Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\rdpbus.sys Base=0x1C0000000 SHA-256=2EB981688FCCB1F6ABF0C4300DFD7CBB495899A9D0461F91C5054AF173AC34F3
PDB: rdpbus.pdb GUID={A9F93E3D-EC17-E166-892B8C5F5F1C9ED5} Age=1

164 located named symbols:
0x1C00036F8: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C0002840: WppClassicProviderCallback
0x1C000882C: SepSddlGetAclForString
0x1C0003620: "Client Device Name" ??_C@_1CG@INPNOPKI@?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?5?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C0006018: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0003648: "\Device\RdpDr" ??_C@_1BM@CAJHHOAL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAd?$AAp?$AAD?$AAr?$AA?$AA@
0x1C0004098: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C00083F0: WppTraceCallback
0x1C0004220: PfnIoCreateDeviceSecure
0x1C00036B8: "recyclable" ??_C@_1BG@JLLPHPMO@?$AAr?$AAe?$AAc?$AAy?$AAc?$AAl?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1C0006020: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00016A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00060C8: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C00060D0: "__cdecl _imp_IoDeviceObjectType" __imp_IoDeviceObjectType
0x1C0003400: "\Device\RdpBus" ??_C@_1BO@PGKJJDCK@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAd?$AAp?$AAB?$AAu?$AAs?$AA?$AA@
0x1C00033A0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0003700: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C0001010: "long __cdecl RdpBusDispatch(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64)" ?RdpBusDispatch@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@@Z
0x1C0006088: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0006120: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0007010: IoDevObjCreateDeviceSecure
0x1C0006108: "__cdecl _imp_wcschr" __imp_wcschr
0x1C0001470: "long __cdecl CleanUpExistingPorts(void)" ?CleanUpExistingPorts@@YAJXZ
0x1C0006180: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0006038: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C000422C: PiRegStateDiscriptor
0x1C0004230: "struct _DEVICE_OBJECT * __ptr64 __ptr64 RDPDYN_PDO" ?RDPDYN_PDO@@3PEAU_DEVICE_OBJECT@@EA
0x1C0006150: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1C0006118: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C00060B0: "__cdecl _imp_PoStartNextPowerIrp" __imp_PoStartNextPowerIrp
0x1C0006058: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0003720: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C0006090: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0002214: "long __cdecl RDPBUS_PrepareForReparse(struct _FILE_OBJECT * __ptr64)" ?RDPBUS_PrepareForReparse@@YAJPEAU_FILE_OBJECT@@@Z
0x1C0006028: "__cdecl _imp_IoOpenDeviceInterfaceRegistryKey" __imp_IoOpenDeviceInterfaceRegistryKey
0x1C00016C0: memcpy
0x1C0006000: "__cdecl _imp_IoRegisterDeviceInterface" __imp_IoRegisterDeviceInterface
0x1C0008734: SepSddlDaclFromSDDLString
0x1C00060A8: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0006030: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0004248: pfnWppGetVersion
0x1C0006100: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C0006068: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C00016C0: memmove
0x1C0008E8C: SepSddlSecurityDescriptorFromSDDLString
0x1C0003460: "IoCreateDeviceSecure" ??_C@_1CK@LEEDIGFP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1C000162C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0004260: WPP_MAIN_CB
0x1C0008DA0: SepSddlParseWideStringUlong
0x1C0006048: "__cdecl _imp_ZwDeleteValueKey" __imp_ZwDeleteValueKey
0x1C0003730: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C0003708: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C0006060: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0001350: "long __cdecl RdpBusPnPAddDevice(struct _DRIVER_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64)" ?RdpBusPnPAddDevice@@YAJPEAU_DRIVER_OBJECT@@PEAU_DEVICE_OBJECT@@@Z
0x1C0004258: pfnWppQueryTraceInformation
0x1C0003690: "Inactive TS Port" ??_C@_1CC@EHPDIAJH@?$AAI?$AAn?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAT?$AAS?$AA?5?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x1C0006138: "__cdecl _imp__snwprintf" __imp__snwprintf
0x1C0002130: "long __cdecl CreatePrintPortInterface(struct _UNICODE_STRING * __ptr64,unsigned short * __ptr64)" ?CreatePrintPortInterface@@YAJPEAU_UNICODE_STRING@@PEAG@Z
0x1C000361C: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x1C0003738: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C0006050: "__cdecl _imp_ExFreePool" __imp_ExFreePool
0x1C0006140: "__cdecl _imp_SeCaptureSecurityDescriptor" __imp_SeCaptureSecurityDescriptor
0x1C0001608: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00033C0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00060F8: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0006128: "__cdecl _imp_SeExports" __imp_SeExports
0x1C0003610: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0004238: pfnEtwRegisterClassicProvider
0x1C0003420: "IoValidateDeviceIoControlAccess" ??_C@_1EA@BAHCLPHE@?$AAI?$AAo?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C000276C: WPP_SF_Z
0x1C0006130: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C0002664: WPP_SF_
0x1C0003710: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C0009034: CmRegUtilUcValueSetUcString
0x1C00036D0: "Port Number" ??_C@_1BI@FCCCIGPJ@?$AAP?$AAo?$AAr?$AAt?$AA?5?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x1C0006158: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x1C00031B0: "\Registry\Machine\System\Current" ??_C@_1HC@DKINPPAJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00042A0: pfnEtwUnregister
0x1C0001300: WdmlibRtlInitUnicodeStringEx
0x1C0003110: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000A010: GsDriverEntry
0x1C0006178: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0008C24: SepSddlGetSidForString
0x1C00032E8: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C0003140: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1C0004000: WPP_GLOBAL_Control
0x1C0006070: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0003718: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0003300: WPP_ThisDir_CTLGUID_CtlGuid
0x1C000269C: WPP_SF_D
0x1C00015B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0006008: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C0006188: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0003230: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C000835C: WppCleanupKm
0x1C00025F0: "long __cdecl RdpBusHandleRemoveDeviceIRP(struct _DEVICE_OBJECT * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64)" ?RdpBusHandleRemoveDeviceIRP@@YAJPEAU_DEVICE_OBJECT@@0PEAU_IRP@@@Z
0x1C000B000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00060D8: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C0003000: "__cdecl load_config_used" _load_config_used
0x1C0003128: "Properties" ??_C@_1BG@COALCEMK@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x1C00060A0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000218C: "long __cdecl RDPBUS_DeviceControl(struct _IRP * __ptr64)" ?RDPBUS_DeviceControl@@YAJPEAU_IRP@@@Z
0x1C000863C: SepSddlAddAceToAcl
0x1C0006080: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00060C0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0003368: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0006148: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1C00034B0: "NoDisplayClass" ??_C@_1BO@DAOBINHA@?$AAN?$AAo?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0006160: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1C00060E8: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C00032B8: "DeviceCharacteristics" ??_C@_1CM@DIJFBEC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0003310: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0006098: "__cdecl _imp_IoGetDeviceInterfaces" __imp_IoGetDeviceInterfaces
0x1C00040A0: PiRegStateSysAllInherittedSecurityDescriptor
0x1C0004228: WdmlibInitialized
0x1C00015F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0001570: "long __cdecl RdpBusDeferIrpCompletion(struct _DEVICE_OBJECT * __ptr64,struct _IRP * __ptr64,void * __ptr64)" ?RdpBusDeferIrpCompletion@@YAJPEAU_DEVICE_OBJECT@@PEAU_IRP@@PEAX@Z
0x1C0007DC0: WdmlibIoCreateDeviceSecure
0x1C00034A0: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0007C70: WppLoadTracingSupport
0x1C0006078: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0009174: CmpRegUtilAllocateUnicodeString
0x1C0008320: RdpBusUnload
0x1C0008D04: SepSddlLookupAccessMaskInTable
0x1C0004090: "__cdecl _security_cookie" __security_cookie
0x1C0009128: CmRegUtilWstrValueSetWstrString
0x1C0003330: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00032A0: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1C00036E8: WPP_b380f4ddf7ba3e51374c054e79dbf83b_Traceguids
0x1C00034D0: "NoUseClass" ??_C@_1BG@OPOOGLJC@?$AAN?$AAo?$AAU?$AAs?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C000A044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00027EC: WPP_SF_q
0x1C0004250: WPPTraceSuite
0x1C0006040: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00060D0: IoDeviceObjectType
0x1C0003728: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C00060F0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C00015E0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0006010: "__cdecl _imp_PoCallDriver" __imp_PoCallDriver
0x1C00033E0: "D:P(A;;GA;;;SY)" ??_C@_1CA@LGEGPEAN@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$AA@
0x1C0006168: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C0003668: "Port Description" ??_C@_1CC@EGOBEMCD@?$AAP?$AAo?$AAr?$AAt?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0006170: ntoskrnl_NULL_THUNK_DATA
0x1C0006110: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00060E0: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C000A080: DriverEntry
0x1C0004240: pfnWppTraceMessage
0x1C00060B8: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0007C00: WppInitKm
0x1C00026EC: WPP_SF_S
0x1C0001A00: memset
0x1C000619C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]