Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\umpass.sys Base=0x1C0000000 SHA-256=B52A21A288E18EB2517A09FD94BF5B720D88FC571F8609C8181D0A419C6D2172
PDB: umpass.pdb GUID={473B5A09-5832-AFD7-E760E7F45649DDF9} Age=1

80 located named symbols:
0x1C00030D8: WdfDriverGlobals
0x1C0001150: WppClassicProviderCallback
0x1C0003048: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0006150: WppTraceCallback
0x1C0005018: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C0005048: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00015A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0006630: UMPASS_EvtDriverUnload
0x1C00066CC: UMPASS_RegisterInterfaces
0x1C0003080: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C0002140: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0005060: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0005030: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000507C: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C0002108: "__cdecl _guard_iat_table" __guard_iat_table
0x1C00015C0: memcpy
0x1C0003008: WdfBindInfo
0x1C00030A8: pfnWppGetVersion
0x1C00015C0: memmove
0x1C0005038: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C000152C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0003300: WPP_MAIN_CB
0x1C0002230: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C0005020: WDFLDR_NULL_THUNK_DATA
0x1C0003050: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C00030C8: pfnWppQueryTraceInformation
0x1C00012A4: FxDriverEntryWorker
0x1C0003340: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwirevihUdwnUfnkzhhUhbhUlyquivUznwGEUkxsOlyq@umpass" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwirevihUdwnUfnkzhhUhbhUlyquivUznwGEUkxsOlyq@umpass
0x1C00064C0: UMPASS_EvtDeviceAdd
0x1C0001508: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0002120: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0002110: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C00030B0: pfnEtwRegisterClassicProvider
0x1C00013EC: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C0001008: WPP_SF_
0x1C00030B8: pfnEtwUnregister
0x1C0005010: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C0005058: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0005008: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C0003000: WPP_GLOBAL_Control
0x1C000103C: WPP_SF_D
0x1C0001108: WPP_SF_d
0x1C00014B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0005068: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C00021F0: "InterfaceGUIDs" ??_C@_1BO@PFHHFJPP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAG?$AAU?$AAI?$AAD?$AAs?$AA?$AA@
0x1C0006434: WppCleanupKm
0x1C0008000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C0001230: FxStubDriverUnload
0x1C0003060: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C0002160: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00021D0: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C00014F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0005040: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1C0006008: WppLoadTracingSupport
0x1C0005028: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001184: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C0002210: WPP_de467bc686e439536a11f543bd375f5b_Traceguids
0x1C0003070: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C0001270: FxDriverEntry
0x1C0003040: "__cdecl _security_cookie" __security_cookie
0x1C0002198: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C000711C: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00030A0: WPPTraceSuite
0x1C00030D0: WdfFunctions_01015
0x1C0002220: WPP_ThisDir_CTLGUID_UmPass
0x1C00014E0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0005000: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C0005050: ntoskrnl_NULL_THUNK_DATA
0x1C0007008: DriverEntry
0x1C00030C0: pfnWppTraceMessage
0x1C00063A4: WppInitKm
0x1C000108C: WPP_SF_S
0x1C0001900: memset
0x1C0005090: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]