Generated by JEB on 2019/08/01

PE: C:\Windows\System32\win32kns.sys Base=0x1C0000000 SHA-256=B3CF65BB39ACF2854B9588B493A09D20117AA1F3CF32081CA2AC6BAD6B95EDE2
PDB: win32kns.pdb GUID={73EA7B91-2B19-69CB-2420C9F9C70E7BBA} Age=1

118 located named symbols:
0x1C0006098: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C0001010: WppClassicProviderCallback
0x1C0007430: DllUnload
0x1C00031F0: HV_GUID_ZERO
0x1C0004018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0007140: WppTraceCallback
0x1C00040C8: "struct _WSK_REGISTRATION gWskRegistration" ?gWskRegistration@@3U_WSK_REGISTRATION@@A
0x1C0003210: WPP_ec0b7200c2883b1f72622feb3c692bdb_Traceguids
0x1C00060E8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002760: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00031E0: WPP_ThisDir_CTLGUID_win32knsguid
0x1C0001330: "long __cdecl AcceptComplete(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,void * __ptr64)" ?AcceptComplete@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAX@Z
0x1C0001A80: IVUninitialize
0x1C0003130: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0006060: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C0006100: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0006038: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C00060D8: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0006018: "__cdecl _imp_WskReleaseProviderNPI" __imp_WskReleaseProviderNPI
0x1C00060C0: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0002780: memcpy
0x1C0004040: pfnWppGetVersion
0x1C0002640: IVFreeIVSRContext
0x1C00060E0: "__cdecl _imp_HvlQueryActiveHypervisorProcessorCount" __imp_HvlQueryActiveHypervisorProcessorCount
0x1C0006050: "__cdecl _imp_KeInitializeApc" __imp_KeInitializeApc
0x1C0002780: memmove
0x1C00026EC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0004060: WPP_MAIN_CB
0x1C0003200: HV_GUID_LOOPBACK
0x1C00060A8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0004050: pfnWppQueryTraceInformation
0x1C0006040: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00040F0: "struct _WSK_CLIENT_CONNECTION_DISPATCH gWskClientConnectionDispatch" ?gWskClientConnectionDispatch@@3U_WSK_CLIENT_CONNECTION_DISPATCH@@A
0x1C00026C8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0006068: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C0003110: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0004030: pfnEtwRegisterClassicProvider
0x1C000611C: "__cdecl _IMPORT_DESCRIPTOR_NETIO" __IMPORT_DESCRIPTOR_NETIO
0x1C0006030: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C0001160: "long __cdecl ReceiveIrpComplete(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,void * __ptr64)" ?ReceiveIrpComplete@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAX@Z
0x1C00014B0: "long __cdecl BindComplete(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,void * __ptr64)" ?BindComplete@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAX@Z
0x1C0001044: WPP_SF_
0x1C00040B0: "struct _WSK_CLIENT_LISTEN_DISPATCH gWskClientListenDispatch" ?gWskClientListenDispatch@@3U_WSK_CLIENT_LISTEN_DISPATCH@@A
0x1C0006088: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C0009090: GsDriverEntry
0x1C00060F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0004110: "struct _WSK_APP_SOCKET_CONTEXT gWskSocketContext" ?gWskSocketContext@@3U_WSK_APP_SOCKET_CONTEXT@@A
0x1C00040A0: "struct _WSK_CLIENT_NPI gWskClientNpi" ?gWskClientNpi@@3U_WSK_CLIENT_NPI@@A
0x1C0006008: "__cdecl _imp_WskRegister" __imp_WskRegister
0x1C00010C0: WPP_SF_Dq
0x1C0004000: WPP_GLOBAL_Control
0x1C0001078: WPP_SF_D
0x1C0006048: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C00040E0: "struct _WSK_PROVIDER_NPI gWskProviderNpi" ?gWskProviderNpi@@3U_WSK_PROVIDER_NPI@@A
0x1C0002300: IVSend
0x1C0002670: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0006108: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0004020: "int gbRootPartition" ?gbRootPartition@@3HA
0x1C0001CD0: IVRegisterChildNotification
0x1C0006080: "__cdecl _imp_KeInsertQueueApc" __imp_KeInsertQueueApc
0x1C00060A0: "__cdecl _imp_IoReuseIrp" __imp_IoReuseIrp
0x1C00014F0: "long __cdecl CreateListeningSocketComplete(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,void * __ptr64)" ?CreateListeningSocketComplete@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAX@Z
0x1C0003240: HV_GUID_PARENT
0x1C0003230: RIM_HV_CHANNEL_GUID
0x1C000A000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0003000: "__cdecl load_config_used" _load_config_used
0x1C0006028: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C00024E0: IVRecv
0x1C00060B8: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C0003150: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00031C0: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0006058: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C0006000: "__cdecl _imp_WskCaptureProviderNPI" __imp_WskCaptureProviderNPI
0x1C00026B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000141C: "void __cdecl SocketStartAcceptSync(void * __ptr64)" ?SocketStartAcceptSync@@YAXPEAX@Z
0x1C0007008: WppLoadTracingSupport
0x1C00060D0: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001E30: "long __cdecl IVUnregisterChildNotification(void * __ptr64)" ?IVUnregisterChildNotification@@YAJPEAX@Z
0x1C0004010: "__cdecl _security_cookie" __security_cookie
0x1C0003188: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0009060: DllInitialize
0x1C0001264: "void __cdecl StartReadOperationOnSocket(void * __ptr64)" ?StartReadOperationOnSocket@@YAXPEAX@Z
0x1C0006020: NETIO_NULL_THUNK_DATA
0x1C0006090: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C00090C4: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0004048: WPPTraceSuite
0x1C0006078: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00018A0: IVInitialize
0x1C0006070: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C00026A0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00060F0: ntoskrnl_NULL_THUNK_DATA
0x1C00060B0: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00060C8: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0006010: "__cdecl _imp_WskDeregister" __imp_WskDeregister
0x1C0009008: DriverEntry
0x1C0004038: pfnWppTraceMessage
0x1C0007394: WppInitKm
0x1C0002AC0: memset
0x1C0006130: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]