Generated by JEB on 2019/08/01

PE: C:\Windows\System32\hidserv.dll Base=0x180000000 SHA-256=3B081FFF4796D89811AFCF53E2B446D04EE1F12972A61598990887AF5D2B792B
PDB: hidserv.pdb GUID={59D9A853-6DE7-436D-8C2859208E313188} Age=1

279 located named symbols:
0x180003B10: SendUIAction
0x18000577C: StopHidDevice
0x18000603C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800073D0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180005E50: "__cdecl FindPESection" _FindPESection
0x180006291: "__cdecl _imp_load_SetupDiEnumDeviceInterfaces" __imp_load_SetupDiEnumDeviceInterfaces
0x180007618: "__cdecl _real@40f0000000000000" __real@40f0000000000000
0x1800058B0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180007E48: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800047C4: WPP_SF_dDDDD
0x1800097D0: hInputEvent
0x1800075AC: "up" ??_C@_02HNLLPFKA@up?$AA@
0x180009020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000592C: "__cdecl CRT_INIT" _CRT_INIT
0x1800071C8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800018D8: WPP_SF_L
0x180001070: WppControlCallback
0x1800063B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000B018: "__cdecl _imp_CM_Get_Sibling" __imp_CM_Get_Sibling
0x1800071F0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180007338: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x180002B20: HidServProc
0x180002674: HidServReportDispatch
0x1800073E8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180007610: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180007290: "__cdecl _imp_SendNotifyMessageW" __imp_SendNotifyMessageW
0x1800072F0: "__cdecl _imp_RegisterDeviceNotificationW" __imp_RegisterDeviceNotificationW
0x180007240: "__cdecl _imp_CancelIo" __imp_CancelIo
0x180007270: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800096E2: IsKeyDown
0x180007418: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800097A8: WinStaDll
0x1800072E8: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x1800072B8: "__cdecl _imp_GetGUIThreadInfo" __imp_GetGUIThreadInfo
0x180004B00: FreeHidDevice
0x180007320: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x1800074D8: "OOC State Mutex" ??_C@_1CA@GNAFBDBK@?$AAO?$AAO?$AAC?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AAM?$AAu?$AAt?$AAe?$AAx?$AA?$AA@
0x180005E34: "__cdecl XcptFilter" _XcptFilter
0x180007420: "__cdecl _xc_a" __xc_a
0x180005868: RemoveEntryFromList
0x1800097B8: hInputDoneEvent
0x1800014A0: ServiceMain
0x180007148: "__cdecl _imp_HidP_GetCaps" __imp_HidP_GetCaps
0x18000748C: "__cdecl _guard_iat_table" __guard_iat_table
0x180007200: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800073A8: "__cdecl _imp_memset" __imp_memset
0x180002DC4: HidServUpdate
0x180007220: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000600F: "__cdecl initterm" _initterm
0x180009660: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800071E0: "__cdecl _imp_Sleep" __imp_Sleep
0x180007440: "__cdecl _xi_z" __xi_z
0x1800071B0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800073F8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000601B: "__cdecl _C_specific_handler" __C_specific_handler
0x180007150: "__cdecl _imp_HidD_GetPreparsedData" __imp_HidD_GetPreparsedData
0x180007280: "__cdecl _imp_WTSGetActiveConsoleSessionId" __imp_WTSGetActiveConsoleSessionId
0x180009848: WPP_REGISTRATION_GUIDS
0x1800072E0: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x180007340: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180006334: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180007128: "__cdecl _imp_HidP_MaxUsageListLength" __imp_HidP_MaxUsageListLength
0x180009630: PnpEnabled
0x180009058: HidservServiceName
0x180004408: UnpackReport
0x180009700: OOC_State
0x180003A18: SendAppCommand
0x1800062B5: "__cdecl _imp_load_CM_Get_DevNode_Registry_PropertyW" __imp_load_CM_Get_DevNode_Registry_PropertyW
0x180009820: WPP_MAIN_CB
0x1800097A0: hDesktopSwitch
0x18000B020: "__cdecl _imp_CM_Get_DevNode_Registry_PropertyW" __imp_CM_Get_DevNode_Registry_PropertyW
0x180005E40: "__cdecl amsg_exit" _amsg_exit
0x1800062D9: "__cdecl _imp_load_CM_Get_Parent" __imp_load_CM_Get_Parent
0x180007608: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180007588: "WinStationSendWindowMessage" ??_C@_0BM@CAMCOEIE@WinStationSendWindowMessage?$AA@
0x1800075F8: WPP_5db154defba0368d0ceb1a3cfcacada4_Traceguids
0x180001100: InstallHidserv
0x180007330: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x1800075B0: WNF_SPCH_REMOTE_SESSION_REQUEST
0x18000B008: "__cdecl _imp_SetupDiGetClassDevsW" __imp_SetupDiGetClassDevsW
0x1800072F8: "__cdecl _imp_RegisterClassExW" __imp_RegisterClassExW
0x1800071A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180009650: "__cdecl _native_startup_lock" __native_startup_lock
0x1800015D8: DllMain
0x180002030: HidThreadInputProc
0x180007390: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800073C0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180007288: KERNEL32_NULL_THUNK_DATA
0x180007268: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800062EB: "__cdecl _imp_load_SetupDiGetClassDevsW" __imp_load_SetupDiGetClassDevsW
0x180009010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180006310: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800073E0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000B000: "__cdecl _imp_SetupDiDestroyDeviceInfoList" __imp_SetupDiDestroyDeviceInfoList
0x1800075D8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800071D0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180007218: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800097F0: MessagePumpThreadId
0x180007138: "__cdecl _imp_HidD_GetAttributes" __imp_HidD_GetAttributes
0x180007608: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180005F00: "__cdecl ValidateImageBase" _ValidateImageBase
0x180009618: cThreadRef
0x180001260: ServiceHandlerEx
0x180007178: HID_NULL_THUNK_DATA
0x180009600: "__cdecl _hmod__SETUPAPI_dll" __hmod__SETUPAPI_dll
0x1800072C8: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x180001008: WPP_SF_
0x18000B010: "__cdecl _imp_SetupDiEnumDeviceInterfaces" __imp_SetupDiEnumDeviceInterfaces
0x180007210: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180007188: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180007C4C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800074A0: "__cdecl _sz_SETUPAPI_dll" __sz_SETUPAPI_dll
0x180005B70: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180007388: "__cdecl _imp__initterm" __imp__initterm
0x18000906C: REPEAT_INTERVAL
0x18000382C: SendVK
0x180007D90: SETUPAPI_NULL_THUNK_DATA_DLB
0x1800097C8: InputThreadEnabled
0x18000B040: SETUPAPI_NULL_THUNK_DATA_DLA
0x180007CB0: SETUPAPI_NULL_THUNK_DATA_DLN
0x180007528: "HidServClass" ??_C@_1BK@DCEKEAB@?$AAH?$AAi?$AAd?$AAS?$AAe?$AAr?$AAv?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x180007310: "__cdecl _imp_GetMessageW" __imp_GetMessageW
0x180009640: "__cdecl _onexitend" __onexitend
0x180007230: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1800097B0: SessionId
0x180007410: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180007308: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x1800074D0: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180007198: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180007318: USER32_NULL_THUNK_DATA
0x1800072D8: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x180007158: "__cdecl _imp_HidD_GetHidGuid" __imp_HidD_GetHidGuid
0x180007430: "__cdecl _xi_a" __xi_a
0x1800062FD: "__cdecl _imp_load_SetupDiGetDeviceInterfaceDetailW" __imp_load_SetupDiGetDeviceInterfaceDetailW
0x1800071B8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180007190: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180007C2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll
0x1800016DC: WPP_SF_DD
0x1800019F0: WPP_SF_dd
0x180007350: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180001850: WPP_SF_Ds
0x180009000: WPP_GLOBAL_Control
0x1800075A4: "down" ??_C@_04JMOKAGMG@down?$AA@
0x1800019AC: WPP_SF_d
0x18000102C: WPP_SF_D
0x180009668: "__cdecl pRawDllMain" _pRawDllMain
0x180007E84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x180009620: hMutexOOC
0x1800072A8: "__cdecl _imp_SystemParametersInfoW" __imp_SystemParametersInfoW
0x180007250: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x180005E10: "__cdecl _security_check_cookie" __security_check_cookie
0x180007428: "__cdecl _xc_z" __xc_z
0x180007278: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800072C0: "__cdecl _imp_SendInput" __imp_SendInput
0x180006212: "__cdecl _tailMerge_setupapi_dll" __tailMerge_setupapi_dll
0x180007EAC: "__cdecl _IMPORT_DESCRIPTOR_HID" __IMPORT_DESCRIPTOR_HID
0x1800071C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800075B8: WPP_79eba3db8f0338eb8b0b510ea75e2436_Traceguids
0x18000B028: "__cdecl _imp_CM_Get_Child" __imp_CM_Get_Child
0x1800017EC: WPP_SF_Dqq
0x180006206: "__cdecl _imp_load_SetupDiDestroyDeviceInfoList" __imp_load_SetupDiDestroyDeviceInfoList
0x1800071F8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800073F0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x1800075C8: WPP_bf6d98e4cdda34f3eb15ceb6f6956e2d_Traceguids
0x180007180: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180009628: hService
0x180007328: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180007E70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x1800074B0: WPP_252ba870f7c738c7a9f44948f9c02bce_Traceguids
0x180007168: "__cdecl _imp_HidP_GetScaledUsageValue" __imp_HidP_GetScaledUsageValue
0x180001A80: HidServMain
0x180004844: RebuildHidDeviceList
0x180007358: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1800097C0: InputType
0x180007370: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x180007448: "__cdecl _guard_fids_table" __guard_fids_table
0x1800073B0: msvcrt_NULL_THUNK_DATA
0x180007010: "__cdecl load_config_used" _load_config_used
0x1800075E8: "MEDIA" ??_C@_1M@PEFNOLIB@?$AAM?$AAE?$AAD?$AAI?$AAA?$AA?$AA@
0x180009638: hNotifyArrival
0x180007260: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x1800097C4: InputThreadId
0x1800072A0: "__cdecl _imp_KillTimer" __imp_KillTimer
0x180007360: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x18000B030: "__cdecl _imp_CM_Get_Parent" __imp_CM_Get_Parent
0x180007258: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180007EC0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x180007570: "winsta.dll" ??_C@_1BG@ENBOENEA@?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180007378: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180009800: ServiceStatus
0x180004B8C: OpenHidDevice
0x1800073B8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800071D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180007248: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x180007170: "__cdecl _imp_HidP_GetUsageValue" __imp_HidP_GetUsageValue
0x180007400: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800097CC: InputAppCommand
0x1800073D8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180007610: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800062C7: "__cdecl _imp_load_CM_Get_Child" __imp_load_CM_Get_Child
0x180009030: HidservDisplayName
0x1800097E8: HidDeviceList
0x180006030: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180007208: "__cdecl _imp_SleepEx" __imp_SleepEx
0x180009610: hInstance
0x180007298: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x1800073C8: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x180007398: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180007408: ntdll_NULL_THUNK_DATA
0x180005564: StartHidDevice
0x180009068: INITIAL_WAIT
0x180001724: WPP_SF_DDD
0x180001780: WPP_SF_DDDd
0x180009018: "__cdecl _security_cookie" __security_cookie
0x180001FBC: HidServSetPnP
0x1800072D0: "__cdecl _imp_SetTimer" __imp_SetTimer
0x180007228: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800071E8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180009648: "__cdecl _onexitbegin" __onexitbegin
0x18000428C: DeviceChangeHandler
0x1800097D8: WinStaProc
0x1800071A8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180007160: "__cdecl _imp_HidP_GetValueCaps" __imp_HidP_GetValueCaps
0x180007120: "__cdecl _imp_HidP_GetUsages" __imp_HidP_GetUsages
0x180007E98: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180005F34: "__cdecl _security_init_cookie" __security_init_cookie
0x180001A44: WPP_SF_q
0x180007E5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x180004190: HidRepeaterVKButtonDown
0x180007E34: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180007548: "HID Input Service" ??_C@_1CE@HCMPKEAI@?$AAH?$AAI?$AAD?$AA?5?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x180009608: hWndHidServ
0x180007380: "__cdecl _imp_malloc" __imp_malloc
0x180007130: "__cdecl _imp_HidP_GetButtonCaps" __imp_HidP_GetButtonCaps
0x180003BA8: VolumeTimerHandler
0x1800097E0: IsSessionLocked
0x180007300: "__cdecl _imp_UnregisterClassW" __imp_UnregisterClassW
0x180006080: "__cdecl _report_gsfailure" __report_gsfailure
0x180007368: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x180009658: "__cdecl _native_startup_state" __native_startup_state
0x180003928: SendChar
0x1800074F8: "WinSta0_DesktopSwitch" ??_C@_1CM@DPCIGCPJ@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA_?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?$AA@
0x18000439C: HidKeyboardSettingsChange
0x180007348: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1800074C0: WPP_ThisDir_CTLGUID_HidServGuid
0x180002340: HidThreadProc
0x1800096E0: InputVKey
0x180007118: "__cdecl _imp_HidD_FreePreparsedData" __imp_HidD_FreePreparsedData
0x18000B038: "__cdecl _imp_SetupDiGetDeviceInterfaceDetailW" __imp_SetupDiGetDeviceInterfaceDetailW
0x1800046B4: WPP_SF_SD
0x1800073A0: "__cdecl _imp_free" __imp_free
0x180005EA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800062A3: "__cdecl _imp_load_CM_Get_Sibling" __imp_load_CM_Get_Sibling
0x180001920: WPP_SF_cs
0x18000473C: WPP_SF_Sq
0x180007140: "__cdecl _imp_HidP_GetLinkCollectionNodes" __imp_HidP_GetLinkCollectionNodes
0x180009680: PendingButtonList
0x1800072B0: "__cdecl _imp_UnregisterDeviceNotification" __imp_UnregisterDeviceNotification
0x180006395: memset
0x180007ED4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180007238: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]