Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\mountmgr.sys Base=0x1C0000000 SHA-256=443D1512A408695AAE94E4392554F7FC38FAA4F9A4139CE5E08845E11F3EE0A0
PDB: mountmgr.pdb GUID={B340DF61-07F6-9B49-5219BE9922689228} Age=1

409 located named symbols:
0x1C0013760: DeleteDriveLetterRoutine
0x1C0004958: "\DosDevices\A:" ??_C@_1BO@LJHGOKGD@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAA?$AA?3?$AA?$AA@
0x1C0004580: "\??\Volume" ??_C@_1BG@KPDPFBJH@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1C0003270: WppClassicProviderCallback
0x1C00049DC: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x1C0009138: "__cdecl _imp_ZwWriteFile" __imp_ZwWriteFile
0x1C00092D8: "__cdecl _imp_EtwProviderEnabled" __imp_EtwProviderEnabled
0x1C0009128: "__cdecl _imp_IoGetDeviceAttachmentBaseRef" __imp_IoGetDeviceAttachmentBaseRef
0x1C00090D8: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C000D48C: OpenRemoteDatabase
0x1C00070D8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C001A440: WppTraceCallback
0x1C00071A0: gUnloadEvent
0x1C00090D0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C00028E4: WPP_SF_LL
0x1C0019084: MountMgrVolumeMountPointDeletedIoctl
0x1C000293C: WPP_SF_LS
0x1C0009068: "__cdecl _imp_ZwReadFile" __imp_ZwReadFile
0x1C0002490: MountMgrSiloContextCleanupCallback
0x1C0009028: "__cdecl _imp_RtlWriteRegistryValue" __imp_RtlWriteRegistryValue
0x1C000E0C8: VerifyEpoch
0x1C0004180: "IOCTL_MOUNTMGR_BOOT_DL_ASSIGNMEN" ??_C@_0CC@JBMHAOEB@IOCTL_MOUNTMGR_BOOT_DL_ASSIGNMEN@
0x1C000289C: WPP_SF_L
0x1C00090E0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0001570: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0013820: DeleteFromLocalDatabaseRoutine
0x1C000CC9C: OpenDevice
0x1C00154D4: MountMgrKeepLinksWhenOffline
0x1C00162A4: MountMgrQueryWinPEDriveLetter
0x1C0015FC0: MountMgrPrepareVolumeDelete
0x1C0009218: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0009118: "__cdecl _imp_PsAttachSiloToCurrentThread" __imp_PsAttachSiloToCurrentThread
0x1C0013890: DeleteNoDriveLetterEntryRoutine
0x1C0004BB8: "IOCTL_MOUNTMGR_VOLUME_MOUNT_POIN" ??_C@_0CK@FEPKIAOP@IOCTL_MOUNTMGR_VOLUME_MOUNT_POIN@
0x1C0004D78: GUID_IO_VOLUME_NAME_CHANGE
0x1C0004400: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0009268: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C00026F0: SendOnlineNotificationWorker
0x1C000B480: MountMgrCreateClose
0x1C001333C: CreateRemoteDatabase
0x1C0004C08: "IOCTL_MOUNTMGR_KEEP_LINKS_WHEN_O" ??_C@_0CH@EFIDAGKK@IOCTL_MOUNTMGR_KEEP_LINKS_WHEN_O@
0x1C00030F0: WPP_SF_qqL
0x1C0009048: "__cdecl _imp_RtlDeleteRegistryValue" __imp_RtlDeleteRegistryValue
0x1C00092F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00090E8: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C0004D68: PARTITION_OS_DATA_GUID
0x1C00091E0: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0015430: MountMgrFreeSavedLink
0x1C00090F8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C000BADC: GetDriveLayoutInternal
0x1C0009090: "__cdecl _imp_KeInitializeMutex" __imp_KeInitializeMutex
0x1C0009058: "__cdecl _imp_IoRegisterDriverReinitialization" __imp_IoRegisterDriverReinitialization
0x1C0016338: MountMgrScrubRegistry
0x1C0013F50: DetectedSymlinkOnRemoteDatabaseFile
0x1C0004D38: PARTITION_MAIN_OS_GUID
0x1C0009288: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0009050: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C000C1A4: QueryDeviceInformation
0x1C00049E8: "InstRootDrive" ??_C@_1BM@OCDIALJA@?$AAI?$AAn?$AAs?$AAt?$AAR?$AAo?$AAo?$AAt?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$AA@
0x1C0009060: "__cdecl _imp_PsGetJobSilo" __imp_PsGetJobSilo
0x1C0018718: MountMgrVolumeMountPointCreatedIoctl
0x1C0009168: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0009038: "__cdecl _imp_ZwWaitForSingleObject" __imp_ZwWaitForSingleObject
0x1C0016818: MountMgrTracelogCache
0x1C00092B8: "__cdecl _imp_PsDereferenceSiloContext" __imp_PsDereferenceSiloContext
0x1C00091C8: "__cdecl _imp_IoRegisterPlugPlayNotification" __imp_IoRegisterPlugPlayNotification
0x1C0009298: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0001580: memcpy
0x1C0007190: gUnloading
0x1C0017620: MountMgrVolumeMountPointChanged
0x1C000A210: MountMgrQueryPoints
0x1C00091B0: "__cdecl _imp_IoRegisterShutdownNotification" __imp_IoRegisterShutdownNotification
0x1C000E300: SymbolicLinkNamesFromUniqueIdQuery
0x1C00032A4: StorSqmCleanup
0x1C000D1AC: CreateNewVolumeName
0x1C000CA18: CreateStringWithGlobal
0x1C0004DA8: SQM_SET_STRING
0x1C0004AE8: "IOCTL_MOUNTMGR_TRACELOG_CACHE" ??_C@_0BO@CEJDOPKM@IOCTL_MOUNTMGR_TRACELOG_CACHE?$AA@
0x1C0009110: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0007158: pfnWppGetVersion
0x1C0004998: "\Device\Floppy" ??_C@_1BO@KBIGKJBB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AA?$AA@
0x1C0009220: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C000C8FC: IsOffline
0x1C0015C64: MountMgrNotifyNameChange
0x1C0001580: memmove
0x1C000E0EC: MntMgrFindDevice
0x1C00041C8: GUID_IO_VOLUME_UNIQUE_ID_CHANGE
0x1C0009120: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C00155C8: MountMgrMountedDeviceRemoval
0x1C0004D58: PARTITION_MSFT_RECOVERY_GUID
0x1C0004A18: "NONE" ??_C@_19PFCDLDMI@?$AAN?$AAO?$AAN?$AAE?$AA?$AA@
0x1C0004280: "\Registry\Machine\System\Mounted" ??_C@_1FA@FHHJBOPE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAe?$AAd@
0x1C0009248: "__cdecl _imp_PsDetachSiloFromCurrentThread" __imp_PsDetachSiloFromCurrentThread
0x1C00014FC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C00011F0: WorkerThread
0x1C00010A4: WaitForOnlinesToComplete
0x1C0009140: "__cdecl _imp_IoGetDeviceObjectPointer" __imp_IoGetDeviceObjectPointer
0x1C001A694: WriteRemoteDatabaseEntry
0x1C00029D8: WPP_SF_LSsd
0x1C0009130: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0009080: "__cdecl _imp_PsIsHostSilo" __imp_PsIsHostSilo
0x1C0007100: WPP_MAIN_CB
0x1C000C9A0: GlobalCreateSymbolicLink
0x1C000CE5C: HasDriveLetter
0x1C0004A28: "IOCTL_MOUNTMGR_CREATE_POINT" ??_C@_0BM@JHGPMEBC@IOCTL_MOUNTMGR_CREATE_POINT?$AA@
0x1C0009260: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0007198: gBreakOnFunction
0x1C0004130: "IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_" ??_C@_0CF@FHCLCKCH@IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_@
0x1C0016C30: MountMgrUnload
0x1C000B960: QueryUniqueIdInternal
0x1C0018804: MountMgrVolumeMountPointDeleted
0x1C0002D48: WPP_SF_ddL
0x1C0004558: "\??\" ??_C@_19JHEHLFPM@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
0x1C00042D0: GUID_NULL
0x1C0009280: "__cdecl _imp_ZwQueryInformationFile" __imp_ZwQueryInformationFile
0x1C00049B8: "CVE-2015-1769" ??_C@_1BM@BHGBMGJL@?$AAC?$AAV?$AAE?$AA?9?$AA2?$AA0?$AA1?$AA5?$AA?9?$AA1?$AA7?$AA6?$AA9?$AA?$AA@
0x1C000CF44: IsDriveLetter
0x1C001B404: MountmgrReadNoAutoMount
0x1C0014270: IsUniqueIdPresent
0x1C0009290: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C000CD34: RegisterForTargetDeviceNotification
0x1C0009158: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x1C0004AA0: "IOCTL_MOUNTMGR_QUERY_POINTS_ADMI" ??_C@_0CC@GMLFNAON@IOCTL_MOUNTMGR_QUERY_POINTS_ADMI@
0x1C0009200: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000CDD8: ProcessSuggestedDriveLetters
0x1C0016460: MountMgrShutdown
0x1C000C81C: MountMgrSendDeviceControl
0x1C0007168: pfnWppQueryTraceInformation
0x1C0009278: "__cdecl _imp_PsFreeSiloContextSlot" __imp_PsFreeSiloContextSlot
0x1C0019EF0: ScrubRegistryRoutine
0x1C0015268: MountMgrFreeDeadDeviceInfo
0x1C0013964: DeleteRemoteDatabaseEntry
0x1C00090C0: "__cdecl _imp_RtlUpcaseUnicodeChar" __imp_RtlUpcaseUnicodeChar
0x1C000C354: SendOnlineNotification
0x1C00044C0: "\DosDevices\" ??_C@_1BK@LABJKOM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
0x1C0009188: "__cdecl _imp_KeInitializeSemaphore" __imp_KeInitializeSemaphore
0x1C0009020: "__cdecl _imp_RtlQueryRegistryValuesEx" __imp_RtlQueryRegistryValuesEx
0x1C0019864: QueryPointsFromSymbolicLinkName
0x1C0004A08: "WinPE" ??_C@_1M@IEBOLHNI@?$AAW?$AAi?$AAn?$AAP?$AAE?$AA?$AA@
0x1C00014D8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000BA1C: QuerySuggestedLinkNameInternal
0x1C0004420: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004CC8: "IOCTL_MOUNTMGR_SILO_ARRIVAL" ??_C@_0BM@BPBLBION@IOCTL_MOUNTMGR_SILO_ARRIVAL?$AA@
0x1C0016174: MountMgrQuerySymbolicLink
0x1C0004D18: PARTITION_WINDOWS_SYSTEM_GUID
0x1C00091E8: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C0009228: "__cdecl _imp_IoAcquireCancelSpinLock" __imp_IoAcquireCancelSpinLock
0x1C0009250: "__cdecl _imp_ExUuidCreate" __imp_ExUuidCreate
0x1C0009100: "__cdecl _imp_RtlCreateSystemVolumeInformationFolder" __imp_RtlCreateSystemVolumeInformationFolder
0x1C0014CF8: MountMgrDeletePoints
0x1C000B590: MountMgrDriverReinitialization
0x1C0004940: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0007140: pfnEtwRegisterClassicProvider
0x1C001A7FC: WriteUniqueIdToMaster
0x1C0017CE8: MountMgrVolumeMountPointCreated
0x1C0001120: QueueWorkItem
0x1C0009150: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C000CFFC: QuerySymbolicLinkNamesFromStorage
0x1C0002DAC: WPP_SF_iSsdsssssdiDDDD
0x1C0002868: WPP_SF_
0x1C0012CA0: ChangeUniqueIdRoutine
0x1C001A2D4: UpdateReplicatedUniqueIds
0x1C00041F8: WPP_ThisDir_CTLGUID_Mountmgr
0x1C0007170: pfnEtwUnregister
0x1C0001F50: MountMgrInitSiloDeviceExtension
0x1C00049D4: "TRUE" ??_C@_04HCDDPBNL@TRUE?$AA@
0x1C0012D30: CheckForNoDriveLetterEntry
0x1C0009088: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C0002228: MountMgrSiloArrival
0x1C000B86C: QueryDeviceNameInternal
0x1C0014194: GlobalDeleteSymbolicLink
0x1C0009148: "__cdecl _imp_KeReleaseMutex" __imp_KeReleaseMutex
0x1C0004C80: "IOCTL_MOUNTMGR_SET_AUTO_MOUNT" ??_C@_0BO@CNNJFFOH@IOCTL_MOUNTMGR_SET_AUTO_MOUNT?$AA@
0x1C001B010: GsDriverEntry
0x1C00092F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00070E0: gSiloSlot
0x1C0009170: "__cdecl _imp_ZwQueryDirectoryFile" __imp_ZwQueryDirectoryFile
0x1C000494C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C00091A0: "__cdecl _imp_KeReleaseSemaphore" __imp_KeReleaseSemaphore
0x1C0014104: GetRemoteDatabaseSize
0x1C0016E94: MountMgrValidateBackPointer
0x1C0009190: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C0004518: "\DosDevices\MountPointManager" ??_C@_1DM@FLOADKKG@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1C0009108: "__cdecl _imp_PsGetHostSilo" __imp_PsGetHostSilo
0x1C0004CA0: "IOCTL_MOUNTMGR_PREPARE_VOLUME_RE" ??_C@_0CG@MBIPECC@IOCTL_MOUNTMGR_PREPARE_VOLUME_RE@
0x1C0004D48: PARTITION_DPP_GUID
0x1C00090A8: "__cdecl _imp_ObIsDosDeviceLocallyMapped" __imp_ObIsDosDeviceLocallyMapped
0x1C00091D8: "__cdecl _imp_PsCreateSiloContext" __imp_PsCreateSiloContext
0x1C0004DF8: SQM_START_SESSION
0x1C000D31C: MountMgrFindBootVolume
0x1C000D2A0: MountMgrIsWinPE
0x1C0009198: "__cdecl _imp_IoSetThreadHardErrorMode" __imp_IoSetThreadHardErrorMode
0x1C0007000: WPP_GLOBAL_Control
0x1C0004C60: "IOCTL_MOUNTMGR_SCRUB_REGISTRY" ??_C@_0BO@IBENBDGH@IOCTL_MOUNTMGR_SCRUB_REGISTRY?$AA@
0x1C0001010: MountMgrCleanup
0x1C0004B88: "IOCTL_MOUNTMGR_VOLUME_MOUNT_POIN" ??_C@_0CK@COMJNMLO@IOCTL_MOUNTMGR_VOLUME_MOUNT_POIN@
0x1C0016514: MountMgrTraceDeviceExtension
0x1C0004208: GUID_DEVICE_INTERFACE_ARRIVAL
0x1C0009008: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0001480: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0004D98: SQM_END_SESSION
0x1C00041D8: MountMgrEventProvider
0x1C00090A0: "__cdecl _imp_ZwQueryVolumeInformationFile" __imp_ZwQueryVolumeInformationFile
0x1C0004DB8: SQM_SET_DWORD64
0x1C0009300: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000CEA4: MountMgrNextDriveLetterWorker
0x1C000C6A8: SendLinkCreated
0x1C0019170: MountmgrWriteNoAutoMount
0x1C00197BC: QueryDeviceName
0x1C000D35C: GetRemoteDatabaseEntry
0x1C0004C30: "IOCTL_MOUNTMGR_CHECK_UNPROCESSED" ??_C@_0CJ@MKBHJDEE@IOCTL_MOUNTMGR_CHECK_UNPROCESSED@
0x1C0012990: ChangeRemoteDatabaseUniqueId
0x1C00092E0: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x1C0009010: "__cdecl _imp_ZwOpenEvent" __imp_ZwOpenEvent
0x1C0009000: "__cdecl _imp_ZwFsControlFile" __imp_ZwFsControlFile
0x1C0004D88: GUID_DEVICE_INTERFACE_REMOVAL
0x1C00090C8: "__cdecl _imp_PsJobType" __imp_PsJobType
0x1C00041E8: MOUNTDEV_MOUNTED_DEVICE_GUID
0x1C00092A0: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x1C00091A8: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C00092D0: "__cdecl _imp_PsAllocSiloContextSlot" __imp_PsAllocSiloContextSlot
0x1C001C000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0009078: "__cdecl _imp_PsGetThreadHardErrorsAreDisabled" __imp_PsGetThreadHardErrorsAreDisabled
0x1C0004B60: "IOCTL_MOUNTMGR_AUTO_DL_ASSIGNMEN" ??_C@_0CD@CAINHHDK@IOCTL_MOUNTMGR_AUTO_DL_ASSIGNMEN@
0x1C0019B4C: QueryUniqueId
0x1C00042E0: "\Registry\Machine\System\Current" ??_C@_1HE@EPADLGDB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0004440: StorSqmProvider
0x1C0004000: "__cdecl load_config_used" _load_config_used
0x1C0009270: "__cdecl _imp_PsSetThreadHardErrorsAreDisabled" __imp_PsSetThreadHardErrorsAreDisabled
0x1C0019BD8: QueryUniqueIdFromMaster
0x1C0004DE8: SQM_SETIFMIN_DWORD
0x1C00090B8: "__cdecl _imp_RtlCreateRegistryKey" __imp_RtlCreateRegistryKey
0x1C0009070: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C00092A8: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0015A68: MountMgrNextDriveLetter
0x1C0015050: MountMgrDeletePointsDbOnly
0x1C0012844: AddRemoteDatabaseEntry
0x1C000C448: QueryDeviceSortOrderInternal
0x1C0009178: IoFileObjectType
0x1C0016918: MountMgrUniqueIdChangeRoutine
0x1C0009258: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0019D40: QueryUniqueIdQueryRoutine
0x1C00043C8: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00041A8: GUID_IO_VOLUME_MOUNT
0x1C000E10C: WaitForRemoteDatabaseSemaphore
0x1C0013FFC: FindDeviceInfo
0x1C0019FE4: SendLinkDeleted
0x1C0004D28: PARTITION_BSP_GUID
0x1C0004370: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0017470: MountMgrVolumeArrivalNotification
0x1C00165A0: MountMgrTraceMountedDevice
0x1C0012DB8: CreateNewDriveLetterName
0x1C0001E24: MountMgrFreeSiloDeviceExtension
0x1C0004A70: "IOCTL_MOUNTMGR_VOLUME_ARRIVAL_NO" ??_C@_0CL@HPEOPAEK@IOCTL_MOUNTMGR_VOLUME_ARRIVAL_NO@
0x1C000B7C0: MountMgrMountedDeviceNotification
0x1C00014C0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00044E0: "\Device\MountPointManager" ??_C@_1DE@MJJBHHAG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1C00045F0: "\$Extend\$Reparse:$R:$INDEX_ALLO" ??_C@_1EO@DEOJINAE@?$AA?2?$AA$?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AA?2?$AA$?$AAR?$AAe?$AAp?$AAa?$AAr?$AAs?$AAe?$AA?3?$AA$?$AAR?$AA?3?$AA$?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAA?$AAL?$AAL?$AAO@
0x1C0004B18: "IOCTL_MOUNTMGR_DELETE_POINTS" ??_C@_0BN@ODHBFDEK@IOCTL_MOUNTMGR_DELETE_POINTS?$AA@
0x1C000B4D0: MountMgrTargetDeviceNotification
0x1C00041B8: GUID_TARGET_DEVICE_REMOVE_COMPLETE
0x1C0007150: gDeviceObject
0x1C0009040: "__cdecl _imp_ZwQuerySymbolicLinkObject" __imp_ZwQuerySymbolicLinkObject
0x1C00024C8: PostOnlineNotification
0x1C000CFA4: RemoveSavedLinks
0x1C000E1C4: WppLoadTracingSupport
0x1C0009238: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C00091D0: "__cdecl _imp_IoCreateFile" __imp_IoCreateFile
0x1C000B64C: ReconcileThisDatabaseWithMaster
0x1C0019E08: RedirectSavedLink
0x1C0004640: "\System Volume Information\Mount" ??_C@_1HG@NJBKOJG@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt@
0x1C00142F0: MountMgrCheckUnprocessedVolumes
0x1C0004BE8: "IOCTL_MOUNTMGR_CHANGE_NOTIFY" ??_C@_0BN@GHIMDGDI@IOCTL_MOUNTMGR_CHANGE_NOTIFY?$AA@
0x1C0004B08: "IOCTL UNKNOWN" ??_C@_0O@JNGLJJOI@IOCTL?5UNKNOWN?$AA@
0x1C000AE60: MountMgrQueryDosVolumePaths
0x1C0004DC8: SQM_ADD_STREAMROW_EX
0x1C0004DD8: SQM_ADDTOAVERAGE_DWORD
0x1C0002ACC: WPP_SF_LsL
0x1C0004450: WPP_6c081ee778dc3454ba98c690d8a82950_Traceguids
0x1C00091F0: "__cdecl _imp_PsInsertPermanentSiloContext" __imp_PsInsertPermanentSiloContext
0x1C0004CF8: PARTITION_PRE_INSTALLED_GUID
0x1C0009030: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C000A950: MountMgrQueryDosVolumePath
0x1C001317C: CreateNoDriveLetterEntry
0x1C00070D0: "__cdecl _security_cookie" __security_cookie
0x1C0003160: WPP_SF_sssi
0x1C0004978: "\Device\CdRom" ??_C@_1BM@GJGIAIIP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
0x1C00092C8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000BB8C: MountMgrMountedDeviceArrival
0x1C0004A48: "IOCTL_MOUNTMGR_NEXT_DRIVE_LETTER" ??_C@_0CB@OKMEODJD@IOCTL_MOUNTMGR_NEXT_DRIVE_LETTER@
0x1C0004390: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0001CA8: MountMgrChangeNotify
0x1C0004B38: "IOCTL_MOUNTMGR_DELETE_POINTS_DBO" ??_C@_0CE@KHFKBOIP@IOCTL_MOUNTMGR_DELETE_POINTS_DBO@
0x1C00134E0: CreateRemoteDatabaseWorker
0x1C00091F8: "__cdecl _imp_EtwWrite" __imp_EtwWrite
0x1C0002120: MountMgrNotify
0x1C0003090: WPP_SF_qL
0x1C00091C0: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x1C0004E18: SQM_SETIFMAX_DWORD
0x1C001B044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000A010: MountMgrDeviceControl
0x1C00160EC: MountMgrQueryAutoMount
0x1C00191C0: OnlineMountedVolumes
0x1C0004158: "IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_" ??_C@_0CG@DEMLJANG@IOCTL_MOUNTMGR_QUERY_DOS_VOLUME_@
0x1C0009210: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0014414: MountMgrCreatePoint
0x1C0009018: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0004220: "\Registry\Machine\System\Mounted" ??_C@_1GA@GPDBBHMM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAe?$AAd@
0x1C0007160: WPPTraceSuite
0x1C0004568: "\GLOBAL??\" ??_C@_1BG@KEFMGHOI@?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
0x1C0004AC8: "IOCTL_MOUNTMGR_QUERY_AUTO_MOUNT" ??_C@_0CA@PAHMGAIF@IOCTL_MOUNTMGR_QUERY_AUTO_MOUNT?$AA@
0x1C0009180: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C001A204: TruncateRemoteDatabase
0x1C00090C8: PsJobType
0x1C00045A0: "\Device\VolumesSafeForWriteAcces" ??_C@_1EE@BKEAFBFL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AAs?$AAS?$AAa?$AAf?$AAe?$AAF?$AAo?$AAr?$AAW?$AAr?$AAi?$AAt?$AAe?$AAA?$AAc?$AAc?$AAe?$AAs@
0x1C000A420: QueryPointsFromMemory
0x1C00145CC: MountMgrCreatePointWorker
0x1C0007180: gEtwProvRegHandle
0x1C0013E20: DeleteSymbolicLinkNameFromMemory
0x1C000CBA0: MountmgrSetDLStringCase
0x1C00014B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0014AA4: MountMgrCreatePointWorkerLegacy
0x1C0004110: "IOCTL_MOUNTMGR_QUERY_POINTS" ??_C@_0BM@KPKOHDIM@IOCTL_MOUNTMGR_QUERY_POINTS?$AA@
0x1C0009098: "__cdecl _imp_IoUnregisterPlugPlayNotification" __imp_IoUnregisterPlugPlayNotification
0x1C0004E08: SQM_INCREMENT_DWORD
0x1C00163B4: MountMgrSetAutoMount
0x1C000D6F4: QueryVolumeName
0x1C0009208: "__cdecl _imp_IoUnregisterShutdownNotification" __imp_IoUnregisterShutdownNotification
0x1C0009178: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C00091B8: "__cdecl _imp_ZwSetInformationFile" __imp_ZwSetInformationFile
0x1C0004CE8: MOUNTMGR_CVE_DETECT
0x1C0004D08: PARTITION_BASIC_DATA_GUID
0x1C000D960: ReconcileThisDatabaseWithMasterWorker
0x1C0004358: "NoAutoMount" ??_C@_1BI@JGLJINII@?$AAN?$AAo?$AAA?$AAu?$AAt?$AAo?$AAM?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1C00092E8: ntoskrnl_NULL_THUNK_DATA
0x1C00092B0: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C0009230: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0009240: "__cdecl _imp_ZwOpenFile" __imp_ZwOpenFile
0x1C000E3F0: SymbolicLinkNamesFromUniqueIdCount
0x1C00152A0: MountMgrFreeMountedDeviceInfo
0x1C00090F0: "__cdecl _imp_ZwOpenSymbolicLinkObject" __imp_ZwOpenSymbolicLinkObject
0x1C001B078: DriverEntry
0x1C0004E28: SQM_SET_DWORD
0x1C0002C00: WPP_SF_Si
0x1C0002B70: WPP_SF_SL
0x1C000B708: MountMgrBootDriveLetterAssignment
0x1C000B210: MountMgrQueryVolumePaths
0x1C00013C0: StorSqmInitialize
0x1C00090B0: "__cdecl _imp_IoReportTargetDeviceChangeAsynchronous" __imp_IoReportTargetDeviceChangeAsynchronous
0x1C0002C90: WPP_SF_Ss
0x1C0007148: pfnWppTraceMessage
0x1C0001C40: MountMgrCancel
0x1C00092C0: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0009160: "__cdecl _imp_FsRtlGetVirtualDiskNestingLevel" __imp_FsRtlGetVirtualDiskNestingLevel
0x1C000E158: WppInitKm
0x1C00018C0: memset
0x1C0009314: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]