Generated by JEB on 2019/08/01

PE: C:\Windows\System32\services.exe Base=0x140000000 SHA-256=BF74B5707C2F035DA0A348658A60E22C32D0F57340826FC4EFCBA3B41EA9C8F3
PDB: services.pdb GUID={B1A25E26-DD98-6ECA-920AC2445A9EF5DF} Age=1

3848 located named symbols:
0x14007E588: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x1400126D0: "unsigned long __cdecl ScAllocateAndReadConfigValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScAllocateAndReadConfigValue@@YAKPEAUHKEY__@@PEBGPEAPEAGPEAK@Z
0x140092BAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_authz_context_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_authz_context_l1_1_0_dll
0x140098E48: "__cdecl _hmod__ext_ms_win_core_resourcemanager_l1_1_0_dll" __hmod__ext_ms_win_core_resourcemanager_l1_1_0_dll
0x140018F70: "int __cdecl ScCheckForUserServiceClaim(void * __ptr64)" ?ScCheckForUserServiceClaim@@YAHPEAX@Z
0x1400A0020: "__cdecl _imp_DabRegisterTriggerConsumer" __imp_DabRegisterTriggerConsumer
0x14007DFC8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x140082900: "SeProfileSingleProcessPrivilege" ??_C@_1EA@EDIGMFBC@?$AAS?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14001AB64: ?EnsureCoalescedTimer_SetTimer@details@wil@@YAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@2@AEA_N_J@Z
0x14007F5E0: "List" ??_C@_19DOLMIDJD@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x14007F060: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14001BD60: "public: virtual void * __ptr64 __cdecl CWin32UserServiceRecord::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32UserServiceRecord@@UEAAPEAXI@Z
0x1400992C8: LpacServicesManagementCapabilitySid
0x140098ED0: "__cdecl _hmod__api_ms_win_service_core_l1_1_1_dll" __hmod__api_ms_win_service_core_l1_1_1_dll
0x1400A01E0: "__cdecl _imp_RmAcquireResourceSetEx" __imp_RmAcquireResourceSetEx
0x140080E50: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x140080918: "ServiceSidType" ??_C@_1BO@OPMMDHOC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAi?$AAd?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1400824A8: "SeCreateSymbolicLinkPrivilege" ??_C@_1DM@MMDBEHJC@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140080730: "System\CurrentControlSet\Control" ??_C@_1FG@IFLNGGCH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140099BC8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x1400A0208: "__cdecl _imp_SecpTranslateName" __imp_SecpTranslateName
0x140089C18: WPP_5043e7b9758a3a3dcadab5a9b4d04a97_Traceguids
0x140089A88: "Global\SC_STAGED_BOOT_DONE" ??_C@_1DG@IHFEKALA@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAS?$AAT?$AAA?$AAG?$AAE?$AAD?$AA_?$AAB?$AAO?$AAO?$AAT?$AA_?$AAD?$AAO?$AAN?$AAE?$AA?$AA@
0x14002FA04: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002E8C: "public: bool __cdecl wil::details_abi::heap_buffer::push_back(void const * __ptr64,unsigned __int64) __ptr64" ?push_back@heap_buffer@details_abi@wil@@QEAA_NPEBX_K@Z
0x14007DE90: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x1400723B0: "public: unsigned long __cdecl WdfTransientDevStateMgr::AddDevice(unsigned short * __ptr64) __ptr64" ?AddDevice@WdfTransientDevStateMgr@@QEAAKPEAG@Z
0x14007E068: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x14001AFB0: "public: virtual unsigned short * __ptr64 __cdecl CWin32UserServiceRecord::GetTemplateServiceName(void) __ptr64" ?GetTemplateServiceName@CWin32UserServiceRecord@@UEAAPEAGXZ
0x1400898A8: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x14008A028: "DefaultAuditMask" ??_C@_1CC@CEIKCBHK@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAu?$AAd?$AAi?$AAt?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x140022640: RSetServiceObjectSecurity
0x14007DA48: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140030574: "__cdecl _imp_load_RmConnectToResourceManager" __imp_load_RmConnectToResourceManager
0x14000E990: RQueryUserServiceName
0x140098200: "struct HKEY__ * __ptr64 __ptr64 g_hServicesKey" ?g_hServicesKey@@3PEAUHKEY__@@EA
0x14007DFC0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x14007F3B8: "%s_%I64x" ??_C@_1BC@DGJGIGFF@?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x140051EF8: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x14006D134: ScExtpPollServiceState
0x140057CC0: "unsigned long __cdecl ScReadPreshutdownTimeout(unsigned short * __ptr64,unsigned long * __ptr64)" ?ScReadPreshutdownTimeout@@YAKPEAGPEAK@Z
0x14007E258: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x140093E34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0
0x140080990: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x1400312E0: "[thunk]:private: virtual void * __ptr64 __cdecl DrvMgrLpcNotification::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_EDrvMgrLpcNotification@@G7EAAPEAXI@Z
0x140099D38: "unsigned short * __ptr64 __ptr64 g_DriverPersistentRegistryRoot" ?g_DriverPersistentRegistryRoot@@3REAGEA
0x14006FB78: "public: unsigned char __cdecl WdfDriverManager::SetRdProcessId(void * __ptr64,struct _GUID const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,struct DEBUG_MODE_FLAGS,enum _WUDF_SERVICE_TYPE) __ptr64" ?SetRdProcessId@WdfDriverManager@@QEAAEPEAXPEBU_GUID@@PEBG2222KUDEBUG_MODE_FLAGS@@W4_WUDF_SERVICE_TYPE@@@Z
0x14007B4A8: "const CWin32UserServiceRecord::`vftable'" ??_7CWin32UserServiceRecord@@6B@
0x140028D64: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToUsageFlush(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64)) __ptr64" ?SubscribeToUsageFlush@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z@Z
0x140003318: "public: void __cdecl wil::details_abi::RawUsageIndex::Swap(class wil::details_abi::RawUsageIndex & __ptr64) __ptr64" ?Swap@RawUsageIndex@details_abi@wil@@QEAAXAEAV123@@Z
0x14007D5E0: "const WdfProcess::`vftable'" ??_7WdfProcess@@6B@
0x14002F294: "int __cdecl ScAllowInteractiveServices(void)" ?ScAllowInteractiveServices@@YAHXZ
0x14002EC0C: "void __cdecl wil::details::ReleaseMutex(void * __ptr64)" ?ReleaseMutex@details@wil@@YAXPEAX@Z
0x14007E030: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x14001FC48: ScIsValidTriggerType
0x14007D9A8: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x140023354: "public: unsigned long __cdecl CDelayStartContext::GetAutostartDelay(void) __ptr64" ?GetAutostartDelay@CDelayStartContext@@QEAAKXZ
0x14001B060: "unsigned char __cdecl ScIsArcName(unsigned short * __ptr64)" ?ScIsArcName@@YAEPEAG@Z
0x14008AB88: "MarkForDelete not called" ??_C@_0BJ@LOLHINNK@MarkForDelete?5not?5called?$AA@
0x140012190: "unsigned long __cdecl ScRegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?ScRegOpenKeyExW@@YAKPEAUHKEY__@@PEBGKKPEAPEAU1@@Z
0x140010250: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x14007E0A8: "__cdecl _imp_AddAce" __imp_AddAce
0x140099A60: "int g_fScNotificationMgmtInited" ?g_fScNotificationMgmtInited@@3HA
0x14002D760: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x14007E5C0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x14007DCE0: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x1400994F0: "class CServiceDatabase ServiceDatabase" ?ServiceDatabase@@3VCServiceDatabase@@A
0x140093D58: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140089908: "DisableServiceStartupMonitor" ??_C@_1DK@KANACFNA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?$AA@
0x14007E4A8: "__cdecl _imp_NtQueryDirectoryObject" __imp_NtQueryDirectoryObject
0x140061F38: "unsigned long __cdecl ScDeleteStartName(struct HKEY__ * __ptr64)" ?ScDeleteStartName@@YAKPEAUHKEY__@@@Z
0x14007E1F0: "__cdecl _imp_RtlDeriveCapabilitySidsFromName" __imp_RtlDeriveCapabilitySidsFromName
0x1400829D8: "SeTakeOwnershipPrivilege" ??_C@_1DC@DAFGHJAD@?$AAS?$AAe?$AAT?$AAa?$AAk?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140064E18: WPP_SF_SdDdS
0x14006A438: WPP_SF_SDSDD
0x140030F50: "__cdecl _imp_load_WaitServiceState" __imp_load_WaitServiceState
0x14000B5E0: wcsistr
0x14000FE40: "protected: virtual unsigned long __cdecl CDriverRecord::GetStatusInternal(struct _SERVICE_STATUS * __ptr64) __ptr64" ?GetStatusInternal@CDriverRecord@@MEAAKPEAU_SERVICE_STATUS@@@Z
0x1400A0228: "__cdecl _imp_UMgrQueryUserToken" __imp_UMgrQueryUserToken
0x14001845C: "unsigned long __cdecl ScValidateDisplayName(unsigned short * __ptr64,class CServiceRecord * __ptr64)" ?ScValidateDisplayName@@YAKPEAGPEAVCServiceRecord@@@Z
0x140099A78: WriteRestrictedSid
0x14005C174: "protected: void __cdecl CWin32ServiceRecord::ResetFailureCount(void) __ptr64" ?ResetFailureCount@CWin32ServiceRecord@@IEAAXXZ
0x14007EF90: "WOW64" ??_C@_1M@FBPBKHKH@?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
0x140098F50: "unsigned long g_ServiceStartTimeout" ?g_ServiceStartTimeout@@3KA
0x1400997D0: "struct _RTL_SRWLOCK g_TriggerActionLock" ?g_TriggerActionLock@@3U_RTL_SRWLOCK@@A
0x140080358: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x140001C20: "enum FEATURE_ENABLED_STATE __cdecl wil::details::WilApiImpl_GetFeatureEnabledState(unsigned int,enum FEATURE_CHANGE_TIME)" ?WilApiImpl_GetFeatureEnabledState@details@wil@@YA?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@Z
0x1400851B0: "{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxx" ??_C@_1EO@GLGGILOH@?$AA?$HL?$AAx?$AAx?$AAx?$AAx?$AAx?$AAx?$AAx?$AAx?$AA?9?$AAx?$AAx?$AAx?$AAx?$AA?9?$AAx?$AAx?$AAx?$AAx?$AA?9?$AAx?$AAx?$AAx?$AAx?$AA?9?$AAx?$AAx?$AAx?$AAx?$AAx?$AAx?$AAx@
0x140064978: WPP_SF_SSSdD
0x140064AA4: WPP_SF_SSSdd
0x14001AED0: "__cdecl wsetargv" _wsetargv
0x1400801E8: "referencing deleted object" ??_C@_0BL@PAFPOIIF@referencing?5deleted?5object?$AA@
0x14007DF38: "__cdecl _imp_IsWow64Process2" __imp_IsWow64Process2
0x14002FEA8: "__cdecl _tailMerge_ext_ms_win_authz_context_l1_1_0_dll" __tailMerge_ext_ms_win_authz_context_l1_1_0_dll
0x140015E2C: ScValidatePnPService
0x14001CA58: "void __cdecl ScDeleteRegTree(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScDeleteRegTree@@YAXPEAUHKEY__@@0PEAG@Z
0x14007EF40: SCMEvt_StartingGroup_Start
0x14006AB70: "public: virtual void * __ptr64 __cdecl CUmdfDriverRecord::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUmdfDriverRecord@@UEAAPEAXI@Z
0x14008B5E0: "-NonStateChangingEventPortName:" ??_C@_1EA@JNDDIGJD@?$AA?9?$AAN?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAi?$AAn?$AAg?$AAE?$AAv?$AAe?$AAn?$AAt?$AAP?$AAo?$AAr?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x140089508: WPP_d1dd399b46853e9375741a69820b57ff_Traceguids
0x140098F28: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x14007DF20: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x1400A0230: "__cdecl _imp_UMgrQueryDefaultAccountToken" __imp_UMgrQueryDefaultAccountToken
0x1400A02B8: "__cdecl _imp_DestroyEnvBlock" __imp_DestroyEnvBlock
0x14007DF50: "__cdecl _imp_CM_Setup_DevNode" __imp_CM_Setup_DevNode
0x140089258: "periodic" ??_C@_08IDKCFBMI@periodic?$AA@
0x1400981D8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140093C68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-realtime-l1-1-0
0x14007F6F8: "RpcOverTcpKeepAliveTimes" ??_C@_1DC@HEPPOKKG@?$AAR?$AAp?$AAc?$AAO?$AAv?$AAe?$AAr?$AAT?$AAc?$AAp?$AAK?$AAe?$AAe?$AAp?$AAA?$AAl?$AAi?$AAv?$AAe?$AAT?$AAi?$AAm?$AAe?$AAs?$AA?$AA@
0x14001D4C8: "unsigned long __cdecl ScLastGoodFileCleanup(void)" ?ScLastGoodFileCleanup@@YAKXZ
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::SetPreferredNode(unsigned short) __ptr64" ?SetPreferredNode@CServiceRecord@@UEAAXG@Z
0x140016EEC: "public: unsigned short * __ptr64 __cdecl CServiceRecord::GetJITReadDisplayName(void) __ptr64" ?GetJITReadDisplayName@CServiceRecord@@QEAAPEAGXZ
0x14008B858: "%s POOL: %s" ??_C@_1BI@DMNLNJEN@?$AA?$CF?$AAs?$AA?5?$AAP?$AAO?$AAO?$AAL?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x140082828: "SeBackupPrivilege" ??_C@_1CE@MBNFGOEN@?$AAS?$AAe?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14005DB94: WPP_SF_Ll
0x140053D5C: WPP_SF_LL
0x14008A1B8: "DSREPAIR" ??_C@_1BC@LDIFPMCE@?$AAD?$AAS?$AAR?$AAE?$AAP?$AAA?$AAI?$AAR?$AA?$AA@
0x140089C50: DEVPKEY_Device_DriverInfSection
0x14005F71C: "void __cdecl ScGetUniqueTag(unsigned short * __ptr64,unsigned long * __ptr64)" ?ScGetUniqueTag@@YAXPEAGPEAK@Z
0x14000FAC0: RQueryServiceConfigEx
0x14007DAA8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x140070740: WPP_SF_ld
0x140053D5C: WPP_SF_Ld
0x1400809A0: "WilStaging_02" ??_C@_0O@BKMDNGIM@WilStaging_02?$AA@
0x140008A7C: "void __cdecl ScInitStartTimeout(void)" ?ScInitStartTimeout@@YAXXZ
0x14008AB78: "failed" ??_C@_1O@KPGHAGDD@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140099B00: AliasPrintOpsSid
0x1400603E0: SC_RPC_LOCK_rundown
0x14002F600: "int __cdecl ScIsValidAccountName(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?ScIsValidAccountName@@YAHPEBG0PEAH@Z
0x14000523C: "public: long __cdecl CWin32ServiceRecord::DeactivateServiceRecord(void) __ptr64" ?DeactivateServiceRecord@CWin32ServiceRecord@@QEAAJXZ
0x14007F548: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x14007DBD0: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x14005F328: "unsigned long __cdecl ScGetDriverStatus(class CDriverRecord * __ptr64,struct _SERVICE_STATUS * __ptr64)" ?ScGetDriverStatus@@YAKPEAVCDriverRecord@@PEAU_SERVICE_STATUS@@@Z
0x140030611: "__cdecl _imp_load_RmAcquireResourceSetEx" __imp_load_RmAcquireResourceSetEx
0x14007DCD0: "__cdecl _imp_GetRegistryValueWithFallbackW" __imp_GetRegistryValueWithFallbackW
0x140053DA4: WPP_SF_lS
0x140053DA4: WPP_SF_LS
0x14007F1A0: "Parameters" ??_C@_1BG@PGIGMDPA@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x14007D658: "__cdecl _imp_DevObjOpenDevRegKey" __imp_DevObjOpenDevRegKey
0x1400300CE: "__cdecl _imp_load_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_load_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x140080D70: "System\CurrentControlSet\Control" ??_C@_1FC@NIHGEDJM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140019238: "int __cdecl ScIsValidScManagerOrServiceHandle(void * __ptr64,enum SC_HANDLE_TYPE * __ptr64)" ?ScIsValidScManagerOrServiceHandle@@YAHPEAXPEAW4SC_HANDLE_TYPE@@@Z
0x140099AE8: NetworkSid
0x14007F3A0: "Description" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002BA60: "void __cdecl ScStartServiceCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ScStartServiceCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x140099D28: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_SvchostMitigationPolicies@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x14000B8D8: "int __cdecl ScMarkStartSetStartNow(class utl::_DlistIt<struct utl::_DlistNode<class Microsoft::WRL::ComPtr<class CServiceRecord> >,class Microsoft::WRL::ComPtr<class CServiceRecord> > & __ptr64,class utl::_DlistIt<struct utl::_DlistNode<class Microsoft::WRL::ComPtr<class CServiceRecord> >,class Microsoft::WRL::ComPtr<class CServiceRecord> > & __ptr64,class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > * __ptr64)" ?ScMarkStartSetStartNow@@YAHAEAV?$_DlistIt@U?$_DlistNode@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@0PEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@2@@Z
0x140080038: "NumDeviceStacksMax" ??_C@_1CG@EDEADFJC@?$AAN?$AAu?$AAm?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAc?$AAk?$AAs?$AAM?$AAa?$AAx?$AA?$AA@
0x140072790: "private: unsigned long __cdecl WdfTransientDevStateMgr::TryToRestartTransientStateDevices(int * __ptr64,int) __ptr64" ?TryToRestartTransientStateDevices@WdfTransientDevStateMgr@@AEAAKPEAHH@Z
0x140080EE0: "__cdecl _sz_ext_ms_win_session_usermgr_l1_1_0_dll" __sz_ext_ms_win_session_usermgr_l1_1_0_dll
0x140002FD4: "public: void __cdecl wil::details_abi::UsageIndexProperty::UpdateCount(unsigned int) __ptr64" ?UpdateCount@UsageIndexProperty@details_abi@wil@@QEAAXI@Z
0x14001E52C: "unsigned long __cdecl ScCreateStateRootFolderSD(void * __ptr64 * __ptr64)" ?ScCreateStateRootFolderSD@@YAKPEAPEAX@Z
0x140099430: "class CServiceRecordLock ScServiceRecordLock" ?ScServiceRecordLock@@3VCServiceRecordLock@@A
0x1400655CC: "public: void __cdecl CServiceRecord::AddToNotificationQueue(struct _LIST_ENTRY * __ptr64) __ptr64" ?AddToNotificationQueue@CServiceRecord@@QEAAXPEAU_LIST_ENTRY@@@Z
0x140099610: "unsigned long g_dwScExtMaxIndexSupported" ?g_dwScExtMaxIndexSupported@@3KA
0x140001FE0: "void __cdecl wil::details::RecordFeatureUsageCallback(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?RecordFeatureUsageCallback@details@wil@@YAXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@Z
0x140065F48: "unsigned long __cdecl ScGetClientRequestQueue(struct _GUID * __ptr64,int,struct _SC_NOTIFY_QUEUE * __ptr64 * __ptr64,int * __ptr64)" ?ScGetClientRequestQueue@@YAKPEAU_GUID@@HPEAPEAU_SC_NOTIFY_QUEUE@@PEAH@Z
0x14007DBC8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14002ED14: "public: __cdecl CServiceDatabase::CServiceDatabase(void) __ptr64" ??0CServiceDatabase@@QEAA@XZ
0x14006B7E0: "int __cdecl ScImagePathsMatch(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScImagePathsMatch@@YAHPEBG0@Z
0x1400826E0: "SeRemoteShutdownPrivilege" ??_C@_1DE@JGCMPEED@?$AAS?$AAe?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1400525C4: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x14006EE9C: "public: struct DEBUG_MODE_FLAGS __cdecl WdfDriverManager::GetDebugModeSettingsForBinary(unsigned short const * __ptr64) __ptr64" ?GetDebugModeSettingsForBinary@WdfDriverManager@@QEAA?AUDEBUG_MODE_FLAGS@@PEBG@Z
0x1400997F0: "unsigned short * g_wszRootPath" ?g_wszRootPath@@3PAGA
0x140093090: ext-ms-win-com-psmregister-l1-2-2_NULL_THUNK_DATA_DLN
0x14007D7D8: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x140080ED0: "__cdecl _sz_CRYPTBASE_dll" __sz_CRYPTBASE_dll
0x1400827D8: "SeShutdownPrivilege" ??_C@_1CI@NKKEIBLI@?$AAS?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007E430: "__cdecl _imp_NtEnumerateKey" __imp_NtEnumerateKey
0x140098450: "unsigned long GlobalServerAnnounce" ?GlobalServerAnnounce@@3KA
0x14005B300: "public: virtual void __cdecl CRestartContext::Perform(unsigned char) __ptr64" ?Perform@CRestartContext@@UEAAXE@Z
0x14002BD88: "public: __cdecl wil::details_abi::SubscriptionList::SubscriptionList(void) __ptr64" ??0SubscriptionList@details_abi@wil@@QEAA@XZ
0x140002EF4: "public: bool __cdecl wil::details_abi::heap_buffer::ensure(unsigned __int64) __ptr64" ?ensure@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x14005FA10: REnumServicesStatusW
0x14007D558: "const CRunCommandContext::`vftable'" ??_7CRunCommandContext@@6B@
0x14007D5B0: "const WdfDevNode::`vftable'" ??_7WdfDevNode@@6B@
0x140007A64: "protected: int __cdecl CNameEntryList<class CNameEntry>::FindEntryInternal(unsigned short const * __ptr64,class CNameEntry * __ptr64 * __ptr64) __ptr64" ?FindEntryInternal@?$CNameEntryList@VCNameEntry@@@@IEAAHPEBGPEAPEAVCNameEntry@@@Z
0x1400036C0: RI_ScBroadcastServiceControlMessage
0x140003554: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x140064388: "unsigned long __cdecl ScWriteErrorControl(struct HKEY__ * __ptr64,unsigned long)" ?ScWriteErrorControl@@YAKPEAUHKEY__@@K@Z
0x14007F268: "SC Manager" ??_C@_1BG@EAIBIKMN@?$AAS?$AAC?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1400A01B0: "__cdecl _imp_RmRegisterActivityHostCallbacks" __imp_RmRegisterActivityHostCallbacks
0x14007D740: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x140053C50: WPP_SF_l
0x140053C50: WPP_SF_L
0x140023EA4: "unsigned long __cdecl ScCreateScManagerObject(void)" ?ScCreateScManagerObject@@YAKXZ
0x140061A90: RQueryServiceLockStatusA
0x14007E300: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x140015410: "public: unsigned long __cdecl CServiceRecord::WaitForServiceStart(void) __ptr64" ?WaitForServiceStart@CServiceRecord@@QEAAKXZ
0x14001ADE0: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x14003042C: IsUMgrQueryUserTokenPresent
0x14007E1E0: "__cdecl _imp_RtlAddAce" __imp_RtlAddAce
0x14008A900: "WdfObjectList<class WdfServiceKe" ??_C@_0EJ@BPMKBCBE@WdfObjectList?$DMclass?5WdfServiceKe@
0x14007D7E8: "__cdecl _imp_RpcServerSubscribeForNotification" __imp_RpcServerSubscribeForNotification
0x14006BF90: WppControlCallback
0x14006ECE8: "private: int __cdecl WdfDriverManager::EnableDevice(unsigned long) __ptr64" ?EnableDevice@WdfDriverManager@@AEAAHK@Z
0x14002A108: "unsigned long __cdecl ScExtpRegisterTriggers(struct _SERVICE_TRIGGER_REGISTRATION * __ptr64,unsigned long,int,struct _SERVICE_TRIGGER_CONTEXT * __ptr64)" ?ScExtpRegisterTriggers@@YAKPEAU_SERVICE_TRIGGER_REGISTRATION@@KHPEAU_SERVICE_TRIGGER_CONTEXT@@@Z
0x14006E670: "protected: virtual void * __ptr64 __cdecl CUMDFUnknown::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUMDFUnknown@@MEAAPEAXI@Z
0x140031270: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14007E1B8: "__cdecl _imp_wcscspn" __imp_wcscspn
0x1400A00F0: "__cdecl _imp_EnumDependentServicesW" __imp_EnumDependentServicesW
0x140030CB8: "__cdecl _imp_load_StartServiceW" __imp_load_StartServiceW
0x140099630: InteractiveSid
0x1400992D0: "void * __ptr64 * g_SceFunctionPointers" ?g_SceFunctionPointers@@3PAPEAXA
0x14007D810: "__cdecl _imp_RpcServerRegisterAuthInfoW" __imp_RpcServerRegisterAuthInfoW
0x140027BF4: "public: __cdecl WdfDriverManager::WdfDriverManager(void) __ptr64" ??0WdfDriverManager@@QEAA@XZ
0x14008B510: "Unexpected failure" ??_C@_0BD@CKKEFDOE@Unexpected?5failure?$AA@
0x14001FC8C: "unsigned long __cdecl ScCreateServiceRecord(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned short * __ptr64,void * __ptr64,unsigned short,unsigned long,enum _TRI_BOOL,unsigned long,unsigned long,unsigned long,unsigned long,class CServiceRecord * __ptr64 * __ptr64)" ?ScCreateServiceRecord@@YAKPEBGKKKKPEAGPEAXGKW4_TRI_BOOL@@KKKKPEAPEAVCServiceRecord@@@Z
0x14008AC88: "DrvMgrLpcNotification::MarkForDe" ??_C@_0CF@BMFLMFBK@DrvMgrLpcNotification?3?3MarkForDe@
0x140098F38: "long (__cdecl* __ptr64 g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64)" ?g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion@@3P6AJPEAU__WIL__WNF_USER_SUBSCRIPTION@@@ZEA
0x14007FF30: "AutoRestartDeviceInOwnProcessByD" ??_C@_1EO@JCPCJHHI@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAO?$AAw?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAB?$AAy?$AAD@
0x14007DA38: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140098F78: "struct _GUID g_ActivityId" ?g_ActivityId@@3U_GUID@@A
0x14007DE20: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x1400A0110: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x14000E0E0: "public: int __cdecl CServiceRecord::IsDependentOn(class CServiceRecord * __ptr64) __ptr64" ?IsDependentOn@CServiceRecord@@QEAAHPEAV1@@Z
0x14001AAFC: "void __cdecl ScNotifyChangeState(void)" ?ScNotifyChangeState@@YAXXZ
0x14006A210: "long __cdecl ScServiceDirectAction(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?ScServiceDirectAction@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x14003036B: "__cdecl _imp_load_SystemFunction005" __imp_load_SystemFunction005
0x140089A28: "Global\OOBE_MACHINE_NAME_DONE" ??_C@_1DM@FCKJGBJF@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAO?$AAO?$AAB?$AAE?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAD?$AAO?$AAN?$AAE?$AA?$AA@
0x140065778: "void __cdecl SC_DEC_CRDEL_REQ_COUNT(void * __ptr64,unsigned long * __ptr64)" ?SC_DEC_CRDEL_REQ_COUNT@@YAXPEAXPEAK@Z
0x14007E3E8: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x14007DBD8: "__cdecl _imp_GetProcessTimes" __imp_GetProcessTimes
0x14001B1BC: "unsigned long __cdecl ScGetServiceSetChangeNotificationName(struct _WNF_STATE_NAME * __ptr64)" ?ScGetServiceSetChangeNotificationName@@YAKPEAU_WNF_STATE_NAME@@@Z
0x14005CC60: "void __cdecl ScDestroyDsmaUserServicesCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ScDestroyDsmaUserServicesCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x14007EE90: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x1400197D0: SC_MIDL_user_allocate
0x140080DC4: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x140019268: "unsigned long __cdecl ScGetServiceChangeNotificationName(class CServiceRecord * __ptr64,int,struct _WNF_STATE_NAME * __ptr64)" ?ScGetServiceChangeNotificationName@@YAKPEAVCServiceRecord@@HPEAU_WNF_STATE_NAME@@@Z
0x140081A80: "SCMLogSize" ??_C@_1BG@OKHJOMKJ@?$AAS?$AAC?$AAM?$AAL?$AAo?$AAg?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140087AB8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1400291E0: HwCfgGetRootKey
0x140030D8B: "__cdecl _imp_load_QueryServiceStatus" __imp_load_QueryServiceStatus
0x1400A01A8: "__cdecl _imp_RmResourceSetPropertiesInitialize" __imp_RmResourceSetPropertiesInitialize
0x140079F88: "void __cdecl WudfVerify(enum WdfComponentType,struct IUMDFPlatform * __ptr64,unsigned short const * __ptr64,unsigned long,char const * __ptr64,enum WdfDriverStopType,enum WdfErrorClass,unsigned long,char const * __ptr64,bool,char * __ptr64)" ?WudfVerify@@YAXW4WdfComponentType@@PEAUIUMDFPlatform@@PEBGKPEBDW4WdfDriverStopType@@W4WdfErrorClass@@K3_NPEAD@Z
0x14008A440: "ReleaseWait() must have a event" ??_C@_0CA@KGDOFJKG@ReleaseWait?$CI?$CJ?5must?5have?5a?5event?$AA@
0x14008B680: "-IoEventPortName:" ??_C@_1CE@BHNGPIGK@?$AA?9?$AAI?$AAo?$AAE?$AAv?$AAe?$AAn?$AAt?$AAP?$AAo?$AAr?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x1400091EC: "protected: unsigned long __cdecl CWin32ServiceRecord::LogonAndStartImage(unsigned short * __ptr64,struct _IMAGE_RECORD * __ptr64 * __ptr64) __ptr64" ?LogonAndStartImage@CWin32ServiceRecord@@IEAAKPEAGPEAPEAU_IMAGE_RECORD@@@Z
0x14001AED0: "public: virtual unsigned short __cdecl CServiceRecord::GetWowType(void) __ptr64" ?GetWowType@CServiceRecord@@UEAAGXZ
0x14008B340: "WdfDevNode::LoadProcess" ??_C@_0BI@FENMGMDM@WdfDevNode?3?3LoadProcess?$AA@
0x140030E16: "__cdecl _imp_load_NetIsServiceAccount" __imp_load_NetIsServiceAccount
0x140092EAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WUDFPlatform_dll" __DELAY_IMPORT_DESCRIPTOR_WUDFPlatform_dll
0x14001F34C: "unsigned long __cdecl ScRegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?ScRegEnumKeyW@@YAKPEAUHKEY__@@KPEAGK@Z
0x14007A0CC: "public: long __cdecl CUmdfSvcConfig::OpenServiceKey(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?OpenServiceKey@CUmdfSvcConfig@@QEAAJPEBGKPEAPEAX@Z
0x14007F870: "Power" ??_C@_1M@KHCHFCBG@?$AAP?$AAo?$AAw?$AAe?$AAr?$AA?$AA@
0x14005C6E8: "public: int __cdecl CServiceDatabase::GetServicesByGroup(class CNameEntry * __ptr64 const,int,class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64) __ptr64" ?GetServicesByGroup@CServiceDatabase@@QEAAHQEAVCNameEntry@@HAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x140012B30: ROpenSCManagerA
0x14007342C: "private: int __cdecl WdfDevNode::DetectErrorTag(void) __ptr64" ?DetectErrorTag@WdfDevNode@@AEAAHXZ
0x14008B188: "CompanionServiceList" ??_C@_1CK@MHMBNCPB@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAi?$AAo?$AAn?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1400899E8: "null" ??_C@_19DJCNLLCE@?$AAn?$AAu?$AAl?$AAl?$AA?$AA@
0x14000FC90: "unsigned long __cdecl ScRegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?ScRegQueryValueExW@@YAKPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x140059EB4: ScShutdownAllServices
0x140053970: "int __cdecl wil_details_SetPropertyCacheUsageCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyCacheUsageCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x14002E2EC: "void __cdecl ScInitServiceProcessChannel(void)" ?ScInitServiceProcessChannel@@YAXXZ
0x140070294: "public: static void __cdecl WdfDriverManager::ShutdownPlatformLibrary(void)" ?ShutdownPlatformLibrary@WdfDriverManager@@SAXXZ
0x14008A050: "DefaultAuditAceFlags" ??_C@_1CK@OHGGIEOE@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAu?$AAd?$AAi?$AAt?$AAA?$AAc?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x140014140: ROpenSCManagerW
0x14008B2D8: "AutoRestartDeviceInOwnProcess" ??_C@_1DM@KKDGONMF@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAO?$AAw?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x140098018: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x140014670: "long __cdecl ScRpcInterfaceSecurityCb(struct _RPC_IF_ID * __ptr64,void * __ptr64)" ?ScRpcInterfaceSecurityCb@@YAJPEAU_RPC_IF_ID@@PEAX@Z
0x14008AFA0: WPP_2b013fbc2555358ee25715a4514ab505_Traceguids
0x1400A01B8: "__cdecl _imp_RmConnectToResourceManager" __imp_RmConnectToResourceManager
0x1400A0130: "__cdecl _imp_WaitServiceState" __imp_WaitServiceState
0x14007D8F0: "__cdecl _imp_wcstoul" __imp_wcstoul
0x14005254C: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x140099CBC: "int DsmaUserLoggedIn" ?DsmaUserLoggedIn@@3HA
0x14006E4F0: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@UEAAPEAXI@Z
0x1400806F0: "EnableSvchostMitigationPolicy" ??_C@_1DM@GKKMDJDJ@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1400156AC: "unsigned long __cdecl ScUnlockDatabase(void * __ptr64 * __ptr64)" ?ScUnlockDatabase@@YAKPEAPEAX@Z
0x140004114: "unsigned long __cdecl ScTerminateServiceProcess(struct _IMAGE_RECORD * __ptr64)" ?ScTerminateServiceProcess@@YAKPEAU_IMAGE_RECORD@@@Z
0x140092E6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll
0x140082550: "SeRelabelPrivilege" ??_C@_1CG@CFCMPGGL@?$AAS?$AAe?$AAR?$AAe?$AAl?$AAa?$AAb?$AAe?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140081821: "" ??_C@_00CNPNBAHC@?$AA@
0x14002C62C: "public: unsigned long __cdecl CUnresolvedNameEntry::ResolveToService(class CServiceRecord * __ptr64) __ptr64" ?ResolveToService@CUnresolvedNameEntry@@QEAAKPEAVCServiceRecord@@@Z
0x140021694: "unsigned long __cdecl ScWriteImageFileName(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScWriteImageFileName@@YAKPEAUHKEY__@@PEAG@Z
0x14000DEC0: "int __cdecl ScIsValidScManagerHandle(void * __ptr64)" ?ScIsValidScManagerHandle@@YAHPEAX@Z
0x14002F884: "public: __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x14007D938: "__cdecl _imp_memmove_s" __imp_memmove_s
0x1400893E8: "BITS" ??_C@_19POEPHDHP@?$AAB?$AAI?$AAT?$AAS?$AA?$AA@
0x14007E238: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x140080E20: "__cdecl _sz_ext_ms_win_authz_context_l1_1_0_dll" __sz_ext_ms_win_authz_context_l1_1_0_dll
0x14007DBC0: "__cdecl _imp_InitializeProcThreadAttributeList" __imp_InitializeProcThreadAttributeList
0x14007DD98: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x140009050: "public: unsigned long __cdecl CServiceRecord::Start(unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,unsigned long) __ptr64" ?Start@CServiceRecord@@QEAAKKPEAU_STRING_PTRSW@@KK@Z
0x1400A0088: "__cdecl _imp_LsaLookupOpenLocalPolicy" __imp_LsaLookupOpenLocalPolicy
0x1400285C0: "public: __cdecl CUmdfSvcConfig::~CUmdfSvcConfig(void) __ptr64" ??1CUmdfSvcConfig@@QEAA@XZ
0x14006329C: "unsigned long __cdecl ScOpenCachedHandlesToPersistentRoots(void)" ?ScOpenCachedHandlesToPersistentRoots@@YAKXZ
0x14008BA00: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x14001FE50: "public: unsigned long __cdecl CServiceDatabase::Add(class CServiceRecord * __ptr64) __ptr64" ?Add@CServiceDatabase@@QEAAKPEAVCServiceRecord@@@Z
0x1400819C0: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x1400891C0: "OSDATA\System\Services" ??_C@_1CO@MNMAGLBC@?$AAO?$AAS?$AAD?$AAA?$AAT?$AAA?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x14008A540: EVENT_DM_START_OK_V2
0x14007DAB8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x14007E368: "__cdecl _imp_NtCloseObjectAuditAlarm" __imp_NtCloseObjectAuditAlarm
0x14005AE40: "public: __cdecl CRestartContext::CRestartContext(class CServiceRecord * __ptr64) __ptr64" ??0CRestartContext@@QEAA@PEAVCServiceRecord@@@Z
0x1400634BC: "void __cdecl ScReadServiceStateSepFlags(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?ScReadServiceStateSepFlags@@YAXPEAUHKEY__@@PEBGPEAK@Z
0x140080968: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x14008A650: "minkernel\wdf\framework\umdf\dri" ??_C@_1GM@NMFKNIAD@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAd?$AAr?$AAi@
0x14000A534: "public: unsigned long __cdecl CWin32ServiceRecord::GetSvchostGroupName(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetSvchostGroupName@CWin32ServiceRecord@@QEAAKPEBGPEAPEAG@Z
0x1400993A0: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x14008ABA8: "DrvMgrLpcNotification::~DrvMgrLp" ??_C@_0CO@FBEMMOLA@DrvMgrLpcNotification?3?3?$HODrvMgrLp@
0x14002FD04: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x14002D79C: "long __cdecl ScSetProcessBreakOnTermination(void * __ptr64,int)" ?ScSetProcessBreakOnTermination@@YAJPEAXH@Z
0x140028B74: "public: int __cdecl WdfDriverManager::PostRestartDeviceWorkItem(class WdfDevNode * __ptr64) __ptr64" ?PostRestartDeviceWorkItem@WdfDriverManager@@QEAAHPEAVWdfDevNode@@@Z
0x140089890: "<null>" ??_C@_1O@JGOCFHCM@?$AA?$DM?$AAn?$AAu?$AAl?$AAl?$AA?$DO?$AA?$AA@
0x14007E410: "__cdecl _imp_RtlExpandEnvironmentStrings" __imp_RtlExpandEnvironmentStrings
0x140051970: "public: void __cdecl wil::details::EnabledStateManager::OnStateChange(void) __ptr64" ?OnStateChange@EnabledStateManager@details@wil@@QEAAXXZ
0x1400558E0: "unsigned long __cdecl ScCreateServiceRpc(void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long,unsigned short * __ptr64,unsigned char * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned short)" ?ScCreateServiceRpc@@YAKPEAXPEAG1KKKK11PEAKPEAEK13KPEAPEAXG@Z
0x14007D8B0: "__cdecl _imp_sprintf_s" __imp_sprintf_s
0x14007DC38: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x14007B6A0: "const DrvMgrLpcNotification::`vftable'{for `WdfObject'}" ??_7DrvMgrLpcNotification@@6BWdfObject@@@
0x140093CCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x140050458: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x1400186BC: PowerRegisterLegacyEventNotification
0x140093DF8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x14007E5C8: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x14007ED90: GUID_IDLE_BACKGROUND_TASK
0x140022B98: "int __cdecl ScCreateLoadOrderGroupList(void)" ?ScCreateLoadOrderGroupList@@YAHXZ
0x14006A134: "__cdecl TlgDefineProvider_annotation__TlggServiceHealthProviderProv" _TlgDefineProvider_annotation__TlggServiceHealthProviderProv
0x14008B650: "-SystemEventPortName:" ??_C@_1CM@HIMKNJDC@?$AA?9?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAv?$AAe?$AAn?$AAt?$AAP?$AAo?$AAr?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x14007E4B8: "__cdecl _imp_NtLoadDriver" __imp_NtLoadDriver
0x14007E358: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x140089D68: "not allowed" ??_C@_0M@HGFANFHN@not?5allowed?$AA@
0x14002F6F4: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::FeatureStateManager>::Construct(void) __ptr64" ?Construct@?$manually_managed_shutdown_aware_object@VFeatureStateManager@details@wil@@@wil@@QEAAXXZ
0x14007D980: "__cdecl _imp__initterm_e" __imp__initterm_e
0x140080948: "PreferredNode" ??_C@_1BM@FIEKPNMJ@?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAN?$AAo?$AAd?$AAe?$AA?$AA@
0x140069A40: WPP_SF_qLL
0x140099490: "class CGroupListLock ScGroupListLock" ?ScGroupListLock@@3VCGroupListLock@@A
0x140099B18: AliasGuestsSid
0x140081580: "__cdecl _sz_ext_ms_win_scesrv_server_l1_1_0_dll" __sz_ext_ms_win_scesrv_server_l1_1_0_dll
0x140030744: "__cdecl _tailMerge_ext_ms_win_security_chambers_l1_1_1_dll" __tailMerge_ext_ms_win_security_chambers_l1_1_1_dll
0x14007DAA0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140089A68: "System\Setup" ??_C@_1BK@DBNBIMPE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1400039B0: "unsigned long __cdecl ScPerformPageCombineOnServiceImages(void * __ptr64)" ?ScPerformPageCombineOnServiceImages@@YAKPEAX@Z
0x140072700: "private: static void __cdecl WdfTransientDevStateMgr::TimerCallback(void * __ptr64,unsigned char)" ?TimerCallback@WdfTransientDevStateMgr@@CAXPEAXE@Z
0x14007E048: "__cdecl _imp_GetAce" __imp_GetAce
0x140093850: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x140060BD0: RControlServiceExA
0x14007D820: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x140054CEC: "public: __cdecl CScmSyncLockExclusive::~CScmSyncLockExclusive(void) __ptr64" ??1CScmSyncLockExclusive@@QEAA@XZ
0x14007E198: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x14008B458: WPP_15e5728e39f93875e2d1860b29183014_Traceguids
0x1400562B4: "void __cdecl ScLogServiceInstallEvent(unsigned short * __ptr64,unsigned long,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64)" ?ScLogServiceInstallEvent@@YAXPEAGKK00@Z
0x1400563E8: "unsigned long __cdecl ScMarkContextHandleSessionStrict(int * __ptr64)" ?ScMarkContextHandleSessionStrict@@YAKPEAH@Z
0x140016834: "unsigned long __cdecl ScControlService(void * __ptr64,class CServiceRecord * __ptr64,unsigned long,unsigned long,int,unsigned short const * __ptr64,struct _SERVICE_STATUS_PROCESS * __ptr64,int)" ?ScControlService@@YAKPEAXPEAVCServiceRecord@@KKHPEBGPEAU_SERVICE_STATUS_PROCESS@@H@Z
0x14007F2C0: "ServicesFailed" ??_C@_1BO@LJFBDFCL@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140002CC8: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Read(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64) __ptr64" ?Read@UsageIndexProperty@details_abi@wil@@QEAA_NAEAPEAEPEAE@Z
0x140067044: "unsigned long __cdecl ScRegisterForNotifications(struct _SC_HANDLE_STRUCT * __ptr64,int,unsigned long,struct _SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2 * __ptr64,struct _GUID * __ptr64,struct _GUID * __ptr64,int * __ptr64,void * __ptr64 * __ptr64)" ?ScRegisterForNotifications@@YAKPEAU_SC_HANDLE_STRUCT@@HKPEAU_SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2@@PEAU_GUID@@2PEAHPEAPEAX@Z
0x14005E51C: "void __cdecl ScDetectSlowStartup(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScDetectSlowStartup@@YAXAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14009977C: "unsigned long volatile g_dwRunningAutostartLoop" ?g_dwRunningAutostartLoop@@3KC
0x14007D920: "__cdecl _imp_wcschr" __imp_wcschr
0x140099520: "class DEFER_LIST ScDeferredList" ?ScDeferredList@@3VDEFER_LIST@@A
0x14007E548: "__cdecl _imp_WinSqmStartSqmOptinListener" __imp_WinSqmStartSqmOptinListener
0x140099798: "void * __ptr64 __ptr64 g_hAutoStartPhase1Event" ?g_hAutoStartPhase1Event@@3PEAXEA
0x140061FE0: "void __cdecl ScDetectIllegalServicesThread(void * __ptr64)" ?ScDetectIllegalServicesThread@@YAXPEAX@Z
0x1400800A0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1GE@DAPDOKLF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14002CFC0: WppInitUm
0x14007DD78: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140089440: "lsm" ??_C@_17FJGDMFND@?$AAl?$AAs?$AAm?$AA?$AA@
0x14005C5C0: "protected: virtual void * __ptr64 __cdecl SmartPtrRef::`vector deleting destructor'(unsigned int) __ptr64" ??_ESmartPtrRef@@MEAAPEAXI@Z
0x14000313C: "protected: void __cdecl wistd::_Func_class<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::_Tidy(void) __ptr64" ?_Tidy@?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@IEAAXXZ
0x1400A0000: "__cdecl _imp_SystemFunction029" __imp_SystemFunction029
0x14005C94C: "unsigned long __cdecl RegQueryValueWithAlloc(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?RegQueryValueWithAlloc@@YAKPEAUHKEY__@@PEBGKPEAPEAEPEAK@Z
0x140093080: ext-ms-win-authz-context-l1-1-0_NULL_THUNK_DATA_DLN
0x1400199E0: "void __cdecl ScExtpTriggerArrived(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long)" ?ScExtpTriggerArrived@@YAXPEAXU_CBROKERED_EVENT_ID@@00K@Z
0x140030520: IsRmConnectToResourceManagerPresent
0x14002FF39: "__cdecl _imp_load_AuthziInitializeAuditEvent" __imp_load_AuthziInitializeAuditEvent
0x140076384: "private: void __cdecl WdfDevNode::SetRegKeySecurity(struct HKEY__ * __ptr64,void * __ptr64,unsigned long,int) __ptr64" ?SetRegKeySecurity@WdfDevNode@@AEAAXPEAUHKEY__@@PEAXKH@Z
0x14007DA80: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140085408: DOMAIN_JOIN_MANAGER_TRIGGER_PROVIDER_GUID
0x14008AD40: "DrvMgrLpcNotification::Message" ??_C@_0BP@GDGKHKLM@DrvMgrLpcNotification?3?3Message?$AA@
0x140056DE4: WPP_SF_qLLL
0x140062714: "unsigned long __cdecl ScGetServiceNamesFromTagArray(unsigned long * __ptr64,unsigned long,struct _TAG_INFO_NAMES_REFERENCING_MODULE_OUT_PARAMS * __ptr64 * __ptr64)" ?ScGetServiceNamesFromTagArray@@YAKPEAKKPEAPEAU_TAG_INFO_NAMES_REFERENCING_MODULE_OUT_PARAMS@@@Z
0x14007FD58: "%ProgramData%\Microsoft\WDF\" ??_C@_1DK@HKOJFCHE@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAD?$AAF?$AA?2?$AA?$AA@
0x140030FE7: "__cdecl _tailMerge_srvcli_dll" __tailMerge_srvcli_dll
0x1400065D4: "__cdecl TlgWrite" _TlgWrite
0x140081A28: WPP_ac5d1dbd2c4f311c7b89bcee7cad6c61_Traceguids
0x140069338: WPP_SF_iidd
0x14007E5F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140098F4C: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x14007F830: "EarlyStartServices" ??_C@_1CG@FJAMFKIG@?$AAE?$AAa?$AAr?$AAl?$AAy?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x14007F86C: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x14002FFA0: NdrServerCall2
0x140082800: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140082AC8: "SeLockMemoryPrivilege" ??_C@_1CM@JPKFCMPM@?$AAS?$AAe?$AAL?$AAo?$AAc?$AAk?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140093A18: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A0128: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x140093018: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x140099A80: OwnerSid
0x14007E598: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x14007F5F0: "System\CurrentControlSet\Control" ??_C@_1GG@HGKGIPDF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140081908: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x140098F6C: "int g_fScDelayedAutostartInProgress" ?g_fScDelayedAutostartInProgress@@3HA
0x140059610: "public: virtual unsigned long __cdecl CServiceRecord::SendControl(unsigned short * __ptr64,unsigned long,unsigned long,union _CONTROL_ARGS * __ptr64,unsigned long,unsigned long * __ptr64,int,unsigned long,unsigned short const * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64,int) __ptr64" ?SendControl@CServiceRecord@@UEAAKPEAGKKPEAT_CONTROL_ARGS@@KPEAKHKPEBGPEAPEAK2H@Z
0x140019514: "public: unsigned long __cdecl CServiceDatabase::FindServiceByUserContextAndTemplate(unsigned __int64,class CServiceRecord * __ptr64,class CServiceRecord * __ptr64 * __ptr64) __ptr64" ?FindServiceByUserContextAndTemplate@CServiceDatabase@@QEAAK_KPEAVCServiceRecord@@PEAPEAV2@@Z
0x14007DDB8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x140099680: "void * __ptr64 __ptr64 ScManagerSd" ?ScManagerSd@@3PEAXEA
0x1400996D0: "unsigned char * LpacServicesManagementCapabilityGroupSidBuffer" ?LpacServicesManagementCapabilityGroupSidBuffer@@3PAEA
0x140081800: "__cdecl _sz_srvcli_dll" __sz_srvcli_dll
0x140098458: "struct _tagScProtectionMap * g_ScProtectionMap" ?g_ScProtectionMap@@3PAU_tagScProtectionMap@@A
0x140015A2C: "unsigned long __cdecl ScRegLoadMUIString(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int,unsigned short * __ptr64 * __ptr64)" ?ScRegLoadMUIString@@YAKPEAUHKEY__@@PEAG1HPEAPEAG@Z
0x14007DAF8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14007D710: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x14002D4A0: "long __cdecl wil_details_StagingConfig_Load(struct wil_details_StagingConfig * __ptr64,enum wil_FeatureStore,unsigned __int64,void * __ptr64,int)" ?wil_details_StagingConfig_Load@@YAJPEAUwil_details_StagingConfig@@W4wil_FeatureStore@@_KPEAXH@Z
0x14007E350: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1400809B0: "(A;;GA;;;%ws)" ??_C@_1BM@DJDNMJDG@?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AA?$CF?$AAw?$AAs?$AA?$CJ?$AA?$AA@
0x14007D928: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x14007DAE0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x14007DFE8: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x14001BD60: "public: virtual void * __ptr64 __cdecl CWin32UserServiceRecord::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32UserServiceRecord@@UEAAPEAXI@Z
0x140023060: "unsigned long __cdecl ScInitDelayStart(unsigned __int64)" ?ScInitDelayStart@@YAK_K@Z
0x140070794: WPP_SF_q_guid_SSSSSdD
0x140098F60: "struct _API_LOCK * __ptr64 __ptr64 ScGlobalApiLockList" ?ScGlobalApiLockList@@3PEAU_API_LOCK@@EA
0x1400931C0: srvcli_NULL_THUNK_DATA_DLN
0x14008A500: EVENT_DM_START_FAILURE_V2
0x140063848: "int __cdecl ScShouldPathBeWowRedirected(unsigned short const * __ptr64)" ?ScShouldPathBeWowRedirected@@YAHPEBG@Z
0x140092C6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll
0x14001C768: "public: class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64> __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::erase(class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>) __ptr64" ?erase@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@QEAA?AV?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@2@V32@0@Z
0x140093AA8: srvcli_NULL_THUNK_DATA_DLB
0x1400A02D0: srvcli_NULL_THUNK_DATA_DLA
0x14007DF30: "__cdecl _imp_GetSystemWow64DirectoryW" __imp_GetSystemWow64DirectoryW
0x14007DFB0: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x140028D30: "void __cdecl wil::details::WilApiImpl_SubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?WilApiImpl_SubscribeFeatureStateChangeNotification@details@wil@@YAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x14007EF70: SCMEvt_Autostart_Stop
0x140099CE8: "struct _GUID g_NilGuid" ?g_NilGuid@@3U_GUID@@A
0x14008A1A8: "NETWORK" ??_C@_1BA@EBPJHHKE@?$AAN?$AAE?$AAT?$AAW?$AAO?$AAR?$AAK?$AA?$AA@
0x14008AAE0: "WdfObject::~WdfObject" ??_C@_0BG@MPPAMIBP@WdfObject?3?3?$HOWdfObject?$AA@
0x14007F450: "System\CurrentControlSet\Control" ??_C@_1EC@DGAEKDHP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140028EA0: "public: void __cdecl wil::details_abi::SubscriptionList::SubscribeUnderLock(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeUnderLock@SubscriptionList@details_abi@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x140073598: "private: unsigned long __cdecl WdfDevNode::DiGetDevicePropertyString(void * __ptr64,struct _DO_DEVINFO_DATA * __ptr64,struct _DEVPROPKEY const * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?DiGetDevicePropertyString@WdfDevNode@@AEAAKPEAXPEAU_DO_DEVINFO_DATA@@PEBU_DEVPROPKEY@@PEAPEBG@Z
0x140089EE0: "*Driver" ??_C@_1BA@LOGOFDCJ@?$AA?$CK?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x14007EAE0: "SYSTEM\CurrentControlSet\Service" ??_C@_1EE@FAPOBBDN@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1400246BC: "private: static void __cdecl wil::Feature<struct __WilFeatureTraits_Feature_SvchostSplit>::ReportUsageToService(bool,enum wil::ReportingKind,unsigned __int64)" ?ReportUsageToService@?$Feature@U__WilFeatureTraits_Feature_SvchostSplit@@@wil@@CAX_NW4ReportingKind@2@_K@Z
0x1400264C4: "private: bool __cdecl TraceLoggingCorrelationVector::ToStringImpl(unsigned __int64,char * __ptr64) __ptr64" ?ToStringImpl@TraceLoggingCorrelationVector@@AEAA_N_KPEAD@Z
0x14000DB48: ScSendPnPMessage
0x14007F1E8: "TrustedInstaller" ??_C@_1CC@EGMNKOEC@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x1400A0140: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x14006CF60: ScExtUPNToAccountName
0x140099268: "unsigned long g_globalMemoryMidCap" ?g_globalMemoryMidCap@@3KA
0x140089C80: DEVPKEY_Device_DriverVersion
0x140030274: "__cdecl _imp_load_LsaLookupGetDomainInfo" __imp_load_LsaLookupGetDomainInfo
0x14007E040: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x140050B38: "public: static void __cdecl wil::details::ThreadFailureCallbackHolder::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@ThreadFailureCallbackHolder@details@wil@@SAXPEAUFailureInfo@3@PEAD_K@Z
0x140092F90: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x1400A00A0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x14006B450: RpcpStartRpcServer
0x140052F08: "unsigned long __cdecl ScFormSecretName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScFormSecretName@@YAKPEAGPEAPEAG@Z
0x14006ECB8: "public: void __cdecl WdfDriverManager::DrvMgrDeviceRemoval(class WdfDevNode * __ptr64) __ptr64" ?DrvMgrDeviceRemoval@WdfDriverManager@@QEAAXPEAVWdfDevNode@@@Z
0x1400938A0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x1400853A0: "Microsoft-Windows-DomainJoinMana" ??_C@_1GG@IIMPFCPF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAJ?$AAo?$AAi?$AAn?$AAM?$AAa?$AAn?$AAa@
0x140093D80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-private-l1-1-0
0x14007DC60: "__cdecl _imp_RegSetKeySecurity" __imp_RegSetKeySecurity
0x14001AED0: "public: virtual unsigned short __cdecl CServiceRecord::GetPreferredNode(void) __ptr64" ?GetPreferredNode@CServiceRecord@@UEAAGXZ
0x1400187A0: RQueryServiceStatusEx
0x140089F50: WPP_230fd5ccd0f23fd64343c160a90e6dd8_Traceguids
0x14007E600: "__cdecl _xc_a" __xc_a
0x14007D8D0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x140099C80: "void (__cdecl* __ptr64 g_wil_details_apiSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_apiSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x14007E168: "__cdecl _imp_TpAllocTimer" __imp_TpAllocTimer
0x140009E68: "int __cdecl wil_details_FeaturePropertyCache_ReportUsageToServiceDirect(union wil_details_FeaturePropertyCache * __ptr64,unsigned int,enum wil_details_ServiceReportingKind,unsigned int,unsigned __int64)" ?wil_details_FeaturePropertyCache_ReportUsageToServiceDirect@@YAHPEATwil_details_FeaturePropertyCache@@IW4wil_details_ServiceReportingKind@@I_K@Z
0x140019CB0: ScExtpWaitForService
0x14007DB90: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140028BE0: "private: long __cdecl WdfDriverManager::StartActivityLog(void) __ptr64" ?StartActivityLog@WdfDriverManager@@AEAAJXZ
0x140016310: "public: virtual void __cdecl CDelayStartContext::Perform(unsigned char) __ptr64" ?Perform@CDelayStartContext@@UEAAXE@Z
0x140099C00: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140081838: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x14000A218: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x140018620: "unsigned long __cdecl ScRegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64,unsigned long)" ?ScRegSetValueExW@@YAKPEAUHKEY__@@PEBGKKPEAXK@Z
0x14001B040: ScExtRegisterServicesProcess
0x140072670: "private: unsigned long __cdecl WdfTransientDevStateMgr::StartTimer(void) __ptr64" ?StartTimer@WdfTransientDevStateMgr@@AEAAKXZ
0x140057150: "private: struct utl::_TreeNode<unsigned long> * __ptr64 __cdecl utl::_Tree<unsigned long,unsigned long,struct utl::less<unsigned long>,class utl::allocator<unsigned long>,0>::_NewNodeConstruct<unsigned long const & __ptr64>(unsigned long const & __ptr64) __ptr64" ??$_NewNodeConstruct@AEBK@?$_Tree@KKU?$less@K@utl@@V?$allocator@K@2@$0A@@utl@@AEAAPEAU?$_TreeNode@K@1@AEBK@Z
0x14002E6FC: "int __cdecl ScGetComputerName(void)" ?ScGetComputerName@@YAHXZ
0x14001AED0: "public: virtual unsigned long __cdecl CServiceRecord::GetSessionId(void) __ptr64" ?GetSessionId@CServiceRecord@@UEAAKXZ
0x14007F220: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x140099CDC: "unsigned long g_cOpenCrDelHandles" ?g_cOpenCrDelHandles@@3KA
0x1400307CF: "__cdecl _tailMerge_dabapi_dll" __tailMerge_dabapi_dll
0x140080FE0: "ext-ms-win-com-psmregister-l1-1-" ??_C@_1EE@MNOENCPM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AA?9?$AAp?$AAs?$AAm?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x140051B90: "void __cdecl wil::details::RecordSRUMFeatureUsage(unsigned int,unsigned int,unsigned int)" ?RecordSRUMFeatureUsage@details@wil@@YAXIII@Z
0x1400A01F8: "__cdecl _imp_ScesrvInitializeServer" __imp_ScesrvInitializeServer
0x140022C90: "unsigned long __cdecl ScCreateOrderGroupEntry(unsigned short * __ptr64)" ?ScCreateOrderGroupEntry@@YAKPEAG@Z
0x14001FF98: "unsigned long __cdecl ScReadDelayedAutostartFlag(struct HKEY__ * __ptr64,int * __ptr64)" ?ScReadDelayedAutostartFlag@@YAKPEAUHKEY__@@PEAH@Z
0x140093E0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x14007D830: "__cdecl _imp_RpcMgmtWaitServerListen" __imp_RpcMgmtWaitServerListen
0x14007E330: "__cdecl _imp_RtlValidRelativeSecurityDescriptor" __imp_RtlValidRelativeSecurityDescriptor
0x140001250: RGetServiceKeyNameW
0x140051128: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x140072484: "public: static unsigned long __cdecl WdfTransientDevStateMgr::CreateAndInitialize(class WdfDriverManager * __ptr64,class WdfTransientDevStateMgr * __ptr64 * __ptr64)" ?CreateAndInitialize@WdfTransientDevStateMgr@@SAKPEAVWdfDriverManager@@PEAPEAV1@@Z
0x140008754: ScInitControlMessageContext
0x14005496C: "unsigned long __cdecl ScGetNewCtrlSetId(unsigned long * __ptr64,unsigned long * __ptr64)" ?ScGetNewCtrlSetId@@YAKPEAK0@Z
0x1400A00D8: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x14006AB70: "public: virtual void * __ptr64 __cdecl CUmdfDriverRecord::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUmdfDriverRecord@@UEAAPEAXI@Z
0x14007DA28: "__cdecl _imp_FindClose" __imp_FindClose
0x14000A4C0: "public: int __cdecl CServiceRecord::MarkForStartNow(void) __ptr64" ?MarkForStartNow@CServiceRecord@@QEAAHXZ
0x1400892B8: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x1400991F8: "int ScAutoStartInProgress" ?ScAutoStartInProgress@@3HA
0x140099690: "struct HKEY__ * __ptr64 __ptr64 g_hProviderKey" ?g_hProviderKey@@3PEAUHKEY__@@EA
0x14007E2E8: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x14005CBE4: "void __cdecl ScDestroyDsmaUserServices(void)" ?ScDestroyDsmaUserServices@@YAXXZ
0x1400079FC: "public: int __cdecl CNameEntryList<class CNameEntry>::FindEntry(unsigned short const * __ptr64,class CNameEntry * __ptr64 * __ptr64) __ptr64" ?FindEntry@?$CNameEntryList@VCNameEntry@@@@QEAAHPEBGPEAPEAVCNameEntry@@@Z
0x14007DE10: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x14007D6B0: DEVOBJ_NULL_THUNK_DATA
0x140089278: WPP_ThisDir_CTLGUID_Regular
0x14005EB40: "private: struct utl::pair<class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64>,bool> __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_EmplaceImpl(struct utl::integral_constant<bool,0>,class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64>,struct utl::_HashNode<class CNameEntry * __ptr64> * __ptr64) __ptr64" ?_EmplaceImpl@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEAA?AU?$pair@V?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@utl@@_N@2@U?$integral_constant@_N$0A@@2@V?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@2@PEAU?$_HashNode@PEAVCNameEntry@@@2@@Z
0x140006674: "unsigned long __cdecl ScBuildServiceTokenGroups(unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned long,unsigned long,int,int,int,struct _TOKEN_GROUPS * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?ScBuildServiceTokenGroups@@YAKPEBGPEAPEAXKKHHHPEAPEAU_TOKEN_GROUPS@@1@Z
0x140087AB0: Microsoft_Windows_DriverFrameworks_UserModeLevels
0x1400616E0: RGetServiceKeyNameA
0x14007E3A0: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x140028984: StringCchCopyW
0x140099CC8: "struct HKEY__ * __ptr64 __ptr64 g_PersistentDriverRootKey" ?g_PersistentDriverRootKey@@3PEAUHKEY__@@EA
0x140002484: "public: bool __cdecl wil::details_abi::FeatureStateData::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateData@details_abi@wil@@QEAA_NIW4wil_details_ServiceReportingKind@@_K@Z
0x140066178: "int __cdecl ScGetEntriesFromCreateDeleteCache(unsigned long,unsigned long,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?ScGetEntriesFromCreateDeleteCache@@YAHKKKPEAPEAGPEAK1@Z
0x140098F54: "unsigned long g_ServiceStartFuzzingMaxDelay" ?g_ServiceStartFuzzingMaxDelay@@3KA
0x140023940: "unsigned long __cdecl ScRegisterUnregisterTCPEndpoint(unsigned char,unsigned char)" ?ScRegisterUnregisterTCPEndpoint@@YAKEE@Z
0x14007DF80: api-ms-win-devices-config-l1-1-1_NULL_THUNK_DATA
0x1400503C4: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x14007DF70: "__cdecl _imp_CM_Get_Device_ID_List_SizeW" __imp_CM_Get_Device_ID_List_SizeW
0x140099400: LocalSystemSid
0x14008B090: "success" ??_C@_1BA@ICANLBCA@?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1400643BC: "unsigned long __cdecl ScWriteGroupForThisService(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScWriteGroupForThisService@@YAKPEAUHKEY__@@PEAG@Z
0x14006649C: "unsigned long __cdecl ScGetNotifyBlockResults(struct _SC_NOTIFY_BLOCK * __ptr64,struct _SC_RPC_NOTIFY_PARAMS_LIST * __ptr64 * __ptr64)" ?ScGetNotifyBlockResults@@YAKPEAU_SC_NOTIFY_BLOCK@@PEAPEAU_SC_RPC_NOTIFY_PARAMS_LIST@@@Z
0x140020510: ScCreateUserSecurityObject
0x14008A5C0: "TrustletIdentity" ??_C@_1CC@DCLMBAL@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAl?$AAe?$AAt?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$AA@
0x14008ACD8: "unexpected connection port" ??_C@_0BL@DKJKJMLP@unexpected?5connection?5port?$AA@
0x140053474: "int __cdecl ScServiceAllowedToGetToken(unsigned short const * __ptr64)" ?ScServiceAllowedToGetToken@@YAHPEBG@Z
0x14007DA88: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400803E0: "\Registry\Machine\System\Current" ??_C@_1GK@CIEMKNHL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x14007E038: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x1400A00E8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x140020B28: "unsigned long __cdecl ScReadServiceManagedAccount(struct HKEY__ * __ptr64,enum _TRI_BOOL * __ptr64)" ?ScReadServiceManagedAccount@@YAKPEAUHKEY__@@PEAW4_TRI_BOOL@@@Z
0x140089698: "stop" ??_C@_19LLIMCLGL@?$AAs?$AAt?$AAo?$AAp?$AA?$AA@
0x140099BD8: g_pfnResultLoggingCallback
0x14007E440: "__cdecl _imp_NtSetValueKey" __imp_NtSetValueKey
0x14000688C: "unsigned long __cdecl ScAdjustTokenDefaultDacl(void * __ptr64,void * __ptr64 * __ptr64,unsigned long)" ?ScAdjustTokenDefaultDacl@@YAKPEAXPEAPEAXK@Z
0x14001A8B8: "void __cdecl ScDeleteDependencies(struct _DEPEND_RECORD * __ptr64)" ?ScDeleteDependencies@@YAXPEAU_DEPEND_RECORD@@@Z
0x140002C94: "public: int __cdecl wil::details_abi::UsageIndexProperty::Compare(void * __ptr64,unsigned __int64)const __ptr64" ?Compare@UsageIndexProperty@details_abi@wil@@QEBAHPEAX_K@Z
0x140080668: "System\HardwareConfig" ??_C@_1CM@FAHDILEP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x140028DFC: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToEnabledStateChanges(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeToEnabledStateChanges@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x140081850: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x14008B758: "-TimeoutOnStartInSec:" ??_C@_1CM@BEFLLJJD@?$AA?9?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAI?$AAn?$AAS?$AAe?$AAc?$AA?3?$AA?$AA@
0x14007E478: "__cdecl _imp_RtlNtStatusToDosErrorNoTeb" __imp_RtlNtStatusToDosErrorNoTeb
0x14008A080: "WinSta0\Default" ??_C@_1CA@JJIMMJJP@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x14007E218: "__cdecl _imp_RtlGetPersistedStateLocation" __imp_RtlGetPersistedStateLocation
0x14002F8E4: "__cdecl wcsicmp" _wcsicmp
0x1400086B8: "int __cdecl ScGetToken(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScGetToken@@YAHPEAPEAG0@Z
0x14007FDB0: "System\CurrentControlSet\Control" ??_C@_1FA@IMIIAJJK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140018AF0: ScSvcChannelInterfaceSecurityCb
0x140031066: "__cdecl _imp_load_GetAndInitializePlatformObject" __imp_load_GetAndInitializePlatformObject
0x1400895B0: "\SystemRoot" ??_C@_1BI@OMNCDEIM@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x140089FF0: "MaxCreateDeleteCacheEntries" ??_C@_1DI@PIJIHCAP@?$AAM?$AAa?$AAx?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAC?$AAa?$AAc?$AAh?$AAe?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x140089D80: "System\CurrentControlSet\Control" ??_C@_1GA@DOGBMOPF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14007D910: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x14007D688: "__cdecl _imp_DevObjEnumDeviceInfo" __imp_DevObjEnumDeviceInfo
0x14007EAA8: "__cdecl _guard_iat_table" __guard_iat_table
0x14000DAA0: RI_ScSendPnPMessage
0x14006663C: "void __cdecl ScHandleCreateDeleteCache(unsigned short * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?ScHandleCreateDeleteCache@@YAXPEAGKKPEAPEAX@Z
0x14002D614: "unsigned long __cdecl ScRegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?ScRegQueryInfoKeyW@@YAKPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x140064208: "unsigned long __cdecl ScWowRedirectFilePath(unsigned short,unsigned short * __ptr64)" ?ScWowRedirectFilePath@@YAKGPEAG@Z
0x140003CD4: "unsigned long __cdecl ScRemoveService(class CWin32ServiceRecord * __ptr64,int,int)" ?ScRemoveService@@YAKPEAVCWin32ServiceRecord@@HH@Z
0x14007DB38: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140062300: "unsigned long __cdecl ScGetInfString(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScGetInfString@@YAKPEAGPEAPEAG@Z
0x14006C110: ScExtIsPnPDriver
0x140010F10: RQueryServiceConfigW
0x140099AD0: BuiltinDomainSid
0x14006E670: "protected: virtual void * __ptr64 __cdecl CUMDFUnknown::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUMDFUnknown@@MEAAPEAXI@Z
0x140099BE1: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x140031133: memcpy
0x140030978: IsScesrvInitializeServerPresent
0x14007D940: "__cdecl _imp__vsnwprintf_s" __imp__vsnwprintf_s
0x140031072: "__cdecl _tailMerge_wudfplatform_dll" __tailMerge_wudfplatform_dll
0x140003660: "private: static void __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ServiceMemHardCap>::ReportUsageToService(bool,enum wil::ReportingKind,unsigned __int64)" ?ReportUsageToService@?$Feature@U__WilFeatureTraits_Feature_ServiceMemHardCap@@@wil@@CAX_NW4ReportingKind@2@_K@Z
0x140019694: "protected: void __cdecl CScmSyncLockExclusive::InternalUnlock(void) __ptr64" ?InternalUnlock@CScmSyncLockExclusive@@IEAAXXZ
0x140098E50: "__cdecl _hmod__ext_ms_win_core_resourcemanager_l1_2_0_dll" __hmod__ext_ms_win_core_resourcemanager_l1_2_0_dll
0x14007DAD8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140089648: "DID" ??_C@_03CBJDNDMH@DID?$AA@
0x14007DC00: "__cdecl _imp_GetProcessInformation" __imp_GetProcessInformation
0x140061000: RCreateServiceWOW64A
0x140080360: "SvcHostSplitDisable" ??_C@_1CI@ONNNAMFL@?$AAS?$AAv?$AAc?$AAH?$AAo?$AAs?$AAt?$AAS?$AAp?$AAl?$AAi?$AAt?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140001B60: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ServiceMemHardCap>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_ServiceMemHardCap@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x14008AD60: "Unexpected message type" ??_C@_0BI@FPAAENJO@Unexpected?5message?5type?$AA@
0x140099628: ServiceLogonSid
0x140068070: RCloseNotifyHandle
0x14008A4E0: EVENT_UMDF_DEVICE_OFFLINE_RESTART_NO_POOL
0x140052188: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x14007DFD0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x140089298: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140099AD8: NetworkServiceSid
0x140099D08: "struct HKEY__ * __ptr64 __ptr64 g_ManufacturingWildcardServiceKey" ?g_ManufacturingWildcardServiceKey@@3PEAUHKEY__@@EA
0x14002093C: "protected: void __cdecl CWin32ServiceRecord::InitializeDirectTrigger(void) __ptr64" ?InitializeDirectTrigger@CWin32ServiceRecord@@IEAAXXZ
0x1400732D0: "private: long __cdecl WdfDevNode::ApplyLocalPoolPolicyOverrides(void) __ptr64" ?ApplyLocalPoolPolicyOverrides@WdfDevNode@@AEAAJXZ
0x14007D8E0: "__cdecl _imp_memset" __imp_memset
0x140030EA1: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x14007DDA8: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x14007DCF8: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x14007E0E8: "__cdecl _imp_RtlSetGroupSecurityDescriptor" __imp_RtlSetGroupSecurityDescriptor
0x14007DE70: "__cdecl _imp_CloseThreadpoolCleanupGroup" __imp_CloseThreadpoolCleanupGroup
0x140056490: RCreateServiceW
0x14007DD80: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14002FD48: "__cdecl initterm" _initterm
0x14008AAF8: "deleting object with non-zero re" ??_C@_0CH@MKDALBNO@deleting?5object?5with?5non?9zero?5re@
0x14007D7D0: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x14007DF88: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x140014A28: "public: unsigned long __cdecl CServiceRecord::GetStatusFast(struct _SERVICE_STATUS * __ptr64) __ptr64" ?GetStatusFast@CServiceRecord@@QEAAKPEAU_SERVICE_STATUS@@@Z
0x14007E3B0: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x140080338: "TriggerStarted" ??_C@_1BO@ENMMCDHK@?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x14008A8A8: "DebugModeBinaries" ??_C@_1CE@FHOOBLNA@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAM?$AAo?$AAd?$AAe?$AAB?$AAi?$AAn?$AAa?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x14007D7B8: "__cdecl _imp_RpcServerInqDefaultPrincNameW" __imp_RpcServerInqDefaultPrincNameW
0x1400195BC: "protected: void __cdecl CScmSyncLockShared::InternalUnlock(void) __ptr64" ?InternalUnlock@CScmSyncLockShared@@IEAAXXZ
0x14008A418: "WmsgPostNotifyMessage" ??_C@_0BG@CBIHDFBL@WmsgPostNotifyMessage?$AA@
0x140060D20: RCreateServiceA
0x140005E8C: "void __cdecl ScInitializePageCombineTimer(void)" ?ScInitializePageCombineTimer@@YAXXZ
0x140093BC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140093D08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-3" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-3
0x14001B750: "protected: virtual unsigned long __cdecl CDriverRecord::StartInternal(unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,unsigned long) __ptr64" ?StartInternal@CDriverRecord@@MEAAKKPEAU_STRING_PTRSW@@KK@Z
0x140080CA0: "HandlerTimeout" ??_C@_1BO@HDGFBJML@?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140099CD8: "unsigned long g_cCrDelNotifyRequests" ?g_cCrDelNotifyRequests@@3KA
0x14007DDC8: "__cdecl _imp_Sleep" __imp_Sleep
0x14002E238: "unsigned long __cdecl ScRemoveProcessPrivileges(void)" ?ScRemoveProcessPrivileges@@YAKXZ
0x1400A0248: "__cdecl _imp_SpInfGetIndirectString" __imp_SpInfGetIndirectString
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::SetDirectTriggerSubscription(struct _WNF_USER_SUBSCRIPTION * __ptr64) __ptr64" ?SetDirectTriggerSubscription@CServiceRecord@@UEAAXPEAU_WNF_USER_SUBSCRIPTION@@@Z
0x14007E3F8: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x14005E388: "int __cdecl ScCheckDependentAccess(void * __ptr64 * __ptr64,class CServiceRecord * __ptr64,unsigned long,int * __ptr64)" ?ScCheckDependentAccess@@YAHPEAPEAXPEAVCServiceRecord@@KPEAH@Z
0x14001ABF0: "int __cdecl CompareServiceRanks(void * __ptr64,void const * __ptr64,void const * __ptr64)" ?CompareServiceRanks@@YAHPEAXPEBX1@Z
0x140030B90: "__cdecl _imp_load_SpInfIsIndirectString" __imp_load_SpInfIsIndirectString
0x14000483C: ScReleaseRefAndFreeServiceChannelContextUnlocked
0x14007E690: "__cdecl _xi_z" __xi_z
0x140098F48: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x14007DE18: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x14007EB28: "State" ??_C@_1M@LAGHHMEN@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x140099B80: Microsoft_Windows_DriverFrameworks_UserModeEnableBits
0x14008A5A0: "UmdfServiceType" ??_C@_1CA@EBHHHOJL@?$AAU?$AAm?$AAd?$AAf?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140079B9C: "unsigned long __cdecl DmCreateAndSetHostSD(struct DM_ACE_DATA * __ptr64 const,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?DmCreateAndSetHostSD@@YAKQEAUDM_ACE_DATA@@KPEAX1PEAPEAX@Z
0x14008B548: "%s\HostProcess-%s" ??_C@_1CE@IMMEKFKJ@?$AA?$CF?$AAs?$AA?2?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?9?$AA?$CF?$AAs?$AA?$AA@
0x140073A00: "private: int __cdecl WdfDevNode::FindDeviceInfo(void * __ptr64 * __ptr64,struct _DO_DEVINFO_DATA * __ptr64) __ptr64" ?FindDeviceInfo@WdfDevNode@@AEAAHPEAPEAXPEAU_DO_DEVINFO_DATA@@@Z
0x14008A590: EVENT_DM_CREATE_HOST_BEGIN
0x14007D9E8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140099BF8: g_pfnThrowPlatformException
0x14007B778: "const WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::`vftable'" ??_7?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@6B@
0x14000DE50: "public: int __cdecl CServiceDatabase::FindServiceByPointer(class CServiceRecord const * __ptr64,class CServiceRecord * __ptr64 * __ptr64) __ptr64" ?FindServiceByPointer@CServiceDatabase@@QEAAHPEBVCServiceRecord@@PEAPEAV2@@Z
0x14007E148: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x14005AFF8: "protected: void __cdecl CWin32ServiceRecord::HandleRunCommandFailureAction(unsigned long) __ptr64" ?HandleRunCommandFailureAction@CWin32ServiceRecord@@IEAAXK@Z
0x14007E468: "__cdecl _imp_RtlSetEnvironmentVariable" __imp_RtlSetEnvironmentVariable
0x14007E120: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x14001A708: "long __cdecl ScAllocWork(struct _TP_WORK * __ptr64 * __ptr64,void (__cdecl*)(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64),void * __ptr64)" ?ScAllocWork@@YAJPEAPEAU_TP_WORK@@P6AXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU1@@Z2@Z
0x14000E8C8: "unsigned long __cdecl ScGetTokenInformation(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64 * __ptr64)" ?ScGetTokenInformation@@YAKPEAXW4_TOKEN_INFORMATION_CLASS@@PEAPEAX@Z
0x14006E4F0: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@UEAAPEAXI@Z
0x140099638: WorldSid
0x140092C8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_com_psmregister_l1_2_2_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_com_psmregister_l1_2_2_dll
0x140052048: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x140082B38: "SeCreateTokenPrivilege" ??_C@_1CO@JDHOHHKI@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140029090: HwCfgGetCurrentConfiguration
0x14009936C: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x1400984B8: "void * __ptr64 __ptr64 utl::_TreeSentinel" ?_TreeSentinel@utl@@3PEAXEA
0x1400A00B8: "__cdecl _imp_LsaStorePrivateData" __imp_LsaStorePrivateData
0x14008BA10: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1HG@NCOLGOJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140092CEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_chambers_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_chambers_l1_1_1_dll
0x14007E228: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x140063098: "int __cdecl ScIsSvchostDebugValueSet(struct HKEY__ * __ptr64)" ?ScIsSvchostDebugValueSet@@YAHPEAUHKEY__@@@Z
0x14002F920: "__cdecl _C_specific_handler" __C_specific_handler
0x140061E80: "unsigned long __cdecl ScCreateStateRootKeySD(void * __ptr64 * __ptr64)" ?ScCreateStateRootKeySD@@YAKPEAPEAX@Z
0x14007F0D8: "Type" ??_C@_19BIEPDBPA@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1400814E0: "__cdecl _sz_ext_ms_win_secur32_translatename_l1_1_0_dll" __sz_ext_ms_win_secur32_translatename_l1_1_0_dll
0x140098448: "struct HKEY__ * __ptr64 __ptr64 g_hAuditKey" ?g_hAuditKey@@3PEAUHKEY__@@EA
0x1400197F0: MIDL_user_free
0x14007DD88: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x14008A2E8: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14007EDC8: "%ws+%ws" ??_C@_1BA@MLNCPOFO@?$AA?$CF?$AAw?$AAs?$AA?$CL?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14005646C: "unsigned long __cdecl ScWriteDisplayName(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScWriteDisplayName@@YAKPEAUHKEY__@@PEAG@Z
0x140081970: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x14007DD70: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x14002FF6F: "__cdecl _imp_load_AuthziFreeAuditEventType" __imp_load_AuthziFreeAuditEventType
0x140014C10: RI_ScOpenServiceStatusHandle
0x140099BD0: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x140051B68: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x14001ADE0: "void __cdecl wil::details::FreeProcessHeap(void * __ptr64)" ?FreeProcessHeap@details@wil@@YAXPEAX@Z
0x14008A510: EVENT_UMDF_HOST_PROBLEM
0x14007E080: "__cdecl _imp_AddAccessAllowedAce" __imp_AddAccessAllowedAce
0x1400817A0: "__cdecl _sz_api_ms_win_security_lsapolicy_l1_1_0_dll" __sz_api_ms_win_security_lsapolicy_l1_1_0_dll
0x14001AED0: "public: virtual unsigned __int64 __cdecl CServiceRecord::GetUserContext(void) __ptr64" ?GetUserContext@CServiceRecord@@UEAA_KXZ
0x140023010: "void __cdecl ScCreateSpecialGroups(void)" ?ScCreateSpecialGroups@@YAXXZ
0x14007D968: "__cdecl _imp__onexit" __imp__onexit
0x1400306C0: "__cdecl _imp_load_RmRegisterActivityHostCallbacks" __imp_load_RmRegisterActivityHostCallbacks
0x1400A0170: "__cdecl _imp_AuthziInitializeAuditEvent" __imp_AuthziInitializeAuditEvent
0x140089EF0: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1400054E0: "void __cdecl ScDecrementServiceHandlesCountAndRelease(class CServiceRecord * __ptr64,int)" ?ScDecrementServiceHandlesCountAndRelease@@YAXPEAVCServiceRecord@@H@Z
0x140087A20: WNF_SCM_AUTOSTART_STATE
0x1400802E8: "WUDFTrace.etl" ??_C@_1BM@PBBFNEOH@?$AAW?$AAU?$AAD?$AAF?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x140056C70: WPP_SF_SdL
0x14007DA78: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14008A888: "DebugModeFlags" ??_C@_1BO@GPLIEJAF@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAM?$AAo?$AAd?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1400533C4: "void __cdecl ScLogImpersonateFailureEvent(long)" ?ScLogImpersonateFailureEvent@@YAXJ@Z
0x1400898B0: "TransactedServices" ??_C@_1CG@DDGPIBCD@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAa?$AAc?$AAt?$AAe?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x140056BE4: WPP_SF_SLL
0x14005AC80: WPP_SF_SlL
0x140022614: "public: void __cdecl CServiceRecord::UpdateDisplayName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?UpdateDisplayName@CServiceRecord@@QEAAXPEAGPEAPEAG@Z
0x140099700: WPP_REGISTRATION_GUIDS
0x14006AC04: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceCrash(unsigned short const * __ptr64) __ptr64" ?ServiceHealthLogServiceCrash@CWin32ServiceRecord@@QEAAXPEBG@Z
0x140022A50: "protected: int __cdecl CNameEntryList<class CUnresolvedNameEntry>::CreateInternal(unsigned short const * __ptr64,class CUnresolvedNameEntry * __ptr64 * __ptr64) __ptr64" ?CreateInternal@?$CNameEntryList@VCUnresolvedNameEntry@@@@IEAAHPEBGPEAPEAVCUnresolvedNameEntry@@@Z
0x140068D80: WPP_SF_Sql
0x140099250: "long (__cdecl* __ptr64 s_pfnI_RpcOpenClientProcess)(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?s_pfnI_RpcOpenClientProcess@@3P6AJPEAXKPEAPEAX@ZEA
0x140053FA8: WPP_SF_SSl
0x140019370: REnumServicesStatusExA
0x14007B990: "const CUmdfDriverRecord::`vftable'" ??_7CUmdfDriverRecord@@6B@
0x14007D870: "__cdecl _imp_SetConsoleCtrlHandler" __imp_SetConsoleCtrlHandler
0x14000BA90: "protected: virtual unsigned long __cdecl CWin32ServiceRecord::StartInternal(unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,unsigned long) __ptr64" ?StartInternal@CWin32ServiceRecord@@MEAAKKPEAU_STRING_PTRSW@@KK@Z
0x14008B3F0: "(unknown)" ??_C@_1BE@CIGHCOHA@?$AA?$CI?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$CJ?$AA?$AA@
0x1400598F0: ScEndPreshutdown
0x140061F90: "void __cdecl ScDeleteTag(struct HKEY__ * __ptr64)" ?ScDeleteTag@@YAXPEAUHKEY__@@@Z
0x1400803A0: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x14007E438: "__cdecl _imp_NtDeleteObjectAuditAlarm" __imp_NtDeleteObjectAuditAlarm
0x14007E1E8: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1400829A8: "SeLoadDriverPrivilege" ??_C@_1CM@GJCAPIAN@?$AAS?$AAe?$AAL?$AAo?$AAa?$AAd?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1400300E0: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x14007E2A8: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x14002BE30: "private: long __cdecl wil::details_abi::SemaphoreValue::CreateFromValueInternal(unsigned short const * __ptr64,bool,unsigned __int64) __ptr64" ?CreateFromValueInternal@SemaphoreValue@details_abi@wil@@AEAAJPEBG_N_K@Z
0x140001810: RGetServiceRegistryStateKey
0x14007F310: "TelWatSvc" ??_C@_1BE@NHHJFFCM@?$AAT?$AAe?$AAl?$AAW?$AAa?$AAt?$AAS?$AAv?$AAc?$AA?$AA@
0x14007E2E0: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x14007E0F8: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x14000C50C: "public: void __cdecl CServiceRecord::ClearStatusFlag(unsigned long) __ptr64" ?ClearStatusFlag@CServiceRecord@@QEAAXK@Z
0x140020B84: "unsigned long __cdecl ScWriteFailureActions(struct HKEY__ * __ptr64,struct _SERVICE_FAILURE_ACTIONSW * __ptr64)" ?ScWriteFailureActions@@YAKPEAUHKEY__@@PEAU_SERVICE_FAILURE_ACTIONSW@@@Z
0x14007D8F8: "__cdecl _imp__wtol" __imp__wtol
0x1400A0118: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x140024714: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_SvchostSplit>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_SvchostSplit@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x140051C4C: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x14007D8E8: "__cdecl _imp__wtoi" __imp__wtoi
0x14007DA60: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x14000EDC8: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceUptime(unsigned short * __ptr64) __ptr64" ?ServiceHealthLogServiceUptime@CWin32ServiceRecord@@QEAAXPEAG@Z
0x14008A0A0: WPP_ddc7f08601e33342a67631bc31f83589_Traceguids
0x14002C240: "public: virtual int __cdecl CWin32ServiceRecord::IsDirectTriggerStateNameAllocated(void) __ptr64" ?IsDirectTriggerStateNameAllocated@CWin32ServiceRecord@@UEAAHXZ
0x140080060: "ReconfigureDrvMgrAllowed" ??_C@_1DC@IOLEJHHN@?$AAR?$AAe?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAe?$AAD?$AAr?$AAv?$AAM?$AAg?$AAr?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x1400815E0: "ext-ms-win-wer-reporting-l1-1-0" ??_C@_1EA@OHNKPAMH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14000B6F4: "public: void __cdecl CWin32ServiceRecord::CollectAndLogMemoryTelemetry(unsigned long) __ptr64" ?CollectAndLogMemoryTelemetry@CWin32ServiceRecord@@QEAAXK@Z
0x140006BB4: "unsigned long __cdecl ScLogonService(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64 * __ptr64,unsigned long,int,int,int,unsigned long,enum _TRI_BOOL,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?ScLogonService@@YAKPEAG0PEAPEAXKHHHKW4_TRI_BOOL@@111@Z
0x1400802D0: "WUDFTrace" ??_C@_1BE@KEKIGMEB@?$AAW?$AAU?$AAD?$AAF?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x1400197F0: SC_MIDL_user_free
0x14008A1F0: "DriverStatePath" ??_C@_1CA@MIBAJKAO@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1400A0008: "__cdecl _imp_SystemFunction005" __imp_SystemFunction005
0x140093100: ext-ms-win-secur32-translatename-l1-1-0_NULL_THUNK_DATA_DLN
0x14007DDF8: "__cdecl _imp_GlobalMemoryStatusEx" __imp_GlobalMemoryStatusEx
0x14005C5C0: "protected: virtual void * __ptr64 __cdecl SmartPtrRef::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSmartPtrRef@@MEAAPEAXI@Z
0x140023C70: "unsigned long __cdecl ScEnableRpcInterface(void)" ?ScEnableRpcInterface@@YAKXZ
0x140082A38: "SeTcbPrivilege" ??_C@_1BO@DHGLBHEP@?$AAS?$AAe?$AAT?$AAc?$AAb?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140006B88: "int __cdecl ScIsAccountInNtAuthDomain(unsigned short const * __ptr64)" ?ScIsAccountInNtAuthDomain@@YAHPEBG@Z
0x140089F80: "Created" ??_C@_1BA@FFEAJEML@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x1400992B0: "int g_ExemptRemoteCaller" ?g_ExemptRemoteCaller@@3HA
0x140080A90: "TracingPath" ??_C@_1BI@NKBFKIIF@?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14000E4F8: "private: struct utl::pair<class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,bool> __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_EmplaceImpl(struct utl::integral_constant<bool,0>,class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,struct utl::_HashNode<class CServiceRecord * __ptr64> * __ptr64) __ptr64" ?_EmplaceImpl@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEAA?AU?$pair@V?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@utl@@_N@2@U?$integral_constant@_N$0A@@2@V?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@2@PEAU?$_HashNode@PEAVCServiceRecord@@@2@@Z
0x14002C8E0: RI_ScSetServiceBitsW
0x14007DC90: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140099AC8: AnonymousLogonSid
0x1400A0108: "__cdecl _imp_ControlServiceExW" __imp_ControlServiceExW
0x14001DD14: "int __cdecl ScConvertToUnicode(unsigned short * __ptr64 * __ptr64,char const * __ptr64)" ?ScConvertToUnicode@@YAHPEAPEAGPEBD@Z
0x140056E50: WPP_SF_LdSd
0x14005A858: WPP_SF_SdLd
0x14006520C: WPP_SF_SLLL
0x14007E580: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x140031170: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140060514: "void __cdecl ScpSendLowSystemResourcesMessage(void)" ?ScpSendLowSystemResourcesMessage@@YAXXZ
0x140099140: "struct _UNICODE_STRING ScComputerName" ?ScComputerName@@3U_UNICODE_STRING@@A
0x140098E00: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x140003E64: "int __cdecl ScmReleaseResourceSet(class CWin32ServiceRecord * __ptr64)" ?ScmReleaseResourceSet@@YAHPEAVCWin32ServiceRecord@@@Z
0x14000CD10: RI_ScQueryServiceTagInfo
0x14007D590: "const CUMDFUnknown::`vftable'" ??_7CUMDFUnknown@@6B@
0x140093130: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLN
0x1400A0070: "__cdecl _imp_LsaLookupTranslateNames" __imp_LsaLookupTranslateNames
0x140081120: "ext-ms-win-com-psmregister-l1-3-" ??_C@_1EE@IPMBNFIB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AA?9?$AAp?$AAs?$AAm?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA3?$AA?9@
0x140022B08: "public: int __cdecl CNameEntryList<class CNameEntry>::FindOrCreateNameEntry(unsigned short const * __ptr64,int & __ptr64,class CNameEntry * __ptr64 * __ptr64) __ptr64" ?FindOrCreateNameEntry@?$CNameEntryList@VCNameEntry@@@@QEAAHPEBGAEAHPEAPEAVCNameEntry@@@Z
0x14007EF60: SCMEvt_PerfCriticalAutostart_Start
0x140073338: "public: long __cdecl WdfDevNode::ApplyPoolPolicyOverrides(void) __ptr64" ?ApplyPoolPolicyOverrides@WdfDevNode@@QEAAJXZ
0x140056FCC: WPP_SF_SqLd
0x140067A40: "unsigned long __cdecl ScValidateNotificationParams(struct _SC_HANDLE_STRUCT * __ptr64,int,struct _SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2 * __ptr64,union _USERVICE_NOTIFY_CLIENT_IDENTIFIERS * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?ScValidateNotificationParams@@YAKPEAU_SC_HANDLE_STRUCT@@HPEAU_SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2@@PEAT_USERVICE_NOTIFY_CLIENT_IDENTIFIERS@@PEAKPEAH@Z
0x14005A788: WPP_SF_SdLS
0x14006D264: WPP_SF_SSLd
0x14006B53C: RtlStringCbCatW
0x1400A02B0: "__cdecl _imp_LoadProfileBasic" __imp_LoadProfileBasic
0x140080FB0: "__cdecl _sz_ext_ms_win_com_psmregister_l1_2_2_dll" __sz_ext_ms_win_com_psmregister_l1_2_2_dll
0x140089458: "SystemEventsBroker" ??_C@_1CG@JAPHKHFF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x14007E2D8: "__cdecl _imp_NtAccessCheck" __imp_NtAccessCheck
0x14006256C: "unsigned long __cdecl ScGetServiceDisplayName(unsigned short * __ptr64,unsigned short,unsigned short * __ptr64 * __ptr64)" ?ScGetServiceDisplayName@@YAKPEAGGPEAPEAG@Z
0x14007DA00: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x140099CE0: "unsigned long g_cNotifications" ?g_cNotifications@@3KA
0x14002EA10: "public: __cdecl CNameEntryList<class CNameEntry>::CNameEntryList<class CNameEntry>(int) __ptr64" ??0?$CNameEntryList@VCNameEntry@@@@QEAA@H@Z
0x1400308F7: "__cdecl _tailMerge_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __tailMerge_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x14002FFAC: AllocateAndInitializeSid
0x140010E74: "unsigned long __cdecl ScOpenServiceConfigKey(unsigned short const * __ptr64,unsigned long,int,struct HKEY__ * __ptr64 * __ptr64)" ?ScOpenServiceConfigKey@@YAKPEBGKHPEAPEAUHKEY__@@@Z
0x14007DB10: "__cdecl _imp_LoadStringByReference" __imp_LoadStringByReference
0x140079A08: McTemplateU0juuuqqq
0x14002C260: "protected: virtual int __cdecl CWin32ServiceRecord::IsProcessCrashed(void) __ptr64" ?IsProcessCrashed@CWin32ServiceRecord@@MEAAHXZ
0x140030492: "__cdecl _imp_load_PsmRegisterServiceProcess" __imp_load_PsmRegisterServiceProcess
0x1400892EC: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x14001D728: "long __cdecl ScpLastGoodWalkDirectoryTreeHelper(struct _UNICODE_STRING * __ptr64,unsigned long,long (__cdecl*)(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long,void * __ptr64),void * __ptr64,unsigned char * __ptr64,unsigned long,struct _LIST_ENTRY * __ptr64)" ?ScpLastGoodWalkDirectoryTreeHelper@@YAJPEAU_UNICODE_STRING@@KP6AJ00KPEAX@Z1PEAEKPEAU_LIST_ENTRY@@@Z
0x140098EC0: "__cdecl _hmod__ext_ms_win_spinf_inf_l1_1_0_dll" __hmod__ext_ms_win_spinf_inf_l1_1_0_dll
0x140099C10: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1400196C0: RI_ScSendResponseReceiveControls
0x140098F40: "long (__cdecl* __ptr64 g_wil_details_pfnNtUpdateWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnNtUpdateWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@ZEA
0x14006D534: "public: __cdecl WdfServiceKey::WdfServiceKey(class WdfServiceKeyParameters * __ptr64,class WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters> * __ptr64,class WdfObject * __ptr64) __ptr64" ??0WdfServiceKey@@QEAA@PEAVWdfServiceKeyParameters@@PEAV?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@PEAVWdfObject@@@Z
0x140081660: "ext-ms-win-wer-reporting-l1-1-2" ??_C@_1EA@ENNDDIEM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2?$AA?$AA@
0x14007ED58: "NtQueryWnfStateData" ??_C@_0BE@KACOKPLP@NtQueryWnfStateData?$AA@
0x14007EC78: "SystemSetupInProgress" ??_C@_1CM@DHJDDPJO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAe?$AAt?$AAu?$AAp?$AAI?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x14006B6A4: ScDecryptPassword
0x14000DD18: "unsigned long __cdecl ScStatusAccessCheck(class CServiceRecord * __ptr64)" ?ScStatusAccessCheck@@YAKPEAVCServiceRecord@@@Z
0x140098E08: "__cdecl _hmod__CRYPTBASE_dll" __hmod__CRYPTBASE_dll
0x14006BEF4: WPP_SF_ddddddd
0x14007EDB8: "ownproc" ??_C@_1BA@CCCDAOJD@?$AAo?$AAw?$AAn?$AAp?$AAr?$AAo?$AAc?$AA?$AA@
0x14008A5E8: "HostProcessGUID" ??_C@_1CA@JEBFPGAI@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x14007E320: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x14001AED0: "public: virtual enum _TRI_BOOL __cdecl CServiceRecord::GetIsManagedAccount(void) __ptr64" ?GetIsManagedAccount@CServiceRecord@@UEAA?AW4_TRI_BOOL@@XZ
0x1400997A0: "void * __ptr64 __ptr64 g_hAutoStartEvent" ?g_hAutoStartEvent@@3PEAXEA
0x140080628: "Id" ??_C@_15NCCOGFKM@?$AAI?$AAd?$AA?$AA@
0x14007DCE8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000213C: "public: void __cdecl wil::details::EnabledStateManager::EnsureSubscribedToUsageFlush(void (__cdecl*)(void * __ptr64)) __ptr64" ?EnsureSubscribedToUsageFlush@EnabledStateManager@details@wil@@QEAAXP6AXPEAX@Z@Z
0x140099710: WPP_MAIN_CB
0x1400A0098: "__cdecl _imp_LsaLookupGetDomainInfo" __imp_LsaLookupGetDomainInfo
0x1400305FF: "__cdecl _imp_load_RmResourceSetPropertiesInitialize" __imp_load_RmResourceSetPropertiesInitialize
0x14002EA4C: "void __cdecl ScInitTcpKeepAlive(void)" ?ScInitTcpKeepAlive@@YAXXZ
0x140058980: "void __cdecl ScShutdownServiceProcessCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ScShutdownServiceProcessCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x140089CD0: ".\NT Service Control Manager" ??_C@_1DK@NIBCILMM@?$AA?4?$AA?2?$AAN?$AAT?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x140092CAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_resourcemanager_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_resourcemanager_l1_1_0_dll
0x14007D550: "const CDelayStartContext::`vftable'" ??_7CDelayStartContext@@6B@
0x140089D28: WPP_383399240a3236e2144e70d8bdb1f484_Traceguids
0x14007DF60: "__cdecl _imp_CM_Get_DevNode_Registry_PropertyW" __imp_CM_Get_DevNode_Registry_PropertyW
0x140080450: "Service user Log off" ??_C@_1CK@KBIDMMFM@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAL?$AAo?$AAg?$AA?5?$AAo?$AAf?$AAf?$AA?$AA@
0x140030B48: "__cdecl _imp_load_WerReportSetParameter" __imp_load_WerReportSetParameter
0x14008A260: "OSDATA\SYSTEM\SCMConfig" ??_C@_1DA@KNAPIGDP@?$AAO?$AAS?$AAD?$AAA?$AAT?$AAA?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAC?$AAM?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x14008AB50: WPP_8842fac7cb523adf87b2a4ea45f1c12b_Traceguids
0x14006E3A8: "public: virtual __cdecl WdfObject::~WdfObject(void) __ptr64" ??1WdfObject@@UEAA@XZ
0x140093BDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x14007FF80: "AutoRestartDeviceMinRunTimeInSec" ??_C@_1EC@IPOLBLA@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAi?$AAn?$AAR?$AAu?$AAn?$AAT?$AAi?$AAm?$AAe?$AAI?$AAn?$AAS?$AAe?$AAc@
0x14007F358: "Environment" ??_C@_1BI@GGNGIFIL@?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x14007DC88: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1400997D8: "struct IUMDFPlatform * __ptr64 __ptr64 g_Platform" ?g_Platform@@3PEAUIUMDFPlatform@@EA
0x1400997E0: "struct IUMDFPlatformSecurity * __ptr64 __ptr64 g_PlatformSecurity" ?g_PlatformSecurity@@3PEAUIUMDFPlatformSecurity@@EA
0x14002D3B8: "int __cdecl wil_details_StagingConfig_AreAnyFeaturesConfigured(struct wil_details_StagingConfig * __ptr64)" ?wil_details_StagingConfig_AreAnyFeaturesConfigured@@YAHPEAUwil_details_StagingConfig@@@Z
0x14007F0E8: "DependOnGroup" ??_C@_1BM@IOIJILKJ@?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AAO?$AAn?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x1400216FC: "void __cdecl ScGenerateDependencies(class utl::list<struct _SERVICE_DEPENDENCY_DATA,class utl::allocator<struct _SERVICE_DEPENDENCY_DATA> > & __ptr64)" ?ScGenerateDependencies@@YAXAEAV?$list@U_SERVICE_DEPENDENCY_DATA@@V?$allocator@U_SERVICE_DEPENDENCY_DATA@@@utl@@@utl@@@Z
0x140078FA0: "private: int __cdecl WdfProcess::LoadRegistrySettings(void) __ptr64" ?LoadRegistrySettings@WdfProcess@@AEAAHXZ
0x14007E058: "__cdecl _imp_AllocateLocallyUniqueId" __imp_AllocateLocallyUniqueId
0x14000409C: "void __cdecl ScDrainRemoteNotifyQueues(void)" ?ScDrainRemoteNotifyQueues@@YAXXZ
0x140070AD8: "public: long __cdecl DrvMgrLpcNotification::Connect(void * __ptr64,unsigned short const * __ptr64,struct IUMDFLPCCommPortInterface * __ptr64 * __ptr64) __ptr64" ?Connect@DrvMgrLpcNotification@@QEAAJPEAXPEBGPEAPEAUIUMDFLPCCommPortInterface@@@Z
0x14007DD48: "__cdecl _imp_TryAcquireSRWLockExclusive" __imp_TryAcquireSRWLockExclusive
0x140062244: "unsigned long __cdecl ScGetGroupVector(unsigned short * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScGetGroupVector@@YAKPEAGPEAPEAEPEAK@Z
0x14008B6A8: "-HostGUID:" ??_C@_1BG@LHDCLGDP@?$AA?9?$AAH?$AAo?$AAs?$AAt?$AAG?$AAU?$AAI?$AAD?$AA?3?$AA?$AA@
0x140089EF8: "SvcHostDebug" ??_C@_1BK@HHLIDDBE@?$AAS?$AAv?$AAc?$AAH?$AAo?$AAs?$AAt?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?$AA@
0x14008AFB0: "m_SubNode.m_HostGuid should not " ??_C@_0EJ@BMGMDBIK@m_SubNode?4m_HostGuid?5should?5not?5@
0x140025708: "unsigned long __cdecl ScLookupAccount(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?ScLookupAccount@@YAKPEAGPEAPEAG1PEAPEAX@Z
0x1400893F8: "Schedule" ??_C@_1BC@LGMCIBDE@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x1400A0018: "__cdecl _imp_DabUnregisterTriggerConsumer" __imp_DabUnregisterTriggerConsumer
0x140014604: "unsigned long __cdecl ScCreateScManagerHandle(unsigned short * __ptr64,struct _SC_HANDLE_STRUCT * __ptr64 * __ptr64)" ?ScCreateScManagerHandle@@YAKPEAGPEAPEAU_SC_HANDLE_STRUCT@@@Z
0x14007EDA0: "NT SERVICE" ??_C@_1BG@MDKKJHJP@?$AAN?$AAT?$AA?5?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA?$AA@
0x14008B258: "WudfDefaultDevicePool" ??_C@_1CM@BOGOBJBM@?$AAW?$AAu?$AAd?$AAf?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
0x14008A324: ".*" ??_C@_15LMBEHFEA@?$AA?4?$AA?$CK?$AA?$AA@
0x1400522A8: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x1400A0160: "__cdecl _imp_AuthziFreeAuditEventType" __imp_AuthziFreeAuditEventType
0x14001B050: "public: virtual void __cdecl WdfObject::MarkForDelete(void) __ptr64" ?MarkForDelete@WdfObject@@UEAAXXZ
0x14008B9F8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140072544: "private: unsigned long __cdecl WdfTransientDevStateMgr::Initialize(void) __ptr64" ?Initialize@WdfTransientDevStateMgr@@AEAAKXZ
0x14006E790: "private: unsigned long __cdecl WdfDriverManager::AddDeviceToTransientStateList(void * __ptr64,struct _DO_DEVINFO_DATA * __ptr64) __ptr64" ?AddDeviceToTransientStateList@WdfDriverManager@@AEAAKPEAXPEAU_DO_DEVINFO_DATA@@@Z
0x14001DC3C: "int __cdecl ScConvertUnicodeToAnsi(char * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?ScConvertUnicodeToAnsi@@YAHPEAD_KPEBG@Z
0x140099258: "unsigned char g_fDomainMember" ?g_fDomainMember@@3EA
0x14007D9A0: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x14007EBE8: "\SystemRoot\" ??_C@_1BK@DHFJHPDK@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
0x14007E2D0: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x14008B238: "DeviceGroupId" ??_C@_1BM@EILIHMFN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp?$AAI?$AAd?$AA?$AA@
0x140051BD4: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x140093E98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x14007D990: "__cdecl _imp_GetDateFormatW" __imp_GetDateFormatW
0x14006B800: ScWStrArrayStrCount
0x14002C370: "unsigned long __cdecl ScAdjustTokenObjectSecurity(void * __ptr64,void * __ptr64)" ?ScAdjustTokenObjectSecurity@@YAKPEAX0@Z
0x140098EC8: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x140093970: ext-ms-win-security-chambers-l1-1-1_NULL_THUNK_DATA_DLB
0x140003F70: RSetServiceStatus
0x14008B290: "WudfDefaultDevicePoolPriorityHig" ??_C@_1EE@CLGPDOIH@?$AAW?$AAu?$AAd?$AAf?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAo?$AAo?$AAl?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAH?$AAi?$AAg@
0x140099A48: "void (__cdecl* __ptr64 g_wil_details_internalUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_internalUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x140098E20: "__cdecl _hmod__ext_ms_win_com_psmregister_l1_2_2_dll" __hmod__ext_ms_win_com_psmregister_l1_2_2_dll
0x140099420: g_ScServiceChannelLock
0x140027874: "public: static long __cdecl WdfPlatform::InitializeLibrary(struct IUMDFPlatform * __ptr64)" ?InitializeLibrary@WdfPlatform@@SAJPEAUIUMDFPlatform@@@Z
0x1400981E4: "enum _TRI_BOOL ScConnectedToSecProc" ?ScConnectedToSecProc@@3W4_TRI_BOOL@@A
0x14006D448: "unsigned long __cdecl TearDownWudfDriverManager(void)" ?TearDownWudfDriverManager@@YAKXZ
0x14000B010: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceStart(unsigned short const * __ptr64) __ptr64" ?ServiceHealthLogServiceStart@CWin32ServiceRecord@@QEAAXPEBG@Z
0x14005F63C: "protected: void __cdecl CNameEntryList<class CNameEntry>::Remove(class CNameEntry * __ptr64) __ptr64" ?Remove@?$CNameEntryList@VCNameEntry@@@@IEAAXPEAVCNameEntry@@@Z
0x140003400: "public: class wistd::unique_ptr<void,struct wil::process_heap_deleter> & __ptr64 __cdecl wistd::unique_ptr<void,struct wil::process_heap_deleter>::operator=(class wistd::unique_ptr<void,struct wil::process_heap_deleter> &&) __ptr64" ??4?$unique_ptr@XUprocess_heap_deleter@wil@@@wistd@@QEAAAEAV01@$$QEAV01@@Z
0x140065320: WPP_SF_Ldd
0x14007DD60: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x140080DD0: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x1400899D0: "ResetEvent" ??_C@_1BG@JALLCJPP@?$AAR?$AAe?$AAs?$AAe?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x140022400: "public: unsigned long __cdecl CServiceRecord::SetServiceSd(void * __ptr64,int) __ptr64" ?SetServiceSd@CServiceRecord@@QEAAKPEAXH@Z
0x140068A24: WPP_SF_LSd
0x140076F7C: McTemplateU0jzzzq
0x1400A01D0: "__cdecl _imp_RmReleaseResourceSetEx" __imp_RmReleaseResourceSetEx
0x140098DF0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x140082A90: "SeIncreaseQuotaPrivilege" ??_C@_1DC@OJMEBNEI@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14008A290: "SYSTEM\CurrentControlSet\Control" ??_C@_1FG@MLLBNIHE@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14008B1B8: "HostTimeoutSeconds" ??_C@_1CG@PHMLEOIE@?$AAH?$AAo?$AAs?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x1400013B8: "unsigned long __cdecl ScCreateServiceRegistryPersistentStateKey(unsigned short const * __ptr64,unsigned long)" ?ScCreateServiceRegistryPersistentStateKey@@YAKPEBGK@Z
0x140099600: "struct _WNF_STATE_NAME g_ServiceDatabaseChangeStateName" ?g_ServiceDatabaseChangeStateName@@3U_WNF_STATE_NAME@@A
0x14008A4B0: WPP_11262e2552db38c9656e1fdadb33b2f4_Traceguids
0x14001DDD0: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_SvchostMitigationPolicies>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_SvchostMitigationPolicies@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x14007DE98: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1400805C0: "RtlSubscribeWnfStateChangeNotifi" ??_C@_0CH@DLHFNNLE@RtlSubscribeWnfStateChangeNotifi@
0x14007D960: "__cdecl _imp_exit" __imp_exit
0x140050A80: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x14008ACF8: "DrvMgrLpcNotification::PortIsCon" ??_C@_0CH@CELKCKJI@DrvMgrLpcNotification?3?3PortIsCon@
0x140080A10: "SCM.EVM" ??_C@_1BA@OCIBDIOI@?$AAS?$AAC?$AAM?$AA?4?$AAE?$AAV?$AAM?$AA?$AA@
0x140026980: "void __cdecl ScHandleProviderChange(void * __ptr64,unsigned char)" ?ScHandleProviderChange@@YAXPEAXE@Z
0x14001D050: "int __cdecl ScLoadStopReasonString(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long)" ?ScLoadStopReasonString@@YAHPEAGK0K0KK@Z
0x14007ECF8: "OobeInProgress" ??_C@_1BO@NAFNEJGL@?$AAO?$AAo?$AAb?$AAe?$AAI?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1400893B8: "services.exe" ??_C@_0N@NAKABABG@services?4exe?$AA@
0x14002A554: "void __cdecl ScExtpUnregisterTrigger(struct _SERVICE_TRIGGER_SUBSCRIPTION * __ptr64,int)" ?ScExtpUnregisterTrigger@@YAXPEAU_SERVICE_TRIGGER_SUBSCRIPTION@@H@Z
0x14007D6D8: "__cdecl _imp_EACreateAggregateEvent" __imp_EACreateAggregateEvent
0x140014D30: "public: virtual int __cdecl CWin32ServiceRecord::IsNetLogonNeeded(void) __ptr64" ?IsNetLogonNeeded@CWin32ServiceRecord@@UEAAHXZ
0x1400A0158: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLA
0x14007D800: "__cdecl _imp_RpcServerInqBindingHandle" __imp_RpcServerInqBindingHandle
0x140057E04: "unsigned long __cdecl ScRegisterPreshutdownRestart(unsigned short * __ptr64)" ?ScRegisterPreshutdownRestart@@YAKPEAG@Z
0x140052C84: "int __cdecl ScCallerHasTcbPrivilege(void)" ?ScCallerHasTcbPrivilege@@YAHXZ
0x140018488: "unsigned long __cdecl ScValidateAccount(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64)" ?ScValidateAccount@@YAKPEAGPEBGPEAE@Z
0x140099278: "long (__cdecl* __ptr64 s_pfnI_RpcServerTurnOnOffKeepalives)(void * __ptr64,int,unsigned long,unsigned long)" ?s_pfnI_RpcServerTurnOnOffKeepalives@@3P6AJPEAXHKK@ZEA
0x140099620: AuthenticatedUserSid
0x140082AF8: "SeAssignPrimaryTokenPrivilege" ??_C@_1DM@DFENMBKN@?$AAS?$AAe?$AAA?$AAs?$AAs?$AAi?$AAg?$AAn?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1400805A0: "ControlSet000" ??_C@_1BM@DEAICIBD@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA0?$AA?$AA@
0x14007FE88: "DefaultHostProcessGUID" ??_C@_1CO@ENMEDDBK@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x14005ED40: "private: class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64> __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_InsertNode(struct utl::_HashNode<class CNameEntry * __ptr64> * __ptr64,struct utl::_HashNode<class CNameEntry * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?_InsertNode@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEAA?AV?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@2@PEAU?$_HashNode@PEAVCNameEntry@@@2@0_K@Z
0x1400816A0: "ext-ms-win-wer-reporting-l1-1-3" ??_C@_1EA@PFGPFPCJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3?$AA?$AA@
0x14001AE40: ??_E?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x14008B588: "-HostArg:" ??_C@_1BE@OCNIPHEE@?$AA?9?$AAH?$AAo?$AAs?$AAt?$AAA?$AAr?$AAg?$AA?3?$AA?$AA@
0x1400719F0: "public: virtual long __cdecl DrvMgrLpcNotification::PortIsConnected(struct IUMDFLPCConnPortInterface * __ptr64,struct IUMDFLPCCommPortInterface * __ptr64,void * __ptr64,enum _MODE) __ptr64" ?PortIsConnected@DrvMgrLpcNotification@@UEAAJPEAUIUMDFLPCConnPortInterface@@PEAUIUMDFLPCCommPortInterface@@PEAXW4_MODE@@@Z
0x1400984C0: "enum SERVICE_SLOW_STARTUP_MONITORING g_eSlowStartupMonitoringStatus" ?g_eSlowStartupMonitoringStatus@@3W4SERVICE_SLOW_STARTUP_MONITORING@@A
0x14002FCE4: atexit
0x1400992B8: "int g_fDisableRemoteScmEndpoints" ?g_fDisableRemoteScmEndpoints@@3HA
0x1400014C8: "unsigned long __cdecl ScCreateServicePersistentStateKeySD(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?ScCreateServicePersistentStateKeySD@@YAKPEBGPEAPEAX@Z
0x14008AA70: "{2c0a6c48-3046-7713-a07b-18ab5d8" ??_C@_1EO@PODNN@?$AA?$HL?$AA2?$AAc?$AA0?$AAa?$AA6?$AAc?$AA4?$AA8?$AA?9?$AA3?$AA0?$AA4?$AA6?$AA?9?$AA7?$AA7?$AA1?$AA3?$AA?9?$AAa?$AA0?$AA7?$AAb?$AA?9?$AA1?$AA8?$AAa?$AAb?$AA5?$AAd?$AA8@
0x140002F24: "public: bool __cdecl wil::details_abi::heap_buffer::reserve(unsigned __int64) __ptr64" ?reserve@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x14006ED8C: "public: class WdfDevNode * __ptr64 __cdecl WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::Find(class WdfDevNodeParameters * __ptr64,unsigned char,unsigned char,unsigned char * __ptr64,long * __ptr64) __ptr64" ?Find@?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@QEAAPEAVWdfDevNode@@PEAVWdfDevNodeParameters@@EEPEAEPEAJ@Z
0x140082940: "SeSystemtimePrivilege" ??_C@_1CM@BIFFIICD@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAt?$AAi?$AAm?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007E188: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x14008A3A8: "is not" ??_C@_1O@MINIJOEI@?$AAi?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?$AA@
0x14002FFB8: "__cdecl _imp_load_LogonUserExExW" __imp_load_LogonUserExExW
0x14001DAF0: RQueryServiceConfigA
0x14002EB5C: "int __cdecl ScInitThreadPool(void)" ?ScInitThreadPool@@YAHXZ
0x140099A40: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_internalGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_internalGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x140099C08: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x140080938: "Alias" ??_C@_1M@JBLBEOOM@?$AAA?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
0x140099368: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x140080F60: "ext-ms-win-session-usermgr-l1-2-" ??_C@_1EE@POGAKNCO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x1400533FC: "unsigned long __cdecl ScSaveAccount(unsigned short * __ptr64,struct HKEY__ * __ptr64,unsigned short * __ptr64,enum _TRI_BOOL,unsigned short * __ptr64)" ?ScSaveAccount@@YAKPEAGPEAUHKEY__@@0W4_TRI_BOOL@@0@Z
0x1400898D8: "TransactedServices01" ??_C@_1CK@EDCIPPHA@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAa?$AAc?$AAt?$AAe?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA0?$AA1?$AA?$AA@
0x14007B718: "const WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters>::`vftable'" ??_7?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@6B@
0x140085330: GROUP_POLICY_TRIGGER_PROVIDER_GUID
0x1400895C8: WPP_04935e35bbae32fc89708195607faecb_Traceguids
0x14008B318: "Isolated driver: process not new" ??_C@_0CB@NEKJAGHC@Isolated?5driver?3?5process?5not?5new@
0x14007D8A0: "__cdecl _imp_towlower" __imp_towlower
0x140051B4C: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x14008A530: EVENT_DM_HOST_PROBLEM
0x140099160: "struct _IMAGE_RECORD ImageDatabase" ?ImageDatabase@@3U_IMAGE_RECORD@@A
0x140056540: RCreateServiceWOW64W
0x1400939B8: ext-ms-win-scesrv-server-l1-1-0_NULL_THUNK_DATA_DLB
0x140080190: "WdfCtorStatus::SetCtorStatus" ??_C@_0BN@GODLDJAM@WdfCtorStatus?3?3SetCtorStatus?$AA@
0x140099CB0: "void (__cdecl* __ptr64 g_wil_details_pfnFeatureLoggingHook)(unsigned int,struct FEATURE_LOGGED_TRAITS const * __ptr64,struct FEATURE_ERROR const * __ptr64,int,enum wil_ReportingKind const * __ptr64,enum wil_VariantReportingKind const * __ptr64,unsigned char,unsigned __int64)" ?g_wil_details_pfnFeatureLoggingHook@@3P6AXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@ZEA
0x14008ADD8: WPP_7e616bc9714f3028d968fbccd9382e23_Traceguids
0x1400308EB: "__cdecl _imp_load_InitiateSystemShutdownExW" __imp_load_InitiateSystemShutdownExW
0x14007E208: "__cdecl _imp_NtAdjustPrivilegesToken" __imp_NtAdjustPrivilegesToken
0x140051CCC: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x14008BA88: IID_IUMDFPlatform2
0x14007DD68: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x14002FE48: IsAuthziInitializeAuditEventTypePresent
0x1400302CE: "__cdecl _imp_load_LsaLookupManageSidNameMapping" __imp_load_LsaLookupManageSidNameMapping
0x14007DFD8: "__cdecl _imp_EventActivityIdControl" __imp_EventActivityIdControl
0x140008EBC: "void __cdecl ScHandleServiceFailure(class CServiceRecord * __ptr64)" ?ScHandleServiceFailure@@YAXPEAVCServiceRecord@@@Z
0x140098F08: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x140098EE0: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x14001C244: "public: void __cdecl DEFER_LIST::Add(class CServiceRecord * __ptr64) __ptr64" ?Add@DEFER_LIST@@QEAAXPEAVCServiceRecord@@@Z
0x14007DD18: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x14001C974: "void __cdecl ScDeleteRegServiceEntry(unsigned short * __ptr64)" ?ScDeleteRegServiceEntry@@YAXPEAG@Z
0x140007260: "unsigned long __cdecl ScCreateServiceSids(unsigned short * __ptr64,class CWin32ServiceRecord * __ptr64,void * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,int * __ptr64,unsigned long * __ptr64)" ?ScCreateServiceSids@@YAKPEAGPEAVCWin32ServiceRecord@@PEAPEAPEAXPEAK3PEAH3@Z
0x14008B6C0: ""%s" %s%s %s%s %s%s %s%s %s%s %s" ??_C@_1FK@OOOGIGEJ@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs@
0x1400828C0: "SeIncreaseBasePriorityPrivilege" ??_C@_1EA@EIENMLLB@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAB?$AAa?$AAs?$AAe?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140089268: WPP_ThisDir_CTLGUID_UmdfTraceGuid
0x14007EB48: "\ServiceState" ??_C@_1BM@BDMEJFHH@?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14006DF68: "public: virtual __cdecl WdfDriverManager::~WdfDriverManager(void) __ptr64" ??1WdfDriverManager@@UEAA@XZ
0x140099CD0: "struct HKEY__ * __ptr64 __ptr64 g_PersistentServiceRootKey" ?g_PersistentServiceRootKey@@3PEAUHKEY__@@EA
0x14007DCA0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::ResetNetLogonDependency(void) __ptr64" ?ResetNetLogonDependency@CServiceRecord@@UEAAXXZ
0x140089D10: WPP_6f007030c74d32dbfd2762ebc2690b48_Traceguids
0x140030417: "__cdecl _imp_load_UMgrQueryUserContext" __imp_load_UMgrQueryUserContext
0x140003C28: "long __cdecl ScAllocTimer(struct _TP_TIMER * __ptr64 * __ptr64,void (__cdecl*)(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64),void * __ptr64)" ?ScAllocTimer@@YAJPEAPEAU_TP_TIMER@@P6AXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU1@@Z2@Z
0x140099D40: "struct _RTL_SRWLOCK g_Lock" ?g_Lock@@3U_RTL_SRWLOCK@@A
0x140062130: "unsigned long __cdecl ScExpandEnvironmentStrings(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScExpandEnvironmentStrings@@YAKPEBGPEAPEAG@Z
0x14002F590: "unsigned long __cdecl ScChangeAccount(class CServiceRecord * __ptr64,struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,enum _TRI_BOOL,enum _TRI_BOOL,unsigned short * __ptr64)" ?ScChangeAccount@@YAKPEAVCServiceRecord@@PEAUHKEY__@@PEAG2W4_TRI_BOOL@@32@Z
0x140050714: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x140031103: "__cdecl _imp_load_ShutdownPlatformLibrary" __imp_load_ShutdownPlatformLibrary
0x14007E2C8: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x140072A48: "public: __cdecl WdfDevNode::WdfDevNode(class WdfDevNodeParameters * __ptr64,class WdfObjectList<class WdfDevNode,class WdfDevNodeParameters> * __ptr64,class WdfObject * __ptr64) __ptr64" ??0WdfDevNode@@QEAA@PEAVWdfDevNodeParameters@@PEAV?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@PEAVWdfObject@@@Z
0x1400771E8: "public: __cdecl WdfProcess::WdfProcess(class WdfProcessParameters * __ptr64,class WdfObjectList<class WdfProcess,class WdfProcessParameters> * __ptr64,class WdfObject * __ptr64) __ptr64" ??0WdfProcess@@QEAA@PEAVWdfProcessParameters@@PEAV?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@PEAVWdfObject@@@Z
0x14007DA08: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140099110: "int ScGlobalBootAccepted" ?ScGlobalBootAccepted@@3HA
0x14007DE68: "__cdecl _imp_CreateThreadpoolCleanupGroup" __imp_CreateThreadpoolCleanupGroup
0x1400816E0: "__cdecl _sz_ext_ms_win_spinf_inf_l1_1_0_dll" __sz_ext_ms_win_spinf_inf_l1_1_0_dll
0x1400A0260: "__cdecl _imp_WerReportAddDump" __imp_WerReportAddDump
0x140079F04: "public: static void __cdecl WdfPlatform::UmdfDriverStop(enum WdfDriverStopType,unsigned __int64,unsigned short const * __ptr64,char const * __ptr64)" ?UmdfDriverStop@WdfPlatform@@SAXW4WdfDriverStopType@@_KPEBGPEBD@Z
0x14005C670: "public: int __cdecl CServiceDatabase::FindServiceByResumeIndex(unsigned long,class CServiceRecord * __ptr64 * __ptr64) __ptr64" ?FindServiceByResumeIndex@CServiceDatabase@@QEAAHKPEAPEAVCServiceRecord@@@Z
0x1400A0058: "__cdecl _imp_InitializePlatformLibrary" __imp_InitializePlatformLibrary
0x14001B010: "public: virtual void __cdecl CWin32ServiceRecord::SetIsManagedAccount(enum _TRI_BOOL) __ptr64" ?SetIsManagedAccount@CWin32ServiceRecord@@UEAAXW4_TRI_BOOL@@@Z
0x14007E5D8: "__cdecl _imp_NtDeleteValueKey" __imp_NtDeleteValueKey
0x140098148: "struct _SC_NOTIFY_QUEUE_HEAD g_ScNotificationQueueListHead" ?g_ScNotificationQueueListHead@@3U_SC_NOTIFY_QUEUE_HEAD@@A
0x14002F0CC: "unsigned long __cdecl ScRegDeleteValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?ScRegDeleteValue@@YAKPEAUHKEY__@@PEBG@Z
0x14002E63C: "int __cdecl ScIsCallerLocalSystem(void * __ptr64)" ?ScIsCallerLocalSystem@@YAHPEAX@Z
0x1400301E9: "__cdecl _imp_load_LsaLookupOpenLocalPolicy" __imp_load_LsaLookupOpenLocalPolicy
0x14007F428: "AutostartDelay" ??_C@_1BO@MKOMAKDH@?$AAA?$AAu?$AAt?$AAo?$AAs?$AAt?$AAa?$AAr?$AAt?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x140093038: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x140007978: "unsigned long __cdecl ScCreateGroup(unsigned short * __ptr64,class CNameEntry * __ptr64 * __ptr64)" ?ScCreateGroup@@YAKPEAGPEAPEAVCNameEntry@@@Z
0x140089C68: DEVPKEY_Device_DriverInfPath
0x1400891F0: "shared" ??_C@_1O@KKDJANEO@?$AAs?$AAh?$AAa?$AAr?$AAe?$AAd?$AA?$AA@
0x140005E60: "int __cdecl ScIsVirtualServiceAccountName(unsigned short const * __ptr64)" ?ScIsVirtualServiceAccountName@@YAHPEBG@Z
0x14007F3D0: "UserServiceFlags" ??_C@_1CC@BGBFGDLA@?$AAU?$AAs?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14007E4C0: "__cdecl _imp_RtlRandom" __imp_RtlRandom
0x14007E390: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x14007DB60: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140093A58: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x14008B8F8: "WudfHost_%d.dm" ??_C@_1BO@PLFONPID@?$AAW?$AAu?$AAd?$AAf?$AAH?$AAo?$AAs?$AAt?$AA_?$AA?$CF?$AAd?$AA?4?$AAd?$AAm?$AA?$AA@
0x14007F898: "Null" ??_C@_19HGHALIPE@?$AAN?$AAu?$AAl?$AAl?$AA?$AA@
0x140027720: "void __cdecl ScInitializeMemoryTelemetryTimer(void)" ?ScInitializeMemoryTelemetryTimer@@YAXXZ
0x1400A0148: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x140080BC8: "Global\SC_AutoStartComplete" ??_C@_1DI@CLPFADAL@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAA?$AAu?$AAt?$AAo?$AAS?$AAt?$AAa?$AAr?$AAt?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x14001EF74: "unsigned long __cdecl ScReadTag(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScReadTag@@YAKPEAUHKEY__@@PEAK@Z
0x14006A950: "int __cdecl ScShutdownNotificationRoutine(unsigned long)" ?ScShutdownNotificationRoutine@@YAHK@Z
0x14007F370: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x1400228BC: "public: long __cdecl CServiceRecord::SetSecurityObject(unsigned long,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?SetSecurityObject@CServiceRecord@@QEAAJKPEAX0PEAPEAX@Z
0x14008A0D0: "System\CurrentControlSet\Control" ??_C@_1GO@MDGLPJKC@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140026664: "int __cdecl ScIsPrimitiveServicingRunLevelRequested(void)" ?ScIsPrimitiveServicingRunLevelRequested@@YAHXZ
0x1400807C8: "HWID" ??_C@_19PCNKLOMM@?$AAH?$AAW?$AAI?$AAD?$AA?$AA@
0x14008ADE8: "DefaultPool" ??_C@_1BI@KFNEAPGD@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
0x1400804C8: "0x%08lx" ??_C@_1BA@FEJOHNHA@?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?$AA@
0x14007DC50: "__cdecl _imp_RegLoadMUIStringW" __imp_RegLoadMUIStringW
0x1400892D0: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x14000520C: "long __cdecl ScUnregisterImageWait(struct _IMAGE_RECORD * __ptr64)" ?ScUnregisterImageWait@@YAJPEAU_IMAGE_RECORD@@@Z
0x140012B94: "unsigned long __cdecl ScRpcClientAccessCheck(void)" ?ScRpcClientAccessCheck@@YAKXZ
0x14007DCD8: api-ms-win-core-state-helpers-l1-1-0_NULL_THUNK_DATA
0x140001C94: "bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)" ?IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z
0x140014AD8: "protected: void __cdecl CWin32ServiceRecord::GetNextRecoveryAction(struct _SC_ACTION * __ptr64,unsigned long * __ptr64) __ptr64" ?GetNextRecoveryAction@CWin32ServiceRecord@@IEAAXPEAU_SC_ACTION@@PEAK@Z
0x14008B108: "DumpMode" ??_C@_1BC@GOIBPDCH@?$AAD?$AAu?$AAm?$AAp?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14002AA34: "public: void __cdecl CServiceDatabase::GetAutoStartServices(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64,struct HKEY__ * __ptr64) __ptr64" ?GetAutoStartServices@CServiceDatabase@@QEAAXAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@PEAUHKEY__@@@Z
0x140059A30: ScRestartPreshutdownServices
0x14007E4F0: "__cdecl _imp_NtDeleteWnfStateName" __imp_NtDeleteWnfStateName
0x14005F69C: "void __cdecl ScCompareVector(unsigned long * __ptr64,unsigned long,unsigned long * __ptr64)" ?ScCompareVector@@YAXPEAKK0@Z
0x14006A134: "__cdecl TlgDefineProvider_annotation__Tlgg_TelemetryProviderProv" _TlgDefineProvider_annotation__Tlgg_TelemetryProviderProv
0x140099A98: "unsigned long g_SafeBootEnabled" ?g_SafeBootEnabled@@3KA
0x14003086C: "__cdecl _tailMerge_ext_ms_win_secur32_translatename_l1_1_0_dll" __tailMerge_ext_ms_win_secur32_translatename_l1_1_0_dll
0x140089978: "Global\SC_BOOT_SERVICING_DONE" ??_C@_1DM@DKOAJLBP@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAB?$AAO?$AAO?$AAT?$AA_?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAI?$AAN?$AAG?$AA_?$AAD?$AAO?$AAN?$AAE?$AA?$AA@
0x14003042C: IsUMgrQueryUserContextPresent
0x14007E508: "__cdecl _imp_TpPostWork" __imp_TpPostWork
0x1400980E8: "struct _LIST_ENTRY g_TriggerActionContext" ?g_TriggerActionContext@@3U_LIST_ENTRY@@A
0x14007ED48: "Setup" ??_C@_1M@OAMLNNNM@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1400A0180: "__cdecl _imp_AuthziInitializeAuditEventType" __imp_AuthziInitializeAuditEventType
0x140099C18: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x140081310: "ext-ms-win-security-chambers-l1-" ??_C@_1EI@KBKAPKGG@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAh?$AAa?$AAm?$AAb?$AAe?$AAr?$AAs?$AA?9?$AAl?$AA1?$AA?9@
0x140093148: ext-ms-win-spinf-inf-l1-1-0_NULL_THUNK_DATA_DLN
0x140099364: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x140089DE0: "ScRegSetValueExW" ??_C@_1CC@EAFADJAL@?$AAS?$AAc?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AAW?$AA?$AA@
0x14007F328: "WerSvc" ??_C@_1O@BIOOLMM@?$AAW?$AAe?$AAr?$AAS?$AAv?$AAc?$AA?$AA@
0x140099208: "public: static struct IUMDFPlatform * __ptr64 __ptr64 WdfPlatform::Core" ?Core@WdfPlatform@@2PEAUIUMDFPlatform@@EA
0x1400804D8: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x1400984B0: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x1400307C3: "__cdecl _imp_load_DabUnregisterTriggerConsumer" __imp_load_DabUnregisterTriggerConsumer
0x1400A0038: SspiCli_NULL_THUNK_DATA_DLA
0x14007D778: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x140079AC4: McTemplateU0jzz
0x14007F080: "Tag" ??_C@_17COOIMOOP@?$AAT?$AAa?$AAg?$AA?$AA@
0x14007E110: "__cdecl _imp_RtlAddAccessDeniedAce" __imp_RtlAddAccessDeniedAce
0x1400306E4: IsSetNtlmThreadOptionsPresent
0x14008A478: "object release wait failed" ??_C@_0BL@ENLGDFJD@object?5release?5wait?5failed?$AA@
0x14005DCFC: WPP_SF_id
0x140012AB0: REnumServicesStatusExW
0x14007D730: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x14001A330: "int __cdecl ScIsSplitAllowedForService(unsigned short * __ptr64)" ?ScIsSplitAllowedForService@@YAHPEAG@Z
0x1400311D4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x14007E1D8: "__cdecl _imp_RtlSubAuthorityCountSid" __imp_RtlSubAuthorityCountSid
0x140093CA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x14007D918: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14007E220: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x140099C40: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x140068630: RNotifyServiceStatusChange
0x140077104: WPP_SF_IS
0x14007D828: "__cdecl _imp_RpcServerRegisterIf" __imp_RpcServerRegisterIf
0x1400738FC: "public: class WdfServiceKey * __ptr64 __cdecl WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters>::Find(class WdfServiceKeyParameters * __ptr64,unsigned char,unsigned char,unsigned char * __ptr64,long * __ptr64) __ptr64" ?Find@?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@QEAAPEAVWdfServiceKey@@PEAVWdfServiceKeyParameters@@EEPEAEPEAJ@Z
0x14007D8B8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14007D848: "__cdecl _imp_RpcMgmtStopServerListening" __imp_RpcMgmtStopServerListening
0x14008B468: "lpc object not valid" ??_C@_0BF@GBLKEMJJ@lpc?5object?5not?5valid?$AA@
0x14001AED0: "public: virtual int __cdecl CServiceRecord::IsNetLogonNeeded(void) __ptr64" ?IsNetLogonNeeded@CServiceRecord@@UEAAHXZ
0x140098EA0: "__cdecl _hmod__ext_ms_win_scesrv_server_l1_1_0_dll" __hmod__ext_ms_win_scesrv_server_l1_1_0_dll
0x140028914: "void __cdecl WudfVerifyStatic(enum WdfComponentType,void (__cdecl*)(enum WdfDriverStopType,unsigned __int64,unsigned short const * __ptr64,char const * __ptr64),unsigned short const * __ptr64,unsigned long,char const * __ptr64,enum WdfDriverStopType,enum WdfErrorClass,unsigned long,char const * __ptr64,bool)" ?WudfVerifyStatic@@YAXW4WdfComponentType@@P6AXW4WdfDriverStopType@@_KPEBGPEBD@Z3K41W4WdfErrorClass@@K4_N@Z
0x14001E3F4: "unsigned long __cdecl ScCreateServicePersistentStateFolderSD(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?ScCreateServicePersistentStateFolderSD@@YAKPEBGPEAPEAX@Z
0x1400A02A8: "__cdecl _imp_UnloadProfileBasic" __imp_UnloadProfileBasic
0x14008B218: "HostPriority" ??_C@_1BK@KGLHJFNG@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x14007DB48: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x14007DCC0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140081488: "ext-ms-win-desktopappx-l1-1-4" ??_C@_1DM@FPDICGAP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAa?$AAp?$AAp?$AAx?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA4?$AA?$AA@
0x1400101AC: "unsigned long __cdecl ScGetEffectiveTriggerInfoKey(unsigned short const * __ptr64,struct HKEY__ * __ptr64,unsigned long,int,int * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?ScGetEffectiveTriggerInfoKey@@YAKPEBGPEAUHKEY__@@KHPEAHPEAPEAU1@@Z
0x14000E5C8: "private: class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64> __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_InsertNode(struct utl::_HashNode<class CServiceRecord * __ptr64> * __ptr64,struct utl::_HashNode<class CServiceRecord * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?_InsertNode@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEAA?AV?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@2@PEAU?$_HashNode@PEAVCServiceRecord@@@2@0_K@Z
0x14006BDB0: WPP_SF_DDDSSS
0x14007DAF0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400992A0: "int g_StateSeparationEnabled" ?g_StateSeparationEnabled@@3HA
0x140030EAD: "__cdecl _tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll" __tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll
0x14007DEE8: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x14000D110: "public: unsigned long __cdecl CServiceDatabase::GetUserServicesBySessionIdAndTemplate(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64,unsigned long,class CServiceRecord * __ptr64) __ptr64" ?GetUserServicesBySessionIdAndTemplate@CServiceDatabase@@QEAAKAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@KPEAVCServiceRecord@@@Z
0x14008A7F0: "\\.\%s" ??_C@_1O@GHDNIFBI@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140030286: "__cdecl _imp_load_LsaLookupClose" __imp_load_LsaLookupClose
0x14002E418: "void __cdecl ScWriteLogHeader(void)" ?ScWriteLogHeader@@YAXXZ
0x1400893C8: "LoadUserProfile" ??_C@_1CA@BMFIOCDD@?$AAL?$AAo?$AAa?$AAd?$AAU?$AAs?$AAe?$AAr?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x140093C40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1400894B8: "CoreMessagingRegistrar" ??_C@_1CO@BIFEFAIE@?$AAC?$AAo?$AAr?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAi?$AAn?$AAg?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAa?$AAr?$AA?$AA@
0x14001AF90: RI_ScSetServiceBitsA
0x140027A04: "private: __cdecl DrvMgrLpcNotification::DrvMgrLpcNotification(class DrvMgrCmdLineArguments * __ptr64) __ptr64" ??0DrvMgrLpcNotification@@AEAA@PEAVDrvMgrCmdLineArguments@@@Z
0x14002937C: "private: void __cdecl wil::details::FeatureStateManager::EnsureSubscribedToProcessWideUsageFlushUnderLock(void) __ptr64" ?EnsureSubscribedToProcessWideUsageFlushUnderLock@FeatureStateManager@details@wil@@AEAAXXZ
0x14001AD30: "int __cdecl wil_details_SetEnabledAndHasNotificationStateCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetEnabledAndHasNotificationStateCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x140098210: "struct _SC_EVENTS_INFO * g_ScEventsInfo" ?g_ScEventsInfo@@3PAU_SC_EVENTS_INFO@@A
0x1400021B4: "public: void __cdecl wil::details::EnabledStateManager::SubscribeFeaturePropertyCacheToEnabledStateChanges(union wil_details_FeaturePropertyCache * __ptr64,enum wil_FeatureChangeTime) __ptr64" ?SubscribeFeaturePropertyCacheToEnabledStateChanges@EnabledStateManager@details@wil@@QEAAXPEATwil_details_FeaturePropertyCache@@W4wil_FeatureChangeTime@@@Z
0x1400812C0: "ext-ms-win-security-chambers-l1-" ??_C@_1EI@BJBMJNAD@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAh?$AAa?$AAm?$AAb?$AAe?$AAr?$AAs?$AA?9?$AAl?$AA1?$AA?9@
0x14007D700: EventAggregation_NULL_THUNK_DATA
0x14008B000: "WdfDevNode::WdfDevNode" ??_C@_0BH@OJPACMJI@WdfDevNode?3?3WdfDevNode?$AA@
0x140012C50: RCloseServiceHandle
0x1400938E0: CRYPTBASE_NULL_THUNK_DATA_DLB
0x14008A840: "WdfDriverManager::StartActivityL" ??_C@_0CD@GFDFKMA@WdfDriverManager?3?3StartActivityL@
0x14005AD68: WPP_SF_I
0x14005AD68: WPP_SF_i
0x1400A0068: "__cdecl _imp_LsaLookupManageSidNameMapping" __imp_LsaLookupManageSidNameMapping
0x14007F128: "Guid" ??_C@_19BPBMCKGC@?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x14002905C: "struct HINSTANCE__ * __ptr64 __cdecl wil_details_GetNtDllModuleHandle(void)" ?wil_details_GetNtDllModuleHandle@@YAPEAUHINSTANCE__@@XZ
0x14007F880: "PlugPlay" ??_C@_1BC@ELGABKHP@?$AAP?$AAl?$AAu?$AAg?$AAP?$AAl?$AAa?$AAy?$AA?$AA@
0x140099698: "void * __ptr64 __ptr64 g_hProcessToken" ?g_hProcessToken@@3PEAXEA
0x14007E400: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x1400310F1: "__cdecl _imp_load_InitializePlatformLibrary" __imp_load_InitializePlatformLibrary
0x140008BE4: "unsigned long __cdecl ScStartMarkedServicesInServiceSet(class CServiceRecord * __ptr64,unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,int,unsigned long,class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScStartMarkedServicesInServiceSet@@YAKPEAVCServiceRecord@@KPEAU_STRING_PTRSW@@KHKAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x1400939D0: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLB
0x14007E3C0: "__cdecl _imp_NtDeleteFile" __imp_NtDeleteFile
0x14007D9F0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140098E10: "__cdecl _hmod__ext_ms_win_session_usermgr_l1_1_0_dll" __hmod__ext_ms_win_session_usermgr_l1_1_0_dll
0x140080868: "RebootMessage" ??_C@_1BM@OGMLABBP@?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x14002FD04: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1400817D0: "__cdecl _sz_api_ms_win_service_private_l1_1_0_dll" __sz_api_ms_win_service_private_l1_1_0_dll
0x1400030EC: "private: void __cdecl wil::details_abi::FeatureStateData::RetrieveUsageUnderLock(struct wil::details_abi::UsageIndexes & __ptr64) __ptr64" ?RetrieveUsageUnderLock@FeatureStateData@details_abi@wil@@AEAAXAEAUUsageIndexes@23@@Z
0x1400A00C8: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x14002F104: ScWStrArraySize
0x14007DA58: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x14007DFE0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x140020A00: "public: virtual unsigned long __cdecl CServiceRecord::Initialize(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64,class CNameEntry * __ptr64,unsigned long) __ptr64" ?Initialize@CServiceRecord@@UEAAKPEBGKKKKPEAXPEAVCNameEntry@@K@Z
0x1400055A0: "void __cdecl ScmpHostActivityCallback(struct _RM_ACTIVITY_HOST_CALLBACK_PAYLOAD * __ptr64)" ?ScmpHostActivityCallback@@YAXPEAU_RM_ACTIVITY_HOST_CALLBACK_PAYLOAD@@@Z
0x140028F14: ?EnsureSubscribedToStateChangesUnderLock@FeatureStateManager@details@wil@@CAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@3@U__WIL__WNF_STATE_NAME@@PEAX@Z
0x14008A700: "WdfMajorVersion" ??_C@_1CA@IEEMFIBP@?$AAW?$AAd?$AAf?$AAM?$AAa?$AAj?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1400A0200: ext-ms-win-scesrv-server-l1-1-0_NULL_THUNK_DATA_DLA
0x14003114C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14007DDB0: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x14007FE00: "-ProcMgmtName:" ??_C@_1BO@EIFCFNJ@?$AA?9?$AAP?$AAr?$AAo?$AAc?$AAM?$AAg?$AAm?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x140025220: "void __cdecl ScRegisterServicesForTriggerAction(unsigned long)" ?ScRegisterServicesForTriggerAction@@YAXK@Z
0x14007E0D8: "__cdecl _imp_RtlSetOwnerSecurityDescriptor" __imp_RtlSetOwnerSecurityDescriptor
0x14007F5D8: "TDI" ??_C@_17DJGEICGH@?$AAT?$AAD?$AAI?$AA?$AA@
0x140069CE0: "unsigned long __cdecl ScGrantAccess(struct _SC_HANDLE_STRUCT * __ptr64,unsigned long)" ?ScGrantAccess@@YAKPEAU_SC_HANDLE_STRUCT@@K@Z
0x140080640: "HardwareConfigState" ??_C@_1CI@BGBHIIGO@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14007D680: "__cdecl _imp_DevObjGetDeviceInfoListDetail" __imp_DevObjGetDeviceInfoListDetail
0x1400676FC: "void __cdecl ScSendNotifyQueueResults(struct _SC_NOTIFY_QUEUE * __ptr64,struct _RPC_ASYNC_STATE * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScSendNotifyQueueResults@@YAXPEAU_SC_NOTIFY_QUEUE@@PEAPEAU_RPC_ASYNC_STATE@@PEAK@Z
0x14002DFAC: "void __cdecl ScCheckEventsEnabledState(void)" ?ScCheckEventsEnabledState@@YAXXZ
0x14007F1B8: "ServiceDll" ??_C@_1BG@KAEKMFMF@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAl?$AAl?$AA?$AA@
0x14006EF54: "public: int __cdecl WdfDevNode::IsCurrentlyPooled(void) __ptr64" ?IsCurrentlyPooled@WdfDevNode@@QEAAHXZ
0x140058824: "void __cdecl ScSendShutdownMessage(class CServiceRecord * __ptr64)" ?ScSendShutdownMessage@@YAXPEAVCServiceRecord@@@Z
0x14007E308: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x140017F14: "unsigned short __cdecl ScGetThreadUILanguage(void)" ?ScGetThreadUILanguage@@YAGXZ
0x14002D2F0: "int __cdecl wil_QueryFeatureState(struct wil_FeatureState * __ptr64,unsigned int,int,enum wil_FeatureStore,int * __ptr64)" ?wil_QueryFeatureState@@YAHPEAUwil_FeatureState@@IHW4wil_FeatureStore@@PEAH@Z
0x14007FD48: UMDF_PROVIDER
0x14005C1C0: "void __cdecl ScLogRecoveryFailure(enum _SC_ACTION_TYPE,unsigned short const * __ptr64,unsigned long)" ?ScLogRecoveryFailure@@YAXW4_SC_ACTION_TYPE@@PEBGK@Z
0x14002B7B0: "bool __cdecl ScCompareServicesByGroupIndex(class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64)" ?ScCompareServicesByGroupIndex@@YA_NAEBV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@0@Z
0x1400A0030: "__cdecl _imp_LogonUserExExW" __imp_LogonUserExExW
0x14001AED0: "public: virtual unsigned short __cdecl CServiceRecord::GetSharedProcId(void) __ptr64" ?GetSharedProcId@CServiceRecord@@UEAAGXZ
0x14002DE44: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_PackagedServices>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_PackagedServices@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x140089618: "PreshutdownOrder" ??_C@_1CC@JPJCOLMB@?$AAP?$AAr?$AAe?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x14002EB00: "public: virtual struct _WNF_USER_SUBSCRIPTION * __ptr64 __cdecl CWin32ServiceRecord::GetDirectTriggerSubscription(void) __ptr64" ?GetDirectTriggerSubscription@CWin32ServiceRecord@@UEAAPEAU_WNF_USER_SUBSCRIPTION@@XZ
0x14007D888: "__cdecl _imp_memcmp" __imp_memcmp
0x14005C290: "unsigned short * __ptr64 __cdecl StringDup(unsigned short const * __ptr64)" ?StringDup@@YAPEAGPEBG@Z
0x140054D0C: "unsigned long __cdecl ScCanonDriverImagePath(unsigned long,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScCanonDriverImagePath@@YAKKPEAGPEAPEAG@Z
0x140030298: "__cdecl _imp_load_LsaLookupFreeMemory" __imp_load_LsaLookupFreeMemory
0x140004550: "public: virtual unsigned long __cdecl CWin32ServiceRecord::SendControl(unsigned short * __ptr64,unsigned long,unsigned long,union _CONTROL_ARGS * __ptr64,unsigned long,unsigned long * __ptr64,int,unsigned long,unsigned short const * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64,int) __ptr64" ?SendControl@CWin32ServiceRecord@@UEAAKPEAGKKPEAT_CONTROL_ARGS@@KPEAKHKPEBGPEAPEAK2H@Z
0x14000F5D0: "void __cdecl ScLogStatusChange(class CServiceRecord * __ptr64,struct _EVENT_DESCRIPTOR const * __ptr64,unsigned short const * __ptr64)" ?ScLogStatusChange@@YAXPEAVCServiceRecord@@PEBU_EVENT_DESCRIPTOR@@PEBG@Z
0x14007E100: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x14005C5EC: "public: int __cdecl CServiceRecord::AllocateDeletedCacheEntry(void) __ptr64" ?AllocateDeletedCacheEntry@CServiceRecord@@QEAAHXZ
0x140010330: "unsigned long __cdecl ScGetTriggerInfo(unsigned short const * __ptr64,struct HKEY__ * __ptr64,unsigned long,int,int,struct _SERVICE_TRIGGER_INFO * __ptr64 * __ptr64)" ?ScGetTriggerInfo@@YAKPEBGPEAUHKEY__@@KHHPEAPEAU_SERVICE_TRIGGER_INFO@@@Z
0x1400981F8: "unsigned long g_dwScControlMessageTimeout" ?g_dwScControlMessageTimeout@@3KA
0x14001A93C: "void __cdecl ScNotifyNdis(class CServiceRecord * __ptr64)" ?ScNotifyNdis@@YAXPEAVCServiceRecord@@@Z
0x14007E1D0: "__cdecl _imp_RtlGetDeviceFamilyInfoEnum" __imp_RtlGetDeviceFamilyInfoEnum
0x140026578: "void __cdecl ScmInitializeRMSupport(void)" ?ScmInitializeRMSupport@@YAXXZ
0x140010D78: "unsigned long __cdecl ScGetSvchostServiceBinary(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScGetSvchostServiceBinary@@YAKPEBGPEAPEAG@Z
0x14005F6CC: "class CNameEntry * __ptr64 __cdecl ScGetNamedGroupRecord(unsigned short const * __ptr64)" ?ScGetNamedGroupRecord@@YAPEAVCNameEntry@@PEBG@Z
0x14006A134: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x140081540: "ext-ms-win-scesrv-server-l1-1-0" ??_C@_1EA@IFMJLBGB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAc?$AAe?$AAs?$AAr?$AAv?$AA?9?$AAs?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14001AFF0: "public: virtual void __cdecl CWin32ServiceRecord::ResetNetLogonDependency(void) __ptr64" ?ResetNetLogonDependency@CWin32ServiceRecord@@UEAAXXZ
0x1400306AE: "__cdecl _imp_load_RmReleaseResourceSetEx" __imp_load_RmReleaseResourceSetEx
0x14001AF10: "public: virtual struct _IMAGE_RECORD * __ptr64 __cdecl CWin32ServiceRecord::GetImageRecord(void) __ptr64" ?GetImageRecord@CWin32ServiceRecord@@UEAAPEAU_IMAGE_RECORD@@XZ
0x14007DC58: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x140004478: "void __cdecl ScCompleteAbortAsyncRpc(struct _RPC_ASYNC_STATE * __ptr64,unsigned long,int)" ?ScCompleteAbortAsyncRpc@@YAXPEAU_RPC_ASYNC_STATE@@KH@Z
0x14008A608: "m_DriverHostGuid should not be N" ??_C@_0CE@IPNGCAMP@m_DriverHostGuid?5should?5not?5be?5N@
0x14007B2A8: "const CServiceRecord::`vftable'" ??_7CServiceRecord@@6B@
0x14007D678: "__cdecl _imp_DevObjGetDeviceInstanceId" __imp_DevObjGetDeviceInstanceId
0x140030B6C: "__cdecl _imp_load_WerReportSubmit" __imp_load_WerReportSubmit
0x140089D48: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x140089F38: "disabled" ??_C@_1BC@LGPIFEA@?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14007E008: "__cdecl _imp_EqualSid" __imp_EqualSid
0x14008B410: "WdfObjectList<class WdfDevNode,c" ??_C@_0ED@KFGPJGAJ@WdfObjectList?$DMclass?5WdfDevNode?0c@
0x1400801B0: "constructor already failed " ??_C@_0BM@BLEHPGME@constructor?5already?5failed?6?$AA@
0x14007D760: "__cdecl _imp_UuidCreateNil" __imp_UuidCreateNil
0x140056454: "unsigned long __cdecl ScReadDisplayNameFromRegistry(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScReadDisplayNameFromRegistry@@YAKPEAUHKEY__@@PEAPEAG@Z
0x1400981EA: g_header_init_InitializeStagingHeaderInternalApi
0x140089318: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x14008A350: "{8ECC055D-047F-11D1-A537-0000F87" ??_C@_1EO@PFJFCFJC@?$AA?$HL?$AA8?$AAE?$AAC?$AAC?$AA0?$AA5?$AA5?$AAD?$AA?9?$AA0?$AA4?$AA7?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAA?$AA5?$AA3?$AA7?$AA?9?$AA0?$AA0?$AA0?$AA0?$AAF?$AA8?$AA7@
0x140098ED8: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x140078BE8: "private: long __cdecl WdfProcess::LaunchSecureCompanionProcess(unsigned short * __ptr64,struct _WDF_COMPANION_PROCESS_SETTINGS * __ptr64,void * __ptr64,void * __ptr64,unsigned long) __ptr64" ?LaunchSecureCompanionProcess@WdfProcess@@AEAAJPEAGPEAU_WDF_COMPANION_PROCESS_SETTINGS@@PEAX2K@Z
0x140015D3C: "protected: unsigned short * __ptr64 __cdecl CServiceRecord::ReadDisplayNameFromRegistry(void) __ptr64" ?ReadDisplayNameFromRegistry@CServiceRecord@@IEAAPEAGXZ
0x1400804F0: "\Registry\Machine\System\LastKno" ??_C@_1HI@JJAPFIHO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAK?$AAn?$AAo@
0x14007E3B8: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x140007D18: "unsigned long __cdecl ScReadPrivileges(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScReadPrivileges@@YAKPEAUHKEY__@@PEAPEAGPEAK@Z
0x14007E408: "__cdecl _imp_RtlReplaceSystemDirectoryInPath" __imp_RtlReplaceSystemDirectoryInPath
0x140093E5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x14007DB70: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140098EF0: "__cdecl _hmod__api_ms_win_service_private_l1_1_0_dll" __hmod__api_ms_win_service_private_l1_1_0_dll
0x14007DD08: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x14007E2B0: "__cdecl _imp_NtAccessCheckAndAuditAlarm" __imp_NtAccessCheckAndAuditAlarm
0x14003038C: "__cdecl _imp_load_UMgrQueryDefaultAccountToken" __imp_load_UMgrQueryDefaultAccountToken
0x140022DEC: "public: int __cdecl CNameEntry::Initialize(unsigned short const * __ptr64) __ptr64" ?Initialize@CNameEntry@@QEAAHPEBG@Z
0x1400896D0: " ===============================" ??_C@_0BGC@HCLOHJBL@?6?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN@
0x140001F18: "public: void __cdecl wil::details_abi::FeatureStateData::RecordUsage(void) __ptr64" ?RecordUsage@FeatureStateData@details_abi@wil@@QEAAXXZ
0x140054580: "unsigned long __cdecl ScCleanupThread(void)" ?ScCleanupThread@@YAKXZ
0x14000F54C: "void __cdecl ScNotifyServiceStatusChange(class CServiceRecord * __ptr64,unsigned long)" ?ScNotifyServiceStatusChange@@YAXPEAVCServiceRecord@@K@Z
0x140030B5A: "__cdecl _imp_load_WerReportCloseHandle" __imp_load_WerReportCloseHandle
0x14007D8A8: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x140081448: "ext-ms-win-desktopappx-l1-1-3" ??_C@_1DM@MCOPBOLG@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAa?$AAp?$AAp?$AAx?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3?$AA?$AA@
0x14001A764: "unsigned long __cdecl ScUpdateServiceRecordConfig(class CServiceRecord * __ptr64,unsigned long,unsigned long,unsigned long,enum _TRI_BOOL * __ptr64,unsigned short * __ptr64,unsigned char * __ptr64)" ?ScUpdateServiceRecordConfig@@YAKPEAVCServiceRecord@@KKKPEAW4_TRI_BOOL@@PEAGPEAE@Z
0x140098498: "class CNameEntry * __ptr64 __ptr64 ScGlobalTDIGroup" ?ScGlobalTDIGroup@@3PEAVCNameEntry@@EA
0x140092E4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll
0x140008F20: "public: int __cdecl CServiceRecord::AreDependenciesStarted(int & __ptr64,int & __ptr64,int & __ptr64) __ptr64" ?AreDependenciesStarted@CServiceRecord@@QEAAHAEAH00@Z
0x14007DC48: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x14007FE20: "DrvMgrLpcNotification" ??_C@_1CM@MLCAHGPG@?$AAD?$AAr?$AAv?$AAM?$AAg?$AAr?$AAL?$AAp?$AAc?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140001ECC: "public: void __cdecl wil::details::EnabledStateManager::OnTimer(void) __ptr64" ?OnTimer@EnabledStateManager@details@wil@@QEAAXXZ
0x14007E3D8: "__cdecl _imp_TpSetTimer" __imp_TpSetTimer
0x14008B9F8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140080CC0: "ServicesPipeTimeout" ??_C@_1CI@LGNGMOJF@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAP?$AAi?$AAp?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x14007E158: "__cdecl _imp_TpAllocPool" __imp_TpAllocPool
0x140082788: "SeAuditPrivilege" ??_C@_1CC@IBLEJACI@?$AAS?$AAe?$AAA?$AAu?$AAd?$AAi?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007DB28: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x140093840: SspiCli_NULL_THUNK_DATA_DLB
0x140089D20: "%u!" ??_C@_03JHPCMALH@?$CFu?$CB?$AA@
0x14001CCB0: REnumDependentServicesW
0x14001ADE0: "void __cdecl operator delete(void * __ptr64,struct std::nothrow_t const & __ptr64)" ??3@YAXPEAXAEBUnothrow_t@std@@@Z
0x1400899B8: "FontCache" ??_C@_1BE@HFKGFFOL@?$AAF?$AAo?$AAn?$AAt?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x140099AE0: LocalServiceSid
0x140028724: "public: __cdecl WdfObject::WdfObject(unsigned short const * __ptr64,class WdfObject * __ptr64,unsigned char,enum RdType) __ptr64" ??0WdfObject@@QEAA@PEBGPEAV0@EW4RdType@@@Z
0x14002FFC4: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x14002FD04: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140089328: "RpcImpersonateClient" ??_C@_1CK@EGADGLKC@?$AAR?$AAp?$AAc?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x140002670: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::FindInsertionPointOrIncrement(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?FindInsertionPointOrIncrement@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAEPEAX_KI@Z
0x14007D758: "__cdecl _imp_RpcAsyncAbortCall" __imp_RpcAsyncAbortCall
0x14006C0B0: ScExtGetSystemWow64Directory
0x14007D748: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x140099A58: "unsigned __int64 g_PreshutdownStartTime" ?g_PreshutdownStartTime@@3_KA
0x1400612D0: REnumDependentServicesA
0x1400301D7: "__cdecl _imp_load_DestroyEnvBlock" __imp_load_DestroyEnvBlock
0x140089E50: "System\CurrentControlSet\Control" ??_C@_1IK@ONEDDMHI@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140099A68: "unsigned long g_dwSafebootLen" ?g_dwSafebootLen@@3KA
0x14000FC10: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140098F10: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x140089578: "%SystemRoot%\" ??_C@_1BM@EGAEJFL@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AA?$AA@
0x14005268C: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x1400195E4: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x14007E050: "__cdecl _imp_AddAccessAllowedAceEx" __imp_AddAccessAllowedAceEx
0x14005F8E0: "int __cdecl ScIsGroupOrdered(unsigned short const * __ptr64)" ?ScIsGroupOrdered@@YAHPEBG@Z
0x140099A90: "unsigned long ScShutdownInProgress" ?ScShutdownInProgress@@3KA
0x1400581E4: "unsigned long __cdecl ScSendPreshutdownControl(class CServiceRecord * __ptr64)" ?ScSendPreshutdownControl@@YAKPEAVCServiceRecord@@@Z
0x140080698: "RtlGetPersistedStateLocation" ??_C@_0BN@EEOFOFNM@RtlGetPersistedStateLocation?$AA@
0x140092DEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_1_dll
0x14007EF10: "svchost.exe -k" ??_C@_1BO@HMBLMDJA@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?9?$AAk?$AA?$AA@
0x140099580: "class CNameEntryList<class CNameEntry> StandaloneGroupList" ?StandaloneGroupList@@3V?$CNameEntryList@VCNameEntry@@@@A
0x14007DE38: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x140052450: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x14007FD98: "wudfsvc" ??_C@_1BA@HOINCBOM@?$AAw?$AAu?$AAd?$AAf?$AAs?$AAv?$AAc?$AA?$AA@
0x14007E108: "__cdecl _imp_RtlGetAce" __imp_RtlGetAce
0x140007800: "unsigned long __cdecl ScCreateProcessAttributeList(unsigned short const * __ptr64,unsigned long,unsigned short,unsigned short const * __ptr64,struct _PROC_THREAD_ATTRIBUTE_LIST * __ptr64 * __ptr64)" ?ScCreateProcessAttributeList@@YAKPEBGKG0PEAPEAU_PROC_THREAD_ATTRIBUTE_LIST@@@Z
0x14008A230: "Win32ServiceStateRoot" ??_C@_1CM@EJFOHJD@?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1400A0048: "__cdecl _imp_WdfGetLpcInterface" __imp_WdfGetLpcInterface
0x14002B72C: "unsigned long __cdecl ScReadServiceSidType(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScReadServiceSidType@@YAKPEAUHKEY__@@PEAK@Z
0x140075CCC: "public: void __cdecl WdfDevNode::PrintDevNode(void) __ptr64" ?PrintDevNode@WdfDevNode@@QEAAXXZ
0x14007E310: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x14007E500: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x140081B30: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1IG@OHMGLNLA@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140093028: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLN
0x14001BB0C: "private: bool __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_Rehash(unsigned char) __ptr64" ?_Rehash@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEAA_NE@Z
0x14002FF90: NdrAsyncServerCall
0x140099A30: "void (__cdecl* __ptr64 g_wil_details_RecordSRUMFeatureUsage)(unsigned int,unsigned int,unsigned int)" ?g_wil_details_RecordSRUMFeatureUsage@@3P6AXIII@ZEA
0x140061400: REnumServicesStatusA
0x14001AE40: ??_G?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x14007D6B8: "__cdecl _imp_EADeleteAggregateEvent" __imp_EADeleteAggregateEvent
0x140081990: "RtlUnsubscribeWnfNotificationWai" ??_C@_0CP@IJFJHHED@RtlUnsubscribeWnfNotificationWai@
0x1400818A0: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x14007DEB0: "__cdecl _imp_CloseThreadpool" __imp_CloseThreadpool
0x140093B00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x14001B290: "long __cdecl StringCbCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCatW@@YAJPEAG_KPEBG@Z
0x14001AED0: "public: virtual unsigned short * __ptr64 __cdecl CServiceRecord::GetAliasName(void) __ptr64" ?GetAliasName@CServiceRecord@@UEAAPEAGXZ
0x1400A0010: CRYPTBASE_NULL_THUNK_DATA_DLA
0x14005ABD4: WPP_SF_Sdii
0x14006986C: WPP_SF_Siid
0x140060100: RQueryServiceLockStatusW
0x1400A0288: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLA
0x140076A5C: "public: int __cdecl WdfDevNode::TerminateDevNode(struct _WDFPROCMGMT_MESSAGE_CLOSE_PROCESS * __ptr64) __ptr64" ?TerminateDevNode@WdfDevNode@@QEAAHPEAU_WDFPROCMGMT_MESSAGE_CLOSE_PROCESS@@@Z
0x14007EF30: "None" ??_C@_19KLMLHLJG@?$AAN?$AAo?$AAn?$AAe?$AA?$AA@
0x140099378: "unsigned __int64 volatile s_ullControlSequence" ?s_ullControlSequence@@3_KC
0x140003174: "private: void __cdecl wil::details::EnabledStateManager::RecordCachedUsageUnderLock(void) __ptr64" ?RecordCachedUsageUnderLock@EnabledStateManager@details@wil@@AEAAXXZ
0x14002F1F4: "int __cdecl ScIsProcessSCMStarted(unsigned long,unsigned long)" ?ScIsProcessSCMStarted@@YAHKK@Z
0x14007E4E8: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x14002F850: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::EnabledStateManager>::Destroy(void) __ptr64" ?Destroy@?$manually_managed_shutdown_aware_object@VEnabledStateManager@details@wil@@@wil@@QEAAXXZ
0x140089290: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1400785A8: "public: virtual __cdecl WdfProcess::~WdfProcess(void) __ptr64" ??1WdfProcess@@UEAA@XZ
0x140054C3C: "void __cdecl ScStartCtrlSetCleanupThread(void)" ?ScStartCtrlSetCleanupThread@@YAXXZ
0x14007D6E8: "__cdecl _imp_EaFreeAggregatedEventParameters" __imp_EaFreeAggregatedEventParameters
0x14006ED48: "public: class WdfDevNode * __ptr64 __cdecl WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::EnumFirst(class WdfObject * __ptr64) __ptr64" ?EnumFirst@?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@QEAAPEAVWdfDevNode@@PEAVWdfObject@@@Z
0x140053C2C: WPP_SF_
0x1400A0278: "__cdecl _imp_WerReportCloseHandle" __imp_WerReportCloseHandle
0x14000C914: "public: unsigned long __cdecl CServiceRecord::GetRealServiceType(void) __ptr64" ?GetRealServiceType@CServiceRecord@@QEAAKXZ
0x14007F2E0: "LocalSystem" ??_C@_1BI@PGNBMAD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14006EAC8: "private: int __cdecl WdfDriverManager::DisableDevice(unsigned long) __ptr64" ?DisableDevice@WdfDriverManager@@AEAAHK@Z
0x140099CF8: "struct _GUID g_SCMProcessGuid" ?g_SCMProcessGuid@@3U_GUID@@A
0x14008AF00: "minkernel\wdf\framework\umdf\dri" ??_C@_1HC@FHMEBEOJ@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAd?$AAr?$AAi@
0x14007DA70: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400155A0: "unsigned long __cdecl ScCreateLock(int,unsigned short * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?ScCreateLock@@YAKHPEAGPEAXPEAPEAX@Z
0x140065C1C: "unsigned long __cdecl ScCheckClientThreadId(unsigned long,unsigned __int64,void * __ptr64 * __ptr64)" ?ScCheckClientThreadId@@YAKK_KPEAPEAX@Z
0x14002EF64: "unsigned long __cdecl ScWriteDependencies(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long)" ?ScWriteDependencies@@YAKPEAUHKEY__@@PEAGK@Z
0x140089F90: "Got" ??_C@_17KEHKGBCG@?$AAG?$AAo?$AAt?$AA?$AA@
0x14007DAE8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x14008A400: "WMsgApi.dll" ??_C@_1BI@LOOKDJOO@?$AAW?$AAM?$AAs?$AAg?$AAA?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14007F9D0: "System\CurrentControlSet\Control" ??_C@_1GC@KHNCMIHB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140080998: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x140099248: "int g_fEnableTakeOwnershipEvent" ?g_fEnableTakeOwnershipEvent@@3HA
0x14001AF90: "protected: virtual unsigned long __cdecl CServiceRecord::StartInternal(unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,unsigned long) __ptr64" ?StartInternal@CServiceRecord@@MEAAKKPEAU_STRING_PTRSW@@KK@Z
0x14007F380: "DisplayName" ??_C@_1BI@EEKPCHLN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1400931B0: profapi_NULL_THUNK_DATA_DLN
0x14007F5B8: "ntsvcs" ??_C@_1O@MOOFDCBA@?$AAn?$AAt?$AAs?$AAv?$AAc?$AAs?$AA?$AA@
0x140085340: "Microsoft-Windows-BfeTriggerProv" ??_C@_1EK@LJCEGNLC@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAB?$AAf?$AAe?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAP?$AAr?$AAo?$AAv@
0x140062D20: "unsigned long __cdecl ScGetServiceNamesReferencingModule(struct _TAG_INFO_NAMES_REFERENCING_MODULE_IN_PARAMS * __ptr64,struct _TAG_INFO_NAMES_REFERENCING_MODULE_OUT_PARAMS * __ptr64 * __ptr64)" ?ScGetServiceNamesReferencingModule@@YAKPEAU_TAG_INFO_NAMES_REFERENCING_MODULE_IN_PARAMS@@PEAPEAU_TAG_INFO_NAMES_REFERENCING_MODULE_OUT_PARAMS@@@Z
0x14007E5D0: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x140014410: "unsigned long __cdecl ScAccessCheckAndAudit(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,struct _SC_HANDLE_STRUCT * __ptr64,void * __ptr64,unsigned long,int,struct _GENERIC_MAPPING const * __ptr64)" ?ScAccessCheckAndAudit@@YAKPEAG00PEAU_SC_HANDLE_STRUCT@@PEAXKHPEBU_GENERIC_MAPPING@@@Z
0x14007DDA0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x140092ECC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140001D4C: "void __cdecl wil::details_abi::RecordWnfUsageIndex(struct __WIL__WNF_STATE_NAME const * __ptr64,unsigned __int64,class wil::details_abi::RawUsageIndex const & __ptr64)" ?RecordWnfUsageIndex@details_abi@wil@@YAXPEBU__WIL__WNF_STATE_NAME@@_KAEBVRawUsageIndex@12@@Z
0x14000B77C: "public: unsigned long __cdecl CWin32ServiceRecord::QueryMemoryUsage(void) __ptr64" ?QueryMemoryUsage@CWin32ServiceRecord@@QEAAKXZ
0x140015B68: "unsigned long __cdecl ScGetClientSid(struct _TOKEN_USER * __ptr64 * __ptr64)" ?ScGetClientSid@@YAKPEAPEAU_TOKEN_USER@@@Z
0x14007E0E0: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x140050ACC: "public: void __cdecl wil::details_abi::SemaphoreValue::Destroy(void) __ptr64" ?Destroy@SemaphoreValue@details_abi@wil@@QEAAXXZ
0x140099370: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x140025B04: "void __cdecl ScStartPhase2Services(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScStartPhase2Services@@YAXAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14007DBF0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x14007E1F8: "__cdecl _imp_RtlNewSecurityObject" __imp_RtlNewSecurityObject
0x14008B990: "WdfObjectList<class WdfProcess,c" ??_C@_0ED@KPOLGJAC@WdfObjectList?$DMclass?5WdfProcess?0c@
0x140067440: "void __cdecl ScRpcNotifyClientDisconnectCb(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,enum _RPC_ASYNC_EVENT)" ?ScRpcNotifyClientDisconnectCb@@YAXPEAU_RPC_ASYNC_STATE@@PEAXW4_RPC_ASYNC_EVENT@@@Z
0x14001FBFC: "unsigned long __cdecl ScReadServiceType(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScReadServiceType@@YAKPEAUHKEY__@@PEAK@Z
0x14007D7A8: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x1400064AC: "void __cdecl ConvertToValidPraid(unsigned short * __ptr64,unsigned __int64)" ?ConvertToValidPraid@@YAXPEAG_K@Z
0x14007E288: "__cdecl _imp_NtPrivilegeCheck" __imp_NtPrivilegeCheck
0x1400852B8: NETWORK_ENDPOINT_TRIGGER_PROVIDER_GUID
0x140092CCC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_resourcemanager_l1_2_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_resourcemanager_l1_2_0_dll
0x14007D6A8: "__cdecl _imp_DevObjDestroyDeviceInfoList" __imp_DevObjDestroyDeviceInfoList
0x14007D978: "__cdecl _imp__initterm" __imp__initterm
0x14007D790: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x140093B8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x140030134: "__cdecl _tailMerge_profapi_dll" __tailMerge_profapi_dll
0x14007DD10: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x14001E7D8: GetServiceFileStateRoot
0x14007F958: "System\\Setup" ??_C@_1BM@GGKCGBG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x14002EC2C: "int __cdecl ScInitDatabase(void)" ?ScInitDatabase@@YAHXZ
0x14007F730: "SvcHostSplitThresholdInKB" ??_C@_1DE@DCJMPCA@?$AAS?$AAv?$AAc?$AAH?$AAo?$AAs?$AAt?$AAS?$AAp?$AAl?$AAi?$AAt?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAI?$AAn?$AAK?$AAB?$AA?$AA@
0x1400819F0: "internal\sdk\inc\wil/Staging.h" ??_C@_0BP@KCGEFLDE@internal?2sdk?2inc?2wil?1Staging?4h?$AA@
0x140050F4C: "unsigned long __cdecl wil::details::GetLastErrorFail(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64)" ?GetLastErrorFail@details@wil@@YAKPEAXIPEBD110@Z
0x14007E4A0: "__cdecl _imp_NtUnloadDriver" __imp_NtUnloadDriver
0x14007D718: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x14007D6F0: "__cdecl _imp_BriDeleteBrokeredEvent" __imp_BriDeleteBrokeredEvent
0x140030128: "__cdecl _imp_load_LoadProfileBasic" __imp_load_LoadProfileBasic
0x14006CED0: ScExtStoreClearPassword
0x14007D9E0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14008A2F8: "TracingBuffers" ??_C@_1BO@KOOLKAEK@?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x1400266F4: "unsigned long __cdecl ScStartStagedBootServices(void)" ?ScStartStagedBootServices@@YAKXZ
0x14006A6B4: "void __cdecl ScPopulateAllowRemoteAccessServicesExemptionList(void)" ?ScPopulateAllowRemoteAccessServicesExemptionList@@YAXXZ
0x140012400: "unsigned long __cdecl ScReadDependencies(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?ScReadDependencies@@YAKPEAUHKEY__@@PEAPEAGPEBG@Z
0x14005AA68: WPP_SF_Sdddd
0x140030AF4: IsWerReportCreatePresent
0x1400984C8: "unsigned long g_cScMaxNotifyRequests" ?g_cScMaxNotifyRequests@@3KA
0x14002CB54: "unsigned long __cdecl ScMakeServiceTokenWriteRestricted(unsigned short const * __ptr64,void * __ptr64,void * __ptr64,unsigned long,struct _TOKEN_GROUPS * __ptr64,void * __ptr64 * __ptr64)" ?ScMakeServiceTokenWriteRestricted@@YAKPEBGPEAX1KPEAU_TOKEN_GROUPS@@PEAPEAX@Z
0x14007D900: "__cdecl _imp__ultow_s" __imp__ultow_s
0x14006EB74: "public: long __cdecl WdfDriverManager::DrvMgrDeviceArrival(unsigned short const * __ptr64,enum _WUDF_SERVICE_TYPE,unsigned short const * __ptr64,unsigned char * __ptr64,class WdfDevNode * __ptr64 * __ptr64) __ptr64" ?DrvMgrDeviceArrival@WdfDriverManager@@QEAAJPEBGW4_WUDF_SERVICE_TYPE@@0PEAEPEAPEAVWdfDevNode@@@Z
0x14001B4B0: "unsigned long __cdecl ScCreateNotificationSecurityDescriptor(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?ScCreateNotificationSecurityDescriptor@@YAKPEAXKPEAPEAX@Z
0x1400898A0: "TRUE" ??_C@_04HCDDPBNL@TRUE?$AA@
0x140093E48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140057348: "unsigned long __cdecl ScPrepareServicePreshutdownList(struct _SERVICE_PRESHUTDOWN_DATA * __ptr64,unsigned long,struct _SERVICE_PRESHUTDOWN_DATA * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScPrepareServicePreshutdownList@@YAKPEAU_SERVICE_PRESHUTDOWN_DATA@@KPEAPEAU1@PEAK@Z
0x140098F20: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x14007DA18: "__cdecl _imp_SetFileInformationByHandle" __imp_SetFileInformationByHandle
0x140099CC4: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_ServiceMemHardCap@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x1400507CC: "public: void * __ptr64 __cdecl wil::details::EnabledStateManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GEnabledStateManager@details@wil@@QEAAPEAXI@Z
0x14008ACB0: "WaitForSingleObject m_Thread fai" ??_C@_0CE@CGCJHMLO@WaitForSingleObject?5m_Thread?5fai@
0x14007F338: "FailureActions" ??_C@_1BO@DAAOJNDI@?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14001EAE0: ScAllocateAndInitializeSid
0x14000ACC0: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceRunning(unsigned short const * __ptr64) __ptr64" ?ServiceHealthLogServiceRunning@CWin32ServiceRecord@@QEAAXPEBG@Z
0x14002F8FC: wcsrchr
0x140089598: "System32\" ??_C@_1BE@OJHIEDGB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$AA@
0x140064FE8: WPP_SF_dSSdD
0x14005EF00: WPP_SF_SSddd
0x14006B4E0: RpcpStopRpcServer
0x140089860: WPP_160e8362a85e3e92378458ba2680886b_Traceguids
0x14008B818: "WdfProcess::MarkForDelete is not" ??_C@_0CI@EKNPAJCP@WdfProcess?3?3MarkForDelete?5is?5not@
0x140089838: WNF_UBPM_PRESHUTDOWN_PHASE
0x14007FE60: "ListObjectNoName" ??_C@_1CC@PICKIPDD@?$AAL?$AAi?$AAs?$AAt?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAo?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140099408: AliasAdminsSid
0x14007DEB8: "__cdecl _imp_TrySubmitThreadpoolCallback" __imp_TrySubmitThreadpoolCallback
0x1400A0220: ext-ms-win-security-chambers-l1-1-1_NULL_THUNK_DATA_DLA
0x1400A0280: "__cdecl _imp_WerReportCreate" __imp_WerReportCreate
0x140070318: "public: static int __cdecl WdfDriverManager::_IsTestSigningEnabled(void)" ?_IsTestSigningEnabled@WdfDriverManager@@SAHXZ
0x14007E498: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x14007DE88: "__cdecl _imp_CloseThreadpoolCleanupGroupMembers" __imp_CloseThreadpoolCleanupGroupMembers
0x140071CD0: WPP_SF_qqdqdqP
0x14007DDF0: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x14007D988: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x14007FC40: "I_RpcOpenClientProcess" ??_C@_0BH@DMICBGKD@I_RpcOpenClientProcess?$AA@
0x140089518: "BinaryPathName" ??_C@_1BO@LIMEFIDN@?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAP?$AAa?$AAt?$AAh?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140002264: "public: __cdecl wil::details_abi::RawUsageIndex::RawUsageIndex(unsigned short,unsigned short,enum wil::details_abi::CountSize,unsigned short,enum wil::details_abi::CountSize) __ptr64" ??0RawUsageIndex@details_abi@wil@@QEAA@GGW4CountSize@12@G0@Z
0x14007E370: "__cdecl _imp_NtCreateWnfStateName" __imp_NtCreateWnfStateName
0x140093C04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x140093D1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x14002AB40: RQueryServiceConfig2W
0x14008A800: "\driverstore\" ??_C@_1BM@EHIDDFLJ@?$AA?2?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?2?$AA?$AA@
0x14007ECA8: "ServiceStartTimeout" ??_C@_1CI@BMKPKEHE@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x1400810D0: "ext-ms-win-com-psmregister-l1-2-" ??_C@_1EE@OJGCBNJE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AA?9?$AAp?$AAs?$AAm?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x14007ECD0: "FuzzServiceStart" ??_C@_1CC@IJHDANME@?$AAF?$AAu?$AAz?$AAz?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14002FF4B: "__cdecl _imp_load_AuthziLogAuditEvent" __imp_load_AuthziLogAuditEvent
0x14007F5C8: "PNP_TDI" ??_C@_1BA@IGOCPLIH@?$AAP?$AAN?$AAP?$AA_?$AAT?$AAD?$AAI?$AA?$AA@
0x140081620: "ext-ms-win-wer-reporting-l1-1-1" ??_C@_1EA@FPGGJHKC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?$AA@
0x140058D60: "void __cdecl ScShutdownServices(void)" ?ScShutdownServices@@YAXXZ
0x14002EC98: "unsigned long __cdecl ScIsValidWow64Type(unsigned short)" ?ScIsValidWow64Type@@YAKG@Z
0x140099264: "unsigned long g_globalMemorySoftCap" ?g_globalMemorySoftCap@@3KA
0x14007F188: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x140080C68: "SECURITY_SERVICES_STARTED" ??_C@_1DE@HHJKPBEH@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA_?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AAS?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AAE?$AAD?$AA?$AA@
0x140016F54: "private: void __cdecl CDelayStartContext::ReorderServices(void) __ptr64" ?ReorderServices@CDelayStartContext@@AEAAXXZ
0x140016D10: RControlServiceExW
0x14007FB60: "system\currentcontrolset\control" ??_C@_1GC@GAJBLHJJ@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAs?$AAe?$AAt?$AA?2?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14005EDD8: "private: bool __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_Rehash(unsigned char) __ptr64" ?_Rehash@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEAA_NE@Z
0x14008A3F8: "%x" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x1400704FC: StringCchPrintfW
0x140061870: RQueryServiceConfig2A
0x14007E010: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x14007D610: "unsigned short const * __ptr64 * s_pszServicesForOobe" ?s_pszServicesForOobe@@3PAPEBGA
0x140080618: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1400696B4: "unsigned long __cdecl ScCreateServiceHandle(class CServiceRecord * __ptr64,struct _SC_HANDLE_STRUCT * __ptr64 * __ptr64)" ?ScCreateServiceHandle@@YAKPEAVCServiceRecord@@PEAPEAU_SC_HANDLE_STRUCT@@@Z
0x14007F7C8: "SvcMemHardLimitInMB" ??_C@_1CI@JPOAPEDG@?$AAS?$AAv?$AAc?$AAM?$AAe?$AAm?$AAH?$AAa?$AAr?$AAd?$AAL?$AAi?$AAm?$AAi?$AAt?$AAI?$AAn?$AAM?$AAB?$AA?$AA@
0x140030A69: "__cdecl _imp_load_WerReportAddDump" __imp_load_WerReportAddDump
0x14001AB20: "public: unsigned long __cdecl CWin32ServiceRecord::RemoveServiceBits(void) __ptr64" ?RemoveServiceBits@CWin32ServiceRecord@@QEAAKXZ
0x1400939A8: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLB
0x14007DB18: api-ms-win-core-localization-private-l1-1-0_NULL_THUNK_DATA
0x140020344: "unsigned long __cdecl ScCreateScServiceObject(void * __ptr64 * __ptr64)" ?ScCreateScServiceObject@@YAKPEAPEAX@Z
0x140098EA8: "__cdecl _hmod__ext_ms_win_wer_reporting_l1_1_0_dll" __hmod__ext_ms_win_wer_reporting_l1_1_0_dll
0x1400029B8: "private: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsageInternal(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsageInternal@RawUsageIndex@details_abi@wil@@AEAA_NPEAX_K01I@Z
0x14006A180: "void __cdecl ScProcessHandleIsSignaled(void * __ptr64,unsigned char)" ?ScProcessHandleIsSignaled@@YAXPEAXE@Z
0x14007DB80: "__cdecl _imp_CreateThread" __imp_CreateThread
0x14007E028: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x14007E268: "__cdecl _imp_NtSetSystemEnvironmentValue" __imp_NtSetSystemEnvironmentValue
0x140099B40: "int g_ManufacturingModeKeysInitialized" ?g_ManufacturingModeKeysInitialized@@3HA
0x14008B120: "UMDF" ??_C@_19NLGGECCC@?$AAU?$AAM?$AAD?$AAF?$AA?$AA@
0x140082718: "SeChangeNotifyPrivilege" ??_C@_1DA@LMDCKBMN@?$AAS?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140014854: "int __cdecl ScIsLocalSystemAccount(unsigned short const * __ptr64)" ?ScIsLocalSystemAccount@@YAHPEBG@Z
0x140021B10: "public: int __cdecl CServiceRecord::AddStopDependency(class CServiceRecord * __ptr64) __ptr64" ?AddStopDependency@CServiceRecord@@QEAAHPEAV1@@Z
0x140056600: RCreateWowService
0x14007E5F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14007D750: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x14000251C: "private: bool __cdecl wil::details::FeatureStateManager::EnsureStateData(void) __ptr64" ?EnsureStateData@FeatureStateManager@details@wil@@AEAA_NXZ
0x140070DB0: "public: virtual void __cdecl DrvMgrLpcNotification::Message(struct IUMDFLPCPortInterface * __ptr64,struct _PORT_MESSAGE * __ptr64,enum _MODE,unsigned long,void * __ptr64,unsigned short,void * __ptr64,unsigned __int64) __ptr64" ?Message@DrvMgrLpcNotification@@UEAAXPEAUIUMDFLPCPortInterface@@PEAU_PORT_MESSAGE@@W4_MODE@@KPEAXG3_K@Z
0x140069BA0: "int __cdecl ScCheckRemoteCallerIsAllowed(unsigned short const * __ptr64)" ?ScCheckRemoteCallerIsAllowed@@YAHPEBG@Z
0x14008B840: "WdfProcess::~WdfProcess" ??_C@_0BI@ICKBBFNO@WdfProcess?3?3?$HOWdfProcess?$AA@
0x14007D6E0: "__cdecl _imp_EaQueryAggregatedEventParameters" __imp_EaQueryAggregatedEventParameters
0x14007D950: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x140002E5C: "public: bool __cdecl wil::details_abi::UsageIndexProperty::AddToCount(unsigned int) __ptr64" ?AddToCount@UsageIndexProperty@details_abi@wil@@QEAA_NI@Z
0x140006550: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x14002D70C: "int __cdecl ScIsDependOnLaterGroup(class CNameEntry * __ptr64,class CNameEntry * __ptr64,enum _DEPEND_TYPE)" ?ScIsDependOnLaterGroup@@YAHPEAVCNameEntry@@0W4_DEPEND_TYPE@@@Z
0x1400598A0: SC_SERVICE_CHANNEL_CONTEXT_HANDLE_rundown
0x140073028: "private: long __cdecl WdfDevNode::ApplyGlobalPoolPolicyOverrides(void) __ptr64" ?ApplyGlobalPoolPolicyOverrides@WdfDevNode@@AEAAJXZ
0x14007DA30: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x140089610: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x14007E540: "__cdecl _imp_NtCreateUserProcess" __imp_NtCreateUserProcess
0x140003060: "public: void __cdecl wil::details_abi::UsageIndexes::Record(void) __ptr64" ?Record@UsageIndexes@details_abi@wil@@QEAAXXZ
0x140014E80: "unsigned long __cdecl ScStartServiceAndDependencies(class CServiceRecord * __ptr64,unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long,unsigned long,class CServiceRecord * __ptr64)" ?ScStartServiceAndDependencies@@YAKPEAVCServiceRecord@@KPEAU_STRING_PTRSW@@KK0@Z
0x140021588: "unsigned long __cdecl ScResolveDependencyToService(class CServiceRecord * __ptr64)" ?ScResolveDependencyToService@@YAKPEAVCServiceRecord@@@Z
0x14007DB78: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14002EE20: "unsigned long __cdecl ScValidateTriggerInfo(unsigned short const * __ptr64,struct _SERVICE_TRIGGER_INFO * __ptr64)" ?ScValidateTriggerInfo@@YAKPEBGPEAU_SERVICE_TRIGGER_INFO@@@Z
0x140052780: "int __cdecl wil_details_SetHasNotificationStateCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetHasNotificationStateCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x140099AC0: ServiceBaseSid
0x14007DEC0: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x14007ED18: "system\Setup" ??_C@_1BK@LOAEDMEF@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x14007E3A8: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1400A02C0: profapi_NULL_THUNK_DATA_DLA
0x14005F050: "public: virtual void * __ptr64 __cdecl CDriverRecord::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDriverRecord@@UEAAPEAXI@Z
0x14001827C: "public: void __cdecl CServiceRecord::SetStatusFlag(unsigned long) __ptr64" ?SetStatusFlag@CServiceRecord@@QEAAXK@Z
0x140079550: "public: int __cdecl WdfProcess::TerminateProcess(struct WUDF_PROBLEM * __ptr64,bool,unsigned short const * __ptr64) __ptr64" ?TerminateProcess@WdfProcess@@QEAAHPEAUWUDF_PROBLEM@@_NPEBG@Z
0x14005EC28: "private: bool __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_FindKey(class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64>,class CNameEntry * __ptr64 const & __ptr64,unsigned __int64,struct utl::_HashNode<class CNameEntry * __ptr64> * __ptr64 * __ptr64) __ptr64" ?_FindKey@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEAA_NV?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@2@AEBQEAVCNameEntry@@_KPEAPEAU?$_HashNode@PEAVCNameEntry@@@2@@Z
0x14007E0C0: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x14007E3C8: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x14006E918: "unsigned long __cdecl CheckForDevicePresence(unsigned short * __ptr64,int * __ptr64)" ?CheckForDevicePresence@@YAKPEAGPEAH@Z
0x14002FF27: "__cdecl _imp_load_AuthziInitializeAuditParams" __imp_load_AuthziInitializeAuditParams
0x140072EA4: "public: virtual __cdecl WdfDevNode::~WdfDevNode(void) __ptr64" ??1WdfDevNode@@UEAA@XZ
0x14007DE50: api-ms-win-core-sysinfo-l1-2-3_NULL_THUNK_DATA
0x140081790: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x140081AB0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1HI@NDEIMGG@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140098DF8: "__cdecl _hmod__profapi_dll" __hmod__profapi_dll
0x14007E2F0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140099130: "struct _UNICODE_STRING ScAccountDomain" ?ScAccountDomain@@3U_UNICODE_STRING@@A
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::SetWowType(unsigned short) __ptr64" ?SetWowType@CServiceRecord@@UEAAXG@Z
0x14007EF80: SCMEvt_Autostart_Start
0x140018D00: RI_ScOpenServiceChannelHandle
0x1400015B0: "unsigned long __cdecl ScOpenPersistentServiceKey(unsigned short const * __ptr64,unsigned long,unsigned long,int,struct HKEY__ * __ptr64 * __ptr64)" ?ScOpenPersistentServiceKey@@YAKPEBGKKHPEAPEAUHKEY__@@@Z
0x14007D9B0: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x14000207C: "public: void __cdecl wil::details::EnabledStateManager::QueueBackgroundUsageReporting(unsigned int,union wil_details_FeaturePropertyCache & __ptr64) __ptr64" ?QueueBackgroundUsageReporting@EnabledStateManager@details@wil@@QEAAXIAEATwil_details_FeaturePropertyCache@@@Z
0x1400813C8: "ext-ms-win-desktopappx-l1-1-1" ??_C@_1DM@GIOGNGDN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAa?$AAp?$AAp?$AAx?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?$AA@
0x14007E378: "__cdecl _imp_NtOpenThread" __imp_NtOpenThread
0x14007F924: "%u" ??_C@_02GMHACPFF@?$CFu?$AA@
0x14007DE30: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14007E688: "__cdecl _xi_a" __xi_a
0x14007DE40: api-ms-win-core-sysinfo-l1-2-0_NULL_THUNK_DATA
0x140052418: "void __cdecl wil::details::WilApi_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApi_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x14002B7F0: "public: virtual void __cdecl CWin32ServiceRecord::GenerateServiceTag(void) __ptr64" ?GenerateServiceTag@CWin32ServiceRecord@@UEAAXXZ
0x14007DBF8: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1400852D0: "Microsoft-Windows-GroupPolicyTri" ??_C@_1FK@JBCJOOJD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAG?$AAr?$AAo?$AAu?$AAp?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAT?$AAr?$AAi@
0x14007DE08: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140089E30: "StateFlags" ??_C@_1BG@ODDHDMII@?$AAS?$AAt?$AAa?$AAt?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14007D9B8: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x140080DE0: "ext-ms-win-authz-context-l1-1-0" ??_C@_1EA@LIPJHOAE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAu?$AAt?$AAh?$AAz?$AA?9?$AAc?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14007D9D0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x140007764: ScCreateServiceSidFromString
0x140099C24: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x140060980: RChangeServiceConfigA
0x140098160: "struct _SC_CREATE_DELETE_CACHE_QUEUE_HEAD g_ScCreateDeleteCacheQueueHead" ?g_ScCreateDeleteCacheQueueHead@@3U_SC_CREATE_DELETE_CACHE_QUEUE_HEAD@@A
0x14001AE70: "private: static void __cdecl CWorkItemContext::DelayCallBack(void * __ptr64,unsigned char)" ?DelayCallBack@CWorkItemContext@@CAXPEAXE@Z
0x14007E248: "__cdecl _imp_RtlUnicodeStringToInteger" __imp_RtlUnicodeStringToInteger
0x140089558: "RpcRevertToSelf" ??_C@_1CA@LIIMGJAG@?$AAR?$AAp?$AAc?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAT?$AAo?$AAS?$AAe?$AAl?$AAf?$AA?$AA@
0x1400A0188: "__cdecl _imp_AuthziLogAuditEvent" __imp_AuthziLogAuditEvent
0x14001824C: "void __cdecl ScUnregisterDirectTriggerAction(class CServiceRecord * __ptr64)" ?ScUnregisterDirectTriggerAction@@YAXPEAVCServiceRecord@@@Z
0x1400206A4: "public: __cdecl CServiceRecord::CServiceRecord(void) __ptr64" ??0CServiceRecord@@QEAA@XZ
0x140017550: RChangeServiceConfigW
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::GenerateServiceTag(void) __ptr64" ?GenerateServiceTag@CServiceRecord@@UEAAXXZ
0x14007EC10: "SYSTEM\CurrentControlSet\Control" ??_C@_1GI@NKACCBBD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14002DCA0: wmain
0x14001AEE0: "public: virtual struct _WNF_USER_SUBSCRIPTION * __ptr64 __cdecl CWin32ServiceRecord::DetachDirectTriggerSubscription(void) __ptr64" ?DetachDirectTriggerSubscription@CWin32ServiceRecord@@UEAAPEAU_WNF_USER_SUBSCRIPTION@@XZ
0x14007F8E8: " /launchtype %hs /cv %hs" ??_C@_1DC@INFCMCNA@?$AA?5?$AA?1?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AAt?$AAy?$AAp?$AAe?$AA?5?$AA?$CF?$AAh?$AAs?$AA?5?$AA?1?$AAc?$AAv?$AA?5?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x14007E4D8: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x140089C98: DEVPKEY_Device_DriverDate
0x14002F92C: "__cdecl _wmainCRTStartup" __wmainCRTStartup
0x140069E90: RQueryServiceObjectSecurity
0x14007DC28: api-ms-win-core-realtime-l1-1-0_NULL_THUNK_DATA
0x14007E4C8: "__cdecl _imp_RtlGetCurrentServiceSessionId" __imp_RtlGetCurrentServiceSessionId
0x14007E0D0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140061550: RGetServiceDisplayNameA
0x140093110: ext-ms-win-security-chambers-l1-1-1_NULL_THUNK_DATA_DLN
0x140005BD0: "public: unsigned long __cdecl CServiceDatabase::GetServicesByAcceptedControls(class utl::list<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord> > > & __ptr64,unsigned long) __ptr64" ?GetServicesByAcceptedControls@CServiceDatabase@@QEAAKAEAV?$list@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@K@Z
0x14002451C: "void __cdecl ScReadServiceMemoryLimits(struct HKEY__ * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?ScReadServiceMemoryLimits@@YAXPEAUHKEY__@@PEAK11@Z
0x14001E0A0: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1400A0298: logoncli_NULL_THUNK_DATA_DLA
0x14001AF90: "protected: virtual unsigned long __cdecl CServiceRecord::GetStatusInternal(struct _SERVICE_STATUS * __ptr64) __ptr64" ?GetStatusInternal@CServiceRecord@@MEAAKPEAU_SERVICE_STATUS@@@Z
0x140093A68: logoncli_NULL_THUNK_DATA_DLB
0x140093188: logoncli_NULL_THUNK_DATA_DLN
0x14007E290: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x14000FA04: ScCheckProtocol
0x1400A0290: "__cdecl _imp_NetIsServiceAccount" __imp_NetIsServiceAccount
0x140001640: RGetServiceDisplayNameW
0x140099640: AliasSystemOpsSid
0x140080568: "\SystemRoot\LastGood.Tmp" ??_C@_1DC@HBEOHGCL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAL?$AAa?$AAs?$AAt?$AAG?$AAo?$AAo?$AAd?$AA?4?$AAT?$AAm?$AAp?$AA?$AA@
0x14005DA18: WPP_SF_Di
0x140099C98: "int g_wil_details_preventOnDemandStagingConfigReads" ?g_wil_details_preventOnDemandStagingConfigReads@@3HA
0x14001ABA8: ?reset@?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAU_TP_TIMER@@@Z
0x140022EB8: "unsigned long __cdecl ScCreateUnresolvedDepend(unsigned short const * __ptr64,class CUnresolvedNameEntry * __ptr64 * __ptr64)" ?ScCreateUnresolvedDepend@@YAKPEBGPEAPEAVCUnresolvedNameEntry@@@Z
0x140054284: WPP_SF_dL
0x14008B9E8: WPP_5bc52adc4bbf3e7f698a364716ffe22b_Traceguids
0x14007EE88: "-k" ??_C@_15BJCIDILG@?$AA?9?$AAk?$AA?$AA@
0x140030A75: "__cdecl _tailMerge_ext_ms_win_wer_reporting_l1_1_0_dll" __tailMerge_ext_ms_win_wer_reporting_l1_1_0_dll
0x1400186A0: ScExtRegisterPnpServiceNotification
0x140053D5C: WPP_SF_Dd
0x140053D5C: WPP_SF_DD
0x140053D5C: WPP_SF_dD
0x140053D5C: WPP_SF_dd
0x14006ABB0: "public: virtual unsigned long __cdecl CUmdfDriverRecord::Initialize(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64,class CNameEntry * __ptr64,unsigned long) __ptr64" ?Initialize@CUmdfDriverRecord@@UEAAKPEBGKKKKPEAXPEAVCNameEntry@@K@Z
0x14002000C: SetupInProgress
0x14007D738: "__cdecl _imp_RpcServerUseProtseqW" __imp_RpcServerUseProtseqW
0x14002C6C0: "public: class utl::_DlistIt<struct utl::_DlistNode<class Microsoft::WRL::ComPtr<class CServiceRecord> >,class Microsoft::WRL::ComPtr<class CServiceRecord> > __cdecl utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > >::erase(class utl::_DlistConstIt<struct utl::_DlistNode<class Microsoft::WRL::ComPtr<class CServiceRecord> >,class Microsoft::WRL::ComPtr<class CServiceRecord> >) __ptr64" ?erase@?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@QEAA?AV?$_DlistIt@U?$_DlistNode@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@2@V?$_DlistConstIt@U?$_DlistNode@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@2@@Z
0x1400A0120: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x14007DB88: "__cdecl _imp_SetProcessShutdownParameters" __imp_SetProcessShutdownParameters
0x140063910: "unsigned long __cdecl ScTakeOwnership(struct _OBJECT_ATTRIBUTES * __ptr64)" ?ScTakeOwnership@@YAKPEAU_OBJECT_ATTRIBUTES@@@Z
0x140053DA4: WPP_SF_DS
0x14005DA6C: WPP_SF_Ds
0x140053DA4: WPP_SF_dS
0x14006E6F0: "public: virtual void * __ptr64 __cdecl WdfObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfObject@@UEAAPEAXI@Z
0x140054710: "void __cdecl ScDeleteCtrlSetOrphans(void)" ?ScDeleteCtrlSetOrphans@@YAXXZ
0x140056D98: WPP_SF_dq
0x140030738: "__cdecl _imp_load_SetNtlmThreadOptions" __imp_load_SetNtlmThreadOptions
0x140089AC0: " ===============================" ??_C@_0BFC@EBGKDEGF@?6?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN?$DN@
0x140099C88: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::userStoreProbe" ?userStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x1400507A0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x14007EDD8: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x140002444: "bool __cdecl wil::ProcessShutdownInProgress(void)" ?ProcessShutdownInProgress@wil@@YA_NXZ
0x140089F98: "MaxRemoteNotifyQueues" ??_C@_1CM@OLPNKOMK@?$AAM?$AAa?$AAx?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAs?$AA?$AA@
0x14001EC0C: "void __cdecl ScUpdateServiceSidCache(unsigned short const * __ptr64,int)" ?ScUpdateServiceSidCache@@YAXPEBGH@Z
0x14007DE78: "__cdecl _imp_CallbackMayRunLong" __imp_CallbackMayRunLong
0x14006B83C: "int __cdecl ScCopyStringToBufferW(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned char * __ptr64 const)" ?ScCopyStringToBufferW@@YAHPEBGK0PEAPEAG1QEAE@Z
0x14007D690: "__cdecl _imp_DevObjGetClassDevs" __imp_DevObjGetClassDevs
0x140022F48: "public: int __cdecl CUnresolvedNameEntry::AddService(class CServiceRecord * __ptr64) __ptr64" ?AddService@CUnresolvedNameEntry@@QEAAHPEAVCServiceRecord@@@Z
0x14000F4CC: "public: void __cdecl CServiceRecord::PostCompletedNotification(class CServiceRecord * __ptr64,unsigned long,struct _SC_NOTIFY_BLOCK * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?PostCompletedNotification@CServiceRecord@@QEAAXPEAV1@KPEAU_SC_NOTIFY_BLOCK@@PEAPEAX@Z
0x14008B3B8: "friendly name" ??_C@_1BM@CEJHFMGC@?$AAf?$AAr?$AAi?$AAe?$AAn?$AAd?$AAl?$AAy?$AA?5?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x140026D50: "void __cdecl SvcctrlMain(void)" ?SvcctrlMain@@YAXXZ
0x14007039C: McGenEventWrite
0x140098000: WPP_GLOBAL_Control
0x14007F2F8: "TelRepSvc" ??_C@_1BE@FJDHKAEE@?$AAT?$AAe?$AAl?$AAR?$AAe?$AAp?$AAS?$AAv?$AAc?$AA?$AA@
0x140002D7C: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Write(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64)const __ptr64" ?Write@UsageIndexProperty@details_abi@wil@@QEBA_NAEAPEAEPEAE@Z
0x140051A08: "public: void __cdecl wil::details_abi::FeatureStateData::ProcessShutdown(void) __ptr64" ?ProcessShutdown@FeatureStateData@details_abi@wil@@QEAAXXZ
0x1400523C0: "void __cdecl wil::details::WilApiImpl_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApiImpl_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x140098F30: "long (__cdecl* __ptr64 g_wil_details_pfnNtQueryWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?g_wil_details_pfnNtQueryWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@ZEA
0x14002C06C: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x140021380: "unsigned long __cdecl ScGenerateServiceInstallAudit(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned short const * __ptr64)" ?ScGenerateServiceInstallAudit@@YAKPEBG0KK0@Z
0x140093C90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-3" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-3
0x14007EFB0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140093B64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140093C7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x14003010A: RegOpenKeyExW
0x14001DEF0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x14007E1A0: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x14007B7D8: "const wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vftable'" ??_7?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@6B@
0x140099678: "unsigned __int64 g_hScmEventProvider" ?g_hScmEventProvider@@3_KA
0x1400824E8: "SeTimeZonePrivilege" ??_C@_1CI@JJNMEPGC@?$AAS?$AAe?$AAT?$AAi?$AAm?$AAe?$AAZ?$AAo?$AAn?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14008B7D0: "LocalService" ??_C@_1BK@INGGECPM@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14008A4C0: EVENT_DM_STOP
0x140053C50: WPP_SF_D
0x140053C50: WPP_SF_d
0x14002FBB8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140023310: "public: long __cdecl CWorkItemContext::AddDelayedWorkItem(unsigned long,unsigned long) __ptr64" ?AddDelayedWorkItem@CWorkItemContext@@QEAAJKK@Z
0x14008A3A0: "is" ??_C@_15BIEMAPLM@?$AAi?$AAs?$AA?$AA@
0x140064838: "unsigned long __cdecl ScWriteTag(struct HKEY__ * __ptr64,unsigned long)" ?ScWriteTag@@YAKPEAUHKEY__@@K@Z
0x1400657D4: "unsigned long __cdecl ScAddNotificationRequest(struct _SC_HANDLE_STRUCT * __ptr64,class CServiceRecord * __ptr64,struct _SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2 * __ptr64,struct _GUID * __ptr64,unsigned long,int,struct _SC_NOTIFY_BLOCK * __ptr64 * __ptr64,int * __ptr64)" ?ScAddNotificationRequest@@YAKPEAU_SC_HANDLE_STRUCT@@PEAVCServiceRecord@@PEAU_SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2@@PEAU_GUID@@KHPEAPEAU_SC_NOTIFY_BLOCK@@PEAH@Z
0x1400995A0: "class CNameEntryList<class CUnresolvedNameEntry> UnresolvedDependList" ?UnresolvedDependList@@3V?$CNameEntryList@VCUnresolvedNameEntry@@@@A
0x140089F60: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x14007D788: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x140080EA0: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x140069AA4: "unsigned long __cdecl ScAccessCheck(void * __ptr64,void * __ptr64,unsigned long)" ?ScAccessCheck@@YAKPEAX0K@Z
0x14007DF18: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x14008B720: "-TimeoutOnModuleLoadInSec:" ??_C@_1DG@OFGBOLHJ@?$AA?9?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAO?$AAn?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAL?$AAo?$AAa?$AAd?$AAI?$AAn?$AAS?$AAe?$AAc?$AA?3?$AA?$AA@
0x14006BCA4: "void __cdecl ScStopTracingSession(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScStopTracingSession@@YAXPEBG00@Z
0x1400789C0: "public: virtual void * __ptr64 __cdecl WdfProcess::`vector deleting destructor'(unsigned int) __ptr64" ??_EWdfProcess@@UEAAPEAXI@Z
0x14007D698: "__cdecl _imp_DevObjCreateDeviceInfoList" __imp_DevObjCreateDeviceInfoList
0x14007DED8: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x14007DEE0: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x14007D668: "__cdecl _imp_DevObjGetDeviceProperty" __imp_DevObjGetDeviceProperty
0x14008AC60: "SetEvent m_ThreadsStoppingEvent " ??_C@_0CH@EONHAHGD@SetEvent?5m_ThreadsStoppingEvent?5@
0x1400302BC: "__cdecl _imp_load_LsaLookupTranslateSids" __imp_load_LsaLookupTranslateSids
0x14001AA0C: "int __cdecl ScIsServiceSidInToken(class CServiceRecord * __ptr64,void * __ptr64)" ?ScIsServiceSidInToken@@YAHPEAVCServiceRecord@@PEAX@Z
0x1400930F0: ext-ms-win-scesrv-server-l1-1-0_NULL_THUNK_DATA_DLN
0x1400761F8: "public: long __cdecl WdfDevNode::SetDefaultProcessSharing(enum WDF_PROCESS_SHARED_DEFAULT_TYPE) __ptr64" ?SetDefaultProcessSharing@WdfDevNode@@QEAAJW4WDF_PROCESS_SHARED_DEFAULT_TYPE@@@Z
0x140051FF0: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x140030F5C: "__cdecl _tailMerge_api_ms_win_service_private_l1_1_0_dll" __tailMerge_api_ms_win_service_private_l1_1_0_dll
0x140014CA4: "unsigned long __cdecl ScMergeEnvironments(unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?ScMergeEnvironments@@YAKPEAGPEAPEAX@Z
0x14007E098: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x140081210: "ext-ms-win-core-resourcemanager-" ??_C@_1EO@BKNGEKFN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?9@
0x140030D97: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x14007E1B0: "__cdecl _imp_RtlWow64IsWowGuestMachineSupported" __imp_RtlWow64IsWowGuestMachineSupported
0x140024954: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x14002CC50: "unsigned long __cdecl ScStartTracingSession(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScStartTracingSession@@YAKPEBG000@Z
0x14007F498: "ncacn_ip_tcp" ??_C@_1BK@BPGFLIHL@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAi?$AAp?$AA_?$AAt?$AAc?$AAp?$AA?$AA@
0x14001BC40: "public: virtual unsigned long __cdecl CDriverRecord::GetStatus(struct _SERVICE_STATUS * __ptr64) __ptr64" ?GetStatus@CDriverRecord@@UEAAKPEAU_SERVICE_STATUS@@@Z
0x140081700: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x14002F344: "unsigned long __cdecl ScAddStoppedDriver(unsigned short * __ptr64)" ?ScAddStoppedDriver@@YAKPEAG@Z
0x1400512A8: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x1400A00C0: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLA
0x14002F6A0: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::EnabledStateManager>::Construct(void) __ptr64" ?Construct@?$manually_managed_shutdown_aware_object@VEnabledStateManager@details@wil@@@wil@@QEAAXXZ
0x14007F398: ".\" ??_C@_15PCEAIKAA@?$AA?4?$AA?2?$AA?$AA@
0x140080798: "DeviceInterfaceClass" ??_C@_1CK@KNOHNFMP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x14001ADE0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140093A78: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLB
0x14007E340: "__cdecl _imp_RtlSetSecurityObject" __imp_RtlSetSecurityObject
0x14001C3DC: "unsigned long __cdecl ScWaitForUserServiceShutdown(class CServiceRecord * __ptr64,unsigned __int64 * __ptr64)" ?ScWaitForUserServiceShutdown@@YAKPEAVCServiceRecord@@PEA_K@Z
0x140099AF8: AliasBackupOpsSid
0x14007E420: "__cdecl _imp_RtlRegisterWait" __imp_RtlRegisterWait
0x14002B834: "public: unsigned long __cdecl CServiceRecord::UpdateStartState(void) __ptr64" ?UpdateStartState@CServiceRecord@@QEAAKXZ
0x14002C72C: "public: unsigned long __cdecl CServiceRecord::UpdateUnresolvedDependency(class CUnresolvedNameEntry * __ptr64,class CServiceRecord * __ptr64) __ptr64" ?UpdateUnresolvedDependency@CServiceRecord@@QEAAKPEAVCUnresolvedNameEntry@@PEAV1@@Z
0x14007E130: "__cdecl _imp_RtlSetProcessIsCritical" __imp_RtlSetProcessIsCritical
0x140007E10: "int __cdecl ScLookupPrivilegeValue(unsigned short * __ptr64,struct _LUID * __ptr64)" ?ScLookupPrivilegeValue@@YAHPEAGPEAU_LUID@@@Z
0x140092FB0: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLN
0x14007E278: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x140081510: "__cdecl _sz_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __sz_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x1400A0178: "__cdecl _imp_AuthziInitializeAuditParams" __imp_AuthziInitializeAuditParams
0x14000AAB0: "protected: int __cdecl CWin32ServiceRecord::CheckForSvchostSplitAllowed(unsigned short * __ptr64,unsigned char) __ptr64" ?CheckForSvchostSplitAllowed@CWin32ServiceRecord@@IEAAHPEAGE@Z
0x1400825F0: "SeImpersonatePrivilege" ??_C@_1CO@HBMPHMGO@?$AAS?$AAe?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007DF00: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x14007E578: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x140093B28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140060730: RChangeServiceConfig2A
0x140030043: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x14001F450: "unsigned long __cdecl ScReadServiceConfig(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int * __ptr64,class utl::list<struct _SERVICE_DEPENDENCY_DATA,class utl::allocator<struct _SERVICE_DEPENDENCY_DATA> > & __ptr64,class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > * __ptr64)" ?ScReadServiceConfig@@YAKPEAUHKEY__@@PEBGPEAHAEAV?$list@U_SERVICE_DEPENDENCY_DATA@@V?$allocator@U_SERVICE_DEPENDENCY_DATA@@@utl@@@utl@@PEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@3@@Z
0x140099A38: "void (__cdecl* __ptr64 g_wil_details_recordFeatureUsage)(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?g_wil_details_recordFeatureUsage@@3P6AXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@ZEA
0x14001AED0: "public: virtual struct _WNF_USER_SUBSCRIPTION * __ptr64 __cdecl CServiceRecord::DetachDirectTriggerSubscription(void) __ptr64" ?DetachDirectTriggerSubscription@CServiceRecord@@UEAAPEAU_WNF_USER_SUBSCRIPTION@@XZ
0x14007E448: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x14008B5A0: "-DeviceGroupId:" ??_C@_1CA@IJMINDGN@?$AA?9?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp?$AAI?$AAd?$AA?3?$AA?$AA@
0x14007DD40: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x140092D8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wer_reporting_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wer_reporting_l1_1_0_dll
0x14002F9E0: "__cdecl _security_check_cookie" __security_check_cookie
0x140080A50: "%windir%\system32\LogFiles\Scm\" ??_C@_1EA@NGKAPJII@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAS?$AAc?$AAm?$AA?2?$AA?$AA@
0x140074208: "private: long __cdecl WdfDevNode::InitErrorTag(void * __ptr64,struct _DO_DEVINFO_DATA * __ptr64) __ptr64" ?InitErrorTag@WdfDevNode@@AEAAJPEAXPEAU_DO_DEVINFO_DATA@@@Z
0x14007E680: "__cdecl _xc_z" __xc_z
0x1400815B0: "__cdecl _sz_ext_ms_win_wer_reporting_l1_1_0_dll" __sz_ext_ms_win_wer_reporting_l1_1_0_dll
0x1400195BC: "private: void __cdecl Microsoft::WRL::Wrappers::Details::SyncLockShared::InternalUnlock(void) __ptr64" ?InternalUnlock@SyncLockShared@Details@Wrappers@WRL@Microsoft@@AEAAXXZ
0x140093BF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1400996A0: "unsigned char * LpacServicesManagementCapabilitySidBuffer" ?LpacServicesManagementCapabilitySidBuffer@@3PAEA
0x140051E70: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x14007DBE0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400A0270: "__cdecl _imp_WerReportSetParameter" __imp_WerReportSetParameter
0x14001E1A0: "unsigned long __cdecl ScCreateServicePersistentStateFolder(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScCreateServicePersistentStateFolder@@YAKPEBG0@Z
0x14000E318: "protected: int __cdecl CServiceRecord::IsDependentOn(class CServiceRecord * __ptr64,class utl::unordered_set<class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64> > & __ptr64) __ptr64" ?IsDependentOn@CServiceRecord@@IEAAHPEAV1@AEAV?$unordered_set@PEAVCServiceRecord@@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@@utl@@@Z
0x14002E7B4: ScExtInitialize
0x14007DAD0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14005FA60: "unsigned long __cdecl GetDurationSeconds(unsigned long)" ?GetDurationSeconds@@YAKK@Z
0x140099238: "void * __ptr64 __ptr64 ScServiceChangeStateEvent" ?ScServiceChangeStateEvent@@3PEAXEA
0x14007DB98: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x14008B0B0: "HostProcessOptions" ??_C@_1CG@POLEHFCO@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x140070AA0: "private: virtual void * __ptr64 __cdecl DrvMgrLpcNotification::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDrvMgrLpcNotification@@EEAAPEAXI@Z
0x14008AD78: "Unexpected return from WaitForMu" ??_C@_0CO@BGAOLMO@Unexpected?5return?5from?5WaitForMu@
0x14002BDC0: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetPointer(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?TryGetPointer@SemaphoreValue@details_abi@wil@@SAJPEBGPEAPEAX@Z
0x14001B940: "unsigned long __cdecl ScReleasePrivilege(void)" ?ScReleasePrivilege@@YAKXZ
0x14007F4B8: "DisableRPCOverTCP" ??_C@_1CE@DBHGFAFP@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAP?$AAC?$AAO?$AAv?$AAe?$AAr?$AAT?$AAC?$AAP?$AA?$AA@
0x14008B788: "-ImagePath:" ??_C@_1BI@PAJMEOAJ@?$AA?9?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?$AA@
0x14007EEB0: "RequiredPrivileges" ??_C@_1CG@JPJNEFAA@?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAs?$AA?$AA@
0x14007E2A0: "__cdecl _imp_NtDuplicateToken" __imp_NtDuplicateToken
0x1400690F0: WPP_SF_dSlLd
0x14006E768: "public: void * __ptr64 __cdecl WdfTransientDevStateMgr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfTransientDevStateMgr@@QEAAPEAXI@Z
0x14007F528: "\pipe\ntsvcs" ??_C@_1BK@EJNEBDMJ@?$AA?2?$AAp?$AAi?$AAp?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAv?$AAc?$AAs?$AA?$AA@
0x1400981EB: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x140007EA0: "unsigned long __cdecl ScRemovePrivileges(class CWin32ServiceRecord * __ptr64,unsigned short * __ptr64,void * __ptr64,void * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?ScRemovePrivileges@@YAKPEAVCWin32ServiceRecord@@PEAGPEAX2PEBGPEAK@Z
0x140022978: "protected: int __cdecl CServiceRecord::RemoveStopDependency(class CServiceRecord * __ptr64) __ptr64" ?RemoveStopDependency@CServiceRecord@@IEAAHPEAV1@@Z
0x140030978: IsScesrvTerminateServerPresent
0x14007E000: "__cdecl _imp_GetKernelObjectSecurity" __imp_GetKernelObjectSecurity
0x14000ED48: "unsigned long __cdecl ScGetWow64Service(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScGetWow64Service@@YAKPEAUHKEY__@@PEAG@Z
0x14001D2F0: "long __cdecl ScSystemTimeChangedCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?ScSystemTimeChangedCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x14001C640: "void __cdecl ScDeferredListWorkItem(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ScDeferredListWorkItem@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x14008AE28: "CustomPool" ??_C@_1BG@DMCIGKFJ@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
0x140012EB0: ROpenServiceW
0x1400718B0: "public: virtual void __cdecl DrvMgrLpcNotification::PortIsClosed(struct IUMDFLPCCommPortInterface * __ptr64) __ptr64" ?PortIsClosed@DrvMgrLpcNotification@@UEAAXPEAUIUMDFLPCCommPortInterface@@@Z
0x14000F858: "__cdecl TlgCreateWsz" _TlgCreateWsz
0x14006571C: "void __cdecl SC_DEC_CRDEL_HANDLE_COUNT(void * __ptr64,unsigned long * __ptr64)" ?SC_DEC_CRDEL_HANDLE_COUNT@@YAXPEAXPEAK@Z
0x1400151C4: "struct _API_LOCK * __ptr64 __cdecl ScFindApiLockForDatabase(unsigned short * __ptr64)" ?ScFindApiLockForDatabase@@YAPEAU_API_LOCK@@PEAG@Z
0x14008A318: "\Scm\" ??_C@_1M@IEKNBIJA@?$AA?2?$AAS?$AAc?$AAm?$AA?2?$AA?$AA@
0x14007F510: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x140082A58: "SeMachineAccountPrivilege" ??_C@_1DE@DCPKNDPB@?$AAS?$AAe?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140089D58: "DSMA" ??_C@_04NMDGDGPA@DSMA?$AA@
0x140092DCC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x140093A00: ext-ms-win-spinf-inf-l1-1-0_NULL_THUNK_DATA_DLB
0x140082970: "SeSystemProfilePrivilege" ??_C@_1DC@KMGNOJNI@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14001DCB0: ROpenServiceA
0x140093E84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x140001AB0: GetServiceRegistryStateSubkeyName
0x140099B28: "void (__cdecl* __ptr64 g_wil_details_internalSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_internalSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x14005C580: "public: virtual void * __ptr64 __cdecl CWin32ServiceRecord::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32ServiceRecord@@UEAAPEAXI@Z
0x14007DAB0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1400891B9: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x14006940C: WPP_SF_qdd
0x14001AED0: "public: virtual int __cdecl CServiceRecord::IsDirectTriggerStateNameAllocated(void) __ptr64" ?IsDirectTriggerStateNameAllocated@CServiceRecord@@UEAAHXZ
0x140089430: "rpcss" ??_C@_1M@BAEKHECG@?$AAr?$AAp?$AAc?$AAs?$AAs?$AA?$AA@
0x14005A5D8: WPP_SF_Ldi
0x14008BAA0: "__stdcall _xmm" __xmm@00000000700000000000000300000007
0x140019E40: "struct _IMAGE_RECORD * __ptr64 __cdecl ScCreateTemporaryImageRecord(unsigned short const * __ptr64,unsigned long,unsigned __int64)" ?ScCreateTemporaryImageRecord@@YAPEAU_IMAGE_RECORD@@PEBGK_K@Z
0x14007DDE8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400129FC: "unsigned long __cdecl ScAccessValidate(struct _SC_HANDLE_STRUCT * __ptr64,unsigned long,int,int)" ?ScAccessValidate@@YAKPEAU_SC_HANDLE_STRUCT@@KHH@Z
0x140072FF0: "public: virtual void * __ptr64 __cdecl WdfDevNode::`vector deleting destructor'(unsigned int) __ptr64" ??_EWdfDevNode@@UEAAPEAXI@Z
0x140079494: "public: unsigned char __cdecl WdfObjectList<class WdfProcess,class WdfProcessParameters>::Remove(class WdfProcess * __ptr64,unsigned char * __ptr64) __ptr64" ?Remove@?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@QEAAEPEAVWdfProcess@@PEAE@Z
0x140016CBC: "public: __cdecl CSRWLock::CSRWLock(struct _RTL_SRWLOCK * __ptr64,unsigned char) __ptr64" ??0CSRWLock@@QEAA@PEAU_RTL_SRWLOCK@@E@Z
0x14005F9B0: REnumServiceGroupW
0x1400695E4: WPP_SF_qqd
0x140089F68: "SCMANAGER" ??_C@_1BE@JENHLCNP@?$AAS?$AAC?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAR?$AA?$AA@
0x14005A63C: WPP_SF_Lqi
0x1400A0150: "__cdecl _imp_InitiateSystemShutdownExW" __imp_InitiateSystemShutdownExW
0x140092D0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_DABAPI_dll" __DELAY_IMPORT_DESCRIPTOR_DABAPI_dll
0x14000C52C: "protected: void __cdecl CWin32ServiceRecord::ActivateServiceRecord(struct _IMAGE_RECORD * __ptr64) __ptr64" ?ActivateServiceRecord@CWin32ServiceRecord@@IEAAXPEAU_IMAGE_RECORD@@@Z
0x14007DD28: "__cdecl _imp_CancelWaitableTimer" __imp_CancelWaitableTimer
0x14008B8A0: "Terminate Process should never b" ??_C@_0DI@JFANFKIA@Terminate?5Process?5should?5never?5b@
0x14001ACE0: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x1400548AC: "struct HKEY__ * __ptr64 __cdecl ScGetCtrlSetHandle(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64)" ?ScGetCtrlSetHandle@@YAPEAUHKEY__@@PEAU1@KPEAG@Z
0x14001DE84: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_SvchostMitigationPolicies>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_SvchostMitigationPolicies@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x140064454: "unsigned long __cdecl ScWritePrivileges(struct HKEY__ * __ptr64,class CServiceRecord * __ptr64,unsigned short * __ptr64,unsigned long)" ?ScWritePrivileges@@YAKPEAUHKEY__@@PEAVCServiceRecord@@PEAGK@Z
0x14007E270: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x1400549D0: "unsigned long __cdecl ScRevertToLastKnownGood(void)" ?ScRevertToLastKnownGood@@YAKXZ
0x14001AF80: "public: virtual unsigned short __cdecl CWin32ServiceRecord::GetSharedProcId(void) __ptr64" ?GetSharedProcId@CWin32ServiceRecord@@UEAAGXZ
0x14007F7A0: "SvcMemSoftLimitInMB" ??_C@_1CI@FOKDJBAH@?$AAS?$AAv?$AAc?$AAM?$AAe?$AAm?$AAS?$AAo?$AAf?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AAI?$AAn?$AAM?$AAB?$AA?$AA@
0x140025EBC: "private: bool __cdecl utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > >::_SortScan<bool (__cdecl* & __ptr64)(class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64)>(class utl::_DlistConstIt<struct utl::_DlistNode<class Microsoft::WRL::ComPtr<class CServiceRecord> >,class Microsoft::WRL::ComPtr<class CServiceRecord> > & __ptr64,bool (__cdecl* & __ptr64)(class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64),unsigned __int64) __ptr64" ??$_SortScan@AEAP6A_NAEBV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@0@Z@?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@AEAA_NAEAV?$_DlistConstIt@U?$_DlistNode@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@1@AEAP6A_NAEBV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@1@Z_K@Z
0x14001CE24: "unsigned long __cdecl ScEnumDependents(class CServiceRecord * __ptr64,struct _ENUM_SERVICE_STATUS_WOW64 * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,struct _ENUM_SERVICE_STATUS_WOW64 * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64,int * __ptr64)" ?ScEnumDependents@@YAKPEAVCServiceRecord@@PEAU_ENUM_SERVICE_STATUS_WOW64@@KPEAK2PEAPEAU2@PEAPEAGPEAPEAXPEAH@Z
0x140005A80: "public: int __cdecl CServiceDatabase::GetWin32ServicesByImageRecord(struct _IMAGE_RECORD * __ptr64 const,class utl::list<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord> > > & __ptr64) __ptr64" ?GetWin32ServicesByImageRecord@CServiceDatabase@@QEAAHQEAU_IMAGE_RECORD@@AEAV?$list@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14007DA90: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140064298: "unsigned long __cdecl ScWowRedirectIndirectString(unsigned short,unsigned short * __ptr64)" ?ScWowRedirectIndirectString@@YAKGPEAG@Z
0x14007E230: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x140099BE0: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x140092E8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_srvcli_dll" __DELAY_IMPORT_DESCRIPTOR_srvcli_dll
0x140080858: "WUDF" ??_C@_19HAMNLIIB@?$AAW?$AAU?$AAD?$AAF?$AA?$AA@
0x14007F6C0: "DisableRemoteScmEndpoints" ??_C@_1DE@IKBCFJEP@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAS?$AAc?$AAm?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAs?$AA?$AA@
0x14001AF70: "public: virtual unsigned long __cdecl CWin32UserServiceRecord::GetSessionId(void) __ptr64" ?GetSessionId@CWin32UserServiceRecord@@UEAAKXZ
0x14000CDE0: "unsigned long __cdecl ScGetServiceNameFromTag(struct _TAG_INFO_NAME_FROM_TAG_IN_PARAMS * __ptr64,struct _TAG_INFO_NAME_FROM_TAG_OUT_PARAMS * __ptr64 * __ptr64)" ?ScGetServiceNameFromTag@@YAKPEAU_TAG_INFO_NAME_FROM_TAG_IN_PARAMS@@PEAPEAU_TAG_INFO_NAME_FROM_TAG_OUT_PARAMS@@@Z
0x140098DE8: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x14008A0B0: "de" ??_C@_02FHOKNKPD@de?$AA@
0x14007D9C0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x140003018: "public: __cdecl wil::details_abi::UsageIndexes::~UsageIndexes(void) __ptr64" ??1UsageIndexes@details_abi@wil@@QEAA@XZ
0x140099D30: "unsigned short * __ptr64 * __ptr64 __ptr64 g_AllowRemoteAccessServices" ?g_AllowRemoteAccessServices@@3PEAPEAGEA
0x14000397C: "unsigned long __cdecl ScGetWin32Services(class utl::list<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord> > > & __ptr64,unsigned long & __ptr64)" ?ScGetWin32Services@@YAKAEAV?$list@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@AEAK@Z
0x1400A0138: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLA
0x14008B358: "Found a matching entry, but neve" ??_C@_0DK@OPOEBFOB@Found?5a?5matching?5entry?0?5but?5neve@
0x14008AE60: "Unable to get threadpool to stop" ??_C@_0GD@JAAGCLHJ@Unable?5to?5get?5threadpool?5to?5stop@
0x14007DA68: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x14006A0C8: WPP_SF_ddqd
0x14006946C: WPP_SF_qddd
0x140031290: "__cdecl _chkstk" __chkstk
0x14006C0D0: ScExtIsPasswordManagedServiceAccount
0x140014720: "unsigned long __cdecl ScLookupServiceAccount(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScLookupServiceAccount@@YAKPEAGPEAPEAG@Z
0x14002DCF8: "unsigned long __cdecl ScCreateAutoStartEvents(void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?ScCreateAutoStartEvents@@YAKPEAPEAX0@Z
0x140017EC4: "public: int __cdecl CServiceRecord::IsStateSepStartTypeOverrideEnabled(void) __ptr64" ?IsStateSepStartTypeOverrideEnabled@CServiceRecord@@QEAAHXZ
0x140019800: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<class CServiceRecord>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@IEAAKXZ
0x14007F0B8: "ErrorControl" ??_C@_1BK@PIFCGMJC@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x14002BAFC: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x140024088: "unsigned long __cdecl ScOpenScManagerSecurityKey(unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?ScOpenScManagerSecurityKey@@YAKKPEAPEAUHKEY__@@@Z
0x140065380: WPP_SF_LdiL
0x140092F00: CRYPTBASE_NULL_THUNK_DATA_DLN
0x1400170C0: "void __cdecl ScLogServiceEvent(unsigned long,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScLogServiceEvent@@YAXKPEBGKK00@Z
0x140099688: "enum _NT_PRODUCT_TYPE ScGlobalProductType" ?ScGlobalProductType@@3W4_NT_PRODUCT_TYPE@@A
0x14007DA10: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x140001F78: "public: __cdecl wil::details_abi::UsageIndexes::UsageIndexes(void) __ptr64" ??0UsageIndexes@details_abi@wil@@QEAA@XZ
0x140093178: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLN
0x140073D74: "public: class WdfProcess * __ptr64 __cdecl WdfObjectList<class WdfProcess,class WdfProcessParameters>::FindExisting(class WdfProcessParameters * __ptr64,bool) __ptr64" ?FindExisting@?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@QEAAPEAVWdfProcess@@PEAVWdfProcessParameters@@_N@Z
0x14006CD60: ScExtSendServiceShutdownMessage
0x14007E210: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x14007F160: "DelayedAutostart" ??_C@_1CC@NMOCPAOI@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AAA?$AAu?$AAt?$AAo?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14007E318: "__cdecl _imp_NtPrivilegeObjectAuditAlarm" __imp_NtPrivilegeObjectAuditAlarm
0x14007EF50: SCMEvt_PerfCriticalAutostart_Stop
0x14005D6D0: RI_ScReparseServiceDatabase
0x140092C4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll
0x14001598C: "unsigned long __cdecl ScReadStringIndirect(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short,unsigned short * __ptr64 * __ptr64)" ?ScReadStringIndirect@@YAKPEAUHKEY__@@PEAG1GPEAPEAG@Z
0x14001C378: "public: struct utl::pair<class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,bool> __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::emplace<class CServiceRecord * __ptr64 & __ptr64>(class CServiceRecord * __ptr64 & __ptr64) __ptr64" ??$emplace@AEAPEAVCServiceRecord@@@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@QEAA?AU?$pair@V?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@utl@@_N@1@AEAPEAVCServiceRecord@@@Z
0x14007DE80: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x140028050: "private: unsigned long __cdecl WdfDriverManager::LoadRegistrySettings(void) __ptr64" ?LoadRegistrySettings@WdfDriverManager@@AEAAKXZ
0x140099B38: "class CServiceRecord * __ptr64 __ptr64 g_pNotificationsPlaceholderSR" ?g_pNotificationsPlaceholderSR@@3PEAVCServiceRecord@@EA
0x14001C64C: "public: void __cdecl DEFER_LIST::Process(void) __ptr64" ?Process@DEFER_LIST@@QEAAXXZ
0x140022334: "unsigned long __cdecl ScWriteSd(struct HKEY__ * __ptr64,void * __ptr64)" ?ScWriteSd@@YAKPEAUHKEY__@@PEAX@Z
0x14007F768: "EnableTakeOwnershipEvent" ??_C@_1DC@NGEDNOMB@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAT?$AAa?$AAk?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x14005F0B4: "unsigned long __cdecl ScControlDriver(unsigned long,class CDriverRecord * __ptr64,struct _SERVICE_STATUS * __ptr64)" ?ScControlDriver@@YAKKPEAVCDriverRecord@@PEAU_SERVICE_STATUS@@@Z
0x140030D79: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x140024D18: "unsigned long __cdecl ScGetAccountDomainInfo(void)" ?ScGetAccountDomainInfo@@YAKXZ
0x140050CE4: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x14002F140: "unsigned long __cdecl ScCanonAccountName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScCanonAccountName@@YAKPEAGPEAPEAG@Z
0x1400894F8: "True" ??_C@_19BFOILMBF@?$AAT?$AAr?$AAu?$AAe?$AA?$AA@
0x140022D08: "protected: int __cdecl CNameEntryList<class CNameEntry>::CreateInternal(unsigned short const * __ptr64,class CNameEntry * __ptr64 * __ptr64) __ptr64" ?CreateInternal@?$CNameEntryList@VCNameEntry@@@@IEAAHPEBGPEAPEAVCNameEntry@@@Z
0x140076170: "long __cdecl RtlStringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?RtlStringCchCopyW@@YAJPEAG_KPEBG@Z
0x14007D970: "__cdecl _imp___dllonexit3" __imp___dllonexit3
0x14008A6E0: ".DLL" ??_C@_19EJGOEFGP@?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x1400805F8: "LastKnownGood" ??_C@_1BM@MFCPMGNM@?$AAL?$AAa?$AAs?$AAt?$AAK?$AAn?$AAo?$AAw?$AAn?$AAG?$AAo?$AAo?$AAd?$AA?$AA@
0x140098790: "struct _EXCEPTION_RECORD g_ExceptionRecord" ?g_ExceptionRecord@@3U_EXCEPTION_RECORD@@A
0x14007DC68: "__cdecl _imp_RegNotifyChangeKeyValue" __imp_RegNotifyChangeKeyValue
0x14002D118: TraceLoggingRegisterEx
0x14002A49C: ScExtpConvertTriggerDataType
0x14005CAEC: "unsigned long __cdecl ScCreateDummyServiceRecord(unsigned short const * __ptr64,class CServiceRecord * __ptr64 * __ptr64)" ?ScCreateDummyServiceRecord@@YAKPEBGPEAPEAVCServiceRecord@@@Z
0x14003084E: "__cdecl _imp_load_DabRegisterTriggerConsumer" __imp_load_DabRegisterTriggerConsumer
0x14008A1E0: "\PIPE\" ??_C@_1O@PGAGHCON@?$AA?2?$AAP?$AAI?$AAP?$AAE?$AA?2?$AA?$AA@
0x140004920: ScSendControl
0x14001A274: "int __cdecl ScGetNamedImageRecord(unsigned short * __ptr64,unsigned long,unsigned __int64,struct _IMAGE_RECORD * __ptr64 * __ptr64)" ?ScGetNamedImageRecord@@YAHPEAGK_KPEAPEAU_IMAGE_RECORD@@@Z
0x140080B88: "Global\SC_AutoStartPhase1Done" ??_C@_1DM@CNEDAFC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAA?$AAu?$AAt?$AAo?$AAS?$AAt?$AAa?$AAr?$AAt?$AAP?$AAh?$AAa?$AAs?$AAe?$AA1?$AAD?$AAo?$AAn?$AAe?$AA?$AA@
0x140018584: "unsigned long __cdecl ScWriteStartType(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,int)" ?ScWriteStartType@@YAKPEAUHKEY__@@PEBGKKH@Z
0x140092D6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_scesrv_server_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_scesrv_server_l1_1_0_dll
0x140099150: "unsigned long ScGlobalLastKnownGood" ?ScGlobalLastKnownGood@@3KA
0x14005F050: "public: virtual void * __ptr64 __cdecl CDriverRecord::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDriverRecord@@UEAAPEAXI@Z
0x14007D768: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x140092DAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_spinf_inf_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_spinf_inf_l1_1_0_dll
0x1400278C0: "unsigned long __cdecl InitWudfDriverManager(void)" ?InitWudfDriverManager@@YAKXZ
0x14007FAD0: "%SystemRoot%\system32\lsass.exe" ??_C@_1EA@IJALJINO@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAl?$AAs?$AAa?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140099CA8: "void (__cdecl* __ptr64 g_wil_details_apiUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_apiUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x140019904: "private: void __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_InitBuckets(void) __ptr64" ?_InitBuckets@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEAAXXZ
0x140080A20: "DefaultScmLogFolder" ??_C@_1CI@LKNKLAFK@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAS?$AAc?$AAm?$AAL?$AAo?$AAg?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x1400300F2: RegQueryValueExW
0x14008A520: EVENT_UMDF_DEVICE_OFFLINE_RESTART_POOL
0x14007DBA8: "__cdecl _imp_DeleteProcThreadAttributeList" __imp_DeleteProcThreadAttributeList
0x14007F280: "SERVICE OBJECT" ??_C@_1BO@HCCNPHEC@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA?5?$AAO?$AAB?$AAJ?$AAE?$AAC?$AAT?$AA?$AA@
0x14001CFB4: "protected: int __cdecl CServiceRecord::GetDependentServicesInternal(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64,class utl::unordered_set<class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64> > & __ptr64,unsigned long,void * __ptr64 * __ptr64,int * __ptr64,int) __ptr64" ?GetDependentServicesInternal@CServiceRecord@@IEAAHAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@AEAV?$unordered_set@PEAVCServiceRecord@@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@@3@KPEAPEAXPEAHH@Z
0x140093E70: "__cdecl _IMPORT_DESCRIPTOR_DEVOBJ" __IMPORT_DESCRIPTOR_DEVOBJ
0x14007EF00: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x1400809F0: "TracingDisabled" ??_C@_1CA@OPJGPJGD@?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140006A08: "unsigned long __cdecl ScmCreateRMHostAndAcquireInitialResourceSet(class CWin32ServiceRecord * __ptr64,void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64,unsigned short * __ptr64,struct _RM_PSM_HOST_INFO * __ptr64 * __ptr64)" ?ScmCreateRMHostAndAcquireInitialResourceSet@@YAKPEAVCWin32ServiceRecord@@PEAXPEAG2K12PEAPEAU_RM_PSM_HOST_INFO@@@Z
0x14001AC80: "void __cdecl ScPerformPageCombineOnServiceImagesCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?ScPerformPageCombineOnServiceImagesCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x14007DF10: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x14007DA20: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x14005F90C: "unsigned long __cdecl ScUpdateRegistryGroupPointer(class CServiceRecord * __ptr64,unsigned short * __ptr64)" ?ScUpdateRegistryGroupPointer@@YAKPEAVCServiceRecord@@PEAG@Z
0x140050AF4: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x14007DCC8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140092E2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x1400510CC: "public: struct wil::details_abi::ProcessLocalData * __ptr64 __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::GetShared(void) __ptr64" ?GetShared@?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAUProcessLocalData@23@XZ
0x140098DA0: "__cdecl _dllonexit_data" __dllonexit_data
0x140099BF0: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x14008A3D0: "0.0.0.0" ??_C@_1BA@OJFOBGOM@?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x14007DEC8: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x140080110: "minkernel\wdf\framework\umdf\com" ??_C@_1IA@NIIHDLHO@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAc?$AAo?$AAm@
0x14007EDE0: "svc.%s.s%ld.uc%I64x.host%I64x_1." ??_C@_1HK@BDFFHPLE@?$AAs?$AAv?$AAc?$AA?4?$AA?$CF?$AAs?$AA?4?$AAs?$AA?$CF?$AAl?$AAd?$AA?4?$AAu?$AAc?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?4?$AAh?$AAo?$AAs?$AAt?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA_?$AA1?$AA?4@
0x140015858: "int __cdecl ScIsIndirectString(unsigned short * __ptr64,int * __ptr64)" ?ScIsIndirectString@@YAHPEAGPEAH@Z
0x14005E6F0: "unsigned long __cdecl ScGetGroupState(class CNameEntry * __ptr64,class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScGetGroupState@@YAKPEAVCNameEntry@@AEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14001ADA0: ScExtGetIndirectInfString
0x14002086C: "public: unsigned long __cdecl CWin32ServiceRecord::Initialize(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64,class CNameEntry * __ptr64,unsigned short,unsigned long,enum _TRI_BOOL,unsigned long,unsigned long,unsigned long,unsigned long) __ptr64" ?Initialize@CWin32ServiceRecord@@QEAAKPEBGKKKKPEAXPEAVCNameEntry@@GKW4_TRI_BOOL@@KKKK@Z
0x140099B10: AliasPowerUsersSid
0x14001AF90: RI_ScGetCurrentGroupStateW
0x14007DC08: api-ms-win-core-processthreads-l1-1-3_NULL_THUNK_DATA
0x1400301B3: "__cdecl _imp_load_UnloadProfileBasic" __imp_load_UnloadProfileBasic
0x14007E460: "__cdecl _imp_RtlValidSecurityDescriptor" __imp_RtlValidSecurityDescriptor
0x140089840: WPP_4e53cdc101343ec5c19f815081c3b36b_Traceguids
0x140025668: "unsigned long __cdecl ScResolveServiceAccount(unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?ScResolveServiceAccount@@YAKPEAGPEAPEAX@Z
0x140030E22: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x1400997C0: "unsigned short * __ptr64 __ptr64 g_ServicePersistentFileRoot" ?g_ServicePersistentFileRoot@@3REAGEA
0x140012E5C: "void __cdecl ScProcessServiceHandleClose(struct _SC_HANDLE_STRUCT * __ptr64,int,unsigned long * __ptr64)" ?ScProcessServiceHandleClose@@YAXPEAU_SC_HANDLE_STRUCT@@HPEAK@Z
0x140081A60: WPP_e7cb64a7ac60300cb10a46dcbf879d45_Traceguids
0x140080308: "WIN://SCMUserService" ??_C@_1CK@MCPKHOBM@?$AAW?$AAI?$AAN?$AA?3?$AA?1?$AA?1?$AAS?$AAC?$AAM?$AAU?$AAs?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14007E360: "__cdecl _imp_RtlCreateServiceSid" __imp_RtlCreateServiceSid
0x14007DF68: "__cdecl _imp_CM_Locate_DevNodeW" __imp_CM_Locate_DevNodeW
0x14007E140: "__cdecl _imp_RtlIsStateSeparationEnabled" __imp_RtlIsStateSeparationEnabled
0x140099B20: AliasUsersSid
0x140093D30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14002B560: "public: __cdecl CUpdateOptionalString::~CUpdateOptionalString(void) __ptr64" ??1CUpdateOptionalString@@QEAA@XZ
0x140080D10: "LSA_RPC_SERVER_ACTIVE" ??_C@_1CM@FBKEHFOJ@?$AAL?$AAS?$AAA?$AA_?$AAR?$AAP?$AAC?$AA_?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA_?$AAA?$AAC?$AAT?$AAI?$AAV?$AAE?$AA?$AA@
0x140081360: "__cdecl _sz_ext_ms_win_security_chambers_l1_1_1_dll" __sz_ext_ms_win_security_chambers_l1_1_1_dll
0x140080C00: S_Service_Control_Manager
0x140093D6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140020C20: "unsigned long __cdecl ScGenerateFailureActionsBlob(struct _SERVICE_FAILURE_ACTIONSW * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScGenerateFailureActionsBlob@@YAKPEAU_SERVICE_FAILURE_ACTIONSW@@PEAPEAEPEAK@Z
0x14007DC18: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400A00A8: "__cdecl _imp_LsaClose" __imp_LsaClose
0x14007EB68: SCMEvt_StartingGroup_Stop
0x14007E480: "__cdecl _imp_NtSetInformationToken" __imp_NtSetInformationToken
0x14007E698: "__cdecl _guard_fids_table" __guard_fids_table
0x140081290: "__cdecl _sz_ext_ms_win_core_resourcemanager_l1_2_0_dll" __sz_ext_ms_win_core_resourcemanager_l1_2_0_dll
0x140075E84: "public: unsigned char __cdecl WdfObjectList<class WdfDevNode,class WdfDevNodeParameters>::Remove(class WdfDevNode * __ptr64,unsigned char * __ptr64) __ptr64" ?Remove@?$WdfObjectList@VWdfDevNode@@VWdfDevNodeParameters@@@@QEAAEPEAVWdfDevNode@@PEAE@Z
0x14007D8C0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140099A50: g_fPreshutdownStarted
0x14007FC70: "\BaseNamedObjects\SmKnownDllsIni" ??_C@_1FC@GBICDGOJ@?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAS?$AAm?$AAK?$AAn?$AAo?$AAw?$AAn?$AAD?$AAl?$AAl?$AAs?$AAI?$AAn?$AAi@
0x140081260: "__cdecl _sz_ext_ms_win_core_resourcemanager_l1_1_0_dll" __sz_ext_ms_win_core_resourcemanager_l1_1_0_dll
0x140030398: "__cdecl _tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll" __tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll
0x140065510: "long __cdecl ScpLastGoodDeleteFiles(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long,void * __ptr64)" ?ScpLastGoodDeleteFiles@@YAJPEAU_UNICODE_STRING@@0KPEAX@Z
0x140051F3C: "unsigned __int64 __cdecl wil::details::ResultStringSize(char const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBD@Z
0x140073814: "public: class WdfProcess * __ptr64 __cdecl WdfObjectList<class WdfProcess,class WdfProcessParameters>::Find(class WdfProcessParameters * __ptr64,unsigned char,unsigned char,unsigned char * __ptr64,long * __ptr64) __ptr64" ?Find@?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@QEAAPEAVWdfProcess@@PEAVWdfProcessParameters@@EEPEAEPEAJ@Z
0x1400249E0: "unsigned long __cdecl ScStartEarlySetOfServices(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScStartEarlySetOfServices@@YAKAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14007E260: "__cdecl _imp_NtShutdownSystem" __imp_NtShutdownSystem
0x14002C5EC: "public: class Microsoft::WRL::ComPtr<class CServiceRecord> & __ptr64 __cdecl Microsoft::WRL::ComPtr<class CServiceRecord>::operator=(class CServiceRecord * __ptr64) __ptr64" ??4?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@QEAAAEAV012@PEAVCServiceRecord@@@Z
0x140061B30: RStartServiceA
0x14008A498: "WdfObject::ReleaseWait" ??_C@_0BH@DIOGBPNP@WdfObject?3?3ReleaseWait?$AA@
0x14007F8A8: "%SystemRoot%\System32\Upfc.exe" ??_C@_1DO@FBLBFMPM@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAU?$AAp?$AAf?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140099CB8: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_PackagedServices@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x140030D55: "__cdecl _imp_load_ControlServiceExW" __imp_load_ControlServiceExW
0x140098F68: "unsigned long g_PageCombineTimerStarted" ?g_PageCombineTimerStarted@@3KA
0x140066D10: "unsigned long __cdecl ScQueueNotificationAPC(struct _SC_NOTIFY_BLOCK * __ptr64)" ?ScQueueNotificationAPC@@YAKPEAU_SC_NOTIFY_BLOCK@@@Z
0x14007BA90: "__cdecl load_config_used" _load_config_used
0x14007D770: "__cdecl _imp_I_RpcSessionStrictContextHandle" __imp_I_RpcSessionStrictContextHandle
0x1400A0258: ext-ms-win-spinf-inf-l1-1-0_NULL_THUNK_DATA_DLA
0x140089448: "sppsvc" ??_C@_1O@LMHODEII@?$AAs?$AAp?$AAp?$AAs?$AAv?$AAc?$AA?$AA@
0x1400035F4: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ServiceMemHardCap>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_ServiceMemHardCap@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x14009925C: "int g_EnableUniqueDisplayNameValidation" ?g_EnableUniqueDisplayNameValidation@@3HA
0x1400807E0: "System\CurrentControlSet\Control" ??_C@_1HC@KOBDAIDA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14001C820: "void __cdecl ScDeleteServiceRecord(class CServiceRecord * __ptr64)" ?ScDeleteServiceRecord@@YAXPEAVCServiceRecord@@@Z
0x1400722E8: "public: __cdecl WdfTransientDevStateMgr::~WdfTransientDevStateMgr(void) __ptr64" ??1WdfTransientDevStateMgr@@QEAA@XZ
0x14007FC58: "rpcrt4.dll" ??_C@_1BG@OHPGIPDH@?$AAr?$AAp?$AAc?$AAr?$AAt?$AA4?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14007DED0: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x14007E2F8: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x14007F928: "ServicesForStagedBoot" ??_C@_1CM@HBNNEMID@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAF?$AAo?$AAr?$AAS?$AAt?$AAa?$AAg?$AAe?$AAd?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x140063174: "void __cdecl ScMarkForDelete(class CServiceRecord * __ptr64)" ?ScMarkForDelete@@YAXPEAVCServiceRecord@@@Z
0x1400894E8: "False" ??_C@_1M@GDFLIJGE@?$AAF?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x140092F28: SspiCli_NULL_THUNK_DATA_DLN
0x14007DCF0: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x14007E418: "__cdecl _imp_RtlSetControlSecurityDescriptor" __imp_RtlSetControlSecurityDescriptor
0x14008A180: "OptionValue" ??_C@_1BI@CBOLNBDL@?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x14009926C: "unsigned long g_globalMemoryHardCap" ?g_globalMemoryHardCap@@3KA
0x14002A630: "void __cdecl ScBuildServiceShareProcId(int)" ?ScBuildServiceShareProcId@@YAXH@Z
0x140092BEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x140098EE8: "__cdecl _hmod__api_ms_win_security_lsapolicy_l1_1_0_dll" __hmod__api_ms_win_security_lsapolicy_l1_1_0_dll
0x14007E020: "__cdecl _imp_SetTokenInformation" __imp_SetTokenInformation
0x1400277AC: "public: static long __cdecl WdfDriverManager::InitializePlatformLibrary(void)" ?InitializePlatformLibrary@WdfDriverManager@@SAJXZ
0x140080AB0: "Software\Microsoft\Windows NT\Cu" ??_C@_1IC@CCDIKDBC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14007F4E0: "EnableAutostartEvents" ??_C@_1CM@MNFHFMGJ@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAA?$AAu?$AAt?$AAo?$AAs?$AAt?$AAa?$AAr?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x14006E6F0: "public: virtual void * __ptr64 __cdecl WdfObject::`vector deleting destructor'(unsigned int) __ptr64" ??_EWdfObject@@UEAAPEAXI@Z
0x14008AEC8: "WdfTransientDevStateMgr::~WdfTra" ??_C@_0DC@GPPNMOAM@WdfTransientDevStateMgr?3?3?$HOWdfTra@
0x1400507A0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x1400086F0: "void __cdecl ScInitStartupInfo(struct _STARTUPINFOEXW * __ptr64,int)" ?ScInitStartupInfo@@YAXPEAU_STARTUPINFOEXW@@H@Z
0x140085480: NETWORK_MANAGER_TRIGGER_PROVIDER_GUID
0x140098100: UMDF_PROVIDER_Context
0x1400309D8: "__cdecl _tailMerge_ext_ms_win_scesrv_server_l1_1_0_dll" __tailMerge_ext_ms_win_scesrv_server_l1_1_0_dll
0x140050C30: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x14006F6E0: "public: unsigned char __cdecl WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters>::Remove(class WdfServiceKey * __ptr64,unsigned char * __ptr64) __ptr64" ?Remove@?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@QEAAEPEAVWdfServiceKey@@PEAE@Z
0x1400A01F0: "__cdecl _imp_ScesrvTerminateServer" __imp_ScesrvTerminateServer
0x14007D9D8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1400247C8: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_SvchostSplit>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_SvchostSplit@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x14007D9C8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140099650: "struct _RTL_CRITICAL_SECTION ScBootConfigCriticalSection" ?ScBootConfigCriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x14006D504: McGenEventUnregister
0x14001AEF0: "void __cdecl ScmpResourceSetCallback(struct _RM_RESOURCE_SET_CALLBACK_PAYLOAD * __ptr64)" ?ScmpResourceSetCallback@@YAXPEAU_RM_RESOURCE_SET_CALLBACK_PAYLOAD@@@Z
0x14002DA14: ScExtpStopService
0x140099CC0: "unsigned long g_usSlowStartupWarningLogEventThreshold" ?g_usSlowStartupWarningLogEventThreshold@@3KA
0x140030C1B: "__cdecl _imp_load_SpInfGetIndirectString" __imp_load_SpInfGetIndirectString
0x140092E0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x1400896A8: "Service timeout" ??_C@_1CA@FJIOOFDP@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140080D40: "NoInteractiveServices" ??_C@_1CM@LJCIHFBK@?$AAN?$AAo?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x14007DD20: "__cdecl _imp_CreateWaitableTimerExW" __imp_CreateWaitableTimerExW
0x14002EDA0: ScExtInitializeTerminateSCE
0x140093A98: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLB
0x140051F8C: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x140065D10: "void __cdecl ScCheckNotifySettings(void)" ?ScCheckNotifySettings@@YAXXZ
0x1400827B0: "SeDebugPrivilege" ??_C@_1CC@DMDJMJLM@?$AAS?$AAe?$AAD?$AAe?$AAb?$AAu?$AAg?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007E3F0: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x1400509B8: "public: void __cdecl wil::details_abi::ThreadLocalData::Clear(void) __ptr64" ?Clear@ThreadLocalData@details_abi@wil@@QEAAXXZ
0x140028A08: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x1400550F8: "unsigned long __cdecl ScConvertToBootPathName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScConvertToBootPathName@@YAKPEAGPEAPEAG@Z
0x14002FF5D: "__cdecl _imp_load_AuthzFreeAuditEvent" __imp_load_AuthzFreeAuditEvent
0x140089480: "DeviceInstall" ??_C@_1BM@OAGJGBCL@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?$AA@
0x140050A90: "public: static void __cdecl wil::details::DestroyThreadPoolTimer<struct wil::details::SystemThreadPoolMethods,0>::Destroy(struct _TP_TIMER * __ptr64)" ?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAXPEAU_TP_TIMER@@@Z
0x140051F64: "unsigned __int64 __cdecl wil::details::ResultStringSize(unsigned short const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBG@Z
0x14001CC04: "protected: int __cdecl CServiceRecord::RemoveStartDependency(class CServiceRecord * __ptr64) __ptr64" ?RemoveStartDependency@CServiceRecord@@IEAAHPEAV1@@Z
0x140098E88: "__cdecl _hmod__ext_ms_win_secur32_translatename_l1_1_0_dll" __hmod__ext_ms_win_secur32_translatename_l1_1_0_dll
0x140099C28: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x1400984CC: "unsigned long g_cScMaxRemoteQueues" ?g_cScMaxRemoteQueues@@3KA
0x140093CE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x140093928: ext-ms-win-core-resourcemanager-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A01E8: ext-ms-win-core-resourcemanager-l1-2-0_NULL_THUNK_DATA_DLA
0x14007E4F8: "__cdecl _imp_NtSetInformationProcess" __imp_NtSetInformationProcess
0x14000B820: "protected: void __cdecl CWin32ServiceRecord::UpdateServiceMemoryInformation(unsigned __int64) __ptr64" ?UpdateServiceMemoryInformation@CWin32ServiceRecord@@IEAAX_K@Z
0x1400A01C8: ext-ms-win-core-resourcemanager-l1-1-0_NULL_THUNK_DATA_DLA
0x140093940: ext-ms-win-core-resourcemanager-l1-2-0_NULL_THUNK_DATA_DLB
0x14008B9D8: WPP_e36496966d7d350a48d54850ecaaedbc_Traceguids
0x14000A6E0: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceStop(unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?ServiceHealthLogServiceStop@CWin32ServiceRecord@@QEAAXPEBGKK@Z
0x140014880: "public: virtual unsigned long __cdecl CServiceRecord::GetStatus(struct _SERVICE_STATUS * __ptr64) __ptr64" ?GetStatus@CServiceRecord@@UEAAKPEAU_SERVICE_STATUS@@@Z
0x140093C2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14007F000: "TriggerInfo" ??_C@_1BI@GGDFNNDM@?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x14007DD38: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x1400930B8: ext-ms-win-core-resourcemanager-l1-1-0_NULL_THUNK_DATA_DLN
0x140007AC8: "unsigned long __cdecl ScCheckPrivilegesInToken(class CServiceRecord * __ptr64,struct _TOKEN_PRIVILEGES * __ptr64,unsigned short * __ptr64,void * __ptr64,void * __ptr64,unsigned long)" ?ScCheckPrivilegesInToken@@YAKPEAVCServiceRecord@@PEAU_TOKEN_PRIVILEGES@@PEAGPEAX3K@Z
0x1400930D8: ext-ms-win-core-resourcemanager-l1-2-0_NULL_THUNK_DATA_DLN
0x14007D8C8: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x140073E3C: "private: int __cdecl WdfDevNode::GetDeviceProperties(void * __ptr64,struct _DO_DEVINFO_DATA * __ptr64) __ptr64" ?GetDeviceProperties@WdfDevNode@@AEAAHPEAXPEAU_DO_DEVINFO_DATA@@@Z
0x140051870: "public: void __cdecl wil::details_abi::SubscriptionList::OnSignaled(class wil::srwlock & __ptr64) __ptr64" ?OnSignaled@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@@Z
0x14001E024: "void __cdecl ScDelayAndLowerCurrentThreadPriority(unsigned long)" ?ScDelayAndLowerCurrentThreadPriority@@YAXK@Z
0x140021630: "protected: int __cdecl CNameEntryList<class CUnresolvedNameEntry>::FindEntryInternal(unsigned short const * __ptr64,class CUnresolvedNameEntry * __ptr64 * __ptr64) __ptr64" ?FindEntryInternal@?$CNameEntryList@VCUnresolvedNameEntry@@@@IEAAHPEBGPEAPEAVCUnresolvedNameEntry@@@Z
0x1400789C0: "public: virtual void * __ptr64 __cdecl WdfProcess::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfProcess@@UEAAPEAXI@Z
0x1400981F4: "unsigned char g_fDefaultControlMessageTimeout" ?g_fDefaultControlMessageTimeout@@3EA
0x14008A720: "WdfMinorVersion" ??_C@_1CA@KOAPHKB@?$AAW?$AAd?$AAf?$AAM?$AAi?$AAn?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140099D10: "struct HKEY__ * __ptr64 __ptr64 g_ManufacturingWildcardDriverKey" ?g_ManufacturingWildcardDriverKey@@3PEAUHKEY__@@EA
0x140081A48: "SCM" ??_C@_17KBMGCMJB@?$AAS?$AAC?$AAM?$AA?$AA@
0x14007E518: "__cdecl _imp_RtlDeleteSecurityObject" __imp_RtlDeleteSecurityObject
0x14007D728: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x14005AF58: "public: void * __ptr64 __cdecl CRestartContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRestartContext@@QEAAPEAXI@Z
0x14007D808: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x14007D998: api-ms-win-core-datetime-l1-1-0_NULL_THUNK_DATA
0x140089410: "ApiDebugMode" ??_C@_1BK@DBNOGOIG@?$AAA?$AAp?$AAi?$AAD?$AAe?$AAb?$AAu?$AAg?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14007E4E0: "__cdecl _imp_RtlGetNtProductType" __imp_RtlGetNtProductType
0x14008A740: "WudfSvc: Failed to start activit" ??_C@_0CM@HBGKDBLI@WudfSvc?3?5Failed?5to?5start?5activit@
0x140089C28: WPP_02fb5e2ada9937adb6adb57c65a6d16a_Traceguids
0x14007D6F8: "__cdecl _imp_EAQueryAggregateEventData" __imp_EAQueryAggregateEventData
0x14007DFF8: "__cdecl _imp_SetKernelObjectSecurity" __imp_SetKernelObjectSecurity
0x140093878: profapi_NULL_THUNK_DATA_DLB
0x14007F91C: "boot" ??_C@_04LBLCPLHF@boot?$AA@
0x140080CE8: "DC" ??_C@_15FDFFOBPF@?$AAD?$AAC?$AA?$AA@
0x14007D798: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x14001D96C: "unsigned long __cdecl ScGetCtrlSetIds(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScGetCtrlSetIds@@YAKPEAUHKEY__@@PEAK@Z
0x140099BC0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUhxivtUhxUhvieviUlyquivUznwGEUkivxlnkOlyq@services" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUhxivtUhxUhvieviUlyquivUznwGEUkivxlnkOlyq@services
0x14007B1A8: "const CDriverRecord::`vftable'" ??_7CDriverRecord@@6B@
0x14007D7B0: "__cdecl _imp_RpcServerInqCallAttributesA" __imp_RpcServerInqCallAttributesA
0x1400224AC: "int __cdecl ScIsUserServiceAllowedForUser(unsigned short const * __ptr64,struct HKEY__ * __ptr64,int)" ?ScIsUserServiceAllowedForUser@@YAHPEBGPEAUHKEY__@@H@Z
0x140009194: "int __cdecl ScSuppressServiceStartInSafeMode(class CServiceRecord * __ptr64)" ?ScSuppressServiceStartInSafeMode@@YAHPEAVCServiceRecord@@@Z
0x140019B0C: ScExtpLaunchService
0x14007EB80: "svchost -k" ??_C@_1BG@FBCKJAII@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?5?$AA?9?$AAk?$AA?$AA@
0x140053870: "int __cdecl wil_details_SetPropertyCacheOpportunityCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyCacheOpportunityCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x14007E488: "__cdecl _imp_TpReleaseTimer" __imp_TpReleaseTimer
0x140030CCA: "__cdecl _imp_load_EnumDependentServicesW" __imp_load_EnumDependentServicesW
0x1400A01D8: "__cdecl _imp_RmApplyResourceSet" __imp_RmApplyResourceSet
0x14002EE10: "public: virtual void __cdecl CWin32ServiceRecord::SetDirectTriggerSubscription(struct _WNF_USER_SUBSCRIPTION * __ptr64) __ptr64" ?SetDirectTriggerSubscription@CWin32ServiceRecord@@UEAAXPEAU_WNF_USER_SUBSCRIPTION@@@Z
0x14006A134: "__cdecl TlgDefineProvider_annotation__TlggScmProviderProv" _TlgDefineProvider_annotation__TlggScmProviderProv
0x14000E664: "private: bool __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_FindKey(class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64 const & __ptr64,unsigned __int64,struct utl::_HashNode<class CServiceRecord * __ptr64> * __ptr64 * __ptr64) __ptr64" ?_FindKey@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEAA_NV?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@2@AEBQEAVCServiceRecord@@_KPEAPEAU?$_HashNode@PEAVCServiceRecord@@@2@@Z
0x14007E5E0: "__cdecl _imp_NtInitializeRegistry" __imp_NtInitializeRegistry
0x140082850: "SeCreatePermanentPrivilege" ??_C@_1DG@NDBAKHHP@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAe?$AAr?$AAm?$AAa?$AAn?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140078B6C: "private: long __cdecl WdfProcess::GenerateHostReportBaseFileName(unsigned long) __ptr64" ?GenerateHostReportBaseFileName@WdfProcess@@AEAAJK@Z
0x140080388: "\\.\NDIS" ??_C@_1BC@JMINEEFF@?$AA?2?$AA?2?$AA?4?$AA?2?$AAN?$AAD?$AAI?$AAS?$AA?$AA@
0x14007EFA0: SCMEvt_ServiceStatusChange
0x140089D38: WPP_682ba68be9693d33c024a550e472941b_Traceguids
0x1400792A0: "public: static long __cdecl WdfProcess::QueryProcessTimeout(unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?QueryProcessTimeout@WdfProcess@@SAJPEBGKPEAK11@Z
0x140015C9C: "public: unsigned short * __ptr64 __cdecl CServiceRecord::ReadDisplayName(void) __ptr64" ?ReadDisplayName@CServiceRecord@@QEAAPEAGXZ
0x14007EE78: "svchost" ??_C@_1BA@KJLELHN@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x140019904: "private: void __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_InitBuckets(void) __ptr64" ?_InitBuckets@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEAAXXZ
0x14007E590: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x14008A868: "unknown device" ??_C@_1BO@HEIKLJHH@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAd?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140065644: "int __cdecl IS_VALID_NOTIFICATION_HANDLE(struct _SC_HANDLE_STRUCT * __ptr64)" ?IS_VALID_NOTIFICATION_HANDLE@@YAHPEAU_SC_HANDLE_STRUCT@@@Z
0x14005BD68: "public: void __cdecl CWin32ServiceRecord::QueueRecoveryAction(enum SERVICE_FAILURE_REASON) __ptr64" ?QueueRecoveryAction@CWin32ServiceRecord@@QEAAXW4SERVICE_FAILURE_REASON@@@Z
0x14006B2F0: RpcpAddInterface
0x14008A3B8: "ServiceHang" ??_C@_1BI@DHIDCOJA@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAH?$AAa?$AAn?$AAg?$AA?$AA@
0x14001B97C: "unsigned long __cdecl ScGetPrivilege(unsigned long,unsigned long * __ptr64)" ?ScGetPrivilege@@YAKKPEAK@Z
0x140099288: "struct _TP_POOL * __ptr64 __ptr64 g_TpPool" ?g_TpPool@@3PEAU_TP_POOL@@EA
0x140089678: "shutting down" ??_C@_1BM@LBDBOGFF@?$AAs?$AAh?$AAu?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAo?$AAw?$AAn?$AA?$AA@
0x14007F108: "DependOnService" ??_C@_1CA@JEMHMMKK@?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AAO?$AAn?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14007E2C0: "__cdecl _imp_NtClose" __imp_NtClose
0x14007F9B8: "HwOrder" ??_C@_1BA@LMGOOBAB@?$AAH?$AAw?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x140050CA0: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x140006190: "unsigned long __cdecl ScmCreateRMHost(class CWin32ServiceRecord * __ptr64,void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64,unsigned short * __ptr64,struct _RM_PSM_HOST_INFO * __ptr64 * __ptr64)" ?ScmCreateRMHost@@YAKPEAVCWin32ServiceRecord@@PEAXPEAG2K12PEAPEAU_RM_PSM_HOST_INFO@@@Z
0x140020200: "unsigned long __cdecl ScOpenSecurityKey(struct HKEY__ * __ptr64,unsigned long,int,struct HKEY__ * __ptr64 * __ptr64)" ?ScOpenSecurityKey@@YAKPEAUHKEY__@@KHPEAPEAU1@@Z
0x140016BA8: "unsigned long __cdecl ScCheckControlAccess(void * __ptr64,class CServiceRecord * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?ScCheckControlAccess@@YAKPEAXPEAVCServiceRecord@@KPEAK2@Z
0x14008B8D8: "WdfProcess::TerminateProcess" ??_C@_0BN@HFIDIFEL@WdfProcess?3?3TerminateProcess?$AA@
0x14007E160: "__cdecl _imp_TpSetPoolMinThreads" __imp_TpSetPoolMinThreads
0x14007DF58: "__cdecl _imp_CM_Get_DevNode_Status" __imp_CM_Get_DevNode_Status
0x140015EE4: "unsigned long __cdecl ScGetNamedServiceInstanceRecord(unsigned short const * __ptr64,class CServiceRecord * __ptr64 * __ptr64)" ?ScGetNamedServiceInstanceRecord@@YAKPEBGPEAPEAVCServiceRecord@@@Z
0x140089380: "LsaLookupOpenPolicy" ??_C@_1CI@PDEBBLDI@?$AAL?$AAs?$AAa?$AAL?$AAo?$AAo?$AAk?$AAu?$AAp?$AAO?$AAp?$AAe?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x14007DAC0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400063F4: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000E820: "unsigned long __cdecl ScGetNamedServiceRecord(unsigned short const * __ptr64,class CServiceRecord * __ptr64 * __ptr64)" ?ScGetNamedServiceRecord@@YAKPEBGPEAPEAVCServiceRecord@@@Z
0x140024848: "private: static void __cdecl wil::Feature<struct __WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation>::ReportUsageToService(bool,enum wil::ReportingKind,unsigned __int64)" ?ReportUsageToService@?$Feature@U__WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation@@@wil@@CAX_NW4ReportingKind@2@_K@Z
0x14007DEF0: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x14001E160: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x140089F28: "enabled" ??_C@_1BA@BKMGIBPB@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14007E5A0: "__cdecl _imp_RtlQueueWorkItem" __imp_RtlQueueWorkItem
0x1400302EC: "__cdecl _tailMerge_cryptbase_dll" __tailMerge_cryptbase_dll
0x1400248A0: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x1400524B0: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x14006AB60: "long __cdecl ScUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?ScUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140082888: "SeCreatePagefilePrivilege" ??_C@_1DE@JPAKAFPO@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAg?$AAe?$AAf?$AAi?$AAl?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007DCA8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14001AC0C: "unsigned __int64 __cdecl ScGetUserContext(void)" ?ScGetUserContext@@YA_KXZ
0x140081030: "ext-ms-win-com-psmregister-l1-2-" ??_C@_1EE@EDGLNFBP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AA?9?$AAp?$AAs?$AAm?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x14007DC10: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140070AA0: "private: virtual void * __ptr64 __cdecl DrvMgrLpcNotification::`vector deleting destructor'(unsigned int) __ptr64" ??_EDrvMgrLpcNotification@@EEAAPEAXI@Z
0x14007DDD8: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x140030B9C: "__cdecl _tailMerge_ext_ms_win_spinf_inf_l1_1_0_dll" __tailMerge_ext_ms_win_spinf_inf_l1_1_0_dll
0x14008B158: "CompanionConfigurations" ??_C@_1DA@MFLMHEHD@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAi?$AAo?$AAn?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14007E338: "__cdecl _imp_RtlQuerySecurityObject" __imp_RtlQuerySecurityObject
0x14008B4A0: "minkernel\wdf\framework\umdf\dri" ??_C@_1GO@POCLOFPG@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAd?$AAr?$AAi@
0x14001A230: "int __cdecl wil_details_SetPropertyFlagCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyFlagCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x140076AC4: "public: long __cdecl WdfDevNode::UnloadProcess(void) __ptr64" ?UnloadProcess@WdfDevNode@@QEAAJXZ
0x14007EAC0: "%ws\%ws\%ws" ??_C@_1BI@OAILGCEN@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14007DF48: "__cdecl _imp_CM_Query_And_Remove_SubTreeW" __imp_CM_Query_And_Remove_SubTreeW
0x14007F030: "ObjectName" ??_C@_1BG@OBMODCLN@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14007F048: "ImagePath" ??_C@_1BE@CMLCLKJK@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14001AFA0: "public: virtual unsigned short * __ptr64 __cdecl CServiceRecord::GetTemplateServiceName(void) __ptr64" ?GetTemplateServiceName@CServiceRecord@@UEAAPEAGXZ
0x14007E510: "__cdecl _imp_RtlCopyLuid" __imp_RtlCopyLuid
0x14007E348: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x140015DE0: "int __cdecl ScIsValidServiceName(unsigned short const * __ptr64)" ?ScIsValidServiceName@@YAHPEBG@Z
0x14007E0F0: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x14007E530: "__cdecl _imp_RtlDosPathNameToNtPathName_U_WithStatus" __imp_RtlDosPathNameToNtPathName_U_WithStatus
0x140098E90: "__cdecl _hmod__ext_ms_win_advapi32_shutdown_l1_1_0_dll" __hmod__ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x14008A198: "MINIMAL" ??_C@_1BA@MHDMKJEM@?$AAM?$AAI?$AAN?$AAI?$AAM?$AAA?$AAL?$AA?$AA@
0x140099608: "struct _RTL_SRWLOCK ScExtensionLock" ?ScExtensionLock@@3U_RTL_SRWLOCK@@A
0x14007F240: "SC_MANAGER OBJECT" ??_C@_1CE@LKLFACBG@?$AAS?$AAC?$AA_?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAR?$AA?5?$AAO?$AAB?$AAJ?$AAE?$AAC?$AAT?$AA?$AA@
0x14007B7A8: "const WdfObject::`vftable'" ??_7WdfObject@@6B@
0x14007E240: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x14008AB60: "succeeded" ??_C@_1BE@GCAFJAHI@?$AAs?$AAu?$AAc?$AAc?$AAe?$AAe?$AAd?$AAe?$AAd?$AA?$AA@
0x14007EBC0: "\REGISTRY\MACHINE\" ??_C@_1CG@GOLKLNMC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AA?$AA@
0x14006E8F0: "public: virtual unsigned char __cdecl WdfObject::AreYouThis(unsigned short const * __ptr64) __ptr64" ?AreYouThis@WdfObject@@UEAAEPEBG@Z
0x140006508: "unsigned long __cdecl ScGenerateHostID(unsigned __int64 * __ptr64)" ?ScGenerateHostID@@YAKPEA_K@Z
0x14007E200: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x140006EEC: ScValidateMultiSZ
0x1400122DC: "unsigned long __cdecl ScReadHardwareOverrideStartType(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64)" ?ScReadHardwareOverrideStartType@@YAKPEAUHKEY__@@PEBGKPEAK@Z
0x14008A7C0: "devnode process is still loaded" ??_C@_0CA@COBGANJF@devnode?5process?5is?5still?5loaded?$AA@
0x14007DE58: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x140030FDB: "__cdecl _imp_load_I_NetServerSetServiceBits" __imp_load_I_NetServerSetServiceBits
0x14007B5A8: "const SmartPtrRef::`vftable'" ??_7SmartPtrRef@@6B@
0x14002BC34: ?MakeAndInitialize@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x1400205F8: "unsigned long __cdecl ScGetSaclParameters(unsigned long * __ptr64,unsigned char * __ptr64)" ?ScGetSaclParameters@@YAKPEAKPEAE@Z
0x14007DD58: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x140081080: "ext-ms-win-com-psmregister-l1-2-" ??_C@_1EE@PLNHLCHK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AA?9?$AAp?$AAs?$AAm?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x140080C10: "System\CurrentControlSet\Control" ??_C@_1FE@LPBMNFDF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14003069C: "__cdecl _imp_load_RmApplyResourceSet" __imp_load_RmApplyResourceSet
0x140081978: "NtUpdateWnfStateData" ??_C@_0BF@NPHHEHP@NtUpdateWnfStateData?$AA@
0x140030380: ApiSetQueryApiSetPresence
0x140089CB0: WPP_d3c03f0729393e9e47e9c8000f518308_Traceguids
0x140028FB8: "long __cdecl wil_details_RtlSubscribeWnfStateChangeNotification(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?wil_details_RtlSubscribeWnfStateChangeNotification@@YAJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@Z
0x14005FAAC: "unsigned long __cdecl ScGetLockOwner(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScGetLockOwner@@YAKPEAXPEAPEAG@Z
0x14005DED4: "public: struct utl::pair<class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64>,bool> __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::emplace<class CNameEntry * __ptr64 & __ptr64>(class CNameEntry * __ptr64 & __ptr64) __ptr64" ??$emplace@AEAPEAVCNameEntry@@@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@QEAA?AU?$pair@V?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@utl@@_N@1@AEAPEAVCNameEntry@@@Z
0x14005C580: "public: virtual void * __ptr64 __cdecl CWin32ServiceRecord::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32ServiceRecord@@UEAAPEAXI@Z
0x1400806E0: "system" ??_C@_1O@KFLILLAF@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x140070618: WPP_SF_DDS
0x1400691BC: WPP_SF_ddS
0x140056BE4: WPP_SF_SDD
0x140064914: WPP_SF_SDd
0x140064D88: WPP_SF_SdD
0x140056BE4: WPP_SF_Sdd
0x140080480: "System\CurrentControlSet\Service" ??_C@_1EE@ELHAEFGP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14002A4EC: "void __cdecl ScExtpUnregisterTriggers(struct _SERVICE_TRIGGER_CONTEXT * __ptr64,int)" ?ScExtpUnregisterTriggers@@YAXPEAU_SERVICE_TRIGGER_CONTEXT@@H@Z
0x140005F14: "unsigned long __cdecl ScmAcquireResourceSet(class CWin32ServiceRecord * __ptr64,struct _RM_PSM_HOST_INFO * __ptr64)" ?ScmAcquireResourceSet@@YAKPEAVCWin32ServiceRecord@@PEAU_RM_PSM_HOST_INFO@@@Z
0x140060684: WPP_SF_DiS
0x14008B918: "HostProcessDbgBreakOnStart" ??_C@_1DG@NIBCHABL@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAD?$AAb?$AAg?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140072FF0: "public: virtual void * __ptr64 __cdecl WdfDevNode::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfDevNode@@UEAAPEAXI@Z
0x14007F148: "DeleteFlag" ??_C@_1BG@EPBGMJAB@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x140056BE4: WPP_SF_SLd
0x14007E090: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x140089D60: "allowed" ??_C@_07BHLLLGNC@allowed?$AA@
0x14005AF9C: "public: void * __ptr64 __cdecl CRunCommandContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRunCommandContext@@QEAAPEAXI@Z
0x14007D6C0: "__cdecl _imp_BriCreateBrokeredEvent" __imp_BriCreateBrokeredEvent
0x140089358: "LsaStorePrivateData" ??_C@_1CI@BJHBKKHO@?$AAL?$AAs?$AAa?$AAS?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x140068CE4: WPP_SF_Sqd
0x140053C8C: WPP_SF_DSS
0x1400542D8: WPP_SF_dSS
0x14005DD54: WPP_SF_sSd
0x140053FA8: WPP_SF_SSD
0x140053FA8: WPP_SF_SSd
0x14001CAB8: "public: unsigned long __cdecl CServiceDatabase::Remove(class CServiceRecord * __ptr64) __ptr64" ?Remove@CServiceDatabase@@QEAAKPEAVCServiceRecord@@@Z
0x14007FFC8: "AutoRestartDeviceCountLimit" ??_C@_1DI@GHPIJFIF@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x14007E150: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x14002C898: "public: void * __ptr64 __cdecl CUnresolvedNameEntry::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUnresolvedNameEntry@@QEAAPEAXI@Z
0x14006DF18: "protected: virtual __cdecl CUMDFUnknown::~CUMDFUnknown(void) __ptr64" ??1CUMDFUnknown@@MEAA@XZ
0x14001AF20: "public: virtual enum _TRI_BOOL __cdecl CWin32ServiceRecord::GetIsManagedAccount(void) __ptr64" ?GetIsManagedAccount@CWin32ServiceRecord@@UEAA?AW4_TRI_BOOL@@XZ
0x14007D708: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1400984C4: "unsigned long g_cScMaxCreateDeleteCacheEntries" ?g_cScMaxCreateDeleteCacheEntries@@3KA
0x140050FB8: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x14008A460: "already in release wait" ??_C@_0BI@MHKKGDG@already?5in?5release?5wait?$AA@
0x14002E0E4: "unsigned long __cdecl ScInitSecurityProcess(class CServiceRecord * __ptr64)" ?ScInitSecurityProcess@@YAKPEAVCServiceRecord@@@Z
0x14007DCB8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14005CA78: "public: void __cdecl CServiceRecord::ReportServiceHung(void) __ptr64" ?ReportServiceHung@CServiceRecord@@QEAAXXZ
0x14002FD30: "__cdecl purecall" _purecall
0x14007DC30: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x140051DE4: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x14008AD20: "header should not be NULL" ??_C@_0BK@INMDDGEO@header?5should?5not?5be?5NULL?$AA@
0x14005FFA0: RLockServiceDatabase
0x14008BA00: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140057848: "unsigned long __cdecl ScReadPreshutdownOrder(struct _SERVICE_PRESHUTDOWN_DATA * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScReadPreshutdownOrder@@YAKPEAPEAU_SERVICE_PRESHUTDOWN_DATA@@PEAK@Z
0x14003004F: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x140093048: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLN
0x14008AE40: "NotPooled" ??_C@_1BE@PANBDAPF@?$AAN?$AAo?$AAt?$AAP?$AAo?$AAo?$AAl?$AAe?$AAd?$AA?$AA@
0x14007D838: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x1400805E8: "Failed" ??_C@_1O@GCADHOOL@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140099410: g_TriggerRegistrationLock
0x14001CB6C: "public: int __cdecl CServiceRecord::DeleteStopDependencies(void) __ptr64" ?DeleteStopDependencies@CServiceRecord@@QEAAHXZ
0x14000D090: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x14008A1D0: WPP_a67c78ba56593f9fb1d50a83bbf35205_Traceguids
0x1400267DC: "void __cdecl ScGetBootAndSystemDriverState(void)" ?ScGetBootAndSystemDriverState@@YAXXZ
0x140081A18: WPP_4bf0dd2962a13d15275744f6a30734df_Traceguids
0x1400650E8: WPP_SF_ddSd
0x14005A9CC: WPP_SF_Sddd
0x14008B480: "WdfProcess::WdfProcess" ??_C@_0BH@GMPGJBCK@WdfProcess?3?3WdfProcess?$AA@
0x140076B24: "private: void __cdecl WdfDevNode::UpdateDeviceRestartParameters(void) __ptr64" ?UpdateDeviceRestartParameters@WdfDevNode@@AEAAXXZ
0x140055DD8: "unsigned long __cdecl ScGetRawServiceConfig(class CServiceRecord * __ptr64,union _SC_RPC_SERVICE_CONFIG * __ptr64)" ?ScGetRawServiceConfig@@YAKPEAVCServiceRecord@@PEAT_SC_RPC_SERVICE_CONFIG@@@Z
0x140009E08: "void __cdecl wil_details_FeaturePropertyCache_ReportUsageToService(union wil_details_FeaturePropertyCache * __ptr64,unsigned int,struct FEATURE_LOGGED_TRAITS const * __ptr64,int,enum wil_ReportingKind,unsigned __int64)" ?wil_details_FeaturePropertyCache_ReportUsageToService@@YAXPEATwil_details_FeaturePropertyCache@@IPEBUFEATURE_LOGGED_TRAITS@@HW4wil_ReportingKind@@_K@Z
0x1400197D0: MIDL_user_allocate
0x1400697C0: WPP_SF_SidL
0x140021BAC: "int __cdecl ScCreateUserServicesForUser(unsigned __int64,unsigned long)" ?ScCreateUserServicesForUser@@YAH_KK@Z
0x140050508: "public: __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x14001AEF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14007DB30: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x14007DB08: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140031127: memcmp
0x14005A9CC: WPP_SF_Sldd
0x14008A6F0: "%s.DLL" ??_C@_1O@GBEMBBGP@?$AA?$CF?$AAs?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x14007F7F0: "SvcMemMidLimitInMB" ??_C@_1CG@MFICAKGB@?$AAS?$AAv?$AAc?$AAM?$AAe?$AAm?$AAM?$AAi?$AAd?$AAL?$AAi?$AAm?$AAi?$AAt?$AAI?$AAn?$AAM?$AAB?$AA?$AA@
0x14007DE00: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x14002DEF4: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_PackagedServices>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_PackagedServices@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x14002D7FC: "int __cdecl ScGetStartEvent(void * __ptr64 * __ptr64)" ?ScGetStartEvent@@YAHPEAPEAX@Z
0x14003049E: "__cdecl _tailMerge_ext_ms_win_com_psmregister_l1_2_2_dll" __tailMerge_ext_ms_win_com_psmregister_l1_2_2_dll
0x14007E388: "__cdecl _imp_RtlQueueApcWow64Thread" __imp_RtlQueueApcWow64Thread
0x14005AB28: WPP_SF_Sddi
0x14008ADA8: "DrvMgrLpcNotification::DrvMgrWor" ??_C@_0CK@GJLKFBPG@DrvMgrLpcNotification?3?3DrvMgrWor@
0x14007F858: "StartType" ??_C@_1BE@PHCDBGMJ@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x14007D908: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x1400819E0: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x140089600: WPP_c544ba11bf153fb619e1237fa7617988_Traceguids
0x140089550: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x140008934: ScWaitForFirstResponse
0x14005D04C: "void __cdecl ScProcessCleanup(void * __ptr64)" ?ScProcessCleanup@@YAXPEAX@Z
0x14005C318: WPP_SF_DdSS
0x1400543B0: WPP_SF_dSSD
0x14006A528: WPP_SF_SSDD
0x140064BD0: WPP_SF_SSdD
0x140064CAC: WPP_SF_SSdd
0x14007B3A8: "const CWin32ServiceRecord::`vftable'" ??_7CWin32ServiceRecord@@6B@
0x140030C39: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x140089278: ScmWppLoggingGuid
0x14007E2B8: "__cdecl _imp_NtFilterToken" __imp_NtFilterToken
0x14006F9C0: "public: unsigned char __cdecl WdfDriverManager::SetControlObject(unsigned short const * __ptr64,unsigned __int64,enum _WUDF_SERVICE_TYPE) __ptr64" ?SetControlObject@WdfDriverManager@@QEAAEPEBG_KW4_WUDF_SERVICE_TYPE@@@Z
0x14002E550: RNotifyBootConfigStatus
0x140025A68: "unsigned long __cdecl ScStartServiceByName(unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?ScStartServiceByName@@YAKPEAGPEAPEAX@Z
0x140051B30: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x14002BD10: ??0?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAA@$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@2@$$QEAVSemaphoreValue@12@@Z
0x140081860: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x14007F374: ",-" ??_C@_15GMALOMPC@?$AA?0?$AA?9?$AA?$AA@
0x140099120: "long (__cdecl* __ptr64 g_wil_details_pfnRtlSubscribeWnfStateChangeNotification)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnRtlSubscribeWnfStateChangeNotification@@3P6AJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@ZEA
0x1400A02C8: "__cdecl _imp_I_NetServerSetServiceBits" __imp_I_NetServerSetServiceBits
0x140023DD8: "long __cdecl ScCreateRpcEndpointSD(void * __ptr64 * __ptr64)" ?ScCreateRpcEndpointSD@@YAJPEAPEAX@Z
0x140025954: "void __cdecl ScRegisterDirectTriggerAction(class CServiceRecord * __ptr64)" ?ScRegisterDirectTriggerAction@@YAXPEAVCServiceRecord@@@Z
0x140019940: "void __cdecl ScExtpAggregateTriggerArrived(void * __ptr64,struct _CBROKERED_EVENT_ID,void * __ptr64,void * __ptr64,unsigned long,unsigned long,enum _BI_ACTIVATION_STATUS * __ptr64)" ?ScExtpAggregateTriggerArrived@@YAXPEAXU_CBROKERED_EVENT_ID@@00KKPEAW4_BI_ACTIVATION_STATUS@@@Z
0x14002B5F4: "unsigned long __cdecl ScWriteOptionalString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScWriteOptionalString@@YAKPEAUHKEY__@@PEBG1@Z
0x14001D270: "public: int __cdecl CUnresolvedNameEntry::RemoveService(class CServiceRecord * __ptr64) __ptr64" ?RemoveService@CUnresolvedNameEntry@@QEAAHPEAVCServiceRecord@@@Z
0x140006F30: ScCreateAndSetSD
0x1400A0268: "__cdecl _imp_WerReportSubmit" __imp_WerReportSubmit
0x140050FEC: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x140018004: "void __cdecl ScNotifyServicePropertyChange(class CServiceRecord * __ptr64)" ?ScNotifyServicePropertyChange@@YAXPEAVCServiceRecord@@@Z
0x140089870: "Not removing" ??_C@_0N@OBFEJGDE@Not?5removing?$AA@
0x140099D50: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUdwuUuiznvdlipUfnwuUwirevinzmztviUhxnoryUlyquivUznwGEUwientirmxofwvOlyq@wudfscm" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUdwuUuiznvdlipUfnwuUwirevinzmztviUhxnoryUlyquivUznwGEUwientirmxofwvOlyq@wudfscm
0x140002E30: "public: unsigned __int64 __cdecl wil::details_abi::UsageIndexProperty::GetSize(void)const __ptr64" ?GetSize@UsageIndexProperty@details_abi@wil@@QEBA_KXZ
0x14008A970: "WdfObjectList<class WdfServiceKe" ??_C@_0FB@MLFOBNDN@WdfObjectList?$DMclass?5WdfServiceKe@
0x14002ED60: "private: static void __cdecl WdfDriverManager::DeferredInitialization(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?DeferredInitialization@WdfDriverManager@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1400801D0: "CUMDFUnknown::AddRef" ??_C@_0BF@DIIOGIPF@CUMDFUnknown?3?3AddRef?$AA@
0x140085210: "char const * const `void __cdecl TLV::Base64Encode<129>(unsigned char const * __ptr64,unsigned __int64,char (& __ptr64)[129])'::`2'::s_lookupTable" ?s_lookupTable@?1???$Base64Encode@$0IB@@TLV@@YAXPEBE_KAEAY0IB@D@Z@4QBDB
0x1400A0080: "__cdecl _imp_LsaLookupClose" __imp_LsaLookupClose
0x14008A4F0: EVENT_UMDF_DEVICE_OFFLINE_RESTART
0x14002CA7C: "void __cdecl TLV::Base64Encode<129>(unsigned char const * __ptr64,unsigned __int64,char (& __ptr64)[129])" ??$Base64Encode@$0IB@@TLV@@YAXPEBE_KAEAY0IB@D@Z
0x140081730: "__cdecl _sz_api_ms_win_service_core_l1_1_1_dll" __sz_api_ms_win_service_core_l1_1_1_dll
0x140022564: "public: unsigned long __cdecl CServiceRecord::SetDisplayName(unsigned short const * __ptr64) __ptr64" ?SetDisplayName@CServiceRecord@@QEAAKPEBG@Z
0x1400A00D0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x14008ABE0: "minkernel\wdf\framework\umdf\dri" ??_C@_1HO@LEMDIGLO@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAd?$AAr?$AAi@
0x14001AF00: "public: virtual unsigned short * __ptr64 __cdecl CWin32ServiceRecord::GetAliasName(void) __ptr64" ?GetAliasName@CWin32ServiceRecord@@UEAAPEAGXZ
0x14007EFC8: "\FileSystem\" ??_C@_1BK@GABKLNKA@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
0x14001D7D0: "void __cdecl ScGatherOrphanIds(struct HKEY__ * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScGatherOrphanIds@@YAXPEAUHKEY__@@PEAPEAKPEAK@Z
0x140099298: "void * __ptr64 __ptr64 g_hProviderEvent" ?g_hProviderEvent@@3PEAXEA
0x14002E8AC: "int __cdecl ScCheckLastKnownGood(void)" ?ScCheckLastKnownGood@@YAHXZ
0x140093BA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x14008B3D8: "description" ??_C@_1BI@MFBGCOGB@?$AAd?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14007F3F8: "Service Control Manager" ??_C@_1DA@OONDCMC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x1400525B4: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x14002F914: wcsstr
0x140001AD8: GetServiceRegistryStateRootPath
0x140012FD0: "unsigned long __cdecl ScOpenService(void * __ptr64,unsigned short * __ptr64,unsigned long,unsigned __int64 * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?ScOpenService@@YAKPEAXPEAGKPEA_KKPEAPEAX@Z
0x14007E470: "__cdecl _imp_RtlUnsubscribeWnfStateChangeNotification" __imp_RtlUnsubscribeWnfStateChangeNotification
0x14002765C: "void __cdecl ScRunAcceptBootPgm(void)" ?ScRunAcceptBootPgm@@YAXXZ
0x140089288: "AS" ??_C@_15FDIBCHNJ@?$AAA?$AAS?$AA?$AA@
0x140080CF0: "I_RpcServerTurnOnOffKeepalives" ??_C@_0BP@KPOFHDIF@I_RpcServerTurnOnOffKeepalives?$AA@
0x14007DAC8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14002D040: TlgRegisterAggregateProviderEx
0x1400525E4: "void __cdecl wil::details::in1diag3::_FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1400A00B0: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x140093DD0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x14007D850: "__cdecl _imp_RpcServerListen" __imp_RpcServerListen
0x140099260: "unsigned short g_SystemLanguageId" ?g_SystemLanguageId@@3GA
0x14005F600: "public: void * __ptr64 __cdecl CNameEntry::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCNameEntry@@QEAAPEAXI@Z
0x140099A88: LocalSid
0x140070BA0: "public: virtual void __cdecl DrvMgrLpcNotification::MarkForDelete(void) __ptr64" ?MarkForDelete@DrvMgrLpcNotification@@UEAAXXZ
0x14007D7F0: "__cdecl _imp_I_RpcMapWin32Status" __imp_I_RpcMapWin32Status
0x140052D5C: "unsigned long __cdecl ScDeletePassword(unsigned short * __ptr64)" ?ScDeletePassword@@YAKPEAG@Z
0x14001BC98: "public: virtual __cdecl CServiceRecord::~CServiceRecord(void) __ptr64" ??1CServiceRecord@@UEAA@XZ
0x140080000: "AutoRestartPoolCountLimit" ??_C@_1DE@MDHGELDB@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAP?$AAo?$AAo?$AAl?$AAC?$AAo?$AAu?$AAn?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x140087A30: WNF_PO_SYSTEM_TIME_CHANGED
0x14007EBB8: "Rpc" ??_C@_17KPGPIBAB@?$AAR?$AAp?$AAc?$AA?$AA@
0x14007D670: "__cdecl _imp_DevObjDeleteDeviceInfo" __imp_DevObjDeleteDeviceInfo
0x14000378C: "unsigned long __cdecl ScBroadcastServiceControlMessage(unsigned long,unsigned long,unsigned long,unsigned char * __ptr64,unsigned char,unsigned char * __ptr64)" ?ScBroadcastServiceControlMessage@@YAKKKKPEAEE0@Z
0x14008A770: "TODO: Write something interestin" ??_C@_0CH@POFLNJDJ@TODO?3?5Write?5something?5interestin@
0x14007DFA0: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x140031115: "__cdecl _imp_load_WdfGetLpcInterface" __imp_load_WdfGetLpcInterface
0x14001BDB0: "void __cdecl ScDestroyUserServicesForUser(unsigned __int64)" ?ScDestroyUserServicesForUser@@YAX_K@Z
0x14007DF28: api-ms-win-core-wow64-l1-1-0_NULL_THUNK_DATA
0x14007DF40: api-ms-win-core-wow64-l1-1-1_NULL_THUNK_DATA
0x140009F08: "struct wil_details_RecordUsageResult __cdecl wil_details_RecordUsageInPropertyCache(union wil_details_FeaturePropertyCache * __ptr64,enum wil_details_ServiceReportingKind,unsigned int,unsigned int)" ?wil_details_RecordUsageInPropertyCache@@YA?AUwil_details_RecordUsageResult@@PEATwil_details_FeaturePropertyCache@@W4wil_details_ServiceReportingKind@@II@Z
0x1400997B0: AnyPackageSid
0x140081408: "ext-ms-win-desktopappx-l1-1-2" ??_C@_1DM@HKFDHJND@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAa?$AAp?$AAp?$AAx?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2?$AA?$AA@
0x14002FD3C: "__cdecl initterm_e" _initterm_e
0x14007D818: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x1400995F8: "unsigned long volatile g_dwRunningAutostartPhase1Loop" ?g_dwRunningAutostartPhase1Loop@@3KC
0x140089C38: DEVPKEY_Device_MatchingDeviceId
0x1400028BC: "public: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsage(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsage@RawUsageIndex@details_abi@wil@@QEAA_NPEAX_K01I@Z
0x140016000: RI_ScValidatePnPService
0x14008AE00: "DefaultHiPriPool" ??_C@_1CC@FOGBOJFI@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAH?$AAi?$AAP?$AAr?$AAi?$AAP?$AAo?$AAo?$AAl?$AA?$AA@
0x140099280: "unsigned short * __ptr64 __ptr64 ScGlobalThisExePath" ?ScGlobalThisExePath@@3PEAGEA
0x14007DF90: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x14007FBD0: "System\CurrentControlSet\Control" ??_C@_1GO@PLPMPNE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14002F908: wcstoul
0x140092BCC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x14007E570: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x140081810: "__cdecl _sz_WUDFPlatform_dll" __sz_WUDFPlatform_dll
0x14008A580: EVENT_DM_SHUTDOWN_HOST_END
0x140003C90: "void __cdecl RemovalThread(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?RemovalThread@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x140081948: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x140099A94: "int g_ManufacturingModeEnabled" ?g_ManufacturingModeEnabled@@3HA
0x14007D8D8: "__cdecl _imp_wcstok_s" __imp_wcstok_s
0x14003061D: "__cdecl _tailMerge_ext_ms_win_core_resourcemanager_l1_2_0_dll" __tailMerge_ext_ms_win_core_resourcemanager_l1_2_0_dll
0x14008AB20: "CUMDFUnknown::~CUMDFUnknown" ??_C@_0BM@BPAHIDG@CUMDFUnknown?3?3?$HOCUMDFUnknown?$AA@
0x140089538: "AccountInfo" ??_C@_1BI@MOGEPMDK@?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1400749C0: "public: static int __cdecl CHostFxUtil::IsOSVersionAtLeast(unsigned long,unsigned long,unsigned short,unsigned short)" ?IsOSVersionAtLeast@CHostFxUtil@@SAHKKGG@Z
0x140093D94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-state-helpers-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-state-helpers-l1-1-0
0x14007E178: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x1400981E0: "enum _TRI_BOOL g_ServiceStartFuzzing" ?g_ServiceStartFuzzing@@3W4_TRI_BOOL@@A
0x1400A0090: "__cdecl _imp_LsaLookupTranslateSids" __imp_LsaLookupTranslateSids
0x14007D7C8: "__cdecl _imp_I_RpcBindingInqLocalClientPID" __imp_I_RpcBindingInqLocalClientPID
0x140015210: RStartServiceW
0x1400993F0: "class CScmLock ScImageStartLock" ?ScImageStartLock@@3VCScmLock@@A
0x14007E5E8: ntdll_NULL_THUNK_DATA
0x14007D880: "__cdecl _imp_memcpy" __imp_memcpy
0x14001B020: "public: virtual void __cdecl CWin32ServiceRecord::SetPreferredNode(unsigned short) __ptr64" ?SetPreferredNode@CWin32ServiceRecord@@UEAAXG@Z
0x14001488C: "private: void __cdecl CDelayStartContext::MonitorServiceState(class CServiceRecord * __ptr64) __ptr64" ?MonitorServiceState@CDelayStartContext@@AEAAXPEAVCServiceRecord@@@Z
0x14006E570: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfProcess,class WdfProcessParameters>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@UEAAPEAXI@Z
0x14007F1E0: "\/" ??_C@_15MNCACJLI@?$AA?2?$AA?1?$AA?$AA@
0x14007E0B8: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x1400301F5: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x14007E170: "__cdecl _imp_TpAllocWork" __imp_TpAllocWork
0x14008A630: "WdfServiceKey::WdfServiceKey" ??_C@_0BN@POCILBMM@WdfServiceKey?3?3WdfServiceKey?$AA@
0x140081828: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x140093DE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1
0x140053A70: RGetServiceProcessToken
0x140098F70: "void * __ptr64 * __ptr64 __ptr64 g_pScExtFunctionPointers" ?g_pScExtFunctionPointers@@3PEAPEAXEA
0x14007709C: WPP_SF_DDd
0x1400705B8: WPP_SF_DDD
0x14005AD14: WPP_SF_ddd
0x1400694DC: WPP_SF_qdq
0x14005C3F8: WPP_SF_SdS
0x14007E558: "__cdecl _imp_RtlDeregisterWait" __imp_RtlDeregisterWait
0x14008A430: WPP_4fff9a074c7b3730b114af4cc1a32844_Traceguids
0x14005AD14: WPP_SF_LLL
0x14005EFE4: WPP_SF_lll
0x140056F10: WPP_SF_SLS
0x14001B030: "public: virtual void __cdecl CWin32ServiceRecord::SetWowType(unsigned short) __ptr64" ?SetWowType@CWin32ServiceRecord@@UEAAXG@Z
0x14006F698: "public: void __cdecl WdfDriverManager::ReloadDebugModeSettings(void) __ptr64" ?ReloadDebugModeSettings@WdfDriverManager@@QEAAXXZ
0x14001E640: RGetServiceDirectory
0x14006486C: WPP_SF_DSD
0x14005A478: WPP_SF_DsD
0x140056D00: WPP_SF_dSd
0x140056D00: WPP_SF_dSD
0x14005F55C: WPP_SF_LSL
0x14005DAF4: WPP_SF_LSl
0x140064F00: WPP_SF_Sss
0x14005406C: WPP_SF_SSS
0x14001AED0: "public: virtual struct _IMAGE_RECORD * __ptr64 __cdecl CServiceRecord::GetImageRecord(void) __ptr64" ?GetImageRecord@CServiceRecord@@UEAAPEAU_IMAGE_RECORD@@XZ
0x140023420: "unsigned long __cdecl ScSaveTriggerInfo(unsigned short const * __ptr64,struct HKEY__ * __ptr64,unsigned long,int,struct _SERVICE_TRIGGER_INFO * __ptr64)" ?ScSaveTriggerInfo@@YAKPEBGPEAUHKEY__@@KHPEAU_SERVICE_TRIGGER_INFO@@@Z
0x140060400: WPP_SF_dqd
0x140077194: WPP_SF_qqq
0x140068C28: WPP_SF_SqS
0x1400893A8: "_SC_" ??_C@_19JFGBNJFP@?$AA_?$AAS?$AAC?$AA_?$AA?$AA@
0x140093CF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-0
0x14002C1E0: ?acquire@?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEBA?AV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@2@PEAKKH@Z
0x140028514: "private: long __cdecl CUmdfSvcConfig::OpenKeyHelper(void * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char,void * __ptr64 * __ptr64) __ptr64" ?OpenKeyHelper@CUmdfSvcConfig@@AEAAJPEAXPEBGKEPEAPEAX@Z
0x1400818F8: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140030B7E: "__cdecl _imp_load_WerReportCreate" __imp_load_WerReportCreate
0x14007E4B0: "__cdecl _imp_NtOpenDirectoryObject" __imp_NtOpenDirectoryObject
0x14007FA60: "System\CurrentControlSet\Control" ??_C@_1GC@NNJFMOAL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14001804C: "unsigned long __cdecl ScProcessServiceDisabled(class CServiceRecord * __ptr64,unsigned long,struct HKEY__ * __ptr64)" ?ScProcessServiceDisabled@@YAKPEAVCServiceRecord@@KPEAUHKEY__@@@Z
0x140081888: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x14008AAC0: "release wait must have a event" ??_C@_0BP@EAHKHIDM@release?5wait?5must?5have?5a?5event?$AA@
0x14001AEF0: "public: virtual void __cdecl CServiceRecord::SetIsManagedAccount(enum _TRI_BOOL) __ptr64" ?SetIsManagedAccount@CServiceRecord@@UEAAXW4_TRI_BOOL@@@Z
0x1400981E8: g_header_init_InitializeStagingSRUMFeatureReporting
0x14001AF30: "public: virtual unsigned long __cdecl CWin32ServiceRecord::GetLaunchProtected(void) __ptr64" ?GetLaunchProtected@CWin32ServiceRecord@@UEAAKXZ
0x140089948: "System\Setup\AllowStart" ??_C@_1DA@MODMHNDL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAA?$AAl?$AAl?$AAo?$AAw?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140030480: "__cdecl _imp_load_UMgrQueryUserToken" __imp_load_UMgrQueryUserToken
0x14007E018: "__cdecl _imp_FreeSid" __imp_FreeSid
0x14001AF60: "public: virtual unsigned long __cdecl CWin32ServiceRecord::GetServiceRank(void) __ptr64" ?GetServiceRank@CWin32ServiceRecord@@UEAAKXZ
0x1400A0060: WUDFPlatform_NULL_THUNK_DATA_DLA
0x1400A0210: ext-ms-win-secur32-translatename-l1-1-0_NULL_THUNK_DATA_DLA
0x14008B7A0: "cmdbuf length is not the same as" ??_C@_0CK@LGPEAHBK@cmdbuf?5length?5is?5not?5the?5same?5as@
0x140093AB8: WUDFPlatform_NULL_THUNK_DATA_DLB
0x140093918: ext-ms-win-com-psmregister-l1-2-2_NULL_THUNK_DATA_DLB
0x1400984A0: "int g_fEnableAutostartEvents" ?g_fEnableAutostartEvents@@3HA
0x140092F50: WUDFPlatform_NULL_THUNK_DATA_DLN
0x140054498: "int __cdecl ScBuildCtrlSetName(unsigned short * __ptr64,unsigned long)" ?ScBuildCtrlSetName@@YAHPEAGK@Z
0x14002FE2F: "__cdecl _dllonexit3" __dllonexit3
0x140093B14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140089FC8: "MaxNotifyRequests" ??_C@_1CE@GKOHCAJF@?$AAM?$AAa?$AAx?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AAs?$AA?$AA@
0x14002B598: "public: unsigned long __cdecl CUpdateOptionalString::Update(unsigned short const * __ptr64) __ptr64" ?Update@CUpdateOptionalString@@QEAAKPEBG@Z
0x14005C830: "public: void __cdecl CServiceRecord::LogSlowStartupEventIfApplicable(void) __ptr64" ?LogSlowStartupEventIfApplicable@CServiceRecord@@QEAAXXZ
0x14000B350: "void __cdecl ScMemoryTelemetryTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?ScMemoryTelemetryTimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x140065190: WPP_SF_dddd
0x140019090: RI_ScQueryServiceConfig
0x14007DE60: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x1400A0050: "__cdecl _imp_GetAndInitializePlatformObject" __imp_GetAndInitializePlatformObject
0x1400A00E0: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1400A0240: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA
0x14000EFF0: "public: virtual unsigned long __cdecl CWin32ServiceRecord::SetStatus(struct _SERVICE_STATUS * __ptr64) __ptr64" ?SetStatus@CWin32ServiceRecord@@UEAAKPEAU_SERVICE_STATUS@@@Z
0x140051A50: "public: void __cdecl wil::details::FeatureStateManager::QueueBackgroundSRUMUsageReporting(unsigned int,unsigned short,unsigned int) __ptr64" ?QueueBackgroundSRUMUsageReporting@FeatureStateManager@details@wil@@QEAAXIGI@Z
0x1400652B4: WPP_SF_LdLL
0x14005A900: WPP_SF_SdSL
0x140085420: "Microsoft-Windows-NetworkManager" ??_C@_1GA@KECMCMHN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr@
0x140025F40: "unsigned long __cdecl ScStartMedic(void)" ?ScStartMedic@@YAKXZ
0x14000D270: "unsigned long __cdecl ScStartServicesInStartList(class CServiceRecord * __ptr64,class utl::unordered_set<class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64> > & __ptr64,unsigned long,unsigned long,struct _STRING_PTRSW * __ptr64,unsigned long)" ?ScStartServicesInStartList@@YAKPEAVCServiceRecord@@AEAV?$unordered_set@PEAVCServiceRecord@@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@@utl@@KKPEAU_STRING_PTRSW@@K@Z
0x14007E280: "__cdecl _imp_RtlAreAllAccessesGranted" __imp_RtlAreAllAccessesGranted
0x14008A8D0: "expected object not found in lis" ??_C@_0CC@HPKBNMA@expected?5object?5not?5found?5in?5lis@
0x14007D860: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x1400894A0: "NetSetupSvc" ??_C@_1BI@DLDHPLJM@?$AAN?$AAe?$AAt?$AAS?$AAe?$AAt?$AAu?$AAp?$AAS?$AAv?$AAc?$AA?$AA@
0x1400981D0: "__cdecl _security_cookie" __security_cookie
0x140068F68: WPP_SF_dSdd
0x1400605D0: WPP_SF_DSdd
0x14005416C: WPP_SF_SSSD
0x14005DE14: "private: void __cdecl utl::_HashTable<class CNameEntry * __ptr64,class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64>,0>::_EqualRangeImpl<class CNameEntry * __ptr64>(struct utl::integral_constant<bool,0>,class CNameEntry * __ptr64 const & __ptr64,class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64> & __ptr64,class utl::_DlistConstIt<struct utl::_HashNode<class CNameEntry * __ptr64>,class CNameEntry * __ptr64> & __ptr64,unsigned __int64 & __ptr64)const __ptr64" ??$_EqualRangeImpl@PEAVCNameEntry@@@?$_HashTable@PEAVCNameEntry@@PEAV1@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@$0A@@utl@@AEBAXU?$integral_constant@_N$0A@@1@AEBQEAVCNameEntry@@AEAV?$_DlistConstIt@U?$_HashNode@PEAVCNameEntry@@@utl@@PEAVCNameEntry@@@1@2AEA_K@Z
0x140069648: WPP_SF_qqqd
0x140021324: "void __cdecl ScPostCompletedNotification(class CServiceRecord * __ptr64,unsigned long,struct _SC_NOTIFY_BLOCK * __ptr64,void * __ptr64 * __ptr64)" ?ScPostCompletedNotification@@YAXPEAVCServiceRecord@@KPEAU_SC_NOTIFY_BLOCK@@PEAPEAX@Z
0x14002EC80: ScExtSetServiceBits
0x14007DC98: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140093DA8: "__cdecl _IMPORT_DESCRIPTOR_EventAggregation" __IMPORT_DESCRIPTOR_EventAggregation
0x140003574: "long __cdecl wil_details_NtQueryWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?wil_details_NtQueryWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@Z
0x140081170: "ext-ms-win-core-resourcemanager-" ??_C@_1EO@CMOFCKNL@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?9@
0x14007ED38: MS_Services_Provider
0x14006C420: ScExtReportServiceHang
0x140001618: "struct HKEY__ * __ptr64 __cdecl ScGetRegistryPersistentRootHandle(unsigned long)" ?ScGetRegistryPersistentRootHandle@@YAPEAUHKEY__@@K@Z
0x140001328: "public: int __cdecl CServiceDatabase::FindServiceByDisplayName(unsigned short const * __ptr64,class CServiceRecord * __ptr64 * __ptr64) __ptr64" ?FindServiceByDisplayName@CServiceDatabase@@QEAAHPEBGPEAPEAVCServiceRecord@@@Z
0x14007FB10: "%SystemRoot%\system32\services.e" ??_C@_1EG@NMBEPCDO@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?4?$AAe@
0x14008B020: "minkernel\wdf\framework\umdf\dri" ??_C@_1GO@NLFAJNDD@?$AAm?$AAi?$AAn?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?2?$AAw?$AAd?$AAf?$AA?2?$AAf?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AA?2?$AAu?$AAm?$AAd?$AAf?$AA?2?$AAd?$AAr?$AAi@
0x14005C540: "public: virtual void * __ptr64 __cdecl CServiceRecord::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCServiceRecord@@UEAAPEAXI@Z
0x140031290: "__cdecl alloca_probe" _alloca_probe
0x14000430C: "void __cdecl ScDeleteImageRecord(struct _IMAGE_RECORD * __ptr64)" ?ScDeleteImageRecord@@YAXPEAU_IMAGE_RECORD@@@Z
0x14002DF60: "void __cdecl ScInitEventLogging(void)" ?ScInitEventLogging@@YAXXZ
0x14008B0D8: "UnhandledExceptionMode" ??_C@_1CO@CGGCMBPK@?$AAU?$AAn?$AAh?$AAa?$AAn?$AAd?$AAl?$AAe?$AAd?$AAE?$AAx?$AAc?$AAe?$AAp?$AAt?$AAi?$AAo?$AAn?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x140098E80: "__cdecl _hmod__DABAPI_dll" __hmod__DABAPI_dll
0x1400513EC: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x14007E3D0: "__cdecl _imp_EvtIntReportEventAndSourceAsync" __imp_EvtIntReportEventAndSourceAsync
0x14008A9D0: "WdfObjectList<class WdfProcess,c" ??_C@_0EL@EDNCHPMH@WdfObjectList?$DMclass?5WdfProcess?0c@
0x140081960: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x14007DB68: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x14007D7E0: "__cdecl _imp_RpcServerUnsubscribeForNotification" __imp_RpcServerUnsubscribeForNotification
0x14007E078: "__cdecl _imp_AddAccessDeniedAceEx" __imp_AddAccessDeniedAceEx
0x140022E70: "public: __cdecl CUnresolvedNameEntry::CUnresolvedNameEntry(unsigned long,unsigned long) __ptr64" ??0CUnresolvedNameEntry@@QEAA@KK@Z
0x14007E0C8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x140099360: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::machineStoreProbe" ?machineStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x14007DEA0: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x14006359C: "void __cdecl ScSendSqmData(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScSendSqmData@@YAXPEAUHKEY__@@PEAG@Z
0x14007270C: "private: void __cdecl WdfTransientDevStateMgr::TimerCallbackWorker(void) __ptr64" ?TimerCallbackWorker@WdfTransientDevStateMgr@@AEAAXXZ
0x1400809D0: "LanmanServer" ??_C@_1BK@FJCAAMNP@?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x14007DBE8: "__cdecl _imp_SetProcessMitigationPolicy" __imp_SetProcessMitigationPolicy
0x140014560: "public: __cdecl CSRWLock::~CSRWLock(void) __ptr64" ??1CSRWLock@@QEAA@XZ
0x140099618: "unsigned long * __ptr64 __ptr64 ScGlobalOrphanIds" ?ScGlobalOrphanIds@@3PEAKEA
0x140099200: "private: static void * __ptr64 __ptr64 CWorkItemContext::s_hNeverSignaled" ?s_hNeverSignaled@CWorkItemContext@@0PEAXEA
0x14007049C: StringCbPrintfW
0x14005C4B4: "public: struct utl::pair<class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64>,bool> __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::emplace<class CServiceRecord * __ptr64>(class CServiceRecord * __ptr64 &&) __ptr64" ??$emplace@PEAVCServiceRecord@@@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@QEAA?AU?$pair@V?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@utl@@_N@1@$$QEAPEAVCServiceRecord@@@Z
0x1400997A8: UserModeDriversSid
0x14001AFD0: "public: virtual unsigned __int64 __cdecl CWin32UserServiceRecord::GetUserContext(void) __ptr64" ?GetUserContext@CWin32UserServiceRecord@@UEAA_KXZ
0x14008A550: EVENT_UMDF_DEVICE_OFFLINE_NO_RESTART
0x14002C814: "void __cdecl ScDeleteUnresolvedDepend(class CUnresolvedNameEntry * __ptr64 * __ptr64)" ?ScDeleteUnresolvedDepend@@YAXPEAPEAVCUnresolvedNameEntry@@@Z
0x14007DD90: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x14002ECD4: "public: __cdecl CNameEntryList<class CUnresolvedNameEntry>::CNameEntryList<class CUnresolvedNameEntry>(int) __ptr64" ??0?$CNameEntryList@VCUnresolvedNameEntry@@@@QEAA@H@Z
0x140025DB8: "public: void __cdecl utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > >::sort<bool (__cdecl*)(class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64)>(bool (__cdecl*)(class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> const & __ptr64)) __ptr64" ??$sort@P6A_NAEBV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@0@Z@?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@QEAAXP6A_NAEBV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@0@Z@Z
0x14000D5D0: "unsigned long __cdecl ScGetServiceNameTagMapping(struct _TAG_INFO_NAME_TAG_MAPPING_IN_PARAMS * __ptr64,struct _TAG_INFO_NAME_TAG_MAPPING_OUT_PARAMS * __ptr64 * __ptr64)" ?ScGetServiceNameTagMapping@@YAKPEAU_TAG_INFO_NAME_TAG_MAPPING_IN_PARAMS@@PEAPEAU_TAG_INFO_NAME_TAG_MAPPING_OUT_PARAMS@@@Z
0x14007DA50: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14007FA38: "SystemUpdateOnBoot" ??_C@_1CG@FAGIMHOA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAO?$AAn?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x14002B8D8: "unsigned long __cdecl ScDeleteTree(struct HKEY__ * __ptr64)" ?ScDeleteTree@@YAKPEAUHKEY__@@@Z
0x14007DF98: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x14001DA78: "unsigned long __cdecl ScGetTopKeys(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?ScGetTopKeys@@YAKPEAPEAUHKEY__@@0@Z
0x140057078: "private: struct utl::pair<class utl::_TreeConstIt<unsigned long>,bool> __cdecl utl::_Tree<unsigned long,unsigned long,struct utl::less<unsigned long>,class utl::allocator<unsigned long>,0>::_InsertImpl<unsigned long const & __ptr64>(struct utl::integral_constant<bool,0>,struct utl::_TreeNode<unsigned long> * __ptr64,unsigned long const & __ptr64) __ptr64" ??$_InsertImpl@AEBK@?$_Tree@KKU?$less@K@utl@@V?$allocator@K@2@$0A@@utl@@AEAA?AU?$pair@V?$_TreeConstIt@K@utl@@_N@1@U?$integral_constant@_N$0A@@1@PEAU?$_TreeNode@K@1@AEBK@Z
0x14007DCB0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x14002EB10: "void __cdecl ScWaitForLsa(void)" ?ScWaitForLsa@@YAXXZ
0x140098180: "struct _EXCEPTION_POINTERS g_ExceptionPointers" ?g_ExceptionPointers@@3U_EXCEPTION_POINTERS@@A
0x1400995C0: "class CScmLock ScManagerSdLock" ?ScManagerSdLock@@3VCScmLock@@A
0x140093DBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x1400A0168: "__cdecl _imp_AuthzFreeAuditEvent" __imp_AuthzFreeAuditEvent
0x14008B620: "-IoCancelEventPortName:" ??_C@_1DA@OLAHJJMA@?$AA?9?$AAI?$AAo?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AAE?$AAv?$AAe?$AAn?$AAt?$AAP?$AAo?$AAr?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x140080788: CUSTOM_SYSTEM_STATE_CHANGE_EVENT_GUID
0x14007DA98: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140017318: "void __cdecl ScLogEvent(unsigned long,...)" ?ScLogEvent@@YAXKZZ
0x14007E060: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x14008B398: "WdfDevNode::FindDeviceInfo" ??_C@_0BL@LBBHLEAK@WdfDevNode?3?3FindDeviceInfo?$AA@
0x140052628: ?close_reset@?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@SAXPEAU__WIL__WNF_USER_SUBSCRIPTION@@@Z
0x140016E60: RControlService
0x14007E428: "__cdecl _imp_NtDeleteKey" __imp_NtDeleteKey
0x140030C2D: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x1400895D8: "PreshutdownTimeout" ??_C@_1CG@BIFCHHBP@?$AAP?$AAr?$AAe?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140093B3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140029138: HwCfgGetCurrentKey
0x14002F430: "unsigned long __cdecl ScMakeStoppedDriversOneString(unsigned short * __ptr64 * __ptr64)" ?ScMakeStoppedDriversOneString@@YAKPEAPEAG@Z
0x14000FDC4: "unsigned long __cdecl ScReadGlobalStartType(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,int,unsigned long * __ptr64)" ?ScReadGlobalStartType@@YAKPEAUHKEY__@@PEBGKHPEAK@Z
0x14002C2B0: McGenControlCallbackV2
0x14001D324: "unsigned long __cdecl ScAcceptTheBoot(void)" ?ScAcceptTheBoot@@YAKXZ
0x14007E538: "__cdecl _imp_RtlCreateProcessParametersEx" __imp_RtlCreateProcessParametersEx
0x14008A140: "RemoteAccessCheckExemptionList" ??_C@_1DO@EFCCIHCF@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAC?$AAh?$AAe?$AAc?$AAk?$AAE?$AAx?$AAe?$AAm?$AAp?$AAt?$AAi?$AAo?$AAn?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1400302E0: "__cdecl _imp_load_SystemFunction029" __imp_load_SystemFunction029
0x14007FCD0: "System\CurrentControlSet\Control" ??_C@_1HC@LEILPPPO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1400505B4: "public: __cdecl wil::details::FeatureStateManager::~FeatureStateManager(void) __ptr64" ??1FeatureStateManager@details@wil@@QEAA@XZ
0x140093AEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x14008B528: "m_HostImagePath not valid" ??_C@_0BK@MOIFEJHO@m_HostImagePath?5not?5valid?$AA@
0x140098008: g_ScServiceChannelContextListHead
0x14007E568: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x14007E0B0: "__cdecl _imp_CopySid" __imp_CopySid
0x14000F8A0: RQueryServiceStatus
0x1400134D0: "unsigned long __cdecl REnumServiceGroupHelp(void * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short const * __ptr64,int)" ?REnumServiceGroupHelp@@YAKPEAXKKPEAEKPEAK22PEBGH@Z
0x14007E250: "__cdecl _imp__ltow_s" __imp__ltow_s
0x1400789F8: "private: unsigned short * __ptr64 __cdecl WdfProcess::CreatePooledHardwareIdString(void) __ptr64" ?CreatePooledHardwareIdString@WdfProcess@@AEAAPEAGXZ
0x14002D8B8: ScCreateStartEventSD
0x1400A0250: "__cdecl _imp_SpInfIsIndirectString" __imp_SpInfIsIndirectString
0x140089640: "DID NOT" ??_C@_07GNELMGPG@DID?5NOT?$AA@
0x140017F5C: "unsigned long __cdecl ScReadStartType(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,int,unsigned long * __ptr64)" ?ScReadStartType@@YAKPEAUHKEY__@@PEBGKHPEAK@Z
0x140021A38: "public: unsigned long __cdecl CServiceRecord::UpdateDependencies(struct _DEPEND_RECORD * __ptr64,struct _DEPEND_RECORD * __ptr64 * __ptr64) __ptr64" ?UpdateDependencies@CServiceRecord@@QEAAKPEAU_DEPEND_RECORD@@PEAPEAU2@@Z
0x14007FE50: "WudfSvc" ??_C@_1BA@JAMEDIMH@?$AAW?$AAu?$AAd?$AAf?$AAS?$AAv?$AAc?$AA?$AA@
0x14007DC40: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x14006F2C0: "public: virtual long __cdecl CUMDFUnknown::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUMDFUnknown@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140087A28: WNF_RM_MEMORY_MONITOR_USAGE_METRICS
0x14008A6C0: "m_DriverHostGuid is invalid" ??_C@_0BM@CGBCMGO@m_DriverHostGuid?5is?5invalid?$AA@
0x14007DF08: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x140099560: "class CNameEntryList<class CNameEntry> OrderGroupList" ?OrderGroupList@@3V?$CNameEntryList@VCNameEntry@@@@A
0x140099760: "public: static struct IUMDFPlatformSecurity * __ptr64 __ptr64 WdfPlatform::Security" ?Security@WdfPlatform@@2PEAUIUMDFPlatformSecurity@@EA
0x140053008: "unsigned long __cdecl ScGetServiceProcessTokenInternal(class CWin32ServiceRecord * __ptr64,void * __ptr64 * __ptr64)" ?ScGetServiceProcessTokenInternal@@YAKPEAVCWin32ServiceRecord@@PEAPEAX@Z
0x14007D7C0: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x1400733A0: "public: int __cdecl WdfDevNode::AreYouThis(class WdfDevNodeParameters * __ptr64) __ptr64" ?AreYouThis@WdfDevNode@@QEAAHPEAVWdfDevNodeParameters@@@Z
0x14007DF78: "__cdecl _imp_CM_Get_Device_ID_ListW" __imp_CM_Get_Device_ID_ListW
0x14002B6B4: "unsigned long __cdecl ScReadLaunchProtected(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScReadLaunchProtected@@YAKPEAUHKEY__@@PEAK@Z
0x14006F304: "public: void __cdecl WdfDebugModeSettings::Reload(void) __ptr64" ?Reload@WdfDebugModeSettings@@QEAAXXZ
0x140098F00: "__cdecl _hmod__WUDFPlatform_dll" __hmod__WUDFPlatform_dll
0x14002B674: "public: void __cdecl utl::list<struct _SERVICE_DEPENDENCY_DATA,class utl::allocator<struct _SERVICE_DEPENDENCY_DATA> >::clear(void) __ptr64" ?clear@?$list@U_SERVICE_DEPENDENCY_DATA@@V?$allocator@U_SERVICE_DEPENDENCY_DATA@@@utl@@@utl@@QEAAXXZ
0x14000EC18: "public: void __cdecl utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > >::clear(void) __ptr64" ?clear@?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@QEAAXXZ
0x14006A2BC: "unsigned long __cdecl ScWaitForImageCreation(void * __ptr64)" ?ScWaitForImageCreation@@YAKPEAX@Z
0x140028A6C: "unsigned short * __ptr64 __cdecl WdfRegQueryString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?WdfRegQueryString@@YAPEAGPEAUHKEY__@@PEBGPEAK2@Z
0x14007E138: "__cdecl _imp_TpReleaseWork" __imp_TpReleaseWork
0x14007E5B0: "__cdecl _imp_NtQuerySymbolicLinkObject" __imp_NtQuerySymbolicLinkObject
0x14007DC20: "__cdecl _imp_QueryUnbiasedInterruptTime" __imp_QueryUnbiasedInterruptTime
0x1400669E4: "unsigned long __cdecl ScInitializeNotificationMgmt(void)" ?ScInitializeNotificationMgmt@@YAKXZ
0x140015114: "unsigned long __cdecl ScLockDatabase(int,unsigned short * __ptr64,void * __ptr64 * __ptr64)" ?ScLockDatabase@@YAKHPEAGPEAPEAX@Z
0x140099A18: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x140080888: "FailureCommand" ??_C@_1BO@NNEFCDHF@?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x1400041B0: "unsigned long __cdecl ScSendControlByImageRecord(struct _IMAGE_RECORD * __ptr64,unsigned long)" ?ScSendControlByImageRecord@@YAKPEAU_IMAGE_RECORD@@K@Z
0x140065668: "void __cdecl SC_ADJUST_CRDEL_REQ_COUNT(void * __ptr64,struct _SC_NOTIFY_BLOCK * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SC_ADJUST_CRDEL_REQ_COUNT@@YAXPEAXPEAU_SC_NOTIFY_BLOCK@@PEAK2@Z
0x14008B5C0: "-LifetimeId:" ??_C@_1BK@MNDCCAM@?$AA?9?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AAI?$AAd?$AA?3?$AA?$AA@
0x140099AF0: NullSid
0x14005ADA4: WPP_SF_qi
0x14007F690: "RemoteAccessExemption" ??_C@_1CM@GKCHKNCG@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAE?$AAx?$AAe?$AAm?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140025908: "unsigned long __cdecl ScOpenPolicy(unsigned long,void * __ptr64 * __ptr64)" ?ScOpenPolicy@@YAKKPEAPEAX@Z
0x1400699E8: WPP_SF_qL
0x140080E90: "__cdecl _sz_profapi_dll" __sz_profapi_dll
0x14008A798: "WdfDriverManager::~WdfDriverMana" ??_C@_0CE@KMHOGMKE@WdfDriverManager?3?3?$HOWdfDriverMana@
0x14006E730: "public: virtual void * __ptr64 __cdecl WdfServiceKey::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfServiceKey@@UEAAPEAXI@Z
0x1400217B4: "unsigned long __cdecl ScCreateDependencies(class CServiceRecord * __ptr64,unsigned short * __ptr64)" ?ScCreateDependencies@@YAKPEAVCServiceRecord@@PEAG@Z
0x140080DCC: partOfExe
0x1400693B8: WPP_SF_qd
0x14001AEF0: "protected: virtual void __cdecl CServiceRecord::ReportServiceHungInternal(void) __ptr64" ?ReportServiceHungInternal@CServiceRecord@@MEAAXXZ
0x14007D720: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x14007E520: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x14007D9F8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140066ACC: "int __cdecl ScNotificationConditionSatisfied(class CServiceRecord * __ptr64,struct _SC_NOTIFY_BLOCK * __ptr64,unsigned long,int,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?ScNotificationConditionSatisfied@@YAHPEAVCServiceRecord@@PEAU_SC_NOTIFY_BLOCK@@KHKPEAK2@Z
0x14008A210: "U:\ServiceState" ??_C@_1CA@LDFBOBOJ@?$AAU?$AA?3?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x14007DB50: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x140081760: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x140068320: RGetNotifyResults
0x140093C54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-1
0x140018034: "int __cdecl ScIsStateNameAllocated(struct _WNF_STATE_NAME & __ptr64)" ?ScIsStateNameAllocated@@YAHAEAU_WNF_STATE_NAME@@@Z
0x14006E5F0: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@UEAAPEAXI@Z
0x14005ADF8: WPP_SF_qq
0x14001C8A4: "void __cdecl ScFreeServiceRecord(class CServiceRecord * __ptr64)" ?ScFreeServiceRecord@@YAXPEAVCServiceRecord@@@Z
0x140092FD8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x140089850: "1=%lu%c" ??_C@_1BA@IBBDEPLN@?$AA1?$AA?$DN?$AA?$CF?$AAl?$AAu?$AA?$CF?$AAc?$AA?$AA@
0x14000DEE0: "protected: void __cdecl CServiceRecord::AddToStartSetInternal(class utl::unordered_set<class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64> > & __ptr64,class utl::unordered_set<class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64> > & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> & __ptr64) __ptr64" ?AddToStartSetInternal@CServiceRecord@@IEAAXAEAV?$unordered_set@PEAVCServiceRecord@@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@@utl@@AEAV?$unordered_set@PEAVCNameEntry@@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@@3@AEAV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@Z
0x140089F18: WPP_1697e8be6eb13e55140d50250b484bba_Traceguids
0x140092D4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x140020D08: "unsigned long __cdecl ScCreateService(void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long,unsigned short * __ptr64,unsigned char * __ptr64,unsigned long,unsigned short,unsigned __int64,unsigned long,class CServiceRecord * __ptr64,class CServiceRecord * __ptr64 * __ptr64)" ?ScCreateService@@YAKPEAXPEAG1KKKK11PEAKPEAEK13KG_KKPEAVCServiceRecord@@PEAPEAV1@@Z
0x14008A560: EVENT_DM_CREATE_HOST_FAILURE
0x14007DC70: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x140051BA0: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,2>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$01@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x14001AED0: "public: virtual struct _WNF_USER_SUBSCRIPTION * __ptr64 __cdecl CServiceRecord::GetDirectTriggerSubscription(void) __ptr64" ?GetDirectTriggerSubscription@CServiceRecord@@UEAAPEAU_WNF_USER_SUBSCRIPTION@@XZ
0x140018C68: ScCheckServiceLogonSid
0x14008A820: "CreateActivityTrace failed" ??_C@_0BL@ENGGLNNI@CreateActivityTrace?5failed?$AA@
0x14008A0B8: WPP_5d684132aad73cbce73645f066bce55b_Traceguids
0x14001AF40: "public: virtual unsigned short __cdecl CWin32ServiceRecord::GetPreferredNode(void) __ptr64" ?GetPreferredNode@CWin32ServiceRecord@@UEAAGXZ
0x14007DC78: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x14002F7EC: "public: __cdecl DEFER_LIST::~DEFER_LIST(void) __ptr64" ??1DEFER_LIST@@QEAA@XZ
0x140014A50: "unsigned long __cdecl ScReadFailureActions(struct HKEY__ * __ptr64,struct _SERVICE_FAILURE_ACTIONS_WOW64 * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScReadFailureActions@@YAKPEAUHKEY__@@PEAPEAU_SERVICE_FAILURE_ACTIONS_WOW64@@PEAK@Z
0x140030116: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x14007D878: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140054CC4: "public: __cdecl CServiceRecordExclusiveLock::CServiceRecordExclusiveLock(void) __ptr64" ??0CServiceRecordExclusiveLock@@QEAA@XZ
0x14005B5F0: "public: virtual void __cdecl CRunCommandContext::Perform(unsigned char) __ptr64" ?Perform@CRunCommandContext@@UEAAXE@Z
0x140093808: ext-ms-win-authz-context-l1-1-0_NULL_THUNK_DATA_DLB
0x140099C30: "void (__cdecl* __ptr64 g_wil_details_apiRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_apiRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x140099128: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x140079270: "public: virtual void __cdecl WdfProcess::MarkForDelete(void) __ptr64" ?MarkForDelete@WdfProcess@@UEAAXXZ
0x14007EFB8: "Data" ??_C@_19IEEMEPMH@?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1400238DC: "int __cdecl ScIsDsmaUserContext(unsigned __int64)" ?ScIsDsmaUserContext@@YAH_K@Z
0x140051220: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x14002FD54: "__cdecl _security_init_cookie" __security_init_cookie
0x14007E328: "__cdecl _imp_RtlMapGenericMask" __imp_RtlMapGenericMask
0x14007D6D0: "__cdecl _imp_EaCreateAggregatedEvent" __imp_EaCreateAggregatedEvent
0x140024E44: "unsigned long __cdecl ScAutoStartServices(int * __ptr64)" ?ScAutoStartServices@@YAKPEAH@Z
0x140060340: RUnlockServiceDatabase
0x1400288B4: "protected: void __cdecl WdfCtorStatus::SetCtorStatus(long) __ptr64" ?SetCtorStatus@WdfCtorStatus@@IEAAXJ@Z
0x140099A08: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x14005AD68: WPP_SF_q
0x14001E8D4: ScCreateWellKnownSids
0x14007D6A0: "__cdecl _imp_DevObjOpenDeviceInfo" __imp_DevObjOpenDeviceInfo
0x140099230: g_dwHandlerTimeout
0x140052EB0: "void __cdecl ScEndServiceAccount(void)" ?ScEndServiceAccount@@YAXXZ
0x140059024: "unsigned long __cdecl ScWaitForServiceShutdown(struct _SERVICE_PRESHUTDOWN_DATA * __ptr64,int)" ?ScWaitForServiceShutdown@@YAKPEAU_SERVICE_PRESHUTDOWN_DATA@@H@Z
0x1400254E0: "void __cdecl ScRegisterForTriggerAction(unsigned short const * __ptr64,struct _WNF_STATE_NAME * __ptr64,struct HKEY__ * __ptr64,unsigned long,unsigned long,int,unsigned char * __ptr64)" ?ScRegisterForTriggerAction@@YAXPEBGPEAU_WNF_STATE_NAME@@PEAUHKEY__@@KKHPEAE@Z
0x14002EBAC: "public: __cdecl DEFER_LIST::DEFER_LIST(void) __ptr64" ??0DEFER_LIST@@QEAA@XZ
0x140019840: "public: virtual unsigned long __cdecl CWin32ServiceRecord::GetProcessHandle(void * __ptr64 * __ptr64) __ptr64" ?GetProcessHandle@CWin32ServiceRecord@@UEAAKPEAPEAX@Z
0x1400806D0: "select" ??_C@_1O@DBFGALKA@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?$AA@
0x140054CF8: "public: __cdecl CServiceRecordExclusiveLock::~CServiceRecordExclusiveLock(void) __ptr64" ??1CServiceRecordExclusiveLock@@QEAA@XZ
0x1400984D0: "unsigned short * g_szSafebootKey" ?g_szSafebootKey@@3PAGA
0x14007E1A8: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x14006E6B0: "public: virtual void * __ptr64 __cdecl WdfDriverManager::`vector deleting destructor'(unsigned int) __ptr64" ??_EWdfDriverManager@@UEAAPEAXI@Z
0x140002BC8: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::LowerBound(unsigned char * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64) __ptr64" ?LowerBound@RawUsageIndex@details_abi@wil@@AEAAPEAEPEAE_KPEAX1@Z
0x14007DC80: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140065400: "long __cdecl ScLastGoodClearAttributes(struct _UNICODE_STRING * __ptr64,unsigned long)" ?ScLastGoodClearAttributes@@YAJPEAU_UNICODE_STRING@@K@Z
0x14006F270: "public: virtual void __cdecl WdfDriverManager::MarkForDelete(void) __ptr64" ?MarkForDelete@WdfDriverManager@@UEAAXXZ
0x140081A50: WPP_9a4133e4d5d233ce78164b0f273f4bc3_Traceguids
0x14006AF74: "public: void __cdecl CWin32ServiceRecord::ServiceHealthLogServiceStartFailure(unsigned short const * __ptr64,unsigned long) __ptr64" ?ServiceHealthLogServiceStartFailure@CWin32ServiceRecord@@QEAAXPEBGK@Z
0x14001DF6C: ScIsProcessMitigationPolicyActive
0x140092FE8: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLN
0x14000327C: "void __cdecl wil::details::WilApi_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApi_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x14006471C: "unsigned long __cdecl ScWriteServiceManagedAccount(struct HKEY__ * __ptr64,enum _TRI_BOOL)" ?ScWriteServiceManagedAccount@@YAKPEAUHKEY__@@W4_TRI_BOOL@@@Z
0x14001AED0: "public: virtual int __cdecl CServiceRecord::IsTemplateRecordEqual(class CServiceRecord * __ptr64) __ptr64" ?IsTemplateRecordEqual@CServiceRecord@@UEAAHPEAV1@@Z
0x1400293F0: ScExtRegisterTriggerConsumer
0x14001AFE0: "public: virtual unsigned short __cdecl CWin32ServiceRecord::GetWowType(void) __ptr64" ?GetWowType@CWin32ServiceRecord@@UEAAGXZ
0x140093A30: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLB
0x1400A00F8: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLA
0x14007E0A0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x14007EFE8: "\Driver\" ??_C@_1BC@PAOLLJBM@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
0x14005355C: "unsigned long __cdecl ScSetPassword(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,enum _TRI_BOOL)" ?ScSetPassword@@YAKPEAG00W4_TRI_BOOL@@@Z
0x140002380: "public: void __cdecl wil::details::FeatureStateManager::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateManager@details@wil@@QEAAXIW4wil_details_ServiceReportingKind@@_K@Z
0x14007E088: "__cdecl _imp_AddAuditAccessAceEx" __imp_AddAuditAccessAceEx
0x140099350: "class WdfDriverManager * __ptr64 __ptr64 DrvMgrExt" ?DrvMgrExt@@3PEAVWdfDriverManager@@EA
0x140016084: "unsigned long __cdecl ScCheckServiceProtectedProcess(void * __ptr64,unsigned char)" ?ScCheckServiceProtectedProcess@@YAKPEAXE@Z
0x14007DB00: "__cdecl _imp_GetThreadUILanguage" __imp_GetThreadUILanguage
0x14007E5B8: "__cdecl _imp_NtOpenSymbolicLinkObject" __imp_NtOpenSymbolicLinkObject
0x140020774: "public: __cdecl CWin32ServiceRecord::CWin32ServiceRecord(void) __ptr64" ??0CWin32ServiceRecord@@QEAA@XZ
0x14005299C: "long __cdecl wil_details_WriteSRUMWnfUsageBuffer(class wil::details_abi::heap_vector<struct wil_details_FeatureUsageSRUM> * __ptr64)" ?wil_details_WriteSRUMWnfUsageBuffer@@YAJPEAV?$heap_vector@Uwil_details_FeatureUsageSRUM@@@details_abi@wil@@@Z
0x140002784: ?Iterate@RawUsageIndex@details_abi@wil@@QEBA_NV?$function@$$A6A_NPEAX_K01I@Z@wistd@@@Z
0x1400032A4: "int __cdecl wil_details_ModifyFeatureData(union wil_details_FeaturePropertyCache * __ptr64,int (__cdecl*)(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64),void * __ptr64)" ?wil_details_ModifyFeatureData@@YAHPEATwil_details_FeaturePropertyCache@@P6AH0PEAX@Z1@Z
0x1400044D0: RI_ScCloseServiceChannelHandle
0x140087A18: WNF_WER_SERVICE_START
0x140003364: "void __cdecl wistd::swap_wil<struct wil::details_abi::heap_buffer>(struct wil::details_abi::heap_buffer & __ptr64,struct wil::details_abi::heap_buffer & __ptr64)" ??$swap_wil@Uheap_buffer@details_abi@wil@@@wistd@@YAXAEAUheap_buffer@details_abi@wil@@0@Z
0x1400A0198: "__cdecl _imp_PsmRegisterServiceProcess" __imp_PsmRegisterServiceProcess
0x14005F398: "unsigned long __cdecl ScUnloadDriver(class CServiceRecord * __ptr64)" ?ScUnloadDriver@@YAKPEAVCServiceRecord@@@Z
0x140099270: "unsigned long g_dwRpcOverTcpKeepAliveTimes" ?g_dwRpcOverTcpKeepAliveTimes@@3KA
0x1400804DC: " (" ??_C@_15CMBHNMLL@?$AA?5?$AA?$CI?$AA?$AA@
0x14000EC90: "unsigned long __cdecl ScGetImageFileName(unsigned short const * __ptr64,unsigned short,struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScGetImageFileName@@YAKPEBGGPEAUHKEY__@@PEAPEAG@Z
0x14007EED8: "NT AUTHORITY\SYSTEM" ??_C@_1CI@MJIGLNDO@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x14005C518: "public: __cdecl Microsoft::WRL::Wrappers::Details::SyncLockExclusive::~SyncLockExclusive(void) __ptr64" ??1SyncLockExclusive@Details@Wrappers@WRL@Microsoft@@QEAA@XZ
0x140081388: "ext-ms-win-desktopappx-l1-1-0" ??_C@_1DM@NAFKLBFI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAa?$AAp?$AAp?$AAx?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14007DA40: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x14007EB98: "ProfSvc_Group" ??_C@_1BM@KFEOJAII@?$AAP?$AAr?$AAo?$AAf?$AAS?$AAv?$AAc?$AA_?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x14001EB50: ScDomainIdToSid
0x14001BC60: "public: virtual __cdecl CWin32ServiceRecord::~CWin32ServiceRecord(void) __ptr64" ??1CWin32ServiceRecord@@UEAA@XZ
0x140089E08: "ScRegQueryInfoKeyW" ??_C@_1CG@HLHEFOEJ@?$AAS?$AAc?$AAR?$AAe?$AAg?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAI?$AAn?$AAf?$AAo?$AAK?$AAe?$AAy?$AAW?$AA?$AA@
0x14005CC8C: "unsigned long __cdecl ScGetReparseInfo(unsigned short const * __ptr64,unsigned long,struct _SC_REPARSE_INFO * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScGetReparseInfo@@YAKPEBGKPEAPEAU_SC_REPARSE_INFO@@PEAK@Z
0x140017038: "public: void __cdecl CServiceRecord::RankDependents(unsigned long,struct _SC_DELAYED_AUTOSTART_SERVICE_INFO * __ptr64,unsigned long & __ptr64) __ptr64" ?RankDependents@CServiceRecord@@QEAAXKPEAU_SC_DELAYED_AUTOSTART_SERVICE_INFO@@AEAK@Z
0x140051710: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x14008AA20: "WdfObjectList<class WdfDevNode,c" ??_C@_0EL@EDBPGHMO@WdfObjectList?$DMclass?5WdfDevNode?0c@
0x14007E380: "__cdecl _imp_NtQueueApcThread" __imp_NtQueueApcThread
0x140099D18: "struct HKEY__ * __ptr64 __ptr64 g_ManufacturingModeServicesKey" ?g_ManufacturingModeServicesKey@@3PEAUHKEY__@@EA
0x1400647A0: "unsigned long __cdecl ScWriteStartName(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScWriteStartName@@YAKPEAUHKEY__@@PEAG@Z
0x1400879E0: "lpacServicesManagement" ??_C@_1CO@GMCGHMFJ@?$AAl?$AAp?$AAa?$AAc?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140092C0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_profapi_dll" __DELAY_IMPORT_DESCRIPTOR_profapi_dll
0x14006A8E8: "unsigned char __cdecl ScReadRemoteUserAccessCheckRequired(unsigned short const * __ptr64)" ?ScReadRemoteUserAccessCheckRequired@@YAEPEBG@Z
0x14001B36C: "protected: unsigned long __cdecl CDriverRecord::GetObjectName(void) __ptr64" ?GetObjectName@CDriverRecord@@IEAAKXZ
0x140082650: "SeEnableDelegationPrivilege" ??_C@_1DI@HDBMKKGG@?$AAS?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140092D2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_secur32_translatename_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_secur32_translatename_l1_1_0_dll
0x140051FAC: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x1400689D0: SC_NOTIFY_RPC_HANDLE_rundown
0x14002F9B0: wmainCRTStartup
0x140027774: McGenEventRegister
0x14005084C: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x14007DD30: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x14008A7E0: "process found" ??_C@_0O@EEAHHEMF@process?5found?$AA@
0x140093AD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x14007E450: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x14006D33C: "public: void __cdecl WdfObject::ReleaseWait(unsigned long) __ptr64" ?ReleaseWait@WdfObject@@QEAAXK@Z
0x140023BD8: "void __cdecl ScCheckAutostartEventsEnabled(void)" ?ScCheckAutostartEventsEnabled@@YAXXZ
0x14007D890: "__cdecl _imp__wcslwr_s" __imp__wcslwr_s
0x14007D7A0: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x14007098C: "private: virtual __cdecl DrvMgrLpcNotification::~DrvMgrLpcNotification(void) __ptr64" ??1DrvMgrLpcNotification@@EEAA@XZ
0x140053754: "unsigned long __cdecl ScUPNToAccountName(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScUPNToAccountName@@YAKPEAGPEAPEAG@Z
0x14007F2A0: "StartOverride" ??_C@_1BM@HPEBLEEL@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x1400527B0: "int __cdecl wil_details_StagingConfigFeature_HasUniqueState(struct wil_details_StagingConfigFeature const * __ptr64)" ?wil_details_StagingConfigFeature_HasUniqueState@@YAHPEBUwil_details_StagingConfigFeature@@@Z
0x1400A02A0: "__cdecl _imp_CreateEnvBlock" __imp_CreateEnvBlock
0x14002A7AC: "public: unsigned long __cdecl WdfDriverManager::ChangeAllDeviceStates(int,int) __ptr64" ?ChangeAllDeviceStates@WdfDriverManager@@QEAAKHH@Z
0x14007D958: "__cdecl _imp__purecall" __imp__purecall
0x14001AED0: "protected: virtual int __cdecl CServiceRecord::IsProcessCrashed(void) __ptr64" ?IsProcessCrashed@CServiceRecord@@MEAAHXZ
0x14007F570: "Security=Impersonation Dynamic T" ??_C@_1EI@COBFOBIL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$DN?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AA?5?$AAT@
0x14007F558: "umpo" ??_C@_19CPJMIGKL@?$AAu?$AAm?$AAp?$AAo?$AA?$AA@
0x140002638: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,0>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$0A@@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x140085390: BFE_TRIGGER_PROVIDER_GUID
0x140069924: WPP_SF_SqLLd
0x14007DFB8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1400240DC: "void __cdecl ScReadSCMConfiguration(void)" ?ScReadSCMConfiguration@@YAXXZ
0x140052320: "public: void __cdecl wil::details_abi::SubscriptionList::Unsubscribe(class wil::srwlock & __ptr64,struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64) __ptr64" ?Unsubscribe@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@PEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x1400826B8: "SeUndockPrivilege" ??_C@_1CE@CBEKCMOJ@?$AAS?$AAe?$AAU?$AAn?$AAd?$AAo?$AAc?$AAk?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007F998: "ProviderOrder" ??_C@_1BM@FBFHHHJN@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x14001ADC0: SC_RPC_HANDLE_rundown
0x14006B928: "void __cdecl ScBackupTraceFile(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ScBackupTraceFile@@YAXPEBG0@Z
0x14002F8F0: wcsncmp
0x14001C59C: "unsigned long __cdecl ScQueryServiceStatus(class CServiceRecord * __ptr64,union STATUS_UNION,int,int)" ?ScQueryServiceStatus@@YAKPEAVCServiceRecord@@TSTATUS_UNION@@HH@Z
0x14006EF74: "unsigned short * __ptr64 __cdecl LocateImageOnDisk(unsigned short * __ptr64,unsigned char)" ?LocateImageOnDisk@@YAPEAGPEAGE@Z
0x140093BB4: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1400309CC: "__cdecl _imp_load_ScesrvTerminateServer" __imp_load_ScesrvTerminateServer
0x1400022F0: "void __cdecl wil::details::WilApiImpl_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApiImpl_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x14007DE28: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x14001AF50: "public: virtual unsigned long __cdecl CServiceRecord::GetProcessHandle(void * __ptr64 * __ptr64) __ptr64" ?GetProcessHandle@CServiceRecord@@UEAAKPEAPEAX@Z
0x14008B7F0: "timeout waiting for process to e" ??_C@_0CE@JFIFGBLH@timeout?5waiting?5for?5process?5to?5e@
0x14008AF78: "unknown UMDF device" ??_C@_1CI@BMCEMILI@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAU?$AAM?$AAD?$AAF?$AA?5?$AAd?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14007E298: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x140080630: "Current" ??_C@_1BA@OFLJGHK@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
0x140081920: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x14007D560: "const WdfServiceKey::`vftable'" ??_7WdfServiceKey@@6B@
0x14007F088: "ServiceAccountManaged" ??_C@_1CM@ICPDOING@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AA?$AA@
0x14007DD50: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x14000E43C: "private: void __cdecl utl::_HashTable<class CServiceRecord * __ptr64,class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64>,0>::_EqualRangeImpl<class CServiceRecord * __ptr64>(struct utl::integral_constant<bool,0>,class CServiceRecord * __ptr64 const & __ptr64,class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64> & __ptr64,class utl::_DlistConstIt<struct utl::_HashNode<class CServiceRecord * __ptr64>,class CServiceRecord * __ptr64> & __ptr64,unsigned __int64 & __ptr64)const __ptr64" ??$_EqualRangeImpl@PEAVCServiceRecord@@@?$_HashTable@PEAVCServiceRecord@@PEAV1@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@$0A@@utl@@AEBAXU?$integral_constant@_N$0A@@1@AEBQEAVCServiceRecord@@AEAV?$_DlistConstIt@U?$_HashNode@PEAVCServiceRecord@@@utl@@PEAVCServiceRecord@@@1@2AEA_K@Z
0x140098EF8: "__cdecl _hmod__srvcli_dll" __hmod__srvcli_dll
0x14006E570: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfProcess,class WdfProcessParameters>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@UEAAPEAXI@Z
0x140099A00: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x1400306D2: "__cdecl _imp_load_RmUnregisterActivityHostCallbacks" __imp_load_RmUnregisterActivityHostCallbacks
0x14007E398: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x1400A01C0: "__cdecl _imp_RmUnregisterActivityHostCallbacks" __imp_RmUnregisterActivityHostCallbacks
0x14008B1E0: "HostProcessSharingEnabled" ??_C@_1DE@HJHEEFAH@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAh?$AAa?$AAr?$AAi?$AAn?$AAg?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140052B84: "int __cdecl GetDefaultDomainName(unsigned short * __ptr64,unsigned long)" ?GetDefaultDomainName@@YAHPEAGK@Z
0x140011870: "unsigned long __cdecl ScReadConfigFromReg(class CServiceRecord * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,enum _TRI_BOOL * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScReadConfigFromReg@@YAKPEAVCServiceRecord@@PEAK111PEAW4_TRI_BOOL@@1PEAPEAG33@Z
0x14007B748: "const WdfObjectList<class WdfProcess,class WdfProcessParameters>::`vftable'" ??_7?$WdfObjectList@VWdfProcess@@VWdfProcessParameters@@@@6B@
0x140080B40: "Global\SvcctrlStartEvent_A3752DX" ??_C@_1EC@GGFNFADD@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAv?$AAc?$AAc?$AAt?$AAr?$AAl?$AAS?$AAt?$AAa?$AAr?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAA?$AA3?$AA7?$AA5?$AA2?$AAD?$AAX@
0x140079990: McTemplateU0jqq
0x1400279A0: "public: static long __cdecl DrvMgrLpcNotification::CreateInstance(class DrvMgrCmdLineArguments * __ptr64,class DrvMgrLpcNotification * __ptr64 * __ptr64)" ?CreateInstance@DrvMgrLpcNotification@@SAJPEAVDrvMgrCmdLineArguments@@PEAPEAV1@@Z
0x1400285E4: "int __cdecl ValidateGUIDString(unsigned short const * __ptr64)" ?ValidateGUIDString@@YAHPEBG@Z
0x14006B620: "unsigned long __cdecl ScGetNumaNodeProcessorMaskEx(unsigned short,struct _GROUP_AFFINITY * __ptr64)" ?ScGetNumaNodeProcessorMaskEx@@YAKGPEAU_GROUP_AFFINITY@@@Z
0x14005DC70: WPP_SF_Sdq
0x14007D858: RPCRT4_NULL_THUNK_DATA
0x14002CE10: "unsigned long __cdecl ScGetFullLogPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?ScGetFullLogPath@@YAKPEBG0PEAG@Z
0x14002B9F4: "unsigned long __cdecl ScRegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64)" ?ScRegDeleteKeyW@@YAKPEAUHKEY__@@PEAG@Z
0x14006A140: "void __cdecl RemovalThreadForStartService(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?RemovalThreadForStartService@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x14007EB78: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x14008B870: "HostProcessImagePath" ??_C@_1CK@KAHICLI@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140027CF0: "public: unsigned long __cdecl WdfDriverManager::Initialize(class DrvMgrCmdLineArguments * __ptr64) __ptr64" ?Initialize@WdfDriverManager@@QEAAKPEAVDrvMgrCmdLineArguments@@@Z
0x14007F070: "Group" ??_C@_1M@LHGLMLD@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x140069540: WPP_SF_qqS
0x140068E1C: WPP_SF_Sqq
0x14000DCDC: "public: long __cdecl SmartPtrRef::Release(void) __ptr64" ?Release@SmartPtrRef@@QEAAJXZ
0x140005D40: "public: int __cdecl CServiceDatabase::GetWin32Services(int,class utl::list<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CWin32ServiceRecord> > > & __ptr64,unsigned long & __ptr64) __ptr64" ?GetWin32Services@CServiceDatabase@@QEAAHHAEAV?$list@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCWin32ServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@AEAK@Z
0x14002FA40: "__cdecl _report_gsfailure" __report_gsfailure
0x140081A70: WPP_63b953134a71310d1967c0105ab63dad_Traceguids
0x14007E128: "__cdecl _imp_RtlTestProtectedAccess" __imp_RtlTestProtectedAccess
0x140092C2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x14007D868: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x14007DBB0: "__cdecl _imp_UpdateProcThreadAttribute" __imp_UpdateProcThreadAttribute
0x140074DEC: "private: int __cdecl WdfDevNode::LoadRegistrySettings(void * __ptr64,struct _DO_DEVINFO_DATA * __ptr64) __ptr64" ?LoadRegistrySettings@WdfDevNode@@AEAAHPEAXPEAU_DO_DEVINFO_DATA@@@Z
0x14007E180: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x1400992BC: "unsigned long ScTotalSizeStoppedDrivers" ?ScTotalSizeStoppedDrivers@@3KA
0x14007DEF8: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x140050A50: "void __cdecl wil::details::CloseHandle(void * __ptr64)" ?CloseHandle@details@wil@@YAXPEAX@Z
0x14007DEA8: "__cdecl _imp_CreateThreadpool" __imp_CreateThreadpool
0x1400808B0: "FailureActionsOnNonCrashFailures" ??_C@_1EC@PLMHPJOJ@?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AAO?$AAn?$AAN?$AAo?$AAn?$AAC?$AAr?$AAa?$AAs?$AAh?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAs@
0x14007E5A8: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x140059378: "unsigned long __cdecl ScWaitForServiceStableState(class CServiceRecord * __ptr64,unsigned __int64,unsigned char,unsigned long)" ?ScWaitForServiceStableState@@YAKPEAVCServiceRecord@@_KEK@Z
0x14007E550: "__cdecl _imp_RtlExpandEnvironmentStrings_U" __imp_RtlExpandEnvironmentStrings_U
0x14007B6D0: "const DrvMgrLpcNotification::`vftable'{for `IUMDFLPCNotification'}" ??_7DrvMgrLpcNotification@@6BIUMDFLPCNotification@@@
0x140005528: "unsigned long __cdecl ScSendLowResourcesMessage(class CWin32ServiceRecord * __ptr64,unsigned long)" ?ScSendLowResourcesMessage@@YAKPEAVCWin32ServiceRecord@@K@Z
0x140098E60: "__cdecl _hmod__ext_ms_win_security_chambers_l1_1_1_dll" __hmod__ext_ms_win_security_chambers_l1_1_1_dll
0x1400892F0: ScmTraceLoggingGuid
0x14007DD00: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x14007DE48: "__cdecl _imp_GetOsManufacturingMode" __imp_GetOsManufacturingMode
0x140082620: "SeManageVolumePrivilege" ??_C@_1DA@LIHDNJND@?$AAS?$AAe?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140030F2C: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x1400804E4: ": " ??_C@_15ELOONFKJ@?$AA?3?$AA?5?$AA?$AA@
0x14002FCB8: "__cdecl onexit" _onexit
0x14007E490: "__cdecl _imp_TpSetTimerEx" __imp_TpSetTimerEx
0x140074A90: "public: long __cdecl WdfDevNode::LoadProcess(void) __ptr64" ?LoadProcess@WdfDevNode@@QEAAJXZ
0x140015768: "unsigned long __cdecl ScReadAndTranslateString(struct HKEY__ * __ptr64,unsigned short * __ptr64,int,unsigned short,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScReadAndTranslateString@@YAKPEAUHKEY__@@PEAGHGPEAPEAGPEAK@Z
0x14008B578: "%I64u" ??_C@_1M@OGLPPGPN@?$AA?$CF?$AAI?$AA6?$AA4?$AAu?$AA?$AA@
0x140017ED4: "public: class CScmSyncLockExclusive __cdecl CServiceRecord::LockExclusive(void) __ptr64" ?LockExclusive@CServiceRecord@@QEAA?AVCScmSyncLockExclusive@@XZ
0x1400A0190: ext-ms-win-authz-context-l1-1-0_NULL_THUNK_DATA_DLA
0x14007D898: "__cdecl _imp_qsort_s" __imp_qsort_s
0x140093CB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x14002FE9C: "__cdecl _imp_load_AuthziInitializeAuditEventType" __imp_load_AuthziInitializeAuditEventType
0x140068B70: WPP_SF_Sdqd
0x140099C90: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x140020168: "unsigned long __cdecl ScReadSd(struct HKEY__ * __ptr64,void * __ptr64 * __ptr64)" ?ScReadSd@@YAKPEAUHKEY__@@PEAPEAX@Z
0x14007DFA8: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x140099BE8: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x14008B0A0: "failure" ??_C@_1BA@LIMELIPO@?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x14007DB20: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x140003444: "public: void __cdecl wil::details_abi::RawUsageIndex::SetBuffer(void * __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?SetBuffer@RawUsageIndex@details_abi@wil@@QEAAXPEAX_K1@Z
0x140068AC4: WPP_SF_SdqL
0x1400803C0: "\Arcname" ??_C@_1BC@KPBFEEOI@?$AA?2?$AAA?$AAr?$AAc?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x1400806B8: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14007E528: "__cdecl _imp_RtlVerifyVersionInfo" __imp_RtlVerifyVersionInfo
0x140079924: McTemplateU0jq
0x14007E070: "__cdecl _imp_IsValidAcl" __imp_IsValidAcl
0x1400811C0: "ext-ms-win-core-resourcemanager-" ??_C@_1EO@KCGKCNDI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?9@
0x140076DDC: "private: long __cdecl WdfDevNode::WriteErrorTag(void) __ptr64" ?WriteErrorTag@WdfDevNode@@AEAAJXZ
0x140068EB0: WPP_SF_Sqqd
0x14002EAB0: "unsigned long __cdecl DrvMgrWorkerThreadThunk(void * __ptr64)" ?DrvMgrWorkerThreadThunk@@YAKPEAX@Z
0x140099A20: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x14001A3D0: "unsigned long __cdecl ScRegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScRegCreateKeyExW@@YAKPEAUHKEY__@@PEBGK1KKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU1@PEAK@Z
0x140019D64: ScExtpTriggerRunningService
0x14001AF90: "public: virtual unsigned long __cdecl CServiceRecord::SetStatus(struct _SERVICE_STATUS * __ptr64) __ptr64" ?SetStatus@CServiceRecord@@UEAAKPEAU_SERVICE_STATUS@@@Z
0x140098F2C: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x1400992C0: "struct _STOPPED_DRIVER * __ptr64 __ptr64 ScStoppedDrivers" ?ScStoppedDrivers@@3PEAU_STOPPED_DRIVER@@EA
0x14008B570: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x14007EE60: "%s -s %s" ??_C@_1BC@FGOPILHK@?$AA?$CF?$AAs?$AA?5?$AA?9?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x14005C540: "public: virtual void * __ptr64 __cdecl CServiceRecord::`vector deleting destructor'(unsigned int) __ptr64" ??_ECServiceRecord@@UEAAPEAXI@Z
0x14001FEC8: "class CServiceRecord * __ptr64 __cdecl ScAllocateServiceRecord(unsigned long)" ?ScAllocateServiceRecord@@YAPEAVCServiceRecord@@K@Z
0x1400301C5: "__cdecl _imp_load_CreateEnvBlock" __imp_load_CreateEnvBlock
0x1400A0238: "__cdecl _imp_UMgrQueryUserContext" __imp_UMgrQueryUserContext
0x140067544: "void __cdecl ScRundownNotifyQueue(struct _SC_NOTIFY_QUEUE * __ptr64)" ?ScRundownNotifyQueue@@YAXPEAU_SC_NOTIFY_QUEUE@@@Z
0x140099A28: "void (__cdecl* __ptr64 g_wil_details_internalRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_internalRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x14001917C: "unsigned long __cdecl ScGetServiceNotificationName(class CServiceRecord * __ptr64,enum _SERVICE_CONFIG_INFO_LEVEL,union _SC_RPC_SERVICE_CONFIG * __ptr64)" ?ScGetServiceNotificationName@@YAKPEAVCServiceRecord@@W4_SERVICE_CONFIG_INFO_LEVEL@@PEAT_SC_RPC_SERVICE_CONFIG@@@Z
0x14002EDE0: "public: virtual unsigned long __cdecl CUMDFUnknown::Release(void) __ptr64" ?Release@CUMDFUnknown@@UEAAKXZ
0x140027FF0: "public: virtual unsigned long __cdecl CUMDFUnknown::AddRef(void) __ptr64" ?AddRef@CUMDFUnknown@@UEAAKXZ
0x14008A4D0: EVENT_DM_SHUTDOWN_HOST_BEGIN
0x14002F660: "long __cdecl ScmpSystemMemoryUsageChangeCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?ScmpSystemMemoryUsageChangeCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x1400302AA: "__cdecl _imp_load_LsaLookupTranslateNames" __imp_load_LsaLookupTranslateNames
0x14001AEA0: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x140082450: "SeDelegateSessionUserImpersonate" ??_C@_1FE@NGKIPFAI@?$AAS?$AAe?$AAD?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe@
0x14007ED70: "ALL SERVICES" ??_C@_1BK@KHGPOGDM@?$AAA?$AAL?$AAL?$AA?5?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AAS?$AA?$AA@
0x140018A08: "unsigned long __cdecl ScMarkTokenAsUserService(void * __ptr64,unsigned long)" ?ScMarkTokenAsUserService@@YAKPEAXK@Z
0x14007D660: "__cdecl _imp_DevObjGetDeviceRegistryProperty" __imp_DevObjGetDeviceRegistryProperty
0x14006E48C: "public: virtual __cdecl WdfServiceKey::~WdfServiceKey(void) __ptr64" ??1WdfServiceKey@@UEAA@XZ
0x140089CC0: WPP_3e43f812159634789007b2bcb161ae16_Traceguids
0x140099D24: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_DisableUniqueServiceDisplayNameValidation@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x1400A0100: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x14007F138: "Action" ??_C@_1O@LPGDINIK@?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140082A10: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1400527F0: "long __cdecl wil_details_StagingConfig_FireNotification(struct wil_details_StagingConfig * __ptr64,unsigned int,unsigned short,int)" ?wil_details_StagingConfig_FireNotification@@YAJPEAUwil_details_StagingConfig@@IGH@Z
0x14007DBA0: "__cdecl _imp_ExitThread" __imp_ExitThread
0x14006F7A0: "private: static void __cdecl WdfDriverManager::RestartFailedDevice(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?RestartFailedDevice@WdfDriverManager@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x14007DB40: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x1400A0218: "__cdecl _imp_SetNtlmThreadOptions" __imp_SetNtlmThreadOptions
0x140058388: "void __cdecl ScSendPreshutdownControls(void)" ?ScSendPreshutdownControls@@YAXXZ
0x14007FEF0: "HostProcessSharedByDefault" ??_C@_1DG@EDOIHAPD@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAB?$AAy?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x14002F8A4: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::FeatureStateManager>::Destroy(void) __ptr64" ?Destroy@?$manually_managed_shutdown_aware_object@VFeatureStateManager@details@wil@@@wil@@QEAAXXZ
0x1400818C0: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14005E8B8: "void __cdecl ScLookForHungServices(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScLookForHungServices@@YAXAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14001CECC: "public: int __cdecl CServiceRecord::GetDependentServices(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64,unsigned long,void * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?GetDependentServices@CServiceRecord@@QEAAHAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@KPEAPEAXPEAH@Z
0x14005CDB0: "unsigned long __cdecl ScPerformReparse(struct _SC_REPARSE_INFO * __ptr64,unsigned long)" ?ScPerformReparse@@YAKPEAU_SC_REPARSE_INFO@@K@Z
0x140093E20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0
0x14001D578: "unsigned long __cdecl ScLastGoodWalkDirectoryTreeBottomUp(struct _UNICODE_STRING * __ptr64,unsigned long,long (__cdecl*)(struct _UNICODE_STRING * __ptr64,struct _UNICODE_STRING * __ptr64,unsigned long,void * __ptr64),void * __ptr64)" ?ScLastGoodWalkDirectoryTreeBottomUp@@YAKPEAU_UNICODE_STRING@@KP6AJ00KPEAX@Z1@Z
0x140082580: "SeTrustedCredManAccessPrivilege" ??_C@_1EA@ELNOHCCG@?$AAS?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAC?$AAr?$AAe?$AAd?$AAM?$AAa?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140089880: "Removing" ??_C@_08JGNDAKHI@Removing?$AA@
0x14002AE40: RChangeServiceConfig2W
0x1400526E4: "long __cdecl wil_details_NtUpdateWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?wil_details_NtUpdateWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@Z
0x14008B950: "HostProcessDbgBreakOnDriverLoad" ??_C@_1EA@MLFPOCAC@?$AAH?$AAo?$AAs?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAD?$AAb?$AAg?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAL?$AAo?$AAa?$AAd?$AA?$AA@
0x140080E60: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x140071D68: "void __cdecl TelemetryAutoRestartPolicyStream(class WdfDevNode * __ptr64,enum AutoRestartPolicyStreamAction)" ?TelemetryAutoRestartPolicyStream@@YAXPEAVWdfDevNode@@W4AutoRestartPolicyStreamAction@@@Z
0x140072420: "public: unsigned long __cdecl WdfTransientDevStateMgr::BeginRestartAttempts(void) __ptr64" ?BeginRestartAttempts@WdfTransientDevStateMgr@@QEAAKXZ
0x140089650: "PreshutdownStarted" ??_C@_1CG@IGIFGMDE@?$AAP?$AAr?$AAe?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x14001F00C: "int __cdecl ScGenerateServiceDB(void)" ?ScGenerateServiceDB@@YAHXZ
0x1400899F8: "Global\OOBE_PNP_DONE" ??_C@_1CK@HIEIJOFH@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAO?$AAO?$AAB?$AAE?$AA_?$AAP?$AAN?$AAP?$AA_?$AAD?$AAO?$AAN?$AAE?$AA?$AA@
0x14007F658: "ValidateServiceDisplayName" ??_C@_1DG@LOALIEL@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14006476C: "unsigned long __cdecl ScWriteServiceType(struct HKEY__ * __ptr64,unsigned long)" ?ScWriteServiceType@@YAKPEAUHKEY__@@K@Z
0x140092F18: DABAPI_NULL_THUNK_DATA_DLN
0x140018298: "unsigned long __cdecl ScCheckServiceConfigParms(int,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64)" ?ScCheckServiceConfigParms@@YAKHPEBGKKKK000K0@Z
0x14007E190: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x14007B988: "const CRestartContext::`vftable'" ??_7CRestartContext@@6B@
0x14007DB58: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x1400A0078: "__cdecl _imp_LsaLookupFreeMemory" __imp_LsaLookupFreeMemory
0x14007F818: "NetLogon" ??_C@_1BC@GGGPAPAF@?$AAN?$AAe?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140030D67: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x140051698: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x1400A0028: DABAPI_NULL_THUNK_DATA_DLA
0x140098490: "class CNameEntry * __ptr64 __ptr64 ScGlobalPNP_TDIGroup" ?ScGlobalPNP_TDIGroup@@3PEAVCNameEntry@@EA
0x14002F788: "public: __cdecl wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>::~ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>(void) __ptr64" ??1?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@wil@@QEAA@XZ
0x140008A08: "unsigned long __cdecl ScmRegisterForHostNotifications(struct _IMAGE_RECORD * __ptr64)" ?ScmRegisterForHostNotifications@@YAKPEAU_IMAGE_RECORD@@@Z
0x140093980: DABAPI_NULL_THUNK_DATA_DLB
0x14007D780: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x14008B140: "DriverList" ??_C@_1BG@LFMMDDBJ@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x14005E810: "void __cdecl ScHandleBadDependencies(class utl::list<class Microsoft::WRL::ComPtr<class CServiceRecord>,class utl::allocator<class Microsoft::WRL::ComPtr<class CServiceRecord> > > & __ptr64)" ?ScHandleBadDependencies@@YAXAEAV?$list@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@V?$allocator@V?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@utl@@@utl@@@Z
0x14006A5F4: WPP_SF_SlddL
0x1400808F8: "LaunchProtected" ??_C@_1CA@MKFIJEEP@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x14007EB38: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14007D7F8: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x14007E458: "__cdecl _imp_NtCreateKey" __imp_NtCreateKey
0x1400992B4: "unsigned long g_ScRunState" ?g_ScRunState@@3KA
0x14007E1C0: "__cdecl _imp_RtlSetSaclSecurityDescriptor" __imp_RtlSetSaclSecurityDescriptor
0x14007E1C8: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x140030CD6: "__cdecl _tailMerge_api_ms_win_service_core_l1_1_1_dll" __tailMerge_api_ms_win_service_core_l1_1_1_dll
0x140018194: "void __cdecl ScFreeTriggerInfo(struct _SERVICE_TRIGGER_INFO * __ptr64 * __ptr64)" ?ScFreeTriggerInfo@@YAXPEAPEAU_SERVICE_TRIGGER_INFO@@@Z
0x140016F2C: "public: void * __ptr64 __cdecl CDelayStartContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDelayStartContext@@QEAAPEAXI@Z
0x140089200: "_SA_{262E99C9-6160-4871-ACEC-4E6" ??_C@_1FG@BJMNNLDB@?$AA_?$AAS?$AAA?$AA_?$AA?$HL?$AA2?$AA6?$AA2?$AAE?$AA9?$AA9?$AAC?$AA9?$AA?9?$AA6?$AA1?$AA6?$AA0?$AA?9?$AA4?$AA8?$AA7?$AA1?$AA?9?$AAA?$AAC?$AAE?$AAC?$AA?9?$AA4?$AAE?$AA6@
0x14005AECC: "public: __cdecl CRunCommandContext::CRunCommandContext(class CServiceRecord * __ptr64,unsigned short * __ptr64) __ptr64" ??0CRunCommandContext@@QEAA@PEAVCServiceRecord@@PEAG@Z
0x140099A10: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x14007E3E0: "__cdecl _imp_NtSetSystemInformation" __imp_NtSetSystemInformation
0x1400596C0: "public: void __cdecl utl::_TreeNodeHeader<unsigned long>::_HeadInsertNode(struct utl::_TreeNode<unsigned long> * __ptr64,bool,struct utl::_TreeNode<unsigned long> * __ptr64) __ptr64" ?_HeadInsertNode@?$_TreeNodeHeader@K@utl@@QEAAXPEAU?$_TreeNode@K@2@_N0@Z
0x1400814D0: "__cdecl _sz_DABAPI_dll" __sz_DABAPI_dll
0x1400990A0: "class wil::shutdown_aware_object<class wil::details::EnabledStateManager> wil::details::g_enabledStateManager" ?g_enabledStateManager@details@wil@@3V?$shutdown_aware_object@VEnabledStateManager@details@wil@@@2@A
0x140098F90: "class wil::shutdown_aware_object<class wil::details::FeatureStateManager> wil::details::g_featureStateManager" ?g_featureStateManager@details@wil@@3V?$shutdown_aware_object@VFeatureStateManager@details@wil@@@2@A
0x140030580: "__cdecl _tailMerge_ext_ms_win_core_resourcemanager_l1_1_0_dll" __tailMerge_ext_ms_win_core_resourcemanager_l1_1_0_dll
0x14007E118: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x14008B130: "%s:%s" ??_C@_1M@CDCAHPKB@?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x14005A6A0: WPP_SF_SSldd
0x14007DFF0: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x140099D20: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_SvchostSplit@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x14008A950: "m_List is not NULL" ??_C@_0BD@EBCCOIIA@m_List?5is?5not?5NULL?$AA@
0x140099778: "protected: static unsigned long CWin32ServiceRecord::s_CurrentServiceTag" ?s_CurrentServiceTag@CWin32ServiceRecord@@1KA
0x14005718C: "void __cdecl ScLogBlackBox(unsigned long,struct _SERVICE_PRESHUTDOWN_DATA * __ptr64,unsigned long)" ?ScLogBlackBox@@YAXKPEAU_SERVICE_PRESHUTDOWN_DATA@@K@Z
0x140082510: "SeIncreaseWorkingSetPrivilege" ??_C@_1DM@NDBAMECP@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAW?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AAS?$AAe?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14008A3E0: "%d.%d.%d.%d" ??_C@_1BI@FCMLLAGN@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140063584: "unsigned long __cdecl ScReadStartName(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ScReadStartName@@YAKPEAUHKEY__@@PEAPEAG@Z
0x14007E560: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x1400566C0: RDeleteService
0x140028A08: StringCchLengthW
0x1400300FE: RegCloseKey
0x140069260: WPP_SF_iidSd
0x14000F9E8: "int __cdecl ScIsValidServiceHandle(void * __ptr64)" ?ScIsValidServiceHandle@@YAHPEAX@Z
0x140093D44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140030F3E: "__cdecl _imp_load_LsaStorePrivateData" __imp_load_LsaStorePrivateData
0x14007D840: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x140075F40: "private: int __cdecl WdfDevNode::RetrieveCustomPoolOptionsFromRegistry(struct HKEY__ * __ptr64) __ptr64" ?RetrieveCustomPoolOptionsFromRegistry@WdfDevNode@@AEAAHPEAUHKEY__@@@Z
0x140087A70: Microsoft_Windows_DriverFrameworks_UserModeKeywords
0x14006973C: WPP_SF_Si
0x14005DBF0: WPP_SF_SI
0x140082748: "SeSystemEnvironmentPrivilege" ??_C@_1DK@IKHCMBBJ@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140053E84: WPP_SF_Sl
0x140053E84: WPP_SF_SL
0x140030860: "__cdecl _imp_load_SecpTranslateName" __imp_load_SecpTranslateName
0x140099B08: AliasAccountOpsSid
0x140098454: "int ScStillInitializing" ?ScStillInitializing@@3HA
0x1400825C0: "SeCreateGlobalPrivilege" ??_C@_1DA@PNNNMOAF@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140099C20: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x14006E730: "public: virtual void * __ptr64 __cdecl WdfServiceKey::`vector deleting destructor'(unsigned int) __ptr64" ??_EWdfServiceKey@@UEAAPEAXI@Z
0x140081A38: WPP_f973a01e37a63c48df05d72116b6be18_Traceguids
0x140053E84: WPP_SF_SD
0x140053E84: WPP_SF_Sd
0x14002D408: "int __cdecl wil_details_StagingConfig_QueryFeatureState(struct wil_details_StagingConfig * __ptr64,struct wil_FeatureState * __ptr64,unsigned int,int)" ?wil_details_StagingConfig_QueryFeatureState@@YAHPEAUwil_details_StagingConfig@@PEAUwil_FeatureState@@IH@Z
0x1400703F8: McTemplateU0
0x14000C658: "unsigned long __cdecl ScCreateImageRecord(struct _IMAGE_RECORD * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64,unsigned long,struct _SC_SERVICE_CHANNEL_CONTEXT * __ptr64,unsigned long,struct _RM_PSM_HOST_INFO * __ptr64,unsigned long,unsigned __int64,void * __ptr64)" ?ScCreateImageRecord@@YAKPEAPEAU_IMAGE_RECORD@@PEBG11KPEAX22KPEAU_SC_SERVICE_CHANNEL_CONTEXT@@KPEAU_RM_PSM_HOST_INFO@@K_K2@Z
0x14007DDD0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14007DDE0: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x14007E4D0: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x14006E5F0: "public: virtual void * __ptr64 __cdecl WdfObjectList<class WdfServiceKey,class WdfServiceKeyParameters>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$WdfObjectList@VWdfServiceKey@@VWdfServiceKeyParameters@@@@UEAAPEAXI@Z
0x1400012F8: "unsigned long __cdecl ScGetDisplayNamedServiceRecord(unsigned short const * __ptr64,class CServiceRecord * __ptr64 * __ptr64)" ?ScGetDisplayNamedServiceRecord@@YAKPEBGPEAPEAVCServiceRecord@@@Z
0x1400706BC: WPP_SF_SP
0x14002C0B0: "private: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValueInternal(unsigned short const * __ptr64,bool,unsigned __int64 * __ptr64,bool * __ptr64)" ?TryGetValueInternal@SemaphoreValue@details_abi@wil@@CAJPEBG_NPEA_KPEA_N@Z
0x140053EFC: WPP_SF_SS
0x14008A570: EVENT_DM_CREATE_HOST_OK
0x14000BA40: "public: unsigned long __cdecl CServiceRecord::GetGroupIndex(void) __ptr64" ?GetGroupIndex@CServiceRecord@@QEAAKXZ
0x140059830: RI_ScRegisterPreshutdownRestart
0x140081A98: "%s:%u(%S)" ??_C@_1BE@KIALAHCJ@?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAu?$AA?$CI?$AA?$CF?$AAS?$AA?$CJ?$AA?$AA@
0x14000E750: "protected: void __cdecl CServiceRecord::UpdateStartStateWhenAddingToStartSet(void) __ptr64" ?UpdateStartStateWhenAddingToStartSet@CServiceRecord@@IEAAXXZ
0x14007D948: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x140014588: "unsigned long __cdecl ScReadOptionalString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ScReadOptionalString@@YAKPEAUHKEY__@@PEBGPEAPEAGPEAK@Z
0x140093B50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x14001A320: ScExtGetThreadUILanguage
0x140081844: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x14007DBB8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x14008A338: WPP_93d6e084bc0832c41510e4d0721360b0_Traceguids
0x140061D08: "unsigned long __cdecl ScAdjustServiceDisplayName(struct HKEY__ * __ptr64,class CServiceRecord * __ptr64)" ?ScAdjustServiceDisplayName@@YAKPEAUHKEY__@@PEAVCServiceRecord@@@Z
0x140069018: WPP_SF_dSdqi
0x14005A508: WPP_SF_LSLqi
0x14001EFC0: "unsigned long __cdecl ScReadErrorControl(struct HKEY__ * __ptr64,unsigned long * __ptr64)" ?ScReadErrorControl@@YAKPEAUHKEY__@@PEAK@Z
0x14007D6C8: "__cdecl _imp_EaDeleteAggregatedEvent" __imp_EaDeleteAggregatedEvent
0x14005DF40: "protected: virtual void __cdecl CWin32ServiceRecord::ReportServiceHungInternal(void) __ptr64" ?ReportServiceHungInternal@CWin32ServiceRecord@@MEAAXXZ
0x14000E040: "public: void __cdecl CServiceRecord::AddToStartSet(class utl::unordered_set<class CServiceRecord * __ptr64,struct utl::hash<class CServiceRecord * __ptr64>,struct utl::equal_to<class CServiceRecord * __ptr64>,class utl::allocator<class CServiceRecord * __ptr64> > & __ptr64,class utl::unordered_set<class CNameEntry * __ptr64,struct utl::hash<class CNameEntry * __ptr64>,struct utl::equal_to<class CNameEntry * __ptr64>,class utl::allocator<class CNameEntry * __ptr64> > & __ptr64,class Microsoft::WRL::ComPtr<class CServiceRecord> & __ptr64) __ptr64" ?AddToStartSet@CServiceRecord@@QEAAXAEAV?$unordered_set@PEAVCServiceRecord@@U?$hash@PEAVCServiceRecord@@@utl@@U?$equal_to@PEAVCServiceRecord@@@3@V?$allocator@PEAVCServiceRecord@@@3@@utl@@AEAV?$unordered_set@PEAVCNameEntry@@U?$hash@PEAVCNameEntry@@@utl@@U?$equal_to@PEAVCNameEntry@@@3@V?$allocator@PEAVCNameEntry@@@3@@3@AEAV?$ComPtr@VCServiceRecord@@@WRL@Microsoft@@@Z
0x140093B78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x14007D930: "__cdecl _imp_iswctype" __imp_iswctype
0x140093998: ext-ms-win-secur32-translatename-l1-1-0_NULL_THUNK_DATA_DLB
0x14007DDC0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x14007F018: "DataType" ??_C@_1BC@PKOGDBIC@?$AAD?$AAa?$AAt?$AAa?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1400A01A0: ext-ms-win-com-psmregister-l1-2-2_NULL_THUNK_DATA_DLA
0x14006C0C0: ScExtInitiateSystemShutdownEx
0x140099B30: "unsigned __int64 DsmaUserContext" ?DsmaUserContext@@3_KA
0x140059664: "private: struct utl::pair<struct utl::_TreeNode<unsigned long> * __ptr64,bool> __cdecl utl::_Tree<unsigned long,unsigned long,struct utl::less<unsigned long>,class utl::allocator<unsigned long>,0>::_FindInsertionPointUniqueUpper(struct utl::_TreeNode<unsigned long> * __ptr64 & __ptr64,unsigned long const & __ptr64) __ptr64" ?_FindInsertionPointUniqueUpper@?$_Tree@KKU?$less@K@utl@@V?$allocator@K@2@$0A@@utl@@AEAA?AU?$pair@PEAU?$_TreeNode@K@utl@@_N@2@AEAPEAU?$_TreeNode@K@2@AEBK@Z
0x140093C18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140098F18: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x140069D58: "long __cdecl ScPrivilegeCheckAndAudit(unsigned long,void * __ptr64,unsigned long)" ?ScPrivilegeCheckAndAudit@@YAJKPEAXK@Z
0x14008A330: " - " ??_C@_17HIKLPLBG@?$AA?5?$AA?9?$AA?5?$AA?$AA@
0x140070438: McTemplateU0q
0x1400A0040: "__cdecl _imp_ShutdownPlatformLibrary" __imp_ShutdownPlatformLibrary
0x14001AED0: "public: virtual unsigned long __cdecl CServiceRecord::GetServiceRank(void) __ptr64" ?GetServiceRank@CServiceRecord@@UEAAKXZ
0x140099CA0: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_apiGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_apiGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x140080F10: "ext-ms-win-session-usermgr-l1-1-" ??_C@_1EE@HAOPKKMN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x140085260: "Microsoft-Windows-EndpointTrigge" ??_C@_1FE@DHBDJJBM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe@
0x140030A57: "__cdecl _imp_load_ScesrvInitializeServer" __imp_load_ScesrvInitializeServer
0x140053E24: WPP_SF_S
0x1400938F8: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLB
0x14003113F: memset
0x140093EAC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1400198F0: "public: virtual int __cdecl CWin32UserServiceRecord::IsTemplateRecordEqual(class CServiceRecord * __ptr64) __ptr64" ?IsTemplateRecordEqual@CWin32UserServiceRecord@@UEAAHPEAVCServiceRecord@@@Z
0x1400992A8: "unsigned short * __ptr64 __ptr64 ScGlobalSecurityExePath" ?ScGlobalSecurityExePath@@3PEAGEA
0x1400981E9: g_header_init_InitializeResultHeader
0x14006B8DC: "struct _EVENT_TRACE_PROPERTIES * __ptr64 __cdecl ScAllocSessionProperties(void)" ?ScAllocSessionProperties@@YAPEAU_EVENT_TRACE_PROPERTIES@@XZ
0x140082688: "SeSyncAgentPrivilege" ??_C@_1CK@KGLBCJFN@?$AAS?$AAe?$AAS?$AAy?$AAn?$AAc?$AAA?$AAg?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14007FEB8: "HostDefaultTimeoutSeconds" ??_C@_1DE@PDKAOCMC@?$AAH?$AAo?$AAs?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x14007B6E8: "const WdfDriverManager::`vftable'" ??_7WdfDriverManager@@6B@
0x14001AED0: "public: virtual unsigned long __cdecl CServiceRecord::GetLaunchProtected(void) __ptr64" ?GetLaunchProtected@CServiceRecord@@UEAAKXZ
0x140099290: "int g_fSplitSvcHost" ?g_fSplitSvcHost@@3HA
0x1400798C8: McTemplateU0j
0x140063F24: "void __cdecl ScUnregisterServicesTriggerAction(unsigned char)" ?ScUnregisterServicesTriggerAction@@YAXE@Z
0x14007F978: "Early-Launch" ??_C@_1BK@GLHNCFAL@?$AAE?$AAa?$AAr?$AAl?$AAy?$AA?9?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
0x140098DE0: "__cdecl _hmod__ext_ms_win_authz_context_l1_1_0_dll" __hmod__ext_ms_win_authz_context_l1_1_0_dll
0x140009FFC: "protected: void __cdecl CWin32ServiceRecord::LogServiceStatusChangeEvent(unsigned long) __ptr64" ?LogServiceStatusChangeEvent@CWin32ServiceRecord@@IEAAXK@Z
0x14006E6B0: "public: virtual void * __ptr64 __cdecl WdfDriverManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWdfDriverManager@@UEAAPEAXI@Z

[JEB Decompiler by PNF Software]