Generated by JEB on 2019/08/01
PE: C:\Windows\System32\ifsutilx.dll Base=0x180000000 SHA-256=EA1B52940532ED8C3DF081E5BEE2608C0EE4247DE2106E0029E4842A0D96EA58
PDB: ifsutilx.pdb GUID={9D5742B6-FCB0-B3AF-A906FBCBAD4362AC} Age=1
177 located named symbols:
0x18000220C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003190: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180003120: IfsUtil_NULL_THUNK_DATA
0x180002020: "__cdecl FindPESection" _FindPESection
0x180003128: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x180001A80: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180003DEC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003E64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800031B8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x180001AFC: "__cdecl CRT_INIT" _CRT_INIT
0x180003EF0: "__cdecl _IMPORT_DESCRIPTOR_IfsUtil" __IMPORT_DESCRIPTOR_IfsUtil
0x180003210: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002510: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003188: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180003790: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003E78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800031B0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800032F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800031F0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180002004: "__cdecl XcptFilter" _XcptFilter
0x180003300: "__cdecl _xc_a" __xc_a
0x180001760: GetSnapshotErrorMessage
0x1800034C8: "resutils" ??_C@_1BC@LBNKBLD@?$AAr?$AAe?$AAs?$AAu?$AAt?$AAi?$AAl?$AAs?$AA?$AA@
0x1800034E0: "ClusterSharedVolumeCreateSnapsho" ??_C@_0CC@LHHMEBJB@ClusterSharedVolumeCreateSnapsho@
0x180003288: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180003354: "__cdecl _guard_iat_table" __guard_iat_table
0x1800024E9: memcpy
0x1800031C8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800032A8: "__cdecl _imp_memset" __imp_memset
0x1800021DF: "__cdecl initterm" _initterm
0x180003EDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800055F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003238: "__cdecl _imp_Sleep" __imp_Sleep
0x180003320: "__cdecl _xi_z" __xi_z
0x180003178: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800021EB: "__cdecl _C_specific_handler" __C_specific_handler
0x1800031A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180002488: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800036B8: "\\?\%ws" ??_C@_1BA@GKGPGEDM@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180002010: "__cdecl amsg_exit" _amsg_exit
0x180003788: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180001820: InitializeCOM
0x1800035F0: "Failure to initialize COM librar" ??_C@_0FE@PBKACDGL@Failure?5to?5initialize?5COM?5librar@
0x180003428: "\\?\GLOBALROOT" ??_C@_1BO@NLDNEEHD@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180003768: GUID_NULL
0x180001610: ReleaseVolumeSnapshot
0x180001130: CreateVolumeSnapshot
0x180003130: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x180003180: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180003218: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800035D0: "vsstrace" ??_C@_1BC@HEHJLMME@?$AAv?$AAs?$AAs?$AAt?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x1800055E0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001008: DllMain
0x180003278: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800032C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800031E8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800055A0: "__cdecl _hmod__ext_ms_win_fs_vssapi_l1_1_0_dll" __hmod__ext_ms_win_fs_vssapi_l1_1_0_dll
0x1800036D0: "CSV Shadow copy creation failed." ??_C@_0HE@FHCKAOLO@CSV?5Shadow?5copy?5creation?5failed?4@
0x180003168: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180005000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002464: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003758: "__cdecl GUID_da9f41d4_1a5d_41d0_a614_6dfd78df5d05" _GUID_da9f41d4_1a5d_41d0_a614_6dfd78df5d05
0x180003F2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180003200: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003788: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800020D0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180003488: "VSS Shadow copy creation succeed" ??_C@_0DO@DMNIPKI@VSS?5Shadow?5copy?5creation?5succeed@
0x180003E00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180003530: "ClusterSharedVolumeCheckSnapshot" ??_C@_0CJ@FFHCLPCB@ClusterSharedVolumeCheckSnapshot@
0x1800031D8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180003C7C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001D40: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180003260: "__cdecl _imp__initterm" __imp__initterm
0x180003CA8: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLN
0x180003F18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180003F04: "__cdecl _IMPORT_DESCRIPTOR_ulib" __IMPORT_DESCRIPTOR_ulib
0x1800055D0: "__cdecl _onexitend" __onexitend
0x1800032F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003208: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003448: "VSS Shadow copy creation failed." ??_C@_0DL@LNMAMHEE@VSS?5Shadow?5copy?5creation?5failed?4@
0x180003258: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003310: "__cdecl _xi_a" __xi_a
0x180007008: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLA
0x180003248: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003158: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180003560: "CSV Shadow copy creation succeed" ??_C@_0DO@ONDEHKCF@CSV?5Shadow?5copy?5creation?5succeed@
0x180003EC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800018C8: "unsigned char __cdecl IsCsvMetadataVolume(unsigned short * __ptr64)" ?IsCsvMetadataVolume@@YAEPEAG@Z
0x1800055F8: "__cdecl pRawDllMain" _pRawDllMain
0x180001FE0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800018A0: UninitializeCOM
0x180003308: "__cdecl _xc_z" __xc_z
0x180003E50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180003220: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800031D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800055A8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUuhUfgrohUruhfgrocUhixUfhzUlyquivUznwGEUkxsOlyq@ifsutilx" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUuhUfgrohUruhfgrocUhixUfhzUlyquivUznwGEUkxsOlyq@ifsutilx
0x1800031C0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800016B0: CheckSnapshotPresence
0x180003138: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180003250: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180007000: "__cdecl _imp_VssFreeSnapshotPropertiesInternal" __imp_VssFreeSnapshotPropertiesInternal
0x180003148: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800035A0: "CSV Shadow copy creation failed." ??_C@_0DA@PCENHNIP@CSV?5Shadow?5copy?5creation?5failed?4@
0x1800023D6: "__cdecl _imp_load_VssFreeSnapshotPropertiesInternal" __imp_load_VssFreeSnapshotPropertiesInternal
0x180003230: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180003328: "__cdecl _guard_fids_table" __guard_fids_table
0x1800032B0: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x1800023E2: "__cdecl _tailMerge_ext_ms_win_fs_vssapi_l1_1_0_dll" __tailMerge_ext_ms_win_fs_vssapi_l1_1_0_dll
0x180003160: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180003150: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180003C5C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_fs_vssapi_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_fs_vssapi_l1_1_0_dll
0x180003E8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x1800032A0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800031E0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800010AC: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180003CE0: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLB
0x1800032C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003228: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800033D0: "Shadow copy creation failed. Fai" ??_C@_0FH@MOFKIDEA@Shadow?5copy?5creation?5failed?4?5Fai@
0x1800032B8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003790: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180003380: "IFSUTILX.DLL: DisableThreadLibra" ??_C@_0EB@OCKPPFII@IFSUTILX?4DLL?3?5DisableThreadLibra@
0x180002200: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800031F8: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180003EA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180003270: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800032E0: "__cdecl _imp_?Initialize@WSTRING@@QEAAEPEBGK@Z" __imp_?Initialize@WSTRING@@QEAAEPEBGK@Z
0x1800032D8: ntdll_NULL_THUNK_DATA
0x180003298: "__cdecl _imp_memcpy" __imp_memcpy
0x180005008: "__cdecl _security_cookie" __security_cookie
0x180003748: "__cdecl GUID_e579ab5f_1cc4_44b4_bed9_de0991ff0623" _GUID_e579ab5f_1cc4_44b4_bed9_de0991ff0623
0x180003198: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800031A8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180003E14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180003140: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1800055D8: "__cdecl _onexitbegin" __onexitbegin
0x180003268: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800032D0: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x180003170: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180002104: "__cdecl _security_init_cookie" __security_init_cookie
0x1800032E8: ulib_NULL_THUNK_DATA
0x180003DD8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003650: "COM library already intialized w" ??_C@_0GH@PJECHNB@COM?5library?5already?5intialized?5w@
0x180003118: "__cdecl _imp_RegisterExtensionCallbacks" __imp_RegisterExtensionCallbacks
0x180003290: "__cdecl _imp_malloc" __imp_malloc
0x180002250: "__cdecl _report_gsfailure" __report_gsfailure
0x1800055E8: "__cdecl _native_startup_state" __native_startup_state
0x180003EB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003280: "__cdecl _imp_free" __imp_free
0x180002070: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003240: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180003508: "ClusterSharedVolumeReleaseSnapsh" ??_C@_0CD@FJMNKNLA@ClusterSharedVolumeReleaseSnapsh@
0x180003E3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180003E28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180003360: "__cdecl _sz_ext_ms_win_fs_vssapi_l1_1_0_dll" __sz_ext_ms_win_fs_vssapi_l1_1_0_dll
0x1800024F5: memset
0x180003F40: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]