Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\mup.sys Base=0x1C0000000 SHA-256=B8174FF57EF066E1BC80C73F1959DDB28A7C3358DC403F0CC3959A89278BAB59
PDB: mup.pdb GUID={434ACFEA-0111-BB6C-2817385DC3023850} Age=1

707 located named symbols:
0x1C00083E0: g_MupParametersRegistryKey
0x1C000B170: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C0012C6C: RfspServerNameInitializeAsIpv6Literal
0x1C0008A78: MupiIrpContextLookasideLists
0x1C00039A0: WppClassicProviderCallback
0x1C001B248: RfsCskvLexerGetIdentifier
0x1C0005B30: MupiUncHardeningProperty_RequirePrivacy_buffer
0x1C000B0E8: "__cdecl _imp_FsRtlInsertPerFileObjectContext" __imp_FsRtlInsertPerFileObjectContext
0x1C0008010: REMOTEFS_MUP_Context
0x1C000E680: MupAcquireNextUncProvider
0x1C00056A8: WPP_d7a0187297e23e75965518f797cb61c8_Traceguids
0x1C0001BBC: MupiProviderIsInstalled
0x1C0005628: "ECP{c584edbf-00df-4d28-00b8-8435" ??_C@_0DG@KFNMEOAH@ECP?$HLc584edbf?900df?94d28?900b8?98435@
0x1C000B248: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C000B0B8: "__cdecl _imp_FsRtlRemovePerFileObjectContext" __imp_FsRtlRemovePerFileObjectContext
0x1C000EBE8: MupiInitQueryContext
0x1C00086C0: MupReserveIrpContext
0x1C001AC30: MupiContainerCreateNotify
0x1C00125F8: MupiCreatePrefixEntryForPathFromConfiguration
0x1C0016EE0: MupFastIoPrepareMdlWrite
0x1C00080A8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0013EC0: MupSurrogateRegisterProviderEx
0x1C00184C0: WppTraceCallback
0x1C0011F1C: MupiCheckForNetUsePath
0x1C000B2E8: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0005AC0: WPP_8f9562207d9c3b6748077befe7cf0882_Traceguids
0x1C0008520: MupiKnownPrefixInfo
0x1C000B100: "__cdecl _imp_PsGetCurrentServerSilo" __imp_PsGetCurrentServerSilo
0x1C0011F88: MupiCheckForMailslotRequest
0x1C000B290: "__cdecl _imp_KeQueryHighestNodeNumber" __imp_KeQueryHighestNodeNumber
0x1C0013120: MupiReadProviderDeviceNameFromRegistry
0x1C000B2A0: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C000B2E0: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x1C0017E28: MupiRerouteCreateToProvider
0x1C000B0C0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0017470: MupPreAcquireForModWrite
0x1C0002060: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0016D10: MupFastIoMdlReadComplete
0x1C0005940: UncHardening_UnsupportedRegistryValueType
0x1C0012E30: MupiCreateUncHardeningPrefixEntry
0x1C0012F8C: MupiFindProviderByName
0x1C0011E54: MupSaveProviderStrippedFileName
0x1C00059D8: WPP_70dfc45e09973f2dfee3a9b1067df748_Traceguids
0x1C0005618: GUID_ECP_NETWORK_OPEN_CONTEXT
0x1C0008A20: MupIrpContextListLock
0x1C000B0B0: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C000B2B0: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C001AE50: MupiContainerTerminateNotify
0x1C000B158: "__cdecl _imp_PsAttachSiloToCurrentThread" __imp_PsAttachSiloToCurrentThread
0x1C0011630: MupCreate
0x1C0005980: "" ??_C@_00CNPNBAHC@?$AA@
0x1C0005250: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000B3D8: "__cdecl _imp_PsGetPermanentSiloContext" __imp_PsGetPermanentSiloContext
0x1C0005930: UncHardening_InvalidSyntax_UnknownError
0x1C000B198: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C000B010: "__cdecl _imp_FsRtlFindExtraCreateParameter" __imp_FsRtlFindExtraCreateParameter
0x1C000B300: "__cdecl _imp_ExInitializeRundownProtection" __imp_ExInitializeRundownProtection
0x1C0014124: MupiAllocSurrogateProvider
0x1C000B328: "__cdecl _imp_wcschr" __imp_wcschr
0x1C0011214: MupiCreateProviderSymbolicLink
0x1C0001600: MupiQueryPathCompletionRoutine
0x1C0005338: "%wZ%s" ??_C@_1M@PKCAHPGA@?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$AA@
0x1C00141BC: MupiFindSurrogateByNameAndType
0x1C0012840: MupiGetNextUncHardeningConfigurationEntry
0x1C000B480: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000B080: "__cdecl _imp_FsRtlMdlReadDev" __imp_FsRtlMdlReadDev
0x1C0005B50: WPP_4aa12aa362e93a51c9cf6a01dc90020e_Traceguids
0x1C00082C0: MupProviderTable
0x1C00080E0: MupiSurrogateList
0x1C000B250: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C00058D0: UncHardening_UnsupportedUncPath
0x1C000B3B0: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C000ED40: MupPreAcquireForCcFlush
0x1C0017860: MupSetInformationFile
0x1C0008508: MupiMupServicesKeyHandle
0x1C000B2A8: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C001B638: RfsCskvLexerGetToken
0x1C00103C0: MupAttemptToLoadRegistryConfigurationRunOnce
0x1C000DC2C: MupiFreeKnownPrefixEntry
0x1C00128B0: MupInitializeServerName
0x1C000B1A0: "__cdecl _imp_IoGetAttachedDevice" __imp_IoGetAttachedDevice
0x1C000B0C8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C00174A4: MupAllocFileContextForRelativeOpen
0x1C000B1C0: "__cdecl _imp_KeInitializeTimerEx" __imp_KeInitializeTimerEx
0x1C000B138: "__cdecl _imp_KeInitializeGuardedMutex" __imp_KeInitializeGuardedMutex
0x1C00081A0: MupiProviderOrderWork
0x1C000B110: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000B098: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C0002C34: WPP_SF_Zdd
0x1C0018908: MupDeregisterUncProvider
0x1C0002CE4: WPP_SF_ZqD
0x1C0011D88: MupSaveStrippedFileName
0x1C000B428: "__cdecl _imp_PsDereferenceSiloContext" __imp_PsDereferenceSiloContext
0x1C0005400: "\Registry\Machine\System\Current" ??_C@_1GK@CIEMKNHL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0003244: MupFlushKnownPrefixTableForSurrogate
0x1C00136D0: MupiReadProviderOrderFromRegistry
0x1C0014250: MupiSetProviderFlags
0x1C0003BC0: WPP_SF_ZddD
0x1C000F964: MupInitializeUncHardeningModule
0x1C000184C: MupReleaseSurrogateFileContext
0x1C0012EE4: MupAcquireUncProviderByName
0x1C0018B78: MupiCreateNetworkProviderOrderRegValueInRegistry
0x1C000B320: "__cdecl _imp_IoGetBaseFileSystemDeviceObject" __imp_IoGetBaseFileSystemDeviceObject
0x1C0002080: memcpy
0x1C0019C38: MupFsctlGetUncHardeningPrefixTable
0x1C0001900: MupiGetPathComponents
0x1C000B360: "__cdecl _imp_KdDebuggerNotPresent" __imp_KdDebuggerNotPresent
0x1C000E8C0: MupiLookupKnownPrefixEntry
0x1C000B458: "__cdecl _imp_ExBlockOnAddressPushLock" __imp_ExBlockOnAddressPushLock
0x1C0005950: UncHardening_UnsupportedProperty_IntValue
0x1C000B1B0: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C000ED80: MupPreReleaseForSectionSynchronisation
0x1C000B340: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C000B278: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0008A50: pfnWppGetVersion
0x1C000B150: "__cdecl _imp_FsRtlCancellableWaitForSingleObject" __imp_FsRtlCancellableWaitForSingleObject
0x1C0001EBD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C000B3C8: "__cdecl _imp_RtlNextUnicodePrefix" __imp_RtlNextUnicodePrefix
0x1C0012928: RfsServerNameInitialize
0x1C000B180: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C000FAA8: MupiReadPrefixCacheMaxSizeFromRegistry
0x1C0005AD0: MupiUncHardeningProperty_RequireMutualAuthentication_buffer
0x1C0012318: MupAcquireNextSurrogateProvider
0x1C0005730: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1C0002080: memmove
0x1C0011158: MupProcessCalledSurrogateList
0x1C0012120: MupAllocFileContext
0x1C001B08C: RfspServerNameEqualSockaddr
0x1C000EED0: MupPostAcquireForSectionSynchronisation
0x1C000B160: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C001A000: MupiUncHardeningRegistryWatcherKeyChangeNotification
0x1C000FC90: MupiFreeUncHardeningConfigurationEntryList
0x1C000B188: "__cdecl _imp_PsDetachSiloFromCurrentThread" __imp_PsDetachSiloFromCurrentThread
0x1C000B128: "__cdecl _imp_KeReadStateEvent" __imp_KeReadStateEvent
0x1C0011C90: MupInitializeUncHardeningFileContext
0x1C0001F0C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000D1B0: MupFsdIrpPassThrough
0x1C0008170: MupiProviderOrderIoStatus
0x1C000B288: "__cdecl _imp_IoRegisterFileSystem" __imp_IoRegisterFileSystem
0x1C000B308: "__cdecl _imp_IoGetDeviceObjectPointer" __imp_IoGetDeviceObjectPointer
0x1C0008A70: MupiMupServicesKeyHandleValid
0x1C0005B08: MupiUncHardeningProperty_RequireIntegrity_buffer
0x1C0008088: MupiDavAvoidProviderName
0x1C0005020: MupiServerNameDecoration_NOCSC
0x1C0018D10: MupiGetProviderInfoFromFileObject
0x1C001B110: RfsTimerpExpirationWorker
0x1C001336C: MupiOpenUncHardeningRegistryKey
0x1C000B378: "__cdecl _imp_PsInitialSystemProcess" __imp_PsInitialSystemProcess
0x1C0008360: WPP_MAIN_CB
0x1C000B2D8: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C000B360: KdDebuggerNotPresent
0x1C000B410: "__cdecl _imp_PsStartSiloMonitor" __imp_PsStartSiloMonitor
0x1C000B2F0: "__cdecl _imp_ObReferenceObjectByPointer" __imp_ObReferenceObjectByPointer
0x1C000E9F4: MupiAllocQueryIrp
0x1C000580C: MupiUncHardeningWildcard_buffer
0x1C0005310: WPP_ThisDir_CTLGUID_RFSMon
0x1C000B430: "__cdecl _imp_iswdigit" __imp_iswdigit
0x1C000B1F0: "__cdecl _imp_RtlInsertUnicodePrefix" __imp_RtlInsertUnicodePrefix
0x1C001B85C: RfsCskvLexerStreamPeekChar
0x1C000B218: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0005560: "\Registry\Machine\System\Current" ??_C@_1JC@PJJFIPFC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0017470: MupPreReleaseForModWrite
0x1C00126E8: MupiApplyUncHardeningConfigurationToPrefixEntry
0x1C00135A4: MupiRegisterUncHardeningConfigurationRegistryChangeNotification
0x1C000B070: "__cdecl _imp_IoSetTopLevelIrp" __imp_IoSetTopLevelIrp
0x1C000B310: "__cdecl _imp_ZwDeleteValueKey" __imp_ZwDeleteValueKey
0x1C00189BC: MupFsctlGetUncProviderList
0x1C0018FB8: MupiProcessPreVistaProviderRegistration
0x1C001B7D4: RfsCskvLexerStreamGetChar
0x1C000B2C8: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C000B258: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x1C000EB0C: MupiDeInitQueryContext
0x1C000B0F0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000DC74: MupiPrefixScheduleGarbageCollectionTimeout
0x1C0008A60: pfnWppQueryTraceInformation
0x1C000E028: MupiFindOrCreateNetworkOpenEcp
0x1C001B944: RfsCskvParseInner
0x1C000DA30: MupiGetProviderFastIoDispatchTable
0x1C0013010: MupiCleanupOrphanProviderOrderRegValues
0x1C000D980: MupFastIoDeviceControl
0x1C00057F8: "NETLOGON" ??_C@_1BC@KNIBMHCO@?$AAN?$AAE?$AAT?$AAL?$AAO?$AAG?$AAO?$AAN?$AA?$AA@
0x1C000D7C0: MupGetIoStatus
0x1C001AF3C: RfspServerNameEqualDnsName
0x1C00053BC: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x1C00114A0: MupiGetAndStripProviderName
0x1C0005B60: RfsCskvEqualsString_buffer
0x1C000B3D0: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0013958: MupInitSurrogateIrpContext
0x1C0010894: MupiLoadUncHardeningDefaultsToList
0x1C00053C8: "\Device\Mup" ??_C@_1BI@GOOABFBJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAu?$AAp?$AA?$AA@
0x1C000B448: "__cdecl _imp_RtlUpcaseUnicodeChar" __imp_RtlUpcaseUnicodeChar
0x1C0001598: MupiCheckForProviderAvoidPath
0x1C000E140: MupSurrogateCheckNegativeCache
0x1C001B3AC: RfsCskvLexerGetNumber
0x1C000597C: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x1C000B3E8: "__cdecl _imp_PsIsCurrentThreadInServerSilo" __imp_PsIsCurrentThreadInServerSilo
0x1C001A8B0: MupiUncHardeningRegistryParserErrorCallback
0x1C000EE0C: MupiApplyUncHardeningConfigurationEntryToPrefixEntry
0x1C000B118: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C000317C: WPP_SF_qqqqs
0x1C000B068: "__cdecl _imp_FsRtlMdlWriteCompleteDev" __imp_FsRtlMdlWriteCompleteDev
0x1C0005040: MUPI_HARDENED_PATHS_REGISTRY_KEY_PATH
0x1C000D368: MupGetSiloFromFileObject
0x1C000B230: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00057E8: "SYSVOL" ??_C@_1O@DKFKJANF@?$AAS?$AAY?$AAS?$AAV?$AAO?$AAL?$AA?$AA@
0x1C001B7A4: RfsCskvLexerStreamAdvance
0x1C000E200: MupLocateUncProviderForPath
0x1C00082A8: UncProviderModuleRundownRef
0x1C000F660: MupRegisterProviderOrderKeyChangeNotification
0x1C0001EE8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00018C0: MupFindMatchingChar
0x1C00080C0: ContainerMonitor
0x1C001A44C: MupiPackUncHardeningPrefixTableForFsctl
0x1C0005230: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000B1B8: "__cdecl _imp_RtlRemoveUnicodePrefix" __imp_RtlRemoveUnicodePrefix
0x1C0005838: MupiServerNameDecoration_NOCSC_buffer
0x1C0013D38: MupRemoveFileContext
0x1C000B0A0: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C000B200: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C000B3B8: "__cdecl _imp_FsRtlIsEcpAcknowledged" __imp_FsRtlIsEcpAcknowledged
0x1C000ED40: MupPreReleaseForCcFlush
0x1C0005200: "IrpStackSize" ??_C@_1BK@OEFDFGF@?$AAI?$AAr?$AAp?$AAS?$AAt?$AAa?$AAc?$AAk?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C00056B8: MupiEmptyUnicodeString
0x1C0016FC0: MupFastIoRead
0x1C000E780: MupAcquireProviderFromKnownPrefix
0x1C0005970: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0008A40: pfnEtwRegisterClassicProvider
0x1C0003B00: MupiGetNextUncProvider
0x1C0011904: MupInsertFileContext
0x1C0008600: pMupiPrefixGarbageCollectionWorkItem
0x1C0008660: MupQueryContextTable
0x1C00059F8: WPP_57b5196da5c533f56a56dd0f8d425b3f_Traceguids
0x1C000B3A8: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C000B420: "__cdecl _imp_IoGetSiloParameters" __imp_IoGetSiloParameters
0x1C0003B1C: WPP_SF_ZD
0x1C0011128: MupiDereferenceUncHardeningPrefixEntry
0x1C00037B4: WPP_SF_ZZ
0x1C0019384: MupSetupRelatedSurrogateFileContextList
0x1C0003898: WPP_SF_Zq
0x1C001285C: RfsServerNameCleanup
0x1C000B280: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C0005010: MupiServerNameDecoration_SSL
0x1C00081E0: ProviderOrderRefreshTimer
0x1C0002BB0: WPP_SF_Z
0x1C00053C0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C0008440: g_MupServicesRegistryKey
0x1C000B3E0: "__cdecl _imp_PsReferenceSiloContext" __imp_PsReferenceSiloContext
0x1C0002A64: WPP_SF_
0x1C0016E70: MupFastIoMdlWriteCompleteCompressed
0x1C000EF30: MupPreAcquireForSectionSynchronisation
0x1C0008A68: pfnEtwUnregister
0x1C00058F0: UncHardening_UnsupportedPropertyValue_StrValue_ExpectBoolValue
0x1C000DD50: MupFastIoDetachDevice
0x1C000DD70: MupInsertKnownPrefix
0x1C0005810: RfspIpv6LiteralDomainName_buffer
0x1C000F6D8: MupInitFastIo
0x1C001B1B4: RfsCskvLexerGetError
0x1C00016B4: RtlStringCbPrintfW
0x1C0008620: MupiMupDeviceOpenCountMutex
0x1C000B240: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C0019A30: MupSurrogateSetUndecoratedFileName
0x1C0012408: MupiAllocSurrogateFileContext
0x1C0008920: MupiFastIoDispatch
0x1C0003704: WPP_SF_ZDq
0x1C0008A10: MupIrpContextList
0x1C0002EB8: WPP_SF_Zqq
0x1C00058E0: UncHardening_InvalidUncPath
0x1C0018064: MupFsctlGetUncCacheInfo
0x1C0001734: MupRegisterFileSystemFilterCallbacks
0x1C001B884: RfsCskvParse
0x1C001D010: GsDriverEntry
0x1C000B478: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000B238: "__cdecl _imp_KeSetCoalescableTimer" __imp_KeSetCoalescableTimer
0x1C0005984: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C000B0A8: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C0011020: MupCleanupUncHardeningFileContext
0x1C000FB30: MupInitPrefixCache
0x1C0003390: MupPinKnownPrefix
0x1C00053E0: "\Device\" ??_C@_1BC@IDABLMPM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$AA@
0x1C0010CD4: MupiCompleteProviderRegistration
0x1C00051C8: MupiUncHardeningProperty_RequireMutualAuthentication
0x1C000DB7C: MupiRemoveKnownPrefixEntry
0x1C000DA70: MupiPrefixCacheReaperRoutine
0x1C0003AA4: MupiGetFirstUncProvider
0x1C000F508: MupInitializeContainerModule
0x1C0011390: MupClose
0x1C000B408: "__cdecl _imp_PsCreateSiloContext" __imp_PsCreateSiloContext
0x1C0013DD0: MupStateMachineWorker
0x1C000E91C: MupiIssueQueryRequest
0x1C000D338: MupGetContainerContextFromSilo
0x1C000F184: MupAcquireSurrogateProviderByName
0x1C0005698: WPP_0f6f593b26dd34789b47460679971be7_Traceguids
0x1C001B808: RfsCskvLexerStreamGetViewAsString
0x1C00199C0: MupSurrogateResumeIo
0x1C0008580: MupiPrefixGarbageCollectionTimer
0x1C0008510: MupiPrefixCacheRegistryChangeIoStatus
0x1C00119C0: MupiCreateWithAbsolutePath
0x1C00011A0: MupCreateIrpContext
0x1C0013604: MupiLoadUncHardeningConfigurationToList
0x1C000B3A0: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x1C0005858: Microsoft_Windows_NetworkProviderKeywords
0x1C001AB58: MupTerminateContainerModule
0x1C0003DB8: McGenEventWrite
0x1C0008000: WPP_GLOBAL_Control
0x1C000B210: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C00142E0: MupSurrogateRegisterProvider
0x1C0002A90: WPP_SF_d
0x1C0002A90: WPP_SF_D
0x1C000B028: "__cdecl _imp_FsRtlGetEcpListFromIrp" __imp_FsRtlGetEcpListFromIrp
0x1C0010728: MupiAllocProvider
0x1C0019130: MupiProviderOrderRegKeyChangeHandler
0x1C00084E0: MupiPrefixCacheRegistryChangeWork
0x1C0008078: MupiDavShareName
0x1C000B020: "__cdecl _imp_FsRtlPrepareToReuseEcp" __imp_FsRtlPrepareToReuseEcp
0x1C000B120: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C000D800: MupiCallUncProvider
0x1C001A1DC: MupiDereferenceUncHardeningConfigurationEntry
0x1C0001E80: "__cdecl _security_check_cookie" __security_check_cookie
0x1C001A39C: MupiPackUncHardeningPrefixTableEntryForFsctl
0x1C000B368: "__cdecl _imp_ZwQueryKey" __imp_ZwQueryKey
0x1C000B1D0: "__cdecl _imp_RtlInitializeUnicodePrefix" __imp_RtlInitializeUnicodePrefix
0x1C000F870: MupiGetIrpStackSize
0x1C000B488: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000B358: "__cdecl _imp_KdDebuggerEnabled" __imp_KdDebuggerEnabled
0x1C00101F0: MupInitUncProviderModule
0x1C000B390: "__cdecl _imp_ObDuplicateObject" __imp_ObDuplicateObject
0x1C000B008: "__cdecl _imp_FsRtlInsertExtraCreateParameter" __imp_FsRtlInsertExtraCreateParameter
0x1C000F008: MupFsctlQueryUncHardeningConfigurationForPath
0x1C0002A04: WPP_SF_qqD
0x1C0001398: MupGetUncCacheHostPrefixTable
0x1C0005740: "\Registry\Machine\Software\Polic" ??_C@_1KI@BLFJBHNO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x1C0003C90: WPP_SF_qZd
0x1C001AB20: MupDereferenceContainerContext
0x1C000B3C0: "__cdecl _imp_IoGetIrpExtraCreateParameter" __imp_IoGetIrpExtraCreateParameter
0x1C00191C8: MupFsctlGetSurrogateProviderList
0x1C0002FC0: WPP_SF_qqDD
0x1C000D390: MupStateMachine
0x1C0005030: RfspIpv6LiteralDomainName
0x1C0019FC4: MupiArmUncHardeningConfigurationRefreshTimer
0x1C0002AD4: WPP_SF_DDqZ
0x1C0005498: "DeviceName" ??_C@_1BG@ICHEEICH@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C0008BD8: MupiCachingAndGenericSurrogateCount
0x1C0018714: MupAcquireMailslotProvider
0x1C0005888: "DavWWWRoot" ??_C@_1BG@NKBOJBKH@?$AAD?$AAa?$AAv?$AAW?$AAW?$AAW?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1C00043C8: RfsTimerpSetFlagsSafe
0x1C0019BDC: MupiFreeSurrogateProvider
0x1C0018F20: MupiOrderRegKeyChangeHandler
0x1C000FA1C: MupiReadPrefixCacheTimeoutFromRegistry
0x1C000B018: "__cdecl _imp_FsRtlAllocateExtraCreateParameter" __imp_FsRtlAllocateExtraCreateParameter
0x1C0005660: "ECP{c584edbf-00df-4d28-00b8-8435" ??_C@_0DE@GIAGPOHD@ECP?$HLc584edbf?900df?94d28?900b8?98435@
0x1C000F44C: MupInitFileIo
0x1C0008068: MupiMailSlotName
0x1C000B338: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x1C0017150: MupFastIoUnlockAll
0x1C000B3F8: "__cdecl _imp_PsGetSiloMonitorContextSlot" __imp_PsGetSiloMonitorContextSlot
0x1C0004380: RfsTimerpExpirationDpc
0x1C000B260: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x1C00121F0: MupSetupSurrogateFileContextList
0x1C000B298: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0017F5C: MupFlushPrefixEntry
0x1C000404C: McTemplateK0hzr0qzr2hzr4x
0x1C0017AD8: MupiCancelQueryIrp
0x1C001E000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000B060: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C000F21C: MupiFindSurrogateByName
0x1C00196F0: MupSurrogatePurgeNegativeCacheEntry
0x1C000B038: "__cdecl _imp_FsRtlFreeExtraCreateParameter" __imp_FsRtlFreeExtraCreateParameter
0x1C00142B0: MupSurrogateGetUncProviderDeviceObject
0x1C00050A0: "__cdecl load_config_used" _load_config_used
0x1C000B088: "__cdecl _imp_FsRtlRegisterFileSystemFilterCallbacks" __imp_FsRtlRegisterFileSystemFilterCallbacks
0x1C001A6A0: MupiUncHardeningRegistryParserCallback
0x1C0019040: MupiProviderOrderChangeHandler
0x1C000B130: "__cdecl _imp_IoCancelIrp" __imp_IoCancelIrp
0x1C0013EEC: MupiSurrogateRegisterProviderInternal
0x1C000396C: McGenEventUnregister
0x1C000B2D0: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C000B220: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C001A21C: MupiFindOrCreateUncHardeningConfigurationEntry
0x1C000B318: "__cdecl _imp_ExAcquireRundownProtection" __imp_ExAcquireRundownProtection
0x1C000B398: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C001D0B4: MupInitReserveIrpContext
0x1C0013DA8: RfsServerNameEqualEx
0x1C00051E8: RfsCskvEqualsString
0x1C000B3F0: "__cdecl _imp_PsUnregisterSiloMonitor" __imp_PsUnregisterSiloMonitor
0x1C0016B80: MupFastIoLock
0x1C0001B68: MupiUpdateMupDeviceOpenCount
0x1C001187C: MupiCheckForMupDeviceOpen
0x1C00175D8: MupRestoreFileNameInFileObject
0x1C0017390: MupFastIoWriteCompressed
0x1C000B108: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000B040: "__cdecl _imp_FsRtlSetEcpListIntoIrp" __imp_FsRtlSetEcpListIntoIrp
0x1C000F5E4: MupRegisterProviderKeyChangeNotification
0x1C0005270: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0013BB0: MupCleanup
0x1C0019850: MupSurrogateRestartIo
0x1C0008400: MupiAdvancedFcbHeaderFastMutex
0x1C00042DC: RfsTimerCleanup
0x1C00058A0: MupiOrderedErrorList
0x1C00059E8: WPP_3e9b952e738a3ef01842fb50c238654d_Traceguids
0x1C0019740: MupSurrogateResolvePrefix
0x1C0011970: MupiVerifyTargetedProviderSatisfiesUncHardening
0x1C00052E0: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000B178: "__cdecl _imp_KeReleaseGuardedMutex" __imp_KeReleaseGuardedMutex
0x1C0005990: "\Device\LanmanRedirector" ??_C@_1DC@HPJECOGA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x1C0019480: MupSurrogateCloneProvider
0x1C000B438: "__cdecl _imp_RtlIpv4StringToAddressExW" __imp_RtlIpv4StringToAddressExW
0x1C000B440: "__cdecl _imp_RtlIpv6StringToAddressExW" __imp_RtlIpv6StringToAddressExW
0x1C000B140: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C00054B0: "\Registry\Machine\System\Current" ??_C@_1KC@KKNBKFKM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000B270: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C0005900: UncHardening_InvalidSyntax_IllegalInteger
0x1C001ABC0: MupiContainerCleanupNotify
0x1C0001ED0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0001F80: memcmp
0x1C0005470: "\NetworkProvider" ??_C@_1CC@CKANOMJL@?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0010B54: MupRegisterUncProvider
0x1C0008A84: MupiIrpContextLookasideListsCeLength
0x1C00051D8: RfsCskvCommaString
0x1C0003ABC: MupiGetNextKnownPriorityProvider
0x1C0013CC4: MupReleaseSurrogateIrpContext
0x1C0005A10: "HKEY_LOCAL_MACHINE\Software\Poli" ??_C@_1KK@DCKKDDIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi@
0x1C0008A00: Microsoft_Windows_NetworkProviderEnableBits
0x1C0016DE0: MupFastIoMdlWriteComplete
0x1C000B400: "__cdecl _imp_PsRegisterSiloMonitor" __imp_PsRegisterSiloMonitor
0x1C001A2C8: MupiFindUncHardeningConfigurationEntry
0x1C000F310: WppLoadTracingSupport
0x1C0008058: MupiFsRtlMupCalls
0x1C000B2C0: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C00137DC: RfsTimerInitialize
0x1C0008A86: MupiOrderKeyHandleValid
0x1C000B148: "__cdecl _imp_IoGetRelatedDeviceObject" __imp_IoGetRelatedDeviceObject
0x1C0012B20: RfspServerNameInitializeAsDnsName
0x1C0004208: RfsTimerCancel
0x1C000B388: "__cdecl _imp_RtlRunOnceInitialize" __imp_RtlRunOnceInitialize
0x1C000B058: "__cdecl _imp_FsRtlPrepareMdlWriteDev" __imp_FsRtlPrepareMdlWriteDev
0x1C0008460: g_MupAdvancedFcbHeader
0x1C0008A80: MupiInitSuccessful
0x1C0005960: UncHardening_UnsupportedProperty_StrValue
0x1C00085C0: MupiPrefixGarbageCollectionDpc
0x1C000B1E8: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C0001080: MupReleaseIrpContext
0x1C0003F64: McTemplateK0hzr0qzr2hzr4hzr6
0x1C000F2A0: MupFastIoQueryNetworkOpenInfo
0x1C0005358: "PrefixCacheSizeInKB" ??_C@_1CI@MJMPLHID@?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AAC?$AAa?$AAc?$AAh?$AAe?$AAS?$AAi?$AAz?$AAe?$AAI?$AAn?$AAK?$AAB?$AA?$AA@
0x1C00059C4: "NOT" ??_C@_03GBFNEA@NOT?$AA@
0x1C00110BC: MupReleaseUncProvider
0x1C00172E0: MupFastIoWrite
0x1C000B048: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C0005380: "ProviderCacheTimeoutInMinutes" ??_C@_1DM@MHDFDNHC@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAC?$AAa?$AAc?$AAh?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAI?$AAn?$AAM?$AAi?$AAn?$AAu?$AAt?$AAe?$AAs?$AA?$AA@
0x1C0013A54: MupUncHardeningPreprocessCreate
0x1C0003034: WPP_SF_qqq
0x1C000DFE0: MupiPrefixCacheSizePolicyCheck
0x1C000B418: "__cdecl _imp_PsInsertPermanentSiloContext" __imp_PsInsertPermanentSiloContext
0x1C0012DB4: RfspServerNameInitializeAsIpv4
0x1C0017C2C: MupiCreateWithRelativePath
0x1C000B078: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C000310C: WPP_SF_qqqq
0x1C000B1D8: "__cdecl _imp_RtlFindUnicodePrefix" __imp_RtlFindUnicodePrefix
0x1C00013B0: MupGetUncProviderDeviceObjectFromFileObject
0x1C000B168: "__cdecl _imp_FsRtlTeardownPerStreamContexts" __imp_FsRtlTeardownPerStreamContexts
0x1C00080A0: "__cdecl _security_cookie" __security_cookie
0x1C0003098: WPP_SF_qqqD
0x1C0002D94: WPP_SF_ZqZD
0x1C00059C8: WPP_a522d3d76766317682b0c61f9d00d964_Traceguids
0x1C000D6D0: MupiIoPostProcess
0x1C00014B0: MupiPrefixGarbageCollectionDpcHandler
0x1C000B358: KdDebuggerEnabled
0x1C0012898: MupiGetFirstUncHardeningConfigurationEntry
0x1C000B1F8: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0010A50: MupiCreateUncHardeningConfigurationEntry
0x1C000F120: MupFastIoQueryBasicInfo
0x1C000B450: "__cdecl _imp_ExUnblockOnAddressPushLockEx" __imp_ExUnblockOnAddressPushLockEx
0x1C00183E0: MupiPrefixCacheRegistryChangeHandler
0x1C0016C30: MupFastIoMdlRead
0x1C001065C: MupiAddKnownProvider
0x1C001D078: MupInitIrpContextList
0x1C0001DA0: McGenControlCallbackV2
0x1C00052A8: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0010D6C: MupFlushKnownPrefixTable
0x1C0013850: MupUncHardeningPostProcessCreate
0x1C00051B8: MupiUncHardeningProperty_RequireIntegrity
0x1C0017070: MupFastIoReadCompressed
0x1C00084C8: MupDeviceObject
0x1C0005848: MupiServerNameDecoration_SSL_buffer
0x1C0019900: MupSurrogateRestoreFileNameInFileObject
0x1C00041F0: DllInitialize
0x1C0001D18: RfsUtilFilterEa
0x1C000EFF0: MupiGetNetworkOpenEcpIntegrityLevelFromHardeningCapabilities
0x1C000DD60: MupFastIoQueryOpen
0x1C0008180: MupiNetworkProviderOrderWork
0x1C0001430: MupiUncProviderCompletion
0x1C000EF98: MupiGetOrCreateEcpListForCreateIrp
0x1C0018800: MupDeInitUncProviderModule
0x1C00051A8: MupiUncHardeningProperty_RequirePrivacy
0x1C000B268: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0003D58: WPP_SF_qd
0x1C0002F6C: WPP_SF_qD
0x1C0002904: WPP_SF_qZ
0x1C00029B4: WPP_SF_qq
0x1C0005920: UncHardening_InvalidSyntax_UnexpectedToken
0x1C0005868: Microsoft_Windows_NetworkProviderLevels
0x1C000B460: "__cdecl _imp_KeFlushQueuedDpcs" __imp_KeFlushQueuedDpcs
0x1C001D044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00028C0: WPP_SF_q
0x1C001B510: RfsCskvLexerGetString
0x1C0005910: UncHardening_InvalidSyntax_IllegalString
0x1C000B208: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C000B2B8: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000B1A8: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0008A58: WPPTraceSuite
0x1C0010E3C: MupiProcessProviderRegistration
0x1C000B0D8: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000D010: MupFsControl
0x1C0005B64: RfsCskvCommaString_buffer
0x1C000B0E0: "__cdecl _imp_KeGetCurrentNodeNumber" __imp_KeGetCurrentNodeNumber
0x1C0003E18: McTemplateK0hzr0hzr2q
0x1C0016AE0: MupFastIoCheckIfPossible
0x1C0001674: McGenEventRegister
0x1C000B468: "__cdecl _imp_RtlUnicodeStringToInt64" __imp_RtlUnicodeStringToInt64
0x1C0005320: "\Parameters" ??_C@_1BI@BPNCJPFJ@?$AA?2?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C0003ECC: McTemplateK0hzr0qzr2
0x1C000B330: "__cdecl _imp_FsRtlRegisterMupCalls" __imp_FsRtlRegisterMupCalls
0x1C00171C0: MupFastIoUnlockAllByKey
0x1C000B380: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C000B348: "__cdecl _imp_ExReleaseRundownProtection" __imp_ExReleaseRundownProtection
0x1C00055F8: "ProviderOrder" ??_C@_1BM@FBFHHHJN@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00176F4: MupSetupUndecoratedFileNameForRelativeOpen
0x1C0017240: MupFastIoUnlockSingle
0x1C00086B8: MupiMupDeviceOpenCount
0x1C00124BC: MupiFindOrInsertUncHardeningPrefixEntry
0x1C00082A0: MupiOrderKeyHandle
0x1C0012A10: MupiUndecorateServerName
0x1C00104A8: MupiSetupKnownProviderList
0x1C0001EB0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00042F8: RfsTimerSet
0x1C0012D30: RfspServerNameInitializeAsIpv6
0x1C0005220: REMOTEFS_MUP
0x1C000D510: MupCallSurrogatePrePost
0x1C0018C48: MupiFreeProvider
0x1C0017A68: MupiAllocLegacyQueryPathRequest
0x1C0010F1C: MupReleaseFileContext
0x1C000B0D0: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C0019CB0: MupRefreshUncHardeningConfigurationTimerCallback
0x1C000B370: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C00081C0: MupiNetworkProviderOrderIoStatus
0x1C000B050: "__cdecl _imp_FsRtlMdlReadCompleteDev" __imp_FsRtlMdlReadCompleteDev
0x1C0005348: "\??\UNC" ??_C@_1BA@OFNNPBJK@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x1C0003934: MupTransferListEntries
0x1C000B350: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C0018CC0: MupiGetProviderIdFromName
0x1C001AB3C: MupReferenceContainerContext
0x1C000411C: McTemplateK0hzr0qzr2qhzr5
0x1C0005300: WPP_ThisDir_CTLGUID_MupLog
0x1C0008BE0: MupiNetworkProviderOrderKeyHandle
0x1C000B190: "__cdecl _imp_KeAcquireGuardedMutex" __imp_KeAcquireGuardedMutex
0x1C000B030: "__cdecl _imp_FsRtlAllocateExtraCreateParameterList" __imp_FsRtlAllocateExtraCreateParameterList
0x1C000B470: ntoskrnl_NULL_THUNK_DATA
0x1C00017D0: MupRegisterPrefixCacheKeyChangeNotification
0x1C000B0F8: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000B1C8: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C00039D4: MupiAssignProvidersPriorityValue
0x1C0008500: MupiPrefixGarbageCollectionTimeoutValue
0x1C00111A4: MupReleaseSurrogateProvider
0x1C00125C0: MupiTryStartUncHardeningRegistryWatcher
0x1C00120D4: MupSaveUnstrippedFileName
0x1C00106D8: MupiAddProviderToList
0x1C000B1E0: "__cdecl _imp_ZwNotifyChangeKey" __imp_ZwNotifyChangeKey
0x1C0016D80: MupFastIoMdlReadCompleteCompressed
0x1C001A630: MupiSelectBestMatchingConfigurationEntry
0x1C000FCB8: DriverEntry
0x1C00140A8: MupiAddSurrogateToList
0x1C00195A0: MupSurrogateDeregisterProvider
0x1C00035B0: MupUnpinKnownPrefix
0x1C000EE60: MupFastIoQueryStandardInfo
0x1C00134E0: MupiReadNetworkProviderOrderFromRegistry
0x1C00014E0: MupGetRequiredHardeningCapabilitiesFromIrp
0x1C000B2F8: "__cdecl _imp_ExWaitForRundownProtectionRelease" __imp_ExWaitForRundownProtectionRelease
0x1C0008A48: pfnWppTraceMessage
0x1C000B228: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C000F4AC: MupInitSurrogateProviderModule
0x1C000B000: "__cdecl _imp_FsRtlFreeExtraCreateParameterList" __imp_FsRtlFreeExtraCreateParameterList
0x1C0005870: "Mailslot" ??_C@_1BC@MOPNMDOE@?$AAM?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C0005000: MupiUncHardeningWildcard
0x1C00023C0: memset
0x1C000B49C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0001010: MupFindFileContext
0x1C0013E20: MupSurrogateGetFileName
0x1C000B090: "__cdecl _imp_FsRtlLookupPerFileObjectContext" __imp_FsRtlLookupPerFileObjectContext

[JEB Decompiler by PNF Software]