Generated by JEB on 2019/02/01

PE: C:\Windows\System32\EventAggregation.dll Base=0x180000000 SHA-256=5886DAE4218765338860AB5A87402BB6B7D24295F1C4B804B350EDAF74CD6F21
PDB: EventAggregation.pdb GUID={29536A58-D64B-22FB-57EDD6FAE939285D} Age=1

492 located named symbols:
0x18000DFA0: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x18000DEB8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18000E3F0: "`string'" ??_C@_09BEELENHA@EventInfo?$AA@
0x18000DE98: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180009838: EapQueryAggregatedEventTrigger
0x18000C834: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000DEB0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18000C294: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180006600: EapAggregatedEventConditionParamsNextChild
0x1800065B0: EaDeleteAggregatedEvent
0x18000BDB0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000E068: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18001190C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000DE10: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x1800136A0: BrokerInternalClientInitOnce
0x18000DF58: "__cdecl _imp_TpWaitForTimer" __imp_TpWaitForTimer
0x1800118F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180004AF0: EaiFreeAggregationConditionVisitNode
0x1800082B0: BriSignalBrokeredEvent
0x180002DF4: EaiSignalAggregateCallback
0x1800130B0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180013058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007624: BripCreateRpcBindingHandle
0x1800013A4: "__cdecl TlgDefineProvider_annotation__TlgghEventAggregationProviderProv" _TlgDefineProvider_annotation__TlgghEventAggregationProviderProv
0x18000DDB8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000CBDE: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x18000CC88: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180001230: WPP_SF_L
0x18000DEF0: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x18000DFC0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000AC50: WppControlCallback
0x18000CD30: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000A730: EaQueryAggregatedEventParameters
0x18000DF50: "__cdecl _imp_RtlGetNextEntryHashTable" __imp_RtlGetNextEntryHashTable
0x18000E008: "__cdecl _imp_RtlInsertEntryHashTable" __imp_RtlInsertEntryHashTable
0x18000DF78: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x18000F5E8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000DF90: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x18000E0B8: "__cdecl _xp_a" __xp_a
0x18000DE18: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x18000CC8C: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x18000C7AC: "__cdecl RTC_Initialize" _RTC_Initialize
0x18000F580: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000CC88: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180010B40: "__cdecl _rtc_taa" __rtc_taa
0x1800136A8: BrokeredEventTable
0x180011920: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006600: EapStoreAggregatedEventConditionNextChild
0x18000DE48: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180001A80: EaiSetAggregationConditionVisitNode
0x18000DD88: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000E530: "`string'" ??_C@_0BJ@EHMACGLH@EaiDisableAggregateEvent?$AA@
0x18000DE58: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x1800079B8: BripFindBindingContextByBrokerId
0x18000CBAC: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x18000CC88: "__cdecl _vcrt_initialize" __vcrt_initialize
0x18000DE20: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x180008D90: EapQueryBuffer
0x180001000: "__cdecl TlgWrite" _TlgWrite
0x18000E080: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000E040: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x18000E480: "`string'" ??_C@_0BG@LEGMCDDA@Invalid?5callback?5type?$AA@
0x18000A400: EapQueryAggregatedEventOwnerAppName
0x18000AB90: EaDeleteAggregatedEventParametersPostVisitNode
0x180010B30: "__cdecl _rtc_iaa" __rtc_iaa
0x18000CC88: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x18000A4D0: EaStoreAggregatedEventParameters
0x18000E4C8: "`string'" ??_C@_0CE@MBKHCMBL@Failed?5to?5allocate?5WNF?5state?5buf@
0x1800113D8: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x180015008: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x180011408: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x18000E088: "__cdecl _xc_a" __xc_a
0x18000E038: "__cdecl _imp_TpAllocTimer" __imp_TpAllocTimer
0x18000E7C0: "`string'" ??_C@_0CB@FFHFNOLK@Failed?5to?5enable?5Aggregate?5Event@
0x180013710: BrokerBindingTableLock
0x1800034AC: EaiSetAggregateConditionsEnabledState
0x180008400: BriGetBrokerAvailabilityChangeStamp
0x18000E498: "`string'" ??_C@_0BI@OBMACIOF@EaiSignalAggregateEvent?$AA@
0x18000DEE0: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18000DF00: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x18000E220: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x18000DE08: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180013070: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180006450: EapDeleteAggregatedEventConditionVisitNode
0x1800013F4: CleanupLibrary
0x18000E310: "`string'" ??_C@_0FL@DHFCBKCF@Invalid?5Param?4?5Pointer?5to?5condit@
0x18000EDF0: EA_STORE_AGGRERATED_EVENT_FIELD_START_BOUNDARY
0x180009E30: EapQueryAggregatedEventCondition
0x180013068: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18000E6F8: "`string'" ??_C@_0BE@PLHBLMKG@EventHandle?5?$DN?$DN?5NULL?$AA@
0x18000EEB8: EA_STORE_AGGRERATED_EVENT_FIELD_DELAY_IN_SECONDS
0x18000E218: "__cdecl _guard_iat_table" __guard_iat_table
0x18000CD0B: memcpy
0x18000E6A0: "`string'" ??_C@_0DG@OJPPFKID@Failed?5to?5add?5new?5Aggregate?5Even@
0x18000DEC8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000AFC0: EaLibClearAndReleaseTimer
0x18000DE68: "__cdecl _imp_memset" __imp_memset
0x18000CC88: "__cdecl _acrt_initialize" __acrt_initialize
0x18000CBC0: "__cdecl initterm" _initterm
0x18000DD28: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x18000DEA0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000CBF0: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x18000ABB0: EaDeleteAggregatedEventParameters
0x18000E018: "__cdecl _imp_RtlRemoveEntryHashTable" __imp_RtlRemoveEntryHashTable
0x1800119AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800136C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000EE58: EA_STORE_AGGRERATED_EVENT_FIELD_TRIGGER
0x18000E7E8: "`string'" ??_C@_0BJ@MCCLIOGL@EaDisableAggregatedEvent?$AA@
0x18000E0B0: "__cdecl _xi_z" __xi_z
0x18000E058: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x18000DD68: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000CBFC: "__cdecl _C_specific_handler" __C_specific_handler
0x180009B40: EapQueryAggregatedEventConditionCloseChild
0x1800083E0: MIDL_user_free
0x18000CC88: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180006B80: EaCreateAggregatedEvent
0x180005F70: EaDisableAggregatedEvent
0x18000E7A8: "`string'" ??_C@_0BI@ONGMJHEO@EaEnableAggregatedEvent?$AA@
0x18000E520: "`string'" ??_C@_0O@PAPBEDEN@Failed?5Status?$AA@
0x18000EA40: RpcErrMap
0x18000EE68: EA_STORE_AGGRERATED_EVENT_FIELD_TIME_LIMIT
0x180013708: WPP_REGISTRATION_GUIDS
0x18000DFE8: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x18000C624: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x18000CCB0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180013678: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x180004E3C: EaiDuplicateAggregateRuntime
0x18000CBD2: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x18000C564: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x18000CBD8: "__cdecl cexit" _cexit
0x18000C438: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x18000EE98: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_APP_NAME
0x180009964: EapStoreAggregatedEventTrigger
0x180005D10: EaGetAggregation
0x18000CC88: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x18000DE70: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18000CBE4: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000C2A4: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x18000E048: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x1800136E0: WPP_MAIN_CB
0x18000DF40: "__cdecl _imp_RtlAllocateWnfSerializationGroup" __imp_RtlAllocateWnfSerializationGroup
0x180007AD8: BripFreeBindingContext
0x180001270: WPP_SF_ddDDDDDD
0x180007990: BriFreeRpcBuffer
0x18000F578: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000DFD8: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x180001C60: EaiDumpConditionVisitNode
0x180008C38: EapExpandValueQueryBuffer
0x18000CC88: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180006C50: BriAllocateRpcBuffer
0x1800089F0: EaDecodeBrokeredEvent
0x18000C3F4: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x18000E740: "`string'" ??_C@_0CP@EGFLGDGK@Failed?5to?5acquire?5Aggregate?5Even@
0x18000EE10: EA_STORE_PREDICATE_AND_STRING
0x18000E808: "`string'" ??_C@_0BI@NHGKOOIK@Failed?5to?5disable?5Event?$AA@
0x18000CBEA: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x18000E400: "`string'" ??_C@_0BH@KAPMJJHH@EaiProcessNotification?$AA@
0x180004B34: EaiFreeEaAggregateEvent
0x18000DE78: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000CC88: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x18000DFD0: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x18000DD78: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000DE88: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000DE38: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180013730: AggregateEventListLock
0x180008530: BriRegisterToBrokerAvailability
0x18000E5F8: "`string'" ??_C@_0BF@FIKIOMKC@EaiCreateAggregation?$AA@
0x18000E0C8: "__cdecl _xt_a" __xt_a
0x1800130F4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x18000DDA0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000DE38: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18000E820: "`string'" ??_C@_0CC@MMIMAKAA@Failed?5to?5disable?5Aggregate?5Even@
0x18000AD00: DllMain
0x180008E4C: EapQueryValue
0x18000CC88: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180001920: EapAggregatedEventConditionNextChild
0x180009A60: EapQueryAggregatedEventConditionNextChild
0x18000EA28: g_SmsRouterBrokerId
0x18000C7E8: "__cdecl RTC_Terminate" _RTC_Terminate
0x1800013B0: EaiRunOnceCallback
0x18000AF3C: EaLibCreateAndSetLimitTimer
0x18000DE30: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000EE90: EA_STORE_PREDICATE_OR_STRING
0x18000DF60: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180011934: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000AEB8: EaLibConvertLockSharedToExclusive
0x180008B50: EapCreateAggregatedEventNode
0x18000DED0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180009700: EapFreeAggregatedEventConditionPostVisitNode
0x18000E020: "__cdecl _imp_RtlCreateHashTable" __imp_RtlCreateHashTable
0x18000CC90: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000E5A8: "`string'" ??_C@_0CH@FFJHKDNA@Failed?5to?5allocate?5new?5Aggregate@
0x18000E588: "`string'" ??_C@_0CA@DCNAOGJA@Invalid?5Param?4?5pEventID?5is?5null?$AA@
0x18000CBEA: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x18000DF88: "__cdecl _imp_RtlGetLastWin32Error" __imp_RtlGetLastWin32Error
0x18000DD00: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x180008AB4: EapOpenAggregatedEventNode
0x180008670: BriUnregisterFromBrokerAvailability
0x180013064: "__cdecl _isa_enabled" __isa_enabled
0x180006FE0: BriCreateBrokeredEventEx
0x180011A24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000DDB0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180006F90: BriCreateBrokeredEvent
0x180001B64: EventAggregationCaptureStateCallback
0x18000E050: "__cdecl _imp_TpSetTimer" __imp_TpSetTimer
0x18000CBF0: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x18000F578: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800130B8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x18000AEF0: AggregateEventWnfCallback
0x180008F54: EapSetValue
0x180008EC8: EapQueryStringValue
0x18000A070: EapStoreAggregatedEventConditionPreVisitNode
0x18000A284: EapStoreAggregatedEventCondition
0x18000CC88: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x18000DF68: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000DDC8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x18000E0A0: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x1800080B8: BripMapRpcStatus
0x18000E418: "`string'" ??_C@_0BC@LLOAHHHF@Event?5is?5Disabled?$AA@
0x180001120: WPP_SF_
0x18000E5D0: "`string'" ??_C@_0CF@LKLGDOPK@Failed?5to?5enable?5new?5Aggregate?5E@
0x1800113AC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000E868: WPP_ThisDir_CTLGUID_EventAggregation
0x180015000: "__cdecl _imp_LookupAccountNameLocalW" __imp_LookupAccountNameLocalW
0x18000C33C: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x18000DD10: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18000C170: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000DE50: "__cdecl _imp__initterm" __imp__initterm
0x1800119D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000E848: "`string'" ??_C@_0BK@PFOJHFAH@EaiHandleTimeLimitReached?$AA@
0x18000316C: EaiSignalAggregateEvent
0x180011A10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000E570: "`string'" ??_C@_0BH@OICECFID@EACreateAggregateEvent?$AA@
0x180006994: EapCreateAggregatedEvent
0x180013698: BrokerInternalClientInitialized
0x18000CBDE: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x18000E610: "`string'" ??_C@_0DD@HIDMBCGL@EventHandle?5?$DN?$DN?5NULL?$CJ?5or?5?$CIAggrega@
0x18000C2B0: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180006870: EapCreateAggregatedEventCondition
0x18000C484: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x18000E078: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003B9C: EaiDisableAggregateEvent
0x1800080F4: BripQueryValue
0x18000C658: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x18000DDA8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000CC02: "__cdecl _imp_load_LookupAccountNameLocalW" __imp_load_LookupAccountNameLocalW
0x180007820: BriDeleteBrokeredEvent
0x180001D80: EaiDumpAggregateEvent
0x180008CC0: EapEnumerateKey
0x18000E6D8: "`string'" ??_C@_0BL@CEEHFLGH@EaiExtractEventAggregation?$AA@
0x18000E000: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005000: EaCreateAggregation
0x18000DD38: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x18000DDF0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000E098: "__cdecl _xi_a" __xi_a
0x18000DDD0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x18000DD40: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000C37C: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x18000DD58: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000C2CC: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x18000DFC8: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x180006D74: BripCleanupBindingTable
0x180009620: EapFreeSimpleEventParameters
0x18000E010: "__cdecl _imp_RtlInitEnumerationHashTable" __imp_RtlInitEnumerationHashTable
0x18000E4F0: "`string'" ??_C@_0CA@EFBCDABD@Cannot?5access?5Level?5Event?5value?$AA@
0x18000CBD8: "__cdecl o__cexit" _o__cexit
0x180001184: WPP_SF_DD
0x18000E3A8: "`string'" ??_C@_0BG@GPKFOGNC@EaiDumpAggregateEvent?$AA@
0x18000DFA8: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x18000E468: "`string'" ??_C@_0BC@OHGJALBM@EaiSignalCallback?$AA@
0x18000B150: BrpDecodeBrokeredEvent_V1
0x180006368: EaiFreeTriggerPayload
0x18000CBF6: "__cdecl seh_filter_dll" _seh_filter_dll
0x180013040: WPP_GLOBAL_Control
0x18000DE10: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x18000DF70: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x180011984: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800119FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1800010A0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180001148: WPP_SF_D
0x180001148: WPP_SF_d
0x18000E220: "__cdecl pRawDllMain" _pRawDllMain
0x18000E230: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000E370: "`string'" ??_C@_0DH@IMNJMDEF@Invalid?5Param?4?5Both?5CallBack?5and@
0x18000E710: "`string'" ??_C@_0BF@COPNMOAB@Failed?5to?5find?5Event?$AA@
0x18000C9E8: "__cdecl _isa_available_init" __isa_available_init
0x1800063A0: EaiResetTriggerPayload
0x18000CBA4: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x18000E9D0: "`string'" ??_C@_1CI@IPGEKEKO@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000DF08: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x180010B38: "__cdecl _rtc_izz" __rtc_izz
0x18000C1C0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800064A4: EapDeleteAggregatedEventCondition
0x18000E448: "`string'" ??_C@_0BL@BEIGOOIB@EaiSignalAggregateCallback?$AA@
0x18000E090: "__cdecl _xc_z" __xc_z
0x180011970: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000DDC0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000EDB8: EA_STORE_AGGRERATED_EVENT_FIELD_IS_RANDOM
0x18000CC88: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180003DA0: EACreateAggregateEvent
0x180010774: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000DDE8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000EF00: EA_STORE_AGGRERATED_EVENT_FIELD_REPETITION_INTERVAL
0x18000EDD0: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_USER_SID
0x18000E9F8: "`string'" ??_C@_1CM@GHANNOJL@?$AAA?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AAS?$AAt?$AAa?$AAt?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000C354: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x18000B7A8: BrpEncodeBrokeredEvent_V1
0x18000CBF6: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180009750: EaFreeAggregatedEventParameters
0x18000DD48: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180008250: BriResolveBrokerIdByEventId
0x18000CBD2: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x18000203C: WnfEventCallback
0x180006500: EapDeleteAggregatedEvent
0x1800094CC: EapStoreSimpleEventParameters
0x18000EEE8: EA_STORE_AGGRERATED_EVENT_FIELD_END_BOUNDARY
0x18000E9A0: "`string'" ??_C@_1CM@FPKFBDPJ@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180001AB8: EaiEvaluateConditions
0x18000EE30: EA_STORE_AGGRERATED_EVENT_FIELD_NUMBER_OF_REPETITIONS
0x1800044C0: EADeleteAggregateEvent
0x18000E0C0: "__cdecl _xp_z" __xp_z
0x180007BAC: BripQueryBindingContextProperties
0x18000E278: "`string'" ??_C@_0CJ@FIEHEEPH@Invalid?5Param?4?5Allowed?5Flags?5are@
0x180004AE0: EaQueryAggregatedEvent
0x18000DF80: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x180009B60: EapQueryAggregatedEventConditionPostVisitNode
0x180001920: EaiAggregationConditionNextChild
0x18000DDE0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180010B48: "__cdecl _rtc_tzz" __rtc_tzz
0x18000E0D8: "__cdecl _guard_fids_table" __guard_fids_table
0x18000AAB0: EaDeleteAggregatedEventParametersNextChild
0x18000DC00: "__cdecl load_config_used" _load_config_used
0x18001195C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000E260: "`string'" ??_C@_0BG@ECKEKMPA@EaiValidateParameters?$AA@
0x18000DD60: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000EE18: EA_STORE_AGGRERATED_EVENT_FIELD_CONDITION
0x18000DD50: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000DF28: "__cdecl _imp_ZwClose" __imp_ZwClose
0x18000E0A8: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x18000DFB8: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x18000E958: "`string'" ??_C@_1CC@IHKHPPJP@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180005100: EaiCreateAggregation
0x18000DFF0: "__cdecl _imp_RtlDeleteHashTable" __imp_RtlDeleteHashTable
0x18000DE60: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x180003344: EaiFindAndAcquireAggregateEvent
0x18000C650: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180006C80: BriIsBrokerRegistered
0x18000DF38: "__cdecl _imp_TpReleaseTimer" __imp_TpReleaseTimer
0x1800083E0: EaFreeBuffer
0x18000E3C0: "`string'" ??_C@_0BB@NDOGNILF@WnfEventCallback?$AA@
0x18000DF48: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000DFE0: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x18000DDD8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800118E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x18000CC88: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x18000DE18: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x18000DD90: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180008000: BrpInitOnceRunOnceCallback
0x18000DF30: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000F580: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000E4B0: "`string'" ??_C@_0BI@PDLNEGIJ@EaiEnableAggregateEvent?$AA@
0x18000E728: "`string'" ??_C@_0BE@LDOBFKEI@EaDeleteAggregation?$AA@
0x1800059A0: EaDeleteAggregation
0x180013080: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180003598: EaiEnableAggregateEvent
0x180006C50: MIDL_user_allocate
0x18000C830: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000E030: "__cdecl _imp_RtlEnumerateEntryHashTable" __imp_RtlEnumerateEntryHashTable
0x18000CC88: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x18000CC8C: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x18000DEF8: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x180013720: BrokeredEventTableLock
0x1800046A0: EAQueryAggregateEventData
0x18000DED8: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800119C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180006630: EapCreateAggregatedEventConditionVisitNode
0x18000DD08: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x18000CBC6: "__cdecl initterm_e" _initterm_e
0x18000DEA8: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000E980: "`string'" ??_C@_1CA@MNMMPMHI@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AA?$AA@
0x18000C600: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180004530: EAEnumerateAggregateEvents
0x18000C424: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x18000E070: ntdll_NULL_THUNK_DATA
0x18000DE28: "__cdecl _imp_memcpy" __imp_memcpy
0x18000CC0E: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x1800011D4: WPP_SF_DDD
0x180001310: WPP_SF_ddd
0x18000E550: "`string'" ??_C@_0BJ@ELNKIKHO@Event?5set?5to?5be?5disabled?$AA@
0x18000CC88: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x18000E060: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x18000DE80: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000DE90: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180013050: "__cdecl _security_cookie" __security_cookie
0x18000C660: "__cdecl _scrt_fastfail" __scrt_fastfail
0x1800073C4: BripCreateBindingContext
0x18000E878: WPP_c3fa72ab62343567ce2c56b1499dbae5_Traceguids
0x1800075BC: BriDeleteEventImpl
0x1800118D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x18000DF18: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x180007B3C: BripGetEventContextData
0x18000DD80: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800119E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000DD98: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x18000DE40: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x18000E510: "`string'" ??_C@_0P@BFJEKIOA@OnEnable?5Event?$AA@
0x180006E50: BripCleanupEventTable
0x180003420: EaiSetConditionsEnabledStateVisitNode
0x1800033C8: EaiReleaseAggregateEvent
0x1800072C0: BripCreateEventContext
0x18000DDF8: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180013060: "__cdecl _isa_available" __isa_available
0x18000E2E0: "`string'" ??_C@_0CL@BMINNCGJ@Invalid?5Param?4?5No?5trigger?5and?5no@
0x18000DF98: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x18000DD70: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000BE18: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x18000572C: EaiExtractEventAggregation
0x18000DE20: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180013674: "__cdecl _favor" __favor
0x18000E2A8: "`string'" ??_C@_0DC@DNOIOCFD@Invalid?5Param?4?5Number?5of?5conditi@
0x18000C1E4: "__cdecl _security_init_cookie" __security_init_cookie
0x180001368: WPP_SF_q
0x18000DE00: "__cdecl _imp__cexit" __imp__cexit
0x180008FA8: EapQuerySimpleEventParameters
0x1800048A0: EaSignalAggregatedEvent
0x18000DEE8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180006600: EapFreeAggregatedEventConditionNextChild
0x18000E0D0: "__cdecl _xt_z" __xt_z
0x18000A250: EapStoreAggregatedEventConditionPostVisitNode
0x180001554: EaiValidateParameters
0x18000DEC0: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180006290: EaQueryAggregateEventConditionState
0x18000C308: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x180011948: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000DFB0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180013688: AggregateInitOnce
0x180002F54: EaiSignalCallback
0x18000DD30: RPCRT4_NULL_THUNK_DATA
0x18000C394: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x18000E940: "`string'" ??_C@_1BG@HCDEBCJD@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AA?$AA@
0x18000C8A0: "__cdecl _report_gsfailure" __report_gsfailure
0x18001138C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000BE10: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x1800070A8: BripCreateBrokeredEvent
0x18000B040: EaLibTimeLimitCallback
0x18000DF10: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x18000E3D8: "`string'" ??_C@_0BF@CKLJKECG@WNF?5event?5is?5deleted?$AA@
0x1800130A0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x18000E430: "`string'" ??_C@_0BG@GPHOGGMF@No?5matching?5condition?$AA@
0x18000E890: "`string'" ??_C@_1KO@LILNALMB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180005D20: EaEnableAggregatedEvent
0x180006D50: BriCleanup
0x18000DD20: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x18000E028: "__cdecl _imp_RtlEndEnumerationHashTable" __imp_RtlEndEnumerationHashTable
0x18000DD18: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x18000E650: "`string'" ??_C@_0FA@KOEGCJHB@?$CIAggregatedRuntime?9?$DOTrigger?5?$DN?$DN?5N@
0x18000DE08: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180008684: EapTreeTraverse
0x180002604: EaiProcessNotification
0x180009B40: EaDeleteAggregatedEventParametersCloseChild
0x180004C00: EaiDuplicateConditionsVisitNode
0x180011998: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000E770: "`string'" ??_C@_0DC@LFEIPDNN@Failed?5to?5disable?5Aggregate?5Even@
0x180008900: EaEncodeBrokeredEvent
0x18000DDF8: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x18000DE00: "__cdecl _imp__o__cexit" __imp__o__cexit
0x18000DFF8: "__cdecl _imp_RtlLookupEntryHashTable" __imp_RtlLookupEntryHashTable
0x180007A44: BripFindEventContextByEventId
0x18000DF20: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x18000CBE4: "__cdecl execute_onexit_table" _execute_onexit_table
0x180013690: BrokerBindingTable
0x18000CBCC: memset
0x180011A38: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001950: EaiEvaluateAggregationConditionVisitNode
0x180013088: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]