Generated by JEB on 2019/08/01

PE: C:\Windows\System32\SecurityHealthAgent.dll Base=0x180000000 SHA-256=7B412C8DFC51C961147AE99B6B11F9D7A440D76BDE893B81E27B33F09E7A29D4
PDB: SecurityHealthAgent.pdb GUID={C9077125-32EE-B9EB-6ED535F6C009B51F} Age=1

1997 located named symbols:
0x180022ED8: WPP_76c1e538e14535588b936ad5dc344d87_Traceguids
0x18002D4E0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@@8
0x180020278: WINTRUST_NULL_THUNK_DATA
0x180026410: "__vectorcall ??_R1A@?0A@EA@IHardwareShield" ??_R1A@?0A@EA@IHardwareShield@@8
0x180021EB8: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x180022F08: "__cdecl GUID_2f10cd29_258a_44f1_99a8_b0273bc6f66f" _GUID_2f10cd29_258a_44f1_99a8_b0273bc6f66f
0x180020478: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x1800189B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefObject@CommonUtil@@MEAAPEAXI@Z
0x180019B60: "public: virtual void * __ptr64 __cdecl CommonUtil::CExplicitAccessControl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCExplicitAccessControl@CommonUtil@@UEAAPEAXI@Z
0x18001A740: "public: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesAlloc<struct CommonUtil::CAutoLocalPtr<void * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x18001FFE8: "__cdecl _imp_LockResource" __imp_LockResource
0x180022600: "history" ??_C@_1BA@IOPNFBCG@?$AAh?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHealthAdvisorShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180020458: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18002D478: "__vectorcall ??_R0?AVAppAndBrowserShieldBroker@" ??_R0?AVAppAndBrowserShieldBroker@@@8
0x1800228F4: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDefenderShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001CA5C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180012D00: "public: virtual long __cdecl HardwareShieldBroker::GetTPMLockoutInfo(unsigned int * __ptr64,unsigned int * __ptr64) __ptr64" ?GetTPMLockoutInfo@HardwareShieldBroker@@UEAAJPEAI0@Z
0x180022D68: "__cdecl GUID_04124b20_82c6_4229_b109_fd9ed4662b53" _GUID_04124b20_82c6_4229_b109_fd9ed4662b53
0x18000D9D0: "public: virtual long __cdecl DefenderShieldBroker::CancelRemediation(void) __ptr64" ?CancelRemediation@DefenderShieldBroker@@UEAAJXZ
0x1800204A8: "__cdecl _imp_GetSecurityDescriptorOwner" __imp_GetSecurityDescriptorOwner
0x180020480: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18001C3B4: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x18002E970: "__vectorcall ??_R0?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@" ??_R0?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@8
0x1800247C0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`RTTI Complete Object Locator'{for `IShieldProviderUserSessionAgent'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@6BIShieldProviderUserSessionAgent@@@
0x1800221D0: "IManagementShield" ??_C@_0BC@EBHMFHLI@IManagementShield?$AA@
0x18000AC28: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetHeroImgPlacement(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetHeroImgPlacement@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@PEBG@Z
0x180022C50: CLSID_NetworkProtectionShield
0x1800178E4: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x180017EDC: "long __cdecl CommonUtil::NewVSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?NewVSprintfW@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x180016760: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultException@CommonUtil@@MEAAPEAXI@Z
0x180024AD0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldElevationBroker>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@6B@
0x18000D550: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldElevationBroker>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001A3A0: "public: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::GetOwnerSid(void)const __ptr64" ?GetOwnerSid@CSecurityAttributesHolder@CommonUtil@@UEBAPEAXXZ
0x1800204C0: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180027CA8: "__vectorcall ??_R3?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil" ??_R3?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@8
0x180024EC0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x1800279A8: "__vectorcall ??_R2?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil" ??_R2?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@8
0x180025030: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x180027610: "const CError::`RTTI Complete Object Locator'" ??_R4CError@@6B@
0x180020110: "__cdecl _imp_StringFromCLSID" __imp_StringFromCLSID
0x18000E010: "public: virtual long __cdecl DefenderShieldBroker::GetConfigBoolValue(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?GetConfigBoolValue@DefenderShieldBroker@@UEAAJPEBG0PEAHPEAW4ConfigOrigin@@@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAccountProtectionShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1800201C0: "__cdecl _imp_IUnknown_Release_Proxy" __imp_IUnknown_Release_Proxy
0x18002C690: "__vectorcall ??_R0?AV?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@@8
0x18001A3B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSecurityAttributesHolder@CommonUtil@@MEAAPEAXI@Z
0x18000E750: "public: virtual long __cdecl DefenderShieldBroker::IsFolderGuardEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsFolderGuardEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x1800232D8: "SeTakeOwnershipPrivilege" ??_C@_1DC@DAFGHJAD@?$AAS?$AAe?$AAT?$AAa?$AAk?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180022058: "%s..." ??_C@_1M@IIHBGHMM@?$AA?$CF?$AAs?$AA?4?$AA?4?$AA?4?$AA?$AA@
0x180020510: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA
0x1800255B0: "__vectorcall ??_R1A@?0A@EA@IAppAndBrowserShield" ??_R1A@?0A@EA@IAppAndBrowserShield@@8
0x180001010: "__cdecl ishieldelevation_IID_Lookup" _ishieldelevation_IID_Lookup
0x180029CB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-private-l1-1-0
0x18001E8B0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProcessLauncher>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@6B@
0x18002DE60: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@@8
0x180025840: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x18002E1F8: "__vectorcall ??_R0?AVDataProtectionShieldBroker@" ??_R0?AVDataProtectionShieldBroker@@@8
0x1800229A0: "settings" ??_C@_1BC@KIHFACHP@?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x180025BC8: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x180025A90: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x1800166A4: "public: virtual long __cdecl CRefCountedBaseX::AddRef(void)const __ptr64" ?AddRef@CRefCountedBaseX@@UEBAJXZ
0x180017D60: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,40}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@CI@EBAJXZ
0x1800218F0: "D:P(A;;GA;;;S-1-5-80-956008885-3" ??_C@_1BPI@DCKCFDAO@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA9?$AA5?$AA6?$AA0?$AA0?$AA8?$AA8?$AA8?$AA5?$AA?9?$AA3@
0x18002EDA0: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x1800164F4: ??1?$CAutoHandle@PEAUHINSTANCE__@@$1?_HMODULE_Finalizer@@YAXPEAU1@PEAX@Z@@QEAA@XZ
0x180025588: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x180027AD0: "__vectorcall ??_R1A@?0A@EA@CExplicitAccessControl@CommonUtil" ??_R1A@?0A@EA@CExplicitAccessControl@CommonUtil@@8
0x18002ED58: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180022DC8: "__cdecl GUID_1c741d59_2122_47d5_a856_83f3d4214875" _GUID_1c741d59_2122_47d5_a856_83f3d4214875
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHardwareShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl ExploitShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EExploitShieldBroker@@UEAAPEAXI@Z
0x180020030: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000F430: "public: virtual long __cdecl DefenderShieldBroker::ForcedReboot(unsigned long) __ptr64" ?ForcedReboot@DefenderShieldBroker@@UEAAJK@Z
0x180025818: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@8
0x18002E840: "__vectorcall ??_R0?AVCRefCountedBase@" ??_R0?AVCRefCountedBase@@@8
0x180022C60: CLSID_Dashboard
0x180023B40: "const type_info::`RTTI Complete Object Locator'" ??_R4type_info@@6B@
0x1800245B0: "__vectorcall ??_R17?0A@EC@IUnknown" ??_R17?0A@EC@IUnknown@@8
0x180023038: CLSID_PSFactoryBuffer
0x18001FF98: "__cdecl tls_used" _tls_used
0x18001E028: "const std::exception::`vftable'" ??_7exception@std@@6B@
0x1800201F0: "__cdecl _imp_IUnknown_QueryInterface_Proxy" __imp_IUnknown_QueryInterface_Proxy
0x18000E160: "public: virtual long __cdecl DefenderShieldBroker::GetConfigVectorValue(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetConfigVectorValue@DefenderShieldBroker@@UEAAJPEBGPEAKPEAPEAPEAG@Z
0x180020050: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18002E028: "__vectorcall ??_R0?AUIOSProtectionShield@" ??_R0?AUIOSProtectionShield@@@8
0x18001CFBE: "__cdecl configure_narrow_argv" _configure_narrow_argv
0x18002CCC8: "__vectorcall ??_R0?AUIShieldElevationBroker@" ??_R0?AUIShieldElevationBroker@@@8
0x18001D410: "__cdecl _vcrt_thread_attach" __vcrt_thread_attach
0x180027878: "const CWString::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CWString@@6BILockable@@@
0x180024180: "__vectorcall ??_R3DontUseNewUseMake@Details@WRL@Microsoft" ??_R3DontUseNewUseMake@Details@WRL@Microsoft@@8
0x180023DF8: "__vectorcall ??_R2DontUseNewUseMake@Details@WRL@Microsoft" ??_R2DontUseNewUseMake@Details@WRL@Microsoft@@8
0x18001D02A: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18001E058: "const std::bad_array_new_length::`vftable'" ??_7bad_array_new_length@std@@6B@
0x180021170: "Defender Shield Broker" ??_C@_1CO@OJJBEBDJ@?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x18001CC64: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x180019C90: "public: virtual long __cdecl CommonUtil::CExplicitAccessControl::AddExplicitEntry(struct _EXPLICIT_ACCESS_W const & __ptr64) __ptr64" ?AddExplicitEntry@CExplicitAccessControl@CommonUtil@@UEAAJAEBU_EXPLICIT_ACCESS_W@@@Z
0x180015480: "public: virtual long __cdecl ForceFieldShieldBroker::GetForceFieldProviders(unsigned long * __ptr64,struct Shield_ForceFieldProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetForceFieldProviders@ForceFieldShieldBroker@@UEAAJPEAKPEAPEAUShield_ForceFieldProviderInfo@@@Z
0x180025B48: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x18001CD00: "public: virtual void * __ptr64 __cdecl std::bad_array_new_length::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_array_new_length@std@@UEAAPEAXI@Z
0x180020310: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x18001C258: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180026330: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x180001280: WppControlCallback
0x180026468: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x180027190: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x1800272C8: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x180027058: "const ApplicationGuardShieldBroker::`RTTI Complete Object Locator'" ??_R4ApplicationGuardShieldBroker@@6B@
0x18001D550: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001E1F8: "const ShieldElevationBroker::`vftable'" ??_7ShieldElevationBroker@@6B@
0x18001A110: "long __cdecl CommonUtil::UtilSidFromRid(void * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,struct _SID_IDENTIFIER_AUTHORITY const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long)" ?UtilSidFromRid@CommonUtil@@YAJPEAPEAXKKKPEBU_SID_IDENTIFIER_AUTHORITY@@KKKKKK@Z
0x180020218: SHELL32_NULL_THUNK_DATA
0x180022BD0: CLSID_AccountProtectionShield
0x1800275A0: "__vectorcall ??_R1A@?0A@EA@exception@std" ??_R1A@?0A@EA@exception@std@@8
0x180020288: Wldp_NULL_THUNK_DATA
0x180014A70: "long __cdecl CManagementShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CManagementShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl AppAndBrowserShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GAppAndBrowserShieldBroker@@UEAAPEAXI@Z
0x18001D0A0: ObjectStublessClient3
0x180021EC8: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x1800200D8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18001D0D0: ObjectStublessClient6
0x180026D20: "__vectorcall ??_R3ManagementShieldBroker" ??_R3ManagementShieldBroker@@8
0x180026AC0: "__vectorcall ??_R2ManagementShieldBroker" ??_R2ManagementShieldBroker@@8
0x18001D0B0: ObjectStublessClient4
0x180023440: WPP_10751cc20b4a367455e4de38e62e25df_Traceguids
0x18001D0C0: ObjectStublessClient5
0x18000FC20: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@NetworkProtectionShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x1800134B0: "public: virtual long __cdecl HardwareShieldBroker::IsHvciLocked(int * __ptr64) __ptr64" ?IsHvciLocked@HardwareShieldBroker@@UEAAJPEAH@Z
0x180025510: "__vectorcall ??_R1A@?0A@EA@AppAndBrowserShieldBroker" ??_R1A@?0A@EA@AppAndBrowserShieldBroker@@8
0x18000CE00: "public: long __cdecl Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlDocument>::As<struct Windows::Data::Xml::Dom::IXmlDocumentIO>(class Microsoft::WRL::Details::ComPtrRef<class Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlDocumentIO> >)const __ptr64" ??$As@UIXmlDocumentIO@Dom@Xml@Data@Windows@@@?$ComPtr@UIXmlDocument@Dom@Xml@Data@Windows@@@WRL@Microsoft@@QEBAJV?$ComPtrRef@V?$ComPtr@UIXmlDocumentIO@Dom@Xml@Data@Windows@@@WRL@Microsoft@@@Details@12@@Z
0x1800168E4: "public: __cdecl CommonUtil::CHResultException::CHResultException(class CommonUtil::CHResultException const & __ptr64) __ptr64" ??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z
0x18002EBB0: "__vectorcall ??_R0?AVCExplicitAccessControl@CommonUtil@" ??_R0?AVCExplicitAccessControl@CommonUtil@@@8
0x1800271B8: "__vectorcall ??_R2IForceFieldShield" ??_R2IForceFieldShield@@8
0x1800272F8: "__vectorcall ??_R3IForceFieldShield" ??_R3IForceFieldShield@@8
0x18002876C: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x180020350: "__cdecl _imp___std_exception_copy" __imp___std_exception_copy
0x180027DA8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1800223C8: "contextMenu" ??_C@_1BI@JGGPJCGK@?$AAc?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAM?$AAe?$AAn?$AAu?$AA?$AA@
0x180026188: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x180026050: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IOSProtectionShield>::~AutoRef<struct IOSProtectionShield>(void) __ptr64" ??1?$AutoRef@UIOSProtectionShield@@@CommonUtil@@QEAA@XZ
0x180020260: "__cdecl _imp_CryptCATAdminEnumCatalogFromHash" __imp_CryptCATAdminEnumCatalogFromHash
0x180025F40: "__vectorcall ??_R2AccountProtectionShieldBroker" ??_R2AccountProtectionShieldBroker@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IClassFactory>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@UEAAKXZ
0x1800261A0: "__vectorcall ??_R3AccountProtectionShieldBroker" ??_R3AccountProtectionShieldBroker@@8
0x1800276F0: "__vectorcall ??_R2ILockable" ??_R2ILockable@@8
0x180027860: "__vectorcall ??_R3ILockable" ??_R3ILockable@@8
0x180003970: "public: virtual long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SendSenseIsolationToastNotification(void) __ptr64" ?SendSenseIsolationToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJXZ
0x1800234B8: "null" ??_C@_19DJCNLLCE@?$AAn?$AAu?$AAl?$AAl?$AA?$AA@
0x18002D858: "__vectorcall ??_R0?AUIDashboard@" ??_R0?AUIDashboard@@@8
0x1800252D0: "__vectorcall ??_R1A@?0A@EA@IShieldProcessLauncher" ??_R1A@?0A@EA@IShieldProcessLauncher@@8
0x1800205A8: "__cdecl _xp_a" __xp_a
0x18002D4A8: "__vectorcall ??_R0?AUIAppAndBrowserShield@" ??_R0?AUIAppAndBrowserShield@@@8
0x18000CF40: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::Release`adjustor{8}' (void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@W7EAAKXZ
0x1800042B0: "__cdecl is_c_termination_complete" _is_c_termination_complete
0x18000276C: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >::~CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18001849C: "long __cdecl CommonUtil::HrGetModuleFileName(unsigned __int64 * __ptr64,unsigned short * __ptr64,struct HINSTANCE__ * __ptr64)" ?HrGetModuleFileName@CommonUtil@@YAJPEA_KPEAGPEAUHINSTANCE__@@@Z
0x18000FA40: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetSupportedProfiles(unsigned long * __ptr64) __ptr64" ?GetSupportedProfiles@NetworkProtectionShieldBroker@@UEAAJPEAK@Z
0x18002250C: "Email" ??_C@_05HNNODCBN@Email?$AA@
0x18001C9BC: "__cdecl RTC_Initialize" _RTC_Initialize
0x18001CD44: "void __cdecl __scrt_throw_std_bad_alloc(void)" ?__scrt_throw_std_bad_alloc@@YAXXZ
0x1800202E0: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180024588: "__vectorcall ??_R1BA@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R1BA@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x1800115C0: "public: virtual long __cdecl ExploitShieldBroker::ImportMitigationPoliciesFromXmlFile(unsigned short * __ptr64) __ptr64" ?ImportMitigationPoliciesFromXmlFile@ExploitShieldBroker@@UEAAJPEAG@Z
0x1800203E8: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x180022E98: WPP_150014b71d743efa36d670c45ba25817_Traceguids
0x180001310: DllGetClassObject
0x180015360: "public: virtual long __cdecl ForceFieldShieldBroker::GetIsReady(int * __ptr64) __ptr64" ?GetIsReady@ForceFieldShieldBroker@@UEAAJPEAH@Z
0x18001F920: "const CommonUtil::CSecurityAttributesHolder::`vftable'" ??_7CSecurityAttributesHolder@CommonUtil@@6B@
0x180010CD0: "public: virtual long __cdecl AppAndBrowserShieldBroker::GetStoreAppsSmartScreenMode(enum AppAndBrowserControlLevel * __ptr64,int * __ptr64) __ptr64" ?GetStoreAppsSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJPEAW4AppAndBrowserControlLevel@@PEAH@Z
0x180010D90: "public: virtual long __cdecl AppAndBrowserShieldBroker::RegisterForStatusNotifications(struct IAppAndBrowserNotificationsSink * __ptr64) __ptr64" ?RegisterForStatusNotifications@AppAndBrowserShieldBroker@@UEAAJPEAUIAppAndBrowserNotificationsSink@@@Z
0x1800273D0: "__vectorcall ??_R1A@A@3FA@IRefCounted" ??_R1A@A@3FA@IRefCounted@@8
0x1800201A8: "__cdecl _imp_IUnknown_AddRef_Proxy" __imp_IUnknown_AddRef_Proxy
0x1800161C4: "long __cdecl ShieldProvider::GetStringFromGUID(struct _GUID const & __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetStringFromGUID@ShieldProvider@@YAJAEBU_GUID@@PEAPEAG@Z
0x18002822C: ?_TlgEvent@?M@??SendToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJW4ToastType@@PEAG11@Z@4U<unnamed-type-_TlgEvent>@?M@??123@UEAAJ0111@Z@B
0x18001D410: "__cdecl _vcrt_thread_detach" __vcrt_thread_detach
0x180025EC0: "__vectorcall ??_R3HealthAdvisorShieldBroker" ??_R3HealthAdvisorShieldBroker@@8
0x180025C60: "__vectorcall ??_R2HealthAdvisorShieldBroker" ??_R2HealthAdvisorShieldBroker@@8
0x18001F2F8: "const ManagementShieldBroker::`vftable'" ??_7ManagementShieldBroker@@6B@
0x18001E930: "const ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`vftable'" ??_7ShieldProcessLauncherBroker@0@6B@
0x18000F690: "public: virtual void * __ptr64 __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GShieldProcessLauncherBroker@0@UEAAPEAXI@Z
0x180024F10: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x180025048: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x18001D1BC: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x180017D40: "[thunk]:public: virtual void __cdecl CWString::Lock`vtordisp{4294967292,0}' (void)const __ptr64" ?Lock@CWString@@$4PPPPPPPM@A@EBAXXZ
0x180024A30: "__vectorcall ??_R1A@?0A@EA@IShieldElevationBroker" ??_R1A@?0A@EA@IShieldElevationBroker@@8
0x180028758: "__cdecl _rtc_taa" __rtc_taa
0x180019088: "long __cdecl CommonUtil::UtilRegSetValueInternal(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegSetValueInternal@CommonUtil@@YAJPEAUHKEY__@@PEBGK_KPEBX@Z
0x1800277A0: "__vectorcall ??_R1A@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R1A@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x180029D2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x18002D990: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@@8
0x180024300: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@8
0x1800246F0: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@8
0x18002E2D0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@@8
0x180017DC0: "[thunk]:public: virtual void * __ptr64 __cdecl CWString::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECWString@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18000DF30: "public: virtual long __cdecl DefenderShieldBroker::RevokeWarningStateDismissal(enum PillarStatusFlag) __ptr64" ?RevokeWarningStateDismissal@DefenderShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x1800203B8: "__cdecl _imp__initterm_e" __imp__initterm_e
0x180027080: "__vectorcall ??_R2ForceFieldShieldBroker" ??_R2ForceFieldShieldBroker@@8
0x1800272E0: "__vectorcall ??_R3ForceFieldShieldBroker" ??_R3ForceFieldShieldBroker@@8
0x18001BA4C: HrGetLastFailure
0x18000E290: "public: virtual long __cdecl DefenderShieldBroker::SetConfigBoolValue(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?SetConfigBoolValue@DefenderShieldBroker@@UEAAJPEBG0H@Z
0x180023158: "IShieldProviderUserSessionAgent" ??_C@_0CA@IPFJNHIA@IShieldProviderUserSessionAgent?$AA@
0x18000EA40: "public: virtual long __cdecl DefenderShieldBroker::GetQuarantinedThreats(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetQuarantinedThreats@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x1800203F8: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct INetworkProtectionShield>::~AutoRef<struct INetworkProtectionShield>(void) __ptr64" ??1?$AutoRef@UINetworkProtectionShield@@@CommonUtil@@QEAA@XZ
0x180024978: "__vectorcall ??_R2IShieldElevationBroker" ??_R2IShieldElevationBroker@@8
0x180024AB8: "__vectorcall ??_R3IShieldElevationBroker" ??_R3IShieldElevationBroker@@8
0x180002C90: "public: virtual void * __ptr64 __cdecl ShieldElevationBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EShieldElevationBroker@@UEAAPEAXI@Z
0x180014940: "public: virtual long __cdecl ManagementShieldBroker::NotifyDDSClientOfStateChange(void) __ptr64" ?NotifyDDSClientOfStateChange@ManagementShieldBroker@@UEAAJXZ
0x18001CF60: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x18001FB50: "__cdecl ishieldelevation_ProxyVtblList" _ishieldelevation_ProxyVtblList
0x18001790C: "public: virtual void __cdecl CWString::Lock(void)const __ptr64" ?Lock@CWString@@UEBAXXZ
0x180029A50: "__cdecl CT??_R0?AVbad_array_new_length@std@@@8??0bad_array_new_length@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_array_new_length@std@@@8??0bad_array_new_length@std@@QEAA@AEBV01@@Z24
0x180012470: "public: virtual long __cdecl AccountProtectionShieldBroker::GetSubPillarStatus(enum AccountProtectionSubPillars,struct PillarStatus * __ptr64) __ptr64" ?GetSubPillarStatus@AccountProtectionShieldBroker@@UEAAJW4AccountProtectionSubPillars@@PEAUPillarStatus@@@Z
0x18000EF10: "public: virtual long __cdecl DefenderShieldBroker::GetMpErrorMessage(long,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetMpErrorMessage@DefenderShieldBroker@@UEAAJJPEAPEAG@Z
0x180023EC8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x1800178E4: "public: virtual __cdecl std::bad_array_new_length::~bad_array_new_length(void) __ptr64" ??1bad_array_new_length@std@@UEAA@XZ
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IApplicationGuardShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001D410: "__cdecl _vcrt_initialize" __vcrt_initialize
0x1800203D8: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x1800160D8: "public: __cdecl CommonUtil::AutoRef<class CommonUtil::CExplicitAccessControl>::~AutoRef<class CommonUtil::CExplicitAccessControl>(void) __ptr64" ??1?$AutoRef@VCExplicitAccessControl@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180027D70: "__vectorcall ??_R3CHResultExceptionImpl@CommonUtil" ??_R3CHResultExceptionImpl@CommonUtil@@8
0x180020168: "__cdecl _imp_NdrOleFree" __imp_NdrOleFree
0x180027D88: "__vectorcall ??_R2CHResultExceptionImpl@CommonUtil" ??_R2CHResultExceptionImpl@CommonUtil@@8
0x18001A7B0: "public: virtual void * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<struct CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x180021450: "Application Guard Shield Broker" ??_C@_1EA@OIAELDBL@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x1800271D0: "__vectorcall ??_R1A@?0A@EA@ForceFieldShieldBroker" ??_R1A@?0A@EA@ForceFieldShieldBroker@@8
0x180023508: "vector<T> too long" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x180020160: OLE32_NULL_THUNK_DATA
0x1800279C8: "__vectorcall ??_R1A@?0A@EA@IExplicitAccessControl@CommonUtil" ??_R1A@?0A@EA@IExplicitAccessControl@CommonUtil@@8
0x18002DB90: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@@8
0x1800216B0: "D:P(A;;GA;;;S-1-5-80-956008885-3" ??_C@_1CDE@EFEOGJAP@?$AAD?$AA?3?$AAP?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA9?$AA5?$AA6?$AA0?$AA0?$AA8?$AA8?$AA8?$AA5?$AA?9?$AA3@
0x18002C5C8: "__vectorcall ??_R0?AVDontUseNewUseMake@Details@WRL@Microsoft@" ??_R0?AVDontUseNewUseMake@Details@WRL@Microsoft@@@8
0x180017C40: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64 __cdecl CWString::assign(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ?assign@CWString@@QEAAAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AEBV23@@Z
0x180001070: "__cdecl TlgWrite" _TlgWrite
0x1800102D0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct INetworkProtectionShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020548: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18002E170: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@@8
0x180020108: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x180025760: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x1800258D0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x180016760: "public: virtual void * __ptr64 __cdecl std::exception::`vector deleting destructor'(unsigned int) __ptr64" ??_Eexception@std@@UEAAPEAXI@Z
0x180006C0C: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetScenarioReminder(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64) __ptr64" ?SetScenarioReminder@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@@Z
0x180026F40: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x18001AB00: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x18000F940: "public: long __cdecl NetworkProtectionShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@NetworkProtectionShieldBroker@@QEAAJXZ
0x180026918: "__vectorcall ??_R2IDataProtectionShield" ??_R2IDataProtectionShield@@8
0x1800233D0: WPP_e0579d4168183511c307ab70518b0b91_Traceguids
0x180026A58: "__vectorcall ??_R3IDataProtectionShield" ??_R3IDataProtectionShield@@8
0x1800257F0: "__vectorcall ??_R1A@?0A@EA@ExploitShieldBroker" ??_R1A@?0A@EA@ExploitShieldBroker@@8
0x18002CAC0: "__vectorcall ??_R0?AUINotificationActivationCallback@" ??_R0?AUINotificationActivationCallback@@@8
0x180025638: "__vectorcall ??_R3IAppAndBrowserShield" ??_R3IAppAndBrowserShield@@8
0x1800254F8: "__vectorcall ??_R2IAppAndBrowserShield" ??_R2IAppAndBrowserShield@@8
0x18001FB40: "__cdecl ishieldelevation_StubVtblList" _ishieldelevation_StubVtblList
0x1800189B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefObject@CommonUtil@@MEAAPEAXI@Z
0x180019B60: "public: virtual void * __ptr64 __cdecl CommonUtil::CExplicitAccessControl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECExplicitAccessControl@CommonUtil@@UEAAPEAXI@Z
0x180012D60: "public: virtual long __cdecl HardwareShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@HardwareShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x180020330: api-ms-win-crt-heap-l1-1-0_NULL_THUNK_DATA
0x180007214: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::IsCoBrandingEnabled(struct ShieldProvider::ShieldProviderToastPropertyBag * __ptr64,bool * __ptr64) __ptr64" ?IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@2@PEA_N@Z
0x1800279F0: "const CommonUtil::CWinSecurityAclAlloc<class CommonUtil::CAutoUniquePtr<struct _ACL,void> >::`RTTI Complete Object Locator'" ??_R4?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@6B@
0x18001A740: "public: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesAlloc<struct CommonUtil::CAutoLocalPtr<void * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHealthAdvisorShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18002EC60: "__vectorcall ??_R0?AUIExplicitAccessControl@CommonUtil@" ??_R0?AUIExplicitAccessControl@CommonUtil@@@8
0x18001D140: CStdStubBuffer_CountRefs
0x18001F9A8: "const CommonUtil::CSecurityAttributesAlloc<struct CommonUtil::CAutoLocalPtr<void * __ptr64> >::`vftable'" ??_7?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@6B@
0x180022E08: "__cdecl GUID_63dbba8b_d0db_4fe1_b745_f9433afdc25b" _GUID_63dbba8b_d0db_4fe1_b745_f9433afdc25b
0x18001EC70: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHealthAdvisorShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@6B@
0x18001E1C0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldElevationBroker>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@6B@
0x180028748: "__cdecl _rtc_iaa" __rtc_iaa
0x1800241B0: "__vectorcall ??_R3RuntimeClassBase@Details@WRL@Microsoft" ??_R3RuntimeClassBase@Details@WRL@Microsoft@@8
0x180023E30: "__vectorcall ??_R2RuntimeClassBase@Details@WRL@Microsoft" ??_R2RuntimeClassBase@Details@WRL@Microsoft@@8
0x1800201E0: "__cdecl _imp_CStdStubBuffer_DebugServerRelease" __imp_CStdStubBuffer_DebugServerRelease
0x18000EDC0: "public: virtual long __cdecl DefenderShieldBroker::DeleteThreatHistory(void) __ptr64" ?DeleteThreatHistory@DefenderShieldBroker@@UEAAJXZ
0x18001D410: "__cdecl _acrt_thread_attach" __acrt_thread_attach
0x180024CC0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x18001F8D0: "const CWString::`vftable'{for `ILockable'}" ??_7CWString@@6BILockable@@@
0x180029B58: "__cdecl TI3?AVCHResultExceptionImpl@CommonUtil@@" _TI3?AVCHResultExceptionImpl@CommonUtil@@
0x18001EA38: "const AppAndBrowserShieldBroker::`vftable'" ??_7AppAndBrowserShieldBroker@@6B@
0x1800117F0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IForceFieldShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001F5B8: "__cdecl IShieldElevationBrokerProxyVtbl" _IShieldElevationBrokerProxyVtbl
0x1800125F0: "public: virtual long __cdecl AccountProtectionShieldBroker::GetNotificationsDisabled(int * __ptr64) __ptr64" ?GetNotificationsDisabled@AccountProtectionShieldBroker@@UEAAJPEAH@Z
0x180002F98: "private: bool __cdecl TraceLoggingCorrelationVector::ToStringImpl(unsigned __int64,char * __ptr64) __ptr64" ?ToStringImpl@TraceLoggingCorrelationVector@@AEAA_N_KPEAD@Z
0x18002ED20: "__vectorcall ??_R0?AVinvalid_argument@std@" ??_R0?AVinvalid_argument@std@@@8
0x180028770: "__cdecl tls_end" _tls_end
0x180021F98: CLSID_NetworkProtectionShieldBroker
0x180012890: "long __cdecl CAccountProtectionShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CAccountProtectionShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180016760: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultException@CommonUtil@@MEAAPEAXI@Z
0x18002DFF8: "__vectorcall ??_R0?AVOSProtectionShieldBroker@" ??_R0?AVOSProtectionShieldBroker@@@8
0x180020270: "__cdecl _imp_CryptCATCatalogInfoFromContext" __imp_CryptCATCatalogInfoFromContext
0x180020550: "__cdecl _xc_a" __xc_a
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAccountProtectionShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18001EDB0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAccountProtectionShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@6B@
0x1800234C8: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001A3B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSecurityAttributesHolder@CommonUtil@@MEAAPEAXI@Z
0x180021550: "LocalizedString" ??_C@_1CA@KMFDEJAN@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAi?$AAz?$AAe?$AAd?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180026790: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IOSProtectionShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@6B@
0x180002064: "public: __cdecl CommonUtil::CAutoLocalPtr<void * __ptr64>::~CAutoLocalPtr<void * __ptr64>(void) __ptr64" ??1?$CAutoLocalPtr@PEAX@CommonUtil@@QEAA@XZ
0x180022AD0: "file:///%ls" ??_C@_1BI@NKDCHHJB@?$AAf?$AAi?$AAl?$AAe?$AA?3?$AA?1?$AA?1?$AA?1?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x18002F490: gPFactory
0x180023450: WPP_626fbbf86e603f13bef9a3700192dd9f_Traceguids
0x180029D68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x18001FAD8: "__cdecl ishieldelevation_InterfaceNamesList" _ishieldelevation_InterfaceNamesList
0x18001A2A8: "protected: __cdecl CommonUtil::CSecurityAttributesHolder::CSecurityAttributesHolder(void * __ptr64) __ptr64" ??0CSecurityAttributesHolder@CommonUtil@@IEAA@PEAX@Z
0x18001D1B0: CStdStubBuffer_Connect
0x180014BE0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IManagementShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020520: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x180012650: "public: virtual long __cdecl AccountProtectionShieldBroker::DismissWarningState(enum PillarStatusFlag) __ptr64" ?DismissWarningState@AccountProtectionShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x180025B70: "__vectorcall ??_R1A@?0A@EA@IDashboard" ??_R1A@?0A@EA@IDashboard@@8
0x18002D2B0: "__vectorcall ??_R0?AUIShieldProcessLauncher@" ??_R0?AUIShieldProcessLauncher@@@8
0x180022DD8: "__cdecl GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637" _GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637
0x180020CD0: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetLastScanStartTime(unsigned __int64 * __ptr64) __ptr64" ?GetLastScanStartTime@HealthAdvisorShieldBroker@@UEAAJPEA_K@Z
0x1800223E0: "placement" ??_C@_1BE@HJAPFLBC@?$AAp?$AAl?$AAa?$AAc?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18002ED70: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x180020188: "__cdecl _imp_NdrDllGetClassObject" __imp_NdrDllGetClassObject
0x18001F6B0: "__cdecl IShieldProviderUserSessionAgentStubVtbl" _IShieldProviderUserSessionAgentStubVtbl
0x18001D180: CStdStubBuffer_Disconnect
0x180024990: "__vectorcall ??_R1A@?0A@EA@ShieldElevationBroker" ??_R1A@?0A@EA@ShieldElevationBroker@@8
0x180022D10: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotification" ?RuntimeClass_Windows_UI_Notifications_ToastNotification@@3QBGB
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHardwareShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl ExploitShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GExploitShieldBroker@@UEAAPEAXI@Z
0x18002F4BC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUnhexigPfmrxigUlyquivUznwGEUhgwzucOlyq@MpGlobalsUnicrt" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUnhexigPfmrxigUlyquivUznwGEUhgwzucOlyq@MpGlobalsUnicrt
0x18001F870: "const CError::`vftable'" ??_7CError@@6B@
0x180020308: "__cdecl _imp_WindowsCreateStringReference" __imp_WindowsCreateStringReference
0x18000FD60: "public: virtual long __cdecl NetworkProtectionShieldBroker::SetStatusChangeSink(struct INetworkProtectionStatusSink * __ptr64) __ptr64" ?SetStatusChangeSink@NetworkProtectionShieldBroker@@UEAAJPEAUINetworkProtectionStatusSink@@@Z
0x1800229C8: "samples?submitsample" ??_C@_1CK@PGNLBDMG@?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AA?$DP?$AAs?$AAu?$AAb?$AAm?$AAi?$AAt?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AA?$AA@
0x18000F4A0: "public: virtual long __cdecl DefenderShieldBroker::GetLocalAdminMergeEnabled(int * __ptr64) __ptr64" ?GetLocalAdminMergeEnabled@DefenderShieldBroker@@UEAAJPEAH@Z
0x180013BD0: "public: virtual long __cdecl OSProtectionShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@OSProtectionShieldBroker@@UEAAJPEAH@Z
0x180021F88: CLSID_ShieldProcessLauncherBroker
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetLastCleanResults(struct _tagLastCleanResults * __ptr64) __ptr64" ?GetLastCleanResults@HealthAdvisorShieldBroker@@UEAAJPEAU_tagLastCleanResults@@@Z
0x1800199A0: "public: virtual long __cdecl CommonUtil::CExplicitAccessControl::AddByStringSid(unsigned short const * __ptr64,unsigned long,enum _ACCESS_MODE,unsigned long) __ptr64" ?AddByStringSid@CExplicitAccessControl@CommonUtil@@UEAAJPEBGKW4_ACCESS_MODE@@K@Z
0x180014880: "public: virtual long __cdecl ManagementShieldBroker::SetStatusChangeSink(struct IManagementStatusSink * __ptr64) __ptr64" ?SetStatusChangeSink@ManagementShieldBroker@@UEAAJPEAUIManagementStatusSink@@@Z
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetLastScanResults(struct _tagHealthScanResults * __ptr64) __ptr64" ?GetLastScanResults@HealthAdvisorShieldBroker@@UEAAJPEAU_tagHealthScanResults@@@Z
0x18002ECF8: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x18001EED0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHardwareShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@6B@
0x18001EB30: "const ExploitShieldBroker::`vftable'" ??_7ExploitShieldBroker@@6B@
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetAssessmentHealth(enum _tagHealthAdvisorAssessment,enum PillarHealth * __ptr64) __ptr64" ?GetAssessmentHealth@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@PEAW4PillarHealth@@@Z
0x1800187C8: "long __cdecl CommonUtil::HrGetFileAttributes(unsigned long * __ptr64,unsigned short const * __ptr64)" ?HrGetFileAttributes@CommonUtil@@YAJPEAKPEBG@Z
0x18002CC98: "__vectorcall ??_R0?AVShieldElevationBroker@" ??_R0?AVShieldElevationBroker@@@8
0x1800114A0: "public: virtual long __cdecl ExploitShieldBroker::GetOsDefaultMitigationPolicyEx(unsigned long * __ptr64,struct ImageMitigationPolicy * __ptr64 * __ptr64) __ptr64" ?GetOsDefaultMitigationPolicyEx@ExploitShieldBroker@@UEAAJPEAKPEAPEAUImageMitigationPolicy@@@Z
0x180011A80: "public: virtual long __cdecl DashboardBroker::RefreshPillars(unsigned long,unsigned long * __ptr64) __ptr64" ?RefreshPillars@DashboardBroker@@UEAAJKPEAK@Z
0x18002ED68: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x18001CF9A: "__cdecl callnewh" _callnewh
0x1800122B0: "public: long __cdecl AccountProtectionShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@AccountProtectionShieldBroker@@QEAAJXZ
0x1800160D8: "public: __cdecl CommonUtil::AutoRef<struct CommonUtil::ISecurityAttributes>::~AutoRef<struct CommonUtil::ISecurityAttributes>(void) __ptr64" ??1?$AutoRef@UISecurityAttributes@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180024810: "const ShieldProvider::ShieldProviderUserSessionAgent::`RTTI Complete Object Locator'{for `IShieldProviderUserSessionAgent'}" ??_R4ShieldProviderUserSessionAgent@ShieldProvider@@6BIShieldProviderUserSessionAgent@@@
0x18000F2E0: "public: virtual long __cdecl DefenderShieldBroker::GetRunningMode(enum tagMPRUNNING_MODE * __ptr64) __ptr64" ?GetRunningMode@DefenderShieldBroker@@UEAAJPEAW4tagMPRUNNING_MODE@@@Z
0x1800188C0: "long __cdecl CommonUtil::MpNewAlloc(void * __ptr64 * __ptr64,unsigned __int64)" ?MpNewAlloc@CommonUtil@@YAJPEAPEAX_K@Z
0x180026560: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@8
0x18001CD00: "public: virtual void * __ptr64 __cdecl std::bad_array_new_length::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_array_new_length@std@@UEAAPEAXI@Z
0x180026718: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@8
0x18002E890: "__vectorcall ??_R0?AVexception@std@" ??_R0?AVexception@std@@@8
0x18000FE20: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetThirdPartyFwDetails(struct tagWSC_PRODUCT_INFO * __ptr64 * __ptr64) __ptr64" ?GetThirdPartyFwDetails@NetworkProtectionShieldBroker@@UEAAJPEAPEAUtagWSC_PRODUCT_INFO@@@Z
0x180020CC4: "__cdecl _guard_iat_table" __guard_iat_table
0x1800188F8: "long __cdecl CommonUtil::HrDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrDuplicateStringW@CommonUtil@@YAJPEAPEAGPEBG@Z
0x180023B68: "__vectorcall ??_R3type_info" ??_R3type_info@@8
0x180023B80: "__vectorcall ??_R2type_info" ??_R2type_info@@8
0x1800170D8: "public: class CWString * __ptr64 __cdecl CSmartPtr<class CWString,class VolatileOps<class CWString> >::operator->(void) __ptr64" ??C?$CSmartPtr@VCWString@@V?$VolatileOps@VCWString@@@@@@QEAAPEAVCWString@@XZ
0x180025CC0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@8
0x1800140F0: "public: virtual long __cdecl DataProtectionShieldBroker::GetIsReady(int * __ptr64) __ptr64" ?GetIsReady@DataProtectionShieldBroker@@UEAAJPEAH@Z
0x180025E78: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@8
0x1800142D0: "public: virtual long __cdecl DataProtectionShieldBroker::GetCloudBackupProviders(unsigned long * __ptr64,struct Shield_CloudBackupProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetCloudBackupProviders@DataProtectionShieldBroker@@UEAAJPEAKPEAPEAUShield_CloudBackupProviderInfo@@@Z
0x180002CC0: "void __cdecl Microsoft::WRL::Details::RaiseException(long,unsigned long)" ?RaiseException@Details@WRL@Microsoft@@YAXJK@Z
0x18001D529: memcpy
0x180010160: "long __cdecl CNetworkProtectionShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CNetworkProtectionShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180026930: "__vectorcall ??_R1A@?0A@EA@DataProtectionShieldBroker" ??_R1A@?0A@EA@DataProtectionShieldBroker@@8
0x180023550: WPP_e4a6c66a564c359e55d4c3ca4aeb39bb_Traceguids
0x180021F38: CLSID_AccountProtectionShieldBroker
0x1800278C8: "const ILockable::`RTTI Complete Object Locator'" ??_R4ILockable@@6B@
0x180012530: "public: virtual long __cdecl AccountProtectionShieldBroker::GetUserAccountName(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetUserAccountName@AccountProtectionShieldBroker@@UEAAJPEAPEAG@Z
0x180020008: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000F690: "public: virtual void * __ptr64 __cdecl AppAndBrowserShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EAppAndBrowserShieldBroker@@UEAAPEAXI@Z
0x180011AE0: "public: virtual long __cdecl DashboardBroker::GetPillarStatus(unsigned long,struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@DashboardBroker@@UEAAJKPEAUPillarStatus@@@Z
0x180022728: "fullhistory" ??_C@_1BI@OBPPGOF@?$AAf?$AAu?$AAl?$AAl?$AAh?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x180021228: "App and Browser Shield Broker" ??_C@_1DM@NJNJEMJA@?$AAA?$AAp?$AAp?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAw?$AAs?$AAe?$AAr?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x18000DA90: "public: virtual long __cdecl DefenderShieldBroker::SetSignatureUpdateProgressSink(struct ISignatureUpdateProgressSink * __ptr64) __ptr64" ?SetSignatureUpdateProgressSink@DefenderShieldBroker@@UEAAJPEAUISignatureUpdateProgressSink@@@Z
0x18001D4A4: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180023520: WPP_32425024c0723cf33141847b40efd64a_Traceguids
0x1800178E4: "public: virtual __cdecl CError::~CError(void) __ptr64" ??1CError@@UEAA@XZ
0x180024198: "__vectorcall ??_R3?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R3?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x180020488: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180023E08: "__vectorcall ??_R2?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R2?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x1800280A0: ?_TlgEvent@?BD@??GetPolicyConfigString@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJIPEAPEAG@Z@4U<unnamed-type-_TlgEvent>@?BD@??123@AEAAJI0@Z@B
0x180020418: api-ms-win-crt-stdio-l1-1-0_NULL_THUNK_DATA
0x1800215E0: "Security Health Agent Host" ??_C@_1DG@HIJKOPHD@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?5?$AAA?$AAg?$AAe?$AAn?$AAt?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x180020428: "__cdecl _imp_memset" __imp_memset
0x18001D410: "__cdecl _acrt_initialize" __acrt_initialize
0x180026650: "__vectorcall ??_R1A@?0A@EA@OSProtectionShieldBroker" ??_R1A@?0A@EA@OSProtectionShieldBroker@@8
0x180013360: "public: virtual long __cdecl HardwareShieldBroker::IsSystemGuardManaged(int * __ptr64) __ptr64" ?IsSystemGuardManaged@HardwareShieldBroker@@UEAAJPEAH@Z
0x1800252A8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x1800200C0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800106F0: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchTpmInitClear(void) __ptr64" ?LaunchTpmInitClear@ShieldProcessLauncherBroker@1@UEAAJXZ
0x180021EE8: CLSID_ManagementShieldBroker
0x18001A380: "public: virtual void * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::GetSD(void)const __ptr64" ?GetSD@CSecurityAttributesHolder@CommonUtil@@UEBAPEAXXZ
0x18001CF82: "__cdecl initterm" _initterm
0x180020460: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18001CC1C: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x18001F968: "const CommonUtil::CExplicitAccessControl::`vftable'" ??_7CExplicitAccessControl@CommonUtil@@6B@
0x18002C520: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft@@@8
0x180027490: "const IRefCounted::`RTTI Complete Object Locator'" ??_R4IRefCounted@@6B@
0x180013280: "public: virtual long __cdecl HardwareShieldBroker::IsDmaGuardEnabled(int * __ptr64) __ptr64" ?IsDmaGuardEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x180025F18: "const HealthAdvisorShieldBroker::`RTTI Complete Object Locator'" ??_R4HealthAdvisorShieldBroker@@6B@
0x180022848: "providers" ??_C@_1BE@JMMOCNDL@?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA?$AA@
0x18002F4C8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180020ED0: "Shield Provider User Session Age" ??_C@_1EG@FOIOJKHN@?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?5?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAA?$AAg?$AAe@
0x18000E830: "public: virtual long __cdecl DefenderShieldBroker::SetPuaProtectionState(int) __ptr64" ?SetPuaProtectionState@DefenderShieldBroker@@UEAAJH@Z
0x180026730: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x1800265C0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x180020590: "__cdecl _xi_z" __xi_z
0x1800213C0: "ForceField Web Protection Shield" ??_C@_1FA@OIOPCKEN@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAF?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAW?$AAe?$AAb?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd@
0x18001F890: "const CommonUtil::CHResultException::`vftable'" ??_7CHResultException@CommonUtil@@6B@
0x180002C10: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001F720: "__cdecl IShieldProviderUserSessionAgentProxyVtbl" _IShieldProviderUserSessionAgentProxyVtbl
0x180020F18: "Both" ??_C@_19OBNAGCDI@?$AAB?$AAo?$AAt?$AAh?$AA?$AA@
0x180020088: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18001F810: "const IRefCounted::`vftable'" ??_7IRefCounted@@6B@
0x180027420: "__vectorcall ??_R1A@?0A@EA@IRefCounted" ??_R1A@?0A@EA@IRefCounted@@8
0x180020D98: "SleepConditionVariableCS" ??_C@_0BJ@JEBJOJFJ@SleepConditionVariableCS?$AA@
0x180024DD8: "const DefenderShieldBroker::`RTTI Complete Object Locator'" ??_R4DefenderShieldBroker@@6B@
0x180027BF8: "const CommonUtil::CSecurityAttributesAlloc<struct CommonUtil::CAutoLocalPtr<void * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@6B@
0x180012FA0: "public: virtual long __cdecl HardwareShieldBroker::IsHvciEnabled(int * __ptr64) __ptr64" ?IsHvciEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x18002CB80: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@@8
0x1800246A0: "__vectorcall ??_R1A@?0A@EA@IShieldProviderUserSessionAgent" ??_R1A@?0A@EA@IShieldProviderUserSessionAgent@@8
0x18001D05C: "__cdecl _C_specific_handler" __C_specific_handler
0x180024750: "__vectorcall ??_R3ShieldProviderUserSessionAgent@ShieldProvider" ??_R3ShieldProviderUserSessionAgent@ShieldProvider@@8
0x180024280: "__vectorcall ??_R2ShieldProviderUserSessionAgent@ShieldProvider" ??_R2ShieldProviderUserSessionAgent@ShieldProvider@@8
0x180013B10: "public: virtual long __cdecl OSProtectionShieldBroker::IsWindowsInSMode(int * __ptr64) __ptr64" ?IsWindowsInSMode@OSProtectionShieldBroker@@UEAAJPEAH@Z
0x1800261F8: "const AccountProtectionShieldBroker::`RTTI Complete Object Locator'" ??_R4AccountProtectionShieldBroker@@6B@
0x180020338: "__cdecl _imp___std_exception_destroy" __imp___std_exception_destroy
0x180021C80: "O:BAG:BAD:(A;;0x3;;;SY)(A;;0x3;;" ??_C@_1JM@OGPCBCHC@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA3?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA3?$AA?$DL?$AA?$DL@
0x180026398: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@8
0x1800215C8: "AppID\%s" ??_C@_1BC@OOMLKBKK@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000563C: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetToastLaunchAction(unsigned short const * __ptr64,struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64) __ptr64" ?SetToastLaunchAction@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEBGPEAUIXmlDocument@Dom@Xml@Data@Windows@@@Z
0x18001D410: "__cdecl _acrt_thread_detach" __acrt_thread_detach
0x18000F690: "public: virtual void * __ptr64 __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EShieldProcessLauncherBroker@0@UEAAPEAXI@Z
0x1800202F0: "__cdecl _imp_RoGetActivationFactory" __imp_RoGetActivationFactory
0x180020538: msvcp_win_NULL_THUNK_DATA
0x180027CF8: "const CommonUtil::CSecurityAttributesHolder::`RTTI Complete Object Locator'" ??_R4CSecurityAttributesHolder@CommonUtil@@6B@
0x18000DC20: "public: virtual long __cdecl DefenderShieldBroker::RegisterForAllSessionNotifications(unsigned long) __ptr64" ?RegisterForAllSessionNotifications@DefenderShieldBroker@@UEAAJK@Z
0x180022E58: "__cdecl GUID_ad032184_b0de_4962_bbac_146621f0770e" _GUID_ad032184_b0de_4962_bbac_146621f0770e
0x18001D535: memmove
0x180026358: "__vectorcall ??_R2IHardwareShield" ??_R2IHardwareShield@@8
0x180026498: "__vectorcall ??_R3IHardwareShield" ??_R3IHardwareShield@@8
0x18002F401: "struct CommonUtil::CCommonThrowWinErr CommonUtil::tWinErr" ?tWinErr@CommonUtil@@3UCCommonThrowWinErr@1@A
0x18000DA30: "public: virtual long __cdecl DefenderShieldBroker::GetThreatsFromLastScan(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetThreatsFromLastScan@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x180022430: "arguments" ??_C@_1BE@HBOKKIMG@?$AAa?$AAr?$AAg?$AAu?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x18002F3F8: WPP_REGISTRATION_GUIDS
0x180011560: "public: virtual long __cdecl ExploitShieldBroker::RemoveImageNameAndItsMitigationPolicies(unsigned short * __ptr64) __ptr64" ?RemoveImageNameAndItsMitigationPolicies@ExploitShieldBroker@@UEAAJPEAG@Z
0x18001EBA0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDashboard>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@6B@
0x180015110: "public: long __cdecl ForceFieldShieldBroker::RuntimeClassInitialize(enum Shield_ForceFieldProviderType) __ptr64" ?RuntimeClassInitialize@ForceFieldShieldBroker@@QEAAJW4Shield_ForceFieldProviderType@@@Z
0x180027398: "__vectorcall ??_R2IRefCounted" ??_R2IRefCounted@@8
0x180027478: "__vectorcall ??_R3IRefCounted" ??_R3IRefCounted@@8
0x180022040: "%s...\" ??_C@_1O@DFECFENC@?$AA?$CF?$AAs?$AA?4?$AA?4?$AA?4?$AA?2?$AA?$AA@
0x180026760: "__vectorcall ??_R3OSProtectionShieldBroker" ??_R3OSProtectionShieldBroker@@8
0x180026500: "__vectorcall ??_R2OSProtectionShieldBroker" ??_R2OSProtectionShieldBroker@@8
0x180002C90: "public: virtual void * __ptr64 __cdecl ShieldElevationBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GShieldElevationBroker@@UEAAPEAXI@Z
0x180013F20: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IOSProtectionShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001C79C: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x18001CFA6: malloc
0x1800226E0: "exclusions" ??_C@_1BG@MNOMLMPF@?$AAe?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180020250: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x18001FFD0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180021598: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800268F0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x180026A28: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x180025140: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@8
0x180012AE0: "public: long __cdecl HardwareShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@HardwareShieldBroker@@QEAAJXZ
0x18000CCAC: ??$?0$0DC@@HStringReference@Wrappers@WRL@Microsoft@@QEAA@AEAY0DC@$$CBG@Z
0x1800252F8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@8
0x18001A7B0: "public: virtual void * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<struct CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x180021348: "Hardware Shield Broker" ??_C@_1CO@CFEBFALC@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180022080: "<toast><visual><binding template" ??_C@_1BCA@EJGCPMBJ@?$AA?$DM?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?$DO?$AA?$DM?$AAv?$AAi?$AAs?$AAu?$AAa?$AAl?$AA?$DO?$AA?$DM?$AAb?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAe?$AAm?$AAp?$AAl?$AAa?$AAt?$AAe@
0x180010F70: "public: virtual long __cdecl AppAndBrowserShieldBroker::GetIsWarningStateDismissed(enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@AppAndBrowserShieldBroker@@UEAAJW4PillarStatusFlag@@PEAH@Z
0x1800202B0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18002C900: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IExploitShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001D440: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000E4C0: "public: virtual long __cdecl DefenderShieldBroker::SetConfigBinaryValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64) __ptr64" ?SetConfigBinaryValue@DefenderShieldBroker@@UEAAJPEBG0KPEAE@Z
0x180027A68: "__vectorcall ??_R3?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil" ??_R3?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@8
0x180027C88: "__vectorcall ??_R2?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil" ??_R2?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@8
0x18001C6D0: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x18001F9F0: "const CommonUtil::CHResultExceptionImpl::`vftable'" ??_7CHResultExceptionImpl@CommonUtil@@6B@
0x18002E7C0: "__vectorcall ??_R0?AVForceFieldShieldBroker@" ??_R0?AVForceFieldShieldBroker@@@8
0x18001D006: "__cdecl cexit" _cexit
0x180016760: "public: virtual void * __ptr64 __cdecl std::exception::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gexception@std@@UEAAPEAXI@Z
0x18001AB00: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x180024A08: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x180001400: DllCanUnloadNow
0x18001C5A0: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x180024FF0: "__vectorcall ??_R1A@?0A@EA@INetworkProtectionShield" ??_R1A@?0A@EA@INetworkProtectionShield@@8
0x18001E150: "const ShieldProvider::ShieldProviderUserSessionAgent::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<2>,1,struct INotificationActivationCallback>'}" ??_7ShieldProviderUserSessionAgent@ShieldProvider@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@@
0x180014580: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDataProtectionShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001D074: "__cdecl _std_exception_copy" __std_exception_copy
0x180024510: "__vectorcall ??_R1BB@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R1BB@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x18000FEE0: "public: virtual long __cdecl NetworkProtectionShieldBroker::DisableProfileFirewall(enum NET_FW_PROFILE_TYPE2_) __ptr64" ?DisableProfileFirewall@NetworkProtectionShieldBroker@@UEAAJW4NET_FW_PROFILE_TYPE2_@@@Z
0x180027C60: "__vectorcall ??_R1A@?0A@EA@?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@8
0x18001AA78: "private: static void __cdecl std::vector<struct _EXPLICIT_ACCESS_W,class std::allocator<struct _EXPLICIT_ACCESS_W> >::_Xlength(void)" ?_Xlength@?$vector@U_EXPLICIT_ACCESS_W@@V?$allocator@U_EXPLICIT_ACCESS_W@@@std@@@std@@CAXXZ
0x180016650: "[thunk]:public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECRefCountedBaseX@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18002E060: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@@8
0x18001D410: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x180020430: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x18001C3C8: "void __cdecl __scrt_uninitialize_type_info(void)" ?__scrt_uninitialize_type_info@@YAXXZ
0x180012C40: "public: virtual long __cdecl HardwareShieldBroker::ClearTPM(int * __ptr64) __ptr64" ?ClearTPM@HardwareShieldBroker@@UEAAJPEAH@Z
0x18000D7F0: "public: virtual long __cdecl DefenderShieldBroker::CancelScan(void) __ptr64" ?CancelScan@DefenderShieldBroker@@UEAAJXZ
0x18001FCA0: "__cdecl ishieldproviderusersessionagent_ProxyVtblList" _ishieldproviderusersessionagent_ProxyVtblList
0x180022A98: "FeatureToastBulldogImg.png" ??_C@_1DG@ELKOFFEK@?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAT?$AAo?$AAa?$AAs?$AAt?$AAB?$AAu?$AAl?$AAl?$AAd?$AAo?$AAg?$AAI?$AAm?$AAg?$AA?4?$AAp?$AAn?$AAg?$AA?$AA@
0x180029DA4: "__cdecl _IMPORT_DESCRIPTOR_Wldp" __IMPORT_DESCRIPTOR_Wldp
0x18002F3D0: WPP_MAIN_CB
0x18002F4B8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhsrvowkilerwviUhsrvowkilerwvihvierxvUhsrvowfgroUlyquivUznwGEUkxsOlyq@ShieldUtil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhsrvowkilerwviUhsrvowkilerwvihvierxvUhsrvowfgroUlyquivUznwGEUkxsOlyq@ShieldUtil
0x18000DD00: "public: virtual long __cdecl DefenderShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@DefenderShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x180013F70: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IOSProtectionShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18002DA18: "__vectorcall ??_R0?AVHealthAdvisorShieldBroker@" ??_R0?AVHealthAdvisorShieldBroker@@@8
0x1800042B0: "public: virtual long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::Activate(unsigned short const * __ptr64,unsigned short const * __ptr64,struct NOTIFICATION_USER_INPUT_DATA const * __ptr64,unsigned long) __ptr64" ?Activate@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJPEBG0PEBUNOTIFICATION_USER_INPUT_DATA@@K@Z
0x180024708: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x180024370: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x18001F9D8: "const CommonUtil::CWinSecurityAclAlloc<class CommonUtil::CAutoUniquePtr<struct _ACL,void> >::`vftable'" ??_7?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@6B@
0x180027B68: "__vectorcall ??_R1A@?0A@EA@?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@8
0x180029DE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180015550: "public: virtual long __cdecl ForceFieldShieldBroker::GetIsWarningStateDismissed(struct _GUID,enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@ForceFieldShieldBroker@@UEAAJU_GUID@@W4PillarStatusFlag@@PEAH@Z
0x18002C3F0: "__vectorcall ??_R0?AVbad_array_new_length@std@" ??_R0?AVbad_array_new_length@std@@@8
0x1800202D0: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180025358: "__vectorcall ??_R3IShieldProcessLauncher" ??_R3IShieldProcessLauncher@@8
0x180025218: "__vectorcall ??_R2IShieldProcessLauncher" ??_R2IShieldProcessLauncher@@8
0x180020328: "__cdecl _imp__callnewh" __imp__callnewh
0x180027D48: "__vectorcall ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil" ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil@@8
0x180023048: "IShieldElevationBroker" ??_C@_0BH@JAMMBIAJ@IShieldElevationBroker?$AA@
0x180020408: "__cdecl _imp___stdio_common_vsprintf_s" __imp___stdio_common_vsprintf_s
0x1800164C4: "public: __cdecl CSmartPtr<class CWString,class VolatileOps<class CWString> >::~CSmartPtr<class CWString,class VolatileOps<class CWString> >(void) __ptr64" ??1?$CSmartPtr@VCWString@@V?$VolatileOps@VCWString@@@@@@QEAA@XZ
0x180016890: "public: __cdecl CError::CError(class CError const & __ptr64) __ptr64" ??0CError@@QEAA@AEBV0@@Z
0x180002950: "private: virtual void * __ptr64 __cdecl CClassFactory::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClassFactory@@EEAAPEAXI@Z
0x180010010: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetPillarStatusEx(struct PillarStatusEx * __ptr64 * __ptr64) __ptr64" ?GetPillarStatusEx@NetworkProtectionShieldBroker@@UEAAJPEAPEAUPillarStatusEx@@@Z
0x180011C60: "public: virtual long __cdecl DashboardBroker::GetForceFieldPillarStatusEx(enum Shield_ForceFieldProviderType,struct PillarStatus * __ptr64,struct Shield_ForceFieldProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetForceFieldPillarStatusEx@DashboardBroker@@UEAAJW4Shield_ForceFieldProviderType@@PEAUPillarStatus@@PEAPEAUShield_ForceFieldProviderInfo@@@Z
0x180023D80: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x180024138: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x18000EAA0: "public: virtual long __cdecl DefenderShieldBroker::RestoreQuarantinedItem(struct _GUID) __ptr64" ?RestoreQuarantinedItem@DefenderShieldBroker@@UEAAJU_GUID@@@Z
0x1800204B0: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x1800124D0: "public: virtual long __cdecl AccountProtectionShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@AccountProtectionShieldBroker@@UEAAJPEAH@Z
0x18001D410: "__cdecl _scrt_stub_for_acrt_thread_detach" __scrt_stub_for_acrt_thread_detach
0x180029A10: "__cdecl TI3?AVbad_array_new_length@std@@" _TI3?AVbad_array_new_length@std@@
0x180022368: "protocol" ??_C@_1BC@CJFLOEF@?$AAp?$AAr?$AAo?$AAt?$AAo?$AAc?$AAo?$AAl?$AA?$AA@
0x18000D5D0: "public: long __cdecl DefenderShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@DefenderShieldBroker@@QEAAJXZ
0x18002EB10: "__vectorcall ??_R0?AUISecurityAttributes@CommonUtil@" ??_R0?AUISecurityAttributes@CommonUtil@@@8
0x18000F120: "public: virtual long __cdecl DefenderShieldBroker::ConveyUserChoiceForSampleList(unsigned long,struct tagMPSAMPLE_SUBMISSION_CONSENT * __ptr64 * __ptr64) __ptr64" ?ConveyUserChoiceForSampleList@DefenderShieldBroker@@UEAAJKPEAPEAUtagMPSAMPLE_SUBMISSION_CONSENT@@@Z
0x18002F400: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x18002E230: "__vectorcall ??_R0?AUIDataProtectionShield@" ??_R0?AUIDataProtectionShield@@@8
0x18002CA40: "__vectorcall ??_R0?AVShieldProviderUserSessionAgent@ShieldProvider@" ??_R0?AVShieldProviderUserSessionAgent@ShieldProvider@@@8
0x180022310: "/toast" ??_C@_1O@MHLOEHOB@?$AA?1?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?$AA@
0x1800104B0: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::StartCleanPC(void) __ptr64" ?StartCleanPC@ShieldProcessLauncherBroker@1@UEAAJXZ
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDefenderShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18002C608: "__vectorcall ??_R0?AU?$RuntimeClassFlags@$03@WRL@Microsoft@" ??_R0?AU?$RuntimeClassFlags@$03@WRL@Microsoft@@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct INetworkProtectionShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001A390: "public: virtual struct _ACL * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::GetDacl(void)const __ptr64" ?GetDacl@CSecurityAttributesHolder@CommonUtil@@UEBAPEAU_ACL@@XZ
0x180026980: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x180022740: "windowsdefender://enable_fw?%s" ??_C@_1DO@CMBCALJM@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA_?$AAf?$AAw?$AA?$DP?$AA?$CF?$AAs?$AA?$AA@
0x180022958: "ms-settings:%s" ??_C@_1BO@MLKFPAOC@?$AAm?$AAs?$AA?9?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x1800269D0: "__vectorcall ??_R1A@?0A@EA@IDataProtectionShield" ??_R1A@?0A@EA@IDataProtectionShield@@8
0x180022AE8: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x1800234F8: WPP_e51e6195b8e933c5cd31a81100710ebf_Traceguids
0x180002790: "public: virtual long __cdecl CClassFactory::LockServer(int) __ptr64" ?LockServer@CClassFactory@@UEAAJH@Z
0x18001E070: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IClassFactory>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@6B@
0x18001A380: "public: virtual struct _ACL * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<struct CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64> >::Get(void)const __ptr64" ?Get@?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@UEBAPEAU_ACL@@XZ
0x1800149B0: "public: virtual long __cdecl ManagementShieldBroker::GetIsOSServerSKU(int * __ptr64) __ptr64" ?GetIsOSServerSKU@ManagementShieldBroker@@UEAAJPEAH@Z
0x18001C54C: "__cdecl _scrt_dllmain_uninitialize_c" __scrt_dllmain_uninitialize_c
0x180024080: "__vectorcall ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x180027248: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x18001D0F0: IUnknown_AddRef_Proxy
0x180002D24: sprintf_s
0x180027578: "__vectorcall ??_R1A@?0A@EA@CHResultException@CommonUtil" ??_R1A@?0A@EA@CHResultException@CommonUtil@@8
0x180024D10: "__vectorcall ??_R1A@?0A@EA@IDefenderShield" ??_R1A@?0A@EA@IDefenderShield@@8
0x18000F690: "public: virtual void * __ptr64 __cdecl ForceFieldShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EForceFieldShieldBroker@@UEAAPEAXI@Z
0x18002D160: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@@8
0x1800229F8: "samples?viewsample" ??_C@_1CG@EBPFMAEJ@?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AA?$DP?$AAv?$AAi?$AAe?$AAw?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AA?$AA@
0x180024FC8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x18001C828: atexit
0x18000E670: "public: virtual long __cdecl DefenderShieldBroker::IsAutoSampleSubmissionEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsAutoSampleSubmissionEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x18002DF70: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@@8
0x180026CD8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@8
0x180026B20: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@8
0x18000F690: "public: virtual void * __ptr64 __cdecl OSProtectionShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EOSProtectionShieldBroker@@UEAAPEAXI@Z
0x180020D00: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x18001E230: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDefenderShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@6B@
0x180024678: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x1800240A8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x180023C60: "__vectorcall ??_R3bad_array_new_length@std" ??_R3bad_array_new_length@std@@8
0x180022B50: "__cdecl GUID_91d01f44_11d0_4f2b_b516_757a456f47b1" _GUID_91d01f44_11d0_4f2b_b516_757a456f47b1
0x180023C78: "__vectorcall ??_R2bad_array_new_length@std" ??_R2bad_array_new_length@std@@8
0x180019024: "long __cdecl CommonUtil::UtilRegGetValueDword(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?UtilRegGetValueDword@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAK@Z
0x18001D34C: "__cdecl vsnprintf" _vsnprintf
0x180022BC0: CLSID_OSProtectionShield
0x180010330: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct INetworkProtectionShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180014270: "public: virtual long __cdecl DataProtectionShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@DataProtectionShieldBroker@@UEAAJPEAH@Z
0x18000DB50: "public: virtual long __cdecl DefenderShieldBroker::CancelSignatureUpdate(void) __ptr64" ?CancelSignatureUpdate@DefenderShieldBroker@@UEAAJXZ
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IExploitShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18000CC50: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18001F5F0: "__cdecl IShieldElevationBrokerStubVtbl" _IShieldElevationBrokerStubVtbl
0x1800202D8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000C9A0: "long __cdecl CShieldProviderUserSessionAgent_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CShieldProviderUserSessionAgent_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180024600: "__vectorcall ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x180020438: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18002D278: "__vectorcall ??_R0?AVShieldProcessLauncherBroker@0" ??_R0?AVShieldProcessLauncherBroker@0@@8
0x18000FAA0: "public: virtual long __cdecl NetworkProtectionShieldBroker::BlockAllInboundTraffic(enum NET_FW_PROFILE_TYPE2_,int) __ptr64" ?BlockAllInboundTraffic@NetworkProtectionShieldBroker@@UEAAJW4NET_FW_PROFILE_TYPE2_@@H@Z
0x1800214E0: "ThreadingModel" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x180024798: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<2>,1,struct INotificationActivationCallback>'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@12@@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDataProtectionShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18001D410: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x1800201C8: "__cdecl _imp_CStdStubBuffer_CountRefs" __imp_CStdStubBuffer_CountRefs
0x180020440: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1800224F0: "scenario" ??_C@_1BC@POHAFONL@?$AAs?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$AA@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IApplicationGuardShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180023310: "S-1-5-80-956008885-3418522649-18" ??_C@_1HO@PPDIHLHA@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA9?$AA5?$AA6?$AA0?$AA0?$AA8?$AA8?$AA8?$AA5?$AA?9?$AA3?$AA4?$AA1?$AA8?$AA5?$AA2?$AA2?$AA6?$AA4?$AA9?$AA?9?$AA1?$AA8@
0x180024C30: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x180024D68: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x18002C840: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@@8
0x180025900: "__vectorcall ??_R3ExploitShieldBroker" ??_R3ExploitShieldBroker@@8
0x180013CF0: "public: virtual long __cdecl OSProtectionShieldBroker::ResetDevice(void) __ptr64" ?ResetDevice@OSProtectionShieldBroker@@UEAAJXZ
0x1800256A0: "__vectorcall ??_R2ExploitShieldBroker" ??_R2ExploitShieldBroker@@8
0x180025398: "const ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`RTTI Complete Object Locator'" ??_R4ShieldProcessLauncherBroker@0@6B@
0x180010BB0: "public: virtual long __cdecl AppAndBrowserShieldBroker::SetAppRepSmartScreenMode(enum AppAndBrowserControlLevel) __ptr64" ?SetAppRepSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJW4AppAndBrowserControlLevel@@@Z
0x180023EA0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@8
0x180026F90: "__vectorcall ??_R1A@?0A@EA@IApplicationGuardShield" ??_R1A@?0A@EA@IApplicationGuardShield@@8
0x180025ED8: "__vectorcall ??_R3IHealthAdvisorShield" ??_R3IHealthAdvisorShield@@8
0x1800205B8: "__cdecl _xt_a" __xt_a
0x180025D98: "__vectorcall ??_R2IHealthAdvisorShield" ??_R2IHealthAdvisorShield@@8
0x18001BD9C: "public: static long __cdecl CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection>::OnInitialize(class CommonUtil::CMpCriticalSection * __ptr64)" ?OnInitialize@?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@SAJPEAVCMpCriticalSection@2@@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl HealthAdvisorShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GHealthAdvisorShieldBroker@@UEAAPEAXI@Z
0x18002EDE4: "__cdecl _scrt_debugger_hook_flag" __scrt_debugger_hook_flag
0x18000FF40: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetFirewallProfileDetails(enum NET_FW_PROFILE_TYPE2_,struct tagFIREWALL_PROFILE_INFO * __ptr64 * __ptr64) __ptr64" ?GetFirewallProfileDetails@NetworkProtectionShieldBroker@@UEAAJW4NET_FW_PROFILE_TYPE2_@@PEAPEAUtagFIREWALL_PROFILE_INFO@@@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl DataProtectionShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDataProtectionShieldBroker@@UEAAPEAXI@Z
0x18000F270: "public: virtual long __cdecl DefenderShieldBroker::SwitchOffLimitedPeriodicScanningMode(void) __ptr64" ?SwitchOffLimitedPeriodicScanningMode@DefenderShieldBroker@@UEAAJXZ
0x1800200A8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800264D8: "const HardwareShieldBroker::`RTTI Complete Object Locator'" ??_R4HardwareShieldBroker@@6B@
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IShieldElevationBroker>::~AutoRef<struct IShieldElevationBroker>(void) __ptr64" ??1?$AutoRef@UIShieldElevationBroker@@@CommonUtil@@QEAA@XZ
0x18000E7C0: "public: virtual long __cdecl DefenderShieldBroker::IsPuaProtectionEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsPuaProtectionEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x18002C5A0: "__vectorcall ??_R0?AVCClassFactory@" ??_R0?AVCClassFactory@@@8
0x1800203C0: "__cdecl _imp__seh_filter_dll" __imp__seh_filter_dll
0x180027A50: "__vectorcall ??_R2IExplicitAccessControl@CommonUtil" ??_R2IExplicitAccessControl@CommonUtil@@8
0x180027B20: "__vectorcall ??_R3IExplicitAccessControl@CommonUtil" ??_R3IExplicitAccessControl@CommonUtil@@8
0x1800224C8: "title" ??_C@_1M@NFEAPLNL@?$AAt?$AAi?$AAt?$AAl?$AAe?$AA?$AA@
0x1800275F8: "__vectorcall ??_R3exception@std" ??_R3exception@std@@8
0x180027540: "__vectorcall ??_R2exception@std" ??_R2exception@std@@8
0x18001A800: "public: virtual void * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<class CommonUtil::CAutoUniquePtr<struct _ACL,void> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x180014CB0: "public: long __cdecl ApplicationGuardShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@ApplicationGuardShieldBroker@@QEAAJXZ
0x1800278F0: "__vectorcall ??_R3CRefObject@CommonUtil" ??_R3CRefObject@CommonUtil@@8
0x180027908: "__vectorcall ??_R2CRefObject@CommonUtil" ??_R2CRefObject@CommonUtil@@8
0x180013DB0: "long __cdecl COSProtectionShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?COSProtectionShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IShieldProcessLauncher>::~AutoRef<struct IShieldProcessLauncher>(void) __ptr64" ??1?$AutoRef@UIShieldProcessLauncher@@@CommonUtil@@QEAA@XZ
0x18002CF60: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@@8
0x180002610: DllMain
0x180025AD0: "__vectorcall ??_R1A@?0A@EA@DashboardBroker" ??_R1A@?0A@EA@DashboardBroker@@8
0x180020180: "__cdecl _imp_NdrDllRegisterProxy" __imp_NdrDllRegisterProxy
0x1800260B8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@8
0x18001A210: "long __cdecl CommonUtil::UtilConvertStringSidToSid(void * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilConvertStringSidToSid@CommonUtil@@YAJPEAPEAXPEBG@Z
0x18001D401: "__cdecl _stdio_common_vsprintf" __stdio_common_vsprintf
0x18001D410: "__cdecl _scrt_stub_for_acrt_thread_attach" __scrt_stub_for_acrt_thread_attach
0x180022EF8: WPP_0202d75b77193242d44ac4c5ca3dfa5f_Traceguids
0x180023028: WPP_76faa0f9906f37e3960e213a4a35a29e_Traceguids
0x180010980: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProcessLauncher>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001CA00: "__cdecl RTC_Terminate" _RTC_Terminate
0x180025420: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@8
0x1800255D8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@8
0x180020190: "__cdecl _imp_NdrDllCanUnloadNow" __imp_NdrDllCanUnloadNow
0x180001040: "__cdecl ishieldproviderusersessionagent_IID_Lookup" _ishieldproviderusersessionagent_IID_Lookup
0x1800202C8: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IAppAndBrowserShield>::~AutoRef<struct IAppAndBrowserShield>(void) __ptr64" ??1?$AutoRef@UIAppAndBrowserShield@@@CommonUtil@@QEAA@XZ
0x180020420: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180018120: "long __cdecl CommonUtil::MpNewBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@G@CommonUtil@@YAJPEAPEAG_K@Z
0x18000C920: "public: virtual void * __ptr64 __cdecl ShieldProvider::ShieldProviderUserSessionAgent::`scalar deleting destructor'(unsigned int) __ptr64" ??_GShieldProviderUserSessionAgent@ShieldProvider@@UEAAPEAXI@Z
0x180020360: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800245D8: "__vectorcall ??_R17?0A@EA@INotificationActivationCallback" ??_R17?0A@EA@INotificationActivationCallback@@8
0x180026ED8: "__vectorcall ??_R2IApplicationGuardShield" ??_R2IApplicationGuardShield@@8
0x180027018: "__vectorcall ??_R3IApplicationGuardShield" ??_R3IApplicationGuardShield@@8
0x180020068: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180025958: "const ExploitShieldBroker::`RTTI Complete Object Locator'" ??_R4ExploitShieldBroker@@6B@
0x180023C98: "__vectorcall ??_R1A@?0A@EA@bad_array_new_length@std" ??_R1A@?0A@EA@bad_array_new_length@std@@8
0x180010F10: "public: virtual long __cdecl AppAndBrowserShieldBroker::RevokeWarningStateDismissal(enum PillarStatusFlag) __ptr64" ?RevokeWarningStateDismissal@AppAndBrowserShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x1800105D0: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchThirdPartyRemediationBinary(unsigned short * __ptr64,enum SecurityProductType) __ptr64" ?LaunchThirdPartyRemediationBinary@ShieldProcessLauncherBroker@1@UEAAJPEAGW4SecurityProductType@@@Z
0x18001F660: ishieldproviderusersessionagent_ProxyFileInfo
0x180025DD8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@8
0x1800029B0: "long __cdecl CClassFactory_CreateInstance(long (__cdecl*)(struct _GUID const & __ptr64,void * __ptr64 * __ptr64),unsigned short const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CClassFactory_CreateInstance@@YAJP6AJAEBU_GUID@@PEAPEAX@ZPEBG01@Z
0x180020300: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x180022C10: CLSID_DataProtectionShield
0x180025370: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProcessLauncher>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@6B@
0x180012590: "public: virtual long __cdecl AccountProtectionShieldBroker::DisableNotifications(int) __ptr64" ?DisableNotifications@AccountProtectionShieldBroker@@UEAAJH@Z
0x180017930: "public: virtual int __cdecl CWString::TryLock(void)const __ptr64" ?TryLock@CWString@@UEBAHXZ
0x180029D7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180022358: "launch" ??_C@_1O@JOGIOGBG@?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
0x180017A08: "public: __cdecl CWString::CWString(unsigned short const * __ptr64) __ptr64" ??0CWString@@QEAA@PEBG@Z
0x18002EC20: "__vectorcall ??_R0?AVCSecurityAttributesHolder@CommonUtil@" ??_R0?AVCSecurityAttributesHolder@CommonUtil@@@8
0x1800266C8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x180027968: "const CommonUtil::CWinSecurityAclAlloc<struct CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@6B@
0x1800200F8: KERNEL32_NULL_THUNK_DATA
0x180021688: "AccessPermission" ??_C@_1CC@JNCNNNPK@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAe?$AAr?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000F690: "public: virtual void * __ptr64 __cdecl DashboardBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EDashboardBroker@@UEAAPEAXI@Z
0x180018B6C: "long __cdecl CommonUtil::UtilRegCreateKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long)" ?UtilRegCreateKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGKPEAU_SECURITY_ATTRIBUTES@@K@Z
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IForceFieldShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020280: "__cdecl _imp_?WldpQueryWindowsLockdownMode@@YAJPEAW4WLDP_WINDOWS_LOCKDOWN_MODE@@@Z" __imp_?WldpQueryWindowsLockdownMode@@YAJPEAW4WLDP_WINDOWS_LOCKDOWN_MODE@@@Z
0x18001CCD4: "public: __cdecl std::bad_array_new_length::bad_array_new_length(void) __ptr64" ??0bad_array_new_length@std@@QEAA@XZ
0x180027C38: "__vectorcall ??_R1A@?0A@EA@?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@8
0x180012000: "public: virtual long __cdecl HealthAdvisorShieldBroker::DismissAssessmentStatusCode(enum _tagHealthAdvisorAssessment,struct _tagAssessmentStatus) __ptr64" ?DismissAssessmentStatusCode@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@U_tagAssessmentStatus@@@Z
0x180008A28: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::BuildBodyActions(enum ToastType,struct ShieldProvider::_ToastExtraParams * __ptr64,struct ShieldProvider::ShieldProviderToastPropertyBag * __ptr64) __ptr64" ?BuildBodyActions@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEAU_ToastExtraParams@2@PEAUShieldProviderToastPropertyBag@2@@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IClassFactory>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180020018: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800157B0: CStdStubBuffer_Release
0x18001C2BC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180029AE8: "__cdecl TI3?AVCError@@" _TI3?AVCError@@
0x180020490: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180020130: "__cdecl _imp_ObjectStublessClient5" __imp_ObjectStublessClient5
0x180020138: "__cdecl _imp_ObjectStublessClient4" __imp_ObjectStublessClient4
0x18000EE30: "public: virtual long __cdecl DefenderShieldBroker::GetMpManagerStatus(enum tagMP_STATUS_QUERY_FLAGS,struct tagMPSTATUS_INFO * __ptr64) __ptr64" ?GetMpManagerStatus@DefenderShieldBroker@@UEAAJW4tagMP_STATUS_QUERY_FLAGS@@PEAUtagMPSTATUS_INFO@@@Z
0x180020128: "__cdecl _imp_ObjectStublessClient6" __imp_ObjectStublessClient6
0x18000DAF0: "public: virtual long __cdecl DefenderShieldBroker::UpdateSignatures(void) __ptr64" ?UpdateSignatures@DefenderShieldBroker@@UEAAJXZ
0x180020140: "__cdecl _imp_ObjectStublessClient3" __imp_ObjectStublessClient3
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::RunSystemAssessments(void) __ptr64" ?RunSystemAssessments@HealthAdvisorShieldBroker@@UEAAJXZ
0x18001F1B0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDataProtectionShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@6B@
0x18001D41C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18002F3B0: "__cdecl tls_index" _tls_index
0x180012A60: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAccountProtectionShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180002E98: "public: bool __cdecl TraceLoggingCorrelationVector::Increment(char * __ptr64) __ptr64" ?Increment@TraceLoggingCorrelationVector@@QEAA_NPEAD@Z
0x180024C58: "__vectorcall ??_R2IDefenderShield" ??_R2IDefenderShield@@8
0x180027C20: "__vectorcall ??_R2IWinSecurityAcl@CommonUtil" ??_R2IWinSecurityAcl@CommonUtil@@8
0x180024D98: "__vectorcall ??_R3IDefenderShield" ??_R3IDefenderShield@@8
0x180027990: "__vectorcall ??_R3IWinSecurityAcl@CommonUtil" ??_R3IWinSecurityAcl@CommonUtil@@8
0x18002D5E0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft@@@8
0x180018A68: "long __cdecl CommonUtil::UtilRegOpenKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilRegOpenKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGK@Z
0x180002B74: "public: __cdecl CommonUtil::AutoRef<class ForceFieldShieldBroker>::~AutoRef<class ForceFieldShieldBroker>(void) __ptr64" ??1?$AutoRef@VForceFieldShieldBroker@@@CommonUtil@@QEAA@XZ
0x180027830: "__vectorcall ??_R3?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R3?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x1800276C8: "__vectorcall ??_R2?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R2?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x18001CFCA: "__cdecl initialize_narrow_environment" _initialize_narrow_environment
0x180027BD0: "__vectorcall ??_R1A@?0A@EA@ISecurityAttributes@CommonUtil" ??_R1A@?0A@EA@ISecurityAttributes@CommonUtil@@8
0x1800202E8: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x180020150: "__cdecl _imp_CoGetObject" __imp_CoGetObject
0x1800141B0: "public: virtual long __cdecl DataProtectionShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@DataProtectionShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x18000CCF0: ??$?0$0CA@@HStringReference@Wrappers@WRL@Microsoft@@QEAA@AEAY0CA@$$CBG@Z
0x18002C7A0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@@8
0x18000E220: "public: virtual long __cdecl DefenderShieldBroker::GetConfigDateTimeValue(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _FILETIME * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?GetConfigDateTimeValue@DefenderShieldBroker@@UEAAJPEBG0PEAU_FILETIME@@PEAW4ConfigOrigin@@@Z
0x180027B90: "__vectorcall ??_R1A@?0A@EA@CSecurityAttributesHolder@CommonUtil" ??_R1A@?0A@EA@CSecurityAttributesHolder@CommonUtil@@8
0x180028768: "__cdecl tls_start" _tls_start
0x18000EF80: "public: virtual long __cdecl DefenderShieldBroker::RunOfflineScan(unsigned long) __ptr64" ?RunOfflineScan@DefenderShieldBroker@@UEAAJK@Z
0x18001A854: "public: struct _EXPLICIT_ACCESS_W * __ptr64 __cdecl std::vector<struct _EXPLICIT_ACCESS_W,class std::allocator<struct _EXPLICIT_ACCESS_W> >::_Emplace_reallocate<struct _EXPLICIT_ACCESS_W const & __ptr64>(struct _EXPLICIT_ACCESS_W * __ptr64 const,struct _EXPLICIT_ACCESS_W const & __ptr64) __ptr64" ??$_Emplace_reallocate@AEBU_EXPLICIT_ACCESS_W@@@?$vector@U_EXPLICIT_ACCESS_W@@V?$allocator@U_EXPLICIT_ACCESS_W@@@std@@@std@@QEAAPEAU_EXPLICIT_ACCESS_W@@QEAU2@AEBU2@@Z
0x180024A58: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@8
0x1800248A0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@8
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IDashboard>::~AutoRef<struct IDashboard>(void) __ptr64" ??1?$AutoRef@UIDashboard@@@CommonUtil@@QEAA@XZ
0x180025DB0: "__vectorcall ??_R1A@?0A@EA@HealthAdvisorShieldBroker" ??_R1A@?0A@EA@HealthAdvisorShieldBroker@@8
0x1800278A0: "const CWString::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CWString@@6BCRefCountedBase@@@
0x1800205A0: "__cdecl _xl_z" __xl_z
0x180022B40: "__cdecl GUID_53e31837_6600_4a81_9395_75cffe746f94" _GUID_53e31837_6600_4a81_9395_75cffe746f94
0x1800234A8: WPP_ef33d7ecf56a39337644b24fad224766_Traceguids
0x180026A10: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x1800268A0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x18002ED64: "__cdecl _isa_enabled" __isa_enabled
0x18001F4D0: ishieldelevation_ProxyFileInfo
0x180021660: "LaunchPermission" ??_C@_1CC@EFPFGCNO@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAP?$AAe?$AAr?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180022A70: "coreisolationreboot" ??_C@_1CI@CNMJEKIF@?$AAc?$AAo?$AAr?$AAe?$AAi?$AAs?$AAo?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AAr?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x180027508: "__vectorcall ??_R2CError" ??_R2CError@@8
0x1800275C8: "__vectorcall ??_R3CError" ??_R3CError@@8
0x1800260E0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x1800234E8: "RegDeleteTreeW" ??_C@_0P@OIIDMCBG@RegDeleteTreeW?$AA@
0x18002EAB0: "__vectorcall ??_R0?AV?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@" ??_R0?AV?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@@8
0x18001A370: "public: virtual struct _SECURITY_ATTRIBUTES * __ptr64 __cdecl CommonUtil::CSecurityAttributesHolder::GetSA(void)const __ptr64" ?GetSA@CSecurityAttributesHolder@CommonUtil@@UEBAPEAU_SECURITY_ATTRIBUTES@@XZ
0x18000F590: "public: virtual long __cdecl DefenderShieldBroker::GetAsrBlockedActions(struct _GUID,enum tagMP_ASR_QUERY_ID,unsigned long,unsigned long * __ptr64,struct tagMP_ASR_HISTORY_BLOCKED_ACTION * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetAsrBlockedActions@DefenderShieldBroker@@UEAAJU_GUID@@W4tagMP_ASR_QUERY_ID@@KPEAKPEAPEAPEAUtagMP_ASR_HISTORY_BLOCKED_ACTION@@@Z
0x18001C258: "void __cdecl operator delete(void * __ptr64,unsigned __int64)" ??3@YAXPEAX_K@Z
0x180014600: "public: long __cdecl ManagementShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@ManagementShieldBroker@@QEAAJXZ
0x180011E30: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDashboard>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@UEAAKXZ
0x1800233C0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001ED10: "const HealthAdvisorShieldBroker::`vftable'" ??_7HealthAdvisorShieldBroker@@6B@
0x18002F3B8: "bool g_fDevMode" ?g_fDevMode@@3_NA
0x18002C750: "__vectorcall ??_R0?AUIClassFactory@" ??_R0?AUIClassFactory@@@8
0x18001AC84: "long __cdecl CommonUtil::UtilGetFilenameFromPath<unsigned short>(unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ??$UtilGetFilenameFromPath@G@CommonUtil@@YAJPEBGPEAPEBGPEA_K@Z
0x180025090: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct INetworkProtectionShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@6B@
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDataProtectionShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020048: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180016D68: "public: unsigned long __cdecl MpLicensing::GetLPCWSTRValue(unsigned int,unsigned short * __ptr64,unsigned long)const __ptr64" ?GetLPCWSTRValue@MpLicensing@@QEBAKIPEAGK@Z
0x180013520: "public: virtual long __cdecl HardwareShieldBroker::IsSecureBootCapable(int * __ptr64) __ptr64" ?IsSecureBootCapable@HardwareShieldBroker@@UEAAJPEAH@Z
0x18001FFC0: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x180022F78: WPP_b0ce8b8e5e3f368028af4d75fb67c0f3_Traceguids
0x180022BA0: CLSID_ForceFieldWebProtectionShield
0x180002950: "private: virtual void * __ptr64 __cdecl CClassFactory::`vector deleting destructor'(unsigned int) __ptr64" ??_ECClassFactory@@EEAAPEAXI@Z
0x180029DCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IDataProtectionShield>::~AutoRef<struct IDataProtectionShield>(void) __ptr64" ??1?$AutoRef@UIDataProtectionShield@@@CommonUtil@@QEAA@XZ
0x180014950: "public: virtual long __cdecl ManagementShieldBroker::TriggerSecurityHealthServiceNotification(enum SecurityHealthServiceNotificationType) __ptr64" ?TriggerSecurityHealthServiceNotification@ManagementShieldBroker@@UEAAJW4SecurityHealthServiceNotificationType@@@Z
0x180017F44: "long __cdecl CommonUtil::NewSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?NewSprintfW@CommonUtil@@YAJPEAPEAGPEBGZZ
0x180026EB0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x180026FE8: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDashboard>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@UEAAKXZ
0x1800154E0: "public: virtual long __cdecl ForceFieldShieldBroker::DismissWarningState(struct _GUID,enum PillarStatusFlag) __ptr64" ?DismissWarningState@ForceFieldShieldBroker@@UEAAJU_GUID@@W4PillarStatusFlag@@@Z
0x18002DB00: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@@8
0x180020100: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x18001CFD6: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x18002EDA8: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x180027DF6: ?_TlgEvent@?BA@??BuildBodyActions@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEAU_ToastExtraParams@3@PEAUShieldProviderToastPropertyBag@3@@Z@4U<unnamed-type-_TlgEvent>@?BA@??123@AEAAJ012@Z@B
0x1800042BC: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::IsNotificationsDisabled(enum ToastType,bool * __ptr64) __ptr64" ?IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z
0x180024150: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x180023DD0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x1800221B0: "WdscIntegration" ??_C@_1CA@NFEFJBFE@?$AAW?$AAd?$AAs?$AAc?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180021FD8: "%u!" ??_C@_03JHPCMALH@?$CFu?$CB?$AA@
0x180026D50: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IManagementShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@6B@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDefenderShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1800123B0: "public: virtual long __cdecl AccountProtectionShieldBroker::RegisterForStatusNotifications(struct IAccountProtectionNotificationsSink * __ptr64) __ptr64" ?RegisterForStatusNotifications@AccountProtectionShieldBroker@@UEAAJPEAUIAccountProtectionNotificationsSink@@@Z
0x18002D880: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@@8
0x18001FFF8: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x18001C264: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180022514: "Url" ??_C@_03LMFFEHOG@Url?$AA@
0x18000D6D0: "public: virtual long __cdecl DefenderShieldBroker::SetScanProgressSink(struct IScanProgressSink * __ptr64) __ptr64" ?SetScanProgressSink@DefenderShieldBroker@@UEAAJPEAUIScanProgressSink@@@Z
0x18002EB50: "__vectorcall ??_R0?AV?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@" ??_R0?AV?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@@8
0x180022F98: WPP_86330a4bc38430f625873ccc562bd480_Traceguids
0x180017D20: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,40}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@CI@EBAJXZ
0x1800255F0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x180025480: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x180014E70: "public: virtual long __cdecl ApplicationGuardShieldBroker::SetApplicationGuardPolicy(enum ShieldApplicationGuardPolicy,int) __ptr64" ?SetApplicationGuardPolicy@ApplicationGuardShieldBroker@@UEAAJW4ShieldApplicationGuardPolicy@@H@Z
0x1800233E0: "Unknown exception" ??_C@_0BC@EOODALEL@Unknown?5exception?$AA@
0x18001D170: CStdStubBuffer_DebugServerRelease
0x180026F18: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@8
0x180016978: "public: __cdecl MpLicensing::MpLicensing(unsigned short const * __ptr64) __ptr64" ??0MpLicensing@@QEAA@PEBG@Z
0x180015420: "public: virtual long __cdecl ForceFieldShieldBroker::GetPillarStatusEx(struct PillarStatus * __ptr64,struct Shield_ForceFieldProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetPillarStatusEx@ForceFieldShieldBroker@@UEAAJPEAUPillarStatus@@PEAPEAUShield_ForceFieldProviderInfo@@@Z
0x180029DB8: "__cdecl _IMPORT_DESCRIPTOR_msvcp_win" __IMPORT_DESCRIPTOR_msvcp_win
0x1800261D0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAccountProtectionShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@6B@
0x18000F0C0: "public: virtual long __cdecl DefenderShieldBroker::GetSampleListRequiringConsent(unsigned long * __ptr64,struct tagMPSAMPLE_SUBMISSION_CONSENT * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetSampleListRequiringConsent@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPSAMPLE_SUBMISSION_CONSENT@@@Z
0x18001D410: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x180020098: "__cdecl _imp_IsProcessorFeaturePresent" __imp_IsProcessorFeaturePresent
0x180023420: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x18000F690: "public: virtual void * __ptr64 __cdecl ForceFieldShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GForceFieldShieldBroker@@UEAAPEAXI@Z
0x180020578: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x180024FA0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@8
0x18002C420: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@@8
0x18001F150: "const OSProtectionShieldBroker::`vftable'" ??_7OSProtectionShieldBroker@@6B@
0x1800225D0: "ransomwareprotection" ??_C@_1CK@GJKNHGIL@?$AAr?$AAa?$AAn?$AAs?$AAo?$AAm?$AAw?$AAa?$AAr?$AAe?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800240D0: "__vectorcall ??_R1A@?0A@EA@IClassFactory" ??_R1A@?0A@EA@IClassFactory@@8
0x18001D190: IUnknown_QueryInterface_Proxy
0x18000F690: "public: virtual void * __ptr64 __cdecl OSProtectionShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GOSProtectionShieldBroker@@UEAAPEAXI@Z
0x180002B74: "public: __cdecl CommonUtil::AutoRef<class CClassFactory>::~AutoRef<class CClassFactory>(void) __ptr64" ??1?$AutoRef@VCClassFactory@@@CommonUtil@@QEAA@XZ
0x18002EA40: "__vectorcall ??_R0?AV?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@" ??_R0?AV?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@@8
0x18002DA80: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@@8
0x180023460: "const CWString::`vbtable'" ??_8CWString@@7B@
0x180026D78: "const ManagementShieldBroker::`RTTI Complete Object Locator'" ??_R4ManagementShieldBroker@@6B@
0x1800161A0: WPP_SF_
0x180014DB0: "public: virtual long __cdecl ApplicationGuardShieldBroker::RefreshState(void) __ptr64" ?RefreshState@ApplicationGuardShieldBroker@@UEAAJXZ
0x1800277C8: "__vectorcall ??_R1A@?0A@EA@?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R1A@?0A@EA@?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x180021FC8: CLSID_ShieldProviderUserSessionAgent
0x180029CC8: "__cdecl _IMPORT_DESCRIPTOR_OLE32" __IMPORT_DESCRIPTOR_OLE32
0x18001FFE0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800258E8: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x18000FE80: "public: virtual long __cdecl NetworkProtectionShieldBroker::EnableProfileFirewall(enum NET_FW_PROFILE_TYPE2_) __ptr64" ?EnableProfileFirewall@NetworkProtectionShieldBroker@@UEAAJW4NET_FW_PROFILE_TYPE2_@@@Z
0x1800257B0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x180011140: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAppAndBrowserShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180024498: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@8
0x180022068: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x18000CF50: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@W7EAAKXZ
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IExploitShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18000CC50: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180023580: WPP_882b291fa173316ba75cb889c9d6145d_Traceguids
0x180027700: "__vectorcall ??_R1BA@?0A@EA@?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R1BA@?0A@EA@?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18001CD6C: "void __cdecl __scrt_throw_std_bad_array_new_length(void)" ?__scrt_throw_std_bad_array_new_length@@YAXXZ
0x180029AC0: "__cdecl CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32" _CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDataProtectionShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180027660: "const std::exception::`RTTI Complete Object Locator'" ??_R4exception@std@@6B@
0x18001C47C: "__cdecl _scrt_dllmain_before_initialize_c" __scrt_dllmain_before_initialize_c
0x1800201E8: "__cdecl _imp_CStdStubBuffer_Disconnect" __imp_CStdStubBuffer_Disconnect
0x180022BF0: CLSID_ExploitShield
0x18001C1E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180027940: "const CommonUtil::CRefObject::`RTTI Complete Object Locator'" ??_R4CRefObject@CommonUtil@@6B@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IApplicationGuardShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1800203B0: "__cdecl _imp__initterm" __imp__initterm
0x18001D160: NdrOleAllocate
0x1800228D8: "update" ??_C@_1O@DMMEJGCN@?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1800274B8: "const CRefCountedBase::`RTTI Complete Object Locator'" ??_R4CRefCountedBase@@6B@
0x18001E0A8: "const CClassFactory::`vftable'" ??_7CClassFactory@@6B@
0x180019C60: "public: __cdecl CommonUtil::CAutoUniquePtr<unsigned short,void>::~CAutoUniquePtr<unsigned short,void>(void) __ptr64" ??1?$CAutoUniquePtr@GX@CommonUtil@@QEAA@XZ
0x18000F690: "public: virtual void * __ptr64 __cdecl HealthAdvisorShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EHealthAdvisorShieldBroker@@UEAAPEAXI@Z
0x180024C98: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@8
0x180020508: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x1800223A8: "content" ??_C@_1BA@KJONNLMK@?$AAc?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?$AA@
0x18000F690: "public: virtual void * __ptr64 __cdecl DataProtectionShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EDataProtectionShieldBroker@@UEAAPEAXI@Z
0x18002EC98: "__vectorcall ??_R0?AVCHResultExceptionImpl@CommonUtil@" ??_R0?AVCHResultExceptionImpl@CommonUtil@@@8
0x180020158: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x1800178E4: "public: virtual __cdecl CommonUtil::CHResultExceptionImpl::~CHResultExceptionImpl(void) __ptr64" ??1CHResultExceptionImpl@CommonUtil@@UEAA@XZ
0x180021410: "Management Shield Broker" ??_C@_1DC@IAIFEEEE@?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180020380: "__cdecl _imp___std_terminate" __imp___std_terminate
0x18001F370: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IApplicationGuardShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@6B@
0x1800039E0: "public: virtual long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SendToastNotification(enum ToastType,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?SendToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJW4ToastType@@PEAG11@Z
0x180026958: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHardwareShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x1800228E8: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x18002F3C0: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x18001A800: "public: virtual void * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<class CommonUtil::CAutoUniquePtr<struct _ACL,void> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x180029C78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0
0x1800241F8: "__vectorcall ??_R3IClassFactory" ??_R3IClassFactory@@8
0x180012BE0: "public: virtual long __cdecl HardwareShieldBroker::GetTPMInfo(unsigned char * __ptr64,unsigned int) __ptr64" ?GetTPMInfo@HardwareShieldBroker@@UEAAJPEAEI@Z
0x180023E50: "__vectorcall ??_R2IClassFactory" ??_R2IClassFactory@@8
0x1800299B0: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x180013000: "public: virtual long __cdecl HardwareShieldBroker::IsSecureBioEnabled(int * __ptr64) __ptr64" ?IsSecureBioEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x180013070: "public: virtual long __cdecl HardwareShieldBroker::IsCredentialGuardEnabled(int * __ptr64) __ptr64" ?IsCredentialGuardEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetAssessmentResult(enum _tagHealthAdvisorAssessment,struct IUnknown * __ptr64 * __ptr64) __ptr64" ?GetAssessmentResult@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@PEAPEAUIUnknown@@@Z
0x180020010: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180024470: "__vectorcall ??_R1A@?0A@EA@ShieldProviderUserSessionAgent@ShieldProvider" ??_R1A@?0A@EA@ShieldProviderUserSessionAgent@ShieldProvider@@8
0x18000FD00: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetIsThirdPartyFwActive(int * __ptr64) __ptr64" ?GetIsThirdPartyFwActive@NetworkProtectionShieldBroker@@UEAAJPEAH@Z
0x180022780: "enable_fw?Windows Defender Firew" ??_C@_1EI@FIFKNECG@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA_?$AAf?$AAw?$AA?$DP?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAF?$AAi?$AAr?$AAe?$AAw@
0x180027448: "__vectorcall ??_R3CRefCountedBaseX" ??_R3CRefCountedBaseX@@8
0x180027380: "__vectorcall ??_R2CRefCountedBaseX" ??_R2CRefCountedBaseX@@8
0x18002DEE0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@@8
0x180029CA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-heap-l1-1-0
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::IsAssessmentEnabled(enum _tagHealthAdvisorAssessment,int * __ptr64) __ptr64" ?IsAssessmentEnabled@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@PEAH@Z
0x180026C88: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x180015730: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IForceFieldShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180027750: "__vectorcall ??_R1A@A@7FA@ILockable" ??_R1A@A@7FA@ILockable@@8
0x180027220: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x1800263C0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x180013670: "public: virtual long __cdecl HardwareShieldBroker::RevokeWarningStateDismissal(enum PillarStatusFlag) __ptr64" ?RevokeWarningStateDismissal@HardwareShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x180027638: "const CommonUtil::CHResultException::`RTTI Complete Object Locator'" ??_R4CHResultException@CommonUtil@@6B@
0x180029D18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180016244: "long __cdecl ShieldProvider::GetIsDevMode(bool * __ptr64)" ?GetIsDevMode@ShieldProvider@@YAJPEA_N@Z
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAccountProtectionShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18002D0B0: "__vectorcall ??_R0?AUINetworkProtectionShield@" ??_R0?AUINetworkProtectionShield@@@8
0x180023E78: "__vectorcall ??_R1A@?0A@EA@CClassFactory" ??_R1A@?0A@EA@CClassFactory@@8
0x180021F18: CLSID_OSProtectionShieldBroker
0x18001EC08: "const DashboardBroker::`vftable'" ??_7DashboardBroker@@6B@
0x180016740: "public: virtual char const * __ptr64 __cdecl std::exception::what(void)const __ptr64" ?what@exception@std@@UEBAPEBDXZ
0x18001A3E4: "long __cdecl CommonUtil::UtilGetNamedSecurityInfo(struct CommonUtil::ISecurityAttributes * __ptr64 * __ptr64,unsigned short const * __ptr64,enum _SE_OBJECT_TYPE,unsigned long)" ?UtilGetNamedSecurityInfo@CommonUtil@@YAJPEAPEAUISecurityAttributes@1@PEBGW4_SE_OBJECT_TYPE@@K@Z
0x18001FFC8: CRYPT32_NULL_THUNK_DATA
0x180018264: "long __cdecl CommonUtil::UtilOpenProcessToken(void * __ptr64 * __ptr64,void * __ptr64,unsigned long)" ?UtilOpenProcessToken@CommonUtil@@YAJPEAPEAXPEAXK@Z
0x18000C920: "public: virtual void * __ptr64 __cdecl ShieldProvider::ShieldProviderUserSessionAgent::`vector deleting destructor'(unsigned int) __ptr64" ??_EShieldProviderUserSessionAgent@ShieldProvider@@UEAAPEAXI@Z
0x180027338: "const ForceFieldShieldBroker::`RTTI Complete Object Locator'" ??_R4ForceFieldShieldBroker@@6B@
0x18000E450: "public: virtual long __cdecl DefenderShieldBroker::SetConfigFileTimeValue(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _FILETIME) __ptr64" ?SetConfigFileTimeValue@DefenderShieldBroker@@UEAAJPEBG0U_FILETIME@@@Z
0x180029E08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x180027360: "__vectorcall ??_R2CRefCountedBase" ??_R2CRefCountedBase@@8
0x18001C3DC: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x180023F18: "__vectorcall ??_R1L@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1L@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x1800143A0: "public: virtual long __cdecl DataProtectionShieldBroker::GetIsWarningStateDismissed(struct _GUID,enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@DataProtectionShieldBroker@@UEAAJU_GUID@@W4PillarStatusFlag@@PEAH@Z
0x180027460: "__vectorcall ??_R3CRefCountedBase" ??_R3CRefCountedBase@@8
0x180022670: "perfhealth" ??_C@_1BG@MGCHEOHG@?$AAp?$AAe?$AAr?$AAf?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x180020D30: "api-ms-win-core-synch-l1-2-0.dll" ??_C@_1EC@JIJBPKFM@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAs?$AAy?$AAn?$AAc?$AAh?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA0?$AA?4?$AAd?$AAl?$AAl@
0x180017DA0: "[thunk]:public: virtual void __cdecl CWString::Unlock`vtordisp{4294967292,0}' (void)const __ptr64" ?Unlock@CWString@@$4PPPPPPPM@A@EBAXXZ
0x1800204B8: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18000F620: "public: virtual long __cdecl DefenderShieldBroker::DeleteAsrHistory(void) __ptr64" ?DeleteAsrHistory@DefenderShieldBroker@@UEAAJXZ
0x18001C5F0: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x180016670: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@A@EBAJXZ
0x180020540: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180011500: "public: virtual long __cdecl ExploitShieldBroker::SetImageMitigationPolicyEx(unsigned short * __ptr64,unsigned long,struct ImageMitigationPolicy * __ptr64) __ptr64" ?SetImageMitigationPolicyEx@ExploitShieldBroker@@UEAAJPEAGKPEAUImageMitigationPolicy@@@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl DashboardBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDashboardBroker@@UEAAPEAXI@Z
0x180025B20: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x180022940: "mailto:%s" ??_C@_1BE@BOLCEABK@?$AAm?$AAa?$AAi?$AAl?$AAt?$AAo?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x180021540: "@%s,-%d" ??_C@_1BA@PDBOGHOJ@?$AA?$EA?$AA?$CF?$AAs?$AA?0?$AA?9?$AA?$CF?$AAd?$AA?$AA@
0x1800191B8: "long __cdecl CommonUtil::UtilRegSetValueString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UtilRegSetValueString@CommonUtil@@YAJPEAUHKEY__@@PEBG1@Z
0x180002BA0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldElevationBroker>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@UEAAKXZ
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IClassFactory>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180020340: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x1800109D0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProcessLauncher>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180010DF0: "public: virtual long __cdecl AppAndBrowserShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@AppAndBrowserShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x18002E8B8: "__vectorcall ??_R0?AVCHResultException@CommonUtil@" ??_R0?AVCHResultException@CommonUtil@@@8
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlDocumentIO>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIXmlDocumentIO@Dom@Xml@Data@Windows@@@WRL@Microsoft@@IEAAKXZ
0x18001C858: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x18001C290: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18002DE30: "__vectorcall ??_R0?AUIHardwareShield@" ??_R0?AUIHardwareShield@@@8
0x18002346C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18000EEA0: "public: virtual long __cdecl DefenderShieldBroker::GetMpManagerVersion(struct tagMPVERSION_INFO * __ptr64) __ptr64" ?GetMpManagerVersion@DefenderShieldBroker@@UEAAJPEAUtagMPVERSION_INFO@@@Z
0x180020000: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x1800200B0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180022DE8: "__cdecl GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494" _GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::UI::Notifications::IToastNotificationManagerStatics>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIToastNotificationManagerStatics@Notifications@UI@Windows@@@WRL@Microsoft@@IEAAKXZ
0x180022B70: "__cdecl GUID_b05d37a9_03a2_45cf_8850_f660df0cbf07" _GUID_b05d37a9_03a2_45cf_8850_f660df0cbf07
0x18002D1F0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@@8
0x180020228: USER32_NULL_THUNK_DATA
0x1800201D0: "__cdecl _imp_CStdStubBuffer_QueryInterface" __imp_CStdStubBuffer_QueryInterface
0x180014210: "public: virtual long __cdecl DataProtectionShieldBroker::GetPillarStatusEx(struct PillarStatus * __ptr64,struct Shield_CloudBackupProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetPillarStatusEx@DataProtectionShieldBroker@@UEAAJPEAUPillarStatus@@PEAPEAUShield_CloudBackupProviderInfo@@@Z
0x180025C38: "const DashboardBroker::`RTTI Complete Object Locator'" ??_R4DashboardBroker@@6B@
0x18002CA88: "__vectorcall ??_R0?AUIShieldProviderUserSessionAgent@" ??_R0?AUIShieldProviderUserSessionAgent@@@8
0x18000F8C0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDefenderShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180022908: "hero" ??_C@_19GDOBDGEN@?$AAh?$AAe?$AAr?$AAo?$AA?$AA@
0x180025018: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@8
0x180024E60: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@8
0x1800224D8: "reminder" ??_C@_1BC@JLBMFKHP@?$AAr?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x180012060: "long __cdecl CHealthAdvisorShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CHealthAdvisorShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800040E0: "public: virtual long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::DoesODVersionSupportWdscIntegration(int * __ptr64) __ptr64" ?DoesODVersionSupportWdscIntegration@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJPEAH@Z
0x180022550: "https://go.microsoft.com/fwlink/" ??_C@_1FG@LJJIKABG@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1@
0x18001CFE2: "__cdecl register_onexit_function" _register_onexit_function
0x180022EA8: "__cdecl GUID_536fca99_3e74_4d9e_9251_714917e6dac1" _GUID_536fca99_3e74_4d9e_9251_714917e6dac1
0x180024738: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x180024418: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x180016174: "public: virtual __cdecl CRefCountedBase::~CRefCountedBase(void) __ptr64" ??1CRefCountedBase@@UEAA@XZ
0x18000E080: "public: virtual long __cdecl DefenderShieldBroker::GetConfigDwordValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?GetConfigDwordValue@DefenderShieldBroker@@UEAAJPEBG0PEAKPEAW4ConfigOrigin@@@Z
0x180020080: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IOSProtectionShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180021FDC: "%u" ??_C@_02GMHACPFF@?$CFu?$AA@
0x180020178: "__cdecl _imp_NdrDllUnregisterProxy" __imp_NdrDllUnregisterProxy
0x180020570: "__cdecl _xi_a" __xi_a
0x18001FA08: aProxyFileList
0x1800223B8: "action" ??_C@_1O@HCAHPFFC@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IForceFieldShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetAssessmentStatusCodes(enum _tagHealthAdvisorAssessment,unsigned long * __ptr64,struct _tagAssessmentStatus * __ptr64 * __ptr64) __ptr64" ?GetAssessmentStatusCodes@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@PEAKPEAPEAU_tagAssessmentStatus@@@Z
0x180022860: "windowsdefender://renew_av?%s" ??_C@_1DM@KLHOGOP@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAr?$AAe?$AAn?$AAe?$AAw?$AA_?$AAa?$AAv?$AA?$DP?$AA?$CF?$AAs?$AA?$AA@
0x18002800B: ?_TlgEvent@?IG@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?IG@??123@AEAAJ01@Z@B
0x18001C4C8: "__cdecl _scrt_dllmain_crt_thread_detach" __scrt_dllmain_crt_thread_detach
0x1800204F8: "__cdecl _imp_SetNamedSecurityInfoW" __imp_SetNamedSecurityInfoW
0x18002E9E8: "__vectorcall ??_R0?AVILockable@" ??_R0?AVILockable@@@8
0x1800211A0: "Network Protection Shield Broker" ??_C@_1EC@EAMFJHHG@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr@
0x180020198: "__cdecl _imp_NdrCStdStubBuffer_Release" __imp_NdrCStdStubBuffer_Release
0x1800226F8: "account" ??_C@_1BA@DJOCCFFO@?$AAa?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1800147C0: "public: virtual long __cdecl ManagementShieldBroker::SetDwordConfig(unsigned long,unsigned long) __ptr64" ?SetDwordConfig@ManagementShieldBroker@@UEAAJKK@Z
0x180013600: "public: virtual long __cdecl HardwareShieldBroker::DismissWarningState(enum PillarStatusFlag) __ptr64" ?DismissWarningState@HardwareShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x1800259E0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@8
0x180025B98: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@8
0x180022B80: CLSID_SyncEngineFileInfoProvider
0x180022280: "DisableNotifications" ??_C@_1CK@HBFKPJKN@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IExploitShield>::~AutoRef<struct IExploitShield>(void) __ptr64" ??1?$AutoRef@UIExploitShield@@@CommonUtil@@QEAA@XZ
0x1800202F8: "__cdecl _imp_RoActivateInstance" __imp_RoActivateInstance
0x18001C400: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x180025918: "__vectorcall ??_R3IExploitShield" ??_R3IExploitShield@@8
0x1800257D8: "__vectorcall ??_R2IExploitShield" ??_R2IExploitShield@@8
0x180013A10: "public: long __cdecl OSProtectionShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@OSProtectionShieldBroker@@QEAAJXZ
0x1800204E0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180022BE0: CLSID_ManagementShield
0x180021638: "RunAs" ??_C@_1M@DMOFNHON@?$AAR?$AAu?$AAn?$AAA?$AAs?$AA?$AA@
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IShieldProviderUserSessionAgent>::~AutoRef<struct IShieldProviderUserSessionAgent>(void) __ptr64" ??1?$AutoRef@UIShieldProviderUserSessionAgent@@@CommonUtil@@QEAA@XZ
0x180025980: "__vectorcall ??_R2DashboardBroker" ??_R2DashboardBroker@@8
0x1800165F0: "public: virtual void * __ptr64 __cdecl CRefCountedBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefCountedBase@@UEAAPEAXI@Z
0x180025BE0: "__vectorcall ??_R3DashboardBroker" ??_R3DashboardBroker@@8
0x180021F48: CLSID_HealthAdvisorShieldBroker
0x180020118: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180023290: IID_IShieldProviderUserSessionAgent
0x18001F950: "const CommonUtil::CWinSecurityAclAlloc<struct CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64> >::`vftable'" ??_7?$CWinSecurityAclAlloc@U?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@@CommonUtil@@6B@
0x180025FA0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@8
0x180026158: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAccountProtectionShield@@@WRL@Microsoft@@8
0x180018F00: "long __cdecl CommonUtil::UtilRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegGetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAKPEA_KPEAX@Z
0x18001CD00: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x1800228B8: "enableandupdate" ??_C@_1CA@EEEDKMKF@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAa?$AAn?$AAd?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x180021300: "Account Protection Shield Broker" ??_C@_1EC@HHMAIEHK@?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr@
0x1800299E8: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x180029B08: "__cdecl CT??_R0?AVexception@std@@@8??0exception@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVexception@std@@@8??0exception@std@@QEAA@AEBV01@@Z24
0x18002DC80: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@@8
0x18002D660: "__vectorcall ??_R0?AVExploitShieldBroker@" ??_R0?AVExploitShieldBroker@@@8
0x1800177CC: WPP_SF_Dd
0x1800167A8: WPP_SF_DD
0x18000DD70: "public: virtual long __cdecl DefenderShieldBroker::GetSubPillarStatus(enum DefenderSubPillars,struct PillarStatus * __ptr64) __ptr64" ?GetSubPillarStatus@DefenderShieldBroker@@UEAAJW4DefenderSubPillars@@PEAUPillarStatus@@@Z
0x18002CEE0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@@8
0x180017984: "public: __cdecl CAutoLock::~CAutoLock(void) __ptr64" ??1CAutoLock@@QEAA@XZ
0x18000DFA0: "public: virtual long __cdecl DefenderShieldBroker::GetIsWarningStateDismissed(enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@DefenderShieldBroker@@UEAAJW4PillarStatusFlag@@PEAH@Z
0x180021ED8: CLSID_ApplicationGuardShieldBroker
0x180016800: WPP_SF_dS
0x180023EF0: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIClassFactory@@@Details@WRL@Microsoft@@8
0x1800214D8: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x180021298: "Dashboard Broker" ??_C@_1CC@NFOHPHL@?$AAD?$AAa?$AAs?$AAh?$AAb?$AAo?$AAa?$AAr?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x18001CFB2: "__cdecl seh_filter_dll" _seh_filter_dll
0x180019AD0: "public: virtual long __cdecl CommonUtil::CExplicitAccessControl::AddByTrustee(unsigned short const * __ptr64,enum _TRUSTEE_TYPE,unsigned long,enum _ACCESS_MODE,unsigned long) __ptr64" ?AddByTrustee@CExplicitAccessControl@CommonUtil@@UEAAJPEBGW4_TRUSTEE_TYPE@@KW4_ACCESS_MODE@@K@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl DefenderShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EDefenderShieldBroker@@UEAAPEAXI@Z
0x18000E9E0: "public: virtual long __cdecl DefenderShieldBroker::GetActiveThreats(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetActiveThreats@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x180011440: "public: virtual long __cdecl ExploitShieldBroker::GetOsDefaultMitigationPolicy(enum ImageMitigationPolicyId,struct ImageMitigationPolicy * __ptr64) __ptr64" ?GetOsDefaultMitigationPolicy@ExploitShieldBroker@@UEAAJW4ImageMitigationPolicyId@@PEAUImageMitigationPolicy@@@Z
0x18000F690: "public: virtual void * __ptr64 __cdecl ManagementShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EManagementShieldBroker@@UEAAPEAXI@Z
0x18002C000: WPP_GLOBAL_Control
0x1800203E0: "__cdecl _imp__execute_onexit_table" __imp__execute_onexit_table
0x180024768: "__vectorcall ??_R3IShieldProviderUserSessionAgent" ??_R3IShieldProviderUserSessionAgent@@8
0x180024440: "__vectorcall ??_R2IShieldProviderUserSessionAgent" ??_R2IShieldProviderUserSessionAgent@@8
0x180026A98: "const DataProtectionShieldBroker::`RTTI Complete Object Locator'" ??_R4DataProtectionShieldBroker@@6B@
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAppAndBrowserShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180024458: "__vectorcall ??_R2INotificationActivationCallback" ??_R2INotificationActivationCallback@@8
0x180024780: "__vectorcall ??_R3INotificationActivationCallback" ??_R3INotificationActivationCallback@@8
0x180021E94: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18002C648: "__vectorcall ??_R0?AVRuntimeClassBase@Details@WRL@Microsoft@" ??_R0?AVRuntimeClassBase@Details@WRL@Microsoft@@@8
0x180029DF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180027310: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IForceFieldShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@6B@
0x180001110: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180024AF8: "const ShieldElevationBroker::`RTTI Complete Object Locator'" ??_R4ShieldElevationBroker@@6B@
0x180021490: "CLSID\%s" ??_C@_1BC@MCAABAB@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAppAndBrowserShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IManagementShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180001244: WPP_SF_D
0x180001244: WPP_SF_d
0x18001D1A0: CStdStubBuffer_IsIIDSupported
0x180020CD0: "__cdecl pRawDllMain" _pRawDllMain
0x18001AAF0: "public: virtual char const * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::what(void)const __ptr64" ?what@CHResultExceptionImpl@CommonUtil@@UEBAPEBDXZ
0x180012020: "public: virtual long __cdecl HealthAdvisorShieldBroker::RevokeAssessmentStatusCodeDismissal(enum _tagHealthAdvisorAssessment,struct _tagAssessmentStatus) __ptr64" ?RevokeAssessmentStatusCodeDismissal@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@U_tagAssessmentStatus@@@Z
0x180016650: "[thunk]:public: virtual void * __ptr64 __cdecl CRefCountedBase::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECRefCountedBase@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18002E818: "__vectorcall ??_R0?AVCRefCountedBaseX@" ??_R0?AVCRefCountedBaseX@@@8
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDashboard>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180002380: DllUnregisterServer
0x18002E868: "__vectorcall ??_R0?AVIRefCounted@" ??_R0?AVIRefCounted@@@8
0x18000D260: "public: virtual long __cdecl ShieldElevationBroker::CoCreateInstanceAsUser(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CoCreateInstanceAsUser@ShieldElevationBroker@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x180022FB8: WPP_75717245458336329470d760d08b87ff_Traceguids
0x180021B80: "O:BAG:BAD:(A;;CCDCLCSWRP;;;S-1-5" ??_C@_1MO@HAHDFHEE@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAL?$AAC?$AAS?$AAW?$AAR?$AAP?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AA?9?$AA1?$AA?9?$AA5@
0x1800034B0: "__cdecl TlgDefineProvider_annotation__Tlgg_hSecurityHealthAgentProviderProv" _TlgDefineProvider_annotation__Tlgg_hSecurityHealthAgentProviderProv
0x180021F58: CLSID_DashboardBroker
0x18000F690: "public: virtual void * __ptr64 __cdecl ApplicationGuardShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EApplicationGuardShieldBroker@@UEAAPEAXI@Z
0x18002DE00: "__vectorcall ??_R0?AVHardwareShieldBroker@" ??_R0?AVHardwareShieldBroker@@@8
0x18002800B: ?_TlgEvent@?CL@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?CL@??123@AEAAJ01@Z@B
0x18001CD94: "__cdecl _isa_available_init" __isa_available_init
0x1800271F8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@8
0x180021C50: "Interactive User" ??_C@_1CC@CMMKKFA@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x18001CC10: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180022EB8: WPP_6281d6d05c2f384553d81a9f94927e08_Traceguids
0x18000D850: "public: virtual long __cdecl DefenderShieldBroker::GetScanResult(struct tagMPSCAN_RESULT * __ptr64) __ptr64" ?GetScanResult@DefenderShieldBroker@@UEAAJPEAUtagMPSCAN_RESULT@@@Z
0x180023530: "hr=0x%08X" ??_C@_09PANKGPKN@hr?$DN0x?$CF08X?$AA@
0x18001CF54: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x18001FFD8: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180014760: "public: virtual long __cdecl ManagementShieldBroker::GetStringConfig(unsigned long,enum tagSHIELD_CONFIG_ORIGIN * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetStringConfig@ManagementShieldBroker@@UEAAJKPEAW4tagSHIELD_CONFIG_ORIGIN@@PEAPEAG@Z
0x18001F910: "const CommonUtil::CRefObject::`vftable'" ??_7CRefObject@CommonUtil@@6B@
0x18001E008: "const type_info::`vftable'" ??_7type_info@@6B@
0x18000D790: "public: virtual long __cdecl DefenderShieldBroker::RunCustomScan(unsigned long,unsigned short * __ptr64 * __ptr64,int) __ptr64" ?RunCustomScan@DefenderShieldBroker@@UEAAJKPEAPEAGH@Z
0x180016140: "protected: virtual void * __ptr64 __cdecl IRefCounted::`vector deleting destructor'(unsigned int) __ptr64" ??_EIRefCounted@@MEAAPEAXI@Z
0x180029B78: "__cdecl CTA3?AVCHResultExceptionImpl@CommonUtil@@" _CTA3?AVCHResultExceptionImpl@CommonUtil@@
0x18002800B: ?_TlgEvent@?BG@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?BG@??123@AEAAJ01@Z@B
0x18002816F: ?_TlgEvent@?BP@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?BP@??123@AEAAJ01@Z@B
0x180028750: "__cdecl _rtc_izz" __rtc_izz
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProcessLauncher>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180027140: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x1800272B0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@8
0x18000F6F0: "long __cdecl CDefenderShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CDefenderShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180021010: "O:BAG:BAD:(A;;CCDCLC;;;SY)(A;;CC" ??_C@_1BFM@LDEOJKAF@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAL?$AAC?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x180022C80: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotificationManager" ?RuntimeClass_Windows_UI_Notifications_ToastNotificationManager@@3QBGB
0x180013210: "public: virtual long __cdecl HardwareShieldBroker::IsSystemGuardConfigured(int * __ptr64) __ptr64" ?IsSystemGuardConfigured@HardwareShieldBroker@@UEAAJPEAH@Z
0x1800200F0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001C230: "__cdecl _security_check_cookie" __security_check_cookie
0x180022F58: WPP_2d4ce5146cae308b8fe89a29d8d0bdbb_Traceguids
0x1800153C0: "public: virtual long __cdecl ForceFieldShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@ForceFieldShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x180020568: "__cdecl _xc_z" __xc_z
0x180026678: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@8
0x18002D550: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@@8
0x18002D3F0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@@8
0x180022808: "windowsdefender://enable_av?%s" ??_C@_1DO@LHEIIJCN@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA_?$AAa?$AAv?$AA?$DP?$AA?$CF?$AAs?$AA?$AA@
0x18000F200: "public: virtual long __cdecl DefenderShieldBroker::StartDefenderInLimitedPeriodicScanningMode(void) __ptr64" ?StartDefenderInLimitedPeriodicScanningMode@DefenderShieldBroker@@UEAAJXZ
0x1800202A0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001F3F0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IForceFieldShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@6B@
0x180012040: "public: virtual long __cdecl HealthAdvisorShieldBroker::GetIsAssessmentStatusCodeDismissed(enum _tagHealthAdvisorAssessment,struct _tagAssessmentStatus,int * __ptr64) __ptr64" ?GetIsAssessmentStatusCodeDismissed@HealthAdvisorShieldBroker@@UEAAJW4_tagHealthAdvisorAssessment@@U_tagAssessmentStatus@@PEAH@Z
0x1800200B8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180011190: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAppAndBrowserShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800244C0: "__vectorcall ??_R1BD@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1BD@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldElevationBroker>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180023F90: "__vectorcall ??_R18?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R18?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x180029E1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0
0x180017228: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::append(unsigned short const * __ptr64 const) __ptr64" ?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@QEBG@Z
0x180016704: "public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64" ??0exception@std@@QEAA@AEBV01@@Z
0x18002C490: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@@8
0x180022610: "windowsdefender://history?threat" ??_C@_1EM@DBGGOMKI@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAh?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?$DP?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt@
0x18000F3C0: "public: virtual long __cdecl DefenderShieldBroker::GetLastAppliedPolicyDetails(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetLastAppliedPolicyDetails@DefenderShieldBroker@@UEAAJPEAPEAG0@Z
0x180021618: "DllSurrogate" ??_C@_1BK@JHFKEEGN@?$AAD?$AAl?$AAl?$AAS?$AAu?$AAr?$AAr?$AAo?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x180022918: "src" ??_C@_17NHHLECMC@?$AAs?$AAr?$AAc?$AA?$AA@
0x18001D410: "__cdecl _vcrt_uninitialize_critical" __vcrt_uninitialize_critical
0x180023C10: "__vectorcall ??_R1A@?0A@EA@bad_alloc@std" ??_R1A@?0A@EA@bad_alloc@std@@8
0x180026CF0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x180026B80: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x180020230: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x180026748: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x180026610: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x1800203A0: "__cdecl _imp__invalid_parameter_noinfo_noreturn" __imp__invalid_parameter_noinfo_noreturn
0x1800253C0: "__vectorcall ??_R2AppAndBrowserShieldBroker" ??_R2AppAndBrowserShieldBroker@@8
0x180025620: "__vectorcall ??_R3AppAndBrowserShieldBroker" ??_R3AppAndBrowserShieldBroker@@8
0x1800027B0: "public: virtual long __cdecl CClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000ECF0: "public: virtual long __cdecl DefenderShieldBroker::GetAllowedThreats(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetAllowedThreats@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x18001D08C: "__cdecl CxxThrowException" _CxxThrowException
0x180021FEC: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x18001BD60: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18002E550: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@@8
0x180028309: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18002DA48: "__vectorcall ??_R0?AUIHealthAdvisorShield@" ??_R0?AUIHealthAdvisorShield@@@8
0x180020120: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180020058: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18002ECD0: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18001A5A8: "long __cdecl CommonUtil::UtilSetNamedSecurityInfo(unsigned short const * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64)" ?UtilSetNamedSecurityInfo@CommonUtil@@YAJPEBGW4_SE_OBJECT_TYPE@@KPEAX2PEAU_ACL@@3@Z
0x18001AB48: "void __cdecl CommonUtil::CommonThrowHr(long)" ?CommonThrowHr@CommonUtil@@YAXJ@Z
0x18002800B: ?_TlgEvent@?FL@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?FL@??123@AEAAJ01@Z@B
0x18001A06C: "public: virtual __cdecl CommonUtil::ISecurityAttributes::~ISecurityAttributes(void) __ptr64" ??1ISecurityAttributes@CommonUtil@@UEAA@XZ
0x180017814: "void __cdecl _HMODULE_Finalizer(struct HINSTANCE__ * __ptr64,void * __ptr64)" ?_HMODULE_Finalizer@@YAXPEAUHINSTANCE__@@PEAX@Z
0x1800269F8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@8
0x180026840: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@8
0x1800274E0: "const CRefCountedBaseX::`RTTI Complete Object Locator'" ??_R4CRefCountedBaseX@@6B@
0x1800249E0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x18001C498: "__cdecl _scrt_dllmain_crt_thread_attach" __scrt_dllmain_crt_thread_attach
0x180015090: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IApplicationGuardShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180011F00: "public: long __cdecl HealthAdvisorShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@HealthAdvisorShieldBroker@@QEAAJXZ
0x180022C70: CLSID_DefenderShield
0x1800204F0: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x1800172AC: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::UI::Notifications::IToastNotificationFactory>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIToastNotificationFactory@Notifications@UI@Windows@@@WRL@Microsoft@@IEAAKXZ
0x18001D068: "__cdecl _std_type_info_destroy_list" __std_type_info_destroy_list
0x1800179B4: "public: virtual void * __ptr64 __cdecl CWString::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWString@@UEAAPEAXI@Z
0x1800241E0: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x180022C30: CLSID_ShieldProcessLauncher
0x180026CB0: "__vectorcall ??_R1A@?0A@EA@IManagementShield" ??_R1A@?0A@EA@IManagementShield@@8
0x180023E40: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x180010630: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchThirdPartyRemediationBinaryEx(unsigned short * __ptr64,enum SecurityProductLaunchParam,enum SecurityProductType) __ptr64" ?LaunchThirdPartyRemediationBinaryEx@ShieldProcessLauncherBroker@1@UEAAJPEAGW4SecurityProductLaunchParam@@W4SecurityProductType@@@Z
0x18002800B: ?_TlgEvent@?EC@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?EC@??123@AEAAJ01@Z@B
0x1800280F4: ?_TlgEvent@?EL@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?EL@??123@AEAAJ01@Z@B
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldElevationBroker>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001F280: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IManagementShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@6B@
0x18000EBA0: "public: virtual long __cdecl DefenderShieldBroker::RemoveAllQuarantinedItems(void) __ptr64" ?RemoveAllQuarantinedItems@DefenderShieldBroker@@UEAAJXZ
0x18000E0F0: "public: virtual long __cdecl DefenderShieldBroker::GetConfigStringValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?GetConfigStringValue@DefenderShieldBroker@@UEAAJPEBG0PEAPEAGPEAW4ConfigOrigin@@@Z
0x18002DC50: "__vectorcall ??_R0?AUIAccountProtectionShield@" ??_R0?AUIAccountProtectionShield@@@8
0x18002D360: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@@8
0x180016930: "public: virtual void * __ptr64 __cdecl CError::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCError@@UEAAPEAXI@Z
0x180026C60: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x18001AF2C: "long __cdecl CommonUtil::UtilCoCreateInstanceImpl(void * __ptr64 * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,unsigned long,struct IUnknown * __ptr64)" ?UtilCoCreateInstanceImpl@CommonUtil@@YAJPEAPEAXAEBU_GUID@@1KPEAUIUnknown@@@Z
0x180027528: "__vectorcall ??_R2CHResultException@CommonUtil" ??_R2CHResultException@CommonUtil@@8
0x1800275E0: "__vectorcall ??_R3CHResultException@CommonUtil" ??_R3CHResultException@CommonUtil@@8
0x180013FF0: "public: long __cdecl DataProtectionShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@DataProtectionShieldBroker@@QEAAJXZ
0x180025930: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IExploitShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@6B@
0x180011370: "public: virtual long __cdecl ExploitShieldBroker::GetImageMitigationPolicy(unsigned short * __ptr64,enum ImageMitigationPolicyId,struct ImageMitigationPolicy * __ptr64) __ptr64" ?GetImageMitigationPolicy@ExploitShieldBroker@@UEAAJPEAGW4ImageMitigationPolicyId@@PEAUImageMitigationPolicy@@@Z
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IManagementShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180028131: ?_TlgEvent@?DE@??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?DE@??123@AEAAJ01@Z@B
0x180022050: "%s\" ??_C@_17CHCGIDNB@?$AA?$CF?$AAs?$AA?2?$AA?$AA@
0x180014330: "public: virtual long __cdecl DataProtectionShieldBroker::DismissWarningState(struct _GUID,enum PillarStatusFlag) __ptr64" ?DismissWarningState@DataProtectionShieldBroker@@UEAAJU_GUID@@W4PillarStatusFlag@@@Z
0x18001C290: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18001BA7C: MpLoadStringNonNullTerminated
0x180020240: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x180020390: "__cdecl _imp__errno" __imp__errno
0x180026130: "__vectorcall ??_R1A@?0A@EA@IAccountProtectionShield" ??_R1A@?0A@EA@IAccountProtectionShield@@8
0x18001FC90: "__cdecl ishieldproviderusersessionagent_StubVtblList" _ishieldproviderusersessionagent_StubVtblList
0x1800277F0: "__vectorcall ??_R1A@?0A@EA@ILockable" ??_R1A@?0A@EA@ILockable@@8
0x180029B30: "__cdecl CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48" _CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48
0x18001ABE4: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(class CommonUtil::CHResultExceptionImpl const & __ptr64) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z
0x18002CE00: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@@8
0x18001F0F0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IOSProtectionShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@6B@
0x1800100F0: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetProductList(struct tagWSC_FW_PRODUCT_INFO_LIST * __ptr64 * __ptr64) __ptr64" ?GetProductList@NetworkProtectionShieldBroker@@UEAAJPEAPEAUtagWSC_FW_PRODUCT_INFO_LIST@@@Z
0x180022BB0: CLSID_ApplicationGuardShield
0x180011620: "public: virtual long __cdecl ExploitShieldBroker::ExportMitigationPoliciesToXmlFile(unsigned short * __ptr64) __ptr64" ?ExportMitigationPoliciesToXmlFile@ExploitShieldBroker@@UEAAJPEAG@Z
0x18001A048: "public: __cdecl CommonUtil::CAutoUniquePtr<struct _ACL,void>::~CAutoUniquePtr<struct _ACL,void>(void) __ptr64" ??1?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@QEAA@XZ
0x180022CE8: "__cdecl GUID_7ab93c52_0e48_4750_ba9d_1a4113981847" _GUID_7ab93c52_0e48_4750_ba9d_1a4113981847
0x180011310: "public: virtual long __cdecl ExploitShieldBroker::EnumerateImageNames(unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64) __ptr64" ?EnumerateImageNames@ExploitShieldBroker@@UEAAJPEAKPEAPEAPEAG@Z
0x180020220: "__cdecl _imp_GetForegroundWindow" __imp_GetForegroundWindow
0x180024030: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x180014700: "public: virtual long __cdecl ManagementShieldBroker::GetDwordConfig(unsigned long,enum tagSHIELD_CONFIG_ORIGIN * __ptr64,unsigned long * __ptr64) __ptr64" ?GetDwordConfig@ManagementShieldBroker@@UEAAJKPEAW4tagSHIELD_CONFIG_ORIGIN@@PEAK@Z
0x180023570: WPP_252e3a261b653e575f401e2583e2266a_Traceguids
0x180029A30: "__cdecl CTA3?AVbad_array_new_length@std@@" _CTA3?AVbad_array_new_length@std@@
0x180014820: "public: virtual long __cdecl ManagementShieldBroker::SetStringConfig(unsigned long,unsigned short const * __ptr64) __ptr64" ?SetStringConfig@ManagementShieldBroker@@UEAAJKPEBG@Z
0x180019118: "long __cdecl CommonUtil::UtilRegSetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegSetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGK_KPEBX@Z
0x180022F18: WPP_3008bd53d26e366c3ef7dfd5b3e4f069_Traceguids
0x18001D100: CStdStubBuffer_DebugServerQueryInterface
0x180010EB0: "public: virtual long __cdecl AppAndBrowserShieldBroker::DismissWarningState(enum PillarStatusFlag) __ptr64" ?DismissWarningState@AppAndBrowserShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x180025E50: "__vectorcall ??_R1A@?0A@EA@IHealthAdvisorShield" ??_R1A@?0A@EA@IHealthAdvisorShield@@8
0x180016460: "public: __cdecl CommonUtil::CAutoUniquePtr<class MpLicensing,void>::~CAutoUniquePtr<class MpLicensing,void>(void) __ptr64" ??1?$CAutoUniquePtr@VMpLicensing@@X@CommonUtil@@QEAA@XZ
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IOSProtectionShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIOSProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x18000E530: "public: virtual long __cdecl DefenderShieldBroker::DeleteConfigValue(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?DeleteConfigValue@DefenderShieldBroker@@UEAAJPEBG0@Z
0x18001F8B0: "const ILockable::`vftable'" ??_7ILockable@@6B@
0x1800201B8: "__cdecl _imp_CStdStubBuffer_AddRef" __imp_CStdStubBuffer_AddRef
0x1800205B0: "__cdecl _xp_z" __xp_z
0x180012830: "public: virtual long __cdecl AccountProtectionShieldBroker::GetHelloCXHURI(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetHelloCXHURI@AccountProtectionShieldBroker@@UEAAJPEAPEAG@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IForceFieldShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180026370: "__vectorcall ??_R1A@?0A@EA@HardwareShieldBroker" ??_R1A@?0A@EA@HardwareShieldBroker@@8
0x18002CC10: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@@8
0x180015300: "public: virtual long __cdecl ForceFieldShieldBroker::GetForceFieldType(enum Shield_ForceFieldProviderType * __ptr64) __ptr64" ?GetForceFieldType@ForceFieldShieldBroker@@UEAAJPEAW4Shield_ForceFieldProviderType@@@Z
0x180012E20: "public: virtual long __cdecl HardwareShieldBroker::EnableHvci(int * __ptr64) __ptr64" ?EnableHvci@HardwareShieldBroker@@UEAAJPEAH@Z
0x180022448: "actions" ??_C@_1BA@DMNAEEDA@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800201D8: "__cdecl _imp_NdrOleAllocate" __imp_NdrOleAllocate
0x18000FFA0: "public: virtual long __cdecl NetworkProtectionShieldBroker::DisableNotifications(enum NET_FW_PROFILE_TYPE2_,int) __ptr64" ?DisableNotifications@NetworkProtectionShieldBroker@@UEAAJW4NET_FW_PROFILE_TYPE2_@@H@Z
0x1800281EC: ?_TlgEvent@?BL@??SendToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJW4ToastType@@PEAG11@Z@4U<unnamed-type-_TlgEvent>@?BL@??123@UEAAJ0111@Z@B
0x180026F68: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x180011840: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IExploitShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18002E4C0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@@8
0x180012DC0: "public: virtual long __cdecl HardwareShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@HardwareShieldBroker@@UEAAJPEAH@Z
0x180026C38: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@8
0x180015240: "public: virtual long __cdecl ForceFieldShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@ForceFieldShieldBroker@@UEAAJPEAH@Z
0x180028760: "__cdecl _rtc_tzz" __rtc_tzz
0x180012CA0: "public: virtual long __cdecl HardwareShieldBroker::GatherTpmLogs(void) __ptr64" ?GatherTpmLogs@HardwareShieldBroker@@UEAAJXZ
0x18000FDC0: "public: virtual long __cdecl NetworkProtectionShieldBroker::SetHealthNotificationSink(struct INetworkProtectionHealthSink * __ptr64) __ptr64" ?SetHealthNotificationSink@NetworkProtectionShieldBroker@@UEAAJPEAUINetworkProtectionHealthSink@@@Z
0x1800205C8: "__cdecl _guard_fids_table" __guard_fids_table
0x180020038: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x180011BA0: "public: virtual long __cdecl DashboardBroker::GetPillarStatusEx(unsigned long,struct PillarStatusEx * __ptr64) __ptr64" ?GetPillarStatusEx@DashboardBroker@@UEAAJKPEAUPillarStatusEx@@@Z
0x180027270: "__vectorcall ??_R1A@?0A@EA@IForceFieldShield" ??_R1A@?0A@EA@IForceFieldShield@@8
0x18000F510: "public: virtual long __cdecl DefenderShieldBroker::GetAsrBlockedProcesses(struct _GUID,unsigned long,unsigned long * __ptr64,struct tagMP_ASR_HISTORY_BLOCKED_PROCESS * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetAsrBlockedProcesses@DefenderShieldBroker@@UEAAJU_GUID@@KPEAKPEAPEAPEAUtagMP_ASR_HISTORY_BLOCKED_PROCESS@@@Z
0x180023280: IID_IShieldElevationBroker
0x180014ED0: "long __cdecl CApplicationGuardShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CApplicationGuardShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800165F0: "public: virtual void * __ptr64 __cdecl CRefCountedBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefCountedBase@@UEAAPEAXI@Z
0x180011CC0: "long __cdecl CDashboardBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CDashboardBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180022C40: CLSID_HealthAdvisorShield
0x1800269A8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@8
0x18001FE90: "__cdecl load_config_used" _load_config_used
0x180027298: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@8
0x1800270E0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@8
0x1800170E4: "public: unsigned __int64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::find_last_of(unsigned short const * __ptr64 const,unsigned __int64)const __ptr64" ?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KQEBG_K@Z
0x180024840: "__vectorcall ??_R2ShieldElevationBroker" ??_R2ShieldElevationBroker@@8
0x180024AA0: "__vectorcall ??_R3ShieldElevationBroker" ??_R3ShieldElevationBroker@@8
0x180025E28: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x18000D910: "public: virtual long __cdecl DefenderShieldBroker::RunRemediation(void) __ptr64" ?RunRemediation@DefenderShieldBroker@@UEAAJXZ
0x180021E10: "O:BAG:BAD:(A;;CCDCLCSWRP;;;BA)(A" ??_C@_1IE@KGGPEANH@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAL?$AAC?$AAS?$AAW?$AAR?$AAP?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA@
0x18001CD00: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x18001D0E0: CStdStubBuffer_Invoke
0x180029D40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800232A0: "CLASSES_ROOT\%s" ??_C@_1CA@GFLIPNFM@?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180029A78: "__cdecl CTA3?AVCError@@" _CTA3?AVCError@@
0x1800119C0: "public: virtual long __cdecl DashboardBroker::SetDashboardSink(struct IDashboardSink * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?SetDashboardSink@DashboardBroker@@UEAAJPEAUIDashboardSink@@KPEAK@Z
0x180027918: "__vectorcall ??_R1A@?0A@EA@CRefObject@CommonUtil" ??_R1A@?0A@EA@CRefObject@CommonUtil@@8
0x180020E80: "{37096FBE-2F09-4FF6-8507-C6E4E11" ??_C@_1EO@NEIFIMEF@?$AA?$HL?$AA3?$AA7?$AA0?$AA9?$AA6?$AAF?$AAB?$AAE?$AA?9?$AA2?$AAF?$AA0?$AA9?$AA?9?$AA4?$AAF?$AAF?$AA6?$AA?9?$AA8?$AA5?$AA0?$AA7?$AA?9?$AAC?$AA6?$AAE?$AA4?$AAE?$AA1?$AA1@
0x180028052: ?_TlgEvent@?6??GetPolicyConfigString@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJIPEAPEAG@Z@4U<unnamed-type-_TlgEvent>@?6??123@AEAAJI0@Z@B
0x18001E4B0: "const DefenderShieldBroker::`vftable'" ??_7DefenderShieldBroker@@6B@
0x18001E0E0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<2>,1,struct INotificationActivationCallback>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@12@@
0x18000F690: "public: virtual void * __ptr64 __cdecl DefenderShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDefenderShieldBroker@@UEAAPEAXI@Z
0x180023FB8: "__vectorcall ??_R1A@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1A@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x18001F830: "const CRefCountedBase::`vftable'" ??_7CRefCountedBase@@6B@
0x18000F690: "public: virtual void * __ptr64 __cdecl ManagementShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GManagementShieldBroker@@UEAAPEAXI@Z
0x180026778: "__vectorcall ??_R3IOSProtectionShield" ??_R3IOSProtectionShield@@8
0x180026638: "__vectorcall ??_R2IOSProtectionShield" ??_R2IOSProtectionShield@@8
0x180021AF0: "O:BAG:BAD:(A;;0x3;;;SY)(A;;0x3;;" ??_C@_1IC@DNHBCGDD@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA3?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA3?$AA?$DL?$AA?$DL@
0x180020580: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x1800266F0: "__vectorcall ??_R1A@?0A@EA@IOSProtectionShield" ??_R1A@?0A@EA@IOSProtectionShield@@8
0x180029E30: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x18000FC90: "public: virtual long __cdecl NetworkProtectionShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@NetworkProtectionShieldBroker@@UEAAJPEAH@Z
0x180013B70: "public: virtual long __cdecl OSProtectionShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@OSProtectionShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x180026108: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAppAndBrowserShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IManagementShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180024650: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x18001E9B0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAppAndBrowserShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@6B@
0x180012770: "public: virtual long __cdecl AccountProtectionShieldBroker::GetDynamicLockMultiple(int * __ptr64) __ptr64" ?GetDynamicLockMultiple@AccountProtectionShieldBroker@@UEAAJPEAH@Z
0x180017B50: "public: virtual __cdecl CWString::~CWString(void) __ptr64" ??1CWString@@UEAA@XZ
0x180016690: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@A@EBAJXZ
0x180024008: "__vectorcall ??_R1A@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R1A@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x180020500: "__cdecl _imp_GetNamedSecurityInfoW" __imp_GetNamedSecurityInfoW
0x18001F8F0: "const CWString::`vftable'{for `CRefCountedBase'}" ??_7CWString@@6BCRefCountedBase@@@
0x18000F060: "public: virtual long __cdecl DefenderShieldBroker::GetOfflineThreats(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetOfflineThreats@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x18000F350: "public: virtual long __cdecl DefenderShieldBroker::IsGivenRunningModeSupported(enum tagMPRUNNING_MODE,int * __ptr64) __ptr64" ?IsGivenRunningModeSupported@DefenderShieldBroker@@UEAAJW4tagMPRUNNING_MODE@@PEAH@Z
0x180024058: "__vectorcall ??_R1A@?0A@EA@RuntimeClassBase@Details@WRL@Microsoft" ??_R1A@?0A@EA@RuntimeClassBase@Details@WRL@Microsoft@@8
0x180020148: "__cdecl _imp_CoSetProxyBlanket" __imp_CoSetProxyBlanket
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDashboard>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180021D20: "O:BAG:BAD:(A;;CCDCLCSWRP;;;SY)(A" ??_C@_1OO@LDPLOLCM@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAL?$AAC?$AAS?$AAW?$AAR?$AAP?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA@
0x180029CDC: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1800250E0: "ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`RTTI Base Class Array'" ??_R2ShieldProcessLauncherBroker@0@8
0x180025340: "ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`RTTI Class Hierarchy Descriptor'" ??_R3ShieldProcessLauncherBroker@0@8
0x1800273A8: "__vectorcall ??_R1A@?0A@EA@CRefCountedBase" ??_R1A@?0A@EA@CRefCountedBase@@8
0x180010080: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetPillarSubstatusEx(struct tagFIREWALL_PROFILE_STATUS_EX * __ptr64 * __ptr64) __ptr64" ?GetPillarSubstatusEx@NetworkProtectionShieldBroker@@UEAAJPEAPEAUtagFIREWALL_PROFILE_STATUS_EX@@@Z
0x18001F3B0: "const ApplicationGuardShieldBroker::`vftable'" ??_7ApplicationGuardShieldBroker@@6B@
0x18002C3D0: "__vectorcall ??_R0?AVtype_info@" ??_R0?AVtype_info@@@8
0x180026480: "__vectorcall ??_R3HardwareShieldBroker" ??_R3HardwareShieldBroker@@8
0x180026220: "__vectorcall ??_R2HardwareShieldBroker" ??_R2HardwareShieldBroker@@8
0x180013930: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHardwareShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18000F690: "public: virtual void * __ptr64 __cdecl ApplicationGuardShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GApplicationGuardShieldBroker@@UEAAPEAXI@Z
0x1800264B0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHardwareShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@6B@
0x18001C848: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x1800273F8: "__vectorcall ??_R1A@?0A@EA@CRefCountedBaseX" ??_R1A@?0A@EA@CRefCountedBaseX@@8
0x18001A634: "long __cdecl MpUtilsExports::NewExplicitAccessControlImpl(struct CommonUtil::IExplicitAccessControl * __ptr64 * __ptr64,unsigned long)" ?NewExplicitAccessControlImpl@MpUtilsExports@@YAJPEAPEAUIExplicitAccessControl@CommonUtil@@K@Z
0x18002EA08: "__vectorcall ??_R0?AVCRefObject@CommonUtil@" ??_R0?AVCRefObject@CommonUtil@@@8
0x18000B124: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::CreateAndShowToast(struct ShieldProvider::ShieldProviderToastPropertyBag * __ptr64,struct ShieldProvider::_ToastExtraParams * __ptr64) __ptr64" ?CreateAndShowToast@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@2@PEAU_ToastExtraParams@2@@Z
0x180022F48: "__cdecl GUID_18e4f715_debb_4a21_abc9_ff7b6f434703" _GUID_18e4f715_debb_4a21_abc9_ff7b6f434703
0x180024538: "__vectorcall ??_R1BB@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R1BB@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x180012E80: "public: virtual long __cdecl HardwareShieldBroker::DisableHvci(int * __ptr64) __ptr64" ?DisableHvci@HardwareShieldBroker@@UEAAJPEAH@Z
0x180022EE8: "__cdecl GUID_02e11ab8_8308_4c55_9fbf_b0749cc5073e" _GUID_02e11ab8_8308_4c55_9fbf_b0749cc5073e
0x180023414: "/\" ??_C@_15DJBMFJKF@?$AA?1?$AA?2?$AA?$AA@
0x180020410: "__cdecl _imp___stdio_common_vsprintf" __imp___stdio_common_vsprintf
0x180025328: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x180016140: "protected: virtual void * __ptr64 __cdecl IRefCounted::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIRefCounted@@MEAAPEAXI@Z
0x1800251F0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x18000CE54: ??$?0$0CL@@HStringReference@Wrappers@WRL@Microsoft@@QEAA@AEAY0CL@$$CBG@Z
0x180022E18: "Elevation:Administrator!new:%s" ??_C@_1DO@BMONIIMG@?$AAE?$AAl?$AAe?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AAA?$AAd?$AAm?$AAi?$AAn?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?$CB?$AAn?$AAe?$AAw?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x180018558: "long __cdecl CommonUtil::UtilGetModuleFileName(unsigned short * __ptr64 * __ptr64,struct HINSTANCE__ * __ptr64)" ?UtilGetModuleFileName@CommonUtil@@YAJPEAPEAGPEAUHINSTANCE__@@@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProcessLauncher>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1800214A8: "CLSID\%s\InprocServer32" ??_C@_1DA@CONBHHF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAI?$AAn?$AAp?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x1800225B8: "appbrowser" ??_C@_1BG@EEOGIGLC@?$AAa?$AAp?$AAp?$AAb?$AAr?$AAo?$AAw?$AAs?$AAe?$AAr?$AA?$AA@
0x180020020: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800246C8: "__vectorcall ??_R1A@?0A@EA@INotificationActivationCallback" ??_R1A@?0A@EA@INotificationActivationCallback@@8
0x18000DC90: "public: virtual long __cdecl DefenderShieldBroker::RegisterForHealthNotifications(void) __ptr64" ?RegisterForHealthNotifications@DefenderShieldBroker@@UEAAJXZ
0x180018848: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x18002E640: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIForceFieldShield@@@WRL@Microsoft@@@8
0x180023C38: "const std::bad_array_new_length::`RTTI Complete Object Locator'" ??_R4bad_array_new_length@std@@6B@
0x180021EA8: WPP_ThisDir_CTLGUID_ShieldProviderAgent
0x180023018: "__cdecl GUID_42592bc5_8e70_422d_99df_a9e5a465782c" _GUID_42592bc5_8e70_422d_99df_a9e5a465782c
0x18000CF60: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18001BA2C: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoWinFileTag,-1>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoWinFileTag,-1>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoWinFileTag@CommonUtil@@$0?0@CommonUtil@@QEAA@XZ
0x18000D730: "public: virtual long __cdecl DefenderShieldBroker::RunStandardScan(int) __ptr64" ?RunStandardScan@DefenderShieldBroker@@UEAAJH@Z
0x180010D30: "public: virtual long __cdecl AppAndBrowserShieldBroker::SetStoreAppsSmartScreenMode(enum AppAndBrowserControlLevel) __ptr64" ?SetStoreAppsSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJW4AppAndBrowserControlLevel@@@Z
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::UI::Notifications::IToastNotifier>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIToastNotifier@Notifications@UI@Windows@@@WRL@Microsoft@@IEAAKXZ
0x1800133D0: "public: virtual long __cdecl HardwareShieldBroker::IsSystemGuardPending(int * __ptr64) __ptr64" ?IsSystemGuardPending@HardwareShieldBroker@@UEAAJPEAH@Z
0x180025EA8: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x180025D70: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x1800131A0: "public: virtual long __cdecl HardwareShieldBroker::IsSystemGuardCapable(int * __ptr64) __ptr64" ?IsSystemGuardCapable@HardwareShieldBroker@@UEAAJPEAH@Z
0x180020070: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180023540: WPP_601ff79c7ff43b5577f660a2fd1b379f_Traceguids
0x18000D010: "public: virtual long __cdecl ShieldElevationBroker::CoCreateInstanceAsAdmin(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CoCreateInstanceAsAdmin@ShieldElevationBroker@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x180020040: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldElevationBroker>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180021FA8: CLSID_DefenderShieldBroker
0x180029C64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x180023488: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800060C0: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetButtonAction(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetButtonAction@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@PEBG1@Z
0x180025560: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x1800157C4: "long __cdecl ShieldProvider::GetRegKeyUnderClassesReAcledForWrite(unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,bool,struct HKEY__ * __ptr64 * __ptr64)" ?GetRegKeyUnderClassesReAcledForWrite@ShieldProvider@@YAJPEAGPEAU_SECURITY_ATTRIBUTES@@_NPEAPEAUHKEY__@@@Z
0x1800241C8: "__vectorcall ??_R3?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R3?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x180023E18: "__vectorcall ??_R2?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R2?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x18001AA90: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(long) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@J@Z
0x180023B90: "__vectorcall ??_R1A@?0A@EA@type_info" ??_R1A@?0A@EA@type_info@@8
0x18002E410: "__vectorcall ??_R0?AUIManagementShield@" ??_R0?AUIManagementShield@@@8
0x180017DD4: "public: static long __cdecl CommonUtil::CSprintfAllocWideCharPolicy::StringFormat(unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?StringFormat@CSprintfAllocWideCharPolicy@CommonUtil@@SAJPEAG_KPEA_KPEBGPEAD@Z
0x18001D410: "__cdecl _acrt_uninitialize_critical" __acrt_uninitialize_critical
0x18002F3B4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhsrvowkilerwviUhsrvowkilerwviztvmgUwooUlyquivUznwGEUkxsOlyq@SecurityHealthAgent" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhsrvowkilerwviUhsrvowkilerwviztvmgUwooUlyquivUznwGEUkxsOlyq@SecurityHealthAgent
0x18000D8B0: "public: virtual long __cdecl DefenderShieldBroker::IsRemediationRequired(int * __ptr64) __ptr64" ?IsRemediationRequired@DefenderShieldBroker@@UEAAJPEAH@Z
0x180024F78: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@8
0x180021378: "Data Protection Shield Broker" ??_C@_1DM@GFAJFFNL@?$AAD?$AAa?$AAt?$AAa?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IManagementShield>::~AutoRef<struct IManagementShield>(void) __ptr64" ??1?$AutoRef@UIManagementShield@@@CommonUtil@@QEAA@XZ
0x180026438: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@8
0x180026280: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHardwareShield@@@WRL@Microsoft@@8
0x1800228F8: "image" ??_C@_1M@BAIAHIDP@?$AAi?$AAm?$AAa?$AAg?$AAe?$AA?$AA@
0x180026450: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x180014C30: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IManagementShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIManagementShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800262E0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x1800223F8: "windowsdefender://settings" ??_C@_1DG@KBEHJIKF@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAs?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18001E040: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180022FF8: "__cdecl GUID_ce349364_86ae_44b0_bcb9_008c62875c60" _GUID_ce349364_86ae_44b0_bcb9_008c62875c60
0x18001D01E: free
0x180022000: "Windows.Defender.SecurityCenter" ??_C@_1EA@PJDGHCDP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?4?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x18001AF9C: WPP_SF_SDD
0x180022F38: WPP_df1dd4d2da7134f90d6aedcca6ec146c_Traceguids
0x1800203D0: "__cdecl _imp__initialize_narrow_environment" __imp__initialize_narrow_environment
0x18002CD70: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@@8
0x180013750: "public: virtual long __cdecl HardwareShieldBroker::RegisterForStatusNotifications(struct IHardwareNotificationsSink * __ptr64) __ptr64" ?RegisterForStatusNotifications@HardwareShieldBroker@@UEAAJPEAUIHardwareNotificationsSink@@@Z
0x180020060: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1800215A8: "IconReference" ??_C@_1BM@NDOHOLHH@?$AAI?$AAc?$AAo?$AAn?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1800117F0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IExploitShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIExploitShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020078: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18002E7F0: "__vectorcall ??_R0?AUIForceFieldShield@" ??_R0?AUIForceFieldShield@@@8
0x18001D050: "__cdecl purecall" _purecall
0x18000E370: "public: virtual long __cdecl DefenderShieldBroker::SetConfigStringValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetConfigStringValue@DefenderShieldBroker@@UEAAJPEBG00@Z
0x180020400: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x180025678: "const AppAndBrowserShieldBroker::`RTTI Complete Object Locator'" ??_R4AppAndBrowserShieldBroker@@6B@
0x18002D7B0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDashboard@@@Details@WRL@Microsoft@@@8
0x180024720: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x18001D036: "__cdecl _std_terminate" __std_terminate
0x1800243D8: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x1800233A0: "MsMpLics.dll" ??_C@_1BK@OOIFCJID@?$AAM?$AAs?$AAM?$AAp?$AAL?$AAi?$AAc?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800113D0: "public: virtual long __cdecl ExploitShieldBroker::GetImageMitigationPolicyEx(unsigned short * __ptr64,unsigned long * __ptr64,struct ImageMitigationPolicy * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetImageMitigationPolicyEx@ExploitShieldBroker@@UEAAJPEAGPEAKPEAPEAUImageMitigationPolicy@@1@Z
0x1800179B4: "public: virtual void * __ptr64 __cdecl CWString::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWString@@UEAAPEAXI@Z
0x180022504: "Phone" ??_C@_05NCHHPELK@Phone?$AA@
0x1800118C0: "public: long __cdecl DashboardBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@DashboardBroker@@QEAAJXZ
0x18002F488: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x180022CF8: "__cdecl GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4" _GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4
0x1800229B8: "wdoscan" ??_C@_1BA@KFCHMJIB@?$AAw?$AAd?$AAo?$AAs?$AAc?$AAa?$AAn?$AA?$AA@
0x18001B034: WPP_SF_SDDd
0x180025650: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IAppAndBrowserShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@6B@
0x18001CA50: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180024CE8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x180016930: "public: virtual void * __ptr64 __cdecl CError::`vector deleting destructor'(unsigned int) __ptr64" ??_ECError@@UEAAPEAXI@Z
0x180022F88: "__cdecl GUID_f6e33e03_133b_490b_b93a_2130c6b5091d" _GUID_f6e33e03_133b_490b_b93a_2130c6b5091d
0x1800200C8: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x180002D80: "public: __cdecl TraceLoggingCorrelationVector::TraceLoggingCorrelationVector(void) __ptr64" ??0TraceLoggingCorrelationVector@@QEAA@XZ
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IHardwareShield>::~AutoRef<struct IHardwareShield>(void) __ptr64" ??1?$AutoRef@UIHardwareShield@@@CommonUtil@@QEAA@XZ
0x18001D410: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x18002E260: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIManagementShield@@@WRL@Microsoft@@@8
0x1800042B0: "__cdecl _scrt_stub_for_is_c_termination_complete" __scrt_stub_for_is_c_termination_complete
0x180013C90: "public: virtual long __cdecl OSProtectionShieldBroker::SetHealthNotificationSink(struct IOSProtectionHealthSink * __ptr64) __ptr64" ?SetHealthNotificationSink@OSProtectionShieldBroker@@UEAAJPEAUIOSProtectionHealthSink@@@Z
0x180013C30: "public: virtual long __cdecl OSProtectionShieldBroker::SetStatusChangeSink(struct IOSProtectionStatusSink * __ptr64) __ptr64" ?SetStatusChangeSink@OSProtectionShieldBroker@@UEAAJPEAUIOSProtectionStatusSink@@@Z
0x180028052: ?_TlgEvent@?6??IsNotificationsDisabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?6??123@AEAAJ01@Z@B
0x180026A70: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDataProtectionShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDataProtectionShield@@@WRL@Microsoft@@6B@
0x180025608: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x1800254D0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIAppAndBrowserShield@@@Details@WRL@Microsoft@@8
0x180022330: "short" ??_C@_1M@LOLCAHAG@?$AAs?$AAh?$AAo?$AAr?$AAt?$AA?$AA@
0x180022FE8: WPP_7ee031892d2234a5899629b3e933a393_Traceguids
0x180022B60: "__cdecl GUID_431dec75_5f97_4526_bf84_fc0f86e5dc38" _GUID_431dec75_5f97_4526_bf84_fc0f86e5dc38
0x1800183FC: "long __cdecl CommonUtil::UtilRawGetProcAddress(__int64 (__cdecl* * __ptr64)(void),struct HINSTANCE__ * __ptr64,char const * __ptr64,bool)" ?UtilRawGetProcAddress@CommonUtil@@YAJPEAP6A_JXZPEAUHINSTANCE__@@PEBD_N@Z
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct INetworkProtectionShield>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1800224A8: "/toast/header" ??_C@_1BM@CCDJAEPG@?$AA?1?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?1?$AAh?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$AA@
0x180022B00: "char const * const `void __cdecl TLV::Base64Encode<129>(unsigned char const * __ptr64,unsigned __int64,char (& __ptr64)[129])'::`2'::s_lookupTable" ?s_lookupTable@?1???$Base64Encode@$0IB@@TLV@@YAXPEBE_KAEAY0IB@D@Z@4QBDB
0x18001E730: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct INetworkProtectionShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@6B@
0x180026090: "__vectorcall ??_R1A@?0A@EA@AccountProtectionShieldBroker" ??_R1A@?0A@EA@AccountProtectionShieldBroker@@8
0x18002F3C8: "long g_cRefDll" ?g_cRefDll@@3JA
0x180025BB0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x180025A40: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@8
0x180020518: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18002D730: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@@8
0x180010E50: "public: virtual long __cdecl AppAndBrowserShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@AppAndBrowserShieldBroker@@UEAAJPEAH@Z
0x18001D3B4: "__cdecl vscwprintf" _vscwprintf
0x180022FA8: "__cdecl GUID_6fc78c64_0aa1_4c1f_bca8_b6cbe0b531eb" _GUID_6fc78c64_0aa1_4c1f_bca8_b6cbe0b531eb
0x180022FC8: "__cdecl GUID_6ee9fd33_75be_4cf0_bf70_3bb7b70cec6b" _GUID_6ee9fd33_75be_4cf0_bf70_3bb7b70cec6b
0x1800130E0: "public: virtual long __cdecl HardwareShieldBroker::EnableSystemGuard(void) __ptr64" ?EnableSystemGuard@HardwareShieldBroker@@UEAAJXZ
0x180025E00: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x180022F68: "__cdecl GUID_bb2c77c9_136b_424a_b75b_aa8b62088741" _GUID_bb2c77c9_136b_424a_b75b_aa8b62088741
0x18002DD80: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IOSProtectionShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180026EF0: "__vectorcall ??_R1A@?0A@EA@ApplicationGuardShieldBroker" ??_R1A@?0A@EA@ApplicationGuardShieldBroker@@8
0x18000DE50: "public: virtual long __cdecl DefenderShieldBroker::RefreshPillarStatusEx(int * __ptr64,int * __ptr64,int * __ptr64,int * __ptr64) __ptr64" ?RefreshPillarStatusEx@DefenderShieldBroker@@UEAAJPEAH000@Z
0x18000D970: "public: virtual long __cdecl DefenderShieldBroker::RunRemediationEx(struct tagMPCLEAN_INFO * __ptr64) __ptr64" ?RunRemediationEx@DefenderShieldBroker@@UEAAJPEAUtagMPCLEAN_INFO@@@Z
0x1800200A0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000E910: "public: virtual long __cdecl DefenderShieldBroker::SetAsrEnabled(int) __ptr64" ?SetAsrEnabled@DefenderShieldBroker@@UEAAJH@Z
0x180021FB8: CLSID_ShieldElevationBroker
0x1800221A0: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x180023BE0: "__vectorcall ??_R3bad_alloc@std" ??_R3bad_alloc@std@@8
0x18000DDE0: "public: virtual long __cdecl DefenderShieldBroker::RefreshPillarStatus(int * __ptr64) __ptr64" ?RefreshPillarStatus@DefenderShieldBroker@@UEAAJPEAH@Z
0x180023BF8: "__vectorcall ??_R2bad_alloc@std" ??_R2bad_alloc@std@@8
0x180022660: "threat" ??_C@_1O@LOJLLANO@?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?$AA@
0x180020F30: "O:BAG:BAD:(A;;CCDCLC;;;SY)(A;;CC" ??_C@_1LG@FIAECFBD@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAL?$AAC?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x180010750: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchFolderInExplorer(unsigned short * __ptr64) __ptr64" ?LaunchFolderInExplorer@ShieldProcessLauncherBroker@1@UEAAJPEAG@Z
0x18002CB00: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@@8
0x18000E8A0: "public: virtual long __cdecl DefenderShieldBroker::IsAsrEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsAsrEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x1800155C0: "long __cdecl CForceFieldWebProtectionShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CForceFieldWebProtectionShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800053A0: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetLongDuration(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64,bool) __ptr64" ?SetLongDuration@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@_N@Z
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::RegisterSink(struct IHealthAdvisorSink * __ptr64,unsigned long * __ptr64) __ptr64" ?RegisterSink@HealthAdvisorShieldBroker@@UEAAJPEAUIHealthAdvisorSink@@PEAK@Z
0x18001F850: "const CRefCountedBaseX::`vftable'" ??_7CRefCountedBaseX@@6B@
0x180005078: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetTemplateText(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64,unsigned int,struct HSTRING__ * __ptr64) __ptr64" ?SetTemplateText@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@IPEAUHSTRING__@@@Z
0x180022518: "windowsdefender://%s" ??_C@_1CK@JIIIGBMB@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AA?$CF?$AAs?$AA?$AA@
0x180014410: "long __cdecl CDataProtectionShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CDataProtectionShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180025280: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x18002F3CC: "long g_cServerLocks" ?g_cServerLocks@@3JA
0x1800165F0: "public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefCountedBaseX@@UEAAPEAXI@Z
0x18001929C: "int __cdecl MpUtilsExports::UtilRegIsValidValueImpl(unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegIsValidValueImpl@MpUtilsExports@@YAHK_KPEBX@Z
0x18001CF8E: "__cdecl initterm_e" _initterm_e
0x180002CD8: "private: void __cdecl Microsoft::WRL::Wrappers::HStringReference::CreateReference(unsigned short const * __ptr64,unsigned int,unsigned int) __ptr64" ?CreateReference@HStringReference@Wrappers@WRL@Microsoft@@AEAAXPEBGII@Z
0x18001D340: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180025230: "ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::`RTTI Base Class Descriptor at (0,-1,0,64)'" ??_R1A@?0A@EA@ShieldProcessLauncherBroker@0@8
0x18002C6E0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@@8
0x180020468: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180027550: "__vectorcall ??_R1A@?0A@EA@CError" ??_R1A@?0A@EA@CError@@8
0x18001C770: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x18001D080: "__cdecl _std_exception_destroy" __std_exception_destroy
0x18002D078: "__vectorcall ??_R0?AVNetworkProtectionShieldBroker@" ??_R0?AVNetworkProtectionShieldBroker@@@8
0x18000F690: "public: virtual void * __ptr64 __cdecl AccountProtectionShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EAccountProtectionShieldBroker@@UEAAPEAXI@Z
0x180022C00: CLSID_HardwareShield
0x18000E600: "public: virtual long __cdecl DefenderShieldBroker::IsCloudProtectionEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsCloudProtectionEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x180020E30: "{7E55A26D-EF95-4A45-9F55-21E52AD" ??_C@_1EO@PONMJJCG@?$AA?$HL?$AA7?$AAE?$AA5?$AA5?$AAA?$AA2?$AA6?$AAD?$AA?9?$AAE?$AAF?$AA9?$AA5?$AA?9?$AA4?$AAA?$AA4?$AA5?$AA?9?$AA9?$AAF?$AA5?$AA5?$AA?9?$AA2?$AA1?$AAE?$AA5?$AA2?$AAA?$AAD@
0x18002F4B0: hProxyDll
0x18001C584: "__cdecl _scrt_dllmain_uninitialize_critical" __scrt_dllmain_uninitialize_critical
0x1800244E8: "__vectorcall ??_R1BC@?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R1BC@?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHealthAdvisorShield>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18002D690: "__vectorcall ??_R0?AUIExploitShield@" ??_R0?AUIExploitShield@@@8
0x180020378: "__cdecl _imp_memcpy" __imp_memcpy
0x180013140: "public: virtual long __cdecl HardwareShieldBroker::DisableSystemGuard(void) __ptr64" ?DisableSystemGuard@HardwareShieldBroker@@UEAAJXZ
0x1800204C8: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18002C9B0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@@8
0x18001CC8C: "public: __cdecl std::bad_array_new_length::bad_array_new_length(class std::bad_array_new_length const & __ptr64) __ptr64" ??0bad_array_new_length@std@@QEAA@AEBV01@@Z
0x180024F50: "__vectorcall ??_R1A@?0A@EA@NetworkProtectionShieldBroker" ??_R1A@?0A@EA@NetworkProtectionShieldBroker@@8
0x180010810: "long __cdecl ShieldProcessLauncherBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?ShieldProcessLauncherBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18001D150: CStdStubBuffer_QueryInterface
0x180022340: "duration" ??_C@_1BC@HLBDLFKJ@?$AAd?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180024560: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@8
0x180018C6C: "long __cdecl CommonUtil::UtilRegDeleteTree(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?UtilRegDeleteTree@CommonUtil@@YAJPEAUHKEY__@@PEBG@Z
0x180012710: "public: virtual long __cdecl AccountProtectionShieldBroker::GetIsWarningStateDismissed(enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@AccountProtectionShieldBroker@@UEAAJW4PillarStatusFlag@@PEAH@Z
0x180025890: "__vectorcall ??_R1A@?0A@EA@IExploitShield" ??_R1A@?0A@EA@IExploitShield@@8
0x180017D80: "[thunk]:public: virtual int __cdecl CWString::TryLock`vtordisp{4294967292,0}' (void)const __ptr64" ?TryLock@CWString@@$4PPPPPPPM@A@EBAHXZ
0x180025EF0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IHealthAdvisorShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIHealthAdvisorShield@@@WRL@Microsoft@@6B@
0x18001E178: "const ShieldProvider::ShieldProviderUserSessionAgent::`vftable'{for `IShieldProviderUserSessionAgent'}" ??_7ShieldProviderUserSessionAgent@ShieldProvider@@6BIShieldProviderUserSessionAgent@@@
0x18001D410: "__cdecl _scrt_stub_for_acrt_uninitialize_critical" __scrt_stub_for_acrt_uninitialize_critical
0x180022690: "windowsdefender://samples?viewsa" ??_C@_1EM@COMECIIJ@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AA?$DP?$AAv?$AAi?$AAe?$AAw?$AAs?$AAa@
0x18002E8F0: "__vectorcall ??_R0?AVCError@" ??_R0?AVCError@@@8
0x180021268: "Exploit Shield Broker" ??_C@_1CM@DBNFKAEN@?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180023D20: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@8
0x180024120: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@8
0x1800221F0: "SOFTWARE\Microsoft\Windows Defen" ??_C@_1IO@NJDOMKJI@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn@
0x1800204A0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18001FD18: "__cdecl ishieldproviderusersessionagent_InterfaceNamesList" _ishieldproviderusersessionagent_InterfaceNamesList
0x180017F6C: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CNewSprintfPolicy<unsigned short>,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@U?$CNewSprintfPolicy@G@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x180022990: "reboot" ??_C@_1O@FEJCAGNG@?$AAr?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x18002DCF0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@@8
0x180020448: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1800177B4: "public: static void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)" ?_Xlen@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@SAXXZ
0x1800212C0: "Health Advisor Shield Broker" ??_C@_1DK@CHBJOCJJ@?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?5?$AAA?$AAd?$AAv?$AAi?$AAs?$AAo?$AAr?$AA?5?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x18000FB00: "public: virtual long __cdecl NetworkProtectionShieldBroker::GetIsWindowsFwActive(int * __ptr64) __ptr64" ?GetIsWindowsFwActive@NetworkProtectionShieldBroker@@UEAAJPEAH@Z
0x18002E910: "__vectorcall ??_R0?AV?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@" ??_R0?AV?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@@8
0x18002C778: "__vectorcall ??_R0?AUIUnknown@" ??_R0?AUIUnknown@@@8
0x180023560: WPP_2d4ce151fc0c3de12cf05fc334846292_Traceguids
0x1800189E4: WPP_SF_P
0x180020370: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18001D130: IUnknown_Release_Proxy
0x180020450: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18002ED50: "__cdecl _security_cookie" __security_cookie
0x1800137C0: "long __cdecl CHardwareShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CHardwareShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180011A20: "public: virtual long __cdecl DashboardBroker::UnRegisterDashboardSink(unsigned long) __ptr64" ?UnRegisterDashboardSink@DashboardBroker@@UEAAJK@Z
0x18001895C: "long __cdecl CommonUtil::MpDuplicateBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ??$MpDuplicateBuffer@G@CommonUtil@@YAJPEAPEAG_KPEBG@Z
0x1800202C0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000D3F0: "long __cdecl CShieldElevationBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CShieldElevationBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18000CD34: "void * __ptr64 * __ptr64 __cdecl IID_PPV_ARGS_Helper<class Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlNodeSelector> >(class Microsoft::WRL::Details::ComPtrRef<class Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlNodeSelector> >)" ??$IID_PPV_ARGS_Helper@V?$ComPtr@UIXmlNodeSelector@Dom@Xml@Data@Windows@@@WRL@Microsoft@@@@YAPEAPEAXV?$ComPtrRef@V?$ComPtr@UIXmlNodeSelector@Dom@Xml@Data@Windows@@@WRL@Microsoft@@@Details@WRL@Microsoft@@@Z
0x1800232C0: "S-1-5-18" ??_C@_1BC@FOGOLNOF@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?$AA@
0x180011680: "long __cdecl CExploitShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CExploitShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180020530: "__cdecl _imp_?_Xlength_error@std@@YAXPEBD@Z" __imp_?_Xlength_error@std@@YAXPEBD@Z
0x18002E440: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@@8
0x180022A38: "signinoptions-dynamiclock" ??_C@_1DE@EPFKKDOK@?$AAs?$AAi?$AAg?$AAn?$AAi?$AAn?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?9?$AAd?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x18001C868: "__cdecl _scrt_fastfail" __scrt_fastfail
0x18000669C: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetGroupTitle(unsigned int,struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64) __ptr64" ?SetGroupTitle@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJIPEAUIXmlDocument@Dom@Xml@Data@Windows@@@Z
0x18000CB80: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@UEAAKXZ
0x180012F40: "public: virtual long __cdecl HardwareShieldBroker::IsHvciCapable(int * __ptr64,unsigned int * __ptr64) __ptr64" ?IsHvciCapable@HardwareShieldBroker@@UEAAJPEAHPEAI@Z
0x18001D120: CStdStubBuffer_AddRef
0x180022B90: WPP_a7219723cdfb367a03b3c50bed26c0d3_Traceguids
0x18000F860: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDefenderShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x1800201F8: "__cdecl _imp_CStdStubBuffer_IsIIDSupported" __imp_CStdStubBuffer_IsIIDSupported
0x180024B20: "__vectorcall ??_R2DefenderShieldBroker" ??_R2DefenderShieldBroker@@8
0x180027A80: "__vectorcall ??_R2?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil" ??_R2?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@8
0x180024D80: "__vectorcall ??_R3DefenderShieldBroker" ??_R3DefenderShieldBroker@@8
0x180027CE0: "__vectorcall ??_R3?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil" ??_R3?$CSecurityAttributesAlloc@U?$CAutoLocalPtr@PEAX@CommonUtil@@@CommonUtil@@8
0x180020258: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x180029C8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x180027AF8: "const CommonUtil::CExplicitAccessControl::`RTTI Complete Object Locator'" ??_R4CExplicitAccessControl@CommonUtil@@6B@
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::IsSignaturePC(int * __ptr64) __ptr64" ?IsSignaturePC@HealthAdvisorShieldBroker@@UEAAJPEAH@Z
0x1800200E8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::UnregisterSink(unsigned long) __ptr64" ?UnregisterSink@HealthAdvisorShieldBroker@@UEAAJK@Z
0x180017214: "public: unsigned short const * __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::c_str(void)const __ptr64" ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAPEBGXZ
0x1800222B0: "/toast/visual/binding/text[numbe" ??_C@_1FO@BICFNGCN@?$AA?1?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?1?$AAv?$AAi?$AAs?$AAu?$AAa?$AAl?$AA?1?$AAb?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?1?$AAt?$AAe?$AAx?$AAt?$AA?$FL?$AAn?$AAu?$AAm?$AAb?$AAe@
0x180012230: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHealthAdvisorShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180020028: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180027688: "__vectorcall ??_R2CWString" ??_R2CWString@@8
0x1800247E8: "const ShieldProvider::ShieldProviderUserSessionAgent::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<2>,1,struct INotificationActivationCallback>'}" ??_R4ShieldProviderUserSessionAgent@ShieldProvider@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00UINotificationActivationCallback@@@Details@WRL@Microsoft@@@
0x180027848: "__vectorcall ??_R3CWString" ??_R3CWString@@8
0x180020498: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800250B8: "const NetworkProtectionShieldBroker::`RTTI Complete Object Locator'" ??_R4NetworkProtectionShieldBroker@@6B@
0x18001EE40: "const AccountProtectionShieldBroker::`vftable'" ??_7AccountProtectionShieldBroker@@6B@
0x18000E980: "public: virtual long __cdecl DefenderShieldBroker::GetThreats(unsigned long * __ptr64,struct tagMPTHREAT_INFO * __ptr64 * __ptr64 * __ptr64) __ptr64" ?GetThreats@DefenderShieldBroker@@UEAAJPEAKPEAPEAPEAUtagMPTHREAT_INFO@@@Z
0x180010000: "public: virtual long __cdecl NetworkProtectionShieldBroker::SendSenseIsolationToastNotification(void) __ptr64" ?SendSenseIsolationToastNotification@NetworkProtectionShieldBroker@@UEAAJXZ
0x1800223A0: "id" ??_C@_15NFICGAJK@?$AAi?$AAd?$AA?$AA@
0x18000E6E0: "public: virtual long __cdecl DefenderShieldBroker::IsRtpEnabled(int * __ptr64,enum ConfigOrigin * __ptr64) __ptr64" ?IsRtpEnabled@DefenderShieldBroker@@UEAAJPEAHPEAW4ConfigOrigin@@@Z
0x180020388: api-ms-win-crt-private-l1-1-0_NULL_THUNK_DATA
0x180020598: "__cdecl _xl_a" __xl_a
0x180027F20: ?_TlgEvent@?DL@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?DL@??123@AEAAJ01@Z@B
0x1800201B0: "__cdecl _imp_CStdStubBuffer_DebugServerQueryInterface" __imp_CStdStubBuffer_DebugServerQueryInterface
0x180022FD8: WPP_72266776dc2b3b86d17bd758ebad62c6_Traceguids
0x18001A380: "public: virtual struct _ACL * __ptr64 __cdecl CommonUtil::CWinSecurityAclAlloc<class CommonUtil::CAutoUniquePtr<struct _ACL,void> >::Get(void)const __ptr64" ?Get@?$CWinSecurityAclAlloc@V?$CAutoUniquePtr@U_ACL@@X@CommonUtil@@@CommonUtil@@UEBAPEAU_ACL@@XZ
0x180029A98: "__cdecl CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24" _CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24
0x1800200D0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x180025258: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@8
0x180021648: "AppIDFlags" ??_C@_1BG@EDLFCAPN@?$AAA?$AAp?$AAp?$AAI?$AAD?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180011E30: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDataProtectionShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001875C: "long __cdecl CommonUtil::UtilIsFileExists(unsigned short const * __ptr64)" ?UtilIsFileExists@CommonUtil@@YAJPEBG@Z
0x1800204D0: "__cdecl _imp_CopySid" __imp_CopySid
0x18000F690: "public: virtual void * __ptr64 __cdecl NetworkProtectionShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GNetworkProtectionShieldBroker@@UEAAPEAXI@Z
0x180017900: "public: virtual long __cdecl CError::GetErrorCode(void)const __ptr64" ?GetErrorCode@CError@@UEBAJXZ
0x1800202A8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800059EC: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::SetContextMenuAction(struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64) __ptr64" ?SetContextMenuAction@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUIXmlDocument@Dom@Xml@Data@Windows@@@Z
0x18000EB20: "public: virtual long __cdecl DefenderShieldBroker::RemoveQuarantinedItem(struct _GUID) __ptr64" ?RemoveQuarantinedItem@DefenderShieldBroker@@UEAAJU_GUID@@@Z
0x180023CC0: "__vectorcall ??_R2CClassFactory" ??_R2CClassFactory@@8
0x180024168: "__vectorcall ??_R3CClassFactory" ??_R3CClassFactory@@8
0x180027EB2: ?_TlgEvent@?EE@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?EE@??123@AEAAJ01@Z@B
0x180027E34: ?_TlgEvent@?EN@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?EN@??123@AEAAJ01@Z@B
0x18002E9C8: "__vectorcall ??_R0?AVCWString@" ??_R0?AVCWString@@@8
0x180027728: "__vectorcall ??_R1BA@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R1BA@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x1800126B0: "public: virtual long __cdecl AccountProtectionShieldBroker::RevokeWarningStateDismissal(enum PillarStatusFlag) __ptr64" ?RevokeWarningStateDismissal@AccountProtectionShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x18001787C: "public: __cdecl CError::CError(long) __ptr64" ??0CError@@QEAA@J@Z
0x180027030: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IApplicationGuardShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@6B@
0x180022EC8: "__cdecl GUID_2117b672_bf55_43a9_b577_7fd30da3b86c" _GUID_2117b672_bf55_43a9_b577_7fd30da3b86c
0x1800267B8: "const OSProtectionShieldBroker::`RTTI Complete Object Locator'" ??_R4OSProtectionShieldBroker@@6B@
0x1800249B8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldElevationBroker@@@WRL@Microsoft@@8
0x180018694: "long __cdecl CommonUtil::UtilCreateFile(void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,void * __ptr64)" ?UtilCreateFile@CommonUtil@@YAJPEAPEAXPEBGKKKKPEAU_SECURITY_ATTRIBUTES@@PEAX@Z
0x180010A50: "public: long __cdecl AppAndBrowserShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@AppAndBrowserShieldBroker@@QEAAJXZ
0x18002ED60: "__cdecl _isa_available" __isa_available
0x18001F460: "const ForceFieldShieldBroker::`vftable'" ??_7ForceFieldShieldBroker@@6B@
0x180027B50: "__vectorcall ??_R2ISecurityAttributes@CommonUtil" ??_R2ISecurityAttributes@CommonUtil@@8
0x180027BB8: "__vectorcall ??_R3ISecurityAttributes@CommonUtil" ??_R3ISecurityAttributes@CommonUtil@@8
0x18002800B: ?_TlgEvent@?BG@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?BG@??123@AEAAJ01@Z@B
0x180027FD6: ?_TlgEvent@?BP@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?BP@??123@AEAAJ01@Z@B
0x18001AC50: "long __cdecl CommonUtil::HrFromStdException(class std::exception const & __ptr64)" ?HrFromStdException@CommonUtil@@YAJAEBVexception@std@@@Z
0x180021500: "AppID" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x180020DB8: "WakeAllConditionVariable" ??_C@_0BJ@PGPPEPCC@WakeAllConditionVariable?$AA@
0x18000F190: "public: virtual long __cdecl DefenderShieldBroker::StartDefenderInNormalMode(void) __ptr64" ?StartDefenderInNormalMode@DefenderShieldBroker@@UEAAJXZ
0x18002E610: "__vectorcall ??_R0?AUIApplicationGuardShield@" ??_R0?AUIApplicationGuardShield@@@8
0x180024BE0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x180020D78: "InitializeConditionVariable" ??_C@_0BM@HLJJNPAH@InitializeConditionVariable?$AA@
0x180024D50: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDefenderShield@@@Details@WRL@Microsoft@@8
0x180004240: "public: virtual long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::LaunchCommandWithShellExecute(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?LaunchCommandWithShellExecute@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJPEBG0@Z
0x18001795C: "public: virtual void __cdecl CWString::Unlock(void)const __ptr64" ?Unlock@CWString@@UEBAXXZ
0x18002F402: "struct CommonUtil::CCommonThrowHR CommonUtil::tHR" ?tHR@CommonUtil@@3UCCommonThrowHR@1@A
0x180024900: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x180024A70: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x180020090: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800200E0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180022DF8: "__cdecl GUID_2dfb8a1f_6b10_4ef8_9f83_efcce8faec37" _GUID_2dfb8a1f_6b10_4ef8_9f83_efcce8faec37
0x180027F8E: ?_TlgEvent@?CK@??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?CK@??123@AEAAJ01@Z@B
0x18001EFE0: "const HardwareShieldBroker::`vftable'" ??_7HardwareShieldBroker@@6B@
0x18002E6B0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@@8
0x18002D900: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@@8
0x18001BE54: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x18000F690: "public: virtual void * __ptr64 __cdecl HardwareShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GHardwareShieldBroker@@UEAAPEAXI@Z
0x180021570: "CLSID\%s\Elevation" ??_C@_1CG@OJNPFNGC@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAE?$AAl?$AAe?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180029D54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x180029CF0: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180022E78: WPP_52665a256226396c59ac0edf6881d34c_Traceguids
0x180021FE0: "%.*s" ??_C@_19IGEAAGFL@?$AA?$CF?$AA?4?$AA?$CK?$AAs?$AA?$AA@
0x180022C20: CLSID_AppAndBrowserShield
0x1800202B8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180010570: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchTroubleShooter(enum _tagDiagnosticTroubleShooter) __ptr64" ?LaunchTroubleShooter@ShieldProcessLauncherBroker@1@UEAAJW4_tagDiagnosticTroubleShooter@@@Z
0x18002F364: "__cdecl _favor" __favor
0x18002D830: "__vectorcall ??_R0?AVDashboardBroker@" ??_R0?AVDashboardBroker@@@8
0x18002D6C0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@@8
0x18000DBB0: "public: virtual long __cdecl DefenderShieldBroker::SetNotificationsSink(struct IDefenderNotificationsSink * __ptr64) __ptr64" ?SetNotificationsSink@DefenderShieldBroker@@UEAAJPEAUIDefenderNotificationsSink@@@Z
0x180006EB0: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::GetPolicyConfigString(unsigned int,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetPolicyConfigString@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJIPEAPEAG@Z
0x180027A18: "__vectorcall ??_R3CSecurityAttributesHolder@CommonUtil" ??_R3CSecurityAttributesHolder@CommonUtil@@8
0x180027CC0: "__vectorcall ??_R2CSecurityAttributesHolder@CommonUtil" ??_R2CSecurityAttributesHolder@CommonUtil@@8
0x18001C300: "__cdecl _security_init_cookie" __security_init_cookie
0x180019A20: "public: virtual long __cdecl CommonUtil::CExplicitAccessControl::AddByRid(unsigned long,unsigned long,enum _ACCESS_MODE,unsigned long,struct _SID_IDENTIFIER_AUTHORITY const * __ptr64,unsigned long) __ptr64" ?AddByRid@CExplicitAccessControl@CommonUtil@@UEAAJKKW4_ACCESS_MODE@@KPEBU_SID_IDENTIFIER_AUTHORITY@@K@Z
0x180022320: "long" ??_C@_19EKGKGAPA@?$AAl?$AAo?$AAn?$AAg?$AA?$AA@
0x180018A20: WPP_SF_q
0x180023390: WPP_dbba3850470d314c99a6dbe29633314d_Traceguids
0x180022978: "fullscan" ??_C@_1BC@EFHNAOJ@?$AAf?$AAu?$AAl?$AAl?$AAs?$AAc?$AAa?$AAn?$AA?$AA@
0x180020DE0: "{4FE95D37-3459-4ECC-AC3E-F7ABBE4" ??_C@_1EO@GONDOPCG@?$AA?$HL?$AA4?$AAF?$AAE?$AA9?$AA5?$AAD?$AA3?$AA7?$AA?9?$AA3?$AA4?$AA5?$AA9?$AA?9?$AA4?$AAE?$AAC?$AAC?$AA?9?$AAA?$AAC?$AA3?$AAE?$AA?9?$AAF?$AA7?$AAA?$AAB?$AAB?$AAE?$AA4@
0x1800203F0: "__cdecl _imp__cexit" __imp__cexit
0x18002C040: "struct CLASS_INFO * g_Classes" ?g_Classes@@3PAUCLASS_INFO@@A
0x180026FB8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@8
0x180010000: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::GetProcessPath(unsigned long,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetProcessPath@ShieldProcessLauncherBroker@1@UEAAJKPEAPEAG@Z
0x180026E00: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIApplicationGuardShield@@@WRL@Microsoft@@8
0x180016124: "protected: virtual __cdecl IRefCounted::~IRefCounted(void) __ptr64" ??1IRefCounted@@MEAA@XZ
0x180023BB8: "const std::bad_alloc::`RTTI Complete Object Locator'" ??_R4bad_alloc@std@@6B@
0x180012EE0: "public: virtual long __cdecl HardwareShieldBroker::IsHvciRecommended(int * __ptr64) __ptr64" ?IsHvciRecommended@HardwareShieldBroker@@UEAAJPEAH@Z
0x180026170: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x180026000: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@8
0x18001F218: "const DataProtectionShieldBroker::`vftable'" ??_7DataProtectionShieldBroker@@6B@
0x180020268: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x180002C90: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct INetworkProtectionShield>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UINetworkProtectionShield@@@WRL@Microsoft@@UEAAPEAXI@Z
0x180010C70: "public: virtual long __cdecl AppAndBrowserShieldBroker::SetEdgeSmartScreenMode(enum AppAndBrowserControlLevel) __ptr64" ?SetEdgeSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJW4AppAndBrowserControlLevel@@@Z
0x18002D0E0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProcessLauncher@@@WRL@Microsoft@@@8
0x18001E108: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::`vftable'{for `IShieldProviderUserSessionAgent'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@WRL@Microsoft@@6BIShieldProviderUserSessionAgent@@@
0x1800225A8: "network" ??_C@_1BA@JCCGGEHH@?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?$AA@
0x18002E360: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft@@@8
0x180020528: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180023008: WPP_65a49b62b65934a9e1dd4e32823f249f_Traceguids
0x180024D38: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@8
0x180024B80: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@8
0x180020348: "__cdecl _imp_memmove" __imp_memmove
0x180022930: "tel:%s" ??_C@_1O@JMELJBMC@?$AAt?$AAe?$AAl?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x180010C10: "public: virtual long __cdecl AppAndBrowserShieldBroker::GetEdgeSmartScreenMode(enum AppAndBrowserControlLevel * __ptr64,int * __ptr64) __ptr64" ?GetEdgeSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJPEAW4AppAndBrowserControlLevel@@PEAH@Z
0x18002CEB0: "__vectorcall ??_R0?AUIDefenderShield@" ??_R0?AUIDefenderShield@@@8
0x18000E5A0: "public: virtual long __cdecl DefenderShieldBroker::QueryDefaultFolderGuardList(unsigned long * __ptr64,struct _GUID * __ptr64 * __ptr64) __ptr64" ?QueryDefaultFolderGuardList@DefenderShieldBroker@@UEAAJPEAKPEAPEAU_GUID@@@Z
0x180026E60: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x180026FD0: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@8
0x18002E0E0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDataProtectionShield@@@Details@WRL@Microsoft@@@8
0x180013590: "public: virtual long __cdecl HardwareShieldBroker::GetHvciPendingStates(int * __ptr64,int * __ptr64,int * __ptr64) __ptr64" ?GetHvciPendingStates@HardwareShieldBroker@@UEAAJPEAH00@Z
0x18002F480: "public: static class Microsoft::WRL::Details::ModuleBase * __ptr64 __ptr64 Microsoft::WRL::Details::ModuleBase::module_" ?module_@ModuleBase@Details@WRL@Microsoft@@2PEAV1234@EA
0x18002D2E0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@@8
0x18000CE98: "long __cdecl Windows::Foundation::ActivateInstance<struct Windows::Data::Xml::Dom::IXmlDocument>(struct HSTRING__ * __ptr64,struct Windows::Data::Xml::Dom::IXmlDocument * __ptr64 * __ptr64)" ??$ActivateInstance@UIXmlDocument@Dom@Xml@Data@Windows@@@Foundation@Windows@@YAJPEAUHSTRING__@@PEAPEAUIXmlDocument@Dom@Xml@Data@1@@Z
0x180025D20: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x180025E90: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@8
0x1800205C0: "__cdecl _xt_z" __xt_z
0x180022380: "activationType" ??_C@_1BO@MJCJIAJD@?$AAa?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800165F0: "public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefCountedBaseX@@UEAAPEAXI@Z
0x18000DEC0: "public: virtual long __cdecl DefenderShieldBroker::DismissWarningState(enum PillarStatusFlag) __ptr64" ?DismissWarningState@DefenderShieldBroker@@UEAAJW4PillarStatusFlag@@@Z
0x18001E7F0: "const NetworkProtectionShieldBroker::`vftable'" ??_7NetworkProtectionShieldBroker@@6B@
0x180025C10: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDashboard>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@6B@
0x180019920: ?AddBySid@?QIExplicitAccessControl@CommonUtil@@CExplicitAccessControl@2@UEAAJPEAXKW4_ACCESS_MODE@@K@Z
0x180011C00: "public: virtual long __cdecl DashboardBroker::GetDataProtectionPillarStatusEx(struct PillarStatus * __ptr64,struct Shield_CloudBackupProviderInfo * __ptr64 * __ptr64) __ptr64" ?GetDataProtectionPillarStatusEx@DashboardBroker@@UEAAJPEAUPillarStatus@@PEAPEAUShield_CloudBackupProviderInfo@@@Z
0x180020318: "__cdecl _imp_malloc" __imp_malloc
0x18001EAC0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IExploitShield>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@6B@
0x180020368: "__cdecl _imp__purecall" __imp__purecall
0x18002CE80: "__vectorcall ??_R0?AVDefenderShieldBroker@" ??_R0?AVDefenderShieldBroker@@@8
0x1800107B0: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchOptionalFeaturesDialog(void) __ptr64" ?LaunchOptionalFeaturesDialog@ShieldProcessLauncherBroker@1@UEAAJXZ
0x180002BF0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProcessLauncher>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@UEAAKXZ
0x180019DC4: "public: class CommonUtil::AutoRef<struct CommonUtil::IWinSecurityAcl> __cdecl CommonUtil::CExplicitAccessControl::TrCreateAcl(struct _ACL * __ptr64) __ptr64" ?TrCreateAcl@CExplicitAccessControl@CommonUtil@@QEAA?AV?$AutoRef@UIWinSecurityAcl@CommonUtil@@@2@PEAU_ACL@@@Z
0x18000FBC0: "public: virtual long __cdecl NetworkProtectionShieldBroker::UseRecommendedFirewallSettings(void) __ptr64" ?UseRecommendedFirewallSettings@NetworkProtectionShieldBroker@@UEAAJXZ
0x18000E3E0: "public: virtual long __cdecl DefenderShieldBroker::SetConfigMultiStringValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64) __ptr64" ?SetConfigMultiStringValue@DefenderShieldBroker@@UEAAJPEBG0KPEAG@Z
0x180020470: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000E300: "public: virtual long __cdecl DefenderShieldBroker::SetConfigDwordValue(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?SetConfigDwordValue@DefenderShieldBroker@@UEAAJPEBG0K@Z
0x180021F08: CLSID_DataProtectionShieldBroker
0x18000F690: "public: virtual void * __ptr64 __cdecl AccountProtectionShieldBroker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GAccountProtectionShieldBroker@@UEAAPEAXI@Z
0x180028279: ?_TlgEvent@?3??SendToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJW4ToastType@@PEAG11@Z@4U<unnamed-type-_TlgEvent>@?3??123@UEAAJ0111@Z@B
0x180020398: "__cdecl _imp__invalid_parameter_noinfo" __imp__invalid_parameter_noinfo
0x18001C440: "__cdecl _scrt_dllmain_after_initialize_c" __scrt_dllmain_after_initialize_c
0x1800166B8: "public: virtual long __cdecl CRefCountedBaseX::Release(void)const __ptr64" ?Release@CRefCountedBaseX@@UEBAJXZ
0x180014E10: "public: virtual long __cdecl ApplicationGuardShieldBroker::GetApplicationGuardPolicy(enum ShieldApplicationGuardPolicy,int * __ptr64) __ptr64" ?GetApplicationGuardPolicy@ApplicationGuardShieldBroker@@UEAAJW4ShieldApplicationGuardPolicy@@PEAH@Z
0x180029D90: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180026BD0: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x180026D08: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIManagementShield@@@Details@WRL@Microsoft@@8
0x18000CF30: "[thunk]:public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180024228: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IClassFactory>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIClassFactory@@@WRL@Microsoft@@6B@
0x180021510: "SecurityHealthAgent.dll" ??_C@_1DA@JCJJEP@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AAA?$AAg?$AAe?$AAn?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180020238: "__cdecl _imp_CryptCATAdminCalcHashFromFileHandle" __imp_CryptCATAdminCalcHashFromFileHandle
0x180028052: ?_TlgEvent@?9??IsCoBrandingEnabled@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJPEAUShieldProviderToastPropertyBag@3@PEA_N@Z@4U<unnamed-type-_TlgEvent>@?9??123@AEAAJ01@Z@B
0x1800203A8: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x180025AF8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDashboard@@@WRL@Microsoft@@8
0x18002E740: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIForceFieldShield@@@Details@WRL@Microsoft@@@8
0x180021F68: CLSID_ExploitShieldBroker
0x18002CD00: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@@8
0x180022920: "binding" ??_C@_1BA@MNOKGNDL@?$AAb?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x18000EFF0: "public: virtual long __cdecl DefenderShieldBroker::GetOfflineScanStatus(unsigned long,struct tagMPOFFLINE_SCAN_STATUS_INFO * __ptr64) __ptr64" ?GetOfflineScanStatus@DefenderShieldBroker@@UEAAJKPEAUtagMPOFFLINE_SCAN_STATUS_INFO@@@Z
0x180020208: RPCRT4_NULL_THUNK_DATA
0x180022F28: "__cdecl GUID_d71bece8_17b8_4636_832c_d010d4f847f7" _GUID_d71bece8_17b8_4636_832c_d010d4f847f7
0x180011210: "public: long __cdecl ExploitShieldBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@ExploitShieldBroker@@QEAAJXZ
0x180024950: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x180024A88: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIShieldElevationBroker@@@Details@WRL@Microsoft@@8
0x180027DB8: ?_TlgEvent@?BI@??BuildBodyActions@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEAU_ToastExtraParams@3@PEAUShieldProviderToastPropertyBag@3@@Z@4U<unnamed-type-_TlgEvent>@?BI@??123@AEAAJ012@Z@B
0x1800204E8: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x18001C4E4: "__cdecl _scrt_dllmain_exception_filter" __scrt_dllmain_exception_filter
0x180024DB0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IDefenderShield>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIDefenderShield@@@WRL@Microsoft@@6B@
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IApplicationGuardShield>::~AutoRef<struct IApplicationGuardShield>(void) __ptr64" ??1?$AutoRef@UIApplicationGuardShield@@@CommonUtil@@QEAA@XZ
0x180015040: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IApplicationGuardShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIApplicationGuardShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180021E98: WPP_2522c974d41d340c391f5a90dc9306e3_Traceguids
0x180026DA0: "__vectorcall ??_R2ApplicationGuardShieldBroker" ??_R2ApplicationGuardShieldBroker@@8
0x180027000: "__vectorcall ??_R3ApplicationGuardShieldBroker" ??_R3ApplicationGuardShieldBroker@@8
0x180013440: "public: virtual long __cdecl HardwareShieldBroker::IsSecureBootEnabled(int * __ptr64) __ptr64" ?IsSecureBootEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x18001CAC0: "__cdecl _report_gsfailure" __report_gsfailure
0x180027818: "__vectorcall ??_R3?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R3?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18000CD68: "public: __cdecl Microsoft::WRL::Wrappers::HStringReference::PEAG::PEAG(unsigned short * __ptr64 const & __ptr64,struct WRL::Wrappers::Details::Dummy) __ptr64" ??$?0PEAG@HStringReference@Wrappers@WRL@Microsoft@@QEAA@AEBQEAGUDummy@Details@23@@Z
0x18000CD68: "public: __cdecl Microsoft::WRL::Wrappers::HStringReference::PEBG::PEBG(unsigned short const * __ptr64 const & __ptr64,struct WRL::Wrappers::Details::Dummy) __ptr64" ??$?0PEBG@HStringReference@Wrappers@WRL@Microsoft@@QEAA@AEBQEBGUDummy@Details@23@@Z
0x1800227C8: "windowsdefender://update_av?%s" ??_C@_1DO@NNJDILJI@?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAd?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?3?$AA?1?$AA?1?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA_?$AAa?$AAv?$AA?$DP?$AA?$CF?$AAs?$AA?$AA@
0x1800276E0: "__vectorcall ??_R2?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R2?$_String_alloc@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18001CFFA: "__cdecl crt_atexit" _crt_atexit
0x180002D14: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x1800148E0: "public: virtual long __cdecl ManagementShieldBroker::GetDwordMiscConfig(unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetDwordMiscConfig@ManagementShieldBroker@@UEAAJPEBGKPEAK@Z
0x180020D10: "bad array new length" ??_C@_0BF@KINCDENJ@bad?5array?5new?5length?$AA@
0x180023FE0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x180010690: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::LaunchAdvancedFirewallSettingsMMC(void) __ptr64" ?LaunchAdvancedFirewallSettingsMMC@ShieldProcessLauncherBroker@1@UEAAJXZ
0x18001C7D0: "__cdecl onexit" _onexit
0x180022E68: "__cdecl GUID_06622d85_6856_4460_8de1_a81921b41c4b" _GUID_06622d85_6856_4460_8de1_a81921b41c4b
0x180025868: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIExploitShield@@@Details@WRL@Microsoft@@8
0x180026A40: "__vectorcall ??_R3DataProtectionShieldBroker" ??_R3DataProtectionShieldBroker@@8
0x1800267E0: "__vectorcall ??_R2DataProtectionShieldBroker" ??_R2DataProtectionShieldBroker@@8
0x180021F28: CLSID_HardwareShieldBroker
0x180003084: "long __cdecl ShieldProvider::GetResourceString(unsigned int,unsigned short * __ptr64 * __ptr64)" ?GetResourceString@ShieldProvider@@YAJIPEAPEAG@Z
0x1800266A0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIOSProtectionShield@@@Details@WRL@Microsoft@@8
0x180013D50: "public: virtual long __cdecl OSProtectionShieldBroker::RebootDevice(void) __ptr64" ?RebootDevice@OSProtectionShieldBroker@@UEAAJXZ
0x1800228A0: "enablertp" ??_C@_1BE@PPLHFOCA@?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAr?$AAt?$AAp?$AA?$AA@
0x18000EC10: "public: virtual long __cdecl DefenderShieldBroker::AddThreatToAllowList(unsigned __int64) __ptr64" ?AddThreatToAllowList@DefenderShieldBroker@@UEAAJ_K@Z
0x18001AAE0: "public: virtual long __cdecl CommonUtil::CHResultExceptionImpl::GetErrorCode(void)const __ptr64" ?GetErrorCode@CHResultExceptionImpl@CommonUtil@@UEBAJXZ
0x18002ED90: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x180011E80: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IDashboard>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIDashboard@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800201A0: "__cdecl _imp_CStdStubBuffer_Invoke" __imp_CStdStubBuffer_Invoke
0x180020248: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x180023F40: "__vectorcall ??_R19?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R19?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x1800233F8: "\MsMpLics.dll" ??_C@_1BM@LMEBGKFE@?$AA?2?$AAM?$AAs?$AAM?$AAp?$AAL?$AAi?$AAc?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001FFF0: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180029E44: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x1800127D0: "public: virtual long __cdecl AccountProtectionShieldBroker::GetDynamicLockConnectedDevice(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetDynamicLockConnectedDevice@AccountProtectionShieldBroker@@UEAAJPEAPEAG@Z
0x180022708: "coreisolation" ??_C@_1BM@NDAJDIDA@?$AAc?$AAo?$AAr?$AAe?$AAi?$AAs?$AAo?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001A080: "long __cdecl CommonUtil::UtilDuplicateSid(void * __ptr64 * __ptr64,void * __ptr64)" ?UtilDuplicateSid@CommonUtil@@YAJPEAPEAXPEAX@Z
0x1800211E8: "Shield Process Launcher Broker" ??_C@_1DO@OONAHEBC@?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180020FE8: "Shield Broker" ??_C@_1BM@MMIHGIBJ@?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x1800263E8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@8
0x180023F68: "__vectorcall ??_R18?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R18?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x180024250: "const CClassFactory::`RTTI Complete Object Locator'" ??_R4CClassFactory@@6B@
0x18000ED50: "public: virtual long __cdecl DefenderShieldBroker::GetThreatLocalizedInfo(unsigned __int64,struct tagMPTHREAT_LOCALIZED_INFO * __ptr64 * __ptr64) __ptr64" ?GetThreatLocalizedInfo@DefenderShieldBroker@@UEAAJ_KPEAPEAUtagMPTHREAT_LOCALIZED_INFO@@@Z
0x1800261B8: "__vectorcall ??_R3IAccountProtectionShield" ??_R3IAccountProtectionShield@@8
0x180026078: "__vectorcall ??_R2IAccountProtectionShield" ??_R2IAccountProtectionShield@@8
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IDefenderShield>::~AutoRef<struct IDefenderShield>(void) __ptr64" ??1?$AutoRef@UIDefenderShield@@@CommonUtil@@QEAA@XZ
0x180024628: "__vectorcall ??_R1A@?0A@EC@IUnknown" ??_R1A@?0A@EC@IUnknown@@8
0x1800132F0: "public: virtual long __cdecl HardwareShieldBroker::IsSystemGuardEnabled(int * __ptr64) __ptr64" ?IsSystemGuardEnabled@HardwareShieldBroker@@UEAAJPEAH@Z
0x18001CF76: "__cdecl _stdio_common_vswprintf" __stdio_common_vswprintf
0x1800240F8: "__vectorcall ??_R1A@?0A@EA@IUnknown" ??_R1A@?0A@EA@IUnknown@@8
0x180029D04: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x180020200: "__cdecl _imp_CStdStubBuffer_Connect" __imp_CStdStubBuffer_Connect
0x18000CB30: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@UEAAKXZ
0x180012410: "public: virtual long __cdecl AccountProtectionShieldBroker::GetPillarStatus(struct PillarStatus * __ptr64) __ptr64" ?GetPillarStatus@AccountProtectionShieldBroker@@UEAAJPEAUPillarStatus@@@Z
0x180026BF8: "__vectorcall ??_R2IManagementShield" ??_R2IManagementShield@@8
0x18001BD20: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180026D38: "__vectorcall ??_R3IManagementShield" ??_R3IManagementShield@@8
0x180014A10: "public: virtual long __cdecl ManagementShieldBroker::GetIsOSTerminalServicesSuite(int * __ptr64) __ptr64" ?GetIsOSTerminalServicesSuite@ManagementShieldBroker@@UEAAJPEAH@Z
0x180020290: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x1800021D0: DllRegisterServer
0x18000F690: "public: virtual void * __ptr64 __cdecl NetworkProtectionShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_ENetworkProtectionShieldBroker@@UEAAPEAXI@Z
0x180023478: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180020170: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x18002DC18: "__vectorcall ??_R0?AVAccountProtectionShieldBroker@" ??_R0?AVAccountProtectionShieldBroker@@@8
0x180027B38: "__vectorcall ??_R3CExplicitAccessControl@CommonUtil" ??_R3CExplicitAccessControl@CommonUtil@@8
0x180027A30: "__vectorcall ??_R2CExplicitAccessControl@CommonUtil" ??_R2CExplicitAccessControl@CommonUtil@@8
0x180013990: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHardwareShield>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHardwareShield@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::UI::Notifications::IToastNotification>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIToastNotification@Notifications@UI@Windows@@@WRL@Microsoft@@IEAAKXZ
0x180022D80: "unsigned short const * const RuntimeClass_Windows_Data_Xml_Dom_XmlDocument" ?RuntimeClass_Windows_Data_Xml_Dom_XmlDocument@@3QBGB
0x1800152A0: "public: virtual long __cdecl ForceFieldShieldBroker::RegisterSink(struct IForceFieldSink * __ptr64) __ptr64" ?RegisterSink@ForceFieldShieldBroker@@UEAAJPEAUIForceFieldSink@@@Z
0x18000CBA0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IShieldProviderUserSessionAgent,struct INotificationActivationCallback>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProviderUserSessionAgent@@UINotificationActivationCallback@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180027AA8: "__vectorcall ??_R1A@?0A@EA@IWinSecurityAcl@CommonUtil" ??_R1A@?0A@EA@IWinSecurityAcl@CommonUtil@@8
0x180010FD0: "long __cdecl CAppAndBrowserShieldBroker_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CAppAndBrowserShieldBroker_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800203C8: "__cdecl _imp__configure_narrow_argv" __imp__configure_narrow_argv
0x180025060: "__vectorcall ??_R3NetworkProtectionShieldBroker" ??_R3NetworkProtectionShieldBroker@@8
0x1800204D8: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x180024E00: "__vectorcall ??_R2NetworkProtectionShieldBroker" ??_R2NetworkProtectionShieldBroker@@8
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IHealthAdvisorShield>::~AutoRef<struct IHealthAdvisorShield>(void) __ptr64" ??1?$AutoRef@UIHealthAdvisorShield@@@CommonUtil@@QEAA@XZ
0x18000FB60: "public: virtual long __cdecl NetworkProtectionShieldBroker::RestoreFirewallDefaults(void) __ptr64" ?RestoreFirewallDefaults@NetworkProtectionShieldBroker@@UEAAJXZ
0x180024F38: "__vectorcall ??_R2INetworkProtectionShield" ??_R2INetworkProtectionShield@@8
0x1800299D0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x180025078: "__vectorcall ??_R3INetworkProtectionShield" ??_R3INetworkProtectionShield@@8
0x180010000: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::IsProcessAMPPL(unsigned long,int * __ptr64) __ptr64" ?IsProcessAMPPL@ShieldProcessLauncherBroker@1@UEAAJKPEAH@Z
0x18000E1C0: "public: virtual long __cdecl DefenderShieldBroker::GetConfigVectorValueEx(unsigned short const * __ptr64,unsigned long * __ptr64,struct ConfigData * __ptr64 * __ptr64) __ptr64" ?GetConfigVectorValueEx@DefenderShieldBroker@@UEAAJPEBGPEAKPEAPEAUConfigData@@@Z
0x18001AEE0: WPP_SF__guid_d
0x180027778: "__vectorcall ??_R1A@?0A@EA@CWString" ??_R1A@?0A@EA@CWString@@8
0x180002BA0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IClassFactory>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIClassFactory@@@Details@WRL@Microsoft@@UEAAKXZ
0x180027D20: "const CommonUtil::CHResultExceptionImpl::`RTTI Complete Object Locator'" ??_R4CHResultExceptionImpl@CommonUtil@@6B@
0x180020358: "__cdecl _imp___std_type_info_destroy_list" __imp___std_type_info_destroy_list
0x180002064: "public: __cdecl CommonUtil::CAutoLocalPtr<struct _ACL * __ptr64>::~CAutoLocalPtr<struct _ACL * __ptr64>(void) __ptr64" ??1?$CAutoLocalPtr@PEAU_ACL@@@CommonUtil@@QEAA@XZ
0x18002CFF0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UINetworkProtectionShield@@@Details@WRL@Microsoft@@@8
0x180026C10: "__vectorcall ??_R1A@?0A@EA@ManagementShieldBroker" ??_R1A@?0A@EA@ManagementShieldBroker@@8
0x180018168: WPP_SF_SD
0x1800181EC: WPP_SF_sd
0x180016574: WPP_SF_Sd
0x180023E68: "__vectorcall ??_R2IUnknown" ??_R2IUnknown@@8
0x180022460: "Windows_Defender_SecurityCenter_" ??_C@_1EG@FGELGHGN@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA_?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA_?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA_@
0x180024210: "__vectorcall ??_R3IUnknown" ??_R3IUnknown@@8
0x180012A00: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IAccountProtectionShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIAccountProtectionShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x180020320: "__cdecl _imp_free" __imp_free
0x180020210: "__cdecl _imp_ShellExecuteW" __imp_ShellExecuteW
0x180011B40: "public: virtual long __cdecl DashboardBroker::GetOverallHealthStatus(enum PillarHealth * __ptr64) __ptr64" ?GetOverallHealthStatus@DashboardBroker@@UEAAJPEAW4PillarHealth@@@Z
0x180023430: WPP_d08e397b7d7533c42782c79c06c9b9a9_Traceguids
0x18002E5D8: "__vectorcall ??_R0?AVApplicationGuardShieldBroker@" ??_R0?AVApplicationGuardShieldBroker@@@8
0x18000CC80: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::Data::Xml::Dom::IXmlDocument>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIXmlDocument@Dom@Xml@Data@Windows@@@WRL@Microsoft@@IEAAKXZ
0x18000F690: "public: virtual void * __ptr64 __cdecl HardwareShieldBroker::`vector deleting destructor'(unsigned int) __ptr64" ??_EHardwareShieldBroker@@UEAAPEAXI@Z
0x180002B74: "public: __cdecl CommonUtil::AutoRef<struct IAccountProtectionShield>::~AutoRef<struct IAccountProtectionShield>(void) __ptr64" ??1?$AutoRef@UIAccountProtectionShield@@@CommonUtil@@QEAA@XZ
0x1800136E0: "public: virtual long __cdecl HardwareShieldBroker::GetIsWarningStateDismissed(enum PillarStatusFlag,int * __ptr64) __ptr64" ?GetIsWarningStateDismissed@HardwareShieldBroker@@UEAAJW4PillarStatusFlag@@PEAH@Z
0x180020298: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18001BDBC: "long __cdecl CommonUtil::OnInitializeAtStartupNoThrow(long (__cdecl*)(void * __ptr64),void * __ptr64)" ?OnInitializeAtStartupNoThrow@CommonUtil@@YAJP6AJPEAX@Z0@Z
0x180021F78: CLSID_AppAndBrowserShieldBroker
0x180014150: "public: virtual long __cdecl DataProtectionShieldBroker::RegisterSink(struct IDataProtectionSink * __ptr64) __ptr64" ?RegisterSink@DataProtectionShieldBroker@@UEAAJPEAUIDataProtectionSink@@@Z
0x180021EF8: CLSID_ForceFieldWebProtectionShieldBroker
0x18002EBE8: "__vectorcall ??_R0?AUIWinSecurityAcl@CommonUtil@" ??_R0?AUIWinSecurityAcl@CommonUtil@@@8
0x18001D110: NdrOleFree
0x18001CFEE: "__cdecl execute_onexit_table" _execute_onexit_table
0x180010510: "public: virtual long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::TurnTimeServiceOn(void) __ptr64" ?TurnTimeServiceOn@ShieldProcessLauncherBroker@1@UEAAJXZ
0x180022A20: "bluetooth" ??_C@_1BE@CDNJBLKI@?$AAb?$AAl?$AAu?$AAe?$AAt?$AAo?$AAo?$AAt?$AAh?$AA?$AA@
0x180010000: "public: virtual long __cdecl HealthAdvisorShieldBroker::RunCurrentUserAssessments(void) __ptr64" ?RunCurrentUserAssessments@HealthAdvisorShieldBroker@@UEAAJXZ
0x1800251A0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x1800103B0: "public: long __cdecl ShieldProcessLauncherBroker::ShieldProcessLauncherBroker::RuntimeClassInitialize(void) __ptr64" ?RuntimeClassInitialize@ShieldProcessLauncherBroker@1@QEAAJXZ
0x180025538: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIAppAndBrowserShield@@@WRL@Microsoft@@8
0x180025310: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIShieldProcessLauncher@@@Details@WRL@Microsoft@@8
0x18001650C: WPP_SF_S
0x18002E3E0: "__vectorcall ??_R0?AVManagementShieldBroker@" ??_R0?AVManagementShieldBroker@@@8
0x180025BF8: "__vectorcall ??_R3IDashboard" ??_R3IDashboard@@8
0x1800281AD: ?_TlgEvent@?CH@??SendToastNotification@ShieldProviderUserSessionAgent@ShieldProvider@@UEAAJW4ToastType@@PEAG11@Z@4U<unnamed-type-_TlgEvent>@?CH@??123@UEAAJ0111@Z@B
0x180025AB8: "__vectorcall ??_R2IDashboard" ??_R2IDashboard@@8
0x180019870: "public: virtual long __cdecl CommonUtil::CExplicitAccessControl::CreateAcl(struct CommonUtil::IWinSecurityAcl * __ptr64 * __ptr64,struct _ACL * __ptr64) __ptr64" ?CreateAcl@CExplicitAccessControl@CommonUtil@@UEAAJPEAPEAUIWinSecurityAcl@2@PEAU_ACL@@@Z
0x1800121D0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IHealthAdvisorShield>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIHealthAdvisorShield@@@Details@WRL@Microsoft@@UEAAKXZ
0x18001D012: memset
0x180029E58: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000EC80: "public: virtual long __cdecl DefenderShieldBroker::RemoveThreatFromAllowList(unsigned __int64) __ptr64" ?RemoveThreatFromAllowList@DefenderShieldBroker@@UEAAJ_K@Z
0x180024C70: "__vectorcall ??_R1A@?0A@EA@DefenderShieldBroker" ??_R1A@?0A@EA@DefenderShieldBroker@@8
0x180022E88: "__cdecl GUID_06f64788_2882_425b_b5da_0f8d773ff9d8" _GUID_06f64788_2882_425b_b5da_0f8d773ff9d8
0x180010B50: "public: virtual long __cdecl AppAndBrowserShieldBroker::GetAppRepSmartScreenMode(enum AppAndBrowserControlLevel * __ptr64,int * __ptr64) __ptr64" ?GetAppRepSmartScreenMode@AppAndBrowserShieldBroker@@UEAAJPEAW4AppAndBrowserControlLevel@@PEAH@Z
0x180025700: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@8
0x18002ED80: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
0x1800258B8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIExploitShield@@@WRL@Microsoft@@8
0x180007C78: "private: long __cdecl ShieldProvider::ShieldProviderUserSessionAgent::BuildRemediationExe(enum ToastType,struct ShieldProvider::_ToastExtraParams * __ptr64,struct ShieldProvider::ShieldProviderToastPropertyBag * __ptr64) __ptr64" ?BuildRemediationExe@ShieldProviderUserSessionAgent@ShieldProvider@@AEAAJW4ToastType@@PEAU_ToastExtraParams@2@PEAUShieldProviderToastPropertyBag@2@@Z

[JEB Decompiler by PNF Software]