Generated by JEB on 2019/08/01

PE: C:\Windows\System32\auditpolcore.dll Base=0x180000000 SHA-256=ED1A710865F73C386F143A27AD7C42DDF92AA8AF91BA554F9ED05EEBC858ED7B
PDB: auditpolcore.pdb GUID={DBCB21C1-048E-9B2E-B4EA792E522D61AF} Age=1

725 located named symbols:
0x180012040: "__vectorcall ??_R0?AVResultException@wil@" ??_R0?AVResultException@wil@@@8
0x1800126F8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x18000E0C0: "-%-20s" ??_C@_1O@NEPDPGOM@?$AA?9?$AA?$CF?$AA?9?$AA2?$AA0?$AAs?$AA?$AA@
0x18000B4EC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000D390: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180005A1C: "public: void __cdecl std::allocator<struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node>::deallocate(struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$allocator@U_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@@std@@QEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@2@_K@Z
0x18000266C: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x180007720: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::replace(unsigned __int64,unsigned __int64,class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@_K0AEBV12@00@Z
0x18000B250: "__cdecl FindPESection" _FindPESection
0x180001340: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18000DD38: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x180003D20: "unsigned long __cdecl AdtSetOption(unsigned short const * __ptr64,unsigned long)" ?AdtSetOption@@YAKPEBGK@Z
0x18000D338: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x180006C80: "unsigned long __cdecl AdtListCategories(unsigned char)" ?AdtListCategories@@YAKE@Z
0x1800011EC: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000D708: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x180010274: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000D710: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x18000D648: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA
0x180010260: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18000DE9C: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x1800126F0: "struct HINSTANCE__ * __ptr64 __ptr64 mod" ?mod@@3PEAUHINSTANCE__@@EA
0x180012758: "void (__cdecl* __ptr64 wil::details::g_pfnRethrow)(void)" ?g_pfnRethrow@details@wil@@3P6AXXZEA
0x18000D438: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x18000613C: "public: __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>(char const * __ptr64) __ptr64" ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAA@PEBD@Z
0x1800127A0: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180009550: "private: virtual unsigned long __cdecl CSetPerUserAuditPolicy::AdtSetPolicy(struct _AUDIT_POLICY_INFORMATION * __ptr64,unsigned long) __ptr64" ?AdtSetPolicy@CSetPerUserAuditPolicy@@EEAAKPEAU_AUDIT_POLICY_INFORMATION@@K@Z
0x180012120: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003520: "public: virtual void * __ptr64 __cdecl CSetPerUserAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSetPerUserAuditPolicy@@UEAAPEAXI@Z
0x180001360: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x18000AD2C: "__cdecl CRT_INIT" _CRT_INIT
0x18000D718: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x180012134: "int g_OutputTitle" ?g_OutputTitle@@3HA
0x18000D470: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000287C: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x18000B926: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18000B7D8: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x18000B85C: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x18000BC60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000E028: "Failed to open file " ??_C@_1CK@JKHJPFKO@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?6?$AA?$AA@
0x18000D388: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180001B14: "long __cdecl wil::details::StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@details@wil@@YAJPEAD_KPEBDZZ
0x180012070: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x18000DEA4: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x180002018: "public: virtual __cdecl wil::ResultException::~ResultException(void) __ptr64" ??1ResultException@wil@@UEAA@XZ
0x18000A9D4: "protected: struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node * __ptr64 __cdecl std::list<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Buynode(struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node * __ptr64,struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node * __ptr64,struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64 const & __ptr64) __ptr64" ?_Buynode@?$list@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@std@@IEAAPEAU_Node@?$_List_nod@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@2@PEAU342@0AEBQEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@Z
0x180003498: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x180012008: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x180001834: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x18000DB32: "" ??_C@_00CNPNBAHC@?$AA@
0x18000A2FC: "private: unsigned long __cdecl CAdtRestore::AdtAddPolicyInformationToRestoreData(struct _GUID * __ptr64,unsigned long,struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64) __ptr64" ?AdtAddPolicyInformationToRestoreData@CAdtRestore@@AEAAKPEAU_GUID@@KPEAUAUDIT_POLICY_RESTORE@1@@Z
0x180006178: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@PEBD_K@Z
0x1800128D0: g_ulAdditionalProbeSize
0x18000D760: "__cdecl _imp_memmove_s" __imp_memmove_s
0x180003580: "public: virtual void * __ptr64 __cdecl CQueryPerUserAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQueryPerUserAuditPolicy@@UEAAPEAXI@Z
0x180007DD0: "public: unsigned long __cdecl AuditPolicyData::AdtGetSubCategoryGuidsForCategoryGuid(struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64 * __ptr64) __ptr64" ?AdtGetSubCategoryGuidsForCategoryGuid@AuditPolicyData@@QEAAKPEAU_GUID@@PEAPEAUAUDIT_GUID_ARRAY@@@Z
0x18000D408: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180007440: "unsigned long __cdecl AdtRemoveOtherUsersFromSacl(struct _ACL * __ptr64,void * __ptr64,struct _ACL * __ptr64 * __ptr64)" ?AdtRemoveOtherUsersFromSacl@@YAKPEAU_ACL@@PEAXPEAPEAU1@@Z
0x18000DF68: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180012840: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x1800101E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180006278: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x18000D3D8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000D730: "__cdecl _imp_wcschr" __imp_wcschr
0x180004EE8: "public: __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::~_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@QEAA@XZ
0x18000D818: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18001281C: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18000DC60: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x18000D420: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180002C78: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x18000D758: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18000D3F0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000D748: "__cdecl _imp_fgetws" __imp_fgetws
0x18000DF28: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x1800082BC: "public: class std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::insert(class std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::iterator,struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> const & __ptr64) __ptr64" ?insert@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@QEAA?AViterator@12@V312@AEBU?$pair@QEBGPEAU_GUID@@@2@@Z
0x18000B234: "__cdecl XcptFilter" _XcptFilter
0x18000D820: "__cdecl _xc_a" __xc_a
0x180012760: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000DB90: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x18000130C: "public: __cdecl std::bad_alloc::bad_alloc(char const * __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@PEBD@Z
0x180005A1C: "public: void __cdecl std::allocator<struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node>::deallocate(struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$allocator@U_Node@?$_List_nod@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@std@@@std@@QEAAXPEAU_Node@?$_List_nod@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@2@_K@Z
0x180003020: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x18000D650: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18000DCD0: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x1800033E4: "public: __cdecl std::out_of_range::out_of_range(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64,class _STL70 * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@1@PEAV_STL70@@@Z
0x18000DE30: "CrashOnAuditFail" ??_C@_1CC@LOHLDOPL@?$AAC?$AAr?$AAa?$AAs?$AAh?$AAO?$AAn?$AAA?$AAu?$AAd?$AAi?$AAt?$AAF?$AAa?$AAi?$AAl?$AA?$AA@
0x180006338: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x18000B86C: "public: static void __cdecl std::_String_base::_Xlen(void)" ?_Xlen@_String_base@std@@SAXXZ
0x180003520: "public: virtual void * __ptr64 __cdecl CSetPerUserAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSetPerUserAuditPolicy@@UEAAPEAXI@Z
0x18000D3C0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000B7A5: "__cdecl lock" _lock
0x180012710: g_pfnResultLoggingCallback
0x1800120B8: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x18000DBA8: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x18000BABF: "__cdecl callnewh" _callnewh
0x180007A10: "protected: virtual void __cdecl std::length_error::_Doraise(void)const __ptr64" ?_Doraise@length_error@std@@MEBAXXZ
0x18000D380: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x18000DA28: "__cdecl _guard_iat_table" __guard_iat_table
0x18000D458: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180012728: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x18000BC32: memcpy
0x18000D770: "__cdecl _imp__vsnwprintf_s" __imp__vsnwprintf_s
0x1800035AC: "private: __cdecl AuditPolicyData::AuditPolicyData(void) __ptr64" ??0AuditPolicyData@@AEAA@XZ
0x180012138: "int g_bAnsiEncoding" ?g_bAnsiEncoding@@3HA
0x18000A0B0: "private: virtual unsigned long __cdecl CQuerySystemAuditPolicy::AdtQueryPolicy(struct _GUID * __ptr64,unsigned long,struct _AUDIT_POLICY_INFORMATION * __ptr64 * __ptr64) __ptr64" ?AdtQueryPolicy@CQuerySystemAuditPolicy@@EEAAKPEAU_GUID@@KPEAPEAU_AUDIT_POLICY_INFORMATION@@@Z
0x18000BB60: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180002D10: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x18000DB50: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000D690: "__cdecl _imp_memset" __imp_memset
0x18000D518: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x1800089DC: "unsigned long __cdecl WriteOutput(struct _iobuf * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?WriteOutput@@YAKPEAU_iobuf@@PEBGPEAD@Z
0x18000B40F: "__cdecl initterm" _initterm
0x18001213E: g_header_init_InitializeResultExceptions
0x1800013D0: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x1800100D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800128B0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800051B4: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x18000D548: "__cdecl _imp_Sleep" __imp_Sleep
0x18000FB48: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z64
0x18000AA2C: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x18000D870: "__cdecl _xi_z" __xi_z
0x180012810: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180009430: "private: virtual unsigned long __cdecl CSetSystemAuditPolicy::AdtGetMask(unsigned long) __ptr64" ?AdtGetMask@CSetSystemAuditPolicy@@EEAAKK@Z
0x18000D6A8: "__cdecl _imp___iob_func" __imp___iob_func
0x18000D360: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180012750: g_pfnThrowPlatformException
0x18000D7D0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180012814: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x18000FC70: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x18000D0C0: "const CQueryPerUserAuditPolicy::`vftable'" ??_7CQueryPerUserAuditPolicy@@6B@
0x18000B41B: "__cdecl _C_specific_handler" __C_specific_handler
0x180003580: "public: virtual void * __ptr64 __cdecl CQueryPerUserAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQueryPerUserAuditPolicy@@UEAAPEAXI@Z
0x18000E080: " %-40s" ??_C@_1BA@IPFJMGNP@?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?$AA@
0x18000DCC8: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x18000D508: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x180012708: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x1800017E4: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x18000D680: "__cdecl _imp__onexit" __imp__onexit
0x18000E000: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x18000D3A8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000DCE8: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x18000DF08: "r, ccs=UNICODE" ??_C@_1BO@IPJOIAPP@?$AAr?$AA?0?$AA?5?$AAc?$AAc?$AAs?$AA?$DN?$AAU?$AAN?$AAI?$AAC?$AAO?$AAD?$AAE?$AA?$AA@
0x18000D788: "__cdecl _imp__wtoi" __imp__wtoi
0x18000D3A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000D4C0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180006400: "unsigned long __cdecl AdtSetPrivilege(unsigned short const * __ptr64,unsigned char)" ?AdtSetPrivilege@@YAKPEBGE@Z
0x18000BAFC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005038: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>(unsigned short const * __ptr64) __ptr64" ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAA@PEBG@Z
0x18000DEB0: "AuditBaseObjects" ??_C@_1CC@MBGHAOD@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAa?$AAs?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x18000DD08: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x180012770: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000D6D8: "__cdecl _imp_ferror" __imp_ferror
0x18000AC30: SafeAllocaFreeToHeap
0x18000D7E0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x1800084BC: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator::operator--(void) __ptr64" ??Fiterator@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x18000D500: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180007FC4: "public: struct _GUID * __ptr64 & __ptr64 __cdecl std::map<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> > >::operator[](unsigned short const * __ptr64 const & __ptr64) __ptr64" ??A?$map@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@@std@@QEAAAEAPEAU_GUID@@AEBQEBG@Z
0x18000FB98: "__cdecl CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200" _CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200
0x180010148: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000D4A8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000B240: "__cdecl amsg_exit" _amsg_exit
0x180004F80: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator::operator++(void) __ptr64" ??Eiterator@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x18000D798: "__cdecl _imp__callnewh" __imp__callnewh
0x18000D600: "__cdecl _imp_IsWellKnownSid" __imp_IsWellKnownSid
0x180009D40: "private: virtual unsigned long __cdecl CQuerySystemAuditPolicy::AdtDisplayPolicy(unsigned long) __ptr64" ?AdtDisplayPolicy@CQuerySystemAuditPolicy@@EEAAKK@Z
0x180003310: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x180012828: "int g_bGeneralized" ?g_bGeneralized@@3HA
0x18000882C: "protected: struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Buynode(struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> const & __ptr64,char) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@2@PEAU342@00AEBU?$pair@QEBGPEAU_GUID@@@2@D@Z
0x180003264: "public: virtual __cdecl std::logic_error::~logic_error(void) __ptr64" ??1logic_error@std@@UEAA@XZ
0x18000D328: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180005784: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x18000D530: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x18000DAA8: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x180008E00: "int __cdecl DisplayMessageToSpecificConsoleHandle(struct _iobuf * __ptr64,unsigned short const * __ptr64,...)" ?DisplayMessageToSpecificConsoleHandle@@YAHPEAU_iobuf@@PEBGZZ
0x18000D018: "const CSetSystemAuditPolicy::`vftable'" ??_7CSetSystemAuditPolicy@@6B@
0x180006DD0: "unsigned long __cdecl AdtListSubCategories(struct AUDIT_GUID_ARRAY * __ptr64,unsigned char)" ?AdtListSubCategories@@YAKPEAUAUDIT_GUID_ARRAY@@E@Z
0x180010238: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-1
0x18000DD50: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x1800019E0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x18000D7C8: "__cdecl _imp__lock" __imp__lock
0x18000D4F8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x18000B4BC: atexit
0x18000ACC0: VerifyStackAvailable
0x18000DB70: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x180012768: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x18001280C: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x18000FC28: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x180001800: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x180002560: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x180007994: "public: __cdecl std::length_error::length_error(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@1@@Z
0x18000DD04: "%ws" ??_C@_03BMPLCLAP@?$CFws?$AA@
0x180012700: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x18000D4C8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000DAB0: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x18000D370: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000D3E8: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180005AF0: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@_K0@Z
0x18000D5D8: "__cdecl _imp_AuditQueryGlobalSaclW" __imp_AuditQueryGlobalSaclW
0x18000D560: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18000D480: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180005A2C: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@_K0@Z
0x18000B7BD: "__cdecl _dllonexit" __dllonexit
0x18000D5C8: "__cdecl _imp_AuditLookupSubCategoryNameW" __imp_AuditLookupSubCategoryNameW
0x180005930: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x1800128A0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001124: DllMain
0x180003520: "public: virtual void * __ptr64 __cdecl CSetSystemAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSetSystemAuditPolicy@@UEAAPEAXI@Z
0x180012790: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x180012808: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x180003580: "public: virtual void * __ptr64 __cdecl CQuerySystemAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuerySystemAuditPolicy@@UEAAPEAXI@Z
0x180007E30: "public: unsigned long __cdecl AuditPolicyData::AdtLookupCategoryGuid(struct _GUID * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?AdtLookupCategoryGuid@AuditPolicyData@@QEAAKPEAU_GUID@@PEAPEBG@Z
0x180012130: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x1800053EC: "protected: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@IEAAX_N_K@Z
0x180010224: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-audit-l1-1-0
0x180010210: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000D6E8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1800127C0: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x18000D5F8: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000D6B0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000D090: "const CQuerySystemAuditPolicy::`vftable'" ??_7CQuerySystemAuditPolicy@@6B@
0x18000D4E0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000D418: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180005250: "protected: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@IEAAX_N_K@Z
0x180003580: "public: virtual void * __ptr64 __cdecl CQueryAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQueryAuditPolicy@@UEAAPEAXI@Z
0x180004EE8: "public: __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::~_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@QEAA@XZ
0x18000D358: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000B80C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000D668: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180003264: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x1800088E0: "unsigned long __cdecl AdtDetectUnicode(void)" ?AdtDetectUnicode@@YAKXZ
0x180012110: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000BAD8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000D520: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x18000E010: "map/set<T> too long" ??_C@_0BE@JONHPENG@map?1set?$DMT?$DO?5too?5long?$AA@
0x18000DF30: "%s,,%s,,,,%s " ??_C@_1BO@NEMJHLJG@?$AA?$CF?$AAs?$AA?0?$AA?0?$AA?$CF?$AAs?$AA?0?$AA?0?$AA?0?$AA?0?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x18000E070: "%s,%s," ??_C@_1O@LHPCCDAM@?$AA?$CF?$AAs?$AA?0?$AA?$CF?$AAs?$AA?0?$AA?$AA@
0x18000D6A0: "__cdecl _imp_memcmp" __imp_memcmp
0x180003F80: "unsigned long __cdecl AdtRestorePolicyGeneralized(unsigned short const * __ptr64,void * __ptr64)" ?AdtRestorePolicyGeneralized@@YAKPEBGPEAX@Z
0x18000D460: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x18000DF50: "S-1-5-10" ??_C@_1BC@JLNKJFAK@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA0?$AA?$AA@
0x180003E00: "unsigned long __cdecl AdtBackupPolicy(unsigned short const * __ptr64)" ?AdtBackupPolicy@@YAKPEBG@Z
0x18000D330: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18000D5E8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180003310: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x18000D048: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x18000D478: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000D528: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800101C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x180003510: "private: virtual int __cdecl CQueryPerUserAuditPolicy::AdtIsPolicySystem(void) __ptr64" ?AdtIsPolicySystem@CQueryPerUserAuditPolicy@@EEAAHXZ
0x18000B300: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000BA0C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000BA5C: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x180001164: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180012720: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x18000D160: "const CQueryAuditPolicy::`vftable'" ??_7CQueryAuditPolicy@@6B@
0x18000DD88: "RegistryGlobalSacl" ??_C@_1CG@KLFAJDLN@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAS?$AAa?$AAc?$AAl?$AA?$AA@
0x18000A6E4: "private: unsigned long __cdecl CAdtRestore::AdtAddRestoreResourceSacl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AdtAddRestoreResourceSacl@CAdtRestore@@AEAAKPEBG0@Z
0x1800019F0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x18000D800: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000DA80: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x18000DBF8: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x180010080: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000DB10: "auditpolcore.dll" ??_C@_1CC@MOBCPPPN@?$AAa?$AAu?$AAd?$AAi?$AAt?$AAp?$AAo?$AAl?$AAc?$AAo?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000DA90: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x18000D3B0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000DD30: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x18000D740: "__cdecl _imp_wscanf" __imp_wscanf
0x180012818: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x18000D5A0: "__cdecl _imp_AuditEnumerateSubCategories" __imp_AuditEnumerateSubCategories
0x180009590: "public: unsigned long __cdecl CQueryAuditPolicy::AdtQueryAuditPolicy(void) __ptr64" ?AdtQueryAuditPolicy@CQueryAuditPolicy@@QEAAKXZ
0x18000AF70: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000BBE8: "__cdecl _acrt_iob_func" __acrt_iob_func
0x18000882C: "protected: struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Buynode(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> const & __ptr64,char) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@2@PEAU342@00AEBU?$pair@QEAU_GUID@@PEBG@2@D@Z
0x18000D6B8: "__cdecl _imp__initterm" __imp__initterm
0x180010184: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000D538: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x18000D638: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x18000D350: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180012798: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x18000FAE8: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x180008538: "protected: class std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Insert(bool,struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> const & __ptr64) __ptr64" ?_Insert@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@IEAA?AViterator@12@_NPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@2@AEBU?$pair@QEBGPEAU_GUID@@@2@@Z
0x180007EF0: "void __cdecl AuditPolicyData_DeleteAuditDataInstance(void)" ?AuditPolicyData_DeleteAuditDataInstance@@YAXXZ
0x180003520: "public: virtual void * __ptr64 __cdecl CSetSystemAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSetSystemAuditPolicy@@UEAAPEAXI@Z
0x1800068A8: "void __cdecl AdtLoadStringImpl(struct HINSTANCE__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?AdtLoadStringImpl@@YAXPEAUHINSTANCE__@@KPEAGK@Z
0x180003580: "public: virtual void * __ptr64 __cdecl CQuerySystemAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuerySystemAuditPolicy@@UEAAPEAXI@Z
0x18001010C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800101FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x18000FBD8: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1800088B0: "unsigned long __cdecl SetDisplayPolicy(enum eDisplayPolicy)" ?SetDisplayPolicy@@YAKW4eDisplayPolicy@@@Z
0x18000D618: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180012890: "__cdecl _onexitend" __onexitend
0x18000D608: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000B7B1: "__cdecl unlock" _unlock
0x18000D810: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800060E8: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Erase(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@IEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@2@@Z
0x1800060E8: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Erase(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@IEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@2@@Z
0x18000DE70: "%s,,%s:" ??_C@_1BA@DMAPKOA@?$AA?$CF?$AAs?$AA?0?$AA?0?$AA?$CF?$AAs?$AA?3?$AA?$AA@
0x180003580: "public: virtual void * __ptr64 __cdecl CQueryAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQueryAuditPolicy@@UEAAPEAXI@Z
0x18000D7A0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x18000BA70: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18000D488: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180009480: "private: virtual unsigned long __cdecl CSetPerUserAuditPolicy::AdtGetMask(unsigned long) __ptr64" ?AdtGetMask@CSetPerUserAuditPolicy@@EEAAKK@Z
0x180003738: "public: __cdecl std::map<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> > >::~map<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> > >(void) __ptr64" ??1?$map@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@@std@@QEAA@XZ
0x1800084BC: "public: class std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::iterator::operator--(void) __ptr64" ??Fiterator@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x1800036E4: "public: static class AuditPolicyData * __ptr64 __cdecl AuditPolicyData::GetAuditDataInstance(void)" ?GetAuditDataInstance@AuditPolicyData@@SAPEAV1@XZ
0x18000D7E8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180001FE0: "public: virtual void * __ptr64 __cdecl wil::ResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_EResultException@wil@@UEAAPEAXI@Z
0x1800088A0: "enum eDisplayPolicy __cdecl GetDisplayPolicy(void)" ?GetDisplayPolicy@@YA?AW4eDisplayPolicy@@XZ
0x180007E90: "public: unsigned long __cdecl AuditPolicyData::AdtLookupSubCategoryGuid(struct _GUID * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?AdtLookupSubCategoryGuid@AuditPolicyData@@QEAAKPEAU_GUID@@PEAPEBG@Z
0x18000D340: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180012830: "void * __ptr64 __ptr64 g_hFile" ?g_hFile@@3PEAXEA
0x18000D570: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000D860: "__cdecl _xi_a" __xi_a
0x18000D558: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000D348: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x1800127AC: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x18000DD60: "FileGlobalSacl" ??_C@_1BO@EMLBOMDL@?$AAF?$AAi?$AAl?$AAe?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAS?$AAa?$AAc?$AAl?$AA?$AA@
0x180007BC0: "private: unsigned long __cdecl AuditPolicyData::AuditInitializeData(void) __ptr64" ?AuditInitializeData@AuditPolicyData@@AEAAKXZ
0x18000D678: "__cdecl _imp__unlock" __imp__unlock
0x180006FE0: "void __cdecl AdtPrintCategoryListTitle(unsigned char)" ?AdtPrintCategoryListTitle@@YAXE@Z
0x180006580: "unsigned long __cdecl AdtConvertGuidToString(struct _GUID * __ptr64,unsigned short * __ptr64,unsigned long)" ?AdtConvertGuidToString@@YAKPEAU_GUID@@PEAGK@Z
0x18000A464: "private: unsigned long __cdecl CAdtRestore::AdtAddRestorePerUserPolicy(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?AdtAddRestorePerUserPolicy@CAdtRestore@@AEAAKPEBG0K@Z
0x180012820: "private: static class AuditPolicyData * __ptr64 __ptr64 AuditPolicyData::m_pAuditPolicyData" ?m_pAuditPolicyData@AuditPolicyData@@0PEAV1@EA
0x18000D620: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000517C: "public: __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::~basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>(void) __ptr64" ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAA@XZ
0x180001390: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x18000FC00: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x18000B940: "__cdecl invoke_watson" _invoke_watson
0x18000DE54: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x180005000: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::~basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>(void) __ptr64" ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAA@XZ
0x180008D50: "int __cdecl LoadFormatStringAndPrintToConsole(unsigned long,...)" ?LoadFormatStringAndPrintToConsole@@YAHKZZ
0x18000DED8: "AuditBaseDirectories" ??_C@_1CK@JDMEECLM@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAa?$AAs?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x1800100BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000D448: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18000B6A8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1800128B8: "__cdecl pRawDllMain" _pRawDllMain
0x18000D5E0: api-ms-win-security-audit-l1-1-1_NULL_THUNK_DATA
0x18000D7A8: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000D590: api-ms-win-security-audit-l1-1-0_NULL_THUNK_DATA
0x18000DE94: ",," ??_C@_15NELHILJH@?$AA?0?$AA?0?$AA?$AA@
0x180003738: "public: __cdecl std::map<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> > >::~map<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> > >(void) __ptr64" ??1?$map@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@@std@@QEAA@XZ
0x18000D5F0: "__cdecl _imp_SetSecurityDescriptorSacl" __imp_SetSecurityDescriptorSacl
0x18000D7C0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18000D318: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x18000A21C: "public: __cdecl CAdtRestore::~CAdtRestore(void) __ptr64" ??1CAdtRestore@@QEAA@XZ
0x180002924: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x18000B85C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000E058: "Error: %d" ??_C@_1BE@NJINNAI@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x180003310: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x18000D010: "const type_info::`vftable'" ??_7type_info@@6B@
0x180010134: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000B210: "__cdecl _security_check_cookie" __security_check_cookie
0x18000D858: "__cdecl _xc_z" __xc_z
0x1800016DC: "public: bool __cdecl wil::details::shared_buffer::create(void const * __ptr64,unsigned __int64) __ptr64" ?create@shared_buffer@details@wil@@QEAA_NPEBX_K@Z
0x1800101AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180002768: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x18000D490: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000D3F8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001024C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0
0x18000FA98: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x18001213C: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18000BACB: "__cdecl CxxThrowException" _CxxThrowException
0x180003460: "protected: virtual void __cdecl std::out_of_range::_Doraise(void)const __ptr64" ?_Doraise@out_of_range@std@@MEBAXXZ
0x180008074: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::insert(class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator,struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> const & __ptr64) __ptr64" ?insert@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@QEAA?AViterator@12@V312@AEBU?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@2@@Z
0x18000D568: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180012018: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x180001A50: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x180006780: "unsigned long __cdecl AdtParseAuditOptionName(unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ?AdtParseAuditOptionName@@YAKPEBGPEAPEBG@Z
0x180003550: "private: virtual unsigned long __cdecl CSetSystemAuditPolicy::AdtGetNullPolicy(void) __ptr64" ?AdtGetNullPolicy@CSetSystemAuditPolicy@@EEAAKXZ
0x18000D450: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x18000FB08: "__cdecl TI2?AVlogic_error@std@@" _TI2?AVlogic_error@std@@
0x180007F18: "public: unsigned short const * __ptr64 & __ptr64 __cdecl std::map<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> > >::operator[](struct _GUID * __ptr64 const & __ptr64) __ptr64" ??A?$map@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@@std@@QEAAAEAPEBGAEBQEAU_GUID@@@Z
0x18000D3C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180012718: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x18000D630: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x18000D3B8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000BC80: "__cdecl _chkstk" __chkstk
0x18000D0F0: "const CSetPerUserAuditPolicy::`vftable'" ??_7CSetPerUserAuditPolicy@@6B@
0x18000BA70: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18000D598: "__cdecl _imp_AuditSetPerUserPolicy" __imp_AuditSetPerUserPolicy
0x18000E0D0: "list<T> too long" ??_C@_0BB@MOGOBHAF@list?$DMT?$DO?5too?5long?$AA@
0x18000147C: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x18000D728: "__cdecl _imp__vsnprintf_s" __imp__vsnprintf_s
0x180004970: "unsigned long __cdecl AdtRemoveAllUsers(void)" ?AdtRemoveAllUsers@@YAKXZ
0x180006920: "void __cdecl AdtLoadStringEx(unsigned long,unsigned short * __ptr64,unsigned long)" ?AdtLoadStringEx@@YAXKPEAGK@Z
0x18000DE00: "FullPrivilegeAuditing" ??_C@_1CM@BLEAPOGH@?$AAF?$AAu?$AAl?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAA?$AAu?$AAd?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180003510: "private: virtual void * __ptr64 __cdecl CSetAuditPolicy::AdtGetPolicyTarget(void) __ptr64" ?AdtGetPolicyTarget@CSetAuditPolicy@@EEAAPEAXXZ
0x18000B934: "__cdecl invalid_parameter" _invalid_parameter
0x180009580: "int __cdecl AdtCompareAuditPolicyInformation(void const * __ptr64,void const * __ptr64)" ?AdtCompareAuditPolicyInformation@@YAHPEBX0@Z
0x180001FE0: "public: virtual void * __ptr64 __cdecl wil::ResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GResultException@wil@@UEAAPEAXI@Z
0x18000289C: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x18000D4F0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180012738: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180004EE8: "public: __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::~_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@QEAA@XZ
0x180002100: "void __cdecl wil::details::ThrowResultExceptionInternal(struct wil::FailureInfo const & __ptr64)" ?ThrowResultExceptionInternal@details@wil@@YAXAEBUFailureInfo@2@@Z
0x180003C40: "unsigned long __cdecl AdtSetPerUserPolicy(void * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,unsigned char,unsigned char,unsigned char,unsigned char,unsigned long,unsigned long,unsigned char)" ?AdtSetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1EEEEKKE@Z
0x18000D150: "const wil::ResultException::`vftable'" ??_7ResultException@wil@@6B@
0x1800100E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180001B94: "public: void __cdecl wil::StoredFailureInfo::SetFailureInfo(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetFailureInfo@StoredFailureInfo@wil@@QEAAXAEBUFailureInfo@2@@Z
0x18000D4A0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000D878: "__cdecl _guard_fids_table" __guard_fids_table
0x18000D7D8: msvcrt_NULL_THUNK_DATA
0x18000D210: "__cdecl load_config_used" _load_config_used
0x1800120E0: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x18000D790: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x18000212C: "public: __cdecl wil::ResultException::ResultException(class wil::ResultException const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBV01@@Z
0x180001390: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x18000D510: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18000D640: "__cdecl _imp_GetExplicitEntriesFromAclW" __imp_GetExplicitEntriesFromAclW
0x18001015C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18000D5A8: "__cdecl _imp_AuditQueryPerUserPolicy" __imp_AuditQueryPerUserPolicy
0x18000FC48: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z64
0x180003560: "private: virtual unsigned long __cdecl CSetPerUserAuditPolicy::AdtGetNullPolicy(void) __ptr64" ?AdtGetNullPolicy@CSetPerUserAuditPolicy@@EEAAKXZ
0x18000DF90: "{%08lX-%04X-%04X-%02X%02X-%02X%0" ??_C@_1GI@LBPPMOKF@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAl?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0@
0x180003120: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x180004740: "unsigned long __cdecl AdtRemoveBasePolicy(void * __ptr64,unsigned char)" ?AdtRemoveBasePolicy@@YAKPEAXE@Z
0x180004B84: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6APEAXPEAX@Z$1?LocalFree@@YAPEAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x18000285C: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x18000DE80: "LocalHost" ??_C@_1BE@MGBOFOPD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x180004F80: "public: class std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::const_iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::const_iterator::operator++(void) __ptr64" ??Econst_iterator@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x1800028F0: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x1800127B0: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x1800101D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000D780: "__cdecl _imp_qsort" __imp_qsort
0x18000A120: "private: virtual unsigned long __cdecl CQueryPerUserAuditPolicy::AdtGetPolicyTarget(unsigned short * __ptr64 * __ptr64) __ptr64" ?AdtGetPolicyTarget@CQueryPerUserAuditPolicy@@EEAAKPEAPEAG@Z
0x18000D7B8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000BA50: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x180004BA4: "unsigned long __cdecl AdtBackupResourceSacls(void)" ?AdtBackupResourceSacls@@YAKXZ
0x180003310: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x18000E0A8: ",%d" ??_C@_17NHCBKDFO@?$AA?0?$AA?$CF?$AAd?$AA?$AA@
0x18000D400: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180001990: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x1800070BC: "unsigned long __cdecl AdtLookupCurrentSid(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> * __ptr64)" ?AdtLookupCurrentSid@@YAKPEAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@@Z
0x1800032D0: "protected: virtual void __cdecl std::logic_error::_Doraise(void)const __ptr64" ?_Doraise@logic_error@std@@MEBAXXZ
0x18000128C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180007A48: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x180003B60: "unsigned long __cdecl AdtSetSystemPolicy(struct AUDIT_GUID_ARRAY * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,unsigned char,unsigned char,unsigned char,unsigned char,unsigned long,unsigned long,unsigned char)" ?AdtSetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0EEEEKKE@Z
0x1800024C4: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x18000D4D8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800037E0: "unsigned long __cdecl AdtGetPerUserPolicy(void * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64)" ?AdtGetPerUserPolicy@@YAKPEAXPEAUAUDIT_GUID_ARRAY@@1@Z
0x18000D498: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003880: "unsigned long __cdecl AdtGetOption(unsigned short const * __ptr64)" ?AdtGetOption@@YAKPEBG@Z
0x18000D078: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x18000DD10: "internal\sdk\inc\wil\resource.h" ??_C@_0CA@BIKDFFBC@internal?2sdk?2inc?2wil?2resource?4h?$AA@
0x1800043F0: "unsigned long __cdecl AdtClearPolicy(unsigned char)" ?AdtClearPolicy@@YAKE@Z
0x18000DD80: "Key" ??_C@_17KACEIPNC@?$AAK?$AAe?$AAy?$AA?$AA@
0x18000D440: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x18000D720: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18000DFF8: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x18000D610: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x18000D6F0: "__cdecl _imp_fclose" __imp_fclose
0x18000D060: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180006940: "unsigned long __cdecl AdtParseGuidOrNameArray(unsigned short const * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64 * __ptr64,unsigned char)" ?AdtParseGuidOrNameArray@@YAKPEBGPEAPEAUAUDIT_GUID_ARRAY@@E@Z
0x180007F18: "public: struct AUDIT_GUID_ARRAY * __ptr64 & __ptr64 __cdecl std::map<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> > >::operator[](struct _GUID * __ptr64 const & __ptr64) __ptr64" ??A?$map@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@@std@@QEAAAEAPEAUAUDIT_GUID_ARRAY@@AEBQEAU_GUID@@@Z
0x18000D750: "__cdecl _imp_feof" __imp_feof
0x18000A0F0: "private: virtual unsigned long __cdecl CQueryPerUserAuditPolicy::AdtQueryPolicy(struct _GUID * __ptr64,unsigned long,struct _AUDIT_POLICY_INFORMATION * __ptr64 * __ptr64) __ptr64" ?AdtQueryPolicy@CQueryPerUserAuditPolicy@@EEAAKPEAU_GUID@@KPEAPEAU_AUDIT_POLICY_INFORMATION@@@Z
0x18000D778: "__cdecl _imp_vfwprintf" __imp_vfwprintf
0x18000D430: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180001AB8: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x180005A1C: "public: void __cdecl std::allocator<struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node>::deallocate(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$allocator@U_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@@std@@QEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@2@_K@Z
0x180005A1C: "public: void __cdecl std::allocator<struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node>::deallocate(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$allocator@U_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@@std@@QEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@2@_K@Z
0x18000D4D0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000BA40: "__cdecl purecall" _purecall
0x18000715C: "unsigned long __cdecl AdtSetCurrentUserSid(void * __ptr64)" ?AdtSetCurrentUserSid@@YAKPEAX@Z
0x1800026B0: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x18000FB70: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z64" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z64
0x180008074: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::insert(class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator,struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> const & __ptr64) __ptr64" ?insert@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@QEAA?AViterator@12@V312@AEBU?$pair@QEAU_GUID@@PEBG@2@@Z
0x18000B4E0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000D428: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18000BC26: memcmp
0x18000DD40: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x1800017C8: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x18000D7F0: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x18000DBB8: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180005E34: "protected: struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Buynode(void) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@2@XZ
0x180001860: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x180003DC0: "unsigned long __cdecl AdtBackupPolicyGeneralized(unsigned short const * __ptr64,void * __ptr64)" ?AdtBackupPolicyGeneralized@@YAKPEBGPEAX@Z
0x180003264: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x18000D658: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800128C0: g_ulMaxStackAllocSize
0x180010198: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800028E0: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x180008538: "protected: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Insert(bool,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> const & __ptr64) __ptr64" ?_Insert@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@IEAA?AViterator@12@_NPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@2@AEBU?$pair@QEAU_GUID@@PEBG@2@@Z
0x180003310: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x18000D410: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000A9A0: "protected: struct std::_List_nod<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Node * __ptr64 __cdecl std::list<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64,class std::allocator<struct CAdtRestore::AUDIT_POLICY_RESTORE * __ptr64> >::_Buynode(void) __ptr64" ?_Buynode@?$list@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@std@@IEAAPEAU_Node@?$_List_nod@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@V?$allocator@PEAUAUDIT_POLICY_RESTORE@CAdtRestore@@@std@@@2@XZ
0x18000E004: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x18000BAA8: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000DCA0: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x18000A210: "private: virtual int __cdecl CQuerySystemAuditPolicy::AdtIsPolicySystem(void) __ptr64" ?AdtIsPolicySystem@CQuerySystemAuditPolicy@@EEAAHXZ
0x18000D7F8: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x180005458: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18000D688: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000D738: "__cdecl _imp__wfopen" __imp__wfopen
0x18000D808: ntdll_NULL_THUNK_DATA
0x18000D698: "__cdecl _imp_memcpy" __imp_memcpy
0x180012098: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18000FA78: "__cdecl TI2?AVResultException@wil@@" _TI2?AVResultException@wil@@
0x18000DB80: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x18000FB28: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x180012000: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x18000B8C8: "public: static void __cdecl std::_String_base::_Xran(void)" ?_Xran@_String_base@std@@SAXXZ
0x18000BC0C: "__cdecl _iob_func" __iob_func
0x18000DC50: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x18000DE60: "%-40s" ??_C@_1M@MCGMEIEA@?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?$AA@
0x18000DBE0: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18000D3E0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180010120: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180007ABC: "private: void * __ptr64 __cdecl AuditPolicyData::`scalar deleting destructor'(unsigned int) __ptr64" ??_GAuditPolicyData@@AEAAPEAXI@Z
0x18000D660: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x18000A150: "private: virtual unsigned long __cdecl CQuerySystemAuditPolicy::AdtGetPolicyTarget(unsigned short * __ptr64 * __ptr64) __ptr64" ?AdtGetPolicyTarget@CQuerySystemAuditPolicy@@EEAAKPEAPEAG@Z
0x18000D6C8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180012118: "__cdecl _security_cookie" __security_cookie
0x18000D4B8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800128C8: g_pfnAllocate
0x18000BC80: "__cdecl alloca_probe" _alloca_probe
0x180005E34: "protected: struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Buynode(void) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@2@XZ
0x18000221C: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x180005FB8: "protected: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char>,class _STL70>::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@V_STL70@@@std@@IEAAX_K0@Z
0x18000DCB8: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x18000D398: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800020E0: "void __cdecl wil::details::Rethrow(void)" ?Rethrow@details@wil@@YAXXZ
0x18000D4E8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x18000D3D0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000D5D0: "__cdecl _imp_AuditEnumerateCategories" __imp_AuditEnumerateCategories
0x1800100F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180012140: "class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> g_sidCurrentUser" ?g_sidCurrentUser@@3V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@A
0x180003520: "public: virtual void * __ptr64 __cdecl CSetAuditPolicy::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSetAuditPolicy@@UEAAPEAXI@Z
0x180012838: "enum eDisplayPolicy g_CurDisplayPolicy" ?g_CurDisplayPolicy@@3W4eDisplayPolicy@@A
0x18000E0B0: "%-20s" ??_C@_1M@EADEBMH@?$AA?$CF?$AA?9?$AA2?$AA0?$AAs?$AA?$AA@
0x180005E74: "protected: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@IEAAX_K0@Z
0x180012898: "__cdecl _onexitbegin" __onexitbegin
0x18000D580: "__cdecl _imp_AuditSetSystemPolicy" __imp_AuditSetSystemPolicy
0x18000D578: "__cdecl _imp_AuditFree" __imp_AuditFree
0x180012788: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x1800020B8: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x18000D6D0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000D700: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x18000D368: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800066C0: "unsigned long __cdecl AdtConstructAllCategoryGuids(struct AUDIT_GUID_ARRAY * __ptr64 * __ptr64)" ?AdtConstructAllCategoryGuids@@YAKPEAPEAUAUDIT_GUID_ARRAY@@@Z
0x180008538: "protected: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::iterator __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Insert(bool,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> const & __ptr64) __ptr64" ?_Insert@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@IEAA?AViterator@12@_NPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@2@AEBU?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@2@@Z
0x180008CF0: "int __cdecl DisplayMessage(unsigned short const * __ptr64,...)" ?DisplayMessage@@YAHPEBGZZ
0x18000D4B0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000D320: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x180001F20: "public: virtual char const * __ptr64 __cdecl wil::ResultException::what(void)const __ptr64" ?what@ResultException@wil@@UEBAPEBDXZ
0x180012800: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x180002F60: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x18000B334: "__cdecl _security_init_cookie" __security_init_cookie
0x1800060E8: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Erase(struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@IEAAXPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@2@@Z
0x180012778: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x1800128D8: g_pfnFree
0x180004558: "unsigned long __cdecl AdtBackupBasePolicy(void * __ptr64,unsigned char)" ?AdtBackupBasePolicy@@YAKPEAXE@Z
0x18000DDB0: "SYSTEM\CurrentControlSet\Control" ??_C@_1EK@PENFFGPM@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000BAB3: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x18001006C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000BC4A: wcscmp
0x18000E008: " " ??_C@_15OJKDPEFE@?$AA?5?$AA?5?$AA?$AA@
0x18000D670: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18000D190: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x18000FAD0: "__cdecl CTA2?AVResultException@wil@@" _CTA2?AVResultException@wil@@
0x180003FC0: "unsigned long __cdecl AdtRestorePolicy(unsigned short const * __ptr64)" ?AdtRestorePolicy@@YAKPEBG@Z
0x180003310: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x180005BA0: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x18000D768: "__cdecl _imp_wprintf" __imp_wprintf
0x180002820: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x18000556C: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x18000D5B8: "__cdecl _imp_AuditLookupCategoryNameW" __imp_AuditLookupCategoryNameW
0x180009E20: "private: virtual void __cdecl CQueryPerUserAuditPolicy::AdtDisplayTitle(void) __ptr64" ?AdtDisplayTitle@CQueryPerUserAuditPolicy@@EEAAXXZ
0x18000D6C0: "__cdecl _imp_malloc" __imp_malloc
0x18000D6F8: "__cdecl _imp__purecall" __imp__purecall
0x18000D378: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18000882C: "protected: struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Buynode(struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64,struct std::_Tree_nod<class std::_Tmap_traits<struct _GUID * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> >,0> >::_Node * __ptr64,struct std::pair<struct _GUID * __ptr64 const,struct AUDIT_GUID_ARRAY * __ptr64> const & __ptr64,char) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@UGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@std@@@std@@$0A@@std@@@2@PEAU342@00AEBU?$pair@QEAU_GUID@@PEAUAUDIT_GUID_ARRAY@@@2@D@Z
0x18000D5C0: "__cdecl _imp_AuditSetGlobalSaclW" __imp_AuditSetGlobalSaclW
0x1800063E0: "unsigned long __cdecl AdtEnableSinglePrivilege(unsigned short const * __ptr64)" ?AdtEnableSinglePrivilege@@YAKPEBG@Z
0x180003570: "private: virtual void * __ptr64 __cdecl CSetPerUserAuditPolicy::AdtGetPolicyTarget(void) __ptr64" ?AdtGetPolicyTarget@CSetPerUserAuditPolicy@@EEAAPEAXXZ
0x18000DC78: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180012748: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x18000E098: "%-42s" ??_C@_1M@IPKEOJEL@?$AA?$CF?$AA?9?$AA4?$AA2?$AAs?$AA?$AA@
0x18000D628: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x180006824: "void __cdecl AdtPrintPolicyReportTitle(void)" ?AdtPrintPolicyReportTitle@@YAXXZ
0x1800084BC: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator::operator--(void) __ptr64" ??Fiterator@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x18000B530: "__cdecl _report_gsfailure" __report_gsfailure
0x18000E090: "%s," ??_C@_17EMBJCDEN@?$AA?$CF?$AAs?$AA?0?$AA?$AA@
0x180005E34: "protected: struct std::_Tree_nod<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Node * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<unsigned short const * __ptr64,struct _GUID * __ptr64,struct StrCmp,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,struct _GUID * __ptr64> >,0> >::_Buynode(void) __ptr64" ?_Buynode@?$_Tree@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@std@@IEAAPEAU_Node@?$_Tree_nod@V?$_Tmap_traits@PEBGPEAU_GUID@@UStrCmp@@V?$allocator@U?$pair@QEBGPEAU_GUID@@@std@@@std@@$0A@@std@@@2@XZ
0x1800049E0: "unsigned long __cdecl AdtBackupAllUsers(void)" ?AdtBackupAllUsers@@YAKXZ
0x18000D588: "__cdecl _imp_AuditQuerySystemPolicy" __imp_AuditQuerySystemPolicy
0x180004F80: "public: class std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator & __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct _GUID * __ptr64,unsigned short const * __ptr64,struct GuidCmp,class std::allocator<struct std::pair<struct _GUID * __ptr64 const,unsigned short const * __ptr64> >,0> >::iterator::operator++(void) __ptr64" ??Eiterator@?$_Tree@V?$_Tmap_traits@PEAU_GUID@@PEBGUGuidCmp@@V?$allocator@U?$pair@QEAU_GUID@@PEBG@std@@@std@@$0A@@std@@@std@@QEAAAEAV012@XZ
0x18000B428: "__cdecl onexit" _onexit
0x180006650: "unsigned long __cdecl AdtConvertGuidStringToGuid(unsigned short const * __ptr64,struct _GUID * __ptr64)" ?AdtConvertGuidStringToGuid@@YAKPEBGPEAU_GUID@@@Z
0x180012730: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x1800128A8: "__cdecl _native_startup_state" __native_startup_state
0x18000DB38: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180008E28: "public: unsigned long __cdecl CSetAuditPolicy::AdtSetAuditPolicy(void) __ptr64" ?AdtSetAuditPolicy@CSetAuditPolicy@@QEAAKXZ
0x1800127A8: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x18000D120: "const CSetAuditPolicy::`vftable'" ??_7CSetAuditPolicy@@6B@
0x180009520: "private: virtual unsigned long __cdecl CSetSystemAuditPolicy::AdtSetPolicy(struct _AUDIT_POLICY_INFORMATION * __ptr64,unsigned long) __ptr64" ?AdtSetPolicy@CSetSystemAuditPolicy@@EEAAKPEAU_AUDIT_POLICY_INFORMATION@@K@Z
0x18000AB78: SafeAllocaInitialize
0x180009F60: "private: virtual unsigned long __cdecl CQueryPerUserAuditPolicy::AdtDisplayPolicy(unsigned long) __ptr64" ?AdtDisplayPolicy@CQueryPerUserAuditPolicy@@EEAAKK@Z
0x180001820: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x18000FBC0: "__cdecl CTA2?AVlogic_error@std@@" _CTA2?AVlogic_error@std@@
0x18000DC18: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000AC70: InternalVerifyStackAvailable
0x180010288: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180001EC0: "public: __cdecl wil::ResultException::ResultException(struct wil::FailureInfo const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBUFailureInfo@1@@Z
0x180009410: "private: virtual unsigned long __cdecl CSetPerUserAuditPolicy::AdtValidateParams(void) __ptr64" ?AdtValidateParams@CSetPerUserAuditPolicy@@EEAAKXZ
0x180007600: "public: unsigned __int64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::find(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> const & __ptr64,unsigned __int64)const __ptr64" ?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEBA_KAEBV12@_K@Z
0x180003520: "public: virtual void * __ptr64 __cdecl CSetAuditPolicy::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSetAuditPolicy@@UEAAPEAXI@Z
0x1800013F8: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x1800032B0: "public: virtual char const * __ptr64 __cdecl std::logic_error::what(void)const __ptr64" ?what@logic_error@std@@UEBAPEBDXZ
0x180012780: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x18000A898: "public: unsigned long __cdecl CAdtRestore::AdtExecuteRestore(void) __ptr64" ?AdtExecuteRestore@CAdtRestore@@QEAAKXZ
0x1800052C8: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>::assign(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18000FAB8: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x18000AC50: SafeAllocaAllocateFromHeap
0x1800100A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180007208: "unsigned long __cdecl AdtStringFindAndReplace(unsigned short const * __ptr64,class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>,class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70>,class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short>,class _STL70> * __ptr64,int * __ptr64)" ?AdtStringFindAndReplace@@YAKPEBGV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@V_STL70@@@std@@1PEAV12@PEAH@Z
0x1800127A4: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x18000D7B0: "__cdecl _imp_free" __imp_free
0x18000B2A0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000D550: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180009C60: "private: virtual void __cdecl CQuerySystemAuditPolicy::AdtDisplayTitle(void) __ptr64" ?AdtDisplayTitle@CQuerySystemAuditPolicy@@EEAAXXZ
0x180002A68: "private: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValueInternal(unsigned short const * __ptr64,bool,unsigned __int64 * __ptr64,bool * __ptr64)" ?TryGetValueInternal@SemaphoreValue@details_abi@wil@@CAJPEBG_NPEA_KPEA_N@Z
0x180003750: "unsigned long __cdecl AdtGetSystemPolicy(struct AUDIT_GUID_ARRAY * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64)" ?AdtGetSystemPolicy@@YAKPEAUAUDIT_GUID_ARRAY@@0@Z
0x18000D6E0: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000DB9C: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x180003378: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x18000D468: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1800093E0: "private: virtual unsigned long __cdecl CSetSystemAuditPolicy::AdtValidateParams(void) __ptr64" ?AdtValidateParams@CSetSystemAuditPolicy@@EEAAKXZ
0x18000D5B0: "__cdecl _imp_AuditEnumeratePerUserPolicy" __imp_AuditEnumeratePerUserPolicy
0x1800064F4: "unsigned long __cdecl AdtExpandCategories(struct AUDIT_GUID_ARRAY * __ptr64,struct AUDIT_GUID_ARRAY * __ptr64 * __ptr64)" ?AdtExpandCategories@@YAKPEAUAUDIT_GUID_ARRAY@@PEAPEAU1@@Z
0x180010170: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18000D540: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180010094: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180012740: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x1800063F0: "unsigned long __cdecl AdtDisableSinglePrivilege(unsigned short const * __ptr64)" ?AdtDisableSinglePrivilege@@YAKPEBG@Z
0x18000BC3E: memset
0x18001029C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18001213D: g_header_init_InitializeResultHeader

[JEB Decompiler by PNF Software]