Generated by JEB on 2019/08/01
PE: C:\Windows\System32\DWWIN.EXE Base=0x140000000 SHA-256=322DA8EC4680C3CEA9B61420B744D51A379F7E9E94EE74DCD8F2ADDFD721E4A2
PDB: dwwin.pdb GUID={9106C0EF-4F5E-0228-99BD706C56B3188B} Age=1
1630 located named symbols:
0x1400280A0: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x14002C1C0: "Microsoft-OCA-IPT" ??_C@_1CE@JNAMKAMP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAO?$AAC?$AAA?$AA?9?$AAI?$AAP?$AAT?$AA?$AA@
0x140033B18: "__vectorcall ??_R0?AVResultException@wil@" ??_R0?AVResultException@wil@@@8
0x1400289C8: S_MICROSOFT_WINDOWS_WER_DIAG
0x14002C1B0: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14001FD40: "private: long __cdecl CDriverVerifierPlugin::PopulateDriversList(unsigned short const * __ptr64) __ptr64" ?PopulateDriversList@CDriverVerifierPlugin@@AEAAJPEBG@Z
0x140015BE0: "public: virtual void * __ptr64 __cdecl CCriticalProcessPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCriticalProcessPlugin@@UEAAPEAXI@Z
0x14002C868: WPP_19e0e07f120f3006159acc62b20e3780_Traceguids
0x140004078: "private: int __cdecl CExceptionReport::AppNeedsControl(void) __ptr64" ?AppNeedsControl@CExceptionReport@@AEAAHXZ
0x140034208: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x14002BBF8: "version" ??_C@_1BA@KPDNCIMM@?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140027A00: "__cdecl _imp_VirtualFreeEx" __imp_VirtualFreeEx
0x140025E40: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140027CC0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140027388: "const CTIPlugin::`vftable'" ??_7CTIPlugin@@6B@
0x140028AA8: "UIFlags=" ??_C@_1BC@OEOKIBDI@?$AAU?$AAI?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$DN?$AA?$AA@
0x14002B800: "OutOfProcessExceptionEventSignat" ??_C@_0CM@PNNKOFFF@OutOfProcessExceptionEventSignat@
0x1400278F0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x14000ABA8: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x1400040B4: "private: long __cdecl CExceptionReport::NotifyLoop(void) __ptr64" ?NotifyLoop@CExceptionReport@@AEAAJXZ
0x14002C700: "CodeIntegrity.Telemetry" ??_C@_1DA@IKIGNGLK@?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?4?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AA?$AA@
0x140025850: "__cdecl FindPESection" _FindPESection
0x140029590: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x14002C030: "\Device\IPT" ??_C@_1BI@JCJLLHAP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAI?$AAP?$AAT?$AA?$AA@
0x14000EE1C: "public: void __cdecl wil::details_abi::RawUsageIndex::Swap(class wil::details_abi::RawUsageIndex & __ptr64) __ptr64" ?Swap@RawUsageIndex@details_abi@wil@@QEAAXAEAV123@@Z
0x14002C1A0: "Status" ??_C@_1O@GGDILBNB@?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140027978: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x140027B40: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x14001CF90: "public: virtual void * __ptr64 __cdecl CStowedExceptionPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECStowedExceptionPlugin@@UEAAPEAXI@Z
0x140008244: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1400232B8: OpenIptDevice
0x1400069FC: "protected: long __cdecl CWatsonReport::SetReportGenericParams(void * __ptr64) __ptr64" ?SetReportGenericParams@CWatsonReport@@IEAAJPEAX@Z
0x14001F8E0: "public: virtual void * __ptr64 __cdecl CDriverVerifierPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDriverVerifierPlugin@@UEAAPEAXI@Z
0x1400241E0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x14001A9D4: "private: long __cdecl CRuntimePlugin::GetRuntimeCrashApi(unsigned long * __ptr64,long (__cdecl* * __ptr64)(void * __ptr64,struct _WER_RUNTIME_EXCEPTION_INFORMATION * __ptr64 const,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64),long (__cdecl* * __ptr64)(void * __ptr64,struct _WER_RUNTIME_EXCEPTION_INFORMATION * __ptr64 const,int * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,int * __ptr64),struct HINSTANCE__ * __ptr64 * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?GetRuntimeCrashApi@CRuntimePlugin@@AEAAJPEAKPEAP6AJPEAXQEAU_WER_RUNTIME_EXCEPTION_INFORMATION@@KPEAG030@ZPEAP6AJ12PEAH305@ZPEAPEAUHINSTANCE__@@PEAPEAX@Z
0x140027F40: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x140030404: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140027F38: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x1400304A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x14002BE48: WPP_0222ce91304e33a1369aee01dd1d53b1_Traceguids
0x14002C730: "OptInLevel" ??_C@_1BG@LJBCDEGD@?$AAO?$AAp?$AAt?$AAI?$AAn?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140028610: "ext-ms-win-ntuser-message-l1-1-2" ??_C@_1EC@IBCKCP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2@
0x140028DD0: "APPCRASH" ??_C@_1BC@OJPIAOEH@?$AAA?$AAP?$AAP?$AAC?$AAR?$AAA?$AAS?$AAH?$AA?$AA@
0x140034240: "void (__cdecl* __ptr64 wil::details::g_pfnRethrow)(void)" ?g_pfnRethrow@details@wil@@3P6AXXZEA
0x140014F70: "__cdecl wsetargv" _wsetargv
0x140027AB0: "__cdecl _imp_IsWow64Process2" __imp_IsWow64Process2
0x14002BC08: "comctl32" ??_C@_1BC@OGMDFLII@?$AAc?$AAo?$AAm?$AAc?$AAt?$AAl?$AA3?$AA2?$AA?$AA@
0x1400341C4: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x140027A28: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x14002BBD0: "oleaut32" ??_C@_1BC@EMAMFHHJ@?$AAo?$AAl?$AAe?$AAa?$AAu?$AAt?$AA3?$AA2?$AA?$AA@
0x140033B80: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140028B08: "FilesToKeep=" ??_C@_1BK@IBBACLLB@?$AAF?$AAi?$AAl?$AAe?$AAs?$AAT?$AAo?$AAK?$AAe?$AAe?$AAp?$AA?$DN?$AA?$AA@
0x14001CC78: "private: unsigned long __cdecl CPinDLLPlugin::NotifyPCA(unsigned short const * __ptr64,unsigned long) __ptr64" ?NotifyPCA@CPinDLLPlugin@@AEAAKPEBGK@Z
0x140025DA8: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x140022598: "private: long __cdecl CFDRPlugin::SignalFlush(void) __ptr64" ?SignalFlush@CFDRPlugin@@AEAAJXZ
0x140027F70: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x140027FF0: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000FBD8: "public: __cdecl wil::details_abi::RawUsageIndex::~RawUsageIndex(void) __ptr64" ??1RawUsageIndex@details_abi@wil@@QEAA@XZ
0x14000D758: "void __cdecl UtilCheckDebugBreak(void)" ?UtilCheckDebugBreak@@YAXXZ
0x140029820: "WilStaging_02" ??_C@_0O@BKMDNGIM@WilStaging_02?$AA@
0x140027A20: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x14002A860: "Parameters" ??_C@_1BG@PGIGMDPA@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x140027868: "__cdecl tls_used" _tls_used
0x1400077D0: "public: long __cdecl CString::Sprintf(unsigned short const * __ptr64,...) __ptr64" ?Sprintf@CString@@QEAAJPEBGZZ
0x140008698: "void __cdecl DoKeyValueParseW(unsigned short const * __ptr64,unsigned long,struct _KEYVALUEPARSEW * __ptr64,unsigned long)" ?DoKeyValueParseW@@YAXPEBGKPEAU_KEYVALUEPARSEW@@K@Z
0x140026101: CloseHandle
0x14001FA28: "private: int __cdecl CDriverVerifierPlugin::CanEnableDriverVerifier(void) __ptr64" ?CanEnableDriverVerifier@CDriverVerifierPlugin@@AEAAHXZ
0x14002BB28: "TextHash12_%03x" ??_C@_1CA@CHGCNHFC@?$AAT?$AAe?$AAx?$AAt?$AAH?$AAa?$AAs?$AAh?$AA1?$AA2?$AA_?$AA?$CF?$AA0?$AA3?$AAx?$AA?$AA@
0x14001A6A0: "public: virtual struct WER_PLUGIN_INIT_OUT * __ptr64 __cdecl CRuntimePlugin::GetInitializationData(void) __ptr64" ?GetInitializationData@CRuntimePlugin@@UEAAPEAUWER_PLUGIN_INIT_OUT@@XZ
0x140028B50: "EventType=" ??_C@_1BG@LHMIFCBE@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$DN?$AA?$AA@
0x140027D40: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140003228: "private: long __cdecl CExceptionReport::MapSharedMemHandle(void * __ptr64) __ptr64" ?MapSharedMemHandle@CExceptionReport@@AEAAJPEAX@Z
0x14000C048: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140020958: "private: long __cdecl CFDRPlugin::FDRRemoveAppCompatLayerFromList(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FDRRemoveAppCompatLayerFromList@CFDRPlugin@@AEAAJPEBGK0PEAPEAG@Z
0x14002B160: "SfcIsFileProtected" ??_C@_0BD@JCBHAIFE@SfcIsFileProtected?$AA@
0x140030070: "__stdcall CT??_R0J" _CT??_R0J@84
0x14000E97C: "public: bool __cdecl wil::details_abi::heap_buffer::ensure(unsigned __int64) __ptr64" ?ensure@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x140025B7B: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000E2FC: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x140029108: WPP_ada6bae71ff4355f53798cadfe979a08_Traceguids
0x140026394: "__cdecl _imp_load_GetProcessWindowStation" __imp_load_GetProcessWindowStation
0x140028128: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1400271D8: "const CBEXPlugIn::`vftable'" ??_7CBEXPlugIn@@6B@
0x14001CE64: "private: unsigned long __cdecl CCrashOnLaunch::NotifyPCA(unsigned short const * __ptr64,unsigned long,unsigned __int64,unsigned __int64) __ptr64" ?NotifyPCA@CCrashOnLaunch@@AEAAKPEBGK_K1@Z
0x140028B68: "EventLogSource=" ??_C@_1CA@KLAJPALI@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$DN?$AA?$AA@
0x140026650: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14002B178: "FindFirstFileNameW" ??_C@_0BD@OGFDEFBL@FindFirstFileNameW?$AA@
0x140027C10: SHELL32_NULL_THUNK_DATA
0x140034338: "long (__cdecl* __ptr64 g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64)" ?g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion@@3P6AJPEAU__WIL__WNF_USER_SUBSCRIPTION@@@ZEA
0x140027BD0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14002AEF8: "IptTimeStamp" ??_C@_1BK@PNCGBBBM@?$AAI?$AAp?$AAt?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x140027908: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x1400290F8: ".cvr" ??_C@_19PMIIFHJ@?$AA?4?$AAc?$AAv?$AAr?$AA?$AA@
0x1400205F8: "private: long __cdecl CDriverVerifierPlugin::SaveOriginalBucketID(unsigned short const * __ptr64) __ptr64" ?SaveOriginalBucketID@CDriverVerifierPlugin@@AEAAJPEBG@Z
0x14002A030: "WER/CrashAPI:%u: ERROR NtQueryIn" ??_C@_0DO@LKOEHPPP@WER?1CrashAPI?3?$CFu?3?5ERROR?5NtQueryIn@
0x140015F50: "public: virtual void * __ptr64 __cdecl CTIPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECTIPlugin@@UEAAPEAXI@Z
0x14002B190: "FindNextFileNameW" ??_C@_0BC@MEIACHKG@FindNextFileNameW?$AA@
0x14001B580: "public: virtual long __cdecl CAppRecorderPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CAppRecorderPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x14000B884: "long __cdecl wil::details::StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@details@wil@@YAJPEAD_KPEBDZZ
0x140028DA8: "/dw/stagetwo.asp" ??_C@_1CC@PIBHLAEF@?$AA?1?$AAd?$AAw?$AA?1?$AAs?$AAt?$AAa?$AAg?$AAe?$AAt?$AAw?$AAo?$AA?4?$AAa?$AAs?$AAp?$AA?$AA@
0x140027AB8: "__cdecl _imp_GetProcessTimes" __imp_GetProcessTimes
0x140017BE4: "private: unsigned long __cdecl CInpagePlugIn::PublishDiagnosticTrigger(void) __ptr64" ?PublishDiagnosticTrigger@CInpagePlugIn@@AEAAKXZ
0x14002ABE0: "PageHeapTargetDlls" ??_C@_1CG@ILGGFBG@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x140029118: "
" ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x14002DA34: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x14000BD88: "public: virtual __cdecl wil::ResultException::~ResultException(void) __ptr64" ??1ResultException@wil@@UEAA@XZ
0x14002A8F8: "clr.dll" ??_C@_1BA@GGGHJGAI@?$AAc?$AAl?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14002610D: GetCurrentProcess
0x14002B680: "Software\Microsoft\Windows NT\Cu" ??_C@_1JK@JFBNFNAC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140027C00: "__cdecl _imp_SHGetFolderPathW" __imp_SHGetFolderPathW
0x140015C80: "public: virtual long __cdecl CCriticalProcessPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CCriticalProcessPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140009704: "long __cdecl UtilLogEvent(unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned long,void * __ptr64,unsigned long,void * __ptr64,unsigned long)" ?UtilLogEvent@@YAJKKKPEBGPEAPEBGKPEAXK2K@Z
0x14000C17C: "public: long __cdecl wil::details_abi::SemaphoreValue::CreateFromPointer(unsigned short const * __ptr64,void * __ptr64) __ptr64" ?CreateFromPointer@SemaphoreValue@details_abi@wil@@QEAAJPEBGPEAX@Z
0x1400280C8: "__cdecl _imp_ZwUpdateWnfStateData" __imp_ZwUpdateWnfStateData
0x1400167A0: "public: virtual void * __ptr64 __cdecl CInpagePlugIn::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCInpagePlugIn@@UEAAPEAXI@Z
0x1400339E0: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x14001172C: "long __cdecl WerpGetHeaderFromProcess(void * __ptr64,struct _WER_PEB_HEADER_BLOCK * __ptr64)" ?WerpGetHeaderFromProcess@@YAJPEAXPEAU_WER_PEB_HEADER_BLOCK@@@Z
0x1400281F0: "__cdecl _imp_?WerpIsTransportAvailable@@YAJHPEAH@Z" __imp_?WerpIsTransportAvailable@@YAJHPEAH@Z
0x140027268: "const CRuntimePlugin::`vftable'" ??_7CRuntimePlugin@@6B@
0x14000A9D4: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x14002BC38: WPP_f80ac12082e13b8ebf458c76346f48f2_Traceguids
0x140027B98: "__cdecl _imp_ReadProcessMemory" __imp_ReadProcessMemory
0x1400273E8: "const CDriverVerifierPlugin::`vftable'" ??_7CDriverVerifierPlugin@@6B@
0x14002B130: "GetMappedFileNameW" ??_C@_0BD@DENOEEPK@GetMappedFileNameW?$AA@
0x140027C08: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x1400278D0: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x140014368: "public: long __cdecl CCrashSignature::GenerateSignature(void * __ptr64,struct HINSTANCE__ * __ptr64,void * __ptr64,unsigned long,unsigned __int64) __ptr64" ?GenerateSignature@CCrashSignature@@QEAAJPEAXPEAUHINSTANCE__@@0K_K@Z
0x1400292E8: "" ??_C@_00CNPNBAHC@?$AA@
0x14002AB50: "PageHeapRandomProbability" ??_C@_1DE@GPFCNNBA@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAP?$AAr?$AAo?$AAb?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x1400289F8: "Version=" ??_C@_1BC@NPNAHMJ@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$DN?$AA?$AA@
0x140027EC8: "__cdecl _imp_memmove_s" __imp_memmove_s
0x140037028: "__cdecl _imp_GetThreadDesktop" __imp_GetThreadDesktop
0x14001E9F8: "private: static void __cdecl CTIPlugin::NotifyCFGViolation(void * __ptr64,void * __ptr64,unsigned short const * __ptr64,unsigned long,struct _CONTEXT const * __ptr64)" ?NotifyCFGViolation@CTIPlugin@@CAXPEAX0PEBGKPEBU_CONTEXT@@@Z
0x140033BC8: "__cdecl commode" _commode
0x140027EA0: "__cdecl _imp_isspace" __imp_isspace
0x140027AD8: "__cdecl _imp_InitializeProcThreadAttributeList" __imp_InitializeProcThreadAttributeList
0x14001B8A0: "public: virtual long __cdecl CAppRecorderPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CAppRecorderPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x1400278A8: "__cdecl _imp_RegDeleteKeyA" __imp_RegDeleteKeyA
0x140027A50: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x14002C7F8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x14001F2F0: "public: virtual long __cdecl CIptPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CIptPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140029568: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x140027B10: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x1400295A8: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x140034380: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x1400171E0: "public: virtual long __cdecl CInpagePlugIn::UnInitialize(void) __ptr64" ?UnInitialize@CInpagePlugIn@@UEAAJXZ
0x140027C48: VERSION_NULL_THUNK_DATA
0x140030364: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14000CFD4: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x140027E70: bcrypt_NULL_THUNK_DATA
0x140029228: "\StringFileInfo\%04x%04x\%s" ??_C@_1DI@JIECPNHK@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14003436C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvixlnnlmUoryvcUlyquivUznwGEUkivxlnkOlyq@WerCommonEx" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvixlnnlmUoryvcUlyquivUznwGEUkivxlnkOlyq@WerCommonEx
0x140007834: "public: long __cdecl CString::vSprintf(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?vSprintf@CString@@QEAAJPEBGPEAD@Z
0x140009294: "int __cdecl UtilFileExists(unsigned short const * __ptr64)" ?UtilFileExists@@YAHPEBG@Z
0x140021CC0: "private: long __cdecl CFDRPlugin::GetLogFilePath(class CString * __ptr64) __ptr64" ?GetLogFilePath@CFDRPlugin@@AEAAJPEAVCString@@@Z
0x140028090: "__cdecl _imp_RtlDetermineDosPathNameType_U" __imp_RtlDetermineDosPathNameType_U
0x14000ED30: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Read(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64) __ptr64" ?Read@UsageIndexProperty@details_abi@wil@@QEAA_NAEAPEAEPEAE@Z
0x140028BD0: "P10=" ??_C@_19OKDNGFPD@?$AAP?$AA1?$AA0?$AA?$DN?$AA?$AA@
0x140027F10: "__cdecl _imp_wcschr" __imp_wcschr
0x1400278B8: "__cdecl _imp_BuildSecurityDescriptorW" __imp_BuildSecurityDescriptorW
0x140020B00: "public: virtual long __cdecl CFDRPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CFDRPlugin@@UEAAJXZ
0x1400183BC: "private: long __cdecl CAutoVerifierPlugin::IsAutoVerifierRelatedIssue(int * __ptr64,class CString * __ptr64) __ptr64" ?IsAutoVerifierRelatedIssue@CAutoVerifierPlugin@@AEAAJPEAHPEAVCString@@@Z
0x140027E00: "__cdecl _imp_SetEvent" __imp_SetEvent
0x14001F360: "public: virtual long __cdecl CIptPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CIptPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140016AD0: "public: long __cdecl CInpagePlugIn::LogInPageError(unsigned short const * __ptr64,unsigned short const * __ptr64,long,unsigned long) __ptr64" ?LogInPageError@CInpagePlugIn@@QEAAJPEBG0JK@Z
0x14000D3C4: "int __cdecl UtilCheckProcessExecutionTimeForRestart(void * __ptr64)" ?UtilCheckProcessExecutionTimeForRestart@@YAHPEAX@Z
0x140027CD8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140029720: "\KernelObjects\SystemErrorPortRe" ??_C@_1EI@MEPMEHFB@?$AA?2?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAr?$AAr?$AAo?$AAr?$AAP?$AAo?$AAr?$AAt?$AAR?$AAe@
0x14002A8B8: "mscorwks.dll" ??_C@_1BK@CBBAIMNH@?$AAm?$AAs?$AAc?$AAo?$AAr?$AAw?$AAk?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140025BE4: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x140028088: "__cdecl _imp_RtlGetNtSystemRoot" __imp_RtlGetNtSystemRoot
0x140025730: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140028220: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400341D4: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x140028D98: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x14002C908: "onecore\shell\lib\calleridentity" ??_C@_0DE@CJAKDCPI@onecore?2shell?2lib?2calleridentity@
0x1400281B8: "__cdecl _imp_?WerpAddAppCompatData@@YAJPEAXPEBG1@Z" __imp_?WerpAddAppCompatData@@YAJPEAXPEBG1@Z
0x1400293D0: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x14002C2C0: "PolicyManager_GetPolicy" ??_C@_0BI@JMFDCDCB@PolicyManager_GetPolicy?$AA@
0x140033BD4: "__cdecl fmode" _fmode
0x140027BA0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000C3F4: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x14000E4E4: "long __cdecl wil_details_StagingConfig_Load(struct wil_details_StagingConfig * __ptr64,enum wil_FeatureStore,unsigned __int64,void * __ptr64,int)" ?wil_details_StagingConfig_Load@@YAJPEAUwil_details_StagingConfig@@W4wil_FeatureStore@@_KPEAXH@Z
0x14002A5D0: "Local\WERReportingForProcess%u" ??_C@_1DO@BFHMKKHD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAW?$AAE?$AAR?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAF?$AAo?$AAr?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$CF?$AAu?$AA?$AA@
0x140027F18: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140028208: "__cdecl _imp_WerpAddTerminationReason" __imp_WerpAddTerminationReason
0x140027B80: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x140015BE0: "public: virtual void * __ptr64 __cdecl CCriticalProcessPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCriticalProcessPlugin@@UEAAPEAXI@Z
0x140027A18: "__cdecl _imp_GetThreadId" __imp_GetThreadId
0x1400279E0: "__cdecl _imp_Module32FirstW" __imp_Module32FirstW
0x14002BD08: "taskhost.exe" ??_C@_1BK@NJLILCKE@?$AAt?$AAa?$AAs?$AAk?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140017520: "private: unsigned long __cdecl CInpagePlugIn::GetMediumType(unsigned short const * __ptr64) __ptr64" ?GetMediumType@CInpagePlugIn@@AEAAKPEBG@Z
0x14002A888: "_unloaded" ??_C@_1BE@BHMNEDCM@?$AA_?$AAu?$AAn?$AAl?$AAo?$AAa?$AAd?$AAe?$AAd?$AA?$AA@
0x14002BE90: "Software\Microsoft\Windows\Windo" ??_C@_1JM@DIGPLEBL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x140025C54: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x140027BC0: "__cdecl _imp_GetSystemWow64DirectoryW" __imp_GetSystemWow64DirectoryW
0x1400303DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x1400108C0: "void __cdecl wil::details::WilApiImpl_SubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?WilApiImpl_SubscribeFeatureStateChangeNotification@details@wil@@YAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x14000FDD0: "public: void __cdecl wil::details_abi::SubscriptionList::SubscribeUnderLock(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeUnderLock@SubscriptionList@details_abi@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x1400291F0: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140034168: "__cdecl _hmod__ext_ms_win_imm_l1_1_0_dll" __hmod__ext_ms_win_imm_l1_1_0_dll
0x1400081D8: "public: void __cdecl CString::UnInitialize(int) __ptr64" ?UnInitialize@CString@@QEAAXH@Z
0x14002DA38: "__cdecl tls_end" _tls_end
0x14002B458: "LastPromptedTime" ??_C@_1CC@EBDNIEBP@?$AAL?$AAa?$AAs?$AAt?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AAe?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140028068: "__cdecl _imp_ZwQueryInformationThread" __imp_ZwQueryInformationThread
0x14002AFD0: "BEX64" ??_C@_1M@LEILPCO@?$AAB?$AAE?$AAX?$AA6?$AA4?$AA?$AA@
0x14002578E: "__cdecl XcptFilter" _XcptFilter
0x1400278B0: "__cdecl _imp_RegSetKeySecurity" __imp_RegSetKeySecurity
0x140028228: "__cdecl _xc_a" __xc_a
0x140015EF0: "public: virtual long __cdecl CFTHPlugIn::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CFTHPlugIn@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140027EB0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x1400034E0: "private: void __cdecl CExceptionReport::PostProcess(enum _WER_SUBMIT_RESULT) __ptr64" ?PostProcess@CExceptionReport@@AEAAXW4_WER_SUBMIT_RESULT@@@Z
0x14001CF90: "public: virtual void * __ptr64 __cdecl CStowedExceptionPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCStowedExceptionPlugin@@UEAAPEAXI@Z
0x140027D30: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x1400295E0: "ErrorPort" ??_C@_1BE@HKHCPGCA@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x1400166BC: "public: __cdecl CInpagePlugIn::CInpagePlugIn(void) __ptr64" ??0CInpagePlugIn@@QEAA@XZ
0x140024BF0: "int __cdecl UtilIsCurrentProcessInteractive(void)" ?UtilIsCurrentProcessInteractive@@YAHXZ
0x14001F8E0: "public: virtual void * __ptr64 __cdecl CDriverVerifierPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDriverVerifierPlugin@@UEAAPEAXI@Z
0x14002A7C8: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400341F8: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140029300: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x140028158: "__cdecl _imp_NtResumeProcess" __imp_NtResumeProcess
0x14002BE88: " " ??_C@_01CLKCMJKC@?5?$AA@
0x140027A60: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x140027208: "const CInpagePlugIn::`vftable'" ??_7CInpagePlugIn@@6B@
0x14000A1DC: "unsigned long __cdecl UtilGetTimestampModule(void * __ptr64,struct HINSTANCE__ * __ptr64)" ?UtilGetTimestampModule@@YAKPEAXPEAUHINSTANCE__@@@Z
0x140010A80: "void __cdecl wil::details::RecordSRUMFeatureUsage(unsigned int,unsigned int,unsigned int)" ?RecordSRUMFeatureUsage@details@wil@@YAXIII@Z
0x14002C2D8: "PolicyManager_FreeGetPolicyData" ??_C@_0CA@KIMLHJHB@PolicyManager_FreeGetPolicyData?$AA@
0x14002ACF8: "AutoVerifierBucketID" ??_C@_1CK@KLJLFANP@?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AAI?$AAD?$AA?$AA@
0x14002A210: "WER/CrashAPI:%u: TRACE WERP_DEBU" ??_C@_0EB@ELPKNILM@WER?1CrashAPI?3?$CFu?3?5TRACE?5WERP_DEBU@
0x140015EF0: "public: virtual long __cdecl CFTHPlugIn::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CFTHPlugIn@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140010B20: ??1?$function@$$A6A_NPEAX_K01I@Z@wistd@@QEAA@XZ
0x14000C79C: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x14001CB00: "public: virtual long __cdecl CPinDLLPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CPinDLLPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140027E50: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x140027B60: "__cdecl _imp_FindClose" __imp_FindClose
0x140029508: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x140029078: "Watson=1" ??_C@_1BC@MPCEADCB@?$AAW?$AAa?$AAt?$AAs?$AAo?$AAn?$AA?$DN?$AA1?$AA?$AA@
0x140027DB8: "__cdecl _imp_StrStrIW" __imp_StrStrIW
0x14000D094: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x140028998: EVENT_CRASH_ON_LAUNCH
0x14001F71C: "private: void __cdecl CIptPlugin::PrepareIptSettings(void) __ptr64" ?PrepareIptSettings@CIptPlugin@@AEAAXXZ
0x140028FAC: "P4" ??_C@_15DNPKDJFN@?$AAP?$AA4?$AA?$AA@
0x140028FD4: "P9" ??_C@_15MPJAOBIA@?$AAP?$AA9?$AA?$AA@
0x140027CE0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140027AA0: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x14000B06C: "unsigned __int64 __cdecl UtilRegGetQWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64,int * __ptr64,int)" ?UtilRegGetQWORD@@YA_KPEAUHKEY__@@PEBG1_KPEAHH@Z
0x140029038: "Notification handles" ??_C@_1CK@DOMPNDCO@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAh?$AAa?$AAn?$AAd?$AAl?$AAe?$AAs?$AA?$AA@
0x140025AE9: "__cdecl lock" _lock
0x140034218: g_pfnResultLoggingCallback
0x14001BDD0: "private: long __cdecl CAppRecorderPlugin::StopRecordingSession(unsigned long) __ptr64" ?StopRecordingSession@CAppRecorderPlugin@@AEAAJK@Z
0x140028DE8: "/dw/stagetwo64.asp" ??_C@_1CG@DEDAEEFP@?$AA?1?$AAd?$AAw?$AA?1?$AAs?$AAt?$AAa?$AAg?$AAe?$AAt?$AAw?$AAo?$AA6?$AA4?$AA?4?$AAa?$AAs?$AAp?$AA?$AA@
0x140029318: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x140028F94: "P1" ??_C@_15KCEMJGP@?$AAP?$AA1?$AA?$AA@
0x140028168: "__cdecl _imp_RtlNtStatusToDosErrorNoTeb" __imp_RtlNtStatusToDosErrorNoTeb
0x140015EF0: "public: virtual long __cdecl CCrashOnLaunch::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CCrashOnLaunch@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140025E27: "__cdecl callnewh" _callnewh
0x1400181C8: "private: long __cdecl CAutoVerifierPlugin::FindVerifierAndWerDiagDlls(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64 * __ptr64,struct HINSTANCE__ * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?FindVerifierAndWerDiagDlls@CAutoVerifierPlugin@@AEAAJPEAPEAUHINSTANCE__@@PEAPEBG0PEAH@Z
0x14002B018: "MoBEX" ??_C@_1M@DAJOKJHB@?$AAM?$AAo?$AAB?$AAE?$AAX?$AA?$AA@
0x140028C90: "Main_QueueBtn=" ??_C@_1BO@DGPMENFD@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAB?$AAt?$AAn?$AA?$DN?$AA?$AA@
0x140027CB8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x140023854: StartCoreIptTracing
0x140027EB8: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x14002846C: "__cdecl _guard_iat_table" __guard_iat_table
0x14002A3E0: "WER/CrashAPI:%u: TRACE Faulting " ??_C@_0EG@BHOBEKDL@WER?1CrashAPI?3?$CFu?3?5TRACE?5Faulting?5@
0x140027D28: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400260F5: GetLastError
0x140024E34: "long __cdecl CoAllocStringLen(unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64)" ?CoAllocStringLen@@YAJPEBG_KPEAPEAG@Z
0x140034210: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x140026612: memcpy
0x140029C10: "Auto" ??_C@_19HKELMMGB@?$AAA?$AAu?$AAt?$AAo?$AA?$AA@
0x140028540: "__cdecl _sz_ext_ms_win_kernel32_package_l1_1_0_dll" __sz_ext_ms_win_kernel32_package_l1_1_0_dll
0x140027B90: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x14001D120: "public: virtual long __cdecl CStowedExceptionPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CStowedExceptionPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x1400299F0: "DebuggerProtectionLevel" ??_C@_1DA@FFEKJCDP@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1400262EC: IsIsWindowPresent
0x1400264F0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x140015F50: "public: virtual void * __ptr64 __cdecl CTIPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTIPlugin@@UEAAPEAXI@Z
0x14000C48C: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x1400294E8: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140029708: "struct _GUID const `long __cdecl SignalStartWerSvc(void)'::`2'::WerSvcTriggerGuid" ?WerSvcTriggerGuid@?1??SignalStartWerSvc@@YAJXZ@4U_GUID@@B
0x140027F78: "__cdecl _imp_memset" __imp_memset
0x140027B20: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x140027B28: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x140027A30: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140028E60: "szAppName" ??_C@_1BE@CBDPPKBO@?$AAs?$AAz?$AAA?$AAp?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140025A0F: "__cdecl initterm" _initterm
0x140033B9A: g_header_init_InitializeResultExceptions
0x1400280D8: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x1400295D0: "0x%08X" ??_C@_1O@GNPNAMOC@?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?$AA@
0x14001CFC8: "public: virtual __cdecl CStowedExceptionPlugin::~CStowedExceptionPlugin(void) __ptr64" ??1CStowedExceptionPlugin@@UEAA@XZ
0x140028FC4: "P7" ??_C@_15CPEPJGLD@?$AAP?$AA7?$AA?$AA@
0x140030328: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400343F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000C9E4: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x140027E20: "__cdecl _imp_Sleep" __imp_Sleep
0x1400289D8: EVENT_FTH_EXCEPTION_OF_INTEREST
0x140029188: WPP_e59b939ad0ee37c2d715676e2f134051_Traceguids
0x140028060: "__cdecl _imp_RtlGetUnloadEventTraceEx" __imp_RtlGetUnloadEventTraceEx
0x1400282A0: "__cdecl _xi_z" __xi_z
0x1400341CC: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x1400167A0: "public: virtual void * __ptr64 __cdecl CInpagePlugIn::`vector deleting destructor'(unsigned int) __ptr64" ??_ECInpagePlugIn@@UEAAPEAXI@Z
0x140005860: "private: long __cdecl CExceptionReport::CreateReportAndSetCrashParams(struct _WER_REPORT_INFORMATION * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateReportAndSetCrashParams@CExceptionReport@@AEAAJPEAU_WER_REPORT_INFORMATION@@PEAPEAX@Z
0x14002AD28: "StackTraceDatabaseSizeInMb" ??_C@_1DG@HCPBKMAB@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAT?$AAr?$AAa?$AAc?$AAe?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AAS?$AAi?$AAz?$AAe?$AAI?$AAn?$AAM?$AAb?$AA?$AA@
0x140027CA8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14001E338: "private: static long __cdecl CStowedExceptionPlugin::BuildUnloadedModuleList(class CList<struct _PROCESS_MODULE * __ptr64> * __ptr64,void * __ptr64)" ?BuildUnloadedModuleList@CStowedExceptionPlugin@@CAJPEAV?$CList@PEAU_PROCESS_MODULE@@@@PEAX@Z
0x140034238: g_pfnThrowPlatformException
0x14002BE38: "Bucket=" ??_C@_1BA@KIGEDKBA@?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AA?$DN?$AA?$AA@
0x14002421C: "public: long __cdecl CRegSetting::Initialize(enum _DataType,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64) __ptr64" ?Initialize@CRegSetting@@QEAAJW4_DataType@@PEBG1_K@Z
0x1400303F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0
0x140028010: "__cdecl _imp_wcscmp" __imp_wcscmp
0x140027D20: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140034230: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x1400031D0: "private: static unsigned long __cdecl CExceptionReport::Report_Static(void * __ptr64)" ?Report_Static@CExceptionReport@@CAKPEAX@Z
0x140037018: ext-ms-win-kernel32-package-l1-1-0_NULL_THUNK_DATA_DLA
0x140030288: ext-ms-win-kernel32-package-l1-1-0_NULL_THUNK_DATA_DLB
0x140025A1B: "__cdecl _C_specific_handler" __C_specific_handler
0x140027DD8: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x140015EF0: "public: virtual long __cdecl CCrashOnLaunch::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CCrashOnLaunch@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x1400301D8: ext-ms-win-kernel32-package-l1-1-0_NULL_THUNK_DATA_DLN
0x140027DF0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x140007CDC: "public: long __cdecl CString::Replace(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,int) __ptr64" ?Replace@CString@@QEAAJPEBG0PEAKH@Z
0x140029438: "
" ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140027B08: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x1400284A0: "ext-ms-win-kernel32-package-l1-1" ??_C@_1EG@MGKHEDOI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?9?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x140034200: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x1400281E0: "__cdecl _imp_?WerpSetReportFlags@@YAJPEAXK@Z" __imp_?WerpSetReportFlags@@YAJPEAXK@Z
0x14000A3C0: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x14000A074: "long __cdecl UtilGetProductName(unsigned short const * __ptr64,class CString * __ptr64)" ?UtilGetProductName@@YAJPEBGPEAVCString@@@Z
0x14000DF80: "long __cdecl WersvcSendMessage(unsigned short const * __ptr64,struct _WERSVC_MSG * __ptr64,struct _WERSVC_MSG * __ptr64,unsigned long)" ?WersvcSendMessage@@YAJPEBGPEAU_WERSVC_MSG@@1K@Z
0x140027F80: "__cdecl _imp__onexit" __imp__onexit
0x140016F58: "private: long __cdecl CInpagePlugIn::StartCoFireProcess(void) __ptr64" ?StartCoFireProcess@CInpagePlugIn@@AEAAJXZ
0x14002661E: memmove
0x140027B58: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140027DC0: api-ms-win-core-shlwapi-obsolete-l1-1-0_NULL_THUNK_DATA
0x140029540: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x140014F70: "public: virtual long __cdecl CTIPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CTIPlugin@@UEAAJXZ
0x140023134: "long __cdecl WerPluginAdjustAppContainerAccessToKey(struct HKEY__ * __ptr64,enum _ACCESS_MODE,unsigned long)" ?WerPluginAdjustAppContainerAccessToKey@@YAJPEAUHKEY__@@W4_ACCESS_MODE@@K@Z
0x1400341B8: "__cdecl _hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll" __hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x140014F7C: "long __cdecl WerPluginsCreate(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?WerPluginsCreate@@YAJPEBGPEAPEAX@Z
0x140006EDC: "public: static long __cdecl CString::GetUnicodeString(char const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetUnicodeString@CString@@SAJPEBDPEAPEAG@Z
0x1400286A8: "ext-ms-win-ntuser-synch-l1-1-0" ??_C@_1DO@ENBBJHNH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAs?$AAy?$AAn?$AAc?$AAh?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14002B958: "%d-AppRecorderEnabled" ??_C@_1CM@EHBAGMAE@?$AA?$CF?$AAd?$AA?9?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140029198: WPP_0ddde0db230d35cb6cb179c1d6ff24e7_Traceguids
0x1400085F0: "void __cdecl KeyValueParseCStringW(unsigned short const * __ptr64,unsigned long,void * __ptr64,unsigned long)" ?KeyValueParseCStringW@@YAXPEBGKPEAXK@Z
0x140025E1B: malloc
0x14002A188: "WER/CrashAPI:%u: TRACE WERP_DEBU" ??_C@_0DL@GHOHIKKH@WER?1CrashAPI?3?$CFu?3?5TRACE?5WERP_DEBU@
0x140027910: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x14002AA20: "AppHangXProcB1" ??_C@_1BO@MLBGEIIL@?$AAA?$AAp?$AAp?$AAH?$AAa?$AAn?$AAg?$AAX?$AAP?$AAr?$AAo?$AAc?$AAB?$AA1?$AA?$AA@
0x14002A4C0: "WER/CrashAPI:%u: ERROR Failed to" ??_C@_0EA@BFEKBFKM@WER?1CrashAPI?3?$CFu?3?5ERROR?5Failed?5to@
0x140010F28: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x140027F58: "__cdecl _imp__wtoi" __imp__wtoi
0x140027CD0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1400279A8: "__cdecl _imp_GlobalMemoryStatusEx" __imp_GlobalMemoryStatusEx
0x1400066D4: "protected: long __cdecl CWatsonReport::GetReportFlagsAndConsent(unsigned long * __ptr64,enum _WER_CONSENT * __ptr64) __ptr64" ?GetReportFlagsAndConsent@CWatsonReport@@IEAAJPEAKPEAW4_WER_CONSENT@@@Z
0x140015EF0: "public: virtual long __cdecl CPinDLLPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CPinDLLPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x14002B268: "%s/%x" ??_C@_1M@MAHKMHOP@?$AA?$CF?$AAs?$AA?1?$AA?$CF?$AAx?$AA?$AA@
0x140028138: "__cdecl _imp_NtQueryInformationThread" __imp_NtQueryInformationThread
0x140027938: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140011FB8: WerpLaunchAeDebug
0x140028140: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x14002648C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14002BAE0: "Cannot log ETW event, Error %d" ??_C@_0BP@DNDHBIID@Cannot?5log?5ETW?5event?0?5Error?5?$CFd?$AA@
0x14003042C: "__cdecl _IMPORT_DESCRIPTOR_VERSION" __IMPORT_DESCRIPTOR_VERSION
0x14001E058: "private: static long __cdecl CStowedExceptionPlugin::FindModule(struct _PROCESS_MODULE * __ptr64 * __ptr64,class CList<struct _PROCESS_MODULE * __ptr64> * __ptr64,void * __ptr64)" ?FindModule@CStowedExceptionPlugin@@CAJPEAPEAU_PROCESS_MODULE@@PEAV?$CList@PEAU_PROCESS_MODULE@@@@PEAX@Z
0x140017648: "private: int __cdecl CInpagePlugIn::IsSystemFileProtectedInstance(void) __ptr64" ?IsSystemFileProtectedInstance@CInpagePlugIn@@AEAAHXZ
0x140029020: "drwatson" ??_C@_1BC@OPDCAOFC@?$AAd?$AAr?$AAw?$AAa?$AAt?$AAs?$AAo?$AAn?$AA?$AA@
0x140011628: "long __cdecl WerpReadPebFromProcess(void * __ptr64,void * __ptr64,unsigned long,unsigned long)" ?WerpReadPebFromProcess@@YAJPEAX0KK@Z
0x140014F70: "public: virtual long __cdecl CDriverVerifierPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CDriverVerifierPlugin@@UEAAJXZ
0x1400036AC: "private: long __cdecl CExceptionReport::CreateAndSubmitReport(enum _WER_SUBMIT_RESULT * __ptr64) __ptr64" ?CreateAndSubmitReport@CExceptionReport@@AEAAJPEAW4_WER_SUBMIT_RESULT@@@Z
0x140018570: "public: virtual long __cdecl CAutoVerifierPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CAutoVerifierPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140003E94: "private: long __cdecl CExceptionReport::TerminateApp(int) __ptr64" ?TerminateApp@CExceptionReport@@AEAAJH@Z
0x140013194: "private: long __cdecl CCrashSignature::TryGetServiceDisplayName(unsigned short const * __ptr64,class CString * __ptr64) __ptr64" ?TryGetServiceDisplayName@CCrashSignature@@AEAAJPEBGPEAVCString@@@Z
0x140027D80: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x140029560: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x14002ADE0: "PageHeapVirtualMemoryPercent" ??_C@_1DK@ENKHPLNN@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
0x140007E84: "public: long __cdecl CString::Attach(unsigned short const * __ptr64) __ptr64" ?Attach@CString@@QEAAJPEBG@Z
0x1400301C8: ext-ms-win-imm-l1-1-0_NULL_THUNK_DATA_DLN
0x14002A7E8: "GetServiceDisplayNameW" ??_C@_0BH@DHOAHLBD@GetServiceDisplayNameW?$AA@
0x140034248: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140034340: "long (__cdecl* __ptr64 g_wil_details_pfnNtUpdateWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnNtUpdateWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@ZEA
0x14002C5D0: "TelemetryPermission-AllowDisable" ??_C@_1EC@OCMHIBCH@?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAP?$AAe?$AAr?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe@
0x140029778: "NtQueryWnfStateData" ??_C@_0BE@KACOKPLP@NtQueryWnfStateData?$AA@
0x140018DE8: "private: long __cdecl CAutoVerifierPlugin::GetOriginalBucket(struct HINSTANCE__ * __ptr64,class CString * __ptr64) __ptr64" ?GetOriginalBucket@CAutoVerifierPlugin@@AEAAJPEAUHINSTANCE__@@PEAVCString@@@Z
0x14002A700: "autorun.exe" ??_C@_1BI@OAFKGFIO@?$AAa?$AAu?$AAt?$AAo?$AAr?$AAu?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140029950: "\Registry\Machine\Software\Micro" ??_C@_1KA@NGACKKKL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x14002A7C0: "_" ??_C@_01IDAFKMJL@_?$AA@
0x14003017C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x14002B8A0: "Software\Microsoft\Windows\Windo" ??_C@_1IO@NOKLNFIA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x140028058: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x14002A7A0: "rundll32.exe" ??_C@_1BK@GLCOODMC@?$AAr?$AAu?$AAn?$AAd?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140014F70: "public: virtual struct WER_PLUGIN_INIT_OUT * __ptr64 __cdecl CCriticalProcessPlugin::GetInitializationData(void) __ptr64" ?GetInitializationData@CCriticalProcessPlugin@@UEAAPEAUWER_PLUGIN_INIT_OUT@@XZ
0x140028BC8: "P9=" ??_C@_17OOMPKFEJ@?$AAP?$AA9?$AA?$DN?$AA?$AA@
0x140027DD0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1400279E8: "__cdecl _imp_SetEnvironmentVariableW" __imp_SetEnvironmentVariableW
0x1400300F0: "__cdecl CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200" _CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200
0x140005270: "private: long __cdecl CExceptionReport::PopulateReportData(void) __ptr64" ?PopulateReportData@CExceptionReport@@AEAAJXZ
0x14003015C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_kernel32_package_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_kernel32_package_l1_1_0_dll
0x140029C48: "PEB_SIGNATURE" ??_C@_1BM@MKPHKNOG@?$AAP?$AAE?$AAB?$AA_?$AAS?$AAI?$AAG?$AAN?$AAA?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x14002AC70: "AutoVerifierFlags" ??_C@_1CE@NFKNKJGA@?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1400190A4: "private: long __cdecl CAutoVerifierPlugin::CheckSettingsAndVersion(int * __ptr64) __ptr64" ?CheckSettingsAndVersion@CAutoVerifierPlugin@@AEAAJPEAH@Z
0x140028F10: "szModStamp" ??_C@_1BG@BPAAHDL@?$AAs?$AAz?$AAM?$AAo?$AAd?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x14003013C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_imm_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_imm_l1_1_0_dll
0x14002B1C0: "vrfcore.dll" ??_C@_1BI@CPNGMKLH@?$AAv?$AAr?$AAf?$AAc?$AAo?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140027928: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14002A988: "%016I64x" ??_C@_1BC@NOACBPI@?$AA?$CF?$AA0?$AA1?$AA6?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x140025843: "__cdecl amsg_exit" _amsg_exit
0x140027EF0: "__cdecl _imp__callnewh" __imp__callnewh
0x14002B390: "%s@%s" ??_C@_1M@BOLAPCPJ@?$AA?$CF?$AAs?$AA?$EA?$AA?$CF?$AAs?$AA?$AA@
0x14000B14C: "long __cdecl UtilRegGetString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class CString * __ptr64,int,int)" ?UtilRegGetString@@YAJPEAUHKEY__@@PEBG11PEAVCString@@HH@Z
0x140014F70: "public: virtual long __cdecl CAutoVerifierPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CAutoVerifierPlugin@@UEAAJXZ
0x140015EF0: "public: virtual long __cdecl CBEXPlugIn::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CBEXPlugIn@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x1400296B0: "NoHardConsent" ??_C@_1BM@NLALIGLB@?$AAN?$AAo?$AAH?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAs?$AAe?$AAn?$AAt?$AA?$AA@
0x140015A18: "long __cdecl WerPluginsInvokeCallback(void * __ptr64,unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64)" ?WerPluginsInvokeCallback@@YAJPEAXPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x14002C7F0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140027AE0: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x140028048: "__cdecl _imp_RtlSetThreadErrorMode" __imp_RtlSetThreadErrorMode
0x14002C8D8: WPP_3d32c5a88f7c379afea15fa7b8b4f18f_Traceguids
0x14000CDBC: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x14002B730: "Software\Microsoft\Windows\Windo" ??_C@_1KC@EFDAHMFM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x14002C888: "default" ??_C@_1BA@HANLFFFG@?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x140021F54: "private: long __cdecl CFDRPlugin::DeleteFDRLayer(void) __ptr64" ?DeleteFDRLayer@CFDRPlugin@@AEAAJXZ
0x1400281F8: "__cdecl _imp_WerReportSetUIOption" __imp_WerReportSetUIOption
0x14002B5E0: "Software\Microsoft\Windows NT\Cu" ??_C@_1JE@FDFIOPDM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140034350: "void (__cdecl* __ptr64 g_wil_details_internalUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_internalUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x14002A470: "WER/CrashAPI:%u: ERROR Initializ" ??_C@_0EH@CHDODLCJ@WER?1CrashAPI?3?$CFu?3?5ERROR?5Initializ@
0x140028E38: "LEGACY" ??_C@_1O@ELFAMGEE@?$AAL?$AAE?$AAG?$AAA?$AAC?$AAY?$AA?$AA@
0x14002A290: "%s\system32\%s" ??_C@_1BO@MDMBDJMH@?$AA?$CF?$AAs?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140027AF8: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x140030454: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x140002CA8: "private: long __cdecl CManifestReport::SetParamsFromCrashStage2(unsigned short const * __ptr64) __ptr64" ?SetParamsFromCrashStage2@CManifestReport@@AEAAJPEBG@Z
0x140015F50: "public: virtual void * __ptr64 __cdecl IWERPlugIn::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIWERPlugIn@@UEAAPEAXI@Z
0x14002BD40: "Software\Microsoft\Windows\Windo" ??_C@_1JE@PFOLLLEB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x140027A78: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1400297A8: "RtlSubscribeWnfStateChangeNotifi" ??_C@_0CH@DLHFNNLE@RtlSubscribeWnfStateChangeNotifi@
0x140027FE0: "__cdecl _imp_exit" __imp_exit
0x14000B6D0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x14002BBE8: "rpcrt4" ??_C@_1O@DKFAHJJL@?$AAr?$AAp?$AAc?$AAr?$AAt?$AA4?$AA?$AA@
0x14001DA20: "private: static void __cdecl CStowedExceptionPlugin::CompactMD5Digest(unsigned long * __ptr64,unsigned char * __ptr64)" ?CompactMD5Digest@CStowedExceptionPlugin@@CAXPEAKPEAE@Z
0x140008878: "long __cdecl UtilIsWindowManagerToken(void * __ptr64)" ?UtilIsWindowManagerToken@@YAJPEAX@Z
0x140034300: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUxlnnlmUoryvcUlyquivUznwGEUkivxlnkOlyq@FeedbackCommonEx" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUxlnnlmUoryvcUlyquivUznwGEUkivxlnkOlyq@FeedbackCommonEx
0x140020B10: "public: virtual long __cdecl CFDRPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CFDRPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140027F98: "__cdecl _imp__lock" __imp__lock
0x14000AD64: "long __cdecl UtilExpandEnvVariable(unsigned short const * __ptr64,class CString * __ptr64)" ?UtilExpandEnvVariable@@YAJPEBGPEAVCString@@@Z
0x14002B0B0: ""%s" "%s" "%s"" ??_C@_1BO@DNOPCMAA@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?$AA@
0x1400112D0: ??_E?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x140025ABC: atexit
0x1400247C8: "public: static long __cdecl PackageUtility::ParseApplicationId(unsigned short const * __ptr64,class CString * __ptr64,class CString * __ptr64)" ?ParseApplicationId@PackageUtility@@SAJPEBGPEAVCString@@1@Z
0x140028C00: "Main_Intro_Reg=" ??_C@_1CA@JHAOBJHD@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAI?$AAn?$AAt?$AAr?$AAo?$AA_?$AAR?$AAe?$AAg?$AA?$DN?$AA?$AA@
0x14002BCF0: "dllhost.exe" ??_C@_1BI@GCFGNDGI@?$AAd?$AAl?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140028CE0: "TitleName=" ??_C@_1BG@BNEKFFGK@?$AAT?$AAi?$AAt?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$AA@
0x140029140: "api-ms-win-core-wow64-l1-1-1.dll" ??_C@_1EC@PIGOOGAE@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAw?$AAo?$AAw?$AA6?$AA4?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?4?$AAd?$AAl?$AAl@
0x140034280: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x1400341C8: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x14002A1C8: "WER/CrashAPI:%u: TRACE WERP_DEBU" ??_C@_0DJ@GPOAPNEH@WER?1CrashAPI?3?$CFu?3?5TRACE?5WERP_DEBU@
0x140004710: "private: void __cdecl CExceptionReport::ActOnResponseToApp(void) __ptr64" ?ActOnResponseToApp@CExceptionReport@@AEAAXXZ
0x140027E98: "__cdecl _imp_towlower" __imp_towlower
0x140028920: "__cdecl _sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x14000A3DC: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x1400095D0: "unsigned long __cdecl LogEventWorkerThread(void * __ptr64)" ?LogEventWorkerThread@@YAKPEAX@Z
0x140003C28: "private: void __cdecl CExceptionReport::SetProcessDoneEvents(void) __ptr64" ?SetProcessDoneEvents@CExceptionReport@@AEAAXXZ
0x14000AA9C: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x140028FF0: WPP_3c9ec581780135e57865b53f2d872cdc_Traceguids
0x14002BBA0: "gdi32" ??_C@_1M@BHIEOGKE@?$AAg?$AAd?$AAi?$AA3?$AA2?$AA?$AA@
0x14002955C: "%ws" ??_C@_03BMPLCLAP@?$CFws?$AA@
0x140027A98: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x140027EA8: "__cdecl _imp_tolower" __imp_tolower
0x140034268: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x140027A68: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x140028150: "__cdecl _imp_NtSuspendProcess" __imp_NtSuspendProcess
0x1400157F4: "long __cdecl WerPluginsInitialize(void * __ptr64,struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64)" ?WerPluginsInitialize@@YAJPEAXPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140027D90: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x140028480: "__cdecl _sz_ext_ms_win_imm_l1_1_0_dll" __sz_ext_ms_win_imm_l1_1_0_dll
0x14001F4DC: "private: long __cdecl CIptPlugin::EnableIpt(void) __ptr64" ?EnableIpt@CIptPlugin@@AEAAJXZ
0x140028A10: "General_AppName=" ??_C@_1CC@DJEMBDCB@?$AAG?$AAe?$AAn?$AAe?$AAr?$AAa?$AAl?$AA_?$AAA?$AAp?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$AA@
0x14002BE58: "Invalid params" ??_C@_0P@JOJFANHN@Invalid?5params?$AA@
0x1400111D4: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x140027CB0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400281A8: "__cdecl _imp_WerReportAddDump" __imp_WerReportAddDump
0x1400273B8: "const CIptPlugin::`vftable'" ??_7CIptPlugin@@6B@
0x14001AF0C: "private: long __cdecl CRuntimePlugin::AskModuleToClaimCrash(unsigned short const * __ptr64,void * __ptr64,unsigned long * __ptr64,long (__cdecl* * __ptr64)(void * __ptr64,struct _WER_RUNTIME_EXCEPTION_INFORMATION * __ptr64 const,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64),long (__cdecl* * __ptr64)(void * __ptr64,struct _WER_RUNTIME_EXCEPTION_INFORMATION * __ptr64 const,int * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,int * __ptr64),struct HINSTANCE__ * __ptr64 * __ptr64) __ptr64" ?AskModuleToClaimCrash@CRuntimePlugin@@AEAAJPEBGPEAXPEAKPEAP6AJ1QEAU_WER_RUNTIME_EXCEPTION_INFORMATION@@KPEAG242@ZPEAP6AJ13PEAH426@ZPEAPEAUHINSTANCE__@@@Z
0x140021E50: "private: long __cdecl CFDRPlugin::AddLogToUploadCab(void * __ptr64) __ptr64" ?AddLogToUploadCab@CFDRPlugin@@AEAAJPEAX@Z
0x140020810: "private: long __cdecl CList<class CString>::AddElementAfterNode(struct CList<class CString>::_CListNode * __ptr64,class CString & __ptr64) __ptr64" ?AddElementAfterNode@?$CList@VCString@@@@AEAAJPEAU_CListNode@1@AEAVCString@@@Z
0x140027A38: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x140008B68: "long __cdecl UtilGetFriendlyAppName(unsigned short const * __ptr64,class CString * __ptr64)" ?UtilGetFriendlyAppName@@YAJPEBGPEAVCString@@@Z
0x14002A148: "WER/CrashAPI:%u: TRACE WERP_DEBU" ??_C@_0DJ@PKNOBDIF@WER?1CrashAPI?3?$CFu?3?5TRACE?5WERP_DEBU@
0x14001E0F0: "private: static long __cdecl CStowedExceptionPlugin::BuildLoadedModuleList(class CList<struct _PROCESS_MODULE * __ptr64> * __ptr64,void * __ptr64,unsigned long)" ?BuildLoadedModuleList@CStowedExceptionPlugin@@CAJPEAV?$CList@PEAU_PROCESS_MODULE@@@@PEAXK@Z
0x14002BB60: "kernelbase" ??_C@_1BG@CJPGBMEF@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x14003435C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUexzkrUoryUlyquivUznwGEUkivxlnkOlyq@vcapi" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUexzkrUoryUlyquivUznwGEUkivxlnkOlyq@vcapi
0x140027D50: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140025B01: "__cdecl _dllonexit" __dllonexit
0x140013988: "private: long __cdecl CCrashSignature::UpdateServiceGroupForSvchost(void * __ptr64) __ptr64" ?UpdateServiceGroupForSvchost@CCrashSignature@@AEAAJPEAX@Z
0x14000CEE8: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x14002BFD0: "FDR_FLUSH_MESSAGE" ??_C@_1CE@IMPEKBLH@?$AAF?$AAD?$AAR?$AA_?$AAF?$AAL?$AAU?$AAS?$AAH?$AA_?$AAM?$AAE?$AAS?$AAS?$AAA?$AAG?$AAE?$AA?$AA@
0x14002BB90: "user32" ??_C@_1O@BCCLBEOE@?$AAu?$AAs?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x14000D940: "int __cdecl UtilDebugSuspendDWProcess(void)" ?UtilDebugSuspendDWProcess@@YAHXZ
0x140011924: "int __cdecl WerpIsProtectedProcess(void * __ptr64)" ?WerpIsProtectedProcess@@YAHPEAX@Z
0x14002BE34: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x140005130: "private: int __cdecl CExceptionReport::OKToStart(void) __ptr64" ?OKToStart@CExceptionReport@@AEAAHXZ
0x14001BC98: "private: long __cdecl CAppRecorderPlugin::IsAppRecorderEnabled(unsigned long) __ptr64" ?IsAppRecorderEnabled@CAppRecorderPlugin@@AEAAJK@Z
0x14002C140: "LogFileMode" ??_C@_1BI@CKOCKMJL@?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1400278F8: "__cdecl _imp_I_QueryTagInformation" __imp_I_QueryTagInformation
0x140008510: "public: void __cdecl CFileMap::UnmapFile(void) __ptr64" ?UnmapFile@CFileMap@@QEAAXXZ
0x140028D48: "Flags=" ??_C@_1O@NBJLICAJ@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$DN?$AA?$AA@
0x14002B1B0: WPP_5194443bc218385848e732412e5fc6df_Traceguids
0x14002B1F8: "werdiagcontroller.dll" ??_C@_1CM@HIJPCOP@?$AAw?$AAe?$AAr?$AAd?$AAi?$AAa?$AAg?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14002894C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x140028FCC: "P8" ??_C@_15HHCMIGOF@?$AAP?$AA8?$AA?$AA@
0x14002BFB0: "%s\%s\%u-%u.etl" ??_C@_1CA@IAAMNOB@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAu?$AA?9?$AA?$CF?$AAu?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x140029520: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x1400343E0: "__cdecl _native_startup_lock" __native_startup_lock
0x140027298: "const CAppRecorderPlugin::`vftable'" ??_7CAppRecorderPlugin@@6B@
0x1400290D0: "%General_AppName%" ??_C@_1CE@DDPFPMFF@?$AA?$CF?$AAG?$AAe?$AAn?$AAe?$AAr?$AAa?$AAl?$AA_?$AAA?$AAp?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$CF?$AA?$AA@
0x140028CB0: "DataFiles=" ??_C@_1BG@OBEJFDH@?$AAD?$AAa?$AAt?$AAa?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$DN?$AA?$AA@
0x140027E58: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x1400279D0: "__cdecl _imp_Module32NextW" __imp_Module32NextW
0x140034250: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x1400341D8: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x14002BAB8: "Cannot construct mod name signat" ??_C@_0CF@HBDGHIBL@Cannot?5construct?5mod?5name?5signat@
0x1400208F0: "public: virtual void * __ptr64 __cdecl CFDRPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCFDRPlugin@@UEAAPEAXI@Z
0x140033B94: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x140015EF0: "public: virtual long __cdecl CInpagePlugIn::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CInpagePlugIn@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140015F00: "public: virtual long __cdecl CCriticalProcessPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CCriticalProcessPlugin@@UEAAJXZ
0x140030418: "__cdecl _IMPORT_DESCRIPTOR_wer" __IMPORT_DESCRIPTOR_wer
0x140025770: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140026578: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1400303B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140027F08: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400342B0: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x14002BA00: "Software\Microsoft\Windows NT\Cu" ??_C@_1IG@FGFNFAKK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140027FB8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140029260: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140027ED0: "__cdecl _imp__wcstoui64" __imp__wcstoui64
0x140027D98: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140027CF0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140014F70: "public: virtual long __cdecl CRuntimePlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CRuntimePlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x1400246BC: "public: static long __cdecl PackageUtility::GetProcessApplicationId(void * __ptr64,class CString * __ptr64)" ?GetProcessApplicationId@PackageUtility@@SAJPEAXPEAVCString@@@Z
0x14002C470: "DisableTelemetryOptInSettingsUx" ??_C@_1EA@COGLMPOO@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAO?$AAp?$AAt?$AAI?$AAn?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AAU?$AAx?$AA?$AA@
0x14002AC98: "AutoVerifierCount" ??_C@_1CE@OEBADDND@?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140028B98: "P3=" ??_C@_17EPFEIGCP@?$AAP?$AA3?$AA?$DN?$AA?$AA@
0x14002AFB0: "OsMitigation" ??_C@_1BK@GHCACLBE@?$AAO?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140027BF0: KERNEL32_NULL_THUNK_DATA
0x140027BB0: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x140006EA0: WPP_SF_I
0x14002AA88: "Guid" ??_C@_19BPBMCKGC@?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x140027A08: "__cdecl _imp_WriteProcessMemory" __imp_WriteProcessMemory
0x1400294D8: WPP_5d39da903b62313924102deb7c9742b7_Traceguids
0x140015F7C: "public: virtual __cdecl IWERPlugIn::~IWERPlugIn(void) __ptr64" ??1IWERPlugIn@@UEAA@XZ
0x1400200C4: "private: int __cdecl CDriverVerifierPlugin::PromptForEnableDriverVerifier(void * __ptr64) __ptr64" ?PromptForEnableDriverVerifier@CDriverVerifierPlugin@@AEAAHPEAX@Z
0x140027E18: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x140027CA0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140025B30: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140019224: "private: long __cdecl CAutoVerifierPlugin::CheckForMonitoredApplications(int * __ptr64) __ptr64" ?CheckForMonitoredApplications@CAutoVerifierPlugin@@AEAAJPEAH@Z
0x140027B68: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x140023CD4: TelpReadUsersPolicySetting
0x14001053C: ?EnsureSubscribedToStateChangesUnderLock@FeatureStateManager@details@wil@@CAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@3@U__WIL__WNF_STATE_NAME@@PEAX@Z
0x140026468: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140027AF0: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x14002B278: "MoAutoVerifier" ??_C@_1BO@CFLCMIHC@?$AAM?$AAo?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x140034160: "__cdecl tls_index" _tls_index
0x14002A848: "ServiceDll" ??_C@_1BG@KAEKMFMF@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAl?$AAl?$AA?$AA@
0x140028BA8: "P5=" ??_C@_17JJANGFDC@?$AAP?$AA5?$AA?$DN?$AA?$AA@
0x14000A2B4: "long __cdecl UtilRegGetTimeDeltaInHours(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?UtilRegGetTimeDeltaInHours@@YAJPEAUHKEY__@@PEBG1PEAKPEAH@Z
0x140028148: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x140028028: "__cdecl _imp_NtFreeVirtualMemory" __imp_NtFreeVirtualMemory
0x1400289B8: EVENT_CFG_VIOLATION
0x140028008: "__cdecl _imp_memcmp" __imp_memcmp
0x140018EF4: "private: long __cdecl CAutoVerifierPlugin::ValidateAutoverifier(int * __ptr64) __ptr64" ?ValidateAutoverifier@CAutoVerifierPlugin@@AEAAJPEAH@Z
0x14002A960: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x140008A68: "int __cdecl UtilIsSystem(void)" ?UtilIsSystem@@YAHXZ
0x14001931C: "private: long __cdecl CAutoVerifierPlugin::SetAutoverifierEnabledFlag(unsigned long) __ptr64" ?SetAutoverifierEnabledFlag@CAutoVerifierPlugin@@AEAAJK@Z
0x140028CC8: "IconFile=" ??_C@_1BE@OPFODKHN@?$AAI?$AAc?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AA?$DN?$AA?$AA@
0x140027FA8: "__cdecl _imp__commode" __imp__commode
0x140029270: "SYSTEM\CurrentControlSet\Control" ??_C@_1FA@ECPGIGLB@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14001C698: "private: long __cdecl CAppRecorderPlugin::RemoveAppCompatLayer(void) __ptr64" ?RemoveAppCompatLayer@CAppRecorderPlugin@@AEAAJXZ
0x14002C1F0: "Software\Microsoft\Windows\Curre" ??_C@_1IE@GHPKPIMO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14002DA30: "__cdecl tls_start" _tls_start
0x14002C620: "TelemetryPermission-DefaultLevel" ??_C@_1EC@IPJNKHAK@?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAP?$AAe?$AAr?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAL?$AAe?$AAv?$AAe?$AAl@
0x1400280B8: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x14002A920: "bad_module_info" ??_C@_1CA@FHHGLONA@?$AAb?$AAa?$AAd?$AA_?$AAm?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x140001920: "public: __cdecl CString::~CString(void) __ptr64" ??1CString@@QEAA@XZ
0x140027FC8: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400278C0: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x140028E10: "/dw/generictwo.asp" ??_C@_1CG@GJHFONBE@?$AA?1?$AAd?$AAw?$AA?1?$AAg?$AAe?$AAn?$AAe?$AAr?$AAi?$AAc?$AAt?$AAw?$AAo?$AA?4?$AAa?$AAs?$AAp?$AA?$AA@
0x140028038: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x1400282B0: "__cdecl _xl_z" __xl_z
0x14002AA78: WPP_985203c31ed530f618708748318da20c_Traceguids
0x14002AD80: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14002626C: "__cdecl _tailMerge_ext_ms_win_kernel32_package_l1_1_0_dll" __tailMerge_ext_ms_win_kernel32_package_l1_1_0_dll
0x14003047C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140017F50: "public: __cdecl _AUTOVERIFIER_IPT_SETTINGS::~_AUTOVERIFIER_IPT_SETTINGS(void) __ptr64" ??1_AUTOVERIFIER_IPT_SETTINGS@@QEAA@XZ
0x1400289A8: EVENT_NON_SYSTEM_FILE_CORRUPTED
0x140033B9C: g_header_init_InitializeStagingHeaderInternalApi
0x1400289E8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x140016290: "public: virtual long __cdecl CBEXPlugIn::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CBEXPlugIn@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140008230: "public: __cdecl CString::CString(void) __ptr64" ??0CString@@QEAA@XZ
0x1400291A8: WPP_9ecd5a699bf63784c2b06dfcb04bd874_Traceguids
0x1400304CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x140027D48: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140028FB4: "P5" ??_C@_15IFEGFODI@?$AAP?$AA5?$AA?$AA@
0x140027E08: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x14002B3A0: "OriginalBucket" ??_C@_1BO@GCAECHHF@?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAa?$AAl?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AA?$AA@
0x14002C0F0: "{C712AF3D-ED1E-46A9-B843-E9014D2" ??_C@_1EO@DGJGPGOI@?$AA?$HL?$AAC?$AA7?$AA1?$AA2?$AAA?$AAF?$AA3?$AAD?$AA?9?$AAE?$AAD?$AA1?$AAE?$AA?9?$AA4?$AA6?$AAA?$AA9?$AA?9?$AAB?$AA8?$AA4?$AA3?$AA?9?$AAE?$AA9?$AA0?$AA1?$AA4?$AAD?$AA2@
0x140028B28: "UserDocs=" ??_C@_1BE@KHHDPKDE@?$AAU?$AAs?$AAe?$AAr?$AAD?$AAo?$AAc?$AAs?$AA?$DN?$AA?$AA@
0x140017F30: "public: __cdecl _AUTOVERIFIER_IPT_SETTINGS::_AUTOVERIFIER_IPT_SETTINGS(void) __ptr64" ??0_AUTOVERIFIER_IPT_SETTINGS@@QEAA@XZ
0x1400100BC: "public: void __cdecl wil::details_abi::FeatureStateData::RecordUsage(void) __ptr64" ?RecordUsage@FeatureStateData@details_abi@wil@@QEAAXXZ
0x14000710C: "public: long __cdecl CString::CopyRawChars(unsigned short const * __ptr64,unsigned __int64) __ptr64" ?CopyRawChars@CString@@QEAAJPEBG_K@Z
0x14002B998: "%s /stop" ??_C@_1BC@NHMOGODN@?$AA?$CF?$AAs?$AA?5?$AA?1?$AAs?$AAt?$AAo?$AAp?$AA?$AA@
0x140030060: "__cdecl CTA1J" _CTA1J
0x1400278C8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x14002A500: "WER/CrashAPI:%u: ERROR UpdatePro" ??_C@_0DP@EJPCFMFP@WER?1CrashAPI?3?$CFu?3?5ERROR?5UpdatePro@
0x14002C7F0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140025900: "__cdecl ValidateImageBase" _ValidateImageBase
0x14002A800: "SYSTEM\CurrentControlSet\Service" ??_C@_1EG@IBIDIIKI@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14001FB00: "public: virtual long __cdecl CDriverVerifierPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CDriverVerifierPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140014F70: "public: virtual long __cdecl CStowedExceptionPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CStowedExceptionPlugin@@UEAAJXZ
0x140029FE0: "WER/CrashAPI:%u: ERROR NtQueryIn" ??_C@_0EL@IOBLPKAC@WER?1CrashAPI?3?$CFu?3?5ERROR?5NtQueryIn@
0x14000F1B8: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::FindInsertionPointOrIncrement(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?FindInsertionPointOrIncrement@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAEPEAX_KI@Z
0x140015F50: "public: virtual void * __ptr64 __cdecl IWERPlugIn::`vector deleting destructor'(unsigned int) __ptr64" ??_EIWERPlugIn@@UEAAPEAXI@Z
0x1400261E6: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x140002DD4: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x14002A258: "WER/CrashAPI:%u: TRACE WERP_DEBU" ??_C@_0DI@MBLEPHJK@WER?1CrashAPI?3?$CFu?3?5TRACE?5WERP_DEBU@
0x140034270: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x1400272C8: "const CFTHPlugIn::`vftable'" ??_7CFTHPlugIn@@6B@
0x14000B6E0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x1400291D8: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000612C: "public: __cdecl CExceptionReport::CExceptionReport(void) __ptr64" ??0CExceptionReport@@QEAA@XZ
0x140028050: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x140024E10: "long __cdecl wil::details::in1diag3::Return_Win32(void * __ptr64,unsigned int,char const * __ptr64,unsigned long)" ?Return_Win32@in1diag3@details@wil@@YAJPEAXIPEBDK@Z
0x14002C6D0: "Reserved.PlatformSigned" ??_C@_1DA@MLHAKDIL@?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAd?$AA?4?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AA?$AA@
0x140014074: "private: long __cdecl CCrashSignature::UpdateModuleForLoaderFailure(void) __ptr64" ?UpdateModuleForLoaderFailure@CCrashSignature@@AEAAJXZ
0x140034310: "void (__cdecl* __ptr64 g_wil_details_RecordSRUMFeatureUsage)(unsigned int,unsigned int,unsigned int)" ?g_wil_details_RecordSRUMFeatureUsage@@3P6AXIII@ZEA
0x14001A6C0: "public: virtual long __cdecl CRuntimePlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CRuntimePlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x1400112D0: ??_G?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x1400297D0: "RtlUnsubscribeWnfNotificationWai" ??_C@_0CP@IJFJHHED@RtlUnsubscribeWnfNotificationWai@
0x140029368: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x1400302EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x14002BFF8: "%s-%d" ??_C@_1M@JIJACILF@?$AA?$CF?$AAs?$AA?9?$AA?$CF?$AAd?$AA?$AA@
0x1400062EC: "public: __cdecl CExceptionReport::~CExceptionReport(void) __ptr64" ??1CExceptionReport@@QEAA@XZ
0x140028978: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x14002BBC0: "ole32" ??_C@_1M@FFPAMFOB@?$AAo?$AAl?$AAe?$AA3?$AA2?$AA?$AA@
0x14002BB48: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x140001274: WPP_SF_
0x1400281C0: "__cdecl _imp_WerReportCloseHandle" __imp_WerReportCloseHandle
0x14002AA98: "GlobalFlag" ??_C@_1BG@OGBFMEDC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x140028C68: "Main_NoReportBtn=" ??_C@_1CE@OEJLFMMM@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAN?$AAo?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAB?$AAt?$AAn?$AA?$DN?$AA?$AA@
0x140004FE0: "private: int __cdecl CExceptionReport::OKToContinue(void) __ptr64" ?OKToContinue@CExceptionReport@@AEAAHXZ
0x14002BD28: WPP_ec6655d4ee62399eb8a59bc02d230bba_Traceguids
0x140018C58: "private: long __cdecl CAutoVerifierPlugin::SaveOriginalBucket(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SaveOriginalBucket@CAutoVerifierPlugin@@AEAAJPEBG00@Z
0x140027B48: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140027B70: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140023334: RegisterExtendedImageForIptTracing
0x140029588: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x1400292D0: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x140027DE8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x14003019C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x14000F81C: "void __cdecl wil::details_abi::RecordWnfUsageIndex(struct __WIL__WNF_STATE_NAME const * __ptr64,unsigned __int64,class wil::details_abi::RawUsageIndex const & __ptr64)" ?RecordWnfUsageIndex@details_abi@wil@@YAXPEBU__WIL__WNF_STATE_NAME@@_KAEBVRawUsageIndex@12@@Z
0x140029C20: "WER/CrashAPI:%u: ERROR Invalid a" ??_C@_0CF@ILCOPMBJ@WER?1CrashAPI?3?$CFu?3?5ERROR?5Invalid?5a@
0x140028C48: "Main_ReportBtn=" ??_C@_1CA@GACODKJP@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAB?$AAt?$AAn?$AA?$DN?$AA?$AA@
0x14002C008: WPP_4d778aac0e5d3a843b2fcac724ae07ee_Traceguids
0x14000C0E0: "public: void __cdecl wil::details_abi::SemaphoreValue::Destroy(void) __ptr64" ?Destroy@SemaphoreValue@details_abi@wil@@QEAAXXZ
0x1400341D0: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x1400298C0: "\Registry\Machine\Software\Micro" ??_C@_1IO@DBBAANCO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x140027E28: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x140029698: "DebugBreak" ??_C@_1BG@PCOHEIAH@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAB?$AAr?$AAe?$AAa?$AAk?$AA?$AA@
0x14002A9F0: "BlueScreen" ??_C@_1BG@MMKBHJIN@?$AAB?$AAl?$AAu?$AAe?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x1400214E8: "private: long __cdecl CFDRPlugin::WriteFDRLayer(void) __ptr64" ?WriteFDRLayer@CFDRPlugin@@AEAAJXZ
0x140027DE0: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x140033BD0: "__cdecl newmode" _newmode
0x140037010: "__cdecl _imp_GetPackageFullName" __imp_GetPackageFullName
0x14002AD60: "MinRamAmount" ??_C@_1BK@FBPOIFJA@?$AAM?$AAi?$AAn?$AAR?$AAa?$AAm?$AAA?$AAm?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140027F60: "__cdecl _imp_iswspace" __imp_iswspace
0x140027FC0: "__cdecl _imp__initterm" __imp__initterm
0x140027FE8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140021114: "private: int __cdecl CFDRPlugin::PromptForEnableFDR(void * __ptr64) __ptr64" ?PromptForEnableFDR@CFDRPlugin@@AEAAHPEAX@Z
0x140027AE8: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x1400290B0: WPP_0780e41cc5e13874fb4f81ee92e61d0f_Traceguids
0x140028B90: "P2=" ??_C@_17IEAIFFIK@?$AAP?$AA2?$AA?$DN?$AA?$AA@
0x14001E6D4: "public: long __cdecl CList<struct _MEMORY_BLOCK>::AddToTail(struct _MEMORY_BLOCK & __ptr64) __ptr64" ?AddToTail@?$CList@U_MEMORY_BLOCK@@@@QEAAJAEAU_MEMORY_BLOCK@@@Z
0x14002AEA8: "IptOption" ??_C@_1BE@NOGLCDHI@?$AAI?$AAp?$AAt?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002C050: "SYSTEM\CurrentControlSet\Control" ??_C@_1IE@JJCOFDON@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140029800: "internal\sdk\inc\wil/Staging.h" ??_C@_0BP@KCGEFLDE@internal?2sdk?2inc?2wil?1Staging?4h?$AA@
0x140028EB0: "szAppStamp" ??_C@_1BG@KNKJEOC@?$AAs?$AAz?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x140027B00: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140019A64: "private: long __cdecl CAutoVerifierPlugin::EnableAutoVerifier(void * __ptr64) __ptr64" ?EnableAutoVerifier@CAutoVerifierPlugin@@AEAAJPEAX@Z
0x140007F4C: "public: long __cdecl CString::Trim(unsigned short const * __ptr64) __ptr64" ?Trim@CString@@QEAAJPEBG@Z
0x14002BA88: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400304B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140034298: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x14002C8E8: "WIN://SYSAPPID" ??_C@_1BO@BOGEHPME@?$AAW?$AAI?$AAN?$AA?3?$AA?1?$AA?1?$AAS?$AAY?$AAS?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x140028C20: "Main_Intro_Bold=" ??_C@_1CC@POJANNL@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAI?$AAn?$AAt?$AAr?$AAo?$AA_?$AAB?$AAo?$AAl?$AAd?$AA?$DN?$AA?$AA@
0x140014D70: "public: long __cdecl CCrashSignature::LogEvent(unsigned short const * __ptr64) __ptr64" ?LogEvent@CCrashSignature@@QEAAJPEBG@Z
0x140001C18: "private: long __cdecl CManifestReport::ReadManifest(unsigned short const * __ptr64) __ptr64" ?ReadManifest@CManifestReport@@AEAAJPEBG@Z
0x14002BBB0: "gdiplus" ??_C@_1BA@KEBODEJP@?$AAg?$AAd?$AAi?$AAp?$AAl?$AAu?$AAs?$AA?$AA@
0x140029E20: "WER/CrashAPI:%u: ERROR ReadProce" ??_C@_0FF@NKEODFOC@WER?1CrashAPI?3?$CFu?3?5ERROR?5ReadProce@
0x14002AF98: "CFGSUP64" ??_C@_1BC@HNOAOCOP@?$AAC?$AAF?$AAG?$AAS?$AAU?$AAP?$AA6?$AA4?$AA?$AA@
0x140029470: "Software\Microsoft\Windows\Windo" ??_C@_1GG@KIEANMDL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x1400281D0: "__cdecl _imp_WerReportCreate" __imp_WerReportCreate
0x14002A940: "appdir" ??_C@_1O@FHPJHEMP@?$AAa?$AAp?$AAp?$AAd?$AAi?$AAr?$AA?$AA@
0x14002BB78: "kernel32" ??_C@_1BC@GDMECMAK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?$AA@
0x1400213C4: "private: long __cdecl CFDRPlugin::EnableFDR(unsigned short const * __ptr64,void * __ptr64) __ptr64" ?EnableFDR@CFDRPlugin@@AEAAJPEBGPEAX@Z
0x14002BDD8: "Driververifier" ??_C@_1BO@HNKAKDG@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x140003D50: "private: long __cdecl CExceptionReport::PickupPingCounters(void) __ptr64" ?PickupPingCounters@CExceptionReport@@AEAAJXZ
0x140027B18: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x14002AE80: "AppRecorderVersion" ??_C@_1CG@JKCHMBDO@?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14002AC08: "PageHeapFaultProbability" ??_C@_1DC@CIMBGPPM@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAa?$AAu?$AAl?$AAt?$AAP?$AAr?$AAo?$AAb?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x1400208F0: "public: virtual void * __ptr64 __cdecl CFDRPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECFDRPlugin@@UEAAPEAXI@Z
0x14002B228: "VerifierGetInfoForException" ??_C@_0BM@CKAODPCI@VerifierGetInfoForException?$AA@
0x1400304E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x14001E7F4: "private: static unsigned long __cdecl CTIPlugin::EventDataDescCreateTICallAddressInfo(struct _EVENT_DATA_DESCRIPTOR * __ptr64,unsigned long,struct TI_ADDRESS_INFO const * __ptr64)" ?EventDataDescCreateTICallAddressInfo@CTIPlugin@@CAKPEAU_EVENT_DATA_DESCRIPTOR@@KPEBUTI_ADDRESS_INFO@@@Z
0x140030118: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x14002620C: IsGetPackageFullNamePresent
0x14002BE18: "VerifyFlags=" ??_C@_1BK@DHNHLNJP@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$DN?$AA?$AA@
0x1400292C0: "%x" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x14002C748: "NtQuerySecurityPolicy" ??_C@_0BG@FCPGALLB@NtQuerySecurityPolicy?$AA@
0x14002B080: "%s\system32\cofire.exe" ??_C@_1CO@NFGDBFAG@?$AA?$CF?$AAs?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAc?$AAo?$AAf?$AAi?$AAr?$AAe?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140008968: "int __cdecl UtilIsVirtualServer(void)" ?UtilIsVirtualServer@@YAHXZ
0x140029CA0: "WER/CrashAPI:%u: ERROR Invalid a" ??_C@_0CE@IOGMNIPL@WER?1CrashAPI?3?$CFu?3?5ERROR?5Invalid?5a@
0x14001E620: "public: long __cdecl CList<struct _PROCESS_MODULE * __ptr64>::AddToTail(struct _PROCESS_MODULE * __ptr64 & __ptr64) __ptr64" ?AddToTail@?$CList@PEAU_PROCESS_MODULE@@@@QEAAJAEAPEAU_PROCESS_MODULE@@@Z
0x1400343D0: "__cdecl _onexitend" __onexitend
0x14000F478: "private: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsageInternal(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsageInternal@RawUsageIndex@details_abi@wil@@AEAA_NPEAX_K01I@Z
0x140028178: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x140027D58: "__cdecl _imp_CreateThread" __imp_CreateThread
0x140009480: "struct HINSTANCE__ * __ptr64 __cdecl UtilLoadModFromSystem(unsigned short const * __ptr64)" ?UtilLoadModFromSystem@@YAPEAUHINSTANCE__@@PEBG@Z
0x140027FD8: "__cdecl _imp__exit" __imp__exit
0x140025AF5: "__cdecl unlock" _unlock
0x14000A414: "void __cdecl wistd::_Xbad_function_call(void)" ?_Xbad_function_call@wistd@@YAXXZ
0x140028EF8: "szModVer" ??_C@_1BC@OOBAKMML@?$AAs?$AAz?$AAM?$AAo?$AAd?$AAV?$AAe?$AAr?$AA?$AA@
0x140028218: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14001ED40: "public: virtual long __cdecl CTIPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CTIPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140027328: "const CCrashOnLaunch::`vftable'" ??_7CCrashOnLaunch@@6B@
0x140010498: "private: bool __cdecl wil::details::FeatureStateManager::EnsureStateData(void) __ptr64" ?EnsureStateData@FeatureStateManager@details@wil@@AEAA_NXZ
0x140027E80: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x140028A70: "Stage2URL=" ??_C@_1BG@ICJACLPI@?$AAS?$AAt?$AAa?$AAg?$AAe?$AA2?$AAU?$AAR?$AAL?$AA?$DN?$AA?$AA@
0x140023A98: TelGetNumericPolicy
0x140006DCC: "protected: long __cdecl CWatsonReport::LogGenericEvent(void) __ptr64" ?LogGenericEvent@CWatsonReport@@IEAAJXZ
0x1400261B0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x140029000: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x14000FCC4: "public: void __cdecl wil::details_abi::UsageIndexes::Record(void) __ptr64" ?Record@UsageIndexes@details_abi@wil@@QEAAXXZ
0x140027D38: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14002C690: "AllowTelemetry_PolicyManager" ??_C@_1DK@EIDLHIAG@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AA_?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x140027C28: USER32_NULL_THUNK_DATA
0x140016000: "public: __cdecl PLUGIN_INTERNAL_SIG_ELEMENT::PLUGIN_INTERNAL_SIG_ELEMENT(void) __ptr64" ??0PLUGIN_INTERNAL_SIG_ELEMENT@@QEAA@XZ
0x140027A58: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x140006854: "protected: long __cdecl CWatsonReport::SetReportFiles(void * __ptr64) __ptr64" ?SetReportFiles@CWatsonReport@@IEAAJPEAX@Z
0x140030278: ext-ms-win-imm-l1-1-0_NULL_THUNK_DATA_DLB
0x140028BA0: "P4=" ??_C@_17FCFBLGJH@?$AAP?$AA4?$AA?$DN?$AA?$AA@
0x14001A160: "public: virtual void * __ptr64 __cdecl CRuntimePlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRuntimePlugin@@UEAAPEAXI@Z
0x140029C68: "WER/CrashAPI:%u: ERROR WerpValid" ??_C@_0DF@NOCKBGCB@WER?1CrashAPI?3?$CFu?3?5ERROR?5WerpValid@
0x140028FA4: "P3" ??_C@_15KACNABOE@?$AAP?$AA3?$AA?$AA@
0x140027958: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x140027AC0: "__cdecl _imp_GetApplicationRestartSettings" __imp_GetApplicationRestartSettings
0x1400114A4: "long __cdecl WerpValidatePebHeader(struct _WER_PEB_HEADER_BLOCK * __ptr64)" ?WerpValidatePebHeader@@YAJPEAU_WER_PEB_HEADER_BLOCK@@@Z
0x140016020: "public: __cdecl PLUGIN_INTERNAL_SIG_ELEMENT::~PLUGIN_INTERNAL_SIG_ELEMENT(void) __ptr64" ??1PLUGIN_INTERNAL_SIG_ELEMENT@@QEAA@XZ
0x14001793C: "private: int __cdecl CInpagePlugIn::IsWdiHostProcess(void) __ptr64" ?IsWdiHostProcess@CInpagePlugIn@@AEAAHXZ
0x140028EE0: "szModName" ??_C@_1BE@LJCFHHMP@?$AAs?$AAz?$AAM?$AAo?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140028120: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140028F60: "offset" ??_C@_1O@HBCADPGJ@?$AAo?$AAf?$AAf?$AAs?$AAe?$AAt?$AA?$AA@
0x14000BD50: "public: virtual void * __ptr64 __cdecl wil::ResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_EResultException@wil@@UEAAPEAXI@Z
0x140027E60: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x140006AAC: "private: long __cdecl CWatsonReport::AddFilesToReport(void * __ptr64,unsigned short const * __ptr64,enum _WER_FILE_TYPE,unsigned long) __ptr64" ?AddFilesToReport@CWatsonReport@@AEAAJPEAXPEBGW4_WER_FILE_TYPE@@K@Z
0x140006120: "private: static int __cdecl CExceptionReport::ExceptionCallback_Static(void * __ptr64,struct _WER_CALLBACK_INPUT const * __ptr64)" ?ExceptionCallback_Static@CExceptionReport@@CAHPEAXPEBU_WER_CALLBACK_INPUT@@@Z
0x140027B38: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x140033B90: "__cdecl Init_global_epoch" _Init_global_epoch
0x1400291B8: "FileDescription" ??_C@_1CA@JGBAIPOO@?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140027E48: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140004BF0: "private: struct _DWSharedMem20 * __ptr64 __cdecl CExceptionReport::AllocateAndMapSharedMem10(struct _DWSharedMem10 * __ptr64) __ptr64" ?AllocateAndMapSharedMem10@CExceptionReport@@AEAAPEAU_DWSharedMem20@@PEAU_DWSharedMem10@@@Z
0x140028288: "__cdecl _xi_a" __xi_a
0x140027E38: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14001DC68: "private: static long __cdecl CStowedExceptionPlugin::HashRemoteMemory(unsigned long * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64)" ?HashRemoteMemory@CStowedExceptionPlugin@@CAJPEAKPEAX1_K@Z
0x140027C88: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400342A4: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x14002B1D8: "verifier.dll" ??_C@_1BK@GKAGNDBG@?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140014F70: "__cdecl matherr" _matherr
0x140017F70: "public: virtual long __cdecl CAutoVerifierPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CAutoVerifierPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140020D90: "public: virtual long __cdecl CFDRPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CFDRPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140028E48: "EventType" ??_C@_1BE@OGEKKHM@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140015EF0: "public: virtual long __cdecl CPinDLLPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CPinDLLPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x1400244FC: "public: __cdecl CRegSetting::~CRegSetting(void) __ptr64" ??1CRegSetting@@QEAA@XZ
0x140027F90: "__cdecl _imp__unlock" __imp__unlock
0x140030098: "__cdecl TI1J" _TI1J
0x140001854: wmain
0x140025B16: GetCurrentProcessId
0x1400279C0: "__cdecl _imp_QueryDosDeviceW" __imp_QueryDosDeviceW
0x14002A950: "moddir" ??_C@_1O@CNMFLGPN@?$AAm?$AAo?$AAd?$AAd?$AAi?$AAr?$AA?$AA@
0x140022278: "private: long __cdecl CFDRPlugin::DeleteLoggingSession(void) __ptr64" ?DeleteLoggingSession@CFDRPlugin@@AEAAJXZ
0x140028AC0: "Details_Pre_Body=" ??_C@_1CE@JNPEOOMG@?$AAD?$AAe?$AAt?$AAa?$AAi?$AAl?$AAs?$AA_?$AAP?$AAr?$AAe?$AA_?$AAB?$AAo?$AAd?$AAy?$AA?$DN?$AA?$AA@
0x14002A788: "svchost.exe" ??_C@_1BI@GOFOEOMC@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140011508: "long __cdecl WerpReadPeb32FromProcess(void * __ptr64,void * __ptr64,unsigned long,unsigned long)" ?WerpReadPeb32FromProcess@@YAJPEAX0KK@Z
0x14002AE58: "AppRecorderCount" ??_C@_1CC@MOEJHIBO@?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1400248A4: "int __cdecl UtilIsInteractiveDesktop(void)" ?UtilIsInteractiveDesktop@@YAHXZ
0x140027C60: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x14001EE74: "private: long __cdecl CIptPlugin::InitializeForUserModeApp(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?InitializeForUserModeApp@CIptPlugin@@AEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140001734: "public: __cdecl CManifestReport::~CManifestReport(void) __ptr64" ??1CManifestReport@@QEAA@XZ
0x140034348: "int g_wil_details_preventOnDemandStagingConfigReads" ?g_wil_details_preventOnDemandStagingConfigReads@@3HA
0x140010B78: ?reset@?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAU_TP_TIMER@@@Z
0x14002A878: "-k" ??_C@_15BJCIDILG@?$AA?9?$AAk?$AA?$AA@
0x14002B480: "AutoverifierEnabled" ??_C@_1CI@FNEEMOOA@?$AAA?$AAu?$AAt?$AAo?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14000678C: "protected: long __cdecl CWatsonReport::SetReportUIParams(void * __ptr64) __ptr64" ?SetReportUIParams@CWatsonReport@@IEAAJPEAX@Z
0x140002E5C: WPP_SF_dD
0x140002E5C: WPP_SF_DD
0x1400281E8: "__cdecl _imp_?WerpGetReportFlags@@YAJPEAXPEAK@Z" __imp_?WerpGetReportFlags@@YAJPEAXPEAK@Z
0x140012B20: "private: long __cdecl CCrashSignature::SetModuleInfo(void * __ptr64,unsigned short const * __ptr64,struct HINSTANCE__ * __ptr64,class CString * __ptr64,class CString * __ptr64,unsigned short * __ptr64 const,unsigned long * __ptr64) __ptr64" ?SetModuleInfo@CCrashSignature@@AEAAJPEAXPEBGPEAUHINSTANCE__@@PEAVCString@@3QEAGPEAK@Z
0x140027918: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x140017CE4: WPP_SF_dS
0x1400112D0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x14002B040: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14000250C: "private: long __cdecl CManifestReport::CreateAndSubmitReport(enum _WER_SUBMIT_RESULT * __ptr64) __ptr64" ?CreateAndSubmitReport@CManifestReport@@AEAAJPEAW4_WER_SUBMIT_RESULT@@@Z
0x140028160: "__cdecl _imp_NtQueryLicenseValue" __imp_NtQueryLicenseValue
0x14002A880: "-s" ??_C@_15IMIFEHMG@?$AA?9?$AAs?$AA?$AA@
0x140003FC8: "private: int __cdecl CExceptionReport::NotifyMode(void) __ptr64" ?NotifyMode@CExceptionReport@@AEAAHXZ
0x140033000: WPP_GLOBAL_Control
0x14000EC4C: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Write(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64)const __ptr64" ?Write@UsageIndexProperty@details_abi@wil@@QEBA_NAEAPEAEPEAE@Z
0x140028E78: "unknown" ??_C@_1BA@KDMGPDJH@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x140010030: "public: void __cdecl wil::details_abi::FeatureStateData::ProcessShutdown(void) __ptr64" ?ProcessShutdown@FeatureStateData@details_abi@wil@@QEAAXXZ
0x140028BB0: "P6=" ??_C@_17BPJJBHJM@?$AAP?$AA6?$AA?$DN?$AA?$AA@
0x1400280F0: "__cdecl _imp_NtAlpcSendWaitReceivePort" __imp_NtAlpcSendWaitReceivePort
0x140010A20: "void __cdecl wil::details::WilApiImpl_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApiImpl_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x140014F70: "public: virtual long __cdecl CAppRecorderPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CAppRecorderPlugin@@UEAAJXZ
0x140034328: "long (__cdecl* __ptr64 g_wil_details_pfnNtQueryWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?g_wil_details_pfnNtQueryWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@ZEA
0x140028FE8: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140030314: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14001F490: "public: virtual long __cdecl CIptPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CIptPlugin@@UEAAJXZ
0x140007ACC: "public: long __cdecl CString::LoadStringW(unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?LoadStringW@CString@@QEAAJKPEAUHINSTANCE__@@@Z
0x140027D18: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x14000DA1C: "long __cdecl UtilGetRundll32HostedAppName(void * __ptr64,class CString * __ptr64)" ?UtilGetRundll32HostedAppName@@YAJPEAXPEAVCString@@@Z
0x140027148: "const wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vftable'" ??_7?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@6B@
0x140029BE8: "LaunchNonProtected" ??_C@_1CG@MAMEDOLE@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAN?$AAo?$AAn?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x140001298: WPP_SF_d
0x140001298: WPP_SF_D
0x140026340: IsGetUserObjectInformationWPresent
0x140025FF8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x14002B9E8: "AppRecorder" ??_C@_1BI@JIKJEJML@?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x140028880: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@OAMAPFNA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140033B00: "long `RTTI Type Descriptor'" ??_R0J@8
0x140027E88: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x140022334: "private: long __cdecl CFDRPlugin::GenerateLogPathAndFileName(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long) __ptr64" ?GenerateLogPathAndFileName@CFDRPlugin@@AEAAJPEAPEAG0K@Z
0x14002A6D0: "setup.exe" ??_C@_1BE@PALHGNFE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140014F70: "public: virtual struct WER_PLUGIN_INIT_OUT * __ptr64 __cdecl IWERPlugIn::GetInitializationData(void) __ptr64" ?GetInitializationData@IWERPlugIn@@UEAAPEAUWER_PLUGIN_INIT_OUT@@XZ
0x14002B9B0: "WerAppRecorderNonResponsive" ??_C@_1DI@JFOOENCM@?$AAW?$AAe?$AAr?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AAN?$AAo?$AAn?$AAR?$AAe?$AAs?$AAp?$AAo?$AAn?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1400280F8: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x1400279B8: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x14000B740: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x14002BC20: "advapi32" ??_C@_1BC@DNHGCMLG@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?$AA@
0x140027F88: "__cdecl _imp___dllonexit" __imp___dllonexit
0x140027358: "const CStowedExceptionPlugin::`vftable'" ??_7CStowedExceptionPlugin@@6B@
0x140028078: "__cdecl _imp_RtlSetCurrentTransaction" __imp_RtlSetCurrentTransaction
0x140029EB0: "WER/CrashAPI:%u: ERROR Failed to" ??_C@_0EA@NHELPMHF@WER?1CrashAPI?3?$CFu?3?5ERROR?5Failed?5to@
0x14002B068: "InPageError" ??_C@_1BI@DNFFGMHD@?$AAI?$AAn?$AAP?$AAa?$AAg?$AAe?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x14000C2A0: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x1400279F8: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x140025B70: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140034178: "__cdecl _hmod__ext_ms_win_kernel32_package_l1_1_0_dll" __hmod__ext_ms_win_kernel32_package_l1_1_0_dll
0x14002C020: WPP_39ffd4da500f38153a27f4d910ffcd53_Traceguids
0x140027010: "const type_info::`vftable'" ??_7type_info@@6B@
0x140027C30: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x140028170: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x14003033C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x14002C4B0: "DisableDeviceDelete" ??_C@_1CI@CGLEPEFA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x140015C18: "public: virtual __cdecl CCriticalProcessPlugin::~CCriticalProcessPlugin(void) __ptr64" ??1CCriticalProcessPlugin@@UEAA@XZ
0x140028098: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x140027A48: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x14002AB20: "PageHeapSizeRangeEnd" ??_C@_1CK@KHBAODFH@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAS?$AAi?$AAz?$AAe?$AAR?$AAa?$AAn?$AAg?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x140025BA0: "__cdecl _security_check_cookie" __security_check_cookie
0x14002B1A8: "wdi.dll" ??_C@_07COHKGJKF@wdi?4dll?$AA@
0x14002A718: "uninstall.exe" ??_C@_1BM@IHCPGAAE@?$AAu?$AAn?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140028280: "__cdecl _xc_z" __xc_z
0x1400281D8: "__cdecl _imp_?WerpPromptUser@@YAJPEAXPEAUHWND__@@PEAU_WER_USER_PROMPT_INPUT@@PEAH@Z" __imp_?WerpPromptUser@@YAJPEAXPEAUHWND__@@PEAU_WER_USER_PROMPT_INPUT@@PEAH@Z
0x140029D20: "WER/CrashAPI:%u: ERROR No 32 PEB" ??_C@_0CO@BMPNLCFK@WER?1CrashAPI?3?$CFu?3?5ERROR?5No?532?5PEB@
0x14002BC80: "Microsoft.MicrosoftEdge_8wekyb3d" ??_C@_1EM@HJKBPFGB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AAE?$AAd?$AAg?$AAe?$AA_?$AA8?$AAw?$AAe?$AAk?$AAy?$AAb?$AA3?$AAd@
0x14000B460: "public: bool __cdecl wil::details::shared_buffer::create(void const * __ptr64,unsigned __int64) __ptr64" ?create@shared_buffer@details@wil@@QEAA_NPEBX_K@Z
0x14000BF6C: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x140027D68: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400281A0: "__cdecl _imp_WerReportSetParameter" __imp_WerReportSetParameter
0x14002AFE0: "MoCFGSUP" ??_C@_1BC@LEGONLKE@?$AAM?$AAo?$AAC?$AAF?$AAG?$AAS?$AAU?$AAP?$AA?$AA@
0x140027BB8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14002BF70: "ProcID" ??_C@_1O@IDJHDOKF@?$AAP?$AAr?$AAo?$AAc?$AAI?$AAD?$AA?$AA@
0x140033B98: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x140029CD0: "WER/CrashAPI:%u: ERROR NtQueryIn" ??_C@_0EK@KNDBLBPI@WER?1CrashAPI?3?$CFu?3?5ERROR?5NtQueryIn@
0x140028D28: "ErrorDetail=" ??_C@_1BK@CEMADGFJ@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAD?$AAe?$AAt?$AAa?$AAi?$AAl?$AA?$DN?$AA?$AA@
0x14002BA98: WPP_b6b6cb54610c30d6b6f588359ece5d63_Traceguids
0x140012A04: "public: __cdecl CCrashSignature::~CCrashSignature(void) __ptr64" ??1CCrashSignature@@QEAA@XZ
0x14000804C: "public: long __cdecl CString::GetWindowsDirectoryW(void) __ptr64" ?GetWindowsDirectoryW@CString@@QEAAJXZ
0x140027C20: "__cdecl _imp_IsWindow" __imp_IsWindow
0x1400285C0: "ext-ms-win-ntuser-message-l1-1-1" ??_C@_1EC@BCDEIFMB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x14002645C: "__cdecl CxxThrowException" _CxxThrowException
0x140027FA0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140034320: "void (__cdecl* __ptr64 g_wil_details_internalSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_internalSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x140037000: "__cdecl _imp_ImmDisableIME" __imp_ImmDisableIME
0x1400106F4: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x140008814: WPP_SF_DDq
0x140027E40: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140028188: "__cdecl _imp_WerpFreeString" __imp_WerpFreeString
0x14002B028: WPP_96df6c8bde4c3752e94e4fe13366aa07_Traceguids
0x14000B7C0: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x14002C668: "Kernel-ProductInfo" ??_C@_1CG@MNIOEOCG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x140015F90: "public: virtual void * __ptr64 __cdecl CBEXPlugIn::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBEXPlugIn@@UEAAPEAXI@Z
0x140027950: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x140034220: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x140028D58: "ReportButton=" ??_C@_1BM@FECMNCLC@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AA?$DN?$AA?$AA@
0x140027C78: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x14000E2BC: "void __cdecl wil::details::in1diag3::_Log_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?_Log_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x14001015C: "public: __cdecl wil::details_abi::UsageIndexes::~UsageIndexes(void) __ptr64" ??1UsageIndexes@details_abi@wil@@QEAA@XZ
0x1400250DC: "long __cdecl ARI::ProcessToken::SysAppId::Open(void * __ptr64,struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION * __ptr64 * __ptr64,struct _TOKEN_SECURITY_ATTRIBUTE_V1 const * __ptr64 * __ptr64,bool * __ptr64)" ?Open@SysAppId@ProcessToken@ARI@@YAJPEAXPEAPEAU_TOKEN_SECURITY_ATTRIBUTES_INFORMATION@@PEAPEBU_TOKEN_SECURITY_ATTRIBUTE_V1@@PEA_N@Z
0x140027B50: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140026670: "__cdecl _chkstk" __chkstk
0x14001A080: "public: __cdecl CRuntimePlugin::CRuntimePlugin(void) __ptr64" ??0CRuntimePlugin@@QEAA@XZ
0x140010BF0: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x140029768: WPP_55911c7f8a673f23ff17051518c911a9_Traceguids
0x140004488: "private: long __cdecl CExceptionReport::RestartApp(unsigned short const * __ptr64) __ptr64" ?RestartApp@CExceptionReport@@AEAAJPEBG@Z
0x14002A8A0: "LdrGetFailureData" ??_C@_0BC@FKFKGOCK@LdrGetFailureData?$AA@
0x14000FC08: "public: __cdecl wil::details_abi::UsageIndexes::UsageIndexes(void) __ptr64" ??0UsageIndexes@details_abi@wil@@QEAA@XZ
0x140028FE0: "P10" ??_C@_17PAPGPPPJ@?$AAP?$AA1?$AA0?$AA?$AA@
0x1400261B0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140029F60: "WER/CrashAPI:%u: ERROR ReadProce" ??_C@_0FK@CMACMGGE@WER?1CrashAPI?3?$CFu?3?5ERROR?5ReadProce@
0x14002AAF0: "PageHeapSizeRangeStart" ??_C@_1CO@MGPALBKA@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAS?$AAi?$AAz?$AAe?$AAR?$AAa?$AAn?$AAg?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140027D00: api-ms-win-core-localization-obsolete-l1-2-0_NULL_THUNK_DATA
0x14000A4A8: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x1400094F8: "void __cdecl FreeLogEventPacket(struct _LOG_EVENT_PACKET * __ptr64)" ?FreeLogEventPacket@@YAXPEAU_LOG_EVENT_PACKET@@@Z
0x140027EE0: "__cdecl _imp__vsnprintf_s" __imp__vsnprintf_s
0x14001A160: "public: virtual void * __ptr64 __cdecl CRuntimePlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRuntimePlugin@@UEAAPEAXI@Z
0x140027D10: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x140027B78: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x14002AB88: "PageHeapDllRangeStart" ??_C@_1CM@JOOPGANI@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAD?$AAl?$AAl?$AAR?$AAa?$AAn?$AAg?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x1400286F0: "ext-ms-win-ntuser-window-l1-1-0" ??_C@_1EA@EOLBBGDA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14000BD50: "public: virtual void * __ptr64 __cdecl wil::ResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GResultException@wil@@UEAAPEAXI@Z
0x1400227E4: "long __cdecl SetPluginLastPromptedTime(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?SetPluginLastPromptedTime@@YAJPEAUHKEY__@@PEBG1@Z
0x140027AC8: "__cdecl _imp_DeleteProcThreadAttributeList" __imp_DeleteProcThreadAttributeList
0x140027C40: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x14000C068: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140027DB0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400341F0: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140028EA0: "0.0.0.0" ??_C@_1BA@OJFOBGOM@?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x140020DF0: "public: virtual long __cdecl CFDRPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CFDRPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x14002C4D8: "DisableDiagnosticDataViewer" ??_C@_1DI@BBGPKGAA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAD?$AAa?$AAt?$AAa?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?$AA@
0x14002C178: "EnableKernelFlags" ??_C@_1CE@MEENLKDH@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14000BE50: "void __cdecl wil::details::ThrowResultExceptionInternal(struct wil::FailureInfo const & __ptr64)" ?ThrowResultExceptionInternal@details@wil@@YAXAEBUFailureInfo@2@@Z
0x140026431: "__cdecl _imp_load_GetUserObjectInformationW" __imp_load_GetUserObjectInformationW
0x14002BE78: "OOM" ??_C@_03CDNNJDDN@OOM?$AA@
0x140027DC8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x140004020: "private: int __cdecl CExceptionReport::LetRunMode(void) __ptr64" ?LetRunMode@CExceptionReport@@AEAAHXZ
0x140027108: "const wil::ResultException::`vftable'" ??_7ResultException@wil@@6B@
0x1400303C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000B904: "public: void __cdecl wil::StoredFailureInfo::SetFailureInfo(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetFailureInfo@StoredFailureInfo@wil@@QEAAXAEBUFailureInfo@2@@Z
0x14002B378: "%s:%s@%s" ??_C@_1BC@DEINLLMI@?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAs?$AA?$EA?$AA?$CF?$AAs?$AA?$AA@
0x140029DE8: "WER/CrashAPI:%u: ERROR No PEB fo" ??_C@_0CL@GLMJDONN@WER?1CrashAPI?3?$CFu?3?5ERROR?5No?5PEB?5fo@
0x140012F30: "private: long __cdecl CCrashSignature::UpdateSetupProcessName(unsigned short const * __ptr64,class CString * __ptr64) __ptr64" ?UpdateSetupProcessName@CCrashSignature@@AEAAJPEBGPEAVCString@@@Z
0x14002A0A8: "WER/CrashAPI:%u: ERROR RtlInitUn" ??_C@_0DN@KBALCDPG@WER?1CrashAPI?3?$CFu?3?5ERROR?5RtlInitUn@
0x1400093A8: "long __cdecl UtilReadExceptionInformationFromExceptionPointer(void * __ptr64,void * __ptr64,struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64)" ?UtilReadExceptionInformationFromExceptionPointer@@YAJPEAX0PEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@@Z
0x140011BEC: WerpGetDebugger
0x140030508: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140027D78: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140028D78: "NoReportButton=" ??_C@_1CA@GGCFFBEN@?$AAN?$AAo?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AA?$DN?$AA?$AA@
0x1400197B8: "private: long __cdecl CAutoVerifierPlugin::EnableHKCULookupForIFEO(int) __ptr64" ?EnableHKCULookupForIFEO@CAutoVerifierPlugin@@AEAAJH@Z
0x1400282B8: "__cdecl _guard_fids_table" __guard_fids_table
0x140027EC0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x14002AAB0: "VerifierFlags" ??_C@_1BM@IADMEPHN@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14002641F: "__cdecl _imp_load_GetThreadDesktop" __imp_load_GetThreadDesktop
0x140027890: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x140025BD8: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x140028018: msvcrt_NULL_THUNK_DATA
0x140027760: "__cdecl load_config_used" _load_config_used
0x1400280C0: "__cdecl _imp_ZwQueryWnfStateNameInformation" __imp_ZwQueryWnfStateNameInformation
0x140005EEC: "private: int __cdecl CExceptionReport::ExceptionCallback(struct _WER_CALLBACK_INPUT const * __ptr64) __ptr64" ?ExceptionCallback@CExceptionReport@@AEAAHPEBU_WER_CALLBACK_INPUT@@@Z
0x14000BE7C: "public: __cdecl wil::ResultException::ResultException(class wil::ResultException const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBV01@@Z
0x140008580: "void __cdecl KeyValueParseIntW(unsigned short const * __ptr64,unsigned long,void * __ptr64,unsigned long)" ?KeyValueParseIntW@@YAXPEBGKPEAXK@Z
0x140027DF8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x140027E90: "__cdecl _imp_printf" __imp_printf
0x140028968: WPP_b7e94d58abd63bb62999f41b453f305d_Traceguids
0x14002B038: "%X" ??_C@_15BHOFONJE@?$AA?$CF?$AAX?$AA?$AA@
0x140007C04: "private: static unsigned short const * __ptr64 __cdecl CString::StrStrIInternal(unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?StrStrIInternal@CString@@CAPEBGPEBG0H@Z
0x1400112D0: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x140034364: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvikoftrmUoryUlyquivUznwGEUkivxlnkOlyq@WerPlugin" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvikoftrmUoryUlyquivUznwGEUkivxlnkOlyq@WerPlugin
0x14000C8A0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x140027C90: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140027C80: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140034368: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUgvovnvgibUkvinrhhrlmUkilwfxgUlyquivUznwGEUkivxlnkOlyq@TelemetryPermission" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUgvovnvgibUkvinrhhrlmUkilwfxgUlyquivUznwGEUkivxlnkOlyq@TelemetryPermission
0x14002AEC0: "IptNumTries" ??_C@_1BI@FNKNDAJO@?$AAI?$AAp?$AAt?$AAN?$AAu?$AAm?$AAT?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x1400072B0: "public: long __cdecl CString::Copy(unsigned short const * __ptr64) __ptr64" ?Copy@CString@@QEAAJPEBG@Z
0x14002AA08: "AppHangB1" ??_C@_1BE@GIKLLIBB@?$AAA?$AAp?$AAp?$AAH?$AAa?$AAn?$AAg?$AAB?$AA1?$AA?$AA@
0x14002C370: "ConfigureTelemetryOptInChangeNot" ??_C@_1FE@PKHLLMGH@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAe?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAO?$AAp?$AAt?$AAI?$AAn?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAN?$AAo?$AAt@
0x14000AEFC: "unsigned short const * __ptr64 __cdecl UtilPathTail(unsigned short const * __ptr64)" ?UtilPathTail@@YAPEBGPEBG@Z
0x14001D828: "private: long __cdecl CStowedExceptionPlugin::AddBlocksForStructure(void * __ptr64,void * __ptr64) __ptr64" ?AddBlocksForStructure@CStowedExceptionPlugin@@AEAAJPEAX0@Z
0x140028BB8: "P7=" ??_C@_17NEMFMEDJ@?$AAP?$AA7?$AA?$DN?$AA?$AA@
0x14000C028: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x1400217E0: "private: long __cdecl CFDRPlugin::WriteFDRSessionSettings(unsigned short const * __ptr64) __ptr64" ?WriteFDRSessionSettings@CFDRPlugin@@AEAAJPEBG@Z
0x140029D50: "WER/CrashAPI:%u: ERROR ReadProce" ??_C@_0FH@NCENGCNB@WER?1CrashAPI?3?$CFu?3?5ERROR?5ReadProce@
0x14000C0AC: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x140016050: "public: virtual long __cdecl CBEXPlugIn::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CBEXPlugIn@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x1400342A8: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x140029068: "DWSHIM" ??_C@_1O@NHMAHCAG@?$AAD?$AAW?$AAS?$AAH?$AAI?$AAM?$AA?$AA@
0x14001301C: "private: long __cdecl CCrashSignature::UpdateProcessNameForRundll32(void * __ptr64,class CString * __ptr64) __ptr64" ?UpdateProcessNameForRundll32@CCrashSignature@@AEAAJPEAXPEAVCString@@@Z
0x14002B570: "SYSTEM\CurrentControlSet\Control" ??_C@_1GC@JHOBCLGJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140030350: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x140027998: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x14002BF80: "Microsoft\Windows\FDR" ??_C@_1CM@BDIHCJDM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAF?$AAD?$AAR?$AA?$AA@
0x14002AF48: "%08X" ??_C@_19NGFMKOON@?$AA?$CF?$AA0?$AA8?$AAX?$AA?$AA@
0x14002C580: "onecore\base\telemetry\permissio" ??_C@_0EC@JMIBAGPP@onecore?2base?2telemetry?2permissio@
0x14001E8D0: "private: static void __cdecl CTIPlugin::FillCallInfo(struct TI_ADDRESS_INFO * __ptr64,void * __ptr64,void * __ptr64,int)" ?FillCallInfo@CTIPlugin@@CAXPEAUTI_ADDRESS_INFO@@PEAX1H@Z
0x14000FF30: "public: void __cdecl wil::details_abi::SubscriptionList::OnSignaled(class wil::srwlock & __ptr64) __ptr64" ?OnSignaled@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@@Z
0x14000D864: "int __cdecl UtilDebugNoBlockingDlg(void)" ?UtilDebugNoBlockingDlg@@YAHXZ
0x140028980: EVENT_PINDLL_OF_INTEREST
0x140030490: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x14000D61C: "void __cdecl UtilCheckDebugWait(unsigned short const * __ptr64)" ?UtilCheckDebugWait@@YAXPEBG@Z
0x1400278D8: "__cdecl _imp_RegSetKeyValueW" __imp_RegSetKeyValueW
0x140029EF0: "WER/CrashAPI:%u: ERROR WerpNtWow" ??_C@_0GC@LLNPCBNM@WER?1CrashAPI?3?$CFu?3?5ERROR?5WerpNtWow@
0x140037020: "__cdecl _imp_GetUserObjectInformationW" __imp_GetUserObjectInformationW
0x140037008: ext-ms-win-imm-l1-1-0_NULL_THUNK_DATA_DLA
0x1400279C8: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x140024F74: "public: long __cdecl ARI::ProcessToken::AutoSysAppId::GetAppUserModelId(unsigned int,unsigned int * __ptr64,unsigned short * __ptr64)const __ptr64" ?GetAppUserModelId@AutoSysAppId@ProcessToken@ARI@@QEBAJIPEAIPEAG@Z
0x14002AF58: "CriticalProcessFault2" ??_C@_1CM@LKFLAIJI@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAa?$AAu?$AAl?$AAt?$AA2?$AA?$AA@
0x140027FF8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14002C510: "Software\Policies\Microsoft\Wind" ??_C@_1GG@FMMOKAKO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x14002A9D8: "MoAppCrash" ??_C@_1BG@IGDLMKPK@?$AAM?$AAo?$AAA?$AAp?$AAp?$AAC?$AAr?$AAa?$AAs?$AAh?$AA?$AA@
0x140028130: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x140037030: "__cdecl _imp_GetProcessWindowStation" __imp_GetProcessWindowStation
0x14001B234: "public: __cdecl CAppRecorderPlugin::CAppRecorderPlugin(void) __ptr64" ??0CAppRecorderPlugin@@QEAA@XZ
0x14002B930: "AppRecorderEnabled" ??_C@_1CG@CPNMGIAD@?$AAA?$AAp?$AAp?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140028108: "__cdecl _imp_NtClose" __imp_NtClose
0x14002BC48: "CTIPlugin::InvokeCallback=%S" ??_C@_0BN@IDMBEBLH@CTIPlugin?3?3InvokeCallback?$DN?$CFS?$AA@
0x14000B680: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x1400284F0: "ext-ms-win-kernel32-package-l1-1" ??_C@_1EG@GMKOILGD@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?9?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x14001A240: "public: virtual long __cdecl CRuntimePlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CRuntimePlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x14002C2F8: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1400304F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0
0x140027C18: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x14000AC2C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1400292E0: "Ipt" ??_C@_17EDHAMDFK@?$AAI?$AAp?$AAt?$AA?$AA@
0x140022960: "long __cdecl WerPluginParseSettings(struct _AUTOVERIFIER_IPT_SETTINGS * __ptr64,unsigned long,struct KEY_DATA_TYPE * __ptr64,unsigned long,unsigned short const * __ptr64)" ?WerPluginParseSettings@@YAJPEAU_AUTOVERIFIER_IPT_SETTINGS@@KPEAUKEY_DATA_TYPE@@KPEBG@Z
0x140027990: "__cdecl _imp_VirtualQueryEx" __imp_VirtualQueryEx
0x14002A0F0: "WER/CrashAPI:%u: ERROR Stringcch" ??_C@_0FC@NIAIPMKI@WER?1CrashAPI?3?$CFu?3?5ERROR?5Stringcch@
0x140027178: "const CCriticalProcessPlugin::`vftable'" ??_7CCriticalProcessPlugin@@6B@
0x14000AA00: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x14002B540: "ImageExecutionOptions" ??_C@_1CM@ECAHNNAO@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14002AC40: "PageHeapFaultTimeOut" ??_C@_1CK@MJKJCGIC@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAa?$AAu?$AAl?$AAt?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x140027DA8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140027D70: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140022734: "long __cdecl CheckPluginLastPromptedTime(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int * __ptr64)" ?CheckPluginLastPromptedTime@@YAJPEAUHKEY__@@PEBG1KPEAH@Z
0x140029FC0: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140033BCC: "__cdecl dowildcard" _dowildcard
0x1400012D4: "private: long __cdecl CWatsonClient::ParseCommandLine(unsigned short const * __ptr64,enum WATSON_REPORTING_MODE * __ptr64) __ptr64" ?ParseCommandLine@CWatsonClient@@AEAAJPEBGPEAW4WATSON_REPORTING_MODE@@@Z
0x140014F70: "public: virtual long __cdecl CCrashOnLaunch::UnInitialize(void) __ptr64" ?UnInitialize@CCrashOnLaunch@@UEAAJXZ
0x140027A10: "__cdecl _imp_VirtualAllocEx" __imp_VirtualAllocEx
0x14000D134: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValue<unsigned __int64>(unsigned short const * __ptr64,unsigned __int64 * __ptr64,bool * __ptr64)" ??$TryGetValue@_K@SemaphoreValue@details_abi@wil@@SAJPEBGPEA_KPEA_N@Z
0x14002398C: TelIsTelemetryTypeAllowed
0x140027A40: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x140027F30: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x1400278E0: "__cdecl _imp_EventWrite" __imp_EventWrite
0x140029790: "NtUpdateWnfStateData" ??_C@_0BF@NPHHEHP@NtUpdateWnfStateData?$AA@
0x140026450: ApiSetQueryApiSetPresence
0x140028950: "WaitOnStart" ??_C@_1BI@JJHDNBBA@?$AAW?$AAa?$AAi?$AAt?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140025E33: free
0x140006644: WPP_SF_SDD
0x140027948: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x140029AE0: "\Registry\Machine\Software\Micro" ??_C@_1ME@FIFPGPIC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x14002B0D0: "\Device\LanmanRedirector" ??_C@_1DC@HPJECOGA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAL?$AAa?$AAn?$AAm?$AAa?$AAn?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x140018980: "public: virtual long __cdecl CAutoVerifierPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CAutoVerifierPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140027BE0: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x1400280E8: "__cdecl _imp_NtAlpcConnectPort" __imp_NtAlpcConnectPort
0x140028110: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x1400296F8: ".dll" ??_C@_19BHIGINDB@?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400055E0: "private: long __cdecl CExceptionReport::SetReportDump(void * __ptr64) __ptr64" ?SetReportDump@CExceptionReport@@AEAAJPEAX@Z
0x14000B828: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x140015F90: "public: virtual void * __ptr64 __cdecl CBEXPlugIn::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBEXPlugIn@@UEAAPEAXI@Z
0x140027DA0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14001DE60: "private: static long __cdecl CStowedExceptionPlugin::HashStackTrace(unsigned long * __ptr64,unsigned long,void * __ptr64 * __ptr64,class CList<struct _PROCESS_MODULE * __ptr64> * __ptr64,class CList<struct _PROCESS_MODULE * __ptr64> * __ptr64)" ?HashStackTrace@CStowedExceptionPlugin@@CAJPEAKKPEAPEAXPEAV?$CList@PEAU_PROCESS_MODULE@@@@2@Z
0x140026200: "__cdecl purecall" _purecall
0x140027D88: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x14000B3A8: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x14002C7F8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x14001DB14: "private: static long __cdecl CStowedExceptionPlugin::CalculateRemoteStringLength(unsigned long * __ptr64,void * __ptr64,void * __ptr64,unsigned long)" ?CalculateRemoteStringLength@CStowedExceptionPlugin@@CAJPEAKPEAX1K@Z
0x140025BC4: "__cdecl _std_terminate" __std_terminate
0x140026340: IsGetProcessWindowStationPresent
0x140029BC0: "ProtectedDebugger" ??_C@_1CE@IKJIFPFF@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x1400127E0: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x14002AA58: "MoAppHangXProc" ??_C@_1BO@MCAHHHJH@?$AAM?$AAo?$AAA?$AAp?$AAp?$AAH?$AAa?$AAn?$AAg?$AAX?$AAP?$AAr?$AAo?$AAc?$AA?$AA@
0x140014F70: "public: virtual long __cdecl CFTHPlugIn::UnInitialize(void) __ptr64" ?UnInitialize@CFTHPlugIn@@UEAAJXZ
0x140025D9C: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x140028660: "ext-ms-win-ntuser-message-l1-1-3" ??_C@_1EC@LIDNENEK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3@
0x14002B110: " :" ??_C@_15NGAHEDKP@?$AA?5?$AA?3?$AA?$AA@
0x14002C0D8: "BufferSize" ??_C@_1BG@CPCOOOKL@?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140025AE0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140027B30: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140026606: memcmp
0x140027BC8: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x140028CF8: "HeaderText=" ??_C@_1BI@KKFKANKN@?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAT?$AAe?$AAx?$AAt?$AA?$DN?$AA?$AA@
0x140029A20: "\Registry\Machine\Software\Micro" ??_C@_1LC@DBOHGNHO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x14000831C: "public: long __cdecl CFileMap::MapFile(unsigned short const * __ptr64,unsigned long) __ptr64" ?MapFile@CFileMap@@QEAAJPEBGK@Z
0x140027F00: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140029598: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x14002579C: RtlpImageNtHeader
0x140026340: IsGetThreadDesktopPresent
0x140028FBC: "P6" ??_C@_15JHPDPBNG@?$AAP?$AA6?$AA?$AA@
0x140028B40: "Heap=" ??_C@_1M@JAKJLKDC@?$AAH?$AAe?$AAa?$AAp?$AA?$DN?$AA?$AA@
0x1400074F0: "public: long __cdecl CString::Append(unsigned short const * __ptr64) __ptr64" ?Append@CString@@QEAAJPEBG@Z
0x14002AE20: "PageHeapCommitMemoryPercent" ??_C@_1DI@GGPNHEMN@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
0x140015DF0: "public: virtual long __cdecl CCriticalProcessPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CCriticalProcessPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x14000A3A4: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x140029328: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x14002C298: "policymanager.dll" ??_C@_1CE@CPIJJION@?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14001EE00: "public: virtual void * __ptr64 __cdecl CIptPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECIptPlugin@@UEAAPEAXI@Z
0x140034318: "long (__cdecl* __ptr64 g_wil_details_pfnRtlSubscribeWnfStateChangeNotification)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnRtlSubscribeWnfStateChangeNotification@@3P6AJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@ZEA
0x1400281C8: "__cdecl _imp_WerReportSubmit" __imp_WerReportSubmit
0x14000B54C: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x14001C41C: "private: long __cdecl CAppRecorderPlugin::WriteAppCompatLayer(void) __ptr64" ?WriteAppCompatLayer@CAppRecorderPlugin@@AEAAJXZ
0x14002BE68: "Too large size" ??_C@_0P@MADAINMD@Too?5large?5size?$AA@
0x140002868: "private: long __cdecl CManifestReport::SetParamsFromStage2(unsigned short const * __ptr64) __ptr64" ?SetParamsFromStage2@CManifestReport@@AEAAJPEBG@Z
0x140003C98: "private: long __cdecl CExceptionReport::SetSharedMemReturnValue(unsigned long) __ptr64" ?SetSharedMemReturnValue@CExceptionReport@@AEAAJK@Z
0x14002BB50: "ntdll" ??_C@_1M@OAIMIKLP@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?$AA@
0x140004670: "private: void __cdecl CExceptionReport::ActOnResponseToAppII(void) __ptr64" ?ActOnResponseToAppII@CExceptionReport@@AEAAXXZ
0x140026119: "__cdecl _imp_load_ImmDisableIME" __imp_load_ImmDisableIME
0x14003038C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140022E20: "long __cdecl WerPluginWriteSettings(struct _AUTOVERIFIER_IPT_SETTINGS * __ptr64,unsigned long,struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?WerPluginWriteSettings@@YAJPEAU_AUTOVERIFIER_IPT_SETTINGS@@KPEAUHKEY__@@PEBG@Z
0x14000A414: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x140027CE8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000E354: "void __cdecl wil::details::in1diag3::_FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x14001F980: "public: virtual long __cdecl CDriverVerifierPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CDriverVerifierPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x14002C3D0: "DisableTelemetryOptInChangeNotif" ??_C@_1FA@CDHJFNKK@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAO?$AAp?$AAt?$AAI?$AAn?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf@
0x1400280D0: "__cdecl _imp_EtwEventWriteNoRegistration" __imp_EtwEventWriteNoRegistration
0x1400119A4: WerpIsProcessInAeDebugExclusionList
0x140027C68: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140027D60: "__cdecl _imp_OpenThread" __imp_OpenThread
0x14000F054: "public: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsage(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsage@RawUsageIndex@details_abi@wil@@QEAA_NPEAX_K01I@Z
0x140034360: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUuzfogivkUoryvcUlyquivUznwGEUkivxlnkOlyq@FaultRepLibEx" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUuzfogivkUoryvcUlyquivUznwGEUkivxlnkOlyq@FaultRepLibEx
0x140029410: "[%hs(%hs)]
" ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x140028200: "__cdecl _imp_WerReportAddFile" __imp_WerReportAddFile
0x14002ABB8: "PageHeapDllRangeEnd" ??_C@_1CI@NMPLGDBI@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAD?$AAl?$AAl?$AAR?$AAa?$AAn?$AAg?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x14002B7D8: "OutOfProcessExceptionEventCallba" ??_C@_0CD@NAOHFEHL@OutOfProcessExceptionEventCallba@
0x14002B2C0: "Software\Microsoft\Windows NT\Cu" ??_C@_1LE@BFKELKBF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140027F50: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140027238: "const CAutoVerifierPlugin::`vftable'" ??_7CAutoVerifierPlugin@@6B@
0x140028830: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@FIHMJCLF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x14002BE80: "FDR" ??_C@_17IAOCGEKP@?$AAF?$AAD?$AAR?$AA?$AA@
0x140028180: ntdll_NULL_THUNK_DATA
0x140027E78: "__cdecl _imp_memcpy" __imp_memcpy
0x140028118: "__cdecl _imp_RtlImageNtHeaderEx" __imp_RtlImageNtHeaderEx
0x1400295F8: "RestartRunTime" ??_C@_1BO@NLHCBGDH@?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAR?$AAu?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140033B48: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x1400080E4: "public: long __cdecl CString::GetSystemDirectory2(unsigned short,int) __ptr64" ?GetSystemDirectory2@CString@@QEAAJGH@Z
0x14002AF18: "IptTraceDurationInDays" ??_C@_1CO@BHLHNKPE@?$AAI?$AAp?$AAt?$AAT?$AAr?$AAa?$AAc?$AAe?$AAD?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAn?$AAD?$AAa?$AAy?$AAs?$AA?$AA@
0x1400300B8: "__cdecl TI2?AVResultException@wil@@" _TI2?AVResultException@wil@@
0x140015F50: "public: virtual void * __ptr64 __cdecl CPinDLLPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPinDLLPlugin@@UEAAPEAXI@Z
0x140025CAC: "__cdecl Init_thread_footer" _Init_thread_footer
0x1400292F0: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x140015F50: "public: virtual void * __ptr64 __cdecl CCrashOnLaunch::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCrashOnLaunch@@UEAAPEAXI@Z
0x14002A9C8: WPP_83e15c1432483627d9202898dfec1845_Traceguids
0x1400293C0: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140029350: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x1400296D0: "SuspendDWProcess" ??_C@_1CC@NMNDEFDB@?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAD?$AAW?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x14002B830: "OutOfProcessExceptionEventDebugg" ??_C@_0DB@IFOJFNNI@OutOfProcessExceptionEventDebugg@
0x14002AED8: "IptBufferSize" ??_C@_1BM@EJCIBDFA@?$AAI?$AAp?$AAt?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140033B9B: g_header_init_InitializeStagingSRUMFeatureReporting
0x1400263A0: "__cdecl _tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x14001B2D0: "public: virtual void * __ptr64 __cdecl CAppRecorderPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAppRecorderPlugin@@UEAAPEAXI@Z
0x140027968: "__cdecl _imp_FreeSid" __imp_FreeSid
0x140001764: "public: __cdecl CWatsonReport::~CWatsonReport(void) __ptr64" ??1CWatsonReport@@QEAA@XZ
0x14002BDF8: "VerifyDrivers=" ??_C@_1BO@GMAOAIII@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?$DN?$AA?$AA@
0x140028198: "__cdecl _imp_WerpCreateIntegratorReportId" __imp_WerpCreateIntegratorReportId
0x140017E90: "public: virtual void * __ptr64 __cdecl CAutoVerifierPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAutoVerifierPlugin@@UEAAPEAXI@Z
0x140030378: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x14001CA00: "public: virtual long __cdecl CFTHPlugIn::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CFTHPlugIn@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140027A70: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x140010358: "public: void __cdecl wil::details::FeatureStateManager::QueueBackgroundSRUMUsageReporting(unsigned int,unsigned short,unsigned int) __ptr64" ?QueueBackgroundSRUMUsageReporting@FeatureStateManager@details@wil@@QEAAXIGI@Z
0x140027F28: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x140027C50: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x140033B78: "__cdecl _security_cookie" __security_cookie
0x14001FEA8: "private: long __cdecl CDriverVerifierPlugin::ParseSettings(unsigned short const * __ptr64) __ptr64" ?ParseSettings@CDriverVerifierPlugin@@AEAAJPEBG@Z
0x140024540: "public: static long __cdecl PackageUtility::GetProcessPackageFullName(void * __ptr64,class CString * __ptr64)" ?GetProcessPackageFullName@PackageUtility@@SAJPEAXPEAVCString@@@Z
0x140027F20: "__cdecl _imp__wtoi64" __imp__wtoi64
0x140017D78: "public: __cdecl CAutoVerifierPlugin::CAutoVerifierPlugin(void) __ptr64" ??0CAutoVerifierPlugin@@QEAA@XZ
0x140028EC8: "00000000" ??_C@_1BC@LMIJMNIA@?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x140027960: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14000E398: "long __cdecl wil_details_NtQueryWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?wil_details_NtQueryWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@Z
0x140013B68: "private: long __cdecl CCrashSignature::GetProcessUnloadedModulesInformation(unsigned long * __ptr64,struct _RTL_UNLOAD_EVENT_TRACE * __ptr64 * __ptr64) __ptr64" ?GetProcessUnloadedModulesInformation@CCrashSignature@@AEAAJPEAKPEAPEAU_RTL_UNLOAD_EVENT_TRACE@@@Z
0x140026670: "__cdecl alloca_probe" _alloca_probe
0x14001E790: "public: virtual long __cdecl CTIPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CTIPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x14000A708: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x14000856C: "public: __cdecl CFileMap::~CFileMap(void) __ptr64" ??1CFileMap@@QEAA@XZ
0x140009C1C: "long __cdecl UtilReadTEB(void * __ptr64,void * __ptr64,void * __ptr64,unsigned long,unsigned long)" ?UtilReadTEB@@YAJPEAX00KK@Z
0x140029428: "[%hs]
" ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x140028080: "__cdecl _imp_RtlGetCurrentTransaction" __imp_RtlGetCurrentTransaction
0x140027970: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x140029BA8: "Debugger" ??_C@_1BC@MLJJDKHA@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x140027A80: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x14002BCD0: "WmiPrvSE.exe" ??_C@_1BK@KMAPCDPP@?$AAW?$AAm?$AAi?$AAP?$AAr?$AAv?$AAS?$AAE?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140020790: "public: virtual long __cdecl CDriverVerifierPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CDriverVerifierPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x14002C018: "%s=" ??_C@_17KELMBDLH@?$AA?$CF?$AAs?$AA?$DN?$AA?$AA@
0x14002B4B0: "Software\Microsoft\Windows\Windo" ??_C@_1JA@ICBKIHFN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x14002C310: "LimitEnhancedDiagnosticDataWindo" ??_C@_1FI@BKBJOBNH@?$AAL?$AAi?$AAm?$AAi?$AAt?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAd?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAD?$AAa?$AAt?$AAa?$AAW?$AAi?$AAn?$AAd?$AAo@
0x14002C898: "Global\Microsoft.Windows.Setup" ??_C@_1DO@LLPECNEH@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1400279F0: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x140027CC8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000BE30: "void __cdecl wil::details::Rethrow(void)" ?Rethrow@details@wil@@YAXXZ
0x140029458: WPP_4414612258423226334c47958e4a7d80_Traceguids
0x140027BA8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14001721C: "private: long __cdecl CInpagePlugIn::GetFileNameFromMappedFileName(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetFileNameFromMappedFileName@CInpagePlugIn@@AEAAJPEBGPEAGK@Z
0x140014F70: "public: virtual long __cdecl CPinDLLPlugin::UnInitialize(void) __ptr64" ?UnInitialize@CPinDLLPlugin@@UEAAJXZ
0x14002C9C0: "__cdecl _xmm@ffffffffffffffffffffffffffffffff" __xmm@ffffffffffffffffffffffffffffffff
0x140011060: "public: void * __ptr64 __cdecl wil::details::FeatureStateManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFeatureStateManager@details@wil@@QEAAPEAXI@Z
0x14002A770: "update.exe" ??_C@_1BG@CCNFCIIF@?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140033B70: "__cdecl _defaultmatherr" __defaultmatherr
0x140026125: "__cdecl _tailMerge_ext_ms_win_imm_l1_1_0_dll" __tailMerge_ext_ms_win_imm_l1_1_0_dll
0x1400302D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140027C70: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x14002B720: WPP_6c31822080613f9c96a98b27e6a1741c_Traceguids
0x14002A2B0: "WER/CrashAPI:%u: ERROR StringCch" ??_C@_0FK@JPLPDOJO@WER?1CrashAPI?3?$CFu?3?5ERROR?5StringCch@
0x1400282A8: "__cdecl _xl_a" __xl_a
0x14001ECE0: "public: virtual long __cdecl CTIPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CTIPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140028BE0: "Main_IconFile=" ??_C@_1BO@KLIMEGIG@?$AAM?$AAa?$AAi?$AAn?$AA_?$AAI?$AAc?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AA?$DN?$AA?$AA@
0x140025B22: CreateProcessW
0x1400287F0: "ext-ms-win-ntuser-window-l1-1-4" ??_C@_1EA@MBNDIBGH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA4?$AA?$AA@
0x1400279A0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x140027BE8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1400280B0: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x140034260: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUxlnnlmUoryUnhexigUlyquivUznwGEUkivxlnkOlyq@FeedbackCommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUxlnnlmUoryUnhexigUlyquivUznwGEUkivxlnkOlyq@FeedbackCommon
0x1400279B0: "__cdecl _imp_K32EnumProcessModules" __imp_K32EnumProcessModules
0x14002C420: "ConfigureTelemetryOptInSettingsU" ??_C@_1EE@JBKCDIPO@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAe?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAO?$AAp?$AAt?$AAI?$AAn?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AAU@
0x140027930: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1400343D8: "__cdecl _onexitbegin" __onexitbegin
0x140027C38: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x14002A370: "WER/CrashAPI:%u: WARNING NtQuery" ??_C@_0GH@BPBBFPDN@WER?1CrashAPI?3?$CFu?3?5WARNING?5NtQuery@
0x14001D770: "public: virtual long __cdecl CStowedExceptionPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CStowedExceptionPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x140028190: "__cdecl _imp_WerpSetIntegratorReportId" __imp_WerpSetIntegratorReportId
0x140015F50: "public: virtual void * __ptr64 __cdecl CFTHPlugIn::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCFTHPlugIn@@UEAAPEAXI@Z
0x140034288: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x14002C878: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x14002BF30: "SessionSettings" ??_C@_1CA@GMCFAAFF@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x14002A7BC: "_" ??_C@_13ENNFDPBH@?$AA_?$AA?$AA@
0x1400280E0: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x14000A9B0: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x1400287B0: "ext-ms-win-ntuser-window-l1-1-3" ??_C@_1EA@FMAELJNO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3?$AA?$AA@
0x140028020: "__cdecl _imp_NtAllocateVirtualMemory" __imp_NtAllocateVirtualMemory
0x140006460: "long __cdecl ParseKeyValuePair(unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64,class CString * __ptr64,class CString * __ptr64)" ?ParseKeyValuePair@@YAJPEBGPEAPEBGPEAVCString@@2@Z
0x140027F68: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140002F80: "public: long __cdecl CExceptionReport::Report(void * __ptr64,unsigned long * __ptr64) __ptr64" ?Report@CExceptionReport@@QEAAJPEAXPEAK@Z
0x14002B108: "\%s" ??_C@_17LGLPFNOI@?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14001CF38: WPP_SF_qD
0x140028F70: "0000000000000000" ??_C@_1CC@BAGOIIGN@?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x140028040: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x140027C98: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140028D9C: ". " ??_C@_15NDKJJFCE@?$AA?4?$AA?5?$AA?$AA@
0x14002B248: "AutoVerifierV2" ??_C@_1BO@MJJLICOJ@?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAV?$AA2?$AA?$AA@
0x14002ADB0: "WerDiagController.dll" ??_C@_1CM@BDBFHFPH@?$AAW?$AAe?$AAr?$AAD?$AAi?$AAa?$AAg?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400173E0: "private: long __cdecl CInpagePlugIn::GetFaultingIOFilePath(void * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetFaultingIOFilePath@CInpagePlugIn@@AEAAJPEAXPEAGK@Z
0x140027B88: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x140010AB4: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,2>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$01@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x140025D1C: "__cdecl Init_thread_header" _Init_thread_header
0x140030468: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140012D5C: "private: int __cdecl CCrashSignature::IsHostProcess(unsigned short const * __ptr64) __ptr64" ?IsHostProcess@CCrashSignature@@AEAAHPEBG@Z
0x14002AA40: "MoAppHang" ??_C@_1BE@CJCHLNMK@?$AAM?$AAo?$AAA?$AAp?$AAp?$AAH?$AAa?$AAn?$AAg?$AA?$AA@
0x140027940: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x140033B9D: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem_SuppressPrivateApiUse
0x140009104: "long __cdecl UtilGetDuplicateString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?UtilGetDuplicateString@@YAJPEBGPEAPEAG@Z
0x14000BC90: "public: virtual char const * __ptr64 __cdecl wil::ResultException::what(void)const __ptr64" ?what@ResultException@wil@@UEBAPEBDXZ
0x140034330: "void (__cdecl* __ptr64 g_wil_details_apiRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_apiRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x1400342F0: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x14000C6DC: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x140025934: "__cdecl _security_init_cookie" __security_init_cookie
0x14002B3C0: "QueryOriginalBucket" ??_C@_0BE@GACHCEJP@QueryOriginalBucket?$AA@
0x14001C190: "private: int __cdecl CAppRecorderPlugin::PromptForEnableAppRecorder(void * __ptr64) __ptr64" ?PromptForEnableAppRecorder@CAppRecorderPlugin@@AEAAHPEAX@Z
0x140001508: "public: long __cdecl CWatsonClient::Run(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?Run@CWatsonClient@@QEAAJPEBGPEAK@Z
0x140034258: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x140029620: "Software\Microsoft\Windows\Windo" ??_C@_1HC@MHLNCCCH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x14001A038: WPP_SF_q
0x140027E68: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x14001CD80: "public: virtual long __cdecl CCrashOnLaunch::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CCrashOnLaunch@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140027CF8: "__cdecl _imp_GetUserDefaultUILanguage" __imp_GetUserDefaultUILanguage
0x14000481C: "private: struct _DWSharedMem20 * __ptr64 __cdecl CExceptionReport::AllocateAndMapSharedMem15(struct _DWSharedMem15 * __ptr64) __ptr64" ?AllocateAndMapSharedMem15@CExceptionReport@@AEAAPEAU_DWSharedMem20@@PEAU_DWSharedMem15@@@Z
0x140027FD0: "__cdecl _imp__cexit" __imp__cexit
0x140029E78: "WER/CrashAPI:%u: ERROR Invalid a" ??_C@_0CK@PFKEFDOH@WER?1CrashAPI?3?$CFu?3?5ERROR?5Invalid?5a@
0x14002A9A0: "Application Error" ??_C@_1CE@DHKCCCBA@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x140028100: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x14002BF50: "AppPath" ??_C@_1BA@JGADFHCG@?$AAA?$AAp?$AAp?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140027900: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x1400257F8: "__cdecl get_image_app_type" _get_image_app_type
0x14001ED64: "public: __cdecl CIptPlugin::CIptPlugin(void) __ptr64" ??0CIptPlugin@@QEAA@XZ
0x14001EE00: "public: virtual void * __ptr64 __cdecl CIptPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCIptPlugin@@UEAAPEAXI@Z
0x1400290C0: WPP_a5f28cd85f803c613f4baaa7fd6fabb7_Traceguids
0x1400101D4: "public: void __cdecl wil::details::FeatureStateManager::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateManager@details@wil@@QEAAXIW4wil_details_ServiceReportingKind@@_K@Z
0x14000EA64: "long __cdecl wil_details_WriteSRUMWnfUsageBuffer(class wil::details_abi::heap_vector<struct wil_details_FeatureUsageSRUM> * __ptr64)" ?wil_details_WriteSRUMWnfUsageBuffer@@YAJPEAV?$heap_vector@Uwil_details_FeatureUsageSRUM@@@details_abi@wil@@@Z
0x140028990: WNF_WER_SERVICE_START
0x1400302B0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140026636: wcscmp
0x14002427C: "public: long __cdecl CRegSetting::Load(struct HKEY__ * __ptr64,unsigned long) __ptr64" ?Load@CRegSetting@@QEAAJPEAUHKEY__@@K@Z
0x140028000: "__cdecl _imp_memmove" __imp_memmove
0x14002A310: "WER/CrashAPI:%u: ERROR StringCch" ??_C@_0GA@HHBMMGGA@WER?1CrashAPI?3?$CFu?3?5ERROR?5StringCch@
0x140002A90: "private: long __cdecl CManifestReport::ParseURLtoGeneric(unsigned short const * __ptr64,struct _PARAM_NAME_VALUE const * __ptr64,unsigned long) __ptr64" ?ParseURLtoGeneric@CManifestReport@@AEAAJPEBGPEBU_PARAM_NAME_VALUE@@K@Z
0x140014F70: "public: virtual struct WER_PLUGIN_INIT_OUT * __ptr64 __cdecl CStowedExceptionPlugin::GetInitializationData(void) __ptr64" ?GetInitializationData@CStowedExceptionPlugin@@UEAAPEAUWER_PLUGIN_INIT_OUT@@XZ
0x1400261A4: CoTaskMemFree
0x1400300D8: "__cdecl CTA2?AVResultException@wil@@" _CTA2?AVResultException@wil@@
0x14000AF8C: "unsigned long __cdecl UtilRegGetDWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int * __ptr64,int)" ?UtilRegGetDWORD@@YAKPEAUHKEY__@@PEBG1KPEAHH@Z
0x14002A580: "Local\WERReportingForProcessComp" ??_C@_1EO@IFEJNEO@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAW?$AAE?$AAR?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAF?$AAo?$AAr?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAo?$AAm?$AAp@
0x14002C760: "Software\Microsoft\Windows\Curre" ??_C@_1JA@KGMKDJEK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140028D10: "ErrorText=" ??_C@_1BG@EGPPJOPL@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAT?$AAe?$AAx?$AAt?$AA?$DN?$AA?$AA@
0x140021B50: "private: long __cdecl CFDRPlugin::ReadFDRSessionSettings(class CString * __ptr64,class CString * __ptr64,unsigned long * __ptr64) __ptr64" ?ReadFDRSessionSettings@CFDRPlugin@@AEAAJPEAVCString@@0PEAK@Z
0x14002BC68: WPP_5fa444f7a8ba31fe8d89d8c4b7c2dc46_Traceguids
0x14000ABF8: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x140025710: wmainCRTStartup
0x14000CA80: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x14002524C: "long __cdecl CallerIdentity::GetProcessAppId(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetProcessAppId@CallerIdentity@@YAJPEAXPEAPEAG@Z
0x14002A070: "WER/CrashAPI:%u: ERROR WerpPathT" ??_C@_0DD@EDOLEDBI@WER?1CrashAPI?3?$CFu?3?5ERROR?5WerpPathT@
0x1400280A8: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x14002A610: "WER/CrashAPI:%u: ERROR Invalid a" ??_C@_0EN@PGOLCHJI@WER?1CrashAPI?3?$CFu?3?5ERROR?5Invalid?5a@
0x140001A14: "public: long __cdecl CManifestReport::Report(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?Report@CManifestReport@@QEAAJPEBGPEAK@Z
0x140001920: "public: __cdecl CWatsonClient::~CWatsonClient(void) __ptr64" ??1CWatsonClient@@QEAA@XZ
0x14002A750: "launcher.exe" ??_C@_1BK@ONLBHNO@?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140028210: wer_NULL_THUNK_DATA
0x140027EF8: "__cdecl _imp_malloc" __imp_malloc
0x140027ED8: "__cdecl _imp__purecall" __imp__purecall
0x140027980: ADVAPI32_NULL_THUNK_DATA
0x140010AE8: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,0>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$0A@@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x14002A428: "WER/CrashAPI:%u: TRACE Mapped pr" ??_C@_0DN@GFDBIKIP@WER?1CrashAPI?3?$CFu?3?5TRACE?5Mapped?5pr@
0x14002B048: "InPageCoFire" ??_C@_1BK@IBOMLBED@?$AAI?$AAn?$AAP?$AAa?$AAg?$AAe?$AAC?$AAo?$AAF?$AAi?$AAr?$AAe?$AA?$AA@
0x1400278E8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x14002B988: "psr.exe" ??_C@_1BA@LAELJLGH@?$AAp?$AAs?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000FE9C: "public: void __cdecl wil::details_abi::SubscriptionList::Unsubscribe(class wil::srwlock & __ptr64,struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64) __ptr64" ?Unsubscribe@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@PEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x140010770: "void __cdecl wil::details::WilApiImpl_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApiImpl_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x140028A38: "Queued_EventDescription=" ??_C@_1DC@OAAIKOKL@?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAd?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$DN?$AA?$AA@
0x14002A908: "coreclr.dll" ??_C@_1BI@DBHPJHNN@?$AAc?$AAo?$AAr?$AAe?$AAc?$AAl?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400293E8: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x140027BD8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x1400207E4: "public: long __cdecl CList<class CString>::AddToTail(class CString & __ptr64) __ptr64" ?AddToTail@?$CList@VCString@@@@QEAAJAEAVCString@@@Z
0x140027A88: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x140034228: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x140029DA8: "WER/CrashAPI:%u: ERROR NtQueryIn" ??_C@_0DJ@BGPHJHOG@WER?1CrashAPI?3?$CFu?3?5ERROR?5NtQueryIn@
0x14002BB00: "StackHash12_%03x" ??_C@_1CC@FJFGAAKP@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAH?$AAa?$AAs?$AAh?$AA1?$AA2?$AA_?$AA?$CF?$AA0?$AA3?$AAx?$AA?$AA@
0x140015F50: "public: virtual void * __ptr64 __cdecl CPinDLLPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPinDLLPlugin@@UEAAPEAXI@Z
0x140015F50: "public: virtual void * __ptr64 __cdecl CCrashOnLaunch::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCrashOnLaunch@@UEAAPEAXI@Z
0x14002035C: "private: long __cdecl CDriverVerifierPlugin::EnableDriverVerifier(void * __ptr64) __ptr64" ?EnableDriverVerifier@CDriverVerifierPlugin@@AEAAJPEAX@Z
0x14002C158: "MinimumBuffers" ??_C@_1BO@NEHDJPKH@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x140019F20: "private: long __cdecl CAutoVerifierPlugin::DisableAutoverifier(void) __ptr64" ?DisableAutoverifier@CAutoVerifierPlugin@@AEAAJXZ
0x14002897C: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x14002A8D8: "mscorsvr.dll" ??_C@_1BK@LPMMMAAI@?$AAm?$AAs?$AAc?$AAo?$AAr?$AAs?$AAv?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140028BC0: "P8=" ??_C@_17CFJDHGOM@?$AAP?$AA8?$AA?$DN?$AA?$AA@
0x140025E80: "__cdecl _report_gsfailure" __report_gsfailure
0x140026260: "__cdecl _imp_load_GetPackageFullName" __imp_load_GetPackageFullName
0x140027C58: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x140027AD0: "__cdecl _imp_UpdateProcThreadAttribute" __imp_UpdateProcThreadAttribute
0x14001B2D0: "public: virtual void * __ptr64 __cdecl CAppRecorderPlugin::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAppRecorderPlugin@@UEAAPEAXI@Z
0x14002AD90: "VerifierDlls" ??_C@_1BK@PIIJKLGC@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x140027A90: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140025A28: "__cdecl onexit" _onexit
0x140027418: "const CFDRPlugin::`vftable'" ??_7CFDRPlugin@@6B@
0x140017E90: "public: virtual void * __ptr64 __cdecl CAutoVerifierPlugin::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAutoVerifierPlugin@@UEAAPEAXI@Z
0x14002B298: "Autoverifier" ??_C@_1BK@GICOIIPO@?$AAA?$AAu?$AAt?$AAo?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x1400281B0: "__cdecl _imp_WerpSetCallBack" __imp_WerpSetCallBack
0x1400253DC: "void __cdecl ARI::AutoPtrAriHeapDeallocate<struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION>(struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION * __ptr64)" ??$AutoPtrAriHeapDeallocate@U_TOKEN_SECURITY_ATTRIBUTES_INFORMATION@@@ARI@@YAXPEAU_TOKEN_SECURITY_ATTRIBUTES_INFORMATION@@@Z
0x1400342F8: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x1400278A0: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x140034278: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x140027AA8: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x14002B148: "sfc_os.dll" ??_C@_1BG@OHDPLNNN@?$AAs?$AAf?$AAc?$AA_?$AAo?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14002B3E0: "Software\Microsoft\Windows\Windo" ??_C@_1HG@MLCCCJHK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x1400292C8: "|" ??_C@_13PPFCDPMH@?$AA?$HM?$AA?$AA@
0x14000EF30: "public: void __cdecl wil::details_abi::RawUsageIndex::SetBuffer(void * __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?SetBuffer@RawUsageIndex@details_abi@wil@@QEAAXPEAX_K1@Z
0x1400343E8: "__cdecl _native_startup_state" __native_startup_state
0x140029120: "GetSystemWow64Directory2W" ??_C@_0BK@KDBADKDO@GetSystemWow64Directory2W?$AA@
0x140029440: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14002C858: WPP_2217a64021a7379bce14b38735677e0d_Traceguids
0x140034290: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x140028770: "ext-ms-win-ntuser-window-l1-1-2" ??_C@_1EA@OELINOLL@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2?$AA?$AA@
0x14002AAD0: "PageHeapFlags" ??_C@_1BM@PHBMAMOE@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x140015AF0: "long __cdecl WerPluginsDestroy(void * __ptr64 * __ptr64)" ?WerPluginsDestroy@@YAJPEAPEAX@Z
0x1400341DC: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x140014EF8: "void __cdecl CheckHrForAddPlugin(long)" ?CheckHrForAddPlugin@@YAXJ@Z
0x140007458: "public: long __cdecl CString::Append(char const * __ptr64) __ptr64" ?Append@CString@@QEAAJPEBD@Z
0x14001D540: "public: virtual long __cdecl CStowedExceptionPlugin::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CStowedExceptionPlugin@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140034308: "void (__cdecl* __ptr64 g_wil_details_internalRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_internalRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x14002B118: "psapi.dll" ??_C@_1BE@NPEIJFBC@?$AAp?$AAs?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000A400: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x14002C278: "AllowTelemetry" ??_C@_1BO@PNLLACDG@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AA?$AA@
0x140027920: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x140028E88: "szAppVer" ??_C@_1BC@JECMGOPJ@?$AAs?$AAz?$AAA?$AAp?$AAp?$AAV?$AAe?$AAr?$AA?$AA@
0x14000E7D0: "long __cdecl wil_details_StagingConfig_FireNotification(struct wil_details_StagingConfig * __ptr64,unsigned int,unsigned short,int)" ?wil_details_StagingConfig_FireNotification@@YAJPEAUwil_details_StagingConfig@@IGH@Z
0x1400341C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUuvvwyzxpUdrmwldhUwdxorvmgUoryUlyquivUznwGEUkivxlnkOlyq@dwclient" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUuvvwyzxpUdrmwldhUwdxorvmgUoryUlyquivUznwGEUkivxlnkOlyq@dwclient
0x140030298: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLB
0x140037038: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLA
0x140029388: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140027988: "__cdecl _imp_GetPackageFamilyName" __imp_GetPackageFamilyName
0x1400301F8: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLN
0x14000E434: "long __cdecl wil_details_NtUpdateWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?wil_details_NtUpdateWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@Z
0x14002AFF8: "MoOsMitigation" ??_C@_1BO@HHPKNDKI@?$AAM?$AAo?$AAO?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14001A200: "public: virtual long __cdecl CRuntimePlugin::UnInitialize(void) __ptr64" ?UnInitialize@CRuntimePlugin@@UEAAJXZ
0x140024DAC: "long __cdecl wil::details::ReportFailure_Win32(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,unsigned long)" ?ReportFailure_Win32@details@wil@@YAJPEAXIPEBD110W4FailureType@2@K@Z
0x140034358: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUgvozkknvgzUoryUlyquivUznwGEUkivxlnkOlyq@TelAppMeta" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUgvozkknvgzUoryUlyquivUznwGEUkivxlnkOlyq@TelAppMeta
0x14002ACC0: "AutoVerifierTimeDuration" ??_C@_1DC@GFEFEGMO@?$AAA?$AAu?$AAt?$AAo?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAT?$AAi?$AAm?$AAe?$AAD?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140028AE8: "FilesToDelete=" ??_C@_1BO@PPMFFBEN@?$AAF?$AAi?$AAl?$AAe?$AAs?$AAT?$AAo?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$DN?$AA?$AA@
0x1400303A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x140016810: "public: virtual long __cdecl CInpagePlugIn::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CInpagePlugIn@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140030440: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x14002AF88: WPP_1fd567b27c8538f339bb1bcf95bf80fa_Traceguids
0x14000BC30: "public: __cdecl wil::ResultException::ResultException(struct wil::FailureInfo const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBUFailureInfo@1@@Z
0x140028070: "__cdecl _imp_NtWaitForMultipleObjects" __imp_NtWaitForMultipleObjects
0x140027FB0: "__cdecl _imp__fmode" __imp__fmode
0x14002A738: "start.exe" ??_C@_1BE@MLPDPFJK@?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14002A6E8: "install.exe" ??_C@_1BI@MCJLMGAL@?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000A424: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x14001F170: "public: virtual long __cdecl CIptPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CIptPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x140009D6C: "long __cdecl UtilGetProcessCommandLine(void * __ptr64,class CString * __ptr64)" ?UtilGetProcessCommandLine@@YAJPEAXPEAVCString@@@Z
0x140027D08: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x14001B8FC: "private: long __cdecl CAppRecorderPlugin::EnableAppRecorder(unsigned short const * __ptr64,void * __ptr64) __ptr64" ?EnableAppRecorder@CAppRecorderPlugin@@AEAAJPEBGPEAX@Z
0x140016D00: "public: virtual long __cdecl CInpagePlugIn::UpdateSignatures(struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64) __ptr64" ?UpdateSignatures@CInpagePlugIn@@UEAAJPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x140034304: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvixlnnlmUoryUlyquivUznwGEUkivxlnkOlyq@WerCommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUuvvwyzxpUxlivUdvixlnnlmUoryUlyquivUznwGEUkivxlnkOlyq@WerCommon
0x140028570: "ext-ms-win-ntuser-message-l1-1-0" ??_C@_1EC@KKIIOCKE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x140027BF8: "__cdecl _imp_SHCreateDirectoryExW" __imp_SHCreateDirectoryExW
0x1400341E0: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x140028030: "__cdecl _imp_NtSetSystemInformation" __imp_NtSetSystemInformation
0x1400158F8: "long __cdecl WerPluginsUpdateSignatures(void * __ptr64,struct WER_PLUGIN_SIG_IN * __ptr64,struct WER_PLUGIN_SIG_OUT * __ptr64,int * __ptr64)" ?WerPluginsUpdateSignatures@@YAJPEAXPEAUWER_PLUGIN_SIG_IN@@PEAUWER_PLUGIN_SIG_OUT@@PEAH@Z
0x1400339F0: "class wil::shutdown_aware_object<class wil::details::FeatureStateManager> wil::details::g_featureStateManager" ?g_featureStateManager@details@wil@@3V?$shutdown_aware_object@VFeatureStateManager@details@wil@@@2@A
0x140028B88: "P1=" ??_C@_17CJMCHCE@?$AAP?$AA1?$AA?$DN?$AA?$AA@
0x140028F48: "bbbbbbb4" ??_C@_1BC@BAGJDALK@?$AAb?$AAb?$AAb?$AAb?$AAb?$AAb?$AAb?$AA4?$AA?$AA@
0x14002B878: "ApplicationRecorder" ??_C@_1CI@MFOMPMB@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x140015F50: "public: virtual void * __ptr64 __cdecl CFTHPlugIn::`vector deleting destructor'(unsigned int) __ptr64" ??_ECFTHPlugIn@@UEAAPEAXI@Z
0x140028A88: "ReportingFlags=" ??_C@_1CA@NPGIEOBM@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$DN?$AA?$AA@
0x1400298B8: "!" ??_C@_13MGDFOILI@?$AA?$CB?$AA?$AA@
0x140030300: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x14002A540: "WER/CrashAPI:%u: ERROR Debugger " ??_C@_0DE@GKJDNAIN@WER?1CrashAPI?3?$CFu?3?5ERROR?5Debugger?5@
0x140008D44: "long __cdecl UtilGetFileInfo(unsigned short const * __ptr64,struct tagVS_FIXEDFILEINFO * __ptr64,unsigned short const * __ptr64 * __ptr64 const,class CString * __ptr64 const,unsigned long)" ?UtilGetFileInfo@@YAJPEBGPEAUtagVS_FIXEDFILEINFO@@QEAPEBGQEAVCString@@K@Z
0x14001B350: "public: virtual long __cdecl CAppRecorderPlugin::Initialize(struct WER_PLUGIN_INIT_IN * __ptr64,unsigned long,struct HINSTANCE__ * __ptr64) __ptr64" ?Initialize@CAppRecorderPlugin@@UEAAJPEAUWER_PLUGIN_INIT_IN@@KPEAUHINSTANCE__@@@Z
0x1400272F8: "const CPinDLLPlugin::`vftable'" ??_7CPinDLLPlugin@@6B@
0x1400342A0: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x140002F08: WPP_SF_sD
0x140001998: WPP_SF_SD
0x140027EE8: "__cdecl _imp_free" __imp_free
0x140029008: "drwtsn32" ??_C@_1BC@IEHMNDKL@?$AAd?$AAr?$AAw?$AAt?$AAs?$AAn?$AA3?$AA2?$AA?$AA@
0x140019520: "private: int __cdecl CAutoVerifierPlugin::PromptForEnableAutoVerifier(void * __ptr64) __ptr64" ?PromptForEnableAutoVerifier@CAutoVerifierPlugin@@AEAAHPEAX@Z
0x1400258A0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140027E30: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140013DFC: "private: long __cdecl CCrashSignature::LookupModuleInUnloadedModules(int * __ptr64,unsigned short * __ptr64 const) __ptr64" ?LookupModuleInUnloadedModules@CCrashSignature@@AEAAJPEAHQEAG@Z
0x14000ACAC: WPP_SF_SS
0x140027F48: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x14002930C: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x140028730: "ext-ms-win-ntuser-window-l1-1-1" ??_C@_1EA@PGANHBFF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?$AA@
0x140027898: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140014F70: "public: virtual long __cdecl CBEXPlugIn::UnInitialize(void) __ptr64" ?UnInitialize@CBEXPlugIn@@UEAAJXZ
0x140015EF0: "public: virtual long __cdecl CCriticalProcessPlugin::InvokeCallback(unsigned short const * __ptr64,struct _WER_CALLBACK_INPUT * __ptr64,int * __ptr64) __ptr64" ?InvokeCallback@CCriticalProcessPlugin@@UEAAJPEBGPEAU_WER_CALLBACK_INPUT@@PEAH@Z
0x1400279D8: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x1400288D0: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@PCHFFKDO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140027E10: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x140028F9C: "P2" ??_C@_15BIJBGGIB@?$AAP?$AA2?$AA?$AA@
0x1400302C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400341E8: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x14002BAA8: "Out of memory." ??_C@_0P@ILLCNIIE@Out?5of?5memory?4?$AA@
0x140002EA4: WPP_SF_s
0x140001930: WPP_SF_S
0x140006CD0: "protected: __cdecl CWatsonReport::CWatsonReport(void) __ptr64" ??0CWatsonReport@@IEAA@XZ
0x14002662A: memset
0x14003051C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14002B868: WPP_37497241e0e83b1451fa9fb8e845c8d5_Traceguids
0x14002BF60: "LogPath" ??_C@_1BA@NHOPJJJG@?$AAL?$AAo?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14001286C: "long __cdecl SetDirEnvironmentVariableFromPath(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?SetDirEnvironmentVariableFromPath@@YAJPEBG0@Z
0x140033B99: g_header_init_InitializeResultHeader
0x14002A978: "%08x" ??_C@_19HGGOABND@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
0x1400063E4: "long __cdecl ConvertDw1xFlags(unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?ConvertDw1xFlags@@YAJKPEAK00@Z
0x1400271A8: "const IWERPlugIn::`vftable'" ??_7IWERPlugIn@@6B@
0x1400133B0: "private: long __cdecl CCrashSignature::UpdateProcessNameForSvchost(void * __ptr64,void * __ptr64,class CString * __ptr64) __ptr64" ?UpdateProcessNameForSvchost@CCrashSignature@@AEAAJPEAX0PEAVCString@@@Z
0x140028F28: "exceptioncode" ??_C@_1BM@EAIBHHBF@?$AAe?$AAx?$AAc?$AAe?$AAp?$AAt?$AAi?$AAo?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
[JEB Decompiler by PNF Software]