Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\kbdclass.sys Base=0x1C0000000 SHA-256=0B23BA25B76EB2EC4D57F0F1DDBD29A515A865C201050B3A00B50C232BE9BCA0
PDB: kbdclass.pdb GUID={BA32B326-A1DD-CF4F-A00C5E63C0F0B6FD} Age=1
337 located named symbols:
0x1C000B160: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C0006B10: WppClassicProviderCallback
0x1C000B150: "__cdecl _imp_ExAcquireFastMutex" __imp_ExAcquireFastMutex
0x1C000B008: "__cdecl _imp_WmiCompleteRequest" __imp_WmiCompleteRequest
0x1C0007288: "MaximumPortsServiced" ??_C@_1CK@BJBADKON@?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAP?$AAo?$AAr?$AAt?$AAs?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAd?$AA?$AA@
0x1C000B0A0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0001270: KeyboardClassCancel
0x1C0001010: KeyboardClassClose
0x1C000D230: KeyboardSendIrpSynchronously
0x1C0009048: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000E8E0: WppTraceCallback
0x1C000B098: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0002950: KeyboardStartWorker
0x1C0007190: "Parameters" ??_C@_1BG@PGIGMDPA@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C000641C: WPP_RECORDER_SF_qqLqq
0x1C000B220: "__cdecl _imp_RtlWriteRegistryValue" __imp_RtlWriteRegistryValue
0x1C000B0A8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002D00: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0007630: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C0004F2C: KeyboardClassRemoveDevice
0x1C000B180: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0002BD0: KeyboardPnpStartCompletion
0x1C00071DA: "" ??_C@_00CNPNBAHC@?$AA@
0x1C000B068: "__cdecl _imp_IoWriteErrorLogEntry" __imp_IoWriteErrorLogEntry
0x1C000B1E0: "__cdecl _imp_IoAllocateErrorLogEntry" __imp_IoAllocateErrorLogEntry
0x1C00073E0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000E510: KeyboardClassPassThrough
0x1C0002380: WPP_RECORDER_SF_qqdq
0x1C000B1C8: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C000B050: "__cdecl _imp_IoSetDeviceInterfaceState" __imp_IoSetDeviceInterfaceState
0x1C0006B78: "__cdecl TlgWrite" _TlgWrite
0x1C000E37C: KeyboardClassGetWaitWakeEnableState
0x1C000B260: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0002800: KbdInitializeDataQueue
0x1C000B108: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C00015A0: KeyboardClassPowerComplete
0x1C000B038: WppRecorder_NULL_THUNK_DATA
0x1C000B200: "__cdecl _imp_PoStartNextPowerIrp" __imp_PoStartNextPowerIrp
0x1C000B158: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000B0B8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C000B048: "__cdecl _imp_IoRegisterDriverReinitialization" __imp_IoRegisterDriverReinitialization
0x1C000C050: KbdDeviceMapQueryCallback
0x1C0004A70: KeyboardClassFlush
0x1C000B1D8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000B240: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C00072B8: "KeyboardDataQueueSize" ??_C@_1CM@GHBINBDK@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAD?$AAa?$AAt?$AAa?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C000B140: "__cdecl _imp_IoRegisterPlugPlayNotification" __imp_IoRegisterPlugPlayNotification
0x1C000B1E8: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C000F530: KbdConfiguration
0x1C0007128: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0002D40: memcpy
0x1C000B238: "__cdecl _imp_IoRegisterDeviceInterface" __imp_IoRegisterDeviceInterface
0x1C000B1F8: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C000B0C8: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C00094E8: pfnWppGetVersion
0x1C00069CC: WPP_RECORDER_SF_qqqql
0x1C000B190: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C000C740: KeyboardAddDevice
0x1C000B248: "__cdecl _imp_IoAcquireRemoveLockEx" __imp_IoAcquireRemoveLockEx
0x1C00048B0: KeyboardClassCleanupQueue
0x1C0002D40: memmove
0x1C000B0D8: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C000E27C: KeyboardClassEnableGlobalPort
0x1C0005850: KeyboardToggleWaitWake
0x1C0002C8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000B0F8: "__cdecl _imp_IoGetDeviceObjectPointer" __imp_IoGetDeviceObjectPointer
0x1C000B0E0: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0009060: WPP_MAIN_CB
0x1C000C060: KeyboardClassQueryWmiRegInfo
0x1C000B1C0: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C00066AC: WPP_RECORDER_SF_qqdd
0x1C000B080: "__cdecl _imp_ExReleaseFastMutex" __imp_ExReleaseFastMutex
0x1C0009050: KeyboardClassGuid
0x1C000B060: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C000B170: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0005D84: WPP_RECORDER_SF_qLL
0x1C00094F8: pfnWppQueryTraceInformation
0x1C0005CB0: WPP_RECORDER_SF_qL
0x1C0005670: KeyboardClassWaitWakeComplete
0x1C000B290: "__cdecl _IMPORT_DESCRIPTOR_WppRecorder" __IMPORT_DESCRIPTOR_WppRecorder
0x1C000B118: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0002110: WPP_RECORDER_SF_qqLd
0x1C000B010: WMILIB_NULL_THUNK_DATA
0x1C0004B40: KeyboardClassLogError
0x1C00071F8: "SendOutputToAllPorts" ??_C@_1CK@OFIFLFKO@?$AAS?$AAe?$AAn?$AAd?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AAT?$AAo?$AAA?$AAl?$AAl?$AAP?$AAo?$AAr?$AAt?$AAs?$AA?$AA@
0x1C00071A8: "RtlQueryRegistryValuesEx" ??_C@_1DC@OAPHKEJN@?$AAR?$AAt?$AAl?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AAE?$AAx?$AA?$AA@
0x1C000B178: "__cdecl _imp_KeReleaseSpinLockFromDpcLevel" __imp_KeReleaseSpinLockFromDpcLevel
0x1C0002C68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0007400: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000B168: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C0007718: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C00094D8: pfnEtwRegisterClassicProvider
0x1C0002440: WPP_RECORDER_SF_qqsd
0x1C000B1A0: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x1C000CA20: KeyboardAddDeviceEx
0x1C0007320: "\Device\%wZ%d" ??_C@_1BM@GCLAIGLJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAd?$AA?$AA@
0x1C0007130: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x1C000B228: "__cdecl _imp_IoReleaseRemoveLockEx" __imp_IoReleaseRemoveLockEx
0x1C0009500: pfnEtwUnregister
0x1C0007340: WPP_ThisDir_CTLGUID_KbdClassTraceGuid
0x1C00071F0: "S" ??_C@_01CPLAODJH@S?$AA@
0x1C0005990: KeyboardToggleWaitWakeWorker
0x1C0004BF0: KeyboardClassQueryWmiDataBlock
0x1C00013E0: KbdSyncComplete
0x1C000F010: GsDriverEntry
0x1C000B258: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0006B6C: "__cdecl TlgDefineProvider_annotation__Tlgg_TraceLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_TraceLoggingProviderProv
0x1C0007160: GUID_DEVINTERFACE_KEYBOARD
0x1C0001CA0: KeyboardClassCreate
0x1C0007724: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C00022D0: WPP_RECORDER_SF_qqc
0x1C0006558: WPP_RECORDER_SF_qqd
0x1C00021E0: WPP_RECORDER_SF_qqL
0x1C00068DC: WPP_RECORDER_SF_qqq
0x1C000B078: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C0007138: "\Device\" ??_C@_1BC@IDABLMPM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$AA@
0x1C0001880: WPP_RECORDER_SF_qq
0x1C000C180: KeyboardClassDeviceControl
0x1C0007000: KeyboardClassWmiGuidList
0x1C0009000: WPP_GLOBAL_Control
0x1C000B198: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000C010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C00071F4: "D" ??_C@_01CKDDGHAB@D?$AA@
0x1C0007478: GUID_POWER_DEVICE_WAKE_ENABLE
0x1C00029E0: KeyboardStart
0x1C0005B2C: WPP_RECORDER_SF_
0x1C000B0B0: "__cdecl _imp_PoRequestPowerIrp" __imp_PoRequestPowerIrp
0x1C0002610: WPP_RECORDER_SF_S
0x1C0002C10: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0005C04: WPP_RECORDER_SF_q
0x1C0002780: WPP_RECORDER_SF_D
0x1C00026F0: WPP_RECORDER_SF_d
0x1C0001ED0: KeyboardPnP
0x1C0004D08: KeyboardClassReadCopyData
0x1C000B058: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C000B268: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000B000: "__cdecl _imp_WmiSystemControl" __imp_WmiSystemControl
0x1C0007711: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C000E1C0: KeyboardClassCreateWaitWakeIrp
0x1C000E540: KeyboardClassPlugPlayNotification
0x1C000B018: "__cdecl _imp_WppAutoLogStart" __imp_WppAutoLogStart
0x1C000B130: "__cdecl _imp_KeAcquireSpinLockAtDpcLevel" __imp_KeAcquireSpinLockAtDpcLevel
0x1C0007258: "KeyboardDeviceBaseName" ??_C@_1CO@HNPCPGFK@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C000B0D0: "__cdecl _imp_IoInitializeRemoveLockEx" __imp_IoInitializeRemoveLockEx
0x1C000E83C: WppCleanupKm
0x1C000B028: "__cdecl _imp_WppAutoLogStop" __imp_WppAutoLogStop
0x1C000B138: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C000B120: "__cdecl _imp_IoReleaseRemoveLockAndWaitEx" __imp_IoReleaseRemoveLockAndWaitEx
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0007020: "__cdecl load_config_used" _load_config_used
0x1C00047A8: KeyboardClassCancelPendingIrpLeds
0x1C000B040: "__cdecl _imp_IoCancelIrp" __imp_IoCancelIrp
0x1C000B1F0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000B27C: "__cdecl _IMPORT_DESCRIPTOR_WMILIB" __IMPORT_DESCRIPTOR_WMILIB
0x1C000B1B8: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00050C0: KeyboardClassServiceCallback
0x1C00073A8: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0001160: KeyboardClassCleanup
0x1C000E738: KeyboardQueryDeviceKey
0x1C0007350: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0007640: "`KbdClassTraceLoggingConfiguration'::`3'::_TlgEvent" ?_TlgEvent@?2??KbdClassTraceLoggingConfiguration@@9@9
0x1C000B090: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C0001410: KeyboardClassRead
0x1C00071E0: WPP_1975c0ad83fe39ae2d5358536952ac4e_Traceguids
0x1C0002C50: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0007788: GUID_TARGET_DEVICE_REMOVE_COMPLETE
0x1C000D0E0: WppLoadTracingSupport
0x1C000B1B0: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0007778: GUID_TARGET_DEVICE_QUERY_REMOVE
0x1C0007300: "KeyboardClass" ??_C@_1BM@PBCBKEKO@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C000B020: "__cdecl _imp_imp_WppRecorderReplay" __imp_imp_WppRecorderReplay
0x1C000B1D0: "__cdecl _imp_SeSinglePrivilegeCheck" __imp_SeSinglePrivilegeCheck
0x1C0002540: WPP_RECORDER_SF_qqdL
0x1C000B210: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C00062C4: WPP_RECORDER_SF_qqLLqq
0x1C0007730: "WaitWakeEnabled" ??_C@_1CA@FCJKAACB@?$AAW?$AAa?$AAi?$AAt?$AAW?$AAa?$AAk?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0009040: "__cdecl _security_cookie" __security_cookie
0x1C0001960: KeyboardClassPower
0x1C00067C4: WPP_RECORDER_SF_qqiL
0x1C000CB20: KbdDeterminePortsServiced
0x1C0004864: KeyboardClassCheckWaitWakeEnabled
0x1C0002890: RtlUnicodeStringPrintf
0x1C0005F94: WPP_RECORDER_SF_qd
0x1C00017D0: KeyboardClassSetLedsComplete
0x1C0007370: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0007150: "Port" ??_C@_19OBNDINH@?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x1C00061A8: WPP_RECORDER_SF_qqLL
0x1C000E600: KeyboardClassSetWmiDataBlock
0x1C000B100: "__cdecl _imp_RtlQueryRegistryValues" __imp_RtlQueryRegistryValues
0x1C000B218: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0007228: "ConnectMultiplePorts" ??_C@_1CK@JFADHEFF@?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAM?$AAu?$AAl?$AAt?$AAi?$AAp?$AAl?$AAe?$AAP?$AAo?$AAr?$AAt?$AAs?$AA?$AA@
0x1C000E220: KeyboardClassCreateWaitWakeIrpWorker
0x1C000F044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0004650: KeyboardCallAllPorts
0x1C000B188: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000B230: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C000C090: KeyboardClassSystemControl
0x1C00094F0: WPPTraceSuite
0x1C000B128: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0007750: "\Device\%wZLegacy%d" ??_C@_1CI@LNNDLAJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AA?$CF?$AAd?$AA?$AA@
0x1C000B110: "__cdecl _imp_ZwPowerInformation" __imp_ZwPowerInformation
0x1C0005E7C: WPP_RECORDER_SF_qLqq
0x1C0004A14: KeyboardClassDequeueRead
0x1C00072E8: "\Parameters" ??_C@_1BI@BPNCJPFJ@?$AA?2?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C000B0C0: "__cdecl _imp_IoOpenDeviceRegistryKey" __imp_IoOpenDeviceRegistryKey
0x1C0006068: WPP_RECORDER_SF_qlqqd
0x1C0007798: GUID_TARGET_DEVICE_REMOVE_CANCELLED
0x1C000CD40: KbdCreateClassObject
0x1C0005520: KeyboardClassWWPowerUpComplete
0x1C0007170: "AllowDisable" ??_C@_1BK@JIAOKFML@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1C0002C40: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000B088: "__cdecl _imp_PoCallDriver" __imp_PoCallDriver
0x1C000B070: "__cdecl _imp_IoUnregisterPlugPlayNotification" __imp_IoUnregisterPlugPlayNotification
0x1C000B030: "__cdecl _imp_WppAutoLogTrace" __imp_WppAutoLogTrace
0x1C000B0E8: "__cdecl _imp_RtlVerifyVersionInfo" __imp_RtlVerifyVersionInfo
0x1C000C400: KbdEnableDisablePort
0x1C000C550: KeyboardClassFindMorePorts
0x1C000B250: ntoskrnl_NULL_THUNK_DATA
0x1C000B1A8: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000B0F0: "__cdecl _imp_PoSetPowerState" __imp_PoSetPowerState
0x1C000CC50: KbdSendConnectRequest
0x1C000F080: DriverEntry
0x1C0001330: KeyboardClassPoRequestComplete
0x1C00094E0: pfnWppTraceMessage
0x1C000B208: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C000D040: WppInitKm
0x1C0003080: memset
0x1C000B2A4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C00090C0: Globals
0x1C000E6A0: KeyboardClassSetWmiDataItem
0x1C000B148: "__cdecl _imp_IoGetDeviceProperty" __imp_IoGetDeviceProperty
[JEB Decompiler by PNF Software]