PDB Symbols - trkwks.dll (0xEEF76BD38F90D6846FC17E13F3981FF0EA9768BE7D142430488A2F0850853833)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\trkwks.dll Base=0x180000000 SHA-256=EEF76BD38F90D6846FC17E13F3981FF0EA9768BE7D142430488A2F0850853833
PDB: trkwks.pdb GUID={2F761565-8E91-A90A-C2C2C587D5E4C374} Age=1

793 located named symbols:
0x1800013F0: Stubold2_LnkSearchMachine
0x18001BAC0: "unsigned long g_cThreadPoolThreads" ?g_cThreadPoolThreads@@3KA
0x180006ACC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004E00: "private: void __cdecl CLogFile::InitializeLogEntries(unsigned long,unsigned long) __ptr64" ?InitializeLogEntries@CLogFile@@AEAAXKK@Z
0x1800151C0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180015830: ".tmp" ??_C@_19LKKOIHJI@?$AA?4?$AAt?$AAm?$AAp?$AA?$AA@
0x180006DD0: "__cdecl FindPESection" _FindPESection
0x18000D1C0: "private: virtual enum PTimerCallback::TimerContinuation __cdecl CVolumeManager::Timer(unsigned long) __ptr64" ?Timer@CVolumeManager@@EEAA?AW4TimerContinuation@PTimerCallback@@K@Z
0x180004420: "public: class CVolume * __ptr64 __cdecl CVolumeManager::IsDuplicateVolId(class CVolume * __ptr64,struct CVolumeId const & __ptr64) __ptr64" ?IsDuplicateVolId@CVolumeManager@@QEAAPEAVCVolume@@PEAV2@AEBUCVolumeId@@@Z
0x180015398: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x1800015D8: "public: __cdecl CSystemSD::~CSystemSD(void) __ptr64" ??1CSystemSD@@QEAA@XZ
0x180001738: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x180012070: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800155A0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180019534: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180007358: "__cdecl local_unwind" _local_unwind
0x180001410: "public: __cdecl CSystemSD::CSystemSD(void) __ptr64" ??0CSystemSD@@QEAA@XZ
0x180009078: "public: void __cdecl CFILETIME::SetToUTC(void) __ptr64" ?SetToUTC@CFILETIME@@QEAAXXZ
0x18000C4CC: "public: class CVolume * __ptr64 __cdecl CVolumeManager::FindVolume(struct CVolumeId const & __ptr64) __ptr64" ?FindVolume@CVolumeManager@@QEAAPEAVCVolume@@AEBUCVolumeId@@@Z
0x18000C058: "public: virtual __cdecl CVolume::~CVolume(void) __ptr64" ??1CVolume@@UEAA@XZ
0x18001B390: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180016E80: "VolInfrequentTasksPeriod" ??_C@_1DC@DKDMNBOD@?$AAV?$AAo?$AAl?$AAI?$AAn?$AAf?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAT?$AAa?$AAs?$AAk?$AAs?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x180015138: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180015208: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000B1A4: "public: int __cdecl CObjIdEnumerator::FindNext(struct CObjId * __ptr64,struct CDomainRelativeObjId * __ptr64) __ptr64" ?FindNext@CObjIdEnumerator@@QEAAHPEAUCObjId@@PEAUCDomainRelativeObjId@@@Z
0x18000BE8C: "public: __cdecl CVolume::CVolume(void) __ptr64" ??0CVolume@@QEAA@XZ
0x180019660: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0
0x18001BEF0: "protected: static class CMultiTsz CTrkRpcConfig::_mtszCustomSecureDcName" ?_mtszCustomSecureDcName@CTrkRpcConfig@@1VCMultiTsz@@A
0x180015228: "__cdecl _imp_LCMapStringW" __imp_LCMapStringW
0x18000659C: "__cdecl CRT_INIT" _CRT_INIT
0x180015100: "__cdecl _imp_RpcMgmtSetCancelTimeout" __imp_RpcMgmtSetCancelTimeout
0x180015268: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800150A8: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x1800153A0: "__cdecl _imp_SetSecurityDescriptorControl" __imp_SetSecurityDescriptorControl
0x180015048: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180005AE0: "public: void __cdecl CEntropyRecorder::Put(void) __ptr64" ?Put@CEntropyRecorder@@QEAAXXZ
0x1800150B8: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x1800013F0: StubTriggerVolumeClaims
0x180015578: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000A9F0: StubLnkSetVolumeId
0x1800170F8: "ObjIdIndexReopenLifetime" ??_C@_1DC@MIGMJGHP@?$AAO?$AAb?$AAj?$AAI?$AAd?$AAI?$AAn?$AAd?$AAe?$AAx?$AAR?$AAe?$AAo?$AAp?$AAe?$AAn?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AA?$AA@
0x180007390: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800150E0: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x1800151B8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000ED20: "public: long __cdecl CTrkWksSvc::SetVolumeId(unsigned long,struct CVolumeId) __ptr64" ?SetVolumeId@CTrkWksSvc@@QEAAJKUCVolumeId@@@Z
0x18000CB10: "public: long __cdecl CVolumeManager::Search(unsigned long,struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,unsigned short * __ptr64,unsigned __int64) __ptr64" ?Search@CVolumeManager@@QEAAJKAEBUCDomainRelativeObjId@@0PEAU2@1PEAUCMachineId@@PEAG_K@Z
0x180015178: "__cdecl _imp_FindNextVolumeW" __imp_FindNextVolumeW
0x180015870: GUID_IO_VOLUME_DISMOUNT
0x180011134: "public: void __cdecl CSvcCtrlInterface::Initialize(unsigned short const * __ptr64,class IServiceHandler * __ptr64) __ptr64" ?Initialize@CSvcCtrlInterface@@QEAAXPEBGPEAVIServiceHandler@@@Z
0x180015210: "__cdecl _imp_CancelIoEx" __imp_CancelIoEx
0x18000A5EC: "public: static void __cdecl CVerifyAuthentication::VerifyAuthentication(void * __ptr64)" ?VerifyAuthentication@CVerifyAuthentication@@SAXPEAX@Z
0x180002970: "public: int __cdecl CVolumeManager::ReopenVolumeHandles(void) __ptr64" ?ReopenVolumeHandles@CVolumeManager@@QEAAHXZ
0x180015590: "__cdecl _imp_NtReadFile" __imp_NtReadFile
0x180017448: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180002340: "private: virtual void __cdecl CVolumeManager::DoWork(void) __ptr64" ?DoWork@CVolumeManager@@EEAAXXZ
0x18000B5FC: "public: int __cdecl CVolume::MakeAllOidsReborn(void) __ptr64" ?MakeAllOidsReborn@CVolume@@QEAAHXZ
0x18000F85C: "long __cdecl QueryVolRelativePath(void * __ptr64,unsigned short * __ptr64)" ?QueryVolRelativePath@@YAJPEAXPEAG@Z
0x180011EFC: "private: int __cdecl CShareEnumerator::_IsAdminShare(void) __ptr64" ?_IsAdminShare@CShareEnumerator@@AEAAHXZ
0x180003FD0: "public: void __cdecl CLog::Initialize(class CTrkWksConfiguration const * __ptr64,class CLogFile * __ptr64) __ptr64" ?Initialize@CLog@@QEAAXPEBVCTrkWksConfiguration@@PEAVCLogFile@@@Z
0x1800195C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800103C4: "protected: void __cdecl CTrkConfiguration::Read(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long)const __ptr64" ?Read@CTrkConfiguration@@IEBAXPEBGPEAKK@Z
0x180015200: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180015840: GUID_IO_VOLUME_LOCK
0x1800150E8: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x180015580: "__cdecl _imp_NtWriteFile" __imp_NtWriteFile
0x1800150A0: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x1800154D8: "__cdecl _imp_NtSetTimer" __imp_NtSetTimer
0x180015478: "__cdecl _imp_wcschr" __imp_wcschr
0x1800157F8: "\??" ??_C@_17MFDAJLJA@?$AA?2?$AA?$DP?$AA?$DP?$AA?$AA@
0x1800152F8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180009014: "private: void __cdecl CLog::SetDirty(int) __ptr64" ?SetDirty@CLog@@AEAAXH@Z
0x1800070A3: "__cdecl _tailMerge_srvcli_dll" __tailMerge_srvcli_dll
0x180015600: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180007000: NdrServerCall2
0x1800195FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x1800152E8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1800158A0: "__cdecl _sz_srvcli_dll" __sz_srvcli_dll
0x180015088: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x180015450: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180015380: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180013010: "const CPort::`vftable'" ??_7CPort@@6B@
0x1800171A8: "MaxTunnelDelay" ??_C@_1BO@BHOKADED@?$AAM?$AAa?$AAx?$AAT?$AAu?$AAn?$AAn?$AAe?$AAl?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180019400: srvcli_NULL_THUNK_DATA_DLN
0x1800058F4: "private: int __cdecl CLogFile::SetSize(unsigned long) __ptr64" ?SetSize@CLogFile@@AEAAHK@Z
0x180015170: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180019488: srvcli_NULL_THUNK_DATA_DLB
0x18001F038: srvcli_NULL_THUNK_DATA_DLA
0x180015518: "__cdecl _imp_RtlInitString" __imp_RtlInitString
0x180016AF8: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x1800141F0: "const CLogFile::`vftable'{for `PWorkItem'}" ??_7CLogFile@@6BPWorkItem@@@
0x1800071F8: "public: __cdecl CRpcClientBinding::CRpcClientBinding(void) __ptr64" ??0CRpcClientBinding@@QEAA@XZ
0x180003680: "private: void __cdecl CNewTimer::SetTimer(void) __ptr64" ?SetTimer@CNewTimer@@AEAAXXZ
0x180015400: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x18000AD70: "public: void __cdecl CLogFile::Delete(void) __ptr64" ?Delete@CLogFile@@QEAAXXZ
0x180006DA9: "__cdecl XcptFilter" _XcptFilter
0x180015608: "__cdecl _xc_a" __xc_a
0x180009614: "long __cdecl TrkReportEvent(unsigned long,unsigned short,...)" ?TrkReportEvent@@YAJKGZZ
0x1800104E0: "protected: __cdecl CTrkRpcConfig::CTrkRpcConfig(void) __ptr64" ??0CTrkRpcConfig@@IEAA@XZ
0x180007220: "public: __cdecl CRpcClientBinding::~CRpcClientBinding(void) __ptr64" ??1CRpcClientBinding@@QEAA@XZ
0x180005F60: "public: enum CVolume::CVOL_STATE __cdecl CVolume::GetState(void) __ptr64" ?GetState@CVolume@@QEAA?AW4CVOL_STATE@1@XZ
0x18001132C: "public: void __cdecl CRpcClientBinding::UnInitialize(void) __ptr64" ?UnInitialize@CRpcClientBinding@@QEAAXXZ
0x180019598: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x18001C120: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuxlnUhexwoohUgiphexhUgipdphUlyquivUznwGEUkxsOlyq@trkwks" __@@_PchSym_@00@KxulyqvxgPillgKxuxlnUhexwoohUgiphexhUgipdphUlyquivUznwGEUkxsOlyq@trkwks
0x1800115A4: "unsigned short __cdecl TrkCharUpper(unsigned short)" ?TrkCharUpper@@YAGG@Z
0x180015558: "__cdecl _imp_NtCompleteConnectPort" __imp_NtCompleteConnectPort
0x180003EC0: "public: void __cdecl CMachineId::Normalize(void) __ptr64" ?Normalize@CMachineId@@QEAAXXZ
0x18000595C: "private: unsigned long __cdecl CLogFile::CalcNumEntriesInFile(void) __ptr64" ?CalcNumEntriesInFile@CLogFile@@AEAAKXZ
0x18001C108: g_pActiveThreadList
0x180002BA0: "public: class CVolume * __ptr64 __cdecl CVolumeEnumerator::GetNextVolume(void) __ptr64" ?GetNextVolume@CVolumeEnumerator@@QEAAPEAVCVolume@@XZ
0x1800099CC: "public: __cdecl CVolumeManager::CVolumeManager(void) __ptr64" ??0CVolumeManager@@QEAA@XZ
0x180017008: "MaxMoveNotifyRetry" ??_C@_1CG@FBCLFOBH@?$AAM?$AAa?$AAx?$AAM?$AAo?$AAv?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAR?$AAe?$AAt?$AAr?$AAy?$AA?$AA@
0x180015360: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x180010178: "long __cdecl TrkReportRawEventWrapper(unsigned long,unsigned short,unsigned long,void const * __ptr64,...)" ?TrkReportRawEventWrapper@@YAJKGKPEBXZZ
0x180015570: "__cdecl _imp_NtCreateWaitablePort" __imp_NtCreateWaitablePort
0x180006D91: "__cdecl callnewh" _callnewh
0x18000AE5C: "private: void __cdecl CVolume::DeleteLogAndReInitializeVolume(void) __ptr64" ?DeleteLogAndReInitializeVolume@CVolume@@AEAAXXZ
0x18000D854: "private: long __cdecl CTrkWksSvc::FindAndSearchVolume(void * __ptr64,unsigned long * __ptr64,enum CTrkWksSvc::SEARCH_FLAGS,struct CDomainRelativeObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,unsigned short * __ptr64) __ptr64" ?FindAndSearchVolume@CTrkWksSvc@@AEAAJPEAXPEAKW4SEARCH_FLAGS@1@PEAUCDomainRelativeObjId@@3PEAUCMachineId@@PEAG@Z
0x180015190: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180015458: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180015718: "__cdecl _guard_iat_table" __guard_iat_table
0x180007364: memcpy
0x18000BE4C: "private: int __cdecl CVolumeLocationCache::_FindVolume(struct CVolumeId const & __ptr64) __ptr64" ?_FindVolume@CVolumeLocationCache@@AEAAHAEBUCVolumeId@@@Z
0x1800013F0: Stubold_LnkCallSvrMessage
0x180001690: "public: void __cdecl CSecDescriptor::UnInitialize(void) __ptr64" ?UnInitialize@CSecDescriptor@@QEAAXXZ
0x180006210: "public: void __cdecl CSID::Initialize(enum CSID::enumCSIDAuthority,unsigned char,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long) __ptr64" ?Initialize@CSID@@QEAAXW4enumCSIDAuthority@1@EKKKKKKKK@Z
0x1800154A8: "__cdecl _imp_memset" __imp_memset
0x1800017C0: "void __cdecl TrkRaiseNtStatus(long)" ?TrkRaiseNtStatus@@YAXJ@Z
0x18000B420: "public: void __cdecl _VolumePersistentInfo::Initialize(void) __ptr64" ?Initialize@_VolumePersistentInfo@@QEAAXXZ
0x180015310: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800151D8: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x180006F9C: "__cdecl initterm" _initterm
0x180016B80: "TrkWks" ??_C@_1O@LFMPCIGG@?$AAT?$AAr?$AAk?$AAW?$AAk?$AAs?$AA?$AA@
0x180015588: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x180015890: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x180016FE0: "MinMoveNotifyRetry" ??_C@_1CG@NPDABACO@?$AAM?$AAi?$AAn?$AAM?$AAo?$AAv?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAR?$AAe?$AAt?$AAr?$AAy?$AA?$AA@
0x180019584: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001BAA8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180015218: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x180015320: "__cdecl _imp_Sleep" __imp_Sleep
0x180005D68: "private: void __cdecl CVolume::SaveVolInfo(void) __ptr64" ?SaveVolInfo@CVolume@@AEAAXXZ
0x18000FF3C: "long __cdecl TrkReportInternalError(unsigned long,unsigned long,long,unsigned short const * __ptr64)" ?TrkReportInternalError@@YAJKKJPEBG@Z
0x180015640: "__cdecl _xi_z" __xi_z
0x18000E9C8: "private: long __cdecl CTrkWksSvc::SearchChain(void * __ptr64,int,unsigned long,unsigned long * __ptr64,enum CTrkWksSvc::SEARCH_FLAGS,struct SAllIDs * __ptr64,unsigned short * __ptr64) __ptr64" ?SearchChain@CTrkWksSvc@@AEAAJPEAXHKPEAKW4SEARCH_FLAGS@1@PEAUSAllIDs@@PEAG@Z
0x180015340: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180009AEC: "public: __cdecl CTrkWksSvc::~CTrkWksSvc(void) __ptr64" ??1CTrkWksSvc@@QEAA@XZ
0x18000EF10: "public: __cdecl CShareEnumerator::CShareEnumerator(void) __ptr64" ??0CShareEnumerator@@QEAA@XZ
0x180015158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180008DBC: "private: int __cdecl CLog::DoSearch(int,long,struct CObjId const & __ptr64,unsigned long * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,struct CDomainRelativeObjId * __ptr64) __ptr64" ?DoSearch@CLog@@AEAAHHJAEBUCObjId@@PEAKPEAUCDomainRelativeObjId@@PEAUCMachineId@@2@Z
0x18000BCC8: "public: void __cdecl CVolumeLocationCache::AddVolume(struct CVolumeId const & __ptr64,struct CMachineId const & __ptr64) __ptr64" ?AddVolume@CVolumeLocationCache@@QEAAXAEBUCVolumeId@@AEBUCMachineId@@@Z
0x180006A76: "__cdecl _C_specific_handler" __C_specific_handler
0x180009870: "public: __cdecl CTrkWksSvc::CTrkWksSvc(void) __ptr64" ??0CTrkWksSvc@@QEAA@XZ
0x18000EF70: "public: __cdecl CShareEnumerator::~CShareEnumerator(void) __ptr64" ??1CShareEnumerator@@QEAA@XZ
0x1800155B8: "__cdecl _imp_RtlDeregisterWaitEx" __imp_RtlDeregisterWaitEx
0x18000EF00: MIDL_user_free
0x1800115E8: "private: void __cdecl CShareEnumerator::_AbsoluteSDHelper(void * __ptr64 const,void * __ptr64 * __ptr64,unsigned long * __ptr64,struct _ACL * __ptr64 * __ptr64,unsigned long * __ptr64,struct _ACL * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?_AbsoluteSDHelper@CShareEnumerator@@AEAAXQEAXPEAPEAXPEAKPEAPEAU_ACL@@2321212@Z
0x180016CF0: "RefreshHesitation" ??_C@_1CE@INHNKEHF@?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAH?$AAe?$AAs?$AAi?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800021F0: "public: long __cdecl CSecureFile::OpenExistingSecureFile(unsigned short const * __ptr64,int) __ptr64" ?OpenExistingSecureFile@CSecureFile@@QEAAJPEBGH@Z
0x18000C114: "public: int __cdecl CDomainRelativeObjId::operator==(struct CDomainRelativeObjId const & __ptr64)const __ptr64" ??8CDomainRelativeObjId@@QEBAHAEBU0@@Z
0x18000BC1C: "public: void __cdecl CVolume::UnInitialize(void) __ptr64" ?UnInitialize@CVolume@@QEAAXXZ
0x180015390: "__cdecl _imp_AddAccessAllowedAce" __imp_AddAccessAllowedAce
0x18001F028: netutils_NULL_THUNK_DATA_DLA
0x180019478: netutils_NULL_THUNK_DATA_DLB
0x1800193F0: netutils_NULL_THUNK_DATA_DLN
0x180017428: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x180006D85: malloc
0x1800151E8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800152A8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800151A0: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x180007268: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180010830: "public: void __cdecl CRpcServer::UnInitialize(void) __ptr64" ?UnInitialize@CRpcServer@@QEAAXXZ
0x180016DE0: "MaxLogKB" ??_C@_1BC@EPEFIGL@?$AAM?$AAa?$AAx?$AAL?$AAo?$AAg?$AAK?$AAB?$AA?$AA@
0x180001090: "void __cdecl ThreadPoolCallbackFunction(void * __ptr64,unsigned char)" ?ThreadPoolCallbackFunction@@YAXPEAXE@Z
0x18000F744: "long __cdecl OpenVolume(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?OpenVolume@@YAJPEBGPEAPEAX@Z
0x18000B928: "private: void __cdecl CVolume::MarkSelfForDelete(void) __ptr64" ?MarkSelfForDelete@CVolume@@AEAAXXZ
0x180008B10: "public: void __cdecl CLog::Append(struct CVolumeId const & __ptr64,struct CObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CMachineId const & __ptr64,struct CDomainRelativeObjId const & __ptr64) __ptr64" ?Append@CLog@@QEAAXAEBUCVolumeId@@AEBUCObjId@@AEBUCDomainRelativeObjId@@AEBUCMachineId@@2@Z
0x1800152D8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1800157C0: "struct _GUID const s_guidLogSignature" ?s_guidLogSignature@@3U_GUID@@B
0x180001440: "public: void __cdecl CSystemSD::Initialize(enum CSystemSD::ESystemSD) __ptr64" ?Initialize@CSystemSD@@QEAAXW4ESystemSD@1@@Z
0x180009C38: "void __cdecl CommonDllInit(long * __ptr64)" ?CommonDllInit@@YAXPEAJ@Z
0x180019638: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180015298: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180006DB5: "__cdecl amsg_exit" _amsg_exit
0x180015448: "__cdecl _imp__callnewh" __imp__callnewh
0x18000FAF4: "public: __cdecl CMachineId::CMachineId(enum MCID_CREATE_TYPE) __ptr64" ??0CMachineId@@QEAA@W4MCID_CREATE_TYPE@@@Z
0x1800173E0: "CustomDcName" ??_C@_1BK@HIGLEEIP@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAD?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000C190: "public: virtual void * __ptr64 __cdecl PLogFileNotify::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPLogFileNotify@@UEAAPEAXI@Z
0x18000D3B8: "private: long __cdecl CTrkWksSvc::ConnectAndSearchMachine(void * __ptr64,struct CMachineId const & __ptr64,unsigned long * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,unsigned short * __ptr64) __ptr64" ?ConnectAndSearchMachine@CTrkWksSvc@@AEAAJPEAXAEBUCMachineId@@PEAKPEAUCDomainRelativeObjId@@3PEAU2@PEAG@Z
0x180017440: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180015528: "__cdecl _imp_RtlSetThreadErrorMode" __imp_RtlSetThreadErrorMode
0x180017088: "ObjIdIndexReopenRetryMax" ??_C@_1DC@PKOPFPLB@?$AAO?$AAb?$AAj?$AAI?$AAd?$AAI?$AAn?$AAd?$AAe?$AAx?$AAR?$AAe?$AAo?$AAp?$AAe?$AAn?$AAR?$AAe?$AAt?$AAr?$AAy?$AAM?$AAa?$AAx?$AA?$AA@
0x1800153C0: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x18000E070: "public: static void __cdecl CVerifyAuthentication::Initialize(void)" ?Initialize@CVerifyAuthentication@@SAXXZ
0x18000D358: "public: __cdecl CLogMoveMessage::CLogMoveMessage(struct MOVE_MESSAGE const & __ptr64) __ptr64" ??0CLogMoveMessage@@QEAA@AEBUMOVE_MESSAGE@@@Z
0x180002A80: "private: void __cdecl CVolumeManager::VolumeDeviceEvent(void * __ptr64,enum CVolumeManager::EVolumeDeviceEvent) __ptr64" ?VolumeDeviceEvent@CVolumeManager@@AEAAXPEAXW4EVolumeDeviceEvent@1@@Z
0x18000F18C: "long __cdecl MakeObjIdReborn(void * __ptr64)" ?MakeObjIdReborn@@YAJPEAX@Z
0x180011FE0: "private: int __cdecl CShareEnumerator::_IsValidShare(void) __ptr64" ?_IsValidShare@CShareEnumerator@@AEAAHXZ
0x18000B494: "int __cdecl IsErrorDueToLockedVolume(long)" ?IsErrorDueToLockedVolume@@YAHJ@Z
0x180017060: "ObjIdIndexReopen" ??_C@_1CC@KNCKNHHN@?$AAO?$AAb?$AAj?$AAI?$AAd?$AAI?$AAn?$AAd?$AAe?$AAx?$AAR?$AAe?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x180015418: "__cdecl _imp_I_ScRegisterDeviceNotification" __imp_I_ScRegisterDeviceNotification
0x180017130: "IgnoreMovesAndDeletes" ??_C@_1CM@NGJNEJPB@?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AAM?$AAo?$AAv?$AAe?$AAs?$AAA?$AAn?$AAd?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAs?$AA?$AA@
0x180017320: "12345678" ??_C@_1BC@FDOLJKDC@?$AA1?$AA2?$AA3?$AA4?$AA5?$AA6?$AA7?$AA8?$AA?$AA@
0x1800152D0: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180004B94: "private: void __cdecl CNewTimer::SaveToRegistry(void) __ptr64" ?SaveToRegistry@CNewTimer@@AEAAXXZ
0x180004080: "public: void __cdecl CLogFile::ReadExtendedHeader(unsigned long,void * __ptr64,unsigned long) __ptr64" ?ReadExtendedHeader@CLogFile@@QEAAXKPEAXK@Z
0x180017340: "Configuration" ??_C@_1BM@ICBIINEM@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000FD34: "private: long __cdecl CActiveThreadList::Grow(void) __ptr64" ?Grow@CActiveThreadList@@AEAAJXZ
0x18000E7AC: "public: long __cdecl CTrkWksSvc::OnPortNotification(struct TRKWKS_REQUEST const * __ptr64) __ptr64" ?OnPortNotification@CTrkWksSvc@@QEAAJPEBUTRKWKS_REQUEST@@@Z
0x180015180: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180015408: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180015308: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180015460: "__cdecl _imp__local_unwind" __imp__local_unwind
0x1800152C8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180015160: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180010420: "protected: void __cdecl CTrkConfiguration::Read(unsigned short const * __ptr64,class CMultiTsz * __ptr64,unsigned short const * __ptr64)const __ptr64" ?Read@CTrkConfiguration@@IEBAXPEBGPEAVCMultiTsz@@0@Z
0x1800113F0: "public: virtual unsigned long __cdecl CShareEnumerator::GetMerit(void) __ptr64" ?GetMerit@CShareEnumerator@@UEAAKXZ
0x180015548: "__cdecl _imp_NtReplyPort" __imp_NtReplyPort
0x18000931C: "public: unsigned long __cdecl PLogFileNotify::Release(void) __ptr64" ?Release@PLogFileNotify@@QEAAKXZ
0x1800158B0: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x1800154D0: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x180015270: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800104AC: "public: void __cdecl CTrkConfiguration::UnInitialize(void) __ptr64" ?UnInitialize@CTrkConfiguration@@QEAAXXZ
0x18000A454: "public: void __cdecl CPort::UnInitialize(void) __ptr64" ?UnInitialize@CPort@@QEAAXXZ
0x180017430: "admin$" ??_C@_1O@OCNBNNAD@?$AAa?$AAd?$AAm?$AAi?$AAn?$AA$?$AA?$AA@
0x1800151C8: "__cdecl _imp_ReadDirectoryChangesW" __imp_ReadDirectoryChangesW
0x180016BD0: "unsigned short const * const s_tszTrkWksRemoteRpcProtocol" ?s_tszTrkWksRemoteRpcProtocol@@3QBGB
0x1800171F8: "WksMaxRpcCalls" ??_C@_1BO@DIFNIMMA@?$AAW?$AAk?$AAs?$AAM?$AAa?$AAx?$AAR?$AAp?$AAc?$AAC?$AAa?$AAl?$AAl?$AAs?$AA?$AA@
0x1800041B0: "public: void __cdecl CVolume::Flush(int) __ptr64" ?Flush@CVolume@@QEAAXH@Z
0x18001BA98: "__cdecl _native_startup_lock" __native_startup_lock
0x180006F90: DllMain
0x1800039B0: "private: void __cdecl CVolume::VolumeSanityCheck(int) __ptr64" ?VolumeSanityCheck@CVolume@@AEAAXH@Z
0x1800150C8: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x1800072CC: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180002890: "private: void __cdecl CVolumeManager::CleanUpOids(void) __ptr64" ?CleanUpOids@CVolumeManager@@AEAAXXZ
0x18001BAB8: "unsigned long g_cThreadPoolMaxThreads" ?g_cThreadPoolMaxThreads@@3KA
0x18001969C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x1800154A0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180015498: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800154F8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180001608: "public: __cdecl CSecDescriptor::~CSecDescriptor(void) __ptr64" ??1CSecDescriptor@@QEAA@XZ
0x1800033E0: "private: int __cdecl CLogFile::Validate(void) __ptr64" ?Validate@CLogFile@@AEAAHXZ
0x1800154B8: "__cdecl _imp_NtCreateTimer" __imp_NtCreateTimer
0x1800013F0: StubLnkRestartDcSynchronization
0x180015040: KERNEL32_NULL_THUNK_DATA
0x1800193E0: ADVAPI32_NULL_THUNK_DATA_DLN
0x180019498: ADVAPI32_NULL_THUNK_DATA_DLB
0x1800071D4: "public: __cdecl CSecDescriptor::CSecDescriptor(void) __ptr64" ??0CSecDescriptor@@QEAA@XZ
0x18001F018: ADVAPI32_NULL_THUNK_DATA_DLA
0x180015148: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006510: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180010550: "public: void __cdecl CRpcServer::Initialize(void * __ptr64,unsigned long,unsigned int,int,unsigned short const * __ptr64) __ptr64" ?Initialize@CRpcServer@@QEAAXPEAXKIHPEBG@Z
0x180009EB0: "void __cdecl ServiceStopCallback(void * __ptr64,unsigned char)" ?ServiceStopCallback@@YAXPEAXE@Z
0x18001B380: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800141C0: "const CVolumeManager::`vftable'{for `PWorkItem'}" ??_7CVolumeManager@@6BPWorkItem@@@
0x180007244: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800158C8: "\\.\%c:" ??_C@_1BA@IDIJJCJF@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAc?$AA?3?$AA?$AA@
0x180015500: "__cdecl _imp_RtlUnicodeStringToOemString" __imp_RtlUnicodeStringToOemString
0x180006FF0: Ndr64AsyncServerCallAll
0x1800173A0: "TestFlags" ??_C@_1BE@JBKHAEB@?$AAT?$AAe?$AAs?$AAt?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180017030: "MaxMoveNotifyLifetime" ??_C@_1CM@GOIFGFEP@?$AAM?$AAa?$AAx?$AAM?$AAo?$AAv?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AA?$AA@
0x180009F50: "void __cdecl SvchostPushServiceGlobals(struct _SVCHOST_GLOBAL_DATA * __ptr64)" ?SvchostPushServiceGlobals@@YAXPEAU_SVCHOST_GLOBAL_DATA@@@Z
0x18000A650: StubLnkMendLink
0x1800155A8: "__cdecl _imp_RtlCreateSystemVolumeInformationFolder" __imp_RtlCreateSystemVolumeInformationFolder
0x180016F50: "VolNotOwnedExpireLimit" ??_C@_1CO@BJHLDBMC@?$AAV?$AAo?$AAl?$AAN?$AAo?$AAt?$AAO?$AAw?$AAn?$AAe?$AAd?$AAE?$AAx?$AAp?$AAi?$AAr?$AAe?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x18000C190: "public: virtual void * __ptr64 __cdecl PLogFileNotify::`vector deleting destructor'(unsigned int) __ptr64" ??_EPLogFileNotify@@UEAAPEAXI@Z
0x180007122: "__cdecl _imp_load_RegisterEventSourceW" __imp_load_RegisterEventSourceW
0x1800155E8: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x1800196EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180015278: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18001C138: "long g_ctrkwks" ?g_ctrkwks@@3JA
0x18000BC84: "private: void __cdecl CVolume::UnregisterPnPVolumeNotification(void) __ptr64" ?UnregisterPnPVolumeNotification@CVolume@@AEAAXXZ
0x1800152A0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180017440: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180006E80: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000FEB8: "private: void __cdecl CSecDescriptor::_ReloadAcl(enum CSecDescriptor::enumAclType) __ptr64" ?_ReloadAcl@CSecDescriptor@@AEAAXW4enumAclType@1@@Z
0x180009D4C: "public: unsigned long __cdecl CTrkWksSvc::Release(void) __ptr64" ?Release@CTrkWksSvc@@QEAAKXZ
0x180004CD0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180001230: "public: virtual void __cdecl CObjIdIndexChangeNotifier::DoWork(void) __ptr64" ?DoWork@CObjIdIndexChangeNotifier@@UEAAXXZ
0x180015530: "__cdecl _imp_NtClearEvent" __imp_NtClearEvent
0x180015598: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180015168: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x18000A1A4: "public: void __cdecl CPort::Initialize(class CTrkWksSvc * __ptr64,unsigned long) __ptr64" ?Initialize@CPort@@QEAAXPEAVCTrkWksSvc@@K@Z
0x180006FD0: NdrAsyncServerCall
0x1800062E0: "public: __cdecl CSecDescriptor::operator void * __ptr64(void) __ptr64" ??BCSecDescriptor@@QEAAQEAXXZ
0x1800157D0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000A580: "struct SThreadFromPoolState __cdecl InitializeThreadFromPool(void)" ?InitializeThreadFromPool@@YA?AUSThreadFromPoolState@@XZ
0x180004DA0: "public: void __cdecl CLogFileHeader::SetShutdown(int) __ptr64" ?SetShutdown@CLogFileHeader@@QEAAXH@Z
0x180016BF8: "unsigned short const * const s_tszTrkWksLocalRpcProtocol" ?s_tszTrkWksLocalRpcProtocol@@3QBGB
0x1800155B0: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x1800193A4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180015420: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA
0x180015108: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180016E10: "LogOverwriteAge" ??_C@_1CA@MGAFJFAE@?$AAL?$AAo?$AAg?$AAO?$AAv?$AAe?$AAr?$AAw?$AAr?$AAi?$AAt?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x1800067E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180006FE0: NdrServerCallAll
0x180015428: "__cdecl _imp__initterm" __imp__initterm
0x1800150F8: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x180015188: "__cdecl _imp_FindFirstVolumeW" __imp_FindFirstVolumeW
0x180015070: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x180015150: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180011468: "public: void __cdecl CShareEnumerator::Initialize(void * __ptr64,unsigned short const * __ptr64) __ptr64" ?Initialize@CShareEnumerator@@QEAAXPEAXPEBG@Z
0x180005B94: "public: void __cdecl CVolume::SetState(enum CVolume::CVOL_STATE) __ptr64" ?SetState@CVolume@@QEAAXW4CVOL_STATE@1@@Z
0x1800196D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180001664: "public: void __cdecl CSID::UnInitialize(void) __ptr64" ?UnInitialize@CSID@@QEAAXXZ
0x18001BA70: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x18000A8F0: StubLnkSearchMachine
0x18000AAA8: "public: void __cdecl CVolume::Append(struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CMachineId const & __ptr64,struct CDomainRelativeObjId const & __ptr64) __ptr64" ?Append@CVolume@@QEAAXAEBUCDomainRelativeObjId@@0AEBUCMachineId@@0@Z
0x180016F30: "VolInitLifetime" ??_C@_1CA@EMAGLMNH@?$AAV?$AAo?$AAl?$AAI?$AAn?$AAi?$AAt?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AA?$AA@
0x18000B980: "public: virtual void __cdecl CVolume::OnHandlesMustClose(void) __ptr64" ?OnHandlesMustClose@CVolume@@UEAAXXZ
0x180014208: "const CShareEnumerator::`vftable'" ??_7CShareEnumerator@@6B@
0x18000DE88: "public: void __cdecl CTrkWksSvc::Initialize(struct _SVCHOST_GLOBAL_DATA * __ptr64) __ptr64" ?Initialize@CTrkWksSvc@@QEAAXPEAU_SVCHOST_GLOBAL_DATA@@@Z
0x180019624: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000C558: "public: void __cdecl CVolumeManager::FlushAllVolumes(int) __ptr64" ?FlushAllVolumes@CVolumeManager@@QEAAXH@Z
0x1800151D0: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x1800141A8: "const IServiceHandler::`vftable'" ??_7IServiceHandler@@6B@
0x180010930: "public: virtual void __cdecl CNewTimer::DoWork(void) __ptr64" ?DoWork@CNewTimer@@UEAAXXZ
0x18000BCB4: "unsigned short __cdecl VolChar(long)" ?VolChar@@YAGJ@Z
0x180015860: GUID_IO_VOLUME_LOCK_FAILED
0x1800055C0: "public: struct tagLogEntry * __ptr64 __cdecl CLogFileSector::GetLogEntry(unsigned long) __ptr64" ?GetLogEntry@CLogFileSector@@QEAAPEAUtagLogEntry@@K@Z
0x1800153C8: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x18001BCE0: "protected: static class CMultiTsz CTrkRpcConfig::_mtszCustomDcName" ?_mtszCustomDcName@CTrkRpcConfig@@1VCMultiTsz@@A
0x18001BA88: "__cdecl _onexitend" __onexitend
0x180015520: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x180015258: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1800153A8: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000E970: "public: static int __cdecl CTrkRpcConfig::RpcSecurityEnabled(void)" ?RpcSecurityEnabled@CTrkRpcConfig@@SAHXZ
0x18000DC3C: "public: void __cdecl CTrkWksRpcServer::Initialize(struct _SVCHOST_GLOBAL_DATA * __ptr64,class CTrkWksConfiguration * __ptr64) __ptr64" ?Initialize@CTrkWksRpcServer@@QEAAXPEAU_SVCHOST_GLOBAL_DATA@@PEAVCTrkWksConfiguration@@@Z
0x1800155F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180015068: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x18000712E: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x180016D18: "RefreshRetryMin" ??_C@_1CA@NNKDKCMK@?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAR?$AAe?$AAt?$AAr?$AAy?$AAM?$AAi?$AAn?$AA?$AA@
0x1800049FC: "void __cdecl TrkRaiseLastError(void)" ?TrkRaiseLastError@@YAXXZ
0x180015240: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180007018: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x1800035A0: "public: void __cdecl CLogFileSector::Initialize(unsigned long,unsigned long) __ptr64" ?Initialize@CLogFileSector@@QEAAXKK@Z
0x1800095B8: "void * __ptr64 __cdecl TrkRegisterWaitForSingleObjectEx(void * __ptr64,void (__cdecl*)(void * __ptr64,unsigned char),void * __ptr64,unsigned long,unsigned long)" ?TrkRegisterWaitForSingleObjectEx@@YAPEAXPEAXP6AX0E@Z0KK@Z
0x180016C70: "\Security\TRKWKS_EVENT" ??_C@_1CO@KLCFCLGO@?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAT?$AAR?$AAK?$AAW?$AAK?$AAS?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA?$AA@
0x18001F008: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x180015370: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180009EA0: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64)" ?ServiceMain@@YAXKPEAPEAG@Z
0x1800155C0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180009040: "public: void __cdecl CLogFile::SetShutdown(int) __ptr64" ?SetShutdown@CLogFile@@QEAAXH@Z
0x180010E58: "public: void __cdecl CNewTimer::UnInitialize(void) __ptr64" ?UnInitialize@CNewTimer@@QEAAXXZ
0x180010FD8: "public: int __cdecl CObjIdEnumerator::Initialize(unsigned short const * __ptr64) __ptr64" ?Initialize@CObjIdEnumerator@@QEAAHPEBG@Z
0x180006410: "public: virtual unsigned long __cdecl CTrkWksSvc::ServiceHandler(unsigned long,unsigned long,void * __ptr64,void * __ptr64) __ptr64" ?ServiceHandler@CTrkWksSvc@@UEAAKKKPEAX0@Z
0x180016C08: "unsigned short const * const s_tszSystemVolumeInformation" ?s_tszSystemVolumeInformation@@3QBGB
0x180009724: "public: void __cdecl CLogFile::UnregisterOplockFromThreadPool(void) __ptr64" ?UnregisterOplockFromThreadPool@CLogFile@@QEAAXXZ
0x180015348: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180015630: "__cdecl _xi_a" __xi_a
0x180015060: "__cdecl _imp_I_RpcBindingInqTransportType" __imp_I_RpcBindingInqTransportType
0x18000A050: "private: virtual void __cdecl CPort::DoWork(void) __ptr64" ?DoWork@CPort@@EEAAXXZ
0x180015338: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180015128: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180009F60: "public: void __cdecl CObjIdIndexChangeNotifier::Initialize(unsigned short const * __ptr64,class CVolume * __ptr64) __ptr64" ?Initialize@CObjIdIndexChangeNotifier@@QEAAXPEBGPEAVCVolume@@@Z
0x18000C374: "public: void __cdecl CVolume::ClearMarkForMakeAllOidsReborn(void) __ptr64" ?ClearMarkForMakeAllOidsReborn@CVolume@@QEAAXXZ
0x18001019C: "public: void __cdecl CTrkConfiguration::Initialize(void) __ptr64" ?Initialize@CTrkConfiguration@@QEAAXXZ
0x1800013F0: StubLnkCallSvrMessage
0x1800153F0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18001BA80: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x18000F48C: "long __cdecl OpenFileById(unsigned short const * __ptr64,struct CObjId const & __ptr64,unsigned long,unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?OpenFileById@@YAJPEBGAEBUCObjId@@KKKPEAPEAX@Z
0x180009FDC: "public: void __cdecl CObjIdIndexChangeNotifier::UnInitialize(void) __ptr64" ?UnInitialize@CObjIdIndexChangeNotifier@@QEAAXXZ
0x180016BB0: "unsigned short const * const s_tszTrkWksRemoteRpcEndPoint" ?s_tszTrkWksRemoteRpcEndPoint@@3QBGB
0x18001F020: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x18000B4C8: "int __cdecl IsRecoverableDiskError(long)" ?IsRecoverableDiskError@@YAHJ@Z
0x1800071BF: "__cdecl _imp_load_DeregisterEventSource" __imp_load_DeregisterEventSource
0x18000B9B8: "public: int __cdecl CVolume::Search(struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,struct CDomainRelativeObjId * __ptr64) __ptr64" ?Search@CVolume@@QEAAHAEBUCDomainRelativeObjId@@PEAU2@PEAUCMachineId@@1@Z
0x180003140: "public: int __cdecl CObjIdIndexChangeNotifier::AsyncListen(void) __ptr64" ?AsyncListen@CObjIdIndexChangeNotifier@@QEAAHXZ
0x1800141A8: "const PShareMerit::`vftable'" ??_7PShareMerit@@6B@
0x1800154C0: "__cdecl _imp_NtSetVolumeInformationFile" __imp_NtSetVolumeInformationFile
0x180017240: "MaxDeleteNotifyQueue" ??_C@_1CK@LMHKOPDM@?$AAM?$AAa?$AAx?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAQ?$AAu?$AAe?$AAu?$AAe?$AA?$AA@
0x18000F1DC: "long __cdecl MapLocalPathToUNC(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?MapLocalPathToUNC@@YAJPEAXPEBGPEAGK@Z
0x1800158C0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001964C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800155D8: "__cdecl _imp_NtQueryVolumeInformationFile" __imp_NtQueryVolumeInformationFile
0x180006C88: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18001BAB0: "__cdecl pRawDllMain" _pRawDllMain
0x180004A3C: "void __cdecl TrkRaiseException(long)" ?TrkRaiseException@@YAXJ@Z
0x180015198: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x180002C40: "public: int __cdecl CVolume::ReopenVolumeHandles(void) __ptr64" ?ReopenVolumeHandles@CVolume@@QEAAHXZ
0x180005240: "private: struct _LogInfo __cdecl CLog::QueryLogInfo(void) __ptr64" ?QueryLogInfo@CLog@@AEAA?AU_LogInfo@@XZ
0x1800153E8: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x180004100: "private: void __cdecl CVolume::RegisterPnPVolumeNotification(void) __ptr64" ?RegisterPnPVolumeNotification@CVolume@@AEAAXXZ
0x180010B4C: "public: void __cdecl CNewTimer::Initialize(class PTimerCallback * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,enum CNewTimer::TimerRetryType,unsigned long,unsigned long,unsigned long) __ptr64" ?Initialize@CNewTimer@@QEAAXPEAVPTimerCallback@@PEBGKKW4TimerRetryType@1@KKK@Z
0x18001F030: "__cdecl _imp_NetShareEnum" __imp_NetShareEnum
0x180006550: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180006330: "private: static unsigned long __cdecl CSvcCtrlInterface::ServiceHandler(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?ServiceHandler@CSvcCtrlInterface@@CAKKKPEAX0@Z
0x1800155C8: "__cdecl _imp_RtlRegisterWait" __imp_RtlRegisterWait
0x18000A860: StubLnkOnRestore
0x180004D50: "public: void __cdecl CLogFile::Flush(void) __ptr64" ?Flush@CLogFile@@QEAAXXZ
0x1800152E0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180019344: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180006A90: "__cdecl _security_check_cookie" __security_check_cookie
0x180015628: "__cdecl _xc_z" __xc_z
0x1800090C4: "public: __cdecl CStringize::CStringize(unsigned short) __ptr64" ??0CStringize@@QEAA@G@Z
0x180019688: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180015280: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000FE68: "public: void __cdecl CSecDescriptor::AddAce(enum CSecDescriptor::enumAclType,enum CSecDescriptor::enumAccessType,unsigned long,void * __ptr64 const) __ptr64" ?AddAce@CSecDescriptor@@QEAAXW4enumAclType@1@W4enumAccessType@1@KQEAX@Z
0x180015378: "__cdecl _imp_AreAllAccessesGranted" __imp_AreAllAccessesGranted
0x180009CC4: "void __cdecl CommonDllUnInit(long * __ptr64)" ?CommonDllUnInit@@YAXPEAJ@Z
0x18000A5BC: "void __cdecl UnInitializeThreadFromPool(struct SThreadFromPoolState)" ?UnInitializeThreadFromPool@@YAXUSThreadFromPoolState@@@Z
0x180016CE0: "Refresh" ??_C@_1BA@IKDPCKPI@?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AA?$AA@
0x180016D58: "PortThreadKeepAliveTime" ??_C@_1DA@PKBODPKH@?$AAP?$AAo?$AAr?$AAt?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAK?$AAe?$AAe?$AAp?$AAA?$AAl?$AAi?$AAv?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180009498: "public: void __cdecl CLogFile::SetOplock(void) __ptr64" ?SetOplock@CLogFile@@QEAAXXZ
0x18000F08C: "long __cdecl GetBirthId(void * __ptr64,struct CDomainRelativeObjId * __ptr64)" ?GetBirthId@@YAJPEAXPEAUCDomainRelativeObjId@@@Z
0x18000700C: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x1800092DC: "void __cdecl InterlockedCloseHandle(void * __ptr64 * __ptr64,void * __ptr64,int)" ?InterlockedCloseHandle@@YAXPEAPEAXPEAXH@Z
0x18000BB50: "public: void __cdecl CVolume::SetLocallyGeneratedVolId(void) __ptr64" ?SetLocallyGeneratedVolId@CVolume@@QEAAXXZ
0x180004BE0: "protected: virtual void __cdecl CLogFile::CreateAlwaysFile(unsigned short const * __ptr64) __ptr64" ?CreateAlwaysFile@CLogFile@@MEAAXPEBG@Z
0x180016D38: "RefreshRetryMax" ??_C@_1CA@EEICCIOE@?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAR?$AAe?$AAt?$AAr?$AAy?$AAM?$AAa?$AAx?$AA?$AA@
0x180015770: "\$Extend\$ObjId:$O:$INDEX_ALLOCA" ??_C@_1EK@HNGBPAKP@?$AA?2?$AA$?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AA?2?$AA$?$AAO?$AAb?$AAj?$AAI?$AAd?$AA?3?$AA$?$AAO?$AA?3?$AA$?$AAI?$AAN?$AAD?$AAE?$AAX?$AA_?$AAA?$AAL?$AAL?$AAO?$AAC?$AAA@
0x180015220: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x18001C128: "struct _SVCHOST_GLOBAL_DATA * __ptr64 __ptr64 g_svcHostGlobalData" ?g_svcHostGlobalData@@3PEAU_SVCHOST_GLOBAL_DATA@@EA
0x1800170C0: "ObjIdIndexReopenRetryMin" ??_C@_1DC@GDMONFJP@?$AAO?$AAb?$AAj?$AAI?$AAd?$AAI?$AAn?$AAd?$AAe?$AAx?$AAR?$AAe?$AAo?$AAp?$AAe?$AAn?$AAR?$AAe?$AAt?$AAr?$AAy?$AAM?$AAi?$AAn?$AA?$AA@
0x180015330: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180015800: "\\.\MountPointManager" ??_C@_1CM@HDGAIJEN@?$AA?2?$AA?2?$AA?4?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x180006080: "private: void __cdecl CVolume::PrepareToReopenVolumeHandles(void * __ptr64,enum CVolume::EHandleChangeReason) __ptr64" ?PrepareToReopenVolumeHandles@CVolume@@AEAAXPEAXW4EHandleChangeReason@1@@Z
0x180001704: "private: void __cdecl CLogFile::CloseLog(void) __ptr64" ?CloseLog@CLogFile@@AEAAXXZ
0x1800151F0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18001F010: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x180019364: "__cdecl _DELAY_IMPORT_DESCRIPTOR_srvcli_dll" __DELAY_IMPORT_DESCRIPTOR_srvcli_dll
0x18001C14C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuxlnUhexwoohUgiphexhUxlnnlmUlyquivUznwGEUkxsOlyq@common" __@@_PchSym_@00@KxulyqvxgPillgKxuxlnUhexwoohUgiphexhUxlnnlmUlyquivUznwGEUkxsOlyq@common
0x180015118: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180010C1C: "private: void __cdecl CNewTimer::LoadFromRegistry(void) __ptr64" ?LoadFromRegistry@CNewTimer@@AEAAXXZ
0x180002040: "protected: void __cdecl PRobustlyCreateableFile::RobustlyCreateFile(unsigned short const * __ptr64,unsigned short) __ptr64" ?RobustlyCreateFile@PRobustlyCreateableFile@@IEAAXPEBGG@Z
0x18000E10C: "private: void __cdecl CTrkWksSvc::InitializeAsync(void) __ptr64" ?InitializeAsync@CTrkWksSvc@@AEAAXXZ
0x180016C40: "\Security\TRKWKS_PORT" ??_C@_1CM@JPFBADDC@?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAT?$AAR?$AAK?$AAW?$AAK?$AAS?$AA_?$AAP?$AAO?$AAR?$AAT?$AA?$AA@
0x1800153F8: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180001634: "public: void __cdecl CSystemSD::UnInitialize(void) __ptr64" ?UnInitialize@CSystemSD@@QEAAXXZ
0x180009AC0: "public: __cdecl VolumeLocation::VolumeLocation(void) __ptr64" ??0VolumeLocation@@QEAA@XZ
0x18000D228: "public: void __cdecl CVolumeManager::UnInitialize(void) __ptr64" ?UnInitialize@CVolumeManager@@QEAAXXZ
0x180006038: "private: unsigned long __cdecl CVolume::Unlock(void) __ptr64" ?Unlock@CVolume@@AEAAKXZ
0x180001504: "public: void __cdecl CACL::Initialize(void) __ptr64" ?Initialize@CACL@@QEAAXXZ
0x18000C1BC: "private: void __cdecl CVolumeManager::AddNodeToLinkedList(class CVolumeNode * __ptr64) __ptr64" ?AddNodeToLinkedList@CVolumeManager@@AEAAXPEAVCVolumeNode@@@Z
0x180015080: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x18000FC28: "public: long __cdecl CActiveThreadList::AddCurrent(void) __ptr64" ?AddCurrent@CActiveThreadList@@QEAAJXZ
0x180016E50: "VolFrequentTasksPeriod" ??_C@_1CO@OCDJGACJ@?$AAV?$AAo?$AAl?$AAF?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAT?$AAa?$AAs?$AAk?$AAs?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x18000FCAC: "public: void __cdecl CActiveThreadList::CancelAllRpc(void) __ptr64" ?CancelAllRpc@CActiveThreadList@@QEAAXXZ
0x1800141B0: "const CTrkWksSvc::`vftable'{for `PWorkItem'}" ??_7CTrkWksSvc@@6BPWorkItem@@@
0x180015350: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x18001135C: "public: int __cdecl CShareEnumerator::CoversDrivePath(unsigned short const * __ptr64) __ptr64" ?CoversDrivePath@CShareEnumerator@@QEAAHPEBG@Z
0x180016DA8: "PortNotifyError" ??_C@_1CA@JEINLAMA@?$AAP?$AAo?$AAr?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x18000FDB4: "public: long __cdecl CActiveThreadList::RemoveCurrent(void) __ptr64" ?RemoveCurrent@CActiveThreadList@@QEAAJXZ
0x18000C260: "public: void __cdecl CVolumeManager::Append(struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CMachineId const & __ptr64,struct CDomainRelativeObjId const & __ptr64) __ptr64" ?Append@CVolumeManager@@QEAAXAEBUCDomainRelativeObjId@@0AEBUCMachineId@@0@Z
0x180015290: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000B508: "private: void __cdecl CVolume::LoadVolInfo(void) __ptr64" ?LoadVolInfo@CVolume@@AEAAXXZ
0x180015648: "__cdecl _guard_fids_table" __guard_fids_table
0x180015468: "__cdecl _imp_mbstowcs_s" __imp_mbstowcs_s
0x180009648: "int __cdecl TrkUnregisterWait(void * __ptr64,void * __ptr64)" ?TrkUnregisterWait@@YAHPEAX0@Z
0x1800154B0: msvcrt_NULL_THUNK_DATA
0x180013060: "__cdecl load_config_used" _load_config_used
0x180016B00: ".bak" ??_C@_19PAKAKPNB@?$AA?4?$AAb?$AAa?$AAk?$AA?$AA@
0x180015030: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180016DF8: "LogDeltaKB" ??_C@_1BG@EFAMAPLO@?$AAL?$AAo?$AAg?$AAD?$AAe?$AAl?$AAt?$AAa?$AAK?$AAB?$AA?$AA@
0x180003630: "public: void __cdecl CNewTimer::SetRecurring(void) __ptr64" ?SetRecurring@CNewTimer@@QEAAXXZ
0x180017160: "BreakOnErrors" ??_C@_1BM@BGHNOCG@?$AAB?$AAr?$AAe?$AAa?$AAk?$AAO?$AAn?$AAE?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?$AA@
0x180017218: "VolCacheTimeToLive" ??_C@_1CG@LOMJBNO@?$AAV?$AAo?$AAl?$AAC?$AAa?$AAc?$AAh?$AAe?$AAT?$AAi?$AAm?$AAe?$AAT?$AAo?$AAL?$AAi?$AAv?$AAe?$AA?$AA@
0x18000F124: "int __cdecl IsLocalObjectVolume(unsigned short const * __ptr64)" ?IsLocalObjectVolume@@YAHPEBG@Z
0x180015130: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180015120: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800141C8: "const CVolumeManager::`vftable'{for `PTimerCallback'}" ??_7CVolumeManager@@6BPTimerCallback@@@
0x18000AEB8: "public: void __cdecl CVolume::FileActionIdNotTunnelled(struct _FILE_OBJECTID_INFORMATION * __ptr64) __ptr64" ?FileActionIdNotTunnelled@CVolume@@QEAAXPEAU_FILE_OBJECTID_INFORMATION@@@Z
0x1800195D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180015410: "__cdecl _imp_I_ScUnregisterDeviceNotification" __imp_I_ScUnregisterDeviceNotification
0x180008FEC: "private: void __cdecl CLogFileHeader::RaiseIfNotOpen(void)const __ptr64" ?RaiseIfNotOpen@CLogFileHeader@@AEBAXXZ
0x18000E1C0: "public: long __cdecl CTrkWksSvc::MendLink(void * __ptr64,unsigned long,unsigned long,struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CMachineId const & __ptr64,struct CDomainRelativeObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,unsigned short * __ptr64) __ptr64" ?MendLink@CTrkWksSvc@@QEAAJPEAXKKAEBUCDomainRelativeObjId@@1AEBUCMachineId@@PEAU2@3PEAU3@PEAG@Z
0x180015078: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x1800150D8: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x1800034D0: "private: void __cdecl CObjIdIndexChangeNotifier::StartListening(void) __ptr64" ?StartListening@CObjIdIndexChangeNotifier@@AEAAXXZ
0x1800017E0: "long __cdecl SetVolId(unsigned short const * __ptr64,struct CVolumeId const & __ptr64)" ?SetVolId@@YAJPEBGAEBUCVolumeId@@@Z
0x18000CA4C: "public: void __cdecl CVolumeManager::RemoveVolumeFromLinkedList(class CVolume const * __ptr64) __ptr64" ?RemoveVolumeFromLinkedList@CVolumeManager@@QEAAXPEBVCVolume@@@Z
0x180015430: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180001950: "public: long __cdecl CSecureFile::CreateAlwaysSecureFile(unsigned short const * __ptr64) __ptr64" ?CreateAlwaysSecureFile@CSecureFile@@QEAAJPEBG@Z
0x1800155E0: "__cdecl _imp_NtClose" __imp_NtClose
0x18000C46C: "public: class CVolumeEnumerator __cdecl CVolumeManager::Enum(enum CVolumeManager::EEnumType) __ptr64" ?Enum@CVolumeManager@@QEAA?AVCVolumeEnumerator@@W4EEnumType@1@@Z
0x18000B8C0: "public: void __cdecl CVolume::MarkForMakeAllOidsReborn(void) __ptr64" ?MarkForMakeAllOidsReborn@CVolume@@QEAAXXZ
0x180009538: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180005B6C: "private: void __cdecl CLogFileSector::RaiseIfNotOpen(void)const __ptr64" ?RaiseIfNotOpen@CLogFileSector@@AEBAXXZ
0x180004A54: "void __cdecl EnableRestorePrivilege(void)" ?EnableRestorePrivilege@@YAXXZ
0x1800154F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800013F0: StubGetVolumeTrackingInformation
0x180015288: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180015880: GUID_IO_VOLUME_MOUNT
0x1800141F8: "const CLogFile::`vftable'{for `PRobustlyCreateableFile'}" ??_7CLogFile@@6BPRobustlyCreateableFile@@@
0x1800108A8: "public: void __cdecl CNewTimer::Cancel(void) __ptr64" ?Cancel@CNewTimer@@QEAAXXZ
0x180007097: "__cdecl _imp_load_NetShareEnum" __imp_load_NetShareEnum
0x1800173B8: "OperationLogName" ??_C@_1CC@FPHMBLK@?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAL?$AAo?$AAg?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180008F40: "public: void __cdecl CLog::Flush(void) __ptr64" ?Flush@CLog@@QEAAXXZ
0x1800111C0: "public: void __cdecl CSvcCtrlInterface::SetServiceStatus(unsigned long,unsigned long,unsigned long) __ptr64" ?SetServiceStatus@CSvcCtrlInterface@@QEAAXKKK@Z
0x180006D9D: free
0x18001F000: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x180015368: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x1800155D0: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x180015568: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x180017180: "DeleteNotifyTimeout" ??_C@_1CI@HCAMCAPE@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x180015058: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x18001C118: "class CTrkWksSvc * __ptr64 __ptr64 g_ptrkwks" ?g_ptrkwks@@3PEAVCTrkWksSvc@@EA
0x1800154E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006AC0: "__cdecl purecall" _purecall
0x180017448: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800150B0: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x18000EEE0: MIDL_user_allocate
0x180006FB0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180015230: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180016F08: "VolInitRetryDelay2" ??_C@_1CG@HIFIBGBE@?$AAV?$AAo?$AAl?$AAI?$AAn?$AAi?$AAt?$AAR?$AAe?$AAt?$AAr?$AAy?$AAD?$AAe?$AAl?$AAa?$AAy?$AA2?$AA?$AA@
0x18000BD98: "public: int __cdecl CVolumeLocationCache::FindVolume(struct CVolumeId const & __ptr64,struct CMachineId * __ptr64,int * __ptr64) __ptr64" ?FindVolume@CVolumeLocationCache@@QEAAHAEBUCVolumeId@@PEAUCMachineId@@PEAH@Z
0x180015508: "__cdecl _imp_RtlDowncaseUnicodeString" __imp_RtlDowncaseUnicodeString
0x18000A350: "private: long __cdecl CPort::OnConnectionRequest(struct TRKWKS_PORT_CONNECT_REQUEST * __ptr64,int * __ptr64) __ptr64" ?OnConnectionRequest@CPort@@AEAAJPEAUTRKWKS_PORT_CONNECT_REQUEST@@PEAH@Z
0x180010EA4: "private: int __cdecl CObjIdEnumerator::Find(struct CObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,int) __ptr64" ?Find@CObjIdEnumerator@@AEAAHPEAUCObjId@@PEAUCDomainRelativeObjId@@H@Z
0x1800150C0: "__cdecl _imp_RpcCancelThread" __imp_RpcCancelThread
0x1800195E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800171C8: "MaxSendsPerMoveNotify" ??_C@_1CM@GLGIOBBA@?$AAM?$AAa?$AAx?$AAS?$AAe?$AAn?$AAd?$AAs?$AAP?$AAe?$AAr?$AAM?$AAo?$AAv?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x180009180: "public: void __cdecl CLogFileHeader::ClearExpansionData(void) __ptr64" ?ClearExpansionData@CLogFileHeader@@QEAAXXZ
0x18000EBB8: "public: long __cdecl CTrkWksSvc::SearchMachine(void * __ptr64,unsigned long,struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId const & __ptr64,struct CDomainRelativeObjId * __ptr64,struct CDomainRelativeObjId * __ptr64,struct CMachineId * __ptr64,unsigned short * __ptr64) __ptr64" ?SearchMachine@CTrkWksSvc@@QEAAJPEAXKAEBUCDomainRelativeObjId@@1PEAU2@2PEAUCMachineId@@PEAG@Z
0x180016BE8: "unsigned short const * const s_tszTrkWksLocalRpcEndPoint" ?s_tszTrkWksLocalRpcEndPoint@@3QBGB
0x180009800: "public: void __cdecl CLogFileHeader::UnInitialize(void) __ptr64" ?UnInitialize@CLogFileHeader@@QEAAXXZ
0x1800150D0: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x180015250: "__cdecl _imp_OpenThread" __imp_OpenThread
0x180019384: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x180005670: "private: void __cdecl CLogFileSector::LoadSector(unsigned long) __ptr64" ?LoadSector@CLogFileSector@@AEAAXK@Z
0x180015438: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800141E8: "const CObjIdIndexChangeNotifier::`vftable'" ??_7CObjIdIndexChangeNotifier@@6B@
0x180017400: "CustomSecureDcName" ??_C@_1CG@PLMJMHCG@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAD?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1800155F0: ntdll_NULL_THUNK_DATA
0x180015488: "__cdecl _imp_memcpy" __imp_memcpy
0x180016F80: "VolPeriodicTasksHesitation" ??_C@_1DG@JGHMJJMI@?$AAV?$AAo?$AAl?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AAi?$AAc?$AAT?$AAa?$AAs?$AAk?$AAs?$AAH?$AAe?$AAs?$AAi?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800154E0: "__cdecl _imp_NtCancelTimer" __imp_NtCancelTimer
0x18000A400: "private: int __cdecl CPort::RegisterWorkItemWithThreadPool(void) __ptr64" ?RegisterWorkItemWithThreadPool@CPort@@AEAAHXZ
0x180016FB8: "MoveNotifyTimeout" ??_C@_1CE@JLPMPOJE@?$AAM?$AAo?$AAv?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x180015038: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x18001BAD0: "public: static class CMultiTsz CTrkConfiguration::_mtszOperationLog" ?_mtszOperationLog@CTrkConfiguration@@2VCMultiTsz@@A
0x18000EFF0: "long __cdecl FindLocalPath(unsigned short const * __ptr64,struct CObjId const & __ptr64,struct CDomainRelativeObjId * __ptr64,unsigned short * __ptr64)" ?FindLocalPath@@YAJPEBGAEBUCObjId@@PEAUCDomainRelativeObjId@@PEAG@Z
0x1800172B0: "unsigned short const * const s_tszKeyNameLinkTrack" ?s_tszKeyNameLinkTrack@@3QBGB
0x180016EB8: "VolInitInitialDelay" ??_C@_1CI@NAGILAON@?$AAV?$AAo?$AAl?$AAI?$AAn?$AAi?$AAt?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180015388: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18000F824: "public: unsigned long __cdecl CShareEnumerator::QueryCCHSharePath(void) __ptr64" ?QueryCCHSharePath@CShareEnumerator@@QEAAKXZ
0x18001955C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800013F0: Stubold_LnkSearchMachine
0x18001B388: "__cdecl _security_cookie" __security_cookie
0x1800152B8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18001C140: "private: static void * __ptr64 __ptr64 CVerifyAuthentication::_psidAuthenticatedUsersGroup" ?_psidAuthenticatedUsersGroup@CVerifyAuthentication@@0PEAXEA
0x18000EEB0: "private: static unsigned long __cdecl CTrkWksSvc::s_ExecuteAsyncInit(void * __ptr64)" ?s_ExecuteAsyncInit@CTrkWksSvc@@CAKPEAX@Z
0x18000EDD0: "public: void __cdecl CTrkWksSvc::UnInitialize(long) __ptr64" ?UnInitialize@CTrkWksSvc@@QEAAXJ@Z
0x1800153D0: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180009100: "public: void __cdecl CLogFile::AdjustLogIndex(unsigned long * __ptr64,long,enum CLogFile::AdjustLimitEnum,unsigned long) __ptr64" ?AdjustLogIndex@CLogFile@@QEAAXPEAKJW4AdjustLimitEnum@1@K@Z
0x180015850: GUID_IO_VOLUME_UNLOCK
0x180017380: "DebugStoreFlags" ??_C@_1CA@LFNAHCIC@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAS?$AAt?$AAo?$AAr?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800152F0: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180004A7C: "int __cdecl EnablePrivilege(long)" ?EnablePrivilege@@YAHJ@Z
0x1800151E0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800151F8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800013F0: StubGetFileTrackingInformation
0x18000D2D4: "public: void __cdecl CTrkWksConfiguration::Initialize(int) __ptr64" ?Initialize@CTrkWksConfiguration@@QEAAXH@Z
0x18000C738: "private: void __cdecl CVolumeManager::InitializeVolumeList(class CTrkWksConfiguration const * __ptr64,struct SERVICE_STATUS_HANDLE__ * __ptr64) __ptr64" ?InitializeVolumeList@CVolumeManager@@AEAAXPEBVCTrkWksConfiguration@@PEAUSERVICE_STATUS_HANDLE__@@@Z
0x1800195AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800152C0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180017270: "MaxDeleteNotifyAttempts" ??_C@_1DA@DACKLMPK@?$AAM?$AAa?$AAx?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAA?$AAt?$AAt?$AAe?$AAm?$AAp?$AAt?$AAs?$AA?$AA@
0x180011248: "public: void __cdecl CRpcClientBinding::RcInitialize(struct CMachineId const & __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,enum RC_AUTHENTICATE) __ptr64" ?RcInitialize@CRpcClientBinding@@QEAAXAEBUCMachineId@@PEBG1W4RC_AUTHENTICATE@@@Z
0x18001BA90: "__cdecl _onexitbegin" __onexitbegin
0x1800037A0: "public: void __cdecl CVolume::CloseVolumeHandles(void * __ptr64,enum CVolume::EHandleChangeReason) __ptr64" ?CloseVolumeHandles@CVolume@@QEAAXPEAXW4EHandleChangeReason@1@@Z
0x1800016D0: "public: void __cdecl CACL::UnInitialize(void) __ptr64" ?UnInitialize@CACL@@QEAAXXZ
0x18000B238: "public: struct CVolumeId const __cdecl CVolume::GetVolumeId(void) __ptr64" ?GetVolumeId@CVolume@@QEAA?BUCVolumeId@@XZ
0x1800153B0: "__cdecl _imp_ImpersonateSelf" __imp_ImpersonateSelf
0x180010DAC: "private: void __cdecl CNewTimer::RemoveFromRegistry(void) __ptr64" ?RemoveFromRegistry@CNewTimer@@AEAAXXZ
0x180015480: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000ACB4: "public: void __cdecl CVolume::CloseAndReopenVolumeHandles(void) __ptr64" ?CloseAndReopenVolumeHandles@CVolume@@QEAAXXZ
0x180015090: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x180015140: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180015238: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180001400: Stubold_LnkMendLink
0x180002370: "protected: virtual enum RCF_RESULT __cdecl CLogFile::OpenExistingFile(unsigned short const * __ptr64) __ptr64" ?OpenExistingFile@CLogFile@@MEAA?AW4RCF_RESULT@@PEBG@Z
0x180019674: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000D840: "public: virtual void __cdecl CTrkWksSvc::DoWork(void) __ptr64" ?DoWork@CTrkWksSvc@@UEAAXXZ
0x180011108: "public: void __cdecl CObjIdEnumerator::UnInitialize(void) __ptr64" ?UnInitialize@CObjIdEnumerator@@QEAAXXZ
0x1800152B0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180016EE0: "VolInitRetryDelay1" ??_C@_1CG@GKONLJPK@?$AAV?$AAo?$AAl?$AAI?$AAn?$AAi?$AAt?$AAR?$AAe?$AAt?$AAr?$AAy?$AAD?$AAe?$AAl?$AAa?$AAy?$AA1?$AA?$AA@
0x180006EB4: "__cdecl _security_init_cookie" __security_init_cookie
0x180016B90: "unsigned short const * const s_tszTrkWksRemoteRpcEndPointOld" ?s_tszTrkWksRemoteRpcEndPointOld@@3QBGB
0x1800141D0: "const CNewTimer::`vftable'" ??_7CNewTimer@@6B@
0x18000C150: "public: virtual void * __ptr64 __cdecl CVolume::`vector deleting destructor'(unsigned int) __ptr64" ??_ECVolume@@UEAAPEAXI@Z
0x18001C130: "void * __ptr64 __ptr64 g_waitObject" ?g_waitObject@@3PEAXEA
0x18000F90C: "long __cdecl SetBirthId(void * __ptr64,struct CDomainRelativeObjId const & __ptr64)" ?SetBirthId@@YAJPEAXAEBUCDomainRelativeObjId@@@Z
0x1800196B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x1800153E0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x180019520: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005620: "public: struct tagLogEntry const * __ptr64 __cdecl CLogFileSector::ReadLogEntry(unsigned long) __ptr64" ?ReadLogEntry@CLogFileSector@@QEAAPEBUtagLogEntry@@K@Z
0x180009760: "public: void __cdecl CLogFileSector::WriteMoveNotification(unsigned long,struct LogMoveNotification const & __ptr64) __ptr64" ?WriteMoveNotification@CLogFileSector@@QEAAXKAEBULogMoveNotification@@@Z
0x180005990: "public: void __cdecl CLogFileHeader::Flush(void) __ptr64" ?Flush@CLogFileHeader@@QEAAXXZ
0x180016DC8: "MinLogKB" ??_C@_1BC@OJJHLAPO@?$AAM?$AAi?$AAn?$AAL?$AAo?$AAg?$AAK?$AAB?$AA?$AA@
0x180015490: "__cdecl _imp_malloc" __imp_malloc
0x180015470: "__cdecl _imp__purecall" __imp__purecall
0x1800071AD: "__cdecl _imp_load_ReportEventW" __imp_load_ReportEventW
0x180009834: "public: void __cdecl CLogFileSector::UnInitialize(void) __ptr64" ?UnInitialize@CLogFileSector@@QEAAXXZ
0x180016CB0: "VolQuotaReached" ??_C@_1CA@BDIKACBO@?$AAV?$AAo?$AAl?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAR?$AAe?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?$AA@
0x180001C20: "public: void __cdecl CLogFile::Initialize(unsigned short const * __ptr64,class CTrkWksConfiguration const * __ptr64,class PLogFileNotify * __ptr64,unsigned short) __ptr64" ?Initialize@CLogFile@@QEAAXPEBGPEBVCTrkWksConfiguration@@PEAVPLogFileNotify@@G@Z
0x180019548: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800151A8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18001BA78: "__cdecl _hmod__srvcli_dll" __hmod__srvcli_dll
0x180003930: "public: void __cdecl CSecureFile::CloseFile(void) __ptr64" ?CloseFile@CSecureFile@@QEAAXXZ
0x180004A14: "void __cdecl TrkRaiseWin32Error(long)" ?TrkRaiseWin32Error@@YAXJ@Z
0x180004560: "long __cdecl MapVolumeDeviceNameToIndex(unsigned short const * __ptr64)" ?MapVolumeDeviceNameToIndex@@YAJPEBG@Z
0x180015540: "__cdecl _imp_NtConnectPort" __imp_NtConnectPort
0x180015110: RPCRT4_NULL_THUNK_DATA
0x18000C5E4: "public: void __cdecl CVolumeManager::Initialize(class CTrkWksSvc * __ptr64,class CTrkWksConfiguration const * __ptr64,struct SERVICE_STATUS_HANDLE__ * __ptr64) __ptr64" ?Initialize@CVolumeManager@@QEAAXPEAVCTrkWksSvc@@PEBVCTrkWksConfiguration@@PEAUSERVICE_STATUS_HANDLE__@@@Z
0x180006B10: "__cdecl _report_gsfailure" __report_gsfailure
0x180015550: "__cdecl _imp_NtReplyWaitReceivePortEx" __imp_NtReplyWaitReceivePortEx
0x180015358: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x1800154C8: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180015300: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180010038: "long __cdecl TrkReportRawEvent(unsigned long,unsigned short,unsigned long,void const * __ptr64,char * __ptr64)" ?TrkReportRawEvent@@YAJKGKPEBXPEAD@Z
0x180016E30: "LogFileOpenTime" ??_C@_1CA@GEFBGNNJ@?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180016CD0: "%c:%s" ??_C@_1M@EIOPOEJ@?$AA?$CF?$AAc?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x18001BAA0: "__cdecl _native_startup_state" __native_startup_state
0x18001B4E0: "private: static int CSvcCtrlInterface::_fStoppedOrStopping" ?_fStoppedOrStopping@CSvcCtrlInterface@@0HA
0x18000C3D8: "public: void __cdecl CVolumeManager::CloseVolumeHandles(void * __ptr64) __ptr64" ?CloseVolumeHandles@CVolumeManager@@QEAAXPEAX@Z
0x180015560: "__cdecl _imp_NtAcceptConnectPort" __imp_NtAcceptConnectPort
0x18001C100: "void * __ptr64 __ptr64 g_stopServiceEvent" ?g_stopServiceEvent@@3PEAXEA
0x180016D88: "MaxReferrals" ??_C@_1BK@FJHMHMCB@?$AAM?$AAa?$AAx?$AAR?$AAe?$AAf?$AAe?$AAr?$AAr?$AAa?$AAl?$AAs?$AA?$AA@
0x180013018: "const PLogFileNotify::`vftable'" ??_7PLogFileNotify@@6B@
0x18000F9D4: "long __cdecl TrkCreateFile(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,void * __ptr64 * __ptr64)" ?TrkCreateFile@@YAJPEBGKKKKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAX@Z
0x180016B10: "Distributed Link Tracking Client" ??_C@_1EC@MNKOILLK@?$AAD?$AAi?$AAs?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAk?$AA?5?$AAT?$AAr?$AAa?$AAc?$AAk?$AAi?$AAn?$AAg?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt@
0x1800151B0: "__cdecl _imp_FindVolumeClose" __imp_FindVolumeClose
0x18001C148: "protected: static int CTrkRpcConfig::_fInitialized" ?_fInitialized@CTrkRpcConfig@@1HA
0x1800062A0: "public: virtual void __cdecl CLogFile::DoWork(void) __ptr64" ?DoWork@CLogFile@@UEAAXXZ
0x180015260: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x1800153D8: "__cdecl _imp_MakeAbsoluteSD" __imp_MakeAbsoluteSD
0x1800150F0: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180015050: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x18001B000: "private: static struct STrkConfigRecord * CTrkWksConfiguration::_Parameters" ?_Parameters@CTrkWksConfiguration@@0PAUSTrkConfigRecord@@A
0x180005810: "public: void __cdecl CLogFileSector::Flush(void) __ptr64" ?Flush@CLogFileSector@@QEAAXXZ
0x180017360: "TrkDebugFlags" ??_C@_1BM@PBJIKCIF@?$AAT?$AAr?$AAk?$AAD?$AAe?$AAb?$AAu?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800153B8: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x180019570: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800060D0: "private: void __cdecl CLogFileHeader::LoadHeader(void * __ptr64) __ptr64" ?LoadHeader@CLogFileHeader@@AEAAXPEAX@Z
0x180015098: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180009354: "protected: void __cdecl PRobustlyCreateableFile::RobustlyDeleteFile(unsigned short const * __ptr64) __ptr64" ?RobustlyDeleteFile@PRobustlyCreateableFile@@IEAAXPEBG@Z
0x180015440: "__cdecl _imp_free" __imp_free
0x180006E20: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800141B8: "const CTrkWksSvc::`vftable'{for `IServiceHandler'}" ??_7CTrkWksSvc@@6BIServiceHandler@@@
0x180015328: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180015538: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x1800141D8: "const CVolume::`vftable'" ??_7CVolume@@6B@
0x180009680: "public: void __cdecl CLogFile::UnInitialize(void) __ptr64" ?UnInitialize@CLogFile@@QEAAXXZ
0x180011F7C: "private: int __cdecl CShareEnumerator::_IsHiddenShare(void) __ptr64" ?_IsHiddenShare@CShareEnumerator@@AEAAHXZ
0x18000B2A8: "public: int __cdecl CVolume::Initialize(unsigned short const * __ptr64,class CTrkWksConfiguration const * __ptr64,class CVolumeManager * __ptr64,struct SERVICE_STATUS_HANDLE__ * __ptr64) __ptr64" ?Initialize@CVolume@@QEAAHPEBGPEBVCTrkWksConfiguration@@PEAVCVolumeManager@@PEAUSERVICE_STATUS_HANDLE__@@@Z
0x1800091B0: "public: void __cdecl CLogFile::Expand(unsigned long) __ptr64" ?Expand@CLogFile@@QEAAXK@Z
0x180015248: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180016B58: "MoveQuotaReached" ??_C@_1CC@NJAEJBDB@?$AAM?$AAo?$AAv?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAR?$AAe?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?$AA@
0x180015720: "unsigned short const * const s_tszLogFileName" ?s_tszLogFileName@@3QBGB
0x180009D90: "void __cdecl ServiceEntry(unsigned long,unsigned short * __ptr64 * __ptr64,struct _SVCHOST_GLOBAL_DATA * __ptr64,void * __ptr64)" ?ServiceEntry@@YAXKPEAPEAGPEAU_SVCHOST_GLOBAL_DATA@@PEAX@Z
0x1800196C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180015318: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180019610: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18001BABC: "int g_fRestorePrivilegeEnabled" ?g_fRestorePrivilegeEnabled@@3HA
0x180015510: "__cdecl _imp_RtlOemStringToUnicodeString" __imp_RtlOemStringToUnicodeString
0x180007370: memset
0x180019700: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001558: "public: void __cdecl CSecDescriptor::Initialize(void) __ptr64" ?Initialize@CSecDescriptor@@QEAAXXZ
0x18000C150: "public: virtual void * __ptr64 __cdecl CVolume::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCVolume@@UEAAPEAXI@Z
0x180009C18: "int __cdecl BeginSingleInstanceTask(long * __ptr64)" ?BeginSingleInstanceTask@@YAHPEAJ@Z
0x1800172A0: "%08x" ??_C@_19HGGOABND@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
0x180011784: "private: enum PShareMerit::enumAccessLevels __cdecl CShareEnumerator::_GetAccessLevel(void) __ptr64" ?_GetAccessLevel@CShareEnumerator@@AEAA?AW4enumAccessLevels@PShareMerit@@XZ

[JEB Decompiler by PNF Software]