle
0x1C000C5B0: FilterDriverUnload
0x1C00078D0: WppIsEqualGuid
0x1C00191F8: "__cdecl _imp_RtlInitEnumerationHashTable" __imp_RtlInitEnumerationHashTable
0x1C000E554: WPP_SF_DD
0x1C000D900: WPP_SF_dddddddddddddddddd
0x1C0019018: "__cdecl _imp_NdisReleaseReadWriteLock" __imp_NdisReleaseReadWriteLock
0x1C0012000: WPP_GLOBAL_Control
0x1C0019100: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0016B98: g_lInFilterLock
0x1C0010318: WPP_ThisDir_CTLGUID_CtlGuid
0x1C000CEA8: WPP_SF_D
0x1C000CEA8: WPP_SF_d
0x1C0010950: "FwpmFilterAdd0" ??_C@_0P@BMOPMBJG@FwpmFilterAdd0?$AA@
0x1C0012640: g_freeInFiltersV6
0x1C00192E0: MmUserProbeAddress
0x1C0019280: "__cdecl _imp_ExInitializePagedLookasideList" __imp_ExInitializePagedLookasideList
0x1C00108F0: "FwpmRegisterCallout0" ??_C@_0BF@CIIGNKCO@FwpmRegisterCallout0?$AA@
0x1C0007880: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0019088: "__cdecl _imp_FwpmTransactionCommit0" __imp_FwpmTransactionCommit0
0x1C0001CA8: LookForFilter
0x1C0019178: "__cdecl _imp_ExInterlockedInsertTailList" __imp_ExInterlockedInsertTailList
0x1C0019358: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000D014: ClearInterfaceBinding
0x1C0001D98: FiltHit
0x1C000ECC0: IfdFreeHashTable
0x1C0016AF8: g_dwNumHitsDefaultOut
0x1C000DBE8: WPP_SF_qddd
0x1C000E668: WPP_SF_qqDs
0x1C0019150: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C0019180: "__cdecl _imp_KeAcquireSpinLockAtDpcLevel" __imp_KeAcquireSpinLockAtDpcLevel
0x1C000C554: FcbLockDown
0x1C0016BC0: AddrSubnetHashTable
0x1C001C558: WppCleanupKm
0x1C00191E8: "__cdecl _imp_RtlValidSecurityDescriptor" __imp_RtlValidSecurityDescriptor
0x1C0002D14: IpfRegisterFilters
0x1C0004CC4: DereferenceFilter
0x1C001E000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0019248: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C0019278: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C0016BA0: g_kslFragLock
0x1C00101B0: "__cdecl load_config_used" _load_config_used
0x1C0016BB0: g_lOutFilterLock
0x1C001B9B0: AllocateAndAddFilterToMatchInterface
0x1C0001010: MatchFilter
0x1C000EDF4: IfdHashtableIteratorGetNext
0x1C0019130: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0019268: "__cdecl _imp_RtlDeleteHashTable" __imp_RtlDeleteHashTable
0x1C0010990: WPP_ac6905453a70312829e4e7bde9bb830f_Traceguids
0x1C0016BA8: g_pleFragTable
0x1C00045E0: AddFilterToInterface
0x1C0019250: "__cdecl _imp_SeLockSubjectContext" __imp_SeLockSubjectContext
0x1C0005918: ExAllocateFromNPagedLookasideList
0x1C00191E0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0010388: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004270: LockFcb
0x1C00071BC: SetupExternalNaming
0x1C0019238: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x1C000CCB4: TearDownExternalNaming
0x1C0010330: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000D860: WPP_SF_DDs
0x1C0010960: "FwpmTransactionCommit0" ??_C@_0BH@EMAFMIA@FwpmTransactionCommit0?$AA@
0x1C000CC1C: MatchLocalLook
0x1C0019288: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C0005C60: CreateCommonInterface
0x1C0004360: AddGlobalFilterToInterface
0x1C0007900: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0007A40: memcmp
0x1C00191B0: "__cdecl _imp_RtlEnumerateEntryHashTable" __imp_RtlEnumerateEntryHashTable
0x1C00191B8: "__cdecl _imp_RtlContractHashTable" __imp_RtlContractHashTable
0x1C00072F0: SetupAclOnDevice
0x1C000C178: CloseFilterDriver
0x1C000DCA4: CheckForTcpCtl
0x1C0004194: UnLockFcb
0x1C0019170: "__cdecl _imp_RtlIpv4AddressToStringA" __imp_RtlIpv4AddressToStringA
0x1C001C0D8: WppLoadTracingSupport
0x1C0019110: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0010460: FWPM_LAYER_INBOUND_IPPACKET_V6
0x1C00075F0: FragCacheTimerRoutine
0x1C0004C1C: RemoveGlobalFilterFromInterface
0x1C001B080: PfFastIoDeviceControl
0x1C0019320: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C00192F8: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C000EAE4: IfdAddToHashTable
0x1C00108B0: "DROPPED" ??_C@_07GMBEKJOF@DROPPED?$AA@
0x1C0016AA8: g_kslFragLockV6
0x1C0016AB4: g_dwFragTableSize
0x1C000E5AC: WPP_SF_DDD
0x1C000D78C: WPP_SF_DDd
0x1C000CEEC: WPP_SF_ddd
0x1C000E3B0: LookForV6Filter
0x1C0019328: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C00125D0: g_lOutFilterLockV6
0x1C0019240: "__cdecl _imp_IoCsqInsertIrp" __imp_IoCsqInsertIrp
0x1C00025E0: IpfForwardIpV6ClassifyCallout
0x1C00052F0: ClearCache
0x1C00028C0: ProcessIPV6Header
0x1C0019058: "__cdecl _imp_NdisAcquireReadWriteLock" __imp_NdisAcquireReadWriteLock
0x1C0005A7C: AddNewInterface
0x1C00191C8: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C000D7F0: WPP_SF_DDdD
0x1C0019228: "__cdecl _imp_SeUnlockSubjectContext" __imp_SeUnlockSubjectContext
0x1C0016AF0: AddrHashTable
0x1C00120F0: "__cdecl _security_cookie" __security_cookie
0x1C00190D0: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0017380: filter_slist
0x1C000EE2C: IfdRestructureHashtable
0x1C0016BC8: g_dwNumFragsAllocs
0x1C001B008: OpenRegKey
0x1C0016AD8: AddrModulus
0x1C000EA50: DoDerefMonitorCB
0x1C0010490: FWPM_LAYER_IPFORWARD_V4
0x1C00104A0: FWPM_LAYER_IPFORWARD_V6
0x1C000F560: CsqCompleteCanceledIrp
0x1C0010350: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0017200: g_llFragCacheBlocks
0x1C0019190: "__cdecl _imp_ExInterlockedRemoveHeadList" __imp_ExInterlockedRemoveHeadList
0x1C0019308: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C00067A4: AllocateV6CacheStructures
0x1C0019078: NETIO_NULL_THUNK_DATA
0x1C000E610: WPP_SF_qd
0x1C000D5E0: UpdateMatchBindingInformation
0x1C001B2CC: SetFiltersEx
0x1C000CF8C: WPP_SF_qq
0x1C0016C90: MonitorCB
0x1C00074F0: MatchV6Filter
0x1C001D044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000CF48: WPP_SF_q
0x1C001B880: GetPointerToTocEntry
0x1C00027A0: IpV6PacketFilterShim
0x1C00190F8: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C00191A0: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0016C78: WPPTraceSuite
0x1C001C4A0: GetRegDWORDValue
0x1C00020F0: IpfOutboundIpClassifyCallout
0x1C0010450: FWPM_LAYER_INBOUND_IPPACKET_V4
0x1C00030E0: InitializeMonitoring
0x1C0019330: "__cdecl _imp_RtlExpandHashTable" __imp_RtlExpandHashTable
0x1C00104B0: "\Parameters" ??_C@_1BI@BPNCJPFJ@?$AA?2?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C00190A8: "__cdecl _imp_FwpmFilterDeleteByKey0" __imp_FwpmFilterDeleteByKey0
0x1C000D278: FindFilterByHandle
0x1C001936C: "__cdecl _IMPORT_DESCRIPTOR_NDIS" __IMPORT_DESCRIPTOR_NDIS
0x1C000C080: CloseFcb
0x1C000F620: CsqRemoveIrp
0x1C000DFB0: CreateMaskFor
0x1C00108C8: WPP_0e2c86de9be13feb520d93bd63d17f2a_Traceguids
0x1C0016B90: g_llInactivityTime
0x1C00078B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0012100: g_FragThresholdSize
0x1C0019098: "__cdecl _imp_FwpmTransactionBegin0" __imp_FwpmTransactionBegin0
0x1C0010800: "Local receive filter driver filt" ??_C@_1EG@PMMCACIH@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAr?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt@
0x1C0017410: fCheckDups
0x1C0010920: "IpfRegisterCallouts" ??_C@_0BE@KBMKBDPO@IpfRegisterCallouts?$AA@
0x1C0016BE0: g_kdTimerDpc
0x1C000F590: CsqInsertIrp
0x1C000F85C: WfpReportError
0x1C0012010: PfFastIoDispatch
0x1C0019168: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C00062B8: NotifyFastPath
0x1C0019030: "__cdecl _imp_NdisSetEvent" __imp_NdisSetEvent
0x1C0019138: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C000F66C: IpfDeregisterCallouts
0x1C000E394: LogFiltHit
0x1C0019080: "__cdecl _imp_FwpmTransactionAbort0" __imp_FwpmTransactionAbort0
0x1C0019340: ntoskrnl_NULL_THUNK_DATA
0x1C0019108: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0019290: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C00191C0: "__cdecl _imp_RtlEndEnumerationHashTable" __imp_RtlEndEnumerationHashTable
0x1C0004338: CheckDescriptorSize
0x1C0007860: IpfNotifyCallout
0x1C000C61C: FreeExistingCache
0x1C0002C34: IpfShimSetFilterState
0x1C0019310: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00108A0: "FORWARD" ??_C@_07NEJMBLMM@FORWARD?$AA@
0x1C001D078: DriverEntry
0x1C0003014: OpenNewHandle
0x1C0012620: AddrTable
0x1C0019120: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C000F754: WPP_SF_sD
0x1C000F7D8: WPP_SF_sd
0x1C0019258: "__cdecl _imp_RtlLookupEntryHashTable" __imp_RtlLookupEntryHashTable
0x1C000E784: WPP_SF_sq
0x1C0016C68: pfnWppTraceMessage
0x1C0019140: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0016B70: g_leFcbs
0x1C001C06C: WppInitKm
0x1C000E71C: WPP_SF_s
0x1C0010470: FWPM_LAYER_OUTBOUND_IPPACKET_V4
0x1C0010480: FWPM_LAYER_OUTBOUND_IPPACKET_V6
0x1C0007E80: memset
0x1C00193A8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]