Generated by JEB on 2019/08/01

PE: C:\Windows\System32\radardt.dll Base=0x180000000 SHA-256=A4B32D326B975D237F92E8F2E423DDD64D1803B1D13BA931308713BF2080B142
PDB: radardt.pdb GUID={60CA644C-B366-CFFD-E7204121631C5C7A} Age=1

483 located named symbols:
0x180012128: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x180004764: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180012398: POWRPROF_NULL_THUNK_DATA
0x180012468: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180004930: "__cdecl FindPESection" _FindPESection
0x180011214: StringCchCatW
0x1800127E0: RDR_DET
0x1800010B0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800149A0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800102A0: RdrpCmpPagedPoolUsage
0x180012C88: RDR_DET_STOP_SUCCESS_EVENT
0x1800121D8: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x180002F10: RdrpPopulateSortBuf
0x180016060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180016A28: gliHeapLeakDetectionInterval
0x180012C58: RDR_DET_STOP_FAIL_EVENT
0x18000F844: RdrpGetLastDetectionTime
0x18000FC90: RdrpSetLastDetectionTime
0x1800121C8: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180010CF0: DeleteRegValue
0x1800121E8: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x18000425C: "__cdecl CRT_INIT" _CRT_INIT
0x180012208: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180016680: gHeapLeakDataCritSec
0x180012420: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000A950: WppControlCallback
0x180004D69: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x180004F60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180012388: "__cdecl _imp_PowerSettingRegisterNotification" __imp_PowerSettingRegisterNotification
0x180012240: "__cdecl _imp_FindNextVolumeW" __imp_FindNextVolumeW
0x1800121D0: "__cdecl _imp_GetProcessTimes" __imp_GetProcessTimes
0x18000B634: RdrpGetTopCommitLimitConsumers
0x180019070: "__cdecl _imp_WdiGetParameterByIndex" __imp_WdiGetParameterByIndex
0x180012950: gMmHighCommitConditionEventName
0x180013318: "DiagnosedApplications" ??_C@_1CM@CNBKLF@?$AAD?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAe?$AAd?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180012478: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800134D8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180016CB0: gllCommitThreshold
0x180012198: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180016A20: gllTimerInterval
0x1800133C0: "Software\Microsoft\RADAR\HeapLea" ??_C@_1IC@FEFOGIIK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAA?$AAD?$AAA?$AAR?$AA?2?$AAH?$AAe?$AAa?$AAp?$AAL?$AAe?$AAa@
0x180013378: "PI" ??_C@_15KEKPEBBM@?$AAP?$AAI?$AA?$AA@
0x180004C1D: "__cdecl _imp_load_WdiGetParameterByIndex" __imp_load_WdiGetParameterByIndex
0x180004164: WppInitUm
0x180012330: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180016CC0: ghLowPowerEpochNotification
0x180016620: "__cdecl _hmod__wdi_dll" __hmod__wdi_dll
0x18001498C: "__cdecl _IMPORT_DESCRIPTOR_KERNELBASE" __IMPORT_DESCRIPTOR_KERNELBASE
0x1800133A0: WPP_f3b0a6421e2635ecf2519bab7dd48a9b_Traceguids
0x1800100D0: WPP_SF_DDII
0x1800124B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003340: RdrpIsBootKeyPresent
0x180012318: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180014660: VERSION_NULL_THUNK_DATA_DLN
0x1800122E0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1800127A8: "CommitFloor" ??_C@_1BI@DKBBAGL@?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAF?$AAl?$AAo?$AAo?$AAr?$AA?$AA@
0x180012830: "MaxEventWaitInterval" ??_C@_1CK@CLPLKMML@?$AAM?$AAa?$AAx?$AAE?$AAv?$AAe?$AAn?$AAt?$AAW?$AAa?$AAi?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x180004917: "__cdecl XcptFilter" _XcptFilter
0x180019020: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x1800124C0: "__cdecl _xc_a" __xc_a
0x1800122F0: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x1800022A0: RdrpMonitorCommitCharge
0x18000A0E4: RdrpDetectorShutdown
0x180012628: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180019010: "__cdecl _imp_GetFileVersionInfoSizeW" __imp_GetFileVersionInfoSizeW
0x180001B40: RdrpIsHeapLeakEvent
0x180004D7B: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x1800127F0: "%windir%\system32\services.exe" ??_C@_1DO@LIGBJLIH@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18000B138: RdrpGetCommitLimitEventInfo
0x18000E034: StringCchCopyW
0x1800145E8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_VERSION_dll" __DELAY_IMPORT_DESCRIPTOR_VERSION_dll
0x180001340: RdrpGetScenarioId
0x18000E3E4: RdrpCloseEventHandles
0x180004C0B: "__cdecl _imp_load_WdiAddParameter" __imp_load_WdiAddParameter
0x180016740: gDetectorCritSec
0x180013360: WPP_cce8743fbf773bd4a7901f5f4e40ece4_Traceguids
0x18000AD64: RdrpDiagnoseCommitLimitExhaustion
0x180012540: "__cdecl _guard_iat_table" __guard_iat_table
0x1800133B0: WPP_e342e1bdb9ce397c100f3f8666495cc2_Traceguids
0x1800132C0: "Software\Microsoft\RADAR\HeapLea" ??_C@_1FG@DBLEGML@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAA?$AAD?$AAA?$AAR?$AA?2?$AAH?$AAe?$AAa?$AAp?$AAL?$AAe?$AAa@
0x1800123F0: "__cdecl _imp_memset" __imp_memset
0x1800122C8: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x1800122B8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180004AEF: "__cdecl initterm" _initterm
0x180012CF0: "SYSTEM\CurrentControlSet\Control" ??_C@_1BCE@KGABFEME@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180016658: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180012370: "__cdecl _imp_Sleep" __imp_Sleep
0x1800124E0: "__cdecl _xi_z" __xi_z
0x180012230: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180012488: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180004AFB: "__cdecl _C_specific_handler" __C_specific_handler
0x180013348: WPP_af479cdcab2b37581157fb1a79cd3a36_Traceguids
0x180012768: "CommitThreshold" ??_C@_1CA@PIGJCBMC@?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AA?$AA@
0x180012B90: "SYSTEM\CurrentControlSet\Control" ??_C@_1GE@PNNPCMHE@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800127C0: GUID_LOW_POWER_EPOCH
0x1800122F8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180016768: WPP_REGISTRATION_GUIDS
0x180012CA8: RDR_DET_ALLOC_FAIL_EVENT
0x180016D10: gCommitLimitDiagInfo
0x180012138: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180012648: "%s_%s" ??_C@_1M@LLCLNBHO@?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAs?$AA?$AA@
0x180019068: "__cdecl _imp_WdiAddParameter" __imp_WdiAddParameter
0x180016D00: gHighEventSet
0x180012190: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180004EE8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800016F0: WdiHandleInstance
0x180012748: "TimerInterval" ??_C@_1BM@CKJHHDCD@?$AAT?$AAi?$AAm?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1800121A8: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180004BF9: "__cdecl _imp_load_WdiGetEvent" __imp_load_WdiGetEvent
0x180016700: WPP_MAIN_CB
0x180012B78: "Run" ??_C@_17NMIMIGP@?$AAR?$AAu?$AAn?$AA?$AA@
0x180009B40: RdrSysprepSpecialize
0x18000A748: RdrpStopHeapLeakDetection
0x180012180: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180004923: "__cdecl amsg_exit" _amsg_exit
0x180012F40: "SYSTEM\CurrentControlSet\Control" ??_C@_1BCC@NHBMLJAA@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180012A90: "__cdecl _sz_WTSAPI32_dll" __sz_WTSAPI32_dll
0x1800125C0: "Software\Microsoft\RADAR\HeapLea" ??_C@_1GI@NFBNPEAM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAA?$AAD?$AAA?$AAR?$AA?2?$AAH?$AAe?$AAa?$AAp?$AAL?$AAe?$AAa@
0x18000A2C8: RdrpStartCommitExhaustionDetection
0x1800134D0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180010260: RdrpCmpNonPagedPoolUsage
0x180013070: "SYSTEM\CurrentControlSet\Control" ??_C@_1BBO@IIIOKCFD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180014680: WTSAPI32_NULL_THUNK_DATA_DLN
0x180019038: WTSAPI32_NULL_THUNK_DATA_DLA
0x180014878: WTSAPI32_NULL_THUNK_DATA_DLB
0x180012720: "DetectionInterval" ??_C@_1CE@GBNJPIDB@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x180012308: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180012390: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x180019028: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x180019000: "__cdecl _imp_GetFileVersionInfoW" __imp_GetFileVersionInfoW
0x180016CA8: ghTimerRegHandle
0x180012220: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180016648: "__cdecl _native_startup_lock" __native_startup_lock
0x180019040: "__cdecl _imp_WdiGetEvent" __imp_WdiGetEvent
0x180004D90: DllMain
0x180012A5C: "EI" ??_C@_15PHLENCDE@?$AAE?$AAI?$AA?$AA@
0x180003FF0: RdrpMonitorResources
0x1800098A8: RdrpLogCommitInfo
0x18000E1FC: WPP_SF_ii
0x18000C3B8: WPP_SF_II
0x180004B26: "__cdecl _imp_load_WdiGetDiagnosticModuleId" __imp_load_WdiGetDiagnosticModuleId
0x1800123A0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180012160: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x1800123D0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180016010: ms_launchKeys
0x180012418: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003670: RdrpInitCommitLimitData
0x180003B3C: RdrpOpenEventHandles
0x180004C2F: "__cdecl _imp_load_GetFileVersionInfoSizeW" __imp_load_GetFileVersionInfoSizeW
0x180012360: KERNEL32_NULL_THUNK_DATA
0x18000C37C: WPP_SF_I
0x18000C37C: WPP_SF_i
0x1800125A0: RDR_USER_LOGON_GUID
0x180004CCC: "__cdecl _imp_load_GetFileVersionInfoW" __imp_load_GetFileVersionInfoW
0x180012328: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000F43C: RdrpGetHeapLeakDetectionAttempts
0x18000C05C: RdrpWriteRegValues
0x180016050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004EC4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001440: RdrpStartHeapLeakDetection
0x18000A40C: RdrpStopCommitExhaustionDetection
0x180012498: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180001EE0: RdrpReadHeapLeakSettings
0x180012C40: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x1800125B0: RDR_TIMER_GUID
0x180012150: "__cdecl _imp_EqualSid" __imp_EqualSid
0x1800149B4: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800166C0: gCommitLimitCritSec
0x180016628: "__cdecl _hmod__VERSION_dll" __hmod__VERSION_dll
0x180012CD8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800121C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180012320: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800145C8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_wdi_dll" __DELAY_IMPORT_DESCRIPTOR_wdi_dll
0x18000C294: WPP_SF_DISIDD
0x180012140: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x1800134D0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800049E0: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000EAEC: RdrpCloseHeapLeakEventHandles
0x18000F600: RdrpGetHeapLeakEventInfo
0x180016780: gCommitLimitData
0x1800146C8: wdi_NULL_THUNK_DATA_DLN
0x180013470: WPP_a4b269911548345b2458b37fde85bf85_Traceguids
0x1800106A0: RdrpPopulatePoolSortBuffer
0x180013480: WPP_f5cdba2b79453c1ef5797c1b3f991613_Traceguids
0x18000CF80: RdrpIsActiveUserProcess
0x180012C20: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180009A8C: WPP_SF_
0x180012300: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180012560: RDR_HEAP_LEAK_DETECTION_DM_GUID
0x180012358: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180012550: RDR_MONITOR_EXHAUSTION_DM_GUID
0x1800035B4: RdrpStartCommitExhaustionMonitor
0x1800129F0: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x180014628: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180012278: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x1800122D8: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x1800122A8: "__cdecl _imp_TryEnterCriticalSection" __imp_TryEnterCriticalSection
0x1800044A0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800123C8: "__cdecl _imp__initterm" __imp__initterm
0x180004CEA: "__cdecl _tailMerge_wtsapi32_dll" __tailMerge_wtsapi32_dll
0x1800034A0: RdrpStartSystemDetector
0x180012290: "__cdecl _imp_FindFirstVolumeW" __imp_FindFirstVolumeW
0x180012A40: "Recovery.txt" ??_C@_1BK@HPIGPFIJ@?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x1800121F8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000E13C: WPP_SF_SDDDD
0x1800121F0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18000E7D4: RdrpCleanupHeapLeakData
0x180012428: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x180016CF8: ghMMRegHandle
0x180013448: "LastDetectionTime" ??_C@_1CE@KECKJDEK@?$AAL?$AAa?$AAs?$AAt?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180002D80: StringCchPrintfW
0x18000D478: RdrpIsUserAdmin
0x180016638: "__cdecl _onexitend" __onexitend
0x180012268: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180012378: "__cdecl _imp_WTSGetServiceSessionId" __imp_WTSGetServiceSessionId
0x1800124B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180012380: KERNELBASE_NULL_THUNK_DATA
0x180016CD0: ghEventHandles
0x180012218: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180012C68: WPP_ThisDir_CTLGUID_RdrDetTraceGuid
0x180012178: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180012430: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x180012458: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180016630: "__cdecl _hmod__WTSAPI32_dll" __hmod__WTSAPI32_dll
0x1800124D0: "__cdecl _xi_a" __xi_a
0x180012200: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180012258: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800129A0: gMmMaximumCommitConditionEventName
0x180016A30: gHeapLeakData
0x180004E60: RdrSysprepSpecializeOffline
0x180012658: "svchost.exe" ??_C@_1BI@GOFOEOMC@?$AAs?$AAv?$AAc?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180012580: RDR_MONITOR_LEAKS_DM_GUID
0x180002480: RdrpIdentifyTargetProcess
0x1800112B4: RdrpLogErrorInfo
0x180004CDE: "__cdecl _imp_load_WTSQueryUserToken" __imp_load_WTSQueryUserToken
0x180009AEC: WPP_SF_DD
0x180009AEC: WPP_SF_Dd
0x180009AEC: WPP_SF_dd
0x180012118: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180012A80: "__cdecl _sz_VERSION_dll" __sz_VERSION_dll
0x180010D50: GetExePath
0x180016000: WPP_GLOBAL_Control
0x180012350: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x180009AB0: WPP_SF_D
0x180009AB0: WPP_SF_d
0x180016660: "__cdecl pRawDllMain" _pRawDllMain
0x1800014D0: RdrpInitHeapLeakData
0x180013358: "TS" ??_C@_15JKLEPB@?$AAT?$AAS?$AA?$AA@
0x180012440: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x180012238: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800033B0: RdrpPowerNotificationCallback
0x180004C3B: "__cdecl _tailMerge_version_dll" __tailMerge_version_dll
0x18000BC54: RdrpPrelaunchResolver
0x18000C588: RdrpFillDiagInfo
0x180019008: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x180012340: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180004740: "__cdecl _security_check_cookie" __security_check_cookie
0x180016CB8: glMaxReportCount
0x1800124C8: "__cdecl _xc_z" __xc_z
0x180010EC8: LaunchProcess
0x18000A8F8: WppCleanupUm
0x180012298: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003180: RdrpGetProcessInformation
0x180019050: "__cdecl _imp_WdiSetResolution" __imp_WdiSetResolution
0x180012570: RDR_COMMIT_EXHAUSTION_DETECTION_DM_GUID
0x180012368: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180012480: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180012260: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180012590: RDR_COMMIT_LIMIT_GUID
0x180019080: wdi_NULL_THUNK_DATA_DLA
0x180004BB1: "__cdecl _imp_load_WdiSetProblemDetectionResult" __imp_load_WdiSetProblemDetectionResult
0x180012348: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000BEA0: RdrpTraceDiagInfo
0x1800134B8: " -o" ??_C@_17LLNMLDHN@?$AA?5?$AA?9?$AAo?$AA?$AA@
0x1800134B0: " -r" ??_C@_17BJKPDMDP@?$AA?5?$AA?9?$AAr?$AA?$AA@
0x180008F08: RdrpLogCLDiagSystemInfo
0x180013490: "\RelPost.exe" ??_C@_1BK@IEBBPLLA@?$AA?2?$AAR?$AAe?$AAl?$AAP?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800010F0: WdiDiagnosticModuleMain
0x180012438: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x1800134C0: WPP_20be5af8a09b3f9978f16bc1603229fb_Traceguids
0x180019078: "__cdecl _imp_WdiGetDiagnosticModuleId" __imp_WdiGetDiagnosticModuleId
0x180004BC3: "__cdecl _imp_load_WdiGetParameterCount" __imp_load_WdiGetParameterCount
0x18000D854: RdrpPopulateProcessInfo
0x18000B3F4: RdrpGetResourceUsage
0x1800124E8: "__cdecl _guard_fids_table" __guard_fids_table
0x1800123F8: msvcrt_NULL_THUNK_DATA
0x180012010: "__cdecl load_config_used" _load_config_used
0x18000E5A0: RdrpRaisePrelaunchEvents
0x1800166E8: ghResMonThread
0x180012B00: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HE@FPFJFHAH@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18000A9D8: RdrpCleanupCommitLimitData
0x1800149DC: "__cdecl _IMPORT_DESCRIPTOR_POWRPROF" __IMPORT_DESCRIPTOR_POWRPROF
0x180010AC4: BuildCommandLine
0x1800122B0: "__cdecl _imp_CreateWaitableTimerExW" __imp_CreateWaitableTimerExW
0x180014810: wdi_NULL_THUNK_DATA_DLB
0x180013380: "System Idle.exe" ??_C@_1CA@ECECGGAN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800023B0: RdrpTriggerLeakDiagnoserLaunch
0x1800102D8: RdrpGetLargestPoolConsumers
0x1800123E8: "__cdecl _imp_qsort" __imp_qsort
0x1800123B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180012338: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180012E20: "SYSTEM\CurrentControlSet\Control" ??_C@_1BBO@IPJAICHM@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180012410: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180012210: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180012C98: RDR_DET_DIAG_FAIL_EVENT
0x180012470: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000EC8C: RdrpCreateBootKey
0x180003CE4: RdrpCheckForRelpost
0x180012CC8: RDR_DET_CLNE_EVENT
0x18000A8BC: WPP_SF__guid_
0x180013370: "ET" ??_C@_15FFMHFNHG@?$AAE?$AAT?$AA?$AA@
0x18000C454: WPP_SF_SDd
0x1800041E4: RdrpLogSuccessInfo
0x180012400: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x18000C8FC: RdrpGetActiveUserSid
0x180012408: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800121A0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800134D8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180012860: "ProcBufferMaxSize" ??_C@_1CE@KCIEEOND@?$AAP?$AAr?$AAo?$AAc?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x180004B10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180012280: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180012250: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x1800123D8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180004BE7: "__cdecl _imp_load_WdiGetParameterData" __imp_load_WdiGetParameterData
0x18000FF24: RdrpStopTimerThread
0x180001240: RdrpDetectorInit
0x180004BD5: "__cdecl _imp_load_WdiSetResolution" __imp_load_WdiSetResolution
0x1800114C4: RdrpGetProcessImageName
0x180012A70: "__cdecl _sz_wdi_dll" __sz_wdi_dll
0x180016A00: ghHeapLeakEventHandles
0x1800123A8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800127D0: RDR_DET_START_SUCCESS_EVENT
0x180016070: gllMaxEventWaitInterval
0x1800124A8: ntdll_NULL_THUNK_DATA
0x18000E0DC: WPP_SF_DDd
0x18000C52C: WPP_SF_ddd
0x18000C408: WPP_SF_Pd
0x180012450: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180002780: RdrpAppendSvchostServiceGroup
0x180012C10: " -m" ??_C@_17BBNFHLPG@?$AA?5?$AA?9?$AAm?$AA?$AA@
0x180012448: "__cdecl _imp_NtQueryEvent" __imp_NtQueryEvent
0x18000C218: WPP_SF_DDDD
0x180016058: "__cdecl _security_cookie" __security_cookie
0x180012188: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180019018: VERSION_NULL_THUNK_DATA_DLA
0x180001E60: RegisterProvider
0x1800122A0: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180012270: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180019030: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x18000FAB8: RdrpRaiseHeapLeakDetEvent
0x1800121E0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180012170: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180012C78: RDR_DET_DIAG_SUCCESS_SYSTEM_EVENT
0x180002BC0: Parse_Cmdline
0x180011324: RdrpGetProcessDetails
0x180012288: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x180012158: "__cdecl _imp_CopySid" __imp_CopySid
0x180012A00: "WinReOfflineScanningResult.dat" ??_C@_1DO@GBPOINHF@?$AAW?$AAi?$AAn?$AAR?$AAe?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x180012148: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180016640: "__cdecl _onexitbegin" __onexitbegin
0x180016770: ghEventLog
0x180016778: gulScenarioCount
0x1800124A0: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x180016CC8: ghExitLowPowerEpochEvent
0x1800123E0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180004E6C: WPP_SF_qd
0x180012228: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800122C0: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x1800149C8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180001880: RdrpIsEventSupported
0x1800121B0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180019048: "__cdecl _imp_WdiGetParameterData" __imp_WdiGetParameterData
0x180003080: RdrpGetProcessCount
0x180011620: RdrpQueryResourceState
0x180004A14: "__cdecl _security_init_cookie" __security_init_cookie
0x180002E00: RdrpGetActiveSessionId
0x180003D80: RdrpCheckWinReTriggers
0x180012460: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x180014858: VERSION_NULL_THUNK_DATA_DLB
0x180019058: "__cdecl _imp_WdiGetParameterCount" __imp_WdiGetParameterCount
0x180014978: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000E24C: LogEvent
0x18000A554: RdrpStopCommitExhaustionMonitor
0x180012CB8: WPP_d57a2504ec4d39a7b2e1eaac4679be51_Traceguids
0x180012BF8: "RunMemDiag" ??_C@_1BG@KEIKIIOJ@?$AAR?$AAu?$AAn?$AAM?$AAe?$AAm?$AAD?$AAi?$AAa?$AAg?$AA?$AA@
0x1800122D0: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x1800123C0: "__cdecl _imp_malloc" __imp_malloc
0x1800121B8: ADVAPI32_NULL_THUNK_DATA
0x180008D90: RdrpLogAllocFailEvent
0x180004B32: "__cdecl _tailMerge_wdi_dll" __tailMerge_wdi_dll
0x180014608: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll
0x180003C50: RdrpCreateCommitResourceNotification
0x180001010: RdrpCmpCommitChargeUsage
0x1800047A0: "__cdecl _report_gsfailure" __report_gsfailure
0x180013190: "SYSTEM\CurrentControlSet\Control" ??_C@_1BCC@FNCFOKPE@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180004CBA: "__cdecl _imp_load_VerQueryValueW" __imp_load_VerQueryValueW
0x180012490: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x180012310: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180001D30: RdrpOpenHeapLeakEventHandles
0x180012130: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x180016650: "__cdecl _native_startup_state" __native_startup_state
0x18000EE0C: RdrpDetectHeapLeak
0x180012A64: "EC" ??_C@_15JIAJDCFA@?$AAE?$AAC?$AA?$AA@
0x180016A18: ghTimerThread
0x180012120: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180012248: "__cdecl _imp_FindVolumeClose" __imp_FindVolumeClose
0x180017318: m_bOfflineScanning
0x180001060: WdiGetDiagnosticModuleInterfaceVersion
0x180012788: "CommitCeiling" ??_C@_1BM@LLMPLPDI@?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAC?$AAe?$AAi?$AAl?$AAi?$AAn?$AAg?$AA?$AA@
0x180012900: gMmLowCommitConditionEventName
0x180019060: "__cdecl _imp_WdiSetProblemDetectionResult" __imp_WdiSetProblemDetectionResult
0x180012890: "Software\Microsoft\RADAR\CommitE" ??_C@_1GG@OHPHAAG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAA?$AAD?$AAA?$AAR?$AA?2?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AAE@
0x1800110E4: RdrpCheckTriggerAndLaunchProcess
0x180009A30: StringCchLengthW
0x18000C4E4: WPP_SF__guid_D
0x180012B80: " -s" ??_C@_17KBBDFLFK@?$AA?5?$AA?9?$AAs?$AA?$AA@
0x180012708: "MaxReports" ??_C@_1BG@LPGFEJAF@?$AAM?$AAa?$AAx?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAs?$AA?$AA@
0x18000A844: WPP_SF_SD
0x18000A844: WPP_SF_Sd
0x1800123B8: "__cdecl _imp_free" __imp_free
0x180016D04: m_bRecovery
0x1800171C0: gSysPerfInfo
0x180004980: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180012168: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180012670: "Software\Microsoft\RADAR\HeapLea" ??_C@_1JG@CPNGPEHE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAA?$AAD?$AAA?$AAR?$AA?2?$AAH?$AAe?$AAa?$AAp?$AAL?$AAe?$AAa@
0x180012C28: "%c%c%c%c" ??_C@_1BC@KODINLPJ@?$AA?$CF?$AAc?$AA?$CF?$AAc?$AA?$CF?$AAc?$AA?$CF?$AAc?$AA?$AA@
0x1800122E8: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x1800107C0: RdrpQueryPoolTagInformation
0x180010144: WPP_SF_S
0x180004F49: memset
0x1800149F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800101A4: WPP_SF_SDPI

[JEB Decompiler by PNF Software]