Generated by JEB on 2019/08/01
PE: C:\Windows\System32\themeservice.dll Base=0x180000000 SHA-256=503EE739A30D67CA4EC27416D4A43F76BA8BC75A8DB175BAFD282307920E944F
PDB: themeservice.pdb GUID={684553A3-74BB-BB6F-2E58667E65CC458E} Age=1
708 located named symbols:
0x180010848: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x180004814: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000C5C0: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x18000B0F8: "long __cdecl SafeStringCchCopyW(unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64)" ?SafeStringCchCopyW@@YAJPEAGKPEBG@Z
0x18000C570: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800079A8: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x1800026D8: "public: void __cdecl CVisualStyleDataManager::Release(unsigned short const * __ptr64,bool) __ptr64" ?Release@CVisualStyleDataManager@@QEAAXPEBG_N@Z
0x180004AA0: "__cdecl FindPESection" _FindPESection
0x180003E70: "public: void * __ptr64 __cdecl CTokenInformation::GetLogonSID(void) __ptr64" ?GetLogonSID@CTokenInformation@@QEAAPEAXXZ
0x18000CE68: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x180007750: "void __cdecl wil::details::ReleaseMutex(void * __ptr64)" ?ReleaseMutex@details@wil@@YAXPEAX@Z
0x18000C298: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x1800106C0: "void * __ptr64 __ptr64 s_hHeapToUse" ?s_hHeapToUse@@3PEAXEA
0x18000B9F0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000EA74: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000CF10: "private: static unsigned short const * const CThemeManagerAPIRequest::s_szServerChangeNumberValue" ?s_szServerChangeNumberValue@CThemeManagerAPIRequest@@0QBGB
0x18000C900: "\Sessions\%d\Windows\ThemeSectio" ??_C@_1EE@JGCBHMDB@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$CF?$AAd?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAT?$AAh?$AAe?$AAm?$AAe?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo@
0x18000AD14: "public: void __cdecl CService::Start(void) __ptr64" ?Start@CService@@QEAAXXZ
0x180004138: "public: __cdecl CVisualStyleDataManager::CVisualStyleDataManager(void) __ptr64" ??0CVisualStyleDataManager@@QEAA@XZ
0x180010698: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180010070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000C718: "__cdecl _imp_NtOpenProcess" __imp_NtOpenProcess
0x180002EC4: "private: long __cdecl CThemeManagerAPIRequest::Execute_SessionCreate(void) __ptr64" ?Execute_SessionCreate@CThemeManagerAPIRequest@@AEAAJXZ
0x1800041A0: "public: __cdecl CVisualStyleDataManager::~CVisualStyleDataManager(void) __ptr64" ??1CVisualStyleDataManager@@QEAA@XZ
0x1800085D0: "private: long __cdecl CThemeManagerAPIRequest::Execute_ProcessAssignSection(class CAPIDispatchSync * __ptr64) __ptr64" ?Execute_ProcessAssignSection@CThemeManagerAPIRequest@@AEAAJPEAVCAPIDispatchSync@@@Z
0x18000C000: "const CThemeManagerAPIRequest::`vftable'{for `CPortMessage'}" ??_7CThemeManagerAPIRequest@@6BCPortMessage@@@
0x18000430C: "__cdecl CRT_INIT" _CRT_INIT
0x180001870: "private: static unsigned long __cdecl CWorkItem::WorkItemEntryProc(void * __ptr64)" ?WorkItemEntryProc@CWorkItem@@CAKPEAX@Z
0x18000C3D0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180008288: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x180003080: "public: virtual void * __ptr64 __cdecl CThemeManagerSessionData::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThemeManagerSessionData@@UEAAPEAXI@Z
0x180013038: "__cdecl _imp_WinStationFreeMemory" __imp_WinStationFreeMemory
0x18000C710: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000B040: "public: virtual void * __ptr64 __cdecl CAPIConnection::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAPIConnection@@UEAAPEAXI@Z
0x1800016D0: "private: long __cdecl CAPIConnection::HandleServerConnectionRequest(class CPortMessage const & __ptr64) __ptr64" ?HandleServerConnectionRequest@CAPIConnection@@AEAAJAEBVCPortMessage@@@Z
0x1800050A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000C040: "const CCountedObject::`vftable'" ??_7CCountedObject@@6B@
0x18000C990: "__cdecl _sz_api_ms_win_security_provider_l1_1_0_dll" __sz_api_ms_win_security_provider_l1_1_0_dll
0x18000B1C0: "public: virtual void * __ptr64 __cdecl CSection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSection@@UEAAPEAXI@Z
0x18000AA50: "public: void * __ptr64 __cdecl CAPIDispatchSync::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAPIDispatchSync@@QEAAPEAXI@Z
0x18000C098: "const CSection::`vftable'" ??_7CSection@@6B@
0x180008FA0: "public: static void * __ptr64 __cdecl CThemeManagerService::OpenStartEvent(unsigned long,unsigned long)" ?OpenStartEvent@CThemeManagerService@@SAPEAXKK@Z
0x180001340: "public: virtual void * __ptr64 __cdecl CThemeManagerAPIRequest::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeManagerAPIRequest@@UEAAPEAXI@Z
0x180003BD8: "private: long __cdecl CSecuredObject::SetDACL(class CAccessControlList & __ptr64)const __ptr64" ?SetDACL@CSecuredObject@@AEBAJAEAVCAccessControlList@@@Z
0x180010000: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x18000824C: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x18000C398: "__cdecl _imp_ReadProcessMemory" __imp_ReadProcessMemory
0x18000CB3B: "" ??_C@_00CNPNBAHC@?$AA@
0x18000961C: "public: int __cdecl CLoaderProcess::IsProcessLoader(void * __ptr64) __ptr64" ?IsProcessLoader@CLoaderProcess@@QEAAHPEAX@Z
0x1800042A8: "public: __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x18000D410: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000CC90: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x18000C368: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18000CE70: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x1800106E0: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x18000843C: "public: void * __ptr64 __cdecl CCriticalSection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCriticalSection@@QEAAPEAXI@Z
0x180006218: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x18000B538: "long __cdecl MakeErrorLast(void)" ?MakeErrorLast@@YAJXZ
0x18000C340: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000A6C0: "public: virtual void * __ptr64 __cdecl CAPIDispatcher::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAPIDispatcher@@UEAAPEAXI@Z
0x18000C590: "__cdecl _imp_GetAce" __imp_GetAce
0x18000E7E8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x18000C4E8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800021F0: "protected: virtual unsigned short const * __ptr64 __cdecl CThemeManagerAPIServer::GetPortName(void) __ptr64" ?GetPortName@CThemeManagerAPIServer@@MEAAPEBGXZ
0x18000D100: "CSVC" ??_C@_04EMFDMEPD@CSVC?$AA@
0x180004EEF: "__cdecl _tailMerge_winsta_dll" __tailMerge_winsta_dll
0x18000C738: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800106A4: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18000194C: "public: static long __cdecl CTLocalAllocPolicy::Alloc(void * __ptr64,unsigned long,unsigned __int64,void * __ptr64 * __ptr64)" ?Alloc@CTLocalAllocPolicy@@SAJPEAXK_KPEAPEAX@Z
0x18000CC20: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180008F60: "public: virtual void * __ptr64 __cdecl CThemeManagerService::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThemeManagerService@@UEAAPEAXI@Z
0x180004D41: "__cdecl _imp_load_GetSecurityInfo" __imp_load_GetSecurityInfo
0x18000C378: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x18000C350: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000C5B8: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x18000C6B0: "__cdecl _imp_NtCreatePort" __imp_NtCreatePort
0x18000B078: "private: int __cdecl CAPIConnection::FindIndexDispatcher(class CAPIDispatcher const * __ptr64) __ptr64" ?FindIndexDispatcher@CAPIConnection@@AEAAHPEBVCAPIDispatcher@@@Z
0x18000D090: "rundll32.exe uxtheme.dll,#64 %s?" ??_C@_1EM@NOLKBPEN@?$AAr?$AAu?$AAn?$AAd?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAu?$AAx?$AAt?$AAh?$AAe?$AAm?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AA?$CD?$AA6?$AA4?$AA?5?$AA?$CF?$AAs?$AA?$DP@
0x18000EA60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x1800107C0: "private: static class CDynamicCountedObjectArray * __ptr64 __ptr64 CThemeManagerAPIRequest::s_pSessionData" ?s_pSessionData@CThemeManagerAPIRequest@@0PEAVCDynamicCountedObjectArray@@EA
0x180001B50: "public: virtual long __cdecl CThemeManagerAPIRequest::Execute(class CAPIDispatchSync * __ptr64) __ptr64" ?Execute@CThemeManagerAPIRequest@@UEAAJPEAVCAPIDispatchSync@@@Z
0x1800068F0: "public: static void __cdecl wil::details::ThreadFailureCallbackHolder::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@ThreadFailureCallbackHolder@details@wil@@SAXPEAUFailureInfo@3@PEAD_K@Z
0x18000C5D8: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180004A79: "__cdecl XcptFilter" _XcptFilter
0x18000C740: "__cdecl _xc_a" __xc_a
0x180010880: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000CB50: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x180006EE8: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x18000CFC8: ShellTraceId_ThemeService_ApiExecution_Start
0x18000CE28: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x18000C698: "__cdecl _imp_NtCompleteConnectPort" __imp_NtCompleteConnectPort
0x180002210: "protected: virtual unsigned short const * __ptr64 __cdecl CThemeManagerAPIServer::GetServiceName(void) __ptr64" ?GetServiceName@CThemeManagerAPIServer@@MEAAPEBGXZ
0x180006184: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x18000C328: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180013030: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x180004C89: "__cdecl lock" _lock
0x18000C030: "const CAPIRequest::`vftable'{for `CQueueElement'}" ??_7CAPIRequest@@6BCQueueElement@@@
0x180010858: g_pfnResultLoggingCallback
0x180002774: "private: int __cdecl CVisualStyleDataManager::Find(unsigned short const * __ptr64) __ptr64" ?Find@CVisualStyleDataManager@@AEAAHPEBG@Z
0x18000CB68: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x18000CFB8: ShellTraceId_ThemeService_ApiExecution_Stop
0x18000D0E0: "WinSta0\Default" ??_C@_1CA@JJIMMJJP@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180003080: "public: virtual void * __ptr64 __cdecl CThemeManagerSessionData::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeManagerSessionData@@UEAAPEAXI@Z
0x180010800: Microsoft_Windows_UxThemeEnableBits
0x18000C0A8: "const CThemeManagerSessionData::`vftable'" ??_7CThemeManagerSessionData@@6B@
0x180003458: "private: void __cdecl CTokenInformation::GetTokenPrivileges(void) __ptr64" ?GetTokenPrivileges@CTokenInformation@@AEAAXXZ
0x18000C8B4: "__cdecl _guard_iat_table" __guard_iat_table
0x18000B564: "public: static long __cdecl CUxThemeFile::ClearStockObjects(void * __ptr64,int)" ?ClearStockObjects@CUxThemeFile@@SAJPEAXH@Z
0x18000B040: "public: virtual void * __ptr64 __cdecl CAPIConnection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAPIConnection@@UEAAPEAXI@Z
0x180010861: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x180005066: memcpy
0x180004174: "void __cdecl ThemeHeapStaticInitialize(int)" ?ThemeHeapStaticInitialize@@YAXH@Z
0x18000A8F4: "public: __cdecl CPortMessage::CPortMessage(class CPortMessage const & __ptr64) __ptr64" ??0CPortMessage@@QEAA@AEBV0@@Z
0x180007C2C: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x18000C578: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000CE08: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000A2B4: "private: void __cdecl CVisualStyleDataManager::DeleteEntry(int) __ptr64" ?DeleteEntry@CVisualStyleDataManager@@AEAAXH@Z
0x18000B1C0: "public: virtual void * __ptr64 __cdecl CSection::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSection@@UEAAPEAXI@Z
0x18000C670: "__cdecl _imp_memset" __imp_memset
0x18000C4D0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x18000C490: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x18000CDD8: Microsoft_Windows_UxThemeLevels
0x18000C4A0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180004C5F: "__cdecl initterm" _initterm
0x18000E9FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180010670: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180001340: "public: virtual void * __ptr64 __cdecl CThemeManagerAPIRequest::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThemeManagerAPIRequest@@UEAAPEAXI@Z
0x180005120: "[thunk]:public: virtual void * __ptr64 __cdecl CAPIRequest::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECAPIRequest@@WBA@EAAPEAXI@Z
0x18000C4F8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800033A8: "long __cdecl _CheckTokenPrivilege(void * __ptr64,unsigned long)" ?_CheckTokenPrivilege@@YAJPEAXK@Z
0x18000C788: "__cdecl _xi_z" __xi_z
0x1800106A0: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x18000C2D0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180010878: g_pfnThrowPlatformException
0x18000C6B8: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x180007AEC: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x1800106D8: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x180004C6B: "__cdecl _C_specific_handler" __C_specific_handler
0x18000C460: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x180003ED0: "private: void __cdecl CTokenInformation::GetTokenGroups(void) __ptr64" ?GetTokenGroups@CTokenInformation@@AEAAXXZ
0x18000CC88: "
" ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x18000C4B8: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x180010850: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x180007668: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x1800068C4: "void __cdecl wil::details::FreeProcessHeap(void * __ptr64)" ?FreeProcessHeap@details@wil@@YAXPEAX@Z
0x18000C608: "__cdecl _imp__onexit" __imp__onexit
0x180005072: memmove
0x18000C308: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000CE40: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x18000A6C0: "public: virtual void * __ptr64 __cdecl CAPIDispatcher::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAPIDispatcher@@UEAAPEAXI@Z
0x180004CB6: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800065F0: "private: long __cdecl wil::details_abi::SemaphoreValue::CreateFromValueInternal(unsigned short const * __ptr64,bool,unsigned __int64) __ptr64" ?CreateFromValueInternal@SemaphoreValue@details_abi@wil@@AEAAJPEBG_N_K@Z
0x180002200: "protected: virtual unsigned short const * __ptr64 __cdecl CThemeManagerAPIServer::GetRequestName(void) __ptr64" ?GetRequestName@CThemeManagerAPIServer@@MEAAPEBGXZ
0x18000C300: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000C4B0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18000C428: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000C0B0: "const CAccessControlList::`vftable'" ??_7CAccessControlList@@6B@
0x180004FF8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000E6E8: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLN
0x18000C948: Microsoft_Windows_UxTheme_Provider
0x18000C138: "const CThemeManagerService::`vftable'" ??_7CThemeManagerService@@6B@
0x180008F60: "public: virtual void * __ptr64 __cdecl CThemeManagerService::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeManagerService@@UEAAPEAXI@Z
0x18000CE5C: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x180010890: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180008C3C: "public: static long __cdecl CThemeManagerAPIRequest::StaticTerminate(void)" ?StaticTerminate@CThemeManagerAPIRequest@@SAJXZ
0x180002AB8: "long __cdecl _AllocAndMapClientString(void * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned int,unsigned short * __ptr64 * __ptr64)" ?_AllocAndMapClientString@@YAJPEAXPEBGIIPEAPEAG@Z
0x180002C70: "private: static void __cdecl CThemeManagerSessionData::CB_SessionTermination(void * __ptr64,unsigned char)" ?CB_SessionTermination@CThemeManagerSessionData@@CAXPEAXE@Z
0x18000E6D0: WINSTA_NULL_THUNK_DATA_DLN
0x18000E95C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180013008: WINSTA_NULL_THUNK_DATA_DLA
0x18000E830: WINSTA_NULL_THUNK_DATA_DLB
0x18000C418: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180004A85: "__cdecl amsg_exit" _amsg_exit
0x180009AEC: "private: long __cdecl CThemeServer::InjectRemoteSection(void * __ptr64,int,void * __ptr64) __ptr64" ?InjectRemoteSection@CThemeServer@@AEAAJPEAXH0@Z
0x1800106A8: "private: static class CAPIConnection * __ptr64 __ptr64 CThemeManagerSessionData::s_pAPIConnection" ?s_pAPIConnection@CThemeManagerSessionData@@0PEAVCAPIConnection@@EA
0x18000CB30: "__cdecl _sz_WINSTA_dll" __sz_WINSTA_dll
0x180007D4C: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x18000D40C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000C290: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180002220: "protected: virtual long __cdecl CAPIDispatcher::CreateSection(void) __ptr64" ?CreateSection@CAPIDispatcher@@MEAAJXZ
0x180007684: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x18000EA4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18000D340: "GDI32.DLL" ??_C@_1BE@BMAICGKH@?$AAG?$AAD?$AAI?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180005F70: "public: long __cdecl CAPIConnection::Listen(class CAPIDispatchSync * __ptr64) __ptr64" ?Listen@CAPIConnection@@QEAAJPEAVCAPIDispatchSync@@@Z
0x18000D358: "ClearBitmapAttributes" ??_C@_0BG@MGNLOPDN@ClearBitmapAttributes?$AA@
0x18000C478: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x180008E10: "public: virtual void * __ptr64 __cdecl CThemeManagerAPIServer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThemeManagerAPIServer@@UEAAPEAXI@Z
0x180010620: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x18000C520: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180006870: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x18000B510: "unsigned short const * __ptr64 __cdecl ThemeString(class CUxThemeFile * __ptr64,int)" ?ThemeString@@YAPEBGPEAVCUxThemeFile@@H@Z
0x18000CCC0: ShellTraceId_ThemeService_QueueApiRequest_Stop
0x18000C468: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18000A960: "public: virtual void * __ptr64 __cdecl CPortMessage::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPortMessage@@UEAAPEAXI@Z
0x18000C620: "__cdecl _imp__lock" __imp__lock
0x180010804: "private: static unsigned long CThemeManagerAPIRequest::s_dwServerChangeNumber" ?s_dwServerChangeNumber@CThemeManagerAPIRequest@@0KA
0x18000CF48: ShellTraceId_ThemeService_WorkerThreadEntry_Stop
0x180004A5C: atexit
0x18000C680: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x180009B8C: "public: long __cdecl CThemeServer::LoadRemoteTheme(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64,void * __ptr64) __ptr64" ?LoadRemoteTheme@CThemeServer@@QEAAJPEBG00KPEAX1@Z
0x180010888: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x1800106D4: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x18000764C: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x18000C5E8: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x18000777C: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x18000C488: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180010680: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x180010840: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUhvierxvUlyquivUznwGEUkxsOlyq@themeservice" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUhvierxvUlyquivUznwGEUkxsOlyq@themeservice
0x18000C430: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000C2E8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002230: "private: long __cdecl CThemeManagerAPIRequest::Execute_AcquireOrAddTheme(void) __ptr64" ?Execute_AcquireOrAddTheme@CThemeManagerAPIRequest@@AEAAJXZ
0x18000C6E0: "__cdecl _imp_NtReplyPort" __imp_NtReplyPort
0x18000D180: "D:(A;;0x001F0001;;;SY)(A;;0x0002" ??_C@_1BKE@BBJKJBCC@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA0?$AA0?$AA1?$AAF?$AA0?$AA0?$AA0?$AA1?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA0?$AA0?$AA0?$AA2@
0x18000397C: "private: long __cdecl CSecuredObject::GetDACL(class CAccessControlList & __ptr64)const __ptr64" ?GetDACL@CSecuredObject@@AEBAJAEAVCAccessControlList@@@Z
0x18000C3B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004CA1: "__cdecl _dllonexit" __dllonexit
0x180003E10: "public: long __cdecl CDynamicArray<struct _ACCESS_ALLOWED_ACE * __ptr64>::Iterate(class CDynamicArrayCallback<struct _ACCESS_ALLOWED_ACE * __ptr64> * __ptr64) __ptr64" ?Iterate@?$CDynamicArray@PEAU_ACCESS_ALLOWED_ACE@@@@QEAAJPEAV?$CDynamicArrayCallback@PEAU_ACCESS_ALLOWED_ACE@@@@@Z
0x180013040: "__cdecl _imp_WinStationEnumerateW" __imp_WinStationEnumerateW
0x180010640: "__cdecl _hmod__ext_ms_win_session_winsta_l1_1_0_dll" __hmod__ext_ms_win_session_winsta_l1_1_0_dll
0x180010650: "__cdecl _native_startup_lock" __native_startup_lock
0x1800029AC: "int __cdecl ThemeMatch(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,int,unsigned long,unsigned short,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,int,unsigned long,unsigned short,int,int,int)" ?ThemeMatch@@YAHPEBG00HHKG000HHKGHHH@Z
0x180010730: "private: static class CVisualStyleDataManager CThemeManagerAPIRequest::s_visualStyleDataManager" ?s_visualStyleDataManager@CThemeManagerAPIRequest@@0VCVisualStyleDataManager@@A
0x180003864: "public: __cdecl CThemeServer::CThemeServer(void * __ptr64,unsigned long,void const * __ptr64,unsigned long,unsigned long) __ptr64" ??0CThemeServer@@QEAA@PEAXKPEBXKK@Z
0x180004F8C: DllMain
0x180010898: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x1800106D0: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18000CF98: ShellTraceId_ThemeService_HandleServerRequest_Stop
0x180010090: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x1800108C0: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x18000C628: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180003F50: "private: virtual long __cdecl CAccessControlList::Callback(struct _ACCESS_ALLOWED_ACE * __ptr64 const * __ptr64,int) __ptr64" ?Callback@CAccessControlList@@EEAAJPEBQEAU_ACCESS_ALLOWED_ACE@@H@Z
0x180009680: "public: long __cdecl CLoaderProcess::ValidateAndCopySection(class CThemeServer * __ptr64,void * __ptr64,void * __ptr64,class CAPIDispatchSync * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?ValidateAndCopySection@CLoaderProcess@@QEAAJPEAVCThemeServer@@PEAX1PEAVCAPIDispatchSync@@PEAPEAX3@Z
0x18000C438: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000C370: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C0A0: "const CRootSection::`vftable'" ??_7CRootSection@@6B@
0x18000C568: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x18000B170: "public: virtual void * __ptr64 __cdecl CRootSection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRootSection@@UEAAPEAXI@Z
0x18000E948: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180008360: "struct HINSTANCE__ * __ptr64 __cdecl wil_details_GetNtDllModuleHandle(void)" ?wil_details_GetNtDllModuleHandle@@YAPEAUHINSTANCE__@@XZ
0x18000CAB0: "ext-ms-win-session-winsta-l1-1-3" ??_C@_1EC@GMNGGCEH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3@
0x18000C2C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000C2F8: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x18000C588: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180004DCC: "__cdecl _imp_load_SetSecurityInfo" __imp_load_SetSecurityInfo
0x180010060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004FD4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000C4D8: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x18000B310: "long __cdecl GetThemeNameId(class CUxThemeFile * __ptr64,unsigned short * __ptr64,unsigned int,unsigned short * __ptr64,unsigned int,unsigned short * __ptr64,unsigned int,int * __ptr64,unsigned short * __ptr64,int * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?GetThemeNameId@@YAJPEAVCUxThemeFile@@PEAGI1I1IPEAH12PEAK2@Z
0x18000D328: "thmfile" ??_C@_07LHOPDGDI@thmfile?$AA@
0x18000CD20: ShellTraceId_ThemeService_GetClientSessionData_Start
0x180003570: "public: long __cdecl CPortMessage::OpenClientToken(void * __ptr64 & __ptr64)const __ptr64" ?OpenClientToken@CPortMessage@@QEBAJAEAPEAX@Z
0x18000CDE0: Microsoft_Windows_UxThemeKeywords
0x18000ACD0: "protected: virtual long __cdecl CService::SignalStartStop(int) __ptr64" ?SignalStartStop@CService@@MEAAJH@Z
0x18000D078: "private: static unsigned short const * const CThemeManagerService::s_szName" ?s_szName@CThemeManagerService@@0QBGB
0x18000C5B0: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18000CD10: ShellTraceId_ThemeService_GetClientSessionData_Stop
0x18000EA9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000C3D8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000C4C0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000CCD0: ShellTraceId_ThemeService_QueueApiRequest_Start
0x180003750: "public: long __cdecl CThemeManagerSessionData::Allocate(void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long) __ptr64" ?Allocate@CThemeManagerSessionData@@QEAAJPEAXK0KK@Z
0x18000D40C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180004B50: "__cdecl ValidateImageBase" _ValidateImageBase
0x180008E10: "public: virtual void * __ptr64 __cdecl CThemeManagerAPIServer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeManagerAPIServer@@UEAAPEAXI@Z
0x180007DC4: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180010688: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x18000B960: "public: long __cdecl CUxThemeFile::ValidateThemeData(int) __ptr64" ?ValidateThemeData@CUxThemeFile@@QEAAJH@Z
0x18000C5A0: "__cdecl _imp_AddAccessAllowedAceEx" __imp_AddAccessAllowedAceEx
0x180008150: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180008E70: "public: virtual long __cdecl CThemeManagerDispatcher::CreateAndExecuteRequest(class CPortMessage const & __ptr64) __ptr64" ?CreateAndExecuteRequest@CThemeManagerDispatcher@@UEAAJAEBVCPortMessage@@@Z
0x18000A960: "public: virtual void * __ptr64 __cdecl CPortMessage::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPortMessage@@UEAAPEAXI@Z
0x180010770: "struct _RTL_CRITICAL_SECTION g_csThemeService" ?g_csThemeService@@3U_RTL_CRITICAL_SECTION@@A
0x18000C020: "const CPortMessage::`vftable'" ??_7CPortMessage@@6B@
0x18000CBB8: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x18000E8A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000C6A8: "__cdecl _imp_NtReplyWaitReceivePort" __imp_NtReplyWaitReceivePort
0x180009590: "public: long __cdecl CThemeManagerSessionData::GetLoaderProcess(class CLoaderProcess * __ptr64 * __ptr64) __ptr64" ?GetLoaderProcess@CThemeManagerSessionData@@QEAAJPEAPEAVCLoaderProcess@@@Z
0x18000C310: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000E718: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLN
0x18000CE60: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x18000E6A8: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180013050: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLA
0x18000E810: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLB
0x1800106DC: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x18000C3F0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180010908: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUokxUlyquivUznwGEUkxsOlyq@lpc" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUokxUlyquivUznwGEUkxsOlyq@lpc
0x18000C470: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180004550: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B770: "public: void __cdecl CUxThemeFile::CloseFile(void) __ptr64" ?CloseFile@CUxThemeFile@@QEAAXXZ
0x18000CA10: "ext-ms-win-session-winsta-l1-1-1" ??_C@_1EC@MGNPKKMM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x18000C630: "__cdecl _imp__initterm" __imp__initterm
0x18000E920: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000C4E0: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x180006D0C: "unsigned long __cdecl wil::details::GetLastErrorFail(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64)" ?GetLastErrorFail@details@wil@@YAKPEAXIPEBD110@Z
0x1800018B0: "public: long __cdecl CDynamicArray<class CCountedObject * __ptr64>::Remove(unsigned int) __ptr64" ?Remove@?$CDynamicArray@PEAVCCountedObject@@@@QEAAJI@Z
0x18000B804: "private: static void __cdecl CUxThemeFile::DeleteStockBitmap(struct HBITMAP__ * __ptr64)" ?DeleteStockBitmap@CUxThemeFile@@CAXPEAUHBITMAP__@@@Z
0x180010910: "struct TMERRINFO g_tmErrInfo" ?g_tmErrInfo@@3UTMERRINFO@@A
0x18000C2E0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000AE70: "public: __cdecl CAPIConnection::CAPIConnection(class CServerAPI * __ptr64) __ptr64" ??0CAPIConnection@@QEAA@PEAVCServerAPI@@@Z
0x180002DF4: "public: long __cdecl CThemeManagerSessionData::Cleanup(void) __ptr64" ?Cleanup@CThemeManagerSessionData@@QEAAJXZ
0x18000EA88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800108A0: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x180010628: "__cdecl _hmod__api_ms_win_security_provider_l1_1_0_dll" __hmod__api_ms_win_security_provider_l1_1_0_dll
0x18000CF58: ShellTraceId_ThemeService_WorkerThreadEntry_Start
0x18000B3FC: "int __cdecl ThemeMatch(class CUxThemeFile * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short,int,unsigned long,int)" ?ThemeMatch@@YAHPEAVCUxThemeFile@@PEBG11GHKH@Z
0x180008ABC: "private: long __cdecl CThemeManagerAPIRequest::Execute_SessionDestroy(void) __ptr64" ?Execute_SessionDestroy@CThemeManagerAPIRequest@@AEAAJXZ
0x18000A4DC: "public: virtual __cdecl CAPIRequest::~CAPIRequest(void) __ptr64" ??1CAPIRequest@@UEAA@XZ
0x18000E970: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180003500: "public: bool __cdecl CTokenInformation::IsUserTheSystem(void) __ptr64" ?IsUserTheSystem@CTokenInformation@@QEAA_NXZ
0x18000CFA8: ShellTraceId_ThemeService_HandleServerRequest_Start
0x180002410: "public: long __cdecl CVisualStyleDataManager::AcquireOrAdd(unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int,int,unsigned long,unsigned short,void * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?AcquireOrAdd@CVisualStyleDataManager@@QEAAJPEBGH0H0HHHKGPEAXPEAPEAX@Z
0x180010660: "__cdecl _onexitend" __onexitend
0x18000B170: "public: virtual void * __ptr64 __cdecl CRootSection::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRootSection@@UEAAPEAXI@Z
0x180004C95: "__cdecl unlock" _unlock
0x1800030F8: "public: long __cdecl CThemeManagerSessionData::UserLogon(void * __ptr64) __ptr64" ?UserLogon@CThemeManagerSessionData@@QEAAJPEAX@Z
0x18000C730: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000AE40: "unsigned long __cdecl _GetDefaultControlRet(unsigned long)" ?_GetDefaultControlRet@@YAKK@Z
0x1800097AC: "public: long __cdecl CThemeServer::CopyTheme(void * __ptr64,void * __ptr64 * __ptr64,void * __ptr64,void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64,void * __ptr64) __ptr64" ?CopyTheme@CThemeServer@@QEAAJPEAXPEAPEAX01PEBG22KK00@Z
0x18000C3E0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180004D4D: "__cdecl _tailMerge_api_ms_win_security_provider_l1_1_0_dll" __tailMerge_api_ms_win_security_provider_l1_1_0_dll
0x18000C538: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x18000A530: "public: virtual void * __ptr64 __cdecl CAPIRequest::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAPIRequest@@UEAAPEAXI@Z
0x18000D370: "DeleteObject" ??_C@_0N@EMMNKEAC@DeleteObject?$AA@
0x18000B200: "protected: long __cdecl CSection::OpenSection(unsigned short const * __ptr64,bool) __ptr64" ?OpenSection@CSection@@IEAAJPEBG_N@Z
0x18000CF78: ShellTraceId_ThemeService_HandleServerConnectionRequest_Stop
0x18000C5C8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000D380: "Global\ClearStockGlobal%d-%d" ??_C@_1DK@BDFNDEC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAC?$AAl?$AAe?$AAa?$AAr?$AAS?$AAt?$AAo?$AAc?$AAk?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$CF?$AAd?$AA?9?$AA?$CF?$AAd?$AA?$AA@
0x18000B120: "public: virtual __cdecl CSection::~CSection(void) __ptr64" ??1CSection@@UEAA@XZ
0x18000C688: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180013048: "__cdecl _imp_WinStationOpenServerW" __imp_WinStationOpenServerW
0x18000C288: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x18000C6D0: "__cdecl _imp_NtOpenThread" __imp_NtOpenThread
0x18000C518: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000C9C0: "ext-ms-win-session-winsta-l1-1-0" ??_C@_1EC@HOGDMNKJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x18000C778: "__cdecl _xi_a" __xi_a
0x18000C3F8: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x18000C510: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000C2A0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000C2B8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800108AC: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x18000C618: "__cdecl _imp__unlock" __imp__unlock
0x18000C548: "__cdecl _imp_QueueUserWorkItem" __imp_QueueUserWorkItem
0x18000C5D0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000C720: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x1800031DC: "public: long __cdecl CThemeManagerSessionData::UserLogoff(void) __ptr64" ?UserLogoff@CThemeManagerSessionData@@QEAAJXZ
0x180002B98: "long __cdecl SafeStringCmpIW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,int * __ptr64)" ?SafeStringCmpIW@@YAJPEBG0IPEAH@Z
0x180008C80: McGenEventWrite
0x180008308: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x18000C944: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000E8F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000E984: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x18000C3A8: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180010678: "__cdecl pRawDllMain" _pRawDllMain
0x18000D338: "deleted" ??_C@_07JCMGEKCK@deleted?$AA@
0x18000B170: "public: virtual void * __ptr64 __cdecl CDataSection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDataSection@@UEAAPEAXI@Z
0x18000C6F0: "__cdecl _imp_NtRequestWaitReplyPort" __imp_NtRequestWaitReplyPort
0x18000C558: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x18000C560: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x18000C0A0: "const CDataSection::`vftable'" ??_7CDataSection@@6B@
0x18000C610: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180001980: "public: virtual void * __ptr64 __cdecl CThemeManagerDispatcher::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeManagerDispatcher@@UEAAPEAXI@Z
0x180007068: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x18000B0C0: "private: static void __cdecl ExecutionWatchDogTimer::OnTimeoutReached(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?OnTimeoutReached@ExecutionWatchDogTimer@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x180003664: "public: void * __ptr64 __cdecl CThemeServer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeServer@@QEAAPEAXI@Z
0x18000E8D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000C480: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800047F0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000E688: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WINSTA_dll" __DELAY_IMPORT_DESCRIPTOR_WINSTA_dll
0x18000C048: "const CThemeManagerDispatcher::`vftable'" ??_7CThemeManagerDispatcher@@6B@
0x18000C770: "__cdecl _xc_z" __xc_z
0x18000E998: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180007920: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x18000C3E8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000A744: "public: static void __cdecl CAPIDispatchSync::DispatchLeave(class CAPIDispatchSync * __ptr64)" ?DispatchLeave@CAPIDispatchSync@@SAXPEAV1@@Z
0x18000C360: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000C3B0: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x18000CF68: ShellTraceId_ThemeService_RejectApiRequest
0x180010081: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18000A6F8: "public: long __cdecl CAPIDispatcher::CloseConnection(void) __ptr64" ?CloseConnection@CAPIDispatcher@@QEAAJXZ
0x18000C028: "const CAPIRequest::`vftable'{for `CPortMessage'}" ??_7CAPIRequest@@6BCPortMessage@@@
0x18000EA38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x18000C508: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180008E10: "protected: virtual void * __ptr64 __cdecl CCountedObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCountedObject@@MEAAPEAXI@Z
0x18000C318: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x18000AAE0: "protected: virtual void * __ptr64 __cdecl CService::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCService@@MEAAPEAXI@Z
0x180007AA0: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x18000C270: "const CAPIConnection::`vftable'" ??_7CAPIConnection@@6B@
0x180008478: "public: static long __cdecl CThemeManagerAPIRequest::ArrayInitialize(void)" ?ArrayInitialize@CThemeManagerAPIRequest@@SAJXZ
0x180009FA8: "private: long __cdecl CVisualStyleDataManager::Add(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,int,unsigned long,unsigned short,void * __ptr64) __ptr64" ?Add@CVisualStyleDataManager@@AEAAJPEBG00HHKGPEAX@Z
0x18000C338: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180010860: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x18000C2A8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18000C320: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800050C0: "__cdecl _chkstk" __chkstk
0x18000E648: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_provider_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_provider_l1_1_0_dll
0x18000A568: "public: __cdecl CAPIDispatchSync::CAPIDispatchSync(void) __ptr64" ??0CAPIDispatchSync@@QEAA@XZ
0x180009090: "public: static unsigned long __cdecl CThemeManagerService::SignalSessionEvents(void * __ptr64)" ?SignalSessionEvents@CThemeManagerService@@SAKPEAX@Z
0x18000AB20: "private: static unsigned long __cdecl CService::CB_HandlerEx(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?CB_HandlerEx@CService@@CAKKKPEAX0@Z
0x18000C5E0: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180004E40: "__cdecl _tailMerge_ext_ms_win_session_winsta_l1_1_0_dll" __tailMerge_ext_ms_win_session_winsta_l1_1_0_dll
0x1800106B0: "private: static class CCriticalSection * __ptr64 __ptr64 CThemeManagerAPIRequest::s_pLock" ?s_pLock@CThemeManagerAPIRequest@@0PEAVCCriticalSection@@EA
0x180006AA4: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x18000A530: "public: virtual void * __ptr64 __cdecl CAPIRequest::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAPIRequest@@UEAAPEAXI@Z
0x180005110: "[thunk]:public: virtual void * __ptr64 __cdecl CThemeManagerAPIRequest::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECThemeManagerAPIRequest@@WBA@EAAPEAXI@Z
0x18000C388: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18000C3C8: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x180006880: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x18000C450: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180006E8C: "public: struct wil::details_abi::ProcessLocalData * __ptr64 __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::GetShared(void) __ptr64" ?GetShared@?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAUProcessLocalData@23@XZ
0x180010870: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000C540: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180002638: "private: long __cdecl CThemeManagerAPIRequest::Execute_ReleaseTheme(void) __ptr64" ?Execute_ReleaseTheme@CThemeManagerAPIRequest@@AEAAJXZ
0x18000E9D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000EAB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x18000C408: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000A1EC: "private: long __cdecl CVisualStyleDataManager::AddEntry(struct VisualStyleDataEntry const * __ptr64) __ptr64" ?AddEntry@CVisualStyleDataManager@@AEAAJPEBUVisualStyleDataEntry@@@Z
0x18000C790: "__cdecl _guard_fids_table" __guard_fids_table
0x18000C658: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18000C458: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x1800079EC: "unsigned __int64 __cdecl wil::details::ResultStringSize(char const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBD@Z
0x18000C678: msvcrt_NULL_THUNK_DATA
0x18000C150: "__cdecl load_config_used" _load_config_used
0x18000C550: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x18000C258: "const CService::`vftable'" ??_7CService@@6B@
0x18000C4C8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18000E628: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x18000CCE0: ShellTraceId_ThemeService_QueuingThreadpoolWorker
0x1800069F0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x18000C2C0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000C2B0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180009F78: McGenEventUnregister
0x1800013D0: "protected: virtual void __cdecl CAPIDispatcher::Entry(void) __ptr64" ?Entry@CAPIDispatcher@@MEAAXXZ
0x180007A3C: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x180003F90: "__cdecl ProcessAttach" _ProcessAttach
0x18000652C: "public: void __cdecl wil::details_abi::ThreadLocalData::Clear(void) __ptr64" ?Clear@ThreadLocalData@details_abi@wil@@QEAAXXZ
0x180002C08: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x180007A14: "unsigned __int64 __cdecl wil::details::ResultStringSize(unsigned short const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBG@Z
0x1800108B0: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x18000C070: "const CAPIDispatcher::`vftable'" ??_7CAPIDispatcher@@6B@
0x18000B170: "public: virtual void * __ptr64 __cdecl CDataSection::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDataSection@@UEAAPEAXI@Z
0x18000CCF0: ShellTraceId_ThemeService_SignalRequestPending_Stop
0x180001980: "public: virtual void * __ptr64 __cdecl CThemeManagerDispatcher::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThemeManagerDispatcher@@UEAAPEAXI@Z
0x18000C648: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000D030: "\Sessions\%d\BaseNamedObjects\%s" ??_C@_1EC@IANCPDFG@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$CF?$AAd?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AA?$CF?$AAs@
0x18000C6F8: "__cdecl _imp_RtlCreateUserThread" __imp_RtlCreateUserThread
0x18000C700: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x18000C358: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000C6C0: "__cdecl _imp_NtClose" __imp_NtClose
0x180006A60: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x18000CD00: ShellTraceId_ThemeService_SignalRequestPending_Start
0x18000D000: "\BaseNamedObjects\%s" ??_C@_1CK@NJDNONEM@?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180002150: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000393C: "public: unsigned long __cdecl CAPIDispatcher::GetClientSessionID(void)const __ptr64" ?GetClientSessionID@CAPIDispatcher@@QEBAKXZ
0x18000CEA0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GO@FPAENPH@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800036FC: "private: static int __cdecl CThemeManagerAPIRequest::FindIndexSessionData(unsigned long)" ?FindIndexSessionData@CThemeManagerAPIRequest@@CAHK@Z
0x1800081B0: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x180003C40: "public: __cdecl CAccessControlList::operator struct _ACL * __ptr64(void) __ptr64" ??BCAccessControlList@@QEAAPEAU_ACL@@XZ
0x18000C440: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000C400: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800023AC: "void __cdecl _FreeThemeStrings(struct LOADTHEME_STRINGS * __ptr64)" ?_FreeThemeStrings@@YAXPEAULOADTHEME_STRINGS@@@Z
0x1800091B4: "public: void __cdecl CLoaderProcess::Clear(int) __ptr64" ?Clear@CLoaderProcess@@QEAAXH@Z
0x18000E668: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll
0x18000D330: "end" ??_C@_03JBJLGPFL@end?$AA@
0x18000A400: "public: static long __cdecl CServerUtilities::Stop(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?Stop@CServerUtilities@@SAJPEBG0@Z
0x180004F80: ApiSetQueryApiSetPresence
0x180002510: "private: int __cdecl CVisualStyleDataManager::Find(unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int,int,unsigned long,unsigned short) __ptr64" ?Find@CVisualStyleDataManager@@AEAAHPEBGH0H0HHHKG@Z
0x18000AB80: "protected: virtual unsigned long __cdecl CService::HandlerEx(unsigned long) __ptr64" ?HandlerEx@CService@@MEAAKK@Z
0x180008D94: McTemplateU0idq
0x180004DE0: IsWinStationOpenServerWPresent
0x180004000: "public: static long __cdecl CThemeManagerAPIRequest::StaticInitialize(void)" ?StaticInitialize@CThemeManagerAPIRequest@@SAJXZ
0x180008E10: "protected: virtual void * __ptr64 __cdecl CCountedObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCountedObject@@MEAAPEAXI@Z
0x18000C3A0: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x1800099AC: "private: long __cdecl CThemeServer::InjectClientSessionThread(void * __ptr64,int,void * __ptr64,void * __ptr64,int * __ptr64) __ptr64" ?InjectClientSessionThread@CThemeServer@@AEAAJPEAXH00PEAH@Z
0x18000AAE0: "protected: virtual void * __ptr64 __cdecl CService::`vector deleting destructor'(unsigned int) __ptr64" ??_ECService@@MEAAPEAXI@Z
0x18000C708: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x180006D78: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x18000CF88: ShellTraceId_ThemeService_HandleServerConnectionRequest_Start
0x18000C448: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180004F70: "__cdecl purecall" _purecall
0x180007894: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x18000D410: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180004CC2: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x18001113C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUtvmvirxUlyquivUznwGEUhgzmwziwsvzwviOlyq@generic" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUtvmvirxUlyquivUznwGEUhgzmwziwsvzwviOlyq@generic
0x1800062C8: "public: __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x180008390: "__cdecl ProcessDetach" _ProcessDetach
0x180004C80: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000C380: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18000C008: "const CThemeManagerAPIRequest::`vftable'{for `CQueueElement'}" ??_7CThemeManagerAPIRequest@@6BCQueueElement@@@
0x18000CCB0: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x180001920: "protected: virtual bool __cdecl CThemeManagerAPIServer::ConnectionAccepted(class CPortMessage const & __ptr64) __ptr64" ?ConnectionAccepted@CThemeManagerAPIServer@@MEAA_NAEBVCPortMessage@@@Z
0x1800010D0: "public: virtual long __cdecl CThemeManagerDispatcher::CreateAndQueueRequest(class CPortMessage const & __ptr64) __ptr64" ?CreateAndQueueRequest@CThemeManagerDispatcher@@UEAAJAEBVCPortMessage@@@Z
0x180008EE8: McTemplateU0dd
0x1800036D0: "public: void __cdecl CCountedObject::Release(void) __ptr64" ?Release@CCountedObject@@QEAAXXZ
0x180007630: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x18000CB78: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180006DAC: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x180013028: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18000E934: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180008278: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x18000C348: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180003FAC: "public: static int __cdecl CThemeService::Main(unsigned long)" ?Main@CThemeService@@SAHK@Z
0x18000A9A0: "public: virtual void * __ptr64 __cdecl CQueueElement::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQueueElement@@UEAAPEAXI@Z
0x18000CC60: "[%hs(%hs)]
" ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x18000C650: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180008B54: "public: static long __cdecl CThemeManagerAPIRequest::InitializeServerChangeNumber(void)" ?InitializeServerChangeNumber@CThemeManagerAPIRequest@@SAJXZ
0x18000C6D8: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x18000CD50: "\Windows\ThemeSection" ??_C@_1CM@NMADOCGG@?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAT?$AAh?$AAe?$AAm?$AAe?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000C728: ntdll_NULL_THUNK_DATA
0x18000C5F0: "__cdecl _imp_memcpy" __imp_memcpy
0x180002C7C: "public: long __cdecl CSecuredObject::Allow(void * __ptr64,unsigned long,unsigned char)const __ptr64" ?Allow@CSecuredObject@@QEBAJPEAXKE@Z
0x18000928C: "public: long __cdecl CLoaderProcess::Create(void * __ptr64,unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?Create@CLoaderProcess@@QEAAJPEAXPEAGPEBG22KPEAPEAX@Z
0x18000CB40: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x1800082A8: ?acquire@?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEBA?AV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@2@PEAKKH@Z
0x18000CC10: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x18000CBA0: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18000B88C: "public: long __cdecl CUxThemeFile::OpenFromHandle(void * __ptr64,void * __ptr64,unsigned long,int) __ptr64" ?OpenFromHandle@CUxThemeFile@@QEAAJPEAX0KH@Z
0x1800106B8: "public: static class CCriticalSection * __ptr64 __ptr64 CLoaderProcess::s_pLock" ?s_pLock@CLoaderProcess@@2PEAVCCriticalSection@@EA
0x180011138: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUgsvnvowiUlyquivUznwGEUhgwzucOlyq@ThemeLdr" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUgsvnvhUgsvnvowiUlyquivUznwGEUhgwzucOlyq@ThemeLdr
0x180013018: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x18000E8BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180013020: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLA
0x18000C530: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x18000C278: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180010068: "__cdecl _security_cookie" __security_cookie
0x18000C420: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180001A50: "protected: virtual class CAPIDispatcher * __ptr64 __cdecl CThemeManagerAPIServer::CreateDispatcher(class CPortMessage const & __ptr64) __ptr64" ?CreateDispatcher@CThemeManagerAPIServer@@MEAAPEAVCAPIDispatcher@@AEBVCPortMessage@@@Z
0x1800050C0: "__cdecl alloca_probe" _alloca_probe
0x180008804: "private: long __cdecl CThemeManagerAPIRequest::Execute_ProcessLoadTheme(class CAPIDispatchSync * __ptr64) __ptr64" ?Execute_ProcessLoadTheme@CThemeManagerAPIRequest@@AEAAJPEAVCAPIDispatchSync@@@Z
0x1800071AC: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x18000CC78: "[%hs]
" ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x18000C528: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x18000C4A8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18000C2F0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003B44: "public: __cdecl CAccessControlList::~CAccessControlList(void) __ptr64" ??1CAccessControlList@@QEAA@XZ
0x18000C330: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000C690: "__cdecl _imp_NtOpenSection" __imp_NtOpenSection
0x18000C5A8: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x18000E8E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180009CF0: "void __cdecl ThemeServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64)" ?ThemeServiceMain@@YAXKPEAPEAG@Z
0x180009E70: McGenControlCallbackV2
0x18000C018: "const CQueueElement::`vftable'" ??_7CQueueElement@@6B@
0x1800032E0: "private: long __cdecl CThemeManagerAPIRequest::ImpersonateClientIfRequired(void) __ptr64" ?ImpersonateClientIfRequired@CThemeManagerAPIRequest@@AEAAJXZ
0x18000A9D0: "protected: virtual __cdecl CService::~CService(void) __ptr64" ??1CService@@MEAA@XZ
0x180010668: "__cdecl _onexitbegin" __onexitbegin
0x1800107B0: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x18000C5F8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000C2D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000E6F8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x18000C410: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002D9C: "public: long __cdecl CDynamicPointerArrayBase<class CCountedObject,class CTOwnershipPolicy_CountedObject<class CCountedObject> >::Remove(unsigned int) __ptr64" ?Remove@?$CDynamicPointerArrayBase@VCCountedObject@@V?$CTOwnershipPolicy_CountedObject@VCCountedObject@@@@@@QEAAJI@Z
0x180010900: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x180006FE0: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x180004B84: "__cdecl _security_init_cookie" __security_init_cookie
0x1800107A0: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x180004E34: "__cdecl _imp_load_WinStationOpenServerW" __imp_load_WinStationOpenServerW
0x18000EA10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x18000C108: "const CThemeManagerAPIServer::`vftable'" ??_7CThemeManagerAPIServer@@6B@
0x18000E894: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A784: "public: long __cdecl CAPIDispatcher::RejectRequest(class CPortMessage const & __ptr64,long)const __ptr64" ?RejectRequest@CAPIDispatcher@@QEBAJAEBVCPortMessage@@J@Z
0x18000C600: "__cdecl _imp_memmove" __imp_memmove
0x1800074D0: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x180013010: "__cdecl _imp_SetSecurityInfo" __imp_SetSecurityInfo
0x180007A5C: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x180004100: McGenEventRegister
0x180006374: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x180002D0C: "private: void __cdecl CThemeManagerSessionData::SessionTermination(void) __ptr64" ?SessionTermination@CThemeManagerSessionData@@AEAAXXZ
0x180001550: "protected: long __cdecl CAPIDispatcher::Execute(class CAPIRequest * __ptr64)const __ptr64" ?Execute@CAPIDispatcher@@IEBAJPEAVCAPIRequest@@@Z
0x18000C638: "__cdecl _imp_malloc" __imp_malloc
0x18000A9A0: "public: virtual void * __ptr64 __cdecl CQueueElement::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQueueElement@@UEAAPEAXI@Z
0x18000C668: "__cdecl _imp__purecall" __imp__purecall
0x18000A608: "public: virtual __cdecl CAPIDispatcher::~CAPIDispatcher(void) __ptr64" ??1CAPIDispatcher@@UEAA@XZ
0x18000C580: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800084F8: "public: static long __cdecl CThemeManagerAPIRequest::ArrayTerminate(void)" ?ArrayTerminate@CThemeManagerAPIRequest@@SAJXZ
0x180009750: "public: void * __ptr64 __cdecl CThemeSection::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThemeSection@@QEAAPEAXI@Z
0x180002864: "long __cdecl _AllocAndMapThemeStrings(void * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned short const * __ptr64,unsigned int,unsigned short const * __ptr64,unsigned int,struct LOADTHEME_STRINGS * __ptr64 * __ptr64)" ?_AllocAndMapThemeStrings@@YAJPEAXPEBGI1I1IPEAPEAULOADTHEME_STRINGS@@@Z
0x180010648: "__cdecl _hmod__WINSTA_dll" __hmod__WINSTA_dll
0x180004EBF: "__cdecl _imp_load_WinStationEnumerateW" __imp_load_WinStationEnumerateW
0x1800083AC: "public: __cdecl CThemeManagerAPIRequest::CThemeManagerAPIRequest(class CAPIDispatcher * __ptr64,class CPortMessage const & __ptr64) __ptr64" ??0CThemeManagerAPIRequest@@QEAA@PEAVCAPIDispatcher@@AEBVCPortMessage@@@Z
0x18000CC38: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180010798: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x180010010: Microsoft_Windows_UxTheme_Provider_Context
0x18000AF94: "public: virtual __cdecl CAPIConnection::~CAPIConnection(void) __ptr64" ??1CAPIConnection@@UEAA@XZ
0x18000C6C8: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x18000C6E8: "__cdecl _imp_NtConnectPort" __imp_NtConnectPort
0x180004850: "__cdecl _report_gsfailure" __report_gsfailure
0x18000CF38: ShellTraceId_ThemeService_CallTimedOut
0x18000C280: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x1800065C4: "void __cdecl wil::details::CloseHandle(void * __ptr64)" ?CloseHandle@details@wil@@YAXPEAX@Z
0x180002E34: "private: long __cdecl CThemeManagerAPIRequest::Execute_UserLogon(void) __ptr64" ?Execute_UserLogon@CThemeManagerAPIRequest@@AEAAJXZ
0x18000C498: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800049C8: "__cdecl onexit" _onexit
0x180003D30: "public: long __cdecl CAccessControlList::Remove(void * __ptr64) __ptr64" ?Remove@CAccessControlList@@QEAAJPEAX@Z
0x18000D3C0: "ClearStockLocal%d-%d" ??_C@_1CK@LIJGFOGM@?$AAC?$AAl?$AAe?$AAa?$AAr?$AAS?$AAt?$AAo?$AAc?$AAk?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?$CF?$AAd?$AA?9?$AA?$CF?$AAd?$AA?$AA@
0x180010868: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x180010658: "__cdecl _native_startup_state" __native_startup_state
0x18000CDF0: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000A87C: McTemplateU0tq
0x18000C6A0: "__cdecl _imp_NtAcceptConnectPort" __imp_NtAcceptConnectPort
0x18001069C: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x180008D1C: McTemplateU0dq
0x18000CA60: "ext-ms-win-session-winsta-l1-1-2" ??_C@_1EC@NEGKAFCC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2@
0x1800021D0: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x180009150: "protected: virtual long __cdecl CThemeManagerService::SignalStartStop(int) __ptr64" ?SignalStartStop@CThemeManagerService@@MEAAJH@Z
0x18000CBD8: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000A33C: "public: static long __cdecl CServerUtilities::Connect(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?Connect@CServerUtilities@@SAJPEBG0PEAPEAX@Z
0x18000C960: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18000E9AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180004EE3: "__cdecl _imp_load_WinStationCloseServer" __imp_load_WinStationCloseServer
0x180007458: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x180004244: "public: __cdecl wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>::~ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>(void) __ptr64" ??1?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@wil@@QEAA@XZ
0x18000C390: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x1800107A8: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x18000C598: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x18000E9E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003358: "private: long __cdecl CThemeManagerAPIRequest::ClientHasTcbPrivilege(void) __ptr64" ?ClientHasTcbPrivilege@CThemeManagerAPIRequest@@AEAAJXZ
0x1800108A8: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x18000C640: "__cdecl _imp_free" __imp_free
0x180008CDC: McTemplateU0
0x180004AF0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000C500: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180007EC4: "private: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValueInternal(unsigned short const * __ptr64,bool,unsigned __int64 * __ptr64,bool * __ptr64)" ?TryGetValueInternal@SemaphoreValue@details_abi@wil@@CAJPEBG_NPEA_KPEA_N@Z
0x18000C660: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000EA24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x18000CB5C: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x1800015E0: "private: long __cdecl CAPIConnection::HandleServerRequest(class CPortMessage const & __ptr64,class CAPIDispatcher * __ptr64) __ptr64" ?HandleServerRequest@CAPIConnection@@AEAAJAEBVCPortMessage@@PEAVCAPIDispatcher@@@Z
0x18000C3C0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000E90C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180003A30: "public: long __cdecl CAccessControlList::Add(void * __ptr64,unsigned long,unsigned char) __ptr64" ?Add@CAccessControlList@@QEAAJPEAXKE@Z
0x18000C4F0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000E9C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180010690: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x18000A820: McTemplateU0q
0x18000E7F8: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLB
0x180004ED1: "__cdecl _imp_load_WinStationFreeMemory" __imp_load_WinStationFreeMemory
0x18000A820: McTemplateU0t
0x18000507E: memset
0x18000EAC4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180013000: "__cdecl _imp_WinStationCloseServer" __imp_WinStationCloseServer
0x18000CB00: "__cdecl _sz_ext_ms_win_session_winsta_l1_1_0_dll" __sz_ext_ms_win_session_winsta_l1_1_0_dll
0x180010080: g_header_init_InitializeResultHeader
[JEB Decompiler by PNF Software]