PDB Symbols - AcXtrnal.dll (0xD1D49008B9C33D6322BD122A9BD5F152167C22BAA830868FE02D16808A1C5C0A)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\AcXtrnal.dll Base=0x180000000 SHA-256=D1D49008B9C33D6322BD122A9BD5F152167C22BAA830868FE02D16808A1C5C0A
PDB: AcXtrnal.pdb GUID={BFE25086-F376-8F7F-0156D6FE4D299405} Age=1

178 located named symbols:
0x180002100: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800022D0: "__cdecl FindPESection" _FindPESection
0x180005688: "struct HINSTANCE__ * __ptr64 __ptr64 ShimLib::g_hinstDll" ?g_hinstDll@ShimLib@@3PEAUHINSTANCE__@@EA
0x180003C0C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003568: "Failed to find any threads." ??_C@_0BM@ENPGOGIG@Failed?5to?5find?5any?5threads?4?$AA@
0x180005060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001BEC: "__cdecl CRT_INIT" _CRT_INIT
0x180001450: "unsigned long __cdecl NS_SqlServer::APIHook_RegisterTraceGuidsW(unsigned long (__cdecl*)(enum WMIDPREQUESTCODE,void * __ptr64,unsigned long * __ptr64,void * __ptr64),void * __ptr64,struct _GUID const * __ptr64,unsigned long,struct _TRACE_GUID_REGISTRATION * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64 * __ptr64)" ?APIHook_RegisterTraceGuidsW@NS_SqlServer@@YAKP6AKW4WMIDPREQUESTCODE@@PEAXPEAK1@Z1PEBU_GUID@@KPEAU_TRACE_GUID_REGISTRATION@@PEBG6PEA_K@Z
0x180003158: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002560: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003310: AE_SHIM_API_HIT_ONCE_EVENT
0x180003268: "__cdecl _imp_LdrUnlockLoaderLock" __imp_LdrUnlockLoaderLock
0x180003138: "__cdecl _imp_Thread32Next" __imp_Thread32Next
0x180005070: "unsigned __int64 NS_SqlServer::g_stShimId" ?g_stShimId@NS_SqlServer@@3_KA
0x180003424: "" ??_C@_00CNPNBAHC@?$AA@
0x1800034D8: "[ApiName] Hook Entered" ??_C@_0BH@LBEIPNFC@?$FLApiName?$FN?5Hook?5Entered?$AA@
0x180003130: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180003260: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x1800032A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003428: "Failed to acquire loader lock." ??_C@_0BP@KBPIBJM@Failed?5to?5acquire?5loader?5lock?4?$AA@
0x1800022B7: "__cdecl XcptFilter" _XcptFilter
0x1800032A8: "__cdecl _xc_a" __xc_a
0x180005648: "int NS_SqlServer::g_bSubshimUsed" ?g_bSubshimUsed@NS_SqlServer@@3HA
0x180003520: "(ShimLib) Hook Entered" ??_C@_0BH@BKPCIMD@?$CIShimLib?$CJ?5Hook?5Entered?$AA@
0x180003170: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x180003410: "SqlServer" ??_C@_1BE@NIPDJAHP@?$AAS?$AAq?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x18000253D: memcpy
0x1800031C0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180003210: "__cdecl _imp_memset" __imp_memset
0x180003120: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000248F: "__cdecl initterm" _initterm
0x1800056D8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003128: "__cdecl _imp_Sleep" __imp_Sleep
0x1800033B0: "External Shims initialized." ??_C@_0BM@JLHJFLOH@External?5Shims?5initialized?4?$AA@
0x1800032C8: "__cdecl _xi_z" __xi_z
0x180003188: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800020F4: "__cdecl _C_specific_handler" __C_specific_handler
0x1800056A8: "void * __ptr64 __ptr64 NS_SqlServer::g_WaitEvent" ?g_WaitEvent@NS_SqlServer@@3PEAXEA
0x180003280: "__cdecl _imp_NtQueryInformationThread" __imp_NtQueryInformationThread
0x1800024DC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800033A0: "SqlServer" ??_C@_09PKJNPLDD@SqlServer?$AA@
0x180003650: "NotifyFn returned FALSE, fail lo" ??_C@_0CI@HFOCFJJ@NotifyFn?5returned?5FALSE?0?5fail?5lo@
0x180003288: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180005650: "struct tagHOOKAPI * __ptr64 __ptr64 NS_SqlServer::g_pAPIHooks" ?g_pAPIHooks@NS_SqlServer@@3PEAUtagHOOKAPI@@EA
0x180001100: "void __cdecl NS_SqlServer::ApcCallback(unsigned __int64)" ?ApcCallback@NS_SqlServer@@YAX_K@Z
0x1800022C3: "__cdecl amsg_exit" _amsg_exit
0x1800031E0: apphelp_NULL_THUNK_DATA
0x1800031D0: "__cdecl _imp_SE_ShimDPF" __imp_SE_ShimDPF
0x180003320: Microsoft_Windows_Application_ExperienceKeywords
0x1800035F0: "NS_SqlServer::NotifyFn" ??_C@_0BH@MNIODIHK@NS_SqlServer?3?3NotifyFn?$AA@
0x1800036DC: "")" ??_C@_02HPDBCLII@?$CC?$CJ?$AA@
0x1800033E0: "ExternalShims" ??_C@_0O@BKEHDFIB@ExternalShims?$AA@
0x180003250: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x1800036F8: "ShimLib::GetHookAPIs" ??_C@_0BF@NHNKNNIM@ShimLib?3?3GetHookAPIs?$AA@
0x1800031B0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180005658: "long volatile NS_SqlServer::g_ThreadsProcessed" ?g_ThreadsProcessed@NS_SqlServer@@3JC
0x1800056C8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001B04: DllMain
0x1800033F0: "External Shims uninitialized." ??_C@_0BO@PGBLKEMO@External?5Shims?5uninitialized?4?$AA@
0x180003220: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180003218: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800036B0: "RegisterTraceGuidsW" ??_C@_0BE@FKJMGMF@RegisterTraceGuidsW?$AA@
0x180003248: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800018D0: McTemplateU0ssss
0x180005600: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUvcgvimzoUlyquivUznwGEUkivxlnkOlyq@AcXtrnal" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUvcgvimzoUlyquivUznwGEUkivxlnkOlyq@AcXtrnal
0x180003C34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1800031B8: KERNEL32_NULL_THUNK_DATA
0x1800031C8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180005050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800024B8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800034B8: "No entry point for sqlos." ??_C@_0BK@DKCOILLF@No?5entry?5point?5for?5sqlos?4?$AA@
0x180003538: "ApiName" ??_C@_07IAKFNNID@ApiName?$AA@
0x180003168: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003180: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180003688: "SetDllMainCallback" ??_C@_0BD@FOKFCHKL@SetDllMainCallback?$AA@
0x180001964: "int __cdecl ShimLib::NotifyShimsEx(int,unsigned __int64)" ?NotifyShimsEx@ShimLib@@YAHH_K@Z
0x1800019F0: "void __cdecl ShimLib::NotifyShims(int,unsigned __int64)" ?NotifyShims@ShimLib@@YAXH_K@Z
0x180002380: "__cdecl ValidateImageBase" _ValidateImageBase
0x180003678: "SQLOS.DLL" ??_C@_09CCNPHNDO@SQLOS?4DLL?$AA@
0x180001220: "void * __ptr64 __cdecl NS_SqlServer::APIHook_SetDllMainCallback(void * __ptr64 const)" ?APIHook_SetDllMainCallback@NS_SqlServer@@YAPEAXQEAX@Z
0x180001A60: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::GetHookAPIs(char * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetHookAPIs@ShimLib@@YAPEAUtagHOOKAPI@@PEADPEAGPEAK@Z
0x180005640: Microsoft_Windows_Application_ExperienceEnableBits
0x180005660: "struct _RTL_CRITICAL_SECTION NS_SqlServer::g_EventLock" ?g_EventLock@NS_SqlServer@@3U_RTL_CRITICAL_SECTION@@A
0x180001E30: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800031E8: "__cdecl _imp__initterm" __imp__initterm
0x180001008: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::InitializeHooksEx(unsigned long,unsigned short const * __ptr64,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksEx@ShimLib@@YAPEAUtagHOOKAPI@@KPEBGPEBDPEAK@Z
0x180003608: "fdwReason(%d) pszCmdLine(%s)" ??_C@_0BN@BMJMMFGL@fdwReason?$CI?$CFd?$CJ?5pszCmdLine?$CI?$CFs?$CJ?$AA@
0x1800056B8: "__cdecl _onexitend" __onexitend
0x180003298: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003588: "NS_SqlServer::APIHook_RegisterTr" ??_C@_0CK@MBFADMFI@NS_SqlServer?3?3APIHook_RegisterTr@
0x180003118: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800032B8: "__cdecl _xi_a" __xi_a
0x180003478: "Failed to find sqlos." ??_C@_0BG@BKHLHHDF@Failed?5to?5find?5sqlos?4?$AA@
0x180003198: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003628: "NS_SqlServer::InitializeHooksMul" ??_C@_0CD@HKOFFAOC@NS_SqlServer?3?3InitializeHooksMul@
0x1800036E8: "%S%s%s%s " ??_C@_09EAGPOLDP@?$CFS?$CFs?$CFs?$CFs?6?$AA@
0x18000186C: McGenEventWrite
0x180003448: "NS_SqlServer::ApcCallback" ??_C@_0BK@MKCIOEBF@NS_SqlServer?3?3ApcCallback?$AA@
0x1800056E0: "__cdecl pRawDllMain" _pRawDllMain
0x1800036C8: "pdwHookCount(%d)" ??_C@_0BB@GEMBACLN@pdwHookCount?$CI?$CFd?$CJ?$AA@
0x1800033D0: "NotifyFn" ??_C@_08LOJNPBNJ@NotifyFn?$AA@
0x1800020D0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800032B0: "__cdecl _xc_z" __xc_z
0x1800031A0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003540: "Unknown" ??_C@_07NBCGADJA@Unknown?$AA@
0x1800032D0: "__cdecl _guard_fids_table" __guard_fids_table
0x180003230: msvcrt_NULL_THUNK_DATA
0x1800034F0: "NS_SqlServer::APIHook_SetDllMain" ??_C@_0CJ@MGBFACFC@NS_SqlServer?3?3APIHook_SetDllMain@
0x180003010: "__cdecl load_config_used" _load_config_used
0x1800056B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib
0x180003148: "__cdecl _imp_QueueUserAPC" __imp_QueueUserAPC
0x180005644: "int NS_SqlServer::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_SqlServer@@3HA
0x180005048: "char * __ptr64 __ptr64 NS_SqlServer::g_szCommandLine" ?g_szCommandLine@NS_SqlServer@@3PEADEA
0x180003160: "__cdecl _imp_Thread32First" __imp_Thread32First
0x180003200: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003240: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800031A8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003270: "__cdecl _imp_LdrFindEntryForAddress" __imp_LdrFindEntryForAddress
0x180003258: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x180003238: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003468: "sqlos" ??_C@_1M@MJBJIDDL@?$AAs?$AAq?$AAl?$AAo?$AAs?$AA?$AA@
0x1800024A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800035D8: "Failed to create event." ??_C@_0BI@NAFLEIKE@Failed?5to?5create?5event?4?$AA@
0x180005698: "void * __ptr64 __ptr64 ShimLib::g_hHeapManagerMutex" ?g_hHeapManagerMutex@ShimLib@@3PEAXEA
0x180003178: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180003150: "__cdecl _imp_OpenThread" __imp_OpenThread
0x180003208: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180003290: ntdll_NULL_THUNK_DATA
0x180005690: "void * __ptr64 __ptr64 ShimLib::g_hHeapTweakerMutex" ?g_hHeapTweakerMutex@ShimLib@@3PEAXEA
0x180003228: "__cdecl _imp_memcpy" __imp_memcpy
0x1800031D8: "__cdecl _imp_SE_GetShimId" __imp_SE_GetShimId
0x180005000: AE_LOG_Context
0x1800036E0: "("" ??_C@_02JBFCHHJF@?$CI?$CC?$AA@
0x1800015D0: "struct tagHOOKAPI * __ptr64 __cdecl NS_SqlServer::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_SqlServer@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180005058: "__cdecl _security_cookie" __security_cookie
0x180003490: "Failed to loader entry for sqlos" ??_C@_0CC@FIEIJBLI@Failed?5to?5loader?5entry?5for?5sqlos@
0x180003140: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003710: "ShimLib" ??_C@_07HGHLCFFA@ShimLib?$AA@
0x1800056C0: "__cdecl _onexitbegin" __onexitbegin
0x1800035B8: "Failed to process all threads." ??_C@_0BP@DIKIABDF@Failed?5to?5process?5all?5threads?4?$AA@
0x180003190: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003300: Microsoft_Windows_Application_ExperienceLevels
0x180003C20: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800023B4: "__cdecl _security_init_cookie" __security_init_cookie
0x180003BF8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800031F0: "__cdecl _imp_malloc" __imp_malloc
0x180003BE4: "__cdecl _IMPORT_DESCRIPTOR_apphelp" __IMPORT_DESCRIPTOR_apphelp
0x180002140: "__cdecl _report_gsfailure" __report_gsfailure
0x180001B18: "char * __ptr64 __cdecl ShimLib::StringDuplicateA(char const * __ptr64)" ?StringDuplicateA@ShimLib@@YAPEADPEBD@Z
0x1800056D0: "__cdecl _native_startup_state" __native_startup_state
0x1800036A0: "ADVAPI32.DLL" ??_C@_0N@JJPEKNFO@ADVAPI32?4DLL?$AA@
0x180003548: "Failed to take a snapshot." ??_C@_0BL@KDKBGNLK@Failed?5to?5take?5a?5snapshot?4?$AA@
0x1800056A0: "int NS_SqlServer::g_ApcsQueued" ?g_ApcsQueued@NS_SqlServer@@3HA
0x1800031F8: "__cdecl _imp_free" __imp_free
0x180002320: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003278: "__cdecl _imp_LdrLockLoaderLock" __imp_LdrLockLoaderLock
0x180002549: memset
0x180003C48: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]