Generated by JEB on 2019/08/01
PE: C:\Windows\System32\wpdbusenum.dll Base=0x180000000 SHA-256=61BF1500B54145B7CFB8461078A14735DB617B7EDA82AA5250CA0D10865ED865
PDB: WpdBusEnum.pdb GUID={02C4B524-9CBF-A194-D0454808BE1E0856} Age=1
736 located named symbols:
0x18000B818: "private: struct _GUID const * __ptr64 __cdecl CGroupPolicy::MapDevInterfaceGUIDToDevClassGUID(struct _GUID * __ptr64) __ptr64" ?MapDevInterfaceGUIDToDevClassGUID@CGroupPolicy@@AEAAPEBU_GUID@@PEAU2@@Z
0x180010918: "List" ??_C@_19DOLMIDJD@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x18000B434: "private: int __cdecl CGroupPolicy::IsDeviceHotPluggable(void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64) __ptr64" ?IsDeviceHotPluggable@CGroupPolicy@@AEAAHPEAXPEAU_SP_DEVINFO_DATA@@@Z
0x18000F340: "__cdecl _imp_LockResource" __imp_LockResource
0x18000F538: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800068F9: "__cdecl _imp_load_PowerSettingUnregisterNotification" __imp_load_PowerSettingUnregisterNotification
0x180006AF9: "__cdecl _imp_load_CM_Get_DevNode_Status_Ex" __imp_load_CM_Get_DevNode_Status_Ex
0x180006248: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000F488: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x18000F5C0: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x18000F280: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180002FD0: "public: static long __cdecl CGroupPolicy::Create(class CGroupPolicy * __ptr64 * __ptr64)" ?Create@CGroupPolicy@@SAJPEAPEAV1@@Z
0x18000F200: "__cdecl _imp_MsgWaitForMultipleObjectsEx" __imp_MsgWaitForMultipleObjectsEx
0x180006500: "__cdecl FindPESection" _FindPESection
0x180006A8D: "__cdecl _imp_load_SetupDiEnumDeviceInterfaces" __imp_load_SetupDiEnumDeviceInterfaces
0x180002DA0: "private: void __cdecl CBthActiveConnector::_EnterPeriodicWait(void) __ptr64" ?_EnterPeriodicWait@CBthActiveConnector@@AEAAXXZ
0x180010100: "RebootTimeinSeconds_state" ??_C@_1DE@OIPMFPLE@?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAT?$AAi?$AAm?$AAe?$AAi?$AAn?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA_?$AAs?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18000F5B8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180004F00: EnumerateCustomDeviceGUIDs
0x180004E20: WPDLibEnumerateCustomKeys
0x1800160C8: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1800058F0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180012498: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800106F0: "WPDBUSENUM" ??_C@_1BG@FIHEOIG@?$AAW?$AAP?$AAD?$AAB?$AAU?$AAS?$AAE?$AAN?$AAU?$AAM?$AA?$AA@
0x180014040: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000F260: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000FAB8: "EnableCDROM" ??_C@_1BI@HFBMCACN@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$AA@
0x18000F628: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x180002700: "public: static long __cdecl CBthActiveConnector::CreateAndStart(class CBthActiveConnector * __ptr64 * __ptr64,struct SERVICE_STATUS_HANDLE__ * __ptr64)" ?CreateAndStart@CBthActiveConnector@@SAJPEAPEAV1@PEAUSERVICE_STATUS_HANDLE__@@@Z
0x18000F308: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000F2D0: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180005380: "public: __cdecl CGroupPolicy::~CGroupPolicy(void) __ptr64" ??1CGroupPolicy@@QEAA@XZ
0x180005CDC: "__cdecl CRT_INIT" _CRT_INIT
0x18000F528: api-ms-win-devices-swdevice-l1-1-1_NULL_THUNK_DATA
0x18000F380: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180010928: "SeShutdownPrivilege" ??_C@_1CI@NKKEIBLI@?$AAS?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800061B6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1800059C0: "private: static unsigned long __cdecl CBthActiveConnector::_ThreadCreateCallback(void * __ptr64)" ?_ThreadCreateCallback@CBthActiveConnector@@CAKPEAX@Z
0x18000C9CC: "public: void __cdecl CBthActiveConnector::OnDeviceRemoval(void) __ptr64" ?OnDeviceRemoval@CBthActiveConnector@@QEAAXXZ
0x180009C1C: WPP_SF_L
0x180010568: "WPD Default Trace Session" ??_C@_1DE@KGKFMIOB@?$AAW?$AAP?$AAD?$AA?5?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?5?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?5?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180005C48: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x18000F518: api-ms-win-devices-swdevice-l1-1-0_NULL_THUNK_DATA
0x1800097F0: WppControlCallback
0x180006BDE: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x18000FD48: "EnabledDenyGP" ??_C@_1BM@FODCLFHB@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AAD?$AAe?$AAn?$AAy?$AAG?$AAP?$AA?$AA@
0x180007510: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800146F0: "class CGroupPolicy * __ptr64 __ptr64 g_GroupPolicy" ?g_GroupPolicy@@3PEAVCGroupPolicy@@EA
0x1800160F0: "__cdecl _imp_PowerSettingRegisterNotification" __imp_PowerSettingRegisterNotification
0x18000F278: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800104E0: GUID_DEVCLASS_FLOPPYDISK
0x180011E20: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x180010838: "pThis" ??_C@_05DFAKDPOA@pThis?$AA@
0x180005AEC: WPP_INIT_CONTROL_ARRAY
0x18000E510: WPDLibGetUserRebootTime
0x180005BA0: "public: virtual struct ATL::IAtlStringMgr * __ptr64 __cdecl ATL::CAtlStringMgr::Clone(void) __ptr64" ?Clone@CAtlStringMgr@ATL@@UEAAPEAUIAtlStringMgr@2@XZ
0x180003710: "private: static void __cdecl CGroupPolicy::ProcessGPSettingsWork(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ProcessGPSettingsWork@CGroupPolicy@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x180012010: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLN
0x180004FA0: "public: long __cdecl CService::Stop(void) __ptr64" ?Stop@CService@@QEAAJXZ
0x18000C538: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::~CSimpleStringT<unsigned short,0>(void) __ptr64" ??1?$CSimpleStringT@G$0A@@ATL@@QEAA@XZ
0x180016000: "__cdecl _imp_SetupDiGetDeviceInstanceIdW" __imp_SetupDiGetDeviceInstanceIdW
0x18000F640: "__cdecl _imp_wcstoul" __imp_wcstoul
0x18000FC58: "SERVICE_STOPPED" ??_C@_1CA@HGBIIHJJ@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAS?$AAT?$AAO?$AAP?$AAP?$AAE?$AAD?$AA?$AA@
0x180016010: "__cdecl _imp_SetupDiGetDeviceInstallParamsW" __imp_SetupDiGetDeviceInstallParamsW
0x1800107E8: "SBP2" ??_C@_19HDECFHIP@?$AAS?$AAB?$AAP?$AA2?$AA?$AA@
0x18000F1A8: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180006CCC: "private: void __cdecl CGroupPolicy::ApplyGroupPolicyForDiskDevices(struct _ACL * __ptr64,void * __ptr64,unsigned long,int * __ptr64,int,int) __ptr64" ?ApplyGroupPolicyForDiskDevices@CGroupPolicy@@AEAAXPEAU_ACL@@PEAXKPEAHHH@Z
0x18000F630: "__cdecl _imp_memmove_s" __imp_memmove_s
0x1800106D0: "wpdbusenum\fs" ??_C@_1BO@NJAEKODG@?$AAw?$AAp?$AAd?$AAb?$AAu?$AAs?$AAe?$AAn?$AAu?$AAm?$AA?2?$AAf?$AAs?$AA?$AA?$AA?$AA@
0x18000FFB0: "AllowStorageCard" ??_C@_1CC@PGCKDBHB@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AAC?$AAa?$AAr?$AAd?$AA?$AA@
0x18000F1A0: "__cdecl _imp_EnableTrace" __imp_EnableTrace
0x180010958: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000C558: "struct HINSTANCE__ * __ptr64 __cdecl ATL::AtlFindStringResourceInstance(unsigned int,unsigned short)" ?AtlFindStringResourceInstance@ATL@@YAPEAUHINSTANCE__@@IG@Z
0x18000D500: "public: virtual void __cdecl ATL::CAtlStringMgr::Free(struct ATL::CStringData * __ptr64) __ptr64" ?Free@CAtlStringMgr@ATL@@UEAAXPEAUCStringData@2@@Z
0x180012524: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x18000F1D0: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x180012538: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000FB80: "__cdecl _sz_api_ms_win_power_setting_l1_1_0_dll" __sz_api_ms_win_power_setting_l1_1_0_dll
0x1800124AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x18000F1F0: "__cdecl _imp_RegisterDeviceNotificationW" __imp_RegisterDeviceNotificationW
0x180006AE7: "__cdecl _imp_load_SetupDiSetClassPropertyW" __imp_load_SetupDiSetClassPropertyW
0x18000C448: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
0x18000F300: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800104A8: DEVPKEY_Device_InstanceId
0x180005930: WppInitUm
0x18000F3F8: "__cdecl _imp_InitiateShutdownW" __imp_InitiateShutdownW
0x18000F408: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800108E8: "Deny_Read" ??_C@_1BE@MJBNDANP@?$AAD?$AAe?$AAn?$AAy?$AA_?$AAR?$AAe?$AAa?$AAd?$AA?$AA@
0x180006C5C: WPP_SF_DDid
0x180004710: BuildAuditPolicyACL
0x18000F720: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000F430: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000C5FC: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180005510: "public: void __cdecl CBthActiveConnector::Shutdown(void) __ptr64" ?Shutdown@CBthActiveConnector@@QEAAXXZ
0x18000F5B0: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x18000AB04: "long __cdecl GetDeviceInstanceIdFromInterfaceId(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64)" ?GetDeviceInstanceIdFromInterfaceId@@YAJPEBGKPEAG@Z
0x18000FF50: "EnumerateDevices" ??_C@_1CC@CKBCIHMM@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x1800050A0: "public: void __cdecl CService::Shutdown(void) __ptr64" ?Shutdown@CService@@QEAAXXZ
0x180006B0B: "__cdecl _imp_load_CMP_WaitNoPendingInstallEvents" __imp_load_CMP_WaitNoPendingInstallEvents
0x18000F570: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x180005BB0: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::GetNilString(void) __ptr64" ?GetNilString@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@XZ
0x18000F210: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x18000F5F8: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x1800064DD: "__cdecl XcptFilter" _XcptFilter
0x1800160A8: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x18000F580: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x18000E6C0: WPDLibConvertStringGUIDToGUID
0x18000C408: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::CSimpleStringT<unsigned short,0>(struct ATL::IAtlStringMgr * __ptr64) __ptr64" ??0?$CSimpleStringT@G$0A@@ATL@@QEAA@PEAUIAtlStringMgr@1@@Z
0x18000F728: "__cdecl _xc_a" __xc_a
0x18000E9F0: WPDLibRequestSystemReboot
0x18000B068: "private: void __cdecl CGroupPolicy::DisableAllAccessToAllDevices(struct _ACL * __ptr64,void * __ptr64,unsigned long,int * __ptr64) __ptr64" ?DisableAllAccessToAllDevices@CGroupPolicy@@AEAAXPEAU_ACL@@PEAXKPEAH@Z
0x18000B4DC: "private: int __cdecl CGroupPolicy::IsDiskHotPluggable(unsigned long) __ptr64" ?IsDiskHotPluggable@CGroupPolicy@@AEAAHK@Z
0x18000E688: GetBinaryForAscii
0x180011E50: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x180006BF0: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x18000690B: "__cdecl _imp_load_CoTaskMemFree" __imp_load_CoTaskMemFree
0x18000F500: api-ms-win-devices-config-l1-1-1_NULL_THUNK_DATA
0x18000F4F8: "__cdecl _imp_CM_Get_Device_ID_List_SizeW" __imp_CM_Get_Device_ID_List_SizeW
0x18000F520: "__cdecl _imp_SwDeviceSetLifetime" __imp_SwDeviceSetLifetime
0x180005680: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x180016080: "__cdecl _imp_SetupDiSetDeviceRegistryPropertyW" __imp_SetupDiSetDeviceRegistryPropertyW
0x180006AB1: "__cdecl _imp_load_SetupDiCallClassInstaller" __imp_load_SetupDiCallClassInstaller
0x18000F2E8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180006701: "__cdecl lock" _lock
0x180016048: "__cdecl _imp_SetupDiSetClassInstallParamsW" __imp_SetupDiSetClassInstallParamsW
0x180010718: "Reset" ??_C@_1M@PNBPANGG@?$AAR?$AAe?$AAs?$AAe?$AAt?$AA?$AA@
0x1800011A0: "public: long __cdecl CService::Start(unsigned short const * __ptr64,int) __ptr64" ?Start@CService@@QEAAJPEBGH@Z
0x180006413: "__cdecl callnewh" _callnewh
0x180010438: GUID_DEVINTERFACE_FLOPPY
0x18000F1C0: "__cdecl _imp_UnregisterWait" __imp_UnregisterWait
0x18000F82C: "__cdecl _guard_iat_table" __guard_iat_table
0x1800074DD: memcpy
0x18000FDE0: "RebootTimeinSeconds" ??_C@_1CI@EHFFMMIB@?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAT?$AAi?$AAm?$AAe?$AAi?$AAn?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x18000F330: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000744C: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18000F670: "__cdecl _imp_memset" __imp_memset
0x18000F420: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000F298: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x1800066BF: "__cdecl initterm" _initterm
0x18000F530: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000F840: "TriggerStarted" ??_C@_1BO@ENMMCDHK@?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x1800124E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800146B8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180010750: "pGroupPolicy" ??_C@_0N@OKLFPJHI@pGroupPolicy?$AA@
0x18000F450: "__cdecl _imp_Sleep" __imp_Sleep
0x18000E33C: MergeUserLists
0x18000F770: "__cdecl _xi_z" __xi_z
0x180014680: "__cdecl _hmod__SHLWAPI_dll" __hmod__SHLWAPI_dll
0x1800101E8: "%ws" ??_C@_17EEOGHOKP@?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000F248: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180009D08: "protected: __int64 __cdecl CPnPNotification::HandleDeviceArrival(struct _DEV_BROADCAST_DEVICEINTERFACE_W * __ptr64) __ptr64" ?HandleDeviceArrival@CPnPNotification@@IEAA_JPEAU_DEV_BROADCAST_DEVICEINTERFACE_W@@@Z
0x18000A96C: "long __cdecl Service_Release(void)" ?Service_Release@@YAJXZ
0x18000F6D8: "__cdecl _imp_wcscmp" __imp_wcscmp
0x1800064D1: "__cdecl _C_specific_handler" __C_specific_handler
0x18000F1E0: "__cdecl _imp_WTSGetActiveConsoleSessionId" __imp_WTSGetActiveConsoleSessionId
0x180014700: "unsigned long AccessCode" ?AccessCode@@3KA
0x18000FA88: GUID_DEVINTERFACE_BUSENUM_MTPBTH
0x1800146D8: "int g_fShutdownTimerSet" ?g_fShutdownTimerSet@@3HA
0x18000C6C4: "public: long __cdecl ATL::CRegKey::Create(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long * __ptr64) __ptr64" ?Create@CRegKey@ATL@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAK@Z
0x180016030: "__cdecl _imp_SetupDiEnumDeviceInfo" __imp_SetupDiEnumDeviceInfo
0x18000F668: "__cdecl _imp__onexit" __imp__onexit
0x18000F890: GUID_LOW_POWER_EPOCH
0x18000F2B8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180010280: CLSID_PortableDevice
0x180014748: WPP_REGISTRATION_GUIDS
0x180014898: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunfogrnvwrzUdkwUwirevihUxozhhUuhUdkwyfhvmfnUlyquivUznwGEUhgwzucOlyq@WpdBusEnum" __@@_PchSym_@00@KxulyqvxgPillgKxunfogrnvwrzUdkwUwirevihUxozhhUuhUdkwyfhvmfnUlyquivUznwGEUhgwzucOlyq@WpdBusEnum
0x1800052F0: "protected: long __cdecl CPnPNotification::UnregisterNotification(void) __ptr64" ?UnregisterNotification@CPnPNotification@@IEAAJXZ
0x180010210: "%ws\{%08x-%04x-%04x-%02x%02x-%02" ??_C@_1GO@FPPFOMBG@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2@
0x1800061F4: malloc
0x18000CBF8: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::SetString(unsigned short const * __ptr64,int) __ptr64" ?SetString@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x18000F2B0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800106A8: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18000F3C8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000F208: "__cdecl _imp_PeekMessageW" __imp_PeekMessageW
0x18000674C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000FAA8: GUID_ATLVer70
0x18000D600: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Reallocate(void * __ptr64,unsigned __int64) __ptr64" ?Reallocate@CWin32Heap@ATL@@UEAAPEAXPEAX_K@Z
0x18000FD38: WPP_d1a2119d17e136454f1bb694a6d49ab0_Traceguids
0x1800146E8: "long g_RefCount" ?g_RefCount@@3JA
0x18000F3D8: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18000CA8C: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18000FEC0: "HotplugSecureOpen" ??_C@_1CE@DJDFODLP@?$AAH?$AAo?$AAt?$AAp?$AAl?$AAu?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x1800104D0: GUID_DEVCLASS_WPD
0x180014720: WPP_MAIN_CB
0x1800126A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000F3C0: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1800064E9: "__cdecl amsg_exit" _amsg_exit
0x18000F618: "__cdecl _imp__callnewh" __imp__callnewh
0x180011FA8: SHLWAPI_NULL_THUNK_DATA_DLN
0x18000FBD0: "__cdecl _sz_WTSAPI32_dll" __sz_WTSAPI32_dll
0x180010950: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000F9C8: "RegCacheState" ??_C@_1BM@KHCJNGGA@?$AAR?$AAe?$AAg?$AAC?$AAa?$AAc?$AAh?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180010490: DEVPKEY_WpdFs_VolumePath
0x180014670: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x18000FB2A: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x18000F4B0: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x18000D440: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Allocate(int,int) __ptr64" ?Allocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@HH@Z
0x180011E70: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll
0x18000F6B0: "__cdecl _imp__lock" __imp__lock
0x1800064B4: atexit
0x18000E478: UpdateAccessMaskForGUID
0x180011FC8: WTSAPI32_NULL_THUNK_DATA_DLN
0x1800160B8: WTSAPI32_NULL_THUNK_DATA_DLA
0x1800123F8: WTSAPI32_NULL_THUNK_DATA_DLB
0x1800147F0: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x1800140B0: StorageDeviceAccess
0x1800160E0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x180010158: "__cdecl GUID_bfdef549_9247_454f_bd82_06fe80853faa" _GUID_bfdef549_9247_454f_bd82_06fe80853faa
0x18000F608: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x18000F410: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180009FC0: "public: long __cdecl CWPDBus::AddPersistedVolumeShadowDevice(unsigned short const * __ptr64) __ptr64" ?AddPersistedVolumeShadowDevice@CWPDBus@@QEAAJPEBG@Z
0x1800160F8: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x18000BE34: "private: long __cdecl CGroupPolicy::SetRegCacheUpdated(unsigned long) __ptr64" ?SetRegCacheUpdated@CGroupPolicy@@AEAAJK@Z
0x1800160A0: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x18000F3F0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000F550: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800147B8: "class ATL::CAtlStringMgr ATL::g_strmgr" ?g_strmgr@ATL@@3VCAtlStringMgr@1@A
0x180011E90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll
0x180016038: "__cdecl _imp_SetupDiGetClassDevsW" __imp_SetupDiGetClassDevsW
0x18000F578: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x18000F268: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000F548: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000691D: "__cdecl _imp_load_SHCreateThread" __imp_load_SHCreateThread
0x180011DF8: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x1800040B0: WPDLibCheckGivenDeviceGUID
0x18000F370: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180006719: "__cdecl _dllonexit" __dllonexit
0x180010150: "entered" ??_C@_07JGIFMBGE@entered?$AA@
0x18000FC78: "SERVICE_START_PENDING" ??_C@_1CM@JKILMMJN@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?$AA@
0x180006B41: "__cdecl _imp_load_SetupDiGetDeviceInstanceIdW" __imp_load_SetupDiGetDeviceInstanceIdW
0x180016008: "__cdecl _imp_SetupDiSetDeviceInstallParamsW" __imp_SetupDiSetDeviceInstallParamsW
0x180009E1C: "public: __int64 __cdecl CPnPNotification::HandleDeviceChange(unsigned long,struct _DEV_BROADCAST_DEVICEINTERFACE_W * __ptr64) __ptr64" ?HandleDeviceChange@CPnPNotification@@QEAA_JKPEAU_DEV_BROADCAST_DEVICEINTERFACE_W@@@Z
0x18000FD80: "SYSTEM\CurrentControlSet\Control" ??_C@_1FM@NOKMKBNC@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180014698: "__cdecl _native_startup_lock" __native_startup_lock
0x180006C04: DllMain
0x180016028: "__cdecl _imp_SetupDiSetClassPropertyW" __imp_SetupDiSetClassPropertyW
0x180002A10: "private: long __cdecl CBthActiveConnector::_Run(void) __ptr64" ?_Run@CBthActiveConnector@@AEAAJXZ
0x1800146D0: "class CWPDBus * __ptr64 __ptr64 g_WPDBus" ?g_WPDBus@@3PEAVCWPDBus@@EA
0x18000F1C8: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x18000F6C8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000F610: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000F6E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000F350: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C864: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGPEAD@Z
0x18000F1E8: KERNEL32_NULL_THUNK_DATA
0x18000F258: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180005C54: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000F2A8: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180006AC3: "__cdecl _imp_load_SetupDiGetClassDevsW" __imp_load_SetupDiGetClassDevsW
0x180014030: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180006728: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000687A: "__cdecl _tailMerge_api_ms_win_power_setting_l1_1_0_dll" __tailMerge_api_ms_win_power_setting_l1_1_0_dll
0x18000B360: "private: int __cdecl CGroupPolicy::GetDeviceSecurity(void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetDeviceSecurity@CGroupPolicy@@AEAAHPEAXPEAU_SP_DEVINFO_DATA@@PEAPEAEPEAK@Z
0x1800028F0: "private: long __cdecl CBthActiveConnector::_InitializeDeviceCount(void) __ptr64" ?_InitializeDeviceCount@CBthActiveConnector@@AEAAJXZ
0x18000FB60: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x18000F680: "__cdecl _imp_memcmp" __imp_memcmp
0x180016050: "__cdecl _imp_SetupDiDestroyDeviceInfoList" __imp_SetupDiDestroyDeviceInfoList
0x1800106B8: "Disabled" ??_C@_1BC@FGCJDNHA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180006A33: "__cdecl _imp_load_SetupDiCreateDeviceInfoList" __imp_load_SetupDiCreateDeviceInfoList
0x180005B10: "void __cdecl SvchostPushServiceGlobals(struct _SVCHOST_GLOBAL_DATA * __ptr64)" ?SvchostPushServiceGlobals@@YAXPEAU_SVCHOST_GLOBAL_DATA@@@Z
0x180010448: GUID_DEVINTERFACE_CDROM
0x18000CAE0: "public: void __cdecl ATL::CStringData::Release(void) __ptr64" ?Release@CStringData@ATL@@QEAAXXZ
0x18001268C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180011FF8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x180010558: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180004890: "private: void __cdecl CGroupPolicy::PersistEnabledDenyGP(void) __ptr64" ?PersistEnabledDenyGP@CGroupPolicy@@AEAAXXZ
0x180006AD5: "__cdecl _imp_load_SetupDiEnumDeviceInfo" __imp_load_SetupDiEnumDeviceInfo
0x180012310: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x1800160E8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x180016020: "__cdecl _imp_CM_Get_DevNode_Status_Ex" __imp_CM_Get_DevNode_Status_Ex
0x1800126F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000F358: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000F428: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000FE88: "HotplugSecurityDescriptor" ??_C@_1DE@INGEEAKF@?$AAH?$AAo?$AAt?$AAp?$AAl?$AAu?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1800126C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x18000CD70: "private: int __cdecl CBthActiveConnector::_IsActiveConnectEnabled(unsigned short const * __ptr64) __ptr64" ?_IsActiveConnectEnabled@CBthActiveConnector@@AEAAHPEBG@Z
0x18000F048: "const ATL::CWin32Heap::`vftable'" ??_7CWin32Heap@ATL@@6B@
0x18000F3E8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180010950: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800065B0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180016078: "__cdecl _imp_SetupDiGetDeviceRegistryPropertyW" __imp_SetupDiGetDeviceRegistryPropertyW
0x18000FC40: "g_PnPNotification" ??_C@_0BC@EHINPOJH@g_PnPNotification?$AA@
0x18000FF78: "UserPolicy" ??_C@_1BG@KFJPAMAO@?$AAU?$AAs?$AAe?$AAr?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1800146C8: "class CBthActiveConnector * __ptr64 __ptr64 g_BthActiveConnector" ?g_BthActiveConnector@@3PEAVCBthActiveConnector@@EA
0x18000F320: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x1800066DC: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180009A20: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1800125B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180014688: "__cdecl _hmod__SETUPAPI_dll" __hmod__SETUPAPI_dll
0x18000F874: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180009AC0: WPP_SF_
0x180010690: WPP_06c6ff15b7433edc02ae14ceb0838474_Traceguids
0x18000D4E0: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Allocate(unsigned __int64) __ptr64" ?Allocate@CWin32Heap@ATL@@UEAAPEAX_K@Z
0x18000F288: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x18000F2C8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180016058: "__cdecl _imp_SetupDiEnumDeviceInterfaces" __imp_SetupDiEnumDeviceInterfaces
0x1800107E0: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x18000F338: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180011EF0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000FBC0: "__cdecl _sz_SETUPAPI_dll" __sz_SETUPAPI_dll
0x180014008: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180002EC0: "private: long __cdecl CBthActiveConnector::_RefreshWaitInterval(void) __ptr64" ?_RefreshWaitInterval@CBthActiveConnector@@AEAAJXZ
0x180005F20: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000D550: "public: virtual unsigned __int64 __cdecl ATL::CWin32Heap::GetSize(void * __ptr64) __ptr64" ?GetSize@CWin32Heap@ATL@@UEAA_KPEAX@Z
0x18000F6D0: "__cdecl _imp__initterm" __imp__initterm
0x180016090: "__cdecl _imp_SHCreateThread" __imp_SHCreateThread
0x180006B5F: "__cdecl _tailMerge_wtsapi32_dll" __tailMerge_wtsapi32_dll
0x180010148: "exited" ??_C@_06GDJOEJPA@exited?$AA@
0x18000F190: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x180006A9F: "__cdecl _imp_load_SetupDiSetClassInstallParamsW" __imp_load_SetupDiSetClassInstallParamsW
0x1800160D8: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x180014710: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x1800126DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000BD70: "private: int __cdecl CGroupPolicy::SetDeviceSecurityAndRestart(void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64,void * __ptr64,unsigned long,int,int * __ptr64) __ptr64" ?SetDeviceSecurityAndRestart@CGroupPolicy@@AEAAHPEAXPEAU_SP_DEVINFO_DATA@@0KHPEAH@Z
0x180012368: SETUPAPI_NULL_THUNK_DATA_DLB
0x180016088: SETUPAPI_NULL_THUNK_DATA_DLA
0x180011F98: SETUPAPI_NULL_THUNK_DATA_DLN
0x18000F470: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x18000D820: AddSystemToACL
0x1800124C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000CCD0: "struct ATL::ATLSTRINGRESOURCEIMAGE const * __ptr64 __cdecl ATL::_AtlGetStringResourceImage(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64,unsigned int)" ?_AtlGetStringResourceImage@ATL@@YAPEBUATLSTRINGRESOURCEIMAGE@1@PEAUHINSTANCE__@@PEAUHRSRC__@@I@Z
0x180010480: WPP_ThisDir_CTLGUID_CtlGuidWpdBusEnum
0x180004030: StringCchPrintfW
0x18000F598: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180010810: "pszVolumePath" ??_C@_0O@BEGFCEDO@pszVolumePath?$AA@
0x1800055F0: "public: __cdecl ATL::CAtlBaseModule::CAtlBaseModule(void) __ptr64" ??0CAtlBaseModule@ATL@@QEAA@XZ
0x18000FF08: "SecurityDescriptor" ??_C@_1CG@KBIJJJCD@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x18000FC00: "PortableDeviceApi.dll" ??_C@_1CM@MLNJDOFK@?$AAP?$AAo?$AAr?$AAt?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAA?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800146A8: "__cdecl _onexitend" __onexitend
0x18000F590: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000670D: "__cdecl unlock" _unlock
0x18000F718: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005A50: "public: __cdecl ATL::CAtlBaseModule::~CAtlBaseModule(void) __ptr64" ??1CAtlBaseModule@ATL@@QEAA@XZ
0x18000F8A0: "System\CurrentControlSet\Service" ??_C@_1HM@BHBGHOFK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18000F688: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x18000F400: api-ms-win-core-shutdown-l1-1-1_NULL_THUNK_DATA
0x180006210: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800106A0: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18000F368: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800010E0: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64 const)" ?ServiceMain@@YAXKQEAPEAG@Z
0x18000F220: USER32_NULL_THUNK_DATA
0x18000F4B8: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180010820: "pszChildDeviceIdList" ??_C@_0BF@MPICGILC@pszChildDeviceIdList?$AA@
0x180006A45: "__cdecl _imp_load_SetupDiOpenDeviceInterfaceW" __imp_load_SetupDiOpenDeviceInterfaceW
0x18000F5A8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000685C: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x180014690: "__cdecl _hmod__WTSAPI32_dll" __hmod__WTSAPI32_dll
0x18000F478: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000F760: "__cdecl _xi_a" __xi_a
0x180006A57: "__cdecl _imp_load_SetupDiGetDeviceInterfaceDetailW" __imp_load_SetupDiGetDeviceInterfaceDetailW
0x180010730: "phCallback" ??_C@_0L@MMOEFNGN@phCallback?$AA@
0x18000F970: "SYSTEM\CurrentControlSet\Control" ??_C@_1FC@EEDELKA@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180005580: "public: __cdecl ATL::CAtlWinModule::CAtlWinModule(void) __ptr64" ??0CAtlWinModule@ATL@@QEAA@XZ
0x18000F460: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180012358: SHLWAPI_NULL_THUNK_DATA_DLB
0x18000F238: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180011EB0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll
0x18000F658: "__cdecl _imp__unlock" __imp__unlock
0x180005780: "public: __cdecl ATL::CAtlWinModule::~CAtlWinModule(void) __ptr64" ??1CAtlWinModule@ATL@@QEAA@XZ
0x18000F5C8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180010760: "%08x-%04x-%04x-%02x%02x-%02x%02x" ??_C@_1GC@MIJCAPDC@?$AA?$CF?$AA0?$AA8?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx@
0x180010050: "MDMRegSet" ??_C@_1BE@MHPAIHCK@?$AAM?$AAD?$AAM?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AA?$AA@
0x1800160C0: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x1800108A8: "EnableActiveConnect" ??_C@_1CI@HHCJOPKL@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x180006B53: "__cdecl _imp_load_WTSQueryUserToken" __imp_load_WTSQueryUserToken
0x18000F218: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x18000A9FC: WPP_SF_Dd
0x18000AA4C: WPP_SF_dD
0x180009C64: WPP_SF_dd
0x18000A914: "long __cdecl Service_AddRef(void)" ?Service_AddRef@@YAJXZ
0x18000A504: WPP_SF_DS
0x180005B48: "public: void * __ptr64 __cdecl CGroupPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCGroupPolicy@@QEAAPEAXI@Z
0x18000E158: GetGPUserSid
0x180014000: WPP_GLOBAL_Control
0x180012628: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180009AE4: WPP_SF_D
0x180009AE4: WPP_SF_d
0x18000F348: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x18000F6F8: "__cdecl _imp_NtQueryVolumeInformationFile" __imp_NtQueryVolumeInformationFile
0x1800146C0: "__cdecl pRawDllMain" _pRawDllMain
0x18000F4C8: "__cdecl _imp_CM_Get_Device_Interface_PropertyW" __imp_CM_Get_Device_Interface_PropertyW
0x18000F648: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000FD28: "__cdecl GUID_625e2df8_6392_4cf0_9ad1_3cfa5f17775c" _GUID_625e2df8_6392_4cf0_9ad1_3cfa5f17775c
0x180010180: "{%08x-%04x-%04x-%02x%02x-%02x%02" ??_C@_1GG@HENFDGCJ@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2@
0x180010070: "Software\Policies\Microsoft\Wind" ??_C@_1HI@IIMCEKGP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18000F270: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x18000A7A8: "public: long __cdecl CService::ReportStatus(unsigned long,unsigned long,unsigned long,unsigned long) __ptr64" ?ReportStatus@CService@@QEAAJKKKK@Z
0x18000F878: "WpdBusEnum" ??_C@_1BG@MJIAMNMD@?$AAW?$AAp?$AAd?$AAB?$AAu?$AAs?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x18000C61C: "public: long __cdecl ATL::CRegKey::Close(void) __ptr64" ?Close@CRegKey@ATL@@QEAAJXZ
0x18000F5A0: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x18000D520: "public: virtual void __cdecl ATL::CWin32Heap::Free(void * __ptr64) __ptr64" ?Free@CWin32Heap@ATL@@UEAAXPEAX@Z
0x18000F660: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180014850: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180010290: CLSID_EnumBthMtpConnectors
0x180005C3C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000F620: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x18000F000: "const type_info::`vftable'" ??_7type_info@@6B@
0x18001263C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000F4D0: "__cdecl _imp_CM_MapCrToWin32Err" __imp_CM_MapCrToWin32Err
0x18000F438: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800126B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1
0x1800061D0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000FA98: GUID_DEVINTERFACE_VOLUME
0x18000E45C: SessionNotActive
0x18001489C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18000F758: "__cdecl _xc_z" __xc_z
0x180006838: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x180012600: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000F388: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180014678: "__cdecl _hmod__api_ms_win_power_setting_l1_1_0_dll" __hmod__api_ms_win_power_setting_l1_1_0_dll
0x1800108D0: "DCInterval" ??_C@_1BG@GJMMHOBF@?$AAD?$AAC?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x18000F4A0: "__cdecl _imp_WaitForThreadpoolWorkCallbacks" __imp_WaitForThreadpoolWorkCallbacks
0x18000C734: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Empty(void) __ptr64" ?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
0x180005A90: WppCleanupUm
0x1800069B4: "__cdecl _tailMerge_setupapi_dll" __tailMerge_setupapi_dll
0x18000C83C: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
0x18000743E: "__cdecl CxxThrowException" _CxxThrowException
0x1800107F8: "FLASHMEDIA" ??_C@_1BG@LPHOCLGE@?$AAF?$AAL?$AAA?$AAS?$AAH?$AAM?$AAE?$AAD?$AAI?$AAA?$AA?$AA@
0x18000F310: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800160D0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180005B70: "public: __cdecl ATL::CComPtr<struct IEnumPortableDeviceConnectors>::~CComPtr<struct IEnumPortableDeviceConnectors>(void) __ptr64" ??1?$CComPtr@UIEnumPortableDeviceConnectors@@@ATL@@QEAA@XZ
0x18000F468: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000F2C0: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1800069A8: "__cdecl _imp_load_SetupDiDestroyDeviceInfoList" __imp_load_SetupDiDestroyDeviceInfoList
0x18000F2F8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18000FD68: "Access Code" ??_C@_1BI@JILIKMCN@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18000F5D8: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x18000F228: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800104F0: DEVPKEY_DeviceClass_Security
0x18000F2E0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000C4EC: "public: __cdecl ATL::CAutoPtr<class CBthActiveConnector>::~CAutoPtr<class CBthActiveConnector>(void) __ptr64" ??1?$CAutoPtr@VCBthActiveConnector@@@ATL@@QEAA@XZ
0x18000F508: "__cdecl _imp_SwDeviceClose" __imp_SwDeviceClose
0x180016040: "__cdecl _imp_SetupDiCallClassInstaller" __imp_SetupDiCallClassInstaller
0x180004DC0: WPDLibUpdateSecurityDescriptorList
0x180016018: "__cdecl _imp_CMP_WaitNoPendingInstallEvents" __imp_CMP_WaitNoPendingInstallEvents
0x18000F600: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x18000F4A8: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x180006210: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18000CBC0: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::SetLength(int) __ptr64" ?SetLength@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18000F2D8: "__cdecl _imp_HeapSize" __imp_HeapSize
0x18000E208: GetSecurityDescriptorForACL
0x18000E01C: GetAccessRights
0x18000C794: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x180010728: "Set" ??_C@_17PNBAHNJB@?$AAS?$AAe?$AAt?$AA?$AA@
0x1800146E0: "struct _TP_TIMER * __ptr64 __ptr64 g_shutdownTimer" ?g_shutdownTimer@@3PEAU_TP_TIMER@@EA
0x18000DB4C: BuildMachinePolicyACL
0x180014750: "class CService _Service" ?_Service@@3VCService@@A
0x18000FCC8: "SERVICE_STOP_PENDING" ??_C@_1CK@KDCCLGNG@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAS?$AAT?$AAO?$AAP?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?$AA@
0x18000F4C0: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x1800107D0: "USBSTOR" ??_C@_1BA@DKDDNJBG@?$AAU?$AAS?$AAB?$AAS?$AAT?$AAO?$AAR?$AA?$AA@
0x180005C0C: "public: virtual __cdecl ATL::CWin32Heap::~CWin32Heap(void) __ptr64" ??1CWin32Heap@ATL@@UEAA@XZ
0x18000CA20: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18000684A: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x1800029F0: "private: static unsigned long __cdecl CBthActiveConnector::_ThreadProc(void * __ptr64)" ?_ThreadProc@CBthActiveConnector@@CAKPEAX@Z
0x18000F4E8: "__cdecl _imp_CM_Locate_DevNodeW" __imp_CM_Locate_DevNodeW
0x18000F510: "__cdecl _imp_SwDeviceCreate" __imp_SwDeviceCreate
0x18000F860: DEVPKEY_Storage_Portable
0x18000F3A0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180002200: "public: static unsigned long __cdecl CService::ServiceControlHandler(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?ServiceControlHandler@CService@@SAKKKPEAX0@Z
0x18000F778: "__cdecl _guard_fids_table" __guard_fids_table
0x18000F1B8: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x18000C538: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::~CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(void) __ptr64" ??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
0x1800147A0: "class ATL::CWin32Heap ATL::g_strheap" ?g_strheap@ATL@@3VCWin32Heap@1@A
0x180002E30: "private: unsigned long __cdecl CBthActiveConnector::_WaitForEvent(void * __ptr64,unsigned long) __ptr64" ?_WaitForEvent@CBthActiveConnector@@AEAAKPEAXK@Z
0x18000F6E0: msvcrt_NULL_THUNK_DATA
0x18000F070: "__cdecl load_config_used" _load_config_used
0x18000F290: "__cdecl _imp_GetVolumePathNamesForVolumeNameW" __imp_GetVolumePathNamesForVolumeNameW
0x180011E30: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x180012614: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000F178: "__cdecl _imp_AuditQueryPerUserPolicy" __imp_AuditQueryPerUserPolicy
0x18000F390: "__cdecl _imp_QueryPerformanceFrequency" __imp_QueryPerformanceFrequency
0x180010840: "Software\Microsoft\Windows Porta" ??_C@_1GI@MFGBOAHD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAP?$AAo?$AAr?$AAt?$AAa@
0x180012560: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-swdevice-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-devices-swdevice-l1-1-0
0x18000BEDC: "private: void __cdecl CGroupPolicy::SetWPDSecurityInfo(unsigned short const * __ptr64,void * __ptr64 const,unsigned long) __ptr64" ?SetWPDSecurityInfo@CGroupPolicy@@AEAAXPEBGQEAXK@Z
0x1800067AD: "__cdecl _imp_load_StringFromGUID2" __imp_load_StringFromGUID2
0x18000C514: "public: __cdecl ATL::CHeapPtr<unsigned short,class ATL::CCRTAllocator>::~CHeapPtr<unsigned short,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CHeapPtr@GVCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18000F240: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000F230: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000FEE8: "DenyAllGPState" ??_C@_1BO@IFANOIDK@?$AAD?$AAe?$AAn?$AAy?$AAA?$AAl?$AAl?$AAG?$AAP?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180010740: WPP_bae4533ee6bf3a2554129ccf297fcbba_Traceguids
0x180012574: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180012678: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x180010138: WPP_027e993442af354eeff5b09470cae6bf_Traceguids
0x18000F6A8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000FA00: "SOFTWARE\Policies\Microsoft\Wind" ??_C@_1IG@DCEDEIL@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18000ABD8: "unsigned long __cdecl GetSystemTime(void)" ?GetSystemTime@@YAKXZ
0x180001D70: "public: int __cdecl CWPDBus::IsValidWPDVolume(unsigned short const * __ptr64) __ptr64" ?IsValidWPDVolume@CWPDBus@@QEAAHPEBG@Z
0x18000AFCC: "private: int __cdecl CGroupPolicy::CheckIfGPBeingEnabled(unsigned char * __ptr64,unsigned long) __ptr64" ?CheckIfGPBeingEnabled@CGroupPolicy@@AEAAHPEAEK@Z
0x18000BB94: "private: int __cdecl CGroupPolicy::RestartDeviceWithNewAccessRights(void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64,int * __ptr64) __ptr64" ?RestartDeviceWithNewAccessRights@CGroupPolicy@@AEAAHPEAXPEAU_SP_DEVINFO_DATA@@PEAH@Z
0x18000F318: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x180004030: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000E914: WPDLibRemoveDuplicateEntries
0x180009F8C: "long __cdecl ATL::AtlMultiply<unsigned __int64>(unsigned __int64 * __ptr64,unsigned __int64,unsigned __int64)" ??$AtlMultiply@_K@ATL@@YAJPEA_K_K1@Z
0x180016098: SHLWAPI_NULL_THUNK_DATA_DLA
0x18000F700: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000F398: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000FF30: "AccessBitMask" ??_C@_1BM@NKFJIGPJ@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAB?$AAi?$AAt?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x18000F480: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x18000F4F0: "__cdecl _imp_CM_Set_DevNode_PropertyW" __imp_CM_Set_DevNode_PropertyW
0x18000BCD0: "private: int __cdecl CGroupPolicy::RestartDisk(unsigned long,int * __ptr64) __ptr64" ?RestartDisk@CGroupPolicy@@AEAAHKPEAH@Z
0x180006200: free
0x180003720: "private: void __cdecl CGroupPolicy::ProcessGPSettings(void) __ptr64" ?ProcessGPSettings@CGroupPolicy@@AEAAXXZ
0x180012588: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-swdevice-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-swdevice-l1-1-1
0x18000F708: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180010958: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000F920: "ACInterval" ??_C@_1BG@CCEFIJNF@?$AAA?$AAC?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x18000B708: "private: int __cdecl CGroupPolicy::IsHotPluggableBus(void * __ptr64) __ptr64" ?IsHotPluggableBus@CGroupPolicy@@AEAAHPEAX@Z
0x1800066D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800074D1: memcmp
0x180004820: WPDLibDeleteRegistryValue
0x1800067B9: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x18000F698: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180010468: GUID_DEVINTERFACE_TAPE
0x180014050: "struct _GUID * GP_WellKnown_GUIDS" ?GP_WellKnown_GUIDS@@3PAU_GUID@@A
0x18000D570: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Reallocate(struct ATL::CStringData * __ptr64,int,int) __ptr64" ?Reallocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@PEAU32@HH@Z
0x1800071CC: "private: void __cdecl CGroupPolicy::UpdateMdmPolicy(void) __ptr64" ?UpdateMdmPolicy@CGroupPolicy@@AEAAXXZ
0x18000F5E0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180006929: "__cdecl _tailMerge_shlwapi_dll" __tailMerge_shlwapi_dll
0x18001254C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180016060: "__cdecl _imp_SetupDiCreateDeviceInfoList" __imp_SetupDiCreateDeviceInfoList
0x180010900: "Deny_Write" ??_C@_1BG@KBGDNDPP@?$AAD?$AAe?$AAn?$AAy?$AA_?$AAW?$AAr?$AAi?$AAt?$AAe?$AA?$AA@
0x1800101F0: "Deny_Execute" ??_C@_1BK@CNPDEJDJ@?$AAD?$AAe?$AAn?$AAy?$AA_?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?$AA@
0x18000F568: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x1800146F8: "class CPnPNotification * __ptr64 __ptr64 g_PnPNotification" ?g_PnPNotification@@3PEAVCPnPNotification@@EA
0x180006408: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000F560: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000FE10: "SOFTWARE\Policies\Microsoft\Wind" ??_C@_1HI@DKNHCAEG@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x180006B1D: "__cdecl _imp_load_SetupDiGetDeviceInstallParamsW" __imp_load_SetupDiGetDeviceInstallParamsW
0x180003230: "private: void __cdecl CGroupPolicy::RetrieveEnabledDenyGP(void) __ptr64" ?RetrieveEnabledDenyGP@CGroupPolicy@@AEAAXXZ
0x18000F650: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000F1D8: "__cdecl _imp_GetSystemPowerStatus" __imp_GetSystemPowerStatus
0x18000F710: ntdll_NULL_THUNK_DATA
0x18000F678: "__cdecl _imp_memcpy" __imp_memcpy
0x180010708: WPP_1cf05669927735a642748c3097e84551_Traceguids
0x180012510: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1
0x180010548: GUID_DEVCLASS_TAPEDRIVE
0x180010508: DEVPKEY_Storage_System_Critical
0x180004D40: WPDLibSetRegistryValue
0x18000F018: "const ATL::CAtlStringMgr::`vftable'" ??_7CAtlStringMgr@ATL@@6B@
0x18000F558: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18001259C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000C54C: "public: __cdecl ATL::CRegKey::~CRegKey(void) __ptr64" ??1CRegKey@ATL@@QEAA@XZ
0x18000F498: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x18000F5E8: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x18000F6B8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000F540: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180014038: "__cdecl _security_cookie" __security_cookie
0x18000F3A8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000686E: "__cdecl _imp_load_PowerSettingRegisterNotification" __imp_load_PowerSettingRegisterNotification
0x18000F9E8: Audit_ObjectAccess_RemovableStorage
0x18000F490: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x18000F418: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18000F2A0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800160B0: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x18000F6F0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1800124D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x18000F2F0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000AC2C: "private: void __cdecl CGroupPolicy::ApplyGroupPolicyForDevices(struct _GUID * __ptr64,struct _ACL * __ptr64,void * __ptr64,unsigned long,int * __ptr64) __ptr64" ?ApplyGroupPolicyForDevices@CGroupPolicy@@AEAAXPEAU_GUID@@PEAU_ACL@@PEAXKPEAH@Z
0x180012338: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLB
0x18000FFE0: "Software\Microsoft\PolicyManager" ??_C@_1GO@GFBCCKKE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr@
0x180004F70: "protected: static void __cdecl CService::StopServiceCallback(void * __ptr64,unsigned char)" ?StopServiceCallback@CService@@KAXPEAXE@Z
0x1800124FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800100E8: "Deny_All" ??_C@_1BC@DHJCDOKF@?$AAD?$AAe?$AAn?$AAy?$AA_?$AAA?$AAl?$AAl?$AA?$AA@
0x18000F3D0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000CCB8: "protected: static void __cdecl ATL::CSimpleStringT<unsigned short,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@G$0A@@ATL@@KAXXZ
0x1800146B0: "__cdecl _onexitbegin" __onexitbegin
0x18000F4E0: "__cdecl _imp_CM_Get_Device_ID_ListW" __imp_CM_Get_Device_ID_ListW
0x18000F180: "__cdecl _imp_AuditFree" __imp_AuditFree
0x18000D3D0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAtlStringMgr@ATL@@UEAAPEAXI@Z
0x180009878: "public: void __cdecl CWPDTraceControl::StopTracing(void) __ptr64" ?StopTracing@CWPDTraceControl@@QEAAXXZ
0x18000F690: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180006A7B: "__cdecl _imp_load_SetupDiSetDeviceRegistryPropertyW" __imp_load_SetupDiSetDeviceRegistryPropertyW
0x18000A674: WPP_SF_qD
0x18000A75C: WPP_SF_qd
0x18000F938: "RegCacheUpdated" ??_C@_1CA@PBKDADGK@?$AAR?$AAe?$AAg?$AAC?$AAa?$AAc?$AAh?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x18000F250: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000F360: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180010168: WPP_64874f64b2ec30ce0e07030e2eeaa9eb_Traceguids
0x18000AAA0: WPP_SF_qq
0x18000A6CC: WPP_SF_qS
0x18000C648: "public: static void __cdecl ATL::ChTraitsCRT<unsigned short>::ConvertToBaseType(unsigned short * __ptr64,int,unsigned short const * __ptr64,int)" ?ConvertToBaseType@?$ChTraitsCRT@G@ATL@@SAXPEAGHPEBGH@Z
0x18000F3B8: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x18000C90C: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::LoadStringW(struct HINSTANCE__ * __ptr64,unsigned int) __ptr64" ?LoadStringW@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHPEAUHINSTANCE__@@I@Z
0x180012664: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180010520: GUID_DEVCLASS_CDROM
0x18000F3B0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000D400: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32Heap@ATL@@UEAAPEAXI@Z
0x180005B70: "public: __cdecl ATL::CComPtr<struct IPortableDeviceConnector>::~CComPtr<struct IPortableDeviceConnector>(void) __ptr64" ??1?$CComPtr@UIPortableDeviceConnector@@@ATL@@QEAA@XZ
0x18000FBE0: "pDiDetailData" ??_C@_0O@IMFKDNOO@pDiDetailData?$AA@
0x1800065E4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000D654: "public: struct HINSTANCE__ * __ptr64 __cdecl ATL::CAtlBaseModule::GetHInstanceAt(int) __ptr64" ?GetHInstanceAt@CAtlBaseModule@ATL@@QEAAPEAUHINSTANCE__@@H@Z
0x18000A638: WPP_SF_q
0x1800125D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x18000F3E0: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180005820: "protected: static int __cdecl CWPDBus::IsOpticalEnabled(void)" ?IsOpticalEnabled@CWPDBus@@KAHXZ
0x18000F588: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x18000FF90: "AuditPolicyOnly" ??_C@_1CA@OJLDGEAG@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x180012484: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800074F5: wcscmp
0x18000F5F0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18000D6D0: WPDLibGetRegistryValue
0x180016100: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLA
0x18000F198: "__cdecl _imp_SetSecurityInfo" __imp_SetSecurityInfo
0x18000E84C: WPDLibEnableDisablePrivilege
0x180005BC0: "public: __cdecl ATL::CAtlStringMgr::CAtlStringMgr(struct ATL::IAtlMemMgr * __ptr64) __ptr64" ??0CAtlStringMgr@ATL@@QEAA@PEAUIAtlMemMgr@1@@Z
0x1800025F0: "public: long __cdecl CPnPNotification::RegisterNotification(void) __ptr64" ?RegisterNotification@CPnPNotification@@QEAAJXZ
0x180010530: DEVPKEY_Device_Security
0x18000F6C0: "__cdecl _imp_malloc" __imp_malloc
0x18000F1B0: ADVAPI32_NULL_THUNK_DATA
0x18000FBF0: WPP_5beeab3dcac33b0fb17f7459653f9a0c_Traceguids
0x180002020: "int __cdecl IsPortableDeviceAPIPresent(void)" ?IsPortableDeviceAPIPresent@@YAHXZ
0x18000FCA8: "SERVICE_RUNNING" ??_C@_1CA@PMDLHPGH@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAR?$AAU?$AAN?$AAN?$AAI?$AAN?$AAG?$AA?$AA@
0x180011ED0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll
0x180002510: "void __cdecl ResetTimerToSpawnThread(void)" ?ResetTimerToSpawnThread@@YAXXZ
0x18000F5D0: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x180005450: "public: __cdecl CBthActiveConnector::~CBthActiveConnector(void) __ptr64" ??1CBthActiveConnector@@QEAA@XZ
0x180006290: "__cdecl _report_gsfailure" __report_gsfailure
0x18000FAD0: "System\CurrentControlSet\Service" ??_C@_1FK@LDFOOLBJ@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18000C38C: "public: void __cdecl CGroupPolicy::StartProcessGPSettings(void) __ptr64" ?StartProcessGPSettings@CGroupPolicy@@QEAAXXZ
0x18000F188: "__cdecl _imp_AuditQuerySystemPolicy" __imp_AuditQuerySystemPolicy
0x18000F440: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180006420: "__cdecl onexit" _onexit
0x180016068: "__cdecl _imp_SetupDiOpenDeviceInterfaceW" __imp_SetupDiOpenDeviceInterfaceW
0x18000DEF8: BuildUserPolicyACL
0x180002570: "long __cdecl RegisterServiceStopCallback(void * __ptr64 * __ptr64,unsigned short const * __ptr64,void * __ptr64,void (__cdecl*)(void * __ptr64,unsigned char),void * __ptr64,struct _SVCHOST_GLOBAL_DATA * __ptr64)" ?RegisterServiceStopCallback@@YAJPEAPEAXPEBGPEAXP6AX2E@Z2PEAU_SVCHOST_GLOBAL_DATA@@@Z
0x180006B2F: "__cdecl _imp_load_SetupDiSetDeviceInstallParamsW" __imp_load_SetupDiSetDeviceInstallParamsW
0x1800146A0: "__cdecl _native_startup_state" __native_startup_state
0x18000FBB0: "__cdecl _sz_SHLWAPI_dll" __sz_SHLWAPI_dll
0x18000FC30: "g_WPDBus" ??_C@_08INEINHCJ@g_WPDBus?$AA@
0x18000F328: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180005B20: "public: void * __ptr64 __cdecl CBthActiveConnector::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBthActiveConnector@@QEAAPEAXI@Z
0x180006A69: "__cdecl _imp_load_SetupDiGetDeviceRegistryPropertyW" __imp_load_SetupDiGetDeviceRegistryPropertyW
0x18000B8B4: "private: void __cdecl CGroupPolicy::ProcessGPForDevices(int * __ptr64) __ptr64" ?ProcessGPForDevices@CGroupPolicy@@AEAAXPEAH@Z
0x18000B168: "private: void * __ptr64 __cdecl CGroupPolicy::DiskForVolume(void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64,unsigned long) __ptr64" ?DiskForVolume@CGroupPolicy@@AEAAPEAXPEAXPEAU_SP_DEVINFO_DATA@@K@Z
0x18000CB10: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Replace(unsigned short,unsigned short) __ptr64" ?Replace@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHGG@Z
0x18000F958: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800107C8: "USB" ??_C@_17DMBMDHNL@?$AAU?$AAS?$AAB?$AA?$AA@
0x18000FCF8: "**Unsupported_State**" ??_C@_1CM@GPLKOBCK@?$AA?$CK?$AA?$CK?$AAU?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA_?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$CK?$AA?$CK?$AA?$AA@
0x180016070: "__cdecl _imp_SetupDiGetDeviceInterfaceDetailW" __imp_SetupDiGetDeviceInterfaceDetailW
0x1800056B0: "void __cdecl ServiceShutdownTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?ServiceShutdownTimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x180010458: GUID_DEVINTERFACE_WPD
0x18000D3D0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAtlStringMgr@ATL@@UEAAPEAXI@Z
0x18000F4D8: "__cdecl _imp_CM_Get_DevNode_PropertyW" __imp_CM_Get_DevNode_PropertyW
0x1800125EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000A3C0: "protected: static void __cdecl CWPDBus::SwDeviceCallback(struct HSWDEVICE__ * __ptr64,long,void * __ptr64,unsigned short const * __ptr64)" ?SwDeviceCallback@CWPDBus@@KAXPEAUHSWDEVICE__@@JPEAXPEBG@Z
0x180009B20: WPP_SF_SD
0x180009BA4: WPP_SF_Sd
0x18000F6A0: "__cdecl _imp_free" __imp_free
0x180006550: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000F458: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000A58C: WPP_SF_SS
0x18000F638: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x1800125C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x18000F378: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000F1F8: "__cdecl _imp_UnregisterDeviceNotification" __imp_UnregisterDeviceNotification
0x18000F448: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000D400: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32Heap@ATL@@UEAAPEAXI@Z
0x180012650: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800104C0: GUID_DEVINTERFACE_DISK
0x180009F2C: WPP_SF_S
0x180009CAC: WPP_SF_s
0x1800074E9: memset
0x180012704: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]