Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\fltMgr.sys Base=0x1C0000000 SHA-256=2835AA5822CB5AA5EE78804457B418ACB4340F526B9C7AA1EC9C1BECF3074A45
PDB: fltMgr.pdb GUID={0C6C25F0-4059-542A-7AB6E7C46C9CF260} Age=1

2355 located named symbols:
0x1C005C1A0: FltpvDoLostObjectCheck
0x1C001E258: "109998.99" ??_C@_1BE@IFHPOPII@?$AA1?$AA0?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0045EA4: FltpReissuePostOperationFailure
0x1C001DCB8: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x1C003A5F4: FltpFreeNameCacheCreateCtrl
0x1C001D678: FLTMGR_FS_ATTACH_FAILED
0x1C001C548: "109999" ??_C@_1O@KMIGBFBE@?$AA1?$AA0?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C0031238: "__cdecl _imp_TmCreateEnlistment" __imp_TmCreateEnlistment
0x1C001CC48: "CsvFs" ??_C@_1M@BEBNBMBP@?$AAC?$AAs?$AAv?$AAF?$AAs?$AA?$AA@
0x1C00470B0: FltAcknowledgeEcp
0x1C0036EC8: FltpGetTxVolContext
0x1C0017C20: WppClassicProviderCallback
0x1C0043570: FltpGetFrameZeroVolume
0x1C004B0E4: FltpLinkFilterIntoFrame
0x1C00318F0: "__cdecl _imp_RtlDeleteNoSplay" __imp_RtlDeleteNoSplay
0x1C0054D20: FltGetNextExtraCreateParameter
0x1C0031698: "__cdecl _imp_ZwLoadDriver" __imp_ZwLoadDriver
0x1C0060710: FltvCancelFileOpen
0x1C005F450: FltvReleaseContexts
0x1C0031788: "__cdecl _imp_KeExpandKernelStackAndCalloutEx" __imp_KeExpandKernelStackAndCalloutEx
0x1C0031860: "__cdecl _imp_FsRtlInsertPerFileObjectContext" __imp_FsRtlInsertPerFileObjectContext
0x1C003FFF0: FltParseFileNameInformation
0x1C001B6EC: FltpTelemetryArrayEnd
0x1C0031028: "__cdecl _imp_ExAcquireFastMutex" __imp_ExAcquireFastMutex
0x1C0047BEC: FltpResetDeviceHintEcp
0x1C004D0A0: FltpUpdateDynamicRegistrySettings
0x1C0001340: FltpAsyncIoCompletionCallback
0x1C0054C50: FltDeleteExtraCreateParameterLookasideList
0x1C00452B0: FltGetVolumeName
0x1C001D9F8: "IRP_MJ_CREATE_NAMED_PIPE" ??_C@_0BJ@MMKIHFHH@IRP_MJ_CREATE_NAMED_PIPE?$AA@
0x1C003E080: FltpTranslateIoctlDataBuffers
0x1C0031110: "__cdecl _imp_IoGetDeviceAttachmentBaseRef" __imp_IoGetDeviceAttachmentBaseRef
0x1C0044420: FltQueryEaFile
0x1C0031188: "__cdecl _imp_ExReleaseRundownProtectionCacheAwareEx" __imp_ExReleaseRundownProtectionCacheAwareEx
0x1C00168C0: FltReleaseContextsEx
0x1C0031770: "__cdecl _imp_KeAreAllApcsDisabled" __imp_KeAreAllApcsDisabled
0x1C000CAB0: FltAcquirePushLockExclusiveEx
0x1C004701C: FltpIsOpenByObjectId
0x1C005F420: FltvReleaseContext
0x1C00361C0: FltEnlistInTransaction
0x1C00313B0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C000D8D0: FltpGetNormalizedFileNameCallout
0x1C0031838: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C005F300: FltvReadFileEx
0x1C001D698: FLTMGR_START_FILTERING_FAILED
0x1C0031498: "__cdecl _imp_RtlSystemTimeToLocalTime" __imp_RtlSystemTimeToLocalTime
0x1C0031868: "__cdecl _imp_FsRtlRemovePerFileObjectContext" __imp_FsRtlRemovePerFileObjectContext
0x1C0031360: "__cdecl _imp_FsRtlFreeFileLock" __imp_FsRtlFreeFileLock
0x1C004B6BC: FltpCopyUnicodeString
0x1C001E7F0: "A filter tried to complete pende" ??_C@_0BBJ@CDNDOHMC@A?5filter?5tried?5to?5complete?5pende@
0x1C00479D8: FltpGetTargetInfo
0x1C0042FB0: FltEnumerateInstanceInformationByDeviceObject
0x1C003B85C: FreeTargetedIoCtrl
0x1C004D8C4: FltpGetActiveFilterCount
0x1C0031300: "__cdecl _imp_RtlCompareAltitudes" __imp_RtlCompareAltitudes
0x1C0021BA0: "FILE_OBJECT" ??_C@_0M@IIKFKBDP@FILE_OBJECT?$AA@
0x1C0062470: FltvOplockFsctrl
0x1C001C938: "\FileSystem\RsFxDrv" ??_C@_1CI@FOINJPKB@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAs?$AAF?$AAx?$AAD?$AAr?$AAv?$AA?$AA@
0x1C0015290: FltPropagateActivityIdToThread
0x1C0044190: FltReferenceFileNameInformation
0x1C0002A50: FltpHandleDataScanSynchronization
0x1C0031660: "__cdecl _imp_IoAdjustStackSizeForRedirection" __imp_IoAdjustStackSizeForRedirection
0x1C000E2E4: FltpReleaseStreamForSectionConflict
0x1C004D6B0: FltUnregisterFilter
0x1C001C5E8: "189999" ??_C@_1O@KKIKGDOK@?$AA1?$AA8?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C002A478: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0056D20: WppTraceCallback
0x1C0054AA0: FltCopyOpenReparseList
0x1C002A540: FltGlobals
0x1C001B598: GUID_ECP_IO_DEVICE_HINT
0x1C0031358: "__cdecl _imp_FsRtlAllocateFileLock" __imp_FsRtlAllocateFileLock
0x1C000B420: FltpInsertCallback
0x1C00310D0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C001F290: "A filter is calling FltDoComplet" ??_C@_0NB@ENGLGELM@A?5filter?5is?5calling?5FltDoComplet@
0x1C0004AD0: FltpPassThrough
0x1C002B510: ZERO_GUID
0x1C0036C80: FltpEnableNameCachePurgeForTxRename
0x1C0006EC0: FltpAllocateIrpCtrlInternal
0x1C0046920: FltpClientPortDelete
0x1C000ECF4: FltpProcessOperationStatusCallbacks
0x1C001B4C0: UnknownName
0x1C0031800: "__cdecl _imp_ExReleaseRundownProtectionCacheAware" __imp_ExReleaseRundownProtectionCacheAware
0x1C000E530: FltReleaseContexts
0x1C0058588: FltpCheckGetQuotaBufferValidity
0x1C0036FE0: FltGetTransactionContext
0x1C000DCC0: FltpFastIoMdlWriteComplete
0x1C005DA00: FltvCompletePendedPreOperation
0x1C000CB90: FltMgrOpenReparseEcpCleanup
0x1C0058438: FltpBuildCleanupRequest
0x1C001B930: "\Registry\Machine\System\Current" ??_C@_1HO@EIJIMIJB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C001CE58: "\Driver\Msfs" ??_C@_1BK@EEPCGMFN@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAM?$AAs?$AAf?$AAs?$AA?$AA@
0x1C001C928: "WinFS" ??_C@_1M@CEODFOBN@?$AAW?$AAi?$AAn?$AAF?$AAS?$AA?$AA@
0x1C0061580: FltvGetBottomInstance
0x1C0001E20: FltDeleteInstanceContext
0x1C001BD50: "FLTPORT" ??_C@_07CLBAFLDO@FLTPORT?$AA@
0x1C00354D0: FltCreateSystemVolumeInformationFolder
0x1C0047CF0: FltpLinkHandle
0x1C0020590: "A filter tried to pend an operat" ??_C@_0FJ@FPHJFFAL@A?5filter?5tried?5to?5pend?5an?5operat@
0x1C00463C0: FltpClientPortClose
0x1C001C5A8: "169999" ??_C@_1O@EDLLLAPE@?$AA1?$AA6?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C00314B8: "__cdecl _imp_FsRtlInitializeOplock" __imp_FsRtlInitializeOplock
0x1C0038E64: FltpDoFilterNotificationForNewVolume
0x1C004D51C: FltpDoVolumeNotificationForNewFilter
0x1C001EAC0: "A filter has set a completion co" ??_C@_0BAP@FPACPNJL@A?5filter?5has?5set?5a?5completion?5co@
0x1C0031418: "__cdecl _imp_ExAllocateCacheAwarePushLock" __imp_ExAllocateCacheAwarePushLock
0x1C001D8D8: "IRP_MJ_RESERVED-8" ??_C@_0BC@NGGGBFLE@IRP_MJ_RESERVED?98?$AA@
0x1C0031208: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C001CA08: "\FileSystem\DVDVRRdr_xp" ??_C@_1DA@LCIKMEAO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAD?$AAV?$AAD?$AAV?$AAR?$AAR?$AAd?$AAr?$AA_?$AAx?$AAp?$AA?$AA@
0x1C00310C0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C001B740: FltpTelemetryFilterInfoFormat
0x1C001DB70: "IRP_MJ_SHUTDOWN" ??_C@_0BA@CDMDNOAC@IRP_MJ_SHUTDOWN?$AA@
0x1C001BD68: "\FileSystem\Fs_Rec" ??_C@_1CG@EEBPBHCA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAs?$AA_?$AAR?$AAe?$AAc?$AA?$AA@
0x1C0040684: FltpNormalizeNameFromCache
0x1C000FF00: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C001B4E0: VerifierObjectTypeNames
0x1C0031950: "__cdecl _imp_MmUnlockPagableImageSection" __imp_MmUnlockPagableImageSection
0x1C00316D8: "__cdecl _imp_MmProbeAndLockProcessPages" __imp_MmProbeAndLockProcessPages
0x1C00216A0: "A filter attempted to delete a s" ??_C@_0FD@DKNEEHPL@A?5filter?5attempted?5to?5delete?5a?5s@
0x1C00092C0: FltSetStreamContext
0x1C0037B6C: FltpCreateVolumeDeviceObject
0x1C000E370: FltGetContexts
0x1C0066BF8: FltpInitializeMessagingSupport
0x1C001D718: "SYNC" ??_C@_04FBDLEBNN@SYNC?$AA@
0x1C0044D74: FltpObjectPointerReference
0x1C001E770: "A filter is trying to continue a" ??_C@_0HF@LNJOPMKL@A?5filter?5is?5trying?5to?5continue?5a@
0x1C0031888: "__cdecl _imp_FsRtlVolumeDeviceToCorrelationId" __imp_FsRtlVolumeDeviceToCorrelationId
0x1C0047394: FltpEnumerateVolumeInformationInternal
0x1C0021380: "A filter issued a create without" ??_C@_0HP@ECLAGANG@A?5filter?5issued?5a?5create?5without@
0x1C0066F10: FltpInitializeTelemetry
0x1C001FB60: "A filter is calling FltDoComplet" ??_C@_0HD@JBKNDKKK@A?5filter?5is?5calling?5FltDoComplet@
0x1C001B6F8: FltpRegDefaultInstanceValueName
0x1C001D090: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C001DED8: "309998.99" ??_C@_1BE@EPLBJJAE@?$AA3?$AA0?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001DC70: "<Invalid IRP Code>" ??_C@_0BD@PIKAJLGE@?$DMInvalid?5IRP?5Code?$DO?$AA@
0x1C001AAB0: FltGetRequestorProcessIdEx
0x1C00316E0: "__cdecl _imp_IoGetRequestorProcess" __imp_IoGetRequestorProcess
0x1C0031600: MmHighestUserAddress
0x1C0044240: FltInitializePushLock
0x1C001E3E0: "\mailslot" ??_C@_1BE@PNHNBJMM@?$AA?2?$AAm?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C0031940: "__cdecl _imp_MmLockPagableDataSection" __imp_MmLockPagableDataSection
0x1C00315A8: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C005729C: FltpCalculateLegacyFilterAltitude
0x1C0031070: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C0031490: "__cdecl _imp_RtlSecondsSince1970ToTime" __imp_RtlSecondsSince1970ToTime
0x1C0031158: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C001E330: "49998.99" ??_C@_1BC@HJEEKMCG@?$AA4?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0045E20: FltpAllocateFltCcb
0x1C004463C: QueryStandardLinkInformationFromInstance
0x1C0045804: FltpOpenClientPort
0x1C00193A0: FltSetIoPriorityHintIntoThread
0x1C001A5FC: "__cdecl TlgDefineProvider_annotation__TlgFltMgrTelemetryProviderProv" _TlgDefineProvider_annotation__TlgFltMgrTelemetryProviderProv
0x1C00488A4: FltpCleanupLoadedLegacyFiltersList
0x1C004DE90: FltBuildDefaultSecurityDescriptor
0x1C0031518: "__cdecl _imp_FsRtlOplockIsSharedRequest" __imp_FsRtlOplockIsSharedRequest
0x1C005B0AC: FltpUnloadFilter
0x1C00390A4: FltpCleanupStreamListCtrlForInstanceRemoval
0x1C00316B8: "__cdecl _imp_ObReferenceObjectByName" __imp_ObReferenceObjectByName
0x1C005AA90: FltRollbackComplete
0x1C00098C0: FltObjectReference
0x1C0031668: "__cdecl _imp_IoGetFsZeroingOffset" __imp_IoGetFsZeroingOffset
0x1C001BAD0: "ManualAttachFastAttachDevices" ??_C@_1DM@MIKBFMMO@?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAF?$AAa?$AAs?$AAt?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1C0031570: "__cdecl _imp_ExAllocateTimer" __imp_ExAllocateTimer
0x1C0058CF0: FltpGetServicePathFromFilter
0x1C0021B20: "Filter Context" ??_C@_0P@PJGEEEKA@Filter?5Context?$AA@
0x1C001A838: RtlStringCbPrintfA
0x1C00315F8: "__cdecl _imp_MmProbeAndLockPages" __imp_MmProbeAndLockPages
0x1C001DBC0: "IRP_MJ_QUERY_SECURITY" ??_C@_0BG@MIODHPEN@IRP_MJ_QUERY_SECURITY?$AA@
0x1C0031678: "__cdecl _imp_IoSetFsZeroingOffset" __imp_IoSetFsZeroingOffset
0x1C0055010: FltEnumerateInstanceInformationByVolume
0x1C004B364: FltpProcessContextRegistration
0x1C004252C: FltpNumCallbackNodes
0x1C001C808: "\FileSystem\NfsRdr" ??_C@_1CG@JFGFJDPL@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAN?$AAf?$AAs?$AAR?$AAd?$AAr?$AA?$AA@
0x1C000B488: FltpInitializeCallbackNode
0x1C001DA38: "IRP_MJ_WRITE" ??_C@_0N@DLJAMLBI@IRP_MJ_WRITE?$AA@
0x1C001DF40: "FSFilter Content Screener" ??_C@_1DE@PBCFGIP@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAe?$AAr?$AA?$AA@
0x1C003A660: CleanupTargetedIo
0x1C0008ED0: FltSetStreamHandleContext
0x1C001CDD8: "\Driver\MRxDav" ??_C@_1BO@JHJGLMJK@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAM?$AAR?$AAx?$AAD?$AAa?$AAv?$AA?$AA@
0x1C001BA60: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C001F9F0: "A filter attempted to return MOR" ??_C@_0LI@CBIKPHKJ@A?5filter?5attempted?5to?5return?5MOR@
0x1C0006890: FltpPerformFastIoCall
0x1C0045338: FltpReissueSynchronousIo
0x1C00019C0: FltpGetBoundTransaction
0x1C0041480: FltCreateSectionForDataScan
0x1C0031130: "__cdecl _imp_IoGetDiskDeviceObject" __imp_IoGetDiskDeviceObject
0x1C00575C0: FltCancelFileOpen
0x1C0031468: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0043FC8: FltpIoGetDeviceObjectPointer
0x1C005F0C0: FltvQueryVolumeInformationFile
0x1C001CCE0: "OpenAFS" ??_C@_1BA@MDOODCLK@?$AAO?$AAp?$AAe?$AAn?$AAA?$AAF?$AAS?$AA?$AA@
0x1C0029070: FsTypes
0x1C000CDE0: FltGetFileSystemType
0x1C005EE20: FltvPreOperation
0x1C0031748: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0031288: "__cdecl _imp_FsRtlFindExtraCreateParameter" __imp_FsRtlFindExtraCreateParameter
0x1C0031590: "__cdecl _imp_ExInitializeRundownProtection" __imp_ExInitializeRundownProtection
0x1C00318C8: "__cdecl _imp_TmEnableCallbacks" __imp_TmEnableCallbacks
0x1C0031A3C: "__cdecl _IMPORT_DESCRIPTOR_HAL" __IMPORT_DESCRIPTOR_HAL
0x1C001B608: FltpRegFilterInstances
0x1C0001C24: FltpDequeueThrottledWorkItem
0x1C001AA80: FltGetIoCacheIntention
0x1C0001400: FltpDisableNameCachingForVolume
0x1C001D928: "IRP_MJ_ACQUIRE_FOR_CC_FLUSH" ??_C@_0BM@KEENADBF@IRP_MJ_ACQUIRE_FOR_CC_FLUSH?$AA@
0x1C0017280: FltGetIrpName
0x1C0035E90: FltpTxVolKtmNotification
0x1C001BD10: "\??" ??_C@_17MFDAJLJA@?$AA?2?$AA?$DP?$AA?$DP?$AA?$AA@
0x1C001E070: "209998.99" ??_C@_1BE@CKNGKCEC@?$AA2?$AA0?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0031460: "__cdecl _imp_IoQueueWorkItemEx" __imp_IoQueueWorkItemEx
0x1C001C4F8: "40000" ??_C@_1M@IKGKBKKC@?$AA4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C003D7F0: FltpSetIoTargetInFileObject
0x1C001C978: "\FileSystem\cdudf_xp" ??_C@_1CK@PGIOGNEG@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAc?$AAd?$AAu?$AAd?$AAf?$AA_?$AAx?$AAp?$AA?$AA@
0x1C00317B8: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C003FE50: FltCheckAndGrowNameControl
0x1C00203F0: "Filter manager verifier object t" ??_C@_0BJK@DIPIBKMM@Filter?5manager?5verifier?5object?5t@
0x1C0003900: FltDecodeParameters
0x1C003D120: FltQueryInformationFile
0x1C000E8DC: "__cdecl TlgWrite" _TlgWrite
0x1C00166A0: FltGetContextsEx
0x1C000E6E8: FltpExtendIrpCtrl
0x1C0044620: FltClose
0x1C0031A20: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0016C20: FltSupportsFileContextsEx
0x1C0031720: "__cdecl _imp_ObCreateObjectType" __imp_ObCreateObjectType
0x1C000AC10: FltQueueGenericWorkItem
0x1C0031220: "__cdecl _imp_ExDeletePagedLookasideList" __imp_ExDeletePagedLookasideList
0x1C0002910: FltpSetUpIrpCallControl
0x1C001EA30: "A filter is trying to synchroniz" ??_C@_0IL@GCFJAJ@A?5filter?5is?5trying?5to?5synchroniz@
0x1C0031020: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C003FDB0: FltpExpandFilePath
0x1C000B530: FltGetInstanceContext
0x1C0031120: "__cdecl _imp_IoGetStackLimits" __imp_IoGetStackLimits
0x1C00211E0: "A filter tried to issue IO at an" ??_C@_0OL@HGIGMLDG@A?5filter?5tried?5to?5issue?5IO?5at?5an@
0x1C001BC10: "UseTildeShortcut" ??_C@_1CC@NMIFGMEB@?$AAU?$AAs?$AAe?$AAT?$AAi?$AAl?$AAd?$AAe?$AAS?$AAh?$AAo?$AAr?$AAt?$AAc?$AAu?$AAt?$AA?$AA@
0x1C0041690: FltFsControlFile
0x1C003F4E0: TargetedIOCtrlAttachAsFoCtx
0x1C00616E0: FltvGetFileNameInformationUnsafe
0x1C00166E0: FltGetSectionContext
0x1C0031368: "__cdecl _imp_FsRtlFastUnlockSingle" __imp_FsRtlFastUnlockSingle
0x1C001CCF0: "\Device\AFSRedirector" ??_C@_1CM@OECDLJKN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAA?$AAF?$AAS?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x1C0031200: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C001DEF0: "FSFilter Continuous Backup" ??_C@_1DG@GAPOKBGL@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAi?$AAn?$AAu?$AAo?$AAu?$AAs?$AA?5?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x1C0005E10: FltpLinkCompletionNodeToInstance
0x1C0056A4C: WppInitGlobalLogger
0x1C0056F90: FltCurrentBatchOplock
0x1C001D800: "IRP_MJ_MDL_READ_COMPLETE" ??_C@_0BJ@CKKABFP@IRP_MJ_MDL_READ_COMPLETE?$AA@
0x1C00316D0: "__cdecl _imp_IoCsqRemoveNextIrp" __imp_IoCsqRemoveNextIrp
0x1C00451B0: FltpFindFrameForDeviceStack
0x1C000D0B0: FltCompletePendedPreOperation
0x1C0031398: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0060780: FltvClose
0x1C001CFD0: FltpPortGenericMapping
0x1C0035BC4: FltpCreateKtmResourceManager
0x1C0036A58: FltpReinstateNameCachingAllFrames
0x1C000EAB4: FltpProcessIoCompletion
0x1C003BBF4: FltpMsgDeviceControl
0x1C0043EBC: FltpGetDeviceObjectFromName
0x1C0031798: "__cdecl _imp_IoGetAttachedDevice" __imp_IoGetAttachedDevice
0x1C0031778: "__cdecl _imp_FsRtlIsNonEmptyDirectoryReparsePointAllowed" __imp_FsRtlIsNonEmptyDirectoryReparsePointAllowed
0x1C0031250: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C001C908: "\FileSystem\Mup" ??_C@_1CA@EHAEKEC@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAu?$AAp?$AA?$AA@
0x1C0005260: FltpPerformPreCallbacks
0x1C0054700: FltAttachVolume
0x1C0031410: "__cdecl _imp_IoRegisterDriverReinitialization" __imp_IoRegisterDriverReinitialization
0x1C001CB58: "PSFS" ??_C@_19HOHBKMNJ@?$AAP?$AAS?$AAF?$AAS?$AA?$AA@
0x1C00603A0: FltvAddOpenReparseEntry
0x1C003A6E4: FltpCleanupDeviceHintEcp
0x1C000A418: FltpInitializeGeneratedIrp
0x1C00156A4: FltpDetermineStaticOperationType
0x1C000E984: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x1C0062B60: FltvSetSecurityObject
0x1C000EB80: FltGetDeviceObject
0x1C001B1C0: FsrtlFltMgrCallbacks
0x1C0019860: FltAcquirePushLockShared
0x1C0031790: "__cdecl _imp_RtlIsNameLegalDOS8Dot3" __imp_RtlIsNameLegalDOS8Dot3
0x1C005E6F0: FltvGetSwappedBufferMdlAddress
0x1C00311F8: "__cdecl _imp_TmReadOnlyEnlistment" __imp_TmReadOnlyEnlistment
0x1C001ABA4: StRtlSetIoCacheIntention
0x1C001CFE0: "\FileSystem\Filters\FltMgr" ??_C@_1DG@MNAEALJG@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AA?$AA@
0x1C0062D10: FltvUntagFile
0x1C00031F0: FltpBuildRequest
0x1C0031878: "__cdecl _imp_FsRtlIsMobileOS" __imp_FsRtlIsMobileOS
0x1C0057680: FltCreateMailslotFile
0x1C0055BE0: FltCheckLockForWriteAccess
0x1C001C588: "149999" ??_C@_1O@KPIACOGL@?$AA1?$AA4?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C0001B20: ExAllocateFromPagedLookasideList
0x1C0019130: FltQueryInformationByName
0x1C00310A0: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0031108: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C001D790: "IRP_MJ_VOLUME_DISMOUNT" ??_C@_0BH@LLMGKFLL@IRP_MJ_VOLUME_DISMOUNT?$AA@
0x1C00209D0: "A filter changed the IRQL across" ??_C@_0IP@PLOCEBLI@A?5filter?5changed?5the?5IRQL?5across@
0x1C0021C78: "Breaking in... (press g<enter> t" ??_C@_0DK@HDPPNADI@Breaking?5in?4?4?4?5?$CIpress?5g?$DMenter?$DO?5t@
0x1C001DBA8: "IRP_MJ_CREATE_MAILSLOT" ??_C@_0BH@CKPKPKHL@IRP_MJ_CREATE_MAILSLOT?$AA@
0x1C0031960: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C001E448: FltpTelemetryLegacyFilterInfoFormat
0x1C0040968: FltpInitInstance
0x1C005E250: FltvGetContextsEx
0x1C00441D0: FltIsEcpAcknowledged
0x1C0018A50: FltAdjustDeviceStackSizeForIoRedirection
0x1C0031870: "__cdecl _imp_IoCancelFileOpen" __imp_IoCancelFileOpen
0x1C005A990: FltPrePrepareComplete
0x1C001B9C0: WPP_ThisDir_CTLGUID_FltMgr
0x1C0021400: "A filter issued a set informatio" ??_C@_0HH@MGNDNIMN@A?5filter?5issued?5a?5set?5informatio@
0x1C001E3C0: WPP_dd9e09b245563beafc1a546861bb6ff0_Traceguids
0x1C0018234: WPP_SF_dZZ
0x1C000AA60: FltSetFileContext
0x1C001CB68: "\FileSystem\psfs" ??_C@_1CC@KDCBGPIC@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAp?$AAs?$AAf?$AAs?$AA?$AA@
0x1C003F62C: TargetedIOCtrlGenerateECP
0x1C001D738: "IRP_MJ_CREATE_DESTINATION_FILE_N" ??_C@_0DA@NPAGDFDA@IRP_MJ_CREATE_DESTINATION_FILE_N@
0x1C0061430: FltvFsControlFile
0x1C0021060: "A filter has returned FLT_PREOP_" ??_C@_0IO@EHDOBMBO@A?5filter?5has?5returned?5FLT_PREOP_@
0x1C001DFE0: "FSFilter System Recovery" ??_C@_1DC@MFFEIHP@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?$AA@
0x1C004B758: FltpAttachFrame
0x1C001DC98: WPP_39a1600fdddd34ead9da08e9cc05f806_Traceguids
0x1C001CEA8: "49999" ??_C@_1M@DDDHDEAB@?$AA4?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C001CC90: "\FileSystem\Refsv1" ??_C@_1CG@JNFIJAGN@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAe?$AAf?$AAs?$AAv?$AA1?$AA?$AA@
0x1C004E200: FltLoadFilter
0x1C0041B5C: FltpEnableStreamListForSectionContexts
0x1C000CA80: FltpSynchronizedOperationCompletion
0x1C00311C0: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C004BB9C: FltpInitializeFrame
0x1C00627B0: FltvQuerySecurityObject
0x1C0048028: FltpDataScanConflictResumeCompletion
0x1C0019DE0: FltGetNewSystemBufferAddress
0x1C0031640: "__cdecl _imp_IoGetBaseFileSystemDeviceObject" __imp_IoGetBaseFileSystemDeviceObject
0x1C001B538: "__cdecl _guard_iat_table" __guard_iat_table
0x1C001CAB8: "\FileSystem\InCDfs" ??_C@_1CG@NBPHDDDP@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAI?$AAn?$AAC?$AAD?$AAf?$AAs?$AA?$AA@
0x1C00311D0: "__cdecl _imp_ExReleaseCacheAwarePushLockExclusive" __imp_ExReleaseCacheAwarePushLockExclusive
0x1C000FF40: memcpy
0x1C001DAF8: "IRP_MJ_DIRECTORY_CONTROL" ??_C@_0BJ@NCGIANAN@IRP_MJ_DIRECTORY_CONTROL?$AA@
0x1C004C208: FltpFreeFrameLookasideLists
0x1C000139C: FltpEnableNameCachingForVolume
0x1C00212D0: "A filter called FltOplockFsctrl(" ??_C@_0KO@HGGMEJKK@A?5filter?5called?5FltOplockFsctrl?$CI@
0x1C001C870: "NetWare" ??_C@_1BA@DPBBHJNL@?$AAN?$AAe?$AAt?$AAW?$AAa?$AAr?$AAe?$AA?$AA@
0x1C001DB50: "IRP_MJ_INTERNAL_DEVICE_CONTROL" ??_C@_0BP@ODEFGAEK@IRP_MJ_INTERNAL_DEVICE_CONTROL?$AA@
0x1C0031990: "__cdecl _imp_FsRtlNotifyFilterChangeDirectory" __imp_FsRtlNotifyFilterChangeDirectory
0x1C001BC80: "\DosDevices\FltMgrMsg" ??_C@_1CM@DKGAKOBO@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AAM?$AAs?$AAg?$AA?$AA@
0x1C005C504: FltpvGetFileObjectForHandle
0x1C000AD40: FltReadFile
0x1C00413F4: FltpSetSectionContext
0x1C0043764: FltpCommonDeviceControl
0x1C0054CA0: FltFreeOpenReparseList
0x1C005C3DC: FltpvFreeVerifierObject
0x1C000E308: FltpCompleteCompletionNode
0x1C001E3D0: "\pipe" ??_C@_1M@IDGMBKOF@?$AA?2?$AAp?$AAi?$AAp?$AAe?$AA?$AA@
0x1C004B578: InsertContextEntry
0x1C0005F90: FltpLegacyProcessingAfterPreCallbacksCompleted
0x1C0017D60: FltOplockBreakToNoneEx
0x1C0019350: FltSetFsZeroingOffsetRequired
0x1C0031568: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C00168F0: FltSetVolumeContext
0x1C0031320: "__cdecl _imp_FsRtlInsertPerFileContext" __imp_FsRtlInsertPerFileContext
0x1C0031980: "__cdecl _imp_IoGetCurrentProcess" __imp_IoGetCurrentProcess
0x1C0031520: "__cdecl _imp_FsRtlOplockKeysEqual" __imp_FsRtlOplockKeysEqual
0x1C00161F8: FltpPerfTraceOperationFailure
0x1C00553F8: FltpEnumerateMiniFilterOnlyInformation
0x1C0021510: "A filter has returned an invalid" ??_C@_0IG@JLDBAECA@A?5filter?5has?5returned?5an?5invalid@
0x1C001F240: "A filter is trying to lock buffe" ??_C@_0EJ@DHAABDLF@A?5filter?5is?5trying?5to?5lock?5buffe@
0x1C001B620: FltpServicesRegistryPath
0x1C0031740: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C005F650: FltvRetainSwappedBufferMdlAddress
0x1C0062A20: FltvRemoveOpenReparseEntry
0x1C000F610: FltCbdqInitialize
0x1C001E148: "FSFilter Encryption" ??_C@_1CI@PKKGENEC@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0048CF0: FltpFsNotification
0x1C00619D0: FltvGetTunneledName
0x1C001C880: "\FileSystem\NetwareWorkstation" ??_C@_1DO@MGDPGLEC@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAa?$AAr?$AAe?$AAW?$AAo?$AAr?$AAk?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0031160: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C002B3D0: pfnWppGetVersion
0x1C00210F0: "A filter has completed an operat" ??_C@_0OK@MCKBEFJF@A?5filter?5has?5completed?5an?5operat@
0x1C0031340: "__cdecl _imp_FsRtlRemovePerFileContext" __imp_FsRtlRemovePerFileContext
0x1C0047FB0: FltpDataScanConflictQueuedWorkerThread
0x1C00311A8: "__cdecl _imp_FsRtlCancellableWaitForSingleObject" __imp_FsRtlCancellableWaitForSingleObject
0x1C000F520: FltpCancelRoutine
0x1C0059AC0: FltpSendModernAppTerminationWorker
0x1C000FCCD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C00460D0: FltMgrFsRtlAttachDeviceCallback
0x1C0042758: FltpGetOpenedDestinationFileName
0x1C001C628: "409999" ??_C@_1O@CICFHLHJ@?$AA4?$AA0?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C0031230: "__cdecl _imp_TmRollbackComplete" __imp_TmRollbackComplete
0x1C0048260: FltpDoInstanceDetachNotification
0x1C0031428: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C003B910: FltRemoveOpenReparseEntry
0x1C0031180: "__cdecl _imp_KeEnterGuardedRegion" __imp_KeEnterGuardedRegion
0x1C001DCF0: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1C000E9B0: FltCompletePendedPostOperation
0x1C003E408: FltpGetOpenedFileName
0x1C004C170: FltpCleanupFrame
0x1C002B400: FltTelemetryGlobals
0x1C0031620: "__cdecl _imp_IoSetIoPriorityHint" __imp_IoSetIoPriorityHint
0x1C000FF40: memmove
0x1C000D7C8: FltpWaitForRundownProtectionReleaseInternal
0x1C00416E0: IssueControlOperation
0x1C001833C: WPP_SF_dZZZZ
0x1C001C6A0: "\FileSystem\Ntfs" ??_C@_1CC@NPNONEBA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAN?$AAt?$AAf?$AAs?$AA?$AA@
0x1C001DFC8: "249998.99" ??_C@_1BE@CBHOHFEE@?$AA2?$AA4?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001F370: "A filter is trying to use a call" ??_C@_0HN@INPCNOJA@A?5filter?5is?5trying?5to?5use?5a?5call@
0x1C001C7D0: "TermSrv" ??_C@_1BA@DICNOGAJ@?$AAT?$AAe?$AAr?$AAm?$AAS?$AAr?$AAv?$AA?$AA@
0x1C000F82C: RtlUnicodeStringCatString
0x1C0031730: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C001C5C8: "174999" ??_C@_1O@CNOAHHCL@?$AA1?$AA7?$AA4?$AA9?$AA9?$AA9?$AA?$AA@
0x1C00024E0: FltReleaseContext
0x1C001B1F8: FileSystemRegKeyName
0x1C00310F8: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0016620: FltDeleteStreamContext
0x1C0031750: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C005E000: FltvDoCompletionProcessingWhenSafe
0x1C00613B0: FltvFlushBuffers
0x1C00317E0: "__cdecl _imp_IoCsqInitialize" __imp_IoCsqInitialize
0x1C001ECE0: "A filter has not marked dirty ca" ??_C@_0FE@EHOMMAPJ@A?5filter?5has?5not?5marked?5dirty?5ca@
0x1C0001CC0: FltpGetFsDeviceObjectAfterMount
0x1C00548B4: FltpSetTxVolVolNameCachePurge
0x1C0001A4C: FltpEnableNameCachingForStream
0x1C0003A80: FltpPassThroughCompletion
0x1C0049804: FltpFreeUnicodeString
0x1C000FD1C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C00319C8: "__cdecl _imp_KeIsExecutingDpc" __imp_KeIsExecutingDpc
0x1C001B5E0: FltpRegAltitudeValueName
0x1C0008840: GetContextFromStreamList
0x1C000247C: ExFreeToPagedLookasideList
0x1C0031538: "__cdecl _imp_IoGetDeviceObjectPointer" __imp_IoGetDeviceObjectPointer
0x1C001DCC8: "WMI\GlobalLogger\" ??_C@_1CE@NKMJEEEC@?$AAW?$AAM?$AAI?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AA?2?$AA?$AA@
0x1C0031430: "__cdecl _imp_IoIsOperationSynchronous" __imp_IoIsOperationSynchronous
0x1C000D670: FltpFastIoMdlReadComplete
0x1C000A4D0: FltPerformAsynchronousIo
0x1C001DA28: "IRP_MJ_READ" ??_C@_0M@LJKCMGIA@IRP_MJ_READ?$AA@
0x1C0021BC0: "[FltMgr] Mini-filter verificatio" ??_C@_0DN@BPGNEKNH@?$FLFltMgr?$FN?5Mini?9filter?5verificatio@
0x1C00404D0: FltEnumerateInstances
0x1C005E150: FltvFreeGenericWorkItem
0x1C002B500: FltpVerifierFlags
0x1C001C6F8: "CDFS" ??_C@_19MEJGKOAA@?$AAC?$AAD?$AAF?$AAS?$AA?$AA@
0x1C0047F8C: FltpDetranslateIoctlDataBuffers
0x1C001B900: "\DosDevices\FltMgr" ??_C@_1CG@BGGOCKLP@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AA?$AA@
0x1C0031890: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0004100: FltpPerformPostCallbacks
0x1C001F550: "An attempt was made to issue an " ??_C@_0II@OPKKKGKK@An?5attempt?5was?5made?5to?5issue?5an?5@
0x1C0019ED0: FltpDataScanCsqCompleteCanceledIrp
0x1C004CCF8: TlgRegisterAggregateProvider
0x1C00317F8: "__cdecl _imp_ExAcquireRundownProtectionCacheAware" __imp_ExAcquireRundownProtectionCacheAware
0x1C000E250: "void __cdecl TlgAggregateInternalFlushTimerCallbackKernelMode(struct _EX_TIMER * __ptr64,void * __ptr64)" ?TlgAggregateInternalFlushTimerCallbackKernelMode@@YAXPEAU_EX_TIMER@@PEAX@Z
0x1C0031248: "__cdecl _imp_KeQueryActiveProcessorCountEx" __imp_KeQueryActiveProcessorCountEx
0x1C0031670: "__cdecl _imp_IoSetFsZeroingOffsetRequired" __imp_IoSetFsZeroingOffsetRequired
0x1C001CB20: "exFAT" ??_C@_1M@LONMGNLC@?$AAe?$AAx?$AAF?$AAA?$AAT?$AA?$AA@
0x1C005E8B0: FltvObjectDereference
0x1C001F110: "A filter has changed the buffer " ??_C@_0OJ@NKCDFCAD@A?5filter?5has?5changed?5the?5buffer?5@
0x1C000CB00: FltGetRequestorProcess
0x1C004A1FC: FltpTelemetrySerializeFilterRegistryInstances
0x1C001BB80: "ManualAttachDelay" ??_C@_1CE@CNPAEILE@?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x1C0031830: "__cdecl _imp_FsRtlSendModernAppTermination" __imp_FsRtlSendModernAppTermination
0x1C000E0E8: FltpSynchronizeIoCleanup
0x1C003C120: FltReleaseFileNameInformation
0x1C000A128: DeleteContextFromStreamList
0x1C002A480: WPP_MAIN_CB
0x1C0031528: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C0004760: FltpFreeIrpCtrl
0x1C0056FD0: FltInitializeOplock
0x1C00599D0: FltpSafeCompletionWorker
0x1C0021DB0: WPP_82e6d461d8893cf7305221e4500b26a0_Traceguids
0x1C0031388: "__cdecl _imp_FsRtlFastCheckLockForWrite" __imp_FsRtlFastCheckLockForWrite
0x1C004890C: FltpGetLoadedLegacyFiltersList
0x1C00310E8: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C004ADD4: FltpLogEventWithObjectID
0x1C005CBF0: FltpvValidateFileNameOptions
0x1C005B180: FltIsVolumeWritable
0x1C0001D64: FltpMarkAllCallbacksForDeletion
0x1C0020A60: "A filter changed the thread APC " ??_C@_0KF@KCPPNANN@A?5filter?5changed?5the?5thread?5APC?5@
0x1C003E2E0: FltpAllocateStreamListCtrl
0x1C0055AE0: FltAllocateFileLock
0x1C005C5F8: FltpvLinkResourceToFilter
0x1C0019E10: FltRetainSwappedBufferMdlAddress
0x1C001BBA8: "ManualAttachTimerPeriod" ??_C@_1DA@DBAIJNPH@?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAT?$AAi?$AAm?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x1C0031820: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C00467A0: FltCloseClientPort
0x1C0055C60: FltFreeFileLock
0x1C001B718: "true" ??_C@_19FKLFLPMF@?$AAt?$AAr?$AAu?$AAe?$AA?$AA@
0x1C0060840: FltvCopyOpenReparseList
0x1C001DE10: "389998.99" ??_C@_1BE@FIOADHAI@?$AA3?$AA8?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001DB80: "IRP_MJ_LOCK_CONTROL" ??_C@_0BE@LODBBEFP@IRP_MJ_LOCK_CONTROL?$AA@
0x1C003F4A0: FltGetVolumeFromFileObject
0x1C001E2F8: "69998.99" ??_C@_1BC@HMJAMHKF@?$AA6?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001C7E0: "\Driver\rdpdr" ??_C@_1BM@INOPBLOE@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAr?$AAd?$AAp?$AAd?$AAr?$AA?$AA@
0x1C0002D80: DoReleaseContext
0x1C00316F8: "__cdecl _imp_IoCsqInsertIrpEx" __imp_IoCsqInsertIrpEx
0x1C0031018: "__cdecl _imp_ExReleaseFastMutex" __imp_ExReleaseFastMutex
0x1C003EEEC: QueryStandardLinkInformation
0x1C001B6B8: FltpTelemetryInstanceInfoFormat
0x1C001DA48: "IRP_MJ_QUERY_INFORMATION" ??_C@_0BJ@FPMLIFJJ@IRP_MJ_QUERY_INFORMATION?$AA@
0x1C001D890: "IRP_MJ_RESERVED-11" ??_C@_0BD@FFGCNLN@IRP_MJ_RESERVED?911?$AA@
0x1C001BB48: "ManualAttachIgnoredDevices" ??_C@_1DG@BIBBJBGI@?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AAd?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1C0018F60: FltGetIoPriorityHintFromFileObject
0x1C0031648: "__cdecl _imp_IoApplyPriorityInfoThread" __imp_IoApplyPriorityInfoThread
0x1C0044250: FltpFastIoMdlRead
0x1C005A564: FltpTelemetrySerializeLegacyFiltersInfo
0x1C0031270: "__cdecl _imp_FsRtlDeleteExtraCreateParameterLookasideList" __imp_FsRtlDeleteExtraCreateParameterLookasideList
0x1C005C0E0: FltpVerifyIoIrqlStatus
0x1C00464E0: FltSetTransactionContext
0x1C0041AD8: FltpRundownStreamForSectionConflict
0x1C000CEB0: FltpGetNextMessageWaiter
0x1C005D4D0: FltvAllocateCallbackDataEx
0x1C0020DA0: "A filter has changed CallbackDat" ??_C@_0BAP@BHCMCBAB@A?5filter?5has?5changed?5CallbackDat@
0x1C001B330: IrpNames
0x1C0018AD0: FltFastIoMdlRead
0x1C00312B8: "__cdecl _imp_FsRtlGetNextExtraCreateParameter" __imp_FsRtlGetNextExtraCreateParameter
0x1C0044BF0: FltGetVolumeProperties
0x1C00313D0: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C001CBA0: "\FileSystem\gpfs" ??_C@_1CC@OINMPCPA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAg?$AAp?$AAf?$AAs?$AA?$AA@
0x1C000AA98: FltpFilterMessage
0x1C00218D0: "A filter passed in an invalid na" ??_C@_0OE@FBBKCJJE@A?5filter?5passed?5in?5an?5invalid?5na@
0x1C0031308: "__cdecl _imp_IoSetTopLevelIrp" __imp_IoSetTopLevelIrp
0x1C001CE98: GUID_NULL
0x1C003ED04: FltpSetStreamListStandardInformationFlags
0x1C00356A8: FltpSysVolCreateSecurityDescriptor
0x1C001E910: "A filter tried to complete pende" ??_C@_0BBL@HCHHMOPJ@A?5filter?5tried?5to?5complete?5pende@
0x1C005F5E0: FltvRequestOperationStatusCallback
0x1C0031768: "__cdecl _imp_IoGetTopLevelIrp" __imp_IoGetTopLevelIrp
0x1C001DB98: "IRP_MJ_CLEANUP" ??_C@_0P@JJLCIODE@IRP_MJ_CLEANUP?$AA@
0x1C00623C0: FltvOpenVolume
0x1C004C544: FltpStartMonitoringFrame
0x1C001D6E8: "[Not known in free builds]" ??_C@_0BL@OGBIEMBJ@?$FLNot?5known?5in?5free?5builds?$FN?$AA@
0x1C00313E8: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C0059BEC: FltpTelemetryFilterRegistration
0x1C001E390: WPP_d5a5cf921b9d356db49303486b2fd9b5_Traceguids
0x1C00312C0: "__cdecl _imp_FsRtlAcknowledgeEcp" __imp_FsRtlAcknowledgeEcp
0x1C00438A0: FltpCloseControlDevice
0x1C001FBE0: "A filter tried to disallow an IR" ??_C@_0II@NJPEMBIL@A?5filter?5tried?5to?5disallow?5an?5IR@
0x1C0031040: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0031190: "__cdecl _imp_ExAcquireRundownProtectionCacheAwareEx" __imp_ExAcquireRundownProtectionCacheAwareEx
0x1C001DE68: "FSFilter Anti-Virus" ??_C@_1CI@OPGCCOBJ@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAA?$AAn?$AAt?$AAi?$AA?9?$AAV?$AAi?$AAr?$AAu?$AAs?$AA?$AA@
0x1C005B4E0: FltpSyncOpWorker
0x1C0057AB0: FltCreateNamedPipeFile
0x1C005E540: FltvGetSectionContext
0x1C0008400: FltGetStreamContext
0x1C000DE1C: FltpGetCallbackNodeForInstance
0x1C0035140: FltTagFile
0x1C00198E0: FltAcquireResourceShared
0x1C0059B18: FltpCleanupFileObjectContextsForLastFilterRemoval
0x1C00482E0: FltpProcessDeferredIoWorkItem
0x1C003C040: DeleteStreamListCtrlCallback
0x1C001E0A8: "189998.99" ??_C@_1BE@JCCOEBIE@?$AA1?$AA8?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C000A6D8: SetContextIntoFileList
0x1C001CC20: "\FileSystem\Msfs" ??_C@_1CC@DOCMGGAK@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAs?$AAf?$AAs?$AA?$AA@
0x1C000F2B0: FltSetCancelCompletion
0x1C0055170: FltGetBottomInstance
0x1C000D96C: FltpInsertPerFileContext
0x1C00208B0: "A filter is trying to reissue sy" ??_C@_0HF@JMAJNOHE@A?5filter?5is?5trying?5to?5reissue?5sy@
0x1C001B1E8: FltMgrMsgDeviceName
0x1C0057590: FltCompareInstanceAltitudes
0x1C0060D60: FltvCreateSectionForDataScan
0x1C0031558: "__cdecl _imp_MmIsThisAnNtAsSystem" __imp_MmIsThisAnNtAsSystem
0x1C005AD8C: FltpGetInformation
0x1C0036760: FltCommitFinalizeComplete
0x1C005D8A0: FltvCompareInstanceAltitudes
0x1C0021C54: "%c" ??_C@_02HAOIJKIC@?$CFc?$AA@
0x1C002B3E8: pfnWppQueryTraceInformation
0x1C00436A0: FltFindExtraCreateParameter
0x1C00588A0: FltUnloadFilter
0x1C0047F4C: FltpCleanupTargetInfo
0x1C004629C: FltpCleanupCommunicationPort
0x1C00313E0: "__cdecl _imp_KeGetRecommendedSharedDataAlignment" __imp_KeGetRecommendedSharedDataAlignment
0x1C001DD88: "429998.99" ??_C@_1BE@KLCBFEBE@?$AA4?$AA2?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C00441F0: FltGetRequestorSessionId
0x1C001FEC0: "this current instance. Some or a" ??_C@_0BMJ@KLJALMOD@this?5current?5instance?4?5Some?5or?5a@
0x1C0054760: FltDeleteTransactionContext
0x1C00317C8: "__cdecl _imp_FsRtlCreateSectionForDataScan" __imp_FsRtlCreateSectionForDataScan
0x1C001CDF8: "\Driver\NfsRdr" ??_C@_1BO@GBEDFBIF@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAN?$AAf?$AAs?$AAR?$AAd?$AAr?$AA?$AA@
0x1C00463EC: FltpDisconnectPort
0x1C001DAB8: "IRP_MJ_QUERY_VOLUME_INFORMATION" ??_C@_0CA@FDGJPBOD@IRP_MJ_QUERY_VOLUME_INFORMATION?$AA@
0x1C004C390: FltpAdjustFrameAltitudesForLegacyFilter
0x1C0046B50: FltpReissuePostOperationFailureCallout
0x1C0009E38: TreeUnlinkNextNode
0x1C0045320: FltReissueSynchronousIo
0x1C001B5F8: FltpRegFlagsValueName
0x1C001A2DC: FltpGetUniqueIdentifierForVolumeSnapshot
0x1C00318A0: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C001B9B0: PROV_FLTMGR
0x1C0019E90: FltFreePoolAlignedWithTag
0x1C0041630: FltpSetPurgeFailureMode
0x1C0059050: FltpCallShortFileNameHandler
0x1C005B314: FltpScanForVolumeByName
0x1C0001540: FltReferenceContext
0x1C0061790: FltvGetFilterFromInstance
0x1C0008350: FltGetStreamHandleContext
0x1C0004980: FltpDispatch
0x1C00075C0: FltGetFileNameInformation
0x1C00571B0: FltOplockIsSharedRequest
0x1C000FC20: FltAllocatePoolAlignedWithTag
0x1C000F988: FltpFreeTelemetryStringRoutine
0x1C0001918: FltpFreeMdlChain
0x1C001D6D4: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x1C001FC70: "A filter tried to release/free a" ??_C@_0PE@JOBDPFPK@A?5filter?5tried?5to?5release?1free?5a@
0x1C00310B0: "__cdecl _imp_KeInitializeSemaphore" __imp_KeInitializeSemaphore
0x1C000DFC0: FltpProcessIrpCtrlStackProfiler
0x1C001A1FC: FltpGetUniqueIdentifierForFilter
0x1C0001AC0: FltpDisableNameCachingForStream
0x1C0031550: "__cdecl _imp_MmQuerySystemSize" __imp_MmQuerySystemSize
0x1C001E5B0: "A filter returned an unknown pos" ??_C@_0GA@EGGENIAF@A?5filter?5returned?5an?5unknown?5pos@
0x1C0035880: FltpAllocateTxVolContext
0x1C0018C90: FltFastIoMdlWriteComplete
0x1C00574C4: FltpDoAltitudeAdjustment
0x1C001E030: "FSFilter Cluster File System" ??_C@_1DK@JFKGHEKI@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1C001E348: "FSFilter System" ??_C@_1CA@CKLINDBH@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1C000FD84: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C0043C40: FltGetFilterFromName
0x1C003FCC0: FltGetVolumeInstanceFromName
0x1C001C6C8: "FAT" ??_C@_17PFEEKKMA@?$AAF?$AAA?$AAT?$AA?$AA@
0x1C0031588: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1C000A290: FltpSetupPerformIo
0x1C005AB20: FltRollbackEnlistment
0x1C00310B8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C001D7C0: "IRP_MJ_MDL_WRITE_COMPLETE" ??_C@_0BK@EPKNOGPA@IRP_MJ_MDL_WRITE_COMPLETE?$AA@
0x1C001C658: "420000" ??_C@_1O@HNEDMLEF@?$AA4?$AA2?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0020B10: "This count is decremented each t" ??_C@_0BEM@COHPKOO@This?5count?5is?5decremented?5each?5t@
0x1C001AB20: FltSetIoCacheIntention
0x1C001E100: "FSFilter Compression" ??_C@_1CK@FLAPCHHI@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C001D8F0: "IRP_MJ_QUERY_OPEN" ??_C@_0BC@EOOMGICH@IRP_MJ_QUERY_OPEN?$AA@
0x1C0021770: "A filter attempted to issue I/O " ??_C@_0LN@DEKMFOIB@A?5filter?5attempted?5to?5issue?5I?1O?5@
0x1C00668C4: FltpInitThrottledWorkItemCtrl
0x1C0016060: FltClearCallbackDataDirty
0x1C0060E50: FltvCreateSystemVolumeInformationFolder
0x1C005CE9C: FltpvVerifyIoIrqlStatus
0x1C001BDD0: "RtlQueryRegistryValuesEx" ??_C@_1DC@OAPHKEJN@?$AAR?$AAt?$AAl?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AAE?$AAx?$AA?$AA@
0x1C0005CB0: FltpHandlePreCallbackReturnStatus
0x1C0031148: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00496AC: FltpCreateControlDeviceObject
0x1C001DF78: "269998.99" ??_C@_1BE@CEKKBOMH@?$AA2?$AA6?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0002EF0: FltpReleaseStreamListCtrl
0x1C001C740: "\FileSystem\Udfs" ??_C@_1CC@HMCLJPCE@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAU?$AAd?$AAf?$AAs?$AA?$AA@
0x1C0058250: FltTagFileEx
0x1C001B1B0: FrameZeroAltitude
0x1C0036610: FltCloseSectionForDataScan
0x1C001C690: "NTFS" ??_C@_19ENNDBEJL@?$AAN?$AAT?$AAF?$AAS?$AA?$AA@
0x1C003A910: FltpExpandFilePathWorker
0x1C0057040: FltOplockFsctrl
0x1C003BA50: FltpFastIoQueryBasicInfo
0x1C005CA64: FltpvUnlinkResourceFromFilter
0x1C001C960: "Roxio-UDF1" ??_C@_1BG@EMAMMBFP@?$AAR?$AAo?$AAx?$AAi?$AAo?$AA?9?$AAU?$AAD?$AAF?$AA1?$AA?$AA@
0x1C001B5C0: FLTMGR_TIOCTRL_ECP_GUID
0x1C000FCF8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C004E2A0: FltFreeSecurityDescriptor
0x1C0001B60: TreeLookup
0x1C0031850: "__cdecl _imp_RtlSetOwnerSecurityDescriptor" __imp_RtlSetOwnerSecurityDescriptor
0x1C001E018: "229998.99" ??_C@_1BE@CPACMJMB@?$AA2?$AA2?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C000DA70: FltSetInstanceContext
0x1C000EBD0: FltCbdqInsertIo
0x1C001DE28: "FSFilter Undelete" ??_C@_1CE@IHHNDMOB@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAU?$AAn?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1C004DDB0: FltGetRoutineAddress
0x1C0031930: "__cdecl _imp_MmIsDriverSuspectForVerifier" __imp_MmIsDriverSuspectForVerifier
0x1C00315F0: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C0055F50: FltpFastIoCheckIfPossible
0x1C00469B0: FltpSynchronizeWithDatascan
0x1C001BA80: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0054DB0: FltEnumerateFilters
0x1C00315B8: "__cdecl _imp_ExRundownCompleted" __imp_ExRundownCompleted
0x1C001BC38: "LostItemDetectionDelay" ??_C@_1CO@CBFABFHF@?$AAL?$AAo?$AAs?$AAt?$AAI?$AAt?$AAe?$AAm?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x1C0044D80: FltpFastIoPrepareMdlWrite
0x1C005C7E4: FltpvPreAllocateVerifierObject
0x1C0031618: "__cdecl _imp_IoRetrievePriorityInfo" __imp_IoRetrievePriorityInfo
0x1C00315E8: "__cdecl _imp_ExRaiseStatus" __imp_ExRaiseStatus
0x1C001CEF0: "\Device\NamedPipe" ??_C@_1CE@NKNMNDKL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAa?$AAm?$AAe?$AAd?$AAP?$AAi?$AAp?$AAe?$AA?$AA@
0x1C0040FA8: FltpAllocateFileListCtrl
0x1C00561F0: FltpFastIoUnlockAll
0x1C0031758: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C00584BC: FltpCancelFileOpen
0x1C0016D34: FltpReleaseContexts
0x1C001D768: "IRP_MJ_CREATE_FILE_NAME_INFORMAT" ??_C@_0CE@NCDAKBHB@IRP_MJ_CREATE_FILE_NAME_INFORMAT@
0x1C001A5FC: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x1C0055070: FltEnumerateVolumes
0x1C0031030: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C0020C60: "A filter changed the threads Spe" ??_C@_0BDI@LCOOOAHE@A?5filter?5changed?5the?5threads?5Spe@
0x1C0031818: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C00311B8: "__cdecl _imp_IoAcquireCancelSpinLock" __imp_IoAcquireCancelSpinLock
0x1C001CD20: "\Driver\RAW" ??_C@_1BI@FIKEAHAF@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAR?$AAA?$AAW?$AA?$AA@
0x1C00318B8: "__cdecl _imp_ExUuidCreate" __imp_ExUuidCreate
0x1C00312D0: "__cdecl _imp_FsRtlIsEcpAcknowledged" __imp_FsRtlIsEcpAcknowledged
0x1C000EC50: FltCbdqRemoveIo
0x1C001CDB8: "\Driver\MRxSmb" ??_C@_1BO@EJFBIEBL@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAM?$AAR?$AAx?$AAS?$AAm?$AAb?$AA?$AA@
0x1C00312E0: "__cdecl _imp_ZwCreateFile" __imp_ZwCreateFile
0x1C0008FD0: FltpFreeNameGenerationContext
0x1C00311C8: "__cdecl _imp_ExAcquireCacheAwarePushLockExclusive" __imp_ExAcquireCacheAwarePushLockExclusive
0x1C00470D0: FltpFindFirst
0x1C004C058: FltpInitializeBackPocketIrpCtrls
0x1C0061220: FltvEnumerateVolumes
0x1C004842C: FltpDetachFromFileSystemDevice
0x1C0038DAC: FltpGetNormalizedDestinationFileName
0x1C001D6C8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C002B3D8: pfnEtwRegisterClassicProvider
0x1C0047E98: FltpInitializeManagerVolumeCcb
0x1C001C730: "UDFS" ??_C@_19OOCGFPKP@?$AAU?$AAD?$AAF?$AAS?$AA?$AA@
0x1C001AB48: StRtlGetIoCacheIntention
0x1C001D720: "NotSYNC" ??_C@_07CDGBMKKN@NotSYNC?$AA@
0x1C003BD38: FltpMsgDispatch
0x1C0031848: "__cdecl _imp_ExWaitForRundownProtectionReleaseCacheAware" __imp_ExWaitForRundownProtectionReleaseCacheAware
0x1C0041CD4: FltpCreateInstanceFromName
0x1C0002BB0: TreeUnlinkMulti
0x1C000AA00: FltpReleaseFileListCtrl
0x1C001B728: "false" ??_C@_1M@HLGKFCJM@?$AAf?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x1C001B560: "System Volume Information" ??_C@_1DE@LIBHJBEH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0031A08: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C0048E64: FltpAttachToFileSystemDevice
0x1C0031630: "__cdecl _imp_IoGetSilo" __imp_IoGetSilo
0x1C0061D50: FltvGetVolumeInstanceFromName
0x1C0049DD0: FltpGetLoadOrderGroupRegistryValue
0x1C001C598: "140000" ??_C@_1O@BGNNAAMI@?$AA1?$AA4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0001710: FltReuseCallbackData
0x1C00316C0: "__cdecl _imp_IoCsqInitializeEx" __imp_IoCsqInitializeEx
0x1C0001010: FltWriteFile
0x1C000FA20: FltDeleteVolumeContext
0x1C0017AF8: WPP_SF_sqqZs
0x1C0043D80: FltGetVolumeFromName
0x1C0031228: "__cdecl _imp_TmCommitComplete" __imp_TmCommitComplete
0x1C0019A14: WPP_SF_ZZ
0x1C0031380: "__cdecl _imp_FsRtlFastCheckLockForRead" __imp_FsRtlFastCheckLockForRead
0x1C0061810: FltvGetFilterFromName
0x1C003FE98: FltpReallocNameControl
0x1C0018164: WPP_SF_ZS
0x1C0046AAC: FltpGetAnySectionContext
0x1C0001B88: FltpGetUniqueIdentifierForVolume
0x1C0009300: FltGetFileContext
0x1C00313F0: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C00314D8: "__cdecl _imp_IoSetActivityIdIrp" __imp_IoSetActivityIdIrp
0x1C0019E00: FltGetSwappedBufferMdlAddress
0x1C0039A70: FltpFastIoDeviceControl
0x1C00461E4: CreateTemporaryFileNameInformation
0x1C0031690: "__cdecl _imp_ZwUnloadDriver" __imp_ZwUnloadDriver
0x1C00319B0: "__cdecl _imp_IoGetActivityIdIrp" __imp_IoGetActivityIdIrp
0x1C001CD38: "\Driver\Ntfs" ??_C@_1BK@KFAANOEH@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAN?$AAt?$AAf?$AAs?$AA?$AA@
0x1C001C528: "89999" ??_C@_1M@DGDNHJIA@?$AA8?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C00314E0: "__cdecl _imp_FsRtlCurrentBatchOplock" __imp_FsRtlCurrentBatchOplock
0x1C005944C: FltpOpenFileForFailedSupersede
0x1C001A420: RtlUnicodeStringCatStringEx
0x1C0015BFC: WPP_SF_Z
0x1C001585C: FltpFreeStaticIrpCtrl
0x1C0018E80: FltGetIoAttributionHandleFromCallbackData
0x1C0019980: FltpCancelMessageWaiter
0x1C001DB18: "IRP_MJ_FILE_SYSTEM_CONTROL" ??_C@_0BL@MFHGBIDL@IRP_MJ_FILE_SYSTEM_CONTROL?$AA@
0x1C001A750: FltpIsDaxVolume
0x1C0045640: "void __cdecl TlgAggregateInternalFlushWorkItemRoutineKernelMode(void * __ptr64)" ?TlgAggregateInternalFlushWorkItemRoutineKernelMode@@YAXPEAX@Z
0x1C0037348: FltpAttachDeviceObject
0x1C001C668: "Raw" ??_C@_17LIJOJAPH@?$AAR?$AAa?$AAw?$AA?$AA@
0x1C0055320: FltGetUpperInstance
0x1C003EB00: FltAddOpenReparseEntry
0x1C001BD0C: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C00019F0: FltpRecordLastFileRenameForVolume
0x1C001B8F8: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x1C0015980: WPP_SF_
0x1C005A1D0: FltpTelemetryInitInstance
0x1C0017E0C: FltpCommonOplockCheckBreak
0x1C00563E0: FltpFastIoUnlockAllByKey
0x1C004C8B4: FltpInitLookasideLists
0x1C0002110: FltFreeGenericWorkItem
0x1C0058628: FltpOpenLinkOrRenameTarget
0x1C001C5F8: "180000" ??_C@_1O@BDNHENEJ@?$AA1?$AA8?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0061600: FltvGetDestinationFileNameInformation
0x1C001C558: "100000" ??_C@_1O@BFNLDLLH@?$AA1?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C001D820: "IRP_MJ_MDL_READ" ??_C@_0BA@OKLGMOHO@IRP_MJ_MDL_READ?$AA@
0x1C003797C: FltpDeleteAllStreamListCtrls
0x1C00581E0: FltSetSecurityObject
0x1C0058D50: FltpMiniFilterDriverUnload
0x1C000B610: FltSendMessage
0x1C001F950: "An attempt was made to reference" ??_C@_0EP@FEPFKFNB@An?5attempt?5was?5made?5to?5reference@
0x1C0019FC0: FltDoCompletionProcessingWhenSafe
0x1C000D490: FltLockUserBuffer
0x1C0016780: FltGetVolumeContext
0x1C000CCB0: FltMgrFsRtlEcpCleanup
0x1C00315A0: "__cdecl _imp_ExFreeCacheAwareRundownProtection" __imp_ExFreeCacheAwareRundownProtection
0x1C004A560: FltRegisterFilter
0x1C0002420: FindNextRightSubtree
0x1C00613F0: FltvFreeOpenReparseList
0x1C0003180: FltAllocateCallbackData
0x1C005AA10: FltPrepareComplete
0x1C000B1B8: FltpSetCallbacksForInstance
0x1C005D860: FltvCbdqRemoveNextIo
0x1C0036688: FltpClearPurgeFailureMode
0x1C0059EA0: FltpTelemetryFilterStartFiltering
0x1C0047CA0: FltDeviceIoControlFile
0x1C00481B0: FltDetachVolume
0x1C001DEA8: "FSFilter Replication" ??_C@_1CK@BAFOGMPH@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAR?$AAe?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0002240: FltpFilterReply
0x1C005E0B0: FltvFreeCallbackData
0x1C000D5E0: FltGetIoPriorityHintFromCallbackData
0x1C0002B00: FltpPostFsFilterOperation
0x1C0002530: DoFreeContext
0x1C004DB10: FltCreateCommunicationPort
0x1C0002154: FltpDataScanConflictProcessing
0x1C0062BE0: FltvTagFile
0x1C0031438: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C0037CE4: FltpInitVolume
0x1C0059294: FltpGetShortFileName
0x1C0018AB0: FltApplyPriorityInfoThread
0x1C001E368: "29998.99" ??_C@_1BC@HHDIBAKD@?$AA2?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0017590: FltpFastIoMdlWriteCompleteCompressed
0x1C005D660: FltvAllocateDeferredIoWorkItem
0x1C005E980: FltvPerformAsynchronousIo
0x1C0058FE0: FltPurgeFileNameInformationCache
0x1C004E170: FltpLoadFilter
0x1C0031688: "__cdecl _imp_IoPropagateIrpExtension" __imp_IoPropagateIrpExtension
0x1C00316B0: "__cdecl _imp_IoIs32bitProcess" __imp_IoIs32bitProcess
0x1C004C690: FltpStartManualDeviceAttachChecks
0x1C00415CC: FltpReinitStreamForSectionConflict
0x1C0046110: FltCancellableWaitForSingleObject
0x1C0062860: FltvReissueSynchronousIo
0x1C0031118: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C000CE10: FltpRemoveMessageWaiter
0x1C005A070: FltpTelemetryFreeInstance
0x1C00410A0: FltGetDestinationFileNameInformation
0x1C001CA68: "FS_REC" ??_C@_1O@FFPCPHPB@?$AAF?$AAS?$AA_?$AAR?$AAE?$AAC?$AA?$AA@
0x1C0039650: FltCreateFileEx2
0x1C0021C38: "FILTER VERIFIER WARNING: " ??_C@_0BK@CFBFKBNA@FILTER?5VERIFIER?5WARNING?3?5?$AA@
0x1C001A9EC: WPP_SF_qdqqqd
0x1C00629E0: FltvReleaseFileNameInformation
0x1C00317B0: "__cdecl _imp_ObIsKernelHandle" __imp_ObIsKernelHandle
0x1C0001D28: FltpCompleteRequest
0x1C001CBE0: "\FileSystem\npfs" ??_C@_1CC@BEMJNJDK@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAn?$AAp?$AAf?$AAs?$AA?$AA@
0x1C0017DB0: FltOplockKeysEqual
0x1C00193BC: FltpFastIoMdlCommon
0x1C0061AA0: FltvGetUpperInstance
0x1C002A538: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUuhUurogvintiUurogviUnkUlyquivUznwGEUkxsOlyq@fltMgr" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUuhUurogvintiUurogviUnkUlyquivUznwGEUkxsOlyq@fltMgr
0x1C001BDB0: FLTMGR_REGISTER_FILTER_FAILED
0x1C0055738: FltpGetLegacyInstanceInformation
0x1C0031600: "__cdecl _imp_MmHighestUserAddress" __imp_MmHighestUserAddress
0x1C000F2E0: FltpDataScanCsqRemoveIrp
0x1C0042398: FltpAllocateCompletionNodeTracking
0x1C00184FC: WPP_SF_qZZqZ
0x1C0031510: "__cdecl _imp_FsRtlOplockBreakToNoneEx" __imp_FsRtlOplockBreakToNoneEx
0x1C001EE00: "A filter tried to complete a cal" ??_C@_0IO@KELHPCJD@A?5filter?5tried?5to?5complete?5a?5cal@
0x1C0039D00: FltpExpandShortNames
0x1C0015758: FltpFreeBackPocketIrpCtrl
0x1C0003880: FltFreeCallbackData
0x1C0040130: FltParseFileName
0x1C0046990: FltpMiniFilterDummyUnload
0x1C0019F40: FltCbdqDisable
0x1C001C5B8: "160000" ??_C@_1O@PKOGJOFH@?$AA1?$AA6?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0021D10: "FLTMGR!FltpvLinkResourceToFilter" ??_C@_0JO@KCIENEHP@FLTMGR?$CBFltpvLinkResourceToFilter@
0x1C001CF18: "\Device\Mailslot" ??_C@_1CC@DFNKCOFC@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C000B128: FltpIsVolumeDetached
0x1C000F370: FltpCompleteCanceledIrp
0x1C00012D8: FltpPerformAsynchronousIoWrapper
0x1C001A968: WPP_SF_qdqqq
0x1C001C4A0: FltpOperationFlags
0x1C0058EC0: FltCloseCommunicationPort
0x1C005B590: FltNotifyFilterChangeDirectory
0x1C0015C80: WPP_SF_qqZs
0x1C0062AC0: FltvSetInformationFile
0x1C003789C: FltpDeleteAllFileListCtrls
0x1C001E4B8: WPP_6c54b9badec33aad9a357d3d8a969e4d_Traceguids
0x1C003C1F0: FltpFsControl
0x1C0066010: GsDriverEntry
0x1C0031A18: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0018920: WPP_SF_qqZZ
0x1C001CF40: ContextTypeInfo
0x1C005EAC0: FltvPerformSynchronousIo
0x1C005F7F0: FltvSetInstanceContext
0x1C000F1D0: FltpDataScanCsqInsertIrp
0x1C001B8D8: "\Device\RawDisk" ??_C@_1CA@DMHLFLLM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAw?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
0x1C0029640: FltpFilterVerifierThunks
0x1C0031540: "__cdecl _imp_KeSetCoalescableTimer" __imp_KeSetCoalescableTimer
0x1C0017908: WPP_SF_qqZD
0x1C005E4B0: FltvGetInstanceContext
0x1C00317A0: "__cdecl _imp_ZwQueryDirectoryFile" __imp_ZwQueryDirectoryFile
0x1C00316A0: "__cdecl _imp_ObCreateObject" __imp_ObCreateObject
0x1C000ABD0: FltAllocateGenericWorkItem
0x1C001D6D8: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C001DA68: "IRP_MJ_SET_INFORMATION" ??_C@_0BH@GNAPBNMO@IRP_MJ_SET_INFORMATION?$AA@
0x1C003FE10: FltpShouldSwapStacks
0x1C00310A8: "__cdecl _imp_KeReleaseSemaphore" __imp_KeReleaseSemaphore
0x1C001E2C0: "FSFilter Copy Protection" ??_C@_1DC@GEGEAGKM@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAC?$AAo?$AAp?$AAy?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C001DBF0: "IRP_MJ_POWER" ??_C@_0N@BGEEMFOO@IRP_MJ_POWER?$AA@
0x1C0046770: FltGetVolumeFromInstance
0x1C001E440: FltpTelemetryEmptyArray
0x1C0031100: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C001EBD0: "A filter tried to disallow a non" ??_C@_0JK@DPLLKOJK@A?5filter?5tried?5to?5disallow?5a?5non@
0x1C0031278: "__cdecl _imp_FsRtlAllocateExtraCreateParameterFromLookasideList" __imp_FsRtlAllocateExtraCreateParameterFromLookasideList
0x1C003A754: FltpNameCanBeExpanded
0x1C0018FE0: FltGetIoPriorityHintFromThread
0x1C001CA48: "\Device\TCFSPSE" ??_C@_1CA@NENNPLLK@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAT?$AAC?$AAF?$AAS?$AAP?$AAS?$AAE?$AA?$AA@
0x1C0031240: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C005F220: FltvReadFile
0x1C003D8C0: FltpCreateFileNameInformation
0x1C0021B48: "FLT_DEFERRED_IO_WORKITEM" ??_C@_0BJ@HNGKJPFA@FLT_DEFERRED_IO_WORKITEM?$AA@
0x1C001B208: SupportedFeaturesRegValueName
0x1C0031638: "__cdecl _imp_PsGetHostSilo" __imp_PsGetHostSilo
0x1C001FAB0: "A filter attempted to complete a" ??_C@_0KI@KDCHNNMB@A?5filter?5attempted?5to?5complete?5a@
0x1C001E3B0: WPP_34dd8948d4d9398d8f27227a62db5f14_Traceguids
0x1C001CB30: "\FileSystem\exfat" ??_C@_1CE@BCKANAGB@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAe?$AAx?$AAf?$AAa?$AAt?$AA?$AA@
0x1C0015250: FltGetActivityIdCallbackData
0x1C0007270: FltpMoveIrpToCallbackData
0x1C0046990: FltpCreatePostCompletion
0x1C000D7A4: FltpSetBufferAndMdlBasedOnBufferingMode
0x1C005D6F0: FltvAllocateGenericWorkItem
0x1C005FB30: FltvSetVolumeContext
0x1C0037250: FltpGetUniqueIdentifierForObject
0x1C0039148: FltpCleanupFileListCtrlForInstanceRemoval
0x1C0056860: FltpNoFilterCallbacksWorkerThread
0x1C001DA80: "IRP_MJ_QUERY_EA" ??_C@_0BA@LFPMCNA@IRP_MJ_QUERY_EA?$AA@
0x1C0037A60: FltpDeleteTxVolContextList
0x1C00610A0: FltvEnumerateInstances
0x1C0031128: "__cdecl _imp_IoEnumerateDeviceObjectList" __imp_IoEnumerateDeviceObjectList
0x1C00084A0: FltpGetStreamListCtrl
0x1C00622E0: FltvNormalizeNameComponentEx
0x1C004A340: FltpTelemetrySerializeFilterRegistrationInfo
0x1C005E7E0: FltvGetVolumeContext
0x1C000247C: ExFreeToNPagedLookasideList
0x1C001DA18: "IRP_MJ_CLOSE" ??_C@_0N@FMCDOLCP@IRP_MJ_CLOSE?$AA@
0x1C005C07C: FltpUnlinkFilter
0x1C001DF28: "289998.99" ??_C@_1BE@DNIHAMEO@?$AA2?$AA8?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001E188: "FSFilter Virtualization" ??_C@_1DA@JFPKJHBK@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00447A0: FltGetVolumeGuidName
0x1C001D058: "FilterSupportedFeaturesMode" ??_C@_1DI@BDBILNPE@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C003DCC8: FltpCleanupStreamListCtrlForFileObjectClose
0x1C005AB88: FltpDetachVolume
0x1C001C638: "400000" ??_C@_1O@JBHIFFNK@?$AA4?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0042008: FltpEnumerateRegistryInstances
0x1C0031330: "__cdecl _imp_FsRtlLookupPerStreamContextInternal" __imp_FsRtlLookupPerStreamContextInternal
0x1C001C7A8: "\FileSystem\MRxDav" ??_C@_1CG@GDLAHOOE@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAR?$AAx?$AAD?$AAa?$AAv?$AA?$AA@
0x1C001C578: "130000" ??_C@_1O@GCEFOJEH@?$AA1?$AA3?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0017DD0: FltUninitializeOplock
0x1C0021B80: "FLT_FILE_NAME_INFORMATION" ??_C@_0BK@LGJMEPPA@FLT_FILE_NAME_INFORMATION?$AA@
0x1C002B520: FltpVerifierCodeSectionHandle
0x1C0031350: "__cdecl _imp_FsRtlUninitializeFileLock" __imp_FsRtlUninitializeFileLock
0x1C005CC50: FltpvValidateReadWriteParameters
0x1C001BCE0: "FilterConnectionPort" ??_C@_1CK@IDKNBMFN@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x1C0018BC0: FltFastIoMdlReadComplete
0x1C0060170: FltpvDisconnectNotify
0x1C001D648: FLTMGR_NAME_CACHING_DISABLED
0x1C001D850: "IRP_MJ_FAST_IO_CHECK_IF_POSSIBLE" ??_C@_0CB@GJCDKKGE@IRP_MJ_FAST_IO_CHECK_IF_POSSIBLE@
0x1C00468D0: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C00421C4: FltpInsertVolumeInstance
0x1C0061BB0: FltvGetVolumeFromFileObject
0x1C00413A8: CleanupFileListCtrl
0x1C0062BC0: FltvStartFiltering
0x1C0039758: FltpCreateFile
0x1C00180FC: WPP_SF_Pdd
0x1C00318D0: "__cdecl _imp_TmPrePrepareComplete" __imp_TmPrePrepareComplete
0x1C001CE18: "\Driver\nwrdr" ??_C@_1BM@KEBIGAP@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAn?$AAw?$AAr?$AAd?$AAr?$AA?$AA@
0x1C003B380: FltpFastIoUnlockSingle
0x1C00173C0: FltRetrieveFileInfoOnCreateCompletion
0x1C0018054: WPP_SF_DZ
0x1C001E088: "FSFilter HSM" ??_C@_1BK@KDJCCDIL@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAH?$AAS?$AAM?$AA?$AA@
0x1C0062210: FltvNormalizeNameComponent
0x1C0042AE4: FltpGetRegDwordValue
0x1C001C9F0: "Roxio-UDF3" ??_C@_1BG@OGAFAJNE@?$AAR?$AAo?$AAx?$AAi?$AAo?$AA?9?$AAU?$AAD?$AAF?$AA3?$AA?$AA@
0x1C005FBF0: FltvWriteFile
0x1C005E870: FltvLockUserBuffer
0x1C00624E0: FltvOplockFsctrlEx
0x1C001A608: TreeUnlinkMultiDoWalk
0x1C0029060: WPP_GLOBAL_Control
0x1C001F200: "A filter is trying to lock a sys" ??_C@_0DI@JHBOCEDD@A?5filter?5is?5trying?5to?5lock?5a?5sys@
0x1C005E8F0: FltvObjectReference
0x1C0031968: "__cdecl _imp_VfCheckNxPoolType" __imp_VfCheckNxPoolType
0x1C0036BA0: PurgeStreamNameCache
0x1C0001570: FltDeleteContext
0x1C0037AF8: FltpGetObjectName
0x1C0036004: FltpInvalidateNameCacheForTxRename
0x1C001C830: "MS-NetWare" ??_C@_1BG@JHHNEAEL@?$AAM?$AAS?$AA?9?$AAN?$AAe?$AAt?$AAW?$AAa?$AAr?$AAe?$AA?$AA@
0x1C0031478: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C001D640: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C00215A0: "A filter changed the callback st" ??_C@_0PD@ODGCGFND@A?5filter?5changed?5the?5callback?5st@
0x1C0046870: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C005B3F4: FltpPostSyncOperation
0x1C001DC30: "IRP_MJ_QUERY_QUOTA" ??_C@_0BD@MDBGANBO@IRP_MJ_QUERY_QUOTA?$AA@
0x1C0057270: FltpPrePostIrp
0x1C000EE20: FltRequestOperationStatusCallback
0x1C0015BB8: WPP_SF_D
0x1C003F168: FltpGetFileNameFromFileObject
0x1C000FCC0: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1C0017540: FltpFastIoMdlReadCompleteCompressed
0x1C0021C0C: "zero" ??_C@_04DDFHDMOL@zero?$AA@
0x1C00425A8: FltpDoInstanceSetupNotification
0x1C000F5B0: FltCbdqRemoveNextIo
0x1C00312A8: "__cdecl _imp_FsRtlGetEcpListFromIrp" __imp_FsRtlGetEcpListFromIrp
0x1C001D658: FLTMGR_FILTER_FAILED_INSTANCE_SETUP
0x1C000DA20: FltGetDiskDeviceObject
0x1C0062820: FltvReferenceFileNameInformation
0x1C0048D18: FltpFsNotificationActual
0x1C00368CC: TxVolDisableNameCachingForStream
0x1C001DD10: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x1C0048A40: FltGetFilterInformation
0x1C00317E8: "__cdecl _imp_ExInitializeRundownProtectionCacheAware" __imp_ExInitializeRundownProtectionCacheAware
0x1C00483F0: FltpCommonDetachVolumeWorker
0x1C0031658: "__cdecl _imp_IoSetIoPriorityHintIntoThread" __imp_IoSetIoPriorityHintIntoThread
0x1C00316F0: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C0018D60: FltFastIoPrepareMdlWrite
0x1C003694C: FltpInvalidateNameCaching
0x1C001606C: FltpPerfTraceOperationCallback
0x1C0031210: "__cdecl _imp_ExInitializePagedLookasideList" __imp_ExInitializePagedLookasideList
0x1C00190A0: FltIsIoRedirectionAllowedForOperation
0x1C003D790: FltGetEcpListFromCallbackData
0x1C0031088: "__cdecl _imp_KeReleaseInStackQueuedSpinLock" __imp_KeReleaseInStackQueuedSpinLock
0x1C001EDA0: "A filter has modified the Reques" ??_C@_0FP@DHNENFAP@A?5filter?5has?5modified?5the?5Reques@
0x1C001DC88: WPP_619a1c838f9934d0de845d704da93a49_Traceguids
0x1C0046990: FltDeletePushLock
0x1C001DD28: "Activating file system " ??_C@_0BJ@LKNCPDHH@Activating?5file?5system?5?5?$AA@
0x1C005DED0: FltvDeleteTransactionContext
0x1C0020240: "A filter (Filter = %p (%s)) leak" ??_C@_0BKL@GDGCCJIP@A?5filter?5?$CIFilter?5?$DN?5?$CFp?5?$CI?$CFs?$CJ?$CJ?5leak@
0x1C001B690: "SupportedFeatures" ??_C@_1CE@KIILLDNE@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x1C0035290: FltUntagFile
0x1C00312C8: "__cdecl _imp_FsRtlPrepareToReuseEcp" __imp_FsRtlPrepareToReuseEcp
0x1C005C828: FltpvPrintErrors
0x1C0031938: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x1C0045550: FltpParseShareName
0x1C00315B0: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x1C000FC80: "__cdecl _security_check_cookie" __security_check_cookie
0x1C001FD70: "Filter manager verifier object t" ??_C@_0BEE@CJMFBAPO@Filter?5manager?5verifier?5object?5t@
0x1C001D8A8: "IRP_MJ_RESERVED-10" ??_C@_0BD@BMENBMPM@IRP_MJ_RESERVED?910?$AA@
0x1C005AE64: FltpInitializeFilterCcb
0x1C0042880: FltpAllocateFileNameInformation
0x1C000CF10: FltPropagateIrpExtension
0x1C0021480: "A filter completed an FSCTL/IOCT" ??_C@_0IN@FBEDBADC@A?5filter?5completed?5an?5FSCTL?1IOCT@
0x1C0031918: "__cdecl _imp_ZwSetVolumeInformationFile" __imp_ZwSetVolumeInformationFile
0x1C0031998: "__cdecl _imp_PsGetProcessSessionIdEx" __imp_PsGetProcessSessionIdEx
0x1C001D7E0: "IRP_MJ_PREPARE_MDL_WRITE" ??_C@_0BJ@KLFKAKE@IRP_MJ_PREPARE_MDL_WRITE?$AA@
0x1C00098F0: FltpGetIoTargetFromFileObject
0x1C0049840: FltRegisterForDataScan
0x1C00310D8: "__cdecl _imp_IoGetLowerDeviceObject" __imp_IoGetLowerDeviceObject
0x1C001F450: "An attempt was made to issue an " ??_C@_0HJ@EABCJLBD@An?5attempt?5was?5made?5to?5issue?5an?5@
0x1C00027D0: FltDeleteStreamHandleContext
0x1C0055578: FltpGetLegacyFilterInformation
0x1C0031170: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C0060420: FltvAllocateExtraCreateParameter
0x1C0043910: FltpAttachVolume
0x1C001BCB0: "FilterCommunicationPort" ??_C@_1DA@HIAAAAFO@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAC?$AAo?$AAm?$AAm?$AAu?$AAn?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x1C001DE90: "329998.99" ??_C@_1BE@EKGFPCIH@?$AA3?$AA2?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0057190: FltOplockIsFastIoPossible
0x1C0044F70: FltpManualDeviceAttachWorker
0x1C0031910: "__cdecl _imp_ZwQueryVolumeInformationFile" __imp_ZwQueryVolumeInformationFile
0x1C001CAA0: "InCD-CDFS" ??_C@_1BE@MCFGCKDE@?$AAI?$AAn?$AAC?$AAD?$AA?9?$AAC?$AAD?$AAF?$AAS?$AA?$AA@
0x1C0031268: "__cdecl _imp_FsRtlInitExtraCreateParameterLookasideList" __imp_FsRtlInitExtraCreateParameterLookasideList
0x1C000D060: FltGetRequestorProcessId
0x1C0009CF8: FltpGetNextCallbackNodeForInstance
0x1C0031A28: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0015D60: WPP_SF_qqZsD
0x1C0037290: FltpFastIoDetachDeviceWorker
0x1C001CA78: "\FileSystem\Fs_rec" ??_C@_1CG@LNGJHFHG@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAs?$AA_?$AAr?$AAe?$AAc?$AA?$AA@
0x1C0019CD0: FltpGetFileNameOpenByIdCallout
0x1C00310F0: "__cdecl _imp_IoReleaseVpbSpinLock" __imp_IoReleaseVpbSpinLock
0x1C001D63A: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C001D9E8: "IRP_MJ_CREATE" ??_C@_0O@LCBLIIOL@IRP_MJ_CREATE?$AA@
0x1C00159AC: WPP_SF_ddq
0x1C0015A7C: WPP_SF_qdd
0x1C0017470: WPP_SF_qDd
0x1C00433EC: FltpCopyOffloadCapable
0x1C0054F00: FltEnumerateInstanceInformationByFilter
0x1C00197B0: WPP_SF_qiD
0x1C0031280: "__cdecl _imp_FsRtlInsertExtraCreateParameter" __imp_FsRtlInsertExtraCreateParameter
0x1C0015A14: WPP_SF_dqq
0x1C0015AE4: WPP_SF_qqd
0x1C005A43C: FltpTelemetrySerializeLegacyFilterInfo
0x1C0061890: FltvGetLowerInstance
0x1C00314F0: "__cdecl _imp_FsRtlCurrentOplock" __imp_FsRtlCurrentOplock
0x1C00580F0: FltSetEaFile
0x1C00368E4: FltpInvalidateNameCachingAllFrames
0x1C001CAF8: "\FileSystem\InCDFat" ??_C@_1CI@LEDLGMNA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAI?$AAn?$AAC?$AAD?$AAF?$AAa?$AAt?$AA?$AA@
0x1C0031318: "__cdecl _imp_FsRtlInsertPerStreamContext" __imp_FsRtlInsertPerStreamContext
0x1C001B1A0: FltMgrDeviceName
0x1C0021B30: "FLT_CALLBACK_DATA" ??_C@_0BC@NFKGBOGM@FLT_CALLBACK_DATA?$AA@
0x1C001DDD8: "FSFilter Activity Monitor" ??_C@_1DE@FDILKLCB@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAA?$AAc?$AAt?$AAi?$AAv?$AAi?$AAt?$AAy?$AA?5?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?$AA@
0x1C0031480: "__cdecl _imp_IoSizeofWorkItem" __imp_IoSizeofWorkItem
0x1C005FA50: FltvSetTransactionContext
0x1C001CEB8: "\Device\NetWareRedirector" ??_C@_1DE@LAONJFGE@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAe?$AAt?$AAW?$AAa?$AAr?$AAe?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x1C000CF5C: FltpControlDispatch
0x1C00317D8: "__cdecl _imp_IoReplaceFileObjectName" __imp_IoReplaceFileObjectName
0x1C0031198: "__cdecl _imp_KeLeaveGuardedRegion" __imp_KeLeaveGuardedRegion
0x1C001DD20: "Unknown" ??_C@_07NBCGADJA@Unknown?$AA@
0x1C00367A0: FltIsVolumeSnapshot
0x1C0015E5C: WPP_SF_qqZsDq
0x1C005E750: FltvGetTransactionContext
0x1C0031500: "__cdecl _imp_FsRtlOplockBreakH" __imp_FsRtlOplockBreakH
0x1C001A8F4: WPP_SF_qddd
0x1C0031290: "__cdecl _imp_FsRtlRemoveExtraCreateParameter" __imp_FsRtlRemoveExtraCreateParameter
0x1C00162F8: WPP_SF_Dqqs
0x1C001D6A8: GUID_ECP_QUERY_ON_CREATE
0x1C0031338: "__cdecl _imp_FsRtlRemovePerStreamContext" __imp_FsRtlRemovePerStreamContext
0x1C00017BC: FltpFreeCallbackDataMdlChain
0x1C000D450: FltpReleaseMessageWaiterLock
0x1C001DF90: "FSFilter Quota Management" ??_C@_1DE@MMECPFGL@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1C0015B44: WPP_SF_qqdd
0x1C003CF30: FltpFastIoRead
0x1C001DB38: "IRP_MJ_DEVICE_CONTROL" ??_C@_0BG@HAFCIBGJ@IRP_MJ_DEVICE_CONTROL?$AA@
0x1C0031058: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C00314F8: "__cdecl _imp_FsRtlCurrentOplockH" __imp_FsRtlCurrentOplockH
0x1C0019AF8: WPP_SF_qDdZ
0x1C0019D00: WPP_SF_qDDZ
0x1C00315C0: "__cdecl _imp_IoReuseIrp" __imp_IoReuseIrp
0x1C003A814: FltpGenerateDeviceHintEcp
0x1C005A864: FltpTelemetryUnloadFilter
0x1C000CA40: FltReleasePushLockEx
0x1C001E2A8: "89998.99" ??_C@_1BC@GFLNNFCM@?$AA8?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C00474B0: FltGetVolumeInformation
0x1C004CE00: TraceLoggingRegisterEx
0x1C0061B20: FltvGetVolumeFromDeviceObject
0x1C00319F0: "__cdecl _imp_ExReleaseSpinLockShared" __imp_ExReleaseSpinLockShared
0x1C0031880: "__cdecl _imp_RtlHashUnicodeString" __imp_RtlHashUnicodeString
0x1C000CB40: FltAcquirePushLockSharedEx
0x1C003EFE0: FltpQueryInformationFile
0x1C001F900: "An attempt was made to reference" ??_C@_0EL@BHDJGGBN@An?5attempt?5was?5made?5to?5reference@
0x1C00317A8: "__cdecl _imp_RtlCompareUnicodeStrings" __imp_RtlCompareUnicodeStrings
0x1C0017C60: FltCheckOplock
0x1C0036420: FltpKtmNotification
0x1C001D878: "IRP_MJ_RESERVED-12" ??_C@_0BD@COHLHOHO@IRP_MJ_RESERVED?912?$AA@
0x1C0057F20: FltFlushBuffers
0x1C0057F70: FltQueryQuotaInformationFile
0x1C005C55C: FltpvGetFilterFromCallerAddress
0x1C001DA90: "IRP_MJ_SET_EA" ??_C@_0O@FPNILENL@IRP_MJ_SET_EA?$AA@
0x1C005E400: FltvGetFileNameInformation
0x1C00604E0: FltvAllocateExtraCreateParameterFromLookasideList
0x1C001DDC0: "409998.99" ??_C@_1BE@KOPFDPJH@?$AA4?$AA0?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001F800: "A filter has called one of the s" ??_C@_0KN@IPGKLAMH@A?5filter?5has?5called?5one?5of?5the?5s@
0x1C0044560: FltQueryDirectoryFileEx
0x1C001DC00: "IRP_MJ_SYSTEM_CONTROL" ??_C@_0BG@JHIMGJML@IRP_MJ_SYSTEM_CONTROL?$AA@
0x1C000CCF0: FltAllocateCallbackDataEx
0x1C004D950: FltpCleanupContextRegistration
0x1C0042848: FltpCleanupNameControl
0x1C0047DF4: FltpInitializeVolumeCcb
0x1C004B1DC: FltpFindFrameForFilter
0x1C0006740: FltpMoveCallbackDataToIrp
0x1C00553E0: FltGetVolumeFromDeviceObject
0x1C005D590: FltvAllocateContext
0x1C001BDC0: WPP_7840179beb6b390ca475d2dc9baf15fe_Traceguids
0x1C0031708: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C0031650: "__cdecl _imp_IoSetIoPriorityHintIntoFileObject" __imp_IoSetIoPriorityHintIntoFileObject
0x1C001BE08: WPP_53238d9998083a8fb638a7c742a9cf6a_Traceguids
0x1C001BDA0: FLTMGR_FILTER_REGISTERED
0x1C0031260: "__cdecl _imp_FsRtlAllocateExtraCreateParameter" __imp_FsRtlAllocateExtraCreateParameter
0x1C001CA38: "Tacit" ??_C@_1M@BALAPJKM@?$AAT?$AAa?$AAc?$AAi?$AAt?$AA?$AA@
0x1C0003C80: FltpPassThroughCompletionWorker
0x1C00175E0: FltpNoFilterCallbackCompletion
0x1C0016C70: FltpCanSimulateFileContexts
0x1C0031408: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C001EC70: "A filter has marked a callback d" ??_C@_0GH@LOPJLPEN@A?5filter?5has?5marked?5a?5callback?5d@
0x1C0058170: FltSetQuotaInformationFile
0x1C0068000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000D900: FltRetrieveIoPriorityInfo
0x1C0031310: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C001E3F8: WPP_35c38b69b3a33b503e06917eea4bf013_Traceguids
0x1C001DC18: "IRP_MJ_DEVICE_CHANGE" ??_C@_0BF@HOMHCDN@IRP_MJ_DEVICE_CHANGE?$AA@
0x1C001F4D0: "An attempt was made to issue IO " ??_C@_0HB@CDEBCACO@An?5attempt?5was?5made?5to?5issue?5IO?5@
0x1C00312A0: "__cdecl _imp_FsRtlFreeExtraCreateParameter" __imp_FsRtlFreeExtraCreateParameter
0x1C00172B0: FltRequestFileInfoOnCreateCompletion
0x1C0038170: FltpPerformPostMountCallbacks
0x1C0062C50: FltvTagFileEx
0x1C001B220: "__cdecl load_config_used" _load_config_used
0x1C00484D8: FltpEnumerateAggregateFilterInformation
0x1C00480C0: FltCancellableWaitForMultipleObjects
0x1C0031580: "__cdecl _imp_ExDeleteTimer" __imp_ExDeleteTimer
0x1C000C778: FltpComputeWaitInterval
0x1C001B5D0: ECP_TYPE_OPEN_REPARSE_GUID
0x1C0038870: FltpPerformPreMountCallbacks
0x1C003A37C: FltpCallNormalizeNameComponentHandler
0x1C0031400: "__cdecl _imp_FsRtlRegisterFileSystemFilterCallbacks" __imp_FsRtlRegisterFileSystemFilterCallbacks
0x1C001B6F0: FltpTelemetryArrayStart
0x1C00436D0: FltSetEcpListIntoCallbackData
0x1C001CB90: "GPFS" ??_C@_19DFIMDBKL@?$AAG?$AAP?$AAF?$AAS?$AA?$AA@
0x1C00311B0: "__cdecl _imp_IoCancelIrp" __imp_IoCancelIrp
0x1C0003480: FltPerformSynchronousIo
0x1C001C508: "69999" ??_C@_1M@NPAMKKJO@?$AA6?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C0055260: FltGetLowerInstance
0x1C0009740: GetContextFromFileList
0x1C0031780: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C00311E0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C00318E8: "__cdecl _imp_RtlDelete" __imp_RtlDelete
0x1C00198A0: FltAcquireResourceExclusive
0x1C0057060: FltOplockFsctrlEx
0x1C0018E50: FltGetFsZeroingOffset
0x1C001C518: "60000" ??_C@_1M@GGFBIEDN@?$AA6?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C001DDA0: "FSFilter Top" ??_C@_1BK@PJHPOAEF@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAT?$AAo?$AAp?$AA?$AA@
0x1C0058850: FltpTraceRedirectedFileIo
0x1C0031710: "__cdecl _imp_ExAcquireRundownProtection" __imp_ExAcquireRundownProtection
0x1C001CE38: "\Driver\npfs" ??_C@_1BK@GOBHNDGN@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAn?$AAp?$AAf?$AAs?$AA?$AA@
0x1C0002854: FltpSaveFileObjectFileName
0x1C0017CA0: FltCheckOplockEx
0x1C00319E8: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C001D830: "IRP_MJ_NETWORK_QUERY_OPEN" ??_C@_0BK@DKMHGAJA@IRP_MJ_NETWORK_QUERY_OPEN?$AA@
0x1C005CF5C: FltpvVerifyPreOperationStatus
0x1C00472B0: FltEnumerateInstanceInformationByVolumeName
0x1C0019920: FltReleasePushLock
0x1C0038D1C: FltpParseStreamName
0x1C001F8B0: "An attempt was made to reference" ??_C@_0EH@FACMMJML@An?5attempt?5was?5made?5to?5reference@
0x1C00438C0: FltpFreeFltCcb
0x1C0031920: "__cdecl _imp_MmIsVerifierEnabled" __imp_MmIsVerifierEnabled
0x1C0031988: "__cdecl _imp_PsGetProcessId" __imp_PsGetProcessId
0x1C0035904: FltpSetAndEnlistTxVolContext
0x1C001CD78: "\Driver\Cdfs" ??_C@_1BK@CMEFGENM@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAC?$AAd?$AAf?$AAs?$AA?$AA@
0x1C0020090: "Filter manager verifier object t" ??_C@_0BKN@INIFMBHB@Filter?5manager?5verifier?5object?5t@
0x1C0001820: FltpAllocateCallbackDataMustSucceed
0x1C0055CD0: FltProcessFileLock
0x1C000F6D0: FltpAcquireLock
0x1C001C608: "209999" ??_C@_1O@NAOHDAMP@?$AA2?$AA0?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C000201C: FltpDrainActiveCompletions
0x1C0031010: "__cdecl _imp_IoPropagateActivityIdToThread" __imp_IoPropagateActivityIdToThread
0x1C0036570: FltpWaitForCommitFinalize
0x1C0055230: FltGetFilterFromInstance
0x1C00174D0: FltpCompleteLockIrpRoutine
0x1C0049FC8: FltpGetInstanceAltitude
0x1C001BE18: WPP_c33db3d6a5e6301de84110b5059508a9_Traceguids
0x1C0009360: FltpGetFileListCtrl
0x1C00484A0: FltEnumerateFilterInformation
0x1C0044F50: FltFreeExtraCreateParameterList
0x1C00590BC: FltpPurgeVolumeNameCache
0x1C001E488: FltpTelemetryLegacyFiltersInfoFormatStart
0x1C00319B8: "__cdecl _imp_IoGetGenericIrpExtension" __imp_IoGetGenericIrpExtension
0x1C001E4D0: "A filter tried to pend a non IRP" ??_C@_0HH@LKONGCDI@A?5filter?5tried?5to?5pend?5a?5non?5IRP@
0x1C00318C0: "__cdecl _imp_ZwCreateResourceManager" __imp_ZwCreateResourceManager
0x1C0021CB8: "Breakpoint zapped (OS will print" ??_C@_0DD@JAABLBGL@Breakpoint?5zapped?5?$CIOS?5will?5print@
0x1C0044780: FltIsEcpFromUserMode
0x1C00319C0: "__cdecl _imp_IoSetGenericIrpExtension" __imp_IoSetGenericIrpExtension
0x1C00318F8: "__cdecl _imp_FsRtlSetDriverBacking" __imp_FsRtlSetDriverBacking
0x1C0036150: FltCommitComplete
0x1C001B6E0: FltpRegGroupValueName
0x1C0055040: FltEnumerateVolumeInformation
0x1C000CBC0: FltpAddMessageWaiter
0x1C00317C0: "__cdecl _imp_IoThreadToProcess" __imp_IoThreadToProcess
0x1C001E230: "FSFilter Open File" ??_C@_1CG@FEENOGAA@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x1C00312E8: IoFileObjectType
0x1C001E478: FltpTelemetryLegacyFiltersInfoFormatEnd
0x1C0009CB4: ExAllocateFromNPagedLookasideList
0x1C0031048: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C005F130: FltvQueueDeferredIoWorkItem
0x1C0048E18: FltpGetBaseDeviceObjectName
0x1C00317D0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C00319D0: "__cdecl _imp_ExReleaseSpinLockExclusive" __imp_ExReleaseSpinLockExclusive
0x1C0046940: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C00607E0: FltvCloseSectionForDataScan
0x1C000CE80: FltpSyncIoCompletion
0x1C0017D10: FltOplockBreakToNone
0x1C00090B0: FltpAllocateInitializeNameGenerationContext
0x1C00312B0: "__cdecl _imp_FsRtlSetEcpListIntoIrp" __imp_FsRtlSetEcpListIntoIrp
0x1C001BA28: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00026E0: FltIsDirectory
0x1C00319D8: "__cdecl _imp_ExTryAcquirePushLockExclusiveEx" __imp_ExTryAcquirePushLockExclusiveEx
0x1C00315D8: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x1C00313F8: "__cdecl _imp_WmiQueryTraceInformation" __imp_WmiQueryTraceInformation
0x1C004D894: FltpCleanupFilterVerifier
0x1C000F3C0: FltpDataScanCsqReleaseLock
0x1C001CCB8: "\FileSystem\Refs" ??_C@_1CC@FCFNIEMD@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAe?$AAf?$AAs?$AA?$AA@
0x1C001F030: "A filter is redirecting callback" ??_C@_0NJ@COAKNPFN@A?5filter?5is?5redirecting?5callback@
0x1C0019BD4: WPP_SF_qqDdZ
0x1C0031898: "__cdecl _imp_IoGetActivityIdThread" __imp_IoGetActivityIdThread
0x1C001E3A0: WPP_5105c04d9d6f317ea2cc48692510652e_Traceguids
0x1C001EE90: "A filter failed a cleanup or clo" ??_C@_0HN@CEEBFOHL@A?5filter?5failed?5a?5cleanup?5or?5clo@
0x1C004D9FC: FltpRemoveVolumeContextsForFilter
0x1C00318B0: "__cdecl _imp_ZwCreateTransactionManager" __imp_ZwCreateTransactionManager
0x1C005DD00: FltvDeleteInstanceContext
0x1C0031448: "__cdecl _imp_IoClearActivityIdThread" __imp_IoClearActivityIdThread
0x1C00020E0: FltpExpandFilePathCallout
0x1C005DC10: FltvDeleteContext
0x1C000A5F0: FltpBuildDeviceControlRequest
0x1C0031978: "__cdecl _imp_IoSetActivityIdThread" __imp_IoSetActivityIdThread
0x1C000E3A0: FltpGetContexts
0x1C00311F0: "__cdecl _imp_ExReleasePushLockEx" __imp_ExReleasePushLockEx
0x1C001B9D0: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C001C8F8: "Remote" ??_C@_1O@OJEJOHCB@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?$AA@
0x1C0035010: FltSetInformationFile
0x1C00170D8: WPP_SF_dds
0x1C001BD58: ":$DATA" ??_C@_1O@IKEDOIIA@?$AA?3?$AA$?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1C003F86C: FltpCacheCreateNames
0x1C003F81C: FltpAllocateNameCacheCreateCtrl
0x1C001D7A8: "IRP_MJ_VOLUME_MOUNT" ??_C@_0BE@DGNLHAGK@IRP_MJ_VOLUME_MOUNT?$AA@
0x1C0031450: "__cdecl _imp_IoUninitializeWorkItem" __imp_IoUninitializeWorkItem
0x1C0031178: "__cdecl _imp_ExAcquireCacheAwarePushLockSharedEx" __imp_ExAcquireCacheAwarePushLockSharedEx
0x1C0055CB0: FltInitializeFileLock
0x1C003C820: FltpDeleteContextList
0x1C00018BC: FltpAllocateIrpCtrlMustSucceed
0x1C00318D8: "__cdecl _imp_TmPrepareComplete" __imp_TmPrepareComplete
0x1C004265C: FltpOpenInstancesRegistryKey
0x1C0059F5C: FltpTelemetryFilterUnregistration
0x1C00370D4: FltpPurgeAndReinstateNameCacheForTxRename
0x1C000E220: FltpManualDeviceAttachTimer
0x1C001D668: FLTMGR_VOLUME_ATTACH_FAILED
0x1C001B8B0: "\Device\RawCdRom" ??_C@_1CC@FCKODIIM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAw?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
0x1C0031060: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C0031378: "__cdecl _imp_FsRtlFastUnlockAllByKey" __imp_FsRtlFastUnlockAllByKey
0x1C001D708: WPP_bba537b35f0c3092e53d0384f5ab04a8_Traceguids
0x1C001E218: "129998.99" ??_C@_1BE@IAKLIEAL@?$AA1?$AA2?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C0031218: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C00575E0: FltCreateFile
0x1C0043720: FltAllocateExtraCreateParameterList
0x1C0005E00: FltIsCallbackDataDirty
0x1C005A308: FltpTelemetryLegacyFilters
0x1C001BB10: "ManualAttachOnlyOnceDevices" ??_C@_1DI@DJCKFPEG@?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAO?$AAn?$AAl?$AAy?$AAO?$AAn?$AAc?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1C003C370: CleanupStreamListCtrl
0x1C0031A00: "__cdecl _imp_ExAcquireSpinLockSharedAtDpcLevel" __imp_ExAcquireSpinLockSharedAtDpcLevel
0x1C000FCE0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000FE20: memcmp
0x1C0047920: FltpCompletionWorkerThread
0x1C0035A54: FltpEnlistTxVolContextInTransaction
0x1C001BE28: WPP_19c78ccaf51134d9ad73507bc744d594_Traceguids
0x1C00376A8: FltpFreeVolume
0x1C001BD18: "\Device\MountPointManager" ??_C@_1DE@MJJBHHAG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1C00311D8: "__cdecl _imp_IoWithinStackLimits" __imp_IoWithinStackLimits
0x1C0017178: WPP_SF_ddsq
0x1C00614C0: FltvGenerateFileName
0x1C00316E8: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C00165B0: FltDeleteFileContext
0x1C0019F10: FltCancelIo
0x1C001ED40: "A filter has marked a callback d" ??_C@_0FL@GPJALGLK@A?5filter?5has?5marked?5a?5callback?5d@
0x1C001DAA0: "IRP_MJ_FLUSH_BUFFERS" ??_C@_0BF@CBDAKCPM@IRP_MJ_FLUSH_BUFFERS?$AA@
0x1C0055DEC: FltpPrivateLock
0x1C0008A00: SetContextIntoStreamList
0x1C003E230: FltGetFileNameInformationUnsafe
0x1C001D988: "IRP_MJ_RELEASE_FOR_SECTION_SYNCH" ??_C@_0CL@PCMELDHE@IRP_MJ_RELEASE_FOR_SECTION_SYNCH@
0x1C000E574: FltpProcessDirtyData
0x1C000196C: TreeTraversalMulti
0x1C00498D8: FltpTelemetryEnumerateSerializeFilterRegistryInstances
0x1C0062690: FltvQueryEaFile
0x1C005DE30: FltvDeleteStreamHandleContext
0x1C003E93C: FltpGetVolumeFromDeviceObject
0x1C001C8D0: "\FileSystem\BsUDF" ??_C@_1CE@IAOIOJNA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAB?$AAs?$AAU?$AAD?$AAF?$AA?$AA@
0x1C0037568: FltpSetVolumeNameCachingState
0x1C000F570: FltpPeekNextIrp
0x1C0062740: FltvQueryInformationFile
0x1C001E130: "169998.99" ??_C@_1BE@ILADFDAN@?$AA1?$AA6?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C00316A8: "__cdecl _imp_ObInsertObject" __imp_ObInsertObject
0x1C004D370: WppLoadTracingSupport
0x1C001D968: "IRP_MJ_ACQUIRE_FOR_MOD_WRITE" ??_C@_0BN@DKLEOGMI@IRP_MJ_ACQUIRE_FOR_MOD_WRITE?$AA@
0x1C0031680: "__cdecl _imp_IoGetIoAttributionHandle" __imp_IoGetIoAttributionHandle
0x1C00313B8: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C000984C: TreeFindNodeOrParent
0x1C00152D0: FltSetActivityIdCallbackData
0x1C0007890: FltpGetFileNameInformation
0x1C00312F0: "__cdecl _imp_IoGetRelatedDeviceObject" __imp_IoGetRelatedDeviceObject
0x1C004CD0C: TlgRegisterAggregateProviderEx
0x1C003E890: FltGetTopInstance
0x1C0019060: FltIsIoRedirectionAllowed
0x1C001D6B8: WPP_0d57b338101a31a719c39a4e09715b3e_Traceguids
0x1C00471C0: FltpFindNext
0x1C0043430: FltMgrFsRtlGetSupportedFeatures
0x1C005D780: FltvCbdqInsertIo
0x1C0036AB0: FltpReinstateNameCaching
0x1C0031530: "__cdecl _imp_IoRegisterFsRegistrationChangeMountAware" __imp_IoRegisterFsRegistrationChangeMountAware
0x1C0021BBC: "%wZ" ??_C@_03FILNLEOE@?$CFwZ?$AA@
0x1C003D260: FltpCreate
0x1C0031390: "__cdecl _imp_FsRtlPrivateLock" __imp_FsRtlPrivateLock
0x1C0055DD0: FltUninitializeFileLock
0x1C0060F10: FltvEnumerateFilters
0x1C000F280: FltClearCancelCompletion
0x1C0031138: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C0031728: "__cdecl _imp_ObMakeTemporaryObject" __imp_ObMakeTemporaryObject
0x1C00314A8: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x1C0001DC8: FltpFreeCompletionNodeTracking
0x1C001AAE0: FltIs32bitProcess
0x1C001CD58: "\Driver\Fastfat" ??_C@_1CA@CNDPGKLE@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAF?$AAa?$AAs?$AAt?$AAf?$AAa?$AAt?$AA?$AA@
0x1C0015304: FltpAllocateBackPocketIrpCtrl
0x1C0031908: "__cdecl _imp_SeSinglePrivilegeCheck" __imp_SeSinglePrivilegeCheck
0x1C0031828: "__cdecl _imp_IoCsqRemoveIrp" __imp_IoCsqRemoveIrp
0x1C000ECB0: FltpInsertIrp
0x1C00187C4: WPP_SF_qZqqZD
0x1C00469A0: FltpDriverReinitialization
0x1C0015F6C: WPP_SF_qqZsq
0x1C0031598: "__cdecl _imp_ExAllocateCacheAwareRundownProtection" __imp_ExAllocateCacheAwareRundownProtection
0x1C0031078: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C00314C0: "__cdecl _imp_FsRtlUninitializeOplock" __imp_FsRtlUninitializeOplock
0x1C0042C90: FltGetInstanceInformation
0x1C00565E0: FltpFastIoWriteCompressed
0x1C005DD90: FltvDeleteStreamContext
0x1C001C618: "200000" ??_C@_1O@GJLKBOGM@?$AA2?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0060650: FltvAttachVolumeAtAltitude
0x1C001A790: FltvAllocatePoolAlignedWithTag
0x1C00353A4: FltpDisableNameCachePurgeForTxRename
0x1C003E4B0: FltpGetFileName
0x1C0031098: "__cdecl _imp_FsRtlIsPagingFile" __imp_FsRtlIsPagingFile
0x1C001F770: "An attempt has been made to comp" ??_C@_0IM@BBGBCBPB@An?5attempt?5has?5been?5made?5to?5comp@
0x1C0031578: "__cdecl _imp_ExSetTimer" __imp_ExSetTimer
0x1C0038C60: FltOpenVolume
0x1C001DD00: "Level" ??_C@_1M@MFHLECJA@?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1C0016D94: DrainCompletionNode
0x1C0055B60: FltCheckLockForReadAccess
0x1C00440E0: FltpCommonAttachVolume
0x1C0021C00: "non-zero" ??_C@_08OOKNBGCJ@non?9zero?$AA@
0x1C0060010: FltpvConnectionNotify
0x1C001C4E8: "20000" ??_C@_1M@GFFHLPEC@?$AA2?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0018680: WPP_SF_qZqqZ
0x1C001E408: WPP_6cf6bafe7e1531008c2942bd9b4512d7_Traceguids
0x1C001F670: "An attempt was made to issue a n" ??_C@_0IO@MOGLGBIE@An?5attempt?5was?5made?5to?5issue?5a?5n@
0x1C0035DF0: FltpDeleteTxVolContext
0x1C0031958: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C00588E4: FltpDoUnloadFilter
0x1C0031000: "__cdecl _imp_KeQueryPerformanceCounter" __imp_KeQueryPerformanceCounter
0x1C001F3F0: "An attempt was made to issue IO " ??_C@_0FO@DFFOFNMG@An?5attempt?5was?5made?5to?5issue?5IO?5@
0x1C005E110: FltvFreeDeferredIoWorkItem
0x1C0031808: "__cdecl _imp_IoCsqInsertIrp" __imp_IoCsqInsertIrp
0x1C00315C8: "__cdecl _imp_IoCreateFileEx" __imp_IoCreateFileEx
0x1C0031168: "__cdecl _imp_IoAttachDeviceToDeviceStackSafe" __imp_IoAttachDeviceToDeviceStackSafe
0x1C001C848: "\FileSystem\nwrdr" ??_C@_1CE@BPGONOFM@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAn?$AAw?$AAr?$AAd?$AAr?$AA?$AA@
0x1C001BBD8: "FastManualAttachTimerPeriod" ??_C@_1DI@NDGNJFID@?$AAF?$AAa?$AAs?$AAt?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AAT?$AAi?$AAm?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x1C003EC70: FltMgrFsRtlGetFileNameInformation
0x1C001C4D8: "29999" ??_C@_1M@NMAKJBOB@?$AA2?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C0021830: "A filter attempted to issue MDL " ??_C@_0JC@FAEAINDP@A?5filter?5attempted?5to?5issue?5MDL?5@
0x1C0031150: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C00163A8: WPP_SF_qqqq
0x1C000A36C: FltpSetIrpCtrlIoPriority
0x1C001D728: WPP_c9fc59b6486a387c6a6b8e764c3f8478_Traceguids
0x1C001BC68: "DebugFlags" ??_C@_1BG@PDIFALE@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1C004C820: FltpCompletePhase2Init
0x1C0031328: "__cdecl _imp_FsRtlLookupPerFileContext" __imp_FsRtlLookupPerFileContext
0x1C002A470: "__cdecl _security_cookie" __security_cookie
0x1C005D420: FltvAllocateCallbackData
0x1C003EA10: FltAllocateExtraCreateParameterFromLookasideList
0x1C000CA20: FltSupportsStreamContexts
0x1C003C930: FltpRemoveAllNamesCachedForFileObject
0x1C0020820: "A filter is trying to reissue sy" ??_C@_0JA@EJFOOBNP@A?5filter?5is?5trying?5to?5reissue?5sy@
0x1C003B78C: FltpCleanupFileObjectContextForClose
0x1C0060270: FltpvMessageNotify
0x1C0031548: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0054D80: FltRemoveExtraCreateParameter
0x1C0056FB0: FltCurrentOplockH
0x1C000D224: FltpInternalCompletePendedPreOperation
0x1C00481CC: FltpCommonDetachVolume
0x1C001DD78: "Filter" ??_C@_1O@FIAKOBIM@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C00591D0: FltGetTunneledName
0x1C0021AB0: "A filter tried to disallow an fs" ??_C@_0GO@MIFOHMNB@A?5filter?5tried?5to?5disallow?5an?5fs@
0x1C003B174: FltpObjectPointerDereference
0x1C0062110: FltvInstanceTeardownStart
0x1C00315D0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C0039C60: FltQuerySecurityObject
0x1C0039540: FltpProcessGenericWorkItem
0x1C003C64C: FltpRemoveAllStreamHandleContextsForFileObject
0x1C003C680: DeleteNameCacheNodes
0x1C001DCA8: WPP_46c0b2541379331ad927204df6f63ed2_Traceguids
0x1C0056FF0: FltOplockBreakH
0x1C0001480: FltpQueueThrottledWorkItem
0x1C00029EC: FltpGetMessage
0x1C0001F2C: FltpRemoveCallbacksForInstance
0x1C00318E0: "__cdecl _imp_TmRollbackEnlistment" __imp_TmRollbackEnlistment
0x1C005EBE0: FltvPostOperation
0x1C00310E0: "__cdecl _imp_IoAcquireVpbSpinLock" __imp_IoAcquireVpbSpinLock
0x1C001C480: "__cdecl _xmm@0000000000000000ffffffffffffffff" __xmm@0000000000000000ffffffffffffffff
0x1C001C490: "__cdecl _xmm@ffffffffffffffff0000000000000000" __xmm@ffffffffffffffff0000000000000000
0x1C00028F0: FltObjectDereference
0x1C0017054: FltpUnlinkCompletionNodeFromInstanceLocked
0x1C001B9F0: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C005F8B0: FltvSetStreamContext
0x1C000D470: FltpAcquireMessageWaiterLock
0x1C0016418: DeleteContextFromFileList
0x1C001CBC8: "NamedPipe" ??_C@_1BE@LGPILPHH@?$AAN?$AAa?$AAm?$AAe?$AAd?$AAP?$AAi?$AAp?$AAe?$AA?$AA@
0x1C0015538: FltpAllocateStaticIrpCtrl
0x1C00206C0: "A filter has called the FltReque" ??_C@_0LG@HMFMLLNC@A?5filter?5has?5called?5the?5FltReque@
0x1C0066A08: FltpGetParameterOffsets
0x1C0042C04: FltpGetAutoOptInFeatures
0x1C0017CF0: FltCurrentOplock
0x1C0043740: FltInsertExtraCreateParameter
0x1C0061EF0: FltvInstanceSetup
0x1C005E5D0: FltvGetStreamContext
0x1C0031948: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x1C001E550: "A filter returned an unknown pre" ??_C@_0FP@JFIBBDGA@A?5filter?5returned?5an?5unknown?5pre@
0x1C002A4C0: FltDynamicRegistrySettingsResource
0x1C003E14C: FltpCallOpenedFileNameHandler
0x1C001C670: "\FileSystem\RAW" ??_C@_1CA@DOFLLPJ@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAR?$AAA?$AAW?$AA?$AA@
0x1C001CC80: "ReFS" ??_C@_19DJCGCGBO@?$AAR?$AAe?$AAF?$AAS?$AA?$AA@
0x1C0058EA0: FltpUnloadFilterWorker
0x1C004607C: FltpReferenceStreamForSectionConflict
0x1C0021BB0: "FLT_OBJECT" ??_C@_0L@GPOKGGFI@FLT_OBJECT?$AA@
0x1C0031560: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C000FB80: FltQueryVolumeInformationFile
0x1C00317F0: "__cdecl _imp_ExReInitializeRundownProtectionCacheAware" __imp_ExReInitializeRundownProtectionCacheAware
0x1C001C5D8: "170000" ??_C@_1O@GBEDNCDI@?$AA1?$AA7?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C0062A60: FltvSetEaFile
0x1C005F3F0: FltvReferenceContext
0x1C0046C10: FltpGetFileNameOpenByIdWorker
0x1C00360F0: FltpFastIoDetachDevice
0x1C0031700: "__cdecl _imp_ProbeForRead" __imp_ProbeForRead
0x1C000E138: FltpCleanupAfterDataScanConflict
0x1C0036DC4: FltpReleaseTxVolContext
0x1C004B050: FltpGetDriverVersion
0x1C0031080: "__cdecl _imp_KeAcquireInStackQueuedSpinLock" __imp_KeAcquireInStackQueuedSpinLock
0x1C0054730: FltAttachVolumeAtAltitude
0x1C00313A0: "__cdecl _imp_RtlQueryRegistryValues" __imp_RtlQueryRegistryValues
0x1C004E140: FltInitExtraCreateParameterLookasideList
0x1C005FCC0: FltvWriteFileEx
0x1C005E190: FltvGetContexts
0x1C001D6E0: "_" ??_C@_13ENNFDPBH@?$AA_?$AA?$AA@
0x1C00314A0: "__cdecl _imp_EtwWrite" __imp_EtwWrite
0x1C00319A8: "__cdecl _imp_FsRtlOplockIsFastIoPossible" __imp_FsRtlOplockIsFastIoPossible
0x1C0019950: FltReleaseResource
0x1C003A7A8: FltpFindCharReverse
0x1C0019758: WPP_SF_qi
0x1C000264C: DoFreeContextMemory
0x1C00318A8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C000F400: FltpDataScanCsqPeekNextIrp
0x1C00313A8: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x1C0031608: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C000D9B8: FltpLookupPerFileContext
0x1C00178B4: WPP_SF_qd
0x1C001B5A8: "\$Volume" ??_C@_1BC@MBMLEBNH@?$AA?2?$AA$?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1C00597D0: FltpProcessShutdownRequest
0x1C0019820: FltAcquirePushLockExclusive
0x1C001E1B8: "139998.99" ??_C@_1BE@GPPJDCOK@?$AA1?$AA3?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001780C: WPP_SF_qZ
0x1C0061C40: FltvGetVolumeFromInstance
0x1C005D930: FltvCompletePendedPostOperation
0x1C001E0C0: "FSFilter Imaging" ??_C@_1CC@CMKDPLFG@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAI?$AAm?$AAa?$AAg?$AAi?$AAn?$AAg?$AA?$AA@
0x1C001C768: "SMB" ??_C@_17MDKPFNLH@?$AAS?$AAM?$AAB?$AA?$AA@
0x1C0029FA0: FltvMessageTable
0x1C0021CF0: "Breakpoint removed " ??_C@_0BE@JIPOGGJD@Breakpoint?5removed?6?$AA@
0x1C0018EC0: FltGetIoPriorityHint
0x1C001A7F0: RtlStringCbCopyA
0x1C001CC58: "\FileSystem\CsvFs" ??_C@_1CE@OGIJGJJC@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAs?$AAv?$AAF?$AAs?$AA?$AA@
0x1C001C798: "WebDAV" ??_C@_1O@IONEGNJA@?$AAW?$AAe?$AAb?$AAD?$AAA?$AAV?$AA?$AA@
0x1C000F6F0: RtlUnicodeStringPrintfEx
0x1C0054D60: FltPrepareToReuseEcp
0x1C001E1D0: "FSFilter Physical Quota manageme" ??_C@_1EG@LAENCJKC@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AA?5?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?5?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe@
0x1C0043370: FltpGetVolumeSafe
0x1C000E2B0: FltpIrpCtrlStackProfilerTimer
0x1C0019380: FltSetIoPriorityHintIntoFileObject
0x1C0066044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0002FC0: FltpPreFsFilterOperation
0x1C001E610: "A filter tried to pend processin" ??_C@_0MP@DCBOBADP@A?5filter?5tried?5to?5pend?5processin@
0x1C0021C58: "Break, ignore, zap or remove ? " ??_C@_0CA@GAPNENO@Break?0?5ignore?0?5zap?5or?5remove?5?$DP?5?$AA@
0x1C0017230: WPP_SF_q
0x1C0019E20: FltpPropagateCallbackDataMdl
0x1C001E428: WPP_519c0920c4433aafee0b6e725e84cba7_Traceguids
0x1C0020FD0: "A filter has returned FLT_PREOP_" ??_C@_0IC@OCNKIHAJ@A?5filter?5has?5returned?5FLT_PREOP_@
0x1C001CD98: "\Driver\Udfs" ??_C@_1BK@GPFJFHD@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAU?$AAd?$AAf?$AAs?$AA?$AA@
0x1C001F5E0: "An attempt was made to issue a n" ??_C@_0JA@JCPAAMAI@An?5attempt?5was?5made?5to?5issue?5a?5n@
0x1C000F9D4: GetCtxIdx
0x1C00313C8: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0031810: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C001CE78: "\Driver\Refs" ??_C@_1BK@CIIDIOJE@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AAR?$AAe?$AAf?$AAs?$AA?$AA@
0x1C002B3C8: WPPTraceSuite
0x1C001B8A8: FltpTelemetryArrayElementSeparator
0x1C000E200: FltIsIoCanceled
0x1C001DAD8: "IRP_MJ_SET_VOLUME_INFORMATION" ??_C@_0BO@CJJMMMF@IRP_MJ_SET_VOLUME_INFORMATION?$AA@
0x1C00477E0: FltpMeasureInitInstance
0x1C0031440: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C005B290: FltSetVolumeInformation
0x1C001D948: "IRP_MJ_RELEASE_FOR_MOD_WRITE" ??_C@_0BN@IJCEPHMC@IRP_MJ_RELEASE_FOR_MOD_WRITE?$AA@
0x1C005AF10: FltpInitializeInstanceCcb
0x1C001DD48: "Deactivating file system" ??_C@_0BJ@HKLMNGMN@Deactivating?5file?5system?$AA@
0x1C003CD40: FltpFastIoWrite
0x1C0016FA0: FltpCancelIrp
0x1C001C9A8: "Roxio-UDF2" ??_C@_1BG@FOLJGOLB@?$AAR?$AAo?$AAx?$AAi?$AAo?$AA?9?$AAU?$AAD?$AAF?$AA2?$AA?$AA@
0x1C000D940: FltSetIoPriorityHintIntoCallbackData
0x1C001BAA0: "DisableFrameMonitoring" ??_C@_1CO@OBCMKGGG@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAF?$AAr?$AAa?$AAm?$AAe?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x1C0039190: FltpFreeInstance
0x1C001DD68: WPP_caff4910c7c8380e6b9d0ec0e9fb6069_Traceguids
0x1C00179EC: WPP_SF_qqZDqq
0x1C0036E30: FltpAttachStreamListCtrlToTxVolCtx
0x1C0038218: FltpFsControlMountVolume
0x1C00314E8: "__cdecl _imp_FsRtlCheckOplockEx" __imp_FsRtlCheckOplockEx
0x1C0035FA0: FltpTxVolWaitForCommitFinalize
0x1C001C770: "\FileSystem\MRxSmb" ??_C@_1CG@LNHHEGGF@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAR?$AAx?$AAS?$AAm?$AAb?$AA?$AA@
0x1C0056150: FltpFastIoReadCompressed
0x1C000F9A8: FltpAllocateTelemetryStringRoutine
0x1C00314C8: "__cdecl _imp_FsRtlOplockFsctrlEx" __imp_FsRtlOplockFsctrlEx
0x1C001E6E0: "A filter passed in an invalid pr" ??_C@_0IL@EDMJOFNM@A?5filter?5passed?5in?5an?5invalid?5pr@
0x1C0020930: "A filter tried to cancel a file " ??_C@_0JH@LGEPBJHI@A?5filter?5tried?5to?5cancel?5a?5file?5@
0x1C001CAE0: "InCD-FAT" ??_C@_1BC@BICOHPIA@?$AAI?$AAn?$AAC?$AAD?$AA?9?$AAF?$AAA?$AAT?$AA?$AA@
0x1C001C800: "NFS" ??_C@_17KGHDLJHE@?$AAN?$AAF?$AAS?$AA?$AA@
0x1C001A1C4: FltpGenerateUniqueIdentifierForObject
0x1C0056680: FltpFsControlLoadFileSystem
0x1C00609E0: FltvCreateFileEx
0x1C00571F0: FltpOplockWaitComplete
0x1C000CA20: FltSupportsStreamHandleContexts
0x1C005F6B0: FltvReuseCallbackData
0x1C0038BD0: FltQueryVolumeInformation
0x1C00375FC: FltpCleanupDeviceObject
0x1C001D018: "\FileSystem\Filters\FltMgrMsg" ??_C@_1DM@DDCFDBOC@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?2?$AAF?$AAl?$AAt?$AAM?$AAg?$AAr?$AAM?$AAs?$AAg?$AA?$AA@
0x1C0060B20: FltvCreateFileEx2
0x1C005C404: FltpvGetCallbackDataChanges
0x1C0066920: FltpBuildParameterOffsetTable
0x1C004C300: FltpCleanupBackPocketIrpCtrls
0x1C0066F68: FltpReadDriverParameters
0x1C0021C18: "FILTER VERIFIER ERROR: " ??_C@_0BK@OHHHNIEO@FILTER?5VERIFIER?5ERROR?3?5?5?5?$AA@
0x1C00175F8: FltpNoFilterCallbackCompletionWorker
0x1C0001450: TreeUnlink
0x1C00316C8: "__cdecl _imp_FsRtlCancellableWaitForMultipleObjects" __imp_FsRtlCancellableWaitForMultipleObjects
0x1C0043DEC: FltpGetFltVolumeFromAttachmentList
0x1C00311E8: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0054C80: FltFreeExtraCreateParameter
0x1C0031718: "__cdecl _imp_ExReleaseRundownProtection" __imp_ExReleaseRundownProtection
0x1C0031858: "__cdecl _imp_RtlAddAccessAllowedAceEx" __imp_RtlAddAccessAllowedAceEx
0x1C001DC60: "IRP_MJ_PNP" ??_C@_0L@EACGAIIF@IRP_MJ_PNP?$AA@
0x1C0031900: "__cdecl _imp_RtlImageDirectoryEntryToData" __imp_RtlImageDirectoryEntryToData
0x1C0061CC0: FltvGetVolumeFromName
0x1C00319E0: "__cdecl _imp_ExReleaseSpinLockSharedFromDpcLevel" __imp_ExReleaseSpinLockSharedFromDpcLevel
0x1C0031370: "__cdecl _imp_FsRtlFastUnlockAll" __imp_FsRtlFastUnlockAll
0x1C00549A0: FltAllocateExtraCreateParameter
0x1C0008F10: TreeInsert
0x1C00315E0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0029D70: LegacyFilterAltitdudeMap
0x1C00371B0: FltCreateFileEx
0x1C0048108: FltpRemoveFinalComponent
0x1C00608C0: FltvCreateFile
0x1C0046470: FltpPurgeMessageWaiters
0x1C002A530: FltpLogInitInstanceFunction
0x1C000C0F4: FltpTelemetryFltSendMessage
0x1C000EF60: FltpQueueDataScanSynchronization
0x1C0047580: FltpTelemetryVolumeAttach
0x1C005DF70: FltvDeleteVolumeContext
0x1C001C9C0: "\FileSystem\UdfReadr_xp" ??_C@_1DA@EDDAOCGO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAU?$AAd?$AAf?$AAR?$AAe?$AAa?$AAd?$AAr?$AA_?$AAx?$AAp?$AA?$AA@
0x1C001E380: "Group" ??_C@_1M@LHGLMLD@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x1C00402CC: FltpNormalizeNameComponent
0x1C0036094: FltpScheduleCommitFinalize
0x1C003BE80: FltpFastIoQueryStandardInfo
0x1C001C648: "429999" ??_C@_1O@MEBOOFOG@?$AA4?$AA2?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C000FCB0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C001D8C0: "IRP_MJ_RESERVED-9" ??_C@_0BC@MPHNCEPF@IRP_MJ_RESERVED?99?$AA@
0x1C00319F8: "__cdecl _imp_ExAcquireSpinLockShared" __imp_ExAcquireSpinLockShared
0x1C0016BF0: FltSupportsFileContexts
0x1C00313C0: "__cdecl _imp_FsRtlRegisterFltMgrCalls" __imp_FsRtlRegisterFltMgrCalls
0x1C00372CC: FltpIsAttachedToDevice
0x1C0046144: FltpRemoveExtraDataFromStream
0x1C003D1E0: FltpCreatePreserveFileObject
0x1C001DE50: "349998.99" ??_C@_1BE@EEBJEOAC@?$AA3?$AA4?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C000F060: FltQueueDeferredIoWorkItem
0x1C0048C54: FltpFilterCountInstances
0x1C0021700: "A filter called FltGetContextsEx" ??_C@_0GG@ECCOBPBE@A?5filter?5called?5FltGetContextsEx@
0x1C0001070: FltWriteFileEx
0x1C0019320: FltSetFsZeroingOffset
0x1C001E418: WPP_e6fe276d06f53b1973c01be2b70cb1b8_Traceguids
0x1C00205F0: "A filter is calling FltGetTunnel" ??_C@_0MC@DHDDFDNP@A?5filter?5is?5calling?5FltGetTunnel@
0x1C0020780: "A filter is trying to reissue sy" ??_C@_0JP@KMBIPIOJ@A?5filter?5is?5trying?5to?5reissue?5sy@
0x1C000CDB0: FltIsOperationSynchronous
0x1C00314D0: "__cdecl _imp_FsRtlCheckOplock" __imp_FsRtlCheckOplock
0x1C001E310: "FSFilter Bottom" ??_C@_1CA@HBGHHOAO@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAB?$AAo?$AAt?$AAt?$AAo?$AAm?$AA?$AA@
0x1C000ADA0: FltReadFileEx
0x1C005FDA8: ValidateIoParameters
0x1C001C568: "139999" ??_C@_1O@NLBIMHOE@?$AA1?$AA3?$AA9?$AA9?$AA9?$AA9?$AA?$AA@
0x1C003CB80: FltpFastIoQueryOpen
0x1C0031068: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C00429E8: FltpGetSupportedFeaturesValue
0x1C0059380: FltpClearPurgeFailureModeWorker
0x1C005F500: FltvReleaseContextsEx
0x1C003DD20: FltpGetNormalizedFileNameWorker
0x1C00311A0: "__cdecl _imp_ExReleaseCacheAwarePushLockSharedEx" __imp_ExReleaseCacheAwarePushLockSharedEx
0x1C0005030: FltpPassThroughInternal
0x1C00312E8: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C001C8C0: "BS-UDF" ??_C@_1O@EIKFAHMB@?$AAB?$AAS?$AA?9?$AAU?$AAD?$AAF?$AA?$AA@
0x1C0062560: FltvQueryDirectoryFile
0x1C005B140: FltIsFltMgrVolumeDeviceObject
0x1C00313D8: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C001DBD8: "IRP_MJ_SET_SECURITY" ??_C@_0BE@MPINJCAP@IRP_MJ_SET_SECURITY?$AA@
0x1C0044500: FltQueryDirectoryFile
0x1C0009E80: FltAllocateContext
0x1C0047680: FltpMeasureFreeInstance
0x1C000F430: FltFreeDeferredIoWorkItem
0x1C003B580: FltpFastIoLock
0x1C001C6D0: "\FileSystem\Fastfat" ??_C@_1CI@OJOJGJHG@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAF?$AAa?$AAs?$AAt?$AAf?$AAa?$AAt?$AA?$AA@
0x1C003E0E0: NameCacheListInsert
0x1C001BD90: FLTMGR_FILTER_UNLOADED
0x1C0061DF0: FltvInstanceQueryTeardown
0x1C0031458: "__cdecl _imp_IoInitializeWorkItem" __imp_IoInitializeWorkItem
0x1C001D9B8: "IRP_MJ_ACQUIRE_FOR_SECTION_SYNCH" ??_C@_0CL@ODNEIMCO@IRP_MJ_ACQUIRE_FOR_SECTION_SYNCH@
0x1C004D4B0: FltStartFiltering
0x1C0031258: "__cdecl _imp_FsRtlAllocateExtraCreateParameterList" __imp_FsRtlAllocateExtraCreateParameterList
0x1C0060E80: FltvDeviceIoControlFile
0x1C0031A10: ntoskrnl_NULL_THUNK_DATA
0x1C000EF40: FltpRemoveIrp
0x1C0031348: "__cdecl _imp_FsRtlInitializeFileLock" __imp_FsRtlInitializeFileLock
0x1C00310C8: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C0061910: FltvGetRoutineAddress
0x1C0031038: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C001D908: "IRP_MJ_RELEASE_FOR_CC_FLUSH" ??_C@_0BM@FCCGCHON@IRP_MJ_RELEASE_FOR_CC_FLUSH?$AA@
0x1C001E0E8: "174998.99" ??_C@_1BE@GNBLKHLF@?$AA1?$AA7?$AA4?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C001C538: "80000" ??_C@_1M@IPGAFHCD@?$AA8?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C00219C0: "A filter passed in an invalid qu" ??_C@_0OL@PLJHICLF@A?5filter?5passed?5in?5an?5invalid?5qu@
0x1C001AC24: "__cdecl TlgWriteAgg" _TlgWriteAgg
0x1C0031140: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C004B66C: RegInfoCompare
0x1C0031090: "__cdecl _imp_IoAllocateIrpEx" __imp_IoAllocateIrpEx
0x1C005DC60: FltvDeleteFileContext
0x1C0049208: FltpEnumerateFileSystemVolumes
0x1C0031628: "__cdecl _imp_IoGetTransactionParameterBlock" __imp_IoGetTransactionParameterBlock
0x1C0061950: FltvGetTopInstance
0x1C001E270: "FSFilter Security Enhancer" ??_C@_1DG@ODHEGNCP@?$AAF?$AAS?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAr?$AA?$AA@
0x1C000F330: FltpDataScanCsqAcquireLock
0x1C001E170: "149998.99" ??_C@_1BE@IONHDIIO@?$AA1?$AA4?$AA9?$AA9?$AA9?$AA8?$AA?4?$AA9?$AA9?$AA?$AA@
0x1C004C5D8: FltpInitializeIrpCtrlStackProfiler
0x1C001F9A0: "An attempt was made to reference" ??_C@_0EL@JJBHEJLG@An?5attempt?5was?5made?5to?5reference@
0x1C005E370: FltvGetFileContext
0x1C00312F8: "__cdecl _imp_IoEnumerateRegisteredFiltersList" __imp_IoEnumerateRegisteredFiltersList
0x1C0031738: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C00605A0: FltvAttachVolume
0x1C0029000: ManualDeviceAttachList
0x1C0003AA0: FltpPassThroughFastIo
0x1C005F720: FltvSetFileContext
0x1C00593E0: FltpDataScanConflictWorkerThread
0x1C001A1A0: FltpSendModernAppTermination
0x1C0062010: FltvInstanceTeardownComplete
0x1C004D130: FltpWatchForRegistryChanges
0x1C0031760: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00314B0: "__cdecl _imp_ZwNotifyChangeKey" __imp_ZwNotifyChangeKey
0x1C0006EA0: FltpAllocateIrpCtrl
0x1C0002B60: FltpCleanupStreamListCtrlForFileObjectCloseWithStreamListCtrl
0x1C002A528: FltpLogFreeInstanceFunction
0x1C004BDA4: FltpInitFrameLookasideLists
0x1C0066078: DriverEntry
0x1C0018010: FltpFsRtlCompletionRoutine
0x1C003FF6C: FltpIsCandidateForNameTunneling
0x1C0031508: "__cdecl _imp_FsRtlOplockBreakToNone" __imp_FsRtlOplockBreakToNone
0x1C003A450: FltpFastIoQueryNetworkOpenInfo
0x1C0038058: FltpLinkVolume
0x1C001D688: GUID_ECP_FLT_CREATEFILE_TARGET
0x1C001C708: "\FileSystem\Cdfs" ??_C@_1CC@FGJLGOIL@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAd?$AAf?$AAs?$AA?$AA@
0x1C005D820: FltvCbdqRemoveIo
0x1C005C008: FltpLinkFilter
0x1C000F6B0: FltpReleaseLock
0x1C004B314: FltpInitializeFilterVerifier
0x1C0019F80: FltCbdqEnable
0x1C0031050: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C000E8D0: FltSetCallbackDataDirty
0x1C0058EF0: FltpServerPortClose
0x1C0031610: "__cdecl _imp_IoQueryInformationByName" __imp_IoQueryInformationByName
0x1C0031840: "__cdecl _imp_ExWaitForRundownProtectionRelease" __imp_ExWaitForRundownProtectionRelease
0x1C0021B68: "FLT_GENERIC_WORKITEM" ??_C@_0BF@JCADPKLI@FLT_GENERIC_WORKITEM?$AA@
0x1C001B4D0: FltpEmptyObject
0x1C002B3E0: pfnWppTraceMessage
0x1C0058F80: FltpServerPortDelete
0x1C0020EB0: "A filter has completed an operat" ??_C@_0BBO@FECHMOHI@A?5filter?5has?5completed?5an?5operat@
0x1C0062CF0: FltvUnregisterFilter
0x1C0031470: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0031298: "__cdecl _imp_FsRtlFreeExtraCreateParameterList" __imp_FsRtlFreeExtraCreateParameterList
0x1C001DC48: "IRP_MJ_SET_QUOTA" ??_C@_0BB@MFPKCKFI@IRP_MJ_SET_QUOTA?$AA@
0x1C000F480: FltAllocateDeferredIoWorkItem
0x1C004D304: WppInitKm
0x1C00446E0: FltpQueryInformationFileFromInstance
0x1C001CC08: "Mailslot" ??_C@_1BC@MOPNMDOE@?$AAM?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C0035D70: FltpFreeTxVolStreamListCtrlEntries
0x1C00312D8: "__cdecl _imp_FsRtlIsEcpFromUserMode" __imp_FsRtlIsEcpFromUserMode
0x1C00412C0: DeleteFileListCtrlCallback
0x1C0009A80: HandleStreamListNotSupported
0x1C0031008: HAL_NULL_THUNK_DATA
0x1C005F980: FltvSetStreamHandleContext
0x1C0031970: "__cdecl _imp_DbgPrompt" __imp_DbgPrompt
0x1C001F700: "A filter changed the irp major c" ??_C@_0GM@MPLBLNOI@A?5filter?5changed?5the?5irp?5major?5c@
0x1C0010280: memset
0x1C0031A50: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0031928: "__cdecl _imp_MmAddVerifierThunks" __imp_MmAddVerifierThunks
0x1C000CE80: FltpFsControlCompletion
0x1C003B944: FltpCleanupFileObjectContextForCleanup
0x1C001E438: "{}" ??_C@_15LGINNLBP@?$AA?$HL?$AA?$HN?$AA?$AA@
0x1C0031488: "__cdecl _imp_ExSizeOfRundownProtectionCacheAware" __imp_ExSizeOfRundownProtectionCacheAware
0x1C005E660: FltvGetStreamHandleContext
0x1C00319A0: "__cdecl _imp_ExAcquireSpinLockExclusive" __imp_ExAcquireSpinLockExclusive
0x1C0062600: FltvQueryDirectoryFileEx
0x1C001EF10: "A filter is redirecting a callba" ??_C@_0BBO@CHODLPPF@A?5filter?5is?5redirecting?5a?5callba@
0x1C0031420: "__cdecl _imp_FsRtlLookupPerFileObjectContext" __imp_FsRtlLookupPerFileObjectContext

[JEB Decompiler by PNF Software]