PDB Symbols - uwfreg.sys (0xE9E58B6319EB45078760B5E0F437146777C1DBE69BBBEA6B96EA7B87803E8148)

Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_microsoft-onecore-unifiedwritefilter_31bf3856ad364e35_10.0.17763.557_none_9e103f00e90ccfe5\uwfreg.sys Base=0x1C0000000 SHA-256=E9E58B6319EB45078760B5E0F437146777C1DBE69BBBEA6B96EA7B87803E8148
PDB: uwfreg.pdb GUID={E630154E-F3AD-8D63-7CC258605EF68791} Age=1

254 located named symbols:
0x1C00053C0: WdfDriverGlobals
0x1C0007198: "__cdecl _imp_SeCaptureSubjectContext" __imp_SeCaptureSubjectContext
0x1C0007060: "__cdecl _imp_ExAcquireFastMutex" __imp_ExAcquireFastMutex
0x1C0003A28: "\Registry\Machine\BCD00000000" ??_C@_1DM@NHFPEBNA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAB?$AAC?$AAD?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1C000B9F8: UwfRegGetHiveFromKeyName
0x1C000D3F0: UwfRegQuerySecurityInfo
0x1C0007260: "__cdecl _imp_?UwfrtlInitUnicodeStringSafe@@YAJPEAG_KPEAU_UNICODE_STRING@@@Z" __imp_?UwfrtlInitUnicodeStringSafe@@YAJPEAG_KPEAU_UNICODE_STRING@@@Z
0x1C0005148: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0007008: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C000955C: UwfRegCleanupPrefixTable
0x1C0003250: "HKEY_LOCAL_MACHINE\System\Curren" ??_C@_1FI@GJAMEJLP@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn@
0x1C00070A8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002670: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C000E760: UwfRegIsHiveProtected
0x1C0007278: "__cdecl _imp_?UwfrtlSystemCheckState@@YA_NW4UWFRTL_SYSTEM_STATE_ASPECT@@@Z" __imp_?UwfrtlSystemCheckState@@YA_NW4UWFRTL_SYSTEM_STATE_ASPECT@@@Z
0x1C00072F4: "__cdecl _IMPORT_DESCRIPTOR_uwfrtl" __IMPORT_DESCRIPTOR_uwfrtl
0x1C00071D8: MmHighestUserAddress
0x1C0007138: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C0005180: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C0007238: "__cdecl _imp_?UwfrtlRegisterStateNotification@@YAJPEAPEAXP6AXPEBUUWFRTL_STATE_NOTIFICATION@@PEAX@Z2@Z" __imp_?UwfrtlRegisterStateNotification@@YAJPEAPEAXP6AXPEBUUWFRTL_STATE_NOTIFICATION@@PEAX@Z2@Z
0x1C0007040: "__cdecl _imp_CmRegisterCallbackEx" __imp_CmRegisterCallbackEx
0x1C0007108: "__cdecl _imp_ZwOpenKeyEx" __imp_ZwOpenKeyEx
0x1C000CE78: UwfRegLockGlobals
0x1C0001D70: UwfRegIsPersistentHiveUnloadingInProgress
0x1C00072D8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00038E0: "\Registry\Machine\PERSISTENT_SYS" ??_C@_1GM@FPDGDOIB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAY?$AAS@
0x1C0007298: "__cdecl _imp_?UwfrtlQueryKey@@YAJPEAXW4_KEY_INFORMATION_CLASS@@PEAPEAXW4_UWFRTL_ALLOC_TAG@@PEAK@Z" __imp_?UwfrtlQueryKey@@YAJPEAXW4_KEY_INFORMATION_CLASS@@PEAPEAXW4_UWFRTL_ALLOC_TAG@@PEAK@Z
0x1C0007308: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C0007210: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_WARNING" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_WARNING
0x1C000AD7C: UwfRegPreCreateKeyExCallback
0x1C00072A0: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_LOW_RESOURCES" __imp_UwflogNewEntry_UWFLOG_LEVEL_LOW_RESOURCES
0x1C000F414: UwfRegAddControlDevice
0x1C000C52C: UwfRegCreatePersistentVolume
0x1C0007030: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0007100: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C00051A0: "struct _UWFREG_GLOBALS Globals" ?Globals@@3U_UWFREG_GLOBALS@@A
0x1C0003BE0: "UpdatedSettings" ??_C@_1CA@LNGIIBJB@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x1C0007118: "__cdecl _imp_ZwOpenKeyTransactedEx" __imp_ZwOpenKeyTransactedEx
0x1C0003118: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0002680: memcpy
0x1C000A3B8: UwfRegPreOpenKeyExCallback
0x1C0003950: "\Registry\Machine\PERSISTENT_SYS" ??_C@_1GG@FMEPMHMO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAY?$AAS@
0x1C000A230: UwfRegPreEnumKeyCallback
0x1C000B480: UwfRegGetKeyNameFromPersistentHive
0x1C0005108: WdfBindInfo
0x1C0007140: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C000C30C: UwfRegQueryPersistentVolumeNumber
0x1C0002158: "long __cdecl UwfrtlQueryKey<struct _KEY_NODE_INFORMATION>(void * __ptr64,struct _KEY_NODE_INFORMATION * __ptr64 * __ptr64,enum _UWFRTL_ALLOC_TAG,unsigned long * __ptr64)" ??$UwfrtlQueryKey@U_KEY_NODE_INFORMATION@@@@YAJPEAXPEAPEAU_KEY_NODE_INFORMATION@@W4_UWFRTL_ALLOC_TAG@@PEAK@Z
0x1C0007240: "__cdecl _imp_?UwfrtlUpdateCurrentSettingsId@@YAJXZ" __imp_?UwfrtlUpdateCurrentSettingsId@@YAJXZ
0x1C0007088: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x1C00025AD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0007080: "__cdecl _imp_RtlNextUnicodePrefix" __imp_RtlNextUnicodePrefix
0x1C000FA14: UwfRegPopulateGenericTable
0x1C0002680: memmove
0x1C0007248: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_ERROR" __imp_UwflogNewEntry_UWFLOG_LEVEL_ERROR
0x1C00033B0: "\Device\HarddiskPersistentVolume" ??_C@_1IE@HCMKFBBE@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C0001518: UwfRegIsKeyInCurrentControlSet
0x1C00070C0: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0003700: "\Device\HarddiskPersistentVolume" ??_C@_1HO@DHBOAICA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C0003B40: "\Registry\Machine\SYSTEM\Current" ??_C@_1JK@OANJLBCB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00025FC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0007098: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x1C000D910: UwfRegCommitValue
0x1C0003C78: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C000CD34: UwfRegEnumKeySafe
0x1C0007068: "__cdecl _imp_RtlInsertUnicodePrefix" __imp_RtlInsertUnicodePrefix
0x1C000963C: UwfRegLoadPersistentHive
0x1C000EAA4: UwfRegGetPersistentHiveDescriptor
0x1C0007128: "__cdecl _imp_CmSetCallbackObjectContext" __imp_CmSetCallbackObjectContext
0x1C0007208: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_WARNING" __imp_UwflogNewEntry_UWFLOG_LEVEL_WARNING
0x1C00071C0: "__cdecl _imp_ZwAdjustPrivilegesToken" __imp_ZwAdjustPrivilegesToken
0x1C0007070: "__cdecl _imp_ExReleaseFastMutex" __imp_ExReleaseFastMutex
0x1C0007020: WDFLDR_NULL_THUNK_DATA
0x1C0007168: "__cdecl _imp_ZwDeleteValueKey" __imp_ZwDeleteValueKey
0x1C000AD10: UwfRegFreeRedirectionContext
0x1C00032B0: "\Registry\Machine\SYSTEM\Control" ??_C@_1FA@OEACAHDB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1C0003780: "\Registry\Machine\PERSISTENT_SEC" ??_C@_1EM@CNPDNFAC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAE?$AAC@
0x1C00035D0: "\Registry\Machine\PERSISTENT_COM" ??_C@_1FA@JDPGGJEK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAM@
0x1C0003360: "\Registry\Machine\PERSISTENT_SYS" ??_C@_1EI@HHOBMHGL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAY?$AAS@
0x1C0005150: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C00071C8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0001F10: UwfRegEnableRestorePrivilege
0x1C000D0A4: UwfRegQueryValueEx
0x1C00039F0: "\Registry\Machine\SOFTWARE" ??_C@_1DG@FHHAPGD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
0x1C000DB78: UwfRegCommitDelete
0x1C0002364: FxDriverEntryWorker
0x1C000CA08: UwfRegRemapHklmKey
0x1C0007250: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_LOW_RESOURCES" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_LOW_RESOURCES
0x1C00011D0: UwfRegEvtWorkItemUpdateCurrentSettingsId
0x1C00071A0: "__cdecl _imp_SePrivilegeCheck" __imp_SePrivilegeCheck
0x1C0001A28: UwfRegCreateTree
0x1C00071B0: "__cdecl _imp_ZwOpenThreadTokenEx" __imp_ZwOpenThreadTokenEx
0x1C000CEE0: UwfRegReleaseGlobals
0x1C00071E8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0007048: "__cdecl _imp_RtlQueryRegistryValuesEx" __imp_RtlQueryRegistryValuesEx
0x1C00053B0: DontLoad
0x1C0009D60: UwfRegFreeKeyName
0x1C00025D8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0007050: "__cdecl _imp_CmUnRegisterCallback" __imp_CmUnRegisterCallback
0x1C00070C8: "__cdecl _imp_RtlRemoveUnicodePrefix" __imp_RtlRemoveUnicodePrefix
0x1C00072C0: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_ASSERTION" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_ASSERTION
0x1C00024AC: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C0001244: UwfRegRetrieveCurrentControlSetId
0x1C00036B0: "\Registry\Machine\PERSISTENT_SAM" ??_C@_1EC@KECPLIKN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAA?$AAM@
0x1C00031B0: "\Device\UwfRegControl" ??_C@_1CM@EIKEOMNI@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AAw?$AAf?$AAR?$AAe?$AAg?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C0003300: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x1C0003120: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C00090C0: UwfRegEvtDriverContextCleanup
0x1C0007288: "__cdecl _imp_?UwfrtlFreeKeyInformation@@YAXPEAXW4_UWFRTL_ALLOC_TAG@@@Z" __imp_?UwfrtlFreeKeyInformation@@YAXPEAXW4_UWFRTL_ALLOC_TAG@@@Z
0x1C00072C8: uwfrtl_NULL_THUNK_DATA
0x1C000E7D0: UwfRegGetPersistentHiveDescriptors
0x1C00016C0: UwfRegWorkItemSettingsIdVerifier
0x1C0007090: "__cdecl _imp_RtlEnumerateGenericTableWithoutSplayingAvl" __imp_RtlEnumerateGenericTableWithoutSplayingAvl
0x1C00012FC: UwfRegLoadKeyDeferred
0x1C0007018: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C0009200: UwfRegGenericTableFreeRoutine
0x1C00071A8: "__cdecl _imp_SeReleaseSubjectContext" __imp_SeReleaseSubjectContext
0x1C0003C20: SDDL_DEVOBJ_SYS_ALL_ADM_RWX_WORLD_R_buffer
0x1C00071D8: "__cdecl _imp_MmHighestUserAddress" __imp_MmHighestUserAddress
0x1C00072D0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00037D0: "\Device\HarddiskPersistentVolume" ??_C@_1II@OBCLKIGM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C00053A8: "struct _UWFRTL_UWF_CONFIG * __ptr64 __ptr64 UwfRegGlobalConfigPtr" ?UwfRegGlobalConfigPtr@@3PEAU_UWFRTL_UWF_CONFIG@@EA
0x1C0007270: "__cdecl _imp_?UwfrtlDelay@@YAJ_J@Z" __imp_?UwfrtlDelay@@YAJ_J@Z
0x1C0009230: UwfRegGenericTableCompareRoutine
0x1C0007000: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C00072B0: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL
0x1C0003520: "\Registry\Machine\PERSISTENT_BCD" ??_C@_1FC@ELLDECDL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAB?$AAC?$AAD@
0x1C0003128: "PUWFREG_DEFERRED_CONTEXT" ??_C@_0BJ@CAJHIEPL@PUWFREG_DEFERRED_CONTEXT?$AA@
0x1C0007290: "__cdecl _imp_?UwfrtlOpenKey@@YAJPEAPEAXKAEBU_UNICODE_STRING@@@Z" __imp_?UwfrtlOpenKey@@YAJPEAPEAXKAEBU_UNICODE_STRING@@@Z
0x1C0007280: "__cdecl _imp_?UwfrtlIsReadOnlyMediaMode@@YA_NXZ" __imp_?UwfrtlIsReadOnlyMediaMode@@YA_NXZ
0x1C0003338: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x1C000BADC: UwfRegUnloadPersistentHives
0x1C000C74C: UwfRegEjectPersistentVolume
0x1C000BD30: UwfRegUnloadPersistentHive
0x1C0001E14: UwfRegMarkPersistentHiveUnloadingInProgress
0x1C0007148: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000AAB0: UwfRegPostCreateOpenKeyExCallback
0x1C0007230: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_INFORMATION" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_INFORMATION
0x1C000E51C: UwfregSyncCommitKeysPermissions
0x1C00019BC: UwfRegIsKeyExists
0x1C0003620: "\Device\HarddiskPersistentVolume" ??_C@_1IM@MPBFNDPF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C00070A0: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0002570: "__cdecl _security_check_cookie" __security_check_cookie
0x1C000F718: UwfRegPopulatePrefixTable
0x1C00072A8: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_ASSERTION" __imp_UwflogNewEntry_UWFLOG_LEVEL_ASSERTION
0x1C0007150: "__cdecl _imp_ZwQueryKey" __imp_ZwQueryKey
0x1C0007058: "__cdecl _imp_RtlInitializeUnicodePrefix" __imp_RtlInitializeUnicodePrefix
0x1C00072E0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0003B10: "\Device\UwfvolControl" ??_C@_1CM@DGFIDOEL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AAw?$AAf?$AAv?$AAo?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C0003490: "\Device\HarddiskPersistentVolume" ??_C@_1II@PDMEOLIJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C000EB98: UwfRegPersistentHiveLazyUnloadTimerStart
0x1C0007120: "__cdecl _imp_ObReferenceObjectByHandleWithTag" __imp_ObReferenceObjectByHandleWithTag
0x1C0009010: UwfRegEvtDriverUnload
0x1C0007218: "__cdecl _imp_?UwfrtlInitialize@@YAJXZ" __imp_?UwfrtlInitialize@@YAJXZ
0x1C0007158: "__cdecl _imp_ZwQuerySecurityObject" __imp_ZwQuerySecurityObject
0x1C000E1A8: UwfRegCommitPath
0x1C00070B0: "__cdecl _imp_RtlCompareUnicodeStrings" __imp_RtlCompareUnicodeStrings
0x1C00070D0: "__cdecl _imp_ZwLoadKey" __imp_ZwLoadKey
0x1C000D288: UwfRegQueryClassInfo
0x1C0003148: "384910" ??_C@_1O@CPEBOBBA@?$AA3?$AA8?$AA4?$AA9?$AA1?$AA0?$AA?$AA@
0x1C0009EC0: UwfRegIsRedirectionRequired
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0007178: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C0003010: "__cdecl load_config_used" _load_config_used
0x1C00022F0: FxStubDriverUnload
0x1C000BCA0: UwfRegUnloadPersistentHiveUpdateRefCount
0x1C00071B8: "__cdecl _imp_ZwOpenProcessTokenEx" __imp_ZwOpenProcessTokenEx
0x1C00070D8: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C00070F8: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0007078: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x1C0005160: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C0007228: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_INFORMATION" __imp_UwflogNewEntry_UWFLOG_LEVEL_INFORMATION
0x1C000E30C: UwfRegCommitNode
0x1C0001EB0: UwfRegPersistentHiveLazyUnloadEvtTimerFunc
0x1C0007028: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0007110: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0003000: SDDL_DEVOBJ_SYS_ALL_ADM_RWX_WORLD_R
0x1C0007220: "__cdecl _imp_?UwfrtlGetGlobalConfigPtr@@YAJPEAPEAU_UWFRTL_UWF_CONFIG@@@Z" __imp_?UwfrtlGetGlobalConfigPtr@@YAJPEAPEAU_UWFRTL_UWF_CONFIG@@@Z
0x1C000D4B4: UwfRegDuplicateKey
0x1C00098B0: UwfRegEvtIoDeviceControl
0x1C0005190: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUfduUfduivtUlyquivUznwGEUkivxlnkOlyq@uwfreg" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUfduUfduivtUlyquivUznwGEUkivxlnkOlyq@uwfreg
0x1C00050E0: "__cdecl WDF_PUWFREG_DEFERRED_CONTEXT_TYPE_INFO" _WDF_PUWFREG_DEFERRED_CONTEXT_TYPE_INFO
0x1C0003C00: "CurrentSettings" ??_C@_1CA@PMMIMEAO@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x1C0003AA8: "\Registry\Machine\SAM" ??_C@_1CM@MCIMCCII@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAA?$AAM?$AA?$AA@
0x1C00025C0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000A160: UwfRegSetPathDirty
0x1C00090CC: UwfRegCleanupGenericTable
0x1C0003210: "HKLM\System\CurrentControlSet" ??_C@_1DM@BAHFFEEG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
0x1C000BE88: UwfRegLoadPersistentHiveUpdateRefCount
0x1C0003860: "\Registry" ??_C@_1BE@BNJCNEJN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?$AA@
0x1C0003310: "\Registry\Machine" ??_C@_1CE@NMBJJGCH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x1C00071F8: "__cdecl _imp_UwflogCompleteEntry_UWFLOG_LEVEL_ERROR" __imp_UwflogCompleteEntry_UWFLOG_LEVEL_ERROR
0x1C0002240: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C000ABEC: UwfRegAllocateRedirectionContext
0x1C0007268: "__cdecl _imp_?UwfrtlQueryBcdHiveFileLocation@@YAJPEAPEBG@Z" __imp_?UwfrtlQueryBcdHiveFileLocation@@YAJPEAPEBG@Z
0x1C0007190: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C000CC40: UwfRegAddHklmKeyMapEntry
0x1C0003440: "\Registry\Machine\PERSISTENT_SOF" ??_C@_1EM@DPBMJGOH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAP?$AAE?$AAR?$AAS?$AAI?$AAS?$AAT?$AAE?$AAN?$AAT?$AA_?$AAS?$AAO?$AAF@
0x1C00014F8: UwfRegIsSystemGoingDown
0x1C00039B8: "\Registry\Machine\SYSTEM" ??_C@_1DC@KILCGNCG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x1C0001010: UwfRegStartFilteringCallback
0x1C0005170: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C00018C0: UwfRegDeleteKey
0x1C0007160: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x1C0009190: UwfRegGenericTableAllocRoutine
0x1C0007130: "__cdecl _imp_ZwUnloadKey" __imp_ZwUnloadKey
0x1C0007180: "__cdecl _imp_ZwCreateKeyTransacted" __imp_ZwCreateKeyTransacted
0x1C0002330: FxDriverEntry
0x1C00070E0: "__cdecl _imp_RtlFindUnicodePrefix" __imp_RtlFindUnicodePrefix
0x1C0005140: "__cdecl _security_cookie" __security_cookie
0x1C0003170: "\Registry\Machine\SYSTEM\Select" ??_C@_1EA@BCBPPLNE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?$AA@
0x1C00031E0: "\GLOBAL??\UwfRegControl" ??_C@_1DA@IIFBFPMG@?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAw?$AAf?$AAR?$AAe?$AAg?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C000B530: UwfRegTranslateKeyName
0x1C0003858: "\" ??_C@_01KICIPPFI@?2?$AA@
0x1C0002188: RtlUnicodeStringPrintf
0x1C000CF40: UwfRegQueryValue
0x1C000982C: UwfRegCleanupGlobals
0x1C0007188: "__cdecl _imp_ZwQueryObject" __imp_ZwQueryObject
0x1C0009D98: UwfRegGetRegKeyNameFromObjectPtr
0x1C0007200: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_TRACE" __imp_UwflogNewEntry_UWFLOG_LEVEL_TRACE
0x1C00070B8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0003A68: "\Registry\Machine\COMPONENTS" ??_C@_1DK@EDAKKAIH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAC?$AAO?$AAM?$AAP?$AAO?$AAN?$AAE?$AAN?$AAT?$AAS?$AA?$AA@
0x1C00070E8: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x1C000FB50: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00071D0: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C0003AD8: "\Registry\Machine\SECURITY" ??_C@_1DG@BHJIEMIG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x1C00072B8: "__cdecl _imp_UwflogNewEntry_UWFLOG_LEVEL_CRITICAL" __imp_UwflogNewEntry_UWFLOG_LEVEL_CRITICAL
0x1C0007038: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00053B8: WdfFunctions_01015
0x1C0009B10: UwfRegMasterCallback
0x1C0003580: "\Device\HarddiskPersistentVolume" ??_C@_1EM@DELNEMJI@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe@
0x1C000C970: UwfRegIsHklmKey
0x1C0003880: "\Registry\Machine\SYSTEM\Current" ??_C@_1FG@PANEFCNO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000DEC0: UwfRegCopyValue
0x1C0007258: "__cdecl _imp_?UwfrtlUnregisterStateNotification@@YAXPEAX@Z" __imp_?UwfrtlUnregisterStateNotification@@YAXPEAX@Z
0x1C0003158: "Current" ??_C@_1BA@OFLJGHK@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
0x1C00025A0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0007170: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C0001590: UwfRegDoDeferred
0x1C0007010: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C000D7A8: UwfRegCreateKey
0x1C00071F0: ntoskrnl_NULL_THUNK_DATA
0x1C00070F0: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00013C0: UwfRegDoLoadKey
0x1C000F008: DriverEntry
0x1C00071E0: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0009264: UwfRegTranslateEntryToKernelNamespace
0x1C00029C0: memset
0x1C000731C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]