Generated by JEB on 2019/08/01

PE: C:\Windows\System32\EventAggregation.dll Base=0x180000000 SHA-256=8C23D9B636FFC880326F6BC3BEFAEA782F79CFA6531D6CECFA7A604C27A6FD7B
PDB: EventAggregation.pdb GUID={EA6E3C3A-C6A2-9FD5-6538C0029AD59E12} Age=1

492 located named symbols:
0x18000EFA8: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x18000EEC0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18000F400: "EventInfo" ??_C@_09BEELENHA@EventInfo?$AA@
0x18000EEA0: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180009A4C: EapQueryAggregatedEventTrigger
0x18000CB0C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000EEB8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18000C4DC: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180006770: EapAggregatedEventConditionParamsNextChild
0x180006710: EaDeleteAggregatedEvent
0x18000BFB0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000F070: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18001291C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000EE18: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x1800146A0: BrokerInternalClientInitOnce
0x18000EF60: "__cdecl _imp_TpWaitForTimer" __imp_TpWaitForTimer
0x180012908: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x180004C00: EaiFreeAggregationConditionVisitNode
0x180008470: BriSignalBrokeredEvent
0x180002EC8: EaiSignalAggregateCallback
0x1800140B0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180014048: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800077C0: BripCreateRpcBindingHandle
0x1800013E0: "__cdecl TlgDefineProvider_annotation__TlgghEventAggregationProviderProv" _TlgDefineProvider_annotation__TlgghEventAggregationProviderProv
0x18000EDC0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000CEE2: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x18000CFB8: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180001254: WPP_SF_L
0x18000EEF8: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x18000EFC8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000AE80: WppControlCallback
0x18000D070: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000A950: EaQueryAggregatedEventParameters
0x18000EF58: "__cdecl _imp_RtlGetNextEntryHashTable" __imp_RtlGetNextEntryHashTable
0x18000F010: "__cdecl _imp_RtlInsertEntryHashTable" __imp_RtlInsertEntryHashTable
0x18000EF80: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800105F8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000EF98: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x18000F0C0: "__cdecl _xp_a" __xp_a
0x18000EE20: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x18000CFC4: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x18000CA6C: "__cdecl RTC_Initialize" _RTC_Initialize
0x180010590: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000CFB8: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180011B50: "__cdecl _rtc_taa" __rtc_taa
0x1800146A8: BrokeredEventTable
0x180012930: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006770: EapStoreAggregatedEventConditionNextChild
0x18000EE50: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180001AE0: EaiSetAggregationConditionVisitNode
0x18000ED90: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000F540: "EaiDisableAggregateEvent" ??_C@_0BJ@EHMACGLH@EaiDisableAggregateEvent?$AA@
0x18000EE60: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x180007B4C: BripFindBindingContextByBrokerId
0x18000CE8C: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x18000CFB8: "__cdecl _vcrt_initialize" __vcrt_initialize
0x18000EE28: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x180008F70: EapQueryBuffer
0x180001008: "__cdecl TlgWrite" _TlgWrite
0x18000F088: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000F048: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x18000F490: "Invalid callback type" ??_C@_0BG@LEGMCDDA@Invalid?5callback?5type?$AA@
0x18000A62C: EapQueryAggregatedEventOwnerAppName
0x18000ADB0: EaDeleteAggregatedEventParametersPostVisitNode
0x180011B40: "__cdecl _rtc_iaa" __rtc_iaa
0x18000CFB8: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x18000A6F0: EaStoreAggregatedEventParameters
0x18000F4D8: "Failed to allocate WNF state buf" ??_C@_0CE@MBKHCMBL@Failed?5to?5allocate?5WNF?5state?5buf@
0x1800123E8: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x180016008: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x180012418: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x18000F090: "__cdecl _xc_a" __xc_a
0x18000F040: "__cdecl _imp_TpAllocTimer" __imp_TpAllocTimer
0x18000F7D0: "Failed to enable Aggregate Event" ??_C@_0CB@FFHFNOLK@Failed?5to?5enable?5Aggregate?5Event@
0x180014710: BrokerBindingTableLock
0x1800035A4: EaiSetAggregateConditionsEnabledState
0x1800085C0: BriGetBrokerAvailabilityChangeStamp
0x18000F4A8: "EaiSignalAggregateEvent" ??_C@_0BI@OBMACIOF@EaiSignalAggregateEvent?$AA@
0x18000EEE8: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18000EF08: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x18000F230: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x18000EE10: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x180014060: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x1800065A0: EapDeleteAggregatedEventConditionVisitNode
0x180001438: CleanupLibrary
0x18000F320: "Invalid Param. Pointer to condit" ??_C@_0FL@DHFCBKCF@Invalid?5Param?4?5Pointer?5to?5condit@
0x18000FE00: EA_STORE_AGGRERATED_EVENT_FIELD_START_BOUNDARY
0x18000A050: EapQueryAggregatedEventCondition
0x180014058: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18000F708: "EventHandle == NULL" ??_C@_0BE@PLHBLMKG@EventHandle?5?$DN?$DN?5NULL?$AA@
0x18000FEC8: EA_STORE_AGGRERATED_EVENT_FIELD_DELAY_IN_SECONDS
0x18000F220: "__cdecl _guard_iat_table" __guard_iat_table
0x18000D055: memcpy
0x18000F6B0: "Failed to add new Aggregate Even" ??_C@_0DG@OJPPFKID@Failed?5to?5add?5new?5Aggregate?5Even@
0x18000EED0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000B20C: EaLibClearAndReleaseTimer
0x18000EE70: "__cdecl _imp_memset" __imp_memset
0x18000CFB8: "__cdecl _acrt_initialize" __acrt_initialize
0x18000CEA6: "__cdecl initterm" _initterm
0x18000ED30: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x18000EEA8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000CF06: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x18000ADD0: EaDeleteAggregatedEventParameters
0x18000F020: "__cdecl _imp_RtlRemoveEntryHashTable" __imp_RtlRemoveEntryHashTable
0x1800129BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800146C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000FE68: EA_STORE_AGGRERATED_EVENT_FIELD_TRIGGER
0x18000F7F8: "EaDisableAggregatedEvent" ??_C@_0BJ@MCCLIOGL@EaDisableAggregatedEvent?$AA@
0x18000F0B8: "__cdecl _xi_z" __xi_z
0x18000F060: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x18000ED70: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000CF1E: "__cdecl _C_specific_handler" __C_specific_handler
0x180009D70: EapQueryAggregatedEventConditionCloseChild
0x1800085A0: MIDL_user_free
0x18000CFB8: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x180006D00: EaCreateAggregatedEvent
0x1800060B0: EaDisableAggregatedEvent
0x18000F7B8: "EaEnableAggregatedEvent" ??_C@_0BI@ONGMJHEO@EaEnableAggregatedEvent?$AA@
0x18000F530: "Failed Status" ??_C@_0O@PAPBEDEN@Failed?5Status?$AA@
0x18000FA50: RpcErrMap
0x18000FE78: EA_STORE_AGGRERATED_EVENT_FIELD_TIME_LIMIT
0x180014708: WPP_REGISTRATION_GUIDS
0x18000EFF0: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x18000C8C4: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x18000CFF4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180014678: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x180004F64: EaiDuplicateAggregateRuntime
0x18000CECA: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x18000C7F8: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x18000CED6: "__cdecl cexit" _cexit
0x18000C6C8: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x18000FEA8: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_APP_NAME
0x180009B7C: EapStoreAggregatedEventTrigger
0x180005E50: EaGetAggregation
0x18000CFB8: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x18000EE78: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18000CEEE: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000C4F0: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x18000F050: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x1800146E0: WPP_MAIN_CB
0x18000EF48: "__cdecl _imp_RtlAllocateWnfSerializationGroup" __imp_RtlAllocateWnfSerializationGroup
0x180007C74: BripFreeBindingContext
0x18000129C: WPP_SF_ddDDDDDD
0x180007B20: BriFreeRpcBuffer
0x180010588: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000EFE0: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x180001CE0: EaiDumpConditionVisitNode
0x180008E0C: EapExpandValueQueryBuffer
0x18000CFB8: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180006DD0: BriAllocateRpcBuffer
0x180008BB0: EaDecodeBrokeredEvent
0x18000C674: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x18000F750: "Failed to acquire Aggregate Even" ??_C@_0CP@EGFLGDGK@Failed?5to?5acquire?5Aggregate?5Even@
0x18000FE20: EA_STORE_PREDICATE_AND_STRING
0x18000F818: "Failed to disable Event" ??_C@_0BI@NHGKOOIK@Failed?5to?5disable?5Event?$AA@
0x18000CEFA: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x18000F410: "EaiProcessNotification" ??_C@_0BH@KAPMJJHH@EaiProcessNotification?$AA@
0x180004C4C: EaiFreeEaAggregateEvent
0x18000EE80: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000CFB8: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x18000EFD8: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x18000ED80: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000EE90: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000EE40: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x180014730: AggregateEventListLock
0x1800086F0: BriRegisterToBrokerAvailability
0x18000F608: "EaiCreateAggregation" ??_C@_0BF@FIKIOMKC@EaiCreateAggregation?$AA@
0x18000F0D0: "__cdecl _xt_a" __xt_a
0x1800140F4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x18000EDA8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000EE40: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18000F830: "Failed to disable Aggregate Even" ??_C@_0CC@MMIMAKAA@Failed?5to?5disable?5Aggregate?5Even@
0x18000AF34: DllMain
0x180009034: EapQueryValue
0x18000CFB8: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180001970: EapAggregatedEventConditionNextChild
0x180009C80: EapQueryAggregatedEventConditionNextChild
0x18000FA38: g_SmsRouterBrokerId
0x18000CAB0: "__cdecl RTC_Terminate" _RTC_Terminate
0x1800013F0: EaiRunOnceCallback
0x18000B180: EaLibCreateAndSetLimitTimer
0x18000EE38: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000FEA0: EA_STORE_PREDICATE_OR_STRING
0x18000EF68: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180012944: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000B0F0: EaLibConvertLockSharedToExclusive
0x180008D1C: EapCreateAggregatedEventNode
0x18000EED8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180009910: EapFreeAggregatedEventConditionPostVisitNode
0x18000F028: "__cdecl _imp_RtlCreateHashTable" __imp_RtlCreateHashTable
0x18000CFD0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000F5B8: "Failed to allocate new Aggregate" ??_C@_0CH@FFJHKDNA@Failed?5to?5allocate?5new?5Aggregate@
0x18000F598: "Invalid Param. pEventID is null" ??_C@_0CA@DCNAOGJA@Invalid?5Param?4?5pEventID?5is?5null?$AA@
0x18000CEFA: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x18000EF90: "__cdecl _imp_RtlGetLastWin32Error" __imp_RtlGetLastWin32Error
0x18000ED08: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x180008C78: EapOpenAggregatedEventNode
0x180008830: BriUnregisterFromBrokerAvailability
0x180014054: "__cdecl _isa_enabled" __isa_enabled
0x180007160: BriCreateBrokeredEventEx
0x180012A34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000EDB8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180007110: BriCreateBrokeredEvent
0x180001BD0: EventAggregationCaptureStateCallback
0x18000F058: "__cdecl _imp_TpSetTimer" __imp_TpSetTimer
0x18000CF06: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x180010588: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800140B8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x18000B130: AggregateEventWnfCallback
0x180009144: EapSetValue
0x1800090B4: EapQueryStringValue
0x18000A290: EapStoreAggregatedEventConditionPreVisitNode
0x18000A4AC: EapStoreAggregatedEventCondition
0x18000CFB8: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x18000EF70: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000EDD0: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x18000F0A8: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x18000826C: BripMapRpcStatus
0x18000F428: "Event is Disabled" ??_C@_0BC@LLOAHHHF@Event?5is?5Disabled?$AA@
0x180001130: WPP_SF_
0x18000F5E0: "Failed to enable new Aggregate E" ??_C@_0CF@LKLGDOPK@Failed?5to?5enable?5new?5Aggregate?5E@
0x1800123BC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000F878: WPP_ThisDir_CTLGUID_EventAggregation
0x180016000: "__cdecl _imp_LookupAccountNameLocalW" __imp_LookupAccountNameLocalW
0x18000C5A4: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x18000ED18: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18000C3B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000EE58: "__cdecl _imp__initterm" __imp__initterm
0x1800129E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000F858: "EaiHandleTimeLimitReached" ??_C@_0BK@PFOJHFAH@EaiHandleTimeLimitReached?$AA@
0x18000324C: EaiSignalAggregateEvent
0x180012A20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000F580: "EACreateAggregateEvent" ??_C@_0BH@OICECFID@EACreateAggregateEvent?$AA@
0x180006B0C: EapCreateAggregatedEvent
0x180014698: BrokerInternalClientInitialized
0x18000CEE2: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x18000F620: "EventHandle == NULL) or (Aggrega" ??_C@_0DD@HIDMBCGL@EventHandle?5?$DN?$DN?5NULL?$CJ?5or?5?$CIAggrega@
0x18000C504: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x1800069E4: EapCreateAggregatedEventCondition
0x18000C718: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x18000F080: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003CA0: EaiDisableAggregateEvent
0x1800082B0: BripQueryValue
0x18000C908: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x18000EDB0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000CF2A: "__cdecl _imp_load_LookupAccountNameLocalW" __imp_load_LookupAccountNameLocalW
0x1800079B0: BriDeleteBrokeredEvent
0x180001E04: EaiDumpAggregateEvent
0x180008E98: EapEnumerateKey
0x18000F6E8: "EaiExtractEventAggregation" ??_C@_0BL@CEEHFLGH@EaiExtractEventAggregation?$AA@
0x18000F008: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005130: EaCreateAggregation
0x18000ED40: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x18000EDF8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000F0A0: "__cdecl _xi_a" __xi_a
0x18000EDD8: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x18000ED48: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000C5F0: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x18000ED60: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18000C528: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x18000EFD0: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x180006EFC: BripCleanupBindingTable
0x180009828: EapFreeSimpleEventParameters
0x18000F018: "__cdecl _imp_RtlInitEnumerationHashTable" __imp_RtlInitEnumerationHashTable
0x18000F500: "Cannot access Level Event value" ??_C@_0CA@EFBCDABD@Cannot?5access?5Level?5Event?5value?$AA@
0x18000CED6: "__cdecl o__cexit" _o__cexit
0x1800011A0: WPP_SF_DD
0x18000F3B8: "EaiDumpAggregateEvent" ??_C@_0BG@GPKFOGNC@EaiDumpAggregateEvent?$AA@
0x18000EFB0: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x18000F478: "EaiSignalCallback" ??_C@_0BC@OHGJALBM@EaiSignalCallback?$AA@
0x18000B3A4: BrpDecodeBrokeredEvent_V1
0x1800064B0: EaiFreeTriggerPayload
0x18000CF12: "__cdecl seh_filter_dll" _seh_filter_dll
0x180014038: WPP_GLOBAL_Control
0x18000EE18: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x18000EF78: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x180012994: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180012A0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1800010B0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x18000115C: WPP_SF_D
0x18000115C: WPP_SF_d
0x18000F230: "__cdecl pRawDllMain" _pRawDllMain
0x18000F240: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000F380: "Invalid Param. Both CallBack and" ??_C@_0DH@IMNJMDEF@Invalid?5Param?4?5Both?5CallBack?5and@
0x18000F720: "Failed to find Event" ??_C@_0BF@COPNMOAB@Failed?5to?5find?5Event?$AA@
0x18000CCC0: "__cdecl _isa_available_init" __isa_available_init
0x1800064EC: EaiResetTriggerPayload
0x18000CE80: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x18000F9E0: "ServerPrincipalName" ??_C@_1CI@IPGEKEKO@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000EF10: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x180011B48: "__cdecl _rtc_izz" __rtc_izz
0x18000C400: "__cdecl _security_check_cookie" __security_check_cookie
0x1800065FC: EapDeleteAggregatedEventCondition
0x18000F458: "EaiSignalAggregateCallback" ??_C@_0BL@BEIGOOIB@EaiSignalAggregateCallback?$AA@
0x18000F098: "__cdecl _xc_z" __xc_z
0x180012980: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000EDC8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000FDC8: EA_STORE_AGGRERATED_EVENT_FIELD_IS_RANDOM
0x18000CFB8: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180003EB0: EACreateAggregateEvent
0x180011784: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000EDF0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000FF10: EA_STORE_AGGRERATED_EVENT_FIELD_REPETITION_INTERVAL
0x18000FDE0: EA_STORE_AGGRERATED_EVENT_FIELD_OWNER_USER_SID
0x18000FA08: "AvailabilityStateName" ??_C@_1CM@GHANNOJL@?$AAA?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AAS?$AAt?$AAa?$AAt?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000C5C0: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x18000B9BC: BrpEncodeBrokeredEvent_V1
0x18000CF12: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180009960: EaFreeAggregatedEventParameters
0x18000ED50: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180008410: BriResolveBrokerIdByEventId
0x18000CECA: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800020D4: WnfEventCallback
0x180006660: EapDeleteAggregatedEvent
0x1800096CC: EapStoreSimpleEventParameters
0x18000FEF8: EA_STORE_AGGRERATED_EVENT_FIELD_END_BOUNDARY
0x18000F9B0: "ServerPrincipalString" ??_C@_1CM@FPKFBDPJ@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180001B20: EaiEvaluateConditions
0x18000FE40: EA_STORE_AGGRERATED_EVENT_FIELD_NUMBER_OF_REPETITIONS
0x1800045D0: EADeleteAggregateEvent
0x18000F0C8: "__cdecl _xp_z" __xp_z
0x180007D54: BripQueryBindingContextProperties
0x18000F288: "Invalid Param. Allowed Flags are" ??_C@_0CJ@FIEHEEPH@Invalid?5Param?4?5Allowed?5Flags?5are@
0x180004BF0: EaQueryAggregatedEvent
0x18000EF88: "__cdecl _imp_RtlComputeCrc32" __imp_RtlComputeCrc32
0x180009D90: EapQueryAggregatedEventConditionPostVisitNode
0x180001970: EaiAggregationConditionNextChild
0x18000EDE8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180011B58: "__cdecl _rtc_tzz" __rtc_tzz
0x18000F0E0: "__cdecl _guard_fids_table" __guard_fids_table
0x18000ACD0: EaDeleteAggregatedEventParametersNextChild
0x18000EC00: "__cdecl load_config_used" _load_config_used
0x18001296C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000F270: "EaiValidateParameters" ??_C@_0BG@ECKEKMPA@EaiValidateParameters?$AA@
0x18000ED68: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000FE28: EA_STORE_AGGRERATED_EVENT_FIELD_CONDITION
0x18000ED58: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000EF30: "__cdecl _imp_ZwClose" __imp_ZwClose
0x18000F0B0: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x18000EFC0: "__cdecl _imp_NtQueryWnfStateData" __imp_NtQueryWnfStateData
0x18000F968: "ServerAuthString" ??_C@_1CC@IHKHPPJP@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180005238: EaiCreateAggregation
0x18000EFF8: "__cdecl _imp_RtlDeleteHashTable" __imp_RtlDeleteHashTable
0x18000EE68: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x180003428: EaiFindAndAcquireAggregateEvent
0x18000C8F8: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180006E00: BriIsBrokerRegistered
0x18000EF40: "__cdecl _imp_TpReleaseTimer" __imp_TpReleaseTimer
0x1800085A0: EaFreeBuffer
0x18000F3D0: "WnfEventCallback" ??_C@_0BB@NDOGNILF@WnfEventCallback?$AA@
0x18000EF50: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000EFE8: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x18000EDE0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800128F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x18000CFB8: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x18000EE20: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x18000ED98: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1800081B0: BrpInitOnceRunOnceCallback
0x18000EF38: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180010590: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000F4C0: "EaiEnableAggregateEvent" ??_C@_0BI@PDLNEGIJ@EaiEnableAggregateEvent?$AA@
0x18000F738: "EaDeleteAggregation" ??_C@_0BE@LDOBFKEI@EaDeleteAggregation?$AA@
0x180005AE0: EaDeleteAggregation
0x180014080: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180003694: EaiEnableAggregateEvent
0x180006DD0: MIDL_user_allocate
0x18000CB00: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000F038: "__cdecl _imp_RtlEnumerateEntryHashTable" __imp_RtlEnumerateEntryHashTable
0x18000CFB8: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x18000CFC4: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x18000EF00: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x180014720: BrokeredEventTableLock
0x1800047B0: EAQueryAggregateEventData
0x18000EEE0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800129D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x1800067A0: EapCreateAggregatedEventConditionVisitNode
0x18000ED10: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x18000CEB2: "__cdecl initterm_e" _initterm_e
0x18000EEB0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000F990: "ServerPrincipal" ??_C@_1CA@MNMMPMHI@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAn?$AAc?$AAi?$AAp?$AAa?$AAl?$AA?$AA@
0x18000C898: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180004640: EAEnumerateAggregateEvents
0x18000C6AC: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x18000F078: ntdll_NULL_THUNK_DATA
0x18000EE30: "__cdecl _imp_memcpy" __imp_memcpy
0x18000CF36: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x1800011F4: WPP_SF_DDD
0x180001340: WPP_SF_ddd
0x18000F560: "Event set to be disabled" ??_C@_0BJ@ELNKIKHO@Event?5set?5to?5be?5disabled?$AA@
0x18000CFB8: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x18000F068: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x18000EE88: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000EE98: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180014040: "__cdecl _security_cookie" __security_cookie
0x18000C918: "__cdecl _scrt_fastfail" __scrt_fastfail
0x180007558: BripCreateBindingContext
0x18000F888: WPP_c3fa72ab62343567ce2c56b1499dbae5_Traceguids
0x180007754: BriDeleteEventImpl
0x1800128E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x18000EF20: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x180007CE0: BripGetEventContextData
0x18000ED88: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800129F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000EDA0: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x18000EE48: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x18000F520: "OnEnable Event" ??_C@_0P@BFJEKIOA@OnEnable?5Event?$AA@
0x180006FDC: BripCleanupEventTable
0x180003510: EaiSetConditionsEnabledStateVisitNode
0x1800034B0: EaiReleaseAggregateEvent
0x180007450: BripCreateEventContext
0x18000EE00: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x180014050: "__cdecl _isa_available" __isa_available
0x18000F2F0: "Invalid Param. No trigger and no" ??_C@_0CL@BMINNCGJ@Invalid?5Param?4?5No?5trigger?5and?5no@
0x18000EFA0: "__cdecl _imp_RtlStringFromGUID" __imp_RtlStringFromGUID
0x18000ED78: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000C024: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x180005868: EaiExtractEventAggregation
0x18000EE28: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180014674: "__cdecl _favor" __favor
0x18000F2B8: "Invalid Param. Number of conditi" ??_C@_0DC@DNOIOCFD@Invalid?5Param?4?5Number?5of?5conditi@
0x18000C428: "__cdecl _security_init_cookie" __security_init_cookie
0x18000139C: WPP_SF_q
0x18000EE08: "__cdecl _imp__cexit" __imp__cexit
0x1800091A0: EapQuerySimpleEventParameters
0x1800049B0: EaSignalAggregatedEvent
0x18000EEF0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180006770: EapFreeAggregatedEventConditionNextChild
0x18000F0D8: "__cdecl _xt_z" __xt_z
0x18000A470: EapStoreAggregatedEventConditionPostVisitNode
0x1800015A0: EaiValidateParameters
0x18000EEC8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800063D0: EaQueryAggregateEventConditionState
0x18000C568: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x180012958: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000EFB8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180014688: AggregateInitOnce
0x180003030: EaiSignalCallback
0x18000ED38: RPCRT4_NULL_THUNK_DATA
0x18000C60C: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x18000F950: "ServerAuth" ??_C@_1BG@HCDEBCJD@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAA?$AAu?$AAt?$AAh?$AA?$AA@
0x18000CB70: "__cdecl _report_gsfailure" __report_gsfailure
0x18001239C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x18000C014: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x180007230: BripCreateBrokeredEvent
0x18000B290: EaLibTimeLimitCallback
0x18000EF18: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x18000F3E8: "WNF event is deleted" ??_C@_0BF@CKLJKECG@WNF?5event?5is?5deleted?$AA@
0x1800140A0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x18000F440: "No matching condition" ??_C@_0BG@GPHOGGMF@No?5matching?5condition?$AA@
0x18000F8A0: "\Registry\Machine\Software\Micro" ??_C@_1KO@LILNALMB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180005E60: EaEnableAggregatedEvent
0x180006ED0: BriCleanup
0x18000ED28: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x18000F030: "__cdecl _imp_RtlEndEnumerationHashTable" __imp_RtlEndEnumerationHashTable
0x18000ED20: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x18000F660: "(AggregatedRuntime->Trigger == N" ??_C@_0FA@KOEGCJHB@?$CIAggregatedRuntime?9?$DOTrigger?5?$DN?$DN?5N@
0x18000EE10: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180008848: EapTreeTraverse
0x1800026D0: EaiProcessNotification
0x180009D70: EaDeleteAggregatedEventParametersCloseChild
0x180004D20: EaiDuplicateConditionsVisitNode
0x1800129A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000F780: "Failed to disable Aggregate Even" ??_C@_0DC@LFEIPDNN@Failed?5to?5disable?5Aggregate?5Even@
0x180008AC0: EaEncodeBrokeredEvent
0x18000EE00: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x18000EE08: "__cdecl _imp__o__cexit" __imp__o__cexit
0x18000F000: "__cdecl _imp_RtlLookupEntryHashTable" __imp_RtlLookupEntryHashTable
0x180007BDC: BripFindEventContextByEventId
0x18000EF28: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x18000CEEE: "__cdecl execute_onexit_table" _execute_onexit_table
0x180014690: BrokerBindingTable
0x18000CEBE: memset
0x180012A48: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800019A0: EaiEvaluateAggregationConditionVisitNode
0x180014088: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]