Generated by JEB on 2019/08/01

PE: C:\Windows\System32\perfts.dll Base=0x162000000 SHA-256=0EE01E05C8BCCF58CA1E50FA3013B4A4C71B61AAD9A7232729C1AB22E8732426
PDB: perfts.pdb GUID={9944D7EF-5E37-F80C-278668E7206AF9E9} Age=1

366 located named symbols:
0x162004490: "void __cdecl InitDefinition(struct _USER_INPUT_DELAY_DEFINITION * __ptr64,unsigned long)" ?InitDefinition@@YAXPEAU_USER_INPUT_DELAY_DEFINITION@@K@Z
0x1620011AC: "__cdecl DbgPrintMessage" _DbgPrintMessage
0x162006024: "__cdecl _raise_securityfailure" __raise_securityfailure
0x162007860: "Lag counter show unknown set" ??_C@_0BN@OHPEJDFJ@Lag?5counter?5show?5unknown?5set?$AA@
0x1620061F0: "__cdecl FindPESection" _FindPESection
0x162006520: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x162007388: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x162009098: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x162007570: "\Registry\Machine\System\Current" ??_C@_1JI@NPGHGMJL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x16200A0A0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1620073E8: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x162007830: "Lag counter Report Process Name " ??_C@_0CK@IFLOBKJJ@Lag?5counter?5Report?5Process?5Name?5@
0x162002848: "class CounterHelper * __ptr64 __cdecl CreateOrGetProcCounter(unsigned long)" ?CreateOrGetProcCounter@@YAPEAVCounterHelper@@K@Z
0x162005B1C: "__cdecl CRT_INIT" _CRT_INIT
0x1620072A0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1620065CF: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1620064E0: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x1620072D0: "__cdecl _imp_WinStationFreeMemory" __imp_WinStationFreeMemory
0x162007428: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1620067C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1620076A0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1GK@EDCNPJHK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x162007ED8: "Tried to stop zombie ETW Trace" ??_C@_0BP@PMKDJBNK@Tried?5to?5stop?5zombie?5ETW?5Trace?$AA@
0x162007EF8: "Error calling QueryAllTraces" ??_C@_0BN@NBKHAEG@Error?5calling?5QueryAllTraces?$AA@
0x162007A28: "Failed to create buffer." ??_C@_0BJ@NKKGPIFA@Failed?5to?5create?5buffer?4?$AA@
0x1620082F8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x162007D80: "OpenTrace failed with bad path i" ??_C@_0CO@FLHKNGED@OpenTrace?5failed?5with?5bad?5path?5i@
0x162007800: "LagCounterCleanZombie" ??_C@_1CM@MPOCHLFH@?$AAL?$AAa?$AAg?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAC?$AAl?$AAe?$AAa?$AAn?$AAZ?$AAo?$AAm?$AAb?$AAi?$AAe?$AA?$AA@
0x162007350: "__cdecl _imp_wcstoul" __imp_wcstoul
0x162001630: ConstructSessionName
0x162002C00: "public: void __cdecl CounterHelper::DeleteCounter(int) __ptr64" ?DeleteCounter@CounterHelper@@QEAAXH@Z
0x162007730: "System\CurrentControlSet\Control" ??_C@_1GC@BOHKHHOK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x162007F90: "SYSTEM\CurrentControlSet\Service" ??_C@_1GC@KFPJKIPF@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x162007318: "__cdecl _imp_wcsncat_s" __imp_wcsncat_s
0x162001130: StringCchPrintfA
0x162005608: "public: static unsigned long __cdecl LagCounterManager::PerfCloseDataCallback(void)" ?PerfCloseDataCallback@LagCounterManager@@SAKXZ
0x162007218: "__cdecl _imp_SetEvent" __imp_SetEvent
0x162001008: "__cdecl TlgWrite" _TlgWrite
0x162007490: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x162007940: "Unknown <%u>" ??_C@_1BK@FJCAJNKB@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$DM?$AA?$CF?$AAu?$AA?$DO?$AA?$AA@
0x162007C50: "StartTrace() failed with" ??_C@_0BJ@NEAHENNN@StartTrace?$CI?$CJ?5failed?5with?$AA@
0x162002350: CloseLagPerfData
0x1620090AC: "__cdecl _IMPORT_DESCRIPTOR_WINSTA" __IMPORT_DESCRIPTOR_WINSTA
0x16200A938: MESSAGE_LEVEL
0x1620061D7: "__cdecl XcptFilter" _XcptFilter
0x162007498: "__cdecl _xc_a" __xc_a
0x162007400: "__cdecl _imp_wcsstr" __imp_wcsstr
0x162001540: CloseTSObject
0x16200176C: CreateNewHashBuckets
0x162002D78: "bool __cdecl MakeBufferForControl(struct _EVENT_TRACE_PROPERTIES * __ptr64 * __ptr64)" ?MakeBufferForControl@@YA_NPEAPEAU_EVENT_TRACE_PROPERTIES@@@Z
0x162008070: "Failed to start all threads for " ??_C@_0EI@BOAOPIJM@Failed?5to?5start?5all?5threads?5for?5@
0x1620071F8: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x162006489: "__cdecl lock" _lock
0x16200A940: "public: static unsigned long LagCounterManager::dwOpenPerfCount" ?dwOpenPerfCount@LagCounterManager@@2KA
0x16200662C: "__cdecl callnewh" _callnewh
0x162007CB0: "EnableTrace() failed in Lag Coun" ??_C@_0DJ@PEPHMLPJ@EnableTrace?$CI?$CJ?5failed?5in?5Lag?5Coun@
0x162007530: "__cdecl _guard_iat_table" __guard_iat_table
0x162005AB0: "int __cdecl swprintf_s<260>(unsigned short (& __ptr64)[260],unsigned short const * __ptr64,...)" ??$swprintf_s@$0BAE@@@YAHAEAY0BAE@GPEBGZZ
0x162006795: memcpy
0x162007F70: "%s-%u" ??_C@_1M@HADFBIEP@?$AA?$CF?$AAs?$AA?9?$AA?$CF?$AAu?$AA?$AA@
0x162006710: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x162007188: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x162007408: "__cdecl _imp_memset" __imp_memset
0x1620077D0: "LagCounterShowUnknown" ??_C@_1CM@BPLCADHP@?$AAL?$AAa?$AAg?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAS?$AAh?$AAo?$AAw?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x1620063AF: "__cdecl initterm" _initterm
0x1620064B8: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x1620014F0: OpenTSObject
0x16200AE78: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x162007268: "__cdecl _imp_Sleep" __imp_Sleep
0x1620074C8: "__cdecl _xi_z" __xi_z
0x162007270: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x16200AEE0: UnusedList
0x1620063BB: "__cdecl _C_specific_handler" __C_specific_handler
0x162007550: "%s " ??_C@_03OFAPEBGM@?$CFs?6?$AA@
0x162007D28: "OpenTrace failed in Lag Counter" ??_C@_0CA@IJAFPKMH@OpenTrace?5failed?5in?5Lag?5Counter?$AA@
0x162007890: "Average" ??_C@_1BA@MGPKPNHJ@?$AAA?$AAv?$AAe?$AAr?$AAa?$AAg?$AAe?$AA?$AA@
0x162007308: "__cdecl _imp__onexit" __imp__onexit
0x162007B20: "TdhGetProperty failed" ??_C@_0BG@HDLOKABB@TdhGetProperty?5failed?$AA@
0x162007230: "__cdecl _imp_HeapFree" __imp_HeapFree
0x16200584C: "public: unsigned long __cdecl CHashMap<class CounterHelper * __ptr64>::Insert(unsigned long,class CounterHelper * __ptr64) __ptr64" ?Insert@?$CHashMap@PEAVCounterHelper@@@@QEAAKKPEAVCounterHelper@@@Z
0x1620057D4: "public: void __cdecl CHashMap<class CounterHelper * __ptr64>::DestroyHash(void) __ptr64" ?DestroyHash@?$CHashMap@PEAVCounterHelper@@@@QEAAXXZ
0x16200318C: "unsigned long __cdecl GetProperty(struct _EVENT_RECORD * __ptr64,struct _TRACE_EVENT_INFO * __ptr64,unsigned short,unsigned long & __ptr64)" ?GetProperty@@YAKPEAU_EVENT_RECORD@@PEAU_TRACE_EVENT_INFO@@GAEAK@Z
0x1620080E0: "pdh.dll" ??_C@_1BA@HMPOAHMP@?$AAp?$AAd?$AAh?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1620020EC: MonOpenEventLog
0x16200AC10: "public: static class CHashMap<class CounterHelper * __ptr64> CounterHelper::ProcessesToCounter" ?ProcessesToCounter@CounterHelper@@2V?$CHashMap@PEAVCounterHelper@@@@A
0x162007150: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1620066AC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x162007200: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x162007160: "__cdecl _imp_OpenTraceW" __imp_OpenTraceW
0x162008050: "Starting Lag Counter thread..." ??_C@_0BP@GALKIHHM@Starting?5Lag?5Counter?5thread?4?4?4?$AA@
0x1620061E3: "__cdecl amsg_exit" _amsg_exit
0x162007398: "__cdecl _imp__callnewh" __imp__callnewh
0x162002CA4: "public: class CounterHelper * __ptr64 __cdecl CounterHelper::CreateOrGetSessionCounterHelper(class CounterHelper * __ptr64) __ptr64" ?CreateOrGetSessionCounterHelper@CounterHelper@@QEAAPEAV1@PEAV1@@Z
0x16200AE10: "public: static class CounterHelper * __ptr64 __ptr64 CounterHelper::MachineCounter" ?MachineCounter@CounterHelper@@2PEAV1@EA
0x162007F20: "Terminal-Services-LSM-Applicatio" ??_C@_1EK@LGBFHDBG@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AA?9?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?9?$AAL?$AAS?$AAM?$AA?9?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x162007DF8: "ProcessTrace failed in Lag Count" ??_C@_0CD@EAHLIFFI@ProcessTrace?5failed?5in?5Lag?5Count@
0x16200AE38: "public: static int CounterHelper::LagCounterImageNameFirst" ?LagCounterImageNameFirst@CounterHelper@@2HA
0x1620079F0: "Unknown status for Session Lag T" ??_C@_0DG@FDGECMKO@Unknown?5status?5for?5Session?5Lag?5T@
0x1620072F0: "__cdecl _imp_WTSEnumerateProcessesW" __imp_WTSEnumerateProcessesW
0x162009110: "__cdecl _IMPORT_DESCRIPTOR_tdh" __IMPORT_DESCRIPTOR_tdh
0x16200A910: pProcessBuffer
0x162007710: "EventLogLevel" ??_C@_1BM@EKOKKIAI@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x162007320: "__cdecl _imp__lock" __imp__lock
0x1620072C8: UTILDLL_NULL_THUNK_DATA
0x16200645C: atexit
0x162007540: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x162007624: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x16200AAE8: "public: static struct _USER_INPUT_DELAY_DEFINITION LagCounterManager::SessionDef" ?SessionDef@LagCounterManager@@2U_USER_INPUT_DELAY_DEFINITION@@A
0x162007CF0: "EnableTrace() failed in Lag Coun" ??_C@_0DE@LACIFNHH@EnableTrace?$CI?$CJ?5failed?5in?5Lag?5Coun@
0x162007280: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1620064A1: "__cdecl _dllonexit" __dllonexit
0x1620078A0: "LagCounter->CounterHelper: Could" ??_C@_0EC@DMGLJCEE@LagCounter?9?$DOCounterHelper?3?5Could@
0x16200AE68: "__cdecl _native_startup_lock" __native_startup_lock
0x162001258: DllMain
0x162007C70: "EnableTrace() failed in Lag Coun" ??_C@_0DM@PAHFOCIH@EnableTrace?$CI?$CJ?5failed?5in?5Lag?5Coun@
0x162008010: "Lag Counter is being registered" ??_C@_0CA@MFKEIEMF@Lag?5Counter?5is?5being?5registered?$AA@
0x162002318: "__cdecl TlgDefineProvider_annotation__Tlgg_ProviderToUseProv" _TlgDefineProvider_annotation__Tlgg_ProviderToUseProv
0x1620073B8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x162007440: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1620078E4: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x1620072B8: KERNEL32_NULL_THUNK_DATA
0x162007240: "__cdecl _imp_GetLastError" __imp_GetLastError
0x162006538: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x16200A090: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x162006688: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x162007C30: "Starting Session Lag Trace" ??_C@_0BL@EIFODOLM@Starting?5Session?5Lag?5Trace?$AA@
0x1620080B8: "Done starting Lag Counter thread" ??_C@_0CF@NAMPIABH@Done?5starting?5Lag?5Counter?5thread@
0x162002E78: "int __cdecl ResetStateOfTrace(void)" ?ResetStateOfTrace@@YAHXZ
0x162007238: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x162003C50: "unsigned long __cdecl BlockOnProcessTrace(void * __ptr64)" ?BlockOnProcessTrace@@YAKPEAX@Z
0x1620090E8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x162007298: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1620071E0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x16200AE30: "public: static void * __ptr64 __ptr64 CounterHelper::LagCounterMajorEvent" ?LagCounterMajorEvent@CounterHelper@@2PEAXEA
0x1620062A0: "__cdecl ValidateImageBase" _ValidateImageBase
0x162007E78: "ApplicationLag-" ??_C@_1CA@MHMEDOEO@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAL?$AAa?$AAg?$AA?9?$AA?$AA@
0x162006605: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x162007170: "__cdecl _imp_FlushTraceW" __imp_FlushTraceW
0x16200A000: pWinStationHashBuckets
0x162008030: "Failed to create hStartedEvent" ??_C@_0BP@FODELAI@Failed?5to?5create?5hStartedEvent?$AA@
0x1620090FC: "__cdecl _IMPORT_DESCRIPTOR_WTSAPI32" __IMPORT_DESCRIPTOR_WTSAPI32
0x16200AE3C: "public: static unsigned long LagCounterManager::dwFirstHelp" ?dwFirstHelp@LagCounterManager@@2KA
0x162007258: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x162007C10: "Out of memory for event filter" ??_C@_0BP@FOPCKMPP@Out?5of?5memory?5for?5event?5filter?$AA@
0x162007220: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x162007208: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x1620071F0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x162002330: "unsigned long __cdecl OpenLagPerfData(unsigned short * __ptr64)" ?OpenLagPerfData@@YAKPEAG@Z
0x162007F80: "LSM" ??_C@_17HILANIN@?$AAL?$AAS?$AAM?$AA?$AA@
0x162005D60: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x162007468: "__cdecl _imp_TdhGetEventInformation" __imp_TdhGetEventInformation
0x1620073C0: "__cdecl _imp__initterm" __imp__initterm
0x162007480: tdh_NULL_THUNK_DATA
0x162002250: MonBuildInstanceDefinition
0x162007DB0: "OpenTrace failed access denied i" ??_C@_0CO@DNICDPKK@OpenTrace?5failed?5access?5denied?5i@
0x162007338: "__cdecl _imp__ultow_s" __imp__ultow_s
0x162008F28: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x162007E40: "Error allocating memory for prop" ??_C@_0CI@HMMFCNGE@Error?5allocating?5memory?5for?5prop@
0x162006611: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x1620042A0: "void __cdecl InitInstance(struct _USER_INPUT_DELAY_INSTANCE * __ptr64,unsigned short * __ptr64)" ?InitInstance@@YAXPEAU_USER_INPUT_DELAY_INSTANCE@@PEAG@Z
0x162007178: "__cdecl _imp_CloseTrace" __imp_CloseTrace
0x162003444: "unsigned long __cdecl ReactSessionLogoff(unsigned long)" ?ReactSessionLogoff@@YAKK@Z
0x162008F88: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1620049D0: "public: static unsigned long __cdecl LagCounterManager::PerfOpenDataCallback(unsigned short * __ptr64)" ?PerfOpenDataCallback@LagCounterManager@@SAKPEAG@Z
0x16200AC30: "public: static class CHashMap<class CounterHelper * __ptr64> CounterHelper::SessionToCounter" ?SessionToCounter@CounterHelper@@2V?$CHashMap@PEAVCounterHelper@@@@A
0x162002340: "unsigned long __cdecl CollectLagPerfData(unsigned short * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?CollectLagPerfData@@YAKPEAGPEAPEAXPEAK2@Z
0x162005974: "public: int __cdecl CHashMap<class CounterHelper * __ptr64>::Erase(unsigned long) __ptr64" ?Erase@?$CHashMap@PEAVCounterHelper@@@@QEAAHK@Z
0x1620018B0: CollectTSObjectData
0x16200AE58: "__cdecl _onexitend" __onexitend
0x1620071B0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x162007A78: "Failed to stop ETW thread during" ??_C@_0CK@NAHBHCPE@Failed?5to?5stop?5ETW?5thread?5during@
0x162007E98: "This etw trace is alive" ??_C@_0BI@ODBFBPGG@This?5etw?5trace?5is?5alive?$AA@
0x162006495: "__cdecl unlock" _unlock
0x162007488: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1620073A0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x162006650: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x162007288: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x162007140: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x162007998: "Session Lag Trace was running, s" ??_C@_0CJ@MEEHPMCL@Session?5Lag?5Trace?5was?5running?0?5s@
0x162007880: "Max" ??_C@_17EFGGKDCG@?$AAM?$AAa?$AAx?$AA?$AA@
0x162007DE0: "Getting traces now" ??_C@_0BD@OBGOPHOD@Getting?5traces?5now?$AA@
0x162007450: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x162007478: "__cdecl _imp_TdhGetPropertySize" __imp_TdhGetPropertySize
0x16200AE28: "public: static struct HINSTANCE__ * __ptr64 __ptr64 LagCounterManager::hPdhLib" ?hPdhLib@LagCounterManager@@2PEAUHINSTANCE__@@EA
0x1620074B8: "__cdecl _xi_a" __xi_a
0x162007228: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x162007360: "__cdecl _imp__unlock" __imp__unlock
0x162006590: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x162008F60: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x16200A0B0: WinStationHashMask
0x1620073F0: "__cdecl _imp__ltow" __imp__ltow
0x16200772C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x162007908: "%s:%u <%s>" ??_C@_1BG@NAELECIL@?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAu?$AA?5?$AA?$DM?$AA?$CF?$AAs?$AA?$DO?$AA?$AA@
0x16200AE80: "__cdecl pRawDllMain" _pRawDllMain
0x162007BE8: "GetProperty for logoff in lagcou" ??_C@_0CF@HICBKIGA@GetProperty?5for?5logoff?5in?5lagcou@
0x1620059E8: "public: int __cdecl CHashMap<class CounterHelper * __ptr64>::GetNext(unsigned long * __ptr64,unsigned long * __ptr64,class CounterHelper * __ptr64 * __ptr64,class CMapNode<class CounterHelper * __ptr64> * __ptr64 * __ptr64) __ptr64" ?GetNext@?$CHashMap@PEAVCounterHelper@@@@QEAAHPEAK0PEAPEAVCounterHelper@@PEAPEAV?$CMapNode@PEAVCounterHelper@@@@@Z
0x1620079C8: "Session Lag Trace was not runnin" ??_C@_0CD@OOCNFLMD@Session?5Lag?5Trace?5was?5not?5runnin@
0x1620073B0: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x162007310: "__cdecl _imp___dllonexit" __imp___dllonexit
0x1620071D8: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x1620065DB: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x162007348: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x162007020: "const type_info::`vftable'" ??_7type_info@@6B@
0x162007448: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x1620073F8: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x162006000: "__cdecl _security_check_cookie" __security_check_cookie
0x1620074B0: "__cdecl _xc_z" __xc_z
0x16200A928: NumCachedWinStations
0x16200A0C0: WinStationDataDefinition
0x162006638: "__cdecl CxxThrowException" _CxxThrowException
0x1620078E8: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1620073A8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1620085D1: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1620072A8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x162007250: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x16200A048: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x16200A8E0: SysTimeInfo
0x162007B68: "TdhGetEvent in Lag counter input" ??_C@_0CI@PCOCHDGP@TdhGetEvent?5in?5Lag?5counter?5input@
0x162007AD0: "TdhGetPropertySize failed" ??_C@_0BK@MOIJEGIA@TdhGetPropertySize?5failed?$AA@
0x162007260: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x16200A0B4: NumWinStationHashBuckets
0x162006650: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x162007210: "__cdecl _imp_Process32NextW" __imp_Process32NextW
0x16200AAE0: "public: static unsigned __int64 LagCounterManager::hTrace" ?hTrace@LagCounterManager@@2_KA
0x162007EB0: "Found a zombie ETW trace, stop i" ??_C@_0CC@LHPELPBB@Found?5a?5zombie?5ETW?5trace?0?5stop?5i@
0x162007E68: "Found sessions" ??_C@_0P@GDKDCEMD@Found?5sessions?$AA@
0x16200AB78: "public: static struct _USER_INPUT_DELAY_DEFINITION LagCounterManager::ProcessDef" ?ProcessDef@LagCounterManager@@2U_USER_INPUT_DELAY_DEFINITION@@A
0x1620074D0: "__cdecl _guard_fids_table" __guard_fids_table
0x162007340: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x162007180: "__cdecl _imp_ProcessTrace" __imp_ProcessTrace
0x162007410: msvcrt_NULL_THUNK_DATA
0x162007030: "__cdecl load_config_used" _load_config_used
0x162007378: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x162006590: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x1620071E8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x16200AE50: "public: static int LagCounterManager::bPendingShutdown" ?bPendingShutdown@LagCounterManager@@2HA
0x1620016F4: AddWinStationInfoToCache
0x16200AE20: "public: static unsigned long LagCounterManager::dwFirstCounter" ?dwFirstCounter@LagCounterManager@@2KA
0x1620073D8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x162006620: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x1620013EC: GetDescriptionOffset
0x162002B58: "public: void __cdecl CounterHelper::Add(unsigned long) __ptr64" ?Add@CounterHelper@@QEAAXK@Z
0x1620072D8: "__cdecl _imp_WinStationEnumerateExW" __imp_WinStationEnumerateExW
0x162007198: "__cdecl _imp_QueryAllTracesW" __imp_QueryAllTracesW
0x162007248: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x162007458: "__cdecl _imp_NtClose" __imp_NtClose
0x162003680: "unsigned long __cdecl ProcessRecordCallback(struct _EVENT_RECORD * __ptr64)" ?ProcessRecordCallback@@YAKPEAU_EVENT_RECORD@@@Z
0x162007BB8: "TdhGetEventInfo for logoff in la" ??_C@_0CJ@IPJNGKKI@TdhGetEventInfo?5for?5logoff?5in?5la@
0x16200A950: "public: static unsigned short * LagCounterManager::EtwSessionName" ?EtwSessionName@LagCounterManager@@2PAGA
0x16200235C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x162007438: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1620080F0: "global" ??_C@_1O@OKHGOOCH@?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$AA@
0x162007290: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1620071D0: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x162007380: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x162007628: "PERFTS: GetSystemProcessData FAI" ??_C@_0DE@DOCLGOLB@PERFTS?3?5GetSystemProcessData?5FAI@
0x162007010: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x162007138: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x1620072C0: "__cdecl _imp_StrConnectState" __imp_StrConnectState
0x162007608: "First Counter" ??_C@_1BM@IBDHKGGM@?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?5?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1620072B0: "__cdecl _imp_Process32FirstW" __imp_Process32FirstW
0x162007430: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1620065E8: "__cdecl _std_terminate" __std_terminate
0x162007660: "PERFTS: WinStationEnumerateEx FA" ??_C@_0DF@IOLPGHAP@PERFTS?3?5WinStationEnumerateEx?5FA@
0x162006480: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x162007370: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x16200A918: hEventLog
0x162007168: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x162003570: "unsigned long __cdecl ReactSessionLogon(unsigned long)" ?ReactSessionLogon@@YAKK@Z
0x162007798: "LagCounterImageNameFirst" ??_C@_1DC@HFAFJOG@?$AAL?$AAa?$AAg?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAI?$AAm?$AAa?$AAg?$AAe?$AAN?$AAa?$AAm?$AAe?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?$AA@
0x16200AE48: "public: static void * __ptr64 __ptr64 LagCounterManager::hEtwThread" ?hEtwThread@LagCounterManager@@2PEAXEA
0x1620073E0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x162007FF8: "First Help" ??_C@_1BG@OIFOLDAB@?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?5?$AAH?$AAe?$AAl?$AAp?$AA?$AA@
0x162007460: ntdll_NULL_THUNK_DATA
0x162007300: "__cdecl _imp_memcpy" __imp_memcpy
0x16200A070: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x16200A93C: dwLogUsers
0x162007B90: "GetProperty in Lag counter input" ??_C@_0CI@FAJKAKMD@GetProperty?5in?5Lag?5counter?5input@
0x162002FF8: "public: static void __cdecl LagCounterManager::Cleanup(void)" ?Cleanup@LagCounterManager@@SAXXZ
0x162007A48: "Cleaning up Lag counter in Manag" ??_C@_0CL@LAEIDKP@Cleaning?5up?5Lag?5counter?5in?5Manag@
0x16200AEF0: UsedList
0x162007328: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x16200A098: "__cdecl _security_cookie" __security_cookie
0x1620071A0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x162005938: "public: int __cdecl CHashMap<class CounterHelper * __ptr64>::Find(unsigned long,class CounterHelper * __ptr64 * __ptr64) __ptr64" ?Find@?$CHashMap@PEAVCounterHelper@@@@QEAAHKPEAPEAVCounterHelper@@@Z
0x162007920: "%u <Unknown>" ??_C@_1BK@DDHMAOBE@?$AA?$CF?$AAu?$AA?5?$AA?$DM?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$AA@
0x162003B3C: "unsigned long __cdecl AddEventFilter(struct _ENABLE_TRACE_PARAMETERS * __ptr64,unsigned short * __ptr64,unsigned short)" ?AddEventFilter@@YAKPEAU_ENABLE_TRACE_PARAMETERS@@PEAGG@Z
0x162004EFC: "public: static unsigned long __cdecl LagCounterManager::PerfCollectDataCallback(unsigned short * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?PerfCollectDataCallback@LagCounterManager@@SAKPEAGPEAPEAXPEAK2@Z
0x1620071C0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x162007158: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x1620072E8: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x1620071B8: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x16200AE60: "__cdecl _onexitbegin" __onexitbegin
0x1620071C8: "__cdecl _imp_CreateEventExW" __imp_CreateEventExW
0x1620025DC: "public: __cdecl CounterHelper::CounterHelper(unsigned short * __ptr64,enum COUNTER_HELPER_TYPE,unsigned long,unsigned long) __ptr64" ??0CounterHelper@@QEAA@PEAGW4COUNTER_HELPER_TYPE@@KK@Z
0x1620090C0: "__cdecl _IMPORT_DESCRIPTOR_UTILDLL" __IMPORT_DESCRIPTOR_UTILDLL
0x162007330: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x162007390: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x162007278: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1620012D4: DllProcessAttach
0x1620090D4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x162007148: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1620062D4: "__cdecl _security_init_cookie" __security_init_cookie
0x162007418: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x16200A930: hLibHeap
0x1620065F9: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x162009084: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1620078F0: "%s <%s:%u>" ??_C@_1BG@GAJIDLGH@?$AA?$CF?$AAs?$AA?5?$AA?$DM?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAu?$AA?$DO?$AA?$AA@
0x162007420: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x162007368: "__cdecl _imp__wcslwr_s" __imp__wcslwr_s
0x1620073C8: "__cdecl _imp_malloc" __imp_malloc
0x1620071A8: ADVAPI32_NULL_THUNK_DATA
0x1620023DC: "void __cdecl UpdateLagCounterSettings(void)" ?UpdateLagCounterSettings@@YAXXZ
0x16200203C: UpdateWSProcessCounterBlock
0x162007B38: "Failed to delete session that wa" ??_C@_0CN@NNECLOHF@Failed?5to?5delete?5session?5that?5wa@
0x16200AE40: "public: static int CounterHelper::LagCounterShowUnknown" ?LagCounterShowUnknown@CounterHelper@@2HA
0x162006060: "__cdecl _report_gsfailure" __report_gsfailure
0x1620063C8: "__cdecl onexit" _onexit
0x162007190: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x16200AE70: "__cdecl _native_startup_state" __native_startup_state
0x162007D48: "OpenTrace failed with Invalid pa" ??_C@_0DH@OHNLMFAC@OpenTrace?5failed?5with?5Invalid?5pa@
0x162007558: "PerfTS" ??_C@_1O@BDCBEAIJ@?$AAP?$AAe?$AAr?$AAf?$AAT?$AAS?$AA?$AA@
0x16200AEA0: DefaultWinStationHashBuckets
0x162004578: "void __cdecl CleanUpZombieLagCounters(void)" ?CleanUpZombieLagCounters@@YAXXZ
0x16200A358: "public: static int CounterHelper::LagCounterCleanZombie" ?LagCounterCleanZombie@CounterHelper@@2HA
0x162007AF0: "Failed to allocate memory for pr" ??_C@_0CM@DKABHKM@Failed?5to?5allocate?5memory?5for?5pr@
0x162007358: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x16200AE18: "public: static void * __ptr64 __ptr64 LagCounterManager::hStartedEvent" ?hStartedEvent@LagCounterManager@@2PEAXEA
0x1620072E0: WINSTA_NULL_THUNK_DATA
0x16200337C: "unsigned long __cdecl ReactProcessExit(unsigned long)" ?ReactProcessExit@@YAKK@Z
0x162007470: "__cdecl _imp_TdhGetProperty" __imp_TdhGetProperty
0x1620072F8: WTSAPI32_NULL_THUNK_DATA
0x162008F48: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x162007960: "Unable to allocate for EVENT_TRA" ??_C@_0DI@POLMEEGO@Unable?5to?5allocate?5for?5EVENT_TRA@
0x1620073D0: "__cdecl _imp_free" __imp_free
0x162006240: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x162007E20: "Failed to copy instance name" ??_C@_0BN@IAAPFEIF@Failed?5to?5copy?5instance?5name?$AA@
0x162007AA8: "Error stopping trace in Lag Coun" ??_C@_0CE@KHDIBFLO@Error?5stopping?5trace?5in?5Lag?5Coun@
0x1620067A1: memset
0x162009124: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]