Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\mpsdrv.sys Base=0x1C0000000 SHA-256=D947D848D564674A5832CBCFF77E9A36F33160FAAF7A3939A19ADE1C8697908B
PDB: mpsdrv.pdb GUID={5C59B292-5A8E-28F4-F0F157A6B26A8F7E} Age=1

377 located named symbols:
0x1C0014048: "__cdecl _imp_FwpsFlowAssociateContext0" __imp_FwpsFlowAssociateContext0
0x1C000F830: FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD
0x1C000F8A0: FWPM_LAYER_INBOUND_TRANSPORT_V6
0x1C000F880: FWPM_LAYER_INBOUND_TRANSPORT_V4
0x1C0006A00: WppClassicProviderCallback
0x1C0014198: "__cdecl _imp_ZwSetInformationThread" __imp_ZwSetInformationThread
0x1C00141D0: "__cdecl _imp_SeCaptureSubjectContext" __imp_SeCaptureSubjectContext
0x1C000B334: WPP_SF_dDdDdS
0x1C000F850: FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD
0x1C000FD30: "\Device\MPS" ??_C@_1BI@ILAGIBEM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAP?$AAS?$AA?$AA@
0x1C0012598: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0015270: WppTraceCallback
0x1C0014000: "__cdecl _imp_NdisGetDataBuffer" __imp_NdisGetDataBuffer
0x1C00141E0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C001022C: "229 " ??_C@_04GCACJJD@229?5?$AA@
0x1C000E41C: ParseDec32bit
0x1C00140D8: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C000CD9C: WPP_SF_L
0x1C0014120: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0003B40: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0014008: "__cdecl _imp_NdisRetreatNetBufferListDataStart" __imp_NdisRetreatNetBufferListDataStart
0x1C0014028: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C0006610: MpsCleanupModules
0x1C0014210: "__cdecl _imp_PsTerminateSystemThread" __imp_PsTerminateSystemThread
0x1C00141C8: "__cdecl _imp_ZwOpenProcess" __imp_ZwOpenProcess
0x1C0014188: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C00140B8: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C0014068: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0010128: "bad digits" ??_C@_0L@DAMIHDFD@bad?5digits?$AA@
0x1C000F6B8: MPS_DRV_Start_End
0x1C0014038: "__cdecl _imp_FwpsCalloutUnregisterByKey0" __imp_FwpsCalloutUnregisterByKey0
0x1C00101F8: "bad delimiter after port" ??_C@_0BJ@PLOOKKDM@bad?5delimiter?5after?5port?$AA@
0x1C000F788: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0014088: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0014090: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C000CF0C: WPP_SF_dd_IPV6_d_IPV6_ddS
0x1C000DDF8: WPP_SF_DHDHDs
0x1C000FB50: WPP_27f9eb838af73c9e664e390c32098ef1_Traceguids
0x1C000FF80: "Windows Firewall Troubleshooting" ??_C@_1FC@KMLOGLJN@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAF?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?5?$AAT?$AAr?$AAo?$AAu?$AAb?$AAl?$AAe?$AAs?$AAh?$AAo?$AAo?$AAt?$AAi?$AAn?$AAg@
0x1C0014230: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00010B0: MpspSetDynEdge
0x1C0003860: MpsDispatchCreate
0x1C0014010: "__cdecl _imp_NdisAdvanceNetBufferListDataStart" __imp_NdisAdvanceNetBufferListDataStart
0x1C0014060: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00140C0: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C000C228: AddSecondaryIpFilter
0x1C0002FD0: MpsSetDeviceSecurity
0x1C0002D90: MpsInitIoLayer
0x1C0014208: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C00126E0: g_MpsModulesList
0x1C00036D0: CreateFilterList
0x1C0014110: "__cdecl _imp_ObSetSecurityObjectByPointer" __imp_ObSetSecurityObjectByPointer
0x1C000F870: FWPM_LAYER_IPFORWARD_V4_DISCARD
0x1C00140E8: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0003B80: memcpy
0x1C000FFE0: "Windows Firewall: troubleshootin" ??_C@_1FE@MJEFNIPD@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAF?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?3?$AA?5?$AAt?$AAr?$AAo?$AAu?$AAb?$AAl?$AAe?$AAs?$AAh?$AAo?$AAo?$AAt?$AAi?$AAn@
0x1C0009614: WPP_SF_LLS_sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid_L_IPV6__IPV6_dd
0x1C000FF20: WPP_520ebae201c53beb82c6dd9739a4fe4e_Traceguids
0x1C0014080: "__cdecl _imp_IoWMIWriteEvent" __imp_IoWMIWriteEvent
0x1C000FEE0: MakoInformationGuid
0x1C0014130: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C0014108: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0012820: pfnWppGetVersion
0x1C000FED0: MPS_DRV_Stop_End
0x1C0003B80: memmove
0x1C00140B0: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C0014070: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C00069B8: MpsTracingEnableCallback
0x1C000F6C8: MPS_DRV_Start_Begin
0x1C000C138: DfwDeinitializeFilterModule
0x1C00039EC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0014058: fwpkclnt_NULL_THUNK_DATA
0x1C000DF10: IP4StringToAddress
0x1C0014018: NDIS_NULL_THUNK_DATA
0x1C000FAE0: FWPM_LAYER_ALE_AUTH_CONNECT_V6
0x1C00126A0: WPP_MAIN_CB
0x1C000E04C: IP6StringToAddress
0x1C000A900: WPP_SF_LiLS_sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid_L_IPV6__IPV6_dd
0x1C0012860: WorkerThreadInitialized
0x1C0008D60: WPP_SF_LLS_sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid_LDDdd
0x1C000CDEC: WPP_SF_ddDdDddS
0x1C0012620: g_FilterOps
0x1C000F960: FWPM_LAYER_DATAGRAM_DATA_V6
0x1C000F940: FWPM_LAYER_DATAGRAM_DATA_V4
0x1C000E3C8: ParseDec16bit
0x1C0014098: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C00100C8: WPP_1b185e50f1fd3c58121df1f86f992036_Traceguids
0x1C000FD60: "Connection-oriented protocol pac" ??_C@_1GA@MGNCPCOG@?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAo?$AAr?$AAi?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?5?$AAp?$AAa?$AAc@
0x1C0014168: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00011D0: SendDfwNotification
0x1C0012838: pfnWppQueryTraceInformation
0x1C000E640: AuditOneArgError
0x1C00140D0: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C00101B8: "bad delimiter after address" ??_C@_0BM@IIKPANHH@bad?5delimiter?5after?5address?$AA@
0x1C00014C0: MpsGetFwpAuthData
0x1C0012859: g_fMpsSymbolicLinkCreated
0x1C0002AB4: MpsInitializeModules
0x1C000BA00: DfwDeinitializeIpFlowManager
0x1C000FAF0: FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD
0x1C000BFBC: CreateFilter
0x1C00039C8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000FF30: WPP_4cc7b8fa1ff533614abf26b986762973_Traceguids
0x1C000F7A8: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0014138: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C000FAC0: FWPM_LAYER_ALE_AUTH_CONNECT_V4
0x1C0010238: "22x response malformed" ??_C@_0BH@FHBAGK@22x?5response?5malformed?$AA@
0x1C00140A8: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C00141E8: "__cdecl _imp_PsCreateSystemThread" __imp_PsCreateSystemThread
0x1C0001E80: MpsDispatchDevCtl
0x1C000BB7C: DfwDeleteIpFlow
0x1C000FF48: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0012810: pfnEtwRegisterClassicProvider
0x1C00025C0: NseQueryExportTable
0x1C0002500: MpsIoLayerDispatchIrp
0x1C0002A10: AuditSuccessEvent
0x1C0014100: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C0014040: "__cdecl _imp_FwpiCalloutRegisterAndAddWithoutDevice0" __imp_FwpiCalloutRegisterAndAddWithoutDevice0
0x1C00065A0: WPP_SF_
0x1C000FD00: "\DosDevices\MpsDevice" ??_C@_1CM@FINEIPBI@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAM?$AAp?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C0012830: g_DriverObject
0x1C0014050: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C0014020: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C0012840: pfnEtwUnregister
0x1C000FEC0: EventTraceGuid
0x1C000FEB0: NseKmInfoProviderGuid
0x1C001424C: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C0007A80: MpsStopTroubleshooting
0x1C0007748: MpsStartTroubleshooting
0x1C000E4AC: ParseHex32bit
0x1C00141A0: "__cdecl _imp_SeReleaseSubjectContext" __imp_SeReleaseSubjectContext
0x1C000FAD0: FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD
0x1C000F7C8: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000FDC0: "Initiates deep protocol inspecti" ??_C@_1GA@OEDMFPJG@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAs?$AA?5?$AAd?$AAe?$AAe?$AAp?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?5?$AAi?$AAn?$AAs?$AAp?$AAe?$AAc?$AAt?$AAi@
0x1C0001F20: MpsIoctlUpcall
0x1C0003588: DfwInitializeFilterModule
0x1C0016010: GsDriverEntry
0x1C0014228: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0003970: DeleteFilter
0x1C000FF54: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C00067D0: MpsDispatchCleanup
0x1C0012858: g_fMpsIoLayerInited
0x1C0012630: g_nIpFlows
0x1C000A02C: WPP_SF_LiLS_sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid__sid_LDDdd
0x1C00141F8: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C000FB30: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD
0x1C0002B24: MpsInitializeUpcalls
0x1C00122D8: ETWLOG_CONTROL_DATA
0x1C0014218: "__cdecl _imp_SeSetAuditParameter" __imp_SeSetAuditParameter
0x1C000F8F0: FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD
0x1C00100D8: WPP_f5bff9f4080930e77ac625e8cb7f0e6c_Traceguids
0x1C000F6E8: WPP_ThisDir_CTLGUID_MpsDrvTrace
0x1C000FF00: WPP_ca334232277132c5122dabda54d47157_Traceguids
0x1C00140F8: "__cdecl _imp_SeReportSecurityEventWithSubCategory" __imp_SeReportSecurityEventWithSubCategory
0x1C000B420: WPP_SF_dL
0x1C000FEF0: MPS_DRV_Stop_Begin
0x1C000FA60: FWPM_LAYER_ALE_AUTH_LISTEN_V6
0x1C000C1C8: WPP_SF_dd
0x1C000FA40: FWPM_LAYER_ALE_AUTH_LISTEN_V4
0x1C0012BA4: g_LogSequence
0x1C000C9C4: WPP_SF_DdDddDdddS
0x1C000B578: WPP_SF_dq
0x1C0010040: "Windows Firewall: troubleshootin" ??_C@_1FC@MLNMKLMG@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAF?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?3?$AA?5?$AAt?$AAr?$AAo?$AAu?$AAb?$AAl?$AAe?$AAs?$AAh?$AAo?$AAo?$AAt?$AAi?$AAn@
0x1C000B7D8: DfwCreateIpFlow
0x1C0012000: WPP_GLOBAL_Control
0x1C000F910: FWPM_LAYER_STREAM_V4_DISCARD
0x1C000FF40: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C00141C0: "__cdecl _imp_ZwDuplicateToken" __imp_ZwDuplicateToken
0x1C00065CC: WPP_SF_d
0x1C00065CC: WPP_SF_D
0x1C00101A0: "bad address terminator" ??_C@_0BH@HHHOJIFF@bad?5address?5terminator?$AA@
0x1C00101F0: "no port" ??_C@_07KDFPKMHD@no?5port?$AA@
0x1C0012640: DriverStatistics
0x1C00100B8: WPP_d23fec9d4d183e7377842d4508d62034_Traceguids
0x1C0014190: "__cdecl _imp_IoGetFileObjectGenericMapping" __imp_IoGetFileObjectGenericMapping
0x1C000F8E0: FWPM_LAYER_OUTBOUND_TRANSPORT_V6
0x1C00140A0: "__cdecl _imp_KeReleaseInStackQueuedSpinLock" __imp_KeReleaseInStackQueuedSpinLock
0x1C000F6D8: MS_MPS_DRV_Provider
0x1C0003930: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00101D8: "bad empty fields" ??_C@_0BB@KOGCDHKF@bad?5empty?5fields?$AA@
0x1C00100E8: "IP4/IP6 mismatch" ??_C@_0BB@DKKLJKOC@IP4?1IP6?5mismatch?$AA@
0x1C0010148: "delimiter invalid character" ??_C@_0BM@EJPICINA@delimiter?5invalid?5character?$AA@
0x1C0003770: ETWLogKMSystemControl
0x1C0014238: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0012080: FtpAnalyzerOps
0x1C000F900: FWPM_LAYER_STREAM_V4
0x1C000FB20: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6
0x1C000DEDC: HexDigitValue
0x1C0010100: "endpoint port reserved" ??_C@_0BH@OLLBLGBN@endpoint?5port?5reserved?$AA@
0x1C0010190: "bad address" ??_C@_0M@KGHGGJGL@bad?5address?$AA@
0x1C000D030: LogIpFlow
0x1C000FB10: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD
0x1C000C6E0: MatchIpFilter
0x1C00151E4: WppCleanupKm
0x1C000FF60: "Unknown App" ??_C@_1BI@LEEEBHMH@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAA?$AAp?$AAp?$AA?$AA@
0x1C0007154: MpsDeinitializeFwp
0x1C000F8D0: FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD
0x1C0014118: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0012AC0: g_Provider
0x1C0017000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000F000: "__cdecl load_config_used" _load_config_used
0x1C000F9D0: FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD
0x1C000F9F0: FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD
0x1C000FE88: "Notifies the user." ??_C@_1CG@NHEMKNKP@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAe?$AAs?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?4?$AA?$AA@
0x1C0014178: "__cdecl _imp_ZwOpenProcessTokenEx" __imp_ZwOpenProcessTokenEx
0x1C0003458: DfwInitializeIpFlowManager
0x1C00141B8: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000F930: FWPM_LAYER_STREAM_V6_DISCARD
0x1C0008BF4: WPP_SF_LLLLLSL_IPV6__IPV6_dd
0x1C000FA30: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD
0x1C000FA10: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD
0x1C000FE60: "Performs logging." ??_C@_1CE@POPLFHNL@?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAs?$AA?5?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?4?$AA?$AA@
0x1C00068E0: MpsDispatchClose
0x1C000F8C0: FWPM_LAYER_OUTBOUND_TRANSPORT_V4
0x1C000F970: FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD
0x1C00141B0: "__cdecl _imp_SeLockSubjectContext" __imp_SeLockSubjectContext
0x1C0014200: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0012848: g_fWPPInited
0x1C000BCDC: NseCreateAnalyzer
0x1C000E50C: MpsDeinitializeWorkerThread
0x1C000F750: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000F950: FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD
0x1C0012040: IpFilterOps
0x1C000FF10: WPP_cb68326096cf3c6b54eef1c8789f31d6_Traceguids
0x1C000FD48: FW_PLUMBER_CALLOUT_KEY
0x1C000F6F8: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000CB10: WPP_SF_Dd_IPV6_dd_IPV6_ddS
0x1C00100A8: WPP_9a40f18b461037b976604bc99542f96a_Traceguids
0x1C000F920: FWPM_LAYER_STREAM_V6
0x1C000FB00: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4
0x1C0014158: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C0002640: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0003A60: memcmp
0x1C0002250: MpsUpcall
0x1C0010168: "bad delimiter after address fami" ??_C@_0CD@FMPFHBA@bad?5delimiter?5after?5address?5fami@
0x1C0010098: WPP_4ddb5d40e79233b2aa0c3eab96f89311_Traceguids
0x1C0015074: WppLoadTracingSupport
0x1C000F9B0: FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD
0x1C0014078: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C000F800: FWPM_LAYER_INBOUND_IPPACKET_V6
0x1C000B620: DfwAnalyzeIpFlowData
0x1C0014030: "__cdecl _imp_FwpsCalloutRegisterWithoutDevice0" __imp_FwpsCalloutRegisterWithoutDevice0
0x1C0010224: "227 " ??_C@_04MLOAEJJ@227?5?$AA@
0x1C00125C0: WorkItemList
0x1C0006694: MpsDeInitIoLayer
0x1C00141A8: "__cdecl _imp_SeUnlockSubjectContext" __imp_SeUnlockSubjectContext
0x1C0012590: "__cdecl _security_cookie" __security_cookie
0x1C000CC4C: WPP_SF_Dd_IPV6_dd_IPV6_dddS
0x1C000FA80: FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4
0x1C0012850: g_pMpsDeviceObject
0x1C000F9E0: FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6
0x1C000F9C0: FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4
0x1C0012AC8: PassiveThread
0x1C000F860: FWPM_LAYER_IPFORWARD_V4
0x1C000FA00: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4
0x1C000FA20: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6
0x1C000F718: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C000F9A0: FWPM_LAYER_INBOUND_ICMP_ERROR_V6
0x1C0006CB0: MpsDeinitializeUpcalls
0x1C000FA90: FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD
0x1C00019A0: UpcallIrpCompleteReadyNotification
0x1C00140F0: "__cdecl _imp_KeAcquireInStackQueuedSpinLock" __imp_KeAcquireInStackQueuedSpinLock
0x1C0014150: "__cdecl _imp_EtwWrite" __imp_EtwWrite
0x1C0008A8C: WPP_SF_LLLLLSLDDdd
0x1C0006D18: WPP_SF_qq
0x1C000F810: FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD
0x1C0001080: MpspSetAppID
0x1C0016044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000B488: WPP_SF_d_IPV6_d_IPV6_dS
0x1C000B5D0: WPP_SF_q
0x1C0010118: "no digits" ??_C@_09MDCDEAGA@no?5digits?$AA@
0x1C00140E0: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C0014148: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000FB40: FWPM_SUBLAYER_INSPECTION
0x1C001282C: WPPTraceSuite
0x1C00141F0: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0014180: "__cdecl _imp_ZwDuplicateObject" __imp_ZwDuplicateObject
0x1C000F990: FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD
0x1C0012600: WorkerThreadWakeupEvent
0x1C000F7E0: FWPM_LAYER_INBOUND_IPPACKET_V4
0x1C001285A: g_fETWInited
0x1C00128C0: WorkItemLookasideList
0x1C0014260: "__cdecl _IMPORT_DESCRIPTOR_NDIS" __IMPORT_DESCRIPTOR_NDIS
0x1C0014160: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0010138: "no comma" ??_C@_08CLIGIKMP@no?5comma?$AA@
0x1C0002C34: MpsInitializeWorkerThread
0x1C0003960: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00141D8: "__cdecl _imp_KeWaitForMultipleObjects" __imp_KeWaitForMultipleObjects
0x1C000FAA0: FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6
0x1C00140C8: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C00076D0: MpsStartTraceNotify
0x1C000FA50: FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD
0x1C000FA70: FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD
0x1C0010218: "bad port" ??_C@_08IJMGIIMA@bad?5port?$AA@
0x1C000FB70: WPP_b156623c5d703fb82e18ef6717eb0951_Traceguids
0x1C0014220: ntoskrnl_NULL_THUNK_DATA
0x1C0014170: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000F980: FWPM_LAYER_INBOUND_ICMP_ERROR_V4
0x1C000FB60: WPP_ce2d5e558808301d3993b6ac3308ee12_Traceguids
0x1C0014140: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C000FAB0: FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD
0x1C0014128: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00027D0: DriverEntry
0x1C00125F8: WorkerThreadLock
0x1C000FB80: WPP_2fe7c3eb5ddc308485660f5b3a6b9504_Traceguids
0x1C00125E0: WorkerThreadKillEvent
0x1C000F8B0: FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD
0x1C000F7F0: FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD
0x1C0012818: pfnWppTraceMessage
0x1C0015008: WppInitKm
0x1C000C88C: WPP_SF_DdDddDddS
0x1C000F820: FWPM_LAYER_OUTBOUND_IPPACKET_V4
0x1C000F840: FWPM_LAYER_OUTBOUND_IPPACKET_V6
0x1C000F890: FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD
0x1C0003EC0: memset
0x1C0014274: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C000FE20: "Allows secondary connections." ??_C@_1DM@LOGOKONC@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAs?$AA?5?$AAs?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AA?5?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?4?$AA?$AA@
0x1C000BE14: AddFilterToList

[JEB Decompiler by PNF Software]