PDB Symbols - RpcRtRemote.dll (0x081F899449BA00CAD489DBC31508FD53D88DCEA5C2F434EE123829A8D2BE7065)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\RpcRtRemote.dll Base=0x180000000 SHA-256=081F899449BA00CAD489DBC31508FD53D88DCEA5C2F434EE123829A8D2BE7065
PDB: RpcRtRemote.pdb GUID={B9E70D56-2B0B-8E8F-F05DBBD3E3E5CF3F} Age=1

477 located named symbols:
0x180007B08: "long __cdecl FwCliInitializeIfNecessary(void)" ?FwCliInitializeIfNecessary@@YAJXZ
0x18000133C: "public: unsigned int __cdecl SIMPLE_DICT::ExpandToSize(unsigned int) __ptr64" ?ExpandToSize@SIMPLE_DICT@@QEAAII@Z
0x18000A450: "__cdecl _imp_RtlUnicodeToMultiByteSize" __imp_RtlUnicodeToMultiByteSize
0x180006C84: "public: long __cdecl FwManCliProcessData::SubscribeForNewRulesNotification(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,int,struct _NewRulesNotificationData * __ptr64 * __ptr64) __ptr64" ?SubscribeForNewRulesNotification@FwManCliProcessData@@QEAAJPEAU_RPC_ASYNC_STATE@@PEAXHPEAPEAU_NewRulesNotificationData@@@Z
0x18000A790: "__cdecl fltused" _fltused
0x180002433: "__cdecl _imp_load_CryptSetProvParam" __imp_load_CryptSetProvParam
0x18000C110: FirewallAPI_NULL_THUNK_DATA_DLB
0x180001D90: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000C2A4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000A2D8: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180006600: "public: virtual long __cdecl FwManRpcLayerUm::NewFilter(struct FWPM_FILTER0_ * __ptr64) __ptr64" ?NewFilter@FwManRpcLayerUm@@UEAAJPEAUFWPM_FILTER0_@@@Z
0x18000D008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004D48: "public: void __cdecl CReaderWriterLock3::WriteLock(void) __ptr64" ?WriteLock@CReaderWriterLock3@@QEAAXXZ
0x180004CA8: "protected: void __cdecl FwManRpcLayer::LinkFiltersToInterfaceNoLock(struct _GUID * __ptr64,class MTOLinkParentWithObjPointer * __ptr64) __ptr64" ?LinkFiltersToInterfaceNoLock@FwManRpcLayer@@IEAAXPEAU_GUID@@PEAVMTOLinkParentWithObjPointer@@@Z
0x18000A308: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000A218: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x18000A1C0: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x1800022B1: "__cdecl _imp_load_CertCompareCertificateName" __imp_load_CertCompareCertificateName
0x180007040: FwCleanupHandle_rundown
0x18000AF88: FWPM_CONDITION_RPC_PROTOCOL
0x18000A1C8: "__cdecl _imp_RpcServerSubscribeForNotification" __imp_RpcServerSubscribeForNotification
0x180002720: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000F010: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x1800059A0: "public: virtual class FwManIf * __ptr64 __cdecl FwManRpcLayerUm::FindIf(struct _GUID * __ptr64) __ptr64" ?FindIf@FwManRpcLayerUm@@UEAAPEAVFwManIf@@PEAU_GUID@@@Z
0x180004C40: "public: virtual class FwManIf * __ptr64 __cdecl FwManRpcLayerEpmap::FindIf(struct _GUID * __ptr64) __ptr64" ?FindIf@FwManRpcLayerEpmap@@UEAAPEAVFwManIf@@PEAU_GUID@@@Z
0x18000F098: CRYPTSP_NULL_THUNK_DATA_DLA
0x18000D7C0: g_ulAdditionalProbeSize
0x18000AFD0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180004BA4: "public: void * __ptr64 __cdecl FwMan::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFwMan@@QEAAPEAXI@Z
0x180001DD0: I_RpcExtInitializeExtensionPoint
0x180008240: "public: void * __ptr64 __cdecl SIMPLE_DICT::Delete(unsigned int) __ptr64" ?Delete@SIMPLE_DICT@@QEAAPEAXI@Z
0x1800049A4: "void __cdecl CompRpcpErrorAddRecord(unsigned long,unsigned long,unsigned short,unsigned short * __ptr64,unsigned short * __ptr64)" ?CompRpcpErrorAddRecord@@YAXKKGPEAG0@Z
0x18000AF78: FWPM_CONDITION_RPC_EP_VALUE
0x18000A2B0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000C080: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x1800013D0: FwEpmapFilterAll
0x18000A210: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x18000A480: "__cdecl _imp_wcschr" __imp_wcschr
0x18000A388: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18000F078: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x18000A3F0: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x18000A4B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002640: NdrServerCall2
0x18000A478: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180007110: FwSubscribeForNewRulesNotification
0x180002D54: "long __cdecl CompareRdnElement(struct _CERT_CONTEXT const * __ptr64,unsigned long,void * __ptr64,unsigned short * __ptr64,int)" ?CompareRdnElement@@YAJPEBU_CERT_CONTEXT@@KPEAXPEAGH@Z
0x18000A228: "__cdecl _imp_RpcErrorClearInformation" __imp_RpcErrorClearInformation
0x18000F000: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x18000C3BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x18000A668: "D:(A;;GR;;;WD)(A;;GR;;;AC)" ??_C@_1DG@BMAFFLKH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x180007070: FwConnectToManager
0x18000228D: "__cdecl _imp_load_CertOpenStore" __imp_load_CertOpenStore
0x18000C090: CRYPTSP_NULL_THUNK_DATA_DLB
0x180002BD0: "void __cdecl SafeAllocFreeProc(void * __ptr64)" ?SafeAllocFreeProc@@YAXPEAX@Z
0x1800090C0: "const FwManRpcLayer::`vftable'" ??_7FwManRpcLayer@@6B@
0x180004D30: "private: virtual void __cdecl FwManRpcLayerEpAdd::StopGlobalFiltering(void) __ptr64" ?StopGlobalFiltering@FwManRpcLayerEpAdd@@EEAAXXZ
0x1800066D4: "public: int __cdecl MTMLink::OutLink(class MTMLink * __ptr64) __ptr64" ?OutLink@MTMLink@@QEAAHPEAV1@@Z
0x180006214: "public: long __cdecl FwManRpcRtData::InterfaceRegistered(struct _GUID * __ptr64,class FwManCliProcessData * __ptr64,int * __ptr64,struct _FwEps * __ptr64 * __ptr64) __ptr64" ?InterfaceRegistered@FwManRpcRtData@@QEAAJPEAU_GUID@@PEAVFwManCliProcessData@@PEAHPEAPEAU_FwEps@@@Z
0x18000A1D8: "__cdecl _imp_RpcErrorAddRecord" __imp_RpcErrorAddRecord
0x1800053C4: "public: void * __ptr64 __cdecl FwManIfRt::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFwManIfRt@@QEAAPEAXI@Z
0x18000F0D8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x18000F060: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x180001AFC: "long __cdecl FwCheckWhetherWFWIsInstalled(int * __ptr64)" ?FwCheckWhetherWFWIsInstalled@@YAJPEAH@Z
0x18000A5E4: "__cdecl _guard_iat_table" __guard_iat_table
0x18000F080: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x1800026F5: memcpy
0x18000254E: "__cdecl _imp_load_FwpmEngineClose0" __imp_load_FwpmEngineClose0
0x180003EB8: "long __cdecl RpcRemoteCertMatchPrincipalNameEx(struct _CERT_CONTEXT const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?RpcRemoteCertMatchPrincipalNameEx@@YAJPEBU_CERT_CONTEXT@@PEBGK@Z
0x180005770: "public: virtual void __cdecl FwManRpcLayerEpAdd::DeleteFilter(class FwManFilter * __ptr64) __ptr64" ?DeleteFilter@FwManRpcLayerEpAdd@@UEAAXPEAVFwManFilter@@@Z
0x18000A498: "__cdecl _imp_memset" __imp_memset
0x18000A390: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180002F98: "struct _CERT_CONTEXT const * __ptr64 __cdecl FindMatchingCertificate(void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?FindMatchingCertificate@@YAPEBU_CERT_CONTEXT@@PEAXPEAG1@Z
0x180005BE8: "private: long __cdecl FwManCliProcessData::GenerateSyncData(struct _NewRulesNotificationData * __ptr64 * __ptr64) __ptr64" ?GenerateSyncData@FwManCliProcessData@@AEAAJPEAPEAU_NewRulesNotificationData@@@Z
0x18000C330: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000F0B0: FirewallAPI_NULL_THUNK_DATA_DLA
0x18000A3B0: "__cdecl _imp_Sleep" __imp_Sleep
0x1800080F4: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x180003F44: "long __cdecl RpcRemoteCertProcessAndProvision(unsigned short const * __ptr64,unsigned short const * __ptr64,int,struct _CERT_CONTEXT * __ptr64 * __ptr64)" ?RpcRemoteCertProcessAndProvision@@YAJPEBG0HPEAPEAU_CERT_CONTEXT@@@Z
0x180001240: "public: __cdecl FwManIfEpmap::FwManIfEpmap(struct _GUID * __ptr64,class FwManIfHash * __ptr64,long * __ptr64) __ptr64" ??0FwManIfEpmap@@QEAA@PEAU_GUID@@PEAVFwManIfHash@@PEAJ@Z
0x18000AF08: "\*\<" ??_C@_19BGFKAAEE@?$AA?2?$AA?$CK?$AA?2?$AA?$DM?$AA?$AA@
0x18000A278: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180004904: "void __cdecl CompRpcpErrorAddRecord(unsigned long,unsigned long,unsigned short,unsigned long)" ?CompRpcpErrorAddRecord@@YAXKKGK@Z
0x1800020DB: "__cdecl _C_specific_handler" __C_specific_handler
0x18000BB04: "__cdecl _DELAY_IMPORT_DESCRIPTOR_FirewallAPI_dll" __DELAY_IMPORT_DESCRIPTOR_FirewallAPI_dll
0x180002BD0: MIDL_user_free
0x180002445: "__cdecl _imp_load_FwpmEngineOpen0" __imp_load_FwpmEngineOpen0
0x180001D60: IndicatePortInUse
0x180002390: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x18000D7E0: "struct _RPC_HELPER_FW_FUNCTION_TABLE * __ptr64 __ptr64 pRuntimeFwImportTable" ?pRuntimeFwImportTable@@3PEAU_RPC_HELPER_FW_FUNCTION_TABLE@@EA
0x1800022F9: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18000A420: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x180002BF0: "unsigned long __cdecl AddComponentName(unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64)" ?AddComponentName@@YAKPEAPEAGPEAK1PEAU_CRYPTOAPI_BLOB@@@Z
0x18000A2A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180002560: "__cdecl _imp_load_FwpsLayerCreateInProcReplica0" __imp_load_FwpsLayerCreateInProcReplica0
0x18000F090: "__cdecl _imp_CryptSetProvParam" __imp_CryptSetProvParam
0x180002572: "__cdecl _imp_load_FWResetIndicatedPortInUse" __imp_load_FWResetIndicatedPortInUse
0x1800073B0: "long __cdecl FwLRPCOnlySecurityCallback(void * __ptr64,void * __ptr64)" ?FwLRPCOnlySecurityCallback@@YAJPEAX0@Z
0x18000A350: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800070B0: FwInterfaceRegistered
0x180001440: FwEpmapInterfaceUnRegistered
0x18000267C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000A600: "I_RpcVerifierCorruptionExpected" ??_C@_0CA@BCNNHMOA@I_RpcVerifierCorruptionExpected?$AA@
0x180006414: "public: long __cdecl FwMan::NewFilter(struct FWPM_FILTER0_ * __ptr64) __ptr64" ?NewFilter@FwMan@@QEAAJPEAUFWPM_FILTER0_@@@Z
0x180005904: "public: class FwManFilter * __ptr64 __cdecl FwManRpcLayer::FindFilterInHash(struct _GUID * __ptr64) __ptr64" ?FindFilterInHash@FwManRpcLayer@@QEAAPEAVFwManFilter@@PEAU_GUID@@@Z
0x18000AFD8: "__cdecl _real@3fe0000000000000" __real@3fe0000000000000
0x18000BBB8: CRYPT32_NULL_THUNK_DATA_DLN
0x18000A370: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000F108: "__cdecl _imp_FwpmFilterEnum0" __imp_FwpmFilterEnum0
0x18000AF00: ">" ??_C@_13MOEPKPHB@?$AA?$DO?$AA?$AA@
0x18000C380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180005894: "public: static int __cdecl FwManIfRt::EpsEquivalent(struct _FwEp * __ptr64,struct _FwEp * __ptr64)" ?EpsEquivalent@FwManIfRt@@SAHPEAU_FwEp@@0@Z
0x180004F24: "public: __cdecl FwManFilter::FwManFilter(struct FWPM_FILTER0_ * __ptr64,class FwManRpcLayer * __ptr64,long * __ptr64) __ptr64" ??0FwManFilter@@QEAA@PEAUFWPM_FILTER0_@@PEAVFwManRpcLayer@@PEAJ@Z
0x18000A620: "I_RpcInitImports" ??_C@_0BB@EGOAAGGP@I_RpcInitImports?$AA@
0x1800011F0: "public: class FwManIf * __ptr64 __cdecl FwManIfHash::Find(struct _GUID * __ptr64) __ptr64" ?Find@FwManIfHash@@QEAAPEAVFwManIf@@PEAU_GUID@@@Z
0x1800022C3: "__cdecl _imp_load_CredIsMarshaledCredentialW" __imp_load_CredIsMarshaledCredentialW
0x180002B00: MatchPrincipalName
0x18000AFC8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180009090: "const FwManRpcLayerEpmap::`vftable'" ??_7FwManRpcLayerEpmap@@6B@
0x180006EA0: "public: class MTOLinkChild * __ptr64 __cdecl MTOLinkParent::UnlinkOneChildIfPossible(void) __ptr64" ?UnlinkOneChildIfPossible@MTOLinkParent@@QEAAPEAVMTOLinkChild@@XZ
0x18000D7F0: "class RPC_SRWLOCK * __ptr64 __ptr64 EpMapRWLock" ?EpMapRWLock@@3PEAVRPC_SRWLOCK@@EA
0x18000D790: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x180001530: "protected: virtual void __cdecl FwManRpcLayerEpmap::StartGlobalFiltering(void) __ptr64" ?StartGlobalFiltering@FwManRpcLayerEpmap@@MEAAXXZ
0x180004E80: "public: __cdecl FwManCliProcessData::FwManCliProcessData(void) __ptr64" ??0FwManCliProcessData@@QEAA@XZ
0x18000D780: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x18000A760: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x18000A638: "I_RpcInitFwImports" ??_C@_0BD@HLFANEOE@I_RpcInitFwImports?$AA@
0x1800080AC: VerifyStackAvailable
0x180005198: "public: __cdecl FwManCliProcessData::~FwManCliProcessData(void) __ptr64" ??1FwManCliProcessData@@QEAA@XZ
0x18000A360: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000A410: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x18000A290: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000A3D0: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18000A2F8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000F118: "__cdecl _imp_FwpsLayerCreateInProcReplica0" __imp_FwpsLayerCreateInProcReplica0
0x180001010: FwEpmapInterfaceRegistered
0x18000A188: "const FwManIfRt::`vftable'" ??_7FwManIfRt@@6B@
0x180008308: "private: void __cdecl CReaderWriterLock3::_LockSpin(enum CReaderWriterLock3::SPIN_TYPE) __ptr64" ?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z
0x1800054B0: "public: virtual void __cdecl FwManIfRt::AddFilter(class FwManFilter * __ptr64) __ptr64" ?AddFilter@FwManIfRt@@UEAAXPEAVFwManFilter@@@Z
0x18000C2E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000A448: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004DE0: RpcpReportFatalError
0x18000A470: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000A2D0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180002221: "__cdecl _imp_load_CertDuplicateCertificateContext" __imp_load_CertDuplicateCertificateContext
0x18000F038: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x180002B30: ProcessAndProvisionCertificate
0x18000A280: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000227B: "__cdecl _imp_load_CertGetNameStringW" __imp_load_CertGetNameStringW
0x18000F058: "__cdecl _imp_CertGetNameStringW" __imp_CertGetNameStringW
0x180002BB0: "void * __ptr64 __cdecl SafeAllocAllocateProc(unsigned __int64)" ?SafeAllocAllocateProc@@YAPEAX_K@Z
0x180002658: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000D844: "unsigned long gNumberOfNewFilterFailures" ?gNumberOfNewFilterFailures@@3KA
0x180001540: "private: virtual class CReaderWriterLock3 * __ptr64 __cdecl FwManIfEpmap::GetLock(void) __ptr64" ?GetLock@FwManIfEpmap@@EEAAPEAVCReaderWriterLock3@@XZ
0x180005C58: "public: long __cdecl FwManIfRt::GetEpAddEps(struct _FwEps * __ptr64 * __ptr64) __ptr64" ?GetEpAddEps@FwManIfRt@@QEAAJPEAPEAU_FwEps@@@Z
0x18000A490: "__cdecl _imp_memcmp" __imp_memcmp
0x180002190: "__cdecl _tailMerge_api_ms_win_security_credentials_l1_1_0_dll" __tailMerge_api_ms_win_security_credentials_l1_1_0_dll
0x180002630: Ndr64AsyncServerCallAll
0x18000D848: "unsigned long gNumberOfFilterGetFailures" ?gNumberOfFilterGetFailures@@3KA
0x18000A330: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x180003AB4: "long __cdecl MatchMsPrincipalName(struct _CERT_CONTEXT const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?MatchMsPrincipalName@@YAJPEBU_CERT_CONTEXT@@PEBGK@Z
0x18000F020: "__cdecl _imp_CertCompareCertificateName" __imp_CertCompareCertificateName
0x18000F050: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x18000C3F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000A328: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000D854: "enum FwCliStates gFwCliState" ?gFwCliState@@3W4FwCliStates@@A
0x18000A3A0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000F018: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x18000F068: "__cdecl _imp_CertStrToNameW" __imp_CertStrToNameW
0x180006FD0: "void __cdecl FwManAsyncNotificationRoutine(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,enum _RPC_ASYNC_EVENT)" ?FwManAsyncNotificationRoutine@@YAXPEAU_RPC_ASYNC_STATE@@PEAXW4_RPC_ASYNC_EVENT@@@Z
0x18000AF98: FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
0x1800063A0: "public: int __cdecl MTMLinkSymmetric::Link(class MTMLinkSymmetric * __ptr64) __ptr64" ?Link@MTMLinkSymmetric@@QEAAHPEAV1@@Z
0x18000AFC8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000220F: "__cdecl _imp_load_CertNameToStrW" __imp_load_CertNameToStrW
0x180001788: "long __cdecl FwManagerConnectToBFE(void)" ?FwManagerConnectToBFE@@YAJXZ
0x18000A1A8: "__cdecl _imp_RpcAsyncAbortCall" __imp_RpcAsyncAbortCall
0x18000A1D0: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x18000AEF8: "2.5.4.3" ??_C@_07FBAAFAAA@2?45?44?43?$AA@
0x18000F088: "__cdecl _imp_CryptContextAddRef" __imp_CryptContextAddRef
0x18000D7D4: "int gfFwThisIsTheFirewallManager" ?gfFwThisIsTheFirewallManager@@3HA
0x180002610: NdrAsyncServerCall
0x18000C2B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000252A: "__cdecl _imp_load_FwpmFreeMemory0" __imp_load_FwpmFreeMemory0
0x18000A780: "__cdecl _sz_FirewallAPI_dll" __sz_FirewallAPI_dll
0x180002184: "__cdecl _imp_load_CredUnmarshalCredentialW" __imp_load_CredUnmarshalCredentialW
0x180003418: "long __cdecl MarkPrincipalNameComponents(unsigned short * __ptr64,unsigned int * __ptr64)" ?MarkPrincipalNameComponents@@YAJPEAGPEAI@Z
0x18000D7A8: "__cdecl _hmod__FirewallAPI_dll" __hmod__FirewallAPI_dll
0x18000A458: "__cdecl _imp_RtlUnicodeToMultiByteN" __imp_RtlUnicodeToMultiByteN
0x18000A368: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18000240F: "__cdecl _imp_load_CryptContextAddRef" __imp_load_CryptContextAddRef
0x18000BB24: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000F120: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x18000A380: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x18000F110: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x180002620: NdrServerCallAll
0x180002B80: ValidatePrincipalName
0x180005DF4: "private: long __cdecl FwManCliProcessData::GetSyncCommands(enum FwManCliProcessData::GetSyncCommandsOption,unsigned int * __ptr64,struct _NewRulesNotificationData * __ptr64 * __ptr64) __ptr64" ?GetSyncCommands@FwManCliProcessData@@AEAAJW4GetSyncCommandsOption@1@PEAIPEAPEAU_NewRulesNotificationData@@@Z
0x18000A248: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18000C3E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800015A0: InitializeDLL
0x180009018: "const FwManIf::`vftable'" ??_7FwManIf@@6B@
0x18000C394: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000D7A0: "__cdecl _hmod__fwpuclnt_dll" __hmod__fwpuclnt_dll
0x18000AF20: "ROOT" ??_C@_19OLEIDBPB@?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180002CF8: "int __cdecl AppendCharacterToNameBuffer(unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short)" ?AppendCharacterToNameBuffer@@YAHPEAPEAGPEAK1G@Z
0x180005AB4: "long __cdecl FwManInterfaceRegistered(void * __ptr64,struct _GUID * __ptr64,int * __ptr64,int * __ptr64,struct _FwEps * __ptr64 * __ptr64)" ?FwManInterfaceRegistered@@YAJPEAXPEAU_GUID@@PEAH2PEAPEAU_FwEps@@@Z
0x18000D83C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUxszixlmeUwzbglmzUlyquivUznwGEUxszikixkOlyq@CharConv" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUxszixlmeUwzbglmzUlyquivUznwGEUxszikixkOlyq@CharConv
0x180002A50: DuplicateCertificate
0x18000A4A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002257: "__cdecl _imp_load_CertFreeCertificateChain" __imp_load_CertFreeCertificateChain
0x18000A318: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000F0E8: "__cdecl _imp_FwpmFilterCreateEnumHandle0" __imp_FwpmFilterCreateEnumHandle0
0x180006ABC: "public: void __cdecl FwManRpcRtData::SendGlobalCliProcessDataAction(enum GlobalCliProcessDataAction) __ptr64" ?SendGlobalCliProcessDataAction@FwManRpcRtData@@QEAAXW4GlobalCliProcessDataAction@@@Z
0x18000A3E0: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000BFF0: CRYPT32_NULL_THUNK_DATA_DLB
0x180002245: "__cdecl _imp_load_CertSetCertificateContextProperty" __imp_load_CertSetCertificateContextProperty
0x18000F0A0: "__cdecl _imp_FWIndicatePortInUse" __imp_FWIndicatePortInUse
0x18000F028: "__cdecl _imp_CertNameToStrW" __imp_CertNameToStrW
0x18000A3D8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000A1E0: "__cdecl _imp_I_RpcBindingInqTransportType" __imp_I_RpcBindingInqTransportType
0x18000A3C0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000A268: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180008264: "public: unsigned int __cdecl SIMPLE_DICT::Insert(void * __ptr64) __ptr64" ?Insert@SIMPLE_DICT@@QEAAIPEAX@Z
0x18000C0B8: fwpuclnt_NULL_THUNK_DATA_DLB
0x18000F130: fwpuclnt_NULL_THUNK_DATA_DLA
0x18000BC78: fwpuclnt_NULL_THUNK_DATA_DLN
0x1800082D0: "public: void * __ptr64 __cdecl SIMPLE_DICT::Next(unsigned int & __ptr64) __ptr64" ?Next@SIMPLE_DICT@@QEAAPEAXAEAI@Z
0x18000257E: "__cdecl _tailMerge_firewallapi_dll" __tailMerge_firewallapi_dll
0x18000A3E8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000AFA8: FWPM_CONDITION_RPC_IF_UUID
0x18000D84C: "long volatile FwpmFilterChangeCallbackLock" ?FwpmFilterChangeCallbackLock@@3JC
0x180006350: "private: class FwManRpcLayer * __ptr64 __cdecl FwMan::LayerKeyToLayer(struct _GUID * __ptr64) __ptr64" ?LayerKeyToLayer@FwMan@@AEAAPEAVFwManRpcLayer@@PEAU_GUID@@@Z
0x180005440: "public: virtual void __cdecl FwManIfEpmap::AddFilter(class FwManFilter * __ptr64) __ptr64" ?AddFilter@FwManIfEpmap@@UEAAXPEAVFwManFilter@@@Z
0x18000D7D8: "struct _RPC_HELPER_FUNCTION_TABLE * __ptr64 __ptr64 pRuntimeImportTable" ?pRuntimeImportTable@@3PEAU_RPC_HELPER_FUNCTION_TABLE@@EA
0x18000A770: "__cdecl _sz_fwpuclnt_dll" __sz_fwpuclnt_dll
0x180003DBC: "int __cdecl ReallocateNameBuffer(unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long)" ?ReallocateNameBuffer@@YAHPEAPEAGPEAKK@Z
0x18000D010: "struct FWPM_FILTER_ENUM_TEMPLATE0_ const * const FwpmRpcFilterEnumTemplates" ?FwpmRpcFilterEnumTemplates@@3QBUFWPM_FILTER_ENUM_TEMPLATE0_@@B
0x180002451: "__cdecl _tailMerge_fwpuclnt_dll" __tailMerge_fwpuclnt_dll
0x18000C31C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180002A90: FreeCertificate
0x18000A2F0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180007DF0: "long __cdecl FwCliRegisterInterface(struct _RPC_SERVER_INTERFACE * __ptr64,int * __ptr64,struct _FwEps * __ptr64 * __ptr64)" ?FwCliRegisterInterface@@YAJPEAU_RPC_SERVER_INTERFACE@@PEAHPEAPEAU_FwEps@@@Z
0x180006B7C: "void __cdecl SqmFilterAdd(unsigned long,int)" ?SqmFilterAdd@@YAXKH@Z
0x1800024F4: "__cdecl _imp_load_FwpmFilterCreateEnumHandle0" __imp_load_FwpmFilterCreateEnumHandle0
0x18000A240: "__cdecl _imp_RpcRaiseException" __imp_RpcRaiseException
0x18000A1B8: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x18000A230: "__cdecl _imp_RpcRevertToSelfEx" __imp_RpcRevertToSelfEx
0x1800059BC: "public: void __cdecl FwManCliProcessData::ForceSync(void) __ptr64" ?ForceSync@FwManCliProcessData@@QEAAXXZ
0x180006BE0: "private: virtual void __cdecl FwManRpcLayerUm::StartGlobalFiltering(void) __ptr64" ?StartGlobalFiltering@FwManRpcLayerUm@@EEAAXXZ
0x180009000: "const FwManIfEpmap::`vftable'" ??_7FwManIfEpmap@@6B@
0x1800067A0: "public: virtual void __cdecl FwManIfRt::RemoveFilter(class FwManFilter * __ptr64) __ptr64" ?RemoveFilter@FwManIfRt@@UEAAXPEAVFwManFilter@@@Z
0x180001400: "public: virtual void __cdecl FwManRpcLayerEpmap::LinkFiltersToInterface(struct _GUID * __ptr64,class MTOLinkParentWithObjPointer * __ptr64) __ptr64" ?LinkFiltersToInterface@FwManRpcLayerEpmap@@UEAAXPEAU_GUID@@PEAVMTOLinkParentWithObjPointer@@@Z
0x18000D840: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUxlnUikxUifmgrnvUurivdzooUnzmztviUlyquivUznwGEUkivxlnkOlyq@FwManager" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUxlnUikxUifmgrnvUurivdzooUnzmztviUlyquivUznwGEUkivxlnkOlyq@FwManager
0x180002506: "__cdecl _imp_load_FwpsClassifyUser0" __imp_load_FwpsClassifyUser0
0x1800059A0: "public: virtual class FwManIf * __ptr64 __cdecl FwManRpcLayerEpAdd::FindIf(struct _GUID * __ptr64) __ptr64" ?FindIf@FwManRpcLayerEpAdd@@UEAAPEAVFwManIf@@PEAU_GUID@@@Z
0x180001E70: "__cdecl _security_check_cookie" __security_check_cookie
0x18000D788: "__cdecl _hmod__api_ms_win_security_credentials_l1_1_0_dll" __hmod__api_ms_win_security_credentials_l1_1_0_dll
0x18000C344: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000A338: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000A2C0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000D828: "struct RpcFirewallClientSettings * __ptr64 __ptr64 gpRpcFirewallClientSettings" ?gpRpcFirewallClientSettings@@3PEAURpcFirewallClientSettings@@EA
0x180001E30: ResetIndicatedPortsInUse
0x18000F0F8: "__cdecl _imp_FwpmFilterDestroyEnumHandle0" __imp_FwpmFilterDestroyEnumHandle0
0x180002384: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x18000A3C8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180007A50: "int __cdecl FwCliBlockAll(void)" ?FwCliBlockAll@@YAHXZ
0x1800022D5: "__cdecl _imp_load_CertVerifyCertificateChainPolicy" __imp_load_CertVerifyCertificateChainPolicy
0x18000A258: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000A430: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x18000AFE0: "__cdecl _real@40af400000000000" __real@40af400000000000
0x18000D838: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUhszivwUwzbglmzUlyquivUznwGEUkivxlnkOlyq@shared" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUhszivwUwzbglmzUlyquivUznwGEUkivxlnkOlyq@shared
0x1800026DD: "__cdecl _chkstk" __chkstk
0x180006700: "public: void __cdecl CReaderWriterLock3::ReadUnlock(void) __ptr64" ?ReadUnlock@CReaderWriterLock3@@QEAAXXZ
0x18000A800: FWPM_LAYER_RPC_EPMAP
0x18000F128: "__cdecl _imp_FwpsClassifyUser0" __imp_FwpsClassifyUser0
0x180004820: "long __cdecl RtlStringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?RtlStringCchCopyW@@YAJPEAG_KPEBG@Z
0x180001B54: "public: __cdecl FwMan::FwMan(long * __ptr64) __ptr64" ??0FwMan@@QEAA@PEAJ@Z
0x18000AF2C: "MY" ??_C@_15ELPOAHMG@?$AAM?$AAY?$AA?$AA@
0x18000F030: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x180005068: "public: __cdecl FwManIfRt::FwManIfRt(struct _GUID * __ptr64,class FwManCliProcessData * __ptr64,long * __ptr64) __ptr64" ??0FwManIfRt@@QEAA@PEAU_GUID@@PEAVFwManCliProcessData@@PEAJ@Z
0x18000A348: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800042EC: "long __cdecl RpcRemoteGeneratePrincipalName(struct _CERT_CONTEXT const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?RpcRemoteGeneratePrincipalName@@YAJPEBU_CERT_CONTEXT@@KPEAPEAG@Z
0x18000A4B8: "__cdecl _guard_fids_table" __guard_fids_table
0x18000A378: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x180004A50: "void __cdecl CompRpcpErrorAddRecord(unsigned long,unsigned long,unsigned short,unsigned short * __ptr64,unsigned long)" ?CompRpcpErrorAddRecord@@YAXKKGPEAGK@Z
0x180001560: "private: virtual class CReaderWriterLock3 * __ptr64 __cdecl FwManIfRt::GetLock(void) __ptr64" ?GetLock@FwManIfRt@@EEAAPEAVCReaderWriterLock3@@XZ
0x180009190: "__cdecl load_config_used" _load_config_used
0x18000F0E0: "__cdecl _imp_FwpmFilterGetByKey0" __imp_FwpmFilterGetByKey0
0x18000A650: "rpcrt4.dll" ??_C@_1BG@OHPGIPDH@?$AAr?$AAp?$AAc?$AAr?$AAt?$AA4?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000F048: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x18000F0B8: "__cdecl _imp_CredIsMarshaledCredentialW" __imp_CredIsMarshaledCredentialW
0x18000BAA4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x18000BAE4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_fwpuclnt_dll" __DELAY_IMPORT_DESCRIPTOR_fwpuclnt_dll
0x18000A270: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000A260: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000F0C0: "__cdecl _imp_CredUnmarshalCredentialW" __imp_CredUnmarshalCredentialW
0x18000253C: "__cdecl _imp_load_FwpmFilterEnum0" __imp_load_FwpmFilterEnum0
0x18000A1F8: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x180003C10: "long __cdecl MatchSubjectNameUsingCAPI(struct _CERT_CONTEXT const * __ptr64,unsigned short * __ptr64,unsigned long)" ?MatchSubjectNameUsingCAPI@@YAJPEBU_CERT_CONTEXT@@PEAGK@Z
0x180006520: "public: virtual long __cdecl FwManRpcLayerEpmap::NewFilter(struct FWPM_FILTER0_ * __ptr64) __ptr64" ?NewFilter@FwManRpcLayerEpmap@@UEAAJPEAUFWPM_FILTER0_@@@Z
0x180006944: "public: void __cdecl FwManCliProcessData::SendFwCmd(struct _FwCmd * __ptr64) __ptr64" ?SendFwCmd@FwManCliProcessData@@QEAAXPEAU_FwCmd@@@Z
0x180001CC4: "public: __cdecl FwManRpcRtData::FwManRpcRtData(long * __ptr64) __ptr64" ??0FwManRpcRtData@@QEAA@PEAJ@Z
0x18000F070: CRYPT32_NULL_THUNK_DATA_DLA
0x180001580: "void __cdecl FwThisIsTheManager(void)" ?FwThisIsTheManager@@YAXXZ
0x1800055F0: "public: void __cdecl FwManRpcRtData::CliProcessSubscribed(class MTOLinkChild * __ptr64) __ptr64" ?CliProcessSubscribed@FwManRpcRtData@@QEAAXPEAVMTOLinkChild@@@Z
0x180004AFC: "long __cdecl W2AAttachHelper(unsigned short const * __ptr64,char * __ptr64 * __ptr64)" ?W2AAttachHelper@@YAJPEBGPEAPEAD@Z
0x180007AF0: "int __cdecl FwCliFilterAll(void)" ?FwCliFilterAll@@YAHXZ
0x18000A2B8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180006C00: "private: virtual void __cdecl FwManRpcLayerUm::StopGlobalFiltering(void) __ptr64" ?StopGlobalFiltering@FwManRpcLayerUm@@EEAAXXZ
0x18000A468: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004638: "long __cdecl RpcRemoteValidateSchannelPrincipalName(unsigned short const * __ptr64)" ?RpcRemoteValidateSchannelPrincipalName@@YAJPEBG@Z
0x18000A340: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000BAC4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x180006EF8: "public: void __cdecl FwManRpcRtData::WaitForClientsToReportBack(void) __ptr64" ?WaitForClientsToReportBack@FwManRpcRtData@@QEAAXXZ
0x18000A2E8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x18000A1E8: "__cdecl _imp_I_RpcBindingInqSecurityContextKeyInfo" __imp_I_RpcBindingInqSecurityContextKeyInfo
0x18000A418: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x1800020F3: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x18000229F: "__cdecl _imp_load_CertStrToNameW" __imp_load_CertStrToNameW
0x18000A2E0: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x1800057A0: "public: virtual void __cdecl FwManRpcLayerEpmap::DeleteFilter(class FwManFilter * __ptr64) __ptr64" ?DeleteFilter@FwManRpcLayerEpmap@@UEAAXPEAVFwManFilter@@@Z
0x18000A460: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180004D30: "__cdecl purecall" _purecall
0x18000AFD0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180002F30: "long __cdecl DecodeEscapedString(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned __int64)" ?DecodeEscapedString@@YAJPEBGPEAG_K@Z
0x180006720: "public: virtual void __cdecl FwManIfEpmap::RemoveFilter(class FwManFilter * __ptr64) __ptr64" ?RemoveFilter@FwManIfEpmap@@UEAAXPEAVFwManFilter@@@Z
0x18000BA64: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x180002305: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x18000A220: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x180005F9C: "private: long __cdecl FwManFilter::InitFilterFromFwData(struct FWPM_FILTER0_ * __ptr64) __ptr64" ?InitFilterFromFwData@FwManFilter@@AEAAJPEAUFWPM_FILTER0_@@@Z
0x180002BE0: MIDL_user_allocate
0x180001530: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800026E9: memcmp
0x18000AF14: "CA" ??_C@_15OEFJBJMG@?$AAC?$AAA?$AA?$AA@
0x18000A440: "__cdecl _imp_RtlReportException" __imp_RtlReportException
0x1800011A0: "public: void __cdecl CReaderWriterLock3::WriteUnlock(void) __ptr64" ?WriteUnlock@CReaderWriterLock3@@QEAAXXZ
0x18000D808: "void * __ptr64 __ptr64 gFwpEngineHandle" ?gFwpEngineHandle@@3PEAXEA
0x18000F0D0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180004C50: "public: virtual void __cdecl FwManRpcLayer::LinkFiltersToInterface(struct _GUID * __ptr64,class MTOLinkParentWithObjPointer * __ptr64) __ptr64" ?LinkFiltersToInterface@FwManRpcLayer@@UEAAXPEAU_GUID@@PEAVMTOLinkParentWithObjPointer@@@Z
0x18000AEF0: WNF_RPCF_FWMAN_RUNNING
0x18000D7B0: g_ulMaxStackAllocSize
0x18000C3A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000BC10: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLN
0x18000C008: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLB
0x1800022E7: "__cdecl _imp_load_CertGetCertificateContextProperty" __imp_load_CertGetCertificateContextProperty
0x18000F0C8: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA_DLA
0x18000A2C8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000BBF8: FirewallAPI_NULL_THUNK_DATA_DLN
0x18000A820: FWPM_LAYER_RPC_EP_ADD
0x18000D7F8: "class FwMan * __ptr64 __ptr64 gFwMan" ?gFwMan@@3PEAVFwMan@@EA
0x18000A700: "__cdecl _sz_api_ms_win_security_credentials_l1_1_0_dll" __sz_api_ms_win_security_credentials_l1_1_0_dll
0x1800015D8: "unsigned char __cdecl _InitializeDLL(struct HINSTANCE__ * __ptr64,unsigned long,struct _CONTEXT * __ptr64)" ?_InitializeDLL@@YAEPEAUHINSTANCE__@@KPEAU_CONTEXT@@@Z
0x1800073E0: FwFilter
0x18000A400: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x1800090F0: "const FwManRpcLayerEpAdd::`vftable'" ??_7FwManRpcLayerEpAdd@@6B@
0x18000A408: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18000A6A0: "SYSTEM\CurrentControlSet\Service" ??_C@_1EM@HFLBIEFM@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1800072F0: "long __cdecl FwInitTokenInformationForToken(void * __ptr64,struct FWP_TOKEN_INFORMATION_ * __ptr64,struct _TOKEN_GROUPS_AND_PRIVILEGES * __ptr64 * __ptr64)" ?FwInitTokenInformationForToken@@YAJPEAXPEAUFWP_TOKEN_INFORMATION_@@PEAPEAU_TOKEN_GROUPS_AND_PRIVILEGES@@@Z
0x18000A4A0: ntdll_NULL_THUNK_DATA
0x18000A3F8: "__cdecl _imp_memcpy" __imp_memcpy
0x18000AF68: FWPM_CONDITION_RPC_EP_FLAGS
0x18000D208: "unsigned int gNumberOfProcessors" ?gNumberOfProcessors@@3IA
0x18000D858: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUxlnUikxUifmgrnvUurivdzooUxorvmgUlyquivUznwGEUkivxlnkOlyq@FwCli" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUxlnUikxUifmgrnvUurivdzooUxorvmgUlyquivUznwGEUkivxlnkOlyq@FwCli
0x18000D798: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x180005654: "private: void __cdecl FwManIfRt::CtrlFilteringForLinkedProcesses(enum FwProcCmd) __ptr64" ?CtrlFilteringForLinkedProcesses@FwManIfRt@@AEAAXW4FwProcCmd@@@Z
0x18000C358: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180007A70: "int __cdecl FwCliConnectToBFEIfNecessary(void)" ?FwCliConnectToBFEIfNecessary@@YAHXZ
0x18000A438: "__cdecl _imp_RtlRaiseException" __imp_RtlRaiseException
0x18000D000: "__cdecl _security_cookie" __security_cookie
0x18000D7B8: g_pfnAllocate
0x180002172: "__cdecl _imp_load_CertFreeCertificateContext" __imp_load_CertFreeCertificateContext
0x18000A1B0: "__cdecl _imp_RpcServerUnsubscribeForNotification" __imp_RpcServerUnsubscribeForNotification
0x180004D30: "private: virtual void __cdecl FwManRpcLayerEpAdd::StartGlobalFiltering(void) __ptr64" ?StartGlobalFiltering@FwManRpcLayerEpAdd@@EEAAXXZ
0x1800056E0: "public: void __cdecl FwMan::DeleteFilter(struct _GUID * __ptr64) __ptr64" ?DeleteFilter@FwMan@@QEAAXPEAU_GUID@@@Z
0x180001530: "protected: virtual void __cdecl FwManRpcLayerEpmap::StopGlobalFiltering(void) __ptr64" ?StopGlobalFiltering@FwManRpcLayerEpmap@@MEAAXXZ
0x18000A398: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18000A298: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180002269: "__cdecl _imp_load_CertFindCertificateInStore" __imp_load_CertFindCertificateInStore
0x18000A2A8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000C2F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000F0F0: "__cdecl _imp_FwpmFilterSubscribeChanges0" __imp_FwpmFilterSubscribeChanges0
0x180002421: "__cdecl _imp_load_CryptAcquireContextW" __imp_load_CryptAcquireContextW
0x18000A1A0: "__cdecl _imp_I_RpcFree" __imp_I_RpcFree
0x1800071C8: "long __cdecl FwGetLogonIdFromToken(void * __ptr64,struct _LUID * __ptr64)" ?FwGetLogonIdFromToken@@YAJPEAXPEAU_LUID@@@Z
0x18000A320: "__cdecl _imp_SwitchToThread" __imp_SwitchToThread
0x18000F040: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x18000A238: "__cdecl _imp_I_RpcAllocate" __imp_I_RpcAllocate
0x18000A428: "__cdecl _imp_WinSqmIncrementDWORD" __imp_WinSqmIncrementDWORD
0x18000D7E8: "int (__cdecl* __ptr64 pfnVerifierCorruptionExpected)(void)" ?pfnVerifierCorruptionExpected@@3P6AHXZEA
0x18000A288: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000A310: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000BC20: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x180006E60: "public: void __cdecl FwManRpcLayer::UnLinkFiltersFromInterface(class MTOLinkParentWithObjPointer * __ptr64) __ptr64" ?UnLinkFiltersFromInterface@FwManRpcLayer@@QEAAXPEAVMTOLinkParentWithObjPointer@@@Z
0x1800057E0: "public: virtual void __cdecl FwManRpcLayerUm::DeleteFilter(class FwManFilter * __ptr64) __ptr64" ?DeleteFilter@FwManRpcLayerUm@@UEAAXPEAVFwManFilter@@@Z
0x180006B40: "private: void __cdecl FwManCliProcessData::SendOneCommand(unsigned long,struct _GUID * __ptr64) __ptr64" ?SendOneCommand@FwManCliProcessData@@AEAAXKPEAU_GUID@@@Z
0x18000A358: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000F100: "__cdecl _imp_FwpmFreeMemory0" __imp_FwpmFreeMemory0
0x180001EB4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000A488: "__cdecl _imp___chkstk" __imp___chkstk
0x1800024E2: "__cdecl _imp_load_FwpmFilterGetByKey0" __imp_load_FwpmFilterGetByKey0
0x1800020E7: "__cdecl _imp_load_CertGetCertificateChain" __imp_load_CertGetCertificateChain
0x180002233: "__cdecl _imp_load_CertCloseStore" __imp_load_CertCloseStore
0x18000D7C8: g_pfnFree
0x180002518: "__cdecl _imp_load_FwpmFilterDestroyEnumHandle0" __imp_load_FwpmFilterDestroyEnumHandle0
0x180005370: "public: __cdecl FwManIf::~FwManIf(void) __ptr64" ??1FwManIf@@QEAA@XZ
0x1800024D0: "__cdecl _imp_load_FwpmFilterSubscribeChanges0" __imp_load_FwpmFilterSubscribeChanges0
0x18000BBE0: CRYPTSP_NULL_THUNK_DATA_DLN
0x18000539C: "public: void * __ptr64 __cdecl FwManFilter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFwManFilter@@QEAAPEAXI@Z
0x18000C2CC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000A6F0: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x1800068D8: "private: void __cdecl FwManIfRt::SendCmdToLinkedProcesses(struct _FwCmd * __ptr64) __ptr64" ?SendCmdToLinkedProcesses@FwManIfRt@@AEAAXPEAU_FwCmd@@@Z
0x18000A250: RPCRT4_NULL_THUNK_DATA
0x18000D850: "unsigned long gFwCliAsyncNotificationDelay" ?gFwCliAsyncNotificationDelay@@3KA
0x180001F90: "__cdecl _report_gsfailure" __report_gsfailure
0x1800052C4: "public: __cdecl FwManFilter::~FwManFilter(void) __ptr64" ??1FwManFilter@@QEAA@XZ
0x1800019C0: FwManagerInit
0x180002AE0: IsMarshaledCredential
0x180009120: "const FwManRpcLayerUm::`vftable'" ??_7FwManRpcLayerUm@@6B@
0x18000A1F0: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x18000582C: "public: int __cdecl FwManIfRt::EpRedundant(struct _FwEp * __ptr64) __ptr64" ?EpRedundant@FwManIfRt@@QEAAHPEAU_FwEp@@@Z
0x1800016CC: SafeAllocaInitialize
0x180002AB0: GeneratePrincipalName
0x18000F008: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180005B10: "void __cdecl FwpmFilterChangeCallback(void * __ptr64,struct FWPM_FILTER_CHANGE0_ const * __ptr64)" ?FwpmFilterChangeCallback@@YAXPEAXPEBUFWPM_FILTER_CHANGE0_@@@Z
0x18000A730: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18000F0A8: "__cdecl _imp_FWResetIndicatedPortInUse" __imp_FWResetIndicatedPortInUse
0x18000805C: InternalVerifyStackAvailable
0x18000C3D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800034A8: "long __cdecl MatchFullPathPrincipalName(struct _CERT_CONTEXT const * __ptr64,unsigned short const * __ptr64)" ?MatchFullPathPrincipalName@@YAJPEBU_CERT_CONTEXT@@PEBG@Z
0x18000A300: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180007160: "long __cdecl FwGetLogonIdFromCurrentThread(struct _LUID * __ptr64)" ?FwGetLogonIdFromCurrentThread@@YAJPEAU_LUID@@@Z
0x18000A200: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x1800048C8: RpcpStringReverse
0x18000A810: FWPM_LAYER_RPC_UM
0x1800078B0: "void __cdecl FwCliAsyncNotificationRoutine(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,enum _RPC_ASYNC_EVENT)" ?FwCliAsyncNotificationRoutine@@YAXPEAU_RPC_ASYNC_STATE@@PEAXW4_RPC_ASYNC_EVENT@@@Z
0x180006480: "public: virtual long __cdecl FwManRpcLayerEpAdd::NewFilter(struct FWPM_FILTER0_ * __ptr64) __ptr64" ?NewFilter@FwManRpcLayerEpAdd@@UEAAJPEAUFWPM_FILTER0_@@@Z
0x18000BA84: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_credentials_l1_1_0_dll
0x18000C308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000A208: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180005A58: "private: void __cdecl FwManIfRt::ForceSyncForLinkedProcesses(void) __ptr64" ?ForceSyncForLinkedProcesses@FwManIfRt@@AEAAXXZ
0x180007280: "long __cdecl FwInitTokenInformationForCurrentThread(struct FWP_TOKEN_INFORMATION_ * __ptr64,struct _TOKEN_GROUPS_AND_PRIVILEGES * __ptr64 * __ptr64)" ?FwInitTokenInformationForCurrentThread@@YAJPEAUFWP_TOKEN_INFORMATION_@@PEAPEAU_TOKEN_GROUPS_AND_PRIVILEGES@@@Z
0x180005000: "public: __cdecl FwManIf::FwManIf(struct _GUID * __ptr64,class FwManIfHash * __ptr64,long * __ptr64) __ptr64" ??0FwManIf@@QEAA@PEAU_GUID@@PEAVFwManIfHash@@PEAJ@Z
0x18000A3B8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800025FD: "__cdecl _imp_load_FWIndicatePortInUse" __imp_load_FWIndicatePortInUse
0x180006C1C: "private: long __cdecl FwManCliProcessData::SubscribeCommon(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,struct _NewRulesNotificationData * __ptr64 * __ptr64) __ptr64" ?SubscribeCommon@FwManCliProcessData@@AEAAJPEAU_RPC_ASYNC_STATE@@PEAXPEAPEAU_NewRulesNotificationData@@@Z
0x18000A3A8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000C36C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001E94: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180002701: memset
0x18000C40C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]