PDB Symbols - rpcnsh.dll (0x12635113E53C2BD08B024581AEAB53445847101F34015E6E0239E114CD3EC2F5)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rpcnsh.dll Base=0x180000000 SHA-256=12635113E53C2BD08B024581AEAB53445847101F34015E6E0239E114CD3EC2F5
PDB: rpcnsh.pdb GUID={DA09617C-BDD9-8205-E28A0912528E3887} Age=1

407 located named symbols:
0x18000245C: "void __cdecl PrintValue(struct FWP_VALUE0_ * __ptr64)" ?PrintValue@@YAXPEAUFWP_VALUE0_@@@Z
0x1800063A0: "FWP_TOKEN_ACCESS_INFORMATION_TYP" ??_C@_1EE@IOFNLCAK@?$AAF?$AAW?$AAP?$AA_?$AAT?$AAO?$AAK?$AAE?$AAN?$AA_?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA_?$AAI?$AAN?$AAF?$AAO?$AAR?$AAM?$AAA?$AAT?$AAI?$AAO?$AAN?$AA_?$AAT?$AAY?$AAP@
0x180006B0C: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x1800045AC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180005F08: "proxy_auth_type" ??_C@_1CA@DOJNOLJD@?$AAp?$AAr?$AAo?$AAx?$AAy?$AA_?$AAa?$AAu?$AAt?$AAh?$AA_?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x1800039E0: "unsigned long __cdecl GetSelectiveBindingSettings(enum SB_VER * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64)" ?GetSelectiveBindingSettings@@YAKPEAW4SB_VER@@PEAKPEAPEAX@Z
0x180002930: "unsigned long __cdecl ListAllRpcFilters(void)" ?ListAllRpcFilters@@YAKXZ
0x180005BA0: " " ??_C@_1GC@CILOLMFK@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800043B0: "__cdecl FindPESection" _FindPESection
0x1800057F0: "__cdecl _imp_atol" __imp_atol
0x180005FE0: "greater_or_equal" ??_C@_1CC@MIDJFLPM@?$AAg?$AAr?$AAe?$AAa?$AAt?$AAe?$AAr?$AA_?$AAo?$AAr?$AA_?$AAe?$AAq?$AAu?$AAa?$AAl?$AA?$AA@
0x180005D40: "auth_type" ??_C@_1BE@CGIAFEND@?$AAa?$AAu?$AAt?$AAh?$AA_?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x180005728: "__cdecl _imp_PrintError" __imp_PrintError
0x180007590: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180006EF0: FWPM_CONDITION_RPC_AUTH_TYPE
0x180005C10: "settings" ??_C@_1BC@KIHFACHP@?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x180006708: "RPC Filter" ??_C@_1BG@POHLFEOB@?$AAR?$AAP?$AAC?$AA?5?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x180008250: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180006C50: "ParseRule failed: 0x%x " ??_C@_0BI@HODFAOLM@ParseRule?5failed?3?50x?$CFx?6?$AA@
0x180003E6C: "__cdecl CRT_INIT" _CRT_INIT
0x1800056B0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180006DC0: FWPM_CONDITION_RPC_IF_FLAG
0x180003020: "unsigned long __cdecl HandleFilterConditionAdd(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterConditionAdd@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180006E70: FWPM_CONDITION_RPC_PROTOCOL
0x180004820: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002C30: "unsigned long __cdecl DeleteRpcFilter(struct _GUID * __ptr64)" ?DeleteRpcFilter@@YAKPEAU_GUID@@@Z
0x180006358: "FWP_SECURITY_DESCRIPTOR_TYPE" ??_C@_1DK@CPDGLNGC@?$AAF?$AAW?$AAP?$AA_?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA_?$AAD?$AAE?$AAS?$AAC?$AAR?$AAI?$AAP?$AAT?$AAO?$AAR?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
0x1800057D8: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x180005778: "__cdecl _imp_WSAStringToAddressW" __imp_WSAStringToAddressW
0x180006D50: FWPM_CONDITION_IMAGE_NAME
0x180006790: "0x%1!x!" ??_C@_1BA@PGOKDMOL@?$AA0?$AAx?$AA?$CF?$AA1?$AA?$CB?$AAx?$AA?$CB?$AA?$AA@
0x180005C40: "um" ??_C@_15NMJOONPA@?$AAu?$AAm?$AA?$AA@
0x180006CE2: "" ??_C@_00CNPNBAHC@?$AA@
0x180003580: "unsigned long __cdecl ParseRuleAdd(unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ParseRuleAdd@@YAKKPEAPEAGPEAK@Z
0x180003140: "unsigned long __cdecl ParseConditionAdd(unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ParseConditionAdd@@YAKKPEAPEAGPEAK@Z
0x1800089F8: "long g_InitCount" ?g_InitCount@@3JA
0x180005668: "__cdecl _imp_RegDeleteKeyExA" __imp_RegDeleteKeyExA
0x1800069F8: "FwGetAllRpcFiltersEnumNextFilter" ??_C@_0CB@PPMHHPEB@FwGetAllRpcFiltersEnumNextFilter@
0x180006EE0: FWPM_CONDITION_RPC_EP_VALUE
0x180001314: "unsigned long __cdecl HandleShowSettings(void)" ?HandleShowSettings@@YAKXZ
0x180008A10: "struct FWPM_FILTER_CONDITION0_ * AddFilterConditions" ?AddFilterConditions@@3PAUFWPM_FILTER_CONDITION0_@@A
0x180006D70: FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
0x180006EA0: FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
0x1800099D0: "enum tChosenAction Action" ?Action@@3W4tChosenAction@@A
0x1800058A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002EC0: "unsigned long __cdecl HandleFilterDelete(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterDelete@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180005A38: "Delete List " ??_C@_1BK@KEDPOMIN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAL?$AAi?$AAs?$AAt?$AA?6?$AA?$AA@
0x180006B40: "4" ??_C@_13KBPCEPBF@?$AA4?$AA?$AA@
0x180002A8C: "unsigned long __cdecl DeleteAllRpcFilters(void)" ?DeleteAllRpcFilters@@YAKXZ
0x1800033F0: "unsigned long __cdecl HandleFilterRuleAdd(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterRuleAdd@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180004398: "__cdecl XcptFilter" _XcptFilter
0x180005648: "__cdecl _imp_RegSetValueExA" __imp_RegSetValueExA
0x1800058B0: "__cdecl _xc_a" __xc_a
0x180001010: "unsigned long __cdecl InitHelperDll(unsigned long,void * __ptr64)" ?InitHelperDll@@YAKKPEAX@Z
0x180006190: "FWP_MATCH_FLAGS_ANY_SET" ??_C@_1DA@OHHAPFOL@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAA?$AAN?$AAY?$AA_?$AAS?$AAE?$AAT?$AA?$AA@
0x1800099C8: "unsigned int AddFilterNumConditions" ?AddFilterNumConditions@@3IA
0x180006BF0: "There is a pending rule. Delete " ??_C@_0EG@BMIDNAJE@There?5is?5a?5pending?5rule?4?5Delete?5@
0x180006510: "%1!08lx!-%2!04x!-%3!04x!-%4!02x!" ??_C@_1KK@HLNGOEJ@?$AA?$CF?$AA1?$AA?$CB?$AA0?$AA8?$AAl?$AAx?$AA?$CB?$AA?9?$AA?$CF?$AA2?$AA?$CB?$AA0?$AA4?$AAx?$AA?$CB?$AA?9?$AA?$CF?$AA3?$AA?$CB?$AA0?$AA4?$AAx?$AA?$CB?$AA?9?$AA?$CF?$AA4?$AA?$CB?$AA0?$AA2?$AAx?$AA?$CB@
0x180006468: "WSAStartup" ??_C@_1BG@DFCNAPCP@?$AAW?$AAS?$AAA?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x180004380: "__cdecl callnewh" _callnewh
0x180006090: "FWP_MATCH_GREATER" ??_C@_1CE@MAONFPCM@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAG?$AAR?$AAE?$AAA?$AAT?$AAE?$AAR?$AA?$AA@
0x1800047FD: memcpy
0x180006628: "%1!02x!" ??_C@_1BA@JLILLBFL@?$AA?$CF?$AA1?$AA?$CB?$AA0?$AA2?$AAx?$AA?$CB?$AA?$AA@
0x1800061F8: "FWP_EMPTY" ??_C@_1BE@DKIPHNFN@?$AAF?$AAW?$AAP?$AA_?$AAE?$AAM?$AAP?$AAT?$AAY?$AA?$AA@
0x1800067B0: "--------------------------------" ??_C@_1EG@MBPKCJAB@?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9@
0x1800022CC: "unsigned long __cdecl NewRpcFilter(void)" ?NewRpcFilter@@YAKXZ
0x180005860: "__cdecl _imp_memset" __imp_memset
0x180006DE0: FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
0x18000457C: "__cdecl initterm" _initterm
0x180005760: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x180005EA0: "ep_flags" ??_C@_1BC@EJKCOINE@?$AAe?$AAp?$AA_?$AAf?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800063F0: "%08lx-%04hx-%04hx-%02hx%02hx-%02" ??_C@_1HI@IMMPLCME@?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAh?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAh?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?9?$AA?$CF?$AA0?$AA2@
0x180005D90: "sec_key_size" ??_C@_1BK@IGHBHGHE@?$AAs?$AAe?$AAc?$AA_?$AAk?$AAe?$AAy?$AA_?$AAs?$AAi?$AAz?$AAe?$AA?$AA@
0x180009A20: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180001FB0: "int __cdecl MapStrToGUID(unsigned short const * __ptr64,struct _GUID * __ptr64 * __ptr64,struct StrGUIDMap const * __ptr64,unsigned int)" ?MapStrToGUID@@YAHPEBGPEAPEAU_GUID@@PEBUStrGUIDMap@@I@Z
0x1800056C8: "__cdecl _imp_Sleep" __imp_Sleep
0x180006038: "all_set" ??_C@_1BA@NJLJHFKF@?$AAa?$AAl?$AAl?$AA_?$AAs?$AAe?$AAt?$AA?$AA@
0x1800058D0: "__cdecl _xi_z" __xi_z
0x180001A70: "unsigned long __cdecl HandleReset(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleReset@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180005B60: "%1!-9s!" ??_C@_1BA@HOHGFHJG@?$AA?$CF?$AA1?$AA?$CB?$AA?9?$AA9?$AAs?$AA?$CB?$AA?$AA@
0x1800056F8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180006AB8: "field" ??_C@_1M@DNMONOGI@?$AAf?$AAi?$AAe?$AAl?$AAd?$AA?$AA@
0x180004588: "__cdecl _C_specific_handler" __C_specific_handler
0x180006E40: FWPM_CONDITION_DCOM_APP_ID
0x180005C04: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x180006E90: FWPM_LAYER_RPC_PROXY_CONN
0x180006AB0: "all" ??_C@_17IIFKAHCJ@?$AAa?$AAl?$AAl?$AA?$AA@
0x180005C98: "remote_user_token" ??_C@_1CE@FEMEGKJ@?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA_?$AAu?$AAs?$AAe?$AAr?$AA_?$AAt?$AAo?$AAk?$AAe?$AAn?$AA?$AA@
0x180005F28: "client_cert_key_length" ??_C@_1CO@JBBFIFKJ@?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA_?$AAc?$AAe?$AAr?$AAt?$AA_?$AAk?$AAe?$AAy?$AA_?$AAl?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800089F0: "void * __ptr64 __ptr64 g_hModule" ?g_hModule@@3PEAXEA
0x180004374: malloc
0x1800057E8: "__cdecl _imp__wtoi" __imp__wtoi
0x180005B50: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800066B0: "%1!s!" ??_C@_1M@CDGNKJIC@?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?$AA@
0x180005650: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800057E0: fwpuclnt_NULL_THUNK_DATA
0x18000479C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180006300: "FWP_BYTE_ARRAY16_TYPE" ??_C@_1CM@GJMDPNNN@?$AAF?$AAW?$AAP?$AA_?$AAB?$AAY?$AAT?$AAE?$AA_?$AAA?$AAR?$AAR?$AAA?$AAY?$AA1?$AA6?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
0x180002034: "int __cdecl MapStrToUINT(unsigned short const * __ptr64,unsigned int * __ptr64,struct StrUINTMap const * __ptr64,unsigned int)" ?MapStrToUINT@@YAHPEBGPEAIPEBUStrUINTMap@@I@Z
0x180003994: "void __cdecl SqmSelectiveBindingUsage(void)" ?SqmSelectiveBindingUsage@@YAXXZ
0x1800069B0: " matchType: " ??_C@_1BK@HPBPDEOB@?$AA?7?$AAm?$AAa?$AAt?$AAc?$AAh?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?$AA@
0x180001F20: "void __cdecl PrintUuid(struct _GUID * __ptr64)" ?PrintUuid@@YAXPEAU_GUID@@@Z
0x180006ED0: FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
0x180005738: "__cdecl _imp_PrintMessageFromModule" __imp_PrintMessageFromModule
0x1800057B8: "__cdecl _imp_FwpmFilterEnum0" __imp_FwpmFilterEnum0
0x1800043A4: "__cdecl amsg_exit" _amsg_exit
0x180005820: "__cdecl _imp__callnewh" __imp__callnewh
0x180005CC0: "if_uuid" ??_C@_1BA@KCOBNJPP@?$AAi?$AAf?$AA_?$AAu?$AAu?$AAi?$AAd?$AA?$AA@
0x180005CF8: "dcom_app_id" ??_C@_1BI@EDLLCOEN@?$AAd?$AAc?$AAo?$AAm?$AA_?$AAa?$AAp?$AAp?$AA_?$AAi?$AAd?$AA?$AA@
0x180006DB0: FWPM_CONDITION_SEC_KEY_SIZE
0x1800059B0: "test" ??_C@_19BCDHFEBA@?$AAt?$AAe?$AAs?$AAt?$AA?$AA@
0x180005748: "__cdecl _imp_UuidCreateSequential" __imp_UuidCreateSequential
0x180006058: "none_set" ??_C@_1BC@PALKCDPD@?$AAn?$AAo?$AAn?$AAe?$AA_?$AAs?$AAe?$AAt?$AA?$AA@
0x180005D28: "protocol" ??_C@_1BC@CJFLOEF@?$AAp?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?$AA@
0x1800066D8: "RpcpFwpmEngineOpenLocal" ??_C@_0BI@MPMJAJNL@RpcpFwpmEngineOpenLocal?$AA@
0x180005730: "__cdecl _imp_PreprocessCommand" __imp_PreprocessCommand
0x180005FB0: "equal" ??_C@_1M@HLLIMHJO@?$AAe?$AAq?$AAu?$AAa?$AAl?$AA?$AA@
0x180006850: "displayData.description: %1!s! " ??_C@_1EA@KJKLPOKA@?$AAd?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?4?$AAd?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?6?$AA?$AA@
0x180005940: "add" ??_C@_17KBLNKNKL@?$AAa?$AAd?$AAd?$AA?$AA@
0x180003CC0: "long __cdecl FwGetAllRpcFiltersEnumNextFilter(struct FWPM_FILTER0_ * __ptr64 * __ptr64)" ?FwGetAllRpcFiltersEnumNextFilter@@YAJPEAPEAUFWPM_FILTER0_@@@Z
0x180006758: "Type: " ??_C@_1O@MCJBNJGJ@?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?$AA@
0x180003750: "unsigned long __cdecl HandleFilterRuleDelete(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterRuleDelete@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180006160: "FWP_MATCH_FLAGS_ALL_SET" ??_C@_1DA@JCKFKLKK@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAA?$AAL?$AAL?$AA_?$AAS?$AAE?$AAT?$AA?$AA@
0x180005698: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180006CE8: "System\CurrentControlSet\Service" ??_C@_0CO@FFNGBNK@System?2CurrentControlSet?2Service@
0x180009A10: "__cdecl _native_startup_lock" __native_startup_lock
0x180005F88: "permit" ??_C@_1O@GCOKHPD@?$AAp?$AAe?$AAr?$AAm?$AAi?$AAt?$AA?$AA@
0x180004570: DllMain
0x180005848: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1800068B8: "layerKey: " ??_C@_1BG@DAHPHBI@?$AAl?$AAa?$AAy?$AAe?$AAr?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AA?$AA@
0x180005858: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005880: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800099D8: "int g_SBSqmOptInKeyRead" ?g_SBSqmOptInKeyRead@@3HA
0x180006E10: FWPM_CONDITION_RPC_SERVER_PORT
0x180005700: KERNEL32_NULL_THUNK_DATA
0x180005C08: "%S" ??_C@_02KPKOKMHB@?$CFS?$AA@
0x180006B24: "2" ??_C@_13IEJJBAMJ@?$AA2?$AA?$AA@
0x1800056D0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006F00: FWPM_CONDITION_CLIENT_CERT_OID
0x180003DE4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180008240: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004778: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005B70: "Disabled" ??_C@_1BC@FGCJDNHA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180006E00: FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
0x180006A60: "UuidCreateNil failed: 0x%x " ??_C@_0BM@EOCOEND@UuidCreateNil?5failed?3?50x?$CFx?6?$AA@
0x180005CE8: "if_flag" ??_C@_1BA@PDGKOEJH@?$AAi?$AAf?$AA_?$AAf?$AAl?$AAa?$AAg?$AA?$AA@
0x1800075CC: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180005750: "__cdecl _imp_UuidCreateNil" __imp_UuidCreateNil
0x1800056B8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180006EC0: FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
0x1800099B8: "struct _GUID AddFilterKey" ?AddFilterKey@@3U_GUID@@A
0x180004460: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006258: "FWP_UINT64" ??_C@_1BG@PLJJHACG@?$AAF?$AAW?$AAP?$AA_?$AAU?$AAI?$AAN?$AAT?$AA6?$AA4?$AA?$AA@
0x180006488: "%ls" ??_C@_17CNPHIMPH@?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x180005A20: "Add List " ??_C@_1BE@KJIILFKH@?$AAA?$AAd?$AAd?$AA?5?$AAL?$AAi?$AAs?$AAt?$AA?6?$AA?$AA@
0x180005F58: "client_cert_oid" ??_C@_1CA@JNOCGOJL@?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA_?$AAc?$AAe?$AAr?$AAt?$AA_?$AAo?$AAi?$AAd?$AA?$AA@
0x1800067F8: "filterKey: " ??_C@_1BI@GOKLOEMB@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AA?$AA@
0x180002E30: "unsigned long __cdecl HandleFilterAdd(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterAdd@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180006890: "filterId: 0x%1!x! " ??_C@_1CG@NCFDKCOK@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAI?$AAd?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AA1?$AA?$CB?$AAx?$AA?$CB?$AA?6?$AA?$AA@
0x180006D48: "Linkage" ??_C@_07PAFFAEFF@Linkage?$AA@
0x180006228: "FWP_UINT16" ??_C@_1BG@EMJFIIBF@?$AAF?$AAW?$AAP?$AA_?$AAU?$AAI?$AAN?$AAT?$AA1?$AA6?$AA?$AA@
0x180006B58: "actiontype" ??_C@_1BG@PEDFMHHL@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x1800057A8: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x180003BFC: "unsigned long __cdecl GetSelectiveBindingIndices(unsigned long,void * __ptr64,unsigned long * __ptr64,struct VER_INDICES_SETTINGS * __ptr64 * __ptr64)" ?GetSelectiveBindingIndices@@YAKKPEAXPEAKPEAPEAUVER_INDICES_SETTINGS@@@Z
0x1800060B8: "FWP_MATCH_LESS" ??_C@_1BO@LCAGKHMD@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAL?$AAE?$AAS?$AAS?$AA?$AA@
0x1800057C0: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1800040B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005800: "__cdecl _imp__initterm" __imp__initterm
0x1800066C0: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x180005C28: "interfaces" ??_C@_1BG@IBNEPCPD@?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAs?$AA?$AA@
0x180006CB8: "Filter Added " ??_C@_0O@MJHFMCEL@Filter?5Added?6?$AA@
0x1800075E0: "__cdecl _IMPORT_DESCRIPTOR_IPHLPAPI" __IMPORT_DESCRIPTOR_IPHLPAPI
0x180005DB0: "local_addr_v4" ??_C@_1BM@FHNILCBB@?$AAl?$AAo?$AAc?$AAa?$AAl?$AA_?$AAa?$AAd?$AAd?$AAr?$AA_?$AAv?$AA4?$AA?$AA@
0x180005988: "condition" ??_C@_1BE@EKCHDLNH@?$AAc?$AAo?$AAn?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180005E18: "remote_addr_v4" ??_C@_1BO@JOABCDBM@?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA_?$AAa?$AAd?$AAd?$AAr?$AA_?$AAv?$AA4?$AA?$AA@
0x180006B88: "audit" ??_C@_1M@LILKJADD@?$AAa?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
0x180001770: "unsigned long __cdecl HandleAddOrDelete(unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,int)" ?HandleAddOrDelete@@YAKPEAPEAGKKH@Z
0x180006AE0: "data" ??_C@_19MLBBEMBH@?$AAd?$AAa?$AAt?$AAa?$AA?$AA@
0x180009A00: "__cdecl _onexitend" __onexitend
0x180006780: "Empty" ??_C@_1M@CCCHEHOB@?$AAE?$AAm?$AAp?$AAt?$AAy?$AA?$AA@
0x180005790: "__cdecl _imp_inet_pton" __imp_inet_pton
0x1800058A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180008A04: "unsigned int AddFilterActionType" ?AddFilterActionType@@3IA
0x180005658: "__cdecl _imp_RegGetValueA" __imp_RegGetValueA
0x1800056E8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180006BB0: "enable" ??_C@_1O@DIHMNIPC@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1800057B0: "__cdecl _imp_FwpmFilterCreateEnumHandle0" __imp_FwpmFilterCreateEnumHandle0
0x180005840: "__cdecl _imp_swscanf" __imp_swscanf
0x180006270: "FWP_INT8" ??_C@_1BC@IMGJKELM@?$AAF?$AAW?$AAP?$AA_?$AAI?$AAN?$AAT?$AA8?$AA?$AA@
0x1800062D0: "FWP_FLOAT" ??_C@_1BE@KGDJKMOB@?$AAF?$AAW?$AAP?$AA_?$AAF?$AAL?$AAO?$AAA?$AAT?$AA?$AA@
0x1800058C0: "__cdecl _xi_a" __xi_a
0x180006140: "FWP_MATCH_RANGE" ??_C@_1CA@JHJEFCCA@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAR?$AAA?$AAN?$AAG?$AAE?$AA?$AA@
0x1800056A0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180006CC8: "NewRpcfilter failed 0x%x " ??_C@_0BK@HPPPKBEL@NewRpcfilter?5failed?50x?$CFx?6?$AA@
0x180006968: "filterCondition[%1!d!] " ??_C@_1DA@KBIMFPIN@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$FL?$AA?$CF?$AA1?$AA?$CB?$AAd?$AA?$CB?$AA?$FN?$AA?6?$AA?$AA@
0x180006028: "range" ??_C@_1M@KOBGMDOP@?$AAr?$AAa?$AAn?$AAg?$AAe?$AA?$AA@
0x1800060D8: "FWP_MATCH_GREATER_OR_EQUAL" ??_C@_1DG@IIDHEIE@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAG?$AAR?$AAE?$AAA?$AAT?$AAE?$AAR?$AA_?$AAO?$AAR?$AA_?$AAE?$AAQ?$AAU?$AAA?$AAL?$AA?$AA@
0x180006110: "FWP_MATCH_LESS_OR_EQUAL" ??_C@_1DA@BOMJJEML@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAL?$AAE?$AAS?$AAS?$AA_?$AAO?$AAR?$AA_?$AAE?$AAQ?$AAU?$AAA?$AAL?$AA?$AA@
0x180006D60: FWPM_CONDITION_RPC_IF_UUID
0x180005948: "delete" ??_C@_1O@MEFPJPNF@?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180005B38: "%1!-16S!" ??_C@_1BC@PONKHPFB@?$AA?$CF?$AA1?$AA?$CB?$AA?9?$AA1?$AA6?$AAS?$AA?$CB?$AA?$AA@
0x180005690: IPHLPAPI_NULL_THUNK_DATA
0x180006C68: " Conditon tuple is missing one o" ??_C@_0CP@MLKEHEGL@?5Conditon?5tuple?5is?5missing?5one?5o@
0x180005758: "__cdecl _imp_UuidIsNil" __imp_UuidIsNil
0x1800066A8: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x180008270: "struct FWPM_FILTER_ENUM_TEMPLATE0_ const * const FwpmRpcFilterEnumTemplates" ?FwpmRpcFilterEnumTemplates@@3QBUFWPM_FILTER_ENUM_TEMPLATE0_@@B
0x180006810: "displayData.name: %1!s! " ??_C@_1DC@IEPKCACE@?$AAd?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?4?$AAn?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?6?$AA?$AA@
0x180005FC0: "greater" ??_C@_1BA@ODDMKLHC@?$AAg?$AAr?$AAe?$AAa?$AAt?$AAe?$AAr?$AA?$AA@
0x180006908: "Audit: Enable " ??_C@_1BO@PELELBDL@?$AAA?$AAu?$AAd?$AAi?$AAt?$AA?3?$AA?5?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?6?$AA?$AA@
0x180001440: "unsigned long __cdecl HandleShowInterfaces(void)" ?HandleShowInterfaces@@YAKXZ
0x180009A28: "__cdecl pRawDllMain" _pRawDllMain
0x180005EB8: "client_token" ??_C@_1BK@OPLBBDCB@?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA_?$AAt?$AAo?$AAk?$AAe?$AAn?$AA?$AA@
0x1800065C0: "%1!08lx! %2!08lx! %3!08lx! %4!08" ??_C@_1EI@FELBHPBH@?$AA?$CF?$AA1?$AA?$CB?$AA0?$AA8?$AAl?$AAx?$AA?$CB?$AA?5?$AA?$CF?$AA2?$AA?$CB?$AA0?$AA8?$AAl?$AAx?$AA?$CB?$AA?5?$AA?$CF?$AA3?$AA?$CB?$AA0?$AA8?$AAl?$AAx?$AA?$CB?$AA?5?$AA?$CF?$AA4?$AA?$CB?$AA0?$AA8@
0x180006AF0: "ncacn_ip_tcp" ??_C@_1BK@BPGFLIHL@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAi?$AAp?$AA_?$AAt?$AAc?$AAp?$AA?$AA@
0x180006D80: FWPM_CONDITION_RPC_SERVER_NAME
0x180003E24: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180001A30: "unsigned long __cdecl HandleAdd(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleAdd@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180005850: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180004350: "__cdecl _security_check_cookie" __security_check_cookie
0x1800037D0: "unsigned long __cdecl HandleFilterTestAdd(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterTestAdd@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x1800058B8: "__cdecl _xc_z" __xc_z
0x180006A20: "FwGetAllRpcFiltersEnumBegin" ??_C@_0BM@LIDCLBPO@FwGetAllRpcFiltersEnumBegin?$AA@
0x180006210: "FWP_UINT8" ??_C@_1BE@NFNHIDKE@?$AAF?$AAW?$AAP?$AA_?$AAU?$AAI?$AAN?$AAT?$AA8?$AA?$AA@
0x180008140: "struct _CMD_ENTRY * g_FilterShowCmdTable" ?g_FilterShowCmdTable@@3PAU_CMD_ENTRY@@A
0x180006608: "%1!ls!" ??_C@_1O@FKOMIAMI@?$AA?$CF?$AA1?$AA?$CB?$AAl?$AAs?$AA?$CB?$AA?$AA@
0x18000761C: "__cdecl _IMPORT_DESCRIPTOR_fwpuclnt" __IMPORT_DESCRIPTOR_fwpuclnt
0x180001DB8: "unsigned long __cdecl ReadByteBlob(unsigned short * __ptr64,struct FWP_BYTE_BLOB_ * __ptr64)" ?ReadByteBlob@@YAKPEAGPEAUFWP_BYTE_BLOB_@@@Z
0x180006B10: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x180005708: "__cdecl _imp_RegisterContext" __imp_RegisterContext
0x1800057D0: "__cdecl _imp_FwpmFilterDestroyEnumHandle0" __imp_FwpmFilterDestroyEnumHandle0
0x1800056A8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180002FC0: "unsigned long __cdecl HandleFilterShow(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleFilterShow@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180006640: "ConvertSecurityDescriptorToStrin" ??_C@_1GI@BILPBONK@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn@
0x180006E50: FWPM_CONDITION_RPC_IF_VERSION
0x180005890: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x180006DF0: FWPM_CONDITION_IP_LOCAL_PORT
0x180006E60: FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
0x180005788: "__cdecl _imp_inet_ntoa" __imp_inet_ntoa
0x1800064A0: "ConvertStringSecurityDescriptorT" ??_C@_1GI@BKPKPFDB@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AAT@
0x180008A08: "struct _GUID * __ptr64 __ptr64 AddFilterLayer" ?AddFilterLayer@@3PEAU_GUID@@EA
0x180006240: "FWP_UINT32" ??_C@_1BG@IODPLOEJ@?$AAF?$AAW?$AAP?$AA_?$AAU?$AAI?$AAN?$AAT?$AA3?$AA2?$AA?$AA@
0x180006F20: FWPM_LAYER_RPC_EPMAP
0x180005780: "__cdecl _imp_WSAGetLastError" __imp_WSAGetLastError
0x1800056D8: "__cdecl _imp_GetModuleHandleA" __imp_GetModuleHandleA
0x1800067A0: "%1!d!" ??_C@_1M@DNLOJLKB@?$AA?$CF?$AA1?$AA?$CB?$AAd?$AA?$CB?$AA?$AA@
0x180005E08: "pipe" ??_C@_19CCECKDHB@?$AAp?$AAi?$AAp?$AAe?$AA?$AA@
0x180005A58: "%1!S! " ??_C@_1O@DAHEEANK@?$AA?$CF?$AA1?$AA?$CB?$AAS?$AA?$CB?$AA?6?$AA?$AA@
0x1800058D8: "__cdecl _guard_fids_table" __guard_fids_table
0x180002D68: "unsigned long __cdecl ValidateFilterCommands(void)" ?ValidateFilterCommands@@YAKXZ
0x180005868: msvcrt_NULL_THUNK_DATA
0x180005530: "__cdecl load_config_used" _load_config_used
0x180006288: "FWP_INT16" ??_C@_1BE@GLIEPMJJ@?$AAF?$AAW?$AAP?$AA_?$AAI?$AAN?$AAT?$AA1?$AA6?$AA?$AA@
0x180005838: "__cdecl _imp_printf" __imp_printf
0x180005C58: "ep_add" ??_C@_1O@HBAPLGHA@?$AAe?$AAp?$AA_?$AAa?$AAd?$AAd?$AA?$AA@
0x1800081F0: "struct _CMD_ENTRY * g_FilterDeleteCmdTable" ?g_FilterDeleteCmdTable@@3PAU_CMD_ENTRY@@A
0x180005740: NETSH_NULL_THUNK_DATA
0x1800062A0: "FWP_INT32" ??_C@_1BE@KJCOMKMF@?$AAF?$AAW?$AAP?$AA_?$AAI?$AAN?$AAT?$AA3?$AA2?$AA?$AA@
0x1800061C0: "FWP_MATCH_FLAGS_NONE_SET" ??_C@_1DC@OBBHPMOF@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAF?$AAL?$AAA?$AAG?$AAS?$AA_?$AAN?$AAO?$AAN?$AAE?$AA_?$AAS?$AAE?$AAT?$AA?$AA@
0x180006A80: "FilterKey: " ??_C@_1BI@JAHNBKLL@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AA?$AA@
0x180005688: "__cdecl _imp_GetIpAddrTable" __imp_GetIpAddrTable
0x180005808: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180006720: "RpcpFwpmFilterAdd" ??_C@_0BC@PAECBICG@RpcpFwpmFilterAdd?$AA@
0x180005718: "__cdecl _imp_MatchToken" __imp_MatchToken
0x18000126C: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180005ED8: "server_name" ??_C@_1BI@FAKMJOP@?$AAs?$AAe?$AAr?$AAv?$AAe?$AAr?$AA_?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x1800068E8: "action.type: " ??_C@_1BM@FAOENFC@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAt?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?$AA@
0x180005878: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800056C0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005CD0: "if_version" ??_C@_1BG@MOGDMEGF@?$AAi?$AAf?$AA_?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180006B48: "layer" ??_C@_1M@LNEHALBC@?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x180006008: "less_or_equal" ??_C@_1BM@OKEOBDFL@?$AAl?$AAe?$AAs?$AAs?$AA_?$AAo?$AAr?$AA_?$AAe?$AAq?$AAu?$AAa?$AAl?$AA?$AA@
0x180006EB0: FWPM_CONDITION_REMOTE_USER_TOKEN
0x180006B98: "volatile" ??_C@_1BC@LOEMJKMD@?$AAv?$AAo?$AAl?$AAa?$AAt?$AAi?$AAl?$AAe?$AA?$AA@
0x18000438C: free
0x180006330: "FWP_BYTE_BLOB_TYPE" ??_C@_1CG@CLINFEBF@?$AAF?$AAW?$AAP?$AA_?$AAB?$AAY?$AAT?$AAE?$AA_?$AAB?$AAL?$AAO?$AAB?$AA_?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
0x180005870: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800045A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180005E38: "remote_addr_v6" ??_C@_1BO@DEAIOLJH@?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA_?$AAa?$AAd?$AAd?$AAr?$AA_?$AAv?$AA6?$AA?$AA@
0x180005830: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180005DF0: "local_port" ??_C@_1BG@IMOILEPE@?$AAl?$AAo?$AAc?$AAa?$AAl?$AA_?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x180005DD0: "local_addr_v6" ??_C@_1BM@PNNBHKJK@?$AAl?$AAo?$AAc?$AAa?$AAl?$AA_?$AAa?$AAd?$AAd?$AAr?$AA_?$AAv?$AA6?$AA?$AA@
0x180005C80: "proxy_if" ??_C@_1BC@EGKJEHCA@?$AAp?$AAr?$AAo?$AAx?$AAy?$AA_?$AAi?$AAf?$AA?$AA@
0x180006D20: "System\CurrentControlSet\Service" ??_C@_0CG@MAPKJADB@System?2CurrentControlSet?2Service@
0x1800099B0: "void * __ptr64 __ptr64 gFwpEngineHandle" ?gFwpEngineHandle@@3PEAXEA
0x180006618: "%1!S!" ??_C@_1M@CEMBKMLE@?$AA?$CF?$AA1?$AA?$CB?$AAS?$AA?$CB?$AA?$AA@
0x180005638: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180001B98: "unsigned long __cdecl ReadUuid(unsigned short * __ptr64,struct _GUID * __ptr64)" ?ReadUuid@@YAKPEAGPEAU_GUID@@@Z
0x180006F10: FWPM_LAYER_RPC_EP_ADD
0x1800062E8: "FWP_DOUBLE" ??_C@_1BG@PDLJKDDB@?$AAF?$AAW?$AAP?$AA_?$AAD?$AAO?$AAU?$AAB?$AAL?$AAE?$AA?$AA@
0x1800075A4: "__cdecl _IMPORT_DESCRIPTOR_NETSH" __IMPORT_DESCRIPTOR_NETSH
0x180008A00: "int g_NetshSqmEnabled" ?g_NetshSqmEnabled@@3HA
0x180006B70: "persistence" ??_C@_1BI@PBKKMEED@?$AAp?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x180005810: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180006768: " Value: " ??_C@_1BC@OPFIANCC@?$AA?5?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AA?$AA@
0x180005720: "__cdecl _imp_PrintMessage" __imp_PrintMessage
0x180005898: ntdll_NULL_THUNK_DATA
0x1800057F8: "__cdecl _imp_memcpy" __imp_memcpy
0x180006070: "FWP_MATCH_EQUAL" ??_C@_1CA@ECDKFGFB@?$AAF?$AAW?$AAP?$AA_?$AAM?$AAA?$AAT?$AAC?$AAH?$AA_?$AAE?$AAQ?$AAU?$AAA?$AAL?$AA?$AA@
0x180006E20: FWPM_CONDITION_CLIENT_TOKEN
0x180005710: "__cdecl _imp_RegisterHelper" __imp_RegisterHelper
0x180006F40: FWPM_CONDITION_RPC_EP_FLAGS
0x180006AC8: "matchtype" ??_C@_1BE@PPDEAGEA@?$AAm?$AAa?$AAt?$AAc?$AAh?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x180005AC0: " Subnet Interface " ??_C@_1HC@KNOONKFA@?$AA?6?$AAS?$AAu?$AAb?$AAn?$AAe?$AAt?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800075B8: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x180002D18: "void __cdecl ResetFilterGlobalState(void)" ?ResetFilterGlobalState@@YAXXZ
0x180006DA0: FWPM_CONDITION_RPC_AUTH_LEVEL
0x180005640: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1800066D0: "%hd" ??_C@_17HLKIKBMH@?$AA?$CF?$AAh?$AAd?$AA?$AA@
0x180008248: "__cdecl _security_cookie" __security_cookie
0x1800069D0: " conditionValue: " ??_C@_1CE@JNKGJBML@?$AA?7?$AAc?$AAo?$AAn?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AA?$AA@
0x180005798: WS2_32_NULL_THUNK_DATA
0x1800059D0: "rpc" ??_C@_17FGBJODFH@?$AAr?$AAp?$AAc?$AA?$AA@
0x180005C48: "epmap" ??_C@_1M@CBOLGOBJ@?$AAe?$AAp?$AAm?$AAa?$AAp?$AA?$AA@
0x180006C98: "ParseConditionAdd failed 0x%x " ??_C@_0BP@MCCKOJF@ParseConditionAdd?5failed?50x?$CFx?6?$AA@
0x180005F78: "block" ??_C@_1M@OABEJABI@?$AAb?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x180001CD0: "unsigned long __cdecl ReadIpv6Addr(unsigned short * __ptr64,unsigned char * __ptr64)" ?ReadIpv6Addr@@YAKPEAGPEAE@Z
0x1800056F0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800099D4: "int g_SBSqmEnabled" ?g_SBSqmEnabled@@3HA
0x180006490: "%02hx" ??_C@_1M@OBIPEGAE@?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$AA@
0x180005660: "__cdecl _imp_RegCreateKeyExA" __imp_RegCreateKeyExA
0x1800059A0: "rule" ??_C@_19HJLHJFMI@?$AAr?$AAu?$AAl?$AAe?$AA?$AA@
0x180009A08: "__cdecl _onexitbegin" __onexitbegin
0x180005E88: "ep_value" ??_C@_1BC@BACNDAJK@?$AAe?$AAp?$AA_?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1800099CC: "int AuditEnabled" ?AuditEnabled@@3HA
0x180005FD0: "less" ??_C@_19LLJJKNLF@?$AAl?$AAe?$AAs?$AAs?$AA?$AA@
0x1800012F0: "int __cdecl CheckServerOrGreater(unsigned int,unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned long)" ?CheckServerOrGreater@@YAHIIPEBG000IK@Z
0x180001A50: "unsigned long __cdecl HandleDelete(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleDelete@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180005888: "__cdecl _imp_WinSqmIncrementDWORD" __imp_WinSqmIncrementDWORD
0x180005F98: "continue" ??_C@_1BC@PNIMKJGP@?$AAc?$AAo?$AAn?$AAt?$AAi?$AAn?$AAu?$AAe?$AA?$AA@
0x1800056E0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180008260: "unsigned int AddFilterFlags" ?AddFilterFlags@@3IA
0x180005670: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x1800075F4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800080A0: "struct _CMD_ENTRY * g_FilterAddCmdTable" ?g_FilterAddCmdTable@@3PAU_CMD_ENTRY@@A
0x180005978: "filter" ??_C@_1O@JFGOJJFE@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1800057C8: "__cdecl _imp_FwpmFreeMemory0" __imp_FwpmFreeMemory0
0x180006738: "RpcpFwpmEngineCloseLocal" ??_C@_0BJ@CBKCAGDF@RpcpFwpmEngineCloseLocal?$AA@
0x180006998: " fieldKey: " ??_C@_1BI@CAFOLAGF@?$AA?7?$AAf?$AAi?$AAe?$AAl?$AAd?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AA?$AA@
0x180006480: "%hs" ??_C@_17LGGGMOOB@?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180004494: "__cdecl _security_init_cookie" __security_init_cookie
0x180005968: "show" ??_C@_19NEPDHLG@?$AAs?$AAh?$AAo?$AAw?$AA?$AA@
0x180006D90: FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
0x18000757C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180006E80: FWPM_LAYER_RPC_PROXY_IF
0x180006A98: "filterkey" ??_C@_1BE@KIKHDILJ@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAk?$AAe?$AAy?$AA?$AA@
0x180006BC0: "UuidCreateSequential" ??_C@_1CK@GBECBIKD@?$AAU?$AAu?$AAi?$AAd?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AA?$AA@
0x180008170: "struct _CMD_GROUP_ENTRY * g_FilterCmdGroups" ?g_FilterCmdGroups@@3PAU_CMD_GROUP_ENTRY@@A
0x180005680: "__cdecl _imp_GetIfEntry" __imp_GetIfEntry
0x180006B28: "ncacn_http" ??_C@_1BG@FOAHFCPJ@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAh?$AAt?$AAt?$AAp?$AA?$AA@
0x180005828: "__cdecl _imp_malloc" __imp_malloc
0x180005678: ADVAPI32_NULL_THUNK_DATA
0x180002660: "void __cdecl PrintFilter(struct FWPM_FILTER0_ * __ptr64)" ?PrintFilter@@YAXPEAUFWPM_FILTER0_@@@Z
0x1800057A0: "__cdecl _imp_FwpmFilterDeleteByKey0" __imp_FwpmFilterDeleteByKey0
0x180007608: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180001B20: "unsigned long __cdecl HandleShow(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,void const * __ptr64,int * __ptr64)" ?HandleShow@@YAKPEBGPEAPEAGKKKPEBXPEAH@Z
0x180005D70: "sec_encrypt_alg" ??_C@_1CA@EEBOHLEM@?$AAs?$AAe?$AAc?$AA_?$AAe?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AA_?$AAa?$AAl?$AAg?$AA?$AA@
0x180006048: "any_set" ??_C@_1BA@KMGMCLOE@?$AAa?$AAn?$AAy?$AA_?$AAs?$AAe?$AAt?$AA?$AA@
0x180006D18: "Bind" ??_C@_04BOBIPDML@Bind?$AA@
0x180005D58: "auth_level" ??_C@_1BG@EGAKJOOJ@?$AAa?$AAu?$AAt?$AAh?$AA_?$AAl?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180005768: RPCRT4_NULL_THUNK_DATA
0x1800020B4: "unsigned long __cdecl StringValueOfDataTypeToValue(enum FWP_DATA_TYPE_,unsigned short * __ptr64,struct FWP_VALUE0_ * __ptr64)" ?StringValueOfDataTypeToValue@@YAKW4FWP_DATA_TYPE_@@PEAGPEAUFWP_VALUE0_@@@Z
0x1800045F0: "__cdecl _report_gsfailure" __report_gsfailure
0x180005A70: "Unknown selective binding format" ??_C@_1EE@FBDJGGNN@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAb?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt@
0x180009A18: "__cdecl _native_startup_state" __native_startup_state
0x180006E30: FWPM_SUBLAYER_RPC_AUDIT
0x180001130: "unsigned long __cdecl StartRpcHelper(struct _GUID const * __ptr64,unsigned long)" ?StartRpcHelper@@YAKPEBU_GUID@@K@Z
0x180005958: "reset" ??_C@_1M@OFCONGJO@?$AAr?$AAe?$AAs?$AAe?$AAt?$AA?$AA@
0x180006A40: "RpcpFwpmFilterDeleteByKey" ??_C@_0BK@IGLAKPDE@RpcpFwpmFilterDeleteByKey?$AA@
0x180005E58: "process_with_if_uuid" ??_C@_1CK@IGCAKNBG@?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA_?$AAw?$AAi?$AAt?$AAh?$AA_?$AAi?$AAf?$AA_?$AAu?$AAu?$AAi?$AAd?$AA?$AA@
0x180005D10: "image_name" ??_C@_1BG@MDHEOLEC@?$AAi?$AAm?$AAa?$AAg?$AAe?$AA_?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x1800066F0: "RPCFilter" ??_C@_1BE@KAMBAAJ@?$AAR?$AAP?$AAC?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x180005C68: "proxy_conn" ??_C@_1BG@NEPHLCIG@?$AAp?$AAr?$AAo?$AAx?$AAy?$AA_?$AAc?$AAo?$AAn?$AAn?$AA?$AA@
0x180006C38: "Not enough paramters " ??_C@_0BG@IMJBPFCN@Not?5enough?5paramters?6?$AA@
0x1800062B8: "FWP_INT64" ??_C@_1BE@NMIIAEKK@?$AAF?$AAW?$AAP?$AA_?$AAI?$AAN?$AAT?$AA6?$AA4?$AA?$AA@
0x180006F30: FWPM_LAYER_RPC_UM
0x180006DD0: FWPM_CONDITION_PIPE
0x1800059C0: "rpcnsh.dll" ??_C@_0L@BPOHIPAO@rpcnsh?4dll?$AA@
0x180005B88: " %1!S! " ??_C@_1BA@BKELAJDF@?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAS?$AA?$CB?$AA?6?$AA?$AA@
0x180005A08: "Default " ??_C@_1BC@MFBLHHCG@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?6?$AA?$AA@
0x180005818: "__cdecl _imp_free" __imp_free
0x180005EF0: "server_port" ??_C@_1BI@DDMCOKDC@?$AAs?$AAe?$AAr?$AAv?$AAe?$AAr?$AA_?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x180004400: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006928: "numFilterConditions: %1!d! " ??_C@_1DK@HBCKDBGK@?$AAn?$AAu?$AAm?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAd?$AA?$CB?$AA?6?$AA?6?$AA?$AA@
0x180005770: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x1800011D0: "unsigned long __cdecl StartFilterHelper(struct _GUID const * __ptr64,unsigned long)" ?StartFilterHelper@@YAKPEBU_GUID@@K@Z
0x1800068D0: "weight: " ??_C@_1BC@GCACFLPK@?$AAw?$AAe?$AAi?$AAg?$AAh?$AAt?$AA?3?$AA?5?$AA?$AA@
0x180004809: memset
0x180007630: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]