Generated by JEB on 2019/08/01

PE: C:\Windows\System32\imagehlp.dll Base=0x180000000 SHA-256=F1A9EE9CC8C07289C2214F734B1566F9783A6E3CC93AE371B3280AA883F7ECC3
PDB: imagehlp.pdb GUID={DF1028FC-7357-7557-6F6EA9895B30D252} Age=1

1378 located named symbols:
0x18000DFF0: "CreateSemaphoreW" ??_C@_0BB@MEFPJLHN@CreateSemaphoreW?$AA@
0x18000D8F0: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x18000DD38: "DebugBreak" ??_C@_0L@BPHFKDHF@DebugBreak?$AA@
0x18001AC80: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreHandleCallNames" ?g_CoreHandleCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000DB38: "NtOpenProcessToken" ??_C@_0BD@EIILLDLN@NtOpenProcessToken?$AA@
0x1800180D8: "struct _CORE_HANDLE_CALLS volatile g_CoreHandleCalls" ?g_CoreHandleCalls@@3U_CORE_HANDLE_CALLS@@C
0x180018DA0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreSynchCallsDesc" ?g_CoreSynchCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C788: "__cdecl _imp__o_atoi" __imp__o_atoi
0x180002F38: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002950: SymSetContext
0x18000DAC8: "RtlInitAnsiString" ??_C@_0BC@CEABAGMB@RtlInitAnsiString?$AA@
0x18000C550: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180001D00: ImageDirectoryEntryToDataEx
0x18001A480: "struct _DYNAMIC_CALL_NAME volatile * volatile g_Crypt32CallNames" ?g_Crypt32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180001CD0: "int __cdecl FailSymInitialize(void * __ptr64,char * __ptr64,int)" ?FailSymInitialize@@YAHPEAXPEADH@Z
0x180003720: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x180018020: "struct _OLEAUT32_CALLS volatile g_OleAut32Calls" ?g_OleAut32Calls@@3U_OLEAUT32_CALLS@@C
0x18000F3F8: "WNetAddConnection2W" ??_C@_0BE@COECOAIH@WNetAddConnection2W?$AA@
0x18000DBD8: "RtlGetEnabledExtendedFeatures" ??_C@_0BO@LGBHAKJM@RtlGetEnabledExtendedFeatures?$AA@
0x180002530: SymGetLineFromInlineContextW
0x18000D8D0: "NtQueryMutant" ??_C@_0O@FEOFHACP@NtQueryMutant?$AA@
0x1800170B0: "__cdecl _imp_StackWalk64" __imp_StackWalk64
0x180001CD0: "void * __ptr64 __cdecl FailSymFunctionTableAccess64(void * __ptr64,unsigned __int64)" ?FailSymFunctionTableAccess64@@YAPEAXPEAX_K@Z
0x18000DE10: "ProcessIdToSessionId" ??_C@_0BF@LAKOGFOC@ProcessIdToSessionId?$AA@
0x18000B340: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180012590: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002170: SetCheckUserInterruptShared
0x18000DCA8: "RtlLocateLegacyContext" ??_C@_0BH@OADANMBG@RtlLocateLegacyContext?$AA@
0x18000C738: "__cdecl _imp__o__execute_onexit_table" __imp__o__execute_onexit_table
0x18000C768: "__cdecl _imp__o__splitpath_s" __imp__o__splitpath_s
0x180014DB0: ?g_DbgToolsTraceLoggingToplevelActivity@@3V?$TraceLoggingThreadActivity@$1?g_DbgToolsTraceLoggingProvider@@3QEBU_TlgProvider_t@@EB$0EAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsHProvider@@@@A
0x18001257C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x18000C620: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180014D04: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x180001CD0: "int __cdecl FailSymFromInlineContextW(void * __ptr64,unsigned __int64,unsigned long,unsigned long * __ptr64,struct _SYMBOL_INFOW * __ptr64)" ?FailSymFromInlineContextW@@YAHPEAX_KKPEAKPEAU_SYMBOL_INFOW@@@Z
0x180014678: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000C518: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000EFA8: "ClearEventLogA" ??_C@_0P@CBEAAAPH@ClearEventLogA?$AA@
0x18000C770: "__cdecl _imp__stricmp" __imp__stricmp
0x18000D670: "UnDecorateSymbolName" ??_C@_0BF@BFOGGJKE@UnDecorateSymbolName?$AA@
0x180018078: "struct _CORE_FILE_L1_CALLS volatile g_CoreFileL1Calls" ?g_CoreFileL1Calls@@3U_CORE_FILE_L1_CALLS@@C
0x18000E488: "GetPackagePath" ??_C@_0P@NBOPOPO@GetPackagePath?$AA@
0x18000DDE0: "Process32FirstW" ??_C@_0BA@FCBGIKMJ@Process32FirstW?$AA@
0x18000F190: "CryptDestroyHash" ??_C@_0BB@INPNJGML@CryptDestroyHash?$AA@
0x1800171E8: "__cdecl _imp_SymGetSourceFileTokenW" __imp_SymGetSourceFileTokenW
0x180018080: "struct _CORE_FILE_L2_CALLS volatile g_CoreFileL2Calls" ?g_CoreFileL2Calls@@3U_CORE_FILE_L2_CALLS@@C
0x18000E180: "GetThreadSelectorEntry" ??_C@_0BH@LFKOKEGN@GetThreadSelectorEntry?$AA@
0x18000EF58: "DeleteService" ??_C@_0O@KGGKBBLF@DeleteService?$AA@
0x180008FB0: ReBaseImage64
0x180001CD0: "int __cdecl FailStackWalk64(unsigned long,void * __ptr64,void * __ptr64,struct _tagSTACKFRAME64 * __ptr64,void * __ptr64,int (__cdecl*)(void * __ptr64,unsigned __int64,void * __ptr64,unsigned long,unsigned long * __ptr64),void * __ptr64 (__cdecl*)(void * __ptr64,unsigned __int64),unsigned __int64 (__cdecl*)(void * __ptr64,unsigned __int64),unsigned __int64 (__cdecl*)(void * __ptr64,void * __ptr64,struct _tagADDRESS64 * __ptr64))" ?FailStackWalk64@@YAHKPEAX0PEAU_tagSTACKFRAME64@@0P6AH0_K0KPEAK@ZP6APEAX02@ZP6A_K02@ZP6A_K00PEAU_tagADDRESS64@@@Z@Z
0x18000C680: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000DE28: "GetThreadContext" ??_C@_0BB@MBPKHMON@GetThreadContext?$AA@
0x18000EE98: "CryptBinaryToStringA" ??_C@_0BF@FFJOEAMK@CryptBinaryToStringA?$AA@
0x180003BAE: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x180003C10: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180014D74: DloadSectionOldProtection
0x1800026DC: "__cdecl _imp_load_SymGetSymFromName64" __imp_load_SymGetSymFromName64
0x18000C650: "__cdecl _imp_TlsGetValue" __imp_TlsGetValue
0x180001F50: EnumerateLoadedModules64
0x18000235C: "__cdecl _imp_load_SymEnumerateModules64" __imp_load_SymEnumerateModules64
0x180003C02: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18000F180: "CryptCreateHash" ??_C@_0BA@IEJOIHIJ@CryptCreateHash?$AA@
0x18000D780: "DbgUiConvertStateChangeStructure" ??_C@_0CB@JECHEEEO@DbgUiConvertStateChangeStructure@
0x18000E958: "CoCreateGuid" ??_C@_0N@KNBCBJMO@CoCreateGuid?$AA@
0x180018C18: "struct _CORE_TIMEZONE_CALLS volatile g_CoreTimeZoneCalls" ?g_CoreTimeZoneCalls@@3U_CORE_TIMEZONE_CALLS@@C
0x180003FC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000299C: "__cdecl _imp_load_SymSetScopeFromAddr" __imp_load_SymSetScopeFromAddr
0x18000DD48: "DebugBreakProcess" ??_C@_0BC@EPCMMNGB@DebugBreakProcess?$AA@
0x180002610: SymGetOptions
0x18000CF70: "msvcrt." ??_C@_07JGJDBNLM@msvcrt?4?$AA@
0x18000E340: "ContinueDebugEvent" ??_C@_0BD@CCCFAODI@ContinueDebugEvent?$AA@
0x18000D8E0: "NtQueryObject" ??_C@_0O@IFMDHOMC@NtQueryObject?$AA@
0x180018C20: "struct _POWR_PROF_CALLS volatile g_PowrProfCalls" ?g_PowrProfCalls@@3U_POWR_PROF_CALLS@@C
0x180005B64: "void __cdecl BindpWalkAndProcessImports(struct _BINDP_PARAMETERS * __ptr64,struct _LOADED_IMAGE * __ptr64,char const * __ptr64,unsigned long,int * __ptr64)" ?BindpWalkAndProcessImports@@YAXPEAU_BINDP_PARAMETERS@@PEAU_LOADED_IMAGE@@PEBDKPEAH@Z
0x180002410: SymFromAddr
0x18000C540: "__cdecl _imp_CreateFileA" __imp_CreateFileA
0x18000D460: "SymGetSymFromAddr" ??_C@_0BC@BDHGAJGO@SymGetSymFromAddr?$AA@
0x18001A3F0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreWindowsErrorReportingCallsDesc" ?g_CoreWindowsErrorReportingCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000DD80: "Module32First" ??_C@_0O@CNMFJJGO@Module32First?$AA@
0x18001A7A0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_PowrProfCallNames" ?g_PowrProfCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800193B0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_EventlogLegacyCallNames" ?g_EventlogLegacyCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000CE78: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180018C50: "struct _DYNAMIC_CALLS_DESC volatile g_CoreProcessThreadsCallsDesc" ?g_CoreProcessThreadsCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180007240: GetTimestampForLoadedLibrary
0x18000EAA0: "WindowsGetStringRawBuffer" ??_C@_0BK@KBEEKJGL@WindowsGetStringRawBuffer?$AA@
0x18000DEA8: "Thread32First" ??_C@_0O@DHAEEPDO@Thread32First?$AA@
0x18000213C: "__cdecl _imp_load_SearchTreeForFile" __imp_load_SearchTreeForFile
0x180014D78: DloadSectionLockCount
0x180017180: "__cdecl _imp_SymGetLineFromAddr64" __imp_SymGetLineFromAddr64
0x18000E858: "api-ms-win-core-job-l2-1-0.dll" ??_C@_0BP@PIDGFIIH@api?9ms?9win?9core?9job?9l2?91?90?4dll?$AA@
0x180017050: "__cdecl _imp_FindExecutableImageEx" __imp_FindExecutableImageEx
0x1800023B0: SymEnumerateSymbolsW64
0x18000C8A8: "__cdecl _xp_a" __xp_a
0x18000C740: "__cdecl _imp__o__initialize_narrow_environment" __imp__o__initialize_narrow_environment
0x180001CD0: "void * __ptr64 __cdecl FailSymFunctionTableAccess(void * __ptr64,unsigned long)" ?FailSymFunctionTableAccess@@YAPEAXPEAXK@Z
0x180004FE4: "struct _IMAGE_BOUND_IMPORT_DESCRIPTOR * __ptr64 __cdecl BindpCreateNewImportSection(struct _BINDP_PARAMETERS * __ptr64,struct _IMPORT_DESCRIPTOR * __ptr64 * __ptr64,unsigned long * __ptr64)" ?BindpCreateNewImportSection@@YAPEAU_IMAGE_BOUND_IMPORT_DESCRIPTOR@@PEAU_BINDP_PARAMETERS@@PEAPEAU_IMPORT_DESCRIPTOR@@PEAK@Z
0x180001CD0: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x18000259C: "__cdecl _imp_load_SymGetModuleBase64" __imp_load_SymGetModuleBase64
0x18000F3B8: "api-ms-win-eventing-provider-l1-" ??_C@_0CI@FPJCNGPM@api?9ms?9win?9eventing?9provider?9l1?9@
0x18000F0A8: "OpenProcessToken" ??_C@_0BB@EANJDCJP@OpenProcessToken?$AA@
0x180018218: "struct _EXT_KERNEL32_PACKAGE_L1_CALLS volatile g_ExtKernel32PackageL1Calls" ?g_ExtKernel32PackageL1Calls@@3U_EXT_KERNEL32_PACKAGE_L1_CALLS@@C
0x18000229C: "__cdecl _imp_load_SymEnumSymbolsExW" __imp_load_SymEnumSymbolsExW
0x18000E3E0: "IsDBCSLeadByte" ??_C@_0P@NPDBHJOD@IsDBCSLeadByte?$AA@
0x18000E3F0: "GetMappedFileNameW" ??_C@_0BD@DENOEEPK@GetMappedFileNameW?$AA@
0x18001A620: "struct _DYNAMIC_CALLS_DESC volatile g_ShlWapiCallsDesc" ?g_ShlWapiCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180004A68: "unsigned __int64 __cdecl BindpAddForwarderReference(struct _BINDP_PARAMETERS * __ptr64,char const * __ptr64,char const * __ptr64,struct _IMPORT_DESCRIPTOR * __ptr64,char const * __ptr64,char const * __ptr64,int * __ptr64,unsigned long)" ?BindpAddForwarderReference@@YA_KPEAU_BINDP_PARAMETERS@@PEBD1PEAU_IMPORT_DESCRIPTOR@@11PEAHK@Z
0x1800038E0: "__cdecl RTC_Initialize" _RTC_Initialize
0x18000C668: "__cdecl _imp_TlsAlloc" __imp_TlsAlloc
0x180009D04: "public: __cdecl EXCLUDE_LIST::~EXCLUDE_LIST(void) __ptr64" ??1EXCLUDE_LIST@@QEAA@XZ
0x18000C780: "__cdecl _imp__ultoa_s" __imp__ultoa_s
0x18000C730: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x1800172A8: "__cdecl _imp_SymSetOptions" __imp_SymSetOptions
0x180003C10: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180018498: "struct _CORE_REGISTRY_PRIVATE_CALLS volatile g_CoreRegistryPrivateCalls" ?g_CoreRegistryPrivateCalls@@3U_CORE_REGISTRY_PRIVATE_CALLS@@C
0x18000B900: RtlMrdataAcquireSectionWriteAccess
0x18000DB68: "NtQueryInformationToken" ??_C@_0BI@JMJKLHAA@NtQueryInformationToken?$AA@
0x18000D9C0: "RtlCreateProcessParameters" ??_C@_0BL@JOHNBMND@RtlCreateProcessParameters?$AA@
0x18000C5A8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18000E878: "api-ms-win-core-localization-l1-" ??_C@_0CI@KJCNGDHP@api?9ms?9win?9core?9localization?9l1?9@
0x18000D6B8: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800026FC: "__cdecl _imp_load_SymGetSymNext64" __imp_load_SymGetSymNext64
0x18000D2D0: "SymGetLineFromAddrW64" ??_C@_0BG@EPOJKGPC@SymGetLineFromAddrW64?$AA@
0x18000F448: "GetFileVersionInfoSizeW" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x18000DF70: "GetApplicationRestartSettings" ??_C@_0BO@PECMODAP@GetApplicationRestartSettings?$AA@
0x180017210: "__cdecl _imp_SymGetSymPrev64" __imp_SymGetSymPrev64
0x18000FA60: "__cdecl _rtc_taa" __rtc_taa
0x180017078: "__cdecl _imp_ImagehlpApiVersionEx" __imp_ImagehlpApiVersionEx
0x180014DE0: "unsigned char * BindpCapturedModuleNames" ?BindpCapturedModuleNames@@3PAEA
0x1800125E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000E4B8: "kernel32.dll" ??_C@_0N@MDJJJHMB@kernel32?4dll?$AA@
0x18000C7E0: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180001CD0: "int __cdecl FailSymGetSymNext(void * __ptr64,struct _IMAGEHLP_SYMBOL * __ptr64)" ?FailSymGetSymNext@@YAHPEAXPEAU_IMAGEHLP_SYMBOL@@@Z
0x1800171F8: "__cdecl _imp_SymGetSymFromAddr64" __imp_SymGetSymFromAddr64
0x18000DCD0: "RtlDecompressBufferEx" ??_C@_0BG@ILEIKCNN@RtlDecompressBufferEx?$AA@
0x18000C7F0: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x180003B48: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x1800171B8: "__cdecl _imp_SymGetModuleInfo64" __imp_SymGetModuleInfo64
0x18000C778: "__cdecl _imp__o__strnicmp" __imp__o__strnicmp
0x180002ABC: "__cdecl _imp_load_SymUnloadModule64" __imp_load_SymUnloadModule64
0x180014D88: ?info@?1??DbgToolsGetTraceLoggingInfo@@YAPEAU_DBGTOOLS_TRACELOGGING_API_STATUS_INFO@@XZ@4U2@A
0x180003C10: "__cdecl _vcrt_initialize" __vcrt_initialize
0x18000C748: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x18000CB90: "Software\Microsoft\Cryptography\" ??_C@_1GA@NHAGFKLN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18000D020: "ImagehlpApiVersionEx" ??_C@_0BF@HDEFKILG@ImagehlpApiVersionEx?$AA@
0x180015DE8: "struct HINSTANCE__ * __ptr64 * hDelayLoadDll" ?hDelayLoadDll@@3PAPEAUHINSTANCE__@@A
0x180019880: "struct _DYNAMIC_CALLS_DESC volatile g_CoreLocalizationCallsDesc" ?g_CoreLocalizationCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C868: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000D170: "SymFromAddrW" ??_C@_0N@HGEOJOKD@SymFromAddrW?$AA@
0x1800183E8: "struct _EXT_MS_WIN_KERNEL32_PACKAGE_L1_1_1_CALLS volatile g_ExtMsWinKernel32PackageL1_1_1Calls" ?g_ExtMsWinKernel32PackageL1_1_1Calls@@3U_EXT_MS_WIN_KERNEL32_PACKAGE_L1_1_1_CALLS@@C
0x18000F218: "EventWrite" ??_C@_0L@JMEHOADM@EventWrite?$AA@
0x180001CD0: "int __cdecl FailSymGetLinePrev(void * __ptr64,struct _IMAGEHLP_LINE * __ptr64)" ?FailSymGetLinePrev@@YAHPEAXPEAU_IMAGEHLP_LINE@@@Z
0x180008924: "void __cdecl AdjImageBaseSize(unsigned long * __ptr64,unsigned long * __ptr64,int)" ?AdjImageBaseSize@@YAXPEAK0H@Z
0x18000EB60: "SafeArrayCreateVector" ??_C@_0BG@JDANKDAG@SafeArrayCreateVector?$AA@
0x18000EC58: "PathIsUNCW" ??_C@_0L@CMJJANNE@PathIsUNCW?$AA@
0x18000E538: "DeriveAppContainerSidFromAppCont" ??_C@_0CK@CNNMHOOI@DeriveAppContainerSidFromAppCont@
0x18000ED30: "api-ms-win-core-url-l1-1-0.dll" ??_C@_0BP@CIEFPPNB@api?9ms?9win?9core?9url?9l1?91?90?4dll?$AA@
0x18000C6D8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000F078: "GetTokenInformation" ??_C@_0BE@JIDLIKOL@GetTokenInformation?$AA@
0x18000DAF8: "RtlTryEnterCriticalSection" ??_C@_0BL@FHPLGPME@RtlTryEnterCriticalSection?$AA@
0x180017020: "__cdecl _imp_EnumerateLoadedModulesEx" __imp_EnumerateLoadedModulesEx
0x180001CD0: "int __cdecl FailSymGetTypeInfo(void * __ptr64,unsigned __int64,unsigned long,enum _IMAGEHLP_SYMBOL_TYPE_INFO,void * __ptr64)" ?FailSymGetTypeInfo@@YAHPEAX_KKW4_IMAGEHLP_SYMBOL_TYPE_INFO@@0@Z
0x18000EB54: "VarCmp" ??_C@_06IELNEFAK@VarCmp?$AA@
0x180018368: "struct _SECUR32_CALLS volatile g_Secur32Calls" ?g_Secur32Calls@@3U_SECUR32_CALLS@@C
0x180001CD0: "int __cdecl FailSymQueryInlineTrace(void * __ptr64,unsigned __int64,unsigned long,unsigned __int64,unsigned __int64,unsigned long * __ptr64,unsigned long * __ptr64)" ?FailSymQueryInlineTrace@@YAHPEAX_KK11PEAK2@Z
0x18000D6D8: "PECertInvalidMarkers" ??_C@_1CK@JJPJDBOA@?$AAP?$AAE?$AAC?$AAe?$AAr?$AAt?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AAM?$AAa?$AAr?$AAk?$AAe?$AAr?$AAs?$AA?$AA@
0x1800172F0: "__cdecl _imp_SymUnDName64" __imp_SymUnDName64
0x18000D9E0: "RtlCreateUserProcess" ??_C@_0BF@CKCOHCED@RtlCreateUserProcess?$AA@
0x18000E968: "CoFreeUnusedLibrariesEx" ??_C@_0BI@KEMHOJLF@CoFreeUnusedLibrariesEx?$AA@
0x18000FA50: "__cdecl _rtc_iaa" __rtc_iaa
0x18000E140: "GetPrivateProfileSectionW" ??_C@_0BK@OFJMJMM@GetPrivateProfileSectionW?$AA@
0x18000C530: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180001CD0: "int __cdecl FailSymGetSymFromName64(void * __ptr64,char * __ptr64,struct _IMAGEHLP_SYMBOL64 * __ptr64)" ?FailSymGetSymFromName64@@YAHPEAXPEADPEAU_IMAGEHLP_SYMBOL64@@@Z
0x180003C10: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x18000DFD0: "GetCommandLineA" ??_C@_0BA@MGNOEAPM@GetCommandLineA?$AA@
0x18000E590: "CoInitializeEx" ??_C@_0P@KHOCNDJK@CoInitializeEx?$AA@
0x18000C790: "__cdecl _imp_strcat_s" __imp_strcat_s
0x1800170F0: "__cdecl _imp_SymEnumSymbolsExW" __imp_SymEnumSymbolsExW
0x180017088: "__cdecl _imp_RemoveInvalidModuleList" __imp_RemoveInvalidModuleList
0x18000E220: "SetConsoleCursorPosition" ??_C@_0BJ@FDNPCKM@SetConsoleCursorPosition?$AA@
0x18001A660: "struct _DYNAMIC_CALL_NAME volatile * volatile g_User32CallNames" ?g_User32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000D858: "NtFreeVirtualMemory" ??_C@_0BE@KBMHLKEP@NtFreeVirtualMemory?$AA@
0x18000CF30: "ntoskrnl.exe" ??_C@_0N@FJBNMICO@ntoskrnl?4exe?$AA@
0x18000D958: "NtSetInformationProcess" ??_C@_0BI@IMFMFAHN@NtSetInformationProcess?$AA@
0x18000C870: "__cdecl _xc_a" __xc_a
0x18000DA48: "RtlFreeHeap" ??_C@_0M@BBFBOFBP@RtlFreeHeap?$AA@
0x180017028: "__cdecl _imp_EnumerateLoadedModulesExW" __imp_EnumerateLoadedModulesExW
0x1800170E8: "__cdecl _imp_SymEnumSymbolsEx" __imp_SymEnumSymbolsEx
0x180017198: "__cdecl _imp_SymGetLineFromName64" __imp_SymGetLineFromName64
0x180001E73: "__cdecl _imp_load_?SymFreeDiaString@@YAXPEAG@Z" __imp_load_?SymFreeDiaString@@YAXPEAG@Z
0x1800183A8: "struct _VERSION_CALLS volatile g_VersionCalls" ?g_VersionCalls@@3U_VERSION_CALLS@@C
0x18000EE58: "CertOpenSystemStoreW" ??_C@_0BF@KCIKIDHB@CertOpenSystemStoreW?$AA@
0x180001CD0: "int __cdecl FailSymUnDName(struct _IMAGEHLP_SYMBOL * __ptr64,char * __ptr64,unsigned long)" ?FailSymUnDName@@YAHPEAU_IMAGEHLP_SYMBOL@@PEADK@Z
0x180017060: "__cdecl _imp_FindFileInSearchPath" __imp_FindFileInSearchPath
0x180001CD0: "int __cdecl FailSymGetLineFromInlineContext(void * __ptr64,unsigned __int64,unsigned long,unsigned __int64,unsigned long * __ptr64,struct _IMAGEHLP_LINE64 * __ptr64)" ?FailSymGetLineFromInlineContext@@YAHPEAX_KK1PEAKPEAU_IMAGEHLP_LINE64@@@Z
0x18000C4D8: "struct FUNCPTRS * __ptr64 * FailFunctions" ?FailFunctions@@3PAPEAUFUNCPTRS@@A
0x18000EFC8: "DeregisterEventSource" ??_C@_0BG@LPHFFLAA@DeregisterEventSource?$AA@
0x18000D2A0: "SymGetLineFromAddr" ??_C@_0BD@HHOPHPBF@SymGetLineFromAddr?$AA@
0x180007FF0: ImageLoad
0x18000E5C0: "StringFromGUID2" ??_C@_0BA@HEBEPDDD@StringFromGUID2?$AA@
0x18000A5D0: ImageGetCertificateHeader
0x18000289C: "__cdecl _imp_load_SymMatchStringA" __imp_load_SymMatchStringA
0x180017290: "__cdecl _imp_SymRegisterFunctionEntryCallback64" __imp_SymRegisterFunctionEntryCallback64
0x18000CC00: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x18000C728: "__cdecl _imp__o__configure_narrow_argv" __imp__o__configure_narrow_argv
0x18000C5F0: "__cdecl _imp_MapViewOfFileEx" __imp_MapViewOfFileEx
0x180014690: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180001E68: IsProcessorFeaturePresent
0x1800187F0: "struct _ADVAPI32_CALLS volatile g_Advapi32Calls" ?g_Advapi32Calls@@3U_ADVAPI32_CALLS@@C
0x180017220: "__cdecl _imp_SymGetSymbolFileW" __imp_SymGetSymbolFileW
0x18000263C: "__cdecl _imp_load_SymGetSourceFileChecksumW" __imp_load_SymGetSourceFileChecksumW
0x180001CD0: "int __cdecl FailSymGetSearchPath(void * __ptr64,char * __ptr64,unsigned long)" ?FailSymGetSearchPath@@YAHPEAXPEADK@Z
0x180006C10: BindImage
0x180001CD0: "int __cdecl FailSymGetLineNext(void * __ptr64,struct _IMAGEHLP_LINE * __ptr64)" ?FailSymGetLineNext@@YAHPEAXPEAU_IMAGEHLP_LINE@@@Z
0x1800022F0: SymEnumTypes
0x180002090: GetSymLoadError
0x180018E40: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreConsoleCallNames" ?g_CoreConsoleCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800191B0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreProcessEnvironmentCallNames" ?g_CoreProcessEnvironmentCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000C580: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000DB80: "NtQueryEvent" ??_C@_0N@JEGIMGHC@NtQueryEvent?$AA@
0x1800023DC: "__cdecl _imp_load_SymFindFileInPathW" __imp_load_SymFindFileInPathW
0x18000EC68: "SHCreateMemStream" ??_C@_0BC@ILNOOBJG@SHCreateMemStream?$AA@
0x18000DA18: "RtlDosPathNameToNtPathName_U" ??_C@_0BN@KHMLLBKI@RtlDosPathNameToNtPathName_U?$AA@
0x180007970: "__int64 (__cdecl*__cdecl FindFailureProc(unsigned int,char const * __ptr64))(void)" ?FindFailureProc@@YAP6A_JXZIPEBD@Z
0x18000D610: "SymSetSearchPath" ??_C@_0BB@JEBJMMDN@SymSetSearchPath?$AA@
0x18000CFD8: "FindDebugInfoFileEx" ??_C@_0BE@JKFFNCCA@FindDebugInfoFileEx?$AA@
0x18000D4E0: "SymGetSymPrev" ??_C@_0O@EDCPCPEL@SymGetSymPrev?$AA@
0x180002190: SetSymLoadError
0x18000DEF0: "Wow64GetThreadSelectorEntry" ??_C@_0BM@GJINBCHA@Wow64GetThreadSelectorEntry?$AA@
0x18000D800: "NtClose" ??_C@_07EGJLEIEB@NtClose?$AA@
0x1800194C0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreWindowsErrorReportingCallNames" ?g_CoreWindowsErrorReportingCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180017208: "__cdecl _imp_SymGetSymNext64" __imp_SymGetSymNext64
0x180017218: "__cdecl _imp_SymGetSymbolFile" __imp_SymGetSymbolFile
0x18000207C: "__cdecl _imp_load_GetSymLoadError" __imp_load_GetSymLoadError
0x180014DA0: DloadSrwLock
0x18000D080: "StackWalk64" ??_C@_0M@FJINHFIC@StackWalk64?$AA@
0x18000D2E8: "SymGetLineFromInlineContext" ??_C@_0BM@NCOGIBMA@SymGetLineFromInlineContext?$AA@
0x18000CF18: "Ordinal" ??_C@_07ENHEGMCJ@Ordinal?$AA@
0x180001CD0: "int __cdecl FailSymRegisterCallback(void * __ptr64,int (__cdecl*)(void * __ptr64,unsigned long,void * __ptr64,void * __ptr64),void * __ptr64)" ?FailSymRegisterCallback@@YAHPEAXP6AH0K00@Z0@Z
0x180014688: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18000D500: "SymGetTypeFromName" ??_C@_0BD@NGKPNAGJ@SymGetTypeFromName?$AA@
0x180007750: TouchFileTimes
0x1800023BC: "__cdecl _imp_load_SymFindFileInPath" __imp_load_SymFindFileInPath
0x180001940: IsBufferCleanOfInvalidMarkers
0x18000EC00: "PathFindFileNameW" ??_C@_0BC@LBBOIOOJ@PathFindFileNameW?$AA@
0x1800197C0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreIoCallsDesc" ?g_CoreIoCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000DDB0: "Module32NextW" ??_C@_0O@NADNHHIC@Module32NextW?$AA@
0x180001F9C: "__cdecl _imp_load_EnumerateLoadedModulesW64" __imp_load_EnumerateLoadedModulesW64
0x18000C648: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180001CD0: "int __cdecl FailSymGetLineFromName64(void * __ptr64,char * __ptr64,char * __ptr64,unsigned long,long * __ptr64,struct _IMAGEHLP_LINE64 * __ptr64)" ?FailSymGetLineFromName64@@YAHPEAXPEAD1KPEAJPEAU_IMAGEHLP_LINE64@@@Z
0x180001F15: "__cdecl _imp_load_?SymGetDiaSession@@YAHPEAX_KPEAPEAUIDiaSession@@@Z" __imp_load_?SymGetDiaSession@@YAHPEAX_KPEAPEAUIDiaSession@@@Z
0x180002350: SymEnumTypesW
0x1800025B0: SymGetModuleBase64
0x180003DF3: memcpy
0x180001CD0: "void * __ptr64 __cdecl FailFindExecutableImage(char * __ptr64,char * __ptr64,char * __ptr64)" ?FailFindExecutableImage@@YAPEAXPEAD00@Z
0x1800027BC: "__cdecl _imp_load_SymGetTypeInfo" __imp_load_SymGetTypeInfo
0x18000C5B0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180018DD0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_EventingProviderCallNames" ?g_EventingProviderCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180017128: "__cdecl _imp_SymEnumerateSymbols64" __imp_SymEnumerateSymbols64
0x1800170B8: "__cdecl _imp_StackWalkEx" __imp_StackWalkEx
0x18000273C: "__cdecl _imp_load_SymGetSymbolFile" __imp_load_SymGetSymbolFile
0x18000D708: "EnableCertPaddingCheck" ??_C@_1CO@BENGPDKK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAC?$AAe?$AAr?$AAt?$AAP?$AAa?$AAd?$AAd?$AAi?$AAn?$AAg?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x180001CD0: "unsigned long __cdecl FailSymAddrIncludeInlineTrace(void * __ptr64,unsigned __int64)" ?FailSymAddrIncludeInlineTrace@@YAKPEAX_K@Z
0x180007444: pMemFree
0x18000C810: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180015E30: RtlpMrdataSectionLockCount
0x18000D1B0: "SymAddrIncludeInlineTrace" ??_C@_0BK@CNLOHHME@SymAddrIncludeInlineTrace?$AA@
0x180001CD0: "int __cdecl FailSymFromInlineContext(void * __ptr64,unsigned __int64,unsigned long,unsigned long * __ptr64,struct _SYMBOL_INFO * __ptr64)" ?FailSymFromInlineContext@@YAHPEAX_KKPEAKPEAU_SYMBOL_INFO@@@Z
0x18000C7F8: "__cdecl _imp_memset" __imp_memset
0x180018370: "struct _DOWNLEVEL_SHLWAPI_L1_CALLS volatile g_DownlevelShlwapiL1Calls" ?g_DownlevelShlwapiL1Calls@@3U_DOWNLEVEL_SHLWAPI_L1_CALLS@@C
0x180003C10: "__cdecl _acrt_initialize" __acrt_initialize
0x18000D970: "NtSystemDebugControl" ??_C@_0BF@OAMAAEOC@NtSystemDebugControl?$AA@
0x18000D448: "SymGetSearchPath" ??_C@_0BB@OLAHHPEK@SymGetSearchPath?$AA@
0x18000DCC0: "NtResumeProcess" ??_C@_0BA@PNNBPCAM@NtResumeProcess?$AA@
0x180001CD0: "int __cdecl FailSymRegisterFunctionEntryCallback64(void * __ptr64,void * __ptr64 (__cdecl*)(void * __ptr64,unsigned __int64,unsigned __int64),unsigned __int64)" ?FailSymRegisterFunctionEntryCallback64@@YAHPEAXP6APEAX0_K1@Z1@Z
0x180014D70: DloadSectionCommitPermanent
0x180003B66: "__cdecl initterm" _initterm
0x1800184A0: "struct _CORE_TOOLHELP_CALLS volatile g_CoreToolHelpCalls" ?g_CoreToolHelpCalls@@3U_CORE_TOOLHELP_CALLS@@C
0x180001CD0: "int __cdecl FailSymUnDName64(struct _IMAGEHLP_SYMBOL64 * __ptr64,char * __ptr64,unsigned long)" ?FailSymUnDName64@@YAHPEAU_IMAGEHLP_SYMBOL64@@PEADK@Z
0x18000E450: "GetPackageApplicationIds" ??_C@_0BJ@IDNJBAAH@GetPackageApplicationIds?$AA@
0x180001124: UnMapIt2
0x18000ECA8: "shlwapi.dll" ??_C@_0M@PPBCJOEJ@shlwapi?4dll?$AA@
0x180017258: "__cdecl _imp_SymMatchFileName" __imp_SymMatchFileName
0x18000A6B0: ImageGetDigestStream
0x180003BDE: "__cdecl o__initialize_onexit_table" _o__initialize_onexit_table
0x1800171A0: "__cdecl _imp_SymGetLineNext64" __imp_SymGetLineNext64
0x18001261C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180014D68: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000E9F0: "CoUnmarshalInterface" ??_C@_0BF@JFFBDLH@CoUnmarshalInterface?$AA@
0x18000E7F0: "api-ms-win-core-comm-l1-1-0.dll" ??_C@_0CA@LJFACAML@api?9ms?9win?9core?9comm?9l1?91?90?4dll?$AA@
0x180018330: "struct _DOWNLEVEL_SHLWAPI_L2_CALLS volatile g_DownlevelShlwapiL2Calls" ?g_DownlevelShlwapiL2Calls@@3U_DOWNLEVEL_SHLWAPI_L2_CALLS@@C
0x180003970: "void __cdecl RemoveRelocations(char * __ptr64)" ?RemoveRelocations@@YAXPEAD@Z
0x180002250: SymEnumSym
0x18000E0D0: "FileTimeToDosDateTime" ??_C@_0BG@KFDBAGBJ@FileTimeToDosDateTime?$AA@
0x18000C8A0: "__cdecl _xi_z" __xi_z
0x18000C708: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180018C48: "union _RTL_RUN_ONCE volatile g_RunOnceMrdataCommitObtained" ?g_RunOnceMrdataCommitObtained@@3T_RTL_RUN_ONCE@@C
0x18000C510: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001CD0: "int __cdecl FailSearchTreeForFile(char * __ptr64,char * __ptr64,char * __ptr64)" ?FailSearchTreeForFile@@YAHPEAD00@Z
0x180017260: "__cdecl _imp_SymMatchFileNameW" __imp_SymMatchFileNameW
0x18000E160: "GetPrivateProfileStringW" ??_C@_0BJ@HLFNMLJD@GetPrivateProfileStringW?$AA@
0x18000D0F8: "SymEnumerateSymbols64" ??_C@_0BG@JKACDHID@SymEnumerateSymbols64?$AA@
0x180003B8A: "__cdecl _C_specific_handler" __C_specific_handler
0x18000E050: "QueueUserWorkItem" ??_C@_0BC@LALMFEHO@QueueUserWorkItem?$AA@
0x18000D0B0: "SymEnumerateModules" ??_C@_0BE@HDOJAMIL@SymEnumerateModules?$AA@
0x18000269C: "__cdecl _imp_load_SymGetSourceVarFromTokenW" __imp_load_SymGetSourceVarFromTokenW
0x18000C6C8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180017278: "__cdecl _imp_SymMatchStringW" __imp_SymMatchStringW
0x18000287C: "__cdecl _imp_load_SymMatchString" __imp_load_SymMatchString
0x180003C10: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x18000E0F8: "GetComputerNameW" ??_C@_0BB@GFABHBEI@GetComputerNameW?$AA@
0x180001CD0: "int __cdecl FailSymSetContext(void * __ptr64,struct _IMAGEHLP_STACK_FRAME * __ptr64,void * __ptr64)" ?FailSymSetContext@@YAHPEAXPEAU_IMAGEHLP_STACK_FRAME@@0@Z
0x18000EA88: "RoGetActivationFactory" ??_C@_0BH@ELDDNMMN@RoGetActivationFactory?$AA@
0x180017270: "__cdecl _imp_SymMatchStringA" __imp_SymMatchStringA
0x180001CD0: "int __cdecl FailSymRegisterCallback64(void * __ptr64,int (__cdecl*)(void * __ptr64,unsigned long,unsigned __int64,unsigned __int64),unsigned __int64)" ?FailSymRegisterCallback64@@YAHPEAXP6AH0K_K1@Z1@Z
0x180003DFF: memmove
0x18000E470: "PackageIdFromFullName" ??_C@_0BG@MMKMBIJJ@PackageIdFromFullName?$AA@
0x18000C578: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000D358: "SymGetLineNext" ??_C@_0P@KOMMEDEA@SymGetLineNext?$AA@
0x18000D340: "SymGetLineFromName64" ??_C@_0BF@KJIHLIO@SymGetLineFromName64?$AA@
0x180019110: "struct _DYNAMIC_CALL_NAME volatile * volatile g_WintrustCallNames" ?g_WintrustCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180018460: "struct _API_MS_WIN_CORE_COM_L1_CALLS volatile g_ApiMsWinCoreComL1Calls" ?g_ApiMsWinCoreComL1Calls@@3U_API_MS_WIN_CORE_COM_L1_CALLS@@C
0x180017188: "__cdecl _imp_SymGetLineFromInlineContext" __imp_SymGetLineFromInlineContext
0x180018BB0: "struct _SHLWAPI_CALLS volatile g_ShlWapiCalls" ?g_ShlWapiCalls@@3U_SHLWAPI_CALLS@@C
0x1800035C0: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x1800193F0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ServiceCoreCallNames" ?g_ServiceCoreCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180005170: "int __cdecl BindpExpandImageFileHeaders(struct _BINDP_PARAMETERS * __ptr64,struct _LOADED_IMAGE * __ptr64,unsigned long)" ?BindpExpandImageFileHeaders@@YAHPEAU_BINDP_PARAMETERS@@PEAU_LOADED_IMAGE@@K@Z
0x18000C560: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000ED08: "api-ms-win-downlevel-shlwapi-l2-" ??_C@_0CI@PMBPMFNE@api?9ms?9win?9downlevel?9shlwapi?9l2?9@
0x18000D038: "MakeSureDirectoryPathExists" ??_C@_0BM@GFEEIAPF@MakeSureDirectoryPathExists?$AA@
0x18000DE70: "SetProcessShutdownParameters" ??_C@_0BN@OGPGPIEJ@SetProcessShutdownParameters?$AA@
0x180001CD0: "unsigned long __cdecl FailSymLoadModule(void * __ptr64,void * __ptr64,char * __ptr64,char * __ptr64,unsigned long,unsigned long)" ?FailSymLoadModule@@YAKPEAX0PEAD1KK@Z
0x180017268: "__cdecl _imp_SymMatchString" __imp_SymMatchString
0x18000C5D0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003CF8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000E388: "BaseSetLastNTError" ??_C@_0BD@DBIPMLDN@BaseSetLastNTError?$AA@
0x1800028F0: SymQueryInlineTrace
0x18000E568: "userenv.dll" ??_C@_0M@GKFBEPIE@userenv?4dll?$AA@
0x180003B96: "__cdecl o___std_type_info_destroy_list" _o___std_type_info_destroy_list
0x18000E620: "GetProcessId" ??_C@_0N@PLLAIOPL@GetProcessId?$AA@
0x1800198E0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreSynchCallNames" ?g_CoreSynchCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800034F4: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x18000EFF8: "GetNumberOfEventLogRecords" ??_C@_0BL@HLAMFCHD@GetNumberOfEventLogRecords?$AA@
0x1800021BC: "__cdecl _imp_load_StackWalkEx" __imp_load_StackWalkEx
0x180001CD0: "int __cdecl FailSymFromAddrW(void * __ptr64,unsigned __int64,unsigned long * __ptr64,struct _SYMBOL_INFOW * __ptr64)" ?FailSymFromAddrW@@YAHPEAX_KPEAKPEAU_SYMBOL_INFOW@@@Z
0x180017008: "__cdecl _imp_SymUnloadModule64" __imp_SymUnloadModule64
0x1800184E0: "struct _KERNEL32_CALLS volatile g_Kernel32Calls" ?g_Kernel32Calls@@3U_KERNEL32_CALLS@@C
0x1800021F0: SymAddrIncludeInlineTrace
0x18000D880: "NtOpenThread" ??_C@_0N@EJDHLIH@NtOpenThread?$AA@
0x18000E8F8: "PrivateKDBreakPoint" ??_C@_0BE@CIDEACDK@PrivateKDBreakPoint?$AA@
0x18000EE40: "CertOpenSystemStoreA" ??_C@_0BF@LOBCDGKG@CertOpenSystemStoreA?$AA@
0x18000EB18: "SysFreeString" ??_C@_0O@HGGCANLK@SysFreeString?$AA@
0x180003BA2: "__cdecl cexit" _cexit
0x1800023D0: SymFindFileInPath
0x1800026BC: "__cdecl _imp_load_SymGetSymFromAddr64" __imp_load_SymGetSymFromAddr64
0x180009B60: UpdateDebugInfoFile
0x1800033C4: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180002130: ReportSymbolLoadSummary
0x18000DC58: "RtlSetLastWin32ErrorAndNtStatusF" ??_C@_0CM@HHACLIG@RtlSetLastWin32ErrorAndNtStatusF@
0x18000C5A0: "__cdecl _imp_GetModuleHandleExA" __imp_GetModuleHandleExA
0x18000ED50: "CertCloseStore" ??_C@_0P@FADIKHJH@CertCloseStore?$AA@
0x18000E2D0: "GetCommState" ??_C@_0N@NHAHINCA@GetCommState?$AA@
0x180017048: "__cdecl _imp_FindExecutableImage" __imp_FindExecutableImage
0x18000EEC8: "CryptAcquireCertificatePrivateKe" ??_C@_0CC@JGCNJPGL@CryptAcquireCertificatePrivateKe@
0x18000F1B8: "CryptGetHashParam" ??_C@_0BC@BNEOPJAJ@CryptGetHashParam?$AA@
0x18000EF28: "ControlService" ??_C@_0P@OACFAAAJ@ControlService?$AA@
0x180003C10: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x18000C808: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x180003BC6: "__cdecl o__execute_onexit_table" _o__execute_onexit_table
0x18000EF98: "BackupEventLogA" ??_C@_0BA@GILFMDNH@BackupEventLogA?$AA@
0x180003734: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x18000DBA0: "NtQuerySemaphore" ??_C@_0BB@IKGLGKED@NtQuerySemaphore?$AA@
0x1800097C0: RemovePrivateCvSymbolicEx
0x18000C638: api-ms-win-core-misc-l1-1-0_NULL_THUNK_DATA
0x18000EC40: "PathIsUNCServerW" ??_C@_0BB@EDOLCPKD@PathIsUNCServerW?$AA@
0x18000C6B8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180009410: SplitSymbols
0x180002390: SymEnumerateSymbols64
0x18000F208: "EventUnregister" ??_C@_0BA@FAKLIPIC@EventUnregister?$AA@
0x18000D390: "SymGetLinePrev64" ??_C@_0BB@JPCLNFDO@SymGetLinePrev64?$AA@
0x1800014F8: MapIt2
0x18000F0E0: "OpenServiceA" ??_C@_0N@MPAGLEEC@OpenServiceA?$AA@
0x18000E1B0: "SwitchToFiber" ??_C@_0O@LHEJOJMP@SwitchToFiber?$AA@
0x1800183F0: "struct _DOWNLEVEL_KERNEL32_L2_CALLS volatile g_DownlevelKernel32L2Calls" ?g_DownlevelKernel32L2Calls@@3U_DOWNLEVEL_KERNEL32_L2_CALLS@@C
0x180018490: "struct _CORE_PROCESS_SECURITY_CALLS volatile g_CoreProcessSecurityCalls" ?g_CoreProcessSecurityCalls@@3U_CORE_PROCESS_SECURITY_CALLS@@C
0x18000283C: "__cdecl _imp_load_SymMatchFileName" __imp_load_SymMatchFileName
0x18000D128: "SymEnumerateSymbolsW64" ??_C@_0BH@EPBPGHFC@SymEnumerateSymbolsW64?$AA@
0x180018350: "struct _CORE_PROCESSENVIRONMENT_CALLS volatile g_CoreProcessEnvironmentCalls" ?g_CoreProcessEnvironmentCalls@@3U_CORE_PROCESSENVIRONMENT_CALLS@@C
0x18000F138: "GetSidSubAuthorityCount" ??_C@_0BI@LPFJALDI@GetSidSubAuthorityCount?$AA@
0x1800194F0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreMiscCallNames" ?g_CoreMiscCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000D4A8: "SymGetSymFromName64" ??_C@_0BE@HPDFGLCD@SymGetSymFromName64?$AA@
0x18001266C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-misc-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-misc-l1-1-0
0x180018180: "struct _CORE_DEBUG_CALLS volatile g_CoreDebugCalls" ?g_CoreDebugCalls@@3U_CORE_DEBUG_CALLS@@C
0x180018938: "struct _CORE_PSAPI_CALLS volatile g_CorePsapiCalls" ?g_CorePsapiCalls@@3U_CORE_PSAPI_CALLS@@C
0x180018C08: "struct _CORE_SYNCH_CALLS volatile g_CoreSynchCalls" ?g_CoreSynchCalls@@3U_CORE_SYNCH_CALLS@@C
0x180018090: "struct _CORE_WINDOWSERRORREPORTING_CALLS volatile g_CoreWindowsErrorReportingCalls" ?g_CoreWindowsErrorReportingCalls@@3U_CORE_WINDOWSERRORREPORTING_CALLS@@C
0x18000D1D0: "SymCompareInlineTrace" ??_C@_0BG@OJHIPMHA@SymCompareInlineTrace?$AA@
0x18001A100: "struct _DYNAMIC_CALLS_DESC volatile g_CoreProcessSecurityCallsDesc" ?g_CoreProcessSecurityCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000D518: "SymGetTypeInfo" ??_C@_0P@CICBGLGA@SymGetTypeInfo?$AA@
0x1800180D0: "struct _SSPICLI_CALLS volatile g_SspiCliCalls" ?g_SspiCliCalls@@3U_SSPICLI_CALLS@@C
0x180019210: "struct _DYNAMIC_CALLS_DESC volatile g_DownlevelKernel32L1CallsDesc" ?g_DownlevelKernel32L1CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x1800028BC: "__cdecl _imp_load_SymMatchStringW" __imp_load_SymMatchStringW
0x18000249C: "__cdecl _imp_load_SymFunctionTableAccess64AccessRoutines" __imp_load_SymFunctionTableAccess64AccessRoutines
0x180017040: "__cdecl _imp_FindDebugInfoFileEx" __imp_FindDebugInfoFileEx
0x18000DA90: "RtlGetUnloadEventTrace" ??_C@_0BH@BEBBGBAE@RtlGetUnloadEventTrace?$AA@
0x18000F2A8: "api-ms-win-eventlog-legacy-l1-1-" ??_C@_0CG@NJEPIBIM@api?9ms?9win?9eventlog?9legacy?9l1?91?9@
0x18000EF10: "CloseServiceHandle" ??_C@_0BD@DLOBKKPI@CloseServiceHandle?$AA@
0x180003C10: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180001CD0: "int __cdecl FailSymGetModuleInfo(void * __ptr64,unsigned long,struct _IMAGEHLP_MODULE * __ptr64)" ?FailSymGetModuleInfo@@YAHPEAXKPEAU_IMAGEHLP_MODULE@@@Z
0x180001CD0: "int __cdecl FailSymFromAddr(void * __ptr64,unsigned __int64,unsigned long * __ptr64,struct _SYMBOL_INFO * __ptr64)" ?FailSymFromAddr@@YAHPEAX_KPEAKPEAU_SYMBOL_INFO@@@Z
0x180007F40: GetImageConfigInformation
0x180008630: SetImageConfigInformation
0x18000EA40: "ole32.dll" ??_C@_09IMMMOKKM@ole32?4dll?$AA@
0x18000B5E8: "public: __cdecl RtlMrdataObtainSectionWriteAccess::~RtlMrdataObtainSectionWriteAccess(void) __ptr64" ??1RtlMrdataObtainSectionWriteAccess@@QEAA@XZ
0x18000DC88: "RtlSetExtendedFeaturesMask" ??_C@_0BL@ELHCBNPD@RtlSetExtendedFeaturesMask?$AA@
0x180015DE0: "char * __ptr64 __ptr64 BindpEndCapturedModuleNames" ?BindpEndCapturedModuleNames@@3PEADEA
0x180001CD0: "int __cdecl FailSymUnloadModule64(void * __ptr64,unsigned __int64)" ?FailSymUnloadModule64@@YAHPEAX_K@Z
0x18000F240: "advapi32.dll" ??_C@_0N@INAGJMNN@advapi32?4dll?$AA@
0x180017130: "__cdecl _imp_SymEnumerateSymbolsW64" __imp_SymEnumerateSymbolsW64
0x180001C60: ??1?$TraceLoggingThreadActivity@$1?g_DbgToolsTraceLoggingProvider@@3QEBU_TlgProvider_t@@EB$0EAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsHProvider@@@@QEAA@XZ
0x18000C630: "__cdecl _imp_lstrcmpiA" __imp_lstrcmpiA
0x18000E008: "CreateSemaphoreExW" ??_C@_0BD@KIEEOEEH@CreateSemaphoreExW?$AA@
0x180017190: "__cdecl _imp_SymGetLineFromInlineContextW" __imp_SymGetLineFromInlineContextW
0x18000215C: "__cdecl _imp_load_SetCheckUserInterruptShared" __imp_load_SetCheckUserInterruptShared
0x18000247C: "__cdecl _imp_load_SymFunctionTableAccess64" __imp_load_SymFunctionTableAccess64
0x180002210: SymCleanup
0x180003370: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x1800181F0: "struct _MPR_CALLS volatile g_MprCalls" ?g_MprCalls@@3U_MPR_CALLS@@C
0x18000E3A0: "QueryInformationJobObject" ??_C@_0BK@DNBGKNHH@QueryInformationJobObject?$AA@
0x18000DE00: "Process32NextW" ??_C@_0P@HGJPNFAI@Process32NextW?$AA@
0x18000C6A8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x18000C670: "__cdecl _imp_TlsSetValue" __imp_TlsSetValue
0x180001C44: ??0?$TraceLoggingThreadActivity@$1?g_DbgToolsTraceLoggingProvider@@3QEBU_TlgProvider_t@@EB$0EAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsHProvider@@@@QEAA@XZ
0x18000364C: atexit
0x18000D2B8: "SymGetLineFromAddr64" ??_C@_0BF@GMMDJHID@SymGetLineFromAddr64?$AA@
0x1800023F0: SymFindFileInPathW
0x1800196D0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreRegistryPrivateCallsDesc" ?g_CoreRegistryPrivateCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180003BD2: "__cdecl o__initialize_narrow_environment" _o__initialize_narrow_environment
0x18000DFE0: "GetCommandLineW" ??_C@_0BA@NKEGPFCL@GetCommandLineW?$AA@
0x180002990: SymSetOptions
0x18000C528: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x18000C598: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x18000F0D0: "OpenSCManagerW" ??_C@_0P@LEIGFCJD@OpenSCManagerW?$AA@
0x180019020: "struct _DYNAMIC_CALLS_DESC volatile g_ShlwapiIeCallsDesc" ?g_ShlwapiIeCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000265C: "__cdecl _imp_load_SymGetSourceFileFromTokenW" __imp_load_SymGetSourceFileFromTokenW
0x180001FFC: "__cdecl _imp_load_FindExecutableImage" __imp_load_FindExecutableImage
0x180001CB0: ImageHelpFreeStaticCertificateData
0x18000C780: "__cdecl _imp__o__ultoa_s" __imp__o__ultoa_s
0x18000D7C8: "DbgUiIssueRemoteBreakin" ??_C@_0BI@JNIDGPMA@DbgUiIssueRemoteBreakin?$AA@
0x18001A5A0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreFileL1CallsDesc" ?g_CoreFileL1CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180019320: "struct _DYNAMIC_CALLS_DESC volatile g_CoreFileL2CallsDesc" ?g_CoreFileL2CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C818: "__cdecl _imp_EventActivityIdControl" __imp_EventActivityIdControl
0x18000EC98: "PathFileExistsW" ??_C@_0BA@MGGAPBAJ@PathFileExistsW?$AA@
0x180007BC0: "void __cdecl ParsePath(char const * __ptr64,char * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64)" ?ParsePath@@YAXPEBDPEAD_K12@Z
0x180003C10: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x18000243C: "__cdecl _imp_load_SymFromInlineContextW" __imp_load_SymFromInlineContextW
0x18000C520: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180018FD0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreDebugCallNames" ?g_CoreDebugCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180001F3C: "__cdecl _imp_load_EnumerateLoadedModules64" __imp_load_EnumerateLoadedModules64
0x18000F2D0: "api-ms-win-core-processsecurity-" ??_C@_0CL@KMMDHOMM@api?9ms?9win?9core?9processsecurity?9@
0x18000E660: "api-ms-win-core-synch-l1-2-0.dll" ??_C@_0CB@DPNHNCCP@api?9ms?9win?9core?9synch?9l1?92?90?4dll@
0x18000D4F0: "SymGetSymPrev64" ??_C@_0BA@CDJAICGN@SymGetSymPrev64?$AA@
0x18000C758: "__cdecl _imp__o__seh_filter_dll" __imp__o__seh_filter_dll
0x18000C788: "__cdecl _imp_atoi" __imp_atoi
0x180017200: "__cdecl _imp_SymGetSymFromName64" __imp_SymGetSymFromName64
0x18000D750: "DbgBreakPoint" ??_C@_0O@ODHAJHCA@DbgBreakPoint?$AA@
0x1800025D0: SymGetModuleInfo64
0x180006A80: "int __cdecl IsLegalModule(char const * __ptr64)" ?IsLegalModule@@YAHPEBD@Z
0x18000EE70: "CertVerifyCertificateChainPolicy" ??_C@_0CB@COAIKGLK@CertVerifyCertificateChainPolicy@
0x18000C8B8: "__cdecl _xt_a" __xt_a
0x18000E2B8: "GetCommModemStatus" ??_C@_0BD@CJOLMEPC@GetCommModemStatus?$AA@
0x180014D60: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x18000E9B0: "CoMarshalInterThreadInterfaceInS" ??_C@_0CG@DNMFLAOH@CoMarshalInterThreadInterfaceInS@
0x18000F278: "api-ms-win-service-management-l1" ??_C@_0CJ@JGDAGPDJ@api?9ms?9win?9service?9management?9l1@
0x18000C6E8: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18000C688: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180015DF8: "struct _LIST_ENTRY ImageLoadList" ?ImageLoadList@@3U_LIST_ENTRY@@A
0x18000EDB8: "CertFreeCertificateContext" ??_C@_0BL@PJJPAKMH@CertFreeCertificateContext?$AA@
0x180019900: "struct _DYNAMIC_CALLS_DESC volatile g_SecurityCryptoapiCallsDesc" ?g_SecurityCryptoapiCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001CE0: ImageDirectoryEntryToData
0x18000DFB0: "UnregisterApplicationRestart" ??_C@_0BN@MMANHJJL@UnregisterApplicationRestart?$AA@
0x18000C758: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x18000EB90: "SafeArrayGetVartype" ??_C@_0BE@NMOKCKEI@SafeArrayGetVartype?$AA@
0x18000F150: "RegConnectRegistryExW" ??_C@_0BG@KMOPACEK@RegConnectRegistryExW?$AA@
0x1800184D8: "struct _SERVICE_CORE_CALLS volatile g_ServiceCoreCalls" ?g_ServiceCoreCalls@@3U_SERVICE_CORE_CALLS@@C
0x1800171C8: "__cdecl _imp_SymGetOptions" __imp_SymGetOptions
0x18000EEB0: "CryptStringToBinaryA" ??_C@_0BF@LIGABANN@CryptStringToBinaryA?$AA@
0x18000F228: "QueryServiceStatusEx" ??_C@_0BF@CLFHMDKP@QueryServiceStatusEx?$AA@
0x18000C800: "__cdecl _imp_strncmp" __imp_strncmp
0x18000D180: "SymFromInlineContext" ??_C@_0BF@CBDDOAAJ@SymFromInlineContext?$AA@
0x18000E408: "GetProcessImageFileNameW" ??_C@_0BJ@FEKDIPFC@GetProcessImageFileNameW?$AA@
0x180001CD0: "struct API_VERSION * __ptr64 __cdecl FailImagehlpApiVersionEx(struct API_VERSION * __ptr64)" ?FailImagehlpApiVersionEx@@YAPEAUAPI_VERSION@@PEAU1@@Z
0x180017058: "__cdecl _imp_FindFileInPath" __imp_FindFileInPath
0x18000B5B4: "public: __cdecl RtlMrdataObtainSectionWriteAccess::RtlMrdataObtainSectionWriteAccess(void const * __ptr64) __ptr64" ??0RtlMrdataObtainSectionWriteAccess@@QEAA@PEBX@Z
0x180019790: "struct _DYNAMIC_CALL_NAME volatile * volatile g_SecurityBaseCallNames" ?g_SecurityBaseCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000F050: "RegisterEventSourceA" ??_C@_0BF@EBHPDBGP@RegisterEventSourceA?$AA@
0x180003C1C: DllMain
0x18000E198: "SetConsoleTitleW" ??_C@_0BB@GOMIMMPM@SetConsoleTitleW?$AA@
0x180017138: "__cdecl _imp_SymFindFileInPath" __imp_SymFindFileInPath
0x1800170C0: "__cdecl _imp_SymAddrIncludeInlineTrace" __imp_SymAddrIncludeInlineTrace
0x18001A160: "struct _DYNAMIC_CALL_NAME volatile * volatile g_Advapi32CallNames" ?g_Advapi32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180018C38: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ExtMsWinKernel32PackageL1_1_1CallNames" ?g_ExtMsWinKernel32PackageL1_1_1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180003C10: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180001CD0: "int __cdecl FailSymGetLineFromAddr64(void * __ptr64,unsigned __int64,unsigned long * __ptr64,struct _IMAGEHLP_LINE64 * __ptr64)" ?FailSymGetLineFromAddr64@@YAHPEAX_KPEAKPEAU_IMAGEHLP_LINE64@@@Z
0x1800171A8: "__cdecl _imp_SymGetLinePrev64" __imp_SymGetLinePrev64
0x18000DF60: "SearchPathW" ??_C@_0M@BHLOJKBL@SearchPathW?$AA@
0x180002870: SymMatchFileNameW
0x180019960: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreCommCallNames" ?g_CoreCommCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180003924: "__cdecl RTC_Terminate" _RTC_Terminate
0x18000C5C8: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x180003D5C: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1800181E8: "struct _USERENV_CALLS volatile g_UserEnvCalls" ?g_UserEnvCalls@@3U_USERENV_CALLS@@C
0x180017228: "__cdecl _imp_SymGetTypeFromName" __imp_SymGetTypeFromName
0x180012658: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x1800171B0: "__cdecl _imp_SymGetModuleBase64" __imp_SymGetModuleBase64
0x18000267C: "__cdecl _imp_load_SymGetSourceFileTokenW" __imp_load_SymGetSourceFileTokenW
0x18000DCE8: "CloseProfileUserMapping" ??_C@_0BI@EJCIIOIC@CloseProfileUserMapping?$AA@
0x18000C7B8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800020F0: MakeSureDirectoryPathExists
0x180001BD8: "void __cdecl DbgToolsSafe_TraceLoggingUnregister(void)" ?DbgToolsSafe_TraceLoggingUnregister@@YAXXZ
0x180019FE0: "struct _DYNAMIC_CALLS_DESC volatile g_UserEnvCallsDesc" ?g_UserEnvCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C838: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18001A420: "struct _DYNAMIC_CALLS_DESC volatile g_DownlevelShlwapiL2CallsDesc" ?g_DownlevelShlwapiL2CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001CD0: "int __cdecl FailSymEnumerateSymbols(void * __ptr64,unsigned long,int (__cdecl*)(char const * __ptr64,unsigned long,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumerateSymbols@@YAHPEAXKP6AHPEBDKK0@Z0@Z
0x18001AC90: "struct _DYNAMIC_CALLS_DESC volatile g_DownlevelShlwapiL1CallsDesc" ?g_DownlevelShlwapiL1CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180014000: "struct GLOBALS g" ?g@@3UGLOBALS@@A
0x1800126E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180002070: FindFileInSearchPath
0x180017230: "__cdecl _imp_SymGetTypeFromNameW" __imp_SymGetTypeFromNameW
0x180012644: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x180015E28: "__cdecl _puiHead" __puiHead
0x18000D240: "SymFunctionTableAccess64" ??_C@_0BJ@OOGADJNM@SymFunctionTableAccess64?$AA@
0x18000F1D0: "CryptHashData" ??_C@_0O@DAIMODJH@CryptHashData?$AA@
0x180017250: "__cdecl _imp_SymLoadModule64" __imp_SymLoadModule64
0x18000D490: "SymGetSymFromName" ??_C@_0BC@KMKKNBJE@SymGetSymFromName?$AA@
0x1800196A0: "struct _DYNAMIC_CALLS_DESC volatile g_VersionCallsDesc" ?g_VersionCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180002850: SymMatchFileName
0x18000F4C0: "version.dll" ??_C@_0M@JHNIIDCD@version?4dll?$AA@
0x18000C500: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000D7A8: "DbgUiGetThreadDebugObject" ??_C@_0BK@MFJEAHAM@DbgUiGetThreadDebugObject?$AA@
0x18000D4D0: "SymGetSymNext64" ??_C@_0BA@DINLMMGF@SymGetSymNext64?$AA@
0x18000201C: "__cdecl _imp_load_FindExecutableImageEx" __imp_load_FindExecutableImageEx
0x18000C828: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000EA70: "RoActivateInstance" ??_C@_0BD@HNHPAIIG@RoActivateInstance?$AA@
0x18000F330: "api-ms-win-security-base-l1-2-0." ??_C@_0CE@PDMLOHN@api?9ms?9win?9security?9base?9l1?92?90?4@
0x18000E298: "ClearCommError" ??_C@_0P@EHAMOMJH@ClearCommError?$AA@
0x180003CD4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000EDD8: "CertGetCertificateChain" ??_C@_0BI@OILJBKCI@CertGetCertificateChain?$AA@
0x18000B60C: "int __cdecl DbgIsDBCSLeadByte(unsigned char)" ?DbgIsDBCSLeadByte@@YAHE@Z
0x180001CD0: "int __cdecl FailSymGetLineFromAddrW64(void * __ptr64,unsigned __int64,unsigned long * __ptr64,struct _IMAGEHLP_LINEW64 * __ptr64)" ?FailSymGetLineFromAddrW64@@YAHPEAX_KPEAKPEAU_IMAGEHLP_LINEW64@@@Z
0x180003BD2: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x18000C7C8: "__cdecl _imp_memcmp" __imp_memcmp
0x180002310: SymEnumTypesByName
0x180017298: "__cdecl _imp_SymSetContext" __imp_SymSetContext
0x180014DA8: RtlpMrdataProtectionLock
0x18000237C: "__cdecl _imp_load_SymEnumerateSymbols64" __imp_load_SymEnumerateSymbols64
0x18000EE30: "CertOpenStore" ??_C@_0O@PAKIPNAF@CertOpenStore?$AA@
0x1800069DC: "unsigned long __cdecl DbgToolsSafe_EventWriteTransfer(unsigned __int64,struct _EVENT_DESCRIPTOR const * __ptr64,struct _GUID const * __ptr64,struct _GUID const * __ptr64,unsigned long,struct _EVENT_DATA_DESCRIPTOR * __ptr64)" ?DbgToolsSafe_EventWriteTransfer@@YAK_KPEBU_EVENT_DESCRIPTOR@@PEBU_GUID@@2KPEAU_EVENT_DATA_DESCRIPTOR@@@Z
0x18000D218: "SymFromName" ??_C@_0M@NIAMCPON@SymFromName?$AA@
0x18000D740: "CsrGetProcessId" ??_C@_0BA@DOJAGBJ@CsrGetProcessId?$AA@
0x18000E2E0: "GetCommTimeouts" ??_C@_0BA@OFEKGFFN@GetCommTimeouts?$AA@
0x180008548: MapIt
0x180014170: "struct FUNCPTRS * DbgHelpFailPtrs" ?DbgHelpFailPtrs@@3PAUFUNCPTRS@@A
0x1800027DC: "__cdecl _imp_load_SymGetTypeInfoEx" __imp_load_SymGetTypeInfoEx
0x18000A5B0: ImageGetCertificateData
0x18000CF40: "hal.dll" ??_C@_07IJBEPEDG@hal?4dll?$AA@
0x180014684: "__cdecl _isa_enabled" __isa_enabled
0x180001634: CalculateImagePtrs
0x18000D288: "SymGetDiaSession" ??_C@_0BB@EMBHHNAK@SymGetDiaSession?$AA@
0x180019780: "struct _DYNAMIC_CALL_NAME volatile * volatile g_SspiCliCallNames" ?g_SspiCliCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180001FDC: "__cdecl _imp_load_FindDebugInfoFileEx" __imp_load_FindDebugInfoFileEx
0x18000CFF0: "FindExecutableImage" ??_C@_0BE@FDJFGDGN@FindExecutableImage?$AA@
0x18001A130: "struct _DYNAMIC_CALLS_DESC volatile g_Secur32CallsDesc" ?g_Secur32CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000E838: "api-ms-win-core-misc-l1-1-0.dll" ??_C@_0CA@OMOHGHMO@api?9ms?9win?9core?9misc?9l1?91?90?4dll?$AA@
0x180001DE0: ImageNtHeader
0x18000C678: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180018970: "struct _OLE32_CALLS volatile g_Ole32Calls" ?g_Ole32Calls@@3U_OLE32_CALLS@@C
0x18000E8E8: "SspiCli.dll" ??_C@_0M@CIEJGNCK@SspiCli?4dll?$AA@
0x1800073E0: pMemAlloc
0x180002330: SymEnumTypesByNameW
0x180001F5C: "__cdecl _imp_load_EnumerateLoadedModulesEx" __imp_load_EnumerateLoadedModulesEx
0x18000EA60: "RoUninitialize" ??_C@_0P@LLFHBIJD@RoUninitialize?$AA@
0x18000E300: "SetCommState" ??_C@_0N@KDLJEBGM@SetCommState?$AA@
0x180002030: FindExecutableImageEx
0x18000E240: "SetConsoleTextAttribute" ??_C@_0BI@DJFAEKGH@SetConsoleTextAttribute?$AA@
0x18000D628: "SymUnDName" ??_C@_0L@LMAOAOCI@SymUnDName?$AA@
0x180001CD0: "int __cdecl FailSymEnumerateSymbolsW64(void * __ptr64,unsigned __int64,int (__cdecl*)(unsigned short const * __ptr64,unsigned __int64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumerateSymbolsW64@@YAHPEAX_KP6AHPEBG1K0@Z0@Z
0x180001CD0: "int __cdecl FailSymGetModuleInfoW64(void * __ptr64,unsigned __int64,struct _IMAGEHLP_MODULEW64 * __ptr64)" ?FailSymGetModuleInfoW64@@YAHPEAX_KPEAU_IMAGEHLP_MODULEW64@@@Z
0x180003BDE: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x180014D08: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180002750: SymGetSymbolFile
0x1800029DC: "__cdecl _imp_load_SymSetScopeFromInlineContext" __imp_load_SymSetScopeFromInlineContext
0x18000D648: "SymUnloadModule" ??_C@_0BA@LMOLCEOO@SymUnloadModule?$AA@
0x18000EAD8: "WindowsDeleteString" ??_C@_0BE@IJKKHGMH@WindowsDeleteString?$AA@
0x180001F90: EnumerateLoadedModulesExW
0x180018F80: "struct _DYNAMIC_CALLS_DESC volatile g_CoreToolHelpCallsDesc" ?g_CoreToolHelpCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180019420: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreVersionCallNames" ?g_CoreVersionCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180017118: "__cdecl _imp_SymEnumTypesW" __imp_SymEnumTypesW
0x180019050: "struct _DYNAMIC_CALL_NAME volatile * volatile g_SecurityCryptoapiCallNames" ?g_SecurityCryptoapiCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180001CD0: "unsigned long __cdecl FailSymSetOptions(unsigned long)" ?FailSymSetOptions@@YAKK@Z
0x180002930: SymRegisterFunctionEntryCallback64
0x1800077D0: pCheckSumBigFile
0x18000205C: "__cdecl _imp_load_FindFileInSearchPath" __imp_load_FindFileInSearchPath
0x18000D260: "SymFunctionTableAccess64AccessRo" ??_C@_0CH@NHODMGPE@SymFunctionTableAccess64AccessRo@
0x18000293C: "__cdecl _imp_load_SymSetContext" __imp_load_SymSetContext
0x1800197F0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreUrlCallNames" ?g_CoreUrlCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000217C: "__cdecl _imp_load_SetSymLoadError" __imp_load_SetSymLoadError
0x18000D008: "ImagehlpApiVersion" ??_C@_0BD@LBNCIIGE@ImagehlpApiVersion?$AA@
0x180003C10: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x18000CCB8: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x180019A00: "struct _DYNAMIC_CALLS_DESC volatile g_CoreDebugCallsDesc" ?g_CoreDebugCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000DE40: "GetThreadTimes" ??_C@_0P@NJAAGDEH@GetThreadTimes?$AA@
0x18000C890: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x18000E810: "api-ms-win-core-debug-l1-1-1.dll" ??_C@_0CB@PADHAFAC@api?9ms?9win?9core?9debug?9l1?91?91?4dll@
0x180001F70: EnumerateLoadedModulesEx
0x1800190F0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ShlwapiIeCallNames" ?g_ShlwapiIeCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180017100: "__cdecl _imp_SymEnumTypes" __imp_SymEnumTypes
0x18000E200: "FillConsoleOutputCharacterA" ??_C@_0BM@KOHFFKAD@FillConsoleOutputCharacterA?$AA@
0x180002770: SymGetSymbolFileW
0x180008A70: "unsigned long __cdecl LdrpGenericProcessRelocation(unsigned short * __ptr64,unsigned __int64,__int64)" ?LdrpGenericProcessRelocation@@YAKPEAG_K_J@Z
0x18000C770: "__cdecl _imp__strcmpi" __imp__strcmpi
0x180002A1C: "__cdecl _imp_load_SymSrvGetFileIndexString" __imp_load_SymSrvGetFileIndexString
0x180002270: SymEnumSymbols
0x18000233C: "__cdecl _imp_load_SymEnumTypesW" __imp_load_SymEnumTypesW
0x1800171E0: "__cdecl _imp_SymGetSourceFileFromTokenW" __imp_SymGetSourceFileFromTokenW
0x18000E928: "SwitchDesktop" ??_C@_0O@LCGKNMD@SwitchDesktop?$AA@
0x18000C568: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000D848: "NtDebugContinue" ??_C@_0BA@CPDFMFD@NtDebugContinue?$AA@
0x180002470: SymFromName
0x18000C5C0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800025F0: SymGetModuleInfoW64
0x18000C778: "__cdecl _imp__strnicmp" __imp__strnicmp
0x18000ED60: "CertFindCertificateInStore" ??_C@_0BL@FFHIDOLI@CertFindCertificateInStore?$AA@
0x180002AD0: SymUnloadModule64
0x18000E4C8: "ext-ms-win-kernel32-package-l1-1" ??_C@_0CH@MJKNJFE@ext?9ms?9win?9kernel32?9package?9l1?91@
0x18000C6D0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1800104D8: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000F4B0: "VerQueryValueW" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x18000F250: "api-ms-win-service-core-l1-1-1.d" ??_C@_0CD@NKEFLBDO@api?9ms?9win?9service?9core?9l1?91?91?4d@
0x18000C7A0: "__cdecl _imp_strncpy_s" __imp_strncpy_s
0x18000271C: "__cdecl _imp_load_SymGetSymPrev64" __imp_load_SymGetSymPrev64
0x18000D538: "SymLoadModule" ??_C@_0O@KINPBJDE@SymLoadModule?$AA@
0x180019490: "struct _DYNAMIC_CALLS_DESC volatile g_CoreTimeZoneCallsDesc" ?g_CoreTimeZoneCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x1800032A0: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x180017238: "__cdecl _imp_SymGetTypeInfo" __imp_SymGetTypeInfo
0x18000E498: "OpenPackageInfoByFullName" ??_C@_0BK@JLILJBME@OpenPackageInfoByFullName?$AA@
0x180002EC0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000CF78: "msvcirt." ??_C@_08JKDGDHLP@msvcirt?4?$AA@
0x180001C88: "void __cdecl tlsFree(void)" ?tlsFree@@YAXXZ
0x18000C7E8: "__cdecl _imp__initterm" __imp__initterm
0x1800126A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180001CD0: "int __cdecl FailSymEnumerateModules64(void * __ptr64,int (__cdecl*)(char const * __ptr64,unsigned __int64,void * __ptr64),void * __ptr64)" ?FailSymEnumerateModules64@@YAHPEAXP6AHPEBD_K0@Z0@Z
0x1800020D0: ImagehlpApiVersionEx
0x18000EF48: "CreateServiceW" ??_C@_0P@FCLKEOKA@CreateServiceW?$AA@
0x1800192F0: "struct _DYNAMIC_CALLS_DESC volatile g_Kernel32CallsDesc" ?g_Kernel32CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180018340: "struct _DOWNLEVEL_KERNEL32_L1_CALLS volatile g_DownlevelKernel32L1Calls" ?g_DownlevelKernel32L1Calls@@3U_DOWNLEVEL_KERNEL32_L1_CALLS@@C
0x18001A740: "struct _DYNAMIC_CALLS_DESC volatile g_ExtKernel32PackageL1CallsDesc" ?g_ExtKernel32PackageL1CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001CD0: "int __cdecl FailSymGetModuleInfoW(void * __ptr64,unsigned long,struct _IMAGEHLP_MODULEW * __ptr64)" ?FailSymGetModuleInfoW@@YAHPEAXKPEAU_IMAGEHLP_MODULEW@@@Z
0x18000C508: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000DD60: "DebugSetProcessKillOnExit" ??_C@_0BK@MKDCGKPG@DebugSetProcessKillOnExit?$AA@
0x180001E96: "__cdecl _tailMerge_dbghelp_dll" __tailMerge_dbghelp_dll
0x180002490: SymFunctionTableAccess64
0x18000D738: ".debug" ??_C@_06NGAPLPGC@?4debug?$AA@
0x180001CD0: "int __cdecl FailSymGetSymPrev(void * __ptr64,struct _IMAGEHLP_SYMBOL * __ptr64)" ?FailSymGetSymPrev@@YAHPEAXPEAU_IMAGEHLP_SYMBOL@@@Z
0x180001CD0: "int __cdecl FailSymEnumerateModules(void * __ptr64,int (__cdecl*)(char const * __ptr64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumerateModules@@YAHPEAXP6AHPEBDK0@Z0@Z
0x18000B9A0: RtlMrdataReleaseSectionWriteAccess
0x180018018: "struct _CORE_JOB_L2_CALLS volatile g_CoreJobL2Calls" ?g_CoreJobL2Calls@@3U_CORE_JOB_L2_CALLS@@C
0x18000D69C: ".pdata" ??_C@_06DGAFLEAA@?4pdata?$AA@
0x18000D0E0: "SymEnumerateSymbols" ??_C@_0BE@PGHNAIFN@SymEnumerateSymbols?$AA@
0x18000C710: "__cdecl _imp_GetVersionExA" __imp_GetVersionExA
0x18000E258: "GetTempPathW" ??_C@_0N@DAENKDLF@GetTempPathW?$AA@
0x18001A050: "struct _DYNAMIC_CALLS_DESC volatile g_DownlevelKernel32L2CallsDesc" ?g_DownlevelKernel32L2CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000CF28: ".sys" ??_C@_04GBJEOPBP@?4sys?$AA@
0x180002A5C: "__cdecl _imp_load_SymSrvGetFileIndexes" __imp_load_SymSrvGetFileIndexes
0x18000E718: "api-ms-win-core-toolhelp-l1-1-0." ??_C@_0CE@OAKIJJDD@api?9ms?9win?9core?9toolhelp?9l1?91?90?4@
0x18000DEE0: "DuplicateHandle" ??_C@_0BA@KKBHKMMH@DuplicateHandle?$AA@
0x180008B00: "unsigned long __cdecl LdrpThumbProcessRelocation(unsigned short * __ptr64,unsigned __int64,__int64)" ?LdrpThumbProcessRelocation@@YAKPEAG_K_J@Z
0x1800107F8: dbghelp_NULL_THUNK_DATA_DLN
0x18000DBB8: "RtlWow64GetThreadSelectorEntry" ??_C@_0BP@FNMIBGNJ@RtlWow64GetThreadSelectorEntry?$AA@
0x18000E0A8: "DeleteFiber" ??_C@_0M@DFGOICCC@DeleteFiber?$AA@
0x18000EBE8: "PathFindFileNameA" ??_C@_0BC@KNIGDLDO@PathFindFileNameA?$AA@
0x1800020B0: ImagehlpApiVersion
0x1800022B0: SymEnumSymbolsExW
0x18000C730: "__cdecl _imp__o__crt_atexit" __imp__o__crt_atexit
0x180003BAE: "__cdecl o__configure_narrow_argv" _o__configure_narrow_argv
0x18000DD20: "DebugActiveProcessStop" ??_C@_0BH@GIBMBPOA@DebugActiveProcessStop?$AA@
0x18000D9F8: "RtlDestroyProcessParameters" ??_C@_0BM@GIFABGKB@RtlDestroyProcessParameters?$AA@
0x1800029B0: SymSetScopeFromAddr
0x180003748: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x18000F018: "GetOldestEventLogRecord" ??_C@_0BI@DELAMBGK@GetOldestEventLogRecord?$AA@
0x180001CD0: "int __cdecl FailEnumerateLoadedModules64(void * __ptr64,int (__cdecl*)(char const * __ptr64,unsigned __int64,unsigned long,void * __ptr64),void * __ptr64)" ?FailEnumerateLoadedModules64@@YAHPEAXP6AHPEBD_KK0@Z0@Z
0x18000E740: "api-ms-win-core-console-l2-1-0.d" ??_C@_0CD@HENCEBKH@api?9ms?9win?9core?9console?9l2?91?90?4d@
0x18000EEF0: "WinVerifyTrust" ??_C@_0P@CBOPOJKE@WinVerifyTrust?$AA@
0x180003414: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x180008260: ImageUnload
0x18000C860: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000DDC0: "OpenThread" ??_C@_0L@EHKLHJ@OpenThread?$AA@
0x180017000: "__cdecl _imp_?SymFreeDiaString@@YAXPEAG@Z" __imp_?SymFreeDiaString@@YAXPEAG@Z
0x180002290: SymEnumSymbolsEx
0x180006C40: BindImageEx
0x18000D6C4: ".dll" ??_C@_04HLONOPDM@?4dll?$AA@
0x18000D140: "SymEnumSym" ??_C@_0L@CGAPFB@SymEnumSym?$AA@
0x180018130: "struct _CORE_COMM_CALLS volatile g_CoreCommCalls" ?g_CoreCommCalls@@3U_CORE_COMM_CALLS@@C
0x18000E128: "GetPrivateProfileIntW" ??_C@_0BG@OGNPECDI@GetPrivateProfileIntW?$AA@
0x18000E5B0: "CoTaskMemFree" ??_C@_0O@MIBPKJDN@CoTaskMemFree?$AA@
0x18000377C: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x18000E578: "CoCreateInstance" ??_C@_0BB@FBCNKNOO@CoCreateInstance?$AA@
0x1800088D0: UnloadAllImages
0x18000EAF0: "SysAllocString" ??_C@_0P@DMOFHADO@SysAllocString?$AA@
0x180001CD0: "struct API_VERSION * __ptr64 __cdecl FailImagehlpApiVersion(void)" ?FailImagehlpApiVersion@@YAPEAUAPI_VERSION@@XZ
0x18000C660: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002050: FindFileInPath
0x18000DBF8: "RtlGetExtendedContextLength" ??_C@_0BM@BLANBBMM@RtlGetExtendedContextLength?$AA@
0x18000F030: "OpenEventLogA" ??_C@_0O@EDGJEOGK@OpenEventLogA?$AA@
0x180014770: "__cdecl _hmod__dbghelp_dll" __hmod__dbghelp_dll
0x18000221C: "__cdecl _imp_load_SymCompareInlineTrace" __imp_load_SymCompareInlineTrace
0x18000209C: "__cdecl _imp_load_ImagehlpApiVersion" __imp_load_ImagehlpApiVersion
0x18000D760: "DbgPrint" ??_C@_08IGPPDFPO@DbgPrint?$AA@
0x1800181A8: "struct _SECURITY_CRYPTOAPI_CALLS volatile g_SecurityCryptoapiCalls" ?g_SecurityCryptoapiCalls@@3U_SECURITY_CRYPTOAPI_CALLS@@C
0x180018488: "struct _SECURITY_LSALOOKUP_CALLS volatile g_SecurityLsaLookupCalls" ?g_SecurityLsaLookupCalls@@3U_SECURITY_LSALOOKUP_CALLS@@C
0x18000CF48: "ntdll." ??_C@_06HOCBPKLA@ntdll?4?$AA@
0x180002A70: SymSrvGetFileIndexes
0x18000F1A8: "CryptGenRandom" ??_C@_0P@HGPEDCEI@CryptGenRandom?$AA@
0x18000D198: "SymFromInlineContextW" ??_C@_0BG@IMAHEANH@SymFromInlineContextW?$AA@
0x18000DC18: "RtlInitializeExtendedContext" ??_C@_0BN@BINLFFKD@RtlInitializeExtendedContext?$AA@
0x180003BEA: "__cdecl register_onexit_function" _register_onexit_function
0x18000225C: "__cdecl _imp_load_SymEnumSymbols" __imp_load_SymEnumSymbols
0x18000D110: "SymEnumerateSymbolsW" ??_C@_0BF@OANGJLNC@SymEnumerateSymbolsW?$AA@
0x180019460: "struct _DYNAMIC_CALLS_DESC volatile g_EventlogLegacyCallsDesc" ?g_EventlogLegacyCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001BB0: "int __cdecl tlsAlloc(void)" ?tlsAlloc@@YAHXZ
0x18000C4E8: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x18000E330: "WaitCommEvent" ??_C@_0O@DPNKCKJG@WaitCommEvent?$AA@
0x180002A90: SymSrvGetFileIndexesW
0x180002810: SymInitialize
0x18000D658: "SymUnloadModule64" ??_C@_0BC@GHDCOMIN@SymUnloadModule64?$AA@
0x18000C718: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000C888: "__cdecl _xi_a" __xi_a
0x1800198B0: "struct _DYNAMIC_CALLS_DESC volatile g_CoreConsoleCallsDesc" ?g_CoreConsoleCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18001A080: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreProcessThreadsCallNames" ?g_CoreProcessThreadsCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000E1C0: "GetConsoleScreenBufferInfo" ??_C@_0BL@NAIJNMLL@GetConsoleScreenBufferInfo?$AA@
0x18000C4F0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x1800032EC: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x1800170C8: "__cdecl _imp_SymCleanup" __imp_SymCleanup
0x18000D808: "NtCreateDebugObject" ??_C@_0BE@HLOEAMPP@NtCreateDebugObject?$AA@
0x18000EFB8: "CloseEventLog" ??_C@_0O@CMPADMMI@CloseEventLog?$AA@
0x180001FF0: FindDebugInfoFileEx
0x180003224: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x1800172C8: "__cdecl _imp_SymSetSearchPath" __imp_SymSetSearchPath
0x18000257C: "__cdecl _imp_load_SymGetLinePrev64" __imp_load_SymGetLinePrev64
0x180007490: CheckSumMappedFile
0x18000E5F0: "api-ms-win-downlevel-kernel32-l2" ??_C@_0CJ@CONBDPME@api?9ms?9win?9downlevel?9kernel32?9l2@
0x18000ADD0: ImageRemoveCertificate
0x18000DD90: "Module32FirstW" ??_C@_0P@FPNNECFF@Module32FirstW?$AA@
0x18000EAC0: "WindowsCreateString" ??_C@_0BE@POPPOKBD@WindowsCreateString?$AA@
0x1800172B0: "__cdecl _imp_SymSetScopeFromAddr" __imp_SymSetScopeFromAddr
0x18000CF20: ".idata" ??_C@_06BCNMOHFD@?4idata?$AA@
0x180003BBA: "__cdecl o__crt_atexit" _o__crt_atexit
0x18000CE88: ?_TlgEvent@?3???$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z@4U<unnamed-type-_TlgEvent>@?3???$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAX01@Z@B
0x180017300: dbghelp_NULL_THUNK_DATA_DLA
0x18000F410: "CallNtPowerInformation" ??_C@_0BH@GPGFINAB@CallNtPowerInformation?$AA@
0x180002450: SymFromInlineContextW
0x18000F120: "GetSidSubAuthority" ??_C@_0BD@LMGFHOAE@GetSidSubAuthority?$AA@
0x18000D228: "SymFunctionTableAccess" ??_C@_0BH@PMEMHADK@SymFunctionTableAccess?$AA@
0x18000D6D0: ".dbg" ??_C@_04JCIHBLPN@?4dbg?$AA@
0x18000F460: "GetFileVersionInfoW" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x180003BA2: "__cdecl o__cexit" _o__cexit
0x18000BA2C: RtlpMrdataObtainSection
0x18000D0C8: "SymEnumerateModules64" ??_C@_0BG@EKANBEJH@SymEnumerateModules64?$AA@
0x180017170: "__cdecl _imp_SymFunctionTableAccess64AccessRoutines" __imp_SymFunctionTableAccess64AccessRoutines
0x18000C830: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x180001CD0: "void * __ptr64 __cdecl FailFindDebugInfoFileEx(char * __ptr64,char * __ptr64,char * __ptr64,int (__cdecl*)(void * __ptr64,char const * __ptr64,void * __ptr64),void * __ptr64)" ?FailFindDebugInfoFileEx@@YAPEAXPEAD00P6AHPEAXPEBD1@Z1@Z
0x180001CD0: "int __cdecl FailSymGetSymFromAddr64(void * __ptr64,unsigned __int64,unsigned __int64 * __ptr64,struct _IMAGEHLP_SYMBOL64 * __ptr64)" ?FailSymGetSymFromAddr64@@YAHPEAX_KPEA_KPEAU_IMAGEHLP_SYMBOL64@@@Z
0x18001A890: "struct _DYNAMIC_CALL_NAME volatile * volatile g_NtDllCallNames" ?g_NtDllCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000241C: "__cdecl _imp_load_SymFromInlineContext" __imp_load_SymFromInlineContext
0x180017120: "__cdecl _imp_SymEnumerateModules64" __imp_SymEnumerateModules64
0x180002430: SymFromInlineContext
0x18000E980: "CoInitializeSecurity" ??_C@_0BF@GDAFCOOE@CoInitializeSecurity?$AA@
0x180003BF6: "__cdecl seh_filter_dll" _seh_filter_dll
0x18000D1E8: "SymQueryInlineTrace" ??_C@_0BE@FKBHALNE@SymQueryInlineTrace?$AA@
0x18000C738: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180009FB0: ImageAddCertificate
0x1800082D0: MapAndLoad
0x180002970: SymSetExtendedOption
0x18000B0C8: DloadMakePermanentImageCommit
0x1800125A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180002830: SymLoadModule64
0x18000C628: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18000D588: "SymRegisterCallback64" ??_C@_0BG@JNAOOHAM@SymRegisterCallback64?$AA@
0x180001CD0: "int __cdecl FailSymGetLineFromInlineContextW(void * __ptr64,unsigned __int64,unsigned long,unsigned __int64,unsigned long * __ptr64,struct _IMAGEHLP_LINEW64 * __ptr64)" ?FailSymGetLineFromInlineContextW@@YAHPEAX_KK1PEAKPEAU_IMAGEHLP_LINEW64@@@Z
0x180002A3C: "__cdecl _imp_load_SymSrvGetFileIndexStringW" __imp_load_SymSrvGetFileIndexStringW
0x180003078: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000CC00: "__cdecl pRawDllMain" _pRawDllMain
0x18000E080: "CreateFiber" ??_C@_0M@GHMCMACD@CreateFiber?$AA@
0x180001CD0: "int __cdecl FailStackWalkEx(unsigned long,void * __ptr64,void * __ptr64,struct _tagSTACKFRAME_EX * __ptr64,void * __ptr64,int (__cdecl*)(void * __ptr64,unsigned __int64,void * __ptr64,unsigned long,unsigned long * __ptr64),void * __ptr64 (__cdecl*)(void * __ptr64,unsigned __int64),unsigned __int64 (__cdecl*)(void * __ptr64,unsigned __int64),unsigned __int64 (__cdecl*)(void * __ptr64,void * __ptr64,struct _tagADDRESS64 * __ptr64),unsigned long)" ?FailStackWalkEx@@YAHKPEAX0PEAU_tagSTACKFRAME_EX@@0P6AH0_K0KPEAK@ZP6APEAX02@ZP6A_K02@ZP6A_K00PEAU_tagADDRESS64@@@ZK@Z
0x18000D3F0: "SymGetModuleInfo64" ??_C@_0BD@KGOGPCFD@SymGetModuleInfo64?$AA@
0x18000D694: ".rdata" ??_C@_06HLMNBFAL@?4rdata?$AA@
0x1800024DC: "__cdecl _imp_load_SymGetLineFromAddr64" __imp_load_SymGetLineFromAddr64
0x180017080: "__cdecl _imp_MakeSureDirectoryPathExists" __imp_MakeSureDirectoryPathExists
0x18000397C: "__cdecl _isa_available_init" __isa_available_init
0x180009770: RemovePrivateCvSymbolic
0x180001CD0: "int __cdecl FailSymGetSymFromAddr(void * __ptr64,unsigned long,unsigned long * __ptr64,struct _IMAGEHLP_SYMBOL * __ptr64)" ?FailSymGetSymFromAddr@@YAHPEAXKPEAKPEAU_IMAGEHLP_SYMBOL@@@Z
0x18000D770: "DbgPrompt" ??_C@_09ILCMGOEO@DbgPrompt?$AA@
0x18000E038: "CreateWaitableTimerExW" ??_C@_0BH@JPFFNBDL@CreateWaitableTimerExW?$AA@
0x180018E90: "struct _DYNAMIC_CALLS_DESC volatile g_ServiceCoreCallsDesc" ?g_ServiceCoreCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180002630: SymGetSearchPath
0x180003B3C: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x18000899C: "unsigned long __cdecl LdrpArmProcessRelocation(unsigned short * __ptr64,unsigned __int64,__int64)" ?LdrpArmProcessRelocation@@YAKPEAG_K_J@Z
0x18000E428: "GetProcessMemoryInfo" ??_C@_0BF@NDAFMACL@GetProcessMemoryInfo?$AA@
0x18000C768: "__cdecl _imp__splitpath_s" __imp__splitpath_s
0x1800125B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000FA58: "__cdecl _rtc_izz" __rtc_izz
0x18000C6C0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18000D3D8: "SymGetModuleInfo" ??_C@_0BB@GPFBCLFD@SymGetModuleInfo?$AA@
0x180002F10: "__cdecl _security_check_cookie" __security_check_cookie
0x18000D070: "StackWalk" ??_C@_09OJFIDCEK@StackWalk?$AA@
0x18000291C: "__cdecl _imp_load_SymRegisterFunctionEntryCallback64" __imp_load_SymRegisterFunctionEntryCallback64
0x18000C880: "__cdecl _xc_z" __xc_z
0x180001CD0: "int __cdecl FailSymGetSymNext64(void * __ptr64,struct _IMAGEHLP_SYMBOL64 * __ptr64)" ?FailSymGetSymNext64@@YAHPEAXPEAU_IMAGEHLP_SYMBOL64@@@Z
0x18000DF10: "IsWow64Process" ??_C@_0P@LKABJJMO@IsWow64Process?$AA@
0x18000E110: "GetComputerNameExW" ??_C@_0BD@EKKKIMMJ@GetComputerNameExW?$AA@
0x18000C690: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000ECE0: "api-ms-win-downlevel-shlwapi-l1-" ??_C@_0CI@BHCIHONH@api?9ms?9win?9downlevel?9shlwapi?9l1?9@
0x1800027D0: SymGetTypeInfo
0x18000C5B8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180001CD0: "int __cdecl FailSymGetLineNext64(void * __ptr64,struct _IMAGEHLP_LINE64 * __ptr64)" ?FailSymGetLineNext64@@YAHPEAXPEAU_IMAGEHLP_LINE64@@@Z
0x180019380: "struct _DYNAMIC_CALLS_DESC volatile g_CoreHandleCallsDesc" ?g_CoreHandleCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180019120: "struct _DYNAMIC_CALLS_DESC volatile g_SecurityLsaLookupCallsDesc" ?g_SecurityLsaLookupCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180017038: "__cdecl _imp_FindDebugInfoFile" __imp_FindDebugInfoFile
0x180001CD0: "int __cdecl FailSymEnumerateSymbols64(void * __ptr64,unsigned __int64,int (__cdecl*)(char const * __ptr64,unsigned __int64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumerateSymbols64@@YAHPEAX_KP6AHPEBD1K0@Z0@Z
0x18000255C: "__cdecl _imp_load_SymGetLineNext64" __imp_load_SymGetLineNext64
0x18000211C: "__cdecl _imp_load_ReportSymbolLoadSummary" __imp_load_ReportSymbolLoadSummary
0x180018950: "struct _USER32_CALLS volatile g_User32Calls" ?g_User32Calls@@3U_USER32_CALLS@@C
0x1800022FC: "__cdecl _imp_load_SymEnumTypesByName" __imp_load_SymEnumTypesByName
0x18000694C: "unsigned long __cdecl DbgToolsSafe_EventUnregister(unsigned __int64)" ?DbgToolsSafe_EventUnregister@@YAK_K@Z
0x1800028DC: "__cdecl _imp_load_SymQueryInlineTrace" __imp_load_SymQueryInlineTrace
0x180018FB0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_MprCallNames" ?g_MprCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180003C10: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180001CD0: "int __cdecl FailSymEnumSym(void * __ptr64,unsigned __int64,int (__cdecl*)(struct _SYMBOL_INFO * __ptr64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumSym@@YAHPEAX_KP6AHPEAU_SYMBOL_INFO@@K0@Z0@Z
0x18001A6A0: "struct _DYNAMIC_CALLS_DESC volatile g_ApiMsWinCoreComL1CallsDesc" ?g_ApiMsWinCoreComL1CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C770: "__cdecl _imp__o__stricmp" __imp__o__stricmp
0x18000DF40: "Wow64RevertWow64FsRedirection" ??_C@_0BO@KOCOEJCM@Wow64RevertWow64FsRedirection?$AA@
0x18000EBD0: "PathIsDirectoryA" ??_C@_0BB@POIALEKO@PathIsDirectoryA?$AA@
0x18000DA38: "RtlFindMessage" ??_C@_0P@NNIFCLKJ@RtlFindMessage?$AA@
0x18000CF04: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000C6F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800027F0: SymGetTypeInfoEx
0x180007170: GetImageUnusedHeaderBytes
0x180001CD0: "int __cdecl FailSymSetSearchPath(void * __ptr64,char * __ptr64)" ?FailSymSetSearchPath@@YAHPEAXPEAD@Z
0x18000E6F0: "api-ms-win-core-timezone-l1-1-0." ??_C@_0CE@FHNIMKPB@api?9ms?9win?9core?9timezone?9l1?91?90?4@
0x18000E938: "CloseDesktop" ??_C@_0N@IKNGKJFJ@CloseDesktop?$AA@
0x180018E00: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreLocalizationCallNames" ?g_CoreLocalizationCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800032BC: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180003BF6: "__cdecl o__seh_filter_dll" _o__seh_filter_dll
0x180003B96: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x180001CD0: "int __cdecl FailSymGetLineFromName(void * __ptr64,char * __ptr64,char * __ptr64,unsigned long,long * __ptr64,struct _IMAGEHLP_LINE * __ptr64)" ?FailSymGetLineFromName@@YAHPEAXPEAD1KPEAJPEAU_IMAGEHLP_LINE@@@Z
0x18001A7B0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreWinRTCallNames" ?g_CoreWinRTCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180017070: "__cdecl _imp_ImagehlpApiVersion" __imp_ImagehlpApiVersion
0x18000E630: "api-ms-win-core-processthreads-l" ??_C@_0CK@BJHFLDDO@api?9ms?9win?9core?9processthreads?9l@
0x1800172B8: "__cdecl _imp_SymSetScopeFromIndex" __imp_SymSetScopeFromIndex
0x18000C570: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000F0C0: "OpenSCManagerA" ??_C@_0P@KIBOOHEE@OpenSCManagerA?$AA@
0x18000E768: "api-ms-win-core-file-l1-2-1.dll" ??_C@_0CA@GDCMMPHC@api?9ms?9win?9core?9file?9l1?92?91?4dll?$AA@
0x180008EE8: ?xxLdrProcessRelocationBlock64@@YAPEFAU_IMAGE_BASE_RELOCATION@@G_KKPEAG_J@Z
0x180009B80: UpdateDebugInfoFileEx
0x1800172C0: "__cdecl _imp_SymSetScopeFromInlineContext" __imp_SymSetScopeFromInlineContext
0x18000B680: "int __cdecl DbgIsProcessorFeaturePresent(unsigned long)" ?DbgIsProcessorFeaturePresent@@YAHK@Z
0x18000DDF0: "Process32Next" ??_C@_0O@LGJLFMBH@Process32Next?$AA@
0x180001CD0: "void * __ptr64 __cdecl FailFindDebugInfoFile(char * __ptr64,char * __ptr64,char * __ptr64)" ?FailFindDebugInfoFile@@YAPEAXPEAD00@Z
0x180017090: "__cdecl _imp_ReportSymbolLoadSummary" __imp_ReportSymbolLoadSummary
0x180004F30: "char * __ptr64 __cdecl BindpCaptureImportModuleName(char const * __ptr64)" ?BindpCaptureImportModuleName@@YAPEADPEBD@Z
0x18000CF50: "kernel32." ??_C@_09NMPHGGII@kernel32?4?$AA@
0x180017110: "__cdecl _imp_SymEnumTypesByNameW" __imp_SymEnumTypesByNameW
0x18000D090: "StackWalkEx" ??_C@_0M@FDPGKDIC@StackWalkEx?$AA@
0x180002A30: SymSrvGetFileIndexString
0x18000D558: "SymMatchFileName" ??_C@_0BB@NAADGBJK@SymMatchFileName?$AA@
0x18000C618: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x180001CD0: "int __cdecl FailEnumerateLoadedModules(void * __ptr64,int (__cdecl*)(char const * __ptr64,unsigned long,unsigned long,void * __ptr64),void * __ptr64)" ?FailEnumerateLoadedModules@@YAHPEAXP6AHPEBDKK0@Z0@Z
0x180002150: SearchTreeForFile
0x180017178: "__cdecl _imp_SymGetExtendedOption" __imp_SymGetExtendedOption
0x18000D910: "NtRemoveProcessDebug" ??_C@_0BF@DGADPHCG@NtRemoveProcessDebug?$AA@
0x180017288: "__cdecl _imp_SymRegisterCallback64" __imp_SymRegisterCallback64
0x18000E358: "DebugActiveProcess" ??_C@_0BD@IADKGHBM@DebugActiveProcess?$AA@
0x18000D600: "SymSetOptions" ??_C@_0O@LIDFOEPH@SymSetOptions?$AA@
0x1800170E0: "__cdecl _imp_SymEnumSymbols" __imp_SymEnumSymbols
0x18000F0F0: "OpenServiceW" ??_C@_0N@NDJOABJF@OpenServiceW?$AA@
0x18000C5E8: api-ms-win-core-localregistry-l1-1-0_NULL_THUNK_DATA
0x1800171F0: "__cdecl _imp_SymGetSourceVarFromTokenW" __imp_SymGetSourceVarFromTokenW
0x180001CD0: "int __cdecl FailSymGetLinePrev64(void * __ptr64,struct _IMAGEHLP_LINE64 * __ptr64)" ?FailSymGetLinePrev64@@YAHPEAXPEAU_IMAGEHLP_LINE64@@@Z
0x180001CD0: "unsigned __int64 __cdecl FailSymGetModuleBase64(void * __ptr64,unsigned __int64)" ?FailSymGetModuleBase64@@YA_KPEAX_K@Z
0x18000ECB8: "api-ms-win-shlwapi-ie-l1-1-0.dll" ??_C@_0CB@LCNEADPN@api?9ms?9win?9shlwapi?9ie?9l1?91?90?4dll@
0x180002A50: SymSrvGetFileIndexStringW
0x180017108: "__cdecl _imp_SymEnumTypesByName" __imp_SymEnumTypesByName
0x18000C8B0: "__cdecl _xp_z" __xp_z
0x18000C700: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x1800022DC: "__cdecl _imp_load_SymEnumTypes" __imp_load_SymEnumTypes
0x18001A5D0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ApiMsWinCoreComL1CallNames" ?g_ApiMsWinCoreComL1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800170F8: "__cdecl _imp_SymEnumSymbolsForAddr" __imp_SymEnumSymbolsForAddr
0x18000C6B0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18000DC38: "RtlLocateExtendedFeature" ??_C@_0BJ@FFEDDLPL@RtlLocateExtendedFeature?$AA@
0x18000E1E0: "FillConsoleOutputAttribute" ??_C@_0BL@KOFJOHJA@FillConsoleOutputAttribute?$AA@
0x18000D7E0: "DbgUiSetThreadDebugObject" ??_C@_0BK@JMIJBBFL@DbgUiSetThreadDebugObject?$AA@
0x180001F7C: "__cdecl _imp_load_EnumerateLoadedModulesExW" __imp_load_EnumerateLoadedModulesExW
0x18000D8B0: "NtQueryInformationThread" ??_C@_0BJ@HKKELGGC@NtQueryInformationThread?$AA@
0x180018200: "struct _CORE_LOCALIZATION_CALLS volatile g_CoreLocalizationCalls" ?g_CoreLocalizationCalls@@3U_CORE_LOCALIZATION_CALLS@@C
0x18000C6A0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000FA68: "__cdecl _rtc_tzz" __rtc_tzz
0x18000D638: "SymUnDName64" ??_C@_0N@CBCJFFHG@SymUnDName64?$AA@
0x18000C8C8: "__cdecl _guard_fids_table" __guard_fids_table
0x180018C80: "struct _DYNAMIC_CALL_NAME volatile * volatile g_SecurityLsaLookupCallNames" ?g_SecurityLsaLookupCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800070F0: CharPrev
0x1800171D8: "__cdecl _imp_SymGetSourceFileChecksumW" __imp_SymGetSourceFileChecksumW
0x18000C030: "__cdecl load_config_used" _load_config_used
0x18000EB48: "VariantInit" ??_C@_0M@BBHOMDMB@VariantInit?$AA@
0x18000E370: "WaitForDebugEvent" ??_C@_0BC@IMLKCIIP@WaitForDebugEvent?$AA@
0x18000DD00: "CreateToolhelp32Snapshot" ??_C@_0BJ@JEFKDHMD@CreateToolhelp32Snapshot?$AA@
0x18000DE50: "IsProcessorFeaturePresent" ??_C@_0BK@NHEOCAHP@IsProcessorFeaturePresent?$AA@
0x180001CD0: "int __cdecl FailSymCleanup(void * __ptr64)" ?FailSymCleanup@@YAHPEAX@Z
0x180001FB0: EnumerateLoadedModulesW64
0x180004E70: ?BindpAddImportDescriptor@@YAPEAU_IMPORT_DESCRIPTOR@@PEAU_BINDP_PARAMETERS@@PEAPEAU1@PEFAU_IMAGE_IMPORT_DESCRIPTOR@@PEBDPEAU_LOADED_IMAGE@@@Z
0x180002590: SymGetLinePrev64
0x18000279C: "__cdecl _imp_load_SymGetTypeFromNameW" __imp_load_SymGetTypeFromNameW
0x18000B20C: DloadProtectSection
0x18000EF38: "CreateServiceA" ??_C@_0P@EOCCPLHH@CreateServiceA?$AA@
0x18000F168: "CryptAcquireContextW" ??_C@_0BF@JHHBLAOM@CryptAcquireContextW?$AA@
0x18000D570: "SymRegisterCallback" ??_C@_0BE@IJBENPID@SymRegisterCallback?$AA@
0x180001CD0: "unsigned __int64 __cdecl FailSymLoadModule64(void * __ptr64,void * __ptr64,char * __ptr64,char * __ptr64,unsigned __int64,unsigned long)" ?FailSymLoadModule64@@YA_KPEAX0PEAD1_KK@Z
0x180001E90: "void __cdecl SymFreeDiaString(unsigned short * __ptr64)" ?SymFreeDiaString@@YAXPEAG@Z
0x1800189D8: "struct _WINTRUST_CALLS volatile g_WintrustCalls" ?g_WintrustCalls@@3U_WINTRUST_CALLS@@C
0x18000C898: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x180002A7C: "__cdecl _imp_load_SymSrvGetFileIndexesW" __imp_load_SymSrvGetFileIndexesW
0x180002670: SymGetSourceFileFromTokenW
0x1800170D0: "__cdecl _imp_SymCompareInlineTrace" __imp_SymCompareInlineTrace
0x1800026F0: SymGetSymFromName64
0x180001CD0: "int __cdecl FailSymGetSymFromName(void * __ptr64,char * __ptr64,struct _IMAGEHLP_SYMBOL * __ptr64)" ?FailSymGetSymFromName@@YAHPEAXPEADPEAU_IMAGEHLP_SYMBOL@@@Z
0x18000F478: "GetFileVersionInfoSizeExW" ??_C@_0BK@NCKKICFJ@GetFileVersionInfoSizeExW?$AA@
0x180012680: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000E948: "CLSIDFromString" ??_C@_0BA@OCNJAMDG@CLSIDFromString?$AA@
0x18000DF20: "Wow64DisableWow64FsRedirection" ??_C@_0BP@OODKCJPP@Wow64DisableWow64FsRedirection?$AA@
0x18000F090: "LookupAccountSidW" ??_C@_0BC@IDGHENMJ@LookupAccountSidW?$AA@
0x1800027FC: "__cdecl _imp_load_SymInitialize" __imp_load_SymInitialize
0x1800025DC: "__cdecl _imp_load_SymGetModuleInfoW64" __imp_load_SymGetModuleInfoW64
0x1800022BC: "__cdecl _imp_load_SymEnumSymbolsForAddr" __imp_load_SymEnumSymbolsForAddr
0x18000F100: "StartServiceA" ??_C@_0O@IKOPFGDH@StartServiceA?$AA@
0x18000E068: "ConvertThreadToFiber" ??_C@_0BF@JGFDIEAC@ConvertThreadToFiber?$AA@
0x180018260: "struct _EVENTING_PROVIDER_CALLS volatile g_EventingProviderCalls" ?g_EventingProviderCalls@@3U_EVENTING_PROVIDER_CALLS@@C
0x18000376C: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x180019550: "struct _DYNAMIC_CALLS_DESC volatile g_EventingProviderCallsDesc" ?g_EventingProviderCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001020: ImageGetCertificateDataEx
0x18000E2A8: "GetCommMask" ??_C@_0M@FNGIKMPI@GetCommMask?$AA@
0x1800027B0: SymGetTypeFromNameW
0x18000B2A0: DloadReleaseSectionWriteAccess
0x180003E20: ChkSum
0x18000C798: "__cdecl _imp__o_strcpy_s" __imp__o_strcpy_s
0x180007EB0: ImageRvaToVa
0x18000D548: "SymLoadModule64" ??_C@_0BA@EEINJJDN@SymLoadModule64?$AA@
0x1800172F8: "__cdecl _imp_UnDecorateSymbolName" __imp_UnDecorateSymbolName
0x18000F388: "api-ms-win-security-lsalookup-l2" ??_C@_0CJ@CMNNPAJI@api?9ms?9win?9security?9lsalookup?9l2@
0x18000EBA8: "SysStringLen" ??_C@_0N@OIJDDAAM@SysStringLen?$AA@
0x180017160: "__cdecl _imp_SymFromName" __imp_SymFromName
0x18000C840: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180001CD0: "unsigned long __cdecl FailSymGetModuleBase(void * __ptr64,unsigned long)" ?FailSymGetModuleBase@@YAKPEAXK@Z
0x18000C698: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000C610: "__cdecl _imp_FlushViewOfFile" __imp_FlushViewOfFile
0x18000E7D0: "api-ms-win-core-io-l1-1-1.dll" ??_C@_0BO@NMCFFILP@api?9ms?9win?9core?9io?9l1?91?91?4dll?$AA@
0x180012554: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x18000CF10: ".DLL" ??_C@_04HGBGCCEA@?4DLL?$AA@
0x180002010: FindExecutableImage
0x18000EC80: "SHCreateStreamOnFileW" ??_C@_0BG@DAGOPAOG@SHCreateStreamOnFileW?$AA@
0x180002790: SymGetTypeFromName
0x18000E090: "CreateNamedPipeA" ??_C@_0BB@GOPFAJNA@CreateNamedPipeA?$AA@
0x18001A650: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreIoCallNames" ?g_CoreIoCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180019240: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ShlWapiCallNames" ?g_ShlWapiCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000D890: "NtQueryInformationProcess" ??_C@_0BK@EGDDIFMK@NtQueryInformationProcess?$AA@
0x180003C10: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x180001CD0: "int __cdecl FailSymFromName(void * __ptr64,char * __ptr64,struct _SYMBOL_INFO * __ptr64)" ?FailSymFromName@@YAHPEAXPEADPEAU_SYMBOL_INFO@@@Z
0x180017010: "__cdecl _imp_?SymGetDiaSession@@YAHPEAX_KPEAPEAUIDiaSession@@@Z" __imp_?SymGetDiaSession@@YAHPEAX_KPEAPEAUIDiaSession@@@Z
0x180006B54: "int __cdecl IsSystemFile(char const * __ptr64)" ?IsSystemFile@@YAHPEBD@Z
0x180011068: dbghelp_NULL_THUNK_DATA_DLB
0x18000C790: "__cdecl _imp__o_strcat_s" __imp__o_strcat_s
0x180019350: "struct _DYNAMIC_CALLS_DESC volatile g_WintrustCallsDesc" ?g_WintrustCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180017140: "__cdecl _imp_SymFindFileInPathW" __imp_SymFindFileInPathW
0x180017168: "__cdecl _imp_SymFunctionTableAccess64" __imp_SymFunctionTableAccess64
0x18000E020: "CreateWaitableTimerW" ??_C@_0BF@MGPDPGAO@CreateWaitableTimerW?$AA@
0x18000EB00: "SysAllocStringLen" ??_C@_0BC@LFAKAPMA@SysAllocStringLen?$AA@
0x18000F1E0: "CryptReleaseContext" ??_C@_0BE@FBIJLPPP@CryptReleaseContext?$AA@
0x18000C740: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x18000C608: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x1800087F8: UnMapIt
0x180018278: "struct _VERIFIER_CALLS volatile g_VerifierCalls" ?g_VerifierCalls@@3U_VERIFIER_CALLS@@C
0x18000D6A8: ".dll" ??_C@_19BHIGINDB@?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000C5F8: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x18000C588: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1800171C0: "__cdecl _imp_SymGetModuleInfoW64" __imp_SymGetModuleInfoW64
0x18000C848: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000D160: "SymFromAddr" ??_C@_0M@GHNAPHBH@SymFromAddr?$AA@
0x18000D478: "SymGetSymFromAddr64" ??_C@_0BE@BJGOIHCO@SymGetSymFromAddr64?$AA@
0x180003BEA: "__cdecl o__register_onexit_function" _o__register_onexit_function
0x18000D438: "SymGetOptions" ??_C@_0O@KGBKFDLO@SymGetOptions?$AA@
0x18000E268: "CopyFileExW" ??_C@_0M@HGFIGBEM@CopyFileExW?$AA@
0x180019580: "struct _DYNAMIC_CALLS_DESC volatile g_CoreProcessEnvironmentCallsDesc" ?g_CoreProcessEnvironmentCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180014778: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x18000EC18: "PathFindNextComponentW" ??_C@_0BH@KBAGPBKG@PathFindNextComponentW?$AA@
0x180003970: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003DE7: memcmp
0x18000E8D8: "Secur32.dll" ??_C@_0M@BCNENKKF@Secur32?4dll?$AA@
0x180018230: "struct _SHLWAPI_IE_CALLS volatile g_ShlwapiIeCalls" ?g_ShlwapiIeCalls@@3U_SHLWAPI_IE_CALLS@@C
0x18000285C: "__cdecl _imp_load_SymMatchFileNameW" __imp_load_SymMatchFileNameW
0x180001E08: RtlpImageNtHeader
0x180003C10: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x180001CD0: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180018120: "struct _CORE_KERNEL32_PRIVATE_CALLS volatile g_CoreKernel32PrivateCalls" ?g_CoreKernel32PrivateCalls@@3U_CORE_KERNEL32_PRIVATE_CALLS@@C
0x180015E08: "unsigned char ImageLoadInit" ?ImageLoadInit@@3EA
0x18000C548: "__cdecl _imp_SetFileTime" __imp_SetFileTime
0x180017030: "__cdecl _imp_EnumerateLoadedModulesW64" __imp_EnumerateLoadedModulesW64
0x180002690: SymGetSourceFileTokenW
0x18000F300: "api-ms-win-core-registry-private" ??_C@_0CM@OKGLFADJ@api?9ms?9win?9core?9registry?9private@
0x18000E278: "MoveFileExW" ??_C@_0M@NIIDHDHA@MoveFileExW?$AA@
0x18000C7A0: "__cdecl _imp__o_strncpy_s" __imp__o_strncpy_s
0x1800053B4: "int __cdecl BindpLookupThunk32(struct _BINDP_PARAMETERS * __ptr64,struct _IMAGE_THUNK_DATA32 * __ptr64,struct _LOADED_IMAGE * __ptr64,struct _IMAGE_THUNK_DATA32 * __ptr64,struct _IMAGE_THUNK_DATA32 * __ptr64,struct _LOADED_IMAGE * __ptr64,struct _IMAGE_EXPORT_DIRECTORY * __ptr64,struct _IMPORT_DESCRIPTOR * __ptr64,char const * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long)" ?BindpLookupThunk32@@YAHPEAU_BINDP_PARAMETERS@@PEAU_IMAGE_THUNK_DATA32@@PEAU_LOADED_IMAGE@@112PEAU_IMAGE_EXPORT_DIRECTORY@@PEAU_IMPORT_DESCRIPTOR@@PEBDPEAPEAKPEAKK@Z
0x180002710: SymGetSymNext64
0x1800126D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180002910: SymRegisterCallback64
0x180012630: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18001A010: "struct _DYNAMIC_CALLS_DESC volatile g_CoreUrlCallsDesc" ?g_CoreUrlCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000D420: "SymGetModuleInfoW64" ??_C@_0BE@MJPAFBED@SymGetModuleInfoW64?$AA@
0x18000E3C0: "GetLocaleInfoA" ??_C@_0P@GIFDNDIK@GetLocaleInfoA?$AA@
0x18000F500: "__stdcall _xmm" __xmm@00000007000000090000000900000006
0x18000239C: "__cdecl _imp_load_SymEnumerateSymbolsW64" __imp_load_SymEnumerateSymbolsW64
0x18001A770: "struct _DYNAMIC_CALLS_DESC volatile g_CoreMiscCallsDesc" ?g_CoreMiscCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000E998: "CoMarshalInterface" ??_C@_0BD@BFCOEHP@CoMarshalInterface?$AA@
0x18000EA08: "CreateStreamOnHGlobal" ??_C@_0BG@DNLLFOBD@CreateStreamOnHGlobal?$AA@
0x18000DEB8: "Thread32Next" ??_C@_0N@LDGMJMKG@Thread32Next?$AA@
0x18000D5C8: "SymRegisterFunctionEntryCallback" ??_C@_0CD@HLBLMOJP@SymRegisterFunctionEntryCallback@
0x1800026D0: SymGetSymFromAddr64
0x18000EDF0: "CertGetCertificateContextPropert" ??_C@_0CC@LPOHJFGK@CertGetCertificateContextPropert@
0x180019830: "struct _DYNAMIC_CALLS_DESC volatile g_CoreVersionCallsDesc" ?g_CoreVersionCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000E440: "CopyFileW" ??_C@_09LILHBHJJ@CopyFileW?$AA@
0x18000D5F0: "SymSetContext" ??_C@_0O@HMGGMGDA@SymSetContext?$AA@
0x180003B72: "__cdecl initterm_e" _initterm_e
0x180003594: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x180002570: SymGetLineNext64
0x180019FD0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreFileL1CallNames" ?g_CoreFileL1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800194D0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreFileL2CallNames" ?g_CoreFileL2CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180019700: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ServiceManagementCallNames" ?g_ServiceManagementCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000C7B0: "__cdecl _imp_strrchr" __imp_strrchr
0x180014DD8: "struct SYM_EXTENDED_OPTIONS g_ExtendedOptions" ?g_ExtendedOptions@@3USYM_EXTENDED_OPTIONS@@A
0x18000E520: "GetPackageFullName" ??_C@_0BD@KHEEFJGG@GetPackageFullName?$AA@
0x18000E3D0: "GetUserGeoID" ??_C@_0N@HAAENANE@GetUserGeoID?$AA@
0x18000E288: "CancelIo" ??_C@_08KENEPFL@CancelIo?$AA@
0x180018EC0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_Secur32CallNames" ?g_Secur32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800171D0: "__cdecl _imp_SymGetSearchPath" __imp_SymGetSearchPath
0x18001A570: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CorePsapiCallNames" ?g_CorePsapiCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800033A8: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x18000C858: ntdll_NULL_THUNK_DATA
0x18000C7D0: "__cdecl _imp_memcpy" __imp_memcpy
0x18000C850: "__cdecl _imp_RtlImageNtHeaderEx" __imp_RtlImageNtHeaderEx
0x1800029FC: "__cdecl _imp_load_SymSetSearchPath" __imp_load_SymSetSearchPath
0x1800073D4: "__cdecl TlgDefineProvider_annotation__Tlgg_DbgToolsTraceLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_DbgToolsTraceLoggingProviderProv
0x1800172D0: "__cdecl _imp_SymSrvGetFileIndexString" __imp_SymSrvGetFileIndexString
0x18000D820: "NtCreateFile" ??_C@_0N@KPMLACHP@NtCreateFile?$AA@
0x18000D3C0: "SymGetModuleBase64" ??_C@_0BD@JCAKOMOK@SymGetModuleBase64?$AA@
0x18000B2F0: NewUnloadInfo
0x180019400: "struct _DYNAMIC_CALL_NAME volatile * volatile g_DownlevelShlwapiL2CallNames" ?g_DownlevelShlwapiL2CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18001A6D0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_DownlevelShlwapiL1CallNames" ?g_DownlevelShlwapiL1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000DB50: "NtOpenThreadToken" ??_C@_0BC@PBPJBNCP@NtOpenThreadToken?$AA@
0x18000275C: "__cdecl _imp_load_SymGetSymbolFileW" __imp_load_SymGetSymbolFileW
0x1800075B0: MapFileAndCheckSumA
0x1800187B0: "struct _CORE_PROCESSTHREADS_CALLS volatile g_CoreProcessThreadsCalls" ?g_CoreProcessThreadsCalls@@3U_CORE_PROCESSTHREADS_CALLS@@C
0x180017150: "__cdecl _imp_SymFromInlineContext" __imp_SymFromInlineContext
0x1800029BC: "__cdecl _imp_load_SymSetScopeFromIndex" __imp_load_SymSetScopeFromIndex
0x18000ED98: "CertFreeCertificateChain" ??_C@_0BJ@EPAPOMOE@CertFreeCertificateChain?$AA@
0x1800076B0: MapFileAndCheckSumW
0x180003C10: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180019150: "struct _DYNAMIC_CALLS_DESC volatile g_SspiCliCallsDesc" ?g_SspiCliCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180017068: "__cdecl _imp_GetSymLoadError" __imp_GetSymLoadError
0x18000D928: "NtResumeThread" ??_C@_0P@JDJEHDNH@NtResumeThread?$AA@
0x1800172D8: "__cdecl _imp_SymSrvGetFileIndexStringW" __imp_SymSrvGetFileIndexStringW
0x180018C28: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreKernel32PrivateCallNames" ?g_CoreKernel32PrivateCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000E2F0: "SetCommMask" ??_C@_0M@FCHGHKHL@SetCommMask?$AA@
0x1800024D0: SymGetExtendedOption
0x18000CF60: "advapi32." ??_C@_09DFFHIAEJ@advapi32?4?$AA@
0x1800125F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800028FC: "__cdecl _imp_load_SymRegisterCallback64" __imp_load_SymRegisterCallback64
0x18000C7C0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180014670: "__cdecl _security_cookie" __security_cookie
0x180009EA8: "public: int __cdecl EXCLUDE_LIST::Emit(unsigned char * __ptr64,unsigned long) __ptr64" ?Emit@EXCLUDE_LIST@@QEAAHPEAEK@Z
0x180017158: "__cdecl _imp_SymFromInlineContextW" __imp_SymFromInlineContextW
0x18000F498: "GetFileVersionInfoExW" ??_C@_0BG@GEGOAKFF@GetFileVersionInfoExW?$AA@
0x18000C5E0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000297C: "__cdecl _imp_load_SymSetOptions" __imp_load_SymSetOptions
0x18000D4C0: "SymGetSymNext" ??_C@_0O@HHPJDLCP@SymGetSymNext?$AA@
0x180019860: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreJobL2CallNames" ?g_CoreJobL2CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800021D0: StackWalkEx
0x18000C798: "__cdecl _imp_strcpy_s" __imp_strcpy_s
0x180001CD0: "int __cdecl FailSymEnumTypes(void * __ptr64,unsigned __int64,int (__cdecl*)(struct _SYMBOL_INFO * __ptr64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumTypes@@YAHPEAX_KP6AHPEAU_SYMBOL_INFO@@K0@Z0@Z
0x180007D68: "void * __ptr64 __cdecl ImageDirectoryEntryToDataRom(void * __ptr64,unsigned char,unsigned short,unsigned long * __ptr64,struct _IMAGE_SECTION_HEADER * __ptr64 * __ptr64,struct _IMAGE_FILE_HEADER * __ptr64,struct _IMAGE_ROM_OPTIONAL_HEADER * __ptr64)" ?ImageDirectoryEntryToDataRom@@YAPEAXPEAXEGPEAKPEAPEAU_IMAGE_SECTION_HEADER@@PEAU_IMAGE_FILE_HEADER@@PEAU_IMAGE_ROM_OPTIONAL_HEADER@@@Z
0x18000DA58: "RtlFreeUnicodeString" ??_C@_0BF@GENHDPCD@RtlFreeUnicodeString?$AA@
0x1800170A0: "__cdecl _imp_SetCheckUserInterruptShared" __imp_SetCheckUserInterruptShared
0x18000DDD0: "Process32First" ??_C@_0P@ILGHDLOE@Process32First?$AA@
0x1800020FC: "__cdecl _imp_load_RemoveInvalidModuleList" __imp_load_RemoveInvalidModuleList
0x18000245C: "__cdecl _imp_load_SymFromName" __imp_load_SymFromName
0x18000EB28: "VariantClear" ??_C@_0N@HKBLDJLE@VariantClear?$AA@
0x18000378C: "__cdecl _scrt_fastfail" __scrt_fastfail
0x1800195B0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_Ole32CallNames" ?g_Ole32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000D528: "SymInitialize" ??_C@_0O@MCMFENKA@SymInitialize?$AA@
0x18000CBF0: "__cdecl _sz_dbghelp_dll" __sz_dbghelp_dll
0x180001FD0: FindDebugInfoFile
0x18000EF80: "EnumServicesStatusExW" ??_C@_0BG@FNODJM@EnumServicesStatusExW?$AA@
0x180012568: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x18000C558: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180002A10: SymSetSearchPath
0x18000D6CC: "\" ??_C@_01KICIPPFI@?2?$AA@
0x18000CFA0: "EnumerateLoadedModules64" ??_C@_0BJ@KINIAAEA@EnumerateLoadedModules64?$AA@
0x18000DAE0: "RtlInitUnicodeString" ??_C@_0BF@EKFKPNAI@RtlInitUnicodeString?$AA@
0x180005AEC: "void * __ptr64 __cdecl BindpRvaToVa(struct _BINDP_PARAMETERS * __ptr64,unsigned long,struct _LOADED_IMAGE * __ptr64)" ?BindpRvaToVa@@YAPEAXPEAU_BINDP_PARAMETERS@@KPEAU_LOADED_IMAGE@@@Z
0x1800024BC: "__cdecl _imp_load_SymGetExtendedOption" __imp_load_SymGetExtendedOption
0x1800125CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800020BC: "__cdecl _imp_load_ImagehlpApiVersionEx" __imp_load_ImagehlpApiVersionEx
0x18000C590: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x1800024F0: SymGetLineFromAddr64
0x1800022D0: SymEnumSymbolsForAddr
0x180008790: UnMapAndLoad
0x18000C7D8: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x18000F358: "api-ms-win-security-cryptoapi-l1" ??_C@_0CJ@HPJIBNOF@api?9ms?9win?9security?9cryptoapi?9l1@
0x180001CD0: "int __cdecl FailSymGetLineFromAddr(void * __ptr64,unsigned long,unsigned long * __ptr64,struct _IMAGEHLP_LINE * __ptr64)" ?FailSymGetLineFromAddr@@YAHPEAXKPEAKPEAU_IMAGEHLP_LINE@@@Z
0x1800020DC: "__cdecl _imp_load_MakeSureDirectoryPathExists" __imp_load_MakeSureDirectoryPathExists
0x18000D688: "dbghelp.dll" ??_C@_0M@OOEJBPPK@dbghelp?4dll?$AA@
0x18000EA20: "CoAllowSetForegroundWindow" ??_C@_0BL@EBPAFNEB@CoAllowSetForegroundWindow?$AA@
0x180018128: "struct _CORE_IO_CALLS volatile g_CoreIoCalls" ?g_CoreIoCalls@@3U_CORE_IO_CALLS@@C
0x18000F1F8: "EventRegister" ??_C@_0O@BAMBGLIE@EventRegister?$AA@
0x180018CC0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_DownlevelKernel32L2CallNames" ?g_DownlevelKernel32L2CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000227C: "__cdecl _imp_load_SymEnumSymbolsEx" __imp_load_SymEnumSymbolsEx
0x180002ADC: "__cdecl _imp_load_UnDecorateSymbolName" __imp_load_UnDecorateSymbolName
0x180001CD0: "int __cdecl FailSymGetModuleInfo64(void * __ptr64,unsigned __int64,struct _IMAGEHLP_MODULE64 * __ptr64)" ?FailSymGetModuleInfo64@@YAHPEAX_KPEAU_IMAGEHLP_MODULE64@@@Z
0x180002370: SymEnumerateModules64
0x18000D408: "SymGetModuleInfoW" ??_C@_0BC@HPHJKPG@SymGetModuleInfoW?$AA@
0x18000C7A8: "__cdecl _imp__o___std_type_info_destroy_list" __imp__o___std_type_info_destroy_list
0x1800028D0: SymMatchStringW
0x180018ED0: "struct _DYNAMIC_CALL_NAME volatile * volatile g_OleAut32CallNames" ?g_OleAut32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180018C90: "struct _DYNAMIC_CALLS_DESC volatile g_CoreCommCallsDesc" ?g_CoreCommCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000D830: "NtDebugActiveProcess" ??_C@_0BF@LNDHJKNI@NtDebugActiveProcess?$AA@
0x180014680: "__cdecl _isa_available" __isa_available
0x1800028B0: SymMatchStringA
0x180009D5C: "public: void __cdecl EXCLUDE_LIST::Add(unsigned __int64,unsigned long,enum ADDRTYPE) __ptr64" ?Add@EXCLUDE_LIST@@QEAAX_KKW4ADDRTYPE@@@Z
0x1800191E0: "struct _DYNAMIC_CALLS_DESC volatile g_SecurityBaseCallsDesc" ?g_SecurityBaseCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180017248: "__cdecl _imp_SymInitialize" __imp_SymInitialize
0x18000E5A0: "CoUninitialize" ??_C@_0P@EGMOFMDE@CoUninitialize?$AA@
0x18000E6C0: "api-ms-win-core-processenvironme" ??_C@_0CO@KDHHPIGP@api?9ms?9win?9core?9processenvironme@
0x180019520: "struct _DYNAMIC_CALLS_DESC volatile g_Advapi32CallsDesc" ?g_Advapi32CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C4F8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000F4D0: "api-ms-win-core-version-l1-1-0.d" ??_C@_0CD@JLLDDGDN@api?9ms?9win?9core?9version?9l1?91?90?4d@
0x18000EBB8: "PathCreateFromUrlW" ??_C@_0BD@CIMILIGH@PathCreateFromUrlW?$AA@
0x18000277C: "__cdecl _imp_load_SymGetTypeFromName" __imp_load_SymGetTypeFromName
0x180002B34: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x18000B070: DloadAcquireSectionWriteAccess
0x180002510: SymGetLineFromInlineContext
0x180017148: "__cdecl _imp_SymFromAddr" __imp_SymFromAddr
0x18000C5D8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000C748: "__cdecl _imp__o__initialize_onexit_table" __imp__o__initialize_onexit_table
0x180017098: "__cdecl _imp_SearchTreeForFile" __imp_SearchTreeForFile
0x180014D64: "__cdecl _favor" __favor
0x180002730: SymGetSymPrev64
0x180002890: SymMatchString
0x18000366C: "__cdecl _security_init_cookie" __security_init_cookie
0x180001CD0: "int __cdecl FailSymFreeDiaString(unsigned short * __ptr64)" ?FailSymFreeDiaString@@YAHPEAG@Z
0x180015E38: RtlpMrdataSectionOldProtection
0x18000C720: "__cdecl _imp__cexit" __imp__cexit
0x18000F3E0: "WNetAddConnection2A" ??_C@_0BE@DCNKFFFA@WNetAddConnection2A?$AA@
0x180007E50: ImageRvaToSection
0x18000EF00: "wintrust.dll" ??_C@_0N@EKBBBLPM@wintrust?4dll?$AA@
0x18000DF90: "RegisterApplicationRestart" ??_C@_0BL@PGAJLCMF@RegisterApplicationRestart?$AA@
0x180001CD0: "int __cdecl FailSymEnumerateSymbolsW(void * __ptr64,unsigned long,int (__cdecl*)(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymEnumerateSymbolsW@@YAHPEAXKP6AHPEBGKK0@Z0@Z
0x18000C750: "__cdecl _imp__o__register_onexit_function" __imp__o__register_onexit_function
0x18000EB78: "SafeArrayDestroy" ??_C@_0BB@DFPCNDDL@SafeArrayDestroy?$AA@
0x18000261C: "__cdecl _imp_load_SymGetSearchPath" __imp_load_SymGetSearchPath
0x18000F040: "ReadEventLogA" ??_C@_0O@NKKAHEGP@ReadEventLogA?$AA@
0x180001804: MapCert
0x18000CFC0: "FindDebugInfoFile" ??_C@_0BC@LCGHANOD@FindDebugInfoFile?$AA@
0x180018E30: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreRegistryPrivateCallNames" ?g_CoreRegistryPrivateCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180007CA4: "void * __ptr64 __cdecl ImageDirectoryEntryToData32(void * __ptr64,unsigned char,unsigned short,unsigned long * __ptr64,struct _IMAGE_SECTION_HEADER * __ptr64 * __ptr64,struct _IMAGE_FILE_HEADER * __ptr64,struct _IMAGE_OPTIONAL_HEADER * __ptr64)" ?ImageDirectoryEntryToData32@@YAPEAXPEAXEGPEAKPEAPEAU_IMAGE_SECTION_HEADER@@PEAU_IMAGE_FILE_HEADER@@PEAU_IMAGE_OPTIONAL_HEADER@@@Z
0x18000203C: "__cdecl _imp_load_FindFileInPath" __imp_load_FindFileInPath
0x1800172A0: "__cdecl _imp_SymSetExtendedOption" __imp_SymSetExtendedOption
0x1800025BC: "__cdecl _imp_load_SymGetModuleInfo64" __imp_load_SymGetModuleInfo64
0x1800029F0: SymSetScopeFromInlineContext
0x18000E7A8: "api-ms-win-core-handle-l1-1-0.dl" ??_C@_0CC@LAIBKAIO@api?9ms?9win?9core?9handle?9l1?91?90?4dl@
0x18000DEC8: "GetTimeZoneInformation" ??_C@_0BH@MLMPCHGH@GetTimeZoneInformation?$AA@
0x180001FBC: "__cdecl _imp_load_FindDebugInfoFile" __imp_load_FindDebugInfoFile
0x18000DB90: "NtQuerySection" ??_C@_0P@GFGDHPCO@NtQuerySection?$AA@
0x18000EE18: "CertGetEnhancedKeyUsage" ??_C@_0BI@PFFJLCNF@CertGetEnhancedKeyUsage?$AA@
0x18000C760: "__cdecl _imp_memmove" __imp_memmove
0x18000251C: "__cdecl _imp_load_SymGetLineFromInlineContextW" __imp_load_SymGetLineFromInlineContextW
0x18000F110: "StartServiceW" ??_C@_0O@JGHHODOA@StartServiceW?$AA@
0x18000ED80: "CertFindChainInStore" ??_C@_0BF@JOPNPAKK@CertFindChainInStore?$AA@
0x1800021B0: StackWalk64
0x18000E688: "api-ms-win-core-windowserrorrepo" ??_C@_0DB@OKLENCA@api?9ms?9win?9core?9windowserrorrepo@
0x1800104B8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_dbghelp_dll" __DELAY_IMPORT_DESCRIPTOR_dbghelp_dll
0x1800170A8: "__cdecl _imp_SetSymLoadError" __imp_SetSymLoadError
0x18000E9D8: "CoReleaseMarshalData" ??_C@_0BF@MEKIJBIA@CoReleaseMarshalData?$AA@
0x180017018: "__cdecl _imp_EnumerateLoadedModules64" __imp_EnumerateLoadedModules64
0x18000C8C0: "__cdecl _xt_z" __xt_z
0x18000EA50: "RoInitialize" ??_C@_0N@PPOMPGGK@RoInitialize?$AA@
0x18000DA70: "RtlGetFunctionTableListHead" ??_C@_0BM@KFDLLAGC@RtlGetFunctionTableListHead?$AA@
0x1800024FC: "__cdecl _imp_load_SymGetLineFromInlineContext" __imp_load_SymGetLineFromInlineContext
0x1800025FC: "__cdecl _imp_load_SymGetOptions" __imp_load_SymGetOptions
0x180019680: "struct _DYNAMIC_CALL_NAME volatile * volatile g_DownlevelKernel32L1CallNames" ?g_DownlevelKernel32L1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180004994: "void __cdecl _TlgWriteActivityAutoStop<70368744177664,5>(struct _TlgProvider_t const * __ptr64,struct _GUID const * __ptr64)" ??$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z
0x18000E320: "SetupComm" ??_C@_09CJIAILFL@SetupComm?$AA@
0x18000C820: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000231C: "__cdecl _imp_load_SymEnumTypesByNameW" __imp_load_SymEnumTypesByNameW
0x180003264: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x18000F428: "VerifierEnumerateResource" ??_C@_0BK@HKCFHGKD@VerifierEnumerateResource?$AA@
0x18000DDA0: "Module32Next" ??_C@_0N@KIGOLBLC@Module32Next?$AA@
0x180002A9C: "__cdecl _imp_load_SymUnDName64" __imp_load_SymUnDName64
0x180018318: "struct _SECURITY_BASE_CALLS volatile g_SecurityBaseCalls" ?g_SecurityBaseCalls@@3U_SECURITY_BASE_CALLS@@C
0x1800182F8: "struct _EVENTLOG_LEGACY_CALLS volatile g_EventlogLegacyCalls" ?g_EventlogLegacyCalls@@3U_EVENTLOG_LEGACY_CALLS@@C
0x18001A820: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreToolHelpCallNames" ?g_CoreToolHelpCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000C538: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000A370: ImageEnumerateCertificates
0x180018238: "struct _CORE_CONSOLE_CALLS volatile g_CoreConsoleCalls" ?g_CoreConsoleCalls@@3U_CORE_CONSOLE_CALLS@@C
0x18000EFE0: "GetEventLogInformation" ??_C@_0BH@OPDOCNNK@GetEventLogInformation?$AA@
0x18001A040: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreProcessSecurityCallNames" ?g_CoreProcessSecurityCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000C750: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x180008990: ?LdrProcessRelocationBlockEx@@YAPEFAU_IMAGE_BASE_RELOCATION@@G_KKPEAG_J@Z
0x18000EC30: "PathIsRelativeW" ??_C@_0BA@LNFCGJPD@PathIsRelativeW?$AA@
0x18000E5D0: "api-ms-win-core-com-l1-1-1.dll" ??_C@_0BP@IJFPPCHL@api?9ms?9win?9core?9com?9l1?91?91?4dll?$AA@
0x180003308: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180002550: SymGetLineFromName64
0x180001CD0: "int __cdecl FailSymMatchFileName(char * __ptr64,char * __ptr64,char * __ptr64 * __ptr64,char * __ptr64 * __ptr64)" ?FailSymMatchFileName@@YAHPEAD0PEAPEAD1@Z
0x18000B168: DloadObtainSection
0x1800021FC: "__cdecl _imp_load_SymCleanup" __imp_load_SymCleanup
0x180001B84: "void __cdecl tlsMemFree(void)" ?tlsMemFree@@YAXXZ
0x180002FA0: "__cdecl _report_gsfailure" __report_gsfailure
0x180001F30: "int __cdecl SymGetDiaSession(void * __ptr64,unsigned __int64,struct IDiaSession * __ptr64 * __ptr64)" ?SymGetDiaSession@@YAHPEAX_KPEAPEAUIDiaSession@@@Z
0x180003BBA: "__cdecl crt_atexit" _crt_atexit
0x180002B24: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x18000D0A0: "SymCleanup" ??_C@_0L@GDMHENGB@SymCleanup?$AA@
0x18000D3A8: "SymGetModuleBase" ??_C@_0BB@KAOAIDAF@SymGetModuleBase?$AA@
0x18000E8A0: "api-ms-win-core-psapi-l1-1-0.dll" ??_C@_0CB@IFLMDHML@api?9ms?9win?9core?9psapi?9l1?91?90?4dll@
0x18000D200: "SymFreeDiaString" ??_C@_0BB@DFIGOLBM@SymFreeDiaString?$AA@
0x18000EB38: "VariantCopy" ??_C@_0M@EFCLFKLH@VariantCopy?$AA@
0x1800181E0: "struct _CORE_URL_CALLS volatile g_CoreUrlCalls" ?g_CoreUrlCalls@@3U_CORE_URL_CALLS@@C
0x1800035F4: "__cdecl onexit" _onexit
0x18001A450: "struct _DYNAMIC_CALLS_DESC volatile g_CoreJobL2CallsDesc" ?g_CoreJobL2CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000DAA8: "RtlGetUnloadEventTraceEx" ??_C@_0BJ@MPGODMAO@RtlGetUnloadEventTraceEx?$AA@
0x1800021DC: "__cdecl _imp_load_SymAddrIncludeInlineTrace" __imp_load_SymAddrIncludeInlineTrace
0x18000C640: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x1800023FC: "__cdecl _imp_load_SymFromAddr" __imp_load_SymFromAddr
0x180002AB0: SymUnDName64
0x18000281C: "__cdecl _imp_load_SymLoadModule64" __imp_load_SymLoadModule64
0x180019180: "struct _DYNAMIC_CALLS_DESC volatile g_Ole32CallsDesc" ?g_Ole32CallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180014D50: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180019450: "struct _DYNAMIC_CALL_NAME volatile * volatile g_CoreTimeZoneCallNames" ?g_CoreTimeZoneCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000E8C8: "GetUserNameExW" ??_C@_0P@NGNKGLOD@GetUserNameExW?$AA@
0x18000D328: "SymGetLineFromName" ??_C@_0BD@MIDDKHOP@SymGetLineFromName?$AA@
0x18000D380: "SymGetLinePrev" ??_C@_0P@JKBKFHCE@SymGetLinePrev?$AA@
0x180001CD0: "int __cdecl FailSymGetDiaSession(void * __ptr64,unsigned __int64,void * __ptr64 * __ptr64)" ?FailSymGetDiaSession@@YAHPEAX_KPEAPEAX@Z
0x18001AC30: "struct _DYNAMIC_CALL_NAME volatile * volatile g_VersionCallNames" ?g_VersionCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x18000D9A0: "RtlAnsiStringToUnicodeString" ??_C@_0BN@PPLEAEDO@RtlAnsiStringToUnicodeString?$AA@
0x18000F068: "ReportEventA" ??_C@_0N@PKNECLKP@ReportEventA?$AA@
0x18000D308: "SymGetLineFromInlineContextW" ??_C@_0BN@GOEMOPKC@SymGetLineFromInlineContextW?$AA@
0x18000DB18: "RtlUnicodeStringToAnsiString" ??_C@_0BN@IINAALHC@RtlUnicodeStringToAnsiString?$AA@
0x180008C80: "int __cdecl RelocateImage(struct _LOADED_IMAGE * __ptr64,unsigned __int64,unsigned __int64 * __ptr64,unsigned long)" ?RelocateImage@@YAHPEAU_LOADED_IMAGE@@_KPEA_KK@Z
0x180019100: "struct _DYNAMIC_CALL_NAME volatile * volatile g_UserEnvCallNames" ?g_UserEnvCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180002230: SymCompareInlineTrace
0x18000E910: "GetThreadDesktop" ??_C@_0BB@KHBHHLKH@GetThreadDesktop?$AA@
0x18000D870: "NtOpenProcess" ??_C@_0O@JGCNKEPA@NtOpenProcess?$AA@
0x1800024B0: SymFunctionTableAccess64AccessRoutines
0x180012608: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180001CD0: "int __cdecl FailStackWalk(unsigned long,void * __ptr64,void * __ptr64,struct _tagSTACKFRAME * __ptr64,void * __ptr64,int (__cdecl*)(void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64),void * __ptr64 (__cdecl*)(void * __ptr64,unsigned long),unsigned long (__cdecl*)(void * __ptr64,unsigned long),unsigned long (__cdecl*)(void * __ptr64,void * __ptr64,struct _tagADDRESS * __ptr64))" ?FailStackWalk@@YAHKPEAX0PEAU_tagSTACKFRAME@@0P6AH0K0KPEAK@ZP6APEAX0K@ZP6AK0K@ZP6AK00PEAU_tagADDRESS@@@Z@Z
0x1800079F4: "__int64 (__cdecl*__cdecl ImagehlpDelayLoadHook(unsigned int,struct DelayLoadInfo * __ptr64))(void)" ?ImagehlpDelayLoadHook@@YAP6A_JXZIPEAUDelayLoadInfo@@@Z
0x180012694: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localregistry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localregistry-l1-1-0
0x180018098: "struct _COREWINRT_CALLS volatile g_CoreWinRTCalls" ?g_CoreWinRTCalls@@3U_COREWINRT_CALLS@@C
0x180002110: RemoveInvalidModuleList
0x18000D988: "NtWaitForDebugEvent" ??_C@_0BE@FJNCDLOK@NtWaitForDebugEvent?$AA@
0x18000D938: "NtSetInformationDebugObject" ??_C@_0BM@JOMKIEBB@NtSetInformationDebugObject?$AA@
0x18000D368: "SymGetLineNext64" ??_C@_0BB@IEGAJLDG@SymGetLineNext64?$AA@
0x18000E0B8: "DosDateTimeToFileTime" ??_C@_0BG@OEMDOHFG@DosDateTimeToFileTime?$AA@
0x180001CD0: "int __cdecl FailSymRegisterFunctionEntryCallback(void * __ptr64,void * __ptr64 (__cdecl*)(void * __ptr64,unsigned long,void * __ptr64),void * __ptr64)" ?FailSymRegisterFunctionEntryCallback@@YAHPEAXP6APEAX0K0@Z0@Z
0x1800189E0: "struct _NTDLL_CALLS volatile g_NtDllCalls" ?g_NtDllCalls@@3U_NTDLL_CALLS@@C
0x18000C600: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180017280: "__cdecl _imp_SymQueryInlineTrace" __imp_SymQueryInlineTrace
0x180019930: "struct _DYNAMIC_CALLS_DESC volatile g_CorePsapiCallsDesc" ?g_CorePsapiCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x180001CD0: "unsigned long __cdecl FailSymCompareInlineTrace(void * __ptr64,unsigned __int64,unsigned long,unsigned __int64,unsigned __int64,unsigned __int64)" ?FailSymCompareInlineTrace@@YAKPEAX_KK111@Z
0x180019A30: "struct _DYNAMIC_CALL_NAME volatile * volatile g_Kernel32CallNames" ?g_Kernel32CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x1800029D0: SymSetScopeFromIndex
0x180019800: "struct _DYNAMIC_CALL_NAME volatile * volatile g_ExtKernel32PackageL1CallNames" ?g_ExtKernel32PackageL1CallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180002650: SymGetSourceFileChecksumW
0x18000C728: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180017240: "__cdecl _imp_SymGetTypeInfoEx" __imp_SymGetTypeInfoEx
0x180001CD0: "int __cdecl FailSymUnloadModule(void * __ptr64,unsigned long)" ?FailSymUnloadModule@@YAHPEAXK@Z
0x18000CF88: "EnumerateLoadedModules" ??_C@_0BH@MAMOCOJO@EnumerateLoadedModules?$AA@
0x1800172E8: "__cdecl _imp_SymSrvGetFileIndexesW" __imp_SymSrvGetFileIndexesW
0x18000C6F0: "__cdecl _imp_GetVersion" __imp_GetVersion
0x1800126BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180001CD0: "int __cdecl FailSymGetSymPrev64(void * __ptr64,struct _IMAGEHLP_SYMBOL64 * __ptr64)" ?FailSymGetSymPrev64@@YAHPEAXPEAU_IMAGEHLP_SYMBOL64@@@Z
0x1800190C0: "struct _DYNAMIC_CALLS_DESC volatile g_ServiceManagementCallsDesc" ?g_ServiceManagementCallsDesc@@3U_DYNAMIC_CALLS_DESC@@C
0x18000C7A8: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x1800170D8: "__cdecl _imp_SymEnumSym" __imp_SymEnumSym
0x180001CD0: "unsigned long __cdecl FailUnDecorateSymbolName(char const * __ptr64,char * __ptr64,unsigned long,unsigned long)" ?FailUnDecorateSymbolName@@YAKPEBDPEADKK@Z
0x18000E788: "api-ms-win-core-file-l2-1-1.dll" ??_C@_0CA@GJEHDJC@api?9ms?9win?9core?9file?9l2?91?91?4dll?$AA@
0x18000DE90: "SetThreadContext" ??_C@_0BB@KFKDMCFP@SetThreadContext?$AA@
0x18000C720: "__cdecl _imp__o__cexit" __imp__o__cexit
0x18000295C: "__cdecl _imp_load_SymSetExtendedOption" __imp_load_SymSetExtendedOption
0x18000219C: "__cdecl _imp_load_StackWalk64" __imp_load_StackWalk64
0x180007394: OptionalHeadersFromNtHeaders
0x180018000: "struct _CORE_VERSION_CALLS volatile g_CoreVersionCalls" ?g_CoreVersionCalls@@3U_CORE_VERSION_CALLS@@C
0x18000C658: "__cdecl _imp_TlsFree" __imp_TlsFree
0x1800026B0: SymGetSourceVarFromTokenW
0x180001CD0: "int __cdecl FailSymGetTypeFromName(void * __ptr64,unsigned __int64,char * __ptr64,struct _SYMBOL_INFO * __ptr64)" ?FailSymGetTypeFromName@@YAHPEAX_KPEADPEAU_SYMBOL_INFO@@@Z
0x18000253C: "__cdecl _imp_load_SymGetLineFromName64" __imp_load_SymGetLineFromName64
0x18000D5A0: "SymRegisterFunctionEntryCallback" ??_C@_0CB@CAMHAAMD@SymRegisterFunctionEntryCallback@
0x18000E310: "SetCommTimeouts" ??_C@_0BA@NHFMBHEE@SetCommTimeouts?$AA@
0x18000223C: "__cdecl _imp_load_SymEnumSym" __imp_load_SymEnumSym
0x18000D058: "SearchTreeForFile" ??_C@_0BC@FIINMMDE@SearchTreeForFile?$AA@
0x180001CD0: "unsigned long __cdecl FailSymGetOptions(void)" ?FailSymGetOptions@@YAKXZ
0x18000EF68: "EnumServicesStatusExA" ??_C@_0BG@BMMFFGEL@EnumServicesStatusExA?$AA@
0x1800180E0: "struct _SERVICE_MANAGEMENT_CALLS volatile g_ServiceManagementCalls" ?g_ServiceManagementCalls@@3U_SERVICE_MANAGEMENT_CALLS@@C
0x1800172E0: "__cdecl _imp_SymSrvGetFileIndexes" __imp_SymSrvGetFileIndexes
0x18000E0E8: "FindResourceW" ??_C@_0O@IBILDNOM@FindResourceW?$AA@
0x18000C6E0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180005748: "int __cdecl BindpLookupThunk64(struct _BINDP_PARAMETERS * __ptr64,struct _IMAGE_THUNK_DATA64 * __ptr64,struct _LOADED_IMAGE * __ptr64,struct _IMAGE_THUNK_DATA64 * __ptr64,struct _IMAGE_THUNK_DATA64 * __ptr64,struct _LOADED_IMAGE * __ptr64,struct _IMAGE_EXPORT_DIRECTORY * __ptr64,struct _IMPORT_DESCRIPTOR * __ptr64,char const * __ptr64,unsigned long * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long)" ?BindpLookupThunk64@@YAHPEAU_BINDP_PARAMETERS@@PEAU_IMAGE_THUNK_DATA64@@PEAU_LOADED_IMAGE@@112PEAU_IMAGE_EXPORT_DIRECTORY@@PEAU_IMPORT_DESCRIPTOR@@PEBDPEAPEAKPEAKK@Z
0x180019870: "struct _DYNAMIC_CALL_NAME volatile * volatile g_VerifierCallNames" ?g_VerifierCallNames@@3RCU_DYNAMIC_CALL_NAME@@C
0x180003BC6: "__cdecl execute_onexit_table" _execute_onexit_table
0x18000D150: "SymEnumTypes" ??_C@_0N@MGGHONKG@SymEnumTypes?$AA@
0x18000E4F0: "api-ms-win-downlevel-kernel32-l1" ??_C@_0CJ@MFOGIEMH@api?9ms?9win?9downlevel?9kernel32?9l1@
0x180002AF0: UnDecorateSymbolName
0x180003B7E: memset
0x1800126F8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180003094: "__cdecl _report_securityfailure" __report_securityfailure
0x18000B8A0: "unsigned long __cdecl RunOnceObtainMrdataCommit(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?RunOnceObtainMrdataCommit@@YAKPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x1800183D0: "struct _CORE_MISC_CALLS volatile g_CoreMiscCalls" ?g_CoreMiscCalls@@3U_CORE_MISC_CALLS@@C
0x180018280: "struct _CRYPT32_CALLS volatile g_Crypt32Calls" ?g_Crypt32Calls@@3U_CRYPT32_CALLS@@C
0x180001CD0: "int __cdecl FailMakeSureDirectoryPathExists(char const * __ptr64)" ?FailMakeSureDirectoryPathExists@@YAHPEBD@Z
0x180014780: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA

[JEB Decompiler by PNF Software]