About your issue : "the problem is that if open osqueryd.exe in IDA Pro - I cannot find this classes, as if they was not linked." You should be able to grep win_process_events in the code and find a class definition in additional_amalgamation.cpp If that's not there, your spec file was not processed properly. You might want to do a clean build and check