Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\vdrvroot.sys Base=0x1C0000000 SHA-256=107BE98743DA2F16D2900ED26A562E5F5F35E3851E8A5B03DF89665E84E1B3B4
PDB: vdrvroot.pdb GUID={17A3B82B-4B05-3DFA-59FE826F53132BF2} Age=1
141 located named symbols:
0x1C00031E8: WdfDriverGlobals
0x1C0001514: "long __cdecl FxStubInitTypes(void)" ?FxStubInitTypes@@YAJXZ
0x1C0001C80: WppClassicProviderCallback
0x1C00050A8: "__cdecl _imp_ZwLoadDriver" __imp_ZwLoadDriver
0x1C0003180: VhdAdapterData
0x1C00024E8: "Microsoft_VHD_ISO_VHBA_%02d" ??_C@_1DI@KBCOMCC@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA_?$AAV?$AAH?$AAD?$AA_?$AAI?$AAS?$AAO?$AA_?$AAV?$AAH?$AAB?$AAA?$AA_?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x1C0003098: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0007000: WppTraceCallback
0x1C0005018: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C0005098: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0001620: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0001490: "void __cdecl FxStubUnbindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubUnbindClasses@@YAXPEAU_WDF_BIND_INFO@@@Z
0x1C00024D8: "%02d" ??_C@_19MNDKMKJC@?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x1C00030D0: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C00021F8: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C00050D8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0005058: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C0005050: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00050F4: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C0005078: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0002108: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0001640: memcpy
0x1C0003058: WdfBindInfo
0x1C0006D40: VdrvpRegisterHbaDriver
0x1C0003140: pfnWppGetVersion
0x1C0001640: memmove
0x1C0003010: VDRVROOT_PROVIDER_ID_Context
0x1C0003120: Microsoft_Windows_VDRVROOTEnableBits
0x1C00050A0: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C00015AC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C00072D8: VdrvpCreatePdo
0x1C00023A0: WPP_faba9c2d7b6634134d25daa54ae2c0f4_Traceguids
0x1C00030E0: WPP_MAIN_CB
0x1C00022C8: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C0005020: WDFLDR_NULL_THUNK_DATA
0x1C00030A0: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C00024C0: "VHD Bus 0" ??_C@_1BE@CCKAOCAK@?$AAV?$AAH?$AAD?$AA?5?$AAB?$AAu?$AAs?$AA?5?$AA0?$AA?$AA@
0x1C0003150: pfnWppQueryTraceInformation
0x1C0001140: WdfDeviceInterfaceReferenceNoOp
0x1C00012A4: FxDriverEntryWorker
0x1C0005030: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0001130: VdrvDeviceQueryStop
0x1C0005088: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0001588: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0002218: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0006BC4: VdrvpNotifyNetStopEvent
0x1C00023D0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0003130: pfnEtwRegisterClassicProvider
0x1C0005048: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C00013D4: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C0003128: VdrvDeviceCount
0x1C0001B40: WPP_SF_
0x1C0003158: pfnEtwUnregister
0x1C0006C50: VdrvpQueryVirtualDiskSymLink
0x1C00022A8: GUID_DEVCLASS_VDRVROOT
0x1C0002148: GUID_DEVINTERFACE_SURFACE_VIRTUAL_DRIVE
0x1C0005008: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C00023E0: "{8e7bd593-6e6c-4c52-86a6-7717549" ??_C@_1HG@HCIPDJAL@?$AA?$HL?$AA8?$AAe?$AA7?$AAb?$AAd?$AA5?$AA9?$AA3?$AA?9?$AA6?$AAe?$AA6?$AAc?$AA?9?$AA4?$AAc?$AA5?$AA2?$AA?9?$AA8?$AA6?$AAa?$AA6?$AA?9?$AA7?$AA7?$AA1?$AA7?$AA5?$AA4?$AA9@
0x1C00050D0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00022B8: Microsoft_Windows_VDRVROOTLevels
0x1C0005000: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C0001204: WppIsEqualGuid
0x1C0006010: VdrvAddDevice
0x1C0005080: "__cdecl _imp_KeResetEvent" __imp_KeResetEvent
0x1C0001BC0: WPP_SF_DD
0x1C0001140: WdfDeviceInterfaceDereferenceNoOp
0x1C00011A0: McGenEventWrite
0x1C0003000: WPP_GLOBAL_Control
0x1C00022C0: Microsoft_Windows_VDRVROOTKeywords
0x1C0001B78: WPP_SF_D
0x1C0001B78: WPP_SF_d
0x1C0001160: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0006A9C: VdrvpDoStaticEnumeration
0x1C00050E0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0006700: VdrvDeviceControl
0x1C0002460: "{8e7bd593-6e6c-4c52-86a6-7717549" ??_C@_1GA@JABCIIMM@?$AA?$HL?$AA8?$AAe?$AA7?$AAb?$AAd?$AA5?$AA9?$AA3?$AA?9?$AA6?$AAe?$AA6?$AAc?$AA?9?$AA4?$AAc?$AA5?$AA2?$AA?9?$AA8?$AA6?$AAa?$AA6?$AA?9?$AA7?$AA7?$AA1?$AA7?$AA5?$AA4?$AA9@
0x1C0006F70: WppCleanupKm
0x1C0005040: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0009000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0006A30: VdrvDriverCleanup
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C00013A0: FxStubDriverUnload
0x1C00050C0: "__cdecl _imp_IoReportRootDevice" __imp_IoReportRootDevice
0x1C0001AC8: McGenEventUnregister
0x1C0002390: DriverUnregistration
0x1C0005028: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C00030B0: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C00023B0: GUID_VDRV_REGISTRATION_INTERFACE
0x1C0005070: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00021C0: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0002168: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0001140: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0007250: VdrvDeviceListCreatePdo
0x1C0002110: "\DosDevices\GLOBAL\VDRVROOT" ??_C@_1DI@NHGGIPKM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?2?$AAV?$AAD?$AAR?$AAV?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x1C0002158: WPP_ThisDir_CTLGUID_VdrvRootTraceGuid
0x1C0006340: WppLoadTracingSupport
0x1C0005068: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001234: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C0001B04: McTemplateK0
0x1C00030C0: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C0001270: FxDriverEntry
0x1C0003090: "__cdecl _security_cookie" __security_cookie
0x1C0001CB8: RtlUnicodeStringPrintf
0x1C0002530: "__stdcall _xmm" __xmm@00000002000000020000000200000002
0x1C0002540: "__stdcall _xmm" __xmm@00000003000000030000000200000002
0x1C0001060: McGenControlCallbackV2
0x1C0002188: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0002238: VDRVROOT_PROVIDER_ID
0x1C0002520: WPP_0bc730e5c54135b1e1d7b65a9f4d6e69_Traceguids
0x1C0005090: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0008008: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0001C24: WPP_SF_q
0x1C00050B8: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0003148: WPPTraceSuite
0x1C0005038: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00033F8: WdfFunctions_01015
0x1C0001010: McGenEventRegister
0x1C0005060: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0001190: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0005010: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C00050C8: ntoskrnl_NULL_THUNK_DATA
0x1C00050B0: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0008040: DriverEntry
0x1C0003138: pfnWppTraceMessage
0x1C0002310: "\Registry\Machine\System\Current" ??_C@_1HM@CADAPLKK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0006610: VdrvCreateVirtualHba
0x1C00023C0: DriverRegistration
0x1C00062D0: WppInitKm
0x1C0006EA0: VdrvpUnregisterHbaDriver
0x1C0001D70: WPP_SF_S
0x1C0001980: memset
0x1C0005108: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]