Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\WdfLdr.sys Base=0x1C0000000 SHA-256=A74C177939637848860FEF5F22443997BE6DB8FEB40D5BCB0BB007FA16EBE04F
PDB: wdfldr.pdb GUID={A6E880D2-0104-A7DA-068A6C6F028B34FD} Age=1
1241 located named symbols:
0x1C0007760: "EtwSetInformation" ??_C@_1CE@LEDGMLHF@?$AAE?$AAt?$AAw?$AAS?$AAe?$AAt?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0007290: "\Registry\Machine\System\Current" ??_C@_1JA@FPEFCLKB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007860: "WdfLdr: WdfLdrOpenRegistryDiagno" ??_C@_0CP@JAMPCJIJ@WdfLdr?3?5WdfLdrOpenRegistryDiagno@
0x1C0007430: "ERROR: ZwOpenKey (%wZ) failed wi" ??_C@_0DA@HKDMKAHM@ERROR?3?5ZwOpenKey?5?$CI?$CFwZ?$CJ?5failed?5wi@
0x1C0007890: "WdfLdr: FxLdrQueryUlong - " ??_C@_0BL@MIGFHFKB@WdfLdr?3?5FxLdrQueryUlong?5?9?5?$AA@
0x1C00078B0: "ERROR: ZwQueryValueKey failed wi" ??_C@_0DA@FMLONGCI@ERROR?3?5ZwQueryValueKey?5failed?5wi@
0x1C00078E0: "WdfLdr: WdfLdrDiagnosticsValueBy" ??_C@_0CP@HBCPKGNO@WdfLdr?3?5WdfLdrDiagnosticsValueBy@
0x1C0007910: "ERROR: Invalid Input Parameter
" ??_C@_0CA@MOOMLJA@ERROR?3?5Invalid?5Input?5Parameter?6?$AA@
0x1C0007930: "ERROR: Not at PASSIVE_LEVEL
" ??_C@_0BN@DJMKHMOC@ERROR?3?5Not?5at?5PASSIVE_LEVEL?6?$AA@
0x1C0007950: "ERROR: WdfLdrOpenRegistryDiagnos" ??_C@_0EE@KGBNLONI@ERROR?3?5WdfLdrOpenRegistryDiagnos@
0x1C0007998: "Value 0x%x
" ??_C@_0M@BKFGFIGO@Value?50x?$CFx?6?$AA@
0x1C00079A8: "Status 0x%x
" ??_C@_0N@KABADPOL@Status?50x?$CFx?6?$AA@
0x1C0007140: "DbgPrintOn" ??_C@_1BG@JGHGMAEI@?$AAD?$AAb?$AAg?$AAP?$AAr?$AAi?$AAn?$AAt?$AAO?$AAn?$AA?$AA@
0x1C00079B8: "WdfLdr: FxDllInitialize - " ??_C@_0BL@MKMJKIEK@WdfLdr?3?5FxDllInitialize?5?9?5?$AA@
0x1C00079D8: "ERROR: AuxKlibInitialize failed " ??_C@_0DC@GPNJNIII@ERROR?3?5AuxKlibInitialize?5failed?5@
0x1C0007120: "RtlGetVersion" ??_C@_1BM@GAJDMBHG@?$AAR?$AAt?$AAl?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0007A10: "OsVersion(%d.%d)
" ??_C@_0BC@GHJFJFP@OsVersion?$CI?$CFd?4?$CFd?$CJ?6?$AA@
0x1C0007A28: "WdfLdr: DllUnload - " ??_C@_0BF@PGIODBEA@WdfLdr?3?5DllUnload?5?9?5?$AA@
0x1C0007A40: "WdfLdr: DllUnload: enter
" ??_C@_0BK@JCDPELHM@WdfLdr?3?5DllUnload?3?5enter?6?$AA@
0x1C0007A60: "WdfLdr: DllUnload: module(%p)
" ??_C@_0BP@MGPPCD@WdfLdr?3?5DllUnload?3?5module?$CI?$CFp?$CJ?6?$AA@
0x1C0007A80: "WdfLdr: DllUnload: exit
" ??_C@_0BJ@LKMBNJAL@WdfLdr?3?5DllUnload?3?5exit?6?$AA@
0x1C0007158: "ImagePath" ??_C@_1BE@CMLCLKJK@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1C0007AA0: "WdfLdr: GetImageName - " ??_C@_0BI@HKLILHGD@WdfLdr?3?5GetImageName?5?9?5?$AA@
0x1C0007AB8: "ERROR: GetImageName failed with " ??_C@_0CN@MOGKPFPI@ERROR?3?5GetImageName?5failed?5with?5@
0x1C0007AE8: "ERROR: GetNameFromPathW could no" ??_C@_0DM@GFMNHAIM@ERROR?3?5GetNameFromPathW?5could?5no@
0x1C0007B28: "ERROR: size computation failed w" ??_C@_0DB@JKIKBEA@ERROR?3?5size?5computation?5failed?5w@
0x1C0007460: "ERROR: ExAllocatePoolWithTag fai" ??_C@_0DG@OOIBEEFC@ERROR?3?5ExAllocatePoolWithTag?5fai@
0x1C0007B60: "Version Image Name "%wZ"
" ??_C@_0BK@PNBLBKPH@Version?5Image?5Name?5?$CC?$CFwZ?$CC?6?$AA@
0x1C00071E0: "\Registry\Machine\System\Current" ??_C@_1JA@MLGADHEJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007498: "WdfLdr: GetVersionRegistryHandle" ??_C@_0CE@BNNGAPKI@WdfLdr?3?5GetVersionRegistryHandle@
0x1C00074C0: "ERROR: RtlUnicodeStringPrintf fa" ??_C@_0DH@IALEJJMB@ERROR?3?5RtlUnicodeStringPrintf?5fa@
0x1C00074F8: "Component path %wZ
" ??_C@_0BE@DJFCAKFF@Component?5path?5?$CFwZ?6?$AA@
0x1C0007510: "ERROR: ConvertUlongToWString fai" ??_C@_0DG@DMDCKPOP@ERROR?3?5ConvertUlongToWString?5fai@
0x1C0007B80: "WdfLdr: GetDefaultServiceName - " ??_C@_0CB@JGJLJBFC@WdfLdr?3?5GetDefaultServiceName?5?9?5@
0x1C0007BA8: "ERROR: ExAllocatePoolWithTag fai" ??_C@_0DG@FNPPAPKH@ERROR?3?5ExAllocatePoolWithTag?5fai@
0x1C0007BE0: "\Registry\Machine\System\Current" ??_C@_1HO@BMFPAFN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007C60: "ERROR: RtlUnicodeStringCopyStrin" ??_C@_0DL@EBMELOLG@ERROR?3?5RtlUnicodeStringCopyStrin@
0x1C0007CA0: "Couldn't find control Key -- usi" ??_C@_0DN@FHKPBNKM@Couldn?8t?5find?5control?5Key?5?9?9?5usi@
0x1C0007548: "WdfLdr: BuildServicePath - " ??_C@_0BM@HJGJOHBI@WdfLdr?3?5BuildServicePath?5?9?5?$AA@
0x1C0007568: "ERROR: BuildServicePath failed w" ??_C@_0DB@LKKJDDJB@ERROR?3?5BuildServicePath?5failed?5w@
0x1C0007170: "\Registry\Machine\System\Current" ??_C@_1HA@NMPOIHF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007270: "Service" ??_C@_1BA@IELBACJJ@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C0007CE0: "WdfLdr: GetVersionServicePath - " ??_C@_0CB@BOMNCBML@WdfLdr?3?5GetVersionServicePath?5?9?5@
0x1C0007D08: "ERROR: QueryData failed with sta" ??_C@_0CK@FJNLDFGB@ERROR?3?5QueryData?5failed?5with?5sta@
0x1C0007D38: "ERROR: GetVersionRegistryHandle " ??_C@_0DJ@LOANDHEE@ERROR?3?5GetVersionRegistryHandle?5@
0x1C0007D78: "GetVersionServicePath (%wZ)
" ??_C@_0BN@CCGILOAK@GetVersionServicePath?5?$CI?$CFwZ?$CJ?6?$AA@
0x1C0007D98: "ERROR: GetVersionServicePath fai" ??_C@_0DG@JIMJIMLK@ERROR?3?5GetVersionServicePath?5fai@
0x1C0007DD0: "WdfLdr: FindModuleByClientServic" ??_C@_0CP@CBKDDDGB@WdfLdr?3?5FindModuleByClientServic@
0x1C0007E00: "WdfLdr: FindModuleByClientServic" ??_C@_0FL@FIKBDDDH@WdfLdr?3?5FindModuleByClientServic@
0x1C0007E60: "WdfLdr: ReferenceVersion - " ??_C@_0BM@MHIKMCGK@WdfLdr?3?5ReferenceVersion?5?9?5?$AA@
0x1C0007E80: "ERROR: GetVersionServicePath fai" ??_C@_0DC@BADPLCBJ@ERROR?3?5GetVersionServicePath?5fai@
0x1C0007EB8: "WARNING: ZwLoadDriver (%wZ) fail" ??_C@_0DF@GGIOGDFE@WARNING?3?5ZwLoadDriver?5?$CI?$CFwZ?$CJ?5fail@
0x1C0007EF0: "WdfLdr: ReferenceVersion: ZwLoad" ??_C@_0GA@IHNAKPBD@WdfLdr?3?5ReferenceVersion?3?5ZwLoad@
0x1C0007F50: "WdfLdr: ReferenceClassVersion - " ??_C@_0CB@MNPAGCDP@WdfLdr?3?5ReferenceClassVersion?5?9?5@
0x1C0007F78: "ERROR: GetClassServicePath faile" ??_C@_0DA@POLCEOHH@ERROR?3?5GetClassServicePath?5faile@
0x1C0007FB0: "WdfLdr: ReferenceClassVersion cl" ??_C@_0GE@MLAFNEOF@WdfLdr?3?5ReferenceClassVersion?5cl@
0x1C0008020: "WdfLdr: ReferenceClassVersion: Z" ??_C@_0GL@NALNBJBL@WdfLdr?3?5ReferenceClassVersion?3?5Z@
0x1C0008090: "WdfLdr: DereferenceVersion - " ??_C@_0BO@BEFAMAGA@WdfLdr?3?5DereferenceVersion?5?9?5?$AA@
0x1C00080B0: "WdfLdr: DereferenceVersion: Libr" ??_C@_0EB@JBNHBGDL@WdfLdr?3?5DereferenceVersion?3?5Libr@
0x1C00080F8: "WdfLdr: DereferenceVersion: Libr" ??_C@_0DN@FIGALKOE@WdfLdr?3?5DereferenceVersion?3?5Libr@
0x1C0008138: "WdfLdr: WdfVersionBind - " ??_C@_0BK@KBFNDJGF@WdfLdr?3?5WdfVersionBind?5?9?5?$AA@
0x1C0008158: "WdfLdr: WdfVersionBind: enter
" ??_C@_0BP@CEJPIDBN@WdfLdr?3?5WdfVersionBind?3?5enter?6?$AA@
0x1C0008178: "WdfLdr: DereferenceVersion: Libr" ??_C@_0DL@OGLCBNHE@WdfLdr?3?5DereferenceVersion?3?5Libr@
0x1C00081B8: "WdfLdr: libraryRegisterClient: L" ??_C@_0DO@KBHENKCA@WdfLdr?3?5libraryRegisterClient?3?5L@
0x1C00081F8: "Returning with Status 0x%x
" ??_C@_0BM@NMDMLKAI@Returning?5with?5Status?50x?$CFx?6?$AA@
0x1C0008218: "WdfLdr: WdfVersionUnbind - " ??_C@_0BM@BFEEJFFF@WdfLdr?3?5WdfVersionUnbind?5?9?5?$AA@
0x1C0008238: "WdfLdr: WdfVersionUnbind: exit: " ??_C@_0CE@DOKDJNOL@WdfLdr?3?5WdfVersionUnbind?3?5exit?3?5@
0x1C0008260: "WdfLdr: WdfVersionBindClass - " ??_C@_0BP@FLMLMFNN@WdfLdr?3?5WdfVersionBindClass?5?9?5?$AA@
0x1C0008280: "WdfLdr: WdfVersionBindClass: ent" ??_C@_0CE@NPFFKEKC@WdfLdr?3?5WdfVersionBindClass?3?5ent@
0x1C00082A8: "WdfLdr: Could not create class c" ??_C@_0CO@IFKCHECH@WdfLdr?3?5Could?5not?5create?5class?5c@
0x1C00082D8: "WdfLdr: ClassLinkInClient failed" ??_C@_0CH@FDHNHJBP@WdfLdr?3?5ClassLinkInClient?5failed@
0x1C0008300: "WdfLdr: ClassLibraryBindClient f" ??_C@_0DE@LEKHNMND@WdfLdr?3?5ClassLibraryBindClient?5f@
0x1C0008338: "WdfLdr: WdfRegisterLibrary - " ??_C@_0BO@CKIACGCK@WdfLdr?3?5WdfRegisterLibrary?5?9?5?$AA@
0x1C0008358: "ERROR: GetImageBase(%wZ) failed " ??_C@_0DC@KKEKDIKK@ERROR?3?5GetImageBase?$CI?$CFwZ?$CJ?5failed?5@
0x1C0008390: "Module(%p)
" ??_C@_0M@JBKKALAA@Module?$CI?$CFp?$CJ?6?$AA@
0x1C00083A0: "ERROR: LibraryOpen(%wZ) failed w" ??_C@_0DB@CBNOEOBH@ERROR?3?5LibraryOpen?$CI?$CFwZ?$CJ?5failed?5w@
0x1C00083E0: "ERROR: WdfRegisterLibrary: Libra" ??_C@_0EA@IMEHEDKA@ERROR?3?5WdfRegisterLibrary?3?5Libra@
0x1C0008420: "WdfRegisterLibrary (%wZ) failed " ??_C@_0EI@PJDPAME@WdfRegisterLibrary?5?$CI?$CFwZ?$CJ?5failed?5@
0x1C0008468: "WdfLdr: WdfRegisterClassLibrary " ??_C@_0CD@IGIGDOM@WdfLdr?3?5WdfRegisterClassLibrary?5@
0x1C0008490: "Warning: GetImageBase(%wZ) faile" ??_C@_0DE@IPNBJLAE@Warning?3?5GetImageBase?$CI?$CFwZ?$CJ?5faile@
0x1C00084D0: "WdfLdr: WdfRegisterClassLibrary " ??_C@_0FO@MFANLBFI@WdfLdr?3?5WdfRegisterClassLibrary?5@
0x1C0008530: "Class Library (%p)
" ??_C@_0BE@PIKPFLGF@Class?5Library?5?$CI?$CFp?$CJ?6?$AA@
0x1C0008548: "ERROR: ClassOpen(%wZ) failed, st" ??_C@_0CL@IFOBJABN@ERROR?3?5ClassOpen?$CI?$CFwZ?$CJ?5failed?0?5st@
0x1C0008580: "ERROR: WdfRegisterClassLibrary: " ??_C@_0EM@LEPINLBD@ERROR?3?5WdfRegisterClassLibrary?3?5@
0x1C00085D0: "WdfRegisterClassLibrary (%wZ) fa" ??_C@_0EP@GKCMJGGH@WdfRegisterClassLibrary?5?$CI?$CFwZ?$CJ?5fa@
0x1C00075A0: "WdfLdr: FxLdrQueryData - " ??_C@_0BK@IHILJJM@WdfLdr?3?5FxLdrQueryData?5?9?5?$AA@
0x1C00075C0: "ERROR: ZwQueryValueKey failed wi" ??_C@_0DA@OPMAJNNN@ERROR?3?5ZwQueryValueKey?5failed?5wi@
0x1C00075F0: "ERROR: Computing length of data " ??_C@_0ED@HFIFCDKP@ERROR?3?5Computing?5length?5of?5data?5@
0x1C0007638: "ERROR: ZwQueryValueKey (%wZ) fai" ??_C@_0DG@JEEJKOHE@ERROR?3?5ZwQueryValueKey?5?$CI?$CFwZ?$CJ?5fai@
0x1C0008620: "WdfLdr: GetImageBase - " ??_C@_0BI@BEMLMBMH@WdfLdr?3?5GetImageBase?5?9?5?$AA@
0x1C0008638: "ERROR: RtlUnicodeStringToAnsiStr" ??_C@_0DN@EAIAPAME@ERROR?3?5RtlUnicodeStringToAnsiStr@
0x1C0008678: "ERROR: AuxKlibQueryModuleInforma" ??_C@_0DO@IAPBIIHI@ERROR?3?5AuxKlibQueryModuleInforma@
0x1C00086B8: "ERROR: RtlUlongAdd failed with S" ??_C@_0CM@FGFEADHM@ERROR?3?5RtlUlongAdd?5failed?5with?5S@
0x1C000C0C0: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C000C0B8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000C0B0: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C000C0A8: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x1C000C0A0: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C000A000: "struct _UNICODE_STRING `TraceLoggingSetInformation'::`2'::strEtwSetInformation" ?strEtwSetInformation@?1??TraceLoggingSetInformation@@9@4U_UNICODE_STRING@@A
0x1C000C098: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000C090: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x1C000C088: "__cdecl _imp_RtlIntegerToUnicodeString" __imp_RtlIntegerToUnicodeString
0x1C000C080: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000C078: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000A0B0: "struct _WDF_LDR_GLOBALS WdfLdrGlobals" ?WdfLdrGlobals@@3U_WDF_LDR_GLOBALS@@A
0x1C000C070: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000C068: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000C060: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0007788: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C000C058: "__cdecl _imp_PsGetVersion" __imp_PsGetVersion
0x1C000C050: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C000C048: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C000C040: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x1C0007859: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C000C038: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1C000C030: "__cdecl _imp__strnicmp" __imp__strnicmp
0x1C000A094: ExDefaultNonPagedPoolType
0x1C00086E8: GUID_WDF_LOADER_INTERFACE_DIAGNOSTIC
0x1C000C028: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C000C020: "__cdecl _imp_ZwLoadDriver" __imp_ZwLoadDriver
0x1C00086F8: GUID_WDF_LOADER_INTERFACE_STANDARD
0x1C000C018: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C000C010: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1C000C008: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C000A248: WdfLdrDiags
0x1C000C000: "__cdecl _imp_RtlFreeAnsiString" __imp_RtlFreeAnsiString
0x1C000F044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0008708: GUID_WDF_LOADER_INTERFACE_CLASS_BIND
0x1C00037E0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0008718: "WdfLdr: LibraryReleaseClientRefe" ??_C@_0CP@MJNGDGJN@WdfLdr?3?5LibraryReleaseClientRefe@
0x1C0008750: "WdfLdr: LibraryReleaseClientRefe" ??_C@_0EF@PNNPLPDJ@WdfLdr?3?5LibraryReleaseClientRefe@
0x1C00087A0: "WdfLdr: LibraryReleaseClientRefe" ??_C@_0FN@HDPHPOIP@WdfLdr?3?5LibraryReleaseClientRefe@
0x1C0007670: "WdfLdr: LibraryLoaderLock - " ??_C@_0BN@NPKKLDOD@WdfLdr?3?5LibraryLoaderLock?5?9?5?$AA@
0x1C0007690: "Thread 0x%p is waiting for %wZ's" ??_C@_0CO@KIMFKLKM@Thread?50x?$CFp?5is?5waiting?5for?5?$CFwZ?8s@
0x1C0008800: "WdfLdr: LibraryCreate - " ??_C@_0BJ@KHKAFPKN@WdfLdr?3?5LibraryCreate?5?9?5?$AA@
0x1C0008820: "WdfLdr: LibraryCreate: GetImageB" ??_C@_0CM@GCFLHEEN@WdfLdr?3?5LibraryCreate?3?5GetImageB@
0x1C0008850: "WdfLdr: LibraryUnload - " ??_C@_0BJ@OGOPMFIJ@WdfLdr?3?5LibraryUnload?5?9?5?$AA@
0x1C0008870: "WdfLdr: LibraryUnload: LibraryDe" ??_C@_0DI@LHNCJGOE@WdfLdr?3?5LibraryUnload?3?5LibraryDe@
0x1C00088A8: "WdfLdr: LibraryUnload: Unload mo" ??_C@_0CK@FOICLLBB@WdfLdr?3?5LibraryUnload?3?5Unload?5mo@
0x1C00088E0: "WdfLdr: LibraryUnload: unload of" ??_C@_0IH@NJHNGIPE@WdfLdr?3?5LibraryUnload?3?5unload?5of@
0x1C0007280: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x1C0008968: "WdfLdr: ServiceCheckBootStart - " ??_C@_0CB@DOOBPJLC@WdfLdr?3?5ServiceCheckBootStart?5?9?5@
0x1C0008990: "WdfLdr: ZwOpenKey(%wZ) failed: %" ??_C@_0CF@BBNKLEJO@WdfLdr?3?5ZwOpenKey?$CI?$CFwZ?$CJ?5failed?3?5?$CF@
0x1C00089B8: "WdfLdr: ClientCleanupAndFree - " ??_C@_0CA@LIEAHDLC@WdfLdr?3?5ClientCleanupAndFree?5?9?5?$AA@
0x1C00089D8: "Client Image Name: %wZ
" ??_C@_0BI@CINHBELF@Client?5Image?5Name?3?5?$CFwZ?6?$AA@
0x1C00089F0: "WdfLdr: LibraryLinkInClient - " ??_C@_0BP@GBMLNPJN@WdfLdr?3?5LibraryLinkInClient?5?9?5?$AA@
0x1C0008A10: "WdfLdr: LibraryLinkInClient: Get" ??_C@_0ED@KDKBAAE@WdfLdr?3?5LibraryLinkInClient?3?5Get@
0x1C0008A58: "ERROR: Client module NOT linked
" ??_C@_0CB@HLODLDNB@ERROR?3?5Client?5module?5NOT?5linked?6@
0x1C0008A80: "WdfLdr: LibraryUnlinkClient - " ??_C@_0BP@FNFKAPBE@WdfLdr?3?5LibraryUnlinkClient?5?9?5?$AA@
0x1C0008AA0: "ERROR: Client module %p, bind %p" ??_C@_0CM@MJBDEKN@ERROR?3?5Client?5module?5?$CFp?0?5bind?5?$CFp@
0x1C0008AD0: "WdfLdr: LibraryUnloadClasses - " ??_C@_0CA@GIKLODDD@WdfLdr?3?5LibraryUnloadClasses?5?9?5?$AA@
0x1C0008AF0: "WdfLdr: LibraryUnloadClasses: un" ??_C@_0DN@OFOCILL@WdfLdr?3?5LibraryUnloadClasses?3?5un@
0x1C000C0F8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000C0F0: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000C0E8: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000C0E0: "__cdecl _imp_IoGetDeviceObjectPointer" __imp_IoGetDeviceObjectPointer
0x1C000C0D8: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C000C0D0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C000C0C8: "__cdecl _imp_ZwUnloadDriver" __imp_ZwUnloadDriver
0x1C00076C0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C0008B30: "WdfLdr: ClassCreate - " ??_C@_0BH@IAMCFFFP@WdfLdr?3?5ClassCreate?5?9?5?$AA@
0x1C0008B48: "WdfLdr: ClassCreate: GetImageBas" ??_C@_0CP@KOIKCOAE@WdfLdr?3?5ClassCreate?3?5GetImageBas@
0x1C0008B78: "WdfLdr: ClassReleaseClientRefere" ??_C@_0CN@LALDGFC@WdfLdr?3?5ClassReleaseClientRefere@
0x1C0008BB0: "WdfLdr: ClassReleaseClientRefere" ??_C@_0ED@PNFLKEK@WdfLdr?3?5ClassReleaseClientRefere@
0x1C0008C00: "WdfLdr: ClassReleaseClientRefere" ??_C@_0FL@HOAOGOIJ@WdfLdr?3?5ClassReleaseClientRefere@
0x1C0008C60: "WdfLdr: ClassLoaderLock - " ??_C@_0BL@MJDFEFH@WdfLdr?3?5ClassLoaderLock?5?9?5?$AA@
0x1C0008C80: "WdfLdr: ClassUnload - " ??_C@_0BH@MBINMPHL@WdfLdr?3?5ClassUnload?5?9?5?$AA@
0x1C0008C98: "WdfLdr: ClassUnload: calling Cla" ??_C@_0DM@ICDNIKPH@WdfLdr?3?5ClassUnload?3?5calling?5Cla@
0x1C0008CD8: "WdfLdr: ClassUnload: Unload clas" ??_C@_0CP@KKGBPGEK@WdfLdr?3?5ClassUnload?3?5Unload?5clas@
0x1C0008D10: "WdfLdr: ClassUnload: unload of c" ??_C@_0IL@NAOFPJCG@WdfLdr?3?5ClassUnload?3?5unload?5of?5c@
0x1C0008DA0: "WdfLdr: ClassLinkInClient - " ??_C@_0BN@NPAMBAMD@WdfLdr?3?5ClassLinkInClient?5?9?5?$AA@
0x1C0008DC0: "ERROR: Could not locate client f" ??_C@_0DK@KBAEINMH@ERROR?3?5Could?5not?5locate?5client?5f@
0x1C0007340: "\Registry\Machine\System\Current" ??_C@_1HI@DPDGPAMJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007320: "%s\Versions" ??_C@_1BI@HAEPEIHF@?$AA?$CF?$AAs?$AA?2?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1C0008E00: "\Registry\Machine\System\Current" ??_C@_1IA@KPDKHAPF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0008E80: "WdfLdr: GetClassServicePath - " ??_C@_0BP@HMMLFOFP@WdfLdr?3?5GetClassServicePath?5?9?5?$AA@
0x1C0008EA0: "ERROR: GetClassRegistryHandle fa" ??_C@_0DH@MLHMNAED@ERROR?3?5GetClassRegistryHandle?5fa@
0x1C0008ED8: "ERROR: GetDefaultClassServiceNam" ??_C@_0DH@MGPPDHAD@ERROR?3?5GetDefaultClassServiceNam@
0x1C000C100: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0007728: "RtlQueryModuleInformation" ??_C@_1DE@HMCCLJNL@?$AAR?$AAt?$AAl?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000C128: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C000C120: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C000C118: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0003844: "__cdecl vsnwprintf" _vsnwprintf
0x1C00027B0: "long __cdecl GetImageBase(struct _UNICODE_STRING * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?GetImageBase@@YAJPEAU_UNICODE_STRING@@PEAPEAXPEAK@Z
0x1C00032B0: "long __cdecl FxLdrQueryData(void * __ptr64,struct _UNICODE_STRING const * __ptr64,unsigned long,struct _KEY_VALUE_PARTIAL_INFORMATION * __ptr64 * __ptr64)" ?FxLdrQueryData@@YAJPEAXPEBU_UNICODE_STRING@@KPEAPEAU_KEY_VALUE_PARTIAL_INFORMATION@@@Z
0x1C0006240: WdfLdrQueryInterface
0x1C000D240: WdfRegisterClassLibrary
0x1C000D010: WdfRegisterLibrary
0x1C0006350: WdfVersionUnbindClass
0x1C00015F0: WdfVersionBindClass
0x1C000DBE0: WdfVersionUnbind
0x1C000D3B0: WdfVersionBind
0x1C0005CD0: "void __cdecl DereferenceClassVersion(struct _WDF_CLASS_BIND_INFO * __ptr64,struct _WDF_BIND_INFO * __ptr64,void * __ptr64 * __ptr64)" ?DereferenceClassVersion@@YAXPEAU_WDF_CLASS_BIND_INFO@@PEAU_WDF_BIND_INFO@@PEAPEAX@Z
0x1C0005DA8: "long __cdecl DereferenceVersion(struct _WDF_BIND_INFO * __ptr64,void * __ptr64 * __ptr64)" ?DereferenceVersion@@YAJPEAU_WDF_BIND_INFO@@PEAPEAX@Z
0x1C0001880: "long __cdecl ReferenceClassVersion(struct _WDF_CLASS_BIND_INFO * __ptr64,struct _WDF_BIND_INFO * __ptr64,struct _CLASS_MODULE * __ptr64 * __ptr64)" ?ReferenceClassVersion@@YAJPEAU_WDF_CLASS_BIND_INFO@@PEAU_WDF_BIND_INFO@@PEAPEAU_CLASS_MODULE@@@Z
0x1C00022C0: "long __cdecl ReferenceVersion(struct _WDF_BIND_INFO * __ptr64,struct _LIBRARY_MODULE * __ptr64 * __ptr64)" ?ReferenceVersion@@YAJPEAU_WDF_BIND_INFO@@PEAPEAU_LIBRARY_MODULE@@@Z
0x1C0001010: "long __cdecl FindModuleByClientServiceNameLocked(struct _UNICODE_STRING * __ptr64,struct _LIBRARY_MODULE * __ptr64 * __ptr64)" ?FindModuleByClientServiceNameLocked@@YAJPEAU_UNICODE_STRING@@PEAPEAU_LIBRARY_MODULE@@@Z
0x1C0001570: "struct _LIBRARY_MODULE * __ptr64 __cdecl FindModuleByServiceNameLocked(struct _UNICODE_STRING * __ptr64)" ?FindModuleByServiceNameLocked@@YAPEAU_LIBRARY_MODULE@@PEAU_UNICODE_STRING@@@Z
0x1C0002D80: "long __cdecl GetVersionServicePath(struct _WDF_BIND_INFO * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetVersionServicePath@@YAJPEAU_WDF_BIND_INFO@@PEAU_UNICODE_STRING@@@Z
0x1C0001D50: "long __cdecl BuildServicePath(struct _KEY_VALUE_PARTIAL_INFORMATION * __ptr64,unsigned long,struct _UNICODE_STRING * __ptr64)" ?BuildServicePath@@YAJPEAU_KEY_VALUE_PARTIAL_INFORMATION@@KPEAU_UNICODE_STRING@@@Z
0x1C0005EE8: "long __cdecl GetDefaultServiceName(struct _WDF_BIND_INFO * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetDefaultServiceName@@YAJPEAU_WDF_BIND_INFO@@PEAU_UNICODE_STRING@@@Z
0x1C00029E0: "long __cdecl GetImageName(struct _UNICODE_STRING * __ptr64,unsigned long,struct _UNICODE_STRING * __ptr64)" ?GetImageName@@YAJPEAU_UNICODE_STRING@@K0@Z
0x1C0003530: "void __cdecl GetNameFromUnicodePath(struct _UNICODE_STRING * __ptr64,unsigned short * __ptr64,unsigned long)" ?GetNameFromUnicodePath@@YAXPEAU_UNICODE_STRING@@PEAGK@Z
0x1C0003650: "void __cdecl FxLdrReleaseLoadedModuleLock(void)" ?FxLdrReleaseLoadedModuleLock@@YAXXZ
0x1C0003690: "void __cdecl FxLdrAcquireLoadedModuleLock(void)" ?FxLdrAcquireLoadedModuleLock@@YAXXZ
0x1C0006050: DllUnload
0x1C0001430: FxDllInitialize
0x1C0001410: DllInitialize
0x1C0001E40: WdfLdrDiagnosticsValueByNameAsULONG
0x1C00031D0: "long __cdecl FxLdrQueryUlong(void * __ptr64,struct _UNICODE_STRING const * __ptr64,unsigned long * __ptr64)" ?FxLdrQueryUlong@@YAJPEAXPEBU_UNICODE_STRING@@PEAK@Z
0x1C0006214: DriverEntry
0x1C0006030: "void __cdecl WdfLdrUnload(struct _DRIVER_OBJECT * __ptr64)" ?WdfLdrUnload@@YAXPEAU_DRIVER_OBJECT@@@Z
0x1C0003270: "public: __cdecl FxAutoString::~FxAutoString(void) __ptr64" ??1FxAutoString@@QEAA@XZ
0x1C000D170: TraceLoggingRegisterEx
0x1C000D560: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C0003120: "long __cdecl RtlUnicodeStringPrintf(struct _UNICODE_STRING * __ptr64,unsigned short const * __ptr64,...)" ?RtlUnicodeStringPrintf@@YAJPEAU_UNICODE_STRING@@PEBGZZ
0x1C000447C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0004548: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C0004600: memset
0x1C000C140: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000A050: "__cdecl _security_cookie" __security_cookie
0x1C000636C: "void __cdecl ClientCleanupAndFree(struct _CLIENT_MODULE * __ptr64)" ?ClientCleanupAndFree@@YAXPEAU_CLIENT_MODULE@@@Z
0x1C0001F30: ServiceCheckBootStart
0x1C00063F8: LibraryCleanupAndFree
0x1C0001230: LibraryOpen
0x1C0003780: LibraryAddToClassListLocked
0x1C0002650: LibraryLinkInClient
0x1C00036D0: LibraryAddToLibraryListLocked
0x1C000659C: LibraryReleaseClientReferenceLocked
0x1C0001170: LibraryReleaseReference
0x1C00036C0: LibraryAddReferenceLocked
0x1C0006478: LibraryClose
0x1C0006874: LibraryUnloadClasses
0x1C0001280: LibraryCreate
0x1C0006638: LibraryUnlinkClient
0x1C0006758: LibraryUnload
0x1C00011F0: LibraryLoaderUnlock
0x1C00064AC: LibraryCopyInfo
0x1C00064D0: LibraryLoaderLock
0x1C0006990: "long __cdecl GetDefaultClassServiceName(struct _WDF_CLASS_BIND_INFO * __ptr64,struct _WDF_BIND_INFO * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetDefaultClassServiceName@@YAJPEAU_WDF_CLASS_BIND_INFO@@PEAU_WDF_BIND_INFO@@PEAU_UNICODE_STRING@@@Z
0x1C0002000: "long __cdecl GetClassRegistryHandle(struct _WDF_CLASS_BIND_INFO * __ptr64,struct _WDF_BIND_INFO * __ptr64,void * __ptr64 * __ptr64)" ?GetClassRegistryHandle@@YAJPEAU_WDF_CLASS_BIND_INFO@@PEAU_WDF_BIND_INFO@@PEAPEAX@Z
0x1C0006A54: ClassCleanupAndFree
0x1C000453C: "__cdecl TlgDefineProvider_annotation__Tlgg_TelemetryProviderProv" _TlgDefineProvider_annotation__Tlgg_TelemetryProviderProv
0x1C0006E50: "__cdecl TlgCreateWsz" _TlgCreateWsz
0x1C0006E94: "__cdecl TlgWrite" _TlgWrite
0x1C0006D10: ClassUnload
0x1C0006B24: ClassReleaseClientReferenceLocked
0x1C0001C60: GetClassServicePath
0x1C0003430: FindClassByServiceNameLocked
0x1C0006BCC: ClassUnlinkClient
0x1C0006AE4: ClassClose
0x1C0003710: ClassLoaderLock
0x1C0001700: ClassLinkInClient
0x1C0003680: ClassAddReferenceLocked
0x1C00035F0: ClassOpen
0x1C00011F0: ClassLoaderUnlock
0x1C00037B0: ClassLibraryCopyInfo
0x1C00033B0: ClassReleaseReference
0x1C0001A90: ClassCreate
0x1C000D100: AuxKlibInitialize
0x1C000D4E0: AuxKlibQueryModuleInformation
0x1C000A0B0: WdfLdrGlobals
0x1C0007788: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C0007859: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C000A094: ExDefaultNonPagedPoolType
0x1C00086E8: GUID_WDF_LOADER_INTERFACE_DIAGNOSTIC
0x1C00086F8: GUID_WDF_LOADER_INTERFACE_STANDARD
0x1C000A248: WdfLdrDiags
0x1C0008708: GUID_WDF_LOADER_INTERFACE_CLASS_BIND
0x1C000781C: "__cdecl Tlgg_TelemetryProviderProv_Meta" _Tlgg_TelemetryProviderProv_Meta
0x1C000A010: "__cdecl Tlgg_TelemetryProviderProv" _Tlgg_TelemetryProviderProv
0x1C000A0A0: AuxpInitState
0x1C0000000: KiBugCheckData
0x1C000A098: AuxpKlibFns
0x1C0007000: QueryModuleInfoName
0x1C0003810: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0009B38: $xdatasym
0x1C000A058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000F010: GsDriverEntry
0x1C000A050: "__cdecl _security_cookie" __security_cookie
0x1C000A058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000C108: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C00045E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0009D18: $xdatasym
0x1C00043B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000C138: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00045E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C000C138: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000C140: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0007010: "__cdecl load_config_used" _load_config_used
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0000000: "__cdecl _dynamic_value_reloc_table" __dynamic_value_reloc_table
0x1C0007010: "__cdecl load_config_used" _load_config_used
0x1C0009D38: $xdatasym
0x1C0004518: "__cdecl _C_specific_handler" __C_specific_handler
0x1C00044A0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000C148: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C000C15C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C000C130: ntoskrnl_NULL_THUNK_DATA
0x1C000452A: RtlAnsiCharToUnicodeChar
0x1C000C110: "__cdecl _imp_RtlAnsiCharToUnicodeChar" __imp_RtlAnsiCharToUnicodeChar
0x1C00043B0: "__cdecl invalid_parameter" _invalid_parameter
0x1C0004428: mbtowc
0x1C000A060: "__cdecl _mb_cur_max" __mb_cur_max
0x1C000A088: gbl_errno
0x1C000A060: "__cdecl _mb_cur_max" __mb_cur_max
0x1C000A088: gbl_errno
0x1C0000000: "__cdecl iob" _iob
0x1C0000000: "__cdecl osfile" _osfile
0x1C0003944: "__cdecl flsbuf" _flsbuf
0x1C0004508: "__cdecl flswbuf" _flswbuf
0x1C00043DC: "__cdecl fputwc_nolock" _fputwc_nolock
0x1C00073B8: "(null)" ??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
0x1C00073C0: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1C00073D0: "__cdecl _lookuptable" __lookuptable
0x1C00043BC: "__cdecl get_printf_count_output" _get_printf_count_output
0x1C00073D0: "__cdecl _lookuptable" __lookuptable
0x1C000A080: "__cdecl _enable_percent_n" __enable_percent_n
0x1C0003860: "__cdecl vsnwprintf_l" _vsnwprintf_l
0x1C0003954: "__cdecl woutput_l" _woutput_l
0x1C00073D0: "__cdecl _lookuptable" __lookuptable
0x1C001202C: "__cdecl _dynamic_value_reloc_table" __dynamic_value_reloc_table
[JEB Decompiler by PNF Software]