Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\dam.sys Base=0x1C0000000 SHA-256=19A9D8AFA203400292CC3C03CA911CA26F70F29B5AAE83E7A840B1E0F0366875
PDB: dam.pdb GUID={06348048-C906-BC16-4B228DB75E58F1B8} Age=1

475 located named symbols:
0x1C00031BD: "`DampStartS0Throttling'::`4'::_TlgEvent" ?_TlgEvent@?3??DampStartS0Throttling@@9@9
0x1C00027A0: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C00024D0: DamEvent_SuspendResumeStart
0x1C0006090: DampGlobalPolicyStringStorage_audiodg_exe
0x1C0002400: DamEvent_PdcNotificationAcknowledge
0x1C0006580: DampDynamicPolicyWorkItem
0x1C0008138: "__cdecl _imp_ExAcquireFastMutexUnsafe" __imp_ExAcquireFastMutexUnsafe
0x1C0012938: DamIoTrackingStop
0x1C0006320: DamDriverObject
0x1C0005C80: DampGlobalPolicyStringStorage_dllhost_exe_990F07C7_78DC_4BD2_B145_5F791410BDDE
0x1C000B540: DampExemptCheckCallbackRoutine
0x1C00131D8: SepSddlGetAclForString
0x1C0010D08: DamAggregateEventsCallbackShutdown
0x1C000D950: DampSubscribePdc
0x1C0008108: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C00082A8: "__cdecl _imp_RtlDeriveCapabilitySidsFromName" __imp_RtlDeriveCapabilitySidsFromName
0x1C000AD04: DampDestroyExemptGroupInfo
0x1C0008278: "__cdecl _imp_RtlQueryPackageClaims" __imp_RtlQueryPackageClaims
0x1C000CDA8: DampQueuePdcWorkItem
0x1C0006445: DampS0Suspended
0x1C00081C0: "__cdecl _imp_PsAssignProcessToJobObject" __imp_PsAssignProcessToJobObject
0x1C00080F0: "__cdecl _imp_PsQueryProcessCommandLine" __imp_PsQueryProcessCommandLine
0x1C0004CB8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C00080C0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0006420: DampPdcWorkItem
0x1C0006540: PfnIoCreateDeviceSecure
0x1C0004BE0: DampLastS0SuspendValueName
0x1C00080C8: "__cdecl _imp_ObfDereferenceObjectWithTag" __imp_ObfDereferenceObjectWithTag
0x1C0008240: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00019D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C00149E8: PdcResiliencyClientUnregister
0x1C0002698: "LastS0SuspendTime" ??_C@_1CE@EFDAJIGL@?$AAL?$AAa?$AAs?$AAt?$AAS?$AA0?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1C00026C0: "LastS0ResumeTime" ??_C@_1CC@OOOGJOAH@?$AAL?$AAa?$AAs?$AAt?$AAS?$AA0?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1C00082F0: "__cdecl _imp_PoRegisterPowerSettingCallback" __imp_PoRegisterPowerSettingCallback
0x1C00080D0: "__cdecl _imp_PsLookupProcessByProcessId" __imp_PsLookupProcessByProcessId
0x1C0002A78: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C0008098: "__cdecl _imp_ZwOpenProcess" __imp_ZwOpenProcess
0x1C0004040: DplFeatureControlKeyName
0x1C000CF6C: DampProcessExecutionRequiredChange
0x1C0005480: DampGlobalPolicyStringStorage_SettingSyncHost_exe
0x1C0002150: WNF_EDP_DPL_KEYS_DROPPING
0x1C0008058: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0006480: DampDynamicPolicyActive
0x1C0008320: "__cdecl _imp_IoDeviceObjectType" __imp_IoDeviceObjectType
0x1C0010AE0: DampAudioPlaybackStopCallback
0x1C00081F0: "__cdecl _imp_ExAllocateTimer" __imp_ExAllocateTimer
0x1C00027A8: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C0010880: DampDplKeysStateWnfCallback
0x1C0005E30: DampGlobalPolicyStringStorage_dllhost_exe_3EB3C877_1F16_487C_9050_104DBCD66683
0x1C0008128: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0006312: DampTestSigningOn
0x1C0015008: DampCheckDplSupportedSystem
0x1C0001580: DampS0TimerRoutine
0x1C00082D0: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0005330: DampGlobalPolicyStringStorage_speech_onecore_common_speechruntime_exe
0x1C0008178: "__cdecl _imp_ExInitializeRundownProtection" __imp_ExInitializeRundownProtection
0x1C0012B60: IoDevObjCreateDeviceSecure
0x1C0008340: "__cdecl _imp_wcschr" __imp_wcschr
0x1C0008220: "__cdecl _imp_ExCancelTimer" __imp_ExCancelTimer
0x1C0008190: "__cdecl _imp_IoQueueWorkItemEx" __imp_IoQueueWorkItemEx
0x1C000DAB0: DamSetState
0x1C00040D0: DesktopActivityModeratorEventProvider_Context
0x1C0001008: "__cdecl TlgWrite" _TlgWrite
0x1C00083C0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C000654C: PiRegStateDiscriptor
0x1C0008370: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1C0008348: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C0012D0C: IopDevObjApplyPostCreationSettings
0x1C000AC88: DampSetS0Timer
0x1C0004BC0: DampRegistryKeyName
0x1C0012A14: DamIoTrackingSetTrackingIntervalType
0x1C0008258: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C0006440: DampPdcPendingState
0x1C0006328: DampS0WorkItem
0x1C00022D0: "AllowDPLOverride" ??_C@_1CC@OCKLDMJP@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAP?$AAL?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x1C0006560: PerNetworkResiliencyClients
0x1C0008318: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00024A0: DamEvent_ThrottleSession0End
0x1C0003116: "`DampSetPowerState'::`13'::_TlgEvent" ?_TlgEvent@?N@??DampSetPowerState@@9@9
0x1C00059C0: DampGlobalPolicyStringStorage_fontdrvhost_exe
0x1C00080B8: "__cdecl _imp_ExNotifyCallback" __imp_ExNotifyCallback
0x1C0005910: DampGlobalPolicyStringStorage_installagent_exe
0x1C00027C8: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C000161C: McTemplateK0hqxt
0x1C0010910: DampAudioPlaybackStartCallback
0x1C00058A0: DampGlobalPolicyStringStorage_installagentuserbroker_exe
0x1C0008228: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0004FB0: DampGlobalPolicyStringStorage_winlogon_exe
0x1C0008120: "__cdecl _imp_PsGetJobSilo" __imp_PsGetJobSilo
0x1C0002130: GUID_IDLE_RESILIENCY_PERIOD
0x1C00025A0: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1IG@JLCLBLAD@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0002628: "DamExempted" ??_C@_1BI@KBOHCHHN@?$AAD?$AAa?$AAm?$AAE?$AAx?$AAe?$AAm?$AAp?$AAt?$AAe?$AAd?$AA?$AA@
0x1C0002288: "AllowDPLOnDesktop" ??_C@_1CE@HDCDKICO@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAP?$AAL?$AAO?$AAn?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x1C0002640: "PowerEvents" ??_C@_1BI@PLEIFLOF@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x1C0004D90: DampGlobalPolicyStringStorage_wow64_WerFault_exe
0x1C0005B60: DampGlobalPolicyStringStorage_dllhost_exe_F9717507_6651_4EDB_BFF7_AE615179BCCF
0x1C00057B8: DampGlobalPolicyStringStorage_lsass_exe
0x1C0006488: DampRegistryEventsKeyHandle
0x1C0014800: PdcpResiliencyClientCallback
0x1C00064E8: DampIoTrackingSlowIoThreshold
0x1C0001A00: memcpy
0x1C00065F8: DampKernelCalloutTable
0x1C0005FA0: DampGlobalPolicyStringStorage_csrss_exe
0x1C00115B0: DampCrackPolicyPathString
0x1C000A21C: DampCheckProcessExempted
0x1C0004C00: DampLastEnterCSValueName
0x1C0013020: SepSddlDaclFromSDDLString
0x1C000146C: McTemplateK0qqqt
0x1C00082E8: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0008068: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C001287C: DamIoTrackingShutdown
0x1C0008338: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C00064B8: DampRegEventWorkItem
0x1C0008048: "__cdecl _imp_RtlIsMultiSessionSku" __imp_RtlIsMultiSessionSku
0x1C0005B10: DampGlobalPolicyStringStorage_dmcertinst_exe
0x1C0002210: "\Registry\Machine\SYSTEM\Current" ??_C@_1HG@NCBIOLJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0008150: "__cdecl _imp_ZwSetInformationJobObject" __imp_ZwSetInformationJobObject
0x1C0001A00: memmove
0x1C0012EA4: SepSddlSecurityDescriptorFromSDDLString
0x1C0010C78: DamAggregateEventsCallbackInitialize
0x1C0006658: Microsoft_Windows_DesktopActivityModeratorEnableBits
0x1C000E570: DamReleaseExclusiveStateOwner
0x1C00082C0: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C00081D8: "__cdecl _imp_ExUnregisterCallback" __imp_ExUnregisterCallback
0x1C0002708: "IoCreateDeviceSecure" ??_C@_1CK@LEEDIGFP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1C0004BD0: DampLastS0ResumeValueName
0x1C000195C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0005000: DampGlobalPolicyStringStorage_wininit_exe
0x1C0004D00: DampGlobalPolicyStringStorage_wow64_wermgr_exe
0x1C0005A80: DampGlobalPolicyStringStorage_easinvoker_exe
0x1C00022F8: "DisableDPLOn10SOverride" ??_C@_1DA@HHOOGBAK@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAD?$AAP?$AAL?$AAO?$AAn?$AA1?$AA0?$AAS?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x1C000CE60: DampJobWakeNotificationCallback
0x1C00064F8: DampIoTracker
0x1C0014AE0: PdcpGetActualResiliencyClient
0x1C000A1C0: DampCheckTestSigningOn
0x1C0012688: DamQueueRegistryEvent
0x1C000B350: DampS0WorkItemRoutine
0x1C000B9BC: DampHandleProcessTermination
0x1C0011F78: DamPolicyInitialize
0x1C00064C0: DampRegEventQueue
0x1C0008100: "__cdecl _imp_PsGetProcessSessionId" __imp_PsGetProcessSessionId
0x1C00136BC: SepSddlParseWideStringUlong
0x1C00065A0: DampDynamicPolicyNotifyCompletedEvent
0x1C000AB44: DampFreezeUserSessions
0x1C0008140: "__cdecl _imp_ExReleaseFastMutexUnsafe" __imp_ExReleaseFastMutexUnsafe
0x1C0008018: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C0008210: "__cdecl _imp_ExUnregisterExtension" __imp_ExUnregisterExtension
0x1C0011114: DampResolveFilePath
0x1C0008000: "__cdecl _imp_EACreateAggregateEvent" __imp_EACreateAggregateEvent
0x1C00027D8: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C0006458: DampPdcStateHandle
0x1C0004CD0: DampState
0x1C00027B0: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C0008060: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C00122D0: DamOpenRegistryEvents
0x1C00080F8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0006620: DampPowerStateList
0x1C0002780: SDDL_DEVOBJ_SYS_ALL_buffer
0x1C00022B0: "AllowDPLOn10S" ??_C@_1BM@PPHHENOE@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAP?$AAL?$AAO?$AAn?$AA1?$AA0?$AAS?$AA?$AA@
0x1C00050A0: DampGlobalPolicyStringStorage_wermgr_exe
0x1C0008090: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C0014DFC: PdcPortSendMessage
0x1C0008358: "__cdecl _imp__snwprintf" __imp__snwprintf
0x1C000D510: DampPdcResiliencyCallback
0x1C0008398: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0011634: DampCheckPolicyExemption
0x1C0002490: DamEvent_ResiliencyEngagedStart
0x1C0004F60: DampGlobalPolicyStringStorage_WSHost_exe
0x1C00083DC: "__cdecl _IMPORT_DESCRIPTOR_CEA" __IMPORT_DESCRIPTOR_CEA
0x1C0008390: "__cdecl _imp_ZwAssignProcessToJobObject" __imp_ZwAssignProcessToJobObject
0x1C0002500: DamEvent_StartDriverEnd
0x1C000284C: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C0008360: "__cdecl _imp_SeCaptureSecurityDescriptor" __imp_SeCaptureSecurityDescriptor
0x1C0006484: DampGlobalPolicyStringCounterBase
0x1C0008148: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0011DD0: DampDynamicPolicyRegistryWorker
0x1C0005710: DampGlobalPolicyStringStorage_MsSpellCheckingHost_exe
0x1C000A8C4: DampFreezeUserSessionJob
0x1C0001938: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00083A0: "__cdecl _imp_ExRundownCompleted" __imp_ExRundownCompleted
0x1C00082C8: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C00024B0: DamEvent_ThrottleSession0Start
0x1C0005AD0: DampGlobalPolicyStringStorage_dwm_exe
0x1C00082B8: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00016B4: McTemplateK0qqqq
0x1C0006600: DampKernelExtensionRegistration
0x1C0005530: DampGlobalPolicyStringStorage_RuntimeBroker_exe
0x1C000A3D0: DampIoDispatch
0x1C0004F10: DampGlobalPolicyStringStorage_wudfhost_exe
0x1C0006448: DampAudioEventHandle
0x1C0006474: DampDynamicPolicyKeyRefCount
0x1C0008260: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C00023E0: DamEvent_IoTrackingCallback
0x1C0010ED4: DampLogCsEntryBlockedByWakeCounter
0x1C0002658: "LastEnterCSTime" ??_C@_1CA@GBEPOFMK@?$AAL?$AAa?$AAs?$AAt?$AAE?$AAn?$AAt?$AAe?$AAr?$AAC?$AAS?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1C0008078: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C00142DC: CmRegUtilWstrValueGetDword
0x1C0002740: "IoValidateDeviceIoControlAccess" ??_C@_1EA@BAHCLPHE@?$AAI?$AAo?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0004C20: DampIoTrackingCurrent
0x1C0008008: "__cdecl _imp_EADeleteAggregateEvent" __imp_EADeleteAggregateEvent
0x1C0008350: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C00027B8: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C0014064: CmRegUtilUcValueSetUcString
0x1C0012DE0: SeSddlSecurityDescriptorFromSDDL
0x1C0001750: DampPoIdleResiliencyPeriodCallback
0x1C0008378: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x1C0002930: "\Registry\Machine\System\Current" ??_C@_1HC@DKINPPAJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0005EC0: DampGlobalPolicyStringStorage_dllhost_exe_217700E0_0000_11DF_ADB9_F4CE462D9137
0x1C00141A8: CmRegUtilOpenExistingWstrKey
0x1C00052E0: DampGlobalPolicyStringStorage_svchost_exe
0x1C00081B8: "__cdecl _imp_ZwIsProcessInJob" __imp_ZwIsProcessInJob
0x1C001396C: PiRegStateReadStackCreationSettingsFromKey
0x1C001175C: DampShutdownGlobalPolicy
0x1C00081A0: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C0013B3C: PiRegStateOpenClassKey
0x1C0006310: DampDplSupport
0x1C0008298: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C0004010: DplFeatureAllowOverride
0x1C0001884: WdmlibRtlInitUnicodeStringEx
0x1C00028B0: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C0008230: "__cdecl _imp_ExQueryWnfStateData" __imp_ExQueryWnfStateData
0x1C0015730: GsDriverEntry
0x1C00083B8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0005050: DampGlobalPolicyStringStorage_wifitask_exe
0x1C0006470: DampCallbacksInitialized
0x1C00023A0: Microsoft_Windows_DesktopActivityModeratorLevels
0x1C00137C0: PpRegStateReadCreateClassCreationSettings
0x1C0013100: SepSddlGetSidForString
0x1C00028C8: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C0012840: DamIoTrackingInitialize
0x1C00017A0: DampIoTrackingCallback
0x1C0008238: "__cdecl _imp_ExRegisterExtension" __imp_ExRegisterExtension
0x1C0004060: DampPolicyRegistryPath
0x1C000314D: "`DampSetPowerState'::`10'::_TlgEvent" ?_TlgEvent@?9??DampSetPowerState@@9@9
0x1C00029B0: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1C000B2BC: DampQueryJobWakeInformation
0x1C0002190: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1GI@LDFLOPG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0011EC4: DampCheckDynamicPolicyExempted
0x1C0006311: DampAoAc
0x1C000132C: "__cdecl TlgDefineProvider_annotation__TlgDampTraceLoggingHandleProv" _TlgDefineProvider_annotation__TlgDampTraceLoggingHandleProv
0x1C0006468: DampExemptCheckCallback
0x1C00056B0: DampGlobalPolicyStringStorage_MusNotification_exe
0x1C00023A8: Microsoft_Windows_DesktopActivityModeratorKeywords
0x1C00050E0: DampGlobalPolicyStringStorage_WerFaultSecure_exe
0x1C00080A8: PsProcessType
0x1C00011BC: McGenEventWrite
0x1C0008028: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C000C1B0: DampPdcWorkItemRoutine
0x1C0002540: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C0006140: DampGlobalPolicyStringStorage_explorer_exe
0x1C000A010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C00027C0: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0004E50: DampGlobalPolicyStringStorage_ChsIME_exe
0x1C0004DE0: DampGlobalPolicyStringStorage_ChtIME_exe
0x1C0008188: "__cdecl _imp_ZwQueryInformationJobObject" __imp_ZwQueryInformationJobObject
0x1C0006450: DampPdcResiliencyHandle
0x1C0006478: DampDynamicPolicyKeyHandle
0x1C0005F50: DampGlobalPolicyStringStorage_deviceenroller_exe
0x1C0002450: DamEvent_ProcessExemptedByPolicy
0x1C0002410: DamEvent_PdcControlCallback
0x1C0014440: PdcpNotificationClientCallback
0x1C00018E0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0012110: DamPolicyGetProcessExemptionGroup
0x1C0008040: "__cdecl _imp_ZwQueryLicenseValue" __imp_ZwQueryLicenseValue
0x1C00080B0: "__cdecl _imp_ExCreateCallback" __imp_ExCreateCallback
0x1C00081A8: "__cdecl _imp_PsGetProcessSessionIdEx" __imp_PsGetProcessSessionIdEx
0x1C0008010: CEA_NULL_THUNK_DATA
0x1C00083C8: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0005BF0: DampGlobalPolicyStringStorage_dllhost_exe_AB8902B4_09CA_4BB6_B78D_A8F59079A8D5
0x1C0004BF0: DampLastLeaveCSValueName
0x1C0005D10: DampGlobalPolicyStringStorage_dllhost_exe_49EBD8BE_1A92_4A86_A651_70AC565E0FEB
0x1C0003273: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C00080A0: "__cdecl _imp_ObReferenceObjectByHandleWithTag" __imp_ObReferenceObjectByHandleWithTag
0x1C00081F8: "__cdecl _imp_IoSizeofWorkItem" __imp_IoSizeofWorkItem
0x1C0002440: DamEvent_DynamicPolicyReloaded
0x1C000B084: DampCreateExemptGroupInfo
0x1C00053B0: DampGlobalPolicyStringStorage_smss_exe
0x1C0004BB0: DampRegistryValueName
0x1C00027E0: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C00080D8: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x1C00083A8: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C0002010: SDDL_DEVOBJ_SYS_ALL
0x1C00051D0: DampGlobalPolicyStringStorage_ThumbnailExtractionHost_exe
0x1C00128AC: DamIoTrackingStart
0x1C0005FE0: DampGlobalPolicyStringStorage_CredentialUIBroker_exe
0x1C0006630: DampS0Timer
0x1C0002000: DampEmptyString
0x1C0004130: DampGlobalPolicy
0x1C0005580: DampGlobalPolicyStringStorage_rundll32_exe_22D8C27B_47A1_48D1_AD08_7DA7ABD79617
0x1C0006610: DampUserContextList
0x1C000AA0C: DampFreezeSession0Job
0x1C0008118: "__cdecl _imp_PsJobType" __imp_PsJobType
0x1C0005770: DampGlobalPolicyStringStorage_MDEServer_exe
0x1C0004CE0: DampDynamicPolicy
0x1C00081C8: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0006438: DampPowerStateThread
0x1C0014370: PdcNotificationClientAcknowledge
0x1C0016000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0008328: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C00024C0: DamEvent_SuspendResumeEnd
0x1C0002020: "__cdecl load_config_used" _load_config_used
0x1C0008218: "__cdecl _imp_ExDeleteTimer" __imp_ExDeleteTimer
0x1C0006444: DampS0Throttled
0x1C00030DE: "`DampSetPowerState'::`17'::_TlgEvent" ?_TlgEvent@?BB@??DampSetPowerState@@9@9
0x1C0002850: "Properties" ??_C@_1BG@COALCEMK@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x1C0002148: WNF_EDP_DPL_KEYS_STATE
0x1C000665C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUyzxptilfmwUwznUhbhUkwxUlyquivUznwGEUhgwzucOlyq@dam" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUyzxptilfmwUwznUhbhUkwxUlyquivUznwGEUhgwzucOlyq@dam
0x1C000125C: McGenEventUnregister
0x1C0002158: "\Device\DamCtrl" ??_C@_1CA@DMALNNME@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAD?$AAa?$AAm?$AAC?$AAt?$AAr?$AAl?$AA?$AA@
0x1C0006308: DampDplKeysDroppingSubscription
0x1C0008280: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C0008030: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0008160: "__cdecl _imp_ExAcquireRundownProtection" __imp_ExAcquireRundownProtection
0x1C0008180: "__cdecl _imp_ZwCreateJobObject" __imp_ZwCreateJobObject
0x1C0008250: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C0008308: "__cdecl _imp_IoUnregisterIoTracking" __imp_IoUnregisterIoTracking
0x1C00081D0: "__cdecl _imp_PsGetProcessId" __imp_PsGetProcessId
0x1C0014C18: PdcPortOpen
0x1C0008050: "__cdecl _imp_ExSubscribeWnfStateChange" __imp_ExSubscribeWnfStateChange
0x1C00015C8: DamCheckForRegistryEventsDelivery
0x1C00135BC: SepSddlAddAceToAcl
0x1C000FBC4: DampSetSessionDplState
0x1C0006040: DampGlobalPolicyStringStorage_consent_exe
0x1C00013AC: McTemplateK0qqhzr2hzr4
0x1C0014224: CmRegUtilCreateWstrKey
0x1C00081E8: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00081B0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0006300: DampDplKeysStateSubscription
0x1C0008368: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1C0002878: "NoDisplayClass" ??_C@_1BO@DAOBINHA@?$AAN?$AAo?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0008380: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1C0013CCC: PpRegStateUpdateStackCreationSettings
0x1C00080E8: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x1C0008330: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C00028E0: "DeviceCharacteristics" ??_C@_1CM@DIJFBEC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0008310: "__cdecl _imp_ExReleasePushLockEx" __imp_ExReleasePushLockEx
0x1C0005240: DampGlobalPolicyStringStorage_taskhostw_exe_222A245B_E637_4AE9_A93F_A59CA119A75E
0x1C00026E8: "registryRead" ??_C@_1BK@KMMANFGK@?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAR?$AAe?$AAa?$AAd?$AA?$AA@
0x1C0004118: DamExemptCheckCallbackName
0x1C00062D0: PiRegStateSysAllInherittedSecurityDescriptor
0x1C0004EC0: DampGlobalPolicyStringStorage_CtfMon_exe
0x1C0006548: WdmlibInitialized
0x1C000D160: DampPdcStateCallback
0x1C00064F0: DampPoIdleResiliencyHandle
0x1C0004000: DplFeatureDisableOn10SOverride
0x1C0002330: "Microsoft-Reserved-24C26ACC-DE62" ??_C@_1HA@KHACJHCN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAd?$AA?9?$AA2?$AA4?$AAC?$AA2?$AA6?$AAA?$AAC?$AAC?$AA?9?$AAD?$AAE?$AA6?$AA2@
0x1C0004C10: DampRegistryEventsKeyName
0x1C0014EB8: PdcReleaseRwLockExclusive
0x1C0001920: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00065C0: DamStateMutex
0x1C0012A78: WdmlibIoCreateDeviceSecure
0x1C00060E0: DampGlobalPolicyStringStorage_ApplicationFrameHost_exe
0x1C0008268: "__cdecl _imp_PsReferencePrimaryToken" __imp_PsReferencePrimaryToken
0x1C0008088: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C0002868: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0008290: "__cdecl _imp_ZwQuerySymbolicLinkObject" __imp_ZwQuerySymbolicLinkObject
0x1C0008200: "__cdecl _imp_ExRegisterCallback" __imp_ExRegisterCallback
0x1C0005660: DampGlobalPolicyStringStorage_OmadmClient_exe
0x1C00012D0: McTemplateK0t
0x1C0002470: DamEvent_ProcessActivityStart
0x1C00012D0: McTemplateK0q
0x1C0002460: DamEvent_ProcessActivityEnd
0x1C0008080: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C0001290: McTemplateK0
0x1C00081E0: "__cdecl _imp_ObMakeTemporaryObject" __imp_ObMakeTemporaryObject
0x1C0006330: DampS0JobInfo
0x1C0005800: DampGlobalPolicyStringStorage_logonui_exe
0x1C0006570: DampDynamicPolicyLock
0x1C0004030: DplFeatureAllowOnDesktop
0x1C00080A8: "__cdecl _imp_PsProcessType" __imp_PsProcessType
0x1C0008158: "__cdecl _imp_ExSetTimer" __imp_ExSetTimer
0x1C0002140: WNF_SEB_AUDIO_ACTIVITY
0x1C00126C0: DampRegEventWorkItemRoutine
0x1C0004080: DampNtDeviceName
0x1C0004CB0: "__cdecl _security_cookie" __security_cookie
0x1C000BBC0: DampCreateProcessCallback
0x1C00021F8: "EnableDam" ??_C@_1BE@FHIBEILL@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAa?$AAm?$AA?$AA@
0x1C0005960: DampGlobalPolicyStringStorage_ImeBroker_exe
0x1C0002530: DesktopActivityModeratorEventProvider
0x1C0004070: DampWin32DeviceName
0x1C0001338: McTemplateK0qq
0x1C0002420: DamEvent_PdcResiliencyCallback
0x1C00010B0: McGenControlCallbackV2
0x1C0005130: DampGlobalPolicyStringStorage_WerFault_exe
0x1C0001504: McTemplateK0qqt
0x1C000B6B4: DampAddProcessToJobObject
0x1C0002910: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1C0002510: DamEvent_AoAcNotCapable
0x1C0008070: "__cdecl _imp_ExUnsubscribeWnfStateChange" __imp_ExUnsubscribeWnfStateChange
0x1C0006550: PerNetworkResiliencyClientsRegistered
0x1C0010F90: DampTracingControlCallback
0x1C0013F20: CmRegUtilUcValueGetFullBuffer
0x1C0006640: DampS0TimerEvent
0x1C00030A6: "`DampSetPowerState'::`20'::_TlgEvent" ?_TlgEvent@?BE@??DampSetPowerState@@9@9
0x1C00023F0: DamEvent_IoTrackingPerfTrack
0x1C0003184: "`DampStopS0Throttling'::`4'::_TlgEvent" ?_TlgEvent@?3??DampStopS0Throttling@@9@9
0x1C00117DC: DampInitializeDynamicPolicy
0x1C0006490: DampRegEventQueueWorker
0x1C00054E0: DampGlobalPolicyStringStorage_services_exe
0x1C0002898: "NoUseClass" ??_C@_1BG@OPOOGLJC@?$AAN?$AAo?$AAU?$AAs?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C00024F0: DamEvent_StopDriverBegin
0x1C0005DA0: DampGlobalPolicyStringStorage_dllhost_exe_45BA127D_10A8_46EA_8AB7_56EA9078943C
0x1C000BFF0: DamCallbackShutdown
0x1C000AD78: DampGetSessionContext
0x1C0015764: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00119D4: DampReloadDynamicPolicy
0x1C00080E0: "__cdecl _imp_PsGetProcessImageFileName" __imp_PsGetProcessImageFileName
0x1C0005A10: DampGlobalPolicyStringStorage_easpolicymanagerbrokerhost_exe
0x1C0008388: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0006318: DampDeviceObject
0x1C0002430: DamEvent_PdcNotificationCallback
0x1C0008198: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0008038: "__cdecl _imp_ZwPowerInformation" __imp_ZwPowerInformation
0x1C0008118: PsJobType
0x1C000D350: DampPdcControlCallback
0x1C000121C: McGenEventRegister
0x1C0014D78: PdcpPortReleaseResources
0x1C0013E38: SeUtilSecurityInfoFromSecurityDescriptor
0x1C0008320: IoDeviceObjectType
0x1C0008248: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0008168: "__cdecl _imp_ExReleaseRundownProtection" __imp_ExReleaseRundownProtection
0x1C0004020: DplFeatureAllowOn10S
0x1C00027D0: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C0005850: DampGlobalPolicyStringStorage_lockapphost_exe
0x1C00082B0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C00031F9: "`DampReleaseSessionContext'::`5'::_TlgEvent" ?_TlgEvent@?4??DampReleaseSessionContext@@9@9
0x1C000A20C: DamIsTestSigningOn
0x1C00053F0: DampGlobalPolicyStringStorage_SkyDrive_exe
0x1C0001910: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0004050: DampEnableDamValueName
0x1C00024E0: DamEvent_StopDriverEnd
0x1C000BCB0: DamCallbackInitialize
0x1C00146E4: PdcResiliencyClientRegister
0x1C0002550: "\Callback\DamExemptCheckCallback" ??_C@_1EC@POHHNLDN@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAD?$AAa?$AAm?$AAE?$AAx?$AAe?$AAm?$AAp?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk@
0x1C0005610: DampGlobalPolicyStringStorage_PickerHost_exe
0x1C0008270: "__cdecl _imp_PsQueryProcessAttributesByToken" __imp_PsQueryProcessAttributesByToken
0x1C00145F4: PdcNotificationClientUnregister
0x1C0002678: "LastLeaveCSTime" ??_C@_1CA@KGOLALLI@?$AAL?$AAa?$AAs?$AAt?$AAL?$AAe?$AAa?$AAv?$AAe?$AAC?$AAS?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1C00082E0: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C0004D40: DampGlobalPolicyStringStorage_wow64_WerFaultSecure_exe
0x1C0002480: DamEvent_ResiliencyEngagedEnd
0x1C0006500: DampIoTracking
0x1C0005440: DampGlobalPolicyStringStorage_sihost_exe
0x1C0012088: DamPolicyShutdown
0x1C0008208: "__cdecl _imp_IoInitializeWorkItem" __imp_IoInitializeWorkItem
0x1C00083B0: ntoskrnl_NULL_THUNK_DATA
0x1C0008110: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0008130: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0002520: DamEvent_StartDriverBegin
0x1C0006428: DampWakeCounter
0x1C00082D8: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00082A0: "__cdecl _imp_ZwNotifyChangeKey" __imp_ZwNotifyChangeKey
0x1C0008288: "__cdecl _imp_ZwOpenSymbolicLinkObject" __imp_ZwOpenSymbolicLinkObject
0x1C0005180: DampGlobalPolicyStringStorage_UsoClient_exe
0x1C0015294: DriverEntry
0x1C00125D8: DamCloseRegistryEvents
0x1C0004CC0: DampSavedState
0x1C00082F8: "__cdecl _imp_PoUnregisterPowerSettingCallback" __imp_PoUnregisterPowerSettingCallback
0x1C000A090: DamDriverUnload
0x1C0006446: DampAudioPlaybackInProgress
0x1C0008170: "__cdecl _imp_ExWaitForRundownProtectionRelease" __imp_ExWaitForRundownProtectionRelease
0x1C0008020: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0011920: DampReleaseDynamicPolicy
0x1C0006460: DampExemptCheckCallbackRegistration
0x1C0001D40: memset
0x1C00083F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0014E78: PdcAcquireRwLockExclusive
0x1C0002178: "\??\DamCtrl" ??_C@_1BI@HKOPHCHF@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAD?$AAa?$AAm?$AAC?$AAt?$AAr?$AAl?$AA?$AA@
0x1C0008300: "__cdecl _imp_IoRegisterIoTracking" __imp_IoRegisterIoTracking

[JEB Decompiler by PNF Software]