Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ubpm.dll Base=0x180000000 SHA-256=B38A0C00B433B0073C72FCDF364963A822AEDEB20068DA74F2FAB03AE6404D06
PDB: ubpm.pdb GUID={C3CB329F-2A39-4E1C-41C551CCD3BAE455} Age=1

1417 located named symbols:
0x180046030: "__cdecl _imp_DabRegisterTriggerConsumer" __imp_DabRegisterTriggerConsumer
0x18000F570: UbpmpIsCriticalAction
0x18003AEB8: WPP_d870c1172c0a386ecd8ab2aae1c9a0ef_Traceguids
0x180037BF0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18001011C: UbpmUtilsCloneStringArray
0x180012F71: "__cdecl _imp_load_CSebCreatePrivateEvent" __imp_load_CSebCreatePrivateEvent
0x1800388E0: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x18003AF90: "EventRegister error" ??_C@_1CI@HBICJNFJ@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x180012EB0: "__cdecl _imp_load_PowerSettingUnregisterNotification" __imp_load_PowerSettingUnregisterNotification
0x18003ABC8: "Invalid registry keys" ??_C@_1CM@MIBCLJO@?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAk?$AAe?$AAy?$AAs?$AA?$AA@
0x180012BAC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180037AF8: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x180037FA0: "__cdecl _imp_vDbgPrintEx" __imp_vDbgPrintEx
0x180037808: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000E4C0: UbpmpValidateCommonTriggerParameters
0x180037BE0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18003ACF8: "WakeUp" ??_C@_1O@FJAFKPIC@?$AAW?$AAa?$AAk?$AAe?$AAU?$AAp?$AA?$AA@
0x180038BD0: "NetworkService" ??_C@_1BO@EBLCFBPH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1800114C8: LUAGetElevatedToken
0x18002C610: "void __cdecl UbpmpMaintenanceLaunchCallback(void * __ptr64,unsigned char,void * __ptr64)" ?UbpmpMaintenanceLaunchCallback@@YAXPEAXE0@Z
0x180028D50: UbpmpDumpRegisteredConsumers
0x180037E88: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x1800129B0: "__cdecl FindPESection" _FindPESection
0x18003F1E0: CSystemEventsBrokerClient_NULL_THUNK_DATA_DLB
0x18002FB40: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,struct _GUID const * __ptr64)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@3@Z
0x180037C50: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180026E2C: "__cdecl TlgCreateSz" _TlgCreateSz
0x18000166C: UbpmUtilsGetUbpmNameHash
0x1800389A8: WPP_a05fb8010aa43a794cdb780785edcf5c_Traceguids
0x180028B8C: UbpmTerminateActionsForAllConsumers
0x1800378F8: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x180033F70: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18003F5EC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800032C0: "unsigned long __cdecl UbpmpScheduleRepetitionSeries(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,unsigned short,unsigned __int64,void * __ptr64,unsigned long,struct _FILETIME * __ptr64,struct _UBPM_REPETITION_CONTEXT * __ptr64 * __ptr64)" ?UbpmpScheduleRepetitionSeries@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@G_KPEAXKPEAU_FILETIME@@PEAPEAU_UBPM_REPETITION_CONTEXT@@@Z
0x18000C710: "unsigned long __cdecl UbpmpCopyRegistrationParams(struct _UBPM_TRIGGER_CONSUMER_PARAMS_1 * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_TRIGGER_CONSUMER_PARAMS_1 * __ptr64)" ?UbpmpCopyRegistrationParams@@YAKPEAU_UBPM_TRIGGER_CONSUMER_PARAMS_1@@KPEAK0@Z
0x1800290E0: WPP_SF_dDDDD
0x18000D840: "unsigned long __cdecl UbpmpCopyStruct<struct _CSebiSystemEventCreationParameter>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _CSebiSystemEventCreationParameter const * __ptr64,struct _CSebiSystemEventCreationParameter * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_CSebiSystemEventCreationParameter@@@@YAKPEAEKPEAKPEBU_CSebiSystemEventCreationParameter@@PEAPEAU0@@Z
0x180046120: "__cdecl _imp_UMgrQueryUserToken" __imp_UMgrQueryUserToken
0x180037B48: "__cdecl _imp_SetThreadpoolThreadMinimum" __imp_SetThreadpoolThreadMinimum
0x180037E00: "__cdecl _imp_RtlStringFromGUIDEx" __imp_RtlStringFromGUIDEx
0x18002CEB0: "void __cdecl UbpmpMaintenanceTriggersStopCallback(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?UbpmpMaintenanceTriggersStopCallback@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x18002B710: WPP_SF_iSddi
0x180031014: UbpmpDeleteAppContainerImpersonated
0x18000E540: UbpmpValidateCommonActionParameters
0x18002FE80: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@1PEAX2@Z
0x18002FFBC: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,struct _GUID const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@2PEAX2@Z
0x180034AA8: PdcPortSendMessageSynchronously
0x180046108: "__cdecl _imp_UMgrQueryDefaultAccountToken" __imp_UMgrQueryDefaultAccountToken
0x180046190: "__cdecl _imp_DestroyEnvBlock" __imp_DestroyEnvBlock
0x18002A008: UbpmRunConsumerActions
0x180042320: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18003F7CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0
0x18000F280: UbpmHardeningListInsert
0x18003A998: ACTION_LAUNCH_FAILURE
0x1800298E4: "unsigned long __cdecl UbpmpRunConsumerActions(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,unsigned __int64,unsigned __int64,struct _GUID * __ptr64,unsigned long,unsigned __int64,unsigned long,unsigned long,unsigned char * __ptr64,struct _UBPM_TRIGGER_CONSUMER_CONTROL_INFO_IN_1 * __ptr64)" ?UbpmpRunConsumerActions@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@_K1PEAU_GUID@@K1KKPEAEPEAU_UBPM_TRIGGER_CONSUMER_CONTROL_INFO_IN_1@@@Z
0x180025E40: "unsigned long __cdecl UbpmpLPEStateChanged(void * __ptr64,unsigned long,void * __ptr64)" ?UbpmpLPEStateChanged@@YAKPEAXK0@Z
0x1800324D8: WPP_SF_Ld
0x18002E584: UbpmpToggleMaintenancePdcActivator
0x18002BC98: "unsigned long __cdecl UbpmpInitializeMaintenanceLevels(void)" ?UbpmpInitializeMaintenanceLevels@@YAKXZ
0x18003B028: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180037938: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x180023138: WPP_SF_LS
0x18003B3B0: "%s: Unexpected ALPC message type" ??_C@_0CH@CBMMEDDH@?$CFs?3?5Unexpected?5ALPC?5message?5type@
0x18003B408: PDCV2_ACTIVATION_UNREGISTER
0x18001248C: "__cdecl CRT_INIT" _CRT_INIT
0x180037F70: "__cdecl _imp_TpWaitForAlpcCompletion" __imp_TpWaitForAlpcCompletion
0x18001349A: "__cdecl _imp_load_UMgrEnumerateSessionUsers" __imp_load_UMgrEnumerateSessionUsers
0x1800387F0: "__cdecl _sz_ext_ms_win_session_usermgr_l1_1_0_dll" __sz_ext_ms_win_session_usermgr_l1_1_0_dll
0x1800378E0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180037B78: "__cdecl _imp_CloseThreadpoolWait" __imp_CloseThreadpoolWait
0x180037710: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x180037F80: "__cdecl _imp_AlpcGetMessageAttribute" __imp_AlpcGetMessageAttribute
0x180037738: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x18001350B: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180004C00: UbpmpPerformTriggerActions
0x180032330: UbpmpUpdateHardeningListNoSidConsumer
0x180011580: UbpmpTriggerCancelled
0x180037F38: "__cdecl _imp_TpAllocAlpcCompletion" __imp_TpAllocAlpcCompletion
0x180037700: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x18003249C: WPP_SF_L
0x18000F768: UbpmUtilsGetConsumerSid
0x18000F640: UbpmHardeningListRemove
0x180037ED8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180013434: IsUMgrQueryUserTokenPresent
0x180025BA0: WppControlCallback
0x18001319F: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x1800103C0: UbpmTriggerConsumerSetStatePublishingSecurity
0x180013AE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18003ECE8: USERENV_NULL_THUNK_DATA_DLN
0x1800460B0: "__cdecl _imp_PowerSettingRegisterNotification" __imp_PowerSettingRegisterNotification
0x180038240: IDLE_TRIGGER_PROVIDER_GUID
0x180042150: g_leQueuedSerialActionsListHead
0x180035F50: Pdcv1EventWrite_ACTIVATION_CLIENT_UNREGISTER
0x180013830: "public: __cdecl wmi::InCritSec::~InCritSec(void) __ptr64" ??1InCritSec@wmi@@QEAA@XZ
0x18002F104: UbpmTelemReportServiceStart
0x180037E70: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x180038BB0: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x180042BA0: "struct _UBPM_SPECIAL_TASK_CLASS g_CriticalMeasuredTasks" ?g_CriticalMeasuredTasks@@3U_UBPM_SPECIAL_TASK_CLASS@@A
0x18002E464: UbpmpMaintenanceTaskStoppedCallout
0x1800382A8: JOB_SUCCESS
0x18000A980: UbpmpTaskHostDead
0x18001365D: "__cdecl _imp_load_DeleteAppContainerProfile" __imp_load_DeleteAppContainerProfile
0x180038CD0: PDCV2_ACTIVATION_ACTIVATE
0x180039168: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180022220: UbpmTerminate
0x18003A930: "keep" ??_C@_19JOHPPIKE@?$AAk?$AAe?$AAe?$AAp?$AA?$AA@
0x180013639: "__cdecl _imp_load_DeriveAppContainerSidFromAppContainerName" __imp_load_DeriveAppContainerSidFromAppContainerName
0x180037B08: "__cdecl _imp_CreateThreadpoolWait" __imp_CreateThreadpoolWait
0x18003B000: "ubpmtaskhostchannel" ??_C@_1CI@BPADGEKJ@?$AAu?$AAb?$AAp?$AAm?$AAt?$AAa?$AAs?$AAk?$AAh?$AAo?$AAs?$AAt?$AAc?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
0x18003ED00: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLN
0x180037B28: "__cdecl _imp_SetThreadpoolWait" __imp_SetThreadpoolWait
0x180042A20: g_hUbpmModule
0x180037D88: "__cdecl _imp_wcstoul" __imp_wcstoul
0x180046068: "__cdecl _imp_LsaDeregisterLogonProcess" __imp_LsaDeregisterLogonProcess
0x180038C98: "AuthzApi" ??_C@_08LICLGFGG@AuthzApi?$AA@
0x180038930: "" ??_C@_00CNPNBAHC@?$AA@
0x180037E98: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180013693: "__cdecl _imp_load_LsaConnectUntrusted" __imp_load_LsaConnectUntrusted
0x180037940: "__cdecl _imp_InitializeProcThreadAttributeList" __imp_InitializeProcThreadAttributeList
0x180037A58: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x1800460D0: "__cdecl _imp_LsaLookupOpenLocalPolicy" __imp_LsaLookupOpenLocalPolicy
0x18003B2A8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180039178: ?_TlgEvent@?8??UbpmConsumerDecPendingActions@@9@4U<unnamed-type-_TlgEvent>@?8??1@YAXPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@@Z@B
0x1800378B0: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x1800429D0: "__cdecl _hmod__USERENV_dll" __hmod__USERENV_dll
0x180037FB8: "__cdecl _imp_RtlExpandEnvironmentStrings" __imp_RtlExpandEnvironmentStrings
0x180013383: "__cdecl _imp_load_QueryActiveSession" __imp_load_QueryActiveSession
0x180046078: "__cdecl _imp_TbDeleteCEvent" __imp_TbDeleteCEvent
0x180028FF8: UbpmpSetupConfigurationChanged
0x1800379B8: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18003F68C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18002CD30: "void __cdecl UbpmpMaintenanceTelemetryCallback(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?UbpmpMaintenanceTelemetryCallback@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x18002F700: UbpmpMaintenanceGetLevelForTime
0x180038500: "__cdecl _sz_api_ms_win_power_setting_l1_1_0_dll" __sz_api_ms_win_power_setting_l1_1_0_dll
0x18003F664: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180025EE0: "long __cdecl UbpmpMachineOOBECompletedCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?UbpmpMachineOOBECompletedCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x18002B950: UbpmUninitializeConstraints
0x180037D18: "__cdecl _imp_wcsncat_s" __imp_wcsncat_s
0x180027550: "void __cdecl UbpmpDeleteRepetitionContextCallback(void * __ptr64,unsigned char,void * __ptr64)" ?UbpmpDeleteRepetitionContextCallback@@YAXPEAXE0@Z
0x1800288E8: WPP_SF_iSd
0x180037860: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180042DC4: "unsigned char g_AoAcCapable" ?g_AoAcCapable@@3EA
0x1800376F8: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x180013218: "__cdecl _imp_load_WinStationQueryInformationW" __imp_load_WinStationQueryInformationW
0x180037D10: "__cdecl _imp_wcschr" __imp_wcschr
0x18002F8CC: "public: void * __ptr64 __cdecl EventManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GEventManager@@QEAAPEAXI@Z
0x1800383F0: LOGON_TRIGGER
0x1800272E4: "unsigned long __cdecl UbpmpCopyArray<struct _UBPM_MAINTENANCE_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _UBPM_MAINTENANCE_PARAMS const * __ptr64,struct _UBPM_MAINTENANCE_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_UBPM_MAINTENANCE_PARAMS@@@@YAKPEAEKPEAKKPEBU_UBPM_MAINTENANCE_PARAMS@@PEAPEAU0@@Z
0x180037A78: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180001878: "__cdecl TlgWrite" _TlgWrite
0x180037AD8: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x1800328D4: WPP_SF_ddiL
0x180027580: "int __cdecl UbpmpInitBrokers(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?UbpmpInitBrokers@@YAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x180037FD0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180030660: UbpmDisableTaskHostChannelRpcInterface
0x1800137E0: NdrServerCall2
0x180046008: "__cdecl _imp_CSebCreatePrivateEvent" __imp_CSebCreatePrivateEvent
0x18000F5D4: UbpmTelemConsumerRegistered
0x180011E54: UbpmpGetCSebConstraints
0x180037F08: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x18000DA30: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_TRIGGER_CONSUMER_PARAMS_1>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_TRIGGER_CONSUMER_PARAMS_1 const * __ptr64,struct _UBPM_TRIGGER_CONSUMER_PARAMS_1 * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_TRIGGER_CONSUMER_PARAMS_1@@@@YAKPEAEKPEAKPEBU_UBPM_TRIGGER_CONSUMER_PARAMS_1@@PEAPEAU0@@Z
0x180042CE0: "struct _UBPM_SRWLOCK g_TaskHostContextListLock" ?g_TaskHostContextListLock@@3U_UBPM_SRWLOCK@@A
0x180037D80: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18002FAC8: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@2KK@Z
0x180037898: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180037C68: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x18000DD50: UbpmConsumerEnable
0x180033EBC: "public: static class DateTime __cdecl DateTime::Max(class DateTime const & __ptr64,class DateTime const & __ptr64)" ?Max@DateTime@@SA?AV1@AEBV1@0@Z
0x18002F190: UbpmMaintenanceGetConditionsForLevel
0x18003AA48: STOPPING_OFF_IDLE
0x180001A20: "void __cdecl UbpmpRunSerializedActionCallback(void * __ptr64,unsigned char,void * __ptr64)" ?UbpmpRunSerializedActionCallback@@YAXPEAXE0@Z
0x18003AA58: NO_START_USER_NOT_LOGGED_ON
0x18003EBA0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll
0x180038308: JOB_START
0x180037E28: "__cdecl _imp_RtlInitString" __imp_RtlInitString
0x18002B520: WPP_SF_SqqddL
0x180038330: "System\CurrentControlSet\Control" ??_C@_1EC@DGAEKDHP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180039150: Microsoft_Windows_PDCLevels
0x180012E01: "__cdecl _imp_load_LsaLookupGetDomainInfo" __imp_load_LsaLookupGetDomainInfo
0x180025FB0: "void __cdecl UbpmpOOBEStatsCallback(void * __ptr64)" ?UbpmpOOBEStatsCallback@@YAXPEAX@Z
0x18001371E: "__cdecl _imp_load_LsaDeregisterLogonProcess" __imp_load_LsaDeregisterLogonProcess
0x18003ED38: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x1800460F8: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x18000F830: UbpmUpdateConsumerSidCache
0x18003F188: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x18000D840: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_ACTION_EXE_LAUNCH_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_ACTION_EXE_LAUNCH_PARAMS const * __ptr64,struct _UBPM_ACTION_EXE_LAUNCH_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_ACTION_EXE_LAUNCH_PARAMS@@@@YAKPEAEKPEAKPEBU_UBPM_ACTION_EXE_LAUNCH_PARAMS@@PEAPEAU0@@Z
0x180012994: "__cdecl XcptFilter" _XcptFilter
0x180046168: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x180037FD8: "__cdecl _xc_a" __xc_a
0x18003AA68: MSCHED_POLICY_KEYS_MALFORMED
0x18003AC90: "Random Delay" ??_C@_1BK@CANPJPEJ@?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AA?5?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180037920: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x180028CF8: UbpmpAcquireListLockShared
0x180025854: UbpmUtilsWaitForAutoStartComplete
0x18002353C: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x18000A350: UbpmpExecutionTimeWatchCallback
0x1800131B1: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x1800429B8: "__cdecl _hmod__ext_ms_win_session_usertoken_l1_1_0_dll" __hmod__ext_ms_win_session_usertoken_l1_1_0_dll
0x180012ECE: "__cdecl _tailMerge_dabapi_dll" __tailMerge_dabapi_dll
0x18003F72C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x180008ED0: UbpmpFindHost
0x180010B90: UbpmUtilsWorkCallback
0x18003F7E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0
0x1800130C0: IsWTSQueryUserTokenPresent
0x180037F98: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x180038900: WPP_ThisDir_CTLGUID_Regular
0x180037E08: "__cdecl _imp_NtAllocateLocallyUniqueId" __imp_NtAllocateLocallyUniqueId
0x18003AE88: "TsMaintPeriodRetrigger" ??_C@_1CO@DILGCEDD@?$AAT?$AAs?$AAM?$AAa?$AAi?$AAn?$AAt?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AAR?$AAe?$AAt?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x180038A10: "!x-sys-default-locale" ??_C@_1CM@BFAMBNFD@?$AA?$CB?$AAx?$AA?9?$AAs?$AAy?$AAs?$AA?9?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?9?$AAl?$AAo?$AAc?$AAa?$AAl?$AAe?$AA?$AA@
0x180027CBC: UbpmpStartStatePublishing
0x1800130AB: "__cdecl _imp_load_TbDeleteCEvent" __imp_load_TbDeleteCEvent
0x180037848: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180011BD8: UbpmpIsWaitingForTaskHost
0x180038B70: "stop" ??_C@_19LLIMCLGL@?$AAs?$AAt?$AAo?$AAp?$AA?$AA@
0x180036014: Pdcv1StopDiagnosticTimer
0x1800377F8: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x180038A40: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1JA@PKKMKIJK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180012390: UbpmpReleaseListLockExclusive
0x18002FC5C: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBG1KPEAXPEBU_GUID@@@Z
0x180035690: Pdcv1DiagnosticTimerCallback
0x180013517: "__cdecl callnewh" _callnewh
0x18002E3A8: UbpmpMaintenanceTaskStartedCallout
0x18002677C: UbpmUninitializeGlobalMachineState
0x180028D38: UbpmpAcquireUpdateLockShared
0x180037D78: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180031884: UbpmpReadContextBlock
0x18001128C: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBG1PEBU_GUID@@PEAX2@Z
0x180038190: "__cdecl _guard_iat_table" __guard_iat_table
0x18002AC54: UbpmpRemoveQueuedSerialActions
0x180013AA6: memcpy
0x180027940: UbpmpDurationEndArrived
0x1800344B4: PdcActivationClientUnregister
0x180042080: "struct _UBPM_WNF_SUBSCRIPTION * g_WnfSubscriptions" ?g_WnfSubscriptions@@3PAU_UBPM_WNF_SUBSCRIPTION@@A
0x180026F1C: "unsigned long __cdecl UbpmpCopyArray<struct _SID_AND_ATTRIBUTES>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _SID_AND_ATTRIBUTES const * __ptr64,struct _SID_AND_ATTRIBUTES * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_SID_AND_ATTRIBUTES@@@@YAKPEAEKPEAKKPEBU_SID_AND_ATTRIBUTES@@PEAPEAU0@@Z
0x18000D8E0: "unsigned long __cdecl UbpmpCopyArray<struct _UBPM_ACTION_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _UBPM_ACTION_PARAMS const * __ptr64,struct _UBPM_ACTION_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_UBPM_ACTION_PARAMS@@@@YAKPEAEKPEAKKPEBU_UBPM_ACTION_PARAMS@@PEAPEAU0@@Z
0x180027258: "unsigned long __cdecl UbpmpCopyArray<struct _UBPM_ACTION_PUBLISH_WNF_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _UBPM_ACTION_PUBLISH_WNF_PARAMS const * __ptr64,struct _UBPM_ACTION_PUBLISH_WNF_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_UBPM_ACTION_PUBLISH_WNF_PARAMS@@@@YAKPEAEKPEAKKPEBU_UBPM_ACTION_PUBLISH_WNF_PARAMS@@PEAPEAU0@@Z
0x18000DC30: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_WNF_STATE_CHANGE_TRIGGER_DATA_ITEM>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_WNF_STATE_CHANGE_TRIGGER_DATA_ITEM const * __ptr64,struct _DAB_WNF_STATE_CHANGE_TRIGGER_DATA_ITEM * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_WNF_STATE_CHANGE_TRIGGER_DATA_ITEM@@@@YAKPEAEKPEAKKPEBU_DAB_WNF_STATE_CHANGE_TRIGGER_DATA_ITEM@@PEAPEAU0@@Z
0x180013A18: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180037BE8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180002930: UbpmConsumerDecPendingActions
0x180038AF0: WPP_630fcf2a97bd3658d1800bbe421db6cc_Traceguids
0x180037DA0: "__cdecl _imp_memset" __imp_memset
0x180037A70: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x180037B80: "__cdecl _imp_CloseThreadpoolCleanupGroup" __imp_CloseThreadpoolCleanupGroup
0x180038988: JOB_TERMINATION
0x18003AE50: "Maintenance Emergency Level" ??_C@_1DI@BFHBKIE@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAE?$AAm?$AAe?$AAr?$AAg?$AAe?$AAn?$AAc?$AAy?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180037A20: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000F090: UbpmUtilsSubmitThreadPoolTimer
0x18002CF10: "unsigned long __cdecl UbpmpReadGroupAndLocalPolicy(void * __ptr64,void * __ptr64,unsigned short const * __ptr64,struct _KEY_VALUE_PARTIAL_INFORMATION * __ptr64 & __ptr64,unsigned long & __ptr64)" ?UbpmpReadGroupAndLocalPolicy@@YAKPEAX0PEBGAEAPEAU_KEY_VALUE_PARTIAL_INFORMATION@@AEAK@Z
0x1800273F0: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SCHEDULE_BY_MONTH>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SCHEDULE_BY_MONTH const * __ptr64,struct _DAB_SCHEDULE_BY_MONTH * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SCHEDULE_BY_MONTH@@@@YAKPEAEKPEAKPEBU_DAB_SCHEDULE_BY_MONTH@@PEAPEAU0@@Z
0x180012B87: "__cdecl initterm" _initterm
0x180037740: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x180037BD0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180037DF0: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x18003F768: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180042A08: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180035920: Pdcv1EventWrite_ACTIVATION_CLIENT_ACTIVATE
0x180046018: CSystemEventsBrokerClient_NULL_THUNK_DATA_DLA
0x180037AB0: "__cdecl _imp_Sleep" __imp_Sleep
0x180037FF8: "__cdecl _xi_z" __xi_z
0x180023E08: "unsigned long __cdecl UbpmpParseWord(unsigned short const * __ptr64,unsigned __int64,unsigned int & __ptr64,unsigned short & __ptr64)" ?UbpmpParseWord@@YAKPEBG_KAEAIAEAG@Z
0x180046000: "__cdecl _imp_CSebCreateWellKnownEvent" __imp_CSebCreateWellKnownEvent
0x180037AE0: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x18002EE7C: UbpmTelemMaintenanceWindowRundown
0x180042CD0: "struct _UBPM_SRWLOCK g_TaskHostJobObjectLock" ?g_TaskHostJobObjectLock@@3U_UBPM_SRWLOCK@@A
0x180031C34: UbpmpSetInitialHostServerJobObjectRequests
0x1800377E8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800381C8: "EmulateRailSession" ??_C@_1CG@NIMAMFHC@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAR?$AAa?$AAi?$AAl?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180022780: UbpmTriggerConsumerQueryStatus
0x180004310: UbpmpSetExecutionTimeLimit
0x180042BA8: "struct _UBPM_SRWLOCK g_TpSubmitLock" ?g_TpSubmitLock@@3U_UBPM_SRWLOCK@@A
0x180037BC0: "__cdecl _imp_TzSpecificLocalTimeToSystemTime" __imp_TzSpecificLocalTimeToSystemTime
0x180037E10: "__cdecl _imp_RtlIsMultiSessionSku" __imp_RtlIsMultiSessionSku
0x180042160: "struct _LIST_ENTRY g_leContainerProfilesListHead" ?g_leContainerProfilesListHead@@3U_LIST_ENTRY@@A
0x1800300EC: "private: unsigned long __cdecl EventManager::LogIt(unsigned short const * __ptr64,unsigned long) __ptr64" ?LogIt@EventManager@@AEAAKPEBGK@Z
0x180038B00: "a+" ??_C@_02DPNLHKJD@a?$CL?$AA@
0x180037EA8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180012B93: "__cdecl _C_specific_handler" __C_specific_handler
0x180038770: "ext-ms-win-session-usertoken-l1-" ??_C@_1EI@KDCLJMDP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAt?$AAo?$AAk?$AAe?$AAn?$AA?9?$AAl?$AA1?$AA?9@
0x180037A80: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18002CF78: "unsigned long __cdecl UbpmpReadMaintenanceSettings(struct _UBPM_MAINTENANCE_PARAMETERS * __ptr64,unsigned short const * __ptr64 * __ptr64)" ?UbpmpReadMaintenanceSettings@@YAKPEAU_UBPM_MAINTENANCE_PARAMETERS@@PEAPEBG@Z
0x180001914: "void __cdecl UbpmpDequeueActionInstance(enum _UBPM_QUEUED_ACTION_QUEUE_REASON,struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,struct _UBPM_QUEUED_ACTION_INSTANCE * __ptr64 * __ptr64)" ?UbpmpDequeueActionInstance@@YAXW4_UBPM_QUEUED_ACTION_QUEUE_REASON@@PEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@PEAPEAU_UBPM_QUEUED_ACTION_INSTANCE@@@Z
0x1800376C8: "__cdecl _imp_EaGetAggregation" __imp_EaGetAggregation
0x18001232C: "unsigned long __cdecl UbpmpGetCSebCondition(enum _CSebiEventType,struct _CBROKERED_EVENT_ID * __ptr64)" ?UbpmpGetCSebCondition@@YAKW4_CSebiEventType@@PEAU_CBROKERED_EVENT_ID@@@Z
0x180037C90: "__cdecl _imp_AddAccessAllowedAce" __imp_AddAccessAllowedAce
0x1800346C0: PdcPortClose
0x180013AB2: memmove
0x180030AB4: UbpmIsTaskStopped
0x18003AFB8: GUID_LOW_POWER_EPOCH
0x18002325C: WPP_SF_LdS
0x1800325FC: WPP_SF_SdL
0x180037828: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180042C60: "unsigned long volatile g_dwConsumerTag" ?g_dwConsumerTag@@3KC
0x180042A60: "struct _UBPM_MAINTENANCE_GLOBAL_STATE g_MaintenancePilot" ?g_MaintenancePilot@@3U_UBPM_MAINTENANCE_GLOBAL_STATE@@A
0x180034DB4: PdcpProcessMessageInternal
0x180042D90: WPP_REGISTRATION_GUIDS
0x180001D20: UbpmOpenTriggerConsumer
0x180042D50: "long (__cdecl* __ptr64 s_pfnI_RpcOpenClientProcess)(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?s_pfnI_RpcOpenClientProcess@@3P6AJPEAXKPEAPEAX@ZEA
0x180027FC4: WPP_SF_SSL
0x180024240: UbpmUtilsDateTimeToString
0x180046080: "__cdecl _imp_TbCreateCEvent" __imp_TbCreateCEvent
0x180037F90: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x180012A9F: malloc
0x180037820: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000BF60: UbpmpTriggerConsumerRegister
0x1800379A0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180037E20: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x1800139B4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180042960: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x18003ED68: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLN
0x18002BA80: WPP_SF_SSLd
0x180042A18: Microsoft_Windows_PDCEnableBits
0x180046180: "__cdecl _imp_LoadProfileBasic" __imp_LoadProfileBasic
0x18002A258: UbpmRunConsumerQueuedActions
0x18002B9AC: WPP_SF_SSLL
0x18003A9C8: JOB_START_FAILED
0x18003AEC8: WPP_1264da0e47233e286d1acf996805e99c_Traceguids
0x18003185C: UbpmpIsTaskStarted
0x18000BD10: s_UbpmRpcCloseTaskHostChannel
0x180013742: "__cdecl _imp_load_LsaLogonUser" __imp_load_LsaLogonUser
0x18002D614: UbpmInitializeMaintenance
0x180038CA8: WPP_2c1e0d30197d304cf4c42d81232bbf7c_Traceguids
0x180042170: "struct _LIST_ENTRY g_leTaskHostHardeningLinkage" ?g_leTaskHostHardeningLinkage@@3U_LIST_ENTRY@@A
0x180038560: "__cdecl _sz_TimeBrokerClient_dll" __sz_TimeBrokerClient_dll
0x1800277B0: UbpmQueueConsumerClose
0x1800379D0: api-ms-win-core-registry-l1-1-1_NULL_THUNK_DATA
0x180037EE8: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000E2D0: UbpmpValidateConsumerActionParameters
0x180037A08: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180042D98: WPP_MAIN_CB
0x1800460D8: "__cdecl _imp_LsaLookupGetDomainInfo" __imp_LsaLookupGetDomainInfo
0x18002CB7C: "unsigned long __cdecl UbpmpMaintenanceStateReported(unsigned long * __ptr64)" ?UbpmpMaintenanceStateReported@@YAKPEAK@Z
0x180012368: UbpmpAcquireListLockExclusive
0x18002B274: WPP_SF_S_guid_L
0x180037F78: "__cdecl _imp_AlpcInitializeMessageAttribute" __imp_AlpcInitializeMessageAttribute
0x180038C68: "LogonUserExEx" ??_C@_1BM@COIFJCHC@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AAE?$AAx?$AAE?$AAx?$AA?$AA@
0x180025520: UbpmUtilsSystemPowerOn
0x1800226F0: UbpmTriggerConsumerControlNotifications
0x18003F5D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180037988: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1800129A0: "__cdecl amsg_exit" _amsg_exit
0x180037D30: "__cdecl _imp__callnewh" __imp__callnewh
0x180037F58: "__cdecl _imp_ZwAlpcQueryInformation" __imp_ZwAlpcQueryInformation
0x180037C80: "__cdecl _imp_AllocateLocallyUniqueId" __imp_AllocateLocallyUniqueId
0x180023EDC: UBPM_TRY_ACQUIRE_SRWLOCK_SHARED
0x18000E710: UbpmSubscribeToBrokerNotifications
0x180008510: "unsigned long __cdecl UbpmLaunchTaskExe(struct _UBPM_TASK_LAUNCH_INPUT_PARAMS * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?UbpmLaunchTaskExe@@YAKPEAU_UBPM_TASK_LAUNCH_INPUT_PARAMS@@PEAPEAX11@Z
0x18003A950: "terminate" ??_C@_1BE@OLAKJODF@?$AAt?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AA?$AA@
0x180042278: "struct _LIST_ENTRY g_leJobObjectContextsHead" ?g_leJobObjectContextsHead@@3U_LIST_ENTRY@@A
0x180046028: "__cdecl _imp_DabUnregisterTriggerConsumer" __imp_DabUnregisterTriggerConsumer
0x180026A5C: MicrosoftTelemetryAssertTriggeredNoArgs
0x180001554: UbpmMaintenanceConstraintsCheck
0x1800383E0: CREATED_TASK_PROCESS
0x180037D08: "__cdecl _imp_fopen_s" __imp_fopen_s
0x180037878: "__cdecl _imp_SetInformationJobObject" __imp_SetInformationJobObject
0x18003B2A0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180037FA8: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x18003AB20: "\Registry\Machine\Software\Polic" ??_C@_1KC@GJADANJL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x18003F7F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18003F200: TimeBrokerClient_NULL_THUNK_DATA_DLB
0x180046088: TimeBrokerClient_NULL_THUNK_DATA_DLA
0x18003ECC8: TimeBrokerClient_NULL_THUNK_DATA_DLN
0x18003AA28: NO_START_ON_BATTERIES
0x180042990: "__cdecl _hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll" __hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll
0x1800132F8: "__cdecl _imp_load_QueryUserToken" __imp_load_QueryUserToken
0x1800352B0: McTemplateU0qqzr1qzr3qqqxqpqqqzr13q
0x180038B38: "EventWrite error" ??_C@_1CC@ILINPNBM@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAW?$AAr?$AAi?$AAt?$AAe?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x180037CA0: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x180038938: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x180042330: "struct _UBPM_GLOBAL_STATE_CONDITIONS * g_CSebConditions" ?g_CSebConditions@@3PAU_UBPM_GLOBAL_STATE_CONDITIONS@@A
0x18002FA24: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBG2K@Z
0x180032D74: WPP_SF_qdi
0x1800327A4: WPP_SF_ddL
0x180038CE0: PDCV2_ACTIVATION_DEACTIVATE
0x180030F38: UbpmpDecrementAppContainerRefAndDelete
0x180028FC0: UbpmpReleaseListLockShared
0x1800231C0: WPP_SF_LSd
0x180003660: UbpmpGetNewProcessToken
0x180042C78: g_QueuedSerialActionsLock
0x180037B00: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1800421D0: PDC_EVENT_PROVIDER_Context
0x180037C10: "__cdecl _imp_RegisterWaitUntilOOBECompleted" __imp_RegisterWaitUntilOOBECompleted
0x18002532C: UbpmUtilsSetTimerContext
0x180038BF0: "LogonUserS4U" ??_C@_1BK@IEMMMEHE@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AAS?$AA4?$AAU?$AA?$AA@
0x1800376C0: "__cdecl _imp_EACreateAggregateEvent" __imp_EACreateAggregateEvent
0x18003EAC0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_setting_l1_1_0_dll
0x180025AE0: UbpmStartTracingSession
0x180010CF0: UbpmpResetTaskJobModeCallback
0x180030638: UbpmCloseTaskHostContext
0x180032800: WPP_SF_ddLd
0x18002B1C4: UbpmpTriggerHandlerPrologue
0x1800295D0: "unsigned long __cdecl UbpmpRunConsumerAction(struct _UBPM_INPUT_ACTION_PARAMS * __ptr64,unsigned char * __ptr64)" ?UbpmpRunConsumerAction@@YAKPEAU_UBPM_INPUT_ACTION_PARAMS@@PEAE@Z
0x180042C28: "struct _UBPM_MACHINE_STATE g_MachineState" ?g_MachineState@@3U_UBPM_MACHINE_STATE@@A
0x180013754: "__cdecl _imp_load_LogonUserExExW" __imp_load_LogonUserExExW
0x180038870: "ext-ms-win-session-usermgr-l1-2-" ??_C@_1EE@POGAKNCO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x18002FB94: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned long,unsigned short const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@KPEBGPEAXPEBU_GUID@@@Z
0x180037CF8: "__cdecl _imp_fputws" __imp_fputws
0x1800382A0: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x180037A38: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180013778: "__cdecl _imp_load_LsaLookupManageSidNameMapping" __imp_load_LsaLookupManageSidNameMapping
0x180013840: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned long,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBG1PEBU_GUID@@KPEAX2@Z
0x180037A28: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x1800460B8: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x180046160: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x1800379C0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180042D48: "void * __ptr64 __ptr64 g_hLowPowerEpochExited" ?g_hLowPowerEpochExited@@3PEAXEA
0x1800134AC: "__cdecl _imp_load_UMgrQueryUserContext" __imp_load_UMgrQueryUserContext
0x180037F20: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x18002C9F0: "void __cdecl UbpmpMaintenanceRetriggerMaintenanceTasks(void)" ?UbpmpMaintenanceRetriggerMaintenanceTasks@@YAXXZ
0x180027B08: UbpmpInitExecutionTimeWatch
0x180042D38: "struct _GUID * __ptr64 __ptr64 g_pCriticalActions" ?g_pCriticalActions@@3PEAU_GUID@@EA
0x1800377F0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180037B18: "__cdecl _imp_CreateThreadpoolCleanupGroup" __imp_CreateThreadpoolCleanupGroup
0x1800132A4: IsQueryUserTokenPresent
0x180011AD0: UbpmpTaskHostChannelInterfaceSecurityCb
0x1800387C0: "__cdecl _sz_ext_ms_win_session_usertoken_l1_1_0_dll" __sz_ext_ms_win_session_usertoken_l1_1_0_dll
0x180012E13: "__cdecl _imp_load_LsaLookupOpenLocalPolicy" __imp_load_LsaLookupOpenLocalPolicy
0x180038AD0: "ReportedState" ??_C@_1BM@JAIAKKFF@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180002400: UbpmpTriggerConsumerUpdate
0x180037E60: "__cdecl _imp_RtlRandom" __imp_RtlRandom
0x180024B74: UbpmUtilsParseDateTime
0x1800378D8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18003A880: "Global\SC_AutoStartComplete" ??_C@_1DI@CLPFADAL@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAA?$AAu?$AAt?$AAo?$AAS?$AAt?$AAa?$AAr?$AAt?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180010FA0: UbpmUtilsTimerCallback
0x180042A50: g_cTotalConsumers
0x180033084: UbpmGetTokenForTask
0x18000EF70: UbpmTriggerConsumerRegister
0x180001410: UbpmTriggerConsumerSetDisabledForUser
0x1800291C0: "unsigned long __cdecl UbpmpExpandString(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?UbpmpExpandString@@YAKPEAPEAGPEBGPEAGK@Z
0x180038540: "__cdecl _sz_CSystemEventsBrokerClient_dll" __sz_CSystemEventsBrokerClient_dll
0x18003EBC0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USERENV_dll" __DELAY_IMPORT_DESCRIPTOR_USERENV_dll
0x1800429A8: "__cdecl _hmod__ext_ms_win_session_winsta_l1_1_0_dll" __hmod__ext_ms_win_session_winsta_l1_1_0_dll
0x180038B5C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x180032AEC: WPP_SF_dqqdd
0x18003A7C8: WPP_532516ec62383f86a7ebf7c7fd4c7e0b_Traceguids
0x180038280: "winsta0\default" ??_C@_1CA@DLNENPIB@?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180042980: "__cdecl _hmod__TimeBrokerClient_dll" __hmod__TimeBrokerClient_dll
0x18003AB10: "PT4H" ??_C@_19LFEGNJJE@?$AAP?$AAT?$AA4?$AAH?$AA?$AA@
0x1800429F8: "__cdecl _native_startup_lock" __native_startup_lock
0x180032260: UbpmpTerminateProcessCallback
0x1800137FC: DllMain
0x180037FB0: "__cdecl _imp_NtDeleteWnfStateName" __imp_NtDeleteWnfStateName
0x18003EB00: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CSystemEventsBrokerClient_dll" __DELAY_IMPORT_DESCRIPTOR_CSystemEventsBrokerClient_dll
0x180035EF4: Pdcv1EventWrite_ACTIVATION_CLIENT_REGISTER
0x180012F4D: "__cdecl _imp_load_DabUnregisterTriggerConsumer" __imp_load_DabUnregisterTriggerConsumer
0x180028984: WPP_SF_ii
0x180046070: SspiCli_NULL_THUNK_DATA_DLA
0x180037748: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x180031714: UbpmpIsConsumerSidPresent
0x180012F7D: "__cdecl _tailMerge_csystemeventsbrokerclient_dll" __tailMerge_csystemeventsbrokerclient_dll
0x180001964: "void __cdecl UbpmpDeleteRepetitionContext(struct _UBPM_REPETITION_CONTEXT * __ptr64 * __ptr64)" ?UbpmpDeleteRepetitionContext@@YAXPEAPEAU_UBPM_REPETITION_CONTEXT@@@Z
0x18003F6C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180037D98: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180037D90: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x1800111D0: UbpmpSetProcessPriorities
0x180037A98: "__cdecl _imp_InitializeConditionVariable" __imp_InitializeConditionVariable
0x18002B680: WPP_SF_iS
0x180037C40: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180037D48: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180046138: "__cdecl _imp_QueryUserToken" __imp_QueryUserToken
0x180001008: UbpmpMaintenanceTaskCompletedWithinDeadline
0x180046178: "__cdecl _imp_UnloadProfileBasic" __imp_UnloadProfileBasic
0x180033E24: "public: int __cdecl DateTime::Add(class FixedTimeSpan const & __ptr64) __ptr64" ?Add@DateTime@@QEAAHAEBVFixedTimeSpan@@@Z
0x180037910: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x18003ADA8: "Maintenance Preemptive Level" ??_C@_1DK@DPFOEBFE@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAP?$AAr?$AAe?$AAe?$AAm?$AAp?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1800379E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800378C0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180042D30: "unsigned long g_dwCriticalActionsCount" ?g_dwCriticalActionsCount@@3KA
0x180037BA8: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180012D76: "__cdecl _imp_load_LsaLookupClose" __imp_load_LsaLookupClose
0x180031ECC: UbpmpTerminateNonHostedTask
0x180011004: PubSebEdgeEventValueInternal
0x180002B50: UbpmpPostTaskHostDeadCallback
0x18003F614: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180027498: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_ACTION_PUBLISH_WNF_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_ACTION_PUBLISH_WNF_PARAMS const * __ptr64,struct _UBPM_ACTION_PUBLISH_WNF_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_ACTION_PUBLISH_WNF_PARAMS@@@@YAKPEAEKPEAKPEBU_UBPM_ACTION_PUBLISH_WNF_PARAMS@@PEAPEAU0@@Z
0x180042D28: "void * __ptr64 __ptr64 g_hUbpmHeap" ?g_hUbpmHeap@@3PEAXEA
0x1800376E8: EventAggregation_NULL_THUNK_DATA
0x1800460E0: "__cdecl _imp_LsaLookupManageSidNameMapping" __imp_LsaLookupManageSidNameMapping
0x18003ED80: ext-ms-win-session-usertoken-l1-1-0_NULL_THUNK_DATA_DLN
0x180037E50: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x1800386F0: "ext-ms-win-session-winsta-l1-1-3" ??_C@_1EC@GMNGGCEH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3@
0x180008310: UbpmStatsOperation
0x180037A90: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x1800377E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800429C0: "__cdecl _hmod__ext_ms_win_session_usermgr_l1_1_0_dll" __hmod__ext_ms_win_session_usermgr_l1_1_0_dll
0x1800134CC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18003A978: TASK_INSTANCE_QUEUED
0x1800376D0: "__cdecl _imp_EaDeleteAggregation" __imp_EaDeleteAggregation
0x18000D720: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SID_INFO>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SID_INFO const * __ptr64,struct _DAB_SID_INFO * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SID_INFO@@@@YAKPEAEKPEAKPEBU_DAB_SID_INFO@@PEAPEAU0@@Z
0x180037CD8: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180037818: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180037C08: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180042310: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180013990: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180012E31: "__cdecl _tailMerge_api_ms_win_power_setting_l1_1_0_dll" __tailMerge_api_ms_win_power_setting_l1_1_0_dll
0x18002A2E4: UbpmScheduleRestartOnFailure
0x18003AEE0: "InitializeTaskEventsLib() --> (h" ??_C@_1GI@IOPOKAFC@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAT?$AAa?$AAs?$AAk?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AAL?$AAi?$AAb?$AA?$CI?$AA?$CJ?$AA?5?$AA?9?$AA?9?$AA?$DO?$AA?5?$AA?$CI?$AAh@
0x18003AA18: RUNNING_INSTANCE_STOPPED
0x18003A968: STOPPING_ON_BATTERIES
0x180037EF0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180038460: "{222A245B-E637-4AE9-A93F-A59CA11" ??_C@_1EO@KKLNABMN@?$AA?$HL?$AA2?$AA2?$AA2?$AAA?$AA2?$AA4?$AA5?$AAB?$AA?9?$AAE?$AA6?$AA3?$AA7?$AA?9?$AA4?$AAA?$AAE?$AA9?$AA?9?$AAA?$AA9?$AA3?$AAF?$AA?9?$AAA?$AA5?$AA9?$AAC?$AAA?$AA1?$AA1@
0x180046048: "__cdecl _imp_LogonUserExExW" __imp_LogonUserExExW
0x18001379C: "__cdecl _imp_load_LsaLookupFreeMemory" __imp_load_LsaLookupFreeMemory
0x1800137D0: Ndr64AsyncServerCallAll
0x180037DE8: "__cdecl _imp_RtlGetDeviceFamilyInfoEnum" __imp_RtlGetDeviceFamilyInfoEnum
0x1800260A0: "unsigned long __cdecl UbpmpPowerSourceChanged(void * __ptr64,unsigned long,void * __ptr64)" ?UbpmpPowerSourceChanged@@YAKPEAXK0@Z
0x180027E90: UbpmpTakeConsumerReference
0x180042E30: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUqlyhUhvieviUfyknUvevmghUlyquivUznwGEUhgwzucOlyq@TaskEvents" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUqlyhUhvieviUfyknUvevmghUlyquivUznwGEUhgwzucOlyq@TaskEvents
0x180025F80: "void __cdecl UbpmpMaintenanceSettingsChangedCallback(void * __ptr64)" ?UbpmpMaintenanceSettingsChangedCallback@@YAXPEAX@Z
0x180037880: "__cdecl _imp_QueryInformationJobObject" __imp_QueryInformationJobObject
0x180042D58: "unsigned char g_fLowPowerEpoch" ?g_fLowPowerEpoch@@3EA
0x18000DAE0: "unsigned long __cdecl UbpmpCopyArray<struct _UBPM_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _UBPM_TRIGGER_PARAMS const * __ptr64,struct _UBPM_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_UBPM_TRIGGER_PARAMS@@@@YAKPEAEKPEAKKPEBU_UBPM_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180037C78: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18000238C: UbpmTelemConsumerUpdated
0x1800388F0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18003F858: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180037950: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180037A40: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180013488: "__cdecl _imp_load_UMgrQueryDefaultAccountToken" __imp_load_UMgrQueryDefaultAccountToken
0x18003AD58: "MaintenanceDisabled" ??_C@_1CI@CFOOIOFE@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180037AB8: "__cdecl _imp_WakeConditionVariable" __imp_WakeConditionVariable
0x18003B330: "%s: ALPC message id=%x required " ??_C@_0EK@FKGLCLNP@?$CFs?3?5ALPC?5message?5id?$DN?$CFx?5required?5@
0x180035460: McTemplateU0qqzr1qzr3qqxqpqqzr11q
0x1800121B0: UbpmTriggerConsumerControl
0x18003B2A0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180042CF0: "struct _UBPM_GLOBAL_DATA g_Globals" ?g_Globals@@3U_UBPM_GLOBAL_DATA@@A
0x180012A60: "__cdecl ValidateImageBase" _ValidateImageBase
0x180042BC0: "struct _TP_CALLBACK_ENVIRON_V3 g_CallbackEnv" ?g_CallbackEnv@@3U_TP_CALLBACK_ENVIRON_V3@@A
0x18003F2D8: SspiCli_NULL_THUNK_DATA_DLB
0x180037E30: "__cdecl _imp_RtlFindLeastSignificantBit" __imp_RtlFindLeastSignificantBit
0x180042C50: "unsigned __int64 volatile g_ullCollectionId" ?g_ullCollectionId@@3_KC
0x180038200: NEW_INSTANCE_IGNORED
0x18001369F: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x18000BC00: UbpmpWaitForFirstResponse
0x18003B2B0: "\PdcPort" ??_C@_1BC@LPLMDA@?$AA?2?$AAP?$AAd?$AAc?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x180037768: "__cdecl _imp_RpcAsyncAbortCall" __imp_RpcAsyncAbortCall
0x1800058C0: "unsigned long __cdecl UbpmpLaunchOneTask(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,struct _UBPM_ACTION_PARAMS * __ptr64,unsigned long,void * __ptr64,void * __ptr64 * __ptr64,void * __ptr64,struct _GUID * __ptr64,unsigned long,unsigned __int64,unsigned long,unsigned __int64,unsigned char,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,void * __ptr64,unsigned char,unsigned short const * __ptr64 * __ptr64,unsigned char * __ptr64)" ?UbpmpLaunchOneTask@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@PEAU_UBPM_ACTION_PARAMS@@KPEAXPEAPEAX2PEAU_GUID@@K_KK5EPEAPEBGKPEAEK2E67@Z
0x180013681: "__cdecl _imp_load_DestroyEnvBlock" __imp_load_DestroyEnvBlock
0x180023564: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180042E3C: g_RegistrationCount
0x18000D980: "unsigned long __cdecl UbpmpCopyArray<unsigned char>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned char * __ptr64 * __ptr64)" ??$UbpmpCopyArray@E@@YAKPEAEKPEAKKPEBEPEAPEAE@Z
0x18003A7A0: "ENABLED" ??_C@_1BA@MJBJJCCC@?$AAE?$AAN?$AAA?$AAB?$AAL?$AAE?$AAD?$AA?$AA@
0x18003A908: "TsDuration" ??_C@_1BG@LGBEJPEA@?$AAT?$AAs?$AAD?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800270D4: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_SCHEDULE_BY_MONTH>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_SCHEDULE_BY_MONTH const * __ptr64,struct _DAB_SCHEDULE_BY_MONTH * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_SCHEDULE_BY_MONTH@@@@YAKPEAEKPEAKKPEBU_DAB_SCHEDULE_BY_MONTH@@PEAPEAU0@@Z
0x180026F1C: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_ETW_EVENT_TRIGGER_DATA_ITEM>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_ETW_EVENT_TRIGGER_DATA_ITEM const * __ptr64,struct _DAB_ETW_EVENT_TRIGGER_DATA_ITEM * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_ETW_EVENT_TRIGGER_DATA_ITEM@@@@YAKPEAEKPEAKKPEBU_DAB_ETW_EVENT_TRIGGER_DATA_ITEM@@PEAPEAU0@@Z
0x180037F18: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000B360: UBPM_RPC_TASK_HOST_CONTEXT_HANDLE_rundown
0x180037C30: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x180037788: "__cdecl _imp_GetDateFormatEx" __imp_GetDateFormatEx
0x1800137B0: NdrAsyncServerCall
0x1800376D8: "__cdecl _imp_EADeleteAggregateEvent" __imp_EADeleteAggregateEvent
0x180037B10: "__cdecl _imp_CloseThreadpool" __imp_CloseThreadpool
0x18003F5C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180030240: "long __cdecl StringCbCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCatW@@YAJPEAG_KPEBG@Z
0x1800220F0: UbpmInitialize
0x18002B474: WPP_SF_Sqid
0x18003A8E8: "D:(A;;GA;;;SY)" ??_C@_1BO@MGGCCONH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$AA@
0x1800130C0: IsWTSEnumerateSessionsWPresent
0x180038400: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18002CE8C: "unsigned long __cdecl UbpmpMaintenanceTotalTasksRunning(void)" ?UbpmpMaintenanceTotalTasksRunning@@YAKXZ
0x18003ACB0: "Automatic Maintenance Random Del" ??_C@_1EG@PJBFIIHB@?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AA?5?$AAD?$AAe?$AAl@
0x180025A80: WPP_SF_
0x180037830: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18003ED90: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLN
0x180037A00: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18003EDD8: profapi_NULL_THUNK_DATA_DLN
0x18003A988: NO_START_ON_RAIL_SESSION
0x180037A68: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18003EC20: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800092D0: UbpmpSendCommandGetResponse
0x180046150: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLA
0x18003F238: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLB
0x180028274: WPP_SF_SddddL
0x18001242C: UbpmUtilsIsStateNameAllocated
0x18003B040: "TaskhostTimeout" ??_C@_1CA@KLEEKGMO@?$AAT?$AAa?$AAs?$AAk?$AAh?$AAo?$AAs?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x180037AA0: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x180027054: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_REGISTRATION_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_REGISTRATION_TRIGGER_PARAMS const * __ptr64,struct _DAB_REGISTRATION_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_REGISTRATION_TRIGGER_PARAMS@@@@YAKPEAEKPEAKKPEBU_DAB_REGISTRATION_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180025374: UbpmUtilsSubmitThreadPoolWait
0x1800126D0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800137C0: NdrServerCallAll
0x180039090: Microsoft_Windows_PDCKeywords
0x180038650: "ext-ms-win-session-winsta-l1-1-1" ??_C@_1EC@MGNPKKMM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x180037D50: "__cdecl _imp__initterm" __imp__initterm
0x18003F81C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x1800135BA: "__cdecl _tailMerge_profapi_dll" __tailMerge_profapi_dll
0x18003B3F8: PDCV2_ACTIVATION_REGISTER
0x180027054: "unsigned long __cdecl UbpmpCopyArray<struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS const * __ptr64,struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS@@@@YAKPEAEKPEAKKPEBU_UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS@@PEAPEAU0@@Z
0x18003A9D8: STOPPING_ON_TIMEOUT
0x180037728: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18003AAC0: "Maintenance Timer" ??_C@_1CE@MNICGONK@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
0x18001366F: "__cdecl _imp_load_LoadProfileBasic" __imp_load_LoadProfileBasic
0x1800377D0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800281B0: WPP_SF_Sdddd
0x18003F844: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180037B38: "__cdecl _imp_SetThreadpoolThreadMaximum" __imp_SetThreadpoolThreadMaximum
0x180037890: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18002EFDC: UbpmTelemMaintenanceWindowStopped
0x180042000: "struct _UBPM_REGISTRY_SUBSCRIPTION * g_RegSubscriptions" ?g_RegSubscriptions@@3PAU_UBPM_REGISTRY_SUBSCRIPTION@@A
0x180037F60: "__cdecl _imp_RtlWaitOnAddress" __imp_RtlWaitOnAddress
0x180037B60: "__cdecl _imp_CloseThreadpoolCleanupGroupMembers" __imp_CloseThreadpoolCleanupGroupMembers
0x180028444: WPP_SF_SiSSq
0x180026E64: "__cdecl TlgDefineProvider_annotation__Tlgumpdo_hKernelPdcProv" _TlgDefineProvider_annotation__Tlgumpdo_hKernelPdcProv
0x180037C48: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x18002E2FC: UbpmpMaintenanceTaskIsCritical
0x18003AFE8: "I_RpcOpenClientProcess" ??_C@_0BH@DMICBGKD@I_RpcOpenClientProcess?$AA@
0x180037E48: "__cdecl _imp_NtCreateWnfStateName" __imp_NtCreateWnfStateName
0x18003F6A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18003F7B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1
0x1800381B8: ACTION_FAILURE
0x18002DA50: UbpmMaintenanceEvaluateWakePolicy
0x180037EB8: "__cdecl _imp_RtlCreateVirtualAccountSid" __imp_RtlCreateVirtualAccountSid
0x18002FA80: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBG@Z
0x180037F30: "__cdecl _imp_RtlWakeAddressAll" __imp_RtlWakeAddressAll
0x180042D40: "void * __ptr64 __ptr64 g_pSecurityDescriptor" ?g_pSecurityDescriptor@@3PEAXEA
0x18000DB80: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_ACTION_ACCOUNT_INFO>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_ACTION_ACCOUNT_INFO const * __ptr64,struct _UBPM_ACTION_ACCOUNT_INFO * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_ACTION_ACCOUNT_INFO@@@@YAKPEAEKPEAKPEBU_UBPM_ACTION_ACCOUNT_INFO@@PEAPEAU0@@Z
0x1800389C8: "Removed" ??_C@_1BA@EEJAOMFI@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$AA@
0x18002DEE0: UbpmpCheckQueueMaintenanceLauncher
0x18003509C: McTemplateU0qqqqzr3
0x1800376E0: "__cdecl _imp_EaCreateAggregation" __imp_EaCreateAggregation
0x1800429E8: "__cdecl _onexitend" __onexitend
0x180037C98: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x180038CB8: "V1_Unknown" ??_C@_1BG@BMCPAJCB@?$AAV?$AA1?$AA_?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x180037FC8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18003ADE8: "Maintenance Idle Level" ??_C@_1CO@OFEMGGKH@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180037760: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x1800306B4: UbpmEnableTaskHostChannelRpcInterface
0x180038920: WPP_3236e840551c353fe406098df8c986fe_Traceguids
0x18000ADC0: UbpmpTaskHostCleanup
0x18003AFC8: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180037900: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18002D384: "void __cdecl UbpmpReportMaintenanceState(struct _SYSTEMTIME * __ptr64,unsigned long)" ?UbpmpReportMaintenanceState@@YAXPEAU_SYSTEMTIME@@K@Z
0x180037B50: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180046198: profapi_NULL_THUNK_DATA_DLA
0x180002870: UbpmConsumerIncPendingActions
0x180037CC0: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180037DD8: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x18002AF30: UbpmpRunQueuedActionCallback
0x18000D5E0: "unsigned long __cdecl UbpmpCopyArray<unsigned short * __ptr64>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,unsigned short * __ptr64 const * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ??$UbpmpCopyArray@PEAG@@YAKPEAEKPEAKKPEBQEAGPEAPEAPEAG@Z
0x1800271D8: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_SCHEDULE_BY_WEEK>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_SCHEDULE_BY_WEEK const * __ptr64,struct _DAB_SCHEDULE_BY_WEEK * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_SCHEDULE_BY_WEEK@@@@YAKPEAEKPEAKKPEBU_DAB_SCHEDULE_BY_WEEK@@PEAPEAU0@@Z
0x1800429D8: "__cdecl _hmod__profapi_dll" __hmod__profapi_dll
0x180037F10: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180032F30: WPP_SF_qqiddi
0x180042CB0: "struct _RTL_CONDITION_VARIABLE g_cvHostStartedup" ?g_cvHostStartedup@@3U_RTL_CONDITION_VARIABLE@@A
0x1800131C4: IsWinStationQueryInformationWPresent
0x1800377A0: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180037AF0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180038600: "ext-ms-win-session-winsta-l1-1-0" ??_C@_1EC@HOGDMNKJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x180037FE8: "__cdecl _xi_a" __xi_a
0x180025800: UbpmUtilsWaitCallback
0x180037AE8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800377A8: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18003B3E8: PDCV2_ACTIVATION_CALLBACK
0x1800377C0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800335B8: UbpmpLogonUserS4U
0x18002F484: UbpmMaintenanceInitializeTaskTriggers
0x180046170: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLA
0x18003F218: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLB
0x18002BC38: "unsigned long __cdecl UbpmMaintBrokerTriggerRegister(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,struct _CBROKERED_EVENT_ID * __ptr64)" ?UbpmMaintBrokerTriggerRegister@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@PEAU_CBROKERED_EVENT_ID@@@Z
0x18002438C: UbpmUtilsGetProcessPrivileges
0x18003EDB0: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLN
0x180032EB0: WPP_SF_qqidd
0x180037E80: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x180037978: api-ms-win-core-realtime-l1-1-0_NULL_THUNK_DATA
0x180037CC8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180010840: s_UbpmRpcOpenTaskHostChannel
0x180006560: UbpmGetUserNameFromSid
0x1800389F0: WPP_dc321fada0993e3404f49855e43e4eac_Traceguids
0x180037E38: "__cdecl _imp_RtlFindMostSignificantBit" __imp_RtlFindMostSignificantBit
0x180035A18: Pdcv1EventWrite_ACTIVATION_CLIENT_CALLBACK
0x180037C18: "__cdecl _imp_UnregisterWaitUntilOOBECompleted" __imp_UnregisterWaitUntilOOBECompleted
0x18003A920: "delete" ??_C@_1O@MEFPJPNF@?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180013114: "__cdecl _imp_load_WTSQueryUserToken" __imp_load_WTSQueryUserToken
0x180031534: UbpmpInitPidInHardeningList
0x18002874C: WPP_SF_dd
0x1800052D0: s_UbpmRpcTaskHostReportTaskStatus
0x180042E38: "unsigned long g_cDummyHosts" ?g_cDummyHosts@@3KA
0x180032414: WPP_SF_Ds
0x18002B5F8: WPP_SF_dS
0x180037708: "__cdecl _imp_UuidIsNil" __imp_UuidIsNil
0x1800383A0: "EmulateWorkerSession" ??_C@_1CK@CDGMPAOG@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180032A38: WPP_SF_dq
0x180038F50: "\Registry\Machine\Software\Micro" ??_C@_1KI@MCJGGIDC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180037B70: "__cdecl _imp_CallbackMayRunLong" __imp_CallbackMayRunLong
0x180035040: McGenEventWrite
0x180042220: WPP_GLOBAL_Control
0x18002434C: UbpmUtilsFreeTimerContext
0x180033F1C: "public: int __cdecl DateTime::Set(struct _FILETIME const & __ptr64) __ptr64" ?Set@DateTime@@QEAAHAEBU_FILETIME@@@Z
0x18003EB40: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x1800382A4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18003F628: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180046148: "__cdecl _imp_WinStationQueryInformationW" __imp_WinStationQueryInformationW
0x1800234C0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180046020: "__cdecl _imp_DabGetLastScheduledRunTime" __imp_DabGetLastScheduledRunTime
0x180038B90: "LocalService" ??_C@_1BK@INGGECPM@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1800323D0: WPP_SF_D
0x180023484: WPP_SF_d
0x18000E220: UbpmpTriggerConsumerExists
0x180042A10: "__cdecl pRawDllMain" _pRawDllMain
0x180026FC8: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_ETW_EVENT_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_ETW_EVENT_TRIGGER_PARAMS const * __ptr64,struct _DAB_ETW_EVENT_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_ETW_EVENT_TRIGGER_PARAMS@@@@YAKPEAEKPEAKKPEBU_DAB_ETW_EVENT_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180027750: UbpmApiBufferFree
0x1800258C0: UbpmpHeapCreate
0x1800384D0: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x180037B98: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x180037BA0: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x180013730: "__cdecl _imp_load_LsaLookupTranslateSids" __imp_load_LsaLookupTranslateSids
0x1800110A8: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@1KKPEAX2@Z
0x180042268: "struct _LIST_ENTRY g_leTaskHostContextListHead" ?g_leTaskHostContextListHead@@3U_LIST_ENTRY@@A
0x180042C20: "union _RTL_RUN_ONCE g_ioUbpmHeapCreate" ?g_ioUbpmHeapCreate@@3T_RTL_RUN_ONCE@@A
0x18003A838: "CriticalMeasured" ??_C@_1CC@BOGIKMCI@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAa?$AAs?$AAu?$AAr?$AAe?$AAd?$AA?$AA@
0x18002BE70: "void __cdecl UbpmpInitializeMaintenanceParameters(struct _UBPM_MAINTENANCE_PARAMETERS * __ptr64)" ?UbpmpInitializeMaintenanceParameters@@YAXPEAU_UBPM_MAINTENANCE_PARAMETERS@@@Z
0x1800134C0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18003ABF8: "Activation Boundary" ??_C@_1CI@JFFLCLDH@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAB?$AAo?$AAu?$AAn?$AAd?$AAa?$AAr?$AAy?$AA?$AA@
0x180026E64: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x1800355E4: PdcpFormatTaskName
0x18002DCC4: UbpmTakeMaintenancePdcReference
0x180042C98: "struct _UBPM_SRWLOCK g_ContainerProfilesListLock" ?g_ContainerProfilesListLock@@3U_UBPM_SRWLOCK@@A
0x180027C10: UbpmpReportTaskSQMStats
0x180046110: "__cdecl _imp_UMgrFreeSessionUsers" __imp_UMgrFreeSessionUsers
0x18003F6DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180035FAC: Pdcv1StartDiagnosticTimer
0x180037F48: "__cdecl _imp_ZwAlpcSendWaitReceivePort" __imp_ZwAlpcSendWaitReceivePort
0x180037EB0: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x180037A18: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18003AA80: WPP_8315bc0155043361dab736b943c81511_Traceguids
0x180012970: "__cdecl _security_check_cookie" __security_check_cookie
0x18003AAE8: "2000-01-01T02:00:00" ??_C@_1CI@PJILCIDA@?$AA2?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA1?$AA?9?$AA0?$AA1?$AAT?$AA0?$AA2?$AA?3?$AA0?$AA0?$AA?3?$AA0?$AA0?$AA?$AA@
0x18002D2C0: "void __cdecl UbpmpRegisterPdcClient(void)" ?UbpmpRegisterPdcClient@@YAXXZ
0x180042C08: "struct _UBPM_SPECIAL_TASK_CLASS g_CriticalMaintenanceTasks" ?g_CriticalMaintenanceTasks@@3U_UBPM_SPECIAL_TASK_CLASS@@A
0x180039236: ?_TlgEvent@?M@??UbpmConsumerIncPendingActions@@9@4U<unnamed-type-_TlgEvent>@?M@??1@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@@Z@B
0x180037FE0: "__cdecl _xc_z" __xc_z
0x180028C34: UbpmUnRegisterTriggerConsumers
0x180011390: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@@Z
0x18003F754: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180042C48: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x180037958: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18003EB20: "__cdecl _DELAY_IMPORT_DESCRIPTOR_TimeBrokerClient_dll" __DELAY_IMPORT_DESCRIPTOR_TimeBrokerClient_dll
0x1800378A0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180037918: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x1800378F0: "__cdecl _imp_GetPriorityClass" __imp_GetPriorityClass
0x180042968: "__cdecl _hmod__api_ms_win_power_setting_l1_1_0_dll" __hmod__api_ms_win_power_setting_l1_1_0_dll
0x180002D74: UbpmCleanupStoppedTask
0x180037AA8: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x180037E58: "__cdecl _imp_NtDuplicateToken" __imp_NtDuplicateToken
0x18002CD60: "void __cdecl UbpmpMaintenanceTelemetryReport(void * __ptr64,unsigned char,void * __ptr64)" ?UbpmpMaintenanceTelemetryReport@@YAXPEAXE0@Z
0x18002DF64: UbpmpMaintenanceComputeCompletionPeriod
0x180042CB8: "__int64 volatile g_ullCommandSequence" ?g_ullCommandSequence@@3_JC
0x180003770: UbpmpOpenTriggerConsumer
0x180003614: "__cdecl TlgCreateWsz" _TlgCreateWsz
0x180037CF0: "__cdecl _imp_fflush" __imp_fflush
0x180038230: EVENT_TRIGGER
0x18003F808: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x18003A792: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1800329D4: WPP_SF_ddq
0x180032CA8: WPP_SF_qdd
0x180038910: WPP_08f02ddcfe3330defdc3269220f5a5ce_Traceguids
0x180037DF8: "__cdecl _imp_RtlRandomEx" __imp_RtlRandomEx
0x180037AD0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180032C44: WPP_SF_qLd
0x180037838: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180032528: WPP_SF_Lqi
0x18003EAE0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_DABAPI_dll" __DELAY_IMPORT_DESCRIPTOR_DABAPI_dll
0x180031600: UbpmpInitTaskHostServer
0x18003A7D8: "CriticalTask" ??_C@_1BK@ILLFBACK@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x18003B3D8: PDC_EVENT_PROVIDER
0x180037858: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180037EA0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x1800429E0: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x1800377B0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800223D0: UbpmTriggerConsumerConfigure
0x180037E68: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x1800261D0: "void __cdecl UbpmpRegistryChangeCallback(void * __ptr64,unsigned char,void * __ptr64)" ?UbpmpRegistryChangeCallback@@YAXPEAXE0@Z
0x180037840: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800221C0: UbpmReleaseJobBackgroundMode
0x180013B00: "__cdecl _chkstk" __chkstk
0x18000B1F0: UbpmpCheckConsumerDisabledForUser
0x18003A8D8: GUID_ACDC_POWER_SOURCE
0x180026E64: "__cdecl TlgDefineProvider_annotation__TlgghUBPMProviderProv" _TlgDefineProvider_annotation__TlgghUBPMProviderProv
0x18003A7F8: "CriticalMaintenance" ??_C@_1CI@NHCFNCCA@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x180032D08: WPP_SF_qddi
0x18003F248: ext-ms-win-session-usertoken-l1-1-0_NULL_THUNK_DATA_DLB
0x180034654: PdcGetModuleName
0x180032E40: WPP_SF_qqdd
0x18003258C: WPP_SF_Lqii
0x180037B68: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x180034D48: PdcpAlpcReleaseResources
0x180013224: "__cdecl _tailMerge_ext_ms_win_session_winsta_l1_1_0_dll" __tailMerge_ext_ms_win_session_winsta_l1_1_0_dll
0x180037798: api-ms-win-core-datetime-l1-1-1_NULL_THUNK_DATA
0x180013434: IsUMgrQueryDefaultAccountTokenPresent
0x180025624: UbpmUtilsTerminate
0x18003F77C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-oobe-notification-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-oobe-notification-l1-1-0
0x180021FC0: TraceLoggingRegisterEx
0x180012F5F: "__cdecl _imp_load_DabRegisterTriggerConsumer" __imp_load_DabRegisterTriggerConsumer
0x180037EF8: "__cdecl _imp_RtlHashUnicodeString" __imp_RtlHashUnicodeString
0x180023880: "unsigned long __cdecl UbpmUtilsTaskClassStart(unsigned short * __ptr64,unsigned short * __ptr64,struct _UBPM_SPECIAL_TASK_CLASS * __ptr64)" ?UbpmUtilsTaskClassStart@@YAKPEAG0PEAU_UBPM_SPECIAL_TASK_CLASS@@@Z
0x180037DD0: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x180037F68: "__cdecl _imp_ZwAlpcConnectPort" __imp_ZwAlpcConnectPort
0x180037948: "__cdecl _imp_DeleteProcThreadAttributeList" __imp_DeleteProcThreadAttributeList
0x180010BF0: s_UbpmRpcTaskHostSendResponseReceiveCommand
0x1800379F8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180007DC0: UbpmpTriggerConsumerReportResult
0x180037B88: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180037DB0: "__cdecl _imp_EtwEventActivityIdControl" __imp_EtwEventActivityIdControl
0x1800388C0: "__cdecl _sz_USERENV_dll" __sz_USERENV_dll
0x180027624: "unsigned long __cdecl UbpmpSubmitDeleteRepetitionContextWork(struct _UBPM_REPETITION_CONTEXT * __ptr64)" ?UbpmpSubmitDeleteRepetitionContextWork@@YAKPEAU_UBPM_REPETITION_CONTEXT@@@Z
0x180037BB0: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x1800385D0: "__cdecl _sz_ext_ms_win_session_wtsapi32_l1_1_0_dll" __sz_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180031184: UbpmpGetConsumerSids
0x180010AC0: "unsigned char __cdecl UbpmUtilsSearchMultiString(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UbpmUtilsSearchMultiString@@YAEPEBG0@Z
0x18001364B: "__cdecl _imp_load_UnloadProfileBasic" __imp_load_UnloadProfileBasic
0x180046130: "__cdecl _imp_QueryActiveSession" __imp_QueryActiveSession
0x180034084: PdcTaskClientRequest
0x180001C1C: "void __cdecl UbpmpRunConsumerQueuedActions(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,enum _UBPM_QUEUED_ACTION_QUEUE_REASON,unsigned char)" ?UbpmpRunConsumerQueuedActions@@YAXPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@W4_UBPM_QUEUED_ACTION_QUEUE_REASON@@E@Z
0x180037870: "__cdecl _imp_CreateJobObjectW" __imp_CreateJobObjectW
0x18002F908: "unsigned long __cdecl InitializeTaskEventsLib(void * __ptr64 * __ptr64)" ?InitializeTaskEventsLib@@YAKPEAPEAX@Z
0x18000BDA0: UbpmpTriggerConsumerSaveRegistrationStats
0x18003F678: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18003F830: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x180037968: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800381F0: JOB_FAILURE
0x18002C480: "void __cdecl UbpmpMaintenanceEvalAllTriggersCallback(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?UbpmpMaintenanceEvalAllTriggersCallback@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x180038000: "__cdecl _guard_fids_table" __guard_fids_table
0x1800133A1: "__cdecl _tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll" __tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll
0x180037CB8: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x1800341E4: PdcActivationClientActivityRequest
0x180038B80: WPP_720455d98be6302aa7625989ae4e5a8c_Traceguids
0x180032944: WPP_SF_ddiqqi
0x180037DA8: msvcrt_NULL_THUNK_DATA
0x180037868: "__cdecl _imp_AssignProcessToJobObject" __imp_AssignProcessToJobObject
0x180027460: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SCHEDULE_BY_WEEK>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SCHEDULE_BY_WEEK const * __ptr64,struct _DAB_SCHEDULE_BY_WEEK * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SCHEDULE_BY_WEEK@@@@YAKPEAEKPEAKPEBU_DAB_SCHEDULE_BY_WEEK@@PEAPEAU0@@Z
0x18000B300: UbpmFileAccessCheck
0x180037090: "__cdecl load_config_used" _load_config_used
0x18002FDE0: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBGPEAXPEBU_GUID@@@Z
0x180013766: "__cdecl _imp_load_LsaLookupAuthenticationPackage" __imp_load_LsaLookupAuthenticationPackage
0x180024448: UbpmUtilsGetTokenGroups
0x18003AFD0: "rpcrt4.dll" ??_C@_1BG@OHPGIPDH@?$AAr?$AAp?$AAc?$AAr?$AAt?$AA4?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180037B90: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x18003ECB0: SspiCli_NULL_THUNK_DATA_DLN
0x18003F704: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180037C70: "__cdecl _imp_SetTokenInformation" __imp_SetTokenInformation
0x18003A820: "OOBETask" ??_C@_1BC@LBLKAPLM@?$AAO?$AAO?$AAB?$AAE?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x180038998: MSCHED_MAINTENANCE_STATE_CHANGED
0x18002AE70: UbpmpRestartOnFailureCallback
0x1800377C8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1800377B8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180035010: McGenEventUnregister
0x18002E680: UbpmTelemMaintenanceTaskRundown
0x180025EB0: "long __cdecl UbpmpMachineGroupPolicyChangedCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?UbpmpMachineGroupPolicyChangedCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x1800107D4: UbpmConsumerIsUnregistered
0x180042978: "__cdecl _hmod__CSystemEventsBrokerClient_dll" __hmod__CSystemEventsBrokerClient_dll
0x180037F88: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1800132A4: IsQueryActiveSessionPresent
0x180037D20: "__cdecl _imp_toupper" __imp_toupper
0x180031E14: UbpmpTaskPostStopActions
0x180031BB8: UbpmpReleaseJobBackgroundMode
0x180046140: ext-ms-win-session-usertoken-l1-1-0_NULL_THUNK_DATA_DLA
0x180037DC0: "__cdecl _imp_NtSetInformationProcess" __imp_NtSetInformationProcess
0x1800389B8: WPP_eb154886617e350fdbf2cdc7e7e389d9_Traceguids
0x180037A60: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180037EE0: "__cdecl _imp_RtlTryAcquireSRWLockShared" __imp_RtlTryAcquireSRWLockShared
0x18001302C: "__cdecl _tailMerge_timebrokerclient_dll" __tailMerge_timebrokerclient_dll
0x1800347CC: PdcPortOpen
0x1800305E8: DestroyJobObjectContext
0x1800379C8: "__cdecl _imp_RegSetKeyValueW" __imp_RegSetKeyValueW
0x180005090: "unsigned long __cdecl UbpmpLaunchExeAction(struct _UBPM_INPUT_ACTION_PARAMS * __ptr64,unsigned char * __ptr64)" ?UbpmpLaunchExeAction@@YAKPEAU_UBPM_INPUT_ACTION_PARAMS@@PEAE@Z
0x1800274D0: "unsigned long __cdecl UbpmpCopySid(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?UbpmpCopySid@@YAKPEAEKPEAKPEAXPEAPEAX@Z
0x180037750: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x18002BECC: "unsigned long __cdecl UbpmpInitializeWakeTimer(struct _UBPM_MAINTENANCE_PARAMETERS * __ptr64)" ?UbpmpInitializeWakeTimer@@YAKPEAU_UBPM_MAINTENANCE_PARAMETERS@@@Z
0x180033DD4: "public: int __cdecl DateTime::operator<=(class DateTime const & __ptr64)const __ptr64" ??NDateTime@@QEBAHAEBV0@@Z
0x18003AA08: MISSED_TASK_REJECTED
0x180025FBC: "unsigned long __cdecl UbpmpOobeStateStart(struct _UBPM_UTILS_SETUP_PARAMS * __ptr64)" ?UbpmpOobeStateStart@@YAKPEAU_UBPM_UTILS_SETUP_PARAMS@@@Z
0x1800294E4: "void __cdecl UbpmpGetActionMask(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?UbpmpGetActionMask@@YAXPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@KPEAPEAGPEA_K@Z
0x18003F2A0: profapi_NULL_THUNK_DATA_DLB
0x180037D68: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180011FB0: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@2K@Z
0x1800123B0: UbpmTriggerConsumerUnregister
0x180037888: api-ms-win-core-job-l2-1-0_NULL_THUNK_DATA
0x18000F010: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SCHEDULE_BY_DAY>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SCHEDULE_BY_DAY const * __ptr64,struct _DAB_SCHEDULE_BY_DAY * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SCHEDULE_BY_DAY@@@@YAKPEAEKPEAKPEBU_DAB_SCHEDULE_BY_DAY@@PEAPEAU0@@Z
0x18000D7A0: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_ACTION_CONSTRAINTS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_ACTION_CONSTRAINTS const * __ptr64,struct _UBPM_ACTION_CONSTRAINTS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_ACTION_CONSTRAINTS@@@@YAKPEAEKPEAKPEBU_UBPM_ACTION_CONSTRAINTS@@PEAPEAU0@@Z
0x18000D9FC: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_MAINTENANCE_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_MAINTENANCE_PARAMS const * __ptr64,struct _UBPM_MAINTENANCE_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_MAINTENANCE_PARAMS@@@@YAKPEAEKPEAKPEBU_UBPM_MAINTENANCE_PARAMS@@PEAPEAU0@@Z
0x1800273B8: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_REGISTRATION_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_REGISTRATION_TRIGGER_PARAMS const * __ptr64,struct _DAB_REGISTRATION_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_REGISTRATION_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_REGISTRATION_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180027428: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK const * __ptr64,struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK@@@@YAKPEAEKPEAKPEBU_DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK@@PEAPEAU0@@Z
0x18000DCD0: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_WNF_STATE_CHANGE_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_WNF_STATE_CHANGE_TRIGGER_PARAMS const * __ptr64,struct _DAB_WNF_STATE_CHANGE_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_WNF_STATE_CHANGE_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_WNF_STATE_CHANGE_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x1800273B8: "unsigned long __cdecl UbpmpCopyStruct<struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS const * __ptr64,struct _UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS@@@@YAKPEAEKPEAKPEBU_UBPM_ACTION_EXE_ACCESS_CHECK_PARAMS@@PEAPEAU0@@Z
0x180001350: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS const * __ptr64,struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x18000BD60: UbpmpStopHostCallback
0x180037E18: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x180038978: TASKSCHED
0x1800378A8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180037EC0: "__cdecl _imp_NtClose" __imp_NtClose
0x180001490: UbpmpSetConsumerDisabledForUser
0x1800236BC: "long __cdecl UbpmUtilsPrepareReasonContext(struct _REASON_CONTEXT * __ptr64,struct _COUNTED_REASON_CONTEXT * __ptr64 * __ptr64)" ?UbpmUtilsPrepareReasonContext@@YAJPEAU_REASON_CONTEXT@@PEAPEAU_COUNTED_REASON_CONTEXT@@@Z
0x1800301C0: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180037BB8: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x180038210: TIME_TRIGGER
0x180026E70: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_SID_INFO * __ptr64>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_SID_INFO * __ptr64 const * __ptr64,struct _DAB_SID_INFO * __ptr64 * __ptr64 * __ptr64)" ??$UbpmpCopyArray@PEAU_DAB_SID_INFO@@@@YAKPEAEKPEAKKPEBQEAU_DAB_SID_INFO@@PEAPEAPEAU0@@Z
0x180038220: TRIGGER_EMULATOR_PROVIDER_GUID
0x18002D508: "void __cdecl UbpmpUninitializeWakeTimer(void)" ?UbpmpUninitializeWakeTimer@@YAXXZ
0x1800379E0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000D720: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_BUILTIN_CLOCK_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_BUILTIN_CLOCK_TRIGGER_PARAMS const * __ptr64,struct _DAB_BUILTIN_CLOCK_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_BUILTIN_CLOCK_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_BUILTIN_CLOCK_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180027380: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_ETW_EVENT_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_ETW_EVENT_TRIGGER_PARAMS const * __ptr64,struct _DAB_ETW_EVENT_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_ETW_EVENT_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_ETW_EVENT_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180037960: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180038260: "TsRepetition" ??_C@_1BK@HMACLEEF@?$AAT?$AAs?$AAR?$AAe?$AAp?$AAe?$AAt?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003AA38: MSCHED_TASK_WAKEUP_REQUESTED
0x180037E90: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18003EB60: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll
0x1800038F0: UbpmGetInteractiveUserSidAndToken
0x180037B30: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x180001388: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS const * __ptr64,struct _DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS@@@@YAKPEAEKPEAKKPEBU_DAB_SESSION_STATE_CHANGE_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x180034B60: PdcpAlpcCallback
0x180037A48: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x180027820: UbpmTriggerConsumerPublishStateChange
0x180042290: "struct _UBPM_POWER_SUBSCRIPTION * g_PoSubscriptions" ?g_PoSubscriptions@@3PAU_UBPM_POWER_SUBSCRIPTION@@A
0x180042A48: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x180037F50: "__cdecl _imp_TpReleaseAlpcCompletion" __imp_TpReleaseAlpcCompletion
0x1800137F0: ApiSetQueryApiSetPresence
0x180037CE8: "__cdecl _imp_fclose" __imp_fclose
0x180042140: g_leConsumerListHead
0x180012A93: free
0x180042C38: "struct _UBPM_SRWLOCK g_RegSubscriptionsLock" ?g_RegSubscriptionsLock@@3U_UBPM_SRWLOCK@@A
0x180028794: WPP_SF_ddS
0x180028088: WPP_SF_Sdd
0x180003F90: "unsigned long __cdecl UbpmpHandleGroupSid(struct _UBPM_INPUT_ACTION_PARAMS * __ptr64,unsigned char * __ptr64)" ?UbpmpHandleGroupSid@@YAKPEAU_UBPM_INPUT_ACTION_PARAMS@@PEAE@Z
0x180032710: WPP_SF_Sid
0x18002AF68: UbpmpSignalImmediateTrigger
0x180010550: UbpmpConsumerCloseCallback
0x18000D680: "unsigned long __cdecl UbpmpCopyStruct<struct _DAB_TRIGGER_PARAMS>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _DAB_TRIGGER_PARAMS const * __ptr64,struct _DAB_TRIGGER_PARAMS * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_DAB_TRIGGER_PARAMS@@@@YAKPEAEKPEAKPEBU_DAB_TRIGGER_PARAMS@@PEAPEAU0@@Z
0x18002DDFC: UbpmUninitializeMaintenance
0x180033C1C: WPP_SF_dSS
0x180027FC4: WPP_SF_SSd
0x180042C58: "union _RTL_RUN_ONCE g_ioInitBrokers" ?g_ioInitBrokers@@3T_RTL_RUN_ONCE@@A
0x1800379F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180037998: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18003B2A8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18003AA78: "$" ??_C@_13PBOLBIIK@?$AA$?$AA?$AA@
0x1800100C0: UbpmAlloc
0x180023F08: UbpmOOBEStatsChanged
0x180025C74: "unsigned long __cdecl UbpmReInitializeRegistrySubscriptions(void)" ?UbpmReInitializeRegistrySubscriptions@@YAKXZ
0x180033FAC: PdcTaskClientRegister
0x180037718: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x180042E34: "unsigned char g_fBreakOnTaskhostTimeout" ?g_fBreakOnTaskhostTimeout@@3EA
0x180010178: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x180028FD8: UbpmpReleaseUpdateLockExclusive
0x18002F1D8: UbpmMaintenanceGetUrgencyLevel
0x18003A860: "EndTimeStamp" ??_C@_1BK@DGDHPBOM@?$AAE?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x180028838: WPP_SF_ddSd
0x180028114: WPP_SF_Sddd
0x18003B078: "removed from" ??_C@_1BK@HMIDEKBK@?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?$AA@
0x180012BA0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800285F4: WPP_SF_dLSd
0x18002B3D4: WPP_SF_Sidd
0x180038250: MISSED_TASK_LAUNCHED
0x180013120: "__cdecl _tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll" __tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180002070: UbpmTerminateActionsForConsumer
0x180033CEC: WPP_SF_dSSd
0x1800378C8: "__cdecl _imp_SetPriorityClass" __imp_SetPriorityClass
0x180033B48: WPP_SF_SSdL
0x18003A9A8: BOOT_TRIGGER
0x180011F84: UbpmUtilsSystemPowerOff
0x18003EB80: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usertoken_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usertoken_l1_1_0_dll
0x180011808: UbpmpAcquireJobBackgroundMode
0x18001378A: "__cdecl _imp_load_LsaFreeReturnBuffer" __imp_load_LsaFreeReturnBuffer
0x1800113DC: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,struct _GUID const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBGPEBU_GUID@@PEAX2@Z
0x1800460F0: "__cdecl _imp_LsaLookupClose" __imp_LsaLookupClose
0x18002C560: "unsigned long __cdecl UbpmpMaintenanceEvaluateTriggersForConsumer(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64)" ?UbpmpMaintenanceEvaluateTriggersForConsumer@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@@Z
0x180037CD0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180032FB8: UbpmGetInteractiveToken
0x180037758: "__cdecl _imp_RpcServerUnregisterIfEx" __imp_RpcServerUnregisterIfEx
0x180002E40: UbpmpRepetitionArrived
0x18003F740: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18003AE18: "Maintenance Elevated Level" ??_C@_1DG@PDEIIAHG@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAE?$AAl?$AAe?$AAv?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180038A00: WPP_03c2d2d1e6863df85daa69d42e9da290_Traceguids
0x1800378B8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180042CA8: "unsigned long volatile g_dwInstanceId" ?g_dwInstanceId@@3KC
0x18002FD28: "public: long __cdecl EventManager::EvtReport(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct _GUID const * __ptr64) __ptr64" ?EvtReport@EventManager@@QEAAJPEBU_EVENT_DESCRIPTOR@@PEBG1PEAXPEBU_GUID@@@Z
0x18003EC58: CSystemEventsBrokerClient_NULL_THUNK_DATA_DLN
0x180029E24: "void __cdecl UbpmpTakeAction(struct _UBPM_INPUT_ACTION_PARAMS * __ptr64,unsigned __int64 * __ptr64,unsigned char * __ptr64,unsigned short)" ?UbpmpTakeAction@@YAXPEAU_UBPM_INPUT_ACTION_PARAMS@@PEA_KPEAEG@Z
0x18003415C: PdcTaskClientUnregister
0x18000AA70: UbpmpDecrementRefAndDelete
0x180027158: "unsigned long __cdecl UbpmpCopyArray<struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long,struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK const * __ptr64,struct _DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK * __ptr64 * __ptr64)" ??$UbpmpCopyArray@U_DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK@@@@YAKPEAEKPEAKKPEBU_DAB_SCHEDULE_BY_MONTHLY_DAY_OF_WEEK@@PEAPEAU0@@Z
0x18003A9E8: NEW_INSTANCE_QUEUED
0x18003B2C8: "PdcpAlpcProcessMessage" ??_C@_0BH@NNNJKHIK@PdcpAlpcProcessMessage?$AA@
0x180042288: "struct _SYSTEMTIME const * __ptr64 const __ptr64 g_pOOBETime" ?g_pOOBETime@@3PEBU_SYSTEMTIME@@EB
0x180035CB4: Pdcv1EventWrite_ACTIVATION_CLIENT_DEACTIVATE
0x180037BD8: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180013420: "__cdecl _imp_load_UMgrFreeSessionUsers" __imp_load_UMgrFreeSessionUsers
0x180030B3C: UbpmLaunchTask
0x18003EC00: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x180037E40: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x180012170: "void __cdecl CreateDataDescriptor(struct _EVENT_DATA_DESCRIPTOR & __ptr64,unsigned short const * __ptr64)" ?CreateDataDescriptor@@YAXAEAU_EVENT_DATA_DESCRIPTOR@@PEBG@Z
0x18003B060: "added to" ??_C@_1BC@IKABPKPH@?$AAa?$AAd?$AAd?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?$AA@
0x18002A7FC: UbpmpQueueActionInstance
0x180026A78: MicrosoftTelemetryAssertTriggeredWorker
0x180037D70: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18003B038: "NOT" ??_C@_03GBFNEA@NOT?$AA@
0x18003AD10: "Automatic Maintenance WakeUp Pol" ??_C@_1EI@KPLPGKMK@?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAW?$AAa?$AAk?$AAe?$AAU?$AAp?$AA?5?$AAP?$AAo?$AAl@
0x18002F644: UbpmMaintenanceUninitializeTaskTriggers
0x180030C00: UbpmpCreateAppContainerImpersonated
0x1800460E8: "__cdecl _imp_LsaLookupTranslateSids" __imp_LsaLookupTranslateSids
0x18003B2E0: "%s: Error receiving message from" ??_C@_0CI@ONNGEIAO@?$CFs?3?5Error?5receiving?5message?5from@
0x180038E90: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1IO@JJANCKJD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180037FC0: ntdll_NULL_THUNK_DATA
0x180037D28: "__cdecl _imp_memcpy" __imp_memcpy
0x180012D82: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x1800327A4: WPP_SF_ddd
0x180029160: WPP_SF_dDd
0x180026918: WPP_SF_DDd
0x18003606C: PdcPrint
0x1800286B4: WPP_SF_dSd
0x18000D720: "unsigned long __cdecl UbpmpCopyStruct<struct _GUID>(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,struct _GUID const * __ptr64,struct _GUID * __ptr64 * __ptr64)" ??$UbpmpCopyStruct@U_GUID@@@@YAKPEAEKPEAKPEBU_GUID@@PEAPEAU0@@Z
0x180032A8C: WPP_SF_dqd
0x180037DE0: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180011ED8: UbpmpDecrementTaskRefAndDelete
0x180039000: "\Registry\Machine\Software\Micro" ??_C@_1IO@NDJEDIKP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180013395: "__cdecl _imp_load_UMgrQueryUserToken" __imp_load_UMgrQueryUserToken
0x180037CA8: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180034BC4: PdcpAlpcProcessMessage
0x180037DC8: "__cdecl _imp_EtwEventWriteTransfer" __imp_EtwEventWriteTransfer
0x180002200: UbpmUnsubscribeFromBrokerNotifications
0x18003F718: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18003286C: WPP_SF_dddd
0x180032DD4: WPP_SF_qdqd
0x180037B20: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180046128: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA
0x180007870: UbpmConstraintsCheck
0x18000B6C0: UbpmpProcessHostCommand
0x180037D40: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180037C20: api-ms-win-oobe-notification-l1-1-0_NULL_THUNK_DATA
0x180037778: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180042318: "__cdecl _security_cookie" __security_cookie
0x180037980: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18003F7A4: "__cdecl _IMPORT_DESCRIPTOR_EventAggregation" __IMPORT_DESCRIPTOR_EventAggregation
0x180012E25: "__cdecl _imp_load_PowerSettingRegisterNotification" __imp_load_PowerSettingRegisterNotification
0x18003F290: USERENV_NULL_THUNK_DATA_DLB
0x18000D510: "unsigned long __cdecl UbpmpCopyString(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?UbpmpCopyString@@YAKPEAEKPEAKPEBGPEAPEAG@Z
0x180026718: UbpmPowerSource
0x18002775C: UbpmConsumerDisable
0x180013B00: "__cdecl alloca_probe" _alloca_probe
0x1800460A0: "__cdecl _imp_CreateAppContainerProfile" __imp_CreateAppContainerProfile
0x18003AD80: "TsMaintWakeTimer" ??_C@_1CC@NALGPBHA@?$AAT?$AAs?$AAM?$AAa?$AAi?$AAn?$AAt?$AAW?$AAa?$AAk?$AAe?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
0x180042970: "__cdecl _hmod__DABAPI_dll" __hmod__DABAPI_dll
0x1800120E0: UbpmSessionStateChanged
0x180013304: "__cdecl _tailMerge_ext_ms_win_session_usertoken_l1_1_0_dll" __tailMerge_ext_ms_win_session_usertoken_l1_1_0_dll
0x1800378E8: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x180042D88: "struct _TP_CLEANUP_GROUP * __ptr64 __ptr64 g_pCleanupGroup" ?g_pCleanupGroup@@3PEAU_TP_CLEANUP_GROUP@@EA
0x180037CB0: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180037B40: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x1800383D0: ACTION_START
0x180037A30: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180037810: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180028D10: UbpmpAcquireUpdateLockExclusive
0x180046158: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x1800379D8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x180012FFC: "__cdecl _imp_load_CSebDeleteEvent" __imp_load_CSebDeleteEvent
0x180042D20: "struct _TP_POOL * __ptr64 __ptr64 g_pThreadpool" ?g_pThreadpool@@3PEAU_TP_POOL@@EA
0x180042DD0: "struct _UBPM_SRWLOCK g_MaintenancePilotLock" ?g_MaintenancePilotLock@@3U_UBPM_SRWLOCK@@A
0x180033224: UbpmpLogonTask
0x180037850: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18003F1A8: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLB
0x180037C88: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800422C0: "struct _SID_DATA * g_SidData" ?g_SidData@@3PAU_SID_DATA@@A
0x180038F20: "__cdecl _xmm@002d002d002d002d002d002d002d002d" __xmm@002d002d002d002d002d002d002d002d
0x180038F30: "__cdecl _xmm@005c005c005c005c005c005c005c005c" __xmm@005c005c005c005c005c005c005c005c
0x180034370: PdcActivationClientRegister
0x18003F650: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180034ED0: McGenControlCallbackV2
0x180042180: "struct _LIST_ENTRY g_leNonHostHardeningLinkage" ?g_leNonHostHardeningLinkage@@3U_LIST_ENTRY@@A
0x1800423C0: "unsigned long g_dwTaskhostResponseTimeoutMsec" ?g_dwTaskhostResponseTimeoutMsec@@3KA
0x18000FA20: UbpmRunNextSerializedAction
0x180037C28: "__cdecl _imp_CopySid" __imp_CopySid
0x180042D60: g_hTaskEventManager
0x180046090: "__cdecl _imp_DeriveAppContainerSidFromAppContainerName" __imp_DeriveAppContainerSidFromAppContainerName
0x18002A710: UbpmpDrainActionQueue
0x180032B6C: WPP_SF_iiddd
0x180010CD0: UBPM_MIDL_user_free
0x180046060: "__cdecl _imp_LsaConnectUntrusted" __imp_LsaConnectUntrusted
0x1800379A8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180011DE4: UbpmpTerminateActionsOnConstraint
0x1800429F0: "__cdecl _onexitbegin" __onexitbegin
0x18000B500: UbpmpConsumeHostCommandActionCallback
0x180022070: UbpmAcquireJobBackgroundMode
0x180003D70: UbpmGetUserToken
0x180037C00: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x180037970: "__cdecl _imp_QueryUnbiasedInterruptTime" __imp_QueryUnbiasedInterruptTime
0x180046050: "__cdecl _imp_LsaLookupAuthenticationPackage" __imp_LsaLookupAuthenticationPackage
0x18003A940: "orphan" ??_C@_1O@NBGKMANF@?$AAo?$AAr?$AAp?$AAh?$AAa?$AAn?$AA?$AA@
0x180002E70: "unsigned long __cdecl UbpmpScheduleRepetitions(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,struct _FILETIME * __ptr64,struct _FILETIME * __ptr64,unsigned long,void * __ptr64,void * __ptr64,struct _CBROKERED_EVENT_ID * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _CBROKERED_EVENT_ID * __ptr64,void * __ptr64 * __ptr64)" ?UbpmpScheduleRepetitions@@YAKPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@PEAU_FILETIME@@1KPEAX2PEAU_CBROKERED_EVENT_ID@@PEAPEAX434@Z
0x180013434: IsUMgrEnumerateSessionUsersPresent
0x18003AA90: "Maintenance Activator" ??_C@_1CM@OLGEMFMO@?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x18001196C: UbpmpSetJobBackgroundMode
0x180023ED0: UBPM_MIDL_user_allocate
0x180025960: UbpmpUtilsRegGetValue
0x180032BF0: WPP_SF_qL
0x180037D00: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800388D0: "__cdecl _sz_profapi_dll" __sz_profapi_dll
0x180032BF0: WPP_SF_qd
0x18003A9B8: IMMEDIATE_TRIGGER
0x180037730: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180046040: "__cdecl _imp_LsaLogonUser" __imp_LsaLogonUser
0x1800377D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18002F9F8: "unsigned long __cdecl ReportTaskEvent(void * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ReportTaskEvent@@YAKPEAXPEBU_EVENT_DESCRIPTOR@@PEBG2@Z
0x180037930: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180038B08: "TaskScheduler.log" ??_C@_0BC@GCOFDLGC@TaskScheduler?4log?$AA@
0x180024EA4: UbpmUtilsParseTimeSpan
0x18002A554: UbpmpCancelTriggerActions
0x180042A28: "struct _UBPM_UTILS_SETUP_PARAMS g_SystemSetup" ?g_SystemSetup@@3U_UBPM_UTILS_SETUP_PARAMS@@A
0x18000EC50: UbpmCreateAggEventWithConstraints
0x180009210: UbpmpHostStartStateActions
0x1800379B0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18003B308: "PdcpProcessMessageInternal" ??_C@_0BL@NLEMLGCG@PdcpProcessMessageInternal?$AA@
0x180010200: UbpmCheckAndMarkOneActiveTask
0x180042C88: g_MaintenanceLaunchLock
0x180038948: "(NONE)" ??_C@_1O@NICCHDKB@?$AA?$CI?$AAN?$AAO?$AAN?$AAE?$AA?$CJ?$AA?$AA@
0x180012AAC: "__cdecl _security_init_cookie" __security_init_cookie
0x180001D90: UbpmpTriggerConsumerUnregister
0x180025AA4: WPP_SF_q
0x180031CCC: UbpmpTaskHostTerminationCleanup
0x18000A840: UbpmUtilsSubmitThreadPoolWork
0x180042C68: "struct _CEM_LOCK g_ConsumerUpdateLock" ?g_ConsumerUpdateLock@@3U_CEM_LOCK@@A
0x18002CB70: "void __cdecl UbpmpMaintenanceRetriggerTasksCallback(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?UbpmpMaintenanceRetriggerTasksCallback@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x180038B20: "%s, (%d) " ??_C@_1BE@DDDNACGI@?$AA?$CF?$AAs?$AA?0?$AA?5?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?6?$AA?$AA@
0x18001300E: "__cdecl _imp_load_CSebCreateWellKnownEvent" __imp_load_CSebCreateWellKnownEvent
0x18002ED18: UbpmTelemMaintenanceTaskStopped
0x18000B3D0: UbpmpCreatePartiallyInitializedTaskHostContextBlock
0x180037990: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180030B7C: UbpmTerminateTask
0x180011560: UbpmUtilsThreadPoolCancelCallback
0x1800117B0: "void __cdecl UbpmpHandleLogon(unsigned long,unsigned __int64)" ?UbpmpHandleLogon@@YAXK_K@Z
0x18002CC04: "unsigned long __cdecl UbpmpMaintenanceTaskReevaluateAllTriggers(void)" ?UbpmpMaintenanceTaskReevaluateAllTriggers@@YAKXZ
0x1800345A0: PdcpActivationClientCallback
0x18003F5B0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180028A70: UbpmConsumerSnapListCopy
0x180037CE0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180037D38: "__cdecl _imp_memmove" __imp_memmove
0x180037800: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x1800263A0: UbpmInitializeGlobalMachineState
0x180037C58: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x18002EC34: UbpmTelemMaintenanceTaskStarted
0x180025170: UbpmUtilsRegOpenKey
0x1800460C0: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA_DLA
0x18003EBE0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_profapi_dll" __DELAY_IMPORT_DESCRIPTOR_profapi_dll
0x180034FD8: McGenEventRegister
0x180013020: "__cdecl _imp_load_TbCreateCEvent" __imp_load_TbCreateCEvent
0x180037F00: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x18003B380: "%s: Unable to cancel ALPC messag" ??_C@_0CJ@HGJOHFDH@?$CFs?3?5Unable?5to?5cancel?5ALPC?5messag@
0x1800382C0: "ReportTaskEvent(0x%x) --> ret=%d" ??_C@_1EC@BILEFHEM@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAT?$AAa?$AAs?$AAk?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$CI?$AA0?$AAx?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?9?$AA?9?$AA?$DO?$AA?5?$AAr?$AAe?$AAt?$AA?$DN?$AA?$CF?$AAd@
0x180037D58: "__cdecl _imp_malloc" __imp_malloc
0x180046188: "__cdecl _imp_CreateEnvBlock" __imp_CreateEnvBlock
0x180042D70: "union UBPM_INIT_STATUS g_InitializationStatus" ?g_InitializationStatus@@3TUBPM_INIT_STATUS@@A
0x180037BF8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180037F28: "__cdecl _imp_ZwAlpcCancelMessage" __imp_ZwAlpcCancelMessage
0x180023660: "int __cdecl UbpmUtilsPowerSetRequest(void * __ptr64,enum _POWER_REQUEST_TYPE_INTERNAL)" ?UbpmUtilsPowerSetRequest@@YAHPEAXW4_POWER_REQUEST_TYPE_INTERNAL@@@Z
0x18003F6B4: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180037AC8: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x180037EC8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180037F40: "__cdecl _imp_ZwAlpcDisconnectPort" __imp_ZwAlpcDisconnectPort
0x180037A10: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x180037C38: "__cdecl _imp_DuplicateToken" __imp_DuplicateToken
0x180042D78: "struct _SYSTEMTIME g_OOBETime" ?g_OOBETime@@3U_SYSTEMTIME@@A
0x180031454: UbpmpGetNoSidConsumerPrivMask
0x180010810: UbpmFree
0x180037770: RPCRT4_NULL_THUNK_DATA
0x180046010: "__cdecl _imp_CSebDeleteEvent" __imp_CSebDeleteEvent
0x180028568: WPP_SF_Siq
0x1800289CC: WPP_SF_qqS
0x180012BF0: "__cdecl _report_gsfailure" __report_gsfailure
0x18003EAA0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x180037780: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x18002B180: UbpmpTerminateAction
0x180037928: "__cdecl _imp_UpdateProcThreadAttribute" __imp_UpdateProcThreadAttribute
0x180037DB8: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x180037BC8: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x180024088: UbpmUtilsAdjustTokenDefaultDacl
0x18002B310: WPP_SF_SddiL
0x180037B58: "__cdecl _imp_CreateThreadpool" __imp_CreateThreadpool
0x180026E64: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x180006544: TaskEventTrace
0x180038968: STOPPING_ON_REQUEST
0x180037A50: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180024734: UbpmUtilsInitialize
0x180037790: "__cdecl _imp_GetTimeFormatEx" __imp_GetTimeFormatEx
0x1800016B0: UbpmpTerminateActionsOnConstraintLocked
0x180038958: LOGON_FAILURE
0x18002B7E0: UbpmInitializeConstraints
0x1800029E0: UbpmpCloseTriggerConsumer
0x1800119D8: CreateJobObjectContext
0x180046098: "__cdecl _imp_DeleteAppContainerProfile" __imp_DeleteAppContainerProfile
0x180038580: "ext-ms-win-session-wtsapi32-l1-1" ??_C@_1EG@MFPCCJEE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAt?$AAs?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180042A00: "__cdecl _native_startup_state" __native_startup_state
0x180037E78: "__cdecl _imp_NtNotifyChangeKey" __imp_NtNotifyChangeKey
0x180046118: "__cdecl _imp_UMgrEnumerateSessionUsers" __imp_UMgrEnumerateSessionUsers
0x18001352F: "__cdecl _tailMerge_userenv_dll" __tailMerge_userenv_dll
0x1800310B0: UbpmpExpandEnvironmentStrings
0x180046058: "__cdecl _imp_LsaFreeReturnBuffer" __imp_LsaFreeReturnBuffer
0x180009C30: UbpmpGetConsumerUserPropertiesKeyName
0x18003AC78: "Randomized" ??_C@_1BG@NDGBDEPN@?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAi?$AAz?$AAe?$AAd?$AA?$AA@
0x1800135AE: "__cdecl _imp_load_CreateEnvBlock" __imp_load_CreateEnvBlock
0x180001170: UbpmpUtilsAddPeriodToSystemTime
0x180042CC0: "struct _CEM_LOCK g_ConsumerListLock" ?g_ConsumerListLock@@3U_CEM_LOCK@@A
0x180046100: "__cdecl _imp_UMgrQueryUserContext" __imp_UMgrQueryUserContext
0x1800386A0: "ext-ms-win-session-winsta-l1-1-2" ??_C@_1EC@NEGKAFCC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2@
0x180038388: "DynamicInfo" ??_C@_1BI@DPKGLJMF@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x18003A7B0: "DISABLED" ??_C@_1BC@IFPGCOKD@?$AAD?$AAI?$AAS?$AAA?$AAB?$AAL?$AAE?$AAD?$AA?$AA@
0x18003AF50: "UninitializeTaskEventsLib(0x%x)" ??_C@_1EA@CMFBBHEP@?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAT?$AAa?$AAs?$AAk?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AAL?$AAi?$AAb?$AA?$CI?$AA0?$AAx?$AA?$CF?$AAx?$AA?$CJ?$AA?$AA@
0x180024008: UbpmReAlloc
0x18002D580: "void __cdecl UbpmpUnregisterPdcClient(void)" ?UbpmpUnregisterPdcClient@@YAXXZ
0x18003F6F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-1
0x180042DE0: "struct _MAINTENANCE_TRIGGER * g_MaintenanceTriggers" ?g_MaintenanceTriggers@@3PAU_MAINTENANCE_TRIGGER@@A
0x180038318: ACTION_SUCCESS
0x180023AE8: "unsigned long __cdecl UbpmpGetCriticalActionsGuids(void)" ?UbpmpGetCriticalActionsGuids@@YAKXZ
0x18002D490: "void __cdecl UbpmpUninitializeMaintenanceLevels(void)" ?UbpmpUninitializeMaintenanceLevels@@YAXXZ
0x18003EC78: DABAPI_NULL_THUNK_DATA_DLN
0x1800378D0: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x1800460C8: "__cdecl _imp_LsaLookupFreeMemory" __imp_LsaLookupFreeMemory
0x180046038: DABAPI_NULL_THUNK_DATA_DLA
0x18003F1C0: DABAPI_NULL_THUNK_DATA_DLB
0x180010680: UbpmCloseTriggerConsumer
0x180037720: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x180026340: "long __cdecl UbpmpWnfOnPreShutdownPhaseEnteredCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?UbpmpWnfOnPreShutdownPhaseEnteredCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x1800389D8: "Not removed" ??_C@_1BI@BKBLCDBO@?$AAN?$AAo?$AAt?$AA?5?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$AA@
0x180038C10: "_SA_{262E99C9-6160-4871-ACEC-4E6" ??_C@_1FG@BJMNNLDB@?$AA_?$AAS?$AAA?$AA_?$AA?$HL?$AA2?$AA6?$AA2?$AAE?$AA9?$AA9?$AAC?$AA9?$AA?9?$AA6?$AA1?$AA6?$AA0?$AA?9?$AA4?$AA8?$AA7?$AA1?$AA?9?$AAA?$AAC?$AAE?$AAC?$AA?9?$AA4?$AAE?$AA6@
0x180012EC2: "__cdecl _imp_load_DabGetLastScheduledRunTime" __imp_load_DabGetLastScheduledRunTime
0x180042C18: "struct _UBPM_SPECIAL_TASK_CLASS g_OOBEExemptedTasks" ?g_OOBEExemptedTasks@@3U_UBPM_SPECIAL_TASK_CLASS@@A
0x180038530: "__cdecl _sz_DABAPI_dll" __sz_DABAPI_dll
0x18002BB4C: WPP_SF_SSLdd
0x180037C60: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x18003AC20: "Automatic Maintenance Activation" ??_C@_1FE@KCBDHHI@?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAA?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn@
0x1800262B0: "void __cdecl UbpmpUserOOBECompletedCallback(void * __ptr64)" ?UbpmpUserOOBECompletedCallback@@YAXPEAX@Z
0x18002E12C: UbpmpMaintenanceTaskCompletedWithinTimePeriod
0x180028348: WPP_SF_SddiLdq
0x180037ED0: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x180026974: WPP_SF__guid_d
0x180038C88: "Negotiate" ??_C@_09OBFLGEDM@Negotiate?$AA@
0x18003F790: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800376F0: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180032690: WPP_SF_Si
0x180030844: UbpmForceTerminateTaskHosts
0x180038B60: "start" ??_C@_1M@JGKKHEFC@?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180027F4C: WPP_SF_SL
0x18002340C: WPP_SF_Sd
0x180037D60: "__cdecl _imp_free" __imp_free
0x180004560: UbpmpTriggerArrived
0x180012A00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180037AC0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180012064: "void __cdecl SubmitPostTaskHostDeadCallback(struct _GUID const * __ptr64,unsigned long,unsigned long)" ?SubmitPostTaskHostDeadCallback@@YAXPEBU_GUID@@KK@Z
0x180011CD0: UbpmpRepetitionsStopped
0x180013523: "__cdecl _imp_load_CreateAppContainerProfile" __imp_load_CreateAppContainerProfile
0x180023360: WPP_SF_SS
0x180001608: UbpmpGetConsumerFriendlyName
0x180023604: "int __cdecl UbpmUtilsPowerClearRequest(void * __ptr64,enum _POWER_REQUEST_TYPE_INTERNAL)" ?UbpmUtilsPowerClearRequest@@YAHPEAXW4_POWER_REQUEST_TYPE_INTERNAL@@@Z
0x18003F63C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x18000DEE0: UbpmpValidateConsumerParameters
0x180037908: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18003514C: McTemplateU0qqzr1qzr3qqqqpqqzr11
0x1800251E0: UbpmUtilsRemoveProcessPrivileges
0x180037A88: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000FC20: UbpmpCreateTaskHostContextBlock
0x18003F600: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180004590: "void __cdecl UbpmpHandleTriggerArrived(struct _UBPM_TRIGGER_CONSUMER_BLOCK * __ptr64,void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,unsigned long,unsigned char)" ?UbpmpHandleTriggerArrived@@YAXPEAU_UBPM_TRIGGER_CONSUMER_BLOCK@@PEAXU_CBROKERED_EVENT_ID@@1KE@Z
0x1800067C0: "unsigned long __cdecl UbpmpLaunchAction(unsigned short const * __ptr64,struct _UBPM_ACTION_EXE_LAUNCH_PARAMS * __ptr64,void * __ptr64 * __ptr64,void * __ptr64,unsigned short const * __ptr64,int,int,int,void * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct HKEY__ * __ptr64 * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64 * __ptr64,unsigned __int64 * __ptr64,struct _UBPM_TASK_HOST_APPCONTAINER_CONTEXT * __ptr64 * __ptr64)" ?UbpmpLaunchAction@@YAKPEBGPEAU_UBPM_ACTION_EXE_LAUNCH_PARAMS@@PEAPEAXPEAX0HHH30K02PEAK222PEAPEAUHKEY__@@24PEAPEAPEAXPEA_KPEAPEAU_UBPM_TASK_HOST_APPCONTAINER_CONTEXT@@@Z
0x180012270: UbpmpStopAllConsumerActions
0x180038820: "ext-ms-win-session-usermgr-l1-1-" ??_C@_1EE@HAOPKKMN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x180023300: WPP_SF_S
0x18003F260: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLB
0x18003A9F8: NO_START_ON_WORKER_SESSION
0x180010E00: "void __cdecl UbpmpMaintenanceTriggersStartCallback(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?UbpmpMaintenanceTriggersStartCallback@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x180013ABE: memset
0x18003F86C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800384B0: "taskhostw.exe" ??_C@_1BM@HMICNMLB@?$AAt?$AAa?$AAs?$AAk?$AAh?$AAo?$AAs?$AAt?$AAw?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180038740: "__cdecl _sz_ext_ms_win_session_winsta_l1_1_0_dll" __sz_ext_ms_win_session_winsta_l1_1_0_dll
0x180042C10: "struct _UBPM_SPECIAL_TASK_CLASS g_CriticalTasks" ?g_CriticalTasks@@3U_UBPM_SPECIAL_TASK_CLASS@@A
0x1800460A8: USERENV_NULL_THUNK_DATA_DLA

[JEB Decompiler by PNF Software]