Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cscdll.dll Base=0x180000000 SHA-256=374DDD841D68048C68D649F459B77518C4804E6E9EB11FF7D7E13FE829944B42
PDB: cscdll.pdb GUID={E7EFB895-31A5-5CF2-DD601EB963F8D7CD} Age=1

253 located named symbols:
0x180001180: CscUmCleanupLibrary
0x1800065A8: "\??\UNC\" ??_C@_1BC@MAMPPFNN@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x18000190C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800010A0: CscUmInitializeLibrary
0x180006280: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180001720: "__cdecl FindPESection" _FindPESection
0x180002A20: CSCFindFirstFileW
0x180003EA0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180006220: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1800073D4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002360: CSCEnumForStatsExW
0x1800011FC: "__cdecl CRT_INIT" _CRT_INIT
0x180006148: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800065C0: "\DosDevices\UNC\" ??_C@_1CC@EIHGKOOD@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x180006270: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800021A0: WppControlCallback
0x1800044C0: CscDriverQueryDirectory
0x180001D20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002074: WPP_INIT_CONTROL_ARRAY
0x180006420: "Bits left in User: 0x%02x " ??_C@_0BL@ICLBNLGN@Bits?5left?5in?5User?3?50x?$CF02x?6?$AA@
0x1800062C8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180006580: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180001010: WppInitUm
0x1800062E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800070A0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x18000A028: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x18000A018: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x1800070C0: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x180007030: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x180007040: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x180006178: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180001704: "__cdecl XcptFilter" _XcptFilter
0x1800062F0: "__cdecl _xc_a" __xc_a
0x180002950: CSCFindFirstFileForSidW
0x1800064F8: WPP_ThisDir_CTLGUID_CscNetApi
0x180006528: WPP_ThisDir_CTLGUID_CscFastSync
0x1800062A0: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x180002138: WPP_INIT_GUID_ARRAY
0x180006610: "$RxCscFlags$" ??_C@_0N@IDLCCFK@$RxCscFlags$?$AA@
0x18000638C: "__cdecl _guard_iat_table" __guard_iat_table
0x180001CED: memcpy
0x180006200: "__cdecl _imp_memset" __imp_memset
0x1800018DF: "__cdecl initterm" _initterm
0x1800062C0: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x180008630: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180006160: "__cdecl _imp_Sleep" __imp_Sleep
0x180006310: "__cdecl _xi_z" __xi_z
0x180006130: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180006288: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x1800018EB: "__cdecl _C_specific_handler" __C_specific_handler
0x180001CF9: memmove
0x180008640: WPP_REGISTRATION_GUIDS
0x180006460: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x18000A008: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180004788: CscDriverTransition
0x180001C8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800062B0: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x180006538: WPP_ThisDir_CTLGUID_CscDclUser
0x180008680: WPP_MAIN_CB
0x180001710: "__cdecl amsg_exit" _amsg_exit
0x180006578: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180008600: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x180006440: "Bits left in PinFlags: 0x%08x " ??_C@_0BP@EFGGCNNE@Bits?5left?5in?5PinFlags?3?50x?$CF08x?6?$AA@
0x1800062A8: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x180006188: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006118: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180006518: WPP_ThisDir_CTLGUID_CscUm
0x180008620: "__cdecl _native_startup_lock" __native_startup_lock
0x180001C10: DllMain
0x180006474: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x180003698: CscUmFindNext
0x1800061F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180002DB0: CSCPinFileW
0x180006218: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002360: CSCEnumForStatsW
0x1800061B8: KERNEL32_NULL_THUNK_DATA
0x180003FE8: CscDriverOpenItemWithDispositionEx
0x180006168: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001C68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180006228: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x1800038EC: CscUmFindOpenPattern
0x180006468: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800062B8: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x180006150: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005200: WPP_SF_qcqqDqD
0x180002EE0: CSCQueryFileStatusW
0x180006578: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800017D0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180002A60: CSCFindNextFileW
0x180002290: CSCDisconnectPath
0x180004694: CscDriverSetDatabase
0x1800064F0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180006230: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x180003020: CSCTransitionServerOnlineW
0x180006FF4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180004580: CscDriverQueryItemInformation
0x180001440: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800061D0: "__cdecl _imp__initterm" __imp__initterm
0x1800061A8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180008770: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUivnlgvuhUiwiUxhxUfhvinlwvUivrmgUlyquivUznwGEUkxsOlyq@cscdll" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUivnlgvuhUiwiUxhxUfhvinlwvUivrmgUlyquivUznwGEUkxsOlyq@cscdll
0x180008608: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x180006548: WPP_ThisDir_CTLGUID_CscService
0x180003B2C: CscUmSetPathConnectionStateEx
0x180008610: "__cdecl _onexitend" __onexitend
0x180006248: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800065E8: "\.\." ??_C@_19GIAAJBKK@?$AA?2?$AA?4?$AA?2?$AA?4?$AA?$AA@
0x1800010D0: CscDriverInitializeLibrary
0x1800062E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180006120: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180006268: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180006508: WPP_ThisDir_CTLGUID_CscApi
0x180006300: "__cdecl _xi_a" __xi_a
0x180006138: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180006198: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180003030: CSCUnpinFileW
0x180005054: WPP_SF_DD
0x18000A000: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1800050A8: WPP_SF_Dq
0x180008000: WPP_GLOBAL_Control
0x180005170: WPP_SF_d
0x180003E4C: WPP_SF_D
0x180008638: "__cdecl pRawDllMain" _pRawDllMain
0x180001B91: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x180006588: "\Device\Mup\" ??_C@_1BK@HHAGJDAJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAu?$AAp?$AA?2?$AA?$AA@
0x1800063D0: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x1800063A0: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x180006170: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800016E0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800062F8: "__cdecl _xc_z" __xc_z
0x180001110: WppCleanupUm
0x180006FB4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x180006140: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000530C: WPP_SF_qqD
0x1800061A0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180006298: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180006190: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180003C34: CscUmSetPinInfoFile
0x180005370: WPP_SF_qqDD
0x180001B73: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x180003FA8: CscDriverOpenItemForDelete
0x1800022F0: CSCDoEnableDisable
0x180002FC0: CSCTransitionPathOnline
0x180006250: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x180006318: "__cdecl _guard_fids_table" __guard_fids_table
0x180003A60: CscUmQueryPathConnectionState
0x180006208: msvcrt_NULL_THUNK_DATA
0x180006FD4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x180006010: "__cdecl load_config_used" _load_config_used
0x18000A020: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x180006400: "Bits left in Machine: 0x%02x " ??_C@_0BO@GNOKJELA@Bits?5left?5in?5Machine?3?50x?$CF02x?6?$AA@
0x1800046E8: CscDriverSetPinInformation
0x1800061F0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180006238: "__cdecl _imp_NtClose" __imp_NtClose
0x180006210: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006258: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x180006158: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180006290: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x180003620: CscUmFindClose
0x180006240: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x180006278: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006580: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180003440: StringCchCopyNW
0x180001900: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001AE2: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x180002C40: CSCIsServerOfflineW
0x180006560: "CscService" ??_C@_1BG@FODDHFGL@?$AAC?$AAs?$AAc?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x180006620: "__stdcall _xmm" __xmm@00000000000000000000000000000001
0x1800061E0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180002230: CSCDeleteW
0x1800028F0: CSCFindClose
0x1800062D8: ntdll_NULL_THUNK_DATA
0x1800061C8: "__cdecl _imp_memcpy" __imp_memcpy
0x180005104: WPP_SF_Dqd
0x180006558: "CSC" ??_C@_17DOHEGIBC@?$AAC?$AAS?$AAC?$AA?$AA@
0x180008058: "__cdecl _security_cookie" __security_cookie
0x180002B00: CSCIsCSCEnabled
0x1800061B0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180001B61: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x18000453C: CscDriverQueryHandleInformation
0x180008618: "__cdecl _onexitbegin" __onexitbegin
0x180002F50: CSCSetMaxSpace
0x180003EDC: CscDriverDeleteItem
0x1800062D0: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x180006128: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800052B0: WPP_SF_qq
0x1800073E8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180001804: "__cdecl _security_init_cookie" __security_init_cookie
0x1800051B8: WPP_SF_q
0x1800073C0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800061C0: "__cdecl _imp_memmove" __imp_memmove
0x1800065F8: "\Device\Csc" ??_C@_1BI@OPJPBMEH@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAs?$AAc?$AA?$AA@
0x180002BA0: CSCIsPathOffline
0x1800061D8: "__cdecl _imp_malloc" __imp_malloc
0x180006260: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180001950: "__cdecl _report_gsfailure" __report_gsfailure
0x1800034C4: CscUmDelete
0x180006180: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180008628: "__cdecl _native_startup_state" __native_startup_state
0x180008780: CscUmpLibraryState
0x18000A010: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1800053EC: WPP_SF_qqZDDDD
0x180001AD6: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x180001B85: "__cdecl _imp_load_ChangeServiceConfigW" __imp_load_ChangeServiceConfigW
0x1800061E8: "__cdecl _imp_free" __imp_free
0x180001770: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006478: WPP_aba3e270c8063053f5682f566faf26ab_Traceguids
0x180001D05: memset
0x1800073FC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]