Generated by JEB on 2019/08/01

PE: C:\Windows\System32\dab.dll Base=0x180000000 SHA-256=EE7A10FAC00BA52923D29CF3809891D5BC76B48D2E4F9E5C8799F51A74B952D7
PDB: dab.pdb GUID={E8B573C3-C58B-B25E-8D14A7EC062D185F} Age=1

702 located named symbols:
0x180009164: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180016070: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x180001444: "void __cdecl DabpComputeDelayAdjustedTime(struct _DAB_TRIGGER_PARAMS * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64)" ?DabpComputeDelayAdjustedTime@@YAXPEAU_DAB_TRIGGER_PARAMS@@PEAT_ULARGE_INTEGER@@1@Z
0x180015E78: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1800014E0: DabUtilsTimerCallback
0x180004750: DabpSerializedPendingActionCallback
0x180008B4C: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x1800162E0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x1800161A8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x1800016A0: DabpComputeLastScheduledTime
0x180008620: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800190E4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800160C0: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x18001E000: "__cdecl _imp_UMgrQueryUserToken" __imp_UMgrQueryUserToken
0x180016038: "__cdecl _imp_SetThreadpoolThreadMinimum" __imp_SetThreadpoolThreadMinimum
0x180018F18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180006DE0: DabSessionStateChangeTriggerArrived
0x18001B1B0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180013B20: DabUnRegisterTriggerProviders
0x18001B128: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005B60: DabUtilsSubmitThreadPoolWork
0x180006020: NetworkEndpointTriggerProviderShutdownCallout
0x180017090: MACHINE_IDLE_GUID
0x18001401C: WPP_SF_Ld
0x1800165C0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x1800170B0: WNF_UBPM_POWER_SOURCE
0x180009788: "__cdecl _imp_load_UMgrEnumerateSessionUsers" __imp_load_UMgrEnumerateSessionUsers
0x1800167D0: "__cdecl _sz_ext_ms_win_session_usermgr_l1_1_0_dll" __sz_ext_ms_win_session_usermgr_l1_1_0_dll
0x180006CD8: DabpHandleSessionStateChange
0x180015EE0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180015DA8: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x180009542: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x1800097DC: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180015D98: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x180013FD4: WPP_SF_L
0x180009734: IsUMgrQueryUserTokenPresent
0x180013E30: WppControlCallback
0x180009683: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x180009940: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180016190: "__cdecl _imp_PowerSettingRegisterNotification" __imp_PowerSettingRegisterNotification
0x180005700: DabpTriggerHandlerPrologue
0x180016430: IDLE_TRIGGER_PROVIDER_GUID
0x180005780: DabTakeExternalETWTriggerActions
0x1800123E4: DabpSetWakeupTimer
0x18001B7A0: RtdsBatchUpdateInProgress
0x180011520: DabpCalculateNextCalendarDelay
0x180016250: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x180005500: DabpWnfStateChangeTriggerCallback
0x18001B7E0: "unsigned __int64 g_hStartedSession" ?g_hStartedSession@@3_KA
0x1800041AC: DabpDiscardWakeTimerItems
0x180001540: s_DabRpcGetLastScheduledRunTime
0x180016338: "__cdecl _xp_a" __xp_a
0x1800160C8: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x1800097E8: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x1800090DC: "__cdecl RTC_Initialize" _RTC_Initialize
0x1800162D0: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800170F0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800097DC: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180015F40: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180017698: "__cdecl _rtc_taa" __rtc_taa
0x180019008: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180004090: DabRemoveTriggerBucketEntry
0x180016220: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x180007170: DabpActOnSessionStateChangeTrigger
0x180016128: "__cdecl _imp__initterm_e" __imp__initterm_e
0x1800045E4: DabpTriggerHandlerEpilogue
0x180007540: DabInitialize
0x18000FEC8: DabUnRegisterTriggerConsumers
0x180016138: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x180005250: DabpScheduleNext
0x1800094EC: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x1800097DC: "__cdecl _vcrt_initialize" __vcrt_initialize
0x180015FD0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800160D0: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x180016300: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800097D0: NdrServerCall2
0x180016200: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x180017070: WNF_UBPM_FRMU_ALLOWED
0x1800168A8: WPP_9ef73d8773e93094bf2d8e46022f9bcb_Traceguids
0x180017688: "__cdecl _rtc_iaa" __rtc_iaa
0x180018D00: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll
0x1800097DC: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x180016188: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x18000FD38: DabQueueConsumerClose
0x18001E030: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x180016308: "__cdecl _xc_a" __xc_a
0x180012034: DabpScheduleNextCalendar
0x180016968: NAMED_PIPE_EVENT_GUID
0x1800139B8: DabTriggerProviderUnregister
0x180009695: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x180019058: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x1800095A4: IsWTSQueryUserTokenPresent
0x1800162A8: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x180016748: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180016108: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x1800165B0: WPP_ThisDir_CTLGUID_Regular
0x18001B140: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180003DA0: DabTriggerConsumerUnregister
0x18000957E: "__cdecl o__wcsicmp" _o__wcsicmp
0x1800161A0: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA
0x180015EA8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1800039A0: s_DabRpcUnregisterTriggerConsumer
0x18001B138: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18000957E: "__cdecl wcsicmp" _wcsicmp
0x180004610: DabpDeleteExpiredItems
0x180016420: "__cdecl _guard_iat_table" __guard_iat_table
0x180009923: memcpy
0x180016140: "__cdecl _imp_memset" __imp_memset
0x180003A20: DabpCloseTriggerConsumer
0x180015F98: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x1800097DC: "__cdecl _acrt_initialize" __acrt_initialize
0x180016068: "__cdecl _imp_CloseThreadpoolCleanupGroup" __imp_CloseThreadpoolCleanupGroup
0x180015FA0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180009506: "__cdecl initterm" _initterm
0x180015DC0: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x180009566: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x180018F68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001B798: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180016330: "__cdecl _xi_z" __xi_z
0x180015E58: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180012DC8: WPP_SF_SdiLL
0x180016230: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x180016098: "__cdecl _imp_TzSpecificLocalTimeToSystemTime" __imp_TzSpecificLocalTimeToSystemTime
0x180016248: "__cdecl _imp_RtlIsMultiSessionSku" __imp_RtlIsMultiSessionSku
0x1800162C0: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180009596: "__cdecl _C_specific_handler" __C_specific_handler
0x180005DD0: DabUtilsWorkCallback
0x1800097DC: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x1800128D4: WPP_SF_SdL
0x180015EA0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18001B804: "unsigned long volatile g_dwConsumerTag" ?g_dwConsumerTag@@3KC
0x18001B980: WPP_REGISTRATION_GUIDS
0x180003410: DabpValidateConsumerParameters
0x1800165D0: "dabrpc" ??_C@_1O@BBBELBOB@?$AAd?$AAa?$AAb?$AAr?$AAp?$AAc?$AA?$AA@
0x18000F8DC: DabpHandleLogoff
0x1800161E8: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x180016228: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x180008F34: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x180007834: "unsigned long __cdecl DabInitializeRTConsumer(void)" ?DabInitializeRTConsumer@@YAKXZ
0x180015E88: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800168C8: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18000778C: "unsigned long __cdecl DabInitializePowerRTConsumer(void)" ?DabInitializePowerRTConsumer@@YAKXZ
0x180015F48: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180010794: WPP_SF_LdSd
0x180012A20: WPP_SF_SdLd
0x18000984C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180007AE4: DabStartTracingSession
0x180018D58: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLN
0x18000952A: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x180008E68: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x180009536: "__cdecl cexit" _cexit
0x180016150: "__cdecl _imp_OpenTraceW" __imp_OpenTraceW
0x180013F10: DAB_RPC_CONSUMER_CONTEXT_HANDLE_rundown
0x180008D38: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x18000FC20: DabPowerNotificationCallback
0x1800170B8: WPP_e58f102f4ef234b1c3a7462e7d63d268_Traceguids
0x1800097DC: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180016148: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18000954E: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x180013184: WPP_SF_ddddddd
0x180008B60: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180005130: DabUtilsAdjustToLocal
0x18001B988: WPP_MAIN_CB
0x180016258: "__cdecl _imp_NtSetThreadExecutionState" __imp_NtSetThreadExecutionState
0x180018FE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180010F44: "unsigned long __cdecl DabpGetMonthlyLastSchedule(unsigned short const * __ptr64,struct _DAB_TRIGGER_PARAMS * __ptr64,struct _FILETIME * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64)" ?DabpGetMonthlyLastSchedule@@YAKPEBGPEAU_DAB_TRIGGER_PARAMS@@PEAU_FILETIME@@PEAT_ULARGE_INTEGER@@3@Z
0x1800170E8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800083C4: "unsigned long __cdecl DabpGlobalPowerStateChanged(void)" ?DabpGlobalPowerStateChanged@@YAKXZ
0x1800161F0: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x18001B800: g_fNetworkAvailable
0x180001C98: DabpSaveWakeTick
0x180013840: DabCloseTriggerProvider
0x18001B780: "__cdecl _hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll" __hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180005D2C: DabpConsumerBlockReference
0x1800097DC: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180004CF0: DabpTriggerSpecificPrologue
0x1800106FC: WPP_SF_LSd
0x180016020: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180003D5C: DAB_CONSUMER_IS_UNREGISTERED
0x180008CE4: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x18001910C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-consumer-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-consumer-l1-1-0
0x180016850: "ext-ms-win-session-usermgr-l1-2-" ??_C@_1EE@POGAKNCO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x18000955A: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x180016198: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x18001E028: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x180015F70: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180019120: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-power-setting-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-power-setting-l1-1-0
0x18000F9D0: DabpHandleLogoffCallback
0x1800097DC: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x180016208: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x180015E68: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180016080: "__cdecl _imp_CreateThreadpoolCleanupGroup" __imp_CreateThreadpoolCleanupGroup
0x180003D10: DAB_MIDL_user_free
0x1800160D8: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x18001B9D8: g_lMachineSuspended
0x180006030: NetworkEndpointTriggerProviderRegisterCallout
0x180016348: "__cdecl _xt_a" __xt_a
0x18001B1F4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x180015F10: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800160D8: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18001B7A8: g_cTotalConsumers
0x180006FAC: DabGetUserToken
0x18000F8D0: DabTerminate
0x18001B7D8: "void * __ptr64 __ptr64 g_hConsumerThread" ?g_hConsumerThread@@3PEAXEA
0x180016520: "c09355a3-96af-4e8f-8d32-a2658dc2" ??_C@_1EK@OJGCOPHC@?$AAc?$AA0?$AA9?$AA3?$AA5?$AA5?$AAa?$AA3?$AA?9?$AA9?$AA6?$AAa?$AAf?$AA?9?$AA4?$AAe?$AA8?$AAf?$AA?9?$AA8?$AAd?$AA3?$AA2?$AA?9?$AAa?$AA2?$AA6?$AA5?$AA8?$AAd?$AAc?$AA2@
0x1800162B0: "__cdecl _imp_RtlTestAndPublishWnfStateData" __imp_RtlTestAndPublishWnfStateData
0x1800097F4: DllMain
0x180016288: "__cdecl _imp_NtDeleteWnfStateName" __imp_NtDeleteWnfStateName
0x1800097DC: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180015D90: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x180009120: "__cdecl RTC_Terminate" _RTC_Terminate
0x1800160E8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180015FE0: "__cdecl _imp_InitializeConditionVariable" __imp_InitializeConditionVariable
0x18001321C: WPP_SF_iS
0x1800160F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18001B81C: "unsigned long volatile g_lMissedRunQueued" ?g_lMissedRunQueued@@3KC
0x180015ED8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180015F88: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180015EC8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180015FE8: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x180015E50: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18001B788: "__cdecl _hmod__ext_ms_win_session_usermgr_l1_1_0_dll" __hmod__ext_ms_win_session_usermgr_l1_1_0_dll
0x180002520: DabTriggerConsumerRegister
0x180008360: "unsigned long __cdecl DabpPowerSettingChangedCallback(void * __ptr64,unsigned long,void * __ptr64)" ?DabpPowerSettingChangedCallback@@YAKPEAXK0@Z
0x180011E94: DabpRunOnceClockTriggerActionsMissed
0x180009828: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180016290: "__cdecl _imp_RtlSetOwnerSecurityDescriptor" __imp_RtlSetOwnerSecurityDescriptor
0x180016268: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000955A: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x180016118: "__cdecl _imp_memcmp" __imp_memcmp
0x180016238: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1800168D8: "Disabled" ??_C@_1BC@FGCJDNHA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180010238: DabpGetDelayedSessionTimerCallbackEnv
0x18001B9C8: g_llIdleStartTick
0x18001B134: "__cdecl _isa_enabled" __isa_enabled
0x1800161C0: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180012964: WPP_SF_SdLLL
0x180003070: DabEnableETWTriggerProviders
0x180017080: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180016960: WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED
0x1800190BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180015EF0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180015FC8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180015FF0: "__cdecl _imp_WakeConditionVariable" __imp_WakeConditionVariable
0x1800168B8: WPP_5a60ebb1c7553fff89150e8a89b451ba_Traceguids
0x180009566: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x1800170E8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18001B1B8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180005760: "void __cdecl DabpEventCallback(struct _EVENT_RECORD * __ptr64)" ?DabpEventCallback@@YAXPEAU_EVENT_RECORD@@@Z
0x18001B920: "struct _TP_CALLBACK_ENVIRON_V3 g_CallbackEnv" ?g_CallbackEnv@@3U_TP_CALLBACK_ENVIRON_V3@@A
0x180012F50: WPP_SF_Sii
0x1800012F0: DabpRunsMissed
0x18001B900: "unsigned __int64 volatile g_ullCollectionId" ?g_ullCollectionId@@3_KC
0x180012E8C: WPP_SF_Sdiii
0x180003BA0: DabpConsumerActionCallback
0x1800097DC: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x180015F20: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x180011948: DabpGetMonthlyDelay
0x180016320: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x1800170A0: NETWORK_MANAGER_LAST_IP_ADDRESS_REMOVAL_GUID
0x180016050: "__cdecl _imp_CloseThreadpool" __imp_CloseThreadpool
0x180018F2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800066A0: DabTriggerProviderRegister
0x180016298: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1800095A4: IsWTSEnumerateSessionsWPresent
0x180016460: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000FB00: WPP_SF_
0x180015E90: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180001AE0: DabUtilsGetLocalTimeDelay
0x180018D20: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180010AA8: WPP_SF_SddddL
0x180008C14: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180008A20: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800097C0: NdrServerCallAll
0x18001373C: RtdsDelete
0x180016130: "__cdecl _imp__initterm" __imp__initterm
0x180018FA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180011670: DabpConsumerActionTerminateCollectionCallback
0x18001B7B8: "void * __ptr64 __ptr64 g_hDabHeap" ?g_hDabHeap@@3PEAXEA
0x18001B090: "struct _LIST_ENTRY g_leConsumerListHead" ?g_leConsumerListHead@@3U_LIST_ENTRY@@A
0x1800162B8: "__cdecl _imp_RtlWaitForWnfMetaNotification" __imp_RtlWaitForWnfMetaNotification
0x180015DF0: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x180015E48: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800073E8: DabGetInteractiveUserSidAndToken
0x1800190A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180016028: "__cdecl _imp_SetThreadpoolThreadMaximum" __imp_SetThreadpoolThreadMaximum
0x1800160F0: "__cdecl _imp_rand_s" __imp_rand_s
0x180013340: DabUtilsSetWakeupTimer
0x180016078: "__cdecl _imp_CloseThreadpoolCleanupGroupMembers" __imp_CloseThreadpoolCleanupGroupMembers
0x18000FFE0: DabpConsumerCloseCallback
0x180016158: "__cdecl _imp_CloseTrace" __imp_CloseTrace
0x180016280: "__cdecl _imp_NtCreateWnfStateName" __imp_NtCreateWnfStateName
0x180019094: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000798C: "unsigned long __cdecl DabpStartSession(void)" ?DabpStartSession@@YAKXZ
0x180009542: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x180002440: s_DabRpcRegisterTriggerConsumer
0x180008B74: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x18000FDA4: DabTerminateDelayedSessionTimers
0x180015F00: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180006220: RtdspBuildKeyString
0x180008D88: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x1800162F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180015DE8: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x18001B0B0: "struct _LIST_ENTRY g_leImportantWakeTimerListHead" ?g_leImportantWakeTimerListHead@@3U_LIST_ENTRY@@A
0x18001B968: "struct _DAB_SRWLOCK g_ProviderListLock" ?g_ProviderListLock@@3U_DAB_SRWLOCK@@A
0x180008F78: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x180015F08: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180016060: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180001010: DabpMissedRunCallback
0x1800161C8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180003C8C: DabpCloseActionCallbackContext
0x180016260: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000FA14: DabpHandlePowerStateChange
0x180015E18: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180016018: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180016318: "__cdecl _xi_a" __xi_a
0x180015F28: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x18001B818: g_lMissedRunInProgress
0x180015E20: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180008C60: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x180015E38: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18001E038: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLA
0x180018E10: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLB
0x18000F8C0: DabPowerStateChanged
0x180004168: DabpWaitForSessionTimerCallbacks
0x180018D78: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLN
0x180008B98: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x1800161F8: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x1800161E0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800095F8: "__cdecl _imp_load_WTSQueryUserToken" __imp_load_WTSQueryUserToken
0x180009536: "__cdecl o__cexit" _o__cexit
0x18000FBD8: WPP_SF_dd
0x180010D68: WPP_SF_dS
0x180015DC8: "__cdecl _imp_UuidIsNil" __imp_UuidIsNil
0x180016030: "__cdecl _imp_CallbackMayRunLong" __imp_CallbackMayRunLong
0x180009572: "__cdecl seh_filter_dll" _seh_filter_dll
0x18001B088: WPP_GLOBAL_Control
0x1800160C0: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180018CE0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180018F54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180018FCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180007CD8: DabpCommonTriggerAction
0x18001B820: "struct _DAB_SRWLOCK g_WakeTimerLock" ?g_WakeTimerLock@@3U_DAB_SRWLOCK@@A
0x180013DC0: "void __cdecl DabTerminatePowerRTConsumer(void)" ?DabTerminatePowerRTConsumer@@YAXXZ
0x180013F8C: WPP_SF_D
0x18000FB9C: WPP_SF_d
0x180016748: "__cdecl pRawDllMain" _pRawDllMain
0x180006A00: DabpValidateTriggerParameters
0x180009320: "__cdecl _isa_available_init" __isa_available_init
0x180004268: TriggerProviderCallout
0x1800094E0: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x18001E008: "__cdecl _imp_UMgrFreeSessionUsers" __imp_UMgrFreeSessionUsers
0x180019080: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180017690: "__cdecl _rtc_izz" __rtc_izz
0x1800160A8: "__cdecl _imp_SystemTimeToTzSpecificLocalTime" __imp_SystemTimeToTzSpecificLocalTime
0x180008A70: "__cdecl _security_check_cookie" __security_check_cookie
0x18001B808: "struct _DAB_SRWLOCK g_ConsumerListLock" ?g_ConsumerListLock@@3U_DAB_SRWLOCK@@A
0x180001584: DabConsumerGetLastScheduledRunTime
0x180016310: "__cdecl _xc_z" __xc_z
0x180015F18: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180016168: api-ms-win-eventing-consumer-l1-1-0_NULL_THUNK_DATA
0x180016450: NETWORK_MANAGER_FIRST_IP_ADDRESS_ARRIVAL_GUID
0x180015FF8: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x1800097DC: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x1800014A0: DabUtilsThreadPoolCancelCallback
0x1800130C4: WPP_SF_dddLdddddd
0x180016008: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180015FB8: "__cdecl _imp_CancelWaitableTimer" __imp_CancelWaitableTimer
0x180008C30: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x1800162C8: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180009572: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180015E28: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000952A: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800132B0: NetworkEndpointTriggerProviderUnregisterCallout
0x180015E98: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800098C0: "__cdecl _chkstk" __chkstk
0x18001B978: "void * __ptr64 __ptr64 g_hDabTerminatedEvent" ?g_hDabTerminatedEvent@@3REAXEA
0x180016058: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x180017108: WPP_8b2c3c388e603da4d34a4a60721e6108_Traceguids
0x180016570: "Global\SC_AutoStartPhase1Done" ??_C@_1DM@CNEDAFC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAA?$AAu?$AAt?$AAo?$AAS?$AAt?$AAa?$AAr?$AAt?$AAP?$AAh?$AAa?$AAs?$AAe?$AA1?$AAD?$AAo?$AAn?$AAe?$AA?$AA@
0x1800116FC: DabpDelayTrigger
0x1800170C8: MACHINE_NOT_IDLE_GUID
0x180015F90: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180016090: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180016340: "__cdecl _xp_z" __xp_z
0x1800160B0: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x1800167A0: "__cdecl _sz_ext_ms_win_session_wtsapi32_l1_1_0_dll" __sz_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180006C40: DabSessionStateChanged
0x1800048F0: DabpActOnETWTrigger
0x180018F90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800190D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x180015F38: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800176A0: "__cdecl _rtc_tzz" __rtc_tzz
0x180016358: "__cdecl _guard_fids_table" __guard_fids_table
0x1800096B3: "__cdecl _tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll" __tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll
0x1800034F0: DabpValidateConsumerTriggerParameters
0x1800023A4: DabpPerformTriggerAction
0x180016160: "__cdecl _imp_ProcessTrace" __imp_ProcessTrace
0x1800150A0: "__cdecl load_config_used" _load_config_used
0x1800056A0: DabAlloc
0x1800162A0: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x18000754C: DabpInitialize
0x180013F38: DabDisableApiRpcInterface
0x180016440: NETWORK_MANAGER_TRIGGER_PROVIDER_GUID
0x180015E40: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180015E30: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180015FA8: "__cdecl _imp_CreateWaitableTimerExW" __imp_CreateWaitableTimerExW
0x180016328: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180016218: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x180016270: "__cdecl _imp_RtlTryAcquireSRWLockShared" __imp_RtlTryAcquireSRWLockShared
0x1800170F8: WPP_31435fa6ae773aebf9c8961523066423_Traceguids
0x180015DB0: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x180008F68: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180016678: "FirmwareForcedInstall-Final" ??_C@_1DI@GGLJMOHI@?$AAF?$AAi?$AAr?$AAm?$AAw?$AAa?$AAr?$AAe?$AAF?$AAo?$AAr?$AAc?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?9?$AAF?$AAi?$AAn?$AAa?$AAl?$AA?$AA@
0x180016978: WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED
0x18001B7B0: g_hDabModule
0x180010B7C: WPP_SF_SdiLdq
0x1800021A0: DabUtilsSubmitThreadPoolTimer
0x18000958A: "__cdecl o_rand_s" _o_rand_s
0x1800104F0: DabpRemoveDelayedSessionTimerEntry
0x180015EC0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18001B000: "struct _DAB_POWER_SUBSCRIPTION * g_PowerSubscriptions" ?g_PowerSubscriptions@@3PAU_DAB_POWER_SUBSCRIPTION@@A
0x1800160A0: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x180015F78: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180015F30: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180018F04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180008550: NetworkEndpointTriggerProviderInitializeCallout
0x1800162D8: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000958A: rand_s
0x180016088: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x1800097DC: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x1800168F0: WPP_3aa01b8955383277dd24400ebeddd788_Traceguids
0x1800097B0: ApiSetQueryApiSetPresence
0x1800118C4: DabpDrainPendingActionQueue
0x180010A1C: WPP_SF_Sdd
0x180013CE4: WPP_SF__guid_DiiSd
0x1800160C8: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x180012684: WPP_SF_SLd
0x180008430: "unsigned long __cdecl DabpGetFirmwareUpdatePowerThreshold(unsigned long * __ptr64)" ?DabpGetFirmwareUpdatePowerThreshold@@YAKPEAK@Z
0x18001095C: WPP_SF_SSd
0x180015EB0: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180015DE0: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180016470: RTDS_TRIGGER_KEY
0x180015F80: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18001B108: "struct _LIST_ENTRY g_leProviderListHead" ?g_leProviderListHead@@3U_LIST_ENTRY@@A
0x18001B158: "struct _DAB_POWER_STATE g_PowerState" ?g_PowerState@@3U_DAB_POWER_STATE@@A
0x1800170F0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180006970: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x18001B180: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180010E88: WPP_SF_ddSd
0x180012A20: WPP_SF_Sddd
0x1800108B4: WPP_SF_SDDd
0x1800127C8: WPP_SF_SSdS
0x180006020: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180009917: memcmp
0x180012D20: WPP_SF_Sddi
0x180009604: "__cdecl _tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll" __tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180011440: DabTerminateActions
0x1800097DC: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180013448: DabUtilsTerminate
0x1800097E8: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180012FE4: WPP_SF_ddSS
0x180012C48: WPP_SF_SddS
0x180007B98: DabUtilsInitialize
0x180015DD8: "__cdecl _imp_RpcServerUnregisterIfEx" __imp_RpcServerUnregisterIfEx
0x180018F7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180018FF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180007F38: DabpGetWeeklyDelay
0x18001B830: "union _RTL_RUN_ONCE g_ioDabHeapCreate" ?g_ioDabHeapCreate@@3T_RTL_RUN_ONCE@@A
0x180016178: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x180009512: "__cdecl initterm_e" _initterm_e
0x180015DF8: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x180003D30: DeleteWnfStateName
0x180008F08: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x1800096A7: "__cdecl _imp_load_UMgrFreeSessionUsers" __imp_load_UMgrFreeSessionUsers
0x180016210: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x180008D1C: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x1800162F0: ntdll_NULL_THUNK_DATA
0x1800160E0: "__cdecl _imp_memcpy" __imp_memcpy
0x180003770: DabTriggersOnRegistration
0x18001B150: "unsigned long g_fFirmwareUpdateAllowed" ?g_fFirmwareUpdateAllowed@@3KA
0x1800076EC: DabEnableApiRpcInterface
0x180012B88: WPP_SF_SdS
0x180010DE8: WPP_SF_dSd
0x18001B7E8: "void * __ptr64 __ptr64 g_hWakeupTimer" ?g_hWakeupTimer@@3PEAXEA
0x1800097DC: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x18000979A: "__cdecl _imp_load_UMgrQueryUserToken" __imp_load_UMgrQueryUserToken
0x1800161D0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800070BC: DabUtilsQueryToken
0x1800170D8: WPP_28d9106f80b433b64bd30cc22ec99c57_Traceguids
0x180013C2C: "void __cdecl DabTerminateRTConsumer(void)" ?DabTerminateRTConsumer@@YAXXZ
0x18001906C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180010690: WPP_SF_Dddd
0x180016048: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x18001E018: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA
0x180015E08: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x18001B120: "__cdecl _security_cookie" __security_cookie
0x1800098C0: "__cdecl alloca_probe" _alloca_probe
0x180008F88: "__cdecl _scrt_fastfail" __scrt_fastfail
0x18001B7C8: "struct _TP_CLEANUP_GROUP * __ptr64 __ptr64 g_pCleanupGroup" ?g_pCleanupGroup@@3PEAU_TP_CLEANUP_GROUP@@EA
0x1800161B8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18001B9B0: "struct _DAB_GLOBAL_DATA g_DabGlobals" ?g_DabGlobals@@3U_DAB_GLOBAL_DATA@@A
0x180018EF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180015E80: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180016170: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x18001E020: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x18001B7C0: "struct _TP_POOL * __ptr64 __ptr64 g_pThreadpool" ?g_pThreadpool@@3PEAU_TP_POOL@@EA
0x1800190F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x18001B7D0: "unsigned __int64 g_hRealtimeSession" ?g_hRealtimeSession@@3_KA
0x1800161D8: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x18001B0C0: "struct _SID_DATA * g_SidData" ?g_SidData@@3PAU_SID_DATA@@A
0x180018FB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180015EB8: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x1800068B4: "unsigned long __cdecl DabToggleETWTriggerProvider(struct _GUID * __ptr64,int,struct _DAB_TRIGGER_PROVIDER_ETW_FILTERS * __ptr64)" ?DabToggleETWTriggerProvider@@YAKPEAU_GUID@@HPEAU_DAB_TRIGGER_PROVIDER_ETW_FILTERS@@@Z
0x180016120: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x1800161B0: "__cdecl _imp_CopySid" __imp_CopySid
0x18001363C: DabpTerminate
0x180015F58: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180016100: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x18001B0A0: "struct _LIST_ENTRY g_leWakeTimerListHead" ?g_leWakeTimerListHead@@3U_LIST_ENTRY@@A
0x18001B130: "__cdecl _isa_available" __isa_available
0x180009734: IsUMgrEnumerateSessionUsersPresent
0x1800124B0: DabpTerminateCollection
0x180005C84: DabpMachineNetworkStatus
0x180005E30: DAB_MIDL_user_allocate
0x180015DB8: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180015E60: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180015EE8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180016508: "UBPM" ??_C@_19ENAAJHAC@?$AAU?$AAB?$AAP?$AAM?$AA?$AA@
0x180008694: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x180016980: RPC_INTERFACE_EVENT_GUID
0x180015F68: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x18001B910: "struct _DAB_SRWLOCK g_TpSubmitLock" ?g_TpSubmitLock@@3U_DAB_SRWLOCK@@A
0x18001B840: "struct _DAB_TRIGGER_TYPE_BUCKET_HEAD * g_TriggerTypeBucketHead" ?g_TriggerTypeBucketHead@@3PAU_DAB_TRIGGER_TYPE_BUCKET_HEAD@@A
0x180015F60: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800160D0: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x18001B774: "__cdecl _favor" __favor
0x180016898: WPP_20356d4600d93465409deea402e7b5c4_Traceguids
0x180008A98: "__cdecl _security_init_cookie" __security_init_cookie
0x1800135F8: WPP_SF_q
0x180005E90: PubSebLevelEventSyncInternal
0x180004034: DabRemoveTriggerBucketEntries
0x180016110: "__cdecl _imp__cexit" __imp__cexit
0x180015F50: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x1800160E8: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x180015E70: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x1800165E0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1JE@DFGODEP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180016350: "__cdecl _xt_z" __xt_z
0x180015FC0: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x180003D10: DabFree
0x180015DD0: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x18001B7F8: "unsigned short g_ucInitializationStatus" ?g_ucInitializationStatus@@3GA
0x18000FFEC: DabpDumpRegisteredConsumers
0x180008BD8: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x18001901C: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180016010: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x1800166B0: "Software\Microsoft\Windows\Curre" ??_C@_1JG@GFBIFNAM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800162E8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1800085D0: DabpHeapCreate
0x18001B7FC: "unsigned long g_cTotalProviders" ?g_cTotalProviders@@3KA
0x180015E00: RPCRT4_NULL_THUNK_DATA
0x180008C7C: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180010CD8: WPP_SF_Siq
0x180010480: DabpIsAcOnline
0x1800060C0: RtdsInsert
0x1800091D0: "__cdecl _report_gsfailure" __report_gsfailure
0x180015FB0: "__cdecl _imp_SetWaitableTimerEx" __imp_SetWaitableTimerEx
0x180015E10: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x1800084A0: "unsigned long __cdecl DabpConsumeEvents(void * __ptr64)" ?DabpConsumeEvents@@YAKPEAX@Z
0x1800160B8: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x180008684: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180012AC4: WPP_SF_SdLid
0x1800058E0: DabETWTriggerArrived
0x180016040: "__cdecl _imp_CreateThreadpool" __imp_CreateThreadpool
0x180016180: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x180016750: "ext-ms-win-session-wtsapi32-l1-1" ??_C@_1EG@MFPCCJEE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAt?$AAs?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x180005340: DabpTakeAction
0x18001E010: "__cdecl _imp_UMgrEnumerateSessionUsers" __imp_UMgrEnumerateSessionUsers
0x18001B1A0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180006AF0: DabOpenTriggerProvider
0x1800102D0: DabpInsertDelayedSessionTimerList
0x1800042D0: DabpActOnWnfStateChangeTrigger
0x180015EF8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180005D64: DabpCheckWnfStateDataMatch
0x180008230: DabApiRpcInterfaceSecurityCb
0x18001B7F0: "void * __ptr64 __ptr64 g_hImportantWakeupTimer" ?g_hImportantWakeupTimer@@3PEAXEA
0x180016108: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180016278: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x18001B160: RtdsDummyStateData
0x180001D10: DabpClockTriggerAction
0x180016240: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x180018F40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18001B9E0: g_uliLastResumeTime
0x180015DA0: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180016100: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x180010564: DabpSubmitTimer
0x180010C54: WPP_SF_Si
0x180004F50: DabpCheckEtwEventMatch
0x180016110: "__cdecl _imp__o__cexit" __imp__o__cexit
0x18000FB24: WPP_SF_SL
0x18000FB24: WPP_SF_Sd
0x180016000: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18001271C: WPP_SF_SS
0x180019044: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x180015ED0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180001940: DabpCalculateInitialDelay
0x180015FD8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180019030: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000954E: "__cdecl execute_onexit_table" _execute_onexit_table
0x180016800: "ext-ms-win-session-usermgr-l1-1-" ??_C@_1EE@HAOPKKMN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x180010854: WPP_SF_S
0x180018E30: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLB
0x18000951E: memset
0x180019134: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800160F0: "__cdecl _imp__o_rand_s" __imp__o_rand_s
0x18001B188: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]