PDB Symbols - ksthunk.sys (0xD717CE30EE9E1FAAA59837E0755ED57FD76629AA28E241C23269BBBFC430EF0E)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\ksthunk.sys Base=0x1C0000000 SHA-256=D717CE30EE9E1FAAA59837E0755ED57FD76629AA28E241C23269BBBFC430EF0E
PDB: ksthunk.pdb GUID={04AE5563-0A4A-39CB-907B99D1D63FF6E9} Age=1

200 located named symbols:
0x1C0007128: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C00085B0: "private: virtual bool __cdecl CKSThunkDriver::IsDeviceFilterable(struct _DEVICE_OBJECT * __ptr64,long & __ptr64) __ptr64" ?IsDeviceFilterable@CKSThunkDriver@@EEAA_NPEAU_DEVICE_OBJECT@@AEAJ@Z
0x1C0001330: "public: virtual void * __ptr64 __cdecl CKernelFilterDevice::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKernelFilterDevice@@UEAAPEAXI@Z
0x1C0004000: "const CKernelFilterDevice::`vftable'" ??_7CKernelFilterDevice@@6B@
0x1C0004088: "const CKSThunkDriver::`vftable'" ??_7CKSThunkDriver@@6B@
0x1C0003220: "public: virtual unsigned long __cdecl CBaseUnknown::NonDelegatedAddRef(void) __ptr64" ?NonDelegatedAddRef@CBaseUnknown@@UEAAKXZ
0x1C0002F50: "public: virtual unsigned long __cdecl CVideoCaptureThunkHandler::Release(void) __ptr64" ?Release@CVideoCaptureThunkHandler@@UEAAKXZ
0x1C0002EA0: "public: static long __cdecl CKSAutomationThunk::HandleNotificationEventRegistrationProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64)" ?HandleNotificationEventRegistrationProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@@Z
0x1C0008690: "public: virtual class CKernelFilterDevice * __ptr64 __cdecl CKSThunkDriver::CreateFilterDevice(struct _DEVICE_OBJECT * __ptr64) __ptr64" ?CreateFilterDevice@CKSThunkDriver@@UEAAPEAVCKernelFilterDevice@@PEAU_DEVICE_OBJECT@@@Z
0x1C0005078: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0001460: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchPower(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchPower@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0007088: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0003260: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00080A0: "private: static long __cdecl CKernelFilterDriver::AddDevice(struct _DRIVER_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?AddDevice@CKernelFilterDriver@@CAJPEAU_DRIVER_OBJECT@@PEAU_DEVICE_OBJECT@@@Z
0x1C000A070: "__cdecl GUID_2f2c8ddd_4198_4fac_ba29_61bb05b7de06" _GUID_2f2c8ddd_4198_4fac_ba29_61bb05b7de06
0x1C0008008: "public: long __cdecl CKernelFilterDriver::Initialize(void) __ptr64" ?Initialize@CKernelFilterDriver@@QEAAJXZ
0x1C00081B0: "private: static void __cdecl CKernelFilterDriver::DriverUnload(struct _DRIVER_OBJECT * __ptr64)" ?DriverUnload@CKernelFilterDriver@@CAXPEAU_DRIVER_OBJECT@@@Z
0x1C0008B1C: "private: enum _IRP_DISPOSITION __cdecl CKSThunkPin::ThunkStreamingIrp(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?ThunkStreamingIrp@CKSThunkPin@@AEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0009460: "public: static long __cdecl CKSAutomationThunk::RouteMDLcachingProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,struct KSPIN_MDL_CACHING_NOTIFICATION32 * __ptr64)" ?RouteMDLcachingProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAUKSPIN_MDL_CACHING_NOTIFICATION32@@@Z
0x1C00070D0: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0001050: "public: virtual void * __ptr64 __cdecl CKernelFilterFile::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKernelFilterFile@@UEAAPEAXI@Z
0x1C0007100: "__cdecl _imp_MmProbeAndLockPages" __imp_MmProbeAndLockPages
0x1C00022B0: "[thunk]:public: virtual void * __ptr64 __cdecl CVideoCaptureThunkHandler::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECVideoCaptureThunkHandler@@W7EAAPEAXI@Z
0x1C0007040: "__cdecl _imp_?IndirectedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z" __imp_?IndirectedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1C0007068: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0007010: "__cdecl _imp_??0CBaseUnknown@@QEAA@PEAUIUnknown@@@Z" __imp_??0CBaseUnknown@@QEAA@PEAUIUnknown@@@Z
0x1C00071C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0007168: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C0007058: ks_NULL_THUNK_DATA
0x1C00070D8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C0001030: "protected: virtual class CKernelFilterFile * __ptr64 __cdecl CKernelFilterDevice::CreateFilterFile(struct _IRP * __ptr64) __ptr64" ?CreateFilterFile@CKernelFilterDevice@@MEAAPEAVCKernelFilterFile@@PEAU_IRP@@@Z
0x1C0001330: "public: virtual void * __ptr64 __cdecl CKernelFilterDevice::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKernelFilterDevice@@UEAAPEAXI@Z
0x1C00023B0: "public: static long __cdecl CKSAutomationThunk::HandleArrayProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,unsigned int * __ptr64)" ?HandleArrayProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAI@Z
0x1C0007078: "__cdecl _imp_PoStartNextPowerIrp" __imp_PoStartNextPowerIrp
0x1C00070B0: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0007090: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C0007080: "__cdecl _imp_KeInitializeMutex" __imp_KeInitializeMutex
0x1C0004058: "const CKernelFilterFile::`vftable'" ??_7CKernelFilterFile@@6B@
0x1C00031C0: "public: virtual unsigned long __cdecl CBaseUnknown::IndirectedRelease(void) __ptr64" ?IndirectedRelease@CBaseUnknown@@UEAAKXZ
0x1C0007070: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0007160: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0004830: "__cdecl GUID_05589f80_c356_11ce_bf01_00aa0055595a" _GUID_05589f80_c356_11ce_bf01_00aa0055595a
0x1C00048A0: "__cdecl GUID_ec529b00_1a1f_11d1_bad9_00609744111a" _GUID_ec529b00_1a1f_11d1_bad9_00609744111a
0x1C0007140: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C00047C8: "__cdecl _guard_iat_table" __guard_iat_table
0x1C0003280: memcpy
0x1C0002F30: "public: virtual unsigned long __cdecl CVideoCaptureThunkHandler::AddRef(void) __ptr64" ?AddRef@CVideoCaptureThunkHandler@@UEAAKXZ
0x1C000184C: "private: enum _IRP_DISPOSITION __cdecl CKSThunkDevice::CheckIrpForStackAdjustmentNative(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?CheckIrpForStackAdjustmentNative@CKSThunkDevice@@AEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0008220: "public: virtual long __cdecl CKernelFilterDevice::AttachToStack(struct _DEVICE_OBJECT * __ptr64) __ptr64" ?AttachToStack@CKernelFilterDevice@@UEAAJPEAU_DEVICE_OBJECT@@@Z
0x1C0004860: "__cdecl GUID_bd718a7b_97fc_40c7_88ce_d3ff06f55b16" _GUID_bd718a7b_97fc_40c7_88ce_d3ff06f55b16
0x1C000829C: "public: long __cdecl CKernelFilterDevice::SynchronousForwardIrp(struct _IRP * __ptr64) __ptr64" ?SynchronousForwardIrp@CKernelFilterDevice@@QEAAJPEAU_IRP@@@Z
0x1C0001050: "public: virtual void * __ptr64 __cdecl CKernelFilterFile::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKernelFilterFile@@UEAAPEAXI@Z
0x1C0007170: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0008584: "public: virtual __cdecl CKernelFilterFile::~CKernelFilterFile(void) __ptr64" ??1CKernelFilterFile@@UEAA@XZ
0x1C0003182: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0007150: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C0001A60: "public: virtual long __cdecl CKSThunkDevice::AttachToStack(struct _DEVICE_OBJECT * __ptr64) __ptr64" ?AttachToStack@CKSThunkDevice@@UEAAJPEAU_DEVICE_OBJECT@@@Z
0x1C0003280: memmove
0x1C0001040: "public: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterFile::DispatchRead(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchRead@CKernelFilterFile@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C00012F0: "public: static long __cdecl CKernelFilterDevice::DeferIrpCompletion(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,struct _KEVENT * __ptr64)" ?DeferIrpCompletion@CKernelFilterDevice@@SAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAU_KEVENT@@@Z
0x1C0002FC0: "public: virtual long __cdecl CVideoCaptureThunkHandler::SetSpecificFormat(union KSDATAFORMAT * __ptr64) __ptr64" ?SetSpecificFormat@CVideoCaptureThunkHandler@@UEAAJPEATKSDATAFORMAT@@@Z
0x1C00071E4: "__cdecl _IMPORT_DESCRIPTOR_ks" __IMPORT_DESCRIPTOR_ks
0x1C0007030: "__cdecl _imp_?IndirectedAddRef@CBaseUnknown@@UEAAKXZ" __imp_?IndirectedAddRef@CBaseUnknown@@UEAAKXZ
0x1C0008970: "public: virtual long __cdecl CKSThunkPin::DataFormat(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,union KSDATAFORMAT * __ptr64) __ptr64" ?DataFormat@CKSThunkPin@@UEAAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEATKSDATAFORMAT@@@Z
0x1C00011F0: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchIoctl(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchIoctl@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0002F70: "public: virtual long __cdecl CVideoCaptureThunkHandler::NonDelegatedQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?NonDelegatedQueryInterface@CVideoCaptureThunkHandler@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1C0004110: "const CKSThunkDevice::`vftable'{for `CKSAutomationThunk'}" ??_7CKSThunkDevice@@6BCKSAutomationThunk@@@
0x1C0001484: "public: long __cdecl CKernelFilterDevice::DispatchIrp(struct _IRP * __ptr64,enum _IRP_STATUS) __ptr64" ?DispatchIrp@CKernelFilterDevice@@QEAAJPEAU_IRP@@W4_IRP_STATUS@@@Z
0x1C00070B8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C00010A0: "private: static long __cdecl CKernelFilterDevice::CallbackClientOnCompletion(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,class CKernelFilterDevice * __ptr64)" ?CallbackClientOnCompletion@CKernelFilterDevice@@CAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAV1@@Z
0x1C0007000: "__cdecl _imp_?NonDelegatedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z" __imp_?NonDelegatedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1C0008360: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchPnp(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchPnp@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C00070C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C00031E0: "public: virtual unsigned long __cdecl CBaseUnknown::IndirectedAddRef(void) __ptr64" ?IndirectedAddRef@CBaseUnknown@@UEAAKXZ
0x1C0001330: "public: virtual void * __ptr64 __cdecl CKSThunkDevice::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKSThunkDevice@@UEAAPEAXI@Z
0x1C0007190: "__cdecl _imp_ExFreePool" __imp_ExFreePool
0x1C00047D0: "RtlQueryRegistryValuesEx" ??_C@_1DC@OAPHKEJN@?$AAR?$AAt?$AAl?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AAE?$AAx?$AA?$AA@
0x1C0001374: "private: long __cdecl CKernelFilterDevice::NotifyNewFile(class CKernelFilterFile * __ptr64) __ptr64" ?NotifyNewFile@CKernelFilterDevice@@AEAAJPEAVCKernelFilterFile@@@Z
0x1C0007110: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C0007138: "__cdecl _imp_ExRaiseStatus" __imp_ExRaiseStatus
0x1C0007148: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C0001040: "public: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterFile::DispatchIoctl(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchIoctl@CKernelFilterFile@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0003050: "public: virtual void __cdecl CVideoCaptureThunkHandler::ThunkExtendedHeader(void * __ptr64,void * __ptr64) __ptr64" ?ThunkExtendedHeader@CVideoCaptureThunkHandler@@UEAAXPEAX0@Z
0x1C0001F60: "private: static void __cdecl CKSThunkPin::CancelStreamingIrp(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64)" ?CancelStreamingIrp@CKSThunkPin@@CAXPEAU_DEVICE_OBJECT@@PEAU_IRP@@@Z
0x1C00071A8: "__cdecl _imp_IoGetDriverObjectExtension" __imp_IoGetDriverObjectExtension
0x1C0001F08: "struct KSSTREAM_METADATA_INFO * __ptr64 __cdecl GetMetadataBuffer64(struct KSSTREAM_HEADER * __ptr64)" ?GetMetadataBuffer64@@YAPEAUKSSTREAM_METADATA_INFO@@PEAUKSSTREAM_HEADER@@@Z
0x1C00010C0: "protected: virtual bool __cdecl CKernelFilterDriver::IsDeviceFilterable(struct _DEVICE_OBJECT * __ptr64,long & __ptr64) __ptr64" ?IsDeviceFilterable@CKernelFilterDriver@@MEAA_NPEAU_DEVICE_OBJECT@@AEAJ@Z
0x1C000124C: "public: class CKernelFilterFile * __ptr64 __cdecl CKernelFilterDevice::FileObjectToFilterFile(struct _IRP * __ptr64) __ptr64" ?FileObjectToFilterFile@CKernelFilterDevice@@QEAAPEAVCKernelFilterFile@@PEAU_IRP@@@Z
0x1C0001B40: "public: virtual enum _IRP_DISPOSITION __cdecl CKSThunkDevice::DispatchCreate(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchCreate@CKSThunkDevice@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C00070E0: "__cdecl _imp_IoIs32bitProcess" __imp_IoIs32bitProcess
0x1C0001010: "public: static long __cdecl CKernelFilterDevice::DispatchIrpBridge(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64)" ?DispatchIrpBridge@CKernelFilterDevice@@SAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@@Z
0x1C0004178: "const CVideoCaptureThunkHandler::`vftable'{for `INonDelegatedUnknown'}" ??_7CVideoCaptureThunkHandler@@6BINonDelegatedUnknown@@@
0x1C00071A0: "__cdecl _imp_KeReleaseMutex" __imp_KeReleaseMutex
0x1C0001330: "public: virtual void * __ptr64 __cdecl CKSThunkDevice::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKSThunkDevice@@UEAAPEAXI@Z
0x1C00093F0: "bool __cdecl IsWellKnownFormatType(struct _GUID const & __ptr64)" ?IsWellKnownFormatType@@YA_NAEBU_GUID@@@Z
0x1C00081F4: "public: virtual __cdecl CKernelFilterDevice::~CKernelFilterDevice(void) __ptr64" ??1CKernelFilterDevice@@UEAA@XZ
0x1C000B0A0: GsDriverEntry
0x1C00071C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0001040: "public: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterFile::DispatchWrite(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchWrite@CKernelFilterFile@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0001F24: "private: unsigned long __cdecl CKSThunkPin::GetExtendedHeaderSize(unsigned long,unsigned long) __ptr64" ?GetExtendedHeaderSize@CKSThunkPin@@AEAAKKK@Z
0x1C0001760: "public: virtual enum _IRP_DISPOSITION __cdecl CKSThunkDevice::DispatchIoctl(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchIoctl@CKSThunkDevice@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0004870: "__cdecl GUID_bc29a660_30e3_11d0_9e69_00c04fd7c15b" _GUID_bc29a660_30e3_11d0_9e69_00c04fd7c15b
0x1C0001E88: "public: virtual void * __ptr64 __cdecl CVideoCaptureThunkHandler::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCVideoCaptureThunkHandler@@UEAAPEAXI@Z
0x1C0007048: "__cdecl _imp_KoCreateInstance" __imp_KoCreateInstance
0x1C0004840: "__cdecl GUID_2017be05_6629_4248_aaed_7e1a47bc9b9c" _GUID_2017be05_6629_4248_aaed_7e1a47bc9b9c
0x1C0001130: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchRead(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchRead@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0001710: "public: virtual void * __ptr64 __cdecl CKernelFilterDriver::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKernelFilterDriver@@UEAAPEAXI@Z
0x1C00070F0: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C0001710: "public: virtual void * __ptr64 __cdecl CKSThunkDriver::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKSThunkDriver@@UEAAPEAXI@Z
0x1C0008748: "public: __cdecl CKSThunkPin::CKSThunkPin(struct _FILE_OBJECT * __ptr64,class CKSThunkDevice * __ptr64,union KSDATAFORMAT * __ptr64) __ptr64" ??0CKSThunkPin@@QEAA@PEAU_FILE_OBJECT@@PEAVCKSThunkDevice@@PEATKSDATAFORMAT@@@Z
0x1C0003130: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00040A0: "const CKernelFilterDriver::`vftable'" ??_7CKernelFilterDriver@@6B@
0x1C0007180: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C00071D0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0002768: "protected: enum _IRP_DISPOSITION __cdecl CKSAutomationThunk::ThunkEnableEventIrp(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?ThunkEnableEventIrp@CKSAutomationThunk@@IEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0007028: "__cdecl _imp_?NonDelegatedRelease@CBaseUnknown@@UEAAKXZ" __imp_?NonDelegatedRelease@CBaseUnknown@@UEAAKXZ
0x1C0007018: "__cdecl _imp_??1CBaseUnknown@@UEAA@XZ" __imp_??1CBaseUnknown@@UEAA@XZ
0x1C0008550: "public: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterFile::DispatchClose(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchClose@CKernelFilterFile@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0002260: "private: virtual void * __ptr64 __cdecl CKSThunkPin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKSThunkPin@@EEAAPEAXI@Z
0x1C0007050: "__cdecl _imp_KsPropertyHandler" __imp_KsPropertyHandler
0x1C0004820: "__cdecl GUID_692fa379_d3e8_4651_b5b4_0b94b013eeaf" _GUID_692fa379_d3e8_4651_b5b4_0b94b013eeaf
0x1C0002704: "protected: enum _IRP_DISPOSITION __cdecl CKSAutomationThunk::ThunkDisableEventIrp(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?ThunkDisableEventIrp@CKSAutomationThunk@@IEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C00083D0: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchCreate(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchCreate@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0001A90: "public: virtual bool __cdecl CKSThunkDevice::ProceedToCreateFilterFile(struct _IRP * __ptr64) __ptr64" ?ProceedToCreateFilterFile@CKSThunkDevice@@UEAA_NPEAU_IRP@@@Z
0x1C00022C0: "public: static long __cdecl CKSAutomationThunk::RouteConnectionState(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,enum KSSTATE * __ptr64)" ?RouteConnectionState@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAW4KSSTATE@@@Z
0x1C0007118: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C00013EC: "public: long __cdecl CKernelFilterDevice::NotifyDestroyFile(class CKernelFilterFile * __ptr64) __ptr64" ?NotifyDestroyFile@CKernelFilterDevice@@QEAAJPEAVCKernelFilterFile@@@Z
0x1C0001750: "protected: virtual long __cdecl CKSAutomationThunk::ConnectionState(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,enum KSSTATE * __ptr64) __ptr64" ?ConnectionState@CKSAutomationThunk@@MEAAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAW4KSSTATE@@@Z
0x1C000C000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0007008: "__cdecl _imp_KsSynchronousIoControlDevice" __imp_KsSynchronousIoControlDevice
0x1C00046C0: "__cdecl load_config_used" _load_config_used
0x1C0002F10: "public: virtual long __cdecl CVideoCaptureThunkHandler::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CVideoCaptureThunkHandler@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1C0001AB0: "public: virtual class CKernelFilterFile * __ptr64 __cdecl CKSThunkDevice::CreateFilterFile(struct _IRP * __ptr64) __ptr64" ?CreateFilterFile@CKSThunkDevice@@UEAAPEAVCKernelFilterFile@@PEAU_IRP@@@Z
0x1C0001E88: "public: virtual void * __ptr64 __cdecl CVideoCaptureThunkHandler::`vector deleting destructor'(unsigned int) __ptr64" ??_ECVideoCaptureThunkHandler@@UEAAPEAXI@Z
0x1C00070F8: "__cdecl _imp_IoCancelIrp" __imp_IoCancelIrp
0x1C00070C0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0004880: "__cdecl GUID_65aaba60_98ae_11cf_a10d_0020afd156e4" _GUID_65aaba60_98ae_11cf_a10d_0020afd156e4
0x1C00021A0: "public: virtual enum _IRP_DISPOSITION __cdecl CKSThunkPin::DispatchIoctl(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchIoctl@CKSThunkPin@@UEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0004850: "__cdecl GUID_f72a76a0_eb0a_11d0_ace4_0000c0cc16ba" _GUID_f72a76a0_eb0a_11d0_ace4_0000c0cc16ba
0x1C0002D10: "public: static long __cdecl CKSAutomationThunk::HandleWaveRTBufferWithNotificationProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,struct KSRTAUDIO_BUFFER32 * __ptr64)" ?HandleWaveRTBufferWithNotificationProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAUKSRTAUDIO_BUFFER32@@@Z
0x1C0001710: "public: virtual void * __ptr64 __cdecl CKernelFilterDriver::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKernelFilterDriver@@UEAAPEAXI@Z
0x1C0001710: "public: virtual void * __ptr64 __cdecl CKSThunkDriver::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKSThunkDriver@@UEAAPEAXI@Z
0x1C0004168: "const CKSThunkPin::`vftable'{for `CKSAutomationThunk'}" ??_7CKSThunkPin@@6BCKSAutomationThunk@@@
0x1C0007060: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00010C0: "protected: virtual bool __cdecl CKernelFilterDevice::ProceedToCreateFilterFile(struct _IRP * __ptr64) __ptr64" ?ProceedToCreateFilterFile@CKernelFilterDevice@@MEAA_NPEAU_IRP@@@Z
0x1C0004198: "const CVideoCaptureThunkHandler::`vftable'" ??_7CVideoCaptureThunkHandler@@6B@
0x1C0003020: "public: virtual unsigned long __cdecl CVideoCaptureThunkHandler::GetExtendedHeaderSize(unsigned long,unsigned char) __ptr64" ?GetExtendedHeaderSize@CVideoCaptureThunkHandler@@UEAAKKE@Z
0x1C00030B0: "public: virtual void __cdecl CVideoCaptureThunkHandler::ReverseThunkExtendedHeader(unsigned long,void * __ptr64,void * __ptr64) __ptr64" ?ReverseThunkExtendedHeader@CVideoCaptureThunkHandler@@UEAAXKPEAX0@Z
0x1C0002628: "protected: enum _IRP_DISPOSITION __cdecl CKSAutomationThunk::ThunkPropertyIrp(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?ThunkPropertyIrp@CKSAutomationThunk@@IEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0007108: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C0003170: "__cdecl purecall" _purecall
0x1C0002260: "private: virtual void * __ptr64 __cdecl CKSThunkPin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKSThunkPin@@EEAAPEAXI@Z
0x1C0003240: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0007130: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C0003200: "public: virtual unsigned long __cdecl CBaseUnknown::NonDelegatedRelease(void) __ptr64" ?NonDelegatedRelease@CBaseUnknown@@UEAAKXZ
0x1C0001EF0: "struct KSSTREAM_METADATA_INFO32 * __ptr64 __cdecl GetMetadataBuffer32(struct _KSSTREAM_HEADER32 * __ptr64)" ?GetMetadataBuffer32@@YAPEAUKSSTREAM_METADATA_INFO32@@PEAU_KSSTREAM_HEADER32@@@Z
0x1C0002C50: "public: static long __cdecl CKSAutomationThunk::HandleWaveRTBufferProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,struct KSRTAUDIO_BUFFER32 * __ptr64)" ?HandleWaveRTBufferProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAUKSRTAUDIO_BUFFER32@@@Z
0x1C0002DD0: "public: static long __cdecl CKSAutomationThunk::HandleWaveRTHWRegisterProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,struct KSRTAUDIO_HWREGISTER32 * __ptr64)" ?HandleWaveRTHWRegisterProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAUKSRTAUDIO_HWREGISTER32@@@Z
0x1C00010D0: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchClose(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchClose@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C0007188: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C00071B0: "__cdecl _imp_IoIsInitiator32bitProcess" __imp_IoIsInitiator32bitProcess
0x1C0005070: "__cdecl _security_cookie" __security_cookie
0x1C0004150: "const CVideoCaptureThunkHandler::`vftable'{for `IIndirectedUnknown'}" ??_7CVideoCaptureThunkHandler@@6BIIndirectedUnknown@@@
0x1C0001FD0: "private: static long __cdecl CKSThunkPin::ThunkStreamingIrpCompletion(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,struct _IRP * __ptr64)" ?ThunkStreamingIrpCompletion@CKSThunkPin@@CAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@1@Z
0x1C0007198: "__cdecl _imp_IoAllocateDriverObjectExtension" __imp_IoAllocateDriverObjectExtension
0x1C00022F0: "public: static long __cdecl CKSAutomationThunk::RouteDataFormat(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,union KSDATAFORMAT * __ptr64)" ?RouteDataFormat@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEATKSDATAFORMAT@@@Z
0x1C0001190: "protected: virtual enum _IRP_DISPOSITION __cdecl CKernelFilterDevice::DispatchWrite(struct _IRP * __ptr64,enum _IRP_STATUS,long * __ptr64) __ptr64" ?DispatchWrite@CKernelFilterDevice@@MEAA?AW4_IRP_DISPOSITION@@PEAU_IRP@@W4_IRP_STATUS@@PEAJ@Z
0x1C00040B8: "const CKSThunkDevice::`vftable'{for `CKernelFilterDevice'}" ??_7CKSThunkDevice@@6BCKernelFilterDevice@@@
0x1C00070E8: "__cdecl _imp_ProbeForRead" __imp_ProbeForRead
0x1C00070A8: "__cdecl _imp_RtlQueryRegistryValues" __imp_RtlQueryRegistryValues
0x1C0007120: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C0004890: "__cdecl GUID_a855a48c_2f78_4729_9051_1968746b9eef" _GUID_a855a48c_2f78_4729_9051_1968746b9eef
0x1C000B0D4: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0001030: "public: virtual long __cdecl CKernelFilterFile::Initialize(void) __ptr64" ?Initialize@CKernelFilterFile@@UEAAJXZ
0x1C0004804: "KS" ??_C@_15PCBKAELP@?$AAK?$AAS?$AA?$AA@
0x1C0007020: "__cdecl _imp_?NonDelegatedAddRef@CBaseUnknown@@UEAAKXZ" __imp_?NonDelegatedAddRef@CBaseUnknown@@UEAAKXZ
0x1C0007158: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0008A50: "public: virtual long __cdecl CKSThunkPin::ConnectionState(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,enum KSSTATE * __ptr64) __ptr64" ?ConnectionState@CKSThunkPin@@UEAAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAW4KSSTATE@@@Z
0x1C00031A0: "public: virtual long __cdecl CBaseUnknown::IndirectedQueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?IndirectedQueryInterface@CBaseUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1C0001750: "protected: virtual long __cdecl CKSAutomationThunk::DataFormat(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,union KSDATAFORMAT * __ptr64) __ptr64" ?DataFormat@CKSAutomationThunk@@MEAAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEATKSDATAFORMAT@@@Z
0x1C00070A0: "__cdecl _imp__purecall" __imp__purecall
0x1C0007098: "__cdecl _imp_IoOpenDeviceRegistryKey" __imp_IoOpenDeviceRegistryKey
0x1C0004810: "__cdecl GUID_bc709de8_e80f_41b5_a170_68600c571ef0" _GUID_bc709de8_e80f_41b5_a170_68600c571ef0
0x1C000A060: "__cdecl GUID_1d58c920_ac9b_11cf_a5d6_28db04c10000" _GUID_1d58c920_ac9b_11cf_a5d6_28db04c10000
0x1C0003160: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0007178: "__cdecl _imp_PoCallDriver" __imp_PoCallDriver
0x1C0009394: "private: virtual __cdecl CKSThunkPin::~CKSThunkPin(void) __ptr64" ??1CKSThunkPin@@EEAA@XZ
0x1C0004120: "const CKSThunkPin::`vftable'{for `CKernelFilterFile'}" ??_7CKSThunkPin@@6BCKernelFilterFile@@@
0x1C00071B8: ntoskrnl_NULL_THUNK_DATA
0x1C0007038: "__cdecl _imp_?IndirectedRelease@CBaseUnknown@@UEAAKXZ" __imp_?IndirectedRelease@CBaseUnknown@@UEAAKXZ
0x1C000B008: DriverEntry
0x1C0002320: "public: static long __cdecl CKSAutomationThunk::HandleProperty(struct _IRP * __ptr64,struct KSIDENTIFIER * __ptr64,unsigned int * __ptr64)" ?HandleProperty@CKSAutomationThunk@@SAJPEAU_IRP@@PEAUKSIDENTIFIER@@PEAI@Z
0x1C00035C0: memset
0x1C00071F8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C00087B4: "public: struct IKsWOW64FormatThunk * __ptr64 __cdecl CKSThunkPin::LocateFormatHandler(union KSDATAFORMAT * __ptr64) __ptr64" ?LocateFormatHandler@CKSThunkPin@@QEAAPEAUIKsWOW64FormatThunk@@PEATKSDATAFORMAT@@@Z

[JEB Decompiler by PNF Software]