Generated by JEB on 2019/08/01

PE: C:\Windows\System32\dmutil.dll Base=0x180000000 SHA-256=A37EA84C3DB40317546A9466F9621EED28C0D0989D22F45837B4418B5F920975
PDB: dmutil.pdb GUID={E8087410-47B7-C4BB-38EAB93FD1CDA99C} Age=1

251 located named symbols:
0x180005280: "__cdecl _imp__wgetenv" __imp__wgetenv
0x180003D84: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004070: "__cdecl FindPESection" _FindPESection
0x180005128: "__cdecl _imp_GetCurrentDirectoryW" __imp_GetCurrentDirectoryW
0x1800037C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180005318: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1800055C8: "%li" ??_C@_17BCFDDLAM@?$AA?$CF?$AAl?$AAi?$AA?$AA@
0x180006280: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005550: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x1800054E0: "SystemRoot" ??_C@_1BG@FIGGICF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180007010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005588: "%hx" ??_C@_17GBGHEJOA@?$AA?$CF?$AAh?$AAx?$AA?$AA@
0x18000387C: "__cdecl CRT_INIT" _CRT_INIT
0x180005528: "%hS" ??_C@_17BGFEGBNP@?$AA?$CF?$AAh?$AAS?$AA?$AA@
0x1800051C8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002CB0: SzwDupSzw
0x1800044F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002DF0: RgszwFromValist
0x180004266: "__cdecl _imp_load_QueryServiceStatus" __imp_load_QueryServiceStatus
0x1800052D8: "__cdecl _imp_NtReadFile" __imp_NtReadFile
0x180001650: ShowMessageValist
0x180005758: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180002C90: "void __cdecl FreePv(void * __ptr64)" ?FreePv@@YAXPEAX@Z
0x180001470: DisplayError
0x1800052E0: "__cdecl _imp_NtWriteFile" __imp_NtWriteFile
0x180003660: IsPersonalSKU
0x1800055E8: "%hc" ??_C@_17OGHPJJHO@?$AA?$CF?$AAh?$AAc?$AA?$AA@
0x180005348: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005EF8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x180009030: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x180005E58: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x1800034E0: SafeLoadVdsService
0x180005160: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1800055D0: "%lo" ??_C@_17DHDIGENA@?$AA?$CF?$AAl?$AAo?$AA?$AA@
0x1800075B8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUewhUwnxorvmgUownUwnxlnnlmUlyquivUznwGEUwnfgrokOlyq@dmutil" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUewhUwnxorvmgUownUwnxlnnlmUlyquivUznwGEUwnfgrokOlyq@dmutil
0x1800055E0: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x180009038: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180005268: "__cdecl _imp_mbstowcs" __imp_mbstowcs
0x18000404D: "__cdecl XcptFilter" _XcptFilter
0x180005350: "__cdecl _xc_a" __xc_a
0x180001B80: "long __cdecl GetSystemVolume(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?GetSystemVolume@@YAJPEAGK0K@Z
0x180005738: "SetupDiCallClassInstaller" ??_C@_0BK@GFJFBLPL@SetupDiCallClassInstaller?$AA@
0x180005600: "%lc" ??_C@_17HNOONLGI@?$AA?$CF?$AAl?$AAc?$AA?$AA@
0x180004041: "__cdecl callnewh" _callnewh
0x180005438: "__cdecl _guard_iat_table" __guard_iat_table
0x1800044C5: memcpy
0x180001620: FTraceValist
0x180009008: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x1800054A0: "__cdecl _sz_USER32_dll" __sz_USER32_dll
0x1800052A0: "__cdecl _imp_memset" __imp_memset
0x180005E38: USER32_NULL_THUNK_DATA_DLN
0x180009010: USER32_NULL_THUNK_DATA_DLA
0x18000422F: "__cdecl initterm" _initterm
0x180005F18: USER32_NULL_THUNK_DATA_DLB
0x180007670: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005130: "__cdecl _imp_Sleep" __imp_Sleep
0x180005370: "__cdecl _xi_z" __xi_z
0x1800051F8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000423B: "__cdecl _C_specific_handler" __C_specific_handler
0x180005120: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x1800055B8: "%lx" ??_C@_17PKPGALPG@?$AA?$CF?$AAl?$AAx?$AA?$AA@
0x180005138: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180002760: GetInstallDirectoryPath
0x180004035: malloc
0x180009020: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180005180: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180005540: "%lS" ??_C@_17INMFCDMJ@?$AA?$CF?$AAl?$AAS?$AA?$AA@
0x180005218: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180001C80: DmCommonNtOpenFile
0x180004464: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180004059: "__cdecl amsg_exit" _amsg_exit
0x180005260: "__cdecl _imp__callnewh" __imp__callnewh
0x180005754: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800075A8: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x180005310: "__cdecl _imp_NtAddBootEntry" __imp_NtAddBootEntry
0x180005170: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180005230: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180005E68: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x1800052F8: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x180005118: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180005EE8: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x180009040: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x1800051E8: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x180007660: "__cdecl _native_startup_lock" __native_startup_lock
0x1800055A0: "%ho" ??_C@_17KMKJCGMG@?$AA?$CF?$AAh?$AAo?$AA?$AA@
0x180001010: DllMain
0x180003730: "unsigned long __cdecl CoDisableDynamicVolumes(unsigned int,void * __ptr64,struct _SP_DEVINFO_DATA * __ptr64,struct _COINSTALLER_CONTEXT_DATA * __ptr64)" ?CoDisableDynamicVolumes@@YAKIPEAXPEAU_SP_DEVINFO_DATA@@PEAU_COINSTALLER_CONTEXT_DATA@@@Z
0x180005240: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800054D0: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800052B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180005210: KERNEL32_NULL_THUNK_DATA
0x1800054DC: "%S" ??_C@_02KPKOKMHB@?$CFS?$AA@
0x1800037FC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180002D60: SzwFromSza
0x180007000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004440: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800052D0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180001D50: LowNtAddBootEntry
0x180005330: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x1800075A0: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x1800051D0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001500: DisplayErrorRgszw
0x180005754: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180004120: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800055C0: "%lX" ??_C@_17FKMEKEMI@?$AA?$CF?$AAl?$AAX?$AA?$AA@
0x1800052C0: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x180005548: "%ls" ??_C@_17CNPHIMPH@?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x180003560: DynamicSupport
0x180005140: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180005200: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180005E04: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180002350: LowNtReadFile
0x1800054AC: "="" ??_C@_15PMOCCNJK@?$AA?$DN?$AA?$CC?$AA?$AA@
0x180003AC0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005298: "__cdecl _imp__initterm" __imp__initterm
0x180006294: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800075B0: "__cdecl _hmod__USER32_dll" __hmod__USER32_dll
0x180005558: "%x" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x1800055A8: "%hu" ??_C@_17JDANJBDN@?$AA?$CF?$AAh?$AAu?$AA?$AA@
0x180005608: "%lC" ??_C@_17NNNMHEFG@?$AA?$CF?$AAl?$AAC?$AA?$AA@
0x180007650: "__cdecl _onexitend" __onexitend
0x180005150: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180005340: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005708: "dmload" ??_C@_1O@LIDEABKO@?$AAd?$AAm?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1800051E0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005360: "__cdecl _xi_a" __xi_a
0x1800051B8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800051A8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180005300: "__cdecl _imp_NtSetBootEntryOrder" __imp_NtSetBootEntryOrder
0x180009028: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18000551C: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x1800043AC: "__cdecl _tailMerge_user32_dll" __tailMerge_user32_dll
0x180003F38: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180007678: "__cdecl pRawDllMain" _pRawDllMain
0x1800075C8: "struct _RTL_CRITICAL_SECTION g_csLastErr" ?g_csLastErr@@3U_RTL_CRITICAL_SECTION@@A
0x180004272: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x1800023E0: LowGetPartitionInfo
0x180005470: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x18000442B: "__cdecl _imp_load_MessageBoxW" __imp_load_MessageBoxW
0x180005178: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180005290: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180005328: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x180003D60: "__cdecl _security_check_cookie" __security_check_cookie
0x180005358: "__cdecl _xc_z" __xc_z
0x180005508: "\WINDOWS" ??_C@_1BC@LMPBNGBG@?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?$AA@
0x180005208: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800019A0: ShowMessage
0x180005308: "__cdecl _imp_NtQueryBootEntryOrder" __imp_NtQueryBootEntryOrder
0x180005DC4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x180005578: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1800051C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180005DE4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USER32_dll" __DELAY_IMPORT_DESCRIPTOR_USER32_dll
0x1800051A0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180005148: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000438E: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x1800022E0: LowNtWriteFile
0x180005718: "setupapi.dll" ??_C@_1BK@CKNJELDA@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180005378: "__cdecl _guard_fids_table" __guard_fids_table
0x180005190: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x1800052A8: msvcrt_NULL_THUNK_DATA
0x180005010: "__cdecl load_config_used" _load_config_used
0x180005560: "%X" ??_C@_15BHOFONJE@?$AA?$CF?$AAX?$AA?$AA@
0x180005DA4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x180003320: RgszwDupRgszw
0x180005250: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180005188: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800052C8: "__cdecl _imp_NtClose" __imp_NtClose
0x180001A84: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180009000: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x180001B00: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800055B0: "%ld" ??_C@_17OADJODNB@?$AA?$CF?$AAl?$AAd?$AA?$AA@
0x1800052B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800054F8: "windir" ??_C@_1O@GBFPGFCD@?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$AA@
0x1800022B0: LowAcquirePrivilege
0x1800051D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005598: "%hi" ??_C@_17IJMCHJBK@?$AA?$CF?$AAh?$AAi?$AA?$AA@
0x180005570: "%o" ??_C@_15HKBJCNIM@?$AA?$CF?$AAo?$AA?$AA@
0x1800052E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180005758: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180004250: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800042FD: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x180003260: RgszwFromArgs
0x1800055F8: "%C" ??_C@_15JAPNDNAK@?$AA?$CF?$AAC?$AA?$AA@
0x180005198: "__cdecl _imp_VerifyVersionInfoW" __imp_VerifyVersionInfoW
0x180005258: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180005338: ntdll_NULL_THUNK_DATA
0x180003290: FreeRgszw
0x180005248: "__cdecl _imp_memcpy" __imp_memcpy
0x1800055F0: "%hC" ??_C@_17EGENDGEA@?$AA?$CF?$AAh?$AAC?$AA?$AA@
0x180005580: "%hd" ??_C@_17HLKIKBMH@?$AA?$CF?$AAh?$AAd?$AA?$AA@
0x180007008: "__cdecl _security_cookie" __security_cookie
0x180005220: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800075F0: "struct _RTL_CRITICAL_SECTION g_csDispMsg" ?g_csDispMsg@@3U_RTL_CRITICAL_SECTION@@A
0x1800054B8: "boot.ini" ??_C@_1BC@NKLFKGNI@?$AAb?$AAo?$AAo?$AAt?$AA?4?$AAi?$AAn?$AAi?$AA?$AA@
0x180005158: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000437C: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x1800051B0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1800075C0: "struct HINSTANCE__ * __ptr64 __ptr64 g_hDll" ?g_hDll@@3PEAUHINSTANCE__@@EA
0x180007658: "__cdecl _onexitbegin" __onexitbegin
0x180005238: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800028E0: AddEntryBootFileGpt
0x1800043A0: "__cdecl _imp_load_LoadStringW" __imp_load_LoadStringW
0x1800051F0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180005440: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x180005538: "%S" ??_C@_15MAOEGKJF@?$AA?$CF?$AAS?$AA?$AA@
0x180005590: "%hX" ??_C@_17MBFFOGNO@?$AA?$CF?$AAh?$AAX?$AA?$AA@
0x1800062A8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180005228: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180005530: "%hs" ??_C@_17LGGGMOOB@?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180004154: "__cdecl _security_init_cookie" __security_init_cookie
0x180001350: GetErrorData
0x180001630: FTrace
0x18000626C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005278: "__cdecl _imp_malloc" __imp_malloc
0x1800052F0: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x180003DC0: "__cdecl _report_gsfailure" __report_gsfailure
0x180005320: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180005168: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180005568: "%i" ??_C@_15FPHCHCFA@?$AA?$CF?$AAi?$AA?$AA@
0x180007668: "__cdecl _native_startup_state" __native_startup_state
0x1800055D8: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x180001090: TranslateError
0x180009018: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180005288: "__cdecl _imp_wcstok" __imp_wcstok
0x1800042F1: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x180002C80: "void * __ptr64 __cdecl PvAlloc(unsigned __int64)" ?PvAlloc@@YAPEAX_K@Z
0x180002470: AddEntryBootFileMbr
0x180005270: "__cdecl _imp_free" __imp_free
0x1800040C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180002220: LowNtReadOnlyAttributeOff
0x1800044D1: memset
0x1800062BC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]