Generated by JEB on 2019/08/01

PE: C:\Windows\System32\pnppolicy.dll Base=0x180000000 SHA-256=DFF3F198DA86CA61C7B573F46D79C95725F0FD9F82BE05031560A9E6C75A180B
PDB: pnppolicy.pdb GUID={7F41E0AE-FB66-3E32-B3E485AC60F595D6} Age=1

500 located named symbols:
0x18000A608: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x18000A2A0: "__cdecl _imp_CreateHardLinkW" __imp_CreateHardLinkW
0x18000E6D0: "`IsClassInDeviceDenyList'::`2'::PolicyListNotFound" ?PolicyListNotFound@?1??IsClassInDeviceDenyList@@9@9
0x18000886C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000A3E0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180008690: "__cdecl FindPESection" _FindPESection
0x18000A7A0: DEVPKEY_Device_PDOName
0x1800025C0: "public: virtual long __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::LockServer(int) __ptr64" ?LockServer@?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAJH@Z
0x18000AC00: "Device Installation Restrictions" ??_C@_1FM@IKHLEJGN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs@
0x18000E6B0: EventLogFilePath
0x18000AD18: "Device required reboot: %ws" ??_C@_0BM@JCIHNDMN@Device?5required?5reboot?3?5?$CFws?$AA@
0x180002790: "public: virtual void * __ptr64 __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAPEAXI@Z
0x18000A450: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18000A648: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18000A4C0: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x180004D38: TextLogMapFile
0x18000C560: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002888: pSetupOpenKey
0x18000A528: "__cdecl _imp_CM_Setup_DevNode" __imp_CM_Setup_DevNode
0x18000E060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000A238: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000A9B8: "System\DriverDatabase\Policies" ??_C@_1DO@DEMKGIPP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x18000A3F8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x180006A7C: pSetupDeleteFileByHandle
0x18000A280: "__cdecl _imp_LCMapStringW" __imp_LCMapStringW
0x18000813C: "__cdecl CRT_INIT" _CRT_INIT
0x18000A440: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000A638: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180008C80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000B420: "Software\Microsoft\Windows\Curre" ??_C@_1GA@MOFIHEOM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18000A3D8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000A240: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x18000A300: "__cdecl _imp_SetupDiGetDriverInfoDetailW" __imp_SetupDiGetDriverInfoDetailW
0x180004448: TextLogWriteSectionFooter
0x18000A828: GUID_DEVCLASS_VOLUMESNAPSHOT
0x18000A340: "__cdecl _imp_SetupDiGetDeviceInstanceIdW" __imp_SetupDiGetDeviceInstanceIdW
0x18000B2C0: " %02d:%02d:%02d.%03d" ??_C@_0BF@BEJAPHGA@?5?$CF02d?3?$CF02d?3?$CF02d?4?$CF03d?$AA@
0x1800058A0: TextLogIsPortableOS
0x180005010: TextLogGenerateBackupLogFileName
0x18000A390: "__cdecl _imp_SetupDiGetDeviceInstallParamsW" __imp_SetupDiGetDeviceInstallParamsW
0x180002320: DllGetClassObject
0x18000A2E8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18000A498: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18000C5C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000B5E8: "DenyDeviceClassesRetroactive" ??_C@_1DK@CECBPKAJ@?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AAR?$AAe?$AAt?$AAr?$AAo?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x1800059E0: StringCchPrintfA
0x18000A9F8: "Failed to delete device configur" ??_C@_0DP@FBALHKNO@Failed?5to?5delete?5device?5configur@
0x18000A5B8: "__cdecl _imp_wcschr" __imp_wcschr
0x18000A4B0: "__cdecl _imp_InitiateShutdownW" __imp_InitiateShutdownW
0x18000A250: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180004144: TextLogEnumerateOpenSections
0x18000A2C0: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x18000A6A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003A3C: TextLogGetLogStatus
0x18000A308: "__cdecl _imp_SetupDiGetSelectedDriverW" __imp_SetupDiGetSelectedDriverW
0x18000A010: "const CWinTaskClassFactoryT<class CpnppolicyHandler,1>::`vftable'" ??_7?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@6B@
0x18000A570: "__cdecl _imp__wcsdup" __imp__wcsdup
0x18000A420: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000B198: "[Exit status: SUCCESS (%s)]" ??_C@_0BM@DGKFCAFF@?$FLExit?5status?3?5SUCCESS?5?$CI?$CFs?$CJ?$FN?$AA@
0x18000A2A8: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x18000AB38: "ForceReboot" ??_C@_1BI@KIHPKEFP@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x18000B360: "System\CurrentControlSet\Control" ??_C@_1EC@DGAEKDHP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000B2B8: " " ??_C@_05IFKLLJBC@?5?5?5?5?5?$AA@
0x180008678: "__cdecl XcptFilter" _XcptFilter
0x18000A6A8: "__cdecl _xc_a" __xc_a
0x18000E600: Microsoft_Windows_UserPnpEnableBits
0x18000B3A8: "PortableOperatingSystem" ??_C@_1DA@IFMDNCPF@?$AAP?$AAo?$AAr?$AAt?$AAa?$AAb?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAn?$AAg?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x18000A888: ENTER_DEVICE_POLICY_CHECK
0x180002790: "public: virtual void * __ptr64 __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAPEAXI@Z
0x18000B2E8: " " ??_C@_01CLKCMJKC@?5?$AA@
0x18000A268: "__cdecl _imp_FindClose" __imp_FindClose
0x18000A1C8: DEVOBJ_NULL_THUNK_DATA
0x18000B130: "[Exit status: SUCCESS]" ??_C@_0BH@KPIBIHDA@?$FLExit?5status?3?5SUCCESS?$FN?$AA@
0x180001DDC: StringCchCopyW
0x18000A530: api-ms-win-devices-config-l1-1-1_NULL_THUNK_DATA
0x180006700: pSetupMapFileForWrite
0x18000A360: "__cdecl _imp_SetupSetThreadLogToken" __imp_SetupSetThreadLogToken
0x18000A610: "__cdecl _imp_NtSetValueKey" __imp_NtSetValueKey
0x18000A2D8: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x18000B3D8: "System\HardwareConfig" ??_C@_1CM@FAHDILEP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x18000B518: "DenyRemovableDevices" ??_C@_1CK@ILAKMLGI@?$AAD?$AAe?$AAn?$AAy?$AAR?$AAe?$AAm?$AAo?$AAv?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x18000A378: "__cdecl _imp_SetupDiSetClassInstallParamsW" __imp_SetupDiSetClassInstallParamsW
0x18000866C: "__cdecl callnewh" _callnewh
0x18000A290: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x18000B0B8: "amd64" ??_C@_05MDLPDLNO@amd64?$AA@
0x180008C46: memcpy
0x18000B330: "%s.????????_??????.%s" ??_C@_1CM@HEHCNEAP@?$AA?$CF?$AAs?$AA?4?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA_?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18000A770: DM_POLICY_UNINSTALL
0x18000A538: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000A5E8: "__cdecl _imp_memset" __imp_memset
0x18000A4E8: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x18000A258: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000884F: "__cdecl initterm" _initterm
0x180007F8C: IsAnyStringInList
0x18000C68C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000E728: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000A4F8: "__cdecl _imp_Sleep" __imp_Sleep
0x18000B4B0: "INF" ??_C@_17CHCCJFKN@?$AAI?$AAN?$AAF?$AA?$AA@
0x18000A6C8: "__cdecl _xi_z" __xi_z
0x18000B044: "[%s]" ??_C@_04LIFAFMCE@?$FL?$CFs?$FN?$AA@
0x18000A3C8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000E6C4: "`IsClassInDeviceAllowList'::`2'::PolicyListCheckInit" ?PolicyListCheckInit@?1??IsClassInDeviceAllowList@@9@9
0x180008616: "__cdecl _C_specific_handler" __C_specific_handler
0x18000A2E0: "__cdecl _imp_GetCommandLineA" __imp_GetCommandLineA
0x180004678: WriteTextLogFileHeader
0x180001594: RequestPolicyChangeReboot
0x180001F90: "protected: virtual long __cdecl CWinTaskHandler::StartWorker(struct IUnknown * __ptr64,unsigned short * __ptr64) __ptr64" ?StartWorker@CWinTaskHandler@@MEAAJPEAUIUnknown@@PEAG@Z
0x180006794: pSetupGrowMappedFileAtOffset
0x18000A860: Microsoft_Windows_UserPnpLevels
0x180004218: TextLogUpdateSectionTag
0x18000A370: "__cdecl _imp_SetupDiEnumDeviceInfo" __imp_SetupDiEnumDeviceInfo
0x18000B958: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x180008C52: memmove
0x18000A218: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000AA78: "Failed to copy device installati" ??_C@_0DM@LOHAHBJI@Failed?5to?5copy?5device?5installati@
0x18000AFE8: "SYSTEM\Setup\SetupapiLogStatus" ??_C@_1DO@BKPFACBC@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AAL?$AAo?$AAg?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180006C9C: StrBufDestroyA
0x18000A7E0: DEVPKEY_Device_ConfigFlags
0x180008660: malloc
0x18000B1D8: "[Exit]" ??_C@_06MPLFPGAB@?$FLExit?$FN?$AA@
0x18000A3F0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180008B4C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005214: TextLogBackupLogFile
0x180002300: DllCanUnloadNow
0x180006FC8: "__cdecl pSpUtilsInstallLogUninitialize" _pSpUtilsInstallLogUninitialize
0x18000ACE0: "{Device Removal Initiated by Pol" ??_C@_0DC@CMDNKJLL@?$HLDevice?5Removal?5Initiated?5by?5Pol@
0x18000600C: SpUtilsSetTargetWindowsDir
0x18000B1F0: "[Device Install Log] OS Ve" ??_C@_0KA@HDNLHIMP@?$FLDevice?5Install?5Log?$FN?$AN?6?5?5?5?5?5OS?5Ve@
0x180007BEC: IsDeviceInList
0x18000B6C8: "[-] Removable devices are restri" ??_C@_0CF@KGFEOPNG@?$FL?9?$FN?5Removable?5devices?5are?5restri@
0x18000A4C8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180002A60: pSetupCreateKeyEx
0x18000C6C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180008684: "__cdecl amsg_exit" _amsg_exit
0x18000A5D0: "__cdecl _imp__callnewh" __imp__callnewh
0x18000A760: IID_IClassFactory
0x18000AB90: "The system will restart in %d se" ??_C@_0GC@IPNILLHP@The?5system?5will?5restart?5in?5?$CFd?5se@
0x18000E744: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUkmkUklorxbUlyquivUznwGEUkivxlnkOlyq@pnppolicy" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUkmkUklorxbUlyquivUznwGEUkivxlnkOlyq@pnppolicy
0x18000AF20: "LogLevel" ??_C@_1BC@CBHKINIM@?$AAL?$AAo?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x18000E6C8: "`IsClassInDeviceDenyList'::`2'::PolicyRetroactiveResult" ?PolicyRetroactiveResult@?1??IsClassInDeviceDenyList@@9@9
0x18000A910: "Software\Policies\Microsoft\Wind" ??_C@_1GE@KIKDBEKK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18000A350: "__cdecl _imp_SetupDiOpenDeviceInfoW" __imp_SetupDiOpenDeviceInfoW
0x180005368: TextLogDecayLogFileBackups
0x1800041AC: TextLogFindSection
0x18000ADD8: "__cdecl GUID_eaec7a8f_27a0_4ddc_8675_14726a01a38a" _GUID_eaec7a8f_27a0_4ddc_8675_14726a01a38a
0x18000A230: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x18000A318: "__cdecl _imp_SetupWriteTextLog" __imp_SetupWriteTextLog
0x180004288: pSetupCloseTextLogSection
0x18000B038: "[%s - %s]" ??_C@_09MMDIBBMF@?$FL?$CFs?5?9?5?$CFs?$FN?$AA@
0x18000A1E0: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180002250: "public: virtual void * __ptr64 __cdecl CpnppolicyHandler::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCpnppolicyHandler@@UEAAPEAXI@Z
0x18000A4A8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000E608: TextLogOffline
0x18000A368: "__cdecl _imp_SetupDiGetClassDevsW" __imp_SetupDiGetClassDevsW
0x18000A3D0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000A388: "__cdecl _imp_SetupDiRemoveDevice" __imp_SetupDiRemoveDevice
0x18000687C: pSetupMakeSurePathExists
0x18000A600: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x18000A510: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18000A468: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000B124: "<ins>" ??_C@_05GFCMMBPC@?$DMins?$DO?$AA@
0x180001F80: "private: virtual long __cdecl CWinTaskHandler::Pause(void) __ptr64" ?Pause@CWinTaskHandler@@EEAAJXZ
0x18000E718: "__cdecl _native_startup_lock" __native_startup_lock
0x180004A18: TextLogVerifyInsertionPoint
0x18000AC60: "{Device Installation Restriction" ??_C@_0DA@IFBMJPEP@?$HLDevice?5Installation?5Restriction@
0x18000AC90: "Installation restriction exists " ??_C@_0EL@DLGADGFA@Installation?5restriction?5exists?5@
0x18000AB50: "Restrictions" ??_C@_1BK@NILCLPDE@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800022D8: DllMain
0x1800065F0: "__cdecl pSpUtilsCreateFile" _pSpUtilsCreateFile
0x180008BB0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18000C5B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000B158: "REBOOT_INITIATED" ??_C@_0BB@LJNCFLBL@REBOOT_INITIATED?$AA@
0x18000A588: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000A430: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x18000A678: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000A428: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C600: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000B2D8: " %04d/%02d/%02d" ??_C@_0BA@PLMFOEHC@?5?$CF04d?1?$CF02d?1?$CF02d?$AA@
0x18000B8F0: "{Device installation policy chec" ??_C@_0DG@CCKDLJAE@?$HLDevice?5installation?5policy?5chec@
0x18000B848: "[+] Hardware or Compatible ID: %" ??_C@_0CD@DKOPHPBB@?$FL?$CL?$FN?5Hardware?5or?5Compatible?5ID?3?5?$CF@
0x18000A2F8: KERNEL32_NULL_THUNK_DATA
0x18000A298: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x180003984: TextLogSetLogStatus
0x18000AF68: "setupapi.app.log" ??_C@_1CC@MLAOCMDE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAa?$AAp?$AAp?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x18000A3C0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800080B4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000A540: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000E050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180008B28: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800060CC: pSetupExceptionHandler
0x18000680C: pSetupUnmapFileAndSetEOF
0x180007048: "__cdecl pSpUtilsLogSetPath" _pSpUtilsLogSetPath
0x18000A040: "const CpnppolicyHandler::`vftable'" ??_7CpnppolicyHandler@@6B@
0x18000A358: "__cdecl _imp_SetupDiDestroyDeviceInfoList" __imp_SetupDiDestroyDeviceInfoList
0x18000A848: DEVPKEY_Device_Parent
0x18000B7C0: "Device installation policy allow" ??_C@_0DG@IKIPKBGA@Device?5installation?5policy?5allow@
0x18000B588: "DenyDeviceIDsRetroactive" ??_C@_1DC@BLNIHJKO@?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAD?$AAs?$AAR?$AAe?$AAt?$AAr?$AAo?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x18000E6D4: "`IsClassInDeviceDenyList'::`2'::PolicyListCheckInit" ?PolicyListCheckInit@?1??IsClassInDeviceDenyList@@9@9
0x18000ADB8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180006CE0: StrBufCatA
0x18000A438: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000A4D0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000AE90: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1IK@IEFPOEFM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18000A790: DM_POLICY_REBOOT
0x18000754C: IsClassInDeviceAllowList
0x18000ADC8: CLSID_pnppolicy
0x18000A5F8: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x18000E604: "private: static long volatile CWinTaskHandler::s_cInstances" ?s_cInstances@CWinTaskHandler@@0JC
0x18000A8A0: Microsoft_Windows_UserPnpKeywords
0x180008740: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000A310: "__cdecl _imp_SetupGetThreadLogToken" __imp_SetupGetThreadLogToken
0x18000A750: IID_IUnknown
0x18000E680: g_sputils_WindowsDirectory
0x18000A548: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x18000A2B0: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x18000B628: "AllowDeviceClasses" ??_C@_1CG@DCECOKLJ@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x18000C650: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000B170: "REBOOT_REQUIRED" ??_C@_0BA@GPPPFGHO@REBOOT_REQUIRED?$AA@
0x18000A228: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000B548: "DenyDeviceIDs" ??_C@_1BM@IBNKIDD@?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAD?$AAs?$AA?$AA@
0x18000A330: "__cdecl _imp_SetupDiEnumDeviceInterfaces" __imp_SetupDiEnumDeviceInterfaces
0x18000A410: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180002250: "public: virtual void * __ptr64 __cdecl CpnppolicyHandler::`vector deleting destructor'(unsigned int) __ptr64" ??_ECpnppolicyHandler@@UEAAPEAXI@Z
0x18000B148: "DI_DO_DEFAULT" ??_C@_0O@PKJPAFCO@DI_DO_DEFAULT?$AA@
0x18000B1B8: "[Exit status: FAILURE(0x%08x)]" ??_C@_0BP@LJDMFCPB@?$FLExit?5status?3?5FAILURE?$CI0x?$CF08x?$CJ?$FN?$AA@
0x18000E070: g_sputils_IsOnlineWindowsDirectory
0x18000A838: EXIT_DEVICE_POLICY_CHECK
0x180008380: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000A1C0: "__cdecl _imp_DevObjDestroyDeviceInfoList" __imp_DevObjDestroyDeviceInfoList
0x180001E90: "protected: virtual unsigned long __cdecl CWinTaskHandler::Release(void) __ptr64" ?Release@CWinTaskHandler@@MEAAKXZ
0x18000A5C0: "__cdecl _imp__initterm" __imp__initterm
0x18000B4D8: "setupapi.ev2" ??_C@_1BK@GPOMBCMC@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA2?$AA?$AA@
0x1800045B0: GetTextLogKeyFromStrings
0x180003398: pSetupEnableThreadPrivileges
0x18000A3B8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000AD38: "{Device Removal Initiated by Pol" ??_C@_0DP@HECCKKIJ@?$HLDevice?5Removal?5Initiated?5by?5Pol@
0x18000AB70: "RebootTime" ??_C@_1BG@HBMJIADG@?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18000A348: "__cdecl _imp_SetupDiGetDevicePropertyW" __imp_SetupDiGetDevicePropertyW
0x18000A7B8: DEVPKEY_Device_HardwareIds
0x18000C574: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000A260: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x180005960: StringCchPrintfW
0x18000E708: "__cdecl _onexitend" __onexitend
0x18000A448: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18000A558: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000A698: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000A4B8: api-ms-win-core-shutdown-l1-1-1_NULL_THUNK_DATA
0x18000ADF8: "\REGISTRY\MACHINE" ??_C@_1CE@BGEMHEPM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x18000E60C: TextLogMapErrors
0x18000A288: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18000A810: DEVPKEY_Device_CompatibleIds
0x18000A458: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180006EC0: StringCchCatExA
0x1800061B0: pSetupUnicodeToMultiByte
0x180002BC4: pSetupQueryValue
0x18000A590: "__cdecl _imp__resetstkoflw" __imp__resetstkoflw
0x18000AF38: "LogMask" ??_C@_1BA@KAPAMJI@?$AAL?$AAo?$AAg?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x18000C6A0: "__cdecl _IMPORT_DESCRIPTOR_SETUPAPI" __IMPORT_DESCRIPTOR_SETUPAPI
0x18000A650: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180006C30: pStrBufCreate
0x18000A520: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000A6B8: "__cdecl _xi_a" __xi_a
0x180002968: pSetupCreateKeyWorker
0x18000A518: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000B568: "AllowDeviceIDs" ??_C@_1BO@GPHLCNOK@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAD?$AAs?$AA?$AA@
0x18000712C: IsDeviceInDeviceIDsList
0x18000B2F0: "%s.%04d%02d%02d_%02d%02d%02d.%s" ??_C@_1EA@FJADPNAE@?$AA?$CF?$AAs?$AA?4?$AA?$CF?$AA0?$AA4?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA_?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?$CF?$AA0?$AA2?$AAd?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18000A398: "__cdecl _imp_SetupVerifyInfFileW" __imp_SetupVerifyInfFileW
0x18000B2A0: ">>> " ??_C@_05NDGBNDLG@?$DO?$DO?$DO?5?5?$AA@
0x18000A560: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180001D1C: McGenEventWrite
0x180001ED0: "protected: virtual long __cdecl CWinTaskHandler::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CWinTaskHandler@@MEAAJAEBU_GUID@@PEAPEAX@Z
0x180004BC4: TextLogDeleteString
0x180005124: TextLogRequestLogFileBackup
0x180006488: pSetupAppendPath
0x18000AF1C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000C628: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000A620: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x180002720: "public: virtual long __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180008A28: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000E730: "__cdecl pRawDllMain" _pRawDllMain
0x180001F60: "protected: virtual long __cdecl CWinTaskHandler::Stop(long * __ptr64) __ptr64" ?Stop@CWinTaskHandler@@MEAAJPEAJ@Z
0x1800038A0: "__cdecl pSpUtilsSetTextLogPath" _pSpUtilsSetTextLogPath
0x18000A1B0: "__cdecl _imp_DevObjCreateDeviceInfoList" __imp_DevObjCreateDeviceInfoList
0x18000A1A8: "__cdecl _imp_DevObjGetDeviceProperty" __imp_DevObjGetDeviceProperty
0x180006374: pSetupGetFileTitle
0x18000A4E0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x1800080F4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000AAC0: "DrvInst.exe_mutex_{5B10AC83-4F13" ??_C@_1HC@JJBMKOGM@?$AAD?$AAr?$AAv?$AAI?$AAn?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA_?$AAm?$AAu?$AAt?$AAe?$AAx?$AA_?$AA?$HL?$AA5?$AAB?$AA1?$AA0?$AAA?$AAC?$AA8?$AA3?$AA?9?$AA4?$AAF?$AA1?$AA3@
0x18000B050: "[Boot Session: %04d/%02d/%02d %0" ??_C@_0DD@IFILEAAP@?$FLBoot?5Session?3?5?$CF04d?1?$CF02d?1?$CF02d?5?$CF0@
0x18000A618: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x18000A5A8: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x18000C614: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1
0x180008630: "__cdecl _security_check_cookie" __security_check_cookie
0x18000A900: GUID_DEVINTERFACE_VOLUME
0x1800027C4: pSetupOpenPredefinedKey
0x18000A6B0: "__cdecl _xc_z" __xc_z
0x18000A478: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002700: "public: virtual unsigned long __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::AddRef(void) __ptr64" ?AddRef@?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAKXZ
0x180001E70: "protected: virtual unsigned long __cdecl CWinTaskHandler::AddRef(void) __ptr64" ?AddRef@CWinTaskHandler@@MEAAKXZ
0x18000B480: "SetupOverride" ??_C@_1BM@IOHCBIPI@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x1800021C0: "private: static unsigned long __cdecl CWinTaskHandler::WorkerThreadProc(void * __ptr64)" ?WorkerThreadProc@CWinTaskHandler@@CAKPEAX@Z
0x18000A550: "__cdecl _imp_GetKernelObjectSecurity" __imp_GetKernelObjectSecurity
0x18000A4A0: "__cdecl _imp_RegCopyTreeW" __imp_RegCopyTreeW
0x18000A400: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x18000A3A0: "__cdecl _imp_pSetupStringFromGuid" __imp_pSetupStringFromGuid
0x18000A508: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000A220: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180004CAC: TextLogDeleteCtlTag
0x18000A210: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180008CA0: "__cdecl _chkstk" __chkstk
0x18000A380: "__cdecl _imp_SetupDiCallClassInstaller" __imp_SetupDiCallClassInstaller
0x18000A658: "__cdecl _imp_RtlFormatCurrentUserKeyPath" __imp_RtlFormatCurrentUserKeyPath
0x18000A270: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x18000B800: "The device is explicitly allowed" ??_C@_0ED@KHFDKEMO@The?5device?5is?5explicitly?5allowed@
0x18000E640: GlobalDevLogData
0x18000A1E8: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18000B680: "The device is explicitly restric" ??_C@_0EG@MJPJENCD@The?5device?5is?5explicitly?5restric@
0x18000B928: "STORAGE\VolumeSnapshot" ??_C@_1CO@GHJKPCA@?$AAS?$AAT?$AAO?$AAR?$AAA?$AAG?$AAE?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo?$AAt?$AA?$AA@
0x1800057FC: TextLogQueueLogFileBackup
0x18000C6DC: "__cdecl _IMPORT_DESCRIPTOR_DEVOBJ" __IMPORT_DESCRIPTOR_DEVOBJ
0x18000A1D0: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x180006D5C: pStrBufGrow
0x180005F50: "__cdecl pSpUtilsLogInitialize" _pSpUtilsLogInitialize
0x18000B084: " " ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x18000A488: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000A6D0: "__cdecl _guard_fids_table" __guard_fids_table
0x18000AA38: "Failed to create device configur" ??_C@_0DP@EODHFNOG@Failed?5to?5create?5device?5configur@
0x18000A5F0: msvcrt_NULL_THUNK_DATA
0x18000A0A0: "__cdecl load_config_used" _load_config_used
0x18000B2B0: " . " ??_C@_05IPDFJEBI@?5?5?5?4?5?$AA@
0x18000B0C0: " os: Version = %d.%d.%d, Service" ??_C@_0GD@CLCFBBMO@?5os?3?5Version?5?$DN?5?$CFd?4?$CFd?4?$CFd?0?5Service@
0x18000A4D8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18000B760: "[*] One or more matching policy " ??_C@_0FM@FEHIEKKH@?$FL?$CK?$FN?5One?5or?5more?5matching?5policy?5@
0x180004F44: TextLogUpdateFileOffsets
0x180006118: pSetupDuplicateString
0x18000A5A0: "__cdecl _imp_toupper" __imp_toupper
0x18000C5D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000E6CC: "`IsClassInDeviceDenyList'::`2'::PolicyRetroactiveInit" ?PolicyRetroactiveInit@?1??IsClassInDeviceDenyList@@9@9
0x18000A7F8: DEVPKEY_Device_InstallError
0x18000B1E0: "Section end" ??_C@_0M@HHJGCPLG@Section?5end?$AA@
0x180001FF0: "protected: virtual long __cdecl CWinTaskHandler::StopWorker(long * __ptr64) __ptr64" ?StopWorker@CWinTaskHandler@@MEAAJPEAJ@Z
0x18000A5E0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180007DCC: IsVolumeSnapshotDevice
0x18000B5C0: "DenyDeviceClasses" ??_C@_1CE@EIBAFMB@?$AAD?$AAe?$AAn?$AAy?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x180007CD8: IsInfInboxSigned
0x18000A408: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000A640: "__cdecl _imp_NtClose" __imp_NtClose
0x180001008: RefreshDeviceConfigurationPolicies
0x18000E6C0: "`IsClassInDeviceAllowList'::`2'::PolicyListNotFound" ?PolicyListNotFound@?1??IsClassInDeviceAllowList@@9@9
0x18000A2D0: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x18000A328: "__cdecl _imp_SetupDiGetClassDevsExW" __imp_SetupDiGetClassDevsExW
0x180002DDC: pSetupGetPolicyListStrings
0x18000A670: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000A480: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000AF48: "LogMaxFileSize" ??_C@_1BO@IJKDHGBN@?$AAL?$AAo?$AAg?$AAM?$AAa?$AAx?$AAF?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000E670: g_sputils_LogInitialized
0x18000B408: "LastConfig" ??_C@_1BG@CNBOIILD@?$AAL?$AAa?$AAs?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x180008654: free
0x18000A1F8: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x18000A668: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000B870: "[+] Setup class of the selected " ??_C@_0CM@IAOAIBFD@?$FL?$CL?$FN?5Setup?5class?5of?5the?5selected?5@
0x180007654: IsDevicePolicyExempt
0x180008860: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000A248: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18000A5B0: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18000A3A8: SETUPAPI_NULL_THUNK_DATA
0x18000A208: "__cdecl _imp_SleepEx" __imp_SleepEx
0x18000B8A0: "Device installation policy will " ??_C@_0EP@LMPKFOIG@Device?5installation?5policy?5will?5@
0x180001F80: "private: virtual long __cdecl CWinTaskHandler::Resume(void) __ptr64" ?Resume@CWinTaskHandler@@EEAAJXZ
0x18000C5EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800073E8: IsClassInDeviceDenyList
0x18000A320: "__cdecl _imp_SetupDiCreateDeviceInfoList" __imp_SetupDiCreateDeviceInfoList
0x18000B4F8: "setupapi.ev3" ??_C@_1BK@NHFAHFKH@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA3?$AA?$AA@
0x18000E740: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu
0x180004EE8: TextLogUnmapFile
0x1800023F0: "private: virtual long __cdecl CpnppolicyHandler::Worker(void) __ptr64" ?Worker@CpnppolicyHandler@@EEAAJXZ
0x180005E80: pSpUtilsSetLogPath
0x18000E000: userpnp_Context
0x18000A780: DM_POLICY_UNINSTALL_EXEMPT
0x18000A5D8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800026C0: "public: virtual unsigned long __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::Release(void) __ptr64" ?Release@?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAKXZ
0x18000E738: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUoryUkmkfgrohUlyquivUznwGEUkivxlnkOlyq@pnputils" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUoryUkmkfgrohUlyquivUznwGEUkivxlnkOlyq@pnputils
0x18000A690: ntdll_NULL_THUNK_DATA
0x18000A580: "__cdecl _imp_memcpy" __imp_memcpy
0x180001F40: "protected: virtual long __cdecl CWinTaskHandler::Start(struct IUnknown * __ptr64,unsigned short * __ptr64) __ptr64" ?Start@CWinTaskHandler@@MEAAJPEAUIUnknown@@PEAG@Z
0x18000C63C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-config-l1-1-1
0x180005C1C: pSpUtilsQueryOverrideValue
0x1800077D0: IsDeviceInstallAllowed
0x1800031C8: StringCchCopyExW
0x180004A64: TextLogInsertString
0x18000AE20: "\REGISTRY\MACHINE\SOFTWARE\Class" ??_C@_1EG@LKPPLMDE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs@
0x18000C59C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000E058: "__cdecl _security_cookie" __security_cookie
0x18000AD78: "{Device Installation Restriction" ??_C@_0DP@CAEJKAII@?$HLDevice?5Installation?5Restriction@
0x180005B3C: pSpUtilsOpenSetupKey
0x180008CA0: "__cdecl alloca_probe" _alloca_probe
0x18000E6F8: ?g_taskModule@@3V?$CWinTaskModuleT@VCpnppolicyHandler@@$1?CLSID_pnppolicy@@3U_GUID@@B@@A
0x18000AF90: "setupapi.dev.log" ??_C@_1CC@LMHLAGMD@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAe?$AAv?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x18000A200: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x18000A3E8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000ADE8: IID_ITaskHandler
0x18000B720: "[-] Restricted setup class of se" ??_C@_0DD@KFCJPFJL@?$FL?9?$FN?5Restricted?5setup?5class?5of?5se@
0x18000C588: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000B028: "no title" ??_C@_08PCKKPKGK@no?5title?$AA@
0x18000A1D8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18000E710: "__cdecl _onexitbegin" __onexitbegin
0x18000E6B8: InstallLogFilePath
0x18000E6A8: StringLogFilePath
0x180002068: "private: long __cdecl CWinTaskHandler::CreateWorkerThread(struct IUnknown * __ptr64) __ptr64" ?CreateWorkerThread@CWinTaskHandler@@AEAAJPEAUIUnknown@@@Z
0x18000B290: "!!! " ??_C@_05MLCLCEGC@?$CB?$CB?$CB?5?5?$AA@
0x18000A598: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000A3B0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000A2F0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000A418: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x18000B088: " Hardware Configuration: %s" ??_C@_0CA@BKCBDKGJ@?5?5?5?5?5Hardware?5Configuration?3?5?$CFs?$AA@
0x18000A490: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x18000C6B4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180004B50: TextLogInsertCtlTag
0x180008774: "__cdecl _security_init_cookie" __security_init_cookie
0x18000118C: GetCriticalStorageDeviceInfoSet
0x18000A1B8: "__cdecl _imp_DevObjOpenDeviceInfo" __imp_DevObjOpenDeviceInfo
0x18000A680: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18000A660: "__cdecl _imp_RtlUpcaseUnicodeString" __imp_RtlUpcaseUnicodeString
0x1800016A4: pHandleDevicePolicyCheck
0x18000C54C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000B298: "! " ??_C@_05EOPHGKLH@?$CB?5?5?5?5?$AA@
0x18000A568: "__cdecl _imp_memmove" __imp_memmove
0x180005CC0: pSpUtilsSetLogPathFromRegKey
0x180002D00: pSetupGetPolicyValue
0x18000A630: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x180006684: pSetupOpenFileForWrite
0x18000A5C8: "__cdecl _imp_malloc" __imp_malloc
0x18000AE68: "\REGISTRY\USER" ??_C@_1BO@PBBLJICK@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x18000B4B8: "setupapi.ev1" ??_C@_1BK@HNFJLNCM@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA1?$AA?$AA@
0x18000A2C8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18000A2B8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000A688: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x18000B6F0: "[-] Restricted Hardware or Compa" ??_C@_0CO@JHCDNKHC@?$FL?9?$FN?5Restricted?5Hardware?5or?5Compa@
0x1800047A8: TextLogWriteEntry
0x180006270: pSetupConcatenatePaths
0x1800088B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800025E0: "public: virtual long __cdecl CWinTaskClassFactoryT<class CpnppolicyHandler,1>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CWinTaskClassFactoryT@VCpnppolicyHandler@@$00@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000B650: "{Device installation policy chec" ??_C@_0CJ@JJEEEJCA@?$HLDevice?5installation?5policy?5chec@
0x18000E720: "__cdecl _native_startup_state" __native_startup_state
0x1800036C4: "__cdecl pSpUtilsTextLogInitialize" _pSpUtilsTextLogInitialize
0x180003BA4: pSetupCreateTextLogSectionA
0x18000B0A8: "Section start" ??_C@_0O@MNGJNNKK@Section?5start?$AA@
0x180003AD8: pSetupCreateTextLogSectionW
0x180006B80: pSetupSetFileCompressionState
0x18000B2A8: "<<< " ??_C@_05EOGAOJFG@?$DM?$DM?$DM?5?5?$AA@
0x1800063CC: pSetupGetSystemBootTime
0x18000A460: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000B180: "RESTART_REQUIRED" ??_C@_0BB@FPOHJKPG@RESTART_REQUIRED?$AA@
0x18000A1F0: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x18000AFB8: "setupapi.offline.log" ??_C@_1CK@ENDBLDLE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x18000A628: "__cdecl _imp_NtCreateKey" __imp_NtCreateKey
0x18000A338: "__cdecl _imp_SetupDiGetDeviceInterfaceDetailW" __imp_SetupDiGetDeviceInterfaceDetailW
0x18000C678: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000A978: "Failed to open device installati" ??_C@_0DM@FIAKLHII@Failed?5to?5open?5device?5installati@
0x18000E73C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUkmkUoryUklofgrohUlyquivUznwGEUkivxlnkOlyq@polutils" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUkmkUoryUklofgrohUlyquivUznwGEUkivxlnkOlyq@polutils
0x18000E610: GlobalAppLogData
0x18000A578: "__cdecl _imp_free" __imp_free
0x180001CDC: McTemplateU0
0x1800086E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000A500: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000A470: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000A278: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x18000A4F0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000A870: DEVPKEY_Device_Capabilities
0x18000C664: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001D78: McTemplateU0q
0x18000A7D0: GUID_DEVINTERFACE_DISK
0x180001C5C: McTemplateU0z
0x180008C5E: memset
0x18000C6F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000B4A0: "LogPath" ??_C@_1BA@NHOPJJJG@?$AAL?$AAo?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@

[JEB Decompiler by PNF Software]