Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\hidir.sys Base=0x1C0000000 SHA-256=9E041F4E97DA4C779EEB2FFBFB6D5E1AA6DB5F36ABDD9DC308697C1F05144E03
PDB: hidir.pdb GUID={B71C0E21-6702-7808-106EE71F6DCB6B5E} Age=1
210 located named symbols:
0x1C000DBA0: HidIrReadDefaultWakeKeysFromRegistry
0x1C00025B0: WppClassicProviderCallback
0x1C000B418: HidIrReadDecoderCfg
0x1C0002490: HidIrPower
0x1C000A0A0: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C00074B0: "VendorID" ??_C@_1BC@NPAECANO@?$AAV?$AAe?$AAn?$AAd?$AAo?$AAr?$AAI?$AAD?$AA?$AA@
0x1C0007618: WPP_6eaf838bc85a3c152241e85b42c17f12_Traceguids
0x1C00074F8: HidIrHidDescriptor
0x1C0008018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000D650: WppTraceCallback
0x1C000A0F8: "__cdecl _imp_MmMapLockedPages" __imp_MmMapLockedPages
0x1C000A038: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x1C000A170: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0004598: HidParse_ParseReportDescriptor
0x1C0005E20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C000C9FC: HidIrReadRegULong
0x1C00071B8: "CodeBitLen" ??_C@_1BG@EPHMIGDP@?$AAC?$AAo?$AAd?$AAe?$AAB?$AAi?$AAt?$AAL?$AAe?$AAn?$AA?$AA@
0x1C000CAA0: HidIrReadRegULongOrULongLong
0x1C000A030: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C0007558: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000A098: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0007670: "DefaultWakePayload" ??_C@_1CG@JBIMCIAB@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAW?$AAa?$AAk?$AAe?$AAP?$AAa?$AAy?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1C0007320: "DataShiftBits" ??_C@_1BM@KCBNILAO@?$AAD?$AAa?$AAt?$AAa?$AAS?$AAh?$AAi?$AAf?$AAt?$AAB?$AAi?$AAt?$AAs?$AA?$AA@
0x1C0002B6C: WPP_SF_Ddi
0x1C00074E0: "\Remotes" ??_C@_1BC@MIAMFFGJ@?$AA?2?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAs?$AA?$AA@
0x1C00031C4: IsCheckSumValid
0x1C00035EC: ShouldSendInputBasedOnActiveInputDevice
0x1C00011CC: HidIrQueryKeyInfo
0x1C000A148: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C000A188: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00072A8: "ReportLength" ??_C@_1BK@MEDCMCPM@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1C0007360: "CodeSetNumShiftBits" ??_C@_1CI@IJIMHFKB@?$AAC?$AAo?$AAd?$AAe?$AAS?$AAe?$AAt?$AAN?$AAu?$AAm?$AAS?$AAh?$AAi?$AAf?$AAt?$AAB?$AAi?$AAt?$AAs?$AA?$AA@
0x1C000388C: HidIrCallAtPassiveIrql
0x1C000A168: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00076F0: "WakeProtocol" ??_C@_1BK@LOCEELNJ@?$AAW?$AAa?$AAk?$AAe?$AAP?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?$AA@
0x1C0007110: "ReportMappingTable" ??_C@_1CG@FLGCILMP@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAT?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1C000D054: HidIrStopCompletion
0x1C000A0C8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C00025F0: HidIrAddDevice
0x1C000A088: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000A068: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C000A108: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C000DB50: HidIrSystemControl
0x1C0005E40: memcpy
0x1C0007508: WPP_c1b09411ae2532aae416acfbb5d99158_Traceguids
0x1C00028C0: HidIrIoctl
0x1C000A158: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0008048: pfnWppGetVersion
0x1C000A0F0: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C0005E40: memmove
0x1C0004F20: HidParse_WriteUsageItem
0x1C000CF68: HidIrStopDevice
0x1C000A058: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0004304: HidIrWriteReport
0x1C0007178: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0005DAC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0004F9C: HidParse_WriteReportCollection
0x1C0007160: "Priority" ??_C@_1BC@JHNNEHFE@?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000A160: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C00072E8: "CodeMatchValue" ??_C@_1BO@ICFFDPNG@?$AAC?$AAo?$AAd?$AAe?$AAM?$AAa?$AAt?$AAc?$AAh?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1C0008080: WPP_MAIN_CB
0x1C000D1BC: HidIrCleanupDevice
0x1C0007340: "CodeSetNumMask" ??_C@_1BO@PMJJGHPG@?$AAC?$AAo?$AAd?$AAe?$AAS?$AAe?$AAt?$AAN?$AAu?$AAm?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x1C00071A0: "CodeSetID" ??_C@_1BE@PGNBIJLO@?$AAC?$AAo?$AAd?$AAe?$AAS?$AAe?$AAt?$AAI?$AAD?$AA?$AA@
0x1C000E090: HidIrWriteWakePatternToRegistryWorker
0x1C0007188: "DecoderID" ??_C@_1BE@IMAABOEA@?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AAr?$AAI?$AAD?$AA?$AA@
0x1C00027FC: HidIrCallDriverSynchronous
0x1C000A118: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0007388: "CheckSumOperation" ??_C@_1CE@MMCNGBNA@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAu?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000A018: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000CE14: HidIrStartCompletion
0x1C0008068: pfnWppQueryTraceInformation
0x1C000D3A0: HidIrPnP
0x1C00073B0: "CheckSumWordsMasks" ??_C@_1CG@FCIDOALK@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAu?$AAm?$AAW?$AAo?$AAr?$AAd?$AAs?$AAM?$AAa?$AAs?$AAk?$AAs?$AA?$AA@
0x1C0002CAC: WPP_SF_iD
0x1C0002D0C: WPP_SF_iq
0x1C0001428: MergeReportDescriptors
0x1C000A020: "__cdecl _imp_ExFreePool" __imp_ExFreePool
0x1C0001188: WPP_SF_i
0x1C0002DC8: HidIrIncrementPendingRequestCount
0x1C00071E8: "EnableDebounce" ??_C@_1BO@OFEFAODE@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAb?$AAo?$AAu?$AAn?$AAc?$AAe?$AA?$AA@
0x1C0005D88: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000DE68: HidIrReadWakePatternConfigurationFromRegistry
0x1C000A140: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C0007538: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000B25C: HidIrEnumKeyInfo
0x1C000A120: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C0005868: HidIrWriteWakePatternToRegistry
0x1C0008050: pfnEtwRegisterClassicProvider
0x1C00071D0: "CodeSetNum" ??_C@_1BG@OCINLMKM@?$AAC?$AAo?$AAd?$AAe?$AAS?$AAe?$AAt?$AAN?$AAu?$AAm?$AA?$AA@
0x1C0007280: "EnablePassThrough" ??_C@_1CE@BANGGJHH@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAa?$AAs?$AAs?$AAT?$AAh?$AAr?$AAo?$AAu?$AAg?$AAh?$AA?$AA@
0x1C000A080: "__cdecl _imp_IoGetDriverObjectExtension" __imp_IoGetDriverObjectExtension
0x1C0001008: WPP_SF_
0x1C0007138: "ExtraReportMappings" ??_C@_1CI@LPKOBCLH@?$AAE?$AAx?$AAt?$AAr?$AAa?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x1C0008058: pfnEtwUnregister
0x1C000A060: "__cdecl _imp_RtlIntegerToUnicodeString" __imp_RtlIntegerToUnicodeString
0x1C000B0F8: HidIrQueryDeviceKey
0x1C000F310: GsDriverEntry
0x1C000A180: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000A070: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C0007408: "CheckSumResultsMasks" ??_C@_1CK@JIDAHPOB@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAu?$AAm?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AAM?$AAa?$AAs?$AAk?$AAs?$AA?$AA@
0x1C0007608: WPP_d7eadfba9a183a4f5ff544e62b8558e0_Traceguids
0x1C0007438: "CheckSumResultsShiftBits" ??_C@_1DC@NMEPCHCA@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAu?$AAm?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AAS?$AAh?$AAi?$AAf?$AAt?$AAB?$AAi?$AAt?$AAs?$AA?$AA@
0x1C000B338: HidIrEnumValueKeyInfo
0x1C000A0B0: "__cdecl _imp_KeResetEvent" __imp_KeResetEvent
0x1C0001078: WPP_SF_DD
0x1C0001130: WPP_SF_dd
0x1C0008000: WPP_GLOBAL_Control
0x1C000A010: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0001034: WPP_SF_D
0x1C0001034: WPP_SF_d
0x1C000588C: ProgramDeviceForWake
0x1C000A130: "__cdecl _imp_PoSetSystemState" __imp_PoSetSystemState
0x1C00018D8: HidIrReadBaseReportMappingTables
0x1C00013C4: GetAvailableReportId
0x1C0007728: "WakeAddress" ??_C@_1BI@NPJHCLHP@?$AAW?$AAa?$AAk?$AAe?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0005D30: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0007528: WPP_2a57527218b732d837b71e7324df7ea3_Traceguids
0x1C0007250: "EnableVendorPassThrough" ??_C@_1DA@OOLJNOOI@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAV?$AAe?$AAn?$AAd?$AAo?$AAr?$AAP?$AAa?$AAs?$AAs?$AAT?$AAh?$AAr?$AAo?$AAu?$AAg?$AAh?$AA?$AA@
0x1C000A028: "__cdecl _imp_ZwQueryKey" __imp_ZwQueryKey
0x1C000E3A0: HidIrProgramDeviceWorker
0x1C00076C0: "DontChangeWakePattern" ??_C@_1CM@MONCODN@?$AAD?$AAo?$AAn?$AAt?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAW?$AAa?$AAk?$AAe?$AAP?$AAa?$AAt?$AAt?$AAe?$AAr?$AAn?$AA?$AA@
0x1C000A000: "__cdecl _imp_HidRegisterMinidriver" __imp_HidRegisterMinidriver
0x1C000A008: HIDCLASS_NULL_THUNK_DATA
0x1C000A190: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0002E40: HidIrDecrementPendingRequestCount
0x1C0002C44: WPP_SF_diq
0x1C00010C8: WPP_SF_Dqq
0x1C0007208: "ForceUniqueReport" ??_C@_1CE@CDGIPJNK@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAU?$AAn?$AAi?$AAq?$AAu?$AAe?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x1C000B008: HidIrStartDevice
0x1C0007518: WPP_ThisDir_CTLGUID_HIDIRTRACE
0x1C000A1A4: "__cdecl _IMPORT_DESCRIPTOR_HIDCLASS" __IMPORT_DESCRIPTOR_HIDCLASS
0x1C000D934: WppCleanupKm
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0007638: WPP_a835b64138dc3191425860e1913a2ab8_Traceguids
0x1C0007000: "__cdecl load_config_used" _load_config_used
0x1C0002EBC: HidIrGetUsageEntry
0x1C000221C: HidIrSortDecodersByPriority
0x1C000C5B8: HidIrReadAllDecoderCfg
0x1C000A050: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C00059E8: SetDeviceWakePattern
0x1C0007230: "DataSwapBytes" ??_C@_1BM@NDJBIEAE@?$AAD?$AAa?$AAt?$AAa?$AAS?$AAw?$AAa?$AAp?$AAB?$AAy?$AAt?$AAe?$AAs?$AA?$AA@
0x1C0007308: "DataMask" ??_C@_1BC@OIEILEKD@?$AAD?$AAa?$AAt?$AAa?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x1C0005BE4: InferWakePatternBasedOnButtonCode
0x1C00072C8: "CodeMatchMask" ??_C@_1BM@CGIOCBOF@?$AAC?$AAo?$AAd?$AAe?$AAM?$AAa?$AAt?$AAc?$AAh?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x1C0001F78: HidIrReadAdditionalReportMappings
0x1C000A0D8: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0007578: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00075E8: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0007710: "WakePayload" ??_C@_1BI@KKLLGHCK@?$AAW?$AAa?$AAk?$AAe?$AAP?$AAa?$AAy?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1C0007698: "DefaultWakeAddress" ??_C@_1CG@OEKAGEFE@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAW?$AAa?$AAk?$AAe?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0007740: WPP_2fcf95d86ed932cb43fb569e3fd84603_Traceguids
0x1C0005D70: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000A150: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C00074C8: "ProductID" ??_C@_1BE@FJHADIDG@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAD?$AA?$AA@
0x1C000D508: WppLoadTracingSupport
0x1C000A0B8: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001270: UpdateMappingTable
0x1C00080C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwirevihUrmkfgUsrwUnrmrklighUsrwriUlyquivUznwGEUkxsOlyq@hidir" __@@_PchSym_@00@KxulyqvxgPillgKxuwirevihUrmkfgUsrwUnrmrklighUsrwriUlyquivUznwGEUkxsOlyq@hidir
0x1C0007648: "DefaultWakeProtocol" ??_C@_1CI@CODHNBIG@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAW?$AAa?$AAk?$AAe?$AAP?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?$AA@
0x1C0005804: WPP_SF_DDD
0x1C0002D64: WPP_SF_iqi
0x1C0002F84: HidIrFindDecoder
0x1C000A100: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0002BD4: WPP_SF_dDDD
0x1C000CB5C: HidIrInitDevice
0x1C0008010: "__cdecl _security_cookie" __security_cookie
0x1C000A090: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C000A040: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000A0C0: "__cdecl _imp_IoAllocateDriverObjectExtension" __imp_IoAllocateDriverObjectExtension
0x1C00075B0: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0002710: HidIrUnload
0x1C000308C: GetHammingCheckSum
0x1C0007470: "ReportDescriptor" ??_C@_1CC@JDLLFGNN@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1C0001A98: HidIrAddAdditionalReportMapping
0x1C000A0E0: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C000A138: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C000F344: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0001188: WPP_SF_q
0x1C000A0D0: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C000D26C: HidIrRemoveDevice
0x1C000A110: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0008040: WPPTraceSuite
0x1C000A0E8: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000D9B4: HidIrGetHidDescriptor
0x1C000DA9C: HidIrGetDeviceAttributes
0x1C0007498: "\Parameters" ??_C@_1BI@BPNCJPFJ@?$AA?2?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C000A078: "__cdecl _imp_IoOpenDeviceRegistryKey" __imp_IoOpenDeviceRegistryKey
0x1C0007628: WPP_c1561071878235ab1a8e7f33cc97703f_Traceguids
0x1C0005D60: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000A0A8: "__cdecl _imp_PoCallDriver" __imp_PoCallDriver
0x1C000A128: "__cdecl _imp_KeReadStateTimer" __imp_KeReadStateTimer
0x1C00027D0: HidIrSynchronousCompletion
0x1C000A178: ntoskrnl_NULL_THUNK_DATA
0x1C0003970: HidIrReadCompletion
0x1C00073D8: "CheckSumWordsShiftBits" ??_C@_1CO@PCHIFPME@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAu?$AAm?$AAW?$AAo?$AAr?$AAd?$AAs?$AAS?$AAh?$AAi?$AAf?$AAt?$AAB?$AAi?$AAt?$AAs?$AA?$AA@
0x1C000F008: DriverEntry
0x1C00040F0: HidIrReadReport
0x1C0008060: pfnWppTraceMessage
0x1C000A048: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C000D8A4: WppInitKm
0x1C0006180: memset
0x1C000A1B8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]