Generated by JEB on 2019/02/01

PE: C:\Windows\System32\drivers\CEA.sys Base=0x1C0000000 SHA-256=28F9C3FFFF3A9AFB857D6BD7AC902CAA386DC22410AB964147D5A4B3F0EFDDA8
PDB: CEA.pdb GUID={84E32508-B0FB-865C-7AF9BC21E005D4DD} Age=1

320 located named symbols:
0x1C0011070: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x1C000BE68: "`string'" ??_C@_09BEELENHA@EventInfo?$AA@
0x1C00086DC: EapQueryAggregatedEventTrigger
0x1C0009A60: WppClassicProviderCallback
0x1C00125E0: DllUnload
0x1C0005E50: EapAggregatedEventConditionParamsNextChild
0x1C0005DF0: EaDeleteAggregatedEvent
0x1C00110D0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C00110F0: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C000F0B0: BrokerInternalClientInitOnce
0x1C00043C0: EaiFreeAggregationConditionVisitNode
0x1C0007680: BriSignalBrokeredEvent
0x1C00028C0: EaiSignalAggregateCallback
0x1C000F058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0012300: WppTraceCallback
0x1C0006E1C: BripCreateRpcBindingHandle
0x1C0002DE0: EaiFreeAggregateEvent
0x1C00012D0: "__cdecl TlgDefineProvider_annotation__TlgghEventAggregationProviderProv" _TlgDefineProvider_annotation__TlgghEventAggregationProviderProv
0x1C000118C: WPP_SF_L
0x1C00110C8: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x1C0011058: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0009C10: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0009560: EaQueryAggregatedEventParameters
0x1C0011098: "__cdecl _imp_RtlGetNextEntryHashTable" __imp_RtlGetNextEntryHashTable
0x1C00110E8: "__cdecl _imp_RtlInsertEntryHashTable" __imp_RtlInsertEntryHashTable
0x1C00126D0: EaLibReleaseLockExclusive
0x1C000D0A8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C0012678: EaLibGetCurrentThreadId
0x1C0011080: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C000C948: "`string'" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000F0B8: BrokeredEventTable
0x1C0005E50: EapStoreAggregatedEventConditionNextChild
0x1C0001960: EaiSetAggregationConditionVisitNode
0x1C000BFA8: "`string'" ??_C@_0BJ@EHMACGLH@EaiDisableAggregateEvent?$AA@
0x1C00126EC: EaLibAcquireLockShared
0x1C000715C: BripFindBindingContextByBrokerId
0x1C0007CDC: EapQueryBuffer
0x1C0001008: "__cdecl TlgWrite" _TlgWrite
0x1C00111E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000BEF8: "`string'" ??_C@_0BG@LEGMCDDA@Invalid?5callback?5type?$AA@
0x1C0011110: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C0009244: EapQueryAggregatedEventOwnerAppName
0x1C0009990: EaDeleteAggregatedEventParametersPostVisitNode
0x1C0011168: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C0009300: EaStoreAggregatedEventParameters
0x1C0011158: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000BF40: "`string'" ??_C@_0CE@MBKHCMBL@Failed?5to?5allocate?5WNF?5state?5buf@
0x1C000C230: "`string'" ??_C@_0CB@FFHFNOLK@Failed?5to?5enable?5Aggregate?5Event@
0x1C000F120: BrokerBindingTableLock
0x1C0002F38: EaiSetAggregateConditionsEnabledState
0x1C000BF10: "`string'" ??_C@_0BI@OBMACIOF@EaiSignalAggregateEvent?$AA@
0x1C0005CB0: EapDeleteAggregatedEventConditionVisitNode
0x1C0001318: CleanupLibrary
0x1C000BDA0: "`string'" ??_C@_0FL@DHFCBKCF@Invalid?5Param?4?5Pointer?5to?5condit@
0x1C0005BC4: EaiHandleTimeLimitReached
0x1C000C7E0: EA_STORE_AGGRERATED_EVENT_FIELD_START_BOUNDARY
0x1C0008CD8: EapQueryAggregatedEventCondition
0x1C000C168: "`string'" ??_C@_0BE@PLHBLMKG@EventHandle?5?$DN?$DN?5NULL?$AA@
0x1C000C8A8: EA_STORE_AGGRERATED_EVENT_FIELD_DELAY_IN_SECONDS
0x1C0009C40: memcpy
0x1C0011190: "__cdecl _imp_PsGetCurrentThreadId" __imp_PsGetCurrentThreadId
0x1C000C110: "`string'" ??_C@_0DG@OJPPFKID@Failed?5to?5add?5new?5Aggregate?5Even@
0x1C0012A84: EaLibClearAndReleaseTimer
0x1C0011018: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x1C00110F8: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C00099C0: EaDeleteAggregatedEventParameters
0x1C00111A8: "__cdecl _imp_RtlRemoveEntryHashTable" __imp_RtlRemoveEntryHashTable
0x1C000C848: EA_STORE_AGGRERATED_EVENT_FIELD_TRIGGER
0x1C000C258: "`string'" ??_C@_0BJ@MCCLIOGL@EaDisableAggregatedEvent?$AA@
0x1C00111C8: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C000F080: pfnWppGetVersion
0x1C00089F0: EapQueryAggregatedEventConditionCloseChild
0x1C0012B90: MIDL_user_free
0x1C00128E8: EaLibQueryWnfStateData
0x1C00063A0: EaCreateAggregatedEvent
0x1C0005710: EaDisableAggregatedEvent
0x1C0012910: EaLibSubscribeWnfStateChangeNotification
0x1C000C218: "`string'" ??_C@_0BI@ONGMJHEO@EaEnableAggregatedEvent?$AA@
0x1C000BF98: "`string'" ??_C@_0O@PAPBEDEN@Failed?5Status?$AA@
0x1C000C430: RpcErrMap
0x1C0009C40: memmove
0x1C000C858: EA_STORE_AGGRERATED_EVENT_FIELD_TIME_LIMIT
0x1C0009B9C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000C888: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_APP_NAME
0x1C00087F4: EapStoreAggregatedEventTrigger
0x1C00054B0: EaGetAggregation
0x1C000F0E0: WPP_MAIN_CB
0x1C0007140: BriFreeRpcBuffer
0x1C0007BA0: EapExpandValueQueryBuffer
0x1C0006470: BriAllocateRpcBuffer
0x1C00120D0: EaDecodeBrokeredEvent
0x1C0011100: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C000C1B0: "`string'" ??_C@_0CP@EGFLGDGK@Failed?5to?5acquire?5Aggregate?5Even@
0x1C000C800: EA_STORE_PREDICATE_AND_STRING
0x1C000C278: "`string'" ??_C@_0BI@NHGKOOIK@Failed?5to?5disable?5Event?$AA@
0x1C0011160: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000BE78: "`string'" ??_C@_0BH@KAPMJJHH@EaiProcessNotification?$AA@
0x1C00043FC: EaiFreeEaAggregateEvent
0x1C000F090: pfnWppQueryTraceInformation
0x1C000F140: AggregateEventListLock
0x1C000C070: "`string'" ??_C@_0BF@FIKIOMKC@EaiCreateAggregation?$AA@
0x1C00111B0: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C000C290: "`string'" ??_C@_0CC@MMIMAKAA@Failed?5to?5disable?5Aggregate?5Even@
0x1C0007DA0: EapQueryValue
0x1C0001810: EapAggregatedEventConditionNextChild
0x1C0008900: EapQueryAggregatedEventConditionNextChild
0x1C000C418: g_SmsRouterBrokerId
0x1C00012E0: EaiRunOnceCallback
0x1C0012980: EaLibCreateAndSetLimitTimer
0x1C000C880: EA_STORE_PREDICATE_OR_STRING
0x1C001271C: EaLibConvertLockSharedToExclusive
0x1C0007AB0: EapCreateAggregatedEventNode
0x1C00085F0: EapFreeAggregatedEventConditionPostVisitNode
0x1C00111B8: "__cdecl _imp_RtlCreateHashTable" __imp_RtlCreateHashTable
0x1C0009B78: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000C020: "`string'" ??_C@_0CH@FFJHKDNA@Failed?5to?5allocate?5new?5Aggregate@
0x1C000C000: "`string'" ??_C@_0CA@DCNAOGJA@Invalid?5Param?4?5pEventID?5is?5null?$AA@
0x1C000C928: "`string'" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0011020: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x1C0007A0C: EapOpenAggregatedEventNode
0x1C000F068: pfnEtwRegisterClassicProvider
0x1C0011030: msrpc_NULL_THUNK_DATA
0x1C00067D0: BriCreateBrokeredEventEx
0x1C0006780: BriCreateBrokeredEvent
0x1C0011140: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C0012780: AggregateEventWnfCallback
0x1C0007EB0: EapSetValue
0x1C0007E20: EapQueryStringValue
0x1C0008EE0: EapStoreAggregatedEventConditionPreVisitNode
0x1C00090DC: EapStoreAggregatedEventCondition
0x1C00074DC: BripMapRpcStatus
0x1C000BE90: "`string'" ??_C@_0BC@LLOAHHHF@Event?5is?5Disabled?$AA@
0x1C00010B0: WPP_SF_
0x1C000C048: "`string'" ??_C@_0CF@LKLGDOPK@Failed?5to?5enable?5new?5Aggregate?5E@
0x1C000C2D8: WPP_ThisDir_CTLGUID_EventAggregation
0x1C0011008: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x1C000F098: pfnEtwUnregister
0x1C0012704: EaLibReleaseLockShared
0x1C000C2B8: "`string'" ??_C@_0BK@PFOJHFAH@EaiHandleTimeLimitReached?$AA@
0x1C0002C14: EaiSignalAggregateEvent
0x1C000BFE8: "`string'" ??_C@_0BH@OICECFID@EACreateAggregateEvent?$AA@
0x1C00061C0: EapCreateAggregatedEvent
0x1C000F0A8: BrokerInternalClientInitialized
0x1C0011188: "__cdecl _imp_ExQueryWnfStateData" __imp_ExQueryWnfStateData
0x1C000C088: "`string'" ??_C@_0DD@HIDMBCGL@EventHandle?5?$DN?$DN?5NULL?$CJ?5or?5?$CIAggrega@
0x1C0012968: EaLibUnsubscribeWnfStateChangeNotification
0x1C00060A8: EapCreateAggregatedEventCondition
0x1C00126A4: EaLibAcquireLockExclusive
0x1C000C9F8: WPP_42a965e6f0da3e90abab54604268a600_Traceguids
0x1C0015110: GsDriverEntry
0x1C00111E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000356C: EaiDisableAggregateEvent
0x1C0007520: BripQueryValue
0x1C0007000: BriDeleteBrokeredEvent
0x1C0007C18: EapEnumerateKey
0x1C000C148: "`string'" ??_C@_0BL@CEEHFLGH@EaiExtractEventAggregation?$AA@
0x1C0011038: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1C00046C0: EaCreateAggregation
0x1C000657C: BripCleanupBindingTable
0x1C000853C: EapFreeSimpleEventParameters
0x1C00111A0: "__cdecl _imp_RtlInitEnumerationHashTable" __imp_RtlInitEnumerationHashTable
0x1C000BF68: "`string'" ??_C@_0CA@EFBCDABD@Cannot?5access?5Level?5Event?5value?$AA@
0x1C0011068: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x1C000BEE0: "`string'" ??_C@_0BC@OHGJALBM@EaiSignalCallback?$AA@
0x1C0012BA4: BrpDecodeBrokeredEvent_V1
0x1C000F040: WPP_GLOBAL_Control
0x1C0011090: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0012180: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C00010E4: WPP_SF_D
0x1C00011DC: WPP_SF_d
0x1C000BE00: "`string'" ??_C@_0DH@IMNJMDEF@Invalid?5Param?4?5Both?5CallBack?5and@
0x1C000C180: "`string'" ??_C@_0BF@COPNMOAB@Failed?5to?5find?5Event?$AA@
0x1C0005B0C: EaiResetTriggerPayload
0x1C00110B8: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0009B20: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0005CFC: EapDeleteAggregatedEventCondition
0x1C000BEC0: "`string'" ??_C@_0BL@BEIGOOIB@EaiSignalAggregateCallback?$AA@
0x1C000C7A8: EA_STORE_AGGRERATED_EVENT_FIELD_IS_RANDOM
0x1C00111F0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0003750: EACreateAggregateEvent
0x1C000E234: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C000C8F0: EA_STORE_AGGRERATED_EVENT_FIELD_REPETITION_INTERVAL
0x1C001275C: EaLibInitializeWnfSerialization
0x1C000C7C0: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_USER_SID
0x1C000C3E8: "`string'" ??_C@_1CM@GHANNOJL@?$AAA?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AAS?$AAt?$AAa?$AAt?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C0011204: "__cdecl _IMPORT_DESCRIPTOR_msrpc" __IMPORT_DESCRIPTOR_msrpc
0x1C0013200: BrpEncodeBrokeredEvent_V1
0x1C0008630: EaFreeAggregatedEventParameters
0x1C0007620: BriResolveBrokerIdByEventId
0x1C0001A40: WnfEventCallback
0x1C0005D60: EapDeleteAggregatedEvent
0x1C00083E0: EapStoreSimpleEventParameters
0x1C000C8D8: EA_STORE_AGGRERATED_EVENT_FIELD_END_BOUNDARY
0x1C00019A0: EaiEvaluateConditions
0x1C000C820: EA_STORE_AGGRERATED_EVENT_FIELD_NUMBER_OF_REPETITIONS
0x1C0003DB0: EADeleteAggregateEvent
0x1C00072F8: BripQueryBindingContextProperties
0x1C000BD08: "`string'" ??_C@_0CJ@FIEHEEPH@Invalid?5Param?4?5Allowed?5Flags?5are@
0x1C00043B0: EaQueryAggregatedEvent
0x1C0011088: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x1C0008A20: EapQueryAggregatedEventConditionPostVisitNode
0x1C0001810: EaiAggregationConditionNextChild
0x1C0011138: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0016000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00098B0: EaDeleteAggregatedEventParametersNextChild
0x1C000BBF0: "__cdecl load_config_used" _load_config_used
0x1C000BCF0: "`string'" ??_C@_0BG@ECKEKMPA@EaiValidateParameters?$AA@
0x1C000C808: EA_STORE_AGGRERATED_EVENT_FIELD_CONDITION
0x1C00110A0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0011128: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C0012AF0: EaLibTimeLimitCallbackWorker
0x1C000492C: EaiCreateAggregation
0x1C0011048: "__cdecl _imp_RtlDeleteHashTable" __imp_RtlDeleteHashTable
0x1C0011198: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x1C0002E34: EaiFindAndAcquireAggregateEvent
0x1C0011130: "__cdecl _imp_ExSubscribeWnfStateChange" __imp_ExSubscribeWnfStateChange
0x1C0006490: BriIsBrokerRegistered
0x1C00077B0: EaFreeBuffer
0x1C0011108: "__cdecl _imp_ZwQueryWnfStateData" __imp_ZwQueryWnfStateData
0x1C000BE38: "`string'" ??_C@_0BB@NDOGNILF@WnfEventCallback?$AA@
0x1C000C968: "`string'" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0011050: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x1C000C9D8: "`string'" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0007440: BrpInitOnceRunOnceCallback
0x1C000BF28: "`string'" ??_C@_0BI@PDLNEGIJ@EaiEnableAggregateEvent?$AA@
0x1C000C198: "`string'" ??_C@_0BE@LDOBFKEI@EaDeleteAggregation?$AA@
0x1C0005160: EaDeleteAggregation
0x1C000302C: EaiEnableAggregateEvent
0x1C0012B70: MIDL_user_allocate
0x1C0009B60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00111D0: "__cdecl _imp_RtlEnumerateEntryHashTable" __imp_RtlEnumerateEntryHashTable
0x1C00110C0: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1C000F130: BrokeredEventTableLock
0x1C0003F90: EAQueryAggregateEventData
0x1C0012200: WppLoadTracingSupport
0x1C0011180: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0005E80: EapCreateAggregatedEventConditionVisitNode
0x1C0011010: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x1C000C3C8: "`string'" ??_C@_1CA@MNMMPMHI@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AA?$AA@
0x1C0003E20: EAEnumerateAggregateEvents
0x1C00077B0: EaLibFree
0x1C0001128: WPP_SF_DDD
0x1C0001224: WPP_SF_ddd
0x1C000BFC8: "`string'" ??_C@_0BJ@ELNKIKHO@Event?5set?5to?5be?5disabled?$AA@
0x1C00110E0: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x1C000F050: "__cdecl _security_cookie" __security_cookie
0x1C0011150: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0006BA0: BripCreateBindingContext
0x1C000C2E8: WPP_c3fa72ab62343567ce2c56b1499dbae5_Traceguids
0x1C0006DB0: BriDeleteEventImpl
0x1C00110B0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C0007284: BripGetEventContextData
0x1C000C9A0: "`string'" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C000BF88: "`string'" ??_C@_0P@BFJEKIOA@OnEnable?5Event?$AA@
0x1C0006670: BripCleanupEventTable
0x1C0002EC0: EaiSetConditionsEnabledStateVisitNode
0x1C0006AC0: BripCreateEventContext
0x1C0011148: "__cdecl _imp_ExUnsubscribeWnfStateChange" __imp_ExUnsubscribeWnfStateChange
0x1C0011118: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C0015020: DllInitialize
0x1C0012690: EaLibLockInitialize
0x1C000BD70: "`string'" ??_C@_0CL@BMINNCGJ@Invalid?5Param?4?5No?5trigger?5and?5no@
0x1C0011078: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x1C0004EFC: EaiExtractEventAggregation
0x1C000BD38: "`string'" ??_C@_0DC@DNOIOCFD@Invalid?5Param?4?5Number?5of?5conditi@
0x1C0015144: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0001288: WPP_SF_q
0x1C0011170: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0007F0C: EapQuerySimpleEventParameters
0x1C000F088: WPPTraceSuite
0x1C0004190: EaSignalAggregatedEvent
0x1C0005E50: EapFreeAggregatedEventConditionNextChild
0x1C00090A0: EapStoreAggregatedEventConditionPostVisitNode
0x1C0009A94: EaLibAllocate
0x1C0001440: EaiValidateParameters
0x1C0005A20: EaQueryAggregateEventConditionState
0x1C0011120: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0011060: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C000F078: AggregateInitOnce
0x1C0002A08: EaiSignalCallback
0x1C0012B90: EaRtlFreeStringRoutine
0x1C000C3B0: "`string'" ??_C@_1BG@HCDEBCJD@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AA?$AA@
0x1C0009B50: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00068A0: BripCreateBrokeredEvent
0x1C0009AD0: EaLibTimeLimitCallback
0x1C00110D8: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C000BE50: "`string'" ??_C@_0BF@CKLJKECG@WNF?5event?5is?5deleted?$AA@
0x1C000BEA8: "`string'" ??_C@_0BG@GPHOGGMF@No?5matching?5condition?$AA@
0x1C000C300: "`string'" ??_C@_1KO@LILNALMB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C00111D8: ntoskrnl_NULL_THUNK_DATA
0x1C0011178: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00054D0: EaEnableAggregatedEvent
0x1C0006550: BriCleanup
0x1C0011028: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x1C00111C0: "__cdecl _imp_RtlEndEnumerationHashTable" __imp_RtlEndEnumerationHashTable
0x1C0011000: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x1C000C0C0: "`string'" ??_C@_0FA@KOEGCJHB@?$CIAggregatedRuntime?9?$DOTrigger?5?$DN?$DN?5N@
0x1C00077C8: EapTreeTraverse
0x1C0002010: EaiProcessNotification
0x1C00089F0: EaDeleteAggregatedEventParametersCloseChild
0x1C0015008: DriverEntry
0x1C00044A0: EaiDuplicateConditionsVisitNode
0x1C000C1E0: "`string'" ??_C@_0DC@LFEIPDNN@Failed?5to?5disable?5Aggregate?5Even@
0x1C0012010: EaEncodeBrokeredEvent
0x1C0011040: "__cdecl _imp_RtlLookupEntryHashTable" __imp_RtlLookupEntryHashTable
0x1C000F070: pfnWppTraceMessage
0x1C00071EC: BripFindEventContextByEventId
0x1C00110A8: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0012548: WppInitKm
0x1C000F0A0: BrokerBindingTable
0x1C0009F80: memset
0x1C0011218: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0001840: EaiEvaluateAggregationConditionVisitNode

[JEB Decompiler by PNF Software]