PDB Symbols - srwmi.dll (0x72C6CF23B58FF0E934D1DDC8BE69DB566BA7FD7664C97AE6DCDA14EC6733E668)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\srwmi.dll Base=0x180000000 SHA-256=72C6CF23B58FF0E934D1DDC8BE69DB566BA7FD7664C97AE6DCDA14EC6733E668
PDB: srwmi.pdb GUID={6EBC8ED1-27B5-2D09-8A1512F58FF59416} Age=1

289 located named symbols:
0x180005530: s_cszSRRegKey
0x1800057E8: "CSrWMIProvider::Disable" ??_C@_0BI@IILJHEEJ@CSrWMIProvider?3?3Disable?$AA@
0x1800051C8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180003CEC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800052E0: "__cdecl _imp_EnableSRInternal" __imp_EnableSRInternal
0x180003B00: "__cdecl FindPESection" _FindPESection
0x180005198: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180005370: "__cdecl _imp_?OnFinalRelease@CThreadBase@@MEAAXXZ" __imp_?OnFinalRelease@CThreadBase@@MEAAXXZ
0x180006514: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800053A0: "__cdecl _imp_?Getbool@CInstance@@QEBA_NPEBGAEA_N@Z" __imp_?Getbool@CInstance@@QEBA_NPEBGAEA_N@Z
0x180003064: WPP_SF_sdsdd
0x180001298: "public: virtual __cdecl CSrWMIProvider::~CSrWMIProvider(void) __ptr64" ??1CSrWMIProvider@@UEAA@XZ
0x180005890: "__cdecl GUID_b653f1e0_17d7_4ac6_9b18_f84b61dbc1a2" _GUID_b653f1e0_17d7_4ac6_9b18_f84b61dbc1a2
0x180003EF0: "protected: virtual long __cdecl Provider::GetObject(class CInstance * __ptr64,long,class CFrameworkQuery & __ptr64) __ptr64" ?GetObject@Provider@@MEAAJPEAVCInstance@@JAEAVCFrameworkQuery@@@Z
0x1800016F0: "protected: virtual long __cdecl CSrWMIProvider::DeleteInstance(class CInstance const & __ptr64,long) __ptr64" ?DeleteInstance@CSrWMIProvider@@MEAAJAEBVCInstance@@J@Z
0x180008020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180006500: "__cdecl _IMPORT_DESCRIPTOR_SPP" __IMPORT_DESCRIPTOR_SPP
0x1800055F8: "Description" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800056D8: "CreateRestorePoint" ??_C@_1CG@GJDELBP@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x18000351C: "__cdecl CRT_INIT" _CRT_INIT
0x180005240: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001260: "public: virtual void * __ptr64 __cdecl CSrWMIProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSrWMIProvider@@UEAAPEAXI@Z
0x1800039F6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180003F00: "protected: virtual void __cdecl Provider::Flush(void) __ptr64" ?Flush@Provider@@MEAAXXZ
0x180005700: "Enable" ??_C@_1O@PFBIKACK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1800011D0: WppControlCallback
0x180004090: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800064B0: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x1800058E0: WPP_ThisDir_CTLGUID_ControlGuid
0x180005860: "DllRegisterServer" ??_C@_0BC@NPBLIDJ@DllRegisterServer?$AA@
0x180005358: "__cdecl _imp_?ValidateGetObjFlags@Provider@@MEAAJJ@Z" __imp_?ValidateGetObjFlags@Provider@@MEAAJJ@Z
0x180002450: DllGetClassObject
0x180005348: "__cdecl _imp_?ValidateQueryFlags@Provider@@MEAAJJ@Z" __imp_?ValidateQueryFlags@Provider@@MEAAJJ@Z
0x180005340: "__cdecl _imp_?ValidateDeletionFlags@Provider@@MEAAJJ@Z" __imp_?ValidateDeletionFlags@Provider@@MEAAJJ@Z
0x1800052D0: "__cdecl _imp_SRSetRestorePointInternal" __imp_SRSetRestorePointInternal
0x1800055B8: "root\default" ??_C@_1BK@GLDHCEOF@?$AAr?$AAo?$AAo?$AAt?$AA?2?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180005958: WPP_37d9a2896bad3495ee15cb8430de76ce_Traceguids
0x180005320: "__cdecl _imp_?GetBSTR@WBEMTime@@QEBAPEAGXZ" __imp_?GetBSTR@WBEMTime@@QEBAPEAGXZ
0x1800058F0: CLSID_SrControl
0x180005460: ole32_NULL_THUNK_DATA
0x180005470: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000865C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@exutils" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@exutils
0x180005450: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x180005800: "CSrWMIProvider::Restore" ??_C@_0BI@LJBPGIME@CSrWMIProvider?3?3Restore?$AA@
0x180003AE5: "__cdecl XcptFilter" _XcptFilter
0x180005338: "__cdecl _imp_?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z" __imp_?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z
0x180005478: "__cdecl _xc_a" __xc_a
0x1800085C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhiUhidnrUlyquivUznwGEUhidnrsOlyq@srwmi" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhiUhidnrUlyquivUznwGEUhidnrsOlyq@srwmi
0x180003EA7: "__cdecl lock" _lock
0x180001260: "public: virtual void * __ptr64 __cdecl CSrWMIProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSrWMIProvider@@UEAAPEAXI@Z
0x180005528: "__cdecl _guard_iat_table" __guard_iat_table
0x180005388: "__cdecl _imp_?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z" __imp_?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z
0x180003FF4: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180005418: "__cdecl _imp_memset" __imp_memset
0x180003CBF: "__cdecl initterm" _initterm
0x1800051F0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180008688: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005260: "__cdecl _imp_Sleep" __imp_Sleep
0x1800054A0: "__cdecl _xi_z" __xi_z
0x180005208: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800052F8: "__cdecl _imp_??1Provider@@UEAA@XZ" __imp_??1Provider@@UEAA@XZ
0x180003CCB: "__cdecl _C_specific_handler" __C_specific_handler
0x180005278: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x180003F30: "protected: virtual long __cdecl Provider::ValidateMethodFlags(long) __ptr64" ?ValidateMethodFlags@Provider@@MEAAJJ@Z
0x1800053C8: "__cdecl _imp__onexit" __imp__onexit
0x1800085F8: WPP_REGISTRATION_GUIDS
0x1800053A8: "__cdecl _imp_?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z" __imp_?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z
0x180005908: "SxIsAdminOrSystem" ??_C@_0BC@NFFEBLIO@SxIsAdminOrSystem?$AA@
0x180001DF4: "private: long __cdecl CSrWMIProvider::Disable(class CInstance * __ptr64,class CInstance * __ptr64) __ptr64" ?Disable@CSrWMIProvider@@AEAAJPEAVCInstance@@0@Z
0x1800057C8: "WaitTillEnabled" ??_C@_1CA@KKIADBHH@?$AAW?$AAa?$AAi?$AAt?$AAT?$AAi?$AAl?$AAl?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800051A0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003F90: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180002500: DllCanUnloadNow
0x180005670: "CreationTime" ??_C@_1BK@KBOGDDLN@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800018E4: "private: long __cdecl CSrWMIProvider::CreateRestorePoint(class CInstance * __ptr64,class CInstance * __ptr64) __ptr64" ?CreateRestorePoint@CSrWMIProvider@@AEAAJPEAVCInstance@@0@Z
0x1800085D0: WPP_MAIN_CB
0x180005940: "FAILED[TRACK]" ??_C@_0O@HMCJKGCN@FAILED?$FLTRACK?$FN?$AA@
0x180003AF1: "__cdecl amsg_exit" _amsg_exit
0x180005270: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x1800053E0: "__cdecl _imp__lock" __imp__lock
0x1800052A8: OLEAUT32_NULL_THUNK_DATA
0x180003AC8: atexit
0x180001060: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x180005310: "__cdecl _imp_?SetDWORD@CInstance@@QEAA_NPEBGK@Z" __imp_?SetDWORD@CInstance@@QEAA_NPEBGK@Z
0x1800051E8: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800051E0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180005218: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180003EBF: "__cdecl _dllonexit" __dllonexit
0x180005330: "__cdecl _imp_?GetWCHAR@CInstance@@QEBA_NPEBGPEAPEAG@Z" __imp_?GetWCHAR@CInstance@@QEBA_NPEBGPEAPEAG@Z
0x180005318: "__cdecl _imp_??0WBEMTime@@QEAA@AEBU_FILETIME@@@Z" __imp_??0WBEMTime@@QEAA@AEBU_FILETIME@@@Z
0x180008668: "__cdecl _native_startup_lock" __native_startup_lock
0x18000262C: DllMain
0x180008664: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUyhhgirmtUlyquivUznwGEUhgwzucOlyq@bsstring" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUyhhgirmtUlyquivUznwGEUhgwzucOlyq@bsstring
0x180003F20: "protected: virtual long __cdecl Provider::ValidateGetObjFlags(long) __ptr64" ?ValidateGetObjFlags@Provider@@MEAAJJ@Z
0x1800053E8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180002C24: "long __cdecl SxRegReadDWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,int)" ?SxRegReadDWORD@@YAJPEAUHKEY__@@PEBGPEAKH@Z
0x180005228: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005298: KERNEL32_NULL_THUNK_DATA
0x180005248: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800064D8: "__cdecl _IMPORT_DESCRIPTOR_framedynos" __IMPORT_DESCRIPTOR_framedynos
0x180008010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003F6C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005378: "__cdecl _imp_?Release@CInstance@@QEAAJXZ" __imp_?Release@CInstance@@QEAAJXZ
0x180005428: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180002B98: GetLastFailureAsHRESULT
0x180005398: "__cdecl _imp_?Create@CWbemGlueFactory@@SAPEAV1@PEAJ@Z" __imp_?Create@CWbemGlueFactory@@SAPEAV1@PEAJ@Z
0x180005760: "CSrWMIProvider::CreateRestorePoi" ??_C@_0CD@GJDPIEAL@CSrWMIProvider?3?3CreateRestorePoi@
0x1800057A0: "CSrWMIProvider::Enable" ??_C@_0BH@OEENPMEM@CSrWMIProvider?3?3Enable?$AA@
0x18000297C: "long __cdecl SxIsAdminOrSystem(void)" ?SxIsAdminOrSystem@@YAJXZ
0x1800064C4: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800055A8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180005788: "ReturnValue" ??_C@_1BI@FLOHINJE@?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180005250: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005360: "__cdecl _imp_?ValidateEnumerationFlags@Provider@@MEAAJJ@Z" __imp_?ValidateEnumerationFlags@Provider@@MEAAJJ@Z
0x180003BB0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800058D0: WPP_befce4f78d74391c4529abefa8f522e6_Traceguids
0x180005350: "__cdecl _imp_?ValidateMethodFlags@Provider@@MEAAJJ@Z" __imp_?ValidateMethodFlags@Provider@@MEAAJJ@Z
0x180001084: WPP_SF_
0x18000649C: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x180005280: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x1800052F0: "__cdecl _imp_??0Provider@@QEAA@PEBG0@Z" __imp_??0Provider@@QEAA@PEBG0@Z
0x180003760: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800053F0: "__cdecl _imp__initterm" __imp__initterm
0x1800052B8: "__cdecl _imp_SxTracerDebuggerBreak" __imp_SxTracerDebuggerBreak
0x180008660: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUgizxrmtUlyquivUznwGEUhgwzucOlyq@tracing" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUgizxrmtUlyquivUznwGEUhgwzucOlyq@tracing
0x180003F40: "protected: virtual long __cdecl Provider::ValidateQueryFlags(long) __ptr64" ?ValidateQueryFlags@Provider@@MEAAJJ@Z
0x1800016E0: "protected: virtual long __cdecl CSrWMIProvider::GetObject(class CInstance * __ptr64,long) __ptr64" ?GetObject@CSrWMIProvider@@MEAAJPEAVCInstance@@J@Z
0x1800052C0: "__cdecl _imp_SxTracerShouldTrackFailure" __imp_SxTracerShouldTrackFailure
0x180008678: "__cdecl _onexitend" __onexitend
0x180003EB3: "__cdecl unlock" _unlock
0x180005468: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005900: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180005220: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005610: "SequenceNumber" ??_C@_1BO@KODFFLBH@?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180005950: "FAILED" ??_C@_06OHCJKBJM@FAILED?$AA@
0x1800028FC: HRESULTFromNTSTATUS
0x180005430: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005490: "__cdecl _xi_a" __xi_a
0x180005230: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005658: "EventType" ??_C@_1BE@OGEKKHM@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800053D8: "__cdecl _imp__unlock" __imp__unlock
0x1800055D8: "SystemRestore" ??_C@_1BM@KICGOAAP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x180001700: "protected: virtual long __cdecl CSrWMIProvider::ExecMethod(class CInstance const & __ptr64,unsigned short * __ptr64 const,class CInstance * __ptr64,class CInstance * __ptr64,long) __ptr64" ?ExecMethod@CSrWMIProvider@@MEAAJAEBVCInstance@@QEAGPEAV2@2J@Z
0x180005458: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180005920: WPP_fe0b416e53013f034f3eec1b5711a87b_Traceguids
0x180002830: WPP_SF_dd
0x180008000: WPP_GLOBAL_Control
0x1800058C8: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180002F28: WPP_SF_d
0x180008690: "__cdecl pRawDllMain" _pRawDllMain
0x1800025B0: DllUnregisterServer
0x1800053D0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180003F10: "protected: virtual long __cdecl Provider::ValidateEnumerationFlags(long) __ptr64" ?ValidateEnumerationFlags@Provider@@MEAAJJ@Z
0x1800034C4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180005300: "__cdecl _imp_?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z" __imp_?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z
0x180002D54: "void __cdecl Free_StringArray(unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ?Free_StringArray@@YAXPEAKPEAPEAPEAG@Z
0x180003A10: "__cdecl _security_check_cookie" __security_check_cookie
0x180005488: "__cdecl _xc_z" __xc_z
0x180005448: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180005238: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800027A4: ??1?$CSxBaseHandle@PEAUHKEY__@@$0A@$0?0$1?SxRegCloseKeyWrapper@@YAHPEAU1@@Z@@QEAA@XZ
0x180002750: "public: __cdecl ATL::CComPtr<struct ISharedProtectionPoints>::~CComPtr<struct ISharedProtectionPoints>(void) __ptr64" ??1?$CComPtr@UISharedProtectionPoints@@@ATL@@QEAA@XZ
0x1800054A8: "__cdecl _guard_fids_table" __guard_fids_table
0x180001FD0: "private: long __cdecl CSrWMIProvider::Restore(class CInstance * __ptr64,class CInstance * __ptr64) __ptr64" ?Restore@CSrWMIProvider@@AEAAJPEAVCInstance@@0@Z
0x180005420: msvcrt_NULL_THUNK_DATA
0x180005090: "__cdecl load_config_used" _load_config_used
0x180008658: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@utils" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@utils
0x1800057B8: "Drive" ??_C@_1M@FLNELCMH@?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$AA@
0x1800052C8: SPP_NULL_THUNK_DATA
0x180005878: "DllUnregisterServer" ??_C@_0BE@IIFJAPHG@DllUnregisterServer?$AA@
0x1800016F0: "protected: virtual long __cdecl CSrWMIProvider::PutInstance(class CInstance const & __ptr64,long) __ptr64" ?PutInstance@CSrWMIProvider@@MEAAJAEBVCInstance@@J@Z
0x1800052D8: "__cdecl _imp_DisableSRInternal" __imp_DisableSRInternal
0x180005930: "SxRegReadDWORD" ??_C@_0P@CADLPMOB@SxRegReadDWORD?$AA@
0x1800053F8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180005268: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180005288: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005258: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005010: "const CSrWMIProvider::`vftable'" ??_7CSrWMIProvider@@6B@
0x180002FD4: WPP_SF_sdd
0x1800012C8: "public: __cdecl CSrWMISrRpProp::~CSrWMISrRpProp(void) __ptr64" ??1CSrWMISrRpProp@@QEAA@XZ
0x180005840: "SYSTEMRESTORE" ??_C@_1BM@NCOALMJC@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AAR?$AAE?$AAS?$AAT?$AAO?$AAR?$AAE?$AA?$AA@
0x180005200: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000314C: "public: __cdecl CSxFunctionTracer::CSxFunctionTracer(char const * __ptr64,unsigned short,unsigned short) __ptr64" ??0CSxFunctionTracer@@QEAA@PEBDGG@Z
0x1800056B8: "CSrWMIProvider::ExecMethod" ??_C@_0BL@ONEKFDFA@CSrWMIProvider?3?3ExecMethod?$AA@
0x180003CE0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180008600: "class CSrWMIProvider MySystemRestoreSet" ?MySystemRestoreSet@@3VCSrWMIProvider@@A
0x180005400: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180005440: ntdll_NULL_THUNK_DATA
0x180002DC4: "void __cdecl Free_SR_RP_PROP(struct _SR_RP_PROP * __ptr64)" ?Free_SR_RP_PROP@@YAXPEAU_SR_RP_PROP@@@Z
0x1800027D0: WPP_SF_Ddd
0x180005328: "__cdecl _imp_?Commit@CInstance@@QEAAJXZ" __imp_?Commit@CInstance@@QEAAJXZ
0x1800051B0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800051D8: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1800053C0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180005690: "CSrWMIProvider::EnumerateInstanc" ??_C@_0CD@LKPLPCJL@CSrWMIProvider?3?3EnumerateInstanc@
0x1800051D0: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180008018: "__cdecl _security_cookie" __security_cookie
0x180005630: "RestorePointType" ??_C@_1CC@PFBIDDEL@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAo?$AAi?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800051B8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180005818: "CSrWMIProvider::GetLastRestoreSt" ??_C@_0CF@HMPIHGBI@CSrWMIProvider?3?3GetLastRestoreSt@
0x1800051A8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180005290: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800053B0: "__cdecl _imp_?Flush@Provider@@MEAAXXZ" __imp_?Flush@Provider@@MEAAXXZ
0x180005438: "__cdecl _imp_RtlGetLastNtStatus" __imp_RtlGetLastNtStatus
0x180008680: "__cdecl _onexitbegin" __onexitbegin
0x180005308: "__cdecl _imp_?SetCHString@CInstance@@QEAA_NPEBG0@Z" __imp_?SetCHString@CInstance@@QEAA_NPEBG0@Z
0x180003F50: "protected: virtual long __cdecl Provider::ValidateDeletionFlags(long) __ptr64" ?ValidateDeletionFlags@Provider@@MEAAJJ@Z
0x180005710: "Disable" ??_C@_1BA@EHHBCNCC@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x180001C10: "private: long __cdecl CSrWMIProvider::Enable(class CInstance * __ptr64,class CInstance * __ptr64) __ptr64" ?Enable@CSrWMIProvider@@AEAAJPEAVCInstance@@0@Z
0x18000111C: WPP_SF_qL
0x180005210: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001174: WPP_SF_qq
0x180005730: "GetLastRestoreStatus" ??_C@_1CK@FPNGFLI@?$AAG?$AAe?$AAt?$AAL?$AAa?$AAs?$AAt?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180006488: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800051C0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180005380: "__cdecl _imp_?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z" __imp_?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z
0x180003F60: "protected: virtual long __cdecl Provider::ValidatePutInstanceFlags(long) __ptr64" ?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z
0x180003BE4: "__cdecl _security_init_cookie" __security_init_cookie
0x180003EE0: "protected: virtual void __cdecl CThreadBase::OnFinalRelease(void) __ptr64" ?OnFinalRelease@CThreadBase@@MEAAXXZ
0x1800064EC: "__cdecl _IMPORT_DESCRIPTOR_SRCLIENT" __IMPORT_DESCRIPTOR_SRCLIENT
0x180006474: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003250: "public: __cdecl CSxFunctionTracer::~CSxFunctionTracer(void) __ptr64" ??1CSxFunctionTracer@@QEAA@XZ
0x180005408: "__cdecl _imp_malloc" __imp_malloc
0x1800051F8: ADVAPI32_NULL_THUNK_DATA
0x1800052E8: SRCLIENT_NULL_THUNK_DATA
0x180005720: "Restore" ??_C@_1BA@LLGMNHOD@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x180003D30: "__cdecl _report_gsfailure" __report_gsfailure
0x180003A34: "__cdecl onexit" _onexit
0x180008670: "__cdecl _native_startup_state" __native_startup_state
0x1800016F0: "protected: virtual long __cdecl CSrWMIProvider::ExecQuery(class MethodContext * __ptr64,class CFrameworkQuery & __ptr64,long) __ptr64" ?ExecQuery@CSrWMIProvider@@MEAAJPEAVMethodContext@@AEAVCFrameworkQuery@@J@Z
0x180005368: "__cdecl _imp_?GetObject@Provider@@MEAAJPEAVCInstance@@JAEAVCFrameworkQuery@@@Z" __imp_?GetObject@Provider@@MEAAJPEAVCInstance@@JAEAVCFrameworkQuery@@@Z
0x180008030: "struct _GUID CLSID_SrWMIProvider" ?CLSID_SrWMIProvider@@3U_GUID@@A
0x180002530: DllRegisterServer
0x180002780: "public: __cdecl CSxRefPtr<class CInstance>::~CSxRefPtr<class CInstance>(void) __ptr64" ??1?$CSxRefPtr@VCInstance@@@@QEAA@XZ
0x1800052A0: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x180002750: "public: __cdecl ATL::CComPtr<struct ISrControl>::~CComPtr<struct ISrControl>(void) __ptr64" ??1?$CComPtr@UISrControl@@@ATL@@QEAA@XZ
0x180002884: WPP_SF_sd
0x180005410: "__cdecl _imp_free" __imp_free
0x180003B50: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800085C4: "long g_cLock" ?g_cLock@@3JA
0x1800053B8: framedynos_NULL_THUNK_DATA
0x180002F70: WPP_SF_s
0x1800010A8: WPP_SF_S
0x180005390: "__cdecl _imp_?Destroy@CWbemGlueFactory@@QEAAXXZ" __imp_?Destroy@CWbemGlueFactory@@QEAAXXZ
0x180004079: memset
0x180006528: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800052B0: "__cdecl _imp_SxTracerGetThreadContextRetail" __imp_SxTracerGetThreadContextRetail
0x180001320: "protected: virtual long __cdecl CSrWMIProvider::EnumerateInstances(class MethodContext * __ptr64,long) __ptr64" ?EnumerateInstances@CSrWMIProvider@@MEAAJPEAVMethodContext@@J@Z
0x180002278: "private: long __cdecl CSrWMIProvider::GetLastRestoreStatus(class CInstance * __ptr64,class CInstance * __ptr64) __ptr64" ?GetLastRestoreStatus@CSrWMIProvider@@AEAAJPEAVCInstance@@0@Z

[JEB Decompiler by PNF Software]