Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\WdmCompanionFilter.sys Base=0x1C0000000 SHA-256=3A88DF7E3141C6D3BAB53E45985B3B3926E3E88F39922E9A3114D84F4653C9E5
PDB: WdmCompanionFilter.pdb GUID={1902435A-5CCB-099F-EF1EA28C91F999C0} Age=1
81 located named symbols:
0x1C00030F8: WdfDriverGlobals
0x1C0001140: WppClassicProviderCallback
0x1C0002218: GUID_WDM_COMPANION_INTERFACE_STANDARD
0x1C0003068: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0006150: WppTraceCallback
0x1C0005008: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C0005028: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00016A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0003000: "__cdecl WDF_FILTER_EXTENSION_TYPE_INFO" _WDF_FILTER_EXTENSION_TYPE_INFO
0x1C00030A0: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C0002148: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0005058: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0002110: "FILTER_EXTENSION" ??_C@_0BB@NKONJEOC@FILTER_EXTENSION?$AA@
0x1C0005038: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0005074: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C0002108: "__cdecl _guard_iat_table" __guard_iat_table
0x1C00016C0: memcpy
0x1C0003030: WdfBindInfo
0x1C00030D0: pfnWppGetVersion
0x1C00016C0: memmove
0x1C0005040: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C000162C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0003320: WPP_MAIN_CB
0x1C00064C0: FilterEvtDriverCleanup
0x1C0002228: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C0005020: WDFLDR_NULL_THUNK_DATA
0x1C0003070: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C00030E0: pfnWppQueryTraceInformation
0x1C0001010: WdfDeviceInterfaceReferenceNoOp
0x1C00013B4: FxDriverEntryWorker
0x1C0001608: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0002128: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00030C0: pfnEtwRegisterClassicProvider
0x1C00014FC: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C00030E8: pfnEtwUnregister
0x1C0005018: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C0005050: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00030F0: WdfFunctions_01023
0x1C0005010: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C00064E0: FilterEvtDeviceAdd
0x1C0006720: FilterEvtDeviceProcessQueryInterfaceRequest
0x1C0001090: WPP_SF_Dd
0x1C0001010: WdfDeviceInterfaceDereferenceNoOp
0x1C0003028: WPP_GLOBAL_Control
0x1C00010F0: WPP_SF_d
0x1C00015C0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0005060: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0006434: WppCleanupKm
0x1C0008000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C0001340: FxStubDriverUnload
0x1C0003080: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C0002168: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00021D8: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0001010: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0006008: WppLoadTracingSupport
0x1C0005030: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C000128C: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C0003090: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C000101C: WPP_SF_DDd
0x1C0001380: FxDriverEntry
0x1C0003060: "__cdecl _security_cookie" __security_cookie
0x1C00021A0: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0002208: WPP_99ebbd79a81b3afddcb1dedd21d97463_Traceguids
0x1C0007150: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00030D8: WPPTraceSuite
0x1C00021F8: WPP_ThisDir_CTLGUID_MyDriverTraceControl
0x1C00015F0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0001180: CompanionInterfaceTaskSendSynchronously
0x1C0005000: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C0005048: ntoskrnl_NULL_THUNK_DATA
0x1C0007008: DriverEntry
0x1C00030C8: pfnWppTraceMessage
0x1C00063A4: WppInitKm
0x1C0001A00: memset
0x1C0005088: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]