Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\scfilter.sys Base=0x1C0000000 SHA-256=8F346C7A7D743436636EFB321F24873A3F4B764681D05C82D1B30D2D18EDC5BD
PDB: scfilter.pdb GUID={1A1553DB-35D6-3B77-270D58F15F89189F} Age=1

172 located named symbols:
0x1C00011E0: "void __cdecl FxStubInitTypes(void)" ?FxStubInitTypes@@YAXXZ
0x1C0009CF0: WdfDriverGlobals
0x1C0001880: WppClassicProviderCallback
0x1C00082C8: "ds\security\scard\scpnp\filter\s" ??_C@_0CK@HBAEHJCG@ds?2security?2scard?2scpnp?2filter?2s@
0x1C000C020: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0009068: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000D150: WppTraceCallback
0x1C00083C8: "ScFilter" ??_C@_1BE@NEIPNOLA@?$AAS?$AAc?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA?$AA?$AA@
0x1C0008328: WPP_e42fbf8647683a499c99c8468e72a72c_Traceguids
0x1C0006D00: mbtowc
0x1C000C080: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0006F20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00056D0: "__cdecl vsnwprintf" _vsnwprintf
0x1C0008430: "%02d" ??_C@_19MNDKMKJC@?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x1C0001250: RtlStringCbPrintfA
0x1C000D4C0: WdfScFilter_EvtDeviceAdd
0x1C0008200: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000C028: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1C0001364: WppTraceIndent
0x1C0006EE0: WdfVersionUnbind
0x1C000C098: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0001060: FxStubDriverMiniportUnload
0x1C000C058: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000C0B4: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C00081B0: " " ??_C@_01CLKCMJKC@?5?$AA@
0x1C00042F8: WdfScFilter_GetReaderSlotByReaderId
0x1C0009F20: WPP_pszIndent
0x1C00057EC: "__cdecl vsnprintf_l" _vsnprintf_l
0x1C00083E0: "D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;G" ??_C@_1FA@FAPEJCAI@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG@
0x1C000C050: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x1C0006F40: memcpy
0x1C0009088: "void * __ptr64 * __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PAPEAXA
0x1C0009080: "void * __ptr64 * __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3PAPEAXA
0x1C0009F30: pfnWppGetVersion
0x1C0008360: "{892EDE5E-BE49-443c-A0B3-005D74F" ??_C@_1GC@KGMAMCKM@?$AA?$HL?$AA8?$AA9?$AA2?$AAE?$AAD?$AAE?$AA5?$AAE?$AA?9?$AAB?$AAE?$AA4?$AA9?$AA?9?$AA4?$AA4?$AA3?$AAc?$AA?9?$AAA?$AA0?$AAB?$AA3?$AA?9?$AA0?$AA0?$AA5?$AAD?$AA7?$AA4?$AAF@
0x1C0006F40: memmove
0x1C000C070: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0006D78: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000A160: WPP_MAIN_CB
0x1C00081B4: "<" ??_C@_01MNNFJEPP@?$DM?$AA@
0x1C0003850: WdfScFilter_EvtChildListIdentificationDescriptionCompare
0x1C0008190: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C000C010: WDFLDR_NULL_THUNK_DATA
0x1C0006F00: WdfVersionBind
0x1C00081B8: "SC_FILTER_DEVICE_CONTEXT" ??_C@_0BJ@LCAJFBF@SC_FILTER_DEVICE_CONTEXT?$AA@
0x1C00012C8: StringCbCatA
0x1C00082AC: "%s %d" ??_C@_05DIALNFFA@?$CFs?5?$CFd?$AA@
0x1C000C078: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00057D0: "__cdecl vsnprintf" _vsnprintf
0x1C000A148: pfnWppQueryTraceInformation
0x1C000630C: "__cdecl output_l" _output_l
0x1C000C030: "__cdecl _imp_strncmp" __imp_strncmp
0x1C00084C8: WPP_30a85a8e37f63a7fb65b6bf12c061b5f_Traceguids
0x1C00084A8: "SCFILTER\CID_" ??_C@_1BM@FJLLDNKB@?$AAS?$AAC?$AAF?$AAI?$AAL?$AAT?$AAE?$AAR?$AA?2?$AAC?$AAI?$AAD?$AA_?$AA?$AA@
0x1C0002B90: WdfScFilter_EvtIoDeviceControl
0x1C0001AB0: WdfScFilter_EvtFileClose
0x1C0009F40: "`WppTraceIndent'::`2'::ThreadTable" ?ThreadTable@?1??WppTraceIndent@@9@9
0x1C0006D54: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0008338: GUID_DEVCLASS_SMARTCARDREADER
0x1C00081E0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0009070: "__cdecl _mb_cur_max" __mb_cur_max
0x1C0006EAC: "__cdecl flswbuf" _flswbuf
0x1C0005640: RtlStringLengthWorkerW
0x1C0008440: "Sc_Filter_%02d" ??_C@_1BO@PKBLMNJJ@?$AAS?$AAc?$AA_?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA_?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x1C0003550: WdfScFilter_EvtChildListIdentificationDescriptionDuplicate
0x1C0008118: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1C0008348: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0009F18: pfnEtwRegisterClassicProvider
0x1C000A158: gbl_errno
0x1C00056EC: "__cdecl vsnwprintf_l" _vsnwprintf_l
0x1C0008468: "%S_%s" ??_C@_1M@PEHGNCKO@?$AA?$CF?$AAS?$AA_?$AA?$CF?$AAs?$AA?$AA@
0x1C0003A40: WdfScFilter_EvtChildListIdentificationDescriptionCleanup
0x1C000C068: "__cdecl _imp_RtlUnicodeToMultiByteN" __imp_RtlUnicodeToMultiByteN
0x1C0005450: WdfScFilter_IsDeviceNodePresentInChildList
0x1C000D8C0: WdfScFilter_EvtDriverUnload
0x1C000A150: pfnEtwUnregister
0x1C00081AC: ">" ??_C@_01PPODPGHN@?$DO?$AA@
0x1C0009F08: WdfClassExtensionList
0x1C00018C0: WdfScFilter_EvtDeviceFileCreate
0x1C000C008: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C000F250: GsDriverEntry
0x1C000C090: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00081D4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C000C000: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C00081A8: ".." ??_C@_02DJGKEECL@?4?4?$AA@
0x1C0006E90: wctomb_s
0x1C0008460: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x1C0009058: WPP_GLOBAL_Control
0x1C0008110: "(null)" ??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
0x1C0008130: "__cdecl _lookuptable" __lookuptable
0x1C0001FD0: WdfScFilter_GetReaderSlotByFileObject
0x1C0005690: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00090B0: WdfFunctions
0x1C000C0A0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000E440: WdfScFilter_EvtDeviceListCreateSmartCardDeviceNode
0x1C0006ECE: RtlUnicodeToMultiByteN
0x1C0006C94: "__cdecl get_printf_count_output" _get_printf_count_output
0x1C0009CC8: typeWDF_IFR_HEADER
0x1C000C038: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x1C0006DE0: "__cdecl wctomb_s_l" _wctomb_s_l
0x1C0006300: "__cdecl invalid_parameter" _invalid_parameter
0x1C000D434: WppCleanupKm
0x1C0009074: "`WppTraceIndent'::`2'::idxCurrentThread" ?idxCurrentThread@?1??WppTraceIndent@@9@9
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0008308: GUID_DEVINTERFACE_SCFILTER
0x1C0008000: "__cdecl load_config_used" _load_config_used
0x1C0001070: FxStubDriverUnload
0x1C0003E10: WdfScFilter_GetReaderIdMultiString
0x1C000DDD8: WdfScFilter_CreateRawPdo
0x1C000A1A0: "`WppTraceIndent'::`2'::szIndentPrefix" ?szIndentPrefix@?1??WppTraceIndent@@9@9
0x1C0004670: WdfScFilter_EvtIoDeviceControlForRawPdo
0x1C0008220: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0001D74: WdfScFilter_RecordReaderId
0x1C0006EBC: RtlAnsiCharToUnicodeChar
0x1C000C018: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x1C0008290: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C00082F8: GUID_DEVINTERFACE_SMARTCARD
0x1C0006300: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000D008: WppLoadTracingSupport
0x1C000C040: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001010: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C00082B8: "%s %s %d" ??_C@_08EKMEAIFO@?$CFs?5?$CFs?5?$CFd?$AA@
0x1C00016F8: WPP_SF_sqs
0x1C00010A0: FxDriverEntry
0x1C0009060: "__cdecl _security_cookie" __security_cookie
0x1C0002760: WdfScFilter_EvtFileCreateCompletionRoutine
0x1C00058A8: "__cdecl woutput_l" _woutput_l
0x1C0009030: "__cdecl WDF_SC_FILTER_DEVICE_CONTEXT_TYPE_INFO" _WDF_SC_FILTER_DEVICE_CONTEXT_TYPE_INFO
0x1C00032F8: RtlUnicodeStringPrintf
0x1C00084E0: "__stdcall _xmm" __xmm@00000002000000020000000200000002
0x1C0008318: WPP_ThisDir_CTLGUID_ScFilterControlGuid
0x1C0008258: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00021D0: WdfScFilter_EvtIoCompletionRoutine
0x1C000D9AC: WdfScFilter_CreateDeviceNode
0x1C0005898: "__cdecl flsbuf" _flsbuf
0x1C0003B40: WdfScFilter_RemoveChildNodeByReaderName
0x1C000F210: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000A140: WPPTraceSuite
0x1C0003478: WPP_SF_ssq
0x1C000165C: WPP_SF_sqq
0x1C00056C0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0009F10: ulInstanceNo
0x1C000C060: "__cdecl _imp_RtlAnsiCharToUnicodeChar" __imp_RtlAnsiCharToUnicodeChar
0x1C000C088: ntoskrnl_NULL_THUNK_DATA
0x1C000C048: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0008478: "ds\security\scard\scpnp\filter\s" ??_C@_0CK@DCJGFNDO@ds?2security?2scard?2scpnp?2filter?2s@
0x1C000F008: DriverEntry
0x1C000154C: WPP_SF_sl
0x1C000154C: WPP_SF_sD
0x1C000154C: WPP_SF_sd
0x1C0006CB4: "__cdecl fputwc_nolock" _fputwc_nolock
0x1C00015D0: WPP_SF_sP
0x1C00015D0: WPP_SF_sq
0x1C00033A8: WPP_SF_sS
0x1C00017C4: WPP_SF_ss
0x1C0009F28: pfnWppTraceMessage
0x1C000D3A4: WppInitKm
0x1C00014DC: WPP_SF_s
0x1C0007280: memset
0x1C000C0C8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]