Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_windows-defender-management-v1_31bf3856ad364e35_10.0.17763.1_none_0b6b7c5b60730a9e\MpProvider.dll Base=0x180000000 SHA-256=93ADC1D13CF7DD384A5378C384C52C608541A611FB72488925BC99BD417D6324
PDB: MpProvider.pdb GUID={A11296FC-FA0F-16C5-0D36534F621790CD} Age=1

2066 located named symbols:
0x180022D38: "__vectorcall ??_R3CMpProviderEventLogger@SecurityClient@Microsoft" ??_R3CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x180022C78: "__vectorcall ??_R2CMpProviderEventLogger@SecurityClient@Microsoft" ??_R2CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x180021EC0: "__vectorcall ??_R1A@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R1A@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x18000BDF4: MpManagerOpen
0x18001DEE0: WINTRUST_NULL_THUNK_DATA
0x18001FE30: "LastFullScanAge" ??_C@_1CA@ONHLJKEC@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x18001F740: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x180003450: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefObject@CommonUtil@@MEAAPEAXI@Z
0x18000FBBC: "long __cdecl CommonUtil::HrFromStdException(class exception const & __ptr64)" ?HrFromStdException@CommonUtil@@YAJAEBVexception@@@Z
0x180012630: "protected: virtual int __cdecl MorroCommon::CWin32::PostMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?PostMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@I_K_J@Z
0x18001DA60: "__cdecl _imp_LockResource" __imp_LockResource
0x18001D8E0: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180008518: "private: class CommonUtil::AutoRef<struct IWbemClassObject> __cdecl CMpProviderClass::GetInstanceByPath(unsigned short * __ptr64 const) __ptr64" ?GetInstanceByPath@CMpProviderClass@@AEAA?AV?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAG@Z
0x18000C944: "public: __cdecl CommonUtil::CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>::~CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>(void) __ptr64" ??1?$CGenericAutoLock@UCMpCriticalSectionFunctor@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180022620: "__vectorcall ??_R1A@?0A@EA@CMpProviderModule" ??_R1A@?0A@EA@CMpProviderModule@@8
0x18001ED88: "illegal byte sequence" ??_C@_0BG@CDNPAGJK@illegal?5byte?5sequence?$AA@
0x18000AD4C: "public: class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@QEAAPEAVCFileUtils@1@XZ
0x180019408: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180012F60: "protected: virtual int __cdecl MorroCommon::CWin32::SetEventImpl(void * __ptr64) __ptr64" ?SetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001F148: "Enter to" ??_C@_08JKDBNODE@Enter?5to?$AA@
0x18001FC30: "LastFullScanDateTimeStart" ??_C@_1DE@JNGNPGBH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180018D58: "public: __cdecl std::out_of_range::out_of_range(char const * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@PEBD@Z
0x18001E870: "function not supported" ??_C@_0BH@KEFGLDAF@function?5not?5supported?$AA@
0x18001DBB0: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x180005290: "public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAKXZ
0x180019880: "__cdecl FindPESection" _FindPESection
0x180008CC8: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18001E9B8: "connection_aborted" ??_C@_0BD@OJMJDIGI@connection_aborted?$AA@
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateClassEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateClassEnumAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18000FCDC: "long __cdecl CommonUtil::NewVSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?NewVSprintfW@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x18000F960: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultException@CommonUtil@@MEAAPEAXI@Z
0x180021DF8: "__vectorcall ??_R1A@?0A@EA@?$CComObject@VCInfectionStateClass@@@ATL" ??_R1A@?0A@EA@?$CComObject@VCInfectionStateClass@@@ATL@@8
0x18001D920: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18001E070: "__cdecl _imp_CoCreateGuid" __imp_CoCreateGuid
0x180013140: ?SHGetSpecialFolderLocationImpl@CWin32@MorroCommon@@MEAAJPEAUHWND__@@HPEAPEFAU_ITEMIDLIST@@@Z
0x180015AE0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModulePathImpl(void) __ptr64" ?GetCurrentModulePathImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x1800132E0: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQueryUserTokenImpl(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?WTSQueryUserTokenImpl@CWin32@MorroCommon@@MEAAHKPEAPEAX@Z
0x1800207D8: WPP_da4900b5adbf31a20bb2b78f4b9ed990_Traceguids
0x18002A8A0: "private: static class MorroCommon::CPathUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@0PEAVCPathUtils@2@EA
0x18000D444: "public: __cdecl CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@QEAA@XZ
0x18001DFD0: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x180012810: "protected: virtual int __cdecl MorroCommon::CWin32::DuplicateTokenExImpl(void * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,enum _SECURITY_IMPERSONATION_LEVEL,enum _TOKEN_TYPE,void * __ptr64 * __ptr64) __ptr64" ?DuplicateTokenExImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAU_SECURITY_ATTRIBUTES@@W4_SECURITY_IMPERSONATION_LEVEL@@W4_TOKEN_TYPE@@PEAPEAX@Z
0x180026AB4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18001DF98: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x180008C10: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CMpProviderClass>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCMpProviderClass@@@ATL@@UEAAPEAXI@Z
0x18001F068: "too many files open in system" ??_C@_0BO@HACHBEKI@too?5many?5files?5open?5in?5system?$AA@
0x18001ED58: "host unreachable" ??_C@_0BB@DHFDFGDM@host?5unreachable?$AA@
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::OpenNamespace(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemServices * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?OpenNamespace@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemServices@@PEAPEAUIWbemCallResult@@@Z
0x18001FFD0: CLSID_WbemDefPath
0x1800138B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?DeleteFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180012300: "protected: virtual long __cdecl MorroCommon::CWin32::RegCloseKeyImpl(struct HKEY__ * __ptr64) __ptr64" ?RegCloseKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@@Z
0x180029790: "__vectorcall ??_R0?AU_ATL_MODULE70@ATL@" ??_R0?AU_ATL_MODULE70@ATL@@@8
0x180022DA0: "__vectorcall ??_R2CDetectionItem@SecurityClient@Microsoft" ??_R2CDetectionItem@SecurityClient@Microsoft@@8
0x180022DE0: "__vectorcall ??_R3CDetectionItem@SecurityClient@Microsoft" ??_R3CDetectionItem@SecurityClient@Microsoft@@8
0x180023288: "__vectorcall ??_R2CPtrObjectProcessHeap@CommonUtil" ??_R2CPtrObjectProcessHeap@CommonUtil@@8
0x1800231D8: "__vectorcall ??_R3CPtrObjectProcessHeap@CommonUtil" ??_R3CPtrObjectProcessHeap@CommonUtil@@8
0x18001024C: "long __cdecl CommonUtil::UtilLoadSystemLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilLoadSystemLibrary@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBG@Z
0x180002338: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x180022458: "__vectorcall ??_R1A@?0A@EA@CRegObject@ATL" ??_R1A@?0A@EA@CRegObject@ATL@@8
0x1800133A0: "protected: virtual void __cdecl MorroCommon::CWin32::GetLocalTimeImpl(struct _SYSTEMTIME * __ptr64) __ptr64" ?GetLocalTimeImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEMTIME@@@Z
0x18001DC00: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x18001EC18: "already connected" ??_C@_0BC@DFIBIBIL@already?5connected?$AA@
0x1800292F0: "__vectorcall ??_R0?AVCDetectionItemSizeCalculator@" ??_R0?AVCDetectionItemSizeCalculator@@@8
0x18000D4E0: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x18001EF80: "operation would block" ??_C@_0BG@OEMDKMEE@operation?5would?5block?$AA@
0x180029E30: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18001DBB8: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180001D58: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::operator unsigned short const * __ptr64(void)const __ptr64" ??B?$CSimpleStringT@G$0A@@ATL@@QEBAPEBGXZ
0x18001E000: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x18001DF28: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18000CE1C: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogDetectionsMaxNumberExceeded(unsigned long) __ptr64" ?LogDetectionsMaxNumberExceeded@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXK@Z
0x18001C9F8: "const std::_System_error_category::`vftable'" ??_7_System_error_category@std@@6B@
0x18001F5C8: "PackedXml" ??_C@_1BE@NFEFJPBP@?$AAP?$AAa?$AAc?$AAk?$AAe?$AAd?$AAX?$AAm?$AAl?$AA?$AA@
0x180003770: "public: virtual long __cdecl CInfectionStateClass::ExecQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecQueryAsync@CInfectionStateClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001DB70: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180003CE0: "public: virtual long __cdecl CInfectionStateClass::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CInfectionStateClass@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x180021F60: "__vectorcall ??_R17?0A@EC@IUnknown" ??_R17?0A@EC@IUnknown@@8
0x1800230E0: "__vectorcall ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon" ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon@@8
0x18001D7C8: "__cdecl tls_used" _tls_used
0x18001F95C: "B" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x18001F160: "ForceRemove" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x1800131C0: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyEnvironmentBlockImpl(void * __ptr64) __ptr64" ?DestroyEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x1800051B0: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x180018E9C: "__cdecl CRT_INIT" _CRT_INIT
0x18001DF90: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x18001F088: "too many links" ??_C@_0P@HCOMKFCC@too?5many?5links?$AA@
0x1800206B0: "GetSystemTimePreciseAsFileTime" ??_C@_0BP@FPNJPEJC@GetSystemTimePreciseAsFileTime?$AA@
0x18001D960: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18001E888: "no lock available" ??_C@_0BC@NJECKMKE@no?5lock?5available?$AA@
0x18001E8F0: "operation canceled" ??_C@_0BD@MOLBPMEA@operation?5canceled?$AA@
0x1800079C0: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x180010B30: "class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl CommonUtil::StringPrintfW(unsigned short const * __ptr64,...)" ?StringPrintfW@CommonUtil@@YA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@1@PEBGZZ
0x180022B50: "__vectorcall ??_R1A@?0A@EA@CFileUtils@MorroCommon" ??_R1A@?0A@EA@CFileUtils@MorroCommon@@8
0x1800121A0: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?PathIsDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180019376: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteClass(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteClass@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x18000572C: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180008C88: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x180003770: "public: virtual long __cdecl CInfectionStateClass::ExecMethodAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecMethodAsync@CInfectionStateClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@@Z
0x180012930: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LoadResourceImpl(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64) __ptr64" ?LoadResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAUHINSTANCE__@@PEAUHRSRC__@@@Z
0x180004DD0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CInfectionStateClass> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCInfectionStateClass@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000BF5C: MpManagerStatusQuery
0x180010488: "long __cdecl CommonUtil::UtilRawGetLoadedProcAddress(__int64 (__cdecl* * __ptr64)(void),unsigned short const * __ptr64,char const * __ptr64,bool)" ?UtilRawGetLoadedProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBGPEBD_N@Z
0x180029898: "__vectorcall ??_R0?AVCMpProviderModule@" ??_R0?AVCMpProviderModule@@@8
0x1800227E8: "__vectorcall ??_R3?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R3?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x180001500: WppControlCallback
0x180022600: "__vectorcall ??_R2?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R2?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x180022DF8: "const Microsoft::SecurityClient::CDetectionItem::`RTTI Complete Object Locator'" ??_R4CDetectionItem@SecurityClient@Microsoft@@6B@
0x180019D80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001DD68: SHELL32_NULL_THUNK_DATA
0x18001F1D0: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x18001DAC8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800295F0: "__vectorcall ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@" ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@@8
0x18001FD08: "AntivirusSignatureVersion" ??_C@_1DE@KFOIHPKJ@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180026730: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x18000FB94: "public: __cdecl CommonUtil::CHResultException::CHResultException(class CommonUtil::CHResultException const & __ptr64) __ptr64" ??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z
0x180029120: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x1800125E0: "protected: virtual int __cdecl MorroCommon::CWin32::IsWow64ProcessImpl(void * __ptr64,int * __ptr64) __ptr64" ?IsWow64ProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAH@Z
0x1800024F0: "public: virtual bool __cdecl std::error_category::equivalent(int,class std::error_condition const & __ptr64)const __ptr64" ?equivalent@error_category@std@@UEBA_NHAEBVerror_condition@2@@Z
0x18000302C: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z
0x18002A8C0: ?instance@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV23@XZ@4V23@A
0x18001DCD0: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x180023684: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x180026A8C: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180022220: "const ATL::CProviderHelper::`RTTI Complete Object Locator'" ??_R4CProviderHelper@ATL@@6B@
0x180012FD0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentThreadIdImpl(void) __ptr64" ?GetCurrentThreadIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x1800221F8: "const ATL::CInstanceProviderHelper::`RTTI Complete Object Locator'" ??_R4CInstanceProviderHelper@ATL@@6B@
0x180029D40: "__vectorcall ??_R0?AUILockedCertCheck@MorroCommon@" ??_R0?AUILockedCertCheck@MorroCommon@@@8
0x180021C20: "__vectorcall ??_R2CDetectionItemSizeCalculator" ??_R2CDetectionItemSizeCalculator@@8
0x180011DE0: "public: virtual struct ATL::IAtlStringMgr * __ptr64 __cdecl ATL::CAtlStringMgr::Clone(void) __ptr64" ?Clone@CAtlStringMgr@ATL@@UEAAPEAUIAtlStringMgr@2@XZ
0x18001EA20: "bad_address" ??_C@_0M@IJGMGFGP@bad_address?$AA@
0x180022078: "__vectorcall ??_R3CDetectionItemSizeCalculator" ??_R3CDetectionItemSizeCalculator@@8
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::GetObjectW(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?GetObjectW@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemClassObject@@PEAPEAUIWbemCallResult@@@Z
0x18000D14C: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogInfectiosnStateGenericError(long) __ptr64" ?LogInfectiosnStateGenericError@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXJ@Z
0x18001DEC0: "__cdecl _imp_CryptCATAdminEnumCatalogFromHash" __imp_CryptCATAdminEnumCatalogFromHash
0x18001DD60: "__cdecl _imp_SHGetFolderPathW" __imp_SHGetFolderPathW
0x18000F8A4: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEAAX_K@Z
0x18000AA6C: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::~CSimpleStringT<unsigned short,0>(void) __ptr64" ??1?$CSimpleStringT@G$0A@@ATL@@QEAA@XZ
0x18001DAA8: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x180018D30: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x18001F5E0: "ComputerStatus" ??_C@_1BO@LHDIOIBF@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180029900: "__vectorcall ??_R0?AV?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@" ??_R0?AV?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@@8
0x18001F008: "result out of range" ??_C@_0BE@GOIPJJHG@result?5out?5of?5range?$AA@
0x180022050: "__vectorcall ??_R1A@?0A@EA@?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x180020328: "Microsoft Security Client" ??_C@_1DE@CIIAGCCJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x18001E9D0: "connection_refused" ??_C@_0BD@NGKCIFEP@connection_refused?$AA@
0x18002A450: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils> MorroCommon::CFileUtils::m_instance" ?m_instance@CFileUtils@MorroCommon@@0V?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@2@A
0x18001F928: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18001DCD8: "__cdecl _imp_SafeArrayLock" __imp_SafeArrayLock
0x1800205B0: "%s%08X-%04X-%04X-%02X%02X-%02X%0" ??_C@_1GK@NBFCFHP@?$AA?$CF?$AAs?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0@
0x18001CBE0: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x180013B90: "public: __cdecl MorroCommon::SFolderItem::~SFolderItem(void) __ptr64" ??1SFolderItem@MorroCommon@@QEAA@XZ
0x1800125B0: "protected: virtual int __cdecl MorroCommon::CWin32::VerQueryValueImpl(void const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned int * __ptr64) __ptr64" ?VerQueryValueImpl@CWin32@MorroCommon@@MEAAHPEBXPEBGPEAPEAXPEAI@Z
0x180005700: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >::~CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180016CAC: "long __cdecl MorroCommon::HrCStringFormatV(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?HrCStringFormatV@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGPEAD@Z
0x180026968: "__cdecl _pobjMap_CInfectionStateClass" __pobjMap_CInfectionStateClass
0x18001F950: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_Eerror_category@std@@UEAAPEAXI@Z
0x1800296D8: "__vectorcall ??_R0?AVCRegObject@ATL@" ??_R0?AVCRegObject@ATL@@@8
0x18000235C: "public: __cdecl MorroCommon::EHresultException::EHresultException(long) __ptr64" ??0EHresultException@MorroCommon@@QEAA@J@Z
0x18001EB28: "no_protocol_option" ??_C@_0BD@JHIHCGKP@no_protocol_option?$AA@
0x18001FD98: "RealTimeScanDirection" ??_C@_1CM@MAAOGODB@?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAS?$AAc?$AAa?$AAn?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001D820: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180001980: DllGetClassObject
0x1800129D0: "protected: virtual int __cdecl MorroCommon::CWin32::DeleteFileImpl(unsigned short const * __ptr64) __ptr64" ?DeleteFileImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x1800117DC: "void __cdecl CommonUtil::MpAtlEnsureThrow(long)" ?MpAtlEnsureThrow@CommonUtil@@YAXJ@Z
0x18001DFB8: "__cdecl _imp_memmove_s" __imp_memmove_s
0x1800124E0: "protected: virtual int __cdecl MorroCommon::CWin32::CloseHandleImpl(void * __ptr64) __ptr64" ?CloseHandleImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180002F70: "public: __cdecl CommonUtil::AutoRef<struct IWbemContext>::~AutoRef<struct IWbemContext>(void) __ptr64" ??1?$AutoRef@UIWbemContext@@@CommonUtil@@QEAA@XZ
0x18001D810: "__cdecl _imp_EnableTrace" __imp_EnableTrace
0x1800185A8: "public: static unsigned short const * __ptr64 __cdecl MpCommonEx::CCommonRegistryEx::GetSecurityClientRegKey(void)" ?GetSecurityClientRegKey@CCommonRegistryEx@MpCommonEx@@SAPEBGXZ
0x1800208B8: "GetFileVersionInfoSizeW" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x18001ECC0: "connection already in progress" ??_C@_0BP@KAIHPOGN@connection?5already?5in?5progress?$AA@
0x180003770: "public: virtual long __cdecl CMpProviderClass::DeleteInstanceAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteInstanceAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180018310: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x180004E00: ?GetObjectDescription@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18000179C: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x18001F770: "__cdecl GUID_361290c0_cb1b_49ae_9f3e_ba1cbe5dab35" _GUID_361290c0_cb1b_49ae_9f3e_ba1cbe5dab35
0x18001FCC0: "AntispywareSignatureUpdateDateTi" ??_C@_1EG@CMHOIPDJ@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi@
0x180011CF0: "public: virtual void __cdecl ATL::CAtlStringMgr::Free(struct ATL::CStringData * __ptr64) __ptr64" ?Free@CAtlStringMgr@ATL@@UEAAXPEAUCStringData@2@@Z
0x18001DE90: VERSION_NULL_THUNK_DATA
0x1800130D0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetUserDefaultUILanguageImpl(void) __ptr64" ?GetUserDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x18000AE10: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
0x180021D28: "__vectorcall ??_R2CProviderHelper@ATL" ??_R2CProviderHelper@ATL@@8
0x180022108: "__vectorcall ??_R3CProviderHelper@ATL" ??_R3CProviderHelper@ATL@@8
0x180013180: "protected: virtual void __cdecl MorroCommon::CWin32::SetLastErrorImpl(unsigned long) __ptr64" ?SetLastErrorImpl@CWin32@MorroCommon@@MEAAXK@Z
0x180011A18: HrGetLastFailure
0x180021D10: "__vectorcall ??_R2CInstanceProviderHelper@ATL" ??_R2CInstanceProviderHelper@ATL@@8
0x1800220F0: "__vectorcall ??_R3CInstanceProviderHelper@ATL" ??_R3CInstanceProviderHelper@ATL@@8
0x180022710: "__vectorcall ??_R17?0A@EA@_ATL_MODULE70@ATL" ??_R17?0A@EA@_ATL_MODULE70@ATL@@8
0x180026978: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18001FA50: "TypeLib" ??_C@_1BA@JIHHIEDE@?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?$AA@
0x180012330: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteValueImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteValueImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x180026878: "__cdecl CTA2PEAVEHresultException@MorroCommon@@" _CTA2PEAVEHresultException@MorroCommon@@
0x18001E790: "permission denied" ??_C@_0BC@CIJDGCDI@permission?5denied?$AA@
0x1800131B0: "protected: virtual void __cdecl MorroCommon::CWin32::WTSFreeMemoryImpl(void * __ptr64) __ptr64" ?WTSFreeMemoryImpl@CWin32@MorroCommon@@MEAAXPEAX@Z
0x18001E020: "__cdecl _imp_wcschr" __imp_wcschr
0x180026890: "__stdcall CT??_R0PEAVEHresultException@MorroCommon@@" _CT??_R0PEAVEHresultException@MorroCommon@@@88
0x180006828: "long __cdecl ATL::AtlHresultFromWin32(unsigned long)" ?AtlHresultFromWin32@ATL@@YAJK@Z
0x18001DAF0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180022E88: "__vectorcall ??_R3CHResultExceptionImpl@CommonUtil" ??_R3CHResultExceptionImpl@CommonUtil@@8
0x18000AD4C: "public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@2@XZ
0x18000AC88: "public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@2@XZ
0x180022EB8: "__vectorcall ??_R2CHResultExceptionImpl@CommonUtil" ??_R2CHResultExceptionImpl@CommonUtil@@8
0x180014000: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadLibraryImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,struct HINSTANCE__ * __ptr64 * __ptr64) __ptr64" ?SafeLoadLibraryImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAPEAUHINSTANCE__@@@Z
0x180020370: "vector<T> too long" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x180005CE4: "public: __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18001D878: "__cdecl _imp_PrivilegeCheck" __imp_PrivilegeCheck
0x180005CE4: "public: __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x1800204A8: WPP_68f9607bb7ab3f0d6779eced9bfc2f79_Traceguids
0x180002670: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_System_error_category::message(int)const __ptr64" ?message@_System_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18001E0B0: ole32_NULL_THUNK_DATA
0x18001DEE8: "__cdecl _imp_WTSQuerySessionInformationW" __imp_WTSQuerySessionInformationW
0x180007850: "public: virtual void * __ptr64 __cdecl CMpProviderModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpProviderModule@@UEAAPEAXI@Z
0x180004E0C: "public: __cdecl CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>::~CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x18001F260: "API-MS-Win-Core-LocalRegistry-L1" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x18001DB40: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x180021E70: "__vectorcall ??_R1BA@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R1BA@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18000F650: "private: void __cdecl Microsoft::SecurityClient::CDetectionItem::AddResources(struct tagMPTHREAT_INFO * __ptr64 const) __ptr64" ?AddResources@CDetectionItem@SecurityClient@Microsoft@@AEAAXQEAUtagMPTHREAT_INFO@@@Z
0x18001E0C0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180020664: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x18000AE98: "private: bool __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CheckImplicitLoad(void const * __ptr64) __ptr64" ?CheckImplicitLoad@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAA_NPEBX@Z
0x18001E068: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x18001DC90: "__cdecl _imp_GetSystemDefaultUILanguage" __imp_GetSystemDefaultUILanguage
0x18002A918: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUzkkozbvixlnnlmUoryUlyquivUznwGEUhgwzucOlyq@MorroCommon" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUzkkozbvixlnnlmUoryUlyquivUznwGEUhgwzucOlyq@MorroCommon
0x18001C9C8: "__cdecl _imp__recalloc" __imp__recalloc
0x180007188: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEAGH@Z
0x1800134B0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GlobalFindAtomImpl(unsigned short const * __ptr64) __ptr64" ?GlobalFindAtomImpl@CWin32@MorroCommon@@MEAAGPEBG@Z
0x18000F960: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x1800053B8: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> >::deallocate(struct MorroCommon::SFolderItem * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAAXPEAUSFolderItem@MorroCommon@@_K@Z
0x18001DD80: "__cdecl _imp_PathIsRelativeW" __imp_PathIsRelativeW
0x180022BA8: "const MorroCommon::CPathUtils::`RTTI Complete Object Locator'" ??_R4CPathUtils@MorroCommon@@6B@
0x180020058: "ExcludeSystemProperties" ??_C@_1DA@JKGMPCBD@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x18001D9B0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180002368: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180013160: ?SHGetPathFromIDListImpl@CWin32@MorroCommon@@MEAAHPEFBU_ITEMIDLIST@@PEAG@Z
0x180003450: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefObject@CommonUtil@@MEAAPEAXI@Z
0x18001DA28: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x18001F2F8: WPP_ad54849a3f7c383cf850b77aa75bd2b9_Traceguids
0x1800099A4: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,struct tagSAFEARRAY * __ptr64 const) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGQEAUtagSAFEARRAY@@@Z
0x1800206F0: CLSID_WbemContext
0x180005D04: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18001FBF8: "LastQuickScanDateTimeStart" ??_C@_1DG@MBECOPLD@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180005D04: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x1800293D8: "__vectorcall ??_R0?AVCInfectionStateClass@" ??_R0?AVCInfectionStateClass@@@8
0x180021E98: "__vectorcall ??_R1A@?0A@EA@CInfectionStateClass" ??_R1A@?0A@EA@CInfectionStateClass@@8
0x180026918: "__stdcall CT??_R0PEAVEUnknownError@MorroCommon@@" _CT??_R0PEAVEUnknownError@MorroCommon@@@88
0x18001EC48: "argument out of domain" ??_C@_0BH@CGIMPKIM@argument?5out?5of?5domain?$AA@
0x180012F20: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateThreadImpl(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned __int64,unsigned long (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CreateThreadImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@_KP6AKPEAX@Z2KPEAK@Z
0x18001E850: "no such file or directory" ??_C@_0BK@NDOCBPGE@no?5such?5file?5or?5directory?$AA@
0x18001ECA8: "connection aborted" ??_C@_0BD@MGNDDEGM@connection?5aborted?$AA@
0x18001DF20: "__cdecl _imp__wchmod" __imp__wchmod
0x180026838: "__cdecl TI3?AVCHResultExceptionImpl@CommonUtil@@" _TI3?AVCHResultExceptionImpl@CommonUtil@@
0x180011DD0: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::GetNilString(void) __ptr64" ?GetNilString@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@XZ
0x18001ED48: "file too large" ??_C@_0P@DNAJLBJK@file?5too?5large?$AA@
0x180001D8C: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x18001D888: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180029BB0: "__vectorcall ??_R0?AVinvalid_argument@std@" ??_R0?AVinvalid_argument@std@@@8
0x18001EE30: "no buffer space" ??_C@_0BA@PFFCAOFK@no?5buffer?5space?$AA@
0x180005D4C: "public: int __cdecl ATL::CRegParser::CParseBuffer::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@CParseBuffer@CRegParser@ATL@@QEAAHPEBGH@Z
0x180023688: "__cdecl tls_end" _tls_end
0x18001FBD8: "EngineVersion" ??_C@_1BM@KPEJNEAK@?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002A928: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4V43@A
0x18000F960: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultException@CommonUtil@@MEAAPEAXI@Z
0x180009F9C: "public: static class CommonUtil::CReturnHandle<class CommonUtil::CAutoBSTR> __cdecl Microsoft::SecurityClient::CWmiObjectSerializer::SerializeToXml(struct IWbemClassObject * __ptr64,unsigned long)" ?SerializeToXml@CWmiObjectSerializer@SecurityClient@Microsoft@@SA?AV?$CReturnHandle@VCAutoBSTR@CommonUtil@@@CommonUtil@@PEAUIWbemClassObject@@K@Z
0x18001DEB8: "__cdecl _imp_CryptCATCatalogInfoFromContext" __imp_CryptCATCatalogInfoFromContext
0x180019860: "__cdecl XcptFilter" _XcptFilter
0x18001DF00: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x18001EF18: "not connected" ??_C@_0O@GLMIBBEG@not?5connected?$AA@
0x18002A3F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUwooUlyquivUznwGEUhgwzucOlyq@MpProvider" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUwooUlyquivUznwGEUhgwzucOlyq@MpProvider
0x180004D78: "public: __cdecl CConversionStrategyDetectionItem::~CConversionStrategyDetectionItem(void) __ptr64" ??1CConversionStrategyDetectionItem@@QEAA@XZ
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CancelAsyncCall(struct IWbemObjectSink * __ptr64) __ptr64" ?CancelAsyncCall@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemObjectSink@@@Z
0x18001E0C8: "__cdecl _xc_a" __xc_a
0x18001DC38: "__cdecl _imp_FreeResource" __imp_FreeResource
0x18001DB18: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x1800051F0: "public: virtual long __cdecl ATL::CComObject<class CInfectionStateClass>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001F2C8: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800231B0: "const CommonUtil::CPredefinedMpHeapsHolder::`RTTI Complete Object Locator'" ??_R4CPredefinedMpHeapsHolder@CommonUtil@@6B@
0x180008C10: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CMpProviderClass>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCMpProviderClass@@@ATL@@UEAAPEAXI@Z
0x18001738C: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCatalogCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftCatalogCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x18001DE88: "__cdecl _imp_GetFileVersionInfoSizeW" __imp_GetFileVersionInfoSizeW
0x180004CC0: "public: __cdecl CDetectionItemSizeCalculator::~CDetectionItemSizeCalculator(void) __ptr64" ??1CDetectionItemSizeCalculator@@QEAA@XZ
0x180029AD8: "__vectorcall ??_R0?AVCDetectionItem@SecurityClient@Microsoft@" ??_R0?AVCDetectionItem@SecurityClient@Microsoft@@@8
0x18000CA00: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x1800039FC: WPP_SF_qSSdd
0x180020398: WPP_eccdf766551a3cbb1a967249b1004be7_Traceguids
0x180012730: "protected: virtual int __cdecl MorroCommon::CWin32::GetSystemMetricsImpl(int) __ptr64" ?GetSystemMetricsImpl@CWin32@MorroCommon@@MEAAHH@Z
0x180012D90: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileSizeExImpl(void * __ptr64,union _LARGE_INTEGER * __ptr64) __ptr64" ?GetFileSizeExImpl@CWin32@MorroCommon@@MEAAHPEAXPEAT_LARGE_INTEGER@@@Z
0x180022CF8: "__vectorcall ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x180014BF4: "public: class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64 __cdecl ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > >::operator=(char const * __ptr64) __ptr64" ??4?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBD@Z
0x18001DAB8: "__cdecl _imp_FindClose" __imp_FindClose
0x18001EAE0: "network_down" ??_C@_0N@FCPALPJK@network_down?$AA@
0x18001EEA0: "no stream resources" ??_C@_0BE@MKFDAFMP@no?5stream?5resources?$AA@
0x18001DBA8: "__cdecl _imp_SetThreadLocale" __imp_SetThreadLocale
0x180022090: "__vectorcall ??_R3?$CComObject@VCInfectionStateClass@@@ATL" ??_R3?$CComObject@VCInfectionStateClass@@@ATL@@8
0x180021C40: "__vectorcall ??_R2?$CComObject@VCInfectionStateClass@@@ATL" ??_R2?$CComObject@VCInfectionStateClass@@@ATL@@8
0x180005630: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x180022978: "__vectorcall ??_R1A@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R1A@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18000CA20: "public: __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAA@XZ
0x18001EAB8: "message_size" ??_C@_0N@HPMLKHPL@message_size?$AA@
0x180020690: WPP_af44aed7928d36b3a845cf895c8b8d6e_Traceguids
0x18001DC18: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x180012850: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateToolhelp32SnapshotImpl(unsigned long,unsigned long) __ptr64" ?CreateToolhelp32SnapshotImpl@CWin32@MorroCommon@@MEAAPEAXKK@Z
0x180012390: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryImpl(unsigned short const * __ptr64) __ptr64" ?LoadLibraryImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBG@Z
0x180019A4B: "__cdecl lock" _lock
0x18001DD88: "__cdecl _imp_PathRemoveFileSpecW" __imp_PathRemoveFileSpecW
0x180029B88: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x1800202B0: "MpConfigGetValue" ??_C@_0BB@PDIDAFAI@MpConfigGetValue?$AA@
0x18001E9A0: "bad_file_descriptor" ??_C@_0BE@DLHHIBGN@bad_file_descriptor?$AA@
0x1800151F0: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithModuleDirImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithModuleDirImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DCC8: "__cdecl _imp_SysStringByteLen" __imp_SysStringByteLen
0x180016A10: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x180022318: "__vectorcall ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18001091C: "long __cdecl CommonUtil::HrGetFileAttributes(unsigned long * __ptr64,unsigned short const * __ptr64)" ?HrGetFileAttributes@CommonUtil@@YAJPEAKPEBG@Z
0x180012480: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::WaitForSingleObjectImpl(void * __ptr64,unsigned long) __ptr64" ?WaitForSingleObjectImpl@CWin32@MorroCommon@@MEAAKPEAXK@Z
0x180022330: "__vectorcall ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180021DD0: "__vectorcall ??_R1A@?0A@EA@CDetectionItemSizeCalculator" ??_R1A@?0A@EA@CDetectionItemSizeCalculator@@8
0x180005850: "public: virtual long __cdecl ATL::CRegObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRegObject@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001FB18: "IoavProtectionEnabled" ??_C@_1CM@ECMPGMPA@?$AAI?$AAo?$AAa?$AAv?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1800299E0: "__vectorcall ??_R0?AVCFileUtils@MorroCommon@" ??_R0?AVCFileUtils@MorroCommon@@@8
0x1800290D8: "public: static class std::_System_error_category std::_Error_objects<int>::_System_object" ?_System_object@?$_Error_objects@H@std@@2V_System_error_category@2@A
0x18001CCA8: "const CMpProviderModule::`vftable'" ??_7CMpProviderModule@@6B@
0x18000A300: "public: __cdecl Microsoft::SecurityClient::CDateTimeFormatter::CDateTimeFormatter(struct _SYSTEMTIME const & __ptr64) __ptr64" ??0CDateTimeFormatter@SecurityClient@Microsoft@@QEAA@AEBU_SYSTEMTIME@@@Z
0x180023270: "__vectorcall ??_R3CPredefinedMpHeapsHolder@CommonUtil" ??_R3CPredefinedMpHeapsHolder@CommonUtil@@8
0x1800231F0: "__vectorcall ??_R2CPredefinedMpHeapsHolder@CommonUtil" ??_R2CPredefinedMpHeapsHolder@CommonUtil@@8
0x18001DC88: "__cdecl _imp_WritePrivateProfileStringW" __imp_WritePrivateProfileStringW
0x18001DAF8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180005904: "public: long __cdecl ATL::CExpansionVector::ClearReplacements(void) __ptr64" ?ClearReplacements@CExpansionVector@ATL@@QEAAJXZ
0x18001E77C: "__cdecl _guard_iat_table" __guard_iat_table
0x18001099C: "long __cdecl CommonUtil::HrDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrDuplicateStringW@CommonUtil@@YAJPEAPEAGPEBG@Z
0x180029C60: "__vectorcall ??_R0PEAVEUnknownError@MorroCommon@" ??_R0PEAVEUnknownError@MorroCommon@@@8
0x180017FB0: "public: static long __cdecl MpCommonEx::CFileUtilsEx::SafeLoadLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?SafeLoadLibrary@CFileUtilsEx@MpCommonEx@@SAJPEAPEAUHINSTANCE__@@PEBG@Z
0x180019830: memcpy
0x180018E2C: "void __cdecl std::_Xout_of_range(char const * __ptr64)" ?_Xout_of_range@std@@YAXPEBD@Z
0x18001EA48: "operation_in_progress" ??_C@_0BG@DJGBJIIK@operation_in_progress?$AA@
0x18001CB00: "const ATL::CComObject<class CInfectionStateClass>::`vftable'{for `IWbemServices'}" ??_7?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemServices@@@
0x1800290C8: "public: static class std::_Generic_error_category std::_Error_objects<int>::_Generic_object" ?_Generic_object@?$_Error_objects@H@std@@2V_Generic_error_category@2@A
0x18001DE10: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x18001DA18: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180012B30: "protected: virtual int __cdecl MorroCommon::CWin32::CheckTokenMembershipImpl(void * __ptr64,void * __ptr64,int * __ptr64) __ptr64" ?CheckTokenMembershipImpl@CWin32@MorroCommon@@MEAAHPEAX0PEAH@Z
0x180019CE0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180020640: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180021AC8: "__vectorcall ??_R3error_category@std" ??_R3error_category@std@@8
0x180021990: "__vectorcall ??_R2error_category@std" ??_R2error_category@std@@8
0x18001DBD8: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x18001E040: "__cdecl _imp_memset" __imp_memset
0x18001F360: "AntimalwareDetectionStatus" ??_C@_1DG@HADFNLKM@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180018930: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180012A10: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetProcessHeapImpl(void) __ptr64" ?GetProcessHeapImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x180012C00: "protected: virtual int __cdecl MorroCommon::CWin32::ReadFileImpl(void * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadFileImpl@CWin32@MorroCommon@@MEAAHPEAX0KPEAKPEAU_OVERLAPPED@@@Z
0x18001DAE8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180019A3F: "__cdecl initterm" _initterm
0x18001D908: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180012A60: "protected: virtual int __cdecl MorroCommon::CWin32::_wchmodImpl(unsigned short const * __ptr64,int) __ptr64" ?_wchmodImpl@CWin32@MorroCommon@@MEAAHPEBGH@Z
0x18001E8B8: "resource unavailable try again" ??_C@_0BP@LKNGHENJ@resource?5unavailable?5try?5again?$AA@
0x1800025C0: "public: virtual char const * __ptr64 __cdecl std::_Iostream_error_category::name(void)const __ptr64" ?name@_Iostream_error_category@std@@UEBAPEBDXZ
0x180004E00: ?GetObjectDescription@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18001EDC8: "invalid seek" ??_C@_0N@OHAFKDEK@invalid?5seek?$AA@
0x180008D5C: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x180023138: "const MorroCommon::CLockedCertCheckImpl::`RTTI Complete Object Locator'" ??_R4CLockedCertCheckImpl@MorroCommon@@6B@
0x1800121B0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetTempPathImpl(unsigned long,unsigned short * __ptr64) __ptr64" ?GetTempPathImpl@CWin32@MorroCommon@@MEAAKKPEAG@Z
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecQuery@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x1800203A8: "Real-Time Protection" ??_C@_1CK@OHIAJBPD@?$AAR?$AAe?$AAa?$AAl?$AA?9?$AAT?$AAi?$AAm?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001EE58: "no link" ??_C@_07PLECNNKG@no?5link?$AA@
0x180013000: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeThreadImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeThreadImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x180012CA0: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenServiceImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEAU3@PEBGK@Z
0x18002A9F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001F790: "__cdecl GUID_9556dc99_828c_11cf_a37e_00aa003240c7" _GUID_9556dc99_828c_11cf_a37e_00aa003240c7
0x18001DBC8: "__cdecl _imp_Sleep" __imp_Sleep
0x18001DDF8: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x180026610: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24
0x180021E48: "__vectorcall ??_R1BA@?0A@EA@CComObjectRootBase@ATL" ??_R1BA@?0A@EA@CComObjectRootBase@ATL@@8
0x18002A910: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4V43@A
0x18002A890: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4V43@A
0x18002A8A8: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4V43@A
0x18001F7E0: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x18001E160: "__cdecl _xi_z" __xi_z
0x18001CF58: "const CommonUtil::CHResultException::`vftable'" ??_7CHResultException@CommonUtil@@6B@
0x180012B90: "protected: virtual int __cdecl MorroCommon::CWin32::VerifyVersionInfoImpl(struct _OSVERSIONINFOEXW * __ptr64,unsigned long,unsigned __int64) __ptr64" ?VerifyVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOEXW@@K_K@Z
0x18001D990: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gerror_category@std@@UEAAPEAXI@Z
0x1800189B0: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18002A880: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib
0x18001DE70: USERENV_NULL_THUNK_DATA
0x180001E48: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x180026638: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x18001EEF8: "not a socket" ??_C@_0N@POEIPGGF@not?5a?5socket?$AA@
0x18001978C: "__cdecl _C_specific_handler" __C_specific_handler
0x180012DD0: "protected: virtual unsigned __int64 __cdecl MorroCommon::CWin32::SetTimerImpl(struct HWND__ * __ptr64,unsigned __int64,unsigned int,void (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,unsigned long)) __ptr64" ?SetTimerImpl@CWin32@MorroCommon@@MEAA_KPEAUHWND__@@_KIP6AX0I1K@Z@Z
0x18000E644: "private: void __cdecl Microsoft::SecurityClient::CInfectionState::MapComputerStatus(void) __ptr64" ?MapComputerStatus@CInfectionState@SecurityClient@Microsoft@@AEAAXXZ
0x18000F300: "public: __cdecl Microsoft::SecurityClient::CDetectionItem::CDetectionItem(struct tagMPTHREAT_INFO * __ptr64 const) __ptr64" ??0CDetectionItem@SecurityClient@Microsoft@@QEAA@QEAUtagMPTHREAT_INFO@@@Z
0x180009CE0: "public: __cdecl Microsoft::SecurityClient::CEnsureImpersonationLevel::CEnsureImpersonationLevel(unsigned long) __ptr64" ??0CEnsureImpersonationLevel@SecurityClient@Microsoft@@QEAA@K@Z
0x18001DB78: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180012A80: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameExImpl(void * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameExImpl@CWin32@MorroCommon@@MEAAKPEAXPEAUHINSTANCE__@@PEAGK@Z
0x180016900: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetDriveFolderFromPathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetDriveFolderFromPathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18002A934: "long volatile `public: static class MorroCommon::CCertCheckFactory * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4JC
0x1800171C8: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftSelfCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftSelfCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x18001DD90: "__cdecl _imp_PathAppendW" __imp_PathAppendW
0x1800026D0: "public: virtual class std::error_condition __cdecl std::_System_error_category::default_error_condition(int)const __ptr64" ?default_error_condition@_System_error_category@std@@UEBA?AVerror_condition@2@H@Z
0x180018310: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x180022CA8: "__vectorcall ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x1800206A0: WPP_28d7b8d1fb9c3ced56c685149367209d_Traceguids
0x18001DF48: "__cdecl _imp__onexit" __imp__onexit
0x180012960: "protected: virtual int __cdecl MorroCommon::CWin32::FreeResourceImpl(void * __ptr64) __ptr64" ?FreeResourceImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180020660: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x18001EFE8: "resource deadlock would occur" ??_C@_0BO@BJBOMOEJ@resource?5deadlock?5would?5occur?$AA@
0x18001983C: memmove
0x180005620: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CInfectionStateClass>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x18002A611: "struct CommonUtil::CCommonThrowWinErr CommonUtil::tWinErr" ?tWinErr@CommonUtil@@3UCCommonThrowWinErr@1@A
0x18001DB58: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000DBCC: "public: static void __cdecl CAutoMpClose::Release(struct tagMPCONTEXT * __ptr64)" ?Release@CAutoMpClose@@SAXPEAUtagMPCONTEXT@@@Z
0x180016E60: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCertChainCheck(void * __ptr64,unsigned long)" ?MicrosoftCertChainCheck@CCertCheck@MorroCommon@@CAJPEAXK@Z
0x180029258: "__vectorcall ??_R0?AV_Generic_error_category@std@" ??_R0?AV_Generic_error_category@std@@@8
0x18002A448: WPP_REGISTRATION_GUIDS
0x18001FF90: WPP_5cc9b64ceb5d3d6286345330db72c61c_Traceguids
0x180013584: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64 __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::operator=(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z
0x18001EDE8: "message size" ??_C@_0N@IFLPBIOP@message?5size?$AA@
0x1800201C0: "%programfiles%\Windows Defender" ??_C@_1EA@HEALEMPM@?$AA?$CF?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x18001CE60: "const MorroCommon::CPathUtils::`vftable'" ??_7CPathUtils@MorroCommon@@6B@
0x18000E88C: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x1800025D0: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Iostream_error_category::message(int)const __ptr64" ?message@_Iostream_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x180022B18: "__vectorcall ??_R2CFileUtils@MorroCommon" ??_R2CFileUtils@MorroCommon@@8
0x180022B90: "__vectorcall ??_R3CFileUtils@MorroCommon" ??_R3CFileUtils@MorroCommon@@8
0x18001F4F8: "ExecutionStatus" ??_C@_1CA@CIMPKAAA@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001DDC8: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x1800220C0: "__vectorcall ??_R3CInfectionStateClass" ??_R3CInfectionStateClass@@8
0x180021CA0: "__vectorcall ??_R2CInfectionStateClass" ??_R2CInfectionStateClass@@8
0x18001D498: "const MpCommonEx::CEventLoggerBase::`vftable'" ??_7CEventLoggerBase@MpCommonEx@@6B@
0x18001D8A0: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18001DE98: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x18000AFE4: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::SetString(unsigned short const * __ptr64,int) __ptr64" ?SetString@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x18001DB28: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18001FAB8: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001F7B0: "Module_Raw" ??_C@_1BG@JBACFMF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAR?$AAa?$AAw?$AA?$AA@
0x18001E030: "__cdecl _imp_iswalpha" __imp_iswalpha
0x180029CD0: "__vectorcall ??_R0?AVCLockEntireFile@MorroCommon@" ??_R0?AVCLockEntireFile@MorroCommon@@@8
0x180004D78: "public: __cdecl CommonUtil::AutoRef<class Microsoft::SecurityClient::CDetectionItem>::~AutoRef<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$AutoRef@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180005CE4: "public: __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18001D8D8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18001ECE0: "connection refused" ??_C@_0BD@PJLIIJEL@connection?5refused?$AA@
0x180019B8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180007850: "public: virtual void * __ptr64 __cdecl CMpProviderModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpProviderModule@@UEAAPEAXI@Z
0x180020738: "GetProductInfo" ??_C@_0P@FOMLLNOL@GetProductInfo?$AA@
0x180026ADC: "__cdecl _IMPORT_DESCRIPTOR_VERSION" __IMPORT_DESCRIPTOR_VERSION
0x180012FA0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateEventImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?CreateEventImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBG@Z
0x180029370: "__vectorcall ??_R0?AV?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@" ??_R0?AV?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@@8
0x180020018: "IncludeQualifiers" ??_C@_1CE@HDJBFMCI@?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAQ?$AAu?$AAa?$AAl?$AAi?$AAf?$AAi?$AAe?$AAr?$AAs?$AA?$AA@
0x18001CF78: "const CommonUtil::CHResultExceptionImpl::`vftable'" ??_7CHResultExceptionImpl@CommonUtil@@6B@
0x180016070: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesX86Impl(void) __ptr64" ?GetProgramFilesX86Impl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18000E6F4: "public: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::push_back(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> &&) __ptr64" ?push_back@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAAX$$QEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@Z
0x18001FFC0: GUID_ATLVer70
0x18000ABD4: "public: static void __cdecl Microsoft::SecurityClient::MpCommonEx::CSimpleLogCreator::Stop(bool)" ?Stop@CSimpleLogCreator@MpCommonEx@SecurityClient@Microsoft@@SAX_N@Z
0x180011E70: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Reallocate(void * __ptr64,unsigned __int64) __ptr64" ?Reallocate@CWin32Heap@ATL@@UEAAPEAXPEAX_K@Z
0x18000F960: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x180003360: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z
0x180004E00: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x1800018E0: DllCanUnloadNow
0x180022138: "__vectorcall ??_R3IWbemProviderInit" ??_R3IWbemProviderInit@@8
0x180021D68: "__vectorcall ??_R2IWbemProviderInit" ??_R2IWbemProviderInit@@8
0x180003490: "public: virtual void * __ptr64 __cdecl ATL::CProviderHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_ECProviderHelper@ATL@@UEAAPEAXI@Z
0x18000919C: WPP_SF_S_guid_
0x18001D8C0: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18001F118: CLSID_StdComponentCategoriesMgr
0x180022B08: "__vectorcall ??_R2CPathUtils@MorroCommon" ??_R2CPathUtils@MorroCommon@@8
0x180022B78: "__vectorcall ??_R3CPathUtils@MorroCommon" ??_R3CPathUtils@MorroCommon@@8
0x18000B2DC: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x180012F00: "protected: virtual int __cdecl MorroCommon::CWin32::MoveFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?MoveFileImpl@CWin32@MorroCommon@@MEAAHPEBG0@Z
0x180012C30: "protected: virtual int __cdecl MorroCommon::CWin32::WriteFileImpl(void * __ptr64,void const * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?WriteFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEBXKPEAKPEAU_OVERLAPPED@@@Z
0x180012150: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyWindowImpl(struct HWND__ * __ptr64) __ptr64" ?DestroyWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x1800223E8: "__vectorcall ??_R2CComClassFactory@ATL" ??_R2CComClassFactory@ATL@@8
0x180022418: "__vectorcall ??_R3CComClassFactory@ATL" ??_R3CComClassFactory@ATL@@8
0x18001503C: "struct MorroCommon::SFolderItem * __ptr64 __cdecl std::_Uninit_move<struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,class std::allocator<struct MorroCommon::SFolderItem>,struct MorroCommon::SFolderItem>(struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAUSFolderItem@MorroCommon@@PEAU12@V?$allocator@USFolderItem@MorroCommon@@@std@@U12@@std@@YAPEAUSFolderItem@MorroCommon@@PEAU12@00AEAU?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18001FA28: "SYSTEM" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180021EE8: "__vectorcall ??_R1A@?0A@EA@IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R1A@?0A@EA@IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x180029460: "__vectorcall ??_R0?AVCInstanceProviderHelper@ATL@" ??_R0?AVCInstanceProviderHelper@ATL@@@8
0x18001DCE8: "__cdecl _imp_SafeArrayCreate" __imp_SafeArrayCreate
0x1800232F0: "__vectorcall ??_R3CPtrObject@CommonUtil" ??_R3CPtrObject@CommonUtil@@8
0x180023260: "__vectorcall ??_R2CPtrObject@CommonUtil" ??_R2CPtrObject@CommonUtil@@8
0x1800207C8: WPP_62bc956533203bbc022dd1ecb69c4649_Traceguids
0x18001F398: "DetectionTime" ??_C@_1BM@CPCKAAIO@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180010558: "long __cdecl CommonUtil::UtilFormatStringFromUuid(unsigned short * __ptr64 * __ptr64,struct _GUID const & __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UtilFormatStringFromUuid@CommonUtil@@YAJPEAPEAGAEBU_GUID@@PEBG2@Z
0x18002A420: WPP_MAIN_CB
0x18000AF54: "private: static struct ATL::CStringData * __ptr64 __cdecl ATL::CSimpleStringT<unsigned short,0>::CloneData(struct ATL::CStringData * __ptr64)" ?CloneData@?$CSimpleStringT@G$0A@@ATL@@CAPEAUCStringData@2@PEAU32@@Z
0x180020088: "IncludeClassOrigin" ??_C@_1CG@BNGPLHPD@?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AA?$AA@
0x18002A940: "public: static class std::locale::id std::num_put<char,class std::back_insert_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::id" ?id@?$num_put@DV?$back_insert_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@std@@2V0locale@2@A
0x180022790: "__vectorcall ??_R1A@?0A@EA@?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x18001CC40: "const CDetectionItemSizeCalculator::`vftable'" ??_7CDetectionItemSizeCalculator@@6B@
0x180016C3C: "long __cdecl MorroCommon::HrCComBSTRAssign(class ATL::CComBSTR & __ptr64,unsigned short const * __ptr64)" ?HrCComBSTRAssign@MorroCommon@@YAJAEAVCComBSTR@ATL@@PEBG@Z
0x180005880: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegObject@ATL@@UEAAPEAXI@Z
0x180013BD0: "private: long __cdecl MorroCommon::CFileUtils::CheckParams(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CheckParams@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DC80: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x1800127E0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetWindowThreadProcessIdImpl(struct HWND__ * __ptr64,unsigned long * __ptr64) __ptr64" ?GetWindowThreadProcessIdImpl@CWin32@MorroCommon@@MEAAKPEAUHWND__@@PEAK@Z
0x18001D8B8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180029E58: "public: static class std::locale::id std::num_put<wchar_t,class std::back_insert_iterator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::id" ?id@?$num_put@_WV?$back_insert_iterator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@2V0locale@2@A
0x18001986C: "__cdecl amsg_exit" _amsg_exit
0x180020748: WPP_0c5188e3415a3eacbef14bfb20a61e24_Traceguids
0x18001F2E8: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180022FC0: "__vectorcall ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon" ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon@@8
0x180022E60: "__vectorcall ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil" ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil@@8
0x1800140A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::GetAvailableSpaceImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetAvailableSpaceImpl@CFileUtils@MorroCommon@@MEAAJPEBGPEAT_ULARGE_INTEGER@@@Z
0x180011914: MpUtilsOnDllMain
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x18001EC98: "broken pipe" ??_C@_0M@KPHOFDBE@broken?5pipe?$AA@
0x18001F138: IID_IClassFactory
0x18000A374: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToRoundTrip(void)const __ptr64" ?ToRoundTrip@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x180013380: "protected: virtual int __cdecl MorroCommon::CWin32::SystemTimeToFileTimeImpl(struct _SYSTEMTIME const * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?SystemTimeToFileTimeImpl@CWin32@MorroCommon@@MEAAHPEBU_SYSTEMTIME@@PEAU_FILETIME@@@Z
0x180021F38: "__vectorcall ??_R1A@?0A@EA@CProviderHelper@ATL" ??_R1A@?0A@EA@CProviderHelper@ATL@@8
0x18001EB40: "not_connected" ??_C@_0O@GBCLHHD@not_connected?$AA@
0x180002390: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned long) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGK@Z
0x18000CA20: "public: __cdecl CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x180020238: "MpManagerVersionQuery" ??_C@_0BG@BPEBJMPE@MpManagerVersionQuery?$AA@
0x180017970: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`vector deleting destructor'(unsigned int) __ptr64" ??_EILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18001EBA8: "timed_out" ??_C@_09NCHNLHPG@timed_out?$AA@
0x180005600: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAKXZ
0x180017B60: "protected: virtual struct MorroCommon::ILockedCertCheck * __ptr64 __cdecl MorroCommon::CCertCheckFactory::CreateCertCheckImpl(void) __ptr64" ?CreateCertCheckImpl@CCertCheckFactory@MorroCommon@@MEAAPEAUILockedCertCheck@2@XZ
0x1800268D8: "__cdecl CTA2PEAVEUnknownError@MorroCommon@@" _CTA2PEAVEUnknownError@MorroCommon@@
0x180022800: "__vectorcall ??_R3CMpProviderModule" ??_R3CMpProviderModule@@8
0x18001F1F0: "\Required Categories" ??_C@_1CK@IFBKBFAA@?$AA?2?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180022588: "__vectorcall ??_R2CMpProviderModule" ??_R2CMpProviderModule@@8
0x18001F954: "M" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x18000E464: "private: bool __cdecl Microsoft::SecurityClient::CInfectionState::IsServiceAvailable(void) __ptr64" ?IsServiceAvailable@CInfectionState@SecurityClient@Microsoft@@AEAA_NXZ
0x18001F670: "PendingActionDetections" ??_C@_1DA@KDACBBFB@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800223C0: "__vectorcall ??_R17?0A@EA@CComObjectRootBase@ATL" ??_R17?0A@EA@CComObjectRootBase@ATL@@8
0x1800154D0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001EFB8: "protocol not supported" ??_C@_0BH@JPPPLHJB@protocol?5not?5supported?$AA@
0x180003014: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x180011C50: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Allocate(int,int) __ptr64" ?Allocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@HH@Z
0x18002A8F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUnkxlnnlmvcUoryUlyquivUznwGEUhgwzucOlyq@MpCommonEx" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUnkxlnnlmvcUoryUlyquivUznwGEUhgwzucOlyq@MpCommonEx
0x18001F128: GUID_NULL
0x180010680: "long __cdecl CommonUtil::HrExpandEnvironmentStrings(unsigned short const * __ptr64,unsigned __int64 * __ptr64,unsigned short * __ptr64)" ?HrExpandEnvironmentStrings@CommonUtil@@YAJPEBGPEA_KPEAG@Z
0x180008210: "public: virtual long __cdecl CMpProviderClass::GetObjectAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?GetObjectAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180003014: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x18001D9E8: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18001EC00: "address not available" ??_C@_0BG@DHPCNBJB@address?5not?5available?$AA@
0x18001DF60: "__cdecl _imp__lock" __imp__lock
0x18001FF68: "NisSignatureVersion" ??_C@_1CI@DBMPFKBB@?$AAN?$AAi?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180020850: WPP_f3e3aaa1d7ab3100d8ae3cb75d7e43b9_Traceguids
0x180008440: "public: virtual long __cdecl CMpProviderClass::CreateInstanceEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateInstanceEnumAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001DD48: OLEAUT32_NULL_THUNK_DATA
0x180022ED8: "__vectorcall ??_R1A@?0A@EA@CHResultException@CommonUtil" ??_R1A@?0A@EA@CHResultException@CommonUtil@@8
0x18001975C: atexit
0x180022FA0: "__vectorcall ??_R2CCertCheckFactory@MorroCommon" ??_R2CCertCheckFactory@MorroCommon@@8
0x180023010: "__vectorcall ??_R3CCertCheckFactory@MorroCommon" ??_R3CCertCheckFactory@MorroCommon@@8
0x1800297C0: "__vectorcall ??_R0?AV?$CAtlDllModuleT@VCMpProviderModule@@@ATL@" ??_R0?AV?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@@8
0x180012EA0: "protected: virtual int __cdecl MorroCommon::CWin32::InitiateSystemShutdownExImpl(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,int,int,unsigned long) __ptr64" ?InitiateSystemShutdownExImpl@CWin32@MorroCommon@@MEAAHPEAG0KHHK@Z
0x1800156A0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModuleNameByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModuleNameByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18001FFB0: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x180003400: "public: __cdecl ATL::CComSafeArray<unsigned short * __ptr64,8>::~CComSafeArray<unsigned short * __ptr64,8>(void) __ptr64" ??1?$CComSafeArray@PEAG$07@ATL@@QEAA@XZ
0x1800014B4: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x180026658: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x180005210: "public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::Release(void) __ptr64" ?Release@?$CComObject@VCMpProviderClass@@@ATL@@UEAAKXZ
0x18002A500: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x180011080: "long __cdecl CommonUtil::UtilRegGetValueDword(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?UtilRegGetValueDword@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAK@Z
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteClassAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteClassAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180015FC0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesImpl(void) __ptr64" ?GetProgramFilesImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180016780: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetProcessExecutableFullPathImpl(unsigned long,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetProcessExecutableFullPathImpl@CPathUtils@MorroCommon@@MEAAJKAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001C9D8: "const Microsoft::SecurityClient::CDetectionWbemCreator::`vftable'" ??_7CDetectionWbemCreator@SecurityClient@Microsoft@@6B@
0x180022A10: "const ATL::CComObject<class CMpProviderClass>::`RTTI Complete Object Locator'{for `IWbemServices'}" ??_R4?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemServices@@@
0x180022648: "__vectorcall ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x180021B80: "const std::error_category::`RTTI Complete Object Locator'" ??_R4error_category@std@@6B@
0x180018A00: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x18001DA08: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180005D04: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18001CC10: "const ATL::CComObjectCached<class ATL::CComClassFactory>::`vftable'" ??_7?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x18001EAC8: "filename_too_long" ??_C@_0BC@LEEIKBAL@filename_too_long?$AA@
0x18001DEF0: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x18001E7F8: "io error" ??_C@_08GLNPIFBN@io?5error?$AA@
0x1800202C8: "MpThreatOpen" ??_C@_0N@NLOFEOJC@MpThreatOpen?$AA@
0x18001FDC8: "LastQuickScanDateTimeEnd" ??_C@_1DC@IIJIMEND@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x18001F6E0: "PendingManualSteps" ??_C@_1CG@CJMPKDDI@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAS?$AAt?$AAe?$AAp?$AAs?$AA?$AA@
0x180029050: "struct ATL::_ATL_OBJMAP_ENTRY30 __objMap_CMpProviderClass" ?__objMap_CMpProviderClass@@3U_ATL_OBJMAP_ENTRY30@ATL@@A
0x18001D900: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18001F0E0: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x1800290F0: "class ATL::CAtlStringMgr ATL::g_strmgr" ?g_strmgr@ATL@@3VCAtlStringMgr@1@A
0x18000D2E4: "public: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::push_back(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ?push_back@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAAXAEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@Z
0x180016BEC: "long __cdecl MorroCommon::HrCStringAssign(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64)" ?HrCStringAssign@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBG@Z
0x18001196C: "unsigned __int64 __cdecl CommonUtil::UtilGetSystemTimeAsUlong64(void)" ?UtilGetSystemTimeAsUlong64@CommonUtil@@YA_KXZ
0x180022768: "__vectorcall ??_R1A@?0A@EA@CAtlModule@ATL" ??_R1A@?0A@EA@CAtlModule@ATL@@8
0x18001EF98: "owner dead" ??_C@_0L@BLPOFLNJ@owner?5dead?$AA@
0x18001DE78: "__cdecl _imp_GetFileVersionInfoW" __imp_GetFileVersionInfoW
0x18001D8F8: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180013130: "protected: virtual int __cdecl MorroCommon::CWin32::PathRemoveFileSpecImpl(unsigned short * __ptr64) __ptr64" ?PathRemoveFileSpecImpl@CWin32@MorroCommon@@MEAAHPEAG@Z
0x180029670: "__vectorcall ??_R0?AVEUnknownError@MorroCommon@" ??_R0?AVEUnknownError@MorroCommon@@@8
0x180019854: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64" ??0exception@@QEAA@AEBQEBD@Z
0x180018D00: "char const * __ptr64 __cdecl std::_Winerror_map(int)" ?_Winerror_map@std@@YAPEBDH@Z
0x180026708: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x18000ABB8: "public: static long __cdecl Microsoft::SecurityClient::MpCommonEx::CSimpleLogCreator::Start(bool,struct _GUID const * __ptr64 const,unsigned long,unsigned short const * __ptr64,unsigned long)" ?Start@CSimpleLogCreator@MpCommonEx@SecurityClient@Microsoft@@SAJ_NQEBU_GUID@@KPEBGK@Z
0x180010C20: "public: class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::operator=(unsigned short const * __ptr64) __ptr64" ??4?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAAAEAV01@PEBG@Z
0x180022698: "__vectorcall ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x18001E920: "permission_denied" ??_C@_0BC@FNODOBAE@permission_denied?$AA@
0x18001D980: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800119D0: "struct _SYSTEMTIME __cdecl CommonUtil::UtilSystemTimeFromUlong64(unsigned __int64 const & __ptr64)" ?UtilSystemTimeFromUlong64@CommonUtil@@YA?AU_SYSTEMTIME@@AEB_K@Z
0x18001F3E8: "ThreatName" ??_C@_1BG@EHILGFDL@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180019A63: "__cdecl _dllonexit" __dllonexit
0x180003750: "public: static long __cdecl CInfectionStateClass::UpdateRegistry(int)" ?UpdateRegistry@CInfectionStateClass@@SAJH@Z
0x180014110: "private: long __cdecl MorroCommon::CFileUtils::GetFolderItems(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64) __ptr64" ?GetFolderItems@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@@Z
0x180020250: "MpHandleClose" ??_C@_0O@KNNLILAN@MpHandleClose?$AA@
0x180021BE0: "__vectorcall ??_R3CRefObject@CommonUtil" ??_R3CRefObject@CommonUtil@@8
0x18001F848: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180021BD0: "__vectorcall ??_R2CRefObject@CommonUtil" ??_R2CRefObject@CommonUtil@@8
0x1800120E0: "protected: virtual int __cdecl MorroCommon::CWin32::CreateDirectoryImpl(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64) __ptr64" ?CreateDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x18002A9D8: "__cdecl _native_startup_lock" __native_startup_lock
0x18001FB78: "AntivirusEnabled" ??_C@_1CC@IPDIJMOL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001F4E8: "Process" ??_C@_1BA@NMDNJJOO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x180012560: "protected: virtual long __cdecl MorroCommon::CWin32::GetFileVersionInfoSizeImpl(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileVersionInfoSizeImpl@CWin32@MorroCommon@@MEAAJPEBGPEAK@Z
0x180016580: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempFolderPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempFolderPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180008DA0: DllMain
0x18001E980: "connection_already_in_progress" ??_C@_0BP@FOJJHMCC@connection_already_in_progress?$AA@
0x18001FED8: "LastQuickScanSource" ??_C@_1CI@ENJJBLOD@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1800204C8: "%ws:%ws" ??_C@_1BA@DLOBEII@?$AA?$CF?$AAw?$AAs?$AA?3?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180010A00: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrDuplicateStringW(unsigned short const * __ptr64)" ?TrDuplicateStringW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBG@Z
0x180008A58: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CMpProviderClass> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCMpProviderClass@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001E008: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18001F540: WPP_67893f29ad2936cb9fe5ebf6c96abdf5_Traceguids
0x180012580: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileVersionInfoImpl(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?GetFileVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEBGKKPEAX@Z
0x18000AAA0: "long __cdecl CommonUtil::MpNewBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@G@CommonUtil@@YAJPEAPEAG_K@Z
0x18001DF38: "__cdecl _imp_realloc" __imp_realloc
0x18001DFF0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180029C98: "__vectorcall ??_R0?AVCCertCheckFactory@MorroCommon@" ??_R0?AVCCertCheckFactory@MorroCommon@@@8
0x180012E00: "protected: virtual int __cdecl MorroCommon::CWin32::KillTimerImpl(struct HWND__ * __ptr64,unsigned __int64) __ptr64" ?KillTimerImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@_K@Z
0x180013300: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQuerySessionInformationImpl(void * __ptr64,unsigned long,enum _WTS_INFO_CLASS,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSQuerySessionInformationImpl@CWin32@MorroCommon@@MEAAHPEAXKW4_WTS_INFO_CLASS@@PEAPEAGPEAK@Z
0x18001D9A8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180022BD0: "const MorroCommon::CFileUtils::`RTTI Complete Object Locator'" ??_R4CFileUtils@MorroCommon@@6B@
0x18001D4F0: ?_entries@?1??_GetEntries@CMpProviderClass@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x180018CD0: "char const * __ptr64 __cdecl std::_Syserror_map(int)" ?_Syserror_map@std@@YAPEBDH@Z
0x18001E7A8: "file exists" ??_C@_0M@MIDIAGJP@file?5exists?$AA@
0x18001F450: "MitigationAction" ??_C@_1CC@CAIHFDOC@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001EDA0: "inappropriate io control operati" ??_C@_0CD@BNPLBMNA@inappropriate?5io?5control?5operati@
0x180012010: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGPEAD@Z
0x18000CB60: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpProviderEventLogger@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180003770: "public: virtual long __cdecl CMpProviderClass::PutInstanceAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutInstanceAsync@CMpProviderClass@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001F478: "ErrorCode" ??_C@_1BE@ILMBBNLH@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18001DCC0: KERNEL32_NULL_THUNK_DATA
0x180005720: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18001DC08: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18001E908: "too many files open" ??_C@_0BE@GHAFMPAH@too?5many?5files?5open?$AA@
0x18001F3D0: "ThreatID" ??_C@_1BC@NMNONBBO@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AA?$AA@
0x18001D860: "__cdecl _imp_LookupPrivilegeNameW" __imp_LookupPrivilegeNameW
0x1800124B0: "protected: virtual int __cdecl MorroCommon::CWin32::ConvertStringSecurityDescriptorToSecurityDescriptorImpl(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?ConvertStringSecurityDescriptorToSecurityDescriptorImpl@CWin32@MorroCommon@@MEAAHPEBGKPEAPEAXPEAK@Z
0x180029598: "__vectorcall ??_R0?AVCComClassFactory@ATL@" ??_R0?AVCComClassFactory@ATL@@@8
0x18001DB90: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x18001DBA0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008D84: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180018DD8: "void __cdecl std::_Xbad_alloc(void)" ?_Xbad_alloc@std@@YAXXZ
0x180018D90: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x18001FFF0: "%I64d" ??_C@_1M@OBKMGAH@?$AA?$CF?$AAI?$AA6?$AA4?$AAd?$AA?$AA@
0x18001EB18: "no_buffer_space" ??_C@_0BA@FDIJKJCL@no_buffer_space?$AA@
0x18001FF28: "NisEnabled" ??_C@_1BG@LMMBALLN@?$AAN?$AAi?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180019A6F: "__cdecl errno" _errno
0x180012870: "protected: virtual int __cdecl MorroCommon::CWin32::Process32FirstImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32FirstImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x180029E20: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180019B68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003490: "public: virtual void * __ptr64 __cdecl ATL::CProviderHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCProviderHelper@ATL@@UEAAPEAXI@Z
0x18002A3F0: "__cdecl tls_index" _tls_index
0x18000868C: "private: void __cdecl CMpProviderClass::InitializeInstance(struct IWbemClassObject * __ptr64) __ptr64" ?InitializeInstance@CMpProviderClass@@AEAAXPEAUIWbemClassObject@@@Z
0x18001FA60: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecNotificationQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecNotificationQueryAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001ECF8: "connection reset" ??_C@_0BB@IECNJNOI@connection?5reset?$AA@
0x180010D54: "long __cdecl CommonUtil::UtilRegOpenKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilRegOpenKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGK@Z
0x180029BE0: "__vectorcall ??_R0?AVCWin32@MorroCommon@" ??_R0?AVCWin32@MorroCommon@@@8
0x18000235C: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x180029640: "__vectorcall ??_R0?AVCComObjectRootBase@ATL@" ??_R0?AVCComObjectRootBase@ATL@@@8
0x180021B58: "const std::_Generic_error_category::`RTTI Complete Object Locator'" ??_R4_Generic_error_category@std@@6B@
0x180013C70: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadRtfFromFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64) __ptr64" ?ReadRtfFromFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z
0x180029DE0: "__vectorcall ??_R0?AVCPredefinedMpHeapsHolder@CommonUtil@" ??_R0?AVCPredefinedMpHeapsHolder@CommonUtil@@@8
0x18001DD98: "__cdecl _imp_PathCombineW" __imp_PathCombineW
0x18001EE60: "no message available" ??_C@_0BF@PBGGPKKE@no?5message?5available?$AA@
0x180012450: "protected: virtual int __cdecl MorroCommon::CWin32::FreeLibraryImpl(struct HINSTANCE__ * __ptr64) __ptr64" ?FreeLibraryImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@@Z
0x180014DC8: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEAAX_K@Z
0x180026B04: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180029290: "__vectorcall ??_R0?AVerror_category@std@" ??_R0?AVerror_category@std@@@8
0x180023680: "__cdecl tls_start" _tls_start
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::QueryObjectSink(long,struct IWbemObjectSink * __ptr64 * __ptr64) __ptr64" ?QueryObjectSink@IWbemInstProviderImpl@ATL@@UEAAJJPEAPEAUIWbemObjectSink@@@Z
0x180005880: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegObject@ATL@@UEAAPEAXI@Z
0x180002F40: "public: __cdecl ATL::CComPtr<struct IWbemPath>::~CComPtr<struct IWbemPath>(void) __ptr64" ??1?$CComPtr@UIWbemPath@@@ATL@@QEAA@XZ
0x18001FE78: "AntivirusSignatureAge" ??_C@_1CM@INFONEKL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x1800200E8: WPP_293d76f92c0f3b94aeb3cef6d67d60b3_Traceguids
0x180002530: "public: virtual bool __cdecl std::error_category::equivalent(class std::error_code const & __ptr64,int)const __ptr64" ?equivalent@error_category@std@@UEBA_NAEBVerror_code@2@H@Z
0x18001E170: "__cdecl _xl_z" __xl_z
0x18001CC98: "const ATL::CProviderHelper::`vftable'" ??_7CProviderHelper@ATL@@6B@
0x18001DBD0: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18001FBC8: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180021D80: "__vectorcall ??_R2IWbemServices" ??_R2IWbemServices@@8
0x180026A64: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180022150: "__vectorcall ??_R3IWbemServices" ??_R3IWbemServices@@8
0x1800134A0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetDriveTypeImpl(unsigned short const * __ptr64) __ptr64" ?GetDriveTypeImpl@CWin32@MorroCommon@@MEAAIPEBG@Z
0x180012230: "protected: virtual int __cdecl MorroCommon::CWin32::CopyFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?CopyFileImpl@CWin32@MorroCommon@@MEAAHPEBG0H@Z
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x18001F578: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001F190: "Delete" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x18001C9A0: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x1800295C8: "__vectorcall ??_R0?AUIClassFactory@" ??_R0?AUIClassFactory@@@8
0x18001D968: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800034F0: "public: __cdecl ATL::CInstanceProviderHelper::CInstanceProviderHelper(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64) __ptr64" ??0CInstanceProviderHelper@ATL@@QEAA@PEAUIWbemServices@@PEAUIWbemContext@@@Z
0x18001DAC0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18001D950: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x18001F178: "NoRemove" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x18001DC58: "__cdecl _imp_GetLongPathNameW" __imp_GetLongPathNameW
0x18001EAF0: "network_reset" ??_C@_0O@EHNDLHIG@network_reset?$AA@
0x18001F320: "unknown error" ??_C@_0O@BFJCFAAK@unknown?5error?$AA@
0x180017B9C: "public: static long __cdecl MpCommonEx::CPathUtilsEx::CombinePath(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?CombinePath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAGPEBG1@Z
0x18000BAF8: "long __cdecl Microsoft::SecurityClient::InitializeMpClientApi(void)" ?InitializeMpClientApi@SecurityClient@Microsoft@@YAJXZ
0x180010830: "long __cdecl CommonUtil::UtilRawGetLoadedKernel32ProcAddress(__int64 (__cdecl* * __ptr64)(void),char const * __ptr64,bool)" ?UtilRawGetLoadedKernel32ProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBD_N@Z
0x1800129C0: "protected: virtual int __cdecl MorroCommon::CWin32::RemoveDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?RemoveDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18000FD44: "long __cdecl CommonUtil::NewSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?NewSprintfW@CommonUtil@@YAJPEAPEAGPEBGZZ
0x180005C90: "public: virtual long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@UEAAJPEBG0@Z
0x180017970: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`scalar deleting destructor'(unsigned int) __ptr64" ??_GILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18001CFC0: "const ATL::CWin32Heap::`vftable'" ??_7CWin32Heap@ATL@@6B@
0x18001DDC0: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x18001E050: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x18001D8A8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180029768: "__vectorcall ??_R0?AVCAtlModule@ATL@" ??_R0?AVCAtlModule@ATL@@@8
0x18001D478: "const MorroCommon::ILockedCertCheck::`vftable'" ??_7ILockedCertCheck@MorroCommon@@6B@
0x18001E0A8: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x18000279C: "public: __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::CDetectionWbemCreator(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64) __ptr64" ??0CDetectionWbemCreator@SecurityClient@Microsoft@@QEAA@PEAUIWbemServices@@PEAUIWbemContext@@@Z
0x18001DCB8: "__cdecl _imp_GlobalFindAtomW" __imp_GlobalFindAtomW
0x1800200D8: "__cdecl GUID_44aca674_e8fc_11d0_a07c_00c04fb68820" _GUID_44aca674_e8fc_11d0_a07c_00c04fb68820
0x180019930: "__cdecl ValidateImageBase" _ValidateImageBase
0x180021AB0: "__vectorcall ??_R3_Generic_error_category@std" ??_R3_Generic_error_category@std@@8
0x180021978: "__vectorcall ??_R2_Generic_error_category@std" ??_R2_Generic_error_category@std@@8
0x180023040: "const MorroCommon::CCertCheckFactory::`RTTI Complete Object Locator'" ??_R4CCertCheckFactory@MorroCommon@@6B@
0x1800296A0: "__vectorcall ??_R0?AVEHresultException@MorroCommon@" ??_R0?AVEHresultException@MorroCommon@@@8
0x18001FE50: "LastQuickScanAge" ??_C@_1CC@FBDLNMLE@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x180020000: "{" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x18001D9D8: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180019818: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x1800079D4: "long __cdecl MpSmartConfigInitialize(struct MpConfigLibraryType * __ptr64 * __ptr64)" ?MpSmartConfigInitialize@@YAJPEAPEAUMpConfigLibraryType@@@Z
0x18001F048: "text file busy" ??_C@_0P@IPFDMIFL@text?5file?5busy?$AA@
0x180002F70: "public: __cdecl CommonUtil::AutoRef<struct IWbemClassObject>::~AutoRef<struct IWbemClassObject>(void) __ptr64" ??1?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAA@XZ
0x1800037E4: WPP_SF_SDSSqqq
0x18001CAD8: "const ATL::CComObject<class CInfectionStateClass>::`vftable'{for `IWbemProviderInit'}" ??_7?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemProviderInit@@@
0x1800298C0: "__vectorcall ??_R0?AV?$CComObject@VCMpProviderClass@@@ATL@" ??_R0?AV?$CComObject@VCMpProviderClass@@@ATL@@@8
0x180012CC0: "protected: virtual int __cdecl MorroCommon::CWin32::ChangeServiceConfigImpl(struct SC_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?ChangeServiceConfigImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KKKPEBG1PEAK1111@Z
0x18001D930: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x180022818: "const CMpProviderModule::`RTTI Complete Object Locator'" ??_R4CMpProviderModule@@6B@
0x18001F530: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x180020008: WPP_96c2db06e5a03b9c99a3d5391a49746a_Traceguids
0x18001EC70: "bad file descriptor" ??_C@_0BE@MPJPGCEO@bad?5file?5descriptor?$AA@
0x180003B70: "public: virtual __cdecl CInfectionStateClass::~CInfectionStateClass(void) __ptr64" ??1CInfectionStateClass@@UEAA@XZ
0x18001F800: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x1800222C8: "__vectorcall ??_R1A@?0A@EA@IClassFactory" ??_R1A@?0A@EA@IClassFactory@@8
0x180026AA0: "__cdecl _IMPORT_DESCRIPTOR_WTSAPI32" __IMPORT_DESCRIPTOR_WTSAPI32
0x18001DDE8: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x180021D00: "__vectorcall ??_R2IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R2IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x1800220D8: "__vectorcall ??_R3IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R3IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x180022CD0: "__vectorcall ??_R1A@?0A@EA@CMpProviderEventLogger@SecurityClient@Microsoft" ??_R1A@?0A@EA@CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x1800128B0: "protected: virtual int __cdecl MorroCommon::CWin32::TerminateProcessImpl(void * __ptr64,unsigned int) __ptr64" ?TerminateProcessImpl@CWin32@MorroCommon@@MEAAHPEAXI@Z
0x1800170B4: "public: static long __cdecl MorroCommon::CCertCheck::IsMicrosoftCert(unsigned short const * __ptr64,void * __ptr64)" ?IsMicrosoftCert@CCertCheck@MorroCommon@@SAJPEBGPEAX@Z
0x1800207F0: "SOFTWARE\Microsoft\Microsoft Sec" ??_C@_1FK@OKJMJONP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc@
0x18001DAB0: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x180022370: "__vectorcall ??_R1A@?0A@EA@CComObjectRootBase@ATL" ??_R1A@?0A@EA@CComObjectRootBase@ATL@@8
0x180001860: WPP_SF_
0x180011E20: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Allocate(unsigned __int64) __ptr64" ?Allocate@CWin32Heap@ATL@@UEAAPEAX_K@Z
0x18001FF00: "LastFullScanSource" ??_C@_1CG@OLBBDEH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180026AF0: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x18001F518: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x18001DB60: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180014F28: "private: void __cdecl ATL::CSimpleStringT<char,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x180026A78: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x180013340: "protected: virtual __int64 (__cdecl*__cdecl MorroCommon::CWin32::GetProcAddressImpl(struct HINSTANCE__ * __ptr64,char const * __ptr64) __ptr64)(void)" ?GetProcAddressImpl@CWin32@MorroCommon@@MEAAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x18001D9F0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18001EF68: "operation not supported" ??_C@_0BI@LNEGIFLN@operation?5not?5supported?$AA@
0x1800201A8: WPP_cc33a21dc7b8337d8ea502ecc58ea06a_Traceguids
0x18001D9F8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180016B5C: "private: long __cdecl MorroCommon::CWPPTrace::SetTracingEnabled(bool) __ptr64" ?SetTracingEnabled@CWPPTrace@MorroCommon@@AEAAJ_N@Z
0x18001DB80: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001DCA0: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x1800208D0: "VerQueryValueW" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x180029170: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180021958: "__vectorcall ??_R2_Iostream_error_category@std" ??_R2_Iostream_error_category@std@@8
0x180021A98: "__vectorcall ??_R3_Iostream_error_category@std" ??_R3_Iostream_error_category@std@@8
0x180018348: "public: virtual __cdecl MpCommonEx::CEventLoggerBase::~CEventLoggerBase(void) __ptr64" ??1CEventLoggerBase@MpCommonEx@@UEAA@XZ
0x1800290D0: "public: static class std::_Iostream_error_category std::_Error_objects<int>::_Iostream_object" ?_Iostream_object@?$_Error_objects@H@std@@2V_Iostream_error_category@2@A
0x18001DAE0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x18001DB88: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x180019848: "public: __cdecl exception::exception(void) __ptr64" ??0exception@@QEAA@XZ
0x18001EEE8: "not a directory" ??_C@_0BA@DOCPFFJG@not?5a?5directory?$AA@
0x180012710: "protected: virtual int __cdecl MorroCommon::CWin32::SetWindowTextImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetWindowTextImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG@Z
0x180014D30: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Left(int)const __ptr64" ?Left@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@H@Z
0x18001D928: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x1800190E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180021BF8: "const CommonUtil::CRefObject::`RTTI Complete Object Locator'" ??_R4CRefObject@CommonUtil@@6B@
0x1800163C0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32FilePathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32FilePathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180011EC0: "public: virtual unsigned __int64 __cdecl ATL::CWin32Heap::GetSize(void * __ptr64) __ptr64" ?GetSize@CWin32Heap@ATL@@UEAA_KPEAX@Z
0x180021A40: "__vectorcall ??_R1A@?0A@EA@error_category@std" ??_R1A@?0A@EA@error_category@std@@8
0x18001DF78: "__cdecl _imp__initterm" __imp__initterm
0x18001DC10: "__cdecl _imp_GetDiskFreeSpaceExW" __imp_GetDiskFreeSpaceExW
0x180020360: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x18002A908: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4HA
0x18002A898: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4HA
0x18002A8B0: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4HA
0x180002560: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Generic_error_category::message(int)const __ptr64" ?message@_Generic_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18000A678: "public: struct _SYSTEMTIME __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToSystemTime(void)const __ptr64" ?ToSystemTime@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AU_SYSTEMTIME@@XZ
0x18001DC60: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateClassEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateClassEnum@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18002A930: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4HA
0x180006114: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG@Z
0x18001DD50: "__cdecl _imp_SHGetSpecialFolderLocation" __imp_SHGetSpecialFolderLocation
0x1800229E8: "const ATL::CComObject<class CMpProviderClass>::`RTTI Complete Object Locator'{for `IWbemProviderInit'}" ??_R4?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemProviderInit@@@
0x180022270: "__vectorcall ??_R1A@?0A@EA@CComClassFactory@ATL" ??_R1A@?0A@EA@CComClassFactory@ATL@@8
0x180029B18: "__vectorcall ??_R0?AVCHResultExceptionImpl@CommonUtil@" ??_R0?AVCHResultExceptionImpl@CommonUtil@@@8
0x180015EB0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleNameImpl(void) __ptr64" ?GetCurrentModuleNameImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18002A950: "public: static class std::locale::id std::num_put<unsigned short,class std::back_insert_iterator<class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > > >::id" ?id@?$num_put@GV?$back_insert_iterator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@std@@@std@@2V0locale@2@A
0x18001E0A0: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18000FA8C: "public: virtual __cdecl CommonUtil::CHResultExceptionImpl::~CHResultExceptionImpl(void) __ptr64" ??1CHResultExceptionImpl@CommonUtil@@UEAA@XZ
0x18001FBA0: "AntispywareEnabled" ??_C@_1CG@PABCPGPL@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001DA68: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180012210: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameImpl@CWin32@MorroCommon@@MEAAKPEAUHINSTANCE__@@PEAGK@Z
0x18000663C: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x180020680: WPP_d39b67cfd2de3a126bf0d63b9c5e92c2_Traceguids
0x18002A648: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_antimalwareServiceLogLocation" ?m_antimalwareServiceLogLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x18001B980: "void __cdecl `public: static class CWPPTrace::Instance & __ptr64 __cdecl MorroCommon::CWPPTrace::Instance(void)'::`2'::Finstance::`dynamic atexit destructor for '(void)" ??__Finstance@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV12@XZ@YAXXZ
0x1800222B0: "__vectorcall ??_R3IClassFactory" ??_R3IClassFactory@@8
0x180022298: "__vectorcall ??_R2IClassFactory" ??_R2IClassFactory@@8
0x180026778: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1800066E8: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x1800197A0: "__cdecl recalloc" _recalloc
0x180009EFC: "public: __cdecl CommonUtil::CAutoUniquePtr<class ATL::CImpersonateClientHelper,void>::~CAutoUniquePtr<class ATL::CImpersonateClientHelper,void>(void) __ptr64" ??1?$CAutoUniquePtr@VCImpersonateClientHelper@ATL@@X@CommonUtil@@QEAA@XZ
0x18001F980: "Component Categories" ??_C@_1CK@OEKPKBNA@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18001DB98: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180020260: "MpConfigInitialize" ??_C@_0BD@BNECPIGO@MpConfigInitialize?$AA@
0x18001F708: "PendingOfflineScan" ??_C@_1CG@LGCIEEGE@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18001980C: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x180020198: WPP_ae6ddf61721e377a51c0488cf434dc50_Traceguids
0x180029410: "__vectorcall ??_R0?AVIDetectionItemSizeCalculator@SecurityClient@Microsoft@" ??_R0?AVIDetectionItemSizeCalculator@SecurityClient@Microsoft@@@8
0x18001DCA8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x18001D438: "const MorroCommon::CCertCheckFactory::`vftable'" ??_7CCertCheckFactory@MorroCommon@@6B@
0x180022F00: "const CommonUtil::CHResultException::`RTTI Complete Object Locator'" ??_R4CHResultException@CommonUtil@@6B@
0x18000B3F4: "struct ATL::ATLSTRINGRESOURCEIMAGE const * __ptr64 __cdecl ATL::_AtlGetStringResourceImage(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64,unsigned int)" ?_AtlGetStringResourceImage@ATL@@YAPEBUATLSTRINGRESOURCEIMAGE@1@PEAUHINSTANCE__@@PEAUHRSRC__@@I@Z
0x18001E8D8: "cross device link" ??_C@_0BC@PPHBOELF@cross?5device?5link?$AA@
0x180026798: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x180005610: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAKXZ
0x18000B578: "public: __cdecl Microsoft::SecurityClient::CMpClientApi::CMpClientApi(void) __ptr64" ??0CMpClientApi@SecurityClient@Microsoft@@QEAA@XZ
0x18001D958: CRYPT32_NULL_THUNK_DATA
0x18000D5D8: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_N_K@Z
0x1800056D0: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x18000AAE0: "public: static class MorroCommon::CWPPTrace & __ptr64 __cdecl MorroCommon::CWPPTrace::Instance(void)" ?Instance@CWPPTrace@MorroCommon@@SAAEAV12@XZ
0x180020860: WPP_197294aab8103b8a0631898ae3d03ea3_Traceguids
0x18000F808: "public: __cdecl CommonUtil::CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CStdPtrContainerSeq@V?$CStdVector@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x180020588: "forwarders\%ws" ??_C@_1BO@GFOANKMI@?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180015C50: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleParnetDirectoryImpl(void) __ptr64" ?GetCurrentModuleParnetDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18001FA08: "SAM" ??_C@_17OMAOINJK@?$AAS?$AAA?$AAM?$AA?$AA@
0x18001DDB0: SHLWAPI_NULL_THUNK_DATA
0x18001F550: "__ExtendedStatus" ??_C@_1CC@BDPEAPKB@?$AA_?$AA_?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800132B0: "protected: virtual int __cdecl MorroCommon::CWin32::WTSEnumerateSessionsImpl(void * __ptr64,unsigned long,unsigned long,struct _WTS_SESSION_INFOW * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSEnumerateSessionsImpl@CWin32@MorroCommon@@MEAAHPEAXKKPEAPEAU_WTS_SESSION_INFOW@@PEAK@Z
0x1800126C0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetSystemDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetSystemDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x18002A9E8: "__cdecl _onexitend" __onexitend
0x1800035B8: "public: long __cdecl ATL::CInstanceProviderHelper::CheckInstancePath(struct IClassFactory * __ptr64,unsigned short * __ptr64 const,unsigned short * __ptr64 const,unsigned __int64) __ptr64" ?CheckInstancePath@CInstanceProviderHelper@ATL@@QEAAJPEAUIClassFactory@@QEAG1_K@Z
0x18001DC68: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18001D870: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18001F818: "HKPD" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x180023120: "__vectorcall ??_R3ILockedCertCheck@MorroCommon" ??_R3ILockedCertCheck@MorroCommon@@8
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecMethod(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?ExecMethod@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAPEAU4@PEAPEAUIWbemCallResult@@@Z
0x1800230A8: "__vectorcall ??_R2ILockedCertCheck@MorroCommon" ??_R2ILockedCertCheck@MorroCommon@@8
0x1800079A0: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x180029C10: "__vectorcall ??_R0PEAVEHresultException@MorroCommon@" ??_R0PEAVEHresultException@MorroCommon@@@8
0x18001ED30: "executable format error" ??_C@_0BI@BNCLIGPB@executable?5format?5error?$AA@
0x180019A57: "__cdecl unlock" _unlock
0x18000683C: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x18001DDA8: "__cdecl _imp_PathIsDirectoryW" __imp_PathIsDirectoryW
0x18002A460: "class CMpProviderModule _AtlModule" ?_AtlModule@@3VCMpProviderModule@@A
0x18000CB60: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpProviderEventLogger@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18001FFA0: "__cdecl GUID_8a696d12_576b_422e_9712_01b9dd84b446" _GUID_8a696d12_576b_422e_9712_01b9dd84b446
0x18001E0B8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800133C0: "protected: virtual int __cdecl MorroCommon::CWin32::GetProductInfoImpl(unsigned long * __ptr64) __ptr64" ?GetProductInfoImpl@CWin32@MorroCommon@@MEAAHPEAK@Z
0x18000CFB4: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogHealthStateGenericError(long) __ptr64" ?LogHealthStateGenericError@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXJ@Z
0x18001DE30: "__cdecl _imp_IsDialogMessageW" __imp_IsDialogMessageW
0x1800126A0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetWindowsDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetWindowsDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x18001DFB0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180029B50: "__vectorcall ??_R0?AVCHResultException@CommonUtil@" ??_R0?AVCHResultException@CommonUtil@@@8
0x1800193D0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18001DD58: "__cdecl _imp_SHGetPathFromIDListW" __imp_SHGetPathFromIDListW
0x18001DA80: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18001F584: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18001DC30: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x18001D978: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001EF28: "not supported" ??_C@_0O@NHEDABJP@not?5supported?$AA@
0x1800185B8: "long __cdecl CommonUtil::MpSetWindowsVersionInfoImpl(void)" ?MpSetWindowsVersionInfoImpl@CommonUtil@@YAJXZ
0x18001D4B8: "const CommonUtil::CPtrObjectProcessHeap::`vftable'" ??_7CPtrObjectProcessHeap@CommonUtil@@6B@
0x180003438: "protected: virtual __cdecl CommonUtil::CRefObject::~CRefObject(void) __ptr64" ??1CRefObject@CommonUtil@@MEAA@XZ
0x1800047EC: "private: void __cdecl CInfectionStateClass::InitializeInstance(struct IWbemClassObject * __ptr64) __ptr64" ?InitializeInstance@CInfectionStateClass@@AEAAXPEAUIWbemClassObject@@@Z
0x18001DE58: USER32_NULL_THUNK_DATA
0x18001FAE0: "OnAccessProtectionEnabled" ??_C@_1DE@IGHAHFFO@?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180022D78: "const Microsoft::SecurityClient::CMpProviderEventLogger::`RTTI Complete Object Locator'{for `CommonUtil::CRefObject'}" ??_R4CMpProviderEventLogger@SecurityClient@Microsoft@@6BCRefObject@CommonUtil@@@
0x18000DD34: "public: unsigned long __cdecl Microsoft::SecurityClient::CInfectionStateConfig::GetMaxDetectionsAllowed(void)const __ptr64" ?GetMaxDetectionsAllowed@CInfectionStateConfig@SecurityClient@Microsoft@@QEBAKXZ
0x180004D0C: "public: __cdecl Microsoft::SecurityClient::CInfectionState::~CInfectionState(void) __ptr64" ??1CInfectionState@SecurityClient@Microsoft@@QEAA@XZ
0x18001CF48: "const Microsoft::SecurityClient::CDetectionItem::`vftable'" ??_7CDetectionItem@SecurityClient@Microsoft@@6B@
0x180020278: "MpConfigUninitialize" ??_C@_0BF@DIIDBCDO@MpConfigUninitialize?$AA@
0x18001D808: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18001ED10: "destination address required" ??_C@_0BN@KDMIFEIP@destination?5address?5required?$AA@
0x18001F780: "__cdecl GUID_1be41572_91dd_11d1_aeb2_00c04fb68820" _GUID_1be41572_91dd_11d1_aeb2_00c04fb68820
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutClass(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutClass@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x18001D838: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18001DC78: "__cdecl _imp_GetPrivateProfileStringW" __imp_GetPrivateProfileStringW
0x18001DE60: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x18001E7E0: "device or resource busy" ??_C@_0BI@NGCEHDD@device?5or?5resource?5busy?$AA@
0x18001CAA0: "const std::error_category::`vftable'" ??_7error_category@std@@6B@
0x18001E058: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18002A888: "private: static class MorroCommon::CFileUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@0PEAVCFileUtils@2@EA
0x180005130: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x18000F5C0: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionItem::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionItem@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180020220: "MpManagerStatusQuery" ??_C@_0BF@NGGLNLB@MpManagerStatusQuery?$AA@
0x180012660: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LocalFreeImpl(void * __ptr64) __ptr64" ?LocalFreeImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x180012800: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentProcessIdImpl(void) __ptr64" ?GetCurrentProcessIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x180029E40: "__cdecl Init_global_epoch" _Init_global_epoch
0x1800145A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceRawImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?LoadResourceRawImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0PEAPEAEPEA_K@Z
0x18001EB60: "operation_not_supported" ??_C@_0BI@ICEIDKLJ@operation_not_supported?$AA@
0x18001E150: "__cdecl _xi_a" __xi_a
0x180016ACC: "public: long __cdecl MorroCommon::CWPPTrace::StopLog(void) __ptr64" ?StopLog@CWPPTrace@MorroCommon@@QEAAJXZ
0x1800131A0: "protected: virtual void __cdecl MorroCommon::CWin32::GetNativeSystemInfoImpl(struct _SYSTEM_INFO * __ptr64) __ptr64" ?GetNativeSystemInfoImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEM_INFO@@@Z
0x18001E960: "address_family_not_supported" ??_C@_0BN@LCBDHODA@address_family_not_supported?$AA@
0x18001DB00: "__cdecl _imp_GetNativeSystemInfo" __imp_GetNativeSystemInfo
0x1800221D0: "const ATL::CComObject<class CInfectionStateClass>::`RTTI Complete Object Locator'{for `IWbemServices'}" ??_R4?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemServices@@@
0x180012310: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteKeyImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x1800128D0: "protected: virtual int __cdecl MorroCommon::CWin32::MessageBoxImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int) __ptr64" ?MessageBoxImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG1I@Z
0x18001F908: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18001D9B8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18001DD40: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x180023188: "const MpCommonEx::CEventLoggerBase::`RTTI Complete Object Locator'" ??_R4CEventLoggerBase@MpCommonEx@@6B@
0x180029328: "__vectorcall ??_R0?AV?$CComObject@VCInfectionStateClass@@@ATL@" ??_R0?AV?$CComObject@VCInfectionStateClass@@@ATL@@@8
0x180005660: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180010730: "long __cdecl CommonUtil::UtilExpandEnvironmentStrings(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilExpandEnvironmentStrings@CommonUtil@@YAJPEAPEAGPEBG@Z
0x18001CCE0: "const ATL::CComObject<class CMpProviderClass>::`vftable'{for `IWbemProviderInit'}" ??_7?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemProviderInit@@@
0x18001CFF0: "const MorroCommon::CWin32::`vftable'" ??_7CWin32@MorroCommon@@6B@
0x18001DF58: "__cdecl _imp__unlock" __imp__unlock
0x180011B80: MpInvokeExitDestruction
0x18002A400: "long (__cdecl* __ptr64 ATL::_pPerfRegFunc)(struct HINSTANCE__ * __ptr64)" ?_pPerfRegFunc@ATL@@3P6AJPEAUHINSTANCE__@@@ZEA
0x18000D4C8: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x18001DD08: "__cdecl _imp_SafeArrayDestroy" __imp_SafeArrayDestroy
0x18001F958: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x180013DE0: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadSystemLibraryImpl(unsigned short const * __ptr64,struct HINSTANCE__ * __ptr64 & __ptr64) __ptr64" ?SafeLoadSystemLibraryImpl@CFileUtils@MorroCommon@@MEAAJPEBGAEAPEAUHINSTANCE__@@@Z
0x18001F9F8: "Mime" ??_C@_19HLLLM@?$AAM?$AAi?$AAm?$AAe?$AA?$AA@
0x18001F898: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180002FB4: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_N_K@Z
0x18001E090: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000DD4C: WPP_SF_DI
0x18001DCE0: "__cdecl _imp_VarBstrCat" __imp_VarBstrCat
0x180010F58: "long __cdecl CommonUtil::UtilRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegGetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAKPEA_KPEAX@Z
0x180008CE0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x1800208A0: "GetFileVersionInfoW" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x1800267C0: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x18001DE48: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x18000FF74: WPP_SF_Dd
0x18000F2AC: WPP_SF_DD
0x18000AB70: WPP_SF_dd
0x180022168: "__vectorcall ??_R3?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R3?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x180021D98: "__vectorcall ??_R2?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R2?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x18001DE18: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x1800224B0: "__vectorcall ??_R1A@?0A@EA@IRegistrarBase" ??_R1A@?0A@EA@IRegistrarBase@@8
0x180020788: "%c:\" ??_C@_19MPFPGMJE@?$AA?$CF?$AAc?$AA?3?$AA?2?$AA?$AA@
0x180016DF0: "private: static long __cdecl MorroCommon::CCertCheck::HrWinVerifyTrust(struct HWND__ * __ptr64,struct _GUID * __ptr64,struct _WINTRUST_DATA * __ptr64)" ?HrWinVerifyTrust@CCertCheck@MorroCommon@@CAJPEAUHWND__@@PEAU_GUID@@PEAU_WINTRUST_DATA@@@Z
0x18001D850: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18000A26C: WPP_SF_DS
0x180009B10: WPP_SF_dS
0x180019A88: "__cdecl invoke_watson" _invoke_watson
0x180005110: "public: virtual long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180021B08: "const std::_System_error_category::`RTTI Complete Object Locator'" ??_R4_System_error_category@std@@6B@
0x1800290C0: WPP_GLOBAL_Control
0x180020290: "MpConfigOpen" ??_C@_0N@MMCCAMHH@MpConfigOpen?$AA@
0x180012FE0: "protected: virtual int __cdecl MorroCommon::CWin32::PostThreadMessageImpl(unsigned long,unsigned int,unsigned __int64,__int64) __ptr64" ?PostThreadMessageImpl@CWin32@MorroCommon@@MEAAHKI_K_J@Z
0x18001FA70: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001DDA0: "__cdecl _imp_PathMatchSpecW" __imp_PathMatchSpecW
0x1800052A4: "public: __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::~vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >(void) __ptr64" ??1?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAA@XZ
0x180018E00: "void __cdecl std::_Xlength_error(char const * __ptr64)" ?_Xlength_error@std@@YAXPEBD@Z
0x18002A868: "public: static struct _GUID ATL::CAtlModule::m_libid" ?m_libid@CAtlModule@ATL@@2U_GUID@@A
0x18001F220: "CLSID\" ??_C@_1O@FHBGLCIO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x180022C98: "__vectorcall ??_R2CEventLoggerBase@MpCommonEx" ??_R2CEventLoggerBase@MpCommonEx@@8
0x180022D20: "__vectorcall ??_R3CEventLoggerBase@MpCommonEx" ??_R3CEventLoggerBase@MpCommonEx@@8
0x1800014C4: WPP_SF_D
0x1800014C4: WPP_SF_d
0x18001D9C8: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x1800195C8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18002AA00: "__cdecl pRawDllMain" _pRawDllMain
0x180012680: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeProcessImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x180029700: "__vectorcall ??_R0?AUIRegistrarBase@" ??_R0?AUIRegistrarBase@@@8
0x18000FA80: "public: virtual char const * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::what(void)const __ptr64" ?what@CHResultExceptionImpl@CommonUtil@@UEBAPEBDXZ
0x18001DF68: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180020668: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180012990: "protected: virtual int __cdecl MorroCommon::CWin32::FindNextFileImpl(void * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindNextFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_WIN32_FIND_DATAW@@@Z
0x18001E820: "invalid argument" ??_C@_0BB@FCMFBGOM@invalid?5argument?$AA@
0x18000C678: MpThreatOpen
0x18000C24C: MpConfigUninitialize
0x180002308: "public: __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>::~CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>(void) __ptr64" ??1?$CAtlSafeAllocBufferManager@VCCRTAllocator@ATL@@@_ATL_SAFE_ALLOCA_IMPL@ATL@@QEAA@XZ
0x180012780: "protected: virtual int __cdecl MorroCommon::CWin32::GetTokenInformationImpl(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetTokenInformationImpl@CWin32@MorroCommon@@MEAAHPEAXW4_TOKEN_INFORMATION_CLASS@@0KPEAK@Z
0x180001C30: DllUnregisterServer
0x18001DCB0: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800204B8: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x180011E40: "public: virtual void __cdecl ATL::CWin32Heap::Free(void * __ptr64) __ptr64" ?Free@CWin32Heap@ATL@@UEAAXPEAX@Z
0x18001DF50: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18001DD20: "__cdecl _imp_VariantClear" __imp_VariantClear
0x18002A560: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180009F2C: "public: __cdecl Microsoft::SecurityClient::CEnsureImpersonationLevel::~CEnsureImpersonationLevel(void) __ptr64" ??1CEnsureImpersonationLevel@SecurityClient@Microsoft@@QEAA@XZ
0x18001FFFC: "}" ??_C@_13EHOOFIKC@?$AA?$HN?$AA?$AA@
0x1800129F0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::HeapAllocImpl(void * __ptr64,unsigned long,unsigned __int64) __ptr64" ?HeapAllocImpl@CWin32@MorroCommon@@MEAAPEAXPEAXK_K@Z
0x180016D08: "long __cdecl MorroCommon::HrCreateGuid(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64)" ?HrCreateGuid@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x1800186E0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CPtrObjectProcessHeap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPtrObjectProcessHeap@CommonUtil@@MEAAPEAXI@Z
0x1800059B0: "public: virtual long __cdecl ATL::CRegObject::ClearReplacements(void) __ptr64" ?ClearReplacements@CRegObject@ATL@@UEAAJXZ
0x180021F88: "__vectorcall ??_R17?0A@EA@IWbemProviderInit" ??_R17?0A@EA@IWbemProviderInit@@8
0x18001DBF0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x180014F7C: "private: void __cdecl ATL::CSimpleStringT<char,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x180008D90: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180029D08: "__vectorcall ??_R0?AVCLockedCertCheckImpl@MorroCommon@" ??_R0?AVCLockedCertCheckImpl@MorroCommon@@@8
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x1800126E0: "protected: virtual int __cdecl MorroCommon::CWin32::GetDiskFreeSpaceExImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetDiskFreeSpaceExImpl@CWin32@MorroCommon@@MEAAHPEBGPEAT_ULARGE_INTEGER@@11@Z
0x180005720: "public: __cdecl ATL::CComCriticalSection::~CComCriticalSection(void) __ptr64" ??1CComCriticalSection@ATL@@QEAA@XZ
0x180020558: "hr=0x%08X" ??_C@_09PANKGPKN@hr?$DN0x?$CF08X?$AA@
0x18001DF30: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x18001DA30: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180022120: "__vectorcall ??_R3IWbemInstProviderImpl@ATL" ??_R3IWbemInstProviderImpl@ATL@@8
0x180021D38: "__vectorcall ??_R2IWbemInstProviderImpl@ATL" ??_R2IWbemInstProviderImpl@ATL@@8
0x18001F1B0: WPP_8c30319661453c8dbbd2680ff45b1eca_Traceguids
0x18001C9E8: "const CommonUtil::CRefObject::`vftable'" ??_7CRefObject@CommonUtil@@6B@
0x18000F28C: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>::~CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>(void) __ptr64" ??1?$CUniqueHandle@UCAutoCloseRegistryKey@CommonUtil@@@CommonUtil@@QEAA@XZ
0x1800232C8: "__vectorcall ??_R17?0A@EA@CPtrObject@CommonUtil" ??_R17?0A@EA@CPtrObject@CommonUtil@@8
0x18001C9B0: "const type_info::`vftable'" ??_7type_info@@6B@
0x18001DE80: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x180026858: "__cdecl CTA3?AVCHResultExceptionImpl@CommonUtil@@" _CTA3?AVCHResultExceptionImpl@CommonUtil@@
0x18002A958: "public: static class std::locale::id std::numpunct<unsigned short>::id" ?id@?$numpunct@G@std@@2V0locale@2@A
0x1800053B8: "public: void __cdecl std::_Wrap_alloc<class std::allocator<unsigned short * __ptr64> >::deallocate(unsigned short * __ptr64 * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@PEAG@std@@@std@@QEAAXPEAPEAG_K@Z
0x180022928: "__vectorcall ??_R1EI@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R1EI@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18001DBC0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001FD40: "AntispywareSignatureVersion" ??_C@_1DI@HLNKHDIG@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18001DF18: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180021A18: "__vectorcall ??_R1A@?0A@EA@_Generic_error_category@std" ??_R1A@?0A@EA@_Generic_error_category@std@@8
0x180019390: "__cdecl _security_check_cookie" __security_check_cookie
0x18002A87C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18001E148: "__cdecl _xc_z" __xc_z
0x1800130E0: "protected: virtual long __cdecl MorroCommon::CWin32::ProcessIdToSessionIdImpl(unsigned long,unsigned long * __ptr64) __ptr64" ?ProcessIdToSessionIdImpl@CWin32@MorroCommon@@MEAAJKPEAK@Z
0x180012760: "protected: virtual int __cdecl MorroCommon::CWin32::OpenProcessTokenImpl(void * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?OpenProcessTokenImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAPEAX@Z
0x180020568: WPP_d9331a28cdf9347a3f7ce0b108860eb4_Traceguids
0x18001DA20: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001D858: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x18001CF38: "const Microsoft::SecurityClient::CMpProviderEventLogger::`vftable'{for `CommonUtil::CRefObject'}" ??_7CMpProviderEventLogger@SecurityClient@Microsoft@@6BCRefObject@CommonUtil@@@
0x180018280: WPP_SF_qdhdd
0x180021B30: "const std::_Iostream_error_category::`RTTI Complete Object Locator'" ??_R4_Iostream_error_category@std@@6B@
0x1800121D0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetTempFileNameImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64) __ptr64" ?GetTempFileNameImpl@CWin32@MorroCommon@@MEAAIPEBG0IPEAG@Z
0x180012250: "protected: virtual long __cdecl MorroCommon::CWin32::RegCreateKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?RegCreateKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKPEAGKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x1800266A0: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x180022480: "__vectorcall ??_R2IRegistrarBase" ??_R2IRegistrarBase@@8
0x180022498: "__vectorcall ??_R3IRegistrarBase" ??_R3IRegistrarBase@@8
0x180012910: "protected: virtual struct HRSRC__ * __ptr64 __cdecl MorroCommon::CWin32::FindResourceImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindResourceImpl@CWin32@MorroCommon@@MEAAPEAUHRSRC__@@PEAUHINSTANCE__@@PEBG1@Z
0x180022A68: "__vectorcall ??_R1A@?0A@EA@bad_alloc@std" ??_R1A@?0A@EA@bad_alloc@std@@8
0x18001DEB0: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x18000B1F4: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Empty(void) __ptr64" ?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
0x180003268: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K0@Z
0x18001EE88: "no protocol option" ??_C@_0BD@EAMBFIDF@no?5protocol?5option?$AA@
0x180011FE8: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
0x180023160: "const MorroCommon::ILockedCertCheck::`RTTI Complete Object Locator'" ??_R4ILockedCertCheck@MorroCommon@@6B@
0x180019824: "__cdecl CxxThrowException" _CxxThrowException
0x18001D4C0: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x180020320: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x18001DF70: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180020150: "%04u-%02u-%02uT%02u:%02u:%02u.%0" ??_C@_1EI@DJAEAGOL@?$AA?$CF?$AA0?$AA4?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAu?$AAT?$AA?$CF?$AA0?$AA2?$AAu?$AA?3?$AA?$CF?$AA0?$AA2?$AAu?$AA?3?$AA?$CF?$AA0?$AA2?$AAu?$AA?4?$AA?$CF?$AA0@
0x180022C60: "__vectorcall ??_R3CMpClientApi@SecurityClient@Microsoft" ??_R3CMpClientApi@SecurityClient@Microsoft@@8
0x18002A451: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils> MorroCommon::CPathUtils::m_instance" ?m_instance@CPathUtils@MorroCommon@@0V?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@2@A
0x18000C9B0: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180022BF8: "__vectorcall ??_R2CMpClientApi@SecurityClient@Microsoft" ??_R2CMpClientApi@SecurityClient@Microsoft@@8
0x180020778: "*.scr" ??_C@_1M@EKDBLKPK@?$AA?$CK?$AA?4?$AAs?$AAc?$AAr?$AA?$AA@
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Generic_error_category@std@@UEAAPEAXI@Z
0x18001EFD0: "read only file system" ??_C@_0BG@EICBIHDP@read?5only?5file?5system?$AA@
0x180029A50: "__vectorcall ??_R0?AVCEventLoggerBase@MpCommonEx@" ??_R0?AVCEventLoggerBase@MpCommonEx@@@8
0x18000B508: WPP_SF_qdd
0x18001E098: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18001E078: "__cdecl _imp_CoGetClassObject" __imp_CoGetClassObject
0x180005210: "public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::Release(void) __ptr64" ?Release@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAKXZ
0x18001D9A0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800202A0: "MpConfigClose" ??_C@_0O@HPLGDDMO@MpConfigClose?$AA@
0x18001DB50: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180013360: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustWindowRectImpl(struct tagRECT * __ptr64,unsigned long,int) __ptr64" ?AdjustWindowRectImpl@CWin32@MorroCommon@@MEAAHPEAUtagRECT@@KH@Z
0x18001F590: "AntimalwareInfectionStatus" ??_C@_1DG@HHJCOAIL@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001D868: "__cdecl _imp_InitiateSystemShutdownExW" __imp_InitiateSystemShutdownExW
0x1800223A8: "__vectorcall ??_R3CComObjectRootBase@ATL" ??_R3CComObjectRootBase@ATL@@8
0x180022398: "__vectorcall ??_R2CComObjectRootBase@ATL" ??_R2CComObjectRootBase@ATL@@8
0x18001F838: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18001F308: LIBID_MpProvider
0x180029988: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18001FF40: "NisEngineVersion" ??_C@_1CC@EMLDAANP@?$AAN?$AAi?$AAs?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000FAA4: "void __cdecl CommonUtil::CommonThrowHr(long)" ?CommonThrowHr@CommonUtil@@YAXJ@Z
0x180012190: "protected: virtual int __cdecl MorroCommon::CWin32::PathFileExistsImpl(unsigned short const * __ptr64) __ptr64" ?PathFileExistsImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180022560: "const ATL::CRegObject::`RTTI Complete Object Locator'" ??_R4CRegObject@ATL@@6B@
0x18001D448: "const MorroCommon::CLockEntireFile::`vftable'" ??_7CLockEntireFile@MorroCommon@@6B@
0x18001F870: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180012F70: "protected: virtual int __cdecl MorroCommon::CWin32::IsDialogMessageImpl(struct HWND__ * __ptr64,struct tagMSG * __ptr64) __ptr64" ?IsDialogMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEAUtagMSG@@@Z
0x18001CA68: "const std::_Generic_error_category::`vftable'" ??_7_Generic_error_category@std@@6B@
0x1800230B8: "__vectorcall ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon" ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon@@8
0x18001D7F8: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x18001DB68: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800134C0: "public: class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@QEAAPEAVCWin32@1@XZ
0x180021E20: "__vectorcall ??_R1EI@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R1EI@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x180019DA0: "__cdecl _chkstk" __chkstk
0x18001F038: "stream timeout" ??_C@_0P@DIIFGFCG@stream?5timeout?$AA@
0x18001DD10: "__cdecl _imp_SafeArrayGetVartype" __imp_SafeArrayGetVartype
0x180016DC0: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x180011760: "long __cdecl CommonUtil::UtilCoCreateInstanceImpl(void * __ptr64 * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,unsigned long,struct IUnknown * __ptr64)" ?UtilCoCreateInstanceImpl@CommonUtil@@YAJPEAPEAXAEBU_GUID@@1KPEAUIUnknown@@@Z
0x18001F490: "PendingActions" ??_C@_1BO@LPIIFKOK@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18001DA90: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180022EA0: "__vectorcall ??_R2CHResultException@CommonUtil" ??_R2CHResultException@CommonUtil@@8
0x180022E48: "__vectorcall ??_R3CHResultException@CommonUtil" ??_R3CHResultException@CommonUtil@@8
0x180012520: "protected: virtual long __cdecl MorroCommon::CWin32::RegQueryValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegQueryValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x180021AE0: "const Microsoft::SecurityClient::CDetectionWbemCreator::`RTTI Complete Object Locator'" ??_R4CDetectionWbemCreator@SecurityClient@Microsoft@@6B@
0x18000D4C8: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEBAXXZ
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_System_error_category@std@@UEAAPEAXI@Z
0x18000DA70: MPTHREAT_INFO_FREE
0x180017B20: "public: virtual void __cdecl MorroCommon::CLockedCertCheckImpl::Unlock(void) __ptr64" ?Unlock@CLockedCertCheckImpl@MorroCommon@@UEAAXXZ
0x18001F9E0: "Hardware" ??_C@_1BC@MAICEHGI@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x1800059E4: "public: int __cdecl ATL::CExpansionVector::Add(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Add@CExpansionVector@ATL@@QEAAHPEBG0@Z
0x1800193D0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18001EF38: "operation in progress" ??_C@_0BG@KDKHOPCO@operation?5in?5progress?$AA@
0x18001F1C0: WPP_ThisDir_CTLGUID_MpProvider
0x18001DEA8: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x1800221A8: "const ATL::CComObject<class CInfectionStateClass>::`RTTI Complete Object Locator'{for `IWbemProviderInit'}" ??_R4?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemProviderInit@@@
0x18001DF40: "__cdecl _imp__errno" __imp__errno
0x18001DC28: "__cdecl _imp_Process32NextW" __imp_Process32NextW
0x1800267E8: "__cdecl CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48" _CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48
0x18001DB48: "__cdecl _imp_HeapSize" __imp_HeapSize
0x18000FB40: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(class CommonUtil::CHResultExceptionImpl const & __ptr64) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z
0x180012DB0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLongPathNameImpl(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetLongPathNameImpl@CWin32@MorroCommon@@MEAAKPEBGPEAGK@Z
0x18001F730: "%s=@" ??_C@_19LECOIFCA@?$AA?$CF?$AAs?$AA?$DN?$AA?$EA?$AA?$AA@
0x180017DE8: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetAntimalwareClientFullPath(unsigned short * __ptr64 * __ptr64)" ?GetAntimalwareClientFullPath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAG@Z
0x180012E20: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeValueImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _LUID * __ptr64) __ptr64" ?LookupPrivilegeValueImpl@CWin32@MorroCommon@@MEAAHPEBG0PEAU_LUID@@@Z
0x18001EC60: "bad address" ??_C@_0M@KGHGGJGL@bad?5address?$AA@
0x18000B330: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x1800179E0: "public: virtual long __cdecl MorroCommon::CLockedCertCheckImpl::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CLockedCertCheckImpl@MorroCommon@@UEAAJPEBG@Z
0x180018D58: "public: __cdecl std::length_error::length_error(char const * __ptr64) __ptr64" ??0length_error@std@@QEAA@PEBD@Z
0x180019A7C: "__cdecl invalid_parameter" _invalid_parameter
0x18001DC70: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x180026678: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24
0x180019B51: realloc
0x180005600: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAKXZ
0x180015780: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModulePathByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModulePathByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18001F430: "DetectionSource" ??_C@_1CA@IDFDLMLC@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180012970: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FindFirstFileImpl(unsigned short const * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindFirstFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGPEAU_WIN32_FIND_DATAW@@@Z
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateInstanceEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateInstanceEnum@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18002A948: "public: static class std::locale::id std::numpunct<char>::id" ?id@?$numpunct@D@std@@2V0locale@2@A
0x18001FA10: "SECURITY" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x180016120: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetAppDataPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetAppDataPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DA70: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18002A4B0: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x18000F5C0: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionItem::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionItem@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x1800017B4: "public: void __cdecl ATL::CAtlModule::Term(void) __ptr64" ?Term@CAtlModule@ATL@@QEAAXXZ
0x18001ED70: "identifier removed" ??_C@_0BD@JPHBMONG@identifier?5removed?$AA@
0x18001F750: "__cdecl GUID_dc12a681_737f_11cf_884d_00aa004b2e24" _GUID_dc12a681_737f_11cf_884d_00aa004b2e24
0x18001DDB8: "__cdecl _imp_CreateDialogParamW" __imp_CreateDialogParamW
0x180022430: "const ATL::CComClassFactory::`RTTI Complete Object Locator'" ??_R4CComClassFactory@ATL@@6B@
0x18001DA48: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x180014EC4: "private: void __cdecl ATL::CSimpleStringT<char,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x18002A920: "private: static class MorroCommon::CCertCheckFactory * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@0PEAVCCertCheckFactory@2@EA
0x18001EA88: "already_connected" ??_C@_0BC@FIFLCHLO@already_connected?$AA@
0x18001F828: "HKDD" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x180007990: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x18000B278: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18000F0A4: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpConfigClose>::~CUniqueHandle<struct CAutoMpConfigClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpConfigClose@@@CommonUtil@@QEAA@XZ
0x180020300: "MpFreeMemory" ??_C@_0N@LKFEIFBJ@MpFreeMemory?$AA@
0x180012AB0: "protected: virtual int __cdecl MorroCommon::CWin32::AllocateAndInitializeSidImpl(struct _SID_IDENTIFIER_AUTHORITY * __ptr64,unsigned char,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?AllocateAndInitializeSidImpl@CWin32@MorroCommon@@MEAAHPEAU_SID_IDENTIFIER_AUTHORITY@@EKKKKKKKKPEAPEAX@Z
0x180022FE8: "__vectorcall ??_R1A@?0A@EA@CLockEntireFile@MorroCommon" ??_R1A@?0A@EA@CLockEntireFile@MorroCommon@@8
0x180022A38: "__vectorcall ??_R3exception" ??_R3exception@@8
0x180022A90: "__vectorcall ??_R2exception" ??_R2exception@@8
0x18001D9E0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180004F58: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CInfectionStateClass> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCInfectionStateClass@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutClassAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutClassAsync@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001FA88: "AntimalwareHealthStatus" ??_C@_1DA@BOOIIGKD@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800131D0: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeNameImpl(unsigned short const * __ptr64,struct _LUID * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?LookupPrivilegeNameImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_LUID@@PEAGPEAK@Z
0x18001F638: "RecentlyCleanedDetections" ??_C@_1DE@HHNBPPJB@?$AAR?$AAe?$AAc?$AAe?$AAn?$AAt?$AAl?$AAy?$AAC?$AAl?$AAe?$AAa?$AAn?$AAe?$AAd?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180002F70: "public: __cdecl CommonUtil::AutoRef<struct IUnknown>::~AutoRef<struct IUnknown>(void) __ptr64" ??1?$AutoRef@UIUnknown@@@CommonUtil@@QEAA@XZ
0x1800095B8: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned char) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGE@Z
0x18001DBE0: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x18001F340: "iostream stream error" ??_C@_0BG@PADBLCHM@iostream?5stream?5error?$AA@
0x18001E178: "__cdecl _guard_fids_table" __guard_fids_table
0x18000BD08: "void __cdecl Microsoft::SecurityClient::UninitializeMpClientApi(void)" ?UninitializeMpClientApi@SecurityClient@Microsoft@@YAXXZ
0x18001E018: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x180016FE8: "private: static void __cdecl MorroCommon::CCertCheck::CloseWinVerifyTrust(struct _WINTRUST_DATA * __ptr64)" ?CloseWinVerifyTrust@CCertCheck@MorroCommon@@CAXPEAU_WINTRUST_DATA@@@Z
0x1800294F8: "__vectorcall ??_R0?AUIWbemProviderInit@" ??_R0?AUIWbemProviderInit@@@8
0x1800202D8: "MpDetectionEnumerate" ??_C@_0BF@FOFOBIMG@MpDetectionEnumerate?$AA@
0x18000AA6C: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::~CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(void) __ptr64" ??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
0x18002A628: "class ATL::CWin32Heap ATL::g_strheap" ?g_strheap@ATL@@3VCWin32Heap@1@A
0x18001DDF0: "__cdecl _imp_CharNextW" __imp_CharNextW
0x1800206D0: WPP_029b443b08043c19b345765ef007d4c5_Traceguids
0x18001E048: msvcrt_NULL_THUNK_DATA
0x18001EDF8: "network down" ??_C@_0N@KIIEAAIO@network?5down?$AA@
0x180012890: "protected: virtual int __cdecl MorroCommon::CWin32::Process32NextImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32NextImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x18001D6C0: "__cdecl load_config_used" _load_config_used
0x180029148: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x1800148A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadBufferImpl(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64) __ptr64" ?ReadBufferImpl@CFileUtils@MorroCommon@@MEAAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18001DFC8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x1800226C0: "__vectorcall ??_R1A@?0A@EA@_ATL_MODULE70@ATL" ??_R1A@?0A@EA@_ATL_MODULE70@ATL@@8
0x180020210: "MpManagerOpen" ??_C@_0O@JIOHGFBI@MpManagerOpen?$AA@
0x180012130: "protected: virtual struct HICON__ * __ptr64 __cdecl MorroCommon::CWin32::LoadIconImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadIconImpl@CWin32@MorroCommon@@MEAAPEAUHICON__@@PEAUHINSTANCE__@@PEBG@Z
0x180026740: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x180008CE0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x18001DBF8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x180022D50: "const Microsoft::SecurityClient::CMpProviderEventLogger::`RTTI Complete Object Locator'{for `MpCommonEx::CEventLoggerBase'}" ??_R4CMpProviderEventLogger@SecurityClient@Microsoft@@6BCEventLoggerBase@MpCommonEx@@@
0x180012670: "protected: virtual void __cdecl MorroCommon::CWin32::SleepImpl(unsigned long) __ptr64" ?SleepImpl@CWin32@MorroCommon@@MEAAXK@Z
0x180003250: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x180021BA8: "__vectorcall ??_R1A@?0A@EA@CRefObject@CommonUtil" ??_R1A@?0A@EA@CRefObject@CommonUtil@@8
0x18001EB00: "network_unreachable" ??_C@_0BE@JFNJIDNF@network_unreachable?$AA@
0x180015900: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleDirectoryImpl(void) __ptr64" ?GetCurrentModuleDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x1800203F0: "MaxNumOfInstances_DetectionItem_" ??_C@_1FG@FPHGCJIM@?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAO?$AAf?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAs?$AA_?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAt?$AAe?$AAm?$AA_@
0x18001FD78: "ProductStatus" ??_C@_1BM@HCPJKCGD@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001DE28: "__cdecl _imp_KillTimer" __imp_KillTimer
0x1800219A0: "__vectorcall ??_R1A@?0A@EA@CDetectionWbemCreator@SecurityClient@Microsoft" ??_R1A@?0A@EA@CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x18001DE08: "__cdecl _imp_GetWindowThreadProcessId" __imp_GetWindowThreadProcessId
0x18001D898: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x180011A48: MpRegisterForInitializationAtStartup
0x180003250: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x180004260: "public: virtual long __cdecl CInfectionStateClass::GetObjectAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?GetObjectAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x1800200B0: "LocalOnly" ??_C@_1BE@OIICCNIH@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x180005870: "public: virtual unsigned long __cdecl ATL::CRegObject::AddRef(void) __ptr64" ?AddRef@CRegObject@ATL@@UEAAKXZ
0x1800093B0: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,bool) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG_N@Z
0x18000A848: "public: __cdecl MorroCommon::PRODUCTVERSION::~PRODUCTVERSION(void) __ptr64" ??1PRODUCTVERSION@MorroCommon@@QEAA@XZ
0x180026B2C: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x18001F2B8: "RegDeleteKeyExW" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x1800130C0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetSystemDefaultUILanguageImpl(void) __ptr64" ?GetSystemDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x180005610: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAKXZ
0x1800268F0: "__stdcall CT??_R0PEAX" _CT??_R0PEAX@88
0x18001E808: "directory not empty" ??_C@_0BE@JIDOCPHM@directory?5not?5empty?$AA@
0x180020310: WPP_8ece11a1b6a13b3fe4cea85edd8f0a45_Traceguids
0x180020880: "GetFileVersionInfoSizeExW" ??_C@_0BK@NCKKICFJ@GetFileVersionInfoSizeExW?$AA@
0x18000A888: "public: static void __cdecl Microsoft::SecurityClient::CPropertyFormatter::SeparateDomainAndUser(unsigned short const * __ptr64 const,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SeparateDomainAndUser@CPropertyFormatter@SecurityClient@Microsoft@@SAXQEBGPEAPEAG1@Z
0x180012100: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::CreateDialogParamImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,struct HWND__ * __ptr64,__int64 (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64),__int64) __ptr64" ?CreateDialogParamImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEAUHINSTANCE__@@PEBGPEAU3@P6A_J2I_K_J@Z4@Z
0x18001DB38: "__cdecl _imp_VirtualLock" __imp_VirtualLock
0x180026A50: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18001DE50: "__cdecl _imp_SetWindowTextW" __imp_SetWindowTextW
0x18002A410: "public: static bool ATL::CAtlBaseModule::m_bInitFailed" ?m_bInitFailed@CAtlBaseModule@ATL@@2_NA
0x180012B50: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FreeSidImpl(void * __ptr64) __ptr64" ?FreeSidImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18001F7F0: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x1800206E0: CLSID_WbemObjectTextSrc
0x180029C48: "void * __ptr64 `RTTI Type Descriptor'" ??_R0PEAX@8
0x1800186E0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CPtrObjectProcessHeap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPtrObjectProcessHeap@CommonUtil@@MEAAPEAXI@Z
0x180015340: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithApplicationDirImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithApplicationDirImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180020388: WPP_7c80c98183d13a4c76c1e9387dac9dd7_Traceguids
0x18001DF80: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800292C0: "__vectorcall ??_R0?AVCRefObject@CommonUtil@" ??_R0?AVCRefObject@CommonUtil@@@8
0x180019800: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x180029220: "__vectorcall ??_R0?AV_Iostream_error_category@std@" ??_R0?AV_Iostream_error_category@std@@@8
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x180022F78: "const MorroCommon::CWin32::`RTTI Complete Object Locator'" ??_R4CWin32@MorroCommon@@6B@
0x18001FA78: "APPID" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x180004490: "public: virtual long __cdecl CInfectionStateClass::CreateInstanceEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateInstanceEnumAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x1800222F0: "__vectorcall ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180012600: "protected: virtual int __cdecl MorroCommon::CWin32::LoadStringImpl(struct HINSTANCE__ * __ptr64,unsigned int,unsigned short * __ptr64,int) __ptr64" ?LoadStringImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@IPEAGH@Z
0x180022DB8: "__vectorcall ??_R1A@?0A@EA@CDetectionItem@SecurityClient@Microsoft" ??_R1A@?0A@EA@CDetectionItem@SecurityClient@Microsoft@@8
0x18002A8F8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUoryUlyquivUznwGEUhgwzucOlyq@MpProviderLib" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUoryUlyquivUznwGEUhgwzucOlyq@MpProviderLib
0x18000C7E8: MpFreeMemory
0x18001FEA8: "AntispywareSignatureAge" ??_C@_1DA@BBCLIACF@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x18001DB30: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180012C80: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenSCManagerImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenSCManagerImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEBG0K@Z
0x180005CD4: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000F9A4: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180003770: "public: virtual long __cdecl CInfectionStateClass::PutInstanceAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutInstanceAsync@CInfectionStateClass@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180005CD4: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18002A90C: "long volatile `public: static class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4JC
0x18002A89C: "long volatile `public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4JC
0x18002A8B4: "long volatile `public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4JC
0x180020200: "%ls\%ls" ??_C@_1BA@JPNMJFGG@?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x180012F90: "protected: virtual int __cdecl MorroCommon::CWin32::ResetEventImpl(void * __ptr64) __ptr64" ?ResetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001DDE0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1800266E0: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24
0x180018D30: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x18001DA50: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x1800096B0: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::PutVersion(unsigned short const * __ptr64,unsigned __int64) __ptr64" ?PutVersion@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG_K@Z
0x1800069F4: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x180013060: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetPrivateProfileIntImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileIntImpl@CWin32@MorroCommon@@MEAAIPEBG0H0@Z
0x18001D9C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800291A0: "__vectorcall ??_R0?AVCDetectionWbemCreator@SecurityClient@Microsoft@" ??_R0?AVCDetectionWbemCreator@SecurityClient@Microsoft@@@8
0x18001D970: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002550: "public: virtual char const * __ptr64 __cdecl std::_Generic_error_category::name(void)const __ptr64" ?name@_Generic_error_category@std@@UEBAPEBDXZ
0x18001E9E8: "connection_reset" ??_C@_0BB@JOANDNCK@connection_reset?$AA@
0x18001D4F0: ?_entries@?1??_GetEntries@CInfectionStateClass@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x180007B60: "public: static long __cdecl CMpProviderClass::UpdateRegistry(int)" ?UpdateRegistry@CMpProviderClass@@SAJH@Z
0x180022000: "__vectorcall ??_R1A@?0A@EA@IWbemProviderInit" ??_R1A@?0A@EA@IWbemProviderInit@@8
0x180020620: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001F358: "system" ??_C@_06FHFOAHML@system?$AA@
0x180029550: "__vectorcall ??_R0?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@" ??_R0?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@8
0x18001C9A0: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x180013330: "protected: virtual unsigned short * __ptr64 __cdecl MorroCommon::CWin32::PathFindFileNameImpl(unsigned short const * __ptr64) __ptr64" ?PathFindFileNameImpl@CWin32@MorroCommon@@MEAAPEAGPEBG@Z
0x18000FA20: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(long) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@J@Z
0x18002A452: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32> MorroCommon::CWin32::m_instance" ?m_instance@CWin32@MorroCommon@@0V?$TSingletonWithProxy@VCWin32@MorroCommon@@@2@A
0x180029000: "struct ATL::_ATL_OBJMAP_ENTRY30 __objMap_CInfectionStateClass" ?__objMap_CInfectionStateClass@@3U_ATL_OBJMAP_ENTRY30@ATL@@A
0x18000FBF0: "public: static long __cdecl CommonUtil::CSprintfAllocWideCharPolicy::StringFormat(unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?StringFormat@CSprintfAllocWideCharPolicy@CommonUtil@@SAJPEAG_KPEA_KPEBGPEAD@Z
0x18001DFC0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18001E938: "address_in_use" ??_C@_0P@LNDJPBFK@address_in_use?$AA@
0x18001CDE8: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Generic_error_category@std@@UEAAPEAXI@Z
0x180008F14: WPP_SF_SDd
0x180008F14: WPP_SF_Sdd
0x18001D800: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x1800219F0: "__vectorcall ??_R1A@?0A@EA@_Iostream_error_category@std" ??_R1A@?0A@EA@_Iostream_error_category@std@@8
0x18000D4C8: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x180009318: WPP_SF_Sld
0x1800090D8: WPP_SF_SSd
0x180007B74: "public: virtual __cdecl CMpProviderClass::~CMpProviderClass(void) __ptr64" ??1CMpProviderClass@@UEAA@XZ
0x18000A6EC: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CVersionFormatter::ToString(void)const __ptr64" ?ToString@CVersionFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x18001DC20: "__cdecl _imp_Process32FirstW" __imp_Process32FirstW
0x1800166B0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetSpecialFolderPathImpl(int,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetSpecialFolderPathImpl@CPathUtils@MorroCommon@@MEAAJHAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001D998: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180019780: "__cdecl purecall" _purecall
0x18001D8D0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18001DA88: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x18001D890: "__cdecl _imp_ControlService" __imp_ControlService
0x1800193B4: "__cdecl _std_terminate" __std_terminate
0x18001FE00: "LastFullScanDateTimeEnd" ??_C@_1DA@MMIDNKGH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x180012B70: "protected: virtual int __cdecl MorroCommon::CWin32::StringFromGUID2Impl(struct _GUID const & __ptr64,unsigned short * __ptr64,int) __ptr64" ?StringFromGUID2Impl@CWin32@MorroCommon@@MEAAHAEBU_GUID@@PEAGH@Z
0x18002A900: "private: static class MorroCommon::CWin32 * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@0PEAVCWin32@2@EA
0x180020670: WPP_1c3e52e25d5b302f2ece2a7df877a490_Traceguids
0x18001D830: "__cdecl _imp_GetUserNameW" __imp_GetUserNameW
0x180022C38: "const Microsoft::SecurityClient::CMpClientApi::`RTTI Complete Object Locator'" ??_R4CMpClientApi@SecurityClient@Microsoft@@6B@
0x18001FA38: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180005720: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18001DAA0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180016DC0: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x18000D704: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18001DAD8: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18001EE78: "no message" ??_C@_0L@EDOLMPAK@no?5message?$AA@
0x18001E038: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180002F94: "public: __cdecl CommonUtil::CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy>::~CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy>(void) __ptr64" ??1?$CUniqueHandle@UCAutoSafeArrayReleaseStartegy@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x1800129B0: "protected: virtual int __cdecl MorroCommon::CWin32::FindCloseImpl(void * __ptr64) __ptr64" ?FindCloseImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001F600: "CriticallyFailedDetections" ??_C@_1DG@HJJHLIEK@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAl?$AAy?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180004E20: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectCached<class ATL::CComClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000A4E0: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToCimDateTime(void)const __ptr64" ?ToCimDateTime@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_System_error_category@std@@UEAAPEAXI@Z
0x18001EC88: "bad message" ??_C@_0M@PMMIEFCP@bad?5message?$AA@
0x18001F1E0: "__cdecl GUID_0002e012_0000_0000_c000_000000000046" _GUID_0002e012_0000_0000_c000_000000000046
0x18001F400: "SeverityID" ??_C@_1BG@EDPDMIGB@?$AAS?$AAe?$AAv?$AAe?$AAr?$AAi?$AAt?$AAy?$AAI?$AAD?$AA?$AA@
0x180013190: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsRelativeImpl(unsigned short const * __ptr64) __ptr64" ?PathIsRelativeImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180011D20: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Reallocate(struct ATL::CStringData * __ptr64,int,int) __ptr64" ?Reallocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@PEAU32@HH@Z
0x1800103F0: "long __cdecl CommonUtil::UtilRawGetProcAddress(__int64 (__cdecl* * __ptr64)(void),struct HINSTANCE__ * __ptr64,char const * __ptr64,bool)" ?UtilRawGetProcAddress@CommonUtil@@YAJPEAP6A_JXZPEAUHINSTANCE__@@PEBD_N@Z
0x180018730: "public: virtual void * __ptr64 __cdecl CommonUtil::CPredefinedMpHeapsHolder::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPredefinedMpHeapsHolder@CommonUtil@@UEAAPEAXI@Z
0x180018D90: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x180003490: "public: virtual void * __ptr64 __cdecl ATL::CInstanceProviderHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_ECInstanceProviderHelper@ATL@@UEAAPEAXI@Z
0x180023238: "__vectorcall ??_R1A@?0A@EA@CPredefinedMpHeapsHolder@CommonUtil" ??_R1A@?0A@EA@CPredefinedMpHeapsHolder@CommonUtil@@8
0x180029960: "__vectorcall ??_R0?AVCMpProviderClass@" ??_R0?AVCMpProviderClass@@@8
0x18001D940: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180014B74: "public: __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::~vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >(void) __ptr64" ??1?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAA@XZ
0x18001F0B8: "value too large" ??_C@_0BA@KGKGOOJA@value?5too?5large?$AA@
0x18001E7C8: "filename too long" ??_C@_0BC@EJHOMAAK@filename?5too?5long?$AA@
0x18001EB78: "protocol_not_supported" ??_C@_0BH@KAPBAIJF@protocol_not_supported?$AA@
0x180002480: "public: __cdecl CommonUtil::CAutoBSTR::~CAutoBSTR(void) __ptr64" ??1CAutoBSTR@CommonUtil@@QEAA@XZ
0x180029498: "__vectorcall ??_R0?AVCProviderHelper@ATL@" ??_R0?AVCProviderHelper@ATL@@@8
0x18002A453: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CProductUtils> MorroCommon::CProductUtils::m_instance" ?m_instance@CProductUtils@MorroCommon@@0V?$TSingletonWithProxy@VCProductUtils@MorroCommon@@@2@A
0x1800228A0: "__vectorcall ??_R2CMpProviderClass" ??_R2CMpProviderClass@@8
0x1800229D0: "__vectorcall ??_R3CMpProviderClass" ??_R3CMpProviderClass@@8
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x1800219C8: "__vectorcall ??_R1A@?0A@EA@_System_error_category@std" ??_R1A@?0A@EA@_System_error_category@std@@8
0x18000E870: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpClose>::~CUniqueHandle<struct CAutoMpClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpClose@@@CommonUtil@@QEAA@XZ
0x18001EA00: "destination_address_required" ??_C@_0BN@JLJNLKLK@destination_address_required?$AA@
0x18001DA10: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180002900: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionWbemCreator@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18001D4A8: "const CommonUtil::CPredefinedMpHeapsHolder::`vftable'" ??_7CPredefinedMpHeapsHolder@CommonUtil@@6B@
0x18000D4C8: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEBAXXZ
0x18001EDD8: "is a directory" ??_C@_0P@FLLDBIDK@is?5a?5directory?$AA@
0x18001DC48: "__cdecl _imp_VerifyVersionInfoW" __imp_VerifyVersionInfoW
0x180005CD4: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x180022750: "__vectorcall ??_R3CAtlModule@ATL" ??_R3CAtlModule@ATL@@8
0x18002A408: "long (__cdecl* __ptr64 ATL::_pPerfUnRegFunc)(void)" ?_pPerfUnRegFunc@ATL@@3P6AJXZEA
0x180022738: "__vectorcall ??_R2CAtlModule@ATL" ??_R2CAtlModule@ATL@@8
0x180022AC8: "__vectorcall ??_R3bad_alloc@std" ??_R3bad_alloc@std@@8
0x180022A50: "__vectorcall ??_R2bad_alloc@std" ??_R2bad_alloc@std@@8
0x180003138: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18001DDD8: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x18001EE18: "network unreachable" ??_C@_0BE@IFNCKGE@network?5unreachable?$AA@
0x180012E60: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustTokenPrivilegesImpl(void * __ptr64,int,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long * __ptr64) __ptr64" ?AdjustTokenPrivilegesImpl@CWin32@MorroCommon@@MEAAHPEAXHPEAU_TOKEN_PRIVILEGES@@K1PEAK@Z
0x18001D818: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x18001EAA0: "too_many_files_open" ??_C@_0BE@GJJJJDDA@too_many_files_open?$AA@
0x18000FD6C: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrNewSprintfW(unsigned short const * __ptr64,...)" ?TrNewSprintfW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBGZZ
0x180011198: "int __cdecl MpUtilsExports::UtilRegIsValidValueImpl(unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegIsValidValueImpl@MpUtilsExports@@YAHK_KPEBX@Z
0x18001E080: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x180021FD8: "__vectorcall ??_R1A@?0A@EA@IWbemInstProviderImpl@ATL" ??_R1A@?0A@EA@IWbemInstProviderImpl@ATL@@8
0x18000BA30: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpClientApi::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpClientApi@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180007910: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x1800207A8: "MpClient.dll" ??_C@_1BK@JDCFPJCO@?$AAM?$AAp?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001DD28: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x18000E840: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpDetectionInfoFree>::~CUniqueHandle<struct CAutoMpDetectionInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpDetectionInfoFree@@@CommonUtil@@QEAA@XZ
0x180012370: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryExImpl(unsigned short const * __ptr64,void * __ptr64,unsigned long) __ptr64" ?LoadLibraryExImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBGPEAXK@Z
0x180003400: "public: __cdecl ATL::CComSafeArray<struct IUnknown * __ptr64,13>::~CComSafeArray<struct IUnknown * __ptr64,13>(void) __ptr64" ??1?$CComSafeArray@PEAUIUnknown@@$0N@@ATL@@QEAA@XZ
0x1800078E0: "public: virtual long __cdecl ATL::CAtlModuleT<class CMpProviderModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCMpProviderModule@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x1800129E0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetCurrentProcessImpl(void) __ptr64" ?GetCurrentProcessImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x18001EBD0: "address family not supported" ??_C@_0BN@LKKBCCDB@address?5family?5not?5supported?$AA@
0x18001DF88: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800137B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::CreateFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CreateFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180022950: "__vectorcall ??_R1A@?0A@EA@CMpProviderClass" ??_R1A@?0A@EA@CMpProviderClass@@8
0x18001DDD0: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x180002F40: "public: __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::~CWbemClassObjectHelper(void) __ptr64" ??1CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAA@XZ
0x18001EBF0: "address in use" ??_C@_0P@LDMLAFHI@address?5in?5use?$AA@
0x180013200: "protected: virtual int __cdecl MorroCommon::CWin32::CreateEnvironmentBlockImpl(void * __ptr64 * __ptr64,void * __ptr64,int) __ptr64" ?CreateEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAPEAXPEAXH@Z
0x18001E060: ntdll_NULL_THUNK_DATA
0x18001DFA8: "__cdecl _imp_memcpy" __imp_memcpy
0x18000DDE8: "private: void __cdecl Microsoft::SecurityClient::CInfectionState::EnumerateDetections(void) __ptr64" ?EnumerateDetections@CInfectionState@SecurityClient@Microsoft@@AEAAXXZ
0x180029748: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18001EA30: "host_unreachable" ??_C@_0BB@KKNHPPIN@host_unreachable?$AA@
0x180020768: "*.com" ??_C@_1M@EJDCAMGD@?$AA?$CK?$AA?4?$AAc?$AAo?$AAm?$AA?$AA@
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutInstance(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutInstance@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180019BF0: "__cdecl Init_thread_footer" _Init_thread_footer
0x1800266C0: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x18001FFE0: IID_IWbemPath
0x1800226E8: "__vectorcall ??_R2_ATL_MODULE70@ATL" ??_R2_ATL_MODULE70@ATL@@8
0x1800226F8: "__vectorcall ??_R3_ATL_MODULE70@ATL" ??_R3_ATL_MODULE70@ATL@@8
0x180002960: "public: class CommonUtil::AutoRef<struct IUnknown> __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::Create(class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?Create@CDetectionWbemCreator@SecurityClient@Microsoft@@QEBA?AV?$AutoRef@UIUnknown@@@CommonUtil@@PEBVCDetectionItem@23@@Z
0x1800232A0: "__vectorcall ??_R1A@?0A@EA@CPtrObject@CommonUtil" ??_R1A@?0A@EA@CPtrObject@CommonUtil@@8
0x180009BA4: WPP_SF_ddd
0x180012A40: "protected: virtual unsigned long * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityImpl(void * __ptr64,unsigned long) __ptr64" ?GetSidSubAuthorityImpl@CWin32@MorroCommon@@MEAAPEAKPEAXK@Z
0x18001CF90: "const ATL::CAtlStringMgr::`vftable'" ??_7CAtlStringMgr@ATL@@6B@
0x180029D78: "__vectorcall ??_R0?AVCPtrObjectProcessHeap@CommonUtil@" ??_R0?AVCPtrObjectProcessHeap@CommonUtil@@@8
0x18001DE00: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x180020450: "MaxSizeOfInstance_DetectionItem_" ??_C@_1FG@OIGKGPLM@?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AAO?$AAf?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA_?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAt?$AAe?$AAm?$AA_@
0x18001CE00: "const MorroCommon::CFileUtils::`vftable'" ??_7CFileUtils@MorroCommon@@6B@
0x18001EF50: "operation not permitted" ??_C@_0BI@OHIEJAAB@operation?5not?5permitted?$AA@
0x18000EBA0: "public: __cdecl Microsoft::SecurityClient::CMpStatus::CMpStatus(void) __ptr64" ??0CMpStatus@SecurityClient@Microsoft@@QEAA@XZ
0x18001F6C0: "PendingReboot" ??_C@_1BM@HBDHPLIM@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x180020758: "*.exe" ??_C@_1M@FEDKBPCI@?$AA?$CK?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180012A20: "protected: virtual int __cdecl MorroCommon::CWin32::HeapFreeImpl(void * __ptr64,unsigned long,void * __ptr64) __ptr64" ?HeapFreeImpl@CWin32@MorroCommon@@MEAAHPEAXK0@Z
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteInstance(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteInstance@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180005340: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CInfectionStateClass>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCInfectionStateClass@@@ATL@@UEAAPEAXI@Z
0x18001D848: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800053C8: "public: static class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy> > __cdecl Microsoft::SecurityClient::CSafeArrayFactory::Convert<class CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>,class CConversionStrategyDetectionItem>(class CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem> const & __ptr64,class CConversionStrategyDetectionItem)" ??$Convert@V?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@VCConversionStrategyDetectionItem@@@CSafeArrayFactory@SecurityClient@Microsoft@@SA?AV?$CReturnHandle@V?$CUniqueHandle@UCAutoSafeArrayReleaseStartegy@SecurityClient@Microsoft@@@CommonUtil@@@CommonUtil@@AEBV?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@4@VCConversionStrategyDetectionItem@@@Z
0x18001FB48: "BehaviorMonitorEnabled" ??_C@_1CO@IDCJKFLL@?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001D938: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18000FDC8: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CNewSprintfPolicy<unsigned short>,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@U?$CNewSprintfPolicy@G@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x18001D8F0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180001D64: "public: __cdecl ATL::CRegKey::~CRegKey(void) __ptr64" ??1CRegKey@ATL@@QEAA@XZ
0x18001EED8: "no such process" ??_C@_0BA@ENLPPKBN@no?5such?5process?$AA@
0x180029728: "__vectorcall ??_R0?AUIUnknown@" ??_R0?AUIUnknown@@@8
0x180002718: WPP_SF_P
0x18001DF10: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18001D8E8: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180029E28: "__cdecl _security_cookie" __security_cookie
0x1800208E0: "GetFileVersionInfoExW" ??_C@_0BG@GEGOAKFF@GetFileVersionInfoExW?$AA@
0x1800051F0: "public: virtual long __cdecl ATL::CComObject<class CMpProviderClass>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCMpProviderClass@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001D828: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18001EFA8: "protocol error" ??_C@_0P@FNPOCJBE@protocol?5error?$AA@
0x18002A8F0: ?$TSS0@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV23@XZ@4HA
0x180005620: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CMpProviderClass>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180019DA0: "__cdecl alloca_probe" _alloca_probe
0x180016CD8: "long __cdecl MorroCommon::HrCStringFormat(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,...)" ?HrCStringFormat@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGZZ
0x18001DB20: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x18001018C: "long __cdecl CommonUtil::UtilLoadLibraryEx(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilLoadLibraryEx@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBGK@Z
0x18001F020: "state not recoverable" ??_C@_0BG@MPLKFPAE@state?5not?5recoverable?$AA@
0x180011F34: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64,int,struct ATL::IAtlStringMgr * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBGHPEAUIAtlStringMgr@1@@Z
0x18001D918: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180001884: WPP_SF__guid__guid_
0x18001DE20: "__cdecl _imp_SetTimer" __imp_SetTimer
0x180012460: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateMutexImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?CreateMutexImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBG@Z
0x180022F60: "__vectorcall ??_R3CWin32@MorroCommon" ??_R3CWin32@MorroCommon@@8
0x180022F50: "__vectorcall ??_R2CWin32@MorroCommon" ??_R2CWin32@MorroCommon@@8
0x18001DB08: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18001DED8: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x18001DD00: "__cdecl _imp_SafeArrayGetUBound" __imp_SafeArrayGetUBound
0x18001DA40: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001DEF8: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x180012D50: "protected: virtual int __cdecl MorroCommon::CWin32::ControlServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned long,struct _SERVICE_STATUS * __ptr64) __ptr64" ?ControlServiceImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KPEAU_SERVICE_STATUS@@@Z
0x180023028: "__vectorcall ??_R3CLockEntireFile@MorroCommon" ??_R3CLockEntireFile@MorroCommon@@8
0x180022FB0: "__vectorcall ??_R2CLockEntireFile@MorroCommon" ??_R2CLockEntireFile@MorroCommon@@8
0x18001FAC8: "RtpEnabled" ??_C@_1BG@EMMFIEBG@?$AAR?$AAt?$AAp?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001DB10: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18001E8A0: "not enough memory" ??_C@_0BC@ENOOLCNF@not?5enough?5memory?$AA@
0x18001EA60: "interrupted" ??_C@_0M@EGEKIIMP@interrupted?$AA@
0x180015410: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEAGK@Z
0x18001EE40: "no child process" ??_C@_0BB@IEPBLJHK@no?5child?5process?$AA@
0x180013020: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetPrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileStringImpl@CWin32@MorroCommon@@MEAAKPEBG00PEAGK0@Z
0x18001DD18: "__cdecl _imp_VariantInit" __imp_VariantInit
0x180004568: "private: class CommonUtil::AutoRef<struct IWbemClassObject> __cdecl CInfectionStateClass::GetInstanceByPath(unsigned short * __ptr64 const) __ptr64" ?GetInstanceByPath@CInfectionStateClass@@AEAA?AV?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAG@Z
0x18001E168: "__cdecl _xl_a" __xl_a
0x180005D38: "public: __cdecl ATL::CRegParser::CParseBuffer::~CParseBuffer(void) __ptr64" ??1CParseBuffer@CRegParser@ATL@@QEAA@XZ
0x180026810: "__cdecl CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24" _CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24
0x18001DAD0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18001F6A0: "PendingFullScan" ??_C@_1CA@MKNCEAJH@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x180010614: "long __cdecl CommonUtil::UtilIsFileExists(unsigned short const * __ptr64)" ?UtilIsFileExists@CommonUtil@@YAJPEBG@Z
0x1800124A0: "protected: virtual int __cdecl MorroCommon::CWin32::ReleaseMutexImpl(void * __ptr64) __ptr64" ?ReleaseMutexImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180001D58: "public: __cdecl ATL::CComBSTR::operator unsigned short * __ptr64(void)const __ptr64" ??BCComBSTR@ATL@@QEBAPEAGXZ
0x1800268B8: "__cdecl TI2PEAVEHresultException@MorroCommon@@" _TI2PEAVEHresultException@MorroCommon@@
0x18001F058: "timed out" ??_C@_09KJPPMAOI@timed?5out?$AA@
0x180012950: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LockResourceImpl(void * __ptr64) __ptr64" ?LockResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18001EE08: "network reset" ??_C@_0O@FNPDBHEE@network?5reset?$AA@
0x18001DD38: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1800169B0: "protected: virtual bool __cdecl MorroCommon::CPathUtils::IsPathExecutableImpl(unsigned short const * __ptr64) __ptr64" ?IsPathExecutableImpl@CPathUtils@MorroCommon@@MEAA_NPEBG@Z
0x180013610: "public: static long __cdecl MorroCommon::CFileUtils::ReadBuffer(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64)" ?ReadBuffer@CFileUtils@MorroCommon@@SAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18001D8B0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000B1DC: "protected: static void __cdecl ATL::CSimpleStringT<unsigned short,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@G$0A@@ATL@@KAXXZ
0x18001F3B8: "DetectionID" ??_C@_1BI@BHLPCECP@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$AA@
0x18000D9A0: "class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > & __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x180029A10: "__vectorcall ??_R0?AVCMpClientApi@SecurityClient@Microsoft@" ??_R0?AVCMpClientApi@SecurityClient@Microsoft@@@8
0x18002A9F0: "__cdecl _onexitbegin" __onexitbegin
0x180023090: "__vectorcall ??_R2CLockedCertCheckImpl@MorroCommon" ??_R2CLockedCertCheckImpl@MorroCommon@@8
0x18001EC30: "argument list too long" ??_C@_0BH@CAKOHOMI@argument?5list?5too?5long?$AA@
0x18001F8C0: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180023108: "__vectorcall ??_R3CLockedCertCheckImpl@MorroCommon" ??_R3CLockedCertCheckImpl@MorroCommon@@8
0x18000F644: "public: __cdecl CommonUtil::CStdPtrVector<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CStdPtrVector<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CStdPtrVector@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180022C10: "__vectorcall ??_R1A@?0A@EA@CMpClientApi@SecurityClient@Microsoft" ??_R1A@?0A@EA@CMpClientApi@SecurityClient@Microsoft@@8
0x1800127B0: "protected: virtual unsigned char * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityCountImpl(void * __ptr64) __ptr64" ?GetSidSubAuthorityCountImpl@CWin32@MorroCommon@@MEAAPEAEPEAX@Z
0x18001587C: "public: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::CombinePath(unsigned short const * __ptr64 const,unsigned short const * __ptr64 const)" ?CombinePath@CPathUtils@MorroCommon@@SA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBG0@Z
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Iostream_error_category@std@@UEAAPEAXI@Z
0x1800179A0: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x18001DD78: "__cdecl _imp_PathFileExistsW" __imp_PathFileExistsW
0x18001F7A0: "Module" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x18001D458: "const MorroCommon::CLockedCertCheckImpl::`vftable'" ??_7CLockedCertCheckImpl@MorroCommon@@6B@
0x18001DA58: "__cdecl _imp_SwitchToThread" __imp_SwitchToThread
0x1800053B8: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::deallocate(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@_K@Z
0x180022AE0: "__vectorcall ??_R1A@?0A@EA@exception" ??_R1A@?0A@EA@exception@@8
0x180011DF0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAtlStringMgr@ATL@@UEAAPEAXI@Z
0x180017CC0: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetClientInstallPath(unsigned short * __ptr64 * __ptr64)" ?GetClientInstallPath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAG@Z
0x18000D648: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Swap_bx(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64) __ptr64" ?_Swap_bx@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAXAEAV12@@Z
0x180013670: "protected: virtual long __cdecl MorroCommon::CFileUtils::CopyFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,bool) __ptr64" ?CopyFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@0_N@Z
0x180009B00: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x1800227D0: "__vectorcall ??_R3?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R3?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x1800225F0: "__vectorcall ??_R2?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R2?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x18001F960: "AppID" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x1800124F0: "protected: virtual long __cdecl MorroCommon::CWin32::RegOpenKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?RegOpenKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEAPEAU3@@Z
0x18001E028: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18001CD08: "const ATL::CComObject<class CMpProviderClass>::`vftable'{for `IWbemServices'}" ??_7?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemServices@@@
0x18001DFD8: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x180018228: WPP_SF_qd
0x18001EF08: "not a stream" ??_C@_0N@LGAPMMPI@not?5a?5stream?$AA@
0x18002A612: "struct CommonUtil::CCommonThrowHR CommonUtil::tHR" ?tHR@CommonUtil@@3UCCommonThrowHR@1@A
0x18001D988: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18001DA38: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180023068: "const MorroCommon::CLockEntireFile::`RTTI Complete Object Locator'" ??_R4CLockEntireFile@MorroCommon@@6B@
0x18000F0C0: "private: void __cdecl Microsoft::SecurityClient::CInfectionStateConfig::Initialize(void) __ptr64" ?Initialize@CInfectionStateConfig@SecurityClient@Microsoft@@AEAAXXZ
0x180007538: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18001DE68: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x180002754: WPP_SF_qq
0x18000B494: WPP_SF_qS
0x18000E9E4: MpConfigGetValueDword
0x18001F9B0: "FileType" ??_C@_1BC@NKMMNMGL@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800183FC: "protected: void __cdecl MpCommonEx::CEventLoggerBase::LogEvent(enum MpCommonEx::EventSeverity,unsigned long,class CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > const & __ptr64,unsigned short) __ptr64" ?LogEvent@CEventLoggerBase@MpCommonEx@@IEAAXW4EventSeverity@2@KAEBV?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@G@Z
0x18000B0C0: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::LoadStringW(struct HINSTANCE__ * __ptr64,unsigned int) __ptr64" ?LoadStringW@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHPEAUHINSTANCE__@@I@Z
0x180019C60: "__cdecl Init_thread_header" _Init_thread_header
0x180026A3C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180023210: "__vectorcall ??_R1A@?0A@EA@CPtrObjectProcessHeap@CommonUtil" ??_R1A@?0A@EA@CPtrObjectProcessHeap@CommonUtil@@8
0x18001E7B8: "no such device" ??_C@_0P@FDINDDOK@no?5such?5device?$AA@
0x180009760: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,struct _SYSTEMTIME const & __ptr64) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGAEBU_SYSTEMTIME@@@Z
0x180002F40: "public: __cdecl ATL::CComPtr<struct IWbemClassObject>::~CComPtr<struct IWbemClassObject>(void) __ptr64" ??1?$CComPtr@UIWbemClassObject@@@ATL@@QEAA@XZ
0x18001D8C8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180011EE0: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32Heap@ATL@@UEAAPEAXI@Z
0x18001F1A0: CLSID_StdGlobalInterfaceTable
0x180022F28: "__vectorcall ??_R1A@?0A@EA@CWin32@MorroCommon" ??_R1A@?0A@EA@CWin32@MorroCommon@@8
0x1800299B0: "__vectorcall ??_R0?AVCPathUtils@MorroCommon@" ??_R0?AVCPathUtils@MorroCommon@@@8
0x18000C514: MpConfigClose
0x180019964: "__cdecl _security_init_cookie" __security_init_cookie
0x18000C3A4: MpConfigOpen
0x180008E28: "public: struct HINSTANCE__ * __ptr64 __cdecl ATL::CAtlBaseModule::GetHInstanceAt(int) __ptr64" ?GetHInstanceAt@CAtlBaseModule@ATL@@QEAAPEAUHINSTANCE__@@H@Z
0x180002718: WPP_SF_q
0x1800046E0: "public: virtual unsigned long __cdecl CDetectionItemSizeCalculator::GetSize(class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?GetSize@CDetectionItemSizeCalculator@@UEBAKPEBVCDetectionItem@SecurityClient@Microsoft@@@Z
0x18000C0D4: MpManagerVersionQuery
0x18001F4C0: "User" ??_C@_19PIJILKAI@?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x180020548: WPP_730953bd1c66335f4d9d2052277eb108_Traceguids
0x18001DCF0: "__cdecl _imp_SafeArrayUnlock" __imp_SafeArrayUnlock
0x18001DC98: "__cdecl _imp_GetUserDefaultUILanguage" __imp_GetUserDefaultUILanguage
0x180015380: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@AEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001F230: "\Implemented Categories" ??_C@_1DA@BIHALFED@?$AA?2?$AAI?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180022AA0: "const std::bad_alloc::`RTTI Complete Object Locator'" ??_R4bad_alloc@std@@6B@
0x180012350: "protected: virtual int __cdecl MorroCommon::CWin32::ShowWindowImpl(struct HWND__ * __ptr64,int) __ptr64" ?ShowWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@H@Z
0x18002A640: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_logLocation" ?m_logLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x180012E40: "protected: virtual int __cdecl MorroCommon::CWin32::PrivilegeCheckImpl(void * __ptr64,struct _PRIVILEGE_SET * __ptr64,int * __ptr64) __ptr64" ?PrivilegeCheckImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_PRIVILEGE_SET@@PEAH@Z
0x18001DCF8: "__cdecl _imp_SafeArrayGetLBound" __imp_SafeArrayGetLBound
0x18001DEC8: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x18001E838: "no space on device" ??_C@_0BD@IJDJKDEA@no?5space?5on?5device?$AA@
0x180018730: "public: virtual void * __ptr64 __cdecl CommonUtil::CPredefinedMpHeapsHolder::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPredefinedMpHeapsHolder@CommonUtil@@UEAAPEAXI@Z
0x180004D78: "public: __cdecl CommonUtil::AutoRef<class Microsoft::SecurityClient::CMpProviderEventLogger>::~AutoRef<class Microsoft::SecurityClient::CMpProviderEventLogger>(void) __ptr64" ??1?$AutoRef@VCMpProviderEventLogger@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x1800123D0: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessImpl(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessImpl@CWin32@MorroCommon@@MEAAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180003490: "public: virtual void * __ptr64 __cdecl ATL::CInstanceProviderHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCInstanceProviderHelper@ATL@@UEAAPEAXI@Z
0x18000CA58: "private: __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::CMpProviderEventLogger(void) __ptr64" ??0CMpProviderEventLogger@SecurityClient@Microsoft@@AEAA@XZ
0x180009C0C: "void __cdecl Microsoft::SecurityClient::TraceUserName(enum Microsoft::SecurityClient::ClientImpersonationSteps)" ?TraceUserName@SecurityClient@Microsoft@@YAXW4ClientImpersonationSteps@12@@Z
0x1800187DC: "long __cdecl CommonUtil::CreateNewPtrObject<class CommonUtil::CPredefinedMpHeapsHolder>(class CommonUtil::CPredefinedMpHeapsHolder * __ptr64 * __ptr64)" ??$CreateNewPtrObject@VCPredefinedMpHeapsHolder@CommonUtil@@@CommonUtil@@YAJPEAPEAVCPredefinedMpHeapsHolder@0@@Z
0x180026A28: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18001DFA0: "__cdecl _imp_memmove" __imp_memmove
0x18001F0C8: "wrong protocol type" ??_C@_0BE@MIEJDDNH@wrong?5protocol?5type?$AA@
0x180023308: "const CommonUtil::CPtrObjectProcessHeap::`RTTI Complete Object Locator'" ??_R4CPtrObjectProcessHeap@CommonUtil@@6B@
0x18001C9A0: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x180018BF4: MpUtilsDllMainInitialize
0x1800145CC: "private: static long __cdecl MorroCommon::CFileUtils::LoadResourceInner(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?LoadResourceInner@CFileUtils@MorroCommon@@CAJIPEBG0PEAPEAEPEA_K@Z
0x180018DA0: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x18001CC88: "const ATL::CInstanceProviderHelper::`vftable'" ??_7CInstanceProviderHelper@ATL@@6B@
0x180021F10: "__vectorcall ??_R1A@?0A@EA@CInstanceProviderHelper@ATL" ??_R1A@?0A@EA@CInstanceProviderHelper@ATL@@8
0x180002900: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionWbemCreator@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180022670: "__vectorcall ??_R1A@?0A@EA@?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x1800227B8: "__vectorcall ??_R3?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R3?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x1800225C0: "__vectorcall ??_R2?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R2?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x180013220: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessAsUserImpl(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessAsUserImpl@CWin32@MorroCommon@@MEAAHPEAXPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180022900: "__vectorcall ??_R1A@?0A@EA@?$CComObject@VCMpProviderClass@@@ATL" ??_R1A@?0A@EA@?$CComObject@VCMpProviderClass@@@ATL@@8
0x18001D620: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x18001E088: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18001F330: "iostream" ??_C@_08LLGCOLLL@iostream?$AA@
0x18000C924: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>::~CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>(void) __ptr64" ??1?$CUniqueHandle@UCAutoFreeLibrary@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18001F9C8: "Interface" ??_C@_1BE@EKPAFMCP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x1800200C8: "__cdecl GUID_bfbf883a_cad7_11d3_a11b_00105a1f515a" _GUID_bfbf883a_cad7_11d3_a11b_00105a1f515a
0x180012160: "protected: virtual __int64 __cdecl MorroCommon::CWin32::SendMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?SendMessageImpl@CWin32@MorroCommon@@MEAA_JPEAUHWND__@@I_K_J@Z
0x18000E99C: "class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> >,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> >(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > > & __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@PEAV12@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x1800024D0: "public: virtual class std::error_condition __cdecl std::error_category::default_error_condition(int)const __ptr64" ?default_error_condition@error_category@std@@UEBA?AVerror_condition@2@H@Z
0x18001DE38: "__cdecl _imp_PostThreadMessageW" __imp_PostThreadMessageW
0x18001F418: "CategoryID" ??_C@_1BG@KBAPIFFM@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAI?$AAD?$AA?$AA@
0x18000BA30: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpClientApi::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpClientApi@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180017728: "public: __cdecl MorroCommon::CAutoLockedCertCheck::~CAutoLockedCertCheck(void) __ptr64" ??1CAutoLockedCertCheck@MorroCommon@@QEAA@XZ
0x18001DFE0: "__cdecl _imp_malloc" __imp_malloc
0x18001DFF8: "__cdecl _imp__purecall" __imp__purecall
0x18001D948: ADVAPI32_NULL_THUNK_DATA
0x18000B1DC: "protected: static void __cdecl ATL::CSimpleStringT<char,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@D$0A@@ATL@@KAXXZ
0x1800127C0: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::FindWindowImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindWindowImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEBG0@Z
0x1800228F0: "__vectorcall ??_R2?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R2?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x1800229B8: "__vectorcall ??_R3?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R3?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18001DA98: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18001DBE8: "__cdecl _imp_GetLocaleInfoW" __imp_GetLocaleInfoW
0x1800053B8: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::deallocate(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_K@Z
0x180003770: "public: virtual long __cdecl CInfectionStateClass::DeleteInstanceAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteInstanceAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180012D70: "protected: virtual int __cdecl MorroCommon::CWin32::QueryServiceStatusImpl(struct SC_HANDLE__ * __ptr64,struct _SERVICE_STATUS * __ptr64) __ptr64" ?QueryServiceStatusImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@PEAU_SERVICE_STATUS@@@Z
0x180002A54: "private: void __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::InitializeInstance(struct IWbemClassObject * __ptr64,class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?InitializeInstance@CDetectionWbemCreator@SecurityClient@Microsoft@@AEBAXPEAUIWbemClassObject@@PEBVCDetectionItem@23@@Z
0x180029E60: "public: static class std::locale::id std::numpunct<wchar_t>::id" ?id@?$numpunct@_W@std@@2V0locale@2@A
0x180004D78: "public: __cdecl CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>::~AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180026940: "__cdecl TI2PEAVEUnknownError@MorroCommon@@" _TI2PEAVEUnknownError@MorroCommon@@
0x18001DED0: "__cdecl _imp_CryptCATAdminCalcHashFromFileHandle" __imp_CryptCATAdminCalcHashFromFileHandle
0x18001DC50: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180012900: "protected: virtual int __cdecl MorroCommon::CWin32::SetForegroundWindowImpl(struct HWND__ * __ptr64) __ptr64" ?SetForegroundWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x180010A4C: "void __cdecl CommonUtil::StringVPrintfW(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,bool,unsigned short const * __ptr64,char * __ptr64)" ?StringVPrintfW@CommonUtil@@YAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@1@_NPEBGPEAD@Z
0x180005E70: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEAGPEAPEAG@Z
0x180005290: "public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCMpProviderClass@@@ATL@@UEAAKXZ
0x18001F760: WPP_6f5eab5deb3e35356088f636632b5f30_Traceguids
0x18001D880: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x18000DA60: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECMpProviderEventLogger@SecurityClient@Microsoft@@WBA@EAAPEAXI@Z
0x180007D00: "public: virtual long __cdecl CMpProviderClass::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CMpProviderClass@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x180003770: "public: virtual long __cdecl CMpProviderClass::ExecQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecQueryAsync@CMpProviderClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180019450: "__cdecl _report_gsfailure" __report_gsfailure
0x1800202F0: "MpAllocMemory" ??_C@_0O@FDBECPNN@MpAllocMemory?$AA@
0x1800203D8: WPP_ba7d25f69aac3fe1539902094218c7eb_Traceguids
0x180022248: "const ATL::CComObjectCached<class ATL::CComClassFactory>::`RTTI Complete Object Locator'" ??_R4?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x180020040: "PathLevel" ??_C@_1BE@NIAPAEHB@?$AAP?$AAa?$AAt?$AAh?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180013120: "protected: virtual int __cdecl MorroCommon::CWin32::CloseServiceHandleImpl(struct SC_HANDLE__ * __ptr64) __ptr64" ?CloseServiceHandleImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@@Z
0x180021938: "__vectorcall ??_R2_System_error_category@std" ??_R2_System_error_category@std@@8
0x180021A80: "__vectorcall ??_R3_System_error_category@std" ??_R3_System_error_category@std@@8
0x180020718: "Kernel32.dll" ??_C@_1BK@EJBALEBG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180005340: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CInfectionStateClass>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCInfectionStateClass@@@ATL@@UEAAPEAXI@Z
0x18001DA00: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180012200: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLastErrorImpl(void) __ptr64" ?GetLastErrorImpl@CWin32@MorroCommon@@MEAAKXZ
0x180021CF0: "__vectorcall ??_R2?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R2?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x180013090: "protected: virtual int __cdecl MorroCommon::CWin32::WritePrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WritePrivateProfileStringImpl@CWin32@MorroCommon@@MEAAHPEBG000@Z
0x1800220A8: "__vectorcall ??_R3?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R3?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x1800196C8: "__cdecl onexit" _onexit
0x18001F7C8: "REGISTRY" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x180003480: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecNotificationQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecNotificationQuery@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x1800291E8: "__vectorcall ??_R0?AV_System_error_category@std@" ??_R0?AV_System_error_category@std@@@8
0x180002F70: "public: __cdecl CommonUtil::AutoRef<struct IWbemObjectTextSrc>::~AutoRef<struct IWbemObjectTextSrc>(void) __ptr64" ??1?$AutoRef@UIWbemObjectTextSrc@@@CommonUtil@@QEAA@XZ
0x18001EEB8: "no such device or address" ??_C@_0BK@IMCPHCBI@no?5such?5device?5or?5address?$AA@
0x18002A9E0: "__cdecl _native_startup_state" __native_startup_state
0x180001588: HrDllMain
0x180017780: "public: long __cdecl MorroCommon::CAutoLockedCertCheck::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CAutoLockedCertCheck@MorroCommon@@QEAAJPEBG@Z
0x1800144E0: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CComBSTR & __ptr64) __ptr64" ?LoadResourceImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0AEAVCComBSTR@ATL@@@Z
0x180003954: WPP_SF_SDqq
0x18000FA70: "public: virtual long __cdecl CommonUtil::CHResultExceptionImpl::GetErrorCode(void)const __ptr64" ?GetErrorCode@CHResultExceptionImpl@CommonUtil@@UEBAJXZ
0x1800164A0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::RemoveTrailingSlashInPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?RemoveTrailingSlashInPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x180020870: WPP_db61690a89973da19d491352a7a7c212_Traceguids
0x18000D884: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_K0@Z
0x18002A3F8: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x1800294C8: "__vectorcall ??_R0?AVIWbemInstProviderImpl@ATL@" ??_R0?AVIWbemInstProviderImpl@ATL@@@8
0x18001CC50: "const ATL::CRegObject::`vftable'" ??_7CRegObject@ATL@@6B@
0x18001EA70: "invalid_argument" ??_C@_0BB@FFIHMIPJ@invalid_argument?$AA@
0x180002660: "public: virtual char const * __ptr64 __cdecl std::_System_error_category::name(void)const __ptr64" ?name@_System_error_category@std@@UEBAPEBDXZ
0x18001F4B0: "Domain" ??_C@_1O@OAMNPMOM@?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AA?$AA@
0x18001DEA0: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x18001F810: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18001D9D0: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180012BB0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateFileImpl(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?CreateFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180026B18: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x180012C60: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetFileSizeImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileSizeImpl@CWin32@MorroCommon@@MEAAKPEAXPEAK@Z
0x180003770: "public: virtual long __cdecl CMpProviderClass::ExecMethodAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecMethodAsync@CMpProviderClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@@Z
0x18001E948: "address_not_available" ??_C@_0BG@IPMGOJF@address_not_available?$AA@
0x180008A30: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CMpProviderClass> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCMpProviderClass@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001D910: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180029DB0: "__vectorcall ??_R0?AVCPtrObject@CommonUtil@" ??_R0?AVCPtrObject@CommonUtil@@@8
0x180020798: WPP_186f0747e154398220c668ad71302e02_Traceguids
0x180016270: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32PathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32PathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180004E00: "public: virtual unsigned long __cdecl ATL::CRegObject::Release(void) __ptr64" ?Release@CRegObject@ATL@@UEAAKXZ
0x18000DD40: "public: unsigned long __cdecl Microsoft::SecurityClient::CInfectionStateConfig::GetMaxDetectionSizeAllowed(void)const __ptr64" ?GetMaxDetectionSizeAllowed@CInfectionStateConfig@SecurityClient@Microsoft@@QEBAKXZ
0x18001F8D8: "HKEY_PERFORMANCE_DATA" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18000CA20: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@XZ
0x18001F318: "generic" ??_C@_07DCLBNMLN@generic?$AA@
0x180021FB0: "__vectorcall ??_R1A@?0A@EC@IUnknown" ??_R1A@?0A@EC@IUnknown@@8
0x180022500: "__vectorcall ??_R1A@?0A@EA@IUnknown" ??_R1A@?0A@EA@IUnknown@@8
0x18001F158: "Val" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x180026AC8: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x180029520: "__vectorcall ??_R0?AUIWbemServices@" ??_R0?AUIWbemServices@@@8
0x18000C970: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x1800122C0: "protected: virtual long __cdecl MorroCommon::CWin32::RegSetValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?RegSetValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18001D840: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180029858: "__vectorcall ??_R0?AV?$CAtlModuleT@VCMpProviderModule@@@ATL@" ??_R0?AV?$CAtlModuleT@VCMpProviderModule@@@ATL@@@8
0x18001F970: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18001CF18: "const Microsoft::SecurityClient::CMpClientApi::`vftable'" ??_7CMpClientApi@SecurityClient@Microsoft@@6B@
0x18001DE40: "__cdecl _imp_AdjustWindowRectEx" __imp_AdjustWindowRectEx
0x180001B00: DllRegisterServer
0x180020578: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180022180: "const CDetectionItemSizeCalculator::`RTTI Complete Object Locator'" ??_R4CDetectionItemSizeCalculator@@6B@
0x1800059C0: "public: __cdecl ATL::CAutoVectorPtr<unsigned short>::~CAutoVectorPtr<unsigned short>(void) __ptr64" ??1?$CAutoVectorPtr@G@ATL@@QEAA@XZ
0x180007348: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x18000CBA4: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogDetectionsMaxSizeExceeded(unsigned long,unsigned long) __ptr64" ?LogDetectionsMaxSizeExceeded@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXKK@Z
0x18001DF08: WTSAPI32_NULL_THUNK_DATA
0x180022B28: "__vectorcall ??_R1A@?0A@EA@CPathUtils@MorroCommon" ??_R1A@?0A@EA@CPathUtils@MorroCommon@@8
0x18001DD30: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x1800150A8: "public: long __cdecl ATL::CComBSTR::Append(char const * __ptr64) __ptr64" ?Append@CComBSTR@ATL@@QEAAJPEBD@Z
0x1800024A0: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Iostream_error_category@std@@UEAAPEAXI@Z
0x1800179A0: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x180026760: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x180020700: "%d.%d.%d.%d" ??_C@_1BI@FCMLLAGN@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x18001CA30: "const std::_Iostream_error_category::`vftable'" ??_7_Iostream_error_category@std@@6B@
0x180009498: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG0@Z
0x18001D660: "protected: static unsigned short const * __ptr64 const * const ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1QBQEBGB
0x180002480: "public: __cdecl CommonUtil::CReturnHandle<class CommonUtil::CAutoBSTR>::~CReturnHandle<class CommonUtil::CAutoBSTR>(void) __ptr64" ??1?$CReturnHandle@VCAutoBSTR@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18000DDA4: WPP_SF__guid_d
0x180011DF0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAtlStringMgr@ATL@@UEAAPEAXI@Z
0x18001EBB8: "operation_would_block" ??_C@_0BG@GDGHKFDH@operation_would_block?$AA@
0x18001D540: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x180022E20: "const CommonUtil::CHResultExceptionImpl::`RTTI Complete Object Locator'" ??_R4CHResultExceptionImpl@CommonUtil@@6B@
0x1800133B0: "protected: virtual int __cdecl MorroCommon::CWin32::GetVersionExImpl(struct _OSVERSIONINFOW * __ptr64) __ptr64" ?GetVersionExImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOW@@@Z
0x180029800: "__vectorcall ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@" ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@@8
0x18001EB90: "wrong_protocol_type" ??_C@_0BE@GAOJJFPC@wrong_protocol_type?$AA@
0x1800123B0: "protected: virtual int __cdecl MorroCommon::CWin32::GetLocaleInfoImpl(unsigned long,unsigned long,unsigned short * __ptr64,int) __ptr64" ?GetLocaleInfoImpl@CWin32@MorroCommon@@MEAAHKKPEAGH@Z
0x180008FA4: WPP_SF_SI
0x180009210: WPP_SF_Si
0x180009294: WPP_SF_Sl
0x180026960: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x18000FFC4: WPP_SF_sd
0x180008E98: WPP_SF_SD
0x180008E98: WPP_SF_Sd
0x1800224D8: "__vectorcall ??_R2IUnknown" ??_R2IUnknown@@8
0x1800224E8: "__vectorcall ??_R3IUnknown" ??_R3IUnknown@@8
0x18001E010: "__cdecl _imp_free" __imp_free
0x180022548: "__vectorcall ??_R3CRegObject@ATL" ??_R3CRegObject@ATL@@8
0x180022528: "__vectorcall ??_R2CRegObject@ATL" ??_R2CRegObject@ATL@@8
0x1800198D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800181B8: WPP_SF_Sq
0x180003B14: WPP_SF_sq
0x18000902C: WPP_SF_SS
0x180011AAC: MpInvokeStartupInitialization
0x180012740: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::OpenProcessImpl(unsigned long,int,unsigned long) __ptr64" ?OpenProcessImpl@CWin32@MorroCommon@@MEAAPEAXKHK@Z
0x18001DFE8: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180012B60: "protected: virtual long __cdecl MorroCommon::CWin32::CoCreateGuidImpl(struct _GUID * __ptr64) __ptr64" ?CoCreateGuidImpl@CWin32@MorroCommon@@MEAAJPEAU_GUID@@@Z
0x180018D30: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x18001D7F0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180026970: "__cdecl _pobjMap_CMpProviderClass" __pobjMap_CMpProviderClass
0x180022028: "__vectorcall ??_R1A@?0A@EA@IWbemServices" ??_R1A@?0A@EA@IWbemServices@@8
0x180022348: "__vectorcall ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180011BE4: "long __cdecl CommonUtil::OnInitializeAtStartupNoThrow(long (__cdecl*)(void * __ptr64),void * __ptr64)" ?OnInitializeAtStartupNoThrow@CommonUtil@@YAJP6AJPEAX@Z0@Z
0x18001DC40: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x18001F098: "too many symbolic link levels" ??_C@_0BO@EFGOJEF@too?5many?5symbolic?5link?5levels?$AA@
0x180029A90: "__vectorcall ??_R0?AVCMpProviderEventLogger@SecurityClient@Microsoft@" ??_R0?AVCMpProviderEventLogger@SecurityClient@Microsoft@@@8
0x18001FC70: "AntivirusSignatureUpdateDateTime" ??_C@_1EC@IIAPJBMK@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe@
0x180011EE0: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32Heap@ATL@@UEAAPEAXI@Z
0x18001CF28: "const Microsoft::SecurityClient::CMpProviderEventLogger::`vftable'{for `MpCommonEx::CEventLoggerBase'}" ??_7CMpProviderEventLogger@SecurityClient@Microsoft@@6BCEventLoggerBase@MpCommonEx@@@
0x18000377C: WPP_SF_S
0x18001EB50: "not_a_socket" ??_C@_0N@IMHKKLEM@not_a_socket?$AA@
0x180019D66: memset
0x180026B40: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180013ED0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFileIfSizeExceededImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,__int64) __ptr64" ?DeleteFileIfSizeExceededImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_J@Z
0x180022840: "__vectorcall ??_R2?$CComObject@VCMpProviderClass@@@ATL" ??_R2?$CComObject@VCMpProviderClass@@@ATL@@8
0x18001DA78: "__cdecl _imp_ReadFile" __imp_ReadFile
0x1800229A0: "__vectorcall ??_R3?$CComObject@VCMpProviderClass@@@ATL" ??_R3?$CComObject@VCMpProviderClass@@@ATL@@8
0x180020100: "%04u%02u%02u%02u%02u%02u.%06u-00" ??_C@_1EE@BLCEBEPO@?$AA?$CF?$AA0?$AA4?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?4?$AA?$CF?$AA0?$AA6?$AAu?$AA?9?$AA0?$AA0@
0x18001F4D0: "Resources" ??_C@_1BE@PBIOBJMM@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x180021920: "__vectorcall ??_R2CDetectionWbemCreator@SecurityClient@Microsoft" ??_R2CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x180021A68: "__vectorcall ??_R3CDetectionWbemCreator@SecurityClient@Microsoft" ??_R3CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x18001DD70: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW

[JEB Decompiler by PNF Software]