Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rfxvmt.dll Base=0x180000000 SHA-256=6D9A41A03A3BD5362E3AF24F97BA99D2F9927D1375E4F608942A712866D133B9
PDB: RfxVmt.pdb GUID={82A732A1-80B7-9A3C-673E75DE82D73F5C} Age=1

272 located named symbols:
0x180005480: "public: virtual long __cdecl CVmtChannelV1::IsWriteDataConsumed(void) __ptr64" ?IsWriteDataConsumed@CVmtChannelV1@@UEAAJXZ
0x180008330: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180006F6C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800081D0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180002370: RfxVmtGetVramDescriptor
0x180008358: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180006D80: "__cdecl FindPESection" _FindPESection
0x1800092D8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000A060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180008218: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x180008550: RFXVMT_ETW_PROVIDER
0x18000676C: "__cdecl CRT_INIT" _CRT_INIT
0x180003BF0: "int __cdecl IsSymbolicLinkValid(unsigned short * __ptr64)" ?IsSymbolicLinkValid@@YAHPEAG@Z
0x180008250: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001150: WPP_SF_l
0x1800083F8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800011E0: WppControlCallback
0x180007200: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002A10: RfxVmtRevokeSharedBuffer
0x180002B10: RfxVmtAcquireSharedBuffer
0x1800081C8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800033DC: "long __cdecl OpenChannelHandle(struct _CHILD_PARTITION_DESCRIPTOR * __ptr64,enum _RFX_VMT_CHANNEL,void * __ptr64 & __ptr64)" ?OpenChannelHandle@@YAJPEAU_CHILD_PARTITION_DESCRIPTOR@@W4_RFX_VMT_CHANNEL@@AEAPEAX@Z
0x180008208: "__cdecl _imp_CancelIoEx" __imp_CancelIoEx
0x180004268: "public: virtual __cdecl CVmtChannelV1::~CVmtChannelV1(void) __ptr64" ??1CVmtChannelV1@@UEAA@XZ
0x1800086D8: "\RfxVmtChannelCapture" ??_C@_1CM@HDNJGJIB@?$AA?2?$AAR?$AAf?$AAx?$AAV?$AAm?$AAt?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAC?$AAa?$AAp?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x180008058: "const CRfxVmtChannel::`vftable'" ??_7CRfxVmtChannel@@6B@
0x180009288: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800091AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180004178: WPP_SF_qdl
0x180008228: "__cdecl _imp_CancelIo" __imp_CancelIo
0x180008200: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180008290: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800085C0: "\\.\Synth3dVideo#VMNAME#%ws%ws" ??_C@_1DO@EMGBEHH@?$AA?2?$AA?2?$AA?4?$AA?2?$AAS?$AAy?$AAn?$AAt?$AAh?$AA3?$AAd?$AAV?$AAi?$AAd?$AAe?$AAo?$AA?$CD?$AAV?$AAM?$AAN?$AAA?$AAM?$AAE?$AA?$CD?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180008410: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800082A0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180006D60: "__cdecl XcptFilter" _XcptFilter
0x180008418: "__cdecl _xc_a" __xc_a
0x180002280: RfxVmtEnableLibrary
0x180008680: "%ws%I64d" ??_C@_1BC@BPPJMLAA@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAI?$AA6?$AA4?$AAd?$AA?$AA@
0x180006388: "long __cdecl XmDeviceIoControl(void * __ptr64,unsigned long,void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64,void * __ptr64,void * __ptr64)" ?XmDeviceIoControl@@YAJPEAXK0K0KPEAKPEAU_OVERLAPPED@@00@Z
0x180001820: RfxVmtReadChannel
0x180007127: "__cdecl lock" _lock
0x180006D48: "__cdecl callnewh" _callnewh
0x180008510: "__cdecl _guard_iat_table" __guard_iat_table
0x1800071DD: memcpy
0x180008350: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x1800083D8: "__cdecl _imp_memset" __imp_memset
0x1800082C0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180006F3F: "__cdecl initterm" _initterm
0x180008328: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x1800092B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000AB40: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180008210: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x1800082D8: "__cdecl _imp_Sleep" __imp_Sleep
0x180008440: "__cdecl _xi_z" __xi_z
0x1800081A8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180006F4B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800083C0: "__cdecl _imp__onexit" __imp__onexit
0x18000A678: WPP_REGISTRATION_GUIDS
0x180006D3C: malloc
0x1800081E8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000717C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000A650: WPP_MAIN_CB
0x180008760: "\\.\Synth3dVsc%ws" ??_C@_1CE@GEDKCJHK@?$AA?2?$AA?2?$AA?4?$AA?2?$AAS?$AAy?$AAn?$AAt?$AAh?$AA3?$AAd?$AAV?$AAs?$AAc?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180006D6C: "__cdecl amsg_exit" _amsg_exit
0x180008378: "__cdecl _imp__callnewh" __imp__callnewh
0x18000A600: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUenUweUerwvlUDwerwvlUiucengUfhviPvevmgUlyquivUznwGEUkxsOlyq@RfxVmt" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUenUweUerwvlUDwerwvlUiucengUfhviPvevmgUlyquivUznwGEUkxsOlyq@RfxVmt
0x180008708: "\RfxVmtChannelPipeline" ??_C@_1CO@KKCIMMCE@?$AA?2?$AAR?$AAf?$AAx?$AAV?$AAm?$AAt?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAP?$AAi?$AAp?$AAe?$AAl?$AAi?$AAn?$AAe?$AA?$AA@
0x180008530: Microsoft_Windows_RemoteDesktopServices_RemoteFX_VM_User_Mode_TransportLevels
0x180008620: WPP_ThisDir_CTLGUID_RfxVmtLib
0x180008390: "__cdecl _imp__lock" __imp__lock
0x1800013A0: RfxVmtCreateChannel
0x180006D08: atexit
0x1800040A0: WPP_SF_qIId
0x1800082B0: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006260: "public: virtual void __cdecl CVmtChannelV1::CancelAllPendingRequests(void) __ptr64" ?CancelAllPendingRequests@CVmtChannelV1@@UEAAXXZ
0x180008318: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800081C0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180008320: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000A640: Microsoft_Windows_RemoteDesktopServices_RemoteFX_VM_User_Mode_TransportEnableBits
0x180008248: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000713F: "__cdecl _dllonexit" __dllonexit
0x180002C10: RfxVmtReleaseSharedBuffer
0x180008808: WPP_f8c5bbb08aef334c93ea173025653bdb_Traceguids
0x18000AB20: "__cdecl _native_startup_lock" __native_startup_lock
0x180004230: "public: virtual void * __ptr64 __cdecl CVmtChannelV1::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCVmtChannelV1@@UEAAPEAXI@Z
0x180001268: DllMain
0x180005500: "public: virtual long __cdecl CVmtChannelV1::GetDataAvailableEvent(void * __ptr64 & __ptr64) __ptr64" ?GetDataAvailableEvent@CVmtChannelV1@@UEAAJAEAPEAX@Z
0x1800083C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180008270: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800091C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180004730: "public: virtual long __cdecl CVmtChannelV1::ReadAndCache(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned __int64 & __ptr64) __ptr64" ?ReadAndCache@CVmtChannelV1@@UEAAJPEAX_K01AEA_K@Z
0x1800081B0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800066E4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180004600: "public: virtual long __cdecl CVmtChannelV1::Close(void) __ptr64" ?Close@CVmtChannelV1@@UEAAJXZ
0x1800081D8: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180008360: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000A050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180007158: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800030B8: "private: long __cdecl CLibraryContext::InternalDisableLibrary(void) __ptr64" ?InternalDisableLibrary@CLibraryContext@@AEAAJXZ
0x180008600: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180008240: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180006E30: "__cdecl ValidateImageBase" _ValidateImageBase
0x180008010: "const CVmtChannelV1::`vftable'" ??_7CVmtChannelV1@@6B@
0x180005FA0: "protected: long __cdecl CVmtChannelV1::DoWrite(unsigned char * __ptr64,unsigned __int64,unsigned int & __ptr64,unsigned int & __ptr64) __ptr64" ?DoWrite@CVmtChannelV1@@IEAAJPEAE_KAEAI2@Z
0x180001CE0: RfxVmtWriteChannel
0x1800087E8: WPP_b03bcf4e8cba3b6c2cfcdeb7c7df0195_Traceguids
0x1800010B0: WPP_SF_
0x180003F70: "public: long __cdecl CChannelHandleTable::FreeChannelTableIndex(unsigned __int64) __ptr64" ?FreeChannelTableIndex@CChannelHandleTable@@QEAAJ_K@Z
0x1800069B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800083A8: "__cdecl _imp__initterm" __imp__initterm
0x180004230: "public: virtual void * __ptr64 __cdecl CVmtChannelV1::`vector deleting destructor'(unsigned int) __ptr64" ??_ECVmtChannelV1@@UEAAPEAXI@Z
0x1800031A4: "public: int __cdecl CLibraryContext::WaitForRetry(void) __ptr64" ?WaitForRetry@CLibraryContext@@QEAAHXZ
0x180002070: RfxVmtGetDataAvailableEvent
0x180002810: RfxVmtPauseLibrary
0x180003268: "public: long __cdecl CLibraryContext::RegisterForVmTerminatedNotification(unsigned __int64) __ptr64" ?RegisterForVmTerminatedNotification@CLibraryContext@@QEAAJ_K@Z
0x18000AB30: "__cdecl _onexitend" __onexitend
0x180007133: "__cdecl unlock" _unlock
0x180008408: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800086A8: "\RfxVmtChannelRender" ??_C@_1CK@NJGOGPKL@?$AA?2?$AAR?$AAf?$AAx?$AAV?$AAm?$AAt?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x1800055C8: "protected: long __cdecl CVmtChannelV1::CreateParentEndpoint(void) __ptr64" ?CreateParentEndpoint@CVmtChannelV1@@IEAAJXZ
0x180002DAC: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x180008238: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003054: "public: long __cdecl CLibraryContext::DisableLibrary(void) __ptr64" ?DisableLibrary@CLibraryContext@@QEAAJXZ
0x180006280: "public: virtual void * __ptr64 __cdecl CRfxVmtChannel::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRfxVmtChannel@@UEAAPEAXI@Z
0x1800042E0: "public: virtual long __cdecl CVmtChannelV1::Create(enum _RFX_VMT_CHANNEL,enum _HV_PARTITION,void * __ptr64 & __ptr64) __ptr64" ?Create@CVmtChannelV1@@UEAAJW4_RFX_VMT_CHANNEL@@W4_HV_PARTITION@@AEAPEAX@Z
0x1800013C0: RfxVmtCreateChannelCancelable
0x180008788: "\DosDevices\Synth3dVsp" ??_C@_1CO@NAKMHEBB@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAS?$AAy?$AAn?$AAt?$AAh?$AA3?$AAd?$AAV?$AAs?$AAp?$AA?$AA@
0x180008308: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180008430: "__cdecl _xi_a" __xi_a
0x180008300: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180008388: "__cdecl _imp__unlock" __imp__unlock
0x180008230: api-ms-win-core-io-l1-1-1_NULL_THUNK_DATA
0x180002E5C: McGenEventWrite
0x18000A048: WPP_GLOBAL_Control
0x180008630: "Global\VmTerminatedEvent#Partiti" ??_C@_1EM@DOLACOGN@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAV?$AAm?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$CD?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi@
0x18000924C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001150: WPP_SF_D
0x180001150: WPP_SF_d
0x18000AB48: "__cdecl pRawDllMain" _pRawDllMain
0x1800083D0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180005A8C: "protected: long __cdecl CVmtChannelV1::CreateChildEndpoint(void) __ptr64" ?CreateChildEndpoint@CVmtChannelV1@@IEAAJXZ
0x180006724: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1800082C8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180006C50: "__cdecl _security_check_cookie" __security_check_cookie
0x180008428: "__cdecl _xc_z" __xc_z
0x180009260: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180008258: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004A70: "protected: long __cdecl CVmtChannelV1::DoReadAndCache(unsigned char * __ptr64,unsigned __int64,unsigned char * __ptr64,unsigned __int64,unsigned __int64 & __ptr64,unsigned int & __ptr64) __ptr64" ?DoReadAndCache@CVmtChannelV1@@IEAAJPEAE_K01AEA_KAEAI@Z
0x180008548: Microsoft_Windows_RemoteDesktopServices_RemoteFX_VM_User_Mode_TransportKeywords
0x1800016A0: RfxVmtCancelCreateChannel
0x180008220: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180004110: WPP_SF_qdd
0x1800082F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800087F8: WPP_fcd125567d1039f822aae4d2e7580c46_Traceguids
0x1800081F0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180003624: "long __cdecl CreateChannel(class CLibraryContext & __ptr64,struct _CHILD_PARTITION_DESCRIPTOR * __ptr64,enum _RFX_VMT_CHANNEL,class CRfxVmtChannel * __ptr64 & __ptr64,void (__cdecl*)(void * __ptr64,void * __ptr64),void * __ptr64)" ?CreateChannel@@YAJAEAVCLibraryContext@@PEAU_CHILD_PARTITION_DESCRIPTOR@@W4_RFX_VMT_CHANNEL@@AEAPEAVCRfxVmtChannel@@P6AXPEAX4@Z4@Z
0x180008610: WPP_69034e58f3e6398d7b059c53eaec825a_Traceguids
0x180006280: "public: virtual void * __ptr64 __cdecl CRfxVmtChannel::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRfxVmtChannel@@UEAAPEAXI@Z
0x180008288: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002910: RfxVmtShareBuffer
0x1800092C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180008268: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180008448: "__cdecl _guard_fids_table" __guard_fids_table
0x1800083E0: msvcrt_NULL_THUNK_DATA
0x1800080A0: "__cdecl load_config_used" _load_config_used
0x180008538: LibraryUnloaded
0x1800022E0: RfxVmtDisableLibrary
0x180002E2C: McGenEventUnregister
0x1800091D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180009274: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-1
0x1800082B8: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180008398: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180001F80: RfxVmtIsWriteDataConsumed
0x180008738: "\RfxVmtChannelTest" ??_C@_1CG@CGKMKBGG@?$AA?2?$AAR?$AAf?$AAx?$AAV?$AAm?$AAt?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAT?$AAe?$AAs?$AAt?$AA?$AA@
0x1800083E8: "__cdecl _imp_NtClose" __imp_NtClose
0x180008280: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180008260: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800082E8: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x1800062AC: "long __cdecl XmCreateFile(unsigned short * __ptr64,void * __ptr64 & __ptr64)" ?XmCreateFile@@YAJPEAGAEAPEAX@Z
0x180008698: WPP_bca31b919d3936283315dbb194e0d496_Traceguids
0x180001D50: RfxVmtVWriteChannel
0x180006D54: free
0x180008278: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006D30: "__cdecl purecall" _purecall
0x180005580: "public: virtual long __cdecl CVmtChannelV1::GetChannelStatus(void) __ptr64" ?GetChannelStatus@CVmtChannelV1@@UEAAJXZ
0x180006F60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180008818: WPP_8782bc64b5c73bee1ab06f79cf90996e_Traceguids
0x18000856C: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x1800091FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180001CB0: "long __cdecl InvokeVWrite(void * __ptr64,unsigned __int64 * __ptr64,unsigned long,...)" ?InvokeVWrite@@YAJPEAXPEA_KKZZ
0x180002190: RfxVmtGetChannelStatus
0x180006660: "unsigned long __cdecl XmCreateEvent(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?XmCreateEvent@@YAKPEAU_SECURITY_ATTRIBUTES@@HHPEBGPEAPEAX@Z
0x180008340: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180008370: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180008400: ntdll_NULL_THUNK_DATA
0x1800083B0: "__cdecl _imp_memcpy" __imp_memcpy
0x180002890: RfxVmtResumeLibrary
0x180003CF0: WPP_SF_PP
0x180002D10: RfxVmtRegisterForVmTerminatedNotification
0x180008338: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180009210: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180003CAC: WPP_SF_P
0x180008310: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18000A058: "__cdecl _security_cookie" __security_cookie
0x180003D48: "public: __cdecl CChannelHandleTable::~CChannelHandleTable(void) __ptr64" ??1CChannelHandleTable@@QEAA@XZ
0x1800082A8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180005130: "protected: long __cdecl CVmtChannelV1::AcquireBufferMutex(enum CVmtChannelV1::_MUTEX_TYPE) __ptr64" ?AcquireBufferMutex@CVmtChannelV1@@IEAAJW4_MUTEX_TYPE@1@@Z
0x1800081E0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180008570: "\\.\Synth3dVideo#PartitionID#%I6" ??_C@_1EM@ODIGIIBB@?$AA?2?$AA?2?$AA?4?$AA?2?$AAS?$AAy?$AAn?$AAt?$AAh?$AA3?$AAd?$AAV?$AAi?$AAd?$AAe?$AAo?$AA?$CD?$AAP?$AAa?$AAr?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$CD?$AA?$CF?$AAI?$AA6@
0x1800081F8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180001770: RfxVmtCloseChannel
0x1800091E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002F10: McGenControlCallbackV2
0x18000AB38: "__cdecl _onexitbegin" __onexitbegin
0x1800041D8: WPP_SF_ql
0x1800083A0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000118C: WPP_SF_qd
0x1800081B8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003E88: "public: long __cdecl CChannelHandleTable::AllocateChannelTableIndex(class CRfxVmtChannel * __ptr64,unsigned __int64 & __ptr64) __ptr64" ?AllocateChannelTableIndex@CChannelHandleTable@@QEAAJPEAVCRfxVmtChannel@@AEA_K@Z
0x180006E64: "__cdecl _security_init_cookie" __security_init_cookie
0x18000405C: WPP_SF_q
0x180008560: "User" ??_C@_19PIJILKAI@?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x1800083F0: "__cdecl _imp_NtOpenSymbolicLinkObject" __imp_NtOpenSymbolicLinkObject
0x180009198: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000301C: McGenEventRegister
0x180008380: "__cdecl _imp_malloc" __imp_malloc
0x1800083B8: "__cdecl _imp__purecall" __imp__purecall
0x180008348: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180006FB0: "__cdecl _report_gsfailure" __report_gsfailure
0x180008520: LibraryLoaded
0x180003DF0: "public: long __cdecl CChannelHandleTable::GetChannelByIndex(unsigned __int64,class CRfxVmtChannel * __ptr64 & __ptr64) __ptr64" ?GetChannelByIndex@CChannelHandleTable@@QEAAJ_KAEAPEAVCRfxVmtChannel@@@Z
0x180008298: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180006C74: "__cdecl onexit" _onexit
0x180009238: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x18000AB28: "__cdecl _native_startup_state" __native_startup_state
0x180001A50: RfxVmtReadChannelAndCache
0x18000A000: RFXVMT_ETW_PROVIDER_Context
0x180004D90: "public: virtual long __cdecl CVmtChannelV1::VWrite(unsigned long,char * __ptr64,unsigned __int64 & __ptr64) __ptr64" ?VWrite@CVmtChannelV1@@UEAAJKPEADAEA_K@Z
0x18000929C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800087B8: "\DosDevices\Synth3dVsc" ??_C@_1CO@JCAAIMGA@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAS?$AAy?$AAn?$AAt?$AAh?$AA3?$AAd?$AAV?$AAs?$AAc?$AA?$AA@
0x1800010D4: WPP_SF_Sd
0x180008368: "__cdecl _imp_free" __imp_free
0x180006DD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800082E0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800082F0: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x1800082D0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180009224: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180002EB8: McTemplateU0z
0x1800071E9: memset
0x1800092EC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]