Generated by JEB on 2019/08/01

PE: C:\Windows\System32\fhsvcctl.dll Base=0x180000000 SHA-256=6883E7ED0162E35A494D0FAB4619B847F05266E03AA26BFE45DCFFEA50580ED2
PDB: fhsvcctl.pdb GUID={5B7167AE-1921-14C6-C40EB6445C421B29} Age=1

261 located named symbols:
0x180005578: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180005588: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18000447C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000597C: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x180005570: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180004280: "__cdecl FindPESection" _FindPESection
0x1800046B0: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x180005520: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x1800056F8: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x1800080D0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800059E8: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180003CFC: "__cdecl CRT_INIT" _CRT_INIT
0x180005668: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800041E2: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180004670: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x180001190: WppControlCallback
0x180004940: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005530: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x180005A60: "struct _NDR64_CONTEXT_HANDLE_FORMAT const __midl_frag40" ?__midl_frag40@@3U_NDR64_CONTEXT_HANDLE_FORMAT@@B
0x180005DB8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1800059F8: "Pipe" ??_C@_04LJLIIBC@Pipe?$AA@
0x180005688: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180005558: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x1800057A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005538: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180004263: "__cdecl XcptFilter" _XcptFilter
0x1800057A8: "__cdecl _xc_a" __xc_a
0x180001008: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x180005998: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180003A74: TlgUnregisterAggregateProvider
0x18000479C: "__cdecl callnewh" _callnewh
0x180004918: memcpy
0x1800058A0: WPP_c039d6d676a7394b1cf44a00a13f6850_Traceguids
0x180005568: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180005788: "__cdecl _imp_memset" __imp_memset
0x180004457: "__cdecl initterm" _initterm
0x1800055A8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180004648: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x180005D40: "Explorer.exe" ??_C@_1BK@JAFDHGBE@?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800086D8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005638: "__cdecl _imp_Sleep" __imp_Sleep
0x1800057C8: "__cdecl _xi_z" __xi_z
0x1800055C0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180004224: "__cdecl _C_specific_handler" __C_specific_handler
0x180002AA0: MIDL_user_free
0x1800055F0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180008690: WPP_REGISTRATION_GUIDS
0x18000436F: malloc
0x180005540: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180005550: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000481C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180002520: FhServiceClearProtectionState
0x180005650: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x18000390C: TlgRegisterAggregateProvider
0x180008668: WPP_MAIN_CB
0x18000426F: "__cdecl amsg_exit" _amsg_exit
0x180005708: "__cdecl _imp__callnewh" __imp__callnewh
0x1800056D0: "__cdecl _imp_PathStripPathW" __imp_PathStripPathW
0x1800055E0: "__cdecl _imp_TryAcquireSRWLockExclusive" __imp_TryAcquireSRWLockExclusive
0x180005380: "struct _MIDL_STUBLESS_PROXY_INFO const FhServiceApi_ProxyInfo" ?FhServiceApi_ProxyInfo@@3U_MIDL_STUBLESS_PROXY_INFO@@B
0x180005860: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x1800055F8: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180005868: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x180002AB0: "__cdecl TlgDefineProvider_annotation__Tlgg_FileHistoryApiTelemetryProviderProv" _TlgDefineProvider_annotation__Tlgg_FileHistoryApiTelemetryProviderProv
0x180005610: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x1800055A0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800055B0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180005240: "struct __midl_frag19_t const __midl_frag19" ?__midl_frag19@@3U__midl_frag19_t@@B
0x180005648: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800086C8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001220: DllMain
0x180004880: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180005748: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180005760: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005680: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005690: KERNEL32_NULL_THUNK_DATA
0x180005630: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800046C8: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180002100: FhServiceStopBackup
0x1800080C0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800047F8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005780: "__cdecl _imp_memcmp" __imp_memcmp
0x180002AB0: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x180001AD0: FhServiceOpenPipe
0x1800069EC: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x1800069B0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180005660: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005758: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x180005768: "__cdecl _imp_??_V@YAXPEAX@Z" __imp_??_V@YAXPEAX@Z
0x180004330: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004230: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000476B: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x180001164: WPP_SF_
0x180005600: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1800027E0: FhServiceExitMaintenanceMode
0x1800056A8: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180003F40: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005720: "__cdecl _imp__initterm" __imp__initterm
0x1800056B8: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x180005340: "struct __midl_frag39_t const __midl_frag39" ?__midl_frag39@@3U__midl_frag39_t@@B
0x1800052F0: "struct __midl_frag28_t const __midl_frag28" ?__midl_frag28@@3U__midl_frag28_t@@B
0x180006700: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x180004777: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x180006760: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1800056D8: SHLWAPI_NULL_THUNK_DATA
0x1800086B8: "__cdecl _onexitend" __onexitend
0x180002610: FhServiceEnterMaintenanceMode
0x180005798: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005710: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x1800047C0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800058C0: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800055D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005618: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x1800022D0: FhServiceBlockBackup
0x1800028C0: FhServiceMigrationStarting
0x1800057B8: "__cdecl _xi_a" __xi_a
0x180005678: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005D08: "SystemSettingsBroker.exe" ??_C@_1DC@NGJJCBID@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180003890: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1800051C0: "struct __midl_frag2_t const __midl_frag2" ?__midl_frag2@@3U__midl_frag2_t@@B
0x180005200: "struct __midl_frag6_t const __midl_frag6" ?__midl_frag6@@3U__midl_frag6_t@@B
0x180004720: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x180006738: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x1800013C8: WPP_SF_dd
0x180005528: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180008000: WPP_GLOBAL_Control
0x180008660: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUfgrohUwzgzkilgvxgrlmUhvierxvUxlmgilooryUlyquivUznwGEUkxsOlyq@fhsvcctl" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUuhUfgrohUwzgzkilgvxgrlmUhvierxvUxlmgilooryUlyquivUznwGEUkxsOlyq@fhsvcctl
0x180001040: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1800058B0: WPP_ThisDir_CTLGUID_CtlGuid
0x18000138C: WPP_SF_d
0x1800086E0: "__cdecl pRawDllMain" _pRawDllMain
0x180005718: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x1800041D6: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180005020: "const type_info::`vftable'" ??_7type_info@@6B@
0x180004200: "__cdecl _security_check_cookie" __security_check_cookie
0x180005A80: "struct _svcapi_MIDL_TYPE_FORMAT_STRING const svcapi__MIDL_TypeFormatString" ?svcapi__MIDL_TypeFormatString@@3U_svcapi_MIDL_TYPE_FORMAT_STRING@@B
0x1800057B0: "__cdecl _xc_z" __xc_z
0x180005030: "struct _MIDL_STUB_DESC const FhServiceApi_StubDesc" ?FhServiceApi_StubDesc@@3U_MIDL_STUB_DESC@@B
0x1800047A8: "__cdecl CxxThrowException" _CxxThrowException
0x180001EB0: FhServiceClosePipe
0x180005F72: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x180005628: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180008078: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x180005640: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800086A0: "bool gFhApiTelemetryInitialized" ?gFhApiTelemetryInitialized@@3_NA
0x180002ABC: "void __cdecl FileHistoryApiTelemetry::LogFHApiUsage(enum _FH_API_ID)" ?LogFHApiUsage@FileHistoryApiTelemetry@@YAXW4_FH_API_ID@@@Z
0x1800047C0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x1800010C0: TraceLoggingRegisterEx
0x180005958: "RegEnumValue failed unexpectedly" ??_C@_0CB@FMMIFBNH@RegEnumValue?5failed?5unexpectedly@
0x180005C90: WPP_296aadfa865c36a3ee0c230098df0347_Traceguids
0x1800057D0: "__cdecl _guard_fids_table" __guard_fids_table
0x180005750: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x180005790: msvcrt_NULL_THUNK_DATA
0x180005410: "__cdecl load_config_used" _load_config_used
0x1800056E8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x180004720: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x180005CE0: "SystemSettings.exe" ??_C@_1CG@NNHBGHDC@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800056C0: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x1800058C8: "ConfiguredUsers" ??_C@_0BA@LDGJILBD@ConfiguredUsers?$AA@
0x180005738: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004790: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x180002010: FhServiceStartBackup
0x180003830: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x180005670: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005658: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000182C: "long __cdecl StartFhService(void)" ?StartFhService@@YAJXZ
0x1800055D8: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x1800056F0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x180005A58: "struct _NDR64_CONTEXT_HANDLE_FORMAT const __midl_frag4" ?__midl_frag4@@3U_NDR64_CONTEXT_HANDLE_FORMAT@@B
0x180005A5C: "struct _NDR64_CONTEXT_HANDLE_FORMAT const __midl_frag8" ?__midl_frag8@@3U_NDR64_CONTEXT_HANDLE_FORMAT@@B
0x180005010: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180004363: free
0x1800017A8: WPP_SF_Sdd
0x1800056A0: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180005620: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002A80: MIDL_user_allocate
0x180004470: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000490C: memcmp
0x1800021E0: FhServiceReloadConfiguration
0x180005988: WPP_e4747ae1ba983b5297a9c3a8952546ce_Traceguids
0x1800059B8: "fhsvc" ??_C@_1M@FHECJELO@?$AAf?$AAh?$AAs?$AAv?$AAc?$AA?$AA@
0x180004258: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180005CA0: "FileHistory.exe " ??_C@_1CC@MHJHIOEK@?$AAF?$AAi?$AAl?$AAe?$AAH?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?$AA@
0x180005740: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800056E0: "__cdecl _imp_memcpy" __imp_memcpy
0x1800080A0: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x1800014E0: FhQueryConfiguredUsersCount
0x180005518: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180005598: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180005608: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180005770: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180005590: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x1800080C8: "__cdecl _security_cookie" __security_cookie
0x1800055E8: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180005290: "struct __midl_frag23_t const __midl_frag23" ?__midl_frag23@@3U__midl_frag23_t@@B
0x180005A48: "outputEventName" ??_C@_0BA@DONGLMKL@outputEventName?$AA@
0x1800086C0: "__cdecl _onexitbegin" __onexitbegin
0x180005CC8: "Control.exe" ??_C@_1BI@MFEKKODP@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180005700: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x1800059D8: "pipeContext" ??_C@_0M@JCENACKG@pipeContext?$AA@
0x1800055C8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800069C4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180005560: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000437C: "__cdecl _security_init_cookie" __security_init_cookie
0x180005A64: "unsigned char const __midl_frag41" ?__midl_frag41@@3EB
0x1800058E0: "System\CurrentControlSet\Service" ??_C@_1HG@DONNIDBG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18000475F: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x1800029A0: FhServiceMigrationFinished
0x18000699C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005728: "__cdecl _imp_malloc" __imp_malloc
0x1800055B8: ADVAPI32_NULL_THUNK_DATA
0x180005580: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800069D8: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800056C8: RPCRT4_NULL_THUNK_DATA
0x1800044C0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800086D0: "__cdecl _native_startup_state" __native_startup_state
0x180005AA0: "struct _svcapi_MIDL_PROC_FORMAT_STRING const svcapi__MIDL_ProcFormatString" ?svcapi__MIDL_ProcFormatString@@3U_svcapi_MIDL_PROC_FORMAT_STRING@@B
0x180005548: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180005778: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x180003B7C: "__cdecl TlgWriteAgg" _TlgWriteAgg
0x180005A00: "Global\FhMaintenanceModeEvent-%x" ??_C@_1EC@OGNCBJIF@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAF?$AAh?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AAM?$AAo?$AAd?$AAe?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?9?$AA?$CF?$AAx@
0x1800056B0: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180006720: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x180001738: WPP_SF_Sd
0x180005730: "__cdecl _imp_free" __imp_free
0x1800042D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800059C8: WPP_62bdbadf87c13de677e776b3ab7c4408_Traceguids
0x180001478: WPP_SF_ss
0x180005698: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x180002440: FhServiceUnblockBackup
0x18000141C: WPP_SF_s
0x180004924: memset
0x180006A00: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]