Generated by JEB on 2019/08/01

PE: C:\Windows\System32\loadperf.dll Base=0x117900000 SHA-256=0EF4F52CBDB77694B18C5C9BFEFD0A26C44917910F80BC1D52BDFF3EECCFE357
PDB: loadperf.pdb GUID={B1778397-C730-D774-4471A5AFE0CED927} Age=1

636 located named symbols:
0x1179018E0: "int __cdecl CheckNameTable(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,int)" ?CheckNameTable@@YAHPEAG0PEAK1H@Z
0x1179171D8: "__cdecl _imp_CreateHardLinkW" __imp_CreateHardLinkW
0x117917610: "%s%s\%04X\" ??_C@_1BG@DOKHPALF@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AA?$AA@
0x117917EAC: " %s" ??_C@_03ILJCGOLJ@?6?$CFs?$AA@
0x117902BF8: "int __cdecl IsDelimiter(unsigned short,unsigned short)" ?IsDelimiter@@YAHGG@Z
0x11790B9AC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1179171C8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x117918008: LDPRFMSG_REGISTRY_INDEX_CORRUPT
0x117917518: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x117917C30: "Object List" ??_C@_1BI@FHOEIPHK@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x11790B7D0: "__cdecl FindPESection" _FindPESection
0x117913CE0: SetServiceAsTrustedA
0x117917AD8: " %d" ??_C@_17IAIOLGBB@?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x117917FE8: LDPRFMSG_UNABLE_READ_VALUE
0x117904DCC: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x11791C678: "unsigned short * __ptr64 __ptr64 g_szInfPath" ?g_szInfPath@@3PEAGEA
0x11790B190: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x117917378: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x11790AE64: "void __cdecl ReportLoadPerfEvent(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned short,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?ReportLoadPerfEvent@@YAXPEBU_EVENT_DESCRIPTOR@@KKKKKGPEAG11@Z
0x117919E4C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x117917FC8: LDPRFMSG_UNABLE_QUERY_VALUE
0x117919FDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x117917988: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x11791C070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x117901A90: "unsigned short * __ptr64 * __ptr64 __cdecl BuildNameTable(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?BuildNameTable@@YAPEAPEAGPEAUHKEY__@@PEAGPEAK@Z
0x11790B29C: "__cdecl CRT_INIT" _CRT_INIT
0x1179172F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x117917DD8: S_LoadPerf
0x1179123E0: WppControlCallback
0x11790BE10: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x117917D00: "Trusted" ??_C@_1BA@GBNNOOAJ@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AA?$AA@
0x1179177A0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1GK@EDCNPJHK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1179171A0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1179173D0: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x117917C58: "%wsStringBackup.TMP" ??_C@_1CI@LNINHMEF@?$AA?$CF?$AAw?$AAs?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?4?$AAT?$AAM?$AAP?$AA?$AA@
0x117918028: LDPRFMSG_ALREADY_EXIST
0x11790B1FC: WPP_INIT_CONTROL_ARRAY
0x1179171F0: api-ms-win-core-file-l2-1-2_NULL_THUNK_DATA
0x1179176A8: "Installing" ??_C@_1BG@IBEMJDPO@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAi?$AAn?$AAg?$AA?$AA@
0x117917170: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x117917488: "__cdecl _imp_wcstoul" __imp_wcstoul
0x117917916: "" ??_C@_00CNPNBAHC@?$AA@
0x117917530: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1179182F0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x117917680: "WMI_SysEvent_LodCtr" ??_C@_1CI@BGELLHGE@?$AAW?$AAM?$AAI?$AA_?$AAS?$AAy?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAL?$AAo?$AAd?$AAC?$AAt?$AAr?$AA?$AA@
0x117917198: "__cdecl _imp_GetFileType" __imp_GetFileType
0x117917EF8: LDPRFMSG_REGISTRY_COUNTER_STRINGS_CORRUPT
0x117919E60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1179176C0: "LoadPerf" ??_C@_1BC@MKAFMGMP@?$AAL?$AAo?$AAa?$AAd?$AAP?$AAe?$AAr?$AAf?$AA?$AA@
0x11791D6C0: Microsoft_Windows_LoadPerfEnableBits
0x117917AF0: "NotFound" ??_C@_1BC@OCJEFINP@?$AAN?$AAo?$AAt?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?$AA@
0x117917240: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x117919C18: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x117917428: "__cdecl _imp_wcschr" __imp_wcschr
0x11790B0B0: WppInitUm
0x117917390: "__cdecl _imp_SetEvent" __imp_SetEvent
0x117917560: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x11790A330: "int __cdecl MakeBackupCopyOfLanguageFiles(unsigned short const * __ptr64)" ?MakeBackupCopyOfLanguageFiles@@YAHPEBG@Z
0x117919EC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x117919F14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2
0x117918268: "%wsPERFLIB\0000\perfd.dat" ??_C@_1DE@JKPJBNJH@?$AA?$CF?$AAw?$AAs?$AAP?$AAE?$AAR?$AAF?$AAL?$AAI?$AAB?$AA?2?$AA0?$AA0?$AA0?$AA0?$AA?2?$AAp?$AAe?$AAr?$AAf?$AAd?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x1179181C8: "PERF_%s" ??_C@_1BA@PPAOCMLL@?$AAP?$AAE?$AAR?$AAF?$AA_?$AA?$CF?$AAs?$AA?$AA@
0x117917F98: LDPRFMSG_UNABLE_OPEN_KEY
0x117917430: "__cdecl _imp_fgetws" __imp_fgetws
0x117917820: " [%s]" ??_C@_1BC@IGICGENC@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?$AA@
0x117917A90: "SYSTEM\CurrentControlSet\Service" ??_C@_1EE@FAPOBBDN@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x11790B7B0: "__cdecl XcptFilter" _XcptFilter
0x117917568: "__cdecl _xc_a" __xc_a
0x117917400: "__cdecl _imp_wcsstr" __imp_wcsstr
0x117917F78: LDPRFMSG_REGISTRY_HELP_STRINGS_CORRUPT
0x1179077E0: "unsigned short __cdecl LoadPerfGetLCIDFromString(unsigned short const * __ptr64)" ?LoadPerfGetLCIDFromString@@YAGPEBG@Z
0x117917190: "__cdecl _imp_FindClose" __imp_FindClose
0x117917290: "__cdecl _imp_MapViewOfFileEx" __imp_MapViewOfFileEx
0x117917960: "Performance" ??_C@_1BI@JDOBPIED@?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x117917230: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x117902274: "int __cdecl LoadPerfBackupIniFile(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?LoadPerfBackupIniFile@@YAHPEBGPEAGPEAPEAG2H@Z
0x11791F008: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x117917B58: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x1179171A8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x117917600: "__cdecl _guard_iat_table" __guard_iat_table
0x1179172E8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x11790BDE4: memcpy
0x117917CA8: "%systemroot%\system32\Perf" ??_C@_1DG@NONIJNGD@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAP?$AAe?$AAr?$AAf?$AA?$AA@
0x1179174A0: "__cdecl _imp_memset" __imp_memset
0x117901130: InstallPerfDllW
0x1179171E0: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x1179174D8: "__cdecl _imp_NtCreateMutant" __imp_NtCreateMutant
0x11790B98F: "__cdecl initterm" _initterm
0x117913B90: InstallPerfDllA
0x117917250: "__cdecl _imp_FileTimeToDosDateTime" __imp_FileTimeToDosDateTime
0x117917928: "#define %s %d" ??_C@_1BM@KOBJCGD@?$AA?$CD?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x117919F28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x11791C628: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1179173B0: "__cdecl _imp_Sleep" __imp_Sleep
0x117917588: "__cdecl _xi_z" __xi_z
0x1179181A0: "%ws" ??_C@_17EEOGHOKP@?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117917468: "__cdecl _imp___iob_func" __imp___iob_func
0x117917C48: LDPRFMSG_UNLOAD_SUCCESS
0x117917150: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1179181B8: WPP_5fadf2c208413d7fd59508157551a08a_Traceguids
0x11791A004: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0
0x11790B7A4: "__cdecl _C_specific_handler" __C_specific_handler
0x117908408: "int __cdecl GetInstalledLanguageList(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetInstalledLanguageList@@YAHPEAUHKEY__@@PEAPEAG@Z
0x117917218: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1179179A0: "Last Help" ??_C@_1BE@CEOOBEF@?$AAL?$AAa?$AAs?$AAt?$AA?5?$AAH?$AAe?$AAl?$AAp?$AA?$AA@
0x11791C648: WPP_REGISTRATION_GUIDS
0x117917FA8: LDPRFMSG_CORRUPT_INCLUDE_FILE
0x11790BB9C: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x117917200: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x117917350: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x11790BCF4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x117908698: "unsigned long __cdecl LoadPerfGetFileSize(unsigned short const * __ptr64)" ?LoadPerfGetFileSize@@YAKPEBG@Z
0x1179141F0: UpdatePerfNameFilesA
0x117917D38: " [PerfStrings_%s]" ??_C@_1CK@ENHIGGCD@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AA?$FL?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA_?$AA?$CF?$AAs?$AA?$FN?$AA?$AA@
0x117917328: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x117907230: "int __cdecl LoadLanguageLists(int,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,struct _SYMBOL_TABLE_ENTRY * __ptr64,struct _LANGUAGE_LIST_ELEMENT * __ptr64)" ?LoadLanguageLists@@YAHHPEAG0KKKPEAU_SYMBOL_TABLE_ENTRY@@PEAU_LANGUAGE_LIST_ELEMENT@@@Z
0x117917D10: LDPRFMSG_LOAD_SUCCESS
0x117917380: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x11791C650: WPP_MAIN_CB
0x1179172C0: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x117919F78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x117917330: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x11790B7BC: "__cdecl amsg_exit" _amsg_exit
0x117917948: "%s%s%s" ??_C@_1O@JBBHAGJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x1179182E8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x117917838: "%s%ws\" ??_C@_1O@DHNLFMOB@?$AA?$CF?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$AA@
0x11791C600: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x117906FA4: "unsigned short * __ptr64 __cdecl LoadPerfiGetActualIniFile(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?LoadPerfiGetActualIniFile@@YAPEAGPEBG0@Z
0x117917634: "rt" ??_C@_15OMIKMFFN@?$AAr?$AAt?$AA?$AA@
0x1179172B0: "__cdecl _imp_GetPrivateProfileSectionW" __imp_GetPrivateProfileSectionW
0x117917370: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1179179B8: "Last Counter" ??_C@_1BK@KDEBHAFE@?$AAL?$AAa?$AAs?$AAt?$AA?5?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x117917B24: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x117917360: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x117917168: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x117917258: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x117917B90: "Updating" ??_C@_1BC@LFNJNBID@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x117918048: LDPRFMSG_REGISTRY_CORRUPT_MULTI_SZ
0x117917308: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x117917538: "__cdecl _imp_EtwRegisterTraceGuidsA" __imp_EtwRegisterTraceGuidsA
0x117902CF8: "int __cdecl GetDriverFromCommandLine(unsigned short * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned short * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64 * __ptr64,int)" ?GetDriverFromCommandLine@@YAHPEAGPEAPEAUHKEY__@@0K11H@Z
0x117917358: "__cdecl _imp_RegLoadMUIStringW" __imp_RegLoadMUIStringW
0x117917DC8: "0816" ??_C@_19DIMICOAM@?$AA0?$AA8?$AA1?$AA6?$AA?$AA@
0x1179125A8: "unsigned long __cdecl UpdatePerfNameFilesX(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned __int64)" ?UpdatePerfNameFilesX@@YAKPEBG0PEAG_K@Z
0x11791C618: "__cdecl _native_startup_lock" __native_startup_lock
0x11790BC34: DllMain
0x117917848: "Old_Counter " ??_C@_1BK@EINCCAE@?$AAO?$AAl?$AAd?$AA_?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?5?$AA?$AA@
0x11790AE14: "struct _LANGUAGE_LIST_ELEMENT * __ptr64 __cdecl FindLanguage(struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned short const * __ptr64)" ?FindLanguage@@YAPEAU_LANGUAGE_LIST_ELEMENT@@PEAU1@PEBG@Z
0x117917EB0: "%sPerflib\" ??_C@_1BG@CPGLLOCC@?$AA?$CF?$AAs?$AAP?$AAe?$AAr?$AAf?$AAl?$AAi?$AAb?$AA?2?$AA?$AA@
0x11790BD58: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x117919EB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x117917460: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x117901540: PerfpInitializeInstallationMutex
0x1179174B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x117902A80: "unsigned short const * __ptr64 __cdecl GetItemFromString(unsigned short const * __ptr64,unsigned long,unsigned short)" ?GetItemFromString@@YAPEBGPEBGKG@Z
0x117917278: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x117917E88: "Counters" ??_C@_1BC@IICCDNLG@?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x117917548: "__cdecl _imp_RtlCreateBoundaryDescriptor" __imp_RtlCreateBoundaryDescriptor
0x1179031E4: "int __cdecl GetFileFromCommandLine(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned __int64 * __ptr64)" ?GetFileFromCommandLine@@YAHPEAGPEAPEAGKPEA_K@Z
0x117917160: "__cdecl _imp_GetLastError" __imp_GetLastError
0x117914450: UpdatePerfNameFilesW
0x117917BE8: "drivername" ??_C@_1BG@HEGHDKJD@?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x11791C060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x11790BCD0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x117917528: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x117911F6C: "unsigned short const * __ptr64 __cdecl GetFormatResource(unsigned int)" ?GetFormatResource@@YAPEBGI@Z
0x117905E90: "unsigned long __cdecl BuildServiceLists(unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?BuildServiceLists@@YAKPEAGPEAK01@Z
0x117913D90: SetServiceAsTrustedW
0x1179063C0: "unsigned long __cdecl DumpNameTable(void * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned long)" ?DumpNameTable@@YAKPEAXPEBGPEAPEBGKK@Z
0x117911E40: "void __cdecl DisplayCommandHelp(unsigned int,unsigned int)" ?DisplayCommandHelp@@YAXII@Z
0x117917E70: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x11791A02C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1179172F0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1179173A0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x117903868: "unsigned short * __ptr64 __cdecl LoadPerfMultiByteToWideChar(unsigned int,char * __ptr64)" ?LoadPerfMultiByteToWideChar@@YAPEAGIPEAD@Z
0x117917640: "objects" ??_C@_1BA@ILKKLJDD@?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x117917A10: "Disable Performance Counters" ??_C@_1DK@MFLMHCAG@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x117917BD0: "symbolfile" ??_C@_1BG@IPPFBMGI@?$AAs?$AAy?$AAm?$AAb?$AAo?$AAl?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x117917340: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x1179182E8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x11790B880: "__cdecl ValidateImageBase" _ValidateImageBase
0x117906F04: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x117919EEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x117917958: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1179145C4: WPP_SF_
0x117917F58: LDPRFMSG_CORRUPT_INDEX
0x117917210: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1179095E0: "int __cdecl UpdateRegistry(int,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,struct _LANG_ENTRY * __ptr64,struct _SERVICE_ENTRY * __ptr64,struct _LANGUAGE_LIST_ELEMENT * __ptr64,struct _SYMBOL_TABLE_ENTRY * __ptr64,unsigned long * __ptr64)" ?UpdateRegistry@@YAHHKPEAG00PEAU_LANG_ENTRY@@PEAU_SERVICE_ENTRY@@PEAU_LANGUAGE_LIST_ELEMENT@@PEAU_SYMBOL_TABLE_ENTRY@@PEAK@Z
0x1179180C0: "%s%s\%04X\%s" ??_C@_1BK@JBKEGBAK@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x117917BA8: "DisplayName" ??_C@_1BI@EEKPCHLN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1179174E0: "__cdecl _imp_NtCreatePrivateNamespace" __imp_NtCreatePrivateNamespace
0x117917628: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x117919BA4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1179178C8: "Base Index" ??_C@_1BG@JEMOAPBJ@?$AAB?$AAa?$AAs?$AAe?$AA?5?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x11790B4E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x117917DB8: "0416" ??_C@_19GPGHDLED@?$AA0?$AA4?$AA1?$AA6?$AA?$AA@
0x11790BB78: "__cdecl _acrt_iob_func" __acrt_iob_func
0x117917480: "__cdecl _imp_iswspace" __imp_iswspace
0x117917420: "__cdecl _imp__initterm" __imp__initterm
0x117918068: LDPRFMSG_REPAIR_SERVICE_FAIL
0x117917D98: "0404" ??_C@_19ODCCAGN@?$AA0?$AA4?$AA0?$AA4?$AA?$AA@
0x117917158: "__cdecl _imp_SetLastError" __imp_SetLastError
0x117902C38: "int __cdecl TrimSpaces(unsigned short * __ptr64,unsigned long)" ?TrimSpaces@@YAHPEAGK@Z
0x117917440: "__cdecl _imp__ultow_s" __imp__ultow_s
0x11791A018: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x117917450: "__cdecl _imp_swscanf_s" __imp_swscanf_s
0x1179182A0: "%wsPERFLIB\0000\perfi.dat" ??_C@_1DE@EFGBMHJ@?$AA?$CF?$AAw?$AAs?$AAP?$AAE?$AAR?$AAF?$AAL?$AAI?$AAB?$AA?2?$AA0?$AA0?$AA0?$AA0?$AA?2?$AAp?$AAe?$AAr?$AAf?$AAi?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x117917918: "%ws%ws" ??_C@_1O@PEBEJIFE@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117919F3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x117919F64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x117918160: "Perfstrings_%ws" ??_C@_1CA@OKAJJCPI@?$AAP?$AAe?$AAr?$AAf?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA_?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x11791C608: "__cdecl _onexitend" __onexitend
0x117917DA8: "0804" ??_C@_19FJJNDFCC@?$AA0?$AA8?$AA0?$AA4?$AA?$AA@
0x117917558: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x117917EC8: "%sPerflib\%04X\" ??_C@_1CA@PHJKHEKN@?$AA?$CF?$AAs?$AAP?$AAe?$AAr?$AAf?$AAl?$AAi?$AAb?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AA?$AA@
0x117917CE0: "languages" ??_C@_1BE@INADCIGD@?$AAl?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x117904110: "unsigned long __cdecl UnlodctrCleanupIniFile(unsigned short * __ptr64)" ?UnlodctrCleanupIniFile@@YAKPEAG@Z
0x117917F28: LDPRFMSG_UNLOAD_FAILURE
0x117917300: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x117918058: LDPRFMSG_UNABLE_READ_COUNTER_STRINGS
0x117918018: LDPRFMSG_UNABLE_UPDATE_HELP_STRINGS
0x1179172B8: "__cdecl _imp_GetPrivateProfileStringW" __imp_GetPrivateProfileStringW
0x117917500: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x1179174D0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x117917710: "%ws%ws\0*" ??_C@_1BE@NCKDJDIK@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA0?$AA?$CK?$AA?$AA@
0x117917748: "%ws%ws\*" ??_C@_1BC@JHNCBHDL@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CK?$AA?$AA@
0x1179173D8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x117917578: "__cdecl _xi_a" __xi_a
0x1179181D8: "a" ??_C@_13FNCBLAIF@?$AAa?$AA?$AA@
0x1179173C8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x117917138: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1179049F8: "unsigned short * __ptr64 __cdecl LoadPerfDuplicateString(unsigned short const * __ptr64)" ?LoadPerfDuplicateString@@YAPEAGPEBG@Z
0x1179173E8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x11790A2DC: "unsigned short * __ptr64 __cdecl LoadPerfGetLanguage(unsigned short * __ptr64,int)" ?LoadPerfGetLanguage@@YAPEAGPEAGH@Z
0x117914624: WPP_SF_DD
0x117917F08: WPP_ede1717e68243583b7b1b444d2c4a359_Traceguids
0x1179146C8: WPP_SF_DS
0x117917CF4: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x11791C000: WPP_GLOBAL_Control
0x117919FC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1179172A8: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1179145E8: WPP_SF_D
0x11791C630: "__cdecl pRawDllMain" _pRawDllMain
0x117917780: "%ws%ws%ws%ws%ws" ??_C@_1CA@BBDENMKH@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1179044F0: "int __cdecl LoadIncludeFile(int,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,struct _SYMBOL_TABLE_ENTRY * __ptr64 * __ptr64)" ?LoadIncludeFile@@YAHHKPEAG0PEAPEAU_SYMBOL_TABLE_ENTRY@@@Z
0x117917118: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x117901010: LoadPerfCounterTextStringsW
0x1179174F0: "__cdecl _imp_RtlDeleteBoundaryDescriptor" __imp_RtlDeleteBoundaryDescriptor
0x117919E88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x117913C30: LoadPerfCounterTextStringsA
0x117917B18: "_HELP" ??_C@_1M@JFECLCIF@?$AA_?$AAH?$AAE?$AAL?$AAP?$AA?$AA@
0x11790B780: "__cdecl _security_check_cookie" __security_check_cookie
0x117917570: "__cdecl _xc_z" __xc_z
0x117919F8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x117917310: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x117907F50: "int __cdecl AddEntryToLanguage(struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long)" ?AddEntryToLanguage@@YAHPEAU_LANGUAGE_LIST_ELEMENT@@PEAG1PEAKKKKK@Z
0x11790B130: WppCleanupUm
0x117917C00: "Library Validation Code" ??_C@_1DA@ODMLBLOK@?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?5?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x1179173C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x117917228: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1179172E0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x117917540: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x11790341C: "unsigned long __cdecl DumpPerflibEntries(void * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?DumpPerflibEntries@@YAKPEAXPEAK111@Z
0x117917128: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x117917208: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x117917868: "Old_Explain " ??_C@_1BK@JLILDFJL@?$AAO?$AAl?$AAd?$AA_?$AAE?$AAx?$AAp?$AAl?$AAa?$AAi?$AAn?$AA?5?$AA?$AA@
0x1179171B0: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x117918230: "%wsPERFLIB\%04X\perfi.dat" ??_C@_1DE@JJMKOBPM@?$AA?$CF?$AAw?$AAs?$AAP?$AAE?$AAR?$AAF?$AAL?$AAI?$AAB?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AAp?$AAe?$AAr?$AAf?$AAi?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x11790A560: "int __cdecl LodctrSetSericeAsTrusted(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?LodctrSetSericeAsTrusted@@YAHPEBG00@Z
0x117917760: "inf" ??_C@_17HJMKFNPD@?$AAi?$AAn?$AAf?$AA?$AA@
0x117917248: "__cdecl _imp_DosDateTimeToFileTime" __imp_DosDateTimeToFileTime
0x117917288: api-ms-win-core-localization-obsolete-l1-2-0_NULL_THUNK_DATA
0x117917E60: Microsoft_Windows_LoadPerfLevels
0x117917220: "__cdecl _imp_HeapSize" __imp_HeapSize
0x117917298: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x117906B90: "unsigned long __cdecl LoadPerfiPreserveV2Index(struct HKEY__ * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char)" ?LoadPerfiPreserveV2Index@@YAKPEAUHKEY__@@PEAK1E@Z
0x117906570: "long __cdecl FixNames(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,int)" ?FixNames@@YAJPEAUHKEY__@@PEAPEAGPEAGKKKPEAK3H@Z
0x117917188: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x117917260: "__cdecl _imp_GetModuleHandleA" __imp_GetModuleHandleA
0x117905370: "unsigned long __cdecl DumpPerfServiceEntries(void * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,int)" ?DumpPerfServiceEntries@@YAKPEAXPEBGPEAK2222PEAGK3KH@Z
0x117905AB0: "int __cdecl SortLanguageTables(struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SortLanguageTables@@YAHPEAU_LANGUAGE_LIST_ELEMENT@@PEAK1@Z
0x117917AE0: "_NAME" ??_C@_1M@LAINLIDA@?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
0x117917368: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1179171D0: "__cdecl _imp_CopyFileExW" __imp_CopyFileExW
0x1179181F8: "%wsPERFLIB\%04X\perfd.dat" ??_C@_1DE@HGFOABC@?$AA?$CF?$AAw?$AAs?$AAP?$AAE?$AAR?$AAF?$AAL?$AAI?$AAB?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AAp?$AAe?$AAr?$AAf?$AAd?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x117917320: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1179182D8: WPP_bf58c2bbb36f3b9aebf9fbeed1a9bb96_Traceguids
0x1179171E8: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x117917590: "__cdecl _guard_fids_table" __guard_fids_table
0x1179180E0: "%s%s\0000\%s" ??_C@_1BK@MMOMPNHJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA0?$AA0?$AA0?$AA0?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1179173E0: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x117917F18: LDPRFMSG_CORRUPT_PERFLIB_INDEX
0x1179174A8: msvcrt_NULL_THUNK_DATA
0x117917BC0: "text" ??_C@_19HIPAKEND@?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x117917010: "__cdecl load_config_used" _load_config_used
0x117908668: "bool __cdecl LoadPerfEqualNoCase(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?LoadPerfEqualNoCase@@YA_NPEBG0@Z
0x117917388: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x117919B84: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x117917E48: Microsoft_Windows_LoadPerfKeywords
0x117917140: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x117917130: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x11790B1CC: McGenEventUnregister
0x117917888: "Old_Addcounter " ??_C@_1CA@KNAOCKE@?$AAO?$AAl?$AAd?$AA_?$AAA?$AAd?$AAd?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?5?$AA?$AA@
0x117901828: "int __cdecl LoadPerfCheckAndCopyFile(unsigned short const * __ptr64,unsigned short * __ptr64)" ?LoadPerfCheckAndCopyFile@@YAHPEBGPEAG@Z
0x11790A668: "unsigned long __cdecl LoadPerfInstallPerfDll(unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned short const * __ptr64,struct _LANG_ENTRY * __ptr64,struct _SERVICE_ENTRY * __ptr64,unsigned __int64)" ?LoadPerfInstallPerfDll@@YAKKPEBGPEAG0PEAU_LANG_ENTRY@@PEAU_SERVICE_ENTRY@@_K@Z
0x117902770: "unsigned short * __ptr64 __cdecl LoadPerfGetInfPath(void)" ?LoadPerfGetInfPath@@YAPEAGXZ
0x117918100: "%ws%ws\0409\%ws" ??_C@_1CA@CLHLHAFC@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA0?$AA4?$AA0?$AA9?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117919E74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x117917398: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x117912468: "int __cdecl My_vfwprintf(struct _iobuf * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?My_vfwprintf@@YAHPEAU_iobuf@@PEBGPEAD@Z
0x117917410: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x117901298: "int __cdecl LoadPerfCheckAndLinkFile(unsigned short const * __ptr64,unsigned short * __ptr64)" ?LoadPerfCheckAndLinkFile@@YAHPEBGPEAG@Z
0x117917270: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1179174E8: "__cdecl _imp_NtClose" __imp_NtClose
0x117917EE8: "%s%s\%s" ??_C@_1BA@FJKCGLFC@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x117917268: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x117906B00: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1179174B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x117917318: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x117917520: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x117918120: "%ws%ws\0009\%ws" ??_C@_1CA@PPEKDMNF@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA0?$AA0?$AA0?$AA9?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117917B88: "009" ??_C@_17JGEJMDGN@?$AA0?$AA0?$AA9?$AA?$AA@
0x117917B28: "_V2Providers" ??_C@_1BK@CDNLPEJE@?$AA_?$AAV?$AA2?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x117917448: "__cdecl _imp_fclose" __imp_fclose
0x117916684: WPP_SF_SDD
0x1179172A0: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x11791221C: WPP_SF_SSD
0x1179179D8: "First Counter" ??_C@_1BM@IBDHKGGM@?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?5?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x117917490: "__cdecl _imp_vfwprintf" __imp_vfwprintf
0x1179174F8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1179182F0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x11790BBA8: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x117917768: "%ws%ws%ws" ??_C@_1BE@MFOEGDMN@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117918180: "Perfstrings_009" ??_C@_1CA@DIKGCPDK@?$AAP?$AAe?$AAr?$AAf?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA_?$AA0?$AA0?$AA9?$AA?$AA@
0x117914850: WPP_SF_SDDD
0x117918078: "Library" ??_C@_1BA@MCNKKFDK@?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$AA@
0x11790B9A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1179172D0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1179148F8: WPP_SF_SSDD
0x117916770: LpReleaseInstallationMutex
0x1179091F4: "int __cdecl BuildLanguageTables(unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,struct _LANGUAGE_LIST_ELEMENT * __ptr64 * __ptr64)" ?BuildLanguageTables@@YAHKPEAG0PEAPEAU_LANGUAGE_LIST_ELEMENT@@@Z
0x117915C60: RestorePerfRegistryFromFileW
0x117904A80: "int __cdecl CreateObjectList(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,struct _SYMBOL_TABLE_ENTRY * __ptr64,unsigned short * __ptr64,unsigned long)" ?CreateObjectList@@YAHPEAG0KPEAU_SYMBOL_TABLE_ENTRY@@0K@Z
0x11791F000: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x117919F00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x117917B10: "004" ??_C@_17GECDBLLA@?$AA0?$AA0?$AA4?$AA?$AA@
0x1179070C0: "int __cdecl ParseTextId(unsigned short * __ptr64,struct _SYMBOL_TABLE_ENTRY * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ParseTextId@@YAHPEAGPEAU_SYMBOL_TABLE_ENTRY@@PEAKPEAPEAG2@Z
0x117917900: "%ws%ws\%ws" ??_C@_1BG@FFKLELII@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117917F68: LDPRFMSG_REGISTRY_BASEINDEX_CORRUPT
0x117917728: "%ws%ws\%ws\*" ??_C@_1BK@LGBDLLHK@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CK?$AA?$AA@
0x117917470: "__cdecl _imp_fprintf" __imp_fprintf
0x1179173F8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x117917408: "__cdecl _imp__wfopen" __imp__wfopen
0x1179179F8: "First Help" ??_C@_1BG@OIFOLDAB@?$AAF?$AAi?$AAr?$AAs?$AAt?$AA?5?$AAH?$AAe?$AAl?$AAp?$AA?$AA@
0x117917550: ntdll_NULL_THUNK_DATA
0x117917458: "__cdecl _imp_memcpy" __imp_memcpy
0x1179017D8: "int __cdecl LoadPerfCheckAndCreatePath(unsigned short * __ptr64)" ?LoadPerfCheckAndCreatePath@@YAHPEAG@Z
0x117914674: WPP_SF_DDD
0x117914750: WPP_SF_DSD
0x1179122E0: WPP_SF_SSS
0x11790BC27: "__cdecl _iob_func" __iob_func
0x117917510: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x117918088: "%s%s\0*" ??_C@_1BA@LMLMLIFC@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA0?$AA?$CK?$AA?$AA@
0x117918140: "%ws%ws\0000\%ws" ??_C@_1CA@GCODAGEE@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA0?$AA0?$AA0?$AA0?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117917FD8: LDPRFMSG_UNABLE_UPDATE_VALUE
0x117908950: "long __cdecl UnloadCounterNames(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short * __ptr64,int)" ?UnloadCounterNames@@YAJPEAUHKEY__@@00PEAGH@Z
0x117919ED8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x11791C068: "__cdecl _security_cookie" __security_cookie
0x117917348: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x117903900: "int __cdecl UpdateEachLanguage(int,struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned long,int)" ?UpdateEachLanguage@@YAHHPEAUHKEY__@@PEAGPEAK2PEAU_LANGUAGE_LIST_ELEMENT@@KH@Z
0x1179176D8: "D:(A;;GA;;;BA)(A;;GA;;;SY)" ??_C@_1DG@MBIIGLFH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$AA@
0x117917F38: WPP_ThisDir_CTLGUID_LoadperfDll
0x117917B08: "016" ??_C@_17FHGAAJO@?$AA0?$AA1?$AA6?$AA?$AA@
0x1179171F8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x117917A50: " [PERF_%s]" ??_C@_1BM@OLDKLEBK@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AA?$FL?$AAP?$AAE?$AAR?$AAF?$AA_?$AA?$CF?$AAs?$AA?$FN?$AA?$AA@
0x117917238: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1179174C0: "__cdecl _imp_RtlAddSIDToBoundaryDescriptor" __imp_RtlAddSIDToBoundaryDescriptor
0x117919E9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x117911FF0: McGenControlCallbackV2
0x117917180: "__cdecl _imp_FindFirstFileExW" __imp_FindFirstFileExW
0x117917FB8: LDPRFMSG_CORRUPT_INDEX_RANGE
0x11791C610: "__cdecl _onexitbegin" __onexitbegin
0x117917B48: "info" ??_C@_19EJAOABKI@?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x117917FF8: LDPRFMSG_UNABLE_READ_HELP_STRINGS
0x11790176C: "unsigned long __cdecl LoadPerfSignalWmiWithNewData(unsigned long)" ?LoadPerfSignalWmiWithNewData@@YAKK@Z
0x117917438: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x11791C010: S_LoadPerf_Context
0x117917148: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x117919BD0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x1179172C8: api-ms-win-core-privateprofile-l1-1-0_NULL_THUNK_DATA
0x117917338: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x117917810: "Perflib" ??_C@_1BA@POHLCCDI@?$AAP?$AAe?$AAr?$AAf?$AAl?$AAi?$AAb?$AA?$AA@
0x117917120: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x117917F48: LDPRFMSG_MEMORY_ALLOCATION_FAILURE
0x11790B8B4: "__cdecl _security_init_cookie" __security_init_cookie
0x1179149D0: UnloadPerfCounterTextStringsA
0x117917280: "__cdecl _imp_GetUserDefaultUILanguage" __imp_GetUserDefaultUILanguage
0x117901350: UnloadPerfCounterTextStringsW
0x1179181DC: "no" ??_C@_15BPIGNHCD@?$AAn?$AAo?$AA?$AA@
0x117904E60: BackupPerfRegistryToFileW
0x1179174C8: "__cdecl _imp_NtOpenPrivateNamespace" __imp_NtOpenPrivateNamespace
0x117919E38: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x117918038: LDPRFMSG_UNABLE_UPDATE_COUNTER_STRINGS
0x1179082A0: "int __cdecl GetValueW(struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetValueW@@YAHPEAU_LANGUAGE_LIST_ELEMENT@@PEAGPEAPEAG@Z
0x1179173F0: "__cdecl _imp_wprintf" __imp_wprintf
0x11790B220: McGenEventRegister
0x117917418: "__cdecl _imp_malloc" __imp_malloc
0x1179171B8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x117917EA0: "Help" ??_C@_19BNBKBBLP@?$AAH?$AAe?$AAl?$AAp?$AA?$AA@
0x1179180B0: "%ws%ws\" ??_C@_1BA@KBNIMHCI@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$AA@
0x1179171C0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x117917178: "__cdecl _imp_GetFileTime" __imp_GetFileTime
0x117917A70: "%s%s%s%s%s" ??_C@_1BG@EOKGDHD@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x117917F88: LDPRFMSG_LOAD_FAILURE
0x1179178A8: "Old_Addexplain " ??_C@_1CA@JFNGPFDL@?$AAO?$AAl?$AAd?$AA_?$AAA?$AAd?$AAd?$AAe?$AAx?$AAp?$AAl?$AAa?$AAi?$AAn?$AA?5?$AA?$AA@
0x117917990: " %s=%d" ??_C@_1BA@KIDIAMGG@?$AA?$AN?$AA?6?$AA?$CF?$AAs?$AA?$DN?$AA?$CF?$AAd?$AA?$AA@
0x11790B9F0: "__cdecl _report_gsfailure" __report_gsfailure
0x117917508: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x11790AFD0: "unsigned long __cdecl LoadPerfCopyProgressNotification(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64)" ?LoadPerfCopyProgressNotification@@YAKT_LARGE_INTEGER@@000KKPEAX11@Z
0x117908700: "int __cdecl LoadPerfGetIncludeFileName(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?LoadPerfGetIncludeFileName@@YAHPEBGKPEAPEAG1@Z
0x117917650: "WMI_SysEvent_UnLodCtr" ??_C@_1CM@DHIOHLGG@?$AAW?$AAM?$AAI?$AA_?$AAS?$AAy?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAU?$AAn?$AAL?$AAo?$AAd?$AAC?$AAt?$AAr?$AA?$AA@
0x1179081A0: "int __cdecl GetValueFromIniKeyW(struct _LANGUAGE_LIST_ELEMENT * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?GetValueFromIniKeyW@@YAHPEAU_LANGUAGE_LIST_ELEMENT@@PEAG1PEAKKPEAPEAG@Z
0x1179172D8: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x11791C620: "__cdecl _native_startup_state" __native_startup_state
0x117917C80: "%wsStringBackup.INI" ??_C@_1CI@PBLGDCAE@?$AA?$CF?$AAw?$AAs?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?4?$AAI?$AAN?$AAI?$AA?$AA@
0x117912564: "void __cdecl OUTPUT_MESSAGE(int,unsigned short const * __ptr64,...)" ?OUTPUT_MESSAGE@@YAXHPEBGZZ
0x1179181E8: "_%3.3d" ??_C@_1O@IGNLAJLD@?$AA_?$AA?$CF?$AA3?$AA?4?$AA3?$AAd?$AA?$AA@
0x117917D70: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x117919F50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x117914A78: "unsigned long __cdecl LoadPerfRepairPerfRegistry(void)" ?LoadPerfRepairPerfRegistry@@YAKXZ
0x117917D20: "PerfIniFile" ??_C@_1BI@MOBMNPIB@?$AAP?$AAe?$AAr?$AAf?$AAI?$AAn?$AAi?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x117917478: "__cdecl _imp__wsplitpath_s" __imp__wsplitpath_s
0x117917978: " %d=%s" ??_C@_1BA@KAIEPJNB@?$AA?$AN?$AA?6?$AA?$CF?$AAd?$AA?$DN?$AA?$CF?$AAs?$AA?$AA@
0x117918098: "%s%s\%s\%s" ??_C@_1BG@HMJFGGP@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x117907840: "unsigned short * __ptr64 * __ptr64 __cdecl UnlodctrBuildNameTable(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64)" ?UnlodctrBuildNameTable@@YAPEAPEAGPEAUHKEY__@@0PEAGKKPEAK@Z
0x11791CEB0: "void * __ptr64 * `PerfpInstallationMutexHandles'::`2'::handles" ?handles@?1??PerfpInstallationMutexHandles@@9@4PAPEAXA
0x117919FB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x117917E80: "000" ??_C@_17OLEBIMOH@?$AA0?$AA0?$AA0?$AA?$AA@
0x117916720: LpAcquireInstallationMutex
0x1179120F8: WPP_SF_SD
0x117917498: "__cdecl _imp_free" __imp_free
0x11790B820: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1179173B8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x117912170: WPP_SF_SS
0x117917B68: "CurrentLanguage" ??_C@_1CA@KOOGNCIL@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
0x117919FF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-privateprofile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-privateprofile-l1-1-0
0x117903000: "void __cdecl LoadPerfRemovePreviousIniFile(unsigned short * __ptr64,unsigned short * __ptr64)" ?LoadPerfRemovePreviousIniFile@@YAXPEAG0@Z
0x1179173A8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1179178E0: "%ws%ws\%ws\%ws" ??_C@_1BO@DIOJCGIF@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x117919FA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1179147F0: WPP_SF_S
0x11790B070: PerfpCloseInstallationMutex
0x1179181A8: WPP_e083c7e9a91b3acbc3e79d68c4db1b8d_Traceguids
0x11790BDF0: memset
0x11791A040: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]