Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wephostsvc.dll Base=0x180000000 SHA-256=F1E0BCA1ADD47DB08AABDFB8BDE5DD1A42C00F4535ACCD455763D575E92FCAFB
PDB: wephostsvc.pdb GUID={BBCB1316-2244-C105-33CF6B181BA580DD} Age=1

297 located named symbols:
0x180001AE0: s_IsDeviceLockable
0x180004718: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800037CC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800045D0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180004730: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180004E58: ServiceFailure
0x1800035D0: "__cdecl FindPESection" _FindPESection
0x180001FC0: s_UpdateDeviceLockoutState
0x180003030: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180005898: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180007070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004AE0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180002AC0: "unsigned long __cdecl WepHostServiceCtrlHandler(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?WepHostServiceCtrlHandler@@YAKKKPEAX0@Z
0x1800030AC: "__cdecl CRT_INIT" _CRT_INIT
0x180004638: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180009060: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x1800017D0: "void __cdecl WepHostTearDownRPCServer(void)" ?WepHostTearDownRPCServer@@YAXXZ
0x180001490: WppControlCallback
0x180003BD0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180009048: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x1800045C8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800076D0: "struct _WEPHOST_SERVICE_DATA svcData" ?svcData@@3U_WEPHOST_SERVICE_DATA@@A
0x1800049A8: "EasEncryptProvDisableDeviceLocko" ??_C@_0CI@KAOCCPJL@EasEncryptProvDisableDeviceLocko@
0x180002360: "long __cdecl WepCheckCallerPrivilege(unsigned long)" ?WepCheckCallerPrivilege@@YAJK@Z
0x180004E70: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000576C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000571C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180004610: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180004C00: WPP_25368a68671f3a1368116112fb069541_Traceguids
0x1800046B0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180003AB1: "__cdecl _imp_load_RpcBindingVectorFree" __imp_load_RpcBindingVectorFree
0x180004818: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003AE0: "__cdecl _imp_load_NdrServerCall2" __imp_load_NdrServerCall2
0x180009038: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x180004750: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x1800019D0: s_QueryProtectionStatus
0x180007640: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180001D20: s_GetDeviceLockoutData
0x180004770: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x1800035B4: "__cdecl XcptFilter" _XcptFilter
0x180004820: "__cdecl _xc_a" __xc_a
0x180002C7C: "long __cdecl InitService(void)" ?InitService@@YAJXZ
0x180004600: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180004E28: DllLoadFailure
0x180001E90: s_ValidateDeviceLockoutState
0x180004578: "__cdecl _imp_UnregisterWait" __imp_UnregisterWait
0x1800048DC: "__cdecl _guard_iat_table" __guard_iat_table
0x180003BA6: memcpy
0x180004618: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180004740: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x1800047C0: "__cdecl _imp_memset" __imp_memset
0x1800046C0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180004E00: WPP_6748cd00592e354ba6abbe5cde79517d_Traceguids
0x18000379C: "__cdecl initterm" _initterm
0x180004710: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000585C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180007808: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003996: "__cdecl _imp_load_RpcBindingToStringBindingW" __imp_load_RpcBindingToStringBindingW
0x1800046D0: "__cdecl _imp_Sleep" __imp_Sleep
0x180004850: "__cdecl _xi_z" __xi_z
0x1800045B8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800037A8: "__cdecl _C_specific_handler" __C_specific_handler
0x180002620: MIDL_user_free
0x1800045F0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180007678: WPP_REGISTRATION_GUIDS
0x1800045E0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180003B38: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800047D0: "__cdecl _imp_NtAccessCheck" __imp_NtAccessCheck
0x180004A70: "SYSTEM\CurrentControlSet\Control" ??_C@_1EK@PIAKNLFL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800046A8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180007650: WPP_MAIN_CB
0x180001334: "unsigned long __cdecl ValidateSigning(unsigned short const * __ptr64)" ?ValidateSigning@@YAKPEBG@Z
0x1800057D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1800035C0: "__cdecl amsg_exit" _amsg_exit
0x180004E68: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180003A9F: "__cdecl _imp_load_RpcEpUnregister" __imp_load_RpcEpUnregister
0x180005434: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180001644: "long __cdecl WepHostInitRPCServer(void)" ?WepHostInitRPCServer@@YAJXZ
0x180004780: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180002B80: "void __cdecl WepHostStopCallback(void * __ptr64,unsigned char)" ?WepHostStopCallback@@YAXPEAXE@Z
0x180003A69: "__cdecl _imp_load_RpcServerInqBindings" __imp_load_RpcServerInqBindings
0x180004678: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004720: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800045C0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800046F8: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180004AD0: Microsoft_Windows_WEPHOSTSVC
0x180004640: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800049F8: "EasEncryptProvUpdateDeviceLockou" ??_C@_0CH@NFAPJIGO@EasEncryptProvUpdateDeviceLockou@
0x180009068: RPCRT4_NULL_THUNK_DATA_DLA
0x180005618: RPCRT4_NULL_THUNK_DATA_DLB
0x1800077F8: "__cdecl _native_startup_lock" __native_startup_lock
0x180003790: DllMain
0x1800054E0: RPCRT4_NULL_THUNK_DATA_DLN
0x1800048F0: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x180009030: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x1800057A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180004790: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004688: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004630: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800057E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180004580: KERNEL32_NULL_THUNK_DATA
0x180004E18: Microsoft_Windows_WEPHOSTSVCKeywords
0x1800045B0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180004748: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180007060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003B14: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800029D0: "void __cdecl SvchostPushServiceGlobals(struct _SVCHOST_GLOBAL_DATA * __ptr64)" ?SvchostPushServiceGlobals@@YAXPEAU_SVCHOST_GLOBAL_DATA@@@Z
0x180004340: "struct __midl_frag29_t const __midl_frag29" ?__midl_frag29@@3U__midl_frag29_t@@B
0x180007740: Microsoft_Windows_WEPHOSTSVCEnableBits
0x180004900: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800058C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180004650: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800046B8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180004E68: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180003680: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800043B0: "struct _MIDL_SERVER_INFO_ const IEasPolicyProvider_ServerInfo" ?IEasPolicyProvider_ServerInfo@@3U_MIDL_SERVER_INFO_@@B
0x180009028: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x180005730: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001518: WPP_SF_
0x1800045E8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180004620: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180004290: "struct _NDR64_POINTER_FORMAT const __midl_frag13" ?__midl_frag13@@3U_NDR64_POINTER_FORMAT@@B
0x1800046A0: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180004310: "struct _NDR64_POINTER_FORMAT const __midl_frag23" ?__midl_frag23@@3U_NDR64_POINTER_FORMAT@@B
0x180005454: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800047D8: "__cdecl _imp_NtPrivilegeCheck" __imp_NtPrivilegeCheck
0x1800032F0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004798: "__cdecl _imp__initterm" __imp__initterm
0x180009058: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x180004DE8: "WEPHOSTSVC" ??_C@_1BG@OCGPCJMI@?$AAW?$AAE?$AAP?$AAH?$AAO?$AAS?$AAT?$AAS?$AAV?$AAC?$AA?$AA@
0x180007680: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x1800058AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180003A57: "__cdecl _imp_load_RpcServerRegisterIf3" __imp_load_RpcServerRegisterIf3
0x180004910: "EasEncryptProvQueryProtectionSta" ??_C@_0CE@MJFGILK@EasEncryptProvQueryProtectionSta@
0x180005758: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004050: "struct _MIDL_STUB_DESC const IEasPolicyProvider_StubDesc" ?IEasPolicyProvider_StubDesc@@3U_MIDL_STUB_DESC@@B
0x1800077E8: "__cdecl _onexitend" __onexitend
0x180004810: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180009020: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x180004648: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002FC0: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64)" ?ServiceMain@@YAXKPEAPEAG@Z
0x1800047E8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1800046F0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004840: "__cdecl _xi_a" __xi_a
0x1800046E8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180007648: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUvzhUklorxbvmtrmvUvcgmhexUhexUlyquivUznwGEUkxsOlyq@wephostsvc" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUvzhUklorxbvmtrmvUvcgmhexUhexUlyquivUznwGEUkxsOlyq@wephostsvc
0x180004598: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180004758: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800047E0: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x1800041F0: "struct __midl_frag2_t const __midl_frag2" ?__midl_frag2@@3U__midl_frag2_t@@B
0x18000153C: WPP_SF_DD
0x1800010E4: WPP_SF_DS
0x18000275C: McGenEventWrite
0x180007000: WPP_GLOBAL_Control
0x180003A8D: "__cdecl _imp_load_RpcServerUnregisterIfEx" __imp_load_RpcServerUnregisterIfEx
0x180005848: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180004C10: "struct __midl_frag15_t const __midl_frag15" ?__midl_frag15@@3U__midl_frag15_t@@B
0x1800010A8: WPP_SF_D
0x180007810: "__cdecl pRawDllMain" _pRawDllMain
0x180004C2C: "unsigned char const __midl_frag26" ?__midl_frag26@@3EB
0x180001820: "long __cdecl WepHostInitFuncTable(void)" ?WepHostInitFuncTable@@YAJXZ
0x180001174: "unsigned long __cdecl ValidateInterfaces(unsigned short const * __ptr64,struct HINSTANCE__ * __ptr64 & __ptr64,struct _tagPluginAPITable & __ptr64)" ?ValidateInterfaces@@YAKPEBGAEAPEAUHINSTANCE__@@AEAU_tagPluginAPITable@@@Z
0x180005794: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180003590: "__cdecl _security_check_cookie" __security_check_cookie
0x180004838: "__cdecl _xc_z" __xc_z
0x180002418: "long __cdecl CheckCallerAdminAccess(void)" ?CheckCallerAdminAccess@@YAJXZ
0x180005780: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180004658: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004628: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180004A20: "ThirdPartyEncryptionProviderPath" ??_C@_1EC@BFJEMBDF@?$AAT?$AAh?$AAi?$AAr?$AAd?$AAP?$AAa?$AAr?$AAt?$AAy?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAP?$AAa?$AAt?$AAh@
0x1800046E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800020F0: s_DisableDeviceLockoutState
0x180004588: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800045F8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180003BF0: "__cdecl _chkstk" __chkstk
0x1800028BC: WPP_SF_DDqq
0x180004778: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x1800042A0: "struct __midl_frag14_t const __midl_frag14" ?__midl_frag14@@3U__midl_frag14_t@@B
0x180009010: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x180004698: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180005870: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180004668: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004858: "__cdecl _guard_fids_table" __guard_fids_table
0x1800047C8: msvcrt_NULL_THUNK_DATA
0x180004470: "__cdecl load_config_used" _load_config_used
0x180004E48: ServiceStart
0x180004978: "EasEncryptProvValidateDeviceLock" ??_C@_0CJ@KLPPDJII@EasEncryptProvValidateDeviceLock@
0x1800057BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800045A0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180004590: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800027F0: McGenEventUnregister
0x180007688: "struct _tagPluginAPITable g_Table" ?g_Table@@3U_tagPluginAPITable@@A
0x180004E38: ServiceStop
0x180003A7B: "__cdecl _imp_load_RpcEpRegisterW" __imp_load_RpcEpRegisterW
0x180004320: "struct __midl_frag24_t const __midl_frag24" ?__midl_frag24@@3U__midl_frag24_t@@B
0x180004C2D: "unsigned char const __midl_frag34" ?__midl_frag34@@3EB
0x180009000: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x180004AF0: "WEPHOST" ??_C@_1BA@GMCADCJC@?$AAW?$AAE?$AAP?$AAH?$AAO?$AAS?$AAT?$AA?$AA@
0x1800047B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004800: "__cdecl _imp_NtClose" __imp_NtClose
0x180004680: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004660: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004C40: "struct _wephostrpc_MIDL_TYPE_FORMAT_STRING const wephostrpc__MIDL_TypeFormatString" ?wephostrpc__MIDL_TypeFormatString@@3U_wephostrpc_MIDL_TYPE_FORMAT_STRING@@B
0x1800049D0: "EasEncryptProvGetDeviceLockoutDa" ??_C@_0CD@IFLFJKBL@EasEncryptProvGetDeviceLockoutDa@
0x180007010: Microsoft_Windows_WEPHOSTSVC_Context
0x180009018: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180004690: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180004E70: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180004C20: "struct __midl_frag25_t const __midl_frag25" ?__midl_frag25@@3U__midl_frag25_t@@B
0x1800025F0: MIDL_user_allocate
0x1800037C0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004AC0: WPP_991af37e5ff13eaf3d8e3e16fe3d09c2_Traceguids
0x180004760: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180009040: "__cdecl _imp_RpcServerUnregisterIfEx" __imp_RpcServerUnregisterIfEx
0x180005708: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800042C0: "struct __midl_frag22_t const __midl_frag22" ?__midl_frag22@@3U__midl_frag22_t@@B
0x180004AD0: WPP_ThisDir_CTLGUID_WepHostDebugTraceControlGuid
0x180009050: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x180004728: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1800047B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004808: ntdll_NULL_THUNK_DATA
0x180004788: "__cdecl _imp_memcpy" __imp_memcpy
0x180002200: s_GetDeviceLockoutSize
0x180004E10: Microsoft_Windows_WEPHOSTSVCLevels
0x180004700: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000580C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180004708: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180007068: "__cdecl _security_cookie" __security_cookie
0x180003BF0: "__cdecl alloca_probe" _alloca_probe
0x1800045D8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004608: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180004C80: "struct _wephostrpc_MIDL_PROC_FORMAT_STRING const wephostrpc__MIDL_ProcFormatString" ?wephostrpc__MIDL_ProcFormatString@@3U_wephostrpc_MIDL_PROC_FORMAT_STRING@@B
0x1800076C0: "struct _RPC_BINDING_VECTOR * __ptr64 __ptr64 g_pBindingVector" ?g_pBindingVector@@3PEAU_RPC_BINDING_VECTOR@@EA
0x180005744: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002650: McGenControlCallbackV2
0x1800039A2: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x1800077F0: "__cdecl _onexitbegin" __onexitbegin
0x180002974: WPP_SF_qd
0x1800045A8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180005884: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800036B4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000292C: WPP_SF_q
0x1800057F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x1800047F8: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x180004938: "EasEncryptProvIsDeviceLockable" ??_C@_0BP@NMMKCEDA@EasEncryptProvIsDeviceLockable?$AA@
0x180004670: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x1800047F0: "__cdecl _imp_NtGetCachedSigningLevel" __imp_NtGetCachedSigningLevel
0x1800043F0: "struct RPC_DISPATCH_TABLE const IEasPolicyProvider_v1_0_DispatchTable" ?IEasPolicyProvider_v1_0_DispatchTable@@3URPC_DISPATCH_TABLE@@B
0x180003A33: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x180003B00: "__cdecl _imp_load_NdrServerCallAll" __imp_load_NdrServerCallAll
0x1800056F4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004768: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180004958: "EasEncryptProvLockDevice" ??_C@_0BJ@MAKFIJIJ@EasEncryptProvLockDevice?$AA@
0x1800027B8: McGenEventRegister
0x180004370: "struct __midl_frag31_t const __midl_frag31" ?__midl_frag31@@3U__midl_frag31_t@@B
0x1800047A0: "__cdecl _imp_malloc" __imp_malloc
0x180004738: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180003810: "__cdecl _report_gsfailure" __report_gsfailure
0x180007800: "__cdecl _native_startup_state" __native_startup_state
0x180003A21: "__cdecl _imp_load_RpcStringBindingParseW" __imp_load_RpcStringBindingParseW
0x180004240: "struct __midl_frag12_t const __midl_frag12" ?__midl_frag12@@3U__midl_frag12_t@@B
0x180003A45: "__cdecl _imp_load_RpcServerUseProtseqEpW" __imp_load_RpcServerUseProtseqEpW
0x180001BF0: s_LockDevice
0x180003AC3: "__cdecl _imp_load_RpcImpersonateClient" __imp_load_RpcImpersonateClient
0x180005834: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180009008: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x1800047A8: "__cdecl _imp_free" __imp_free
0x180002820: McTemplateU0
0x180003620: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800046D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800046C8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180005820: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180002860: McTemplateU0q
0x180003BB2: memset
0x1800058D4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]