Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cldapi.dll Base=0x180000000 SHA-256=3D8DE4C70D14D79143A9E3CF5E37A3F95D2EE2E9D3DFC360C6110E62DD026116
PDB: cldapi.pdb GUID={055FAD0F-3B57-57EA-C326C09FFC4092A8} Age=1

575 located named symbols:
0x18000C390: CfGetSyncRootInfoByHandle
0x180014558: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180006590: CfpRegisterSyncRoot
0x180014660: "__cdecl _imp_RtlExtendCorrelationVector" __imp_RtlExtendCorrelationVector
0x18001353C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180014440: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x1800141C0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180014548: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180012F0C: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x18000909C: CfpExecuteTransferData
0x180012800: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800145F0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1800175EC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180014480: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x1800175D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180002730: CfCreatePlaceholders
0x180019790: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x18000F09C: TlmiRecordRunawayHydration
0x180019738: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800176A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0
0x180002500: CfSetAppPolicy
0x180014238: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x1800142C8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180013912: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180013A10: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x18000C460: CfpGetSyncRootInfoByPath
0x180014128: "__cdecl _imp_FilterGetMessage" __imp_FilterGetMessage
0x1800145C0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180013AE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800141B0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000D474: BuildSetPlaceholderInfo
0x1800152B8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180002590: CfpCreateFile
0x1800146C8: "__cdecl _xp_a" __xp_a
0x180014488: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180013A1C: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x180014618: "__cdecl _imp_RtlIncrementCorrelationVector" __imp_RtlIncrementCorrelationVector
0x18001349C: "__cdecl RTC_Initialize" _RTC_Initialize
0x180014C8A: "" ??_C@_00CNPNBAHC@?$AA@
0x180014378: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180015240: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180013A10: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180014270: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18001777C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x180016560: "__cdecl _rtc_taa" __rtc_taa
0x180017740: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800145A0: bcrypt_NULL_THUNK_DATA
0x1800022C0: CfCloseAppPolicy
0x180014500: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180014220: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000CB84: "__cdecl TlgDefineProvider_annotation__TlgCldTelemetryProviderProv" _TlgDefineProvider_annotation__TlgCldTelemetryProviderProv
0x180014510: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x1800138BC: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x180014D50: "CfpExecuteTransferPlaceholders" ??_C@_1DO@EDIAABDF@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAT?$AAr?$AAa?$AAn?$AAs?$AAf?$AAe?$AAr?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x180013A10: "__cdecl _vcrt_initialize" __vcrt_initialize
0x180014398: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180014490: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x18000317C: CfpIsDirectory
0x180001008: "__cdecl TlgWrite" _TlgWrite
0x180014690: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180014C80: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x180017704: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x180014608: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x1800143C0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180014670: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x1800144A8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180014260: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180016550: "__cdecl _rtc_iaa" __rtc_iaa
0x18000A6AC: CfpBuildAckDehydrateMessage
0x180013A10: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x180015178: "CfRetrieveProperties" ??_C@_1CK@BCOOMPEB@?$AAC?$AAf?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAe?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x180014EC0: "CfUpdateSyncProviderStatus" ??_C@_1DG@JIBNIGHD@?$AAC?$AAf?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAy?$AAn?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180003BA0: CfSetPinState
0x180019D58: "__cdecl _hmod__AEPIC_dll" __hmod__AEPIC_dll
0x1800029E4: CfpReleaseProtectedHandle
0x180014698: "__cdecl _xc_a" __xc_a
0x1800077E0: CfConnectSyncRoot
0x180014870: "__cdecl _sz_AEPIC_dll" __sz_AEPIC_dll
0x180014580: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x180013972: "__cdecl _imp_load_PicRetrieveFileInfo" __imp_load_PicRetrieveFileInfo
0x1800145E0: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x180014860: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x1800144D0: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180019750: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180014210: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180019748: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x1800144B8: "__cdecl _imp__o_malloc" __imp__o_malloc
0x1800012D0: CfQueryProgress
0x180014520: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18001484C: "__cdecl _guard_iat_table" __guard_iat_table
0x18000C0A0: CfpGetPlaceholderState
0x180013AB9: memcpy
0x18000AFCC: CfpExecuteAckRename
0x18000C200: CfGetPlaceholderInfo
0x180014540: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000D778: ProcessReturnedSetPlaceholderInfo
0x180014528: "__cdecl _imp_memset" __imp_memset
0x180013A10: "__cdecl _acrt_initialize" __acrt_initialize
0x180014390: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800141D0: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x1800141E0: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x1800138D6: "__cdecl initterm" _initterm
0x1800098EC: CfpExecuteAckData
0x180013936: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x18001763C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180019ED8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180014248: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x1800143F0: "__cdecl _imp_Sleep" __imp_Sleep
0x1800146C0: "__cdecl _xi_z" __xi_z
0x180014190: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180014130: "__cdecl _imp_FilterConnectCommunicationPort" __imp_FilterConnectCommunicationPort
0x180002190: CfGetLastSyncStatus
0x180014FE0: "CfHydratePlaceholder" ??_C@_1CK@HGLCGJAE@?$AAC?$AAf?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x1800145D8: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x180013966: "__cdecl _C_specific_handler" __C_specific_handler
0x1800143B0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000C5E0: CfGetPlaceholderRangeInfo
0x180013A10: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180014310: api-ms-win-core-psapi-l1-1-0_NULL_THUNK_DATA
0x180013AC5: memmove
0x1800141F8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000E198: TlmiUninitializeFirstRunExpStatus
0x1800145B0: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x1800132F4: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x18001395A: malloc
0x1800141F0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180014BA8: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180014420: "__cdecl _imp_GlobalMemoryStatusEx" __imp_GlobalMemoryStatusEx
0x180015220: "\\.\c:" ??_C@_1O@FICAHLNO@?$AA?2?$AA?2?$AA?4?$AA?2?$AAc?$AA?3?$AA?$AA@
0x180014348: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800141A0: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x180013A4C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800138FA: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180013228: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x180013906: "__cdecl cexit" _cexit
0x18000C8C0: CfUnlockProperties
0x180014308: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x18001394E: "__cdecl o_free" _o_free
0x1800130F8: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180014338: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18001205C: TlgRegisterAggregateProvider
0x18000C140: CfGetPlaceholderStateFromFileInfo
0x180013A10: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180014530: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18001391E: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x1800103A4: TlmLogSyncProcessCallback
0x180012F20: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x1800145F8: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x1800177B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0
0x180014E90: "CfDisconnectSyncRoot" ??_C@_1CK@FAIJFKPL@?$AAC?$AAf?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180015088: "CfSetInSyncState" ??_C@_1CC@JCPGFPFD@?$AAC?$AAf?$AAS?$AAe?$AAt?$AAI?$AAn?$AAS?$AAy?$AAn?$AAc?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18000E834: TlmiLogRunawayHydration
0x180014330: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18001C010: AEPIC_NULL_THUNK_DATA_DLA
0x1800143C8: "__cdecl _imp_TryAcquireSRWLockExclusive" __imp_TryAcquireSRWLockExclusive
0x1800026B0: CfpSyncRootTableAllocate
0x180015040: "CfAbortHydration" ??_C@_1CC@OOOJONCC@?$AAC?$AAf?$AAA?$AAb?$AAo?$AAr?$AAt?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001523C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000D854: CheckAllSystemsGo
0x1800145E8: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x180014400: "__cdecl _imp_CreateWaitableTimerW" __imp_CreateWaitableTimerW
0x18000298C: CfpReferenceProtectedHandle
0x180015230: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x180013A10: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180015148: "CfGetCorrelationVector" ??_C@_1CO@DKNDKDKJ@?$AAC?$AAf?$AAG?$AAe?$AAt?$AAC?$AAo?$AAr?$AAr?$AAe?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x18000BAF0: CfReportSyncStatus
0x1800026B0: TlmiRHAppTableAllocate
0x180017768: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x18000C130: CfGetPlaceholderStateFromAttributeTag
0x180014458: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1800130A4: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x1800042C0: CfpSyncRootTableCompare
0x180003E50: CfGetTransferKey
0x180014978: "FileOpenCompletionCallback" ??_C@_1DG@BOAFKDKD@?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAn?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180014600: "__cdecl _imp_RtlIsPartialPlaceholder" __imp_RtlIsPartialPlaceholder
0x18000444C: CfpReferenceSyncRoot
0x18001392A: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x180014F90: "CfUpdatePlaceholder" ??_C@_1CI@GMKGJHIO@?$AAC?$AAf?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x1800148D0: "CancelHydrationCallback" ??_C@_1DA@FHEEEDNE@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800143D8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180014370: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x180014350: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180013A10: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x1800145B8: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x180014198: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800149E8: "DehydrationCompletionCallback" ??_C@_1DM@HFJAGGDO@?$AAD?$AAe?$AAh?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180014498: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180003D10: CfSetInSyncState
0x1800146D8: "__cdecl _xt_a" __xt_a
0x1800197D4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x180014428: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180014290: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180014E10: "CfRegisterSyncRoot" ??_C@_1CG@EALNMIBL@?$AAC?$AAf?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180014498: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18000E330: TlmiFirstRunExpWorker
0x180014598: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x1800011D4: DllMain
0x180013A10: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x1800134E0: "__cdecl RTC_Terminate" _RTC_Terminate
0x180014010: TlmNoFileExtension
0x1800177CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x1800144C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800142D0: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180014648: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180014278: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180014E68: "CfConnectSyncRoot" ??_C@_1CE@HJKOLKNG@?$AAC?$AAf?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180017790: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180014430: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18000A958: CfpExecuteAckDehydrate
0x180014180: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180014560: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000F5E8: TlmiLogHydrationPerformance
0x180013A28: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001220: CfOpenProgressEvent
0x18000CCA0: GlobalCleanup
0x18001392A: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x1800144E0: "__cdecl _imp_memcmp" __imp_memcmp
0x18000CB84: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x180014AA8: "RenameCompletionCallback" ??_C@_1DC@CIDBMDFL@?$AAR?$AAe?$AAn?$AAa?$AAm?$AAe?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800149B0: "FileCloseCompletionCallback" ??_C@_1DI@GENKKNGH@?$AAF?$AAi?$AAl?$AAe?$AAC?$AAl?$AAo?$AAs?$AAe?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800144A8: "__cdecl _imp__o__wcsnicmp" __imp__o__wcsnicmp
0x180014570: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180019744: "__cdecl _isa_enabled" __isa_enabled
0x18000E03C: TlmiInitializeProviderGlobalData
0x180014658: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x18001781C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800142C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000CA00: CfRetrieveProperties
0x180014380: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180014E38: "CfUnregisterSyncRoot" ??_C@_1CK@FPNPEHIE@?$AAC?$AAf?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180013936: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x18001523C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800144C0: "__cdecl _imp__o_toupper" __imp__o_toupper
0x180019798: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180010FD8: TlmLogSyncProcessOperation
0x1800142B8: "__cdecl _imp_TerminateThread" __imp_TerminateThread
0x18000C510: CfGetSyncRootInfoByPath
0x180013A10: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x1800142E0: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x1800146B0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180017600: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800141C8: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x180014200: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180014388: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x180016F14: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180014D18: "CfpExecuteRestartHydration" ??_C@_1DG@DCDAJBGF@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800142E8: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x18001395A: "__cdecl o_malloc" _o_malloc
0x180012FD4: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180014360: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x180012DE0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180014508: "__cdecl _imp__initterm" __imp__initterm
0x180014BE8: "AppName" ??_C@_1BA@HJNHGNPD@?$AAA?$AAp?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180017664: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180016F80: AEPIC_NULL_THUNK_DATA_DLB
0x180014178: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180017808: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800022E0: CfEnumAppPolicy
0x180014620: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x18000ADB8: CfpBuildAckRenameMessage
0x1800176F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180013912: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x180012F34: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x1800145D0: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800142A0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180013148: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x180014688: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180008D24: CfpBuildTransferDataMessage
0x180015200: "NoFileExtension" ??_C@_1CA@EEKHKNIB@?$AAN?$AAo?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180014578: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180013338: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x180014288: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180014468: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x1800091E4: CfpBuildRetrieveDataMessage
0x180014630: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180014568: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x180014148: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180014438: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800146A8: "__cdecl _xi_a" __xi_a
0x180003150: CfReleaseTransferKey
0x1800142F0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180014418: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180014150: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180013020: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x180014168: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800177E0: "__cdecl _IMPORT_DESCRIPTOR_FLTLIB" __IMPORT_DESCRIPTOR_FLTLIB
0x180012F58: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x180014320: api-ms-win-core-realtime-l1-1-0_NULL_THUNK_DATA
0x180006410: CfpProcessUnregistration
0x180011FE0: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1800031F0: CfConvertToPlaceholder
0x1800148A0: "ValidateDataCallback" ??_C@_1CK@JMHDPKBB@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAa?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180013906: "__cdecl o__cexit" _o__cexit
0x1800040E0: CfpMakeGuid
0x180013942: "__cdecl seh_filter_dll" _seh_filter_dll
0x180014480: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180014A50: "DeleteCompletionCallback" ??_C@_1DC@EEPOCGDL@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180014BF8: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180017628: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18001768C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1800010B0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180014860: "__cdecl pRawDllMain" _pRawDllMain
0x18000C1F0: CfGetPlaceholderStateFromFindData
0x180014C84: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x1800038C0: CfHydratePlaceholder
0x180014A28: "DehydrateCallback" ??_C@_1CE@HAIBMELG@?$AAD?$AAe?$AAh?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180014A88: "DeleteCallback" ??_C@_1BO@BKMPHKKN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180015118: "CfSetCorrelationVector" ??_C@_1CO@MAJANDLM@?$AAC?$AAf?$AAS?$AAe?$AAt?$AAC?$AAo?$AAr?$AAr?$AAe?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x1800136F0: "__cdecl _isa_available_init" __isa_available_init
0x18000CB84: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x1800138B0: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x1800139FD: "__cdecl _imp_load_PicFreeFileInfo" __imp_load_PicFreeFileInfo
0x1800176B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180016558: "__cdecl _rtc_izz" __rtc_izz
0x1800143B8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800069F0: CfRegisterSyncRoot
0x180012E30: "__cdecl _security_check_cookie" __security_check_cookie
0x180002AC0: CfpOplockCompletionWorker
0x1800146A0: "__cdecl _xc_z" __xc_z
0x180014250: "__cdecl _imp_GetQueuedCompletionStatus" __imp_GetQueuedCompletionStatus
0x1800177F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180019D78: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x1800142D8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180014BD0: "PackageName" ??_C@_1BI@CAKJMNBO@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180013A10: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x1800127D8: MicrosoftTelemetryAssertTriggeredArgs
0x180008804: CfpBuildMessageHeader
0x180014258: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800161A2: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x180014410: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180014140: FLTLIB_NULL_THUNK_DATA
0x180014218: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180012FF0: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180013942: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180014158: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800138FA: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800037D0: CfRevertPlaceholder
0x180014208: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800033E0: CfUpdatePlaceholder
0x180014F60: "CfConvertToPlaceholder" ??_C@_1CO@DHKPHILC@?$AAC?$AAf?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAT?$AAo?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x180014D90: "CfpExecuteAckDehydrate" ??_C@_1CO@ICAACLNL@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAA?$AAc?$AAk?$AAD?$AAe?$AAh?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AA?$AA@
0x180014448: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x18000AAB4: CfpBuildAckDeleteMessage
0x18000F1F0: TlmiLogHydrationAborted
0x180001130: TraceLoggingRegisterEx
0x1800141A8: "__cdecl _imp_GetVolumePathNameW" __imp_GetVolumePathNameW
0x180014C68: "\CLDMSGPORT" ??_C@_1BI@GOHKMFDA@?$AA?2?$AAC?$AAL?$AAD?$AAM?$AAS?$AAG?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
0x1800142B0: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x180014478: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x1800146D0: "__cdecl _xp_z" __xp_z
0x1800145C8: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x180014300: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180016568: "__cdecl _rtc_tzz" __rtc_tzz
0x1800146E8: "__cdecl _guard_fids_table" __guard_fids_table
0x1800045B0: SyncWorkThread
0x180014020: "__cdecl load_config_used" _load_config_used
0x180003130: CfGetWin32HandleFromProtectedHandle
0x180014628: "__cdecl _imp_RtlDosLongPathNameToNtPathName_U_WithStatus" __imp_RtlDosLongPathNameToNtPathName_U_WithStatus
0x180014170: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180014160: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180015010: "CfDehydratePlaceholder" ??_C@_1CO@EBPLBMGM@?$AAC?$AAf?$AAD?$AAe?$AAh?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x18001283C: IssueHsmControl
0x18000C2B8: CfpGetSyncRootInfoByHandle
0x1800146B8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x1800144C0: "__cdecl _imp_toupper" __imp_toupper
0x180014610: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x180017718: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000ECF0: TlmiRunawayHydrationWorker
0x180009F88: CfpExecuteRestartHydration
0x18000E718: TlmiInitializeRunawayHydrationDetection
0x180014368: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180014518: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x180019EE0: "__cdecl _G" __G
0x180013328: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180002220: CfOpenAppPolicy
0x180014588: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x180014268: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180014650: "__cdecl _imp_NtClose" __imp_NtClose
0x180011F80: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x180016F48: AEPIC_NULL_THUNK_DATA_DLN
0x180014640: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800142F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002A30: CfpDrainProtectedHandle
0x1800175C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180014BB8: "ImagePath" ??_C@_1BE@CMLCLKJK@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180014C48: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180014470: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x180013A10: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x1800143E0: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x180019D80: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x18001394E: free
0x180014488: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x180014228: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x18000DCC8: RevertSyncRoot
0x180014638: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800141B8: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x180015240: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800044B8: CfpReleaseSyncRoot
0x180004348: CfpFreeSyncRoot
0x180003150: CfReleaseProtectedHandle
0x180019760: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180013530: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180013AAD: memcmp
0x1800151E8: "TopHydrator" ??_C@_1BI@OBGMIFDK@?$AAT?$AAo?$AAp?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x180015068: "CfSetPinState" ??_C@_1BM@OODOCIAC@?$AAC?$AAf?$AAS?$AAe?$AAt?$AAP?$AAi?$AAn?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180006240: SyncMessageThread
0x180013A10: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180013A1C: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x18000A10C: CfpBuildTransferPlaceholdersMessage
0x180014CF0: "CfpExecuteAckData" ??_C@_1CE@JLBLMOMA@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAA?$AAc?$AAk?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180014EF8: "CfQuerySyncProviderStatus" ??_C@_1DE@OACDFPMM@?$AAC?$AAf?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAy?$AAn?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18000C060: CfGetPlatformInfo
0x180003B70: CfDehydratePlaceholder
0x1800150B0: "CfGetSyncRootInfoByPath" ??_C@_1DA@KGPCBMGJ@?$AAC?$AAf?$AAG?$AAe?$AAt?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AAI?$AAn?$AAf?$AAo?$AAB?$AAy?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180017650: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180014900: "PopulatePlaceholdersCallback" ??_C@_1DK@CHDILAPN@?$AAP?$AAo?$AAp?$AAu?$AAl?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x18001772C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000DFA0: TlmiRHAppTableFree
0x180014B10: "Global\CfProgressEvent" ??_C@_1CO@OONGPNMA@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAC?$AAf?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x18000E698: TlmiUninitializeRunawayHydrationDetection
0x1800138E2: "__cdecl initterm_e" _initterm_e
0x180014298: "__cdecl _imp_OpenThread" __imp_OpenThread
0x1800132C8: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x1800087D0: CfpGetMessageHeaderSize
0x1800123A8: MicrosoftTelemetryAssertTriggeredWorker
0x18000CB90: GlobalInit
0x180014358: "__cdecl _imp_CharLowerW" __imp_CharLowerW
0x1800130DC: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x180014680: ntdll_NULL_THUNK_DATA
0x1800144E8: "__cdecl _imp_memcpy" __imp_memcpy
0x1800151C8: "HydrationBurst" ??_C@_1BO@PMFNMDIA@?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAB?$AAu?$AAr?$AAs?$AAt?$AA?$AA@
0x180014C40: "MD5" ??_C@_17HLHJLHED@?$AAM?$AAD?$AA5?$AA?$AA@
0x180014C90: "CfpExecuteTransferData" ??_C@_1CO@IENPNDAG@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAT?$AAr?$AAa?$AAn?$AAs?$AAf?$AAe?$AAr?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180013A10: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180014668: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x1800094E4: CfpExecuteRetrieveData
0x1800176C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180016EF4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_AEPIC_dll" __DELAY_IMPORT_DESCRIPTOR_AEPIC_dll
0x180014138: "__cdecl _imp_FilterSendMessage" __imp_FilterSendMessage
0x180014460: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x1800039D0: CfDehydratePlaceholderEx
0x180019730: "__cdecl _security_cookie" __security_cookie
0x180009634: CfpBuildAckDataMessage
0x180014328: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180002710: CfpOplockCompletionKeyTableCompare
0x180003100: CfReferenceProtectedHandle
0x180013348: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180014450: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x1800143A0: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x1800175B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180014B00: "cldapi.dll" ??_C@_0L@KPIEDDO@cldapi?4dll?$AA@
0x1800141E8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001397E: "__cdecl _tailMerge_aepic_dll" __tailMerge_aepic_dll
0x180015250: "__cdecl _xmm@ffffffffffffffffffffffffffffffff" __xmm@ffffffffffffffffffffffffffffffff
0x18000E594: TlmiUpdateFirstRunExpStatus
0x180017678: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180014230: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x180014AE0: "RenameCallback" ??_C@_1BO@JILBNBCO@?$AAR?$AAe?$AAn?$AAa?$AAm?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800111C4: TlmInitialize
0x1800144F8: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x180014DE8: "CfpExecuteAckRename" ??_C@_1CI@DGPPJCCL@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAA?$AAc?$AAk?$AAR?$AAe?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x180014550: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x1800144F0: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x18000CF2C: GlobalPortInit
0x180014318: "__cdecl _imp_QueryUnbiasedInterruptTime" __imp_QueryUnbiasedInterruptTime
0x180019740: "__cdecl _isa_available" __isa_available
0x1800141D8: "__cdecl _imp_GetFileInformationByHandleEx" __imp_GetFileInformationByHandleEx
0x180014188: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800142A8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180014F30: "CfCreatePlaceholders" ??_C@_1CK@EJJBNNAI@?$AAC?$AAf?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x180012A54: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x1800150E0: "CfGetSyncRootInfoByHandle" ??_C@_1DE@LCLIJFL@?$AAC?$AAf?$AAG?$AAe?$AAt?$AAS?$AAy?$AAn?$AAc?$AAR?$AAo?$AAo?$AAt?$AAI?$AAn?$AAf?$AAo?$AAB?$AAy?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x18000B380: CfUpdateSyncProviderStatus
0x1800144B0: "__cdecl _imp__o_free" __imp__o_free
0x180014340: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180014490: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180007550: CfUnregisterSyncRoot
0x180019D54: "__cdecl _favor" __favor
0x1800145A8: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x180003EF0: CfSetCorrelationVector
0x180012E58: "__cdecl _security_init_cookie" __security_init_cookie
0x180014590: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x1800151A8: "CfReportStatus" ??_C@_1BO@IBCGDMPD@?$AAC?$AAf?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800144D8: "__cdecl _imp__cexit" __imp__cexit
0x1800044EC: CfpProcessCallback
0x18000E228: TlmInitializeFirstRunExpStatus
0x1800144A0: "__cdecl _imp_memmove" __imp_memmove
0x180014880: "HydrateCallback" ??_C@_1CA@FJAHGDFN@?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800146E0: "__cdecl _xt_z" __xt_z
0x1800026E0: CfpOplockCompletionKeyTableFree
0x1800143A8: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x18000D11C: CfpRecurseDirectory
0x180014B40: "SOFTWARE\Policies\Microsoft\Clou" ??_C@_1GG@IKAFCEJG@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAl?$AAo?$AAu@
0x1800144B8: "__cdecl _imp_malloc" __imp_malloc
0x180014C00: "Microsoft Primitive Provider" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180014538: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180012F98: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x180014DC0: "CfpExecuteAckDelete" ??_C@_1CI@MOJGIGF@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAA?$AAc?$AAk?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180014678: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x1800026B0: CfpOplockCompletionKeyTableAllocate
0x18001303C: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x18000C960: CfStoreProperties
0x1800135A0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000DFF0: TlmiRHAppTableCompare
0x180012A44: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180014CC0: "CfpExecuteRetrieveData" ??_C@_1CO@FDEBFNBD@?$AAC?$AAf?$AAp?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAe?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18000CB84: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x1800143D0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800177A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x18000F89C: TlmLogApiReliability
0x180019780: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180001C20: CfAbortOperation
0x180003160: CfCloseHandle
0x180014280: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x180008340: CfDisconnectSyncRoot
0x18000BA20: CfQuerySyncProviderStatus
0x180014FB8: "CfRevertPlaceholder" ??_C@_1CI@DPMHKENH@?$AAC?$AAf?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x180002B90: CfOpenFileWithOplock
0x180004020: CfGetCorrelationVector
0x1800121C4: "__cdecl TlgWriteAgg" _TlgWriteAgg
0x18000B100: CfExecute
0x1800144D0: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180014240: "__cdecl _imp_CreateIoCompletionPort" __imp_CreateIoCompletionPort
0x18000C7F0: CfLockProperties
0x18001C008: "__cdecl _imp_PicRetrieveFileInfo" __imp_PicRetrieveFileInfo
0x180017614: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000DA14: AttachFilterToVolume
0x1800144F0: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x1800144D8: "__cdecl _imp__o__cexit" __imp__o__cexit
0x1800144B0: "__cdecl _imp_free" __imp_free
0x1800143F8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180014408: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x180009A2C: CfpBuildRestartHydrationMessage
0x180017754: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x1800016C0: CfReportProviderProgress2
0x18001C000: "__cdecl _imp_PicFreeFileInfo" __imp_PicFreeFileInfo
0x1800143E8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800026E0: CfpSyncRootTableFree
0x1800176DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18001391E: "__cdecl execute_onexit_table" _execute_onexit_table
0x180001690: CfReportProviderProgress
0x180014940: "CancelPopulationCallback" ??_C@_1DC@OOJEBHAO@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAP?$AAo?$AAp?$AAu?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1800138EE: memset
0x180017830: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000AC84: CfpExecuteAckDelete
0x18000A4BC: CfpExecuteTransferPlaceholders
0x180019768: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
0x1800042E0: CfpIsThreadTerminated

[JEB Decompiler by PNF Software]