Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\msfs.sys Base=0x1C0000000 SHA-256=7F2B7FC17CD1BA4103D88BB0719658597AB0E5E793B6F6B5A7D952E21F3F1C5A
PDB: msfs.pdb GUID={F3CC7F50-E5EA-646F-5D3A834D63A2AAD3} Age=1
184 located named symbols:
0x1C0008A24: MsSetCancelRoutine
0x1C0008A80: MsCommonDirectoryControl
0x1C00050E0: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C0007910: MsCreateDevice
0x1C0003008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0003018: MspIndexNumberGenerator
0x1C0005078: "__cdecl _imp_ObReferenceSecurityDescriptor" __imp_ObReferenceSecurityDescriptor
0x1C000A0EC: MsWriteDataQueue
0x1C0003020: MsPagingPushLock
0x1C00050F8: "__cdecl _imp_ObfDereferenceObjectWithTag" __imp_ObfDereferenceObjectWithTag
0x1C0008B78: MsQueryDirectory
0x1C0009E50: MsFsdQueryVolumeInformation
0x1C0005070: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0001330: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C000B000: MsSiloMonitor
0x1C00091D0: MsQueryInternalInfo
0x1C00050D0: "__cdecl _imp_IoGetRequestorProcess" __imp_IoGetRequestorProcess
0x1C00084BC: MsCreateClientEnd
0x1C0005058: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C0005198: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0005068: "__cdecl _imp_SeAssignSecurity" __imp_SeAssignSecurity
0x1C0005170: "__cdecl _imp_PsAttachSiloToCurrentThread" __imp_PsAttachSiloToCurrentThread
0x1C0005160: "__cdecl _imp_PsGetPermanentSiloContext" __imp_PsGetPermanentSiloContext
0x1C0005030: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0005230: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0005270: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0005148: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C0005250: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C0005150: "__cdecl _imp_ExRaiseDatatypeMisalignment" __imp_ExRaiseDatatypeMisalignment
0x1C0007740: MsCreateDefaultRootSecurity
0x1C0005130: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C00066C0: MsCommonCreateMailslot
0x1C0007190: MsCreateMailslotPrefix
0x1C0005110: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0001340: memcpy
0x1C00050C0: "__cdecl _imp_ObLogSecurityDescriptor" __imp_ObLogSecurityDescriptor
0x1C0009B84: MsDeleteFcb
0x1C0005220: "__cdecl _imp_RtlSetGroupSecurityDescriptor" __imp_RtlSetGroupSecurityDescriptor
0x1C00051C0: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C0007BD0: MsFsdQuerySecurityInfo
0x1C0009538: MsPeek
0x1C0005168: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0005208: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C000125D: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0001340: memmove
0x1C0007070: MsCommonRead
0x1C0005210: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C00051A0: "__cdecl _imp_PsDetachSiloFromCurrentThread" __imp_PsDetachSiloFromCurrentThread
0x1C0001910: MsNotifyChangeDirectoryCancel
0x1C0005040: "__cdecl _imp_SeAppendPrivileges" __imp_SeAppendPrivileges
0x1C0001294: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000912C: MsQueryBasicInfo
0x1C0005108: "__cdecl _imp_PsReturnProcessPagedPoolQuota" __imp_PsReturnProcessPagedPoolQuota
0x1C0007C20: MsCommonQuerySecurityInfo
0x1C0005188: "__cdecl _imp_PsStartSiloMonitor" __imp_PsStartSiloMonitor
0x1C0005088: "__cdecl _imp_RtlInsertUnicodePrefix" __imp_RtlInsertUnicodePrefix
0x1C0006070: MsCommonCreate
0x1C00051D0: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0001120: MsFlushNotifyForFile
0x1C0006010: MsFsdCreate
0x1C0006EC0: MsFsdSetInformation
0x1C00050F0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00091F0: MsQueryMailslotInfo
0x1C0005138: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C0009C4C: MsDeleteProtectedPrefix
0x1C00050B0: "__cdecl _imp_SePrivilegeCheck" __imp_SePrivilegeCheck
0x1C0009284: MsQueryNameInfo
0x1C00050D8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0005038: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0009F0C: MsCommonWrite
0x1C0001270: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00051E0: "__cdecl _imp_RtlSetOwnerSecurityDescriptor" __imp_RtlSetOwnerSecurityDescriptor
0x1C0005240: "__cdecl _imp_RtlRemoveUnicodePrefix" __imp_RtlRemoveUnicodePrefix
0x1C0005200: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0005050: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C0005020: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C00050B8: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00090F0: MsFsdQueryInformation
0x1C0005238: "__cdecl _imp_MmResetDriverPaging" __imp_MmResetDriverPaging
0x1C0009A90: MsTimeoutRead
0x1C0005140: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C00051A8: "__cdecl _imp_MmPageEntireDriver" __imp_MmPageEntireDriver
0x1C000934C: MsQueryPositionInfo
0x1C0009780: MsSiloTerminateNotify
0x1C0001010: MsCheckForNotify
0x1C0007020: MsFsdRead
0x1C0006F60: MsSetMailslotInfo
0x1C00098B0: MsCreateWorkContext
0x1C0005100: "__cdecl _imp_PsChargeProcessPagedPoolQuota" __imp_PsChargeProcessPagedPoolQuota
0x1C0008F40: MsCommonQueryInformation
0x1C0002110: "\Device\Mailslot" ??_C@_1CC@DFNKCOFC@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C000D010: GsDriverEntry
0x1C0005268: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0006460: MsFsdCleanup
0x1C00079C0: MsInitializeVcb
0x1C0007480: MsFsdSetSecurityInfo
0x1C0001770: MsCancelDataQueueIrp
0x1C0001814: MsNotifyChangeDirectory
0x1C0005138: MmUserProbeAddress
0x1C0005060: "__cdecl _imp_IoGetFileObjectGenericMapping" __imp_IoGetFileObjectGenericMapping
0x1C0005218: "__cdecl _imp_SeSetSecurityDescriptorInfo" __imp_SeSetSecurityDescriptorInfo
0x1C0001220: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00094D0: MsFsdFsControl
0x1C0005248: "__cdecl _imp_RtlInitializeUnicodePrefix" __imp_RtlInitializeUnicodePrefix
0x1C0005278: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C00051F0: "__cdecl _imp_SeQuerySecurityDescriptorInfo" __imp_SeQuerySecurityDescriptorInfo
0x1C00089B0: MsRemoveDataQueueIrp
0x1C0008B30: MsFsdDirectoryControl
0x1C000943C: MsSetBasicInfo
0x1C0005090: "__cdecl _imp_SeOpenObjectAuditAlarm" __imp_SeOpenObjectAuditAlarm
0x1C00096E0: MsSiloCreateNotify
0x1C0005158: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C0005178: "__cdecl _imp_PsGetSiloMonitorContextSlot" __imp_PsGetSiloMonitorContextSlot
0x1C000E000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00050C8: "__cdecl _imp_FsRtlLegalAnsiCharacterArray" __imp_FsRtlLegalAnsiCharacterArray
0x1C0002000: "__cdecl load_config_used" _load_config_used
0x1C0005010: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C000B008: MsDriverObject
0x1C00050A8: "__cdecl _imp_SeLockSubjectContext" __imp_SeLockSubjectContext
0x1C00088EC: MsRemoveDataQueueEntry
0x1C0007E00: MsReferenceDriver
0x1C0009D04: MsCommonQueryVolumeInformation
0x1C00050A0: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00093B4: MsQueryStandardInfo
0x1C0005120: "__cdecl _imp_FsRtlIsNameInExpression" __imp_FsRtlIsNameInExpression
0x1C0001310: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0008690: MsAddDataQueueEntry
0x1C0006240: MsFsdClose
0x1C0005180: "__cdecl _imp_PsRegisterSiloMonitor" __imp_PsRegisterSiloMonitor
0x1C0008440: MsCancelTimer
0x1C0005228: "__cdecl _imp_SeSinglePrivilegeCheck" __imp_SeSinglePrivilegeCheck
0x1C00051D8: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C0005190: "__cdecl _imp_PsInsertPermanentSiloContext" __imp_PsInsertPermanentSiloContext
0x1C0005118: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C00051B0: "__cdecl _imp_RtlFindUnicodePrefix" __imp_RtlFindUnicodePrefix
0x1C0005098: "__cdecl _imp_SeUnlockSubjectContext" __imp_SeUnlockSubjectContext
0x1C0005258: "__cdecl _imp_FsRtlTeardownPerStreamContexts" __imp_FsRtlTeardownPerStreamContexts
0x1C0003000: "__cdecl _security_cookie" __security_cookie
0x1C0005018: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0005048: "__cdecl _imp_SeFreePrivileges" __imp_SeFreePrivileges
0x1C00051C8: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C000C000: MsDriverReferenceCount
0x1C00074D0: MsCommonSetSecurityInfo
0x1C0007D40: MsOpenMailslotRootDirectory
0x1C0006670: MsFsdCreateMailslot
0x1C000A0B0: MsFsdWrite
0x1C000D044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00050C8: FsRtlLegalAnsiCharacterArray
0x1C00097F8: MsFindPrefix
0x1C00051B8: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0005128: "__cdecl _imp_RtlUpcaseUnicodeString" __imp_RtlUpcaseUnicodeString
0x1C0009E98: MsQueryFsVolumeInfo
0x1C0005008: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C00051F8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0001250: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00019B0: MsReadTimeoutHandler
0x1C0002208: "MSFS" ??_C@_19KMCBKGIB@?$AAM?$AAS?$AAF?$AAS?$AA?$AA@
0x1C00050E8: "__cdecl _imp_ObfReferenceObjectWithTag" __imp_ObfReferenceObjectWithTag
0x1C0009990: MsReadDataQueue
0x1C0005260: ntoskrnl_NULL_THUNK_DATA
0x1C0005028: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0005080: "__cdecl _imp_ObDereferenceSecurityDescriptor" __imp_ObDereferenceSecurityDescriptor
0x1C0005000: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C00051E8: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C000D080: DriverEntry
0x1C00021F0: "Mailslot" ??_C@_1BC@MOPNMDOE@?$AAM?$AAa?$AAi?$AAl?$AAs?$AAl?$AAo?$AAt?$AA?$AA@
0x1C0007B60: MsDereferenceDriver
0x1C0001680: memset
0x1C000528C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]