Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\WindowsTrustedRT.sys Base=0x1C0000000 SHA-256=21B79B0D9A3184876037A96A747EE4E7F53464D0D5E6CCBABEBEBF1BDA063AFC
PDB: WindowsTrustedRT.pdb GUID={72BBDAF8-CBC0-019D-3DC26A3EF0BC773E} Age=1

287 located named symbols:
0x1C000D470: WdfDriverGlobals
0x1C0004020: "long __cdecl TreeClassLibraryBindClient(struct _WDF_CLASS_BIND_INFO * __ptr64,void * __ptr64 * __ptr64)" ?TreeClassLibraryBindClient@@YAJPEAU_WDF_CLASS_BIND_INFO@@PEAPEAX@Z
0x1C0001600: WppClassicProviderCallback
0x1C000F080: "__cdecl _imp_KeExpandKernelStackAndCalloutEx" __imp_KeExpandKernelStackAndCalloutEx
0x1C0002C10: TreeEvtCleanupChildDeviceDescriptor
0x1C000D150: "__cdecl WDF_TREE_SECURE_ENVIRONMENT_SERVICE_CONTEXT_TYPE_INFO" _WDF_TREE_SECURE_ENVIRONMENT_SERVICE_CONTEXT_TYPE_INFO
0x1C000BBB0: "{36DEAA79-C5DD-447C-95E6-B385958" ??_C@_1FO@LJBHJHED@?$AA?$HL?$AA3?$AA6?$AAD?$AAE?$AAA?$AAA?$AA7?$AA9?$AA?9?$AAC?$AA5?$AAD?$AAD?$AA?9?$AA4?$AA4?$AA7?$AAC?$AA?9?$AA9?$AA5?$AAE?$AA6?$AA?9?$AAB?$AA3?$AA8?$AA5?$AA9?$AA5?$AA8@
0x1C000D368: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0010150: WppTraceCallback
0x1C000F018: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C000B7E0: GUID_DEVINTERFACE_EMMC_PARTITION_ACCESS_RPMB
0x1C00011E0: WPP_RECORDER_SF__guid__guid_
0x1C0009B14: TreeDriverServicesGetServicePdo
0x1C000F130: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00091D0: "void __cdecl TreeEvtPluginProcessQueue(struct WDFWORKITEM__ * __ptr64)" ?TreeEvtPluginProcessQueue@@YAXPEAUWDFWORKITEM__@@@Z
0x1C000AA90: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0003700: TreeRPMBPnpNotification
0x1C0001BBC: TreeConfigureSecureServices
0x1C000B810: "<<Error while formatting the mes" ??_C@_0DG@HEGNHFHD@?$DM?$DMError?5while?5formatting?5the?5mes@
0x1C000D270: "__cdecl WDF_TREE_RPMB_SERVICE_CONTEXT_TYPE_INFO" _WDF_TREE_RPMB_SERVICE_CONTEXT_TYPE_INFO
0x1C0004570: "void __cdecl TreeSecureDeviceLogMessageWorker(void * __ptr64)" ?TreeSecureDeviceLogMessageWorker@@YAXPEAX@Z
0x1C0006FF0: TreeSecureServiceCreateChildDevice
0x1C0005028: RtlStringCbPrintfA
0x1C000D3A0: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C000B230: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000F0A8: "__cdecl _imp_KeQueryPriorityThread" __imp_KeQueryPriorityThread
0x1C000F068: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C000F148: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000B1D8: "TREE_SESSION_CALL_DATA" ??_C@_0BH@OACNNFGM@TREE_SESSION_CALL_DATA?$AA@
0x1C000F050: WppRecorder_NULL_THUNK_DATA
0x1C000F120: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000F164: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C000B938: "TREE_DRIVER_SERVICES_PLUGIN" ??_C@_0BM@NHBIMPGN@TREE_DRIVER_SERVICES_PLUGIN?$AA@
0x1C0002520: TreeEvtDestroyDeviceObject
0x1C00049CC: "long __cdecl TreeCxGetSessionContext(struct WDFFILEOBJECT__ * __ptr64,struct _TREE_SERVICE_SESSION_CONTEXT * __ptr64 * __ptr64,struct _TREE_SERVICE_DEVICE_CONTEXT * __ptr64 * __ptr64,struct _TREE_MASTER_DEVICE_CONTEXT * __ptr64 * __ptr64)" ?TreeCxGetSessionContext@@YAJPEAUWDFFILEOBJECT__@@PEAPEAU_TREE_SERVICE_SESSION_CONTEXT@@PEAPEAU_TREE_SERVICE_DEVICE_CONTEXT@@PEAPEAU_TREE_MASTER_DEVICE_CONTEXT@@@Z
0x1C000B7F8: "TREE_CX_BIND_CONTEXT" ??_C@_0BF@KJBDIJDJ@TREE_CX_BIND_CONTEXT?$AA@
0x1C000A1A0: "long __cdecl TreeRPMBPluginProcessStorRequest(void * __ptr64,struct WDFIOTARGET__ * __ptr64,unsigned long,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?TreeRPMBPluginProcessStorRequest@@YAJPEAXPEAUWDFIOTARGET__@@K0_K02PEA_K@Z
0x1C000D3B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUyzhvwieUgivvUgivvxocUwireviUlyquivUznwGEUgivvkxsOlyq@WindowsTrustedRT" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUyzhvwieUgivvUgivvxocUwireviUlyquivUznwGEUgivvkxsOlyq@WindowsTrustedRT
0x1C0006890: TreeSecureServicesSessionQueueCompletion
0x1C000F0B0: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0007324: WPP_RECORDER_SF__guid_Z
0x1C000D0F8: "struct _WDF_CLASS_LIBRARY_INFO TreeClassLibraryInfo" ?TreeClassLibraryInfo@@3U_WDF_CLASS_LIBRARY_INFO@@A
0x1C0003840: WPP_RECORDER_SF__guid_D
0x1C00012C0: WPP_RECORDER_SF__guid_d
0x1C000F0A0: "__cdecl _imp_ObSetSecurityObjectByPointer" __imp_ObSetSecurityObjectByPointer
0x1C0006A90: TreeSecureServicesSessionQueueEvtDeviceIoControl
0x1C000F0D8: "__cdecl _imp_IoRegisterPlugPlayNotification" __imp_IoRegisterPlugPlayNotification
0x1C000165C: "long __cdecl TreeDetectSecureServices(struct WDFDEVICE__ * __ptr64)" ?TreeDetectSecureServices@@YAJPEAUWDFDEVICE__@@@Z
0x1C000969C: TreeDriverServicesExecuteCommand
0x1C000D128: "__cdecl WDF_TREE_MASTER_DEVICE_FILE_CONTEXT_TYPE_INFO" _WDF_TREE_MASTER_DEVICE_FILE_CONTEXT_TYPE_INFO
0x1C000B148: "__cdecl _guard_iat_table" __guard_iat_table
0x1C000AAC0: memcpy
0x1C0001134: WPP_RECORDER_SF__guid_
0x1C00055AC: "long __cdecl TreeSecureServicesEvtIoInCallerContextDeviceIoControl(struct WDFREQUEST__ * __ptr64,unsigned long,unsigned __int64,unsigned __int64)" ?TreeSecureServicesEvtIoInCallerContextDeviceIoControl@@YAJPEAUWDFREQUEST__@@K_K1@Z
0x1C00048F4: "long __cdecl TreeCxGetDeviceContext(struct WDFDEVICE__ * __ptr64,struct _TREE_MASTER_DEVICE_CONTEXT * __ptr64 * __ptr64)" ?TreeCxGetDeviceContext@@YAJPEAUWDFDEVICE__@@PEAPEAU_TREE_MASTER_DEVICE_CONTEXT@@@Z
0x1C0005B50: TreeSecureServicesEvtDeviceIoControl
0x1C000D1F8: "__cdecl WDF_TREE_DRIVER_SERVICES_PLUGIN_TYPE_INFO" _WDF_TREE_DRIVER_SERVICES_PLUGIN_TYPE_INFO
0x1C000B1B0: "TREE_SECURE_SERVICES_REQUEST_CON" ??_C@_0CF@PMJGJFKA@TREE_SECURE_SERVICES_REQUEST_CON@
0x1C000D298: WdfBindInfo
0x1C0006DB0: TreeSecureServicesCallOSService
0x1C000D440: pfnWppGetVersion
0x1C0008944: "void __cdecl TreeDriverServicesSendRequest(struct WDFREQUEST__ * __ptr64,void * __ptr64)" ?TreeDriverServicesSendRequest@@YAXPEAUWDFREQUEST__@@PEAX@Z
0x1C000D248: "__cdecl WDF_TREE_DRIVER_SERVICES_CONTEXT_TYPE_INFO" _WDF_TREE_DRIVER_SERVICES_CONTEXT_TYPE_INFO
0x1C000AAC0: memmove
0x1C000F118: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0001DFC: TreeServicesCompleteSessionCall
0x1C0008BB0: "long __cdecl TreeDriverServicesGetRequest(struct WDFDEVICE__ * __ptr64,void * __ptr64,struct WDFREQUEST__ * __ptr64 * __ptr64)" ?TreeDriverServicesGetRequest@@YAJPEAUWDFDEVICE__@@PEAXPEAPEAUWDFREQUEST__@@@Z
0x1C000AA1C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0009CD0: TreeRPMBPluginInitialize
0x1C0004EE4: TreeCxClientProcessOtherSecureServiceIo
0x1C000D3C0: "struct WDFCOLLECTION__ * __ptr64 __ptr64 TreeSecureServiceCollection" ?TreeSecureServiceCollection@@3PEAUWDFCOLLECTION__@@EA
0x1C0008790: "long __cdecl TreeEvtDriverServicesPluginIoTargetQueryRemove(struct WDFIOTARGET__ * __ptr64)" ?TreeEvtDriverServicesPluginIoTargetQueryRemove@@YAJPEAUWDFIOTARGET__@@@Z
0x1C0001FB0: TreeServicesEvtAsyncSessionCallComplete
0x1C000D3D0: WPP_MAIN_CB
0x1C00024C0: TreeEvtDriverUnload
0x1C000BA00: "D:P" ??_C@_17FJOGMHOI@?$AAD?$AA?3?$AAP?$AA?$AA@
0x1C000F060: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C000BC10: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C0004CDC: TreeCxClientDestroySecureSessionContext
0x1C000F028: WDFLDR_NULL_THUNK_DATA
0x1C001218C: TreeInitControlDevice
0x1C0002E70: TreeEvtDeviceRequestSerialization
0x1C000B200: GUID_NULL
0x1C00080B4: "long __cdecl TreeDriverServicesPluginAvailable(struct WDFDEVICE__ * __ptr64,void * __ptr64,struct _UNICODE_STRING const * __ptr64)" ?TreeDriverServicesPluginAvailable@@YAJPEAUWDFDEVICE__@@PEAXPEBU_UNICODE_STRING@@@Z
0x1C000B4F0: "{4E815EE1-20F8-41EF-8CFF-3C283F0" ??_C@_1FG@LGHGCGJK@?$AA?$HL?$AA4?$AAE?$AA8?$AA1?$AA5?$AAE?$AAE?$AA1?$AA?9?$AA2?$AA0?$AAF?$AA8?$AA?9?$AA4?$AA1?$AAE?$AAF?$AA?9?$AA8?$AAC?$AAF?$AAF?$AA?9?$AA3?$AAC?$AA2?$AA8?$AA3?$AAF?$AA0@
0x1C000D370: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C000F110: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0001D30: TreeEvtCompleteSessionCallWorkItem
0x1C000D460: pfnWppQueryTraceInformation
0x1C00059E0: TreeSecureServicesEvtDefaultIo
0x1C000F178: "__cdecl _IMPORT_DESCRIPTOR_WppRecorder" __IMPORT_DESCRIPTOR_WppRecorder
0x1C000A7A4: FxDriverEntryWorker
0x1C00022A0: TreeEvtDeviceD0Exit
0x1C000B8EC: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x1C000774C: "unsigned char __cdecl TreeDriverServicesFindPlugin(struct _TREE_DRIVER_SERVICES_CONTEXT * __ptr64,struct _UNICODE_STRING const * __ptr64,struct _GUID const * __ptr64,void * __ptr64 * __ptr64,struct _TREE_DRIVER_SERVICES_PLUGIN * __ptr64 * __ptr64)" ?TreeDriverServicesFindPlugin@@YAEPEAU_TREE_DRIVER_SERVICES_CONTEXT@@PEBU_UNICODE_STRING@@PEBU_GUID@@PEAPEAXPEAPEAU_TREE_DRIVER_SERVICES_PLUGIN@@@Z
0x1C000D050: "__cdecl WDF_TREE_SESSION_CALL_DATA_TYPE_INFO" _WDF_TREE_SESSION_CALL_DATA_TYPE_INFO
0x1C000F0C0: "__cdecl _imp_IoResolveDependency" __imp_IoResolveDependency
0x1C0002F20: TreeEvtDeviceCreateFile
0x1C000A9F8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000B210: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0002370: TreeEvtDeviceIoControl
0x1C0009980: "void __cdecl TreeEvtDriverServicesContextCleanupCallback(void * __ptr64)" ?TreeEvtDriverServicesContextCleanupCallback@@YAXPEAX@Z
0x1C000B190: "TREE_SERVICE_SESSION_CONTEXT" ??_C@_0BN@CGMJPNIK@TREE_SERVICE_SESSION_CONTEXT?$AA@
0x1C000B8E0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C000D448: pfnEtwRegisterClassicProvider
0x1C000A8EC: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C0007C20: "void __cdecl TreeEvtDriverServicesRequestContextCleanupCallback(void * __ptr64)" ?TreeEvtDriverServicesRequestContextCleanupCallback@@YAXPEAX@Z
0x1C00020A0: TreeEvtDeviceReleaseHardware
0x1C0004B50: TreeCxClientDisconnectSecureService
0x1C0005500: TreeSecureServicesEvtIoAllocateRequestResources
0x1C0003FE0: "void __cdecl TreeClassLibraryDeinitialize(void)" ?TreeClassLibraryDeinitialize@@YAXXZ
0x1C000D300: TreeSecureServiceSecurityMap
0x1C000D450: pfnEtwUnregister
0x1C0004A80: "void __cdecl TreeCxClientProcessOtherDeviceIoWorker(void * __ptr64)" ?TreeCxClientProcessOtherDeviceIoWorker@@YAXPEAX@Z
0x1C000D420: TreeControlDevice
0x1C000F0B8: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C000B4B8: "onecore\base\basedrv\tree\treecl" ??_C@_0DF@OHJJDDAK@onecore?2base?2basedrv?2tree?2treecl@
0x1C000F008: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C0007C84: "long __cdecl TreeDriverServicesRegisterNewPlugin(struct WDFDEVICE__ * __ptr64,struct _TREE_DRIVER_SERVICES_CONTEXT * __ptr64,struct _GUID const * __ptr64)" ?TreeDriverServicesRegisterNewPlugin@@YAJPEAUWDFDEVICE__@@PEAU_TREE_DRIVER_SERVICES_CONTEXT@@PEBU_GUID@@@Z
0x1C000D2C8: TreeSecureServiceChildHidMap
0x1C000D0C8: "void (__cdecl** TreeSecureEnvironmentCxFunctionTableV1)(void)" ?TreeSecureEnvironmentCxFunctionTableV1@@3PAP6AXXZA
0x1C000B7A0: WPP_ThisDir_CTLGUID_WindowsTrustedRT
0x1C000F140: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00094B0: "void __cdecl TreeEvtDriverServicesRequestCompletionCallback(struct WDFREQUEST__ * __ptr64,struct WDFIOTARGET__ * __ptr64,struct _WDF_REQUEST_COMPLETION_PARAMS * __ptr64,void * __ptr64)" ?TreeEvtDriverServicesRequestCompletionCallback@@YAXPEAUWDFREQUEST__@@PEAUWDFIOTARGET__@@PEAU_WDF_REQUEST_COMPLETION_PARAMS@@PEAX@Z
0x1C000494C: "long __cdecl TreeCxGetServiceContext(struct WDFDEVICE__ * __ptr64,struct _TREE_SERVICE_DEVICE_CONTEXT * __ptr64 * __ptr64,struct _TREE_MASTER_DEVICE_CONTEXT * __ptr64 * __ptr64)" ?TreeCxGetServiceContext@@YAJPEAUWDFDEVICE__@@PEAPEAU_TREE_SERVICE_DEVICE_CONTEXT@@PEAPEAU_TREE_MASTER_DEVICE_CONTEXT@@@Z
0x1C00027B0: TreeEvtCreateChildDevicePdo
0x1C0004DF4: TreeCxClientCancelSecureServiceRequest
0x1C000B7F0: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C0003FD0: "long __cdecl TreeClassLibraryInitialize(void)" ?TreeClassLibraryInitialize@@YAJXZ
0x1C0002D20: TreeEvtDeviceInternalIoControl
0x1C000F020: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C0004DA0: "void __cdecl TreeCxClientProcessSecureServiceRequestWorker(void * __ptr64)" ?TreeCxClientProcessSecureServiceRequestWorker@@YAXPEAX@Z
0x1C000B880: WPP_466ce6a85ca0310f88190d35351ffc3e_Traceguids
0x1C0007488: TreeDriverServicesInitialize
0x1C000D1A0: WPP_GLOBAL_Control
0x1C0004C00: TreeCxClientCreateSecureSessionContext
0x1C00083E4: "long __cdecl TreeDriverServicesPluginUnavailable(struct WDFDEVICE__ * __ptr64,void * __ptr64,struct _UNICODE_STRING const * __ptr64)" ?TreeDriverServicesPluginUnavailable@@YAJPEAUWDFDEVICE__@@PEAXPEBU_UNICODE_STRING@@@Z
0x1C0011044: TreeAddServiceDevice
0x1C000B350: "\DosDevices\WindowsTrustedRT" ??_C@_1DK@DJNMNKLK@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAR?$AAT?$AA?$AA@
0x1C0001008: WPP_RECORDER_SF_
0x1C0002BD0: TreeEvtCompareChildDeviceDescriptors
0x1C000B7C0: GUID_DEVICE_INTERFACE_ARRIVAL
0x1C0003110: TreeEvtIrpPreprocessQueryDevRelations
0x1C000F078: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x1C0003EB8: WPP_RECORDER_SF_s
0x1C000A9B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00052A0: TreeSecureServicesEvtDeviceCleanup
0x1C000108C: WPP_RECORDER_SF_D
0x1C00013A0: WPP_RECORDER_SF_d
0x1C000635C: "void __cdecl TreeSecureServicesSessionQueueQueryService(struct WDFREQUEST__ * __ptr64)" ?TreeSecureServicesSessionQueueQueryService@@YAXPEAUWDFREQUEST__@@@Z
0x1C000B400: "Secure service (%wZ) descriptor'" ??_C@_0EH@LHDOEAGE@Secure?5service?5?$CI?$CFwZ?$CJ?5descriptor?8@
0x1C0008830: "void __cdecl TreeDriverServicesCompleteWork(struct WDFREQUEST__ * __ptr64 * __ptr64,long,unsigned __int64)" ?TreeDriverServicesCompleteWork@@YAXPEAPEAUWDFREQUEST__@@J_K@Z
0x1C0002BF0: TreeEvtCopyChildDeviceDescriptor
0x1C0003B98: WPP_RECORDER_SF__guid_qq
0x1C000F150: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0002FE0: TreeEnumerateServiceGuids
0x1C0008690: "long __cdecl TreeDriverServicesUpdate(void * __ptr64,void * __ptr64)" ?TreeDriverServicesUpdate@@YAJPEAX0@Z
0x1C00077E8: "long __cdecl TreeDriverServicesCreatePluginRequest(struct WDFDEVICE__ * __ptr64,struct _TREE_DRIVER_SERVICES_PLUGIN * __ptr64,struct WDFREQUEST__ * __ptr64 * __ptr64,struct _TREE_DRIVER_SERVICES_REQUEST_CONTEXT * __ptr64 * __ptr64)" ?TreeDriverServicesCreatePluginRequest@@YAJPEAUWDFDEVICE__@@PEAU_TREE_DRIVER_SERVICES_PLUGIN@@PEAPEAUWDFREQUEST__@@PEAPEAU_TREE_DRIVER_SERVICES_REQUEST_CONTEXT@@@Z
0x1C00033E0: TreeEvtControlWdmDeviceFileCreate
0x1C000F070: "__cdecl _imp_IoReplaceFileObjectName" __imp_IoReplaceFileObjectName
0x1C0009578: TreeDriverServicesQuery
0x1C000F040: "__cdecl _imp_WppAutoLogStart" __imp_WppAutoLogStart
0x1C000F0C8: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C000B9F0: WPP_351a488bf90c39f528a39a65f06ba994_Traceguids
0x1C0003D90: WPP_RECORDER_SF_qq_guid_D
0x1C000645C: TreeSecureServicesSessionQueueExecute
0x1C0010C48: TreeSetupIoQueues
0x1C0003924: WPP_RECORDER_SF__guid_dDqDP
0x1C0006140: TreeSecureServicesEvtDeviceD0Exit
0x1C000B790: WPP_66ef61354bce3d2475e967712e6bc0ff_Traceguids
0x1C001046C: WppCleanupKm
0x1C000B7B0: GUID_DEVICE_INTERFACE_REMOVAL
0x1C000F048: "__cdecl _imp_WppAutoLogStop" __imp_WppAutoLogStop
0x1C000B1F0: GUID_BUS_TYPE_TREE
0x1C0013000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000B040: "__cdecl load_config_used" _load_config_used
0x1C000A730: FxStubDriverUnload
0x1C000D3C8: TreeRPMBPnpNotificationEntry
0x1C00055A0: "void __cdecl TreeEvtDriverServicesPluginIoTargetRemoveComplete(struct WDFIOTARGET__ * __ptr64)" ?TreeEvtDriverServicesPluginIoTargetRemoveComplete@@YAXPEAUWDFIOTARGET__@@@Z
0x1C0003FD0: TreeSecureServicesInitialize
0x1C0010E54: TreeSecureServicesCreateDefaultIoQueue
0x1C000D000: "__cdecl WDF_TREE_SERVICE_DEVICE_CONTEXT_TYPE_INFO" _WDF_TREE_SERVICE_DEVICE_CONTEXT_TYPE_INFO
0x1C0005F20: TreeSecureServicesEvtDestroyFileObject
0x1C000D380: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C0002130: TreeEvtDeviceD0Entry
0x1C0006BFC: TreeSecureSessionCompleteRequest
0x1C0004650: "long __cdecl TreeSecureDeviceLogMessage(void * __ptr64,struct WDFDEVICE__ * __ptr64,unsigned long,char const * __ptr64,char * __ptr64)" ?TreeSecureDeviceLogMessage@@YAJPEAXPEAUWDFDEVICE__@@KPEBDPEAD@Z
0x1C0004AA0: TreeCxClientConnectSecureService
0x1C000B8F0: "TREE_DRIVER_SERVICES_CONTEXT" ??_C@_0BN@DCPDMOFP@TREE_DRIVER_SERVICES_CONTEXT?$AA@
0x1C000F128: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000B250: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000BA10: "D:P(A;;FRFW;;;WD)(A;;FRFW;;;RC)(" ??_C@_1BDK@NGIMIEKJ@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR?$AAF?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR?$AAF?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAR?$AAC?$AA?$CJ?$AA?$CI@
0x1C000B2C0: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000BB50: "D:P(A;;FA;;;SY)(A;;FRFW;;;BA)(A;" ??_C@_1FI@BJJCAIKI@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR?$AAF?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL@
0x1C000D220: "__cdecl WDF_TREE_PLUGIN_QUEUE_WORK_ITEM_CONTEXT_TYPE_INFO" _WDF_TREE_PLUGIN_QUEUE_WORK_ITEM_CONTEXT_TYPE_INFO
0x1C000B450: "GUID_TREE_RPMB_SERVICE is deprec" ??_C@_0GI@COHHIGNF@GUID_TREE_RPMB_SERVICE?5is?5deprec@
0x1C000B9C0: WPP_e100f165471737ea6e0a8726baafb129_Traceguids
0x1C00055A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000B308: "TREE_SECURE_ENVIRONMENT_SERVICE_" ??_C@_0CI@OMECDKEC@TREE_SECURE_ENVIRONMENT_SERVICE_@
0x1C000F0E8: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1C0010008: WppLoadTracingSupport
0x1C000F0E0: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C000A684: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C0005D14: TreeCreateSecureSessionContext
0x1C0004160: "long __cdecl TreeSecureDeviceHandoffMasterDeviceControl(void * __ptr64,struct WDFDEVICE_INIT * __ptr64,struct _TR_SECURE_DEVICE_CALLBACKS_V1 * __ptr64,struct WDFDEVICE__ * __ptr64 * __ptr64)" ?TreeSecureDeviceHandoffMasterDeviceControl@@YAJPEAXPEAUWDFDEVICE_INIT@@PEAU_TR_SECURE_DEVICE_CALLBACKS_V1@@PEAPEAUWDFDEVICE__@@@Z
0x1C000B7D0: GUID_TREE_RPMB_SERVICE
0x1C000F030: "__cdecl _imp_imp_WppRecorderReplay" __imp_imp_WppRecorderReplay
0x1C0003A94: WPP_RECORDER_SF__guid_qD
0x1C000D390: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C000B2E0: "TREE_SESSION_COMPLETION_WORKITEM" ??_C@_0CB@FKJBLLDB@TREE_SESSION_COMPLETION_WORKITEM@
0x1C0006070: TreeSecureServicesEvtDeviceD0Entry
0x1C000A770: FxDriverEntry
0x1C000D360: "__cdecl _security_cookie" __security_cookie
0x1C000B890: "onecore\base\basedrv\tree\treecl" ??_C@_0DM@GGIJPKJB@onecore?2base?2basedrv?2tree?2treecl@
0x1C0003C98: WPP_RECORDER_SF_qDD
0x1C00051A8: WPP_RECORDER_SF_qDP
0x1C000D1A8: "__cdecl WDF_TREE_CX_BIND_CONTEXT_TYPE_INFO" _WDF_TREE_CX_BIND_CONTEXT_TYPE_INFO
0x1C0003788: RtlUnicodeStringPrintf
0x1C000BC30: "__stdcall _xmm" __xmm@00000002000000020000000200000002
0x1C000151C: WPP_RECORDER_SF_qD
0x1C000B9D0: "TREE_RPMB_SERVICE_CONTEXT" ??_C@_0BK@PCKHMNOL@TREE_RPMB_SERVICE_CONTEXT?$AA@
0x1C000B288: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00053C0: TreeSecureServicesEvtIoAllocateResourcesForReservedRequest
0x1C000144C: WPP_RECORDER_SF_dD
0x1C000F0F8: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x1C0004EC0: "void __cdecl TreeCxClientProcessOtherSecureServiceIoWorker(void * __ptr64)" ?TreeCxClientProcessOtherSecureServiceIoWorker@@YAXPEAX@Z
0x1C000D1D0: "__cdecl WDF_TREE_DRIVER_SERVICES_REQUEST_CONTEXT_TYPE_INFO" _WDF_TREE_DRIVER_SERVICES_REQUEST_CONTEXT_TYPE_INFO
0x1C000B958: "TREE_DRIVER_SERVICES_REQUEST_CON" ??_C@_0CF@OJNLICNG@TREE_DRIVER_SERVICES_REQUEST_CON@
0x1C0004780: "long __cdecl TreeSecureDeviceCallOSService(void * __ptr64,struct WDFDEVICE__ * __ptr64,struct _GUID const * __ptr64,struct _TR_SERVICE_REQUEST_V1 * __ptr64,unsigned __int64 * __ptr64)" ?TreeSecureDeviceCallOSService@@YAJPEAXPEAUWDFDEVICE__@@PEBU_GUID@@PEAU_TR_SERVICE_REQUEST_V1@@PEA_K@Z
0x1C000F100: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C000F098: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x1C000B390: "{%08lx-%04x-%04x-%02x%02x-%02x%0" ??_C@_1GI@JHCBPFLC@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0@
0x1C0012508: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0008E38: "void __cdecl TreeDriverServicesReturnRequest(struct WDFREQUEST__ * __ptr64 * __ptr64)" ?TreeDriverServicesReturnRequest@@YAXPEAPEAUWDFREQUEST__@@@Z
0x1C000D438: WPPTraceSuite
0x1C000F0F0: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00046A0: "long __cdecl TreeSecureDeviceQueryOSService(void * __ptr64,struct WDFDEVICE__ * __ptr64,struct _GUID const * __ptr64,struct _TR_SERVICE_INFORMATION_V1 * __ptr64)" ?TreeSecureDeviceQueryOSService@@YAJPEAXPEAUWDFDEVICE__@@PEBU_GUID@@PEAU_TR_SERVICE_INFORMATION_V1@@@Z
0x1C000D078: "__cdecl WDF_TREE_MASTER_DEVICE_CONTEXT_TYPE_INFO" _WDF_TREE_MASTER_DEVICE_CONTEXT_TYPE_INFO
0x1C000D468: WdfFunctions_01015
0x1C0009FF0: "void __cdecl TreeRPMBPluginCleanup(void * __ptr64)" ?TreeRPMBPluginCleanup@@YAXPEAX@Z
0x1C00050A8: WPP_RECORDER_SF__guid_dD
0x1C00036B0: TreeEvtControlDeviceIoControl
0x1C00068E4: "void __cdecl TreeSecureServicesSessionQueueExecuteDeferred(struct WDFREQUEST__ * __ptr64)" ?TreeSecureServicesSessionQueueExecuteDeferred@@YAXPEAUWDFREQUEST__@@@Z
0x1C000A474: "long __cdecl TreeRPMBPluginSendIoctlSynchronously(void * __ptr64,struct WDFIOTARGET__ * __ptr64,enum _RPMB_IOCTL_TYPE,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?TreeRPMBPluginSendIoctlSynchronously@@YAJPEAXPEAUWDFIOTARGET__@@W4_RPMB_IOCTL_TYPE@@0_K03PEA_K@Z
0x1C000B980: "onecore\base\basedrv\tree\treecl" ??_C@_0DM@DHIAHBPO@onecore?2base?2basedrv?2tree?2treecl@
0x1C000D028: "__cdecl WDF_TREE_SECURE_SERVICES_REQUEST_CONTEXT_TYPE_INFO" _WDF_TREE_SECURE_SERVICES_REQUEST_CONTEXT_TYPE_INFO
0x1C000D0A0: "__cdecl WDF_TREE_SERVICE_SESSION_CONTEXT_TYPE_INFO" _WDF_TREE_SERVICE_SESSION_CONTEXT_TYPE_INFO
0x1C0004300: "long __cdecl TreeSecureDeviceHandoffServiceDeviceControl(void * __ptr64,struct WDFDEVICE_INIT * __ptr64,struct _GUID * __ptr64,struct _TR_SECURE_SERVICE_CALLBACKS_V1 * __ptr64,struct WDFDEVICE__ * __ptr64 * __ptr64)" ?TreeSecureDeviceHandoffServiceDeviceControl@@YAJPEAXPEAUWDFDEVICE_INIT@@PEAU_GUID@@PEAU_TR_SECURE_SERVICE_CALLBACKS_V1@@PEAPEAUWDFDEVICE__@@@Z
0x1C000D178: "__cdecl WDF_TREE_SESSION_COMPLETION_WORKITEM_TYPE_INFO" _WDF_TREE_SESSION_COMPLETION_WORKITEM_TYPE_INFO
0x1C000A9E0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000B8D0: WPP_e0af800f34023f70b69bac290637f078_Traceguids
0x1C000B170: "TREE_SERVICE_DEVICE_CONTEXT" ??_C@_0BM@ELMIFGDK@TREE_SERVICE_DEVICE_CONTEXT?$AA@
0x1C000F0D0: "__cdecl _imp_IoUnregisterPlugPlayNotification" __imp_IoUnregisterPlugPlayNotification
0x1C000F038: "__cdecl _imp_WppAutoLogTrace" __imp_WppAutoLogTrace
0x1C00087D0: "void __cdecl TreeEvtDriverServicesPluginIoTargetRemoveCanceled(struct WDFIOTARGET__ * __ptr64)" ?TreeEvtDriverServicesPluginIoTargetRemoveCanceled@@YAXPEAUWDFIOTARGET__@@@Z
0x1C0002000: TreeEvtDevicePrepareHardware
0x1C0010510: TreeAddMasterDevice
0x1C000F000: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C000F138: ntoskrnl_NULL_THUNK_DATA
0x1C000F090: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0002644: TreeReportNewSecureServiceDevice
0x1C00061B0: TreeSecureServicesEvtRequestCancel
0x1C000F108: "__cdecl _imp_SeConvertStringSecurityDescriptorToSecurityDescriptor" __imp_SeConvertStringSecurityDescriptorToSecurityDescriptor
0x1C000A030: TreeRPMBPluginHandler
0x1C00058A0: TreeSecureServicesEvtIoInCallerContext
0x1C000B910: "TREE_PLUGIN_QUEUE_WORK_ITEM_CONT" ??_C@_0CE@CJEEGAOB@TREE_PLUGIN_QUEUE_WORK_ITEM_CONT@
0x1C0012008: DriverEntry
0x1C000B150: "TREE_MASTER_DEVICE_CONTEXT" ??_C@_0BL@KEKAJFLC@TREE_MASTER_DEVICE_CONTEXT?$AA@
0x1C000F010: "__cdecl _imp_WdfRegisterClassLibrary" __imp_WdfRegisterClassLibrary
0x1C000B330: "TREE_MASTER_DEVICE_FILE_CONTEXT" ??_C@_0CA@EANELGN@TREE_MASTER_DEVICE_FILE_CONTEXT?$AA@
0x1C0004830: "long __cdecl TreeSecureDeviceCompleteAsyncRequest(void * __ptr64,void * __ptr64,long,unsigned __int64)" ?TreeSecureDeviceCompleteAsyncRequest@@YAJPEAX0J_K@Z
0x1C000D458: pfnWppTraceMessage
0x1C00103A4: WppInitKm
0x1C0007594: "unsigned char __cdecl TreeDriverServicesFindPluginLockHeld(struct _TREE_DRIVER_SERVICES_CONTEXT * __ptr64,struct _UNICODE_STRING const * __ptr64,struct _GUID const * __ptr64,void * __ptr64 * __ptr64,struct _TREE_DRIVER_SERVICES_PLUGIN * __ptr64 * __ptr64)" ?TreeDriverServicesFindPluginLockHeld@@YAEPEAU_TREE_DRIVER_SERVICES_CONTEXT@@PEBU_UNICODE_STRING@@PEBU_GUID@@PEAPEAXPEAPEAU_TREE_DRIVER_SERVICES_PLUGIN@@@Z
0x1C0004120: "void __cdecl TreeClassLibraryUnbindClient(struct _WDF_CLASS_BIND_INFO * __ptr64,void * __ptr64 * __ptr64)" ?TreeClassLibraryUnbindClient@@YAXPEAU_WDF_CLASS_BIND_INFO@@PEAPEAX@Z
0x1C000F088: "__cdecl _imp_KeExpandKernelStackAndCallout" __imp_KeExpandKernelStackAndCallout
0x1C000F058: "__cdecl _imp_IoReserveDependency" __imp_IoReserveDependency
0x1C000AE00: memset
0x1C000F18C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C00055A0: TreeSecureServicesEvtRequestContextCleanupCallback
0x1C00071B4: WPP_RECORDER_SF_Z_guid_

[JEB Decompiler by PNF Software]