Generated by JEB on 2019/08/01

PE: C:\Windows\System32\sfc_os.dll Base=0x180000000 SHA-256=F8B62891D71E112E2D20E0E20410E9FD11E485EE52BE2AFFFA61575A5A8C51D2
PDB: sfc_os.pdb GUID={F8089DF8-E97B-8BA2-0298DCB38C32403A} Age=1

297 located named symbols:
0x180009C48: "\??\Volume" ??_C@_1BG@KPDPFBJH@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x180002290: RtlDecodeUtf16LE
0x18000109C: RtlAllocateLUnicodeString
0x1800086D8: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180005060: SfpVerifyFile
0x1800039F0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180008818: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18000BD70: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003CDA: "__cdecl _imp_load_PnpIsFilePnpDriver" __imp_load_PnpIsFilePnpDriver
0x180003758: LuaCdfFreeContext
0x1800036E0: "public: virtual long __cdecl CCodeIntegrityLookupContext::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@CCodeIntegrityLookupContext@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@Windows@@@Z
0x180008A00: "\SystemRoot\WinSxS\FileMaps\" ??_C@_1DK@JNFKAAJJ@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAS?$AAx?$AAS?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAM?$AAa?$AAp?$AAs?$AA?2?$AA?$AA@
0x180001450: CdfSearchUlongTable
0x18000D008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180008690: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1800083B0: "const Windows::Rtl::IRtlObject::`vftable'" ??_7IRtlObject@Rtl@Windows@@6B@
0x1800037F0: CipRtlFreeStringRoutine
0x180008950: "__cdecl GUID_86a72d18_2a36_428e_a31e_b4cc8b18ca42" _GUID_86a72d18_2a36_428e_a31e_b4cc8b18ca42
0x180005C5C: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::ReportErrorOrigination(struct Windows::ErrorHandling::_RTL_CALL_SITE const * __ptr64) __ptr64" ?ReportErrorOrigination@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXPEBU_RTL_CALL_SITE@34@@Z
0x180008718: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800054B8: "public: void __cdecl CCiFileMapEnumContext::Close(void) __ptr64" ?Close@CCiFileMapEnumContext@@QEAAXXZ
0x18000507C: "long __cdecl Windows::StringUtil::Rtl::CombineNtPaths<class Windows::Auto<struct _LUNICODE_STRING>,wchar_t [16]>(class Windows::Auto<struct _LUNICODE_STRING> const & __ptr64,wchar_t const (& __ptr64)[16],class Windows::Auto<struct _LUNICODE_STRING> * __ptr64)" ??$CombineNtPaths@V?$Auto@U_LUNICODE_STRING@@@Windows@@$$BY0BA@_W@Rtl@StringUtil@Windows@@YAJAEBV?$Auto@U_LUNICODE_STRING@@@2@AEAY0BA@$$CB_WPEAV32@@Z
0x1800087D8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180002B80: RtlHashEncodedLBlob
0x180003E20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005C6C: BeginFileMapEnumerationInternal
0x180003A40: SfcConnectToServer
0x180002F60: RtlEncodeUtf16LE
0x1800087D0: "__cdecl _imp_NtReadFile" __imp_NtReadFile
0x180005050: SfpDeleteCatalog
0x180009C78: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180005298: "long __cdecl Windows::StringUtil::Rtl::EnsureRemainingBufferBytes<class Windows::Auto<struct _UNICODE_STRING> * __ptr64,unsigned __int64>(class Windows::Auto<struct _UNICODE_STRING> * __ptr64,unsigned __int64)" ??$EnsureRemainingBufferBytes@PEAV?$Auto@U_UNICODE_STRING@@@Windows@@_K@Rtl@StringUtil@Windows@@YAJPEAV?$Auto@U_UNICODE_STRING@@@2@_K@Z
0x180004E50: SfcGetNextProtectedFile
0x1800038B0: RtlDowncaseUCSCharacter
0x180008780: "__cdecl _imp_GetAce" __imp_GetAce
0x1800083C0: "const CFilemapEnumerationLookupContext::`vftable'" ??_7CFilemapEnumerationLookupContext@@6B@
0x1800088A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180008868: "__cdecl _imp_RtlSetLastWin32Error" __imp_RtlSetLastWin32Error
0x180009C20: "TrustedInstaller" ??_C@_1CC@EGMNKOEC@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x18000729C: RtlIsLUtf8StringValid
0x18000623C: CdfGetString
0x18000661C: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter(void) __ptr64" ?SetInvalidParameter@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180002A7C: RtlAppendLUnicodeStringToLUnicodeString
0x18000D590: ?g_pfnRtlErrorReportFunction@?A0x98913741@@3P6AXPEBU_RTL_CALL_SITE@ErrorHandling@Windows@@AEBU_GUID@@K@ZEA
0x180003A30: "public: virtual void __cdecl CFilemapEnumerationLookupContext::Release(void) __ptr64" ?Release@CFilemapEnumerationLookupContext@@UEAAXXZ
0x180009BD0: "\SystemRoot" ??_C@_1BI@OMNCDEIM@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18000893C: "__cdecl _guard_iat_table" __guard_iat_table
0x180003DED: memcpy
0x1800086E0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000662C: RtlTranscodeLBlobs
0x180005F80: IsKeyProtected
0x180008890: "__cdecl _imp_memset" __imp_memset
0x18000BDD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180006434: LuaCdfEnumFiles
0x18000396C: "public: void __cdecl Windows::Rtl::AutoString<struct _LUNICODE_STRING,class Windows::Auto<struct _LUNICODE_STRING> >::Close(void) __ptr64" ?Close@?$AutoString@U_LUNICODE_STRING@@V?$Auto@U_LUNICODE_STRING@@@Windows@@@Rtl@Windows@@QEAAXXZ
0x1800086A0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180003CCE: "__cdecl _C_specific_handler" __C_specific_handler
0x180001778: IsLuaCdfFile
0x180003DF9: memmove
0x180008810: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1800086C0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000F000: "__cdecl _imp_PnpIsFilePnpDriver" __imp_PnpIsFilePnpDriver
0x180008748: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003D8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001DF4: RtlReallocateLUnicodeString
0x180005208: "long __cdecl Windows::StringUtil::Rtl::DuplicateString<class Windows::Auto<struct _LUNICODE_STRING>,class Windows::AutoOperatorAmpersandHelper<struct _UNICODE_STRING,class Windows::Auto<struct _UNICODE_STRING> > >(class Windows::Auto<struct _LUNICODE_STRING> const & __ptr64,class Windows::AutoOperatorAmpersandHelper<struct _UNICODE_STRING,class Windows::Auto<struct _UNICODE_STRING> >)" ??$DuplicateString@V?$Auto@U_LUNICODE_STRING@@@Windows@@V?$AutoOperatorAmpersandHelper@U_UNICODE_STRING@@V?$Auto@U_UNICODE_STRING@@@Windows@@@2@@Rtl@StringUtil@Windows@@YAJAEBV?$Auto@U_LUNICODE_STRING@@@2@V?$AutoOperatorAmpersandHelper@U_UNICODE_STRING@@V?$Auto@U_UNICODE_STRING@@@Windows@@@2@@Z
0x180006D68: RtlConvertWin32FilePathToNtFilePath
0x180008828: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180003830: RtlUpcaseUCSCharacter
0x18000BE24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180008980: "WinSxS\FileMaps" ??_C@_1CA@GOEFBMFP@?$AAW?$AAi?$AAn?$AAS?$AAx?$AAS?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAM?$AAa?$AAp?$AAs?$AA?$AA@
0x180001190: CdfSearchStringTable
0x180005C00: "public: virtual long __cdecl CFilemapEnumerationLookupContext::ReadAt(unsigned __int64,unsigned __int64,void * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?ReadAt@CFilemapEnumerationLookupContext@@UEAAJ_K0PEAXPEA_K@Z
0x180009C70: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180005120: "class BUCL::Rtl::CCallDisposition __cdecl BUCL::Implementation::ConvertInteger<class BUCL::Rtl::CCallDisposition,unsigned __int64,unsigned short>(unsigned __int64,unsigned short & __ptr64)" ??$ConvertInteger@VCCallDisposition@Rtl@BUCL@@_KG@Implementation@BUCL@@YA?AVCCallDisposition@Rtl@1@_KAEAG@Z
0x18000661C: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter_NullPointer(void) __ptr64" ?SetInvalidParameter_NullPointer@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180008A40: ".cdf-ms" ??_C@_1BA@IMHLNELP@?$AA?4?$AAc?$AAd?$AAf?$AA?9?$AAm?$AAs?$AA?$AA@
0x18000D59C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll
0x180008658: g_LUNICODE_STRING__bslash__q__q__bslash_UNC_bslash_
0x1800072C4: RtlGetCharacterSetDecoder
0x180008850: "__cdecl _imp_ZwQueryInformationFile" __imp_ZwQueryInformationFile
0x1800053D4: "bool __cdecl Windows::StringUtil::Impl::TrySplitStringOnAsciiPredicateMatch<struct _LUNICODE_STRING,class Windows::StringUtil::Impl::NtSlashPredicate>(enum Windows::StringUtil::Impl::TrySplitStringOnAsciiPredicateMatchFlags,struct _LUNICODE_STRING const & __ptr64,class Windows::StringUtil::Impl::NtSlashPredicate const & __ptr64,struct _LUNICODE_STRING * __ptr64,struct _LUNICODE_STRING * __ptr64)" ??$TrySplitStringOnAsciiPredicateMatch@U_LUNICODE_STRING@@VNtSlashPredicate@Impl@StringUtil@Windows@@@Impl@StringUtil@Windows@@YA_NW4TrySplitStringOnAsciiPredicateMatchFlags@012@AEBU_LUNICODE_STRING@@AEBVNtSlashPredicate@012@PEAU4@3@Z
0x180001008: CdfGetUtf8String
0x180001544: RtlFileMapMapView
0x180001F00: RtlAllocateUnicodeString
0x180008760: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x1800086B0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180009C60: "\??\H:" ??_C@_1O@KCOLNKAF@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAH?$AA?3?$AA?$AA@
0x180002EF0: "long __cdecl RtlpFilterLUnicodeStringCallback(void * __ptr64,unsigned long)" ?RtlpFilterLUnicodeStringCallback@@YAJPEAXK@Z
0x1800087B8: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x180008728: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180002FD0: RtlIsUnicodeStringValid
0x180002970: "long __cdecl TrimStringToDriveRelative(struct _LUNICODE_STRING const * __ptr64,struct _LUNICODE_STRING * __ptr64,unsigned long * __ptr64)" ?TrimStringToDriveRelative@@YAJPEBU_LUNICODE_STRING@@PEAU1@PEAK@Z
0x180008708: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x180003788: CdfFreeContext
0x180008838: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000534C: "long __cdecl Windows::StringUtil::Rtl::SplitNtPath<struct _LUNICODE_STRING>(struct _LUNICODE_STRING const & __ptr64,struct _LUNICODE_STRING * __ptr64,struct _LUNICODE_STRING * __ptr64)" ??$SplitNtPath@U_LUNICODE_STRING@@@Rtl@StringUtil@Windows@@YAJAEBU_LUNICODE_STRING@@PEAU3@1@Z
0x180008860: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000381C: "long __cdecl CdfpReportErrorInner(long,int)" ?CdfpReportErrorInner@@YAJJH@Z
0x18000BD84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x18000D588: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhfyhbhUhnUhuxUwooUlyquivUznwGEUkivxlnkOlyq@sfc_os" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhfyhbhUhnUhuxUwooUlyquivUznwGEUkivxlnkOlyq@sfc_os
0x180003D68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180002910: "unsigned long __cdecl LuaCdfFileMapNameTransform(unsigned long)" ?LuaCdfFileMapNameTransform@@YAKK@Z
0x180001FF8: RtlAppendLUnicodeStringToUnicodeString
0x180008750: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x180005ED0: InitTrustedSid
0x1800064F0: LuaCdfGetMapTargetDirectory
0x180003A30: "public: virtual void __cdecl CCodeIntegrityLookupContext::Release(void) __ptr64" ?Release@CCodeIntegrityLookupContext@@UEAAXXZ
0x180008880: "__cdecl _imp_NtQueryDirectoryFile" __imp_NtQueryDirectoryFile
0x18000BE38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180008720: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000BE10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x1800087A0: "__cdecl _imp_RtlReAllocateHeap" __imp_RtlReAllocateHeap
0x180006A1C: RtlReportErrorOrigination
0x180009C70: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180009BA0: "SRSetRestorePointA" ??_C@_0BD@BOLGBJDG@SRSetRestorePointA?$AA@
0x1800013F4: CdfGetSection
0x1800087C8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800039C0: SfcDllEntry
0x18000D580: "__cdecl _hmod__SETUPAPI_dll" __hmod__SETUPAPI_dll
0x1800086F0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180008808: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x18000BACC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180008970: "__cdecl _sz_SETUPAPI_dll" __sz_SETUPAPI_dll
0x180005494: "void * __ptr64 __cdecl CipRtlReallocateStringRoutine(unsigned __int64,void * __ptr64)" ?CipRtlReallocateStringRoutine@@YAPEAX_KPEAX@Z
0x180003A40: SfcInitiateScan
0x1800037F0: "void __cdecl CdfpFreeMemory(void * __ptr64)" ?CdfpFreeMemory@@YAXPEAX@Z
0x180009BE8: "\SystemRoot\WinSxS\FileMaps" ??_C@_1DI@GJGCHBIA@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAS?$AAx?$AAS?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAM?$AAa?$AAp?$AAs?$AA?$AA@
0x1800086A8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180003140: "long __cdecl CdfpGetToc(struct _CDF_CONTEXT * __ptr64)" ?CdfpGetToc@@YAJPEAU_CDF_CONTEXT@@@Z
0x180006934: RtlReallocateUnicodeString
0x18000BE4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800086F8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18000BB20: SETUPAPI_NULL_THUNK_DATA_DLB
0x18000F008: SETUPAPI_NULL_THUNK_DATA_DLA
0x1800087C0: "__cdecl _imp_RtlCopyMappedMemory" __imp_RtlCopyMappedMemory
0x18000BAF8: SETUPAPI_NULL_THUNK_DATA_DLN
0x18000BDFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180005504: "public: void __cdecl CFilemapEnumerationLookupContext::Close(void) __ptr64" ?Close@CFilemapEnumerationLookupContext@@QEAAXXZ
0x1800087B0: "__cdecl _imp_ZwMapViewOfSection" __imp_ZwMapViewOfSection
0x1800022E0: RtlCompareEncodedLBlobs
0x1800088A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180009BB8: "SRSetRestorePointW" ??_C@_0BD@CCOKMOB@SRSetRestorePointW?$AA@
0x180008710: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002FA8: RtlIsLBlobValid
0x1800016F0: SfcIsFileProtected
0x180008870: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180003000: "long __cdecl LuaCdfpFetchFileTable(struct _LUACDF_CONTEXT * __ptr64)" ?LuaCdfpFetchFileTable@@YAJPEAU_LUACDF_CONTEXT@@@Z
0x180008778: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003948: CipRtlAllocateStringRoutine
0x180008770: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180001120: LuaCdfLookupFileEntry
0x180008680: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000BAAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SETUPAPI_dll
0x180008798: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180003A40: SfcFileException
0x180005AB8: "public: long __cdecl CFilemapEnumerationLookupContext::OpenRelativeFile(void * __ptr64,struct _UNICODE_STRING * __ptr64) __ptr64" ?OpenRelativeFile@CFilemapEnumerationLookupContext@@QEAAJPEAXPEAU_UNICODE_STRING@@@Z
0x18000BDAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180003A30: SfcClose
0x180008640: g_uc_LUNICODE_STRING__bslash__q__q__bslash_
0x1800014D0: RtlAllocateLBlob
0x180008800: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x180003A60: "__cdecl _security_check_cookie" __security_check_cookie
0x18000AEA8: g_RGWCH__bslash__q__q__bslash_
0x180008730: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800018F4: "public: __cdecl CCodeIntegrityLookupContext::~CCodeIntegrityLookupContext(void) __ptr64" ??1CCodeIntegrityLookupContext@@QEAA@XZ
0x1800086E8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180003CE6: "__cdecl _tailMerge_setupapi_dll" __tailMerge_setupapi_dll
0x180008768: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800020D0: "long __cdecl RtlpFilterLUnicodeStringEngine(unsigned long,struct _LUNICODE_STRING const * __ptr64,unsigned __int64,unsigned long,struct RTL_FILTER_LUNICODE_STRING_FILTER * __ptr64,long (__cdecl*)(void * __ptr64,unsigned long),void * __ptr64,unsigned char * __ptr64)" ?RtlpFilterLUnicodeStringEngine@@YAJKPEBU_LUNICODE_STRING@@_KKPEAURTL_FILTER_LUNICODE_STRING_FILTER@@P6AJPEAXK@Z3PEAE@Z
0x180003734: RtlFreeLBlob
0x1800086C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180008670: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180008000: "const CCodeIntegrityLookupContext::`vftable'" ??_7CCodeIntegrityLookupContext@@6B@
0x180004F10: SRSetRestorePointA
0x180001E64: RtlReallocateLBlob
0x1800087F0: "__cdecl _imp_RtlCreateServiceSid" __imp_RtlCreateServiceSid
0x180003A30: SfcTerminateWatcherThread
0x180008740: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800088B0: "__cdecl _guard_fids_table" __guard_fids_table
0x180003280: CdfInitializeContext
0x180008050: "__cdecl load_config_used" _load_config_used
0x180001D98: RtlEqualLUnicodeStrings
0x180008688: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180008678: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000AE90: g_RGWCH__bslash__q__q__bslash_UNC_bslash_
0x1800051D4: "void __cdecl Windows::StringUtil::DropTrailingNtPathSlashes<class Windows::AutoOperatorAmpersandHelper<struct _LUNICODE_STRING,class Windows::Auto<struct _LUNICODE_STRING> > >(class Windows::AutoOperatorAmpersandHelper<struct _LUNICODE_STRING,class Windows::Auto<struct _LUNICODE_STRING> >)" ??$DropTrailingNtPathSlashes@V?$AutoOperatorAmpersandHelper@U_LUNICODE_STRING@@V?$Auto@U_LUNICODE_STRING@@@Windows@@@Windows@@@StringUtil@Windows@@YAXV?$AutoOperatorAmpersandHelper@U_LUNICODE_STRING@@V?$Auto@U_LUNICODE_STRING@@@Windows@@@1@@Z
0x1800087E0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1800056E0: "public: long __cdecl CCiFileMapEnumContext::MoveToNextFileMapFile(void) __ptr64" ?MoveToNextFileMapFile@CCiFileMapEnumContext@@QEAAJXZ
0x180004ED0: SfcIsKeyProtected
0x180006A54: RtlCombineNtPathSegments
0x180008830: "__cdecl _imp_ZwUnmapViewOfSection" __imp_ZwUnmapViewOfSection
0x180003860: RtlDecodeUtf8
0x180006808: RtlConcatenateLUnicodeStrings
0x180005050: SfpInstallCatalog
0x1800070EC: RtlCalculateUtf16StringLengthFromLUtf8String
0x180008700: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180005154: "long __cdecl Windows::StringUtil::Rtl::ConvertWin32FilePathToNtFilePath<wchar_t const * __ptr64>(wchar_t const * __ptr64 const & __ptr64,class Windows::Auto<struct _LUNICODE_STRING> * __ptr64)" ??$ConvertWin32FilePathToNtFilePath@PEB_W@Rtl@StringUtil@Windows@@YAJAEBQEB_WPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
0x1800087A8: "__cdecl _imp_NtClose" __imp_NtClose
0x180008858: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180008738: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800038E0: "public: virtual long __cdecl CCodeIntegrityLookupContext::ReadAt(unsigned __int64,unsigned __int64,void * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?ReadAt@CCodeIntegrityLookupContext@@UEAAJ_K0PEAXPEA_K@Z
0x180007028: RtlTrimNtPathSegment
0x1800087F8: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x1800036AC: CdfGetBlobSize
0x180006370: CdfGetStringTableIndex
0x180008840: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003A40: "__cdecl purecall" _purecall
0x180009C78: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180003A30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000720C: RtlCopyLUtf8StringToLUnicodeString
0x18000BDE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800073B0: RtlGetEncodingSizeUtf16
0x180003A40: SfcInstallProtectedFiles
0x1800060FC: IsWrpKeyDescriptor
0x180004D40: CloseFileMapEnumeration
0x180002B40: RtlIsLUnicodeStringValid
0x180005530: "public: virtual long __cdecl CFilemapEnumerationLookupContext::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@CFilemapEnumerationLookupContext@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@Windows@@@Z
0x180008898: ntdll_NULL_THUNK_DATA
0x180008888: "__cdecl _imp_memcpy" __imp_memcpy
0x180008790: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x1800073E0: "unsigned long __cdecl FsnpDowncaseChar(unsigned long)" ?FsnpDowncaseChar@@YAKK@Z
0x18000D000: "__cdecl _security_cookie" __security_cookie
0x18000198C: "public: long __cdecl CCodeIntegrityLookupContext::OpenCdfFile(struct _UNICODE_STRING * __ptr64) __ptr64" ?OpenCdfFile@CCodeIntegrityLookupContext@@QEAAJPEAU_UNICODE_STRING@@@Z
0x1800086B8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004D90: GetNextFileMapContent
0x1800086D0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000BD98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180008698: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800035C0: CdfGetBlob
0x180008758: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180003BFC: "__cdecl _security_init_cookie" __security_init_cookie
0x180009B80: "SRCLIENT.DLL" ??_C@_1BK@KPFFJIBG@?$AAS?$AAR?$AAC?$AAL?$AAI?$AAE?$AAN?$AAT?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180005854: "public: long __cdecl CCiFileMapEnumContext::NextProtectedFile(unsigned __int64,void * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?NextProtectedFile@CCiFileMapEnumContext@@QEAAJ_KPEAXPEA_K@Z
0x180008848: "__cdecl _imp_memmove" __imp_memmove
0x180008640: g_LUNICODE_STRING__bslash__q__q__bslash_
0x18000D598: g_NTSTATUS_to_break_on
0x180004CF0: BeginFileMapEnumeration
0x180003A90: "__cdecl _report_gsfailure" __report_gsfailure
0x180002450: LuaCdfGenerateFilemapFileName
0x180001F80: RtlInitLUnicodeStringFromNullTerminatedString
0x1800087E8: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180008878: "__cdecl _imp_ShipAssertMsgW" __imp_ShipAssertMsgW
0x180008960: "__cdecl GUID_38218435_079f_49e9_bb3f_149cb22b88cd" _GUID_38218435_079f_49e9_bb3f_149cb22b88cd
0x180005584: "public: long __cdecl CCiFileMapEnumContext::Init(class Windows::Auto<struct _LUNICODE_STRING>) __ptr64" ?Init@CCiFileMapEnumContext@@QEAAJV?$Auto@U_LUNICODE_STRING@@@Windows@@@Z
0x180008788: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x180009B50: "SfcGetNextProtectedFile" ??_C@_1DA@IJOOECBC@?$AAS?$AAf?$AAc?$AAG?$AAe?$AAt?$AAN?$AAe?$AAx?$AAt?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x18000BDC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180001A40: LuaCdfCreateFileNameForFile
0x180001CA4: RtlFilterLUnicodeString
0x180008820: "__cdecl _imp_ZwCreateSection" __imp_ZwCreateSection
0x180003BDC: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180005050: SfcInitProt
0x180007324: RtlGetCharacterSetEncoder
0x180003E05: memset
0x18000BE60: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180004FB0: SRSetRestorePointW

[JEB Decompiler by PNF Software]