Generated by JEB on 2019/08/01
PE: C:\Windows\System32\wevtutil.exe Base=0x140000000 SHA-256=CCFFE548D686EB10FD825171D9C6D1C20AA59E639130AC8A9098776369E77B99
PDB: wevtutil.pdb GUID={D398679B-D9C5-253E-78FB17872B4102B9} Age=1
2185 located named symbols:
0x14002FB38: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x140024A40: "public: virtual void * __ptr64 __cdecl PublisherConfigWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPublisherConfigWriter@@UEAAPEAXI@Z
0x140028934: "public: void __cdecl RegistryKeyEnumerator::Reset(struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ?Reset@RegistryKeyEnumerator@@QEAAXPEAUHKEY__@@PEB_W@Z
0x140030108: "help" ??_C@_19FCEHBCGP@?$AAh?$AAe?$AAl?$AAp?$AA?$AA@
0x14002F9D0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x14003A980: "__cdecl CT??_R0?AUIException@wmi@@@8??0IException@wmi@@QEAA@AEBU01@@Z8" _CT??_R0?AUIException@wmi@@@8??0IException@wmi@@QEAA@AEBU01@@Z8
0x140032920: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14002F538: "__cdecl _imp_LockResource" __imp_LockResource
0x14002F9A8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140030D78: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x14002C454: "__cdecl _tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_2_dll" __tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_2_dll
0x1400303A0: ">" ??_C@_19DDIBHNML@?$AA?$CG?$AAg?$AAt?$AA?$DL?$AA?$AA@
0x1400310C0: "version" ??_C@_1BA@KPDNCIMM@?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1400321A8: WPP_91a3f38b5bb83d530b9c8999bbae949d_Traceguids
0x14002B3E0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140030748: WPP_16252ea245cd305a2304b76332dfdb19_Traceguids
0x140002A54: "public: __cdecl std::unique_ptr<class CommandArguments,struct std::default_delete<class CommandArguments> >::~unique_ptr<class CommandArguments,struct std::default_delete<class CommandArguments> >(void) __ptr64" ??1?$unique_ptr@VCommandArguments@@U?$default_delete@VCommandArguments@@@std@@@std@@QEAA@XZ
0x14002F4C0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140030588: "r" ??_C@_13BPINEIPE@?$AAr?$AA?$AA@
0x14002FA70: "__cdecl _imp_GetSecurityDescriptorOwner" __imp_GetSecurityDescriptorOwner
0x1400303B0: "<" ??_C@_19GOOLGBJN@?$AA?$CG?$AAl?$AAt?$AA?$DL?$AA?$AA@
0x14002F9E0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x140030248: "epl" ??_C@_17HIAEMLDD@?$AAe?$AAp?$AAl?$AA?$AA@
0x14002B960: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x14002F5A0: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x140030EC8: "ns:publishing/ns:fileMax" ??_C@_1DC@MEEDBDPB@?$AAn?$AAs?$AA?3?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAf?$AAi?$AAl?$AAe?$AAM?$AAa?$AAx?$AA?$AA@
0x1400255C0: "protected: bool __cdecl ConfigBase::DeleteRegValue(wchar_t const * __ptr64) __ptr64" ?DeleteRegValue@ConfigBase@@IEAA_NPEB_W@Z
0x14003EDF8: "private: static class utl::mutex PublisherConfigReader::s_pubNameCachesLock" ?s_pubNameCachesLock@PublisherConfigReader@@0Vmutex@utl@@A
0x140030114: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x14002A160: "long __cdecl RegReadByteArrayValueWithFallbackNoThrow(struct HKEY__ * __ptr64,wchar_t const * __ptr64,struct HKEY__ * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,unsigned long & __ptr64,class std::unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> > & __ptr64)" ?RegReadByteArrayValueWithFallbackNoThrow@@YAJPEAUHKEY__@@PEB_W011AEAKAEAV?$unique_ptr@$$BY0A@EU?$default_delete@$$BY0A@E@std@@@std@@@Z
0x140031430: "batchsize" ??_C@_1BE@LMFHHPFF@?$AAb?$AAa?$AAt?$AAc?$AAh?$AAs?$AAi?$AAz?$AAe?$AA?$AA@
0x14002F408: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x14002FA78: "__cdecl _imp_AddAce" __imp_AddAce
0x14002A900: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x14002F6F0: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x14003B3D0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140041068: "__cdecl _imp_EvtNext" __imp_EvtNext
0x140032CA8: "onecore\admin\wmi\events\config\" ??_C@_0DK@COFJHOCB@onecore?2admin?2wmi?2events?2config?2@
0x140032C48: "Suppressors" ??_C@_1BI@NDCLNBIE@?$AAS?$AAu?$AAp?$AAp?$AAr?$AAe?$AAs?$AAs?$AAo?$AAr?$AAs?$AA?$AA@
0x14003B218: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140031464: "bm" ??_C@_15MCENNPND@?$AAb?$AAm?$AA?$AA@
0x14002BEC2: "__cdecl o___p___wargv" _o___p___wargv
0x140002A8C: "public: __cdecl std::unique_ptr<class CommandBase,struct std::default_delete<class CommandBase> >::~unique_ptr<class CommandBase,struct std::default_delete<class CommandBase> >(void) __ptr64" ??1?$unique_ptr@VCommandBase@@U?$default_delete@VCommandBase@@@std@@@std@@QEAA@XZ
0x14002B948: "__cdecl get_startup_commit_mode" _get_startup_commit_mode
0x14003B0EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x1400410F8: "__cdecl _imp_EvtSeek" __imp_EvtSeek
0x140028CE4: "bool __cdecl DirectoryExists(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ?DirectoryExists@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14001F6A4: "public: bool __cdecl PublisherConfigEnumerator::Seek(struct _GUID const & __ptr64) __ptr64" ?Seek@PublisherConfigEnumerator@@QEAA_NAEBU_GUID@@@Z
0x1400330E8: "EventLog-" ??_C@_1BE@MALKBBDN@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?9?$AA?$AA@
0x140031ED8: "wevtapi.dll" ??_C@_1BI@IJHAFJEP@?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14001BDEC: "public: __cdecl std::map<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,struct _EVT_VARIANT,struct std::less<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID>,class std::allocator<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT> > >::~map<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,struct _EVT_VARIANT,struct std::less<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID>,class std::allocator<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT> > >(void) __ptr64" ??1?$map@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@U?$less@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@std@@V?$allocator@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@@4@@std@@QEAA@XZ
0x1400171BC: "private: void __cdecl ManifestProcessor::ValidateResourceFile(struct _GUID const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ?ValidateResourceFile@ManifestProcessor@@AEAAXAEBU_GUID@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002F7B0: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x14003EB04: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x14003E518: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14002F758: "__cdecl _imp_InitOnceBeginInitialize" __imp_InitOnceBeginInitialize
0x140030BE0: "level" ??_C@_1M@NNEKJJGI@?$AAl?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140013D80: "public: __cdecl wmi::AutoRef<class PublisherConfigReader>::~AutoRef<class PublisherConfigReader>(void) __ptr64" ??1?$AutoRef@VPublisherConfigReader@@@wmi@@QEAA@XZ
0x14002C284: IsEvtOpenPublisherMetadataPresent
0x1400129D0: "public: virtual void __cdecl InstallManifestCommand::Execute(void) __ptr64" ?Execute@InstallManifestCommand@@UEAAXXZ
0x14000427C: "private: static void __cdecl std::vector<struct _GUID,class std::allocator<struct _GUID> >::_Xlength(void)" ?_Xlength@?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@CAXXZ
0x14002BF16: "__cdecl o__configthreadlocale" _o__configthreadlocale
0x1400314E0: "reversedirection" ??_C@_1CC@PNCCODLJ@?$AAr?$AAe?$AAv?$AAe?$AAr?$AAs?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140030900: "__cdecl GUID_2933bf86_7b36_11d2_b20e_00c04f983e60" _GUID_2933bf86_7b36_11d2_b20e_00c04f983e60
0x140035008: "const type_info::`RTTI Complete Object Locator'" ??_R4type_info@@6B@
0x14002F6D0: "__cdecl _imp_GetRegistryValueWithFallbackW" __imp_GetRegistryValueWithFallbackW
0x1400331A8: "Parameters" ??_C@_1BG@PGIGMDPA@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x140003DAC: "public: __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z
0x14002B9C0: "__cdecl _scrt_get_dyn_tls_dtor_callback" __scrt_get_dyn_tls_dtor_callback
0x1400320C8: WPP_66a92c4422a631ba00642ed92701e555_Traceguids
0x140013D80: "public: __cdecl wmi::AutoRef<class ChannelConfigWriter>::~AutoRef<class ChannelConfigWriter>(void) __ptr64" ??1?$AutoRef@VChannelConfigWriter@@@wmi@@QEAA@XZ
0x140011398: "public: void __cdecl std::allocator<void * __ptr64>::deallocate(void * __ptr64 * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@PEAX@std@@QEAAXQEAPEAX_K@Z
0x140031668: " Source: %s
" ??_C@_1BO@FNPCEIFD@?$AA?5?$AA?5?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x1400314B8: "rd" ??_C@_15LMJDJCMC@?$AAr?$AAd?$AA?$AA@
0x140017B8C: "public: __cdecl std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >::~set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >(void) __ptr64" ??1?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@QEAA@XZ
0x140030BA8: "maxSize" ??_C@_1BA@CLBNENGM@?$AAm?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x14002F610: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140031B00: "O:BAG:SYD:(A;;0xf0007;;;SY)(A;;0" ??_C@_1BDC@HOBJBMOF@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAf?$AA0?$AA0?$AA0?$AA7?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0@
0x14003AA98: "__stdcall CT??_R0?AVChannelConfigException@@" _CT??_R0?AVChannelConfigException@@@856
0x140011588: ??$_Buynode@AEBUpiecewise_construct_t@std@@V?$tuple@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$tuple@$$V@2@@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@1@AEBUpiecewise_construct_t@1@$$QEAV?$tuple@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@1@$$QEAV?$tuple@$$V@1@@Z
0x14002C63B: "__cdecl _imp_load_EvtNext" __imp_load_EvtNext
0x140030FF8: WPP_523609cd166c3c6edd28156b4c5fdebc_Traceguids
0x14002BE92: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14002FA90: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x140028EA0: "public: virtual void __cdecl Buffer::Read(void * __ptr64,unsigned long) __ptr64" ?Read@Buffer@@UEAAXPEAXK@Z
0x14002BE6E: "__cdecl c_exit" _c_exit
0x14002FDB8: CLSID_DOMDocument60
0x1400083A0: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator=(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z
0x14002C509: "__cdecl _imp_load_EvtOpenChannelConfig" __imp_load_EvtOpenChannelConfig
0x140032CF0: "EventLog-Security" ??_C@_1CE@CIMHDFAF@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?9?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x140020698: "public: struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@PEAX@2@XZ
0x140002B94: "public: __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::~vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >(void) __ptr64" ??1?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@QEAA@XZ
0x1400019B0: WppControlCallback
0x140031EC8: "none" ??_C@_19OEJGHIEG@?$AAn?$AAo?$AAn?$AAe?$AA?$AA@
0x14002C8B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140033260: "onecore\admin\wmi\events\util\bu" ??_C@_0CJ@JCNLGPLH@onecore?2admin?2wmi?2events?2util?2bu@
0x140019CA0: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@2@XZ
0x14002C605: "__cdecl _imp_load_EvtCreateBookmark" __imp_load_EvtCreateBookmark
0x140002ACC: "public: __cdecl std::vector<unsigned char,class std::allocator<unsigned char> >::~vector<unsigned char,class std::allocator<unsigned char> >(void) __ptr64" ??1?$vector@EV?$allocator@E@std@@@std@@QEAA@XZ
0x14002F8A0: "__cdecl _imp__o_wcstoul" __imp__o_wcstoul
0x14002F4B8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140041010: "__cdecl _imp_EvtCreateRenderContext" __imp_EvtCreateRenderContext
0x14003AA40: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x140041070: "__cdecl _imp_EvtSetChannelConfigProperty" __imp_EvtSetChannelConfigProperty
0x140032F70: "SYSTEM\CurrentControlSet\Service" ??_C@_1FG@HBJHEFK@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14002C36F: "__cdecl _tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_3_dll" __tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_3_dll
0x14001AFD4: "public: __cdecl wmi::AutoRegKey::~AutoRegKey(void) __ptr64" ??1AutoRegKey@wmi@@QEAA@XZ
0x140031594: "
" ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x14001FF64: "public: bool __cdecl PublisherConfigReader::GetChannelReferences(class std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> > & __ptr64)const __ptr64" ?GetChannelReferences@PublisherConfigReader@@QEBA_NAEAV?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@@Z
0x14003B204: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x14001CD74: "public: bool __cdecl ChannelConfigReader::GetKeywords(unsigned __int64 & __ptr64)const __ptr64" ?GetKeywords@ChannelConfigReader@@QEBA_NAEA_K@Z
0x14002C034: "__cdecl vsnwprintf" _vsnwprintf
0x14002BF70: "__cdecl o__purecall" _o__purecall
0x140035080: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x14002BFB8: exit
0x14002F180: "const MsxmlDomElement::`vftable'" ??_7MsxmlDomElement@@6B@
0x1400047B0: "unsigned long __cdecl RenderEvent(void * __ptr64,void * __ptr64,unsigned long,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64,unsigned long & __ptr64)" ?RenderEvent@@YAKPEAX0KAEAV?$vector@EV?$allocator@E@std@@@std@@AEAK@Z
0x14002F908: "__cdecl _imp__o___acrt_iob_func" __imp__o___acrt_iob_func
0x14001BCB0: "public: virtual void * __ptr64 __cdecl ChannelConfigReader::`vector deleting destructor'(unsigned int) __ptr64" ??_EChannelConfigReader@@UEAAPEAXI@Z
0x1400305A4: "p" ??_C@_13LFIEIAHP@?$AAp?$AA?$AA@
0x14003EC60: "struct _REG_CONFIG_CACHE g_ProvidersRegCache" ?g_ProvidersRegCache@@3U_REG_CONFIG_CACHE@@A
0x140027618: "public: void __cdecl RegistryPaths::GetWinevtPublishersRegPath(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetWinevtPublishersRegPath@RegistryPaths@@QEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x1400303E0: "'" ??_C@_1O@PNALKCHB@?$AA?$CG?$AAa?$AAp?$AAo?$AAs?$AA?$DL?$AA?$AA@
0x140022B50: "public: static void __cdecl SessionConfig::DeleteProvider(struct _GUID)" ?DeleteProvider@SessionConfig@@SAXU_GUID@@@Z
0x140031200: "tasks" ??_C@_1M@KECFIKMN@?$AAt?$AAa?$AAs?$AAk?$AAs?$AA?$AA@
0x1400314C0: "count" ??_C@_1M@MJBJBOIA@?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140031800: "resourceFilePath" ??_C@_1CC@PPPCKHME@?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140031068: " task" ??_C@_1O@HJGDKPLC@?$AA?5?$AA?5?$AAt?$AAa?$AAs?$AAk?$AA?$AA@
0x14002F800: "__cdecl _imp__seh_filter_exe" __imp__seh_filter_exe
0x14002FBE0: "__cdecl _xp_a" __xp_a
0x140031E90: "qpc" ??_C@_17NIJGOELE@?$AAq?$AAp?$AAc?$AA?$AA@
0x14001A32C: "unsigned int __cdecl tlx::hex_to_u8<wchar_t>(wchar_t const * __ptr64)" ??$hex_to_u8@_W@tlx@@YAIPEB_W@Z
0x140007BF0: "public: unsigned long __cdecl CommandArguments::GetOptionEnum(wchar_t const * __ptr64,wchar_t const * __ptr64,struct ENUM_NAMEVALUE_PAIR * __ptr64,unsigned long,bool & __ptr64)const __ptr64" ?GetOptionEnum@CommandArguments@@QEBAKPEB_W0PEAUENUM_NAMEVALUE_PAIR@@KAEA_N@Z
0x14000BCA0: "private: void __cdecl SetChannelCommand::SetProperties(void * __ptr64,struct IXMLDOMElement * __ptr64) __ptr64" ?SetProperties@SetChannelCommand@@AEAAXPEAXPEAUIXMLDOMElement@@@Z
0x14000A80C: "private: void __cdecl SetChannelCommand::OpenConfig(wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64 * __ptr64) __ptr64" ?OpenConfig@SetChannelCommand@@AEAAXPEB_WPEAPEAUIXMLDOMElement@@@Z
0x1400302B4: "um" ??_C@_15NMJOONPA@?$AAu?$AAm?$AA?$AA@
0x14002F8A0: "__cdecl _imp_wcstoul" __imp_wcstoul
0x140029F18: "public: void __cdecl RegistryPaths::GetPersistedAutoLoggerRegPath(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetPersistedAutoLoggerRegPath@RegistryPaths@@QEBAXPEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x1400305E0: "Negotiate" ??_C@_1BE@ELFOBFGL@?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAe?$AA?$AA@
0x140030288: "im" ??_C@_15KIIKCPBA@?$AAi?$AAm?$AA?$AA@
0x1400410C0: "__cdecl _imp_EvtGetExtendedStatus" __imp_EvtGetExtendedStatus
0x14002BBF0: "__cdecl RTC_Initialize" _RTC_Initialize
0x1400036A4: "public: void __cdecl XmlPrinter::PrintNameValue(wchar_t const * __ptr64,wchar_t const * __ptr64) __ptr64" ?PrintNameValue@XmlPrinter@@QEAAXPEB_W0@Z
0x140030368: "" ??_C@_00CNPNBAHC@?$AA@
0x14002F930: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x14002FA20: "__cdecl _imp_MapGenericMask" __imp_MapGenericMask
0x14002F8E0: "__cdecl _imp___stdio_common_vsnwprintf_s" __imp___stdio_common_vsnwprintf_s
0x140028A44: "public: bool __cdecl RegistryKeyEnumerator::DeleteCurrent(void) __ptr64" ?DeleteCurrent@RegistryKeyEnumerator@@QEAA_NXZ
0x14002AE88: "public: void __cdecl ResourceHolder::Close(void) __ptr64" ?Close@ResourceHolder@@QEAAXXZ
0x140011FB0: "public: virtual void * __ptr64 __cdecl MsxmlDomElement::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMsxmlDomElement@@UEAAPEAXI@Z
0x140030574: "u" ??_C@_13ICFKHAEN@?$AAu?$AA?$AA@
0x14002FE00: "ext-ms-win-wevtapi-eventlog-l1-1" ??_C@_1EG@MILMLJKH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x140002FA0: "public: __cdecl wmi::GenericException::GenericException(unsigned long) __ptr64" ??0GenericException@wmi@@QEAA@K@Z
0x140025808: "public: __cdecl QuerySnapshot::QuerySnapshot(struct HKEY__ * __ptr64) __ptr64" ??0QuerySnapshot@@QEAA@PEAUHKEY__@@@Z
0x14002F890: "__cdecl _imp__o_towupper" __imp__o_towupper
0x140033480: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x14002F658: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x14002F560: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x14003E3B8: "class CLibraryCache g_LibraryCache" ?g_LibraryCache@@3VCLibraryCache@@A
0x140031140: "resourceFileName" ??_C@_1CC@BACGJNBB@?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14002F490: "__cdecl _imp_GetFileType" __imp_GetFileType
0x14002F880: "__cdecl _imp_terminate" __imp_terminate
0x1400320D8: "DefaultLogFolder" ??_C@_1CC@HBKOBAHH@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAL?$AAo?$AAg?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x140024498: "public: void __cdecl std::allocator<struct _GUID>::deallocate(struct _GUID * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U_GUID@@@std@@QEAAXQEAU_GUID@@_K@Z
0x1400355C8: "__cdecl _rtc_taa" __rtc_taa
0x140031100: "provider" ??_C@_1BC@PICIFKEO@?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x14003B1DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14002B948: "__cdecl get_startup_thread_locale_mode" _get_startup_thread_locale_mode
0x140032970: "FlushTimer" ??_C@_1BG@LHINJEKI@?$AAF?$AAl?$AAu?$AAs?$AAh?$AAT?$AAi?$AAm?$AAe?$AAr?$AA?$AA@
0x14002FAF8: bcrypt_NULL_THUNK_DATA
0x14003B100: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x1400319B8: "instrumentation" ??_C@_1CA@HFHCCPCC@?$AAi?$AAn?$AAs?$AAt?$AAr?$AAu?$AAm?$AAe?$AAn?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140032490: "onecore\admin\wmi\events\config\" ??_C@_0DF@DOELIEJO@onecore?2admin?2wmi?2events?2config?2@
0x140030250: "export-log" ??_C@_1BG@DMKNHJGG@?$AAe?$AAx?$AAp?$AAo?$AAr?$AAt?$AA?9?$AAl?$AAo?$AAg?$AA?$AA@
0x140033290: WPP_bfcfc37356d230432f61ba8a69b2d320_Traceguids
0x140001550: "public: virtual wchar_t const * __ptr64 __cdecl wmi::GenericException::GetMessageParam(void)const __ptr64" ?GetMessageParam@GenericException@wmi@@UEBAPEB_WXZ
0x14002F958: "__cdecl _imp__initterm_e" __imp__initterm_e
0x140032C20: WPP_8e57d9ac6c3a3a978af3a4efbac4b4de_Traceguids
0x140023C40: "private: static void __cdecl SessionConfig::CalculateMatchKeywords(unsigned __int64 & __ptr64,unsigned __int64 & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,class ChannelConfigSnapshot const & __ptr64,unsigned long,bool)" ?CalculateMatchKeywords@SessionConfig@@CAXAEA_K0AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVChannelConfigSnapshot@@K_N@Z
0x140030838: "SelectionLanguage" ??_C@_1CE@CPDIBCNA@?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
0x14002F510: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x14002C4D3: "__cdecl _imp_load_EvtGetExtendedStatus" __imp_load_EvtGetExtendedStatus
0x14002FA60: "__cdecl _imp_GetAce" __imp_GetAce
0x14002F978: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x140001520: "public: virtual int __cdecl wmi::GenericException::GetLineNumber(void)const __ptr64" ?GetLineNumber@GenericException@wmi@@UEBAHXZ
0x140032DC0: "onecore\admin\wmi\events\util\ti" ??_C@_0CL@MMMJGACN@onecore?2admin?2wmi?2events?2util?2ti@
0x14002BE44: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x140011304: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::append(wchar_t const * __ptr64 const) __ptr64" ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@QEB_W@Z
0x140032018: "importChannel" ??_C@_1BM@CNFPKMEA@?$AAi?$AAm?$AAp?$AAo?$AAr?$AAt?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
0x14002F910: "__cdecl _imp_wcschr" __imp_wcschr
0x1400013E4: "public: __cdecl wmi::IException::IException(struct wmi::IException const & __ptr64) __ptr64" ??0IException@wmi@@QEAA@AEBU01@@Z
0x140032260: "MaxSizeUpper" ??_C@_1BK@CGBJDGGJ@?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AAU?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x1400324C8: WPP_b78aff67dd8e3b0ab2c35847d9bbd102_Traceguids
0x14002B974: "__cdecl _vcrt_initialize" __vcrt_initialize
0x140014180: "public: virtual class wmi::AutoRef<class AbstractDomElementList> __cdecl MsxmlDomElement::GetSubElements(void) __ptr64" ?GetSubElements@MsxmlDomElement@@UEAA?AV?$AutoRef@VAbstractDomElementList@@@wmi@@XZ
0x14002C64D: "__cdecl _imp_load_EvtUpdateBookmark" __imp_load_EvtUpdateBookmark
0x14002F7D0: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x140020524: "public: virtual __cdecl PublisherConfigReader::~PublisherConfigReader(void) __ptr64" ??1PublisherConfigReader@@UEAA@XZ
0x140030620: "vector<T> too long" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x14002BF88: "__cdecl o__seh_filter_exe" _o__seh_filter_exe
0x14002F4E8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140001134: "__cdecl TlgWrite" _TlgWrite
0x140002B2C: "public: __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::~vector<wchar_t,class std::allocator<wchar_t> >(void) __ptr64" ??1?$vector@_WV?$allocator@_W@std@@@std@@QEAA@XZ
0x14002FB58: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000E6A0: "public: virtual void __cdecl GetLogInfoCommand::Execute(void) __ptr64" ?Execute@GetLogInfoCommand@@UEAAXXZ
0x1400303D0: "
" ??_C@_1M@ELNHNDBH@?$AA?$CG?$AA?$CD?$AAx?$AAA?$AA?$DL?$AA?$AA@
0x140032350: "ClockType" ??_C@_1BE@ILKEBGME@?$AAC?$AAl?$AAo?$AAc?$AAk?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140019B70: "public: void __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::reserve(unsigned __int64) __ptr64" ?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAX_K@Z
0x1400410A8: "__cdecl _imp_EvtNextChannelPath" __imp_EvtNextChannelPath
0x140024A40: "public: virtual void * __ptr64 __cdecl PublisherConfigWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_EPublisherConfigWriter@@UEAAPEAXI@Z
0x14002C09C: "__cdecl snwprintf_s" _snwprintf_s
0x14002F740: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x140007134: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x1400309B8: "Admin" ??_C@_1M@EIAMANMN@?$AAA?$AAd?$AAm?$AAi?$AAn?$AA?$AA@
0x14002F5A8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140032340: "Latency" ??_C@_1BA@MGHOKKBD@?$AAL?$AAa?$AAt?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x14002F838: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140013F40: "public: virtual class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > __cdecl MsxmlDomElement::GetXmlText(void) __ptr64" ?GetXmlText@MsxmlDomElement@@UEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
0x14002C15C: "__cdecl _tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_0_dll" __tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_0_dll
0x1400355B8: "__cdecl _rtc_iaa" __rtc_iaa
0x14002C230: IsEvtOpenChannelConfigPresent
0x140030FD0: "@access" ??_C@_1BA@CFMDPDEG@?$AA?$EA?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x14000F080: "public: virtual void __cdecl ArchiveLogCommand::Execute(void) __ptr64" ?Execute@ArchiveLogCommand@@UEAAXXZ
0x14000F990: "public: virtual void __cdecl QueryLogCommand::Execute(void) __ptr64" ?Execute@QueryLogCommand@@UEAAXXZ
0x140028E30: "private: static void __cdecl UserBuffer::ThrowUnexpectedEOFException(void)" ?ThrowUnexpectedEOFException@UserBuffer@@CAXXZ
0x140030A40: "channel" ??_C@_1BA@CMDIGMLP@?$AAc?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
0x140031258: WPP_decd58ac19563a6dd2028b229a3fc760_Traceguids
0x14003B128: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x140026E5C: "void __cdecl LoadMessageWithArgs(class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64,unsigned int,...)" ?LoadMessageWithArgs@@YAXAEAV?$vector@_WV?$allocator@_W@std@@@std@@IZZ
0x14002FA08: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x140041110: "__cdecl _imp_EvtUpdateBookmark" __imp_EvtUpdateBookmark
0x14000A130: "public: virtual void __cdecl GetChannelCommand::Execute(void) __ptr64" ?Execute@GetChannelCommand@@UEAAXXZ
0x1400410E8: "__cdecl _imp_EvtGetEventMetadataProperty" __imp_EvtGetEventMetadataProperty
0x14002F8D8: "__cdecl _imp__o___stdio_common_vswprintf" __imp__o___stdio_common_vswprintf
0x140008C80: "public: virtual void __cdecl EnumChannelCommand::Init(void) __ptr64" ?Init@EnumChannelCommand@@UEAAXXZ
0x14002FA30: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x140032310: "MinBuffers" ??_C@_1BG@DNODMFCB@?$AAM?$AAi?$AAn?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x14002FB60: "__cdecl _xc_a" __xc_a
0x1400310A0: "event" ??_C@_1M@IBCECAGJ@?$AAe?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x140001090: TraceLoggingRegister
0x14002F528: "__cdecl _imp_FreeResource" __imp_FreeResource
0x14002F600: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x14000EDD0: "public: virtual void __cdecl ExportLogCommand::Execute(void) __ptr64" ?Execute@ExportLogCommand@@UEAAXXZ
0x14002F0D0: "const ArchiveLogCommand::`vftable'" ??_7ArchiveLogCommand@@6B@
0x1400333E8: WPP_82eba4bfbb9034cbaf26733d5973af7f_Traceguids
0x14003ABA8: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLN
0x140032D88: "LogFilePath" ??_C@_1BI@BMIEGOLH@?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140005888: "void __cdecl ReadPasswordFromConsole(wchar_t const * __ptr64,wchar_t const * __ptr64,class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64)" ?ReadPasswordFromConsole@@YAXPEB_W0AEAV?$vector@_WV?$allocator@_W@std@@@std@@@Z
0x140031248: "mask" ??_C@_19EFLMLHAB@?$AAm?$AAa?$AAs?$AAk?$AA?$AA@
0x14003EE30: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUcnoUfxigUlyquivUznwGEUkivxlnkOlyq@wevtxml" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUcnoUfxigUlyquivUznwGEUkivxlnkOlyq@wevtxml
0x14002F5F8: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14003B1A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x1400217F0: "public: virtual __cdecl ChannelConfigSnapshot::~ChannelConfigSnapshot(void) __ptr64" ??1ChannelConfigSnapshot@@UEAA@XZ
0x140019A90: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > __cdecl std::_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::find(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)const __ptr64" ?find@?$_Tree@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEBA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
0x1400257E0: "public: __cdecl QueryNode::~QueryNode(void) __ptr64" ??1QueryNode@@QEAA@XZ
0x1400034DC: "public: void __cdecl XmlPrinter::PrintEndElement(void) __ptr64" ?PrintEndElement@XmlPrinter@@QEAAXXZ
0x140011940: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Insert_at<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@1@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@1@1@Z
0x140032440: "onecore\admin\wmi\events\config\" ??_C@_0DO@EIEEABOE@onecore?2admin?2wmi?2events?2config?2@
0x14002FAE8: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x140030128: "%s
" ??_C@_19EEPNDKNE@?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x140030CB0: "LFN" ??_C@_17EGCFDBEL@?$AAL?$AAF?$AAN?$AA?$AA@
0x1400322D0: "CustomSD" ??_C@_1BC@CJPMIAAO@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAS?$AAD?$AA?$AA@
0x1400267B4: "void __cdecl ExpandEnvString(wchar_t const * __ptr64,class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64)" ?ExpandEnvString@@YAXPEB_WAEAV?$vector@_WV?$allocator@_W@std@@@std@@@Z
0x14003E530: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x1400254D4: "protected: void __cdecl ConfigBase::WriteRegDWORDValue(wchar_t const * __ptr64,unsigned long)const __ptr64" ?WriteRegDWORDValue@ConfigBase@@IEBAXPEB_WK@Z
0x140030268: "al" ??_C@_15PMGFMKBI@?$AAa?$AAl?$AA?$AA@
0x140032170: ".etl" ??_C@_19DEKJANFJ@?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x1400264AC: "public: static void __cdecl ChannelConfigSnapshot::EtwSessionForChannel::GetSessionNameAndGuid(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,struct _GUID & __ptr64)" ?GetSessionNameAndGuid@EtwSessionForChannel@ChannelConfigSnapshot@@SAXPEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAU_GUID@@@Z
0x1400319A0: "assembly" ??_C@_1BC@JPPKMMFP@?$AAa?$AAs?$AAs?$AAe?$AAm?$AAb?$AAl?$AAy?$AA?$AA@
0x140003394: "public: void __cdecl XmlPrinter::PrintStartElement(wchar_t const * __ptr64) __ptr64" ?PrintStartElement@XmlPrinter@@QEAAXPEB_W@Z
0x140031650: " Log Name" ??_C@_1BG@BOLBNJC@?$AA?5?$AA?5?$AAL?$AAo?$AAg?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140030FB8: "ControlGuid" ??_C@_1BI@OEDFAGPF@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x140005D84: "void __cdecl ReadTextFile(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?ReadTextFile@@YAXPEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002F4F8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14002BF22: "__cdecl configure_wide_argv" _configure_wide_argv
0x14002BEFE: "__cdecl _stdio_common_vswscanf" __stdio_common_vswscanf
0x14002A0E4: "long __cdecl RegReadQWORDValueWithFallbackNoThrow(struct HKEY__ * __ptr64,wchar_t const * __ptr64,struct HKEY__ * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,unsigned __int64 & __ptr64)" ?RegReadQWORDValueWithFallbackNoThrow@@YAJPEAUHKEY__@@PEB_W011AEA_K@Z
0x14001BD74: "public: virtual __cdecl ConfigBase::~ConfigBase(void) __ptr64" ??1ConfigBase@@UEAA@XZ
0x14002FA48: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x140030C58: "Retention" ??_C@_1BE@DMPMLCHL@?$AAR?$AAe?$AAt?$AAe?$AAn?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002838C: "void __cdecl RegWriteDWORDValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,unsigned long)" ?RegWriteDWORDValue@@YAXPEAUHKEY__@@PEB_WK@Z
0x140004A10: "unsigned long __cdecl GetExtendedStatus(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?GetExtendedStatus@@YAKAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x1400096F4: "class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 __cdecl std::_Insertion_sort_unchecked<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 const,struct std::less<void>)" ??$_Insertion_sort_unchecked@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@X@2@@std@@YAPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEAV10@QEAV10@U?$less@X@0@@Z
0x14002F900: "__cdecl _imp__o___p___argc" __imp__o___p___argc
0x14001D7D8: "public: __cdecl ChannelConfigWriteData::~ChannelConfigWriteData(void) __ptr64" ??1ChannelConfigWriteData@@QEAA@XZ
0x140024418: "public: __cdecl std::unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> >::~unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> >(void) __ptr64" ??1?$unique_ptr@$$BY0A@EU?$default_delete@$$BY0A@E@std@@@std@@QEAA@XZ
0x1400270E8: "bool __cdecl GetErrorMessageForException(class wmi::Exception const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?GetErrorMessageForException@@YA_NAEBVException@wmi@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002FB20: "__cdecl _imp_RtlGetPersistedStateLocation" __imp_RtlGetPersistedStateLocation
0x14003E528: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x140030C98: "LogFileName" ??_C@_1BI@PDFAFEGC@?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14002F870: "__cdecl _imp__o_malloc" __imp__o_malloc
0x140030A70: "type" ??_C@_19FHBCDCCA@?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x140031E78: "SystemTime" ??_C@_1BG@GLJKIABE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x14003A960: "__cdecl CTA3?AVGenericException@wmi@@" _CTA3?AVGenericException@wmi@@
0x14003EDE8: "private: static class std::map<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > PublisherConfigReader::s_migratedProviderToChannelCache" ?s_migratedProviderToChannelCache@PublisherConfigReader@@0V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@A
0x14003E4E8: "__vectorcall ??_R0?AVexception@std@" ??_R0?AVexception@std@@@8
0x14001BC88: "public: __cdecl tlx::_LazyImpl<class RegistryDefaultLogFolder,class tlx::lazy_construct<class RegistryDefaultLogFolder>,class tlx::static_lazy<class RegistryDefaultLogFolder,0,class tlx::lazy_construct<class RegistryDefaultLogFolder> > >::_Initializer::~_Initializer(void) __ptr64" ??1_Initializer@?$_LazyImpl@VRegistryDefaultLogFolder@@V?$lazy_construct@VRegistryDefaultLogFolder@@@tlx@@V?$static_lazy@VRegistryDefaultLogFolder@@$0A@V?$lazy_construct@VRegistryDefaultLogFolder@@@tlx@@@3@@tlx@@QEAA@XZ
0x140033350: WPP_503023926df33a3cf3b96c5617c35713_Traceguids
0x140035030: "__vectorcall ??_R3type_info" ??_R3type_info@@8
0x140035048: "__vectorcall ??_R2type_info" ??_R2type_info@@8
0x14002F5E0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140002F90: "public: __cdecl CommandOption::~CommandOption(void) __ptr64" ??1CommandOption@@QEAA@XZ
0x14002C88D: memcpy
0x14001CF48: "public: __cdecl ChannelLogConfigData::~ChannelLogConfigData(void) __ptr64" ??1ChannelLogConfigData@@QEAA@XZ
0x140030510: "%*s</%s>
" ??_C@_1BG@OJIFOIIA@?$AA?$CF?$AA?$CK?$AAs?$AA?$DM?$AA?1?$AA?$CF?$AAs?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x14002F548: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140033320: "onecore\admin\wmi\events\util\se" ??_C@_0CK@IOKCBLKF@onecore?2admin?2wmi?2events?2util?2se@
0x14002C7E4: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x14002F080: "const ChannelConfigException::`vftable'" ??_7ChannelConfigException@@6B@
0x14002F9E8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x140030D80: "yes" ??_C@_17IHBDLLG@?$AAy?$AAe?$AAs?$AA?$AA@
0x140030070: "__cdecl _sz_ext_ms_win_security_credui_l1_1_0_dll" __sz_ext_ms_win_security_credui_l1_1_0_dll
0x14002C2E4: "__cdecl _tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_1_dll" __tailMerge_ext_ms_win_wevtapi_eventlog_l1_1_1_dll
0x14002F988: "__cdecl _imp_memset" __imp_memset
0x140030C30: WPP_6badc5fa1687310fc4e79e4cd33496c0_Traceguids
0x14002B974: "__cdecl _acrt_initialize" __acrt_initialize
0x14002F8F8: "__cdecl _imp___p___wargv" __imp___p___wargv
0x140008FA8: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::_Emplace_reallocate<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64>(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ??$_Emplace_reallocate@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@QEAAPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@QEAV21@AEBV21@@Z
0x14002BE56: "__cdecl initterm" _initterm
0x14002F9B0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x14001BCB0: "public: virtual void * __ptr64 __cdecl ChannelConfigReader::`scalar deleting destructor'(unsigned int) __ptr64" ??_GChannelConfigReader@@UEAAPEAXI@Z
0x140032D28: AuditLoggerGuid
0x14001A378: "unsigned int __cdecl tlx::guid_to_string_lower<wchar_t>(wchar_t * __ptr64,struct _GUID const & __ptr64,bool)" ??$guid_to_string_lower@_W@tlx@@YAIPEA_WAEBU_GUID@@_N@Z
0x140030E20: "ns:logging/@logFileName" ??_C@_1DA@KGKDBMHL@?$AAn?$AAs?$AA?3?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?1?$AA?$EA?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140017D2C: "private: void __cdecl ManifestProcessor::ProcessProviderNode(class AbstractDomElement & __ptr64) __ptr64" ?ProcessProviderNode@ManifestProcessor@@AEAAXAEAVAbstractDomElement@@@Z
0x14002F220: "const PublisherConfigWriter::`vftable'" ??_7PublisherConfigWriter@@6B@
0x14002BF52: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x14003B2F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14003EE50: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140030B90: "autoBackup" ??_C@_1BG@HKNJFEE@?$AAa?$AAu?$AAt?$AAo?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x1400199D8: "public: __cdecl std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> >::~vector<struct ChannelReference,class std::allocator<struct ChannelReference> >(void) __ptr64" ??1?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@QEAA@XZ
0x14002BFDC: wprintf
0x140030950: WPP_4beca1f5a2a53204e24ae4c2e1e764e2_Traceguids
0x14002F768: "__cdecl _imp_Sleep" __imp_Sleep
0x14001FD7C: "protected: __cdecl PublisherConfigReader::PublisherConfigReader(struct _GUID const & __ptr64,struct HKEY__ * __ptr64) __ptr64" ??0PublisherConfigReader@@IEAA@AEBU_GUID@@PEAUHKEY__@@@Z
0x14003102C: "GE" ??_C@_15PAKKMMIH@?$AAG?$AAE?$AA?$AA@
0x14002FBD8: "__cdecl _xi_z" __xi_z
0x140041018: "__cdecl _imp_EvtExportLog" __imp_EvtExportLog
0x1400319F8: " /fromwow64" ??_C@_1BI@GGDLOCKD@?$AA?5?$AA?1?$AAf?$AAr?$AAo?$AAm?$AAw?$AAo?$AAw?$AA6?$AA4?$AA?$AA@
0x14002BF3A: "__cdecl exit" _exit
0x1400331C0: "State" ??_C@_1M@LAGHHMEN@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x140026B90: "long __cdecl StringVPrintf(class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64,wchar_t const * __ptr64,char * __ptr64)" ?StringVPrintf@@YAJAEAV?$vector@_WV?$allocator@_W@std@@@std@@PEB_WPEAD@Z
0x140030CF4: "L" ??_C@_13PHJMHGG@?$AAL?$AA?$AA@
0x1400013D4: "public: __cdecl wmi::Exception::Exception(class wmi::Exception const & __ptr64) __ptr64" ??0Exception@wmi@@QEAA@AEBV01@@Z
0x140029210: "unsigned long __cdecl TransformSDPermissions(void * __ptr64 const,struct _GENERIC_MAPPING * __ptr64 const,unsigned long const * __ptr64 const,void * __ptr64 const,bool,class std::unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> > & __ptr64)" ?TransformSDPermissions@@YAKQEAXQEAU_GENERIC_MAPPING@@QEBK0_NAEAV?$unique_ptr@$$BY0A@EU?$default_delete@$$BY0A@E@std@@@std@@@Z
0x14002F470: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140030EFC: "fm" ??_C@_15FJNMJNMF@?$AAf?$AAm?$AA?$AA@
0x14002F980: "__cdecl _imp_wcscmp" __imp_wcscmp
0x14002F5C8: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x1400313A0: "structuredquery" ??_C@_1CA@MEGFGIBN@?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AAu?$AAr?$AAe?$AAd?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?$AA@
0x14002BFD0: "__cdecl _C_specific_handler" __C_specific_handler
0x140011FB0: "public: virtual void * __ptr64 __cdecl MsxmlDomElement::`vector deleting destructor'(unsigned int) __ptr64" ??_EMsxmlDomElement@@UEAAPEAXI@Z
0x14002F1E8: "const ChannelConfigReader::`vftable'" ??_7ChannelConfigReader@@6B@
0x1400322E8: "Type" ??_C@_19BIEPDBPA@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140032A50: "MatchAnyKeyword" ??_C@_1CA@DAIDIDOO@?$AAM?$AAa?$AAt?$AAc?$AAh?$AAA?$AAn?$AAy?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x140031418: "l" ??_C@_13KPELGIFI@?$AAl?$AA?$AA@
0x14002F730: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMDocument2>::~CComPtr<struct IXMLDOMDocument2>(void) __ptr64" ??1?$CComPtr@UIXMLDOMDocument2@@@ATL@@QEAA@XZ
0x140001500: "public: virtual unsigned long __cdecl wmi::GenericException::GetSubErrorCode(void)const __ptr64" ?GetSubErrorCode@GenericException@wmi@@UEBAKXZ
0x140032250: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14000E8E0: "public: virtual void __cdecl ClearLogCommand::Init(void) __ptr64" ?Init@ClearLogCommand@@UEAAXXZ
0x14002F850: "__cdecl _imp__o_exit" __imp__o_exit
0x14002FB10: msvcp_win_NULL_THUNK_DATA
0x140030F70: "ns:publishing/ns:controlGuid" ??_C@_1DK@NJFNIFOC@?$AAn?$AAs?$AA?3?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x1400044D8: "public: static void __cdecl std::_String_val<struct std::_Simple_types<wchar_t> >::_Xran(void)" ?_Xran@?$_String_val@U?$_Simple_types@_W@std@@@std@@SAXXZ
0x14002F100: "const ClearLogCommand::`vftable'" ??_7ClearLogCommand@@6B@
0x14003061C: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x14002C899: memmove
0x14002F4F0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14002F810: "__cdecl _imp__set_fmode" __imp__set_fmode
0x140030400: "<?xml version="1.0" encoding="UT" ??_C@_1FC@KEFCGBFC@?$AA?$DM?$AA?$DP?$AAx?$AAm?$AAl?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$DN?$AA?$CC?$AA1?$AA?4?$AA0?$AA?$CC?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAd?$AAi?$AAn?$AAg?$AA?$DN?$AA?$CC?$AAU?$AAT@
0x14003A9D0: "__stdcall CT??_R0?AVGenericException@wmi@@" _CT??_R0?AVGenericException@wmi@@@856
0x14003EBD8: WPP_REGISTRATION_GUIDS
0x140008414: ??$_Buynode@AEBUpiecewise_construct_t@std@@V?$tuple@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$tuple@$$V@2@@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@1@AEBUpiecewise_construct_t@1@$$QEAV?$tuple@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@1@$$QEAV?$tuple@$$V@1@@Z
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMParseError>::~CComPtr<struct IXMLDOMParseError>(void) __ptr64" ??1?$CComPtr@UIXMLDOMParseError@@@ATL@@QEAA@XZ
0x14002F7D8: "__cdecl _imp__o__initialize_wide_environment" __imp__o__initialize_wide_environment
0x140032988: "MaxFileSize" ??_C@_1BI@DKPILFAP@?$AAM?$AAa?$AAx?$AAF?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140032050: "Microsoft-Windows-Eventlog" ??_C@_1DG@BDCGMDMB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAE?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?$AA@
0x140033178: "onecore\admin\wmi\events\util\ch" ??_C@_0CL@NDAJHNMH@onecore?2admin?2wmi?2events?2util?2ch@
0x140032C30: "Selectors" ??_C@_1BE@IJFELOIC@?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AAo?$AAr?$AAs?$AA?$AA@
0x14000E320: "public: virtual void __cdecl GetLogInfoCommand::Init(void) __ptr64" ?Init@GetLogInfoCommand@@UEAAXXZ
0x14002B7DC: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x140030960: "Xml" ??_C@_17NJIEJMNK@?$AAX?$AAm?$AAl?$AA?$AA@
0x140032180: ".evtx" ??_C@_1M@BGODKBPB@?$AA?4?$AAe?$AAv?$AAt?$AAx?$AA?$AA@
0x1400302E8: "onecore\admin\wmi\events\wevtuti" ??_C@_0CL@CJKPKFKP@onecore?2admin?2wmi?2events?2wevtuti@
0x14002F848: "__cdecl _imp__wtoi" __imp__wtoi
0x14002F4D0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140009890: "void __cdecl std::_Pop_heap_hole_by_index<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<void> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,__int64,__int64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&,struct std::less<void>)" ??$_Pop_heap_hole_by_index@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@X@2@@std@@YAXPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_J1$$QEAV10@U?$less@X@0@@Z
0x140030C40: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14001A5DC: "protected: struct std::pair<class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned long> > >,bool> __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Insert_nohint<unsigned long const & __ptr64,struct std::_Not_a_node_tag>(bool,unsigned long const & __ptr64,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_nohint@AEBKU_Not_a_node_tag@std@@@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@K@std@@@std@@@std@@_N@1@_NAEBKU_Not_a_node_tag@1@@Z
0x14001AE94: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_comp_alloc@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@2@XZ
0x14002C6B4: "__cdecl _imp_load_CredUICmdLinePromptForCredentialsW" __imp_load_CredUICmdLinePromptForCredentialsW
0x14002F0F0: "const ExportLogCommand::`vftable'" ??_7ExportLogCommand@@6B@
0x1400304B8: "%*s<%s" ??_C@_1O@HEHCEAEK@?$AA?$CF?$AA?$CK?$AAs?$AA?$DM?$AA?$CF?$AAs?$AA?$AA@
0x1400016A4: "public: bool __cdecl CommandArguments::HasHelp(void)const __ptr64" ?HasHelp@CommandArguments@@QEBA_NXZ
0x14002BB34: "__cdecl _scrt_initialize_mta" __scrt_initialize_mta
0x14002F690: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14002C780: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140025650: "public: __cdecl QuerySnapshot::QuerySnapshot(void) __ptr64" ??0QuerySnapshot@@QEAA@XZ
0x140028FC0: "public: virtual void __cdecl Buffer::SetCurrentIndex(unsigned long) __ptr64" ?SetCurrentIndex@Buffer@@UEAAXK@Z
0x140020620: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,0> >::_Erase(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@PEAX@2@@Z
0x1400314D0: "element" ??_C@_1BA@CMDEJJNJ@?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x14002F140: "const SetChannelCommand::`vftable'" ??_7SetChannelCommand@@6B@
0x140032B80: WPP_0e1aade2c19633f44673c5da9f3a0699_Traceguids
0x1400301C8: "enum-logs" ??_C@_1BE@LMKPLDLL@?$AAe?$AAn?$AAu?$AAm?$AA?9?$AAl?$AAo?$AAg?$AAs?$AA?$AA@
0x14002B710: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x140030C50: "E" ??_C@_13HCHBIIOM@?$AAE?$AA?$AA@
0x14002BF0A: "__cdecl cexit" _cexit
0x140003044: "public: static void __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::_Xlen(void)" ?_Xlen@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@SAXXZ
0x14002C284: IsEvtQueryPresent
0x14002F150: "const GetChannelCommand::`vftable'" ??_7GetChannelCommand@@6B@
0x140031EF0: "EvtIntAssertConfig" ??_C@_0BD@GFGMCFBN@EvtIntAssertConfig?$AA@
0x14003ABF0: ext-ms-win-wevtapi-eventlog-l1-1-1_NULL_THUNK_DATA_DLN
0x14002B5E0: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x140032228: "FileCounter" ??_C@_1BI@MGELNINL@?$AAF?$AAi?$AAl?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x14002F660: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x14003AFA0: ext-ms-win-wevtapi-eventlog-l1-1-1_NULL_THUNK_DATA_DLB
0x140041050: ext-ms-win-wevtapi-eventlog-l1-1-1_NULL_THUNK_DATA_DLA
0x140031090: "events" ??_C@_1O@PGNLHOHA@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x140019C1C: "private: void __cdecl std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> >::_Destroy(struct ChannelReference * __ptr64,struct ChannelReference * __ptr64) __ptr64" ?_Destroy@?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@AEAAXPEAUChannelReference@@0@Z
0x14002F8B0: "__cdecl _imp__configure_wide_argv" __imp__configure_wide_argv
0x14002C563: "__cdecl _imp_load_EvtGetObjectArraySize" __imp_load_EvtGetObjectArraySize
0x140031FE0: "EventMessageFile" ??_C@_1CC@JONFAEOP@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140030DA8: "ns:logging/ns:retention" ??_C@_1DA@INBHKANK@?$AAn?$AAs?$AA?3?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAr?$AAe?$AAt?$AAe?$AAn?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14003ABE0: ext-ms-win-wevtapi-eventlog-l1-1-0_NULL_THUNK_DATA_DLN
0x14002B974: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x14002F990: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x14002C5E1: "__cdecl _imp_load_EvtArchiveExportedLog" __imp_load_EvtArchiveExportedLog
0x1400032A0: "private: void __cdecl XmlPrinter::PrintXmlAttribute(wchar_t const * __ptr64) __ptr64" ?PrintXmlAttribute@XmlPrinter@@AEAAXPEB_W@Z
0x14002BFC4: terminate
0x140017B98: "private: void __cdecl ManifestProcessor::UpdateEtwSessions(struct _GUID const & __ptr64) __ptr64" ?UpdateEtwSessions@ManifestProcessor@@AEAAXAEBU_GUID@@@Z
0x14003AF90: ext-ms-win-wevtapi-eventlog-l1-1-0_NULL_THUNK_DATA_DLB
0x1400325D4: "Id" ??_C@_15NCCOGFKM@?$AAI?$AAd?$AA?$AA@
0x140041040: ext-ms-win-wevtapi-eventlog-l1-1-0_NULL_THUNK_DATA_DLA
0x1400301E8: "query-events" ??_C@_1BK@OCMEMNID@?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x14002F700: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14003EBB0: WPP_MAIN_CB
0x140007E94: "public: void __cdecl CommandArguments::ValidateOptions(wchar_t const * __ptr64 * __ptr64 const)const __ptr64" ?ValidateOptions@CommandArguments@@QEBAXQEAPEB_W@Z
0x14002F238: "const Buffer::`vftable'" ??_7Buffer@@6B@
0x14002F160: "const EnumChannelCommand::`vftable'" ??_7EnumChannelCommand@@6B@
0x140033130: "\ControlSet001\services\eventlog" ??_C@_1EC@PCMLIBHH@?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA1?$AA?2?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg@
0x14003ACC0: ext-ms-win-wevtapi-eventlog-l1-1-3_NULL_THUNK_DATA_DLN
0x1400230B8: "private: static void __cdecl SessionConfig::DeleteSession(wchar_t const * __ptr64,struct _GUID)" ?DeleteSession@SessionConfig@@CAXPEB_WU_GUID@@@Z
0x1400313EC: "ow" ??_C@_15EBHHHLPG@?$AAo?$AAw?$AA?$AA@
0x14003B36C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140041120: ext-ms-win-wevtapi-eventlog-l1-1-3_NULL_THUNK_DATA_DLA
0x140032D68: "ClassicEventlog" ??_C@_1CA@IMFMJGAI@?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAE?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?$AA@
0x14003AFB0: ext-ms-win-wevtapi-eventlog-l1-1-3_NULL_THUNK_DATA_DLB
0x14002F688: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14002FB08: "__cdecl _imp_?_Xout_of_range@std@@YAXPEBD@Z" __imp_?_Xout_of_range@std@@YAXPEBD@Z
0x140030828: "XPath" ??_C@_1M@HFCJKDDE@?$AAX?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140030170: "get-publisher" ??_C@_1BM@NKOPODFF@?$AAg?$AAe?$AAt?$AA?9?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x14002BF16: "__cdecl configthreadlocale" _configthreadlocale
0x140001540: "public: virtual unsigned long __cdecl wmi::GenericException::GetMessageId(void)const __ptr64" ?GetMessageId@GenericException@wmi@@UEBAKXZ
0x14002BB98: "__cdecl _scrt_set_unhandled_exception_filter" __scrt_set_unhandled_exception_filter
0x140030538: "</%s>
" ??_C@_1BA@GMOCJ@?$AA?$DM?$AA?1?$AA?$CF?$AAs?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x140032BE0: WPP_dc09fb143e1f3463aae3446a1b5875d6_Traceguids
0x14003AC28: ext-ms-win-wevtapi-eventlog-l1-1-2_NULL_THUNK_DATA_DLN
0x14002A8E0: MicrosoftTelemetryAssertTriggeredNoArgs
0x140032E58: WPP_12a04fa4bb0f35f218d25e55886bb7e8_Traceguids
0x14001C8C4: "public: class wmi::AutoRef<class QuerySnapshot> __cdecl ChannelConfigReader::GetFilterSnapshot(void)const __ptr64" ?GetFilterSnapshot@ChannelConfigReader@@QEBA?AV?$AutoRef@VQuerySnapshot@@@wmi@@XZ
0x14002C0FC: swscanf
0x140041088: ext-ms-win-wevtapi-eventlog-l1-1-2_NULL_THUNK_DATA_DLA
0x14003AFE8: ext-ms-win-wevtapi-eventlog-l1-1-2_NULL_THUNK_DATA_DLB
0x14003347C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140008784: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x14002795C: "bool __cdecl IsSecurityChannel(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ?IsSecurityChannel@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x1400305A8: "Authentication" ??_C@_1BO@BFCBNOOG@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14001AED8: "public: struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_comp_alloc@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@2@XZ
0x140031620: "N/A" ??_C@_17HDJIHIPC@?$AAN?$AA?1?$AAA?$AA?$AA@
0x1400025F8: "void __cdecl Execute(int,wchar_t * __ptr64 * __ptr64 const)" ?Execute@@YAXHQEAPEA_W@Z
0x140005FB0: "long __cdecl tlx::assign_wide<struct std::char_traits<char>,class std::allocator<char>,wchar_t const * __ptr64,wchar_t>(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64,wchar_t const * __ptr64 const & __ptr64,unsigned int,unsigned int)" ??$assign_wide@U?$char_traits@D@std@@V?$allocator@D@2@PEB_W_W@tlx@@YAJAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBQEB_WII@Z
0x14001CF98: "public: bool __cdecl ChannelConfigWriteData::IsAltered(enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?IsAltered@ChannelConfigWriteData@@QEAA_NW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x140030668: "true" ??_C@_19FKLFLPMF@?$AAt?$AAr?$AAu?$AAe?$AA?$AA@
0x140026F9C: "public: __cdecl AutoRevertPrivilege::~AutoRevertPrivilege(void) __ptr64" ??1AutoRevertPrivilege@@QEAA@XZ
0x14002C4F7: "__cdecl _imp_load_EvtOpenChannelEnum" __imp_load_EvtOpenChannelEnum
0x140031038: "GetMessage" ??_C@_1BG@FKKHJAFK@?$AAG?$AAe?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x140007594: "public: int __cdecl CommandArguments::GetOptionInteger(wchar_t const * __ptr64,wchar_t const * __ptr64,int,bool & __ptr64)const __ptr64" ?GetOptionInteger@CommandArguments@@QEBAHPEB_W0HAEA_N@Z
0x14002BF22: "__cdecl o__configure_wide_argv" _o__configure_wide_argv
0x140033470: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x140033090: "\Microsoft\Windows\CurrentVersio" ??_C@_1FC@LEAAHGJE@?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo@
0x140030860: "xmlns:ns='http://schemas.microso" ??_C@_1HG@BMPLBCAF@?$AAx?$AAm?$AAl?$AAn?$AAs?$AA?3?$AAn?$AAs?$AA?$DN?$AA?8?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo@
0x14003EDA0: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x14003B394: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x140030D0C: "K" ??_C@_13JCKOPPNP@?$AAK?$AA?$AA@
0x1400305F8: "Kerberos" ??_C@_1BC@KFNANHG@?$AAK?$AAe?$AAr?$AAb?$AAe?$AAr?$AAo?$AAs?$AA?$AA@
0x1400307A0: "%ls(%d): Error 0x%x: At column=%" ??_C@_1FE@JAPJFFG@?$AA?$CF?$AAl?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?3?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?3?$AA?5?$AAA?$AAt?$AA?5?$AAc?$AAo?$AAl?$AAu?$AAm?$AAn?$AA?$DN?$AA?$CF@
0x14002BECE: "__cdecl o___p__commode" _o___p__commode
0x14002F1D8: "const MsxmlDomElementList::`vftable'" ??_7MsxmlDomElementList@@6B@
0x1400212AC: "private: void __cdecl SessionConfig::ReadBaseTraceProps(struct _EVENT_TRACE_PROPERTIES * __ptr64) __ptr64" ?ReadBaseTraceProps@SessionConfig@@AEAAXPEAU_EVENT_TRACE_PROPERTIES@@@Z
0x140026F24: "public: __cdecl AutoRevertPrivilege::AutoRevertPrivilege(long) __ptr64" ??0AutoRevertPrivilege@@QEAA@J@Z
0x140030208: "gli" ??_C@_17HJOLPOJM@?$AAg?$AAl?$AAi?$AA?$AA@
0x140031708: " Opcode" ??_C@_1BC@ENHMHGBF@?$AA?5?$AA?5?$AAO?$AAp?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x140030C6C: "RT" ??_C@_15ELBEGPFF@?$AAR?$AAT?$AA?$AA@
0x14002B980: "__cdecl initialize_denormal_control" _initialize_denormal_control
0x140032240: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140041098: "__cdecl _imp_EvtOpenPublisherEnum" __imp_EvtOpenPublisherEnum
0x140030CD0: "Isolation" ??_C@_1BE@KOKJBHKJ@?$AAI?$AAs?$AAo?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002F850: "__cdecl _imp_exit" __imp_exit
0x1400216CC: "public: static void __cdecl SessionConfig::UpdateChannel(wchar_t const * __ptr64)" ?UpdateChannel@SessionConfig@@SAXPEB_W@Z
0x140007A7C: "public: bool __cdecl CommandArguments::GetOptionBool(wchar_t const * __ptr64,wchar_t const * __ptr64,bool,bool & __ptr64)const __ptr64" ?GetOptionBool@CommandArguments@@QEBA_NPEB_W0_NAEA_N@Z
0x1400290C0: "public: void __cdecl Buffer::SetSize(unsigned long) __ptr64" ?SetSize@Buffer@@QEAAXK@Z
0x1400300A0: GUID_NULL
0x140029000: "public: virtual void __cdecl Buffer::Advance(unsigned long) __ptr64" ?Advance@Buffer@@UEAAXK@Z
0x140030DD8: "rt" ??_C@_15OMIKMFFN@?$AAr?$AAt?$AA?$AA@
0x14002F708: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x140032208: "OwningPublisher" ??_C@_1CA@BBPNPKFE@?$AAO?$AAw?$AAn?$AAi?$AAn?$AAg?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x140004D58: "public: __cdecl wmi::ScopeGuardImpl1<long (__cdecl*)(wchar_t * __ptr64 * __ptr64),wchar_t * __ptr64 * __ptr64>::~ScopeGuardImpl1<long (__cdecl*)(wchar_t * __ptr64 * __ptr64),wchar_t * __ptr64 * __ptr64>(void) __ptr64" ??1?$ScopeGuardImpl1@P6AJPEAPEA_W@ZPEAPEA_W@wmi@@QEAA@XZ
0x14002F6E8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14002BEFE: "__cdecl o___stdio_common_vswscanf" _o___stdio_common_vswscanf
0x14002F3B8: OLEAUT32_NULL_THUNK_DATA
0x1400329A0: "FileName" ??_C@_1BC@PKFGPGJB@?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140031444: "bs" ??_C@_15HCILPPHP@?$AAb?$AAs?$AA?$AA@
0x140021884: "public: __cdecl ChannelConfigSnapshot::EtwSessionForChannel::~EtwSessionForChannel(void) __ptr64" ??1EtwSessionForChannel@ChannelConfigSnapshot@@QEAA@XZ
0x14002F7F0: "__cdecl _imp__o__purecall" __imp__o__purecall
0x14002B868: atexit
0x140032418: WPP_ec3ee83211c03849c58bb1eb2b0b74ba_Traceguids
0x140013ED0: "public: virtual void * __ptr64 __cdecl MsxmlDomElementList::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMsxmlDomElementList@@UEAAPEAXI@Z
0x1400301B0: "set-log" ??_C@_1BA@KIGMKHCP@?$AAs?$AAe?$AAt?$AA?9?$AAl?$AAo?$AAg?$AA?$AA@
0x140027AA0: "bool __cdecl SkipLegacyChannelKey(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ?SkipLegacyChannelKey@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140007170: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x1400410F0: "__cdecl _imp_EvtCreateBookmark" __imp_EvtCreateBookmark
0x14002BE7A: "__cdecl register_thread_local_exe_atexit_callback" _register_thread_local_exe_atexit_callback
0x1400304DC: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x140003758: "public: void __cdecl CommandBase::Run(class CommandArguments const * __ptr64) __ptr64" ?Run@CommandBase@@QEAAXPEBVCommandArguments@@@Z
0x14002F400: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400301A8: "sl" ??_C@_15LCHLGJII@?$AAs?$AAl?$AA?$AA@
0x140041038: "__cdecl _imp_EvtGetChannelConfigProperty" __imp_EvtGetChannelConfigProperty
0x14002F858: "__cdecl _imp__o_fflush" __imp__o_fflush
0x140031450: "bookmark" ??_C@_1BC@NMEMHJCI@?$AAb?$AAo?$AAo?$AAk?$AAm?$AAa?$AAr?$AAk?$AA?$AA@
0x14002F728: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x14000EA70: "public: virtual void __cdecl ExportLogCommand::Init(void) __ptr64" ?Init@ExportLogCommand@@UEAAXXZ
0x14000826C: "public: void __cdecl CommandArguments::ValidateArguments(int,int)const __ptr64" ?ValidateArguments@CommandArguments@@QEBAXHH@Z
0x140030C18: "controlGuid" ??_C@_1BI@BKODPIIP@?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x140008CB0: "public: virtual void __cdecl EnumChannelCommand::Execute(void) __ptr64" ?Execute@EnumChannelCommand@@UEAAXXZ
0x14002F698: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x14002F9C0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1400289E4: "public: unsigned long __cdecl RegistryKeyEnumerator::MoveNext(void) __ptr64" ?MoveNext@RegistryKeyEnumerator@@QEAAKXZ
0x140031490: "sbm" ??_C@_17DEHCDHGK@?$AAs?$AAb?$AAm?$AA?$AA@
0x140031E98: "onecore\admin\wmi\events\config\" ??_C@_0CM@OOHMNLME@onecore?2admin?2wmi?2events?2config?2@
0x14002B974: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x14002C1DC: IsEvtClearLogPresent
0x1400304F0: "%*s%s: %s
" ??_C@_1BI@EDGGGNNK@?$AA?$CF?$AA?$CK?$AAs?$AA?$CF?$AAs?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x14002FA00: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x14002F480: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x14002F9B8: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x140031168: "parameterFileName" ??_C@_1CE@HPBCKOAK@?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140032400: "ChannelConfigException" ??_C@_0BH@KMDNLIAD@ChannelConfigException?$AA@
0x140027708: "public: void __cdecl RegistryPaths::GetEventlogServiceRegPath(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetEventlogServiceRegPath@RegistryPaths@@QEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140032730: "O:BAG:BAD:(A;;0xffff;;;SY)(A;;0x" ??_C@_1OM@NDLJDKGI@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAf?$AAf?$AAf?$AAf?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx@
0x14003AA18: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x140019CE0: "protected: void __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Erase(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@KPEAX@2@@Z
0x14002FBF0: "__cdecl _xt_a" __xt_a
0x140032630: WPP_1b8fef4d3a1d3a2c3ec8183cf3c73237_Traceguids
0x14001C32C: "public: bool __cdecl ChannelConfigReader::GetControlGuid(struct _GUID & __ptr64)const __ptr64" ?GetControlGuid@ChannelConfigReader@@QEBA_NAEAU_GUID@@@Z
0x14003013C: "ep" ??_C@_15HNDLGACJ@?$AAe?$AAp?$AA?$AA@
0x1400300B0: "onecore\admin\wmi\events\wevtuti" ??_C@_0CP@JHKJNKBB@onecore?2admin?2wmi?2events?2wevtuti@
0x14003EB60: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x140031588: "%s: " ??_C@_19JCANECJL@?$AA?$CF?$AAs?$AA?3?$AA?5?$AA?$AA@
0x140030578: "remote" ??_C@_1O@CECNJPPJ@?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?$AA@
0x14002F618: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400309A0: "format" ??_C@_1O@JODKLKCF@?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AA?$AA@
0x14000141C: "public: __cdecl wmi::GenericException::GenericException(unsigned long,unsigned long,unsigned long,char const * __ptr64,int,unsigned long,wchar_t const * __ptr64) __ptr64" ??0GenericException@wmi@@QEAA@KKKPEBDHKPEB_W@Z
0x1400310D0: "opcode" ??_C@_1O@HMMBHLAK@?$AAo?$AAp?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x14002C5F3: "__cdecl _imp_load_EvtQuery" __imp_load_EvtQuery
0x14000489C: "unsigned long __cdecl RenderMessage(void * __ptr64,void * __ptr64,unsigned long,unsigned long,struct _EVT_VARIANT * __ptr64,unsigned long,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64)" ?RenderMessage@@YAKPEAX0KKPEAU_EVT_VARIANT@@KAEAV?$vector@EV?$allocator@E@std@@@std@@@Z
0x1400053F4: "void __cdecl eventlog::ai::WarningMessage(unsigned int,...)" ?WarningMessage@ai@eventlog@@YAXIZZ
0x1400329B8: "LogFileMode" ??_C@_1BI@CKOCKMJL@?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x140030390: "&" ??_C@_1M@CKOFOPMN@?$AA?$CG?$AAa?$AAm?$AAp?$AA?$DL?$AA?$AA@
0x14002057C: "public: void __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,0> >::clear(void) __ptr64" ?clear@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@$0A@@std@@@std@@QEAAXXZ
0x1400304E8: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x140031F60: "maxBuffers" ??_C@_1BG@IHIGBMN@?$AAm?$AAa?$AAx?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x140030270: "archive-log" ??_C@_1BI@JEICJCGK@?$AAa?$AAr?$AAc?$AAh?$AAi?$AAv?$AAe?$AA?9?$AAl?$AAo?$AAg?$AA?$AA@
0x1400309B0: "f" ??_C@_13MAPGIIDM@?$AAf?$AA?$AA@
0x140031824: "rf" ??_C@_15BGJKFKEJ@?$AAr?$AAf?$AA?$AA@
0x14002F6D8: api-ms-win-core-state-helpers-l1-1-0_NULL_THUNK_DATA
0x1400243F8: ??1?$unique_any@U?$handle_traits@PEAX$$A6APEAXPEAX@Z$1?LocalFree@@YAPEAX0@Z$0A@@tlx@@@tlx@@QEAA@XZ
0x140030610: "NTLM" ??_C@_19FMIOBHFB@?$AAN?$AAT?$AAL?$AAM?$AA?$AA@
0x14002FAD8: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x140030928: "%I64i" ??_C@_1M@PMHABONK@?$AA?$CF?$AAI?$AA6?$AA4?$AAi?$AA?$AA@
0x140031470: "savebookmark" ??_C@_1BK@MDMHIJGK@?$AAs?$AAa?$AAv?$AAe?$AAb?$AAo?$AAo?$AAk?$AAm?$AAa?$AAr?$AAk?$AA?$AA@
0x140041078: "__cdecl _imp_EvtSaveChannelConfig" __imp_EvtSaveChannelConfig
0x14002F878: "__cdecl _imp_setlocale" __imp_setlocale
0x14002C3EE: "__cdecl _imp_load_EvtGetEventMetadataProperty" __imp_load_EvtGetEventMetadataProperty
0x14002F3D8: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x14000796C: "public: wchar_t const * __ptr64 __cdecl CommandArguments::GetOptionString(wchar_t const * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,bool & __ptr64)const __ptr64" ?GetOptionString@CommandArguments@@QEBAPEB_WPEB_W00AEA_N@Z
0x14002BC40: "__cdecl RTC_Terminate" _RTC_Terminate
0x14002C2D8: "__cdecl _imp_load_EvtOpenSession" __imp_load_EvtOpenSession
0x140030F6C: "k" ??_C@_13DCJMFAOB@?$AAk?$AA?$AA@
0x14003B13C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x14002F830: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14002F8A8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000427C: "private: static void __cdecl std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> >::_Xlength(void)" ?_Xlength@?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@CAXXZ
0x140032AA0: "EnableFlags" ??_C@_1BI@EBHMEIEO@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14002F840: "__cdecl _imp__wcstoui64" __imp__wcstoui64
0x14002C448: "__cdecl _imp_load_EvtFormatMessage" __imp_load_EvtFormatMessage
0x14002F6B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14002F578: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140031018: "GetEvents" ??_C@_1BE@DJALLEEO@?$AAG?$AAe?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x1400410D0: "__cdecl _imp_EvtClearLog" __imp_EvtClearLog
0x1400311E0: "levels" ??_C@_1O@FNHNBIHH@?$AAl?$AAe?$AAv?$AAe?$AAl?$AAs?$AA?$AA@
0x14001C4F0: "public: enum _EVT_CHANNEL_ISOLATION_TYPE __cdecl ChannelConfigReader::GetIsolation(void)const __ptr64" ?GetIsolation@ChannelConfigReader@@QEBA?AW4_EVT_CHANNEL_ISOLATION_TYPE@@XZ
0x140030100: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x14003B344: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1400329D0: "Guid" ??_C@_19BPBMCKGC@?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x140031830: "messageFilePath" ??_C@_1CA@FIBIGHMI@?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14002F468: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14002C629: "__cdecl _imp_load_EvtCreateRenderContext" __imp_load_EvtCreateRenderContext
0x14000133C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140009400: "struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64> __cdecl std::_Partition_by_median_guess_unchecked<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void>)" ??$_Partition_by_median_guess_unchecked@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@X@2@@std@@YA?AU?$pair@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAV12@@0@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0U?$less@X@0@@Z
0x14002FAB0: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x14000AD6C: "private: void __cdecl SetChannelCommand::SetPropertyBoolean(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyBoolean@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x14002F9F8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x14002FDD0: "__cdecl _sz_ext_ms_win_wevtapi_eventlog_l1_1_0_dll" __sz_ext_ms_win_wevtapi_eventlog_l1_1_0_dll
0x14002C75C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140032820: "O:BAG:BAD:(A;;0xffff;;;SY)(A;;0x" ??_C@_1MM@ILCDILKH@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAf?$AAf?$AAf?$AAf?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx@
0x14003E410: "__vectorcall ??_R0?AUIException@wmi@" ??_R0?AUIException@wmi@@@8
0x140030938: "map/set<T> too long" ??_C@_0BE@JONHPENG@map?1set?$DMT?$DO?5too?5long?$AA@
0x140033100: "\Channels" ??_C@_1BE@GNFDGGGG@?$AA?2?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAs?$AA?$AA@
0x140026A60: "wchar_t const * __ptr64 __cdecl GetChannelPropertyName(unsigned long)" ?GetChannelPropertyName@@YAPEB_WK@Z
0x14002C1DC: IsEvtOpenChannelEnumPresent
0x1400301C0: "el" ??_C@_15GHPEIIAO@?$AAe?$AAl?$AA?$AA@
0x14001BC88: "public: __cdecl tlx::_LazyImpl<class LazySecurityBases,class tlx::lazy_construct<class LazySecurityBases>,class tlx::static_lazy<class LazySecurityBases,0,class tlx::lazy_construct<class LazySecurityBases> > >::_Initializer::~_Initializer(void) __ptr64" ??1_Initializer@?$_LazyImpl@VLazySecurityBases@@V?$lazy_construct@VLazySecurityBases@@@tlx@@V?$static_lazy@VLazySecurityBases@@$0A@V?$lazy_construct@VLazySecurityBases@@@tlx@@@3@@tlx@@QEAA@XZ
0x1400194D8: "public: __cdecl ChannelConfigEnumerator::~ChannelConfigEnumerator(void) __ptr64" ??1ChannelConfigEnumerator@@QEAA@XZ
0x140031780: " Computer: %s
" ??_C@_1CC@PGLHILHN@?$AA?5?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x140007124: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x14002FF40: "__cdecl _sz_ext_ms_win_wevtapi_eventlog_l1_1_1_dll" __sz_ext_ms_win_wevtapi_eventlog_l1_1_1_dll
0x14002F6A8: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x14002F940: "__cdecl _imp_memcmp" __imp_memcmp
0x1400333A8: "onecore\admin\wmi\events\util\uc" ??_C@_0DM@GECMKPEJ@onecore?2admin?2wmi?2events?2util?2uc@
0x1400321B8: "onecore\admin\wmi\events\config\" ??_C@_0DI@FDGKODNE@onecore?2admin?2wmi?2events?2config?2@
0x14002BEE6: "__cdecl o___stdio_common_vsnwprintf_s" _o___stdio_common_vsnwprintf_s
0x1400316A0: " Date: %s
" ??_C@_1BK@EFBMIPMP@?$AA?5?$AA?5?$AAD?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x14000BA6C: "private: void __cdecl SetChannelCommand::SetPropertyEnum(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyEnum@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x140004D80: "public: __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::vector<wchar_t,class std::allocator<wchar_t> >(unsigned __int64,class std::allocator<wchar_t> const & __ptr64) __ptr64" ??0?$vector@_WV?$allocator@_W@std@@@std@@QEAA@_KAEBV?$allocator@_W@1@@Z
0x14001F930: "public: virtual bool __cdecl ConfigEnumerator::DeleteCurrent(void) __ptr64" ?DeleteCurrent@ConfigEnumerator@@UEAA_NXZ
0x14002FFA0: "__cdecl _sz_ext_ms_win_wevtapi_eventlog_l1_1_2_dll" __sz_ext_ms_win_wevtapi_eventlog_l1_1_2_dll
0x140019D3C: "public: void __cdecl std::allocator<struct std::_Tree_node<unsigned long,void * __ptr64> >::deallocate(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@KPEAX@std@@@std@@QEAAXQEAU?$_Tree_node@KPEAX@2@_K@Z
0x14003EBA8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUdvegfgroUlyquivUznwGEUhgwzucOlyq@wevtutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUdvegfgroUlyquivUznwGEUhgwzucOlyq@wevtutil
0x14002B954: "__cdecl get_startup_file_mode" _get_startup_file_mode
0x14000BF10: "public: virtual void __cdecl SetChannelCommand::Execute(void) __ptr64" ?Execute@SetChannelCommand@@UEAAXXZ
0x14002F668: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x14002F838: "__cdecl _imp__o__wcsnicmp" __imp__o__wcsnicmp
0x14002FAF0: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x140025304: "private: bool __cdecl ChannelConfigEnumerator::MoveFirstGlobal(void) __ptr64" ?MoveFirstGlobal@ChannelConfigEnumerator@@AEAA_NXZ
0x14003E524: "__cdecl _isa_enabled" __isa_enabled
0x14000427C: "private: static void __cdecl std::vector<unsigned char,class std::allocator<unsigned char> >::_Xlength(void)" ?_Xlength@?$vector@EV?$allocator@E@std@@@std@@CAXXZ
0x1400312C8: "lastWriteTime" ??_C@_1BM@FDNKMLJD@?$AAl?$AAa?$AAs?$AAt?$AAW?$AAr?$AAi?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140032368: "SidType" ??_C@_1BA@PPDAEJFL@?$AAS?$AAi?$AAd?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x14002FF70: "__cdecl _sz_ext_ms_win_wevtapi_eventlog_l1_1_3_dll" __sz_ext_ms_win_wevtapi_eventlog_l1_1_3_dll
0x14002B378: "void __cdecl operator delete(void * __ptr64,unsigned __int64)" ??3@YAXPEAX_K@Z
0x140030118: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1400214BC: "private: static void __cdecl SessionConfig::GetPublisherList(class std::vector<struct _GUID,class std::allocator<struct _GUID> > & __ptr64)" ?GetPublisherList@SessionConfig@@CAXAEAV?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@@Z
0x140030D60: "FileMax" ??_C@_1BA@IJANDGNA@?$AAF?$AAi?$AAl?$AAe?$AAM?$AAa?$AAx?$AA?$AA@
0x14003B3BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x14002F608: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140013D80: "public: __cdecl wmi::AutoRef<class QuerySnapshot>::~AutoRef<class QuerySnapshot>(void) __ptr64" ??1?$AutoRef@VQuerySnapshot@@@wmi@@QEAA@XZ
0x14002F720: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140031F08: "EvtIntRetractConfig" ??_C@_0BE@JOEHBMAM@EvtIntRetractConfig?$AA@
0x14002C6C0: "__cdecl _tailMerge_ext_ms_win_security_credui_l1_1_0_dll" __tailMerge_ext_ms_win_security_credui_l1_1_0_dll
0x14003B254: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x140041108: "__cdecl _imp_EvtGetObjectArraySize" __imp_EvtGetObjectArraySize
0x140031F88: "clockType" ??_C@_1BE@JBFIEGMP@?$AAc?$AAl?$AAo?$AAc?$AAk?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140026C90: "void __cdecl LoadMessage(struct HINSTANCE__ * __ptr64,class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64,unsigned int,char * __ptr64 * __ptr64)" ?LoadMessage@@YAXPEAUHINSTANCE__@@AEAV?$vector@_WV?$allocator@_W@std@@@std@@IPEAPEAD@Z
0x14002AF44: "int __cdecl Wevtsvc_FreeLibrary(struct HINSTANCE__ * __ptr64)" ?Wevtsvc_FreeLibrary@@YAHPEAUHINSTANCE__@@@Z
0x14000CEC8: "private: void * __ptr64 __cdecl GetPublisherCommand::GetPropertyArray(wchar_t const * __ptr64,void * __ptr64,enum _EVT_PUBLISHER_METADATA_PROPERTY_ID,unsigned long & __ptr64) __ptr64" ?GetPropertyArray@GetPublisherCommand@@AEAAPEAXPEB_WPEAXW4_EVT_PUBLISHER_METADATA_PROPERTY_ID@@AEAK@Z
0x140031268: "logfile" ??_C@_1BA@GLDHFDAK@?$AAl?$AAo?$AAg?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x1400014C8: "public: virtual __cdecl ChannelConfigException::~ChannelConfigException(void) __ptr64" ??1ChannelConfigException@@UEAA@XZ
0x140030658: WPP_ee8b53b53cac383bb5e6e739ea7dcbb4_Traceguids
0x140030678: "false" ??_C@_1M@HLGKFCJM@?$AAf?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x1400111E0: "public: __cdecl std::vector<void * __ptr64,class std::allocator<void * __ptr64> >::~vector<void * __ptr64,class std::allocator<void * __ptr64> >(void) __ptr64" ??1?$vector@PEAXV?$allocator@PEAX@std@@@std@@QEAA@XZ
0x14002A93C: "public: unsigned long __cdecl ResourceHolder::LoadAndValidateGlobalResource(wchar_t const * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,bool) __ptr64" ?LoadAndValidateGlobalResource@ResourceHolder@@QEAAKPEB_W00_N@Z
0x140032FD0: "SYSTEM\CurrentControlSet\Control" ??_C@_1GA@IKLOCDFP@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14002FB28: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x14002F670: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x1400309F8: "Debug" ??_C@_1M@OPFBIOCF@?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?$AA@
0x1400410D8: "__cdecl _imp_EvtOpenChannelEnum" __imp_EvtOpenChannelEnum
0x14002BF52: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x14003347C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1400310E0: "task" ??_C@_19JOAHBNCD@?$AAt?$AAa?$AAs?$AAk?$AA?$AA@
0x14002F888: "__cdecl _imp__o_toupper" __imp__o_toupper
0x14002B948: "__cdecl _scrt_stub_for_initialize_mta" __scrt_stub_for_initialize_mta
0x140031508: "<%s>
" ??_C@_1O@HBOPHDCH@?$AA?$DM?$AA?$CF?$AAs?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x14003EB08: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x1400301DC: "qe" ??_C@_15ICLLIHAJ@?$AAq?$AAe?$AA?$AA@
0x14002C5CF: "__cdecl _imp_load_EvtExportLog" __imp_load_EvtExportLog
0x14002B378: "void __cdecl operator delete(void * __ptr64,struct std::nothrow_t const & __ptr64)" ??3@YAXPEAXAEBUnothrow_t@std@@@Z
0x1400328F0: "onecore\admin\wmi\events\config\" ??_C@_0CM@OOEJJGEJ@onecore?2admin?2wmi?2events?2config?2@
0x1400258FC: "private: void __cdecl QuerySnapshot::Save(struct HKEY__ * __ptr64) __ptr64" ?Save@QuerySnapshot@@AEAAXPEAUHKEY__@@@Z
0x14002F530: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x14002B3BC: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140032428: "Publishers" ??_C@_1BG@LIFPDLKM@?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AAs?$AA?$AA@
0x1400099A8: "void __cdecl std::_Med3_unchecked<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void>)" ??$_Med3_unchecked@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@X@2@@std@@YAXPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@00U?$less@X@0@@Z
0x140030EC4: "i" ??_C@_13JIJFJIGK@?$AAi?$AA?$AA@
0x140011244: "public: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::find(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ?find@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
0x140010584: "private: void __cdecl QueryLogCommand::PrintEventRenderedXml(void * __ptr64) __ptr64" ?PrintEventRenderedXml@QueryLogCommand@@AEAAXPEAX@Z
0x1400312E8: "fileSize" ??_C@_1BC@LIHGGNGP@?$AAf?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140019508: "private: void __cdecl ManifestProcessor::RetractProvider(struct _GUID,class StringSet const & __ptr64) __ptr64" ?RetractProvider@ManifestProcessor@@AEAAXU_GUID@@AEBVStringSet@@@Z
0x14003E050: "struct ENUM_NAMEVALUE_PAIR * EnumNameValueOutputFormat" ?EnumNameValueOutputFormat@@3PAUENUM_NAMEVALUE_PAIR@@A
0x140027E80: "bool __cdecl RegReadStringValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?RegReadStringValue@@YA_NPEAUHKEY__@@PEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140028094: "bool __cdecl RegReadMultiStringValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > & __ptr64)" ?RegReadMultiStringValue@@YA_NPEAUHKEY__@@PEB_WAEAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
0x140031FC0: "ProviderGuid" ??_C@_1BK@KELFPHLL@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x14002F900: "__cdecl _imp___p___argc" __imp___p___argc
0x14000D17C: "private: void __cdecl GetPublisherCommand::GetPropertyArrayElement(wchar_t const * __ptr64,void * __ptr64,void * __ptr64,unsigned long,unsigned long,unsigned long,wchar_t const * __ptr64) __ptr64" ?GetPropertyArrayElement@GetPublisherCommand@@AEAAXPEB_WPEAX1KKK0@Z
0x14003B0B0: "__cdecl _IMPORT_DESCRIPTOR_msvcp_win" __IMPORT_DESCRIPTOR_msvcp_win
0x14002B974: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x14002F628: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x140002F7C: "public: void __cdecl std::allocator<struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> >::deallocate(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@_K@Z
0x140030380: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x14002FBC8: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x140019C54: "public: void __cdecl std::allocator<struct ChannelReference>::deallocate(struct ChannelReference * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@UChannelReference@@@std@@QEAAXQEAUChannelReference@@_K@Z
0x14003B1C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140013ED0: "public: virtual void * __ptr64 __cdecl MsxmlDomElementList::`vector deleting destructor'(unsigned int) __ptr64" ??_EMsxmlDomElementList@@UEAAPEAXI@Z
0x14000DAA0: "public: virtual void __cdecl GetPublisherCommand::Execute(void) __ptr64" ?Execute@GetPublisherCommand@@UEAAXXZ
0x1400062C8: "char * __ptr64 __cdecl tlx::_GetAppendBuffer<char,struct std::char_traits<char>,class std::allocator<char> >(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64,unsigned __int64)" ??$_GetAppendBuffer@DU?$char_traits@D@std@@V?$allocator@D@2@@tlx@@YAPEADAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z
0x1400218AC: "public: static void __cdecl SessionConfig::UpdateChannel(class ChannelConfigSnapshot const & __ptr64)" ?UpdateChannel@SessionConfig@@SAXAEBVChannelConfigSnapshot@@@Z
0x1400325A0: "ChannelReferences" ??_C@_1CE@EICMFJLO@?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAs?$AA?$AA@
0x14001C750: "public: bool __cdecl ChannelConfigReader::GetRetention(bool & __ptr64)const __ptr64" ?GetRetention@ChannelConfigReader@@QEBA_NAEA_N@Z
0x140030098: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140030D7C: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x1400070B4: "long __cdecl XmlGetNodeText(struct IXMLDOMNode * __ptr64,wchar_t const * __ptr64,wchar_t * __ptr64 * __ptr64)" ?XmlGetNodeText@@YAJPEAUIXMLDOMNode@@PEB_WPEAPEA_W@Z
0x140012080: WPP_SF_
0x140030910: WPP_f6a8e41d47f836972e62a8c7bda79add_Traceguids
0x140027280: "long __cdecl tlx::_AppendFormatMessageImpl<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,unsigned int,void const * __ptr64,unsigned int,unsigned int,char * __ptr64 * __ptr64)" ??$_AppendFormatMessageImpl@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@tlx@@YAJAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IPEBXIIPEAPEAD@Z
0x140030638: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x14002F4E0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14002BEB6: "__cdecl o___p___argc" _o___p___argc
0x140030D50: "Quiet" ??_C@_1M@EAFEHDJN@?$AAQ?$AAu?$AAi?$AAe?$AAt?$AA?$AA@
0x14002F550: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140004D58: "public: __cdecl wmi::ScopeGuardImpl1<int (__cdecl*)(void * __ptr64),void * __ptr64>::~ScopeGuardImpl1<int (__cdecl*)(void * __ptr64),void * __ptr64>(void) __ptr64" ??1?$ScopeGuardImpl1@P6AHPEAX@ZPEAX@wmi@@QEAA@XZ
0x14002F6E0: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140030E58: "ns:logging/ns:maxSize" ??_C@_1CM@BJICJBLJ@?$AAn?$AAs?$AA?3?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAm?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140026994: "bool __cdecl ExpandEnvStringNoThrow(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?ExpandEnvStringNoThrow@@YA_NPEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002F718: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x140030D70: "FM" ??_C@_15POECDHMN@?$AAF?$AAM?$AA?$AA@
0x14003AB80: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x14003E490: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x1400304E0: "="" ??_C@_15PMOCCNJK@?$AA?$DN?$AA?$CC?$AA?$AA@
0x14000175C: "public: __cdecl QueryLogCommand::QueryLogCommand(void) __ptr64" ??0QueryLogCommand@@QEAA@XZ
0x1400306A0: "onecore\admin\wmi\events\wevtuti" ??_C@_0DC@OILHHFOI@onecore?2admin?2wmi?2events?2wevtuti@
0x1400014F0: "public: virtual unsigned long __cdecl wmi::GenericException::GetErrorCode(void)const __ptr64" ?GetErrorCode@GenericException@wmi@@UEBAKXZ
0x140031498: "reversdirection" ??_C@_1CA@LEONNCBC@?$AAr?$AAe?$AAv?$AAe?$AAr?$AAs?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140031890: "xmlns:events='http://schemas.mic" ??_C@_1HO@NOMPNNJO@?$AAx?$AAm?$AAl?$AAn?$AAs?$AA?3?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$DN?$AA?8?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc@
0x1400236CC: "private: static void __cdecl SessionConfig::SetSessionSecurity(class ChannelConfigSnapshot const & __ptr64,bool)" ?SetSessionSecurity@SessionConfig@@CAXAEBVChannelConfigSnapshot@@_N@Z
0x14002F710: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1400253C0: "public: class wmi::AutoRef<class ChannelConfigReader> __cdecl ChannelConfigEnumerator::GetCurrentReader(void) __ptr64" ?GetCurrentReader@ChannelConfigEnumerator@@QEAA?AV?$AutoRef@VChannelConfigReader@@@wmi@@XZ
0x140033030: "SYSTEM\CurrentControlSet\Control" ??_C@_1FM@KJIPLCFH@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14002BEAA: "__cdecl _acrt_iob_func" __acrt_iob_func
0x140014020: "public: virtual wchar_t const * __ptr64 __cdecl MsxmlDomElement::GetSimpleContent(void) __ptr64" ?GetSimpleContent@MsxmlDomElement@@UEAAPEB_WXZ
0x14002F968: "__cdecl _imp__initterm" __imp__initterm
0x140002F68: "public: void __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Freenode0(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@@Z
0x14003B2B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x14002F8E8: "__cdecl _imp__o___stdio_common_vfwprintf" __imp__o___stdio_common_vfwprintf
0x1400314CC: "c" ??_C@_13PHCIHIAO@?$AAc?$AA?$AA@
0x14000F164: "protected: void __cdecl CommandBase::Printf(wchar_t const * __ptr64,...) __ptr64" ?Printf@CommandBase@@IEAAXPEB_WZZ
0x1400316E8: " Task" ??_C@_1O@DGDOKMGC@?$AA?5?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x140002C2C: "public: struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> const * __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > >::operator->(void)const __ptr64" ??C?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@std@@QEBAPEBU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@1@XZ
0x14002F580: "__cdecl _imp_LocaleNameToLCID" __imp_LocaleNameToLCID
0x14002F460: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14002F920: "__cdecl _imp___std_terminate" __imp___std_terminate
0x14001CD00: "public: enum _EVT_CHANNEL_TYPE __cdecl ChannelConfigReader::GetChannelType(void)const __ptr64" ?GetChannelType@ChannelConfigReader@@QEBA?AW4_EVT_CHANNEL_TYPE@@XZ
0x14003AAC0: "__cdecl TI4?AVChannelConfigException@@" _TI4?AVChannelConfigException@@
0x1400317F0: "offline" ??_C@_1BA@CNOGGFBF@?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?$AA@
0x14002F828: "__cdecl _imp__ultow_s" __imp__ultow_s
0x1400121E4: "private: void __cdecl InstallManifestCommand::GetEventsNode(struct IXMLDOMDocument2 * __ptr64,struct IXMLDOMElement * __ptr64 * __ptr64) __ptr64" ?GetEventsNode@InstallManifestCommand@@AEAAXPEAUIXMLDOMDocument2@@PEAPEAUIXMLDOMElement@@@Z
0x140032AD8: "EnableProperty" ??_C@_1BO@BKEADOJP@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?$AA@
0x1400223DC: "private: static void __cdecl SessionConfig::UpdateProvidersForChannel(class ChannelConfigSnapshot const & __ptr64,bool)" ?UpdateProvidersForChannel@SessionConfig@@CAXAEBVChannelConfigSnapshot@@_N@Z
0x14003B3A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140021070: "public: __cdecl LazySecurityBases::LazySecurityBases(void) __ptr64" ??0LazySecurityBases@@QEAA@XZ
0x1400300E0: WPP_556b43aa8b823746012db08ca59c2bf2_Traceguids
0x140004D58: "public: __cdecl wmi::ScopeGuardImpl1<int (__cdecl*)(struct HINSTANCE__ * __ptr64),struct HINSTANCE__ * __ptr64>::~ScopeGuardImpl1<int (__cdecl*)(struct HINSTANCE__ * __ptr64),struct HINSTANCE__ * __ptr64>(void) __ptr64" ??1?$ScopeGuardImpl1@P6AHPEAUHINSTANCE__@@@ZPEAU1@@wmi@@QEAA@XZ
0x1400315A0: "N/A
" ??_C@_1M@NFDKDEOK@?$AAN?$AA?1?$AAA?$AA?$AN?$AA?6?$AA?$AA@
0x140020A98: "public: void __cdecl PublisherConfigWriteData::AddChannelReference(wchar_t const * __ptr64,unsigned long,unsigned long) __ptr64" ?AddChannelReference@PublisherConfigWriteData@@QEAAXPEB_WKK@Z
0x14003018C: "gl" ??_C@_15CKDMCJAF@?$AAg?$AAl?$AA?$AA@
0x1400052D8: "private: void __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::_Change_array(wchar_t * __ptr64 const,unsigned __int64,unsigned __int64) __ptr64" ?_Change_array@?$vector@_WV?$allocator@_W@std@@@std@@AEAAXQEA_W_K1@Z
0x140030230: "clear-log" ??_C@_1BE@HDLKAGPL@?$AAc?$AAl?$AAe?$AAa?$AAr?$AA?9?$AAl?$AAo?$AAg?$AA?$AA@
0x14003EE20: "bool g_outputUnicode" ?g_outputUnicode@@3_NA
0x140008844: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Destroy_if_node(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_node@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@Z
0x140026B68: "long __cdecl StringPrintf(class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64,wchar_t const * __ptr64,...)" ?StringPrintf@@YAJAEAV?$vector@_WV?$allocator@_W@std@@@std@@PEB_WZZ
0x14002FA10: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x14002F590: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x140031388: "bu" ??_C@_15FHOAKAKD@?$AAb?$AAu?$AA?$AA@
0x140002DAC: "public: void __cdecl std::allocator<unsigned char>::deallocate(unsigned char * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@E@std@@QEAAXQEAE_K@Z
0x1400313D8: "overwrite" ??_C@_1BE@NNDNCFFC@?$AAo?$AAv?$AAe?$AAr?$AAw?$AAr?$AAi?$AAt?$AAe?$AA?$AA@
0x1400310B0: "value" ??_C@_1M@KBCLFMHN@?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x140030A80: "owningPublisher" ??_C@_1CA@CLEPCHIG@?$AAo?$AAw?$AAn?$AAi?$AAn?$AAg?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x14002FD98: IID_IXMLDOMDocument2
0x14001B0F4: "public: __cdecl RegistryDefaultLogFolder::RegistryDefaultLogFolder(void) __ptr64" ??0RegistryDefaultLogFolder@@QEAA@XZ
0x140032588: "HelpLink" ??_C@_1BC@GBLJGDCJ@?$AAH?$AAe?$AAl?$AAp?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
0x14003B31C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x14003B1F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x14000B6E8: "private: void __cdecl SetChannelCommand::SetPropertyGuid(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyGuid@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x140032088: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x140030CE4: "I" ??_C@_13DIKHDHFE@?$AAI?$AA?$AA@
0x14002F930: "__cdecl _imp__o__crt_atexit" __imp__o__crt_atexit
0x14002FA58: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x140030E50: "lfn" ??_C@_17BIMNPJBF@?$AAl?$AAf?$AAn?$AA?$AA@
0x14002F828: "__cdecl _imp__o__ultow_s" __imp__o__ultow_s
0x140031758: " User Name: %s
" ??_C@_1CE@JBDCBOMF@?$AA?5?$AA?5?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x1400324D8: "onecore\admin\wmi\events\config\" ??_C@_0DK@LENOBENP@onecore?2admin?2wmi?2events?2config?2@
0x14003B358: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x1400305D0: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x14002B98C: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x1400323C8: "onecore\admin\wmi\events\config\" ??_C@_0DI@CACMEGDE@onecore?2admin?2wmi?2events?2config?2@
0x140013D80: "public: __cdecl wmi::AutoRef<class ChannelConfigSnapshot>::~AutoRef<class ChannelConfigSnapshot>(void) __ptr64" ??1?$AutoRef@VChannelConfigSnapshot@@@wmi@@QEAA@XZ
0x14002FA18: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x14002F8C8: "__cdecl _imp__exit" __imp__exit
0x14002B630: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x14002F7A8: "__cdecl _imp_Wow64DisableWow64FsRedirection" __imp_Wow64DisableWow64FsRedirection
0x14000C390: "public: virtual void __cdecl EnumPublisherCommand::Execute(void) __ptr64" ?Execute@EnumPublisherCommand@@UEAAXXZ
0x140029DDC: "public: void __cdecl RegistryPaths::GetAutoLoggersRegPath(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetAutoLoggersRegPath@RegistryPaths@@QEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
0x14001AE0C: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Buynode<unsigned long const & __ptr64>(unsigned long const & __ptr64) __ptr64" ??$_Buynode@AEBK@?$_Tree_comp_alloc@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@1@AEBK@Z
0x14002FB50: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400316C0: " Event ID: %d
" ??_C@_1CC@DJHBGIKC@?$AA?5?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAI?$AAD?$AA?3?$AA?5?$AA?$CF?$AAd?$AA?$AN?$AA?6?$AA?$AA@
0x14002FAE0: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x14002F938: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x14001AE00: "public: __cdecl ChannelReference::~ChannelReference(void) __ptr64" ??1ChannelReference@@QEAA@XZ
0x140013E04: "protected: void __cdecl std::_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Erase(struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@2@@Z
0x14002B9D0: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x14002B390: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x14002F5F0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14002B974: "__cdecl should_initialize_environment" _should_initialize_environment
0x140031518: "onecore\admin\wmi\events\wevtuti" ??_C@_0DG@FCBEHPAF@onecore?2admin?2wmi?2events?2wevtuti@
0x140030BB8: "publishing" ??_C@_1BG@MMAALOAI@?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?$AA@
0x14001F394: "public: __cdecl PublisherConfigEnumerator::PublisherConfigEnumerator(struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0PublisherConfigEnumerator@@QEAA@PEAUHKEY__@@PEB_W@Z
0x140031F30: "bufferSize" ??_C@_1BG@KHLBHMGI@?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x14000E970: "public: virtual void __cdecl ClearLogCommand::Execute(void) __ptr64" ?Execute@ClearLogCommand@@UEAAXXZ
0x14002753C: "public: void __cdecl RegistryPaths::SetRootPath(wchar_t const * __ptr64,wchar_t const * __ptr64) __ptr64" ?SetRootPath@RegistryPaths@@QEAAXPEB_W0@Z
0x14001C574: "public: bool __cdecl ChannelConfigReader::GetLogEnabled(bool & __ptr64)const __ptr64" ?GetLogEnabled@ChannelConfigReader@@QEBA_NAEA_N@Z
0x14003A9F8: "__cdecl TI3?AVGenericException@wmi@@" _TI3?AVGenericException@wmi@@
0x140031300: "attributes" ??_C@_1BG@OGCNDMFN@?$AAa?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAs?$AA?$AA@
0x14002F080: "const wmi::GenericException::`vftable'" ??_7GenericException@wmi@@6B@
0x140030FE8: "@name" ??_C@_1M@NPLEABDD@?$AA?$EA?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x1400320A8: "WEVT_TEMPLATE" ??_C@_1BM@CADLCGHE@?$AAW?$AAE?$AAV?$AAT?$AA_?$AAT?$AAE?$AAM?$AAP?$AAL?$AAA?$AAT?$AAE?$AA?$AA@
0x140031720: " Keyword" ??_C@_1BE@JNFIOLEH@?$AA?5?$AA?5?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x140020A0C: "private: class std::_Vector_iterator<class std::_Vector_val<struct std::_Simple_types<struct ChannelReference> > > __cdecl PublisherConfigWriteData::FindChannelReference(wchar_t const * __ptr64) __ptr64" ?FindChannelReference@PublisherConfigWriteData@@AEAA?AV?$_Vector_iterator@V?$_Vector_val@U?$_Simple_types@UChannelReference@@@std@@@std@@@std@@PEB_W@Z
0x140030BD0: "fileMax" ??_C@_1BA@JODCENKN@?$AAf?$AAi?$AAl?$AAe?$AAM?$AAa?$AAx?$AA?$AA@
0x140016CF8: "private: void __cdecl ManifestProcessor::ValidatePublisherAndChannelOwner(struct _GUID const & __ptr64,class StringSet const & __ptr64) __ptr64" ?ValidatePublisherAndChannelOwner@ManifestProcessor@@AEAAXAEBU_GUID@@AEBVStringSet@@@Z
0x14002F418: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x140001560: "public: virtual void * __ptr64 __cdecl wmi::GenericException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GGenericException@wmi@@UEAAPEAXI@Z
0x140002EB0: "public: struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@XZ
0x14002C400: "__cdecl _imp_load_EvtGetChannelConfigProperty" __imp_load_EvtGetChannelConfigProperty
0x14002FB18: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1400311D0: "flags" ??_C@_1M@PIKEIEDD@?$AAf?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14002BF7C: "__cdecl register_onexit_function" _register_onexit_function
0x140028524: "void __cdecl RegWriteMultiStringValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > const & __ptr64)" ?RegWriteMultiStringValue@@YAXPEAUHKEY__@@PEB_WAEBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
0x14002FAC8: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x14002B948: "__cdecl _scrt_exe_initialize_mta" __scrt_exe_initialize_mta
0x140032BD0: WPP_f0aa70ce40c0377619e83b8410cce757_Traceguids
0x140007040: "long __cdecl XmlGetElement(struct IXMLDOMNode * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64 * __ptr64)" ?XmlGetElement@@YAJPEAUIXMLDOMNode@@PEB_WPEAPEAUIXMLDOMElement@@@Z
0x14002F430: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x14002F878: "__cdecl _imp__o_setlocale" __imp__o_setlocale
0x14002F788: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14000D420: "private: void __cdecl GetPublisherCommand::GetPropertyOpcodeValue(wchar_t const * __ptr64,void * __ptr64,unsigned long,unsigned long) __ptr64" ?GetPropertyOpcodeValue@GetPublisherCommand@@AEAAXPEB_WPEAXKK@Z
0x14002FBB0: "__cdecl _xi_a" __xi_a
0x14001CDEC: "public: void __cdecl std::_Tree<class std::_Tmap_traits<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,struct _EVT_VARIANT,struct std::less<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID>,class std::allocator<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT> >,0> >::clear(void) __ptr64" ?clear@?$_Tree@V?$_Tmap_traits@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@U?$less@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@std@@V?$allocator@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@@4@$0A@@std@@@std@@QEAAXXZ
0x1400305C8: "a" ??_C@_13FNCBLAIF@?$AAa?$AA?$AA@
0x140030560: "username" ??_C@_1BC@OICKLDIK@?$AAu?$AAs?$AAe?$AAr?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x14002F630: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x140015218: "public: __cdecl ManifestProcessor::ManifestProcessor(wchar_t const * __ptr64,wchar_t const * __ptr64,bool,void * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool) __ptr64" ??0ManifestProcessor@@QEAA@PEB_W0_NPEAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@331@Z
0x140001560: "public: virtual void * __ptr64 __cdecl ChannelConfigException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GChannelConfigException@@UEAAPEAXI@Z
0x14002F780: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14002F438: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x14002F388: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x14002F450: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400308D8: "SelectionNamespaces" ??_C@_1CI@EDHDHMNK@?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAN?$AAa?$AAm?$AAe?$AAs?$AAp?$AAa?$AAc?$AAe?$AAs?$AA?$AA@
0x14002F7E8: "__cdecl _imp__itow_s" __imp__itow_s
0x140008880: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Insert_at<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@1@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@1@1@Z
0x14002AC8C: "private: unsigned long __cdecl ResourceHolder::ExtractAndLoadResource(wchar_t const * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64) __ptr64" ?ExtractAndLoadResource@ResourceHolder@@AEAAKPEB_W00@Z
0x140031420: WPP_58fdeb60da90370c4215c5c48b159cd8_Traceguids
0x140009818: "public: bool __cdecl std::less<void>::operator()<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64>(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ??$?RAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAV01@@?$less@X@std@@QEBA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
0x140026470: "public: virtual void * __ptr64 __cdecl ChannelConfigSnapshot::`vector deleting destructor'(unsigned int) __ptr64" ??_EChannelConfigSnapshot@@UEAAPEAXI@Z
0x1400251DC: "private: bool __cdecl ChannelConfigEnumerator::MoveFirstLegacy(void) __ptr64" ?MoveFirstLegacy@ChannelConfigEnumerator@@AEAA_NXZ
0x1400028A4: wmain
0x140013C98: "public: __cdecl ManifestProcessor::~ManifestProcessor(void) __ptr64" ??1ManifestProcessor@@QEAA@XZ
0x14002B5A0: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x14002BEB6: "__cdecl _p___argc" __p___argc
0x14002FA88: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140002EF0: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@Z
0x140028404: "void __cdecl RegWriteQWORDValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,unsigned __int64)" ?RegWriteQWORDValue@@YAXPEAUHKEY__@@PEB_W_K@Z
0x140032640: "O:BAG:BAD:(A;;0xffff;;;SY)(A;;0x" ??_C@_1OM@GLOPCABM@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAf?$AAf?$AAf?$AAf?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx@
0x140027BCC: "bool __cdecl RegReadDWORDValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,unsigned long & __ptr64)" ?RegReadDWORDValue@@YA_NPEAUHKEY__@@PEB_WAEAK@Z
0x140031228: "keyword" ??_C@_1BA@COLDKINJ@?$AAk?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x14002F228: "const QuerySnapshot::`vftable'" ??_7QuerySnapshot@@6B@
0x14002BF2E: "__cdecl o__crt_atexit" _o__crt_atexit
0x14000427C: "private: static void __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::_Xlength(void)" ?_Xlength@?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@CAXXZ
0x14002F6A0: "__cdecl _imp_RegCreateKeyTransactedW" __imp_RegCreateKeyTransactedW
0x14002B948: "__cdecl get_startup_new_mode" _get_startup_new_mode
0x14003AB00: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_1_dll
0x14002BB40: "__cdecl _scrt_is_managed_app" __scrt_is_managed_app
0x140041028: "__cdecl _imp_EvtOpenChannelConfig" __imp_EvtOpenChannelConfig
0x140031278: "lf" ??_C@_15CPEGDJKC@?$AAl?$AAf?$AA?$AA@
0x14002BBB0: "__cdecl _scrt_unhandled_exception_filter" __scrt_unhandled_exception_filter
0x140030D38: "Config" ??_C@_1O@BJPKKLLM@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x140031050: "GM" ??_C@_15DFBOOEGI@?$AAG?$AAM?$AA?$AA@
0x14002BF0A: "__cdecl o__cexit" _o__cexit
0x140025168: "public: __cdecl ChannelConfigEnumerator::ChannelConfigEnumerator(struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0ChannelConfigEnumerator@@QEAA@PEAUHKEY__@@PEB_W@Z
0x14001BCEC: "public: virtual __cdecl ChannelConfigReader::~ChannelConfigReader(void) __ptr64" ??1ChannelConfigReader@@UEAA@XZ
0x14002BF46: "__cdecl o__get_initial_wide_environment" _o__get_initial_wide_environment
0x14001AFFC: WPP_SF_DS
0x140030020: "ext-ms-win-security-credui-l1-1-" ??_C@_1EE@KCHBBNHO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAr?$AAe?$AAd?$AAu?$AAi?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x140030134: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x140030168: "gp" ??_C@_15DAPDMBCC@?$AAg?$AAp?$AA?$AA@
0x140002E70: "public: struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@XZ
0x140031F78: "latency" ??_C@_1BA@NBEBNBGO@?$AAl?$AAa?$AAt?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x140033468: "MS-WEVT" ??_C@_07BBFFGDOO@MS?9WEVT?$AA@
0x14002F970: "__cdecl _imp__register_thread_local_exe_atexit_callback" __imp__register_thread_local_exe_atexit_callback
0x140030AB8: "channelAccess" ??_C@_1BM@JGMILINP@?$AAc?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x14003E000: WPP_GLOBAL_Control
0x14002BFC4: "__cdecl o_terminate" _o_terminate
0x140041048: "__cdecl _imp_EvtOpenSession" __imp_EvtOpenSession
0x14000427C: "private: static void __cdecl std::vector<void * __ptr64,class std::allocator<void * __ptr64> >::_Xlength(void)" ?_Xlength@?$vector@PEAXV?$allocator@PEAX@std@@@std@@CAXXZ
0x140041080: "__cdecl _imp_EvtFormatMessage" __imp_EvtFormatMessage
0x140030650: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14003B27C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14003B2CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x140001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x14002F5C0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x14002F8F0: "__cdecl _imp__o___p__commode" __imp__o___p__commode
0x14002C599: "__cdecl _imp_load_EvtOpenPublisherMetadata" __imp_load_EvtOpenPublisherMetadata
0x1400300F0: WPP_ThisDir_CTLGUID_CtlGuid
0x14001FA78: "public: __cdecl PublisherConfigReader::PublisherConfigReader(struct _GUID const & __ptr64,struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0PublisherConfigReader@@QEAA@AEBU_GUID@@PEAUHKEY__@@PEB_W@Z
0x140001300: WPP_SF_d
0x140001300: WPP_SF_D
0x14002F540: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x14001CFB0: "public: __cdecl ChannelConfigException::ChannelConfigException(unsigned long) __ptr64" ??0ChannelConfigException@@QEAA@K@Z
0x140013E68: "public: void __cdecl std::allocator<struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> >::deallocate(struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@2@_K@Z
0x140002FDC: "public: __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::~basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >(void) __ptr64" ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ
0x14002F890: "__cdecl _imp_towupper" __imp_towupper
0x14001F4FC: "public: class wmi::AutoRef<class PublisherConfigReader> __cdecl PublisherConfigEnumerator::GetCurrentReader(void) __ptr64" ?GetCurrentReader@PublisherConfigEnumerator@@QEAA?AV?$AutoRef@VPublisherConfigReader@@@wmi@@XZ
0x140007DD0: "public: wchar_t const * __ptr64 __cdecl CommandArguments::GetArgument(int)const __ptr64" ?GetArgument@CommandArguments@@QEBAPEB_WH@Z
0x140002B2C: "private: void __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::_Tidy(void) __ptr64" ?_Tidy@?$vector@_WV?$allocator@_W@std@@@std@@AEAAXXZ
0x1400152C8: "private: void __cdecl ManifestProcessor::ProcessChannelLogConfig(class AbstractDomElement & __ptr64,class ChannelConfigWriter & __ptr64,class ChannelConfigWriteData & __ptr64) __ptr64" ?ProcessChannelLogConfig@ManifestProcessor@@AEAAXAEAVAbstractDomElement@@AEAVChannelConfigWriter@@AEAVChannelConfigWriteData@@@Z
0x14001C648: "public: bool __cdecl ChannelConfigReader::GetMaxSize(unsigned __int64 & __ptr64)const __ptr64" ?GetMaxSize@ChannelConfigReader@@QEBA_NAEA_K@Z
0x14002AB1C: "public: unsigned long __cdecl ResourceHolder::Open(wchar_t const * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct _GUID const * __ptr64,bool) __ptr64" ?Open@ResourceHolder@@QEAAKPEB_W00PEBU_GUID@@_N@Z
0x140032100: "access_check" ??_C@_1BK@MAFNMJJG@?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA_?$AAc?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x14003EBA0: "__cdecl _hmod__ext_ms_win_security_credui_l1_1_0_dll" __hmod__ext_ms_win_security_credui_l1_1_0_dll
0x140032DA0: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x14002B980: "__cdecl initialize_invalid_parameter_handler" _initialize_invalid_parameter_handler
0x1400044F0: "unsigned long __cdecl GetPublisherProperty(void * __ptr64,enum _EVT_PUBLISHER_METADATA_PROPERTY_ID,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64,struct _EVT_VARIANT * __ptr64 & __ptr64)" ?GetPublisherProperty@@YAKPEAXW4_EVT_PUBLISHER_METADATA_PROPERTY_ID@@AEAV?$vector@EV?$allocator@E@std@@@std@@AEAPEAU_EVT_VARIANT@@@Z
0x14002F3B0: "__cdecl _imp_VariantClear" __imp_VariantClear
0x14002F420: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x14002F110: "const GetLogInfoCommand::`vftable'" ??_7GetLogInfoCommand@@6B@
0x14002BC84: "__cdecl _isa_available_init" __isa_available_init
0x14002F7E8: "__cdecl _imp__o__itow_s" __imp__o__itow_s
0x14001AB60: "protected: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > __cdecl std::_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Insert_at<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::_Not_a_node_tag>(bool,struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_at@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U_Not_a_node_tag@2@@?$_Tree@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@1@$$QEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@U_Not_a_node_tag@1@@Z
0x1400045D0: "unsigned long __cdecl GetChannelProperty(void * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64,struct _EVT_VARIANT * __ptr64 & __ptr64)" ?GetChannelProperty@@YAKPEAXW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@AEAV?$vector@EV?$allocator@E@std@@@std@@AEAPEAU_EVT_VARIANT@@@Z
0x1400013F0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x14002A45C: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x140010FD0: "public: void * __ptr64 __cdecl QueryLogCommand::PublisherCache::Open(void * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,wchar_t const * __ptr64,unsigned long) __ptr64" ?Open@PublisherCache@QueryLogCommand@@QEAAPEAXPEAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEB_WK@Z
0x140030B78: "retention" ??_C@_1BE@CGAAOCHA@?$AAr?$AAe?$AAt?$AAe?$AAn?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002B93C: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x14000C73C: "private: void __cdecl GetPublisherCommand::PrintMessage(wchar_t const * __ptr64,void * __ptr64,unsigned long) __ptr64" ?PrintMessage@GetPublisherCommand@@AEAAXPEB_WPEAXK@Z
0x140031058: "Format" ??_C@_1O@FDFOMCPN@?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AA?$AA@
0x1400306E0: "%4.4hd-%2.2hd-%2.2hdT%2.2hd:%2.2" ??_C@_1GE@JILJJKLG@?$AA?$CF?$AA4?$AA?4?$AA4?$AAh?$AAd?$AA?9?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AA?9?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AAT?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AA?3?$AA?$CF?$AA2?$AA?4?$AA2@
0x14002FA68: "__cdecl _imp_GetSecurityDescriptorGroup" __imp_GetSecurityDescriptorGroup
0x14002F008: "const type_info::`vftable'" ??_7type_info@@6B@
0x14003B114: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1400355C0: "__cdecl _rtc_izz" __rtc_izz
0x14002C412: "__cdecl _imp_load_EvtGetObjectArrayProperty" __imp_load_EvtGetObjectArrayProperty
0x14002F8E0: "__cdecl _imp__o___stdio_common_vsnwprintf_s" __imp__o___stdio_common_vsnwprintf_s
0x140009AF0: "public: virtual void __cdecl GetChannelCommand::Init(void) __ptr64" ?Init@GetChannelCommand@@UEAAXXZ
0x14002F798: "__cdecl _imp_SystemTimeToTzSpecificLocalTime" __imp_SystemTimeToTzSpecificLocalTime
0x14002F748: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x14002B350: "__cdecl _security_check_cookie" __security_check_cookie
0x14002F230: "const ChannelConfigSnapshot::`vftable'" ??_7ChannelConfigSnapshot@@6B@
0x14002FBA8: "__cdecl _xc_z" __xc_z
0x14001C818: "public: bool __cdecl ChannelConfigReader::GetAutoBackup(bool & __ptr64)const __ptr64" ?GetAutoBackup@ChannelConfigReader@@QEBA_NAEA_N@Z
0x14001B084: "struct WinMetaChannel * __ptr64 __cdecl FindWinMetaChannel(wchar_t const * __ptr64)" ?FindWinMetaChannel@@YAPEAUWinMetaChannel@@PEB_W@Z
0x140031600: "Event[%d]:
" ??_C@_1BK@MIKNJCBJ@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x140033360: "ETWAutoLoggerPath" ??_C@_1CE@NMNLGNJL@?$AAE?$AAT?$AAW?$AAA?$AAu?$AAt?$AAo?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14003B240: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x14003EE38: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x14002F620: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140030C00: "keywords" ??_C@_1BC@PBHNHEEN@?$AAk?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x14002F558: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14002C5AB: "__cdecl _imp_load_EvtOpenLog" __imp_load_EvtOpenLog
0x14002C52D: "__cdecl _imp_load_EvtSaveChannelConfig" __imp_load_EvtSaveChannelConfig
0x14002FDA8: IID_IXMLDOMElement
0x140030460: "<?xml version="1.0" encoding="UT" ??_C@_1FE@BENCHEIN@?$AA?$DM?$AA?$DP?$AAx?$AAm?$AAl?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$DN?$AA?$CC?$AA1?$AA?4?$AA0?$AA?$CC?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAd?$AAi?$AAn?$AAg?$AA?$DN?$AA?$CC?$AAU?$AAT@
0x140041058: "__cdecl _imp_EvtQuery" __imp_EvtQuery
0x14002F8E8: "__cdecl _imp___stdio_common_vfwprintf" __imp___stdio_common_vfwprintf
0x140024B24: "public: void __cdecl PublisherConfigWriter::Save(void) __ptr64" ?Save@PublisherConfigWriter@@QEAAXXZ
0x14002F0E0: "const QueryLogCommand::`vftable'" ??_7QueryLogCommand@@6B@
0x140013D80: "public: __cdecl wmi::AutoRef<class AbstractDomElementList>::~AutoRef<class AbstractDomElementList>(void) __ptr64" ??1?$AutoRef@VAbstractDomElementList@@@wmi@@QEAA@XZ
0x140030A30: "Custom" ??_C@_1O@KKPPJBFG@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x14002F7E0: "__cdecl _imp__invalid_parameter_noinfo_noreturn" __imp__invalid_parameter_noinfo_noreturn
0x140011BCC: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Insert_nohint<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64>(bool,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@1@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@1@@Z
0x140030290: "install-manifest" ??_C@_1CC@EOCLILIO@?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?9?$AAm?$AAa?$AAn?$AAi?$AAf?$AAe?$AAs?$AAt?$AA?$AA@
0x140031910: "/events:instrumentationManifest/" ??_C@_1IK@BFJMJGEB@?$AA?1?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?3?$AAi?$AAn?$AAs?$AAt?$AAr?$AAu?$AAm?$AAe?$AAn?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAi?$AAf?$AAe?$AAs?$AAt?$AA?1@
0x14002F908: "__cdecl _imp___acrt_iob_func" __imp___acrt_iob_func
0x1400317D8: "fromwow64" ??_C@_1BE@GAPMMHPH@?$AAf?$AAr?$AAo?$AAm?$AAw?$AAo?$AAw?$AA6?$AA4?$AA?$AA@
0x1400142A0: "public: virtual class wmi::AutoRef<class AbstractDomElement> __cdecl MsxmlDomElement::GetSingleSubElement(wchar_t const * __ptr64) __ptr64" ?GetSingleSubElement@MsxmlDomElement@@UEAA?AV?$AutoRef@VAbstractDomElement@@@wmi@@PEB_W@Z
0x140028E20: "public: virtual unsigned char * __ptr64 __cdecl Buffer::GetCurrentBufferPtr(void)const __ptr64" ?GetCurrentBufferPtr@Buffer@@UEBAQEAEXZ
0x14002C875: "__cdecl CxxThrowException" _CxxThrowException
0x140030684: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x14001A70C: "protected: struct std::pair<class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > >,bool> __cdecl std::_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Insert_nohint<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::_Not_a_node_tag>(bool,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_nohint@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U_Not_a_node_tag@2@@?$_Tree@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@@std@@_N@1@_N$$QEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@U_Not_a_node_tag@1@@Z
0x14000328C: "public: wchar_t const * __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::c_str(void)const __ptr64" ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAPEB_WXZ
0x14002F858: "__cdecl _imp_fflush" __imp_fflush
0x14003AAE0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_0_dll
0x140035173: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x14001F4A0: "public: virtual void * __ptr64 __cdecl PublisherConfigEnumerator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPublisherConfigEnumerator@@UEAAPEAXI@Z
0x14002F1B8: "const wmi::RefBase::`vftable'" ??_7RefBase@wmi@@6B@
0x140031288: "creationTime" ??_C@_1BK@CODDIDAM@?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x14002F3F8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140028BA4: "public: unsigned char * __ptr64 __cdecl std::vector<unsigned char,class std::allocator<unsigned char> >::_Emplace_reallocate<unsigned char>(unsigned char * __ptr64 const,unsigned char &&) __ptr64" ??$_Emplace_reallocate@E@?$vector@EV?$allocator@E@std@@@std@@QEAAPEAEQEAE$$QEAE@Z
0x140030B50: "logging" ??_C@_1BA@GDDEFBLE@?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?$AA@
0x14002F778: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400066C4: "public: __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::~basic_string<char,struct std::char_traits<char>,class std::allocator<char> >(void) __ptr64" ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
0x14002AC5C: "private: bool __cdecl ResourceHolder::ValidateBytes(unsigned long,unsigned long)const __ptr64" ?ValidateBytes@ResourceHolder@@AEBA_NKK@Z
0x140025770: "public: virtual void * __ptr64 __cdecl QuerySnapshot::`vector deleting destructor'(unsigned int) __ptr64" ??_EQuerySnapshot@@UEAAPEAXI@Z
0x14002F8B0: "__cdecl _imp__o__configure_wide_argv" __imp__o__configure_wide_argv
0x14001F60C: "public: void __cdecl PublisherConfigEnumerator::GetCurrentPublisherId(struct _GUID & __ptr64) __ptr64" ?GetCurrentPublisherId@PublisherConfigEnumerator@@QEAAXAEAU_GUID@@@Z
0x1400313D4: "q" ??_C@_13NDIOHBK@?$AAq?$AA?$AA@
0x140032D18: WPP_04de9896575334afece72d19bbc8f9fc_Traceguids
0x14002C436: "__cdecl _imp_load_EvtRender" __imp_load_EvtRender
0x140030210: "get-loginfo" ??_C@_1BI@NOCNPBCP@?$AAg?$AAe?$AAt?$AA?9?$AAl?$AAo?$AAg?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x14002F5D0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x14002C53F: "__cdecl _imp_load_EvtOpenPublisherEnum" __imp_load_EvtOpenPublisherEnum
0x14002F508: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400030CC: "public: void __cdecl std::allocator<wchar_t>::deallocate(wchar_t * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@_W@std@@QEAAXQEA_W_K@Z
0x14002FA98: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x140032A70: "EnableLevel" ??_C@_1BI@GEJCFFBF@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14002F440: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x14002C230: IsEvtExportLogPresent
0x1400309C8: "Operational" ??_C@_1BI@DMCHOPMO@?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x14002F808: "__cdecl _imp__set_app_type" __imp__set_app_type
0x14002F4D8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400015AC: "public: __cdecl wmi::GenericException::GenericException(unsigned long,char const * __ptr64,int) __ptr64" ??0GenericException@wmi@@QEAA@KPEBDH@Z
0x14001F8A0: "public: virtual bool __cdecl ConfigEnumerator::MoveNext(void) __ptr64" ?MoveNext@ConfigEnumerator@@UEAA_NXZ
0x140030508: ">
" ??_C@_17NJLJJCGD@?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x14002AAA4: "private: unsigned long __cdecl ResourceHolder::ValidateProviderEntry(struct ProviderWrapper const * __ptr64,unsigned __int64)const __ptr64" ?ValidateProviderEntry@ResourceHolder@@AEBAKPEBUProviderWrapper@@_K@Z
0x140031738: " User: %s
" ??_C@_1BK@LOEFAPF@?$AA?5?$AA?5?$AAU?$AAs?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x140013E80: "public: virtual void * __ptr64 __cdecl wmi::RefBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GRefBase@wmi@@UEAAPEAXI@Z
0x14002B390: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140030F38: "ns:publishing/ns:keywords" ??_C@_1DE@GLKAEAJH@?$AAn?$AAs?$AA?3?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAk?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x14002F918: "__cdecl _imp__errno" __imp__errno
0x140030CB8: "MaxSize" ??_C@_1BA@DMCCDGBB@?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1400329E0: "OwningChannel" ??_C@_1BM@GMBCGAOC@?$AAO?$AAw?$AAn?$AAi?$AAn?$AAg?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AA?$AA@
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMAttribute>::~CComPtr<struct IXMLDOMAttribute>(void) __ptr64" ??1?$CComPtr@UIXMLDOMAttribute@@@ATL@@QEAA@XZ
0x1400140D0: "public: virtual wchar_t const * __ptr64 __cdecl MsxmlDomElement::GetLocalName(void) __ptr64" ?GetLocalName@MsxmlDomElement@@UEAAPEB_WXZ
0x14002F5B8: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x140032540: "MessageFileName" ??_C@_1CA@INHOIAMP@?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140024688: "public: __cdecl PublisherConfigWriter::PublisherConfigWriter(struct _GUID const & __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64,wchar_t const * __ptr64,void * __ptr64) __ptr64" ??0PublisherConfigWriter@@QEAA@AEBU_GUID@@KPEAU_SECURITY_ATTRIBUTES@@PEAUHKEY__@@PEB_WPEAX@Z
0x1400147E0: "public: virtual class wmi::AutoRef<class AbstractDomElement> __cdecl MsxmlDomElementList::Next(void) __ptr64" ?Next@MsxmlDomElementList@@UEAA?AV?$AutoRef@VAbstractDomElement@@@wmi@@XZ
0x140041060: "__cdecl _imp_EvtOpenPublisherMetadata" __imp_EvtOpenPublisherMetadata
0x140032B90: "onecore\admin\wmi\events\config\" ??_C@_0DK@MHJILBDP@onecore?2admin?2wmi?2events?2config?2@
0x140001560: "public: virtual void * __ptr64 __cdecl wmi::GenericException::`vector deleting destructor'(unsigned int) __ptr64" ??_EGenericException@wmi@@UEAAPEAXI@Z
0x14002847C: "void __cdecl RegWriteStringValue(struct HKEY__ * __ptr64,wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ?RegWriteStringValue@@YAXPEAUHKEY__@@PEB_WAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14001BDA8: "public: __cdecl ChannelPolicyInfo::~ChannelPolicyInfo(void) __ptr64" ??1ChannelPolicyInfo@@QEAA@XZ
0x140002F7C: "public: void __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Freenode0(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@Z
0x1400206D8: "public: void __cdecl std::allocator<struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,void * __ptr64> >::deallocate(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@PEAX@2@_K@Z
0x14001CF0C: "public: void __cdecl std::allocator<struct std::_Tree_node<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT>,void * __ptr64> >::deallocate(struct std::_Tree_node<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT>,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@PEAX@2@_K@Z
0x140033490: "__stdcall _xmm" __xmm@00000000000000070000000000000000
0x140032038: "{unknown}" ??_C@_1BE@BGJPPAHM@?$AA?$HL?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$HN?$AA?$AA@
0x14002F6C8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140002F68: "public: void __cdecl std::allocator<struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> >::deallocate(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@_K@Z
0x140032328: "MaxBuffers" ??_C@_1BG@IAOHPDAO@?$AAM?$AAa?$AAx?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x1400189AC: "private: void __cdecl ManifestProcessor::RetractChannel(class ChannelConfigEnumerator & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool,class StringSet const & __ptr64) __ptr64" ?RetractChannel@ManifestProcessor@@AEAAXAEAVChannelConfigEnumerator@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAEBVStringSet@@@Z
0x14002FBE8: "__cdecl _xp_z" __xp_z
0x1400332A0: "O:BAG:SYD:(A;;0xf0005;;;SY)(A;;0" ??_C@_1IA@PMGFGDKB@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAf?$AA0?$AA0?$AA0?$AA5?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0@
0x140018CC4: "private: void __cdecl ManifestProcessor::RetractProviderNode(class AbstractDomElement & __ptr64,class StringSet const & __ptr64) __ptr64" ?RetractProviderNode@ManifestProcessor@@AEAAXAEAVAbstractDomElement@@AEBVStringSet@@@Z
0x1400279C0: "bool __cdecl IsCoreChannel(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ?IsCoreChannel@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140001560: "public: virtual void * __ptr64 __cdecl ChannelConfigException::`vector deleting destructor'(unsigned int) __ptr64" ??_EChannelConfigException@@UEAAPEAXI@Z
0x14002F808: "__cdecl _imp__o__set_app_type" __imp__o__set_app_type
0x14002F810: "__cdecl _imp__o__set_fmode" __imp__o__set_fmode
0x14002F6F8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x14001BF58: "public: __cdecl ChannelConfigReader::ChannelConfigReader(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0ChannelConfigReader@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAUHKEY__@@PEB_W@Z
0x140019D3C: "public: void __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Freenode0(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_comp_alloc@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@QEAAXPEAU?$_Tree_node@KPEAX@2@@Z
0x140030790: WPP_4c04fca22dec35fe4a6b4e09431bc995_Traceguids
0x14003B2A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140026470: "public: virtual void * __ptr64 __cdecl ChannelConfigSnapshot::`scalar deleting destructor'(unsigned int) __ptr64" ??_GChannelConfigSnapshot@@UEAAPEAXI@Z
0x14003209C: "#1" ??_C@_15IHJCLGAA@?$AA?$CD?$AA1?$AA?$AA@
0x1400115E4: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Insert_hint<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> > > >,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@std@@@std@@@1@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@1@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@1@@Z
0x14001083C: "private: void __cdecl QueryLogCommand::PrintEventText(void * __ptr64) __ptr64" ?PrintEventText@QueryLogCommand@@AEAAXPEAX@Z
0x14003B3E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x14002F640: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400355D0: "__cdecl _rtc_tzz" __rtc_tzz
0x140017180: "public: virtual __cdecl ConfigEnumerator::~ConfigEnumerator(void) __ptr64" ??1ConfigEnumerator@@UEAA@XZ
0x14002FC00: "__cdecl _guard_fids_table" __guard_fids_table
0x14002F898: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x140013D80: "public: __cdecl wmi::AutoRef<class AbstractDomAttribute>::~AutoRef<class AbstractDomAttribute>(void) __ptr64" ??1?$AutoRef@VAbstractDomAttribute@@@wmi@@QEAA@XZ
0x140032950: "MaximumBuffers" ??_C@_1BO@EMFAPBIG@?$AAM?$AAa?$AAx?$AAi?$AAm?$AAu?$AAm?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x14002F280: "__cdecl load_config_used" _load_config_used
0x14002F1F8: "const PublisherConfigEnumerator::`vftable'" ??_7PublisherConfigEnumerator@@6B@
0x14002875C: "unsigned long __cdecl RegDeleteKeyRecursive(struct HKEY__ * __ptr64,wchar_t const * __ptr64)" ?RegDeleteKeyRecursive@@YAKPEAUHKEY__@@PEB_W@Z
0x140031318: "numberOfLogRecords" ??_C@_1CG@NFCGBAAI@?$AAn?$AAu?$AAm?$AAb?$AAe?$AAr?$AAO?$AAf?$AAL?$AAo?$AAg?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x14003AB20: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_3_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_3_dll
0x14003AA50: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x14002BEDA: "__cdecl o___stdio_common_vfwprintf" _o___stdio_common_vfwprintf
0x14002C51B: "__cdecl _imp_load_EvtSetChannelConfigProperty" __imp_load_EvtSetChannelConfigProperty
0x14003A9A8: "__cdecl CT??_R0?AVException@wmi@@@8??0Exception@wmi@@QEAA@AEBV01@@Z16" _CT??_R0?AVException@wmi@@@8??0Exception@wmi@@QEAA@AEBV01@@Z16
0x1400325F0: "onecore\admin\wmi\events\config\" ??_C@_0DN@LMNHIGMA@onecore?2admin?2wmi?2events?2config?2@
0x14003B22C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x140030550: "unicode" ??_C@_1BA@OIEABBIM@?$AAu?$AAn?$AAi?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x14001049C: "private: void __cdecl QueryLogCommand::PrintEventXml(void * __ptr64) __ptr64" ?PrintEventXml@QueryLogCommand@@AEAAXPEAX@Z
0x14002C363: "__cdecl _imp_load_EvtGetPublisherMetadataProperty" __imp_load_EvtGetPublisherMetadataProperty
0x14002BFAC: "__cdecl set_new_mode" _set_new_mode
0x1400410E0: "__cdecl _imp_EvtArchiveExportedLog" __imp_EvtArchiveExportedLog
0x14000F190: "public: virtual void __cdecl QueryLogCommand::Init(void) __ptr64" ?Init@QueryLogCommand@@UEAAXXZ
0x140014630: "public: virtual class wmi::AutoRef<class AbstractDomAttribute> __cdecl MsxmlDomElement::GetSingleAttribute(wchar_t const * __ptr64) __ptr64" ?GetSingleAttribute@MsxmlDomElement@@UEAA?AV?$AutoRef@VAbstractDomAttribute@@@wmi@@PEB_W@Z
0x14002F458: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x14002F448: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140015034: "unsigned long __cdecl MyRetractConfig(wchar_t const * __ptr64,unsigned long)" ?MyRetractConfig@@YAKPEB_WK@Z
0x1400315B0: "Failed to render events. Error=%" ??_C@_1EM@KFLEAELE@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?4?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$DN?$AA?$CF@
0x14002BF3A: "__cdecl o__exit" _o__exit
0x140031FB0: "ntfs" ??_C@_19FMGGNPBF@?$AAn?$AAt?$AAf?$AAs?$AA?$AA@
0x1400120B0: "public: virtual void __cdecl InstallManifestCommand::Init(void) __ptr64" ?Init@InstallManifestCommand@@UEAAXXZ
0x14002FFD0: "ext-ms-win-security-credui-l1-1-" ??_C@_1EE@BKMNHKBL@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAr?$AAe?$AAd?$AAu?$AAi?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x14001AF1C: "public: __cdecl wmi::AutoHandle::~AutoHandle(void) __ptr64" ??1AutoHandle@wmi@@QEAA@XZ
0x140005AF8: "void __cdecl ReadBinaryFile(wchar_t const * __ptr64,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64)" ?ReadBinaryFile@@YAXPEB_WAEAV?$vector@EV?$allocator@E@std@@@std@@@Z
0x1400331D0: WPP_11cb43f3ed153cb209c297942c67b71a_Traceguids
0x140030D48: "C" ??_C@_13FHBKNHDA@?$AAC?$AA?$AA@
0x14002FBD0: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x14002FEF0: "ext-ms-win-wevtapi-eventlog-l1-1" ??_C@_1EG@NKAJBGEJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x14002F868: "__cdecl _imp_getwc" __imp_getwc
0x1400064CC: "public: void __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::resize(unsigned __int64,wchar_t) __ptr64" ?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAX_K_W@Z
0x14000320C: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::assign(wchar_t const * __ptr64 const) __ptr64" ?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@QEB_W@Z
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMNode>::~CComPtr<struct IXMLDOMNode>(void) __ptr64" ??1?$CComPtr@UIXMLDOMNode@@@ATL@@QEAA@XZ
0x140030348: "Error = 0x%x.
" ??_C@_1CA@PCPAFGGM@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?4?$AA?$AN?$AA?6?$AA?$AA@
0x140032DB0: WPP_48a599d3c016387b90d9b41904dd78be_Traceguids
0x14002F888: "__cdecl _imp_toupper" __imp_toupper
0x140032BF0: "onecore\admin\wmi\events\config\" ??_C@_0CP@PAGJOKCG@onecore?2admin?2wmi?2events?2config?2@
0x140030760: "onecore\admin\wmi\events\wevtuti" ??_C@_0CO@MPCODHDB@onecore?2admin?2wmi?2events?2wevtuti@
0x14000EF20: "public: virtual void __cdecl ArchiveLogCommand::Init(void) __ptr64" ?Init@ArchiveLogCommand@@UEAAXXZ
0x14000CBB0: "private: void __cdecl GetPublisherCommand::GetPropertyEventMetadata(wchar_t const * __ptr64,void * __ptr64,void * __ptr64,enum _EVT_EVENT_METADATA_PROPERTY_ID,unsigned long,wchar_t const * __ptr64) __ptr64" ?GetPropertyEventMetadata@GetPublisherCommand@@AEAAXPEB_WPEAX1W4_EVT_EVENT_METADATA_PROPERTY_ID@@K0@Z
0x14002F8B8: "__cdecl _imp__configthreadlocale" __imp__configthreadlocale
0x14003B150: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400046B4: "unsigned long __cdecl GetArrayProperty(void * __ptr64,unsigned long,unsigned long,class std::vector<unsigned char,class std::allocator<unsigned char> > & __ptr64,struct _EVT_VARIANT * __ptr64 & __ptr64)" ?GetArrayProperty@@YAKPEAXKKAEAV?$vector@EV?$allocator@E@std@@@std@@AEAPEAU_EVT_VARIANT@@@Z
0x140032398: "KeywordsUpper" ??_C@_1BM@GCCGMHKP@?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AAs?$AAU?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x140013DC4: "public: struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@2@XZ
0x14002F7E0: "__cdecl _imp__o__invalid_parameter_noinfo_noreturn" __imp__o__invalid_parameter_noinfo_noreturn
0x140001530: "public: virtual char const * __ptr64 __cdecl wmi::GenericException::GetFileName(void)const __ptr64" ?GetFileName@GenericException@wmi@@UEBAPEBDXZ
0x140024AD4: "public: __cdecl PublisherConfigWriteData::~PublisherConfigWriteData(void) __ptr64" ??1PublisherConfigWriteData@@QEAA@XZ
0x140031850: "mf" ??_C@_15OEBKOKAH@?$AAm?$AAf?$AA?$AA@
0x140030968: "Text" ??_C@_19DHKNKHAD@?$AAT?$AAe?$AAx?$AAt?$AA?$AA@
0x140031E60: "0123456789abcdef" ??_C@_0BB@JCEFLFJE@0123456789abcdef?$AA@
0x14003E3F0: "__vectorcall ??_R0?AVtype_info@" ??_R0?AVtype_info@@@8
0x14002F8D0: "__cdecl _imp__o___stdio_common_vswscanf" __imp__o___stdio_common_vswscanf
0x14003187C: "pf" ??_C@_15FLFCPLEC@?$AAp?$AAf?$AA?$AA@
0x14002B9B0: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x14003AA70: "__cdecl CTA4?AVChannelConfigException@@" _CTA4?AVChannelConfigException@@
0x140030990: WPP_0ca2e03108bc3923b18c64dcfd76fb76_Traceguids
0x140030D10: "ChannelAccess" ??_C@_1BM@KAHHBLHP@?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x140032518: "ResourceFileName" ??_C@_1CC@FLEKKOFH@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140030D88: "y" ??_C@_13MIIMMPPF@?$AAy?$AA?$AA@
0x140005080: "public: wchar_t * __ptr64 __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::_Emplace_reallocate<wchar_t>(wchar_t * __ptr64 const,wchar_t &&) __ptr64" ??$_Emplace_reallocate@_W@?$vector@_WV?$allocator@_W@std@@@std@@QEAAPEA_WQEA_W$$QEA_W@Z
0x140032280: "AutoBackupLogFiles" ??_C@_1CG@FLDDLFFL@?$AAA?$AAu?$AAt?$AAo?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14002FAC0: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x14002F7B8: "__cdecl _imp_Wow64RevertWow64FsRedirection" __imp_Wow64RevertWow64FsRedirection
0x1400199B8: ??1?$unique_any@U?$handle_traits@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@Z$0A@@tlx@@@tlx@@QEAA@XZ
0x140006728: "void __cdecl DumpErrorInfo(struct IXMLDOMParseError * __ptr64,wchar_t const * __ptr64)" ?DumpErrorInfo@@YAXPEAUIXMLDOMParseError@@PEB_W@Z
0x140030A20: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14002F790: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x140013EB4: "public: virtual __cdecl wmi::RefBase::~RefBase(void) __ptr64" ??1RefBase@wmi@@UEAA@XZ
0x140030A60: "enabled" ??_C@_1BA@BKMGIBPB@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14001CF20: "public: __cdecl ChannelConfigData::~ChannelConfigData(void) __ptr64" ??1ChannelConfigData@@QEAA@XZ
0x14002C1DC: IsEvtArchiveExportedLogPresent
0x140030D5C: "Q" ??_C@_13KNAKEICE@?$AAQ?$AA?$AA@
0x14002C660: IsCredUICmdLinePromptForCredentialsWPresent
0x14002F6B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14003E438: "__vectorcall ??_R0?AVException@wmi@" ??_R0?AVException@wmi@@@8
0x140031118: "guid" ??_C@_19FAEBCJLC@?$AAg?$AAu?$AAi?$AAd?$AA?$AA@
0x14002F638: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14003B0D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x140030E84: "ms" ??_C@_15IDNNENKK@?$AAm?$AAs?$AA?$AA@
0x140032378: "KeywordsLower" ??_C@_1BM@CPPHMDLO@?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AAs?$AAL?$AAo?$AAw?$AAe?$AAr?$AA?$AA@
0x140030DA4: "e" ??_C@_13NCEDCHNC@?$AAe?$AA?$AA@
0x14002BECE: "__cdecl _p__commode" __p__commode
0x140035058: "__vectorcall ??_R1A@?0A@EA@type_info" ??_R1A@?0A@EA@type_info@@8
0x14001E8E8: "public: void __cdecl ChannelConfigWriter::Save(bool) __ptr64" ?Save@ChannelConfigWriter@@QEAAX_N@Z
0x14002595C: "public: __cdecl ChannelPublishingConfigData::ChannelPublishingConfigData(class ChannelConfigReader const & __ptr64) __ptr64" ??0ChannelPublishingConfigData@@QEAA@AEBVChannelConfigReader@@@Z
0x14002F120: "const GetPublisherCommand::`vftable'" ??_7GetPublisherCommand@@6B@
0x140041118: "__cdecl _imp_EvtGetObjectArrayProperty" __imp_EvtGetObjectArrayProperty
0x14000C680: "public: virtual void __cdecl GetPublisherCommand::Init(void) __ptr64" ?Init@GetPublisherCommand@@UEAAXXZ
0x140033448: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1400266D8: "long __cdecl StringCchVPrintfExW(wchar_t * __ptr64,unsigned __int64,wchar_t * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,wchar_t const * __ptr64,char * __ptr64)" ?StringCchVPrintfExW@@YAJPEA_W_KPEAPEA_WPEA_KKPEB_WPEAD@Z
0x14002C587: "__cdecl _imp_load_EvtNextEventMetadata" __imp_load_EvtNextEventMetadata
0x140030758: "%s
" ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14003EE40: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x14002FE50: "ext-ms-win-wevtapi-eventlog-l1-1" ??_C@_1EG@HAAANOMC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x14002F818: "__cdecl _imp__o__set_new_mode" __imp__o__set_new_mode
0x14002C750: ApiSetQueryApiSetPresence
0x1400410B8: "__cdecl _imp_EvtNextEventMetadata" __imp_EvtNextEventMetadata
0x140032008: "access" ??_C@_1O@DGLNDHCO@?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1400197AC: "public: void __cdecl ManifestProcessor::Retract(class AbstractDomElement & __ptr64,class StringSet const & __ptr64) __ptr64" ?Retract@ManifestProcessor@@QEAAXAEAVAbstractDomElement@@AEBVStringSet@@@Z
0x14003AB40: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_wevtapi_eventlog_l1_1_2_dll
0x14002F7D8: "__cdecl _imp__initialize_wide_environment" __imp__initialize_wide_environment
0x14001F4A0: "public: virtual void * __ptr64 __cdecl PublisherConfigEnumerator::`vector deleting destructor'(unsigned int) __ptr64" ??_EPublisherConfigEnumerator@@UEAAPEAXI@Z
0x14001F800: "public: virtual bool __cdecl ConfigEnumerator::MoveFirst(void) __ptr64" ?MoveFirst@ConfigEnumerator@@UEAA_NXZ
0x14002F130: "const EnumPublisherCommand::`vftable'" ??_7EnumPublisherCommand@@6B@
0x14000B2FC: "private: void __cdecl SetChannelCommand::SetPropertyUInt32(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyUInt32@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x1400118D0: "public: struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@XZ
0x14002FA38: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x140030AA0: "isolation" ??_C@_1BE@LEFFEHKC@?$AAi?$AAs?$AAo?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140025770: "public: virtual void * __ptr64 __cdecl QuerySnapshot::`scalar deleting destructor'(unsigned int) __ptr64" ??_GQuerySnapshot@@UEAAPEAXI@Z
0x14002F518: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x140012028: "public: virtual __cdecl MsxmlDomElement::~MsxmlDomElement(void) __ptr64" ??1MsxmlDomElement@@UEAA@XZ
0x14002F3C8: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1400155A8: "private: void __cdecl ManifestProcessor::ProcessChannelPublishingConfig(class AbstractDomElement & __ptr64,class ChannelConfigWriter & __ptr64,class ChannelConfigWriteData & __ptr64) __ptr64" ?ProcessChannelPublishingConfig@ManifestProcessor@@AEAAXAEAVAbstractDomElement@@AEAVChannelConfigWriter@@AEAVChannelConfigWriteData@@@Z
0x14002F6C0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14002BF70: "__cdecl purecall" _purecall
0x140032A88: "LoggerName" ??_C@_1BG@NBDJNIO@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140033480: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140001510: "public: virtual unsigned long __cdecl wmi::GenericException::GetErrorParam(void)const __ptr64" ?GetErrorParam@GenericException@wmi@@UEBAKXZ
0x14002F8D8: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x14002BE9E: "__cdecl _std_terminate" __std_terminate
0x140031210: "eventGUID" ??_C@_1BE@ENCDCJLL@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x14002BF7C: "__cdecl o__register_onexit_function" _o__register_onexit_function
0x140019F64: "void __cdecl tlx::assign_guid<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,struct _GUID const & __ptr64,bool)" ??$assign_guid@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@tlx@@YAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBU_GUID@@_N@Z
0x14000A750: "public: virtual void __cdecl SetChannelCommand::Init(void) __ptr64" ?Init@SetChannelCommand@@UEAAXXZ
0x14000E3B4: "private: void __cdecl GetLogInfoCommand::GetProperty(wchar_t const * __ptr64,void * __ptr64,enum _EVT_LOG_PROPERTY_ID,unsigned long,wchar_t const * __ptr64) __ptr64" ?GetProperty@GetLogInfoCommand@@AEAAXPEB_WPEAXW4_EVT_LOG_PROPERTY_ID@@K0@Z
0x14003E580: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x140041000: "__cdecl _imp_CredUICmdLinePromptForCredentialsW" __imp_CredUICmdLinePromptForCredentialsW
0x140031A98: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x140028850: "public: __cdecl RegistryKeyEnumerator::RegistryKeyEnumerator(struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0RegistryKeyEnumerator@@QEAA@PEAUHKEY__@@PEB_W@Z
0x140005368: "private: void __cdecl std::vector<unsigned char,class std::allocator<unsigned char> >::_Change_array(unsigned char * __ptr64 const,unsigned __int64,unsigned __int64) __ptr64" ?_Change_array@?$vector@EV?$allocator@E@std@@@std@@AEAAXQEAE_K1@Z
0x1400322F8: "BufferSize" ??_C@_1BG@CPCOOOKL@?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x14002B980: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14002F5D8: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x14002F5B0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x14002C881: memcmp
0x140030D2C: "CA" ??_C@_15OEFJBJMG@?$AAC?$AAA?$AA?$AA@
0x14002B974: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x140031128: "helpLink" ??_C@_1BC@DMPPNLBJ@?$AAh?$AAe?$AAl?$AAp?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
0x140001734: "public: __cdecl CommandBase::~CommandBase(void) __ptr64" ??1CommandBase@@QEAA@XZ
0x140031AB0: WPP_cc574d6819e435a5630c6c7f1c3dd897_Traceguids
0x140013E80: "public: virtual void * __ptr64 __cdecl wmi::RefBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ERefBase@wmi@@UEAAPEAXI@Z
0x14002F7C8: "__cdecl _imp__get_initial_wide_environment" __imp__get_initial_wide_environment
0x140030228: "cl" ??_C@_15LBKNGLBD@?$AAc?$AAl?$AA?$AA@
0x140032120: "%SystemRoot%\System32\Winevt\Log" ??_C@_1EG@PAPCHAII@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAe?$AAv?$AAt?$AA?2?$AAL?$AAo?$AAg@
0x140030C78: "AutoBackup" ??_C@_1BG@IPDCAHIH@?$AAA?$AAu?$AAt?$AAo?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x140031280: "log" ??_C@_17ECMKOHFH@?$AAl?$AAo?$AAg?$AA?$AA@
0x1400244E0: "public: struct _GUID * __ptr64 __cdecl std::vector<struct _GUID,class std::allocator<struct _GUID> >::_Emplace_reallocate<struct _GUID const & __ptr64>(struct _GUID * __ptr64 const,struct _GUID const & __ptr64) __ptr64" ??$_Emplace_reallocate@AEBU_GUID@@@?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@QEAAPEAU_GUID@@QEAU2@AEBU2@@Z
0x140032C78: "\System" ??_C@_1BA@DKKHOKOD@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14002BEAA: "__cdecl o___acrt_iob_func" _o___acrt_iob_func
0x1400149E0: "public: virtual wchar_t const * __ptr64 __cdecl MsxmlDomAttribute::GetLocalName(void) __ptr64" ?GetLocalName@MsxmlDomAttribute@@UEAAPEB_WXZ
0x14002FAA0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x140007784: "public: __int64 __cdecl CommandArguments::GetOptionInteger64(wchar_t const * __ptr64,wchar_t const * __ptr64,__int64,bool & __ptr64)const __ptr64" ?GetOptionInteger64@CommandArguments@@QEBA_JPEB_W0_JAEA_N@Z
0x14003B308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x14003B1B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x14002C5BD: "__cdecl _imp_load_EvtClearLog" __imp_load_EvtClearLog
0x140030A50: "name" ??_C@_19HHIIBINK@?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x140006F98: "long __cdecl XmlGetNode(struct IXMLDOMNode * __ptr64,wchar_t const * __ptr64,struct IXMLDOMNode * __ptr64 * __ptr64)" ?XmlGetNode@@YAJPEAUIXMLDOMNode@@PEB_WPEAPEAU1@@Z
0x140031F48: "minBuffers" ??_C@_1BG@LFHMFHOC@?$AAm?$AAi?$AAn?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x14002F1C0: "const MsxmlDomAttribute::`vftable'" ??_7MsxmlDomAttribute@@6B@
0x14002F868: "__cdecl _imp__o_getwc" __imp__o_getwc
0x14002F218: "const PublisherConfigReader::`vftable'" ??_7PublisherConfigReader@@6B@
0x14002F570: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003350: "public: void __cdecl XmlPrinter::Start(void * __ptr64,bool) __ptr64" ?Start@XmlPrinter@@QEAAXPEAX_N@Z
0x140032C60: "\Security" ??_C@_1BE@DMFLOBMD@?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x14001F4A0: "public: virtual void * __ptr64 __cdecl ConfigEnumerator::`vector deleting destructor'(unsigned int) __ptr64" ??_EConfigEnumerator@@UEAAPEAXI@Z
0x140001530: "public: virtual unsigned char * __ptr64 __cdecl Buffer::GetBufferPtr(void)const __ptr64" ?GetBufferPtr@Buffer@@UEBAQEAEXZ
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMDocument>::~CComPtr<struct IXMLDOMDocument>(void) __ptr64" ??1?$CComPtr@UIXMLDOMDocument@@@ATL@@QEAA@XZ
0x14001D848: "public: void __cdecl ChannelConfigWriter::Validate(bool) __ptr64" ?Validate@ChannelConfigWriter@@QEAAX_N@Z
0x140031008: WPP_f8fe2832ea313b506716d26cec8fd336_Traceguids
0x14002F7C0: api-ms-win-core-wow64-l1-1-0_NULL_THUNK_DATA
0x140026FD4: "public: __cdecl tlx::_FreeFixedLocal::~_FreeFixedLocal(void) __ptr64" ??1_FreeFixedLocal@tlx@@QEAA@XZ
0x14003EB80: "__cdecl _hmod__ext_ms_win_wevtapi_eventlog_l1_1_1_dll" __hmod__ext_ms_win_wevtapi_eventlog_l1_1_1_dll
0x140009DD0: "private: void __cdecl GetChannelCommand::GetPropertyEnum(wchar_t const * __ptr64,void * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?GetPropertyEnum@GetChannelCommand@@AEAAXPEB_WPEAXW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x14002BE62: "__cdecl initterm_e" _initterm_e
0x1400410C8: "__cdecl _imp_EvtOpenLog" __imp_EvtOpenLog
0x14003EE28: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUxlmurtUfxigUlyquivUznwGEUkivxlnkOlyq@wevtcfg_ucrt" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUxlmurtUfxigUlyquivUznwGEUkivxlnkOlyq@wevtcfg_ucrt
0x14002C740: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x14002F9C8: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x14002B7B0: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x14000359C: "public: void __cdecl XmlPrinter::PrintElement(wchar_t const * __ptr64,wchar_t const * __ptr64) __ptr64" ?PrintElement@XmlPrinter@@QEAAXPEB_W0@Z
0x140030548: "uni" ??_C@_17KLNGJMB@?$AAu?$AAn?$AAi?$AA?$AA@
0x140008784: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x14002BF94: "__cdecl o__set_app_type" _o__set_app_type
0x14002F398: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x1400323B8: WPP_c53331fddcce385be3a786167b921648_Traceguids
0x14002F848: "__cdecl _imp__o__wtoi" __imp__o__wtoi
0x140006160: "long __cdecl tlx::assign_mbcs<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t>,char * __ptr64,char>(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,char * __ptr64 const & __ptr64,unsigned int,unsigned int)" ??$assign_mbcs@_WU?$char_traits@_W@std@@V?$allocator@_W@2@PEADD@tlx@@YAJAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBQEADII@Z
0x14002C617: "__cdecl _imp_load_EvtSeek" __imp_load_EvtSeek
0x140030314: ".OCP" ??_C@_04EMDMLPCB@?4OCP?$AA@
0x14002A50C: MicrosoftTelemetryAssertTriggeredWorker
0x14002F598: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x14001A040: "wchar_t const * __ptr64 __cdecl tlx::string_to_guid<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >(struct _GUID * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)" ??$string_to_guid@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@tlx@@YAPEB_WPEAU_GUID@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14003B380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-state-helpers-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-state-helpers-l1-1-0
0x14003E460: "__vectorcall ??_R0?AVGenericException@wmi@" ??_R0?AVGenericException@wmi@@@8
0x1400307F8: "onecore\admin\wmi\events\wevtuti" ??_C@_0CO@NANMLJCD@onecore?2admin?2wmi?2events?2wevtuti@
0x140030590: "password" ??_C@_1BC@OMIPJNBO@?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x14002F1F0: "const ChannelConfigWriter::`vftable'" ??_7ChannelConfigWriter@@6B@
0x14002F840: "__cdecl _imp__o__wcstoui64" __imp__o__wcstoui64
0x14002C575: "__cdecl _imp_load_EvtOpenEventMetadataEnum" __imp_load_EvtOpenEventMetadataEnum
0x14002FB48: ntdll_NULL_THUNK_DATA
0x140027B4C: "bool __cdecl utl::operator==<wchar_t,struct tlx::transform_traits<wchar_t,struct tlx::ascii_toupper_transform> >(class utl::basic_string_view<wchar_t,struct tlx::transform_traits<wchar_t,struct tlx::ascii_toupper_transform> >,class utl::basic_string_view<wchar_t,struct tlx::transform_traits<wchar_t,struct tlx::ascii_toupper_transform> >)" ??$?8_WU?$transform_traits@_WUascii_toupper_transform@tlx@@@tlx@@@utl@@YA_NV?$basic_string_view@_WU?$transform_traits@_WUascii_toupper_transform@tlx@@@tlx@@@0@0@Z
0x14002F948: "__cdecl _imp_memcpy" __imp_memcpy
0x140001878: "public: __cdecl InstallManifestCommand::InstallManifestCommand(bool) __ptr64" ??0InstallManifestCommand@@QEAA@_N@Z
0x140024434: "public: __cdecl std::vector<struct _GUID,class std::allocator<struct _GUID> >::~vector<struct _GUID,class std::allocator<struct _GUID> >(void) __ptr64" ??1?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@QEAA@XZ
0x14002AF38: "public: __cdecl ResourceHolder::~ResourceHolder(void) __ptr64" ??1ResourceHolder@@QEAA@XZ
0x14002FA28: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x140005080: "public: wchar_t * __ptr64 __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::_Emplace_reallocate<wchar_t const & __ptr64>(wchar_t * __ptr64 const,wchar_t const & __ptr64) __ptr64" ??$_Emplace_reallocate@AEB_W@?$vector@_WV?$allocator@_W@std@@@std@@QEAAPEA_WQEA_WAEB_W@Z
0x140010398: "private: void __cdecl QueryLogCommand::PrintMessage(void * __ptr64,void * __ptr64,enum _EVT_FORMAT_MESSAGE_FLAGS,wchar_t const * __ptr64) __ptr64" ?PrintMessage@QueryLogCommand@@AEAAXPEAX0W4_EVT_FORMAT_MESSAGE_FLAGS@@PEB_W@Z
0x140003E4C: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::assign<wchar_t const * __ptr64,void>(wchar_t const * __ptr64 const,wchar_t const * __ptr64 const) __ptr64" ??$assign@PEB_WX@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@QEB_W0@Z
0x140019D7C: "wchar_t const * __ptr64 __cdecl tlx::string_to_guid<wchar_t const * __ptr64>(struct _GUID * __ptr64,wchar_t const * __ptr64 const & __ptr64)" ??$string_to_guid@PEB_W@tlx@@YAPEB_WPEAU_GUID@@AEBQEB_W@Z
0x140020F18: WPP_SF_SSS
0x140030CE8: "Level" ??_C@_1M@MFHLECJA@?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14002FEA0: "ext-ms-win-wevtapi-eventlog-l1-1" ??_C@_1EG@GCLFHBCM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x14003B268: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-wow64-l1-1-0
0x14000681C: "void __cdecl XmlLoad(wchar_t const * __ptr64,struct IXMLDOMDocument * __ptr64 * __ptr64)" ?XmlLoad@@YAXPEB_WPEAPEAUIXMLDOMDocument@@@Z
0x14003AB60: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll
0x140003044: "public: static void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xlen(void)" ?_Xlen@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@SAXXZ
0x1400311F0: "opcodes" ??_C@_1BA@EELCDDIN@?$AAo?$AAp?$AAc?$AAo?$AAd?$AAe?$AAs?$AA?$AA@
0x140031A10: "onecore\admin\wmi\events\wevtuti" ??_C@_0DG@JPPHAILE@onecore?2admin?2wmi?2events?2wevtuti@
0x140041090: "__cdecl _imp_EvtGetPublisherMetadataProperty" __imp_EvtGetPublisherMetadataProperty
0x14002BF88: "__cdecl seh_filter_exe" _seh_filter_exe
0x1400410A0: "__cdecl _imp_EvtNextPublisherId" __imp_EvtNextPublisherId
0x140030370: WPP_b017f73dab4b300573b2b549c4be473d_Traceguids
0x14002F8B8: "__cdecl _imp__o__configthreadlocale" __imp__o__configthreadlocale
0x14001D720: "public: virtual void * __ptr64 __cdecl ChannelConfigWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GChannelConfigWriter@@UEAAPEAXI@Z
0x14002A25C: "long __cdecl Sha256HashToGuid(unsigned char * __ptr64,unsigned long,struct _GUID * __ptr64)" ?Sha256HashToGuid@@YAJPEAEKPEAU_GUID@@@Z
0x140009B64: "private: void __cdecl GetChannelCommand::GetProperty(wchar_t const * __ptr64,void * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,unsigned long,wchar_t const * __ptr64) __ptr64" ?GetProperty@GetChannelCommand@@AEAAXPEB_WPEAXW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@K0@Z
0x14002F898: "__cdecl _imp__o_wcscpy_s" __imp__o_wcscpy_s
0x14002F818: "__cdecl _imp__set_new_mode" __imp__set_new_mode
0x14002FB30: "__cdecl _imp_NtCreateTransaction" __imp_NtCreateTransaction
0x14000572C: "long __cdecl FileVPrintf(void * __ptr64,wchar_t const * __ptr64,char * __ptr64)" ?FileVPrintf@@YAJPEAXPEB_WPEAD@Z
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMNodeList>::~CComPtr<struct IXMLDOMNodeList>(void) __ptr64" ??1?$CComPtr@UIXMLDOMNodeList@@@ATL@@QEAA@XZ
0x1400303F0: """ ??_C@_1O@KDPLEHB@?$AA?$CG?$AAq?$AAu?$AAo?$AAt?$AA?$DL?$AA?$AA@
0x14002F998: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x14003B290: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1400313F8: WPP_acc4684a57e83ce8b010e1b9959671fe_Traceguids
0x14000305C: "public: wchar_t * __ptr64 __cdecl std::allocator<wchar_t>::allocate(unsigned __int64) __ptr64" ?allocate@?$allocator@_W@std@@QEAAPEA_W_K@Z
0x14002BFB8: "__cdecl o_exit" _o_exit
0x14002C1DC: IsEvtOpenLogPresent
0x14002FAA8: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x140010458: "private: void __cdecl QueryLogCommand::PrintEvent(void * __ptr64) __ptr64" ?PrintEvent@QueryLogCommand@@AEAAXPEAX@Z
0x140028E00: "public: virtual unsigned long __cdecl Buffer::GetSize(void)const __ptr64" ?GetSize@Buffer@@UEBAKXZ
0x14002F928: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x14002F9A0: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x14002F3E8: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x14003E510: "__cdecl _security_cookie" __security_cookie
0x140014A90: "public: virtual wchar_t const * __ptr64 __cdecl MsxmlDomAttribute::GetValue(void) __ptr64" ?GetValue@MsxmlDomAttribute@@UEAAPEB_WXZ
0x14002F678: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14002775C: "public: void __cdecl RegistryPaths::GetLegacyChannelRegPath(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetLegacyChannelRegPath@RegistryPaths@@QEBAXPEB_WAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140011FB0: "public: virtual void * __ptr64 __cdecl MsxmlDomAttribute::`vector deleting destructor'(unsigned int) __ptr64" ??_EMsxmlDomAttribute@@UEAAPEAXI@Z
0x14001FD40: "public: virtual void * __ptr64 __cdecl PublisherConfigReader::`vector deleting destructor'(unsigned int) __ptr64" ??_EPublisherConfigReader@@UEAAPEAXI@Z
0x14002FB00: "__cdecl _imp_?_Xlength_error@std@@YAXPEBD@Z" __imp_?_Xlength_error@std@@YAXPEBD@Z
0x14001CB98: "public: bool __cdecl ChannelConfigReader::GetChannelAccessSddl(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetChannelAccessSddl@ChannelConfigReader@@QEBA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002B9E0: "__cdecl _scrt_fastfail" __scrt_fastfail
0x14002BFAC: "__cdecl o__set_new_mode" _o__set_new_mode
0x140033250: WPP_c7cb9091827b312220d15941694100fb_Traceguids
0x1400303C0: "
" ??_C@_1M@BLBKECKE@?$AA?$CG?$AA?$CD?$AAx?$AAD?$AA?$DL?$AA?$AA@
0x140026EA4: "private: bool __cdecl AutoRevertPrivilege::EnableOrDisablePrivilege(bool) __ptr64" ?EnableOrDisablePrivilege@AutoRevertPrivilege@@AEAA_N_N@Z
0x1400310F0: "message" ??_C@_1BA@GANDGPFJ@?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x140002C3C: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::find(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)const __ptr64" ?find@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEBA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
0x14003B0C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x14002F488: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x14002F4C8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140030320: "Error = 0x%x.
" ??_C@_1CC@FLILIFMB@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?4?$AA?5?$AA?$AN?$AA?6?$AA?$AA@
0x14002F500: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14003EDD8: "private: static class std::map<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > PublisherConfigReader::s_pubNameCache" ?s_pubNameCache@PublisherConfigReader@@0V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@A
0x140006F68: "public: __cdecl ATL::CComPtr<struct IXMLDOMElement>::~CComPtr<struct IXMLDOMElement>(void) __ptr64" ??1?$CComPtr@UIXMLDOMElement@@@ATL@@QEAA@XZ
0x1400311C4: "id" ??_C@_15NFICGAJK@?$AAi?$AAd?$AA?$AA@
0x14003B178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x14002F520: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x14002F410: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x14002F3A0: "__cdecl _imp_VariantInit" __imp_VariantInit
0x14002F950: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x14002F4B0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x14003EB68: "__cdecl _hmod__ext_ms_win_wevtapi_eventlog_l1_1_0_dll" __hmod__ext_ms_win_wevtapi_eventlog_l1_1_0_dll
0x14002F170: "const CommandBase::`vftable'" ??_7CommandBase@@6B@
0x14000B90C: "private: void __cdecl SetChannelCommand::SetPropertyString(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyString@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x140030198: "get-log" ??_C@_1BA@JKHKNFDG@?$AAg?$AAe?$AAt?$AA?9?$AAl?$AAo?$AAg?$AA?$AA@
0x1400325C8: "Count" ??_C@_1M@NBCIMFHI@?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140030AE0: "http://schemas.microsoft.com/win" ??_C@_1GA@IGGLNOJO@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAi?$AAn@
0x14002F3A8: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x140041008: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLA
0x140030FAC: "cg" ??_C@_15GGKMOMBC@?$AAc?$AAg?$AA?$AA@
0x14002F650: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140031688: " Source" ??_C@_1BC@KPLMEMDE@?$AA?5?$AA?5?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1400034AC: "public: void __cdecl XmlPrinter::PrintStartElementEnd(void) __ptr64" ?PrintStartElementEnd@XmlPrinter@@QEAAXXZ
0x14003E4B8: "__vectorcall ??_R0?AVChannelConfigException@" ??_R0?AVChannelConfigException@@@8
0x140032D38: "onecore\admin\wmi\events\util\mi" ??_C@_0CL@MFHHCKEB@onecore?2admin?2wmi?2events?2util?2mi@
0x1400014C8: "public: virtual __cdecl wmi::GenericException::~GenericException(void) __ptr64" ??1GenericException@wmi@@UEAA@XZ
0x140033220: "onecore\admin\wmi\events\util\fi" ??_C@_0CL@NJBMKMHM@onecore?2admin?2wmi?2events?2util?2fi@
0x14001AE40: "public: struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Buynode<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&) __ptr64" ??$_Buynode@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@?$_Tree_comp_alloc@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@1@$$QEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@@Z
0x14002F9F0: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x14003EBE0: ?g_EnvironmentTable@@3PAU<unnamed-type-g_EnvironmentTable>@@A
0x140031408: "locale" ??_C@_1O@IHPFLMAD@?$AAl?$AAo?$AAc?$AAa?$AAl?$AAe?$AA?$AA@
0x140002E28: "public: void __cdecl std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >::deallocate(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@QEAAXQEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@_K@Z
0x140031238: "%I64x" ??_C@_1M@BENFCOCA@?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x14001CE70: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,struct _EVT_VARIANT,struct std::less<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID>,class std::allocator<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@U?$less@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@std@@V?$allocator@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@PEAX@2@@Z
0x14001E890: "public: __cdecl ChannelConfigException::ChannelConfigException(class ChannelConfigException &&) __ptr64" ??0ChannelConfigException@@QEAA@$$QEAV0@@Z
0x14003E520: "__cdecl _isa_available" __isa_available
0x140032168: "_" ??_C@_13ENNFDPBH@?$AA_?$AA?$AA@
0x1400110D4: "private: void __cdecl QueryLogCommand::PublisherCache::Cache(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,void * __ptr64) __ptr64" ?Cache@PublisherCache@QueryLogCommand@@AEAAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@Z
0x140007160: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x1400275C4: "public: void __cdecl RegistryPaths::GetWinevtChannelsRegPath(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetWinevtChannelsRegPath@RegistryPaths@@QEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14000C36C: "public: __cdecl wmi::ScopeGuardImpl0<void (__cdecl*)(void)>::~ScopeGuardImpl0<void (__cdecl*)(void)>(void) __ptr64" ??1?$ScopeGuardImpl0@P6AXXZ@wmi@@QEAA@XZ
0x1400322C0: "Filters" ??_C@_1BA@DJLBFCNB@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x14000B4F4: "private: void __cdecl SetChannelCommand::SetPropertyUInt64(wchar_t const * __ptr64,void * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,struct IXMLDOMElement * __ptr64,wchar_t const * __ptr64,enum _EVT_CHANNEL_CONFIG_PROPERTY_ID) __ptr64" ?SetPropertyUInt64@SetChannelCommand@@AEAAXPEB_WPEAX00PEAUIXMLDOMElement@@0W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@Z
0x1400199B8: "public: __cdecl RegistryKeyEnumerator::~RegistryKeyEnumerator(void) __ptr64" ??1RegistryKeyEnumerator@@QEAA@XZ
0x140017630: "private: void __cdecl ManifestProcessor::AddChannelReferences(class PublisherConfigWriteData & __ptr64,class AbstractDomElement & __ptr64) __ptr64" ?AddChannelReferences@ManifestProcessor@@AEAAXAEAVPublisherConfigWriteData@@AEAVAbstractDomElement@@@Z
0x14002F478: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140030BF0: "0x%I64x" ??_C@_1BA@KLJFELIK@?$AA0?$AAx?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x140028F00: "public: virtual void __cdecl Buffer::Write(void const * __ptr64 const,unsigned long) __ptr64" ?Write@Buffer@@UEAAXQEBXK@Z
0x140015F34: "private: void __cdecl ManifestProcessor::InstallImportedChannel(class AbstractDomElement & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ?InstallImportedChannel@ManifestProcessor@@AEAAXAEAVAbstractDomElement@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV34@@Z
0x14003E320: "class RegistryPaths g_registryPaths" ?g_registryPaths@@3VRegistryPaths@@A
0x14002B054: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x140033210: WPP_0da10cc4f7ac3d54b39c519cc0cf9dec_Traceguids
0x14000AC9C: "private: bool __cdecl SetChannelCommand::GetNodeText(struct IXMLDOMNode * __ptr64,wchar_t const * __ptr64,wchar_t * __ptr64 * __ptr64) __ptr64" ?GetNodeText@SetChannelCommand@@AEAA_NPEAUIXMLDOMNode@@PEB_WPEAPEA_W@Z
0x140031F20: "filter" ??_C@_1O@JFGOJJFE@?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x14002FB40: "__cdecl _imp_NtCommitTransaction" __imp_NtCommitTransaction
0x14002F860: "__cdecl _imp__o_free" __imp__o_free
0x140041100: "__cdecl _imp_EvtGetLogInfo" __imp_EvtGetLogInfo
0x14002F648: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x14002F7D0: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x14003EB64: "__cdecl _favor" __favor
0x14002F428: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x14002F8F0: "__cdecl _imp___p__commode" __imp___p__commode
0x14002F8D0: "__cdecl _imp___stdio_common_vswscanf" __imp___stdio_common_vswscanf
0x140008B0C: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Insert_nohint<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64>(bool,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@1@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@1@@Z
0x14002B888: "__cdecl _security_init_cookie" __security_init_cookie
0x14002BEC2: "__cdecl _p___wargv" __p___wargv
0x14002FAD0: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x14002F8C0: "__cdecl _imp__cexit" __imp__cexit
0x14002BEE6: "__cdecl _stdio_common_vsnwprintf_s" __stdio_common_vsnwprintf_s
0x14002F7F8: "__cdecl _imp__o__register_onexit_function" __imp__o__register_onexit_function
0x14001F75C: "class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > __cdecl std::operator+<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,wchar_t)" ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@_W@Z
0x14002F680: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140033118: "\Publishers" ??_C@_1BI@FBALGHAF@?$AA?2?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AAs?$AA?$AA@
0x140032EF0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HI@FMLJKDEL@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000C920: "private: void __cdecl GetPublisherCommand::GetProperty(wchar_t const * __ptr64,void * __ptr64,enum _EVT_PUBLISHER_METADATA_PROPERTY_ID,unsigned long,wchar_t const * __ptr64) __ptr64" ?GetProperty@GetPublisherCommand@@AEAAXPEB_WPEAXW4_EVT_PUBLISHER_METADATA_PROPERTY_ID@@K0@Z
0x14002FA50: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x14001C43C: "public: bool __cdecl ChannelConfigReader::GetEnabled(bool & __ptr64)const __ptr64" ?GetEnabled@ChannelConfigReader@@QEBA_NAEA_N@Z
0x14002F830: "__cdecl _imp__o__wcsicmp" __imp__o__wcsicmp
0x14000D6F4: "private: void __cdecl GetPublisherCommand::GetEvents(void * __ptr64) __ptr64" ?GetEvents@GetPublisherCommand@@AEAAXPEAX@Z
0x14002F588: "__cdecl _imp_GetThreadUILanguage" __imp_GetThreadUILanguage
0x140032E70: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HE@BEHLGHPO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140004AF4: "void __cdecl FormatEvtVariant(class std::vector<wchar_t,class std::allocator<wchar_t> > & __ptr64,wchar_t const * __ptr64,struct _EVT_VARIANT * __ptr64)" ?FormatEvtVariant@@YAXAEAV?$vector@_WV?$allocator@_W@std@@@std@@PEB_WPEAU_EVT_VARIANT@@@Z
0x14002C869: wcscmp
0x14001B470: "void __cdecl GetDefaultLogFilePath(wchar_t const * __ptr64,class utl::basic_string_view<wchar_t,struct utl::char_traits<wchar_t> >,enum _EVT_CHANNEL_TYPE,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?GetDefaultLogFilePath@@YAXPEB_WV?$basic_string_view@_WU?$char_traits@_W@utl@@@utl@@W4_EVT_CHANNEL_TYPE@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002FAB8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x14002BF5E: "__cdecl initialize_wide_environment" _initialize_wide_environment
0x14002F820: "__cdecl _imp_memmove" __imp_memmove
0x140023E08: "private: static void __cdecl SessionConfig::UpdateProvider(struct _GUID,class ChannelConfigSnapshot const & __ptr64,unsigned long,bool)" ?UpdateProvider@SessionConfig@@CAXU_GUID@@AEBVChannelConfigSnapshot@@K_N@Z
0x140031628: " Log Name: %s
" ??_C@_1CC@EKHJPAA@?$AA?5?$AA?5?$AAL?$AAo?$AAg?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x1400302C0: "uninstall-manifest" ??_C@_1CG@GMBBKJOG@?$AAu?$AAn?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?9?$AAm?$AAa?$AAn?$AAi?$AAf?$AAe?$AAs?$AAt?$AA?$AA@
0x140032480: WPP_7529cc0335643a6fe771a8484e1b5ed8_Traceguids
0x140004DF4: "public: void __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::assign<wchar_t * __ptr64,void>(wchar_t * __ptr64,wchar_t * __ptr64) __ptr64" ??$assign@PEA_WX@?$vector@_WV?$allocator@_W@std@@@std@@QEAAXPEA_W0@Z
0x14002C1DC: IsEvtOpenPublisherEnumPresent
0x140041020: "__cdecl _imp_EvtClose" __imp_EvtClose
0x14001F4A0: "public: virtual void * __ptr64 __cdecl ConfigEnumerator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GConfigEnumerator@@UEAAPEAXI@Z
0x140002CFC: "public: __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::~_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEAA@XZ
0x1400057D4: "void __cdecl WriteBOM(void * __ptr64)" ?WriteBOM@@YAXPEAX@Z
0x14002BFA0: "__cdecl set_fmode" _set_fmode
0x140032560: "ParameterFileName" ??_C@_1CE@GGOBGMPD@?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140032AB8: "MatchAllKeyword" ??_C@_1CA@DABEMIJN@?$AAM?$AAa?$AAt?$AAc?$AAh?$AAA?$AAl?$AAl?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x140011914: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64,class CaseInsensitiveLess,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64> >,0> >::_Destroy_if_node(struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,void * __ptr64>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_node@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAXVCaseInsensitiveLess@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@std@@PEAX@2@@Z
0x14002F1F8: "const ConfigEnumerator::`vftable'" ??_7ConfigEnumerator@@6B@
0x140031340: "oldestRecordNumber" ??_C@_1CG@PPLHHEAC@?$AAo?$AAl?$AAd?$AAe?$AAs?$AAt?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x140004294: "private: void __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::_Change_array(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 const,unsigned __int64,unsigned __int64) __ptr64" ?_Change_array@?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AEAAXQEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@_K1@Z
0x14002FBF8: "__cdecl _xt_z" __xt_z
0x140031AC0: "onecore\admin\wmi\events\wevtuti" ??_C@_0CP@DNCJHKCN@onecore?2admin?2wmi?2events?2wevtuti@
0x140032DF0: "%4.4hd-%2.2hd-%2.2hdT%2.2hd:%2.2" ??_C@_1GC@JBAPADIO@?$AA?$CF?$AA4?$AA?4?$AA4?$AAh?$AAd?$AA?9?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AA?9?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AAT?$AA?$CF?$AA2?$AA?4?$AA2?$AAh?$AAd?$AA?3?$AA?$CF?$AA2?$AA?4?$AA2@
0x140020C18: "public: struct ChannelReference * __ptr64 __cdecl std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> >::_Emplace_reallocate<struct ChannelReference const & __ptr64>(struct ChannelReference * __ptr64 const,struct ChannelReference const & __ptr64) __ptr64" ??$_Emplace_reallocate@AEBUChannelReference@@@?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@QEAAPEAUChannelReference@@QEAU2@AEBU2@@Z
0x14002B320: wmainCRTStartup
0x1400321F0: "Channels" ??_C@_1BC@DJFAEHO@?$AAC?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAs?$AA?$AA@
0x140031190: "messageFileName" ??_C@_1CA@LHMMFNBN@?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140004DF4: "public: void __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::assign<wchar_t const * __ptr64,void>(wchar_t const * __ptr64,wchar_t const * __ptr64) __ptr64" ??$assign@PEB_WX@?$vector@_WV?$allocator@_W@std@@@std@@QEAAXPEB_W0@Z
0x14002C4E5: "__cdecl _imp_load_EvtNextChannelPath" __imp_load_EvtNextChannelPath
0x14002F3C0: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x140001A38: "void __cdecl Usage(unsigned int)" ?Usage@@YAXI@Z
0x14003EB88: "__cdecl _hmod__ext_ms_win_wevtapi_eventlog_l1_1_3_dll" __hmod__ext_ms_win_wevtapi_eventlog_l1_1_3_dll
0x1400317C8: WPP_5c58dd84cba13b12f85291ed503cbeb6_Traceguids
0x140033388: "ETWSecurityPath" ??_C@_1CA@GCICNJFG@?$AAE?$AAT?$AAW?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14002F870: "__cdecl _imp_malloc" __imp_malloc
0x14002F7F0: "__cdecl _imp__purecall" __imp__purecall
0x14003B0A8: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLB
0x140009A50: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator=(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&) __ptr64" ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@$$QEAV01@@Z
0x1400333F8: "Microsoft Primitive Provider" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x14002F9D8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x14002F498: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1400410B0: "__cdecl _imp_EvtOpenEventMetadataEnum" __imp_EvtOpenEventMetadataEnum
0x140030E90: "ns:publishing/@isolation" ??_C@_1DC@EPGMBADA@?$AAn?$AAs?$AA?3?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?1?$AA?$EA?$AAi?$AAs?$AAo?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140031390: WPP_79db25cecb2a36c506475359a316fae8_Traceguids
0x140025CB4: "public: __cdecl ChannelLogConfigData::ChannelLogConfigData(class ChannelConfigReader const & __ptr64,class utl::basic_string_view<wchar_t,struct utl::char_traits<wchar_t> >) __ptr64" ??0ChannelLogConfigData@@QEAA@AEBVChannelConfigReader@@V?$basic_string_view@_WU?$char_traits@_W@utl@@@utl@@@Z
0x14003B18C: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x140008498: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > > __cdecl std::_Tree<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Insert_hint<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > >,struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> & __ptr64,struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@1@AEAU?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@1@PEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@1@@Z
0x1400313C8: "query" ??_C@_1M@ODHDFHNE@?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?$AA@
0x1400317A8: " Description" ??_C@_1BM@KBBLHOMD@?$AA?5?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002C424: "__cdecl _imp_load_EvtGetLogInfo" __imp_load_EvtGetLogInfo
0x14002F4A0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x14002F7F8: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x1400312A8: "lastAccessTime" ??_C@_1BO@FJICLMJK@?$AAl?$AAa?$AAs?$AAt?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140032930: "MinimumBuffers" ??_C@_1BO@NEHDJPKH@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAu?$AAm?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x14002F3E0: RPCRT4_NULL_THUNK_DATA
0x140014EF8: "unsigned long __cdecl MyAssertConfig(wchar_t const * __ptr64,unsigned long)" ?MyAssertConfig@@YAKPEB_WK@Z
0x140005704: "long __cdecl FilePrintf(void * __ptr64,wchar_t const * __ptr64,...)" ?FilePrintf@@YAJPEAXPEB_WZZ
0x14002B450: "__cdecl _report_gsfailure" __report_gsfailure
0x1400316F8: " Level" ??_C@_1BA@IIEOMMAP@?$AA?5?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14002F3F0: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x14002F7A0: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x14002BF2E: "__cdecl crt_atexit" _crt_atexit
0x14002B044: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x140008C80: "public: virtual void __cdecl EnumPublisherCommand::Init(void) __ptr64" ?Init@EnumPublisherCommand@@UEAAXXZ
0x14002A45C: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x14001D720: "public: virtual void * __ptr64 __cdecl ChannelConfigWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_EChannelConfigWriter@@UEAAPEAXI@Z
0x14002F738: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140030920: "%i" ??_C@_15FPHCHCFA@?$AA?$CF?$AAi?$AA?$AA@
0x140013CDC: "public: __cdecl StringSet::~StringSet(void) __ptr64" ??1StringSet@@QEAA@XZ
0x14001BE14: "protected: __cdecl ChannelConfigReader::ChannelConfigReader(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct HKEY__ * __ptr64,enum LogType,struct HKEY__ * __ptr64,wchar_t const * __ptr64) __ptr64" ??0ChannelConfigReader@@IEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAUHKEY__@@W4LogType@@1PEB_W@Z
0x14002B810: "__cdecl onexit" _onexit
0x140004030: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::_Emplace_reallocate<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64 const,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > &&) __ptr64" ??$_Emplace_reallocate@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@QEAAPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@QEAV21@$$QEAV21@@Z
0x140018880: "public: void __cdecl ManifestProcessor::Assert(class AbstractDomElement & __ptr64) __ptr64" ?Assert@ManifestProcessor@@QEAAXAEAVAbstractDomElement@@@Z
0x140030690: "%I64u" ??_C@_1M@OGLPPGPN@?$AA?$CF?$AAI?$AA6?$AA4?$AAu?$AA?$AA@
0x140016464: "private: void __cdecl ManifestProcessor::InstallChannel(struct _GUID const & __ptr64,class AbstractDomElement & __ptr64) __ptr64" ?InstallChannel@ManifestProcessor@@AEAAXAEBU_GUID@@AEAVAbstractDomElement@@@Z
0x140017180: "public: virtual __cdecl PublisherConfigEnumerator::~PublisherConfigEnumerator(void) __ptr64" ??1PublisherConfigEnumerator@@UEAA@XZ
0x140008800: "public: struct std::_Tree_node<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct CommandOption,struct wstring_igreater,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> >,0> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_comp_alloc@V?$_Tmap_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@Uwstring_igreater@@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@2@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@PEAX@2@XZ
0x14003EE48: "__cdecl _dyn_tls_dtor_callback" __dyn_tls_dtor_callback
0x14001D064: "public: __cdecl ChannelConfigWriter::ChannelConfigWriter(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64,wchar_t const * __ptr64,bool) __ptr64" ??0ChannelConfigWriter@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPEAU_SECURITY_ATTRIBUTES@@PEAUHKEY__@@PEB_W_N@Z
0x1400221D4: "public: static void __cdecl SessionConfig::AddProviderToChannel(struct _GUID,wchar_t const * __ptr64,unsigned long)" ?AddProviderToChannel@SessionConfig@@SAXU_GUID@@PEB_WK@Z
0x1400091F8: "void __cdecl std::_Sort_unchecked<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,struct std::less<void> >(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,__int64,struct std::less<void>)" ??$_Sort_unchecked@PEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@X@2@@std@@YAXPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0_JU?$less@X@0@@Z
0x140032A00: "0811c1af-7a07-4a06-82ed-869455cd" ??_C@_1EK@DAACFDEJ@?$AA0?$AA8?$AA1?$AA1?$AAc?$AA1?$AAa?$AAf?$AA?9?$AA7?$AAa?$AA0?$AA7?$AA?9?$AA4?$AAa?$AA0?$AA6?$AA?9?$AA8?$AA2?$AAe?$AAd?$AA?9?$AA8?$AA6?$AA9?$AA4?$AA5?$AA5?$AAc?$AAd@
0x14000427C: "private: static void __cdecl std::vector<wchar_t,class std::allocator<wchar_t> >::_Xlength(void)" ?_Xlength@?$vector@_WV?$allocator@_W@std@@@std@@CAXXZ
0x140030F08: "ns:publishing/ns:level" ??_C@_1CO@CJKFMFBN@?$AAn?$AAs?$AA?3?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAl?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1400319D8: "events:events" ??_C@_1BM@DLBBPIDL@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?3?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x14002F880: "__cdecl _imp__o_terminate" __imp__o_terminate
0x14002F7C8: "__cdecl _imp__o__get_initial_wide_environment" __imp__o__get_initial_wide_environment
0x140013D80: "public: __cdecl wmi::AutoRef<class AbstractDomElement>::~AutoRef<class AbstractDomElement>(void) __ptr64" ??1?$AutoRef@VAbstractDomElement@@@wmi@@QEAA@XZ
0x14001AF48: "public: class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64 __cdecl std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::append(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@AEBV12@@Z
0x14003EB50: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x140011FB0: "public: virtual void * __ptr64 __cdecl MsxmlDomAttribute::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMsxmlDomAttribute@@UEAAPEAXI@Z
0x140030A08: "Application" ??_C@_1BI@JBDNBBGL@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14001FD40: "public: virtual void * __ptr64 __cdecl PublisherConfigReader::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPublisherConfigReader@@UEAAPEAXI@Z
0x140030E14: "ab" ??_C@_15BMLKLNCL@?$AAa?$AAb?$AA?$AA@
0x1400331E0: "onecore\admin\wmi\events\util\re" ??_C@_0CK@BMOMPHLA@onecore?2admin?2wmi?2events?2util?2re@
0x14002F568: "__cdecl _imp_LoadResource" __imp_LoadResource
0x140031078: " opcode" ??_C@_1BC@IABIAOMN@?$AA?5?$AA?5?$AAo?$AAp?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x140025F90: "public: __cdecl ChannelConfigSnapshot::ChannelConfigSnapshot(class ChannelConfigReader const & __ptr64,class utl::basic_string_view<wchar_t,struct utl::char_traits<wchar_t> >) __ptr64" ??0ChannelConfigSnapshot@@QEAA@AEBVChannelConfigReader@@V?$basic_string_view@_WU?$char_traits@_W@utl@@@utl@@@Z
0x1400313C0: "sq" ??_C@_15BAAIOGMK@?$AAs?$AAq?$AA?$AA@
0x14001CECC: "public: struct std::_Tree_node<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID,struct _EVT_VARIANT,struct std::less<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID>,class std::allocator<struct std::pair<enum _EVT_CHANNEL_CONFIG_PROPERTY_ID const,struct _EVT_VARIANT> >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tmap_traits@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@U?$less@W4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@@std@@V?$allocator@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@@4@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBW4_EVT_CHANNEL_CONFIG_PROPERTY_ID@@U_EVT_VARIANT@@@std@@PEAX@2@XZ
0x14002BF5E: "__cdecl o__initialize_wide_environment" _o__initialize_wide_environment
0x140030CC8: "MS" ??_C@_15CEEDOHKC@?$AAM?$AAS?$AA?$AA@
0x14002F0C0: "const InstallManifestCommand::`vftable'" ??_7InstallManifestCommand@@6B@
0x140030B60: "logFileName" ??_C@_1BI@NIGKKBI@?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14002F8C8: "__cdecl _imp__o__exit" __imp__o__exit
0x140007180: "public: void __cdecl CommandArguments::Parse(int,wchar_t * __ptr64 * __ptr64 const) __ptr64" ?Parse@CommandArguments@@QEAAXHQEAPEA_W@Z
0x14002C150: "__cdecl _imp_load_EvtClose" __imp_load_EvtClose
0x14003EE2C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUfgroUfxigUlyquivUznwGEUkivxlnkOlyq@wevtutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUfgroUfxigUlyquivUznwGEUkivxlnkOlyq@wevtutil
0x140033438: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1400311B0: "channels" ??_C@_1BC@FONDLMEO@?$AAc?$AAh?$AAa?$AAn?$AAn?$AAe?$AAl?$AAs?$AA?$AA@
0x140041030: "__cdecl _imp_EvtRender" __imp_EvtRender
0x140031C40: "O:BAG:SYD:(A;;0x2;;;S-1-15-2-1)(" ??_C@_1CBK@MGLFLLDG@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA2?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AA?9?$AA1?$AA?9?$AA1?$AA5?$AA?9?$AA2?$AA?9?$AA1?$AA?$CJ?$AA?$CI@
0x1400304C8: "%*s%s:
" ??_C@_1BC@OBIJANG@?$AA?$CF?$AA?$CK?$AAs?$AA?$CF?$AAs?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x140025514: "protected: void __cdecl ConfigBase::WriteRegExpandStringValue(wchar_t const * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64)const __ptr64" ?WriteRegExpandStringValue@ConfigBase@@IEBAXPEB_WAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002F8F8: "__cdecl _imp__o___p___wargv" __imp__o___p___wargv
0x140030D90: "@enabled" ??_C@_1BC@CLOLHFIJ@?$AA?$EA?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140030B40: "xmlns" ??_C@_1M@EOEFJFPG@?$AAx?$AAm?$AAl?$AAn?$AAs?$AA?$AA@
0x140013D80: "public: __cdecl wmi::AutoRef<class PublisherConfigWriter>::~AutoRef<class PublisherConfigWriter>(void) __ptr64" ??1?$AutoRef@VPublisherConfigWriter@@@wmi@@QEAA@XZ
0x14002BEF2: "__cdecl _stdio_common_vswprintf" __stdio_common_vswprintf
0x14002FA40: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x1400325E0: WPP_d8ac7fbb023c3ac33dc65103904f4d1c_Traceguids
0x14003B3F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x140020928: "private: void __cdecl std::vector<struct ChannelReference,class std::allocator<struct ChannelReference> >::_Change_array(struct ChannelReference * __ptr64 const,unsigned __int64,unsigned __int64) __ptr64" ?_Change_array@?$vector@UChannelReference@@V?$allocator@UChannelReference@@@std@@@std@@AEAAXQEAUChannelReference@@_K1@Z
0x140030148: "enum-publishers" ??_C@_1CA@FGODCBCK@?$AAe?$AAn?$AAu?$AAm?$AA?9?$AAp?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AAs?$AA?$AA@
0x140013CE8: "public: __cdecl std::_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::~_Tree<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEAA@XZ
0x14002BEDA: "__cdecl _stdio_common_vfwprintf" __stdio_common_vfwprintf
0x14002F760: "__cdecl _imp_InitOnceComplete" __imp_InitOnceComplete
0x140028AFC: "public: struct HKEY__ * __ptr64 __cdecl RegistryKeyEnumerator::GetCurrentSubKey(unsigned long)const __ptr64" ?GetCurrentSubKey@RegistryKeyEnumerator@@QEBAPEAUHKEY__@@K@Z
0x140002DF0: "private: void __cdecl std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::_Destroy(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > * __ptr64) __ptr64" ?_Destroy@?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AEAAXPEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
0x14001734C: "private: void __cdecl ManifestProcessor::ProcessChannelsNode(struct _GUID const & __ptr64,class AbstractDomElement & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64) __ptr64" ?ProcessChannelsNode@ManifestProcessor@@AEAAXAEBU_GUID@@AEAVAbstractDomElement@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x1400322A8: "FilterId" ??_C@_1BC@MODLJKI@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAI?$AAd?$AA?$AA@
0x14003EB90: "__cdecl _hmod__ext_ms_win_wevtapi_eventlog_l1_1_2_dll" __hmod__ext_ms_win_wevtapi_eventlog_l1_1_2_dll
0x14003E010: "struct ENUM_NAMEVALUE_PAIR * EnumNameValueEventFormat" ?EnumNameValueEventFormat@@3PAUENUM_NAMEVALUE_PAIR@@A
0x140030528: "%*s<%s>" ??_C@_1BA@GMLOBNPP@?$AA?$CF?$AA?$CK?$AAs?$AA?$DM?$AA?$CF?$AAs?$AA?$DO?$AA?$AA@
0x14002F3D0: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x14002BF46: "__cdecl get_initial_wide_environment" _get_initial_wide_environment
0x140022854: "public: static void __cdecl SessionConfig::DeleteChannel(wchar_t const * __ptr64)" ?DeleteChannel@SessionConfig@@SAXPEB_W@Z
0x14002F918: "__cdecl _imp__o__errno" __imp__o__errno
0x1400054F8: "long __cdecl FilePuts(void * __ptr64,wchar_t const * __ptr64)" ?FilePuts@@YAJPEAXPEB_W@Z
0x140030978: "RenderedXml" ??_C@_1BI@GMMILKJH@?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AAe?$AAd?$AAX?$AAm?$AAl?$AA?$AA@
0x14002766C: "public: void __cdecl RegistryPaths::GetWinevtPublisherRegPath(struct _GUID const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetWinevtPublisherRegPath@RegistryPaths@@QEBAXAEBU_GUID@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x140031858: "parameterFilePath" ??_C@_1CE@JAMGJENP@?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14002FA80: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x14002F390: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x140031FA0: "sidType" ??_C@_1BA@OIAPDCCG@?$AAs?$AAi?$AAd?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140030CF8: "Keywords" ??_C@_1BC@KMDLMMHN@?$AAK?$AAe?$AAy?$AAw?$AAo?$AAr?$AAd?$AAs?$AA?$AA@
0x140030FE0: "ca" ??_C@_15EDMHLDMO@?$AAc?$AAa?$AA?$AA@
0x14003E280: "struct WinMetaChannel * WinMetaChannels" ?WinMetaChannels@@3PAUWinMetaChannel@@A
0x14002F960: "__cdecl _imp__c_exit" __imp__c_exit
0x140021020: WPP_SF__guid_D
0x14003B2E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140027DB0: "long __cdecl RegReadByteArrayValueNoThrow(struct HKEY__ * __ptr64,wchar_t const * __ptr64,wchar_t const * __ptr64,unsigned long & __ptr64,class std::unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> > & __ptr64)" ?RegReadByteArrayValueNoThrow@@YAJPEAUHKEY__@@PEB_W1AEAKAEAV?$unique_ptr@$$BY0A@EU?$default_delete@$$BY0A@E@std@@@std@@@Z
0x140030DE0: "ns:logging/ns:autoBackup" ??_C@_1DC@MLJHEKIM@?$AAn?$AAs?$AA?3?$AAl?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?1?$AAn?$AAs?$AA?3?$AAa?$AAu?$AAt?$AAo?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x1400309E0: "Analytic" ??_C@_1BC@MMFMPFIO@?$AAA?$AAn?$AAa?$AAl?$AAy?$AAt?$AAi?$AAc?$AA?$AA@
0x14002F8C0: "__cdecl _imp__o__cexit" __imp__o__cexit
0x14002BEF2: "__cdecl o___stdio_common_vswprintf" _o___stdio_common_vswprintf
0x140031550: "Event/System/Provider/@Name" ??_C@_1DI@DLAHCFCM@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?1?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?1?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?1?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14001F9F0: WPP_SF_SD
0x14001D000: WPP_SF_sD
0x140019928: "public: __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::~_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >(void) __ptr64" ??1?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@QEAA@XZ
0x14002F860: "__cdecl _imp_free" __imp_free
0x14002C551: "__cdecl _imp_load_EvtNextPublisherId" __imp_load_EvtNextPublisherId
0x140031378: "backup" ??_C@_1O@HHIBNCKL@?$AAb?$AAa?$AAc?$AAk?$AAu?$AAp?$AA?$AA@
0x14002F770: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140029FA8: "public: void __cdecl RegistryPaths::GetAutoLoggerSecurityRegPath(class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)const __ptr64" ?GetAutoLoggerSecurityRegPath@RegistryPaths@@QEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
0x140031A50: "%SystemRoot%\System32\wevtutil.e" ??_C@_1EG@FIECJOLC@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAw?$AAe?$AAv?$AAt?$AAu?$AAt?$AAi?$AAl?$AA?4?$AAe@
0x140019D50: ??$replace@U?$handle_traits@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@Z$0A@@tlx@@@tlx@@YAPEAPEAUHKEY__@@AEAV?$unique_any@U?$handle_traits@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@Z$0A@@tlx@@@0@@Z
0x140027384: "void __cdecl FileTimeToLocalString(struct _FILETIME const & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64)" ?FileTimeToLocalString@@YAXAEBU_FILETIME@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
0x14002F5E8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140013D80: "public: __cdecl wmi::AutoRef<class ChannelConfigReader>::~AutoRef<class ChannelConfigReader>(void) __ptr64" ??1?$AutoRef@VChannelConfigReader@@@wmi@@QEAA@XZ
0x14002BFA0: "__cdecl o__set_fmode" _o__set_fmode
0x140028E10: "public: virtual unsigned long __cdecl Buffer::GetCurrentIndex(void)const __ptr64" ?GetCurrentIndex@Buffer@@UEBAKXZ
0x140031368: WPP_b0a8f9b7b846364da791a5f52b7e73b4_Traceguids
0x14002B948: "__cdecl _scrt_initialize_winrt" __scrt_initialize_winrt
0x140031AF0: WPP_63eafae7dfb23f978be3827b48c45eae_Traceguids
0x14003B164: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400015DC: "private: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const,struct CommandOption> > > > __cdecl CommandArguments::GetOption(wchar_t const * __ptr64,wchar_t const * __ptr64)const __ptr64" ?GetOption@CommandArguments@@AEBA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UCommandOption@@@std@@@std@@@std@@@std@@PEB_W0@Z
0x140013E68: "public: void __cdecl std::_Tree_comp_alloc<class std::_Tset_traits<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,struct StringSetLessNoCase,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,0> >::_Freenode0(struct std::_Tree_node<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_comp_alloc@V?$_Tset_traits@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UStringSetLessNoCase@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@$0A@@std@@@std@@QEAAXPEAU?$_Tree_node@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@2@@Z
0x14002BF94: "__cdecl set_app_type" _set_app_type
0x14002F800: "__cdecl _imp__o__seh_filter_exe" __imp__o__seh_filter_exe
0x14002F750: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x14001A8C0: "protected: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned long> > > __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Insert_at<unsigned long const & __ptr64,struct std::_Not_a_node_tag>(bool,struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64,unsigned long const & __ptr64,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_at@AEBKU_Not_a_node_tag@std@@@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@K@std@@@std@@@1@_NPEAU?$_Tree_node@KPEAX@1@AEBKU_Not_a_node_tag@1@@Z
0x14003B330: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140030C90: "AB" ??_C@_15LLCEBHCD@?$AAA?$AAB?$AA?$AA@
0x14000193C: WPP_SF_S
0x14002BE86: memset
0x14003B40C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140032C88: "\Application" ??_C@_1BK@IMCFOCEA@?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002F4A8: "__cdecl _imp_ReadFile" __imp_ReadFile
0x14003E588: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
[JEB Decompiler by PNF Software]