Generated by JEB on 2019/08/01

PE: C:\Windows\System32\oobe\diagER.dll Base=0x180000000 SHA-256=6492D0611E7A01332487775910945557507CC863D8B1B6E9A5C96B74B91025CD
PDB: diagER.pdb GUID={5163DCF5-280C-91C2-880EB998228E130D} Age=1

532 located named symbols:
0x180005E4C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180008A80: "DiagERAddBucketingParameters:Ent" ??_C@_0CD@OPAMAFIK@DiagERAddBucketingParameters?3Ent@
0x180008880: "IDiagER::AddFiles" ??_C@_1CE@GLAIMOMA@?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1800077B8: "__cdecl _imp_HeapCompact" __imp_HeapCompact
0x180007158: "const CWfpER::`vftable'" ??_7CWfpER@@6B@
0x180005C50: "__cdecl FindPESection" _FindPESection
0x180003470: "public: virtual unsigned int __cdecl CIlKernel32::GetTempFileNameW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64) __ptr64" ?GetTempFileNameW@CIlKernel32@@UEAAIPEBG0IPEAG@Z
0x180002200: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000B000: "struct IWerApiInterface * __ptr64 __ptr64 g_WerApi" ?g_WerApi@@3PEAUIWerApiInterface@@EA
0x180004FF0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180009DB8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180007E68: "Consent Value = HKCU\%s!%s has b" ??_C@_0CO@JGJGJLDH@Consent?5Value?5?$DN?5HKCU?2?$CFs?$CB?$CFs?5has?5b@
0x180007588: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180003320: "public: virtual int __cdecl CIlKernel32::WriteFile(void * __ptr64,void const * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?WriteFile@CIlKernel32@@UEAAHPEAXPEBXKPEAKPEAU_OVERLAPPED@@@Z
0x18000B070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180008240: "CDwWinER::Initialize" ??_C@_1CK@CFOGEAJP@?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?3?$AA?3?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x180007788: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180008820: "IDiagER::AddBucketingParameters:" ??_C@_0CG@JNKOKHBM@IDiagER?3?3AddBucketingParameters?3@
0x1800077C0: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180003BA0: "public: __cdecl IDiagER::IDiagER(unsigned short const * __ptr64,int) __ptr64" ??0IDiagER@@QEAA@PEBGH@Z
0x180008918: "IDiagER::~IDiagER:Entry" ??_C@_0BI@MLGBKPLO@IDiagER?3?3?$HOIDiagER?3Entry?$AA@
0x18000551C: "__cdecl CRT_INIT" _CRT_INIT
0x1800076D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002460: "public: virtual unsigned long __cdecl CDwWinER::Initialize(void) __ptr64" ?Initialize@CDwWinER@@UEAAKXZ
0x18000B654: DloadSectionOldProtection
0x1800059F6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180003030: "public: virtual void __cdecl CIlKernel32::GetSystemInfo(struct _SYSTEM_INFO * __ptr64) __ptr64" ?GetSystemInfo@CIlKernel32@@UEAAXPEAU_SYSTEM_INFO@@@Z
0x180003000: "public: virtual void __cdecl CIlKernel32::SetLastError(unsigned long) __ptr64" ?SetLastError@CIlKernel32@@UEAAXK@Z
0x1800013A0: "public: class CDwWinER & __ptr64 __cdecl CDwWinER::operator=(class CDwWinER const & __ptr64) __ptr64" ??4CDwWinER@@QEAAAEAV0@AEBV0@@Z
0x180006250: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003150: "public: virtual int __cdecl CIlKernel32::HeapWalk(void * __ptr64,struct _PROCESS_HEAP_ENTRY * __ptr64) __ptr64" ?HeapWalk@CIlKernel32@@UEAAHPEAXPEAU_PROCESS_HEAP_ENTRY@@@Z
0x180007860: SHELL32_NULL_THUNK_DATA
0x180007888: "__cdecl _imp_CurrentIP" __imp_CurrentIP
0x1800037C0: "public: virtual void * __ptr64 __cdecl CIlKernel32::CreateEventW(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?CreateEventW@CIlKernel32@@UEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBG@Z
0x1800076C8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180009538: "__cdecl TI2PEAG" _TI2PEAG
0x180008AA8: "DiagERAddBucketingParameters:ERR" ??_C@_0CN@MANOCBD@DiagERAddBucketingParameters?3ERR@
0x18000833C: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x1800032D0: "public: virtual unsigned long __cdecl CIlKernel32::GetLogicalDrives(void) __ptr64" ?GetLogicalDrives@CIlKernel32@@UEAAKXZ
0x180008190: "CDwWinER::CDwWinER" ??_C@_1CG@MKHFDNEL@?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?3?$AA?3?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?$AA@
0x180007590: "__cdecl _imp_GlobalUnlock" __imp_GlobalUnlock
0x18000B658: DloadSectionLockCount
0x180003B10: "public: virtual unsigned long __cdecl CIlKernel32::ExpandEnvironmentStringsW(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?ExpandEnvironmentStringsW@CIlKernel32@@UEAAKPEBGPEAGK@Z
0x180007678: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x180007D30: "CWfpER::Initialize:Entry" ??_C@_0BJ@NENLBLGG@CWfpER?3?3Initialize?3Entry?$AA@
0x1800082E0: "CDwWinER::CDwWinER: Manifest Fil" ??_C@_0CJ@GDIEAHMD@CDwWinER?3?3CDwWinER?3?5Manifest?5Fil@
0x180008BC0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800074D0: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180007828: "__cdecl _imp_GetFileType" __imp_GetFileType
0x1800014D0: "public: class CDiagERFactory & __ptr64 __cdecl CDiagERFactory::operator=(class CDiagERFactory const & __ptr64) __ptr64" ??4CDiagERFactory@@QEAAAEAV0@AEBV0@@Z
0x1800032B0: "public: virtual unsigned long __cdecl CIlKernel32::GetLogicalDriveStringsW(unsigned long,unsigned short * __ptr64) __ptr64" ?GetLogicalDriveStringsW@CIlKernel32@@UEAAKKPEAG@Z
0x180008318: "Unable to create manifest file=%" ??_C@_0CC@MAEBFFEM@Unable?5to?5create?5manifest?5file?$DN?$CF@
0x1800087B8: "IDiagER::SetHeader:Entry" ??_C@_0BJ@ELLFMCLJ@IDiagER?3?3SetHeader?3Entry?$AA@
0x1800083A0: "Flags=%d " ??_C@_1BG@ONAEMFPG@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$DN?$AA?$CF?$AAd?$AA?$AN?$AA?6?$AA?$AA@
0x1800034D0: "public: virtual unsigned long __cdecl CIlKernel32::GetShortPathNameW(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetShortPathNameW@CIlKernel32@@UEAAKPEBGPEAGK@Z
0x180001024: "struct tagLOG_PARTIAL_MSG * __ptr64 __cdecl ConstructPartialMsgW(unsigned long,char const * __ptr64,...)" ?ConstructPartialMsgW@@YAPEAUtagLOG_PARTIAL_MSG@@KPEBDZZ
0x180007F40: "Consent Value = HKCU\%s!%s could" ??_C@_0DM@PCMIGKBG@Consent?5Value?5?$DN?5HKCU?2?$CFs?$CB?$CFs?5could@
0x180007CD0: "base\ntsetup\diagnostics\diager\" ??_C@_1FM@EFLNKCPP@?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAe?$AAr?$AA?2@
0x180007750: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1800036E0: "public: virtual int __cdecl CIlKernel32::GetVolumeInformationW(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetVolumeInformationW@CIlKernel32@@UEAAHPEBGPEAGKPEAK221K@Z
0x180005A40: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x180007980: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180009658: wer_NULL_THUNK_DATA_DLB
0x180008A40: "DiagERAddBucketingParameters" ??_C@_1DK@NNOJBALG@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAA?$AAd?$AAd?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180007690: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180004760: "unsigned long __cdecl DiagERSetHeader(unsigned short const * __ptr64)" ?DiagERSetHeader@@YAKPEBG@Z
0x18000830C: "wb" ??_C@_15MJDFFMKN@?$AAw?$AAb?$AA?$AA@
0x180007658: "__cdecl _imp_GetShortPathNameW" __imp_GetShortPathNameW
0x180004980: "unsigned long __cdecl DiagERAddFiles(unsigned short const * __ptr64 * __ptr64,unsigned int)" ?DiagERAddFiles@@YAKPEAPEBGI@Z
0x1800076A0: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180005AB0: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x180007710: "__cdecl _imp_HeapValidate" __imp_HeapValidate
0x180008848: "Unable to allocate bucketing par" ??_C@_0DC@OIJAMNAA@Unable?5to?5allocate?5bucketing?5par@
0x180005C2A: "__cdecl XcptFilter" _XcptFilter
0x180007988: "__cdecl _xc_a" __xc_a
0x180004430: "public: static unsigned long __cdecl CDiagERFactory::CreateInstance(unsigned short const * __ptr64,enum _DIAG_REPORT_TYPE,int,class IDiagER * __ptr64 * __ptr64)" ?CreateInstance@CDiagERFactory@@SAKPEBGW4_DIAG_REPORT_TYPE@@HPEAPEAVIDiagER@@@Z
0x180007808: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x180008B80: "DiagERTerminate" ??_C@_1CA@FEGGMGFG@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AA?$AA@
0x180008290: "watson.microsoft.com" ??_C@_1CK@CPNMCFFL@?$AAw?$AAa?$AAt?$AAs?$AAo?$AAn?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?$AA@
0x1800076B8: "__cdecl _imp_FindClose" __imp_FindClose
0x1800076F0: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x1800088F0: "IDiagER::~IDiagER" ??_C@_1CE@GLJBKDK@?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?3?$AA?3?$AA?$HO?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?$AA@
0x1800080B8: "CWfpER::AddFiles:Entry" ??_C@_0BH@FFJGMKNO@CWfpER?3?3AddFiles?3Entry?$AA@
0x180008588: ".htm" ??_C@_19BHBAHPON@?$AA?4?$AAh?$AAt?$AAm?$AA?$AA@
0x180004AF0: "unsigned long __cdecl DiagERSubmitEx(unsigned long)" ?DiagERSubmitEx@@YAKK@Z
0x180008220: "CDwWinER::CDwWinER:Entry" ??_C@_0BJ@PBEJHPOG@CDwWinER?3?3CDwWinER?3Entry?$AA@
0x180006007: "__cdecl lock" _lock
0x180003880: "public: virtual void __cdecl CIlKernel32::InitializeCriticalSection(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ?InitializeCriticalSection@CIlKernel32@@UEAAXPEAU_RTL_CRITICAL_SECTION@@@Z
0x180008600: "CDwWinER::AddFiles:Entry" ??_C@_0BJ@LJADONHO@CDwWinER?3?3AddFiles?3Entry?$AA@
0x18000B618: DloadSrwLock
0x180005C1E: "__cdecl callnewh" _callnewh
0x180008548: "CDwWinER::AddBucketingParameters" ??_C@_0DL@FKACFKII@CDwWinER?3?3AddBucketingParameters@
0x180002390: "public: virtual int __cdecl CIlShell32::ShellExecuteExW(struct _SHELLEXECUTEINFOW * __ptr64) __ptr64" ?ShellExecuteExW@CIlShell32@@UEAAHPEAU_SHELLEXECUTEINFOW@@@Z
0x180007770: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180007C90: "__cdecl _guard_iat_table" __guard_iat_table
0x180008400: "CDwWinER::SetHeader:Setting head" ??_C@_0CG@BIGBJNEO@CDwWinER?3?3SetHeader?3Setting?5head@
0x18000D030: wer_NULL_THUNK_DATA_DLA
0x1800031A0: "public: virtual int __cdecl CIlKernel32::GlobalUnlock(void * __ptr64) __ptr64" ?GlobalUnlock@CIlKernel32@@UEAAHPEAX@Z
0x1800032A0: "public: virtual int __cdecl CIlKernel32::CloseHandle(void * __ptr64) __ptr64" ?CloseHandle@CIlKernel32@@UEAAHPEAX@Z
0x1800083B8: "CDwWinER::SetHeader" ??_C@_1CI@BJENKCPA@?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$AA@
0x180007508: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180003530: "public: virtual int __cdecl CIlKernel32::FindNextFileW(void * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindNextFileW@CIlKernel32@@UEAAHPEAXPEAU_WIN32_FIND_DATAW@@@Z
0x180004830: "unsigned long __cdecl DiagERAddBucketingParameters(unsigned short const * __ptr64 * __ptr64,unsigned int)" ?DiagERAddBucketingParameters@@YAKPEAPEBGI@Z
0x1800061B0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180007818: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x1800086E0: "base\ntsetup\diagnostics\diager\" ??_C@_1FO@MJPMLJNE@?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAe?$AAr?$AA?2@
0x180007950: "__cdecl _imp_memset" __imp_memset
0x1800076B0: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x180007730: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000B650: DloadSectionCommitPermanent
0x180005E1C: "__cdecl initterm" _initterm
0x18000B640: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800077B0: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x180003130: "public: virtual int __cdecl CIlKernel32::HeapValidate(void * __ptr64,unsigned long,void const * __ptr64) __ptr64" ?HeapValidate@CIlKernel32@@UEAAHPEAXKPEBX@Z
0x180007740: "__cdecl _imp_Sleep" __imp_Sleep
0x1800014E0: "public: virtual long __cdecl CIlWerApi::WerReportCreate(unsigned short const * __ptr64,enum _WER_REPORT_TYPE,struct _WER_REPORT_INFORMATION * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?WerReportCreate@CIlWerApi@@UEAAJPEBGW4_WER_REPORT_TYPE@@PEAU_WER_REPORT_INFORMATION@@PEAPEAX@Z
0x180008090: "CWfpER::AddFiles" ??_C@_1CC@EOLDFMBP@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1800079B0: "__cdecl _xi_z" __xi_z
0x1800084C0: "/StageOne/Generic/%s" ??_C@_1CK@CIOJKBBN@?$AA?1?$AAS?$AAt?$AAa?$AAg?$AAe?$AAO?$AAn?$AAe?$AA?1?$AAG?$AAe?$AAn?$AAe?$AAr?$AAi?$AAc?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x180007560: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180008050: "CWfpER::AddBucketingParameters:A" ??_C@_0DJ@CCFDOHKB@CWfpER?3?3AddBucketingParameters?3A@
0x180007628: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x180005E28: "__cdecl _C_specific_handler" __C_specific_handler
0x180004C50: RegSetDword
0x180007580: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180003900: "public: virtual unsigned long __cdecl CIlKernel32::GetFileSize(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileSize@CIlKernel32@@UEAAKPEAXPEAK@Z
0x180003A80: "public: virtual unsigned short * __ptr64 __cdecl CIlKernel32::GetCommandLineW(void) __ptr64" ?GetCommandLineW@CIlKernel32@@UEAAPEAGXZ
0x180003740: "public: virtual int __cdecl CIlKernel32::SetFileTime(void * __ptr64,struct _FILETIME const * __ptr64,struct _FILETIME const * __ptr64,struct _FILETIME const * __ptr64) __ptr64" ?SetFileTime@CIlKernel32@@UEAAHPEAXPEBU_FILETIME@@11@Z
0x180007920: "__cdecl _imp__onexit" __imp__onexit
0x18000B600: "__cdecl _hmod__wer_dll" __hmod__wer_dll
0x180007608: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180007FE8: "CWfpER::AddBucketingParameters" ??_C@_1DO@KHJJLODD@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180005C12: malloc
0x1800074C8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003190: "public: virtual void * __ptr64 __cdecl CIlKernel32::GlobalLock(void * __ptr64) __ptr64" ?GlobalLock@CIlKernel32@@UEAAPEAXPEAX@Z
0x1800075E8: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x18000614C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001690: "public: virtual unsigned long __cdecl CWfpER::Initialize(void) __ptr64" ?Initialize@CWfpER@@UEAAKXZ
0x1800030A0: "public: virtual void * __ptr64 __cdecl CIlKernel32::HeapAlloc(void * __ptr64,unsigned long,unsigned __int64) __ptr64" ?HeapAlloc@CIlKernel32@@UEAAPEAXPEAXK_K@Z
0x180001050: "public: __cdecl IDiagER::IDiagER(class IDiagER const & __ptr64) __ptr64" ??0IDiagER@@QEAA@AEBV0@@Z
0x180007698: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x180008380: "TitleName=%s " ??_C@_1BO@FOPNKNAH@?$AAT?$AAi?$AAt?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x180003380: "public: virtual int __cdecl CIlKernel32::DuplicateHandle(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64,unsigned long,int,unsigned long) __ptr64" ?DuplicateHandle@CIlKernel32@@UEAAHPEAX00PEAPEAXKHK@Z
0x180008740: "IDiagER::IDiagER:Entry" ??_C@_0BH@GHCJBNCA@IDiagER?3?3IDiagER?3Entry?$AA@
0x180007960: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180003400: "public: virtual int __cdecl CIlKernel32::CreateDirectoryW(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64) __ptr64" ?CreateDirectoryW@CIlKernel32@@UEAAHPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x180003060: "public: virtual void * __ptr64 __cdecl CIlKernel32::GetProcessHeap(void) __ptr64" ?GetProcessHeap@CIlKernel32@@UEAAPEAXXZ
0x180007128: "const CIlWerApi::`vftable'" ??_7CIlWerApi@@6B@
0x1800038C0: "public: virtual int __cdecl CIlKernel32::GetOverlappedResult(void * __ptr64,struct _OVERLAPPED * __ptr64,unsigned long * __ptr64,int) __ptr64" ?GetOverlappedResult@CIlKernel32@@UEAAHPEAXPEAU_OVERLAPPED@@PEAKH@Z
0x1800060C1: "__cdecl _imp_load_WerReportSetParameter" __imp_load_WerReportSetParameter
0x180008538: "&P%d=%s" ??_C@_1BA@BIFMLIBH@?$AA?$CG?$AAP?$AA?$CF?$AAd?$AA?$DN?$AA?$CF?$AAs?$AA?$AA@
0x180008360: "UI_LCID=%d " ??_C@_1BK@IAGAINIB@?$AAU?$AAI?$AA_?$AAL?$AAC?$AAI?$AAD?$AA?$DN?$AA?$CF?$AAd?$AA?$AN?$AA?6?$AA?$AA@
0x180003500: "public: virtual unsigned long __cdecl CIlKernel32::GetTickCount(void) __ptr64" ?GetTickCount@CIlKernel32@@UEAAKXZ
0x1800038A0: "public: virtual void __cdecl CIlKernel32::LeaveCriticalSection(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ?LeaveCriticalSection@CIlKernel32@@UEAAXPEAU_RTL_CRITICAL_SECTION@@@Z
0x1800074E0: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180005C36: "__cdecl amsg_exit" _amsg_exit
0x1800078C0: "__cdecl _imp__callnewh" __imp__callnewh
0x180008BA0: "DiagERTerminate:Entry" ??_C@_0BG@BINDFAPF@DiagERTerminate?3Entry?$AA@
0x180007820: "__cdecl _imp_CreateProcessA" __imp_CreateProcessA
0x1800080F0: "CWfpER::AddFiles:Failed Adding f" ??_C@_0DC@KBCEJEKN@CWfpER?3?3AddFiles?3Failed?5Adding?5f@
0x1800077F8: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x180007718: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180007880: "__cdecl _imp_ConstructPartialMsgVW" __imp_ConstructPartialMsgVW
0x18000D028: "__cdecl _imp_WerReportSetUIOption" __imp_WerReportSetUIOption
0x180007FC0: "CWfpER::SetHeader:Setting header" ??_C@_0CE@OCECHBDC@CWfpER?3?3SetHeader?3Setting?5header@
0x180007F10: "Consent Value = HKCU\%s!%s has b" ??_C@_0DA@FKEAHGGK@Consent?5Value?5?$DN?5HKCU?2?$CFs?$CB?$CFs?5has?5b@
0x1800060D3: "__cdecl _imp_load_WerReportAddFile" __imp_load_WerReportAddFile
0x180003B50: "public: virtual void * __ptr64 __cdecl CIlKernel32::VirtualAlloc(void * __ptr64,unsigned __int64,unsigned long,unsigned long) __ptr64" ?VirtualAlloc@CIlKernel32@@UEAAPEAXPEAX_KKK@Z
0x180007908: "__cdecl _imp__lock" __imp__lock
0x180008A08: "DiagERSetHeader" ??_C@_1CA@BGNBLJOE@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAS?$AAe?$AAt?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$AA@
0x180005BB0: atexit
0x1800076A8: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180003D70: "public: virtual unsigned long __cdecl IDiagER::AddBucketingParameters(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddBucketingParameters@IDiagER@@UEAAKPEAPEBGI@Z
0x180007CA8: "CWfpER::CWfpER" ??_C@_1BO@MDPNKJCB@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?$AA@
0x180007840: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x180007618: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1800094D0: "__cdecl CTA2PEAG" _CTA2PEAG
0x180007620: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x180004420: "public: static class IDiagER * __ptr64 __cdecl CDiagERFactory::GetErrorReporter(void)" ?GetErrorReporter@CDiagERFactory@@SAPEAVIDiagER@@XZ
0x180007790: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180007640: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000601F: "__cdecl _dllonexit" __dllonexit
0x180007EF8: "CWfpER::~CWfpER:Entry" ??_C@_0BG@FDJLKJHE@CWfpER?3?3?$HOCWfpER?3Entry?$AA@
0x180001D00: "public: virtual unsigned long __cdecl CWfpER::AddBucketingParameters(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddBucketingParameters@CWfpER@@UEAAKPEAPEBGI@Z
0x180003860: "public: virtual void __cdecl CIlKernel32::Sleep(unsigned long) __ptr64" ?Sleep@CIlKernel32@@UEAAXK@Z
0x180002970: "public: virtual unsigned long __cdecl CDwWinER::AddBucketingParameters(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddBucketingParameters@CDwWinER@@UEAAKPEAPEBGI@Z
0x18000B620: "__cdecl _native_startup_lock" __native_startup_lock
0x180007D78: "NULL Event Name specified" ??_C@_0BK@HMFPDHPL@NULL?5Event?5Name?5specified?$AA@
0x180008660: "DataFiles=%s " ??_C@_1BO@ENAHFAEO@?$AAD?$AAa?$AAt?$AAa?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x180005E10: DllMain
0x180007748: "__cdecl _imp_GlobalSize" __imp_GlobalSize
0x1800078F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180007548: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002C20: "public: virtual unsigned long __cdecl CDwWinER::AddFiles(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddFiles@CDwWinER@@UEAAKPEAPEBGI@Z
0x180007848: KERNEL32_NULL_THUNK_DATA
0x1800077C8: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18000B610: "__cdecl _puiHead" __puiHead
0x1800094E8: "__stdcall CT??_R0PEAG" _CT??_R0PEAG@88
0x180003010: "public: virtual int __cdecl CIlKernel32::GetVersionExA(struct _OSVERSIONINFOA * __ptr64) __ptr64" ?GetVersionExA@CIlKernel32@@UEAAHPEAU_OSVERSIONINFOA@@@Z
0x180003020: "public: virtual int __cdecl CIlKernel32::GetVersionExW(struct _OSVERSIONINFOW * __ptr64) __ptr64" ?GetVersionExW@CIlKernel32@@UEAAHPEAU_OSVERSIONINFOW@@@Z
0x1800075A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800054A0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180007708: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x18000B060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180006128: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003F30: "public: virtual unsigned long __cdecl IDiagER::AddFiles(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddFiles@IDiagER@@UEAAKPEAPEBGI@Z
0x180003850: "public: virtual int __cdecl CIlKernel32::ResetEvent(void * __ptr64) __ptr64" ?ResetEvent@CIlKernel32@@UEAAHPEAX@Z
0x18000B608: "private: static class IDiagER * __ptr64 __ptr64 CDiagERFactory::m_diagER" ?m_diagER@CDiagERFactory@@0PEAVIDiagER@@EA
0x180008690: "dwwin.exe" ??_C@_1BE@FKOEHACI@?$AAd?$AAw?$AAw?$AAi?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800060F7: "__cdecl _imp_load_WerReportSubmit" __imp_load_WerReportSubmit
0x180009D90: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800075F0: "__cdecl _imp_GetLogicalDrives" __imp_GetLogicalDrives
0x180007538: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800075C0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180003430: "public: virtual int __cdecl CIlKernel32::SetFileAttributesW(unsigned short const * __ptr64,unsigned long) __ptr64" ?SetFileAttributesW@CIlKernel32@@UEAAHPEBGK@Z
0x18000B008: "struct IShell32Interface * __ptr64 __ptr64 g_Shell32" ?g_Shell32@@3PEAUIShell32Interface@@EA
0x1800060E5: "__cdecl _imp_load_WerReportCloseHandle" __imp_load_WerReportCloseHandle
0x1800074F0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180005D00: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006036: "__cdecl _imp_load_WerReportSetUIOption" __imp_load_WerReportSetUIOption
0x180007968: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180001510: "public: virtual long __cdecl CIlWerApi::WerReportCloseHandle(void * __ptr64) __ptr64" ?WerReportCloseHandle@CIlWerApi@@UEAAJPEAX@Z
0x180003B30: "public: virtual int __cdecl CIlKernel32::GetLocaleInfoW(unsigned long,unsigned long,unsigned short * __ptr64,int) __ptr64" ?GetLocaleInfoW@CIlKernel32@@UEAAHKKPEAGH@Z
0x1800075B8: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x180003840: "public: virtual int __cdecl CIlKernel32::SetEvent(void * __ptr64) __ptr64" ?SetEvent@CIlKernel32@@UEAAHPEAX@Z
0x18000D018: "__cdecl _imp_WerReportCloseHandle" __imp_WerReportCloseHandle
0x180003B80: "public: virtual int __cdecl CIlKernel32::VirtualFree(void * __ptr64,unsigned __int64,unsigned long) __ptr64" ?VirtualFree@CIlKernel32@@UEAAHPEAX_KK@Z
0x1800077A8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180008790: "IDiagER::SetHeader" ??_C@_1CG@HHCHBMJJ@?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$AA@
0x180007810: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180008620: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x180007578: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x180009574: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180007598: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180008598: "Stage1URL=%s " ??_C@_1BO@MAFFHHLP@?$AAS?$AAt?$AAa?$AAg?$AAe?$AA1?$AAU?$AAR?$AAL?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x180005760: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800078F0: "__cdecl _imp__initterm" __imp__initterm
0x180007758: "__cdecl _imp_GetDiskFreeSpaceExW" __imp_GetDiskFreeSpaceExW
0x180007CA0: "__cdecl _sz_wer_dll" __sz_wer_dll
0x1800086B8: "IDiagER::IDiagER" ??_C@_1CC@EIMGNLCM@?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?3?$AA?3?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?$AA@
0x180007610: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180007DF0: "Software\Microsoft\Windows\Windo" ??_C@_1HG@OBBLMDFL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x180007D50: "CWfpER::Initialize" ??_C@_1CG@HBJFAGPF@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x1800075B0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180007760: "__cdecl _imp_GetVersionExA" __imp_GetVersionExA
0x18000D000: "__cdecl _imp_WerReportCreate" __imp_WerReportCreate
0x1800076E8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x180009554: "__cdecl _DELAY_IMPORT_DESCRIPTOR_wer_dll" __DELAY_IMPORT_DESCRIPTOR_wer_dll
0x1800077E0: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x180007660: "__cdecl _imp_GetDiskFreeSpaceW" __imp_GetDiskFreeSpaceW
0x180002EC0: "public: virtual unsigned long __cdecl CDwWinER::Submit(unsigned long) __ptr64" ?Submit@CDwWinER@@UEAAKK@Z
0x18000B630: "__cdecl _onexitend" __onexitend
0x180007798: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180003680: "public: virtual void __cdecl CIlKernel32::ExitProcess(unsigned int) __ptr64" ?ExitProcess@CIlKernel32@@UEAAXI@Z
0x180008970: "base\ntsetup\diagnostics\diager\" ??_C@_1GE@HEOENDGI@?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAe?$AAr?$AA?2@
0x180006013: "__cdecl unlock" _unlock
0x180007978: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800082C0: "diagERman.txt" ??_C@_1BM@LABEBHJM@?$AAd?$AAi?$AAa?$AAg?$AAE?$AAR?$AAm?$AAa?$AAn?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x1800032E0: "public: virtual unsigned int __cdecl CIlKernel32::GetDriveTypeW(unsigned short const * __ptr64) __ptr64" ?GetDriveTypeW@CIlKernel32@@UEAAIPEBG@Z
0x180008498: "CDwWinER::AddBucketingParameters" ??_C@_0CH@FFOONBAB@CDwWinER?3?3AddBucketingParameters@
0x180007930: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180005BD0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800075F8: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x180007670: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180008530: "/%s" ??_C@_17JEGAMLJL@?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x180007870: USER32_NULL_THUNK_DATA
0x180008128: "CWfpER::Submit" ??_C@_1BO@EKCHGBAF@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AA?$AA@
0x1800083E0: "CDwWinER::SetHeader:Entry" ??_C@_0BK@HNAKIOJC@CDwWinER?3?3SetHeader?3Entry?$AA@
0x1800036C0: "public: virtual unsigned long __cdecl CIlKernel32::WaitForSingleObject(void * __ptr64,unsigned long) __ptr64" ?WaitForSingleObject@CIlKernel32@@UEAAKPEAXK@Z
0x180007768: "__cdecl _imp_GlobalAlloc" __imp_GlobalAlloc
0x180004180: "public: virtual __cdecl IDiagER::~IDiagER(void) __ptr64" ??1IDiagER@@UEAA@XZ
0x180007738: "__cdecl _imp_GetPrivateProfileStringW" __imp_GetPrivateProfileStringW
0x180001450: "public: virtual void * __ptr64 __cdecl CDwWinER::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDwWinER@@UEAAPEAXI@Z
0x1800031C0: "public: virtual unsigned __int64 __cdecl CIlKernel32::GlobalSize(void * __ptr64) __ptr64" ?GlobalSize@CIlKernel32@@UEAA_KPEAX@Z
0x180003AF0: "public: virtual int __cdecl CIlKernel32::GetExitCodeProcess(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeProcess@CIlKernel32@@UEAAHPEAXPEAK@Z
0x180008758: "Event Name cannot be NULL" ??_C@_1DE@JFJBDEDC@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?5?$AAc?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAb?$AAe?$AA?5?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800023A0: "public: __cdecl CDwWinER::CDwWinER(unsigned short const * __ptr64,int) __ptr64" ??0CDwWinER@@QEAA@PEBGH@Z
0x1800079A0: "__cdecl _xi_a" __xi_a
0x180007520: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180007910: "__cdecl _imp__unlock" __imp__unlock
0x180007D2C: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x180007ED8: "CWfpER::~CWfpER" ??_C@_1CA@LDBPFKEI@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AA?$HO?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?$AA@
0x1800036A0: "public: virtual int __cdecl CIlKernel32::TerminateProcess(void * __ptr64,unsigned int) __ptr64" ?TerminateProcess@CIlKernel32@@UEAAHPEAXI@Z
0x180007F80: "CWfpER::SetHeader" ??_C@_1CE@GPIGBCJK@?$AAC?$AAW?$AAf?$AAp?$AAE?$AAR?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$AA@
0x180003930: "public: virtual int __cdecl CIlKernel32::GetDiskFreeSpaceW(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?GetDiskFreeSpaceW@CIlKernel32@@UEAAHPEBGPEAK111@Z
0x180001520: "public: virtual long __cdecl CIlWerApi::WerReportSetUIOption(void * __ptr64,enum _WER_REPORT_UI,unsigned short const * __ptr64) __ptr64" ?WerReportSetUIOption@CIlWerApi@@UEAAJPEAXW4_WER_REPORT_UI@@PEBG@Z
0x1800030F0: "public: virtual int __cdecl CIlKernel32::HeapFree(void * __ptr64,unsigned long,void * __ptr64) __ptr64" ?HeapFree@CIlKernel32@@UEAAHPEAXK0@Z
0x180004E44: DloadMakePermanentImageCommit
0x1800010A0: "public: class IDiagER & __ptr64 __cdecl IDiagER::operator=(class IDiagER const & __ptr64) __ptr64" ??4IDiagER@@QEAAAEAV0@AEBV0@@Z
0x180007600: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x1800038B0: "public: virtual void __cdecl CIlKernel32::DeleteCriticalSection(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ?DeleteCriticalSection@CIlKernel32@@UEAAXPEAU_RTL_CRITICAL_SECTION@@@Z
0x1800085B8: "Stage2URL=%s " ??_C@_1BO@GPPMDKHF@?$AAS?$AAt?$AAa?$AAg?$AAe?$AA2?$AAU?$AAR?$AAL?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x18000B648: "__cdecl pRawDllMain" _pRawDllMain
0x180007928: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180008B68: "DiagERSubmitEx:Entry" ??_C@_0BF@PNGBCDPP@DiagERSubmitEx?3Entry?$AA@
0x18000B020: "class CIlShell32 IlShell32" ?IlShell32@@3VCIlShell32@@A
0x180008270: "CDwWinER::Initialize:Entry" ??_C@_0BL@NPNGPOHB@CDwWinER?3?3Initialize?3Entry?$AA@
0x180007510: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x180007918: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180005494: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180007000: "const type_info::`vftable'" ??_7type_info@@6B@
0x180008B30: "DiagERSubmit:Entry" ??_C@_0BD@FFDOGAMM@DiagERSubmit?3Entry?$AA@
0x1800077F0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180005A10: "__cdecl _security_check_cookie" __security_check_cookie
0x180007998: "__cdecl _xc_z" __xc_z
0x180003AC0: "public: virtual struct HINSTANCE__ * __ptr64 __cdecl CIlKernel32::LoadLibraryW(unsigned short const * __ptr64) __ptr64" ?LoadLibraryW@CIlKernel32@@UEAAPEAUHINSTANCE__@@PEBG@Z
0x18000D008: "__cdecl _imp_WerReportSetParameter" __imp_WerReportSetParameter
0x180003450: "public: virtual unsigned long __cdecl CIlKernel32::GetTempPathW(unsigned long,unsigned short * __ptr64) __ptr64" ?GetTempPathW@CIlKernel32@@UEAAKKPEAG@Z
0x1800077D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180003AB0: "public: virtual int __cdecl CIlKernel32::FreeLibrary(struct HINSTANCE__ * __ptr64) __ptr64" ?FreeLibrary@CIlKernel32@@UEAAHPEAUHINSTANCE__@@@Z
0x180001190: "public: virtual void * __ptr64 __cdecl CWfpER::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWfpER@@UEAAPEAXI@Z
0x1800037F0: "public: virtual void * __ptr64 __cdecl CIlKernel32::OpenEventW(unsigned long,int,unsigned short const * __ptr64) __ptr64" ?OpenEventW@CIlKernel32@@UEAAPEAXKHPEBG@Z
0x18000611B: "__cdecl CxxThrowException" _CxxThrowException
0x180008AF8: "DiagERAddFiles:Entry" ??_C@_0BF@MIJMCPPJ@DiagERAddFiles?3Entry?$AA@
0x180007900: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180008BC0: "__cdecl _pfnDefaultDliNotifyHook2" __pfnDefaultDliNotifyHook2
0x180007540: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180007780: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1800089D8: "DiagERInitialize:Entry Also Init" ??_C@_0DA@LHINIIOM@DiagERInitialize?3Entry?5Also?5Init@
0x180008348: "Server=%s " ??_C@_1BI@MMAOHAM@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x180007800: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180006270: "__cdecl _chkstk" __chkstk
0x1800086A8: "-d %s" ??_C@_1M@NCFLOCN@?$AA?9?$AAd?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x180007638: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180005BD0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x180007700: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18000B028: "class CIlKernel32 IlKernel32" ?IlKernel32@@3VCIlKernel32@@A
0x1800010E0: "public: __cdecl CWfpER::CWfpER(class CWfpER const & __ptr64) __ptr64" ??0CWfpER@@QEAA@AEBV0@@Z
0x180007E98: "Consent Value = HKCU\%s!%s could" ??_C@_0DM@MJANNAIJ@Consent?5Value?5?$DN?5HKCU?2?$CFs?$CB?$CFs?5could@
0x180007188: "const CDwWinER::`vftable'" ??_7CDwWinER@@6B@
0x180001210: "public: __cdecl CDwWinER::CDwWinER(class CDwWinER const & __ptr64) __ptr64" ??0CDwWinER@@QEAA@AEBV0@@Z
0x1800075D8: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x180003420: "public: virtual unsigned long __cdecl CIlKernel32::GetFileAttributesW(unsigned short const * __ptr64) __ptr64" ?GetFileAttributesW@CIlKernel32@@UEAAKPEBG@Z
0x180007FA8: "CWfpER::SetHeader:Entry" ??_C@_0BI@KLDALIFN@CWfpER?3?3SetHeader?3Entry?$AA@
0x180008428: "HeaderText=%s " ??_C@_1CA@JPJFJCGG@?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAT?$AAe?$AAx?$AAt?$AA?$DN?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x180007838: "__cdecl _imp_CopyFileExW" __imp_CopyFileExW
0x1800075D0: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x180003230: "public: virtual int __cdecl CIlKernel32::MoveFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?MoveFileExW@CIlKernel32@@UEAAHPEBG0K@Z
0x1800079B8: "__cdecl _guard_fids_table" __guard_fids_table
0x180001140: "public: class CWfpER & __ptr64 __cdecl CWfpER::operator=(class CWfpER const & __ptr64) __ptr64" ??4CWfpER@@QEAAAEAV0@AEBV0@@Z
0x180007868: "__cdecl _imp_CharNextW" __imp_CharNextW
0x180005A34: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x180007958: msvcrt_NULL_THUNK_DATA
0x180007020: "__cdecl load_config_used" _load_config_used
0x1800071B8: "const IDiagER::`vftable'" ??_7IDiagER@@6B@
0x1800038F0: "public: virtual unsigned long __cdecl CIlKernel32::GetFileType(void * __ptr64) __ptr64" ?GetFileType@CIlKernel32@@UEAAKPEAX@Z
0x180007898: "__cdecl _imp_WdsSetupLogDestroy" __imp_WdsSetupLogDestroy
0x180008160: "Watson Error Report submitted an" ??_C@_0CM@LAPCGGKG@Watson?5Error?5Report?5submitted?5an@
0x180004EE4: DloadProtectSection
0x180008930: "wer.dll" ??_C@_1BA@PKCHBLFB@?$AAw?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180009510: "__stdcall CT??_R0PEAX" _CT??_R0PEAX@88
0x18000B010: "struct IKernel32Interface * __ptr64 __ptr64 g_Kernel32" ?g_Kernel32@@3PEAUIKernel32Interface@@EA
0x1800076E0: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180003A30: "public: virtual unsigned long __cdecl CIlKernel32::GetCurrentThreadId(void) __ptr64" ?GetCurrentThreadId@CIlKernel32@@UEAAKXZ
0x180009DE0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18000B030: "unsigned short * __ptr64 `RTTI Type Descriptor'" ??_R0PEAG@8
0x180007728: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x18000B048: "void * __ptr64 `RTTI Type Descriptor'" ??_R0PEAX@8
0x1800078E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180008BC0: "__cdecl _pfnDliNotifyHook2" __pfnDliNotifyHook2
0x1800022D8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800034A0: "public: virtual unsigned long __cdecl CIlKernel32::GetFullPathNameW(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetFullPathNameW@CIlKernel32@@UEAAKPEBGKPEAGPEAPEAG@Z
0x1800015A0: "public: virtual long __cdecl CIlWerApi::WerReportSubmit(void * __ptr64,enum _WER_CONSENT,unsigned long,enum _WER_SUBMIT_RESULT * __ptr64) __ptr64" ?WerReportSubmit@CIlWerApi@@UEAAJPEAXW4_WER_CONSENT@@KPEAW4_WER_SUBMIT_RESULT@@@Z
0x180007550: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180007518: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003510: "public: virtual void * __ptr64 __cdecl CIlKernel32::FindFirstFileW(unsigned short const * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindFirstFileW@CIlKernel32@@UEAAPEAXPEBGPEAU_WIN32_FIND_DATAW@@@Z
0x180008028: "CWfpER::AddBucketingParameters:E" ??_C@_0CF@MKHMPPK@CWfpER?3?3AddBucketingParameters?3E@
0x180003CB0: "public: virtual unsigned long __cdecl IDiagER::SetHeader(unsigned short const * __ptr64) __ptr64" ?SetHeader@IDiagER@@UEAAKPEBG@Z
0x180007668: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x1800085D8: "CDwWinER::AddFiles" ??_C@_1CG@IPHFPIB@?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180007830: "__cdecl _imp_GlobalMemoryStatus" __imp_GlobalMemoryStatus
0x1800078D8: "__cdecl _imp_fclose" __imp_fclose
0x180005C06: free
0x180007530: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x180007570: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180003960: "public: virtual int __cdecl CIlKernel32::GetDiskFreeSpaceExW(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetDiskFreeSpaceExW@CIlKernel32@@UEAAHPEBGPEAT_ULARGE_INTEGER@@11@Z
0x1800033D0: "public: virtual int __cdecl CIlKernel32::DeleteFileW(unsigned short const * __ptr64) __ptr64" ?DeleteFileW@CIlKernel32@@UEAAHPEBG@Z
0x180008630: "%s|" ??_C@_17IHBECMOP@?$AA?$CF?$AAs?$AA?$HM?$AA?$AA@
0x180007558: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180005B10: "__cdecl purecall" _purecall
0x180008BC0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000B018: "class CIlWerApi IlWerApi" ?IlWerApi@@3VCIlWerApi@@A
0x180005E40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180007650: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180007938: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180003550: "public: virtual int __cdecl CIlKernel32::FindClose(void * __ptr64) __ptr64" ?FindClose@CIlKernel32@@UEAAHPEAX@Z
0x180008BB8: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x180007680: "__cdecl _imp_SetFileTime" __imp_SetFileTime
0x18000D020: "__cdecl _imp_WerReportSubmit" __imp_WerReportSubmit
0x1800027F0: "public: virtual __cdecl CDwWinER::~CDwWinER(void) __ptr64" ??1CDwWinER@@UEAA@XZ
0x180008680: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x180003040: "public: virtual void __cdecl CIlKernel32::GlobalMemoryStatus(struct _MEMORYSTATUS * __ptr64) __ptr64" ?GlobalMemoryStatus@CIlKernel32@@UEAAXPEAU_MEMORYSTATUS@@@Z
0x180003810: "public: virtual unsigned long __cdecl CIlKernel32::WaitForMultipleObjects(unsigned long,void * __ptr64 const * __ptr64,int,unsigned long) __ptr64" ?WaitForMultipleObjects@CIlKernel32@@UEAAKKPEBQEAXHK@Z
0x1800014D0: "public: class CDiagERFactory & __ptr64 __cdecl CDiagERFactory::operator=(class CDiagERFactory &&) __ptr64" ??4CDiagERFactory@@QEAAAEAV0@$$QEAV0@@Z
0x180008AD8: "DiagERAddFiles" ??_C@_1BO@ODNBLPEF@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18000D010: "__cdecl _imp_WerReportAddFile" __imp_WerReportAddFile
0x1800078C8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800078D0: "__cdecl _imp__wfopen" __imp__wfopen
0x1800078B8: "__cdecl _imp_fwprintf" __imp_fwprintf
0x1800020A0: "public: virtual unsigned long __cdecl CWfpER::Submit(unsigned long) __ptr64" ?Submit@CWfpER@@UEAAKK@Z
0x180007970: ntdll_NULL_THUNK_DATA
0x180008450: "CDwWinER::AddBucketingParameters" ??_C@_1EC@ODAHCMKE@?$AAC?$AAD?$AAw?$AAW?$AAi?$AAn?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs@
0x1800076F8: "__cdecl _imp_HeapWalk" __imp_HeapWalk
0x1800071E8: "const CIlShell32::`vftable'" ??_7CIlShell32@@6B@
0x180006109: "__cdecl _imp_load_WerReportCreate" __imp_load_WerReportCreate
0x180006042: "__cdecl _tailMerge_wer_dll" __tailMerge_wer_dll
0x180007DA0: "Changing Report Type from Critic" ??_C@_0EK@LHOPDEGG@Changing?5Report?5Type?5from?5Critic@
0x180007948: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000B068: "__cdecl _security_cookie" __security_cookie
0x180003A40: "public: virtual unsigned long __cdecl CIlKernel32::GetPrivateProfileStringW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileStringW@CIlKernel32@@UEAAKPEBG00PEAGK0@Z
0x180001540: "public: virtual long __cdecl CIlWerApi::WerReportSetParameter(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WerReportSetParameter@CIlWerApi@@UEAAJPEAXKPEBG1@Z
0x180006270: "__cdecl alloca_probe" _alloca_probe
0x180007500: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x180003770: "public: virtual int __cdecl CIlKernel32::SetEndOfFile(void * __ptr64) __ptr64" ?SetEndOfFile@CIlKernel32@@UEAAHPEAX@Z
0x1800077A0: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180007630: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x1800030C0: "public: virtual void * __ptr64 __cdecl CIlKernel32::HeapReAlloc(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64) __ptr64" ?HeapReAlloc@CIlKernel32@@UEAAPEAXPEAXK0_K@Z
0x1800075C8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004BB0: "unsigned long __cdecl DiagERTerminate(void)" ?DiagERTerminate@@YAKXZ
0x1800015D0: "public: __cdecl CWfpER::CWfpER(unsigned short const * __ptr64,enum _DIAG_REPORT_TYPE,int) __ptr64" ??0CWfpER@@QEAA@PEBGW4_DIAG_REPORT_TYPE@@H@Z
0x1800087E0: "IDiagER::AddBucketingParameters" ??_C@_1EA@CBJPAHIH@?$AAI?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AA?3?$AA?3?$AAA?$AAd?$AAd?$AAB?$AAu?$AAc?$AAk?$AAe?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180001980: "public: virtual __cdecl CWfpER::~CWfpER(void) __ptr64" ??1CWfpER@@UEAA@XZ
0x180007778: "__cdecl _imp_GlobalFree" __imp_GlobalFree
0x1800076D0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x180008B10: "DiagERSubmit" ??_C@_1BK@NJBICHA@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AA?$AA@
0x1800074D8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180003560: "public: virtual int __cdecl CIlKernel32::CreateProcessW(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessW@CIlKernel32@@UEAAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180008A28: "DiagERSetHeader:Entry" ??_C@_0BG@OKHAHND@DiagERSetHeader?3Entry?$AA@
0x18000B638: "__cdecl _onexitbegin" __onexitbegin
0x180003210: "public: virtual int __cdecl CIlKernel32::MoveFileW(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?MoveFileW@CIlKernel32@@UEAAHPEBG0@Z
0x180004A60: "unsigned long __cdecl DiagERSubmit(void)" ?DiagERSubmit@@YAKXZ
0x180004620: "public: static void __cdecl CDiagERFactory::ReleaseInstance(void)" ?ReleaseInstance@CDiagERFactory@@SAXXZ
0x1800078E0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180003350: "public: virtual unsigned long __cdecl CIlKernel32::SetFilePointer(void * __ptr64,long,long * __ptr64,unsigned long) __ptr64" ?SetFilePointer@CIlKernel32@@UEAAKPEAXJPEAJK@Z
0x180002FF0: "public: virtual unsigned long __cdecl CIlKernel32::GetLastError(void) __ptr64" ?GetLastError@CIlKernel32@@UEAAKXZ
0x180002360: "public: virtual unsigned int __cdecl CIlShell32::ExtractIconExW(unsigned short const * __ptr64,int,struct HICON__ * __ptr64 * __ptr64,struct HICON__ * __ptr64 * __ptr64,unsigned int) __ptr64" ?ExtractIconExW@CIlShell32@@UEAAIPEBGHPEAPEAUHICON__@@1I@Z
0x180007568: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180008148: "CWfpER::Submit:Entry" ??_C@_0BF@MKJNDPGE@CWfpER?3?3Submit?3Entry?$AA@
0x1800071F8: "const CIlKernel32::`vftable'" ??_7CIlKernel32@@6B@
0x180009DA4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180008638: "CDwWinER::AddFiles:Adding file=%" ??_C@_0CC@JFMDHFLB@CDwWinER?3?3AddFiles?3Adding?5file?$DN?$CF@
0x180002830: "public: virtual unsigned long __cdecl CDwWinER::SetHeader(unsigned short const * __ptr64) __ptr64" ?SetHeader@CDwWinER@@UEAAKPEBG@Z
0x1800074E8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180005D34: "__cdecl _security_init_cookie" __security_init_cookie
0x1800095C8: wer_NULL_THUNK_DATA_DLN
0x180007878: "__cdecl _imp_WdsSetupLogMessageW" __imp_WdsSetupLogMessageW
0x180001BC0: "public: virtual unsigned long __cdecl CWfpER::SetHeader(unsigned short const * __ptr64) __ptr64" ?SetHeader@CWfpER@@UEAAKPEBG@Z
0x180003090: "public: virtual int __cdecl CIlKernel32::HeapDestroy(void * __ptr64) __ptr64" ?HeapDestroy@CIlKernel32@@UEAAHPEAX@Z
0x1800031B0: "public: virtual void * __ptr64 __cdecl CIlKernel32::GlobalFree(void * __ptr64) __ptr64" ?GlobalFree@CIlKernel32@@UEAAPEAXPEAX@Z
0x1800075A8: "__cdecl _imp_GetUserDefaultLangID" __imp_GetUserDefaultLangID
0x1800081C0: "base\ntsetup\diagnostics\diager\" ??_C@_1GA@NKPOGAKP@?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAe?$AAr?$AA?2@
0x180009D7C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003AE0: "public: virtual void __cdecl CIlKernel32::DebugBreak(void) __ptr64" ?DebugBreak@CIlKernel32@@UEAAXXZ
0x180003A10: "public: virtual void __cdecl CIlKernel32::RaiseException(unsigned long,unsigned long,unsigned long,unsigned __int64 const * __ptr64) __ptr64" ?RaiseException@CIlKernel32@@UEAAXKKKPEB_K@Z
0x180003890: "public: virtual void __cdecl CIlKernel32::EnterCriticalSection(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ?EnterCriticalSection@CIlKernel32@@UEAAXPEAU_RTL_CRITICAL_SECTION@@@Z
0x180001E90: "public: virtual unsigned long __cdecl CWfpER::AddFiles(unsigned short const * __ptr64 * __ptr64,unsigned int) __ptr64" ?AddFiles@CWfpER@@UEAAKPEAPEBGI@Z
0x180008B48: "DiagERSubmitEx" ??_C@_1BO@GOHLLLDI@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AAE?$AAx?$AA?$AA@
0x180004D1C: StrDupe
0x180007890: "__cdecl _imp_WdsSetupLogInit" __imp_WdsSetupLogInit
0x180003170: "public: virtual void * __ptr64 __cdecl CIlKernel32::GlobalAlloc(unsigned int,unsigned __int64) __ptr64" ?GlobalAlloc@CIlKernel32@@UEAAPEAXI_K@Z
0x1800078A8: "__cdecl _imp_malloc" __imp_malloc
0x180007940: "__cdecl _imp__purecall" __imp__purecall
0x1800074F8: ADVAPI32_NULL_THUNK_DATA
0x180007648: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180003920: "public: virtual unsigned int __cdecl CIlKernel32::SetErrorMode(unsigned int) __ptr64" ?SetErrorMode@CIlKernel32@@UEAAII@Z
0x1800076C0: "__cdecl _imp_GetLocaleInfoW" __imp_GetLocaleInfoW
0x1800077D8: "__cdecl _imp_GlobalLock" __imp_GlobalLock
0x180003250: "public: virtual void * __ptr64 __cdecl CIlKernel32::CreateFileW(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?CreateFileW@CIlKernel32@@UEAAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180003A00: "public: virtual int __cdecl CIlKernel32::UnmapViewOfFile(void const * __ptr64) __ptr64" ?UnmapViewOfFile@CIlKernel32@@UEAAHPEBX@Z
0x1800077E8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180005E90: "__cdecl _report_gsfailure" __report_gsfailure
0x180003990: "public: virtual void * __ptr64 __cdecl CIlKernel32::CreateFileMappingW(void * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64) __ptr64" ?CreateFileMappingW@CIlKernel32@@UEAAPEAXPEAXPEAU_SECURITY_ATTRIBUTES@@KKKPEBG@Z
0x1800031D0: "public: virtual int __cdecl CIlKernel32::CopyFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?CopyFileW@CIlKernel32@@UEAAHPEBG0H@Z
0x180007688: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180005B1C: "__cdecl onexit" _onexit
0x180007858: "__cdecl _imp_ExtractIconExW" __imp_ExtractIconExW
0x18000B628: "__cdecl _native_startup_state" __native_startup_state
0x1800088A8: "IDiagER::AddFiles:Entry" ??_C@_0BI@FAFDANE@IDiagER?3?3AddFiles?3Entry?$AA@
0x180003A90: "public: virtual __int64 (__cdecl*__cdecl CIlKernel32::GetProcAddress(struct HINSTANCE__ * __ptr64,char const * __ptr64) __ptr64)(void)" ?GetProcAddress@CIlKernel32@@UEAAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x1800084F0: "/dw/GenericTwo.ASP?EventType=%s" ??_C@_1EA@IJIEJMAC@?$AA?1?$AAd?$AAw?$AA?1?$AAG?$AAe?$AAn?$AAe?$AAr?$AAi?$AAc?$AAT?$AAw?$AAo?$AA?4?$AAA?$AAS?$AAP?$AA?$DP?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$DN?$AA?$CF?$AAs?$AA?$AA@
0x180003660: "public: virtual void * __ptr64 __cdecl CIlKernel32::OpenProcess(unsigned long,int,unsigned long) __ptr64" ?OpenProcess@CIlKernel32@@UEAAPEAXKHK@Z
0x1800078A0: WDSCORE_NULL_THUNK_DATA
0x180003870: "public: virtual int __cdecl CIlKernel32::GetComputerNameW(unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?GetComputerNameW@CIlKernel32@@UEAAHPEAGPEAK@Z
0x180004660: "unsigned long __cdecl DiagERInitialize(unsigned short const * __ptr64,enum _DIAG_REPORT_TYPE,int)" ?DiagERInitialize@@YAKPEBGW4_DIAG_REPORT_TYPE@@H@Z
0x180007850: "__cdecl _imp_ShellExecuteExW" __imp_ShellExecuteExW
0x180009DCC: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x180001570: "public: virtual long __cdecl CIlWerApi::WerReportAddFile(void * __ptr64,unsigned short const * __ptr64,enum _WER_FILE_TYPE,unsigned long) __ptr64" ?WerReportAddFile@CIlWerApi@@UEAAJPEAXPEBGW4_WER_FILE_TYPE@@K@Z
0x180003110: "public: virtual unsigned __int64 __cdecl CIlKernel32::HeapCompact(void * __ptr64,unsigned long) __ptr64" ?HeapCompact@CIlKernel32@@UEAA_KPEAXK@Z
0x180007528: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x1800080D0: "CWfpER::AddFiles:Adding file=%s" ??_C@_0CA@FOKCBOHA@CWfpER?3?3AddFiles?3Adding?5file?$DN?$CFs?$AA@
0x1800032F0: "public: virtual int __cdecl CIlKernel32::ReadFile(void * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadFile@CIlKernel32@@UEAAHPEAX0KPEAKPEAU_OVERLAPPED@@@Z
0x1800034F0: "public: virtual int __cdecl CIlKernel32::RemoveDirectoryW(unsigned short const * __ptr64) __ptr64" ?RemoveDirectoryW@CIlKernel32@@UEAAHPEBG@Z
0x180003050: "public: virtual void * __ptr64 __cdecl CIlKernel32::GetCurrentProcess(void) __ptr64" ?GetCurrentProcess@CIlKernel32@@UEAAPEAXXZ
0x1800088C0: "Unable to allocate the file Name" ??_C@_0CM@NPJGIELJ@Unable?5to?5allocate?5the?5file?5Name@
0x180008940: "DiagERInitialize" ??_C@_1CC@IBCNFBLK@?$AAD?$AAi?$AAa?$AAg?$AAE?$AAR?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x1800078B0: "__cdecl _imp_free" __imp_free
0x1800035E0: "public: virtual int __cdecl CIlKernel32::CreateProcessA(char const * __ptr64,char * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,char const * __ptr64,struct _STARTUPINFOA * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessA@CIlKernel32@@UEAAHPEBDPEADPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOA@@PEAU_PROCESS_INFORMATION@@@Z
0x180005CA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800033E0: "public: virtual unsigned int __cdecl CIlKernel32::GetWindowsDirectoryW(unsigned short * __ptr64,unsigned int) __ptr64" ?GetWindowsDirectoryW@CIlKernel32@@UEAAIPEAGI@Z
0x180009DF4: "__cdecl _IMPORT_DESCRIPTOR_WDSCORE" __IMPORT_DESCRIPTOR_WDSCORE
0x1800039D0: "public: virtual void * __ptr64 __cdecl CIlKernel32::MapViewOfFile(void * __ptr64,unsigned long,unsigned long,unsigned long,unsigned __int64) __ptr64" ?MapViewOfFile@CIlKernel32@@UEAAPEAXPEAXKKK_K@Z
0x180007720: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x180003780: "public: virtual void * __ptr64 __cdecl CIlKernel32::CreateThread(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned __int64,unsigned long (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CreateThread@CIlKernel32@@UEAAPEAXPEAU_SECURITY_ATTRIBUTES@@_KP6AKPEAX@Z2KPEAK@Z
0x180003070: "public: virtual void * __ptr64 __cdecl CIlKernel32::HeapCreate(unsigned long,unsigned __int64,unsigned __int64) __ptr64" ?HeapCreate@CIlKernel32@@UEAAPEAXK_K0@Z
0x180006236: memset
0x180009E08: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800075E0: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]