Generated by JEB on 2019/08/01

PE: C:\Windows\SoftwareDistribution\Download\42dbab2cf910a424dffa836a33879dc0\Metadata\Mitigation.dll Base=0x180000000 SHA-256=42769B5B121A3080DD7E61B5136A7E492CE52FF991E153E86B48F8E195BFB8EB
PDB: Mitigation.pdb GUID={9DDB484C-C91E-8671-AEB908F62E3789CC} Age=1

1307 located named symbols:
0x180034148: "dataType" ??_C@_1BC@KHKAIJLC@?$AAd?$AAa?$AAt?$AAa?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180030CC0: "EditionId" ??_C@_1BE@NJKHDEDH@?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?$AA@
0x18002FF58: WINTRUST_NULL_THUNK_DATA
0x1800327E8: "amd64" ??_C@_1M@OKAPLDDA@?$AAa?$AAm?$AAd?$AA6?$AA4?$AA?$AA@
0x180010360: "public: virtual void * __ptr64 __cdecl CDlpAutoLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CDlpAutoLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@UEAAPEAXI@Z
0x180012FE4: ParseUncPath
0x18001C5C0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetAttributeNS(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetAttributeNS@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEAPEBU7@@Z
0x1800263F0: RtlXmlDefaultNextCharacter_UCS4BE
0x18002FE48: "__cdecl _imp_LockResource" __imp_LockResource
0x18001CCF0: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffBase<class MicrodomWriterImplementation::CMicrodomWriter>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x180036398: "version" ??_C@_1BA@KPDNCIMM@?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180012ED8: BuildPathHr
0x180007B00: "private: long __cdecl CMitigationManager::CheckVersionInRange(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64) __ptr64" ?CheckVersionInRange@CMitigationManager@@AEAAJPEBG0PEAH@Z
0x180035ED0: "\\?\UNC" ??_C@_1BA@BFGBFLGI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?$AA@
0x18002DB68: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800363F0: "ENTITY" ??_C@_1O@JFDLIOHH@?$AAE?$AAN?$AAT?$AAI?$AAT?$AAY?$AA?$AA@
0x1800096D8: "private: long __cdecl CMitigationManager::LaunchProcess(unsigned short * __ptr64,void * __ptr64 * __ptr64) __ptr64" ?LaunchProcess@CMitigationManager@@AEAAJPEAGPEAPEAX@Z
0x18002FC78: "__cdecl _imp_GetSecurityDescriptorOwner" __imp_GetSecurityDescriptorOwner
0x180036458: "ENTITIES" ??_C@_1BC@FLACCMOE@?$AAE?$AAN?$AAT?$AAI?$AAT?$AAI?$AAE?$AAS?$AA?$AA@
0x180035B30: "DeletePath: Failed to obliterate" ??_C@_1IC@CKFPFOOG@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAb?$AAl?$AAi?$AAt?$AAe?$AAr?$AAa?$AAt?$AAe@
0x180017630: RtlDecodeUtf16LE
0x18002FCE0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18001AB90: "public: long __cdecl MicrodomImplementation::CMicrodom::GetNodeMapNamedItem(struct Windows::Microdom::Rtl::NamedNodeMap,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Node * __ptr64) __ptr64" ?GetNodeMapNamedItem@CMicrodom@MicrodomImplementation@@QEAAJUNamedNodeMap@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEAUNode@456@@Z
0x180013B1C: "long __cdecl Utf8ToUnicode(struct _LUTF8_STRING const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?Utf8ToUnicode@@YAJPEBU_LUTF8_STRING@@PEAPEAG@Z
0x180036038: "<!--" ??_C@_04FFDNBKGC@?$DM?$CB?9?9?$AA@
0x18002D990: "__cdecl FindPESection" _FindPESection
0x180017E90: RtlEncodeUcs4LE
0x180017D70: RtlEncodeUcs2LE
0x180031130: "FixupEditionId: Product EditionI" ??_C@_1GG@HEPDDNGA@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI@
0x18001B390: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::CharacterData * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUCharacterData@456@@Z
0x18002FDB8: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x180032058: "edition" ??_C@_1BA@GCILBBFN@?$AAe?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180018C30: "public: long __cdecl MicrodomImplementation::CMicrodom::FetchProperties(unsigned long,unsigned __int64,unsigned long const * __ptr64 const,struct Windows::Microdom::Rtl::NodePropertyResult * __ptr64 const) __ptr64" ?FetchProperties@CMicrodom@MicrodomImplementation@@QEAAJK_KQEBKQEAUNodePropertyResult@Rtl@Microdom@Windows@@@Z
0x18002FEE8: "__cdecl _imp_GetCurrentDirectoryW" __imp_GetCurrentDirectoryW
0x18000523C: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1800391A8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800138E8: VUnattendCtxGetStringByNode
0x180016BF0: "class BUCL::Rtl::CCallDisposition __cdecl BUCL::Implementation::Multiply<class BUCL::Rtl::CCallDisposition,unsigned __int64>(unsigned __int64,unsigned __int64,unsigned __int64 & __ptr64)" ??$Multiply@VCCallDisposition@Rtl@BUCL@@_K@Implementation@BUCL@@YA?AVCCallDisposition@Rtl@1@_K0AEA_K@Z
0x180032DA0: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18002F9F0: xss_PUBLIC
0x180030830: "Mitigation-CleanupSafeOsImages: " ??_C@_1HM@OAJDCFBN@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x1800360B0: "__cdecl GUID_109e0239_d7b3_42cd_9cec_5068904ab125" _GUID_109e0239_d7b3_42cd_9cec_5068904ab125
0x180036330: "http://www.w3.org/2000/09/xmldsi" ??_C@_0CD@HLKNKDGI@http?3?1?1www?4w3?4org?12000?109?1xmldsi@
0x180034BF0: "CMitigationManager::SetRegistryS" ??_C@_1FA@GCGKHKI@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAS@
0x1800253F4: "public: long __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CUlongToAttdefsTraits>::FindOrInsertIfNotPresent<unsigned long,class BUCL::CDeque<class CMicrodomBuilder::CXmlStreamObject,24> >(unsigned long const & __ptr64,class BUCL::CDeque<class CMicrodomBuilder::CXmlStreamObject,24> const & __ptr64,class BUCL::CDeque<class CMicrodomBuilder::CXmlStreamObject,24> * __ptr64 * __ptr64,bool * __ptr64) __ptr64" ??$FindOrInsertIfNotPresent@KV?$CDeque@VCXmlStreamObject@CMicrodomBuilder@@$0BI@@BUCL@@@?$CTable@VCUlongToAttdefsTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAAJAEBKAEBV?$CDeque@VCXmlStreamObject@CMicrodomBuilder@@$0BI@@2@PEAPEAV32@PEA_N@Z
0x18003B080: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800311A0: "FixupEditionId: Updating registr" ??_C@_1GK@GBNANPDC@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr@
0x18001A4F0: "private: long __cdecl MicrodomImplementation::CMicrodom::CompareElementByTagNameNS(struct _MICRODOM_DOM_NODE_ELEMENT const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool * __ptr64) __ptr64" ?CompareElementByTagNameNS@CMicrodom@MicrodomImplementation@@AEAAJPEBU_MICRODOM_DOM_NODE_ELEMENT@@PEBU_LUTF8_STRING@@1PEA_N@Z
0x1800035C4: "public: static long __cdecl CMitiLogT<class CEmptyType>::MitiLogString(enum WINDLP_LOGLEVEL,unsigned short const * __ptr64)" ?MitiLogString@?$CMitiLogT@VCEmptyType@@@@SAJW4WINDLP_LOGLEVEL@@PEBG@Z
0x18002FF18: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18002DF48: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x18001384C: UnattendCtxGetCountByNode
0x18002F0E0: "const Windows::Rtl::IRtlObject::`vftable'" ??_7IRtlObject@Rtl@Windows@@6B@
0x180006180: "public: virtual long __cdecl CMitigationManager::Execute(enum MitigationScenario) __ptr64" ?Execute@CMitigationManager@@UEAAJW4MitigationScenario@@@Z
0x1800347D0: "ProcessRegistryOperation: Copyin" ??_C@_1FC@LDCMMGDL@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAi?$AAn@
0x180022B38: "private: long __cdecl CMicrodomBuilder::StartElement(class CXmlCursor * __ptr64) __ptr64" ?StartElement@CMicrodomBuilder@@AEAAJPEAVCXmlCursor@@@Z
0x18002FF10: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x1800213AC: "public: __cdecl CXmlCursor::~CXmlCursor(void) __ptr64" ??1CXmlCursor@@QEAA@XZ
0x180032B18: "REG_NONE" ??_C@_1BC@NOPEOAKI@?$AAR?$AAE?$AAG?$AA_?$AAN?$AAO?$AAN?$AAE?$AA?$AA@
0x180034DF0: "private: static unsigned char const * const CStringConvertT<unsigned long>::g_pB64Decode" ?g_pB64Decode@?$CStringConvertT@K@@0QBEB
0x180030630: "CleanupSafeOsImages: Setup Root " ??_C@_1FG@BMNOCNKJ@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAR?$AAo?$AAo?$AAt?$AA?5@
0x180033C30: "ProcessMitigation: Processing fi" ??_C@_1HI@ODFLDBCD@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi@
0x180035760: "EnumeratePathEx: Unable to const" ??_C@_1IC@IGOLOPCB@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAs?$AAt@
0x18002D38C: "__cdecl CRT_INIT" _CRT_INIT
0x180015C90: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::ReportErrorOrigination(struct Windows::ErrorHandling::_RTL_CALL_SITE const * __ptr64) __ptr64" ?ReportErrorOrigination@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXPEBU_RTL_CALL_SITE@34@@Z
0x18002FDC0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180030E60: "Core" ??_C@_19CKCBDCMG@?$AAC?$AAo?$AAr?$AAe?$AA?$AA@
0x18002D866: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180032D70: "*.*" ??_C@_17ECHFBE@?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x18001C660: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetAttributeNode(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Attribute * __ptr64) __ptr64" ?GetAttributeNode@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@PEAUAttribute@456@@Z
0x18001FD7C: "long __cdecl MicrodomWriterImplementation::DiscoverAndDisplayNamespaces(struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64,struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64)" ?DiscoverAndDisplayNamespaces@MicrodomWriterImplementation@@YAJPEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@PEAUIRtlMicrodom@345@UElement@345@PEAUIRtlWOFOStream@35@@Z
0x18002AA40: RtlXmlNextLogicalThing
0x180029DA4: RtlXmlDetermineStreamEncoding
0x180034360: "targetValue" ??_C@_1BI@EJKCDIOM@?$AAt?$AAa?$AAr?$AAg?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18001CF18: "private: long __cdecl MicrodomImplementation::CDomLayoutCache::AdvanceCachedPointer(unsigned long) __ptr64" ?AdvanceCachedPointer@CDomLayoutCache@MicrodomImplementation@@AEAAJK@Z
0x18002FAF0: g_LUTF8_STRING__and_
0x180030E40: "Cloud" ??_C@_1M@OOGMPGFP@?$AAC?$AAl?$AAo?$AAu?$AAd?$AA?$AA@
0x180019FC8: "public: long __cdecl MicrodomImplementation::CMicrodom::GetNodeChildren(unsigned long,struct Windows::Vector<struct Windows::Microdom::Rtl::Node const> * __ptr64 * __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::Node const> * __ptr64 * __ptr64) __ptr64" ?GetNodeChildren@CMicrodom@MicrodomImplementation@@QEAAJKPEAPEAU?$Vector@$$CBUNode@Rtl@Microdom@Windows@@@Windows@@0@Z
0x180017CC0: RtlEncodeUtf16BE
0x180033710: "ProcessFileOperation: Target pat" ??_C@_1GO@OIHNNAC@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AA?5?$AAp?$AAa?$AAt@
0x180016764: RtlHashEncodedLBlob
0x18002E110: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180031D40: "Execute: [%s] Result=[0x%X], App" ??_C@_1FK@GANHCOKA@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$DN?$AA?$FL?$AA0?$AAx?$AA?$CF?$AAX?$AA?$FN?$AA?0?$AA?5?$AAA?$AAp?$AAp@
0x1800350B0: "FindFirstFileNameW" ??_C@_0BD@OGFDEFBL@FindFirstFileNameW?$AA@
0x180032FF0: "LogOperationTime: Elapsed time=[" ??_C@_1EO@MJAEMOLH@?$AAL?$AAo?$AAg?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?3?$AA?5?$AAE?$AAl?$AAa?$AAp?$AAs?$AAe?$AAd?$AA?5?$AAt?$AAi?$AAm?$AAe?$AA?$DN?$AA?$FL@
0x18002FA90: g_LUTF8_STRING__slash_
0x18002FE40: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18002FE60: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x1800362B8: ?PropSet@?5??BeginOpenElement@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@567@PEAUIRtlWOFOStream@57@@Z@4QBW4Properties@8567@B
0x18002C904: RtlpRemoveNamespaceAliasesAboveDepth
0x180013D10: "long __cdecl ParseAttrWildcard(unsigned short const * __ptr64,int * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ParseAttrWildcard@@YAJPEBGPEAHPEAPEAGPEAPEAPEAG3PEAK@Z
0x1800350C8: "FindNextFileNameW" ??_C@_0BC@MEIACHKG@FindNextFileNameW?$AA@
0x18001C4A0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::HasChildNodes(struct Windows::Microdom::Rtl::Node,bool * __ptr64) __ptr64" ?HasChildNodes@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEA_N@Z
0x18002F8D0: xss_DOCTYPE
0x18000EAB0: "public: __cdecl SP_HLOCAL<struct _SECURITY_DESCRIPTOR>::~SP_HLOCAL<struct _SECURITY_DESCRIPTOR>(void) __ptr64" ??1?$SP_HLOCAL@U_SECURITY_DESCRIPTOR@@@@QEAA@XZ
0x18002F7D8: xss_version
0x18002FA60: g_LUTF8_STRING_gt
0x180036D88: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x180034590: "ProcessRegistryOperation: Openin" ??_C@_1HA@OCCFEBBP@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAi?$AAn@
0x180013780: UnattendCtxOpenNodeByNode
0x180030410: "EtwEventEnabled" ??_C@_0BA@MIAFEPPA@EtwEventEnabled?$AA@
0x180017C30: RtlEncodeUtf16LE
0x1800362AC: "<?" ??_C@_02HFBBBACF@?$DM?$DP?$AA@
0x180031768: "__cdecl GUID_9b11b4eb_963a_4757_8ad6_e5697852f922" _GUID_9b11b4eb_963a_4757_8ad6_e5697852f922
0x180035EE0: "CreatePath: Unable to create [%s" ??_C@_1FM@OFCLJDAE@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AA?$FL?$AA?$CF?$AAs@
0x180017820: RtlDecodeUcs4LE
0x180016010: RtlWriteDataIntoSmartLBlobWritingContext
0x180032AE8: "REG_QWORD" ??_C@_1BE@EKCOEECL@?$AAR?$AAE?$AAG?$AA_?$AAQ?$AAW?$AAO?$AAR?$AAD?$AA?$AA@
0x180017790: RtlDecodeUcs2LE
0x18002479C: "long __cdecl MicrodomImplementation::CreateBinaryMicrodomFromXml(struct Windows::Microdom::Rtl::IParseErrorCallback * __ptr64,struct Windows::Microdom::Rtl::IEntityResolver * __ptr64,struct _LBLOB const * __ptr64,class Windows::Auto<struct _LBLOB> * __ptr64)" ?CreateBinaryMicrodomFromXml@MicrodomImplementation@@YAJPEAUIParseErrorCallback@Rtl@Microdom@Windows@@PEAUIEntityResolver@345@PEBU_LBLOB@@PEAV?$Auto@U_LBLOB@@@5@@Z
0x18002FFA8: "__cdecl _imp_wcstoul" __imp_wcstoul
0x180004A28: "public: __cdecl _TlgCVGetter::_TlgCVGetter(class TraceLoggingCorrelationVector * __ptr64) __ptr64" ??0_TlgCVGetter@@QEAA@PEAVTraceLoggingCorrelationVector@@@Z
0x18001B420: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Comment * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUComment@456@@Z
0x180019128: "public: long __cdecl MicrodomImplementation::CMicrodom::GetDocumentNodeSet(class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Node> > * __ptr64) __ptr64" ?GetDocumentNodeSet@CMicrodom@MicrodomImplementation@@QEAAJPEAV?$Auto@U?$Vector@UNode@Rtl@Microdom@Windows@@@Windows@@@Windows@@@Z
0x180010D78: WdsGetCopyRetryData
0x180030CA0: "FixupEditionId" ??_C@_1BO@DPAGPK@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?$AA@
0x18002FCE8: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180031763: "" ??_C@_00CNPNBAHC@?$AA@
0x180031B30: "LoadOperationsFromXml: Loading o" ??_C@_1GO@HPNLPPJK@?$AAL?$AAo?$AAa?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAF?$AAr?$AAo?$AAm?$AAX?$AAm?$AAl?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAo@
0x180036500: "UTF-16" ??_C@_1O@FJCADBKO@?$AAU?$AAT?$AAF?$AA?9?$AA1?$AA6?$AA?$AA@
0x1800184A8: "long __cdecl MicrodomImplementation::DecodeXmlCharacterToUcsChar(struct _LUTF8_STRING const & __ptr64,unsigned long * __ptr64)" ?DecodeXmlCharacterToUcsChar@MicrodomImplementation@@YAJAEBU_LUTF8_STRING@@PEAK@Z
0x18001E24C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::CVector<struct Windows::Microdom::Rtl::Node,class BUCL::Rtl::CCallDisposition>::Resize(unsigned __int64) __ptr64" ?Resize@?$CVector@UNode@Rtl@Microdom@Windows@@VCCallDisposition@2BUCL@@@BUCL@@QEAA?AVCCallDisposition@Rtl@2@_K@Z
0x18002528C: "public: long __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<struct _MICRODOM_XML_ATTDEF const * __ptr64>::CTableTraits>::FindOrInsertIfNotPresent<struct CMicrodomBuilder::FourStringIdPair,struct _MICRODOM_XML_ATTDEF const * __ptr64>(struct CMicrodomBuilder::FourStringIdPair const & __ptr64,struct _MICRODOM_XML_ATTDEF const * __ptr64 const & __ptr64,struct _MICRODOM_XML_ATTDEF const * __ptr64 * __ptr64 * __ptr64,bool * __ptr64) __ptr64" ??$FindOrInsertIfNotPresent@UFourStringIdPair@CMicrodomBuilder@@PEBU_MICRODOM_XML_ATTDEF@@@?$CTable@VCTableTraits@?$CFourStringIdTable@PEBU_MICRODOM_XML_ATTDEF@@@CMicrodomBuilder@@@HashTable@BUCL@@QEAAJAEBUFourStringIdPair@CMicrodomBuilder@@AEBQEBU_MICRODOM_XML_ATTDEF@@PEAPEAPEBU5@PEA_N@Z
0x180033BB0: "ProcessMitigation: Found [%d] to" ??_C@_1GA@JLPLJDC@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?5?$AAt?$AAo@
0x1800135F0: UnattendCtxCleanup
0x18000453C: "public: static long __cdecl CGlobalHelpersT<class CEmptyType>::GetStringCchLength<unsigned long>(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long)" ??$GetStringCchLength@K@?$CGlobalHelpersT@VCEmptyType@@@@SAJPEBGPEAKK@Z
0x180002B44: "public: static long __cdecl CMitiLogT<class CEmptyType>::MitiLogFormat(class IDlpDiagnostics * __ptr64,enum MITI_LOGLEVEL,unsigned short const * __ptr64,...)" ?MitiLogFormat@?$CMitiLogT@VCEmptyType@@@@SAJPEAVIDlpDiagnostics@@W4MITI_LOGLEVEL@@PEBGZZ
0x180030028: "__cdecl _imp_sprintf_s" __imp_sprintf_s
0x1800220E4: "public: long __cdecl CMicrodomXmlWalker::HandleEntityDecl(class CXmlCursor * __ptr64) __ptr64" ?HandleEntityDecl@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x18001C8C0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementsByTagNameNS(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagNameNS@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@6@@Z
0x1800329A8: "InstallationType" ??_C@_1CC@IGIOMCED@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18001E6A0: "private: static void __cdecl Windows::Rtl::CRtlOneShotTypeDescriptionInit<class MicrodomImplementation::CMicrodom>::Teardown(void * __ptr64)" ?Teardown@?$CRtlOneShotTypeDescriptionInit@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@CAXPEAX@Z
0x180035550: "EnumeratePathEx: Unable to get r" ??_C@_1KI@PEOONLMC@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAr@
0x180030F88: "EnterpriseS" ??_C@_1BI@GNMIFNHI@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAS?$AA?$AA@
0x1800256E0: "private: long __cdecl CMicrodomBuilder::WriteDomElementIndicies<unsigned long>(void * __ptr64,unsigned __int64 & __ptr64,class CMicrodomBuilder::CXmlStreamObject const * __ptr64) __ptr64" ??$WriteDomElementIndicies@K@CMicrodomBuilder@@AEAAJPEAXAEA_KPEBVCXmlStreamObject@0@@Z
0x18002F728: "struct _LUTF8_STRING const `public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteProcessingInstruction(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::ProcessingInstruction,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64'::`6'::PIStart" ?PIStart@?5??WriteProcessingInstruction@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UProcessingInstruction@567@PEAUIRtlWOFOStream@57@@Z@4U_LUTF8_STRING@@B
0x180032320: "desktopServicing" ??_C@_1CC@FLOMPLBD@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x18002FFC0: "__cdecl _imp_wcschr" __imp_wcschr
0x180030DA0: "FixupEditionId: GetProductInfo f" ??_C@_1EO@NMGBONDB@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?5?$AAf@
0x180035030: "WdsCopyFileEx: Failed to delete " ??_C@_1FO@IPFHJJJF@?$AAW?$AAd?$AAs?$AAC?$AAo?$AAp?$AAy?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5@
0x180014220: "long __cdecl IteratePath(unsigned short const * __ptr64,class Unattend & __ptr64,class UnattendNode,class IPathIterator * __ptr64)" ?IteratePath@@YAJPEBGAEAVUnattend@@VUnattendNode@@PEAVIPathIterator@@@Z
0x180008950: "private: long __cdecl CMitigationManager::GetHostFamily(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetHostFamily@CMitigationManager@@AEAAJPEAPEAG@Z
0x1800138C0: UnattendCtxGetStringByNode
0x18000F7A4: "public: static long __cdecl CMiscHelpersT<class CEmptyType>::CreateFolderPath(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?CreateFolderPath@?$CMiscHelpersT@VCEmptyType@@@@SAJPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x18002CD00: "protected: static long __cdecl CXmlCursor::XmlFree(void * __ptr64,void * __ptr64)" ?XmlFree@CXmlCursor@@KAJPEAX0@Z
0x180031708: "%04d-%02d-%02d %02d:%02d:%02d" ??_C@_1DM@JJODCKEO@?$AA?$CF?$AA0?$AA4?$AAd?$AA?9?$AA?$CF?$AA0?$AA2?$AAd?$AA?9?$AA?$CF?$AA0?$AA2?$AAd?$AA?5?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?$AA@
0x18001AD08: "public: long __cdecl MicrodomImplementation::CMicrodom::GetString(unsigned long,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetString@CMicrodom@MicrodomImplementation@@QEAAJKPEAPEBU_LUTF8_STRING@@@Z
0x18002DE64: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x180001008: "__cdecl TlgWrite" _TlgWrite
0x1800300C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800355F8: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1800176D0: RtlDecodeUtf16BE
0x18001CBB0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetMicrodomBinaryRepresentation(unsigned long,struct _LBLOB const * __ptr64 * __ptr64) __ptr64" ?GetMicrodomBinaryRepresentation@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJKPEAPEBU_LBLOB@@@Z
0x180032360: "desktopLangPack" ??_C@_1CA@DAEPGELC@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAL?$AAa?$AAn?$AAg?$AAP?$AAa?$AAc?$AAk?$AA?$AA@
0x180032B30: "GetRegistryTypeFromString: Regis" ??_C@_1HK@KGLJKKEA@?$AAG?$AAe?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAT?$AAy?$AAp?$AAe?$AAF?$AAr?$AAo?$AAm?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAi?$AAs@
0x18000359C: "public: __cdecl SH_HKEY::~SH_HKEY(void) __ptr64" ??1SH_HKEY@@QEAA@XZ
0x18002F010: "const CDlpAutoLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`vftable'" ??_7?$CDlpAutoLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@6B@
0x18000F450: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::ValueExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?ValueExists@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG1PEAH@Z
0x180010360: "public: virtual void * __ptr64 __cdecl CDlpAutoLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CDlpAutoLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@UEAAPEAXI@Z
0x18002FFB8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18002FEC8: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180030530: "CleanupSafeOsImages: Mounted ima" ??_C@_1GG@PKIAMGED@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAM?$AAo?$AAu?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAi?$AAm?$AAa@
0x1800103F0: "public: __cdecl CAutoRevertApplyPrivilegesT<class CEmptyType>::CPrivilegeState::CPrivilegeState(void) __ptr64" ??0CPrivilegeState@?$CAutoRevertApplyPrivilegesT@VCEmptyType@@@@QEAA@XZ
0x18001CCF0: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffBase<class MicrodomWriterImplementation::CMicrodomWriter>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800349B0: "CMitigationManager::SetFileSecur" ??_C@_1EK@JKDACCJH@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr@
0x180006B1C: "private: __cdecl CMitigationManager::CMitigationManager(void) __ptr64" ??0CMitigationManager@@AEAA@XZ
0x18001F5E0: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::BeginOpenElement(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?BeginOpenElement@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@456@PEAUIRtlWOFOStream@46@@Z
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAPEAXI@Z
0x180004CD8: "public: __cdecl CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault>::~CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault>(void) __ptr64" ??1?$CArray@VDH_SSTRING@@V1@VCAdaptorDefault@@VCPoliciesDefault@@@@QEAA@XZ
0x1800230EC: "private: long __cdecl CMicrodomBuilder::ConsumeAttdef(class CXmlCursor * __ptr64) __ptr64" ?ConsumeAttdef@CMicrodomBuilder@@AEAAJPEAVCXmlCursor@@@Z
0x180035C40: "CopyDirectoryFileCallback: The c" ??_C@_1HM@JPHNHEID@?$AAC?$AAo?$AAp?$AAy?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAF?$AAi?$AAl?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?3?$AA?5?$AAT?$AAh?$AAe?$AA?5?$AAc@
0x18000800C: "private: long __cdecl CMitigationManager::GetAttributeFromNode(struct _UNATTEND_NODE * __ptr64,unsigned short const * __ptr64,int,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetAttributeFromNode@CMitigationManager@@AEAAJPEAU_UNATTEND_NODE@@PEBGHPEAPEAG@Z
0x18002DED4: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x180010400: "public: __cdecl CAutoRevertApplyPrivilegesT<class CEmptyType>::CPrivilegeState::~CPrivilegeState(void) __ptr64" ??1CPrivilegeState@?$CAutoRevertApplyPrivilegesT@VCEmptyType@@@@QEAA@XZ
0x18001D370: "public: long __cdecl MicrodomImplementation::CDoctypeLayoutCache::FindObject(struct _LUTF8_STRING const * __ptr64,struct _MICRODOM_DOCTYPE_NODE_ENTITY const * __ptr64 * __ptr64) __ptr64" ?FindObject@CDoctypeLayoutCache@MicrodomImplementation@@QEAAJPEBU_LUTF8_STRING@@PEAPEBU_MICRODOM_DOCTYPE_NODE_ENTITY@@@Z
0x18002C368: RtlpExpandGrowingList
0x1800103C4: "public: __cdecl SH_FILENT::~SH_FILENT(void) __ptr64" ??1SH_FILENT@@QEAA@XZ
0x18002FCA8: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x1800307B0: "CleanupSafeOsImages: Mount image" ??_C@_1HK@DMGFMGGH@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAM?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAi?$AAm?$AAa?$AAg?$AAe@
0x180004E2C: "__cdecl TlgDefineProvider_annotation__Tlgg_hTelProviderPreRS2Prov" _TlgDefineProvider_annotation__Tlgg_hTelProviderPreRS2Prov
0x180014CB0: "public: virtual long __cdecl GetStringIter::ReachedEndOfPath(class Unattend & __ptr64,class UnattendNode) __ptr64" ?ReachedEndOfPath@GetStringIter@@UEAAJAEAVUnattend@@VUnattendNode@@@Z
0x18002D969: "__cdecl XcptFilter" _XcptFilter
0x18002FCB0: "__cdecl _imp_RegSetKeySecurity" __imp_RegSetKeySecurity
0x1800052DC: "long __cdecl STRAPI_CreateN(unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64)" ?STRAPI_CreateN@@YAJPEBG_KPEAPEAG@Z
0x1800300D0: "__cdecl _xc_a" __xc_a
0x180034300: "ProcessRegistryOperation: Deleti" ??_C@_1FM@ONAIEINJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi@
0x180001140: TraceLoggingRegister
0x180034C60: "SetRegistrySecurity: Root key [%" ??_C@_1GE@OMOBOPDD@?$AAS?$AAe?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAR?$AAo?$AAo?$AAt?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AA?$FL?$AA?$CF@
0x18002FE88: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x180016B64: RtlMatchEncodedLBlobAgainstPointerList
0x1800224B0: "public: long __cdecl CMicrodomXmlWalker::XmlError(class CXmlCursor * __ptr64) __ptr64" ?XmlError@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x18001A298: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementsByTagName(unsigned long,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagName@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_LUTF8_STRING@@0_NPEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@Windows@@@Z
0x1800352D0: "DeleteFileEx: Unable to delete [" ??_C@_1GA@BJHEKIBJ@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AA?$FL@
0x180031763: "char const `public: struct Windows::Microdom::Rtl::Element * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::Microdom::MicrodomVectorTraits<struct Windows::Microdom::Rtl::Element>,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$MicrodomVectorTraits@UElement@Rtl@Microdom@Windows@@@Microdom@Windows@@V?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@3@@Windows@@QEAAPEAUElement@Rtl@Microdom@3@_K@Z@4DB
0x18002156C: "private: long __cdecl CMicrodomBuilder::FindStringId(struct _LUTF8_STRING const & __ptr64,unsigned long * __ptr64) __ptr64" ?FindStringId@CMicrodomBuilder@@AEAAJAEBU_LUTF8_STRING@@PEAK@Z
0x180016BE0: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter(void) __ptr64" ?SetInvalidParameter@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180032810: "GetHostArchitecture: Architectur" ??_C@_1HA@DFEDHAO@?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAA?$AAr?$AAc?$AAh?$AAi?$AAt?$AAe?$AAc?$AAt?$AAu?$AAr?$AAe?$AA?3?$AA?5?$AAA?$AAr?$AAc?$AAh?$AAi?$AAt?$AAe?$AAc?$AAt?$AAu?$AAr@
0x18001B3C0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Attribute * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUAttribute@456@@Z
0x1800153CC: "public: long __cdecl Unattend::GetName(class UnattendNode const & __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetName@Unattend@@QEAAJAEBVUnattendNode@@PEAPEAG@Z
0x180034510: "ProcessRegistryOperation: Retrie" ??_C@_1HO@LPBJGCDB@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe@
0x18002FDA8: "__cdecl _imp_GetTimeZoneInformation" __imp_GetTimeZoneInformation
0x18002FF08: "__cdecl _imp_FindClose" __imp_FindClose
0x180033698: "copy" ??_C@_19DCHLHIDK@?$AAc?$AAo?$AAp?$AAy?$AA?$AA@
0x180031C60: "Execute: Found [%d] mitigations." ??_C@_1EC@LPDMBDID@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AAF?$AAo?$AAu?$AAn?$AAd?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?4@
0x18002F7F8: xss_standalone
0x180021250: "public: virtual void __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::Release(void) __ptr64" ?Release@?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAXXZ
0x180004F30: StringCchCopyW
0x18001F440: "public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteRawString(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Vector<struct _LUTF8_STRING const * __ptr64 const> const & __ptr64,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteRawString@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@QEBU_LUTF8_STRING@@@6@PEAUIRtlWOFOStream@46@@Z
0x180030E50: "CloudN" ??_C@_1O@BCDGNHNA@?$AAC?$AAl?$AAo?$AAu?$AAd?$AAN?$AA?$AA@
0x18000359C: "public: void __cdecl SH<struct HKEY__ * __ptr64,class SH_HKEY>::Reset(void) __ptr64" ?Reset@?$SH@PEAUHKEY__@@VSH_HKEY@@@@QEAAXXZ
0x1800336C0: "ProcessFileOperation: Target pat" ??_C@_1EO@JLEPDBKB@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AA?5?$AAp?$AAa?$AAt@
0x18001CA00: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::HasAttribute(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,bool * __ptr64) __ptr64" ?HasAttribute@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@PEA_N@Z
0x18000DDF0: "private: long __cdecl CMitigationManager::SetFileSecurityW(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetFileSecurityW@CMitigationManager@@AEAAJPEBG0@Z
0x18002DE25: "__cdecl lock" _lock
0x180033C20: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x18003B660: ?g_pfnRtlErrorReportFunction@?A0x98913741@@3P6AXPEBU_RTL_CALL_SITE@ErrorHandling@Windows@@AEBU_GUID@@K@ZEA
0x18002D0D8: "unsigned __int64 __cdecl MurmurHash3_x64_64(void const * __ptr64,unsigned int,unsigned __int64)" ?MurmurHash3_x64_64@@YA_KPEBXI_K@Z
0x180036564: g_RGCH__slash_
0x180035870: "EnumeratePathEx: Failed search p" ??_C@_1GI@PCELNKGM@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAs?$AAe?$AAa?$AAr?$AAc?$AAh?$AA?5?$AAp@
0x180033C10: "type" ??_C@_19FHBCDCCA@?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x180031BE0: "Execute: Scenario=[%d]" ??_C@_1CO@KLBHANAC@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$DN?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?$AA@
0x18001FBE0: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteProcessingInstruction(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::ProcessingInstruction,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteProcessingInstruction@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UProcessingInstruction@456@PEAUIRtlWOFOStream@46@@Z
0x1800303B4: "__cdecl _guard_iat_table" __guard_iat_table
0x1800304A8: "CleanupSafeOsImages" ??_C@_1CI@PGODKJDM@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180032530: "desktopImageDynamicUpdate" ??_C@_1DE@EBNEBBPJ@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAI?$AAm?$AAa?$AAg?$AAe?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1800181A0: "public: static void __cdecl Windows::AutoNewPtr<class CChildNode>::DeleteInstance(class CChildNode * __ptr64)" ?DeleteInstance@?$AutoNewPtr@VCChildNode@@@Windows@@SAXPEAVCChildNode@@@Z
0x180005114: StrSubstring
0x18002E0E2: memcpy
0x180012F34: FormFullPathName
0x180003D20: "public: static long __cdecl CDlpHelpersT<class CEmptyType>::FormatSystemTime(unsigned short * __ptr64 * __ptr64)" ?FormatSystemTime@?$CDlpHelpersT@VCEmptyType@@@@SAJPEAPEAG@Z
0x180036544: g_RGCH_gt
0x18002FEA0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800162C0: RtlTranscodeLBlobs
0x180004D20: "public: __cdecl SH_SSTRING::~SH_SSTRING(void) __ptr64" ??1SH_SSTRING@@QEAA@XZ
0x18001F2F8: "public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteEscapedString(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Vector<struct _LUTF8_STRING const * __ptr64 const> const & __ptr64,struct Windows::Rtl::IRtlWOFOStream * __ptr64,bool) __ptr64" ?WriteEscapedString@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@QEBU_LUTF8_STRING@@@6@PEAUIRtlWOFOStream@46@_N@Z
0x18002E044: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18002FD28: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180030928: "yes" ??_C@_17IHBDLLG@?$AAy?$AAe?$AAs?$AA?$AA@
0x180021604: "private: long __cdecl CMicrodomBuilder::AddString(struct _LUTF8_STRING const & __ptr64,unsigned long * __ptr64) __ptr64" ?AddString@CMicrodomBuilder@@AEAAJAEBU_LUTF8_STRING@@PEAK@Z
0x18002F0F0: "const Windows::Rtl::CRtlTearoffBase<class MicrodomWriterImplementation::CMicrodomWriter>::`vftable'" ??_7?$CRtlTearoffBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@6B@
0x180034A00: "SetFileSecurity: Setting file se" ??_C@_1HI@LPHHDFKC@?$AAS?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAs?$AAe@
0x180030038: "__cdecl _imp_memset" __imp_memset
0x180027698: RtlRawXmlTokenizer_GatherUntil
0x180031EB8: "maxVersion" ??_C@_1BG@NINBDINP@?$AAm?$AAa?$AAx?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800170D0: RtlReallocateLUtf8String
0x18002CB64: RtlNsGetNamespaceForAlias
0x18002DB4F: "__cdecl initterm" _initterm
0x18000E544: "private: long __cdecl CMitigationManager::SetRegistrySecurity(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetRegistrySecurity@CMitigationManager@@AEAAJPEBG00@Z
0x18003656C: g_RGCH__and_
0x180036498: "REQUIRED" ??_C@_1BC@HNKKNHDG@?$AAR?$AAE?$AAQ?$AAU?$AAI?$AAR?$AAE?$AAD?$AA?$AA@
0x18003B728: "class Windows::Rtl::CRtlTrackTypeDescription * __ptr64 __ptr64 Windows::Rtl::g_pTrackTypeDescription" ?g_pTrackTypeDescription@Rtl@Windows@@3PEAVCRtlTrackTypeDescription@12@EA
0x180033040: "CMitigationManager::ProcessComma" ??_C@_1FI@HODGFCOH@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAo?$AAm?$AAm?$AAa@
0x18003B778: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18002C7E8: RtlNsInsertDefaultNamespace
0x180032DB0: "CMitigationManager::GetSystemVer" ??_C@_1FG@NBPMGEEE@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAV?$AAe?$AAr@
0x18002FD48: "__cdecl _imp_Sleep" __imp_Sleep
0x180016C90: "public: long __cdecl Windows::ErrorHandling::Rtl::CBaseNtStatusCarryingFrame<class Windows::ErrorHandling::Rtl::CVoidRaiseFrame>::GetNtStatus(void)const __ptr64" ?GetNtStatus@?$CBaseNtStatusCarryingFrame@VCVoidRaiseFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEBAJXZ
0x180032C88: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x180030108: "__cdecl _xi_z" __xi_z
0x18002FDA0: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x18002FD70: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180022EAC: "private: long __cdecl CMicrodomBuilder::InsertDefaultAttributes(void) __ptr64" ?InsertDefaultAttributes@CMicrodomBuilder@@AEAAJXZ
0x18001D110: "public: long __cdecl MicrodomImplementation::CDomLayoutCache::GetNodeChildren(unsigned long,class BUCL::CVector<struct Windows::Microdom::Rtl::Node,class BUCL::Rtl::CCallDisposition> * __ptr64,unsigned __int64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?GetNodeChildren@CDomLayoutCache@MicrodomImplementation@@QEAAJKPEAV?$CVector@UNode@Rtl@Microdom@Windows@@VCCallDisposition@2BUCL@@@BUCL@@PEA_K1@Z
0x18001EE60: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom>::GetRtlObjectBase(void) __ptr64" ?GetRtlObjectBase@?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@UEAAPEAXXZ
0x180030EE8: "EducationN" ??_C@_1BG@NBHBEFNL@?$AAE?$AAd?$AAu?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAN?$AA?$AA@
0x18002DB5B: "__cdecl _C_specific_handler" __C_specific_handler
0x180034680: "ProcessRegistryOperation: target" ??_C@_1FE@EAFADIPB@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAt?$AAa?$AAr?$AAg?$AAe?$AAt@
0x18001BAB0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::CTempOutputStream::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@CTempOutputStream@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@Windows@@@Z
0x18001E010: "public: virtual unsigned long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::AddRefTearoff(void) __ptr64" ?AddRefTearoff@?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAKXZ
0x18001BB50: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::CTempOutputStream::Write(unsigned __int64,void const * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?Write@CTempOutputStream@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJ_KPEBXPEA_K@Z
0x180031690: "%s, MITILOG: [0x%X] [%s] %s " ??_C@_1DM@HMMEIOAK@?$AA?$CF?$AAs?$AA?0?$AA?5?$AAM?$AAI?$AAT?$AAI?$AAL?$AAO?$AAG?$AA?3?$AA?5?$AA?$FL?$AA0?$AAx?$AA?$CF?$AAX?$AA?$FN?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AN?$AA?$AA@
0x180031763: "char const `public: struct CMicrodomBuilder::StringTablePair * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::VectorTraits<struct CMicrodomBuilder::StringTablePair>,class Windows::Auto<struct Windows::Vector<struct CMicrodomBuilder::StringTablePair> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$VectorTraits@UStringTablePair@CMicrodomBuilder@@@Windows@@V?$Auto@U?$Vector@UStringTablePair@CMicrodomBuilder@@@Windows@@@2@@Windows@@QEAAPEAUStringTablePair@CMicrodomBuilder@@_K@Z@4DB
0x18003B628: "unsigned long (__cdecl* __ptr64 `public: static int __cdecl SErrorConverterT<class CEmptyType>::C_NtStatus2HR(long,long * __ptr64)'::`2'::pfnRtlNtStatusToDosError)(long)" ?pfnRtlNtStatusToDosError@?1??C_NtStatus2HR@?$SErrorConverterT@VCEmptyType@@@@SAHJPEAJ@Z@4P6AKJ@ZEA
0x1800312F0: "Mitigation-FixupEditionId: Resul" ??_C@_1GM@OOLFGJLD@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAR?$AAe?$AAs?$AAu?$AAl@
0x180033500: "ProcessFileOperation: action=[%s" ??_C@_1EE@GCLEOGAK@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$DN?$AA?$FL?$AA?$CF?$AAs@
0x180007E70: "private: long __cdecl CMitigationManager::ExecuteProcess(unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?ExecuteProcess@CMitigationManager@@AEAAJPEAGPEAK@Z
0x180035260: "DeleteFileEx: Trying to set back" ??_C@_1GG@IIHDJFOG@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAT?$AAr?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAt?$AA?5?$AAb?$AAa?$AAc?$AAk@
0x180030FC0: "EnterpriseSN" ??_C@_1BK@IJPHJMHB@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAS?$AAN?$AA?$AA@
0x1800325E0: "CMitigationManager::CheckVersion" ??_C@_1FA@IIHLAHCB@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAC?$AAh?$AAe?$AAc?$AAk?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn@
0x180030060: "__cdecl _imp_NtYieldExecution" __imp_NtYieldExecution
0x18002FF80: "__cdecl _imp__onexit" __imp__onexit
0x180015250: "private: long __cdecl Unattend::GetNodeProperty(class UnattendNode const & __ptr64,enum Windows::Microdom::Rtl::Node::Properties,struct Windows::Microdom::Rtl::NodePropertyResult & __ptr64) __ptr64" ?GetNodeProperty@Unattend@@AEAAJAEBVUnattendNode@@W4Properties@Node@Rtl@Microdom@Windows@@AEAUNodePropertyResult@567@@Z
0x180032068: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x180019B34: "public: long __cdecl MicrodomImplementation::CMicrodom::GetSibling(unsigned long,struct _MICRODOM_DOM_NODE_HEADER const * __ptr64,int,unsigned long * __ptr64) __ptr64" ?GetSibling@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_MICRODOM_DOM_NODE_HEADER@@HPEAK@Z
0x18002E0EE: memmove
0x180036074: "#text" ??_C@_05NOBOONOA@?$CDtext?$AA@
0x18002FED0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18001C160: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementById(struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Element * __ptr64) __ptr64" ?GetElementById@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJPEBU_LUTF8_STRING@@PEAUElement@Rtl@Microdom@Windows@@@Z
0x180035FC8: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x180031038: "ProfessionalWorkstationN" ??_C@_1DC@MFFFLHBL@?$AAP?$AAr?$AAo?$AAf?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AAW?$AAo?$AAr?$AAk?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AAN?$AA?$AA@
0x1800363A8: "DOCTYPE" ??_C@_1BA@ODAJEGPH@?$AAD?$AAO?$AAC?$AAT?$AAY?$AAP?$AAE?$AA?$AA@
0x18002C544: RtlDestroyGrowingList
0x180021CF0: "public: long __cdecl CMicrodomXmlWalker::HandleComment(class CXmlCursor * __ptr64) __ptr64" ?HandleComment@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x180018150: RtlDestroyMicrodomUpdateContext
0x180029BC8: RtlXmlAdvanceTokenization
0x180018320: "protected: __cdecl Windows::AutoPointerBase<class CElementModification,class Windows::AutoNewPtr<class CElementModification> >::~AutoPointerBase<class CElementModification,class Windows::AutoNewPtr<class CElementModification> >(void) __ptr64" ??1?$AutoPointerBase@VCElementModification@@V?$AutoNewPtr@VCElementModification@@@Windows@@@Windows@@IEAA@XZ
0x18002FF40: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x18000FF98: "public: static long __cdecl CStringConvertT<unsigned long>::Base64Decode(unsigned short * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?Base64Decode@?$CStringConvertT@K@@SAJPEAGPEAPEAEPEAK@Z
0x18002FE28: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x1800250F4: "public: long __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<unsigned short>::CTableTraits>::FindOrInsertIfNotPresent<struct CMicrodomBuilder::FourStringIdPair,unsigned short>(struct CMicrodomBuilder::FourStringIdPair const & __ptr64,unsigned short const & __ptr64,unsigned short * __ptr64 * __ptr64,bool * __ptr64) __ptr64" ??$FindOrInsertIfNotPresent@UFourStringIdPair@CMicrodomBuilder@@G@?$CTable@VCTableTraits@?$CFourStringIdTable@G@CMicrodomBuilder@@@HashTable@BUCL@@QEAAJAEBUFourStringIdPair@CMicrodomBuilder@@AEBGPEAPEAGPEA_N@Z
0x18001EE6C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class MicrodomImplementation::CEntityTableTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCEntityTableTraits@MicrodomImplementation@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x18002FD20: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18002DFE0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800054F0: "public: virtual long __cdecl CMitigationManager::Initialize(unsigned short const * __ptr64,class IDlpDiagnostics * __ptr64) __ptr64" ?Initialize@CMitigationManager@@UEAAJPEBGPEAVIDlpDiagnostics@@@Z
0x18002F8A0: xss_ATTLIST
0x18001931C: "long __cdecl MicrodomImplementation::InsertIntoBuffer(unsigned long,struct _LUTF8_STRING * __ptr64)" ?InsertIntoBuffer@MicrodomImplementation@@YAJKPEAU_LUTF8_STRING@@@Z
0x1800338C8: "move" ??_C@_19OACEEDLD@?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180026C9C: RtlRawXmlTokenizer_GatherNTokens
0x1800259B4: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<struct _MICRODOM_XML_ATTDEF const * __ptr64>::CTableTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCTableTraits@?$CFourStringIdTable@PEBU_MICRODOM_XML_ATTDEF@@@CMicrodomBuilder@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x1800099B4: "private: long __cdecl CMitigationManager::ProcessCommandOperation(struct _UNATTEND_NODE * __ptr64) __ptr64" ?ProcessCommandOperation@CMitigationManager@@AEAAJPEAU_UNATTEND_NODE@@@Z
0x180034170: "ProcessRegistryOperation: Settin" ??_C@_1JE@CEABJHAA@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn@
0x180032960: "CMitigationManager::GetHostFamil" ??_C@_1EE@OCAKGOHI@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAF?$AAa?$AAm?$AAi?$AAl@
0x18002FD10: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180031520: "Mitigation-FixupEditionId: Produ" ??_C@_1GI@HKEOKBEB@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu@
0x1800364D0: "UTF-8" ??_C@_1M@PBFCDPHC@?$AAU?$AAT?$AAF?$AA?9?$AA8?$AA?$AA@
0x180032800: "arm64" ??_C@_1M@CDOFHCHO@?$AAa?$AAr?$AAm?$AA6?$AA4?$AA?$AA@
0x18002D0CC: RtlXmlReportErrorFunction
0x180036160: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Comment,struct Windows::Vector<enum Windows::Microdom::Rtl::Comment::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUComment@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Comment@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x1800361C0: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Element,struct Windows::Vector<enum Windows::Microdom::Rtl::Element::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Element@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x180036420: "SYSTEM" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180035450: "WdsRemoveDirectory: Unable to re" ??_C@_1IA@IPEOFNN@?$AAW?$AAd?$AAs?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe@
0x180030090: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180017820: RtlDecodeUtf32LE
0x180031440: "Mitigation-FixupEditionId: RegEd" ??_C@_1GI@JBIKOGEC@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAE?$AAd@
0x1800105BC: "public: static long __cdecl CStringConvertT<unsigned long>::Base64Decode(unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64)" ?Base64Decode@?$CStringConvertT@K@@SAJPEBGKPEAEPEAK@Z
0x18001EC80: "public: virtual long __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x180010360: "public: virtual void * __ptr64 __cdecl CDlpAutoDelayLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CDlpAutoDelayLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@UEAAPEAXI@Z
0x180003C34: "public: long __cdecl CStringBufferImplT<unsigned short,class CStringBufferPolicyDefaultT<unsigned short>,class CStringHelperDefaultT<class CStringBufferPolicyDefaultT<unsigned short> > >::Append(unsigned short const * __ptr64) __ptr64" ?Append@?$CStringBufferImplT@GV?$CStringBufferPolicyDefaultT@G@@V?$CStringHelperDefaultT@V?$CStringBufferPolicyDefaultT@G@@@@@@QEAAJPEBG@Z
0x180031660: "WARNING" ??_C@_1BA@KPCCLDOC@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?$AA@
0x18002FD08: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180021B90: "private: class CMicrodomBuilder::CXmlStreamObject * __ptr64 __cdecl CMicrodomBuilder::AllocateStreamObject(void) __ptr64" ?AllocateStreamObject@CMicrodomBuilder@@AEAAPEAVCXmlStreamObject@1@XZ
0x18002D975: "__cdecl amsg_exit" _amsg_exit
0x180032D10: "CMitigationManager::GetSystemVer" ??_C@_1FO@KFDCJAAM@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAV?$AAe?$AAr@
0x18003B630: "private: static long CBreakOnFailureT<class CEmptyType>::g_hResultToBreakOn" ?g_hResultToBreakOn@?$CBreakOnFailureT@VCEmptyType@@@@0JA
0x18001B580: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Node,struct Windows::Vector<enum Windows::Microdom::Rtl::Node::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Node@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x18003B638: "int g_bIsHostRS2Plus" ?g_bIsHostRS2Plus@@3HA
0x180031360: "Mitigation-FixupEditionId: Scena" ??_C@_1GI@OGKFFFPM@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa@
0x18001E010: "public: virtual unsigned long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::AddRefTearoff(void) __ptr64" ?AddRefTearoff@?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@UEAAKXZ
0x180019974: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementAttributes(unsigned long,struct _MICRODOM_DOM_NODE_HEADER const * __ptr64,unsigned long * __ptr64) __ptr64" ?GetElementAttributes@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_MICRODOM_DOM_NODE_HEADER@@PEAK@Z
0x1800031BC: "public: static long __cdecl CMiscHelpersT<class CEmptyType>::CombinePath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CombinePath@?$CMiscHelpersT@VCEmptyType@@@@SAJPEBG00PEAPEAG@Z
0x1800236C0: "private: long __cdecl CMicrodomBuilder::WriteXmlDom(struct _LBLOB * __ptr64) __ptr64" ?WriteXmlDom@CMicrodomBuilder@@AEAAJPEAU_LBLOB@@@Z
0x1800364C0: "FIXED" ??_C@_1M@PEPLLLCM@?$AAF?$AAI?$AAX?$AAE?$AAD?$AA?$AA@
0x18001EE60: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter>::GetRtlObjectBase(void) __ptr64" ?GetRtlObjectBase@?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAPEAXXZ
0x1800330B8: "true" ??_C@_19FKLFLPMF@?$AAt?$AAr?$AAu?$AAe?$AA?$AA@
0x180004D20: "public: void __cdecl SH<unsigned short * __ptr64,class SH_SSTRING>::Reset(void) __ptr64" ?Reset@?$SH@PEAGVSH_SSTRING@@@@QEAAXXZ
0x180030940: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@EHKKIDNN@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x18000E51C: "private: void __cdecl CMitigationManager::SetOperationEndTime(void) __ptr64" ?SetOperationEndTime@CMitigationManager@@AEAAXXZ
0x1800339E8: "FileTime" ??_C@_1BC@BJDPPMAF@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180016BE0: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter_NullPointer(void) __ptr64" ?SetInvalidParameter_NullPointer@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180033960: "sddl" ??_C@_19LHDPACKE@?$AAs?$AAd?$AAd?$AAl?$AA?$AA@
0x18003B724: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll
0x180032790: "CMitigationManager::GetHostArchi" ??_C@_1FA@JJGHPEIK@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAA?$AAr?$AAc?$AAh?$AAi@
0x180036380: "standalone" ??_C@_1BG@MPGNLCEB@?$AAs?$AAt?$AAa?$AAn?$AAd?$AAa?$AAl?$AAo?$AAn?$AAe?$AA?$AA@
0x180032A80: "REG_SZ" ??_C@_1O@JOCLCBME@?$AAR?$AAE?$AAG?$AA_?$AAS?$AAZ?$AA?$AA@
0x180014514: "long __cdecl IteratePathFirstSubNodeWithAttrValue(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64,class Unattend & __ptr64,class UnattendNode,class IPathIterator * __ptr64)" ?IteratePathFirstSubNodeWithAttrValue@@YAJPEBGPEAPEAG1K0AEAVUnattend@@VUnattendNode@@PEAVIPathIterator@@@Z
0x180036400: "NDATA" ??_C@_1M@JLKJENGO@?$AAN?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180026480: RtlXmlDefaultNextCharacter_UTF16BE
0x180031DA0: "Execute: Elapsed time=[%I64u]" ??_C@_1DM@BLJGGIEB@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AAE?$AAl?$AAa?$AAp?$AAs?$AAe?$AAd?$AA?5?$AAt?$AAi?$AAm?$AAe?$AA?$DN?$AA?$FL?$AA?$CF?$AAI?$AA6?$AA4?$AAu?$AA?$FN?$AA?$AA@
0x180026590: RtlXmlDefaultNextCharacter_UTF16LE
0x18000DF28: "private: long __cdecl CMitigationManager::SetObjectSecurity(unsigned short const * __ptr64,enum _SE_OBJECT_TYPE,unsigned short const * __ptr64) __ptr64" ?SetObjectSecurity@CMitigationManager@@AEAAJPEBGW4_SE_OBJECT_TYPE@@0@Z
0x180036040: "-->" ??_C@_03PNLDJJMO@?9?9?$DO?$AA@
0x18000EE30: "public: virtual long __cdecl CUnknownImpl<class IMitigationManagerInternal>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CUnknownImpl@VIMitigationManagerInternal@@@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180004128: "public: static long __cdecl CImmutableStringsT<unsigned short,class CImmutableStringsPolicyDefault>::CreateCchBufferN(unsigned short,unsigned long,unsigned short * __ptr64 * __ptr64)" ?CreateCchBufferN@?$CImmutableStringsT@GVCImmutableStringsPolicyDefault@@@@SAJGKPEAPEAG@Z
0x18000FD1C: "public: long __cdecl CAutoRevertApplyPrivilegesT<class CEmptyType>::Enable(unsigned long const * __ptr64,unsigned long) __ptr64" ?Enable@?$CAutoRevertApplyPrivilegesT@VCEmptyType@@@@QEAAJPEBKK@Z
0x180017280: RtlGetCharacterSetDecoder
0x18001A390: "private: long __cdecl MicrodomImplementation::CMicrodom::CompareElementByTagName(struct _MICRODOM_DOM_NODE_ELEMENT const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool * __ptr64) __ptr64" ?CompareElementByTagName@CMicrodom@MicrodomImplementation@@AEAAJPEBU_MICRODOM_DOM_NODE_ELEMENT@@PEBU_LUTF8_STRING@@PEA_N@Z
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800317C8: "EventSetInformation" ??_C@_0BE@BJEEGHGK@EventSetInformation?$AA@
0x180013960: UnattendFreeSetting
0x18002FFE0: "__cdecl _imp__lock" __imp__lock
0x18002FE98: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180033F30: "ProcessMitigation: ReportEventMi" ??_C@_1HM@KPFIELDD@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAi@
0x180032E08: "UBR" ??_C@_17KEIPLBHK@?$AAU?$AAB?$AAR?$AA?$AA@
0x180014324: "long __cdecl IteratePathSubNodesWithName(enum IteratePathSubNodesType,unsigned short const * __ptr64,unsigned __int64,unsigned short const * __ptr64,class Unattend & __ptr64,class UnattendNode,class IPathIterator * __ptr64)" ?IteratePathSubNodesWithName@@YAJW4IteratePathSubNodesType@@PEBG_K1AEAVUnattend@@VUnattendNode@@PEAVIPathIterator@@@Z
0x18002D938: atexit
0x180004B20: "public: static void __cdecl CBreakOnFailureT<class CEmptyType>::CheckToBreakOnFailure(long)" ?CheckToBreakOnFailure@?$CBreakOnFailureT@VCEmptyType@@@@SAXJ@Z
0x18003654C: g_RGCH_amp
0x180020338: "long __cdecl MicrodomWriterImplementation::WalkDocumentNodes(unsigned long,struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64,struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Rtl::IRtlWOFOStream * __ptr64)" ?WalkDocumentNodes@MicrodomWriterImplementation@@YAJKPEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@PEAUIRtlMicrodom@345@PEAUIRtlWOFOStream@35@@Z
0x180033CC0: "ProcessMitigation: Processing re" ??_C@_1IA@NFLOGIFG@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe@
0x180030048: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x180017E10: RtlEncodeUtf32BE
0x18001CCF0: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffBase<class MicrodomImplementation::CMicrodom>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800057A0: "public: virtual long __cdecl CMitigationManager::Clear(void) __ptr64" ?Clear@CMitigationManager@@UEAAJXZ
0x18001B6A0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Attribute,struct Windows::Vector<enum Windows::Microdom::Rtl::Attribute::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUAttribute@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Attribute@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x1800303E0: "EtwEventRegister" ??_C@_0BB@DHHHEAKO@EtwEventRegister?$AA@
0x180033DD0: "custom" ??_C@_1O@GHJLOJIO@?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x180032048: "family" ??_C@_1O@GLBAHGKH@?$AAf?$AAa?$AAm?$AAi?$AAl?$AAy?$AA?$AA@
0x180031840: "MitigationManager: QueryInterfac" ??_C@_1JE@LAJBCNDP@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?5?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc@
0x18002A048: RtlXmlIsExtentWhitespace
0x180034B20: "SetObjectSecurity: Applying owne" ??_C@_1HA@PHGCDAOM@?$AAS?$AAe?$AAt?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAo?$AAw?$AAn?$AAe@
0x18002FE18: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180035CC0: "user32.dll" ??_C@_1BG@OILDLIOJ@?$AAu?$AAs?$AAe?$AAr?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800344A0: "ProcessRegistryOperation: Openin" ??_C@_1HA@BMFCHFJK@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAi?$AAn@
0x180036430: "ID" ??_C@_15HCBMMKJC@?$AAI?$AAD?$AA?$AA@
0x180030DF0: "FixupEditionId: ProductType = [0" ??_C@_1EK@KOGIOBPA@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?5?$AA?$DN?$AA?5?$AA?$FL?$AA0@
0x180034760: "ProcessRegistryOperation: Openin" ??_C@_1GC@CBJKAPED@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAi?$AAn@
0x180017F60: RtlGetEncodingSizeUtf8
0x180021374: "struct BUCL::Implementation::ComparisonResultKind<class BUCL::Rtl::CCallDisposition> __cdecl BUCL::Rtl::MakeCompareResult(long,int const & __ptr64)" ?MakeCompareResult@Rtl@BUCL@@YA?AU?$ComparisonResultKind@VCCallDisposition@Rtl@BUCL@@@Implementation@2@JAEBH@Z
0x18002F910: xss_FIXED
0x180035670: "EnumeratePathEx: Callback reques" ??_C@_1OK@BNINJEJG@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAe?$AAs@
0x180016AB0: RtlAppendLBlobToLBlob
0x18001FA40: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteCData(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::CharacterData,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteCData@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UCharacterData@456@PEAUIRtlWOFOStream@46@@Z
0x18002F9E0: xss_NMTOKENS
0x180031ED0: "scenario" ??_C@_1BC@POHAFONL@?$AAs?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$AA@
0x180017DC0: RtlEncodeUtf32LE
0x1800051D0: StrStartsWithIC
0x180015F54: "long __cdecl RtlpSmartLBlobWritingContextResizePolicy(unsigned __int64,unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?RtlpSmartLBlobWritingContextResizePolicy@@YAJ_K00PEA_K@Z
0x18000E960: "private: virtual void * __ptr64 __cdecl CMitigationManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMitigationManager@@EEAAPEAXI@Z
0x1800324A0: "desktopExportRepositoryIncludeIn" ??_C@_1FI@PMKENONJ@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAE?$AAx?$AAp?$AAo?$AAr?$AAt?$AAR?$AAe?$AAp?$AAo?$AAs?$AAi?$AAt?$AAo?$AAr?$AAy?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAI?$AAn@
0x18001AD5C: "public: long __cdecl MicrodomImplementation::CMicrodom::Initialize(struct MicrodomImplementation::MdCreateParams const & __ptr64) __ptr64" ?Initialize@CMicrodom@MicrodomImplementation@@QEAAJAEBUMdCreateParams@2@@Z
0x18001E860: "unsigned long __cdecl TypeToTypeIndexer<unsigned short>(void const * __ptr64,unsigned long)" ??$TypeToTypeIndexer@G@@YAKPEBXK@Z
0x18002FE58: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18002FD80: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18002DE3D: "__cdecl _dllonexit" __dllonexit
0x180022374: "public: long __cdecl CMicrodomXmlWalker::HandleProcessingInstruction(class CXmlCursor * __ptr64) __ptr64" ?HandleProcessingInstruction@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x18002F010: "const CDlpAutoDelayLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`vftable'" ??_7?$CDlpAutoDelayLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@6B@
0x1800360C0: "__cdecl GUID_55eab610_3945_4595_b7f9_75bebf9486f4" _GUID_55eab610_3945_4595_b7f9_75bebf9486f4
0x1800323A8: "desktopEnumerateFOD" ??_C@_1CI@GOKLJCMA@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAF?$AAO?$AAD?$AA?$AA@
0x180032C60: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18001ECB0: "public: virtual void __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::Release(void) __ptr64" ?Release@?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAXXZ
0x18001BF80: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetItem(struct Windows::Microdom::Rtl::NamedNodeMap,unsigned long,struct Windows::Microdom::Rtl::Node * __ptr64) __ptr64" ?GetItem@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNamedNodeMap@Rtl@Microdom@Windows@@KPEAUNode@456@@Z
0x180010A1C: CopyFileWithAttributesEx2
0x18003B758: "__cdecl _native_startup_lock" __native_startup_lock
0x180036470: "NMTOKEN" ??_C@_1BA@OLJOGEGF@?$AAN?$AAM?$AAT?$AAO?$AAK?$AAE?$AAN?$AA?$AA@
0x180004E40: DllMain
0x180027558: RtlRawXmlTokenizer_GatherPubIdLiteral
0x180017018: RtlMatchLUtf8StringAgainstPointerList
0x180034410: "ProcessRegistryOperation: Target" ??_C@_1IG@PEJPNINM@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt@
0x180010B18: WdsCopyFileEx
0x18001CC10: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetDocumentNodeSet(struct Windows::Microdom::Rtl::Document,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Node> > * __ptr64) __ptr64" ?GetDocumentNodeSet@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUDocument@Rtl@Microdom@Windows@@PEAV?$Auto@U?$Vector@UNode@Rtl@Microdom@Windows@@@Windows@@@6@@Z
0x180034CD0: "SetRegistrySecurity: Setting reg" ??_C@_1IG@FGHAAAJA@?$AAS?$AAe?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAg@
0x180032418: "desktopCreateMedia" ??_C@_1CG@FOJDOFDM@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAM?$AAe?$AAd?$AAi?$AAa?$AA?$AA@
0x18002FFC8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18002FFE8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800040E8: "long __cdecl STRAPI_Format(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?STRAPI_Format@@YAJPEAPEAGPEBGZZ
0x1800330A8: "async" ??_C@_1M@ICNBJLBA@?$AAa?$AAs?$AAy?$AAn?$AAc?$AA?$AA@
0x180030CE0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1FK@EDIIEKBJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18002FF98: "__cdecl _imp__wcstoui64" __imp__wcstoui64
0x1800261E0: RtlXmlDefaultNextCharacter_UTF8
0x1800300A8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800362B8: ?PropSet@?5??CloseElement@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@567@PEAUIRtlWOFOStream@57@@Z@4QBW4Properties@8567@B
0x18002F0F0: "const Windows::Rtl::CRtlTearoffBase<class MicrodomImplementation::CMicrodom>::`vftable'" ??_7?$CRtlTearoffBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@6B@
0x18002F9C0: xss_ELEMENT
0x180030ED0: "Education" ??_C@_1BE@PGBCEMHK@?$AAE?$AAd?$AAu?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180028854: RtlXmlNextToken
0x18002FF38: KERNEL32_NULL_THUNK_DATA
0x1800034BC: "public: static int __cdecl SErrorConverterT<class CEmptyType>::C_NtStatus2HR(long,long * __ptr64)" ?C_NtStatus2HR@?$SErrorConverterT@VCEmptyType@@@@SAHJPEAJ@Z
0x180030A40: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@HGBEOPBK@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x18002FEF8: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x18003B670: "class Windows::Rtl::CRtlOneShotTypeDescriptionInit<class MicrodomImplementation::CMicrodom> MicrodomImplementation::g_OneShotMicrodomInit" ?g_OneShotMicrodomInit@MicrodomImplementation@@3V?$CRtlOneShotTypeDescriptionInit@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@A
0x18002BF88: RtlXmlExtentToUtf8String
0x180032730: "CMitigationManager::GetFileTimeD" ??_C@_1FE@GPKOGAHC@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAD@
0x18001F4DC: "public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteComment(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Comment,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteComment@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UComment@456@PEAUIRtlWOFOStream@46@@Z
0x18002FDE8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18001B7C0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::ProcessingInstruction,struct Windows::Vector<enum Windows::Microdom::Rtl::ProcessingInstruction::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUProcessingInstruction@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@ProcessingInstruction@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x18001FB90: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteRawString(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Vector<struct _LUTF8_STRING const * __ptr64 const> const & __ptr64,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteRawString@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@QEBU_LUTF8_STRING@@@6@PEAUIRtlWOFOStream@46@@Z
0x180017860: RtlDecodeUtf32BE
0x1800363B8: "ELEMENT" ??_C@_1BA@PPOLIKAK@?$AAE?$AAL?$AAE?$AAM?$AAE?$AAN?$AAT?$AA?$AA@
0x18001BB40: "public: virtual void __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::CTempOutputStream::Release(void) __ptr64" ?Release@CTempOutputStream@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAXXZ
0x18002F710: "struct _LUTF8_STRING const `public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteProcessingInstruction(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::ProcessingInstruction,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64'::`6'::PIEnd" ?PIEnd@?5??WriteProcessingInstruction@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UProcessingInstruction@567@PEAUIRtlWOFOStream@57@@Z@4U_LUTF8_STRING@@B
0x18003B070: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18002DFBC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800321C0: "CheckApplicability: Edition not " ??_C@_1FI@NPFNNBBG@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAn?$AAo?$AAt?$AA?5@
0x180015788: "public: long __cdecl Unattend::GetAttributeInfo(class UnattendNode const & __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,class UnattendNode * __ptr64) __ptr64" ?GetAttributeInfo@Unattend@@QEAAJAEBVUnattendNode@@_KPEAPEAG2PEAV2@@Z
0x18001CE0C: "public: long __cdecl MicrodomImplementation::CDomPositionCache::AttachToPositionList(struct _MICRODOM_LOCATION_HEADER const * __ptr64) __ptr64" ?AttachToPositionList@CDomPositionCache@MicrodomImplementation@@QEAAJPEBU_MICRODOM_LOCATION_HEADER@@@Z
0x180032CA0: "GetRootKeyFromString: Root key [" ??_C@_1GG@PAEMOAKL@?$AAG?$AAe?$AAt?$AAR?$AAo?$AAo?$AAt?$AAK?$AAe?$AAy?$AAF?$AAr?$AAo?$AAm?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAR?$AAo?$AAo?$AAt?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AA?$FL@
0x180004064: "private: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::RegOpenKeyAccess64BitView<1>(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ??$RegOpenKeyAccess64BitView@$00@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@CAJPEAUHKEY__@@PEBGKPEAPEAU1@@Z
0x180030030: "__cdecl _imp_memcmp" __imp_memcmp
0x18002F940: xss_ID
0x1800217D0: "private: static struct BUCL::Implementation::ComparisonResultKind<class BUCL::Rtl::CCallDisposition> __cdecl CMicrodomBuilder::CompareStringSlot(struct CMicrodomBuilder::StringTablePair const & __ptr64,struct CMicrodomBuilder::StringTablePair const & __ptr64)" ?CompareStringSlot@CMicrodomBuilder@@CA?AU?$ComparisonResultKind@VCCallDisposition@Rtl@BUCL@@@Implementation@BUCL@@AEBUStringTablePair@1@0@Z
0x180034EF0: "WdsCopyFileEx: Failed to copy [%" ??_C@_1JI@GNJAIMLM@?$AAW?$AAd?$AAs?$AAC?$AAo?$AAp?$AAy?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAp?$AAy?$AA?5?$AA?$FL?$AA?$CF@
0x180030F68: "EnterpriseNEval" ??_C@_1CA@JDONABNC@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAN?$AAE?$AAv?$AAa?$AAl?$AA?$AA@
0x18000846C: "private: long __cdecl CMitigationManager::GetHostArchitecture(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetHostArchitecture@CMitigationManager@@AEAAJPEAPEAG@Z
0x18001E6A0: "private: static void __cdecl Windows::Rtl::CRtlOneShotTypeDescriptionInit<class MicrodomWriterImplementation::CMicrodomWriter>::Teardown(void * __ptr64)" ?Teardown@?$CRtlOneShotTypeDescriptionInit@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@CAXPEAX@Z
0x180010360: "public: virtual void * __ptr64 __cdecl CDlpAutoDelayLockT<class CDlpAutoExclusiveAcquireLockT<class CEmptyType> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CDlpAutoDelayLockT@V?$CDlpAutoExclusiveAcquireLockT@VCEmptyType@@@@@@UEAAPEAXI@Z
0x180016BE0: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CVoidRaiseFrame>::SetInvalidParameter(void) __ptr64" ?SetInvalidParameter@?$CBaseFrame@VCVoidRaiseFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180031640: "DEBUG" ??_C@_1M@POOEEFKL@?$AAD?$AAE?$AAB?$AAU?$AAG?$AA?$AA@
0x180030080: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x180036438: "IDREF" ??_C@_1M@EIFIHLKO@?$AAI?$AAD?$AAR?$AAE?$AAF?$AA?$AA@
0x180031270: "FixupEditionId: Product EditionI" ??_C@_1HE@MKBFAODE@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI@
0x1800391D0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180030FE0: "EnterpriseSNEval" ??_C@_1CC@FMAHLGLD@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAS?$AAN?$AAE?$AAv?$AAa?$AAl?$AA?$AA@
0x180022600: "public: long __cdecl CMicrodomXmlWalker::DocumentStart(class CXmlCursor * __ptr64) __ptr64" ?DocumentStart@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x18001C6F0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetAttributeNSNode(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Attribute * __ptr64) __ptr64" ?GetAttributeNSNode@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEAUAttribute@456@@Z
0x180030D40: "FixupEditionId: Registry Edition" ??_C@_1FE@ICJAJDAB@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn@
0x180023554: "private: unsigned __int64 __cdecl CMicrodomBuilder::GetXmlDomSize(void)const __ptr64" ?GetXmlDomSize@CMicrodomBuilder@@AEBA_KXZ
0x18000372C: "public: static long __cdecl CRegUtilT<unsigned short * __ptr64,struct CRegType,0,1>::SetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?SetValue@?$CRegUtilT@PEAGUCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG11K@Z
0x18002FD58: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18002FE38: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800021B0: "long __cdecl FixupEditionId(enum MitigationScenario,unsigned short const * __ptr64,class IDlpDiagnostics * __ptr64)" ?FixupEditionId@@YAJW4MitigationScenario@@PEBGPEAVIDlpDiagnostics@@@Z
0x18002FD38: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x180032A20: "CMitigationManager::GetRegistryT" ??_C@_1FM@NIJINOMB@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAT@
0x18002F128: "const Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::`vftable'{for `Windows::Rtl::CRtlTearoffBase<class MicrodomWriterImplementation::CMicrodomWriter>'}" ??_7?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@6B?$CRtlTearoffBase@VCMicrodomWriter@MicrodomWriterImplementation@@@12@@
0x180030050: "__cdecl _imp_RtlReAllocateHeap" __imp_RtlReAllocateHeap
0x180020A30: RtlWriteMicrodomXml
0x180036034: ":" ??_C@_01JLIPDDHJ@?3?$AA@
0x180032B00: "REG_BINARY" ??_C@_1BG@IGEHOJMD@?$AAR?$AAE?$AAG?$AA_?$AAB?$AAI?$AAN?$AAA?$AAR?$AAY?$AA?$AA@
0x180005490: "public: virtual class IDlpDiagnostics * __ptr64 __cdecl CMitigationManager::GetDiagnostics(void) __ptr64" ?GetDiagnostics@CMitigationManager@@UEAAPEAVIDlpDiagnostics@@XZ
0x180031780: "api-ms-win-eventing-provider-l1-" ??_C@_1EI@JCOINDP@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9@
0x180005380: "public: long __cdecl CDword::Init(unsigned long) __ptr64" ?Init@CDword@@QEAAJK@Z
0x180035AB0: "DeletePath: Failed to obliterate" ??_C@_1IA@OCMBOICM@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAb?$AAl?$AAi?$AAt?$AAe?$AAr?$AAa?$AAt?$AAe@
0x1800300B0: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x18002FCC0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180017248: RtlReportErrorOrigination
0x1800189DC: "public: long __cdecl MicrodomImplementation::CMicrodom::GetParent(unsigned long,unsigned long * __ptr64) __ptr64" ?GetParent@CMicrodom@MicrodomImplementation@@QEAAJKPEAK@Z
0x180031B10: "Mitigations.xml" ??_C@_1CA@NICGNMFC@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x1800210CC: "public: long __cdecl Windows::Rtl::CRtlObjectTypeDescription<class MicrodomWriterImplementation::CMicrodomWriter>::CreateInstance<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter,int,struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter>(int const & __ptr64,class Windows::Auto<struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64> * __ptr64) __ptr64" ??$CreateInstance@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@HUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@@?$CRtlObjectTypeDescription@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@QEAAJAEBHPEAV?$Auto@PEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@@2@@Z
0x18002DA40: "__cdecl ValidateImageBase" _ValidateImageBase
0x18002F930: xss_ENTITY
0x18001E3D0: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::CVector<class MicrodomImplementation::CDomLayoutCache::CCachedInformation,class BUCL::Rtl::CCallDisposition>::Resize(unsigned __int64) __ptr64" ?Resize@?$CVector@VCCachedInformation@CDomLayoutCache@MicrodomImplementation@@VCCallDisposition@Rtl@BUCL@@@BUCL@@QEAA?AVCCallDisposition@Rtl@2@_K@Z
0x18003175C: "%u!" ??_C@_03JHPCMALH@?$CFu?$CB?$AA@
0x180003CE0: "public: __cdecl SP_MEM<unsigned short>::~SP_MEM<unsigned short>(void) __ptr64" ??1?$SP_MEM@G@@QEAA@XZ
0x180003CE0: "public: __cdecl SP_MEM<char>::~SP_MEM<char>(void) __ptr64" ??1?$SP_MEM@D@@QEAA@XZ
0x180003CE0: "public: __cdecl SP_MEM<unsigned char>::~SP_MEM<unsigned char>(void) __ptr64" ??1?$SP_MEM@E@@QEAA@XZ
0x180032880: "GetHostEdition: Host arch=[%s]." ??_C@_1EA@PEIMDIJB@?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?5?$AAa?$AAr?$AAc?$AAh?$AA?$DN?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?4?$AA?$AA@
0x180032E10: "Software\Microsoft\Windows NT\Cu" ??_C@_1FK@MPJNMLLM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180035D90: "CopyDirectoryEx2: Specified dire" ??_C@_1HC@JIGELHDN@?$AAC?$AAo?$AAp?$AAy?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAE?$AAx?$AA2?$AA?3?$AA?5?$AAS?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?5?$AAd?$AAi?$AAr?$AAe@
0x18002FE10: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180014D08: "public: long __cdecl Unattend::ReadUnattendFile(unsigned short const * __ptr64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64) __ptr64" ?ReadUnattendFile@Unattend@@QEAAJPEBGPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x1800310D0: "FixupEditionId: Product EditionI" ??_C@_1FC@DGAJOPJD@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI@
0x180015C90: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CDerivedTFrame<unsigned __int64> >::ReportErrorOrigination(struct Windows::ErrorHandling::_RTL_CALL_SITE const * __ptr64) __ptr64" ?ReportErrorOrigination@?$CBaseFrame@V?$CDerivedTFrame@_K@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXPEBU_RTL_CALL_SITE@34@@Z
0x180019DBC: "public: long __cdecl MicrodomImplementation::CMicrodom::GetNodeName(unsigned long,struct _MICRODOM_DOM_NODE_HEADER const * __ptr64,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetNodeName@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_MICRODOM_DOM_NODE_HEADER@@PEAPEBU_LUTF8_STRING@@@Z
0x1800359D0: "DeletePath: Cannot delete <null>" ??_C@_1EE@CABGHGNK@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAC?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AA?$DM?$AAn?$AAu?$AAl?$AAl?$AA?$DO@
0x180030440: "CleanupSafeOsImages: Scenario [0" ??_C@_1GI@EOKLBPB@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?5?$AA?$FL?$AA0@
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAPEAXI@Z
0x180032270: "CMitigationManager::CheckScenari" ??_C@_1EE@FPCBIHJD@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi@
0x18002F0D0: "const GetStringIter::`vftable'" ??_7GetStringIter@@6B@
0x180032D78: "*.*.*" ??_C@_1M@LNCHGMOI@?$AA?$CK?$AA?4?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x18000ED60: "public: virtual unsigned long __cdecl CUnknownImpl<class IMitigationManagerInternal>::AddRef(void) __ptr64" ?AddRef@?$CUnknownImpl@VIMitigationManagerInternal@@@@UEAAKXZ
0x18002CAA0: RtlpNsFindMatchingAlias
0x180030088: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800336A8: "targetPath" ??_C@_1BG@EGHAIKKB@?$AAt?$AAa?$AAr?$AAg?$AAe?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180035200: "DeleteFileEx: hardlink given to " ??_C@_1FE@NMMDLJAB@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAh?$AAa?$AAr?$AAd?$AAl?$AAi?$AAn?$AAk?$AA?5?$AAg?$AAi?$AAv?$AAe?$AAn?$AA?5?$AAt?$AAo?$AA?5@
0x180013518: EnablePrivilegeEx2
0x180032C30: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18002F8C0: xss_REQUIRED
0x18003B738: "protected: static struct CEtwProviderT<void>::CETWApiSet CEtwProviderT<void>::g_etwApi" ?g_etwApi@?$CEtwProviderT@X@@1UCETWApiSet@1@A
0x180032038: "arch" ??_C@_19LMNHMMDC@?$AAa?$AAr?$AAc?$AAh?$AA?$AA@
0x180033AC0: "ProcessMitigation: Mitigation [%" ??_C@_1GG@FHEJIBJN@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$FL?$AA?$CF@
0x1800259B4: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<unsigned short>::CTableTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCTableTraits@?$CFourStringIdTable@G@CMicrodomBuilder@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x18001CCF0: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffBase<class MicrodomImplementation::CMicrodom>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800303C0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180015C90: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CVoidRaiseFrame>::ReportErrorOrigination(struct Windows::ErrorHandling::_RTL_CALL_SITE const * __ptr64) __ptr64" ?ReportErrorOrigination@?$CBaseFrame@VCVoidRaiseFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXPEBU_RTL_CALL_SITE@34@@Z
0x18001F7A0: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::CloseElement(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?CloseElement@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@456@PEAUIRtlWOFOStream@46@@Z
0x18003B634: "int g_bLoggingDisabled" ?g_bLoggingDisabled@@3HA
0x180031763: "char const `public: struct _LUTF8_STRING * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::VectorTraits<struct _LUTF8_STRING>,class Windows::Auto<struct Windows::Vector<struct _LUTF8_STRING> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$VectorTraits@U_LUTF8_STRING@@@Windows@@V?$Auto@U?$Vector@U_LUTF8_STRING@@@Windows@@@2@@Windows@@QEAAPEAU_LUTF8_STRING@@_K@Z@4DB
0x18002FEC0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18002FDF0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18002FDD8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180032300: "desktopUpgrade" ??_C@_1BO@LCGBDOJJ@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAU?$AAp?$AAg?$AAr?$AAa?$AAd?$AAe?$AA?$AA@
0x18002F128: "const Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::`vftable'{for `Windows::Rtl::CRtlTearoffBase<class MicrodomImplementation::CMicrodom>'}" ??_7?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@6B?$CRtlTearoffBase@VCMicrodom@MicrodomImplementation@@@12@@
0x1800054A0: "public: virtual long __cdecl CMitigationManager::GetDiagnostics(class IDlpDiagnostics * __ptr64 * __ptr64) __ptr64" ?GetDiagnostics@CMitigationManager@@UEAAJPEAPEAVIDlpDiagnostics@@@Z
0x180032348: "desktopFOD" ??_C@_1BG@FHJKFFAP@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAF?$AAO?$AAD?$AA?$AA@
0x18003B648: g_FindFirstFileName
0x18002FA18: g_LUTF8_STRING_amp
0x18001E024: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::CVector<struct _MICRODOM_DOCTYPE_NODE_HEADER * __ptr64,class BUCL::Rtl::CCallDisposition>::Reserve(unsigned __int64) __ptr64" ?Reserve@?$CVector@PEAU_MICRODOM_DOCTYPE_NODE_HEADER@@VCCallDisposition@Rtl@BUCL@@@BUCL@@QEAA?AVCCallDisposition@Rtl@2@_K@Z
0x180003E34: "private: long __cdecl CStringBufferImplT<unsigned short,class CStringBufferPolicyDefaultT<unsigned short>,class CStringHelperDefaultT<class CStringBufferPolicyDefaultT<unsigned short> > >::Check2Grow(unsigned long,int) __ptr64" ?Check2Grow@?$CStringBufferImplT@GV?$CStringBufferPolicyDefaultT@G@@V?$CStringHelperDefaultT@V?$CStringBufferPolicyDefaultT@G@@@@@@AEAAJKH@Z
0x180031CA8: "%s[*]" ??_C@_1M@IONKLFFM@?$AA?$CF?$AAs?$AA?$FL?$AA?$CK?$AA?$FN?$AA?$AA@
0x180033970: "ProcessFileOperation: Setting se" ??_C@_1HI@BAEIGNAA@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAe@
0x18002D5D0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180008D60: "private: long __cdecl CMitigationManager::GetRootKeyFromString(unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?GetRootKeyFromString@CMitigationManager@@AEAAJPEBGPEAPEAUHKEY__@@@Z
0x18002FF68: "__cdecl _imp_iswspace" __imp_iswspace
0x18002FFF0: "__cdecl _imp__initterm" __imp__initterm
0x1800076CC: "private: long __cdecl CMitigationManager::CheckRegKeyExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int * __ptr64) __ptr64" ?CheckRegKeyExists@CMitigationManager@@AEAAJPEAUHKEY__@@PEBGPEAH@Z
0x180036090: "CMicrodom" ??_C@_09EJMLJHGH@CMicrodom?$AA@
0x18000E960: "private: virtual void * __ptr64 __cdecl CMitigationManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMitigationManager@@EEAAPEAXI@Z
0x18001CD1C: "public: long __cdecl MicrodomImplementation::CDomPositionCache::GetLocation(unsigned long,struct Windows::Microdom::Rtl::NodeLocation * __ptr64 * __ptr64) __ptr64" ?GetLocation@CDomPositionCache@MicrodomImplementation@@QEAAJKPEAPEAUNodeLocation@Rtl@Microdom@Windows@@@Z
0x180032AD0: "REG_DWORD" ??_C@_1BE@NOJFNOMH@?$AAR?$AAE?$AAG?$AA_?$AAD?$AAW?$AAO?$AAR?$AAD?$AA?$AA@
0x180013478: AllocateExpand
0x1800209E4: RtlCreateDefaultMicrodomXmlWriter
0x180015D7C: RtlDuplicateLBlob
0x18001E870: "unsigned long __cdecl TypeToTypeIndexer<unsigned char>(void const * __ptr64,unsigned long)" ??$TypeToTypeIndexer@E@@YAKPEBXK@Z
0x180007834: "private: long __cdecl CMitigationManager::CheckScenario(enum MitigationScenario,unsigned short const * __ptr64,int * __ptr64) __ptr64" ?CheckScenario@CMitigationManager@@AEAAJW4MitigationScenario@@PEBGPEAH@Z
0x180024DAC: "public: long __cdecl CBaseXmlWalker<class CMicrodomXmlWalker>::WalkDocument(void * __ptr64,unsigned __int64) __ptr64" ?WalkDocument@?$CBaseXmlWalker@VCMicrodomXmlWalker@@@@QEAAJPEAX_K@Z
0x18002FF28: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800362C0: ?PropSet@?5??EmitAttribute@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UAttribute@567@PEAUIRtlWOFOStream@57@@Z@4QBW4Properties@8567@B
0x18001C530: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetAttribute(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetAttribute@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@PEAPEBU7@@Z
0x1800360D0: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Node,struct Windows::Vector<enum Windows::Microdom::Rtl::Node::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Node@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x18002FFB0: "__cdecl _imp_swscanf_s" __imp_swscanf_s
0x180030AC0: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@JLIEIDPF@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x18001B850: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::CharacterData,struct Windows::Vector<enum Windows::Microdom::Rtl::CharacterData::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUCharacterData@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@CharacterData@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x180002C28: "public: static long __cdecl CRegUtilT<unsigned short * __ptr64,struct CRegType,0,1>::SetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?SetValue@?$CRegUtilT@PEAGUCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG11@Z
0x18002CCB0: "protected: static long __cdecl CXmlCursor::XmlAlloc(unsigned __int64,void * __ptr64 * __ptr64,void * __ptr64)" ?XmlAlloc@CXmlCursor@@KAJ_KPEAPEAXPEAX@Z
0x18001E13C: "public: __cdecl BUCL::HashTable::CTable<class MicrodomImplementation::CEntityTableTraits>::~CTable<class MicrodomImplementation::CEntityTableTraits>(void) __ptr64" ??1?$CTable@VCEntityTableTraits@MicrodomImplementation@@@HashTable@BUCL@@QEAA@XZ
0x180034DB8: "kernel32" ??_C@_1BC@GDMECMAK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?$AA@
0x180030FA0: "EnterpriseSEval" ??_C@_1CA@BFKONMA@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAS?$AAE?$AAv?$AAa?$AAl?$AA?$AA@
0x180033CA8: "registry" ??_C@_1BC@COBCAOLF@?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?$AA@
0x180036368: "encoding" ??_C@_1BC@KLMLAFKI@?$AAe?$AAn?$AAc?$AAo?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x180034138: "value" ??_C@_1M@KBCLFMHN@?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18001E13C: "public: __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<struct _MICRODOM_XML_ATTDEF const * __ptr64>::CTableTraits>::~CTable<class CMicrodomBuilder::CFourStringIdTable<struct _MICRODOM_XML_ATTDEF const * __ptr64>::CTableTraits>(void) __ptr64" ??1?$CTable@VCTableTraits@?$CFourStringIdTable@PEBU_MICRODOM_XML_ATTDEF@@@CMicrodomBuilder@@@HashTable@BUCL@@QEAA@XZ
0x18002FE78: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x1800362D0: "http://www.w3.org/XML/1998/names" ??_C@_0CF@GLDAAHFK@http?3?1?1www?4w3?4org?1XML?11998?1names@
0x1800310B0: "ProfessionalN" ??_C@_1BM@IIJGKEJL@?$AAP?$AAr?$AAo?$AAf?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AAN?$AA?$AA@
0x18002FD40: CRYPT32_NULL_THUNK_DATA
0x18001C2F0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementsByTagNameNS(struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagNameNS@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJPEBU_LUTF8_STRING@@0PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@Windows@@@Z
0x18000EAD8: "public: __cdecl SP_CPP_ARRAY<struct CAutoRevertApplyPrivilegesT<class CEmptyType>::CPrivilegeState>::~SP_CPP_ARRAY<struct CAutoRevertApplyPrivilegesT<class CEmptyType>::CPrivilegeState>(void) __ptr64" ??1?$SP_CPP_ARRAY@UCPrivilegeState@?$CAutoRevertApplyPrivilegesT@VCEmptyType@@@@@@QEAA@XZ
0x180022280: "public: long __cdecl CMicrodomXmlWalker::OpenAttlist(class CXmlCursor * __ptr64) __ptr64" ?OpenAttlist@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x180034160: "data" ??_C@_19MLBBEMBH@?$AAd?$AAa?$AAt?$AAa?$AA?$AA@
0x1800327E0: "x86" ??_C@_17NIABIIAO@?$AAx?$AA8?$AA6?$AA?$AA@
0x180024B20: "public: __cdecl Windows::Rtl::UniformObjectPool<class CMicrodomBuilder::CXmlStreamObject>::~UniformObjectPool<class CMicrodomBuilder::CXmlStreamObject>(void) __ptr64" ??1?$UniformObjectPool@VCXmlStreamObject@CMicrodomBuilder@@@Rtl@Windows@@QEAA@XZ
0x18003B768: "__cdecl _onexitend" __onexitend
0x180030688: "Mount Path" ??_C@_1BG@CIBOODFH@?$AAM?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18002FCD0: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18002DE31: "__cdecl unlock" _unlock
0x18002C2D8: RtlInitializeGrowingList
0x180016638: RtlCompareEncodedLBlobs
0x1800300C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x1800331A0: "ProcessCommandOperation: Result=" ??_C@_1EO@IBDPMKOO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$DN@
0x18001BDF0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetNamedItem(struct Windows::Microdom::Rtl::NamedNodeMap,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Node * __ptr64) __ptr64" ?GetNamedItem@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNamedNodeMap@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@PEAUNode@456@@Z
0x180030C40: "FixupEditionId: Scenario [0x%X] " ??_C@_1FO@HHKPGALF@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?5?$AA?$FL?$AA0?$AAx?$AA?$CF?$AAX?$AA?$FN?$AA?5@
0x180004650: "protected: static long __cdecl CImmutableStringsT<unsigned short,class CImmutableStringsPolicyDefault>::CreateInternal(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?CreateInternal@?$CImmutableStringsT@GVCImmutableStringsPolicyDefault@@@@KAJPEBGKPEAPEAG@Z
0x18002F128: "const Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::`vftable'{for `Windows::Rtl::CRtlTearoffBase<class MicrodomWriterImplementation::CMicrodomWriter>'}" ??_7?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@6B?$CRtlTearoffBase@VCMicrodomWriter@MicrodomWriterImplementation@@@12@@
0x180030E98: "CoreN" ??_C@_1M@COLMCEGH@?$AAC?$AAo?$AAr?$AAe?$AAN?$AA?$AA@
0x180015548: "public: long __cdecl Unattend::GetTextualValue(class UnattendNode const & __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetTextualValue@Unattend@@QEAAJAEBVUnattendNode@@PEAPEAG@Z
0x18002FF30: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18001B290: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetDocumentElement(struct Windows::Microdom::Rtl::Document,struct Windows::Microdom::Rtl::Element * __ptr64) __ptr64" ?GetDocumentElement@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUDocument@Rtl@Microdom@Windows@@PEAUElement@456@@Z
0x18002FE68: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x18002FD88: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001E6EC: "public: static class MicrodomImplementation::CMicrodom::CPropertyCacheEntry * __ptr64 __cdecl Windows::VectorTraits<class MicrodomImplementation::CMicrodom::CPropertyCacheEntry>::AllocateElements(unsigned __int64)" ?AllocateElements@?$VectorTraits@VCPropertyCacheEntry@CMicrodom@MicrodomImplementation@@@Windows@@SAPEAVCPropertyCacheEntry@CMicrodom@MicrodomImplementation@@_K@Z
0x18002F920: xss_NOTATION
0x18001621C: RtlIsLBlobValid
0x1800154E4: "public: long __cdecl Unattend::IsNodeTextual(class UnattendNode const & __ptr64,int * __ptr64) __ptr64" ?IsNodeTextual@Unattend@@QEAAJAEBVUnattendNode@@PEAH@Z
0x1800152E4: "public: long __cdecl Unattend::CountChildren(class UnattendNode const & __ptr64,unsigned __int64 & __ptr64) __ptr64" ?CountChildren@Unattend@@QEAAJAEBVUnattendNode@@AEA_K@Z
0x180033D40: "command" ??_C@_1BA@NBJLPKHN@?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x180034830: "ProcessRegistryOperation: Deleti" ??_C@_1HA@FMDONBHP@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi@
0x180021478: "public: void __cdecl CMicrodomBuilder::CNamespaceNameExistenceCheck::Clear(void) __ptr64" ?Clear@CNamespaceNameExistenceCheck@CMicrodomBuilder@@QEAAXXZ
0x1800102F0: "public: virtual void * __ptr64 __cdecl CUnknownImpl<class IMitigationManagerInternal>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CUnknownImpl@VIMitigationManagerInternal@@@@UEAAPEAXI@Z
0x180034910: "ProcessRegistryOperation: Settin" ??_C@_1HM@FPBCNIHJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn@
0x1800032E8: "public: static long __cdecl CMiscHelpersT<class CEmptyType>::GetFullPathNameW(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetFullPathNameW@?$CMiscHelpersT@VCEmptyType@@@@SAJPEBGPEAPEAG1@Z
0x18002FDE0: "__cdecl _imp_GetProductInfo" __imp_GetProductInfo
0x180030070: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180036200: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Document,struct Windows::Vector<enum Windows::Microdom::Rtl::Document::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUDocument@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Document@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x180018000: RtlGetEncodingSizeUcs2
0x1800132AC: BuildPath
0x18002FDC8: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180032160: "CheckApplicability: Family not a" ??_C@_1FG@PCFMBCLP@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAF?$AAa?$AAm?$AAi?$AAl?$AAy?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAa@
0x18002F7E8: xss_SYSTEM
0x180031760: "%u" ??_C@_02GMHACPFF@?$CFu?$AA@
0x180035600: "EnumeratePathEx: Unable to enume" ??_C@_1GM@PDNFMGKD@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAn?$AAu?$AAm?$AAe@
0x1800300F8: "__cdecl _xi_a" __xi_a
0x1800334D8: "action" ??_C@_1O@HCAHPFFC@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001DDE8: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::CVector<struct Windows::Vector<struct Windows::Microdom::Rtl::Node const> * __ptr64,class BUCL::Rtl::CCallDisposition>::PushBack(struct Windows::Vector<struct Windows::Microdom::Rtl::Node const> * __ptr64 &&,enum BUCL::GrowthPolicy) __ptr64" ?PushBack@?$CVector@PEAU?$Vector@$$CBUNode@Rtl@Microdom@Windows@@@Windows@@VCCallDisposition@Rtl@BUCL@@@BUCL@@QEAA?AVCCallDisposition@Rtl@2@$$QEAPEAU?$Vector@$$CBUNode@Rtl@Microdom@Windows@@@Windows@@W4GrowthPolicy@2@@Z
0x18002FD68: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18001889C: "public: __cdecl MicrodomImplementation::CMicrodom::CMicrodom(void) __ptr64" ??0CMicrodom@MicrodomImplementation@@QEAA@XZ
0x18002FCA0: "__cdecl _imp_SetNamedSecurityInfoW" __imp_SetNamedSecurityInfoW
0x18002FA78: g_LUTF8_STRING__eq_
0x180036160: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Text,struct Windows::Vector<enum Windows::Microdom::Rtl::Text::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUText@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Text@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x1800045FC: "public: static long __cdecl CSafeMath<unsigned long,0>::SafeMul(unsigned long,unsigned long,unsigned long * __ptr64)" ?SafeMul@?$CSafeMath@K$0A@@@SAJKKPEAK@Z
0x18002FFD8: "__cdecl _imp__unlock" __imp__unlock
0x18000F2A8: "public: static long __cdecl CRegUtilT<unsigned long,struct CRegType,0,1>::GetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?GetValue@?$CRegUtilT@KUCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG1PEAK@Z
0x1800156C0: "public: long __cdecl Unattend::CountAttributes(class UnattendNode const & __ptr64,unsigned __int64 & __ptr64) __ptr64" ?CountAttributes@Unattend@@QEAAJAEBVUnattendNode@@AEA_K@Z
0x18001EE6C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CUlongToAttdefsTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCUlongToAttdefsTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x18002FA48: g_LUTF8_STRING_apos
0x18002FA00: g_LUTF8_STRING_quot
0x180006C34: "private: long __cdecl CMitigationManager::CheckApplicability(enum MitigationScenario,struct _UNATTEND_NODE * __ptr64,int * __ptr64) __ptr64" ?CheckApplicability@CMitigationManager@@AEAAJW4MitigationScenario@@PEAU_UNATTEND_NODE@@PEAH@Z
0x180032C08: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x1800335C8: "delete" ??_C@_1O@MEFPJPNF@?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180032E70: "GetSystemVersionString: UBR valu" ??_C@_1GI@LLBMNGND@?$AAG?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAU?$AAB?$AAR?$AA?5?$AAv?$AAa?$AAl?$AAu@
0x18002F960: xss_xmlns
0x18002FAA8: g_LUTF8_STRING_xmlns
0x180010444: "public: void __cdecl CFSAutoDisableRedirectionT<class CEmptyType>::Revert(void) __ptr64" ?Revert@?$CFSAutoDisableRedirectionT@VCEmptyType@@@@QEAAXXZ
0x180031EA0: "minVersion" ??_C@_1BG@GFNFAOPA@?$AAm?$AAi?$AAn?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800216D4: "private: unsigned __int64 __cdecl CMicrodomBuilder::DetermineStringTableSize(void)const __ptr64" ?DetermineStringTableSize@CMicrodomBuilder@@AEBA_KXZ
0x18000EB40: CreateMitigationManager
0x1800322B8: "unknown" ??_C@_1BA@KDMGPDJH@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x1800331F0: "CommandTime" ??_C@_1BI@NHACJNC@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800353C0: "WdsRemoveDirectory: Unable to cl" ??_C@_1IG@BJGKEJIJ@?$AAW?$AAd?$AAs?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAl@
0x180031764: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001E670: "protected: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@MEAAPEAXI@Z
0x18001B850: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Text,struct Windows::Vector<enum Windows::Microdom::Rtl::Text::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUText@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Text@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x1800010B0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1800323D0: "desktopRepair" ??_C@_1BM@KECHPPJH@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAR?$AAe?$AAp?$AAa?$AAi?$AAr?$AA?$AA@
0x180033A00: "CMitigationManager::ProcessMitig" ??_C@_1EM@DJMLMLMP@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg@
0x180034290: "ProcessRegistryOperation: Deleti" ??_C@_1GE@MHCPBIPN@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi@
0x180031C48: "Mitigation" ??_C@_1BG@NGKKMHKF@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002DD28: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180004D68: "public: static void __cdecl CChkMacroETWLoggerT<class CEmptyType>::LogHResultEvent(long)" ?LogHResultEvent@?$CChkMacroETWLoggerT@VCEmptyType@@@@SAXJ@Z
0x18001F700: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::EndOpenElement(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?EndOpenElement@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@456@PEAUIRtlWOFOStream@46@@Z
0x18003B780: "__cdecl pRawDllMain" _pRawDllMain
0x180030F50: "EnterpriseN" ??_C@_1BI@MPLLNCDK@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAN?$AA?$AA@
0x18002F0C8: "const UnattendXmlErrorHandler::`vftable'" ??_7UnattendXmlErrorHandler@@6B@
0x1800305FC: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180032910: "GetHostEdition: Host edition=[%s" ??_C@_1EG@FOLHDOFB@?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?5?$AAe?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$DN?$AA?$FL?$AA?$CF?$AAs@
0x180036318: "xml" ??_C@_17CAPCPOIM@?$AAx?$AAm?$AAl?$AA?$AA@
0x18002F298: "const MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::CTempOutputStream::`vftable'" ??_7CTempOutputStream@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@6B@
0x180031748: "advapi32" ??_C@_1BC@DNHGCMLG@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?$AA@
0x18002FF70: "__cdecl _imp___dllonexit" __imp___dllonexit
0x1800327F8: "arm" ??_C@_17JDKADKH@?$AAa?$AAr?$AAm?$AA?$AA@
0x1800013F0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180035CD8: "SendMessageW" ??_C@_0N@HADBEMKH@SendMessageW?$AA@
0x180024C50: "public: __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CIntermediateStringTableTraits>::~CTable<class CMicrodomBuilder::CIntermediateStringTableTraits>(void) __ptr64" ??1?$CTable@VCIntermediateStringTableTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAA@XZ
0x180033B30: "ProcessMitigation: Mitigation [%" ??_C@_1GE@JANMCMDP@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$FL?$AA?$CF@
0x18001A01C: "private: long __cdecl MicrodomImplementation::CMicrodom::GetElementsByTagNameCommon(unsigned long,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool,bool,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?GetElementsByTagNameCommon@CMicrodom@MicrodomImplementation@@AEAAJKPEBU_LUTF8_STRING@@0_N1PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@Windows@@PEA_K@Z
0x18002F128: "const Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::`vftable'{for `Windows::Rtl::CRtlTearoffBase<class MicrodomImplementation::CMicrodom>'}" ??_7?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@6B?$CRtlTearoffBase@VCMicrodom@MicrodomImplementation@@@12@@
0x180016244: RtlAllocateLBlob
0x180012ABC: PrepareUnicodePath
0x18001ED60: "public: long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::CreateInnerObject(class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInnerObject@?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@QEAAJPEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x18002FD98: "__cdecl _imp_SystemTimeToTzSpecificLocalTime" __imp_SystemTimeToTzSpecificLocalTime
0x180035A20: "DeletePath: [%s] doesn't exist a" ??_C@_1IE@CLEEPHIC@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AAd?$AAo?$AAe?$AAs?$AAn?$AA?8?$AAt?$AA?5?$AAe?$AAx?$AAi?$AAs?$AAt?$AA?5?$AAa@
0x18002FE80: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001543C: "public: long __cdecl Unattend::GetValue(class UnattendNode const & __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetValue@Unattend@@QEAAJAEBVUnattendNode@@PEAPEAG@Z
0x18002D880: "__cdecl _security_check_cookie" __security_check_cookie
0x180034C40: "MACHINE\%s" ??_C@_1BG@FAOHDODK@?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800300F0: "__cdecl _xc_z" __xc_z
0x18001E850: "unsigned long __cdecl TypeToTypeIndexer<unsigned long>(void const * __ptr64,unsigned long)" ??$TypeToTypeIndexer@K@@YAKPEBXK@Z
0x1800337F0: "ProcessFileOperation: Creating p" ??_C@_1GK@HMGNCLCP@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAp@
0x18002461C: "public: __cdecl MicrodomImplementation::CMicrodomCreationLocals::CMicrodomCreationLocals(void) __ptr64" ??0CMicrodomCreationLocals@MicrodomImplementation@@QEAA@XZ
0x18002FEB8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800357F0: "EnumeratePathEx: FindFirstFile f" ??_C@_1HG@GICICJNG@?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?3?$AA?5?$AAF?$AAi?$AAn?$AAd?$AAF?$AAi?$AAr?$AAs?$AAt?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAf@
0x180034210: "ProcessRegistryOperation: Value " ??_C@_1IA@CINCPJBG@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?5@
0x1800314B0: "Mitigation-FixupEditionId: Produ" ??_C@_1GM@EEDCMBHL@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu@
0x18002F838: xss_IDREF
0x180034A80: "CMitigationManager::SetObjectSec" ??_C@_1EM@PKNHDOKM@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc@
0x180003110: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::KeyExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?KeyExists@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBGPEAH@Z
0x18001F1A8: "public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::EmitAttribute(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Attribute,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?EmitAttribute@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UAttribute@456@PEAUIRtlWOFOStream@46@@Z
0x180033A50: "ProcessMitigation: Checking appl" ??_C@_1GM@DCKBBGNB@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAh?$AAe?$AAc?$AAk?$AAi?$AAn?$AAg?$AA?5?$AAa?$AAp?$AAp?$AAl@
0x180016D44: RtlConcatenateLUtf8Strings
0x180033640: "ProcessFileOperation: Deleting f" ??_C@_1FI@EPBIDMGC@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf@
0x1800338E0: "ProcessFileOperation: Moving pat" ??_C@_1GE@DFBPMCNG@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAM?$AAo?$AAv?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAa?$AAt@
0x180036084: "ID" ??_C@_02OLOABKKD@ID?$AA@
0x180035330: "DeleteFileEx: Unable to clear ou" ??_C@_1IC@EOLNBKDF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAl?$AAe?$AAa?$AAr?$AA?5?$AAo?$AAu@
0x180034DD0: "Wow64RevertWow64FsRedirection" ??_C@_0BO@KOCOEJCM@Wow64RevertWow64FsRedirection?$AA@
0x180018B74: "public: __cdecl MicrodomImplementation::CMicrodom::CPropertyCacheEntry::~CPropertyCacheEntry(void) __ptr64" ??1CPropertyCacheEntry@CMicrodom@MicrodomImplementation@@QEAA@XZ
0x18002FCB8: "__cdecl _imp_RegCopyTreeW" __imp_RegCopyTreeW
0x18001E670: "public: virtual void * __ptr64 __cdecl MicrodomWriterImplementation::CMicrodomWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMicrodomWriter@MicrodomWriterImplementation@@UEAAPEAXI@Z
0x18002FF88: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x18000FB20: "public: static long __cdecl CMiscHelpersT<class CEmptyType>::ParseFileName(unsigned short const * __ptr64,int * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ParseFileName@?$CMiscHelpersT@VCEmptyType@@@@SAJPEBGPEAHPEAPEAG22@Z
0x18003703C: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1800183F8: "long __cdecl AreTwoPossiblyNullUtf8StringsEqual(struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool * __ptr64)" ?AreTwoPossiblyNullUtf8StringsEqual@@YAJPEBU_LUTF8_STRING@@000PEA_N@Z
0x18002FD60: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180035FE0: "__cdecl GUID_5fcead74_06ac_45c0_a0ee_28fd97d329dd" _GUID_5fcead74_06ac_45c0_a0ee_28fd97d329dd
0x180025BD8: "class BUCL::Rtl::CCallDisposition __cdecl BUCL::Implementation::QuickSort<class BUCL::Rtl::CCallDisposition,unsigned __int64,struct CMicrodomBuilder::StringTablePair,struct BUCL::Implementation::ComparisonResultKind<class BUCL::Rtl::CCallDisposition> (__cdecl*)(struct CMicrodomBuilder::StringTablePair const & __ptr64,class BUCL::Rtl::CCallDisposition)>(struct CMicrodomBuilder::StringTablePair * __ptr64,unsigned __int64,struct BUCL::Implementation::ComparisonResultKind<class BUCL::Rtl::CCallDisposition> (__cdecl*)(struct CMicrodomBuilder::StringTablePair const & __ptr64,struct CMicrodomBuilder::StringTablePair const & __ptr64))" ??$QuickSort@VCCallDisposition@Rtl@BUCL@@_KUStringTablePair@CMicrodomBuilder@@P6A?AU?$ComparisonResultKind@VCCallDisposition@Rtl@BUCL@@@Implementation@3@AEBU45@0@Z@Implementation@BUCL@@YA?AVCCallDisposition@Rtl@1@PEAUStringTablePair@CMicrodomBuilder@@_KP6A?AU?$ComparisonResultKind@VCCallDisposition@Rtl@BUCL@@@01@AEBU45@2@Z@Z
0x180008AC4: "private: long __cdecl CMitigationManager::GetRegistryTypeFromString(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?GetRegistryTypeFromString@CMitigationManager@@AEAAJPEBGPEAK@Z
0x180005EA0: "public: virtual long __cdecl CMitigationManager::LoadFromXml(unsigned short const * __ptr64) __ptr64" ?LoadFromXml@CMitigationManager@@UEAAJPEBG@Z
0x180004270: "protected: long __cdecl CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault>::Check2Grow(int) __ptr64" ?Check2Grow@?$CArray@VDH_SSTRING@@V1@VCAdaptorDefault@@VCPoliciesDefault@@@@IEAAJH@Z
0x180032A90: "REG_EXPAND_SZ" ??_C@_1BM@MODNJEIN@?$AAR?$AAE?$AAG?$AA_?$AAE?$AAX?$AAP?$AAA?$AAN?$AAD?$AA_?$AAS?$AAZ?$AA?$AA@
0x18002F130: "const Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::`vftable'" ??_7?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@6B@
0x180033E60: "ProcessMitigation: Unsupported o" ??_C@_1HO@BJOPIPEA@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAU?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAo@
0x180033280: "ProcessCustomOperation: procName" ??_C@_1EM@JAJKMFFN@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAN?$AAa?$AAm?$AAe@
0x1800358F4: "s" ??_C@_13KHDBCPJB@?$AAs?$AA?$AA@
0x180031EF0: "CheckApplicability: scenario=[%s" ??_C@_1II@BIICHBOD@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAs?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$DN?$AA?$FL?$AA?$CF?$AAs@
0x18002FEB0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18002E130: "__cdecl _chkstk" __chkstk
0x180036358: "CDATA" ??_C@_1M@FAGEMIA@?$AAC?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180033268: "procName" ??_C@_1BC@KIGPDLCE@?$AAp?$AAr?$AAo?$AAc?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180035CF0: "CopyDirectoryFileCallback: Unabl" ??_C@_1JG@OKPHJDPJ@?$AAC?$AAo?$AAp?$AAy?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAF?$AAi?$AAl?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl@
0x180034F90: "WdsCopyFileEx: Failed to strip f" ??_C@_1JO@CONFKOOA@?$AAW?$AAd?$AAs?$AAC?$AAo?$AAp?$AAy?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAp?$AA?5?$AAf@
0x18002FF20: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x18000E92C: "public: __cdecl SH_HMODULE::~SH_HMODULE(void) __ptr64" ??1SH_HMODULE@@QEAA@XZ
0x1800364E0: "UCS-4" ??_C@_1M@EKKNCFBE@?$AAU?$AAC?$AAS?$AA?9?$AA4?$AA?$AA@
0x180031C10: "CMitigationManager::Execute" ??_C@_1DI@BLAGJGFJ@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?$AA@
0x180026690: RtlRawXmlTokenizer_SingleToken
0x180012CE4: CreatePath
0x180036548: g_RGCH_lt
0x18002F9D0: xss_NDATA
0x18002F9B0: xss_CDATA
0x1800319D0: "CMitigationManager::LoadFromModu" ??_C@_1EG@CLJJFPK@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAL?$AAo?$AAa?$AAd?$AAF?$AAr?$AAo?$AAm?$AAM?$AAo?$AAd?$AAu@
0x180035FD8: "]" ??_C@_13OHNMPHJM@?$AA?$FN?$AA?$AA@
0x18001503C: "public: long __cdecl Unattend::ReadUnattendFromBuffer(void * __ptr64,unsigned __int64,struct _UNATTEND_PROCESSING_RESULTS * __ptr64) __ptr64" ?ReadUnattendFromBuffer@Unattend@@QEAAJPEAX_KPEAU_UNATTEND_PROCESSING_RESULTS@@@Z
0x180019390: "public: long __cdecl MicrodomImplementation::CMicrodom::DecodeXmlString(struct _LUTF8_STRING const * __ptr64,class Windows::Auto<struct _LUTF8_STRING> * __ptr64) __ptr64" ?DecodeXmlString@CMicrodom@MicrodomImplementation@@QEAAJPEBU_LUTF8_STRING@@PEAV?$Auto@U_LUTF8_STRING@@@Windows@@@Z
0x18001C1F0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementsByTagName(struct _LUTF8_STRING const * __ptr64,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagName@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJPEBU_LUTF8_STRING@@PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@Windows@@@Z
0x18000FEFC: "public: __cdecl CAutoRevertApplyPrivilegesT<class CEmptyType>::~CAutoRevertApplyPrivilegesT<class CEmptyType>(void) __ptr64" ??1?$CAutoRevertApplyPrivilegesT@VCEmptyType@@@@QEAA@XZ
0x1800102F0: "public: virtual void * __ptr64 __cdecl CUnknownImpl<class IMitigationManagerInternal>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CUnknownImpl@VIMitigationManagerInternal@@@@UEAAPEAXI@Z
0x18002FA30: g_LUTF8_STRING_lt
0x1800098A0: "private: long __cdecl CMitigationManager::LogOperationTime(unsigned short const * __ptr64) __ptr64" ?LogOperationTime@CMitigationManager@@AEAAJPEBG@Z
0x180030F30: "EnterpriseEval" ??_C@_1BO@CGNDOHLA@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAE?$AAv?$AAa?$AAl?$AA?$AA@
0x18002F070: "const CUnknownImpl<class IMitigationManagerInternal>::`vftable'" ??_7?$CUnknownImpl@VIMitigationManagerInternal@@@@6B@
0x180021F88: "public: long __cdecl CMicrodomXmlWalker::HandlePCData(class CXmlCursor * __ptr64) __ptr64" ?HandlePCData@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x180033B98: "Operation" ??_C@_1BE@JJJGIENO@?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180031DE0: "Execute: ReportEventMitigationSu" ??_C@_1GK@NICHIILM@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAu@
0x180015CA0: RtlReallocateLBlob
0x18002FE08: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x1800367E0: "__stdcall _xmm" __xmm@00000000000000070000000000000000
0x18001DFF0: "public: virtual unsigned long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::ReleaseTearoff(void) __ptr64" ?ReleaseTearoff@?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@UEAAKXZ
0x180031CC8: "Mitigation-%s" ??_C@_1BM@PFKOOIAF@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AA?$CF?$AAs?$AA?$AA@
0x18001EC80: "public: virtual long __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x1800360A0: "CMicrodom_Blob" ??_C@_0P@NJPIDCF@CMicrodom_Blob?$AA@
0x18002CD74: "public: long __cdecl CXmlCursor::Initialize(void * __ptr64,unsigned __int64) __ptr64" ?Initialize@CXmlCursor@@QEAAJPEAX_K@Z
0x18002F0F8: "const Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomImplementation::CMicrodom> >::`vftable'{for `Windows::Rtl::IRtlInnerObject'}" ??_7?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@@Rtl@Windows@@6BIRtlInnerObject@12@@
0x180014970: "public: virtual long __cdecl GetStringIter::IteratePathElement(unsigned short const * __ptr64,unsigned short const * __ptr64,class Unattend & __ptr64,class UnattendNode) __ptr64" ?IteratePathElement@GetStringIter@@UEAAJPEBG0AEAVUnattend@@VUnattendNode@@@Z
0x18001159C: WdsRemoveDirectory
0x180036480: "NMTOKENS" ??_C@_1BC@ILONHBHB@?$AAN?$AAM?$AAT?$AAO?$AAK?$AAE?$AAN?$AAS?$AA?$AA@
0x18002FEF0: "__cdecl _imp_CopyFileExW" __imp_CopyFileExW
0x180033948: "security" ??_C@_1BC@PNLDLOL@?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x180036088: "*" ??_C@_01NBENCBCI@?$CK?$AA@
0x18002F970: xss_IDREFS
0x180031008: "ProfessionalWorkstation" ??_C@_1DA@DHEPPAMI@?$AAP?$AAr?$AAo?$AAf?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AAW?$AAo?$AAr?$AAk?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002FE90: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x180030110: "__cdecl _guard_fids_table" __guard_fids_table
0x1800332F0: "ProcessCustomOperation: modulePa" ??_C@_1FA@DBPMPLLI@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAm?$AAo?$AAd?$AAu?$AAl?$AAe?$AAP?$AAa@
0x18002F148: "const Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::`vftable'{for `Windows::Microdom::Rtl::IRtlMicrodom'}" ??_7?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@6BIRtlMicrodom@1Microdom@2@@
0x18002DE58: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x180030040: msvcrt_NULL_THUNK_DATA
0x180036048: "__cdecl GUID_a72b16a7_01e0_49dd_9eb3_f0d75af8d9bd" _GUID_a72b16a7_01e0_49dd_9eb3_f0d75af8d9bd
0x18002F6F8: "struct _LUTF8_STRING const `public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteComment(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Comment,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64'::`6'::CommentEnd" ?CommentEnd@?5??WriteComment@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UComment@567@PEAUIRtlWOFOStream@57@@Z@4U_LUTF8_STRING@@B
0x18002FB70: "__cdecl load_config_used" _load_config_used
0x180034130: "set" ??_C@_17EGGBPMH@?$AAs?$AAe?$AAt?$AA?$AA@
0x180011A30: EnumeratePathEx
0x1800358D8: "<unavailable>" ??_C@_1BM@DCAGJABI@?$AA?$DM?$AAu?$AAn?$AAa?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAl?$AAe?$AA?$DO?$AA?$AA@
0x180034D60: "CMitigationManager::SetTelemetry" ??_C@_1FI@OHPIDNOL@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAS?$AAe?$AAt?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy@
0x18002C460: RtlIndexIntoGrowingList
0x180030720: "CleanupSafeOsImages: Failed to r" ??_C@_1IO@DODKGFKJ@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr@
0x18002428C: "private: long __cdecl CMicrodomBuilder::WriteDoctypeData(struct _LBLOB * __ptr64) __ptr64" ?WriteDoctypeData@CMicrodomBuilder@@AEAAJPEAU_LBLOB@@@Z
0x1800361A8: "__cdecl GUID_31257d4b_3df7_46f9_86c5_1c76711e334e" _GUID_31257d4b_3df7_46f9_86c5_1c76711e334e
0x180023370: "private: long __cdecl CMicrodomBuilder::WriteLocationData(struct _LBLOB * __ptr64) __ptr64" ?WriteLocationData@CMicrodomBuilder@@AEAAJPEAU_LBLOB@@@Z
0x18001B730: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Document,struct Windows::Vector<enum Windows::Microdom::Rtl::Document::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUDocument@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Document@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x180035FD0: "[*]" ??_C@_17NMBDOCJ@?$AA?$FL?$AA?$CK?$AA?$FN?$AA?$AA@
0x180005860: "public: virtual long __cdecl CMitigationManager::LoadFromModule(unsigned short const * __ptr64) __ptr64" ?LoadFromModule@CMitigationManager@@UEAAJPEBG@Z
0x18001E670: "protected: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@MEAAPEAXI@Z
0x1800391E4: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180031650: "INFO" ??_C@_19FILLMKCG@?$AAI?$AAN?$AAF?$AAO?$AA?$AA@
0x18002CD40: "protected: static long __cdecl CXmlCursor::LocalCompareExtents(void * __ptr64,struct _XML_EXTENT const * __ptr64,struct _XML_EXTENT const * __ptr64,enum XML_STRING_COMPARE * __ptr64)" ?LocalCompareExtents@CXmlCursor@@KAJPEAXPEBU_XML_EXTENT@@1PEAW4XML_STRING_COMPARE@@@Z
0x180033460: "CustomTime" ??_C@_1BG@MDGMCNCF@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800304D0: "SOFTWARE\Microsoft\WIMMount\Moun" ??_C@_1FG@PFFGIBIP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAI?$AAM?$AAM?$AAo?$AAu?$AAn?$AAt?$AA?2?$AAM?$AAo?$AAu?$AAn@
0x18001FD20: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteComment(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Comment,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteComment@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UComment@456@PEAUIRtlWOFOStream@46@@Z
0x18003B620: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmghvgfkUnrgrtzgrlmUlyquivUznwGEUhgwzucOlyq@Mitigation" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmghvgfkUnrgrtzgrlmUlyquivUznwGEUhgwzucOlyq@Mitigation
0x180035E10: "CopyDirectoryEx2: Failed to copy" ??_C@_1LM@EFNGOOAI@?$AAC?$AAo?$AAp?$AAy?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAE?$AAx?$AA2?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAp?$AAy@
0x180025740: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CIntermediateStringTableTraits>::CBucketChain::FindOrInsertIfNotPresent<struct _LUTF8_STRING,unsigned long>(class BUCL::HashTable::CTable<class CMicrodomBuilder::CIntermediateStringTableTraits> * __ptr64,struct _LUTF8_STRING const & __ptr64,unsigned long const & __ptr64,unsigned __int64,unsigned long * __ptr64 * __ptr64,bool * __ptr64) __ptr64" ??$FindOrInsertIfNotPresent@U_LUTF8_STRING@@K@CBucketChain@?$CTable@VCIntermediateStringTableTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@PEAV123@AEBU_LUTF8_STRING@@AEBK_KPEAPEAKPEA_N@Z
0x1800030AC: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::DeleteKeyIfExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?DeleteKeyIfExists@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG@Z
0x180034AD0: "SetObjectSecurity: Nothing to do" ??_C@_1EE@NHMBNLIM@?$AAS?$AAe?$AAt?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAN?$AAo?$AAt?$AAh?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAo@
0x180001420: "long __cdecl CleanupSafeOsImages(enum MitigationScenario,unsigned short const * __ptr64,class IDlpDiagnostics * __ptr64)" ?CleanupSafeOsImages@@YAJW4MitigationScenario@@PEBGPEAVIDlpDiagnostics@@@Z
0x180034990: "RegistryTime" ??_C@_1BK@LGNKKHMN@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180017350: RtlDecodeUtf8
0x18000A418: "private: long __cdecl CMitigationManager::ProcessFileOperation(struct _UNATTEND_NODE * __ptr64) __ptr64" ?ProcessFileOperation@CMitigationManager@@AEAAJPEAU_UNATTEND_NODE@@@Z
0x180020CF0: "public: __cdecl BUCL::HashTable::CTable<class MicrodomWriterImplementation::CPrefixTableTraits>::~CTable<class MicrodomWriterImplementation::CPrefixTableTraits>(void) __ptr64" ??1?$CTable@VCPrefixTableTraits@MicrodomWriterImplementation@@@HashTable@BUCL@@QEAA@XZ
0x18001CC80: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementNodeSet(struct Windows::Microdom::Rtl::Element,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Node> > * __ptr64) __ptr64" ?GetElementNodeSet@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEAV?$Auto@U?$Vector@UNode@Rtl@Microdom@Windows@@@Windows@@@6@@Z
0x180025074: "public: void * __ptr64 __cdecl Windows::Rtl::UniformObjectPool<class CMicrodomBuilder::CXmlStreamObject>::PoolCell::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPoolCell@?$UniformObjectPool@VCXmlStreamObject@CMicrodomBuilder@@@Rtl@Windows@@QEAAPEAXI@Z
0x1800308B0: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@GBIPGMCH@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x18001FB30: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteEscapedString(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Vector<struct _LUTF8_STRING const * __ptr64 const> const & __ptr64,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteEscapedString@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@QEBU_LUTF8_STRING@@@6@PEAUIRtlWOFOStream@46@@Z
0x180031670: "ERROR" ??_C@_1M@BJACCECO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x180030008: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180013180: StringCchCopyNExW
0x18002299C: "private: long __cdecl CMicrodomBuilder::AddStringsForElement(class CXmlCursor * __ptr64,struct _XML_EXTENT const & __ptr64,struct _XML_EXTENT const & __ptr64,struct _XML_EXTENT const & __ptr64,struct CMicrodomBuilder::ThreeStringIdPair * __ptr64) __ptr64" ?AddStringsForElement@CMicrodomBuilder@@AEAAJPEAVCXmlCursor@@AEBU_XML_EXTENT@@11PEAUThreeStringIdPair@1@@Z
0x1800322C8: "mobileUpdate" ??_C@_1BK@GEFEGIMH@?$AAm?$AAo?$AAb?$AAi?$AAl?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x180017138: RtlCalculateUtf16StringLengthFromLUtf8String
0x180033780: "ProcessFileOperation: Copying pa" ??_C@_1GG@MEJLMJNF@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAa@
0x180031AA0: "LoadOperationsFromModule: Loadin" ??_C@_1GC@CNBJPIOF@?$AAL?$AAo?$AAa?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAF?$AAr?$AAo?$AAm?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAi?$AAn@
0x180019A9C: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementAttributeNode(unsigned long,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Attribute * __ptr64) __ptr64" ?GetElementAttributeNode@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_LUTF8_STRING@@0PEAUAttribute@Rtl@Microdom@Windows@@@Z
0x18001A8D0: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementById(struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Element * __ptr64) __ptr64" ?GetElementById@CMicrodom@MicrodomImplementation@@QEAAJPEBU_LUTF8_STRING@@PEAUElement@Rtl@Microdom@Windows@@@Z
0x180033140: "ProcessCommandOperation: Launchi" ??_C@_1FG@LHPBAEMD@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAi@
0x1800123D8: DeletePathEx
0x18002FE00: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180031590: "Mitigation-FixupEditionId: Editi" ??_C@_1GI@LHANCMEL@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi@
0x180004E2C: "__cdecl TlgDefineProvider_annotation__Tlgg_hTelProviderProv" _TlgDefineProvider_annotation__Tlgg_hTelProviderProv
0x180031FE0: "CheckApplicability: Version not " ??_C@_1FE@JCAIINFJ@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAn?$AAo?$AAt?$AA?5@
0x18000B284: "private: long __cdecl CMitigationManager::ProcessMitigation(unsigned short const * __ptr64,unsigned long,enum MitigationScenario,struct _UNATTEND_NODE * __ptr64,int * __ptr64) __ptr64" ?ProcessMitigation@CMitigationManager@@AEAAJPEBGKW4MitigationScenario@@PEAU_UNATTEND_NODE@@PEAH@Z
0x1800328C0: "CMitigationManager::GetHostEditi" ??_C@_1EG@HHEHNJMB@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAE?$AAd?$AAi?$AAt?$AAi@
0x180030B40: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@CKHLIDHE@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x180031680: "UNKNOWN" ??_C@_1BA@HABJOAEE@?$AAU?$AAN?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?$AA@
0x1800198A0: "public: long __cdecl MicrodomImplementation::CMicrodom::ExtractChildren(unsigned long) __ptr64" ?ExtractChildren@CMicrodom@MicrodomImplementation@@QEAAJK@Z
0x1800300A0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18001B16C: "public: long __cdecl MicrodomImplementation::CMicrodom::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@CMicrodom@MicrodomImplementation@@QEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@Windows@@@Z
0x180036538: g_RGCH_xmlns
0x18002FD50: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180035090: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180033480: "CMitigationManager::ProcessFileO" ??_C@_1FC@KACJFLCB@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO@
0x18001C070: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Length(struct Windows::Microdom::Rtl::NamedNodeMap,unsigned long * __ptr64) __ptr64" ?Length@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNamedNodeMap@Rtl@Microdom@Windows@@PEAK@Z
0x18001ECB0: "public: virtual void __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::Release(void) __ptr64" ?Release@?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@UEAAXXZ
0x18002F740: "struct _LUTF8_STRING const `public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::WriteComment(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Comment,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64'::`6'::CommentStart" ?CommentStart@?5??WriteComment@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UComment@567@PEAUIRtlWOFOStream@57@@Z@4U_LUTF8_STRING@@B
0x18001968C: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementNodeSet(struct Windows::Microdom::Rtl::Element,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Node> > * __ptr64) __ptr64" ?GetElementNodeSet@CMicrodom@MicrodomImplementation@@QEAAJUElement@Rtl@Microdom@Windows@@PEAV?$Auto@U?$Vector@UNode@Rtl@Microdom@Windows@@@Windows@@@6@@Z
0x180031070: "Professional" ??_C@_1BK@PEBCBJIM@?$AAP?$AAr?$AAo?$AAf?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x180024098: "private: unsigned __int64 __cdecl CMicrodomBuilder::GetDoctypeDataSize(void)const __ptr64" ?GetDoctypeDataSize@CMicrodomBuilder@@AEBA_KXZ
0x180030058: "__cdecl _imp_RtlRaiseStatus" __imp_RtlRaiseStatus
0x180021250: "public: virtual void __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::Release(void) __ptr64" ?Release@?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAXXZ
0x180036410: "PUBLIC" ??_C@_1O@OIBMMMPB@?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AA?$AA@
0x180033860: "ProcessFileOperation: Copying fi" ??_C@_1GG@CPKADHF@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi@
0x18002F130: "const MicrodomWriterImplementation::CMicrodomWriter::`vftable'" ??_7CMicrodomWriter@MicrodomWriterImplementation@@6B@
0x1800151AC: "public: long __cdecl Unattend::GetRootNode(class UnattendNode & __ptr64) __ptr64" ?GetRootNode@Unattend@@QEAAJAEAVUnattendNode@@@Z
0x18001E670: "public: virtual void * __ptr64 __cdecl MicrodomWriterImplementation::CMicrodomWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMicrodomWriter@MicrodomWriterImplementation@@UEAAPEAXI@Z
0x18002FC88: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x180029B8C: RtlXmlGetCurrentLocation
0x180032070: "CheckApplicability: arch=[%s], f" ??_C@_1HC@IKHLBOIL@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAa?$AAr?$AAc?$AAh?$AA?$DN?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?0?$AA?5?$AAf@
0x180031763: "char const `public: class MicrodomImplementation::CMicrodom::CPropertyCacheEntry * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::VectorTraits<class MicrodomImplementation::CMicrodom::CPropertyCacheEntry>,class Windows::Auto<struct Windows::Vector<class MicrodomImplementation::CMicrodom::CPropertyCacheEntry> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$VectorTraits@VCPropertyCacheEntry@CMicrodom@MicrodomImplementation@@@Windows@@V?$Auto@U?$Vector@VCPropertyCacheEntry@CMicrodom@MicrodomImplementation@@@Windows@@@2@@Windows@@QEAAPEAVCPropertyCacheEntry@CMicrodom@MicrodomImplementation@@_K@Z@4DB
0x180036554: g_RGCH_apos
0x180036530: g_RGCH_quot
0x180030610: "$Windows.~BT" ??_C@_1BK@COLEKBNK@?$AA$?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AA?$HO?$AAB?$AAT?$AA?$AA@
0x180031B08: "XML" ??_C@_17HOBKDGNC@?$AAX?$AAM?$AAL?$AA?$AA@
0x180002D64: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::EnumerateSubkeys(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault> * __ptr64)" ?EnumerateSubkeys@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBGPEAV?$CArray@VDH_SSTRING@@V1@VCAdaptorDefault@@VCPoliciesDefault@@@@@Z
0x180033210: "CMitigationManager::ProcessCusto" ??_C@_1FG@LMPBHCBF@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo@
0x180036540: g_RGCH__eq_
0x1800249FC: "public: __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CUlongToAttdefsTraits>::~CTable<class CMicrodomBuilder::CUlongToAttdefsTraits>(void) __ptr64" ??1?$CTable@VCUlongToAttdefsTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAA@XZ
0x18002181C: "private: long __cdecl CMicrodomBuilder::ProduceStringTable(struct _LBLOB * __ptr64)const __ptr64" ?ProduceStringTable@CMicrodomBuilder@@AEBAJPEAU_LBLOB@@@Z
0x180030098: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18002DF30: "__cdecl purecall" _purecall
0x18002FD18: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800260A0: RtlXmlDefaultSpecialStringCompare
0x18002D958: "__cdecl _std_terminate" __std_terminate
0x180018250: "public: static void __cdecl Windows::AutoNewPtr<class CMicrodomUpdateContext>::DeleteInstance(class CMicrodomUpdateContext * __ptr64)" ?DeleteInstance@?$AutoNewPtr@VCMicrodomUpdateContext@@@Windows@@SAXPEAVCMicrodomUpdateContext@@@Z
0x180004FB8: StringCchCopyNW
0x180031628: "RtlNtStatusToDosError" ??_C@_0BG@NFNCIOML@RtlNtStatusToDosError?$AA@
0x18001E880: "bool __cdecl Windows::StringUtil::TrySplitStringOnFirstAsciiChar<struct _LUTF8_STRING>(struct _LUTF8_STRING const & __ptr64,char,struct _LUTF8_STRING * __ptr64,struct _LUTF8_STRING * __ptr64)" ??$TrySplitStringOnFirstAsciiChar@U_LUTF8_STRING@@@StringUtil@Windows@@YA_NAEBU_LUTF8_STRING@@DPEAU2@1@Z
0x18000EA88: "public: __cdecl SH_HANDLE::~SH_HANDLE(void) __ptr64" ??1SH_HANDLE@@QEAA@XZ
0x180015B04: "public: long __cdecl Unattend::VQueryPathGetStartingFrom(class UnattendNode,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,class UnattendNode * __ptr64,int,char * __ptr64) __ptr64" ?VQueryPathGetStartingFrom@Unattend@@QEAAJVUnattendNode@@PEBG1PEAPEAGPEAKPEAV2@HPEAD@Z
0x180013A44: "long __cdecl NextPathElement(unsigned short const * __ptr64 & __ptr64,unsigned short * __ptr64 & __ptr64)" ?NextPathElement@@YAJAEAPEBGAEAPEAG@Z
0x180016F54: RtlAppendUcsCharacterToLUtf8String
0x18002DF3C: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x180035FF0: "__cdecl GUID_ace9df29_7c04_4530_b51b_dcaf551e275c" _GUID_ace9df29_7c04_4530_b51b_dcaf551e275c
0x18001EAC8: "public: long __cdecl Windows::Rtl::CRtlObjectTypeDescription<class MicrodomImplementation::CMicrodom>::CreateInstance<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff,struct MicrodomImplementation::MdCreateParams,struct Windows::Microdom::Rtl::IRtlMicrodom>(struct MicrodomImplementation::MdCreateParams const & __ptr64,class Windows::Auto<struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64> * __ptr64) __ptr64" ??$CreateInstance@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UMdCreateParams@2@UIRtlMicrodom@Rtl@Microdom@Windows@@@?$CRtlObjectTypeDescription@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@QEAAJAEBUMdCreateParams@MicrodomImplementation@@PEAV?$Auto@PEAUIRtlMicrodom@Rtl@Microdom@Windows@@@2@@Z
0x18001BB40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18002FE20: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18002E0D6: memcmp
0x18001B390: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::CharacterData,struct Windows::Microdom::Rtl::Text * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUCharacterData@Rtl@Microdom@Windows@@PEAUText@456@@Z
0x18002FF60: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180031BA0: "CMitigationManager::LoadFromXml" ??_C@_1EA@JKLIEDIK@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAL?$AAo?$AAa?$AAd?$AAF?$AAr?$AAo?$AAm?$AAX?$AAm?$AAl?$AA?$AA@
0x180017A60: RtlEncodeUtf8
0x180013C8C: "long __cdecl FreeStringArray(unsigned short * __ptr64 * __ptr64,unsigned long)" ?FreeStringArray@@YAJPEAPEAGK@Z
0x18001CAD0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::HasAttributeNs(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool * __ptr64) __ptr64" ?HasAttributeNs@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEA_N@Z
0x18001E950: "public: long __cdecl BUCL::HashTable::CTable<class MicrodomImplementation::CEntityTableTraits>::Insert<struct _LUTF8_STRING const * __ptr64,struct _MICRODOM_DOCTYPE_NODE_ENTITY const * __ptr64>(struct _LUTF8_STRING const * __ptr64 const & __ptr64,struct _MICRODOM_DOCTYPE_NODE_ENTITY const * __ptr64 const & __ptr64) __ptr64" ??$Insert@PEBU_LUTF8_STRING@@PEBU_MICRODOM_DOCTYPE_NODE_ENTITY@@@?$CTable@VCEntityTableTraits@MicrodomImplementation@@@HashTable@BUCL@@QEAAJAEBQEBU_LUTF8_STRING@@AEBQEBU_MICRODOM_DOCTYPE_NODE_ENTITY@@@Z
0x180031763: "char const `public: struct Windows::Microdom::Rtl::Node * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::Microdom::MicrodomVectorTraits<struct Windows::Microdom::Rtl::Node>,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Node> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$MicrodomVectorTraits@UNode@Rtl@Microdom@Windows@@@Microdom@Windows@@V?$Auto@U?$Vector@UNode@Rtl@Microdom@Windows@@@Windows@@@3@@Windows@@QEAAPEAUNode@Rtl@Microdom@3@_K@Z@4DB
0x18000EC70: "public: virtual unsigned long __cdecl CUnknownImpl<class IMitigationManagerInternal>::Release(void) __ptr64" ?Release@?$CUnknownImpl@VIMitigationManagerInternal@@@@UEAAKXZ
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x18001E5D8: "public: struct Windows::Microdom::Rtl::Element * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::Microdom::MicrodomVectorTraits<struct Windows::Microdom::Rtl::Element>,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > >::Allocate(unsigned __int64) __ptr64" ?Allocate@?$AutoVectorBase@V?$MicrodomVectorTraits@UElement@Rtl@Microdom@Windows@@@Microdom@Windows@@V?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@3@@Windows@@QEAAPEAUElement@Rtl@Microdom@2@_K@Z
0x180032220: "CMitigationManager::CheckRegKeyE" ??_C@_1EM@PKHNLMOF@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAC?$AAh?$AAe?$AAc?$AAk?$AAR?$AAe?$AAg?$AAK?$AAe?$AAy?$AAE@
0x180009494: "private: long __cdecl CMitigationManager::GetSystemVersionString(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetSystemVersionString@CMitigationManager@@AEAAJPEAPEAG@Z
0x180031763: "char const `public: class MicrodomImplementation::CDomPositionCache::CPositionSlot * __ptr64 __cdecl Windows::AutoVectorBase<class Windows::VectorTraits<class MicrodomImplementation::CDomPositionCache::CPositionSlot>,class Windows::Auto<struct Windows::Vector<class MicrodomImplementation::CDomPositionCache::CPositionSlot> > >::Allocate(unsigned __int64) __ptr64'::`12'::s_Dummy" ?s_Dummy@?M@??Allocate@?$AutoVectorBase@V?$VectorTraits@VCPositionSlot@CDomPositionCache@MicrodomImplementation@@@Windows@@V?$Auto@U?$Vector@VCPositionSlot@CDomPositionCache@MicrodomImplementation@@@Windows@@@2@@Windows@@QEAAPEAVCPositionSlot@CDomPositionCache@MicrodomImplementation@@_K@Z@4DB
0x180034600: "ProcessRegistryOperation: Writin" ??_C@_1HI@MBLLLLFN@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAi?$AAn@
0x180031F80: "CheckApplicability: Scenario doe" ??_C@_1FK@GICKBHLG@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?5?$AAd?$AAo?$AAe@
0x180032630: "CMitigationManager::ExecuteProce" ??_C@_1EG@JAEGKDOG@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe@
0x18002FCC8: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18002CF14: "public: long __cdecl CXmlCursor::DecodeExtent(struct _XML_EXTENT const & __ptr64,class Windows::Auto<struct _LUTF8_STRING> * __ptr64,struct _LUTF8_STRING * __ptr64) __ptr64" ?DecodeExtent@CXmlCursor@@QEAAJAEBU_XML_EXTENT@@PEAV?$Auto@U_LUTF8_STRING@@@Windows@@PEAU_LUTF8_STRING@@@Z
0x180021E3C: "public: long __cdecl CMicrodomXmlWalker::HandleCData(class CXmlCursor * __ptr64) __ptr64" ?HandleCData@CMicrodomXmlWalker@@QEAAJPEAVCXmlCursor@@@Z
0x180032EF0: "CMitigationManager::LaunchProces" ??_C@_1EE@PAPIPCAN@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs@
0x180031CB8: "name" ??_C@_19HHIIBINK@?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x180022944: "private: long __cdecl CMicrodomBuilder::DecodeAndAddString(class CXmlCursor * __ptr64,struct _XML_EXTENT const & __ptr64,unsigned long * __ptr64) __ptr64" ?DecodeAndAddString@CMicrodomBuilder@@AEAAJPEAVCXmlCursor@@AEBU_XML_EXTENT@@PEAK@Z
0x180017FB0: RtlGetEncodingSizeUtf16
0x180019A20: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementAttributeValue(unsigned long,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetElementAttributeValue@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_LUTF8_STRING@@0PEAPEBU3@@Z
0x18002FEE0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180030BC0: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@NKBDDOHA@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x1800185F0: "public: virtual __cdecl MicrodomImplementation::CMicrodom::~CMicrodom(void) __ptr64" ??1CMicrodom@MicrodomImplementation@@UEAA@XZ
0x180036160: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::CharacterData,struct Windows::Vector<enum Windows::Microdom::Rtl::CharacterData::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUCharacterData@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@CharacterData@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x18002FCF8: "__cdecl _imp_RegEnumKeyW" __imp_RegEnumKeyW
0x18003B6B0: "class Windows::Rtl::CRtlOneShotTypeDescriptionInit<class MicrodomWriterImplementation::CMicrodomWriter> MicrodomWriterImplementation::g_pMicrodomWriterTypeDescription" ?g_pMicrodomWriterTypeDescription@MicrodomWriterImplementation@@3V?$CRtlOneShotTypeDescriptionInit@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@A
0x18001DFF0: "public: virtual unsigned long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::ReleaseTearoff(void) __ptr64" ?ReleaseTearoff@?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAKXZ
0x180031090: "ProfessionalE" ??_C@_1BM@FPJHCDJK@?$AAP?$AAr?$AAo?$AAf?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AAE?$AA?$AA@
0x1800035C4: "private: static long __cdecl CMitiLogT<class CEmptyType>::MitiLogString(enum MITI_LOGLEVEL,unsigned short const * __ptr64)" ?MitiLogString@?$CMitiLogT@VCEmptyType@@@@CAJW4MITI_LOGLEVEL@@PEBG@Z
0x18001D6A0: RtlCreateMicrodom
0x180036574: g_RGCH__colon_
0x1800273D0: RtlRawXmlTokenizer_GatherUntilOneOrOther
0x1800340A0: "ProcessRegistryOperation: Key pa" ??_C@_1IM@PBOMDKDK@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAp?$AAa@
0x18001F090: "public: long __cdecl MicrodomWriterImplementation::CMicrodomWriter::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@CMicrodomWriter@MicrodomWriterImplementation@@QEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@Windows@@@Z
0x180010098: "public: static long __cdecl CStringConvertT<unsigned long>::W2A(unsigned short const * __ptr64,unsigned long,char * __ptr64 * __ptr64)" ?W2A@?$CStringConvertT@K@@SAJPEBGKPEAPEAD@Z
0x1800305A0: "CleanupSafeOsImages: Mounted ima" ??_C@_1FM@OGEBAONN@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAM?$AAo?$AAu?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAi?$AAm?$AAa@
0x1800303F8: "EtwEventUnregister" ??_C@_0BD@JDHMJNFM@EtwEventUnregister?$AA@
0x1800190F0: "public: virtual void * __ptr64 __cdecl MicrodomImplementation::CMicrodom::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMicrodom@MicrodomImplementation@@UEAAPEAXI@Z
0x18002F980: xss_IMPLIED
0x180031210: "FixupEditionId: Registry Edition" ??_C@_1FI@PJMAKFOP@?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn@
0x180033D50: "ProcessMitigation: Processing co" ??_C@_1HO@OEIIJCGJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo@
0x18002F110: "const MicrodomImplementation::CMicrodom::`vftable'" ??_7CMicrodom@MicrodomImplementation@@6B@
0x18002C5BC: RtlNsInsertNamespaceAlias
0x180035180: "DeleteFileEx: Unable to get full" ??_C@_1HO@MMJLMIKH@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAf?$AAu?$AAl?$AAl@
0x180030010: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800306A0: "CleanupSafeOsImages: Removing Sa" ??_C@_1HM@MGCPMICD@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5?$AAR?$AAe?$AAm?$AAo?$AAv?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAa@
0x180020E04: "public: long __cdecl BUCL::HashTable::CTable<class MicrodomWriterImplementation::CPrefixTableTraits>::FindOrInsertIfNotPresent<struct _LUTF8_STRING const * __ptr64,bool>(struct _LUTF8_STRING const * __ptr64 const & __ptr64,bool const & __ptr64,bool * __ptr64 * __ptr64,bool * __ptr64) __ptr64" ??$FindOrInsertIfNotPresent@PEBU_LUTF8_STRING@@_N@?$CTable@VCPrefixTableTraits@MicrodomWriterImplementation@@@HashTable@BUCL@@QEAAJAEBQEBU_LUTF8_STRING@@AEB_NPEAPEA_NPEA_N@Z
0x18001B300: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetDocument(struct Windows::Microdom::Rtl::Document * __ptr64) __ptr64" ?GetDocument@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJPEAUDocument@Rtl@Microdom@Windows@@@Z
0x1800300B8: ntdll_NULL_THUNK_DATA
0x18002FFD0: "__cdecl _imp_memcpy" __imp_memcpy
0x18002FB20: g_LUTF8_STRING__semi_
0x18003607C: "id" ??_C@_02EGCJHIOB@id?$AA@
0x18002FC90: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x1800348A0: "ProcessRegistryOperation: Deleti" ??_C@_1GE@KPHGOHJE@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi@
0x18002C260: RtlpFindChunkForElementIndex
0x180014900: "public: virtual void __cdecl UnattendXmlErrorHandler::XmlParseError(unsigned long,unsigned long,unsigned long,long,struct _LUTF8_STRING const & __ptr64) __ptr64" ?XmlParseError@UnattendXmlErrorHandler@@UEAAXKKKJAEBU_LUTF8_STRING@@@Z
0x18002F2B0: "const Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::`vftable'{for `Windows::Rtl::IRtlInnerObject'}" ??_7?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@6BIRtlInnerObject@12@@
0x180030F00: "Enterprise" ??_C@_1BG@PCCIFCMK@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AA?$AA@
0x180003CE0: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x18002F848: xss_encoding
0x1800268A8: RtlRawXmlTokenizer_GatherWhitespace
0x1800047BC: "public: static long __cdecl CImmutableStringsExT<unsigned short,class CImmutableStringsPolicyDefault>::FormatV(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?FormatV@?$CImmutableStringsExT@GVCImmutableStringsPolicyDefault@@@@SAJPEAPEAGPEBGPEAD@Z
0x180036080: "Id" ??_C@_02HOGEDOAB@Id?$AA@
0x180009E48: "private: long __cdecl CMitigationManager::ProcessCustomOperation(enum MitigationScenario,struct _UNATTEND_NODE * __ptr64) __ptr64" ?ProcessCustomOperation@CMitigationManager@@AEAAJW4MitigationScenario@@PEAU_UNATTEND_NODE@@@Z
0x18001E670: "protected: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@MEAAPEAXI@Z
0x180020B5C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::CVector<struct MicrodomWriterImplementation::WalkSlot,class BUCL::Rtl::CCallDisposition>::Resize(unsigned __int64) __ptr64" ?Resize@?$CVector@UWalkSlot@MicrodomWriterImplementation@@VCCallDisposition@Rtl@BUCL@@@BUCL@@QEAA?AVCCallDisposition@Rtl@2@_K@Z
0x180011104: DeleteFileEx2
0x18002FF78: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18003B078: "__cdecl _security_cookie" __security_cookie
0x1800192A8: "long __cdecl MicrodomImplementation::InsertIntoBuffer(struct _LUTF8_STRING const & __ptr64,struct _LUTF8_STRING * __ptr64)" ?InsertIntoBuffer@MicrodomImplementation@@YAJAEBU_LUTF8_STRING@@PEAU2@@Z
0x18002FD00: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180021220: "public: virtual long __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x18001B47C: "public: long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetPropertiesSetup(unsigned long,struct Windows::Vector<unsigned long const> const & __ptr64,struct Windows::Vector<unsigned long const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetPropertiesSetup@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@QEAAJKAEBU?$Vector@$$CBK@Windows@@0AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@4@@Z
0x18002E130: "__cdecl alloca_probe" _alloca_probe
0x1800324F8: "desktopSetupDynamicUpdate" ??_C@_1DE@PIGJGIDC@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAe?$AAt?$AAu?$AAp?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x180031E50: "CMitigationManager::CheckApplica" ??_C@_1EO@JOADAPDM@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18002FB38: g_LUTF8_STRING__space_
0x1800362F8: "http://www.w3.org/2000/xmlns/" ??_C@_0BO@GBJIDPIB@http?3?1?1www?4w3?4org?12000?1xmlns?1?$AA@
0x18002FEA8: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x180026F04: RtlRawXmlTokenizer_GatherIdentifier
0x18001EE6C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class MicrodomWriterImplementation::CPrefixTableTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCPrefixTableTraits@MicrodomWriterImplementation@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x180032470: "desktopExportRepository" ??_C@_1DA@DDLPOALC@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAE?$AAx?$AAp?$AAo?$AAr?$AAt?$AAR?$AAe?$AAp?$AAo?$AAs?$AAi?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x1800309C0: "Mitigation-CleanupSafeOsImages: " ??_C@_1HI@MLFODHIK@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAa?$AAf?$AAe?$AAO?$AAs?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?3?$AA?5@
0x1800318D8: "CMitigationManager::Initialize" ??_C@_1DO@ILPDCKLC@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x18002FF48: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x180030E70: "CoreCountrySpecific" ??_C@_1CI@PLGBPGLJ@?$AAC?$AAo?$AAr?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAr?$AAy?$AAS?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAc?$AA?$AA@
0x18002FDD0: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x18002FE50: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800335E0: "ProcessFileOperation: Deleting p" ??_C@_1FI@KOHMOMPJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAp@
0x180003A88: "private: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::DeleteKeyRecursively(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?DeleteKeyRecursively@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@CAJPEAUHKEY__@@PEBG@Z
0x18002FE70: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800364B0: "IMPLIED" ??_C@_1BA@NDMOPLHF@?$AAI?$AAM?$AAP?$AAL?$AAI?$AAE?$AAD?$AA?$AA@
0x1800364F0: "UCS-2" ??_C@_1M@GPMGHKMI@?$AAU?$AAC?$AAS?$AA?9?$AA2?$AA?$AA@
0x18000BF94: "private: long __cdecl CMitigationManager::ProcessRegistryOperation(struct _UNATTEND_NODE * __ptr64) __ptr64" ?ProcessRegistryOperation@CMitigationManager@@AEAAJPEAU_UNATTEND_NODE@@@Z
0x1800226E8: "public: long __cdecl CMicrodomBuilder::ConstructAndWriteMicrodom(unsigned long,class Windows::Auto<struct _LBLOB> * __ptr64) __ptr64" ?ConstructAndWriteMicrodom@CMicrodomBuilder@@QEAAJKPEAV?$Auto@U_LBLOB@@@Windows@@@Z
0x18002F990: xss_ENTITIES
0x180033098: "cmdLine" ??_C@_1BA@GGJKBAHP@?$AAc?$AAm?$AAd?$AAL?$AAi?$AAn?$AAe?$AA?$AA@
0x18001F8E0: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::EmitAttribute(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Attribute,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?EmitAttribute@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UAttribute@456@PEAUIRtlWOFOStream@46@@Z
0x1800320F0: "CheckApplicability: Architecture" ??_C@_1GC@HEKCKNAO@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAA?$AAr?$AAc?$AAh?$AAi?$AAt?$AAe?$AAc?$AAt?$AAu?$AAr?$AAe@
0x18002FDB0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18001E7DC: "long __cdecl Windows::StringUtil::Rtl::AreStringsEqualByOrdinal<struct _LUTF8_STRING,struct _LUTF8_STRING>(struct _LUTF8_STRING const & __ptr64,struct _LUTF8_STRING const & __ptr64,bool * __ptr64)" ??$AreStringsEqualByOrdinal@U_LUTF8_STRING@@U1@@Rtl@StringUtil@Windows@@YAJAEBU_LUTF8_STRING@@0PEA_N@Z
0x1800363C8: "ATTLIST" ??_C@_1BA@OOKJCKHA@?$AAA?$AAT?$AAT?$AAL?$AAI?$AAS?$AAT?$AA?$AA@
0x18002FB50: g_LUTF8_STRING__gt_
0x18000E4EC: "private: void __cdecl CMitigationManager::SetOperationBeginTime(void) __ptr64" ?SetOperationBeginTime@CMitigationManager@@AEAAXXZ
0x180032380: "desktopDriverUpdate" ??_C@_1CI@IEJOJAD@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x18002FB08: g_LUTF8_STRING__lt_
0x18002FC98: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18003B770: "__cdecl _onexitbegin" __onexitbegin
0x180032C40: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x18000E82C: "private: long __cdecl CMitigationManager::SetTelemetryEventPrefix(unsigned short const * __ptr64) __ptr64" ?SetTelemetryEventPrefix@CMitigationManager@@AEAAJPEBG@Z
0x180035900: "DeletePathEngine: Hit %d failure" ??_C@_1ME@INMDKBFA@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?3?$AA?5?$AAH?$AAi?$AAt?$AA?5?$AA?$CF?$AAd?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe@
0x180027948: RtlXmlTokenizer_ExpectIdentifier
0x1800332D0: "modulePath" ??_C@_1BG@CAKHGMPE@?$AAm?$AAo?$AAd?$AAu?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180016E98: RtlAppendLUtf8StringToLUtf8String
0x18001E13C: "public: __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CFourStringIdTable<unsigned short>::CTableTraits>::~CTable<class CMicrodomBuilder::CFourStringIdTable<unsigned short>::CTableTraits>(void) __ptr64" ??1?$CTable@VCTableTraits@?$CFourStringIdTable@G@CMicrodomBuilder@@@HashTable@BUCL@@QEAA@XZ
0x18002FAC0: g_LUTF8_STRING__dquo_
0x18000F50C: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::DeleteValueIfExists(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?DeleteValueIfExists@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG1@Z
0x180012940: CopyDirectoryEx2
0x180030018: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180008FD4: "private: long __cdecl CMitigationManager::GetSystemVersionFromString(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSystemVersionFromString@CMitigationManager@@AEAAJPEBGPEAK111@Z
0x180010500: "private: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::GetValueInformation(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64,unsigned long * __ptr64)" ?GetValueInformation@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@CAJPEAUHKEY__@@PEBG1PEAHPEAK@Z
0x180021220: "public: virtual long __cdecl Windows::Rtl::CRtlTearoffObject<class Windows::Rtl::CRtlInnerObjectTearoffImpl<class MicrodomWriterImplementation::CMicrodomWriter> >::CreateInterface(struct _GUID const & __ptr64,class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInterface@?$CRtlTearoffObject@V?$CRtlInnerObjectTearoffImpl@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@@Rtl@Windows@@UEAAJAEBU_GUID@@PEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x18002FD78: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180036058: "#comment" ??_C@_08FBDKDMPC@?$CDcomment?$AA@
0x180030EA8: "CoreSingleLanguage" ??_C@_1CG@MGMLFDPM@?$AAC?$AAo?$AAr?$AAe?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
0x180025650: "private: long __cdecl CMicrodomBuilder::WriteDomElementIndicies<unsigned short>(void * __ptr64,unsigned __int64 & __ptr64,class CMicrodomBuilder::CXmlStreamObject const * __ptr64) __ptr64" ??$WriteDomElementIndicies@G@CMicrodomBuilder@@AEAAJPEAXAEA_KPEBVCXmlStreamObject@0@@Z
0x1800391BC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18003B650: g_WdsLibLog
0x180004B40: "public: long __cdecl CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault>::SetSize(int) __ptr64" ?SetSize@?$CArray@VDH_SSTRING@@V1@VCAdaptorDefault@@VCPoliciesDefault@@@@QEAAJH@Z
0x180033DE0: "ProcessMitigation: Processing cu" ??_C@_1HM@NGOGFJGE@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAu@
0x18002FCF0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18001BBA0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetXml(struct Windows::Microdom::Rtl::Node,class Windows::Auto<struct _LUTF8_STRING> * __ptr64) __ptr64" ?GetXml@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAV?$Auto@U_LUTF8_STRING@@@6@@Z
0x180019C18: "public: long __cdecl MicrodomImplementation::CMicrodom::GetNodeValue(unsigned long,struct _MICRODOM_DOM_NODE_HEADER const * __ptr64,struct _LUTF8_STRING const * __ptr64 * __ptr64) __ptr64" ?GetNodeValue@CMicrodom@MicrodomImplementation@@QEAAJKPEBU_MICRODOM_DOM_NODE_HEADER@@PEAPEBU_LUTF8_STRING@@@Z
0x18002DA74: "__cdecl _security_init_cookie" __security_init_cookie
0x180032440: "desktopEnumerateEdition" ??_C@_1DA@GIHPIGDP@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180030420: "EtwEventWrite" ??_C@_0O@MJPOMPOC@EtwEventWrite?$AA@
0x180035BC0: "CopyDirectoryDirCallback: The co" ??_C@_1HK@EOGBLBJK@?$AAC?$AAo?$AAp?$AAy?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAD?$AAi?$AAr?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?3?$AA?5?$AAT?$AAh?$AAe?$AA?5?$AAc?$AAo@
0x180033EE0: "ProcessMitigation: Elapsed time=" ??_C@_1FA@BKPLPPCO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAE?$AAl?$AAa?$AAp?$AAs?$AAe?$AAd?$AA?5?$AAt?$AAi?$AAm?$AAe?$AA?$DN@
0x180035F40: "CreatePath: Unable to create par" ??_C@_1IG@HCLNMHAA@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAp?$AAa?$AAr@
0x1800315F8: "%s(%d): Result = 0x%X" ??_C@_1CM@IECDFOMN@?$AA?$CF?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?3?$AA?5?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAX?$AA?$AA@
0x1800329D0: "GetHostEdition: Host family=[%s]" ??_C@_1EE@CIHEJCNK@?$AAG?$AAe?$AAt?$AAH?$AAo?$AAs?$AAt?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?5?$AAf?$AAa?$AAm?$AAi?$AAl?$AAy?$AA?$DN?$AA?$FL?$AA?$CF?$AAs?$AA?$FN@
0x180032570: "CheckScenario: Execution scenari" ??_C@_1HA@CIMBIENM@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?3?$AA?5?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAs?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi@
0x180030930: "no" ??_C@_15BPIGNHCD@?$AAn?$AAo?$AA?$AA@
0x180020FDC: "public: long __cdecl Windows::Rtl::CRtlOneShotTypeDescriptionInit<class MicrodomWriterImplementation::CMicrodomWriter>::CreateInstance<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter,int,struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter>(int const & __ptr64,class Windows::Auto<struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64> * __ptr64) __ptr64" ??$CreateInstance@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@HUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@@?$CRtlOneShotTypeDescriptionInit@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@QEAAJAEBHPEAV?$Auto@PEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@@2@@Z
0x18001EE20: "public: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlTearoffObject<class MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRtlTearoffObject@VCMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@@Rtl@Windows@@UEAAPEAXI@Z
0x180010994: LibLog
0x1800350E0: "DeleteFileEx: Unable to allocate" ??_C@_1JG@NHOALAOF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAE?$AAx?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAe@
0x180026380: RtlXmlDefaultNextCharacter_UCS4LE
0x180020158: "long __cdecl MicrodomWriterImplementation::OpenElement(struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64,struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64,bool)" ?OpenElement@MicrodomWriterImplementation@@YAJPEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@PEAUIRtlMicrodom@345@UElement@345@PEAUIRtlWOFOStream@35@_N@Z
0x18002F018: "const CMitigationManager::`vftable'" ??_7CMitigationManager@@6B@
0x18000F608: "public: static long __cdecl CRegUtilT<class CEmptyType,struct CRegType,0,1>::CreateOrOpenKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long)" ?CreateOrOpenKey@?$CRegUtilT@VCEmptyType@@UCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBGK1PEAPEAU2@K@Z
0x180039194: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800317E0: "MitigationManager: Initializing " ??_C@_1FK@LMBADLCJ@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?5?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAi?$AAn?$AAg?$AA?5@
0x18002FF90: "__cdecl _imp_memmove" __imp_memmove
0x1800212C0: "public: long __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomWriterImplementation::CMicrodomWriter>::CreateInnerObject(class Windows::Auto<struct Windows::Rtl::IRtlObject * __ptr64> * __ptr64) __ptr64" ?CreateInnerObject@?$CRtlObjectBase@VCMicrodomWriter@MicrodomWriterImplementation@@@Rtl@Windows@@QEAAJPEAV?$Auto@PEAUIRtlObject@Rtl@Windows@@@3@@Z
0x18001D2F8: "public: long __cdecl MicrodomImplementation::CDomLayoutCache::FindObject(unsigned long,struct _MICRODOM_DOM_NODE_HEADER const * __ptr64 & __ptr64) __ptr64" ?FindObject@CDomLayoutCache@MicrodomImplementation@@QEAAJKAEAPEBU_MICRODOM_DOM_NODE_HEADER@@@Z
0x18001BEC0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetNamedItemNs(struct Windows::Microdom::Rtl::NamedNodeMap,struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,struct Windows::Microdom::Rtl::Node * __ptr64) __ptr64" ?GetNamedItemNs@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNamedNodeMap@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@1PEAUNode@456@@Z
0x180032680: "CMitigationManager::ExecuteProce" ??_C@_1FA@PJCFAHDB@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe@
0x180018020: RtlGetEncodingSizeUcs4
0x180017FE0: RtlGetEncodingSizeUtf32
0x180017EE0: RtlEncodeUcs4BE
0x1800367F0: "__stdcall _xmm" __xmm@00000000000000230000000000000000
0x180017D70: RtlEncodeUcs2BE
0x1800362B0: "?>" ??_C@_02GOEMJPDN@?$DP?$DO?$AA@
0x18003655C: g_RGCH__dquo_
0x180033410: "ProcessCustomOperation: Calling " ??_C@_1FA@MHLAFMG@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAC?$AAa?$AAl?$AAl?$AAi?$AAn?$AAg?$AA?5@
0x180026000: RtlXmlDefaultCompareStrings
0x18003B730: "private: static class CEtwProviderT<void> CChkMacroETWLoggerT<class CEmptyType>::g_chkMacroETWProvider" ?g_chkMacroETWProvider@?$CChkMacroETWLoggerT@VCEmptyType@@@@0V?$CEtwProviderT@X@@A
0x18001D578: "public: long __cdecl MicrodomImplementation::CStringpoolCache::AttachToStringPool(struct _MICRODOM_STRINGPOOL_HEADER const * __ptr64) __ptr64" ?AttachToStringPool@CStringpoolCache@MicrodomImplementation@@QEAAJPEBU_MICRODOM_STRINGPOOL_HEADER@@@Z
0x18001B8E0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetXml(struct Windows::Microdom::Rtl::Node,class Windows::Auto<struct _LUNICODE_STRING> * __ptr64) __ptr64" ?GetXml@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAV?$Auto@U_LUNICODE_STRING@@@6@@Z
0x180005050: StrDupe
0x180003834: "public: static long __cdecl CRegUtilT<unsigned short * __ptr64,struct CRegType,0,1>::GetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?GetValue@?$CRegUtilT@PEAGUCRegType@@$0A@$00@@SAJPEAUHKEY__@@PEBG1PEAPEAGPEAK@Z
0x180004AE8: "public: static long __cdecl CSafeMath<unsigned long,0>::SafeAdd(unsigned long,unsigned long,unsigned long * __ptr64)" ?SafeAdd@?$CSafeMath@K$0A@@@SAJKKPEAK@Z
0x18002FFF8: "__cdecl _imp_malloc" __imp_malloc
0x1800326D0: "CMitigationManager::GetAttribute" ??_C@_1FC@LPHNPOOD@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe@
0x18001B450: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Document * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUDocument@456@@Z
0x18002FFA0: "__cdecl _imp__purecall" __imp__purecall
0x18002FD30: ADVAPI32_NULL_THUNK_DATA
0x1800316D0: "MITILOG: [0x%X] [%s] %s " ??_C@_1DE@DPFEBAEF@?$AAM?$AAI?$AAT?$AAI?$AAL?$AAO?$AAG?$AA?3?$AA?5?$AA?$FL?$AA0?$AAx?$AA?$CF?$AAX?$AA?$FN?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AN?$AA?$AA@
0x18002F2C8: "const Windows::Rtl::CRtlTearoffObject<class MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter>::`vftable'{for `Windows::Microdom::Rtl::IRtlMicrodomXmlWriter'}" ??_7?$CRtlTearoffObject@VCMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@@Rtl@Windows@@6BIRtlMicrodomXmlWriter@1Microdom@2@@
0x18001A630: "public: long __cdecl MicrodomImplementation::CMicrodom::GetElementsByTagName(struct _LUTF8_STRING const * __ptr64,struct _LUTF8_STRING const * __ptr64,bool,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagName@CMicrodom@MicrodomImplementation@@QEAAJPEBU_LUTF8_STRING@@0_NPEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@Windows@@@Z
0x1800190F0: "public: virtual void * __ptr64 __cdecl MicrodomImplementation::CMicrodom::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMicrodom@MicrodomImplementation@@UEAAPEAXI@Z
0x18002FCD8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18003B720: g_NTSTATUS_to_break_on
0x180004378: "public: long __cdecl CArray<class DH_SSTRING,class DH_SSTRING,class CAdaptorDefault,class CPoliciesDefault>::Append(class DH_SSTRING const & __ptr64) __ptr64" ?Append@?$CArray@VDH_SSTRING@@V1@VCAdaptorDefault@@VCPoliciesDefault@@@@QEAAJAEBVDH_SSTRING@@@Z
0x18002A1F8: RtlXmlInitializeNextLogicalThing
0x1800044B4: "long __cdecl StringCchVPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,char * __ptr64)" ?StringCchVPrintfW@@YAJPEAG_KPEBGPEAD@Z
0x180031950: "LoadOperationsFromModule: Loadin" ??_C@_1HE@BKLMDOAJ@?$AAL?$AAo?$AAa?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAF?$AAr?$AAo?$AAm?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAi?$AAn@
0x18002FD90: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180030078: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x1800104E0: "public: __cdecl CFSAutoDisableRedirectionT<class CEmptyType>::~CFSAutoDisableRedirectionT<class CEmptyType>(void) __ptr64" ??1?$CFSAutoDisableRedirectionT@VCEmptyType@@@@QEAA@XZ
0x180030068: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x18002C9E8: RtlNsLeaveDepth
0x180033340: "ProcessCustomOperation: Verifyin" ??_C@_1GO@KNLGHOKG@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAi?$AAn@
0x180036568: g_RGCH__lt_
0x1800116C4: DirectoryExists
0x180034380: "ProcessRegistryOperation: value=" ??_C@_1JA@JLHLIHEN@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$DN@
0x18002DBB0: "__cdecl _report_gsfailure" __report_gsfailure
0x180036550: g_RGCH__gt_
0x1800313D0: "Mitigation-FixupEditionId: Scena" ??_C@_1GI@MCGABLCN@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAF?$AAi?$AAx?$AAu?$AAp?$AAE?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAI?$AAd?$AA?3?$AA?5?$AAS?$AAc?$AAe?$AAn?$AAa@
0x180036250: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::ProcessingInstruction,struct Windows::Vector<enum Windows::Microdom::Rtl::ProcessingInstruction::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUProcessingInstruction@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@ProcessingInstruction@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x180034010: "key" ??_C@_17FJFCONIE@?$AAk?$AAe?$AAy?$AA?$AA@
0x18002FE30: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18002D8A4: "__cdecl onexit" _onexit
0x18001E670: "protected: virtual void * __ptr64 __cdecl Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@MEAAPEAXI@Z
0x180036560: g_RGCH__space_
0x18000EE40: "public: static long __cdecl CGlobalMiscUtilsT<class CEmptyType>::VerifySelfSignedImageFile(unsigned short const * __ptr64,int,int,int)" ?VerifySelfSignedImageFile@?$CGlobalMiscUtilsT@VCEmptyType@@@@SAJPEBGHHH@Z
0x18003B760: "__cdecl _native_startup_state" __native_startup_state
0x1800303C8: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800363D8: "NOTATION" ??_C@_1BC@NFJBEMB@?$AAN?$AAO?$AAT?$AAA?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
0x18001802C: "public: __cdecl CBasicNodeType::~CBasicNodeType(void) __ptr64" ??1CBasicNodeType@@QEAA@XZ
0x180032F40: "CMitigationManager::LogOperation" ??_C@_1EK@NLHLANAK@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAL?$AAo?$AAg?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn@
0x180024BB0: "public: void __cdecl BUCL::HashTable::CConstIterator<class CMicrodomBuilder::CIntermediateStringTableTraits>::Next(void) __ptr64" ?Next@?$CConstIterator@VCIntermediateStringTableTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAAXXZ
0x180015614: "public: long __cdecl Unattend::GetRelevantTextualSubNode(class UnattendNode const & __ptr64,class UnattendNode & __ptr64) __ptr64" ?GetRelevantTextualSubNode@Unattend@@QEAAJAEBVUnattendNode@@AEAV2@@Z
0x180031A20: "LoadOperationsFromModule: Verify" ??_C@_1HC@DIFMLJHK@?$AAL?$AAo?$AAa?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAF?$AAr?$AAo?$AAm?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?3?$AA?5?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy@
0x18001B360: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Element * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUElement@456@@Z
0x1800205C8: "long __cdecl MicrodomWriterImplementation::WalkAndWriteElement(unsigned long,struct Windows::Microdom::Rtl::IRtlMicrodomXmlWriter * __ptr64,struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Element,struct Windows::Rtl::IRtlWOFOStream * __ptr64)" ?WalkAndWriteElement@MicrodomWriterImplementation@@YAJKPEAUIRtlMicrodomXmlWriter@Rtl@Microdom@Windows@@PEAUIRtlMicrodom@345@UElement@345@PEAUIRtlWOFOStream@35@@Z
0x180032D90: "*.*.*.*" ??_C@_1BA@MPDKANNL@?$AA?$CK?$AA?4?$AA?$CK?$AA?4?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x180015348: "public: long __cdecl Unattend::GetChild(class UnattendNode const & __ptr64,unsigned __int64,class UnattendNode & __ptr64) __ptr64" ?GetChild@Unattend@@QEAAJAEBVUnattendNode@@_KAEAV2@@Z
0x18002FF50: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x180002B44: "public: static long __cdecl CMitiLogT<class CEmptyType>::MitiLogFormat(class IDlpDiagnostics * __ptr64,enum WINDLP_LOGLEVEL,unsigned short const * __ptr64,...)" ?MitiLogFormat@?$CMitiLogT@VCEmptyType@@@@SAJPEAVIDlpDiagnostics@@W4WINDLP_LOGLEVEL@@PEBGZZ
0x18001C7A0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetElementsByTagName(struct Windows::Microdom::Rtl::Element,struct _LUTF8_STRING const * __ptr64,class Windows::Auto<struct Windows::Vector<struct Windows::Microdom::Rtl::Element> > * __ptr64) __ptr64" ?GetElementsByTagName@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@PEBU_LUTF8_STRING@@PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@6@@Z
0x180032C58: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x180030F18: "EnterpriseE" ??_C@_1BI@BILKFFDL@?$AAE?$AAn?$AAt?$AAe?$AAr?$AAp?$AAr?$AAi?$AAs?$AAe?$AAE?$AA?$AA@
0x180032F90: "LogOperationTime: [%s], Elapsed " ??_C@_1FK@HHKGINAJ@?$AAL?$AAo?$AAg?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?3?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?0?$AA?5?$AAE?$AAl?$AAa?$AAp?$AAs?$AAe?$AAd?$AA?5@
0x18002FED8: "__cdecl _imp_LoadResource" __imp_LoadResource
0x1800391F8: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x18001B850: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Comment,struct Windows::Vector<enum Windows::Microdom::Rtl::Comment::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUComment@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Comment@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x18001B610: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Element,struct Windows::Vector<enum Windows::Microdom::Rtl::Element::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64" ?GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUElement@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Element@Rtl@Microdom@Windows@@@6@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@6@@Z
0x180029CBC: RtlXmlInitializeTokenization
0x180036000: "__cdecl GUID_38218435_079f_49e9_bb3f_149cb22b88cd" _GUID_38218435_079f_49e9_bb3f_149cb22b88cd
0x18001EE6C: "public: class BUCL::Rtl::CCallDisposition __cdecl BUCL::HashTable::CTable<class CMicrodomBuilder::CIntermediateStringTableTraits>::ResizeBucketTable(void) __ptr64" ?ResizeBucketTable@?$CTable@VCIntermediateStringTableTraits@CMicrodomBuilder@@@HashTable@BUCL@@QEAA?AVCCallDisposition@Rtl@3@XZ
0x180015984: "public: long __cdecl Unattend::GetAttributeValueByName(class UnattendNode const & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,class UnattendNode * __ptr64) __ptr64" ?GetAttributeValueByName@Unattend@@QEAAJAEBVUnattendNode@@PEBGPEAPEAGPEAV2@@Z
0x1800322E8: "mobileDUIC" ??_C@_1BG@IPMLHNHO@?$AAm?$AAo?$AAb?$AAi?$AAl?$AAe?$AAD?$AAU?$AAI?$AAC?$AA?$AA@
0x1800334E8: "path" ??_C@_19JIFMCCAP@?$AAp?$AAa?$AAt?$AAh?$AA?$AA@
0x180015EC0: RtlInitializeSmartLBlobWritingContext
0x180036320: "xmlns" ??_C@_1M@EOEFJFPG@?$AAx?$AAm?$AAl?$AAn?$AAs?$AA?$AA@
0x180036570: g_RGCH__semi_
0x180017860: RtlDecodeUcs4BE
0x1800323F0: "desktopReServicing" ??_C@_1CG@OFECKAPM@?$AAd?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAR?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x1800177D0: RtlDecodeUcs2BE
0x180033FB0: "CMitigationManager::ProcessRegis" ??_C@_1FK@MPEEBPNE@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs@
0x180018ADC: "public: long __cdecl MicrodomImplementation::CMicrodom::IRtlMicrodom_Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Node * __ptr64,unsigned long) __ptr64" ?IRtlMicrodom_Cast@CMicrodom@MicrodomImplementation@@QEAAJUNode@Rtl@Microdom@Windows@@PEAU3456@K@Z
0x18003B640: g_FindNextFileName
0x180021AE8: "public: __cdecl CMicrodomBuilder::~CMicrodomBuilder(void) __ptr64" ??1CMicrodomBuilder@@QEAA@XZ
0x180008310: "private: long __cdecl CMitigationManager::GetFileTimeDifference(struct _FILETIME,struct _FILETIME,unsigned __int64 * __ptr64) __ptr64" ?GetFileTimeDifference@CMitigationManager@@AEAAJU_FILETIME@@0PEA_K@Z
0x1800330D0: "ProcessCommandOperation: Launchi" ??_C@_1GG@LNGECJPO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAi@
0x18002F808: xss_xml
0x180036448: "IDREFS" ??_C@_1O@COOLNBMH@?$AAI?$AAD?$AAR?$AAE?$AAF?$AAS?$AA?$AA@
0x18001B3F0: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::ProcessingInstruction * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUProcessingInstruction@456@@Z
0x1800087DC: "private: long __cdecl CMitigationManager::GetHostEdition(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetHostEdition@CMitigationManager@@AEAAJPEAPEAG@Z
0x180032ED8: "%d.%d.%d.%d" ??_C@_1BI@FCMLLAGN@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x180036068: "#document" ??_C@_09DFKKGJPK@?$CDdocument?$AA@
0x18001B390: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::Cast(struct Windows::Microdom::Rtl::Node,struct Windows::Microdom::Rtl::Text * __ptr64) __ptr64" ?Cast@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEAUText@456@@Z
0x1800346E0: "ProcessRegistryOperation: Target" ??_C@_1HK@PCINNONH@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt@
0x180032BB0: "CMitigationManager::GetRootKeyFr" ??_C@_1FC@JBBHNMD@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAG?$AAe?$AAt?$AAR?$AAo?$AAo?$AAt?$AAK?$AAe?$AAy?$AAF?$AAr@
0x180030000: "__cdecl _imp_free" __imp_free
0x18002D9E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180031918: "CMitigationManager::Clear" ??_C@_1DE@DHPMBNPF@?$AAC?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?3?$AA?3?$AAC?$AAl?$AAe?$AAa?$AAr?$AA?$AA@
0x18002FAD8: g_LUTF8_STRING__colon_
0x180016C9C: RtlDuplicateLUtf8String
0x180026B70: RtlRawXmlTokenizer_GatherPCData
0x180030020: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180036110: "unsigned long const * const `public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::GetProperties(struct Windows::Microdom::Rtl::Attribute,struct Windows::Vector<enum Windows::Microdom::Rtl::Attribute::Properties const> const & __ptr64,struct Windows::Vector<struct Windows::Microdom::Rtl::NodePropertyResult> const & __ptr64) __ptr64'::`6'::scValidProperties" ?scValidProperties@?5??GetProperties@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUAttribute@Rtl@Microdom@Windows@@AEBU?$Vector@$$CBW4Properties@Attribute@Rtl@Microdom@Windows@@@7@AEBU?$Vector@UNodePropertyResult@Rtl@Microdom@Windows@@@7@@Z@4QBKB
0x18002F130: "const Windows::Rtl::CRtlObjectBase<class MicrodomImplementation::CMicrodom>::`vftable'" ??_7?$CRtlObjectBase@VCMicrodom@MicrodomImplementation@@@Rtl@Windows@@6B@
0x1800255D0: "private: long __cdecl CMicrodomBuilder::WriteDomElementIndicies<unsigned char>(void * __ptr64,unsigned __int64 & __ptr64,class CMicrodomBuilder::CXmlStreamObject const * __ptr64) __ptr64" ??$WriteDomElementIndicies@E@CMicrodomBuilder@@AEAAJPEAXAEA_KPEBVCXmlStreamObject@0@@Z
0x1800333B0: "ProcessCustomOperation: Loading " ??_C@_1FO@FDNACCMI@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5@
0x18002FC80: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180032AB0: "REG_MULTI_SZ" ??_C@_1BK@IMAMKEGI@?$AAR?$AAE?$AAG?$AA_?$AAM?$AAU?$AAL?$AAT?$AAI?$AA_?$AAS?$AAZ?$AA?$AA@
0x18001F940: "public: virtual long __cdecl MicrodomWriterImplementation::CMicrodomWriter_IRtlMicrodomXmlWriter::WriteText(struct Windows::Microdom::Rtl::IRtlMicrodom * __ptr64,struct Windows::Microdom::Rtl::Text,struct Windows::Rtl::IRtlWOFOStream * __ptr64) __ptr64" ?WriteText@CMicrodomWriter_IRtlMicrodomXmlWriter@MicrodomWriterImplementation@@UEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UText@456@PEAUIRtlWOFOStream@46@@Z
0x18002FF00: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x180034B90: "SetObjectSecurity: Applying [%s]" ??_C@_1FM@EFNAJMJB@?$AAS?$AAe?$AAt?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?3?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAy?$AAi?$AAn?$AAg?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN@
0x180031CF0: "Execute: Processing mitigation [" ??_C@_1EO@DKHMLDCK@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$FL@
0x1800178BC: RtlGetCharacterSetEncoder
0x18002E0FA: memset
0x18003920C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180033550: "ProcessFileOperation: Path [%s] " ??_C@_1HG@FDNMOALE@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAl?$AAe?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAP?$AAa?$AAt?$AAh?$AA?5?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?5@
0x1800354D0: "WdsRemoveDirectory: Unable to pr" ??_C@_1HI@DHNOLEGD@?$AAW?$AAd?$AAs?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr@
0x18002FDF8: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18002F950: xss_NMTOKEN
0x180034020: "ProcessRegistryOperation: action" ??_C@_1HG@DCFDGMNK@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn@
0x18001C410: "public: virtual long __cdecl MicrodomImplementation::CMicrodom_IRtlMicrodomTearoff::HasAttributes(struct Windows::Microdom::Rtl::Node,bool * __ptr64) __ptr64" ?HasAttributes@CMicrodom_IRtlMicrodomTearoff@MicrodomImplementation@@UEAAJUNode@Rtl@Microdom@Windows@@PEA_N@Z

[JEB Decompiler by PNF Software]