Generated by JEB on 2019/08/01

PE: C:\Windows\System32\virtdisk.dll Base=0x180000000 SHA-256=BF41FA4EB9DFA6302334897643605499A8904A80DE9D1C31AD19807C0E9366F1
PDB: VirtDisk.pdb GUID={39C4F837-95DB-3C30-5E1DE79BB4AA6A27} Age=1

317 located named symbols:
0x18000B2A8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800015F4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000B180: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000B2D8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800018C0: "__cdecl FindPESection" _FindPESection
0x180009514: StringCchCatW
0x18000B770: VIRTDISK_GPT_PARTITION_TYPE_LDMMETA
0x18000B4F0: VirtdiskOpenStop
0x18000902C: OpenPathForRsvd
0x18000C87C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000C78C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x180008260: DetachVirtualDisk
0x18000E070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000B1A8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000B630: WPP_31c5d9b122983e4ba462da21223da735_Traceguids
0x1800010EC: "__cdecl CRT_INIT" _CRT_INIT
0x18000B620: VirtdiskAttachStart
0x18000B1E0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000B910: "\\.\VDRVROOT" ??_C@_1BK@GELMEFCC@?$AA?2?$AA?2?$AA?4?$AA?2?$AAV?$AAD?$AAR?$AAV?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000B390: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180002720: WppControlCallback
0x180002060: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180006000: ExpandVirtualDisk
0x18000B168: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000B730: "\\.\CDROM%d" ??_C@_1BI@COFABJP@?$AA?2?$AA?2?$AA?4?$AA?2?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$CF?$AAd?$AA?$AA@
0x18000B190: api-ms-win-core-file-l2-1-2_NULL_THUNK_DATA
0x1800083D4: CheckRsvdSupport
0x18000B830: "\\.\CDROM%u" ??_C@_1BI@OKEADBGF@?$AA?2?$AA?2?$AA?4?$AA?2?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$CF?$AAu?$AA?$AA@
0x180006DF0: GetVirtualDiskOperationProgress
0x180005DB0: BreakMirrorVirtualDisk
0x180007F70: AttachVirtualDisk
0x18000C73C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000C700: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180008D68: GetFinalFilePath
0x18000B5F0: VirtdiskDetachStart
0x1800027A8: WppInitUm
0x1800087B4: ConvertVhdxToVhdSetRsvd
0x18000B408: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000C7A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2
0x18000B7D0: WPP_59605b27a96e3fed0d9be154a4afa203_Traceguids
0x18000B308: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x1800018A5: "__cdecl XcptFilter" _XcptFilter
0x18000B300: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x18000B410: "__cdecl _xc_a" __xc_a
0x180008AEC: FindVirtualDiskShimForFile
0x180002510: StringCbCopyW
0x180001BC0: ForkVirtualDisk
0x180004860: GetAllAttachedVirtualDiskPhysicalPaths
0x18000B5E0: VirtdiskAttachStop
0x18000B3A8: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x18000B8A8: "\Device\CSVVolume" ??_C@_1CE@PBMJKGAF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAS?$AAV?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x180005CE0: ApplySnapshotVhdSet
0x180009DD0: WPP_SF_ZDdd
0x18000B160: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x1800052A0: GetVirtualDiskPhysicalPath
0x180002039: memcpy
0x180009A8C: WPP_SF_DdZZ
0x180009F00: DeleteVirtualDiskMetadata
0x1800056F0: ReadRawDataFromVirtualDisk
0x18000B2E0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000B380: "__cdecl _imp_memset" __imp_memset
0x18000B260: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180001A7F: "__cdecl initterm" _initterm
0x18000B2C0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000B3C8: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x18000C7F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000E620: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000B1B0: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x18000B270: "__cdecl _imp_Sleep" __imp_Sleep
0x18000B430: "__cdecl _xi_z" __xi_z
0x18000B280: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x18000B140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001A8B: "__cdecl _C_specific_handler" __C_specific_handler
0x18000B610: VirtdiskDetachStop
0x18000E630: WPP_REGISTRATION_GUIDS
0x180008DE8: GetFinalFilePathWithHandle
0x18000B1A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000B6E8: "failed to validate parent " ??_C@_0BL@PIBDHOFJ@failed?5to?5validate?5parent?6?$AA@
0x180001FD8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000B3B8: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x18000A170: SetVirtualDiskMetadata
0x180009F80: EnumerateVirtualDiskMetadata
0x18000A060: GetVirtualDiskMetadata
0x18000B500: VirtdiskOpenStart
0x180006F90: GetStorageDependencyInformation
0x18000B3F0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000B258: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000E640: WPP_MAIN_CB
0x18000946C: RevertManageVolumePrivilege
0x18000B7A0: WPP_f7f32b953a053f88defcf486f253e399_Traceguids
0x18000C7B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1800018B1: "__cdecl amsg_exit" _amsg_exit
0x18000E66C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUenUweUhgliztvUeswUerigwrhpUlyquivUznwGEUkivxlnkOlyq@VirtDisk" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUenUweUhgliztvUeswUerigwrhpUlyquivUznwGEUkivxlnkOlyq@VirtDisk
0x18000B8D0: "\\?\GLOBALROOT" ??_C@_1BO@NLDNEEHD@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180005540: QueryChangesVirtualDisk
0x18000A268: ClusKRTLParseFileName
0x18000B2C8: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000B900: WPP_6428f2296e3f3d1e04920135765db71d_Traceguids
0x18000B318: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x18000B150: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000B2B0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000B1C8: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x1800077E8: IssueQueryStorageDependencyForDisk
0x180006250: MirrorVirtualDisk
0x18000B1F0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800065B0: ResizeVirtualDisk
0x18000E610: "__cdecl _native_startup_lock" __native_startup_lock
0x18000B7F0: "\Device\Mup" ??_C@_1BI@GOOABFBJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAM?$AAu?$AAp?$AA?$AA@
0x180001AB8: DllMain
0x18000B520: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x18000C7C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180006A24: OpenVirtualDiskInternal
0x18000B360: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000B238: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000B1D8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C714: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000B158: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x18000B138: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000B2F0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000E060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001FB4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000E010: VIRTDISK_PROVIDER_ID_Context
0x1800023A0: AddVirtualDiskParent
0x18000B3C0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x18000B548: WPP_5f84003be0f137affb0e9eba21b4203c_Traceguids
0x18000B528: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000B1F8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180005E10: CompactVirtualDisk
0x18000B368: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x180001970: "__cdecl ValidateImageBase" _ValidateImageBase
0x180009D38: WPP_SF_ZD
0x18000B178: "__cdecl _imp_GetFinalPathNameByHandleW" __imp_GetFinalPathNameByHandleW
0x18000B3B0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000B538: WPP_d56e3470d6233e5ab077197694ef868f_Traceguids
0x18000C728: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180009CBC: WPP_SF_Z
0x180004168: WPP_SF_
0x18000B660: "vhds" ??_C@_19OMDJLGG@?$AAv?$AAh?$AAd?$AAs?$AA?$AA@
0x180004A94: GetNtDiskNumber
0x18000B250: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180001330: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B330: "__cdecl _imp__initterm" __imp__initterm
0x18000B1C0: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x18000E668: Microsoft_Windows_VIRTDISKEnableBits
0x180007B18: QueryStorageDependencyForDiskLevel2
0x180007A30: QueryStorageDependencyForDiskLevel1
0x18000B780: VIRTDISK_GPT_PARTITION_TYPE_EMPTY
0x18000B600: GUID_DEVINTERFACE_SURFACE_VIRTUAL_DRIVE
0x18000B320: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x180007EEC: StringCchPrintfW
0x18000E600: "__cdecl _onexitend" __onexitend
0x18000B3E8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x18000B2F8: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x1800095EC: TryEnableManageVolumePrivilege
0x180005F50: DeleteSnapshotVhdSet
0x18000B400: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000B1E8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000B3A0: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1800060F0: MergeVirtualDisk
0x18000B398: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000B790: WPP_0ecff169bb5a3659eca6f22185895127_Traceguids
0x18000B848: "\Device\" ??_C@_1BC@IDABLMPM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$AA@
0x18000B298: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000B420: "__cdecl _xi_a" __xi_a
0x18000B288: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000C818: "__cdecl _IMPORT_DESCRIPTOR_FLTLIB" __IMPORT_DESCRIPTOR_FLTLIB
0x18000B328: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000853C: CheckRsvdSupportHandle
0x180002E90: CreateVirtualDisk
0x18000B6D8: VIRTUAL_STORAGE_TYPE_VENDOR_MICROSOFT
0x180001D84: McGenEventWrite
0x18000E000: WPP_GLOBAL_Control
0x18000B510: VIRTDISK_PROVIDER_ID
0x18000C82C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000B7B0: "ClusteredApplicationInstance" ??_C@_0BN@JFJIAOAH@ClusteredApplicationInstance?$AA@
0x18000259C: WPP_SF_d
0x1800017A8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000E628: "__cdecl pRawDllMain" _pRawDllMain
0x18000B760: "EFI PART" ??_C@_08BOGKMBPC@EFI?5PART?$AA@
0x1800015D0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000B418: "__cdecl _xc_z" __xc_z
0x18000B210: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000410C: ValidateDifferencingRequestedSize
0x18000B640: WPP_ThisDir_CTLGUID_VirtDiskTraceGuid
0x180001010: WppCleanupUm
0x18000B1B8: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x18000B290: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000B120: FLTLIB_NULL_THUNK_DATA
0x180007928: QueryStorageDependencyForDisk
0x1800028E4: CreateVhdSetRsvd
0x18000A1FC: ClusKRTLFindCharReverse
0x18000B248: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000B118: "__cdecl _imp_FilterGetDosName" __imp_FilterGetDosName
0x18000B3E0: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x180003BC8: GetBackingFilePath
0x18000C804: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000B220: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800068A0: OpenVirtualDisk
0x18000B188: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x18000B438: "__cdecl _guard_fids_table" __guard_fids_table
0x18000B388: msvcrt_NULL_THUNK_DATA
0x18000B010: "__cdecl load_config_used" _load_config_used
0x180004EE4: GetVirtualDiskInformationFromDriver
0x180001070: McGenEventUnregister
0x18000C764: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000B370: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000B1D0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000B3D0: "__cdecl _imp_NtClose" __imp_NtClose
0x18000B240: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000B218: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180006710: ResizeVirtualDiskInternal
0x180004DB0: GetVirtualDiskInformation
0x180009170: RawSCSIVirtualDisk
0x180005960: SetVirtualDiskInformation
0x1800042D4: WPP_SF_SSd
0x18000B228: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800089BC: DeleteVhdSetSnapshotRsvd
0x180001AA0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000B338: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180004054: ValidateDifferencingCreateParameters
0x180009988: WPP_SF_DdSZ
0x180004394: WPP_SF_SZdd
0x180004C54: GetParentVhdFileName
0x180004518: ComputeSmallestSafeVirtualSize
0x1800075B4: GetVolumeNameFromNtVolumeName
0x18000B5B8: Microsoft_Windows_VIRTDISKKeywords
0x18000C778: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000B7E0: WPP_a486ec9964c535b3407254a4e2108b39_Traceguids
0x18000B650: ".avhdx" ??_C@_1O@FOPLAAOJ@?$AA?4?$AAa?$AAv?$AAh?$AAd?$AAx?$AA?$AA@
0x18000B708: "\\.\PHYSICALDRIVE%d" ??_C@_1CI@MICBCFCJ@?$AA?2?$AA?2?$AA?4?$AA?2?$AAP?$AAH?$AAY?$AAS?$AAI?$AAC?$AAA?$AAL?$AAD?$AAR?$AAI?$AAV?$AAE?$AA?$CF?$AAd?$AA?$AA@
0x18000B2D0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000B340: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000B3F8: ntdll_NULL_THUNK_DATA
0x18000B378: "__cdecl _imp_memcpy" __imp_memcpy
0x180009B98: WPP_SF_Ddd
0x18000B808: "\\.\PHYSICALDRIVE%u" ??_C@_1CI@CAIEBFND@?$AA?2?$AA?2?$AA?4?$AA?2?$AAP?$AAH?$AAY?$AAS?$AAI?$AAC?$AAA?$AAL?$AAD?$AAR?$AAI?$AAV?$AAE?$AA?$CF?$AAu?$AA?$AA@
0x18000B670: "_%08lx-%04x-%04x-%02x%02x-%02x%0" ??_C@_1GI@HACGJFKG@?$AA_?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA4?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?9?$AA?$CF?$AA0?$AA2?$AAx?$AA?$CF?$AA0@
0x18000B5D8: Microsoft_Windows_VIRTDISKLevels
0x18000B2A0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000C840: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000B2B8: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18000E068: "__cdecl _security_cookie" __security_cookie
0x180005C54: StringCbPrintfW
0x18000B888: "\Device\CdRom" ??_C@_1BM@GJGIAIIP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAC?$AAd?$AAR?$AAo?$AAm?$AA?$AA@
0x18000B198: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000B230: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x18000C750: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800025E0: McGenControlCallbackV2
0x180003B54: GenerateUniqueID
0x1800067A0: TakeSnapshotVhdSet
0x18000E608: "__cdecl _onexitbegin" __onexitbegin
0x18000B310: "__cdecl _imp_ImpersonateSelf" __imp_ImpersonateSelf
0x180008F10: IssueSynchronousDeviceIoControl
0x18000B358: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000B3D8: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x18000B148: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000B208: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000B748: "\\.\VHDMP\\" ??_C@_1BI@KNLCEDKG@?$AA?2?$AA?2?$AA?4?$AA?2?$AAV?$AAH?$AAD?$AAM?$AAP?$AA?2?$AA?2?$AA?$AA@
0x1800019A4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000B930: ":SharedVirtualDisk" ??_C@_1CG@JBBNPFJM@?$AA?3?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
0x18000C6EC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800026E8: McGenEventRegister
0x180003F5C: SetSparseAttribute
0x18000B350: "__cdecl _imp_malloc" __imp_malloc
0x18000B2E8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800096F8: ValidateFile
0x18000C7DC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000B170: "__cdecl _imp_GetFileTime" __imp_GetFileTime
0x18000418C: WPP_SF_SDq
0x18000B130: RPCRT4_NULL_THUNK_DATA
0x18000B860: "\Device\Harddisk" ??_C@_1CC@PFKCPBG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AA?$AA@
0x180001630: "__cdecl _report_gsfailure" __report_gsfailure
0x180001B60: CompleteForkVirtualDisk
0x180001E5C: McTemplateU0zq
0x18000E618: "__cdecl _native_startup_state" __native_startup_state
0x180001DE0: McTemplateU0pq
0x180006420: ModifyVhdSet
0x180002828: CreateTargetFile
0x18000B200: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000B128: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x180003FEC: StringCchLengthW
0x18000C868: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004494: WPP_SF_Sd
0x18000B348: "__cdecl _imp_free" __imp_free
0x180009BF8: WPP_SF_SZ
0x180001910: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000B278: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180004228: WPP_SF_SS
0x180009900: WPP_SF_D_guid_dd
0x180008628: ConstructRsvdPathToFile
0x180009E90: WPP_SF__guid_dd
0x18000B268: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000C854: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001F58: McTemplateU0q
0x180001EFC: McTemplateU0p
0x180002045: memset
0x18000C890: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000B8F0: WPP_e5ca406c98153611cd4b5752d3ebaa3c_Traceguids

[JEB Decompiler by PNF Software]