Generated by JEB on 2019/08/01

PE: C:\Windows\System32\MemoryDiagnostic.dll Base=0x180000000 SHA-256=4D8B262048582E627444E204D4B861A2A69E0196AA82506F2BEAE0A34DB8356B
PDB: MemoryDiagnostic.pdb GUID={491916D1-B26F-9FA9-CF731816C25405A5} Age=1

249 located named symbols:
0x180006B60: "SeProfileSingleProcessPrivilege" ??_C@_1EA@EDIGMFBC@?$AAS?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800061F8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180006C40: CLSID_TaskScheduler
0x18000579C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800061B8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800048F0: "private: virtual long __cdecl CMemoryDiagnosticHandler::Worker(void) __ptr64" ?Worker@CMemoryDiagnosticHandler@@EEAAJXZ
0x1800055B0: "__cdecl FindPESection" _FindPESection
0x180004620: "private: static int __cdecl CMemoryDiagnosticHandler::static_BcdPageNumberCompare(void const * __ptr64,void const * __ptr64)" ?static_BcdPageNumberCompare@CMemoryDiagnosticHandler@@CAHPEBX0@Z
0x180007234: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180006430: "__cdecl _imp_EvtNext" __imp_EvtNext
0x180006BA0: WPP_c0f75c33d8e03e9fd71f92957e31bbad_Traceguids
0x180008020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180006BB0: CLSID_MemoryDiagnostic
0x18000506C: "__cdecl CRT_INIT" _CRT_INIT
0x180006238: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800063C8: "__cdecl _imp_WinSqmSetIfMaxDWORD" __imp_WinSqmSetIfMaxDWORD
0x180004F40: "public: virtual long __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180001670: WppControlCallback
0x180005A20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180006420: "__cdecl _imp_EvtCreateRenderContext" __imp_EvtCreateRenderContext
0x180007270: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180006648: "LastScanTime" ??_C@_1BK@JIHDIFDB@?$AAL?$AAa?$AAs?$AAt?$AAS?$AAc?$AAa?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180001740: DllGetClassObject
0x180001600: WPP_SF_dII
0x180006900: "*[System[Provider[@Name='Applica" ??_C@_1IA@PEGJBHFE@?$AA?$CK?$AA?$FL?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$FL?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$FL?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?8?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x180006620: "BadPageRemovalLimit" ??_C@_1CI@LJECLLDK@?$AAB?$AAa?$AAd?$AAP?$AAa?$AAg?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAa?$AAl?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x1800062A8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180006410: ole32_NULL_THUNK_DATA
0x180006450: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180006350: "__cdecl _imp__wcsdup" __imp__wcsdup
0x180006270: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180006BF0: GUID_BAD_MEMORY_GROUP
0x180005598: "__cdecl XcptFilter" _XcptFilter
0x180006458: "__cdecl _xc_a" __xc_a
0x180006C00: WPP_ThisDir_CTLGUID_MemoryDiagnosticTraceGuid
0x180006AB8: "RunFullMemoryDiagnostic" ??_C@_1DA@FNHLBJCG@?$AAR?$AAu?$AAn?$AAF?$AAu?$AAl?$AAl?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AA?$AA@
0x18000558C: "__cdecl callnewh" _callnewh
0x1800059ED: memcpy
0x180006358: "__cdecl _imp_memset" __imp_memset
0x180006590: "AppCrashThreshold" ??_C@_1CE@EGJFILNB@?$AAA?$AAp?$AAp?$AAC?$AAr?$AAa?$AAs?$AAh?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x180006290: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000576F: "__cdecl initterm" _initterm
0x1800061C0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180008608: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180006250: "__cdecl _imp_Sleep" __imp_Sleep
0x180006478: "__cdecl _xi_z" __xi_z
0x1800062E0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800063B0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x18000577B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800063A0: "__cdecl _imp_bsearch" __imp_bsearch
0x180006AE8: "ProcessMemoryDiagnosticEvents" ??_C@_1DM@MKIDBEHC@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x180001110: "protected: virtual long __cdecl CWinTaskHandler::StartWorker(struct IUnknown * __ptr64,unsigned short * __ptr64) __ptr64" ?StartWorker@CWinTaskHandler@@MEAAJPEAUIUnknown@@PEAG@Z
0x1800072AC: "__cdecl _IMPORT_DESCRIPTOR_bcd" __IMPORT_DESCRIPTOR_bcd
0x1800085B0: WPP_REGISTRATION_GUIDS
0x180001EF0: "private: long __cdecl CMemoryDiagnosticHandler::EventScanCriteriaMet(int * __ptr64) __ptr64" ?EventScanCriteriaMet@CMemoryDiagnosticHandler@@AEAAJPEAH@Z
0x180005580: malloc
0x180006980: "*[System[Provider[@Name='Microso" ??_C@_1JK@NACMAHKP@?$AA?$CK?$AA?$FL?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$FL?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$FL?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?8?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo@
0x1800061B0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003678: "private: long __cdecl CMemoryDiagnosticHandler::LogPageRetiredEvent(unsigned __int64,int) __ptr64" ?LogPageRetiredEvent@CMemoryDiagnosticHandler@@AEAAJ_KH@Z
0x18000598C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001720: DllCanUnloadNow
0x180004440: "private: long __cdecl CMemoryDiagnosticHandler::StartMemoryTest(void) __ptr64" ?StartMemoryTest@CMemoryDiagnosticHandler@@AEAAJXZ
0x1800085B8: WPP_MAIN_CB
0x1800061D8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1800055A4: "__cdecl amsg_exit" _amsg_exit
0x180006388: "__cdecl _imp__callnewh" __imp__callnewh
0x180006510: IID_IClassFactory
0x180004FB0: "public: virtual void * __ptr64 __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAPEAXI@Z
0x180006C10: "__cdecl GUID_eaec7a8f_27a0_4ddc_8675_14726a01a38a" _GUID_eaec7a8f_27a0_4ddc_8675_14726a01a38a
0x180006310: OLEAUT32_NULL_THUNK_DATA
0x180001804: "public: __cdecl CMemoryDiagnosticHandler::CMemoryDiagnosticHandler(void) __ptr64" ??0CMemoryDiagnosticHandler@@QEAA@XZ
0x180006318: "__cdecl _imp_BcdOpenObject" __imp_BcdOpenObject
0x1800061C8: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800061E0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1800062C0: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180006268: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001100: "private: virtual long __cdecl CWinTaskHandler::Pause(void) __ptr64" ?Pause@CWinTaskHandler@@EEAAJXZ
0x1800085F8: "__cdecl _native_startup_lock" __native_startup_lock
0x1800016F8: DllMain
0x18000147C: WPP_SF_II
0x1800014D0: WPP_SF_IP
0x180006368: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180006288: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x1800063E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180006BC0: MEMORY_DIAGNOSTIC_LIMIT_EVENT
0x180004EE0: "public: virtual unsigned long __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::Release(void) __ptr64" ?Release@?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAKXZ
0x1800062E8: KERNEL32_NULL_THUNK_DATA
0x180004640: "protected: virtual long __cdecl CMemoryDiagnosticHandler::Stop(long * __ptr64) __ptr64" ?Stop@CMemoryDiagnosticHandler@@MEAAJPEAJ@Z
0x180001438: WPP_SF_I
0x180001438: WPP_SF_i
0x1800062A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180004FE4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180008010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180005968: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800040C8: "private: long __cdecl CMemoryDiagnosticHandler::QueryBadPageList(unsigned __int64 * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?QueryBadPageList@CMemoryDiagnosticHandler@@AEAAJPEAPEA_KPEA_K@Z
0x180004620: "private: static int __cdecl CMemoryDiagnosticHandler::static_PageNumberCompare(void const * __ptr64,void const * __ptr64)" ?static_PageNumberCompare@CMemoryDiagnosticHandler@@CAHPEBX0@Z
0x180007284: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180006B48: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180006240: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004FB0: "public: virtual void * __ptr64 __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAPEAXI@Z
0x180006278: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180006BE0: MEMORY_DIAGNOSTIC
0x180006A20: "Event/System/TimeCreated/@System" ??_C@_1EK@GPLMPFG@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?1?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?1?$AAT?$AAi?$AAm?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAd?$AA?1?$AA?$EA?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm@
0x1800085E4: "private: static long volatile CWinTaskHandler::s_cInstances" ?s_cInstances@CWinTaskHandler@@0JC
0x180005660: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006500: IID_IUnknown
0x1800065B8: "PageNotZeroThreshold" ??_C@_1CK@IOJDGNEA@?$AAP?$AAa?$AAg?$AAe?$AAN?$AAo?$AAt?$AAZ?$AAe?$AAr?$AAo?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x1800013C8: WPP_SF_
0x18000725C: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x1800062D0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180006568: "BugCheckThreshold" ??_C@_1CE@EICOBOBM@?$AAB?$AAu?$AAg?$AAC?$AAh?$AAe?$AAc?$AAk?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x1800052B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180001030: "protected: virtual unsigned long __cdecl CWinTaskHandler::Release(void) __ptr64" ?Release@CWinTaskHandler@@MEAAKXZ
0x180006370: "__cdecl _imp__initterm" __imp__initterm
0x18000329C: "private: long __cdecl CMemoryDiagnosticHandler::GetTriggerType(void) __ptr64" ?GetTriggerType@CMemoryDiagnosticHandler@@AEAAJXZ
0x180006328: "__cdecl _imp_BcdCloseStore" __imp_BcdCloseStore
0x180004310: "private: void __cdecl CMemoryDiagnosticHandler::ReportMemoryTestTelemetry(void) __ptr64" ?ReportMemoryTestTelemetry@CMemoryDiagnosticHandler@@AEAAXXZ
0x1800085E8: "__cdecl _onexitend" __onexitend
0x1800062C8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180006218: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x180006448: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180006260: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180006B38: "Time" ??_C@_19NLLMBBJO@?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180006468: "__cdecl _xi_a" __xi_a
0x180006230: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180006440: wevtapi_NULL_THUNK_DATA
0x180006C30: IID_ITaskService
0x180008008: WPP_GLOBAL_Control
0x180001070: "protected: virtual long __cdecl CWinTaskHandler::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CWinTaskHandler@@MEAAJAEBU_GUID@@PEAPEAX@Z
0x180004F20: "public: virtual unsigned long __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::AddRef(void) __ptr64" ?AddRef@?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAKXZ
0x1800065E8: "StoreCorruptionThreshold" ??_C@_1DC@BGLNDPPK@?$AAS?$AAt?$AAo?$AAr?$AAe?$AAC?$AAo?$AAr?$AAr?$AAu?$AAp?$AAt?$AAi?$AAo?$AAn?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x1800013F4: WPP_SF_D
0x1800013F4: WPP_SF_d
0x180008610: "__cdecl pRawDllMain" _pRawDllMain
0x180001100: DllUnregisterServer
0x180006300: "__cdecl _imp_VariantClear" __imp_VariantClear
0x180005024: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180005550: "__cdecl _security_check_cookie" __security_check_cookie
0x180006460: "__cdecl _xc_z" __xc_z
0x180001010: "protected: virtual unsigned long __cdecl CWinTaskHandler::AddRef(void) __ptr64" ?AddRef@CWinTaskHandler@@MEAAKXZ
0x180001340: "private: static unsigned long __cdecl CWinTaskHandler::WorkerThreadProc(void * __ptr64)" ?WorkerThreadProc@CWinTaskHandler@@CAKPEAX@Z
0x180006438: "__cdecl _imp_EvtQuery" __imp_EvtQuery
0x180006338: "__cdecl _imp_BcdCloseObject" __imp_BcdCloseObject
0x180006408: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800062D8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180006520: "SOFTWARE\Microsoft\MemoryDiagnos" ??_C@_1EI@NBICDCAF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs@
0x180006320: "__cdecl _imp_BcdSetElementData" __imp_BcdSetElementData
0x180006480: "__cdecl _guard_fids_table" __guard_fids_table
0x1800063B8: msvcrt_NULL_THUNK_DATA
0x1800060A0: "__cdecl load_config_used" _load_config_used
0x180004E10: "public: virtual long __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::LockServer(int) __ptr64" ?LockServer@?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAJH@Z
0x180001C18: "private: long __cdecl CMemoryDiagnosticHandler::ConfigureMemoryDiagnosticTask(unsigned short const * __ptr64,int) __ptr64" ?ConfigureMemoryDiagnosticTask@CMemoryDiagnosticHandler@@AEAAJPEBGH@Z
0x1800063A8: "__cdecl _imp_qsort" __imp_qsort
0x180001170: "protected: virtual long __cdecl CWinTaskHandler::StopWorker(long * __ptr64) __ptr64" ?StopWorker@CWinTaskHandler@@MEAAJPEAJ@Z
0x180006378: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180001A64: "private: long __cdecl CMemoryDiagnosticHandler::AdjustPrivilege(unsigned short const * __ptr64,int) __ptr64" ?AdjustPrivilege@CMemoryDiagnosticHandler@@AEAAJPEBGH@Z
0x1800062B0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180006668: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x180004780: "private: long __cdecl CMemoryDiagnosticHandler::UpdateLastScanTime(void) __ptr64" ?UpdateLastScanTime@CMemoryDiagnosticHandler@@AEAAJXZ
0x180007298: "__cdecl _IMPORT_DESCRIPTOR_wevtapi" __IMPORT_DESCRIPTOR_wevtapi
0x1800063F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006248: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800061A8: "__cdecl _imp_EventWrite" __imp_EventWrite
0x180005574: free
0x1800063F8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180005790: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001100: "private: virtual long __cdecl CWinTaskHandler::Resume(void) __ptr64" ?Resume@CWinTaskHandler@@EEAAJXZ
0x180006380: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180006400: ntdll_NULL_THUNK_DATA
0x180006360: "__cdecl _imp_memcpy" __imp_memcpy
0x1800010E0: "protected: virtual long __cdecl CWinTaskHandler::Start(struct IUnknown * __ptr64,unsigned short * __ptr64) __ptr64" ?Start@CWinTaskHandler@@MEAAJPEAUIUnknown@@PEAG@Z
0x180001524: WPP_SF_PP
0x1800061D0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180001438: WPP_SF_P
0x1800061F0: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180008018: "__cdecl _security_cookie" __security_cookie
0x180006210: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000387C: "private: long __cdecl CMemoryDiagnosticHandler::ProcessMemoryTestResults(void) __ptr64" ?ProcessMemoryTestResults@CMemoryDiagnosticHandler@@AEAAJXZ
0x180006040: "const CMemoryDiagnosticHandler::`vftable'" ??_7CMemoryDiagnosticHandler@@6B@
0x180001950: "public: virtual void * __ptr64 __cdecl CMemoryDiagnosticHandler::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMemoryDiagnosticHandler@@UEAAPEAXI@Z
0x1800062B8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800063D8: "__cdecl _imp_WinSqmSetDWORD" __imp_WinSqmSetDWORD
0x180006C20: IID_ITaskHandler
0x180006010: "const CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::`vftable'" ??_7?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@6B@
0x180006308: "__cdecl _imp_VariantInit" __imp_VariantInit
0x1800062F8: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1800085F0: "__cdecl _onexitbegin" __onexitbegin
0x1800011E8: "private: long __cdecl CWinTaskHandler::CreateWorkerThread(struct IUnknown * __ptr64) __ptr64" ?CreateWorkerThread@CWinTaskHandler@@AEAAJPEAUIUnknown@@@Z
0x1800063E0: "__cdecl _imp_WinSqmIncrementDWORD" __imp_WinSqmIncrementDWORD
0x180006348: bcd_NULL_THUNK_DATA
0x180006258: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180006280: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x180007248: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180006200: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180005694: "__cdecl _security_init_cookie" __security_init_cookie
0x1800085E0: ?g_taskModule@@3V?$CWinTaskModuleT@VCMemoryDiagnosticHandler@@$1?CLSID_MemoryDiagnostic@@3U_GUID@@B@@A
0x1800063C0: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x180006340: "__cdecl _imp_BcdGetElementData" __imp_BcdGetElementData
0x1800066F0: "*[System[Provider[@Name='Microso" ??_C@_1PG@FKPEGLJP@?$AA?$CK?$AA?$FL?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$FL?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$FL?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?8?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo@
0x180007220: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005A05: wcscmp
0x180006418: "__cdecl _imp_EvtClose" __imp_EvtClose
0x180006390: "__cdecl _imp_malloc" __imp_malloc
0x1800067F0: "*[System[Provider[@Name='Applica" ??_C@_1BAO@JFDDFHC@?$AA?$CK?$AA?$FL?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$FL?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$FL?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?8?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x180006228: ADVAPI32_NULL_THUNK_DATA
0x180006208: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180006298: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x180006BD0: MEMORY_DIAGNOSTIC_RETIRE_EVENT
0x180006220: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x180004E30: "public: virtual long __cdecl CWinTaskClassFactoryT<class CMemoryDiagnosticHandler,1>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CWinTaskClassFactoryT@VCMemoryDiagnosticHandler@@$00@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180003590: "private: void __cdecl CMemoryDiagnosticHandler::InitializeSettingValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64) __ptr64" ?InitializeSettingValue@CMemoryDiagnosticHandler@@AEAAXPEAUHKEY__@@PEBGKPEAX@Z
0x1800057E0: "__cdecl _report_gsfailure" __report_gsfailure
0x180003350: "private: void __cdecl CMemoryDiagnosticHandler::InitializeSettings(void) __ptr64" ?InitializeSettings@CMemoryDiagnosticHandler@@AEAAXXZ
0x180008600: "__cdecl _native_startup_state" __native_startup_state
0x180006B28: "Event" ??_C@_1M@JJBFPLJB@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x180006678: "Application" ??_C@_1BI@JBDNBBGL@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180001950: "public: virtual void * __ptr64 __cdecl CMemoryDiagnosticHandler::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMemoryDiagnosticHandler@@UEAAPEAXI@Z
0x180006428: "__cdecl _imp_EvtRender" __imp_EvtRender
0x180001100: DllRegisterServer
0x1800063D0: "__cdecl _imp_NtSetSystemInformation" __imp_NtSetSystemInformation
0x1800062F0: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x180001578: WPP_SF_SD
0x180006398: "__cdecl _imp_free" __imp_free
0x180005600: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006330: "__cdecl _imp_BcdOpenSystemStore" __imp_BcdOpenSystemStore
0x1800061E8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180006A70: "\Microsoft\Windows\MemoryDiagnos" ??_C@_1EI@FABDJAMJ@?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs@
0x1800059F9: memset
0x1800072C0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180006690: "Microsoft-Windows-Kernel-StoreMg" ??_C@_1FM@NFJGMJNF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?9?$AAS?$AAt?$AAo?$AAr?$AAe?$AAM?$AAg@

[JEB Decompiler by PNF Software]