Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\cldflt.sys Base=0x1C0000000 SHA-256=75FDD62471348E40BD2E90AE290A646E79986550A9D38BC9F93D1FCA24FE163F
PDB: cldflt.pdb GUID={A2BC24D4-CE63-DE4E-807850084956169D} Age=1

1408 located named symbols:
0x1C006A6F0: HsmFltProcessCreatePlaceholders
0x1C0018760: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C0022090: "__cdecl _imp_FltAllocatePoolAlignedWithTag" __imp_FltAllocatePoolAlignedWithTag
0x1C000C040: TlmWriteDehydrationEvent
0x1C00221A8: "__cdecl _imp_FltGetFileContext" __imp_FltGetFileContext
0x1C0009118: HsmiOsIsPassThroughModeEnabled
0x1C0022590: "__cdecl _imp_RtlExtendCorrelationVector" __imp_RtlExtendCorrelationVector
0x1C0022108: "__cdecl _imp_FltIs32bitProcess" __imp_FltIs32bitProcess
0x1C0010D84: WPP_SF_qiqDDd
0x1C0022048: "__cdecl _imp_FltSetCallbackDataDirty" __imp_FltSetCallbackDataDirty
0x1C00011B0: WppClassicProviderCallback
0x1C003D8C4: HsmpAcquireBitmapLock
0x1C0015DF4: WPP_SF_qqiLiqd
0x1C0022570: "__cdecl _imp_PsGetThreadProcess" __imp_PsGetThreadProcess
0x1C0048960: HsmpNotifyDataChange
0x1C001E5F0: g_AssertSpinLock
0x1C0022488: "__cdecl _imp_KeExpandKernelStackAndCalloutEx" __imp_KeExpandKernelStackAndCalloutEx
0x1C0004608: WPP_SF_qiqLiqL
0x1C002FCF0: CldiSyncStreamTableFree
0x1C0022498: "__cdecl _imp_SeCaptureSubjectContext" __imp_SeCaptureSubjectContext
0x1C003DFE4: HsmpQueryModifiedRangeNoLock
0x1C003B964: SepSddlGetAclForString
0x1C00596D8: HsmpAcquirePropertyStreamResourceForInitialize
0x1C0022618: "__cdecl _imp_CcMapData" __imp_CcMapData
0x1C004DEF4: HsmiBitmapNORMALSetNextLevelBlockState
0x1C0022610: "__cdecl _imp_KeAreAllApcsDisabled" __imp_KeAreAllApcsDisabled
0x1C00226D0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C00227E0: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C0052330: HsmIBitmapNORMALOpen
0x1C00157E8: WPP_SF_qiqdd
0x1C000582C: WPP_SF_qDlLqiiD
0x1C000BBC0: TlmWriteRequestorProcessNameForSession0
0x1C000E4EC: WPP_SF_DDDDd
0x1C001D4D0: SupportedCompressionTypes
0x1C0035284: CldiStreamCompleteRequest
0x1C00024F8: WPP_SF_qDiidii
0x1C0027F50: CldHsmGetSyncRootFileId
0x1C004DF78: HsmiBitmapNORMALComputeMaxUserFileSize
0x1C0022110: "__cdecl _imp_FltGetFileNameInformation" __imp_FltGetFileNameInformation
0x1C000C9A4: WPP_SF_qLiiiid
0x1C0019040: WPP_bfad2b2035e432c7294194d2bdceed77_Traceguids
0x1C001D378: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0028180: WppTraceCallback
0x1C00228C8: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0034ED4: CldiStreamCancelSynchronousRequest
0x1C00345D8: CldiStreamGetNotificationType
0x1C00321B8: CldSyncReportProgress
0x1C003C958: HsmiQueryFileRangeNoLock
0x1C003D798: HsmpGetLastDehydrationReason
0x1C0011F38: WPP_SF_Ld
0x1C00121D0: WPP_SF_ld
0x1C003D7E8: HsmpComputeDehydrationReason
0x1C004625C: HsmpAccessCheck
0x1C000CC54: WPP_SF_qliiqqLiid
0x1C00430B0: HsmiCldBuildSyncPolicy
0x1C0015AA8: WPP_SF_lq
0x1C0041D50: HsmFltDeleteFILE_CONTEXT
0x1C0041E60: HsmFltDeleteSTREAM_CONTEXT
0x1C002FCC0: CldiSyncStreamTableAllocate
0x1C0003BB4: "__cdecl TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertDiagTrackProv
0x1C0019128: WPP_95b19520b268329c6db3e627caa0cf72_Traceguids
0x1C001550C: WPP_SF_qqcqd
0x1C00373BC: CldStreamAckData
0x1C00655D0: HsmFltPostSET_INFORMATION
0x1C0003204: WPP_SF_qidiDqDi
0x1C0041990: HsmpCtxAttachStreamHandleContext
0x1C006005C: HsmiMungeQueryDirectoryBufferWithoutShortname
0x1C00189A0: "BreakOnHydration" ??_C@_1CC@BLNOEOEK@?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C004E470: HsmiBitmapNORMALPrepareMcbsForCommit
0x1C0048ABC: HsmpToggleFileAttributesNotify
0x1C0022900: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C00032B4: WPP_SF_qidiiqDid
0x1C0022480: "__cdecl _imp_ExEventObjectType" __imp_ExEventObjectType
0x1C003D7B0: HsmpGetCorrelationVectorFromStreamContext
0x1C00492A0: HsmpGetRequestorMode
0x1C00109A0: HsmiBitmapNORMALFlushBitmapOnDiskCallout
0x1C0032790: CldSyncSendHydrationRequest
0x1C003D040: HsmiDehydrationCsqCOMPLETE_CANCELED_IO
0x1C0016C00: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0018E38: "CldStreamCancelIO" ??_C@_1CE@KKJJNIIC@?$AAC?$AAl?$AAd?$AAS?$AAt?$AAr?$AAe?$AAa?$AAm?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAI?$AAO?$AA?$AA@
0x1C00565A0: HsmpBitmapRelease
0x1C0009D00: HsmOsGetPolicyDWord
0x1C0022210: "__cdecl _imp_FltCancellableWaitForSingleObject" __imp_FltCancellableWaitForSingleObject
0x1C0015B08: WPP_SF_lqqLiqLiqqd
0x1C0022510: "__cdecl _imp_PsLookupProcessByProcessId" __imp_PsLookupProcessByProcessId
0x1C00063D8: HsmDbgBreakOnTimeOut
0x1C00572EC: HsmpRpValidateBuffer
0x1C00111F0: HsmFltPreFAST_IO_CHECK_IF_POSSIBLE
0x1C00188D8: Feature_CldFltDiagMode_logged_traits
0x1C00185B8: "180451" ??_C@_1O@HPOMLFGF@?$AA1?$AA8?$AA0?$AA4?$AA5?$AA1?$AA?$AA@
0x1C0031120: CldSyncConnectRoot
0x1C0022278: "__cdecl _imp_FltGetFileNameInformationUnsafe" __imp_FltGetFileNameInformationUnsafe
0x1C0059830: HsmpInitializePropertyContext
0x1C0019278: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C003DA14: HsmpReInitializeUserRequestRundownProtection
0x1C0060AC8: HsmiMungeQueryDirectory
0x1C0022158: "__cdecl _imp_FltWriteFile" __imp_FltWriteFile
0x1C0022438: MmHighestUserAddress
0x1C0022568: "__cdecl _imp_ZwOpenProcess" __imp_ZwOpenProcess
0x1C00579F0: HsmpRpRemove
0x1C0022418: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C002F350: CldPortSendPostOpMessage
0x1C0022948: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C002CEB0: CldiPortNotifyDisconnect
0x1C0022660: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C00222E8: "__cdecl _imp_FltCloseCommunicationPort" __imp_FltCloseCommunicationPort
0x1C00485A8: HsmpRelativeStreamOpenById
0x1C00444F8: HsmpCldGetSyncRootProviderInfo
0x1C001D318: TlmMsgPopulatePlaceholders
0x1C00114F0: HsmFltPostWRITE
0x1C0022580: "__cdecl _imp_RtlIncrementCorrelationVector" __imp_RtlIncrementCorrelationVector
0x1C00129E0: HsmiFileCacheReleaseFromLazyWrite
0x1C0010AE0: HsmiBitmapNORMALVerifyBitmapPages
0x1C0027FF0: CldHsmGetSyncRootInfoByPath
0x1C0011D94: WPP_SF_DDDDDDqd
0x1C00225E8: "__cdecl _imp_RtlDecompressBufferEx" __imp_RtlDecompressBufferEx
0x1C0018814: "" ??_C@_00CNPNBAHC@?$AA@
0x1C0004580: WPP_SF_qiqLd
0x1C00229A8: "__cdecl _imp_ExAllocateTimer" __imp_ExAllocateTimer
0x1C0049284: HsmpGetRequestorThread
0x1C0013EEC: HsmFileCacheExceptionFilter
0x1C00227D0: "__cdecl _imp_MmProbeAndLockPages" __imp_MmProbeAndLockPages
0x1C00128D8: WPP_SF_qqqlD
0x1C0035FA0: CldStreamCsqPEEK_NEXT_IO
0x1C002C53C: CldiPortProcessAckNotification
0x1C0009F24: HsmOsGetPhysicalMemorySize
0x1C0043B38: HsmiCldGetSyncProviderProcess
0x1C0018A10: "Altitude" ??_C@_1BC@JBOPDCNA@?$AAA?$AAl?$AAt?$AAi?$AAt?$AAu?$AAd?$AAe?$AA?$AA@
0x1C00184D0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0022820: "__cdecl _imp_FsRtlLookupBaseMcbEntry" __imp_FsRtlLookupBaseMcbEntry
0x1C0047834: HsmpQueryLastEffectiveUsn
0x1C0018768: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C0002770: WPP_SF_qiiiLd
0x1C00224B0: "__cdecl _imp_KeQueryPriorityThread" __imp_KeQueryPriorityThread
0x1C0015C68: WPP_SF_qqLiid
0x1C0022670: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0012844: WPP_SF_qqqiDd
0x1C00666B4: HsmiOpCompleteOperation
0x1C00286C8: CldiPortProcessServiceCommands
0x1C00226C0: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1C0001B70: WPP_SF_iDd
0x1C0022708: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0001104: WPP_SF_iid
0x1C0022828: "__cdecl _imp_ExInitializeRundownProtection" __imp_ExInitializeRundownProtection
0x1C002FDC8: CldiSyncRemovePendingRange
0x1C000E704: WPP_SF_isd
0x1C0022260: "__cdecl _imp_FltAllocateContext" __imp_FltAllocateContext
0x1C0011ED0: WPP_SF_Dqi
0x1C003552C: CldiStreamCompleteProviderRequest
0x1C0001EC4: WPP_SF_iZd
0x1C0010ABC: HsmiBitmapNORMALGetNumberOfPlexCopies
0x1C0022718: "__cdecl _imp_wcschr" __imp_wcschr
0x1C000481C: WPP_SF_qqLii
0x1C00368D0: CldStreamTransferData
0x1C0002B78: WPP_SF_iqiid
0x1C00027FC: WPP_SF_qqqid
0x1C00225F0: "__cdecl _imp_ExConvertExclusiveToSharedLite" __imp_ExConvertExclusiveToSharedLite
0x1C000B448: TlmIncrementExtendCV
0x1C00220D8: "__cdecl _imp_FltWriteFileEx" __imp_FltWriteFileEx
0x1C0022130: "__cdecl _imp_FltQuerySecurityObject" __imp_FltQuerySecurityObject
0x1C001265C: WPP_SF_qqLq
0x1C00470D4: HsmpOpenFileByIdEx
0x1C003446C: CldiStreamDeleteRequest
0x1C0051B34: HsmiBitmapNORMALCloseOnDisk
0x1C00225A8: "__cdecl _imp_MmBuildMdlForNonPagedPool" __imp_MmBuildMdlForNonPagedPool
0x1C0012150: WPP_SF_iDDd
0x1C00028D0: WPP_SF_iDdD
0x1C004D540: HsmiBitmapTranslateIOStatus
0x1C005B1B8: HsmFltProcessLockProperties
0x1C000DF3C: HsmpRecallInitiateHydration
0x1C0001008: "__cdecl TlgWrite" _TlgWrite
0x1C00223A0: "__cdecl _imp_RtlGetNtSystemRoot" __imp_RtlGetNtSystemRoot
0x1C0059A78: HsmpLoadPropertyStream
0x1C0022A08: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0018B78: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1C00055D8: WPP_SF_qDLq
0x1C0022270: "__cdecl _imp_FltCreateFileEx2" __imp_FltCreateFileEx2
0x1C000B668: TlmWriteCvForCancelHydration
0x1C0022328: "__cdecl _imp_FltGetDestinationFileNameInformation" __imp_FltGetDestinationFileNameInformation
0x1C00228F8: "__cdecl _imp_ExDeletePagedLookasideList" __imp_ExDeletePagedLookasideList
0x1C003E1B8: HsmpCaptureProcessInfo
0x1C005E0E0: HsmFltPostLOCK_CONTROL
0x1C0022798: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C0022710: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C005FF20: HsmFltPostQUERY_OPEN
0x1C00220A0: "__cdecl _imp_FltTagFileEx" __imp_FltTagFileEx
0x1C0027CA0: CldHsmGetSyncProviderStatus
0x1C001D010: "__cdecl CldFltRegistration" _CldFltRegistration
0x1C0022408: "__cdecl _imp_IoGetStackLimits" __imp_IoGetStackLimits
0x1C0003A68: CldiStreamPrepareRequestForCompletion
0x1C00225F8: "__cdecl _imp_FsRtlFastUnlockSingle" __imp_FsRtlFastUnlockSingle
0x1C000EE54: WPP_SF_qisddd
0x1C003B270: CldHsmNotifyPostOperation
0x1C00229F0: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C0019030: "`HsmBitmapGetNextLevelBlockState'::`2'::level0Masks" ?level0Masks@?1??HsmBitmapGetNextLevelBlockState@@9@9
0x1C000F040: WPP_SF_qisddi
0x1C00228F0: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C003CFE4: HsmiCompleteBitmapCommit
0x1C0022070: "__cdecl _imp_FltQueueDeferredIoWorkItem" __imp_FltQueueDeferredIoWorkItem
0x1C0012CE8: HsmFileCacheUninitialize
0x1C0022690: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C001D290: TlmMsgProcessReason_SecondAttach
0x1C00115A8: WPP_SF_qiqqqiiDd
0x1C00039E4: CldiStreamRemoveFromGlobalRequestListNoLock
0x1C004CA24: HsmRecallTransferData
0x1C000EC5C: WPP_SF_qisdd
0x1C002FE2C: CldiSyncInsertPendingRange
0x1C0022458: "__cdecl _imp_ZwCreateEvent" __imp_ZwCreateEvent
0x1C0007C88: HsmiOsBuildAppPolicyKeyAcl
0x1C0022518: "__cdecl _imp_ZwQueryInformationToken" __imp_ZwQueryInformationToken
0x1C00191D8: WPP_926157dbcad73884923aa2e3270974f5_Traceguids
0x1C0018788: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C0022360: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x1C00019AC: WPP_SF_cqdiiqi
0x1C000A9D8: HsmOsIsPassThroughModeEnabled
0x1C00227F8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0022410: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C00221B0: "__cdecl _imp_FltSetInstanceContext" __imp_FltSetInstanceContext
0x1C0004F80: wil_details_SetPropertyCacheUsageCallback
0x1C0022508: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0043C78: HsmiCldGetSyncRootFileIdByPath
0x1C006FB70: TlgUnregisterAggregateProvider
0x1C0037AB0: CldStreamAbortOperation
0x1C002A648: CldiPortProcessRetrieveData
0x1C006C75C: HsmFltProcessDehydrate
0x1C0019018: "open" ??_C@_04PMOCAHAA@open?$AA@
0x1C0018AF0: "\Registry\Machine\System\Current" ??_C@_1GK@CIEMKNHL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0007570: WPP_SF_ZZd
0x1C0062580: HsmiInfoRecallForRenameCompletion
0x1C006D09C: HsmFltProcessRevert
0x1C0038528: CldStreamAckRename
0x1C000B6F8: TlmWriteCvForHydrateData
0x1C0008AF8: HsmiOsIsFullHydrationEnabled
0x1C00027FC: WPP_SF_qqqqd
0x1C005A9E0: HsmiIsLockOwned
0x1C0001A4C: WPP_SF_cqdiiqid
0x1C0002A84: WPP_SF_iiiqd
0x1C002ED50: CldPortSendCancelPopulationMessage
0x1C006DDB4: HsmFltProcessSetCorrelationVector
0x1C00629F0: HsmiInfoHydratePlaceholderOnRename
0x1C006C26C: HsmFltProcessQueryRangeState
0x1C00188C0: "\SystemRoot" ??_C@_1BI@OMNCDEIM@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1C005FEB0: HsmFltPreQUERY_OPEN
0x1C0022088: "__cdecl _imp_FltFreePoolAlignedWithTag" __imp_FltFreePoolAlignedWithTag
0x1C0041AC4: HsmpCompletePendedDehydrationRequests
0x1C0005CC0: WPP_SF_qldPq
0x1C0016C40: memcpy
0x1C00443A8: HsmpCldCheckSyncProviderAccess
0x1C00469C4: HsmpDeleteAlternateStream
0x1C003CDB0: HsmiIsBitmapCommitPending
0x1C0004BC0: HsmiCbdTableCompare
0x1C000873C: HsmiOsGetProcessFlags
0x1C005B0F0: HsmiProcessPropertyLockRequestList
0x1C003130C: CldSyncDisconnectRootByObject
0x1C0065338: HsmFltPreSetEndOfFileInformation
0x1C00186C8: "D:P(A;;GA;;;AU)" ??_C@_1CA@PPBKACCA@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$AA@
0x1C0010190: WPP_SF_qisdqdd
0x1C0018840: "TELASSERT" ??_C@_1BE@BNPGOOBN@?$AAT?$AAE?$AAL?$AAA?$AAS?$AAS?$AAE?$AAR?$AAT?$AA?$AA@
0x1C002FD14: CldiSyncEnsurePendingRanges
0x1C00227C8: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C0046A9C: HsmpDeleteAlternateStreamById
0x1C0022648: "__cdecl _imp_CcPurgeCacheSection" __imp_CcPurgeCacheSection
0x1C0022928: "__cdecl _imp_IoGetCurrentProcess" __imp_IoGetCurrentProcess
0x1C0044378: HsmpCldCancelIo
0x1C003B7AC: SepSddlDaclFromSDDLString
0x1C00221C8: "__cdecl _imp_FltGetStreamHandleContext" __imp_FltGetStreamHandleContext
0x1C002EA80: CldPortSendPopulationMessage
0x1C0003BB4: "__cdecl TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertDiagTrack_KMProv" _TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertDiagTrack_KMProv
0x1C00223F0: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C00658F0: HsmFltPostQUERY_INFORMATION
0x1C0063010: HsmiInfoRenameNotificationCallback
0x1C0022630: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C001D510: pfnWppGetVersion
0x1C0022720: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C000934C: HsmOsBlockPlaceholderAccess
0x1C004E310: HsmiBitmapNORMALLookupMcbMapping
0x1C0062760: HsmiOpInheritPinStatePost
0x1C0028670: CldiSyncStreamTableCompare
0x1C0003BC0: InitializeTelemetryAssertsKM
0x1C00106C0: WPP_SF_qisld
0x1C00228B8: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x1C00169CD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0022840: "__cdecl _imp_RtlNextUnicodePrefix" __imp_RtlNextUnicodePrefix
0x1C004BC60: HsmRecallAckData
0x1C003D750: HsmpGetRecallAlignment
0x1C0018990: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1C0041FA0: HsmFltDeleteSTREAMHANDLE_CONTEXT
0x1C00221B8: "__cdecl _imp_FltGetVolumeFromName" __imp_FltGetVolumeFromName
0x1C0002F28: WPP_SF_iqqqiid
0x1C0015E90: WPP_SF_qqiqiid
0x1C0011660: WPP_SF_qqiqiiD
0x1C0004A08: WPP_SF_qqiqLiq
0x1C002C1C4: CldiPortProcessTransfer
0x1C001DB30: "__cdecl _DEBUG" __DEBUG
0x1C001150C: WPP_SF_qiqqqDd
0x1C00222B8: "__cdecl _imp_FltGetVolumeInstanceFromName" __imp_FltGetVolumeInstanceFromName
0x1C0022628: "__cdecl _imp_CcFlushCache" __imp_CcFlushCache
0x1C0030544: CldiSyncTransferOrAckData
0x1C00185C8: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1C0016C40: memmove
0x1C0018638: "D:PAI(A;;FA;;;SY)(A;;FR;;;AU)" ??_C@_1DM@DKKHGADO@?$AAD?$AA?3?$AAP?$AAA?$AAI?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$AA@
0x1C002DB78: CldiGetCommonMessageSize
0x1C003B630: SepSddlSecurityDescriptorFromSDDLString
0x1C0008E9C: HsmiOsSetPebAppCompatFlags
0x1C0004B60: HsmiCbdTableAllocate
0x1C004D5F0: HsmiBitmapNORMALMapBlock
0x1C0001714: WPP_SF_qqDqDDDd
0x1C0022390: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0027CC0: CldHsmGetSyncStatus
0x1C0022540: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C0010348: WPP_SF_qisid
0x1C0022848: "__cdecl _imp_FsRtlUninitializeBaseMcb" __imp_FsRtlUninitializeBaseMcb
0x1C0004AA8: WPP_SF_qqiqLiqd
0x1C001E610: g_AssertsOperational
0x1C0018C98: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1C001D270: TlmMsgProcessReason_Session0
0x1C00225D8: "__cdecl _imp_KeReadStateEvent" __imp_KeReadStateEvent
0x1C00220C8: "__cdecl _imp_FltLockUserBuffer" __imp_FltLockUserBuffer
0x1C0016A1C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0022980: "__cdecl _imp_KeIsExecutingDpc" __imp_KeIsExecutingDpc
0x1C000306C: WPP_SF_iqqqiiiid
0x1C0019170: ":${3D0CE612-FDEE-43f7-8ACA-957BE" ??_C@_1FE@BANNKMFJ@?$AA?3?$AA$?$AA?$HL?$AA3?$AAD?$AA0?$AAC?$AAE?$AA6?$AA1?$AA2?$AA?9?$AAF?$AAD?$AAE?$AAE?$AA?9?$AA4?$AA3?$AAf?$AA7?$AA?9?$AA8?$AAA?$AAC?$AAA?$AA?9?$AA9?$AA5?$AA7?$AAB?$AAE@
0x1C0022668: "__cdecl _imp_IoIsOperationSynchronous" __imp_IoIsOperationSynchronous
0x1C0022150: "__cdecl _imp_FltCreateFileEx" __imp_FltCreateFileEx
0x1C0022188: "__cdecl _imp_FltRegisterFilter" __imp_FltRegisterFilter
0x1C00222A0: "__cdecl _imp_FltReleaseFileNameInformation" __imp_FltReleaseFileNameInformation
0x1C004D588: HsmIBitmapNORMALUnpinBlock
0x1C0056F94: HsmpRpReadBuffer
0x1C003DDC0: HsmpPersistInSync
0x1C0022200: "__cdecl _imp_FltSetFileContext" __imp_FltSetFileContext
0x1C006F9CC: TlgRegisterAggregateProvider
0x1C0022858: "__cdecl _imp_FsRtlAddBaseMcbEntry" __imp_FsRtlAddBaseMcbEntry
0x1C0015FE0: "void __cdecl TlgAggregateInternalFlushTimerCallbackKernelMode(struct _EX_TIMER * __ptr64,void * __ptr64)" ?TlgAggregateInternalFlushTimerCallbackKernelMode@@YAXPEAU_EX_TIMER@@PEAX@Z
0x1C00341EC: CldiStreamDeleteMasterRequest
0x1C00300AC: CldiSyncTransferOrAckDataByObject
0x1C0022320: "__cdecl _imp_FltCancelIo" __imp_FltCancelIo
0x1C0006300: HsmpDbgBreakOnSecondAttach
0x1C00484E8: HsmpRelativeStreamOpen
0x1C0022198: "__cdecl _imp_FltClose" __imp_FltClose
0x1C00335A0: CldSyncSendPopulationRequest
0x1C00117C0: HsmiCompleteLockCallbackDataRoutine
0x1C0018DA0: "\System32\LogFiles\CloudFiles\Cl" ??_C@_1FE@HIPFNKJN@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAC?$AAl?$AAo?$AAu?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAC?$AAl@
0x1C002FF20: CldiSyncSplitPendingRange
0x1C0002620: WPP_SF_qdiDqDi
0x1C00439E0: HsmpCldGetSyncPolicy
0x1C00073B4: HsmpTracePostCallbackExit
0x1C00228D0: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x1C0048C70: HsmpToggleFileAttributesNoNotify
0x1C0006314: HsmpDbgFullyHydrateOnUserModeOpen
0x1C0022938: "__cdecl _imp_PsInitialSystemProcess" __imp_PsInitialSystemProcess
0x1C0013030: HsmiFileCacheValidateFileObject
0x1C0022078: "__cdecl _imp_FltProcessFileLock" __imp_FltProcessFileLock
0x1C001E620: WPP_MAIN_CB
0x1C00225C8: "__cdecl _imp_RtlDecompressBuffer" __imp_RtlDecompressBuffer
0x1C0022958: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C0022030: "__cdecl _imp_FltQueryInformationByName" __imp_FltQueryInformationByName
0x1C00316A4: CldSyncLookupRootByName
0x1C0018700: WPP_ffb6b51cb7ef3245ef53296e1b5476ae_Traceguids
0x1C00155A0: FltQueryInformationByNameCallout
0x1C0022248: "__cdecl _imp_FltGetVolumeName" __imp_FltGetVolumeName
0x1C0022448: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C0022560: "__cdecl _imp_KeUnstackDetachProcess" __imp_KeUnstackDetachProcess
0x1C005E780: HsmFltPostCLEANUP
0x1C0036040: CldStreamCsqREMOVE_IO
0x1C004CFC4: HsmRecallUpdatePlaceholderFile
0x1C0062790: HsmiInfoPrepareSourceForRename
0x1C001E480: "__cdecl _Config" __Config
0x1C0028670: CldiSyncRootTableCompare
0x1C0003BB4: "__cdecl TlgDefineProvider_annotation__TlgTLM_PROVIDERProv" _TlgDefineProvider_annotation__TlgTLM_PROVIDERProv
0x1C0005FF4: HsmpDbgBreakOnCbd
0x1C00026C0: WPP_SF_qdiDqDid
0x1C0062530: HsmFltPostFILE_SYSTEM_CONTROL
0x1C0022808: "__cdecl _imp_RtlInsertUnicodePrefix" __imp_RtlInsertUnicodePrefix
0x1C0018A28: WPP_4181bc81e47e3d8447f9505ecf48bbf3_Traceguids
0x1C001DB20: Feature_CloudFileDisguisePlaceholdersForGUIApps__private_propertyCache
0x1C0001350: WPP_SF_idiiqD
0x1C0001D78: WPP_SF_iDqiid
0x1C0045B64: HsmiOpenFile
0x1C0003370: WPP_SF_qiiiiL
0x1C0012960: HsmiFileCacheAcquireForLazyWrite
0x1C000CA68: WPP_SF_qLqiqd
0x1C001D2A0: TlmMsgCancelHydration
0x1C003D908: HsmpReleaseBitmapLock
0x1C0028610: CldiPortRootTableAllocate
0x1C0031594: CldSyncDisconnectRoot
0x1C003BE48: SepSddlParseWideStringUlong
0x1C00222A8: "__cdecl _imp_FltAcquirePushLockExclusiveEx" __imp_FltAcquirePushLockExclusiveEx
0x1C0002BFC: WPP_SF_iqiiqd
0x1C0002D64: WPP_SF_iqqiid
0x1C0003464: WPP_SF_qqiiid
0x1C0003464: WPP_SF_qqqiqd
0x1C0022050: "__cdecl _imp_FltPerformAsynchronousIo" __imp_FltPerformAsynchronousIo
0x1C00346B8: CldiStreamCsqCOMPLETE_CANCELED_IO
0x1C0018830: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x1C0007FC0: HsmiOsGetAppPolicy
0x1C001DB04: Feature_CloudFileDisguisePlaceholders__private_propertyCache
0x1C0022430: "__cdecl _imp_FsRtlIsNtstatusExpected" __imp_FsRtlIsNtstatusExpected
0x1C0022950: "__cdecl _imp_FsRtlDoesNameContainWildCards" __imp_FsRtlDoesNameContainWildCards
0x1C0001544: WPP_SF_qii
0x1C0002C8C: WPP_SF_iqq
0x1C0003400: WPP_SF_qqi
0x1C0018480: WPP_633666c1c7de336e14764c8d6de71884_Traceguids
0x1C005085C: HsmiBitmapNORMALOpenOnDisk
0x1C0018450: GUID_ECP_OPEN_PARAMETERS
0x1C0027410: CldHsmCreateStreamContext
0x1C004A278: HsmiRecallFreePopulationContext
0x1C0022550: "__cdecl _imp_RtlOpenCurrentUser" __imp_RtlOpenCurrentUser
0x1C0022678: "__cdecl _imp_CcSetFileSizes" __imp_CcSetFileSizes
0x1C00226E0: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C0011FE4: WPP_SF_cccciDi
0x1C0022558: "__cdecl _imp_ZwQueryInformationFile" __imp_ZwQueryInformationFile
0x1C0018798: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C0041344: HsmpCtxCreateStreamHandleContext
0x1C004E594: HsmIBitmapVOLATILEQueryRangeEx
0x1C00223D0: "__cdecl _imp_IoGetTopLevelIrp" __imp_IoGetTopLevelIrp
0x1C000AA8C: HsmOsQueryPackageIdentity
0x1C0002A00: WPP_SF_iDqd
0x1C0002388: WPP_SF_qDiD
0x1C00034EC: WPP_SF_qqiq
0x1C005B990: HsmiCompressBuffer
0x1C002FC90: CldiSyncRootTableFree
0x1C000805C: HsmiOsOpenAppPolicyKey
0x1C0036684: CldStreamPurgeCache
0x1C000C920: WPP_SF_qLid
0x1C002FA98: CldPortInitialize
0x1C0018770: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C000163C: WPP_SF_iiqd
0x1C00023FC: WPP_SF_qDii
0x1C000163C: WPP_SF_qiid
0x1C00220F8: "__cdecl _imp_FltFreeExtraCreateParameterList" __imp_FltFreeExtraCreateParameterList
0x1C0004564: MicrosoftTelemetryAssertTriggeredArgsMsgKM
0x1C000A9EC: HsmOsIsTestSigningEnabled
0x1C00224F8: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x1C0002CF0: WPP_SF_iqqd
0x1C000163C: WPP_SF_qqid
0x1C000A980: HsmOsIsOsProcess
0x1C0022920: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C000A9C4: HsmOsIsSyncProviderProcess
0x1C0012DE0: HsmiFileCacheAllocateStreamControlBlock
0x1C0055A28: HsmIBitmapNORMALCompleteCommit
0x1C005AAA0: HsmiDoesBlobOperationConflictWithExistingLocks
0x1C0002274: WPP_SF_qDdDDd
0x1C002B6FC: CldiPortProcessTransferPlaceholders
0x1C001DB08: g_wil_details_recordFeatureUsage
0x1C0010E9C: WPP_SF_qqDDDd
0x1C0048A3C: HsmpToggleFileAttributes
0x1C00225A0: "__cdecl _imp_IoBuildPartialMdl" __imp_IoBuildPartialMdl
0x1C001D520: pfnWppQueryTraceInformation
0x1C0046168: HsmiUpdateFileAttributes
0x1C003CA68: HsmiMarkFileRangeNoLock
0x1C0018470: GUID_ECP_ATOMIC_CREATE
0x1C0047DD8: HsmpSetFileDisposition
0x1C000C3C0: TlmWriteLastAccessedTimeChangedEvent
0x1C0022268: "__cdecl _imp_FltCompletePendedPreOperation" __imp_FltCompletePendedPreOperation
0x1C0022288: "__cdecl _imp_FltCbdqInitialize" __imp_FltCbdqInitialize
0x1C0012384: WPP_SF_qiDDd
0x1C0002304: WPP_SF_qDdDd
0x1C0013C7C: HsmFileCacheUnpinData
0x1C0060584: HsmiMungeQueryDirectoryBufferWithShortname
0x1C00226C8: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0004794: WPP_SF_qqDDD
0x1C0022470: "__cdecl _imp_SePrivilegeCheck" __imp_SePrivilegeCheck
0x1C001593C: WPP_SF_qqLiiqd
0x1C003402C: CldSyncCleanup
0x1C0022368: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x1C0022230: "__cdecl _imp_FltAcknowledgeEcp" __imp_FltAcknowledgeEcp
0x1C0022638: "__cdecl _imp_MmSetAddressRangeModified" __imp_MmSetAddressRangeModified
0x1C00221E0: "__cdecl _imp_FltFsControlFile" __imp_FltFsControlFile
0x1C001871C: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x1C00224C0: "__cdecl _imp_ZwOpenThreadTokenEx" __imp_ZwOpenThreadTokenEx
0x1C000A95C: HsmOsDisguisePlaceholder
0x1C0018DF8: "\DosDevices\" ??_C@_1BK@LABJKOM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
0x1C0015600: WPP_SF_qqqiDDd
0x1C0022330: FLTMGR_NULL_THUNK_DATA
0x1C0012AE0: HsmiFileCacheReleaseFromReadAhead
0x1C001D328: PropertyStreamName
0x1C00223B8: "__cdecl _imp_SeLocateProcessImageName" __imp_SeLocateProcessImageName
0x1C0001278: WPP_SF_iD
0x1C00010B0: WPP_SF_id
0x1C0001E14: WPP_SF_iZ
0x1C0016A84: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C0011230: HsmFltPreWRITE
0x1C005AB24: HsmiGrantLockRequest
0x1C00228E0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C006CF54: HsmFltProcessHydrate
0x1C00188F8: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1C0046DC4: HsmpGetStreamHandleContext
0x1C00156A8: WPP_SF_qiiiqLid
0x1C0052C94: HsmiBitmapNORMALDeleteOnDisk
0x1C001880C: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C0005AB0: WPP_SF_qDqilLLL
0x1C0046FF0: HsmpMarkHandleUsnSourceInfo
0x1C00226E8: "__cdecl _imp_RtlQueryRegistryValuesEx" __imp_RtlQueryRegistryValuesEx
0x1C0022018: "__cdecl _imp_FltCancelFileOpen" __imp_FltCancelFileOpen
0x1C0022750: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00225B0: "__cdecl _imp_MmUnmapLockedPages" __imp_MmUnmapLockedPages
0x1C0001234: WPP_SF_i
0x1C0008FD0: HsmiOsIsSyncProviderProcess
0x1C00325D4: CldSyncAckDehydrate
0x1C003C5CC: HsmiExpandBitmapNoLock
0x1C0010A70: HsmpBitmapQueryRangeExCallout
0x1C0015874: WPP_SF_qqDqDiqLid
0x1C000A998: HsmOsIsRealTimeThread
0x1C00169F8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C00220E8: "__cdecl _imp_FltPerformSynchronousIo" __imp_FltPerformSynchronousIo
0x1C002FC60: CldiSyncRootTableAllocate
0x1C005E824: HsmiCreateFreeECPTags
0x1C004A584: HsmiRecallPostProcessUserHydrationRequest
0x1C00308F8: CldiSyncInitializeRootNoLock
0x1C00227B0: "__cdecl _imp_IoAllocateMdl" __imp_IoAllocateMdl
0x1C00188D8: Feature_CloudFileDisguisePlaceholders_logged_traits
0x1C00488D0: HsmpEnableSyncOp
0x1C00220F0: "__cdecl _imp_FltAllocateExtraCreateParameterList" __imp_FltAllocateExtraCreateParameterList
0x1C00184B0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0018E88: "CancelPopulation" ??_C@_1CC@FEJOJDMC@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAP?$AAo?$AAp?$AAu?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0019138: WPP_c1a27bb51c8833086a4eb49815d41a42_Traceguids
0x1C0022878: "__cdecl _imp_RtlRemoveUnicodePrefix" __imp_RtlRemoveUnicodePrefix
0x1C0009B5C: HsmOsCheckIfSetupInProgress
0x1C000EA4C: WPP_SF_qisdDiD
0x1C000F268: WPP_SF_qisddid
0x1C000EF3C: WPP_SF_qisdddd
0x1C0051C88: HsmiBitmapNORMALFlushBitmapOnDisk
0x1C0022728: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0044D7C: HsmpCldIsHydrationDisallowed
0x1C000BBA4: TlmWriteRequestorProcessNameForSecondAttach
0x1C0061210: HsmFltPreDIRECTORY_CONTROL
0x1C000C188: TlmWriteDehydrationQueued
0x1C00225E0: "__cdecl _imp_RtlCrc32" __imp_RtlCrc32
0x1C0003BB4: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x1C0049CE8: HsmiRecallFreeHydrationContext
0x1C003D0FC: HsmpCreateProcessInfo
0x1C0022960: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C0022598: "__cdecl _imp_ExUuidCreate" __imp_ExUuidCreate
0x1C0022700: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00224D8: "__cdecl _imp_ZwCreateFile" __imp_ZwCreateFile
0x1C0042130: HsmFltDeleteINSTANCE_CONTEXT
0x1C000CDEC: WPP_SF_qqLliqiqd
0x1C0022350: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x1C0045ADC: HsmCldDeleteSyncRootInfo
0x1C000A07C: HsmOsGetProcessImageFileName
0x1C00226F0: "__cdecl _imp_ZwTraceControl" __imp_ZwTraceControl
0x1C001E4A0: "__cdecl _BE" __BE
0x1C0019028: "Opened" ??_C@_06BOFEPHLF@Opened?$AA@
0x1C0033A2C: CldSyncIsCallbackRequested
0x1C0018D68: "SOFTWARE" ??_C@_1BC@JDKNNDON@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
0x1C0018710: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C003AC50: CldHsmCancelAllRequests
0x1C001D500: pfnEtwRegisterClassicProvider
0x1C0022000: "__cdecl _imp_FltIsDirectory" __imp_FltIsDirectory
0x1C004DD9C: HsmiBitmapNormalOpenStream
0x1C000ED30: WPP_SF_qisddDDd
0x1C0056884: HsmpRpiDecompressBuffer
0x1C000985C: HsmOsBlockPlaceholderAccessByProcessId
0x1C0028640: CldiPortRootTableFree
0x1C0031014: CldSyncReportSyncStatusOnRoot
0x1C0027F70: CldHsmGetSyncRootFileIdByPath
0x1C00674D0: HsmiOpInheritPinStatePre
0x1C0044320: HsmiCldPreOpCompletionCallback
0x1C00615FC: HsmFltPreQUERY_ALLOCATED_RANGES
0x1C00355A4: CldiStreamServiceHydrationRequest
0x1C003846C: CldStreamAckDelete
0x1C0022748: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C000CEA8: WPP_SF_qqLqiqd
0x1C0018ED8: "PopulatePlaceholders" ??_C@_1CK@HILEMCJC@?$AAP?$AAo?$AAp?$AAu?$AAl?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAc?$AAe?$AAh?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x1C0019158: WPP_5cbc05e049283d7a8bcd24c3cb99a628_Traceguids
0x1C000AAB8: HsmOsSetPebCloudFileOpened
0x1C003CD10: HsmiQueryFileRangesTotalNoLock
0x1C00566A8: HsmpBitmapGetRangeState
0x1C002E72C: CldPortSendCancelHydrationMessage
0x1C00222B0: "__cdecl _imp_FltGetInstanceContext" __imp_FltGetInstanceContext
0x1C0027C30: CldHsmGetSyncProviderProcess
0x1C0007634: WPP_SF_Zd
0x1C00114F0: HsmFltPostREAD
0x1C0015270: HsmiFileCacheIrpClose
0x1C000E4B8: HsmpRecallInitiatePopulation
0x1C00188D8: Feature_CldFltBlockSession0Hydration_logged_traits
0x1C003C560: HsmiGetBitmap
0x1C0011810: HsmFltPreMDL_READ
0x1C003B354: CldStreamInitialize
0x1C0028670: CldiPortRootTableCompare
0x1C0012298: WPP_SF_qDqic
0x1C0042280: HsmFltInstanceSetup
0x1C005D604: HsmpGetPropertyStreamSize
0x1C0029C38: CldiPortAccessCheck
0x1C000CAFC: WPP_SF_qiiqqLid
0x1C0028470: CldHsmUninitialize
0x1C006DEBC: HsmFltProcessGetCorrelationVector
0x1C0018A40: ":${3D0CE612-FDEE-43f7-8ACA-957BE" ??_C@_1HE@FFOJCLL@?$AA?3?$AA$?$AA?$HL?$AA3?$AAD?$AA0?$AAC?$AAE?$AA6?$AA1?$AA2?$AA?9?$AAF?$AAD?$AAE?$AAE?$AA?9?$AA4?$AA3?$AAf?$AA7?$AA?9?$AA8?$AAA?$AAC?$AAA?$AA?9?$AA9?$AA5?$AA7?$AAB?$AAE@
0x1C00422A0: HsmFltInstanceQueryTeardown
0x1C00074E4: WPP_SF_Z
0x1C000C868: WPP_SF_iqqqLiiid
0x1C000C868: WPP_SF_qqqqLiqid
0x1C0030F40: CldiSyncSetSyncStatusOnRoot
0x1C000E648: WPP_SF_iisd
0x1C002A908: CldiPortProcessRestartHydration
0x1C00222D8: "__cdecl _imp_FltReleaseContext" __imp_FltReleaseContext
0x1C006F2C0: "void __cdecl TlgAggregateInternalFlushWorkItemRoutineKernelMode(void * __ptr64)" ?TlgAggregateInternalFlushWorkItemRoutineKernelMode@@YAXPEAX@Z
0x1C003DED0: HsmpSetInSyncNoLock
0x1C0001AFC: WPP_SF_cqii
0x1C0018810: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C0011D60: WPP_SF_
0x1C0056218: HsmpBitmapCreateSnapshot
0x1C0018778: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C0018750: WPP_ef096abc4c293edfa63c42bf1a79b674_Traceguids
0x1C006B4C4: HsmFltProcessUpdatePlaceholder
0x1C003B56C: SeSddlSecurityDescriptorFromSDDL
0x1C0014730: HsmiFileCacheWriteCompletion
0x1C0062C70: HsmiInfoDeleteNotificationCallback
0x1C000BD80: TlmWriteLegacyFilterName
0x1C00100A4: WPP_SF_qisdqd
0x1C0003BB4: "__cdecl TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtakm_hTelemetryAssertProv
0x1C0064E4C: HsmFltPreSetLinkInformation
0x1C00153AC: HsmpFileCacheSetFileSize
0x1C0019210: "__cdecl _xmm@7fffffffffffffff0000000000000000" __xmm@7fffffffffffffff0000000000000000
0x1C001D528: pfnEtwUnregister
0x1C0018EB0: "CldHsmHydrateData" ??_C@_1CE@KNHPDJLO@?$AAC?$AAl?$AAd?$AAH?$AAs?$AAm?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1C003DC74: HsmpIsDirectory
0x1C0018D40: "AppName" ??_C@_1BA@HJNHGNPD@?$AAA?$AAp?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C00221F8: "__cdecl _imp_FltSetStreamHandleContext" __imp_FltSetStreamHandleContext
0x1C0022298: "__cdecl _imp_FltAcquirePushLockSharedEx" __imp_FltAcquirePushLockSharedEx
0x1C0018F08: "SecondAttach" ??_C@_1BK@KPKKGDKL@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAA?$AAt?$AAt?$AAa?$AAc?$AAh?$AA?$AA@
0x1C0059948: HsmiFindSupportedCompressionType
0x1C0027390: CldHsmDeleteStreamContext
0x1C001D2C0: TlmMsgCancelNotification
0x1C0046CCC: HsmpGetStreamContext
0x1C0022770: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C005A900: HsmiDoesLockRequestConflictWithExistingLocks
0x1C0005178: wil_details_FeaturePropertyCache_ReportUsageToServiceDirect
0x1C000BA6C: TlmpWriteRequestorProcessName
0x1C0002E9C: WPP_SF_iqqqii
0x1C0047420: HsmpOpenInstancesRegistryKey
0x1C0066764: HsmiOpUpdateInSyncState
0x1C00017CC: WPP_SF_qqDqDd
0x1C0022870: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C0036020: CldStreamCsqINSERT_IO
0x1C00228A0: "__cdecl _imp_RtlEnumerateGenericTableWithoutSplayingAvl" __imp_RtlEnumerateGenericTableWithoutSplayingAvl
0x1C00098C0: HsmOsCheckAppCompatPolicy
0x1C004F47C: HsmiBitmapNORMALMarkBitmapOnDisk
0x1C0033C58: CldSyncSendPreNotification
0x1C00186A0: "cldflt.sys" ??_C@_0L@FHCKNPL@cldflt?4sys?$AA@
0x1C0022538: "__cdecl _imp_PsGetThreadTeb" __imp_PsGetThreadTeb
0x1C0043E20: HsmiCldGetSyncRootFileIdByFileObject
0x1C00086D0: HsmiOsStackAttachProcess
0x1C0022440: "__cdecl _imp_SeReleaseSubjectContext" __imp_SeReleaseSubjectContext
0x1C0022290: "__cdecl _imp_FltInitializePushLock" __imp_FltInitializePushLock
0x1C0022028: "__cdecl _imp_FltRemoveOpenReparseEntry" __imp_FltRemoveOpenReparseEntry
0x1C0022548: "__cdecl _imp_ExQueryWnfStateData" __imp_ExQueryWnfStateData
0x1C0022438: "__cdecl _imp_MmHighestUserAddress" __imp_MmHighestUserAddress
0x1C0005968: WPP_SF_qDqZlLLL
0x1C0022500: "__cdecl _imp_KeStackAttachProcess" __imp_KeStackAttachProcess
0x1C00472C4: HsmpOpenFileByPath
0x1C005F304: HsmiFltPreECPCREATE
0x1C005A7F8: HsmpUnloadPropertyStream
0x1C00224A8: "__cdecl _imp_PsGetProcessWow64Process" __imp_PsGetProcessWow64Process
0x1C005D7B4: HsmpDeletePropertyStream
0x1C0056654: HsmpBitmapQueryRange
0x1C0070B90: GsDriverEntry
0x1C0033834: CldSyncSendCancelPopulationRequest
0x1C0022A00: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C00185D0: WPP_a0d6e424cbc832cd078c7c1ea9c559d3_Traceguids
0x1C0066CA0: HsmiOpUpdatePlaceholderDirectory
0x1C0018F40: "NoFileExtension" ??_C@_1CA@EEKHKNIB@?$AAN?$AAo?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0043558: HsmiCldGetSyncRootInfoByFileObject
0x1C005D880: HsmFltPreACQUIRE_FOR_SECTION_SYNCHRONIZATION
0x1C0022338: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x1C00048A0: WPP_SF_qqZd
0x1C0012B54: HsmFileCacheInitialize
0x1C0045E54: HsmiQueryFullFilePath
0x1C0012D18: HsmiFileCacheFreeStreamControlBlock
0x1C003CE1C: HsmiPrepareBitmapCommit
0x1C0022480: ExEventObjectType
0x1C00185E0: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C0022588: "__cdecl _imp_KeQueryUnbiasedInterruptTime" __imp_KeQueryUnbiasedInterruptTime
0x1C0004B90: HsmiCbdTableFree
0x1C0018F28: "Session0" ??_C@_1BC@IGGCFPIF@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA0?$AA?$AA@
0x1C003B88C: SepSddlGetSidForString
0x1C0022380: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C00188E0: WPP_edf1052f5ba43664342c4e307b524ab1_Traceguids
0x1C0022898: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C0054218: HsmIBitmapNORMALPrepareCommit
0x1C0022208: "__cdecl _imp_FltFreeFileLock" __imp_FltFreeFileLock
0x1C000A098: HsmOsGetProxiedProcessId
0x1C0018A00: WPP_69e3c431b51d31fd0598b2e0f769cfe7_Traceguids
0x1C0022040: "__cdecl _imp_FltAddOpenReparseEntry" __imp_FltAddOpenReparseEntry
0x1C0052148: HsmIBitmapNORMALCreate
0x1C0022358: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x1C0018740: "foreground" ??_C@_0L@EGALCOAD@foreground?$AA@
0x1C0022060: "__cdecl _imp_FltAllocateDeferredIoWorkItem" __imp_FltAllocateDeferredIoWorkItem
0x1C00222F0: "__cdecl _imp_FltGetVolumeFromFileObject" __imp_FltGetVolumeFromFileObject
0x1C003D99C: HsmpWaitForUserRequestRundownRelease
0x1C0008A30: HsmiOsIsForegroundHydrator
0x1C00361D4: CldStreamOpen
0x1C0061E0C: HsmFltPreSET_REPARSE_POINT
0x1C0001CF4: WPP_SF_iDqDd
0x1C00013E4: WPP_SF_idqDD
0x1C0018720: WPP_ab7e8ad7361b3e32e0fb5efb34e9ae05_Traceguids
0x1C005B86C: HsmiDecompressBuffer
0x1C000D0BC: WPP_SF_qqqLiidD
0x1C0022680: "__cdecl _imp_CcInitializeCacheMap" __imp_CcInitializeCacheMap
0x1C0022058: "__cdecl _imp_FltCheckLockForReadAccess" __imp_FltCheckLockForReadAccess
0x1C0010FF4: WPP_SF_qqidd
0x1C0010FF4: WPP_SF_qqiDd
0x1C005EC10: HsmiCreateEnsureDirectoryFullyPopulated
0x1C00189C8: "BreakOnOpen" ??_C@_1BI@JPENOGFM@?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x1C00451D0: HsmpCldNotifyPreOperation
0x1C00424C0: HsmiOOBECompleteWnfCallback
0x1C00228B0: "__cdecl _imp_RtlNumberGenericTableElementsAvl" __imp_RtlNumberGenericTableElementsAvl
0x1C00188F0: WNF_DEP_OOBE_COMPLETE
0x1C003E014: HsmpQueryValidatedNonModifiedRangeNoLock
0x1C0003658: WPP_SF_qqqiiid
0x1C006F950: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C0022228: "__cdecl _imp_FltQueryDirectoryFile" __imp_FltQueryDirectoryFile
0x1C0042658: HsmiCldOpenSyncRoot
0x1C0022970: "__cdecl _imp_PsGetProcessPeb" __imp_PsGetProcessPeb
0x1C0009BBC: HsmOsDiagRaiseOnImplicitHydration
0x1C0004980: WPP_SF_qqicd
0x1C0013D24: HsmpFileCacheFlush
0x1C0019038: "`HsmBitmapGetNextLevelBlockState'::`2'::levelnStates" ?levelnStates@?1??HsmBitmapGetNextLevelBlockState@@9@9
0x1C0027DC0: CldHsmGetSyncPolicy
0x1C0027060: CldHsmCreateInstanceContext
0x1C0046024: HsmiIsFileAttributeChangeRequired
0x1C00120F8: WPP_SF_dD
0x1C00011E4: WPP_SF_dd
0x1C00011E4: WPP_SF_Dd
0x1C000B68C: TlmWriteCvForCldStreamCancelIO
0x1C00654D4: HsmFltPreSetDispositionInformation
0x1C0003B60: CldiStreamTimeoutDpc
0x1C002DBB8: CldiBuildCommonMessage
0x1C001D000: WPP_GLOBAL_Control
0x1C001088C: WPP_SF_sqisdd
0x1C0013BE8: HsmpFileCacheSetAddressRangeModified
0x1C000CD1C: WPP_SF_qqLiqiqd
0x1C0022460: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C00221D8: "__cdecl _imp_FltQueryVolumeInformation" __imp_FltQueryVolumeInformation
0x1C0019058: WPP_fcb3aba469c63239cc336c445edb07c5_Traceguids
0x1C003BF50: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C0047530: HsmpPrepareForMgmtOperation
0x1C0032374: CldSyncAckDelete
0x1C0052F24: HsmIBitmapNORMALQueryRangeEx
0x1C004B124: HsmiRecallInitiateHydration
0x1C0018780: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0004D48: HsmpReleaseUserRequestRundownProtection
0x1C0001164: WPP_SF_d
0x1C0036430: CldStreamClose
0x1C004BB50: HsmiRecallPopulationCompletionCallback
0x1C0022100: "__cdecl _imp_FltInsertExtraCreateParameter" __imp_FltInsertExtraCreateParameter
0x1C002B080: CldiPortProcessAbortHydration
0x1C0018B7C: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x1C0013240: HsmFileCacheCreateFileObject
0x1C0048E9C: HsmpToggleFileSparseAttribute
0x1C00114F0: HsmFltPostACQUIRE_FOR_SECTION_SYNCHRONIZATION
0x1C0047CC0: HsmpReferenceRequestorProcessForAttribution
0x1C00307F8: CldiSyncAcquireRundown
0x1C0022420: "__cdecl _imp_IoGetFileObjectGenericMapping" __imp_IoGetFileObjectGenericMapping
0x1C0022170: "__cdecl _imp_FltStartFiltering" __imp_FltStartFiltering
0x1C00227D8: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C0022908: "__cdecl _imp_ExInitializePagedLookasideList" __imp_ExInitializePagedLookasideList
0x1C00015A0: WPP_SF_qiiDqDd
0x1C0018E18: "CancelHydration" ??_C@_1CA@DMPEHINA@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAH?$AAy?$AAd?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0014000: HsmiFileCacheIrpRead
0x1C0034254: CldiStreamAllocateRequest
0x1C0005DC8: WPP_SF_qlldPl
0x1C00220C0: "__cdecl _imp_FltAllocateGenericWorkItem" __imp_FltAllocateGenericWorkItem
0x1C00058D8: WPP_SF_qDlLqq
0x1C003D7CC: HsmpGetCorrelationVectorFromStreamHandleContext
0x1C0045510: HsmpCldNotifyPostOperation
0x1C0022148: "__cdecl _imp_FltAllocateCallbackData" __imp_FltAllocateCallbackData
0x1C0027540: CldHsmPurgeCache
0x1C00572B8: HsmpRpCheckState
0x1C0022978: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0035DEC: CldiStreamAckNotification
0x1C0065A80: HsmiOpPrepareOperation
0x1C0022308: "__cdecl _imp_FltGetIoPriorityHint" __imp_FltGetIoPriorityHint
0x1C0016990: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00375F8: CldStreamRetrieveData
0x1C00191C8: WPP_64317dfe076a3196249fbcb3266bf5b7_Traceguids
0x1C0004BE0: HsmiFileIdTableCompare
0x1C005FE50: HsmFltPostCREATE
0x1C0062090: HsmFltPreFILE_SYSTEM_CONTROL
0x1C0022520: "__cdecl _imp_PsGetProcessSessionIdEx" __imp_PsGetProcessSessionIdEx
0x1C005F864: HsmiFltPostECPCREATE
0x1C00436C0: HsmiCldGetSyncRootInfo
0x1C00226D8: "__cdecl _imp_DbgkWerCaptureLiveKernelDump" __imp_DbgkWerCaptureLiveKernelDump
0x1C0005B60: WPP_SF_qDqlL
0x1C0005D44: WPP_SF_qlldP
0x1C0035FD0: HsmiDehydrationCsqRELEASE
0x1C0018D28: "PackageName" ??_C@_1BI@CAKJMNBO@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C000AA5C: HsmOsReferenceProcessByProcessId
0x1C00220E0: "__cdecl _imp_FltReadFileEx" __imp_FltReadFileEx
0x1C00222C8: "__cdecl _imp_FltObjectDereference" __imp_FltObjectDereference
0x1C004E70C: HsmIBitmapVOLATILEMarkRangeEx
0x1C0019108: WPP_c34c735b864a34d8cf158077f5b2e1a9_Traceguids
0x1C0011074: WPP_SF_qqiLd
0x1C00127BC: WPP_SF_qqlLq
0x1C00222D0: "__cdecl _imp_FltCreateCommunicationPort" __imp_FltCreateCommunicationPort
0x1C0022860: "__cdecl _imp_RtlInitializeUnicodePrefix" __imp_RtlInitializeUnicodePrefix
0x1C00465AC: HsmpBuildFullLinkPath
0x1C00226F8: "__cdecl _imp_RtlFreeAnsiString" __imp_RtlFreeAnsiString
0x1C0022A24: "__cdecl _IMPORT_DESCRIPTOR_FLTMGR" __IMPORT_DESCRIPTOR_FLTMGR
0x1C0010A20: HsmIBitmapNORMALQueryRangeExCallout
0x1C000210C: WPP_SF_qDDiid
0x1C0026000: g_ModuleName
0x1C00320DC: CldSyncTransferPlaceholders
0x1C0022A10: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C00496BC: HsmiRecallWriteFileNoLock
0x1C00222C0: "__cdecl _imp_FltCloseClientPort" __imp_FltCloseClientPort
0x1C00125C4: WPP_SF_qiDiid
0x1C0065710: HsmFltPreSET_INFORMATION
0x1C0067320: HsmiOpSetPinStateInternal
0x1C000C68C: WPP_SF_iqLiii
0x1C0019A74: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C001DB18: g_wil_details_pfnFeatureLoggingHook
0x1C000220C: WPP_SF_qDd
0x1C0044408: HsmpCldGetSyncRootFileIdEx
0x1C00185F0: "\BaseNamedObjects\CfProgressEven" ??_C@_1EE@BOBDBHLJ@?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAC?$AAf?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AAE?$AAv?$AAe?$AAn@
0x1C0001104: WPP_SF_qiD
0x1C0001104: WPP_SF_qid
0x1C003D838: HsmpGetEffectiveReparseTag
0x1C0049660: HsmiRecallCbdMayCausePagingIo
0x1C0022658: "__cdecl _imp_CcPreparePinWrite" __imp_CcPreparePinWrite
0x1C0047274: HsmpOpenFileById
0x1C0001104: WPP_SF_qqd
0x1C003C324: HsmiCtxGetOrCreateFileContext
0x1C0046B78: HsmpGetRegDword
0x1C0022318: "__cdecl _imp_FltCbdqInsertIo" __imp_FltCbdqInsertIo
0x1C0019050: "`HsmBitmapGetNextLevelBlockState'::`2'::levelnMasks" ?levelnMasks@?1??HsmBitmapGetNextLevelBlockState@@9@9
0x1C001D2D0: TlmMsgCancelPopulation
0x1C0047EC8: HsmpSetFileVDL
0x1C0052110: HsmiBitmapNORMALDeleteOnDiskWorker
0x1C003DC84: HsmpIsPlaceholder
0x1C000B740: TlmWriteHydrationCompletion
0x1C0002598: WPP_SF_qddii
0x1C0002470: WPP_SF_qDiid
0x1C0022428: "__cdecl _imp_ObReferenceObjectByHandleWithTag" __imp_ObReferenceObjectByHandleWithTag
0x1C0003AF8: CldiStreamPrepareRequestForMoreProcessing
0x1C0070010: CldHsmInitialize
0x1C00027FC: WPP_SF_qiiid
0x1C0001F8C: WPP_SF_iiiiL
0x1C00076B4: WPP_SF_qLiid
0x1C0029F58: CldiPortProcessTransferData
0x1C0022240: "__cdecl _imp_FltGetVolumeProperties" __imp_FltGetVolumeProperties
0x1C00564F8: HsmpBitmapIsCommitPending
0x1C0015CF8: WPP_SF_qqLiq
0x1C0006240: HsmpDbgBreakOnOpen
0x1C0018D50: "BlockedApps" ??_C@_1BI@LFAMHNNL@?$AAB?$AAl?$AAo?$AAc?$AAk?$AAe?$AAd?$AAA?$AAp?$AAp?$AAs?$AA?$AA@
0x1C003D974: HsmpReleaseReparseUpdateLock
0x1C0036000: CldStreamCsqCOMPLETE_CANCELED_IO
0x1C004DFC0: HsmiBitmapNORMALEnsureOpened
0x1C003D764: HsmpGetStreamSize
0x1C0007064: HsmpTracePostCallbackEnter
0x1C0030004: CldiSyncReferenceRoot
0x1C0012550: WPP_SF_qiDd
0x1C003DF44: HsmpUpdateBitmapSizesNoLock
0x1C00187A0: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C0015D80: WPP_SF_qqdd
0x1C0012748: WPP_SF_qqdD
0x1C00016A8: WPP_SF_qqDd
0x1C00226B8: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x1C000C618: WPP_SF_iqLi
0x1C000D16C: WPP_SF_qqqLiiiDd
0x1C001393C: HsmpFileCachePreparePinWrite
0x1C0004B90: HsmiFileIdTableFree
0x1C0032F8C: CldSyncSendCancelHydrationRequest
0x1C002EF94: CldPortSendPreOpMessage
0x1C0018318: TlmMsgNoFileExtension
0x1C003BFD0: TraceLoggingRegisterEx
0x1C000BE38: TlmWriteProviderCrashedEvent
0x1C001DB00: Feature_CldFltDiagMode__private_propertyCache
0x1C00229D0: "__cdecl _imp_ExReleaseSpinLockShared" __imp_ExReleaseSpinLockShared
0x1C0022220: "__cdecl _imp_FltOpenVolume" __imp_FltOpenVolume
0x1C0022400: "__cdecl _imp_ZwOpenEvent" __imp_ZwOpenEvent
0x1C001D2B0: TlmMsgCancelIO
0x1C00186E8: "\CLDMSGPORT" ??_C@_1BI@GOHKMFDA@?$AA?2?$AAC?$AAL?$AAD?$AAM?$AAS?$AAG?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
0x1C00223F8: "__cdecl _imp_ZwFsControlFile" __imp_ZwFsControlFile
0x1C000FFBC: WPP_SF_qisdli
0x1C0041C24: HsmpQueueDehydrationRequest
0x1C0046864: HsmpCheckLegacyFilterAbsence
0x1C000A1D8: HsmOsGetPlaceholderCompatMode
0x1C0059354: HsmpRpCreate
0x1C00116FC: WPP_SF_qqiqqiiDd
0x1C000B190: TlmUninitialize
0x1C003C9E0: HsmiQueryFileRange
0x1C002F754: CldPortSendCancelNotificationMessage
0x1C0018590: "CldFltUpper" ??_C@_1BI@FKLJBIBM@?$AAC?$AAl?$AAd?$AAF?$AAl?$AAt?$AAU?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x1C0022180: "__cdecl _imp_FltEnumerateVolumes" __imp_FltEnumerateVolumes
0x1C0031778: CldSyncGetSyncStatusOnRoot
0x1C0022098: "__cdecl _imp_FltTagFile" __imp_FltTagFile
0x1C0031CE0: CldSyncRestartHydration
0x1C0022788: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C0007DC0: HsmiOsGetAppIdentity
0x1C0062680: HsmiInfoUpdatePlaceholderStatesOnRenamePre
0x1C0022890: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x1C00221F0: "__cdecl _imp_FltReferenceContext" __imp_FltReferenceContext
0x1C003D8B0: HsmpSetLastHydrationTimeNoLock
0x1C0041184: HsmpCtxAttachStreamContext
0x1C00226B0: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C0022140: "__cdecl _imp_FltAllocateExtraCreateParameterFromLookasideList" __imp_FltAllocateExtraCreateParameterFromLookasideList
0x1C003E238: HsmpSetupContexts
0x1C0071000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00227A8: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C00221C0: "__cdecl _imp_FltGetStreamContext" __imp_FltGetStreamContext
0x1C0010C8C: WPP_SF_qLiqDD
0x1C0042E54: HsmiCldLoadSyncRootInfoByFileId
0x1C0034680: CldiStreamCsqACQUIRE
0x1C0018330: "__cdecl load_config_used" _load_config_used
0x1C003DBDC: HsmpReleaseFileNameLock
0x1C0004EC0: HsmpReleaseSyncOpRundownProtection
0x1C0022998: "__cdecl _imp_ExDeleteTimer" __imp_ExDeleteTimer
0x1C0007750: HsmExpandKernelStackAndCallout
0x1C0018D80: "CldFltLog" ??_C@_1BE@DGNJOEEP@?$AAC?$AAl?$AAd?$AAF?$AAl?$AAt?$AAL?$AAo?$AAg?$AA?$AA@
0x1C0018490: ECP_TYPE_OPEN_REPARSE_GUID
0x1C0018AD8: WPP_3d014e60e37a3e7afb20f58fe1f6938a_Traceguids
0x1C0022940: "__cdecl _imp_ZwQueryInformationProcess" __imp_ZwQueryInformationProcess
0x1C003DCA0: HsmpPersistEssentialPropPresent
0x1C0022388: "__cdecl _imp_PsDereferencePrimaryToken" __imp_PsDereferencePrimaryToken
0x1C0022238: "__cdecl _imp_FltFindExtraCreateParameter" __imp_FltFindExtraCreateParameter
0x1C000BBDC: TlmWriteCorruption
0x1C0018200: g_HsmContextRegistration
0x1C00224C8: "__cdecl _imp_ZwOpenProcessTokenEx" __imp_ZwOpenProcessTokenEx
0x1C0018AB8: "MinFreeSpace" ??_C@_1BK@BLFMAPJA@?$AAM?$AAi?$AAn?$AAF?$AAr?$AAe?$AAe?$AAS?$AAp?$AAa?$AAc?$AAe?$AA?$AA@
0x1C0022780: "__cdecl _imp_FsRtlGetNextBaseMcbEntry" __imp_FsRtlGetNextBaseMcbEntry
0x1C00027FC: WPP_SF_qqiqd
0x1C0022080: "__cdecl _imp_FltFreeDeferredIoWorkItem" __imp_FltFreeDeferredIoWorkItem
0x1C0022300: "__cdecl _imp_FltGetRequestorProcess" __imp_FltGetRequestorProcess
0x1C005B510: HsmiUnlockPropertiesForOwner
0x1C0055CAC: HsmpBitmapIsReparseBufferSupported
0x1C0022888: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0022068: "__cdecl _imp_FltAllocateFileLock" __imp_FltAllocateFileLock
0x1C003DF14: HsmpMarkModificationBitmapNoLock
0x1C0022810: "__cdecl _imp_ExAcquireRundownProtection" __imp_ExAcquireRundownProtection
0x1C0035FD0: CldStreamCsqRELEASE
0x1C00229C8: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C0022578: "__cdecl _imp_RtlInitializeCorrelationVector" __imp_RtlInitializeCorrelationVector
0x1C00228D8: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x1C000F12C: WPP_SF_qisddiDDd
0x1C000F368: WPP_SF_qisddiddd
0x1C00227A0: "__cdecl _imp_PsGetProcessId" __imp_PsGetProcessId
0x1C003AC30: CldHsmCancelSynchronousRequest
0x1C004C248: HsmRecallRetrieveData
0x1C0004B60: HsmiFileIdTableAllocate
0x1C00222E0: "__cdecl _imp_FltSendMessage" __imp_FltSendMessage
0x1C0006F74: HsmpTracePreCallbackExit
0x1C00053E4: wil_details_FeaturePropertyCache_ReportUsageToService
0x1C00223E0: "__cdecl _imp_ExSubscribeWnfStateChange" __imp_ExSubscribeWnfStateChange
0x1C003BD48: SepSddlAddAceToAcl
0x1C00224D0: "__cdecl _imp_RtlQueryPackageIdentity" __imp_RtlQueryPackageIdentity
0x1C00220D0: "__cdecl _imp_FltIsOperationSynchronous" __imp_FltIsOperationSynchronous
0x1C001DF80: "__cdecl _G" __G
0x1C0013664: HsmFileCacheMapData
0x1C00186B8: "VALIDATE" ??_C@_08DOBFKJIK@VALIDATE?$AA@
0x1C0031C10: CldSyncRemoveInFlightRanges
0x1C0052064: HsmIBitmapNORMALMayContainDirtyRange
0x1C000FEB8: WPP_SF_qisdild
0x1C000FC98: WPP_SF_qisdiid
0x1C005DF30: HsmFltPreLOCK_CONTROL
0x1C000F974: WPP_SF_qisdidd
0x1C0022468: "__cdecl _imp_SeLockSubjectContext" __imp_SeLockSubjectContext
0x1C0042320: HsmFltUnload
0x1C0022340: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x1C0057C88: HsmpRpCommitNoLock
0x1C00228A8: IoFileObjectType
0x1C0027010: CldHsmDeleteInstanceContext
0x1C004B0C0: HsmiRecallHydrationCompletionCallback
0x1C0022800: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00224F0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0022990: "__cdecl _imp_ExReleaseSpinLockExclusive" __imp_ExReleaseSpinLockExclusive
0x1C0018858: "UNKNOWN" ??_C@_1BA@HABJOAEE@?$AAU?$AAN?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?$AA@
0x1C006F8E0: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C0022168: "__cdecl _imp_FltInitExtraCreateParameterLookasideList" __imp_FltInitExtraCreateParameterLookasideList
0x1C0035FA0: HsmiDehydrationCsqPEEK_NEXT_IO
0x1C0022688: "__cdecl _imp_FsRtlSetEcpListIntoIrp" __imp_FsRtlSetEcpListIntoIrp
0x1C00184F0: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000FD9C: WPP_SF_qisdiidd
0x1C00229B0: "__cdecl _imp_ExTryAcquirePushLockExclusiveEx" __imp_ExTryAcquirePushLockExclusiveEx
0x1C003C744: HsmiReleaseBitmap
0x1C000FA78: WPP_SF_qisdiddd
0x1C0018818: "ImagePath" ??_C@_1BE@CMLCLKJK@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1C00190D8: WPP_ad11f58d11c139dd8c82deb4cefb1443_Traceguids
0x1C004ED60: HsmiBitmapNORMALLoadFromDisk
0x1C00222F8: "__cdecl _imp_FltAttachVolumeAtAltitude" __imp_FltAttachVolumeAtAltitude
0x1C0047734: HsmpPurgeCache
0x1C0018BE8: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1C00224B8: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x1C0048788: HsmpReportCorruption
0x1C0022738: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C0012A60: HsmiFileCacheAcquireForReadAhead
0x1C002A3D8: CldiPortProcessAckData
0x1C00225D0: "__cdecl _imp_RtlCompressBuffer" __imp_RtlCompressBuffer
0x1C0018560: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0013508: HsmFileCacheCloseFileObject
0x1C0005EC0: HsmiDbgLoadProcessDWordFlag
0x1C0012088: WPP_SF_ccd
0x1C000564C: WPP_SF_qDdPiDq
0x1C000A1BC: HsmOsIsInSameSession
0x1C0034C24: CldiStreamInsertIntoCancelSafeQueue
0x1C0022258: "__cdecl _imp_FltGetInstanceInformation" __imp_FltGetInstanceInformation
0x1C0022968: "__cdecl _imp_FsRtlIsNameInExpression" __imp_FsRtlIsNameInExpression
0x1C00220B0: "__cdecl _imp_FltFreeGenericWorkItem" __imp_FltFreeGenericWorkItem
0x1C0022120: "__cdecl _imp_FltFreeCallbackData" __imp_FltFreeCallbackData
0x1C000185C: WPP_SF_siDii
0x1C000A194: HsmOsGetProcessSessionId
0x1C00458E8: HsmCldPersistSyncRootInfo
0x1C00229E0: "__cdecl _imp_ExAcquireSpinLockSharedAtDpcLevel" __imp_ExAcquireSpinLockSharedAtDpcLevel
0x1C00169E0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0016B20: memcmp
0x1C0022310: "__cdecl _imp_FltCbdqRemoveIo" __imp_FltCbdqRemoveIo
0x1C00433DC: HsmiCldGetSyncRootInfoByPath
0x1C0010F3C: WPP_SF_qqLiqLiqq
0x1C000A880: HsmOsGetThreadPlaceholderHydrationAlwaysExplicit
0x1C0063E24: HsmFltPostSetRenameInformation
0x1C0018870: "\$Extend\$Reparse:$R:$INDEX_ALLO" ??_C@_1EO@DEOJINAE@?$AA?2?$AA$?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AA?2?$AA$?$AAR?$AAe?$AAp?$AAa?$AAr?$AAs?$AAe?$AA?3?$AA$?$AAR?$AA?3?$AA$?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAA?$AAL?$AAL?$AAO@
0x1C0022758: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C0063808: HsmFltPreSetBasicInformation
0x1C0022020: "__cdecl _imp_FltReissueSynchronousIo" __imp_FltReissueSynchronousIo
0x1C004E0D4: HsmiBitmapNORMALLookupMcbGroupMapping
0x1C0068274: HsmiOpUpdatePlaceholderFile
0x1C00223A8: "__cdecl _imp_PsReferencePrimaryToken" __imp_PsReferencePrimaryToken
0x1C0022378: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1C0022530: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C001E600: g_MicrosoftTelemetryAssertsTriggeredList
0x1C002BD30: CldiPortProcessReportProgress
0x1C004A37C: HsmiRecallAllocatePopulationContext
0x1C0018D00: "\Registry\Machine" ??_C@_1CE@NMBJJGCH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x1C000FB94: WPP_SF_qisdiic
0x1C0027FC0: CldHsmGetSyncRootInfo
0x1C0028038: WppLoadTracingSupport
0x1C0015758: WPP_SF_qiqLid
0x1C000F660: WPP_SF_qisdiDc
0x1C0062760: HsmiInfoUpdatePlaceholderStatesOnRenamePost
0x1C0018000: g_HsmFltCallbacks
0x1C00228E8: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0022160: "__cdecl _imp_FltReadFile" __imp_FltReadFile
0x1C0002944: WPP_SF_iDqDiDiii
0x1C0004C00: HsmpAcquireUserRequestRundownProtection
0x1C0018460: GUID_ECP_CREATE_REDIRECTION
0x1C0049034: HsmpUpdateLastAccessTime
0x1C004E8BC: HsmIBitmapNORMALMarkRangeEx
0x1C0035250: CldiStreamTimeoutWorker
0x1C0052AD0: HsmIBitmapNORMALRelease
0x1C004F088: HsmiBitmapNORMALPrepareBlockForWrite
0x1C0022008: "__cdecl _imp_FltAllocateCallbackDataEx" __imp_FltAllocateCallbackDataEx
0x1C0006328: HsmDbgBreakOnCorruption
0x1C006AA28: HsmFltProcessConvertPlaceholder
0x1C0005BE4: WPP_SF_qiqLi
0x1C000F764: WPP_SF_qisdiDcd
0x1C00224A0: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C0019020: "Created" ??_C@_07BBIDHECN@Created?$AA@
0x1C0022398: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C0061F00: HsmFltPreSET_ZERO_DATA
0x1C0003F58: MicrosoftTelemetryAssertTriggeredWorker
0x1C0048014: HsmpRecurseDirectory
0x1C00385E4: CldStreamQueryProgress
0x1C0013F30: HsmiFileCacheIrpNotImplemented
0x1C0003464: WPP_SF_qiqiid
0x1C00229A0: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C0046EC4: HsmpIsAlternateStream
0x1C003D81C: HsmpGetFileLock
0x1C0018C10: "%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x" ??_C@_1IC@EILJGFCF@?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx?$AA?$CF?$AAx@
0x1C000B6D4: TlmWriteCvForCancelPopulation
0x1C00035CC: WPP_SF_qqqiii
0x1C0019070: ":${3D0CE612-FDEE-43f7-8ACA-957BE" ??_C@_1GE@KMHOHLDI@?$AA?3?$AA$?$AA?$HL?$AA3?$AAD?$AA0?$AAC?$AAE?$AA6?$AA1?$AA2?$AA?9?$AAF?$AAD?$AAE?$AAE?$AA?9?$AA4?$AA3?$AAf?$AA7?$AA?9?$AA8?$AAA?$AAC?$AAA?$AA?9?$AA9?$AA5?$AA7?$AAB?$AAE@
0x1C0022608: "__cdecl _imp_FsRtlIsPagingFile" __imp_FsRtlIsPagingFile
0x1C000E578: WPP_SF_DDd
0x1C000E5D4: WPP_SF_ddd
0x1C000146C: WPP_SF_iii
0x1C0010D20: WPP_SF_qiq
0x1C0022988: "__cdecl _imp_ExSetTimer" __imp_ExSetTimer
0x1C0011E64: WPP_SF_DLd
0x1C0005E58: WPP_SF_qlq
0x1C00186B0: "HYDRATE" ??_C@_07MFOBIDAP@HYDRATE?$AA@
0x1C0001544: WPP_SF_qqq
0x1C00036F8: WPP_SF_sqqqqiii
0x1C0022868: "__cdecl _imp_FsRtlInitializeBaseMcbEx" __imp_FsRtlInitializeBaseMcbEx
0x1C0003804: WPP_SF_ssqqqiii
0x1C000B1BC: TlmiGetFileExtension
0x1C0018580: "CldFlt" ??_C@_1O@JCFBOCBB@?$AAC?$AAl?$AAd?$AAF?$AAl?$AAt?$AA?$AA@
0x1C0022698: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0010E1C: WPP_SF_qiqii
0x1C0037CFC: CldStreamTransferPlaceholders
0x1C0015BE4: WPP_SF_qqLid
0x1C00492E4: HsmpValidateStreamContextNoLock
0x1C0001924: WPP_SF_DqiiD
0x1C0002010: WPP_SF_iqDiD
0x1C0069514: HsmpOpCreatePlaceholders
0x1C0027C50: CldHsmGetSyncProviderProcessByPath
0x1C0022778: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C0002388: WPP_SF_qDqD
0x1C005FE30: HsmFltPreCREATE
0x1C0022640: "__cdecl _imp_IoCreateStreamFileObjectLite" __imp_IoCreateStreamFileObjectLite
0x1C00014D0: WPP_SF_iiiL
0x1C0033E64: CldSyncSendPostNotification
0x1C0022850: "__cdecl _imp_RtlFindUnicodePrefix" __imp_RtlFindUnicodePrefix
0x1C0022450: "__cdecl _imp_SeUnlockSubjectContext" __imp_SeUnlockSubjectContext
0x1C00382B8: CldStreamReportProgress
0x1C00012DC: WPP_SF_idii
0x1C000163C: WPP_SF_iiid
0x1C000163C: WPP_SF_qiqd
0x1C0003E1C: UninitializeTelemetryAssertsKM
0x1C001D370: "__cdecl _security_cookie" __security_cookie
0x1C0003944: CldiStreamInsertIntoGlobalRequestListNoLock
0x1C0002098: WPP_SF_iqiD
0x1C000163C: WPP_SF_qqqd
0x1C0002B08: WPP_SF_iqii
0x1C000355C: WPP_SF_qqqi
0x1C0035024: CldiStreamStartCountdownTimer
0x1C0019148: WPP_e4a81d046e383922d99d824e285a3fb0_Traceguids
0x1C0009F80: HsmOsGetProcessCommandLine
0x1C0022760: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0034680: HsmiDehydrationCsqACQUIRE
0x1C0018910: "\Registry\Machine\System\Current" ??_C@_1HK@BEFHOJPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00324A4: CldSyncAckRename
0x1C004E0A0: HsmiBitmapNORMALComputeGranularity
0x1C0047FB0: HsmpRecurseDirectoryCallout
0x1C00185A8: "409500" ??_C@_1O@CFINHAHE@?$AA4?$AA0?$AA9?$AA5?$AA0?$AA0?$AA?$AA@
0x1C000633C: HsmDbgBreakOnStatus
0x1C0015070: HsmiFileCacheIrpQueryInformation
0x1C0018F90: WPP_8cbe02d6c52c33b866a4a49aa502770f_Traceguids
0x1C00111F0: HsmFltPrePREPARE_MDL_WRITE
0x1C00109E0: HsmiBitmapNORMALOpenOnDiskCallout
0x1C003D0A0: HsmiDehydrationCsqINSERT_IO
0x1C003A960: CldHsmTerminateProgressiveHydration
0x1C0001BD0: WPP_SF_iDdDDd
0x1C00223C0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C0022830: "__cdecl _imp_ExReInitializeRundownProtection" __imp_ExReInitializeRundownProtection
0x1C005FE50: HsmFltPostNETWORK_QUERY_OPEN
0x1C00077F0: RtlUnicodeStringPrintf
0x1C00191F0: "__stdcall _xmm" __xmm@00000003000000020000000100000000
0x1C0019200: "__cdecl _xmm@0000000f0000000f0000000f0000000f" __xmm@0000000f0000000f0000000f0000000f
0x1C005A864: HsmiClearPropertyLockRequestList
0x1C003D938: HsmpAcquireReparseUpdateLock
0x1C000B6B0: TlmWriteCvForCancelNotification
0x1C000B71C: TlmWriteCvForPopulatePlaceholders
0x1C0018528: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0022620: "__cdecl _imp_CcUninitializeCacheMap" __imp_CcUninitializeCacheMap
0x1C00493CC: HsmCreateOrOpenNamedEvent
0x1C0031F6C: CldSyncAbortOperation
0x1C00221D0: "__cdecl _imp_FltQueryInformationFile" __imp_FltQueryInformationFile
0x1C0031848: CldSyncRegisterStream
0x1C0001C68: WPP_SF_iDdDd
0x1C000C2A4: TlmWriteDehydrationCompleted
0x1C0022178: "__cdecl _imp_FltDeleteExtraCreateParameterLookasideList" __imp_FltDeleteExtraCreateParameterLookasideList
0x1C000C7B8: WPP_SF_iqqLiiid
0x1C00380B8: CldiStreamBuildProviderRequest
0x1C00223E8: "__cdecl _imp_ExUnsubscribeWnfStateChange" __imp_ExUnsubscribeWnfStateChange
0x1C000552C: WPP_SF_qDLLqiDq
0x1C0022790: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C000D228: HsmpRecallInitiateHydrationEx
0x1C00275D0: CldHsmCreateStreamHandleContext
0x1C0056754: HsmiRpCompressBuffer
0x1C003EEBC: HsmpCtxCreateInstanceContext
0x1C002D020: CldiPortNotifyMessage
0x1C0012414: WPP_SF_qiDcL
0x1C004477C: HsmpCldGetSyncRootStandardInfo
0x1C0022880: "__cdecl _imp_ProbeForRead" __imp_ProbeForRead
0x1C00225C0: "__cdecl _imp_RtlGetCompressionWorkSpaceSize" __imp_RtlGetCompressionWorkSpaceSize
0x1C004AE04: HsmiRecallPostProcessHydration
0x1C00221E8: "__cdecl _imp_FltGetEcpListFromCallbackData" __imp_FltGetEcpListFromCallbackData
0x1C00224E8: "__cdecl _imp_EtwEnableTrace" __imp_EtwEnableTrace
0x1C000C71C: WPP_SF_iqLiiid
0x1C0036618: CldStreamHasPendingRequests
0x1C005AF40: HsmiPropertyLockWait
0x1C0018678: "Failed to create global progress" ??_C@_0CH@CNPCKKAO@Failed?5to?5create?5global?5progress@
0x1C0022190: "__cdecl _imp_FltUnregisterFilter" __imp_FltUnregisterFilter
0x1C000B4D4: TlmpWriteCv
0x1C0022218: "__cdecl _imp_FltGetVolumeGuidName" __imp_FltGetVolumeGuidName
0x1C00031B4: WPP_SF_qi
0x1C0005C68: WPP_SF_ql
0x1C00223C8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C0022768: "__cdecl _imp_IoFreeMdl" __imp_IoFreeMdl
0x1C001232C: WPP_SF_qc
0x1C0012230: WPP_SF_qD
0x1C00010B0: WPP_SF_qd
0x1C00308BC: CldiSyncReleaseRundown
0x1C0018B88: WPP_dd77b277d844391720cb7be22d7012de_Traceguids
0x1C00188D8: Feature_CloudFileDisguisePlaceholdersForGUIApps_logged_traits
0x1C000B280: TlmInitializeCorrelationVector
0x1C0002878: WPP_SF_qq
0x1C000AA34: HsmOsMarkProcessAsSyncProvider
0x1C006B970: HsmFltProcessQuerySyncRootBasicInfo
0x1C0002DF4: WPP_SF_iqqiiiiq
0x1C001E460: "__cdecl _TLM" __TLM
0x1C003D77C: HsmpGetLastDehydrationTime
0x1C0042A1C: HsmiCldLoadSyncRootInfoByFileObject
0x1C00124AC: WPP_SF_qiDcLd
0x1C003D864: HsmpGetInstanceContext
0x1C0066BB0: HsmiOpRevertCompletion
0x1C00159D8: WPP_SF_qqqiqLid
0x1C0019010: "create" ??_C@_06HBNONAG@create?$AA@
0x1C0005080: wil_details_SetPropertyCacheOpportunityCallback
0x1C00271E0: CldHsmDeleteFileContext
0x1C00228C0: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x1C005DA80: HsmPreLockControlSynchronous
0x1C00223D8: "__cdecl _imp_KeRaiseUserException" __imp_KeRaiseUserException
0x1C0022038: "__cdecl _imp_FltObjectReference" __imp_FltObjectReference
0x1C0070BC4: "__cdecl _security_init_cookie" __security_init_cookie
0x1C001D280: TlmMsgHydrateData
0x1C0019118: WPP_55905f35b7603713b0ba7f535ecf74ab_Traceguids
0x1C0070324: HsmDriverEntry
0x1C0001234: WPP_SF_q
0x1C0022528: "__cdecl _imp_PsGetProcessImageFileName" __imp_PsGetProcessImageFileName
0x1C0018E60: "CancelNotification" ??_C@_1CG@JMBEEIMN@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0022348: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x1C0027ED0: CldHsmGetSyncPolicyByPath
0x1C00226A0: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C00226A8: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0031A50: CldSyncRetrieveData
0x1C00597DC: HsmiFreePropertyLock
0x1C001D518: WPPTraceSuite
0x1C005FE70: HsmFltPreNETWORK_QUERY_OPEN
0x1C0022370: cng_NULL_THUNK_DATA
0x1C0022818: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C005CF6C: HsmFltProcessRetrieveProperties
0x1C00227F0: "__cdecl _imp_FsRtlRemoveBaseMcbEntry" __imp_FsRtlRemoveBaseMcbEntry
0x1C000EB50: WPP_SF_qisdLLd
0x1C00107A0: WPP_SF_qislii
0x1C0022650: "__cdecl _imp_CcUnpinData" __imp_CcUnpinData
0x1C00319C0: CldSyncReferenceStream
0x1C0018B60: "\INSTANCES\" ??_C@_1BI@IOLCCFDJ@?$AA?2?$AAI?$AAN?$AAS?$AAT?$AAA?$AAN?$AAC?$AAE?$AAS?$AA?2?$AA?$AA@
0x1C0022250: "__cdecl _imp_FltDeleteContext" __imp_FltDeleteContext
0x1C0027260: CldHsmCreateFileContext
0x1C003DA90: HsmpAcquireFileNameLock
0x1C000A794: HsmOsSetPlaceholderCompatMode
0x1C0004D80: HsmpAcquireSyncOpRundownProtection
0x1C001DB10: Feature_CldFltBlockSession0Hydration__private_propertyCache
0x1C00675B0: HsmiOpDehydrateNotificationCallback
0x1C003680C: CldStreamAccessCheck
0x1C00078A8: HsmiOsComputeAppIdentity
0x1C0007AC4: HsmiOsComputeAppIdentityString
0x1C0022010: "__cdecl _imp_FltPropagateIrpExtension" __imp_FltPropagateIrpExtension
0x1C0018440: GUID_ECP_SRV_OPEN
0x1C00437D8: HsmpCldGetSyncPolicyByPath
0x1C000E930: WPP_SF_qisdDDLd
0x1C0018B98: "Microsoft Primitive Provider" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00229C0: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0040230: HsmpCtxCreateStreamContext
0x1C00227E8: "__cdecl _imp_ExReleaseRundownProtection" __imp_ExReleaseRundownProtection
0x1C0035FB0: CldStreamCsqACQUIRE
0x1C003AE70: CldHsmNotifyPreOperation
0x1C00229B8: "__cdecl _imp_ExReleaseSpinLockSharedFromDpcLevel" __imp_ExReleaseSpinLockSharedFromDpcLevel
0x1C0018790: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C00105D4: WPP_SF_qisiil
0x1C00104EC: WPP_SF_qisiic
0x1C005E8F8: HsmiCreateAllocateECPTags
0x1C0022600: "__cdecl _imp_FsRtlFastUnlockAll" __imp_FsRtlFastUnlockAll
0x1C00221A0: "__cdecl _imp_FltSetStreamContext" __imp_FltSetStreamContext
0x1C00046A8: WPP_SF_qisiid
0x1C0022730: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0039770: CldHsmHydratePlaceholder
0x1C000CBA8: WPP_SF_qiqqLid
0x1C0027560: CldHsmDeleteStreamHandleContext
0x1C0008B48: HsmiOsIsHydrationDisallowed
0x1C0029934: CldiPortProcessQueryProgress
0x1C0049E30: HsmiRecallAllocateHydrationContext
0x1C000219C: WPP_SF_qDc
0x1C0011100: WPP_SF_qiDcccqid
0x1C006E024: HsmFltProcessHSMControl
0x1C000E7B0: WPP_SF_qis
0x1C0022A38: "__cdecl _IMPORT_DESCRIPTOR_cng" __IMPORT_DESCRIPTOR_cng
0x1C00615E0: HsmFltPostDIRECTORY_CONTROL
0x1C0008B20: HsmiOsIsFullHydrationOnOpenEnabled
0x1C0028690: CldiPortLookupSyncRootNoLock
0x1C00169C0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C00229D8: "__cdecl _imp_ExAcquireSpinLockShared" __imp_ExAcquireSpinLockShared
0x1C003E0D8: HsmpQueryValidatedNonModifiedRangesTotalNoLock
0x1C0002FC4: WPP_SF_iqqqiiii
0x1C005B67C: HsmFltProcessUnlockProperties
0x1C003D0D0: HsmiDehydrationCsqREMOVE_IO
0x1C001041C: WPP_SF_qisii
0x1C003C7CC: HsmiCompactBitmapNoLock
0x1C0018FA0: ":${3D0CE612-FDEE-43f7-8ACA-957BE" ??_C@_1HA@EHEOMHID@?$AA?3?$AA$?$AA?$HL?$AA3?$AAD?$AA0?$AAC?$AAE?$AA6?$AA1?$AA2?$AA?9?$AAF?$AAD?$AAE?$AAE?$AA?9?$AA4?$AA3?$AAf?$AA7?$AA?9?$AA8?$AAA?$AAC?$AAA?$AA?9?$AA9?$AA5?$AA7?$AAB?$AAE@
0x1C00599AC: HsmiUnloadPropertyStream
0x1C00220B8: "__cdecl _imp_FltQueueGenericWorkItem" __imp_FltQueueGenericWorkItem
0x1C006434C: HsmFltPreSetRenameInformation
0x1C00225B8: "__cdecl _imp_FsRtlNumberOfRunsInBaseMcb" __imp_FsRtlNumberOfRunsInBaseMcb
0x1C0010290: WPP_SF_qisi
0x1C000577C: WPP_SF_qDdPlqql
0x1C0022138: "__cdecl _imp_FltEnumerateFilterInformation" __imp_FltEnumerateFilterInformation
0x1C000E648: WPP_SF_qisd
0x1C00126D0: WPP_SF_qqcd
0x1C0056EBC: HsmpRpBuildBuffer
0x1C006D454: HsmFltProcessSetPinState
0x1C00569B8: HsmiRpInitializeTable
0x1C0022930: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C00224E0: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C000DF84: HsmpRecallInitiatePopulationEx
0x1C0018730: "background" ??_C@_0L@EGCKCJDC@background?$AA@
0x1C00228A8: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C0030A98: CldiSyncCreateRootNoLock
0x1C0022910: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C000F578: WPP_SF_qisdiD
0x1C000F578: WPP_SF_qisdid
0x1C000F884: WPP_SF_qisdic
0x1C000F578: WPP_SF_qisdil
0x1C0018BD8: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1C00189E0: "BreakOnStatus" ??_C@_1BM@IAGHCLDC@?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C00492C8: HsmpIs32bitProcess
0x1C00360FC: CldStreamSetSyncStatus
0x1C00227C0: "__cdecl _imp_KeRemoveQueueDpc" __imp_KeRemoveQueueDpc
0x1C0037884: CldStreamRestartHydration
0x1C000CF60: WPP_SF_qqllcclqqLiqiii
0x1C0046864: HsmCheckLegacyFilterAbsence
0x1C0035A8C: CldiStreamProcessPendingHydrationRequests
0x1C00229F8: ntoskrnl_NULL_THUNK_DATA
0x1C003C06C: HsmiCtxCreateFileContext
0x1C0022918: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C000AAD4: HsmOsStartWppTracing
0x1C0016834: "__cdecl TlgWriteAgg" _TlgWriteAgg
0x1C00227B8: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0008558: HsmiOsPersistAppPolicy
0x1C000611C: HsmpDbgBreakOnHydration
0x1C00223B0: "__cdecl _imp_IoGetTransactionParameterBlock" __imp_IoGetTransactionParameterBlock
0x1C0011850: HsmFltPreREAD
0x1C002E1E8: CldPortSendHydrationMessage
0x1C0014920: HsmiFileCacheIrpWrite
0x1C0022280: "__cdecl _imp_FltReleasePushLockEx" __imp_FltReleasePushLockEx
0x1C000F4A4: WPP_SF_qisdi
0x1C003A570: CldHsmPopulatePlaceholders
0x1C0008D60: HsmiOsSetPebCloudFileFlags
0x1C0022118: "__cdecl _imp_FltSetInformationFile" __imp_FltSetInformationFile
0x1C004D1CC: HsmRecallTransferPlaceholders
0x1C0022740: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C00184A0: WPP_ThisDir_CTLGUID_CldFltLogGuid
0x1C000E858: WPP_SF_qisci
0x1C0003128: WPP_SF_iqqqqi
0x1C005E370: HsmFltPreCLEANUP
0x1C007024C: DriverEntry
0x1C005BBB4: HsmFltProcessStoreProperties
0x1C00565FC: HsmpBitmapQueryRangeEx
0x1C0018CB0: "SOFTWARE\Policies\Microsoft\Clou" ??_C@_1EO@KJMBGGLC@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAl?$AAo?$AAu@
0x1C00190E8: WPP_02fadae5df2d3e9764d7e466c3c9d33c_Traceguids
0x1C003AE20: CldHsmIsCallbackRequested
0x1C0022478: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C0034B74: CldiStreamCsqINSERT_IO
0x1C00056E8: WPP_SF_qDdPlq
0x1C00220A8: "__cdecl _imp_FltUntagFile" __imp_FltUntagFile
0x1C0022838: "__cdecl _imp_ExWaitForRundownProtectionRelease" __imp_ExWaitForRundownProtectionRelease
0x1C002CB20: CldiPortNotifyConnect
0x1C001D508: pfnWppTraceMessage
0x1C006BA7C: HsmFltProcessQueryPlaceholder
0x1C0022490: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0030650: CldiSyncTransferPlaceholdersByObject
0x1C00283D4: WppInitKm
0x1C0022128: "__cdecl _imp_FltParseFileNameInformation" __imp_FltParseFileNameInformation
0x1C00190F8: WPP_3ccc8b97cae931c1f09cfa8ddabcbd71_Traceguids
0x1C0011F98: WPP_SF_c
0x1C0029D78: CldiPortSetSyncStatus
0x1C00063EC: HsmpTracePreCallbackEnter
0x1C0016F80: memset
0x1C0022A4C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C001D540: Globals
0x1C0004EF4: RtlStringCchPrintfW
0x1C00229E8: "__cdecl _imp_ExAcquireSpinLockExclusive" __imp_ExAcquireSpinLockExclusive

[JEB Decompiler by PNF Software]