Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rdrleakdiag.exe Base=0x140000000 SHA-256=541A5E886E9D9767E66E8925D9C93C67AE5A01637A1826A6E34FB23CC6587387
PDB: rdrleakdiag.pdb GUID={0D33F9E1-3677-81C8-5D4AC91E040A0607} Age=1

503 located named symbols:
0x1400085A8: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x140008540: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140007024: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140008208: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140006CF8: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x140008A90: "%u.%u.%u.%u.%u.%u" ??_C@_1CE@KJLCBBDG@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x140008904: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x1400088A8: "RDR" ??_C@_17HIBDFLHO@?$AAR?$AAD?$AAR?$AA?$AA@
0x1400065A0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140009794: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400073FE: "__cdecl o___p___wargv" _o___p___wargv
0x140006CE0: "__cdecl get_startup_commit_mode" _get_startup_commit_mode
0x1400095A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x140008428: "__cdecl _imp_IsWow64Process2" __imp_IsWow64Process2
0x14000B070: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x14000B018: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140008670: "__cdecl _imp_NtOpenProcess" __imp_NtOpenProcess
0x14000742E: "__cdecl o__configthreadlocale" _o__configthreadlocale
0x140008640: "__cdecl _imp_NtReleaseMutant" __imp_NtReleaseMutant
0x140008690: "__cdecl _imp_NtCreateThreadEx" __imp_NtCreateThreadEx
0x140008320: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x140006D60: "__cdecl _scrt_get_dyn_tls_dtor_callback" __scrt_get_dyn_tls_dtor_callback
0x140008310: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400073CE: "__cdecl c_exit" _c_exit
0x140004204: RdrpSendLeakReport
0x140008680: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x140001290: WppControlCallback
0x140007730: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400081D8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140008300: "__cdecl _imp_GetProcessTimes" __imp_GetProcessTimes
0x1400074E4: "__cdecl vsnwprintf" _vsnwprintf
0x1400074BE: exit
0x140008900: "p" ??_C@_13LFIEIAHP@?$AAp?$AA?$AA@
0x1400081F8: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x140008478: "__cdecl _imp__seh_filter_exe" __imp__seh_filter_exe
0x1400086F8: "__cdecl _xp_a" __xp_a
0x1400082C0: "__cdecl _imp_ReadProcessMemory" __imp_ReadProcessMemory
0x140006F90: "__cdecl RTC_Initialize" _RTC_Initialize
0x140008448: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x140008C90: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1400084C0: "__cdecl _imp_terminate" __imp_terminate
0x140008908: "o" ??_C@_13LNPOMHLG@?$AAo?$AA?$AA@
0x14000967C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x140009070: "__cdecl _rtc_taa" __rtc_taa
0x1400095B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x140006CE0: "__cdecl get_startup_thread_locale_mode" _get_startup_thread_locale_mode
0x140009654: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x140008508: "__cdecl _imp__initterm_e" __imp__initterm_e
0x140008268: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140008528: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x1400073A0: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x140006D0C: "__cdecl _vcrt_initialize" __vcrt_initialize
0x140008460: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x14000748E: "__cdecl o__seh_filter_exe" _o__seh_filter_exe
0x140008230: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x1400086A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140009060: "__cdecl _rtc_iaa" __rtc_iaa
0x1400081E8: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x140004C64: RdrpGetProcessFriendlyName
0x1400084D8: "__cdecl _imp__o___stdio_common_vswprintf" __imp__o___stdio_common_vswprintf
0x1400086B0: "__cdecl _xc_a" __xc_a
0x1400082E0: "__cdecl _imp_SetProcessValidCallTargets" __imp_SetProcessValidCallTargets
0x140008C38: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x14000890C: "tp" ??_C@_15LFLBLBBH@?$AAt?$AAp?$AA?$AA@
0x140008660: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x14000B030: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x140001008: StringCchCopyW
0x140009780: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0
0x140008250: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14000743A: "__cdecl configure_wide_argv" _configure_wide_argv
0x1400084F0: "__cdecl _imp__o___p___argc" __imp__o___p___argc
0x1400089D0: "memdmp" ??_C@_1O@KHPPPML@?$AAm?$AAe?$AAm?$AAd?$AAm?$AAp?$AA?$AA@
0x14000B028: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x1400081D0: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x14000875C: "__cdecl _guard_iat_table" __guard_iat_table
0x140007711: memcpy
0x140008288: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140008200: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x140008530: "__cdecl _imp_memset" __imp_memset
0x140006D0C: "__cdecl _acrt_initialize" __acrt_initialize
0x1400084E8: "__cdecl _imp___p___wargv" __imp___p___wargv
0x140008218: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x140008610: "__cdecl _imp_NtCreateMutant" __imp_NtCreateMutant
0x1400073B6: "__cdecl initterm" _initterm
0x140008568: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x1400085E8: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x14000746A: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x1400096A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000C080: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400086F0: "__cdecl _xi_z" __xi_z
0x140007452: "__cdecl exit" _exit
0x1400081A8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1400089A8: "unnamed" ??_C@_1BA@KJOIJLID@?$AAu?$AAn?$AAn?$AAa?$AAm?$AAe?$AAd?$AA?$AA@
0x1400074D6: "__cdecl _C_specific_handler" __C_specific_handler
0x1400084B0: "__cdecl _imp__o_exit" __imp__o_exit
0x140008370: api-ms-win-core-psapi-l1-1-0_NULL_THUNK_DATA
0x140008238: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140008488: "__cdecl _imp__set_fmode" __imp__set_fmode
0x140008940: "watson" ??_C@_1O@ONDHDBPE@?$AAw?$AAa?$AAt?$AAs?$AAo?$AAn?$AA?$AA@
0x14000C0C8: WPP_REGISTRATION_GUIDS
0x140008168: "__cdecl _imp_SetConsoleCtrlHandler" __imp_SetConsoleCtrlHandler
0x140008468: "__cdecl _imp__o__initialize_wide_environment" __imp__o__initialize_wide_environment
0x140006B74: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x1400084A8: "__cdecl _imp__wtol" __imp__wtol
0x1400085C8: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x140008228: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140008760: "ext-ms-win-wer-reporting-l1-1-0" ??_C@_1EA@OHNKPAMH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x140008C58: "%s_%s" ??_C@_1M@LLCLNBHO@?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAs?$AA?$AA@
0x140006ED4: "__cdecl _scrt_initialize_mta" __scrt_initialize_mta
0x140008600: "__cdecl _imp_NtQueryInformationThread" __imp_NtQueryInformationThread
0x140008388: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1400076B0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140008638: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x140006AA8: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x140007422: "__cdecl cexit" _cexit
0x140006978: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x140008440: "__cdecl _imp__configure_wide_argv" __imp__configure_wide_argv
0x1400087E0: "ext-ms-win-wer-reporting-l1-1-2" ??_C@_1EA@ENNDDIEM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2?$AA?$AA@
0x140006D0C: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x140008538: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x1400074CA: terminate
0x140008628: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x140009640: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0
0x14000C0A0: WPP_MAIN_CB
0x1400075A0: "__cdecl _imp_load_WerReportSetParameter" __imp_load_WerReportSetParameter
0x14000980C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140008378: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14000742E: "__cdecl configthreadlocale" _configthreadlocale
0x140006F38: "__cdecl _scrt_set_unhandled_exception_filter" __scrt_set_unhandled_exception_filter
0x1400088B0: "%s\results_%u.hlk" ??_C@_1CE@MIIGLKJB@?$AA?$CF?$AAs?$AA?2?$AAr?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AA_?$AA?$CF?$AAu?$AA?4?$AAh?$AAl?$AAk?$AA?$AA@
0x140008C8C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140008668: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x14000743A: "__cdecl o__configure_wide_argv" _o__configure_wide_argv
0x14000740A: "__cdecl o___p__commode" _o___p__commode
0x140006D20: "__cdecl initialize_denormal_control" _initialize_denormal_control
0x1400084B0: "__cdecl _imp_exit" __imp_exit
0x14000762B: "__cdecl _imp_load_WerReportAddFile" __imp_load_WerReportAddFile
0x140008820: "ext-ms-win-wer-reporting-l1-1-3" ??_C@_1EA@PFGPFPCJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3?$AA?$AA@
0x140004F68: RdrpEnableDataSharing
0x140006C00: atexit
0x1400084B8: "__cdecl _imp__o_qsort" __imp__o_qsort
0x1400073DA: "__cdecl register_thread_local_exe_atexit_callback" _register_thread_local_exe_atexit_callback
0x140008B88: "BuildLabEx" ??_C@_1BG@CLMGIAOK@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAL?$AAa?$AAb?$AAE?$AAx?$AA?$AA@
0x140008398: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x140008560: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1400085B0: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA
0x140005714: RdrpIsChild
0x140006D0C: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x1400081C8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140008550: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x140008708: "__cdecl _xt_a" __xt_a
0x14000B0D0: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x140008318: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140008950: "nocleanup" ??_C@_1BE@BKKGGOHA@?$AAn?$AAo?$AAc?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?$AA@
0x140006FE0: "__cdecl RTC_Terminate" _RTC_Terminate
0x14000117C: WPP_SF_ID
0x1400084A0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400084C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140008AE0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1FK@EDIIEKBJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400057A4: RdrpIsFTH
0x1400083B0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400082B0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x14000971C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1400058A4: RdrpCopyRegistry
0x140009550: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLB
0x1400081B8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140008580: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x14000768C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140008A78: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x140006CEC: "__cdecl get_startup_file_mode" _get_startup_file_mode
0x14000764F: "__cdecl _imp_load_WerReportSubmit" __imp_load_WerReportSubmit
0x14000B024: "__cdecl _isa_enabled" __isa_enabled
0x140008888: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x140009848: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x140008308: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400083D0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140009820: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x14000763D: "__cdecl _imp_load_WerReportCloseHandle" __imp_load_WerReportCloseHandle
0x1400083C8: api-ms-win-core-shlwapi-legacy-l1-1-0_NULL_THUNK_DATA
0x14000746A: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x140008C8C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140006CE0: "__cdecl _scrt_stub_for_initialize_mta" __scrt_stub_for_initialize_mta
0x14000B078: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x1400089F8: "RtlHeapTrkInitialize" ??_C@_0BF@NFAKIGGB@RtlHeapTrkInitialize?$AA@
0x1400084F0: "__cdecl _imp___p___argc" __imp___p___argc
0x140006D0C: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x140008608: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x140008348: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x1400086E0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x1400096F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x14000E028: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLA
0x14000754C: IsWerReportAddFilePresent
0x140008884: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140008210: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x14000110C: WPP_SF_
0x14000E010: "__cdecl _imp_WerReportCloseHandle" __imp_WerReportCloseHandle
0x140008248: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400073F2: "__cdecl o___p___argc" _o___p___argc
0x1400082A8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140008BD0: WPP_23b5e2dcb34a3b127842bd6f315e36a0_Traceguids
0x140009490: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140008338: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140008520: "__cdecl _imp__initterm" __imp__initterm
0x14000976C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x140008AC0: "RDR%u_%I64x" ??_C@_1BI@KIEOGOCD@?$AAR?$AAD?$AAR?$AA?$CF?$AAu?$AA_?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x1400081C0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000754C: IsWerReportCreatePresent
0x140009834: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140008290: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x14000E000: "__cdecl _imp_WerReportCreate" __imp_WerReportCreate
0x140008678: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1400083F8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x1400095F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1400095DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400087A0: "ext-ms-win-wer-reporting-l1-1-1" ??_C@_1EA@FPGGJHKC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAr?$AA?9?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?$AA@
0x140008448: "__cdecl _imp__o__crt_atexit" __imp__o__crt_atexit
0x140001090: StringCchPrintfW
0x140006D2C: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x14000B668: "__cdecl _hmod__ext_ms_win_wer_reporting_l1_1_0_dll" __hmod__ext_ms_win_wer_reporting_l1_1_0_dll
0x140008588: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x140008450: "__cdecl _imp__exit" __imp__exit
0x1400069C8: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x1400086A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140008A10: "RtlDetectHeapLeaks" ??_C@_0BD@NABIEPNE@RtlDetectHeapLeaks?$AA@
0x140006D70: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x140008C00: RDR_LEAK_DIAG_STOP_EVENT
0x140008328: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140006D0C: "__cdecl should_initialize_environment" _should_initialize_environment
0x140008998: "enable" ??_C@_1O@DIHMNIPC@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1400085F8: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x140008630: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140007482: "__cdecl register_onexit_function" _register_onexit_function
0x140006CE0: "__cdecl _scrt_exe_initialize_mta" __scrt_exe_initialize_mta
0x140008178: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x140008400: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400086C8: "__cdecl _xi_a" __xi_a
0x140008350: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x140008180: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x140008198: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x140008A28: "dbghelp.dll" ??_C@_1BI@HFOADCMA@?$AAd?$AAb?$AAg?$AAh?$AAe?$AAl?$AAp?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140001318: wmain
0x140006938: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x1400073F2: "__cdecl _p___argc" __p___argc
0x140008590: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140008C20: "svchost.exe" ??_C@_1BI@GOFOEOMC@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140007446: "__cdecl o__crt_atexit" _o__crt_atexit
0x140006CE0: "__cdecl get_startup_new_mode" _get_startup_new_mode
0x140006EE0: "__cdecl _scrt_is_managed_app" __scrt_is_managed_app
0x140006F50: "__cdecl _scrt_unhandled_exception_filter" __scrt_unhandled_exception_filter
0x1400075AC: "__cdecl _tailMerge_ext_ms_win_wer_reporting_l1_1_0_dll" __tailMerge_ext_ms_win_wer_reporting_l1_1_0_dll
0x140007422: "__cdecl o__cexit" _o__cexit
0x14000745E: "__cdecl o__get_initial_wide_environment" _o__get_initial_wide_environment
0x1400085B8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1400082F0: "__cdecl _imp_SetProcessShutdownParameters" __imp_SetProcessShutdownParameters
0x140008518: "__cdecl _imp__register_thread_local_exe_atexit_callback" __imp__register_thread_local_exe_atexit_callback
0x14000B000: WPP_GLOBAL_Control
0x1400074CA: "__cdecl o_terminate" _o_terminate
0x140009618: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140009668: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1400082D8: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1400084E0: "__cdecl _imp__o___p__commode" __imp__o___p__commode
0x140001138: WPP_SF_D
0x140001138: WPP_SF_d
0x1400088D8: "%s\minidump_%u.dmp" ??_C@_1CG@CDIMJEBA@?$AA?$CF?$AAs?$AA?2?$AAm?$AAi?$AAn?$AAi?$AAd?$AAu?$AAm?$AAp?$AA_?$AA?$CF?$AAu?$AA?4?$AAd?$AAm?$AAp?$AA?$AA@
0x140008420: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x1400097D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x1400085F0: "__cdecl _imp_NtResetEvent" __imp_NtResetEvent
0x140006D20: "__cdecl initialize_invalid_parameter_handler" _initialize_invalid_parameter_handler
0x1400071E0: "__cdecl _isa_available_init" __isa_available_init
0x140006CD4: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x140008408: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x140009604: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140009068: "__cdecl _rtc_izz" __rtc_izz
0x140009470: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wer_reporting_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wer_reporting_l1_1_0_dll
0x140006910: "__cdecl _security_check_cookie" __security_check_cookie
0x140008BE0: RDR_LEAK_DIAG_START_EVENT
0x1400086C0: "__cdecl _xc_z" __xc_z
0x140008860: "__cdecl _sz_ext_ms_win_wer_reporting_l1_1_0_dll" __sz_ext_ms_win_wer_reporting_l1_1_0_dll
0x1400097F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140008330: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14000E020: "__cdecl _imp_WerReportSetParameter" __imp_WerReportSetParameter
0x140008298: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1400084A8: "__cdecl _imp__o__wtol" __imp__o__wtol
0x140008AB4: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1400083F0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140008440: "__cdecl _imp__o__configure_wide_argv" __imp__o__configure_wide_argv
0x140008260: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400085A0: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x140008188: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x140008480: "__cdecl _imp__set_app_type" __imp__set_app_type
0x140008240: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140008650: "__cdecl _imp_RtlCreateProcessReflection" __imp_RtlCreateProcessReflection
0x1400094D8: ext-ms-win-wer-reporting-l1-1-0_NULL_THUNK_DATA_DLN
0x1400097BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x1400082B8: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x14000754C: IsWerReportSetParameterPresent
0x140008BA0: RDR_LEAK_DIAG_STOP_EVENT_FAILED
0x140008418: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x1400081E0: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x1400083B8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140008700: "__cdecl _xp_z" __xp_z
0x140008480: "__cdecl _imp__o__set_app_type" __imp__o__set_app_type
0x140008488: "__cdecl _imp__o__set_fmode" __imp__o__set_fmode
0x140009758: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1400085D0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1400085E0: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x14000985C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140008360: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140009078: "__cdecl _rtc_tzz" __rtc_tzz
0x140008718: "__cdecl _guard_fids_table" __guard_fids_table
0x140008050: "__cdecl load_config_used" _load_config_used
0x140008A40: "MiniDumpWriteDump" ??_C@_0BC@MNIKNFKD@MiniDumpWriteDump?$AA@
0x1400074B2: "__cdecl set_new_mode" _set_new_mode
0x1400081A0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140008190: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140007452: "__cdecl o__exit" _o__exit
0x1400086E8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x140008C68: "SeDebugPrivilege" ??_C@_1CC@DMDJMJLM@?$AAS?$AAe?$AAD?$AAe?$AAb?$AAu?$AAg?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140008438: "__cdecl _imp__configthreadlocale" __imp__configthreadlocale
0x1400084B8: "__cdecl _imp_qsort" __imp_qsort
0x140006D50: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x140008620: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x140008658: "__cdecl _imp_NtClose" __imp_NtClose
0x1400082A0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140008898: "UNKNOWN" ??_C@_1BA@HABJOAEE@?$AAU?$AAN?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?$AA@
0x1400083A8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140008358: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400083E0: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x14000958C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x14000740A: "__cdecl _p__commode" __p__commode
0x140008578: "__cdecl _imp_EventWrite" __imp_EventWrite
0x140008490: "__cdecl _imp__o__set_new_mode" __imp__o__set_new_mode
0x140007680: ApiSetQueryApiSetPresence
0x140008468: "__cdecl _imp__initialize_wide_environment" __imp__initialize_wide_environment
0x1400082D0: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x140008270: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1400083A0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140008C90: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1400084D8: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x140007482: "__cdecl o__register_onexit_function" _o__register_onexit_function
0x14000B060: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x1400082E8: api-ms-win-core-memory-l1-1-3_NULL_THUNK_DATA
0x140006D20: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400084F8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140006D0C: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x140008458: "__cdecl _imp__get_initial_wide_environment" __imp__get_initial_wide_environment
0x14000E018: "__cdecl _imp_WerReportSubmit" __imp_WerReportSubmit
0x140009744: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x140005AC0: RdrpGetProcessImageName
0x1400096E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140008280: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400097A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x140008430: api-ms-win-core-wow64-l1-1-1_NULL_THUNK_DATA
0x1400073C2: "__cdecl initterm_e" _initterm_e
0x140008570: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x140006B48: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x14000749A: "__cdecl o__set_app_type" _o__set_app_type
0x140008968: "cleanup" ??_C@_1BA@NOIAGJOK@?$AAc?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?$AA@
0x14000E008: "__cdecl _imp_WerReportAddFile" __imp_WerReportAddFile
0x140008698: ntdll_NULL_THUNK_DATA
0x140008498: "__cdecl _imp_memcpy" __imp_memcpy
0x140008C10: ResultsFileGuid
0x140007661: "__cdecl _imp_load_WerReportCreate" __imp_load_WerReportCreate
0x140008688: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x140005C20: RdrpAppendSvchostServiceGroup
0x14000748E: "__cdecl seh_filter_exe" _seh_filter_exe
0x140008438: "__cdecl _imp__o__configthreadlocale" __imp__o__configthreadlocale
0x140008490: "__cdecl _imp__set_new_mode" __imp__set_new_mode
0x140008558: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x140009690: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1400074BE: "__cdecl o_exit" _o_exit
0x140008BF0: WPP_ThisDir_CTLGUID_RdrLeakDiagTraceGuid
0x14000754C: IsWerReportSubmitPresent
0x140008548: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x140008158: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x14000B010: "__cdecl _security_cookie" __security_cookie
0x1400097E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1
0x140008390: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140006D80: "__cdecl _scrt_fastfail" __scrt_fastfail
0x1400074B2: "__cdecl o__set_new_mode" _o__set_new_mode
0x140008A58: "RADAR_LEAK_64" ??_C@_1BM@GGKICCAA@?$AAR?$AAA?$AAD?$AAA?$AAR?$AA_?$AAL?$AAE?$AAA?$AAK?$AA_?$AA6?$AA4?$AA?$AA@
0x140008988: "snap" ??_C@_19GMPNGHPI@?$AAs?$AAn?$AAa?$AAp?$AA?$AA@
0x140009578: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x140008220: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140008258: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400096CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140008278: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x140006370: Parse_Cmdline
0x140008500: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x140008978: "noexit" ??_C@_1O@LABJIDKA@?$AAn?$AAo?$AAe?$AAx?$AAi?$AAt?$AA?$AA@
0x140008410: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x14000754C: IsWerReportCloseHandlePresent
0x1400083C0: "__cdecl _imp_PathFileExistsW" __imp_PathFileExistsW
0x14000B020: "__cdecl _isa_available" __isa_available
0x14000B960: LeakResultSessionBuffer
0x1400089B8: "fullmemdmp" ??_C@_1BG@MCNELIFK@?$AAf?$AAu?$AAl?$AAl?$AAm?$AAe?$AAm?$AAd?$AAm?$AAp?$AA?$AA@
0x1400081B0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400095C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-1
0x140006614: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x140008380: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x140008460: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x14000B654: "__cdecl _favor" __favor
0x140008170: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x1400084E0: "__cdecl _imp___p__commode" __imp___p__commode
0x140006C20: "__cdecl _security_init_cookie" __security_init_cookie
0x1400073FE: "__cdecl _p___wargv" __p___wargv
0x140008928: "nowatson" ??_C@_1BC@BCNKLHBK@?$AAn?$AAo?$AAw?$AAa?$AAt?$AAs?$AAo?$AAn?$AA?$AA@
0x1400084D0: "__cdecl _imp__cexit" __imp__cexit
0x140008470: "__cdecl _imp__o__register_onexit_function" __imp__o__register_onexit_function
0x1400084A0: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x14000613C: RdrpGetProcessVersion
0x140004E28: RdrpDuplicateFromTarget
0x140007476: "__cdecl initialize_wide_environment" _initialize_wide_environment
0x1400074A6: "__cdecl set_fmode" _set_fmode
0x140008710: "__cdecl _xt_z" __xt_z
0x1400068E0: wmainCRTStartup
0x1400081F0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140008470: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x140008598: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x140008918: "wait" ??_C@_19NPAHMABE@?$AAw?$AAa?$AAi?$AAt?$AA?$AA@
0x140007090: "__cdecl _report_gsfailure" __report_gsfailure
0x140008160: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x140007446: "__cdecl crt_atexit" _crt_atexit
0x140006604: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x140006BA8: "__cdecl onexit" _onexit
0x14000962C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x14000C078: "__cdecl _dyn_tls_dtor_callback" __dyn_tls_dtor_callback
0x1400085D8: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x1400089E0: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140008B40: "Volatile Environment" ??_C@_1CK@FFBPGAMN@?$AAV?$AAo?$AAl?$AAa?$AAt?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1400084C0: "__cdecl _imp__o_terminate" __imp__o_terminate
0x140008458: "__cdecl _imp__o__get_initial_wide_environment" __imp__o__get_initial_wide_environment
0x14000B0C0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x140007476: "__cdecl o__initialize_wide_environment" _o__initialize_wide_environment
0x140008BB0: RDR_LEAK_DIAG
0x140008450: "__cdecl _imp__o__exit" __imp__o__exit
0x140008B70: "BuildLab" ??_C@_1BC@HJOIIEGB@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAL?$AAa?$AAb?$AA?$AA@
0x1400085C0: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1400084E8: "__cdecl _imp__o___p___wargv" __imp__o___p___wargv
0x140007416: "__cdecl _stdio_common_vswprintf" __stdio_common_vswprintf
0x1400096B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x140009708: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-3" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-3
0x1400082C8: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x140008BC0: RDR_LEAK_DIAG_START_EVENT_FAILED
0x14000745E: "__cdecl get_initial_wide_environment" _get_initial_wide_environment
0x140008648: "__cdecl _imp_NtDuplicateObject" __imp_NtDuplicateObject
0x140008510: "__cdecl _imp__c_exit" __imp__c_exit
0x140008340: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x140009730: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400084D0: "__cdecl _imp__o__cexit" __imp__o__cexit
0x140007416: "__cdecl o___stdio_common_vswprintf" _o___stdio_common_vswprintf
0x1400083E8: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x140008618: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x1400011D0: WPP_SF_SS
0x1400082F8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1400074A6: "__cdecl o__set_fmode" _o__set_fmode
0x140008368: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x140006CE0: "__cdecl _scrt_initialize_winrt" __scrt_initialize_winrt
0x14000749A: "__cdecl set_app_type" _set_app_type
0x140008478: "__cdecl _imp__o__seh_filter_exe" __imp__o__seh_filter_exe
0x1400083D8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1400073E6: memset
0x140009870: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000B068: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]