Generated by JEB on 2019/08/01

PE: C:\Windows\System32\EtwRundown.dll Base=0x180000000 SHA-256=31FBFD9449B397A7698FFD335C35B9BED779472D00E044811AC142E830605415
PDB: etwrundown.pdb GUID={69BBDB33-452F-C58C-E45F40E57EE80F78} Age=1

342 located named symbols:
0x1800093A8: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x180009A30: "LastRunInitialBackedSlabs" ??_C@_1DE@DMOFHFNG@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAB?$AAa?$AAc?$AAk?$AAe?$AAd?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180009258: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180008240: IsEnumDisplayDevicesWPresent
0x18000B058: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0
0x1800031E8: StringCchCatW
0x180007B7C: EtwpLogFlightIds
0x180007F80: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000AF54: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000AE58: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLN
0x180009D08: "HardwareInformation.ChipType" ??_C@_1DK@MOLIEPD@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAC?$AAh?$AAi?$AAp?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800093F8: "__cdecl _imp_EtwpGetCpuSpeed" __imp_EtwpGetCpuSpeed
0x18000AE04: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_windowscore_deviceinfo_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_windowscore_deviceinfo_l1_1_0_dll
0x18000D008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180009298: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000B0D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0
0x1800091B8: "__cdecl _imp_DevObjOpenDevRegKey" __imp_DevObjOpenDevRegKey
0x18000F000: "__cdecl _imp_EnumDisplayDevicesW" __imp_EnumDisplayDevicesW
0x1800092B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180009750: "FragmentedExtents" ??_C@_1CE@KPEOELAO@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AAE?$AAx?$AAt?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x180009380: "__cdecl _imp_GetSystemFirmwareTable" __imp_GetSystemFirmwareTable
0x180008331: "__cdecl _imp_load_QueryDeviceInformation" __imp_load_QueryDeviceInformation
0x1800093F0: "__cdecl _imp_NtEnumerateKey" __imp_NtEnumerateKey
0x1800094E8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800084E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180009250: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180009350: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x180002740: EtwpLogVideoAdaptersInfo
0x180004188: EtwpGetDevicePath
0x180003288: EtwpLogNetworkAdaptersInfo
0x180009138: "__cdecl _imp_CM_Free_Res_Des_Handle" __imp_CM_Free_Res_Des_Handle
0x180009FE0: "" ??_C@_00CNPNBAHC@?$AA@
0x18000B0A8: "__cdecl _IMPORT_DESCRIPTOR_CFGMGR32" __IMPORT_DESCRIPTOR_CFGMGR32
0x18000A668: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800099E8: "InUseSlabs" ??_C@_1BG@CLMCFCFG@?$AAI?$AAn?$AAU?$AAs?$AAe?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x18000AF90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x180009320: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18000AF7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180009288: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180009E68: "\Device\Video%d" ??_C@_1CA@EENBKMNE@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAV?$AAi?$AAd?$AAe?$AAo?$AA?$CF?$AAd?$AA?$AA@
0x180009448: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x1800099A8: "HardwareIssue" ??_C@_1BM@GALMIJKM@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAs?$AAs?$AAu?$AAe?$AA?$AA@
0x18000A4B0: "\Registry\Machine\Software\Micro" ??_C@_1JI@NBFJMEHJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180009510: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180009DC8: "HardwareInformation.BiosString" ??_C@_1DO@KPBPPECE@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAB?$AAi?$AAo?$AAs?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x1800094B8: "__cdecl _imp_wcsstr" __imp_wcsstr
0x1800011E0: EtwLogSysConfigRundown
0x18000B080: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x180009358: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x1800091C8: DEVOBJ_NULL_THUNK_DATA
0x180001DFC: StringCchCopyW
0x180006414: EtwpLogOpticalMediaInfo
0x180006568: EtwpLogServiceInfo
0x180009D80: "HardwareInformation.AdapterStrin" ??_C@_1EE@FEKOCCK@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AAS?$AAt?$AAr?$AAi?$AAn@
0x180001630: EtwpLogDefragInfo
0x180002528: EtwpLogLogicalDiskInfo
0x180009158: "__cdecl _imp_CM_Free_Log_Conf_Handle" __imp_CM_Free_Log_Conf_Handle
0x180005D24: EtwpGetSessionTrackInformation
0x180009490: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x1800091B0: "__cdecl _imp_DevObjEnumDeviceInfo" __imp_DevObjEnumDeviceInfo
0x180009540: "__cdecl _guard_iat_table" __guard_iat_table
0x1800084A1: memcpy
0x1800094F8: "__cdecl _imp_memset" __imp_memset
0x18000ADE4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x18000562C: EtwpGetFileSystemName
0x180009340: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180009268: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x18000B044: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180009290: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x180004690: EtwpGetPhysicalDiskRecord
0x180009210: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180007520: EtwpLogCpuInfo
0x180001F9C: EtwpGetLogicalPartitionInfo
0x18000A2D0: "\Registry\Machine\System\Current" ??_C@_1JK@MFHBEJBD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800095E0: "__cdecl _sz_ext_ms_windowscore_deviceinfo_l1_1_0_dll" __sz_ext_ms_windowscore_deviceinfo_l1_1_0_dll
0x180009C90: "(unknown)" ??_C@_1BE@CIGHCOHA@?$AA?$CI?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$CJ?$AA?$AA@
0x180009860: "LastRunTime" ??_C@_1BI@BBCEOENN@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180009278: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180009370: "__cdecl _imp_GlobalMemoryStatusEx" __imp_GlobalMemoryStatusEx
0x180009330: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180009248: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x180008440: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000A120: GUID_DEVCLASS_HDC
0x18000833D: "__cdecl _tailMerge_ext_ms_windowscore_deviceinfo_l1_1_0_dll" __tailMerge_ext_ms_windowscore_deviceinfo_l1_1_0_dll
0x180009C28: "TotalMFTRecords" ??_C@_1CA@CILBEHAB@?$AAT?$AAo?$AAt?$AAa?$AAl?$AAM?$AAF?$AAT?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x180009308: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x1800079B0: EtwpLogPlatformInfo
0x1800094E0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180009878: "MFTSize" ??_C@_1BA@IJLAHCHA@?$AAM?$AAF?$AAT?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000A664: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000A400: "BIOSVersion" ??_C@_1BI@FLHFKEFE@?$AAB?$AAI?$AAO?$AAS?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180009BE0: "MFTFragmentCount" ??_C@_1CC@DKPABAM@?$AAM?$AAF?$AAT?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x180007CF0: EtwpLogMobilePlatformInfo
0x180009458: "__cdecl _imp_RtlDestroyQueryDebugBuffer" __imp_RtlDestroyQueryDebugBuffer
0x180009190: "__cdecl _imp_DevObjGetDeviceInterfaceDetail" __imp_DevObjGetDeviceInterfaceDetail
0x18000A3E0: "BIOSReleaseDate" ??_C@_1CA@JPNOCPHA@?$AAB?$AAI?$AAO?$AAS?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
0x180009338: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x1800093B0: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA
0x180009228: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180009BA8: "LastRunVolsnapPinnedSlabs" ??_C@_1DE@JOHFOJLF@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAV?$AAo?$AAl?$AAs?$AAn?$AAa?$AAp?$AAP?$AAi?$AAn?$AAn?$AAe?$AAd?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180004C9C: EtwpLogIDEChannelInfo
0x180009988: "FragmentedSpace" ??_C@_1CA@IAODNAB@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AAS?$AAp?$AAa?$AAc?$AAe?$AA?$AA@
0x18000A680: "__cdecl _xmm@00000008000000070000000d0000000c" __xmm@00000008000000070000000d0000000c
0x1800092D0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180009FDC: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x1800036BC: EtwpLogPnPInfo
0x1800093D0: "__cdecl _imp_I_QueryTagInformation" __imp_I_QueryTagInformation
0x18000A0E8: "\DosDevices\" ??_C@_1BK@LABJKOM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
0x1800094A8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180009418: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180009B00: "LastRunSpaceInefficientSlabs" ??_C@_1DK@LOJLJEFM@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAS?$AAp?$AAa?$AAc?$AAe?$AAI?$AAn?$AAe?$AAf?$AAf?$AAi?$AAc?$AAi?$AAe?$AAn?$AAt?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x1800092B0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180009C80: "\\.\%s" ??_C@_1O@GHDNIFBI@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000D588: "__cdecl _hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x180009220: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000841C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800091A0: "__cdecl _imp_DevObjGetDeviceInfoListDetail" __imp_DevObjGetDeviceInfoListDetail
0x1800096D0: "AvgFreeSpaceSize" ??_C@_1CC@KBNGHLEC@?$AAA?$AAv?$AAg?$AAF?$AAr?$AAe?$AAe?$AAS?$AAp?$AAa?$AAc?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000437C: EtwpGetDeviceName
0x180002ED0: EtwpHeapQueryCallback
0x1800093E8: "__cdecl _imp_RtlGetDeviceFamilyInfoEnum" __imp_RtlGetDeviceFamilyInfoEnum
0x180009C08: "MovableFiles" ??_C@_1BK@MEJLFLJO@?$AAM?$AAo?$AAv?$AAa?$AAb?$AAl?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18000831F: "__cdecl _imp_load_EnumDisplayDevicesW" __imp_load_EnumDisplayDevicesW
0x180009CB8: GUID_DEVINTERFACE_CDROM
0x180009440: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x180009178: "__cdecl _imp_DevObjGetDeviceInstanceId" __imp_DevObjGetDeviceInstanceId
0x180009B68: "LastRunUnknownEvictFailSlabs" ??_C@_1DK@IELBMDI@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AAE?$AAv?$AAi?$AAc?$AAt?$AAF?$AAa?$AAi?$AAl?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180009AA0: "LastRunPinnedSlabs" ??_C@_1CG@EEDFKHCL@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAP?$AAi?$AAn?$AAn?$AAe?$AAd?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x18000A130: "\Registry\Machine\SOFTWARE\Micro" ??_C@_1IO@MCMFBGDP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180009168: "__cdecl _imp_CM_Get_DevNode_Status_Ex" __imp_CM_Get_DevNode_Status_Ex
0x18000B134: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800092C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800094C0: "__cdecl _imp_RtlReAllocateHeap" __imp_RtlReAllocateHeap
0x180009918: "DirectoryCount" ??_C@_1BO@CHJCJEIO@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x180001008: EtwpRegOpenKey
0x18000A664: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800098F8: "BytesPerCluster" ??_C@_1CA@DJAOMEI@?$AAB?$AAy?$AAt?$AAe?$AAs?$AAP?$AAe?$AAr?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x180009EC8: "{" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x180009778: "FreeSpaceCount" ??_C@_1BO@ELEMGPMD@?$AAF?$AAr?$AAe?$AAe?$AAS?$AAp?$AAa?$AAc?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1800070EC: EtwpGetMemorySpeed
0x1800094D8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800092E0: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x18000AFCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800096A8: "AlignmentClusters" ??_C@_1CE@IBICONME@?$AAA?$AAl?$AAi?$AAg?$AAn?$AAm?$AAe?$AAn?$AAt?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180009A68: "LastRunPercentFragmentation" ??_C@_1DI@GCCIMHGJ@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000A560: "\Registry\Machine\Software\Micro" ??_C@_1HE@GEAIKIIG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180009150: "__cdecl _imp_CM_Get_Res_Des_Data_Size_Ex" __imp_CM_Get_Res_Des_Data_Size_Ex
0x18000AE24: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180002CA8: EtwpLogDPISettingsInfo
0x1800092E8: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x1800093D8: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA
0x180008240: IsEnumDisplaySettingsWPresent
0x180009968: "FragmentedFiles" ??_C@_1CA@HPCAPDEA@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180009198: "__cdecl _imp_DevObjDestroyDeviceInfoList" __imp_DevObjDestroyDeviceInfoList
0x180009FE8: "\Device\Harddisk%u\Partition0" ??_C@_1DM@BBNHFLPE@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$CF?$AAu?$AA?2?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA0?$AA?$AA@
0x18000B120: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180009E10: "\Registry\Machine\Hardware\Devic" ??_C@_1FG@FKMNHMGO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc@
0x18000A5D8: "AllFlights" ??_C@_1BG@DKIAEGJF@?$AAA?$AAl?$AAl?$AAF?$AAl?$AAi?$AAg?$AAh?$AAt?$AAs?$AA?$AA@
0x180001078: EtwpRegQueryValueKey
0x18000B094: "__cdecl _IMPORT_DESCRIPTOR_IPHLPAPI" __IMPORT_DESCRIPTOR_IPHLPAPI
0x18000B01C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180008294: "__cdecl _imp_load_EnumDisplaySettingsW" __imp_load_EnumDisplaySettingsW
0x180007FC0: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x180001F1C: StringCchPrintfW
0x180005B9C: EtwpGetStorageDeviceDescriptor
0x180009508: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800092C8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002FA0: EtwLogHeapRundown
0x18000A058: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180006CF4: EtwpGetSvchostGroupTable
0x1800094A0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000A650: "MachineId" ??_C@_1BE@KKNKODGH@?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAI?$AAd?$AA?$AA@
0x180009378: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180009390: api-ms-win-core-sysinfo-l1-2-0_NULL_THUNK_DATA
0x180009388: "__cdecl _imp_GetNativeSystemInfo" __imp_GetNativeSystemInfo
0x1800092F0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180009360: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180009200: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800098D0: "AvgFragmentsPerFile" ??_C@_1CI@NNDBCPCJ@?$AAA?$AAv?$AAg?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAs?$AAP?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x1800091D8: IPHLPAPI_NULL_THUNK_DATA
0x1800093B8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180009188: "__cdecl _imp_DevObjGetClassDevs" __imp_DevObjGetClassDevs
0x180009430: "__cdecl _imp_RtlQueryHeapInformation" __imp_RtlQueryHeapInformation
0x180009F78: "LogPixels" ??_C@_1BE@CKDBNGKB@?$AAL?$AAo?$AAg?$AAP?$AAi?$AAx?$AAe?$AAl?$AAs?$AA?$AA@
0x180009FE4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000AFF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000AFE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180009498: "__cdecl _imp_NtQueryVolumeInformationFile" __imp_NtQueryVolumeInformationFile
0x18000A268: "ProcessorNameString" ??_C@_1CI@HONJKKAP@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AAN?$AAa?$AAm?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x1800091C0: "__cdecl _imp_DevObjCreateDeviceInfoList" __imp_DevObjCreateDeviceInfoList
0x180009230: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800050D4: EtwpSendWithSenseParse
0x180009F90: "\Registry\User\Control Panel\Des" ??_C@_1EK@MPEPJODE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs@
0x180009D48: "HardwareInformation.DacType" ??_C@_1DI@DCMPJLAE@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAD?$AAa?$AAc?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000A040: "Target%d" ??_C@_1BC@DLHBIBDK@?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AA?$CF?$AAd?$AA?$AA@
0x1800094D0: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x180007FF0: "__cdecl _security_check_cookie" __security_check_cookie
0x180009888: "TotalClusters" ??_C@_1BM@FIIMDIB@?$AAT?$AAo?$AAt?$AAa?$AAl?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18000AED8: ext-ms-windowscore-deviceinfo-l1-1-0_NULL_THUNK_DATA_DLB
0x18000F020: ext-ms-windowscore-deviceinfo-l1-1-0_NULL_THUNK_DATA_DLA
0x18000B0F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800095B0: "__cdecl _sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x18000AE68: ext-ms-windowscore-deviceinfo-l1-1-0_NULL_THUNK_DATA_DLN
0x180009170: CFGMGR32_NULL_THUNK_DATA
0x1800092D8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800091D0: "__cdecl _imp_GetAdaptersAddresses" __imp_GetAdaptersAddresses
0x180007898: EtwpLogPowerInfo
0x1800092A0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180009368: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000A0B8: "\\.\MountPointManager" ??_C@_1CM@HDGAIJEN@?$AA?2?$AA?2?$AA?4?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1800091F0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180009800: "LastRunClustersTrimmed" ??_C@_1CO@CGNKACGP@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AAT?$AAr?$AAi?$AAm?$AAm?$AAe?$AAd?$AA?$AA@
0x18000B0E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x1800097C8: "LastRunActualPurgeClusters" ??_C@_1DG@EJICFODO@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAA?$AAc?$AAt?$AAu?$AAa?$AAl?$AAP?$AAu?$AAr?$AAg?$AAe?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180009550: "ext-ms-win-rtcore-ntuser-syspara" ??_C@_1FE@ILFCGBAM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAr?$AAt?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAs?$AAy?$AAs?$AAp?$AAa?$AAr?$AAa@
0x180009438: "__cdecl _imp_RtlCreateQueryDebugBuffer" __imp_RtlCreateQueryDebugBuffer
0x18000B06C: "__cdecl _IMPORT_DESCRIPTOR_DEVOBJ" __IMPORT_DESCRIPTOR_DEVOBJ
0x1800094C8: "__cdecl _imp_NtTraceEvent" __imp_NtTraceEvent
0x180009398: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x180009A00: "LastRunActualPurgeSlabs" ??_C@_1DA@ONNPLHOK@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAA?$AAc?$AAt?$AAu?$AAa?$AAl?$AAP?$AAu?$AAr?$AAg?$AAe?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180009240: "__cdecl _imp_LocalFileTimeToFileTime" __imp_LocalFileTimeToFileTime
0x180005850: EtwpGetDeviceManufacturerName
0x1800093C8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x18000B10C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x180009300: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180009518: "__cdecl _guard_fids_table" __guard_fids_table
0x18000A370: "ComputerName" ??_C@_1BK@OADCIHHB@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A250: "FeatureSet" ??_C@_1BG@BOJHMGAF@?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAS?$AAe?$AAt?$AA?$AA@
0x180009030: "__cdecl load_config_used" _load_config_used
0x18000A390: "SystemManufacturer" ??_C@_1CG@HPPMFCLH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAa?$AAn?$AAu?$AAf?$AAa?$AAc?$AAt?$AAu?$AAr?$AAe?$AAr?$AA?$AA@
0x180009260: "__cdecl _imp_GetVolumePathNamesForVolumeNameW" __imp_GetVolumePathNamesForVolumeNameW
0x1800082A0: "__cdecl _tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x180002D94: EtwpLogHeapSectionEvents
0x180009208: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1800091F8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000AFB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000A070: "DeviceTimingMode" ??_C@_1CC@FFKAEMBJ@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAi?$AAm?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180009238: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x180007E38: EtwpLogMachineId
0x180009798: "LargestFreeSpaceSize" ??_C@_1CK@DFDIBLAF@?$AAL?$AAa?$AAr?$AAg?$AAe?$AAs?$AAt?$AAF?$AAr?$AAe?$AAe?$AAS?$AAp?$AAa?$AAc?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1800092A8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180009488: "__cdecl _imp_NtClose" __imp_NtClose
0x18000A548: "UpdateId" ??_C@_1BC@OKGKFOKM@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAd?$AA?$AA@
0x180009E88: "DriverDesc" ??_C@_1BG@DMHKAJIE@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAe?$AAs?$AAc?$AA?$AA@
0x180009AC8: "LastRunPotentialPurgeSlabs" ??_C@_1DG@NLEHHALB@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAP?$AAo?$AAt?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAP?$AAu?$AAr?$AAg?$AAe?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x1800094B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800092F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180008410: ApiSetQueryApiSetPresence
0x180009460: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180009328: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18000A668: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180001E84: StringCchCopyNW
0x180009ED0: "\Registry\Machine\System\Current" ??_C@_1KI@BDMEAKEH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800084C0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800093E0: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18000A5F0: "\Registry\Machine\Software\Micro" ??_C@_1FO@LMEFOBPH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180009408: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1800083BC: IsQueryDeviceInformationPresent
0x1800098A8: "TotalUsedClusters" ??_C@_1CE@ILFEMOIK@?$AAT?$AAo?$AAt?$AAa?$AAl?$AAU?$AAs?$AAe?$AAd?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18000AFA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180009420: "__cdecl _imp_RtlIpv4AddressToStringW" __imp_RtlIpv4AddressToStringW
0x180009410: "__cdecl _imp_RtlIpv6AddressToStringW" __imp_RtlIpv6AddressToStringW
0x180009B40: "LastRunTrimmedSlabs" ??_C@_1CI@PALAKKGL@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAT?$AAr?$AAi?$AAm?$AAm?$AAe?$AAd?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180009180: "__cdecl _imp_DevObjEnumDeviceInterfaces" __imp_DevObjEnumDeviceInterfaces
0x18000AEC0: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLB
0x18000D590: "__cdecl _hmod__ext_ms_windowscore_deviceinfo_l1_1_0_dll" __hmod__ext_ms_windowscore_deviceinfo_l1_1_0_dll
0x180009500: ntdll_NULL_THUNK_DATA
0x180009468: "__cdecl _imp_memcpy" __imp_memcpy
0x18000F018: "__cdecl _imp_QueryDeviceInformation" __imp_QueryDeviceInformation
0x180002098: EtwpGetLogicalDiskRecord
0x18000B030: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800099C8: "InUseMFTRecords" ??_C@_1CA@LBPGPGAH@?$AAI?$AAn?$AAU?$AAs?$AAe?$AAM?$AAF?$AAT?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x1800091E0: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x18000D000: "__cdecl _security_cookie" __security_cookie
0x18000B0BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1
0x180009318: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000A098: "\Device\Cdrom%d" ??_C@_1CA@NJHHOAKP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAd?$AAr?$AAo?$AAm?$AA?$CF?$AAd?$AA?$AA@
0x180006F6C: EtwpFreeSvchostGroupTable
0x180009160: "__cdecl _imp_CM_Get_Next_Res_Des_Ex" __imp_CM_Get_Next_Res_Des_Ex
0x180009270: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180009C48: "TotalSlabs" ??_C@_1BG@GIFNBIPN@?$AAT?$AAo?$AAt?$AAa?$AAl?$AAS?$AAl?$AAa?$AAb?$AAs?$AA?$AA@
0x180009280: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000A670: "__cdecl _xmm@00000005000000060000000f0000000e" __xmm@00000005000000060000000f0000000e
0x18000AF68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000A420: "\Registry\Machine\System\Current" ??_C@_1IK@CDBNLIHD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800096F8: "ClustersPerSlab" ??_C@_1CA@FAPPMCBK@?$AAC?$AAl?$AAu?$AAs?$AAt?$AAe?$AAr?$AAs?$AAP?$AAe?$AAr?$AAS?$AAl?$AAa?$AAb?$AA?$AA@
0x180006FD0: EtwpGetHyperThreadingFlag
0x180009478: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180009428: "__cdecl _imp_RtlImpersonateSelf" __imp_RtlImpersonateSelf
0x18000F008: "__cdecl _imp_EnumDisplaySettingsW" __imp_EnumDisplaySettingsW
0x180009218: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180009CC8: "HardwareInformation.MemorySize" ??_C@_1DO@LIHHCPPC@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x180009310: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180009450: "__cdecl _imp_RtlQueryProcessDebugInformation" __imp_RtlQueryProcessDebugInformation
0x18000816C: "__cdecl _security_init_cookie" __security_init_cookie
0x180009718: "FragmentedDirectoryExtents" ??_C@_1DG@HNINFMGC@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAE?$AAx?$AAt?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x180009C60: "UnmovableFiles" ??_C@_1BO@BCLLMMIN@?$AAU?$AAn?$AAm?$AAo?$AAv?$AAa?$AAb?$AAl?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180009480: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18000A028: "MaxTargetId" ??_C@_1BI@JLIPCOEL@?$AAM?$AAa?$AAx?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAI?$AAd?$AA?$AA@
0x180009938: "FragmentedDirectories" ??_C@_1CM@DDIJBLBD@?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180009148: "__cdecl _imp_CM_Get_First_Log_Conf_Ex" __imp_CM_Get_First_Log_Conf_Ex
0x180009470: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x180007214: EtwpLogProcessorInfo
0x18000A290: "VendorIdentifier" ??_C@_1CC@GHLLHEOD@?$AAV?$AAe?$AAn?$AAd?$AAo?$AAr?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x18000A1C0: "\Registry\Machine\Hardware\Descr" ??_C@_1HO@NHDPAOGO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAs?$AAc?$AAr@
0x180005274: EtwpGetDriveLetter
0x18000A3B8: "SystemProductName" ??_C@_1CE@BJFAIAKH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180004AAC: EtwpLogPhysicalDiskInfo
0x18000A240: "~MHz" ??_C@_19KBOEDNGH@?$AA?$HO?$AAM?$AAH?$AAz?$AA?$AA@
0x180008020: "__cdecl _report_gsfailure" __report_gsfailure
0x1800091E8: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x1800093A0: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x180009400: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180009660: "SOFTWARE\Microsoft\Dfrg\Statisti" ??_C@_1EG@LBDJJNHN@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAf?$AAr?$AAg?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi@
0x18000A2B8: "Identifier" ??_C@_1BG@IEICLFFJ@?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x18000A108: "\\.\Cdrom%d" ??_C@_1BI@GBJLMDDJ@?$AA?2?$AA?2?$AA?4?$AA?2?$AAC?$AAd?$AAr?$AAo?$AAm?$AA?$CF?$AAd?$AA?$AA@
0x1800091A8: "__cdecl _imp_DevObjGetDeviceRegistryProperty" __imp_DevObjGetDeviceRegistryProperty
0x1800093C0: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1800044C0: EtwpGetDiskCharacteristics
0x180009140: "__cdecl _imp_CM_Get_Res_Des_Data_Ex" __imp_CM_Get_Res_Des_Data_Ex
0x18000F010: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLA
0x180006B34: EtwpBuildServiceGroupInfo
0x1800060C0: EtwpGetOpticalMediaRecord
0x180009610: "ext-ms-windowscore-deviceinfo-l1" ??_C@_1EK@MONEGLKC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAd?$AAe?$AAv?$AAi?$AAc?$AAe?$AAi?$AAn?$AAf?$AAo?$AA?9?$AAl?$AA1@
0x1800094F0: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x180009EA0: "Device Description" ??_C@_1CG@HHPNHLIF@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000B008: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180009348: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180009CA8: GUID_DEVINTERFACE_DISK
0x1800084AD: memset
0x18000B148: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180009830: "LastRunFullDefragTime" ??_C@_1CM@NDIMOIMB@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAu?$AAn?$AAF?$AAu?$AAl?$AAl?$AAD?$AAe?$AAf?$AAr?$AAa?$AAg?$AAT?$AAi?$AAm?$AAe?$AA?$AA@

[JEB Decompiler by PNF Software]