PDB Symbols - volmgr.sys (0x84F636D284ABFF65BF5D11E72CFD404DC7EAE1D3CEB866100F94438AA7709CC0)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\volmgr.sys Base=0x1C0000000 SHA-256=84F636D284ABFF65BF5D11E72CFD404DC7EAE1D3CEB866100F94438AA7709CC0
PDB: volmgr.pdb GUID={58922033-11D6-9FD1-4CA765D5DF2475EA} Age=1

472 located named symbols:
0x1C0008050: Microsoft_Windows_Volume_Context
0x1C000D11C: "void __cdecl VmpNotify(class VM_ROOT_EXTENSION * __ptr64,class VM_VOLUME_EXTENSION * __ptr64)" ?VmpNotify@@YAXPEAVVM_ROOT_EXTENSION@@PEAVVM_VOLUME_EXTENSION@@@Z
0x1C000A358: "__cdecl _imp_SeCaptureSubjectContext" __imp_SeCaptureSubjectContext
0x1C00052D8: "\DosDevices\HarddiskVolume%d" ??_C@_1DK@KMIDJBEG@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$CF?$AAd?$AA?$AA@
0x1C0005440: PARTITION_SYSTEM_GUID
0x1C000A008: "__cdecl _imp_WmiCompleteRequest" __imp_WmiCompleteRequest
0x1C0011FE0: "void __cdecl VmLoadExtensionDriver(void * __ptr64)" ?VmLoadExtensionDriver@@YAXPEAX@Z
0x1C000F488: "void __cdecl VmpEtwControlStart(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpEtwControlStart@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A138: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C000EBFC: "long __cdecl VmpGetGptAttributes(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetGptAttributes@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000CE90: "long __cdecl VmpSetGptAttributes(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpSetGptAttributes@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C00147C0: VmLogError
0x1C0004740: "void __cdecl VmpReleaseConfig(class VM_ROOT_EXTENSION * __ptr64)" ?VmpReleaseConfig@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C00080A8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000A128: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0013398: "void __cdecl VmpFlushRegistryKey(struct _UNICODE_STRING * __ptr64)" ?VmpFlushRegistryKey@@YAXPEAU_UNICODE_STRING@@@Z
0x1C00152B0: VmpQueryGlobalSettings
0x1C0005198: "GptAttributeRevertEntries" ??_C@_1DE@ECDODENC@?$AAG?$AAp?$AAt?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x1C000A300: "__cdecl _imp_IoRegisterBootDriverReinitialization" __imp_IoRegisterBootDriverReinitialization
0x1C000D434: "class VM_VOLUME_EXTENSION * __ptr64 __cdecl VmpFindExtensionForPendingBasicVolume(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?VmpFindExtensionForPendingBasicVolume@@YAPEAVVM_VOLUME_EXTENSION@@PEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@@Z
0x1C0005598: "DiskId" ??_C@_1O@MPEGBBMN@?$AAD?$AAi?$AAs?$AAk?$AAI?$AAd?$AA?$AA@
0x1C000A068: "__cdecl _imp_RtlWriteRegistryValue" __imp_RtlWriteRegistryValue
0x1C000E1C4: "long __cdecl VmpMarkDeleted(struct _DEVICE_OBJECT * __ptr64,unsigned char)" ?VmpMarkDeleted@@YAJPEAU_DEVICE_OBJECT@@E@Z
0x1C0001D40: VmCleanup
0x1C000A140: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002A54: "public: unsigned char __cdecl SC_PART_ENTRY::IsRecognized(void) __ptr64" ?IsRecognized@SC_PART_ENTRY@@QEAAEXZ
0x1C00030D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0001B50: VmpReadWriteCompletionRoutine
0x1C00120A0: "long __cdecl VmQueryUniqueIdBuffer(void * __ptr64,unsigned short * __ptr64,unsigned char * __ptr64)" ?VmQueryUniqueIdBuffer@@YAJPEAXPEAGPEAE@Z
0x1C0013AD8: "void __cdecl VmpProcessDiskNotifications(class VM_ROOT_EXTENSION * __ptr64)" ?VmpProcessDiskNotifications@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C0005C90: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C000A0E0: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C000A288: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0002C4C: "void __cdecl VmpAcquireAll(class VM_ROOT_EXTENSION * __ptr64)" ?VmpAcquireAll@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C000A2B8: "__cdecl _imp_IoSetHardErrorOrVerifyDevice" __imp_IoSetHardErrorOrVerifyDevice
0x1C000A0C8: "__cdecl _imp_IoWriteErrorLogEntry" __imp_IoWriteErrorLogEntry
0x1C000A2F8: "__cdecl _imp_IoAllocateErrorLogEntry" __imp_IoAllocateErrorLogEntry
0x1C00120C0: "void __cdecl VmReleaseAll(void * __ptr64)" ?VmReleaseAll@@YAXPEAX@Z
0x1C00053C8: DEVPKEY_Storage_Disk_Number
0x1C000A2D8: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0005480: DEVPKEY_Device_ClassGuid
0x1C0013D14: "long __cdecl VmpQueryFailoverSet(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryFailoverSet@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A2E0: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C000A088: "__cdecl _imp_RtlDeleteRegistryValue" __imp_RtlDeleteRegistryValue
0x1C000A238: "__cdecl _imp_IoQueueWorkItemEx" __imp_IoQueueWorkItemEx
0x1C000A0A8: "__cdecl _imp_IoSetDeviceInterfaceState" __imp_IoSetDeviceInterfaceState
0x1C000226C: "__cdecl TlgWrite" _TlgWrite
0x1C000A388: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000A370: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C000ECAC: "long __cdecl VmpGetGptAttributesInternal(class VM_VOLUME_EXTENSION * __ptr64,unsigned __int64 * __ptr64,unsigned char * __ptr64)" ?VmpGetGptAttributesInternal@@YAJPEAVVM_VOLUME_EXTENSION@@PEA_KPEAE@Z
0x1C000DBD0: "long __cdecl VmpWholeDiskArrived(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpWholeDiskArrived@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C0005638: "\DosDevices\SystemPartition" ??_C@_1DI@IGMLHOPN@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000D960: "void __cdecl VmpCleanupVolumeExtension(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpCleanupVolumeExtension@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C0012030: "void __cdecl VmQueryDeviceName(void * __ptr64,unsigned short * __ptr64,unsigned long)" ?VmQueryDeviceName@@YAXPEAXPEAGK@Z
0x1C0005518: PARTITION_OS_DATA_GUID
0x1C000A098: "__cdecl _imp_IoPropagateIrpExtensionEx" __imp_IoPropagateIrpExtensionEx
0x1C0013C90: "long __cdecl VmpQueryCapabilities(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryCapabilities@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000CB50: "long __cdecl VmpPartitionRemoved(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPartitionRemoved@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C0004764: "unsigned char __cdecl VmpTestAcquireConfig(class VM_ROOT_EXTENSION * __ptr64)" ?VmpTestAcquireConfig@@YAEPEAVVM_ROOT_EXTENSION@@@Z
0x1C000A150: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C000F764: "long __cdecl VmpIsDynamic(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpIsDynamic@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A0C0: "__cdecl _imp_KeInitializeMutex" __imp_KeInitializeMutex
0x1C000A170: "__cdecl _imp_IoForwardIrpSynchronously" __imp_IoForwardIrpSynchronously
0x1C000A090: "__cdecl _imp_IoRegisterDriverReinitialization" __imp_IoRegisterDriverReinitialization
0x1C00023E8: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x1C0005528: PARTITION_MAIN_OS_GUID
0x1C0005C60: GUID_IO_VOLUME_PHYSICAL_CONFIGURATION_CHANGE
0x1C000A2E8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0005550: DEVPKEY_Device_SessionId
0x1C000A1C8: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C00055A8: "Partmgr" ??_C@_1BA@GCDFMKIH@?$AAP?$AAa?$AAr?$AAt?$AAm?$AAg?$AAr?$AA?$AA@
0x1C000FA94: "long __cdecl VmpExtensionDriverStarted(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpExtensionDriverStarted@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000A160: "__cdecl _imp_ObSetSecurityObjectByPointer" __imp_ObSetSecurityObjectByPointer
0x1C000A230: "__cdecl _imp_IoRegisterPlugPlayNotification" __imp_IoRegisterPlugPlayNotification
0x1C0003100: memcpy
0x1C000A038: "__cdecl _imp_IoRegisterDeviceInterface" __imp_IoRegisterDeviceInterface
0x1C000D190: "void __cdecl VmpApplyGptAttributes(class VM_VOLUME_EXTENSION * __ptr64,unsigned __int64)" ?VmpApplyGptAttributes@@YAXPEAVVM_VOLUME_EXTENSION@@_K@Z
0x1C00144D8: "long __cdecl VmpStoreGptAttributesRevertRecord(class VM_ROOT_EXTENSION * __ptr64,unsigned char,unsigned char,struct _GUID * __ptr64,struct _GUID * __ptr64,unsigned long,unsigned __int64)" ?VmpStoreGptAttributesRevertRecord@@YAJPEAVVM_ROOT_EXTENSION@@EEPEAU_GUID@@1K_K@Z
0x1C000A0D8: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C000A1E8: "__cdecl _imp_ZwFlushKey" __imp_ZwFlushKey
0x1C000A168: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C001373C: "long __cdecl VmpLogicalToPhysical(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpLogicalToPhysical@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000300D: "__cdecl _C_specific_handler" __C_specific_handler
0x1C000A290: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C000E250: "long __cdecl VmpCreateBasicDevice(struct _DEVICE_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _PARTITION_INFORMATION_EX * __ptr64,struct _DEVICE_OBJECT * __ptr64 * __ptr64)" ?VmpCreateBasicDevice@@YAJPEAU_DEVICE_OBJECT@@0PEAU_PARTITION_INFORMATION_EX@@PEAPEAU1@@Z
0x1C0003100: memmove
0x1C00020B0: "long __cdecl VmpSetPowerState(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpSetPowerState@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C00061A0: GUID_IO_VOLUME_UNIQUE_ID_CHANGE
0x1C0002CFC: "long __cdecl VmpZeroRefCallback(class VM_VOLUME_EXTENSION * __ptr64,long (__cdecl*)(class VM_VOLUME_EXTENSION * __ptr64,void * __ptr64),void * __ptr64)" ?VmpZeroRefCallback@@YAJPEAVVM_VOLUME_EXTENSION@@P6AJ0PEAX@Z1@Z
0x1C00053B0: DEVPKEY_Storage_Partition_Number
0x1C0005498: PARTITION_MSFT_RECOVERY_GUID
0x1C000A298: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C0002B94: "void __cdecl VmpReleaseDevices(class VM_ROOT_EXTENSION * __ptr64)" ?VmpReleaseDevices@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C000305C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000D8F4: "long __cdecl VmpWholeDiskRemovedImmediate(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64,unsigned char * __ptr64)" ?VmpWholeDiskRemovedImmediate@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@PEAE@Z
0x1C000A188: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0005608: "\Device\BootPartition" ??_C@_1CM@FHLJGBHL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAB?$AAo?$AAo?$AAt?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0006060: "HotplugSecureOpen" ??_C@_1CE@DJDFODLP@?$AAH?$AAo?$AAt?$AAp?$AAl?$AAu?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x1C0013D94: "long __cdecl VmpQueryMinimumShrinkSize(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryMinimumShrinkSize@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C00054D8: PARTITION_LDM_METADATA_GUID
0x1C0004610: "void * __ptr64 __cdecl VmFindNextDynamicExtension(void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?VmFindNextDynamicExtension@@YAPEAXPEAX0PEAPEAX@Z
0x1C000F8AC: "long __cdecl VmpIsPartition(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpIsPartition@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A250: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C0004DF0: "__cdecl TlgDefineProvider_annotation__TlgVmTelemetryProv" _TlgDefineProvider_annotation__TlgVmTelemetryProv
0x1C0013204: "void __cdecl VmpDereferenceMbrGptAttributes(class VM_VOLUME_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?VmpDereferenceMbrGptAttributes@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_DEVICE_OBJECT@@1@Z
0x1C0005538: DEVPKEY_Device_Numa_Node
0x1C000D9E0: VmVolumeDeviceNotification
0x1C000A2C0: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0012990: "long __cdecl VmpApplyServiceProtection(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpApplyServiceProtection@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C000CB00: "void __cdecl VmQueryBootInformation(void * __ptr64,struct _BOOTDISK_INFORMATION_LITE * __ptr64 * __ptr64)" ?VmQueryBootInformation@@YAXPEAXPEAPEAU_BOOTDISK_INFORMATION_LITE@@@Z
0x1C00056B0: "ROOT\VOLMGR" ??_C@_1BI@KLIFBCHP@?$AAR?$AAO?$AAO?$AAT?$AA?2?$AAV?$AAO?$AAL?$AAM?$AAG?$AAR?$AA?$AA@
0x1C0013408: "long __cdecl VmpFreeBCStream(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpFreeBCStream@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000ED9C: "long __cdecl VmpDiskGetGptAttributes(struct _DEVICE_OBJECT * __ptr64,unsigned __int64 * __ptr64)" ?VmpDiskGetGptAttributes@@YAJPEAU_DEVICE_OBJECT@@PEA_K@Z
0x1C0005FF8: "0000" ??_C@_19FBKLJMA@?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C000A0B8: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C0011F40: "void __cdecl VmFreezeBasicDeviceCreation(void * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?VmFreezeBasicDeviceCreation@@YAXPEAXPEAU_DEVICE_OBJECT@@@Z
0x1C000F7C8: "long __cdecl VmpDeviceUsageNotification(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64)" ?VmpDeviceUsageNotification@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@@Z
0x1C00055B8: DEVPKEY_Storage_Mbr_Type
0x1C000A2F0: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C000DCAC: "long __cdecl VmpIsRedirectionSupported(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpIsRedirectionSupported@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000A018: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0005410: GUID_DEVINTERFACE_SERVICE_VOLUME
0x1C0005250: "\DosDevices\Harddisk%dPartition%" ??_C@_1EE@DIDPHFJC@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$CF@
0x1C000FA1C: "long __cdecl VmpQuerySuggestedLinkName(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQuerySuggestedLinkName@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A180: "__cdecl _imp_IoRegisterLastChanceShutdownNotification" __imp_IoRegisterLastChanceShutdownNotification
0x1C000A050: "__cdecl _imp_IoBuildPartialMdl" __imp_IoBuildPartialMdl
0x1C0006160: "SMR\Volume" ??_C@_1BG@GCMJGDNI@?$AAS?$AAM?$AAR?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1C0005580: "%s#%016I64X" ??_C@_1BI@BIPGMFGN@?$AA?$CF?$AAs?$AA?$CD?$AA?$CF?$AA0?$AA1?$AA6?$AAI?$AA6?$AA4?$AAX?$AA?$AA@
0x1C000D7A0: "long __cdecl VmpCheckSecurity(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpCheckSecurity@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000D450: "long __cdecl VmpQueryInterfaceName(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryInterfaceName@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0011870: "void __cdecl VmAcquireAll(void * __ptr64)" ?VmAcquireAll@@YAXPEAX@Z
0x1C000A1C0: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C000A010: WMILIB_NULL_THUNK_DATA
0x1C000C9D4: "long __cdecl VmpDiskIsWritable(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpDiskIsWritable@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A028: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0005670: "\Device\SystemPartition" ??_C@_1DA@ONBCAIMM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000A060: "__cdecl _imp_RtlQueryRegistryValuesEx" __imp_RtlQueryRegistryValuesEx
0x1C000A350: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0001DA0: VmpRefCountCompletionRoutine
0x1C0006178: "SCM\Volume" ??_C@_1BG@KDONNAMP@?$AAS?$AAC?$AAM?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1C0002CB0: "void __cdecl VmpReleaseAll(class VM_ROOT_EXTENSION * __ptr64)" ?VmpReleaseAll@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C0003038: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00132AC: "class VM_VOLUME_EXTENSION * __ptr64 __cdecl VmpFindExtensionForPartition(class VM_ROOT_EXTENSION * __ptr64,unsigned long,unsigned __int64,unsigned __int64)" ?VmpFindExtensionForPartition@@YAPEAVVM_VOLUME_EXTENSION@@PEAVVM_ROOT_EXTENSION@@K_K1@Z
0x1C000A130: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C001226C: "long __cdecl VmpApplyEspProtection(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpApplyEspProtection@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00053F8: DEVPKEY_Storage_Gpt_Type
0x1C0005140: VOLMGR_VOLUME_MANAGER_GUID
0x1C000A1D8: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0011DE0: "long __cdecl VmCreatePendingDynamicDevice(void * __ptr64,void * __ptr64)" ?VmCreatePendingDynamicDevice@@YAJPEAX0@Z
0x1C00054F8: PARTITION_WINDOWS_SYSTEM_GUID
0x1C000A268: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C000A328: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00045B0: "public: static void * __ptr64 __cdecl VM_ALLOCATED_OBJECT::operator new(unsigned __int64,enum _POOL_TYPE)" ??2VM_ALLOCATED_OBJECT@@SAPEAX_KW4_POOL_TYPE@@@Z
0x1C000E818: "long __cdecl VmpPartitionArrivedImmediate(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _PARTITION_INFORMATION_EX * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64)" ?VmpPartitionArrivedImmediate@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@1PEAU_PARTITION_INFORMATION_EX@@PEAE3@Z
0x1C0012E10: "long __cdecl VmpCreateDynamicDevice(void * __ptr64,struct _GUID * __ptr64,unsigned __int64,struct _DEVICE_OBJECT * __ptr64 * __ptr64)" ?VmpCreateDynamicDevice@@YAJPEAXPEAU_GUID@@_KPEAPEAU_DEVICE_OBJECT@@@Z
0x1C0002DC0: "long __cdecl VmpChangeOfflineCallback(class VM_VOLUME_EXTENSION * __ptr64,void * __ptr64)" ?VmpChangeOfflineCallback@@YAJPEAVVM_VOLUME_EXTENSION@@PEAX@Z
0x1C000D678: "long __cdecl VmpReferenceDependantVolume(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpReferenceDependantVolume@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C0006008: "HotplugSecurityDescriptor" ??_C@_1DE@INGEEAKF@?$AAH?$AAo?$AAt?$AAp?$AAl?$AAu?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1C000A048: "__cdecl _imp_MmResetDriverPaging" __imp_MmResetDriverPaging
0x1C000F30C: "long __cdecl VmpOnline(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpOnline@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A210: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x1C00141CC: "void __cdecl VmpRevertGptAttributes(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpRevertGptAttributes@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C0004AC0: VmShutdown
0x1C000EE90: "long __cdecl VmpQueryResourceRequirements(struct _DEVICE_OBJECT * __ptr64,class VM_VOLUME_EXTENSION * __ptr64)" ?VmpQueryResourceRequirements@@YAJPEAU_DEVICE_OBJECT@@PEAVVM_VOLUME_EXTENSION@@@Z
0x1C0013EB4: "long __cdecl VmpQueryVolumeNumber(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryVolumeNumber@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A1B8: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C000C540: "long __cdecl VmpGetLengthInfo(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetLengthInfo@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A1A8: "__cdecl _imp_IoGetActivityIdIrp" __imp_IoGetActivityIdIrp
0x1C000CA54: "long __cdecl VmpQueryStableGuid(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryStableGuid@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0012100: "void __cdecl VmUnloadExtensionDriver(void * __ptr64)" ?VmUnloadExtensionDriver@@YAXPEAX@Z
0x1C000A2C8: "__cdecl _imp_MmPageEntireDriver" __imp_MmPageEntireDriver
0x1C000C850: "long __cdecl VmpQueryDeviceName(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryDeviceName@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0013364: "class VM_VOLUME_EXTENSION * __ptr64 __cdecl VmpFindExtensionForPendingDynamicVolume(class VM_ROOT_EXTENSION * __ptr64,void * __ptr64)" ?VmpFindExtensionForPendingDynamicVolume@@YAPEAVVM_VOLUME_EXTENSION@@PEAVVM_ROOT_EXTENSION@@PEAX@Z
0x1C0006090: "\Registry\Machine\System\Current" ??_C@_1HG@BJBJOOLC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00048C4: McTemplateK0jqxqq
0x1C00045E0: "void __cdecl VmBroadcastIrpCompletionRoutine(void * __ptr64,long)" ?VmBroadcastIrpCompletionRoutine@@YAXPEAXJ@Z
0x1C000A1F8: "__cdecl _imp_IoMakeAssociatedIrp" __imp_IoMakeAssociatedIrp
0x1C0002420: VmInternalDeviceControl
0x1C000A220: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C0001760: RtlStringCbPrintfW
0x1C0005C88: Microsoft_Windows_VolumeLevels
0x1C000A0F0: "__cdecl _imp_RtlCheckRegistryKey" __imp_RtlCheckRegistryKey
0x1C0002BB8: "void __cdecl VmpAcquireDevices(class VM_ROOT_EXTENSION * __ptr64)" ?VmpAcquireDevices@@YAXPEAVVM_ROOT_EXTENSION@@@Z
0x1C0004834: McTemplateK0jqxq
0x1C0005450: GUID_DEVCLASS_SMRDISK
0x1C000A248: "__cdecl _imp_SeReleaseSubjectContext" __imp_SeReleaseSubjectContext
0x1C001381C: "long __cdecl VmpOffline(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpOffline@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A1B0: "__cdecl _imp_KeReleaseMutex" __imp_KeReleaseMutex
0x1C000C918: "long __cdecl VmpGetVolumeDiskExtents(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetVolumeDiskExtents@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A178: "__cdecl _imp_IoSetDevicePropertyData" __imp_IoSetDevicePropertyData
0x1C000A0A0: "__cdecl _imp_IoInvalidateDeviceState" __imp_IoInvalidateDeviceState
0x1C000A1A0: "__cdecl _imp_IoGetDevicePropertyData" __imp_IoGetDevicePropertyData
0x1C0015010: GsDriverEntry
0x1C000A380: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000A208: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C0005460: "STORAGE\Volume" ??_C@_1BO@EABMGMIH@?$AAS?$AAT?$AAO?$AAR?$AAA?$AAG?$AAE?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1C0005350: "VOLMGR " ??_C@_1BC@KLFJKDCH@?$AAV?$AAO?$AAL?$AAM?$AAG?$AAR?$AA?5?$AA?5?$AA?$AA@
0x1C00054B8: PARTITION_DPP_GUID
0x1C0002DE0: VmpDeviceUsageNotificationCompletionRoutine
0x1C000F010: "long __cdecl VmpQueryDeviceNodeName(class VM_VOLUME_EXTENSION * __ptr64,unsigned short * __ptr64 * __ptr64)" ?VmpQueryDeviceNodeName@@YAJPEAVVM_VOLUME_EXTENSION@@PEAPEAG@Z
0x1C0011890: "void __cdecl VmAcquireDevices(void * __ptr64)" ?VmAcquireDevices@@YAXPEAX@Z
0x1C000CB20: VmQueryWmiRegInfo
0x1C00047D4: McGenEventWrite
0x1C000A360: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000A2B0: "__cdecl _imp_IoSetDeviceInterfacePropertyData" __imp_IoSetDeviceInterfacePropertyData
0x1C000CAC0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C000D9AC: "long __cdecl VmpIsCsv(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpIsCsv@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0002010: VmPower
0x1C000A120: "__cdecl _imp_IoGetFileObjectGenericMapping" __imp_IoGetFileObjectGenericMapping
0x1C00149F0: VmpProcessIrpQueueWorkerRoutine
0x1C0002550: "long __cdecl VmpStartDevice(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpStartDevice@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00056A0: GUID_DEVICE_INTERFACE_ARRIVAL
0x1C000EFEC: VmpIsVolumeDead
0x1C000FC8C: "long __cdecl VmpQueryRootId(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryRootId@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C0004660: "void __cdecl VmSetDevicePowerState(void * __ptr64,enum _DEVICE_POWER_STATE)" ?VmSetDevicePowerState@@YAXPEAXW4_DEVICE_POWER_STATE@@@Z
0x1C0002FD0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0005430: GUID_DEVINTERFACE_VOLUME
0x1C000DFE4: "long __cdecl VmpCreateDeviceObject(unsigned long,unsigned __int64,unsigned char,struct _DEVICE_OBJECT * __ptr64 * __ptr64)" ?VmpCreateDeviceObject@@YAJK_KEPEAPEAU_DEVICE_OBJECT@@@Z
0x1C0014700: "void __cdecl VmpUniqueIdNotify(class VM_VOLUME_EXTENSION * __ptr64,struct _MOUNTDEV_UNIQUE_ID * __ptr64)" ?VmpUniqueIdNotify@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_MOUNTDEV_UNIQUE_ID@@@Z
0x1C000A0B0: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C0005420: GUID_DEVINTERFACE_HIDDEN_VOLUME
0x1C000A390: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000A000: "__cdecl _imp_WmiSystemControl" __imp_WmiSystemControl
0x1C000CD34: "void __cdecl VmpDeleteLegacyNameLinks(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpDeleteLegacyNameLinks@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00054E8: PARTITION_LDM_DATA_GUID
0x1C000A260: "__cdecl _imp_IoReleaseVpbSpinLock" __imp_IoReleaseVpbSpinLock
0x1C0005F4F: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C0002C18: VmpRestoreExtensionDriver
0x1C0012C5C: "void __cdecl VmpCheckForRevertGptAttributes(class VM_ROOT_EXTENSION * __ptr64,unsigned char,unsigned char,struct _GUID * __ptr64,struct _GUID * __ptr64,unsigned long,void * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?VmpCheckForRevertGptAttributes@@YAXPEAVVM_ROOT_EXTENSION@@EEPEAU_GUID@@1KPEAXPEAU_DEVICE_OBJECT@@@Z
0x1C000CBD0: "long __cdecl VmpPartitionRemovedImmediate(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _PARTITION_INFORMATION_EX * __ptr64,unsigned char * __ptr64)" ?VmpPartitionRemovedImmediate@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@1PEAU_PARTITION_INFORMATION_EX@@PEAE@Z
0x1C0001FE0: "long __cdecl VmpNoOpCallback(class VM_VOLUME_EXTENSION * __ptr64,void * __ptr64)" ?VmpNoOpCallback@@YAJPEAVVM_VOLUME_EXTENSION@@PEAX@Z
0x1C0005380: DEVPKEY_Storage_Removable_Media
0x1C000F980: TraceLoggingRegisterEx
0x1C0005298: "\Device\Harddisk%d\Partition%d" ??_C@_1DO@HBNMGCKD@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AA?2?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$CF?$AAd?$AA?$AA@
0x1C0014BF0: VmpRemoveDevice
0x1C000A200: "__cdecl _imp_RtlValidSecurityDescriptor" __imp_RtlValidSecurityDescriptor
0x1C0008038: DiskperfGuidList
0x1C000EF58: "long __cdecl VmpApplySessionId(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpApplySessionId@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00118B0: "void __cdecl VmCommitDevices(void * __ptr64,unsigned long,struct _VM_DEVICE_CHANGE * __ptr64)" ?VmCommitDevices@@YAXPEAXKPEAU_VM_DEVICE_CHANGE@@@Z
0x1C000A310: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x1C0005398: DEVPKEY_Storage_Portable
0x1C000A218: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0002BE8: VmpPageExtensionDriver
0x1C0016000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000A148: "__cdecl _imp_IoVolumeDeviceToDosName" __imp_IoVolumeDeviceToDosName
0x1C0005000: "__cdecl load_config_used" _load_config_used
0x1C00055D0: "\DosDevices\BootPartition" ??_C@_1DE@CNDDGJDP@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAB?$AAo?$AAo?$AAt?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0011EE0: "void __cdecl VmDeletePendingDynamicDevice(void * __ptr64,void * __ptr64)" ?VmDeletePendingDynamicDevice@@YAXPEAX0@Z
0x1C000F8D0: "long __cdecl VmpQueryRegistryRevertEntries(class VM_ROOT_EXTENSION * __ptr64,class VM_GPT_ATTRIBUTES_REVERT_ENTRY * __ptr64 * __ptr64,unsigned long * __ptr64)" ?VmpQueryRegistryRevertEntries@@YAJPEAVVM_ROOT_EXTENSION@@PEAPEAVVM_GPT_ATTRIBUTES_REVERT_ENTRY@@PEAK@Z
0x1C000A318: "__cdecl _imp_RtlCheckPortableOperatingSystem" __imp_RtlCheckPortableOperatingSystem
0x1C0002180: "void __cdecl VmpRemove(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpRemove@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00047A0: McGenEventUnregister
0x1C0001FF0: "long __cdecl VmpSetAttributesCallback(class VM_VOLUME_EXTENSION * __ptr64,void * __ptr64)" ?VmpSetAttributesCallback@@YAJPEAVVM_VOLUME_EXTENSION@@PEAX@Z
0x1C000D048: "long __cdecl VmpUpdateProperties(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpUpdateProperties@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000A320: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000A3A4: "__cdecl _IMPORT_DESCRIPTOR_WMILIB" __IMPORT_DESCRIPTOR_WMILIB
0x1C0005318: "\Device\HarddiskVolume%d" ??_C@_1DC@NDLICJCE@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$CF?$AAd?$AA?$AA@
0x1C000DC40: "long __cdecl VmpWholeDiskArrivedImmediate(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64,unsigned char * __ptr64)" ?VmpWholeDiskArrivedImmediate@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@PEAE@Z
0x1C000F1E8: VmpRegisterDevice
0x1C000A198: "__cdecl _imp_IoReportDetectedDevice" __imp_IoReportDetectedDevice
0x1C000A2D0: "__cdecl _imp_SeLockSubjectContext" __imp_SeLockSubjectContext
0x1C000A1E0: IoFileObjectType
0x1C000EAB0: "long __cdecl VmpQueryDeviceId(class VM_VOLUME_EXTENSION * __ptr64,struct _UNICODE_STRING * __ptr64)" ?VmpQueryDeviceId@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_UNICODE_STRING@@@Z
0x1C000A2A8: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0013078: "void __cdecl VmpDeleteGptAttributesRevertRecord(class VM_ROOT_EXTENSION * __ptr64,unsigned char,unsigned char,struct _GUID * __ptr64,struct _GUID * __ptr64,unsigned long)" ?VmpDeleteGptAttributesRevertRecord@@YAXPEAVVM_ROOT_EXTENSION@@EEPEAU_GUID@@1K@Z
0x1C0013924: "long __cdecl VmpPerformance(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPerformance@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C00054C8: PARTITION_BSP_GUID
0x1C000A308: "__cdecl _imp_IoGetDeviceInterfaces" __imp_IoGetDeviceInterfaces
0x1C00046A0: "void __cdecl VmpProcessIrpQueueAtDispatchLevel(class VM_VOLUME_EXTENSION * __ptr64,struct _LIST_ENTRY * __ptr64)" ?VmpProcessIrpQueueAtDispatchLevel@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_LIST_ENTRY@@@Z
0x1C000A110: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C000DD70: "void __cdecl VmpCreateLegacyNameLinks(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpCreateLegacyNameLinks@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C0005FA0: "\DosDevices\Harddisk%dClusterPar" ??_C@_1FC@KHFONJDO@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAP?$AAa?$AAr@
0x1C000F50C: "void __cdecl VmpReleaseRundown(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpReleaseRundown@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C0003020: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000F890: "long __cdecl VmpPrepareForShrink(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPrepareForShrink@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0005110: "\Device\VolMgrControl" ??_C@_1CM@MLMNHEPI@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAV?$AAo?$AAl?$AAM?$AAg?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C00136F4: "long __cdecl VmpLinkDeleted(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpLinkDeleted@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C00061C8: ControlStart
0x1C000A368: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C000F890: "long __cdecl VmpPrepareForCriticalIo(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPrepareForCriticalIo@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000C648: "long __cdecl VmpGetPartitionInfoEx(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetPartitionInfoEx@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C00018E8: "void __cdecl VmpDecrementRefCount(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpDecrementRefCount@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C00061D8: ControlComplete
0x1C000FD58: "long __cdecl VmpPmWmiCounterLibContext(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPmWmiCounterLibContext@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C0006040: "Deny_Execute" ??_C@_1BK@CNPDEJDJ@?$AAD?$AAe?$AAn?$AAy?$AA_?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?$AA@
0x1C000FDD0: VmDriverReinitialization
0x1C000A338: "__cdecl _imp_IoInvalidateDeviceRelations" __imp_IoInvalidateDeviceRelations
0x1C0015078: VmAddDevice
0x1C0006268: "EnableCounterForIoctl" ??_C@_1CM@LIDLCCB@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAF?$AAo?$AAr?$AAI?$AAo?$AAc?$AAt?$AAl?$AA?$AA@
0x1C0005368: DEVPKEY_Storage_System_Critical
0x1C000DCC8: "long __cdecl VmpPartitionArrived(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPartitionArrived@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C00120E0: "void __cdecl VmReleaseDevices(void * __ptr64)" ?VmReleaseDevices@@YAXPEAX@Z
0x1C0005508: PARTITION_PRE_INSTALLED_GUID
0x1C000A078: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C000A270: "__cdecl _imp_SeUnlockSubjectContext" __imp_SeUnlockSubjectContext
0x1C000D884: "long __cdecl VmpWholeDiskRemoved(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpWholeDiskRemoved@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C00080A0: "__cdecl _security_cookie" __security_cookie
0x1C000D290: "void __cdecl VmpSetPartitionInformation(class VM_VOLUME_EXTENSION * __ptr64,struct _PARTITION_INFORMATION_EX * __ptr64)" ?VmpSetPartitionInformation@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_PARTITION_INFORMATION_EX@@@Z
0x1C000F5C4: "long __cdecl VmpQueryUniqueIdInternal(class VM_VOLUME_EXTENSION * __ptr64,unsigned short * __ptr64,unsigned char * __ptr64)" ?VmpQueryUniqueIdInternal@@YAJPEAVVM_VOLUME_EXTENSION@@PEAGPEAE@Z
0x1C0005C70: DiskPerfGuid
0x1C000266C: "void __cdecl VmpSetDevicePowerState(class VM_VOLUME_EXTENSION * __ptr64,enum _DEVICE_POWER_STATE)" ?VmpSetDevicePowerState@@YAXPEAVVM_VOLUME_EXTENSION@@W4_DEVICE_POWER_STATE@@@Z
0x1C0012544: "long __cdecl VmpApplyHotplugProtection(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpApplyHotplugProtection@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C000A348: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000A058: "__cdecl _imp_RtlAddProcessTrustLabelAce" __imp_RtlAddProcessTrustLabelAce
0x1C0001010: VmDeviceControl
0x1C000A0F8: "__cdecl _imp_IoAcquireVpbSpinLock" __imp_IoAcquireVpbSpinLock
0x1C0001BF0: VmFlushBuffers
0x1C0002EF0: McGenControlCallbackV2
0x1C000C010: VmPnp
0x1C0012000: "void * __ptr64 __cdecl VmQueryBasicExtension(void * __ptr64,unsigned long,unsigned __int64,unsigned __int64,struct _DEVICE_OBJECT * __ptr64 * __ptr64)" ?VmQueryBasicExtension@@YAPEAXPEAXK_K1PEAPEAU_DEVICE_OBJECT@@@Z
0x1C0004680: "void __cdecl VmVolumeRequestCompletionRoutine(struct _IRP * __ptr64)" ?VmVolumeRequestCompletionRoutine@@YAXPEAU_IRP@@@Z
0x1C000F260: VmWmiFunctionControl
0x1C00053E0: DEVPKEY_Storage_Gpt_Name
0x1C00051D0: "\Registry\Machine\System\Setup" ??_C@_1DO@PGOAJPNE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1C0014D84: VmpQueryEnableCountersAlways
0x1C000A070: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C000A228: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x1C000A240: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C000DAB8: "long __cdecl VmpGetDeviceObjectPointer(struct _UNICODE_STRING * __ptr64,struct _FILE_OBJECT * __ptr64 * __ptr64)" ?VmpGetDeviceObjectPointer@@YAJPEAU_UNICODE_STRING@@PEAPEAU_FILE_OBJECT@@@Z
0x1C0001E40: VmpSendDeviceControl
0x1C00149A0: VmpProcessDiskNotificationsWorkRoutine
0x1C000A118: "__cdecl _imp_IoGetBootDiskInformationLite" __imp_IoGetBootDiskInformationLite
0x1C0013EF4: "long __cdecl VmpRedirectRequest(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpRedirectRequest@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000F3FC: "void __cdecl VmpEtwControlComplete(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64,long)" ?VmpEtwControlComplete@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@J@Z
0x1C00080C0: Microsoft_Windows_VolumeEnableBits
0x1C0015044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0005150: "\DosDevices\VolMgrControl" ??_C@_1DE@LBEHHMLM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAV?$AAo?$AAl?$AAM?$AAg?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C0001E10: VmCreate
0x1C000E980: "long __cdecl VmpQueryId(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryId@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0005F50: "\Device\Harddisk%d\ClusterPartit" ??_C@_1EM@MKPNCKAM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAd?$AA?2?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt@
0x1C0002320: "long __cdecl VmpSetTargetCallback(class VM_VOLUME_EXTENSION * __ptr64,void * __ptr64)" ?VmpSetTargetCallback@@YAJPEAVVM_VOLUME_EXTENSION@@PEAX@Z
0x1C000A280: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000A040: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C000A1F0: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00139A4: "void __cdecl VmpPerformanceOff(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPerformanceOff@@YAXPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0006110: "{00000000-0000-0000-0000-0000000" ??_C@_1EO@NFBNALDE@?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1C000F798: "long __cdecl VmpLinkCreated(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpLinkCreated@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0005C80: Microsoft_Windows_VolumeKeywords
0x1C0002EB0: McGenEventRegister
0x1C0005238: "MiniNT" ??_C@_1O@BMELCLLB@?$AAM?$AAi?$AAn?$AAi?$AAN?$AAT?$AA?$AA@
0x1C00061F0: "\Registry\Machine\System\Current" ??_C@_1HI@IJCIGMPK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000A158: "__cdecl _imp_IoOpenDeviceRegistryKey" __imp_IoOpenDeviceRegistryKey
0x1C000EE00: "long __cdecl VmpQueryContainerId(class VM_VOLUME_EXTENSION * __ptr64,unsigned long,unsigned short * __ptr64)" ?VmpQueryContainerId@@YAJPEAVVM_VOLUME_EXTENSION@@KPEAG@Z
0x1C0004964: RtlStringCbCopyExW
0x1C0014960: VmUnload
0x1C000A1D0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C000F6E8: "long __cdecl VmpQueryDiskSignature(struct _DEVICE_OBJECT * __ptr64,unsigned long * __ptr64)" ?VmpQueryDiskSignature@@YAJPEAU_DEVICE_OBJECT@@PEAK@Z
0x1C0001F10: VmWmi
0x1C0001A00: VmReadWrite
0x1C0003000: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000C710: VmQueryWmiDataBlock
0x1C000A0D0: "__cdecl _imp_IoUnregisterPlugPlayNotification" __imp_IoUnregisterPlugPlayNotification
0x1C0005188: Microsoft_Windows_Volume
0x1C000A278: "__cdecl _imp_IoUnregisterShutdownNotification" __imp_IoUnregisterShutdownNotification
0x1C0013DC0: "long __cdecl VmpQueryVetoQueryRemove(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryVetoQueryRemove@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000A1E0: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C0012114: "long __cdecl VmpAllocateBCStream(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpAllocateBCStream@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0014AE0: VmpQueryHotplugProtectionQueryRoutine
0x1C0001800: "long __cdecl VmpAllSystemsGo(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64,unsigned char,unsigned char,unsigned char)" ?VmpAllSystemsGo@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@EEE@Z
0x1C00054A8: PARTITION_BASIC_DATA_GUID
0x1C001346C: "long __cdecl VmpGetBCProperties(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetBCProperties@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0012060: "void * __ptr64 __cdecl VmQueryDynamicExtension(void * __ptr64,void * __ptr64)" ?VmQueryDynamicExtension@@YAPEAXPEAX0@Z
0x1C0002144: "class VM_VOLUME_EXTENSION * __ptr64 __cdecl VmpFindExtensionForBasicVolume(class VM_ROOT_EXTENSION * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?VmpFindExtensionForBasicVolume@@YAPEAVVM_VOLUME_EXTENSION@@PEAVVM_ROOT_EXTENSION@@PEAU_DEVICE_OBJECT@@@Z
0x1C000A378: ntoskrnl_NULL_THUNK_DATA
0x1C000A330: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C000A020: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000A108: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C000A2A0: "__cdecl _imp_ZwOpenFile" __imp_ZwOpenFile
0x1C000A030: "__cdecl _imp_RtlSetSaclSecurityDescriptor" __imp_RtlSetSaclSecurityDescriptor
0x1C000A080: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C000A190: "__cdecl _imp_PoSetPowerState" __imp_PoSetPowerState
0x1C00135BC: "long __cdecl VmpGetPartitionInfo(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpGetPartitionInfo@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C000F530: "void __cdecl VmpAcquireRundown(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpAcquireRundown@@YAXPEAVVM_VOLUME_EXTENSION@@@Z
0x1C000A0E8: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00080B0: "class VM_ROOT_EXTENSION * __ptr64 __ptr64 VmRootExtension" ?VmRootExtension@@3PEAVVM_ROOT_EXTENSION@@EA
0x1C00026AC: "long __cdecl VmpInitializeInterfaces(class VM_VOLUME_EXTENSION * __ptr64)" ?VmpInitializeInterfaces@@YAJPEAVVM_VOLUME_EXTENSION@@@Z
0x1C0013A04: "long __cdecl VmpPhysicalToLogical(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPhysicalToLogical@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0015420: DriverEntry
0x1C000D3E4: VmpDeregisterDevice
0x1C000F560: "long __cdecl VmpQueryUniqueId(class VM_VOLUME_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpQueryUniqueId@@YAJPEAVVM_VOLUME_EXTENSION@@PEAU_IRP@@@Z
0x1C0005210: "SystemDriveLetter" ??_C@_1CE@CABEFIFN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AAL?$AAe?$AAt?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000A100: "__cdecl _imp_IoReportTargetDeviceChangeAsynchronous" __imp_IoReportTargetDeviceChangeAsynchronous
0x1C000FE30: VmBootDriverReinitialization
0x1C000A340: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0004D88: VmpIsSafeForDirectAccess
0x1C0006190: GUID_DEVINTERFACE_DISK
0x1C0005568: "IsDeleted" ??_C@_1BE@DCEALEOJ@?$AAI?$AAs?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?$AA@
0x1C0003440: memset
0x1C000A3B8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0014B80: VmpQueryRegistryRevertEntriesCallback
0x1C000D508: "long __cdecl VmpPartitionChanged(class VM_ROOT_EXTENSION * __ptr64,struct _IRP * __ptr64)" ?VmpPartitionChanged@@YAJPEAVVM_ROOT_EXTENSION@@PEAU_IRP@@@Z
0x1C000A258: "__cdecl _imp_IoGetDeviceProperty" __imp_IoGetDeviceProperty

[JEB Decompiler by PNF Software]