Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\condrv.sys Base=0x1C0000000 SHA-256=EAF349DC12A5368204838BE68348EC76512C1AB8D1AAA1B976D59B4478F0B3D5
PDB: condrv.pdb GUID={2EC23A39-C487-5CD3-CCEC1D4EC13C6472} Age=1

295 located named symbols:
0x1C0006148: "__cdecl _imp_PsGetThreadId" __imp_PsGetThreadId
0x1C00060E0: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C000CAA0: CdpBrokerCleanup
0x1C000DF00: CdpGetDisplaySize
0x1C0004008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0007010: CdCreateClient
0x1C0006080: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0006140: "__cdecl _imp__stricmp" __imp__stricmp
0x1C0006050: "__cdecl _imp_PsGetCurrentServerSilo" __imp_PsGetCurrentServerSilo
0x1C0009740: CdpCreateMdlChain
0x1C0006028: "__cdecl _imp_ObfDereferenceObjectWithTag" __imp_ObfDereferenceObjectWithTag
0x1C0006280: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0006220: "__cdecl _imp_ExEventObjectType" __imp_ExEventObjectType
0x1C0001240: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00039AC: "" ??_C@_11LOCGONAA@?$AA?$AA@LBKOJDO@
0x1C00060E8: "__cdecl _imp_IoGetRequestorProcess" __imp_IoGetRequestorProcess
0x1C0006178: "__cdecl _imp_ZwOpenProcess" __imp_ZwOpenProcess
0x1C0003868: "\Server" ??_C@_1BA@JGCIGBBE@?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@LBKOJDO@
0x1C00061F8: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C0004020: CdpFastIoDispatchTable
0x1C0006138: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0003930: "broker" ??_C@_06JMAAFDKG@broker?$AA@LBKOJDO@
0x1C0006200: "__cdecl _imp_SeQueryInformationToken" __imp_SeQueryInformationToken
0x1C0003810: "\KernelConnect" ??_C@_1BO@JDKKCLLH@?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@LBKOJDO@
0x1C0006110: "__cdecl _imp_MmProbeAndLockPages" __imp_MmProbeAndLockPages
0x1C0006118: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0009870: CdAddIoToPipe
0x1C0003670: CdpObjectCreationTable
0x1C0006208: "__cdecl _imp_SeAssignSecurityEx" __imp_SeAssignSecurityEx
0x1C00061B0: "__cdecl _imp_RtlRunOnceBeginInitialize" __imp_RtlRunOnceBeginInitialize
0x1C00060D0: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C00062B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0007EA0: CdpFreeConnection
0x1C0007680: CdpAddToIoTable
0x1C00060B0: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C000C550: CdCompleteBrokerIoWithServer
0x1C0006060: "__cdecl _imp_ExRaiseDatatypeMisalignment" __imp_ExRaiseDatatypeMisalignment
0x1C00072B0: CdpConvertClientDesiredAccess
0x1C0008430: CdpFindEaBufferItem
0x1C0003998: " -ForceV1" ??_C@_1BE@BLHHJNIK@?$AA?5?$AA?9?$AAF?$AAo?$AAr?$AAc?$AAe?$AAV?$AA1?$AA?$AA@LBKOJDO@
0x1C00061C8: "__cdecl _imp_BgkDisplayCharacter" __imp_BgkDisplayCharacter
0x1C000B880: CdCompleteRoutineFreeIrp
0x1C0004100: CdpServerList
0x1C0003890: "\CurrentIn" ??_C@_1BG@JBOCAAFN@?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAI?$AAn?$AA?$AA@LBKOJDO@
0x1C0009D20: CdGetProcessConnection
0x1C000D8B8: CdpCreateBrokerConnectionIo
0x1C000A080: CdpCompleteServerConnection
0x1C0006190: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0008030: CdCreateConnection
0x1C0001280: memcpy
0x1C00061E8: "__cdecl _imp_ZwAllocateLocallyUniqueId" __imp_ZwAllocateLocallyUniqueId
0x1C000B900: CdpServerQuerySecurity
0x1C0006210: "__cdecl _imp_ObLogSecurityDescriptor" __imp_ObLogSecurityDescriptor
0x1C00037F8: "\Connect" ??_C@_1BC@DBLHHDCC@?$AA?2?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@LBKOJDO@
0x1C00060C0: "__cdecl _imp_PsIsSystemProcess" __imp_PsIsSystemProcess
0x1C0009FF0: CdInitializeIo
0x1C000DC00: CdCreateDisplayObject
0x1C0006130: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C00010ED: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0001280: memmove
0x1C00017B0: CdpCancelIoIrp
0x1C000113C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0004140: CdDeviceObject
0x1C000AD70: CdpServerClose
0x1C0006120: "__cdecl _imp_PsInitialSystemProcess" __imp_PsInitialSystemProcess
0x1C000E094: CdpUpdateDisplay
0x1C0004110: CdpServerListLock
0x1C00060A8: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C0006090: "__cdecl _imp_KeUnstackDetachProcess" __imp_KeUnstackDetachProcess
0x1C000B580: CdpFastIoDeviceControl
0x1C0006188: "__cdecl _imp_PsGetProcessSessionId" __imp_PsGetProcessSessionId
0x1C000CFD0: CdpDispatchFlushBuffers
0x1C000E488: CdAccessCheck
0x1C000CC30: CdpBrokerIoctl
0x1C00060A0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0006068: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C0006290: "__cdecl _imp_ZwTerminateProcess" __imp_ZwTerminateProcess
0x1C000D7BC: CdpCompleteServerKernelConnectionQueue
0x1C0006228: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C0003938: "attach" ??_C@_06LHJMGKLI@attach?$AA@LBKOJDO@
0x1C000B2D0: CdDisconnectIoPipe
0x1C000DDD0: CdpDisplayClose
0x1C0004010: CdpGenericMapping
0x1C000CE70: CdpClientFlushBuffers
0x1C0006040: "__cdecl _imp_SePrivilegeCheck" __imp_SePrivilegeCheck
0x1C00061A8: "__cdecl _imp_PsIsCurrentThreadInServerSilo" __imp_PsIsCurrentThreadInServerSilo
0x1C000D1A0: CdCreateKernelConnection
0x1C000E240: CdReadNextIo
0x1C00011A4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C0006000: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0003450: CdServerType
0x1C0006170: "__cdecl _imp_PsGetProcessInheritedFromUniqueProcessId" __imp_PsGetProcessInheritedFromUniqueProcessId
0x1C0003928: "server" ??_C@_06HJHJCKIO@server?$AA@LBKOJDO@
0x1C0006020: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0001118: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00060C8: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C000A1B0: CdDereferenceServer
0x1C000E3E8: CdpCancelReadIoIrpPaged
0x1C0006048: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C0003908: "\Device\ConDrv" ??_C@_1BO@KJFFJCGI@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAD?$AAr?$AAv?$AA?$AA@LBKOJDO@
0x1C0009380: CdpConnectionIoctl
0x1C0006038: "__cdecl _imp_SeExports" __imp_SeExports
0x1C000C6A0: CdCreateBroker
0x1C0008680: CdpServerFastIoctl
0x1C00083B0: CdAllocateMdlForEaBufferItem
0x1C0007F70: CdpDispatchCreate
0x1C000A2F0: CdpClientClose
0x1C0003620: CdDisplayType
0x1C000D9F8: CdpFreeKernelConnectionIrp
0x1C000D520: CdpAllocateKernelConnectionIrp
0x1C00060B8: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C000AFA0: CdpAllocateReferenceObject
0x1C0006288: "__cdecl _imp_PsResumeProcess" __imp_PsResumeProcess
0x1C000CC84: CdpCompleteBrokerIo
0x1C0008B00: CdpWriteIoOutput
0x1C00076E0: CdpDispatchDeviceControl
0x1C000CE10: CdFreeMdlChain
0x1C0001010: RtlStringCbPrintfW
0x1C00038F0: "\Display" ??_C@_1BC@DPLBPPFF@?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?$AA@LBKOJDO@
0x1C0007660: CdpGetMdlChainSize
0x1C00061C0: "__cdecl _imp_RtlRunOnceComplete" __imp_RtlRunOnceComplete
0x1C00084F0: CdpClientWrite
0x1C0006088: "__cdecl _imp_KeStackAttachProcess" __imp_KeStackAttachProcess
0x1C0006100: "__cdecl _imp_PsGetProcessWow64Process" __imp_PsGetProcessWow64Process
0x1C000F010: GsDriverEntry
0x1C00062B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0006220: ExEventObjectType
0x1C0006070: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C00061B8: "__cdecl _imp_BgkGetConsoleState" __imp_BgkGetConsoleState
0x1C00017E0: CdpCancelReadIoIrp
0x1C0004120: CdpDisplayState
0x1C0006160: "__cdecl _imp_PsGetProcessPeb" __imp_PsGetProcessPeb
0x1C00037F0: "" ??_C@_00CNPNBAHC@?$AA@LBKOJDO@
0x1C000B560: CdpIsFunctionCancellable
0x1C000C8DC: CdDereferenceBroker
0x1C0008840: CdCompleteIo
0x1C0003858: "\Output" ??_C@_1BA@DLLLAFCO@?$AA?2?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AA?$AA@LBKOJDO@
0x1C000ABD0: CdpCreateProcess
0x1C0006068: MmUserProbeAddress
0x1C00060F0: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C0007BC0: CdpClientIoctl
0x1C0007D50: CdpConnectionClose
0x1C000A670: CdpSetServerInformation
0x1C0006128: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C00062A0: "__cdecl _imp_SeSetSecurityDescriptorInfo" __imp_SeSetSecurityDescriptorInfo
0x1C00010B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C000B4C0: CdpPrepareIoCompletion
0x1C0004168: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUxlmhlovUxlmwieUnkUlyquivUznwGEUxlmwiekOlyq@condrv" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUxlmhlovUxlmwieUnkUlyquivUznwGEUxlmwiekOlyq@condrv
0x1C000E590: CdpServerSetSecurity
0x1C00062C0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0006240: "__cdecl _imp_ZwCreateUserProcess" __imp_ZwCreateUserProcess
0x1C000B8B0: CdpDispatchQuerySecurity
0x1C0008E30: CdSubmitUserIo
0x1C0006298: "__cdecl _imp_SeQuerySecurityDescriptorInfo" __imp_SeQuerySecurityDescriptorInfo
0x1C0008BD0: CdWriteIoOutput
0x1C000CB20: CdpBrokerFastIoctl
0x1C00034A0: CdConnectionType
0x1C0003830: "\Reference" ??_C@_1BG@BHKEFLKF@?$AA?2?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@LBKOJDO@
0x1C0007C10: CdClientUserIo
0x1C000A420: CdGetConnectionFromFileObject
0x1C00061A0: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C0010000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C0003580: CdClientType
0x1C0006230: "__cdecl _imp_ZwQueryInformationProcess" __imp_ZwQueryInformationProcess
0x1C0006270: "__cdecl _imp_PsDereferencePrimaryToken" __imp_PsDereferencePrimaryToken
0x1C0003530: CdReferenceType
0x1C0006198: "__cdecl _imp_IoCancelIrp" __imp_IoCancelIrp
0x1C0006180: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0006018: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C0006150: "__cdecl _imp_PsGetProcessId" __imp_PsGetProcessId
0x1C000ADB0: CdpReferenceObjectClose
0x1C0006168: "__cdecl _imp_PsReleaseProcessExitSynchronization" __imp_PsReleaseProcessExitSynchronization
0x1C0006078: IoFileObjectType
0x1C0006268: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0007380: CdpServerIoctl
0x1C0006238: "__cdecl _imp_ZwSetInformationProcess" __imp_ZwSetInformationProcess
0x1C000D0F0: CdpDispatchSetSecurity
0x1C0003878: "\Console" ??_C@_1BC@GLNEOHJN@?$AA?2?$AAC?$AAo?$AAn?$AAs?$AAo?$AAl?$AAe?$AA?$AA@LBKOJDO@
0x1C000B7D0: CdpConnectionFastIoctl
0x1C00038C0: "\ScreenBuffer" ??_C@_1BM@IKFKFAEP@?$AA?2?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?$AA@LBKOJDO@
0x1C000CAE0: CdpBrokerClose
0x1C000D180: CdpUnload
0x1C00060D8: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C0004160: CdpBrokerListLock
0x1C0001100: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00061E0: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C0006260: "__cdecl _imp_PsReferencePrimaryToken" __imp_PsReferencePrimaryToken
0x1C0006108: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C0009C40: CdpReadIoInput
0x1C0007320: CdpCompleteClientCreation
0x1C0008170: CdpCreateServerConnectionIo
0x1C0008D20: CdReadIoInput
0x1C000DA40: CdpGetProcessServerFromConnection
0x1C00038A8: "\CurrentOut" ??_C@_1BI@EEDGHOOP@?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAO?$AAu?$AAt?$AA?$AA@LBKOJDO@
0x1C00038E0: "\Broker" ??_C@_1BA@CAPLJGNP@?$AA?2?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@LBKOJDO@
0x1C00061D8: "__cdecl _imp_RtlRunOnceInitialize" __imp_RtlRunOnceInitialize
0x1C0009F90: CdpLookupIo
0x1C0007530: CdpCompleteReadIo
0x1C000B220: CdpDispatchCleanup
0x1C0006218: "__cdecl _imp_SeDeassignSecurity" __imp_SeDeassignSecurity
0x1C000A050: CdpGetRequestorProcess
0x1C0004000: "__cdecl _security_cookie" __security_cookie
0x1C000DF7C: CdpGetFontSize
0x1C0004150: CdpBrokerList
0x1C0003988: "ntvdm.exe" ??_C@_09OPNJONKI@ntvdm?4exe?$AA@LBKOJDO@
0x1C000D640: CdpCompleteBrokerConnection
0x1C000CF20: CdpClientRead
0x1C0007C80: CdpFreeClient
0x1C0006258: "__cdecl _imp_PsCaptureUserProcessParameters" __imp_PsCaptureUserProcessParameters
0x1C0008490: CdpDispatchWrite
0x1C000A460: CdCreateDefaultObjectClient
0x1C000E340: CdpCancelIoIrpPaged
0x1C0006278: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C000AEF0: CdCreateReferenceObject
0x1C00060F8: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C000A610: CdpAllocateClient
0x1C00085A0: CdpGetClientTarget
0x1C000F044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0006250: "__cdecl _imp_PsGetProcessImageFileName" __imp_PsGetProcessImageFileName
0x1C00035D0: CdBrokerType
0x1C000DE10: CdpDisplayFastIoctl
0x1C0004118: CdpDisplayInitialized
0x1C000A790: CdpLaunchServerProcess
0x1C000C9E0: CdFindBroker
0x1C0006158: "__cdecl _imp_PsAcquireProcessExitSynchronization" __imp_PsAcquireProcessExitSynchronization
0x1C0006010: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0003940: "\SystemRoot\System32\Conhost.exe" ??_C@_1EC@JAPDFLGN@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAn?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe@LBKOJDO@
0x1C00010E0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00016D0: CdpCancelKernelConnectionQueuedIrp
0x1C0006058: "__cdecl _imp_ObfReferenceObjectWithTag" __imp_ObfReferenceObjectWithTag
0x1C00061D0: "__cdecl _imp_BgkSetCursor" __imp_BgkSetCursor
0x1C000D6D0: CdpCompleteServerKernelConnection
0x1C0006248: "__cdecl _imp_ObCloseHandle" __imp_ObCloseHandle
0x1C0006078: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C000D060: CdpDispatchRead
0x1C00039B0: "%wZ 0x%x%s" ??_C@_1BG@FKGICOMF@?$AA?$CF?$AAw?$AAZ?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAs?$AA?$AA@LBKOJDO@
0x1C0003848: "\Input" ??_C@_1O@FCLMFPAD@?$AA?2?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?$AA@LBKOJDO@
0x1C000B000: CdCreateSecurityDescriptor
0x1C00062A8: ntoskrnl_NULL_THUNK_DATA
0x1C0006030: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00061F0: "__cdecl _imp_ObDereferenceSecurityDescriptor" __imp_ObDereferenceSecurityDescriptor
0x1C0006008: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0007CD0: CdpDispatchClose
0x1C0007470: CdpCompleteReadIoIrp
0x1C000DFF8: CdpSetCursorInformation
0x1C000F080: DriverEntry
0x1C0006098: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C000B0B0: CdpAllocateServer
0x1C000B290: CdpServerCleanup
0x1C00034F0: CdpPalette
0x1C00015C0: memset
0x1C00062D4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C000AE10: CdCreateServer

[JEB Decompiler by PNF Software]