Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\WpdUpFltr.sys Base=0x1C0000000 SHA-256=BA21BF38DD0AE9CC2017BC013053ABECB9CA3C20A6C39CDF8EE4B9C66E796438
PDB: WpdUpFltr.pdb GUID={84D94296-4C01-EBB2-C725A722EB165E60} Age=1

117 located named symbols:
0x1C0005138: WdfDriverGlobals
0x1C00014E0: WppClassicProviderCallback
0x1C00050B8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0008150: WppTraceCallback
0x1C0007018: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C0004138: "FILE_CXT" ??_C@_08NBAIIEFJ@FILE_CXT?$AA@
0x1C0007090: "__cdecl _imp_ObfDereferenceObjectWithTag" __imp_ObfDereferenceObjectWithTag
0x1C0005030: "__cdecl WDF_PROCESS_CXT_TYPE_INFO" _WDF_PROCESS_CXT_TYPE_INFO
0x1C0007048: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002BC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0005000: "__cdecl WDF_FILTER_EXTENSION_TYPE_INFO" _WDF_FILTER_EXTENSION_TYPE_INFO
0x1C0007060: "__cdecl _imp_IoGetRequestorProcess" __imp_IoGetRequestorProcess
0x1C00050F0: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C0004178: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0004258: "Found" ??_C@_1M@BJJCOFPH@?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?$AA@
0x1C00070B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0007088: "__cdecl _imp_IoGetRequestorProcessId" __imp_IoGetRequestorProcessId
0x1C0004110: "FILTER_EXTENSION" ??_C@_0BB@NKONJEOC@FILTER_EXTENSION?$AA@
0x1C0007038: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00070CC: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C0007030: "__cdecl _imp_IoIncrementKeepAliveCount" __imp_IoIncrementKeepAliveCount
0x1C0004108: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0002C00: memcpy
0x1C0005080: WdfBindInfo
0x1C0004268: "**New" ??_C@_1M@LMJFEPAD@?$AA?$CK?$AA?$CK?$AAN?$AAe?$AAw?$AA?$AA@
0x1C0005110: pfnWppGetVersion
0x1C0002AFD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C00013B0: WPP_SF_qqqqDDq
0x1C0002C00: memmove
0x1C0007078: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C000200C: GetProcessObjectForEProcess
0x1C0002B4C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0001520: FilterEvtFileCleanup
0x1C0005360: WPP_MAIN_CB
0x1C00042A8: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C0007020: WDFLDR_NULL_THUNK_DATA
0x1C00050C0: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C0008EE8: ForwardRequestWithCompletionRoutine
0x1C0005120: pfnWppQueryTraceInformation
0x1C00028B4: FxDriverEntryWorker
0x1C00084C0: FilterEvtDriverUnload
0x1C0004288: GUID_DEVINTERFACE_MT_TRANSPORT
0x1C0007098: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0008C00: FilterEvtDeviceFileCreate
0x1C0002B28: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0004158: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004278: WPP_1f07c6a0cef23fb4276f4a7f98a4d2b4_Traceguids
0x1C0004148: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0005100: pfnEtwRegisterClassicProvider
0x1C00029FC: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C0001008: WPP_SF_
0x1C0005128: pfnEtwUnregister
0x1C000893C: InitDeviceContext
0x1C0007008: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C00070A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0001AD0: FilterEvtIoDeviceControl
0x1C0001DB0: FilterIoCtlCompletionRoutine
0x1C0007000: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C0008760: RunOnceIdentifyIfPassThrough
0x1C0008530: FilterEvtDeviceAdd
0x1C0007028: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x1C0001128: WPP_SF_dq
0x1C0005028: WPP_GLOBAL_Control
0x1C00010E0: WPP_SF_d
0x1C0002AC0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00070B8: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0007040: "__cdecl _imp_IoDecrementKeepAliveCount" __imp_IoDecrementKeepAliveCount
0x1C0001180: WPP_SF_dqq
0x1C00012E8: WPP_SF_qqd
0x1C0004228: "multimedia\wpd\drivers\class\upf" ??_C@_0CN@JIFLMOKG@multimedia?2wpd?2drivers?2class?2upf@
0x1C0008434: WppCleanupKm
0x1C000A000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0004000: "__cdecl load_config_used" _load_config_used
0x1C0002840: FxStubDriverUnload
0x1C0002400: FilterFileCreateCompletionRoutine
0x1C0001450: WPP_SF_qqqqL
0x1C00050D0: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C0004198: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004208: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0007068: "__cdecl _imp_IoGetDeviceInterfaces" __imp_IoGetDeviceInterfaces
0x1C0002B10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0004128: "PROCESS_CXT" ??_C@_0M@GGONGJPN@PROCESS_CXT?$AA@
0x1C0008008: WppLoadTracingSupport
0x1C0007058: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0002798: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C0008DF8: ForwardAndForgetRequest
0x1C00050E0: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C0005058: "__cdecl WDF_FILE_CXT_TYPE_INFO" _WDF_FILE_CXT_TYPE_INFO
0x1C000134C: WPP_SF_qqq
0x1C0002880: FxDriverEntry
0x1C00050B0: "__cdecl _security_cookie" __security_cookie
0x1C00041D0: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0004298: WPP_ThisDir_CTLGUID_CtlGuidWpdUpFltr
0x1C0001230: WPP_SF_qD
0x1C0001290: WPP_SF_qq
0x1C0009148: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00011E8: WPP_SF_q
0x1C0007080: "__cdecl _imp_IoGetInitiatorProcess" __imp_IoGetInitiatorProcess
0x1C0005118: WPPTraceSuite
0x1C0005130: WdfFunctions_01015
0x1C000103C: WPP_SF_Sqq
0x1C0002AF0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0007070: "__cdecl _imp_ObfReferenceObjectWithTag" __imp_ObfReferenceObjectWithTag
0x1C0007010: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C00070A0: ntoskrnl_NULL_THUNK_DATA
0x1C0007050: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0009008: DriverEntry
0x1C00017B0: FilterEvtFileClose
0x1C0005108: pfnWppTraceMessage
0x1C00083A4: WppInitKm
0x1C0002F40: memset
0x1C00070E0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]