PDB Symbols - efslsaext.dll (0x2927687CC6C64D700CA7F2A9F1C35C60879A0660FA11BC91E18E884AD7B02FE6)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\efslsaext.dll Base=0x180000000 SHA-256=2927687CC6C64D700CA7F2A9F1C35C60879A0660FA11BC91E18E884AD7B02FE6
PDB: efslsaext.pdb GUID={97A35A2E-47B1-03F1-D1DC2B832B2BD443} Age=1

734 located named symbols:
0x18001A20C: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumFekInfoTypeProp" ?EfsxDatumFekInfoTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x180014628: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18000A760: "public: unsigned long __cdecl CEfsClientBase::EfsAddUsersClientEx(unsigned short const * __ptr64,struct _ENCRYPTION_CERTIFICATE_LIST * __ptr64,unsigned long) __ptr64" ?EfsAddUsersClientEx@CEfsClientBase@@QEAAKPEBGPEAU_ENCRYPTION_CERTIFICATE_LIST@@K@Z
0x180001750: InitializeLsaExtension
0x18001A7E0: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x180015610: "\\?\UNC" ??_C@_1BA@BFGBFLGI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x18000FFBC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800168D0: "internal\sdk\inc\wil\staging.h" ??_C@_0BP@IKPJGMBG@internal?2sdk?2inc?2wil?2staging?4h?$AA@
0x1800143F8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180014630: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180002C00: EfsRpcRemoveUsersFromFile_Downlevel
0x180003FB4: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x180008010: "unsigned long __cdecl EfspCheckSignature(void * __ptr64)" ?EfspCheckSignature@@YAKPEAX@Z
0x18000FD30: "__cdecl FindPESection" _FindPESection
0x180015558: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x18000BD68: "public: void __cdecl wil::details_abi::RawUsageIndex::Swap(class wil::details_abi::RawUsageIndex & __ptr64) __ptr64" ?Swap@RawUsageIndex@details_abi@wil@@QEAAXAEAV123@@Z
0x180014328: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x18000B050: EfsRpcQueryProtectors
0x180015688: "mscn_np" ??_C@_07FKMJGLLK@mscn_np?$AA@
0x18000352C: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1800144E8: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18000F790: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180018798: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180014778: "__cdecl _imp_RtlQueryPackageClaims" __imp_RtlQueryPackageClaims
0x1800188C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18000D9A0: "enum FEATURE_ENABLED_STATE __cdecl wil::details::WilApiImpl_GetFeatureEnabledState(unsigned int,enum FEATURE_CHANGE_TIME)" ?WilApiImpl_GetFeatureEnabledState@details@wil@@YA?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@Z
0x18001A8F0: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180014B80: EFS_SECURITY_BEGIN_EFSSTREAM_VALIDATION
0x18001A1E0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800145C0: "__cdecl _imp_InitOnceBeginInitialize" __imp_InitOnceBeginInitialize
0x18001C018: "__cdecl _imp_WNetGetProviderNameW" __imp_WNetGetProviderNameW
0x180014448: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x1800168F0: "WilStaging_02" ??_C@_0O@BKMDNGIM@WilStaging_02?$AA@
0x180006C30: "long __cdecl EfspSendSkFsctl(unsigned long,unsigned long,unsigned long,void * __ptr64,unsigned long)" ?EfspSendSkFsctl@@YAJKKKPEAXK@Z
0x18000F80C: "__cdecl CRT_INIT" _CRT_INIT
0x180008BE0: "void __cdecl wil::details::RecordFeatureUsageCallback(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?RecordFeatureUsageCallback@details@wil@@YAXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@Z
0x1800144C0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180014310: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x18000AFF0: EfsRpcFlushEfsCache
0x1800041C4: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x180008418: "public: bool __cdecl wil::details_abi::heap_buffer::ensure(unsigned __int64) __ptr64" ?ensure@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x18000B0C0: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x180010269: "__cdecl _imp_load_NetShareGetInfo" __imp_load_NetShareGetInfo
0x1800142C8: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x1800147C8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180010470: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180008230: "unsigned long __cdecl EfspReceivePipeData(char * __ptr64,unsigned long,void * __ptr64,unsigned long * __ptr64)" ?EfspReceivePipeData@@YAKPEADKPEAXPEAK@Z
0x18001A9A0: "long (__cdecl* __ptr64 g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64)" ?g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion@@3P6AJPEAU__WIL__WNF_USER_SUBSCRIPTION@@@ZEA
0x1800143B0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180014688: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x18000A6D8: "public: unsigned long __cdecl CEfsClientBase::EfsDecryptFileClient(unsigned short const * __ptr64,unsigned long) __ptr64" ?EfsDecryptFileClient@CEfsClientBase@@QEAAKPEBGK@Z
0x18000AE80: EfsRpcQueryRecoveryAgents
0x180017078: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000AD30: EfsRpcOpenFileRaw
0x1800143B8: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x1800042D4: "public: long __cdecl wil::details_abi::SemaphoreValue::CreateFromPointer(unsigned short const * __ptr64,void * __ptr64) __ptr64" ?CreateFromPointer@SemaphoreValue@details_abi@wil@@QEAAJPEBGPEAX@Z
0x18000A9B4: "public: unsigned long __cdecl CEfsClientBase::EfsDuplicateEncryptionInfoClient(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct _EFS_RPC_BLOB * __ptr64,int) __ptr64" ?EfsDuplicateEncryptionInfoClient@CEfsClientBase@@QEAAKPEBG0KKPEAU_EFS_RPC_BLOB@@H@Z
0x180014798: "__cdecl _imp_NtReadFile" __imp_NtReadFile
0x18001A0A8: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x1800039C4: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180015372: "" ??_C@_00CNPNBAHC@?$AA@
0x1800143A8: api-ms-win-core-featurestaging-l1-1-0_NULL_THUNK_DATA
0x180014748: "__cdecl _imp_memmove_s" __imp_memmove_s
0x180009268: OpenFileStreams
0x180014580: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180017018: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180015530: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x180014478: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180015570: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180004BF0: "protected: virtual void __cdecl wil::TraceLoggingProvider::Initialize(void) __ptr64" ?Initialize@TraceLoggingProvider@wil@@MEAAXXZ
0x18001AA00: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x18000267C: "unsigned long __cdecl EfsxProtectorListIsValid(struct _EFSX_PROTECTOR_LIST const * __ptr64,unsigned __int64)" ?EfsxProtectorListIsValid@@YAKPEBU_EFSX_PROTECTOR_LIST@@_K@Z
0x180008710: "public: void __cdecl wil::details::EnabledStateManager::OnStateChange(void) __ptr64" ?OnStateChange@EnabledStateManager@details@wil@@QEAAXXZ
0x180018824: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000AE20: EfsRpcDecryptFileSrv
0x180014440: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180009854: GetStreamInformation
0x180014790: "__cdecl _imp_NtWriteFile" __imp_NtWriteFile
0x18000BC7C: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Read(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64) __ptr64" ?Read@UsageIndexProperty@details_abi@wil@@QEAA_NAEAPEAEPEAE@Z
0x18001C010: EFSCORE_NULL_THUNK_DATA_DLA
0x180002910: PEXIMPORT_CONTEXT_HANDLE_DOWNLEVEL_rundown
0x1800184EC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_MPR_dll" __DELAY_IMPORT_DESCRIPTOR_MPR_dll
0x180010275: "__cdecl _tailMerge_srvcli_dll" __tailMerge_srvcli_dll
0x180001134: "__cdecl TlgWrite" _TlgWrite
0x180014820: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18001A928: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x180015670: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1800101C0: NdrServerCall2
0x180015480: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180014AB0: "__cdecl _sz_srvcli_dll" __sz_srvcli_dll
0x180014490: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180004728: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x18000B2A8: "long __cdecl wil_details_StagingConfig_Load(struct wil_details_StagingConfig * __ptr64,enum wil_FeatureStore,unsigned __int64,void * __ptr64,int)" ?wil_details_StagingConfig_Load@@YAJPEAUwil_details_StagingConfig@@W4wil_FeatureStore@@_KPEAXH@Z
0x180014750: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180014470: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180014658: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180018568: srvcli_NULL_THUNK_DATA_DLN
0x18001A8B0: g_hPublisher
0x180002624: "unsigned long __cdecl EfsxProtectorListHeaderSafe(struct _EFSX_PROTECTOR_LIST const * __ptr64,unsigned __int64,struct _EFSX_PROTECTOR_LIST * __ptr64)" ?EfsxProtectorListHeaderSafe@@YAKPEBU_EFSX_PROTECTOR_LIST@@_KPEAU1@@Z
0x180018628: srvcli_NULL_THUNK_DATA_DLB
0x18001C038: srvcli_NULL_THUNK_DATA_DLA
0x18000DB80: "void __cdecl wil::details::WilApiImpl_SubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?WilApiImpl_SubscribeFeatureStateChangeNotification@details@wil@@YAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x18000CCC4: "public: void __cdecl wil::details_abi::SubscriptionList::SubscribeUnderLock(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeUnderLock@SubscriptionList@details_abi@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x180007CB0: "unsigned long __cdecl EfspPrepareExportContext(void * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,struct EXPORT_CONTEXT * __ptr64)" ?EfspPrepareExportContext@@YAKPEAXKKKKPEAUEXPORT_CONTEXT@@@Z
0x18000FD14: "__cdecl XcptFilter" _XcptFilter
0x18001A9C8: g_header_init_ResultLoggingInitialize
0x180014828: "__cdecl _xc_a" __xc_a
0x180001090: TraceLoggingRegister
0x18001A940: "void (__cdecl* __ptr64 g_wil_details_apiSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_apiSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x18001A828: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800153B0: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x180008BA0: "void __cdecl wil::details::RecordSRUMFeatureUsage(unsigned int,unsigned int,unsigned int)" ?RecordSRUMFeatureUsage@details@wil@@YAXIII@Z
0x1800049A0: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x18000A810: "public: unsigned long __cdecl CEfsClientBase::EfsRemoveUsersClient(unsigned short const * __ptr64,struct _ENCRYPTION_CERTIFICATE_HASH_LIST * __ptr64) __ptr64" ?EfsRemoveUsersClient@CEfsClientBase@@QEAAKPEBGPEAU_ENCRYPTION_CERTIFICATE_HASH_LIST@@@Z
0x180014AC8: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x1800145F0: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x180018874: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-featurestaging-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-featurestaging-l1-1-0
0x180005964: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x180014388: "__cdecl _imp_SubscribeFeatureStateChangeNotification" __imp_SubscribeFeatureStateChangeNotification
0x180014428: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180002920: EfsRpcReadFileRaw_Downlevel
0x180010177: "__cdecl lock" _lock
0x18001A7F0: g_pfnResultLoggingCallback
0x180018610: EFSCORE_NULL_THUNK_DATA_DLB
0x1800153C8: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x180002D50: EfsUsePinForEncryptedFiles_Downlevel
0x18000A3D4: "protected: virtual unsigned long __cdecl CEfsClientBase::ConnectToService(unsigned short * __ptr64,unsigned short * __ptr64,int,void * __ptr64 * __ptr64) __ptr64" ?ConnectToService@CEfsClientBase@@MEAAKPEAG0HPEAPEAX@Z
0x1800146A0: "__cdecl _imp_NotifyServiceStatusChangeW" __imp_NotifyServiceStatusChangeW
0x1800143C0: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180014A7C: "__cdecl _guard_iat_table" __guard_iat_table
0x180015620: "\\?\" ??_C@_19MJCDBCKE@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$AA@
0x18001A7F9: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x180010442: memcpy
0x1800047C0: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x180014638: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180014AE0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014758: "__cdecl _imp_memset" __imp_memset
0x180014588: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x18000FEEF: "__cdecl initterm" _initterm
0x180018748: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001AAE0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800053AC: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x1800145C8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800148A0: "__cdecl _xi_z" __xi_z
0x18001A91C: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180014B40: EFS_SECURITY_DATA_TOO_SMALL
0x180014370: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18001A820: g_pfnThrowPlatformException
0x180004534: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x18001A920: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x180002AE0: EfsRpcQueryUsersOnFile_Downlevel
0x18000FEFB: "__cdecl _C_specific_handler" __C_specific_handler
0x180011310: "private: static struct _EFS_REMOTE_CLIENT_INTERFACE const CEfsClient::_RemoteInterface" ?_RemoteInterface@CEfsClient@@0U_EFS_REMOTE_CLIENT_INTERFACE@@B
0x180001830: MIDL_user_free
0x180014538: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18001A9C4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUdrmigUxlnnlmUlyquivUznwGEUkivxlnkOlyq@selwipecommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUdrmigUxlnnlmUlyquivUznwGEUkivxlnkOlyq@selwipecommon
0x180015690: "\pipe\efsrpc" ??_C@_0N@OMBKJEHN@?2pipe?2efsrpc?$AA@
0x1800154E8: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1800145B0: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x18001A7E8: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x18000398C: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x1800146C0: "__cdecl _imp__onexit" __imp__onexit
0x180001B0C: "unsigned long __cdecl EfsxValidateEfsStream(struct _EFS_DATA_STREAM_HEADER * __ptr64,unsigned long,unsigned char * __ptr64)" ?EfsxValidateEfsStream@@YAKPEAU_EFS_DATA_STREAM_HEADER@@KPEAE@Z
0x18001044E: memmove
0x180014418: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180015510: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x180014670: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18000F004: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x180014408: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18001C008: "__cdecl _imp_EfsDllOefsAcquireExclusiveOperation" __imp_EfsDllOefsAcquireExclusiveOperation
0x1800103D0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000ADD0: EfsRpcCloseRaw
0x180002D60: EfsRpcDuplicateEncryptionInfoFile_Downlevel
0x180007F28: "unsigned long __cdecl EfspEnablePrivilege(long)" ?EfspEnablePrivilege@@YAKJ@Z
0x18001552C: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x18000638C: EfsReadFileRaw
0x18001A838: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18001A9B0: "long (__cdecl* __ptr64 g_wil_details_pfnNtUpdateWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnNtUpdateWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@ZEA
0x180016848: "NtQueryWnfStateData" ??_C@_0BE@KACOKPLP@NtQueryWnfStateData?$AA@
0x180014780: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180014530: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180009760: CleanupOpenFileStreams
0x1800143A0: "__cdecl _imp_RecordFeatureUsage" __imp_RecordFeatureUsage
0x180006B18: "unsigned long __cdecl EfspResizeWorkBuffer(void * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfspResizeWorkBuffer@@YAKPEAXKKPEAPEAXPEAK@Z
0x18001884C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000E74C: "unsigned long __cdecl EfspAttemptToGetWebDavPath(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long)" ?EfspAttemptToGetWebDavPath@@YAKPEBGKPEAPEAGK1K@Z
0x180004C34: "protected: void __cdecl wil::TraceLoggingProvider::ReportTelemetryFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?ReportTelemetryFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@2@@Z
0x18000FD20: "__cdecl amsg_exit" _amsg_exit
0x18000B750: "int __cdecl wil_details_StagingConfig_AreAnyFeaturesConfigured(struct wil_details_StagingConfig * __ptr64)" ?wil_details_StagingConfig_AreAnyFeaturesConfigured@@YAHPEAUwil_details_StagingConfig@@@Z
0x180003488: MicrosoftTelemetryAssertTriggeredNoArgs
0x18000AFB0: EfsRpcAddUsersToFileEx
0x180017010: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180014AA0: "__cdecl _sz_EFSCORE_dll" __sz_EFSCORE_dll
0x180014320: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180005768: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x1800155D8: "onecoreuap\ds\security\efs\lib\e" ??_C@_0CK@JAMDCBAL@onecoreuap?2ds?2security?2efs?2lib?2e@
0x18001A9C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUvmgrwUlyquivUznwGEUkivxlnkOlyq@entid" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUvmgrwUlyquivUznwGEUkivxlnkOlyq@entid
0x18001A938: "void (__cdecl* __ptr64 g_wil_details_internalUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_internalUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x180007B38: "unsigned long __cdecl EfspPrepareImportContext(void * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,struct IMPORT_CONTEXT * __ptr64)" ?EfspPrepareImportContext@@YAKPEAXKKKKKPEAUIMPORT_CONTEXT@@@Z
0x180015378: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x18000836C: "unsigned long __cdecl wil::details::in1diag3::Log_Win32(void * __ptr64,unsigned int,char const * __ptr64,unsigned long)" ?Log_Win32@in1diag3@details@wil@@YAKPEAXIPEBDK@Z
0x1800145A8: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x180002D50: EfsRpcSetEncryptedFileMetadata_Downlevel
0x18001A070: "struct _TlgProvider_t `public: __cdecl wil::ErrorHandlingHelpers::StaticHandle::StaticHandle(void) __ptr64'::`2'::__hInner" ?__hInner@?1???0StaticHandle@ErrorHandlingHelpers@wil@@QEAA@XZ@4U_TlgProvider_t@@A
0x180014600: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180016878: "RtlSubscribeWnfStateChangeNotifi" ??_C@_0CH@DLHFNNLE@RtlSubscribeWnfStateChangeNotifi@
0x1800016D0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x180008D78: EfsGetLocalFileName
0x1800146E0: "__cdecl _imp__lock" __imp__lock
0x18000F220: ??_E?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x18000FF9C: atexit
0x18001A970: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_internalGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_internalGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x18001A830: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x18001A918: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x1800039A8: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x180002960: EfsRpcWriteFileRaw_Downlevel
0x180003EA8: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x180014590: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18001A8D8: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x180014560: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x1800102F4: "__cdecl _imp_load_WNetGetResourceInformationW" __imp_load_WNetGetResourceInformationW
0x180014380: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180014460: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180018558: MPR_NULL_THUNK_DATA_DLN
0x1800144A0: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x1800147A0: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x1800144E0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18001018F: "__cdecl _dllonexit" __dllonexit
0x180005878: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x1800154F0: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x18001AAD0: "__cdecl _native_startup_lock" __native_startup_lock
0x18000D834: "bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)" ?IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z
0x180001740: DllMain
0x18000A914: "public: unsigned long __cdecl CEfsClientBase::EfsQueryUsersClient(unsigned short const * __ptr64,struct _ENCRYPTION_CERTIFICATE_HASH_LIST * __ptr64 * __ptr64) __ptr64" ?EfsQueryUsersClient@CEfsClientBase@@QEAAKPEBGPEAPEAU_ENCRYPTION_CERTIFICATE_HASH_LIST@@@Z
0x18001A860: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x18001A908: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18001A214: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x18000A020: "protected: virtual struct _EFS_REMOTE_CLIENT_INTERFACE const * __ptr64 __cdecl CEfsClient::GetRemoteInterface(void)const __ptr64" ?GetRemoteInterface@CEfsClient@@MEBAPEBU_EFS_REMOTE_CLIENT_INTERFACE@@XZ
0x180002A50: EfsRpcDecryptFileSrv_Downlevel
0x180018784: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x1800146B0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18001A870: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x1800146E8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180014518: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180014488: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800187AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180007874: "unsigned long __cdecl EfspGetNetFileName(unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?EfspGetNetFileName@@YAKPEBGPEAU_UNICODE_STRING@@@Z
0x180008398: "int __cdecl wil_details_SetEnabledAndHasNotificationStateCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetEnabledAndHasNotificationStateCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x180008628: "public: void __cdecl wil::details::EnabledStateManager::SubscribeFeaturePropertyCacheToEnabledStateChanges(union wil_details_FeaturePropertyCache * __ptr64,enum wil_FeatureChangeTime) __ptr64" ?SubscribeFeaturePropertyCacheToEnabledStateChanges@EnabledStateManager@details@wil@@QEAAXPEATwil_details_FeaturePropertyCache@@W4wil_FeatureChangeTime@@@Z
0x180014378: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800051F0: "public: virtual void * __ptr64 __cdecl wil::ErrorHandlingHelpers::`vector deleting destructor'(unsigned int) __ptr64" ??_EErrorHandlingHelpers@wil@@UEAAPEAXI@Z
0x1800155B8: "NTFS" ??_C@_19ENNDBEJL@?$AAN?$AAT?$AAF?$AAS?$AA?$AA@
0x180014650: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000D678: ?EnsureSubscribedToStateChangesUnderLock@FeatureStateManager@details@wil@@CAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@3@U__WIL__WNF_STATE_NAME@@PEAX@Z
0x18001A1D0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800103AC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180014558: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x180002EC0: EfsRpcFlushEfsCache_Downlevel
0x180015598: "::$DATA" ??_C@_1BA@LCOICFNN@?$AA?3?$AA?3?$AA$?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180002D50: EfsRpcGetEncryptedFileMetadata_Downlevel
0x180014720: "__cdecl _imp_memcmp" __imp_memcmp
0x180002700: "unsigned long __cdecl EfsxProtectorListGetNext(struct _EFSX_PROTECTOR_LIST const * __ptr64,unsigned short,unsigned short,unsigned long,unsigned long * __ptr64)" ?EfsxProtectorListGetNext@@YAKPEBU_EFSX_PROTECTOR_LIST@@GGKPEAK@Z
0x1800101D8: "__cdecl _tailMerge_efscore_dll" __tailMerge_efscore_dll
0x180014B00: EFS_API_ERROR
0x18001A221: g_header_init_InitializeStagingHeaderInternalApi
0x1800188EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800144B8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800145A0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000CFF0: "public: void __cdecl wil::details_abi::FeatureStateData::RecordUsage(void) __ptr64" ?RecordUsage@FeatureStateData@details_abi@wil@@QEAAXXZ
0x180017010: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000FDE0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800143E8: "__cdecl _imp_GetFinalPathNameByHandleW" __imp_GetFinalPathNameByHandleW
0x18000C104: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::FindInsertionPointOrIncrement(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?FindInsertionPointOrIncrement@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAEPEAX_KI@Z
0x18001A7D0: "__cdecl _hmod__MPR_dll" __hmod__MPR_dll
0x180002D50: EfsRpcSetFileEncryptionKey_Downlevel
0x1800034A4: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18001A8E0: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x180007A2C: "unsigned long __cdecl EfspUncompressIfCompressed(void * __ptr64)" ?EfspUncompressIfCompressed@@YAKPEAX@Z
0x1800016E0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x1800147B0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18001A950: "void (__cdecl* __ptr64 g_wil_details_RecordSRUMFeatureUsage)(unsigned int,unsigned int,unsigned int)" ?g_wil_details_RecordSRUMFeatureUsage@@3P6AXIII@ZEA
0x18000F220: ??_G?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x1800168A0: "RtlUnsubscribeWnfNotificationWai" ??_C@_0CP@IJFJHHED@RtlUnsubscribeWnfNotificationWai@
0x180015418: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x18001A8D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUxlnnlmUoryUlyquivUznwGEUkivxlnkOlyq@efscommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUxlnnlmUoryUlyquivUznwGEUkivxlnkOlyq@efscommon
0x1800186BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800087E8: "private: void __cdecl wil::details::EnabledStateManager::RecordCachedUsageUnderLock(void) __ptr64" ?RecordCachedUsageUnderLock@EnabledStateManager@details@wil@@AEAAXXZ
0x180014410: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180015550: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x180014528: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x1800147C0: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x180014570: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001850C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000C768: "void __cdecl wil::details_abi::RecordWnfUsageIndex(struct __WIL__WNF_STATE_NAME const * __ptr64,unsigned __int64,class wil::details_abi::RawUsageIndex const & __ptr64)" ?RecordWnfUsageIndex@details_abi@wil@@YAXPEBU__WIL__WNF_STATE_NAME@@_KAEBVRawUsageIndex@12@@Z
0x1800112F0: "const CEfsClient::`vftable'" ??_7CEfsClient@@6B@
0x180004238: "public: void __cdecl wil::details_abi::SemaphoreValue::Destroy(void) __ptr64" ?Destroy@SemaphoreValue@details_abi@wil@@QEAAXXZ
0x18001A924: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x1800142B8: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18000FA50: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800101B0: NdrServerCallAll
0x180015658: "efsrpc" ??_C@_1O@DAOPFDMO@?$AAe?$AAf?$AAs?$AAr?$AAp?$AAc?$AA?$AA@
0x1800146F0: "__cdecl _imp__initterm" __imp__initterm
0x1800142A0: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800186D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180014550: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x180017394: ?__hInner_Meta@?1???0StaticHandle@ErrorHandlingHelpers@wil@@QEAA@XZ@4U<unnamed-type-__hInner_Meta>@?1???0123@QEAA@XZ@B
0x1800142D8: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18000AF10: EfsRpcFileKeyInfo
0x180014360: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180002D50: EfsRpcFileKeyInfoEx_Downlevel
0x1800188D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18001A8E8: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x18001C000: "__cdecl _imp_EfsDllOefsReleaseExclusiveOperation" __imp_EfsDllOefsReleaseExclusiveOperation
0x18001A9D0: ?wrapper@?1??Instance@ErrorHandlingHelpers@wil@@KAPEAV23@XZ@4V?$static_lazy@VErrorHandlingHelpers@wil@@@details@3@A
0x180009C74: "public: void * __ptr64 __cdecl wil::details::EnabledStateManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GEnabledStateManager@details@wil@@QEAAPEAXI@Z
0x180014B50: EFS_SECURITY_DATA_TOO_LARGE
0x18001AAC0: "__cdecl _onexitend" __onexitend
0x18000C3C4: "private: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsageInternal(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsageInternal@RawUsageIndex@details_abi@wil@@AEAA_NPEAX_K01I@Z
0x1800147B8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x180014660: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x180010183: "__cdecl unlock" _unlock
0x180004228: "void __cdecl wistd::_Xbad_function_call(void)" ?_Xbad_function_call@wistd@@YAXXZ
0x180014818: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000D5D4: "private: bool __cdecl wil::details::FeatureStateManager::EnsureStateData(void) __ptr64" ?EnsureStateData@FeatureStateManager@details@wil@@AEAA_NXZ
0x1800112D0: "const wil::ErrorHandlingHelpers::`vftable'" ??_7ErrorHandlingHelpers@wil@@6B@
0x1800051F0: "public: virtual void * __ptr64 __cdecl wil::ErrorHandlingHelpers::`scalar deleting destructor'(unsigned int) __ptr64" ??_GErrorHandlingHelpers@wil@@UEAAPEAXI@Z
0x18000CBB8: "public: void __cdecl wil::details_abi::UsageIndexes::Record(void) __ptr64" ?Record@UsageIndexes@details_abi@wil@@QEAAXXZ
0x1800144C8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180014618: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180014770: netutils_NULL_THUNK_DATA
0x180002E20: EfsRpcFileKeyInfo_Downlevel
0x1800147E0: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x180002D20: EfsRpcAddUsersToFile_Downlevel
0x1800147D0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18001A218: "long volatile `protected: static bool __cdecl wil::TraceLoggingProvider::WasAlreadyReportedToTelemetry(long)'::`2'::s_lastFailureSeen" ?s_lastFailureSeen@?1??WasAlreadyReportedToTelemetry@TraceLoggingProvider@wil@@KA_NJ@Z@4JC
0x180014330: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180008500: "public: void __cdecl wil::details::EnabledStateManager::QueueBackgroundUsageReporting(unsigned int,union wil_details_FeaturePropertyCache & __ptr64) __ptr64" ?QueueBackgroundUsageReporting@EnabledStateManager@details@wil@@QEAAXIAEATwil_details_FeaturePropertyCache@@@Z
0x1800145F8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180014890: "__cdecl _xi_a" __xi_a
0x1800145E0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180014338: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180014350: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18001A8F4: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x18001A21F: g_header_init_InitializeStagingHeaderApi
0x1800146D8: "__cdecl _imp__unlock" __imp__unlock
0x180014668: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180004ECC: "protected: void __cdecl wil::TraceLoggingProvider::ReportTraceLoggingFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?ReportTraceLoggingFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@2@@Z
0x18001A998: "int g_wil_details_preventOnDemandStagingConfigReads" ?g_wil_details_preventOnDemandStagingConfigReads@@3HA
0x180009BFC: ?reset@?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAU_TP_TIMER@@@Z
0x180014768: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x18000A52C: "protected: unsigned long __cdecl CEfsClientBase::LocateAndConnectToService(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?LocateAndConnectToService@CEfsClientBase@@IEAAKPEBGPEAPEAGPEAPEAX@Z
0x18000F3F4: RpcpBindRpc
0x180014680: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18001A990: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::userStoreProbe" ?userStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x18000F220: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x1800101CC: "__cdecl _imp_load_EfsDllOefsAcquireExclusiveOperation" __imp_load_EfsDllOefsAcquireExclusiveOperation
0x18000BB98: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Write(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64)const __ptr64" ?Write@UsageIndexProperty@details_abi@wil@@QEBA_NAEAPEAEPEAE@Z
0x18000DCE0: "void __cdecl wil::details::WilApiImpl_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApiImpl_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x18001A9B8: "long (__cdecl* __ptr64 g_wil_details_pfnNtQueryWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?g_wil_details_pfnNtQueryWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@ZEA
0x180015384: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180018734: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1800144B0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180011468: "const wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vftable'" ??_7?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@6B@
0x18001AAE8: "__cdecl pRawDllMain" _pRawDllMain
0x180014300: "__cdecl _imp_RpcRaiseException" __imp_RpcRaiseException
0x1800142C0: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x18001889C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x1800143F0: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800051F0: "protected: virtual void * __ptr64 __cdecl wil::TraceLoggingProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GTraceLoggingProvider@wil@@MEAAPEAXI@Z
0x1800039F0: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x1800146D0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x1800043F0: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x18000AC20: "public: unsigned long __cdecl CEfsClientBase::EfsFileKeyInfoClient(unsigned short const * __ptr64,unsigned long,struct _EFS_RPC_BLOB * __ptr64 * __ptr64) __ptr64" ?EfsFileKeyInfoClient@CEfsClientBase@@QEAAKPEBGKPEAPEAU_EFS_RPC_BLOB@@@Z
0x18000EB58: "int __cdecl EfspIsSrcDestSvrSame(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?EfspIsSrcDestSvrSame@@YAHPEBG0@Z
0x180002FFC: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x18001A7C0: "__cdecl _hmod__EFSCORE_dll" __hmod__EFSCORE_dll
0x1800186F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180014B60: EFS_API_ERROR_1
0x18001A978: "void (__cdecl* __ptr64 g_wil_details_recordFeatureUsage)(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?g_wil_details_recordFeatureUsage@@3P6AXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@ZEA
0x180014B70: EFS_API_ERROR_2
0x180018638: MPR_NULL_THUNK_DATA_DLB
0x180014540: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18000FCF0: "__cdecl _security_check_cookie" __security_check_cookie
0x180014888: "__cdecl _xc_z" __xc_z
0x1800187C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18001A8C0: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x1800040B0: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x1800144F0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800155A8: "ROBS" ??_C@_19MKABBKJG@?$AAR?$AAO?$AAB?$AAS?$AA?$AA@
0x180014480: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180014B10: EFS_SECURITY_EFSSTREAM_VALIDATED
0x180014B30: EFS_PUBLISHER
0x18001A21E: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18001720C: ?_TlgEvent@?3??ReportTraceLoggingFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?3??123@IEAAX0@Z@B
0x18001C030: "__cdecl _imp_NetShareGetInfo" __imp_NetShareGetInfo
0x180015360: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x180018888: "__cdecl _IMPORT_DESCRIPTOR_netutils" __IMPORT_DESCRIPTOR_netutils
0x18001A948: "void (__cdecl* __ptr64 g_wil_details_internalSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_internalSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x180014450: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800173E3: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1800145E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003A70: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x180010300: "__cdecl _tailMerge_mpr_dll" __tailMerge_mpr_dll
0x180014430: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18001A7F8: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x1800184CC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_srvcli_dll" __DELAY_IMPORT_DESCRIPTOR_srvcli_dll
0x180014340: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000D084: "public: __cdecl wil::details_abi::UsageIndexes::~UsageIndexes(void) __ptr64" ??1UsageIndexes@details_abi@wil@@QEAA@XZ
0x180014420: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180010490: "__cdecl _chkstk" __chkstk
0x180016920: ?AppModelPolicy_PolicyValue_Table@?1??AppModelPolicy_GetPolicy_Internal@@YAJPEAXW4AppModelPolicy_Type@@PEAW4AppModelPolicy_PolicyValue@@PEAU_PS_PKG_CLAIM@@PEA_K@Z@4QAY08$$CBW43@A
0x18000ECE8: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x18000CAFC: "public: __cdecl wil::details_abi::UsageIndexes::UsageIndexes(void) __ptr64" ??0UsageIndexes@details_abi@wil@@QEAA@XZ
0x180004C00: "protected: virtual void __cdecl wil::TraceLoggingProvider::OnErrorReported(bool,struct wil::FailureInfo const & __ptr64) __ptr64" ?OnErrorReported@TraceLoggingProvider@wil@@MEAAX_NAEBUFailureInfo@2@@Z
0x1800188B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x18001A200: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumKeyProtectorTypeProp" ?EfsxDatumKeyProtectorTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x180003708: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x1800112D0: "const wil::TraceLoggingProvider::`vftable'" ??_7TraceLoggingProvider@wil@@6B@
0x18001C020: "__cdecl _imp_WNetGetResourceInformationW" __imp_WNetGetResourceInformationW
0x180017000: "\PIPE\" ??_C@_1O@PGAGHCON@?$AA?2?$AAP?$AAI?$AAP?$AAE?$AA?2?$AA?$AA@
0x1800147F0: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x18000EA28: "unsigned long __cdecl EfspGetFullNameLocal(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfspGetFullNameLocal@@YAKPEBGKPEAPEAG1@Z
0x1800143D8: "__cdecl _imp_GetVolumePathNameW" __imp_GetVolumePathNameW
0x1800142E0: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x18001A930: "void (__cdecl* __ptr64 g_wil_details_apiUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_apiUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x1800041E4: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x180014520: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18001C028: MPR_NULL_THUNK_DATA_DLA
0x18001A808: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180014620: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180017109: ?_TlgEvent@?3??ReportTelemetryFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?3??123@IEAAX0@Z@B
0x180014698: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x18001875C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180014690: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1800146A8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x180015668: "EFS" ??_C@_17PLBJKFCC@?$AAE?$AAF?$AAS?$AA?$AA@
0x180014500: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18001A1FC: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumDescriptorTypeProp" ?EfsxDatumDescriptorTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x1800148A8: "__cdecl _guard_fids_table" __guard_fids_table
0x18000ADF0: EfsRpcEncryptFileSrv
0x180014760: msvcrt_NULL_THUNK_DATA
0x180014190: "__cdecl load_config_used" _load_config_used
0x180014598: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x1800155C8: "GURE" ??_C@_19JAFJHHAB@?$AAG?$AAU?$AAR?$AAE?$AA?$AA@
0x18000F220: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x180004AA0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x180016900: "localhost" ??_C@_1BE@JDLPANCI@?$AAl?$AAo?$AAc?$AAa?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x180014358: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180014348: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800041A4: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x18000ADA0: EfsRpcWriteFileRaw
0x1800146C8: "__cdecl _imp_toupper" __imp_toupper
0x1800142A8: "__cdecl _imp_RpcBindingSetAuthInfoW" __imp_RpcBindingSetAuthInfoW
0x18001A8F8: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x180018838: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000CE24: "public: void __cdecl wil::details_abi::SubscriptionList::OnSignaled(class wil::srwlock & __ptr64) __ptr64" ?OnSignaled@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@@Z
0x1800051F0: "protected: virtual void * __ptr64 __cdecl wil::TraceLoggingProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ETraceLoggingProvider@wil@@MEAAPEAXI@Z
0x1800142F8: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x180014298: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180014718: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18001A8B8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUoryUlyquivUznwGEUkivxlnkOlyq@efslib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUoryUlyquivUznwGEUkivxlnkOlyq@efslib
0x18000A65C: "public: unsigned long __cdecl CEfsClientBase::EfsEncryptFileClient(unsigned short const * __ptr64) __ptr64" ?EfsEncryptFileClient@CEfsClientBase@@QEAAKPEBG@Z
0x1800147E8: "__cdecl _imp_NtClose" __imp_NtClose
0x180001680: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x180003604: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180003E0C: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x180014508: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180014800: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x1800144F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800143D0: "__cdecl _imp_GetVolumeInformationByHandleW" __imp_GetVolumeInformationByHandleW
0x180015678: "HOST/" ??_C@_1M@GJBDKFBP@?$AAH?$AAO?$AAS?$AAT?$AA?1?$AA?$AA@
0x180005A04: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValue<unsigned __int64>(unsigned short const * __ptr64,unsigned __int64 * __ptr64,bool * __ptr64)" ??$TryGetValue@_K@SemaphoreValue@details_abi@wil@@SAJPEBGPEA_KPEA_N@Z
0x1800144A8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x18001A8C8: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x18000A0D4: "protected: static unsigned long __cdecl CEfsClient::WaitForServiceReady_Notify(struct SC_HANDLE__ * __ptr64,unsigned long)" ?WaitForServiceReady_Notify@CEfsClient@@KAKPEAUSC_HANDLE__@@K@Z
0x180016860: "NtUpdateWnfStateData" ??_C@_0BF@NPHHEHP@NtUpdateWnfStateData?$AA@
0x180002C90: EfsRpcAddUsersToFileEx_Downlevel
0x18001A208: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumKeyAgmtDataTypeProp" ?EfsxDatumKeyAgmtDataTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x1800099C4: OpenSingleStreamFile
0x1800147A8: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x18000CF24: "public: __cdecl wil::details_abi::FeatureStateData::~FeatureStateData(void) __ptr64" ??1FeatureStateData@details_abi@wil@@QEAA@XZ
0x1800142E8: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180003AD8: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x180014510: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800103A0: "__cdecl purecall" _purecall
0x180003FF8: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x1800143C8: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x18001A7D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUohzvcgUlyquivUznwGEUkivxlnkOlyq@efslsaext" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUohzvcgUlyquivUznwGEUkivxlnkOlyq@efslsaext
0x180017018: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180005C80: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x180001800: MIDL_user_allocate
0x180004BF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180014498: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180010436: memcmp
0x180009EA8: EfsFsctlPrepareData
0x180015560: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x18000DD38: "long __cdecl AppModelPolicy_GetPolicy_Internal(void * __ptr64,enum AppModelPolicy_Type,enum AppModelPolicy_PolicyValue * __ptr64,struct _PS_PKG_CLAIM * __ptr64,unsigned __int64 * __ptr64)" ?AppModelPolicy_GetPolicy_Internal@@YAJPEAXW4AppModelPolicy_Type@@PEAW4AppModelPolicy_PolicyValue@@PEAU_PS_PKG_CLAIM@@PEA_K@Z
0x180003970: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x1800153D8: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18001A9A8: "long (__cdecl* __ptr64 g_wil_details_pfnRtlSubscribeWnfStateChangeNotification)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnRtlSubscribeWnfStateChangeNotification@@3P6AJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@ZEA
0x180001544: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x180014568: "__cdecl _imp_SleepEx" __imp_SleepEx
0x180014398: "__cdecl _imp_GetFeatureEnabledState" __imp_GetFeatureEnabledState
0x1800081D0: "unsigned long __cdecl EfspSendPipeData(char * __ptr64,unsigned long,void * __ptr64)" ?EfspSendPipeData@@YAKPEADKPEAX@Z
0x18000B080: EfsRpcWriteFileWithHeaderRaw
0x180002D50: EfsRpcGenerateEfsStream_Downlevel
0x180001A30: fnEfsLogTrace3
0x1800028E0: EfsRpcCloseRaw_Downlevel
0x1800187FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180004228: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x18000AEE0: EfsRpcAddUsersToFile
0x180014468: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000B118: "void __cdecl wil::details::in1diag3::_FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x180005D70: EfsOpenFileRaw
0x18000BFA0: "public: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsage(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsage@RawUsageIndex@details_abi@wil@@QEAA_NPEAX_K01I@Z
0x1800154C0: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x1800030AC: MicrosoftTelemetryAssertTriggeredWorker
0x1800146B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18001A210: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumDpapiNgDataTypeProp" ?EfsxDatumDpapiNgDataTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x180001EB0: EfslpValidateCertHashData
0x180014810: ntdll_NULL_THUNK_DATA
0x180014710: "__cdecl _imp_memcpy" __imp_memcpy
0x18001A204: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumProtectorInfoTypeProp" ?EfsxDatumProtectorInfoTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x1800153A0: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x18000A030: "protected: virtual unsigned short * __ptr64 __cdecl CEfsClient::GetEndpointName(void)const __ptr64" ?GetEndpointName@CEfsClient@@MEBAPEAGXZ
0x18000AE50: EfsRpcQueryUsersOnFile
0x18000ACB8: "public: unsigned long __cdecl CEfsClientBase::EfsFlushEfsCacheClient(unsigned short * __ptr64) __ptr64" ?EfsFlushEfsCacheClient@CEfsClientBase@@QEAAKPEAG@Z
0x180015470: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x18000AF50: EfsRpcDuplicateEncryptionInfoFile
0x1800147D8: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180015400: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18000A200: "protected: virtual unsigned long __cdecl CEfsClient::ConnectToService(unsigned short * __ptr64,unsigned short * __ptr64,int,void * __ptr64 * __ptr64) __ptr64" ?ConnectToService@CEfsClient@@MEAAKPEAG0HPEAPEAX@Z
0x180014458: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x18001A220: g_header_init_InitializeStagingSRUMFeatureReporting
0x180002D50: EfsRpcNotSupported_Downlevel
0x1800187D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180014608: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x18000D494: "public: void __cdecl wil::details::FeatureStateManager::QueueBackgroundSRUMUsageReporting(unsigned int,unsigned short,unsigned int) __ptr64" ?QueueBackgroundSRUMUsageReporting@FeatureStateManager@details@wil@@QEAAXIGI@Z
0x18001A1D8: "__cdecl _security_cookie" __security_cookie
0x18000B15C: "long __cdecl wil_details_NtQueryWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?wil_details_NtQueryWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@Z
0x18000A040: "protected: static unsigned long __cdecl CEfsClient::GetServiceState(struct SC_HANDLE__ * __ptr64,unsigned long * __ptr64)" ?GetServiceState@CEfsClient@@KAKPEAUSC_HANDLE__@@PEAK@Z
0x180010490: "__cdecl alloca_probe" _alloca_probe
0x180005260: "public: static void __cdecl wil::ErrorHandlingHelpers::FallbackTelemetryCallback(bool,struct wil::FailureInfo const & __ptr64)" ?FallbackTelemetryCallback@ErrorHandlingHelpers@wil@@SAX_NAEBUFailureInfo@2@@Z
0x180003B58: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x1800154D8: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x18001A994: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::machineStoreProbe" ?machineStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x180014610: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180014400: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180001994: fnEfsLogTrace2
0x180014438: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180018770: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000D0FC: "public: __cdecl wil::details::FeatureStateManager::~FeatureStateManager(void) __ptr64" ??1FeatureStateManager@details@wil@@QEAA@XZ
0x1800143E0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x180008060: "unsigned long __cdecl EfspOverwriteEfsAttr(void * __ptr64,struct _EFS_DATA_STREAM_HEADER * __ptr64)" ?EfspOverwriteEfsAttr@@YAKPEAXPEAU_EFS_DATA_STREAM_HEADER@@@Z
0x18001AAC8: "__cdecl _onexitbegin" __onexitbegin
0x180006D7C: EfsWriteFileRaw
0x1800142F0: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x180014640: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x18001A850: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x180002444: EfslpValidateEncryptedKeys
0x180003B34: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x18001A980: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUikxUxorvmgUmlwldmovevoUlyquivUznwGEUkivxlnkOlyq@efsrpc_c_nodownlevel" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUwhUhvxfirgbUvuhUikxUxorvmgUmlwldmovevoUlyquivUznwGEUkivxlnkOlyq@efsrpc_c_nodownlevel
0x180014728: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800142D0: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180014368: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800144D8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18001A1F4: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumErasedTypeProp" ?EfsxDatumErasedTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x18000EC7C: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,2>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$01@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x180009DFC: EfsFsctlGetBufferSize
0x180002074: EfslpValidatePublicKeyInfo
0x18001A21C: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem_SuppressPrivateApiUse
0x18001A958: "void (__cdecl* __ptr64 g_wil_details_apiRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_apiRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x18001A900: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x1800048E0: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x18000FE14: "__cdecl _security_init_cookie" __security_init_cookie
0x18001A840: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x18000AD70: EfsRpcReadFileRaw
0x1800025BC: "unsigned long __cdecl EfsxProtectorListGetDatumHeader(struct _EFSX_PROTECTOR_LIST const * __ptr64,unsigned long,struct _EFSX_DATUM * __ptr64)" ?EfsxProtectorListGetDatumHeader@@YAKPEBU_EFSX_PROTECTOR_LIST@@KPEAU_EFSX_DATUM@@@Z
0x1800027B0: EfsRpcOpenFileRaw_Downlevel
0x1800051B0: "private: virtual bool __cdecl wil::TraceLoggingProvider::NotifyFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?NotifyFailure@TraceLoggingProvider@wil@@EEAA_NAEBUFailureInfo@2@@Z
0x18000D310: "public: void __cdecl wil::details::FeatureStateManager::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateManager@details@wil@@QEAAXIW4wil_details_ServiceReportingKind@@_K@Z
0x18000B9B0: "long __cdecl wil_details_WriteSRUMWnfUsageBuffer(class wil::details_abi::heap_vector<struct wil_details_FeatureUsageSRUM> * __ptr64)" ?wil_details_WriteSRUMWnfUsageBuffer@@YAJPEAV?$heap_vector@Uwil_details_FeatureUsageSRUM@@@details_abi@wil@@@Z
0x180015630: ":$EfsBackup:$DATA" ??_C@_1CE@EKBCMEJB@?$AA?3?$AA$?$AAE?$AAf?$AAs?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?3?$AA$?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18001A1F8: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumBlobTypeProp" ?EfsxDatumBlobTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x1800186A8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800184AC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_EFSCORE_dll" __DELAY_IMPORT_DESCRIPTOR_EFSCORE_dll
0x18001037F: "__cdecl _imp_load_WNetGetProviderNameW" __imp_load_WNetGetProviderNameW
0x180014708: "__cdecl _imp_memmove" __imp_memmove
0x180002538: "unsigned long __cdecl EfsxDatumHeaderSafe(struct _EFSX_DATUM const * __ptr64,unsigned __int64,struct _EFSX_DATUM * __ptr64)" ?EfsxDatumHeaderSafe@@YAKPEBU_EFSX_DATUM@@_KPEAU1@@Z
0x1800018F8: fnEfsLogTrace1
0x180010257: "__cdecl _imp_load_EfsDllOefsReleaseExclusiveOperation" __imp_load_EfsDllOefsReleaseExclusiveOperation
0x18000DE14: "unsigned long __cdecl EfspGetFullName(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,void * __ptr64,int,int * __ptr64,int * __ptr64)" ?EfspGetFullName@@YAKPEBGPEAPEAG1KPEAKKPEAXHPEAH4@Z
0x180004168: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x180005448: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x18000E4C4: "unsigned long __cdecl EfspGetUNCName(struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfspGetUNCName@@YAKPEAU_FILE_NETWORK_PHYSICAL_NAME_INFORMATION@@PEAPEAGPEAK12@Z
0x1800146F8: "__cdecl _imp_malloc" __imp_malloc
0x180002B70: EfsRpcQueryRecoveryAgents_Downlevel
0x180014740: "__cdecl _imp__purecall" __imp__purecall
0x18000ECB0: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,0>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$0A@@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x180014648: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000CD90: "public: void __cdecl wil::details_abi::SubscriptionList::Unsubscribe(class wil::srwlock & __ptr64,struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64) __ptr64" ?Unsubscribe@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@PEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x18000B010: EfsRpcEncryptFileExSrv
0x1800186E4: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800029D0: EfsRpcEncryptFileSrv_Downlevel
0x18000DA30: "void __cdecl wil::details::WilApiImpl_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApiImpl_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x1800147F8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1800021E8: EfslpValidateEncryptedKey
0x180015498: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180014578: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x18001A7C8: "__cdecl _hmod__srvcli_dll" __hmod__srvcli_dll
0x18001A818: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x180014788: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x180014318: RPCRT4_NULL_THUNK_DATA
0x180010000: "__cdecl _report_gsfailure" __report_gsfailure
0x180014808: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x180018540: EFSCORE_NULL_THUNK_DATA_DLN
0x180002FFC: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x180014548: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18000FF08: "__cdecl onexit" _onexit
0x18001A910: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x18001A800: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x18000BE7C: "public: void __cdecl wil::details_abi::RawUsageIndex::SetBuffer(void * __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?SetBuffer@RawUsageIndex@details_abi@wil@@QEAAXPEAX_K1@Z
0x18001AAD8: "__cdecl _native_startup_state" __native_startup_state
0x180015388: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001A858: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x18001A86C: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x18001A960: "void (__cdecl* __ptr64 g_wil_details_internalRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_internalRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x180001530: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x180014678: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18000B804: "long __cdecl wil_details_StagingConfig_FireNotification(struct wil_details_StagingConfig * __ptr64,unsigned int,unsigned short,int)" ?wil_details_StagingConfig_FireNotification@@YAJPEAUwil_details_StagingConfig@@IGH@Z
0x18000185C: fnEfsLogTrace0
0x180015438: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000B1F8: "long __cdecl wil_details_NtUpdateWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?wil_details_NtUpdateWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@Z
0x180005D0C: "long __cdecl wil::details::ReportFailure_Win32(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,unsigned long)" ?ReportFailure_Win32@details@wil@@YAJPEAXIPEBD110W4FailureType@2@K@Z
0x180018810: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180014738: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x1800145D0: "__cdecl _imp_InitOnceComplete" __imp_InitOnceComplete
0x1800144D0: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180003684: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x1800142B0: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x18001A848: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x18001AA50: "class wil::shutdown_aware_object<class wil::details::EnabledStateManager> wil::details::g_enabledStateManager" ?g_enabledStateManager@details@wil@@3V?$shutdown_aware_object@VEnabledStateManager@details@wil@@@2@A
0x18001A0C0: "class wil::shutdown_aware_object<class wil::details::FeatureStateManager> wil::details::g_featureStateManager" ?g_featureStateManager@details@wil@@3V?$shutdown_aware_object@VFeatureStateManager@details@wil@@@2@A
0x18000AEB0: EfsRpcRemoveUsersFromFile
0x180006288: EfsCloseFileRaw
0x180004BF0: "protected: static void __cdecl CEfsClient::NotifyServiceReady(void * __ptr64)" ?NotifyServiceReady@CEfsClient@@KAXPEAX@Z
0x18000A890: "public: unsigned long __cdecl CEfsClientBase::EfsQueryRecoveryAgentsClient(unsigned short const * __ptr64,struct _ENCRYPTION_CERTIFICATE_HASH_LIST * __ptr64 * __ptr64) __ptr64" ?EfsQueryRecoveryAgentsClient@CEfsClientBase@@QEAAKPEBGPEAPEAU_ENCRYPTION_CERTIFICATE_HASH_LIST@@@Z
0x180018720: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180008328: EfspMapError
0x180014390: "__cdecl _imp_UnsubscribeFeatureStateChangeNotification" __imp_UnsubscribeFeatureStateChangeNotification
0x180014308: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x18001A868: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x18000B594: "int __cdecl wil_details_StagingConfig_QueryFeatureState(struct wil_details_StagingConfig * __ptr64,struct wil_FeatureState * __ptr64,unsigned int,int)" ?wil_details_StagingConfig_QueryFeatureState@@YAHPEAUwil_details_StagingConfig@@PEAUwil_FeatureState@@IH@Z
0x180014700: "__cdecl _imp_free" __imp_free
0x18000FD80: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800145D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180014B20: EFS_ERROR_MEMORY
0x180014730: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180018860: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x1800153BC: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x1800187E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1800145B8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18001870C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18001A810: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x18001A1F0: "struct _EFSX_DATUM_TYPE_PROPERTIES EfsxDatumProtectorListTypeProp" ?EfsxDatumProtectorListTypeProp@@3U_EFSX_DATUM_TYPE_PROPERTIES@@A
0x18001A968: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_apiGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_apiGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x18001045A: memset
0x180018900: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180014AC0: "__cdecl _sz_MPR_dll" __sz_MPR_dll
0x18001A21D: g_header_init_InitializeResultHeader
0x180001CE0: EfslValidateEfsStream

[JEB Decompiler by PNF Software]