Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ustprov.dll Base=0x180000000 SHA-256=6CCD68CF2F36B182FA72136E076EF800C62546C999FC31ABBA2AB7A1036E93ED
PDB: ustprov.pdb GUID={7C9CBE3E-DDAF-4F48-F05F2EB6065F3F7E} Age=1

488 located named symbols:
0x180009128: "const UstCommon::CGenericWmiProvider::`vftable'{for `IWbemProviderInit'}" ??_7CGenericWmiProvider@UstCommon@@6BIWbemProviderInit@@@
0x180001AF0: "public: virtual long __cdecl CWmiUserStateConfigurationControls::Initialize(void * __ptr64) __ptr64" ?Initialize@CWmiUserStateConfigurationControls@@UEAAJPEAX@Z
0x1800021F0: "public: virtual unsigned long __cdecl UstCommon::CClassFactory::Release(void) __ptr64" ?Release@CClassFactory@UstCommon@@UEAAKXZ
0x180008148: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180009618: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x180009178: "const CWmiUserStateConfigurationControls::`vftable'{for `UstCommon::CRefCounted'}" ??_7CWmiUserStateConfigurationControls@@6BCRefCounted@UstCommon@@@
0x180009920: "User State WMI Provider" ??_C@_1DA@BJILHMMA@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AAW?$AAM?$AAI?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecQueryAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x1800096D0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180008380: "__cdecl FindPESection" _FindPESection
0x180001E50: "public: static long __cdecl UstCommon::CWmiEnumCreator<class UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls> >::CreateInstance(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,class UstCommon::CWmiBaseEnum * __ptr64 * __ptr64)" ?CreateInstance@?$CWmiEnumCreator@V?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@@UstCommon@@SAJPEAUIWbemServices@@PEAUIWbemContext@@PEAPEAVCWmiBaseEnum@2@@Z
0x180001CE0: "long __cdecl CUserStateWmiProvider_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CUserStateWmiProvider_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180009460: "__cdecl _imp_StringFromCLSID" __imp_StringFromCLSID
0x180009508: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x1800095C8: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18000B38C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002090: "[thunk]:public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CGenericWmiProvider@UstCommon@@W7EAAKXZ
0x18000B238: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180009F90: CLSID_WbemDefPath
0x180004420: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::DeleteInstanceAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteInstanceAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x1800098C8: "InprocServer32" ??_C@_1BO@MNKPAJEP@?$AAI?$AAn?$AAp?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x180001950: "protected: virtual long __cdecl CWmiUserStateConfigurationControls::_Delete(long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64,struct IWbemServices * __ptr64) __ptr64" ?_Delete@CWmiUserStateConfigurationControls@@MEAAJJPEAUIWbemContext@@PEAUIWbemObjectSink@@PEAUIWbemServices@@@Z
0x1800018C0: "protected: virtual long __cdecl CWmiUserStateConfigurationControls::_SetObjectProperties(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64) __ptr64" ?_SetObjectProperties@CWmiUserStateConfigurationControls@@MEAAJPEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemClassObject@@@Z
0x1800091B0: "const UstCommon::CClassFactory::`vftable'{for `IClassFactory'}" ??_7CClassFactory@UstCommon@@6BIClassFactory@@@
0x18000C120: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007BEC: "__cdecl CRT_INIT" _CRT_INIT
0x1800094F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800080C6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180001090: WppControlCallback
0x180008850: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000B170: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x18000B314: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x1800046AC: "public: virtual __cdecl UstCommon::CWmiBaseEnum::~CWmiBaseEnum(void) __ptr64" ??1CWmiBaseEnum@UstCommon@@UEAA@XZ
0x1800093D8: "__cdecl _imp_SafeArrayLock" __imp_SafeArrayLock
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::OpenNamespace(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemServices * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?OpenNamespace@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemServices@@PEAPEAUIWbemCallResult@@@Z
0x180001120: DllGetClassObject
0x1800020E0: "public: virtual void * __ptr64 __cdecl UstCommon::CRefCounted::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefCounted@UstCommon@@UEAAPEAXI@Z
0x1800096E8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180009588: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180009578: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::DeleteClass(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteClass@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180002798: WPP_SF_idd
0x1800094D8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180006FE8: "long __cdecl UpdateWbemClassObjectProp(enum UST_COMPONENT_ID,struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct IWbemClassObject * __ptr64,enum USERSTATE_SETTING_SOURCES)" ?UpdateWbemClassObjectProp@@YAJW4UST_COMPONENT_ID@@PEBUUSERSTATE_SETTING_DESCRIPTOR@@PEBGPEAXPEAUIWbemClassObject@@W4USERSTATE_SETTING_SOURCES@@@Z
0x180004CCC: "public: __cdecl UstCommon::CImpersonator::~CImpersonator(void) __ptr64" ??1CImpersonator@UstCommon@@QEAA@XZ
0x180008654: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x180009710: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::CreateInstanceEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateInstanceEnum@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x180002380: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180009370: "__cdecl _imp_SafeArrayGetElement" __imp_SafeArrayGetElement
0x180009608: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x1800086C4: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x1800021F0: "public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::Release(void) __ptr64" ?Release@CGenericWmiProvider@UstCommon@@UEAAKXZ
0x180004560: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecMethodAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecMethodAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@@Z
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecQuery@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18000C6C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUfhgxlnnlmUkilerwviUlyquivUznwGEUkxsOlyq@ustprov" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUfhgxlnnlmUkilerwviUlyquivUznwGEUkxsOlyq@ustprov
0x1800091D8: "const UstCommon::CRefCounted::`vftable'" ??_7CRefCounted@UstCommon@@6B@
0x180008360: "__cdecl XcptFilter" _XcptFilter
0x180009430: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x180009718: "__cdecl _xc_a" __xc_a
0x180009058: "const UstCommon::CGenericWmiProvider::`vftable'{for `IWbemServices'}" ??_7CGenericWmiProvider@UstCommon@@6BIWbemServices@@@
0x180006190: "long __cdecl GetUserStateSetting(enum UST_COMPONENT_ID,struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,class ATL::CComVariant & __ptr64,void * __ptr64,enum USERSTATE_SETTING_SOURCES,unsigned short const * __ptr64)" ?GetUserStateSetting@@YAJW4UST_COMPONENT_ID@@PEBUUSERSTATE_SETTING_DESCRIPTOR@@AEAVCComVariant@ATL@@PEAXW4USERSTATE_SETTING_SOURCES@@PEBG@Z
0x180009970: CLSID_UserStateWMIProvider
0x180009160: "const UstCommon::CWmiObject::`vftable'{for `UstCommon::CWmiLanternObject'}" ??_7CWmiObject@UstCommon@@6BCWmiLanternObject@1@@
0x180009D10: "PolicyPlatformContext_PrincipalC" ??_C@_1FK@BMCIBPIF@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x180003320: "private: virtual long __cdecl UstCommon::CWmiLanternObject::GetContextProperties(struct IWbemContext * __ptr64) __ptr64" ?GetContextProperties@CWmiLanternObject@UstCommon@@EEAAJPEAUIWbemContext@@@Z
0x180009628: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x1800094C8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1800020A0: "[thunk]:public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::Release`adjustor{8}' (void) __ptr64" ?Release@CGenericWmiProvider@UstCommon@@W7EAAKXZ
0x180008619: "__cdecl lock" _lock
0x180001AF0: "public: virtual long __cdecl UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::_Initialize(void) __ptr64" ?_Initialize@?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@UEAAJXZ
0x1800093C0: "__cdecl _imp_SysStringByteLen" __imp_SysStringByteLen
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::PutClass(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutClass@CGenericWmiProvider@UstCommon@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180008354: "__cdecl callnewh" _callnewh
0x1800023A8: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAGP6AXPEAG@Z$1?SysFreeString@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAG$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x180009844: "__cdecl _guard_iat_table" __guard_iat_table
0x180009A00: "Win32_UserStateConfigurationCont" ??_C@_1EK@EJIACEDA@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAn?$AAt@
0x180002250: "public: virtual long __cdecl UstCommon::CClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CClassFactory@UstCommon@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180004EF0: ?UstRegQueryBSTRAlloc@@YAJPEAUHKEY__@@PEBGAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAGP6AXPEAG@Z$1?SysFreeString@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAG$0A@$$T@details@wil@@@details@wil@@@wil@@@Z
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::CancelAsyncCall(struct IWbemObjectSink * __ptr64) __ptr64" ?CancelAsyncCall@CGenericWmiProvider@UstCommon@@UEAAJPEAUIWbemObjectSink@@@Z
0x1800087B0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180003EDC: "protected: long __cdecl UstCommon::CGenericWmiProvider::_CreateObjectFromPath(unsigned short * __ptr64 const,class UstCommon::CWmiObject * __ptr64 * __ptr64) __ptr64" ?_CreateObjectFromPath@CGenericWmiProvider@UstCommon@@IEAAJQEAGPEAPEAVCWmiObject@2@@Z
0x180009BB8: "PolicyPlatform_MachineContext" ??_C@_1DM@BNEOOMHL@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA_?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x180009038: "const CUserStateWmiProvider::`vftable'{for `IWbemShutdown'}" ??_7CUserStateWmiProvider@@6BIWbemShutdown@@@
0x1800096C0: "__cdecl _imp_memset" __imp_memset
0x18000853F: "__cdecl initterm" _initterm
0x180009B60: "PolicyPlatformContext_PrincipalC" ??_C@_1FI@LFLHPHG@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x18000C131: g_header_init_InitializeResultExceptions
0x180009238: "const UstCommon::CWmiBaseEnum::`vftable'" ??_7CWmiBaseEnum@UstCommon@@6B@
0x18000B300: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000C728: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800095D8: "__cdecl _imp_Sleep" __imp_Sleep
0x18000626C: "long __cdecl RemoveUserStateSetting(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?RemoveUserStateSetting@@YAJPEAUHKEY__@@PEBG1@Z
0x180009740: "__cdecl _xi_z" __xi_z
0x180009908: "Both" ??_C@_19OBNAGCDI@?$AAB?$AAo?$AAt?$AAh?$AA?$AA@
0x180009478: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800096F8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000854B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800020E0: "public: virtual void * __ptr64 __cdecl UstCommon::CRefCounted::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefCounted@UstCommon@@UEAAPEAXI@Z
0x180004DB8: "private: bool __cdecl UstCommon::CImpersonator::_IsThreadImpersonating(void) __ptr64" ?_IsThreadImpersonating@CImpersonator@UstCommon@@AEAA_NXZ
0x180009658: "__cdecl _imp__onexit" __imp__onexit
0x1800094B8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000C6F0: WPP_REGISTRATION_GUIDS
0x180008348: malloc
0x1800094A8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180009558: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000874C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001150: DllCanUnloadNow
0x18000195C: "private: long __cdecl CWmiUserStateConfigurationControls::UpdateUserStateConfigProp(enum UstCommon::USERSTATE_SETTING_ID,unsigned short const * __ptr64,struct IWbemClassObject * __ptr64) __ptr64" ?UpdateUserStateConfigProp@CWmiUserStateConfigurationControls@@AEAAJW4USERSTATE_SETTING_ID@UstCommon@@PEBGPEAUIWbemClassObject@@@Z
0x180009C88: "<FAILED>" ??_C@_1BC@JKKNEFCH@?$AA?$DM?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?$DO?$AA?$AA@
0x180009B30: "SYSTEM" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x1800093E8: "__cdecl _imp_SafeArrayCreate" __imp_SafeArrayCreate
0x1800095D0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000C6C8: WPP_MAIN_CB
0x18000B328: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180009570: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180009F50: WPP_3997f57bf92c3b6363c83860b427e6bc_Traceguids
0x180002D28: "private: long __cdecl UstCommon::CWmiObject::_CreateParamsObject(unsigned short * __ptr64 const,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?_CreateParamsObject@CWmiObject@UstCommon@@AEAAJQEAGPEAUIWbemServices@@PEAUIWbemContext@@PEAPEAUIWbemClassObject@@@Z
0x18000836C: "__cdecl amsg_exit" _amsg_exit
0x180009680: "__cdecl _imp__callnewh" __imp__callnewh
0x1800020D0: "[thunk]:public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::Release`adjustor{16}' (void) __ptr64" ?Release@CGenericWmiProvider@UstCommon@@WBA@EAAKXZ
0x180009368: "__cdecl _imp_VariantChangeType" __imp_VariantChangeType
0x180009890: IID_IClassFactory
0x1800070C4: "long __cdecl GetUserStateSettingForWbemClassObject(enum UST_COMPONENT_ID,struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,class ATL::CComVariant & __ptr64,void * __ptr64,enum USERSTATE_SETTING_SOURCES)" ?GetUserStateSettingForWbemClassObject@@YAJW4UST_COMPONENT_ID@@PEBUUSERSTATE_SETTING_DESCRIPTOR@@AEAVCComVariant@ATL@@PEAXW4USERSTATE_SETTING_SOURCES@@@Z
0x1800021E0: "public: virtual unsigned long __cdecl UstCommon::CClassFactory::AddRef(void) __ptr64" ?AddRef@CClassFactory@UstCommon@@UEAAKXZ
0x1800091E8: "const UstCommon::CWmiObject::`vftable'{for `UstCommon::CRefCounted'}" ??_7CWmiObject@UstCommon@@6BCRefCounted@1@@
0x180009878: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x180009220: "const UstCommon::CGenericWmiProvider::`vftable'{for `UstCommon::CRefCounted'}" ??_7CGenericWmiProvider@UstCommon@@6BCRefCounted@1@@
0x180003904: "protected: virtual __cdecl UstCommon::CGenericWmiProvider::~CGenericWmiProvider(void) __ptr64" ??1CGenericWmiProvider@UstCommon@@MEAA@XZ
0x1800029D8: "public: long __cdecl UstCommon::CWmiObject::CreateWbemClassObject(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateWbemClassObject@CWmiObject@UstCommon@@QEAAJPEAUIWbemServices@@PEAUIWbemContext@@PEAPEAUIWbemClassObject@@@Z
0x180004ACC: WPP_SF_dddSqDS
0x1800096B0: "__cdecl _imp__lock" __imp__lock
0x180002040: "public: virtual void * __ptr64 __cdecl UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@UEAAPEAXI@Z
0x180009418: OLEAUT32_NULL_THUNK_DATA
0x1800085EC: atexit
0x180009F40: "__cdecl GUID_0000013e_0000_0000_c000_000000000046" _GUID_0000013e_0000_0000_c000_000000000046
0x180009E48: WPP_1ccb593697993a74ee9eecd742a91e52_Traceguids
0x180004BF4: "public: long __cdecl UstCommon::CComImpersonator::Impersonate(int * __ptr64) __ptr64" ?Impersonate@CComImpersonator@UstCommon@@QEAAJPEAH@Z
0x180009378: "__cdecl _imp_SafeArrayPutElement" __imp_SafeArrayPutElement
0x1800095A0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180002160: "public: virtual long __cdecl UstCommon::CClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CClassFactory@UstCommon@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009EA8: "SA_WMI" ??_C@_1O@JMMOLKPO@?$AAS?$AAA?$AA_?$AAW?$AAM?$AAI?$AA?$AA@
0x1800098E8: "ThreadingModel" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x180003C30: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::CreateInstanceEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateInstanceEnumAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180009E58: "__CLASS" ??_C@_1BA@FBIGPONH@?$AA_?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?$AA@
0x180009490: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000B148: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x180004190: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::PutInstanceAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutInstanceAsync@CGenericWmiProvider@UstCommon@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180009518: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180008631: "__cdecl _dllonexit" __dllonexit
0x180009F80: IID_IWbemShutdown
0x18000C718: "__cdecl _native_startup_lock" __native_startup_lock
0x180001588: DllMain
0x180009E98: "YES" ??_C@_17FGJJPDOI@?$AAY?$AAE?$AAS?$AA?$AA@
0x1800027FC: "public: virtual __cdecl UstCommon::CWmiObject::~CWmiObject(void) __ptr64" ??1CWmiObject@UstCommon@@UEAA@XZ
0x180002744: WPP_SF_iD
0x180009590: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x18000B29C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180009610: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180009650: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800095A8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800094F0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180009148: "const CUserStateWmiProvider::`vftable'{for `UstCommon::CRefCounted'}" ??_7CUserStateWmiProvider@@6BCRefCounted@UstCommon@@@
0x1800026FC: WPP_SF_i
0x180009420: "__cdecl _imp_SHDeleteKeyW" __imp_SHDeleteKeyW
0x180007678: "long __cdecl UstVarLib::CscUtil_HeapAlloc(unsigned __int64,int,void * __ptr64 * __ptr64,void * __ptr64)" ?CscUtil_HeapAlloc@UstVarLib@@YAJ_KHPEAPEAXPEAX@Z
0x180009480: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007B6C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800094A0: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::CreateClassEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateClassEnum@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18000C110: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180008728: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800096F0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180007468: "public: __cdecl ATL::CComSafeArray<struct tagVARIANT,12>::CComSafeArray<struct tagVARIANT,12>(struct tagSAFEARRAY const * __ptr64) __ptr64" ??0?$CComSafeArray@UtagVARIANT@@$0M@@ATL@@QEAA@PEBUtagSAFEARRAY@@@Z
0x180002374: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x180009E88: WPP_074dba976c9b349210a7f5902d28cb30_Traceguids
0x180009EE0: "Changed" ??_C@_1BA@OBPMCEAG@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAd?$AA?$AA@
0x18000B3A0: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180009EA0: "NO" ??_C@_15LIBIHNCL@?$AAN?$AAO?$AA?$AA@
0x1800098A0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180009B40: "ReturnValue" ??_C@_1BI@FLOHINJE@?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180009500: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004998: WPP_SF_ddSqDDS
0x180009598: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180009440: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x180008430: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006320: "long __cdecl StoreUserStateSetting(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short,class ATL::CComVariant const & __ptr64)" ?StoreUserStateSetting@@YAJPEAUHKEY__@@PEBG1GAEBVCComVariant@ATL@@@Z
0x180009880: IID_IUnknown
0x180008308: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180009380: "__cdecl _imp_SafeArrayCreateVector" __imp_SafeArrayCreateVector
0x180001AF0: "public: virtual long __cdecl UstCommon::CWmiObject::Initialize(void * __ptr64) __ptr64" ?Initialize@CWmiObject@UstCommon@@UEAAJPEAX@Z
0x180002040: "public: virtual void * __ptr64 __cdecl UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@UEAAPEAXI@Z
0x180004714: "public: __cdecl UstCommon::CComImpersonator::~CComImpersonator(void) __ptr64" ??1CComImpersonator@UstCommon@@QEAA@XZ
0x18000B274: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000B3B4: "__cdecl _IMPORT_DESCRIPTOR_WTSAPI32" __IMPORT_DESCRIPTOR_WTSAPI32
0x180005BF8: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::DeleteInstance(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteInstance@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::QueryObjectSink(long,struct IWbemObjectSink * __ptr64 * __ptr64) __ptr64" ?QueryObjectSink@CGenericWmiProvider@UstCommon@@UEAAJJPEAPEAUIWbemObjectSink@@@Z
0x180001808: WPP_SF_
0x1800094C0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000C0E8: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180007940: "long __cdecl UstVarLib::CscVarUtil_ConvertVariantToMULTISZ(struct tagVARIANT const & __ptr64,class UstVarLib::CVarCvtBuffer * __ptr64)" ?CscVarUtil_ConvertVariantToMULTISZ@UstVarLib@@YAJAEBUtagVARIANT@@PEAVCVarCvtBuffer@1@@Z
0x1800051EC: "long __cdecl FindUserStateSettingDescriptor(struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64 const,unsigned int,unsigned int,struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64 * __ptr64)" ?FindUserStateSettingDescriptor@@YAJQEBUUSERSTATE_SETTING_DESCRIPTOR@@IIPEAPEBU1@@Z
0x180009538: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180005244: "long __cdecl GetMultiValueSetting(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class ATL::CComVariant & __ptr64)" ?GetMultiValueSetting@@YAJPEAUHKEY__@@PEBGAEAVCComVariant@ATL@@@Z
0x180007E30: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800096A8: "__cdecl _imp__initterm" __imp__initterm
0x180009488: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800094E8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800091E0: "const UstCommon::CClassFactory::`vftable'{for `UstCommon::CRefCounted'}" ??_7CClassFactory@UstCommon@@6BCRefCounted@1@@
0x18000B260: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180009428: SHLWAPI_NULL_THUNK_DATA
0x18000C708: "__cdecl _onexitend" __onexitend
0x180008625: "__cdecl unlock" _unlock
0x180009F30: WPP_bcf785428bce383bf51fa69f390b012c_Traceguids
0x1800039B0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CGenericWmiProvider@UstCommon@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009708: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180009A70: "Software\Microsoft\Windows\Curre" ??_C@_1MA@JMCLHEFF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180009CA0: "PolicyPlatformContext_PrincipalC" ??_C@_1GG@LJKMPJIH@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x1800029A8: "public: __cdecl ATL::CComPtr<struct IWbemQualifierSet>::~CComPtr<struct IWbemQualifierSet>(void) __ptr64" ??1?$CComPtr@UIWbemQualifierSet@@@ATL@@QEAA@XZ
0x180006A30: "long __cdecl RemoveUserStateSetting(struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,void * __ptr64,enum USERSTATE_SETTING_SOURCES,unsigned short const * __ptr64)" ?RemoveUserStateSetting@@YAJPEBUUSERSTATE_SETTING_DESCRIPTOR@@PEAXW4USERSTATE_SETTING_SOURCES@@PEBG@Z
0x180009690: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180007554: "long __cdecl StringCbCopyExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCbCopyExW@@YAJPEAG_KPEBGPEAPEAGPEA_KK@Z
0x180004768: "public: long __cdecl ATL::CComSafeArray<struct tagVARIANT,12>::SetAt(long,struct tagVARIANT const & __ptr64,int) __ptr64" ?SetAt@?$CComSafeArray@UtagVARIANT@@$0M@@ATL@@QEAAJJAEBUtagVARIANT@@H@Z
0x180008110: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x180009510: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180009EF0: "Intended" ??_C@_1BC@PHGJGAGK@?$AAI?$AAn?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AA?$AA@
0x180002040: "public: virtual void * __ptr64 __cdecl UstCommon::CWmiBaseEnum::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWmiBaseEnum@UstCommon@@UEAAPEAXI@Z
0x180003FC0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::GetObjectAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?GetObjectAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180006B44: "long __cdecl SetUserStateSetting(struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,class ATL::CComVariant const & __ptr64,void * __ptr64,enum USERSTATE_SETTING_SOURCES,unsigned short const * __ptr64)" ?SetUserStateSetting@@YAJPEBUUSERSTATE_SETTING_DESCRIPTOR@@AEBVCComVariant@ATL@@PEAXW4USERSTATE_SETTING_SOURCES@@PEBG@Z
0x180009600: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1800020C0: "[thunk]:public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CGenericWmiProvider@UstCommon@@WBA@EAAKXZ
0x1800095F8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180009730: "__cdecl _xi_a" __xi_a
0x180009540: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1800095F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800093F0: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x180006E80: "enum PROP_INTENTTION __cdecl GetWMIPropertyIntentions(unsigned short const * __ptr64,struct IWbemClassObject * __ptr64)" ?GetWMIPropertyIntentions@@YA?AW4PROP_INTENTTION@@PEBGPEAUIWbemClassObject@@@Z
0x1800020B0: "[thunk]:public: virtual long __cdecl UstCommon::CGenericWmiProvider::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CGenericWmiProvider@UstCommon@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180009660: "__cdecl _imp__unlock" __imp__unlock
0x180009A50: WPP_949af3f7162837d511dde471a9667320_Traceguids
0x180009F60: IID_IWbemProviderInit
0x180009620: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180009390: "__cdecl _imp_SafeArrayDestroy" __imp_SafeArrayDestroy
0x180009448: "__cdecl _imp_CoGetCallContext" __imp_CoGetCallContext
0x180009450: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x1800023C8: WPP_SF_DD
0x180002600: WPP_SF_dD
0x180002648: WPP_SF_dd
0x180002418: WPP_SF_DS
0x180007288: "long __cdecl UpdateOrRemoveWMIObjectProperty(struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct IWbemClassObject * __ptr64,class ATL::CComVariant const & __ptr64,enum USERSTATE_SETTING_SOURCES)" ?UpdateOrRemoveWMIObjectProperty@@YAJPEBUUSERSTATE_SETTING_DESCRIPTOR@@PEBGPEAXPEAUIWbemClassObject@@AEBVCComVariant@ATL@@W4USERSTATE_SETTING_SOURCES@@@Z
0x18000C000: WPP_GLOBAL_Control
0x180009E78: WPP_cacde34255ce3fde29114525da150ecd_Traceguids
0x180009A60: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000B288: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000B350: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1800098B0: "CLSID\%s" ??_C@_1BC@MCAABAB@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000C700: "long g_cUstRefDll" ?g_cUstRefDll@@3JA
0x18000182C: WPP_SF_d
0x18000182C: WPP_SF_D
0x18000C730: "__cdecl pRawDllMain" _pRawDllMain
0x180009688: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x1800014D0: DllUnregisterServer
0x180001170: "long __cdecl _RegisterClassAndInProcServer(struct _GUID const & __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_RegisterClassAndInProcServer@@YAJAEBU_GUID@@PEBG1@Z
0x180009638: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180009410: "__cdecl _imp_VariantClear" __imp_VariantClear
0x180001B40: "public: virtual void * __ptr64 __cdecl CUserStateWmiProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUserStateWmiProvider@@UEAAPEAXI@Z
0x180007B60: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180009F08: "NoLongerIntended" ??_C@_1CC@DAAPGIBH@?$AAN?$AAo?$AAL?$AAo?$AAn?$AAg?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AA?$AA@
0x180001B00: "public: virtual void * __ptr64 __cdecl CWmiUserStateConfigurationControls::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWmiUserStateConfigurationControls@@UEAAPEAXI@Z
0x180009000: "const type_info::`vftable'" ??_7type_info@@6B@
0x18000B24C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1800080E0: "__cdecl _security_check_cookie" __security_check_cookie
0x180006CE0: "long __cdecl WmiProp_SetProperty(struct IWbemClassObject * __ptr64,unsigned short const * __ptr64,class ATL::CComVariant)" ?WmiProp_SetProperty@@YAJPEAUIWbemClassObject@@PEBGVCComVariant@ATL@@@Z
0x180009728: "__cdecl _xc_z" __xc_z
0x18000B378: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180009530: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000C130: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18000871C: "__cdecl CxxThrowException" _CxxThrowException
0x180009640: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180009458: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800095E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800096E0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x1800094B0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180008870: "__cdecl _chkstk" __chkstk
0x1800093C8: "__cdecl _imp_SafeArrayGetVartype" __imp_SafeArrayGetVartype
0x180001F80: "protected: virtual unsigned long __cdecl UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::GetCount(void) __ptr64" ?GetCount@?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@MEAAKXZ
0x180008110: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x180002040: "public: virtual void * __ptr64 __cdecl UstCommon::CWmiBaseEnum::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWmiBaseEnum@UstCommon@@UEAAPEAXI@Z
0x180009960: WPP_ThisDir_CTLGUID_UstCommon
0x180009D70: "PolicyPlatformContext_PrincipalC" ??_C@_1GC@OOHAEAJE@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x1800095C0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002080: "[thunk]:public: virtual long __cdecl UstCommon::CGenericWmiProvider::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CGenericWmiProvider@UstCommon@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x180007380: "public: class ATL::CComVariant & __ptr64 __cdecl ATL::CComSafeArray<struct tagVARIANT,12>::operator[](int) __ptr64" ??A?$CComSafeArray@UtagVARIANT@@$0M@@ATL@@QEAAAEAVCComVariant@1@H@Z
0x18000B2C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180009550: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180009748: "__cdecl _guard_fids_table" __guard_fids_table
0x180009E68: "__cdecl GUID_3bc15af2_736c_477e_9e51_238af8667dcc" _GUID_3bc15af2_736c_477e_9e51_238af8667dcc
0x180008648: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x1800096C8: msvcrt_NULL_THUNK_DATA
0x180009260: "__cdecl load_config_used" _load_config_used
0x18000B128: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x18000B364: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::CreateClassEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateClassEnumAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180006684: "long __cdecl StoreUserStateMultiValueSetting(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class ATL::CComVariant const & __ptr64)" ?StoreUserStateMultiValueSetting@@YAJPEAUHKEY__@@PEBGAEBVCComVariant@ATL@@@Z
0x1800093B0: "__cdecl _imp_VariantCopyInd" __imp_VariantCopyInd
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::GetObjectW(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?GetObjectW@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemClassObject@@PEAPEAUIWbemCallResult@@@Z
0x180001B40: "public: virtual void * __ptr64 __cdecl CUserStateWmiProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUserStateWmiProvider@@UEAAPEAXI@Z
0x180009C30: "PolicyPlatformContext_PrincipalC" ??_C@_1FE@GIOGLDIP@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x1800096A0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180009BF8: "PolicyPlatform_UserContext" ??_C@_1DG@BADNMNL@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA_?$AAU?$AAs?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x180001B00: "public: virtual void * __ptr64 __cdecl CWmiUserStateConfigurationControls::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWmiUserStateConfigurationControls@@UEAAPEAXI@Z
0x180002F90: "public: virtual long __cdecl UstCommon::CWmiLanternObject::GetUserContextProperties(struct IWbemContext * __ptr64) __ptr64" ?GetUserContextProperties@CWmiLanternObject@UstCommon@@UEAAJPEAUIWbemContext@@@Z
0x1800094E0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180001788: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000C704: "long g_cUstServerLocks" ?g_cUstServerLocks@@3JA
0x1800095B8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180009548: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::PutClassAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutClassAsync@CGenericWmiProvider@UstCommon@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18000C6F8: "struct HINSTANCE__ * __ptr64 __ptr64 g_hUstInstance" ?g_hUstInstance@@3PEAUHINSTANCE__@@EA
0x1800096D8: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000833C: free
0x1800099D0: "OfflineFiles" ??_C@_1BK@OHCIFDIJ@?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1800024AC: WPP_SF_DSS
0x180007430: "public: __cdecl ATL::CComSafeArray<struct tagVARIANT,12>::~CComSafeArray<struct tagVARIANT,12>(void) __ptr64" ??1?$CComSafeArray@UtagVARIANT@@$0M@@ATL@@QEAA@XZ
0x1800095B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180008330: "__cdecl purecall" _purecall
0x180004814: WPP_SF_SSdS
0x180008610: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800019B0: "protected: virtual long __cdecl CWmiUserStateConfigurationControls::_Put(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64,struct IWbemServices * __ptr64) __ptr64" ?_Put@CWmiUserStateConfigurationControls@@MEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@PEAUIWbemServices@@@Z
0x180001B00: "public: virtual void * __ptr64 __cdecl UstCommon::CWmiObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWmiObject@UstCommon@@UEAAPEAXI@Z
0x180009EC8: "<undefined>" ??_C@_1BI@EKPACEIF@?$AA?$DM?$AAu?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$DO?$AA?$AA@
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecMethod(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?ExecMethod@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAPEAU4@PEAPEAUIWbemCallResult@@@Z
0x1800057F8: "long __cdecl GetStoredValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short,class ATL::CComVariant & __ptr64)" ?GetStoredValue@@YAJPEAUHKEY__@@PEBG1GAEAVCComVariant@ATL@@@Z
0x18000B33C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180006DF8: "bool __cdecl IsQualifierSet(unsigned short const * __ptr64,struct IWbemQualifierSet * __ptr64)" ?IsQualifierSet@@YA_NPEBGPEAUIWbemQualifierSet@@@Z
0x1800093E0: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x180009388: "__cdecl _imp_SafeArrayRedim" __imp_SafeArrayRedim
0x180009698: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180009700: ntdll_NULL_THUNK_DATA
0x180009058: "const CUserStateWmiProvider::`vftable'{for `IWbemServices'}" ??_7CUserStateWmiProvider@@6BIWbemServices@@@
0x180004930: WPP_SF_ddD
0x18000269C: WPP_SF_did
0x180009980: "FolderRedirection" ??_C@_1CE@CFIMJMEF@?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180001950: "protected: virtual long __cdecl CWmiUserStateConfigurationControls::_Execute(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64,struct IWbemServices * __ptr64) __ptr64" ?_Execute@CWmiUserStateConfigurationControls@@MEAAJQEAGJPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@PEAUIWbemServices@@@Z
0x1800099F0: WPP_6ad05ce746193ee08aec495585698a02_Traceguids
0x1800096B8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000C118: "__cdecl _security_cookie" __security_cookie
0x180009560: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180008870: "__cdecl alloca_probe" _alloca_probe
0x180009398: "__cdecl _imp_SafeArrayGetUBound" __imp_SafeArrayGetUBound
0x180005070: "enum SETTING_AUTH __cdecl GetSettingAuthority(enum UST_COMPONENT_ID)" ?GetSettingAuthority@@YA?AW4SETTING_AUTH@@W4UST_COMPONENT_ID@@@Z
0x180009498: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800094D0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800093B8: "__cdecl _imp_SafeArrayCopy" __imp_SafeArrayCopy
0x18000B2D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180009F70: IID_IWbemServices
0x180009468: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1800093F8: "__cdecl _imp_VariantInit" __imp_VariantInit
0x180001AF0: "public: virtual long __cdecl UstCommon::CWmiLanternObject::GetMachineContextProperties(struct IWbemContext * __ptr64) __ptr64" ?GetMachineContextProperties@CWmiLanternObject@UstCommon@@UEAAJPEAUIWbemContext@@@Z
0x180009408: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x180009580: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800076DC: "long __cdecl UstVarLib::CscUtil_HeapFree(void * __ptr64,void * __ptr64)" ?CscUtil_HeapFree@UstVarLib@@YAJPEAX0@Z
0x18000C710: "__cdecl _onexitbegin" __onexitbegin
0x180002230: "public: virtual long __cdecl UstCommon::CClassFactory::LockServer(int) __ptr64" ?LockServer@CClassFactory@UstCommon@@UEAAJH@Z
0x180002110: "private: virtual void * __ptr64 __cdecl UstCommon::CClassFactory::`vector deleting destructor'(unsigned int) __ptr64" ??_ECClassFactory@UstCommon@@EEAAPEAXI@Z
0x180001F60: "protected: virtual long __cdecl UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::GetNext(class UstCommon::CWmiObject * __ptr64 * __ptr64) __ptr64" ?GetNext@?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@MEAAJPEAPEAVCWmiObject@2@@Z
0x18000234C: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x180009018: "const UstCommon::CGenericEnum<class CWmiUserStateConfigurationControls>::`vftable'" ??_7?$CGenericEnum@VCWmiUserStateConfigurationControls@@@UstCommon@@6B@
0x180009648: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180001AF0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::Shutdown(long,unsigned long,struct IWbemContext * __ptr64) __ptr64" ?Shutdown@CGenericWmiProvider@UstCommon@@UEAAJJKPEAUIWbemContext@@@Z
0x180009470: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180009520: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x1800029A8: "public: __cdecl ATL::CComPtr<struct IWbemClassObject>::~CComPtr<struct IWbemClassObject>(void) __ptr64" ??1?$CComPtr@UIWbemClassObject@@@ATL@@QEAA@XZ
0x180001B40: "protected: virtual void * __ptr64 __cdecl UstCommon::CGenericWmiProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCGenericWmiProvider@UstCommon@@MEAAPEAXI@Z
0x180009568: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180001F8C: "public: static long __cdecl UstCommon::CWmiCreator<class CWmiUserStateConfigurationControls>::CreateInstance(void * __ptr64,class UstCommon::CWmiObject * __ptr64 * __ptr64)" ?CreateInstance@?$CWmiCreator@VCWmiUserStateConfigurationControls@@@UstCommon@@SAJPEAXPEAPEAVCWmiObject@2@@Z
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecNotificationQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecNotificationQueryAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::PutInstance(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutInstance@CGenericWmiProvider@UstCommon@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180001868: "private: long __cdecl CWmiUserStateConfigurationControls::_SetProperty(enum UstCommon::USERSTATE_SETTING_ID,unsigned short const * __ptr64,struct IWbemClassObject * __ptr64) __ptr64" ?_SetProperty@CWmiUserStateConfigurationControls@@AEAAJW4USERSTATE_SETTING_ID@UstCommon@@PEBGPEAUIWbemClassObject@@@Z
0x180008464: "__cdecl _security_init_cookie" __security_init_cookie
0x180009038: "const UstCommon::CGenericWmiProvider::`vftable'{for `IWbemShutdown'}" ??_7CGenericWmiProvider@UstCommon@@6BIWbemShutdown@@@
0x180001B80: "protected: virtual long __cdecl CUserStateWmiProvider::_CreateEnumObjectFromClass(unsigned short * __ptr64 const,struct IWbemContext * __ptr64,class UstCommon::CWmiBaseEnum * __ptr64 * __ptr64) __ptr64" ?_CreateEnumObjectFromClass@CUserStateWmiProvider@@MEAAJQEAGPEAUIWbemContext@@PEAPEAVCWmiBaseEnum@UstCommon@@@Z
0x1800093A0: "__cdecl _imp_SafeArrayUnlock" __imp_SafeArrayUnlock
0x180001B00: "public: virtual void * __ptr64 __cdecl UstCommon::CWmiObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWmiObject@UstCommon@@UEAAPEAXI@Z
0x1800093A8: "__cdecl _imp_SafeArrayGetLBound" __imp_SafeArrayGetLBound
0x18000B224: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000228C: "long __cdecl UstCommon::CClassFactory_CreateInstance(long (__cdecl*)(struct _GUID const & __ptr64,void * __ptr64 * __ptr64),struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CClassFactory_CreateInstance@UstCommon@@YAJP6AJAEBU_GUID@@PEAPEAX@Z01@Z
0x1800099A8: "RoamingUserProfile" ??_C@_1CG@BFMIFAAJ@?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AAU?$AAs?$AAe?$AAr?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x180007184: "long __cdecl UpdateOrRemoveWMIObjectProperty(struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct IWbemClassObject * __ptr64,enum USERSTATE_SETTING_SOURCES)" ?UpdateOrRemoveWMIObjectProperty@@YAJPEBUUSERSTATE_SETTING_DESCRIPTOR@@PEBGPEAXPEAUIWbemClassObject@@W4USERSTATE_SETTING_SOURCES@@@Z
0x180009630: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x1800093D0: "__cdecl _imp_VariantCopy" __imp_VariantCopy
0x180009678: "__cdecl _imp_malloc" __imp_malloc
0x180009668: "__cdecl _imp__purecall" __imp__purecall
0x1800021E0: "public: virtual unsigned long __cdecl UstCommon::CGenericWmiProvider::AddRef(void) __ptr64" ?AddRef@CGenericWmiProvider@UstCommon@@UEAAKXZ
0x180008190: "__cdecl _report_gsfailure" __report_gsfailure
0x180009EB8: "SA_GP" ??_C@_1M@OLOBAJOO@?$AAS?$AAA?$AA_?$AAG?$AAP?$AA?$AA@
0x180009128: "const CUserStateWmiProvider::`vftable'{for `IWbemProviderInit'}" ??_7CUserStateWmiProvider@@6BIWbemProviderInit@@@
0x180008558: "__cdecl onexit" _onexit
0x180009DE0: "PolicyPlatformContext_PrincipalC" ??_C@_1GC@CHDFFFOG@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA_?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAC@
0x180001C40: "protected: virtual long __cdecl CUserStateWmiProvider::_CreateObjectFromClassName(unsigned short const * __ptr64,class UstCommon::CWmiObject * __ptr64 * __ptr64) __ptr64" ?_CreateObjectFromClassName@CUserStateWmiProvider@@MEAAJPEBGPEAPEAVCWmiObject@UstCommon@@@Z
0x18000C720: "__cdecl _native_startup_state" __native_startup_state
0x180002360: "public: __cdecl USERSTATE_SETTING_DESCRIPTOR::~USERSTATE_SETTING_DESCRIPTOR(void) __ptr64" ??1USERSTATE_SETTING_DESCRIPTOR@@QEAA@XZ
0x180009950: WPP_d6e678b47c34376ec2645212a6973f34_Traceguids
0x180007740: "long __cdecl UstVarLib::CscVarUtil_ConvertMULTISZToVariant(unsigned short const * __ptr64,unsigned long,struct tagVARIANT * __ptr64)" ?CscVarUtil_ConvertMULTISZToVariant@UstVarLib@@YAJPEBGKPEAUtagVARIANT@@@Z
0x180009528: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180005C18: "long __cdecl GetUserStateSettingPriv(enum UST_COMPONENT_ID,struct USERSTATE_SETTING_DESCRIPTOR const * __ptr64,class ATL::CComVariant & __ptr64,void * __ptr64,enum USERSTATE_SETTING_SOURCES,unsigned short const * __ptr64)" ?GetUserStateSettingPriv@@YAJW4UST_COMPONENT_ID@@PEBUUSERSTATE_SETTING_DESCRIPTOR@@AEAVCComVariant@ATL@@PEAXW4USERSTATE_SETTING_SOURCES@@PEBG@Z
0x1800014C0: DllRegisterServer
0x180009438: WTSAPI32_NULL_THUNK_DATA
0x180009400: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x180002110: "private: virtual void * __ptr64 __cdecl UstCommon::CClassFactory::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClassFactory@UstCommon@@EEAAPEAXI@Z
0x18000B2EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180002584: WPP_SF_SD
0x180009670: "__cdecl _imp_free" __imp_free
0x1800083D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800095E0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180003A80: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CGenericWmiProvider@UstCommon@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x180003858: WPP_SF_SS
0x180002860: "protected: virtual long __cdecl UstCommon::CWmiObject::GetTargetWbemClassObject(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?GetTargetWbemClassObject@CWmiObject@UstCommon@@MEAAJPEAUIWbemServices@@PEAUIWbemContext@@PEAPEAUIWbemClassObject@@@Z
0x180001B40: "protected: virtual void * __ptr64 __cdecl UstCommon::CGenericWmiProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ECGenericWmiProvider@UstCommon@@MEAAPEAXI@Z
0x180009160: "const CWmiUserStateConfigurationControls::`vftable'{for `UstCommon::CWmiLanternObject'}" ??_7CWmiUserStateConfigurationControls@@6BCWmiLanternObject@UstCommon@@@
0x18000B2B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::ExecNotificationQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecNotificationQuery@CGenericWmiProvider@UstCommon@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x180001024: WPP_SF_S
0x180008836: memset
0x18000B3C8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001AE0: "public: virtual long __cdecl UstCommon::CGenericWmiProvider::DeleteClassAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteClassAsync@CGenericWmiProvider@UstCommon@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180002B7C: "public: long __cdecl UstCommon::CWmiObject::ExecuteMethod(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64,struct IWbemServices * __ptr64) __ptr64" ?ExecuteMethod@CWmiObject@UstCommon@@QEAAJQEAGJPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@PEAUIWbemServices@@@Z
0x180004D14: "public: long __cdecl UstCommon::CImpersonator::Impersonate(void * __ptr64) __ptr64" ?Impersonate@CImpersonator@UstCommon@@QEAAJPEAX@Z

[JEB Decompiler by PNF Software]