Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\mcd.sys Base=0x1C0000000 SHA-256=D62237B1191519D34426EEE32C342FB9B2FC0D9662A6306E33E5F1A4DC4DFC1A
PDB: mcd.pdb GUID={1DD718E7-0A28-50BA-6F7DD940BAF8D93E} Age=1
136 located named symbols:
0x1C0003258: "Changer" ??_C@_07JFNICPMM@Changer?$AA@
0x1C0006148: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0006070: "__cdecl _imp_ClassSendSrbSynchronous" __imp_ClassSendSrbSynchronous
0x1C0003260: "\DosDevices" ??_C@_1BI@DDHLANDD@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1C0004008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0006150: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0006138: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0001CA0: ChangerClassAllocatePool
0x1C0002140: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0006088: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C0001CF0: ChangerClassDebugPrint
0x1C0006020: "__cdecl _imp_ClassCompleteRequest" __imp_ClassCompleteRequest
0x1C00060A8: "__cdecl _imp_IoSetHardErrorOrVerifyDevice" __imp_IoSetHardErrorOrVerifyDevice
0x1C0003110: "" ??_C@_00CNPNBAHC@?$AA@
0x1C0003278: "\Device" ??_C@_1BA@CCLAPIHO@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C0006108: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1C0006038: "__cdecl _imp_ClassInitialize" __imp_ClassInitialize
0x1C0006158: "__cdecl _imp_IoSetDeviceInterfaceState" __imp_IoSetDeviceInterfaceState
0x1C00061A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0006110: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C0003290: "\Changer%u" ??_C@_0L@FKPJKPAC@?2Changer?$CFu?$AA@
0x1C0006120: "__cdecl _imp_IoGetConfigurationInformation" __imp_IoGetConfigurationInformation
0x1C0006018: "__cdecl _imp_ClassDisableMediaChangeDetection" __imp_ClassDisableMediaChangeDetection
0x1C00032A0: "\MediumChangerDevice%u" ??_C@_0BH@CCMCHLKJ@?2MediumChangerDevice?$CFu?$AA@
0x1C00060F8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0002180: memcpy
0x1C0006180: "__cdecl _imp_IoRegisterDeviceInterface" __imp_IoRegisterDeviceInterface
0x1C00060C8: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0006128: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0006188: "__cdecl _imp_wcscmp" __imp_wcscmp
0x1C00060E8: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C0003288: "\Device" ??_C@_07BCIOEOOB@?2Device?$AA@
0x1C0002180: memmove
0x1C0003118: "Persistence" ??_C@_1BI@PHMDKDJ@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1C00020AC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C00060E0: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C00032B8: "MediumChangerDevice%u" ??_C@_1CM@IHBIJOEA@?$AAM?$AAe?$AAd?$AAi?$AAu?$AAm?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAr?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$CF?$AAu?$AA?$AA@
0x1C00031E0: "\Registry\Machine\System\Current" ??_C@_1HE@JFKKFNML@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007680: ChangerUnload
0x1C00060B8: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C0006090: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0001008: RtlStringCchCatExW
0x1C0001FA0: ChangerFdoExecuteWmiMethod
0x1C0004010: ChangerWmiFdoGuidList
0x1C0003130: "\Registry\Machine\System\Current" ??_C@_1HC@FCFOEIIJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00083F4: ChangerGetValuePartialInfo
0x1C0006078: "__cdecl _imp_ClassDeviceControl" __imp_ClassDeviceControl
0x1C0002088: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0006010: "__cdecl _imp_ClassEnableMediaChangeDetection" __imp_ClassEnableMediaChangeDetection
0x1C0006048: "__cdecl _imp_ClassSetMediaChangeState" __imp_ClassSetMediaChangeState
0x1C0006118: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C0006160: "__cdecl _imp_IoGetDriverObjectExtension" __imp_IoGetDriverObjectExtension
0x1C000768C: CreateChangerDeviceObject
0x1C00031A8: "PersistencePrivateCopy" ??_C@_1CO@PEFHAADK@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAc?$AAe?$AAP?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AAC?$AAo?$AAp?$AAy?$AA?$AA@
0x1C0003370: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C0006080: CLASSPNP_NULL_THUNK_DATA
0x1C0006028: "__cdecl _imp_ClassDeleteSrbLookasideList" __imp_ClassDeleteSrbLookasideList
0x1C0007380: ChangerInitDevice
0x1C0001A40: ChangerReadWriteVerification
0x1C0007010: ChangerClassCreateClose
0x1C000A020: GsDriverEntry
0x1C0006198: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0008D0C: ChangerSymbolicNamePersistencePreference
0x1C00060B0: "__cdecl _imp_RtlCharToInteger" __imp_RtlCharToInteger
0x1C00086E4: ChangerCreateNonPersistentSymbolicName
0x1C0006068: "__cdecl _imp_ClassClaimDevice" __imp_ClassClaimDevice
0x1C0001FE0: ChangerFdoSetWmiDataBlock
0x1C0003310: "Changer%u" ??_C@_1BE@MEHPDBDI@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAr?$AA?$CF?$AAu?$AA?$AA@
0x1C0003340: "\MediumChangerDevice%u" ??_C@_1CO@NCACGCIH@?$AA?2?$AAM?$AAe?$AAd?$AAi?$AAu?$AAm?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAr?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$CF?$AAu?$AA?$AA@
0x1C000890C: ChangerAssignSymbolicLink
0x1C000825C: ChangerGetSubKeyByIndex
0x1C0006098: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0003114: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C00084E4: ChangerCreateNewDeviceSubKey
0x1C0006040: "__cdecl _imp_ClassCreateDeviceObject" __imp_ClassCreateDeviceObject
0x1C00018E0: ChangerClassError
0x1C0006140: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x1C0002030: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0006170: "__cdecl _imp_RtlFreeAnsiString" __imp_RtlFreeAnsiString
0x1C00070E0: ChangerAddDevice
0x1C00061A8: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0001A60: ChangerClassInitialize
0x1C0006058: "__cdecl _imp_ClassInitializeMediaChangeDetection" __imp_ClassInitializeMediaChangeDetection
0x1C000B000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0003000: "__cdecl load_config_used" _load_config_used
0x1C0007190: ChangerStartDevice
0x1C0006178: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0007370: ChangerStopDevice
0x1C00060F0: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0001CD0: ChangerClassFreePool
0x1C0001C70: ChangerClassSendSrbSynchronous
0x1C0001630: ChangerClassDeviceControl
0x1C0001D20: ChangerFdoQueryWmiDataBlock
0x1C0002070: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0006060: "__cdecl _imp_ClassGetDescriptor" __imp_ClassGetDescriptor
0x1C0003378: GUID_DEVINTERFACE_MEDIUMCHANGER
0x1C00074F0: ChangerRemoveDevice
0x1C0006008: "__cdecl _imp_ClassReleaseRemoveLock" __imp_ClassReleaseRemoveLock
0x1C0006000: "__cdecl _imp_ClassWmiCompleteRequest" __imp_ClassWmiCompleteRequest
0x1C0006100: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x1C0004000: "__cdecl _security_cookie" __security_cookie
0x1C00060C0: "__cdecl _imp_IoAllocateDriverObjectExtension" __imp_IoAllocateDriverObjectExtension
0x1C0006168: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0001D10: ChangerFdoQueryWmiRegInfo
0x1C000A054: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0006050: "__cdecl _imp_ClassUpdateInformationInRegistry" __imp_ClassUpdateInformationInRegistry
0x1C0008BB4: ChangerDeassignSymbolicLink
0x1C0002116: wcscmp
0x1C0001F60: ChangerWmiFunctionControl
0x1C00061BC: "__cdecl _IMPORT_DESCRIPTOR_CLASSPNP" __IMPORT_DESCRIPTOR_CLASSPNP
0x1C000810C: ChangerCreateUniqueId
0x1C00032F8: "UniqueId" ??_C@_1BC@HIOPGAAA@?$AAU?$AAn?$AAi?$AAq?$AAu?$AAe?$AAI?$AAd?$AA?$AA@
0x1C0007928: ChangerCreateSymbolicName
0x1C0002060: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00032E8: "UIDType" ??_C@_1BA@HJPEIDJP@?$AAU?$AAI?$AAD?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C0006130: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C0001168: RtlStringCchPrintfExA
0x1C0001E64: ChangerWMIGetParameters
0x1C0003328: "\Changer%u" ??_C@_1BG@OFNIMHND@?$AA?2?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAr?$AA?$CF?$AAu?$AA?$AA@
0x1C0001374: RtlStringCchPrintfExW
0x1C0006190: ntoskrnl_NULL_THUNK_DATA
0x1C00060D0: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C00060A0: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0006030: "__cdecl _imp_ClassInitializeSrbLookasideList" __imp_ClassInitializeSrbLookasideList
0x1C0001FE0: ChangerFdoSetWmiDataItem
0x1C000A008: DriverEntry
0x1C00060D8: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C00024C0: memset
0x1C00061D0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]