Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\TsUsbFlt.sys Base=0x1C0000000 SHA-256=B3898F2B03FB8F0705CE729385F9836A39E3E995481E152C3CF61A2CFE80B4B1
PDB: TsUsbFlt.pdb GUID={88C006AF-C6B8-C7A9-0D96361FC63AFC74} Age=1

288 located named symbols:
0x1C000F068: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C000D3D8: WdfDriverGlobals
0x1C00084D4: "long __cdecl PnpIrpQueryID(struct _DEVICE_OBJECT * __ptr64,enum BUS_QUERY_ID_TYPE,unsigned short * __ptr64 * __ptr64)" ?PnpIrpQueryID@@YAJPEAU_DEVICE_OBJECT@@W4BUS_QUERY_ID_TYPE@@PEAPEAG@Z
0x1C0008220: WppClassicProviderCallback
0x1C000D0C8: "__cdecl WDF_FD_QUERY_DEVICE_RELATIONS_WORKITEM_CONTEXT_TYPE_INFO" _WDF_FD_QUERY_DEVICE_RELATIONS_WORKITEM_CONTEXT_TYPE_INFO
0x1C00089A0: FcEvtDeviceFileCreate
0x1C000D278: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C00014F4: "private: long __cdecl CUsbBusFilter::Initialize(struct WDFDEVICE__ * __ptr64,unsigned char) __ptr64" ?Initialize@CUsbBusFilter@@AEAAJPEAUWDFDEVICE__@@E@Z
0x1C0010150: WppTraceCallback
0x1C000F050: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C000F028: "__cdecl _imp_WdfVersionUnbindClass" __imp_WdfVersionUnbindClass
0x1C0010B20: FdQueryBusRelationsCompletionWorkItemCallback
0x1C0001F38: "public: void __cdecl CUsbBusFilter::EvtIoInternalDeviceControl(struct WDFREQUEST__ * __ptr64,unsigned __int64,unsigned long) __ptr64" ?EvtIoInternalDeviceControl@CUsbBusFilter@@QEAAXPEAUWDFREQUEST__@@_KK@Z
0x1C00108F0: FdEvtDeviceContextCleanup
0x1C000A428: mbtowc
0x1C000B410: WPP_894d968f2bba3c1b2ab76451a61ef7a1_Traceguids
0x1C000BD00: "USB\ROOT_HUB30" ??_C@_1BO@EIEDGFDK@?$AAU?$AAS?$AAB?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA_?$AAH?$AAU?$AAB?$AA3?$AA0?$AA?$AA@
0x1C000F168: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C000A540: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0009840: "__cdecl vsnwprintf" _vsnwprintf
0x1C00014A0: "public: __cdecl CUsbBusFilter::~CUsbBusFilter(void) __ptr64" ??1CUsbBusFilter@@QEAA@XZ
0x1C000BC90: "USB\VID_03F0&PID_5311" ??_C@_1CM@MJNNCEML@?$AAU?$AAS?$AAB?$AA?2?$AAV?$AAI?$AAD?$AA_?$AA0?$AA3?$AAF?$AA0?$AA?$CG?$AAP?$AAI?$AAD?$AA_?$AA5?$AA3?$AA1?$AA1?$AA?$AA@
0x1C000D2C0: "void * __ptr64 __ptr64 __KMDF_TYPE_INIT_END" ?__KMDF_TYPE_INIT_END@@3PEAXEA
0x1C000BB80: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000F060: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0008490: FdEvtWdmIrpGenericCompletion
0x1C000BE10: WPP_7f15f4e7802532a8189d1f6c05f702d4_Traceguids
0x1C00042D4: "public: static long __cdecl CUsbPdoFilter::CreateInstance(struct WDFDEVICE__ * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _GUID * __ptr64,struct _EPROCESS * __ptr64,unsigned short const * __ptr64,class CUsbPdoFilter * __ptr64 * __ptr64)" ?CreateInstance@CUsbPdoFilter@@SAJPEAUWDFDEVICE__@@PEAU_DEVICE_OBJECT@@PEAU_GUID@@PEAU_EPROCESS@@PEBGPEAPEAV1@@Z
0x1C000F198: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000F0A8: "__cdecl _imp_IoAttachDeviceToDeviceStack" __imp_IoAttachDeviceToDeviceStack
0x1C0008C40: CcEvtObjectContextCleanup
0x1C0006798: "public: void __cdecl CUsbFilterControl::EvtDeviceFileCreate(struct WDFREQUEST__ * __ptr64,struct WDFFILEOBJECT__ * __ptr64) __ptr64" ?EvtDeviceFileCreate@CUsbFilterControl@@QEAAXPEAUWDFREQUEST__@@PEAUWDFFILEOBJECT__@@@Z
0x1C000F0E0: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C000F1DC: "__cdecl _IMPORT_DESCRIPTOR_WDFLDR" __IMPORT_DESCRIPTOR_WDFLDR
0x1C000D250: "private: static unsigned short const * __ptr64 * CUsbDeviceDisallowList::m_UsbDeviceDisallowList" ?m_UsbDeviceDisallowList@CUsbDeviceDisallowList@@0PAPEBGA
0x1C000D138: "__cdecl WDF_PDO_PROPRIETARY_ID_EXTENSION_TYPE_INFO" _WDF_PDO_PROPRIETARY_ID_EXTENSION_TYPE_INFO
0x1C0008B50: FcEvtIoDeviceControl
0x1C0007FCC: "private: long __cdecl CUsbFilterControlFile::Initialize(struct _GUID const * __ptr64) __ptr64" ?Initialize@CUsbFilterControlFile@@AEAAJPEBU_GUID@@@Z
0x1C0004B80: "public: long __cdecl CUsbPdoFilter::EvtWdmQueryIdsCompletion(struct _IRP * __ptr64,enum BUS_QUERY_ID_TYPE) __ptr64" ?EvtWdmQueryIdsCompletion@CUsbPdoFilter@@QEAAJPEAU_IRP@@W4BUS_QUERY_ID_TYPE@@@Z
0x1C000BE30: SDDL_DEVOBJ_KERNEL_ONLY_buffer
0x1C000B348: "EnableDiagnosticMode" ??_C@_1CK@MMFLFAFM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C000F080: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C000F000: "__cdecl _imp_HidP_GetCollectionDescription" __imp_HidP_GetCollectionDescription
0x1C000B210: "CUsbFilterControlFile" ??_C@_0BG@ENHFDIEA@CUsbFilterControlFile?$AA@
0x1C00090CC: "private: long __cdecl CUsbBusFilter::GetHIDRawReportDescriptor(struct _DEVICE_OBJECT * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64) __ptr64" ?GetHIDRawReportDescriptor@CUsbBusFilter@@AEAAJPEAU_DEVICE_OBJECT@@KPEAPEAE@Z
0x1C0010B90: PfEvtDeviceContextCleanup
0x1C000F018: "__cdecl _imp_USBD_ParseConfigurationDescriptorEx" __imp_USBD_ParseConfigurationDescriptorEx
0x1C000B128: "__cdecl _guard_iat_table" __guard_iat_table
0x1C000A580: memcpy
0x1C000BCE0: "USB\ROOT_HUB20" ??_C@_1BO@IDBPLGJP@?$AAU?$AAS?$AAB?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA_?$AAH?$AAU?$AAB?$AA2?$AA0?$AA?$AA@
0x1C0001E54: "public: void __cdecl CUsbBusFilter::EvtIoDeviceControl(struct WDFREQUEST__ * __ptr64,unsigned long) __ptr64" ?EvtIoDeviceControl@CUsbBusFilter@@QEAAXPEAUWDFREQUEST__@@K@Z
0x1C000D5F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUzxxvhhxsvxpUlyquivUznwGEUkivxlnkOlyq@AccessCheck" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUzxxvhhxsvxpUlyquivUznwGEUkivxlnkOlyq@AccessCheck
0x1C0007954: "public: long __cdecl CUsbFilterControl::AllocateClaimCheckCollectionSnapshot(unsigned long * __ptr64,struct WDFCOLLECTION__ * __ptr64 * __ptr64) __ptr64" ?AllocateClaimCheckCollectionSnapshot@CUsbFilterControl@@QEAAJPEAKPEAPEAUWDFCOLLECTION__@@@Z
0x1C000831C: "long __cdecl IopSynchronousCall(struct _DEVICE_OBJECT * __ptr64,struct _IO_STACK_LOCATION * __ptr64,void * __ptr64,long,unsigned char,unsigned __int64,unsigned __int64 * __ptr64)" ?IopSynchronousCall@@YAJPEAU_DEVICE_OBJECT@@PEAU_IO_STACK_LOCATION@@PEAXJE_KPEA_K@Z
0x1C000F178: "__cdecl _imp_IoGetCurrentProcess" __imp_IoGetCurrentProcess
0x1C000D050: "__cdecl WDF_CUsbFilterControl_TYPE_INFO" _WDF_CUsbFilterControl_TYPE_INFO
0x1C000D220: WdfBindInfo
0x1C000D348: pfnWppGetVersion
0x1C000B430: "TS_" ??_C@_17FCMFLIAH@?$AAT?$AAS?$AA_?$AA?$AA@
0x1C000F078: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C000B4F0: "\Device\TerminalServicesUSBFilte" ??_C@_1GK@KNMGAPPK@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAU?$AAS?$AAB?$AAF?$AAi?$AAl?$AAt?$AAe@
0x1C0007EA8: "private: long __cdecl CUsbFilterIoTarget::Initialize(struct WDFIOTARGET__ * __ptr64,struct WDFDEVICE__ * __ptr64) __ptr64" ?Initialize@CUsbFilterIoTarget@@AEAAJPEAUWDFIOTARGET__@@PEAUWDFDEVICE__@@@Z
0x1C000A580: memmove
0x1C000125C: "public: static long __cdecl CUsbBusFilter::QueryRegistryData(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?QueryRegistryData@CUsbBusFilter@@SAJPEBG0PEAK@Z
0x1C000F148: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0009724: "unsigned char __cdecl IsAnyStringInMultiSzOnStringTable(unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64 const,unsigned long,unsigned long * __ptr64)" ?IsAnyStringInMultiSzOnStringTable@@YAEPEBGQEAPEBGKPEAK@Z
0x1C000A4A0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C000B6B8: "fUsbRedirectionEnableMode" ??_C@_1DE@FHDFLOOC@?$AAf?$AAU?$AAs?$AAb?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C000BDD8: "\REGISTRY\MACHINE\Software" ??_C@_1DG@FNBMEKKE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x1C000B1E8: "DRIVER_DATA" ??_C@_0M@NAJJHCKA@DRIVER_DATA?$AA@
0x1C000D380: WPP_MAIN_CB
0x1C000F098: "__cdecl _imp_ObReferenceObjectByPointer" __imp_ObReferenceObjectByPointer
0x1C0008260: FdEvtWdmIrpDeviceRelationsBusRelationsCompletion
0x1C000F0C0: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C000BE38: "KmdfLibrary" ??_C@_1BI@BJCKEEDJ@?$AAK?$AAm?$AAd?$AAf?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x1C000F048: WDFLDR_NULL_THUNK_DATA
0x1C000D0F0: USB_Redirector_Event_Provider_Context
0x1C000B1C8: "DEVICE_CLAIM_CHECK_EXTENSION" ??_C@_0BN@CPJMOHJK@DEVICE_CLAIM_CHECK_EXTENSION?$AA@
0x1C000D290: "struct _MARKER_TYPE __KMDF_CLASS_BIND_START" ?__KMDF_CLASS_BIND_START@@3U_MARKER_TYPE@@A
0x1C000B5D8: "MaxNumInterfaceGuidRecycle" ??_C@_1DG@OGFHLMHG@?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAG?$AAu?$AAi?$AAd?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AA?$AA@
0x1C000F180: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0005624: "public: void __cdecl CUsbFilterControl::Unregister(struct WDFDEVICE__ * __ptr64) __ptr64" ?Unregister@CUsbFilterControl@@QEAAXPEAUWDFDEVICE__@@@Z
0x1C000D368: pfnWppQueryTraceInformation
0x1C0009424: FxDriverEntryWorker
0x1C000D1B8: "unsigned short const * __ptr64 * g_CompositeDeviceIdList" ?g_CompositeDeviceIdList@@3PAPEBGA
0x1C00109E0: FdEvtIoDeviceControl
0x1C00019E4: "public: long __cdecl CUsbBusFilter::EvtReleaseHardware(void) __ptr64" ?EvtReleaseHardware@CUsbBusFilter@@QEAAJXZ
0x1C000F110: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C00075A8: "private: long __cdecl CUsbFilterControl::AllocateDeviceClaimCheckObject(struct WDFFILEOBJECT__ * __ptr64,struct _EPROCESS * __ptr64,unsigned short const * __ptr64,unsigned __int64,unsigned long,unsigned short const * __ptr64,unsigned __int64,unsigned long,unsigned short const * __ptr64,unsigned __int64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?AllocateDeviceClaimCheckObject@CUsbFilterControl@@AEAAJPEAUWDFFILEOBJECT__@@PEAU_EPROCESS@@PEBG_KK23K23KPEAPEAX@Z
0x1C00074B0: "long __cdecl QueryPdoName(struct _DEVICE_OBJECT * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?QueryPdoName@@YAJPEAU_DEVICE_OBJECT@@PEAPEBGPEAK@Z
0x1C000D308: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUyfhurogviUdrmDCUlyquivUznwGEUkivxlnkOlyq@TsUsbFlt" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUyfhurogviUdrmDCUlyquivUznwGEUkivxlnkOlyq@TsUsbFlt
0x1C00051E8: "private: void __cdecl CUsbPdoFilter::IoDeviceControlQueryProprietaryId(struct WDFREQUEST__ * __ptr64) __ptr64" ?IoDeviceControlQueryProprietaryId@CUsbPdoFilter@@AEAAXPEAUWDFREQUEST__@@@Z
0x1C000F150: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1C00041D8: WPP_SF_I
0x1C000117C: WPP_SF_i
0x1C0006658: "private: long __cdecl CUsbFilterControl::RegisterBusFilter(struct WDFDEVICE__ * __ptr64) __ptr64" ?RegisterBusFilter@CUsbFilterControl@@AEAAJPEAUWDFDEVICE__@@@Z
0x1C000B560: "\DosDevices\TerminalServicesUSBF" ??_C@_1HC@HCBEGIIF@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAU?$AAS?$AAB?$AAF@
0x1C000A47C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C000D370: "long g_TsUsbFltInstances" ?g_TsUsbFltInstances@@3JA
0x1C000B2A8: Microsoft_Windows_TerminalServices_ClientUSBDevicesLevels
0x1C000BB60: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000D280: "__cdecl _mb_cur_max" __mb_cur_max
0x1C000A508: "__cdecl flswbuf" _flswbuf
0x1C00092B8: RtlStringLengthWorkerW
0x1C000F0D8: "__cdecl _imp_ExUuidCreate" __imp_ExUuidCreate
0x1C000F160: "__cdecl _imp_SeExports" __imp_SeExports
0x1C000B268: "FD_QUERY_DEVICE_RELATIONS_WORKIT" ??_C@_0CL@FOJANOLC@FD_QUERY_DEVICE_RELATIONS_WORKIT@
0x1C000B138: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1C000B400: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C0010BD4: IsUsbRedirectionEnabled
0x1C000D350: pfnEtwRegisterClassicProvider
0x1C000BD20: "USB\USB20_HUB" ??_C@_1BM@EDMEGOKN@?$AAU?$AAS?$AAB?$AA?2?$AAU?$AAS?$AAB?$AA2?$AA0?$AA_?$AAH?$AAU?$AAB?$AA?$AA@
0x1C000D5F8: gbl_errno
0x1C000956C: "long __cdecl FxStubBindClasses(struct _WDF_BIND_INFO * __ptr64)" ?FxStubBindClasses@@YAJPEAU_WDF_BIND_INFO@@@Z
0x1C000BC60: "USB\VID_045E&PID_0723" ??_C@_1CM@DAPOCJ@?$AAU?$AAS?$AAB?$AA?2?$AAV?$AAI?$AAD?$AA_?$AA0?$AA4?$AA5?$AAE?$AA?$CG?$AAP?$AAI?$AAD?$AA_?$AA0?$AA7?$AA2?$AA3?$AA?$AA@
0x1C000985C: "__cdecl vsnwprintf_l" _vsnwprintf_l
0x1C000F128: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x1C000BE20: WPP_1c1a41fb0bb633d75a0c62fb99373fde_Traceguids
0x1C000F020: USBD_NULL_THUNK_DATA
0x1C000F010: HIDPARSE_NULL_THUNK_DATA
0x1C00046A4: "private: long __cdecl CUsbPdoFilter::Initialize(struct WDFDEVICE__ * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _GUID * __ptr64,struct _EPROCESS * __ptr64,unsigned short const * __ptr64) __ptr64" ?Initialize@CUsbPdoFilter@@AEAAJPEAUWDFDEVICE__@@PEAU_DEVICE_OBJECT@@PEAU_GUID@@PEAU_EPROCESS@@PEBG@Z
0x1C0001008: WPP_SF_
0x1C00104C0: FdEvtDriverUnload
0x1C000BE50: "`string'" ??_C@_1FG@GOJAEPKC@?$AAU?$AAS?$AAB?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA_?$AAH?$AAU?$AAB?$AA?$AA?$AAU?$AAS?$AAB?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA_?$AAH?$AAU?$AAB?$AA2?$AA0?$AA?$AA?$AAU?$AAS?$AAB?$AA?2@
0x1C000D358: pfnEtwUnregister
0x1C0001944: "public: long __cdecl CUsbBusFilter::EvtPrepareHardware(void) __ptr64" ?EvtPrepareHardware@CUsbBusFilter@@QEAAJXZ
0x1C000B310: "termsrv\devices\urbdr\busfilter\" ??_C@_0DC@EAJDGLHH@termsrv?2devices?2urbdr?2busfilter?2@
0x1C0008790: PfEvtIoDeviceControl
0x1C0005304: RtlStringCbPrintfW
0x1C0010990: FdEvtReleaseHardware
0x1C000D160: "__cdecl WDF_CUsbFilterControlFile_TYPE_INFO" _WDF_CUsbFilterControlFile_TYPE_INFO
0x1C0008940: FcEvtControlCleanupCallback
0x1C000F030: "__cdecl _imp_WdfVersionUnbind" __imp_WdfVersionUnbind
0x1C000B438: "%ws%ws" ??_C@_1O@PEBEJIFE@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1C000D078: "__cdecl WDF_CUsbPdoFilter_TYPE_INFO" _WDF_CUsbPdoFilter_TYPE_INFO
0x1C0002F00: "private: unsigned char __cdecl CUsbBusFilter::ValidateWithClaimChecks(struct WDFCOLLECTION__ * __ptr64,struct _DEVICE_OBJECT * __ptr64,struct _GUID * __ptr64,struct _EPROCESS * __ptr64 * __ptr64) __ptr64" ?ValidateWithClaimChecks@CUsbBusFilter@@AEAAEPEAUWDFCOLLECTION__@@PEAU_DEVICE_OBJECT@@PEAU_GUID@@PEAPEAU_EPROCESS@@@Z
0x1C000D340: Microsoft_Windows_TerminalServices_ClientUSBDevicesEnableBits
0x1C000F190: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0008E6C: "private: unsigned char __cdecl CUsbBusFilter::CheckForHIDKeyboardAndMouse(struct _DEVICE_OBJECT * __ptr64) __ptr64" ?CheckForHIDKeyboardAndMouse@CUsbBusFilter@@AEAAEPEAU_DEVICE_OBJECT@@@Z
0x1C000B2B0: USB_Redirector_Event_Provider
0x1C0001BE8: "private: void __cdecl CUsbBusFilter::QueryDeviceText(struct WDFREQUEST__ * __ptr64,unsigned __int64) __ptr64" ?QueryDeviceText@CUsbBusFilter@@AEAAXPEAUWDFREQUEST__@@_K@Z
0x1C000F038: "__cdecl _imp_WdfVersionBind" __imp_WdfVersionBind
0x1C000D000: "__cdecl WDF_DRIVER_DATA_TYPE_INFO" _WDF_DRIVER_DATA_TYPE_INFO
0x1C00088D0: PfEvtIoInternalDeviceControl
0x1C0002530: "public: void __cdecl CUsbBusFilter::EvtQueryBusRelationsCompletionWorkItemCallback(struct _IRP * __ptr64) __ptr64" ?EvtQueryBusRelationsCompletionWorkItemCallback@CUsbBusFilter@@QEAAXPEAU_IRP@@@Z
0x1C0005384: WPP_SF_DD
0x1C000F0A0: PsProcessType
0x1C0004138: McGenEventWrite
0x1C000BD40: "USB\USB30_HUB" ??_C@_1BM@NOMLIPNL@?$AAU?$AAS?$AAB?$AA?2?$AAU?$AAS?$AAB?$AA3?$AA0?$AA_?$AAH?$AAU?$AAB?$AA?$AA@
0x1C000D1B0: WPP_GLOBAL_Control
0x1C000B130: "(null)" ??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
0x1C000F138: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000B2D0: GUID_DEVINTERFACE_TSUSBBUS_FILTER
0x1C000B420: WPP_ThisDir_CTLGUID_CtlGuid
0x1C00053E4: "public: static long __cdecl CUsbFilterControl::Register(struct WDFDEVICE__ * __ptr64,class CUsbFilterControl * __ptr64 * __ptr64)" ?Register@CUsbFilterControl@@SAJPEAUWDFDEVICE__@@PEAPEAV1@@Z
0x1C0001034: WPP_SF_D
0x1C0001034: WPP_SF_d
0x1C000B150: "__cdecl _lookuptable" __lookuptable
0x1C0009800: "__cdecl _security_check_cookie" __security_check_cookie
0x1C000B610: "\REGISTRY\MACHINE\Software\Polic" ??_C@_1KE@LMHNCGID@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x1C000F058: "__cdecl _imp_IoGetLowerDeviceObject" __imp_IoGetLowerDeviceObject
0x1C000F0B0: "__cdecl _imp_IoDetachDevice" __imp_IoDetachDevice
0x1C000F1A0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0005D84: "private: static long __cdecl CUsbFilterControl::CreateInstance(struct WDFDRIVER__ * __ptr64,class CUsbFilterControl * __ptr64 * __ptr64)" ?CreateInstance@CUsbFilterControl@@CAJPEAUWDFDRIVER__@@PEAPEAV1@@Z
0x1C000A3BC: "__cdecl get_printf_count_output" _get_printf_count_output
0x1C00069E0: "public: void __cdecl CUsbFilterControl::EvtIoDeviceControl(struct WDFREQUEST__ * __ptr64,unsigned __int64,unsigned __int64,unsigned long) __ptr64" ?EvtIoDeviceControl@CUsbFilterControl@@QEAAXPEAUWDFREQUEST__@@_K1K@Z
0x1C000B4B8: "termsrv\devices\urbdr\busfilter\" ??_C@_0CM@OFEHHKMM@termsrv?2devices?2urbdr?2busfilter?2@
0x1C000BDA0: "termsrv\devices\urbdr\busfilter\" ??_C@_0DG@CDFOMHN@termsrv?2devices?2urbdr?2busfilter?2@
0x1C000A3B0: "__cdecl invalid_parameter" _invalid_parameter
0x1C0008CC8: "unsigned char __cdecl IsComposite(unsigned short const * __ptr64)" ?IsComposite@@YAEPEBG@Z
0x1C0008A00: FcEvtFileClose
0x1C0010A50: FdEvtIoInternalDeviceControl
0x1C000BD60: "USB\Class_09" ??_C@_1BK@IEOCBMIB@?$AAU?$AAS?$AAB?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AA_?$AA0?$AA9?$AA?$AA@
0x1C0010434: WppCleanupKm
0x1C0002CB4: "private: long __cdecl CUsbBusFilter::UsbCyclePort(unsigned long) __ptr64" ?UsbCyclePort@CUsbBusFilter@@AEAAJK@Z
0x1C000B1B0: "CUsbFilterControl" ??_C@_0BC@HPNACHME@CUsbFilterControl?$AA@
0x1C000BCC0: "USB\ROOT_HUB" ??_C@_1BK@NGKKEEMA@?$AAU?$AAS?$AAB?$AA?2?$AAR?$AAO?$AAO?$AAT?$AA_?$AAH?$AAU?$AAB?$AA?$AA@
0x1C000F0F8: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C000B2C0: EVENT_USB_DIAGNOSTIC_MODE_NOT_SET
0x1C0012000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C000B020: "__cdecl load_config_used" _load_config_used
0x1C00093B0: FxStubDriverUnload
0x1C0002480: "public: long __cdecl CUsbBusFilter::EvtWdmIrpPreprocessCallback(struct _IRP * __ptr64) __ptr64" ?EvtWdmIrpPreprocessCallback@CUsbBusFilter@@QEAAJPEAU_IRP@@@Z
0x1C0008CEC: McGenEventUnregister
0x1C000F090: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C000F130: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0010500: FdEvtDeviceAdd
0x1C000D2A0: "void * __ptr64 __ptr64 __KMDF_CLASS_BIND_END" ?__KMDF_CLASS_BIND_END@@3PEAXEA
0x1C000B2E0: Microsoft_Windows_TerminalServices_ClientUSBDevicesKeywords
0x1C000D374: "unsigned long g_UsbBusDeviceAllowListDebugEnabled" ?g_UsbBusDeviceAllowListDebugEnabled@@3KA
0x1C0003C70: "private: long __cdecl CUsbBusFilter::QueryChildDeviceText(struct _DEVICE_OBJECT * __ptr64,unsigned short const * __ptr64,enum DEVICE_TEXT_TYPE,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?QueryChildDeviceText@CUsbBusFilter@@AEAAJPEAU_DEVICE_OBJECT@@PEBGW4DEVICE_TEXT_TYPE@@KPEAPEBGPEA_K@Z
0x1C000F070: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000BD80: "USB\COMPOSITE" ??_C@_1BM@CAOBEEHI@?$AAU?$AAS?$AAB?$AA?2?$AAC?$AAO?$AAM?$AAP?$AAO?$AAS?$AAI?$AAT?$AAE?$AA?$AA@
0x1C000BBA0: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000D0A0: "__cdecl WDF_DEVICE_CLAIM_CHECK_EXTENSION_TYPE_INFO" _WDF_DEVICE_CLAIM_CHECK_EXTENSION_TYPE_INFO
0x1C0004974: "private: long __cdecl CUsbPdoFilter::PdoAttach(struct _DEVICE_OBJECT * __ptr64) __ptr64" ?PdoAttach@CUsbPdoFilter@@AEAAJPEAU_DEVICE_OBJECT@@@Z
0x1C0004F60: "private: void __cdecl CUsbPdoFilter::IoDeviceControlQueryOriginalHardwareIds(struct WDFREQUEST__ * __ptr64) __ptr64" ?IoDeviceControlQueryOriginalHardwareIds@CUsbPdoFilter@@AEAAXPEAUWDFREQUEST__@@@Z
0x1C0004D30: "public: void __cdecl CUsbPdoFilter::EvtIoInternalDeviceControl(struct WDFREQUEST__ * __ptr64,unsigned __int64,unsigned __int64,unsigned long) __ptr64" ?EvtIoInternalDeviceControl@CUsbPdoFilter@@QEAAXPEAUWDFREQUEST__@@_K1K@Z
0x1C000A518: RtlAnsiCharToUnicodeChar
0x1C000D188: "__cdecl WDF_CUsbBusFilter_TYPE_INFO" _WDF_CUsbBusFilter_TYPE_INFO
0x1C000F100: InitSafeBootMode
0x1C000BC10: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000F008: "__cdecl _imp_HidP_FreeCollectionDescription" __imp_HidP_FreeCollectionDescription
0x1C000D284: "private: static unsigned long * CUsbDeviceClassDisallowList::m_UsbDeviceClassDisallowList" ?m_UsbDeviceClassDisallowList@CUsbDeviceClassDisallowList@@0PAKA
0x1C000F088: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C000A3B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000BCBC: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x1C0001A14: "private: long __cdecl CUsbBusFilter::QueryProprietaryIdExtension(unsigned short const * __ptr64,struct _PDO_PROPRIETARY_ID_EXTENSION * __ptr64 * __ptr64) __ptr64" ?QueryProprietaryIdExtension@CUsbBusFilter@@AEAAJPEBGPEAPEAU_PDO_PROPRIETARY_ID_EXTENSION@@@Z
0x1C0010008: WppLoadTracingSupport
0x1C000F0E8: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0009300: "void __cdecl FxStubDriverUnloadCommon(void)" ?FxStubDriverUnloadCommon@@YAXXZ
0x1C000B450: "USB\d8f87d9c-4ee4-4a61-92d1-3caa" ??_C@_1FE@LKKBKOJH@?$AAU?$AAS?$AAB?$AA?2?$AAd?$AA8?$AAf?$AA8?$AA7?$AAd?$AA9?$AAc?$AA?9?$AA4?$AAe?$AAe?$AA4?$AA?9?$AA4?$AAa?$AA6?$AA1?$AA?9?$AA9?$AA2?$AAd?$AA1?$AA?9?$AA3?$AAc?$AAa?$AAa@
0x1C000F1C8: "__cdecl _IMPORT_DESCRIPTOR_HIDPARSE" __IMPORT_DESCRIPTOR_HIDPARSE
0x1C0003134: "private: long __cdecl CUsbBusFilter::AllocatePdoProprietaryIdObject(struct _DEVICE_OBJECT * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?AllocatePdoProprietaryIdObject@CUsbBusFilter@@AEAAJPEAU_DEVICE_OBJECT@@PEAPEAX@Z
0x1C000419C: McTemplateK0
0x1C000B258: "CUsbBusFilter" ??_C@_0O@LNFLMKBA@CUsbBusFilter?$AA@
0x1C000D028: "__cdecl WDF_CUsbFilterIoTarget_TYPE_INFO" _WDF_CUsbFilterIoTarget_TYPE_INFO
0x1C0009628: "long __cdecl ValidateMultiStrings(unsigned short const * __ptr64,unsigned __int64,unsigned long * __ptr64,unsigned __int64 * __ptr64,unsigned short const * __ptr64 * __ptr64 * __ptr64)" ?ValidateMultiStrings@@YAJPEBG_KPEAKPEA_KPEAPEAPEBG@Z
0x1C000F0C8: "__cdecl _imp_IoInvalidateDeviceRelations" __imp_IoInvalidateDeviceRelations
0x1C000D2B0: "struct _MARKER_TYPE __KMDF_TYPE_INIT_START" ?__KMDF_TYPE_INIT_START@@3U_MARKER_TYPE@@A
0x1C000F0A0: "__cdecl _imp_PsProcessType" __imp_PsProcessType
0x1C000BC30: "USB\VID_2001&PID_F103" ??_C@_1CM@GJLFMKD@?$AAU?$AAS?$AAB?$AA?2?$AAV?$AAI?$AAD?$AA_?$AA2?$AA0?$AA0?$AA1?$AA?$CG?$AAP?$AAI?$AAD?$AA_?$AAF?$AA1?$AA0?$AA3?$AA?$AA@
0x1C00093F0: FxDriverEntry
0x1C000D270: "__cdecl _security_cookie" __security_cookie
0x1C0009950: "__cdecl woutput_l" _woutput_l
0x1C0001374: "public: static long __cdecl CUsbBusFilter::CreateInstance(struct WDFDEVICE__ * __ptr64,unsigned char,void * __ptr64,class CUsbBusFilter * __ptr64 * __ptr64)" ?CreateInstance@CUsbBusFilter@@SAJPEAUWDFDEVICE__@@EPEAXPEAPEAV1@@Z
0x1C000F158: "__cdecl _imp_RtlCheckTokenMembership" __imp_RtlCheckTokenMembership
0x1C000D200: "unsigned short const * __ptr64 * g_UsbBusDeviceAllowListDebug" ?g_UsbBusDeviceAllowListDebug@@3PAPEBGA
0x1C000B238: "PDO_PROPRIETARY_ID_EXTENSION" ??_C@_0BN@GHJKEKB@PDO_PROPRIETARY_ID_EXTENSION?$AA@
0x1C000B4A8: WPP_35dcacf8db633e4a59777db8b082f88e_Traceguids
0x1C0008D20: McGenControlCallbackV2
0x1C000BBD8: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0008710: PfEvtWdmQueryIdsCompletion
0x1C00065DC: "private: enum _USB_MODE __cdecl CUsbFilterControl::QueryUsbEnableMode(void) __ptr64" ?QueryUsbEnableMode@CUsbFilterControl@@AEAA?AW4_USB_MODE@@XZ
0x1C0009940: "__cdecl flsbuf" _flsbuf
0x1C0004228: WPP_SF_qd
0x1C000427C: WPP_SF_qq
0x1C00011C0: WPP_SF_qS
0x1C0008560: PfEvtWdmIrpPreprocessCallback
0x1C00061AC: "private: long __cdecl CUsbFilterControl::Initialize(struct WDFDEVICE__ * __ptr64) __ptr64" ?Initialize@CUsbFilterControl@@AEAAJPEAUWDFDEVICE__@@@Z
0x1C000B228: "CUsbPdoFilter" ??_C@_0O@OKPOJJD@CUsbPdoFilter?$AA@
0x1C000F100: "__cdecl _imp_InitSafeBootMode" __imp_InitSafeBootMode
0x1C0011244: "__cdecl _security_init_cookie" __security_init_cookie
0x1C000F0F0: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C000D344: WPPTraceSuite
0x1C000F108: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000584C: "public: long __cdecl CUsbFilterControl::GetParentHub(struct WDFDEVICE__ * __ptr64,struct WDFIOTARGET__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetParentHub@CUsbFilterControl@@QEAAJPEAUWDFDEVICE__@@PEAPEAUWDFIOTARGET__@@PEAK@Z
0x1C000D3D0: WdfFunctions_01015
0x1C0008E2C: McGenEventRegister
0x1C000D5F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUfiyfgrohUlyquivUznwGEUkivxlnkOlyq@UrbUtils" __@@_PchSym_@00@KxulyqvxgPillgKxugvinhieUwverxvhUfiywiUfiyfgrohUlyquivUznwGEUkivxlnkOlyq@UrbUtils
0x1C000D1C8: "unsigned short const * __ptr64 * g_UsbBusDeviceAllowList" ?g_UsbBusDeviceAllowList@@3PAPEBGA
0x1C0009830: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0010940: FdEvtPrepareHardware
0x1C000B748: WPP_2d59cb4418783df5291a439715137f11_Traceguids
0x1C000B380: "\REGISTRY\MACHINE\System\Current" ??_C@_1IA@MNDKNOPO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000F120: "__cdecl _imp_RtlVerifyVersionInfo" __imp_RtlVerifyVersionInfo
0x1C000F118: "__cdecl _imp_RtlAnsiCharToUnicodeChar" __imp_RtlAnsiCharToUnicodeChar
0x1C000F040: "__cdecl _imp_WdfVersionBindClass" __imp_WdfVersionBindClass
0x1C000B1F8: "CUsbFilterIoTarget" ??_C@_0BD@NHGGJKLG@CUsbFilterIoTarget?$AA@
0x1C000F188: ntoskrnl_NULL_THUNK_DATA
0x1C000F0D0: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C000F170: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0004658: "public: __cdecl CUsbPdoFilter::~CUsbPdoFilter(void) __ptr64" ??1CUsbPdoFilter@@QEAA@XZ
0x1C0008BE0: FcEvtIoTargetCleanupCallback
0x1C0011008: DriverEntry
0x1C00078AC: "private: void __cdecl CUsbFilterControl::InvalidateAllBuses(void) __ptr64" ?InvalidateAllBuses@CUsbFilterControl@@AEAAXXZ
0x1C0007CB4: "public: static long __cdecl CUsbFilterIoTarget::CreateInstance(struct WDFDEVICE__ * __ptr64,struct WDFDEVICE__ * __ptr64,class CUsbFilterIoTarget * __ptr64 * __ptr64)" ?CreateInstance@CUsbFilterIoTarget@@SAJPEAUWDFDEVICE__@@0PEAPEAV1@@Z
0x1C00010F0: WPP_SF_SD
0x1C000A3DC: "__cdecl fputwc_nolock" _fputwc_nolock
0x1C000D360: pfnWppTraceMessage
0x1C000F140: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C00103A4: WppInitKm
0x1C000B010: SDDL_DEVOBJ_KERNEL_ONLY
0x1C0010AD0: FdEvtWdmIrpPreprocessCallback
0x1C000B298: EVENT_PORT_CYCLE_FAILED
0x1C0001078: WPP_SF_S
0x1C000A8C0: memset
0x1C000F1F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C000F1B4: "__cdecl _IMPORT_DESCRIPTOR_USBD" __IMPORT_DESCRIPTOR_USBD
0x1C000F0B8: "__cdecl _imp_IoGetDeviceProperty" __imp_IoGetDeviceProperty

[JEB Decompiler by PNF Software]