Generated by JEB on 2019/02/01

PE: C:\Windows\System32\wbem\KrnlProv.dll Base=0x180000000 SHA-256=A0DC34E5AA9E718B96A9B222DA74FCBEEB9061A997FB495D8EC9B77DA364E615
PDB: KrnlProv.pdb GUID={38AEF03E-D2FD-7ECC-47413C2DDA5E9E23} Age=1

634 located named symbols:
0x18000A518: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x180007AC4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180007E50: "__cdecl FindPESection" _FindPESection
0x1800072D0: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x1800016DC: "protected: long __cdecl CKernelTraceProvider::InitTracing(void) __ptr64" ?InitTracing@CKernelTraceProvider@@IEAAJXZ
0x180006DE0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180009860: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x18000C1EC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000C098: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180004864: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned short const * __ptr64,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJPEBGHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18000A698: "`string'" ??_C@_0BJ@ECIKFEOL@AllocateAndInitializeSid?$AA@
0x180009690: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x18000284C: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x180001F84: "protected: static void __cdecl CKernelTraceProvider::OnThreadEvent(struct _EVENT_RECORD * __ptr64,unsigned long)" ?OnThreadEvent@CKernelTraceProvider@@KAXPEAU_EVENT_RECORD@@K@Z
0x18000E150: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800095D0: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1800098C8: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x180007A54: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x18000A0A8: PsProvGuid
0x180002800: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@?$CComObject@VCKernelTraceProvider@@@ATL@@WBA@EAAKXZ
0x180006250: "void __cdecl _com_raise_error(long,struct IErrorInfo * __ptr64)" ?_com_raise_error@@YAXJPEAUIErrorInfo@@@Z
0x18000A1C0: "`string'" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x180009BD8: "`string'" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x18000E160: "class _variant_t vtMissing" ?vtMissing@@3V_variant_t@@A
0x180007320: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x1800073D4: "__cdecl CRT_INIT" _CRT_INIT
0x1800096A0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002930: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x18000E924: DloadSectionOldProtection
0x180002550: "public: static long __cdecl CWMIComObjectEx<class CKernelTraceProvider>::CreateInstance(class CWMIComObjectEx<class CKernelTraceProvider> * __ptr64 * __ptr64)" ?CreateInstance@?$CWMIComObjectEx@VCKernelTraceProvider@@@@SAJPEAPEAV1@@Z
0x18000789C: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180001264: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x1800072A0: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x18000738C: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180008280: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000A508: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x18000BEA8: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x1800027C0: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CKernelTraceProvider>::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCKernelTraceProvider@@@ATL@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x180009568: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x18000C0FC: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180006888: "public: __cdecl CArray<class CProp,class CProp & __ptr64>::~CArray<class CProp,class CProp & __ptr64>(void) __ptr64" ??1?$CArray@VCProp@@AEAV1@@@QEAA@XZ
0x18000E928: DloadSectionLockCount
0x18000A3F0: "`string'" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x180009320: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x18000A1B4: "`string'" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x180009D88: "`string'" ??_C@_1BO@PGPEHOJI@?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAt?$AAa?$AAr?$AAt?$AAA?$AAd?$AAd?$AAr?$AA?$AA@
0x1800059C0: DllGetClassObject
0x18000A580: "`string'" ??_C@_1FG@OCNEBFDC@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9@
0x18000A6D0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180007344: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x18000280C: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x180009FD0: "`string'" ??_C@_1EI@CDCIBHEG@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAS?$AAt?$AAo?$AAp?$AAT?$AAr@
0x180009E38: "`string'" ??_C@_1BE@OAIGADCK@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAB?$AAa?$AAs?$AAe?$AA?$AA@
0x180009628: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000BF18: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18000A298: "`string'" ??_C@_1BA@JIHHIEDE@?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?$AA@
0x18000137C: "public: __cdecl CCritSec::~CCritSec(void) __ptr64" ??1CCritSec@@QEAA@XZ
0x180002A10: "public: virtual void * __ptr64 __cdecl ATL::CComModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECComModule@ATL@@UEAAPEAXI@Z
0x18000286C: "long __cdecl ATL::AtlHresultFromWin32(unsigned long)" ?AtlHresultFromWin32@ATL@@YAJK@Z
0x180009538: "__cdecl _imp_UnRegisterTypeLib" __imp_UnRegisterTypeLib
0x1800061CC: "public: __cdecl _com_error::_com_error(class _com_error const & __ptr64) __ptr64" ??0_com_error@@QEAA@AEBV0@@Z
0x180005ED0: "public: __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x180005ED0: "public: __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18000A100: "`string'" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x1800078E8: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x180009970: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180009578: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x180009028: "__cdecl _imp__recalloc" __imp__recalloc
0x180003EDC: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEAGH@Z
0x1800097C0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180002828: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180006110: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x180006110: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x180007950: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x180002240: "public: virtual long __cdecl CKernelTraceProviderShimClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CKernelTraceProviderShimClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180009830: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x18000C188: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x180002A70: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180002FCC: "public: int __cdecl ATL::CRegParser::CParseBuffer::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@CParseBuffer@CRegParser@ATL@@QEAAHPEBGH@Z
0x180007E42: "__cdecl XcptFilter" _XcptFilter
0x180009978: "__cdecl _xc_a" __xc_a
0x18000BEC8: "__cdecl TI1?AV_com_error@@" _TI1?AV_com_error@@
0x18000A168: "`string'" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800062AC: "public: __cdecl CObjAccess::CObjAccess(void) __ptr64" ??0CObjAccess@@QEAA@XZ
0x180005F60: "public: virtual long __cdecl ATL::CComObjectCached<class CKernelTraceProviderShimClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectCached@VCKernelTraceProviderShimClassFactory@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000A0B8: ImageLoad
0x18000C084: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-legacy-l1-1-0
0x180009250: "const ATL::CComObject<class CKernelTraceProvider>::`vftable'{for `IWbemProviderInit'}" ??_7?$CComObject@VCKernelTraceProvider@@@ATL@@6BIWbemProviderInit@@@
0x180005850: "public: static long __cdecl CKernelTraceProvider::UpdateRegistry(int)" ?UpdateRegistry@CKernelTraceProvider@@SAJH@Z
0x1800062E4: "public: __cdecl CObjAccess::~CObjAccess(void) __ptr64" ??1CObjAccess@@QEAA@XZ
0x180001244: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x180009618: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1800027E0: "[thunk]:public: virtual unsigned long __cdecl CWMIComObjectEx<class CKernelTraceProvider>::Release`adjustor{16}' (void) __ptr64" ?Release@?$CWMIComObjectEx@VCKernelTraceProvider@@@@WBA@EAAKXZ
0x180007FFB: "__cdecl lock" _lock
0x18000E8E8: DloadSrwLock
0x1800030F0: "public: virtual long __cdecl ATL::CRegObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRegObject@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180007E36: "__cdecl callnewh" _callnewh
0x180002F1C: "public: long __cdecl ATL::CExpansionVector::ClearReplacements(void) __ptr64" ?ClearReplacements@CExpansionVector@ATL@@QEAAJXZ
0x180009B44: "__cdecl _guard_iat_table" __guard_iat_table
0x180002A00: "public: virtual long __cdecl ATL::CComModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CComModule@ATL@@UEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x180009640: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180009BA0: "__cdecl _sz_USER32_dll" __sz_USER32_dll
0x180009C68: "`string'" ??_C@_17NKMLOKHF@?$AAS?$AAi?$AAd?$AA?$AA@
0x1800014F4: "protected: long __cdecl CKernelTraceProvider::InitEvents(void) __ptr64" ?InitEvents@CKernelTraceProvider@@IEAAJXZ
0x1800081F0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x1800098B8: "__cdecl _imp_memset" __imp_memset
0x18000BF68: USER32_NULL_THUNK_DATA_DLN
0x18000E920: DloadSectionCommitPermanent
0x180010008: USER32_NULL_THUNK_DATA_DLA
0x180007FF5: "__cdecl initterm" _initterm
0x18000BF90: USER32_NULL_THUNK_DATA_DLB
0x18000727C: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x18000C1D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000E910: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800097D0: "__cdecl _imp_Sleep" __imp_Sleep
0x18000A2A8: "`string'" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x1800099C8: "__cdecl _xi_z" __xi_z
0x180009E80: "`string'" ??_C@_1CM@HIENBLDI@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAL?$AAo?$AAa?$AAd?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x1800095E0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800027D0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::Release`adjustor{16}' (void) __ptr64" ?Release@?$CComObject@VCKernelTraceProvider@@@ATL@@WBA@EAAKXZ
0x180005144: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x1800078A2: "__cdecl _C_specific_handler" __C_specific_handler
0x180009C30: "`string'" ??_C@_1CA@GOJLKLGG@?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAI?$AAD?$AA?$AA@
0x1800097B0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000C200: "__cdecl _IMPORT_DESCRIPTOR_esscli" __IMPORT_DESCRIPTOR_esscli
0x180009900: "__cdecl _imp__onexit" __imp__onexit
0x180001384: "public: __cdecl CInCritSec::CInCritSec(struct _RTL_CRITICAL_SECTION * __ptr64) __ptr64" ??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
0x180003110: ?GetObjectDescription@?$CComCoClass@VCKernelTraceProvider@@$1?CLSID_KernelTraceProvider@@3U_GUID@@B@ATL@@SAPEBGXZ
0x180002A10: "public: virtual void * __ptr64 __cdecl ATL::CComModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCComModule@ATL@@UEAAPEAXI@Z
0x1800023F0: "public: virtual __cdecl ATL::CComObject<class CKernelTraceProvider>::~CComObject<class CKernelTraceProvider>(void) __ptr64" ??1?$CComObject@VCKernelTraceProvider@@@ATL@@UEAA@XZ
0x180009600: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800097A0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18000A428: "`string'" ??_C@_1BG@JBACFMF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAR?$AAa?$AAw?$AA?$AA@
0x180005ED0: "public: __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x180009710: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180009CD0: "`string'" ??_C@_1CO@KDEKMJDO@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAo?$AAp?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x180008110: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000264C: "public: __cdecl ATL::CComObject<class CKernelTraceProvider>::CComObject<class CKernelTraceProvider>(void * __ptr64) __ptr64" ??0?$CComObject@VCKernelTraceProvider@@@ATL@@QEAA@PEAX@Z
0x18000A548: GUID_ATLVer70
0x180009808: "__cdecl _imp_OpenTraceW" __imp_OpenTraceW
0x180003110: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x180009C50: "`string'" ??_C@_1BE@IFHLDFGK@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$AA@
0x1800059A0: DllCanUnloadNow
0x1800096F8: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180009BB0: CLSID_StdComponentCategoriesMgr
0x180006750: "public: int __cdecl CObjAccess::WriteNULL(unsigned long) __ptr64" ?WriteNULL@CObjAccess@@QEAAHK@Z
0x180002144: "protected: static void __cdecl CKernelTraceProvider::OnImageEvent(struct _EVENT_RECORD * __ptr64)" ?OnImageEvent@CKernelTraceProvider@@KAXPEAU_EVENT_RECORD@@@Z
0x18000A270: "`string'" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180009838: "__cdecl _imp_EnableTraceEx" __imp_EnableTraceEx
0x1800065E4: "public: int __cdecl CObjAccess::WriteString(unsigned long,unsigned short const * __ptr64) __ptr64" ?WriteString@CObjAccess@@QEAAHKPEBG@Z
0x180009758: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180004DB0: "long __cdecl ATL::AtlLoadTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,struct ITypeLib * __ptr64 * __ptr64)" ?AtlLoadTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBGPEAPEAGPEAPEAUITypeLib@@@Z
0x1800031A0: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegObject@ATL@@UEAAPEAXI@Z
0x180009700: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180007E48: "__cdecl amsg_exit" _amsg_exit
0x180006634: "public: int __cdecl CObjAccess::WriteString(unsigned long,char const * __ptr64) __ptr64" ?WriteString@CObjAccess@@QEAAHKPEBD@Z
0x180009898: "__cdecl _imp__callnewh" __imp__callnewh
0x18000A188: "`string'" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x1800027B0: "[thunk]:public: virtual unsigned long __cdecl CWMIComObjectEx<class CKernelTraceProvider>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CWMIComObjectEx@VCKernelTraceProvider@@@@W7EAAKXZ
0x1800023E0: "public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCKernelTraceProvider@@@ATL@@UEAAKXZ
0x18000A478: "`string'" ??_C@_1CK@IFBKBFAA@?$AA?2?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000A1B8: "`string'" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x180009D00: "`string'" ??_C@_1BE@HBGIBAMB@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAB?$AAa?$AAs?$AAe?$AA?$AA@
0x180009BC0: GUID_NULL
0x180009770: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x1800098A8: "__cdecl _imp__lock" __imp__lock
0x180009570: OLEAUT32_NULL_THUNK_DATA
0x180002310: "public: virtual unsigned long __cdecl CWMIComObjectEx<class CKernelTraceProvider>::Release(void) __ptr64" ?Release@?$CWMIComObjectEx@VCKernelTraceProvider@@@@UEAAKXZ
0x180009E68: "`string'" ??_C@_1BC@PKFGPGJB@?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180009550: "__cdecl _imp_LoadTypeLib" __imp_LoadTypeLib
0x180007A34: atexit
0x18000C05C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-consumer-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-consumer-l1-1-0
0x180009B50: "`string'" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x18000E7F0: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x180009230: "const ATL::CComObject<class CKernelTraceProvider>::`vftable'{for `IWbemEventProviderSecurity'}" ??_7?$CComObject@VCKernelTraceProvider@@@ATL@@6BIWbemEventProviderSecurity@@@
0x180009678: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x1800024D0: ??1?$_com_ptr_t@V?$_com_IIID@UIWbemEventSink@@$1?_GUID_3ae0080a_7e3a_4366_bf89_0feedc931659@@3U__s_GUID@@B@@@@QEAA@XZ
0x180009790: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006110: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x180009720: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180009B60: "`string'" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x1800024F0: ??0?$_com_ptr_t@V?$_com_IIID@UIWbemEventSink@@$1?_GUID_3ae0080a_7e3a_4366_bf89_0feedc931659@@3U__s_GUID@@B@@@@QEAA@XZ
0x180002390: "public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::Release(void) __ptr64" ?Release@?$CComObject@VCKernelTraceProvider@@@ATL@@UEAAKXZ
0x180009160: "const ATL::CComObject<class CKernelTraceProvider>::`vftable'{for `IWbemEventProvider'}" ??_7?$CComObject@VCKernelTraceProvider@@@ATL@@6BIWbemEventProvider@@@
0x1800095F0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180009370: "const _com_error::`vftable'" ??_7_com_error@@6B@
0x18000BE80: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x1800097E8: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x1800096B0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180008007: "__cdecl _dllonexit" __dllonexit
0x1800018C0: "protected: static unsigned long __cdecl CKernelTraceProvider::DoProcessTrace(class CKernelTraceProvider * __ptr64)" ?DoProcessTrace@CKernelTraceProvider@@KAKPEAV1@@Z
0x18000A068: "__cdecl GUID_e245105b_b06e_11d0_ad61_00c04fd8fdff" _GUID_e245105b_b06e_11d0_ad61_00c04fd8fdff
0x1800024D0: ??1?$_com_ptr_t@V?$_com_IIID@UIWbemServices@@$1?_GUID_9556dc99_828c_11cf_a37e_00aa003240c7@@3U__s_GUID@@B@@@@QEAA@XZ
0x18000BEE8: "__cdecl CT??_R0?AV_com_error@@@8??0_com_error@@QEAA@AEBV0@@Z32" _CT??_R0?AV_com_error@@@8??0_com_error@@QEAA@AEBV0@@Z32
0x180009778: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x18000A310: "`string'" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000E8F0: "__cdecl _native_startup_lock" __native_startup_lock
0x180006AFC: "public: __cdecl _bstr_t::~_bstr_t(void) __ptr64" ??1_bstr_t@@QEAA@XZ
0x180005860: DllMain
0x180006948: "public: __cdecl _bstr_t::Data_t::Data_t(char const * __ptr64) __ptr64" ??0Data_t@_bstr_t@@QEAA@PEBD@Z
0x18000C174: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180009920: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18000C160: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x1800098D0: "__cdecl _imp_realloc" __imp_realloc
0x180009880: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180009740: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180009680: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180001240: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18000816B: "__cdecl _imp_load_UnregisterClassA" __imp_load_UnregisterClassA
0x18000E8E0: "__cdecl _puiHead" __puiHead
0x180009E08: "`string'" ??_C@_1CM@ELPOHLFJ@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAS?$AAt?$AAo?$AAp?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x1800029E0: "public: virtual long __cdecl ATL::CComModule::UpdateRegistryFromResourceD(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceD@CComModule@ATL@@UEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x1800095C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007344: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180009848: api-ms-win-eventing-legacy-l1-1-0_NULL_THUNK_DATA
0x180002370: "public: virtual long __cdecl ATL::CComObject<class CKernelTraceProvider>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCKernelTraceProvider@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000800D: "__cdecl errno" _errno
0x18000E140: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800080F0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180004F50: "long __cdecl ATL::AtlRegisterTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64)" ?AtlRegisterTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBG@Z
0x180009C70: "`string'" ??_C@_1BI@DMELAOBE@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A538: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x180002820: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x18000A558: IID_IWbemEventSink
0x18000E728: "class CCritSec g_KernelTraceCritSec" ?g_KernelTraceCritSec@@3VCCritSec@@A
0x1800066E8: "public: int __cdecl CObjAccess::WriteDWORD(unsigned long,unsigned long) __ptr64" ?WriteDWORD@CObjAccess@@QEAAHKK@Z
0x180009960: wbemcomn_NULL_THUNK_DATA
0x1800031A0: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegObject@ATL@@UEAAPEAXI@Z
0x180006370: "public: int __cdecl CObjAccess::Init(struct IWbemServices * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned long,enum CObjAccess::INIT_FAILED_PROP_TYPE) __ptr64" ?Init@CObjAccess@@QEAAHPEAUIWbemServices@@PEBGPEAPEBGKW4INIT_FAILED_PROP_TYPE@1@@Z
0x1800095B8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x180009850: "__cdecl _imp_?IsUserAdministrator@@YAJPEAX@Z" __imp_?IsUserAdministrator@@YAJPEAX@Z
0x180009C08: "`string'" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180006010: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CKernelTraceProvider> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCKernelTraceProvider@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x1800096C8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800097B8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180009BF0: "`string'" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x18000A098: "__cdecl GUID_631f7d96_d993_11d2_b339_00105a1f4aaf" _GUID_631f7d96_d993_11d2_b339_00105a1f4aaf
0x1800031D0: "public: virtual long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@UEAAJPEBG0@Z
0x1800096E8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180009580: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x180007EF0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180009668: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180006210: "public: virtual __cdecl _com_error::~_com_error(void) __ptr64" ??1_com_error@@UEAA@XZ
0x180007E1C: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x18000A2C8: "`string'" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18000C138: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180009610: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180009660: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800097A8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18000BF40: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000E0E8: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180009780: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180009768: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x180007610: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180009888: "__cdecl _imp__initterm" __imp__initterm
0x180009D50: "`string'" ??_C@_1BO@HIGAIIEH@?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAa?$AAc?$AAk?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x18000C0C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180003634: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG@Z
0x180001490: "public: virtual long __cdecl CKernelTraceProvider::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CKernelTraceProvider@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x1800095A8: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x1800095E8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180003B74: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x18000BE00: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x180002B28: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180007D70: "__cdecl recalloc" _recalloc
0x18000A1C8: "`string'" ??_C@_1CK@OEKPKBNA@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180009670: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180007E22: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x180009800: "__cdecl _imp_CloseTrace" __imp_CloseTrace
0x18000C14C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000BDD8: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x18000E700: "__cdecl _hmod__USER32_dll" __hmod__USER32_dll
0x180005830: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x18000A250: "`string'" ??_C@_17OMAOINJK@?$AAS?$AAA?$AAM?$AA?$AA@
0x18000E900: "__cdecl _onexitend" __onexitend
0x1800096A8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18000A2E0: "`string'" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x180002940: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x180008001: "__cdecl unlock" _unlock
0x18000347C: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x180006148: "public: __cdecl _com_error::_com_error(long,struct IErrorInfo * __ptr64,bool) __ptr64" ??0_com_error@@QEAA@JPEAUIErrorInfo@@_N@Z
0x180009968: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800098E8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180002790: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CKernelTraceProvider>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCKernelTraceProvider@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180007DE0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800096C0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180009950: "__cdecl _imp_?_ThrowMemoryException_@@YAXXZ" __imp_?_ThrowMemoryException_@@YAXXZ
0x18000A0C8: "__cdecl GUID_1be41572_91dd_11d1_aeb2_00c04fb68820" _GUID_1be41572_91dd_11d1_aeb2_00c04fb68820
0x1800029E0: "public: virtual long __cdecl ATL::CComModule::UpdateRegistryFromResourceD(unsigned short const * __ptr64,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceD@CComModule@ATL@@UEAAJPEBGHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x180009F80: "`string'" ??_C@_1EK@NFAIKGPM@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT@
0x180009D18: "`string'" ??_C@_1BG@MPBOMAEA@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAL?$AAi?$AAm?$AAi?$AAt?$AA?$AA@
0x1800097F8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800099B8: "__cdecl _xi_a" __xi_a
0x18000A3D0: "`string'" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1800097F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800095C0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x1800057C0: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180002520: "public: virtual void * __ptr64 __cdecl CWMIComObjectEx<class CKernelTraceProvider>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CWMIComObjectEx@VCKernelTraceProvider@@@@UEAAPEAXI@Z
0x1800098B0: "__cdecl _imp__unlock" __imp__unlock
0x1800092A0: "const ATL::CComModule::`vftable'" ??_7CComModule@ATL@@6B@
0x18000E8A0: "long (__cdecl* __ptr64 ATL::_pPerfRegFunc)(struct HINSTANCE__ * __ptr64)" ?_pPerfRegFunc@ATL@@3P6AJPEAUHINSTANCE__@@@ZEA
0x18000E710: "class CKernelTraceProvider * __ptr64 __ptr64 g_pThis" ?g_pThis@@3PEAVCKernelTraceProvider@@EA
0x18000A1BC: "`string'" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x18000A240: "`string'" ??_C@_19HLLLM@?$AAM?$AAi?$AAm?$AAe?$AA?$AA@
0x180002520: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CKernelTraceProvider>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCKernelTraceProvider@@@ATL@@UEAAPEAXI@Z
0x18000A360: "`string'" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180009590: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x1800072E0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x18000BE38: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x180010000: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x18000801C: "__cdecl invoke_watson" _invoke_watson
0x180008177: "__cdecl _tailMerge_user32_dll" __tailMerge_user32_dll
0x18000A454: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x180006C40: DloadMakePermanentImageCommit
0x18000C0D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180009698: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18000E8B0: "public: static struct _GUID ATL::CAtlModule::m_libid" ?m_libid@CAtlModule@ATL@@2U_GUID@@A
0x18000A468: "`string'" ??_C@_1O@FHBGLCIO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x180009648: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x180007C74: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000E918: "__cdecl pRawDllMain" _pRawDllMain
0x1800098E0: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180005F30: "public: __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>::~CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>(void) __ptr64" ??1?$CAtlSafeAllocBufferManager@VCCRTAllocator@ATL@@@_ATL_SAFE_ALLOCA_IMPL@ATL@@QEAA@XZ
0x180005BE0: DllUnregisterServer
0x180009940: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x1800098C0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180009558: "__cdecl _imp_VariantClear" __imp_VariantClear
0x18000E850: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180003440: "public: virtual long __cdecl ATL::CRegObject::ClearReplacements(void) __ptr64" ?ClearReplacements@CRegObject@ATL@@UEAAJXZ
0x18000738C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180001A20: "public: virtual long __cdecl CKernelTraceProvider::AccessCheck(unsigned short const * __ptr64,unsigned short const * __ptr64,long,unsigned char const * __ptr64) __ptr64" ?AccessCheck@CKernelTraceProvider@@UEAAJPEBG0JPEBE@Z
0x180001240: "public: __cdecl ATL::CComCriticalSection::~CComCriticalSection(void) __ptr64" ??1CComCriticalSection@ATL@@QEAA@XZ
0x180009030: "const type_info::`vftable'" ??_7type_info@@6B@
0x18000C23C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180009788: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800078C0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000E8C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x1800099B0: "__cdecl _xc_z" __xc_z
0x18000C19C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800096D0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000671C: "public: int __cdecl CObjAccess::WriteDWORD64(unsigned long,unsigned __int64) __ptr64" ?WriteDWORD64@CObjAccess@@QEAAHK_K@Z
0x180009658: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180009818: api-ms-win-eventing-consumer-l1-1-0_NULL_THUNK_DATA
0x18000A088: ThreadStop
0x180009CB8: "`string'" ??_C@_1BG@NIOLAPFI@?$AAE?$AAx?$AAi?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18000A078: ProcessStop
0x180007E3C: "__cdecl CxxThrowException" _CxxThrowException
0x180009380: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x180009890: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x18000A6D0: "__cdecl _pfnDefaultDliNotifyHook2" __pfnDefaultDliNotifyHook2
0x180009D30: "`string'" ??_C@_1BM@GJNKMPDM@?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAa?$AAc?$AAk?$AAB?$AAa?$AAs?$AAe?$AA?$AA@
0x180009F30: "`string'" ??_C@_1EK@CKBEICAF@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAo?$AAp?$AAT@
0x180009588: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800097E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000BF20: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USER32_dll" __DELAY_IMPORT_DESCRIPTOR_USER32_dll
0x18000A300: "`string'" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18000E0C0: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18000A338: "`string'" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180009608: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800082A0: "__cdecl _chkstk" __chkstk
0x180009C18: "`string'" ??_C@_1BE@BNMOPHPL@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAI?$AAD?$AA?$AA@
0x18000A228: "`string'" ??_C@_1BC@MAICEHGI@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180002C60: "public: int __cdecl ATL::CExpansionVector::Add(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Add@CExpansionVector@ATL@@QEAAHPEBG0@Z
0x180007DE0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x1800098D8: "__cdecl _imp__errno" __imp__errno
0x18000A4F8: CLSID_KernelTraceProvider
0x180009DD8: "`string'" ??_C@_1CO@FMFGONMH@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x180009858: esscli_NULL_THUNK_DATA
0x180008014: "__cdecl invalid_parameter" _invalid_parameter
0x1800080DF: realloc
0x18000A568: IID__IWmiObject
0x18000A258: "`string'" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x18000E7A0: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x180009748: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000287C: "public: void __cdecl ATL::CAtlModule::Term(void) __ptr64" ?Term@CAtlModule@ATL@@QEAAXXZ
0x180001D28: "protected: static void __cdecl CKernelTraceProvider::OnProcessEvent(struct _EVENT_RECORD * __ptr64,unsigned long)" ?OnProcessEvent@CKernelTraceProvider@@KAXPEAU_EVENT_RECORD@@K@Z
0x180009EB0: "`string'" ??_C@_1CE@IKBDLDKO@?$AAA?$AAd?$AAm?$AAi?$AAn?$AA_?$AAP?$AAS?$AA_?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x18000A2F0: "`string'" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x180002950: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x180009750: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180009828: "__cdecl _imp_StopTraceW" __imp_StopTraceW
0x180002520: "public: virtual void * __ptr64 __cdecl CWMIComObjectEx<class CKernelTraceProvider>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CWMIComObjectEx@VCKernelTraceProvider@@@@UEAAPEAXI@Z
0x18000C124: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180009DA8: "`string'" ??_C@_1BC@KAGFOADF@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAI?$AAD?$AA?$AA@
0x1800096E0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800099D0: "__cdecl _guard_fids_table" __guard_fids_table
0x180005FF0: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class CKernelTraceProviderShimClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectCached@VCKernelTraceProviderShimClassFactory@@@ATL@@UEAAKXZ
0x1800098F8: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x180009760: "__cdecl _imp_CharNextW" __imp_CharNextW
0x1800078E0: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x180002520: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CKernelTraceProvider>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCKernelTraceProvider@@@ATL@@UEAAPEAXI@Z
0x180009810: "__cdecl _imp_ProcessTrace" __imp_ProcessTrace
0x180009938: msvcrt_NULL_THUNK_DATA
0x180009040: "__cdecl load_config_used" _load_config_used
0x180009870: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x18000BE60: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x1800072E0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x180006CD4: DloadProtectSection
0x1800067A0: "public: int __cdecl CArray<class CProp,class CProp & __ptr64>::Init(int) __ptr64" ?Init@?$CArray@VCProp@@AEAV1@@@QEAAHH@Z
0x180003100: "public: virtual unsigned long __cdecl ATL::CRegObject::AddRef(void) __ptr64" ?AddRef@CRegObject@ATL@@UEAAKXZ
0x18000A158: "`string'" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x18000A650: "`string'" ??_C@_1EI@POPCMECF@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAB?$AAa?$AAs?$AAe?$AA?9?$AAL?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?4@
0x180009E50: "`string'" ??_C@_1BE@NMAAKDIB@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x18000A528: LIBID_KRNLPROVLib
0x180006B60: "unsigned long __cdecl DLpLoadProcThreadsDll(void)" ?DLpLoadProcThreadsDll@@YAKXZ
0x18000A2B8: "`string'" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x1800024F8: "public: __cdecl ATL::CComObjectRootEx<class ATL::CComMultiThreadModel>::~CComObjectRootEx<class ATL::CComMultiThreadModel>(void) __ptr64" ??1?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@QEAA@XZ
0x1800098A0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000E110: "__vectorcall ??_R0?AV_com_error@" ??_R0?AV_com_error@@@8
0x180007E30: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x18000A0D8: ThreadStart
0x18000A4D8: "`string'" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x1800027A0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCKernelTraceProvider@@@ATL@@W7EAAKXZ
0x180003114: "public: virtual __cdecl ATL::CRegObject::~CRegObject(void) __ptr64" ??1CRegObject@ATL@@UEAA@XZ
0x180009638: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180006104: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x180006104: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000A6D0: "__cdecl _pfnDliNotifyHook2" __pfnDliNotifyHook2
0x180004098: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x180009738: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800096D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180009140: "const CWMIComObjectEx<class CKernelTraceProvider>::`vftable'{for `IWbemEventProviderSecurity'}" ??_7?$CWMIComObjectEx@VCKernelTraceProvider@@@@6BIWbemEventProviderSecurity@@@
0x18000A5E0: "`string'" ??_C@_1FE@EONGKHGH@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?9?$AAL@
0x180009868: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x180009958: "__cdecl _imp_?BreakOnDbgAndRenterLoop@@YAKXZ" __imp_?BreakOnDbgAndRenterLoop@@YAKXZ
0x180009000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180009688: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180009730: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180007DD0: "__cdecl purecall" _purecall
0x180009708: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18000A6D0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180007A4C: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x18000A280: "`string'" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180001240: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000A4E8: "__cdecl GUID_0002e012_0000_0000_c000_000000000046" _GUID_0002e012_0000_0000_c000_000000000046
0x1800091A8: "const CWMIComObjectEx<class CKernelTraceProvider>::`vftable'{for `IWbemEventProvider'}" ??_7?$CWMIComObjectEx@VCKernelTraceProvider@@@@6BIWbemEventProvider@@@
0x180006170: "public: virtual void * __ptr64 __cdecl _com_error::`vector deleting destructor'(unsigned int) __ptr64" ??_E_com_error@@UEAAPEAXI@Z
0x18000C0E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180001910: "public: virtual long __cdecl CKernelTraceProvider::ProvideEvents(struct IWbemObjectSink * __ptr64,long) __ptr64" ?ProvideEvents@CKernelTraceProvider@@UEAAJPEAUIWbemObjectSink@@J@Z
0x180009630: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180006104: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000E8A8: "long (__cdecl* __ptr64 ATL::_pPerfUnRegFunc)(void)" ?_pPerfUnRegFunc@ATL@@3P6AJXZEA
0x180009540: "__cdecl _imp_RegisterTypeLib" __imp_RegisterTypeLib
0x180006A34: "public: class _bstr_t & __ptr64 __cdecl _bstr_t::operator=(unsigned short const * __ptr64) __ptr64" ??4_bstr_t@@QEAAAEAV0@PEBG@Z
0x1800095A0: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x18000A6B8: "`string'" ??_C@_0BF@KEDGKLKA@CheckTokenMembership?$AA@
0x180002960: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x180009548: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x180009928: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180009948: ntdll_NULL_THUNK_DATA
0x18000E0A0: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18000E000: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x18000C070: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180002A4C: "public: __cdecl ATL::CRegKey::~CRegKey(void) __ptr64" ??1CRegKey@ATL@@QEAA@XZ
0x180005EB0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CKernelTraceProvider> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCKernelTraceProvider@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180009930: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000E148: "__cdecl _security_cookie" __security_cookie
0x18000613C: "void __cdecl _com_issue_error(long)" ?_com_issue_error@@YAXJ@Z
0x1800082A0: "__cdecl alloca_probe" _alloca_probe
0x1800095F8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180009728: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x18000C110: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x180009620: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000BEB8: "__cdecl CTA1?AV_com_error@@" _CTA1?AV_com_error@@
0x18000C0AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800095B0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x180002FC0: "public: __cdecl ATL::CRegParser::CParseBuffer::~CParseBuffer(void) __ptr64" ??1CParseBuffer@CRegParser@ATL@@QEAA@XZ
0x180009560: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1800096F0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000E750: "class ATL::CComModule _Module" ?_Module@@3VCComModule@ATL@@A
0x18000E908: "__cdecl _onexitbegin" __onexitbegin
0x18000A388: "`string'" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x18000A418: "`string'" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x18000A1A8: "`string'" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x180009878: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x1800095D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800096B8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180004B1C: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x180009C88: "`string'" ??_C@_1DA@FDIFCKLD@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x18000E718: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstProcThreadsDLL" ?g_hInstProcThreadsDLL@@3PEAUHINSTANCE__@@EA
0x18000A1F8: "`string'" ??_C@_1BC@NKMMNMGL@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180009718: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180009D70: "`string'" ??_C@_1BE@IEJDFHDE@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAA?$AAd?$AAd?$AAr?$AA?$AA@
0x18000A0E8: CLSID_StdGlobalInterfaceTable
0x180007F20: "__cdecl _security_init_cookie" __security_init_cookie
0x18000A6D8: IID_IWbemObjectAccess
0x180006BE0: "unsigned long __cdecl DLpLoadSecurityDll(void)" ?DLpLoadSecurityDll@@YAKXZ
0x18000A4A8: "`string'" ??_C@_1DA@BIHALFED@?$AA?2?$AAI?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180006170: "public: virtual void * __ptr64 __cdecl _com_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_com_error@@UEAAPEAXI@Z
0x180009840: "__cdecl _imp_QueryTraceW" __imp_QueryTraceW
0x180007E16: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x18000C048: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A638: "`string'" ??_C@_0BA@MOEFBCGC@OpenThreadToken?$AA@
0x180005F80: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class CKernelTraceProviderShimClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectCached@VCKernelTraceProviderShimClassFactory@@@ATL@@UEAAKXZ
0x180009490: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x180009598: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18000A210: "`string'" ??_C@_1BE@EKPAFMCP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x1800013BC: "public: __cdecl CKernelTraceProvider::~CKernelTraceProvider(void) __ptr64" ??1CKernelTraceProvider@@QEAA@XZ
0x180009908: "__cdecl _imp_malloc" __imp_malloc
0x1800027F0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CKernelTraceProvider>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCKernelTraceProvider@@@ATL@@W7EAAKXZ
0x180009918: "__cdecl _imp__purecall" __imp__purecall
0x180001C30: "protected: static void __cdecl CKernelTraceProvider::ProcessPsEvents(struct _EVENT_RECORD * __ptr64)" ?ProcessPsEvents@CKernelTraceProvider@@KAXPEAU_EVENT_RECORD@@@Z
0x180005D70: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectCached<class CKernelTraceProviderShimClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectCached@VCKernelTraceProviderShimClassFactory@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180003C1C: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEAGPEAPEAG@Z
0x18000A020: "`string'" ??_C@_1EI@BAJLHHCH@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAL?$AAo?$AAa?$AAd?$AAT?$AAr@
0x180007B00: "__cdecl _report_gsfailure" __report_gsfailure
0x180009EE0: "`string'" ??_C@_1EM@IODJNEMN@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAr?$AAt@
0x180009798: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800079A4: "__cdecl onexit" _onexit
0x18000A440: "`string'" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x180009820: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x18000E8F8: "__cdecl _native_startup_state" __native_startup_state
0x180006584: "public: int __cdecl CObjAccess::WriteNonPackedArrayData(unsigned long,void * __ptr64,unsigned long,unsigned long) __ptr64" ?WriteNonPackedArrayData@CObjAccess@@QEAAHKPEAXKK@Z
0x18000E898: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x1800092F0: "const ATL::CRegObject::`vftable'" ??_7CRegObject@ATL@@6B@
0x18000A2D8: "`string'" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18000E8C4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdyvnUdrmntngUvhhxlnkUmlmxlnUfgrohUozgvhgUlyquivUznwGEUkivxlnkOlyq@utils" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdyvnUdrmntngUvhhxlnkUmlmxlnUfgrohUozgvhgUlyquivUznwGEUkivxlnkOlyq@utils
0x180009650: "__cdecl _imp_LoadResource" __imp_LoadResource
0x1800029F0: "public: virtual long __cdecl ATL::CComModule::UpdateRegistryFromResourceS(unsigned short const * __ptr64,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CComModule@ATL@@UEAAJPEBGHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x1800091D0: ?_entries@?1??_GetEntries@CKernelTraceProvider@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x180003110: "public: virtual unsigned long __cdecl ATL::CRegObject::Release(void) __ptr64" ?Release@CRegObject@ATL@@UEAAKXZ
0x18000A3A0: "`string'" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1800013B0: "public: __cdecl CInCritSec::~CInCritSec(void) __ptr64" ??1CInCritSec@@QEAA@XZ
0x180009DC0: "`string'" ??_C@_1BC@ICBILECA@?$AAW?$AAa?$AAi?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180009BD0: "`string'" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x18000C228: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x18000A198: "`string'" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180009348: "const ATL::CComObjectCached<class CKernelTraceProviderShimClassFactory>::`vftable'" ??_7?$CComObjectCached@VCKernelTraceProviderShimClassFactory@@@ATL@@6B@
0x180005AE0: DllRegisterServer
0x180005EE8: "public: __cdecl ATL::CAutoVectorPtr<unsigned short>::~CAutoVectorPtr<unsigned short>(void) __ptr64" ??1?$CAutoVectorPtr@G@ATL@@QEAA@XZ
0x180003254: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x180009530: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x1800056A0: "long __cdecl ATL::AtlComModuleGetClassObject(struct ATL::_ATL_COM_MODULE70 * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?AtlComModuleGetClassObject@ATL@@YAJPEAU_ATL_COM_MODULE70@1@AEBU_GUID@@1PEAPEAX@Z
0x18000BE20: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x1800094D0: "protected: static unsigned short const * __ptr64 const * const ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1QBQEBGB
0x180006280: "public: __cdecl CProp::CProp(void) __ptr64" ??0CProp@@QEAA@XZ
0x18000C1C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800093B0: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x18000A458: "`string'" ??_C@_19ILOCMLCJ@?$AA?4?$AAt?$AAl?$AAb?$AA?$AA@
0x18000BF10: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x180005F10: "public: virtual long __cdecl ATL::CAtlModuleT<class ATL::CComModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCComModule@ATL@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x180009910: "__cdecl _imp_free" __imp_free
0x1800068D0: "public: __cdecl CProp::~CProp(void) __ptr64" ??1CProp@@QEAA@XZ
0x180007EA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800097D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000C214: "__cdecl _IMPORT_DESCRIPTOR_wbemcomn" __IMPORT_DESCRIPTOR_wbemcomn
0x180009180: "const CWMIComObjectEx<class CKernelTraceProvider>::`vftable'{for `IWbemProviderInit'}" ??_7?$CWMIComObjectEx@VCKernelTraceProvider@@@@6BIWbemProviderInit@@@
0x1800098F0: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x1800097C8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000E720: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstSecurityDLL" ?g_hInstSecurityDLL@@3PEAUHINSTANCE__@@EA
0x18000C1B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180007E10: memset
0x18000C250: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]