Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_windows-defender-service_31bf3856ad364e35_10.0.17763.1_none_b66c0cb3aef5ffee\MpCmdRun.exe Base=0x140000000 SHA-256=81F85A88DD1829663D5E748CA95709EFF5328444BBDB2C888F85124D939F6899
PDB: MpCmdRun.pdb GUID={7E188B2A-EA4F-6B07-220B6E5415399D01} Age=1

3686 located named symbols:
0x14005EAD0: "__vectorcall ??_R0?AV?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@@@8
0x14002547C: "long __cdecl CommonUtil::NewMpInstance<struct MpClient::IWinTaskScheduler>(struct MpClient::IWinTaskScheduler * __ptr64 * __ptr64)" ??$NewMpInstance@UIWinTaskScheduler@MpClient@@@CommonUtil@@YAJPEAPEAUIWinTaskScheduler@MpClient@@@Z
0x140054D00: "const AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@6B@
0x14001A5D0: "private: void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > > >::_Reallocate_exactly(unsigned __int64) __ptr64" ?_Reallocate_exactly@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@AEAAX_K@Z
0x140039CC0: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x140011930: "protected: virtual void * __ptr64 __cdecl CommonUtil::IRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_EIRefObject@CommonUtil@@MEAAPEAXI@Z
0x14003A0A8: WINTRUST_NULL_THUNK_DATA
0x140019DCC: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Init(unsigned __int64) __ptr64" ?_Init@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAX_K@Z
0x1400395A8: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vftable'{for `Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x140060830: "__vectorcall ??_R0?AV?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@@8
0x14001A9E8: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Check_size(void) __ptr64" ?_Check_size@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAXXZ
0x1400462E8: "__cdecl GUID_2f10cd29_258a_44f1_99a8_b0273bc6f66f" _GUID_2f10cd29_258a_44f1_99a8_b0273bc6f66f
0x140024EA0: "int __cdecl IsManagedDefender(void)" ?IsManagedDefender@@YAHXZ
0x14004B5B0: " RemediationCompleteTimestamp" ??_C@_1FE@HEDIDJCJ@?$AA?5?$AA?5?$AA?5?$AA?5?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa?$AAm?$AAp@
0x14003F3A0: "Aborting full system scan since " ??_C@_1HK@GFCLNKDH@?$AAA?$AAb?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAu?$AAl?$AAl?$AA?5?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?5?$AAs?$AAi?$AAn?$AAc?$AAe?$AA?5@
0x140039CD8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x140008390: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefObject@CommonUtil@@MEAAPEAXI@Z
0x140054DA0: "const Microsoft::WRL::Details::WeakReferenceImpl::`RTTI Complete Object Locator'" ??_R4WeakReferenceImpl@Details@WRL@Microsoft@@6B@
0x140046940: "ERROR: FormatMessageW failed (%X" ??_C@_1EG@JMKKDDGN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x14004A098: "instanceGuid" ??_C@_1BK@BCBNJIKN@?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x140041DC0: "Search Started (%ls) (Path: %ls)" ??_C@_1EK@NHKDAJKD@?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AA?5?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AA?$CI?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AA?$CF?$AAl?$AAs?$AA?$CJ@
0x140006648: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpThreatInfoFree>::~CUniqueHandle<struct CAutoMpThreatInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpThreatInfoFree@@@CommonUtil@@QEAA@XZ
0x14002F890: "public: long __cdecl CommonUtil::CCmdOptionsLookupMap::Insert(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Insert@CCmdOptionsLookupMap@CommonUtil@@QEAAJPEBG0@Z
0x140055DB8: "__vectorcall ??_R2?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil" ??_R2?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@8
0x140055E88: "__vectorcall ??_R3?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil" ??_R3?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@8
0x140039BD8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x14005ECE0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@@8
0x14003E324: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x140049C30: "End: Signatures Update Service " ??_C@_1EA@COOHAICF@?$AAE?$AAn?$AAd?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x14004F6E0: "ThresholdOneClick" ??_C@_1CE@NOPBGNEA@?$AAT?$AAh?$AAr?$AAe?$AAs?$AAh?$AAo?$AAl?$AAd?$AAO?$AAn?$AAe?$AAC?$AAl?$AAi?$AAc?$AAk?$AA?$AA@
0x14005F730: "__vectorcall ??_R0?AU?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows@" ??_R0?AU?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows@@@8
0x14004F020: "ERROR: Creating Product Genuine " ??_C@_1HC@CIOPPCF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AA?5@
0x14003AA10: "Enter to" ??_C@_08JKDBNODE@Enter?5to?$AA@
0x14003032C: "public: class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem * __ptr64 __cdecl CommonUtil::CStdRefHashMapBase<struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>::LookupValue(unsigned short const * __ptr64 const & __ptr64)const __ptr64" ?LookupValue@?$CStdRefHashMapBase@UCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@QEBAPEAVCSimpleMapItem@CCmdOptionsLookupMap@2@AEBQEBG@Z
0x1400113D0: "void __cdecl RunCommandSpyNetService(struct CommonUtil::ICmdOptionsLookup const * __ptr64,bool)" ?RunCommandSpyNetService@@YAXPEBUICmdOptionsLookup@CommonUtil@@_N@Z
0x140042EE0: "%ls\%ls-%02hu%02hu%04hu-%02hu%02" ??_C@_1FI@NAAGHHFF@?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?9?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA4?$AAh?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA2@
0x140023690: "long __cdecl CommonUtil::MpEnsureProcessMitigationPolicy(unsigned long)" ?MpEnsureProcessMitigationPolicy@CommonUtil@@YAJK@Z
0x14003F0B0: "DownloadOfflineScanner" ??_C@_1CO@KBAKNKGG@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAe?$AAr?$AA?$AA@
0x140043D20: "Getting Windows Update log... " ??_C@_1DO@JGDJJNAM@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAl?$AAo?$AAg?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140039498: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vftable'{for `Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpIdleNotifierCallback>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x14005121C: "r" ??_C@_13BPINEIPE@?$AAr?$AA?$AA@
0x140041C20: "ERROR: MpManagerOpen failed with" ??_C@_1FA@LBENKCGP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh@
0x140060580: "__vectorcall ??_R0?AUIUtilRegEnumSubKeys@CommonUtil@" ??_R0?AUIUtilRegEnumSubKeys@CommonUtil@@@8
0x140042350: "ERROR: RunWithRestrictedPriv(%s)" ??_C@_1FI@PMEMCLHA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAW?$AAi?$AAt?$AAh?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AAP?$AAr?$AAi?$AAv?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ@
0x14004BBE0: "NisSrv" ??_C@_1O@NPPEOLOE@?$AAN?$AAi?$AAs?$AAS?$AAr?$AAv?$AA?$AA@
0x140022C04: "public: __cdecl std::out_of_range::out_of_range(char const * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@PEBD@Z
0x14004DA10: "No quarantined items. " ??_C@_0BH@JPOHPDLO@No?5quarantined?5items?4?6?$AA@
0x1400500C0: "MpService_SampleHeaderServiceBus" ??_C@_1FA@PIIPLJDD@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAB?$AAu?$AAs@
0x14003AC10: "CmdTool: Invalid command line ar" ??_C@_1FA@BPLFNECO@?$AAC?$AAm?$AAd?$AAT?$AAo?$AAo?$AAl?$AA?3?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAa?$AAr@
0x1400540B8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x14004A690: "********************************" ??_C@_1IG@GLGNHCEO@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x14003A470: mpclient_NULL_THUNK_DATA
0x140042210: "NetworkService" ??_C@_1BO@EBLCFBPH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14003AAB0: "MpEnsureProcessMitigationPolicy:" ??_C@_1FI@OMFKNHCO@?$AAM?$AAp?$AAE?$AAn?$AAs?$AAu?$AAr?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?3@
0x140033E90: "void __cdecl __scrt_initialize_type_info(void)" ?__scrt_initialize_type_info@@YAXXZ
0x14004D130: "ERROR: ExtractEventLevelProperty" ??_C@_1HC@PNKAPPKK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAe?$AAv?$AAe?$AAl?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy@
0x140041348: "AntiVirus Signature Version: %S " ??_C@_0CB@PHNJEJOO@AntiVirus?5Signature?5Version?3?5?$CFS?6@
0x14004D740: "ListAll" ??_C@_1BA@PPBENCPO@?$AAL?$AAi?$AAs?$AAt?$AAA?$AAl?$AAl?$AA?$AA@
0x14004CA40: "ERROR: Task name not specified " ??_C@_1EA@MOGJOJJJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?5?$AAn?$AAa?$AAm?$AAe?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?6?$AA?$AA@
0x140047460: "Software\Classes\*\ShellEx\Conte" ??_C@_1GG@LHGPMBDM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CK?$AA?2?$AAS?$AAh?$AAe?$AAl?$AAl?$AAE?$AAx?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe@
0x140054090: "__vectorcall ??_R1A@?0A@EA@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@" ??_R1A@?0A@EA@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@8
0x14004AE40: " Guid: %ls " ??_C@_1CM@PDDBBMME@?$AA?5?$AA?5?$AAG?$AAu?$AAi?$AAd?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14004EFD0: "20FFC3D1-F96A-40f1-81FD-EA9C5847" ??_C@_1EK@LNGLHNPM@?$AA2?$AA0?$AAF?$AAF?$AAC?$AA3?$AAD?$AA1?$AA?9?$AAF?$AA9?$AA6?$AAA?$AA?9?$AA4?$AA0?$AAf?$AA1?$AA?9?$AA8?$AA1?$AAF?$AAD?$AA?9?$AAE?$AAA?$AA9?$AAC?$AA5?$AA8?$AA4?$AA7@
0x14004B608: "WSCProviders.txt" ??_C@_1CC@HFGHMIKB@?$AAW?$AAS?$AAC?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140036DB0: "__cdecl FindPESection" _FindPESection
0x14004BD60: "DRIVER " ??_C@_1BA@LGKHLAMC@?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x140022BA4: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x140053B68: "__vectorcall ??_R2?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows" ??_R2?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@8
0x140054938: "__vectorcall ??_R3?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows" ??_R3?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@8
0x14003F12C: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x14002D4AC: "long __cdecl CommonUtil::NewVSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?NewVSprintfW@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x140022B40: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultException@CommonUtil@@MEAAPEAXI@Z
0x14004BE38: "PAUSED " ??_C@_1BA@KENGFBND@?$AAP?$AAA?$AAU?$AAS?$AAE?$AAD?$AA?5?$AA?$AA@
0x140041570: " Starting engine and signature r" ??_C@_0DB@FLIHGJKB@?6Starting?5engine?5and?5signature?5r@
0x140039CB8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x140051530: "__cdecl _real@43f0000000000000" __real@43f0000000000000
0x140016118: "long __cdecl MpCollectServiceInfo(unsigned short const * __ptr64)" ?MpCollectServiceInfo@@YAJPEBG@Z
0x140055400: "const CError::`RTTI Complete Object Locator'" ??_R4CError@@6B@
0x140023594: "void __cdecl CleanupLibAndGetProcAddress(void)" ?CleanupLibAndGetProcAddress@@YAXXZ
0x140041100: "MMPC" ??_C@_19EAIGDDIB@?$AAM?$AAM?$AAP?$AAC?$AA?$AA@
0x140047050: "ERROR: GetNumberOfEventLogRecord" ??_C@_1GC@NMACKEEF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AAO?$AAf?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd@
0x14004A950: "Getting WSC service registration" ??_C@_1GC@HLDHEMHP@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAS?$AAC?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn@
0x14000DCD0: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x14003F338: "Time Info - %s " ??_C@_1CA@LPGBFDNJ@?$AAT?$AAi?$AAm?$AAe?$AA?5?$AAI?$AAn?$AAf?$AAo?$AA?5?$AA?9?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x140024350: "public: virtual long __cdecl MpConfigUtils::CMpConfigKeysIterator::Enum(unsigned short const * __ptr64 * __ptr64) __ptr64" ?Enum@CMpConfigKeysIterator@MpConfigUtils@@UEAAJPEAPEBG@Z
0x1400498A0: "ERROR: Signatures Update Failed " ??_C@_1EI@NJJKLHFB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14004A2D8: "%ls = [TRUE] " ??_C@_1BM@IBKFFCIB@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$DN?$AA?5?$AA?$FL?$AAT?$AAR?$AAU?$AAE?$AA?$FN?$AA?6?$AA?$AA@
0x14003A4B8: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140041730: "Failed! Error 0x%x " ??_C@_0BE@MIPMLDMD@Failed?$CB?5Error?50x?$CFx?6?$AA@
0x14005FC30: "__vectorcall ??_R0?AV?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@@8
0x14004DEC0: "ERROR: EnableService(%s) failed." ??_C@_1FI@JFBEAEIK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4@
0x140032DC0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140052EA8: "__vectorcall ??_R17?0A@EC@IRefObject@CommonUtil" ??_R17?0A@EC@IRefObject@CommonUtil@@8
0x14004E4A8: "/C %ls > %ls" ??_C@_1BK@FAJAGCGO@?$AA?1?$AAC?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$DO?$AA?5?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x1400501B8: "ProxyPacUrl" ??_C@_1BI@MLLAMIHH@?$AAP?$AAr?$AAo?$AAx?$AAy?$AAP?$AAa?$AAc?$AAU?$AAr?$AAl?$AA?$AA@
0x14005B5FC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140045B80: "failed to print the OnAccess sta" ??_C@_1EI@HMMEJIIP@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAs?$AAt?$AAa@
0x140027960: "__int64 __cdecl get_open_info(char * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int * __ptr64,void * __ptr64)" ?get_open_info@@YA_JPEADPEAG11PEAHPEAX@Z
0x140002D00: "long __cdecl StringCchCopyExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyExW@@YAJPEAG_KPEBGPEAPEAGPEA_KK@Z
0x140053180: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@8
0x140031858: "long __cdecl CommonUtil::HrStartService(struct SC_HANDLE__ * __ptr64,unsigned __int64,unsigned short const * __ptr64 const * __ptr64)" ?HrStartService@CommonUtil@@YAJPEAUSC_HANDLE__@@_KPEBQEBG@Z
0x14003A138: "__cdecl _imp___doserrno" __imp___doserrno
0x140040B30: "INFO: ScheduleJob is not set. Sk" ??_C@_1HE@HOCIFCNB@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAJ?$AAo?$AAb?$AA?5?$AAi?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAs?$AAe?$AAt?$AA?4?$AA?5?$AAS?$AAk@
0x140035050: "__cdecl _vcrt_getptd" __vcrt_getptd
0x14001D120: "__cdecl get_startup_commit_mode" _get_startup_commit_mode
0x140041AD0: "Start: RunCommandRemoveSignature" ??_C@_1EO@BNHMAHO@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe@
0x14003EB00: "MpWDEnable(TRUE) finished. " ??_C@_1DI@NHOIKDOP@?$AAM?$AAp?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$CI?$AAT?$AAR?$AAU?$AAE?$AA?$CJ?$AA?5?$AAf?$AAi?$AAn?$AAi?$AAs?$AAh?$AAe?$AAd?$AA?4?$AA?6?$AA?$AA@
0x14005B638: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-filesystem-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-filesystem-l1-1-0
0x140051020: "__cdecl GUID_af230d27_baba_4e42_aced_f524f22cfce2" _GUID_af230d27_baba_4e42_aced_f524f22cfce2
0x14004CB00: "WdCacheMaintenance" ??_C@_1CG@JODBCNCD@?$AAW?$AAd?$AAC?$AAa?$AAc?$AAh?$AAe?$AAM?$AAa?$AAi?$AAn?$AAt?$AAe?$AAn?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x14002DFE0: "long __cdecl CommonUtil::UtilRegCreateKey64(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long)" ?UtilRegCreateKey64@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGKPEAU_SECURITY_ATTRIBUTES@@K@Z
0x140039D18: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x1400118B0: "public: virtual void * __ptr64 __cdecl CMpSignaturesUpdateServiceCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpSignaturesUpdateServiceCallback@@UEAAPEAXI@Z
0x14005EB20: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@@8
0x140018980: "public: __cdecl CommonUtil::ScopeGuardImpl<void * __ptr64,int (__cdecl*)(void * __ptr64)>::~ScopeGuardImpl<void * __ptr64,int (__cdecl*)(void * __ptr64)>(void) __ptr64" ??1?$ScopeGuardImpl@PEAXP6AHPEAX@Z@CommonUtil@@QEAA@XZ
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>::~AutoRef<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>(void) __ptr64" ??1?$AutoRef@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@QEAA@XZ
0x14004CB98: "wevtapi.dll" ??_C@_1BI@IJHAFJEP@?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140022D98: MpGetEventSourceName
0x14003E0C8: "Launching %ls... " ??_C@_1CE@CMANKDDF@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAi?$AAn?$AAg?$AA?5?$AA?$CF?$AAl?$AAs?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x14002C6CC: "long __cdecl CommonUtil::UtilLoadSystemLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilLoadSystemLibrary@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBG@Z
0x14003A4C8: "__cdecl _imp_CoInitializeSecurity" __imp_CoInitializeSecurity
0x140040BB0: "INFO: This is a resource scan. s" ??_C@_1HG@JNHPLFMO@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAT?$AAh?$AAi?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAa?$AA?5?$AAr?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?4?$AA?5?$AAs@
0x140044B10: "Getting security health service " ??_C@_1HE@PIEBHDLN@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5@
0x14003FA38: "ScanTrigger" ??_C@_1BI@EADDPBHO@?$AAS?$AAc?$AAa?$AAn?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x14004B8E0: "Getting minifilter driver regist" ??_C@_1GO@JAJHHOME@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAm?$AAi?$AAn?$AAi?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt@
0x140030B34: "int __cdecl MpCompareOsVersionAndBuildNumber(unsigned long,unsigned long)" ?MpCompareOsVersionAndBuildNumber@@YAHKK@Z
0x14002E8C8: "long __cdecl CommonUtil::UtilRegEnumValuesRaw(struct HKEY__ * __ptr64,unsigned __int64,unsigned long * __ptr64,unsigned __int64 * __ptr64,unsigned short * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegEnumValuesRaw@CommonUtil@@YAJPEAUHKEY__@@_KPEAKPEA_KPEAG3PEAX@Z
0x140053C70: "__vectorcall ??_R2WeakReferenceImpl@Details@WRL@Microsoft" ??_R2WeakReferenceImpl@Details@WRL@Microsoft@@8
0x140054AB8: "__vectorcall ??_R3WeakReferenceImpl@Details@WRL@Microsoft" ??_R3WeakReferenceImpl@Details@WRL@Microsoft@@8
0x140046560: "ERROR: ReadEventLog(dummy) faile" ??_C@_1FA@DOHCPFNG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAa?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?$CI?$AAd?$AAu?$AAm?$AAm?$AAy?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140025B24: "long __cdecl CommonUtil::UtilGetSystemChangeJournalId(unsigned __int64 * __ptr64)" ?UtilGetSystemChangeJournalId@CommonUtil@@YAJPEA_K@Z
0x140060E70: "__cdecl _scrt_current_native_startup_state" __scrt_current_native_startup_state
0x140043A58: "cbs.log" ??_C@_1BA@LECJGBPN@?$AAc?$AAb?$AAs?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140054248: "__vectorcall ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x140060898: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140045978: "StateInfo.txt" ??_C@_1BM@CFKIBKBD@?$AAS?$AAt?$AAa?$AAt?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x14004E2A0: "Service hardening not needed for" ??_C@_1GA@DMCPCGCP@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAh?$AAa?$AAr?$AAd?$AAe?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAn?$AAe?$AAe?$AAd?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr@
0x1400125DC: "public: __cdecl CommonUtil::AutoRef<class CMpSignaturesUpdateServiceCallback>::~AutoRef<class CMpSignaturesUpdateServiceCallback>(void) __ptr64" ??1?$AutoRef@VCMpSignaturesUpdateServiceCallback@@@CommonUtil@@QEAA@XZ
0x140039FE0: "__cdecl _imp_RaiseException" __imp_RaiseException
0x14004B048: " Binary: %ls " ??_C@_1DM@FFMODLFF@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14004F8D0: "SeBackupPrivilege" ??_C@_1CE@MBNFGOEN@?$AAS?$AAe?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14004A4F8: " Scan: %u " ??_C@_1CK@DEMKGJIJ@?$AA?5?$AA?5?$AA?5?$AA?5?$AAS?$AAc?$AAa?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14000E098: WPP_SF_ll
0x140039820: "const CMpSpyNetQueueCallback::`vftable'" ??_7CMpSpyNetQueueCallback@@6B@
0x1400487E0: "ERROR: Failed to dump reporting " ??_C@_1FC@KJFBJJEI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?5?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5@
0x140046E20: "ERROR: StringCchPrintfW() failed" ??_C@_1EO@ODNOBCDO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAP?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140039E00: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x14005F530: "__vectorcall ??_R0?AU?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@" ??_R0?AU?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@8
0x140052A30: "const type_info::`RTTI Complete Object Locator'" ??_R4type_info@@6B@
0x1400501F8: "https://" ??_C@_1BC@LDHIGNHP@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x140054360: "__vectorcall ??_R17?0A@EC@IUnknown" ??_R17?0A@EC@IUnknown@@8
0x1400410D8: "UNC" ??_C@_17DLOIEBPL@?$AAU?$AAN?$AAC?$AA?$AA@
0x140039B88: "__cdecl tls_used" _tls_used
0x140050E18: "EnableServiceImpl" ??_C@_0BC@LIBGGOA@EnableServiceImpl?$AA@
0x140050E00: "HrChangeServiceConfig" ??_C@_0BG@EIHDF@HrChangeServiceConfig?$AA@
0x1400608B0: "__cdecl _crtWinrtInitType" __crtWinrtInitType
0x140054D50: "const Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>::`RTTI Complete Object Locator'" ??_R4?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@6B@
0x140054D28: "const Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>::`RTTI Complete Object Locator'" ??_R4?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@6B@
0x140035128: "__cdecl _vcrt_initialize_ptd" __vcrt_initialize_ptd
0x140039018: "const std::exception::`vftable'" ??_7exception@std@@6B@
0x140033ED0: "__cdecl _scrt_get_dyn_tls_dtor_callback" __scrt_get_dyn_tls_dtor_callback
0x14001D15C: "public: long __cdecl MpCommunication::CMpDownloadHandle::Initialize(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct MpCommunication::IMpDownloadCallback * __ptr64,unsigned long) __ptr64" ?Initialize@CMpDownloadHandle@MpCommunication@@QEAAJPEBG00PEAUIMpDownloadCallback@2@K@Z
0x14004B310: "ERROR: WriteWscCloudProviderQuer" ??_C@_1JM@IHFPDOB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x1400173D0: "private: long __cdecl CrimsonEventLog::LoadWevtApi(void) __ptr64" ?LoadWevtApi@CrimsonEventLog@@AEAAJXZ
0x140051448: "GetSystemTimePreciseAsFileTime" ??_C@_0BP@FPNJPEJC@GetSystemTimePreciseAsFileTime?$AA@
0x140051520: "__cdecl _real@408f400000000000" __real@408f400000000000
0x140042750: "Self Terminating due to timeout " ??_C@_1EC@HGHCKFMB@?$AAS?$AAe?$AAl?$AAf?$AA?5?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAu?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?6@
0x140039F50: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14005B018: "__cdecl TI2?AVbad_exception@std@@" _TI2?AVbad_exception@std@@
0x140042A38: "NewLocation" ??_C@_1BI@HPMFNAGE@?$AAN?$AAe?$AAw?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14002497C: "bool __cdecl MpConfigUtils::MpIsSystemRunningOnBatteries(void)" ?MpIsSystemRunningOnBatteries@MpConfigUtils@@YA_NXZ
0x14004E590: "ERROR: UtilCreateProcess(%ls) ti" ??_C@_1FK@GGIHKHMB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAt?$AAi@
0x14001FBC0: "void __cdecl RunCommandGetDeviceTicket(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandGetDeviceTicket@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14000DDD0: "public: virtual void * __ptr64 __cdecl CRegHandle::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegHandle@@UEAAPEAXI@Z
0x14002ECD0: "public: virtual void * __ptr64 __cdecl CommonUtil::CUtilRegEnumKeyValues::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUtilRegEnumKeyValues@CommonUtil@@UEAAPEAXI@Z
0x140061314: DloadSectionOldProtection
0x140054A28: "__vectorcall ??_R3DontUseNewUseMake@Details@WRL@Microsoft" ??_R3DontUseNewUseMake@Details@WRL@Microsoft@@8
0x140053DA0: "__vectorcall ??_R2DontUseNewUseMake@Details@WRL@Microsoft" ??_R2DontUseNewUseMake@Details@WRL@Microsoft@@8
0x14003E9D8: "ReloadEngine" ??_C@_1BK@MMFJBJMP@?$AAR?$AAe?$AAl?$AAo?$AAa?$AAd?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?$AA@
0x140020390: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x14000921C: "bool __cdecl MpCmdUtils::ShouldPrintMessagesToConsole(void)" ?ShouldPrintMessagesToConsole@MpCmdUtils@@YA_NXZ
0x1400347A0: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x140039048: "const std::bad_array_new_length::`vftable'" ??_7bad_array_new_length@std@@6B@
0x140050E30: "HrStartService" ??_C@_0P@FNJACPGK@HrStartService?$AA@
0x140036CCC: "__cdecl c_exit" _c_exit
0x140050B08: "MAPSconcurrency" ??_C@_1CA@BHNDCLGI@?$AAM?$AAA?$AAP?$AAS?$AAc?$AAo?$AAn?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x140022B84: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x14004A130: "INFO: Deleted WMI instance %s " ??_C@_1EA@PLIKKOPN@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAW?$AAM?$AAI?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?6?$AA?$AA@
0x140049610: "End: SpyNet Service " ??_C@_1CK@OLCEEBLH@?$AAE?$AAn?$AAd?$AA?3?$AA?5?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSignaturesUpdateService>::~AutoRef<struct MpClient::IMpSignaturesUpdateService>(void) __ptr64" ??1?$AutoRef@UIMpSignaturesUpdateService@MpClient@@@CommonUtil@@QEAA@XZ
0x14004D200: "Critical " ??_C@_1BE@CAGKAAAG@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AA?7?$AA?$AA@
0x140042A50: "Failed to check Parent Process I" ??_C@_1GC@CAPNFBJJ@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAh?$AAe?$AAc?$AAk?$AA?5?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAI@
0x140033FF0: "public: virtual void * __ptr64 __cdecl std::bad_array_new_length::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_array_new_length@std@@UEAAPEAXI@Z
0x14003FA20: "ScanType" ??_C@_1BC@CCEOIPON@?$AAS?$AAc?$AAa?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140049EA0: "ERROR: CoCreateInstance(CLSID_Ws" ??_C@_1IG@OEKIKAD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$CI?$AAC?$AAL?$AAS?$AAI?$AAD?$AA_?$AAW?$AAs@
0x14002C900: "long __cdecl CommonUtil::UtilRawGetLoadedProcAddress(__int64 (__cdecl* * __ptr64)(void),unsigned short const * __ptr64,char const * __ptr64,bool)" ?UtilRawGetLoadedProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBGPEBD_N@Z
0x140050D20: "UtilWaitForServiceOp" ??_C@_0BF@BELOCNME@UtilWaitForServiceOp?$AA@
0x14003A3F0: "__cdecl _imp_MpCleanStart" __imp_MpCleanStart
0x14004DF68: "Enable" ??_C@_1O@PFBIKACK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x14003464C: "__cdecl SetImageBase" _SetImageBase
0x14004DB78: " ThreatName = %s " ??_C@_1CE@BBPLELCJ@?$AA?6?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?5?$AA?$DN?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140033A24: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x1400012C0: WppControlCallback
0x140053B38: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x1400548F0: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x1400372C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14002D8E0: "long __cdecl CommonUtil::UtilSidFromRid(void * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,struct _SID_IDENTIFIER_AUTHORITY const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long)" ?UtilSidFromRid@CommonUtil@@YAJPEAPEAXKKKPEBU_SID_IDENTIFIER_AUTHORITY@@KKKKKK@Z
0x14003F8E0: "No valid actions for threat." ??_C@_1DK@NOPNOJON@?$AAN?$AAo?$AA?5?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?4?$AA?$AA@
0x140017920: "private: long __cdecl CrimsonEventLog::ExtractEventMessage(void * __ptr64,unsigned long,class std::vector<unsigned short,class std::allocator<unsigned short> > & __ptr64) __ptr64" ?ExtractEventMessage@CrimsonEventLog@@AEAAJPEAXKAEAV?$vector@GV?$allocator@G@std@@@std@@@Z
0x14005B410: USERENV_NULL_THUNK_DATA_DLN
0x140050E90: WPP_0b02b16f35c336566bc5e1b0109f90b2_Traceguids
0x140041D98: "Update started " ??_C@_1CC@NKMEJNLF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?5?$AA?6?$AA?$AA@
0x1400462F8: WPP_c6956b16be1a3d46031e9345a5f4d6de_Traceguids
0x140050010: "MpSampleSubmissionHighPriAgentLi" ??_C@_1FC@KLDNECMJ@?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAS?$AAu?$AAb?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AAH?$AAi?$AAg?$AAh?$AAP?$AAr?$AAi?$AAA?$AAg?$AAe?$AAn?$AAt?$AAL?$AAi@
0x140030AB0: "public: virtual void * __ptr64 __cdecl CommonUtil::CArgvIter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCArgvIter@CommonUtil@@UEAAPEAXI@Z
0x1400149BC: "public: static void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)" ?_Xlen@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@SAXXZ
0x1400551A0: "__vectorcall ??_R1A@?0A@EA@exception@std" ??_R1A@?0A@EA@exception@std@@8
0x1400398C8: "const CommonUtil::CArgvIter::`vftable'" ??_7CArgvIter@CommonUtil@@6B@
0x140054298: "__vectorcall ??_R1A@?0A@EA@?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows" ??_R1A@?0A@EA@?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows@@8
0x14004FB60: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x140039F18: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140046D90: "ERROR: NULL parameter in EventLo" ??_C@_1FK@EFLNOKAM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAU?$AAL?$AAL?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AA?5?$AAi?$AAn?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo@
0x140039CA0: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x14005E5C0: "__vectorcall ??_R0?AUIMpDownloadCallback@MpCommunication@" ??_R0?AUIMpDownloadCallback@MpCommunication@@@8
0x1400502A0: "ERROR: Creating SampleHeader Que" ??_C@_1FM@GFMIEMAG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?5?$AAQ?$AAu?$AAe@
0x140003AEC: "long __cdecl MpCmdSuppLogOpen(unsigned short const * __ptr64,bool)" ?MpCmdSuppLogOpen@@YAJPEBG_N@Z
0x14005B078: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x140022EF4: "public: __cdecl CommonUtil::CHResultException::CHResultException(class CommonUtil::CHResultException const & __ptr64) __ptr64" ??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z
0x140043340: "Microsoft-Windows-Security-Mitig" ??_C@_1HA@GHEPMOOB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAM?$AAi?$AAt?$AAi?$AAg@
0x140054630: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140043878: "OperationalEvents.txt" ??_C@_1CM@OPBALFDI@?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x1400394E0: "const OnlineIdTicketVector::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_7OnlineIdTicketVector@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@@
0x14004D860: "'FilePath' could not be specifie" ??_C@_1IE@ECJKKNDD@?$AA?8?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?8?$AA?5?$AAc?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAb?$AAe?$AA?5?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe@
0x140060100: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x140046BB0: "SYSTEM\CurrentControlSet\Service" ??_C@_1FG@HBJHEFK@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14003A110: "__cdecl _imp__free_base" __imp__free_base
0x140051040: "__cdecl GUID_2c5bc43e_3369_4c33_ab0c_be9469677af4" _GUID_2c5bc43e_3369_4c33_ab0c_be9469677af4
0x1400423A8: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x14003EAB0: "ERROR: MpWDEnable(TRUE) failed (" ??_C@_1EK@KLOMHMJP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$CI?$AAT?$AAR?$AAU?$AAE?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x14003EB38: "WDDisable" ??_C@_1BE@CBEAPHDM@?$AAW?$AAD?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x14003F184: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x140039228: "const CMpSignaturesUpdateServiceCallback::`vftable'{for `CommonUtil::CRefObject'}" ??_7CMpSignaturesUpdateServiceCallback@@6BCRefObject@CommonUtil@@@
0x140056B3C: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x14005B570: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x140046078: "IOAV protection enabled" ??_C@_1DA@LIEIHKCK@?$AAI?$AAO?$AAA?$AAV?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140012650: "[thunk]:public: virtual void * __ptr64 __cdecl CMpSignaturesUpdateServiceCallback::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECMpSignaturesUpdateServiceCallback@@WBA@EAAPEAXI@Z
0x1400514A0: WPP_1e300d8081a23a97129dff84536b81b3_Traceguids
0x140022A70: ??_G?$CThreadPoolItemFunctorAdapter@V<lambda_86bf783fe1eb1f8a7efa88a94cbd7b6b>@@@CommonUtil@@UEAAPEAXI@Z
0x140055FD8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x140036CA8: exit
0x1400360FC: "__cdecl _FrameUnwindToState" __FrameUnwindToState
0x1400410E0: "Path" ??_C@_19NHABCBNP@?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14004A588: " Domain: %u " ??_C@_1CK@FKOJIAHF@?$AA?5?$AA?5?$AA?5?$AA?5?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14004FE20: "WindowsGetStringRawBuffer" ??_C@_0BK@KBEEKJGL@WindowsGetStringRawBuffer?$AA@
0x14004AA70: "__cdecl GUID_3901a765_ab91_4ba9_a553_5b8538deb840" _GUID_3901a765_ab91_4ba9_a553_5b8538deb840
0x140046F50: "ERROR: GetMesgFileHandle() faile" ??_C@_1FA@MJDLJKIJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAM?$AAe?$AAs?$AAg?$AAF?$AAi?$AAl?$AAe?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140020390: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x14003A098: "__cdecl _imp_CryptCATAdminEnumCatalogFromHash" __imp_CryptCATAdminEnumCatalogFromHash
0x140061318: DloadSectionLockCount
0x140046990: "********************************" ??_C@_1KK@ELNCBNDM@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x140045B20: "failed to print the realtime mon" ??_C@_1FI@NBCEGPLP@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAr?$AAe?$AAa?$AAl?$AAt?$AAi?$AAm?$AAe?$AA?5?$AAm?$AAo?$AAn@
0x14004EB98: "DismInitialize" ??_C@_0P@MHJENBJH@DismInitialize?$AA@
0x1400189AC: "public: __cdecl std::vector<unsigned short,class std::allocator<unsigned short> >::~vector<unsigned short,class std::allocator<unsigned short> >(void) __ptr64" ??1?$vector@GV?$allocator@G@std@@@std@@QEAA@XZ
0x140022D58: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x14003A0F8: "__cdecl _imp__calloc_base" __imp__calloc_base
0x140048FB8: "Trace started . . . " ??_C@_0BF@MHLHLFID@Trace?5started?5?4?5?4?5?4?6?$AA@
0x1400505A0: "Microsoft Antimalware Scheduled " ??_C@_1EK@BOJICAKN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAd?$AA?5@
0x14003A150: "__cdecl _imp__seh_filter_exe" __imp__seh_filter_exe
0x14004A390: "onAccessScanningEnabled" ??_C@_1DA@JKOABLK@?$AAo?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140042530: "ERROR: GetUserNameW() Failed %X " ??_C@_1EC@HINPBGMJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAU?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AAW?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6@
0x14003A568: "__cdecl _xp_a" __xp_a
0x140036C72: "__cdecl _imp_load_DestroyEnvironmentBlock" __imp_load_DestroyEnvironmentBlock
0x14004CB40: WPP_0bc6c80d3cda394e30a216463a50294e_Traceguids
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<struct CommonUtil::IUtilRegEnumKeyValues>::~AutoRef<struct CommonUtil::IUtilRegEnumKeyValues>(void) __ptr64" ??1?$AutoRef@UIUtilRegEnumKeyValues@CommonUtil@@@CommonUtil@@QEAA@XZ
0x1400438B0: "Microsoft-Windows-Windows Defend" ??_C@_1FO@EHLNMLAB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd@
0x140042AD0: "ERROR: MpConfigOpen(%ls) failed " ??_C@_1EM@NFDPPHNF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAO?$AAp?$AAe?$AAn?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14004C2D0: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x14003F000: "ValidateMapsConnection failed to" ??_C@_1KK@IBONCEOG@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAM?$AAa?$AAp?$AAs?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo@
0x1400425E0: "ERROR: LoadUserProfile() Failed " ??_C@_1EI@IJAIJHNJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAU?$AAs?$AAe?$AAr?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x140014550: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator+=(unsigned short const * __ptr64 const) __ptr64" ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@QEBG@Z
0x14001E980: "public: virtual long __cdecl OnlineIdTicketIterator::get_HasCurrent(unsigned char * __ptr64) __ptr64" ?get_HasCurrent@OnlineIdTicketIterator@@UEAAJPEAE@Z
0x140002CE0: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >::~CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140002BE8: "public: __cdecl CommonUtil::CAutoGlobalCmdOptionsLookup::~CAutoGlobalCmdOptionsLookup(void) __ptr64" ??1CAutoGlobalCmdOptionsLookup@CommonUtil@@QEAA@XZ
0x1400602C0: "__vectorcall ??_R0?AV?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@@8
0x14004BA80: "WARNING: MpCollectServiceInfo("N" ??_C@_1GK@CIPCOCPA@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAN@
0x14003A0C8: "__cdecl _imp_wcstoul" __imp_wcstoul
0x140046198: "Auto sigupdate enabled" ??_C@_1CO@FLPLKIAJ@?$AAA?$AAu?$AAt?$AAo?$AA?5?$AAs?$AAi?$AAg?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14003A408: "__cdecl _imp_MpScanControl" __imp_MpScanControl
0x140044F30: "Getting WSC related registry key" ??_C@_1HO@IAPPEAPI@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAS?$AAC?$AA?5?$AAr?$AAe?$AAl?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAk?$AAe?$AAy@
0x14001B710: "long __cdecl RunCommandCollectSystemInfo(void)" ?RunCommandCollectSystemInfo@@YAJXZ
0x14003A278: "__cdecl _imp__wtempnam" __imp__wtempnam
0x140033F08: "__cdecl RTC_Initialize" _RTC_Initialize
0x140034030: "void __cdecl __scrt_throw_std_bad_alloc(void)" ?__scrt_throw_std_bad_alloc@@YAXXZ
0x14005B548: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-convert-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-convert-l1-1-0
0x1400081B0: "public: static long __cdecl CUpdateNotifications::MpCallback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?MpCallback@CUpdateNotifications@@SAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x14003A250: "__cdecl _imp__lseek" __imp__lseek
0x14003A148: "__cdecl _imp__crt_atexit" __imp__crt_atexit
0x14003A9F0: "__cdecl _sz_Cabinet_dll" __sz_Cabinet_dll
0x14003F1B0: "HH':'mm':'ss" ??_C@_1BK@NGOLIDOG@?$AAH?$AAH?$AA?8?$AA?3?$AA?8?$AAm?$AAm?$AA?8?$AA?3?$AA?8?$AAs?$AAs?$AA?$AA@
0x14004B3B0: "Data Protection Product #%u " ??_C@_1DK@DNJPEMM@?$AAD?$AAa?$AAt?$AAa?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AA?$CD?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140042798: "MpCmdRun-%X-%s.lock" ??_C@_1CI@IBDIKCD@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?9?$AA?$CF?$AAX?$AA?9?$AA?$CF?$AAs?$AA?4?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140049A50: "ManagedUpdate" ??_C@_1BM@KEAJLGMD@?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1400348C8: "__cdecl _AdjustPointer" __AdjustPointer
0x14000DE8C: WPP_SF_SSSld
0x140046278: "Unknown component enabled" ??_C@_1DE@EKCHFIIK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140036640: "__cdecl NLG_Notify" _NLG_Notify
0x140051120: "sspicli.dll" ??_C@_1BI@KJLMFBNF@?$AAs?$AAs?$AAp?$AAi?$AAc?$AAl?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140049658: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x14002BFA4: "protected: long __cdecl MpService::CDebugMessageBase::Cvt(unsigned short const * __ptr64 * __ptr64) __ptr64" ?Cvt@CDebugMessageBase@MpService@@IEAAJPEAPEBG@Z
0x14002FA50: "public: virtual void * __ptr64 __cdecl CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UEAAPEAXI@Z
0x140055F00: "__vectorcall ??_R3ICmdOptionsLookup@CommonUtil" ??_R3ICmdOptionsLookup@CommonUtil@@8
0x140055D60: "__vectorcall ??_R2ICmdOptionsLookup@CommonUtil" ??_R2ICmdOptionsLookup@CommonUtil@@8
0x14004B190: "ERROR: WriteWscDataProtectionQue" ??_C@_1HE@FDHLGDPL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAD?$AAa?$AAt?$AAa?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAQ?$AAu?$AAe@
0x14003A140: "__cdecl _imp_terminate" __imp_terminate
0x140060FF8: "__cdecl _hmod__USERENV_dll" __hmod__USERENV_dll
0x140040DF8: "Block" ??_C@_1M@PICFELOA@?$AAB?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140051198: "GetFileVersionInfoSizeW" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x140049980: "ERROR: SendProgressNotification " ??_C@_1FG@ELMFJPMO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAe?$AAn?$AAd?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5@
0x140033A88: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x14003E7D8: "EnableService" ??_C@_1BM@GJDCCKLO@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14004F650: "Downloading offline scanner imag" ??_C@_1FM@LNONEAIE@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAs?$AAc?$AAa?$AAn?$AAn?$AAe?$AAr?$AA?5?$AAi?$AAm?$AAa?$AAg@
0x140056B28: "__cdecl _rtc_taa" __rtc_taa
0x14004BB58: "WdNisSvc" ??_C@_1BC@NHCFPMJ@?$AAW?$AAd?$AAN?$AAi?$AAs?$AAS?$AAv?$AAc?$AA?$AA@
0x140039C88: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x14002E518: "long __cdecl CommonUtil::UtilRegSetValueInternal(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegSetValueInternal@CommonUtil@@YAJPEAUHKEY__@@PEBGK_KPEBX@Z
0x14005E7D0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@@8
0x14001D120: "__cdecl get_startup_thread_locale_mode" _get_startup_thread_locale_mode
0x14003A318: bcrypt_NULL_THUNK_DATA
0x1400217B0: "private: virtual void __cdecl CMpSampleHeaderQueueCallback::OnCompletion(struct MpClient::IMpSampleHeaderContext * __ptr64,long,unsigned long) __ptr64" ?OnCompletion@CMpSampleHeaderQueueCallback@@EEAAXPEAUIMpSampleHeaderContext@MpClient@@JK@Z
0x14004EF18: "INFO: verified! " ??_C@_1CC@PGPIBIGC@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAv?$AAe?$AAr?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?$CB?$AA?6?$AA?$AA@
0x14004EAB0: "ahEnumFiles->Next(%ws) failed. (" ??_C@_1EK@DOOHKBDE@?$AAa?$AAh?$AAE?$AAn?$AAu?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?9?$AA?$DO?$AAN?$AAe?$AAx?$AAt?$AA?$CI?$AA?$CF?$AAw?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?5?$AA?$CI@
0x14003E078: "MpCmdRun.exe" ??_C@_1BK@OPEILNJA@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14003E388: "SpyNetService" ??_C@_1BM@EOCCDNBI@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140050B80: "MpService_SpyNetServiceLifeTimou" ??_C@_1EE@BGEDPGJO@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAi?$AAf?$AAe?$AAT?$AAi?$AAm?$AAo?$AAu@
0x140043B70: "Collecting configuration informa" ??_C@_1FC@DOLKNNHB@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAi?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa@
0x140042920: "Direct HTTP" ??_C@_1BI@CALAHAK@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA?5?$AAH?$AAT?$AAT?$AAP?$AA?$AA@
0x140042DB0: "INFO: CreateDirectoryW(%ls) fail" ??_C@_1LC@FOJOKODH@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAW?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x14004AEA0: " Url: %ls " ??_C@_1CM@GINOANBJ@?$AA?5?$AA?5?$AAU?$AAr?$AAl?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14004CC48: "EvtNext" ??_C@_07BOCBCCNK@EvtNext?$AA@
0x14003A1A0: "__cdecl _imp__initterm_e" __imp__initterm_e
0x140041C70: "ERROR: MpDynamicSignatureOpen fa" ??_C@_1GC@EPLGHCKA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa@
0x14004F800: "Reporting results of offline sca" ??_C@_1GA@JGFKJHNM@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAr?$AAe?$AAs?$AAu?$AAl?$AAt?$AAs?$AA?5?$AAo?$AAf?$AA?5?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAs?$AAc?$AAa@
0x140051490: WPP_09d12b6a607230343273d580b3410a72_Traceguids
0x14004A438: " Name: %ls " ??_C@_1CE@EBOFJKJN@?$AA?5?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14002F6D8: HrGetLastFailure
0x1400490F0: WPP_6b0f573afbab34635bbee6b7ba39177e_Traceguids
0x140050780: "WSACleanup" ??_C@_0L@OPKENMEN@WSACleanup?$AA@
0x14003ED00: "ResetPlatform" ??_C@_1BM@JNANMEMP@?$AAR?$AAe?$AAs?$AAe?$AAt?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x14003AB80: "CmdTool: Failed with hr = 0x%08X" ??_C@_1IC@DOMOAAJN@?$AAC?$AAm?$AAd?$AAT?$AAo?$AAo?$AAl?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAh?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX@
0x140060FBC: "private: static bool UnDecorator::fExplicitTemplateParams" ?fExplicitTemplateParams@UnDecorator@@0_NA
0x1400037C8: "void __cdecl InitializeLog(unsigned short const * __ptr64)" ?InitializeLog@@YAXPEBG@Z
0x14003A1E8: api-ms-win-crt-runtime-l1-1-0_NULL_THUNK_DATA
0x14001C0A0: "long __cdecl RunCommandRoles(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandRoles@@YAJPEBUICmdOptionsLookup@CommonUtil@@@Z
0x140009C98: "bool __cdecl MpCmdUtils::IsMoCAMPUpdateInProgress(void)" ?IsMoCAMPUpdateInProgress@MpCmdUtils@@YA_NXZ
0x14003422C: "__cdecl _scrt_is_ucrt_dll_in_use" __scrt_is_ucrt_dll_in_use
0x140039550: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IWeakReference>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@6B@
0x14002C070: "private: long __cdecl MpService::CDebugMessageBase::DoInitComplete(bool) __ptr64" ?DoInitComplete@CDebugMessageBase@MpService@@AEAAJ_N@Z
0x14005AFF0: "__cdecl CT??_R0?AVbad_array_new_length@std@@@8??0bad_array_new_length@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_array_new_length@std@@@8??0bad_array_new_length@std@@QEAA@AEBV01@@Z24
0x140022BA4: "public: virtual __cdecl std::bad_array_new_length::~bad_array_new_length(void) __ptr64" ??1bad_array_new_length@std@@UEAA@XZ
0x140034EF4: "__cdecl _vcrt_initialize" __vcrt_initialize
0x140039DA8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x14004DC70: WPP_fcd17161a7233841b043fb12193414af_Traceguids
0x14003A190: "__cdecl _imp__initialize_onexit_table" __imp__initialize_onexit_table
0x140055A60: "__vectorcall ??_R3CHResultExceptionImpl@CommonUtil" ??_R3CHResultExceptionImpl@CommonUtil@@8
0x140055A78: "__vectorcall ??_R2CHResultExceptionImpl@CommonUtil" ??_R2CHResultExceptionImpl@CommonUtil@@8
0x1400480C0: "System\CurrentControlSet\Control" ??_C@_1IE@JKDCJIGI@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14004D428: "vector<T> too long" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x14001D820: "__cdecl _vcrt_uninitialize_winapi_thunks" __vcrt_uninitialize_winapi_thunks
0x140031AA0: "long __cdecl CommonUtil::MpSmartCoInitialize(struct CommonUtil::MpCoLibraryType * __ptr64 * __ptr64,void * __ptr64,unsigned long)" ?MpSmartCoInitialize@CommonUtil@@YAJPEAPEAUMpCoLibraryType@1@PEAXK@Z
0x14003A4E0: ole32_NULL_THUNK_DATA
0x140039D58: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14005FB68: "__vectorcall ??_R0?AVDontUseNewUseMake@Details@WRL@Microsoft@" ??_R0?AVDontUseNewUseMake@Details@WRL@Microsoft@@@8
0x1400507F0: "S-1-5-20" ??_C@_1BC@BNEOOHKE@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA2?$AA0?$AA?$AA@
0x14004E298: "Any" ??_C@_17FLCDGDNJ@?$AAA?$AAn?$AAy?$AA?$AA@
0x140054518: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140001000: "__cdecl TlgWrite" _TlgWrite
0x140039F70: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x14004BEB8: "ACCEPTS_SHUTDOWN" ??_C@_1CC@JJDGCOKC@?$AAA?$AAC?$AAC?$AAE?$AAP?$AAT?$AAS?$AA_?$AAS?$AAH?$AAU?$AAT?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x1400393E0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@6B@
0x14003A4F0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140050890: "S-1-5-80-3232712927-1625117661-2" ??_C@_1IA@CCFHAHAN@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA3?$AA2?$AA3?$AA2?$AA7?$AA1?$AA2?$AA9?$AA2?$AA7?$AA?9?$AA1?$AA6?$AA2?$AA5?$AA1?$AA1?$AA7?$AA6?$AA6?$AA1?$AA?9?$AA2@
0x140040D68: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x14004F8F8: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140050EA0: "Outbound for HTTPSInbound for HT" ??_C@_1EI@HHOECLMN@?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAH?$AAT?$AAT?$AAP?$AAS?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAH?$AAT@
0x14004F3D0: "Update completed succesfully. N" ??_C@_1HO@CPOLPABC@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?4?$AA?5?$AA?5?$AAN@
0x140054C10: "const OnlineIdTicketVector::`RTTI Complete Object Locator'{for `Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_R4OnlineIdTicketVector@@6B?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x140054DE8: "__vectorcall ??_R2CMpSampleHeaderQueueCallback" ??_R2CMpSampleHeaderQueueCallback@@8
0x140055000: "__vectorcall ??_R3CMpSampleHeaderQueueCallback" ??_R3CMpSampleHeaderQueueCallback@@8
0x1400550F0: "const CMpAzSubmitServiceCallback::`RTTI Complete Object Locator'{for `MpAzSubmit::IMpAzSubmitCallback'}" ??_R4CMpAzSubmitServiceCallback@@6BIMpAzSubmitCallback@MpAzSubmit@@@
0x140039E70: "__cdecl _imp_GetSystemDefaultUILanguage" __imp_GetSystemDefaultUILanguage
0x14003AA50: "ERROR: MpSmartConfigInitialize()" ??_C@_1FM@MJDKAJHO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$CI?$AA?$CJ@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::exception::`vector deleting destructor'(unsigned int) __ptr64" ??_Eexception@std@@UEAAPEAXI@Z
0x140020BA0: "public: virtual void __cdecl CMpAzSubmitServiceCallback::ReportStatus(long,unsigned short const * __ptr64) __ptr64" ?ReportStatus@CMpAzSubmitServiceCallback@@UEAAXJPEBG@Z
0x14002D2E0: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x14001FCD0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IWeakReference>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@UEAAKXZ
0x140051010: "__cdecl GUID_98325047_c671_4174_8d81_defcd3f03186" _GUID_98325047_c671_4174_8d81_defcd3f03186
0x1400556F8: "__vectorcall ??_R3IMpCommunicationLibrary@MpCommunication" ??_R3IMpCommunicationLibrary@MpCommunication@@8
0x1400504A8: WPP_72da7a6a45123e2f480c31364aa17099_Traceguids
0x140055638: "__vectorcall ??_R2IMpCommunicationLibrary@MpCommunication" ??_R2IMpCommunicationLibrary@MpCommunication@@8
0x14004644C: "PM" ??_C@_15CLMNNGEL@?$AAP?$AAM?$AA?$AA@
0x140043CC0: "ERROR: CollectFilesFromDirectory" ??_C@_1GA@KAIEEOKN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAF?$AAi?$AAl?$AAe?$AAs?$AAF?$AAr?$AAo?$AAm?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy@
0x140045F28: "AV signature enabled" ??_C@_1CK@NPMJBAIJ@?$AAA?$AAV?$AA?5?$AAs?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14004D450: "ERROR: MpManagerOpen failed (%X)" ??_C@_1EE@MBNGDJHM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ@
0x14003F840: "0F05C8FF-0B18-43E3-BDFB-9A0C84B0" ??_C@_1EK@IPKJCADH@?$AA0?$AAF?$AA0?$AA5?$AAC?$AA8?$AAF?$AAF?$AA?9?$AA0?$AAB?$AA1?$AA8?$AA?9?$AA4?$AA3?$AAE?$AA3?$AA?9?$AAB?$AAD?$AAF?$AAB?$AA?9?$AA9?$AAA?$AA0?$AAC?$AA8?$AA4?$AAB?$AA0@
0x140031B80: "long __cdecl CommonUtil::MpSysStringAllocSprintf(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?MpSysStringAllocSprintf@CommonUtil@@YAJPEAPEAGPEBGZZ
0x140011930: "protected: virtual void * __ptr64 __cdecl CommonUtil::IRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIRefObject@CommonUtil@@MEAAPEAXI@Z
0x140012678: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x14004FE88: "MpAzSubmitBlobUninitialize" ??_C@_0BL@GBLBDBHH@MpAzSubmitBlobUninitialize?$AA@
0x14005B420: VERSION_NULL_THUNK_DATA_DLN
0x140049740: "MpService_SigUpdServiceShutTimou" ??_C@_1EE@IJMPHFEO@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAi?$AAg?$AAU?$AAp?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAh?$AAu?$AAt?$AAT?$AAi?$AAm?$AAo?$AAu@
0x140039FA0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140036C66: "__cdecl _imp_load_UnloadUserProfile" __imp_load_UnloadUserProfile
0x140008390: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefObject@CommonUtil@@MEAAPEAXI@Z
0x140048740: "preferences" ??_C@_1BI@JLABBGFO@?$AAp?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAs?$AA?$AA@
0x14003A118: api-ms-win-crt-heap-l1-1-0_NULL_THUNK_DATA
0x14002C390: "bool __cdecl CommonUtil::UtilWaitForSingleObjectWithHibernate(void * __ptr64,unsigned long)" ?UtilWaitForSingleObjectWithHibernate@CommonUtil@@YA_NPEAXK@Z
0x140022544: "private: void __cdecl CMpSampleHeaderQueueCallback::ServiceReportInfraError(struct MpClient::IMpSampleHeaderContext * __ptr64,long) __ptr64" ?ServiceReportInfraError@CMpSampleHeaderQueueCallback@@AEAAXPEAUIMpSampleHeaderContext@MpClient@@J@Z
0x14003A2B0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x14004553C: "MP" ??_C@_15DGPGEIEM@?$AAM?$AAP?$AA?$AA@
0x140041530: " Starting Dynamic Signature remo" ??_C@_0CF@OBHNNHDH@?6Starting?5Dynamic?5Signature?5remo@
0x14003A458: "__cdecl _imp_MpConfigInitialize" __imp_MpConfigInitialize
0x1400455A0: "ERROR: UtilCopyFile() failed (%X" ??_C@_1EG@IGOLMIH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAC?$AAo?$AAp?$AAy?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x140054BC0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`RTTI Complete Object Locator'{for `Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x14003A220: "__cdecl _imp_fgetws" __imp_fgetws
0x140046710: "ERROR: FormatTime(...) failed (%" ??_C@_1EI@NDJLPPNK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$CI?$AA?4?$AA?4?$AA?4?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x14004ADE0: " Binary: %ls " ??_C@_1CM@NAHNHENL@?$AA?5?$AA?5?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14004A170: "InstallPath" ??_C@_1BI@NFCPJLAG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14004BBF0: "WARNING: MpCollectServiceInfo("N" ??_C@_1GK@ILBIOMLB@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAN@
0x14004F208: "OfflineScanner_Url" ??_C@_1CG@BIJDBJKK@?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAe?$AAr?$AA_?$AAU?$AAr?$AAl?$AA?$AA@
0x140045058: "%windir%\Logs\Reagent" ??_C@_1CM@FPNDMIOM@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAL?$AAo?$AAg?$AAs?$AA?2?$AAR?$AAe?$AAa?$AAg?$AAe?$AAn?$AAt?$AA?$AA@
0x14004D370: "ERROR: MpGetEventSourceName Fail" ??_C@_1FC@KNHIPEBM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAG?$AAe?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?5?$AAF?$AAa?$AAi?$AAl@
0x1400407D0: "Warning: MpScan() encounter errr" ??_C@_1FO@EHIKLGAJ@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?5?$AAe?$AAr?$AAr?$AAr@
0x14003EA98: "WDEnable " ??_C@_1BE@LADBKAKC@?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?6?$AA?$AA@
0x140041080: "53C9D589-6B66-4F30-9BAB-9A0193B0" ??_C@_1EK@KDBALMAO@?$AA5?$AA3?$AAC?$AA9?$AAD?$AA5?$AA8?$AA9?$AA?9?$AA6?$AAB?$AA6?$AA6?$AA?9?$AA4?$AAF?$AA3?$AA0?$AA?9?$AA9?$AAB?$AAA?$AAB?$AA?9?$AA9?$AAA?$AA0?$AA1?$AA9?$AA3?$AAB?$AA0@
0x1400304E0: "protected: unsigned __int64 __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Hashval(unsigned short const * __ptr64 const & __ptr64)const __ptr64" ?_Hashval@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEBA_KAEBQEBG@Z
0x14004F188: "End: Product Genuine Check " ??_C@_1DI@JDIGOOFI@?$AAE?$AAn?$AAd?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AA?5?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?6?$AA?$AA@
0x14001D820: "private: virtual void __cdecl CommonUtil::CMpThreadPoolItemBase::OnPoolRelease(void) __ptr64" ?OnPoolRelease@CMpThreadPoolItemBase@CommonUtil@@EEAAXXZ
0x140056B18: "__cdecl _rtc_iaa" __rtc_iaa
0x14003A380: "__cdecl _imp_MpQueryEngineConfigDword" __imp_MpQueryEngineConfigDword
0x14001E7E0: "public: virtual long __cdecl OnlineIdTicketIterator::get_Current(struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest * __ptr64 * __ptr64) __ptr64" ?get_Current@OnlineIdTicketIterator@@UEAAJPEAPEAUIOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Z
0x140054A58: "__vectorcall ??_R3RuntimeClassBase@Details@WRL@Microsoft" ??_R3RuntimeClassBase@Details@WRL@Microsoft@@8
0x14004B008: " Name: %ls " ??_C@_1DM@BCLKELB@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140053DD8: "__vectorcall ??_R2RuntimeClassBase@Details@WRL@Microsoft" ??_R2RuntimeClassBase@Details@WRL@Microsoft@@8
0x14002001C: "public: __cdecl Microsoft::WRL::ComPtr<struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest>::~ComPtr<struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest>(void) __ptr64" ??1?$ComPtr@UIOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@WRL@Microsoft@@QEAA@XZ
0x140036BD5: "__cdecl _imp_load_CreateEnvironmentBlock" __imp_load_CreateEnvironmentBlock
0x140041610: " Some files not found during rol" ??_C@_0ML@CEJMMNDE@?6Some?5files?5not?5found?5during?5rol@
0x14001FEB0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x14005B308: "__cdecl TI3?AVCHResultExceptionImpl@CommonUtil@@" _TI3?AVCHResultExceptionImpl@CommonUtil@@
0x14003CFA0: " - The Windows Update his" ??_C@_1LO@GPFGNHCG@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?9?$AA?5?$AAT?$AAh?$AAe?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAh?$AAi?$AAs@
0x140053F00: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x1400476C0: "Software\Classes\APPID\{FDA74D11" ??_C@_1HM@PKHMDPML@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?2?$AA?$HL?$AAF?$AAD?$AAA?$AA7?$AA4?$AAD?$AA1?$AA1@
0x140019A3C: "public: bool __cdecl CommonUtil::CStdRefHashMapBase<struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>::InsertValue(class CQuaMapGuardEntry * __ptr64) __ptr64" ?InsertValue@?$CStdRefHashMapBase@UCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA_NPEAVCQuaMapGuardEntry@@@Z
0x14004DCB0: "ERROR: MpGetProductServiceName f" ??_C@_1GE@NALMGKJM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?5?$AAf@
0x14004F6B0: "%ls\imagepackage-%x.exe" ??_C@_1DA@CMCHMDPD@?$AA?$CF?$AAl?$AAs?$AA?2?$AAi?$AAm?$AAa?$AAg?$AAe?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?9?$AA?$CF?$AAx?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400067E0: "private: bool __cdecl TraceLoggingCorrelationVector::ToStringImpl(unsigned __int64,char * __ptr64) __ptr64" ?ToStringImpl@TraceLoggingCorrelationVector@@AEAA_N_KPEAD@Z
0x140054B18: "__vectorcall ??_R3IInspectable" ??_R3IInspectable@@8
0x140039C58: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x140053E60: "__vectorcall ??_R2IInspectable" ??_R2IInspectable@@8
0x140060150: "__vectorcall ??_R0?AVinvalid_argument@std@" ??_R0?AVinvalid_argument@std@@@8
0x140056B40: "__cdecl tls_end" _tls_end
0x140049250: "EngineVersion" ??_C@_1BM@KPEJNEAK@?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140049CD0: "Update completed succesfully. no" ??_C@_1GC@ONKFECHN@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?4?$AA?5?$AAn?$AAo@
0x140055908: "__vectorcall ??_R1A@?0A@EA@CDebugMessageBase@MpService" ??_R1A@?0A@EA@CDebugMessageBase@MpService@@8
0x140026F8C: "long __cdecl UtilCopyFile(unsigned short const * __ptr64,unsigned short const * __ptr64,int,int)" ?UtilCopyFile@@YAJPEBG0HH@Z
0x140022B40: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultException@CommonUtil@@MEAAPEAXI@Z
0x14003A070: "__cdecl _imp_CryptCATCatalogInfoFromContext" __imp_CryptCATCatalogInfoFromContext
0x140027B94: "long __cdecl UtilSetCabinetParameters(struct CCAB * __ptr64,char const * __ptr64,char const * __ptr64)" ?UtilSetCabinetParameters@@YAJPEAUCCAB@@PEBD1@Z
0x14004C680: "ERROR: GetTimeFormat() failed %X" ??_C@_1EE@FNCBAAEP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAT?$AAi?$AAm?$AAe?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX@
0x140042A10: "Signature Updates" ??_C@_1CE@JMMCENKD@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAs?$AA?$AA@
0x14004C498: "%62s%s " ??_C@_1BA@JLMHHIPK@?$AA?$CF?$AA6?$AA2?$AAs?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14005F270: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x1400541A8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x14003A4F8: "__cdecl _xc_a" __xc_a
0x14005E4D8: "__vectorcall ??_R0?AUIMpIdleNotifierCallback@MpClient@" ??_R0?AUIMpIdleNotifierCallback@MpClient@@@8
0x1400351E4: "void __cdecl __SetState(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64,int)" ?__SetState@@YAXPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@H@Z
0x14004AF20: " State: %d " ??_C@_1CK@MPHPEPC@?$AA?5?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x14004AE10: " Path: %ls " ??_C@_1CM@ECECHGBC@?$AA?5?$AA?5?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14005B038: "__cdecl CTA2?AVbad_exception@std@@" _CTA2?AVbad_exception@std@@
0x1400423D0: "ERROR: UtilLogonUser(%s) Failed " ??_C@_1EI@BMHLFJJF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x1400611F8: "long (__cdecl* __ptr64 g_pfnRoGetActivationFactory)(struct HSTRING__ * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?g_pfnRoGetActivationFactory@@3P6AJPEAUHSTRING__@@AEBU_GUID@@PEAPEAX@ZEA
0x140049538: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140050138: "S-1-5-18\%ws" ??_C@_1BK@ECFMCCBK@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1400465B0: "ERROR: Failed to allocate %d byt" ??_C@_1HA@NNFBMELA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAe?$AA?5?$AA?$CF?$AAd?$AA?5?$AAb?$AAy?$AAt@
0x14004E1D0: "MsMpEng.exe" ??_C@_1BI@LFOOANLJ@?$AAM?$AAs?$AAM?$AAp?$AAE?$AAn?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140053FF0: "__vectorcall ??_R1BA@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R1BA@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140046C08: "%s\%s\%s" ??_C@_1BC@GLIGFLDD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140024DDC: "long __cdecl HrMpAllocBuffer(unsigned char * __ptr64 * __ptr64,unsigned __int64,bool)" ?HrMpAllocBuffer@@YAJPEAPEAE_K_N@Z
0x140054C60: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`RTTI Complete Object Locator'{for `Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x14003F2E0: "--------------------------------" ??_C@_0FH@CHIDGBIL@?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9@
0x14004AF50: " Signed: %d " ??_C@_1CK@LJLBFHAD@?$AA?5?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x14003E3D0: "SampleHeaderService" ??_C@_1CI@DDBJFFAK@?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140023170: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x14000F668: "long __cdecl EventLogToFile(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?EventLogToFile@@YAJPEBG0@Z
0x14004FD50: "combase.dll" ??_C@_1BI@IDAOOPDH@?$AAc?$AAo?$AAm?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400118B0: "public: virtual void * __ptr64 __cdecl CMpSignaturesUpdateServiceCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpSignaturesUpdateServiceCallback@@UEAAPEAXI@Z
0x14003EB50: "WDDisable " ??_C@_1BG@DPJHNPGE@?$AAW?$AAD?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?6?$AA?$AA@
0x140050990: "S-1-5-80-242729624-280608522-221" ??_C@_1HM@JOOFPKPD@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA2?$AA4?$AA2?$AA7?$AA2?$AA9?$AA6?$AA2?$AA4?$AA?9?$AA2?$AA8?$AA0?$AA6?$AA0?$AA8?$AA5?$AA2?$AA2?$AA?9?$AA2?$AA2?$AA1@
0x140050F10: "Inbound for HTTP" ??_C@_1CC@BKNILAFL@?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAH?$AAT?$AAT?$AAP?$AA?$AA@
0x14003A0B0: "__cdecl _imp_RoInitialize" __imp_RoInitialize
0x140049380: "MpService_AllowTestCert" ??_C@_1DA@DKJPFAGM@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAA?$AAl?$AAl?$AAo?$AAw?$AAT?$AAe?$AAs?$AAt?$AAC?$AAe?$AAr?$AAt?$AA?$AA@
0x140055240: "__vectorcall ??_R1A@?0A@EA@out_of_range@std" ??_R1A@?0A@EA@out_of_range@std@@8
0x14003A2F8: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x140040DE8: "Allow" ??_C@_1M@GMDJLGKP@?$AAA?$AAl?$AAl?$AAo?$AAw?$AA?$AA@
0x14004A240: "INFO: RunCommandUnregisterWSC() " ??_C@_1FM@KMJFEDLN@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAW?$AAS?$AAC?$AA?$CI?$AA?$CJ?$AA?5@
0x140032BBC: "long __cdecl CommonUtil::UtilCreateProcess(void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long,struct _STARTUPINFOW * __ptr64,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,bool,void * __ptr64,unsigned short const * __ptr64)" ?UtilCreateProcess@CommonUtil@@YAJPEAPEAXPEBGKPEAU_STARTUPINFOW@@1PEAU_SECURITY_ATTRIBUTES@@3_NPEAX1@Z
0x14004DB20: "Restoring the following quaranti" ??_C@_1FI@JMMNHHMO@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAf?$AAo?$AAl?$AAl?$AAo?$AAw?$AAi?$AAn?$AAg?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi@
0x14002CA8C: "long __cdecl CommonUtil::UtilWriteFile(void * __ptr64,unsigned __int64,void const * __ptr64)" ?UtilWriteFile@CommonUtil@@YAJPEAX_KPEBX@Z
0x14004E8B8: " OS Build/Branch info: %ls. " ??_C@_1DM@CKKFFPMJ@?$AA?6?$AAO?$AAS?$AA?5?$AAB?$AAu?$AAi?$AAl?$AAd?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAc?$AAh?$AA?5?$AAi?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AA?$CF?$AAl?$AAs?$AA?4?$AA?6?$AA?6?$AA?$AA@
0x140039FF0: "__cdecl _imp_FlsGetValue" __imp_FlsGetValue
0x1400491C8: "LastFullScanBytesCount" ??_C@_1CO@LGDPIAPB@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAB?$AAy?$AAt?$AAe?$AAs?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140039CF8: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x1400315E4: "long __cdecl CommonUtil::HrOpenService(struct SC_HANDLE__ * __ptr64 * __ptr64,struct SC_HANDLE__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?HrOpenService@CommonUtil@@YAJPEAPEAUSC_HANDLE__@@PEAU2@PEBGK@Z
0x140039EE0: "__cdecl _imp_FindClose" __imp_FindClose
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpCommunication::IMpSignaturesUpdate>::~AutoRef<struct MpCommunication::IMpSignaturesUpdate>(void) __ptr64" ??1?$AutoRef@UIMpSignaturesUpdate@MpCommunication@@@CommonUtil@@QEAA@XZ
0x14000DBE4: "public: __cdecl LoggerScope::~LoggerScope(void) __ptr64" ??1LoggerScope@@QEAA@XZ
0x140039E18: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x140061190: McGenPreVista
0x1400608D4: "__cdecl _scrt_ucrt_dll_is_in_use" __scrt_ucrt_dll_is_in_use
0x14003AC60: "%1!s! Command Line Utility (c) 2" ??_C@_1NPO@KJEADNCF@?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?5?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAe?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?5?$AA?$CI?$AAc?$AA?$CJ?$AA?5?$AA2@
0x14005B368: "__cdecl _DELAY_IMPORT_DESCRIPTOR_VERSION_dll" __DELAY_IMPORT_DESCRIPTOR_VERSION_dll
0x14001195C: "public: void __cdecl CMpSignaturesUpdateServiceCallback::WaitForCompletion(struct MpCommunication::IMpSignaturesUpdate * __ptr64) __ptr64" ?WaitForCompletion@CMpSignaturesUpdateServiceCallback@@QEAAXPEAUIMpSignaturesUpdate@MpCommunication@@@Z
0x14003A418: "__cdecl _imp_MpScanResult" __imp_MpScanResult
0x1400255E0: "private: long __cdecl MpCommunication::CMpCommunicationLibrary::InitializeWinsock(void) __ptr64" ?InitializeWinsock@CMpCommunicationLibrary@MpCommunication@@AEAAJXZ
0x14004A410: "Product #%u of %u " ??_C@_1CG@PFLIMBOH@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AA?$CD?$AA?$CF?$AAu?$AA?5?$AAo?$AAf?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14005E590: "__vectorcall ??_R0?AVCOfflineScannerDownload@" ??_R0?AVCOfflineScannerDownload@@@8
0x140042C58: "NIS" ??_C@_17FHCFALKB@?$AAN?$AAI?$AAS?$AA?$AA@
0x1400531D0: "__vectorcall ??_R3?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil" ??_R3?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@8
0x1400234C0: "unsigned long __cdecl MpEventRegisterNotFound(struct _GUID const * __ptr64,void (__cdecl*)(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64),void * __ptr64,unsigned __int64 * __ptr64)" ?MpEventRegisterNotFound@@YAKPEBU_GUID@@P6AX0KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z3PEA_K@Z
0x140039778: "const CError::`vftable'" ??_7CError@@6B@
0x140053120: "__vectorcall ??_R2?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil" ??_R2?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@8
0x140052FE0: "const CMpSignaturesUpdateServiceCallback::`RTTI Complete Object Locator'{for `CommonUtil::CRefObject'}" ??_R4CMpSignaturesUpdateServiceCallback@@6BCRefObject@CommonUtil@@@
0x140039860: "const MpService::CDebugMessageBase::`vftable'" ??_7CDebugMessageBase@MpService@@6B@
0x140045270: "DiagOutputDir" ??_C@_1BM@BGKHMJOA@?$AAD?$AAi?$AAa?$AAg?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AAD?$AAi?$AAr?$AA?$AA@
0x1400371FA: "__cdecl _imp_load_FCICreate" __imp_load_FCICreate
0x140011E5C: "void __cdecl RunCommandSignaturesUpdateService(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandSignaturesUpdateService@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14000A14C: "long __cdecl GetNISSupportDir(unsigned short * __ptr64 * __ptr64)" ?GetNISSupportDir@@YAJPEAPEAG@Z
0x140049000: "TraceTimeout" ??_C@_1BK@LFJJNCOH@?$AAT?$AAr?$AAa?$AAc?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x14004FFB0: "MpService_SampleHeaderServiceWai" ??_C@_1FC@LFOIFGCH@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAW?$AAa?$AAi@
0x140054270: "__vectorcall ??_R1A@?0A@EA@?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R1A@?0A@EA@?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140049D50: "ERROR: CoCreateInstance(CLSID_Ws" ??_C@_1IG@HBIPFLJL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$CI?$AAC?$AAL?$AAS?$AAI?$AAD?$AA_?$AAW?$AAs@
0x140050810: "S-1-5-80-1913148863-3492339771-4" ??_C@_1IA@HFIFEKHI@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA1?$AA9?$AA1?$AA3?$AA1?$AA4?$AA8?$AA8?$AA6?$AA3?$AA?9?$AA3?$AA4?$AA9?$AA2?$AA3?$AA3?$AA9?$AA7?$AA7?$AA1?$AA?9?$AA4@
0x140017134: "void __cdecl RunCommandBuildCache(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandBuildCache@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14001D820: "private: virtual void __cdecl COfflineScannerDownload::OnComplete(void) __ptr64" ?OnComplete@COfflineScannerDownload@@EEAAXXZ
0x140043BD0: "ERROR: RunCommandConfigDump() fa" ??_C@_1FC@DPBDMPPL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAD?$AAu?$AAm?$AAp?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x14004EB80: "dismapi.dll" ??_C@_1BI@LGMNKOLA@?$AAd?$AAi?$AAs?$AAm?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140036C8A: "__cdecl configure_wide_argv" _configure_wide_argv
0x140039DE8: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x140061238: "struct tagMP_CLIENT_MISC_CONFIG_EXPORT_FUNCTIONS const * __ptr64 const __ptr64 `MpClientMiscConfigExportFunctions'::`2'::gs_aFuncs" ?gs_aFuncs@?1??MpClientMiscConfigExportFunctions@@9@4PEBUtagMP_CLIENT_MISC_CONFIG_EXPORT_FUNCTIONS@@EB
0x140054220: "__vectorcall ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows" ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@8
0x14004D270: "ERROR: LoadWevtApi Failed (%X) " ??_C@_1EA@NEKALDCM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAW?$AAe?$AAv?$AAt?$AAA?$AAp?$AAi?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x14003FDB8: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x140049788: "MpService_SigUpdForceTimeOut" ??_C@_1DK@OHOAFLCA@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAi?$AAg?$AAU?$AAp?$AAd?$AAF?$AAo?$AAr?$AAc?$AAe?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x140053C20: "__vectorcall ??_R2?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R2?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140039ED0: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x1400549C8: "__vectorcall ??_R3?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R3?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140060128: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x140055B70: "__vectorcall ??_R1A@?0A@EA@CUtilRegEnumSubKeys@CommonUtil" ??_R1A@?0A@EA@CUtilRegEnumSubKeys@CommonUtil@@8
0x140040088: "Scan finished. " ??_C@_0BA@IGHLEKAA@Scan?5finished?4?6?$AA@
0x140046818: " " ??_C@_17MEDFOIMI@?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140045360: "Error: CopySupporLogsToConfigLoc" ??_C@_1GG@ELIAPINO@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAL?$AAo?$AAg?$AAs?$AAT?$AAo?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAL?$AAo?$AAc@
0x1400473A0: "Software\Microsoft\Windows\Curre" ??_C@_1MA@LMFLOPDF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140049948: "ERROR: update timed out. " ??_C@_1DE@KDNDLLFK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAd?$AA?5?$AAo?$AAu?$AAt?$AA?4?$AA?6?$AA?$AA@
0x1400398B0: "const CommonUtil::CUtilRegEnumKeyValues::`vftable'" ??_7CUtilRegEnumKeyValues@CommonUtil@@6B@
0x14002D0E0: "long __cdecl CommonUtil::HrGetFileAttributes(unsigned long * __ptr64,unsigned short const * __ptr64)" ?HrGetFileAttributes@CommonUtil@@YAJPEAKPEBG@Z
0x1400198E0: "public: __cdecl CommonUtil::CStdRefHashMapWideString<class CQuaMapGuardEntry>::~CStdRefHashMapWideString<class CQuaMapGuardEntry>(void) __ptr64" ??1?$CStdRefHashMapWideString@VCQuaMapGuardEntry@@@CommonUtil@@QEAA@XZ
0x140061260: DloadSrwLock
0x14000DDD0: "public: virtual void * __ptr64 __cdecl CRegHandle::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegHandle@@UEAAPEAXI@Z
0x14002ECD0: "public: virtual void * __ptr64 __cdecl CommonUtil::CUtilRegEnumKeyValues::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUtilRegEnumKeyValues@CommonUtil@@UEAAPEAXI@Z
0x1400608A8: "__cdecl _memcpy_nt_iters" __memcpy_nt_iters
0x14004D2B0: "*[System[Provider[@Name='Microso" ??_C@_1IA@GLCGFIA@?$AA?$CK?$AA?$FL?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$FL?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$FL?$AA?$EA?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?8?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo@
0x140020390: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140049A18: "UncDownload" ??_C@_1BI@BJNHDKHG@?$AAU?$AAn?$AAc?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x140036CEA: "__cdecl callnewh" _callnewh
0x140046140: "Auto scan enabled" ??_C@_1CE@LIHOOCIL@?$AAA?$AAu?$AAt?$AAo?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14002C2C8: "void __cdecl CommonUtil::UtilSetEvent(void * __ptr64)" ?UtilSetEvent@CommonUtil@@YAXPEAX@Z
0x140039580: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@12@@
0x140039F08: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x140024200: "long __cdecl MpConfigUtils::GetConfigBoolValue(bool * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64)" ?GetConfigBoolValue@MpConfigUtils@@YAJPEA_NPEBG1PEAW4tagMP_CONFIG_ORIGIN@@@Z
0x14002D784: "long __cdecl CommonUtil::MpNewAlloc(void * __ptr64 * __ptr64,unsigned __int64)" ?MpNewAlloc@CommonUtil@@YAJPEAPEAX_K@Z
0x140033FF0: "public: virtual void * __ptr64 __cdecl std::bad_array_new_length::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_array_new_length@std@@UEAAPEAXI@Z
0x1400406A8: "Finish: MpCleanThreats() " ??_C@_1DE@ENPPPNIN@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x14005E1E8: "__vectorcall ??_R0?AVexception@std@" ??_R0?AVexception@std@@@8
0x140046B88: "%ls " ??_C@_1M@DOJPBEEP@?$AA?$CF?$AAl?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x140007FA0: "void __cdecl RunCommandListSignatureFile(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandListSignatureFile@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x140050728: "MpCommunicationUninitialize" ??_C@_0BM@DDKCDNAI@MpCommunicationUninitialize?$AA@
0x1400611D8: "long (__cdecl* __ptr64 g_pfnWindowsCreateString)(unsigned short const * __ptr64,unsigned int,struct HSTRING__ * __ptr64 * __ptr64)" ?g_pfnWindowsCreateString@@3P6AJPEBGIPEAPEAUHSTRING__@@@ZEA
0x140025E08: MpRpcQuerySystemInfo
0x14003A880: "__cdecl _guard_iat_table" __guard_iat_table
0x14002D7B4: "long __cdecl CommonUtil::HrDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrDuplicateStringW@CommonUtil@@YAJPEAPEAGPEBG@Z
0x140052A58: "__vectorcall ??_R3type_info" ??_R3type_info@@8
0x1400065C8: "public: __cdecl CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>::~AutoRefWrapper<class CQuaMapGuardEntry>(void) __ptr64" ??1?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@QEAA@XZ
0x1400437D8: "ERROR: Dumping Log Failed" ??_C@_1DE@FANICNGJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAD?$AAu?$AAm?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAL?$AAo?$AAg?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140052A70: "__vectorcall ??_R2type_info" ??_R2type_info@@8
0x14004B400: " Remediated?: %ls " ??_C@_1CM@NPHKCKEJ@?$AA?5?$AA?5?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAe?$AAd?$AA?$DP?$AA?3?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x1400477C0: "Software\Classes\CLSID\{2781761E" ??_C@_1HM@EMENFCDJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA7?$AA8?$AA1?$AA7?$AA6?$AA1?$AAE@
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpIdleNotifierCallback>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x140036790: memcpy
0x140022D38: "void __cdecl std::_Xout_of_range(char const * __ptr64)" ?_Xout_of_range@std@@YAXPEBD@Z
0x140050CB8: "BypassInternetCheck" ??_C@_1CI@KFDGEJJO@?$AAB?$AAy?$AAp?$AAa?$AAs?$AAs?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x140047D40: "Software\Classes\CLSID\{A7C452EF" ??_C@_1HM@BLOGENKA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA7?$AAC?$AA4?$AA5?$AA2?$AAE?$AAF@
0x140049690: Spynet_SendReportStartId
0x140030AB0: "public: virtual void * __ptr64 __cdecl CommonUtil::CArgvIter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECArgvIter@CommonUtil@@UEAAPEAXI@Z
0x14004C230: WPP_591c8b43bae83cbb39a420576e90b186_Traceguids
0x14004BEE0: "IGNORES_SHUTDOWN" ??_C@_1CC@HIKIJPH@?$AAI?$AAG?$AAN?$AAO?$AAR?$AAE?$AAS?$AA_?$AAS?$AAH?$AAU?$AAT?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x14004F920: "Auto" ??_C@_19HKELMMGB@?$AAA?$AAu?$AAt?$AAo?$AA?$AA@
0x140039470: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@12@@
0x140039EB8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1400366AC: "__cdecl _vcrt_initialize_locks" __vcrt_initialize_locks
0x14004F5E0: "ERROR: Signature update failed (" ??_C@_1EK@INPHLPFA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x14004B430: " DetectionTimestamp: " ??_C@_1FE@KLABOMJP@?$AA?5?$AA?5?$AA?5?$AA?5?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa?$AAm?$AAp?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1400305D0: "protected: struct std::pair<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,bool> __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Insert<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,struct std::_Not_a_node_tag>(struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@U_Not_a_node_tag@2@@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@_N@1@$$QEAU?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@1@U_Not_a_node_tag@1@@Z
0x14004ACE0: "ERROR: WriteWscCloudProviderQuer" ??_C@_1JI@DCKGCKOD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x14004CEB0: "ERROR: EvtFormatMessage() failed" ??_C@_1EO@DCANJOCO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAt?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140043460: "Microsoft-Windows-Security-Mitig" ??_C@_1GM@NAHADAKI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAM?$AAi?$AAt?$AAi?$AAg@
0x140048520: "SenseGuid;SenseId;" ??_C@_1CG@HBEIFNHO@?$AAS?$AAe?$AAn?$AAs?$AAe?$AAG?$AAu?$AAi?$AAd?$AA?$DL?$AAS?$AAe?$AAn?$AAs?$AAe?$AAI?$AAd?$AA?$DL?$AA?$AA@
0x14003722C: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x1400539D8: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140054890: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140022BA4: "public: virtual __cdecl CError::~CError(void) __ptr64" ??1CError@@UEAA@XZ
0x140054A40: "__vectorcall ??_R3?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R3?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x1400499D8: "MpService_SigUpdServiceOptions" ??_C@_1DO@CGCPANAE@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAi?$AAg?$AAU?$AAp?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x140053DB0: "__vectorcall ??_R2?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R2?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x140042938: "UNC share" ??_C@_1BE@KAFLPLDJ@?$AAU?$AAN?$AAC?$AA?5?$AAs?$AAh?$AAa?$AAr?$AAe?$AA?$AA@
0x1400510C0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400514C0: WPP_f5379c5fbcdd3cc73d52270b5e4c2757_Traceguids
0x140049A30: "HttpDownload" ??_C@_1BK@IKHBNMII@?$AAH?$AAt?$AAt?$AAp?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x140053340: "__vectorcall ??_R2CSyncUpdateCallback" ??_R2CSyncUpdateCallback@@8
0x140053420: "__vectorcall ??_R3CSyncUpdateCallback" ??_R3CSyncUpdateCallback@@8
0x14003A290: api-ms-win-crt-stdio-l1-1-0_NULL_THUNK_DATA
0x140034380: "struct _s_TryBlockMapEntry const * __ptr64 __cdecl _GetRangeOfTrysToCheck(unsigned __int64 * __ptr64,struct _s_FuncInfo const * __ptr64,int,int,unsigned int * __ptr64,unsigned int * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64)" ?_GetRangeOfTrysToCheck@@YAPEBU_s_TryBlockMapEntry@@PEA_KPEBU_s_FuncInfo@@HHPEAI2PEAU_xDISPATCHER_CONTEXT@@@Z
0x140025E64: MpPingService
0x140020F00: "public: __cdecl CMpSampleHeaderQueueCallback::CMpSampleHeaderQueueCallback(void) __ptr64" ??0CMpSampleHeaderQueueCallback@@QEAA@XZ
0x140042D40: "ERROR: UtilExpandEnvironmentStri" ??_C@_1GG@LPDDBPCA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAE?$AAx?$AAp?$AAa?$AAn?$AAd?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AAS?$AAt?$AAr?$AAi@
0x14003A298: "__cdecl _imp_memset" __imp_memset
0x14002F490: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x1400605B8: "__vectorcall ??_R0?AVCUtilRegEnumSubKeys@CommonUtil@" ??_R0?AVCUtilRegEnumSubKeys@CommonUtil@@@8
0x140033EA8: "__cdecl _acrt_initialize" __acrt_initialize
0x14004A0C0: "ERROR: Error deleting WMI instan" ??_C@_1GC@HGNAGG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAd?$AAe?$AAl?$AAe?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAM?$AAI?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn@
0x14003A178: "__cdecl _imp___p___wargv" __imp___p___wargv
0x14004DBA0: "ERROR: QuarantineRestore failed " ??_C@_1EM@CFMMNJIF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14004EB70: WPP_2531d189ce083913bcbd43231f47b482_Traceguids
0x140039D70: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140022A70: ??_E?$CThreadPoolItemFunctorAdapter@V<lambda_86bf783fe1eb1f8a7efa88a94cbd7b6b>@@@CommonUtil@@UEAAPEAXI@Z
0x140061310: DloadSectionCommitPermanent
0x140053980: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x1400200C0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140036C9C: "__cdecl initterm" _initterm
0x140054878: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140039BB0: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x14005FE50: "__vectorcall ??_R0?AUIWeakReference@" ??_R0?AUIWeakReference@@@8
0x140047940: "Software\Classes\CLSID\{195B4D07" ??_C@_1HM@PEMCCPDH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AA9?$AA5?$AAB?$AA4?$AAD?$AA0?$AA7@
0x14002D234: "long __cdecl CommonUtil::UtilDeleteFileNode(unsigned short const * __ptr64)" ?UtilDeleteFileNode@CommonUtil@@YAJPEBG@Z
0x140044D70: "Exporting 'Exploit Mitigation Po" ??_C@_1GK@LIOONFGG@?$AAE?$AAx?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AA?8?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAP?$AAo@
0x140022C54: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x140039DB0: "__cdecl _imp_FileTimeToDosDateTime" __imp_FileTimeToDosDateTime
0x14003E310: "-ScanType" ??_C@_1BE@OGCNINIL@?$AA?9?$AAS?$AAc?$AAa?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140044360: "ERROR: GetLogFile(MPSIGSTUB_LOG_" ??_C@_1HC@MOCECCAK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAS?$AAI?$AAG?$AAS?$AAT?$AAU?$AAB?$AA_?$AAL?$AAO?$AAG?$AA_@
0x140039FE8: "__cdecl _imp_FlsAlloc" __imp_FlsAlloc
0x140020390: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140043DA0: "ERROR: GetLogFile(WINDOWS_UPDATE" ??_C@_1HI@KFIKCFIJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA_?$AAU?$AAP?$AAD?$AAA?$AAT?$AAE@
0x140061050: "__cdecl _hmod__Cabinet_dll" __hmod__Cabinet_dll
0x140061308: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14003E328: "getfiles" ??_C@_1BC@GCLAFMHE@?$AAg?$AAe?$AAt?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14003006C: "long __cdecl CommonUtil::GetCmdOptionsLookupEx(struct CommonUtil::ICmdOptionsLookup * __ptr64 * __ptr64,unsigned long,struct CommonUtil::ISimpleIterator<unsigned short const> * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetCmdOptionsLookupEx@CommonUtil@@YAJPEAPEAUICmdOptionsLookup@1@KPEAU?$ISimpleIterator@$$CBG@1@PEAPEAG@Z
0x140002C8C: wprintf
0x140039E98: "__cdecl _imp_Sleep" __imp_Sleep
0x14002EFE8: "long __cdecl CommonUtil::UtilGetVersionInfo(unsigned char * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilGetVersionInfo@CommonUtil@@YAJPEAPEAEPEBG@Z
0x14005B128: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24
0x140050680: "%02d/%02d/%02d %02d:%02d:%02d.%I" ??_C@_1FA@GLHKDKPC@?$AA?$CF?$AA0?$AA2?$AAd?$AA?1?$AA?$CF?$AA0?$AA2?$AAd?$AA?1?$AA?$CF?$AA0?$AA2?$AAd?$AA?5?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?4?$AA?$CF?$AAI@
0x140045910: "ERROR: Failed to get status info" ??_C@_1GI@IBAKMJLI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?5?$AAi?$AAn?$AAf?$AAo@
0x1400441F0: "ERROR: GetLogFile(MPCMDRUN_LOG_P" ??_C@_1HA@LPIDGEAI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAC?$AAM?$AAD?$AAR?$AAU?$AAN?$AA_?$AAL?$AAO?$AAG?$AA_?$AAP@
0x140054920: "__vectorcall ??_R3?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R3?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x140053B88: "__vectorcall ??_R2?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R2?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x140051528: "__cdecl _real@43e0000000000000" __real@43e0000000000000
0x14004CB28: "MpIdleTask" ??_C@_1BG@NEJIMCML@?$AAM?$AAp?$AAI?$AAd?$AAl?$AAe?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x14003A550: "__cdecl _xi_z" __xi_z
0x140012A18: "public: __cdecl ATL::CComPtr<struct IWscASStatus>::~CComPtr<struct IWscASStatus>(void) __ptr64" ??1?$CComPtr@UIWscASStatus@@@ATL@@QEAA@XZ
0x140042C60: "SupportDirectory" ??_C@_1CC@LJPHFHGN@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x140036CAE: "__cdecl exit" _exit
0x140036618: "__cdecl _vcrt_initialize_pure_virtual_call_handler" __vcrt_initialize_pure_virtual_call_handler
0x140039F20: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x14001C5C0: "public: long __cdecl CMseWatCheck::Initialize(unsigned short const * __ptr64) __ptr64" ?Initialize@CMseWatCheck@@QEAAJPEBG@Z
0x1400531A8: "__vectorcall ??_R1A@?0A@EA@IMpIdleNotifierCallback@MpClient" ??_R1A@?0A@EA@IMpIdleNotifierCallback@MpClient@@8
0x140039798: "const CommonUtil::CHResultException::`vftable'" ??_7CHResultException@CommonUtil@@6B@
0x140060480: "__vectorcall ??_R0?AV?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@@8
0x1400422D0: "Error running as restricted proc" ??_C@_1GA@FADCPFGN@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAr?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAa?$AAs?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?5?$AAp?$AAr?$AAo?$AAc@
0x14004C7A0: WPP_111dbdf41ed53072614507e9be37bf1b_Traceguids
0x14004DD98: "WdBoot" ??_C@_1O@MJKNFPNM@?$AAW?$AAd?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x1400229E8: "public: __cdecl CommonUtil::ScopeGuardImpl<class CMpSpyNetQueueCallback,class CommonUtil::MemFunRef<void,class CMpSpyNetQueueCallback> >::~ScopeGuardImpl<class CMpSpyNetQueueCallback,class CommonUtil::MemFunRef<void,class CMpSpyNetQueueCallback> >(void) __ptr64" ??1?$ScopeGuardImpl@VCMpSpyNetQueueCallback@@V?$MemFunRef@XVCMpSpyNetQueueCallback@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140046320: "ERROR: NULL output string in For" ??_C@_1FC@IMDCLDIK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAU?$AAL?$AAL?$AA?5?$AAo?$AAu?$AAt?$AAp?$AAu?$AAt?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAi?$AAn?$AA?5?$AAF?$AAo?$AAr@
0x1400408A0: "MpCleanThreats() was completed " ??_C@_1EA@NMPAFGDE@?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?6?$AA?$AA@
0x14004A9B8: "wscsvc" ??_C@_1O@BONFFDII@?$AAw?$AAs?$AAc?$AAs?$AAv?$AAc?$AA?$AA@
0x14004BDB8: "STOP_PENDING " ??_C@_1BM@NFCFBAPJ@?$AAS?$AAT?$AAO?$AAP?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x140055168: "__vectorcall ??_R2length_error@std" ??_R2length_error@std@@8
0x14004B3F8: "No" ??_C@_15BICKNCBF@?$AAN?$AAo?$AA?$AA@
0x1400542C0: "__vectorcall ??_R1A@?0A@EA@?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R1A@?0A@EA@?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140055268: "__vectorcall ??_R3length_error@std" ??_R3length_error@std@@8
0x14002F510: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x14004D030: "ERROR: NewSprintfW failed (%X) " ??_C@_1EA@PCLPCECL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAe?$AAw?$AAS?$AAp?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x140018BB8: "public: bool __cdecl CQuarantineInfoComparison::operator()(struct tagMPTHREAT_INFO * __ptr64 const,struct tagMPTHREAT_INFO * __ptr64 const)const __ptr64" ??RCQuarantineInfoComparison@@QEBA_NQEAUtagMPTHREAT_INFO@@0@Z
0x14003A2A0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x140039F68: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140041FE0: "Installation Completed " ??_C@_1DC@LJJIMCGJ@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AA?6?$AA?$AA@
0x14002C314: "bool __cdecl CommonUtil::UtilWaitForSingleObject(void * __ptr64,unsigned long)" ?UtilWaitForSingleObject@CommonUtil@@YA_NPEAXK@Z
0x1400471F0: "ERROR: ReadAndProcessEventLogRec" ??_C@_1IG@IOADFBNN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAa?$AAd?$AAA?$AAn?$AAd?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAR?$AAe?$AAc@
0x14005B1E0: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x1400546F8: "__vectorcall ??_R1A@?0A@EA@IWeakReference" ??_R1A@?0A@EA@IWeakReference@@8
0x140009194: "bool __cdecl MpCmdUtils::IsRunningAsService(void)" ?IsRunningAsService@MpCmdUtils@@YA_NXZ
0x140031908: "long __cdecl CommonUtil::HrChangeServiceConfig(struct SC_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?HrChangeServiceConfig@CommonUtil@@YAJPEAUSC_HANDLE__@@KKKPEBG11111PEAK@Z
0x1400514F0: "DssCounter " ??_C@_1BI@GIKPLMIK@?$AAD?$AAs?$AAs?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?5?$AA?$AA@
0x14004A720: "********************************" ??_C@_1NI@LEAIAFMP@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x140034CE8: "__cdecl _C_specific_handler" __C_specific_handler
0x140040FB0: WPP_5945d8a242413fcbc57426ce7e275bb2_Traceguids
0x140053358: "__vectorcall ??_R2COfflineScannerDownload" ??_R2COfflineScannerDownload@@8
0x140053438: "__vectorcall ??_R3COfflineScannerDownload" ??_R3COfflineScannerDownload@@8
0x140045F90: "Realtime monitor enabled" ??_C@_1DC@NNOBLFHO@?$AAR?$AAe?$AAa?$AAl?$AAt?$AAi?$AAm?$AAe?$AA?5?$AAm?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140041298: "Finish: MpSignatureUpdate() " ??_C@_1DK@JLDIOCBD@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x140048BB0: "PrintRegistryKey on %ws failed. " ??_C@_1EM@IKLCOHCB@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAK?$AAe?$AAy?$AA?5?$AAo?$AAn?$AA?5?$AA?$CF?$AAw?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?5@
0x140039FF8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x14004E288: "Flags" ??_C@_1M@OAJFFPML@?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14002FA50: "public: virtual void * __ptr64 __cdecl CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UEAAPEAXI@Z
0x14004C820: "Idle Task - service shutdown " ??_C@_1DM@MIJECKLB@?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?5?$AA?9?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?6?$AA?$AA@
0x140034540: "__cdecl CallSETranslator" _CallSETranslator
0x14004E7B0: "ERROR: Collect the build string:" ??_C@_1HK@KOFJEHCN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAb?$AAu?$AAi?$AAl?$AAd?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3@
0x14004B550: " ProvisionalRemdiationTimesta" ??_C@_1FE@JJJCBEDG@?$AA?5?$AA?5?$AA?5?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAs?$AAi?$AAo?$AAn?$AAa?$AAl?$AAR?$AAe?$AAm?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa@
0x1400412F0: " Service Version: %S " ??_C@_0BG@JCMMACJC@?6Service?5Version?3?5?$CFS?6?$AA@
0x14004FE50: "MpAzSubmitBlobInitialize" ??_C@_0BJ@LNAKEJLK@MpAzSubmitBlobInitialize?$AA@
0x14003F180: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140045F58: "Realtime monitor disabled" ??_C@_1DE@JGMADCFG@?$AAR?$AAe?$AAa?$AAl?$AAt?$AAi?$AAm?$AAe?$AA?5?$AAm?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1400414A0: "ERROR: PrintEngineVersion failed" ??_C@_1FK@GCMFPCEB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAP?$AAr?$AAi?$AAn?$AAt?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140046620: "ERROR: ReadEventLog() failed (%X" ??_C@_1EG@ONEHPFKG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAa?$AAd?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x140031BAC: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CMpSysStringAllocPolicy,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@UCMpSysStringAllocPolicy@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x14003467C: "__cdecl UnwindNestedFrames" _UnwindNestedFrames
0x140055AF0: "__vectorcall ??_R1A@?0A@EA@IUtilRegEnumSubKeys@CommonUtil" ??_R1A@?0A@EA@IUtilRegEnumSubKeys@CommonUtil@@8
0x140043580: "ERROR: MpGetInstalledProductIden" ??_C@_1IK@MHPKLOGE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAG?$AAe?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAd?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAd?$AAe?$AAn@
0x14004E330: "Info" ??_C@_19GFDACHI@?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x14004FDA0: "RoGetActivationFactory" ??_C@_0BH@ELDDNMMN@RoGetActivationFactory?$AA@
0x140044000: "ERROR: GetLogFile(MPCMDRUN_LOG_P" ??_C@_1HA@MPPEHCOO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAC?$AAM?$AAD?$AAR?$AAU?$AAN?$AA_?$AAL?$AAO?$AAG?$AA_?$AAP@
0x14002BE2C: "private: void __cdecl MpService::CDebugMessageBase::ResetObject(void) __ptr64" ?ResetObject@CDebugMessageBase@MpService@@AEAAXXZ
0x1400550C8: "const CMpAzSubmitServiceCallback::`RTTI Complete Object Locator'{for `CommonUtil::CRefObject'}" ??_R4CMpAzSubmitServiceCallback@@6BCRefObject@CommonUtil@@@
0x14003E3F8: "HighPriority" ??_C@_1BK@NACMIIAJ@?$AAH?$AAi?$AAg?$AAh?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x140008550: "long __cdecl ReinvokeWithRestrictPrivileges(int,unsigned long * __ptr64)" ?ReinvokeWithRestrictPrivileges@@YAJHPEAK@Z
0x140043CB0: "*.etl" ??_C@_1M@FOPAJANJ@?$AA?$CK?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x140053468: "const CSyncUpdateCallback::`RTTI Complete Object Locator'" ??_R4CSyncUpdateCallback@@6B@
0x140042EB0: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x140036790: memmove
0x140054998: "__vectorcall ??_R3?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R3?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140061091: "struct CommonUtil::CCommonThrowWinErr CommonUtil::tWinErr" ?tWinErr@CommonUtil@@3UCCommonThrowWinErr@1@A
0x140053BD8: "__vectorcall ??_R2?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows" ??_R2?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@8
0x140050AC8: "%s\" ??_C@_03JOOLLLO@?$CFs?2?$AA@
0x140041370: "all" ??_C@_17IIFKAHCJ@?$AAa?$AAl?$AAl?$AA?$AA@
0x14003FC90: "WARN: Product/Feature disabled " ??_C@_1EA@OPNJIJGN@?$AAW?$AAA?$AAR?$AAN?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?1?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?6?$AA?$AA@
0x140042630: "ERROR: CreateProcessAsUserW() Fa" ??_C@_1FC@LJILPPOH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAA?$AAs?$AAU?$AAs?$AAe?$AAr?$AAW?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa@
0x14001FC80: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140045588: "%ls-%ls%ls" ??_C@_1BG@JLKCDDCC@?$AA?$CF?$AAl?$AAs?$AA?9?$AA?$CF?$AAl?$AAs?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x140045BD0: "failed to print the IOAV status" ??_C@_1EA@MDMCMFED@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAI?$AAO?$AAA?$AAV?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpCommunication::IMpSignaturesUpdateFactory>::~AutoRef<struct MpCommunication::IMpSignaturesUpdateFactory>(void) __ptr64" ??1?$AutoRef@UIMpSignaturesUpdateFactory@MpCommunication@@@CommonUtil@@QEAA@XZ
0x14003A258: "__cdecl _imp__set_fmode" __imp__set_fmode
0x140019E94: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@@Z
0x140049830: "ERROR: Signatures Update Service" ??_C@_1GO@FGKPJKKC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140060728: "__vectorcall ??_R0?AU?$IForwardIterator@$$CBG@CommonUtil@" ??_R0?AU?$IForwardIterator@$$CBG@CommonUtil@@@8
0x14002BD24: "long __cdecl CommonUtil::CreateNewRefObject<class MpService::CSvcDeviceTicketMessage>(class MpService::CSvcDeviceTicketMessage * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCSvcDeviceTicketMessage@MpService@@@CommonUtil@@YAJPEAPEAVCSvcDeviceTicketMessage@MpService@@@Z
0x14004EF40: "Start: Product Genuine Check " ??_C@_1DM@JBMGOIPD@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AA?5?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?6?$AA?$AA@
0x140061088: WPP_REGISTRATION_GUIDS
0x140024E40: "long __cdecl HrMpDuplicateBinaryBuffer(unsigned char * __ptr64 * __ptr64,unsigned __int64,unsigned char const * __ptr64)" ?HrMpDuplicateBinaryBuffer@@YAJPEAPEAE_KPEBE@Z
0x14000DFC4: WPP_SF_lSS
0x140065008: "__cdecl _imp_FCICreate" __imp_FCICreate
0x1400351B8: "int __cdecl __GetUnwindTryBlock(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64)" ?__GetUnwindTryBlock@@YAHPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@@Z
0x1400541D0: "__vectorcall ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows" ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@8
0x140019B40: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x14003E2D8: "SignatureUpdateAndQuickScan" ??_C@_1DI@PLIABPKI@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAn?$AAd?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x14005EFA0: "__vectorcall ??_R0?AV?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@" ??_R0?AV?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@@8
0x14000DA8C: "protected: __cdecl CommonUtil::CStdPtrContainerBase<class CommonUtil::CStdList<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CAutoMpFile> >::~CStdPtrContainerBase<class CommonUtil::CStdList<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CAutoMpFile> >(void) __ptr64" ??1?$CStdPtrContainerBase@V?$CStdList@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@UCAutoMpFile@@@2@@CommonUtil@@IEAA@XZ
0x1400488A0: "Current configuration options fo" ??_C@_1GC@HBGPECNJ@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAf?$AAo@
0x140046D40: "ERROR: LoadLibraryEx failed (%X)" ??_C@_1EE@MLCHBPAO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ@
0x140033D14: "__cdecl _scrt_uninitialize_crt" __scrt_uninitialize_crt
0x140036CF0: malloc
0x1400611C8: "unsigned short const * __ptr64 (__cdecl* __ptr64 g_pfnWindowsGetStringRawBuffer)(struct HSTRING__ * __ptr64,unsigned int * __ptr64)" ?g_pfnWindowsGetStringRawBuffer@@3P6APEBGPEAUHSTRING__@@PEAI@ZEA
0x140039C48: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x14003A080: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x1400467C0: "ERROR: StringCchCat failed (%X) " ??_C@_1EC@DKEDBDII@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAa?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x140049158: "InstallLocation" ??_C@_1CA@CBMLAMC@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140050370: CLSID_WbemLocator
0x14003A0C0: "__cdecl _imp__wtoi" __imp__wtoi
0x140039DA0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x140035030: "__cdecl _vcrt_freefls" __vcrt_freefls
0x140019C3C: "public: __cdecl std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >::~pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >(void) __ptr64" ??1?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@QEAA@XZ
0x140044CC0: "Getting 'Image File Execution Op" ??_C@_1GA@HMGOEPCE@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AA?8?$AAI?$AAm?$AAa?$AAg?$AAe?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAO?$AAp@
0x140049E40: "INFO: IWscASStatus::Unregister()" ??_C@_1FI@MDMEKLKC@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAI?$AAW?$AAs?$AAc?$AAA?$AAS?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?3?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$CI?$AA?$CJ@
0x140053300: "__vectorcall ??_R3CMseWatCheck" ??_R3CMseWatCheck@@8
0x1400496F0: "MpService_SigUpdServiceBusyTimou" ??_C@_1EE@GGLBAIJL@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAi?$AAg?$AAU?$AAp?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAB?$AAu?$AAs?$AAy?$AAT?$AAi?$AAm?$AAo?$AAu@
0x1400532C0: "__vectorcall ??_R2CMseWatCheck" ??_R2CMseWatCheck@@8
0x1400443E0: "Getting MpSigStub log (2/2)... " ??_C@_1EA@IDFCNCMA@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAS?$AAi?$AAg?$AAS?$AAt?$AAu?$AAb?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA2?$AA?1?$AA2?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x14001D120: "__cdecl _scrt_initialize_mta" __scrt_initialize_mta
0x1400301C0: "public: virtual long __cdecl CommonUtil::CArgvIter::EnumObject(unsigned short const * __ptr64 * __ptr64) __ptr64" ?EnumObject@CArgvIter@CommonUtil@@UEAAJPEAPEBG@Z
0x14004EB00: "%-50ls: version not available. " ??_C@_1EA@CJBCMKOB@?$AA?$CF?$AA?9?$AA5?$AA0?$AAl?$AAs?$AA?3?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAa?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAl?$AAe?$AA?4?$AA?6?$AA?$AA@
0x140011918: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSampleHeaderQueueCallback>::~CRefObjectFor<struct MpClient::IMpSampleHeaderQueueCallback>(void) __ptr64" ??1?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@MEAA@XZ
0x140039C00: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14001A5C0: "public: void __cdecl std::allocator<struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> >::deallocate(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@std@@@std@@QEAAXQEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@_K@Z
0x14004ECF0: "ERROR: MpConfigOpen(%ls) failed." ??_C@_1FI@JPHDAOGA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAO?$AAp?$AAe?$AAn?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4@
0x140050A78: WPP_79be9584630a36a4d8c372cd2a74404e_Traceguids
0x140022760: "void __cdecl RunCommandSampleHeaderService(struct CommonUtil::ICmdOptionsLookup const * __ptr64,bool)" ?RunCommandSampleHeaderService@@YAXPEBUICmdOptionsLookup@CommonUtil@@_N@Z
0x140036D4C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140065018: "__cdecl _imp_FCIAddFile" __imp_FCIAddFile
0x140031784: "long __cdecl CommonUtil::HrControlService(struct SC_HANDLE__ * __ptr64,unsigned long,struct _SERVICE_STATUS * __ptr64)" ?HrControlService@CommonUtil@@YAJPEAUSC_HANDLE__@@KPEAU_SERVICE_STATUS@@@Z
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140044260: "Getting Dynamic Signatures... " ??_C@_1DO@JNOMACK@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140054980: "__vectorcall ??_R3?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows" ??_R3?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows@@8
0x140054388: "__vectorcall ??_R17?0A@EA@IWeakReferenceSource" ??_R17?0A@EA@IWeakReferenceSource@@8
0x140053C00: "__vectorcall ??_R2?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows" ??_R2?$IIterable_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@@Collections@Foundation@Windows@@8
0x1400485D0: "OrgId" ??_C@_1M@HCFMNGOG@?$AAO?$AAr?$AAg?$AAI?$AAd?$AA?$AA@
0x140041378: "DynamicSignatures" ??_C@_1CE@MOKNCDMP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x14003EF10: "ERROR: ValidateMapsConnection fa" ??_C@_1FG@PGPGNPED@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAM?$AAa?$AAp?$AAs?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa@
0x140009D54: "public: __cdecl std::unique_ptr<class IMpAsimovRegister,struct std::default_delete<class IMpAsimovRegister> >::~unique_ptr<class IMpAsimovRegister,struct std::default_delete<class IMpAsimovRegister> >(void) __ptr64" ??1?$unique_ptr@VIMpAsimovRegister@@U?$default_delete@VIMpAsimovRegister@@@std@@@std@@QEAA@XZ
0x140033C54: "__cdecl _scrt_is_nonwritable_in_current_image" __scrt_is_nonwritable_in_current_image
0x14001D120: "public: virtual unsigned __int64 __cdecl CommonUtil::ISimpleIterator<unsigned short const>::Length(void)const __ptr64" ?Length@?$ISimpleIterator@$$CBG@CommonUtil@@UEBA_KXZ
0x14000FC18: swscanf_s
0x140055790: "__vectorcall ??_R2IMpSpyNetQueueCallback@MpClient" ??_R2IMpSpyNetQueueCallback@MpClient@@8
0x140039878: "const CommonUtil::CHResultExceptionImpl::`vftable'" ??_7CHResultExceptionImpl@CommonUtil@@6B@
0x1400410F0: "HTTP" ??_C@_19BMGGGIKC@?$AAH?$AAT?$AAT?$AAP?$AA?$AA@
0x140055778: "__vectorcall ??_R3IMpSpyNetQueueCallback@MpClient" ??_R3IMpSpyNetQueueCallback@MpClient@@8
0x140009D0C: "long __cdecl MpCmdUtils::IsCallingProcessControlAllowed(void)" ?IsCallingProcessControlAllowed@MpCmdUtils@@YAJXZ
0x140054040: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x14004EA30: "================================" ??_C@_1HC@JMEDCHCM@?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN@
0x140053490: "const COfflineScannerDownload::`RTTI Complete Object Locator'" ??_R4COfflineScannerDownload@@6B@
0x140041E10: "Search Completed " ??_C@_1CG@FONEJECE@?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AA?6?$AA?$AA@
0x1400501D8: "//%ws" ??_C@_1M@IOOCHLHN@?$AA?1?$AA?1?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140036CC6: "__cdecl cexit" _cexit
0x140022B40: "public: virtual void * __ptr64 __cdecl std::exception::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gexception@std@@UEAAPEAXI@Z
0x140039FA8: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x14002D2E0: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x14002E880: "public: virtual void * __ptr64 __cdecl CommonUtil::CUtilRegEnumSubKeys::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUtilRegEnumSubKeys@CommonUtil@@UEAAPEAXI@Z
0x140033B2C: "__cdecl _scrt_initialize_crt" __scrt_initialize_crt
0x140032B44: MpDecodeVoidPointer
0x1400455E8: "mpdetection-" ??_C@_1BK@CMJEHFJM@?$AAm?$AAp?$AAd?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?9?$AA?$AA@
0x1400404A8: "Cleaning started... " ??_C@_0BF@NKPPMDOI@Cleaning?5started?4?4?4?6?$AA@
0x140034C30: "__cdecl _std_exception_copy" __std_exception_copy
0x14000A4AC: "long __cdecl GetOfflineScannerSupportDir(unsigned short * __ptr64 * __ptr64)" ?GetOfflineScannerSupportDir@@YAJPEAPEAG@Z
0x140039C78: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x140041560: "last known good" ??_C@_0BA@MNGMIAOB@last?5known?5good?$AA@
0x140047100: "ERROR: MpConfigGetMiscDwordValue" ??_C@_1JG@BPJEPEON@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAG?$AAe?$AAt?$AAM?$AAi?$AAs?$AAc?$AAD?$AAw?$AAo?$AAr?$AAd?$AAV?$AAa?$AAl?$AAu?$AAe@
0x140054338: "__vectorcall ??_R1BB@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R1BB@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x14003A1C8: "__cdecl _imp__configure_wide_argv" __imp__configure_wide_argv
0x14001FC80: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IWeakReference>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@UEAAKXZ
0x140050AA8: "%s_%d.CAB" ??_C@_09LKIOLGNG@?$CFs_?$CFd?4CAB?$AA@
0x140046C68: "EventMessageFile" ??_C@_1CC@JONFAEOP@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140055530: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@8
0x14005E600: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@@8
0x140048F88: "Tracing could not be started: er" ??_C@_0CL@FELCNNEB@Tracing?5could?5not?5be?5started?3?5er@
0x140033EA8: "__cdecl _acrt_uninitialize" __acrt_uninitialize
0x14003A2E0: api-ms-win-crt-string-l1-1-0_NULL_THUNK_DATA
0x140046A90: "Success Audit" ??_C@_1BM@OEBDHAOB@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAA?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
0x1400429E8: "MoCAMPUpdateStarted" ??_C@_1CI@CGHFDDME@?$AAM?$AAo?$AAC?$AAA?$AAM?$AAP?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x140001390: "public: __cdecl CAutoInitMpCmdRun::~CAutoInitMpCmdRun(void) __ptr64" ??1CAutoInitMpCmdRun@@QEAA@XZ
0x1400400A0: "Finish: MpScanStart(MP_FEATURE_S" ??_C@_1HC@HABPHJIJ@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$CI?$AAM?$AAP?$AA_?$AAF?$AAE?$AAA?$AAT?$AAU?$AAR?$AAE?$AA_?$AAS@
0x14004ED60: "ERROR: MpConfigGetValueString(%l" ??_C@_1GM@GEOKHHBP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAG?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$CI?$AA?$CF?$AAl@
0x140025C94: "long __cdecl CommonUtil::UtilQueryJournalInfo(struct CommonUtil::MP_USN_JOURNAL_DATA * __ptr64,void * __ptr64)" ?UtilQueryJournalInfo@CommonUtil@@YAJPEAUMP_USN_JOURNAL_DATA@1@PEAX@Z
0x140036CFC: terminate
0x140034898: "__cdecl IsExceptionObjectToBeDestroyed" _IsExceptionObjectToBeDestroyed
0x140060768: "__vectorcall ??_R0?AVCCmdOptionsLookupMap@CommonUtil@" ??_R0?AVCCmdOptionsLookupMap@CommonUtil@@@8
0x140051168: WPP_64d996b4d6d03873ed8770c93682cc88_Traceguids
0x140008F4C: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoDeleteTimerQueueTimer>::~CUniqueHandle<struct CommonUtil::CAutoDeleteTimerQueueTimer>(void) __ptr64" ??1?$CUniqueHandle@UCAutoDeleteTimerQueueTimer@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140011C30: "private: virtual void __cdecl CMpSignaturesUpdateServiceCallback::OnCompletion(struct tagMPCALLBACK_DATA const * __ptr64) __ptr64" ?OnCompletion@CMpSignaturesUpdateServiceCallback@@EEAAXPEBUtagMPCALLBACK_DATA@@@Z
0x14004E240: "RestrictServiceNetworkAccess don" ??_C@_1EI@OPKDPGID@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAd?$AAo?$AAn@
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct CommonUtil::IForwardIterator<unsigned short const> >::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@UEBAJXZ
0x14004C8F8: "ERROR: StartIdle Failed %X " ??_C@_1DI@EDNNPKHP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAa?$AAr?$AAt?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x140060FCC: "private: static unsigned long UnDecorator::m_recursionLevel" ?m_recursionLevel@UnDecorator@@0KA
0x140061060: WPP_MAIN_CB
0x140044778: "Getting system information... " ??_C@_1DO@MOINMIKN@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAi?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x1400458A0: "ERROR: Failed to open a manager " ??_C@_1GG@GCMAHBPF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAa?$AA?5?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?5@
0x140036660: "__cdecl _NLG_Dispatch2" __NLG_Dispatch2
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSampleHeaderContext>::~AutoRef<struct MpClient::IMpSampleHeaderContext>(void) __ptr64" ??1?$AutoRef@UIMpSampleHeaderContext@MpClient@@@CommonUtil@@QEAA@XZ
0x14004DE30: "ERROR: EnableAndStartService(%s)" ??_C@_1GI@CMHCJPAM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAA?$AAn?$AAd?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ@
0x1400492C0: "SignatureLocation" ??_C@_1CE@MFPKKPOD@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400505F0: "PartnerGUID" ??_C@_1BI@BDPBPLNP@?$AAP?$AAa?$AAr?$AAt?$AAn?$AAe?$AAr?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x140054830: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140053880: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140041928: " Dynamic Signature added success" ??_C@_0CH@KBJMJMIC@?6Dynamic?5Signature?5added?5success@
0x14001E208: "void __cdecl RunCommandSubmitSamples(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandSubmitSamples@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14004E0B0: "EnableService(%d, %u) - finished" ??_C@_1EG@PJDJPELI@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CF?$AAd?$AA?0?$AA?5?$AA?$CF?$AAu?$AA?$CJ?$AA?5?$AA?9?$AA?5?$AAf?$AAi?$AAn?$AAi?$AAs?$AAh?$AAe?$AAd@
0x140049568: "EventUnregister" ??_C@_0BA@FAKLIPIC@EventUnregister?$AA@
0x140020450: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetWeakReference(struct IWeakReference * __ptr64 * __ptr64) __ptr64" ?GetWeakReference@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAPEAUIWeakReference@@@Z
0x140049420: "Failed to remove value %s\%s, er" ??_C@_1FG@JFJOIMAM@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?5?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?5?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?0?$AA?5?$AAe?$AAr@
0x14004C478: "<NO VALUE> " ??_C@_1BI@GOMPGLHD@?$AA?$DM?$AAN?$AAO?$AA?5?$AAV?$AAA?$AAL?$AAU?$AAE?$AA?$DO?$AA?6?$AA?$AA@
0x14005E380: "__vectorcall ??_R0?AUIMpSignaturesUpdateServiceCallback@MpClient@" ??_R0?AUIMpSignaturesUpdateServiceCallback@MpClient@@@8
0x140039848: "const MpService::CSvcDeviceTicketMessage::`vftable'" ??_7CSvcDeviceTicketMessage@MpService@@6B@
0x14005FF30: "__vectorcall ??_R0?AV?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@@8
0x14005E190: "__vectorcall ??_R0?AVbad_array_new_length@std@" ??_R0?AVbad_array_new_length@std@@@8
0x14004E320: "WARNING" ??_C@_1BA@KPCCLDOC@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?$AA@
0x140039C80: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x140027D74: "long __cdecl InitMpCab(unsigned short const * __ptr64,unsigned short const * __ptr64,struct tagMPCAB * __ptr64 * __ptr64)" ?InitMpCab@@YAJPEBG0PEAPEAUtagMPCAB@@@Z
0x140011930: "public: virtual void * __ptr64 __cdecl MpCommunication::IMpSignaturesUpdateCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_EIMpSignaturesUpdateCallback@MpCommunication@@UEAAPEAXI@Z
0x1400466C0: "ERROR: StringCchLength failed (%" ??_C@_1EI@CGIAILDP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x14003A0E8: "__cdecl _imp__callnewh" __imp__callnewh
0x140050E40: "Timeout waiting for driver %s to" ??_C@_1FA@IJGEIEFF@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?5?$AAw?$AAa?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AA?$CF?$AAs?$AA?5?$AAt?$AAo@
0x140055A38: "__vectorcall ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil" ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil@@8
0x140045108: "%windir%\Panther\UnattendGC" ??_C@_1DI@MEGHDGIK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAP?$AAa?$AAn?$AAt?$AAh?$AAe?$AAr?$AA?2?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAG?$AAC?$AA?$AA@
0x140036CD8: "__cdecl configthreadlocale" _configthreadlocale
0x14003DF58: "%s%s%s" ??_C@_1O@JBBHAGJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x14001D820: "__cdecl _scrt_set_unhandled_exception_filter" __scrt_set_unhandled_exception_filter
0x140043E80: "%windir%\temp" ??_C@_1BM@JLCACOFP@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAt?$AAe?$AAm?$AAp?$AA?$AA@
0x140049100: "WppTracingComponents" ??_C@_1CK@CEILCDCN@?$AAW?$AAp?$AAp?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x140041268: "Signature update finished. No up" ??_C@_0CO@MICDEIHC@Signature?5update?5finished?4?5No?5up@
0x140043150: "ERROR: MpCollectServiceInfo("wds" ??_C@_1HC@DAAEAGIH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAw?$AAd?$AAs@
0x140047BC0: "Software\Classes\CLSID\{FDA74D11" ??_C@_1HM@LIHAPJPC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAF?$AAD?$AAA?$AA7?$AA4?$AAD?$AA1?$AA1@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x14005E1C0: "__vectorcall ??_R0?AVbad_exception@std@" ??_R0?AVbad_exception@std@@@8
0x1400402D0: "Scanning %ls found %u threats. " ??_C@_1EA@KCMCLMMO@?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?5?$AA?$CF?$AAu?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?4?$AA?6?$AA?$AA@
0x14000FBF4: "public: __cdecl CSafeArrayPtr<unsigned char,class VolatileOps<unsigned char> >::~CSafeArrayPtr<unsigned char,class VolatileOps<unsigned char> >(void) __ptr64" ??1?$CSafeArrayPtr@EV?$VolatileOps@E@@@@QEAA@XZ
0x14000FBF4: "public: __cdecl CSafeArrayPtr<unsigned short,class VolatileOps<unsigned short> >::~CSafeArrayPtr<unsigned short,class VolatileOps<unsigned short> >(void) __ptr64" ??1?$CSafeArrayPtr@GV?$VolatileOps@G@@@@QEAA@XZ
0x1400403F0: "Skipping clean as this is a cust" ??_C@_1HM@GOABDFFG@?$AAS?$AAk?$AAi?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAl?$AAe?$AAa?$AAn?$AA?5?$AAa?$AAs?$AA?5?$AAt?$AAh?$AAi?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAa?$AA?5?$AAc?$AAu?$AAs?$AAt@
0x14003A218: "__cdecl _imp___stdio_common_vsprintf_s" __imp___stdio_common_vsprintf_s
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSampleHeaderQueueCallback>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x140003A68: "void __cdecl MpCmdLogPrintf(unsigned short const * __ptr64,...)" ?MpCmdLogPrintf@@YAXPEBGZZ
0x14002D008: "long __cdecl CommonUtil::MpIsWow64Process(bool * __ptr64)" ?MpIsWow64Process@CommonUtil@@YAJPEA_N@Z
0x14005E6E0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x140039FB0: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x140022EA4: "public: __cdecl CError::CError(class CError const & __ptr64) __ptr64" ??0CError@@QEAA@AEBV0@@Z
0x14003DFC0: "N/A" ??_C@_17HDJIHIPC@?$AAN?$AA?1?$AAA?$AA?$AA@
0x1400540E0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140055280: "const std::out_of_range::`RTTI Complete Object Locator'" ??_R4out_of_range@std@@6B@
0x140060ED8: "void * __ptr64 (__cdecl* __ptr64 __WinRTOutOfMemoryExceptionCallback)(void)" ?__WinRTOutOfMemoryExceptionCallback@@3P6APEAXXZEA
0x14002BE68: "private: long __cdecl MpService::CDebugMessageBase::AddData(enum tagDebugDataType,unsigned __int64,void const * __ptr64,unsigned char const * __ptr64 * __ptr64) __ptr64" ?AddData@CDebugMessageBase@MpService@@AEAAJW4tagDebugDataType@@_KPEBXPEAPEBE@Z
0x140050468: "GetProcessMitigationPolicy" ??_C@_0BL@OHHPJCHM@GetProcessMitigationPolicy?$AA@
0x14004A528: " Settings: %u " ??_C@_1CK@OEAEGJIP@?$AA?5?$AA?5?$AA?5?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14004F930: "ERROR: MpManagerOpen failed with" ??_C@_1EK@ICFACHOC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh@
0x140039F80: "__cdecl _imp_GetDateFormatW" __imp_GetDateFormatW
0x140047F50: "Software\Microsoft\Windows\Curre" ??_C@_1HA@JDFAKFMG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400453D0: "Purging logs for Windows Securit" ??_C@_1GO@MIEGGAMI@?$AAP?$AAu?$AAr?$AAg?$AAi?$AAn?$AAg?$AA?5?$AAl?$AAo?$AAg?$AAs?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt@
0x140044460: "ERROR: GetLogFile(MPSIGSTUB_LOG_" ??_C@_1HC@PGBPKJHJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAS?$AAI?$AAG?$AAS?$AAT?$AAU?$AAB?$AA_?$AAL?$AAO?$AAG?$AA_@
0x14003F250: "MpCmdRun: Command Line: %s Star" ??_C@_1FK@INCDKGNK@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?3?$AA?5?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?5?$AAS?$AAt?$AAa?$AAr@
0x140041410: "Start: MpRemoveDefinitions(%d) " ??_C@_1EA@NIEOEKPO@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAM?$AAp?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?6?$AA?$AA@
0x14004A618: "WSCInfo.txt" ??_C@_1BI@PLDHJOBD@?$AAW?$AAS?$AAC?$AAI?$AAn?$AAf?$AAo?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x14005EEB0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x1400501A0: "ProxyServer" ??_C@_1BI@KFFHELDP@?$AAP?$AAr?$AAo?$AAx?$AAy?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x1400431E0: "Software\Microsoft\Windows NT\Cu" ??_C@_1JE@FDFIOPDM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14003529C: "public: __cdecl std::bad_exception::bad_exception(class std::bad_exception const & __ptr64) __ptr64" ??0bad_exception@std@@QEAA@AEBV01@@Z
0x14003A0D0: api-ms-win-crt-convert-l1-1-0_NULL_THUNK_DATA
0x140050D90: "HrControlService" ??_C@_0BB@BNIJEOED@HrControlService?$AA@
0x140055BF0: "__vectorcall ??_R1A@?0A@EA@IUtilRegEnumKeyValues@CommonUtil" ??_R1A@?0A@EA@IUtilRegEnumKeyValues@CommonUtil@@8
0x140041558: "none" ??_C@_04CGFJFPFD@none?$AA@
0x140041CD8: "SignatureSet ID: %ws " ??_C@_0BG@HLMGCDPC@SignatureSet?5ID?3?5?$CFws?6?$AA@
0x1400556C8: "__vectorcall ??_R3?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil" ??_R3?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@8
0x140032820: "long __cdecl CommonUtil::MpUtilMicrosoftCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MpUtilMicrosoftCertCheck@CommonUtil@@YAJPEBGKPEAX@Z
0x140055618: "__vectorcall ??_R2?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil" ??_R2?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@8
0x140019E5C: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_comp_alloc@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@XZ
0x14005AFB0: "__cdecl TI3?AVbad_array_new_length@std@@" _TI3?AVbad_array_new_length@std@@
0x14003E8D8: "RestartService" ??_C@_1BO@GLBIKJCK@?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140050910: "S-1-5-80-1523878533-411328482-27" ??_C@_1HO@PDGHKICE@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA1?$AA5?$AA2?$AA3?$AA8?$AA7?$AA8?$AA5?$AA3?$AA3?$AA?9?$AA4?$AA1?$AA1?$AA3?$AA2?$AA8?$AA4?$AA8?$AA2?$AA?9?$AA2?$AA7@
0x140048DA0: " Microsoft Antimalware Setup key" ??_C@_1FK@OPJODOHF@?$AA?6?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAk?$AAe?$AAy@
0x140061090: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x14005B5E8: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x14005E510: "__vectorcall ??_R0?AVCQuaMapGuardEntry@" ??_R0?AVCQuaMapGuardEntry@@@8
0x140039D20: "__cdecl _imp_SleepConditionVariableCS" __imp_SleepConditionVariableCS
0x140061058: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhvierxvUgllohUnkxnwglloUlyquivUznwGEUhgwzucOlyq@MpCmdRun" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUhvierxvUgllohUnkxnwglloUlyquivUznwGEUhgwzucOlyq@MpCmdRun
0x14003FA68: "DisableRemediation" ??_C@_1CG@EJKEJFFC@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140046A50: "Error " ??_C@_1O@ODLKAEDN@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?7?$AA?$AA@
0x140046AF0: "%ls Parameters as they had been " ??_C@_1HM@NPMKDDJH@?$AA?$CF?$AAl?$AAs?$AA?6?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAa?$AAs?$AA?5?$AAt?$AAh?$AAe?$AAy?$AA?5?$AAh?$AAa?$AAd?$AA?5?$AAb?$AAe?$AAe?$AAn?$AA?5@
0x14003A3A0: "__cdecl _imp_MpConfigIteratorEnum" __imp_MpConfigIteratorEnum
0x140060F58: "__cdecl _pPurecall" __pPurecall
0x14005FBA8: "__vectorcall ??_R0?AU?$RuntimeClassFlags@$03@WRL@Microsoft@" ??_R0?AU?$RuntimeClassFlags@$03@WRL@Microsoft@@@8
0x14004D9C0: "ERROR: MpThreatEnumerate failed " ??_C@_1EM@OEKLOBIA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x140043C30: "Collecting Windows Update logs.." ??_C@_1EG@PAADKPAA@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAl?$AAo?$AAg?$AAs?$AA?4?$AA?4@
0x14001D820: "__cdecl initialize_denormal_control" _initialize_denormal_control
0x140041308: "Engine Version: %S " ??_C@_0BE@EHPEMJEH@Engine?5Version?3?5?$CFS?6?$AA@
0x14004B6E0: "********************************" ??_C@_1JO@FNNNEMBE@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x14003A320: "__cdecl _imp_MpConfigDelValue" __imp_MpConfigDelValue
0x14003FAF0: "File" ??_C@_19DDLLJDOO@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x14004FAC8: "MBI_SSL" ??_C@_1BA@PBADAKAI@?$AAM?$AAB?$AAI?$AA_?$AAS?$AAS?$AAL?$AA?$AA@
0x1400512B0: "__NO_STRING_EXPANSION" ??_C@_1CM@ENIDHHDF@?$AA_?$AA_?$AAN?$AAO?$AA_?$AAS?$AAT?$AAR?$AAI?$AAN?$AAG?$AA_?$AAE?$AAX?$AAP?$AAA?$AAN?$AAS?$AAI?$AAO?$AAN?$AA?$AA@
0x140041F40: "Installation Progress- Percent " ??_C@_1JO@NEKPJEDL@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?9?$AA?6?$AA?5?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AA?5@
0x140019C80: "public: __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > > >::~vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > > >(void) __ptr64" ??1?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@QEAA@XZ
0x140042CE0: "%windir%\Microsoft Antimalware\S" ??_C@_1EO@NDNDECH@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAS@
0x14003A3E0: "__cdecl _imp_MpConfigGetValue" __imp_MpConfigGetValue
0x14005B388: "__cdecl _DELAY_IMPORT_DESCRIPTOR_Cabinet_dll" __DELAY_IMPORT_DESCRIPTOR_Cabinet_dll
0x14003A198: "__cdecl _imp_exit" __imp_exit
0x14004FB50: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x14004EBB8: "DismOpenSession" ??_C@_0BA@NCBEJPDP@DismOpenSession?$AA@
0x140030C54: MpCommonConfigGetValue
0x140018C30: "public: __cdecl CQuaMapGuard::~CQuaMapGuard(void) __ptr64" ??1CQuaMapGuard@@QEAA@XZ
0x14002CD2C: "long __cdecl CommonUtil::HrExpandEnvironmentStrings(unsigned short const * __ptr64,unsigned __int64 * __ptr64,unsigned short * __ptr64)" ?HrExpandEnvironmentStrings@CommonUtil@@YAJPEBGPEA_KPEAG@Z
0x140055D78: "__vectorcall ??_R3CArgvIter@CommonUtil" ??_R3CArgvIter@CommonUtil@@8
0x1400456D0: "ERROR: Invalid file handle in Fi" ??_C@_1GK@KMGIKMHF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAh?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?5?$AAi?$AAn?$AA?5?$AAF?$AAi@
0x140055F80: "__vectorcall ??_R2CArgvIter@CommonUtil" ??_R2CArgvIter@CommonUtil@@8
0x140055970: "__vectorcall ??_R1A@?0A@EA@CSvcDeviceTicketMessage@MpService" ??_R1A@?0A@EA@CSvcDeviceTicketMessage@MpService@@8
0x14002B458: "long __cdecl SetupCommon::RestrictServiceNetworkAccess(unsigned short const * __ptr64,unsigned short const * __ptr64,bool)" ?RestrictServiceNetworkAccess@SetupCommon@@YAJPEBG0_N@Z
0x1400224F0: "private: void __cdecl CMpSampleHeaderQueueCallback::OnHandleExit(void) __ptr64" ?OnHandleExit@CMpSampleHeaderQueueCallback@@AEAAXXZ
0x140054608: "__vectorcall ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x1400611E0: "void (__cdecl* __ptr64 g_pfnRoUninitialize)(void)" ?g_pfnRoUninitialize@@3P6AXXZEA
0x14004E420: "ERROR: MpUtilMicrosoftCertCheck(" ??_C@_1GE@GHJHEJGH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAU?$AAt?$AAi?$AAl?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$CI@
0x140046AB0: "Failure Audit" ??_C@_1BM@BFGGMHLB@?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?5?$AAA?$AAu?$AAd?$AAi?$AAt?$AA?$AA@
0x140049AA0: "UNMANAGED" ??_C@_1BE@JGCNOIKC@?$AAU?$AAN?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAD?$AA?$AA@
0x140039DB8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14000678C: sprintf_s
0x14001D970: "public: virtual void * __ptr64 __cdecl CSyncUpdateCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSyncUpdateCallback@@UEAAPEAXI@Z
0x14004F2F0: "https://go.microsoft.com/fwlink/" ??_C@_1FO@IIKLACKN@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1@
0x1400548A8: "__vectorcall ??_R3?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@" ??_R3?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@8
0x1400538B0: "__vectorcall ??_R2?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@" ??_R2?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@8
0x14003A030: OLEAUT32_NULL_THUNK_DATA
0x140055428: "__vectorcall ??_R1A@?0A@EA@CHResultException@CommonUtil" ??_R1A@?0A@EA@CHResultException@CommonUtil@@8
0x140065020: Cabinet_NULL_THUNK_DATA_DLA
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSpyNetQueueFactory>::~AutoRef<struct MpClient::IMpSpyNetQueueFactory>(void) __ptr64" ??1?$AutoRef@UIMpSpyNetQueueFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x140008F6C: "public: __cdecl MpCmdUtils::CUniqueNamedObject::CUniqueNamedObject(unsigned short const * __ptr64) __ptr64" ??0CUniqueNamedObject@MpCmdUtils@@QEAA@PEBG@Z
0x14005FE78: "__vectorcall ??_R0?AUIInspectable@" ??_R0?AUIInspectable@@@8
0x14004C3C0: " %-40s [REG_SZ] : %s " ??_C@_1DO@JPMJINNG@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAS?$AAZ?$AA?$FN?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140043660: "WARNING: GetNISSupportDir() fail" ??_C@_1FC@ELJODJFK@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAN?$AAI?$AAS?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAD?$AAi?$AAr?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x140033D90: atexit
0x14004B858: "__cdecl GUID_642d1bfd_fd78_488d_8e3b_aeb1195fe4de" _GUID_642d1bfd_fd78_488d_8e3b_aeb1195fe4de
0x140011918: "public: virtual __cdecl MpCommunication::IMpSignaturesUpdateCallback::~IMpSignaturesUpdateCallback(void) __ptr64" ??1IMpSignaturesUpdateCallback@MpCommunication@@UEAA@XZ
0x14004EC80: "MseWatUninitialize" ??_C@_0BD@KJPKKAJM@MseWatUninitialize?$AA@
0x14003F960: "ERROR: MpScanControl Failed %X " ??_C@_1EA@JPEPEJCH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x140061228: "class CommonUtil::CMpCriticalSection * __ptr64 __ptr64 g_pcsAsimovLock" ?g_pcsAsimovLock@@3PEAVCMpCriticalSection@CommonUtil@@EA
0x1400415B0: "ERROR: MpRollbackSignature faile" ??_C@_1FM@HOKHMACF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAR?$AAo?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x14004FD40: "__cdecl GUID_bebb0a08_9e73_4077_9614_08614c0bc245" _GUID_bebb0a08_9e73_4077_9614_08614c0bc245
0x140031A3C: "long __cdecl CommonUtil::MpSysStringAllocVSprintf(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?MpSysStringAllocVSprintf@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x14004F630: "ExcludeImage" ??_C@_1BK@OPLAMPOF@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AAI?$AAm?$AAa?$AAg?$AAe?$AA?$AA@
0x14003AA00: CLSID_NetworkListManager
0x140034624: "__cdecl GetImageBase" _GetImageBase
0x140050360: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x14003FAC0: "BootSectorScan" ??_C@_1BO@JLGEIGON@?$AAB?$AAo?$AAo?$AAt?$AAS?$AAe?$AAc?$AAt?$AAo?$AAr?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x14004BF40: "SERVICE_NAME: %s TYPE " ??_C@_1CJG@IPGLIBIK@?$AAS?$AAE?$AAR?$AAV?$AAI?$AAC?$AAE?$AA_?$AAN?$AAA?$AAM?$AAE?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAT?$AAY?$AAP?$AAE?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x140003904: "void __cdecl UninitializeLog(void)" ?UninitializeLog@@YAXXZ
0x14001269C: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x14005B0F0: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x140041E70: "Download Progress- Update Index" ??_C@_1GE@NJPAJEHG@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?9?$AA?6?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAI?$AAn?$AAd?$AAe?$AAx@
0x140042B20: "ERROR: MpConfigGetValueString(%l" ??_C@_1GI@NIGEGEPO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAG?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$CI?$AA?$CF?$AAl@
0x140054658: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x1400149D0: "public: unsigned short * __ptr64 __cdecl std::allocator<unsigned short>::allocate(unsigned __int64) __ptr64" ?allocate@?$allocator@G@std@@QEAAPEAG_K@Z
0x1400546A8: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140039D40: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x14004CBB0: "UtilLoadSystemLibrary(wevtapi.dl" ??_C@_1FO@IBEBIHI@?$AAU?$AAt?$AAi?$AAl?$AAL?$AAo?$AAa?$AAd?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?$CI?$AAw?$AAe?$AAv?$AAt?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl@
0x140036CD2: "__cdecl register_thread_local_exe_atexit_callback" _register_thread_local_exe_atexit_callback
0x14003A2D0: "__cdecl _imp_towlower" __imp_towlower
0x14003F244: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x140052AD0: "__vectorcall ??_R3bad_array_new_length@std" ??_R3bad_array_new_length@std@@8
0x140050158: "CachedProxyAccessType " ??_C@_1CO@OMMMHOMC@?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAP?$AAr?$AAo?$AAx?$AAy?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAT?$AAy?$AAp?$AAe?$AA?5?$AA?$AA@
0x14004A900: "SOFTWARE\Microsoft\Security Cent" ??_C@_1EG@LPAAHCFO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAC?$AAe?$AAn?$AAt@
0x140040570: "ERROR: MpCleanStart() Failed %X " ??_C@_1EC@KMLMGEJL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6@
0x140030ADC: MpCompareOsVersion
0x140052AE8: "__vectorcall ??_R2bad_array_new_length@std" ??_R2bad_array_new_length@std@@8
0x14002E444: "long __cdecl CommonUtil::UtilRegGetValueDword(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?UtilRegGetValueDword@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAK@Z
0x1400507A0: WPP_ed6c02f1dbb933a462a9fd525857ddec_Traceguids
0x14004E790: "BuildLabEx" ??_C@_1BG@CLMGIAOK@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAL?$AAa?$AAb?$AAE?$AAx?$AA?$AA@
0x14003A410: "__cdecl _imp_MpManagerOpen" __imp_MpManagerOpen
0x14004B4F0: " LastKnownGoodUSN: " ??_C@_1FG@KKMLGCMM@?$AA?5?$AA?5?$AA?5?$AA?5?$AAL?$AAa?$AAs?$AAt?$AAK?$AAn?$AAo?$AAw?$AAn?$AAG?$AAo?$AAo?$AAd?$AAU?$AAS?$AAN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x140052DC8: "const HModule::`RTTI Complete Object Locator'" ??_R4HModule@@6B@
0x14003A4D0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400344AC: "void __cdecl __FrameUnwindToEmptyState(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64)" ?__FrameUnwindToEmptyState@@YAXPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@@Z
0x14004D970: "ERROR: MpThreatOpen failed (%X) " ??_C@_1EC@HEEFHMMC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x14004C4A8: " %-40s [REG_BINARY] : " ??_C@_1DI@JBBECHEN@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAB?$AAI?$AAN?$AAA?$AAR?$AAY?$AA?$FN?$AA?5?$AA?5?$AA?5?$AA?3?$AA?5?$AA?$AA@
0x1400541F8: "__vectorcall ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R1A@?0A@EA@?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x14002F550: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x140039F40: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1400205D0: "public: virtual void * __ptr64 __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@UEAAPEAXI@Z
0x140052D70: "__vectorcall ??_R1A@?0A@EA@CRegHandle" ??_R1A@?0A@EA@CRegHandle@@8
0x140043910: "ERROR: EventLogToFile() failed (" ??_C@_1EK@NODEKBPK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAT?$AAo?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x140052E80: "__vectorcall ??_R1BA@?0A@EA@CRefObject@CommonUtil" ??_R1BA@?0A@EA@CRefObject@CommonUtil@@8
0x1400416E0: " Rollback failed. Signature back" ??_C@_0EK@NDHLBMCM@?6Rollback?5failed?4?5Signature?5back@
0x140047FC0: "Software\Policies\Microsoft\Wind" ??_C@_1GE@EKIKPNPO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x140036D26: "__cdecl calloc_base" _calloc_base
0x14004BE80: "PAUSABLE" ??_C@_1BC@KKABJNLL@?$AAP?$AAA?$AAU?$AAS?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpConfigUtils::IMpConfigKeysIterator>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@UEBAJXZ
0x14004E100: "RestrictServiceNetworkAccess ski" ??_C@_1LC@ELKBFLMN@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAs?$AAk?$AAi@
0x140039BB8: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x140055998: "__vectorcall ??_R3CDebugMessageBase@MpService" ??_R3CDebugMessageBase@MpService@@8
0x140011918: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpIdleNotifierCallback>::~CRefObjectFor<struct MpClient::IMpIdleNotifierCallback>(void) __ptr64" ??1?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@MEAA@XZ
0x1400559B0: "__vectorcall ??_R2CDebugMessageBase@MpService" ??_R2CDebugMessageBase@MpService@@8
0x1400472C8: WPP_6720ac43d767317e2abac7f62af33ac6_Traceguids
0x140009F0C: "long __cdecl GetSupportDir(unsigned short * __ptr64 * __ptr64)" ?GetSupportDir@@YAJPEAPEAG@Z
0x140033EA8: "__cdecl _scrt_stub_for_acrt_initialize" __scrt_stub_for_acrt_initialize
0x140040470: "Option -DropRemediation specifie" ??_C@_0DH@DMCEGOAM@Option?5?9DropRemediation?5specifie@
0x140046A78: "Information" ??_C@_1BI@NIHBLACF@?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14005F450: "__vectorcall ??_R0?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@" ??_R0?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@PEAUIUserHostIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@@8
0x140050FE8: "%s Outbound for TCP" ??_C@_1CI@ENMIELAI@?$AA?$CF?$AAs?$AA?5?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAT?$AAC?$AAP?$AA?$AA@
0x140042230: "Error running as network service" ??_C@_1FK@PJLOJJEL@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAr?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAa?$AAs?$AA?5?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14003FFB0: "ERROR: MpScanStart(dwOptions=%u)" ??_C@_1FI@DBFEBNDM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$CI?$AAd?$AAw?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$DN?$AA?$CF?$AAu?$AA?$CJ@
0x1400312E8: "unsigned __int64 __cdecl CommonUtil::UtilGetSystemTimeAsUlong64(void)" ?UtilGetSystemTimeAsUlong64@CommonUtil@@YA_KXZ
0x14004FA60: WPP_7429009a1ee937eea69244fc682b9a27_Traceguids
0x140039BC0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x140049270: "ASSignatureVersion" ??_C@_1CG@BECIMHHC@?$AAA?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14003F2B0: "MpCmdRun: End Time: %s " ??_C@_1DA@OEPEALMJ@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?3?$AA?5?$AAE?$AAn?$AAd?$AA?5?$AAT?$AAi?$AAm?$AAe?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140041B50: "ERROR: MpRemoveDynamicSignatureF" ??_C@_1GO@CMFOFGFB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF@
0x140047DC0: "Software\Classes\TypeLib\{8C3897" ??_C@_1IA@FIGHNOEE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA8?$AAC?$AA3?$AA8?$AA9?$AA7@
0x14004FB40: "__cdecl GUID_cded76fd_7841_52a0_a771_76cd751d13cd" _GUID_cded76fd_7841_52a0_a771_76cd751d13cd
0x140045CF0: "ERROR: %s, hr = 0x%x" ??_C@_1CK@FBOJGABD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?0?$AA?5?$AAh?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x14001AAF4: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > > __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Insert_at<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,struct std::_Not_a_node_tag>(bool,struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64,struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_at@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@U_Not_a_node_tag@2@@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@1@$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@U_Not_a_node_tag@1@@Z
0x14005F0B0: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@@8
0x140055C78: "__vectorcall ??_R1A@?0A@EA@CArgvIter@CommonUtil" ??_R1A@?0A@EA@CArgvIter@CommonUtil@@8
0x140060278: "__vectorcall ??_R0?AUIMpConfigKeysIterator@MpConfigUtils@" ??_R0?AUIMpConfigKeysIterator@MpConfigUtils@@@8
0x140050C20: "MpService_SpyNetServiceDelayRepo" ??_C@_1EG@CFADALKL@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAe?$AAl?$AAa?$AAy?$AAR?$AAe?$AAp?$AAo@
0x14004ECC0: "MpService_NoCertCheck" ??_C@_1CM@DAPJDJJM@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAN?$AAo?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x14005B088: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x140043060: "Software\Policies\Microsoft\Wind" ??_C@_1HK@ODGAIALH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x14003ECC0: "MpWDEnable(FALSE) finished. " ??_C@_1DK@JBNCDLPF@?$AAM?$AAp?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$CI?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$CJ?$AA?5?$AAf?$AAi?$AAn?$AAi?$AAs?$AAh?$AAe?$AAd?$AA?4?$AA?6?$AA?$AA@
0x140047A40: "Software\Classes\CLSID\{361290c0" ??_C@_1HM@NBKIELAO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA6?$AA1?$AA2?$AA9?$AA0?$AAc?$AA0@
0x140040EB0: "ERROR: Unable to get scheduled s" ??_C@_1FM@ODJMKIMJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAs?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAd?$AA?5?$AAs@
0x14003A578: "__cdecl _xt_a" __xt_a
0x14004EBE0: "DismGetFeatures" ??_C@_0BA@KKLHMJIA@DismGetFeatures?$AA@
0x14002F250: MpCreateServiceSid
0x14001E990: "public: virtual long __cdecl OnlineIdTicketIterator::MoveNext(unsigned char * __ptr64) __ptr64" ?MoveNext@OnlineIdTicketIterator@@UEAAJPEAE@Z
0x140022F60: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(unsigned short const * __ptr64) __ptr64" ??0?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@PEBG@Z
0x14005E2F0: "__vectorcall ??_R0?AVCMpSignaturesUpdateServiceCallback@" ??_R0?AVCMpSignaturesUpdateServiceCallback@@@8
0x140053C48: "__vectorcall ??_R2?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows" ??_R2?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@@8
0x140039058: "__cdecl pDestructExceptionObject" _pDestructExceptionObject
0x1400549B0: "__vectorcall ??_R3?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows" ??_R3?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@@8
0x140039E58: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x140039F38: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14003134C: "struct _SYSTEMTIME __cdecl CommonUtil::UtilSystemTimeFromUlong64(unsigned __int64 const & __ptr64)" ?UtilSystemTimeFromUlong64@CommonUtil@@YA?AU_SYSTEMTIME@@AEB_K@Z
0x14001B13C: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_comp_alloc@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@XZ
0x14003516C: "__cdecl _vcrt_uninitialize_ptd" __vcrt_uninitialize_ptd
0x140065028: "__cdecl _imp_LoadUserProfileW" __imp_LoadUserProfileW
0x14003A390: "__cdecl _imp_MpManagerStatusQuery" __imp_MpManagerStatusQuery
0x14003F728: "%-24ws: %ws " ??_C@_1BK@DPIKOKPK@?$AA?$CF?$AA?9?$AA2?$AA4?$AAw?$AAs?$AA?3?$AA?5?$AA?$CF?$AAw?$AAs?$AA?6?$AA?$AA@
0x14004A5E8: " Public: %u " ??_C@_1CK@JGGJBLNI@?$AA?5?$AA?5?$AA?5?$AA?5?$AAP?$AAu?$AAb?$AAl?$AAi?$AAc?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140003FC8: "public: __cdecl CCleanUserContext::~CCleanUserContext(void) __ptr64" ??1CCleanUserContext@@QEAA@XZ
0x140048968: "LastRestorePoint" ??_C@_1CC@CMCLJJNO@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x14002EAD0: "public: virtual long __cdecl CommonUtil::CUtilRegEnumKeyValues::Next(unsigned long * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned __int64 * __ptr64,void const * __ptr64 * __ptr64) __ptr64" ?Next@CUtilRegEnumKeyValues@CommonUtil@@UEAAJPEAKPEAPEBGPEA_KPEAPEBX@Z
0x140002B34: "public: __cdecl CommonUtil::AutoRef<struct MpCommunication::IMpCommunicationLibrary>::~AutoRef<struct MpCommunication::IMpCommunicationLibrary>(void) __ptr64" ??1?$AutoRef@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@QEAA@XZ
0x14003DEF0: "ERROR: MpGetInstalledProductIden" ??_C@_1GI@COGOECOB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAG?$AAe?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAd?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAd?$AAe?$AAn@
0x14004F8C0: WPP_a7f7423298cb390fb11093fcd36d41c5_Traceguids
0x1400552C0: "__vectorcall ??_R3exception@std" ??_R3exception@std@@8
0x140048630: "ERROR: ConfigDumpFromOrigin() fa" ??_C@_1GI@JNBPKGEM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAD?$AAu?$AAm?$AAp?$AAF?$AAr?$AAo?$AAm?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x140055230: "__vectorcall ??_R2exception@std" ??_R2exception@std@@8
0x14004F290: "https://go.microsoft.com/fwlink/" ??_C@_1FO@KKFBFMJM@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1@
0x1400605F0: "__vectorcall ??_R0?AUIUtilRegEnumKeyValues@CommonUtil@" ??_R0?AUIUtilRegEnumKeyValues@CommonUtil@@@8
0x14002BA30: "public: virtual void * __ptr64 __cdecl MpService::CSvcDeviceTicketMessage::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSvcDeviceTicketMessage@MpService@@UEAAPEAXI@Z
0x14003AB10: "MpEnsureProcessMitigationPolicy " ??_C@_1GI@FFHFECNP@?$AAM?$AAp?$AAE?$AAn?$AAs?$AAu?$AAr?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5@
0x140033FF0: "public: virtual void * __ptr64 __cdecl std::bad_exception::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_exception@std@@UEAAPEAXI@Z
0x14005B348: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USERENV_dll" __DELAY_IMPORT_DESCRIPTOR_USERENV_dll
0x140048F30: "ERROR: Creating IMpWppTracing Fa" ??_C@_1FC@JEOBICNN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAM?$AAp?$AAW?$AAp?$AAp?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAF?$AAa@
0x140052C68: "__vectorcall ??_R3CRefObject@CommonUtil" ??_R3CRefObject@CommonUtil@@8
0x14004C240: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x140052C58: "__vectorcall ??_R2CRefObject@CommonUtil" ??_R2CRefObject@CommonUtil@@8
0x14004A0BC: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x1400559C8: "__vectorcall ??_R2CSvcDeviceTicketMessage@MpService" ??_R2CSvcDeviceTicketMessage@MpService@@8
0x140055958: "__vectorcall ??_R3CSvcDeviceTicketMessage@MpService" ??_R3CSvcDeviceTicketMessage@MpService@@8
0x14004DF80: "Stopping user mode services ... " ??_C@_1EC@CLJNCLLN@?$AAS?$AAt?$AAo?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAm?$AAo?$AAd?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?5?$AA?4?$AA?4?$AA?4?$AA?6@
0x1400275A0: "int __cdecl fci_delete(char * __ptr64,int * __ptr64,void * __ptr64)" ?fci_delete@@YAHPEADPEAHPEAX@Z
0x14003A478: "__cdecl _imp_RtlPcToFileHeader" __imp_RtlPcToFileHeader
0x140060F98: "private: static class Replicator * __ptr64 __ptr64 UnDecorator::pZNameList" ?pZNameList@UnDecorator@@0PEAVReplicator@@EA
0x140019CE0: "public: __cdecl std::list<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > >::~list<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > >(void) __ptr64" ??1?$list@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@2@@std@@QEAA@XZ
0x14003A050: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x14003F490: " <===========================LIS" ??_C@_1KE@HIJFPDHA@?$AA?6?$AA?$DM?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AAL?$AAI?$AAS@
0x140052D28: "__vectorcall ??_R2HModule" ??_R2HModule@@8
0x14003A310: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x14002F0FC: "long __cdecl CommonUtil::UtilGetFileVersion(struct tagVS_FIXEDFILEINFO * __ptr64,unsigned char const * __ptr64)" ?UtilGetFileVersion@CommonUtil@@YAJPEAUtagVS_FIXEDFILEINFO@@PEBE@Z
0x140052D98: "__vectorcall ??_R3HModule" ??_R3HModule@@8
0x14003A3D0: "__cdecl _imp_MpManagerStatusQueryEx" __imp_MpManagerStatusQueryEx
0x14004D540: "ERROR: MpQuarantineRequest faile" ??_C@_1HM@EIMFOJNF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140049F90: "INFO: IWscAVStatus::Unregister()" ??_C@_1FI@HGPKLEIA@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAI?$AAW?$AAs?$AAc?$AAA?$AAV?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?3?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$CI?$AA?$CJ@
0x140065010: "__cdecl _imp_FCIFlushCabinet" __imp_FCIFlushCabinet
0x1400439B8: "WHCEvents.txt" ??_C@_1BM@OIPGEPJC@?$AAW?$AAH?$AAC?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140044E20: "ERROR: RunCommandCollectWscInfo " ??_C@_1FK@OIHIBLHN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAW?$AAs?$AAc?$AAI?$AAn?$AAf?$AAo?$AA?5@
0x14001AA98: "public: struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64 __cdecl std::_List_alloc<struct std::_List_base_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >::_Buynode0(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64,struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64) __ptr64" ?_Buynode0@?$_List_alloc@U?$_List_base_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@2@@std@@@std@@QEAAPEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@PEAX@2@PEAU32@0@Z
0x140014B30: "public: void __cdecl std::allocator<unsigned short>::deallocate(unsigned short * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@G@std@@QEAAXQEAG_K@Z
0x140048030: "System\CurrentControlSet\Control" ??_C@_1II@CFFBAJFB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140016BC0: "public: virtual void * __ptr64 __cdecl CMpIdleNotifierCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpIdleNotifierCallback@@UEAAPEAXI@Z
0x140049640: WPP_83016534be8a329a7e6304d44ab80dcb_Traceguids
0x14002D814: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrDuplicateStringW(unsigned short const * __ptr64)" ?TrDuplicateStringW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBG@Z
0x1400240A4: "long __cdecl MpConfigUtils::GetConfigDwordValue(unsigned long * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64)" ?GetConfigDwordValue@MpConfigUtils@@YAJPEAKPEBG1PEAW4tagMP_CONFIG_ORIGIN@@@Z
0x14003E0F0: "Bad Command line - %S " ??_C@_0BH@FCLFBCGF@Bad?5Command?5line?5?9?5?$CFS?6?$AA@
0x14004A558: " Updates: %u " ??_C@_1CK@HCAEMEMG@?$AA?5?$AA?5?$AA?5?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140055A98: "__vectorcall ??_R2IUtilRegEnumSubKeys@CommonUtil" ??_R2IUtilRegEnumSubKeys@CommonUtil@@8
0x140055BC0: "__vectorcall ??_R3IUtilRegEnumSubKeys@CommonUtil" ??_R3IUtilRegEnumSubKeys@CommonUtil@@8
0x140060698: "__vectorcall ??_R0?AVCArgvIter@CommonUtil@" ??_R0?AVCArgvIter@CommonUtil@@@8
0x14004AAC0: WPP_699306651877381d8c029b5b4bc22a56_Traceguids
0x14003A040: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x140020450: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetWeakReference(struct IWeakReference * __ptr64 * __ptr64) __ptr64" ?GetWeakReference@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAPEAUIWeakReference@@@Z
0x1400559E8: "const MpService::CDebugMessageBase::`RTTI Complete Object Locator'" ??_R4CDebugMessageBase@MpService@@6B@
0x140050DB0: "Timeout waiting for driver %s to" ??_C@_1EO@OFBMPHKN@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?5?$AAw?$AAa?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AA?$CF?$AAs?$AA?5?$AAt?$AAo@
0x1400514B0: WPP_eda3c69f213e36a5ca49fbf53f3f1e1f_Traceguids
0x140033F50: "__cdecl RTC_Terminate" _RTC_Terminate
0x140047AC0: "Software\Classes\CLSID\{DACA056E" ??_C@_1HM@KHCIOMGF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAD?$AAA?$AAC?$AAA?$AA0?$AA5?$AA6?$AAE@
0x140049660: Spynet_SendReportComplete
0x14005E9E0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x1400461E8: "IPC enabled" ??_C@_1BI@IEOGJPMC@?$AAI?$AAP?$AAC?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14003A2A8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140039D30: "__cdecl _imp_InitializeConditionVariable" __imp_InitializeConditionVariable
0x14003A450: "__cdecl _imp_MpWDEnable" __imp_MpWDEnable
0x140045C68: "failed to print the NRI status" ??_C@_1DO@LCOFFBCI@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAN?$AAR?$AAI?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140025DC8: "long __cdecl CommonUtil::MpNewBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@G@CommonUtil@@YAJPEAPEAG_K@Z
0x14004ED48: "WATPath" ??_C@_1BA@OFLEFBJ@?$AAW?$AAA?$AAT?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140018D30: "public: virtual void * __ptr64 __cdecl CQuaMapGuardEntry::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuaMapGuardEntry@@UEAAPEAXI@Z
0x14004E730: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1FK@EDIIEKBJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140042B98: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14004FBA0: "unsigned short const * const RuntimeClass_Windows_Internal_Security_WebAuthentication_AuthenticationManager" ?RuntimeClass_Windows_Internal_Security_WebAuthentication_AuthenticationManager@@3QBGB
0x140046ACC: " " ??_C@_13KDLDGPGJ@?$AA?7?$AA?$AA@
0x140040690: "Cleaning finished. " ??_C@_0BE@MNCPAMBH@Cleaning?5finished?4?6?$AA@
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSpyNetQueueCallback>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x140044FB0: "ERROR: RunCommandCollectWscRegis" ??_C@_1GK@FKONHAMO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAW?$AAs?$AAc?$AAR?$AAe?$AAg?$AAi?$AAs@
0x14001D820: "private: virtual void __cdecl COfflineScannerDownload::OnCancel(void) __ptr64" ?OnCancel@COfflineScannerDownload@@EEAAXXZ
0x140041830: "ERROR: MpAddDynamicSignatureFile" ??_C@_1GI@FPEJKHHG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAA?$AAd?$AAd?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF?$AAi?$AAl?$AAe@
0x140054F58: "__vectorcall ??_R1A@?0A@EA@IMpAzSubmitCallback@MpAzSubmit" ??_R1A@?0A@EA@IMpAzSubmitCallback@MpAzSubmit@@8
0x140052B08: "__vectorcall ??_R1A@?0A@EA@bad_array_new_length@std" ??_R1A@?0A@EA@bad_array_new_length@std@@8
0x140030BEC: MpCommonConfigLookupDword
0x14003A0B8: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x140050A38: "ForcePassiveMode" ??_C@_1CC@DNBODIEF@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAP?$AAa?$AAs?$AAs?$AAi?$AAv?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14002D44C: MpIsRpcSrvUnavailable
0x14003E108: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x140055C30: "__vectorcall ??_R1A@?0A@EA@CUtilRegEnumKeyValues@CommonUtil" ??_R1A@?0A@EA@CUtilRegEnumKeyValues@CommonUtil@@8
0x14002D9D8: "long __cdecl CommonUtil::UtilCheckTokenMembership(bool * __ptr64,void * __ptr64,void * __ptr64)" ?UtilCheckTokenMembership@CommonUtil@@YAJPEA_NPEAX1@Z
0x140040330: "Scanning %ls was skipped. " ??_C@_1DG@DDBCBIHF@?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAs?$AAk?$AAi?$AAp?$AAp?$AAe?$AAd?$AA?4?$AA?6?$AA?$AA@
0x14003A000: KERNEL32_NULL_THUNK_DATA
0x1400503D0: "Software\Microsoft\Windows Defen" ??_C@_1FK@NEAJLKAE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn@
0x140039DC0: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x140061258: "__cdecl _puiHead" __puiHead
0x140051050: "__cdecl GUID_e2b3c97f_6ae1_41ac_817a_f6f92166d7dd" _GUID_e2b3c97f_6ae1_41ac_817a_f6f92166d7dd
0x14002DEE8: "long __cdecl CommonUtil::UtilRegCreateKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long)" ?UtilRegCreateKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGKPEAU_SECURITY_ATTRIBUTES@@K@Z
0x140060320: "__vectorcall ??_R0?AVCMpCommunicationLibrary@MpCommunication@" ??_R0?AVCMpCommunicationLibrary@MpCommunication@@@8
0x140042970: "unknown path" ??_C@_1BK@NKJOIFPC@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?$AA@
0x14001A828: "protected: struct std::pair<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,bool> __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Insert<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,struct std::_Not_a_node_tag>(struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@U_Not_a_node_tag@2@@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@_N@1@$$QEAU?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@1@U_Not_a_node_tag@1@@Z
0x140033FCC: "public: __cdecl std::bad_array_new_length::bad_array_new_length(void) __ptr64" ??0bad_array_new_length@std@@QEAA@XZ
0x140054FE8: "__vectorcall ??_R3?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil" ??_R3?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@8
0x14001FD60: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140008364: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpUpdateSourceInfoFree>::~CUniqueHandle<struct CAutoMpUpdateSourceInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpUpdateSourceInfoFree@@@CommonUtil@@QEAA@XZ
0x140054E10: "__vectorcall ??_R2?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil" ??_R2?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@8
0x14002F744: "public: unsigned long __cdecl CommonUtil::ICmdOptionsLookup::LookupDword(unsigned short const * __ptr64,unsigned long)const __ptr64" ?LookupDword@ICmdOptionsLookup@CommonUtil@@QEBAKPEBGK@Z
0x140039F90: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140033A90: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x14005B2C0: "__cdecl TI3?AVCError@@" _TI3?AVCError@@
0x14004B3F0: "Yes" ??_C@_17PBAHFJOA@?$AAY?$AAe?$AAs?$AA?$AA@
0x1400557C0: "__vectorcall ??_R1A@?0A@EA@IMpSpyNetQueueCallback@MpClient" ??_R1A@?0A@EA@IMpSpyNetQueueCallback@MpClient@@8
0x140039CD0: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x14004F710: "ERROR: Download offline scanner " ??_C@_1FK@MOKAMIMM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAs?$AAc?$AAa?$AAn?$AAn?$AAe?$AAr?$AA?5@
0x140027330: "__int64 __cdecl fci_open(char * __ptr64,int,int,int * __ptr64,void * __ptr64)" ?fci_open@@YA_JPEADHHPEAHPEAX@Z
0x140019154: "void __cdecl RunCommandQuarantineRestore(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandQuarantineRestore@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14005E900: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@@8
0x140006298: "bool __cdecl IsProductEnabled(void)" ?IsProductEnabled@@YA_NXZ
0x140022BA4: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x140050D80: "HrOpenService" ??_C@_0O@LPNMDFJA@HrOpenService?$AA@
0x14002E880: "public: virtual void * __ptr64 __cdecl CommonUtil::CUtilRegEnumSubKeys::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUtilRegEnumSubKeys@CommonUtil@@UEAAPEAXI@Z
0x14004FD88: "RoActivateInstance" ??_C@_0BD@HNHPAIIG@RoActivateInstance?$AA@
0x140009428: "unsigned short const * __ptr64 __cdecl MpCmdUtils::GetUpdateType(struct tagMPSIGUPDATE_DATA const * __ptr64)" ?GetUpdateType@MpCmdUtils@@YAPEBGPEBUtagMPSIGUPDATE_DATA@@@Z
0x14004EBF0: "DismDelete" ??_C@_0L@KOOOEMCO@DismDelete?$AA@
0x1400478C0: "Software\Classes\CLSID\{A2D75874" ??_C@_1HM@JPKLGJJC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AAD?$AA7?$AA5?$AA8?$AA7?$AA4@
0x14004FE40: WPP_b64fb3f27c6f3bc2b2232da77c1e11be_Traceguids
0x1400391E0: "const MpCommunication::IMpSignaturesUpdateCallback::`vftable'" ??_7IMpSignaturesUpdateCallback@MpCommunication@@6B@
0x14004C668: "[UTC] %s " ??_C@_1BE@DHJJALDO@?$AA?$FL?$AAU?$AAT?$AAC?$AA?$FN?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x140054908: "__vectorcall ??_R3?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@" ??_R3?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@8
0x14004FB00: "__cdecl GUID_00000037_0000_0000_c000_000000000046" _GUID_00000037_0000_0000_c000_000000000046
0x14004F350: "https://go.microsoft.com/fwlink/" ??_C@_1FO@BCONDLPJ@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1@
0x140053A10: "__vectorcall ??_R2?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@" ??_R2?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@8
0x140036D2C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140049178: "OfflineTargetOS" ??_C@_1CA@LDENJIGI@?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAO?$AAS?$AA?$AA@
0x140061040: "__cdecl tls_index" _tls_index
0x14003EE78: "Revert not needed. Already runni" ??_C@_0DD@IJKAHLJO@Revert?5not?5needed?4?5Already?5runni@
0x14004DC40: "map/set<T> too long" ??_C@_0BE@JONHPENG@map?1set?$DMT?$DO?5too?5long?$AA@
0x140006690: "public: bool __cdecl TraceLoggingCorrelationVector::Increment(char * __ptr64) __ptr64" ?Increment@TraceLoggingCorrelationVector@@QEAA_NPEAD@Z
0x1400467A8: "%.4Ix: " ??_C@_1BA@HHDLBPFI@?$AA?$CF?$AA?4?$AA4?$AAI?$AAx?$AA?3?$AA?5?$AA?$AA@
0x14003F600: "ERROR: MpThreatOpen() Failed %X " ??_C@_1EC@PLOMKCOG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAO?$AAp?$AAe?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6@
0x14004C740: "ERROR: Failed to get registry va" ??_C@_1GA@BDFHOEEO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAv?$AAa@
0x14004BD18: "KERNEL_DRIVER " ??_C@_1BO@GOGFGENO@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x140019BB4: "public: __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::~_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAA@XZ
0x14002DDE0: "long __cdecl CommonUtil::UtilRegOpenKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilRegOpenKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGK@Z
0x140042B88: "Support" ??_C@_1BA@OFGGDIGO@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AA?$AA@
0x14001E9B0: "public: virtual long __cdecl CommonUtil::CArgvIter::Clone(struct CommonUtil::IForwardIterator<unsigned short const> * __ptr64 * __ptr64,bool)const __ptr64" ?Clone@CArgvIter@CommonUtil@@UEBAJPEAPEAU?$IForwardIterator@$$CBG@2@_N@Z
0x14001266C: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x140050CE0: WPP_56e902a76ad834be58d8b2b3a1dd6068_Traceguids
0x140029090: "private: virtual void __cdecl CMpSpyNetQueueCallback::OnCompletion(struct MpClient::IMpSpyNetContext * __ptr64,long,unsigned long) __ptr64" ?OnCompletion@CMpSpyNetQueueCallback@@EEAAXPEAUIMpSpyNetContext@MpClient@@JK@Z
0x1400364D4: "__cdecl _TypeMatch" __TypeMatch
0x14003DF80: "Microsoft Antimalware Service" ??_C@_1DM@PGGPKDOG@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14003A248: "__cdecl _imp__wsopen_dispatch" __imp__wsopen_dispatch
0x140043EA0: "ERROR: GetLogFile(MPCMDRUN_LOG_P" ??_C@_1HA@PHMPPJJN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAC?$AAM?$AAD?$AAR?$AAU?$AAN?$AA_?$AAL?$AAO?$AAG?$AA_?$AAP@
0x140019948: "public: class CQuaMapGuardEntry * __ptr64 __cdecl CommonUtil::CStdRefHashMapBase<struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>::LookupValue(unsigned short const * __ptr64 const & __ptr64)const __ptr64" ?LookupValue@?$CStdRefHashMapBase@UCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@QEBAPEAVCQuaMapGuardEntry@@AEBQEBG@Z
0x14004EE70: "INFO: Verifying MSE WAT DLL(%ls)" ??_C@_1EK@DIGODJMB@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAS?$AAE?$AA?5?$AAW?$AAA?$AAT?$AA?5?$AAD?$AAL?$AAL?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ@
0x1400412D8: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x14003EA80: "WDEnable" ??_C@_1BC@MMPHIKMB@?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140020640: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAKXZ
0x140060000: "__vectorcall ??_R0?AUIMpAzSubmitCallback@MpAzSubmit@" ??_R0?AUIMpAzSubmitCallback@MpAzSubmit@@@8
0x14004BD00: "ADAPTER " ??_C@_1BC@OHEPOMLM@?$AAA?$AAD?$AAA?$AAP?$AAT?$AAE?$AAR?$AA?5?$AA?$AA@
0x14004D750: "Name" ??_C@_19DINFBLAK@?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14003FD50: "NoToast" ??_C@_1BA@KNMKFJCL@?$AAN?$AAo?$AAT?$AAo?$AAa?$AAs?$AAt?$AA?$AA@
0x140048698: "system policy" ??_C@_1BM@NAPNGCL@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x140039068: "const std::bad_exception::`vftable'" ??_7bad_exception@std@@6B@
0x140050188: "CachedProxy" ??_C@_1BI@OHBBOFKK@?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAP?$AAr?$AAo?$AAx?$AAy?$AA?$AA@
0x140044E80: "Getting WSC providers... " ??_C@_1DE@LMOAKFAF@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAS?$AAC?$AA?5?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x1400420A0: "Update completed succesfully. (h" ??_C@_1FI@PCMCHCLJ@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?4?$AA?5?$AA?$CI?$AAh@
0x140056B38: "__cdecl tls_start" _tls_start
0x14002CCC4: "long __cdecl CommonUtil::UtilIsDirectoryExists(unsigned short const * __ptr64)" ?UtilIsDirectoryExists@CommonUtil@@YAJPEBG@Z
0x140008EAC: "public: __cdecl MpCmdUtils::CTerminationTimer::CTerminationTimer(unsigned long) __ptr64" ??0CTerminationTimer@MpCmdUtils@@QEAA@K@Z
0x1400547D0: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x140053720: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x14005E0E0: "struct tagMPIDENTITY_ITEM * g_IdentityList" ?g_IdentityList@@3PAUtagMPIDENTITY_ITEM@@A
0x140033E80: "__cdecl get_startup_file_mode" _get_startup_file_mode
0x14004A8D8: "WSCRegistry.txt" ??_C@_1CA@CONDLGMH@?$AAW?$AAS?$AAC?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140048928: "LastScanRun" ??_C@_1BI@MMFKMHMK@?$AAL?$AAa?$AAs?$AAt?$AAS?$AAc?$AAa?$AAn?$AAR?$AAu?$AAn?$AA?$AA@
0x14002C570: "long __cdecl CommonUtil::UtilLoadLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilLoadLibrary@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBG@Z
0x140060238: "__vectorcall ??_R0?AVCMpConfigKeysIterator@MpConfigUtils@" ??_R0?AVCMpConfigKeysIterator@MpConfigUtils@@@8
0x14003A560: "__cdecl _xl_z" __xl_z
0x140012A18: "public: __cdecl ATL::CComPtr<struct IWscAVStatus>::~CComPtr<struct IWscAVStatus>(void) __ptr64" ??1?$CComPtr@UIWscAVStatus@@@ATL@@QEAA@XZ
0x140011930: "public: virtual void * __ptr64 __cdecl MpCommunication::IMpSignaturesUpdateCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIMpSignaturesUpdateCallback@MpCommunication@@UEAAPEAXI@Z
0x140039C28: "__cdecl _imp_GetOldestEventLogRecord" __imp_GetOldestEventLogRecord
0x14003A388: "__cdecl _imp_MpConfigSetValue" __imp_MpConfigSetValue
0x14003A308: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x140042800: "You need administrator privilege" ??_C@_1HI@PINGMAMA@?$AAY?$AAo?$AAu?$AA?5?$AAn?$AAe?$AAe?$AAd?$AA?5?$AAa?$AAd?$AAm?$AAi?$AAn?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?5?$AAp?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe@
0x1400436C0: "WARNING: GetAppLayerLogsDir() fa" ??_C@_1FG@OLOMLCGH@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAA?$AAp?$AAp?$AAL?$AAa?$AAy?$AAe?$AAr?$AAL?$AAo?$AAg?$AAs?$AAD?$AAi?$AAr?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x1400608A4: "__cdecl _isa_enabled" __isa_enabled
0x14005EDC0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x14005B4F8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14004A3F0: "productState" ??_C@_1BK@MKCDHNID@?$AAp?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x1400553C8: "__vectorcall ??_R2CError" ??_R2CError@@8
0x140018B18: "private: static void __cdecl std::vector<unsigned short,class std::allocator<unsigned short> >::_Xlength(void)" ?_Xlength@?$vector@GV?$allocator@G@std@@@std@@CAXXZ
0x1400553E8: "__vectorcall ??_R3CError" ??_R3CError@@8
0x14004EC98: "MseWatIsGenuine" ??_C@_0BA@OMKMNKLP@MseWatIsGenuine?$AA@
0x140040368: "Scanning %ls was skipped. " ??_C@_0BL@DHEBEDHN@Scanning?5?$CFls?5was?5skipped?4?6?$AA@
0x14004CDA0: "ERROR: std::vector::resize() fai" ??_C@_1FE@NHKMFNGJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAs?$AAt?$AAd?$AA?3?$AA?3?$AAv?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?3?$AA?3?$AAr?$AAe?$AAs?$AAi?$AAz?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi@
0x14003A488: "__cdecl _imp_RtlUnwindEx" __imp_RtlUnwindEx
0x140049A70: "UnmanagedUpdate" ??_C@_1CA@KLINCHJG@?$AAU?$AAn?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140033A24: "void __cdecl operator delete(void * __ptr64,unsigned __int64)" ??3@YAXPEAX_K@Z
0x140061048: "__cdecl _hmod__VERSION_dll" __hmod__VERSION_dll
0x140014174: "long __cdecl RunCommandCollectWscInfo(unsigned short const * __ptr64)" ?RunCommandCollectWscInfo@@YAJPEBG@Z
0x140060510: "__vectorcall ??_R0?AVCSvcDeviceTicketMessage@MpService@" ??_R0?AVCSvcDeviceTicketMessage@MpService@@@8
0x140051158: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x14003AA20: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x14004E3B0: "Cmd.exe" ??_C@_1BA@CGJHELIG@?$AAC?$AAm?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14003FD30: "CpuThrottling" ??_C@_1BM@MBOHFGF@?$AAC?$AAp?$AAu?$AAT?$AAh?$AAr?$AAo?$AAt?$AAt?$AAl?$AAi?$AAn?$AAg?$AA?$AA@
0x140040638: "Additional Actions Required" ??_C@_1DI@KMDDJBLJ@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?5?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x1400484B0: "SOFTWARE\Microsoft\Windows Advan" ??_C@_1GM@MFNCBCLA@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAA?$AAd?$AAv?$AAa?$AAn@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpWppTracing>::~AutoRef<struct MpClient::IMpWppTracing>(void) __ptr64" ??1?$AutoRef@UIMpWppTracing@MpClient@@@CommonUtil@@QEAA@XZ
0x140039748: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x140039FC8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140039260: "const CMpSignaturesUpdateServiceCallback::`vftable'{for `MpClient::IMpSignaturesUpdateServiceCallback'}" ??_7CMpSignaturesUpdateServiceCallback@@6BIMpSignaturesUpdateServiceCallback@MpClient@@@
0x1400451A0: "%windir%\System32\recovery" ??_C@_1DG@JECPNPKP@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?$AA@
0x1400445B0: "Cache_filename_dump-123455722.bi" ??_C@_1EE@JHKMBFAN@?$AAC?$AAa?$AAc?$AAh?$AAe?$AA_?$AAf?$AAi?$AAl?$AAe?$AAn?$AAa?$AAm?$AAe?$AA_?$AAd?$AAu?$AAm?$AAp?$AA?9?$AA1?$AA2?$AA3?$AA4?$AA5?$AA5?$AA7?$AA2?$AA2?$AA?4?$AAb?$AAi@
0x140039DD0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140039D08: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x14004D8F0: "Recovery path for quarantined it" ??_C@_1HK@NDJHFBPL@?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd?$AA?5?$AAi?$AAt@
0x140060628: "__vectorcall ??_R0?AVCUtilRegEnumKeyValues@CommonUtil@" ??_R0?AVCUtilRegEnumKeyValues@CommonUtil@@@8
0x14005B610: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-locale-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-locale-l1-1-0
0x14004FD78: "RoUninitialize" ??_C@_0P@LLFHBIJD@RoUninitialize?$AA@
0x140048840: "ERROR: Failed to dump Windows Se" ??_C@_1FK@EALJNEBI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe@
0x1400392D0: "const CSyncUpdateCallback::`vftable'" ??_7CSyncUpdateCallback@@6B@
0x140053380: "__vectorcall ??_R1A@?0A@EA@CSyncUpdateCallback" ??_R1A@?0A@EA@CSyncUpdateCallback@@8
0x14004CC60: "EvtOpenPublisherMetadata" ??_C@_0BJ@OOLFKAOE@EvtOpenPublisherMetadata?$AA@
0x14002CF2C: "long __cdecl CommonUtil::UtilRawGetLoadedKernel32ProcAddress(__int64 (__cdecl* * __ptr64)(void),char const * __ptr64,bool)" ?UtilRawGetLoadedKernel32ProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBD_N@Z
0x1400392B0: "const CQuaMapGuardEntry::`vftable'" ??_7CQuaMapGuardEntry@@6B@
0x1400492E8: "SpyNet" ??_C@_1O@NLELDOCF@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AA?$AA@
0x140048550: "SOFTWARE\Microsoft\Windows Advan" ??_C@_1HK@LLIALPMD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAA?$AAd?$AAv?$AAa?$AAn@
0x14003E1C0: "Scan" ??_C@_19IGDFBFF@?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x140054A88: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140053DE8: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140039E68: "__cdecl _imp_FlsSetValue" __imp_FlsSetValue
0x14001B100: "public: struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64 __cdecl std::_List_buy<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > >::_Buynode<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64,struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64,struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > &&) __ptr64" ??$_Buynode@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@?$_List_buy@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@2@@std@@QEAAPEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@PEAX@1@PEAU21@0$$QEAU?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@1@@Z
0x140051508: WPP_d687c91f690a37be98da15452e5b8be7_Traceguids
0x14003A238: "__cdecl _imp_getchar" __imp_getchar
0x14003E650: "RemoveDynamicSignature" ??_C@_1CO@NIJPPJEN@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x14002D50C: "long __cdecl CommonUtil::NewSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?NewSprintfW@CommonUtil@@YAJPEAPEAGPEBGZZ
0x140046FF0: "ERROR: GetOldestEventLogRecord()" ??_C@_1FM@EOKFKILB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAO?$AAl?$AAd?$AAe?$AAs?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?$CI?$AA?$CJ@
0x140042E68: "DynamicSignatureLocation" ??_C@_1DC@OMELLKPL@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14004BD70: " ERROR " ??_C@_1BA@LNAJBCCO@?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?5?$AA?$AA@
0x14003F158: "MpCmdRun_MaxLogSize" ??_C@_1CI@GBKPKGLE@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAM?$AAa?$AAx?$AAL?$AAo?$AAg?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140041020: "MpCmdRun_SignatureUpdateTerminat" ??_C@_1FG@NNOKAPKK@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt@
0x14003EB70: "ERROR: CheckClientIdentity() fai" ??_C@_1FE@HAPEOBOH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAh?$AAe?$AAc?$AAk?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi@
0x140034594: "__cdecl CreateFrameInfo" _CreateFrameInfo
0x140036D02: "__cdecl initialize_onexit_table" _initialize_onexit_table
0x140048330: "Software\Wow6432Node\Classes\CLS" ??_C@_1JE@MNFMPHLG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS@
0x140060E78: "__cdecl _scrt_native_startup_lock" __scrt_native_startup_lock
0x14003E6B8: "GenuineCheck" ??_C@_1BK@GAPMCMKE@?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x140036E50: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400491F8: "LastQuickScanResourceCount" ??_C@_1DG@IAOAKGEG@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1400534E0: "__vectorcall ??_R2OnlineIdTicketVector" ??_R2OnlineIdTicketVector@@8
0x1400547B8: "__vectorcall ??_R3OnlineIdTicketVector" ??_R3OnlineIdTicketVector@@8
0x1400607E0: "__vectorcall ??_R0?AVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@" ??_R0?AVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@8
0x14004C1E0: "System\CurrentControlSet\Service" ??_C@_1EK@FCCDNFHF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140040F5C: "%u!" ??_C@_03JHPCMALH@?$CFu?$CB?$AA@
0x14003FB60: "ERROR: MpConfigLoadScanParameter" ??_C@_1FK@DJLBLIOE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAL?$AAo?$AAa?$AAd?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr@
0x14003D060: " - All relevant %1!s! reg" ??_C@_1OIG@DKOAOJNA@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?9?$AA?5?$AAA?$AAl?$AAl?$AA?5?$AAr?$AAe?$AAl?$AAe?$AAv?$AAa?$AAn?$AAt?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?5?$AAr?$AAe?$AAg@
0x1400514D0: "__cdecl GUID_dcb00000_570f_4a9b_8d69_199fdba5723b" _GUID_dcb00000_570f_4a9b_8d69_199fdba5723b
0x14004E6A8: "FileVersions.txt" ??_C@_1CC@MADNCICJ@?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140045E98: "AS signature disabled" ??_C@_1CM@CDMNINPG@?$AAA?$AAS?$AA?5?$AAs?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14004FE08: "WindowsDeleteString" ??_C@_0BE@IJKKHGMH@WindowsDeleteString?$AA@
0x14005060C: "{" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x14003A3C8: "__cdecl _imp_MpUpdateStartEx" __imp_MpUpdateStartEx
0x140033DA8: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140052ED0: "__vectorcall ??_R17?0A@EA@IMpSignaturesUpdateCallback@MpCommunication" ??_R17?0A@EA@IMpSignaturesUpdateCallback@MpCommunication@@8
0x140050510: "MpConfig_SystemRunningOnBatterie" ??_C@_1EE@JIECFHFC@?$AAM?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA_?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AAO?$AAn?$AAB?$AAa?$AAt?$AAt?$AAe?$AAr?$AAi?$AAe@
0x140065000: "__cdecl _imp_FCIDestroy" __imp_FCIDestroy
0x140046258: "ELAM enabled" ??_C@_1BK@MOJMCCCE@?$AAE?$AAL?$AAA?$AAM?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14000DC4C: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x14003EEE0: "ValidateMapsConnection " ??_C@_1DA@NMEOLHPJ@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAM?$AAa?$AAp?$AAs?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?6?$AA?$AA@
0x140050348: "Unknown exception" ??_C@_0BC@EOODALEL@Unknown?5exception?$AA@
0x1400472E0: "Software\Microsoft\Windows\Curre" ??_C@_1LM@FKKHEJHK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140052E68: "__vectorcall ??_R2IMpSignaturesUpdateServiceCallback@MpClient" ??_R2IMpSignaturesUpdateServiceCallback@MpClient@@8
0x140052FC8: "__vectorcall ??_R3IMpSignaturesUpdateServiceCallback@MpClient" ??_R3IMpSignaturesUpdateServiceCallback@MpClient@@8
0x14003A4B0: "__cdecl _imp_IIDFromString" __imp_IIDFromString
0x140020DC0: "public: virtual long __cdecl CMpAzSubmitServiceCallback::RetrieveNextChunk(unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?RetrieveNextChunk@CMpAzSubmitServiceCallback@@UEAAJPEAPEAEPEA_K@Z
0x140040120: "Finish: MpScan(MP_FEATURE_SUPPOR" ??_C@_1BAE@MMBBFPAM@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AAM?$AAP?$AA_?$AAF?$AAE?$AAA?$AAT?$AAU?$AAR?$AAE?$AA_?$AAS?$AAU?$AAP?$AAP?$AAO?$AAR@
0x1400304C8: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAuto_fclose>::~CUniqueHandle<struct CommonUtil::CAuto_fclose>(void) __ptr64" ??1?$CUniqueHandle@UCAuto_fclose@CommonUtil@@@CommonUtil@@QEAA@XZ
0x1400342B4: "unsigned __int64 * __ptr64 __cdecl _GetEstablisherFrame(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64,unsigned __int64 * __ptr64)" ?_GetEstablisherFrame@@YAPEA_KPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@0@Z
0x140050A60: "PassiveMode" ??_C@_1BI@KIIBCOID@?$AAP?$AAa?$AAs?$AAs?$AAi?$AAv?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x140048C60: " Microsoft Antimalware keys from" ??_C@_1EO@OCDOGFK@?$AA?6?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAk?$AAe?$AAy?$AAs?$AA?5?$AAf?$AAr?$AAo?$AAm@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpProductGenuineCheckFactory>::~AutoRef<struct MpClient::IMpProductGenuineCheckFactory>(void) __ptr64" ??1?$AutoRef@UIMpProductGenuineCheckFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x14004A5B8: " Private: %u " ??_C@_1CK@FEBKOOHN@?$AA?5?$AA?5?$AA?5?$AA?5?$AAP?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14003A180: "__cdecl _imp___p___argc" __imp___p___argc
0x14004FB30: "__cdecl GUID_ae363a51_a0de_5827_80f4_961b407b40c2" _GUID_ae363a51_a0de_5827_80f4_961b407b40c2
0x14004CC20: "EvtCreateRenderContext" ??_C@_0BH@EPKLGGNK@EvtCreateRenderContext?$AA@
0x140019EE8: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Extract(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >) __ptr64" ?_Extract@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@2@@Z
0x14004D330: "ERROR: EvtQuery failed (%X) " ??_C@_1DK@FJHFMAHF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAt?$AAQ?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x14004D1B0: "ERROR: ExtractEventMessage faile" ??_C@_1FA@DMIBOBII@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140042D30: "%ls" ??_C@_17CNPHIMPH@?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x14004B110: "ERROR: WriteWscDataProtectionQue" ??_C@_1HK@FMGNMIKL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAD?$AAa?$AAt?$AAa?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAQ?$AAu?$AAe@
0x140034F28: "__cdecl _vcrt_uninitialize" __vcrt_uninitialize
0x140007DC0: "void __cdecl RunCommandRemoveSignatureFile(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandRemoveSignatureFile@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14004CCA0: "ERROR: EvtCreateRenderContex() f" ??_C@_1FI@JEBJBPBM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAt?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AA?$CI?$AA?$CJ?$AA?5?$AAf@
0x14001D970: "public: virtual void * __ptr64 __cdecl CSyncUpdateCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSyncUpdateCallback@@UEAAPEAXI@Z
0x14004B088: " Guid: %ls " ??_C@_1DM@LGPHIFJD@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAG?$AAu?$AAi?$AAd?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14004AA50: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x14004AA90: "__cdecl GUID_f896ca54_fe09_4403_86d4_23cb488d81d8" _GUID_f896ca54_fe09_4403_86d4_23cb488d81d8
0x14003A538: "__cdecl _PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib" __PLEASE_LINK_WITH_legacy_stdio_wide_specifiers.lib
0x14003FD60: "folder" ??_C@_1O@GOIANJP@?$AAf?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x140050338: WPP_c3aab097dd0e33b750ebfc0ccee548a5_Traceguids
0x140060360: "__vectorcall ??_R0?AUIMpCommunicationLibrary@MpCommunication@" ??_R0?AUIMpCommunicationLibrary@MpCommunication@@@8
0x140049D38: WPP_bbdfd46450ed3d940ea0d81e727ce51c_Traceguids
0x140035234: "int __cdecl __StateFromIp(struct _s_FuncInfo const * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,unsigned __int64)" ?__StateFromIp@@YAHPEBU_s_FuncInfo@@PEAU_xDISPATCHER_CONTEXT@@_K@Z
0x14003A9C0: "bad exception" ??_C@_0O@DPKOEFFH@bad?5exception?$AA@
0x140039C20: "__cdecl _imp_OpenEventLogW" __imp_OpenEventLogW
0x14003F670: "----------------------------- Th" ??_C@_1KC@FOHGMMFJ@?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?5?$AAT?$AAh@
0x140012A18: "public: __cdecl ATL::CComPtr<struct IWbemServices>::~CComPtr<struct IWbemServices>(void) __ptr64" ??1?$CComPtr@UIWbemServices@@@ATL@@QEAA@XZ
0x140046040: "IOAV protection disabled" ??_C@_1DC@EDMMBAIO@?$AAI?$AAO?$AAA?$AAV?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140046C20: "ERROR: RegOpenKeyEx failed (%X) " ??_C@_1EC@OKEIDAPM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAO?$AAp?$AAe?$AAn?$AAK?$AAe?$AAy?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x14004AEE0: "None" ??_C@_19KLMLHLJG@?$AAN?$AAo?$AAn?$AAe?$AA?$AA@
0x14004AFE0: " - Detection #%u " ??_C@_1CG@JEOLHPEF@?$AA?5?$AA?5?$AA?9?$AA?5?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CD?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14004EC68: "MseWatInitialize" ??_C@_0BB@HEGHNCHO@MseWatInitialize?$AA@
0x14002BB50: "long __cdecl MpService::MpRpcSendDeviceTicketMessage(long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?MpRpcSendDeviceTicketMessage@MpService@@YAJJPEBG0@Z
0x140019C3C: "public: __cdecl std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >::~pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >(void) __ptr64" ??1?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@QEAA@XZ
0x14005079C: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x14003FAFC: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x140028918: McTemplateMofU0
0x140024B8C: "long __cdecl MpConfigUtils::GetProductServiceName(unsigned short * __ptr64 * __ptr64)" ?GetProductServiceName@MpConfigUtils@@YAJPEAPEAG@Z
0x140051148: "LogonUserW" ??_C@_0L@MOMAIAMD@LogonUserW?$AA@
0x140039D80: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x1400011B0: WPP_SF_
0x140022F54: "void __cdecl AssertPrecondition(bool,long)" ?AssertPrecondition@@YAX_NJ@Z
0x140053258: "__vectorcall ??_R1A@?0A@EA@CQuaMapGuardEntry" ??_R1A@?0A@EA@CQuaMapGuardEntry@@8
0x1400464A0: "ERROR: StringCchPrintfW failed (" ??_C@_1EK@FOKJENKI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAP?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x14004CC50: "EvtClose" ??_C@_08HJNINAG@EvtClose?$AA@
0x1400445F8: "%windir%\temp\" ??_C@_1BO@GACOGHGO@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAt?$AAe?$AAm?$AAp?$AA?2?$AA?$AA@
0x14004FB70: "__cdecl GUID_00000036_0000_0000_c000_000000000046" _GUID_00000036_0000_0000_c000_000000000046
0x14004AA38: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x140039E50: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14004B780: WPP_a1440771475b3b14b3f5f7bb8d681b28_Traceguids
0x14003A128: api-ms-win-crt-locale-l1-1-0_NULL_THUNK_DATA
0x140049528: WPP_8638f854183f33afd144222b6e532682_Traceguids
0x1400459B0: "----------------------- Antimalw" ??_C@_1KE@JEECNHOB@?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?5?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw@
0x14005B584: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x140039ED8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x14004AAB0: "__cdecl GUID_722a338c_6e8e_4e72_ac27_1417fb0c81c2" _GUID_722a338c_6e8e_4e72_ac27_1417fb0c81c2
0x140043B00: "Collecting events from System Ev" ??_C@_1FI@BFFFCMKL@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAE?$AAv@
0x140039440: "const AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`vftable'" ??_7?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@6B@
0x140053450: "__vectorcall ??_R3IMpDownloadCallback@MpCommunication" ??_R3IMpDownloadCallback@MpCommunication@@8
0x140053370: "__vectorcall ??_R2IMpDownloadCallback@MpCommunication" ??_R2IMpDownloadCallback@MpCommunication@@8
0x140054C88: "const OnlineIdTicketIterator::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_R4OnlineIdTicketIterator@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@@
0x140044D20: "ERROR: DumpIFEOKeys failed (%X) " ??_C@_1EC@KEEOBCHJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAD?$AAu?$AAm?$AAp?$AAI?$AAF?$AAE?$AAO?$AAK?$AAe?$AAy?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x14003F1E0: " ------------------------------" ??_C@_0FJ@EHCDMIOB@?6?6?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9@
0x14004B2A0: "ERROR: WriteWscDataProtectionQue" ??_C@_1GG@DLCDIOGO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAD?$AAa?$AAt?$AAa?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAQ?$AAu?$AAe@
0x14004AF80: " Type: %d " ??_C@_1CK@NKHKKJFE@?$AA?5?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x1400205D0: "public: virtual void * __ptr64 __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@UEAAPEAXI@Z
0x140054B48: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@6B@
0x140039E60: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x140049C70: "Update Started " ??_C@_1CA@JMIHBJIG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?6?$AA?$AA@
0x14005B3A8: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140051200: "VerQueryValueW" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x140046380: "ERROR: FileTimeToLocalFileTime(." ??_C@_1GC@DEHHEHGJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAT?$AAo?$AAL?$AAo?$AAc?$AAa?$AAl?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$CI?$AA?4@
0x140018B18: "private: static void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > > >::_Xlength(void)" ?_Xlength@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@CAXXZ
0x14003A430: "__cdecl _imp_MpHandleClose" __imp_MpHandleClose
0x14005E420: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x14004A0B4: "="" ??_C@_15PMOCCNJK@?$AA?$DN?$AA?$CC?$AA?$AA@
0x140035C34: "void __cdecl _CallMemberFunction2(void * __ptr64 const,void * __ptr64 const,void * __ptr64 const,int)" ?_CallMemberFunction2@@YAXQEAX00H@Z
0x14003FD10: "ScanProgress" ??_C@_1BK@PLDNNMAK@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x140053560: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x140039D28: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x140054770: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x140034050: "void __cdecl __scrt_throw_std_bad_array_new_length(void)" ?__scrt_throw_std_bad_array_new_length@@YAXXZ
0x140050300: "End: SampleHeader Service " ??_C@_1DG@EPKPGABL@?$AAE?$AAn?$AAd?$AA?3?$AA?5?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x140049068: "Trace ended . . . " ??_C@_1CG@EMALMHLB@?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?5?$AAe?$AAn?$AAd?$AAe?$AAd?$AA?5?$AA?4?$AA?5?$AA?4?$AA?5?$AA?4?$AA?6?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IWinTaskSchedulerFactory>::~AutoRef<struct MpClient::IWinTaskSchedulerFactory>(void) __ptr64" ??1?$AutoRef@UIWinTaskSchedulerFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x14005B250: "__cdecl CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32" _CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32
0x140055140: "const std::exception::`RTTI Complete Object Locator'" ??_R4exception@std@@6B@
0x14001B64C: "void __cdecl RunCommandServiceHardening(void)" ?RunCommandServiceHardening@@YAXXZ
0x1400313FC: "unsigned long __cdecl CommonUtil::MpGetPerfTimeInMsec(union _LARGE_INTEGER)" ?MpGetPerfTimeInMsec@CommonUtil@@YAKT_LARGE_INTEGER@@@Z
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct CommonUtil::IEnumFiles>::~AutoRef<struct CommonUtil::IEnumFiles>(void) __ptr64" ??1?$AutoRef@UIEnumFiles@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140055598: "__vectorcall ??_R3CMpConfigKeysIterator@MpConfigUtils" ??_R3CMpConfigKeysIterator@MpConfigUtils@@8
0x1400554A8: "__vectorcall ??_R2CMpConfigKeysIterator@MpConfigUtils" ??_R2CMpConfigKeysIterator@MpConfigUtils@@8
0x14004BCF0: "WIN32 " ??_C@_1O@KDPJAABB@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA?5?$AA?$AA@
0x140046308: CLSID_ExploitShield
0x14003FE00: "Start: MpScan(MP_FEATURE_SUPPORT" ??_C@_1BAC@OFGPKBLC@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AAM?$AAP?$AA_?$AAF?$AAE?$AAA?$AAT?$AAU?$AAR?$AAE?$AA_?$AAS?$AAU?$AAP?$AAP?$AAO?$AAR?$AAT@
0x140052C80: "const CommonUtil::CRefObject::`RTTI Complete Object Locator'" ??_R4CRefObject@CommonUtil@@6B@
0x14004BDD8: "RUNNING " ??_C@_1BC@ELJMNPL@?$AAR?$AAU?$AAN?$AAN?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x140055930: "const MpService::CSvcDeviceTicketMessage::`RTTI Complete Object Locator'" ??_R4CSvcDeviceTicketMessage@MpService@@6B@
0x1400065C8: "public: __cdecl CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>::~AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>(void) __ptr64" ??1?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@QEAA@XZ
0x14004C978: "ERROR: StopIdle Failed %X " ??_C@_1DG@KJMMANKF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAo?$AAp?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x140061208: "long (__cdecl* __ptr64 g_pfnWindowsCreateStringReference)(unsigned short const * __ptr64,unsigned int,struct HSTRING_HEADER * __ptr64,struct HSTRING__ * __ptr64 * __ptr64)" ?g_pfnWindowsCreateStringReference@@3P6AJPEBGIPEAUHSTRING_HEADER@@PEAPEAUHSTRING__@@@ZEA
0x14000B1D0: "void __cdecl RunCommandGetFiles(bool)" ?RunCommandGetFiles@@YAX_N@Z
0x140052B88: "__vectorcall ??_R1A@?0A@EA@bad_exception@std" ??_R1A@?0A@EA@bad_exception@std@@8
0x140043720: "GetOfflineScannerSupportDir() fa" ??_C@_1LG@KNBDHFGM@?$AAG?$AAe?$AAt?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAe?$AAr?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAD?$AAi?$AAr?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x1400352DC: "public: __cdecl std::bad_exception::bad_exception(void) __ptr64" ??0bad_exception@std@@QEAA@XZ
0x140028490: "long __cdecl AddFileToMpCab(struct tagMPCAB * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?AddFileToMpCab@@YAJPEAUtagMPCAB@@PEBG1@Z
0x14003A2B8: "__cdecl _imp_iswspace" __imp_iswspace
0x14003A1A8: "__cdecl _imp__initterm" __imp__initterm
0x140051210: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x1400501E8: "http://" ??_C@_1BA@GBHGOCBB@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x140019D80: "public: class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Make_iter(class std::_List_unchecked_const_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > >,struct std::_Iterator_base0>)const __ptr64" ?_Make_iter@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@QEBA?AV?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@2@V?$_List_unchecked_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@U_Iterator_base0@2@@2@@Z
0x140055DF8: "__vectorcall ??_R1A@?0A@EA@CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil" ??_R1A@?0A@EA@CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@8
0x140040230: "Finish: MpScan(MP_FEATURE_SUPPOR" ??_C@_1JE@FNOLFNJM@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AAM?$AAP?$AA_?$AAF?$AAE?$AAA?$AAT?$AAU?$AAR?$AAE?$AA_?$AAS?$AAU?$AAP?$AAP?$AAO?$AAR@
0x14004C5C0: "ERROR: FileTimeToSystemTime() fa" ??_C@_1FC@ICGLAHGO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAT?$AAo?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x140049020: "Trace from %u Milliseconds " ??_C@_0BM@GCEMDHAB@Trace?5from?5?$CFu?5Milliseconds?6?$AA@
0x14004E040: "Stopping kernel mode services .." ??_C@_1EG@KNKMKEDJ@?$AAS?$AAt?$AAo?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?5?$AAm?$AAo?$AAd?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?5?$AA?4?$AA?4@
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<struct CommonUtil::IUtilRegEnumSubKeys>::~AutoRef<struct CommonUtil::IUtilRegEnumSubKeys>(void) __ptr64" ??1?$AutoRef@UIUtilRegEnumSubKeys@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140049578: "AccessKey" ??_C@_1BE@MBFMPAPK@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAK?$AAe?$AAy?$AA?$AA@
0x140048B50: "SYSTEM\Setup" ??_C@_1BK@BHBNHDAL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x14004F9D0: "WARN: No samples available" ??_C@_1DG@LPKBKAFG@?$AAW?$AAA?$AAR?$AAN?$AA?3?$AA?5?$AAN?$AAo?$AA?5?$AAs?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AA?5?$AAa?$AAv?$AAa?$AAi?$AAl?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x14000D984: "public: __cdecl CommonUtil::CStdPtrContainerSeq<class CommonUtil::CStdList<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CAutoMpFile> >::~CStdPtrContainerSeq<class CommonUtil::CStdList<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CAutoMpFile> >(void) __ptr64" ??1?$CStdPtrContainerSeq@V?$CStdList@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@UCAutoMpFile@@@2@@CommonUtil@@QEAA@XZ
0x140026F1C: "long __cdecl UtilDeleteFile(unsigned short const * __ptr64)" ?UtilDeleteFile@@YAJPEBG@Z
0x140024760: "long __cdecl MpConfigUtils::GetMpDefaultLocation(unsigned short * __ptr64 * __ptr64,bool)" ?GetMpDefaultLocation@MpConfigUtils@@YAJPEAPEAG_N@Z
0x14004A2A0: "%ls = [%d] " ??_C@_1BI@IKHCIGOD@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$DN?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?6?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSampleHeaderQueueFactory>::~AutoRef<struct MpClient::IMpSampleHeaderQueueFactory>(void) __ptr64" ??1?$AutoRef@UIMpSampleHeaderQueueFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x140060548: "__vectorcall ??_R0?AVCHResultExceptionImpl@CommonUtil@" ??_R0?AVCHResultExceptionImpl@CommonUtil@@@8
0x140052F20: "__vectorcall ??_R1A@?0A@EA@CMpSignaturesUpdateServiceCallback" ??_R1A@?0A@EA@CMpSignaturesUpdateServiceCallback@@8
0x14003E198: "WaitForCompletion" ??_C@_1CE@HIFFIHMF@?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140045D20: "Threat Stats" ??_C@_0N@HIOBKPPC@Threat?5Stats?$AA@
0x140044880: "ERROR: RunCommandCollectFileVers" ??_C@_1GE@PMFNJKFF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr?$AAs@
0x14003A4C0: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x140045E58: "Status" ??_C@_06PGDKHFME@Status?$AA@
0x140022BA4: "public: virtual __cdecl CommonUtil::CHResultExceptionImpl::~CHResultExceptionImpl(void) __ptr64" ??1CHResultExceptionImpl@CommonUtil@@UEAA@XZ
0x140050BD0: "MpService_SpyNetServiceBusyTimou" ??_C@_1EE@GFFNMMHJ@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAB?$AAu?$AAs?$AAy?$AAT?$AAi?$AAm?$AAo?$AAu@
0x140041750: "Finish: MpRemoveDefinitions() " ??_C@_1DO@JLFJGPJO@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAM?$AAp?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x140039F88: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140012630: "[thunk]:public: virtual void * __ptr64 __cdecl CMpSignaturesUpdateServiceCallback::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECMpSignaturesUpdateServiceCallback@@W7EAAPEAXI@Z
0x140002BF4: printf
0x140036674: "__cdecl _except_validate_context_record" __except_validate_context_record
0x140052F48: "__vectorcall ??_R1A@?0A@EA@IMpSignaturesUpdateCallback@MpCommunication" ??_R1A@?0A@EA@IMpSignaturesUpdateCallback@MpCommunication@@8
0x14004C6F0: " %-40s [NOT_FOUND] : <NOT " ??_C@_1FA@ONOCIIMO@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAN?$AAO?$AAT?$AA_?$AAF?$AAO?$AAU?$AAN?$AAD?$AA?$FN?$AA?5?$AA?5?$AA?5?$AA?5?$AA?3?$AA?5?$AA?$DM?$AAN?$AAO?$AAT?$AA?5@
0x140046008: "OnAccess protection enabled" ??_C@_1DI@GDKJLDEP@?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1400479C0: "Software\Classes\CLSID\{09A47860" ??_C@_1HM@GOJPBEII@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA9?$AAA?$AA4?$AA7?$AA8?$AA6?$AA0@
0x140034894: "void __cdecl _CallMemberFunction0(void * __ptr64 const,void * __ptr64 const)" ?_CallMemberFunction0@@YAXQEAX0@Z
0x140046880: "ERROR: FormatMessageW failed for" ??_C@_1GK@PCFPFLCG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr@
0x14003EE58: "RevertPlatform " ??_C@_1CA@BAEJPGEL@?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?6?$AA?$AA@
0x140040500: "ERROR: MpCleanOpen() Failed %X " ??_C@_1EA@MHBIGABN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAO?$AAp?$AAe?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x14003F1D0: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x14003FC20: "ERROR: Unsupported type %u " ??_C@_1DI@CPADOPGI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAt?$AAy?$AAp?$AAe?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140041ED8: "Download Completed " ??_C@_1CK@OLMJDJGO@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AA?6?$AA?$AA@
0x140002C48: MpAllocSprintfW
0x14005B520: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-stdio-l1-1-0
0x14005B150: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1400039CC: "void __cdecl MpCmdLogVprintf(unsigned short const * __ptr64,char * __ptr64)" ?MpCmdLogVprintf@@YAXPEBGPEAD@Z
0x14004A190: "ERROR: RunCommandUnregisterWSC()" ??_C@_1FI@FICLJIGP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAW?$AAS?$AAC?$AA?$CI?$AA?$CJ@
0x14002BA30: "public: virtual void * __ptr64 __cdecl MpService::CSvcDeviceTicketMessage::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSvcDeviceTicketMessage@MpService@@UEAAPEAXI@Z
0x1400348EC: "__cdecl _FrameUnwindFilter" __FrameUnwindFilter
0x140033FF0: "public: virtual void * __ptr64 __cdecl std::bad_exception::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_exception@std@@UEAAPEAXI@Z
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSampleHeaderQueueCallback>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x14003703C: wcsrchr
0x140039410: "const AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`vftable'" ??_7?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@6B@
0x140053158: "__vectorcall ??_R1A@?0A@EA@CMpIdleNotifierCallback" ??_R1A@?0A@EA@CMpIdleNotifierCallback@@8
0x140047B40: "Software\Classes\CLSID\{8a696d12" ??_C@_1HM@GNHKIDJJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AAa?$AA6?$AA9?$AA6?$AAd?$AA1?$AA2@
0x140026A40: IsOSServerSKU
0x140055030: "__vectorcall ??_R3IMpAzSubmitCallback@MpAzSubmit" ??_R3IMpAzSubmitCallback@MpAzSubmit@@8
0x140054E50: "__vectorcall ??_R2IMpAzSubmitCallback@MpAzSubmit" ??_R2IMpAzSubmitCallback@MpAzSubmit@@8
0x14005B624: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-heap-l1-1-0
0x14003A400: "__cdecl _imp_MpScanStartEx" __imp_MpScanStartEx
0x14004D070: "ERROR: CreateRenderBuffer failed" ??_C@_1EO@NKENDHMJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x14005FD70: "__vectorcall ??_R0?AVWeakReferenceImpl@Details@WRL@Microsoft@" ??_R0?AVWeakReferenceImpl@Details@WRL@Microsoft@@@8
0x140047740: "Software\Classes\CLSID\{2781761E" ??_C@_1HM@CFIBKODE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA7?$AA8?$AA1?$AA7?$AA6?$AA1?$AAE@
0x14004A350: "displayName" ??_C@_1BI@LKHJNJMH@?$AAd?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1400534B8: "const MpCommunication::IMpDownloadCallback::`RTTI Complete Object Locator'" ??_R4IMpDownloadCallback@MpCommunication@@6B@
0x140039E90: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x140054180: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140045558: ".cab" ??_C@_19EBACOAMF@?$AA?4?$AAc?$AAa?$AAb?$AA?$AA@
0x1400496A0: "MpService_SigUpdServiceWaitTimou" ??_C@_1EE@BPIICOKI@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAi?$AAg?$AAU?$AAp?$AAd?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAW?$AAa?$AAi?$AAt?$AAT?$AAi?$AAm?$AAo?$AAu@
0x140016BC0: "public: virtual void * __ptr64 __cdecl CMpIdleNotifierCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpIdleNotifierCallback@@UEAAPEAXI@Z
0x14003EA00: "ERROR: MpReloadEngine failed (%X" ??_C@_1EG@OAKLGADJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAR?$AAe?$AAl?$AAo?$AAa?$AAd?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x14004D760: "FilePath" ??_C@_1BC@BFICMMEE@?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14003F9C0: "No on-going quick or full scan f" ??_C@_0CH@IFCDDCGH@No?5on?9going?5quick?5or?5full?5scan?5f@
0x140055580: "__vectorcall ??_R3?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil" ??_R3?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@8
0x1400554D0: "__vectorcall ??_R2?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil" ??_R2?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@8
0x140041248: "Signature update finished. " ??_C@_0BM@KAOPJDC@Signature?5update?5finished?4?6?$AA@
0x14004ADB0: " Name: %ls " ??_C@_1CM@NENGAIPL@?$AA?5?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140054720: "__vectorcall ??_R1A@?0A@EA@IInspectable" ??_R1A@?0A@EA@IInspectable@@8
0x140055480: "const CommonUtil::CHResultException::`RTTI Complete Object Locator'" ??_R4CHResultException@CommonUtil@@6B@
0x140002BD0: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpFreeMemory<unsigned short * __ptr64,void> >::~CUniqueHandle<struct CAutoMpFreeMemory<unsigned short * __ptr64,void> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoMpFreeMemory@PEAGX@@@CommonUtil@@QEAA@XZ
0x140054EE0: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIMpSampleHeaderQueueCallback@MpClient@@@CommonUtil@@8
0x140040D20: "MpScan() has detected %u threats" ??_C@_1EG@BNLFAOF@?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAh?$AAa?$AAs?$AA?5?$AAd?$AAe?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?5?$AA?$CF?$AAu?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs@
0x140039F58: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x140016278: "void __cdecl PrintRegistryValue(unsigned long,unsigned short const * __ptr64,unsigned __int64,void const * __ptr64,bool)" ?PrintRegistryValue@@YAXKPEBG_KPEBX_N@Z
0x140048B00: "InstallTime" ??_C@_1BI@NJJCKLEH@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140002DF8: "long __cdecl StringCchCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x14004F4B0: "Signatures are up-to-date, skipp" ??_C@_1GM@CFJAFHOE@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAa?$AAr?$AAe?$AA?5?$AAu?$AAp?$AA?9?$AAt?$AAo?$AA?9?$AAd?$AAa?$AAt?$AAe?$AA?0?$AA?5?$AAs?$AAk?$AAi?$AAp?$AAp@
0x140022B20: "public: virtual char const * __ptr64 __cdecl std::exception::what(void)const __ptr64" ?what@exception@std@@UEBAPEBDXZ
0x14004E530: "ERROR: UtilCreateProcess(%ls) fa" ??_C@_1FG@JEGKMAKO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa@
0x140016618: "long __cdecl PrintRegistryKeyValues(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?PrintRegistryKeyValues@@YAJPEAUHKEY__@@PEBG1@Z
0x1400555C8: "const MpConfigUtils::CMpConfigKeysIterator::`RTTI Complete Object Locator'" ??_R4CMpConfigKeysIterator@MpConfigUtils@@6B@
0x14001B100: "public: struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64 __cdecl std::_List_buy<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > >::_Buynode<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64,struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64,struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > &&) __ptr64" ??$_Buynode@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@?$_List_buy@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@2@@std@@QEAAPEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@PEAX@1@PEAU21@0$$QEAU?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@1@@Z
0x140039D10: CRYPT32_NULL_THUNK_DATA
0x14004DD20: "ERROR: MpGetInstalledProductIden" ??_C@_1HE@OEPFGBOL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAG?$AAe?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAd?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAI?$AAd?$AAe?$AAn@
0x140018D30: "public: virtual void * __ptr64 __cdecl CQuaMapGuardEntry::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuaMapGuardEntry@@UEAAPEAXI@Z
0x14001E45C: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpSampleInfoFree>::~CUniqueHandle<struct CAutoMpSampleInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpSampleInfoFree@@@CommonUtil@@QEAA@XZ
0x140052BF0: "__vectorcall ??_R3CUpdateNotifications" ??_R3CUpdateNotifications@@8
0x140052BB0: "__vectorcall ??_R2CUpdateNotifications" ??_R2CUpdateNotifications@@8
0x140039288: "const CMpIdleNotifierCallback::`vftable'" ??_7CMpIdleNotifierCallback@@6B@
0x140044700: "ERROR: RunCommandCollectServiceI" ??_C@_1HI@DCADCE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI@
0x140051080: "forwarders\%ws" ??_C@_1BO@GFOANKMI@?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140033EAC: "__cdecl _scrt_initialize_default_local_stdio_options" __scrt_initialize_default_local_stdio_options
0x140054478: "__vectorcall ??_R1L@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1L@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x140032B70: "long __cdecl CommonUtil::UtilEnumFiles(struct CommonUtil::IEnumFiles * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilEnumFiles@CommonUtil@@YAJPEAPEAUIEnumFiles@1@PEBG1K@Z
0x14001465C: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator=(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > &&) __ptr64" ??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@$$QEAV01@@Z
0x140054680: "__vectorcall ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140043F50: "MpCmdRun-NetworkService.log" ??_C@_1DI@BNHBDPPO@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?9?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x14002C294: "long __cdecl CommonUtil::UtilCreateManualEvent(void * __ptr64 * __ptr64,int,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES const * __ptr64)" ?UtilCreateManualEvent@CommonUtil@@YAJPEAPEAXHPEBGPEBU_SECURITY_ATTRIBUTES@@@Z
0x140055B18: "__vectorcall ??_R2CUtilRegEnumKeyValues@CommonUtil" ??_R2CUtilRegEnumKeyValues@CommonUtil@@8
0x140053008: "const CMpSignaturesUpdateServiceCallback::`RTTI Complete Object Locator'{for `MpCommunication::IMpSignaturesUpdateCallback'}" ??_R4CMpSignaturesUpdateServiceCallback@@6BIMpSignaturesUpdateCallback@MpCommunication@@@
0x140055C18: "__vectorcall ??_R3CUtilRegEnumKeyValues@CommonUtil" ??_R3CUtilRegEnumKeyValues@CommonUtil@@8
0x14005E2A8: "__vectorcall ??_R0?AVHModule@" ??_R0?AVHModule@@@8
0x1400159F4: "long __cdecl RunCommandCollectServiceInfo(void)" ?RunCommandCollectServiceInfo@@YAJXZ
0x140039CE0: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x14004EDD0: "ERROR: Configuration(%ls) not fo" ??_C@_1KA@DIMIFLDD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAf?$AAo@
0x1400404C0: "ConstructCleanInfo Failed %X " ??_C@_1DM@CHAABKGI@?$AAC?$AAo?$AAn?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AAC?$AAl?$AAe?$AAa?$AAn?$AAI?$AAn?$AAf?$AAo?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x14004FA70: "474a-87ad-2f9a87615fa3-dc1-tip.c" ??_C@_1FI@DLDGOEFL@?$AA4?$AA7?$AA4?$AAa?$AA?9?$AA8?$AA7?$AAa?$AAd?$AA?9?$AA2?$AAf?$AA9?$AAa?$AA8?$AA7?$AA6?$AA1?$AA5?$AAf?$AAa?$AA3?$AA?9?$AAd?$AAc?$AA1?$AA?9?$AAt?$AAi?$AAp?$AA?4?$AAc@
0x14003A188: "__cdecl _imp__exit" __imp__exit
0x14004E088: "_Early-Launch" ??_C@_1BM@DLGHGBPL@?$AA_?$AAE?$AAa?$AAr?$AAl?$AAy?$AA?9?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
0x14005B4D0: Cabinet_NULL_THUNK_DATA_DLB
0x14003F9E8: "Starting RunCommandScan. " ??_C@_1DE@PBDOMKKB@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAS?$AAc?$AAa?$AAn?$AA?4?$AA?6?$AA?$AA@
0x140033B78: "__cdecl _scrt_initialize_onexit_tables" __scrt_initialize_onexit_tables
0x140043520: "ERROR: CoInitializeSecurity fail" ??_C@_1FC@JHFJGPMO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x14004E5F0: "ERROR: GetExitCodeProcess failed" ??_C@_1EO@PMGKCKGH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAE?$AAx?$AAi?$AAt?$AAC?$AAo?$AAd?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140022BA4: "public: virtual __cdecl std::bad_exception::~bad_exception(void) __ptr64" ??1bad_exception@std@@UEAA@XZ
0x140040A88: "NoSignatureUpdates" ??_C@_1CG@OKKCPODA@?$AAN?$AAo?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAs?$AA?$AA@
0x14003A4E8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14004CC80: "EvtFormatMessage" ??_C@_0BB@EBNGOLMI@EvtFormatMessage?$AA@
0x140055D20: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@8
0x140020640: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAKXZ
0x140060FA8: "private: static char const * __ptr64 const __ptr64 UnDecorator::gName" ?gName@UnDecorator@@0PEBDEB
0x14004AAA0: "__cdecl GUID_17072f7b_9abe_4a74_a261_1eb76b55107a" _GUID_17072f7b_9abe_4a74_a261_1eb76b55107a
0x140045290: "ERROR: CreateCab() failed (%X) " ??_C@_1EA@IJKOKEIM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAC?$AAa?$AAb?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x14004A4B0: " SigStatus: %u " ??_C@_1CC@BOPBDGED@?$AA?5?$AA?5?$AAS?$AAi?$AAg?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x1400601A0: "__vectorcall ??_R0?AVCHResultException@CommonUtil@" ??_R0?AVCHResultException@CommonUtil@@@8
0x14001C4A8: "long __cdecl CommonUtil::MpNewBuffer<unsigned char>(unsigned char * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@E@CommonUtil@@YAJPEAPEAE_K@Z
0x14004FB90: WPP_5285293d47df3308bbc368cb603c5066_Traceguids
0x14005E2C8: "__vectorcall ??_R0?AVCRegHandle@" ??_R0?AVCRegHandle@@@8
0x14003F140: WPP_ThisDir_CTLGUID_CommandLineTool
0x140046760: "ERROR: StringCchCopyW failed (%X" ??_C@_1EG@EBMODEAO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAo?$AAp?$AAy?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x140048940: "LastAggressiveCheck" ??_C@_1CI@JPGDBAKG@?$AAL?$AAa?$AAs?$AAt?$AAA?$AAg?$AAg?$AAr?$AAe?$AAs?$AAs?$AAi?$AAv?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x140033A50: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x140049A90: "MANAGED" ??_C@_1BA@CIFHIBLP@?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAD?$AA?$AA@
0x140049C90: "Update completed succesfully " ??_C@_1DM@CLFALCID@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?6?$AA?$AA@
0x140046CE0: "ERROR: ExpandEnvironmentStrings " ??_C@_1FK@HAFFPLJG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAp?$AAa?$AAn?$AAd?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA?5@
0x140039EF0: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x14003F378: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x140039F28: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140033EA8: "__cdecl should_initialize_environment" _should_initialize_environment
0x140045D90: "%-24hs: 0x%x " ??_C@_1BM@ONHLJBFB@?$AA?$CF?$AA?9?$AA2?$AA4?$AAh?$AAs?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x140050630: "ManagedDefenderProductType" ??_C@_1DG@EMKEFHMD@?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1400083BC: "protected: virtual __cdecl CommonUtil::CRefObject::~CRefObject(void) __ptr64" ??1CRefObject@CommonUtil@@MEAA@XZ
0x14000A394: "long __cdecl GetAppLayerLogsDir(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetAppLayerLogsDir@@YAJPEBGPEAPEAG@Z
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct CommonUtil::ICmdOptionsLookup>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@UEBAJXZ
0x140042100: "Update completed with hr: 0x%08l" ??_C@_1EG@GCHLNPF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAh?$AAr?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAl@
0x14005E3C8: "__vectorcall ??_R0?AUIRefObject@CommonUtil@" ??_R0?AUIRefObject@CommonUtil@@@8
0x14003A158: "__cdecl _imp_abort" __imp_abort
0x14004E640: "ERROR: UtilCreateProcess(%ls) ex" ??_C@_1GG@DPDPNONP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAe?$AAx@
0x140023188: "__cdecl TlgDefineProvider_annotation__Tlgg_hMpAsimovProviderProv" _TlgDefineProvider_annotation__Tlgg_hMpAsimovProviderProv
0x1400547E8: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140065040: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x1400537A0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140045E60: " %-20hs: %ws, hr = 0x%x " ??_C@_1DI@HNNCGIIA@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA2?$AA0?$AAh?$AAs?$AA?3?$AA?5?$AA?$CF?$AAw?$AAs?$AA?0?$AA?5?$AAh?$AAr?$AA?5?$AA?$DN?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x14004B870: "ERROR: MpCollectServiceInfo("MsM" ??_C@_1GI@CHGNBEOO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAM?$AAs?$AAM@
0x140053F78: "__vectorcall ??_R1BB@?0A@EA@?$RuntimeClassBaseT@$02@Details@WRL@Microsoft" ??_R1BB@?0A@EA@?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@@8
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140039EA8: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x14003A398: "__cdecl _imp_MpConfigIteratorClose" __imp_MpConfigIteratorClose
0x140052D00: "const MpCmdUtils::CUniqueNamedObject::`RTTI Complete Object Locator'" ??_R4CUniqueNamedObject@MpCmdUtils@@6B@
0x140027910: "long __cdecl progress(unsigned int,unsigned long,unsigned long,void * __ptr64)" ?progress@@YAJIKKPEAX@Z
0x140051178: WPP_d6ff3ff3d7e23c776379d93bae4238f0_Traceguids
0x140018B18: "private: static void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > > >::_Xlength(void)" ?_Xlength@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@CAXXZ
0x140030320: "public: virtual long __cdecl CommonUtil::IForwardIterator<unsigned short const>::Clone(struct CommonUtil::ISimpleIterator<unsigned short const> * __ptr64 * __ptr64,bool)const __ptr64" ?Clone@?$IForwardIterator@$$CBG@CommonUtil@@UEBAJPEAPEAU?$ISimpleIterator@$$CBG@2@_N@Z
0x140043F10: "Getting MpCmdRun log (2/4)... " ??_C@_1DO@EFNHDGOM@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA2?$AA?1?$AA4?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x14004A040: "AntiVirusProduct" ??_C@_1CC@NBEPFPEI@?$AAA?$AAn?$AAt?$AAi?$AAV?$AAi?$AAr?$AAu?$AAs?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?$AA@
0x14003E5D8: "BuildSFC" ??_C@_1BC@NOFEFKDD@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAS?$AAF?$AAC?$AA?$AA@
0x140036D08: "__cdecl register_onexit_function" _register_onexit_function
0x14003A2F0: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x14004B980: "WARNING: MpCollectServiceInfo("m" ??_C@_1GO@EANIIPNI@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAm@
0x14004FB20: "__cdecl GUID_cb72d686_9516_520d_a274_fa4cd1762cb2" _GUID_cb72d686_9516_520d_a274_fa4cd1762cb2
0x14001D130: "public: virtual void * __ptr64 __cdecl MpCommunication::IMpDownloadCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIMpDownloadCallback@MpCommunication@@UEAAPEAXI@Z
0x14003F368: WPP_760ade1b6d263cbd92d4d7191bdcc1e7_Traceguids
0x140040310: "Scanning %ls found %u threats. " ??_C@_0CA@CEFCIBGE@Scanning?5?$CFls?5found?5?$CFu?5threats?4?6?$AA@
0x140051350: "CommandFile %s line %Iu Command " ??_C@_1II@MABPOEFG@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAi?$AAl?$AAe?$AA?5?$AA?$CF?$AAs?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AA?$CF?$AAI?$AAu?$AA?6?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5@
0x14001D7D0: "private: virtual void __cdecl COfflineScannerDownload::OnError(long) __ptr64" ?OnError@COfflineScannerDownload@@EEAAXJ@Z
0x1400608D0: "__cdecl Init_global_epoch" _Init_global_epoch
0x14002F704: "public: unsigned short const * __ptr64 __cdecl CommonUtil::ICmdOptionsLookup::LookupString(unsigned short const * __ptr64,unsigned short const * __ptr64)const __ptr64" ?LookupString@ICmdOptionsLookup@CommonUtil@@QEBAPEBGPEBG0@Z
0x140040F60: "%u" ??_C@_02GMHACPFF@?$CFu?$AA@
0x140055060: "__vectorcall ??_R3CMpThreadPoolItemBase@CommonUtil" ??_R3CMpThreadPoolItemBase@CommonUtil@@8
0x140054E78: "__vectorcall ??_R2CMpThreadPoolItemBase@CommonUtil" ??_R2CMpThreadPoolItemBase@CommonUtil@@8
0x14003A520: "__cdecl _xi_a" __xi_a
0x1400413A0: "You cannot specify both -All and" ??_C@_1GK@NNMJMOGO@?$AAY?$AAo?$AAu?$AA?5?$AAc?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAy?$AA?5?$AAb?$AAo?$AAt?$AAh?$AA?5?$AA?9?$AAA?$AAl?$AAl?$AA?5?$AAa?$AAn?$AAd@
0x14004A070: "AntiSpywareProduct" ??_C@_1CG@MAGIPNON@?$AAA?$AAn?$AAt?$AAi?$AAS?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?$AA@
0x140039D68: "__cdecl _imp_GetNativeSystemInfo" __imp_GetNativeSystemInfo
0x1400178AC: "private: long __cdecl CrimsonEventLog::HrStdVectorResize(class std::vector<unsigned short,class std::allocator<unsigned short> > & __ptr64,unsigned long) __ptr64" ?HrStdVectorResize@CrimsonEventLog@@AEAAJAEAV?$vector@GV?$allocator@G@std@@@std@@K@Z
0x14004E488: "SystemInfo.exe" ??_C@_1BO@IFBAALHB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI?$AAn?$AAf?$AAo?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140046FA0: "ERROR: Failed to open log file (" ??_C@_1EK@MDEJGNIN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AA?$CI@
0x140039F60: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14003F9A0: "Scan cancelled successfully. " ??_C@_0BO@CNFFHJBM@Scan?5cancelled?5successfully?4?6?$AA@
0x140054CB0: "const OnlineIdTicketIterator::`RTTI Complete Object Locator'{for `Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_R4OnlineIdTicketIterator@@6B?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x14005F8B0: "__vectorcall ??_R0?AU?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@" ??_R0?AU?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@@@8
0x14003A008: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x140044420: "MpSigStub-NetworkService.log" ??_C@_1DK@KKLKPLOG@?$AAM?$AAp?$AAS?$AAi?$AAg?$AAS?$AAt?$AAu?$AAb?$AA?9?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140054F08: "__vectorcall ??_R17?0A@EA@CRefObject@CommonUtil" ??_R17?0A@EA@CRefObject@CommonUtil@@8
0x140048A78: "AuGracePeriod" ??_C@_1BM@OBBBMHM@?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x140039320: "const MpCommunication::IMpDownloadCallback::`vftable'" ??_7IMpDownloadCallback@MpCommunication@@6B@
0x1400495C0: "ERROR: Creating SpyNet Queue Fai" ??_C@_1FA@LMNHOBHH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AA?5?$AAQ?$AAu?$AAe?$AAu?$AAe?$AA?5?$AAF?$AAa?$AAi@
0x14004A630: "ERROR: NewSprintfW(%ls, %ls) fai" ??_C@_1FE@BGBIKCBP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAe?$AAw?$AAS?$AAp?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?0?$AA?5?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi@
0x140061218: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUvevmghUvevmgoryUlyquivUznwGEUhgwzucOlyq@MpEvent" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUvevmghUvevmgoryUlyquivUznwGEUhgwzucOlyq@MpEvent
0x140020310: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IWeakReference>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140054D78: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IWeakReference>::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@6B@
0x140020B28: "public: virtual void * __ptr64 __cdecl CMpAzSubmitServiceCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpAzSubmitServiceCallback@@UEAAPEAXI@Z
0x14002CDD8: "long __cdecl CommonUtil::UtilExpandEnvironmentStrings(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilExpandEnvironmentStrings@CommonUtil@@YAJPEAPEAGPEBG@Z
0x140049150: "EDT" ??_C@_17CLAGDMJA@?$AAE?$AAD?$AAT?$AA?$AA@
0x1400471A0: "Event log record number overflow" ??_C@_1EE@EBJEOPFB@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAr?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAn?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?5?$AAo?$AAv?$AAe?$AAr?$AAf?$AAl?$AAo?$AAw@
0x140054800: "__vectorcall ??_R3?$RuntimeClassBaseT@$02@Details@WRL@Microsoft" ??_R3?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@@8
0x140053BC0: "__vectorcall ??_R2?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R2?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x140053810: "__vectorcall ??_R2?$RuntimeClassBaseT@$02@Details@WRL@Microsoft" ??_R2?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@@8
0x140048D40: "SOFTWARE\Microsoft\Microsoft Ant" ??_C@_1FO@GGOMNCFJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt@
0x140054950: "__vectorcall ??_R3?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows" ??_R3?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@8
0x140034240: "int __cdecl _ExecutionInCatch(struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64)" ?_ExecutionInCatch@@YAHPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@@Z
0x140001754: wmain
0x14001D370: "public: long __cdecl COfflineScannerDownload::StartDownload(unsigned short const * __ptr64,bool) __ptr64" ?StartDownload@COfflineScannerDownload@@QEAAJPEBG_N@Z
0x140054860: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x140053920: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x140033AF0: "__cdecl _scrt_acquire_startup_lock" __scrt_acquire_startup_lock
0x14003A340: "__cdecl _imp_MpDynamicSignatureEnumerate" __imp_MpDynamicSignatureEnumerate
0x140052E18: "__vectorcall ??_R2CMpSignaturesUpdateServiceCallback" ??_R2CMpSignaturesUpdateServiceCallback@@8
0x140036CBA: "__cdecl _p___argc" __p___argc
0x140052F98: "__vectorcall ??_R3CMpSignaturesUpdateServiceCallback" ??_R3CMpSignaturesUpdateServiceCallback@@8
0x14004F110: "ERROR: IMpProductGenuineCheck::S" ??_C@_1HG@BGHOJDMB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAI?$AAM?$AAp?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?3?$AA?3?$AAS@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<class CMpSpyNetQueueCallback>::~AutoRef<class CMpSpyNetQueueCallback>(void) __ptr64" ??1?$AutoRef@VCMpSpyNetQueueCallback@@@CommonUtil@@QEAA@XZ
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IWeakReference>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140045810: "ERROR: FindClose() failed (%X) " ??_C@_1EA@KFNMEGEJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAi?$AAn?$AAd?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x14004BDF0: "CONTINUE_PENDING " ??_C@_1CE@NBMJGHDG@?$AAC?$AAO?$AAN?$AAT?$AAI?$AAN?$AAU?$AAE?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14004C930: "ERROR: WaitForCompletion Failed " ??_C@_1EI@POOOBHJC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14003FAE0: "Cancel" ??_C@_1O@BIOIDBLM@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AA?$AA@
0x1400533F8: "__vectorcall ??_R1A@?0A@EA@IMpDownloadCallback@MpCommunication" ??_R1A@?0A@EA@IMpDownloadCallback@MpCommunication@@8
0x1400533A8: "__vectorcall ??_R1A@?0A@EN@IMpDownloadCallback@MpCommunication" ??_R1A@?0A@EN@IMpDownloadCallback@MpCommunication@@8
0x14004E3C0: "ERROR: UtilGetSystemPath(%ls) Fa" ??_C@_1FG@GDNFPHHE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAG?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAa?$AAt?$AAh?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAF?$AAa@
0x14004FDD0: "WindowsCreateString" ??_C@_0BE@POPPOKBD@WindowsCreateString?$AA@
0x140045850: "ERROR: CloseMpCab() failed (%X) " ??_C@_1EC@BMMPBNKL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAl?$AAo?$AAs?$AAe?$AAM?$AAp?$AAC?$AAa?$AAb?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x140050A20: "Features" ??_C@_1BC@IGDFDBLI@?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x1400301A0: "public: virtual unsigned short const * __ptr64 __cdecl CommonUtil::CArgvIter::EnumObject(void) __ptr64" ?EnumObject@CArgvIter@CommonUtil@@UEAAPEBGXZ
0x14001D830: "public: virtual void * __ptr64 __cdecl COfflineScannerDownload::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCOfflineScannerDownload@@UEAAPEAXI@Z
0x140048B30: "LastRebootTime" ??_C@_1BO@IPMIPGEJ@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpIdleNotifier>::~AutoRef<struct MpClient::IMpIdleNotifier>(void) __ptr64" ??1?$AutoRef@UIMpIdleNotifier@MpClient@@@CommonUtil@@QEAA@XZ
0x14004C290: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x1400510F0: WPP_9ab70bcc682631539c1f67e11cae3723_Traceguids
0x14001FE10: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetRuntimeClassName(struct HSTRING__ * __ptr64 * __ptr64) __ptr64" ?GetRuntimeClassName@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAPEAUHSTRING__@@@Z
0x1400234C0: "unsigned long __cdecl MpEventWriteTransferNotFound(unsigned __int64,struct _EVENT_DESCRIPTOR const * __ptr64,struct _GUID const * __ptr64,struct _GUID const * __ptr64,unsigned long,struct _EVENT_DATA_DESCRIPTOR * __ptr64)" ?MpEventWriteTransferNotFound@@YAK_KPEBU_EVENT_DESCRIPTOR@@PEBU_GUID@@2KPEAU_EVENT_DATA_DESCRIPTOR@@@Z
0x14004EF80: "MpCmdRun_GenuineCheckTermination" ??_C@_1FA@ICGBMOEJ@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAG?$AAe?$AAn?$AAu?$AAi?$AAn?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn@
0x14001D120: "__cdecl get_startup_new_mode" _get_startup_new_mode
0x14003A4A0: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x1400452D0: "SupportFiles.cab" ??_C@_1CC@ECEHKHEN@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?4?$AAc?$AAa?$AAb?$AA?$AA@
0x140033F04: "__cdecl _scrt_is_managed_app" __scrt_is_managed_app
0x140053200: "__vectorcall ??_R3IMpIdleNotifierCallback@MpClient" ??_R3IMpIdleNotifierCallback@MpClient@@8
0x140053140: "__vectorcall ??_R2IMpIdleNotifierCallback@MpClient" ??_R2IMpIdleNotifierCallback@MpClient@@8
0x14001764C: "private: long __cdecl CrimsonEventLog::ExtractEventPayload(void * __ptr64,unsigned long,class std::vector<unsigned short,class std::allocator<unsigned short> > & __ptr64) __ptr64" ?ExtractEventPayload@CrimsonEventLog@@AEAAJPEAXKAEAV?$vector@GV?$allocator@G@std@@@std@@@Z
0x14003E368: "WriteLogsForSvc" ??_C@_1CA@NJGOIGOI@?$AAW?$AAr?$AAi?$AAt?$AAe?$AAL?$AAo?$AAg?$AAs?$AAF?$AAo?$AAr?$AAS?$AAv?$AAc?$AA?$AA@
0x140046454: "AM" ??_C@_15ODEHAHHF@?$AAA?$AAM?$AA?$AA@
0x14002E124: "long __cdecl CommonUtil::UtilRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegGetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAKPEA_KPEAX@Z
0x14003A270: "__cdecl _imp__close" __imp__close
0x140022B40: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x1400511E8: "GetFileVersionInfoW" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x140003FC8: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoWinEventTag,0>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoWinEventTag,0>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoWinEventTag@CommonUtil@@$0A@@CommonUtil@@QEAA@XZ
0x14003F420: "ERROR: Could not open threat lis" ??_C@_1GG@EPKHBPI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?5?$AAl?$AAi?$AAs@
0x140030BCC: MpIsWindowsThreshold
0x14001E9B0: "public: virtual long __cdecl OnlineIdTicketIterator::GetMany(unsigned int,struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest * __ptr64 * __ptr64,unsigned int * __ptr64) __ptr64" ?GetMany@OnlineIdTicketIterator@@UEAAJIPEAPEAUIOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAI@Z
0x14005B200: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x14005B228: "__cdecl CT??_R0?AVexception@std@@@8??0exception@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVexception@std@@@8??0exception@std@@QEAA@AEBV01@@Z24
0x14005B050: "__cdecl CT??_R0?AVbad_exception@std@@@8??0bad_exception@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_exception@std@@@8??0bad_exception@std@@QEAA@AEBV01@@Z24
0x14004D5C0: " ERROR - %s:%s quarantined at " ??_C@_1KA@OOJKCCBI@?$AA?5?$AA?5?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?5?$AA?9?$AA?5?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAs?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd?$AA?5?$AAa?$AAt?$AA?5@
0x1400611D0: "long (__cdecl* __ptr64 g_pfnRoActivateInstance)(struct HSTRING__ * __ptr64,struct IInspectable * __ptr64 * __ptr64)" ?g_pfnRoActivateInstance@@3P6AJPEAUHSTRING__@@PEAPEAUIInspectable@@@ZEA
0x140036D1A: strcpy_s
0x140003D7C: WPP_SF_DD
0x140003D7C: WPP_SF_Dd
0x140003D7C: WPP_SF_dd
0x140011918: "public: virtual __cdecl MpClient::IMpSignaturesUpdateServiceCallback::~IMpSignaturesUpdateServiceCallback(void) __ptr64" ??1IMpSignaturesUpdateServiceCallback@MpClient@@UEAA@XZ
0x140051478: "<unknown>" ??_C@_1BE@ELICABCK@?$AA?$DM?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$AA@
0x140044EC0: "ERROR: RunCommandCollectWscProvi" ??_C@_1GE@IGODDFKJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAW?$AAs?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi@
0x140019C80: "public: __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > > >::~vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > > >(void) __ptr64" ??1?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@QEAA@XZ
0x14004CB50: "ERROR: pfn_EvtClose() failed (%X" ??_C@_1EG@CAPGOEII@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAp?$AAf?$AAn?$AA_?$AAE?$AAv?$AAt?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x140039BF8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x14003A9E0: "__cdecl _sz_VERSION_dll" __sz_VERSION_dll
0x1400430E0: "Getting product service registra" ??_C@_1GK@LFDCBEPA@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAa@
0x1400126B0: WPP_SF_dS
0x1400145E0: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator=(unsigned short const * __ptr64 const) __ptr64" ??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@QEBG@Z
0x140041968: "SignatureSet ID: %ws " ??_C@_0BH@KJCHLNJJ@SignatureSet?5ID?3?5?$CFws?6?6?$AA@
0x14003E06C: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14004B790: "unsigned short const * const RuntimeClass_Windows_SecurityCenter_WscCloudBackupProvider" ?RuntimeClass_Windows_SecurityCenter_WscCloudBackupProvider@@3QBGB
0x140050EE8: "Outbound for HTTP" ??_C@_1CE@OLNAMPHF@?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAH?$AAT?$AAT?$AAP?$AA?$AA@
0x14004BD38: "FILE_SYSTEM_DRIVER " ??_C@_1CI@PAFINEAE@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x140049B20: "ERROR: Creating Signatures Updat" ??_C@_1HK@MAABNNPL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt@
0x1400392E0: "const COfflineScannerDownload::`vftable'" ??_7COfflineScannerDownload@@6B@
0x140039910: "const CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem::`vftable'" ??_7CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@6B@
0x140040F10: "ERROR: RemoveMpTask(scan) Failed" ??_C@_1EK@JAJHKPBN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAM?$AAp?$AAT?$AAa?$AAs?$AAk?$AA?$CI?$AAs?$AAc?$AAa?$AAn?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd@
0x14003A160: "__cdecl _imp__register_thread_local_exe_atexit_callback" __imp__register_thread_local_exe_atexit_callback
0x1400604D8: "__vectorcall ??_R0?AVCDebugMessageBase@MpService@" ??_R0?AVCDebugMessageBase@MpService@@@8
0x140043E58: "MpCmdRun-System.log" ??_C@_1CI@PFDEJKMI@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?9?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x14005E040: WPP_GLOBAL_Control
0x14003E800: "A process other than WinDefend a" ??_C@_1NE@FNPFEAGI@?$AAA?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAt?$AAh?$AAe?$AAr?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?5?$AAa@
0x14001AAE4: "public: void __cdecl std::allocator<struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> >::deallocate(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@PEAX@std@@@std@@QEAAXQEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@PEAX@2@_K@Z
0x1400456C0: "%s\*" ??_C@_19CDBNEOLI@?$AA?$CF?$AAs?$AA?2?$AA?$CK?$AA?$AA@
0x14001B058: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Destroy_if_node(class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >) __ptr64" ?_Destroy_if_node@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAXV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@2@@Z
0x14002D480: IsOutOfMemoryError
0x14004AA60: "__cdecl GUID_024e9756_ba6c_4ad1_8321_87bae78fd0e3" _GUID_024e9756_ba6c_4ad1_8321_87bae78fd0e3
0x140050210: "UnitTestMode" ??_C@_1BK@LEHDJHNL@?$AAU?$AAn?$AAi?$AAt?$AAT?$AAe?$AAs?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x14003A280: "__cdecl _imp__read" __imp__read
0x14004EC58: WPP_160a757182e938b81fde77c503445782_Traceguids
0x140017BF0: "private: long __cdecl CrimsonEventLog::ExtractStringPropertyFromPayload(class std::vector<unsigned short,class std::allocator<unsigned short> > const & __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64) __ptr64" ?ExtractStringPropertyFromPayload@CrimsonEventLog@@AEAAJAEBV?$vector@GV?$allocator@G@std@@@std@@KPEAPEAG@Z
0x140007868: "void __cdecl RunCommandRemoveDefinitions(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandRemoveDefinitions@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14003F150: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140032C20: DloadMakePermanentImageCommit
0x14005FBE8: "__vectorcall ??_R0?AVRuntimeClassBase@Details@WRL@Microsoft@" ??_R0?AVRuntimeClassBase@Details@WRL@Microsoft@@@8
0x1400406E0: "MpScan() started " ??_C@_1CE@JOICFCAB@?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?6?$AA?$AA@
0x14003EC10: "You do not have access to perfor" ??_C@_1FO@EJEBIBHJ@?$AAY?$AAo?$AAu?$AA?5?$AAd?$AAo?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAh?$AAa?$AAv?$AAe?$AA?5?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAe?$AAr?$AAf?$AAo?$AAr@
0x1400274D0: "unsigned int __cdecl fci_write(__int64,void * __ptr64,unsigned int,int * __ptr64,void * __ptr64)" ?fci_write@@YAI_JPEAXIPEAH1@Z
0x14003A3B8: "__cdecl _imp_MpAddDynamicSignatureFile" __imp_MpAddDynamicSignatureFile
0x1400010B0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1400332E4: "long __cdecl CommonUtil::MpIsConnectedToInternet(bool * __ptr64)" ?MpIsConnectedToInternet@CommonUtil@@YAJPEA_N@Z
0x140041748: " Done! " ??_C@_07KLGBNKPL@?6Done?$CB?6?$AA@
0x14002CED4: "long __cdecl CommonUtil::HrFromErrno(int)" ?HrFromErrno@CommonUtil@@YAJH@Z
0x1400434D0: "ERROR: MpSmartCoInitialize faile" ??_C@_1FA@HHCDGPCK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x140022CD4: "void __cdecl std::_Xlength_error(char const * __ptr64)" ?_Xlength_error@std@@YAXPEBD@Z
0x140030768: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Check_size(void) __ptr64" ?_Check_size@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAXXZ
0x14003F920: "ERROR: MpManagerOpen Failed %X " ??_C@_1EA@NNFEADJD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x140046AE0: "%ls " ??_C@_19NAEOHFOC@?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14005F820: "__vectorcall ??_R0?AU?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@" ??_R0?AU?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@8
0x1400011D0: WPP_SF_D
0x1400011D0: WPP_SF_d
0x140025FC4: MpDumpCache
0x14004A460: " ExePath: %ls " ??_C@_1CE@ICAMFBLO@?$AA?5?$AA?5?$AAE?$AAx?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140040DB0: "Clean" ??_C@_1M@IIFGEKHO@?$AAC?$AAl?$AAe?$AAa?$AAn?$AA?$AA@
0x14003A468: "__cdecl _imp_MpConfigIteratorOpen" __imp_MpConfigIteratorOpen
0x14003F648: " %-20ws: " ??_C@_1BK@HJLCBIEH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA2?$AA0?$AAw?$AAs?$AA?3?$AA?5?$AA?$AA@
0x140049480: "Restoring configuration options " ??_C@_1KG@BCJBEIGJ@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5@
0x14003F358: "%ls.bak" ??_C@_1BA@GHALGHJJ@?$AA?$CF?$AAl?$AAs?$AA?4?$AAb?$AAa?$AAk?$AA?$AA@
0x14002D2D0: "public: virtual char const * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::what(void)const __ptr64" ?what@CHResultExceptionImpl@CommonUtil@@UEBAPEBDXZ
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSpyNetQueue>::~AutoRef<struct MpClient::IMpSpyNetQueue>(void) __ptr64" ??1?$AutoRef@UIMpSpyNetQueue@MpClient@@@CommonUtil@@QEAA@XZ
0x140008EF0: "private: static void __cdecl MpCmdUtils::CTerminationTimer::OnTimeout(void * __ptr64,unsigned char)" ?OnTimeout@CTerminationTimer@MpCmdUtils@@CAXPEAXE@Z
0x140040D00: "ScanParameters" ??_C@_1BO@DNBBFLBF@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x140054B70: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@6B@
0x140048420: "Software\Wow6432Node\Microsoft\I" ??_C@_1IM@GMOGKHNM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI@
0x14003FB10: "Argument -cancel detected. Tryin" ??_C@_0FA@NEGKEOLM@Argument?5?9cancel?5detected?4?5Tryin@
0x140049040: "Press ENTER to stop tracing . . " ??_C@_0CD@DFOIBBDC@Press?5ENTER?5to?5stop?5tracing?5?4?5?4?5@
0x14004B0C8: " Namespace State: %d " ??_C@_1DK@HLFHPCJB@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AAN?$AAa?$AAm?$AAe?$AAs?$AAp?$AAa?$AAc?$AAe?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x140045D30: "%-24hs: Threats(%u) Suspicious(%" ??_C@_1EI@MBIJABLN@?$AA?$CF?$AA?9?$AA2?$AA4?$AAh?$AAs?$AA?3?$AA?5?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CF?$AAu?$AA?$CJ?$AA?5?$AAS?$AAu?$AAs?$AAp?$AAi?$AAc?$AAi?$AAo?$AAu?$AAs?$AA?$CI?$AA?$CF@
0x14002BDD0: "protected: virtual void * __ptr64 __cdecl MpService::CDebugMessageBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDebugMessageBase@MpService@@MEAAPEAXI@Z
0x140028694: "long __cdecl CloseMpCab(struct tagMPCAB * __ptr64)" ?CloseMpCab@@YAJPEAUtagMPCAB@@@Z
0x14004CFC0: "ERROR: ExtractTimePropertyFromPa" ??_C@_1GG@LMFBDMBF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAT?$AAi?$AAm?$AAe?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AAF?$AAr?$AAo?$AAm?$AAP?$AAa@
0x14000660C: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpCleanInfoFree>::~CUniqueHandle<struct CAutoMpCleanInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpCleanInfoFree@@@CommonUtil@@QEAA@XZ
0x14001CE28: "void __cdecl RunCommandGenuineCheck(void)" ?RunCommandGenuineCheck@@YAXXZ
0x14000304C: "public: __cdecl CLogHandle::CLogHandle(unsigned short const * __ptr64,bool) __ptr64" ??0CLogHandle@@QEAA@PEBG_N@Z
0x14003A3A8: "__cdecl _imp_MpDynamicSignatureOpen" __imp_MpDynamicSignatureOpen
0x1400257C8: "long __cdecl MpCommunication::LoadMpCommunicationLibrary(struct MpCommunication::IMpCommunicationLibrary * __ptr64 * __ptr64,unsigned long)" ?LoadMpCommunicationLibrary@MpCommunication@@YAJPEAPEAUIMpCommunicationLibrary@1@K@Z
0x14004F450: "ERROR: MpOfflineScanInstall fail" ??_C@_1FC@HDEAPIFE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x14004FAF0: "__cdecl GUID_00000038_0000_0000_c000_000000000046" _GUID_00000038_0000_0000_c000_000000000046
0x14005F9A0: "__vectorcall ??_R0?AU?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@" ??_R0?AU?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@8
0x140040E08: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x14004CD00: "ERROR: HrStdVectorResize failed " ??_C@_1EM@POHKMOM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAH?$AAr?$AAS?$AAt?$AAd?$AAV?$AAe?$AAc?$AAt?$AAo?$AAr?$AAR?$AAe?$AAs?$AAi?$AAz?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x140054130: "__vectorcall ??_R1A@?0A@EA@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@" ??_R1A@?0A@EA@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@8
0x14002EED8: "long __cdecl CommonUtil::CreateNewRefObject<class CommonUtil::CUtilRegEnumKeyValues>(class CommonUtil::CUtilRegEnumKeyValues * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCUtilRegEnumKeyValues@CommonUtil@@@CommonUtil@@YAJPEAPEAVCUtilRegEnumKeyValues@0@@Z
0x14001D820: "__cdecl initialize_invalid_parameter_handler" _initialize_invalid_parameter_handler
0x140052B30: "const std::bad_exception::`RTTI Complete Object Locator'" ??_R4bad_exception@std@@6B@
0x140051518: "__cdecl _real@3f800000" __real@3f800000
0x14003A018: "__cdecl _imp_VariantClear" __imp_VariantClear
0x140035190: "int __cdecl __GetCurrentState(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64)" ?__GetCurrentState@@YAHPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@@Z
0x140050608: "}" ??_C@_13EHOOFIKC@?$AA?$HN?$AA?$AA@
0x140050D38: "HrQueryServiceStatus" ??_C@_0BF@LDJDHIDI@HrQueryServiceStatus?$AA@
0x1400483D0: "Software\Wow6432Node\Microsoft\A" ??_C@_1EI@NFKMMEOE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAA@
0x140050708: "MpCommunicationInitialize" ??_C@_0BK@OCGIFEHA@MpCommunicationInitialize?$AA@
0x1400370FC: "__cdecl _tailMerge_version_dll" __tailMerge_version_dll
0x140034070: "__cdecl _isa_available_init" __isa_available_init
0x14003A360: "__cdecl _imp_MpSampleQuery" __imp_MpSampleQuery
0x140037212: "__cdecl _imp_load_FCIAddFile" __imp_load_FCIAddFile
0x140041500: " No engine/signature is currentl" ??_C@_0CL@GFDIGKPM@?6No?5engine?1signature?5is?5currentl@
0x140033ACC: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1400535E0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140054788: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x140050AC4: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x140054018: "__vectorcall ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R17?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140022B40: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x14005E450: "__vectorcall ??_R0?AV?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIMpIdleNotifierCallback@MpClient@@@CommonUtil@@@8
0x140051100: "hr=0x%08X" ??_C@_09PANKGPKN@hr?$DN0x?$CF08X?$AA@
0x140033E78: "__cdecl get_startup_argv_mode" _get_startup_argv_mode
0x14003A3D8: "__cdecl _imp_MpConfigClose" __imp_MpConfigClose
0x140039708: "const CMpAzSubmitServiceCallback::`vftable'{for `CommonUtil::CRefObject'}" ??_7CMpAzSubmitServiceCallback@@6BCRefObject@CommonUtil@@@
0x140039E38: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSampleHeaderQueue>::~AutoRef<struct MpClient::IMpSampleHeaderQueue>(void) __ptr64" ??1?$AutoRef@UIMpSampleHeaderQueue@MpClient@@@CommonUtil@@QEAA@XZ
0x140045740: "ERROR: AddFileToMpCab() failed (" ??_C@_1HK@LBNIGHC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAT?$AAo?$AAM?$AAp?$AAC?$AAa?$AAb?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x1400391A0: "const CommonUtil::CRefObject::`vftable'" ??_7CRefObject@CommonUtil@@6B@
0x140016B9C: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>::~CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>(void) __ptr64" ??1?$CUniqueHandle@UCAutoCloseRegistryKey@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140019D80: "public: class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Make_iter(class std::_List_unchecked_const_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > >,struct std::_Iterator_base0>)const __ptr64" ?_Make_iter@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@QEBA?AV?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@2@V?$_List_unchecked_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@U_Iterator_base0@2@@2@@Z
0x140039008: "const type_info::`vftable'" ??_7type_info@@6B@
0x140027920: "int __cdecl get_next_cabinet(struct CCAB * __ptr64,unsigned long,void * __ptr64)" ?get_next_cabinet@@YAHPEAUCCAB@@KPEAX@Z
0x140050F40: "Inbound service restriction rule" ??_C@_1FA@NNNIMBDD@?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAr?$AAu?$AAl?$AAe@
0x140065050: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x14004B950: "WdFilter" ??_C@_1BC@HGNKLABK@?$AAW?$AAd?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1400486D0: "ERROR: ConfigDumpFromOrigin() fa" ??_C@_1HA@IEGNBBKO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAD?$AAu?$AAm?$AAp?$AAF?$AAr?$AAo?$AAm?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x14005B328: "__cdecl CTA3?AVCHResultExceptionImpl@CommonUtil@@" _CTA3?AVCHResultExceptionImpl@CommonUtil@@
0x140056B20: "__cdecl _rtc_izz" __rtc_izz
0x140039208: "const CommonUtil::IRefObject::`vftable'" ??_7IRefObject@CommonUtil@@6B@
0x14004C9F8: "End: Idle Task - %s " ??_C@_1CK@CADALPAA@?$AAE?$AAn?$AAd?$AA?3?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?5?$AA?9?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140043A68: "%windir%\logs\cbs" ??_C@_1CE@BLOMJAHC@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAl?$AAo?$AAg?$AAs?$AA?2?$AAc?$AAb?$AAs?$AA?$AA@
0x140026320: "long __cdecl CheckClientIdentity(void * __ptr64,unsigned long,int * __ptr64)" ?CheckClientIdentity@@YAJPEAXKPEAH@Z
0x140049318: "SpyNetReportingLocation" ??_C@_1DA@DIBBBLMJ@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140039E28: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x140055018: "__vectorcall ??_R3CMpAzSubmitServiceCallback" ??_R3CMpAzSubmitServiceCallback@@8
0x140054E30: "__vectorcall ??_R2CMpAzSubmitServiceCallback" ??_R2CMpAzSubmitServiceCallback@@8
0x14003EDA8: "Reset not needed. Already runnin" ??_C@_0DC@DNFILNDM@Reset?5not?5needed?4?5Already?5runnin@
0x140033A00: "__cdecl _security_check_cookie" __security_check_cookie
0x140055E60: "const CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem::`RTTI Complete Object Locator'" ??_R4CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@6B@
0x140055D90: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@8
0x14003A058: Secur32_NULL_THUNK_DATA
0x140051060: WPP_45b03c6b52363708dc744ce5cb93a29f_Traceguids
0x14001B178: "void __cdecl RunCommandEnableService(int,unsigned long)" ?RunCommandEnableService@@YAXHK@Z
0x140030908: "protected: struct std::pair<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,bool> __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::_Insert<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > & __ptr64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > >(struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > & __ptr64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >) __ptr64" ??$_Insert@AEAU?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@2@@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@_N@1@AEAU?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@1@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@1@@Z
0x14004CC38: "EvtRender" ??_C@_09OCGFKDOI@EvtRender?$AA@
0x14003A518: "__cdecl _xc_z" __xc_z
0x140035D04: "__cdecl _BuildCatchObjectHelper" __BuildCatchObjectHelper
0x1400531E8: "__vectorcall ??_R3CMpIdleNotifierCallback" ??_R3CMpIdleNotifierCallback@@8
0x1400530F8: "__vectorcall ??_R2CMpIdleNotifierCallback" ??_R2CMpIdleNotifierCallback@@8
0x14004B800: "unsigned short const * const RuntimeClass_Windows_SecurityCenter_WscDataProtection" ?RuntimeClass_Windows_SecurityCenter_WscDataProtection@@3QBGB
0x1400510E0: "IsWow64Process" ??_C@_0P@LKABJJMO@IsWow64Process?$AA@
0x1400548C0: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x140030B78: MpIsWindowsVistaSP1
0x1400117A4: "public: __cdecl CMpSignaturesUpdateServiceCallback::CMpSignaturesUpdateServiceCallback(void) __ptr64" ??0CMpSignaturesUpdateServiceCallback@@QEAA@XZ
0x140053A80: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x1400552D8: "const std::logic_error::`RTTI Complete Object Locator'" ??_R4logic_error@std@@6B@
0x140044340: "MpSigStub.log" ??_C@_1BM@IMOKPOEO@?$AAM?$AAp?$AAS?$AAi?$AAg?$AAS?$AAt?$AAu?$AAb?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x14004CA80: "Persisted Cache is disabled. Ski" ??_C@_1HM@BFJMONCD@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?5?$AAi?$AAs?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?4?$AA?5?$AAS?$AAk?$AAi@
0x14003A358: "__cdecl _imp_MpUpdateStart" __imp_MpUpdateStart
0x140039E80: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140039BE8: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x14004C6C8: "%02X " ??_C@_1M@OLEMGGOE@?$AA?$CF?$AA0?$AA2?$AAX?$AA?5?$AA?$AA@
0x14001C458: ??$UtilGetProcAddress@$$A6AJXZ@CommonUtil@@YAJPEAP6AJXZPEAUHINSTANCE__@@PEBD_N@Z
0x1400544F0: "__vectorcall ??_R18?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R18?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x140041CF0: "ERROR: MpDynamicSignatureEnumera" ??_C@_1GM@OMECANGD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa@
0x140055EC0: "const CommonUtil::CCmdOptionsLookupMap::`RTTI Complete Object Locator'" ??_R4CCmdOptionsLookupMap@CommonUtil@@6B@
0x140053CD8: "__vectorcall ??_R2StrongReference@Details@WRL@Microsoft" ??_R2StrongReference@Details@WRL@Microsoft@@8
0x140022ADC: "public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64" ??0exception@std@@QEAA@AEBV01@@Z
0x1400549E0: "__vectorcall ??_R3StrongReference@Details@WRL@Microsoft" ??_R3StrongReference@Details@WRL@Microsoft@@8
0x140040620: "Cleaning failed. " ??_C@_0BC@NALENMAC@Cleaning?5failed?4?6?$AA@
0x14004BA68: "NisDrv" ??_C@_1O@KJIKNDNG@?$AAN?$AAi?$AAs?$AAD?$AAr?$AAv?$AA?$AA@
0x1400497D0: "MiscConfig set, forcing update t" ??_C@_1FC@IGEDMDBI@?$AAM?$AAi?$AAs?$AAc?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAs?$AAe?$AAt?$AA?0?$AA?5?$AAf?$AAo?$AAr?$AAc?$AAi?$AAn?$AAg?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAt@
0x140055118: "__vectorcall ??_R1A@?0A@EA@logic_error@std" ??_R1A@?0A@EA@logic_error@std@@8
0x14004FA10: "ERROR: MpSampleSubmit failed wit" ??_C@_1EM@NENOEEPF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt@
0x14005B0D0: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x14003F100: "GetDeviceTicket" ??_C@_1CA@HIDGMCE@?$AAG?$AAe?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAi?$AAc?$AAk?$AAe?$AAt?$AA?$AA@
0x14003A1F8: "__cdecl _imp___stdio_common_vfwprintf" __imp___stdio_common_vfwprintf
0x14004CE00: "Microsoft-Windows-Windows Defend" ??_C@_1EG@HJFGIECJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd@
0x14005FE20: "__vectorcall ??_R0?AUIWeakReferenceSource@" ??_R0?AUIWeakReferenceSource@@@8
0x140061188: PfnEventWrite
0x1400551C8: "__vectorcall ??_R1A@?0A@EA@bad_alloc@std" ??_R1A@?0A@EA@bad_alloc@std@@8
0x140054310: "__vectorcall ??_R1BC@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1BC@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x14001E518: "class Microsoft::WRL::Details::WeakReferenceImpl * __ptr64 __cdecl Microsoft::WRL::Details::CreateWeakReference(struct IUnknown * __ptr64)" ?CreateWeakReference@Details@WRL@Microsoft@@YAPEAVWeakReferenceImpl@123@PEAUIUnknown@@@Z
0x14003A200: "__cdecl _imp___stdio_common_vfprintf" __imp___stdio_common_vfprintf
0x14003A068: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x14004AC70: "ERROR: WriteWscCloudProviderQuer" ??_C@_1GE@DMCAOMHL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x140043D60: "WindowsUpdate.log" ??_C@_1CE@DCJCIKAH@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<class CMpSampleHeaderQueueCallback>::~AutoRef<class CMpSampleHeaderQueueCallback>(void) __ptr64" ??1?$AutoRef@VCMpSampleHeaderQueueCallback@@@CommonUtil@@QEAA@XZ
0x14003A1C0: "__cdecl _imp__invalid_parameter_noinfo_noreturn" __imp__invalid_parameter_noinfo_noreturn
0x14003F130: WPP_7d0b8d0bcf4637eff42179008761aafa_Traceguids
0x140061268: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUsggkUoryxngUlyquivUznwGEUhgwzucOlyq@MpHttp" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUsggkUoryxngUlyquivUznwGEUhgwzucOlyq@MpHttp
0x140036290: "__cdecl _InternalCxxFrameHandler" __InternalCxxFrameHandler
0x140052C08: "const CUpdateNotifications::`RTTI Complete Object Locator'" ??_R4CUpdateNotifications@@6B@
0x140051110: WPP_ccd401bcbc1333cabf6440de6ae1ba8a_Traceguids
0x14001582C: "long __cdecl RunCommandCollectWscProviders(unsigned short const * __ptr64)" ?RunCommandCollectWscProviders@@YAJPEBG@Z
0x140041AB0: "SignatureSetID" ??_C@_1BO@GMLHLCMB@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAS?$AAe?$AAt?$AAI?$AAD?$AA?$AA@
0x1400391D0: "const CRegHandle::`vftable'" ??_7CRegHandle@@6B@
0x14003A1F0: "__cdecl _imp___acrt_iob_func" __imp___acrt_iob_func
0x14001FE10: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetRuntimeClassName(struct HSTRING__ * __ptr64 * __ptr64) __ptr64" ?GetRuntimeClassName@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAPEAUHSTRING__@@@Z
0x140046A40: "%ls " ??_C@_19MCPLNKAM@?$AA?$CF?$AAl?$AAs?$AA?7?$AA?$AA@
0x140034F70: "__cdecl CxxThrowException" _CxxThrowException
0x140055AC8: "const CommonUtil::CUtilRegEnumKeyValues::`RTTI Complete Object Locator'" ??_R4CUtilRegEnumKeyValues@CommonUtil@@6B@
0x1400451E0: "Getting windir\system32\recovery" ??_C@_1FO@OJLOCLOB@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy@
0x14004A034: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1400486B8: "mdm policy" ??_C@_1BG@KJPKMEOJ@?$AAm?$AAd?$AAm?$AA?5?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x140049658: "__cdecl _pfnDefaultDliNotifyHook2" __pfnDefaultDliNotifyHook2
0x140023130: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x1400546D0: "__vectorcall ??_R1A@?0A@EA@IWeakReferenceSource" ??_R1A@?0A@EA@IWeakReferenceSource@@8
0x1400428E8: "WSUS update" ??_C@_1BI@OLPDACLI@?$AAW?$AAS?$AAU?$AAS?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140016C20: "public: virtual void __cdecl CMpIdleNotifierCallback::OnServiceRundown(void) __ptr64" ?OnServiceRundown@CMpIdleNotifierCallback@@UEAAXXZ
0x140027320: "void __cdecl mem_free(void * __ptr64)" ?mem_free@@YAXPEAX@Z
0x140056667: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x140048B18: "Reporting" ??_C@_1BE@IFLMBIDF@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x14003EEB0: "ValidateMapsConnection" ??_C@_1CO@JCPJHKMI@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAM?$AAa?$AAp?$AAs?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140018B2C: "private: void __cdecl std::vector<unsigned short,class std::allocator<unsigned short> >::_Change_array(unsigned short * __ptr64 const,unsigned __int64,unsigned __int64) __ptr64" ?_Change_array@?$vector@GV?$allocator@G@std@@@std@@AEAAXQEAG_K1@Z
0x14003F120: "Roles" ??_C@_1M@NCHBIGJB@?$AAR?$AAo?$AAl?$AAe?$AAs?$AA?$AA@
0x140044AC0: "Getting WDSP log location failed" ??_C@_1FA@JBKJJDGD@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAD?$AAS?$AAP?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x14003A4A8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140039FD0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140050790: "WSAStartup" ??_C@_0L@EEFLCHHA@WSAStartup?$AA@
0x140050F90: "Outbound service restriction rul" ??_C@_1FC@KHOKHPNN@?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAr?$AAu?$AAl@
0x140055B98: "const CommonUtil::CUtilRegEnumSubKeys::`RTTI Complete Object Locator'" ??_R4CUtilRegEnumSubKeys@CommonUtil@@6B@
0x140048FD0: "Trace started . . . " ??_C@_1CK@OHFPMFGC@?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?5?$AA?4?$AA?5?$AA?4?$AA?5?$AA?4?$AA?6?$AA?$AA@
0x14002F860: "public: virtual unsigned short const * __ptr64 __cdecl CommonUtil::CCmdOptionsLookupMap::Lookup(unsigned short const * __ptr64)const __ptr64" ?Lookup@CCmdOptionsLookupMap@CommonUtil@@UEBAPEBGPEBG@Z
0x140055678: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@8
0x1400600B0: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x14005FC80: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@UIWeakReference@@@Details@WRL@Microsoft@@@8
0x14004BD80: "STOPPED " ??_C@_1BC@DNOAPBMF@?$AAS?$AAT?$AAO?$AAP?$AAP?$AAE?$AAD?$AA?5?$AA?$AA@
0x1400234C8: "void __cdecl InitLibAndGetProcAddress(void)" ?InitLibAndGetProcAddress@@YAXXZ
0x14002D324: "void __cdecl CommonUtil::CommonThrowHr(long)" ?CommonThrowHr@CommonUtil@@YAXJ@Z
0x14002318C: "private: void __cdecl CMpAsimov::InitShouldHashIds(void) __ptr64" ?InitShouldHashIds@CMpAsimov@@AEAAXXZ
0x140051030: WPP_4048317fc3273c1454a98090c9601cfa_Traceguids
0x14003A328: "__cdecl _imp_MpAllocMemory" __imp_MpAllocMemory
0x140048600: "effective policy" ??_C@_1CC@BHDLDONI@?$AAe?$AAf?$AAf?$AAe?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1400542E8: "__vectorcall ??_R1A@?0A@EA@?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows" ??_R1A@?0A@EA@?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@@8
0x140039EB0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x14003FA90: "Sense" ??_C@_1M@LMCOLEIP@?$AAS?$AAe?$AAn?$AAs?$AAe?$AA?$AA@
0x14004C268: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x14004D3D0: "ERROR: UtilGetProcAddress(%S) fa" ??_C@_1FG@JLHECGIM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$CI?$AA?$CF?$AAS?$AA?$CJ?$AA?5?$AAf?$AAa@
0x140021350: "public: virtual void * __ptr64 __cdecl CMpSampleHeaderQueueCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpSampleHeaderQueueCallback@@UEAAPEAXI@Z
0x140014B70: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ
0x140025108: "long __cdecl CommonUtil::UtilGetDisplayTime(unsigned short * __ptr64 * __ptr64,struct _SYSTEMTIME * __ptr64)" ?UtilGetDisplayTime@CommonUtil@@YAJPEAPEAGPEAU_SYSTEMTIME@@@Z
0x140023330: "void __cdecl ResetMpAsimov(struct AsimovDefaultData &&)" ?ResetMpAsimov@@YAX$$QEAUAsimovDefaultData@@@Z
0x140040C30: "CheckForSignaturesBeforeRunningS" ??_C@_1EI@IHBMIBFL@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAF?$AAo?$AAr?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AAS@
0x140017CF4: "private: long __cdecl CrimsonEventLog::ExtractTimePropertyFromPayload(class std::vector<unsigned short,class std::allocator<unsigned short> > const & __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?ExtractTimePropertyFromPayload@CrimsonEventLog@@AEAAJAEBV?$vector@GV?$allocator@G@std@@@std@@PEAPEAG@Z
0x14003A498: "__cdecl _imp_CoWaitForMultipleHandles" __imp_CoWaitForMultipleHandles
0x14004B630: "********************************" ??_C@_1KM@FMJJNCDA@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x140053E88: "__vectorcall ??_R1A@?0A@EA@OnlineIdTicketVector" ??_R1A@?0A@EA@OnlineIdTicketVector@@8
0x140049658: Microsoft_Antimalware_ServiceKeywords
0x140053218: "const CMpIdleNotifierCallback::`RTTI Complete Object Locator'" ??_R4CMpIdleNotifierCallback@@6B@
0x140043D88: "%windir%" ??_C@_1BC@CGIBIBCK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?$AA@
0x140054AA0: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140053E10: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x1400551F0: "__vectorcall ??_R2logic_error@std" ??_R2logic_error@std@@8
0x140039360: "const Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>::`vftable'" ??_7?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@6B@
0x1400552A8: "__vectorcall ??_R3logic_error@std" ??_R3logic_error@std@@8
0x14003A1E0: "__cdecl _imp__set_app_type" __imp__set_app_type
0x140039E48: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400450F8: "*.log" ??_C@_1M@PPKPPOKL@?$AA?$CK?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x1400408E0: "MpCleanThreats() started for act" ??_C@_1HA@PEACGBDI@?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAa?$AAc?$AAt@
0x140054B00: "__vectorcall ??_R3IWeakReference" ??_R3IWeakReference@@8
0x14000947C: "long __cdecl MpCmdUtils::InitializeAsimovLogger(void)" ?InitializeAsimovLogger@MpCmdUtils@@YAJXZ
0x140053E48: "__vectorcall ??_R2IWeakReference" ??_R2IWeakReference@@8
0x140028C90: "public: virtual void * __ptr64 __cdecl CMpSpyNetQueueCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpSpyNetQueueCallback@@UEAAPEAXI@Z
0x140040DD8: "Remove" ??_C@_1O@KEIBEGCK@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x14004AFB0: " User Sid: %ls " ??_C@_1CM@FPBPMHKO@?$AA?5?$AA?5?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAS?$AAi?$AAd?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<class CMseWatCheck>::~AutoRef<class CMseWatCheck>(void) __ptr64" ??1?$AutoRef@VCMseWatCheck@@@CommonUtil@@QEAA@XZ
0x14004D218: "Information " ??_C@_1BK@FOJKPEJA@?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?7?$AA?$AA@
0x14001C740: "public: virtual void * __ptr64 __cdecl CMseWatCheck::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMseWatCheck@@UEAAPEAXI@Z
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpIdleNotifierFactory>::~AutoRef<struct MpClient::IMpIdleNotifierFactory>(void) __ptr64" ??1?$AutoRef@UIMpIdleNotifierFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x140021F88: "private: long __cdecl CMpSampleHeaderQueueCallback::HandleCommonSampleHeaderReport(struct MpClient::IMpSampleHeaderContext * __ptr64) __ptr64" ?HandleCommonSampleHeaderReport@CMpSampleHeaderQueueCallback@@AEAAJPEAUIMpSampleHeaderContext@MpClient@@@Z
0x140022E60: "public: virtual void * __ptr64 __cdecl CError::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCError@@UEAAPEAXI@Z
0x1400533D0: "__vectorcall ??_R1A@?0A@EA@COfflineScannerDownload" ??_R1A@?0A@EA@COfflineScannerDownload@@8
0x14004FC30: "unsigned short const * const RuntimeClass_Windows_Security_Authentication_OnlineId_OnlineIdServiceTicketRequest" ?RuntimeClass_Windows_Security_Authentication_OnlineId_OnlineIdServiceTicketRequest@@3QBGB
0x14003A3E8: "__cdecl _imp_MpConfigOpen" __imp_MpConfigOpen
0x140055F18: "__vectorcall ??_R2CCmdOptionsLookupMap@CommonUtil" ??_R2CCmdOptionsLookupMap@CommonUtil@@8
0x14005F350: "__vectorcall ??_R0?AV?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@" ??_R0?AV?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@@8
0x140055EE8: "__vectorcall ??_R3CCmdOptionsLookupMap@CommonUtil" ??_R3CCmdOptionsLookupMap@CommonUtil@@8
0x140031B14: "long __cdecl CommonUtil::UtilCoCreateInstanceImpl(void * __ptr64 * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,unsigned long,struct IUnknown * __ptr64)" ?UtilCoCreateInstanceImpl@CommonUtil@@YAJPEAPEAXAEBU_GUID@@1KPEAUIUnknown@@@Z
0x140039EE8: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x140055450: "__vectorcall ??_R2CHResultException@CommonUtil" ??_R2CHResultException@CommonUtil@@8
0x140055468: "__vectorcall ??_R3CHResultException@CommonUtil" ??_R3CHResultException@CommonUtil@@8
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommunication::IMpCommunicationLibrary>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@UEBAJXZ
0x140044A50: "%programdata%\Microsoft\Windows " ??_C@_1GK@HOGFAFLK@?$AA?$CF?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAd?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x1400418C0: "Please use MpCmdRun.exe -ListAll" ??_C@_0ED@JBCGBIJE@Please?5use?5MpCmdRun?4exe?5?9ListAll@
0x140055378: "__vectorcall ??_R1A@?0A@EA@length_error@std" ??_R1A@?0A@EA@length_error@std@@8
0x14001A350: "public: void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > > >::assign(unsigned __int64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > const & __ptr64) __ptr64" ?assign@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@QEAAX_KAEBV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@2@@Z
0x1400417F0: " Adding Dynamic Signature: %ws.." ??_C@_0CC@PBLHINKK@?6Adding?5Dynamic?5Signature?3?5?$CFws?4?4@
0x140011918: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSpyNetQueueCallback>::~CRefObjectFor<struct MpClient::IMpSpyNetQueueCallback>(void) __ptr64" ??1?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@MEAA@XZ
0x14004C4E0: "Value: [REG_BINARY] - error whil" ??_C@_1GM@OLLDLNIA@?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?3?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAB?$AAI?$AAN?$AAA?$AAR?$AAY?$AA?$FN?$AA?5?$AA?9?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAw?$AAh?$AAi?$AAl@
0x14002F1BC: CngRsa32Compat_SHAInit
0x140050AE0: "MAPSconcurrencyDss" ??_C@_1CG@CGNFIMKK@?$AAM?$AAA?$AAP?$AAS?$AAc?$AAo?$AAn?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAc?$AAy?$AAD?$AAs?$AAs?$AA?$AA@
0x1400269A4: UtilGetFileVersionWithCheck
0x140033A50: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140032AC8: MpLoadStringNonNullTerminated
0x14001D120: "int __cdecl file_placed(struct CCAB * __ptr64,char * __ptr64,long,int,void * __ptr64)" ?file_placed@@YAHPEAUCCAB@@PEADJHPEAX@Z
0x140055E38: "__vectorcall ??_R1A@?0A@EA@?$IForwardIterator@$$CBG@CommonUtil" ??_R1A@?0A@EA@?$IForwardIterator@$$CBG@CommonUtil@@8
0x14003A060: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x14003A1D0: "__cdecl _imp__errno" __imp__errno
0x140039DE0: "__cdecl _imp_Process32NextW" __imp_Process32NextW
0x14004DC58: "list<T> too long" ??_C@_0BB@MOGOBHAF@list?$DMT?$DO?5too?5long?$AA@
0x14005B2E0: "__cdecl CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48" _CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48
0x14002D3B8: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(class CommonUtil::CHResultExceptionImpl const & __ptr64) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z
0x14003522C: "int __cdecl __StateFromControlPc(struct _s_FuncInfo const * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64)" ?__StateFromControlPc@@YAHPEBU_s_FuncInfo@@PEAU_xDISPATCHER_CONTEXT@@@Z
0x14003E130: "MpCmdRunWithTracing" ??_C@_1CI@HDIPPOND@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AAW?$AAi?$AAt?$AAh?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x140011BF0: "private: virtual void __cdecl CMpSignaturesUpdateServiceCallback::OnCompletion(struct tagMP_SIGUPD_SERVICE_CALLBACK const * __ptr64,long) __ptr64" ?OnCompletion@CMpSignaturesUpdateServiceCallback@@EEAAXPEBUtagMP_SIGUPD_SERVICE_CALLBACK@@J@Z
0x14002E4A0: "long __cdecl CommonUtil::UtilRegGetValueString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,enum CommonUtil::UTIL_REG_EXPAND_STRING,unsigned long * __ptr64)" ?UtilRegGetValueString@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAPEAGW4UTIL_REG_EXPAND_STRING@1@PEAK@Z
0x1400410D0: "ISU" ??_C@_17NKMGHMJJ@?$AAI?$AAS?$AAU?$AA?$AA@
0x14004FF68: "MpSampleBlockUploadParallelism" ??_C@_1DO@GMJGNOON@?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAB?$AAl?$AAo?$AAc?$AAk?$AAU?$AAp?$AAl?$AAo?$AAa?$AAd?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAi?$AAs?$AAm?$AA?$AA@
0x14003E680: "ListAllDynamicSignatures" ??_C@_1DC@KHMFNCBA@?$AAL?$AAi?$AAs?$AAt?$AAA?$AAl?$AAl?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x140046238: "ELAM disabled" ??_C@_1BM@LIPPJCBC@?$AAE?$AAL?$AAA?$AAM?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1400492F8: "SpyNetReporting" ??_C@_1CA@NOLDJJLB@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x1400442A0: "ERROR: GetFastPathSignatureBlobs" ??_C@_1FM@GBKJMDPA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAF?$AAa?$AAs?$AAt?$AAP?$AAa?$AAt?$AAh?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAB?$AAl?$AAo?$AAb?$AAs@
0x1400403D0: "Scanning %ls found no threats. " ??_C@_0CA@JIDJKKPB@Scanning?5?$CFls?5found?5no?5threats?4?6?$AA@
0x140050390: "EventLogSourceName" ??_C@_1CG@KPCFLJEF@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140041908: "the list of SignatureSet ID's. " ??_C@_0CA@MIEIMLJE@the?5list?5of?5SignatureSet?5ID?8s?4?6?$AA@
0x14004C9B0: "Service stopped. Exiting Idle Ta" ??_C@_1EG@HJHJCMEN@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAs?$AAt?$AAo?$AAp?$AAp?$AAe?$AAd?$AA?4?$AA?5?$AAE?$AAx?$AAi?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAT?$AAa@
0x14004F1F0: "MpCommu.dll" ??_C@_1BI@JMDJKOPN@?$AAM?$AAp?$AAC?$AAo?$AAm?$AAm?$AAu?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400545B8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x140053FC8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassBaseT@$02@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassBaseT@$02@Details@WRL@Microsoft@@8
0x140042FF0: "Software\Microsoft\Windows Defen" ??_C@_1GI@CBAFGGKL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn@
0x140022BB8: "public: __cdecl std::length_error::length_error(char const * __ptr64) __ptr64" ??0length_error@std@@QEAA@PEBD@Z
0x14002EC00: "private: long __cdecl CommonUtil::CUtilRegEnumKeyValues::ResizeBuffers(unsigned __int64,unsigned __int64) __ptr64" ?ResizeBuffers@CUtilRegEnumKeyValues@CommonUtil@@AEAAJ_K0@Z
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@UEAAPEAXI@Z
0x14005AFD0: "__cdecl CTA3?AVbad_array_new_length@std@@" _CTA3?AVbad_array_new_length@std@@
0x14004DAB0: "Restoring the following quaranti" ??_C@_1GE@IPCBNOAP@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAf?$AAo?$AAl?$AAl?$AAo?$AAw?$AAi?$AAn?$AAg?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi@
0x140055348: "__vectorcall ??_R3out_of_range@std" ??_R3out_of_range@std@@8
0x140040E28: "ScheduleDay" ??_C@_1BI@HGLCIHEI@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x140055300: "__vectorcall ??_R2out_of_range@std" ??_R2out_of_range@std@@8
0x14005B1B8: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24
0x140028DF8: "public: void __cdecl CMpSpyNetQueueCallback::WaitForCompletion(struct MpClient::IMpSpyNetQueue * __ptr64,bool) __ptr64" ?WaitForCompletion@CMpSpyNetQueueCallback@@QEAAXPEAUIMpSpyNetQueue@MpClient@@_N@Z
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct CommonUtil::IForwardIterator<unsigned short const> >::Release(void)const __ptr64" ?Release@?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@UEBAJXZ
0x14003E570: "Trace" ??_C@_1M@NHDCNHKG@?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?$AA@
0x14003A0D8: "__cdecl _imp__wremove" __imp__wremove
0x1400506F8: WPP_33d40ee3f1c738c6ca5bafe05d438019_Traceguids
0x14001D130: "public: virtual void * __ptr64 __cdecl MpCommunication::IMpDownloadCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_EIMpDownloadCallback@MpCommunication@@UEAAPEAXI@Z
0x140039F00: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x14003A378: "__cdecl _imp_MpGetSampleChunk" __imp_MpGetSampleChunk
0x140051540: "__stdcall _xmm" __xmm@00000000000000070000000000000000
0x140020200: "public: virtual long __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::Invoke(struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> * __ptr64,enum ABI::Windows::Foundation::AsyncStatus) __ptr64" ?Invoke@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@UEAAJPEAU?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@W4AsyncStatus@34ABI@@@Z
0x14005ECA8: "__vectorcall ??_R0?AVOnlineIdTicketIterator@" ??_R0?AVOnlineIdTicketIterator@@@8
0x140046168: "Auto sigupdate disabled" ??_C@_1DA@JFLIDHKE@?$AAA?$AAu?$AAt?$AAo?$AA?5?$AAs?$AAi?$AAg?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1400427C0: "CreateFileW(%ls) FAILED %X " ??_C@_1DI@GJDKMCOG@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAW?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAF?$AAA?$AAI?$AAL?$AAE?$AAD?$AA?5?$AA?$CF?$AAX?$AA?6?$AA?$AA@
0x14003A9D0: "__cdecl _sz_USERENV_dll" __sz_USERENV_dll
0x14003E098: ""%ls" -%ls -Reinvoke" ??_C@_1CK@POEEFGNO@?$AA?$CC?$AA?$CF?$AAl?$AAs?$AA?$CC?$AA?5?$AA?9?$AA?$CF?$AAl?$AAs?$AA?5?$AA?9?$AAR?$AAe?$AAi?$AAn?$AAv?$AAo?$AAk?$AAe?$AA?$AA@
0x14003A570: "__cdecl _xp_z" __xp_z
0x140039C08: "__cdecl _imp_ReadEventLogW" __imp_ReadEventLogW
0x140034F48: "__cdecl _std_type_info_compare" __std_type_info_compare
0x140060660: "__vectorcall ??_R0?AUICmdOptionsLookup@CommonUtil@" ??_R0?AUICmdOptionsLookup@CommonUtil@@@8
0x140003F34: "public: __cdecl CUserContext::CUserContext(void) __ptr64" ??0CUserContext@@QEAA@XZ
0x14005F6A0: "__vectorcall ??_R0?AU?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@" ??_R0?AU?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@8
0x140006678: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpConfigClose>::~CUniqueHandle<struct CAutoMpConfigClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpConfigClose@@@CommonUtil@@QEAA@XZ
0x140050768: "ws2_32.dll" ??_C@_1BG@KNJGGOFB@?$AAw?$AAs?$AA2?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14004E9E0: "Files in top level directory of " ??_C@_1EM@MCBNCDFB@?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AAi?$AAn?$AA?5?$AAt?$AAo?$AAp?$AA?5?$AAl?$AAe?$AAv?$AAe?$AAl?$AA?5?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?5?$AAo?$AAf?$AA?5@
0x140034820: "__cdecl _DestructExceptionObject" __DestructExceptionObject
0x140034638: "__cdecl GetThrowImageBase" _GetThrowImageBase
0x14003A268: "__cdecl _imp__write" __imp__write
0x140020A90: "private: static void __cdecl CommonUtil::CMpThreadPoolItemBase::DoAction(struct tagMP_THREAD_POOL_ITEM * __ptr64)" ?DoAction@CMpThreadPoolItemBase@CommonUtil@@CAXPEAUtagMP_THREAD_POOL_ITEM@@@Z
0x140052DF0: "const CRegHandle::`RTTI Complete Object Locator'" ??_R4CRegHandle@@6B@
0x1400245E8: "long __cdecl MpConfigUtils::GetMpInstallLocation(unsigned short * __ptr64 * __ptr64,bool)" ?GetMpInstallLocation@MpConfigUtils@@YAJPEAPEAG_N@Z
0x14000DA74: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoMpSmartCoInitialize>::~CUniqueHandle<struct CommonUtil::CAutoMpSmartCoInitialize>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpSmartCoInitialize@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140039D50: "__cdecl _imp_SetFilePointerEx" __imp_SetFilePointerEx
0x14003A2C8: "__cdecl _imp__wcsupr_s" __imp__wcsupr_s
0x140050A98: "MPSVC_" ??_C@_1O@DPLEPLKC@?$AAM?$AAP?$AAS?$AAV?$AAC?$AA_?$AA?$AA@
0x140039DC8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x140022F34: "void __cdecl AssertCondition(bool,long)" ?AssertCondition@@YAX_NJ@Z
0x14002F9A0: "public: virtual unsigned __int64 __cdecl CommonUtil::CCmdOptionsLookupMap::Count(void)const __ptr64" ?Count@CCmdOptionsLookupMap@CommonUtil@@UEBA_KXZ
0x140052CE8: "__vectorcall ??_R3CUniqueNamedObject@MpCmdUtils" ??_R3CUniqueNamedObject@MpCmdUtils@@8
0x140052CA8: "__vectorcall ??_R2CUniqueNamedObject@MpCmdUtils" ??_R2CUniqueNamedObject@MpCmdUtils@@8
0x140020B28: "public: virtual void * __ptr64 __cdecl CMpAzSubmitServiceCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpAzSubmitServiceCallback@@UEAAPEAXI@Z
0x1400411F0: "ERROR: Signature Update failed w" ??_C@_1FG@PPOOOMBN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw@
0x140039C50: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x1400393B0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@WRL@Microsoft@@6B@
0x140007B64: "void __cdecl RunCommandAddSignatureFile(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandAddSignatureFile@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14001FDE0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetTrustLevel(enum TrustLevel * __ptr64) __ptr64" ?GetTrustLevel@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAW4TrustLevel@@@Z
0x140055CB8: "const CommonUtil::CArgvIter::`RTTI Complete Object Locator'" ??_R4CArgvIter@CommonUtil@@6B@
0x140055C58: "__vectorcall ??_R2?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil" ??_R2?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@8
0x140020420: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IWeakReference>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140056B30: "__cdecl _rtc_tzz" __rtc_tzz
0x140055E20: "__vectorcall ??_R3?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil" ??_R3?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@8
0x140048AD0: "SignaturesLastUpdated" ??_C@_1CM@FFNENKLA@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAL?$AAa?$AAs?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x140039EF8: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x14003A588: "__cdecl _guard_fids_table" __guard_fids_table
0x14000DE1C: "public: virtual __cdecl HModule::~HModule(void) __ptr64" ??1HModule@@UEAA@XZ
0x1400462B0: "Unknown component disabled" ??_C@_1DG@DIKLBPOM@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140045640: "ERROR: CopyFileW() failed (%X) " ??_C@_1EA@GBLPLGGJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAF?$AAi?$AAl?$AAe?$AAW?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x140025540: "long __cdecl CommonUtil::CreateNewRefObject<class MpConfigUtils::CMpConfigKeysIterator>(class MpConfigUtils::CMpConfigKeysIterator * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@YAJPEAPEAVCMpConfigKeysIterator@MpConfigUtils@@@Z
0x140025A64: "long __cdecl CommonUtil::CreateNewRefObject<class MpCommunication::CMpCommunicationLibrary>(class MpCommunication::CMpCommunicationLibrary * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCMpCommunicationLibrary@MpCommunication@@@CommonUtil@@YAJPEAPEAVCMpCommunicationLibrary@MpCommunication@@@Z
0x1400229A0: "public: __cdecl CommonUtil::AutoRef<class CMpAzSubmitServiceCallback>::~AutoRef<class CMpAzSubmitServiceCallback>(void) __ptr64" ??1?$AutoRef@VCMpAzSubmitServiceCallback@@@CommonUtil@@QEAA@XZ
0x14003055C: "long __cdecl CommonUtil::CreateNewRefObject<class CommonUtil::CArgvIter>(class CommonUtil::CArgvIter * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCArgvIter@CommonUtil@@@CommonUtil@@YAJPEAPEAVCArgvIter@0@@Z
0x140049348: "Miscellaneous Configuration" ??_C@_1DI@KBKKDJCJ@?$AAM?$AAi?$AAs?$AAc?$AAe?$AAl?$AAl?$AAa?$AAn?$AAe?$AAo?$AAu?$AAs?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14001733C: "public: __cdecl CrimsonEventLog::~CrimsonEventLog(void) __ptr64" ??1CrimsonEventLog@@QEAA@XZ
0x14001D830: "public: virtual void * __ptr64 __cdecl COfflineScannerDownload::`vector deleting destructor'(unsigned int) __ptr64" ??_ECOfflineScannerDownload@@UEAAPEAXI@Z
0x1400441A0: "Getting MpCmdRun log (4/4)... " ??_C@_1DO@ELKLIKGJ@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA4?$AA?1?$AA4?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140054CD8: "const AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::`RTTI Complete Object Locator'" ??_R4?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@6B@
0x140046838: "ERROR: swscanf_s(...) failed" ??_C@_1DK@NPOJBFEH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAs?$AAw?$AAs?$AAc?$AAa?$AAn?$AAf?$AA_?$AAs?$AA?$CI?$AA?4?$AA?4?$AA?4?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140048150: "Software\Wow6432Node\Classes\APP" ??_C@_1JE@IPFADBIP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAP?$AAP@
0x1400460A8: "Behavior monitor disabled" ??_C@_1DE@NGIHBOHA@?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AA?5?$AAm?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140039080: "__cdecl load_config_used" _load_config_used
0x1400600D8: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x14004DA60: "The following items are quaranti" ??_C@_1EM@IMPFHOAD@?$AAT?$AAh?$AAe?$AA?5?$AAf?$AAo?$AAl?$AAl?$AAo?$AAw?$AAi?$AAn?$AAg?$AA?5?$AAi?$AAt?$AAe?$AAm?$AAs?$AA?5?$AAa?$AAr?$AAe?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi@
0x14001AA98: "public: struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64 __cdecl std::_List_alloc<struct std::_List_base_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >::_Buynode0(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64,struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64) __ptr64" ?_Buynode0@?$_List_alloc@U?$_List_base_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@2@@std@@@std@@QEAAPEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@PEAX@2@PEAU32@0@Z
0x140043A90: "ERROR: GetLogFile(WINDOWS_CBS_LO" ??_C@_1GK@BBBHOGK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA_?$AAC?$AAB?$AAS?$AA_?$AAL?$AAO@
0x140055830: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@8
0x14004E1B8: "ServiceName" ??_C@_1BI@BGAAOEPC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14005B0B0: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x140045300: "Files successfully created in %l" ??_C@_1FC@MKGPCADH@?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAi?$AAn?$AA?5?$AA?$CF?$AAl@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x14004C860: "Start: Idle Task - %s " ??_C@_1CO@HCDMKNHE@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?5?$AA?9?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14005B2A0: "__cdecl CTA3?AVCError@@" _CTA3?AVCError@@
0x140017310: "public: __cdecl CrimsonEventLog::CrimsonEventLog(void) __ptr64" ??0CrimsonEventLog@@QEAA@XZ
0x14003FDC8: "Scanning path as %ls: %ls. " ??_C@_1DI@NPHMEJHH@?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5?$AAa?$AAs?$AA?5?$AA?$CF?$AAl?$AAs?$AA?3?$AA?5?$AA?$CF?$AAl?$AAs?$AA?4?$AA?6?$AA?$AA@
0x14000FF58: "long __cdecl RunCommandConfigDump(void)" ?RunCommandConfigDump@@YAJXZ
0x140039D38: "__cdecl _imp_QueryPerformanceFrequency" __imp_QueryPerformanceFrequency
0x14002D158: "long __cdecl CommonUtil::HrSetFileAttributes(unsigned short const * __ptr64,unsigned long)" ?HrSetFileAttributes@CommonUtil@@YAJPEBGK@Z
0x140024A58: "long __cdecl MpConfigUtils::GetPartnerGUID(unsigned short * __ptr64 * __ptr64)" ?GetPartnerGUID@MpConfigUtils@@YAJPEAPEAG@Z
0x14003E5C0: "IdleTask" ??_C@_1BC@OMOMBFFJ@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x140032CB8: DloadProtectSection
0x140052C30: "__vectorcall ??_R1A@?0A@EA@CRefObject@CommonUtil" ??_R1A@?0A@EA@CRefObject@CommonUtil@@8
0x1400161E8: "long __cdecl PrintRegistryKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?PrintRegistryKey@@YAJPEAUHKEY__@@PEBG@Z
0x140043C78: "%windir%\Logs\WindowsUpdate" ??_C@_1DI@EOCCFJEA@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAL?$AAo?$AAg?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x14004B490: " LastKnownGoodTimestamp: " ??_C@_1FE@KOKEGHDH@?$AA?5?$AA?5?$AA?5?$AA?5?$AAL?$AAa?$AAs?$AAt?$AAK?$AAn?$AAo?$AAw?$AAn?$AAG?$AAo?$AAo?$AAd?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa?$AAm?$AAp?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x140036CDE: "__cdecl set_new_mode" _set_new_mode
0x140039EA0: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x14002BE04: "protected: virtual __cdecl MpService::CDebugMessageBase::~CDebugMessageBase(void) __ptr64" ??1CDebugMessageBase@MpService@@MEAA@XZ
0x140050668: "%ls %ls" ??_C@_1BA@HDKJPAHA@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x14004C890: "ERROR: Creating Idle Notifier Co" ??_C@_1GC@JDGFHOON@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?5?$AAC?$AAo@
0x140049198: "ServiceHardeningFlags" ??_C@_1CM@FNLCDLAL@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAH?$AAa?$AAr?$AAd?$AAe?$AAn?$AAi?$AAn?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14004C7F0: "Idle Task - timeout %u " ??_C@_1DA@KGPGGKAE@?$AAI?$AAd?$AAl?$AAe?$AA?5?$AAT?$AAa?$AAs?$AAk?$AA?5?$AA?9?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140045AB0: "failed to print the automatic si" ??_C@_1GM@OMIGOMNO@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAa?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAs?$AAi@
0x14004FAD8: "UserTicket" ??_C@_1BG@MEBDEBMF@?$AAU?$AAs?$AAe?$AAr?$AAT?$AAi?$AAc?$AAk?$AAe?$AAt?$AA?$AA@
0x140043610: "ERROR: GetSupportDir() failed (%" ??_C@_1EI@GJMCJGGI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAD?$AAi?$AAr?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x14004AD78: "Cloud Provider Product #%u " ??_C@_1DI@NLOFNDPI@?$AAC?$AAl?$AAo?$AAu?$AAd?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AA?$CD?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x1400514E0: WPP_06d427eb42cb3ce6e5624b35c07938d1_Traceguids
0x140037206: "__cdecl _imp_load_FCIDestroy" __imp_load_FCIDestroy
0x140039CA8: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x14003288C: MpRegisterForInitializationAtStartup
0x140043A30: "Getting CBS log... " ??_C@_1CI@ECJMCKIA@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAC?$AAB?$AAS?$AA?5?$AAl?$AAo?$AAg?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140054540: "__vectorcall ??_R1A@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft" ??_R1A@?0A@EA@DontUseNewUseMake@Details@WRL@Microsoft@@8
0x14004FF48: "MpAzSubmit.dll" ??_C@_1BO@LPAJMKFL@?$AAM?$AAp?$AAA?$AAz?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14004E6D0: "ERROR: Failed to open log file, " ??_C@_1FI@IAJNLKHK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?0?$AA?5@
0x14004FDB8: "RoOriginateError" ??_C@_0BB@ECEGDADH@RoOriginateError?$AA@
0x1400421D0: WPP_18e0fee609c03a77409e6c183a2e9d59_Traceguids
0x140024468: "long __cdecl MpConfigUtils::NewMpConfigKeysIterator(struct MpConfigUtils::IMpConfigKeysIterator * __ptr64 * __ptr64)" ?NewMpConfigKeysIterator@MpConfigUtils@@YAJPEAPEAUIMpConfigKeysIterator@1@@Z
0x140044988: "securityhealthservice" ??_C@_1CM@HIPMDIDH@?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140048A28: "NISSignatureApplied" ??_C@_1CI@JFFPGLGB@?$AAN?$AAI?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAe?$AAd?$AA?$AA@
0x140042150: "Update failed with hr: 0x%08lx " ??_C@_1EA@PNKCEIGG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAh?$AAr?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAl?$AAx?$AA?6?$AA?$AA@
0x140054AD0: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140053E20: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@8
0x140044C60: "ERROR: CollectWdspServiceInfo fa" ??_C@_1FG@IMDGCIBO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAW?$AAd?$AAs?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?5?$AAf?$AAa@
0x14003A540: "__cdecl _scrt_stdio_legacy_msvcrt_compatibility" __scrt_stdio_legacy_msvcrt_compatibility
0x14003ED80: "MpUpdatePlatform returned succes" ??_C@_0CH@CGAIIPKC@MpUpdatePlatform?5returned?5succes@
0x14004F1D0: "MpCommunicationDownloadFile" ??_C@_0BM@KGKILOHE@MpCommunicationDownloadFile?$AA@
0x14005B64C: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x140020200: "public: virtual long __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::Invoke(struct Windows::Foundation::IAsyncOperation<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> * __ptr64,enum ABI::Windows::Foundation::AsyncStatus) __ptr64" ?Invoke@?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@23@@@UEAAJPEAU?$IAsyncOperation@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@W4AsyncStatus@34ABI@@@Z
0x140046828: "%%%%%u" ??_C@_1O@PEHDFMOI@?$AA?$CF?$AA?$CF?$AA?$CF?$AA?$CF?$AA?$CF?$AAu?$AA?$AA@
0x140047280: "ERROR: CloseEventLog() failed (%" ??_C@_1EI@GBEBLBCG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAl?$AAo?$AAs?$AAe?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x14003E110: "MpCmdRun_Assert" ??_C@_1CA@MNHHIIJN@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAA?$AAs?$AAs?$AAe?$AAr?$AAt?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpProductGenuineCheck>::~AutoRef<struct MpClient::IMpProductGenuineCheck>(void) __ptr64" ??1?$AutoRef@UIMpProductGenuineCheck@MpClient@@@CommonUtil@@QEAA@XZ
0x1400371EE: "__cdecl _imp_load_FCIFlushCabinet" __imp_load_FCIFlushCabinet
0x14002ED28: "long __cdecl CommonUtil::UtilRegEnumValues(struct CommonUtil::IUtilRegEnumKeyValues * __ptr64 * __ptr64,struct HKEY__ * __ptr64)" ?UtilRegEnumValues@CommonUtil@@YAJPEAPEAUIUtilRegEnumKeyValues@1@PEAUHKEY__@@@Z
0x140044B90: "ERROR: CollectWdspRegistryKeys f" ??_C@_1FI@MOOMMIDB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAW?$AAd?$AAs?$AAp?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAK?$AAe?$AAy?$AAs?$AA?5?$AAf@
0x14001B0C8: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Buynode<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >(struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&) __ptr64" ??$_Buynode@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@?$_Tree_comp_alloc@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@1@$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@@Z
0x140020AB0: "private: static void __cdecl CommonUtil::CMpThreadPoolItemBase::DoRelease(struct tagMP_THREAD_POOL_ITEM * __ptr64)" ?DoRelease@CMpThreadPoolItemBase@CommonUtil@@CAXPEAUtagMP_THREAD_POOL_ITEM@@@Z
0x14003A120: "__cdecl _imp__configthreadlocale" __imp__configthreadlocale
0x1400511B0: "GetFileVersionInfoSizeExW" ??_C@_0BK@NCKKICFJ@GetFileVersionInfoSizeExW?$AA@
0x140011760: "public: virtual long __cdecl CMpSignaturesUpdateServiceCallback::Release(void)const __ptr64" ?Release@CMpSignaturesUpdateServiceCallback@@UEBAJXZ
0x140054590: "__vectorcall ??_R1A@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R1A@?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x140044300: "Getting MpSigStub log (1/2)... " ??_C@_1EA@GJNEAPKC@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAS?$AAi?$AAg?$AAS?$AAt?$AAu?$AAb?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA1?$AA?1?$AA2?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140039E08: "__cdecl _imp_ConvertDefaultLocale" __imp_ConvertDefaultLocale
0x140003A90: "void __cdecl MpCmdLogTeePrintf(unsigned short const * __ptr64,...)" ?MpCmdLogTeePrintf@@YAXPEBGZZ
0x14002C01C: "private: long __cdecl MpService::CDebugMessageBase::CvtValue(enum tagDebugDataType,unsigned __int64,void * __ptr64) __ptr64" ?CvtValue@CDebugMessageBase@MpService@@AEAAJW4tagDebugDataType@@_KPEAX@Z
0x1400545E0: "__vectorcall ??_R1A@?0A@EA@RuntimeClassBase@Details@WRL@Microsoft" ??_R1A@?0A@EA@RuntimeClassBase@Details@WRL@Microsoft@@8
0x1400506D0: "Timestamp NOT set." ??_C@_1CG@OCDKBNBG@?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa?$AAm?$AAp?$AA?5?$AAN?$AAO?$AAT?$AA?5?$AAs?$AAe?$AAt?$AA?4?$AA?$AA@
0x14002BDD0: "protected: virtual void * __ptr64 __cdecl MpService::CDebugMessageBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDebugMessageBase@MpService@@MEAAPEAXI@Z
0x140049090: " Trace file location: %s\%s " ??_C@_1DK@PCKBDLEL@?$AA?6?$AAT?$AAr?$AAa?$AAc?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14004C620: "ERROR: GetDateFormat() failed %X" ??_C@_1EE@BHHLGAMH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAD?$AAa?$AAt?$AAe?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX@
0x14004F520: "Signatures require updating, sta" ??_C@_1GC@NNIPOPJC@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?0?$AA?5?$AAs?$AAt?$AAa@
0x140046A60: "Warning " ??_C@_1BC@DAMFCPBN@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?7?$AA?$AA@
0x14004ABE0: "ERROR: WriteWscCloudProviderQuer" ??_C@_1IE@JGNHMOJP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x140052BC8: "__vectorcall ??_R1A@?0A@EA@CUpdateNotifications" ??_R1A@?0A@EA@CUpdateNotifications@@8
0x140061244: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUoryxngPfmrxigUlyquivUznwGEUhgwzucOlyq@MpGlobalsUnicrt" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUoryxngPfmrxigUlyquivUznwGEUhgwzucOlyq@MpGlobalsUnicrt
0x14002BA70: "public: virtual long __cdecl MpService::CSvcDeviceTicketMessage::OnInitCompleted(void) __ptr64" ?OnInitCompleted@CSvcDeviceTicketMessage@MpService@@UEAAJXZ
0x140039608: "const OnlineIdTicketIterator::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_7OnlineIdTicketIterator@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@@
0x14004E310: "ERROR" ??_C@_1M@BJACCECO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x14002DA50: "long __cdecl CommonUtil::UtilCheckTokenMembershipByRid(bool * __ptr64,void * __ptr64,unsigned long,unsigned long)" ?UtilCheckTokenMembershipByRid@CommonUtil@@YAJPEA_NPEAXKK@Z
0x1400206B8: "long __cdecl LoadWinRTDlls(void)" ?LoadWinRTDlls@@YAJXZ
0x140049130: "WppTracingLevel" ??_C@_1CA@LOGOGKOG@?$AAW?$AAp?$AAp?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14004BCC0: "WIN32_SHARE_PROCESS " ??_C@_1CK@PPMEGJGK@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAS?$AAH?$AAA?$AAR?$AAE?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AA?$AA@
0x14005E170: "__vectorcall ??_R0?AVtype_info@" ??_R0?AVtype_info@@@8
0x140045440: "SupportLogLocation" ??_C@_1CG@JJJIDMMJ@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAL?$AAo?$AAg?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400409D0: "MpCleanThreats() failed for acti" ??_C@_1IE@IPAJIKAC@?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAa?$AAc?$AAt?$AAi@
0x14003FD70: "Invalid path to scan: %ls. hr = " ??_C@_1EI@GNECKFKF@?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?3?$AA?5?$AA?$CF?$AAl?$AAs?$AA?4?$AA?5?$AAh?$AAr?$AA?5?$AA?$DN?$AA?5@
0x14001FDE0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetTrustLevel(enum TrustLevel * __ptr64) __ptr64" ?GetTrustLevel@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAW4TrustLevel@@@Z
0x14003E6D8: "DisableService" ??_C@_1BO@PDBOADK@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14004A318: "\\.\root\SecurityCenter2" ??_C@_1DC@PKNPJING@?$AA?2?$AA?2?$AA?4?$AA?2?$AAr?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA2?$AA?$AA@
0x140033EC8: "__cdecl _scrt_get_dyn_tls_init_callback" __scrt_get_dyn_tls_init_callback
0x14004DDA8: "MpBoot" ??_C@_1O@HCDGGPKI@?$AAM?$AAp?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x14004BE18: "PAUSE_PENDING " ??_C@_1BO@OEELHOMO@?$AAP?$AAA?$AAU?$AAS?$AAE?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14005E240: "__vectorcall ??_R0?AVCRefObject@CommonUtil@" ??_R0?AVCRefObject@CommonUtil@@@8
0x1400507B0: WPP_b83d927731293390f0b39d4d6ff1ffb2_Traceguids
0x14004F770: "ERROR: Copying the package path " ??_C@_1IG@IKKICAJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAp?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?5?$AAp?$AAa?$AAt?$AAh?$AA?5@
0x14003FF10: "Start: MpScan(MP_FEATURE_SUPPORT" ??_C@_1JC@EPOPLHOB@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AAM?$AAP?$AA_?$AAF?$AAE?$AAA?$AAT?$AAU?$AAR?$AAE?$AA_?$AAS?$AAU?$AAP?$AAP?$AAO?$AAR?$AAT@
0x14005E3F8: "__vectorcall ??_R0?AV_com_error@" ??_R0?AV_com_error@@@8
0x140046220: "NIS enabled" ??_C@_1BI@FCKEALBB@?$AAN?$AAI?$AAS?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14000DDA0: "public: virtual __cdecl CRegHandle::~CRegHandle(void) __ptr64" ??1CRegHandle@@UEAA@XZ
0x140047640: "Software\Classes\APPID\{A79DB36D" ??_C@_1HM@NBAPNPCM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA7?$AA9?$AAD?$AAB?$AA3?$AA6?$AAD@
0x140050B30: "MpService_SpyNetServiceWaitTimou" ??_C@_1EE@BMGEOKEK@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAW?$AAa?$AAi?$AAt?$AAT?$AAi?$AAm?$AAo?$AAu@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x140040E60: "WARN: Removing zombie WinScanTas" ??_C@_1EG@OHIJONFE@?$AAW?$AAA?$AAR?$AAN?$AA?3?$AA?5?$AAR?$AAe?$AAm?$AAo?$AAv?$AAi?$AAn?$AAg?$AA?5?$AAz?$AAo?$AAm?$AAb?$AAi?$AAe?$AA?5?$AAW?$AAi?$AAn?$AAS?$AAc?$AAa?$AAn?$AAT?$AAa?$AAs@
0x14003E1D0: "SignatureUpdate" ??_C@_1CA@JOEIHBNF@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140053058: "const MpCommunication::IMpSignaturesUpdateCallback::`RTTI Complete Object Locator'" ??_R4IMpSignaturesUpdateCallback@MpCommunication@@6B@
0x14003FCD0: "MpCmdRun_ScanTerminationTimeOut" ??_C@_1EA@EJMPLEF@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAS?$AAc?$AAa?$AAn?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x1400184A8: "public: long __cdecl CrimsonEventLog::EventLogToFile(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?EventLogToFile@CrimsonEventLog@@QEAAJPEBG00@Z
0x140050488: "SetProcessMitigationPolicy" ??_C@_0BL@NIEKFCGM@SetProcessMitigationPolicy?$AA@
0x14003E700: "A process other than WinDefend a" ??_C@_1NG@HHIFLCDN@?$AAA?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAt?$AAh?$AAe?$AAr?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?5?$AAa@
0x14003A2E8: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x14005E8D0: "__vectorcall ??_R0?AVOnlineIdTicketVector@" ??_R0?AVOnlineIdTicketVector@@@8
0x14003A260: "__cdecl _imp___stdio_common_vsprintf" __imp___stdio_common_vsprintf
0x140042290: "Run as restricted process " ??_C@_1DG@JDEPODD@?$AAR?$AAu?$AAn?$AA?5?$AAa?$AAs?$AA?5?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?6?$AA?$AA@
0x140042480: "ERROR: CreateProcessFromToken() " ??_C@_1FG@KGBFCGEM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAF?$AAr?$AAo?$AAm?$AAT?$AAo?$AAk?$AAe?$AAn?$AA?$CI?$AA?$CJ?$AA?5@
0x14004BF08: "RUNS_IN_SYSTEM_PROCESS" ??_C@_1CO@JKBCIBFP@?$AAR?$AAU?$AAN?$AAS?$AA_?$AAI?$AAN?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x14001EA60: "public: virtual long __cdecl OnlineIdTicketVector::First(struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> * __ptr64 * __ptr64) __ptr64" ?First@OnlineIdTicketVector@@UEAAJPEAPEAU?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Z
0x14003ED20: "ResetPlatform " ??_C@_1BO@LPNGLAEB@?$AAR?$AAe?$AAs?$AAe?$AAt?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?6?$AA?$AA@
0x140040FC0: "Start: MpSignatureUpdate() " ??_C@_1DI@PJEICAIF@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x14001D2B0: "private: static long __cdecl MpCommunication::CMpDownloadHandle::DownloadCallback(void * __ptr64,enum tagMP_COMMU_HTTP_CALLBACK_TYPE,unsigned __int64,void const * __ptr64)" ?DownloadCallback@CMpDownloadHandle@MpCommunication@@CAJPEAXW4tagMP_COMMU_HTTP_CALLBACK_TYPE@@_KPEBX@Z
0x14003A3C0: "__cdecl _imp_MpManagerVersionQuery" __imp_MpManagerVersionQuery
0x140020AF0: "public: __cdecl MpAzSubmit::CMpAzSubmitHandle::~CMpAzSubmitHandle(void) __ptr64" ??1CMpAzSubmitHandle@MpAzSubmit@@QEAA@XZ
0x140055738: "const CMpSpyNetQueueCallback::`RTTI Complete Object Locator'" ??_R4CMpSpyNetQueueCallback@@6B@
0x140041D60: "There are no Dynamic Signatures " ??_C@_0DB@LBMEIHDE@There?5are?5no?5Dynamic?5Signatures?5@
0x140027148: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x14004F0A0: "ERROR: DoWATValidation reports: " ??_C@_1GK@PMOCHMNH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAD?$AAo?$AAW?$AAA?$AAT?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAr?$AAe?$AAp?$AAo?$AAr?$AAt?$AAs?$AA?3?$AA?5@
0x140041450: "ERROR: MpOpen failed with hr=%X " ??_C@_1EC@FLMGDIEG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAO?$AAp?$AAe?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAh?$AAr?$AA?$DN?$AA?$CF?$AAX?$AA?6@
0x140044820: "Getting file-list and version in" ??_C@_1FM@FJHHJLAJ@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?9?$AAl?$AAi?$AAs?$AAt?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAi?$AAn@
0x140052AA8: "const std::bad_array_new_length::`RTTI Complete Object Locator'" ??_R4bad_array_new_length@std@@6B@
0x140043B58: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x140049658: "__cdecl _pfnDliNotifyHook2" __pfnDliNotifyHook2
0x140042EA0: "%ls\%ls" ??_C@_1BA@JPNMJFGG@?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x140052B58: "__vectorcall ??_R3bad_exception@std" ??_R3bad_exception@std@@8
0x140052B70: "__vectorcall ??_R2bad_exception@std" ??_R2bad_exception@std@@8
0x14005FAE0: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@@8
0x1400069D8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14005B190: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24
0x140003434: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoWinFileTag,-1>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoWinFileTag,-1>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoWinFileTag@CommonUtil@@$0?0@CommonUtil@@QEAA@XZ
0x14001E480: "public: virtual long __cdecl Microsoft::WRL::Details::WeakReferenceImpl::Resolve(struct _GUID const & __ptr64,struct IInspectable * __ptr64 * __ptr64) __ptr64" ?Resolve@WeakReferenceImpl@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAUIInspectable@@@Z
0x140022CF8: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x14004E300: "UNKNOWN" ??_C@_1BA@HABJOAEE@?$AAU?$AAN?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?$AA@
0x140039EC8: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x140048918: "[%s] " ??_C@_1M@IPHAMNNG@?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?7?$AA?$AA@
0x14004CD50: "ERROR: EvtRender(dummy) failed (" ??_C@_1EK@JOHADKIM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAt?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$CI?$AAd?$AAu?$AAm?$AAm?$AAy?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI@
0x14004A800: "********************************" ??_C@_1NG@LCIGHAGF@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x140008364: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpDynamicSignatureInfoFree>::~CUniqueHandle<struct CAutoMpDynamicSignatureInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpDynamicSignatureInfoFree@@@CommonUtil@@QEAA@XZ
0x14003EBC8: "MpCmdRun_DisableIdentityCheck" ??_C@_1DM@EJLBJLGD@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x140045470: "ERROR: UtilCreateDirectoryIfNeed" ??_C@_1GE@EKHAPDFH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAI?$AAf?$AAN?$AAe?$AAe?$AAd@
0x14003A368: "__cdecl _imp_MpSampleSubmit" __imp_MpSampleSubmit
0x14003A480: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400507D8: "S-1-5-19" ??_C@_1BC@OGNCNKIA@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA9?$AA?$AA@
0x140039FC0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14005B534: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-string-l1-1-0
0x14001D4A8: "private: long __cdecl COfflineScannerDownload::GetFwlink(unsigned short * __ptr64 * __ptr64,bool) __ptr64" ?GetFwlink@COfflineScannerDownload@@AEAAJPEAPEAG_N@Z
0x14004D778: "All" ??_C@_17HBCMGFHP@?$AAA?$AAl?$AAl?$AA?$AA@
0x1400510A0: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140039760: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x140055CE0: "__vectorcall ??_R1A@?0A@EA@ICmdOptionsLookup@CommonUtil" ??_R1A@?0A@EA@ICmdOptionsLookup@CommonUtil@@8
0x140054A70: "__vectorcall ??_R3?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R3?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x1400276C0: "int __cdecl get_temp_file(char * __ptr64,int,void * __ptr64)" ?get_temp_file@@YAHPEADHPEAX@Z
0x140053DC0: "__vectorcall ??_R2?$RuntimeClassBaseT@$01@Details@WRL@Microsoft" ??_R2?$RuntimeClassBaseT@$01@Details@WRL@Microsoft@@8
0x140031578: "long __cdecl CommonUtil::HrOpenSCManager(struct SC_HANDLE__ * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?HrOpenSCManager@CommonUtil@@YAJPEAPEAUSC_HANDLE__@@KPEBG1@Z
0x14002D278: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(long) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@J@Z
0x140036CE4: "__cdecl _p__commode" __p__commode
0x140048EB0: "Grouping" ??_C@_1BC@FAMDIOGP@?$AAG?$AAr?$AAo?$AAu?$AAp?$AAi?$AAn?$AAg?$AA?$AA@
0x140050560: "Windows Defender Scheduled Scan" ??_C@_1EA@CAGLHCPH@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAd?$AA?5?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x140042420: "ERROR: RestrictTokenPrivileges()" ??_C@_1FI@COHFFJJM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAs?$AA?$CI?$AA?$CJ@
0x140052A80: "__vectorcall ??_R1A@?0A@EA@type_info" ??_R1A@?0A@EA@type_info@@8
0x140046C90: "ERROR: RegQueryValueEx failed (%" ??_C@_1EI@ENPCCCGO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x140055710: "const MpCommunication::CMpCommunicationLibrary::`RTTI Complete Object Locator'" ??_R4CMpCommunicationLibrary@MpCommunication@@6B@
0x14003A0E0: api-ms-win-crt-filesystem-l1-1-0_NULL_THUNK_DATA
0x140045568: "MPSupportFiles" ??_C@_1BO@HNBMPODH@?$AAM?$AAP?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x140050430: "SenseEnabled" ??_C@_1BK@IGBFDDO@?$AAS?$AAe?$AAn?$AAs?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1400461C8: "IPC disabled" ??_C@_1BK@FALEDDD@?$AAI?$AAP?$AAC?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14001B058: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Destroy_if_node(class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >) __ptr64" ?_Destroy_if_node@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAXV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@2@@Z
0x14005B5D4: "__cdecl _IMPORT_DESCRIPTOR_Secur32" __IMPORT_DESCRIPTOR_Secur32
0x14004C490: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140053030: "const CMpSignaturesUpdateServiceCallback::`RTTI Complete Object Locator'{for `MpClient::IMpSignaturesUpdateServiceCallback'}" ??_R4CMpSignaturesUpdateServiceCallback@@6BIMpSignaturesUpdateServiceCallback@MpClient@@@
0x140020524: ??$Make@VOnlineIdTicketVector@@$$V@Details@WRL@Microsoft@@YA?AV?$ComPtr@VOnlineIdTicketVector@@@12@XZ
0x14003A228: "__cdecl _imp_fclose" __imp_fclose
0x140039030: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x140061220: "class CMpAsimov * __ptr64 __ptr64 g_aAsimov" ?g_aAsimov@@3PEAVCMpAsimov@@EA
0x140036CF6: free
0x1400345D0: "__cdecl FindAndUnlinkFrame" _FindAndUnlinkFrame
0x14003A1B8: "__cdecl _imp__initialize_wide_environment" __imp__initialize_wide_environment
0x140031DA4: WPP_SF_SDD
0x14002C144: WPP_SF_SDd
0x140026E8C: WPP_SF_Sdd
0x14001C54C: WPP_SF_sdD
0x140053F28: "__vectorcall ??_R1A@?0A@EA@OnlineIdTicketIterator" ??_R1A@?0A@EA@OnlineIdTicketIterator@@8
0x14003A208: "__cdecl _imp_feof" __imp_feof
0x14005E210: "__vectorcall ??_R0?AVCUpdateNotifications@" ??_R0?AVCUpdateNotifications@@@8
0x140003E40: WPP_SF_SID
0x140002CE0: "public: __cdecl CommonUtil::CAutoUniqueArrayPtr<unsigned short,void>::~CAutoUniqueArrayPtr<unsigned short,void>(void) __ptr64" ??1?$CAutoUniqueArrayPtr@GX@CommonUtil@@QEAA@XZ
0x140052E50: "__vectorcall ??_R2IMpSignaturesUpdateCallback@MpCommunication" ??_R2IMpSignaturesUpdateCallback@MpCommunication@@8
0x140052FB0: "__vectorcall ??_R3IMpSignaturesUpdateCallback@MpCommunication" ??_R3IMpSignaturesUpdateCallback@MpCommunication@@8
0x14002EF88: MpThreadPoolCreate
0x140061248: g_hSha1Provider
0x140060FBD: "private: static bool UnDecorator::fGetTemplateArgumentList" ?fGetTemplateArgumentList@UnDecorator@@0_NA
0x1400411C0: "ERROR: Signature Update failed w" ??_C@_0CL@HBKAPKMK@ERROR?3?5Signature?5Update?5failed?5w@
0x140009E40: WPP_SF_dSS
0x140009D78: WPP_SF_SSd
0x140040540: "Start: MpCleanStart() " ??_C@_1CO@PGEIEAPO@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x140039D48: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x140039FD8: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1400543D8: "__vectorcall ??_R1BA@?0A@EA@StrongReference@Details@WRL@Microsoft" ??_R1BA@?0A@EA@StrongReference@Details@WRL@Microsoft@@8
0x140046DF0: "SystemEvents.txt" ??_C@_1CC@MFPJOPEF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140040950: "MpCleanThreats() completed for a" ??_C@_1HE@PEJKDDNA@?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAa@
0x14005F5C0: "__vectorcall ??_R0?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@" ??_R0?AU?$IAsyncOperationCompletedHandler_impl@U?$AggregateType@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@PEAUIUserIdentity@2345@@Internal@Foundation@Windows@@@Foundation@Windows@@@8
0x140039DD8: "__cdecl _imp_Process32FirstW" __imp_Process32FirstW
0x14004F230: "https://go.microsoft.com/fwlink/" ??_C@_1FO@DABHGFMI@?$AAh?$AAt?$AAt?$AAp?$AAs?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1@
0x140040830: "MpScan() was completed " ??_C@_1DA@EMLPIDPN@?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?6?$AA?$AA@
0x1400512E0: "Command Line - Option should sta" ??_C@_1GO@EHKMHCDM@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAe?$AA?5?$AA?9?$AA?5?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAs?$AAh?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAs?$AAt?$AAa@
0x140045240: "Creating CAB file... " ??_C@_1CM@DHKLFLDI@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAC?$AAA?$AAB?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140041B20: " Starting remove Dynamic Signatu" ??_C@_0CL@LKICCELM@?6Starting?5remove?5Dynamic?5Signatu@
0x140046E70: "ERROR: Unsupported event log nam" ??_C@_1HC@JGALKJJE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAn?$AAa?$AAm@
0x140034C00: "__cdecl purecall" _purecall
0x14004E1F0: "RestrictServiceNetworkAccess Fai" ??_C@_1FA@IEKJGIOK@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAF?$AAa?$AAi@
0x140039D98: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x140021350: "public: virtual void * __ptr64 __cdecl CMpSampleHeaderQueueCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpSampleHeaderQueueCallback@@UEAAPEAXI@Z
0x140039C60: "__cdecl _imp_ControlService" __imp_ControlService
0x140049658: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140044930: "ERROR: RunCommandCollectStats fa" ??_C@_1FG@OEKCCELI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?5?$AAf?$AAa@
0x14003A210: "__cdecl _imp___stdio_common_vswprintf" __imp___stdio_common_vswprintf
0x140034938: "__cdecl _std_terminate" __std_terminate
0x140050610: "MsMpLics.dll" ??_C@_1BK@OOIFCJID@?$AAM?$AAs?$AAM?$AAp?$AAL?$AAi?$AAc?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400396E0: "const CMpSampleHeaderQueueCallback::`vftable'" ??_7CMpSampleHeaderQueueCallback@@6B@
0x14003E628: "AddDynamicSignature" ??_C@_1CI@OPCKMNBM@?$AAA?$AAd?$AAd?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x140021934: "private: void __cdecl CMpSampleHeaderQueueCallback::OnHandleReport(struct MpClient::IMpSampleHeaderContext * __ptr64) __ptr64" ?OnHandleReport@CMpSampleHeaderQueueCallback@@AEAAXPEAUIMpSampleHeaderContext@MpClient@@@Z
0x140009390: "void __cdecl MpCmdUtils::WaitOrTerminate(void * __ptr64,unsigned long)" ?WaitOrTerminate@MpCmdUtils@@YAXPEAXK@Z
0x14004BE48: "STOPPABLE" ??_C@_1BE@GAEPBCLC@?$AAS?$AAT?$AAO?$AAP?$AAP?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14003E3A8: "SpyNetServiceDss" ??_C@_1CC@JPOAIHLE@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAs?$AAs?$AA?$AA@
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct CommonUtil::ICmdOptionsLookup>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@UEBAJXZ
0x140061148: "unsigned __int64 `__local_stdio_printf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_printf_options@@9@4_KA
0x14003F0E0: "SubmitSamples" ??_C@_1BM@JFPHINHJ@?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AA?$AA@
0x140044BF0: "Getting security health service " ??_C@_1GM@EHLGGINP@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5@
0x14005B3E8: Cabinet_NULL_THUNK_DATA_DLN
0x140031E34: WPP_SF_SDDd
0x140047E70: "Software\Microsoft\Internet Expl" ??_C@_1HE@OOMFLHLK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl@
0x140045090: "Getting windir\Logs\Reagent fail" ??_C@_1FE@KNMBIDHM@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?2?$AAL?$AAo?$AAg?$AAs?$AA?2?$AAR?$AAe?$AAa?$AAg?$AAe?$AAn?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x140028C90: "public: virtual void * __ptr64 __cdecl CMpSpyNetQueueCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpSpyNetQueueCallback@@UEAAPEAXI@Z
0x140041898: " Dynamic Signature already added" ??_C@_0CD@BIEFHLKJ@?6Dynamic?5Signature?5already?5added@
0x1400172F0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpClient::IMpSpyNetQueueCallback>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@UEBAJXZ
0x14001D820: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14001C740: "public: virtual void * __ptr64 __cdecl CMseWatCheck::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMseWatCheck@@UEAAPEAXI@Z
0x140039EC0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140022E60: "public: virtual void * __ptr64 __cdecl CError::`vector deleting destructor'(unsigned int) __ptr64" ??_ECError@@UEAAPEAXI@Z
0x140039D78: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x1400068C4: "public: __cdecl TraceLoggingCorrelationVector::TraceLoggingCorrelationVector(void) __ptr64" ??0TraceLoggingCorrelationVector@@QEAA@XZ
0x1400392C0: "const CMseWatCheck::`vftable'" ??_7CMseWatCheck@@6B@
0x140033EA8: "__cdecl _scrt_stub_for_acrt_uninitialize" __scrt_stub_for_acrt_uninitialize
0x140011668: WPP_SF_SDDS
0x14002AE80: WPP_SF_SSDd
0x140041170: "ERROR: MpUpdateStart failed with" ??_C@_1FA@LGHHOFPC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh@
0x140053080: "__vectorcall ??_R1A@?0A@EA@IRefObject@CommonUtil" ??_R1A@?0A@EA@IRefObject@CommonUtil@@8
0x14003A1B0: "__cdecl _imp__get_initial_wide_environment" __imp__get_initial_wide_environment
0x140052EF8: "__vectorcall ??_R1A@?0A@EC@IRefObject@CommonUtil" ??_R1A@?0A@EC@IRefObject@CommonUtil@@8
0x1400555F0: "__vectorcall ??_R2CMpCommunicationLibrary@MpCommunication" ??_R2CMpCommunicationLibrary@MpCommunication@@8
0x1400556E0: "__vectorcall ??_R3CMpCommunicationLibrary@MpCommunication" ??_R3CMpCommunicationLibrary@MpCommunication@@8
0x14004D238: "Verbose " ??_C@_1BC@KJMEGNEM@?$AAV?$AAe?$AAr?$AAb?$AAo?$AAs?$AAe?$AA?7?$AA?$AA@
0x140044570: "Getting cache file log... " ??_C@_1DG@BDNNBAAI@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAl?$AAo?$AAg?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x14001AAE4: "public: void __cdecl std::allocator<struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> >::deallocate(struct std::_List_node<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> >,void * __ptr64> * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@U?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@PEAX@std@@@std@@QEAAXQEAU?$_List_node@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@PEAX@2@_K@Z
0x140019D88: "public: void __cdecl std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > >::deallocate(class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@@std@@QEAAXQEAV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@2@_K@Z
0x14004A1F0: "ERROR: MpWscUnregister() Failed " ??_C@_1EI@GCLABEAM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAW?$AAs?$AAc?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14003EA48: "MpReloadEngine finished. " ??_C@_1DE@IIJFCDEM@?$AAM?$AAp?$AAR?$AAe?$AAl?$AAo?$AAa?$AAd?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?5?$AAf?$AAi?$AAn?$AAi?$AAs?$AAh?$AAe?$AAd?$AA?4?$AA?6?$AA?$AA@
0x140051138: "LogonUserExExW" ??_C@_0P@LGIFDAHL@LogonUserExExW?$AA@
0x1400503B8: WPP_8d022da318a53b2e4ac9ba5707719dd9_Traceguids
0x140048B70: "Windows Setup keys from "%s" " ??_C@_1DM@ENGEKFBC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAk?$AAe?$AAy?$AAs?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?6?$AA?$AA@
0x14005B5C0: "__cdecl _IMPORT_DESCRIPTOR_mpclient" __IMPORT_DESCRIPTOR_mpclient
0x14005FDB0: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@@8
0x140045618: "mpwpptracing-" ??_C@_1BM@GGADNME@?$AAm?$AAp?$AAw?$AAp?$AAp?$AAt?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AA?9?$AA?$AA@
0x1400429B0: "BetaPlatform" ??_C@_1BK@CKAJNCPP@?$AAB?$AAe?$AAt?$AAa?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x14004C550: "ERROR: Registry value size doesn" ??_C@_1GI@PCOAJOGE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?5?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?5?$AAs?$AAi?$AAz?$AAe?$AA?5?$AAd?$AAo?$AAe?$AAs?$AAn@
0x14004EB40: "%-50ls: %u.%u.%u.%u " ??_C@_1CK@OBPCAOFD@?$AA?$CF?$AA?9?$AA5?$AA0?$AAl?$AAs?$AA?3?$AA?5?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x14002C868: "long __cdecl CommonUtil::UtilRawGetProcAddress(__int64 (__cdecl* * __ptr64)(void),struct HINSTANCE__ * __ptr64,char const * __ptr64,bool)" ?UtilRawGetProcAddress@CommonUtil@@YAJPEAP6A_JXZPEAUHINSTANCE__@@PEBD_N@Z
0x1400447C0: "ERROR: RunCommandCollectSystemIn" ??_C@_1GA@IKEKAFOP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI?$AAn@
0x14002F9B0: "public: virtual void * __ptr64 __cdecl CommonUtil::CCmdOptionsLookupMap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCmdOptionsLookupMap@CommonUtil@@UEAAPEAXI@Z
0x140022BA4: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x140020050: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetIids(unsigned long * __ptr64,struct _GUID * __ptr64 * __ptr64) __ptr64" ?GetIids@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAKPEAPEAU_GUID@@@Z
0x14001FC80: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140042330: "%ls -Reinvoke" ??_C@_1BM@MPADPOF@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?9?$AAR?$AAe?$AAi?$AAn?$AAv?$AAo?$AAk?$AAe?$AA?$AA@
0x140040F70: "char const * const `void __cdecl TLV::Base64Encode<129>(unsigned char const * __ptr64,unsigned __int64,char (& __ptr64)[129])'::`2'::s_lookupTable" ?s_lookupTable@?1???$Base64Encode@$0IB@@TLV@@YAXPEBE_KAEAY0IB@D@Z@4QBDB
0x14004FCC0: "unsigned short const * const RuntimeClass_Windows_Security_Authentication_OnlineId_OnlineIdAuthenticator" ?RuntimeClass_Windows_Security_Authentication_OnlineId_OnlineIdAuthenticator@@3QBGB
0x14001FF20: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140055EA0: "__vectorcall ??_R2?$IForwardIterator@$$CBG@CommonUtil" ??_R2?$IForwardIterator@$$CBG@CommonUtil@@8
0x140055CA0: "__vectorcall ??_R3?$IForwardIterator@$$CBG@CommonUtil" ??_R3?$IForwardIterator@$$CBG@CommonUtil@@8
0x140034944: wcschr
0x140035F10: "__cdecl _CxxCallCatchBlock" __CxxCallCatchBlock
0x1400397B8: "const MpConfigUtils::CMpConfigKeysIterator::`vftable'" ??_7CMpConfigKeysIterator@MpConfigUtils@@6B@
0x14004A2F8: "%ls = [FALSE] " ??_C@_1BO@LGMAMOEK@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$DN?$AA?5?$AA?$FL?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$FN?$AA?6?$AA?$AA@
0x140036740: "__cdecl CallSettingFrame" _CallSettingFrame
0x140040670: "Additonal Actions Required. " ??_C@_0BN@BDDDKNBA@Additonal?5Actions?5Required?4?6?$AA@
0x1400143D4: "long __cdecl RunCommandCollectWscRegistryKeys(unsigned short const * __ptr64)" ?RunCommandCollectWscRegistryKeys@@YAJPEBG@Z
0x140042F70: "Software\Microsoft\Windows Secur" ??_C@_1FG@HDDCDEFE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr@
0x140020600: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::Release`adjustor{8}' (void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAKXZ
0x1400349D8: wcsstr
0x14003F718: "Threat" ??_C@_1O@HDPPMIAG@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?$AA@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x14000C908: "public: __cdecl CommonUtil::CStdPtrList<class CommonUtil::CUniqueHandle<struct CAutoMpFile> >::~CStdPtrList<class CommonUtil::CUniqueHandle<struct CAutoMpFile> >(void) __ptr64" ??1?$CStdPtrList@V?$CUniqueHandle@UCAutoMpFile@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140006660: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpClose>::~CUniqueHandle<struct CAutoMpClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpClose@@@CommonUtil@@QEAA@XZ
0x140039E88: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140037175: "__cdecl _tailMerge_cabinet_dll" __tailMerge_cabinet_dll
0x14003148C: "unsigned long __cdecl CommonUtil::MpGetPerfTimeDifferenceMsec(union _LARGE_INTEGER,union _LARGE_INTEGER)" ?MpGetPerfTimeDifferenceMsec@CommonUtil@@YAKT_LARGE_INTEGER@@0@Z
0x14003ED40: "%ProgramFiles%\Windows Defender" ??_C@_1EA@EBIFKH@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x140047840: "Software\Classes\CLSID\{2781761E" ??_C@_1HM@PGBIFGCO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA7?$AA8?$AA1?$AA7?$AA6?$AA1?$AAE@
0x140050070: "MpSampleSubmissionLowPriAgentLif" ??_C@_1FA@CDDBIGNF@?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAS?$AAu?$AAb?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AAL?$AAo?$AAw?$AAP?$AAr?$AAi?$AAA?$AAg?$AAe?$AAn?$AAt?$AAL?$AAi?$AAf@
0x140055F40: "__vectorcall ??_R1A@?0A@EA@?$ISimpleIterator@$$CBG@CommonUtil" ??_R1A@?0A@EA@?$ISimpleIterator@$$CBG@CommonUtil@@8
0x140055360: "__vectorcall ??_R3bad_alloc@std" ??_R3bad_alloc@std@@8
0x1400504B8: "CacheMaxSize" ??_C@_1BK@NKJALLBJ@?$AAC?$AAa?$AAc?$AAh?$AAe?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x140050CF0: "%S failed, code 0x%x" ??_C@_1CK@HLGHGLBA@?$AA?$CF?$AAS?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?0?$AA?5?$AAc?$AAo?$AAd?$AAe?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x140055188: "__vectorcall ??_R2bad_alloc@std" ??_R2bad_alloc@std@@8
0x140039C30: "__cdecl _imp_GetNumberOfEventLogRecords" __imp_GetNumberOfEventLogRecords
0x14004A4D8: " Substatus: " ??_C@_1BM@GEONEDND@?$AA?5?$AA?5?$AAS?$AAu?$AAb?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?6?$AA?$AA@
0x140043810: "Collecting events from Operation" ??_C@_1GC@DCDDEPEL@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn@
0x1400440B0: "%windir%\ServiceProfiles\Network" ??_C@_1HG@HFPOLCPP@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk@
0x14004AA80: "__cdecl GUID_dc12a687_737f_11cf_884d_00aa004b2e24" _GUID_dc12a687_737f_11cf_884d_00aa004b2e24
0x140048EA0: WPP_15989ccf90783c85d46d247e3eb4b1c3_Traceguids
0x140060FA0: "private: static class Replicator * __ptr64 __ptr64 UnDecorator::pTemplateArgList" ?pTemplateArgList@UnDecorator@@0PEAVReplicator@@EA
0x14003AA30: "MpCmdRun.log" ??_C@_1BK@EENNFMBD@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x14004B7F0: "__cdecl GUID_17966e44_da6f_4aa9_b30e_5d4cca5f5933" _GUID_17966e44_da6f_4aa9_b30e_5d4cca5f5933
0x14004EBC8: "DismCloseSession" ??_C@_0BB@PKODMEEP@DismCloseSession?$AA@
0x14004C370: " %-40s [REG_DWORD] : %lu (" ??_C@_1FA@BHJGEKLG@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAD?$AAW?$AAO?$AAR?$AAD?$AA?$FN?$AA?5?$AA?5?$AA?5?$AA?5?$AA?3?$AA?5?$AA?$CF?$AAl?$AAu?$AA?5?$AA?$CI@
0x1400271F0: "void * __ptr64 __cdecl mem_alloc(unsigned long)" ?mem_alloc@@YAPEAXK@Z
0x140039D90: "__cdecl _imp_CreateTimerQueueTimer" __imp_CreateTimerQueueTimer
0x140054F80: "__vectorcall ??_R1A@?0A@EA@IMpSampleHeaderQueueCallback@MpClient" ??_R1A@?0A@EA@IMpSampleHeaderQueueCallback@MpClient@@8
0x140042AB8: WPP_9427934c8ffa3f6eeba89c6b5c37f45b_Traceguids
0x14002D530: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrNewSprintfW(unsigned short const * __ptr64,...)" ?TrNewSprintfW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBGZZ
0x14003E450: "A process other than WinDefend a" ??_C@_1PC@ENGEJFIF@?$AAA?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAt?$AAh?$AAe?$AAr?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?5?$AAa@
0x14003A4D8: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140036CA2: "__cdecl initterm_e" _initterm_e
0x140033AD4: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140012640: "[thunk]:public: virtual long __cdecl CMpSignaturesUpdateServiceCallback::AddRef`adjustor{8}' (void)const __ptr64" ?AddRef@CMpSignaturesUpdateServiceCallback@@W7EBAJXZ
0x14005FD00: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$$V@Details@WRL@Microsoft@@@8
0x140048E00: "Managed Defender setup keys not " ??_C@_1JK@IGKKMBBG@?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAk?$AAe?$AAy?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?5@
0x1400536A0: "__vectorcall ??_R2OnlineIdTicketIterator" ??_R2OnlineIdTicketIterator@@8
0x140054818: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140054848: "__vectorcall ??_R3OnlineIdTicketIterator" ??_R3OnlineIdTicketIterator@@8
0x140053830: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140052D38: "__vectorcall ??_R2CRegHandle" ??_R2CRegHandle@@8
0x1400553A0: "__vectorcall ??_R1A@?0A@EA@CError" ??_R1A@?0A@EA@CError@@8
0x140033CF0: "__cdecl _scrt_release_startup_lock" __scrt_release_startup_lock
0x14004BE60: "NOT_STOPPABLE" ??_C@_1BM@EMCEAEJI@?$AAN?$AAO?$AAT?$AA_?$AAS?$AAT?$AAO?$AAP?$AAP?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14003E580: "RestoreDefaults" ??_C@_1CA@LKFBAOAP@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAs?$AA?$AA@
0x140052DB0: "__vectorcall ??_R3CRegHandle" ??_R3CRegHandle@@8
0x140041A18: "on removing a dynamic signature " ??_C@_0DM@BGDKKAEA@on?5removing?5a?5dynamic?5signature?5@
0x140034CC0: "__cdecl _std_exception_destroy" __std_exception_destroy
0x14001D120: "private: virtual long __cdecl COfflineScannerDownload::OnRead(unsigned __int64,unsigned char const * __ptr64) __ptr64" ?OnRead@COfflineScannerDownload@@EEAAJ_KPEBE@Z
0x14002AD98: "void __cdecl MsiLog(enum MSI_LOG_LEVEL,unsigned short const * __ptr64,...)" ?MsiLog@@YAXW4MSI_LOG_LEVEL@@PEBGZZ
0x1400474D0: "Software\Classes\Drive\ShellEx\C" ??_C@_1GO@CJCGJHCD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?2?$AAS?$AAh?$AAe?$AAl?$AAl?$AAE?$AAx?$AA?2?$AAC@
0x1400504D8: "MpService_CacheDisable" ??_C@_1CO@MOFPPFNB@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAC?$AAa?$AAc?$AAh?$AAe?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140049AD0: "Start: Signatures Update Service" ??_C@_1EE@MPIIJPMJ@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x14004BAF0: "Getting NIS service registration" ??_C@_1GC@HFFKLFEG@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAN?$AAI?$AAS?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn@
0x14001D820: "__cdecl _vcrt_initialize_winapi_thunks" __vcrt_initialize_winapi_thunks
0x140045608: "mplog-" ??_C@_1O@LEJAOGFG@?$AAm?$AAp?$AAl?$AAo?$AAg?$AA?9?$AA?$AA@
0x140055DE0: "__vectorcall ??_R2?$ISimpleIterator@$$CBG@CommonUtil" ??_R2?$ISimpleIterator@$$CBG@CommonUtil@@8
0x140055F68: "__vectorcall ??_R3?$ISimpleIterator@$$CBG@CommonUtil" ??_R3?$ISimpleIterator@$$CBG@CommonUtil@@8
0x14003A3F8: "__cdecl _imp_MpCleanOpen" __imp_MpCleanOpen
0x140024410: "public: virtual void * __ptr64 __cdecl MpConfigUtils::CMpConfigKeysIterator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpConfigKeysIterator@MpConfigUtils@@UEAAPEAXI@Z
0x140041A60: "Finish: RunCommandAddSignatureFi" ??_C@_1EM@GPAIOEIA@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAA?$AAd?$AAd?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF?$AAi@
0x1400606D0: "__vectorcall ??_R0?AV?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@U?$IForwardIterator@$$CBG@CommonUtil@@@CommonUtil@@@8
0x14003F5B0: "ERROR: MpScanResult() Failed %X " ??_C@_1EC@PDEHBGIH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CF?$AAX?$AA?6@
0x14003A240: "__cdecl _imp__wfopen" __imp__wfopen
0x140054108: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x1400493F0: "Removing value %ls\%ls " ??_C@_1DA@LCPJAELB@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAi?$AAn?$AAg?$AA?5?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?5?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x1400444E0: "Dumping cache filenames to log.." ??_C@_1EG@DIIFJCFM@?$AAD?$AAu?$AAm?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?5?$AAf?$AAi?$AAl?$AAe?$AAn?$AAa?$AAm?$AAe?$AAs?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAg?$AA?4?$AA?4@
0x140036FE8: "__cdecl Init_thread_notify" _Init_thread_notify
0x140039F78: "__cdecl _imp_GetTimeFormatW" __imp_GetTimeFormatW
0x140039E20: "__cdecl _imp_GetSystemPowerStatus" __imp_GetSystemPowerStatus
0x14003A490: ntdll_NULL_THUNK_DATA
0x1400301E4: "long __cdecl CommonUtil::GetCmdOptionsLookup(struct CommonUtil::ICmdOptionsLookup * __ptr64 * __ptr64,unsigned __int64,unsigned short const * __ptr64 const * __ptr64 const,unsigned short * __ptr64 * __ptr64)" ?GetCmdOptionsLookup@CommonUtil@@YAJPEAPEAUICmdOptionsLookup@1@_KQEBQEBGPEAPEAG@Z
0x140042900: "MU/WU update" ??_C@_1BK@KIOJEEDP@?$AAM?$AAU?$AA?1?$AAW?$AAU?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140045A60: "failed to print the auto scan st" ??_C@_1EK@CGKNGENF@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAa?$AAu?$AAt?$AAo?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?5?$AAs?$AAt@
0x140033F8C: "public: __cdecl std::bad_array_new_length::bad_array_new_length(class std::bad_array_new_length const & __ptr64) __ptr64" ??0bad_array_new_length@std@@QEAA@AEBV01@@Z
0x140036F20: "__cdecl Init_thread_footer" _Init_thread_footer
0x14005B170: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x14004E368: WPP_7c87e55bb8f13414ab77fe4bd8faf7e3_Traceguids
0x14004C7B0: "MpCmdRun_IdleTaskWaitTimeout" ??_C@_1DK@LHCKPGPD@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAI?$AAd?$AAl?$AAe?$AAT?$AAa?$AAs?$AAk?$AAW?$AAa?$AAi?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x1400235E4: WPP_SF_DDD
0x140027520: "int __cdecl fci_close(__int64,int * __ptr64,void * __ptr64)" ?fci_close@@YAH_JPEAHPEAX@Z
0x140061210: "int (__cdecl* __ptr64 g_pfnRoOriginateError)(long,struct HSTRING__ * __ptr64)" ?g_pfnRoOriginateError@@3P6AHJPEAUHSTRING__@@@ZEA
0x140046118: "Auto scan disabled" ??_C@_1CG@KAEIGGG@?$AAA?$AAu?$AAt?$AAo?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140048EC8: "Level" ??_C@_1M@MFHLECJA@?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14004F980: "ERROR: MpSampleQuery failed with" ??_C@_1EK@EKBAFKEM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAQ?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh@
0x140046460: "%d/%d/%d %.2d:%.2d:%.2d %s" ??_C@_1DG@PDGPAKPM@?$AA?$CF?$AAd?$AA?1?$AA?$CF?$AAd?$AA?1?$AA?$CF?$AAd?$AA?5?$AA?$CF?$AA?4?$AA2?$AAd?$AA?3?$AA?$CF?$AA?4?$AA2?$AAd?$AA?3?$AA?$CF?$AA?4?$AA2?$AAd?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400448E8: "Getting threat information... " ??_C@_1DO@CKADFHGP@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?5?$AAi?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140050380: WPP_aaebc39c00ab3360c2318dc9ede64d65_Traceguids
0x140030818: "public: class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > >,0> >::erase<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,void>(class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >) __ptr64" ??$erase@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@X@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@QEAA?AV?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@1@V21@@Z
0x140046670: "ERROR: StringCchCopy failed (%X)" ??_C@_1EE@KKCACCMP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAo?$AAp?$AAy?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ@
0x140042580: "ERROR: CreateEnvironmentBlock() " ??_C@_1FG@IKFGKNLJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AAB?$AAl?$AAo?$AAc?$AAk?$AA?$CI?$AA?$CJ?$AA?5@
0x140036C7E: "__cdecl seh_filter_exe" _seh_filter_exe
0x14005E270: "__vectorcall ??_R0?AVCUniqueNamedObject@MpCmdUtils@" ??_R0?AVCUniqueNamedObject@MpCmdUtils@@@8
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpSignaturesUpdateServiceFactory>::~AutoRef<struct MpClient::IMpSignaturesUpdateServiceFactory>(void) __ptr64" ??1?$AutoRef@UIMpSignaturesUpdateServiceFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x140060FB8: "private: static unsigned long UnDecorator::disableFlags" ?disableFlags@UnDecorator@@0KA
0x14003EF70: "ValidateMapsConnection successfu" ??_C@_1IM@KLFDEKAP@?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAM?$AAa?$AAp?$AAs?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu@
0x140055508: "__vectorcall ??_R1A@?0A@EA@CMpConfigKeysIterator@MpConfigUtils" ??_R1A@?0A@EA@CMpConfigKeysIterator@MpConfigUtils@@8
0x1400419D0: "See the MPCMDRUN -RemoveDynamicS" ??_C@_0EH@NKGEHOGC@See?5the?5MPCMDRUN?5?9RemoveDynamicS@
0x1400205D0: "public: virtual void * __ptr64 __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@UEAAPEAXI@Z
0x14001A5D0: "private: void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > > >::_Reallocate_exactly(unsigned __int64) __ptr64" ?_Reallocate_exactly@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@AEAAX_K@Z
0x1400501D0: "://" ??_C@_17IAHLGHKI@?$AA?3?$AA?1?$AA?1?$AA?$AA@
0x140060180: "__vectorcall ??_R0?AVCError@" ??_R0?AVCError@@@8
0x14002E660: "public: virtual long __cdecl CommonUtil::CUtilRegEnumSubKeys::Next(unsigned short const * __ptr64 * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?Next@CUtilRegEnumSubKeys@CommonUtil@@UEAAJPEAPEBGPEAU_FILETIME@@@Z
0x140039C98: "__cdecl _imp_FreeSid" __imp_FreeSid
0x140041818: " Failed! Error 0x%x " ??_C@_0BF@EHBLOFMO@?6Failed?$CB?5Error?50x?$CFx?6?$AA@
0x14003A438: "__cdecl _imp_MpFreeMemory" __imp_MpFreeMemory
0x14003F790: "--------------------------------" ??_C@_1KC@FEEPFMOI@?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9@
0x14003506C: "__cdecl _vcrt_getptd_noexit" __vcrt_getptd_noexit
0x14002D584: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CNewSprintfPolicy<unsigned short>,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@U?$CNewSprintfPolicy@G@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x14003A100: "__cdecl _imp__set_new_mode" __imp__set_new_mode
0x140039BC8: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1400149BC: "public: static void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)" ?_Xlen@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@SAXXZ
0x140049650: Microsoft_Antimalware_ServiceLevels
0x14004AEF0: " Runtime reg: %ls " ??_C@_1CM@MOKOOCEB@?$AA?5?$AA?5?$AAR?$AAu?$AAn?$AAt?$AAi?$AAm?$AAe?$AA?5?$AAr?$AAe?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140049C10: "FallbackOrder" ??_C@_1BM@DMLGECDN@?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x140048A00: "LastFallbackTime" ??_C@_1CC@JCIEECBB@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x14003325C: WPP_SF_dddd
0x140023634: WPP_SF_DDDD
0x140041950: "Input File Name: %ws " ??_C@_0BG@NFIEEANB@Input?5File?5Name?3?5?$CFws?6?$AA@
0x14004A488: " State: %u " ??_C@_1CC@DGCDKJLD@?$AA?5?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAu?$AA?6?$AA?$AA@
0x140042710: "MpCmdRun_EmulateW2K" ??_C@_1CI@JBPIAHJ@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAW?$AA2?$AAK?$AA?$AA@
0x14005FEA0: "__vectorcall ??_R0?AUIUnknown@" ??_R0?AUIUnknown@@@8
0x14002DDA0: WPP_SF_P
0x14005E560: "__vectorcall ??_R0?AVCSyncUpdateCallback@" ??_R0?AVCSyncUpdateCallback@@@8
0x140048EE0: "%s-%02hu%02hu%04hu-%02hu%02hu%02" ??_C@_1EK@OOEAODLK@?$AA?$CF?$AAs?$AA?9?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA4?$AAh?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA2?$AAh?$AAu?$AA?$CF?$AA0?$AA2@
0x14004F860: "ERROR: Notifying the service of " ??_C@_1FK@NKCBGHC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAo?$AAf?$AA?5@
0x14004AE70: " Account: %ls " ??_C@_1CM@IGCIIMML@?$AA?5?$AA?5?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140039BD0: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x14003EDE0: "ERROR: MpUpdatePlatform failed w" ??_C@_1FE@NOLGGMEE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAw@
0x140060890: "__cdecl _security_cookie" __security_cookie
0x140049590: "Start: SpyNet Service " ??_C@_1CO@LJCIFDMD@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x140051260: "CommandFile %s line %Iu Bad entr" ??_C@_1FA@OKFAEAMC@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAF?$AAi?$AAl?$AAe?$AA?5?$AA?$CF?$AAs?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AA?$CF?$AAI?$AAu?$AA?6?$AAB?$AAa?$AAd?$AA?5?$AAe?$AAn?$AAt?$AAr@
0x1400511D0: "GetFileVersionInfoExW" ??_C@_0BG@GEGOAKFF@GetFileVersionInfoExW?$AA@
0x140049298: "AVSignatureVersion" ??_C@_1CG@LJAIELHA@?$AAA?$AAV?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140039C18: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14004E398: ""%ls\%ls"" ??_C@_1BE@BAFCBME@?$AA?$CC?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?$CC?$AA?$AA@
0x140039238: "const CMpSignaturesUpdateServiceCallback::`vftable'{for `MpCommunication::IMpSignaturesUpdateCallback'}" ??_7CMpSignaturesUpdateServiceCallback@@6BIMpSignaturesUpdateCallback@MpCommunication@@@
0x140022A70: ??_E?$CThreadPoolItemFunctorAdapter@V<lambda_cfe293cf1e8afc76cde2af2a76263f0b>@@@CommonUtil@@UEAAPEAXI@Z
0x140049680: Spynet_SendReportCompleteId
0x14005B4A0: USERENV_NULL_THUNK_DATA_DLB
0x140051468: WPP_14dfe67f6a883fa8da31b9a7cdcaf2a9_Traceguids
0x14004FF00: "MpSampleSubmissionLowPriNumThrea" ??_C@_1EG@DCABFNMN@?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAS?$AAu?$AAb?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AAL?$AAo?$AAw?$AAP?$AAr?$AAi?$AAN?$AAu?$AAm?$AAT?$AAh?$AAr?$AAe?$AAa@
0x1400507C0: "S-1-5-18" ??_C@_1BC@FOGOLNOF@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?$AA@
0x14004D0C0: "ERROR: ExtractEventIdPropertyFro" ??_C@_1GM@CMHBOKOB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAE?$AAv?$AAe?$AAn?$AAt?$AAI?$AAd?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AAF?$AAr?$AAo@
0x14003A2D8: "__cdecl _imp_strcpy_s" __imp_strcpy_s
0x140008310: "public: virtual void * __ptr64 __cdecl CUpdateNotifications::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUpdateNotifications@@UEAAPEAXI@Z
0x1400493B0: "MpCmdRun_DontRestoreMiscConfig" ??_C@_1DO@HMKOIDAH@?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA_?$AAD?$AAo?$AAn?$AAt?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAM?$AAi?$AAs?$AAc?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x140053650: "__vectorcall ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R2?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140065058: VERSION_NULL_THUNK_DATA_DLA
0x1400547A0: "__vectorcall ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R3?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140053240: "__vectorcall ??_R2CQuaMapGuardEntry" ??_R2CQuaMapGuardEntry@@8
0x14003A440: "__cdecl _imp_MpConfigUninitialize" __imp_MpConfigUninitialize
0x140053280: "__vectorcall ??_R3CQuaMapGuardEntry" ??_R3CQuaMapGuardEntry@@8
0x140047C40: "Software\Classes\CLSID\{13F6A0B6" ??_C@_1HM@BMKJNACJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AA3?$AAF?$AA6?$AAA?$AA0?$AAB?$AA6@
0x14003A2C0: "__cdecl _imp_iswprint" __imp_iswprint
0x140039F30: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x14002C614: "long __cdecl CommonUtil::UtilLoadLibraryEx(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilLoadLibraryEx@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBGK@Z
0x1400475C0: "Software\Classes\APPID\{2781761E" ??_C@_1HM@LEBEJABH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA7?$AA8?$AA1?$AA7?$AA6?$AA1?$AAE@
0x140033ED8: "__cdecl _scrt_fastfail" __scrt_fastfail
0x14002E244: "long __cdecl CommonUtil::UtilRegGetValueAlloc(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned __int64 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64)" ?UtilRegGetValueAlloc@CommonUtil@@YAJPEAUHKEY__@@PEBGKPEAKPEA_KPEAPEAE_K@Z
0x140039CC8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x140025850: "long __cdecl CommonUtil::NewRefInstance<class MpCommunication::CMpCommunicationLibrary,unsigned long>(class MpCommunication::CMpCommunicationLibrary * __ptr64 * __ptr64,unsigned long const & __ptr64)" ??$NewRefInstance@VCMpCommunicationLibrary@MpCommunication@@K@CommonUtil@@YAJPEAPEAVCMpCommunicationLibrary@MpCommunication@@AEBK@Z
0x14001FE40: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::GetIids(unsigned long * __ptr64,struct _GUID * __ptr64 * __ptr64) __ptr64" ?GetIids@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJPEAKPEAPEAU_GUID@@@Z
0x140061180: Microsoft_Antimalware_ServiceEnableBits
0x14002C0D8: "private: struct DebugDataFragment * __ptr64 __cdecl MpService::CDebugMessageBase::GetNextDataFragment(void) __ptr64" ?GetNextDataFragment@CDebugMessageBase@MpService@@AEAAPEAUDebugDataFragment@@XZ
0x140054158: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@WRL@Microsoft@@8
0x14003A3B0: "__cdecl _imp_MpRemoveDynamicSignatureFile" __imp_MpRemoveDynamicSignatureFile
0x1400271FC: "long __cdecl UtilConvertUnicodeToUTF8(unsigned short const * __ptr64,int,char * __ptr64 * __ptr64,int * __ptr64)" ?UtilConvertUnicodeToUTF8@@YAJPEBGHPEAPEADPEAH@Z
0x140055208: "const std::length_error::`RTTI Complete Object Locator'" ??_R4length_error@std@@6B@
0x1400611E8: "long (__cdecl* __ptr64 g_pfnRoInitialize)(enum RO_INIT_TYPE)" ?g_pfnRoInitialize@@3P6AJW4RO_INIT_TYPE@@@ZEA
0x14003A090: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x14005B55C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-crt-runtime-l1-1-0
0x1400454E0: "ERROR: UtilGetLocalMachineName()" ??_C@_1FM@BNAKLLKM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAG?$AAe?$AAt?$AAL?$AAo?$AAc?$AAa?$AAl?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$CI?$AA?$CJ@
0x140011918: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct CommonUtil::ICmdOptionsLookup>::~CRefObjectFor<struct CommonUtil::ICmdOptionsLookup>(void) __ptr64" ??1?$CRefObjectFor@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@MEAA@XZ
0x140039FB8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14001DC3C: "void __cdecl RunCommandDownloadOfflineScanner(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandDownloadOfflineScanner@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x1400554F0: "__vectorcall ??_R2IMpConfigKeysIterator@MpConfigUtils" ??_R2IMpConfigKeysIterator@MpConfigUtils@@8
0x140039C38: "__cdecl _imp_CloseEventLog" __imp_CloseEventLog
0x1400555B0: "__vectorcall ??_R3IMpConfigKeysIterator@MpConfigUtils" ??_R3IMpConfigKeysIterator@MpConfigUtils@@8
0x140020620: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::Release`adjustor{8}' (void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAKXZ
0x140039F98: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400530D0: "const CommonUtil::IRefObject::`RTTI Complete Object Locator'" ??_R4IRefObject@CommonUtil@@6B@
0x140041E38: "Download Started... " ??_C@_1CK@BGKNNOBF@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140041F08: "Installation Started... " ??_C@_1DC@EEPMCFBC@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140045140: "Getting windir\Panther\UnattendG" ??_C@_1GA@OAEFJGFF@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?2?$AAP?$AAa?$AAn?$AAt?$AAh?$AAe?$AAr?$AA?2?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAG@
0x140039CF0: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1400366F4: "__cdecl _vcrt_uninitialize_locks" __vcrt_uninitialize_locks
0x14004FB10: "__cdecl GUID_b6a5c8e4_6e3c_5c37_92cf_cf9f1c383335" _GUID_b6a5c8e4_6e3c_5c37_92cf_cf9f1c383335
0x14004E830: "ERROR: Collect the build string:" ??_C@_1II@HENFHABO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAb?$AAu?$AAi?$AAl?$AAd?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3@
0x140046EF0: "ERROR: OpenEventLog(System) fail" ??_C@_1FC@JDCMCBDI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AA?$CI?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl@
0x140039898: "const CommonUtil::CUtilRegEnumSubKeys::`vftable'" ??_7CUtilRegEnumSubKeys@CommonUtil@@6B@
0x14005FFC8: "__vectorcall ??_R0?AVCMpAzSubmitServiceCallback@" ??_R0?AVCMpAzSubmitServiceCallback@@@8
0x140054F30: "__vectorcall ??_R1A@?0A@EA@CMpAzSubmitServiceCallback" ??_R1A@?0A@EA@CMpAzSubmitServiceCallback@@8
0x14003A028: "__cdecl _imp_VariantInit" __imp_VariantInit
0x1400481F0: "Software\Wow6432Node\Classes\CLS" ??_C@_1JE@BOMFAPKM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS@
0x140040C80: "INFO: ForceSignaturesUpdate is s" ??_C@_1HM@NGIHOFAK@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAF?$AAo?$AAr?$AAc?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAi?$AAs?$AA?5?$AAs@
0x14004E4D0: "ERROR: NewSprintfW(%ls, %ls) Fai" ??_C@_1FE@JJMNBCKO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAe?$AAw?$AAS?$AAp?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?0?$AA?5?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi@
0x140046AD0: "%lu " ??_C@_19BEKCDJBB@?$AA?$CF?$AAl?$AAu?$AA?7?$AA?$AA@
0x14003E340: "getfilesdiagtrack" ??_C@_1CE@PBHMDLAI@?$AAg?$AAe?$AAt?$AAf?$AAi?$AAl?$AAe?$AAs?$AAd?$AAi?$AAa?$AAg?$AAt?$AAr?$AAa?$AAc?$AAk?$AA?$AA@
0x1400558B8: "__vectorcall ??_R2CMpSpyNetQueueCallback" ??_R2CMpSpyNetQueueCallback@@8
0x1400557A8: "__vectorcall ??_R3CMpSpyNetQueueCallback" ??_R3CMpSpyNetQueueCallback@@8
0x140050450: "EventWriteTransfer" ??_C@_0BD@PKLHJPHD@EventWriteTransfer?$AA@
0x140045FC8: "OnAccess protection disabled" ??_C@_1DK@LJPOCOJJ@?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140025318: "long __cdecl CommonUtil::UtilGetHighResolutionDisplayTime(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ?UtilGetHighResolutionDisplayTime@CommonUtil@@YAJPEAPEAG_K@Z
0x14003A558: "__cdecl _xl_a" __xl_a
0x140039D60: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x14005B278: "__cdecl CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24" _CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24
0x140036C5A: "__cdecl _imp_load_LoadUserProfileW" __imp_load_LoadUserProfileW
0x140039DF0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140042EB8: "MitigationPolicies" ??_C@_1CG@FPFCFEHJ@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x14004BC98: "WIN32_OWN_PROCESS " ??_C@_1CG@OIGFFLIO@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAO?$AAW?$AAN?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AA?$AA@
0x140043F90: "%allusersprofile%\..\NetworkServ" ??_C@_1HA@OKENJAHG@?$AA?$CF?$AAa?$AAl?$AAl?$AAu?$AAs?$AAe?$AAr?$AAs?$AAp?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$CF?$AA?2?$AA?4?$AA?4?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAS?$AAe?$AAr?$AAv@
0x14002CC5C: "long __cdecl CommonUtil::UtilIsFileExists(unsigned short const * __ptr64)" ?UtilIsFileExists@CommonUtil@@YAJPEBG@Z
0x140039C90: "__cdecl _imp_CopySid" __imp_CopySid
0x140049558: "EventRegister" ??_C@_0O@BAMBGLIE@EventRegister?$AA@
0x14001E9C0: "public: virtual void * __ptr64 __cdecl OnlineIdTicketIterator::`vector deleting destructor'(unsigned int) __ptr64" ??_EOnlineIdTicketIterator@@UEAAPEAXI@Z
0x14004BB70: "WARNING: MpCollectServiceInfo("W" ??_C@_1GO@JHFKFKDO@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAW@
0x14001BC2C: "long __cdecl RunCommandCollectFileVersions(void)" ?RunCommandCollectFileVersions@@YAJXZ
0x140045020: "Collecting WinRE logs... " ??_C@_1DE@KBHDFBLM@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAi?$AAn?$AAR?$AAE?$AA?5?$AAl?$AAo?$AAg?$AAs?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x14004A9D0: "ERROR: CollectServiceInfo("wscsv" ??_C@_1GC@KCGBEBKI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$CI?$AA?$CC?$AAw?$AAs?$AAc?$AAs?$AAv@
0x140048990: "LastOfflineScan" ??_C@_1CA@OPJIDILA@?$AAL?$AAa?$AAs?$AAt?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x140046B98: "Data: %ls " ??_C@_1BG@IBFOPOPO@?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?6?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x14003A020: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1400449C0: "Flushing current session logs fo" ??_C@_1JA@KGILBBJJ@?$AAF?$AAl?$AAu?$AAs?$AAh?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?5?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAl?$AAo?$AAg?$AAs?$AA?5?$AAf?$AAo@
0x14003A428: "__cdecl _imp_MpThreatOpen" __imp_MpThreatOpen
0x14002C140: "public: virtual long __cdecl CError::GetErrorCode(void)const __ptr64" ?GetErrorCode@CError@@UEBAJXZ
0x14004DA28: "INFO: No quarantined items." ??_C@_1DI@HGJGPMFM@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAN?$AAo?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd?$AA?5?$AAi?$AAt?$AAe?$AAm?$AAs?$AA?4?$AA?$AA@
0x140039C70: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x14003DF68: "%s%s%s%s" ??_C@_1BC@GIKFGOCP@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x1400463F0: "ERROR: FileTimeToSystemTime(...)" ??_C@_1FM@CGCLKINP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAT?$AAo?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?$CI?$AA?4?$AA?4?$AA?4?$AA?$CJ@
0x14004D440: WPP_0bbe4bd02c3637396703bbb1060d1f28_Traceguids
0x14001AD90: "public: class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::erase<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,void>(class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >) __ptr64" ??$erase@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@X@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@QEAA?AV?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@1@V21@@Z
0x140035C28: "void __cdecl _CallMemberFunction1(void * __ptr64 const,void * __ptr64 const,void * __ptr64 const)" ?_CallMemberFunction1@@YAXQEAX00@Z
0x14004C2B8: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x140027560: "long __cdecl fci_seek(__int64,long,int,int * __ptr64,void * __ptr64)" ?fci_seek@@YAJ_JJHPEAHPEAX@Z
0x140002B78: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpSmartClientUninitialize>::~CUniqueHandle<struct CAutoMpSmartClientUninitialize>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpSmartClientUninitialize@@@CommonUtil@@QEAA@XZ
0x14002C118: "public: __cdecl CError::CError(long) __ptr64" ??0CError@@QEAA@J@Z
0x140018014: "private: long __cdecl CrimsonEventLog::ReadAndProcessEventLogRecord(void * __ptr64) __ptr64" ?ReadAndProcessEventLogRecord@CrimsonEventLog@@AEAAJPEAX@Z
0x14003A448: "__cdecl _imp_MpUpdatePlatform" __imp_MpUpdatePlatform
0x14001D920: "public: static long __cdecl CSyncUpdateCallback::Callback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?Callback@CSyncUpdateCallback@@SAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x140044690: "Getting product service(s) regis" ??_C@_1HA@EADLINDG@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAp?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AAs?$AA?$CJ?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs@
0x140031390: "unsigned __int64 __cdecl CommonUtil::MpQueryPerformanceFrequency(void)" ?MpQueryPerformanceFrequency@CommonUtil@@YA_KXZ
0x14004A370: "productUptoDate" ??_C@_1CA@NCJKDKJC@?$AAp?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAU?$AAp?$AAt?$AAo?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
0x14004C320: " %-40s [REG_DWORD] : <NO V" ??_C@_1EO@GGINDEDJ@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAD?$AAW?$AAO?$AAR?$AAD?$AA?$FN?$AA?5?$AA?5?$AA?5?$AA?5?$AA?3?$AA?5?$AA?$DM?$AAN?$AAO?$AA?5?$AAV@
0x1400405C0: "ERROR: MpCleanThreats() Completi" ??_C@_1FM@PEIOAAGP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi@
0x140055558: "__vectorcall ??_R1A@?0A@EA@IMpConfigKeysIterator@MpConfigUtils" ??_R1A@?0A@EA@IMpConfigKeysIterator@MpConfigUtils@@8
0x14004C6D8: "[%s\%s] " ??_C@_1BC@GHACONHG@?$AA?$FL?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x14002C9C8: "long __cdecl CommonUtil::UtilCreateFile(void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,void * __ptr64)" ?UtilCreateFile@CommonUtil@@YAJPEAPEAXPEBGKKKKPEAU_SECURITY_ATTRIBUTES@@PEAX@Z
0x1400428A0: "ERROR: Process Hand - timeout %u" ??_C@_1EE@KHHJAPKF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAH?$AAa?$AAn?$AAd?$AA?5?$AA?9?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?5?$AA?$CF?$AAu@
0x140020390: "public: virtual void * __ptr64 __cdecl OnlineIdTicketVector::`vector deleting destructor'(unsigned int) __ptr64" ??_EOnlineIdTicketVector@@UEAAPEAXI@Z
0x140040A58: "ForceSignaturesUpdate" ??_C@_1CM@COBBKEMI@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1400608A0: "__cdecl _isa_available" __isa_available
0x1400601E0: "__vectorcall ??_R0?AV?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@@8
0x140040AB0: "INFO: NoSignatureUpdates is set." ??_C@_1HK@FFLFPEAM@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAN?$AAo?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAs?$AAe?$AAt?$AA?4@
0x14004DBF0: " %s:%s quarantined at %s (U" ??_C@_1EK@IHGBABFK@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAs?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd?$AA?5?$AAa?$AAt?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CI?$AAU@
0x140053318: "const CMseWatCheck::`RTTI Complete Object Locator'" ??_R4CMseWatCheck@@6B@
0x1400126A8: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x14002D420: "long __cdecl CommonUtil::HrFromStdException(class std::exception const & __ptr64)" ?HrFromStdException@CommonUtil@@YAJAEBVexception@std@@@Z
0x1400468F0: "ERROR: StringCchCopyNW failed (%" ??_C@_1EI@GIGMNDKJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAo?$AAp?$AAy?$AAN?$AAW?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x140050A10: WPP_59c4ea30f3553329d2c4bf3c5c1a26d2_Traceguids
0x14001E4E0: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::Details::WeakReferenceImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWeakReferenceImpl@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140041320: "AntiSpyware Signature Version: %" ??_C@_0CD@HGDIMNEE@AntiSpyware?5Signature?5Version?3?5?$CF@
0x14003F890: "421CFC91-A93E-42AB-A35C-F06F127F" ??_C@_1EK@CNIPCDHK@?$AA4?$AA2?$AA1?$AAC?$AAF?$AAC?$AA9?$AA1?$AA?9?$AAA?$AA9?$AA3?$AAE?$AA?9?$AA4?$AA2?$AAA?$AAB?$AA?9?$AAA?$AA3?$AA5?$AAC?$AA?9?$AAF?$AA0?$AA6?$AAF?$AA1?$AA2?$AA7?$AAF@
0x14005E4A8: "__vectorcall ??_R0?AVCMpIdleNotifierCallback@" ??_R0?AVCMpIdleNotifierCallback@@@8
0x1400214B4: "public: void __cdecl CMpSampleHeaderQueueCallback::WaitForCompletion(struct MpClient::IMpSampleHeaderQueue * __ptr64,bool) __ptr64" ?WaitForCompletion@CMpSampleHeaderQueueCallback@@QEAAXPEAUIMpSampleHeaderQueue@MpClient@@_N@Z
0x140048A98: "DefaultEngineExpirationTime" ??_C@_1DI@CBMFDJJM@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAE?$AAx?$AAp?$AAi?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x140061092: "struct CommonUtil::CCommonThrowHR CommonUtil::tHR" ?tHR@CommonUtil@@3UCCommonThrowHR@1@A
0x14004EC00: "DISM_{53BFAE52-B167-4E2F-A258-0A" ??_C@_1FI@PBFDMECA@?$AAD?$AAI?$AAS?$AAM?$AA_?$AA?$HL?$AA5?$AA3?$AAB?$AAF?$AAA?$AAE?$AA5?$AA2?$AA?9?$AAB?$AA1?$AA6?$AA7?$AA?9?$AA4?$AAE?$AA2?$AAF?$AA?9?$AAA?$AA2?$AA5?$AA8?$AA?9?$AA0?$AAA@
0x140041110: "Calling MpUpdateStartEx with opt" ??_C@_1FE@KJDFNPLP@?$AAC?$AAa?$AAl?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAE?$AAx?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAo?$AAp?$AAt@
0x140041980: "Please record the SignatureSet I" ??_C@_0EO@OOELBANN@Please?5record?5the?5SignatureSet?5I@
0x14003E158: "RestrictPrivileges" ??_C@_1CG@HPODHJEO@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAs?$AA?$AA@
0x140065030: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x1400351F0: "void __cdecl __SetUnwindTryBlock(unsigned __int64 * __ptr64,struct _xDISPATCHER_CONTEXT * __ptr64,struct _s_FuncInfo const * __ptr64,int)" ?__SetUnwindTryBlock@@YAXPEA_KPEAU_xDISPATCHER_CONTEXT@@PEBU_s_FuncInfo@@H@Z
0x140036D14: abort
0x140033A30: "public: virtual __cdecl type_info::~type_info(void) __ptr64" ??1type_info@@UEAA@XZ
0x140050AB8: "MpSvcData" ??_C@_09FMBEEAAJ@MpSvcData?$AA@
0x14002D1C4: "long __cdecl CommonUtil::HrDeleteFile(unsigned short const * __ptr64)" ?HrDeleteFile@CommonUtil@@YAJPEBG@Z
0x140045DC0: "%-24hs: Finished(%u) Failed(%u) " ??_C@_1JG@IBNIONPI@?$AA?$CF?$AA?9?$AA2?$AA4?$AAh?$AAs?$AA?3?$AA?5?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AAe?$AAd?$AA?$CI?$AA?$CF?$AAu?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$CI?$AA?$CF?$AAu?$AA?$CJ?$AA?5@
0x1400391C0: "const HModule::`vftable'" ??_7HModule@@6B@
0x14000FC10: "__cdecl _local_stdio_scanf_options" __local_stdio_scanf_options
0x14003F23C: "%S" ??_C@_15MAOEGKJF@?$AA?$CF?$AAS?$AA?$AA@
0x14003F760: "%-24ws: %u total " ??_C@_1CE@FILJPDKH@?$AA?$CF?$AA?9?$AA2?$AA4?$AAw?$AAs?$AA?3?$AA?5?$AA?$CF?$AAu?$AA?5?$AAt?$AAo?$AAt?$AAa?$AAl?$AA?6?$AA?$AA@
0x1400548D8: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpConfigUtils::IMpConfigKeysIterator>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIMpConfigKeysIterator@MpConfigUtils@@@CommonUtil@@UEBAJXZ
0x14004DC80: "EnableService(%d, %u) " ??_C@_1CO@LEEJIABG@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CF?$AAd?$AA?0?$AA?5?$AA?$CF?$AAu?$AA?$CJ?$AA?6?$AA?$AA@
0x1400498F0: "Cancel notification - cancelling" ??_C@_1FC@NOBGEBGK@?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AA?5?$AAn?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?9?$AA?5?$AAc?$AAa?$AAn?$AAc?$AAe?$AAl?$AAl?$AAi?$AAn?$AAg@
0x140053AE0: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x14004ECA8: "MseWatGetGracePeriod" ??_C@_0BF@KDMEKJCH@MseWatGetGracePeriod?$AA@
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<class CUpdateNotifications>::~AutoRef<class CUpdateNotifications>(void) __ptr64" ??1?$AutoRef@VCUpdateNotifications@@@CommonUtil@@QEAA@XZ
0x140036F80: "__cdecl Init_thread_header" _Init_thread_header
0x14005B5AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x14005B50C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140054428: "__vectorcall ??_R1A@?0A@EA@StrongReference@Details@WRL@Microsoft" ??_R1A@?0A@EA@StrongReference@Details@WRL@Microsoft@@8
0x140012A18: "public: __cdecl ATL::CComPtr<struct IWbemLocator>::~CComPtr<struct IWbemLocator>(void) __ptr64" ??1?$CComPtr@UIWbemLocator@@@ATL@@QEAA@XZ
0x14003EE38: "RevertPlatform" ??_C@_1BO@HPABOPAH@?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x140040E18: "WinTask" ??_C@_1BA@ICDMCLO@?$AAW?$AAi?$AAn?$AAT?$AAa?$AAs?$AAk?$AA?$AA@
0x140009140: "public: virtual void * __ptr64 __cdecl MpCmdUtils::CUniqueNamedObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUniqueNamedObject@MpCmdUtils@@UEAAPEAXI@Z
0x140024F68: "long __cdecl UtilGetLocalMachineName(enum _COMPUTER_NAME_FORMAT,unsigned short * __ptr64 * __ptr64)" ?UtilGetLocalMachineName@@YAJW4_COMPUTER_NAME_FORMAT@@PEAPEAG@Z
0x140039C10: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x140055BD8: "__vectorcall ??_R3IUtilRegEnumKeyValues@CommonUtil" ??_R3IUtilRegEnumKeyValues@CommonUtil@@8
0x140055AB0: "__vectorcall ??_R2IUtilRegEnumKeyValues@CommonUtil" ??_R2IUtilRegEnumKeyValues@CommonUtil@@8
0x140060ED0: "__cdecl _favor" __favor
0x140044530: "ERROR: MpDumpCache failed (%X) " ??_C@_1EA@PHPBMKOE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAD?$AAu?$AAm?$AAp?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x14003A288: "__cdecl _imp___p__commode" __imp___p__commode
0x140049DE0: "ERROR: IWscASStatus::Unregister(" ??_C@_1FK@DMCNALEO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAI?$AAW?$AAs?$AAc?$AAA?$AAS?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?3?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$CI@
0x14003A230: "__cdecl _imp___stdio_common_vswscanf" __imp___stdio_common_vswscanf
0x140025700: "public: virtual void * __ptr64 __cdecl MpCommunication::CMpCommunicationLibrary::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpCommunicationLibrary@MpCommunication@@UEAAPEAXI@Z
0x14004A3C0: "pathToSignedProductExe" ??_C@_1CO@MCIEHDAM@?$AAp?$AAa?$AAt?$AAh?$AAT?$AAo?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAE?$AAx?$AAe?$AA?$AA@
0x140050230: "ServiceReportInfraError" ??_C@_1DA@HEKBOGCK@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAI?$AAn?$AAf?$AAr?$AAa?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x14004D6E0: " %s:%s quarantined at %s (UTC)" ??_C@_1FO@PJCPAMNG@?$AA?5?$AA?5?$AA?5?$AA?$CF?$AAs?$AA?3?$AA?$CF?$AAs?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd?$AA?5?$AAa?$AAt?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CI?$AAU?$AAT?$AAC?$AA?$CJ@
0x140003BD8: "void __cdecl MpCmdSuppLog(unsigned short const * __ptr64,...)" ?MpCmdSuppLog@@YAXPEBGZZ
0x140030CEC: "bool __cdecl CommonUtil::IsBlankString(unsigned short const * __ptr64)" ?IsBlankString@CommonUtil@@YA_NPEBG@Z
0x14001E164: "public: static void __cdecl CAutoMpSampleInfoFree::Release(struct tagMPSAMPLE_INFO * __ptr64)" ?Release@CAutoMpSampleInfoFree@@SAXPEAUtagMPSAMPLE_INFO@@@Z
0x140003C10: "public: static void __cdecl CAutoMpThreatInfoFree::Release(struct tagMPTHREAT_INFO * __ptr64)" ?Release@CAutoMpThreatInfoFree@@SAXPEAUtagMPTHREAT_INFO@@@Z
0x14001FF20: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140033DC8: "__cdecl _security_init_cookie" __security_init_cookie
0x1400611F0: "long (__cdecl* __ptr64 g_pfnWindowsDeleteString)(struct HSTRING__ * __ptr64)" ?g_pfnWindowsDeleteString@@3P6AJPEAUHSTRING__@@@ZEA
0x14003E418: "SignaturesUpdateService" ??_C@_1DA@PIIADDN@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140045C10: "failed to print the behavior mon" ??_C@_1FI@PDEGNJGJ@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAb?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AA?5?$AAm?$AAo?$AAn@
0x140039E40: "__cdecl _imp_FlsFree" __imp_FlsFree
0x140052F70: "__vectorcall ??_R1A@?0A@EA@IMpSignaturesUpdateServiceCallback@MpClient" ??_R1A@?0A@EA@IMpSignaturesUpdateServiceCallback@MpClient@@8
0x14000DE40: "public: virtual void * __ptr64 __cdecl HModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GHModule@@UEAAPEAXI@Z
0x140036CC0: "__cdecl _p___wargv" __p___wargv
0x14004CC10: "EvtQuery" ??_C@_08KMHLAMGL@EvtQuery?$AA@
0x14001FCD0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Internal::Security::WebAuthentication::UserHostIdentity * __ptr64> >::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserHostIdentity@WebAuthentication@Security@Internal@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x14003EC70: "ERROR: MpWDEnable(FALSE) failed " ??_C@_1EM@OBEBJANI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAW?$AAD?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$CI?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5@
0x14002EFD0: "public: __cdecl CommonUtil::CMpCriticalSection::~CMpCriticalSection(void) __ptr64" ??1CMpCriticalSection@CommonUtil@@QEAA@XZ
0x14003A300: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x1400234C0: "unsigned long __cdecl MpEventUnregisterNotFound(unsigned __int64)" ?MpEventUnregisterNotFound@@YAK_K@Z
0x14003A170: "__cdecl _imp__cexit" __imp__cexit
0x14000431C: "void __cdecl RunCommandScan(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandScan@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x140039690: "const Microsoft::WRL::Details::WeakReferenceImpl::`vftable'" ??_7WeakReferenceImpl@Details@WRL@Microsoft@@6B@
0x140039388: "const Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>::`vftable'" ??_7?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@6B@
0x1400439E0: "Microsoft-Windows-Windows Defend" ??_C@_1EO@DPGKADJI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd@
0x1400229E8: "public: __cdecl CommonUtil::ScopeGuardImpl<class CMpSampleHeaderQueueCallback,class CommonUtil::MemFunRef<void,class CMpSampleHeaderQueueCallback> >::~ScopeGuardImpl<class CMpSampleHeaderQueueCallback,class CommonUtil::MemFunRef<void,class CMpSampleHeaderQueueCallback> >(void) __ptr64" ??1?$ScopeGuardImpl@VCMpSampleHeaderQueueCallback@@V?$MemFunRef@XVCMpSampleHeaderQueueCallback@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140055FB0: "__vectorcall ??_R1A@?0A@EA@CCmdOptionsLookupMap@CommonUtil" ??_R1A@?0A@EA@CCmdOptionsLookupMap@CommonUtil@@8
0x140024240: "long __cdecl MpConfigUtils::GetConfigStringValue(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64)" ?GetConfigStringValue@MpConfigUtils@@YAJPEAPEAGPEBG1PEAW4tagMP_CONFIG_ORIGIN@@@Z
0x14004EBA8: "DismShutdown" ??_C@_0N@LIJINHCJ@DismShutdown?$AA@
0x140028988: "public: __cdecl CMpSpyNetQueueCallback::CMpSpyNetQueueCallback(void) __ptr64" ??0CMpSpyNetQueueCallback@@QEAA@XZ
0x1400431C8: "IFEO.txt" ??_C@_1BC@FKMKGCFC@?$AAI?$AAF?$AAE?$AAO?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x14005EC20: "__vectorcall ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@" ??_R0?AU?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@@8
0x140055320: "const std::bad_alloc::`RTTI Complete Object Locator'" ??_R4bad_alloc@std@@6B@
0x14005B4C8: VERSION_NULL_THUNK_DATA_DLB
0x140002BA4: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CMpUtilsUninitialize>::~CUniqueHandle<struct CommonUtil::CMpUtilsUninitialize>(void) __ptr64" ??1?$CUniqueHandle@UCMpUtilsUninitialize@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140046B70: "%Iu: %ls " ??_C@_1BE@ILAGEFFI@?$AA?$CF?$AAI?$AAu?$AA?3?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140042990: "ReportingGUID" ??_C@_1BM@NAJDBGOJ@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x1400470C0: "MpSupport_EventLogNumRecsToRead" ??_C@_1EA@DOFCFAEH@?$AAM?$AAp?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AAL?$AAo?$AAg?$AAN?$AAu?$AAm?$AAR?$AAe?$AAc?$AAs?$AAT?$AAo?$AAR?$AAe?$AAa?$AAd?$AA?$AA@
0x14003A078: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x140050C70: "MpService_ForceResponseBondVsXml" ??_C@_1EC@DDGDNNCI@?$AAM?$AAp?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA_?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAs?$AAp?$AAo?$AAn?$AAs?$AAe?$AAB?$AAo?$AAn?$AAd?$AAV?$AAs?$AAX?$AAm?$AAl@
0x14002F9B0: "public: virtual void * __ptr64 __cdecl CommonUtil::CCmdOptionsLookupMap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCmdOptionsLookupMap@CommonUtil@@UEAAPEAXI@Z
0x140039718: "const CMpAzSubmitServiceCallback::`vftable'{for `MpAzSubmit::IMpAzSubmitCallback'}" ??_7CMpAzSubmitServiceCallback@@6BIMpAzSubmitCallback@MpAzSubmit@@@
0x14004FE70: "MpAzSubmitBlobUpload" ??_C@_0BF@PGCOCDHJ@MpAzSubmitBlobUpload?$AA@
0x140052D48: "__vectorcall ??_R1A@?0A@EA@HModule" ??_R1A@?0A@EA@HModule@@8
0x14002CB4C: "long __cdecl CommonUtil::UtilCreateDirectory(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?UtilCreateDirectory@CommonUtil@@YAJPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x14004AED0: "Active" ??_C@_1O@EMLLFJNI@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x140037224: wcscmp
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpCommunication::IMpSpyNetConnectionFactory>::~AutoRef<struct MpCommunication::IMpSpyNetConnectionFactory>(void) __ptr64" ??1?$AutoRef@UIMpSpyNetConnectionFactory@MpCommunication@@@CommonUtil@@QEAA@XZ
0x14004BA50: "WdNisDrv" ??_C@_1BC@IHFKICEA@?$AAW?$AAd?$AAN?$AAi?$AAs?$AAD?$AAr?$AAv?$AA?$AA@
0x1400485E0: "Registry.txt" ??_C@_1BK@LLBDFLE@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140046820: " " ??_C@_15OJKDPEFE@?$AA?5?$AA?5?$AA?$AA@
0x140060FB0: "private: static char const * __ptr64 const __ptr64 UnDecorator::name" ?name@UnDecorator@@0PEBDEB
0x1400464F0: "ERROR: NULL parameter in ReadAnd" ??_C@_1GO@JAJFPCNI@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAU?$AAL?$AAL?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AA?5?$AAi?$AAn?$AA?5?$AAR?$AAe?$AAa?$AAd?$AAA?$AAn?$AAd@
0x14001FCD0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAKXZ
0x140036C90: "__cdecl initialize_wide_environment" _initialize_wide_environment
0x140039E78: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x140013598: "void __cdecl RunCommandUnregisterWSC(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandUnregisterWSC@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14004CA28: "TaskName" ??_C@_1BC@HLCFAFMB@?$AAT?$AAa?$AAs?$AAk?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140039730: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x14004D250: "LogAlways " ??_C@_1BG@CGGMFONE@?$AAL?$AAo?$AAg?$AAA?$AAl?$AAw?$AAa?$AAy?$AAs?$AA?7?$AA?$AA@
0x140040020: "ERROR: MpScan(dwOptions=%u) Comp" ??_C@_1GE@KJFIIGLO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AAd?$AAw?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$DN?$AA?$CF?$AAu?$AA?$CJ?$AA?5?$AAC?$AAo?$AAm?$AAp@
0x14002001C: "public: __cdecl Microsoft::WRL::ComPtr<struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequestFactory>::~ComPtr<struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequestFactory>(void) __ptr64" ??1?$ComPtr@UIOnlineIdServiceTicketRequestFactory@OnlineId@Authentication@Security@Windows@@@WRL@Microsoft@@QEAA@XZ
0x140054C38: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@12@@
0x140048290: "Software\Wow6432Node\Classes\CLS" ??_C@_1JE@HHAJPDKB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS@
0x140054BE8: "const OnlineIdTicketVector::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_R4OnlineIdTicketVector@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@@
0x140022B40: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x140039920: "const CommonUtil::CCmdOptionsLookupMap::`vftable'" ??_7CCmdOptionsLookupMap@CommonUtil@@6B@
0x1400611C0: "public: static class Microsoft::WRL::Details::ModuleBase * __ptr64 __ptr64 Microsoft::WRL::Details::ModuleBase::module_" ?module_@ModuleBase@Details@WRL@Microsoft@@2PEAV1234@EA
0x14002EE40: "long __cdecl CommonUtil::CreateNewRefObject<class CommonUtil::CUtilRegEnumSubKeys>(class CommonUtil::CUtilRegEnumSubKeys * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCUtilRegEnumSubKeys@CommonUtil@@@CommonUtil@@YAJPEAPEAVCUtilRegEnumSubKeys@0@@Z
0x14004CF00: "ERROR: ExtractStringPropertyFrom" ??_C@_1GK@PNBNHDKP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AAF?$AAr?$AAo?$AAm@
0x140036CB4: "__cdecl set_fmode" _set_fmode
0x14001FF50: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140045EC8: "AS signature enabled" ??_C@_1CK@KAAMMBBB@?$AAA?$AAS?$AA?5?$AAs?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14002DC70: "long __cdecl CommonUtil::UtilAcquirePrivilege(unsigned short const * __ptr64)" ?UtilAcquirePrivilege@CommonUtil@@YAJPEBG@Z
0x140014538: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>::~CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>(void) __ptr64" ??1?$CUniqueHandle@UCAutoFreeLibrary@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140008F4C: "public: __cdecl MpCmdUtils::CTerminationTimer::~CTerminationTimer(void) __ptr64" ??1CTerminationTimer@MpCmdUtils@@QEAA@XZ
0x140045680: "ERROR: InitMpCab() failed (%X) " ??_C@_1EA@DKGNGNCB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAI?$AAn?$AAi?$AAt?$AAM?$AAp?$AAC?$AAa?$AAb?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x140060F90: "private: static class Replicator * __ptr64 __ptr64 UnDecorator::pArgList" ?pArgList@UnDecorator@@0PEAVReplicator@@EA
0x14003A580: "__cdecl _xt_z" __xt_z
0x140036D20: "__cdecl free_base" _free_base
0x1400339D0: wmainCRTStartup
0x140006A84: "void __cdecl RunCommandSignatureUpdate(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandSignatureUpdate@@YAXPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14003A370: "__cdecl _imp_MpConveySampleSubmissionResult" __imp_MpConveySampleSubmissionResult
0x140053D50: "__vectorcall ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R2?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140034664: "__cdecl SetThrowImageBase" _SetThrowImageBase
0x14004FD68: "RoInitialize" ??_C@_0N@PPOMPGGK@RoInitialize?$AA@
0x140054A10: "__vectorcall ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft" ??_R3?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIWeakReference@@@Details@WRL@Microsoft@@8
0x140024804: "long __cdecl MpConfigUtils::GetMpFileFullName(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,bool)" ?GetMpFileFullName@MpConfigUtils@@YAJPEAPEAGPEBG_N@Z
0x140039BF0: "__cdecl _imp_CreateRestrictedToken" __imp_CreateRestrictedToken
0x140048A50: "FirstAuGracePeriod" ??_C@_1CG@KLDFMFGF@?$AAF?$AAi?$AAr?$AAs?$AAt?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x140040008: "Scan starting... " ??_C@_0BC@CKBEKJPN@Scan?5starting?4?4?4?6?$AA@
0x1400424E0: "ERROR: OpenProcessToken() Failed" ??_C@_1EK@MFGAFFIE@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAT?$AAo?$AAk?$AAe?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140049670: Spynet_SendReportStart
0x14003FAA0: "DropRemediation" ??_C@_1CA@NNPEGOLF@?$AAD?$AAr?$AAo?$AAp?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140042020: "Update completed succesfully . n" ??_C@_1HO@HIDANLNG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?5?$AA?4?$AA?5?$AAn@
0x14000DB88: "long __cdecl CommonUtil::HrStdPushFront<class CommonUtil::CStdPtrList<class CommonUtil::CUniqueHandle<struct CAutoMpFile> >,unsigned short * __ptr64 * __ptr64>(class CommonUtil::CStdPtrList<class CommonUtil::CUniqueHandle<struct CAutoMpFile> > & __ptr64,unsigned short * __ptr64 * __ptr64 const & __ptr64)" ??$HrStdPushFront@V?$CStdPtrList@V?$CUniqueHandle@UCAutoMpFile@@@CommonUtil@@@CommonUtil@@PEAPEAG@CommonUtil@@YAJAEAV?$CStdPtrList@V?$CUniqueHandle@UCAutoMpFile@@@CommonUtil@@@0@AEBQEAPEAG@Z
0x140053CF0: "__vectorcall ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft" ??_R2?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@8
0x1400549F8: "__vectorcall ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft" ??_R3?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@8
0x14003A108: "__cdecl _imp_malloc" __imp_malloc
0x140040DC0: "Quarantine" ??_C@_1BG@EJOBAGJF@?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AA?$AA@
0x140039D00: ADVAPI32_NULL_THUNK_DATA
0x140054E60: "__vectorcall ??_R2IMpSampleHeaderQueueCallback@MpClient" ??_R2IMpSampleHeaderQueueCallback@MpClient@@8
0x140055048: "__vectorcall ??_R3IMpSampleHeaderQueueCallback@MpClient" ??_R3IMpSampleHeaderQueueCallback@MpClient@@8
0x1400441E0: "%temp%" ??_C@_1O@KACBACJF@?$AA?$CF?$AAt?$AAe?$AAm?$AAp?$AA?$CF?$AA?$AA@
0x14004D800: "ERROR: RunCommandQuarantineResto" ??_C@_1GA@OEDPKHLC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo@
0x14001D120: "private: virtual long __cdecl COfflineScannerDownload::OnReadStart(unsigned __int64) __ptr64" ?OnReadStart@COfflineScannerDownload@@EEAAJ_K@Z
0x140053ED8: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x14003FC58: "RestrictPrivilegesScan" ??_C@_1CO@LKKDJNMJ@?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AAs?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x140039D88: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140020630: "[thunk]:public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x14003A1D8: "__cdecl _imp__invalid_parameter_noinfo" __imp__invalid_parameter_noinfo
0x14002654C: "long __cdecl CheckParentProcessIdentity(unsigned long,int * __ptr64)" ?CheckParentProcessIdentity@@YAJKPEAH@Z
0x14001A5C0: "public: void __cdecl std::_Tree_comp_alloc<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Freenode0(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_comp_alloc@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@@Z
0x140039E10: "__cdecl _imp_GetLocaleInfoW" __imp_GetLocaleInfoW
0x1400457C0: "ERROR: FindNextFile() failed (%X" ??_C@_1EG@IBFOPGFP@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAi?$AAn?$AAd?$AAN?$AAe?$AAx?$AAt?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX@
0x140024410: "public: virtual void * __ptr64 __cdecl MpConfigUtils::CMpConfigKeysIterator::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpConfigKeysIterator@MpConfigUtils@@UEAAPEAXI@Z
0x140060078: "__vectorcall ??_R0?AVCMpThreadPoolItemBase@CommonUtil@" ??_R0?AVCMpThreadPoolItemBase@CommonUtil@@@8
0x140049FE8: "\\.\root\SecurityCenter" ??_C@_1DA@CINDLNJE@?$AA?2?$AA?2?$AA?4?$AA?2?$AAr?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x140002F1C: "long __cdecl StringCchVPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,char * __ptr64)" ?StringCchVPrintfW@@YAJPEAG_KPEBGPEAD@Z
0x14005B598: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x14003FB00: "Timeout" ??_C@_1BA@BKONPLFM@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140046200: "NIS disabled" ??_C@_1BK@FIHMFEPA@?$AAN?$AAI?$AAS?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140011740: "public: virtual long __cdecl CMpSignaturesUpdateServiceCallback::AddRef(void)const __ptr64" ?AddRef@CMpSignaturesUpdateServiceCallback@@UEBAJXZ
0x1400556A0: "__vectorcall ??_R1A@?0A@EA@IMpCommunicationLibrary@MpCommunication" ??_R1A@?0A@EA@IMpCommunicationLibrary@MpCommunication@@8
0x140047E40: "Software\Microsoft\AMSI" ??_C@_1DA@DNLKPNPC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAA?$AAM?$AAS?$AAI?$AA?$AA@
0x1400450E8: "*.xml" ??_C@_1M@JNJHOHHA@?$AA?$CK?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x14004BC60: " State of '%s' service: " ??_C@_1DC@PIEMBLOB@?$AA?6?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AAo?$AAf?$AA?5?$AA?8?$AA?$CF?$AAs?$AA?8?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?3?$AA?6?$AA?$AA@
0x14004AB60: "ERROR: WriteWscCloudProviderQuer" ??_C@_1HC@IBGAJJJM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x14001A350: "public: void __cdecl std::vector<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,class std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > > >::assign(unsigned __int64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > const & __ptr64) __ptr64" ?assign@?$vector@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@V?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@@2@@std@@QEAAX_KAEBV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@2@@Z
0x14004DDC0: "Enabling boot start of kernel mo" ??_C@_1GC@PGGBKLCC@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAb?$AAo?$AAo?$AAt?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?5?$AAm?$AAo@
0x14003A0A0: "__cdecl _imp_CryptCATAdminCalcHashFromFileHandle" __imp_CryptCATAdminCalcHashFromFileHandle
0x14002967C: "private: long __cdecl CMpSpyNetQueueCallback::HandleCommonSpyNetReport(struct MpClient::IMpSpyNetContext * __ptr64,class SpynetReportHelper::SpynetSendMetricsType * __ptr64,bool * __ptr64) __ptr64" ?HandleCommonSpyNetReport@CMpSpyNetQueueCallback@@AEAAJPEAUIMpSpyNetContext@MpClient@@PEAVSpynetSendMetricsType@SpynetReportHelper@@PEA_N@Z
0x140039E30: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x140040740: "Warning: MpScan() resumed " ??_C@_1DG@NFFOEOAN@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAr?$AAe?$AAs?$AAu?$AAm?$AAe?$AAd?$AA?6?$AA?$AA@
0x14003A130: "__cdecl _imp__register_onexit_function" __imp__register_onexit_function
0x140054400: "__vectorcall ??_R1A@?0A@EA@WeakReferenceImpl@Details@WRL@Microsoft" ??_R1A@?0A@EA@WeakReferenceImpl@Details@WRL@Microsoft@@8
0x14002CBD4: "long __cdecl CommonUtil::UtilCreateTimerQueueTimer(void * __ptr64 * __ptr64,unsigned long,unsigned long,void (__cdecl*)(void * __ptr64,unsigned char),void * __ptr64,unsigned long)" ?UtilCreateTimerQueueTimer@CommonUtil@@YAJPEAPEAXKKP6AXPEAXE@Z1K@Z
0x14001D120: "public: virtual long __cdecl MpCommunication::IMpDownloadCallback::OnOther(enum tagMP_COMMU_HTTP_CALLBACK_TYPE,unsigned __int64,void const * __ptr64) __ptr64" ?OnOther@IMpDownloadCallback@MpCommunication@@UEAAJW4tagMP_COMMU_HTTP_CALLBACK_TYPE@@_KPEBX@Z
0x140043E18: "Getting MpCmdRun log (1/4)... " ??_C@_1DO@KPFBOLIO@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA1?$AA?1?$AA4?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IWinTaskScheduler>::~AutoRef<struct MpClient::IWinTaskScheduler>(void) __ptr64" ??1?$AutoRef@UIWinTaskScheduler@MpClient@@@CommonUtil@@QEAA@XZ
0x140011260: "long __cdecl RunCommandRestoreDefaults(struct CommonUtil::ICmdOptionsLookup const * __ptr64)" ?RunCommandRestoreDefaults@@YAJPEBUICmdOptionsLookup@CommonUtil@@@Z
0x14004A2B8: "%ls = [%ls] " ??_C@_1BK@PAJFOEPD@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?$DN?$AA?5?$AA?$FL?$AA?$CF?$AAl?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x140019CE0: "public: __cdecl std::list<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > >::~list<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > >(void) __ptr64" ??1?$list@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@2@@std@@QEAA@XZ
0x14003A048: RPCRT4_NULL_THUNK_DATA
0x140039CE8: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x14003E600: "ServiceHardening" ??_C@_1CC@CCPIDFGL@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAH?$AAa?$AAr?$AAd?$AAe?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x140044620: "ERROR: GetLogFile(CACHE_LOG_FILE" ??_C@_1GG@PJEIHPOK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAC?$AAA?$AAC?$AAH?$AAE?$AA_?$AAL?$AAO?$AAG?$AA_?$AAF?$AAI?$AAL?$AAE@
0x1400489B0: "ASSignatureApplied" ??_C@_1CG@BJFPNEGA@?$AAA?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAe?$AAd?$AA?$AA@
0x14003E5F0: "Restore" ??_C@_1BA@LLGMNHOD@?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x140043280: "%SystemRoot%\System32\Winevt\Log" ??_C@_1LE@PANOEOAA@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAe?$AAv?$AAt?$AA?2?$AAL?$AAo?$AAg@
0x14001D8B4: "public: virtual __cdecl COfflineScannerDownload::~COfflineScannerDownload(void) __ptr64" ??1COfflineScannerDownload@@UEAA@XZ
0x140002B34: "public: __cdecl CommonUtil::AutoRef<struct CommonUtil::ICmdOptionsLookup>::~AutoRef<struct CommonUtil::ICmdOptionsLookup>(void) __ptr64" ??1?$AutoRef@UICmdOptionsLookup@CommonUtil@@@CommonUtil@@QEAA@XZ
0x140040708: "Warning: MpScan() paused " ??_C@_1DE@CEBOCGJC@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAp?$AAa?$AAu?$AAs?$AAe?$AAd?$AA?6?$AA?$AA@
0x140033AE0: "__cdecl _report_gsfailure" __report_gsfailure
0x140043960: "Collecting events from WHC Event" ??_C@_1FC@BGPMHEAP@?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAH?$AAC?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt@
0x14004E378: "SystemInfo.txt" ??_C@_1BO@NNKEAKDO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI?$AAn?$AAf?$AAo?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140051438: WPP_d7b6f76d65363353e6aacdfc695ba984_Traceguids
0x1400172B0: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommunication::IMpCommunicationLibrary>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIMpCommunicationLibrary@MpCommunication@@@CommonUtil@@UEBAJXZ
0x1400370F0: "__cdecl _imp_load_VerQueryValueW" __imp_load_VerQueryValueW
0x140045998: "%s\%s%s" ??_C@_1BA@HEBNFGMC@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x140053EB0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x140054FA8: "__vectorcall ??_R1A@?0A@EA@CMpThreadPoolItemBase@CommonUtil" ??_R1A@?0A@EA@CMpThreadPoolItemBase@CommonUtil@@8
0x140036D0E: "__cdecl crt_atexit" _crt_atexit
0x140047EF0: "Software\Microsoft\Windows\Curre" ??_C@_1FM@OEMODDEO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140002CF8: "__cdecl _local_stdio_printf_options" __local_stdio_printf_options
0x14003DFC8: "ERROR: FormatMessageW (%X) " ??_C@_1DI@BMMJEFKB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAW?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6?$AA?$AA@
0x1400607A0: "__vectorcall ??_R0?AU?$ISimpleIterator@$$CBG@CommonUtil@" ??_R0?AU?$ISimpleIterator@$$CBG@CommonUtil@@@8
0x140060410: "__vectorcall ??_R0?AVCMpSpyNetQueueCallback@" ??_R0?AVCMpSpyNetQueueCallback@@@8
0x140045548: "%ls%ls" ??_C@_1O@OAIPCDPO@?$AA?$CF?$AAl?$AAs?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x1400205D0: "public: virtual void * __ptr64 __cdecl AuthenticationCompletedHandler<struct Windows::Foundation::IAsyncOperation<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64>,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$AuthenticationCompletedHandler@U?$IAsyncOperation@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@23@@@UEAAPEAXI@Z
0x140052CC0: "__vectorcall ??_R1A@?0A@EA@CUniqueNamedObject@MpCmdUtils" ??_R1A@?0A@EA@CUniqueNamedObject@MpCmdUtils@@8
0x14003A8C8: "bad array new length" ??_C@_0BF@KINCDENJ@bad?5array?5new?5length?$AA@
0x14004C2F8: "<UnknownRoot>" ??_C@_1BM@LJHHBFDG@?$AA?$DM?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AAR?$AAo?$AAo?$AAt?$AA?$DO?$AA?$AA@
0x1400303D0: "public: bool __cdecl CommonUtil::CStdRefHashMapBase<struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem,struct CommonUtil::CStdWideStringNoCaseCompareEqual>::CPolicy>::InsertValue(class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem * __ptr64) __ptr64" ?InsertValue@?$CStdRefHashMapBase@UCPolicy@?$CStdRefHashMapAdapter@PEBGVCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@UCStdWideStringNoCaseCompareEqual@3@@CommonUtil@@@CommonUtil@@QEAA_NPEAVCSimpleMapItem@CCmdOptionsLookupMap@2@@Z
0x140039CB0: "__cdecl _imp_TraceEvent" __imp_TraceEvent
0x140039F48: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140054568: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x140046808: "%.2x " ??_C@_1M@NFIHNCIJ@?$AA?$CF?$AA?4?$AA2?$AAx?$AA?5?$AA?$AA@
0x140033D40: "__cdecl onexit" _onexit
0x140048760: "ERROR: ConfigDumpFromOrigin() fa" ??_C@_1HC@GOOIPPJ@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAD?$AAu?$AAm?$AAp?$AAF?$AAr?$AAo?$AAm?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa@
0x140027480: "unsigned int __cdecl fci_read(__int64,void * __ptr64,unsigned int,int * __ptr64,void * __ptr64)" ?fci_read@@YAI_JPEAXIPEAH1@Z
0x14004D4F0: "ERROR: UtilGetDisplayTime failed" ??_C@_1EO@FEBIBKHN@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAG?$AAe?$AAt?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAT?$AAi?$AAm?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd@
0x140042C00: "ERROR: CreateDirectoryW(%ls) fai" ??_C@_1FE@DDOIDKON@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AAW?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi@
0x140061300: "__cdecl _dyn_tls_dtor_callback" __dyn_tls_dtor_callback
0x140039C68: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x1400391B0: "const MpCmdUtils::CUniqueNamedObject::`vftable'" ??_7CUniqueNamedObject@MpCmdUtils@@6B@
0x140012660: "[thunk]:public: virtual long __cdecl CMpSignaturesUpdateServiceCallback::Release`adjustor{8}' (void)const __ptr64" ?Release@CMpSignaturesUpdateServiceCallback@@W7EBAJXZ
0x1400429D0: "ProductGUID" ??_C@_1BI@FAEJBGDL@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x14004C400: " %-40s [REG_EXPAND_SZ]: %s " ??_C@_1DO@FHHIECKJ@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAE?$AAX?$AAP?$AAA?$AAN?$AAD?$AA_?$AAS?$AAZ?$AA?$FN?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140054AE8: "__vectorcall ??_R3IWeakReferenceSource" ??_R3IWeakReferenceSource@@8
0x140053BA0: "__vectorcall ??_R2?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows" ??_R2?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@8
0x140053E30: "__vectorcall ??_R2IWeakReferenceSource" ??_R2IWeakReferenceSource@@8
0x14004BD98: "START_PENDING " ??_C@_1BO@DOLAFGP@?$AAS?$AAT?$AAA?$AAR?$AAT?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x140054968: "__vectorcall ??_R3?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows" ??_R3?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@8
0x140041BC0: "Finish: RunCommandRemoveSignatur" ??_C@_1FC@CAKOBHHP@?$AAF?$AAi?$AAn?$AAi?$AAs?$AAh?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr@
0x140042690: "ERROR: CreateRestrictedToken(DIS" ??_C@_1HO@IMMBNEML@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AAT?$AAo?$AAk?$AAe?$AAn?$AA?$CI?$AAD?$AAI?$AAS@
0x14003F540: "ERROR: Could not enumerate threa" ??_C@_1GI@OGMECHNK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAe?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAe?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa@
0x14004BE98: "NOT_PAUSABLE" ??_C@_1BK@JPKLALAC@?$AAN?$AAO?$AAT?$AA_?$AAP?$AAA?$AAU?$AAS?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14002064C: "void __cdecl UnloadWinRTDlls(void)" ?UnloadWinRTDlls@@YAXXZ
0x140036BE1: "__cdecl _tailMerge_userenv_dll" __tailMerge_userenv_dll
0x140049AB8: "(Unknown)" ??_C@_1BE@HFCBJGEA@?$AA?$CI?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$CJ?$AA?$AA@
0x14005E050: Microsoft_Antimalware_Service_Context
0x14002D2C0: "public: virtual long __cdecl CommonUtil::CHResultExceptionImpl::GetErrorCode(void)const __ptr64" ?GetErrorCode@CHResultExceptionImpl@CommonUtil@@UEBAJXZ
0x140022A70: ??_G?$CThreadPoolItemFunctorAdapter@V<lambda_cfe293cf1e8afc76cde2af2a76263f0b>@@@CommonUtil@@UEAAPEAXI@Z
0x140060EC0: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x140045DB0: "Detection State" ??_C@_0BA@IDMOCGKB@Detection?5State?$AA@
0x140008310: "public: virtual void * __ptr64 __cdecl CUpdateNotifications::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUpdateNotifications@@UEAAPEAXI@Z
0x1400421E0: "Run as Network Service " ??_C@_1DA@HJBGDOAP@?$AAR?$AAu?$AAn?$AA?5?$AAa?$AAs?$AA?5?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpCommunication::IMpSpyNetConnection>::~AutoRef<struct MpCommunication::IMpSpyNetConnection>(void) __ptr64" ??1?$AutoRef@UIMpSpyNetConnection@MpCommunication@@@CommonUtil@@QEAA@XZ
0x14004E960: "ERROR: UtilEnumFiles(flat) faile" ??_C@_1HE@GOOKGAMH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAU?$AAt?$AAi?$AAl?$AAE?$AAn?$AAu?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAf?$AAl?$AAa?$AAt?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe@
0x14003700C: "__cdecl Init_thread_wait" _Init_thread_wait
0x140039190: "const CUpdateNotifications::`vftable'" ??_7CUpdateNotifications@@6B@
0x14003A088: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x1400544A0: "__vectorcall ??_R19?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft" ??_R19?0A@EN@?$RuntimeClassFlags@$03@WRL@Microsoft@@8
0x140051538: "__cdecl _real@5f800000" __real@5f800000
0x140045D78: "Overall product status" ??_C@_0BH@IPNILNKO@Overall?5product?5status?$AA@
0x14004A018: "\MsMpLics.dll" ??_C@_1BM@LMEBGKFE@?$AA?2?$AAM?$AAs?$AAM?$AAp?$AAL?$AAi?$AAc?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14004F3B0: "%ls&clcid=%04X" ??_C@_1BO@BCGJGKDM@?$AA?$CF?$AAl?$AAs?$AA?$CG?$AAc?$AAl?$AAc?$AAi?$AAd?$AA?$DN?$AA?$CF?$AA0?$AA4?$AAX?$AA?$AA@
0x140042BB0: "ERROR: NewSprintfW() failed (%X)" ??_C@_1EE@JIMMKBFA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAN?$AAe?$AAw?$AAS?$AAp?$AAr?$AAi?$AAn?$AAt?$AAf?$AAW?$AA?$CI?$AA?$CJ?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ@
0x140049F30: "ERROR: IWscAVStatus::Unregister(" ??_C@_1FK@IJBDBEGM@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAI?$AAW?$AAs?$AAc?$AAA?$AAV?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?3?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$CI@
0x14003A338: "__cdecl _imp_MpManagerEnable" __imp_MpManagerEnable
0x14005B660: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x14002C24C: "long __cdecl CommonUtil::UtilCreateEvent(void * __ptr64 * __ptr64,int,int,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES const * __ptr64)" ?UtilCreateEvent@CommonUtil@@YAJPEAPEAXHHPEBGPEBU_SECURITY_ATTRIBUTES@@@Z
0x140050D50: "StopAndDisableServiceImpl" ??_C@_0BK@CGBLMACL@StopAndDisableServiceImpl?$AA@
0x14002F81C: "public: bool __cdecl CommonUtil::ICmdOptionsLookup::LookupFlag(unsigned short const * __ptr64)const __ptr64" ?LookupFlag@ICmdOptionsLookup@CommonUtil@@QEBA_NPEBG@Z
0x14003E1F0: "A process other than WinDefend a" ??_C@_1OE@EFMBHKDH@?$AAA?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAt?$AAh?$AAe?$AAr?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?5?$AAa@
0x14005F180: "__vectorcall ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@" ??_R0?AV?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@@8
0x14002D858: "long __cdecl CommonUtil::UtilDuplicateSid(void * __ptr64 * __ptr64,void * __ptr64)" ?UtilDuplicateSid@CommonUtil@@YAJPEAPEAXPEAX@Z
0x140010B14: "void __cdecl RunCommandTrace(struct CommonUtil::ICmdOptionsLookup const * __ptr64,struct MpClient::IMpWppTracing * __ptr64 * __ptr64)" ?RunCommandTrace@@YAXPEBUICmdOptionsLookup@CommonUtil@@PEAPEAUIMpWppTracing@MpClient@@@Z
0x1400532D8: "__vectorcall ??_R1A@?0A@EA@CMseWatCheck" ??_R1A@?0A@EA@CMseWatCheck@@8
0x140047540: "Software\Classes\Directory\Shell" ??_C@_1HG@MCPGFNBP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?2?$AAS?$AAh?$AAe?$AAl?$AAl@
0x140032B18: MpEncodeVoidPointer
0x140040E40: "ScanOnlyIfIdle" ??_C@_1BO@CIAGNBPI@?$AAS?$AAc?$AAa?$AAn?$AAO?$AAn?$AAl?$AAy?$AAI?$AAf?$AAI?$AAd?$AAl?$AAe?$AA?$AA@
0x14003FA50: "DailyScan" ??_C@_1BE@GMEBLBGI@?$AAD?$AAa?$AAi?$AAl?$AAy?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x140039C40: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x140042878: "ProductAppDataPath" ??_C@_1CG@EILMMBOL@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14003E5A0: "UnregisterWSC" ??_C@_1BM@JCMHEFCH@?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAW?$AAS?$AAC?$AA?$AA@
0x140032A1C: MpInvokeAutoStartupInitialization
0x140040FF8: "Signature update started . . . " ??_C@_0CA@LEJHJANN@Signature?5update?5started?5?4?5?4?5?4?6?$AA@
0x14004D4A0: "ERROR: StringFromGUID2 failed (%" ??_C@_1EI@CIGGEBNL@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAr?$AAo?$AAm?$AAG?$AAU?$AAI?$AAD?$AA2?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF@
0x140040D70: "DisableRoutinelyTakingAction" ??_C@_1DK@JFOMAMEC@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAo?$AAu?$AAt?$AAi?$AAn?$AAe?$AAl?$AAy?$AAT?$AAa?$AAk?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140048908: "[%s] " ??_C@_1M@JNMFGCDI@?$AA?$FL?$AA?$CF?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x140042FC8: "------------------ " ??_C@_1CI@CNLHGOK@?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?9?$AA?6?$AA?$AA@
0x14004B210: "ERROR: WriteWscDataProtectionQue" ??_C@_1IG@KIECGGFC@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAD?$AAa?$AAt?$AAa?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAQ?$AAu?$AAe@
0x14004E900: "ERROR: Failed to get product ins" ??_C@_1GA@DIPIOPMD@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAg?$AAe?$AAt?$AA?5?$AAp?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AA?5?$AAi?$AAn?$AAs@
0x1400544C8: "__vectorcall ??_R18?0A@EN@RuntimeClassBase@Details@WRL@Microsoft" ??_R18?0A@EN@RuntimeClassBase@Details@WRL@Microsoft@@8
0x140060FC0: "private: static char * __ptr64 (__cdecl* __ptr64 UnDecorator::m_pGetParameter)(long)" ?m_pGetParameter@UnDecorator@@0P6APEADJ@ZEA
0x1400316F0: "long __cdecl CommonUtil::HrQueryServiceStatus(struct _SERVICE_STATUS * __ptr64,struct SC_HANDLE__ * __ptr64)" ?HrQueryServiceStatus@CommonUtil@@YAJPEAU_SERVICE_STATUS@@PEAUSC_HANDLE__@@@Z
0x140014B70: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@XZ
0x1400513E0: "Command Line - Option already sp" ??_C@_1FI@GIJCDKED@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAL?$AAi?$AAn?$AAe?$AA?5?$AA?9?$AA?5?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAa?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AA?5?$AAs?$AAp@
0x140041790: "path" ??_C@_19JIFMCCAP@?$AAp?$AAa?$AAt?$AAh?$AA?$AA@
0x140054EB8: "__vectorcall ??_R1A@?0A@EA@CMpSampleHeaderQueueCallback" ??_R1A@?0A@EA@CMpSampleHeaderQueueCallback@@8
0x14005E538: "__vectorcall ??_R0?AVCMseWatCheck@" ??_R0?AVCMseWatCheck@@@8
0x140055D48: "__vectorcall ??_R2CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil" ??_R2CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@8
0x1400543B0: "__vectorcall ??_R1A@?0A@EC@IUnknown" ??_R1A@?0A@EC@IUnknown@@8
0x140055D08: "__vectorcall ??_R3CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil" ??_R3CSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@8
0x14003FBC0: "RunCommandScan is using default " ??_C@_1GA@JBPEEAOA@?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAS?$AAc?$AAa?$AAn?$AA?5?$AAi?$AAs?$AA?5?$AAu?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?5@
0x140019DCC: "protected: void __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Init(unsigned __int64) __ptr64" ?_Init@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAAX_K@Z
0x140054748: "__vectorcall ??_R1A@?0A@EA@IUnknown" ??_R1A@?0A@EA@IUnknown@@8
0x140003FC8: "public: __cdecl CScanUserContext::~CScanUserContext(void) __ptr64" ??1CScanUserContext@@QEAA@XZ
0x140055870: "__vectorcall ??_R1A@?0A@EA@CMpSpyNetQueueCallback" ??_R1A@?0A@EA@CMpSpyNetQueueCallback@@8
0x140050A88: WPP_9b03b3bf8efe34567454ce34587e09e4_Traceguids
0x140025F04: MpDumpLog
0x140053298: "const CQuaMapGuardEntry::`RTTI Complete Object Locator'" ??_R4CQuaMapGuardEntry@@6B@
0x140050D70: "HrOpenSCManager" ??_C@_0BA@LGFEFALB@HrOpenSCManager?$AA@
0x140047CC0: "Software\Classes\CLSID\{94F35585" ??_C@_1HM@NCPDPEL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA4?$AAF?$AA3?$AA5?$AA5?$AA8?$AA5@
0x1400230F0: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x140045EF8: "AV signature disabled" ??_C@_1CM@GLIBBAGD@?$AAA?$AAV?$AA?5?$AAs?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140044070: "Getting MpCmdRun log (3/4)... " ??_C@_1DO@KKIFIAAN@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAM?$AAp?$AAC?$AAm?$AAd?$AAR?$AAu?$AAn?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AA3?$AA?1?$AA4?$AA?$CJ?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140054B98: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<3>,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::`RTTI Complete Object Locator'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<3>,1,struct IWeakReferenceSource>'}" ??_R4?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@12@@
0x140048C00: "SOFTWARE\Microsoft\Microsoft Ant" ??_C@_1FC@JKECBFOJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAn?$AAt@
0x140051220: "Command file %s not found! " ??_C@_1DI@FHGHKHM@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AA?$CF?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?$CB?$AA?6?$AA?$AA@
0x14001E9C0: "public: virtual void * __ptr64 __cdecl OnlineIdTicketIterator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GOnlineIdTicketIterator@@UEAAPEAXI@Z
0x14005FF90: "__vectorcall ??_R0?AVCMpSampleHeaderQueueCallback@" ??_R0?AVCMpSampleHeaderQueueCallback@@@8
0x14005E330: "__vectorcall ??_R0?AUIMpSignaturesUpdateCallback@MpCommunication@" ??_R0?AUIMpSignaturesUpdateCallback@MpCommunication@@@8
0x1400489D8: "AVSignatureApplied" ??_C@_1CG@LEHPFIGC@?$AAA?$AAV?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAe?$AAd?$AA?$AA@
0x14001A70C: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Insert_nohint<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,struct std::_Not_a_node_tag>(bool,struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&,struct std::_Not_a_node_tag) __ptr64" ??$_Insert_nohint@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@U_Not_a_node_tag@2@@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@std@@_N@1@_N$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@U_Not_a_node_tag@1@@Z
0x140002B34: "public: __cdecl CommonUtil::AutoRef<class CMpIdleNotifierCallback>::~AutoRef<class CMpIdleNotifierCallback>(void) __ptr64" ??1?$AutoRef@VCMpIdleNotifierCallback@@@CommonUtil@@QEAA@XZ
0x14001AE98: "protected: struct std::pair<class std::_List_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >,bool> __cdecl std::_Hash<class std::_Umap_traits<unsigned short const * __ptr64,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry>,class std::_Uhash_compare<unsigned short const * __ptr64,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy>,struct CommonUtil::CStdHashMapCompare<unsigned short const * __ptr64,struct CommonUtil::CStdRefHashMapAdapter<unsigned short const * __ptr64,class CQuaMapGuardEntry,struct CommonUtil::CStdWideStringCompareEqual>::CPolicy> >,class std::allocator<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > >,0> >::_Insert<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > & __ptr64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > > >(struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > & __ptr64,class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CQuaMapGuardEntry> > > > >) __ptr64" ??$_Insert@AEAU?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@2@@?$_Hash@V?$_Umap_traits@PEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@V?$_Uhash_compare@PEBGU?$CStdHashMapCompare@PEBGUCPolicy@?$CStdRefHashMapAdapter@PEBGVCQuaMapGuardEntry@@UCStdWideStringCompareEqual@CommonUtil@@@CommonUtil@@@CommonUtil@@U12@@std@@V?$allocator@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_List_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@std@@_N@1@AEAU?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@1@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCQuaMapGuardEntry@@@CommonUtil@@@std@@@std@@@std@@@1@@Z
0x140054450: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@8
0x140051070: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140050AD0: WPP_3a92f12279ac3d98f89b884ec46c1bd8_Traceguids
0x14003A038: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x140040780: "Warning: MpScan() was canceled! " ??_C@_1EC@PJICCGG@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$CI?$AA?$CJ?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAc?$AAa?$AAn?$AAc?$AAe?$AAl?$AAe?$AAd?$AA?$CB?$AA?6@
0x1400092A0: "void __cdecl MpCmdUtils::AbortIfNonAdmin(void)" ?AbortIfNonAdmin@MpCmdUtils@@YAXXZ
0x140020B5C: "public: virtual __cdecl CMpAzSubmitServiceCallback::~CMpAzSubmitServiceCallback(void) __ptr64" ??1CMpAzSubmitServiceCallback@@UEAA@XZ
0x140029484: "private: void __cdecl CMpSpyNetQueueCallback::OnHandleReport(struct MpClient::IMpSpyNetContext * __ptr64) __ptr64" ?OnHandleReport@CMpSpyNetQueueCallback@@AEAAXPEAUIMpSpyNetContext@MpClient@@@Z
0x14004AAE0: "ERROR: WriteWscCloudProviderQuer" ??_C@_1HI@ECANIOHF@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAW?$AAs?$AAc?$AAC?$AAl?$AAo?$AAu?$AAd?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAQ?$AAu?$AAe?$AAr@
0x14004B968: "MpFilter" ??_C@_1BC@HIOKFLJE@?$AAM?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x140036C96: "__cdecl get_initial_wide_environment" _get_initial_wide_environment
0x140048CB0: "Managed Defender keys not found." ??_C@_1IO@CAODEFMD@?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAk?$AAe?$AAy?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?4@
0x1400433B0: "%SystemRoot%\System32\Winevt\Log" ??_C@_1LA@PLFJCFIA@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAe?$AAv?$AAt?$AA?2?$AAL?$AAo?$AAg@
0x140042F38: "SecurityHealthRegistry.txt" ??_C@_1DG@BNANKEOB@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x140022AD0: "[thunk]:public: virtual void * __ptr64 __cdecl CMpAzSubmitServiceCallback::`vector deleting destructor'`adjustor{8}' (unsigned int) __ptr64" ??_ECMpAzSubmitServiceCallback@@W7EAAPEAXI@Z
0x140022FE8: "long __cdecl GetEventSourceName(enum MpEvents::_eLogFacility,enum MpEvents::_eLogSource,unsigned short * __ptr64 * __ptr64)" ?GetEventSourceName@@YAJW4_eLogFacility@MpEvents@@W4_eLogSource@2@PEAPEAG@Z
0x1400530A8: "__vectorcall ??_R2IRefObject@CommonUtil" ??_R2IRefObject@CommonUtil@@8
0x1400530B8: "__vectorcall ??_R3IRefObject@CommonUtil" ??_R3IRefObject@CommonUtil@@8
0x14003F190: "ddd MMM dd yyyy" ??_C@_1CA@BLAACIIF@?$AAd?$AAd?$AAd?$AA?5?$AAM?$AAM?$AAM?$AA?5?$AAd?$AAd?$AA?5?$AAy?$AAy?$AAy?$AAy?$AA?$AA@
0x14003E548: "RemoveDefinitions" ??_C@_1CE@MHBPDPNI@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x140045CB0: "failed to print the ELAM status" ??_C@_1EA@JCMFOFJE@?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAE?$AAL?$AAA?$AAM?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140049BA0: "ERROR: Creating Signatures Servi" ??_C@_1GM@FDGOCHEK@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi@
0x140053F50: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClass@U?$RuntimeClassFlags@$02@WRL@Microsoft@@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@WRL@Microsoft@@8
0x14003A010: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x14004DFD0: "ERROR: StopAndDisableService(%s)" ??_C@_1GI@CHGEADA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAS?$AAt?$AAo?$AAp?$AAA?$AAn?$AAd?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ@
0x1400397E0: "const MpCommunication::CMpCommunicationLibrary::`vftable'" ??_7CMpCommunicationLibrary@MpCommunication@@6B@
0x14003E000: "Unable to display the usage info" ??_C@_1GK@FHFFEGDN@?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAd?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAu?$AAs?$AAa?$AAg?$AAe?$AA?5?$AAi?$AAn?$AAf?$AAo@
0x140019D88: "public: void __cdecl std::allocator<class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > >::deallocate(class std::_List_unchecked_iterator<class std::_List_val<struct std::_List_simple_types<struct std::pair<unsigned short const * __ptr64 const,class CommonUtil::AutoRefWrapper<class CommonUtil::CCmdOptionsLookupMap::CSimpleMapItem> > > > > * __ptr64 const,unsigned __int64) __ptr64" ?deallocate@?$allocator@V?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@std@@@std@@QEAAXQEAV?$_List_unchecked_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@QEBGV?$AutoRefWrapper@VCSimpleMapItem@CCmdOptionsLookupMap@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@2@_K@Z
0x14005B110: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x140020130: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400065C8: "public: __cdecl CommonUtil::AutoRef<class MpCmdUtils::CUniqueNamedObject>::~AutoRef<class MpCmdUtils::CUniqueNamedObject>(void) __ptr64" ??1?$AutoRef@VCUniqueNamedObject@MpCmdUtils@@@CommonUtil@@QEAA@XZ
0x14003A168: "__cdecl _imp__c_exit" __imp__c_exit
0x140054068: "__vectorcall ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$ImplementsHelper@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00UIWeakReferenceSource@@@Details@WRL@Microsoft@@8
0x140020390: "public: virtual void * __ptr64 __cdecl OnlineIdTicketVector::`scalar deleting destructor'(unsigned int) __ptr64" ??_GOnlineIdTicketVector@@UEAAPEAXI@Z
0x14003BA60: " Additional Information: Suppor" ??_C@_1BFEA@FNDINPAC@?$AA?6?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AA?6?$AA?6?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr@
0x14003A348: "__cdecl _imp_MpQuarantineRequest" __imp_MpQuarantineRequest
0x140017DF0: "private: long __cdecl CrimsonEventLog::FormatTime(unsigned __int64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FormatTime@CrimsonEventLog@@AEAAJ_KPEAPEAG@Z
0x14004EEC0: "ERROR: VerifyFileTrust failed. h" ??_C@_1FE@FIAEHGNB@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAF?$AAi?$AAl?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?5?$AAh@
0x1400319F8: WPP_SF__guid_d
0x140053FA0: "__vectorcall ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft" ??_R1A@?0A@EA@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@8
0x14003A460: "__cdecl _imp_MpClientUtilExportFunctions" __imp_MpClientUtilExportFunctions
0x14003A330: "__cdecl _imp_MpUtilsExportFunctions" __imp_MpUtilsExportFunctions
0x140050260: "Start: SampleHeader Service " ??_C@_1DK@NIOBCOOE@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?6?$AA?$AA@
0x140055A10: "const CommonUtil::CHResultExceptionImpl::`RTTI Complete Object Locator'" ??_R4CHResultExceptionImpl@CommonUtil@@6B@
0x14001FCE0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<class Windows::Security::Authentication::OnlineId::UserIdentity * __ptr64> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAVUserIdentity@OnlineId@Authentication@Security@Windows@@@Foundation@Windows@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140042950: "unknown type" ??_C@_1BK@BFNAJFNN@?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x140042190: "unsupported notification(%d) " ??_C@_1DM@DNBBEPNO@?$AAu?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAn?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?6?$AA?$AA@
0x14004DF20: "Starting user mode services ... " ??_C@_1EC@CHBEFFAK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAm?$AAo?$AAd?$AAe?$AA?5?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?5?$AA?4?$AA?4?$AA?4?$AA?6@
0x140002BD0: "public: __cdecl CUniqueMpPtr<unsigned char,void>::~CUniqueMpPtr<unsigned char,void>(void) __ptr64" ??1?$CUniqueMpPtr@EX@@QEAA@XZ
0x140003DC0: WPP_SF_SI
0x14001E4E0: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::Details::WeakReferenceImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_EWeakReferenceImpl@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140055B38: "__vectorcall ??_R3CUtilRegEnumSubKeys@CommonUtil" ??_R3CUtilRegEnumSubKeys@CommonUtil@@8
0x140055B50: "__vectorcall ??_R2CUtilRegEnumSubKeys@CommonUtil" ??_R2CUtilRegEnumSubKeys@CommonUtil@@8
0x140014830: "public: static void __cdecl std::_String_val<struct std::_Simple_types<unsigned short> >::_Xran(void)" ?_Xran@?$_String_val@U?$_Simple_types@G@std@@@std@@SAXXZ
0x14005FA70: "__vectorcall ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@" ??_R0?AV?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIWeakReference@@@WRL@Microsoft@@@8
0x14002C1D8: WPP_SF_sd
0x14001C4D8: WPP_SF_sD
0x140002FD4: WPP_SF_SD
0x140002FD4: WPP_SF_Sd
0x140053E78: "__vectorcall ??_R2IUnknown" ??_R2IUnknown@@8
0x140054B30: "__vectorcall ??_R3IUnknown" ??_R3IUnknown@@8
0x14003A0F0: "__cdecl _imp_free" __imp_free
0x14003A350: "__cdecl _imp_MpConfigGetValueAlloc" __imp_MpConfigGetValueAlloc
0x140024C2C: "long __cdecl MpConfigUtils::GetEngineFilesVersion(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetEngineFilesVersion@MpConfigUtils@@YAJPEAPEAG00@Z
0x140020220: "public: virtual long __cdecl Windows::Foundation::Collections::IIterator_impl<struct Windows::Foundation::Internal::AggregateType<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64,struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest * __ptr64>,1>::GetMany(unsigned int,struct Windows::Security::Authentication::OnlineId::IOnlineIdServiceTicketRequest * __ptr64 * __ptr64,unsigned int * __ptr64) __ptr64" ?GetMany@?$IIterator_impl@U?$AggregateType@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@PEAUIOnlineIdServiceTicketRequest@2345@@Internal@Foundation@Windows@@$00@Collections@Foundation@Windows@@UEAAJIPEAPEAUIOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@4@PEAI@Z
0x14003F380: "ScheduleJob" ??_C@_1BI@NOCKCEJE@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAJ?$AAo?$AAb?$AA?$AA@
0x140039F10: "__cdecl _imp_DeleteTimerQueueTimer" __imp_DeleteTimerQueueTimer
0x140042C90: "..\..\Microsoft Security Client\" ??_C@_1FA@OMKEIFNN@?$AA?4?$AA?4?$AA?2?$AA?4?$AA?4?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?2@
0x140036E00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14004F1C0: WPP_4f3c0bc49e9d3e25aeff11d9880e2093_Traceguids
0x140039630: "const OnlineIdTicketIterator::`vftable'{for `Windows::Foundation::Collections::IIterator<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_7OnlineIdTicketIterator@@6B?$IIterator@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x140050110: "ProductRootRegKey" ??_C@_1CE@KBCAPCDM@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAR?$AAo?$AAo?$AAt?$AAR?$AAe?$AAg?$AAK?$AAe?$AAy?$AA?$AA@
0x140003ED8: WPP_SF_sq
0x14003363C: "long __cdecl winHttp::ResetDssCounter(void)" ?ResetDssCounter@winHttp@@YAJXZ
0x140001204: WPP_SF_SS
0x1400328E8: MpInvokeStartupInitialization
0x1400550A0: "const CMpSampleHeaderQueueCallback::`RTTI Complete Object Locator'" ??_R4CMpSampleHeaderQueueCallback@@6B@
0x140020610: "[thunk]:public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<3>,1,1,0,struct Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64> >::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$02@WRL@Microsoft@@$00$00$0A@U?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@Details@WRL@Microsoft@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x140035C44: "__cdecl _BuildCatchObject" __BuildCatchObject
0x14000DAD8: "public: void __cdecl CommonUtil::CStdPtrContainerSeq<class CommonUtil::CStdList<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CAutoMpFile> >::clear(void) __ptr64" ?clear@?$CStdPtrContainerSeq@V?$CStdList@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@UCAutoMpFile@@@2@@CommonUtil@@QEAAXXZ
0x14005FA30: "__vectorcall ??_R0?AVStrongReference@Details@WRL@Microsoft@" ??_R0?AVStrongReference@Details@WRL@Microsoft@@@8
0x140055650: "__vectorcall ??_R1A@?0A@EA@CMpCommunicationLibrary@MpCommunication" ??_R1A@?0A@EA@CMpCommunicationLibrary@MpCommunication@@8
0x140022C94: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x140060FC8: "private: static unsigned long UnDecorator::m_CHPENameOffset" ?m_CHPENameOffset@UnDecorator@@0KA
0x14004C440: " %-40s [REG_MULTI_SZ] : " ??_C@_1DI@LLDGGKBO@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA4?$AA0?$AAs?$AA?5?$AA?$FL?$AAR?$AAE?$AAG?$AA_?$AAM?$AAU?$AAL?$AAT?$AAI?$AA_?$AAS?$AAZ?$AA?$FN?$AA?5?$AA?3?$AA?5?$AA?$AA@
0x140039BE0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x14002A810: "private: void __cdecl CMpSpyNetQueueCallback::OnHandleExit(void) __ptr64" ?OnHandleExit@CMpSpyNetQueueCallback@@AEAAXXZ
0x140032A64: "long __cdecl CommonUtil::OnInitializeAtStartupNoThrow(long (__cdecl*)(void * __ptr64),void * __ptr64)" ?OnInitializeAtStartupNoThrow@CommonUtil@@YAJP6AJPEAX@Z0@Z
0x14002613C: MpSetRoles
0x140039DF8: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x14002DAB4: "long __cdecl CommonUtil::UtilLogonUser(void * __ptr64 * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long)" ?UtilLogonUser@CommonUtil@@YAJPEAPEAXPEAG11KK@Z
0x140009140: "public: virtual void * __ptr64 __cdecl MpCmdUtils::CUniqueNamedObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUniqueNamedObject@MpCmdUtils@@UEAAPEAXI@Z
0x140033EE0: "__cdecl _scrt_initialize_winrt" __scrt_initialize_winrt
0x140036670: "__cdecl _NLG_Return2" __NLG_Return2
0x140060440: "__vectorcall ??_R0?AUIMpSpyNetQueueCallback@MpClient@" ??_R0?AUIMpSpyNetQueueCallback@MpClient@@@8
0x140044DE0: "Getting WSC information... " ??_C@_1DI@BMNCGFJM@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAW?$AAS?$AAC?$AA?5?$AAi?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?4?$AA?4?$AA?6?$AA?$AA@
0x140036C84: "__cdecl set_app_type" _set_app_type
0x14003A420: "__cdecl _imp_MpThreatEnumerate" __imp_MpThreatEnumerate
0x140060038: "__vectorcall ??_R0?AUIMpSampleHeaderQueueCallback@MpClient@" ??_R0?AUIMpSampleHeaderQueueCallback@MpClient@@@8
0x140050748: "MpCommunicationCreateInstance" ??_C@_0BO@BIGLPALD@MpCommunicationCreateInstance?$AA@
0x140044130: "ERROR: GetLogFile(MPCMDRUN_LOG_P" ??_C@_1HA@GOMNPGAA@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAL?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAM?$AAP?$AAC?$AAM?$AAD?$AAR?$AAU?$AAN?$AA_?$AAL?$AAO?$AAG?$AA_?$AAP@
0x140002B14: "public: __cdecl CommonUtil::AutoRef<struct MpClient::IMpWppTracingFactory>::~AutoRef<struct MpClient::IMpWppTracingFactory>(void) __ptr64" ??1?$AutoRef@UIMpWppTracingFactory@MpClient@@@CommonUtil@@QEAA@XZ
0x14003E900: "A process other than WinDefend a" ??_C@_1NG@OIADDGJL@?$AAA?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAt?$AAh?$AAe?$AAr?$AA?5?$AAt?$AAh?$AAa?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AA?5?$AAa@
0x140025700: "public: virtual void * __ptr64 __cdecl MpCommunication::CMpCommunicationLibrary::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpCommunicationLibrary@MpCommunication@@UEAAPEAXI@Z
0x140051188: WPP_c2da005c80cc3e9381473a954d635fca_Traceguids
0x140022A14: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoMpThreadPoolClose>::~CUniqueHandle<struct CommonUtil::CAutoMpThreadPoolClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpThreadPoolClose@CommonUtil@@@CommonUtil@@QEAA@XZ
0x1400460E0: "Behavior monitor enabled" ??_C@_1DC@CIIBODDM@?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AA?5?$AAm?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?5?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140039508: "const OnlineIdTicketVector::`vftable'{for `Windows::Foundation::Collections::IIterable<class Windows::Security::Authentication::OnlineId::OnlineIdServiceTicketRequest * __ptr64>'}" ??_7OnlineIdTicketVector@@6B?$IIterable@PEAVOnlineIdServiceTicketRequest@OnlineId@Authentication@Security@Windows@@@Collections@Foundation@Windows@@@
0x140040860: "MpCleanThreats() started " ??_C@_1DE@EPKGBLBG@?$AAM?$AAp?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?$CI?$AA?$CJ?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?6?$AA?$AA@
0x14004FEB0: "MpSampleSubmissionHighPriNumThre" ??_C@_1EI@CADLACFN@?$AAM?$AAp?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAS?$AAu?$AAb?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn?$AAH?$AAi?$AAg?$AAh?$AAP?$AAr?$AAi?$AAN?$AAu?$AAm?$AAT?$AAh?$AAr?$AAe@
0x14000DE40: "public: virtual void * __ptr64 __cdecl HModule::`vector deleting destructor'(unsigned int) __ptr64" ??_EHModule@@UEAAPEAXI@Z
0x1400083C8: WPP_SF_S
0x1400557E8: "__vectorcall ??_R2?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil" ??_R2?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@8
0x14004FDE8: "WindowsCreateStringReference" ??_C@_0BN@MADGBDPI@WindowsCreateStringReference?$AA@
0x140055760: "__vectorcall ??_R3?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil" ??_R3?$CRefObjectFor@UIMpSpyNetQueueCallback@MpClient@@@CommonUtil@@8
0x14004F590: "ERROR: MpUpdateStart failed (%X)" ??_C@_1EE@JMOENOGG@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAM?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ@
0x140001340: "public: __cdecl CAutoWPPTracing::~CAutoWPPTracing(void) __ptr64" ??1CAutoWPPTracing@@QEAA@XZ
0x14004CE50: "ERROR: EvtOpenPublisherMetadata(" ??_C@_1FO@MCDGAFNH@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAE?$AAv?$AAt?$AAO?$AAp?$AAe?$AAn?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?$CI@
0x14003721E: memset
0x14005B674: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14004B9F0: "Getting NIS driver registration " ??_C@_1GA@MHJODGLO@?$AAG?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAN?$AAI?$AAS?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5@
0x14004E340: "SetupLog(%ls) %ls " ??_C@_1CG@GBOOODNI@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAL?$AAo?$AAg?$AA?$CI?$AA?$CF?$AAl?$AAs?$AA?$CJ?$AA?5?$AA?$CF?$AAl?$AAs?$AA?6?$AA?$AA@
0x140061240: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUxlnnlmUoryUoryxngPfmrxigUlyquivUznwGEUhgwzucOlyq@Common" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUxlnnlmUoryUoryxngPfmrxigUlyquivUznwGEUhgwzucOlyq@Common
0x14001F9FC: "long __cdecl GetDeviceTicket(bool,unsigned short * __ptr64 * __ptr64)" ?GetDeviceTicket@@YAJ_NPEAPEAG@Z
0x140040390: "Scanning %ls found no threats. " ??_C@_1EA@LFDLJECF@?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAn?$AAo?$AA?5?$AAt?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?4?$AA?6?$AA?$AA@
0x140042738: WPP_d6ad8942528030beb86ea510904210fb_Traceguids
0x140049230: "LastScanType" ??_C@_1BK@FLIAKFFP@?$AAL?$AAa?$AAs?$AAt?$AAS?$AAc?$AAa?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x140065038: "__cdecl _imp_UnloadUserProfile" __imp_UnloadUserProfile
0x14003F748: "Resources" ??_C@_1BE@PBIOBJMM@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x14004CF70: "ERROR: awszProperty failed (%X) " ??_C@_1EC@NEGIACII@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?3?$AA?5?$AAa?$AAw?$AAs?$AAz?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AA?$CI?$AA?$CF?$AAX?$AA?$CJ?$AA?6@
0x14003E180: "Reinvoke" ??_C@_1BC@DFLJFHMH@?$AAR?$AAe?$AAi?$AAn?$AAv?$AAo?$AAk?$AAe?$AA?$AA@
0x14004D660: "INFO: MpQuarantineRequest succee" ??_C@_1HE@GBIDBIKJ@?$AAI?$AAN?$AAF?$AAO?$AA?3?$AA?5?$AAM?$AAp?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAe@
0x140061158: "unsigned __int64 `__local_stdio_scanf_options'::`2'::_OptionsStorage" ?_OptionsStorage@?1??__local_stdio_scanf_options@@9@4_KA
0x1400417A0: "Start: RunCommandAddSignatureFil" ??_C@_1FA@CDELACNK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?3?$AA?5?$AAR?$AAu?$AAn?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAA?$AAd?$AAd?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF?$AAi?$AAl@
0x14004DE98: "Early-Launch" ??_C@_1BK@GLHNCFAL@?$AAE?$AAa?$AAr?$AAl?$AAy?$AA?9?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
0x14004D780: "Please specify which quarantined" ??_C@_1HO@FKCOGMBC@?$AAP?$AAl?$AAe?$AAa?$AAs?$AAe?$AA?5?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAy?$AA?5?$AAw?$AAh?$AAi?$AAc?$AAh?$AA?5?$AAq?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAd@
0x140065048: USERENV_NULL_THUNK_DATA_DLA

[JEB Decompiler by PNF Software]