Generated by JEB on 2019/08/01

PE: C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll Base=0x180000000 SHA-256=429F8C08E3B090D4D5CE73F7FA1442E01A35E8F987EBF03AC15723C8F041815C
PDB: TsUsbRedirectionGroupPolicyExtension.pdb GUID={0591EDAF-2EA3-E551-162982F5268C5A5D} Age=1

114 located named symbols:
0x180003218: "__cdecl _imp_LockResource" __imp_LockResource
0x180001E10: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003410: "tsusbflt" ??_C@_1BC@MJGPHPKA@?$AAt?$AAs?$AAu?$AAs?$AAb?$AAf?$AAl?$AAt?$AA?$AA@
0x180004018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003490: "UninstallFilter 128 %ws\inf\TsUs" ??_C@_1FO@NBLEEKHB@?$AAU?$AAn?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AA1?$AA2?$AA8?$AA?5?$AA?$CF?$AAw?$AAs?$AA?2?$AAi?$AAn?$AAf?$AA?2?$AAT?$AAs?$AAU?$AAs@
0x180003188: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800021A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003220: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800032B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800032E0: "Software\Policies\Microsoft\Wind" ??_C@_1IA@EPHNIHEM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x180003430: "InstallFilter 128 %ws\inf\TsUsbH" ??_C@_1FK@NFIMNOGE@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AA1?$AA2?$AA8?$AA?5?$AA?$CF?$AAw?$AAs?$AA?2?$AAi?$AAn?$AAf?$AA?2?$AAT?$AAs?$AAU?$AAs?$AAb?$AAH@
0x1800033F0: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180001A38: "long __cdecl UpdateKmdf(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UpdateKmdf@@YAJPEAUHINSTANCE__@@PEBG1@Z
0x180003550: "EnableDiagnosticMode" ??_C@_1CK@MMFLFAFM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1800020D1: "__cdecl callnewh" _callnewh
0x180003250: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180003240: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x180003298: "__cdecl _imp_memset" __imp_memset
0x180003118: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x1800031B8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800020C5: malloc
0x180003148: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180003128: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180002110: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003360: "fUsbRedirectionEnableMode" ??_C@_1DE@FHDFLOOC@?$AAf?$AAU?$AAs?$AAb?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1800031E8: "__cdecl _imp_GetModuleHandleExA" __imp_GetModuleHandleExA
0x180003130: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180003278: "__cdecl _imp__callnewh" __imp__callnewh
0x180003590: "EventActivityIdControl" ??_C@_0BH@HMPLKEEO@EventActivityIdControl?$AA@
0x1800031C8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800010B0: DllMain
0x180003160: "__cdecl _imp_RegOpenKeyW" __imp_RegOpenKeyW
0x1800031A0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003260: KERNEL32_NULL_THUNK_DATA
0x180003170: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x1800031A8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180001CAC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800020EC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800039F0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180003180: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003228: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180003208: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x180003258: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x1800031F8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800018A0: "unsigned long __cdecl ExecuteProcessGroupPolicyExWithError(void)" ?ExecuteProcessGroupPolicyExWithError@@YAKXZ
0x1800045A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUfkwzgvdwuUlyquivUznwGEUkivxlnkOlyq@UpdateWdf" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUfkwzgvdwuUlyquivUznwGEUkivxlnkOlyq@UpdateWdf
0x180004590: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUtilfkklorxbvcgvmhrlmUdrmDCUlyquivUznwGEUkivxlnkOlyq@TsUsbRedirectionGroupPolicyExtension" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUtilfkklorxbvcgvmhrlmUdrmDCUlyquivUznwGEUkivxlnkOlyq@TsUsbRedirectionGroupPolicyExtension
0x1800018E8: StringCchPrintfW
0x1800032A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800035A8: WPP_e0ed1b4fcf8d37e1c8efe9f5d8fed61c_Traceguids
0x180003238: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x1800031D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003A04: "__cdecl _IMPORT_DESCRIPTOR_SETUPAPI" __IMPORT_DESCRIPTOR_SETUPAPI
0x180003198: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180001008: WPP_SF_DD
0x180001058: WPP_SF_Dd
0x180003120: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180004000: WPP_GLOBAL_Control
0x180001968: WPP_SF_D
0x180001FC8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180001CEC: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180003580: "Advapi32.dll" ??_C@_0N@DOHINHCI@Advapi32?4dll?$AA@
0x180001D10: "__cdecl _security_check_cookie" __security_check_cookie
0x1800031F0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180003190: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800010F0: "unsigned long __cdecl ProcessGroupPolicyEx(unsigned long,void * __ptr64,struct HKEY__ * __ptr64,struct _GROUP_POLICY_OBJECTW * __ptr64,struct _GROUP_POLICY_OBJECTW * __ptr64,unsigned __int64,int * __ptr64,unsigned long (__cdecl*)(int,unsigned short * __ptr64),struct IWbemServices * __ptr64,long * __ptr64)" ?ProcessGroupPolicyEx@@YAKKPEAXPEAUHKEY__@@PEAU_GROUP_POLICY_OBJECTW@@2_KPEAHP6AKHPEAG@ZPEAUIWbemServices@@PEAJ@Z
0x180001B8C: "long __cdecl ExtractResourceToFile(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ExtractResourceToFile@@YAJPEAUHINSTANCE__@@PEBG1@Z
0x1800032B8: "__cdecl _guard_fids_table" __guard_fids_table
0x1800032A0: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x180003230: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003178: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800020DD: free
0x1800019AC: "unsigned int __cdecl RdpWppGetCurrentThreadActivityIdPrefix(void)" ?RdpWppGetCurrentThreadActivityIdPrefix@@YAIXZ
0x1800031B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002180: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003270: SETUPAPI_NULL_THUNK_DATA
0x180003200: "__cdecl _imp_VerifyVersionInfoW" __imp_VerifyVersionInfoW
0x180001890: "void __cdecl ExecuteProcessGroupPolicyEx(struct HWND__ * __ptr64,struct HINSTANCE__ * __ptr64,char * __ptr64,int)" ?ExecuteProcessGroupPolicyEx@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEADH@Z
0x1800035D0: "UpdateKmdf.NT.Wdf" ??_C@_1CE@LMBAFPOE@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAK?$AAm?$AAd?$AAf?$AA?4?$AAN?$AAT?$AA?4?$AAW?$AAd?$AAf?$AA?$AA@
0x180004010: "__cdecl _security_cookie" __security_cookie
0x180003158: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180003210: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003248: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x180003138: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180003290: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800031C0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800039DC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180004598: "struct HINSTANCE__ * __ptr64 __ptr64 g_Module" ?g_Module@@3PEAUHINSTANCE__@@EA
0x1800034F0: "System\CurrentControlSet\Service" ??_C@_1FM@EJBIFJLG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x180001D34: "__cdecl _security_init_cookie" __security_init_cookie
0x1800033C0: "WdfCoInstaller01009.dll" ??_C@_1DA@JHFAKFFJ@?$AAW?$AAd?$AAf?$AAC?$AAo?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA0?$AA1?$AA0?$AA0?$AA9?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180003268: "__cdecl _imp_InstallHinfSectionW" __imp_InstallHinfSectionW
0x1800039C8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003280: "__cdecl _imp_malloc" __imp_malloc
0x180003168: ADVAPI32_NULL_THUNK_DATA
0x1800031D8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180001E50: "__cdecl _report_gsfailure" __report_gsfailure
0x180003140: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x1800031E0: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180003150: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180003398: "KMDF_INF_RESOURCE" ??_C@_1CE@BFFANHOL@?$AAK?$AAM?$AAD?$AAF?$AA_?$AAI?$AAN?$AAF?$AA_?$AAR?$AAE?$AAS?$AAO?$AAU?$AAR?$AAC?$AAE?$AA?$AA@
0x180003288: "__cdecl _imp_free" __imp_free
0x1800035F8: "wdf" ??_C@_17LBGAFNIM@?$AAw?$AAd?$AAf?$AA?$AA@
0x180002171: memset
0x180003A18: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800035B8: "WdfPreDeviceInstallEx" ??_C@_0BG@EDFFMAPA@WdfPreDeviceInstallEx?$AA@

[JEB Decompiler by PNF Software]