Generated by JEB on 2019/08/01

PE: C:\Windows\System32\auditpol.exe Base=0x140000000 SHA-256=969306E33A469096EFA20BEE264FB37AC4DA86899F2659007D6BE0D1EB666B1C
PDB: auditpol.pdb GUID={EA3D47A3-2DD1-0263-D221FE2950C3E0E2} Age=1

431 located named symbols:
0x1400021F0: "unsigned long __cdecl AdtSaclAddUser(unsigned short const * __ptr64,unsigned char,unsigned char,void * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?AdtSaclAddUser@@YAKPEBGEEPEAX00@Z
0x140004794: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140006850: "r" ??_C@_13BPINEIPE@?$AAr?$AA?$AA@
0x140006B48: "FILE_WRITE_EA" ??_C@_1BM@LGNAPBIB@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAE?$AAA?$AA?$AA@
0x140004C50: "__cdecl FindPESection" _FindPESection
0x140001ABC: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x1400019E8: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140006520: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x140007BC8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400064C0: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x140004C40: "__cdecl wsetargv" _wsetargv
0x140003B00: "public: __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>(char const * __ptr64) __ptr64" ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAA@PEBD@Z
0x1400099D8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140006948: "v" ??_C@_13JAOPNPKD@?$AAv?$AA?$AA@
0x140006398: api-ms-win-security-sddlparsecond-l1-1-0_NULL_THUNK_DATA
0x1400063A0: "__cdecl _imp_?AdtListSubCategories@@YAKPEAUAUDIT_GUID_ARRAY@@E@Z" __imp_?AdtListSubCategories@@YAKPEAUAUDIT_GUID_ARRAY@@E@Z
0x1400064A8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140001AE0: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x140006510: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x140006228: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140004947: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000360C: "void __cdecl AdtPrintError(unsigned long)" ?AdtPrintError@@YAXK@Z
0x140006328: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x140003A6C: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x140006E80: "Enable" ??_C@_1O@PFBIKACK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140003AF0: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x140004ED0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140001DB0: "void __cdecl AdtSaclShowAuditAce(unsigned long,unsigned short const * __ptr64,struct _SYSTEM_AUDIT_ACE * __ptr64)" ?AdtSaclShowAuditAce@@YAXKPEBGPEAU_SYSTEM_AUDIT_ACE@@@Z
0x1400068B0: "remove" ??_C@_1O@GJOFDOPC@?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x140009910: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x140006EB8: "%d " ??_C@_17NHJDOBIM@?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x140003C90: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x140001C30: "unsigned long __cdecl AdtSaclRemoveUser(unsigned short const * __ptr64,void * __ptr64)" ?AdtSaclRemoveUser@@YAKPEBGPEAX@Z
0x140004280: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@PEBD_K@Z
0x140009FC8: g_ulAdditionalProbeSize
0x140006500: "__cdecl _imp_memmove_s" __imp_memmove_s
0x140009F90: "__cdecl commode" _commode
0x140007A38: "__cdecl _IMPORT_DESCRIPTOR_auditpolcore" __IMPORT_DESCRIPTOR_auditpolcore
0x1400061E0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1400062E8: "__cdecl _imp_GetAce" __imp_GetAce
0x1400063C0: "__cdecl _imp_?SetDisplayPolicy@@YAKW4eDisplayPolicy@@@Z" __imp_?SetDisplayPolicy@@YAKW4eDisplayPolicy@@@Z
0x140006418: "__cdecl _imp_?AdtRestorePolicy@@YAKPEBG@Z" __imp_?AdtRestorePolicy@@YAKPEBG@Z
0x140006960: "allusers" ??_C@_1BC@KOMKMLFA@?$AAa?$AAl?$AAl?$AAu?$AAs?$AAe?$AAr?$AAs?$AA?$AA@
0x1400061C0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140006B68: "FILE_EXECUTE" ??_C@_1BK@DGEHKLOF@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA?$AA@
0x140004B20: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400065A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140009F9C: "__cdecl fmode" _fmode
0x140006200: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1400064F0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140006B00: "FILE_APPEND_DATA" ??_C@_1CC@FNGFJIEB@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAA?$AAP?$AAP?$AAE?$AAN?$AAD?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1400063E0: "__cdecl _imp_?AdtBackupPolicy@@YAKPEBG@Z" __imp_?AdtBackupPolicy@@YAKPEBG@Z
0x140004B7E: "__cdecl XcptFilter" _XcptFilter
0x1400065A8: "__cdecl _xc_a" __xc_a
0x140001A88: "public: __cdecl std::bad_alloc::bad_alloc(char const * __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@PEBD@Z
0x140006D60: "KEY_CREATE_SUB_KEY" ??_C@_1CG@GMIBFPEC@?$AAK?$AAE?$AAY?$AA_?$AAC?$AAR?$AAE?$AAA?$AAT?$AAE?$AA_?$AAS?$AAU?$AAB?$AA_?$AAK?$AAE?$AAY?$AA?$AA@
0x140006E40: "S:" ??_C@_15FLLBDMMA@?$AAS?$AA?3?$AA?$AA@
0x140006368: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x140003D04: "public: __cdecl std::out_of_range::out_of_range(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64,class _STL70 * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@1@PEAV_STL70@@@Z
0x140006878: "success" ??_C@_1BA@ICANLBCA@?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x140006360: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA
0x140006D08: "KEY_EXECUTE" ??_C@_1BI@IFMOHNGE@?$AAK?$AAE?$AAY?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA?$AA@
0x1400040C4: "public: static void __cdecl std::_String_base::_Xlen(void)" ?_Xlen@_String_base@std@@SAXXZ
0x1400061C8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400092C0: "struct AUDIT_OPTIONS * AuditParserRestore" ?AuditParserRestore@@3PAUAUDIT_OPTIONS@@A
0x140006950: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x140009960: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x140006E38: "FA" ??_C@_15LEJEIIHF@?$AAF?$AAA?$AA?$AA@
0x1400063B8: "__cdecl _imp_?AdtEnableSinglePrivilege@@YAKPEBG@Z" __imp_?AdtEnableSinglePrivilege@@YAKPEBG@Z
0x140006A90: "FILE_GENERIC_EXECUTE" ??_C@_1CK@DONEOMEG@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAE?$AAX?$AAE?$AAC?$AAU?$AAT?$AAE?$AA?$AA@
0x1400049EB: "__cdecl callnewh" _callnewh
0x140003FA0: "protected: virtual void __cdecl std::length_error::_Doraise(void)const __ptr64" ?_Doraise@length_error@std@@MEBAXXZ
0x1400068E0: "type" ??_C@_19FHBCDCCA@?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x140004EA6: memcpy
0x140004A98: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x140006570: "__cdecl _imp_memset" __imp_memset
0x140002080: "unsigned long __cdecl AdtSaclView(unsigned short const * __ptr64,void * __ptr64)" ?AdtSaclView@@YAKPEBGPEAX@Z
0x140004E0F: "__cdecl initterm" _initterm
0x140001B50: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x140006D88: "KEY_ENUMERATE_SUB_KEYS" ??_C@_1CO@EKPHEMPJ@?$AAK?$AAE?$AAY?$AA_?$AAE?$AAN?$AAU?$AAM?$AAE?$AAR?$AAA?$AAT?$AAE?$AA_?$AAS?$AAU?$AAB?$AA_?$AAK?$AAE?$AAY?$AAS?$AA?$AA@
0x140007B64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140009FC0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140006278: "__cdecl _imp_Sleep" __imp_Sleep
0x1400078A8: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z64
0x140006DB8: "KEY_NOTIFY" ??_C@_1BG@ILDNBAH@?$AAK?$AAE?$AAY?$AA_?$AAN?$AAO?$AAT?$AAI?$AAF?$AAY?$AA?$AA@
0x1400065D8: "__cdecl _xi_z" __xi_z
0x140006560: "__cdecl _imp___iob_func" __imp___iob_func
0x1400061A0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140006CF0: "KEY_WRITE" ??_C@_1BE@DFGPCJJE@?$AAK?$AAE?$AAY?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA?$AA@
0x140006A68: "FILE_GENERIC_WRITE" ??_C@_1CG@MBLGCOF@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA?$AA@
0x140006E64: "SA" ??_C@_15OHIPBLFN@?$AAS?$AAA?$AA?$AA@
0x1400078D0: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x140004E1B: "__cdecl _C_specific_handler" __C_specific_handler
0x140006DF0: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1400063A8: "__cdecl _imp_?AuditPolicyData_DeleteAuditDataInstance@@YAXXZ" __imp_?AuditPolicyData_DeleteAuditDataInstance@@YAXXZ
0x140006390: "__cdecl _imp_LocalGetStringForCondition" __imp_LocalGetStringForCondition
0x140004A34: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140006918: "Category" ??_C@_1BC@HGNJEICC@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AA?$AA@
0x140006E48: "(XU;" ??_C@_19LNFFNKDK@?$AA?$CI?$AAX?$AAU?$AA?$DL?$AA?$AA@
0x1400067F8: "user" ??_C@_19LHMFLJNI@?$AAu?$AAs?$AAe?$AAr?$AA?$AA@
0x140006270: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140006308: "__cdecl _imp_DeleteAce" __imp_DeleteAce
0x140007AC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140006E58: "(AU;" ??_C@_19NOKBPADK@?$AA?$CI?$AAA?$AAU?$AA?$DL?$AA?$AA@
0x140006DD0: "KEY_CREATE_LINK" ??_C@_1CA@NBOJEKAB@?$AAK?$AAE?$AAY?$AA_?$AAC?$AAR?$AAE?$AAA?$AAT?$AAE?$AA_?$AAL?$AAI?$AAN?$AAK?$AA?$AA@
0x140004C33: "__cdecl amsg_exit" _amsg_exit
0x1400064D0: "__cdecl _imp__callnewh" __imp__callnewh
0x14000292C: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::assign(unsigned short const * __ptr64) __ptr64" ?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@PEBG@Z
0x1400049C6: memmove_s
0x140002A64: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::append(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x140006BB0: "FILE_READ_ATTRIBUTES" ??_C@_1CK@PNEHGFCP@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAA?$AAT?$AAT?$AAR?$AAI?$AAB?$AAU?$AAT?$AAE?$AAS?$AA?$AA@
0x140003E00: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x140006B28: "FILE_READ_EA" ??_C@_1BK@MLCDFLJO@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAE?$AAA?$AA?$AA@
0x140003DB4: "public: virtual __cdecl std::logic_error::~logic_error(void) __ptr64" ??1logic_error@std@@UEAA@XZ
0x140002EB4: "unsigned long __cdecl GetMatchingOptions(unsigned short const * __ptr64,unsigned long,struct AUDIT_OPTIONS * __ptr64,unsigned long * __ptr64)" ?GetMatchingOptions@@YAKPEBGKPEAUAUDIT_OPTIONS@@PEAK@Z
0x1400063D8: "__cdecl _imp_?AdtParseGuidOrNameArray@@YAKPEBGPEAPEAUAUDIT_GUID_ARRAY@@E@Z" __imp_?AdtParseGuidOrNameArray@@YAKPEBGPEAPEAUAUDIT_GUID_ARRAY@@E@Z
0x140006C88: "ACCESS_SYSTEM_SECURITY" ??_C@_1CO@MMGNHLIE@?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x140009280: "struct AUDIT_OPTIONS * AuditParserClear" ?AuditParserClear@@3PAUAUDIT_OPTIONS@@A
0x140006798: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x140007B78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-1
0x1400067E0: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140006480: "__cdecl _imp_exit" __imp_exit
0x140006428: "__cdecl _imp_?AdtRemoveBasePolicy@@YAKPEAXE@Z" __imp_?AdtRemoveBasePolicy@@YAKPEAXE@Z
0x1400067D0: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x1400078F0: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x140003108: "unsigned long __cdecl AdtPolParseCommandLine(unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long,struct AUDIT_COMMAND * __ptr64)" ?AdtPolParseCommandLine@@YAKKPEAPEAGKPEAUAUDIT_COMMAND@@@Z
0x140003BB0: "public: __cdecl std::length_error::length_error(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@1@@Z
0x1400061B8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x14000437C: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@_K0@Z
0x1400062B8: "__cdecl _imp_AuditQueryGlobalSaclW" __imp_AuditQueryGlobalSaclW
0x140006C20: "READ_CONTROL" ??_C@_1BK@GAPFFLDI@?$AAR?$AAE?$AAA?$AAD?$AA_?$AAC?$AAO?$AAN?$AAT?$AAR?$AAO?$AAL?$AA?$AA@
0x140006218: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140002DF0: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@_K0@Z
0x140006E6C: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x140009FB0: "__cdecl _native_startup_lock" __native_startup_lock
0x140006438: "__cdecl _imp_?GetDisplayPolicy@@YA?AW4eDisplayPolicy@@XZ" __imp_?GetDisplayPolicy@@YA?AW4eDisplayPolicy@@XZ
0x140006E78: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x140004B60: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140004058: "protected: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@IEAAX_N_K@Z
0x140007BA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-0
0x140007A4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140006868: "exclude" ??_C@_1BA@GGFAMGMH@?$AAe?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AA?$AA@
0x140006540: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140006530: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140006258: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400061F0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400028B4: "protected: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@IEAAX_N_K@Z
0x140006854: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x1400063D0: "__cdecl _imp_?AdtSetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1EEEEKKE@Z" __imp_?AdtSetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1EEEEKKE@Z
0x1400061A8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140003AA0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1400036D8: "unsigned long __cdecl AdtListUsers(unsigned char)" ?AdtListUsers@@YAKE@Z
0x140006370: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x140003DB4: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x140004A10: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140006430: "__cdecl _imp_?AdtListCategories@@YAKE@Z" __imp_?AdtListCategories@@YAKE@Z
0x140006490: "__cdecl _imp__commode" __imp__commode
0x140006468: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140006310: "__cdecl _imp_EqualSid" __imp_EqualSid
0x140003E00: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x140006030: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x140006220: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140007AB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x140006930: "SubCategory" ??_C@_1BI@PGMPOLPL@?$AAS?$AAu?$AAb?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AA?$AA@
0x1400063C8: "__cdecl _imp_?AdtGetOption@@YAKPEBG@Z" __imp_?AdtGetOption@@YAKPEBG@Z
0x140006980: "list" ??_C@_19HBOBIAED@?$AAl?$AAi?$AAs?$AAt?$AA?$AA@
0x1400063E8: "__cdecl _imp_?AdtLoadStringEx@@YAXKPEAGK@Z" __imp_?AdtLoadStringEx@@YAXKPEAGK@Z
0x140004D00: "__cdecl ValidateImageBase" _ValidateImageBase
0x140004E3C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140006D40: "KEY_SET_VALUE" ??_C@_1BM@MEPMADEJ@?$AAK?$AAE?$AAY?$AA_?$AAS?$AAE?$AAT?$AA_?$AAV?$AAA?$AAL?$AAU?$AAE?$AA?$AA@
0x140004978: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x140006770: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x140007B3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140006AC0: "FILE_READ_DATA" ??_C@_1BO@NEBMCFBI@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAR?$AAE?$AAA?$AAD?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1400067C8: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140006780: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x140006268: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140006A20: "FILE_ALL_ACCESS" ??_C@_1CA@BEIICKAI@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAA?$AAL?$AAL?$AA_?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x140004A03: "public: __cdecl exception::exception(void) __ptr64" ??0exception@@QEAA@XZ
0x140009F98: "__cdecl newmode" _newmode
0x140004E68: "__cdecl _acrt_iob_func" __acrt_iob_func
0x140006460: "__cdecl _imp__initterm" __imp__initterm
0x140006488: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400061B0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400079B8: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x14000496C: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x1400061F8: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x140006898: "value" ??_C@_1M@KBCLFMHN@?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x140007A60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x140006900: "condition" ??_C@_1BE@EKCHDLNH@?$AAc?$AAo?$AAn?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400079D8: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1400062F0: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x140006858: "include" ??_C@_1BA@FPACGCNF@?$AAi?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AA?$AA@
0x140009FA0: "__cdecl _onexitend" __onexitend
0x140006478: "__cdecl _imp__exit" __imp__exit
0x140006598: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140006CD8: "KEY_READ" ??_C@_1BC@EAMFGFKP@?$AAK?$AAE?$AAY?$AA_?$AAR?$AAE?$AAA?$AAD?$AA?$AA@
0x1400064C8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x140006410: "__cdecl _imp_?AdtRemoveAllUsers@@YAKXZ" __imp_?AdtRemoveAllUsers@@YAKXZ
0x140004990: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x140006210: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140009000: "struct AUDIT_COMMAND * AuditParserFirstLevel" ?AuditParserFirstLevel@@3PAUAUDIT_COMMAND@@A
0x1400068C0: "clear" ??_C@_1M@IKKIHJKB@?$AAc?$AAl?$AAe?$AAa?$AAr?$AA?$AA@
0x140006A40: "FILE_GENERIC_READ" ??_C@_1CE@LPEGBAKO@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAG?$AAE?$AAN?$AAE?$AAR?$AAI?$AAC?$AA_?$AAR?$AAE?$AAA?$AAD?$AA?$AA@
0x140009120: "struct AUDIT_OPTIONS * AuditParserSacl" ?AuditParserSacl@@3PAUAUDIT_OPTIONS@@A
0x1400034B0: "unsigned long __cdecl AdtPrintStringizedSid(void * __ptr64)" ?AdtPrintStringizedSid@@YAKPEAX@Z
0x140006580: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140006558: "__cdecl _imp__wsetlocale" __imp__wsetlocale
0x1400069E0: ".%d" ??_C@_17JFAEKECD@?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x140006350: "__cdecl _imp_LsaLookupSids" __imp_LsaLookupSids
0x140006298: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400065C0: "__cdecl _xi_a" __xi_a
0x140006290: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140004C40: "__cdecl matherr" _matherr
0x140001088: wmain
0x140006320: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140003D7C: "public: __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::~basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>(void) __ptr64" ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAA@XZ
0x140001B10: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x140007A00: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x140006EA0: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14000287C: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::~basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>(void) __ptr64" ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAA@XZ
0x140007B28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140006CB8: "KEY_ALL_ACCESS" ??_C@_1BO@JAJINOHE@?$AAK?$AAE?$AAY?$AA_?$AAA?$AAL?$AAL?$AA_?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x1400069E8: ".OCP" ??_C@_19PPJNADML@?$AA?4?$AAO?$AAC?$AAP?$AA?$AA@
0x1400069A0: "restore" ??_C@_1BA@KMFDKMJO@?$AAr?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x1400062D8: api-ms-win-security-audit-l1-1-1_NULL_THUNK_DATA
0x1400064A0: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x1400062A8: api-ms-win-security-audit-l1-1-0_NULL_THUNK_DATA
0x140006318: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x140003AF0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140003E00: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x140006808: "category" ??_C@_1BC@CLJPPABC@?$AAc?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AA?$AA@
0x140006C58: "WRITE_OWNER" ??_C@_1BI@BFLLPMKE@?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAO?$AAW?$AAN?$AAE?$AAR?$AA?$AA@
0x140006058: "const type_info::`vftable'" ??_7type_info@@6B@
0x140007A74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140006820: "subcategory" ??_C@_1BI@FFFPKNLB@?$AAs?$AAu?$AAb?$AAc?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AA?$AA@
0x140006348: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x140004770: "__cdecl _security_check_cookie" __security_check_cookie
0x140006188: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x1400065B8: "__cdecl _xc_z" __xc_z
0x140007AEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140006230: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140007938: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x1400049F7: "__cdecl CxxThrowException" _CxxThrowException
0x140004020: "protected: virtual void __cdecl std::out_of_range::_Doraise(void)const __ptr64" ?_Doraise@out_of_range@std@@MEBAXXZ
0x140006498: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140006288: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140006C40: "WRITE_DAC" ??_C@_1BE@JIKFMNKD@?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAD?$AAA?$AAC?$AA?$AA@
0x140009988: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x140007870: "__cdecl TI2?AVlogic_error@std@@" _TI2?AVlogic_error@std@@
0x1400061D0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140006B88: "FILE_DELETE_CHILD" ??_C@_1CE@FEPHEBBH@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AA_?$AAC?$AAH?$AAI?$AAL?$AAD?$AA?$AA@
0x140006338: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x140004EF0: "__cdecl _chkstk" __chkstk
0x1400069B0: "Remove" ??_C@_1O@KEIBEGCK@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x1400062C8: "__cdecl _imp_AuditSetSecurity" __imp_AuditSetSecurity
0x140004990: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140006C10: "DELETE" ??_C@_1O@LPPHHL@?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AA?$AA@
0x140009540: "struct AUDIT_OPTIONS * AuditParserList" ?AuditParserList@@3PAUAUDIT_OPTIONS@@A
0x1400068D0: "view" ??_C@_19IGFHNPAK@?$AAv?$AAi?$AAe?$AAw?$AA?$AA@
0x140006260: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140002720: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::operator+=(unsigned short const * __ptr64) __ptr64" ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV01@PEBG@Z
0x140004953: memcpy_s
0x140006C70: "SYNCHRONIZE" ??_C@_1BI@ICMPFHAF@?$AAS?$AAY?$AAN?$AAC?$AAH?$AAR?$AAO?$AAN?$AAI?$AAZ?$AAE?$AA?$AA@
0x140007B14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140006240: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140006358: "__cdecl _imp_LsaClose" __imp_LsaClose
0x1400065E0: "__cdecl _guard_fids_table" __guard_fids_table
0x140006578: msvcrt_NULL_THUNK_DATA
0x140006080: "__cdecl load_config_used" _load_config_used
0x140009938: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x1400064D8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x1400068A8: "set" ??_C@_17EGGBPMH@?$AAs?$AAe?$AAt?$AA?$AA@
0x140001B10: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x140007AD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x140007910: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z64
0x140006400: "__cdecl _imp_?DisplayMessageToSpecificConsoleHandle@@YAHPEAU_iobuf@@PEBGZZ" __imp_?DisplayMessageToSpecificConsoleHandle@@YAHPEAU_iobuf@@PEBGZZ
0x140006E20: " ----- " ??_C@_1BG@HPJDJEGE@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?6?$AA?$AA@
0x140009650: "struct AUDIT_OPTIONS * AuditParserRemove" ?AuditParserRemove@@3PAUAUDIT_OPTIONS@@A
0x1400064B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140004960: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x1400062C0: "__cdecl _imp_AuditQuerySecurity" __imp_AuditQuerySecurity
0x140003E00: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x14000695C: "y" ??_C@_13MIIMMPPF@?$AAy?$AA?$AA@
0x140003FE0: "protected: virtual void __cdecl std::logic_error::_Doraise(void)const __ptr64" ?_Doraise@logic_error@std@@MEBAXXZ
0x140006450: "__cdecl _imp_?DisplayMessage@@YAHPEBGZZ" __imp_?DisplayMessage@@YAHPEBGZZ
0x140001008: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140003B3C: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x140006408: "__cdecl _imp_?AdtGetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0@Z" __imp_?AdtGetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0@Z
0x140006330: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x140001B78: "void __cdecl AdtpRemoveAcesForSid(struct _ACL * __ptr64,void * __ptr64)" ?AdtpRemoveAcesForSid@@YAXPEAU_ACL@@PEAX@Z
0x140006250: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140006238: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140006848: "sd" ??_C@_15HHMPEBGH@?$AAs?$AAd?$AA?$AA@
0x140009F94: "__cdecl dowildcard" _dowildcard
0x140006000: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x1400067F0: "Key" ??_C@_17KACEIPNC@?$AAK?$AAe?$AAy?$AA?$AA@
0x140006DF8: " %s " ??_C@_1BA@MNOOJMBO@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140006508: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x140006300: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x1400068F0: "access" ??_C@_1O@DGLNDHCO@?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x140006060: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x140006248: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140007978: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z64
0x140004E30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140006208: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140004B8C: RtlpImageNtHeader
0x140003DB4: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x140006E08: " %08lxh " ??_C@_1BI@IGCMBAPA@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AAh?$AA?6?$AA?$AA@
0x140006378: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x140007B8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0
0x140003E00: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x1400061E8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140006838: "option" ??_C@_1O@MCBKJPNO@?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140006340: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x140006420: "__cdecl _imp_?AdtSetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0EEEEKKE@Z" __imp_?AdtSetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0EEEEKKE@Z
0x140006EC0: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x1400049D4: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140006588: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x140004180: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x1400064B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400069C0: "resourceSACL" ??_C@_1BK@MPOLBNIG@?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAS?$AAA?$AAC?$AAL?$AA?$AA@
0x140006590: ntdll_NULL_THUNK_DATA
0x140006518: "__cdecl _imp_memcpy" __imp_memcpy
0x1400099B0: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x140007958: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x140009600: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x140004120: "public: static void __cdecl std::_String_base::_Xran(void)" ?_Xran@_String_base@std@@SAXXZ
0x140004E8C: "__cdecl _iob_func" __iob_func
0x140006EA8: "%-40s" ??_C@_1M@MCGMEIEA@?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?$AA@
0x140006380: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x140009300: "struct AUDIT_OPTIONS * AuditParserGet" ?AuditParserGet@@3PAUAUDIT_OPTIONS@@A
0x140006550: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x1400099D0: "__cdecl _security_cookie" __security_cookie
0x1400093E0: "struct AUDIT_OPTIONS * AuditParserSet" ?AuditParserSet@@3PAUAUDIT_OPTIONS@@A
0x140004EF0: "__cdecl alloca_probe" _alloca_probe
0x140003E64: "protected: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@IEAAX_K0@Z
0x140007BB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddlparsecond-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddlparsecond-l1-1-0
0x1400061D8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400062E0: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1400099E0: "__cdecl _defaultmatherr" __defaultmatherr
0x140007A9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140006440: "__cdecl _imp_?LoadFormatStringAndPrintToConsole@@YAHKZZ" __imp_?LoadFormatStringAndPrintToConsole@@YAHKZZ
0x140006448: "__cdecl _imp_?AdtClearPolicy@@YAKE@Z" __imp_?AdtClearPolicy@@YAKE@Z
0x140002CAC: "protected: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@IEAAX_K0@Z
0x140009FA8: "__cdecl _onexitbegin" __onexitbegin
0x140006E70: ";;;" ??_C@_17LONOHHD@?$AA?$DL?$AA?$DL?$AA?$DL?$AA?$AA@
0x140006BE0: "FILE_WRITE_ATTRIBUTES" ??_C@_1CM@NMGCOKDO@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAA?$AAT?$AAT?$AAR?$AAI?$AAB?$AAU?$AAT?$AAE?$AAS?$AA?$AA@
0x1400062A0: "__cdecl _imp_AuditFree" __imp_AuditFree
0x140006E90: "Disable" ??_C@_1BA@EHHBCNCC@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140006528: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140006538: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x140006198: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140006458: auditpolcore_NULL_THUNK_DATA
0x140006190: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140004D34: "__cdecl _security_init_cookie" __security_init_cookie
0x140006470: "__cdecl _imp__cexit" __imp__cexit
0x140006AE0: "FILE_WRITE_DATA" ??_C@_1CA@BJKMAFJI@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAW?$AAR?$AAI?$AAT?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x140004BE8: "__cdecl get_image_app_type" _get_image_app_type
0x1400049DF: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x140007A24: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140006388: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x140006018: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x140006978: "get" ??_C@_17PMJHCABG@?$AAg?$AAe?$AAt?$AA?$AA@
0x140003E00: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x1400063F8: "__cdecl _imp_?AdtSetOption@@YAKPEBGK@Z" __imp_?AdtSetOption@@YAKPEBGK@Z
0x1400064F8: "__cdecl _imp_wprintf" __imp_wprintf
0x140004740: wmainCRTStartup
0x1400039A0: "unsigned long __cdecl AdtGetSd(void)" ?AdtGetSd@@YAKXZ
0x1400064E0: "__cdecl _imp_malloc" __imp_malloc
0x1400062B0: "__cdecl _imp_AuditSetGlobalSaclW" __imp_AuditSetGlobalSaclW
0x140006D20: "KEY_QUERY_VALUE" ??_C@_1CA@MCPDNIIJ@?$AAK?$AAE?$AAY?$AA_?$AAQ?$AAU?$AAE?$AAR?$AAY?$AA_?$AAV?$AAA?$AAL?$AAU?$AAE?$AA?$AA@
0x1400047D0: "__cdecl _report_gsfailure" __report_gsfailure
0x140006888: "failure" ??_C@_1BA@LIMELIPO@?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x140009FB8: "__cdecl _native_startup_state" __native_startup_state
0x140003270: "unsigned long __cdecl AdtParseSidOrName(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?AdtParseSidOrName@@YAKPEBGPEAPEAX@Z
0x140007890: "__cdecl CTA2?AVlogic_error@std@@" _CTA2?AVlogic_error@std@@
0x1400069F8: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1400062F8: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x140006568: "__cdecl _imp__fmode" __imp__fmode
0x140004420: "public: virtual char const * __ptr64 __cdecl std::logic_error::what(void)const __ptr64" ?what@logic_error@std@@UEBAPEBDXZ
0x140002B88: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::assign(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x140003510: "unsigned long __cdecl AdtPrintPrincipalName(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?AdtPrintPrincipalName@@YAKPEAGK0K@Z
0x1400079A0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x140007B50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400063F0: "__cdecl _imp_?AdtGetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1@Z" __imp_?AdtGetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1@Z
0x1400064E8: "__cdecl _imp_free" __imp_free
0x140006990: "backup" ??_C@_1O@HHIBNCKL@?$AAb?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x140004CA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140006280: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140006548: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x140003C28: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x1400062D0: "__cdecl _imp_AuditEnumeratePerUserPolicy" __imp_AuditEnumeratePerUserPolicy
0x140007A88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400063B0: "__cdecl _imp_?AdtParseAuditOptionName@@YAKPEBGPEAPEBG@Z" __imp_?AdtParseAuditOptionName@@YAKPEBGPEAPEBG@Z
0x140009610: "struct AUDIT_OPTIONS * AuditParserBackup" ?AuditParserBackup@@3PAUAUDIT_OPTIONS@@A
0x140007B00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140004EB2: memset
0x140007BDC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]