Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_10.0.17763.1_none_49c437a1dc4fe479\aspnet_filter.dll Base=0x642FF3D0000 SHA-256=F0FE83A23F488929839D291C87485CC7342669C1AD132413B411A57C9D3E6D20
PDB: aspnet_filter.pdb GUID={E9BBCE08-B43B-4BEF-94BD550EC66C9E24} Age=1

202 located named symbols:
0x642FF3D1390: CLSID_AppHostAdminManager
0x642FF3D1280: IID_IAppHostCollectionSchema
0x642FF3D2E70: "__cdecl FindPESection" _FindPESection
0x642FF3D11D0: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x642FF3D4184: "__cdecl forceCRTManifest" _forceCRTManifest
0x642FF3D1A40: "int __cdecl PathMatchesBin(char * __ptr64)" ?PathMatchesBin@@YAHPEAD@Z
0x642FF3D13C8: "localresources" ??_C@_0P@KPKHNGDH@localresources?$AA@
0x642FF3D345C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x642FF3D40B8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x642FF3D10B8: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x642FF3D2840: "__cdecl CRT_INIT" _CRT_INIT
0x642FF3D10B0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x642FF3D1550: "system.webServer/security/reques" ??_C@_1FG@PFOCDLIN@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?4?$AAw?$AAe?$AAb?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?1?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?1?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs@
0x642FF3D4070: "int g_FilterFlags" ?g_FilterFlags@@3HA
0x642FF3D3498: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x642FF3D4178: "void * __ptr64 __ptr64 g_hMyHeap" ?g_hMyHeap@@3PEAXEA
0x642FF3D2DC0: "__cdecl RTC_Initialize" _RTC_Initialize
0x642FF3D140C: "" ??_C@_00CNPNBAHC@?$AA@
0x642FF3D10D0: "__cdecl _imp_isspace" __imp_isspace
0x642FF3D1720: "__cdecl _rtc_taa" __rtc_taa
0x642FF3D1128: "__cdecl _imp__initterm_e" __imp__initterm_e
0x642FF3D1528: "hiddenSegments" ??_C@_1BO@PPLGFCON@?$AAh?$AAi?$AAd?$AAd?$AAe?$AAn?$AAS?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x642FF3D11E0: ole32_NULL_THUNK_DATA
0x642FF3D1B90: "unsigned long __cdecl ForbidBinDir(struct _HTTP_FILTER_CONTEXT * __ptr64,struct _HTTP_FILTER_URL_MAP_EX * __ptr64)" ?ForbidBinDir@@YAKPEAU_HTTP_FILTER_CONTEXT@@PEAU_HTTP_FILTER_URL_MAP_EX@@@Z
0x642FF3D1710: "__cdecl _rtc_iaa" __rtc_iaa
0x642FF3D3448: "__cdecl _IMPORT_DESCRIPTOR_MSVCR80" __IMPORT_DESCRIPTOR_MSVCR80
0x642FF3D2310: TerminateFilter
0x642FF3D11E8: "__cdecl _xc_a" __xc_a
0x642FF3D10F0: "__cdecl _imp___clean_type_info_names_internal" __imp___clean_type_info_names_internal
0x642FF3D16C8: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x642FF3D315C: "__cdecl lock" _lock
0x642FF3D1158: "__cdecl _imp_isdigit" __imp_isdigit
0x642FF3D1360: IID_IAppHostAdminManager
0x642FF3D1260: IID_IAppHostConfigLocationCollection
0x642FF3D2F22: "__cdecl initterm" _initterm
0x642FF3D1290: IID_IAppHostElementSchema
0x642FF3D1370: IID_IAppHostConfigManager
0x642FF3D4730: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x642FF3D1038: "__cdecl _imp_Sleep" __imp_Sleep
0x642FF3D1208: "__cdecl _xi_z" __xi_z
0x642FF3D1070: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x642FF3D2F34: "__cdecl _C_specific_handler" __C_specific_handler
0x642FF3D13F8: "AspFilterSessionId:" ??_C@_0BE@PDCOHBPK@AspFilterSessionId?3?$AA@
0x642FF3D12A0: IID_IAppHostConfigException
0x642FF3D10C8: "__cdecl _imp__onexit" __imp__onexit
0x642FF3D1330: IID_IAppHostConfigFile
0x642FF3D1000: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x642FF3D1170: MSVCR80_NULL_THUNK_DATA
0x642FF3D40C4: "__cdecl _native_vcclrit_reason" __native_vcclrit_reason
0x642FF3D2780: "long __cdecl EnsureCoInitialized(int * __ptr64)" ?EnsureCoInitialized@@YAJPEAH@Z
0x642FF3D4158: "struct HINSTANCE__ * __ptr64 __ptr64 g_DllInstance" ?g_DllInstance@@3PEAUHINSTANCE__@@EA
0x642FF3D1440: "/app_" ??_C@_05BOHIDOBF@?1app_?$AA@
0x642FF3D2F2E: "__cdecl amsg_exit" _amsg_exit
0x642FF3D26A0: "long __cdecl GetLastWin32Error(void)" ?GetLastWin32Error@@YAJXZ
0x642FF3D1230: IID_IAppHostMappingExtension
0x642FF3D1198: "__cdecl _imp_RtlZeroMemory" __imp_RtlZeroMemory
0x642FF3D314A: "__cdecl _clean_type_info_names_internal" __clean_type_info_names_internal
0x642FF3D1640: "StopBinFiltering" ??_C@_1CC@HODEGGBN@?$AAS?$AAt?$AAo?$AAp?$AAB?$AAi?$AAn?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x642FF3D1430: "APPL_MD_PATH" ??_C@_0N@EKJCJAHE@APPL_MD_PATH?$AA@
0x642FF3D1480: "app_webreferences" ??_C@_1CE@MGKHFGDL@?$AAa?$AAp?$AAp?$AA_?$AAw?$AAe?$AAb?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAs?$AA?$AA@
0x642FF3D4168: "__cdecl _@@_PchSym_@00@UwwUmwkUucUhixUchkUrmxUlyqCiUznwGEUkivxlnkOlyq@precomp" __@@_PchSym_@00@UwwUmwkUucUhixUchkUrmxUlyqCiUznwGEUkivxlnkOlyq@precomp
0x642FF3D10D8: "__cdecl _imp__lock" __imp__lock
0x642FF3D1188: OLEAUT32_NULL_THUNK_DATA
0x642FF3D1270: IID_IAppHostPropertySchema
0x642FF3D2DA0: atexit
0x642FF3D11D8: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x642FF3D1148: "__cdecl _imp_tolower" __imp_tolower
0x642FF3D2F3A: "__cdecl _CppXcptFilter" __CppXcptFilter
0x642FF3D1068: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x642FF3D3156: "__cdecl _dllonexit" __dllonexit
0x642FF3D1090: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x642FF3D13B8: "webreferences" ??_C@_0O@DGPAJLEE@webreferences?$AA@
0x642FF3D4718: "__cdecl _native_startup_lock" __native_startup_lock
0x642FF3D2670: DllMain
0x642FF3D2E00: "__cdecl RTC_Terminate" _RTC_Terminate
0x642FF3D1150: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x642FF3D1100: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x642FF3D11B0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x642FF3D1E10: "long __cdecl ReadIisRequestFilteringSection(unsigned long * __ptr64)" ?ReadIisRequestFilteringSection@@YAJPEAK@Z
0x642FF3D1310: IID_IAppHostSectionTable
0x642FF3D10C0: KERNEL32_NULL_THUNK_DATA
0x642FF3D10A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x642FF3D40C0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x642FF3D2C20: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x642FF3D1190: "__cdecl _imp_RtlMoveMemory" __imp_RtlMoveMemory
0x642FF3D16A0: "ASP.NET Cookieless Session Filte" ??_C@_0CC@DNJAIJBA@ASP?4NET?5Cookieless?5Session?5Filte@
0x642FF3D3484: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x642FF3D1730: "void __cdecl CookielessSessionFilterInit(void)" ?CookielessSessionFilterInit@@YAXXZ
0x642FF3D10A8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x642FF3D1300: IID_IAppHostSection
0x642FF3D2E40: "__cdecl ValidateImageBase" _ValidateImageBase
0x642FF3D1460: "app_browsers" ??_C@_1BK@JDLAJOJM@?$AAa?$AAp?$AAp?$AA_?$AAb?$AAr?$AAo?$AAw?$AAs?$AAe?$AAr?$AAs?$AA?$AA@
0x642FF3D1510: "bin" ??_C@_17PMBBFJPC@?$AAb?$AAi?$AAn?$AA?$AA@
0x642FF3D4160: "void * __ptr64 __ptr64 g_hXSPHeap" ?g_hXSPHeap@@3PEAXEA
0x642FF3D34AC: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x642FF3D1160: "__cdecl _imp__strnicmp" __imp__strnicmp
0x642FF3D2BE0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x642FF3D1130: "__cdecl _imp__initterm" __imp__initterm
0x642FF3D2320: HttpFilterProc
0x642FF3D1448: "app_data" ??_C@_1BC@DMPPFALM@?$AAa?$AAp?$AAp?$AA_?$AAd?$AAa?$AAt?$AAa?$AA?$AA@
0x642FF3D12D0: IID_IAppHostElement
0x642FF3D1600: "StopProtectedDirectoryFiltering" ??_C@_1EA@MFLGBMAJ@?$AAS?$AAt?$AAo?$AAp?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x642FF3D1098: "__cdecl _imp_SetLastError" __imp_SetLastError
0x642FF3D1050: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x642FF3D14F8: "app_code" ??_C@_1BC@EHBNMMDL@?$AAa?$AAp?$AAp?$AA_?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x642FF3D13F0: "url" ??_C@_03BMGHOINI@url?$AA@
0x642FF3D1790: "unsigned long __cdecl CookielessSessionFilterProc(struct _HTTP_FILTER_CONTEXT * __ptr64,struct _HTTP_FILTER_PREPROC_HEADERS * __ptr64,char * __ptr64)" ?CookielessSessionFilterProc@@YAKPEAU_HTTP_FILTER_CONTEXT@@PEAU_HTTP_FILTER_PREPROC_HEADERS@@PEAD@Z
0x642FF3D4720: "__cdecl _onexitend" __onexitend
0x642FF3D3150: "__cdecl unlock" _unlock
0x642FF3D316E: RtlLookupFunctionEntry
0x642FF3D3162: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x642FF3D1060: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x642FF3D1168: "__cdecl _imp___crt_debugger_hook" __imp___crt_debugger_hook
0x642FF3D1DE0: "unsigned long __cdecl ForbidApplicationDir(struct _HTTP_FILTER_CONTEXT * __ptr64,struct _HTTP_FILTER_PREPROC_HEADERS * __ptr64,char * __ptr64)" ?ForbidApplicationDir@@YAKPEAU_HTTP_FILTER_CONTEXT@@PEAU_HTTP_FILTER_PREPROC_HEADERS@@PEAD@Z
0x642FF3D1080: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x642FF3D13D8: "globalresources" ??_C@_0BA@INOBDCPC@globalresources?$AA@
0x642FF3D11F8: "__cdecl _xi_a" __xi_a
0x642FF3D1020: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x642FF3D10E8: "__cdecl _imp__unlock" __imp__unlock
0x642FF3D1240: IID_IAppHostChildElementCollection
0x642FF3D1088: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x642FF3D16C8: "__cdecl pRawDllMain" _pRawDllMain
0x642FF3D1410: "bin" ??_C@_03PDOMKJON@bin?$AA@
0x642FF3D1AE0: "char * __ptr64 __cdecl RemoveAppPrefix(char * __ptr64,char * __ptr64)" ?RemoveAppPrefix@@YAPEADPEAD0@Z
0x642FF3D10E0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x642FF3D1180: "__cdecl _imp_VariantClear" __imp_VariantClear
0x642FF3D1718: "__cdecl _rtc_izz" __rtc_izz
0x642FF3D2CA0: "__cdecl _security_check_cookie" __security_check_cookie
0x642FF3D1414: "ROOT" ??_C@_04BNGIIOIP@ROOT?$AA@
0x642FF3D11F0: "__cdecl _xc_z" __xc_z
0x642FF3D1138: "__cdecl _imp__malloc_crt" __imp__malloc_crt
0x642FF3D10F8: "__cdecl _imp___CppXcptFilter" __imp___CppXcptFilter
0x642FF3D11C0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x642FF3D11C8: "__cdecl _imp_CoGetClassObject" __imp_CoGetClassObject
0x642FF3D1030: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x642FF3D1048: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x642FF3D3190: "__cdecl _chkstk" __chkstk
0x642FF3D40D0: "bool * g_legalchars" ?g_legalchars@@3PA_NA
0x642FF3D1340: IID_IAppHostPathMapper
0x642FF3D1728: "__cdecl _rtc_tzz" __rtc_tzz
0x642FF3D12E0: IID_IAppHostProperty
0x642FF3D2CC0: "__cdecl _clean_type_info_names" __clean_type_info_names
0x642FF3D1110: "__cdecl _imp__decode_pointer" __imp__decode_pointer
0x642FF3D1420: "/LM/W3SVC/" ??_C@_0L@JPJIAKCN@?1LM?1W3SVC?1?$AA@
0x642FF3D13A8: "browsers" ??_C@_08PCCNOMO@browsers?$AA@
0x642FF3D1350: IID_IAppHostChangeHandler
0x642FF3D1108: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x642FF3D13A0: "data" ??_C@_04PJOLNDGD@data?$AA@
0x642FF3D1040: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x642FF3D11A8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x642FF3D1028: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x642FF3D11A0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x642FF3D13E8: "code" ??_C@_04NDFOBODE@code?$AA@
0x642FF3D1140: "__cdecl _imp__encode_pointer" __imp__encode_pointer
0x642FF3D1380: LIBID_AppHostAdminLibrary
0x642FF3D14A8: "app_localresources" ??_C@_1CG@NPLOLFPE@?$AAa?$AAp?$AAp?$AA_?$AAl?$AAo?$AAc?$AAa?$AAl?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x642FF3D4078: "unsigned short * __ptr64 * g_hidden_dirs" ?g_hidden_dirs@@3PAPEAGA
0x642FF3D14D0: "app_globalresources" ??_C@_1CI@GHGKHDE@?$AAa?$AAp?$AAp?$AA_?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x642FF3D12C0: IID_IAppHostElementCollection
0x642FF3D24C0: GetFilterVersion
0x642FF3D2F28: "__cdecl initterm_e" _initterm_e
0x642FF3D11B8: ntdll_NULL_THUNK_DATA
0x642FF3D40B0: "__cdecl _security_cookie" __security_cookie
0x642FF3D4030: "char * g_encoding" ?g_encoding@@3PADA
0x642FF3D1010: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x642FF3D3190: "__cdecl alloca_probe" _alloca_probe
0x642FF3D15D8: "mappingExtension" ??_C@_1CC@MLDMFCEK@?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x642FF3D2200: "void __cdecl ReadFilterFlags(struct _HTTP_FILTER_VERSION * __ptr64)" ?ReadFilterFlags@@YAXPEAU_HTTP_FILTER_VERSION@@@Z
0x642FF3D1178: "__cdecl _imp_VariantInit" __imp_VariantInit
0x642FF3D15A8: "MACHINE/WEBROOT/APPHOST" ??_C@_1DA@FDEFIJFM@?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?1?$AAW?$AAE?$AAB?$AAR?$AAO?$AAO?$AAT?$AA?1?$AAA?$AAP?$AAP?$AAH?$AAO?$AAS?$AAT?$AA?$AA@
0x642FF3D1058: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x642FF3D12F0: IID_IAppHostConfigLocation
0x642FF3D4728: "__cdecl _onexitbegin" __onexitbegin
0x642FF3D12B0: IID_IAppHostPropertyException
0x642FF3D1668: "Software\Microsoft\ASP.NET" ??_C@_1DG@HIODIDCD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAA?$AAS?$AAP?$AA?4?$AAN?$AAE?$AAT?$AA?$AA@
0x642FF3D1078: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x642FF3D3470: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x642FF3D1118: "__cdecl _imp__encoded_null" __imp__encoded_null
0x642FF3D1008: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x642FF3D2F40: "__cdecl _security_init_cookie" __security_init_cookie
0x642FF3D1320: IID_IAppHostSectionGroup
0x642FF3D26D0: "char * __ptr64 __cdecl stristr(char * __ptr64,char * __ptr64)" ?stristr@@YAPEADPEAD0@Z
0x642FF3D1018: ADVAPI32_NULL_THUNK_DATA
0x642FF3D3168: RtlVirtualUnwind
0x642FF3D3000: "__cdecl _report_gsfailure" __report_gsfailure
0x642FF3D4000: "char * __ptr64 * g_forbidden_dir_tails" ?g_forbidden_dir_tails@@3PAPEADA
0x642FF3D2CD0: "__cdecl onexit" _onexit
0x642FF3D1250: IID_IAppHostPropertyCollection
0x642FF3D4710: "__cdecl _native_startup_state" __native_startup_state
0x642FF3D4188: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x642FF3D1CC0: "int __cdecl PathMatchesApplication(char * __ptr64)" ?PathMatchesApplication@@YAHPEAD@Z
0x642FF3D1518: "segment" ??_C@_1BA@NLOPKPHM@?$AAs?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x642FF3D1120: "__cdecl _imp_free" __imp_free
0x642FF3D2EC0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x642FF3D34C0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x642FF3D2560: "long __cdecl InitDllLight(void)" ?InitDllLight@@YAJXZ

[JEB Decompiler by PNF Software]