Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\terminpt.sys Base=0x1C0000000 SHA-256=0A727D884164BA5A45679B6BB7C67D10A22B2E2203709ACCFB20C7086BF38F80
PDB: terminpt.pdb GUID={AE66F026-7E6F-2E24-983D09D14B652C32} Age=1

165 located named symbols:
0x1C00014E0: PtPower
0x1C00028D0: WppClassicProviderCallback
0x1C0007000: "__cdecl _imp_WmiCompleteRequest" __imp_WmiCompleteRequest
0x1C0007130: "__cdecl _imp_PsGetServerSiloServiceSessionId" __imp_PsGetServerSiloServiceSessionId
0x1C0005038: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0009410: WppTraceCallback
0x1C0007120: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0007138: "__cdecl _imp_PsGetCurrentServerSilo" __imp_PsGetCurrentServerSilo
0x1C000A0E4: TiLock
0x1C00071B8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002D50: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00071B0: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0004112: "" ??_C@_00CNPNBAHC@?$AA@
0x1C00041A0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0007060: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0009230: PtQueryWmiRegInfo
0x1C00071D8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0001810: PtPowerUpToD0Complete
0x1C00071A0: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C0007038: WppRecorder_NULL_THUNK_DATA
0x1C0007088: "__cdecl _imp_PoStartNextPowerIrp" __imp_PoStartNextPowerIrp
0x1C00070E8: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00071A8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C0004110: " " ??_C@_01CLKCMJKC@?5?$AA@
0x1C0002A68: TiAddDeviceToSession
0x1C00070F0: "__cdecl _imp_KeInitializeGuardedMutex" __imp_KeInitializeGuardedMutex
0x1C0004150: WPP_e557fd90f5213a7e19587ce93bc8629e_Traceguids
0x1C0005008: MouWmiGuidList
0x1C0007048: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C00070A8: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C00070D8: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0002D80: memcpy
0x1C0001450: PtPnPComplete
0x1C0005018: KbWmiGuidList
0x1C0007178: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C0007188: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0005068: pfnWppGetVersion
0x1C0007040: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C0007058: "__cdecl _imp_IoAcquireRemoveLockEx" __imp_IoAcquireRemoveLockEx
0x1C0002D80: memmove
0x1C0007180: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C0002CDC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0008E50: PtSetWmiDataItem
0x1C00050A0: WPP_MAIN_CB
0x1C00089C0: PtDeviceControl
0x1C0007118: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C00083D0: PtPnP
0x1C0002570: PtSendCurrentMouseInput
0x1C0008B98: PtInitWmi
0x1C00042B0: WPP_d3a384a0067a3e6496b622bbd42dc01d_Traceguids
0x1C00019E4: PtReleaseSessionDevice
0x1C000B008: PtEntry
0x1C00082AC: PtSendIrpSynchronously
0x1C000279C: PtSendCurrentKeyboardIndicators
0x1C0008870: PtCreate
0x1C0008F00: PtSetWmiDataBlock
0x1C00070F8: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C00070B0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0001C70: WPP_RECORDER_SF_sl
0x1C0005088: pfnWppQueryTraceInformation
0x1C0008FB0: PtKeyboardQueryWmiDataBlock
0x1C0007208: "__cdecl _IMPORT_DESCRIPTOR_WppRecorder" __IMPORT_DESCRIPTOR_WppRecorder
0x1C0007010: WMILIB_NULL_THUNK_DATA
0x1C0008010: PtAddDevice
0x1C000A108: TiUnlock
0x1C000A224: IsCallerTermsrvService
0x1C0002CB8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0004170: WPP_3a3f5615e20434ed4b73a566bdfc8b71_Traceguids
0x1C0004180: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0005070: pfnEtwRegisterClassicProvider
0x1C00070C0: "__cdecl _imp_KfRaiseIrql" __imp_KfRaiseIrql
0x1C0002A48: TiUnlockSession
0x1C0007100: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C0007078: "__cdecl _imp_IoReleaseRemoveLockEx" __imp_IoReleaseRemoveLockEx
0x1C0005078: pfnEtwUnregister
0x1C0001D44: PtClose
0x1C0007098: "__cdecl _imp_IoGetDevicePropertyData" __imp_IoGetDevicePropertyData
0x1C00018E8: PtPrepareSessionDevice
0x1C000B3F0: GsDriverEntry
0x1C00071D0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0004278: "\DosDevices\TermInptCDO" ??_C@_1DA@CIKNFGHN@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAI?$AAn?$AAp?$AAt?$AAC?$AAD?$AAO?$AA?$AA@
0x1C0001350: WPP_RECORDER_SF_sqd
0x1C00090F0: PtMouseQueryWmiDataBlock
0x1C000127C: WPP_RECORDER_SF_sq
0x1C0007108: "__cdecl _imp_RtlUnicodeStringToInteger" __imp_RtlUnicodeStringToInteger
0x1C00026F0: CancelIndicatorIrp
0x1C0005000: WPP_GLOBAL_Control
0x1C00042A8: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C0004140: WPP_ThisDir_CTLGUID_CtlGuid
0x1C0007128: "__cdecl _imp_IoGetRequestorSessionId" __imp_IoGetRequestorSessionId
0x1C0007110: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0009CF0: TiDeviceControl
0x1C0001008: WPP_RECORDER_SF_s
0x1C0002C60: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0007190: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C00071E0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0007008: "__cdecl _imp_WmiSystemControl" __imp_WmiSystemControl
0x1C00023F8: PtSendCurrentKeyboardInput
0x1C00098E0: TiCreate
0x1C0007030: "__cdecl _imp_WppAutoLogStart" __imp_WppAutoLogStart
0x1C00051B8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwirevihUrmkfgUhbhUdrmDCUlyquivUznwGEUkivxlnkOlyq@terminpt" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwirevihUrmkfgUhbhUdrmDCUlyquivUznwGEUkivxlnkOlyq@terminpt
0x1C00070D0: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C0007198: "__cdecl _imp_IoInitializeRemoveLockEx" __imp_IoInitializeRemoveLockEx
0x1C0007028: "__cdecl _imp_WppAutoLogStop" __imp_WppAutoLogStop
0x1C0009C30: TiClose
0x1C0007068: "__cdecl _imp_IoReleaseRemoveLockAndWaitEx" __imp_IoReleaseRemoveLockAndWaitEx
0x1C000C000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0009730: TiUnload
0x1C0004000: "__cdecl load_config_used" _load_config_used
0x1C0002A28: TiLockSession
0x1C0007150: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C00071F4: "__cdecl _IMPORT_DESCRIPTOR_WMILIB" __IMPORT_DESCRIPTOR_WMILIB
0x1C00070E0: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0007140: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0004130: WPP_e9a460043f653e237ec12290fe9890b4_Traceguids
0x1C00041C0: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004230: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0007160: "__cdecl _imp_KeReleaseGuardedMutex" __imp_KeReleaseGuardedMutex
0x1C0002CA0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0005050: KbKeyboardPortGuid
0x1C00092CC: WppLoadTracingSupport
0x1C0007070: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0007020: "__cdecl _imp_imp_WppRecorderReplay" __imp_imp_WppRecorderReplay
0x1C00070A0: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0005030: "__cdecl _security_cookie" __security_cookie
0x1C0001B7C: WPP_RECORDER_SF_sdd
0x1C0001184: WPP_RECORDER_SF_sDd
0x1C000292C: WPP_RECORDER_SF_sDq
0x1C0007168: "__cdecl _imp_RtlCheckTokenMembership" __imp_RtlCheckTokenMembership
0x1C00010B0: WPP_RECORDER_SF_sD
0x1C00010B0: WPP_RECORDER_SF_sd
0x1C00041F8: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C000B424: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0004118: P_DEVPKEY_Device_SessionId
0x1C0005060: WPPTraceSuite
0x1C0007050: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0001DE0: PtInternalDeviceControl
0x1C0004250: "\Device\TermInptCDO" ??_C@_1CI@HDBPPJPH@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAI?$AAn?$AAp?$AAt?$AAC?$AAD?$AAO?$AA?$AA@
0x1C0002C90: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00070C8: "__cdecl _imp_KeLowerIrql" __imp_KeLowerIrql
0x1C000A12C: InitializeServiceSid
0x1C0007090: "__cdecl _imp_PoCallDriver" __imp_PoCallDriver
0x1C0007018: "__cdecl _imp_WppAutoLogTrace" __imp_WppAutoLogTrace
0x1C0008C90: PtSystemControl
0x1C0007158: "__cdecl _imp_KeAcquireGuardedMutex" __imp_KeAcquireGuardedMutex
0x1C00071C8: ntoskrnl_NULL_THUNK_DATA
0x1C00070B8: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0007148: "__cdecl _imp_ZwOpenFile" __imp_ZwOpenFile
0x1C0007170: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C0007080: "__cdecl _imp_PoSetPowerState" __imp_PoSetPowerState
0x1C000B140: DriverEntry
0x1C0005080: pfnWppTraceMessage
0x1C00042C0: WPP_f77ebb5d7113342282cdd9a9b2170ec1_Traceguids
0x1C0009664: WppInitKm
0x1C0005040: MouPointerPortGuid
0x1C00030C0: memset
0x1C000721C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0005100: Globals
0x1C00071C0: "__cdecl _imp_IoGetDeviceProperty" __imp_IoGetDeviceProperty

[JEB Decompiler by PNF Software]