Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\WdNisDrv.sys Base=0x1C0000000 SHA-256=1470438EE0996C2614CB879415884DB610B219D965AED45D1DB8B2F84863B20B
PDB: wdnisdrv.pdb GUID={3DB47323-90E1-CF98-D1EB77FA0CE656EE} Age=1

321 located named symbols:
0x1C0004FD0: "private: static void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::stream_delete(unsigned short,unsigned int,unsigned __int64)" ?stream_delete@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@CAXGI_K@Z
0x1C0007554: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C0001100: "public: __cdecl running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t>::running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t>(void) __ptr64" ??0?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@QEAA@XZ
0x1C000B090: "__cdecl _imp_FwpsFlowAssociateContext0" __imp_FwpsFlowAssociateContext0
0x1C0007250: "windefend_flow_established_v4" ??_C@_1DM@DNCHCBF@?$AAw?$AAi?$AAn?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AA_?$AAf?$AAl?$AAo?$AAw?$AA_?$AAe?$AAs?$AAt?$AAa?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAd?$AA_?$AAv?$AA4?$AA?$AA@
0x1C000CAE0: SepSddlGetAclForString
0x1C000B210: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0009220: "private: static class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> > * __ptr64 __ptr64 wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::_current" ?_current@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@0PEAV1@EA
0x1C000B028: "__cdecl _imp_FwpmSubLayerDeleteByKey0" __imp_FwpmSubLayerDeleteByKey0
0x1C0009088: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000B130: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0009210: PfnIoCreateDeviceSecure
0x1C00016E0: "public: unsigned __int64 __cdecl running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t>::lookup(unsigned int)const __ptr64" ?lookup@?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@QEBA_KI@Z
0x1C000B088: "__cdecl _imp_FwpsFlowRemoveContext0" __imp_FwpsFlowRemoveContext0
0x1C000B140: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00053D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C000B180: "__cdecl _imp_PsGetProcessCreateTimeQuadPart" __imp_PsGetProcessCreateTimeQuadPart
0x1C000B070: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C000B188: "__cdecl _imp_ZwOpenProcess" __imp_ZwOpenProcess
0x1C000B198: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C000B1A0: "__cdecl _imp_IoDeviceObjectType" __imp_IoDeviceObjectType
0x1C0001890: "public: void __cdecl csqueue<class implementation::csqueue,class implementation::irp>::push_back(class irp<class implementation::irp>) __ptr64" ?push_back@?$csqueue@V0implementation@@Virp@1@@@QEAAXV?$irp@V0implementation@@@@@Z
0x1C000755C: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C000B2C8: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0009228: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUhnzighxivvmUhixUxorvmgUmvgdlipPurogviPwireviUhixUlyquivUznwGEUhgwzucOlyq@wdnisdrv" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUhnzighxivvmUhixUxorvmgUmvgdlipPurogviPwireviUhixUlyquivUznwGEUhgwzucOlyq@wdnisdrv
0x1C000B150: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C000C230: IoDevObjCreateDeviceSecure
0x1C000B1C0: "__cdecl _imp_wcschr" __imp_wcschr
0x1C000B110: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C000B308: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000922C: PiRegStateDiscriptor
0x1C000B2A0: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x1C000B1F8: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1C000B1C8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C000C3D0: IopDevObjApplyPostCreationSettings
0x1C000B240: "__cdecl _imp_IoCsqRemoveNextIrp" __imp_IoCsqRemoveNextIrp
0x1C000B190: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000B2E0: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C00074E8: SDDL_DEVOBJ_KERNEL_ONLY_buffer
0x1C000B278: "__cdecl _imp_ExNotifyCallback" __imp_ExNotifyCallback
0x1C000757C: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C000B280: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000B0F0: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C000D8C4: CmRegUtilUcValueGetDword
0x1C0005400: memcpy
0x1C00018D0: "public: bool __cdecl irp<class implementation::irp>::output_buffer<struct network_filter::ioctl::data::get_stream_data>(unsigned __int64,struct irp_buffer<struct network_filter::ioctl::data::get_stream_data> & __ptr64) __ptr64" ??$output_buffer@Uget_stream_data@data@ioctl@network_filter@@@?$irp@V0implementation@@@@QEAA_N_KAEAU?$irp_buffer@Uget_stream_data@data@ioctl@network_filter@@@@@Z
0x1C00074C8: FWPM_CONDITION_IP_PROTOCOL
0x1C000C9F0: SepSddlDaclFromSDDLString
0x1C000B228: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C000B270: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C000B1B8: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C00017B0: "public: class queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl> __cdecl queue<class implementation::queue,class implementation::spin_lock,struct network_filter::ioctl::data::get_stream_data>::pop_front(void) __ptr64" ?pop_front@?$queue@V0implementation@@Vspin_lock@1@Uget_stream_data@data@ioctl@network_filter@@@@QEAA?AV?$queue_element@Uget_stream_data@data@ioctl@network_filter@@Velement_impl@?$queue@Uget_stream_data@data@ioctl@network_filter@@@implementation@@@@XZ
0x1C000B2A8: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x1C0001960: "public: unsigned int __cdecl network_filter::ioctl::data::get_stream_data::additional_size(void)const __ptr64" ?additional_size@get_stream_data@data@ioctl@network_filter@@QEBAIXZ
0x1C0005400: memmove
0x1C000C580: SepSddlSecurityDescriptorFromSDDLString
0x1C000B0F8: "__cdecl _imp_IoCsqInitialize" __imp_IoCsqInitialize
0x1C000B158: "__cdecl _imp_ExUnregisterCallback" __imp_ExUnregisterCallback
0x1C0007420: "IoCreateDeviceSecure" ??_C@_1CK@LEEDIGFP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1C000535C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000B0D0: fwpkclnt_NULL_THUNK_DATA
0x1C000B020: NDIS_NULL_THUNK_DATA
0x1C000C0C0: MpGetProcessCreationTimeById
0x1C000499C: "public: long __cdecl implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000>::get_stream_segment(class irp<class implementation::irp>) __ptr64" ?get_stream_segment@?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@QEAAJV?$irp@V0implementation@@@@@Z
0x1C000B298: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x1C000B0E0: "__cdecl _imp_PsInitialSystemProcess" __imp_PsInitialSystemProcess
0x1C00015C0: "public: void __cdecl shared_ptr<class excluded_paths>::shared_ptr_impl::release(void) __ptr64" ?release@shared_ptr_impl@?$shared_ptr@Vexcluded_paths@@@@QEAAXXZ
0x1C000D024: SepSddlParseWideStringUlong
0x1C00071E0: "windefend_flow_established_v6" ??_C@_1DM@KJNLLKJO@?$AAw?$AAi?$AAn?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AA_?$AAf?$AAl?$AAo?$AAw?$AA_?$AAe?$AAs?$AAt?$AAa?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAd?$AA_?$AAv?$AA6?$AA?$AA@
0x1C0004CF4: "private: void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::remove_context(struct wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::flow_descriptor) __ptr64" ?remove_context@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@AEAAXUflow_descriptor@1@@Z
0x1C000B008: "__cdecl _imp_NdisFreeGenericObject" __imp_NdisFreeGenericObject
0x1C000758C: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C000C670: WdmlibInit
0x1C0007564: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C000B268: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C0001470: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_191815f94bde95af63e53433f529f31d>@@CA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x1C000B2F0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000B1E0: "__cdecl _imp__snwprintf" __imp__snwprintf
0x1C00019F0: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_38e341b8724e1d49278b8413f4a52724>@@CAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x1C0005E6C: "public: long __cdecl net_buffer_list_pool::allocate(unsigned long,class net_buffer_list & __ptr64) __ptr64" ?allocate@net_buffer_list_pool@@QEAAJKAEAVnet_buffer_list@@@Z
0x1C0007594: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C00072C0: "windefend_stream_v6" ??_C@_1CI@IPANLJFG@?$AAw?$AAi?$AAn?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AA_?$AAs?$AAt?$AAr?$AAe?$AAa?$AAm?$AA_?$AAv?$AA6?$AA?$AA@
0x1C000B1E8: "__cdecl _imp_SeCaptureSecurityDescriptor" __imp_SeCaptureSecurityDescriptor
0x1C00016B0: "public: __cdecl queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl>::~queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl>(void) __ptr64" ??1?$queue_element@Uget_stream_data@data@ioctl@network_filter@@Velement_impl@?$queue@Uget_stream_data@data@ioctl@network_filter@@@implementation@@@@QEAA@XZ
0x1C0004310: "public: void * __ptr64 __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::flow_context::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gflow_context@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@QEAAPEAXI@Z
0x1C0005338: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000B0A0: "__cdecl _imp_FwpsInjectionHandleCreate0" __imp_FwpsInjectionHandleCreate0
0x1C00026E0: "public: void __cdecl implementation::wfp_callout::registration::unregister_flow_established_callouts(void) __ptr64" ?unregister_flow_established_callouts@registration@wfp_callout@implementation@@QEAAXXZ
0x1C000B0A8: "__cdecl _imp_FwpsCalloutRegister2" __imp_FwpsCalloutRegister2
0x1C000C050: MpCreateCallback
0x1C000B108: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C000B168: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0004BB0: "private: static long __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::notify(enum FWPS_CALLOUT_NOTIFY_TYPE_,struct _GUID const * __ptr64,struct FWPS_FILTER2_ * __ptr64)" ?notify@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@CAJW4FWPS_CALLOUT_NOTIFY_TYPE_@@PEBU_GUID@@PEAUFWPS_FILTER2_@@@Z
0x1C0001830: "public: __cdecl unique_lock<class implementation::spin_lock>::unique_lock<class implementation::spin_lock>(struct spin_lock<class implementation::spin_lock> & __ptr64) __ptr64" ??0?$unique_lock@Vspin_lock@implementation@@@@QEAA@AEAU?$spin_lock@V0implementation@@@@@Z
0x1C000B1D0: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00028AC: ??$?0PEAU_DRIVER_OBJECT@@@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@QEAA@PEAU_DRIVER_OBJECT@@AEAV?$stream_handler@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@@@AEA_NAEAV?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@Z
0x1C000B010: "__cdecl _imp_NdisFreeNetBufferListPool" __imp_NdisFreeNetBufferListPool
0x1C0005CD4: "public: __cdecl net_buffer_list::~net_buffer_list(void) __ptr64" ??1net_buffer_list@@QEAA@XZ
0x1C000B260: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C000DB48: CmRegUtilWstrValueGetDword
0x1C00073E0: "IoValidateDeviceIoControlAccess" ??_C@_1EA@BAHCLPHE@?$AAI?$AAo?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C000B078: "__cdecl _imp_FwpmCalloutAdd0" __imp_FwpmCalloutAdd0
0x1C000B1D8: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C0007120: "\Callback\WdProcessNotificationC" ??_C@_1FA@FIJDGHAB@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAW?$AAd?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC@
0x1C000756C: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C000DA64: CmRegUtilUcValueSetUcString
0x1C00037F0: "public: long __cdecl stream_handler<class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> > >::get_stream_segment<class implementation::irp>(class irp<class implementation::irp>) __ptr64" ??$get_stream_segment@Virp@implementation@@@?$stream_handler@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@@@QEAAJV?$irp@V0implementation@@@@@Z
0x1C00044E0: "private: static void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::flow_established_classify(struct FWPS_INCOMING_VALUES0_ const * __ptr64,struct FWPS_INCOMING_METADATA_VALUES0_ const * __ptr64,void * __ptr64,void const * __ptr64,struct FWPS_FILTER2_ const * __ptr64,unsigned __int64,struct FWPS_CLASSIFY_OUT0_ * __ptr64)" ?flow_established_classify@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@CAXPEBUFWPS_INCOMING_VALUES0_@@PEBUFWPS_INCOMING_METADATA_VALUES0_@@PEAXPEBXPEBUFWPS_FILTER2_@@_KPEAUFWPS_CLASSIFY_OUT0_@@@Z
0x1C000B200: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x1C0007670: "\Registry\Machine\System\Current" ??_C@_1HC@DKINPPAJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000B058: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C000D890: CmRegUtilOpenExistingWstrKey
0x1C000B068: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C00071B8: "windefend" ??_C@_1BE@DPGPPNPE@?$AAw?$AAi?$AAn?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?$AA@
0x1C0003A60: "public: __cdecl implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000>::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000>(void) __ptr64" ??0?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@QEAA@XZ
0x1C0004438: "private: void __cdecl implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000>::complete_irp(class irp<class implementation::irp>,class queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl>) __ptr64" ?complete_irp@?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@AEAAXV?$irp@V0implementation@@@@V?$queue_element@Uget_stream_data@data@ioctl@network_filter@@Velement_impl@?$queue@Uget_stream_data@data@ioctl@network_filter@@@implementation@@@@@Z
0x1C0002370: "public: bool __cdecl implementation::avl_table::empty(void)const __ptr64" ?empty@avl_table@implementation@@QEBA_NXZ
0x1C000D2D8: PiRegStateReadStackCreationSettingsFromKey
0x1C000D110: PiRegStateOpenClassKey
0x1C000B324: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C0005FD8: WdmlibRtlInitUnicodeStringEx
0x1C00075F8: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000E010: GsDriverEntry
0x1C000B300: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000D4A4: PpRegStateReadCreateClassCreationSettings
0x1C000CEB8: SepSddlGetSidForString
0x1C0007610: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C0004CCC: "public: void __cdecl shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration>::shared_ptr_impl::release(void) __ptr64" ?release@shared_ptr_impl@?$shared_ptr@Vregistration@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@@@QEAAXXZ
0x1C000B148: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C00015A0: "public: __cdecl shared_ptr<class excluded_paths>::~shared_ptr<class excluded_paths>(void) __ptr64" ??1?$shared_ptr@Vexcluded_paths@@@@QEAA@XZ
0x1C0007170: "\Callback\WdNriNotificationCallb" ??_C@_1EI@LHEKKECM@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAW?$AAd?$AAN?$AAr?$AAi?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb@
0x1C00076F0: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1C000B2B8: "__cdecl _imp_RtlNumberGenericTableElementsAvl" __imp_RtlNumberGenericTableElementsAvl
0x1C000B0C8: "__cdecl _imp_FwpsCopyStreamDataToBuffer0" __imp_FwpsCopyStreamDataToBuffer0
0x1C000B160: PsProcessType
0x1C000B220: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0007574: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0004D50: "private: static void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::stream_classify(struct FWPS_INCOMING_VALUES0_ const * __ptr64,struct FWPS_INCOMING_METADATA_VALUES0_ const * __ptr64,void * __ptr64,void const * __ptr64,struct FWPS_FILTER2_ const * __ptr64,unsigned __int64,struct FWPS_CLASSIFY_OUT0_ * __ptr64)" ?stream_classify@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@CAXPEBUFWPS_INCOMING_VALUES0_@@PEBUFWPS_INCOMING_METADATA_VALUES0_@@PEAXPEBXPEBUFWPS_FILTER2_@@_KPEAUFWPS_CLASSIFY_OUT0_@@@Z
0x1C0004504: "private: long __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::flow_established_classify_(struct FWPS_INCOMING_VALUES0_ const * __ptr64,struct FWPS_INCOMING_METADATA_VALUES0_ const * __ptr64) __ptr64" ?flow_established_classify_@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@AEAAJPEBUFWPS_INCOMING_VALUES0_@@PEBUFWPS_INCOMING_METADATA_VALUES0_@@@Z
0x1C0001870: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1C000B118: "__cdecl _imp_KeReleaseInStackQueuedSpinLock" __imp_KeReleaseInStackQueuedSpinLock
0x1C0002720: "__cdecl _security_check_cookie" __security_check_cookie
0x1C000C1E0: MpRegisterCallback
0x1C000B048: "__cdecl _imp_FwpmTransactionCommit0" __imp_FwpmTransactionCommit0
0x1C000B138: "__cdecl _imp_ExCreateCallback" __imp_ExCreateCallback
0x1C000B310: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000B2C0: "__cdecl _imp_KeQueryInterruptTimePrecise" __imp_KeQueryInterruptTimePrecise
0x1C000B080: "__cdecl _imp_FwpsStreamInjectAsync0" __imp_FwpsStreamInjectAsync0
0x1C0007350: FWPM_LAYER_STREAM_V4
0x1C0007220: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6
0x1C000B2D8: "__cdecl _imp_RtlDowncaseUnicodeChar" __imp_RtlDowncaseUnicodeChar
0x1C0001EF0: "public: __cdecl network_filter::ioctl::data::get_stream_data::get_stream_data(struct network_filter::ioctl::data::get_stream_data::buffer_too_small_tag,unsigned int) __ptr64" ??0get_stream_data@data@ioctl@network_filter@@QEAA@Ubuffer_too_small_tag@0123@I@Z
0x1C0001490: "public: void __cdecl running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t>::refresh(bool,class shared_ptr<class excluded_paths>) __ptr64" ?refresh@?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@QEAAX_NV?$shared_ptr@Vexcluded_paths@@@@@Z
0x1C0007370: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C0004BBC: "public: long __cdecl implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000>::queue_connection_open(unsigned __int64,unsigned int,enum network_filter::protocol_type,bool,struct sockaddr_storage,struct sockaddr_storage,unsigned int,unsigned __int64) __ptr64" ?queue_connection_open@?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@QEAAJ_KIW4protocol_type@network_filter@@_NUsockaddr_storage@@3I0@Z
0x1C0007328: "windefend_stream_v4" ??_C@_1CI@CFAEHBNN@?$AAw?$AAi?$AAn?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AA_?$AAs?$AAt?$AAr?$AAe?$AAa?$AAm?$AA_?$AAv?$AA4?$AA?$AA@
0x1C0001CD0: "public: struct pair<void * __ptr64,bool> __cdecl implementation::avl_table::insert(void * __ptr64,unsigned int) __ptr64" ?insert@avl_table@implementation@@QEAA?AU?$pair@PEAX_N@@PEAXI@Z
0x1C000B0B0: "__cdecl _imp_FwpsCalloutUnregisterById0" __imp_FwpsCalloutUnregisterById0
0x1C000F000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000B248: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C00019C0: "public: class irp<class implementation::irp> __cdecl csqueue<class implementation::csqueue,class implementation::irp>::pop_front(void) __ptr64" ?pop_front@?$csqueue@V0implementation@@Virp@1@@@QEAA?AV?$irp@V0implementation@@@@XZ
0x1C0007010: "__cdecl load_config_used" _load_config_used
0x1C00029F4: ??$?0PEAU_DRIVER_OBJECT@@@registration@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@QEAA@PEAU_DRIVER_OBJECT@@P6AJW4FWPS_CALLOUT_NOTIFY_TYPE_@@PEBU_GUID@@PEAUFWPS_FILTER2_@@@ZP6AXPEBUFWPS_INCOMING_VALUES0_@@PEBUFWPS_INCOMING_METADATA_VALUES0_@@PEAXPEBXPEBU5@_KPEAUFWPS_CLASSIFY_OUT0_@@@ZP6AX56789_KPEAU8@@ZP6AXGI_K@ZAEAV?$event@V0implementation@@@@@Z
0x1C0007598: "Properties" ??_C@_1BG@COALCEMK@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x1C000B258: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000B178: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x1C000B0D8: "__cdecl _imp_PsGetProcessId" __imp_PsGetProcessId
0x1C000C910: SepSddlAddAceToAcl
0x1C000C010: MpReleaseCallback
0x1C000B0B8: "__cdecl _imp_FwpsAllocateNetBufferAndNetBufferList0" __imp_FwpsAllocateNetBufferAndNetBufferList0
0x1C000D7DC: CmRegUtilCreateWstrKey
0x1C000B290: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000B250: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C000B1F0: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1C00075C0: "NoDisplayClass" ??_C@_1BO@DAOBINHA@?$AAN?$AAo?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C000B208: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1C000D5E8: PpRegStateUpdateStackCreationSettings
0x1C000B1A8: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C0007628: "DeviceCharacteristics" ??_C@_1CM@DIJFBEC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C000B0C0: "__cdecl _imp_FwpsFreeNetBufferList0" __imp_FwpsFreeNetBufferList0
0x1C00091E0: PiRegStateSysAllInherittedSecurityDescriptor
0x1C0009218: WdmlibInitialized
0x1C00072E8: FWPM_LAYER_STREAM_V6
0x1C000B098: "__cdecl _imp_FwpsInjectionHandleDestroy0" __imp_FwpsInjectionHandleDestroy0
0x1C0007290: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4
0x1C000433C: ??_Gnetwork_stream_filter@?$driver@Vdriver_impl@?A0x2501e266@@Vspin_lock@implementation@@Virp@4@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@Vexcluded_paths@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@QEAAPEAXI@Z
0x1C000D830: CmRegUtilOpenExistingUcKey
0x1C0005320: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000C5F0: WdmlibIoCreateDeviceSecure
0x1C000B2D0: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C0001550: "public: class shared_ptr<class excluded_paths> & __ptr64 __cdecl shared_ptr<class excluded_paths>::operator=(class shared_ptr<class excluded_paths> const & __ptr64) __ptr64" ??4?$shared_ptr@Vexcluded_paths@@@@QEAAAEAV0@AEBV0@@Z
0x1C000386C: "public: long __cdecl stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >::get_stream_segment<class implementation::irp>(class irp<class implementation::irp>) __ptr64" ??$get_stream_segment@Virp@implementation@@@?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@QEAAJV?$irp@V0implementation@@@@@Z
0x1C0001630: "public: void __cdecl queue<class implementation::queue,class implementation::spin_lock,struct network_filter::ioctl::data::get_stream_data>::push_back(class queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl>) __ptr64" ?push_back@?$queue@V0implementation@@Vspin_lock@1@Uget_stream_data@data@ioctl@network_filter@@@@QEAAXV?$queue_element@Uget_stream_data@data@ioctl@network_filter@@Velement_impl@?$queue@Uget_stream_data@data@ioctl@network_filter@@@implementation@@@@@Z
0x1C00075B0: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0003F38: "public: class shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration> & __ptr64 __cdecl shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration>::operator=(class shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration> const & __ptr64) __ptr64" ??4?$shared_ptr@Vregistration@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@@@QEAAAEAV0@AEBV0@@Z
0x1C000C030: MpUnregisterCallback
0x1C0002890: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_b312d06ff9b51e888002e4fef9502aac>@@CA?AW4_RTL_GENERIC_COMPARE_RESULTS@@PEAU_RTL_AVL_TABLE@@PEAX1@Z
0x1C000B120: "__cdecl _imp_ExRegisterCallback" __imp_ExRegisterCallback
0x1C000DBC4: CmpRegUtilAllocateUnicodeString
0x1C000B000: "__cdecl _imp_NdisAllocateGenericObject" __imp_NdisAllocateGenericObject
0x1C0003CC4: "public: __cdecl shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration>::~shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration>(void) __ptr64" ??1?$shared_ptr@Vregistration@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@@@QEAA@XZ
0x1C000B160: "__cdecl _imp_PsProcessType" __imp_PsProcessType
0x1C00043D0: "public: void * __ptr64 __cdecl shared_ptr<class wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::registration>::shared_ptr_impl::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gshared_ptr_impl@?$shared_ptr@Vregistration@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@@@QEAAPEAXI@Z
0x1C0005048: "private: void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::stream_delete_(unsigned __int64,unsigned short,unsigned int) __ptr64" ?stream_delete_@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@AEAAX_KGI@Z
0x1C000B0E8: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C000B238: "__cdecl _imp_IoCsqInsertIrp" __imp_IoCsqInsertIrp
0x1C00074D8: FWPM_CONDITION_DIRECTION
0x1C0004D90: "private: void __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::stream_classify_(struct FWPS_INCOMING_VALUES0_ const * __ptr64,struct FWPS_INCOMING_METADATA_VALUES0_ const * __ptr64,void * __ptr64,struct FWPS_FILTER2_ const * __ptr64,unsigned __int64,struct FWPS_CLASSIFY_OUT0_ * __ptr64) __ptr64" ?stream_classify_@?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@AEAAXPEBUFWPS_INCOMING_VALUES0_@@PEBUFWPS_INCOMING_METADATA_VALUES0_@@PEAXPEBUFWPS_FILTER2_@@_KPEAUFWPS_CLASSIFY_OUT0_@@@Z
0x1C000CF8C: SepSddlLookupAccessMaskInTable
0x1C0009080: "__cdecl _security_cookie" __security_cookie
0x1C0003CE4: "public: __cdecl wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >::~wfp_callout<class implementation::wfp_callout,class implementation::spin_lock,class implementation::event,class implementation::avl_table,class stream_handler<class implementation::stream_handler<class implementation::irp,class implementation::queue,class implementation::csqueue,class implementation::spin_lock,10000> >,class running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t> >(void) __ptr64" ??1?$wfp_callout@V0implementation@@Vspin_lock@1@Vevent@1@Vavl_table@1@V?$stream_handler@V?$stream_handler@Virp@implementation@@Vqueue@2@Vcsqueue@2@Vspin_lock@2@$0CHBA@@implementation@@@@V?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@@@QEAA@XZ
0x1C0001930: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_40393f5911c33d208ec592195e187347>@@CAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x1C000DB78: CmRegUtilWstrValueSetWstrString
0x1C0001A70: "public: __cdecl network_filter::ioctl::data::get_stream_data::get_stream_data(struct network_filter::ioctl::data::get_stream_data::connection_information &&) __ptr64" ??0get_stream_data@data@ioctl@network_filter@@QEAA@$$QEAUconnection_information@0123@@Z
0x1C0007658: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1C00019F0: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_c686f7c71e11bcabcb37eb0ed1331746>@@CAPEAXPEAU_RTL_AVL_TABLE@@K@Z
0x1C000B170: "__cdecl _imp_KeAcquireInStackQueuedSpinLock" __imp_KeAcquireInStackQueuedSpinLock
0x1C000D938: CmRegUtilUcValueGetFullBuffer
0x1C000B100: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C0002870: ??$<lambda_invoker_cdecl>@PEAU_RTL_AVL_TABLE@@@<lambda_1a321f403d9439a9fac9c914892ec26e>@@CAXPEAU_RTL_AVL_TABLE@@PEAX@Z
0x1C00075E0: "NoUseClass" ??_C@_1BG@OPOOGLJC@?$AAN?$AAo?$AAU?$AAs?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C000B2B0: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x1C000E044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000B288: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000B018: "__cdecl _imp_NdisAllocateNetBufferListPool" __imp_NdisAllocateNetBufferListPool
0x1C0001E90: "public: __cdecl excluded_paths::excluded_paths(bool,unsigned short const * __ptr64,unsigned __int64) __ptr64" ??0excluded_paths@@QEAA@_NPEBG_K@Z
0x1C000C4A0: SeUtilSecurityInfoFromSecurityDescriptor
0x1C000B1A0: IoDeviceObjectType
0x1C000B038: "__cdecl _imp_FwpmFilterDeleteByKey0" __imp_FwpmFilterDeleteByKey0
0x1C000B338: "__cdecl _IMPORT_DESCRIPTOR_NDIS" __IMPORT_DESCRIPTOR_NDIS
0x1C0007584: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C000B1B0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0005F18: "public: long __cdecl implementation::wfp_callout::inject_stream_segment(struct network_filter::stream_segment const & __ptr64) __ptr64" ?inject_stream_segment@wfp_callout@implementation@@QEAAJAEBUstream_segment@network_filter@@@Z
0x1C0002750: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000B060: "__cdecl _imp_FwpmSubLayerAdd0" __imp_FwpmSubLayerAdd0
0x1C000B050: "__cdecl _imp_FwpmTransactionBegin0" __imp_FwpmTransactionBegin0
0x1C000B218: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C000B040: "__cdecl _imp_FwpmTransactionAbort0" __imp_FwpmTransactionAbort0
0x1C000B2F8: ntoskrnl_NULL_THUNK_DATA
0x1C000B2E8: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0001050: ?complete@?$irp@V0implementation@@@@QEHAAJJI@Z
0x1C000B128: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00023A0: DriverEntry
0x1C0001B20: "public: static class queue_element<struct network_filter::ioctl::data::get_stream_data,class implementation::queue<struct network_filter::ioctl::data::get_stream_data>::element_impl> __cdecl queue<class implementation::queue,class implementation::spin_lock,struct network_filter::ioctl::data::get_stream_data>::create_element<struct network_filter::ioctl::data::get_stream_data>(unsigned __int64,struct network_filter::ioctl::data::get_stream_data)" ??$create_element@Uget_stream_data@data@ioctl@network_filter@@@?$queue@V0implementation@@Vspin_lock@1@Uget_stream_data@data@ioctl@network_filter@@@@SA?AV?$queue_element@Uget_stream_data@data@ioctl@network_filter@@Velement_impl@?$queue@Uget_stream_data@data@ioctl@network_filter@@@implementation@@@@_KUget_stream_data@data@ioctl@network_filter@@@Z
0x1C000D73C: CmRegUtilCreateUcKey
0x1C000B230: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C000B030: "__cdecl _imp_FwpmCalloutDeleteByKey0" __imp_FwpmCalloutDeleteByKey0
0x1C0007000: SDDL_DEVOBJ_KERNEL_ONLY
0x1C00011B0: "private: static void __cdecl running_processes<class implementation::running_processes,class implementation::avl_table,class implementation::spin_lock,struct atomic_shared_ptr<class excluded_paths,class implementation::spin_lock>::accessor_t>::process_notification_callback(void * __ptr64,void * __ptr64,void * __ptr64)" ?process_notification_callback@?$running_processes@V0implementation@@Vavl_table@1@Vspin_lock@1@Uaccessor_t@?$atomic_shared_ptr@Vexcluded_paths@@Vspin_lock@implementation@@@@@@CAXPEAX00@Z
0x1C0005740: memset
0x1C000B34C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]