Generated by JEB on 2019/08/01

PE: C:\Windows\System32\vrfcore.dll Base=0x180000000 SHA-256=81DEE7337D0B8BBF28C1A9C69EB1B0DF12767A7F37B2B1D874F12FAA1BC50BD9
PDB: vrfcore.pdb GUID={4EFE62FA-0931-BBAC-06C7A14A0D355B80} Age=1

752 located named symbols:
0x18000D488: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x180014DF0: "unsigned long VfCorePropMinimumMemoryOverhead" ?VfCorePropMinimumMemoryOverhead@@3KA
0x18000DB98: "AVRF: failed to allocated a veri" ??_C@_0DA@IPOCMCMM@AVRF?3?5failed?5to?5allocated?5a?5veri@
0x18000BA80: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000BE70: LdrEnumerateLoadedModules
0x180006958: "struct _AVRF_LAYER_DESCRIPTOR * __ptr64 __cdecl VfCoreGetLayerDescriptor(void * __ptr64,void * __ptr64 * __ptr64,unsigned long)" ?VfCoreGetLayerDescriptor@@YAPEAU_AVRF_LAYER_DESCRIPTOR@@PEAXPEAPEAXK@Z
0x18000BEB8: NtDeleteValueKey
0x180011E24: "unsigned long AVrfpAPIClassNumber" ?AVrfpAPIClassNumber@@3KA
0x180017CF0: "struct _RTL_CRITICAL_SECTION AVrfpFaultInjectionLock" ?AVrfpFaultInjectionLock@@3U_RTL_CRITICAL_SECTION@@A
0x18000E170: "AVRF: VfCoreFindMostRecentThunk " ??_C@_0EL@HDLIAOHJ@AVRF?3?5VfCoreFindMostRecentThunk?5@
0x180014DC0: "unsigned long VfCoreLoadedAsProvider" ?VfCoreLoadedAsProvider@@3KA
0x180002AB0: VerifierQueryLayerBreaks
0x18000D9F0: "Stop-%08X-ErrorReport" ??_C@_1CM@JAFHOBC@?$AAS?$AAt?$AAo?$AAp?$AA?9?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AAE?$AAr?$AAr?$AAo?$AAr?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x18000DD30: "{ApplicationVerifierGlobalSettin" ??_C@_1EI@HIAOFLLI@?$AA?$HL?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn@
0x1800030CC: "long __cdecl VfCoreInitializeRecursionTlsSlot(void)" ?VfCoreInitializeRecursionTlsSlot@@YAJXZ
0x18000E720: "Exceptions" ??_C@_1BG@GIDDKHAK@?$AAE?$AAx?$AAc?$AAe?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180003C48: "long __cdecl VfCoreLoadString(struct HINSTANCE__ * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?VfCoreLoadString@@YAJPEAUHINSTANCE__@@IPEAPEAGPEAK@Z
0x18000EC50: "AVRF: Rollback (%ws: %p) with (%" ??_C@_0CG@DBKNNOHD@AVRF?3?5Rollback?5?$CI?$CFws?3?5?$CFp?$CJ?5with?5?$CI?$CF@
0x18000D3E8: "__cdecl _imp_LdrAccessResource" __imp_LdrAccessResource
0x180004884: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000D408: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180010148: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180013050: VfProviderCOMBreakDescriptors
0x180001020: "void __cdecl VfCoreHeapFreeCallback(void * __ptr64,unsigned __int64)" ?VfCoreHeapFreeCallback@@YAXPEAX_K@Z
0x180003D78: "unsigned short * __ptr64 __cdecl VfCoreCreateDefaultString(unsigned short * __ptr64)" ?VfCoreCreateDefaultString@@YAPEAGPEAG@Z
0x1800110C0: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * VfCoreNtdllHooks" ?VfCoreNtdllHooks@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x18000E9D8: "AVRF: %ws @ %p: entry point @ %p" ??_C@_0CE@FLEBAHPA@AVRF?3?5?$CFws?5?$EA?5?$CFp?3?5entry?5point?5?$EA?5?$CFp@
0x180003A1C: "unsigned short * __ptr64 __cdecl VfCoreGetImageName(void)" ?VfCoreGetImageName@@YAPEAGXZ
0x180011D60: "struct _PageHeapPropertyMap VfHeapPropertyMap_SizeEnd" ?VfHeapPropertyMap_SizeEnd@@3U_PageHeapPropertyMap@@A
0x180014828: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000D370: "__cdecl _imp__stricmp" __imp__stricmp
0x180015FB0: AVrfpStopData
0x180001078: "int __cdecl _DllMain(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?_DllMain@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x18000E500: "{4D056CEB-D8E3-4b85-B148-B543D56" ??_C@_1EO@OIBLELLE@?$AA?$HL?$AA4?$AAD?$AA0?$AA5?$AA6?$AAC?$AAE?$AAB?$AA?9?$AAD?$AA8?$AAE?$AA3?$AA?9?$AA4?$AAb?$AA8?$AA5?$AA?9?$AAB?$AA1?$AA4?$AA8?$AA?9?$AAB?$AA5?$AA4?$AA3?$AAD?$AA5?$AA6@
0x18000D358: "__cdecl _imp_NtReadVirtualMemory" __imp_NtReadVirtualMemory
0x1800115C0: "struct _AVRF_LAYER_DESCRIPTOR VfProviderComLayerDescriptor" ?VfProviderComLayerDescriptor@@3U_AVRF_LAYER_DESCRIPTOR@@A
0x18000AD0C: "unsigned long __cdecl AVrfpIsAddressInExclusionRange(unsigned __int64,unsigned long)" ?AVrfpIsAddressInExclusionRange@@YAK_KK@Z
0x18000E5E8: "UnloadPeriodMs" ??_C@_1BO@OFJGHBPN@?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AAM?$AAs?$AA?$AA@
0x18000E6D8: "Locks" ??_C@_1M@NEHCMLKP@?$AAL?$AAo?$AAc?$AAk?$AAs?$AA?$AA@
0x180009A54: "struct _DLL_ENTRY_POINT_INFO * __ptr64 __cdecl VfCoreFindDllEntryPointInfo(void * __ptr64)" ?VfCoreFindDllEntryPointInfo@@YAPEAU_DLL_ENTRY_POINT_INFO@@PEAX@Z
0x18000D790: "CreateProcessInternalA" ??_C@_0BH@JCKMJDHH@CreateProcessInternalA?$AA@
0x180006430: "long __cdecl VfCoreInitializeLayersSupport(void)" ?VfCoreInitializeLayersSupport@@YAJXZ
0x18000D890: "Core" ??_C@_19CKCBDCMG@?$AAC?$AAo?$AAr?$AAe?$AA?$AA@
0x18000E9B8: "AVRF: %ws: null entry point. " ??_C@_0BO@JEFKDLGH@AVRF?3?5?$CFws?3?5null?5entry?5point?4?6?$AA@
0x18000E8C8: "TlsFree" ??_C@_07MKACNHID@TlsFree?$AA@
0x18000B400: VerifierDisableFaultInjectionExclusionRange
0x18000D340: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800027A0: VerifierCreateLayerProperties
0x18000C170: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000DCE8: "AVRF: failed to write into verif" ??_C@_0DO@CKOLFJBM@AVRF?3?5failed?5to?5write?5into?5verif@
0x180015EA8: "unsigned short * __ptr64 __ptr64 VfCoreStringStopNotContinuable" ?VfCoreStringStopNotContinuable@@3PEAGEA
0x1800176B8: "unsigned long VfHeapsPropertyLFHGuardPages" ?VfHeapsPropertyLFHGuardPages@@3KA
0x180008C5C: "enum _AVRF_STATUS __cdecl VfGetCoreLayerDescriptorByName(unsigned short const * __ptr64,struct _AVRF_LAYER_DESCRIPTOR * __ptr64 * __ptr64)" ?VfGetCoreLayerDescriptorByName@@YA?AW4_AVRF_STATUS@@PEBGPEAPEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x18000E410: "PageHeapTargetDlls" ??_C@_1CG@ILGGFBG@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x180002E50: VerifierIsLayerEnabled
0x18000BE8E: "__cdecl vsnwprintf" _vsnwprintf
0x18000D3D0: "__cdecl _imp_LdrUnlockLoaderLock" __imp_LdrUnlockLoaderLock
0x18000E858: "VfRegisterBaseLayers" ??_C@_0BF@PHFDGJGL@VfRegisterBaseLayers?$AA@
0x18001771C: "unsigned long VfHeapsPropertyNoLock" ?VfHeapsPropertyNoLock@@3KA
0x18000D988: "AVRF: Verifier!AvrfpProvider : %" ??_C@_0CD@OBNKMJLG@AVRF?3?5Verifier?$CBAvrfpProvider?5?3?5?$CF@
0x18000BFC6: NtProtectVirtualMemory
0x18000D768: "CreateProcessA" ??_C@_0P@NJIBPEPK@CreateProcessA?$AA@
0x18000D4B0: "__cdecl _imp_LdrGetDllHandle" __imp_LdrGetDllHandle
0x1800115B8: "unsigned long VfComPropertyAggressiveDllUnload" ?VfComPropertyAggressiveDllUnload@@3KA
0x180014DC8: "struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR * __ptr64 __ptr64 AVrfpProvider" ?AVrfpProvider@@3PEAU_RTL_VERIFIER_PROVIDER_DESCRIPTOR@@EA
0x18000D480: "__cdecl _imp_wcstoul" __imp_wcstoul
0x180017B58: "int (__cdecl* __ptr64 pfn_TlsFree)(unsigned long)" ?pfn_TlsFree@@3P6AHK@ZEA
0x1800174A8: "unsigned long ViCoreDebugDynamicChaining" ?ViCoreDebugDynamicChaining@@3KA
0x180007B14: "void * __ptr64 __cdecl VfCoreFindMostRecentThunkInHookChain(void * __ptr64)" ?VfCoreFindMostRecentThunkInHookChain@@YAPEAXPEAX@Z
0x180002890: VerifierQueryLayerProperties
0x1800055A4: "void __cdecl AVrfAddStorageBlock(struct _AVRF_STORAGE * __ptr64)" ?AVrfAddStorageBlock@@YAXPEAU_AVRF_STORAGE@@@Z
0x18000E265: "" ??_C@_00CNPNBAHC@?$AA@
0x18000BE58: NtQueryVirtualMemory
0x18000E4A0: "PageHeapRandomProbability" ??_C@_1DE@GPFCNNBA@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAP?$AAr?$AAo?$AAb?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x18000BF6C: NtCreateFile
0x180006310: VerifierRegisterLayerEx
0x180004288: "char __cdecl ViCoreHexValue(unsigned short)" ?ViCoreHexValue@@YADG@Z
0x18000BF54: NtAllocateVirtualMemory
0x18000612C: "enum _AVRF_STATUS __cdecl ViRegisterLayer(struct HINSTANCE__ * __ptr64,struct _AVRF_LAYER_DESCRIPTOR * __ptr64,unsigned long)" ?ViRegisterLayer@@YA?AW4_AVRF_STATUS@@PEAUHINSTANCE__@@PEAU_AVRF_LAYER_DESCRIPTOR@@K@Z
0x180001B10: "long __cdecl StringCbPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCbPrintfA@@YAJPEAD_KPEBDZZ
0x18000D3C0: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x18000DDE8: "TEMP" ??_C@_19LFDMGLCC@?$AAT?$AAE?$AAM?$AAP?$AA?$AA@
0x180014E68: "unsigned __int64 VfCoreUseWow64" ?VfCoreUseWow64@@3_KA
0x180008AF8: "unsigned long __cdecl ViCoreGetVerifierFlagsBit(unsigned short const * __ptr64)" ?ViCoreGetVerifierFlagsBit@@YAKPEBG@Z
0x18000C024: ReadPointerNoFence
0x18000DBC8: "Expected Thread ID" ??_C@_0BD@DFLNDPKO@Expected?5Thread?5ID?$AA@
0x18000E270: "AVRF: failed to make R/W old ver" ??_C@_0EA@HKGNONHI@AVRF?3?5failed?5to?5make?5R?1W?5old?5ver@
0x18000D400: "__cdecl _imp_NtWriteFile" __imp_NtWriteFile
0x180017B50: "int (__cdecl* __ptr64 pfn_TlsSetValue)(unsigned long,void * __ptr64)" ?pfn_TlsSetValue@@3P6AHKPEAX@ZEA
0x180001B84: "long __cdecl StringCbLengthA(char const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCbLengthA@@YAJPEBD_KPEA_K@Z
0x180015F78: "char * __ptr64 __ptr64 VfCoreAnsiStringStopMessage2" ?VfCoreAnsiStringStopMessage2@@3PEADEA
0x18000B2F0: VerifierEnableFaultInjectionExclusionRange
0x18000A644: "long __cdecl VfCoreSnapDllImports(struct _LDR_DATA_TABLE_ENTRY * __ptr64,struct _RTL_VERIFIER_DLL_DESCRIPTOR * __ptr64)" ?VfCoreSnapDllImports@@YAJPEAU_LDR_DATA_TABLE_ENTRY@@PEAU_RTL_VERIFIER_DLL_DESCRIPTOR@@@Z
0x18000E338: "RtlApplicationVerifierStop" ??_C@_0BL@GCNKJKMK@RtlApplicationVerifierStop?$AA@
0x18000BFB4: NtCreateKey
0x18000D368: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x180009DC4: "long __cdecl ViCoreAddDelayLoadedDll(char const * __ptr64)" ?ViCoreAddDelayLoadedDll@@YAJPEBD@Z
0x18000607C: "public: __cdecl ResourceString::operator unsigned short * __ptr64(void)const __ptr64" ??BResourceString@@QEBAPEAGXZ
0x18000D548: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000D9B0: "AVRF: ERROR - Couldn't found Ver" ??_C@_0DF@FCKHDCGC@AVRF?3?5ERROR?5?9?5Couldn?8t?5found?5Ver@
0x18000BF48: RtlDosPathNameToNtPathName_U
0x18000D040: "struct _STRING VerifierIsAddressInAnyPageHeapFunctionName" ?VerifierIsAddressInAnyPageHeapFunctionName@@3U_STRING@@A
0x18000DD78: "ProtectedProcessLogPath" ??_C@_1DA@JLJPDGCM@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAL?$AAo?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18000D3B8: "__cdecl _imp_RtlAcquirePebLock" __imp_RtlAcquirePebLock
0x18000BF8A: NtDeleteKey
0x180014E18: "char * __ptr64 * PointOfFailureFile" ?PointOfFailureFile@@3PAPEADA
0x18000D300: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180014DF8: "char * __ptr64 * PointOfFailureFunction" ?PointOfFailureFunction@@3PAPEADA
0x180008504: "enum _AVRF_STATUS __cdecl VfHeapQueryLayerProperty(void * __ptr64,struct _AVRF_PROPERTY_DESCRIPTOR * __ptr64)" ?VfHeapQueryLayerProperty@@YA?AW4_AVRF_STATUS@@PEAXPEAU_AVRF_PROPERTY_DESCRIPTOR@@@Z
0x18000E6F8: "Stacks" ??_C@_1O@CJJKOKAI@?$AAS?$AAt?$AAa?$AAc?$AAk?$AAs?$AA?$AA@
0x180015FDC: "unsigned long ViCoreLoggingFailures" ?ViCoreLoggingFailures@@3KA
0x1800174AC: "unsigned long ViCoreVerifierThunkTableTranslated" ?ViCoreVerifierThunkTableTranslated@@3KA
0x180022040: "unsigned __int64 * AVrfpFaultExclusionStart" ?AVrfpFaultExclusionStart@@3PA_KA
0x1800017D0: "long __cdecl VfCoreLdrGetProcedureAddress(void * __ptr64,struct _STRING const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?VfCoreLdrGetProcedureAddress@@YAJPEAXPEBU_STRING@@KPEAPEAX@Z
0x180005E58: InsertTailList
0x18001773C: "unsigned long VfHeapsPropertyAddressStart" ?VfHeapsPropertyAddressStart@@3KA
0x180017BF0: "unsigned long * AVrfpFaultTrue" ?AVrfpFaultTrue@@3PAKA
0x180004848: IsListEmpty
0x180003754: RemoveEntryList
0x180014DE0: "unsigned long * PointOfFailureLine" ?PointOfFailureLine@@3PAKA
0x18000E770: "Race" ??_C@_19DPENBLBM@?$AAR?$AAa?$AAc?$AAe?$AA?$AA@
0x18000E7C0: "InputOutput" ??_C@_1BI@OCKKAFG@?$AAI?$AAn?$AAp?$AAu?$AAt?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AA?$AA@
0x18000BA78: ReadNoFence64
0x18000E560: "Basics" ??_C@_1O@BIFEGCIO@?$AAB?$AAa?$AAs?$AAi?$AAc?$AAs?$AA?$AA@
0x18000BFF0: RtlRandom
0x18000D498: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18000D710: "RtlFreeHeap" ??_C@_0M@BBFBOFBP@RtlFreeHeap?$AA@
0x18000BE52: DbgPrintEx
0x180017700: "struct _LIST_ENTRY ViCoreLayersList" ?ViCoreLayersList@@3U_LIST_ENTRY@@A
0x18000E0E8: "AVRF: VfCoreFindMostRecentThunk " ??_C@_0DN@BIGNIFDJ@AVRF?3?5VfCoreFindMostRecentThunk?5@
0x18000B500: VerifierResetFaultInjectionAddressRanges
0x18000A008: "long __cdecl VfCoreProviderUninitialize(void)" ?VfCoreProviderUninitialize@@YAJXZ
0x18000D500: "__cdecl _imp_LdrDisableThreadCalloutsForDll" __imp_LdrDisableThreadCalloutsForDll
0x18000BF24: RtlReleasePebLock
0x180015EB0: "unsigned short * __ptr64 __ptr64 VfCoreStringStopContinuable" ?VfCoreStringStopContinuable@@3PEAGEA
0x180011448: "struct _UNICODE_STRING VerifierDllName" ?VerifierDllName@@3U_UNICODE_STRING@@A
0x18000D380: "__cdecl _imp_NtSetValueKey" __imp_NtSetValueKey
0x1800039E4: "void * __ptr64 __cdecl VfCoreAlloc(unsigned __int64)" ?VfCoreAlloc@@YAPEAX_K@Z
0x180011D80: "struct _PageHeapPropertyMap VfHeapPropertyMap_FaultRate" ?VfHeapPropertyMap_FaultRate@@3U_PageHeapPropertyMap@@A
0x180022840: "unsigned __int64 AVrfPreviousOriginalStopCode" ?AVrfPreviousOriginalStopCode@@3_KA
0x180011DB0: "struct _PageHeapPropertyMap VfHeapPropertyMap_Faults" ?VfHeapPropertyMap_Faults@@3U_PageHeapPropertyMap@@A
0x18000BE9A: "__cdecl wcsicmp" _wcsicmp
0x1800095C0: "int __cdecl ViTlsFree(unsigned long)" ?ViTlsFree@@YAHK@Z
0x18000E028: "onecore\base\avrf\avrf30\vrfcore" ??_C@_0CM@IAPODOOC@onecore?2base?2avrf?2avrf30?2vrfcore@
0x180011920: "struct _PageHeapPropertyMap VfHeapPropertyMap_Backward" ?VfHeapPropertyMap_Backward@@3U_PageHeapPropertyMap@@A
0x18000C151: memcpy
0x18000E010: "LogToFile" ??_C@_1BE@IIEHFDNN@?$AAL?$AAo?$AAg?$AAT?$AAo?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x18000BDC0: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x18000D348: "__cdecl _imp_RtlCaptureStackBackTrace" __imp_RtlCaptureStackBackTrace
0x180007F64: "long __cdecl VfCoreRedirectVerifierStopFunction(void * __ptr64)" ?VfCoreRedirectVerifierStopFunction@@YAJPEAX@Z
0x1800110B8: AVrfpTlsIndex
0x18000D530: "__cdecl _imp_memset" __imp_memset
0x180017724: "unsigned long VfHeapsPropertyFaultRate" ?VfHeapsPropertyFaultRate@@3KA
0x180017D20: "unsigned __int64 * AVrfpFaultExclusionEnd" ?AVrfpFaultExclusionEnd@@3PA_KA
0x18000D458: "__cdecl _imp_NtWaitForSingleObject" __imp_NtWaitForSingleObject
0x180021A30: "unsigned long AVrfpFaultSuspendMsec" ?AVrfpFaultSuspendMsec@@3KA
0x180007DB0: "public: __cdecl ResourceString::~ResourceString(void) __ptr64" ??1ResourceString@@QEAA@XZ
0x1800176BC: "unsigned long VfHeapsPropertyLFHShrinkingReAlloc" ?VfHeapsPropertyLFHShrinkingReAlloc@@3KA
0x180003110: VerifierGetRecursionTlsSlot
0x18000BF66: RtlInitializeCriticalSection
0x180009680: "void __cdecl VfCoreDllLoadCallback(unsigned short * __ptr64,void * __ptr64,unsigned __int64,void * __ptr64)" ?VfCoreDllLoadCallback@@YAXPEAGPEAX_K1@Z
0x18000C014: RtlUnhandledExceptionFilter
0x180021A34: "unsigned long AVrfpFaultTraceIndex" ?AVrfpFaultTraceIndex@@3KA
0x180005E50: ??0?$OnDelete@PEAXP6AXPEAX@Z$1?VfCoreFree@@YAX0@Z@@QEAA@PEAX@Z
0x1800026E0: VerifierOpenLayerProperties
0x18000BE88: "__cdecl _C_specific_handler" __C_specific_handler
0x18000C002: RtlCaptureContext
0x18000D450: "__cdecl _imp_RtlDoesFileExists_U" __imp_RtlDoesFileExists_U
0x180017714: "unsigned long VfComPropertyAggressiveMTATesting" ?VfComPropertyAggressiveMTATesting@@3KA
0x180008BE8: "enum _AVRF_STATUS __cdecl VfUnregisterBaseLayers(void)" ?VfUnregisterBaseLayers@@YA?AW4_AVRF_STATUS@@XZ
0x18000BF90: memmove
0x180004724: AvrfpThreadDetach
0x18000DFE0: " AVRF:Failed to save message int" ??_C@_0CN@BOCJMFFB@?6AVRF?3Failed?5to?5save?5message?5int@
0x1800117A0: "struct _PageHeapPropertyMap VfHeapPropertyMap_FaultTimeout" ?VfHeapPropertyMap_FaultTimeout@@3U_PageHeapPropertyMap@@A
0x180002EB4: "enum _AVRF_STATUS __cdecl ViCoreSetLayerProperty(void * __ptr64,struct _AVRF_PROPERTY_DESCRIPTOR * __ptr64)" ?ViCoreSetLayerProperty@@YA?AW4_AVRF_STATUS@@PEAXPEAU_AVRF_PROPERTY_DESCRIPTOR@@@Z
0x180011910: "struct _PageHeapPropertyMap VfHeapPropertyMap_AddressEnd" ?VfHeapPropertyMap_AddressEnd@@3U_PageHeapPropertyMap@@A
0x18000D430: "__cdecl _imp_NtDelayExecution" __imp_NtDelayExecution
0x18000D2C0: "__cdecl _imp_LdrGetProcedureAddress" __imp_LdrGetProcedureAddress
0x18001145C: "unsigned long VfHeapsPropertyNDelayFreeSize" ?VfHeapsPropertyNDelayFreeSize@@3KA
0x18000D418: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x18000A5C0: "enum _AVRF_INIT_ORDER __cdecl VfCoreCompareInitOrder(void * __ptr64,void * __ptr64)" ?VfCoreCompareInitOrder@@YA?AW4_AVRF_INIT_ORDER@@PEAX0@Z
0x180003670: "int __cdecl ViCoreTryToVerifySamePointerSize(void * __ptr64)" ?ViCoreTryToVerifySamePointerSize@@YAHPEAX@Z
0x180017718: "unsigned long VfHeapsPropertySizeStart" ?VfHeapsPropertySizeStart@@3KA
0x180004660: AVrfpGetVerifierTlsValue
0x18000BEFA: LdrFindResource_U
0x180021830: "unsigned long * AVrfpFaultExclusionClass" ?AVrfpFaultExclusionClass@@3PAKA
0x180001A30: HandleToULong
0x18000C070: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000D398: "__cdecl _imp_RtlApplicationVerifierStop" __imp_RtlApplicationVerifierStop
0x180004830: ?dismiss@?$OnDeleteIf@PEAXP6AXPEAX@Z$1?VfCoreFree@@YAX0@Z@@QEAAX_N@Z
0x180017B80: "unsigned long ViCoreAllDelayLoadDllInitialized" ?ViCoreAllDelayLoadDllInitialized@@3KA
0x180011E10: "struct _PageHeapPropertyMap VfHeapPropertyMap_UseRandomDecision" ?VfHeapPropertyMap_UseRandomDecision@@3U_PageHeapPropertyMap@@A
0x180009CE8: "long __cdecl ViCoreFindAllDelayLoadedDlls(struct _LDR_DATA_TABLE_ENTRY * __ptr64)" ?ViCoreFindAllDelayLoadedDlls@@YAJPEAU_LDR_DATA_TABLE_ENTRY@@@Z
0x18000D6E8: "RtlAllocateHeap" ??_C@_0BA@HKDEHBAO@RtlAllocateHeap?$AA@
0x18000BEB2: RtlCaptureStackBackTrace
0x18000AC94: "unsigned long __cdecl AVrfpIsAddressInTargetRange(unsigned __int64,unsigned long)" ?AVrfpIsAddressInTargetRange@@YAK_KK@Z
0x180004DB4: "long __cdecl VfCoreWriteLogEntryLoadModule(struct _LDR_DATA_TABLE_ENTRY const * __ptr64,unsigned long)" ?VfCoreWriteLogEntryLoadModule@@YAJPEBU_LDR_DATA_TABLE_ENTRY@@K@Z
0x18000D3A0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000BF60: NtDelayExecution
0x18000BE7C: "__cdecl wcsnicmp" _wcsnicmp
0x18000B7FC: AVrfCreateTrackers
0x180008EF4: "void __cdecl VfCorePropagateSettings(void * __ptr64)" ?VfCorePropagateSettings@@YAXPEAX@Z
0x1800053F0: "unsigned long __cdecl VfCoreIsCurrentStopDisabled(void)" ?VfCoreIsCurrentStopDisabled@@YAKXZ
0x18000A37C: "long __cdecl VfCoreRollBackSnapDllImports(struct _LDR_DATA_TABLE_ENTRY * __ptr64)" ?VfCoreRollBackSnapDllImports@@YAJPEAU_LDR_DATA_TABLE_ENTRY@@@Z
0x18000BF84: NtQueryKey
0x18000D830: "AutoClr" ??_C@_1BA@ODCMIJKH@?$AAA?$AAu?$AAt?$AAo?$AAC?$AAl?$AAr?$AA?$AA@
0x18000BF1E: RtlFindClearBitsAndSet
0x18000AD84: "void __cdecl AVrfpLogFaultTrace(void)" ?AVrfpLogFaultTrace@@YAXXZ
0x18000E8E0: "TlsSetValue" ??_C@_0M@HCNBINCG@TlsSetValue?$AA@
0x18000E870: "VfUnregisterBaseLayers" ??_C@_0BH@NNOEKMGD@VfUnregisterBaseLayers?$AA@
0x18000BEDC: NtSetValueKey
0x18000D1B0: "unsigned long AVrfpFaultTraceSize" ?AVrfpFaultTraceSize@@3KA
0x18000D6C8: "LdrGetProcedureAddressForCaller" ??_C@_0CA@KLODKFOL@LdrGetProcedureAddressForCaller?$AA@
0x180006478: "long __cdecl ViCoreCheckStopCodeRangeForClashes(struct _AVRF_LAYER_DESCRIPTOR * __ptr64)" ?ViCoreCheckStopCodeRangeForClashes@@YAJPEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x18000D8D0: "_DllMain" ??_C@_08LFGLPKEJ@_DllMain?$AA@
0x180011508: "unsigned long VfHeapsPropertyStackTraces" ?VfHeapsPropertyStackTraces@@3KA
0x180011DF0: "struct _PageHeapPropertyMap VfHeapPropertyMap_Full" ?VfHeapPropertyMap_Full@@3U_PageHeapPropertyMap@@A
0x1800054AC: "long __cdecl VfCoreInitializeVerifierStops(void)" ?VfCoreInitializeVerifierStops@@YAJXZ
0x18000D308: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x18000D2D0: "__cdecl _imp_NtQueryVirtualMemory" __imp_NtQueryVirtualMemory
0x180011DE0: "struct _PageHeapPropertyMap VfHeapPropertyMap_NoLock" ?VfHeapPropertyMap_NoLock@@3U_PageHeapPropertyMap@@A
0x1800118D0: "struct _PageHeapPropertyMap VfHeapPropertyMap_Protect" ?VfHeapPropertyMap_Protect@@3U_PageHeapPropertyMap@@A
0x180021C40: "unsigned __int64 * AVrfpFaultTargetEnd" ?AVrfpFaultTargetEnd@@3PA_KA
0x180017730: "unsigned long VfHeapsPropertyBackward" ?VfHeapsPropertyBackward@@3KA
0x1800062F0: VerifierRegisterLayer
0x18000BEAC: RtlInitUnicodeString
0x18000DFB8: " AVRF:bogus string length, overf" ??_C@_0CF@ICHJGKL@?6AVRF?3bogus?5string?5length?0?5overf@
0x18000EA40: "AVRF: hooked dll entry point for" ??_C@_0CL@JBMNBDPD@AVRF?3?5hooked?5dll?5entry?5point?5for@
0x18000BE76: LdrFindEntryForAddress
0x18001772C: "unsigned long VfComPropertySecuritySettingValidation" ?VfComPropertySecuritySettingValidation@@3KA
0x18000ECB0: "AVRF: Snapped (%ws: %s) with (%w" ??_C@_0CK@LBPEBLAA@AVRF?3?5Snapped?5?$CI?$CFws?3?5?$CFs?$CJ?5with?5?$CI?$CFw@
0x18000D438: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x18000D3E0: "__cdecl _imp_RtlReleasePebLock" __imp_RtlReleasePebLock
0x180015EE0: "unsigned short * __ptr64 __ptr64 VfCoreStringFormatMessageFailed" ?VfCoreStringFormatMessageFailed@@3PEAGEA
0x18000E0D4: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x18000BEA6: "__cdecl vsnprintf" _vsnprintf
0x180006460: "long __cdecl VfCoreUninitializeLayersSupport(void)" ?VfCoreUninitializeLayersSupport@@YAJXZ
0x18000EBF0: "AVRF: Provider (%p - %p) " ??_C@_0BL@BJCGDIBC@AVRF?3?5Provider?5?$CI?$CFp?5?9?5?$CFp?$CJ?5?6?$AA@
0x180014DD0: "unsigned long PointOfFailureIndex" ?PointOfFailureIndex@@3KA
0x18000EBC8: "AVRF: cretae delay load dll node" ??_C@_0CI@NNHPHFPP@AVRF?3?5cretae?5delay?5load?5dll?5node@
0x18000BED0: "__cdecl stricmp" _stricmp
0x18000BED6: RtlLeaveCriticalSection
0x18000B890: AVrfDestroyTracker
0x180017BA8: "struct _RTL_CRITICAL_SECTION DllLoadListLock" ?DllLoadListLock@@3U_RTL_CRITICAL_SECTION@@A
0x18000E978: "TTDWriter.dll" ??_C@_1BM@NILBJFFL@?$AAT?$AAT?$AAD?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000DF38: "AVRF: Failed to convert to an NT" ??_C@_0DO@GDEPEDPL@AVRF?3?5Failed?5to?5convert?5to?5an?5NT@
0x1800115BC: "unsigned long VfHeapsPropertyAddressEnd" ?VfHeapsPropertyAddressEnd@@3KA
0x18000D350: "__cdecl _imp_NtDeleteValueKey" __imp_NtDeleteValueKey
0x18000E908: "smartcpu.dll" ??_C@_1BK@HOPEDOIE@?$AAs?$AAm?$AAa?$AAr?$AAt?$AAc?$AAp?$AAu?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180015E88: "unsigned long * ViCoreStackTraceStatistics" ?ViCoreStackTraceStatistics@@3PAKA
0x180011390: "struct _STRING VfCoreCallerAwareNtdllGPAName" ?VfCoreCallerAwareNtdllGPAName@@3U_STRING@@A
0x180015E9C: "unsigned long ViCoreLoggingFileCreated" ?ViCoreLoggingFileCreated@@3KA
0x18000A184: "void __cdecl ViCoreDumpVerifierProvider(void)" ?ViCoreDumpVerifierProvider@@YAXXZ
0x18000D4F0: "__cdecl _imp_RtlRandom" __imp_RtlRandom
0x180015F80: "struct _RTL_CRITICAL_SECTION AVrfpStopDataLock" ?AVrfpStopDataLock@@3U_RTL_CRITICAL_SECTION@@A
0x180014E74: "unsigned long VfCorePropExceptionOnStop" ?VfCorePropExceptionOnStop@@3KA
0x18000B878: AVrfDestroyTrackers
0x18000EAF0: "AVRF: Failed to resnap provider " ??_C@_0CH@CKPBEIDF@AVRF?3?5Failed?5to?5resnap?5provider?5@
0x18000E058: "VfCoreRegisterBreaks" ??_C@_0BF@NPMBNGKA@VfCoreRegisterBreaks?$AA@
0x180011D50: "struct _PageHeapPropertyMap VfHeapPropertyMap_CollectTraces" ?VfHeapPropertyMap_CollectTraces@@3U_PageHeapPropertyMap@@A
0x180011790: "struct _PageHeapPropertyMap VfHeapPropertyMap_Dlls" ?VfHeapPropertyMap_Dlls@@3U_PageHeapPropertyMap@@A
0x18000D010: RtlNtPathSeperatorString
0x1800113A0: "struct _AVRF_LAYER_DESCRIPTOR VfCoreLayerDescriptor" ?VfCoreLayerDescriptor@@3U_AVRF_LAYER_DESCRIPTOR@@A
0x180001030: DllMain
0x18000E1C0: "AVRF: VfCoreFindMostRecentThunk " ??_C@_0DO@INLGEGEB@AVRF?3?5VfCoreFindMostRecentThunk?5@
0x180014DD8: "void * __ptr64 __ptr64 VfCoreVerifierDotDllBase" ?VfCoreVerifierDotDllBase@@3PEAXEA
0x18000D8A0: "onecore\base\avrf\avrf30\vrfcore" ??_C@_0CN@OAJNKPC@onecore?2base?2avrf?2avrf30?2vrfcore@
0x180007D3C: "public: __cdecl ResourceString::ResourceString(unsigned short * __ptr64,unsigned short * __ptr64,bool) __ptr64" ??0ResourceString@@QEAA@PEAG0_N@Z
0x18000C0CC: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18000D328: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000D310: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180015EE8: "struct _LIST_ENTRY AVrfpTlsListHead" ?AVrfpTlsListHead@@3U_LIST_ENTRY@@A
0x18000D508: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180014DD4: "unsigned long VfCorePropPropagate" ?VfCorePropPropagate@@3KA
0x18000E8F0: "SHSMP.DLL" ??_C@_1BE@FJNDIPDB@?$AAS?$AAH?$AAS?$AAM?$AAP?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180001790: "void * __ptr64 __cdecl AVrfAPILookupCallback(void * __ptr64,void * __ptr64,void * __ptr64,enum _RTL_VERIFIER_REDIRECT_TYPE)" ?AVrfAPILookupCallback@@YAPEAXPEAX00W4_RTL_VERIFIER_REDIRECT_TYPE@@@Z
0x18000BFD2: NtResumeThread
0x18000BF42: RtlFreeUnicodeString
0x18000E8B8: "TlsAlloc" ??_C@_08IIOBDLCO@TlsAlloc?$AA@
0x18000C050: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180009FA8: "long __cdecl VfCoreProviderInitialize(void)" ?VfCoreProviderInitialize@@YAJXZ
0x180017B70: "void * __ptr64 __ptr64 VrfSmartCpuBase" ?VrfSmartCpuBase@@3PEAXEA
0x18000D3F8: "__cdecl _imp_NtFreeVirtualMemory" __imp_NtFreeVirtualMemory
0x1800056DC: "unsigned long __cdecl VfCoreLoggingDisabled(void)" ?VfCoreLoggingDisabled@@YAKXZ
0x18000DC18: "Corrupted TLS structure" ??_C@_0BI@EDMFCKAL@Corrupted?5TLS?5structure?$AA@
0x180015E98: "unsigned long AVrfpRaiseVerifierStopException" ?AVrfpRaiseVerifierStopException@@3KA
0x180001000: "void __cdecl VfCoreLoaderEnumerationCallback(struct _LDR_DATA_TABLE_ENTRY const * __ptr64,void * __ptr64,unsigned char * __ptr64)" ?VfCoreLoaderEnumerationCallback@@YAXPEBU_LDR_DATA_TABLE_ENTRY@@PEAXPEAE@Z
0x18000BFD8: RtlCompareUnicodeString
0x18000BF2A: LdrAccessResource
0x18000E928: "TTDRecordCPU.dll" ??_C@_1CC@OEHGBOCN@?$AAT?$AAT?$AAD?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AAC?$AAP?$AAU?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000BF7E: NtWaitForSingleObject
0x18000E0D8: "0x%X" ??_C@_19FCOLCMFM@?$AA0?$AAx?$AA?$CF?$AAX?$AA?$AA@
0x180005E34: ??1?$OnDelete@PEAXP6AXPEAX@Z$1?VfCoreFree@@YAX0@Z@@QEAA@XZ
0x18000BF4E: RtlCopyUnicodeString
0x180001DA4: "long __cdecl ULongLongAdd(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?ULongLongAdd@@YAJ_K0PEA_K@Z
0x18000D3A8: "__cdecl _imp_LdrFindResource_U" __imp_LdrFindResource_U
0x18000ED10: "AVRF:FINJ: invalid fault injecti" ??_C@_0CO@CPEDCAHI@AVRF?3FINJ?3?5invalid?5fault?5injecti@
0x18000ADE0: VerifierRegisterFaultInjectProvider
0x18000D2F0: "__cdecl _imp_LdrEnumerateLoadedModules" __imp_LdrEnumerateLoadedModules
0x18000BF06: RtlAcquirePebLock
0x180017BD4: "unsigned long AVrfpDebug" ?AVrfpDebug@@3KA
0x18000D020: RtlAlternateDosPathSeperatorString
0x180011D70: "struct _PageHeapPropertyMap VfHeapPropertyMap_NDelayFreeSize" ?VfHeapPropertyMap_NDelayFreeSize@@3U_PageHeapPropertyMap@@A
0x180015EA0: "char * __ptr64 __ptr64 VfCoreAnsiStringTerminatingProcess" ?VfCoreAnsiStringTerminatingProcess@@3PEADEA
0x18000BEE8: NtQueryValueKey
0x18000B070: VerifierSuspendFaultInjection
0x180011DA0: "struct _PageHeapPropertyMap VfHeapPropertyMap_Size" ?VfHeapPropertyMap_Size@@3U_PageHeapPropertyMap@@A
0x18000AE70: VerifierShouldFaultInject
0x18000EB68: "delayloaded dll %s for %ws. " ??_C@_0BN@IFOEKGDB@delayloaded?5dll?5?$CFs?5for?5?$CFws?4?6?$AA@
0x18000C040: "__cdecl guard_rf_checks_enforced" _guard_rf_checks_enforced
0x1800046A8: AvrfpThreadAttach
0x18000379C: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1800038A8: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x18000DC70: "AVRF: failed to open verifier lo" ??_C@_0DI@DMMAOGCK@AVRF?3?5failed?5to?5open?5verifier?5lo@
0x18000D3C8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18000E5C8: "ForceDllUnload" ??_C@_1BO@IIDGPKDA@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAD?$AAl?$AAl?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x18000DC08: "TEB address" ??_C@_0M@CJGEHFEN@TEB?5address?$AA@
0x18000DEF0: "AVRF: Created logging directory " ??_C@_0CG@JDJDMNPC@AVRF?3?5Created?5logging?5directory?5@
0x18000D6A0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000E080: "GlobalFlag" ??_C@_1BG@OGBFMEDC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x180003A74: "long __cdecl VfCoreGetProviderImageName(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?VfCoreGetProviderImageName@@YAJPEAUHINSTANCE__@@PEAPEAG@Z
0x18000566C: "void * __ptr64 __cdecl AVrfpAllocateStorage(struct _AVRF_STORAGE * __ptr64,unsigned __int64)" ?AVrfpAllocateStorage@@YAPEAXPEAU_AVRF_STORAGE@@_K@Z
0x18000D410: "__cdecl _imp_RtlDosPathNameToNtPathName_U" __imp_RtlDosPathNameToNtPathName_U
0x180017744: "unsigned long VfHeapsPropertyFaults" ?VfHeapsPropertyFaults@@3KA
0x1800110BC: "unsigned long AVrfpAutomaticallyDisableStops" ?AVrfpAutomaticallyDisableStops@@3KA
0x180011E00: "struct _PageHeapPropertyMap VfHeapPropertyMap_LFHGuardPagesShrinkingReAlloc" ?VfHeapPropertyMap_LFHGuardPagesShrinkingReAlloc@@3U_PageHeapPropertyMap@@A
0x180019324: "unsigned long AVrfpFaultSeed" ?AVrfpFaultSeed@@3KA
0x1800110B4: "unsigned long ViCoreRecursionTlsIndex" ?ViCoreRecursionTlsIndex@@3KA
0x18000DB00: "VerifierIsAddressInAnyPageHeap" ??_C@_0BP@OIJHNFG@VerifierIsAddressInAnyPageHeap?$AA@
0x18000E550: "Heaps" ??_C@_1M@OLGCJFDM@?$AAH?$AAe?$AAa?$AAp?$AAs?$AA?$AA@
0x18000DA48: "Stop-%08X-Flavor" ??_C@_1CC@FFBOFIFG@?$AAS?$AAt?$AAo?$AAp?$AA?9?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AAF?$AAl?$AAa?$AAv?$AAo?$AAr?$AA?$AA@
0x180004AEC: "long __cdecl SizeTAdd(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SizeTAdd@@YAJ_K0PEA_K@Z
0x18000E7F8: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x18000E6D0: "COM" ??_C@_17KKLPNNMB@?$AAC?$AAO?$AAM?$AA?$AA@
0x18000B834: AVrfCreateTracker
0x180015EF8: "unsigned short * __ptr64 __ptr64 VfCoreStringStopMessage" ?VfCoreStringStopMessage@@3PEAGEA
0x18000EAC8: "AVRF: dll entry @ %p (%ws, %x) " ??_C@_0CB@OELAPCEJ@AVRF?3?5dll?5entry?5?$EA?5?$CFp?5?$CI?$CFws?0?5?$CFx?$CJ?5?6@
0x180001A34: NtCurrentTeb
0x18000BEC4: NtClose
0x18000D1A0: "struct _PageHeapPropertyMap VfHeapPropertyMap_Decommit" ?VfHeapPropertyMap_Decommit@@3U_PageHeapPropertyMap@@A
0x180011E28: "unsigned long AVrfpFaultTargetMaximumIndex" ?AVrfpFaultTargetMaximumIndex@@3KA
0x18000E738: "DirtyStacks" ??_C@_1BI@DNFBBNPM@?$AAD?$AAi?$AAr?$AAt?$AAy?$AAS?$AAt?$AAa?$AAc?$AAk?$AAs?$AA?$AA@
0x18000BFBA: wcsrchr
0x18000BE6A: LdrLoadDll
0x1800056CC: "void __cdecl AVrfpDeleteLastAllocatedStorage(struct _AVRF_STORAGE * __ptr64,unsigned __int64)" ?AVrfpDeleteLastAllocatedStorage@@YAXPEAU_AVRF_STORAGE@@_K@Z
0x18000E438: "PageHeapFaultProbability" ??_C@_1DC@CIMBGPPM@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAa?$AAu?$AAl?$AAt?$AAP?$AAr?$AAo?$AAb?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x18000BC84: "__cdecl _report_securityfailureEx" __report_securityfailureEx
0x18000E5C0: "RPC" ??_C@_17IPBCLAJ@?$AAR?$AAP?$AAC?$AA?$AA@
0x1800174B0: "unsigned short * ViCoreLoggingDirectory" ?ViCoreLoggingDirectory@@3PAGA
0x180015F00: "struct _AVRF_TLS_STRUCT AVrfpFirstThreadTlsStruct" ?AVrfpFirstThreadTlsStruct@@3U_AVRF_TLS_STRUCT@@A
0x180008CA0: "long __cdecl VfCoreGetPropertyValueByName(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?VfCoreGetPropertyValueByName@@YAJPEBG0PEAXPEAK@Z
0x180011000: "struct _RTL_VERIFIER_DLL_DESCRIPTOR * VfCoreHooks" ?VfCoreHooks@@3PAU_RTL_VERIFIER_DLL_DESCRIPTOR@@A
0x18000EAA0: "AVRF: Failed to snap provider's " ??_C@_0CG@EINNLPCF@AVRF?3?5Failed?5to?5snap?5provider?8s?5@
0x18000BA20: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x180019330: "void * __ptr64 (*)[32] AVrfpFaultTrace" ?AVrfpFaultTrace@@3PAY0CA@PEAXA
0x180015ED0: "unsigned short * __ptr64 __ptr64 VfCoreStringTerminateProcessFailed" ?VfCoreStringTerminateProcessFailed@@3PEAGEA
0x180001BD0: "long __cdecl StringCbLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCbLengthW@@YAJPEBG_KPEA_K@Z
0x18000A96C: "long __cdecl VfCoreAdjustAllProviderDllsImports(void)" ?VfCoreAdjustAllProviderDllsImports@@YAJXZ
0x180014E80: "char * ViDbgOutputBuffer" ?ViDbgOutputBuffer@@3PADA
0x18000EA70: "AVRF: Failed to roll back all th" ??_C@_0CN@ENBDNOMG@AVRF?3?5Failed?5to?5roll?5back?5all?5th@
0x180004684: AVrfpSetVerifierTlsValue
0x18000BF0C: RtlUnicodeStringToAnsiString
0x18000D440: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x18000D540: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000C008: RtlLookupFunctionEntry
0x180003470: VerifierHandleVerifierStopException
0x180003B18: "long __cdecl VfCoreModuleInfo(void * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64)" ?VfCoreModuleInfo@@YAJPEAPEAXPEAKPEAG@Z
0x180015E94: "unsigned long AVrfpHandleVerifierStopException" ?AVrfpHandleVerifierStopException@@3KA
0x180004F20: "unsigned short * __ptr64 __cdecl ViCoreGetProcessImageName(void)" ?ViCoreGetProcessImageName@@YAPEAGXZ
0x18000E630: "EventRemoveCheck" ??_C@_1CC@NDMBCKNP@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x180012520: VfProviderHeapsBreakDescriptors
0x180011160: "struct _AVRF_PROPERTY_DESCRIPTOR * VfProviderPropertyDescriptor" ?VfProviderPropertyDescriptor@@3PAU_AVRF_PROPERTY_DESCRIPTOR@@A
0x180017750: "unsigned short * VfHeapsPropertyTargetDlls" ?VfHeapsPropertyTargetDlls@@3PAGA
0x180002870: VerifierCloseLayerProperties
0x18000BE82: NtTerminateProcess
0x18000D950: "AVRF: NtQueryVirtualMemory faile" ??_C@_0DD@LBMFPDPI@AVRF?3?5NtQueryVirtualMemory?5faile@
0x18000D758: "CreateProcessW" ??_C@_0P@MFBJEBCN@CreateProcessW?$AA@
0x18000DCA8: "AVRF: Wait for pending write I/O" ??_C@_0DM@PAJINOPH@AVRF?3?5Wait?5for?5pending?5write?5I?1O@
0x180006320: VerifierUnregisterLayer
0x18000D7F8: "verifier.dll" ??_C@_1BK@GKAGNDBG@?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014E38: "unsigned __int64 * PointOfFailureError" ?PointOfFailureError@@3PA_KA
0x18000DA20: "Stop-%08X-Severity" ??_C@_1CG@FJFHKILH@?$AAS?$AAt?$AAo?$AAp?$AA?9?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AAS?$AAe?$AAv?$AAe?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x180015FA8: "unsigned __int64 AVrfOriginalStopCode" ?AVrfOriginalStopCode@@3_KA
0x18000B610: VerifierSetAPIClassName
0x18000BA60: NtGetTickCount
0x180017B98: "struct _LIST_ENTRY DllLoadListHead" ?DllLoadListHead@@3U_LIST_ENTRY@@A
0x180017D18: "int AVrfpFaultInjectReady" ?AVrfpFaultInjectReady@@3HA
0x180007130: VerifierDisableLayer
0x180011930: "struct _AVRF_PROPERTY_DESCRIPTOR * VfHeapPropertyDescriptor" ?VfHeapPropertyDescriptor@@3PAU_AVRF_PROPERTY_DESCRIPTOR@@A
0x180014E58: "unsigned long VfCorePropAutoClr" ?VfCorePropAutoClr@@3KA
0x18000DDA8: "VERIFIER_LOG_PATH" ??_C@_1CE@CPCPPMDD@?$AAV?$AAE?$AAR?$AAI?$AAF?$AAI?$AAE?$AAR?$AA_?$AAL?$AAO?$AAG?$AA_?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x180011DC0: "struct _PageHeapPropertyMap VfHeapPropertyMap_AddressStart" ?VfHeapPropertyMap_AddressStart@@3U_PageHeapPropertyMap@@A
0x18000D818: "Propagate" ??_C@_1BE@LEKKBONP@?$AAP?$AAr?$AAo?$AAp?$AAa?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x180017278: "struct _RTL_CRITICAL_SECTION ViCoreLayersLock" ?ViCoreLayersLock@@3U_RTL_CRITICAL_SECTION@@A
0x180008064: "void __cdecl VfCoreRedirectOldStopFunctions(void)" ?VfCoreRedirectOldStopFunctions@@YAXXZ
0x180011458: "unsigned long VfComPropertyRemoveQueryValidation" ?VfComPropertyRemoveQueryValidation@@3KA
0x180014DC4: "unsigned long VfCoreVerifierDotDllSizeOfImage" ?VfCoreVerifierDotDllSizeOfImage@@3KA
0x180008318: "enum _AVRF_STATUS __cdecl VfResetHeapRegistryValues(void * __ptr64,unsigned long,unsigned long)" ?VfResetHeapRegistryValues@@YA?AW4_AVRF_STATUS@@PEAXKK@Z
0x180003380: VerifierLdrGetProcedureAddress
0x180014E70: "unsigned long VfOSBuildNumer" ?VfOSBuildNumer@@3KA
0x18001150C: "unsigned long VfHeapsPropertyFullPageHeap" ?VfHeapsPropertyFullPageHeap@@3KA
0x18000E4D8: "DelayFreeSizeMB" ??_C@_1CA@DGLDGGCL@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAF?$AAr?$AAe?$AAe?$AAS?$AAi?$AAz?$AAe?$AAM?$AAB?$AA?$AA@
0x18000E7E8: "SRWLock" ??_C@_1BA@JDFJCMEA@?$AAS?$AAR?$AAW?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x180011E30: VfProviderCoreBreakDescriptors
0x18000E024: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180005754: "long __cdecl VfCoreRegisterBreaks(struct HINSTANCE__ * __ptr64,struct _AVRF_LAYER_DESCRIPTOR * __ptr64)" ?VfCoreRegisterBreaks@@YAJPEAUHINSTANCE__@@PEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x180014DF4: "unsigned long VfCoreInitialized" ?VfCoreInitialized@@3KA
0x18000D2E8: "__cdecl _imp_LdrLoadDll" __imp_LdrLoadDll
0x18000D460: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x1800018B0: "long __cdecl VfCoreGetProviderDescriptor4VerifierDotDll(void)" ?VfCoreGetProviderDescriptor4VerifierDotDll@@YAJXZ
0x18000BBE8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000A040: VerifierRegisterProvider
0x180008764: "enum _AVRF_STATUS __cdecl VfHeapSetLayerProperty(void * __ptr64,struct _AVRF_PROPERTY_DESCRIPTOR * __ptr64)" ?VfHeapSetLayerProperty@@YA?AW4_AVRF_STATUS@@PEAXPEAU_AVRF_PROPERTY_DESCRIPTOR@@@Z
0x180003080: VerifierAreStaticDllsInitialized
0x18000BF36: NtFreeVirtualMemory
0x1800077A0: VerifierDisableVerifier
0x18000D3D8: "__cdecl _imp_RtlFindClearBitsAndSet" __imp_RtlFindClearBitsAndSet
0x18000B6B0: "void * __ptr64 __cdecl VfCoreRtlAllocateHeap(void * __ptr64,unsigned long,unsigned __int64)" ?VfCoreRtlAllocateHeap@@YAPEAXPEAXK_K@Z
0x18000D4C8: "__cdecl _imp_NtResumeThread" __imp_NtResumeThread
0x18000D9E8: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x1800110B0: "unsigned long VfCorePropLoggingOnLock" ?VfCorePropLoggingOnLock@@3KA
0x180015ED8: "char * __ptr64 __ptr64 VfCoreAnsiStringStopNotContinuable" ?VfCoreAnsiStringStopNotContinuable@@3PEADEA
0x180005154: "long __cdecl ViCoreCreateLoggingFile(unsigned short * __ptr64,unsigned short * __ptr64,unsigned __int64,struct _UNICODE_STRING * __ptr64)" ?ViCoreCreateLoggingFile@@YAJPEAG0_KPEAU_UNICODE_STRING@@@Z
0x180017BE8: "unsigned long AVrfpVirtualProtectFailures" ?AVrfpVirtualProtectFailures@@3KA
0x18000D4D0: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x18000D390: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x180011300: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * VfCoreKernel32Hooks" ?VfCoreKernel32Hooks@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x18000D338: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x1800028DC: "enum _AVRF_STATUS __cdecl ViCoreQueryLayerProperty(void * __ptr64,struct _AVRF_PROPERTY_DESCRIPTOR * __ptr64)" ?ViCoreQueryLayerProperty@@YA?AW4_AVRF_STATUS@@PEAXPEAU_AVRF_PROPERTY_DESCRIPTOR@@@Z
0x18000E388: "PageHeapSizeRangeEnd" ??_C@_1CK@KHBAODFH@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAS?$AAi?$AAz?$AAe?$AAR?$AAa?$AAn?$AAg?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x18000BA00: "__cdecl _security_check_cookie" __security_check_cookie
0x1800033F0: VerifierIsInsideVerifierStop
0x18000AAB0: "__int64 (__cdecl*__cdecl VfCoreGetProcAddress(struct HINSTANCE__ * __ptr64,char const * __ptr64))(void)" ?VfCoreGetProcAddress@@YAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x18000DE78: "AVRF: Failed to translate file n" ??_C@_0DE@FHPLEMKJ@AVRF?3?5Failed?5to?5translate?5file?5n@
0x18000BFCC: RtlCompareMemory
0x18000D0DC: "unsigned long AVrfpFaultNumberOfTraces" ?AVrfpFaultNumberOfTraces@@3KA
0x180011D90: "struct _PageHeapPropertyMap VfHeapPropertyMap_Address" ?VfHeapPropertyMap_Address@@3U_PageHeapPropertyMap@@A
0x180003050: VerifierGetLoggingDirectory
0x180003118: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * __ptr64 __cdecl ViCoreFindMostRecentThunkForSameAPI(struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR * __ptr64,struct _RTL_VERIFIER_DLL_DESCRIPTOR * __ptr64,struct _RTL_VERIFIER_THUNK_DESCRIPTOR * __ptr64)" ?ViCoreFindMostRecentThunkForSameAPI@@YAPEAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@PEAU_RTL_VERIFIER_PROVIDER_DESCRIPTOR@@PEAU_RTL_VERIFIER_DLL_DESCRIPTOR@@PEAU1@@Z
0x18000EC10: "AVRF: Unable to unprotect IAT to" ??_C@_0DP@BBOMPDBB@AVRF?3?5Unable?5to?5unprotect?5IAT?5to@
0x180011670: "struct _ViCoreLayerBit * ViCoreLayerBitArray" ?ViCoreLayerBitArray@@3PAU_ViCoreLayerBit@@A
0x18000B1F0: VerifierDisableFaultInjectionTargetRange
0x18000E070: "%ws-%ws" ??_C@_1BA@MGMMIOBJ@?$AA?$CF?$AAw?$AAs?$AA?9?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000E8D0: "TlsGetValue" ??_C@_0M@IDPNJOFL@TlsGetValue?$AA@
0x18000947C: "unsigned long __cdecl ViInitDelayLoad(void)" ?ViInitDelayLoad@@YAKXZ
0x18000BE5E: RtlDllShutdownInProgress
0x180006634: "enum _AVRF_STATUS __cdecl VfCoreOpenVerifierLayerKey(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long)" ?VfCoreOpenVerifierLayerKey@@YA?AW4_AVRF_STATUS@@PEBG00KPEAPEAXK@Z
0x180015F60: "char * __ptr64 __ptr64 VfCoreAnsiStringStopContinuable" ?VfCoreAnsiStringStopContinuable@@3PEADEA
0x1800118F0: "struct _PageHeapPropertyMap VfHeapPropertyMap_RandomRate" ?VfHeapPropertyMap_RandomRate@@3U_PageHeapPropertyMap@@A
0x180011080: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * VfCoreVerifierHooks" ?VfCoreVerifierHooks@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x18000BE94: NtQuerySystemTime
0x18000BA7C: ReadULong64NoFence
0x180017268: "struct _UNICODE_STRING ViCoreLoggingFileNtPath" ?ViCoreLoggingFileNtPath@@3U_UNICODE_STRING@@A
0x18000D490: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x180015F68: "unsigned short * __ptr64 __ptr64 VfCoreStringStopMessage2" ?VfCoreStringStopMessage2@@3PEAGEA
0x18000E358: "PageHeapSizeRangeStart" ??_C@_1CO@MGPALBKA@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAS?$AAi?$AAz?$AAe?$AAR?$AAa?$AAn?$AAg?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x18000BF00: LdrLockLoaderLock
0x180018320: "unsigned short (*)[32] AVrfpFaultAPIClassName" ?AVrfpFaultAPIClassName@@3PAY0CA@GA
0x18000373C: RtlFailFast
0x18000D7B8: "VerifierGetPropertyValueByName" ??_C@_0BP@FJHOIBK@VerifierGetPropertyValueByName?$AA@
0x180007D28: ??1?$OnDelete@PEAXP6AJPEAX@Z$1?NtClose@@YAJ0@Z@@QEAA@XZ
0x180002C90: VerifierSetLayerBreak
0x180002B10: VerifierQueryLayerBreak
0x18000E3B8: "PageHeapDllRangeStart" ??_C@_1CM@JOOPGANI@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAD?$AAl?$AAl?$AAR?$AAa?$AAn?$AAg?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x18000BEA0: LdrUnloadDll
0x18000BF72: DbgPrint
0x18001166C: "unsigned long VfHeapsPropertySizeEnd" ?VfHeapsPropertySizeEnd@@3KA
0x18000DA70: "AVRF: Duplicate hooking tables f" ??_C@_0EL@FFNOMJDK@AVRF?3?5Duplicate?5hooking?5tables?5f@
0x18000E950: "TTTraceWriter.dll" ??_C@_1CE@LJFBBPDK@?$AAT?$AAT?$AAT?$AAr?$AAa?$AAc?$AAe?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180009600: VerifierTlsGetValue
0x1800033B0: VerifierIsDllEntryActive
0x180019320: "unsigned long volatile AVrfpFaultOriginalSeed" ?AVrfpFaultOriginalSeed@@3KC
0x180014E5C: "unsigned long VfCoreShowDebugForScanVerifierDotDll" ?VfCoreShowDebugForScanVerifierDotDll@@3KA
0x180003498: "long __cdecl ViCoreReadVirtualMemory(void * __ptr64,void * __ptr64,void * __ptr64,unsigned __int64,char const * __ptr64)" ?ViCoreReadVirtualMemory@@YAJPEAX00_KPEBD@Z
0x180015E84: "unsigned long ViCoreProcessBeingTerminated" ?ViCoreProcessBeingTerminated@@3KA
0x18000DB40: "AVRF: Read just %Ix out of %Ix b" ??_C@_0DB@GBOCIEIG@AVRF?3?5Read?5just?5?$CFIx?5out?5of?5?$CFIx?5b@
0x180004844: PtrToUlong
0x18000D550: "__cdecl _guard_fids_table" __guard_fids_table
0x18000E098: "VerifierFlags" ??_C@_1BM@IADMEPHN@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x180002A20: VerifierQueryLayerProperty
0x180017B84: "unsigned long VfFirstDllProcessAttachCalled" ?VfFirstDllProcessAttachCalled@@3KA
0x180003BC0: "long __cdecl VfCoreCopyStringHelper(unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?VfCoreCopyStringHelper@@YAJPEAGKPEBGPEAPEAGPEAK@Z
0x180017710: "unsigned long VfHeapsPropertyUseRandom" ?VfHeapsPropertyUseRandom@@3KA
0x180022440: "unsigned long * AVrfpFaultTargetClass" ?AVrfpFaultTargetClass@@3PAKA
0x18000D1C0: "__cdecl load_config_used" _load_config_used
0x180001DD0: VerifierStopMessageEx
0x18000DAC0: "AVRF: Duplicate [%ws!%s] (@ %p)[" ??_C@_0DN@JEKJJMFM@AVRF?3?5Duplicate?5?$FL?$CFws?$CB?$CFs?$FN?5?$CI?$EA?5?$CFp?$CJ?$FL@
0x18000E658: "AggresiveMTATesting" ??_C@_1CI@KIHPGPCB@?$AAA?$AAg?$AAg?$AAr?$AAe?$AAs?$AAi?$AAv?$AAe?$AAM?$AAT?$AAA?$AAT?$AAe?$AAs?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180011DD0: "struct _PageHeapPropertyMap VfHeapPropertyMap_UnAlign" ?VfHeapPropertyMap_UnAlign@@3U_PageHeapPropertyMap@@A
0x18000E320: "VerifierStopMessage" ??_C@_0BE@PNJPOBOE@VerifierStopMessage?$AA@
0x18000EA00: "AVRF: low memory: will not verif" ??_C@_0DJ@OCNPCNGF@AVRF?3?5low?5memory?3?5will?5not?5verif@
0x180017BD0: "unsigned long ViCoreLastProviderDllInitialized" ?ViCoreLastProviderDllInitialized@@3KA
0x18000BFEA: RtlImageNtHeader
0x180005E78: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x18000D030: RtlDosPathSeperatorsString
0x18000BEE2: RtlRaiseException
0x180004838: ??0?$OnDeleteIf@PEAXP6AXPEAX@Z$1?VfCoreFree@@YAX0@Z@@QEAA@PEAX@Z
0x180017B68: "unsigned long (__cdecl* __ptr64 pfn_TlsAlloc)(void)" ?pfn_TlsAlloc@@3P6AKXZEA
0x18000BFE4: RtlImageDirectoryEntryToData
0x180017BEC: "int AVrfpFaultSeedSet" ?AVrfpFaultSeedSet@@3HA
0x18000D7A8: "GetProcAddress" ??_C@_0P@DGIDOA@GetProcAddress?$AA@
0x18000D2E0: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x18000BF12: RtlFreeHeap
0x180017BD8: "struct _LIST_ENTRY ProviderListHead" ?ProviderListHead@@3U_LIST_ENTRY@@A
0x18000D360: "__cdecl _imp_NtClose" __imp_NtClose
0x18000BFF6: NtQueryPerformanceCounter
0x18000BF30: RtlDeleteCriticalSection
0x180001A98: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000A28C: "long __cdecl VfCoreGetIAT(struct _LDR_DATA_TABLE_ENTRY * __ptr64,void * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?VfCoreGetIAT@@YAJPEAU_LDR_DATA_TABLE_ENTRY@@PEAPEAXPEA_K@Z
0x18000E470: "PageHeapFaultTimeOut" ??_C@_1CK@MJKJCGIC@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAa?$AAu?$AAl?$AAt?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x18000D510: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000D7D8: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180004874: RtlInitEmptyUnicodeString
0x18000E750: "DangerousAPIs" ??_C@_1BM@BCAFNPJE@?$AAD?$AAa?$AAn?$AAg?$AAe?$AAr?$AAo?$AAu?$AAs?$AAA?$AAP?$AAI?$AAs?$AA?$AA@
0x18000D2F8: "__cdecl _imp_LdrFindEntryForAddress" __imp_LdrFindEntryForAddress
0x18000EC78: "AVRF: internal error: New thunk " ??_C@_0DC@OBKHLHPO@AVRF?3?5internal?5error?3?5New?5thunk?5@
0x180007D34: ??0?$OnDelete@PEAXP6AJPEAX@Z$1?NtClose@@YAJ0@Z@@QEAA@PEAX@Z
0x18000D4D8: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x180008FA0: "int __cdecl VfCoreCreateProcessW(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfCoreCreateProcessW@@YAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180021430: "unsigned __int64 * AVrfpFaultTargetStart" ?AVrfpFaultTargetStart@@3PA_KA
0x18000E2B0: "AVRF: failed to revert protectio" ??_C@_0EM@JEPDCIIN@AVRF?3?5failed?5to?5revert?5protectio@
0x180009210: "int __cdecl VfCoreCreateProcessA(char const * __ptr64,char * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,char const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfCoreCreateProcessA@@YAHPEBDPEADPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x18000BF5A: RtlQueryEnvironmentVariable_U
0x18000D378: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x18000AAC0: "__int64 (__cdecl*__cdecl VfCoreGetProcAddress2(struct HINSTANCE__ * __ptr64,char const * __ptr64))(void)" ?VfCoreGetProcAddress2@@YAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x180002FA0: VerifierSetLayerProperty
0x18000E570: "{7CF16601-5646-4ecf-ACAF-D8B5872" ??_C@_1EO@CFHGMIGA@?$AA?$HL?$AA7?$AAC?$AAF?$AA1?$AA6?$AA6?$AA0?$AA1?$AA?9?$AA5?$AA6?$AA4?$AA6?$AA?9?$AA4?$AAe?$AAc?$AAf?$AA?9?$AAA?$AAC?$AAA?$AAF?$AA?9?$AAD?$AA8?$AAB?$AA5?$AA8?$AA7?$AA2@
0x18000DB88: "stop code" ??_C@_09KEMIEKBH@stop?5code?$AA@
0x18000D518: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000BEF4: RtlAllocateHeap
0x18000D6F8: "RtlReAllocateHeap" ??_C@_0BC@KCCBPNDF@RtlReAllocateHeap?$AA@
0x18000B720: "void * __ptr64 __cdecl VfCoreRtlReAllocateHeap(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64)" ?VfCoreRtlReAllocateHeap@@YAPEAXPEAXK0_K@Z
0x180007DE0: "void __cdecl VfCoreRedirectedStopMessage(unsigned __int64,char * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,char * __ptr64)" ?VfCoreRedirectedStopMessage@@YAX_KPEAD01010101@Z
0x18000DC30: "AVRF: verifier log file %ws kept" ??_C@_0EA@KNCBPIDM@AVRF?3?5verifier?5log?5file?5?$CFws?5kept@
0x180004D34: "long __cdecl VfCoreWriteLogHeader(void)" ?VfCoreWriteLogHeader@@YAJXZ
0x18000BF96: NtOpenKey
0x180003820: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x18000C020: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000D4A8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18000DDD0: "USERPROFILE" ??_C@_1BI@FAOJLPH@?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x180004574: AVrfpAllocateVerifierTlsSlot
0x180005E30: "long __cdecl VfCoreQueryBreaks(void * __ptr64,struct _AVRF_LAYER_DESCRIPTOR * __ptr64)" ?VfCoreQueryBreaks@@YAJPEAXPEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x180001840: "long __cdecl VfCoreLdrGetProcedureAddressEx(void * __ptr64,struct _STRING const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long)" ?VfCoreLdrGetProcedureAddressEx@@YAJPEAXPEBU_STRING@@KPEAPEAXK@Z
0x180015EC8: "char * __ptr64 __ptr64 VfCoreAnsiStringStopMessage" ?VfCoreAnsiStringStopMessage@@3PEADEA
0x180004E74: "long __cdecl VfCoreCreateLoggingDirectory(unsigned short * __ptr64,unsigned __int64)" ?VfCoreCreateLoggingDirectory@@YAJPEAG_K@Z
0x18000A820: "long __cdecl VfCoreResnapDllsForProvider(struct _AVRF_VERIFIER_PROVIDER_INFO * __ptr64)" ?VfCoreResnapDllsForProvider@@YAJPEAU_AVRF_VERIFIER_PROVIDER_INFO@@@Z
0x180017740: "unsigned long VfHeapsPropertyRandomRate" ?VfHeapsPropertyRandomRate@@3KA
0x18000DBE0: "Thread ID" ??_C@_09JILMPJKK@Thread?5ID?$AA@
0x18000D738: "LdrGetProcedureAddressEx" ??_C@_0BJ@CMPACLAN@LdrGetProcedureAddressEx?$AA@
0x18000BFAE: wcsstr
0x180004B08: "long __cdecl VfCoreCreateLogFile(void)" ?VfCoreCreateLogFile@@YAJXZ
0x18000E300: "VerifierRedirectStopFunctions" ??_C@_0BO@ENEOIIM@VerifierRedirectStopFunctions?$AA@
0x18000DF78: "AVRF: failed to create verifier " ??_C@_0DK@KIJADBHG@AVRF?3?5failed?5to?5create?5verifier?5@
0x18000BECA: RtlEnterCriticalSection
0x1800052DC: "void __cdecl VfCoreDisableCurrentStop(void)" ?VfCoreDisableCurrentStop@@YAXXZ
0x18000DE50: "\AppVerifierLogs" ??_C@_1CC@HCFKEDNJ@?$AA?2?$AAA?$AAp?$AAp?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAL?$AAo?$AAg?$AAs?$AA?$AA@
0x18000EB88: "AVRF: low memory: Failed to allo" ??_C@_0DO@PCFFFCHF@AVRF?3?5low?5memory?3?5Failed?5to?5allo@
0x18000BF9C: wcstoul
0x180017734: "unsigned long VfHeapsPropertyAddress" ?VfHeapsPropertyAddress@@3KA
0x18000D4E8: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18000DEB0: "AVRF: Failed to create logging d" ??_C@_0DK@LJMMAIMC@AVRF?3?5Failed?5to?5create?5logging?5d@
0x18000E7D8: "Leak" ??_C@_19CPHHHCIF@?$AAL?$AAe?$AAa?$AAk?$AA?$AA@
0x18000E3E8: "PageHeapDllRangeEnd" ??_C@_1CI@NMPLGDBI@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAD?$AAl?$AAl?$AAR?$AAa?$AAn?$AAg?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x18000E608: "SecuritySettings" ??_C@_1CC@MHLPDPPN@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18000D520: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x18000BFA2: RtlInitUnicodeStringEx
0x18000D538: ntdll_NULL_THUNK_DATA
0x18000D528: "__cdecl _imp_memcpy" __imp_memcpy
0x18000D6A4: "\/" ??_C@_15MNCACJLI@?$AA?2?$AA?1?$AA?$AA@
0x180008B70: "enum _AVRF_STATUS __cdecl VfRegisterBaseLayers(void)" ?VfRegisterBaseLayers@@YA?AW4_AVRF_STATUS@@XZ
0x18000AAF0: "long __cdecl AVrfpInitializeFaultInjectionSupport(void)" ?AVrfpInitializeFaultInjectionSupport@@YAJXZ
0x1800064FC: "enum _AVRF_STATUS __cdecl VfCoreOpenImageFileExecutionOptionsKey(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long)" ?VfCoreOpenImageFileExecutionOptionsKey@@YA?AW4_AVRF_STATUS@@PEBGKPEAPEAXK@Z
0x18000D330: "__cdecl _imp_LdrUnloadDll" __imp_LdrUnloadDll
0x1800172A0: "unsigned short * ViCoreLoggingFile" ?ViCoreLoggingFile@@3PAGA
0x18000D320: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180003420: VerifierConfigureStopOptions
0x18000374C: FatalListEntryError
0x18000BFFC: LdrDisableThreadCalloutsForDll
0x18000DBF0: "Expected TEB address" ??_C@_0BF@DPAPHKMN@Expected?5TEB?5address?$AA@
0x18000D4B8: "__cdecl _imp_NtProtectVirtualMemory" __imp_NtProtectVirtualMemory
0x18000D388: "__cdecl _imp_RtlRaiseException" __imp_RtlRaiseException
0x180014820: "__cdecl _security_cookie" __security_cookie
0x18000BF18: LdrUnlockLoaderLock
0x180011900: "struct _PageHeapPropertyMap VfHeapPropertyMap_LFHGuardPages" ?VfHeapPropertyMap_LFHGuardPages@@3U_PageHeapPropertyMap@@A
0x1800176C0: "struct _AVRF_VERIFIER_STOPS VerifierStops" ?VerifierStops@@3U_AVRF_VERIFIER_STOPS@@A
0x180015FE0: "unsigned char * AVrfpLogEntryMessageEx" ?AVrfpLogEntryMessageEx@@3PAEA
0x1800068C0: VerifierQueryRegisteredLayers
0x18000D8E0: "AVRF: Verifier Provider failed t" ??_C@_0GL@NGKFCOEG@AVRF?3?5Verifier?5Provider?5failed?5t@
0x18000BF78: RtlDoesFileExists_U
0x18000DF18: "%ws\%ws.%u.dat" ??_C@_1BO@EIMNJMGN@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?4?$AA?$CF?$AAu?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x18000D4C0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x18000678C: "enum _AVRF_STATUS __cdecl ViCoreInitPropertyDescriptor(struct _AVRF_LAYER_DESCRIPTOR * __ptr64)" ?ViCoreInitPropertyDescriptor@@YA?AW4_AVRF_STATUS@@PEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x18000E7A8: "Threadpool" ??_C@_1BG@BIODMGPP@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAp?$AAo?$AAo?$AAl?$AA?$AA@
0x180006090: VerifierGetAppCallerAddress
0x180011150: "struct _UNICODE_STRING VfCoreNtdllName" ?VfCoreNtdllName@@3U_UNICODE_STRING@@A
0x180006AC0: VerifierEnableLayer
0x18000D468: "__cdecl _imp_NtDeleteKey" __imp_NtDeleteKey
0x180008DA0: "enum _AVRF_STATUS __cdecl VfCorePropagateSettings(unsigned short * __ptr64)" ?VfCorePropagateSettings@@YA?AW4_AVRF_STATUS@@PEAG@Z
0x180007AA4: "long __cdecl ViCoreInitHooking4VerifierDll(struct _RTL_VERIFIER_THUNK_DESCRIPTOR * __ptr64)" ?ViCoreInitHooking4VerifierDll@@YAJPEAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@@Z
0x1800146A0: VfProviderRPCBreakDescriptors
0x180017B88: "struct _LIST_ENTRY DelayLoadedListHead" ?DelayLoadedListHead@@3U_LIST_ENTRY@@A
0x180011668: "unsigned long VfComPropertyAggressiveDllUnloadPeriod" ?VfComPropertyAggressiveDllUnloadPeriod@@3KA
0x18000BE4C: LdrGetProcedureAddress
0x18000D2C8: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x180009980: "void __cdecl VfCoreDllUnloadCallback(unsigned short * __ptr64,void * __ptr64,unsigned __int64,void * __ptr64)" ?VfCoreDllUnloadCallback@@YAXPEAGPEAX_K1@Z
0x180015E90: "unsigned long AVrfpDisableDbgPrintVerifierStop" ?AVrfpDisableDbgPrintVerifierStop@@3KA
0x18000D4F8: "__cdecl _imp_NtQueryPerformanceCounter" __imp_NtQueryPerformanceCounter
0x1800042B4: "long __cdecl VfCoreConvertStringToGuid(unsigned short * __ptr64,struct _GUID * __ptr64)" ?VfCoreConvertStringToGuid@@YAJPEAGPEAU_GUID@@@Z
0x180019328: "union _LARGE_INTEGER AVrfpFaultSuspendStartTime" ?AVrfpFaultSuspendStartTime@@3T_LARGE_INTEGER@@A
0x180014E60: "void * __ptr64 __ptr64 VfCoreDllBaseAddress" ?VfCoreDllBaseAddress@@3PEAXEA
0x18000D840: "{E5DCDFAA-3B35-46A8-B370-9D3575A" ??_C@_1EO@MKEFJJNG@?$AA?$HL?$AAE?$AA5?$AAD?$AAC?$AAD?$AAF?$AAA?$AAA?$AA?9?$AA3?$AAB?$AA3?$AA5?$AA?9?$AA4?$AA6?$AAA?$AA8?$AA?9?$AAB?$AA3?$AA7?$AA0?$AA?9?$AA9?$AAD?$AA3?$AA5?$AA7?$AA5?$AAA@
0x18000A1F0: "long __cdecl VfCoreRollbackSnapForAllLoadedDll(void)" ?VfCoreRollbackSnapForAllLoadedDll@@YAJXZ
0x180004B44: "long __cdecl VfCoreWriteLogEntry(void * __ptr64,unsigned long)" ?VfCoreWriteLogEntry@@YAJPEAXK@Z
0x18000E128: "AVRF: VfCoreFindMostRecentThunk " ??_C@_0DO@IDJJMMJF@AVRF?3?5VfCoreFindMostRecentThunk?5@
0x18000BEBE: NtReadVirtualMemory
0x1800112B0: "struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR VfCoreProvider" ?VfCoreProvider@@3U_RTL_VERIFIER_PROVIDER_DESCRIPTOR@@A
0x18000D420: "__cdecl _imp_NtAllocateVirtualMemory" __imp_NtAllocateVirtualMemory
0x18000D318: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000D448: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x18000377C: InsertHeadList
0x1800036B0: "long __cdecl VerifierGetInfoForException(void * __ptr64,void * __ptr64,struct _EXCEPTION_RECORD * __ptr64,unsigned char * __ptr64,unsigned __int64 * __ptr64)" ?VerifierGetInfoForException@@YAJPEAX0PEAU_EXCEPTION_RECORD@@PEAEPEA_K@Z
0x180003538: "long __cdecl ViCoreGetVerifierStopForException(void * __ptr64,void * __ptr64,struct _EXCEPTION_RECORD * __ptr64,unsigned __int64 * __ptr64)" ?ViCoreGetVerifierStopForException@@YAJPEAX0PEAU_EXCEPTION_RECORD@@PEA_K@Z
0x18000B0E0: VerifierEnableFaultInjectionTargetRange
0x180004F38: "long __cdecl ViCoreCreateLoggingDirectory(unsigned short * __ptr64,unsigned __int64)" ?ViCoreCreateLoggingDirectory@@YAJPEAG_K@Z
0x18000A150: "struct _AVRF_VERIFIER_PROVIDER_INFO * __ptr64 __cdecl ViCoreFindVerifierProviderDllInfo(void * __ptr64)" ?ViCoreFindVerifierProviderDllInfo@@YAPEAU_AVRF_VERIFIER_PROVIDER_INFO@@PEAX@Z
0x180011E20: "unsigned long AVrfpFaultExclusionMaximumIndex" ?AVrfpFaultExclusionMaximumIndex@@3KA
0x18000AA00: "void * __ptr64 __cdecl VfCoreFindOriginalThunkInHookChain(void * __ptr64)" ?VfCoreFindOriginalThunkInHookChain@@YAPEAXPEAX@Z
0x18000E780: "DeadLock" ??_C@_1BC@LPFFKGKC@?$AAD?$AAe?$AAa?$AAd?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x18000C028: "__cdecl guard_icall_checks_enforced" _guard_icall_checks_enforced
0x18000BD7C: "__cdecl _security_init_cookie" __security_init_cookie
0x180017728: "unsigned long VfHeapsPropertyProtect" ?VfHeapsPropertyProtect@@3KA
0x18000ECE0: "AVRF: fault injecting call made " ??_C@_0CK@ODBLAJKI@AVRF?3?5fault?5injecting?5call?5made?5@
0x18000B790: "unsigned char __cdecl VfCoreRtlFreeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?VfCoreRtlFreeHeap@@YAEPEAXK0@Z
0x180009A90: "unsigned char __cdecl VfCoreStandardDllEntryPointRoutine(void * __ptr64,unsigned long,struct _CONTEXT * __ptr64)" ?VfCoreStandardDllEntryPointRoutine@@YAEPEAXKPEAU_CONTEXT@@@Z
0x1800031B0: VerifierChainDuplicateHooks
0x18000DB78: "StopProcessing" ??_C@_0P@NKOPIEMP@StopProcessing?$AA@
0x180017B60: "void * __ptr64 (__cdecl* __ptr64 pfn_TlsGetValue)(unsigned long)" ?pfn_TlsGetValue@@3P6APEAXK@ZEA
0x18000EB20: "AVRF: Could not find the section" ??_C@_0EI@LJGMJJDC@AVRF?3?5Could?5not?5find?5the?5section@
0x180008250: "enum _AVRF_STATUS __cdecl ViSetPageHeapFlags(void * __ptr64,unsigned long)" ?ViSetPageHeapFlags@@YA?AW4_AVRF_STATUS@@PEAXK@Z
0x18000D470: "__cdecl _imp_memmove" __imp_memmove
0x180011460: "struct _AVRF_LAYER_DESCRIPTOR VfProviderHeapsLayerDescriptor" ?VfProviderHeapsLayerDescriptor@@3U_AVRF_LAYER_DESCRIPTOR@@A
0x18000B8D4: AVrfLogInTracker
0x18000BF3C: NtWriteFile
0x180009640: VerifierTlsSetValue
0x18000D478: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x18000BFA8: RtlInitAnsiString
0x18000E828: "onecore\base\avrf\avrf30\vrfcore" ??_C@_0CK@MHICELCI@onecore?2base?2avrf?2avrf30?2vrfcore@
0x18000B040: VerifierSetFaultInjectionSeed
0x18000C00E: RtlVirtualUnwind
0x180022640: "unsigned long * AVrfpFaultTargetHits" ?AVrfpFaultTargetHits@@3PAKA
0x180014E78: "struct HINSTANCE__ * __ptr64 __ptr64 VfCoreModuleHandle" ?VfCoreModuleHandle@@3PEAUHINSTANCE__@@EA
0x180009CE4: "unsigned long __cdecl VfCoreDllEntryPointExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64,struct _DLL_ENTRY_POINT_INFO * __ptr64)" ?VfCoreDllEntryPointExceptionFilter@@YAKPEAU_EXCEPTION_POINTERS@@PEAU_DLL_ENTRY_POINT_INFO@@@Z
0x18000E680: "{91067D4F-67E6-4768-BEA4-2565236" ??_C@_1EO@NHMAGJPK@?$AA?$HL?$AA9?$AA1?$AA0?$AA6?$AA7?$AAD?$AA4?$AAF?$AA?9?$AA6?$AA7?$AAE?$AA6?$AA?9?$AA4?$AA7?$AA6?$AA8?$AA?9?$AAB?$AAE?$AAA?$AA4?$AA?9?$AA2?$AA5?$AA6?$AA5?$AA2?$AA3?$AA6@
0x180004850: RemoveHeadList
0x180017240: "unsigned __int64 * AVrfpPreviousStopData" ?AVrfpPreviousStopData@@3PA_KA
0x180018120: "unsigned long * AVrfpFaultFalse" ?AVrfpFaultFalse@@3PAKA
0x18000D4E0: "__cdecl _imp_RtlImageDirectoryEntryToData" __imp_RtlImageDirectoryEntryToData
0x180001A40: "long __cdecl StringCchVPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,char * __ptr64)" ?StringCchVPrintfW@@YAJPEAG_KPEBGPEAD@Z
0x180015F70: "unsigned short * __ptr64 __ptr64 VfCoreStringTerminatingProcess" ?VfCoreStringTerminatingProcess@@3PEAGEA
0x18000BE64: NtQueryInformationProcess
0x18000D3F0: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x18000BFDE: RtlAnsiStringToUnicodeString
0x18000D6AC: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x18000BAA0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000E710: "Memory" ??_C@_1O@BFPJGEIB@?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
0x18000E998: "vfbasics.dll" ??_C@_1BK@KPAKNMOL@?$AAv?$AAf?$AAb?$AAa?$AAs?$AAi?$AAc?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000E0B8: "VerifierDlls" ??_C@_1BK@PIIJKLGC@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAr?$AAD?$AAl?$AAl?$AAs?$AA?$AA@
0x180017738: "unsigned long VfHeapsPropertySize" ?VfHeapsPropertySize@@3KA
0x180003A00: "void __cdecl VfCoreFree(void * __ptr64)" ?VfCoreFree@@YAXPEAX@Z
0x180005504: "void __cdecl VfCoreDeleteVerifierStops(void)" ?VfCoreDeleteVerifierStops@@YAXXZ
0x180003DC0: "long __cdecl VfCoreLoadEssentialStrings(struct HINSTANCE__ * __ptr64)" ?VfCoreLoadEssentialStrings@@YAJPEAUHINSTANCE__@@@Z
0x18000D6B0: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180017B78: "void * __ptr64 __ptr64 VrfTTTraceWriterBase" ?VrfTTTraceWriterBase@@3PEAXEA
0x18000D428: "__cdecl _imp_RtlQueryEnvironmentVariable_U" __imp_RtlQueryEnvironmentVariable_U
0x18000DE00: "AVRF: Failed to determine the pa" ??_C@_0EJ@HLMJGEED@AVRF?3?5Failed?5to?5determine?5the?5pa@
0x180015E80: "unsigned long ViCoreDebugChaining" ?ViCoreDebugChaining@@3KA
0x18000E808: "PageHeapFlags" ??_C@_1BM@PHBMAMOE@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAe?$AAa?$AAp?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x18000AFA0: VerifierSetFaultInjectionProbability
0x180021A40: "unsigned long * AVrfpFaultExclusionHits" ?AVrfpFaultExclusionHits@@3PAKA
0x180009330: "int __cdecl VfCoreCreateProcessInternalA(void * __ptr64,char const * __ptr64,char * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,char const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64,void * __ptr64 * __ptr64)" ?VfCoreCreateProcessInternalA@@YAHPEAXPEBDPEADPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@PEAPEAX@Z
0x1800090C0: "int __cdecl VfCoreCreateProcessInternalW(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64,void * __ptr64 * __ptr64)" ?VfCoreCreateProcessInternalW@@YAHPEAXPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@PEAPEAX@Z
0x180003480: VerifierQueryGlobalProperties
0x18000E6E8: "Handles" ??_C@_1BA@OAGDIMDD@?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAs?$AA?$AA@
0x180004804: ??1?$OnDeleteIf@PEAXP6AXPEAX@Z$1?VfCoreFree@@YAX0@Z@@QEAA@XZ
0x1800118E0: "struct _PageHeapPropertyMap VfHeapPropertyMap_SizeStart" ?VfHeapPropertyMap_SizeStart@@3U_PageHeapPropertyMap@@A
0x180018220: "unsigned long * AVrfpFaultProbability" ?AVrfpFaultProbability@@3PAKA
0x180009590: "unsigned long __cdecl ViTlsAlloc(void)" ?ViTlsAlloc@@YAKXZ
0x18000E708: "TLS" ??_C@_17OKJDLHPB@?$AAT?$AAL?$AAS?$AA?$AA@
0x180021A38: AVrfHeapTracker
0x180003744: InitializeListHead
0x18000D4A0: "__cdecl _imp_NtCreateKey" __imp_NtCreateKey
0x18000D720: "LdrGetProcedureAddress" ??_C@_0BH@GKPJJDBO@LdrGetProcedureAddress?$AA@
0x180017720: "unsigned long VfHeapsPropertyUnalign" ?VfHeapsPropertyUnalign@@3KA
0x180015FD8: "long AvrfStopProcessing" ?AvrfStopProcessing@@3JA
0x18000DB20: "AVRF: Couldn't read %s @ %p " ??_C@_0BN@HBMENKHK@AVRF?3?5Couldn?8t?5read?5?$CFs?5?$EA?5?$CFp?6?$AA@
0x18000D778: "CreateProcessInternalW" ??_C@_0BH@IODECGKA@CreateProcessInternalW?$AA@
0x18001774C: "unsigned long ViCoreDelayLoadInitialzied" ?ViCoreDelayLoadInitialzied@@3KA
0x18000BEEE: RtlApplicationVerifierStop
0x180017748: "unsigned long VfHeapsPropertyFaultTimeout" ?VfHeapsPropertyFaultTimeout@@3KA
0x180015EB8: "char * __ptr64 __ptr64 VfCoreAnsiStringFormatMessageFailed" ?VfCoreAnsiStringFormatMessageFailed@@3PEADEA
0x18000E200: "AVRF: VfCoreFindMostRecentThunk " ??_C@_0GF@CJFCFNNC@AVRF?3?5VfCoreFindMostRecentThunk?5@
0x18000D2D8: "__cdecl _imp_RtlDllShutdownInProgress" __imp_RtlDllShutdownInProgress
0x180021330: "unsigned long * AVrfpFaultBreak" ?AVrfpFaultBreak@@3PAKA
0x18000D050: "unsigned long * ViCoreSecurityDescriptor" ?ViCoreSecurityDescriptor@@3PAKA
0x180005CEC: "long __cdecl VfCoreUnregisterBreaks(struct HINSTANCE__ * __ptr64,struct _AVRF_LAYER_DESCRIPTOR * __ptr64)" ?VfCoreUnregisterBreaks@@YAJPEAUHINSTANCE__@@PEAU_AVRF_LAYER_DESCRIPTOR@@@Z
0x18000BA48: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180011510: "struct _AVRF_LAYER_DESCRIPTOR VfProviderRpcLayerDescriptor" ?VfProviderRpcLayerDescriptor@@3U_AVRF_LAYER_DESCRIPTOR@@A
0x180015EC0: "char * __ptr64 __ptr64 VfCoreAnsiStringTerminateProcessFailed" ?VfCoreAnsiStringTerminateProcessFailed@@3PEADEA
0x18000D3B0: "__cdecl _imp_LdrLockLoaderLock" __imp_LdrLockLoaderLock
0x18000C157: memset
0x18001015C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000BBFC: "__cdecl _report_securityfailure" __report_securityfailure
0x1800117B0: "struct _AVRF_PROPERTY_DESCRIPTOR * VfComPropertyDescriptor" ?VfComPropertyDescriptor@@3PAU_AVRF_PROPERTY_DESCRIPTOR@@A
0x18000E888: "AVRF: VerifierIsLayerEnabled fai" ??_C@_0CN@LKGGKLMK@AVRF?3?5VerifierIsLayerEnabled?5fai@
0x18000BFC0: LdrGetDllHandle
0x18000E798: "LowRes" ??_C@_1O@DNOLOIFM@?$AAL?$AAo?$AAw?$AAR?$AAe?$AAs?$AA?$AA@
0x18000A8C0: "long __cdecl VfCoreSnapAllProviderDllsImports(void)" ?VfCoreSnapAllProviderDllsImports@@YAJXZ

[JEB Decompiler by PNF Software]