Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wbem\wbemcons.dll Base=0x180000000 SHA-256=85819FE4942326A91133B79A65B6D012FF8F9E9E8E0FBD9038DB29AA95C6B950
PDB: wbemcons.pdb GUID={C017D03A-C22F-1615-E2F58F73FE598851} Age=1

860 located named symbols:
0x18000C178: "const CSimpleClassFactory<class CCommandLineConsumer>::`vftable'" ??_7?$CSimpleClassFactory@VCCommandLineConsumer@@@@6B@
0x180009F64: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000C828: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x18000C6A0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000C9B8: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x18000A140: "__cdecl FindPESection" _FindPESection
0x18000D400: "Filename" ??_C@_1BC@LFALPFEB@?$AAF?$AAi?$AAl?$AAe?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A8C0: "public: virtual unsigned long __cdecl CUnkInternal::Release(void) __ptr64" ?Release@CUnkInternal@@UEAAKXZ
0x18000C860: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180001250: "public: virtual void * __ptr64 __cdecl CCommandLineSink::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCommandLineSink@@UEAAPEAXI@Z
0x180005E88: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000C018: "const CImpl<struct IWbemProviderInit,class CLogFileConsumer>::`vftable'" ??_7?$CImpl@UIWbemProviderInit@@VCLogFileConsumer@@@@6B@
0x18000C600: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x180012058: "__vectorcall ??_R0?AVCX_Exception@" ??_R0?AVCX_Exception@@@8
0x180009760: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000D310: "NameOfRawDataProperty" ??_C@_1CM@CLDNGJBA@?$AAN?$AAa?$AAm?$AAe?$AAO?$AAf?$AAR?$AAa?$AAw?$AAD?$AAa?$AAt?$AAa?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?$AA@
0x180006100: "public: virtual void * __ptr64 __cdecl CLogFileConsumer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLogFileConsumer@@UEAAPEAXI@Z
0x180010428: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180010388: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x18000D1F8: WPP_ff53a114e8853e5f5869b54760d017a9_Traceguids
0x180004814: "public: __cdecl ScopeGuardImpl2<void (__cdecl*)(unsigned short * __ptr64 * __ptr64,unsigned long),unsigned short * __ptr64 * __ptr64,unsigned long>::~ScopeGuardImpl2<void (__cdecl*)(unsigned short * __ptr64 * __ptr64,unsigned long),unsigned short * __ptr64 * __ptr64,unsigned long>(void) __ptr64" ??1?$ScopeGuardImpl2@P6AXPEAPEAGK@ZPEAPEAGK@@QEAA@XZ
0x18000D768: "InprocServer32" ??_C@_1BO@MNKPAJEP@?$AAI?$AAn?$AAp?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18000A342: "__cdecl _tailMerge_oleaut32_dll" __tailMerge_oleaut32_dll
0x1800060C8: "public: __cdecl CBaseClassFactory::XClassFactory::~XClassFactory(void) __ptr64" ??1XClassFactory@CBaseClassFactory@@QEAA@XZ
0x1800120F0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001410: "public: virtual long __cdecl CCommandLineConsumer::XProvider::FindConsumer(struct IWbemClassObject * __ptr64,struct IWbemUnboundObjectSink * __ptr64 * __ptr64) __ptr64" ?FindConsumer@XProvider@CCommandLineConsumer@@UEAAJPEAUIWbemClassObject@@PEAPEAUIWbemUnboundObjectSink@@@Z
0x180004AC0: "public: virtual void * __ptr64 __cdecl CLogFileConsumer::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CLogFileConsumer@@UEAAPEAXAEBU_GUID@@@Z
0x18000D260: "EventID" ??_C@_1BA@DOCKEDMK@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAI?$AAD?$AA?$AA@
0x180009E3C: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x1800096CC: "void __cdecl _com_raise_error(long,struct IErrorInfo * __ptr64)" ?_com_raise_error@@YAXJPEAUIErrorInfo@@@Z
0x18000D340: "NameOfUserSIDProperty" ??_C@_1CM@CDLKFIBL@?$AAN?$AAa?$AAm?$AAe?$AAO?$AAf?$AAU?$AAs?$AAe?$AAr?$AAS?$AAI?$AAD?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?$AA@
0x180007BFC: WPP_SF_LS
0x18000D6B0: "Description" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000952C: "public: __cdecl ScopeGuardImpl1<long (__cdecl*)(struct HKEY__ * __ptr64),struct HKEY__ * __ptr64>::~ScopeGuardImpl1<long (__cdecl*)(struct HKEY__ * __ptr64),struct HKEY__ * __ptr64>(void) __ptr64" ??1?$ScopeGuardImpl1@P6AJPEAUHKEY__@@@ZPEAU1@@@QEAA@XZ
0x18000C6F8: "__cdecl _imp_LCMapStringW" __imp_LCMapStringW
0x180001314: "public: __cdecl CCommandLineSink::XSink::~XSink(void) __ptr64" ??1XSink@CCommandLineSink@@QEAA@XZ
0x1800097DC: "__cdecl CRT_INIT" _CRT_INIT
0x18000C710: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180009CB6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180012690: "__cdecl _hmod__api_ms_win_security_lsalookup_l2_1_0_dll" __hmod__api_ms_win_security_lsalookup_l2_1_0_dll
0x1800128B0: "class CStaticCritSec g_CS" ?g_CS@@3VCStaticCritSec@@A
0x18000134C: WPP_SF_L
0x18000CAC8: "__cdecl _imp_??0CFlexArray@@QEAA@HH@Z" __imp_??0CFlexArray@@QEAA@HH@Z
0x180007B84: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180008B40: WppControlCallback
0x18000D048: "XCoordinate" ??_C@_1BI@FBPFPCLL@?$AAX?$AAC?$AAo?$AAo?$AAr?$AAd?$AAi?$AAn?$AAa?$AAt?$AAe?$AA?$AA@
0x18000A7B7: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x18000AA30: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000C698: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000D078: "XSize" ??_C@_1M@IFJLLKCP@?$AAX?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000C2B8: "const CMyServer::`vftable'" ??_7CMyServer@@6B@
0x18000D4E8: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x18000CAE8: "__cdecl _imp_?Leave@CCritSec@@QEAAXXZ" __imp_?Leave@CCritSec@@QEAAXXZ
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CCommandLineConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSimpleClassFactory@VCCommandLineConsumer@@@@UEAAPEAXI@Z
0x180001DB8: "long __cdecl GetSidUse(void * __ptr64,enum _SID_NAME_USE & __ptr64)" ?GetSidUse@@YAJPEAXAEAW4_SID_NAME_USE@@@Z
0x180006520: "public: virtual long __cdecl CSimpleClassFactory<class CLogFileConsumer>::LockServer(int) __ptr64" ?LockServer@?$CSimpleClassFactory@VCLogFileConsumer@@@@UEAAJH@Z
0x18000C968: "__cdecl _imp_wcstoul" __imp_wcstoul
0x180006E00: "public: virtual unsigned long __cdecl CImpl<struct IClassFactory,class CBaseClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIClassFactory@@VCBaseClassFactory@@@@UEAAKXZ
0x180008D70: DllGetClassObject
0x18000C998: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18000D928: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000C750: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x1800128F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdyvnUdrmntngUxlnoryUxlnwoohePfkovevoUlyquivUznwGEUkivxlnkOlyq@comdllsv_uplevel" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdyvnUdrmntngUxlnoryUxlnwoohePfkovevoUlyquivUznwGEUkivxlnkOlyq@comdllsv_uplevel
0x18000D798: "Free" ??_C@_19DFGFOPFL@?$AAF?$AAr?$AAe?$AAe?$AA?$AA@
0x18000C680: "__cdecl _imp_GetFileType" __imp_GetFileType
0x18000CA30: "__cdecl _imp_??0CVarVector@@QEAA@HPEAUtagSAFEARRAY@@H@Z" __imp_??0CVarVector@@QEAA@HPEAUtagSAFEARRAY@@H@Z
0x180010324: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180008BFC: "long __cdecl EnsureInitialized(void)" ?EnsureInitialized@@YAJXZ
0x18000C018: "const CImpl<struct IWbemUnboundObjectSink,class CCommandLineSink>::`vftable'" ??_7?$CImpl@UIWbemUnboundObjectSink@@VCCommandLineSink@@@@6B@
0x18000C6C8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180010188: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x18000C970: "__cdecl _imp_wcschr" __imp_wcschr
0x18000A41B: "__cdecl _imp_load_NetGetDCName" __imp_load_NetGetDCName
0x180002B10: "public: virtual void * __ptr64 __cdecl CCommandLineSink::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CCommandLineSink@@UEAAPEAXAEBU_GUID@@@Z
0x18000C7C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180007424: "public: __cdecl CKillerTimer::~CKillerTimer(void) __ptr64" ??1CKillerTimer@@QEAA@XZ
0x180005990: "public: virtual long __cdecl CLogFileSink::XSink::IndicateToConsumer(struct IWbemClassObject * __ptr64,long,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?IndicateToConsumer@XSink@CLogFileSink@@UEAAJPEAUIWbemClassObject@@JPEAPEAU3@@Z
0x180009640: "public: __cdecl _com_error::_com_error(class _com_error const & __ptr64) __ptr64" ??0_com_error@@QEAA@AEBV0@@Z
0x180014070: "__cdecl _imp_WTSQuerySessionInformationW" __imp_WTSQuerySessionInformationW
0x180009D68: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x18000CA70: "__cdecl _imp_?StripWs@WString@@QEAAAEAV1@H@Z" __imp_?StripWs@WString@@QEAAAEAV1@H@Z
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CLogFileConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSimpleClassFactory@VCLogFileConsumer@@@@UEAAPEAXI@Z
0x18000CB78: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001314: "public: __cdecl CLogFileSink::XSink::~XSink(void) __ptr64" ??1XSink@CLogFileSink@@QEAA@XZ
0x18000C6F0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x18000C6D0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000A3C1: "__cdecl _imp_load_VariantInit" __imp_load_VariantInit
0x18000C668: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180009DD8: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemProviderInit,class CLogFileConsumer>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemProviderInit@@VCLogFileConsumer@@@@UEAAKXZ
0x18000D208: WPP_ThisDir_CTLGUID_WMI_Tracing_Client_Operations_Info_Guid
0x18000FFD8: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLN
0x18000C3A0: "const CLogFileConsumer::XInit::`vftable'" ??_7XInit@CLogFileConsumer@@6B@
0x18000C038: "const CCommandLineSink::`vftable'" ??_7CCommandLineSink@@6B@
0x18000FFC8: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x180014098: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x180010158: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLB
0x1800101A0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x1800140A8: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLA
0x180001250: "public: virtual void * __ptr64 __cdecl CCommandLineSink::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCommandLineSink@@UEAAPEAXI@Z
0x18000A123: "__cdecl XcptFilter" _XcptFilter
0x18000CF58: "UseDefaultErrorMode" ??_C@_1CI@PAGFLBCB@?$AAU?$AAs?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAE?$AAr?$AAr?$AAo?$AAr?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x18000CB80: "__cdecl _xc_a" __xc_a
0x18000FDC8: "__cdecl TI1?AV_com_error@@" _TI1?AV_com_error@@
0x18000CFD8: "CreateSeparateWowVdm" ??_C@_1CK@INFEIOCK@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAp?$AAa?$AAr?$AAa?$AAt?$AAe?$AAW?$AAo?$AAw?$AAV?$AAd?$AAm?$AA?$AA@
0x18000C908: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18000C730: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x18000CAA0: "__cdecl _imp_?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z" __imp_?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000D8F8: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180006100: "public: virtual void * __ptr64 __cdecl CLogFileConsumer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLogFileConsumer@@UEAAPEAXI@Z
0x18000C368: "const CLogFileConsumer::`vftable'" ??_7CLogFileConsumer@@6B@
0x18000A854: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x1800140B0: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18000D248: "SourceName" ??_C@_1BG@EPDFFEFJ@?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180006F70: "public: long __cdecl CProcKillerTimer::ScheduleAssassination(void * __ptr64,struct _FILETIME) __ptr64" ?ScheduleAssassination@CProcKillerTimer@@QEAAJPEAXU_FILETIME@@@Z
0x18000C348: "const CCommandLineConsumer::XProvider::`vftable'" ??_7XProvider@CCommandLineConsumer@@6B@
0x1800060B0: "public: virtual __cdecl CSimpleClassFactory<class CCommandLineConsumer>::~CSimpleClassFactory<class CCommandLineConsumer>(void) __ptr64" ??1?$CSimpleClassFactory@VCCommandLineConsumer@@@@UEAA@XZ
0x180001ED0: "bool __cdecl GetLoggedOnUserViaTS(void * __ptr64 & __ptr64)" ?GetLoggedOnUserViaTS@@YA_NAEAPEAX@Z
0x1800140B8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x18000A30B: "__cdecl lock" _lock
0x18000C140: "const CSimpleClassFactory<class CLogFileConsumer>::`vftable'" ??_7?$CSimpleClassFactory@VCLogFileConsumer@@@@6B@
0x18000D3C8: "001" ??_C@_17FDPNOLIC@?$AA0?$AA0?$AA1?$AA?$AA@
0x18000CA28: "__cdecl _imp_?OnInitialize@CUnk@@UEAAHXZ" __imp_?OnInitialize@CUnk@@UEAAHXZ
0x18000CD54: "__cdecl _guard_iat_table" __guard_iat_table
0x18000AA05: memcpy
0x18000C5B8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000C898: "__cdecl _imp_?IsUserInGroup@@YAJPEAX0@Z" __imp_?IsUserInGroup@@YAJPEAX0@Z
0x18000D1A8: "\Default" ??_C@_1BC@GEJDPPEB@?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180006E20: "public: virtual long __cdecl CImpl<struct IClassFactory,class CBaseClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIClassFactory@@VCBaseClassFactory@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000CB60: "__cdecl _imp_??1CInCritSec@@QEAA@XZ" __imp_??1CInCritSec@@QEAA@XZ
0x18000A980: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180003F20: "void __cdecl FreeBSTRArray(unsigned short * __ptr64 * __ptr64,unsigned long)" ?FreeBSTRArray@@YAXPEAPEAGK@Z
0x18000C988: "__cdecl _imp_memset" __imp_memset
0x18000C7D0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CCommandLineConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSimpleClassFactory@VCCommandLineConsumer@@@@UEAAPEAXI@Z
0x18000A2FF: "__cdecl initterm" _initterm
0x18000CDC0: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x18000C018: "const CImpl<struct IWbemEventConsumerProvider,class CCommandLineConsumer>::`vftable'" ??_7?$CImpl@UIWbemEventConsumerProvider@@VCCommandLineConsumer@@@@6B@
0x18000D918: "IsValidSid" ??_C@_0L@KJHKJIPF@IsValidSid?$AA@
0x180010310: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180012920: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000C7E8: "__cdecl _imp_Sleep" __imp_Sleep
0x18000CBC8: "__cdecl _xi_z" __xi_z
0x18000D788: "Both" ??_C@_19OBNAGCDI@?$AAB?$AAo?$AAt?$AAh?$AA?$AA@
0x18000C658: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000A409: "__cdecl _imp_load_SafeArrayAccessData" __imp_load_SafeArrayAccessData
0x18000C9B0: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000A117: "__cdecl _C_specific_handler" __C_specific_handler
0x180008BD0: "public: virtual int __cdecl CDllLifeControl::ObjectCreated(struct IUnknown * __ptr64) __ptr64" ?ObjectCreated@CDllLifeControl@@UEAAHPEAUIUnknown@@@Z
0x18000CA10: "__cdecl _imp_?AddRef@CUnk@@UEAAKXZ" __imp_?AddRef@CUnk@@UEAAKXZ
0x18000D180: "CreatorSid" ??_C@_1BG@COFLAIOM@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAo?$AAr?$AAS?$AAi?$AAd?$AA?$AA@
0x18001043C: "__cdecl _IMPORT_DESCRIPTOR_esscli" __IMPORT_DESCRIPTOR_esscli
0x180006520: "public: virtual long __cdecl CSimpleClassFactory<class CCommandLineConsumer>::LockServer(int) __ptr64" ?LockServer@?$CSimpleClassFactory@VCCommandLineConsumer@@@@UEAAJH@Z
0x1800140D8: netutils_NULL_THUNK_DATA_DLA
0x180010168: netutils_NULL_THUNK_DATA_DLB
0x18000C928: "__cdecl _imp__onexit" __imp__onexit
0x180010008: netutils_NULL_THUNK_DATA_DLN
0x180012720: WPP_REGISTRATION_GUIDS
0x18000CF80: "CreateNewConsole" ??_C@_1CC@OMCHHNKG@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAN?$AAe?$AAw?$AAC?$AAo?$AAn?$AAs?$AAo?$AAl?$AAe?$AA?$AA@
0x18000398C: "private: long __cdecl CEventLogSink::XSink::GetDatDataVariant(struct IWbemClassObject * __ptr64,unsigned short * __ptr64,struct tagVARIANT & __ptr64) __ptr64" ?GetDatDataVariant@XSink@CEventLogSink@@AEAAJPEAUIWbemClassObject@@PEAGAEAUtagVARIANT@@@Z
0x18000D890: CLSID_WbemLocator
0x18000C6B8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000C768: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000A91C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800126A8: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x18000D120: "ForceOnFeedback" ??_C@_1CA@DLOIOGEO@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAO?$AAn?$AAF?$AAe?$AAe?$AAd?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x18000D288: "Category" ??_C@_1BC@HGNJEICC@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AA?$AA@
0x180012008: "struct _LIST_ENTRY g_ClassInfoHead" ?g_ClassInfoHead@@3U_LIST_ENTRY@@A
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CLogFileConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSimpleClassFactory@VCLogFileConsumer@@@@UEAAPEAXI@Z
0x18000D030: "Priority" ??_C@_1BC@JHNNEHFE@?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x18000D008: "CreateSharedWowVdm" ??_C@_1CG@LHAMDEHN@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAW?$AAo?$AAw?$AAV?$AAd?$AAm?$AA?$AA@
0x180008E90: DllCanUnloadNow
0x180007EC0: "public: virtual void * __ptr64 __cdecl CClassInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_ECClassInfo@@UEAAPEAXI@Z
0x18000A3D3: "__cdecl _imp_load_VariantClear" __imp_load_VariantClear
0x180005DE4: "public: __cdecl CDeleteMe<unsigned char>::~CDeleteMe<unsigned char>(void) __ptr64" ??1?$CDeleteMe@E@@QEAA@XZ
0x18000C7A8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1800126D0: WPP_MAIN_CB
0x18000C018: "const CImpl<struct IWbemEventConsumerProvider,class CEventLogConsumer>::`vftable'" ??_7?$CImpl@UIWbemEventConsumerProvider@@VCEventLogConsumer@@@@6B@
0x1800102E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000C760: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000A12F: "__cdecl amsg_exit" _amsg_exit
0x18000C940: "__cdecl _imp__wfindnexti64" __imp__wfindnexti64
0x180008C8C: "long __cdecl EnsureUninitialized(void)" ?EnsureUninitialized@@YAJXZ
0x18000CE70: "__cdecl _sz_WTSAPI32_dll" __sz_WTSAPI32_dll
0x180014038: "__cdecl _imp_VariantChangeType" __imp_VariantChangeType
0x18000A8B0: "public: virtual int __cdecl CUnk::OnInitialize(void) __ptr64" ?OnInitialize@CUnk@@UEAAHXZ
0x18000CE50: IID_IClassFactory
0x18000D3B0: ".*" ??_C@_15LMBEHFEA@?$AA?4?$AA?$CK?$AA?$AA@
0x18000D924: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000C618: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180004848: "public: __cdecl wmilib::auto_ptr<class CEventLogSink>::~auto_ptr<class CEventLogSink>(void) __ptr64" ??1?$auto_ptr@VCEventLogSink@@@wmilib@@QEAA@XZ
0x18000D228: "UNCServerName" ??_C@_1BM@CEIJGAAC@?$AAU?$AAN?$AAC?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000CA68: "__cdecl _imp_??1CStaticCritSec@@QEAA@XZ" __imp_??1CStaticCritSec@@QEAA@XZ
0x18000D1C0: "AccessCheck" ??_C@_1BI@BMNDLBLB@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x18000CA60: "__cdecl _imp_??0CStaticCritSec@@QEAA@XZ" __imp_??0CStaticCritSec@@QEAA@XZ
0x18000CB18: "__cdecl _imp_?anyFailure@CStaticCritSec@@SAHXZ" __imp_?anyFailure@CStaticCritSec@@SAHXZ
0x18000C800: "__cdecl _imp_CreateWaitableTimerW" __imp_CreateWaitableTimerW
0x18000D640: WPP_e84440974d2c3701640dfda4c3df5fcd_Traceguids
0x180002BF0: "public: virtual void * __ptr64 __cdecl CEventLogSink::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEventLogSink@@UEAAPEAXI@Z
0x1800084FC: "long __cdecl UnregisterServer(struct CClassInfo * __ptr64,int)" ?UnregisterServer@@YAJPEAUCClassInfo@@H@Z
0x18000CB00: "__cdecl _imp_??0CCritSec@@QEAA@XZ" __imp_??0CCritSec@@QEAA@XZ
0x18000CAF8: "__cdecl _imp_??1CCritSec@@QEAA@XZ" __imp_??1CCritSec@@QEAA@XZ
0x1800126A0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x18000D840: WPP_269834737441394fe55d57885cf32657_Traceguids
0x18000D860: IID_IWbemUnboundObjectSink
0x18000CA90: "__cdecl _imp_?Release@CUnkInternal@@UEAAKXZ" __imp_?Release@CUnkInternal@@UEAAKXZ
0x1800060E0: "public: virtual long __cdecl CComServer::PostUninitialize(void) __ptr64" ?PostUninitialize@CComServer@@UEAAJXZ
0x180003CA0: "private: void __cdecl CEventLogSink::XSink::GetDatSID(struct IWbemClassObject * __ptr64,unsigned short * __ptr64,void * __ptr64 & __ptr64) __ptr64" ?GetDatSID@XSink@CEventLogSink@@AEAAXPEAUIWbemClassObject@@PEAGAEAPEAX@Z
0x18000C8E8: "__cdecl _imp__lock" __imp__lock
0x18000C7A0: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180009F44: atexit
0x18000D650: WPP_75dcf71f422533b94b58bbc17ea73db9_Traceguids
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CLogFileConsumer>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemEventConsumerProvider@@VCLogFileConsumer@@@@UEAAKXZ
0x18000A5CE: "__cdecl _imp_load_VariantChangeType" __imp_load_VariantChangeType
0x18000FFB8: WTSAPI32_NULL_THUNK_DATA_DLN
0x18000C9E0: "__cdecl _imp_?GetMemLogObject@@YAPEAVCMemoryLog@@XZ" __imp_?GetMemLogObject@@YAPEAVCMemoryLog@@XZ
0x180014088: WTSAPI32_NULL_THUNK_DATA_DLA
0x1800101D0: WTSAPI32_NULL_THUNK_DATA_DLB
0x18000CB50: "__cdecl _imp_??1CUnk@@UEAA@XZ" __imp_??1CUnk@@UEAA@XZ
0x18000C5F0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x180005DE4: "public: __cdecl CDeleteMe<char>::~CDeleteMe<char>(void) __ptr64" ??1?$CDeleteMe@D@@QEAA@XZ
0x18000A3E5: "__cdecl _imp_load_SafeArrayUnaccessData" __imp_load_SafeArrayUnaccessData
0x18000C7B8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180012688: "__cdecl _hmod__logoncli_dll" __hmod__logoncli_dll
0x180014080: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x18000C778: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000D098: "XNumCharacters" ??_C@_1BO@DFNHDIN@?$AAX?$AAN?$AAu?$AAm?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180001130: "public: __cdecl SafeIntException::SafeIntException(int) __ptr64" ??0SafeIntException@@QEAA@H@Z
0x18000D7C0: "ThreadingModel" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x180012768: "class ErrorObj StaticErrorObj" ?StaticErrorObj@@3VErrorObj@@A
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CCommandLineSink>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemUnboundObjectSink@@VCCommandLineSink@@@@UEAAKXZ
0x18000CA80: "__cdecl _imp_??4WString@@QEAAAEAV0@PEBG@Z" __imp_??4WString@@QEAAAEAV0@PEBG@Z
0x18000C660: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemEventConsumerProvider,class CLogFileConsumer>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemEventConsumerProvider@@VCLogFileConsumer@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemEventConsumerProvider,class CEventLogConsumer>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemEventConsumerProvider@@VCEventLogConsumer@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000C488: "const _com_error::`vftable'" ??_7_com_error@@6B@
0x18000CE30: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x18000D3E8: "CreateFile" ??_C@_1BG@FJAIHLKM@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x18000CA38: "__cdecl _imp_??1CVarVector@@QEAA@XZ" __imp_??1CVarVector@@QEAA@XZ
0x18000C718: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000D7A8: "Apartment" ??_C@_1BE@LIAIMCOB@?$AAA?$AAp?$AAa?$AAr?$AAt?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x180002B38: "public: __cdecl CWbemPtr<class CLogFileConsumer>::~CWbemPtr<class CLogFileConsumer>(void) __ptr64" ??1?$CWbemPtr@VCLogFileConsumer@@@@QEAA@XZ
0x18000A323: "__cdecl _dllonexit" __dllonexit
0x18000D1D8: "CreateProcess" ??_C@_1BM@MMIOBBBF@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18000CA18: "__cdecl _imp_?Initialize@CUnk@@UEAAHXZ" __imp_?Initialize@CUnk@@UEAAHXZ
0x18000FDE8: "__cdecl CT??_R0?AV_com_error@@@8??0_com_error@@QEAA@AEBV0@@Z32" _CT??_R0?AV_com_error@@@8??0_com_error@@QEAA@AEBV0@@Z32
0x180005FF0: "public: virtual long __cdecl CBaseClassFactory::XClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@XClassFactory@CBaseClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000C9F0: "__cdecl _imp_??YWString@@QEAAAEAV0@PEBG@Z" __imp_??YWString@@QEAAAEAV0@PEBG@Z
0x1800048AC: "public: __cdecl CSysFreeMe::~CSysFreeMe(void) __ptr64" ??1CSysFreeMe@@QEAA@XZ
0x1800128E8: "class CComServer * __ptr64 __ptr64 g_pServer" ?g_pServer@@3PEAVCComServer@@EA
0x180012900: "__cdecl _native_startup_lock" __native_startup_lock
0x180009298: DllMain
0x18000A8E0: "public: virtual long __cdecl CUnkInternal::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000C090: "const CEventLogSink::`vftable'" ??_7CEventLogSink@@6B@
0x180002CB8: "public: __cdecl _variant_t::~_variant_t(void) __ptr64" ??1_variant_t@@QEAA@XZ
0x18000FD30: "__cdecl CTA2?AVSafeIntException@@" _CTA2?AVSafeIntException@@
0x180010338: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CLogFileSink>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemUnboundObjectSink@@VCLogFileSink@@@@UEAAKXZ
0x18000C878: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000C900: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CEventLogConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSimpleClassFactory@VCEventLogConsumer@@@@UEAAPEAXI@Z
0x180006DE0: "public: virtual unsigned long __cdecl CImpl<struct IClassFactory,class CBaseClassFactory>::Release(void) __ptr64" ?Release@?$CImpl@UIClassFactory@@VCBaseClassFactory@@@@UEAAKXZ
0x180006C60: "public: virtual long __cdecl CClassFactory<class CLogFileConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CClassFactory@VCLogFileConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000C788: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180007D5C: "long __cdecl CreatePathString(unsigned short * __ptr64,int,unsigned short * __ptr64,unsigned short * __ptr64)" ?CreatePathString@@YAJPEAGH00@Z
0x18000C6E8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000C5C0: KERNEL32_NULL_THUNK_DATA
0x18000FF48: ADVAPI32_NULL_THUNK_DATA_DLN
0x1800101B0: ADVAPI32_NULL_THUNK_DATA_DLB
0x180014018: ADVAPI32_NULL_THUNK_DATA_DLA
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CEventLogConsumer>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemEventConsumerProvider@@VCEventLogConsumer@@@@UEAAKXZ
0x18000C648: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000C6B0: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180007EC0: "public: virtual void * __ptr64 __cdecl CClassInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClassInfo@@UEAAPEAXI@Z
0x1800120E0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000A8F8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CEventLogSink>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemUnboundObjectSink@@VCEventLogSink@@@@UEAAKXZ
0x180002E30: "public: virtual long __cdecl CEventLogConsumer::XProvider::FindConsumer(struct IWbemClassObject * __ptr64,struct IWbemUnboundObjectSink * __ptr64 * __ptr64) __ptr64" ?FindConsumer@XProvider@CEventLogConsumer@@UEAAJPEAUIWbemClassObject@@PEAPEAUIWbemUnboundObjectSink@@@Z
0x180008BF0: "public: virtual void __cdecl CDllLifeControl::AddRef(struct IUnknown * __ptr64) __ptr64" ?AddRef@CDllLifeControl@@UEAAXPEAUIUnknown@@@Z
0x18000C9C0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000C120: "const CLogFileSink::XSink::`vftable'" ??_7XSink@CLogFileSink@@6B@
0x180001560: "public: virtual void * __ptr64 __cdecl CEventLogConsumer::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CEventLogConsumer@@UEAAPEAXAEBU_GUID@@@Z
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CCommandLineConsumer>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemEventConsumerProvider@@VCCommandLineConsumer@@@@UEAAKXZ
0x18000CB68: wbemcomn_NULL_THUNK_DATA
0x18000C018: "const CImpl<struct IWbemUnboundObjectSink,class CEventLogSink>::`vftable'" ??_7?$CImpl@UIWbemUnboundObjectSink@@VCEventLogSink@@@@6B@
0x1800047E4: "public: __cdecl ScopeGuardImpl1<void (__cdecl*)(class CTextTemplate * __ptr64),class CTextTemplate * __ptr64>::~ScopeGuardImpl1<void (__cdecl*)(class CTextTemplate * __ptr64),class CTextTemplate * __ptr64>(void) __ptr64" ??1?$ScopeGuardImpl1@P6AXPEAVCTextTemplate@@@ZPEAV1@@@QEAA@XZ
0x18000CED8: "WorkingDirectory" ??_C@_1CC@OKKIFLHO@?$AAW?$AAo?$AAr?$AAk?$AAi?$AAn?$AAg?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x18000C870: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18000A793: "__cdecl _imp_load_RegisterEventSourceW" __imp_load_RegisterEventSourceW
0x180007190: "protected: static void __cdecl CKillerTimer::ThreadStartRoutine(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?ThreadStartRoutine@CKillerTimer@@KAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x18000C8A0: "__cdecl _imp_?IsUserAdministrator@@YAJPEAX@Z" __imp_?IsUserAdministrator@@YAJPEAX@Z
0x18000CE80: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000D0B8: "YNumCharacters" ??_C@_1BO@DPDNJAIF@?$AAY?$AAN?$AAu?$AAm?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18000CA58: "__cdecl _imp_??_FCTextTemplate@@QEAAXXZ" __imp_??_FCTextTemplate@@QEAAXXZ
0x18000CAD8: "__cdecl _imp_??ACFlexArray@@QEAAAEAPEAXH@Z" __imp_??ACFlexArray@@QEAAAEAPEAXH@Z
0x1800104A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000C720: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000FD70: "__stdcall CT??_R0?AVSafeIntException@@" _CT??_R0?AVSafeIntException@@@84
0x1800061D0: "protected: virtual long __cdecl CMyServer::Initialize(void) __ptr64" ?Initialize@CMyServer@@MEAAJXZ
0x18000D510: WPP_ebf53fb7bcf234ca3ff127190230a443_Traceguids
0x18000D924: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000D570: "Command Line Event Consumer Prov" ??_C@_1EK@BLFLDHPI@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAe?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAo?$AAn?$AAs?$AAu?$AAm?$AAe?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAv@
0x18000A1F0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180002BF0: "public: virtual void * __ptr64 __cdecl CEventLogSink::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEventLogSink@@UEAAPEAXI@Z
0x1800066A0: "public: virtual long __cdecl CClassFactory<class CEventLogConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CClassFactory@VCEventLogConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000CE40: IID_IUnknown
0x180001588: "public: long __cdecl CCommandLineSink::Initialize(struct IWbemClassObject * __ptr64) __ptr64" ?Initialize@CCommandLineSink@@QEAAJPEAUIWbemClassObject@@@Z
0x180009688: "public: virtual __cdecl _com_error::~_com_error(void) __ptr64" ??1_com_error@@UEAA@XZ
0x180005F60: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1800127A0: "class CProcKillerTimer g_procKillerTimer" ?g_procKillerTimer@@3VCProcKillerTimer@@A
0x18000C9E8: "__cdecl _imp_?Empty@WString@@QEAAXXZ" __imp_?Empty@WString@@QEAAXXZ
0x18001034C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001328: WPP_SF_
0x180006960: "public: virtual long __cdecl CClassFactory<class CCommandLineConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CClassFactory@VCCommandLineConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000CEB0: "CommandLineTemplate" ??_C@_1CI@ONBPIOJ@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAL?$AAi?$AAn?$AAe?$AAT?$AAe?$AAm?$AAp?$AAl?$AAa?$AAt?$AAe?$AA?$AA@
0x18000C5C8: "__cdecl _imp_CloseWindowStation" __imp_CloseWindowStation
0x18000FF0C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180012020: "class CDllLifeControl g_LifeControl" ?g_LifeControl@@3VCDllLifeControl@@A
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CLogFileConsumer>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemEventConsumerProvider@@VCLogFileConsumer@@@@UEAAKXZ
0x18000C5D0: "__cdecl _imp_OpenWindowStationW" __imp_OpenWindowStationW
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemUnboundObjectSink,class CEventLogSink>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemUnboundObjectSink@@VCEventLogSink@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009A20: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000C8D0: "__cdecl _imp__initterm" __imp__initterm
0x18000A7C3: "__cdecl _tailMerge_wtsapi32_dll" __tailMerge_wtsapi32_dll
0x1800103C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000C5A8: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x18000C328: "const CEventLogConsumer::XProvider::`vftable'" ??_7XProvider@CEventLogConsumer@@6B@
0x180003844: "private: long __cdecl CEventLogSink::XSink::GetDatEmbeddedObjectOut(struct IWbemClassObject * __ptr64,unsigned short * __ptr64,struct IWbemClassObject * __ptr64 & __ptr64) __ptr64" ?GetDatEmbeddedObjectOut@XSink@CEventLogSink@@AEAAJPEAUIWbemClassObject@@PEAGAEAPEAU3@@Z
0x18000C608: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18000C5A0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18001048C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180012698: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x18000C6D8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180002B38: "public: __cdecl CWbemPtr<class CCommandLineConsumer>::~CWbemPtr<class CCommandLineConsumer>(void) __ptr64" ??1?$CWbemPtr@VCCommandLineConsumer@@@@QEAA@XZ
0x180001140: "int __cdecl wbem_wcsicmp(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?wbem_wcsicmp@@YAHPEBG0@Z
0x18000A3F7: "__cdecl _imp_load_SafeArrayGetUBound" __imp_load_SafeArrayGetUBound
0x1800103D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000D5C0: "NT Event Log Event Consumer Prov" ??_C@_1EK@CAEHAMNA@?$AAN?$AAT?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAL?$AAo?$AAg?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAo?$AAn?$AAs?$AAu?$AAm?$AAe?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAv@
0x180006030: "public: virtual void * __ptr64 __cdecl CBaseClassFactory::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CBaseClassFactory@@UEAAPEAXAEBU_GUID@@@Z
0x180004FCC: "protected: long __cdecl CLogFileSink::GetFileHandle(void * __ptr64 & __ptr64) __ptr64" ?GetFileHandle@CLogFileSink@@IEAAJAEAPEAX@Z
0x18000CA88: "__cdecl _imp_??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z" __imp_??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
0x180006060: "public: virtual void * __ptr64 __cdecl CSimpleClassFactory<class CEventLogConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSimpleClassFactory@VCEventLogConsumer@@@@UEAAPEAXI@Z
0x18000C960: "__cdecl _imp__wfindfirsti64" __imp__wfindfirsti64
0x18000D6E0: "__ExtendedStatus" ??_C@_1CC@BDPEAPKB@?$AA_?$AA_?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemUnboundObjectSink,class CLogFileSink>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemUnboundObjectSink@@VCLogFileSink@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180012910: "__cdecl _onexitend" __onexitend
0x18000D2D8: "InsertionStringTemplates" ??_C@_1DC@FMIDEBAH@?$AAI?$AAn?$AAs?$AAe?$AAr?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAT?$AAe?$AAm?$AAp?$AAl?$AAa?$AAt?$AAe?$AAs?$AA?$AA@
0x18000A317: "__cdecl unlock" _unlock
0x1800095B4: "public: __cdecl _com_error::_com_error(long,struct IErrorInfo * __ptr64,bool) __ptr64" ??0_com_error@@QEAA@JPEAUIErrorInfo@@_N@Z
0x18000CB70: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000A8D0: "public: virtual unsigned long __cdecl CUnkInternal::AddRef(void) __ptr64" ?AddRef@CUnkInternal@@UEAAKXZ
0x180002B60: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CLogFileSink>::Release(void) __ptr64" ?Release@?$CImpl@UIWbemUnboundObjectSink@@VCLogFileSink@@@@UEAAKXZ
0x18000A714: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x18000CB58: "__cdecl _imp_??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z" __imp_??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z
0x18000C920: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180004A90: "public: virtual long __cdecl CLogFileConsumer::XInit::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@XInit@CLogFileConsumer@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x180009D00: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18000C728: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000A53D: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x18000C5E8: USER32_NULL_THUNK_DATA
0x18000FE0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll" __DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll
0x18000CB30: "__cdecl _imp_?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z" __imp_?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180014008: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18000C948: "__cdecl _imp_swscanf" __imp_swscanf
0x18000C958: "__cdecl _imp__findclose" __imp__findclose
0x180007F1C: "long __cdecl RegisterServer(struct CClassInfo * __ptr64,int)" ?RegisterServer@@YAJPEAUCClassInfo@@H@Z
0x18000CD80: "__cdecl _sz_logoncli_dll" __sz_logoncli_dll
0x18000D6C8: "StatusCode" ??_C@_1BG@FBDFHBHC@?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18000D2A0: "NumberOfInsertionStrings" ??_C@_1DC@KFMDCPFD@?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AAO?$AAf?$AAI?$AAn?$AAs?$AAe?$AAr?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x1800126B8: "__cdecl _hmod__WTSAPI32_dll" __hmod__WTSAPI32_dll
0x180003ED0: "void __cdecl ArrayDelete(class CTextTemplate * __ptr64)" ?ArrayDelete@@YAXPEAVCTextTemplate@@@Z
0x18000D3A8: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x180014020: "__cdecl _imp_SafeArrayUnaccessData" __imp_SafeArrayUnaccessData
0x180007580: "public: long __cdecl CKillerTimer::ScheduleAssassination(class CKiller * __ptr64) __ptr64" ?ScheduleAssassination@CKillerTimer@@QEAAJPEAVCKiller@@@Z
0x18000C820: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000CBB8: "__cdecl _xi_a" __xi_a
0x18000D830: WPP_f858f8c1557c3846f705d1f24e652b28_Traceguids
0x18000C818: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000CAF0: "__cdecl _imp_?Enter@CCritSec@@QEAAXXZ" __imp_?Enter@CCritSec@@QEAAXXZ
0x18000C620: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000C638: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000D270: "EventType" ??_C@_1BE@OGEKKHM@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180001560: "public: virtual void * __ptr64 __cdecl CCommandLineConsumer::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CCommandLineConsumer@@UEAAPEAXAEBU_GUID@@@Z
0x18000C8C8: "__cdecl _imp__unlock" __imp__unlock
0x180014048: "__cdecl _imp_SetErrorInfo" __imp_SetErrorInfo
0x1800060E0: "public: virtual long __cdecl CComServer::Unregister(void) __ptr64" ?Unregister@CComServer@@UEAAJXZ
0x18000D870: IID_IWbemProviderInit
0x18000C890: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800126B0: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x1800140C8: logoncli_NULL_THUNK_DATA_DLA
0x180010148: logoncli_NULL_THUNK_DATA_DLB
0x18000FFF8: logoncli_NULL_THUNK_DATA_DLN
0x18000C450: "const CKiller::`vftable'" ??_7CKiller@@6B@
0x1800140D0: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x18000A708: "__cdecl _imp_load_DeregisterEventSource" __imp_load_DeregisterEventSource
0x18000955C: "class ScopeGuardImpl1<long (__cdecl*)(struct HKEY__ * __ptr64),struct HKEY__ * __ptr64> __cdecl MakeGuard<long (__cdecl*)(struct HKEY__ * __ptr64),struct HKEY__ * __ptr64>(long (__cdecl*)(struct HKEY__ * __ptr64),struct HKEY__ * __ptr64)" ??$MakeGuard@P6AJPEAUHKEY__@@@ZPEAU1@@@YA?AV?$ScopeGuardImpl1@P6AJPEAUHKEY__@@@ZPEAU1@@@P6AJPEAUHKEY__@@@Z0@Z
0x18000D218: WPP_ThisDir_CTLGUID_WMI_Tracing_Guid
0x180006E40: "public: virtual void * __ptr64 __cdecl CKiller::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCKiller@@UEAAPEAXI@Z
0x18000CB08: "__cdecl _imp_?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z" __imp_?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z
0x18000CB40: "__cdecl _imp_??0CTextTemplate@@QEAA@PEBG@Z" __imp_??0CTextTemplate@@QEAA@PEBG@Z
0x180012000: WPP_GLOBAL_Control
0x18000D1F4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800102FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000134C: WPP_SF_D
0x18000D520: "Log File Event Consumer Provider" ??_C@_1EC@CKJJKKPK@?$AAL?$AAo?$AAg?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAo?$AAn?$AAs?$AAu?$AAm?$AAe?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr@
0x180012928: "__cdecl pRawDllMain" _pRawDllMain
0x18000C918: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000CE00: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000C460: "const CDllLifeControl::`vftable'" ??_7CDllLifeControl@@6B@
0x18000CD90: "__cdecl _sz_api_ms_win_security_lsalookup_l2_1_0_dll" __sz_api_ms_win_security_lsalookup_l2_1_0_dll
0x18000C210: "const CClassFactory<class CLogFileConsumer>::`vftable'" ??_7?$CClassFactory@VCLogFileConsumer@@@@6B@
0x1800090F0: DllUnregisterServer
0x18000C910: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180014050: "__cdecl _imp_VariantClear" __imp_VariantClear
0x180006520: "public: virtual long __cdecl CSimpleClassFactory<class CEventLogConsumer>::LockServer(int) __ptr64" ?LockServer@?$CSimpleClassFactory@VCEventLogConsumer@@@@UEAAJH@Z
0x180004970: "public: virtual long __cdecl CLogFileConsumer::XProvider::FindConsumer(struct IWbemClassObject * __ptr64,struct IWbemUnboundObjectSink * __ptr64 * __ptr64) __ptr64" ?FindConsumer@XProvider@CLogFileConsumer@@UEAAJPEAUIWbemClassObject@@PEAPEAUIWbemUnboundObjectSink@@@Z
0x180007B64: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000D7E0: "InProcServer32" ??_C@_1BO@ECHKLJPO@?$AAI?$AAn?$AAP?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18000C000: "const type_info::`vftable'" ??_7type_info@@6B@
0x180003B38: "private: void __cdecl CEventLogSink::XSink::GetDatData(struct IWbemClassObject * __ptr64,unsigned short * __ptr64,struct tagVARIANT & __ptr64,unsigned char * __ptr64 & __ptr64,unsigned long & __ptr64) __ptr64" ?GetDatData@XSink@CEventLogSink@@AEAAXPEAUIWbemClassObject@@PEAGAEAUtagVARIANT@@AEAPEAEAEAK@Z
0x180002B10: "public: virtual void * __ptr64 __cdecl CLogFileSink::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CLogFileSink@@UEAAPEAXAEBU_GUID@@@Z
0x1800027A0: "public: virtual long __cdecl CCommandLineSink::XSink::IndicateToConsumer(struct IWbemClassObject * __ptr64,long,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?IndicateToConsumer@XSink@CCommandLineSink@@UEAAJPEAUIWbemClassObject@@JPEAPEAU3@@Z
0x1800077EC: "public: unsigned long __cdecl ErrorObj::Release(void) __ptr64" ?Release@ErrorObj@@QEAAKXZ
0x18000CA40: "__cdecl _imp_?Size@CVarVector@@QEAAHXZ" __imp_?Size@CVarVector@@QEAAHXZ
0x18000D140: "ForceOffFeedback" ??_C@_1CC@OILIAHPA@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAO?$AAf?$AAf?$AAF?$AAe?$AAe?$AAd?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x18000FE6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180009CD0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000C018: "const CImpl<struct IWbemUnboundObjectSink,class CLogFileSink>::`vftable'" ??_7?$CImpl@UIWbemUnboundObjectSink@@VCLogFileSink@@@@6B@
0x18000CBB0: "__cdecl _xc_z" __xc_z
0x1800103B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000C738: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CLogFileConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CClassFactory@VCLogFileConsumer@@@@UEAAPEAXI@Z
0x18000C598: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000A4A6: "__cdecl _imp_load_LookupAccountNameW" __imp_load_LookupAccountNameW
0x18000D418: "\\." ??_C@_17KDPFNGJO@?$AA?2?$AA?2?$AA?4?$AA?$AA@
0x18000A531: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x18000C830: "__cdecl _imp_WaitForThreadpoolWorkCallbacks" __imp_WaitForThreadpoolWorkCallbacks
0x18000C8A8: "__cdecl _imp_?GetAccessMask@@YAJPEAXPEAU_ACL@@PEAK@Z" __imp_?GetAccessMask@@YAJPEAXPEAU_ACL@@PEAK@Z
0x18000A8EC: "__cdecl CxxThrowException" _CxxThrowException
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CCommandLineConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CClassFactory@VCCommandLineConsumer@@@@UEAAPEAXI@Z
0x18000D4F0: "WriteFile" ??_C@_1BE@IACKJGGB@?$AAW?$AAr?$AAi?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x18000C8C0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x18000C5F8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180004C10: "protected: long __cdecl CLogFileSink::ArchiveFile(class WString & __ptr64) __ptr64" ?ArchiveFile@CLogFileSink@@IEAAJAEAVWString@@@Z
0x18000C810: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000C3E0: "const CBaseClassFactory::XClassFactory::`vftable'" ??_7XClassFactory@CBaseClassFactory@@6B@
0x18000C7D8: "__cdecl _imp_CancelWaitableTimer" __imp_CancelWaitableTimer
0x180003F80: "public: virtual long __cdecl CEventLogSink::XSink::IndicateToConsumer(struct IWbemClassObject * __ptr64,long,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?IndicateToConsumer@XSink@CEventLogSink@@UEAAJPEAUIWbemClassObject@@JPEAPEAU3@@Z
0x18000CE90: "ExecutablePath" ??_C@_1BO@CLCOBGDE@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAa?$AAb?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800048D0: "public: virtual void * __ptr64 __cdecl CLogFileSink::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLogFileSink@@UEAAPEAXI@Z
0x18000C9A0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180014000: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x18000D8A0: IID_IWbemLocator
0x18000C628: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800140C0: "__cdecl _imp_NetGetDCName" __imp_NetGetDCName
0x18000CA98: "__cdecl _imp_?AddRef@CUnkInternal@@UEAAKXZ" __imp_?AddRef@CUnkInternal@@UEAAKXZ
0x180006170: "public: virtual void * __ptr64 __cdecl CCommandLineConsumer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCommandLineConsumer@@UEAAPEAXI@Z
0x180014090: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x18000C840: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x180009D00: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18000CAC0: "__cdecl _imp_?Compress@CFlexArray@@QEAAXXZ" __imp_?Compress@CFlexArray@@QEAAXXZ
0x18000A8A0: "public: virtual int __cdecl CUnk::Initialize(void) __ptr64" ?Initialize@CUnk@@UEAAHXZ
0x18000C9D0: "__cdecl _imp_?SetTemplate@CTextTemplate@@QEAAXPEBG@Z" __imp_?SetTemplate@CTextTemplate@@QEAAXPEBG@Z
0x18000C8B0: esscli_NULL_THUNK_DATA
0x18000D678: "Operation" ??_C@_1BE@JJJGIENO@?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000C930: "__cdecl _imp__wremove" __imp__wremove
0x180007858: "public: void __cdecl ErrorObj::ReportError(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,bool) __ptr64" ?ReportError@ErrorObj@@QEAAXPEBG00I_N@Z
0x18000C798: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000FE2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_logoncli_dll" __DELAY_IMPORT_DESCRIPTOR_logoncli_dll
0x18000C848: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x18000C3C0: "const CLogFileConsumer::XProvider::`vftable'" ??_7XProvider@CLogFileConsumer@@6B@
0x180008854: "protected: long __cdecl CComServer::AddClassInfo(struct _GUID const & __ptr64,class CUnkInternal * __ptr64,unsigned short * __ptr64,int,int) __ptr64" ?AddClassInfo@CComServer@@IEAAJAEBU_GUID@@PEAVCUnkInternal@@PEAGHH@Z
0x1800060B0: "public: virtual __cdecl CSimpleClassFactory<class CLogFileConsumer>::~CSimpleClassFactory<class CLogFileConsumer>(void) __ptr64" ??1?$CSimpleClassFactory@VCLogFileConsumer@@@@UEAA@XZ
0x18000A427: "__cdecl _tailMerge_logoncli_dll" __tailMerge_logoncli_dll
0x180007D24: "unsigned long __cdecl MyBreakOnDbgAndRenterLoop(void)" ?MyBreakOnDbgAndRenterLoop@@YAKXZ
0x18000CF30: "RunInteractively" ??_C@_1CC@IMMCODG@?$AAR?$AAu?$AAn?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAl?$AAy?$AA?$AA@
0x18000CB38: "__cdecl _imp_??1CTextTemplate@@QEAA@XZ" __imp_??1CTextTemplate@@QEAA@XZ
0x180010400: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000D504: " " ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x18000C748: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000CBD0: "__cdecl _guard_fids_table" __guard_fids_table
0x180009D5C: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x18000C990: msvcrt_NULL_THUNK_DATA
0x18000C490: "__cdecl load_config_used" _load_config_used
0x18000CFA8: "CreateNewProcessGroup" ??_C@_1CM@BDNDFGHE@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAN?$AAe?$AAw?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x18000FE8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x18000CAD0: "__cdecl _imp_??1CFlexArray@@QEAA@XZ" __imp_??1CFlexArray@@QEAA@XZ
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemProviderInit,class CLogFileConsumer>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemProviderInit@@VCLogFileConsumer@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180012738: "class CStaticCritSec fileLock" ?fileLock@@3VCStaticCritSec@@A
0x180006E40: "public: virtual void * __ptr64 __cdecl CKiller::`vector deleting destructor'(unsigned int) __ptr64" ??_ECKiller@@UEAAPEAXI@Z
0x18000C640: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000C630: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800022A0: "public: long __cdecl CCommandLineSink::XSink::CreateProcessNT(unsigned short * __ptr64,unsigned short * __ptr64,struct _PROCESS_INFORMATION & __ptr64,struct _FILETIME & __ptr64) __ptr64" ?CreateProcessNT@XSink@CCommandLineSink@@QEAAJPEAG0AEAU_PROCESS_INFORMATION@@AEAU_FILETIME@@@Z
0x18000D880: IID_IWbemClassObject
0x18000D800: "SOFTWARE\Classes\CLSID" ??_C@_1CO@BCKFHAAP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180004B80: "protected: bool __cdecl CLogFileSink::GetNumericExtension(unsigned short * __ptr64,int & __ptr64) __ptr64" ?GetNumericExtension@CLogFileSink@@IEAA_NPEAGAEAH@Z
0x18000D8B0: "API-MS-Win-Security-Base-L1-1-0." ??_C@_1EI@POPCMECF@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAB?$AAa?$AAs?$AAe?$AA?9?$AAL?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?4@
0x18000CAA8: "__cdecl _imp_??1CUnkInternal@@UEAA@XZ" __imp_??1CUnkInternal@@UEAA@XZ
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemProviderInit,class CLogFileConsumer>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemProviderInit@@VCLogFileConsumer@@@@UEAAKXZ
0x180010450: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18000D480: "Text" ??_C@_19DHKNKHAD@?$AAT?$AAe?$AAx?$AAt?$AA?$AA@
0x18000C5D8: "__cdecl _imp_GetUserObjectInformationW" __imp_GetUserObjectInformationW
0x180012080: "__vectorcall ??_R0?AVCX_MemoryException@" ??_R0?AVCX_MemoryException@@@8
0x1800060F0: "public: virtual int __cdecl CComServer::CanShutdown(void) __ptr64" ?CanShutdown@CComServer@@UEAAHXZ
0x18000C8F0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180008840: "public: virtual long __cdecl CComServer::InitializeCom(void) __ptr64" ?InitializeCom@CComServer@@UEAAJXZ
0x1800120B0: "__vectorcall ??_R0?AV_com_error@" ??_R0?AV_com_error@@@8
0x1800070C0: "protected: void __cdecl CKillerTimer::KillOffOldGuys(struct _FILETIME const & __ptr64) __ptr64" ?KillOffOldGuys@CKillerTimer@@IEAAXAEBU_FILETIME@@@Z
0x18000C6E0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002B38: "public: __cdecl CWbemPtr<class CEventLogConsumer>::~CWbemPtr<class CEventLogConsumer>(void) __ptr64" ??1?$CWbemPtr@VCEventLogConsumer@@@@QEAA@XZ
0x180005E08: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800140A0: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CLogFileConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CClassFactory@VCLogFileConsumer@@@@UEAAPEAXI@Z
0x18000D448: "CLogFileSink::Initialize" ??_C@_1DC@FMAAILJD@?$AAC?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAS?$AAi?$AAn?$AAk?$AA?3?$AA?3?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x18000CAB8: "__cdecl _imp_?InsertAt@CFlexArray@@QEAAHHPEAX@Z" __imp_?InsertAt@CFlexArray@@QEAAHHPEAX@Z
0x18000C790: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000C740: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000C7F8: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x180007BA4: "public: __cdecl CMyInCritSec::CMyInCritSec(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ??0CMyInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
0x18000CAE0: "__cdecl _imp_?Empty@CFlexArray@@QEAAXXZ" __imp_?Empty@CFlexArray@@QEAAXXZ
0x18000C9A8: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000C838: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x180008BF0: "public: virtual void __cdecl CDllLifeControl::Release(struct IUnknown * __ptr64) __ptr64" ?Release@CDllLifeControl@@UEAAXPEAUIUnknown@@@Z
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CCommandLineConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CClassFactory@VCCommandLineConsumer@@@@UEAAPEAXI@Z
0x180014010: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x18000D398: WPP_45da3697232f3ff0363992a26f9a8985_Traceguids
0x180002D64: WPP_SF_SSD
0x18000D4A8: "MaximumFileSize" ??_C@_1CA@CHKMAKNH@?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAF?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000C780: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180009D50: "__cdecl purecall" _purecall
0x18000C248: "const CClassFactory<class CCommandLineConsumer>::`vftable'" ??_7?$CClassFactory@VCCommandLineConsumer@@@@6B@
0x18000C678: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x18000D690: "ParameterInfo" ??_C@_1BM@MFAEMGPN@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1800048D0: "public: virtual void * __ptr64 __cdecl CLogFileSink::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLogFileSink@@UEAAPEAXI@Z
0x18000D928: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800060B0: "public: virtual __cdecl CSimpleClassFactory<class CEventLogConsumer>::~CSimpleClassFactory<class CEventLogConsumer>(void) __ptr64" ??1?$CSimpleClassFactory@VCEventLogConsumer@@@@UEAA@XZ
0x180009D38: "__cdecl _std_terminate" __std_terminate
0x18000C0E8: "const CLogFileSink::`vftable'" ??_7CLogFileSink@@6B@
0x18000A5EC: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180012030: "__vectorcall ??_R0?AVSafeIntException@" ??_R0?AVSafeIntException@@@8
0x18000C018: "const CImpl<struct IWbemEventConsumerProvider,class CLogFileConsumer>::`vftable'" ??_7?$CImpl@UIWbemEventConsumerProvider@@VCLogFileConsumer@@@@6B@
0x180009E30: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x18000C0C8: "const CEventLogSink::XSink::`vftable'" ??_7XSink@CEventLogSink@@6B@
0x180008BF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000C700: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18000C2F0: "const CCommandLineConsumer::`vftable'" ??_7CCommandLineConsumer@@6B@
0x18000CA08: "__cdecl _imp_?Release@CUnk@@UEAAKXZ" __imp_?Release@CUnk@@UEAAKXZ
0x180006170: "public: virtual void * __ptr64 __cdecl CCommandLineConsumer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCommandLineConsumer@@UEAAPEAXI@Z
0x180006010: "public: virtual long __cdecl CBaseClassFactory::XClassFactory::LockServer(int) __ptr64" ?LockServer@XClassFactory@CBaseClassFactory@@UEAAJH@Z
0x18000D0F8: "ShowWindowCommand" ??_C@_1CE@KIDMAKGE@?$AAS?$AAh?$AAo?$AAw?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x18000CB48: "__cdecl _imp_??0WString@@QEAA@XZ" __imp_??0WString@@QEAA@XZ
0x18000CA20: "__cdecl _imp_??1WString@@QEAA@XZ" __imp_??1WString@@QEAA@XZ
0x1800095E0: "public: virtual void * __ptr64 __cdecl _com_error::`vector deleting destructor'(unsigned int) __ptr64" ??_E_com_error@@UEAAPEAXI@Z
0x18000D370: "invalid log entry" ??_C@_1CE@OLNNCOP@?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x180006B00: "public: virtual long __cdecl CSimpleClassFactory<class CLogFileConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CSimpleClassFactory@VCLogFileConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000D0D8: "FillAttribute" ??_C@_1BM@KAFODKCF@?$AAF?$AAi?$AAl?$AAl?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AA?$AA@
0x18000A842: "__cdecl _imp_load_WTSQuerySessionInformationW" __imp_load_WTSQuerySessionInformationW
0x18000CF00: "DesktopName" ??_C@_1BI@LBDPHDAL@?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180007D40: "void __cdecl ReleaseInternalUnk(class CUnkInternal * __ptr64)" ?ReleaseInternalUnk@@YAXPEAVCUnkInternal@@@Z
0x1800102AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000D168: "KillTimeout" ??_C@_1BI@BCOCJKGC@?$AAK?$AAi?$AAl?$AAl?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x18000CB28: "__cdecl _imp_??4WString@@QEAAAEAV0@AEBV0@@Z" __imp_??4WString@@QEAAAEAV0@AEBV0@@Z
0x18000A890: "public: virtual unsigned long __cdecl CUnk::AddRef(void) __ptr64" ?AddRef@CUnk@@UEAAKXZ
0x18000CAB0: "__cdecl _imp_??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z" __imp_??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z
0x18000FECC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x18000A5BC: "__cdecl _imp_load_SysAllocString" __imp_load_SysAllocString
0x18000C8F8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004B08: "protected: bool __cdecl CLogFileSink::IsFileTooBig(unsigned __int64,class WString & __ptr64) __ptr64" ?IsFileTooBig@CLogFileSink@@IEAA_N_KAEAVWString@@@Z
0x18000C9C8: ntdll_NULL_THUNK_DATA
0x18000C8B8: "__cdecl _imp_memcpy" __imp_memcpy
0x18000C888: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18000A689: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x180001314: "public: __cdecl CEventLogSink::XSink::~XSink(void) __ptr64" ??1XSink@CEventLogSink@@QEAA@XZ
0x18000C5B0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x18000C858: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800126C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuzwnrmUdnrUdyvnUdrmntngUvhhxlnkUhgwxlmhUdyvnxlmhUozgvhgUlyquivUznwGEUkivxlnkOlyq@wbemcons" __@@_PchSym_@00@KxulyqvxgPillgKxuzwnrmUdnrUdyvnUdrmntngUvhhxlnkUhgwxlmhUdyvnxlmhUozgvhgUlyquivUznwGEUkivxlnkOlyq@wbemcons
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CEventLogConsumer>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemEventConsumerProvider@@VCEventLogConsumer@@@@UEAAKXZ
0x180010360: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000C9F8: "__cdecl _imp_?Apply@CTextTemplate@@QEAAPEAGPEAUIWbemClassObject@@@Z" __imp_?Apply@CTextTemplate@@QEAAPEAGPEAUIWbemClassObject@@@Z
0x18000C8D8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x1800060B0: "public: virtual __cdecl CBaseClassFactory::~CBaseClassFactory(void) __ptr64" ??1CBaseClassFactory@@UEAA@XZ
0x18000C2F0: "const CEventLogConsumer::`vftable'" ??_7CEventLogConsumer@@6B@
0x1800120E8: "__cdecl _security_cookie" __security_cookie
0x1800095A4: "void __cdecl _com_issue_error(long)" ?_com_issue_error@@YAXJ@Z
0x18000C708: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x18000D668: "root" ??_C@_19PKPNPKHP@?$AAr?$AAo?$AAo?$AAt?$AA?$AA@
0x180006550: "public: virtual long __cdecl CSimpleClassFactory<class CEventLogConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CSimpleClassFactory@VCEventLogConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180014028: "__cdecl _imp_SafeArrayGetUBound" __imp_SafeArrayGetUBound
0x18000C6A8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000FD98: "__cdecl TI2?AVSafeIntException@@" _TI2?AVSafeIntException@@
0x180014078: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x18000D490: "IsUnicode" ??_C@_1BE@PCLLLOOB@?$AAI?$AAs?$AAU?$AAn?$AAi?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x18000C6C0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000C868: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x18000FDB8: "__cdecl CTA1?AV_com_error@@" _CTA1?AV_com_error@@
0x1800102D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000C610: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x180014030: "__cdecl _imp_VariantInit" __imp_VariantInit
0x18000C480: "const CClassInfo::`vftable'" ??_7CClassInfo@@6B@
0x180006060: "public: virtual void * __ptr64 __cdecl CBaseClassFactory::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBaseClassFactory@@UEAAPEAXI@Z
0x18000D428: "\\??" ??_C@_19OALAEKEJ@?$AA?2?$AA?2?$AA?$DP?$AA?$DP?$AA?$AA@
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CCommandLineSink>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemUnboundObjectSink@@VCCommandLineSink@@@@UEAAKXZ
0x18000C850: "__cdecl _imp_CopySid" __imp_CopySid
0x180014060: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x18000D198: "Console" ??_C@_1BA@GIKDDGPH@?$AAC?$AAo?$AAn?$AAs?$AAo?$AAl?$AAe?$AA?$AA@
0x18000CA50: "__cdecl _imp_?IsNT@@YAHXZ" __imp_?IsNT@@YAHXZ
0x18000C770: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180012918: "__cdecl _onexitbegin" __onexitbegin
0x18000D710: "SOFTWARE\Classes\CLSID\" ??_C@_1DA@FGEGMPEM@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x18000C1E8: "const CImpl<struct IClassFactory,class CBaseClassFactory>::`vftable'" ??_7?$CImpl@UIClassFactory@@VCBaseClassFactory@@@@6B@
0x180006EA0: "public: virtual void * __ptr64 __cdecl CProcKiller::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCProcKiller@@UEAAPEAXI@Z
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CEventLogConsumer>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CClassFactory@VCEventLogConsumer@@@@UEAAPEAXI@Z
0x180001D10: "int __cdecl WinstaEnumProc(unsigned short * __ptr64,__int64)" ?WinstaEnumProc@@YAHPEAG_J@Z
0x180002CDC: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x18000C938: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemEventConsumerProvider,class CCommandLineConsumer>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemEventConsumerProvider@@VCCommandLineConsumer@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000C650: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180008BE0: "public: virtual void __cdecl CDllLifeControl::ObjectDestroyed(struct IUnknown * __ptr64) __ptr64" ?ObjectDestroyed@CDllLifeControl@@UEAAXPEAUIUnknown@@@Z
0x18000FFE8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x18000FE4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll
0x18000CE60: IID_IErrorInfo
0x18000D060: "YCoordinate" ??_C@_1BI@NANAJHJM@?$AAY?$AAC?$AAo?$AAo?$AAr?$AAd?$AAi?$AAn?$AAa?$AAt?$AAe?$AA?$AA@
0x180010464: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180006170: "public: virtual void * __ptr64 __cdecl CEventLogConsumer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEventLogConsumer@@UEAAPEAXI@Z
0x18000C440: "const CProcKiller::`vftable'" ??_7CProcKiller@@6B@
0x1800071A0: "protected: void __cdecl CKillerTimer::RunKillerThread(void) __ptr64" ?RunKillerThread@CKillerTimer@@IEAAXXZ
0x18000C758: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180012018: "class CMyServer g_Server" ?g_Server@@3VCMyServer@@A
0x18000A5E0: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x18000A224: "__cdecl _security_init_cookie" __security_init_cookie
0x1800096F4: "unsigned long __cdecl DLpLoadSecurityDll(void)" ?DLpLoadSecurityDll@@YAKXZ
0x18000D4C8: "GetFileSecurity" ??_C@_1CA@EAFFFDOJ@?$AAG?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x18000CA48: "__cdecl _imp_?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z" __imp_?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z
0x1800095E0: "public: virtual void * __ptr64 __cdecl _com_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_com_error@@UEAAPEAXI@Z
0x18000D420: "//." ??_C@_17MJMDPIC@?$AA?1?$AA?1?$AA?4?$AA?$AA@
0x18000A870: "public: virtual long __cdecl CUnk::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180010298: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800060E0: "public: virtual long __cdecl CComServer::Uninitialize(void) __ptr64" ?Uninitialize@CComServer@@UEAAJXZ
0x18000C690: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18000C880: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x180002F3C: "public: long __cdecl CEventLogSink::Initialize(struct IWbemClassObject * __ptr64) __ptr64" ?Initialize@CEventLogSink@@QEAAJPEAUIWbemClassObject@@@Z
0x18000CF18: "WindowTitle" ??_C@_1BI@HDOGDKED@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAT?$AAi?$AAt?$AAl?$AAe?$AA?$AA@
0x18000A880: "public: virtual unsigned long __cdecl CUnk::Release(void) __ptr64" ?Release@CUnk@@UEAAKXZ
0x18000C7B0: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x18000C8E0: "__cdecl _imp_malloc" __imp_malloc
0x18000C408: "const CBaseClassFactory::`vftable'" ??_7CBaseClassFactory@@6B@
0x18000C978: "__cdecl _imp__purecall" __imp__purecall
0x18000A7A5: "__cdecl _imp_load_ReportEventW" __imp_load_ReportEventW
0x18000A67D: "__cdecl _imp_load_LookupAccountSidLocalW" __imp_load_LookupAccountSidLocalW
0x18000C688: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1800094E0: "public: __cdecl wmilib::auto_ptr<struct CClassInfo>::~auto_ptr<struct CClassInfo>(void) __ptr64" ??1?$auto_ptr@UCClassInfo@@@wmilib@@QEAA@XZ
0x18000C1B0: "const CSimpleClassFactory<class CEventLogConsumer>::`vftable'" ??_7?$CSimpleClassFactory@VCEventLogConsumer@@@@6B@
0x18000D088: "YSize" ??_C@_1M@BODOPGEA@?$AAY?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000D3B8: "%03d" ??_C@_19GGGBJDH@?$AA?$CF?$AA0?$AA3?$AAd?$AA?$AA@
0x18000FEEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll
0x180006ACC: "public: __cdecl ScopeGuardImpl1<void (__cdecl*)(class CUnkInternal * __ptr64),class RefHolder<class CUnkInternal * __ptr64> >::~ScopeGuardImpl1<void (__cdecl*)(class CUnkInternal * __ptr64),class RefHolder<class CUnkInternal * __ptr64> >(void) __ptr64" ??1?$ScopeGuardImpl1@P6AXPEAVCUnkInternal@@@ZV?$RefHolder@PEAVCUnkInternal@@@@@@QEAA@XZ
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemUnboundObjectSink,class CEventLogSink>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemUnboundObjectSink@@VCEventLogSink@@@@UEAAKXZ
0x18000D850: IID_IWbemEventConsumerProvider
0x180009FA0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000FEAC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000A66B: "__cdecl _imp_load_SetErrorInfo" __imp_load_SetErrorInfo
0x18000C7C8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180006810: "public: virtual long __cdecl CSimpleClassFactory<class CCommandLineConsumer>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CSimpleClassFactory@VCCommandLineConsumer@@@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180009EB0: "__cdecl onexit" _onexit
0x180002B38: "public: __cdecl CWbemPtr<class CCommandLineSink>::~CWbemPtr<class CCommandLineSink>(void) __ptr64" ??1?$CWbemPtr@VCCommandLineSink@@@@QEAA@XZ
0x18001039C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x180012908: "__cdecl _native_startup_state" __native_startup_state
0x18000C070: "const CCommandLineSink::XSink::`vftable'" ??_7XSink@CCommandLineSink@@6B@
0x18000D3D0: "MoveFile" ??_C@_1BC@OLPLICAI@?$AAM?$AAo?$AAv?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x18000A336: "__cdecl _imp_load_SysFreeString" __imp_load_SysFreeString
0x180008AB0: "void __cdecl EmptyList(void)" ?EmptyList@@YAXXZ
0x18000C5E0: "__cdecl _imp_EnumWindowStationsW" __imp_EnumWindowStationsW
0x18000D438: "//??" ??_C@_19NPBBOCKB@?$AA?1?$AA?1?$AA?$DP?$AA?$DP?$AA?$AA@
0x18000FD48: "__stdcall CT??_R0?AVCX_Exception@@" _CT??_R0?AVCX_Exception@@@81
0x180002BC0: "public: virtual long __cdecl CImpl<struct IWbemUnboundObjectSink,class CCommandLineSink>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CImpl@UIWbemUnboundObjectSink@@VCCommandLineSink@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800052F8: "public: long __cdecl CLogFileSink::Initialize(struct IWbemClassObject * __ptr64) __ptr64" ?Initialize@CLogFileSink@@QEAAJPEAUIWbemClassObject@@@Z
0x18000CDD0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18000FF98: OLEAUT32_NULL_THUNK_DATA_DLN
0x180006060: "public: virtual void * __ptr64 __cdecl CBaseClassFactory::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBaseClassFactory@@UEAAPEAXI@Z
0x180014068: OLEAUT32_NULL_THUNK_DATA_DLA
0x180006F20: "public: virtual void __cdecl CProcKiller::Die(void) __ptr64" ?Die@CProcKiller@@UEAAXXZ
0x180010110: OLEAUT32_NULL_THUNK_DATA_DLB
0x180008F60: DllRegisterServer
0x18000C950: "__cdecl _imp__wsplitpath_s" __imp__wsplitpath_s
0x18000CA78: "__cdecl _imp_?ReadUI64@@YAHPEBGAEFA_K@Z" __imp_?ReadUI64@@YAHPEBGAEFA_K@Z
0x180007730: "protected: struct IWbemServices * __ptr64 __cdecl ErrorObj::GetMeANamespace(void) __ptr64" ?GetMeANamespace@ErrorObj@@IEAAPEAUIWbemServices@@XZ
0x180004874: "public: __cdecl CReleaseMe::~CReleaseMe(void) __ptr64" ??1CReleaseMe@@QEAA@XZ
0x180002B10: "public: virtual void * __ptr64 __cdecl CEventLogSink::GetInterface(struct _GUID const & __ptr64) __ptr64" ?GetInterface@CEventLogSink@@UEAAPEAXAEBU_GUID@@@Z
0x1800060E0: "public: virtual long __cdecl CComServer::Register(void) __ptr64" ?Register@CComServer@@UEAAJXZ
0x180014040: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x180014058: "__cdecl _imp_SafeArrayAccessData" __imp_SafeArrayAccessData
0x180010414: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180006EA0: "public: virtual void * __ptr64 __cdecl CProcKiller::`vector deleting destructor'(unsigned int) __ptr64" ??_ECProcKiller@@UEAAPEAXI@Z
0x180006060: "public: virtual void * __ptr64 __cdecl CClassFactory<class CEventLogConsumer>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CClassFactory@VCEventLogConsumer@@@@UEAAPEAXI@Z
0x18000A4B2: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll
0x18000C280: "const CClassFactory<class CEventLogConsumer>::`vftable'" ??_7?$CClassFactory@VCEventLogConsumer@@@@6B@
0x180001388: WPP_SF_SD
0x18000C980: "__cdecl _imp_free" __imp_free
0x18000C9D8: "__cdecl _imp_?Write@CMemoryLog@@QEAAXJ@Z" __imp_?Write@CMemoryLog@@QEAAXJ@Z
0x18000A190: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000C7F0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000C808: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x180007C8C: WPP_SF_SS
0x180010478: "__cdecl _IMPORT_DESCRIPTOR_wbemcomn" __IMPORT_DESCRIPTOR_wbemcomn
0x180010374: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x180006170: "public: virtual void * __ptr64 __cdecl CEventLogConsumer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEventLogConsumer@@UEAAPEAXI@Z
0x18000D740: "Microsoft WBEM %s" ??_C@_1CE@BNNDKAOJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAB?$AAE?$AAM?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x180002B90: "public: virtual unsigned long __cdecl CImpl<struct IWbemEventConsumerProvider,class CCommandLineConsumer>::AddRef(void) __ptr64" ?AddRef@?$CImpl@UIWbemEventConsumerProvider@@VCCommandLineConsumer@@@@UEAAKXZ
0x1800102C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18000C7E0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180012730: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstSecurityDLL" ?g_hInstSecurityDLL@@3PEAUHINSTANCE__@@EA
0x1800103EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180007BD8: "public: __cdecl CMyInCritSec::~CMyInCritSec(void) __ptr64" ??1CMyInCritSec@@QEAA@XZ
0x180002CFC: WPP_SF_S
0x18000CB20: "__cdecl _imp_?InternalRelease@CUnkInternal@@QEAAKXZ" __imp_?InternalRelease@CUnkInternal@@QEAAKXZ
0x18000CB10: "__cdecl _imp_?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z" __imp_?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z
0x18000AA11: memset
0x1800104B4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180012680: "__cdecl _hmod__OLEAUT32_dll" __hmod__OLEAUT32_dll
0x18000C670: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18000CA00: "__cdecl _imp_??0WString@@QEAA@PEAGH@Z" __imp_??0WString@@QEAA@PEAGH@Z
0x18000CD70: "__cdecl _sz_OLEAUT32_dll" __sz_OLEAUT32_dll

[JEB Decompiler by PNF Software]