Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winrscmd.dll Base=0x180000000 SHA-256=939B62237C2A3B75C9905C357CB1D9883F4A639C2FBE75F341FE7240AC5C876C
PDB: winrscmd.pdb GUID={45EA3341-058D-5C43-2B84276413D827AD} Age=1

737 located named symbols:
0x180005928: "public: unsigned long __cdecl Pipe_StdErrorPipe_Thread::ReportData(void) __ptr64" ?ReportData@Pipe_StdErrorPipe_Thread@@QEAAKXZ
0x18000188C: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::_Erase(struct std::_Tree_nod<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::_Node * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@std@@IEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@2@@Z
0x1800145D8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180014F18: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x180004EEC: "public: unsigned long __cdecl Pipe_Thread::Initialize(void) __ptr64" ?Initialize@Pipe_Thread@@QEAAKXZ
0x180012E5C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000379C: "public: __cdecl MyAutoRelease<class Winrs_Command>::~MyAutoRelease<class Winrs_Command>(void) __ptr64" ??1?$MyAutoRelease@VWinrs_Command@@@@QEAA@XZ
0x1800040E4: "public: unsigned long __cdecl ComLifetime_Thread::WaitForTerminate(void) __ptr64" ?WaitForTerminate@ComLifetime_Thread@@QEAAKXZ
0x1800143E8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180001700: "public: void __cdecl SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::Acquire(void) __ptr64" ?Acquire@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAAXXZ
0x180014E68: "442" ??_C@_17FOJDAIIA@?$AA4?$AA4?$AA2?$AA?$AA@
0x180014F08: "634" ??_C@_17CENIGAJJ@?$AA6?$AA3?$AA4?$AA?$AA@
0x180014440: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180012BD0: "__cdecl FindPESection" _FindPESection
0x180014278: "__cdecl _imp_??1AutoHandle@@QEAA@XZ" __imp_??1AutoHandle@@QEAA@XZ
0x1800142C0: "__cdecl _imp_??0AutoHandle@@QEAA@XZ" __imp_??0AutoHandle@@QEAA@XZ
0x18000CA78: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Delete_LeftBalance(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Delete_LeftBalance@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180015348: "532" ??_C@_17IPDMDIKG@?$AA5?$AA3?$AA2?$AA?$AA@
0x180014BA8: LOG_WSMAN_AN_TRANSFER_EVENT
0x1800037E4: "public: __cdecl MyAutoRelease<class Winrs_Shell>::~MyAutoRelease<class Winrs_Shell>(void) __ptr64" ??1?$MyAutoRelease@VWinrs_Shell@@@@QEAA@XZ
0x18001D028: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x180010CC0: "public: unsigned long __cdecl Winrs_Send::Push(unsigned short * __ptr64,struct _WINRS_PUSH_REQUEST * __ptr64) __ptr64" ?Push@Winrs_Send@@QEAAKPEAGPEAU_WINRS_PUSH_REQUEST@@@Z
0x1800123E0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800189D8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180014018: "const SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::`vftable'" ??_7?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@6B@
0x180001150: WSManPluginReleaseShellContext
0x180001D70: WSManPluginShell
0x180014E30: "284" ??_C@_17MKFFJOKA@?$AA2?$AA8?$AA4?$AA?$AA@
0x180018988: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x180006AA0: "int __cdecl ProcessCreateOptions(class IRequestContext * __ptr64,struct _WSMAN_OPTION_SET * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?ProcessCreateOptions@@YAHPEAVIRequestContext@@PEAU_WSMAN_OPTION_SET@@PEAK2@Z
0x180014E98: "510" ??_C@_17GIPNFBCG@?$AA5?$AA1?$AA0?$AA?$AA@
0x18001B0B8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180014420: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x1800152B0: "%windir%\system32\cmd.exe" ??_C@_1DE@KLCKEDFP@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAc?$AAm?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800037C0: "public: __cdecl MyAutoRelease<class Winrs_Send>::~MyAutoRelease<class Winrs_Send>(void) __ptr64" ??1?$MyAutoRelease@VWinrs_Send@@@@QEAA@XZ
0x180001820: "protected: class STLMap<class Locale::Key,unsigned long> & __ptr64 __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::Data(void)const __ptr64" ?Data@?$SafeMap_Iterator@VKey@Locale@@K@@IEBAAEAV?$STLMap@VKey@Locale@@K@@XZ
0x18001245C: "__cdecl CRT_INIT" _CRT_INIT
0x180017C78: "__cdecl TI1?AVOutOfMemoryException@@" _TI1?AVOutOfMemoryException@@
0x18000D768: "public: __cdecl Wmi_Heap_Exception::Wmi_Heap_Exception(enum Wmi_Heap_Exception::HEAP_ERROR) __ptr64" ??0Wmi_Heap_Exception@@QEAA@W4HEAP_ERROR@0@@Z
0x1800144D0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180010BB0: "private: unsigned long __cdecl Winrs_Send::WriteToShellStdin(unsigned long,unsigned char * __ptr64) __ptr64" ?WriteToShellStdin@Winrs_Send@@AEAAKKPEAE@Z
0x180014E50: "335" ??_C@_17NEIEAJJI@?$AA3?$AA3?$AA5?$AA?$AA@
0x180012936: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180001DE0: WPP_SF_L
0x1800146D0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000FDE0: "private: unsigned long __cdecl Winrs_Command::AssignProcessToJobObject(void * __ptr64) __ptr64" ?AssignProcessToJobObject@Winrs_Command@@AEAAKPEAX@Z
0x1800018F0: WppControlCallback
0x180014318: "__cdecl _imp_?ShutdownLocaleMap@Locale@@SAXXZ" __imp_?ShutdownLocaleMap@Locale@@SAXXZ
0x180013280: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180014260: "__cdecl _imp_??4?$AutoDeleteVector@G@@QEAAAEAV0@PEAG@Z" __imp_??4?$AutoDeleteVector@G@@QEAAAEAV0@PEAG@Z
0x180001760: "protected: void __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::SkipOrphans(void) __ptr64" ?SkipOrphans@?$SafeMap_Iterator@VKey@Locale@@K@@IEAAXXZ
0x180014248: "__cdecl _imp_??4?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAAAEAV0@PEAU_WINRS_RUN_COMMAND_ARG@@@Z" __imp_??4?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAAAEAV0@PEAU_WINRS_RUN_COMMAND_ARG@@@Z
0x180017D80: USERENV_NULL_THUNK_DATA_DLN
0x180014358: "__cdecl _imp_WSManPluginReportContext" __imp_WSManPluginReportContext
0x18000DFF4: "public: unsigned long __cdecl Winrs_Command::SetApp(unsigned short const * __ptr64,unsigned long) __ptr64" ?SetApp@Winrs_Command@@QEAAKPEBGK@Z
0x180001D80: WSManPluginCommand
0x180015488: "748" ??_C@_17LPKBOPAH@?$AA7?$AA4?$AA8?$AA?$AA@
0x180003974: "public: enum WmiStatusCode __cdecl WmiAllocator::Initialize(void) __ptr64" ?Initialize@WmiAllocator@@QEAA?AW4WmiStatusCode@@XZ
0x18000969C: "public: unsigned long __cdecl Winrs_Shell::SetEnvironment(unsigned long,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64) __ptr64" ?SetEnvironment@Winrs_Shell@@QEAAKKPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x180001680: "public: void __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::Reset(void) __ptr64" ?Reset@?$SafeMap_Iterator@VKey@Locale@@K@@QEAAXXZ
0x180011B20: "private: static unsigned long __cdecl Winrs_Receive::ReceiveCancellationCallback2(void * __ptr64)" ?ReceiveCancellationCallback2@Winrs_Receive@@CAKPEAX@Z
0x180015290: "1076" ??_C@_19NCLGLNJK@?$AA1?$AA0?$AA7?$AA6?$AA?$AA@
0x180014448: "__cdecl _imp_CancelIoEx" __imp_CancelIoEx
0x180010134: "public: unsigned long __cdecl Winrs_Command::RegisterForCancellation(struct _WSMAN_PLUGIN_REQUEST * __ptr64) __ptr64" ?RegisterForCancellation@Winrs_Command@@QEAAKPEAU_WSMAN_PLUGIN_REQUEST@@@Z
0x180006054: "int __cdecl EnvironmentVariableSetToShellEnvironmentVariable(class IRequestContext * __ptr64,struct _WSMAN_ENVIRONMENT_VARIABLE_SET * __ptr64,unsigned long * __ptr64,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64 * __ptr64)" ?EnvironmentVariableSetToShellEnvironmentVariable@@YAHPEAVIRequestContext@@PEAU_WSMAN_ENVIRONMENT_VARIABLE_SET@@PEAKPEAPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x180013233: "__cdecl _imp_load_DestroyEnvironmentBlock" __imp_load_DestroyEnvironmentBlock
0x1800072A4: "int __cdecl ProcessCommandOptions(class IRequestContext * __ptr64,struct _WSMAN_OPTION_SET * __ptr64,unsigned long * __ptr64)" ?ProcessCommandOptions@@YAHPEAVIRequestContext@@PEAU_WSMAN_OPTION_SET@@PEAK@Z
0x1800155A0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180006798: "int __cdecl IsValidOption(class IRequestContext * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64)" ?IsValidOption@@YAHPEAVIRequestContext@@PEBGKPEAPEBG@Z
0x18001B690: "__cdecl _hmod__USERENV_dll" __hmod__USERENV_dll
0x180006E24: "int __cdecl GetIntOption(class IRequestContext * __ptr64,struct _WSMAN_OPTION_SET * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long)" ?GetIntOption@@YAHPEAVIRequestContext@@PEAU_WSMAN_OPTION_SET@@PEBGPEAKK@Z
0x180018924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18001880C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180007544: "unsigned long __cdecl WinrsExpandEnvironmentStrings(void * __ptr64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?WinrsExpandEnvironmentStrings@@YAKPEAXPEBG_KPEAG2PEA_K@Z
0x180017E88: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x180014F68: "768" ??_C@_17PCGJEOAM@?$AA7?$AA6?$AA8?$AA?$AA@
0x18000B758: "public: unsigned long __cdecl Winrs_Shell::RegisterForCancellation(struct _WSMAN_PLUGIN_REQUEST * __ptr64) __ptr64" ?RegisterForCancellation@Winrs_Shell@@QEAAKPEAU_WSMAN_PLUGIN_REQUEST@@@Z
0x180015100: "http://schemas.microsoft.com/wbe" ??_C@_1HI@HCCHJAKI@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x180004494: "public: __cdecl Pipe_Thread::Pipe_Thread(void) __ptr64" ??0Pipe_Thread@@QEAA@XZ
0x180014EE0: "WINRS_CODEPAGE" ??_C@_1BO@HMKOMDNJ@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAC?$AAO?$AAD?$AAE?$AAP?$AAA?$AAG?$AAE?$AA?$AA@
0x180014568: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18000CC38: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Delete_RightBalance(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Delete_RightBalance@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180014240: "__cdecl _imp_??1?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ" __imp_??1?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ
0x180014258: "__cdecl _imp_??0?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ" __imp_??0?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ
0x180004584: "public: virtual __cdecl Pipe_Thread::~Pipe_Thread(void) __ptr64" ??1Pipe_Thread@@UEAA@XZ
0x1800146E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180014F60: "767" ??_C@_17KKAKFOFK@?$AA7?$AA6?$AA7?$AA?$AA@
0x180014F90: "WINRS_CONSOLEMODE_STDIN" ??_C@_1DA@EOAKHDKB@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAC?$AAO?$AAN?$AAS?$AAO?$AAL?$AAE?$AAM?$AAO?$AAD?$AAE?$AA_?$AAS?$AAT?$AAD?$AAI?$AAN?$AA?$AA@
0x180014550: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180014FC0: "WINRS_SKIP_CMD_SHELL" ??_C@_1CK@PEAAHFGD@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAS?$AAK?$AAI?$AAP?$AA_?$AAC?$AAM?$AAD?$AA_?$AAS?$AAH?$AAE?$AAL?$AAL?$AA?$AA@
0x180014630: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180004AA0: "public: static unsigned long __cdecl Pipe_Thread::InitializeSupportEnvironment(void)" ?InitializeSupportEnvironment@Pipe_Thread@@SAKXZ
0x180012118: "public: void __cdecl Winrs_Receive::CancelOperation(unsigned long) __ptr64" ?CancelOperation@Winrs_Receive@@QEAAXK@Z
0x1800141D8: "__cdecl _imp_??1?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ" __imp_??1?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ
0x1800141F8: "__cdecl _imp_??0?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ" __imp_??0?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ
0x1800131A8: "__cdecl _imp_load_CreateEnvironmentBlock" __imp_load_CreateEnvironmentBlock
0x18000B510: "public: class Winrs_Command * __ptr64 __cdecl Winrs_Shell::FindCommand(class CommandIdentifier & __ptr64) __ptr64" ?FindCommand@Winrs_Shell@@QEAAPEAVWinrs_Command@@AEAVCommandIdentifier@@@Z
0x18000F7F0: "public: unsigned long __cdecl Winrs_Command::Terminate(void) __ptr64" ?Terminate@Winrs_Command@@QEAAKXZ
0x180012BB1: "__cdecl XcptFilter" _XcptFilter
0x1800146F0: "__cdecl _xc_a" __xc_a
0x18000BCCC: "public: __cdecl SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty>::SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty>(class SafeMap<class CShellUriSettings * __ptr64,struct Empty,class SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty> > & __ptr64,bool) __ptr64" ??0?$SafeMap_Iterator@PEAVCShellUriSettings@@UEmpty@@@@QEAA@AEAV?$SafeMap@PEAVCShellUriSettings@@UEmpty@@V?$SafeMap_Iterator@PEAVCShellUriSettings@@UEmpty@@@@@@_N@Z
0x180004650: "private: static unsigned long __cdecl Pipe_Thread::ThreadExecutionProcedure(void * __ptr64)" ?ThreadExecutionProcedure@Pipe_Thread@@CAKPEAX@Z
0x180017CEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x18001067C: "public: long __cdecl Winrs_Send::Release(void) __ptr64" ?Release@Winrs_Send@@QEAAJXZ
0x180014DC0: "onecore\admin\wmi\wmx\winrs\plug" ??_C@_1GM@FHJKMOG@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?2?$AAp?$AAl?$AAu?$AAg@
0x180010FF8: "public: __cdecl Winrs_Receive::Winrs_Receive(class Winrs_Shell * __ptr64,class Winrs_Command * __ptr64) __ptr64" ??0Winrs_Receive@@QEAA@PEAVWinrs_Shell@@PEAVWinrs_Command@@@Z
0x180001E90: "void __cdecl CmdPluginShell(void * __ptr64,struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,struct _WSMAN_SHELL_STARTUP_INFO_V11 * __ptr64,struct _WSMAN_DATA * __ptr64)" ?CmdPluginShell@@YAXPEAXPEAU_WSMAN_PLUGIN_REQUEST@@KPEAU_WSMAN_SHELL_STARTUP_INFO_V11@@PEAU_WSMAN_DATA@@@Z
0x1800189C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0
0x1800153E0: "http://schemas.microsoft.com/wbe" ??_C@_1JK@JMOIJJFL@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x18001B050: "__vectorcall ??_R0?AVOutOfMemoryException@" ??_R0?AVOutOfMemoryException@@@8
0x180005210: "public: unsigned long __cdecl Pipe_StdOutPipe_Thread::ReportData(void) __ptr64" ?ReportData@Pipe_StdOutPipe_Thread@@QEAAKXZ
0x180014430: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18001D048: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x180013017: "__cdecl lock" _lock
0x180014DB0: "283" ??_C@_17FHICKGBJ@?$AA2?$AA8?$AA3?$AA?$AA@
0x180008C8C: "private: long __cdecl Winrs_Shell::CreateInstance(struct _GUID const & __ptr64,struct IUnknown * __ptr64,unsigned long const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@Winrs_Shell@@AEAAJAEBU_GUID@@PEAUIUnknown@@AEBK0PEAPEAX@Z
0x1800154B0: "http://schemas.microsoft.com/wbe" ??_C@_1JE@CLJLAHBJ@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x18000DDCC: "public: unsigned long __cdecl Winrs_Command::InitializeThreads(void) __ptr64" ?InitializeThreads@Winrs_Command@@QEAAKXZ
0x180001640: "public: __cdecl SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >(class SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> > const & __ptr64,bool) __ptr64" ??0?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@AEBV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z
0x1800144A0: "__cdecl _imp_CreatePipe" __imp_CreatePipe
0x180015188: "2401" ??_C@_19DNBJAAGC@?$AA2?$AA4?$AA0?$AA1?$AA?$AA@
0x180009AE8: "public: unsigned long __cdecl Winrs_Shell::RunCommand(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned long,struct _WINRS_RUN_COMMAND_ARG * __ptr64) __ptr64" ?RunCommand@Winrs_Shell@@QEAAKPEAU_WSMAN_PLUGIN_REQUEST@@KKPEBGKPEAU_WINRS_RUN_COMMAND_ARG@@@Z
0x180014848: "__cdecl _guard_iat_table" __guard_iat_table
0x180013245: memcpy
0x180014F00: "633" ??_C@_17LJAPFICA@?$AA6?$AA3?$AA3?$AA?$AA@
0x18000DC9C: "public: unsigned long __cdecl Winrs_Command::Initialize(void) __ptr64" ?Initialize@Winrs_Command@@QEAAKXZ
0x180012B2C: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18000A0D8: "public: unsigned long __cdecl Winrs_Shell::GetWinrsEnvironmentBlockLength(void) __ptr64" ?GetWinrsEnvironmentBlockLength@Winrs_Shell@@QEAAKXZ
0x180005B38: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::RecursiveUnInitialize(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64) __ptr64" ?RecursiveUnInitialize@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@PEAVWmiAvlNode@1@@Z
0x1800146B0: "__cdecl _imp_memset" __imp_memset
0x180014558: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x180014578: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180012D8F: "__cdecl initterm" _initterm
0x1800145F0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000CDFC: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::DeleteFixup(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?DeleteFixup@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@PEAVWmiAvlNode@1@AEA_N@Z
0x180014FF0: "636" ??_C@_17IONBKIBC@?$AA6?$AA3?$AA6?$AA?$AA@
0x1800188AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001B770: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180014CB0: "1008" ??_C@_19CPGMPKBB@?$AA1?$AA0?$AA0?$AA8?$AA?$AA@
0x180014588: "__cdecl _imp_Sleep" __imp_Sleep
0x180015260: "1049" ??_C@_19MEBNPGC@?$AA1?$AA0?$AA4?$AA9?$AA?$AA@
0x180015198: "2797" ??_C@_19LBPCAJJF@?$AA2?$AA7?$AA9?$AA7?$AA?$AA@
0x180014728: "__cdecl _xi_z" __xi_z
0x1800143B8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800146C0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180012D9B: "__cdecl _C_specific_handler" __C_specific_handler
0x180017CC0: "__cdecl CTA1?AVWmi_Heap_Exception@@" _CTA1?AVWmi_Heap_Exception@@
0x180001610: "public: __cdecl SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::~SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >(void) __ptr64" ??1?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ
0x18000ABF4: "public: unsigned long __cdecl Winrs_Shell::Initialize(unsigned short const * __ptr64,void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned long,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64) __ptr64" ?Initialize@Winrs_Shell@@QEAAKPEBGPEAXK0KPEAG2KK0KPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x18001B6A0: "struct _RTL_CRITICAL_SECTION s_CriticalSection" ?s_CriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x1800087F0: "public: long __cdecl Winrs_Shell::InternalAddRef(void) __ptr64" ?InternalAddRef@Winrs_Shell@@QEAAJXZ
0x1800146A8: "__cdecl _imp__onexit" __imp__onexit
0x180014468: "__cdecl _imp_TerminateJobObject" __imp_TerminateJobObject
0x180014410: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180014BD0: "CPullSubscription :: ThreadExecu" ??_C@_1GC@IIANKKPO@?$AAC?$AAP?$AAu?$AAl?$AAl?$AAS?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?3?$AA?3?$AA?5?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAE?$AAx?$AAe?$AAc?$AAu@
0x1800149A8: WPP_ThisDir_CTLGUID_RemoteShell
0x180014EA0: "561" ??_C@_17MNEEAGPL@?$AA5?$AA6?$AA1?$AA?$AA@
0x18001B6F0: WPP_REGISTRATION_GUIDS
0x180010398: "public: virtual __cdecl Pipe_StdErrorPipe_Thread::~Pipe_StdErrorPipe_Thread(void) __ptr64" ??1Pipe_StdErrorPipe_Thread@@UEAA@XZ
0x180014400: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800142F8: "__cdecl _imp_?Alloc@WSManMemory@@SAPEAX_KHW4_NitsFaultMode@@@Z" __imp_?Alloc@WSManMemory@@SAPEAX_KHW4_NitsFaultMode@@@Z
0x180012AC8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001150: WSManPluginReleaseCommandContext
0x180014268: "__cdecl _imp_??0?$AutoDeleteVector@G@@QEAA@PEAG@Z" __imp_??0?$AutoDeleteVector@G@@QEAA@PEAG@Z
0x1800152E8: "Global\Winrs_Shell_JOB_" ??_C@_1DA@PAOGPOA@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAW?$AAi?$AAn?$AAr?$AAs?$AA_?$AAS?$AAh?$AAe?$AAl?$AAl?$AA_?$AAJ?$AAO?$AAB?$AA_?$AA?$AA@
0x180010AB4: "private: unsigned long __cdecl Winrs_Send::WriteEof(void) __ptr64" ?WriteEof@Winrs_Send@@AEAAKXZ
0x18000BDC4: "public: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Insert(class Winrs_Shell * __ptr64 const & __ptr64,class Winrs_Shell * __ptr64 const & __ptr64,class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Iterator & __ptr64) __ptr64" ?Insert@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@QEAA?AW4WmiStatusCode@@AEBQEAVWinrs_Shell@@0AEAVIterator@1@@Z
0x180015318: "1681" ??_C@_19HIFIDOHB@?$AA1?$AA6?$AA8?$AA1?$AA?$AA@
0x1800142F0: "__cdecl _imp_?Free@WSManMemory@@SAXPEAXH@Z" __imp_?Free@WSManMemory@@SAXPEAXH@Z
0x180014238: "__cdecl _imp_??0CErrorContext@@QEAA@_N@Z" __imp_??0CErrorContext@@QEAA@_N@Z
0x180011F54: "public: unsigned long __cdecl Winrs_Receive::ReportEndOfStream(unsigned short const * __ptr64) __ptr64" ?ReportEndOfStream@Winrs_Receive@@QEAAKPEBG@Z
0x180014048: "const ComLifetime_Thread::`vftable'" ??_7ComLifetime_Thread@@6B@
0x180014270: "__cdecl _imp_?StringToDword@@YAHPEBGPEAK@Z" __imp_?StringToDword@@YAHPEBGPEAK@Z
0x18001B6C8: WPP_MAIN_CB
0x180010400: "public: virtual void * __ptr64 __cdecl Pipe_StdErrorPipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EPipe_StdErrorPipe_Thread@@UEAAPEAXI@Z
0x180014F78: "839" ??_C@_17MDDIKKHG@?$AA8?$AA3?$AA9?$AA?$AA@
0x180018938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1800142C8: "__cdecl _imp_??0AutoHandle@@QEAA@PEAX@Z" __imp_??0AutoHandle@@QEAA@PEAX@Z
0x1800104F0: "public: virtual void * __ptr64 __cdecl Pipe_StdOutPipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EPipe_StdOutPipe_Thread@@UEAAPEAXI@Z
0x180012BBD: "__cdecl amsg_exit" _amsg_exit
0x1800016E0: "public: class SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> > & __ptr64 __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::GetMap(void)const __ptr64" ?GetMap@?$SafeMap_Iterator@VKey@Locale@@K@@QEBAAEAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ
0x18001B008: "public: static class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64> Winrs_Shell::s_ShellContainer" ?s_ShellContainer@Winrs_Shell@@2V?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@A
0x180015270: "1055" ??_C@_19INMLLDHP@?$AA1?$AA0?$AA5?$AA5?$AA?$AA@
0x180014910: IID_IClassFactory
0x180014458: "__cdecl _imp_SetInformationJobObject" __imp_SetInformationJobObject
0x180015598: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000B360: "public: unsigned long __cdecl Winrs_Shell::AddCommand(class Winrs_Command * __ptr64,class CommandIdentifier & __ptr64) __ptr64" ?AddCommand@Winrs_Shell@@QEAAKPEAVWinrs_Command@@AEAVCommandIdentifier@@@Z
0x180009424: "public: struct IShell * __ptr64 __cdecl Winrs_Shell::GetHostShell(void) __ptr64" ?GetHostShell@Winrs_Shell@@QEAAPEAUIShell@@XZ
0x18000FD30: "private: unsigned long __cdecl Winrs_Command::DeleteJobObject(void) __ptr64" ?DeleteJobObject@Winrs_Command@@AEAAKXZ
0x180018960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x180005E7C: "unsigned long __cdecl GetSid(unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?GetSid@@YAKPEAPEAGPEAPEAX@Z
0x18001B680: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x1800141C8: "__cdecl _imp_WSManPluginReceiveResult" __imp_WSManPluginReceiveResult
0x180004B70: "public: static unsigned long __cdecl Pipe_Thread::UnInitializeSupportEnvironment(void)" ?UnInitializeSupportEnvironment@Pipe_Thread@@SAKXZ
0x18001B688: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x1800107C4: "private: unsigned long __cdecl Winrs_Send::DecodeStdio(unsigned short * __ptr64,unsigned long & __ptr64) __ptr64" ?DecodeStdio@Winrs_Send@@AEAAKPEAGAEAK@Z
0x180004C40: "private: unsigned long __cdecl Pipe_Thread::CreateSupportEnvironment(void) __ptr64" ?CreateSupportEnvironment@Pipe_Thread@@AEAAKXZ
0x18001B020: "private: static class ComLifetime_Thread ComLifetime_Thread::s_LifetimeThread" ?s_LifetimeThread@ComLifetime_Thread@@0V1@A
0x180015008: WPP_e9644be62b4234461582d7b9ac9e7416_Traceguids
0x180014688: "__cdecl _imp__lock" __imp__lock
0x180012E3C: atexit
0x180014E48: "333" ??_C@_17PBOPFGEE@?$AA3?$AA3?$AA3?$AA?$AA@
0x180007DBC: "unsigned long __cdecl WinrsSetEnvironmentVariable(void * __ptr64 * __ptr64,struct _UNICODE_STRING const * __ptr64,struct _UNICODE_STRING const * __ptr64)" ?WinrsSetEnvironmentVariable@@YAKPEAPEAXPEBU_UNICODE_STRING@@1@Z
0x18001140C: "public: unsigned long __cdecl Winrs_Receive::Initialize(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,bool & __ptr64) __ptr64" ?Initialize@Winrs_Receive@@QEAAKPEAU_WSMAN_PLUGIN_REQUEST@@PEAG1AEA_N@Z
0x180014280: "__cdecl _imp_?IsValid@CWSManCriticalSection@@QEBAHXZ" __imp_?IsValid@CWSManCriticalSection@@QEBAHXZ
0x18000E2A4: "public: unsigned long __cdecl Winrs_Command::GetInputMode(void) __ptr64" ?GetInputMode@Winrs_Command@@QEAAKXZ
0x1800102C0: "private: static void __cdecl Winrs_Command::CommandCancellationCallback(void * __ptr64,unsigned char)" ?CommandCancellationCallback@Winrs_Command@@CAXPEAXE@Z
0x180014E60: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x18001D018: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x180001450: "public: class SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> > & __ptr64 __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::AsReference(void) __ptr64" ?AsReference@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAAAEAV1@XZ
0x180003DF0: "private: static unsigned long __cdecl ComLifetime_Thread::ThreadExecutionProcedure(void * __ptr64)" ?ThreadExecutionProcedure@ComLifetime_Thread@@CAKPEAX@Z
0x180014548: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18001B080: "__vectorcall ??_R0?AVWmi_Heap_Exception@" ??_R0?AVWmi_Heap_Exception@@@8
0x18000A554: "public: unsigned long __cdecl Winrs_Shell::ValidateShellUri(int,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?ValidateShellUri@Winrs_Shell@@QEAAKHPEAPEAG0@Z
0x1800145E0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000FB6C: "private: unsigned long __cdecl Winrs_Command::CreateJobObjectW(void) __ptr64" ?CreateJobObjectW@Winrs_Command@@AEAAKXZ
0x180014860: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x180010490: "public: virtual __cdecl Pipe_StdOutPipe_Thread::~Pipe_StdOutPipe_Thread(void) __ptr64" ??1Pipe_StdOutPipe_Thread@@UEAA@XZ
0x1800143D0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800145E8: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180014488: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180003214: "void __cdecl CmdPluginReceive(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,void * __ptr64,void * __ptr64,struct _WSMAN_STREAM_ID_SET * __ptr64)" ?CmdPluginReceive@@YAXPEAU_WSMAN_PLUGIN_REQUEST@@KPEAX1PEAU_WSMAN_STREAM_ID_SET@@@Z
0x180008AFC: "private: unsigned long __cdecl Winrs_Shell::InitializeJobObjectLimits(void) __ptr64" ?InitializeJobObjectLimits@Winrs_Shell@@AEAAKXZ
0x1800153C8: "600" ??_C@_17CNCOIFGA@?$AA6?$AA0?$AA0?$AA?$AA@
0x1800144E8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18001302F: "__cdecl _dllonexit" __dllonexit
0x180017D2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USERENV_dll" __DELAY_IMPORT_DESCRIPTOR_USERENV_dll
0x18001B760: "__cdecl _native_startup_lock" __native_startup_lock
0x180001978: DllMain
0x180004F70: "private: virtual unsigned long __cdecl Pipe_StdInPipe_Thread::Execute(void) __ptr64" ?Execute@Pipe_StdInPipe_Thread@@EEAAKXZ
0x180014200: "__cdecl _imp_?CreateActivityId@EventHandler@WSMan@@SAXAEAU_GUID@@@Z" __imp_?CreateActivityId@EventHandler@WSMan@@SAXAEAU_GUID@@@Z
0x180015490: "779" ??_C@_17IBIJPKMM@?$AA7?$AA7?$AA9?$AA?$AA@
0x180014498: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x180014640: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180015498: "791" ??_C@_17HODHLDFD@?$AA7?$AA9?$AA1?$AA?$AA@
0x180014670: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800144C8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180014538: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000FFA0: "private: unsigned long __cdecl Winrs_Command::CreateJobObjectName(void) __ptr64" ?CreateJobObjectName@Winrs_Command@@AEAAKXZ
0x18001B748: "long s_ProviderInitialized" ?s_ProviderInitialized@@3JA
0x180018820: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x18000A1A8: "private: unsigned long __cdecl Winrs_Shell::InitializeStreamList(unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?InitializeStreamList@Winrs_Shell@@AEAAKPEAG0@Z
0x1800055D0: "private: virtual unsigned long __cdecl Pipe_StdErrorPipe_Thread::Execute(void) __ptr64" ?Execute@Pipe_StdErrorPipe_Thread@@EEAAKXZ
0x1800143B0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800011E0: "public: virtual bool __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::Initialize(class IRequestContext & __ptr64) __ptr64" ?Initialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEAA_NAEAVIRequestContext@@@Z
0x180011C70: "private: void __cdecl Winrs_Receive::DoCancellation(void) __ptr64" ?DoCancellation@Winrs_Receive@@AEAAXXZ
0x18000DB2C: "public: long __cdecl Winrs_Command::AddRef(void) __ptr64" ?AddRef@Winrs_Command@@QEAAJXZ
0x18001D040: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x1800143F0: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180001104: "void __cdecl operator delete(void * __ptr64,int const & __ptr64,enum _NitsFaultMode)" ??3@YAXPEAXAEBHW4_NitsFaultMode@@@Z
0x18001B0C0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180012AA4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001DA0: WSManPluginReceive
0x1800012D0: "public: __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::~SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >(void) __ptr64" ??1?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ
0x1800148A0: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x180001330: "public: __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >(void) __ptr64" ??0?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ
0x180014058: "const Pipe_StdErrorPipe_Thread::`vftable'" ??_7Pipe_StdErrorPipe_Thread@@6B@
0x180010400: "public: virtual void * __ptr64 __cdecl Pipe_StdErrorPipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPipe_StdErrorPipe_Thread@@UEAAPEAXI@Z
0x180011BC0: "private: static void __cdecl Winrs_Receive::ReceiveCancellationCallback(void * __ptr64,unsigned char)" ?ReceiveCancellationCallback@Winrs_Receive@@CAXPEAXE@Z
0x180008538: "public: __cdecl Winrs_Shell::~Winrs_Shell(void) __ptr64" ??1Winrs_Shell@@QEAA@XZ
0x1800104F0: "public: virtual void * __ptr64 __cdecl Pipe_StdOutPipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPipe_StdOutPipe_Thread@@UEAAPEAXI@Z
0x1800119F4: "public: unsigned long __cdecl Winrs_Receive::RegisterForCancellation(struct _WSMAN_PLUGIN_REQUEST * __ptr64) __ptr64" ?RegisterForCancellation@Winrs_Receive@@QEAAKPEAU_WSMAN_PLUGIN_REQUEST@@@Z
0x180008EAC: "private: unsigned long __cdecl Winrs_Shell::CreateHost(unsigned long,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64) __ptr64" ?CreateHost@Winrs_Shell@@AEAAKKKPEAG0KPEBGKPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x180014380: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x180017DA8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x1800083DC: "public: __cdecl Winrs_Shell::Winrs_Shell(void) __ptr64" ??0Winrs_Shell@@QEAA@XZ
0x180014BB8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180017E68: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x18001D038: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x180018A00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800144B8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180014E80: "472" ??_C@_17NIAHHKCO@?$AA4?$AA7?$AA2?$AA?$AA@
0x1800188E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x180014E38: "285" ??_C@_17HCOJPJMF@?$AA2?$AA8?$AA5?$AA?$AA@
0x180015350: "onecore\admin\wmi\wmx\winrs\plug" ??_C@_1HC@HJGOHMEM@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?2?$AAp?$AAl?$AAu?$AAg@
0x18000C8F0: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Insert_RightBalance(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Insert_RightBalance@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180015598: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180012C80: "__cdecl ValidateImageBase" _ValidateImageBase
0x180005BB4: "public: __cdecl InCritSec::~InCritSec(void) __ptr64" ??1InCritSec@@QEAA@XZ
0x180014328: "__cdecl _imp_?Shutdown@CConfigManager@@SAHXZ" __imp_?Shutdown@CConfigManager@@SAHXZ
0x180014900: IID_IUnknown
0x180003808: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180015588: CLSID_Winrs_CommandHost
0x180008880: "public: long __cdecl Winrs_Shell::InternalRelease(void) __ptr64" ?InternalRelease@Winrs_Shell@@QEAAJXZ
0x180015328: WPP_f610fc401a543229c327b59c1b2da6af_Traceguids
0x180003948: "public: __cdecl CommandIdentifier::~CommandIdentifier(void) __ptr64" ??1CommandIdentifier@@QEAA@XZ
0x1800039D0: "public: enum WmiStatusCode __cdecl WmiAllocator::UnInitialize(void) __ptr64" ?UnInitialize@WmiAllocator@@QEAA?AW4WmiStatusCode@@XZ
0x180014F2C: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x180001DBC: WPP_SF_
0x18000EA60: "public: unsigned long __cdecl Winrs_Command::ExecuteCreate(void) __ptr64" ?ExecuteCreate@Winrs_Command@@QEAAKXZ
0x180014418: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800149B8: WPP_06763590e40435ec39a6fef0d98f5ac2_Traceguids
0x18000C768: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::Insert_LeftBalance(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Insert_LeftBalance@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x18000F670: "public: unsigned long __cdecl Winrs_Command::Signal(class CommandIdentifier & __ptr64,unsigned short * __ptr64) __ptr64" ?Signal@Winrs_Command@@QEAAKAEAVCommandIdentifier@@PEAG@Z
0x180017D4C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180014508: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x18000F94C: "public: unsigned long __cdecl Winrs_Command::CancelIoThreads(void) __ptr64" ?CancelIoThreads@Winrs_Command@@QEAAKXZ
0x1800126A0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180014F70: "769" ??_C@_17EKNFCJGJ@?$AA7?$AA6?$AA9?$AA?$AA@
0x180014668: "__cdecl _imp__initterm" __imp__initterm
0x180018870: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x1800143C0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180002D10: "void __cdecl CmdPluginSend(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,void * __ptr64,void * __ptr64,unsigned short const * __ptr64,struct _WSMAN_DATA * __ptr64)" ?CmdPluginSend@@YAXPEAU_WSMAN_PLUGIN_REQUEST@@KPEAX1PEBGPEAU_WSMAN_DATA@@@Z
0x1800189EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180014920: "onecore\admin\wmi\wmx\stdlib\Saf" ??_C@_1EO@DBBNOBOP@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAs?$AAt?$AAd?$AAl?$AAi?$AAb?$AA?2?$AAS?$AAa?$AAf@
0x180014E40: "286" ??_C@_17GAFMFGCL@?$AA2?$AA8?$AA6?$AA?$AA@
0x180014980: "398" ??_C@_17IHHFPCCD@?$AA3?$AA9?$AA8?$AA?$AA@
0x1800145A8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x18000AB6C: "public: class Winrs_Command * __ptr64 __cdecl Winrs_Shell::GetCommandForUriBasedShell(void) __ptr64" ?GetCommandForUriBasedShell@Winrs_Shell@@QEAAPEAVWinrs_Command@@XZ
0x18000C050: "public: __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::~WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>(void) __ptr64" ??1?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@QEAA@XZ
0x1800142B8: "__cdecl _imp_?IsEventProviderEnabled@EventHandler@WSMan@@SA_NXZ" __imp_?IsEventProviderEnabled@EventHandler@WSMan@@SA_NXZ
0x180003EBC: "protected: unsigned long __cdecl ComLifetime_Thread::Process(void) __ptr64" ?Process@ComLifetime_Thread@@IEAAKXZ
0x180014B98: WPP_e196e028875e394ba34c96d5ea19202c_Traceguids
0x180004410: "public: virtual unsigned long __cdecl ComLifetime_Thread::Initialize(void) __ptr64" ?Initialize@ComLifetime_Thread@@UEAAKXZ
0x180014330: "__cdecl _imp_WSManPluginOperationComplete" __imp_WSManPluginOperationComplete
0x18001B750: "__cdecl _onexitend" __onexitend
0x1800144B0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180013023: "__cdecl unlock" _unlock
0x1800146E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000E4A4: "private: unsigned long __cdecl Winrs_Command::CreateStdioPipes(unsigned long,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64) __ptr64" ?CreateStdioPipes@Winrs_Command@@AEAAKKAEAPEAX00000@Z
0x180014648: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180014228: "__cdecl _imp_?GetCurrentSettings@CWinRSPluginConfigCache@@QEAAPEAVCWinRSPluginConfigSettings@@PEAVIRequestContext@@@Z" __imp_?GetCurrentSettings@CWinRSPluginConfigCache@@QEAAPEAVCWinRSPluginConfigSettings@@PEAVIRequestContext@@@Z
0x180012A60: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800144D8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800153D8: "698" ??_C@_17MPJFPMEH@?$AA6?$AA9?$AA8?$AA?$AA@
0x18001B698: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUwooUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrscmd" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUwooUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrscmd
0x180014608: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18001D000: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x180015568: IID_IHost
0x180014B00: "http://schemas.microsoft.com/wbe" ??_C@_1JE@GMCBICFE@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x180001500: "public: __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::SafeMap_Iterator<class Locale::Key,unsigned long>(class SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> > & __ptr64,bool) __ptr64" ??0?$SafeMap_Iterator@VKey@Locale@@K@@QEAA@AEAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z
0x1800145B0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180014718: "__cdecl _xi_a" __xi_a
0x180014310: "__cdecl _imp_?ProviderShutdownCleanup@CWinRSPluginConfigCache@@SAXXZ" __imp_?ProviderShutdownCleanup@CWinRSPluginConfigCache@@SAXXZ
0x180014290: "__cdecl _imp_?IsEventEnabled@EventHandler@WSMan@@SA_NAEBU_EVENT_DESCRIPTOR@@@Z" __imp_?IsEventEnabled@EventHandler@WSMan@@SA_NAEBU_EVENT_DESCRIPTOR@@@Z
0x180014510: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180014598: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180014388: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x1800143A0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180014698: "__cdecl _imp__unlock" __imp__unlock
0x18000BC64: "protected: void __cdecl SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty>::SkipOrphans(void) __ptr64" ?SkipOrphans@?$SafeMap_Iterator@PEAVCShellUriSettings@@UEmpty@@@@IEAAXXZ
0x180010580: "public: virtual __cdecl Pipe_StdInPipe_Thread::~Pipe_StdInPipe_Thread(void) __ptr64" ??1Pipe_StdInPipe_Thread@@UEAA@XZ
0x1800145C0: "__cdecl _imp_QueueUserWorkItem" __imp_QueueUserWorkItem
0x180014620: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180014C40: "onecore\admin\wmi\wmx\winrs\plug" ??_C@_1GM@IEKIIGCO@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?2?$AAp?$AAl?$AAu?$AAg@
0x180013196: "__cdecl _imp_load_CoGetClassObject" __imp_load_CoGetClassObject
0x180001610: "public: __cdecl SafeMap_Lock<class CShellUriSettings * __ptr64,struct Empty,class SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty> >::~SafeMap_Lock<class CShellUriSettings * __ptr64,struct Empty,class SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty> >(void) __ptr64" ??1?$SafeMap_Lock@PEAVCShellUriSettings@@UEmpty@@V?$SafeMap_Iterator@PEAVCShellUriSettings@@UEmpty@@@@@@QEAA@XZ
0x18001B0D0: "class WmiAllocator g_Allocator" ?g_Allocator@@3VWmiAllocator@@A
0x1800141E0: "__cdecl _imp_??1?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@XZ" __imp_??1?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@XZ
0x18000D3EC: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Delete_LeftBalance(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Delete_LeftBalance@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180012980: "__cdecl invoke_watson" _invoke_watson
0x180015338: WPP_5f672cdbbf4839528321c73b3b9f2f2a_Traceguids
0x1800144A8: api-ms-win-core-namedpipe-l1-1-0_NULL_THUNK_DATA
0x18001B000: WPP_GLOBAL_Control
0x180015000: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180018898: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180018974: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180014408: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x18000872C: "public: long __cdecl Winrs_Shell::Release(void) __ptr64" ?Release@Winrs_Shell@@QEAAJXZ
0x18001B778: "__cdecl pRawDllMain" _pRawDllMain
0x180002A18: "void __cdecl CmdPluginSignal(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,void * __ptr64,void * __ptr64,unsigned short const * __ptr64)" ?CmdPluginSignal@@YAXPEAU_WSMAN_PLUGIN_REQUEST@@KPEAX1PEBG@Z
0x1800130E7: "__cdecl _imp_load_CoFreeUnusedLibrariesEx" __imp_load_CoFreeUnusedLibrariesEx
0x180014D80: "1275" ??_C@_19ICCGBFAJ@?$AA1?$AA2?$AA7?$AA5?$AA?$AA@
0x180014680: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180014250: "__cdecl _imp_??4?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAAAEAV0@PEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z" __imp_??4?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAAAEAV0@PEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x180015248: "1044" ??_C@_19POCLAHLP@?$AA1?$AA0?$AA4?$AA4?$AA?$AA@
0x1800145C8: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x1800146A0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180003778: "public: __cdecl MyAutoRelease<class Winrs_Receive>::~MyAutoRelease<class Winrs_Receive>(void) __ptr64" ??1?$MyAutoRelease@VWinrs_Receive@@@@QEAA@XZ
0x1800010E0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180004540: "public: virtual void * __ptr64 __cdecl Pipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPipe_Thread@@UEAAPEAXI@Z
0x18000B42C: "public: unsigned long __cdecl Winrs_Shell::RemoveCommand(class CommandIdentifier & __ptr64) __ptr64" ?RemoveCommand@Winrs_Shell@@QEAAKAEAVCommandIdentifier@@@Z
0x180014000: "const type_info::`vftable'" ??_7type_info@@6B@
0x1800188FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18001310B: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x1800151B8: "1037" ??_C@_19PBJLJIOJ@?$AA1?$AA0?$AA3?$AA7?$AA?$AA@
0x180014570: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180012950: "__cdecl _security_check_cookie" __security_check_cookie
0x1800142D8: "__cdecl _imp_??1?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ" __imp_??1?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ
0x180014F10: "635" ??_C@_17JMGEAHPM@?$AA6?$AA3?$AA5?$AA?$AA@
0x1800142E0: "__cdecl _imp_??0?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ" __imp_??0?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ
0x180014710: "__cdecl _xc_z" __xc_z
0x18001305C: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x180014500: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180014F30: "FALSE" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x180003A2C: "public: enum WmiStatusCode __cdecl WmiAllocator::New(void * __ptr64 * __ptr64,unsigned __int64) __ptr64" ?New@WmiAllocator@@QEAA?AW4WmiStatusCode@@PEAPEAX_K@Z
0x180014E70: "470" ??_C@_17HCAOLCKF@?$AA4?$AA7?$AA0?$AA?$AA@
0x180014038: "const Pipe_Thread::`vftable'" ??_7Pipe_Thread@@6B@
0x180014350: "__cdecl _imp_?ProcessContext@CRequestContext@@UEAAHHPEAU_WSMAN_ERROR@@@Z" __imp_?ProcessContext@CRequestContext@@UEAAHHPEAU_WSMAN_ERROR@@@Z
0x180012A96: "__cdecl CxxThrowException" _CxxThrowException
0x180014678: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1800149A0: "509" ??_C@_17NOKJMNAJ@?$AA5?$AA0?$AA9?$AA?$AA@
0x18000C4E8: "public: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Find(class CommandIdentifier const & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Iterator & __ptr64) __ptr64" ?Find@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@QEAA?AW4WmiStatusCode@@AEBVCommandIdentifier@@AEAVIterator@1@@Z
0x180014450: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x18001D030: "__cdecl _imp_CoGetClassObject" __imp_CoGetClassObject
0x1800145A0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800151D0: "onecore\admin\wmi\wmx\winrs\plug" ??_C@_1HC@KDMHJNMH@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?2?$AAp?$AAl?$AAu?$AAg@
0x180001470: "public: __cdecl SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty>::~SafeMap_Iterator<class CShellUriSettings * __ptr64,struct Empty>(void) __ptr64" ??1?$SafeMap_Iterator@PEAVCShellUriSettings@@UEmpty@@@@QEAA@XZ
0x180015178: "2262" ??_C@_19DPJKEFBG@?$AA2?$AA2?$AA6?$AA2?$AA?$AA@
0x1800073E8: "unsigned long __cdecl WinrsCopyEnvironmentBlock(void * __ptr64,void * __ptr64 * __ptr64)" ?WinrsCopyEnvironmentBlock@@YAKPEAXPEAPEAX@Z
0x1800142E8: "__cdecl _imp_??0?$AutoDeleteVector@G@@QEAA@XZ" __imp_??0?$AutoDeleteVector@G@@QEAA@XZ
0x1800142D0: "__cdecl _imp_??1?$AutoDeleteVector@G@@QEAA@XZ" __imp_??1?$AutoDeleteVector@G@@QEAA@XZ
0x180001130: "public: unsigned long __cdecl CWSManCriticalSection::GetInitError(void)const __ptr64" ?GetInitError@CWSManCriticalSection@@QEBAKXZ
0x1800153D0: "649" ??_C@_17MLLHIIPM@?$AA6?$AA4?$AA9?$AA?$AA@
0x180015558: IID_IShell
0x18001D020: "__cdecl _imp_CoFreeUnusedLibrariesEx" __imp_CoFreeUnusedLibrariesEx
0x180014390: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180003890: "public: int __cdecl CommandIdentifier::SetCommandId(unsigned short * __ptr64) __ptr64" ?SetCommandId@CommandIdentifier@@QEAAHPEAG@Z
0x180014428: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180014EB8: "564" ??_C@_17PKJKPGMJ@?$AA5?$AA6?$AA4?$AA?$AA@
0x180014C38: "933" ??_C@_17GACPEKIM@?$AA9?$AA3?$AA3?$AA?$AA@
0x18000D5A8: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Delete_RightBalance(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Delete_RightBalance@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180012A60: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x180014F88: "841" ??_C@_17BLIJLCCB@?$AA8?$AA4?$AA1?$AA?$AA@
0x180005000: "private: virtual unsigned long __cdecl Pipe_StdOutPipe_Thread::Execute(void) __ptr64" ?Execute@Pipe_StdOutPipe_Thread@@EEAAKXZ
0x18001181C: "private: unsigned long __cdecl Winrs_Receive::Acquire(unsigned long) __ptr64" ?Acquire@Winrs_Receive@@AEAAKK@Z
0x180014220: "__cdecl _imp_?GetErrorCode@CErrorContext@@UEBAKXZ" __imp_?GetErrorCode@CErrorContext@@UEBAKXZ
0x180012974: "__cdecl invalid_parameter" _invalid_parameter
0x180003B60: "unsigned long __cdecl ConvertComError(unsigned short * __ptr64,long)" ?ConvertComError@@YAKPEAGJ@Z
0x1800041B4: "private: unsigned long __cdecl ComLifetime_Thread::CreateSupportEnvironment(void) __ptr64" ?CreateSupportEnvironment@ComLifetime_Thread@@AEAAKXZ
0x180014540: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800188D4: "__cdecl _IMPORT_DESCRIPTOR_WsmSvc" __IMPORT_DESCRIPTOR_WsmSvc
0x1800141E8: "__cdecl _imp_??0?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@PEAVCWinRSPluginConfigSettings@@@Z" __imp_??0?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@PEAVCWinRSPluginConfigSettings@@@Z
0x1800148F0: "__cdecl _sz_USERENV_dll" __sz_USERENV_dll
0x180015254: "/C" ??_C@_15DBGGBOGM@?$AA?1?$AAC?$AA?$AA@
0x180015280: "1063" ??_C@_19CODEJOAN@?$AA1?$AA0?$AA6?$AA3?$AA?$AA@
0x1800149D0: "http://schemas.microsoft.com/wbe" ??_C@_1JC@JKHJEJOP@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x1800130F9: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x180014460: "__cdecl _imp_CreateJobObjectW" __imp_CreateJobObjectW
0x18001885C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180014520: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180014230: "__cdecl _imp_??1CErrorContext@@UEAA@XZ" __imp_??1CErrorContext@@UEAA@XZ
0x18000E798: "private: unsigned long __cdecl Winrs_Command::Creation(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64 & __ptr64) __ptr64" ?Creation@Winrs_Command@@AEAAKPEBG00PEAX11AEAPEAX@Z
0x180014730: "__cdecl _guard_fids_table" __guard_fids_table
0x1800146C8: msvcrt_NULL_THUNK_DATA
0x180014470: "__cdecl _imp_AssignProcessToJobObject" __imp_AssignProcessToJobObject
0x1800140A0: "__cdecl load_config_used" _load_config_used
0x180014298: "__cdecl _imp_?Release@CWSManCriticalSection@@QEAAXXZ" __imp_?Release@CWSManCriticalSection@@QEAAXXZ
0x18000A33C: "public: unsigned long __cdecl Winrs_Shell::SetDefaultWorkingDirectory(void) __ptr64" ?SetDefaultWorkingDirectory@Winrs_Shell@@QEAAKXZ
0x1800145B8: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180017D0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x180014EB0: "563" ??_C@_17GHENMOHA@?$AA5?$AA6?$AA3?$AA?$AA@
0x1800143A8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180014398: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18000DBBC: "public: long __cdecl Winrs_Command::Release(void) __ptr64" ?Release@Winrs_Command@@QEAAJXZ
0x180008DD4: "public: unsigned long __cdecl Winrs_Shell::SetProcess(unsigned long) __ptr64" ?SetProcess@Winrs_Shell@@QEAAKK@Z
0x180001470: "public: __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::~SafeMap_Iterator<class Locale::Key,unsigned long>(void) __ptr64" ??1?$SafeMap_Iterator@VKey@Locale@@K@@QEAA@XZ
0x1800189B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180003A90: "public: enum WmiStatusCode __cdecl WmiAllocator::Delete(void * __ptr64) __ptr64" ?Delete@WmiAllocator@@QEAA?AW4WmiStatusCode@@PEAX@Z
0x180014FF8: "433" ??_C@_17PLCKFPFN@?$AA4?$AA3?$AA3?$AA?$AA@
0x18001220C: "public: unsigned long __cdecl Winrs_Receive::ReportEndOfStreamAndCommandState(void) __ptr64" ?ReportEndOfStreamAndCommandState@Winrs_Receive@@QEAAKXZ
0x180001150: "public: virtual void __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::Acquire(void)const __ptr64" ?Acquire@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEBAXXZ
0x18000C540: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::DeleteFixup(class WmiAvlTree<class Winrs_Shell * __ptr64,class Winrs_Shell * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?DeleteFixup@?$WmiAvlTree@PEAVWinrs_Shell@@PEAV1@@@IEAA?AW4WmiStatusCode@@PEAVWmiAvlNode@1@AEA_N@Z
0x180014E88: "478" ??_C@_17LHLKJKEK@?$AA4?$AA7?$AA8?$AA?$AA@
0x1800146B8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180014F58: "766" ??_C@_17BCLGDJDP@?$AA7?$AA6?$AA6?$AA?$AA@
0x180014F20: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x1800068CC: "int __cdecl ValidateOptions(class IRequestContext * __ptr64,struct _WSMAN_OPTION_SET * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64)" ?ValidateOptions@@YAHPEAVIRequestContext@@PEAU_WSMAN_OPTION_SET@@KPEAPEBG@Z
0x180004540: "public: virtual void * __ptr64 __cdecl Pipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EPipe_Thread@@UEAAPEAXI@Z
0x180014478: api-ms-win-core-job-l2-1-0_NULL_THUNK_DATA
0x180010900: "public: unsigned long __cdecl Winrs_Send::Initialize(unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?Initialize@Winrs_Send@@QEAAKPEAG0@Z
0x180014490: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000D018: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::RecursiveUnInitialize(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64) __ptr64" ?RecursiveUnInitialize@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@PEAVWmiAvlNode@1@@Z
0x180014530: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180014518: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003FC0: "public: unsigned long __cdecl ComLifetime_Thread::WaitForStartup(void) __ptr64" ?WaitForStartup@ComLifetime_Thread@@QEAAKXZ
0x1800154A0: "800" ??_C@_17DIKEJHFC@?$AA8?$AA0?$AA0?$AA?$AA@
0x18000DF3C: "public: void __cdecl Winrs_Command::CancelInitialization(void) __ptr64" ?CancelInitialization@Winrs_Command@@QEAAXXZ
0x18001899C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-namedpipe-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-namedpipe-l1-1-0
0x1800142A8: "__cdecl _imp_??4AutoHandle@@QEAAAEAV0@PEAX@Z" __imp_??4AutoHandle@@QEAAAEAV0@PEAX@Z
0x180001160: "public: virtual bool __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::DeInitialize(class IRequestContext & __ptr64) __ptr64" ?DeInitialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEAA_NAEAVIRequestContext@@@Z
0x1800141B0: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180014528: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180013050: "__cdecl purecall" _purecall
0x1800155A0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180014EC0: "WINRS_NOPROFILE" ??_C@_1CA@NHLAPBOL@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAN?$AAO?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x180012A4C: "__cdecl _std_terminate" __std_terminate
0x18001B74C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUhixUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrscmd_lib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUhixUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrscmd_lib
0x180013117: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180001150: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180013068: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x1800150C0: "USERPROFILE" ??_C@_1BI@FAOJLPH@?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x1800016E0: "public: class SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> > const & __ptr64 __cdecl SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::GetMap(void)const __ptr64" ?GetMap@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEBAAEBV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ
0x180014A70: "http://schemas.microsoft.com/wbe" ??_C@_1IM@NHBEJOCM@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x18000B9C4: "private: unsigned long __cdecl Winrs_Shell::LoadUserSettings(unsigned long,unsigned short const * __ptr64,unsigned long,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64) __ptr64" ?LoadUserSettings@Winrs_Shell@@AEAAKKPEBGKPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x18000D924: "public: __cdecl Winrs_Command::~Winrs_Command(void) __ptr64" ??1Winrs_Command@@QEAA@XZ
0x180018910: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800151A8: WPP_44474cabc74336e73d1f551e69448b54_Traceguids
0x180011DD4: "public: unsigned long __cdecl Winrs_Receive::ReportReceiveResult(unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long,int,unsigned short const * __ptr64,unsigned long) __ptr64" ?ReportReceiveResult@Winrs_Receive@@QEAAKPEBGPEAEKH0K@Z
0x18000E148: "public: unsigned long __cdecl Winrs_Command::SetWorkingDirectory(unsigned short * __ptr64,unsigned long) __ptr64" ?SetWorkingDirectory@Winrs_Command@@QEAAKPEAGK@Z
0x180014480: "__cdecl _imp_RegisterWaitForSingleObject" __imp_RegisterWaitForSingleObject
0x180014970: "101" ??_C@_17JPFHOLBM@?$AA1?$AA0?$AA1?$AA?$AA@
0x180014368: "__cdecl _imp_??0CRequestContext@@QEAA@PEBG@Z" __imp_??0CRequestContext@@QEAA@PEBG@Z
0x180001C50: WSManPluginShutdown
0x180014600: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180006FDC: "int __cdecl CommandArgumentSetToRunCommandArgs(class IRequestContext * __ptr64,struct _WSMAN_COMMAND_ARG_SET * __ptr64,unsigned long * __ptr64,struct _WINRS_RUN_COMMAND_ARG * __ptr64 * __ptr64)" ?CommandArgumentSetToRunCommandArgs@@YAHPEAVIRequestContext@@PEAU_WSMAN_COMMAND_ARG_SET@@PEAKPEAPEAU_WINRS_RUN_COMMAND_ARG@@@Z
0x1800141F0: "__cdecl _imp_??4?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAAAEAV0@PEAVCWinRSPluginConfigCache@@@Z" __imp_??4?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAAAEAV0@PEAVCWinRSPluginConfigCache@@@Z
0x180014F80: "840" ??_C@_17KDDFNFEE@?$AA8?$AA4?$AA0?$AA?$AA@
0x180014650: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180014D90: "stderr" ??_C@_1O@FINNGECF@?$AAs?$AAt?$AAd?$AAe?$AAr?$AAr?$AA?$AA@
0x180014210: "__cdecl _imp_?StringCchEqualsCI@@YAHPEBG0@Z" __imp_?StringCchEqualsCI@@YAHPEBG0@Z
0x1800013B0: "public: __cdecl std::_Tree<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::~_Tree<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@std@@QEAA@XZ
0x180014988: "388" ??_C@_17EMCJCBIG@?$AA3?$AA8?$AA8?$AA?$AA@
0x1800146D8: ntdll_NULL_THUNK_DATA
0x180014690: "__cdecl _imp_memcpy" __imp_memcpy
0x18001B6F8: "public: static struct _RTL_CRITICAL_SECTION Winrs_Shell::s_ShellCreationCriticalSection" ?s_ShellCreationCriticalSection@Winrs_Shell@@2U_RTL_CRITICAL_SECTION@@A
0x1800150B0: "stdin" ??_C@_1M@IIPPDPJF@?$AAs?$AAt?$AAd?$AAi?$AAn?$AA?$AA@
0x1800048AC: "public: unsigned long __cdecl Pipe_Thread::WaitForStartup(void) __ptr64" ?WaitForStartup@Pipe_Thread@@QEAAKXZ
0x1800057D8: "public: unsigned long __cdecl Pipe_StdErrorPipe_Thread::Read(unsigned char * __ptr64,unsigned long,unsigned long & __ptr64) __ptr64" ?Read@Pipe_StdErrorPipe_Thread@@QEAAKPEAEKAEAK@Z
0x18000AB60: "public: __cdecl SafeSet_Iterator<class CShellUriSettings * __ptr64>::~SafeSet_Iterator<class CShellUriSettings * __ptr64>(void) __ptr64" ??1?$SafeSet_Iterator@PEAVCShellUriSettings@@@@QEAA@XZ
0x180014370: "__cdecl _imp_?RecordFailure@CRequestContext@@UEAAXKKZZ" __imp_?RecordFailure@CRequestContext@@UEAAXKKZZ
0x180015018: "=" ??_C@_13NMPKAAJP@?$AA?$DN?$AA?$AA@
0x180011940: "private: void __cdecl Winrs_Receive::Release(unsigned long) __ptr64" ?Release@Winrs_Receive@@AEAAXK@Z
0x18000BBDC: "public: class std::_Tree<class std::_Tmap_traits<class CShellUriSettings * __ptr64,struct Node<struct Empty>,struct std::less<class CShellUriSettings * __ptr64>,class transport_allocator<struct std::pair<class CShellUriSettings * __ptr64,struct Node<struct Empty> > >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<class CShellUriSettings * __ptr64,struct Node<struct Empty>,struct std::less<class CShellUriSettings * __ptr64>,class transport_allocator<struct std::pair<class CShellUriSettings * __ptr64,struct Node<struct Empty> > >,0> >::iterator::operator++(int) __ptr64" ??Eiterator@?$_Tree@V?$_Tmap_traits@PEAVCShellUriSettings@@U?$Node@UEmpty@@@@U?$less@PEAVCShellUriSettings@@@std@@V?$transport_allocator@U?$pair@PEAVCShellUriSettings@@U?$Node@UEmpty@@@@@std@@@@$0A@@std@@@std@@QEAA?AV012@H@Z
0x180005AD0: "public: virtual unsigned long __cdecl Pipe_StdErrorPipe_Thread::Initialize(void) __ptr64" ?Initialize@Pipe_StdErrorPipe_Thread@@UEAAKXZ
0x1800110B0: "public: long __cdecl Winrs_Receive::AddRef(void) __ptr64" ?AddRef@Winrs_Receive@@QEAAJXZ
0x1800049D0: "public: unsigned long __cdecl Pipe_Thread::WaitForTerminate(void) __ptr64" ?WaitForTerminate@Pipe_Thread@@QEAAKXZ
0x1800150A0: "1121" ??_C@_19NDAGBEAO@?$AA1?$AA1?$AA2?$AA1?$AA?$AA@
0x1800145D0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180018834: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180014218: "__cdecl _imp_?WrapperCoSetProxyBlanket@@YAJPEAUIUnknown@@KKPEAGKKPEAXKW4BehaviourForNoInterfaceError@@@Z" __imp_?WrapperCoSetProxyBlanket@@YAJPEAUIUnknown@@KKPEAGKKPEAXKW4BehaviourForNoInterfaceError@@@Z
0x180014628: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x1800046E0: "protected: unsigned long __cdecl Pipe_Thread::Process(void) __ptr64" ?Process@Pipe_Thread@@IEAAKXZ
0x180017C68: "__cdecl CTA1?AVOutOfMemoryException@@" _CTA1?AVOutOfMemoryException@@
0x1800145F8: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18001B0B0: "__cdecl _security_cookie" __security_cookie
0x180017EA0: USERENV_NULL_THUNK_DATA_DLB
0x180014F50: "703" ??_C@_17PDDBCKBA@?$AA7?$AA0?$AA3?$AA?$AA@
0x180014070: "const Pipe_StdOutPipe_Thread::`vftable'" ??_7Pipe_StdOutPipe_Thread@@6B@
0x180017CD0: "__cdecl TI1?AVWmi_Heap_Exception@@" _TI1?AVWmi_Heap_Exception@@
0x1800105F0: "public: virtual void * __ptr64 __cdecl Pipe_StdInPipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPipe_StdInPipe_Thread@@UEAAPEAXI@Z
0x1800144C0: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x1800016EC: "public: void __cdecl transport_allocator<struct std::_Tree_nod<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::_Node>::deallocate(void * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$transport_allocator@U_Node@?$_Tree_nod@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@std@@@@QEAAXPEAX_K@Z
0x180014CC0: "http://schemas.microsoft.com/wbe" ??_C@_1JK@GKNIBAJN@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x1800143F8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180015020: "1062" ??_C@_19JGIIPJGI@?$AA1?$AA0?$AA6?$AA2?$AA?$AA@
0x180014308: "__cdecl _imp_?WSManError@@YAXPEBGK0KPEAVIRequestContext@@@Z" __imp_?WSManError@@YAXPEBGK0KPEAVIRequestContext@@@Z
0x180014438: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180014618: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800188C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180008964: "public: unsigned long __cdecl Winrs_Shell::SetLocale(unsigned short const * __ptr64) __ptr64" ?SetLocale@Winrs_Shell@@QEAAKPEBG@Z
0x180014208: "__cdecl _imp_?GetConfigCache@CWinRSPluginConfigCache@@SAPEAV1@PEAVIRequestContext@@W4ErrorLogging@@H@Z" __imp_?GetConfigCache@CWinRSPluginConfigCache@@SAPEAV1@PEAVIRequestContext@@W4ErrorLogging@@H@Z
0x180003D00: "public: virtual void * __ptr64 __cdecl ComLifetime_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EComLifetime_Thread@@UEAAPEAXI@Z
0x180014610: "__cdecl _imp_CopySid" __imp_CopySid
0x18000B1B4: "public: unsigned long __cdecl Winrs_Shell::Uninitialize(void) __ptr64" ?Uninitialize@Winrs_Shell@@QEAAKXZ
0x180017C40: "__stdcall CT??_R0?AVOutOfMemoryException@@" _CT??_R0?AVOutOfMemoryException@@@81
0x180014378: WsmSvc_NULL_THUNK_DATA
0x18001B758: "__cdecl _onexitbegin" __onexitbegin
0x18000F3A8: "public: unsigned long __cdecl Winrs_Command::InitializeApp(unsigned short const * __ptr64) __ptr64" ?InitializeApp@Winrs_Command@@QEAAKPEBG@Z
0x180001E1C: "public: __cdecl AutoDeleteEnvVars::~AutoDeleteEnvVars(void) __ptr64" ??1AutoDeleteEnvVars@@QEAA@XZ
0x180014320: "__cdecl _imp_?Shutdown@CWSManGroupPolicyManager@@SAHXZ" __imp_?Shutdown@CWSManGroupPolicyManager@@SAHXZ
0x1800109D4: "private: unsigned long __cdecl Winrs_Send::Acquire(unsigned long) __ptr64" ?Acquire@Winrs_Send@@AEAAKK@Z
0x180010FA0: WPP_SF_qd
0x1800143C8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800144F0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18001D008: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x18000C080: "public: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Insert(class CommandIdentifier const & __ptr64,class Winrs_Command * __ptr64 const & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Iterator & __ptr64) __ptr64" ?Insert@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@QEAA?AW4WmiStatusCode@@AEBVCommandIdentifier@@AEBQEAVWinrs_Command@@AEAVIterator@1@@Z
0x180017DB8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x18001113C: "public: long __cdecl Winrs_Receive::Release(void) __ptr64" ?Release@Winrs_Receive@@QEAAJXZ
0x180012CB4: "__cdecl _security_init_cookie" __security_init_cookie
0x180001150: "public: __cdecl Wmi_Heap_Exception::~Wmi_Heap_Exception(void) __ptr64" ??1Wmi_Heap_Exception@@QEAA@XZ
0x180010F5C: WPP_SF_q
0x180001150: "public: virtual void __cdecl SafeMap<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::Release(void)const __ptr64" ?Release@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEBAXXZ
0x180014978: "69" ??_C@_15BBDNANMH@?$AA6?$AA9?$AA?$AA@
0x1800053B4: "public: unsigned long __cdecl Pipe_StdOutPipe_Thread::Read(unsigned char * __ptr64,unsigned long,unsigned long & __ptr64) __ptr64" ?Read@Pipe_StdOutPipe_Thread@@QEAAKPEAEKAEAK@Z
0x18001B720: "public: static struct _RTL_CRITICAL_SECTION Winrs_Shell::s_ShellContainerCriticalSection" ?s_ShellContainerCriticalSection@Winrs_Shell@@2U_RTL_CRITICAL_SECTION@@A
0x18000B5E0: "public: static unsigned long __cdecl Winrs_Shell::RemoveShell(class Winrs_Shell * __ptr64)" ?RemoveShell@Winrs_Shell@@SAKPEAV1@@Z
0x180014F48: "701" ??_C@_17FJDIOCJL@?$AA7?$AA0?$AA1?$AA?$AA@
0x180003D44: "public: virtual __cdecl ComLifetime_Thread::~ComLifetime_Thread(void) __ptr64" ??1ComLifetime_Thread@@UEAA@XZ
0x1800187F8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18001325D: wcscmp
0x18000B8D0: "private: static void __cdecl Winrs_Shell::ShellCancellationCallback(void * __ptr64,unsigned char)" ?ShellCancellationCallback@Winrs_Shell@@CAXPEAXE@Z
0x1800112A0: "private: unsigned long __cdecl Winrs_Receive::DecodeStdio(unsigned short * __ptr64,unsigned long & __ptr64) __ptr64" ?DecodeStdio@Winrs_Receive@@AEAAKPEAGAEAK@Z
0x180014088: "const Pipe_StdInPipe_Thread::`vftable'" ??_7Pipe_StdInPipe_Thread@@6B@
0x180002664: "void __cdecl CmdPluginCommand(struct _WSMAN_PLUGIN_REQUEST * __ptr64,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _WSMAN_COMMAND_ARG_SET * __ptr64)" ?CmdPluginCommand@@YAXPEAU_WSMAN_PLUGIN_REQUEST@@KPEAXPEBGPEAU_WSMAN_COMMAND_ARG_SET@@@Z
0x180014348: "__cdecl _imp_??1CRequestContext@@UEAA@XZ" __imp_??1CRequestContext@@UEAA@XZ
0x180001460: "public: bool __cdecl SafeMap_Iterator<class Locale::Key,unsigned long>::IsValid(void)const __ptr64" ?IsValid@?$SafeMap_Iterator@VKey@Locale@@K@@QEBA_NXZ
0x180014300: "__cdecl _imp_??1CWSManCriticalSection@@QEAA@XZ" __imp_??1CWSManCriticalSection@@QEAA@XZ
0x1800141D0: "__cdecl _imp_??0CWSManCriticalSection@@QEAA@XZ" __imp_??0CWSManCriticalSection@@QEAA@XZ
0x180014EA8: "562" ??_C@_17NPPBKJBF@?$AA5?$AA6?$AA2?$AA?$AA@
0x180006520: "int __cdecl StreamIdSetToStreamSelector(class IRequestContext * __ptr64,struct _WSMAN_STREAM_ID_SET * __ptr64,class AutoDeleteVector<unsigned short> & __ptr64)" ?StreamIdSetToStreamSelector@@YAHPEAVIRequestContext@@PEAU_WSMAN_STREAM_ID_SET@@AEAV?$AutoDeleteVector@G@@@Z
0x1800141A8: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x18000E310: "private: unsigned long __cdecl Winrs_Command::CreateParentReaderSidePipe(void * __ptr64 & __ptr64,void * __ptr64 & __ptr64,unsigned long) __ptr64" ?CreateParentReaderSidePipe@Winrs_Command@@AEAAKAEAPEAX0K@Z
0x180014660: "__cdecl _imp_malloc" __imp_malloc
0x180014638: "__cdecl _imp__purecall" __imp__purecall
0x180014E58: "389" ??_C@_17PEJFEGOD@?$AA3?$AA8?$AA9?$AA?$AA@
0x1800152A0: "1088" ??_C@_19MDDPHIHM@?$AA1?$AA0?$AA8?$AA8?$AA?$AA@
0x1800143E0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180001600: "public: bool __cdecl SafeMap_Lock<class Locale::Key,unsigned long,class SafeMap_Iterator<class Locale::Key,unsigned long> >::Acquired(void) __ptr64" ?Acquired@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA_NXZ
0x18001894C: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000D778: "public: __cdecl Winrs_Command::Winrs_Command(class Winrs_Shell * __ptr64) __ptr64" ??0Winrs_Command@@QEAA@PEAVWinrs_Shell@@@Z
0x1800142A0: "__cdecl _imp_?Acquire@CWSManCriticalSection@@QEAAXXZ" __imp_?Acquire@CWSManCriticalSection@@QEAAXXZ
0x180015030: "onecore\admin\wmi\wmx\winrs\plug" ??_C@_1GO@OIAIOGPE@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?2?$AAw?$AAm?$AAi?$AA?2?$AAw?$AAm?$AAx?$AA?2?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?2?$AAp?$AAl?$AAu?$AAg@
0x180017C98: "__stdcall CT??_R0?AVWmi_Heap_Exception@@" _CT??_R0?AVWmi_Heap_Exception@@@84
0x1800141C0: RPCRT4_NULL_THUNK_DATA
0x18000D254: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Insert_RightBalance(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Insert_RightBalance@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x180012EA0: "__cdecl _report_gsfailure" __report_gsfailure
0x180014340: "__cdecl _imp_??0CRequestContext@@QEAA@XZ" __imp_??0CRequestContext@@QEAA@XZ
0x180005D00: "unsigned long __cdecl GetUserSid(void * __ptr64,unsigned long * __ptr64,void * __ptr64)" ?GetUserSid@@YAKPEAXPEAK0@Z
0x180001830: "protected: struct std::_Tree_nod<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<class Locale::Key,struct Node<unsigned long>,struct std::less<class Locale::Key>,class transport_allocator<struct std::pair<class Locale::Key,struct Node<unsigned long> > >,0> >::_Buynode(void) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@VKey@Locale@@U?$Node@K@@U?$less@VKey@Locale@@@std@@V?$transport_allocator@U?$pair@VKey@Locale@@U?$Node@K@@@std@@@@$0A@@std@@@2@XZ
0x180001140: "public: __cdecl CWSManCriticalSectionWithConditionVar::~CWSManCriticalSectionWithConditionVar(void) __ptr64" ??1CWSManCriticalSectionWithConditionVar@@QEAA@XZ
0x180014560: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180012DA8: "__cdecl onexit" _onexit
0x1800150D8: "%USERPROFILE%" ??_C@_1BM@LFINAEKG@?$AA?$CF?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$CF?$AA?$AA@
0x180005560: "public: virtual unsigned long __cdecl Pipe_StdOutPipe_Thread::Initialize(void) __ptr64" ?Initialize@Pipe_StdOutPipe_Thread@@UEAAKXZ
0x180014360: "__cdecl _imp_WSManPluginFreeRequestDetails" __imp_WSManPluginFreeRequestDetails
0x18001B768: "__cdecl _native_startup_state" __native_startup_state
0x180001D90: WSManPluginSend
0x1800131B4: "__cdecl _tailMerge_userenv_dll" __tailMerge_userenv_dll
0x180007AC8: "unsigned long __cdecl WinrsQueryEnvironmentVariable(void * __ptr64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?WinrsQueryEnvironmentVariable@@YAKPEAXPEBG_KPEAG2PEA_K@Z
0x1800105F0: "public: virtual void * __ptr64 __cdecl Pipe_StdInPipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EPipe_StdInPipe_Thread@@UEAAPEAXI@Z
0x180014E78: "471" ??_C@_17MKLCNFMA@?$AA4?$AA7?$AA1?$AA?$AA@
0x180014990: "499" ??_C@_17DFAMJMFP@?$AA4?$AA9?$AA9?$AA?$AA@
0x180006BE8: "int __cdecl GetBoolOption(class IRequestContext * __ptr64,struct _WSMAN_OPTION_SET * __ptr64,unsigned short const * __ptr64,int * __ptr64,int)" ?GetBoolOption@@YAHPEAVIRequestContext@@PEAU_WSMAN_OPTION_SET@@PEBGPEAHH@Z
0x180014DA0: WPP_6d91bf3de2be39958713ef6f69280986_Traceguids
0x1800148C0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x180014338: "__cdecl _imp_WSManPluginGetOperationParameters" __imp_WSManPluginGetOperationParameters
0x1800144F8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180003D00: "public: virtual void * __ptr64 __cdecl ComLifetime_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GComLifetime_Thread@@UEAAPEAXI@Z
0x18000C3CC: "public: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Delete(class CommandIdentifier const & __ptr64) __ptr64" ?Delete@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@QEAA?AW4WmiStatusCode@@AEBVCommandIdentifier@@@Z
0x1800141B8: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x1800142B0: "__cdecl _imp_?EnsureActivityIdOnThread@EventHandler@WSMan@@SAXXZ" __imp_?EnsureActivityIdOnThread@EventHandler@WSMan@@SAXXZ
0x180001DB0: WSManPluginSignal
0x180014E90: "508" ??_C@_17GGBFKKGM@?$AA5?$AA0?$AA8?$AA?$AA@
0x18000EDB4: "public: unsigned long __cdecl Winrs_Command::InitializeCommand(unsigned short const * __ptr64,unsigned long,struct _WINRS_RUN_COMMAND_ARG * __ptr64) __ptr64" ?InitializeCommand@Winrs_Command@@QEAAKPEBGKPEAU_WINRS_RUN_COMMAND_ARG@@@Z
0x180015578: CLSID_Winrs_CommandHostWithUserSettings
0x180018884: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003ADC: WPP_SF_SL
0x180014D60: "stdout" ??_C@_1O@PBHDBHIJ@?$AAs?$AAt?$AAd?$AAo?$AAu?$AAt?$AA?$AA@
0x180014658: "__cdecl _imp_free" __imp_free
0x180015480: "722" ??_C@_17GEFOMHO@?$AA7?$AA2?$AA2?$AA?$AA@
0x180012C20: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180014590: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800094C4: "public: unsigned long __cdecl Winrs_Shell::CreateEnvironment(unsigned long,unsigned long,struct _WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE * __ptr64) __ptr64" ?CreateEnvironment@Winrs_Shell@@QEAAKKKPEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z
0x180005C4C: WPP_SF_SS
0x180014288: "__cdecl _imp_?GenerateTransferId@EventHandler@WSMan@@SAXAEBU_EVENT_DESCRIPTOR@@PEBU_GUID@@1@Z" __imp_?GenerateTransferId@EventHandler@WSMan@@SAXAEBU_EVENT_DESCRIPTOR@@PEBU_GUID@@1@Z
0x180012034: "public: unsigned long __cdecl Winrs_Receive::ReportCommandState(unsigned short const * __ptr64,unsigned long) __ptr64" ?ReportCommandState@Winrs_Receive@@QEAAKPEBGK@Z
0x1800144E0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180014580: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180014998: "342" ??_C@_17FEFGABJJ@?$AA3?$AA4?$AA2?$AA?$AA@
0x180018848: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180005BDC: WPP_SF_S
0x180015548: WPP_63fee4f2fceb38d4bcc13b9ca910042e_Traceguids
0x180001AA0: WSManPluginStartup
0x180014F40: "700" ??_C@_17OBIEIFPO@?$AA7?$AA0?$AA0?$AA?$AA@
0x180013251: memset
0x180018A14: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000D0BC: "protected: enum WmiStatusCode __cdecl WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::Insert_LeftBalance(class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64 & __ptr64,class WmiAvlTree<class CommandIdentifier,class Winrs_Command * __ptr64>::WmiAvlNode * __ptr64,bool & __ptr64) __ptr64" ?Insert_LeftBalance@?$WmiAvlTree@VCommandIdentifier@@PEAVWinrs_Command@@@@IEAA?AW4WmiStatusCode@@AEAPEAVWmiAvlNode@1@PEAV31@AEA_N@Z
0x1800143D8: "__cdecl _imp_ReadFile" __imp_ReadFile
0x180014D70: "1147" ??_C@_19CADEKIMP@?$AA1?$AA1?$AA4?$AA7?$AA?$AA@
0x18001D010: USERENV_NULL_THUNK_DATA_DLA

[JEB Decompiler by PNF Software]