Generated by JEB on 2019/02/01

PE: C:\Windows\WinSxS\amd64_windows-defender-management-v1_31bf3856ad364e35_10.0.17134.1_none_00261ecd7174048c\MpProvider.dll Base=0x180000000 SHA-256=C78AD172FF82541BEAF6BA6889E977DCC4F33870D1A18ED8FE8E7F3BD8160EB7
PDB: MpProvider.pdb GUID={1DD71A49-1A35-3327-362D2CC9DF10B4B3} Age=1

2072 located named symbols:
0x180022D68: "__vectorcall ??_R3CMpProviderEventLogger@SecurityClient@Microsoft" ??_R3CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x180022CA8: "__vectorcall ??_R2CMpProviderEventLogger@SecurityClient@Microsoft" ??_R2CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x180021EF0: "__vectorcall ??_R1A@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R1A@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x18000BAF4: MpManagerOpen
0x18001DED8: WINTRUST_NULL_THUNK_DATA
0x18001FE30: "`string'" ??_C@_1CA@ONHLJKEC@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x18001F740: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x1800033A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefObject@CommonUtil@@MEAAPEAXI@Z
0x18000F860: "long __cdecl CommonUtil::HrFromStdException(class exception const & __ptr64)" ?HrFromStdException@CommonUtil@@YAJAEBVexception@@@Z
0x180012180: "protected: virtual int __cdecl MorroCommon::CWin32::PostMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?PostMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@I_K_J@Z
0x18001DB20: "__cdecl _imp_LockResource" __imp_LockResource
0x18001D928: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180008380: "private: class CommonUtil::AutoRef<struct IWbemClassObject> __cdecl CMpProviderClass::GetInstanceByPath(unsigned short * __ptr64 const) __ptr64" ?GetInstanceByPath@CMpProviderClass@@AEAA?AV?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAG@Z
0x18000C664: "public: __cdecl CommonUtil::CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>::~CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>(void) __ptr64" ??1?$CGenericAutoLock@UCMpCriticalSectionFunctor@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180022650: "__vectorcall ??_R1A@?0A@EA@CMpProviderModule" ??_R1A@?0A@EA@CMpProviderModule@@8
0x18001ED88: "`string'" ??_C@_0BG@CDNPAGJK@illegal?5byte?5sequence?$AA@
0x18000AA8C: "public: class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@QEAAPEAVCFileUtils@1@XZ
0x180018AD0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180012920: "protected: virtual int __cdecl MorroCommon::CWin32::SetEventImpl(void * __ptr64) __ptr64" ?SetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001F148: "`string'" ??_C@_08JKDBNODE@Enter?5to?$AA@
0x18001FC30: "`string'" ??_C@_1DE@JNGNPGBH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180018474: "public: __cdecl std::out_of_range::out_of_range(char const * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@PEBD@Z
0x18001E870: "`string'" ??_C@_0BH@KEFGLDAF@function?5not?5supported?$AA@
0x18001DA08: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x180005170: "public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAKXZ
0x180018EE0: "__cdecl FindPESection" _FindPESection
0x180008B1C: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18001E9B8: "`string'" ??_C@_0BD@OJMJDIGI@connection_aborted?$AA@
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateClassEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateClassEnumAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18000F970: "long __cdecl CommonUtil::NewVSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?NewVSprintfW@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x18000F630: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultException@CommonUtil@@MEAAPEAXI@Z
0x180021E28: "__vectorcall ??_R1A@?0A@EA@?$CComObject@VCInfectionStateClass@@@ATL" ??_R1A@?0A@EA@?$CComObject@VCInfectionStateClass@@@ATL@@8
0x18001D840: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18001E0A0: "__cdecl _imp_CoCreateGuid" __imp_CoCreateGuid
0x180012AB0: ?SHGetSpecialFolderLocationImpl@CWin32@MorroCommon@@MEAAJPEAUHWND__@@HPEAPEFAU_ITEMIDLIST@@@Z
0x180015340: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModulePathImpl(void) __ptr64" ?GetCurrentModulePathImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180012C20: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQueryUserTokenImpl(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?WTSQueryUserTokenImpl@CWin32@MorroCommon@@MEAAHKPEAPEAX@Z
0x1800207D8: WPP_da4900b5adbf31a20bb2b78f4b9ed990_Traceguids
0x18002B8A0: "private: static class MorroCommon::CPathUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@0PEAVCPathUtils@2@EA
0x18000D164: "public: __cdecl CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@QEAA@XZ
0x18001DFE0: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x1800122E0: "protected: virtual int __cdecl MorroCommon::CWin32::DuplicateTokenExImpl(void * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,enum _SECURITY_IMPERSONATION_LEVEL,enum _TOKEN_TYPE,void * __ptr64 * __ptr64) __ptr64" ?DuplicateTokenExImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAU_SECURITY_ATTRIBUTES@@W4_SECURITY_IMPERSONATION_LEVEL@@W4_TOKEN_TYPE@@PEAPEAX@Z
0x180027934: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18001DFA8: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x180008A70: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CMpProviderClass>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCMpProviderClass@@@ATL@@UEAAPEAXI@Z
0x18001F068: "`string'" ??_C@_0BO@HACHBEKI@too?5many?5files?5open?5in?5system?$AA@
0x18001ED58: "`string'" ??_C@_0BB@DHFDFGDM@host?5unreachable?$AA@
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::OpenNamespace(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemServices * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?OpenNamespace@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemServices@@PEAPEAUIWbemCallResult@@@Z
0x18001FFD0: CLSID_WbemDefPath
0x1800131A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?DeleteFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180011F00: "protected: virtual long __cdecl MorroCommon::CWin32::RegCloseKeyImpl(struct HKEY__ * __ptr64) __ptr64" ?RegCloseKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@@Z
0x18002A790: "__vectorcall ??_R0?AU_ATL_MODULE70@ATL@" ??_R0?AU_ATL_MODULE70@ATL@@@8
0x180022DD0: "__vectorcall ??_R2CDetectionItem@SecurityClient@Microsoft" ??_R2CDetectionItem@SecurityClient@Microsoft@@8
0x180022E10: "__vectorcall ??_R3CDetectionItem@SecurityClient@Microsoft" ??_R3CDetectionItem@SecurityClient@Microsoft@@8
0x1800232B8: "__vectorcall ??_R2CPtrObjectProcessHeap@CommonUtil" ??_R2CPtrObjectProcessHeap@CommonUtil@@8
0x180023208: "__vectorcall ??_R3CPtrObjectProcessHeap@CommonUtil" ??_R3CPtrObjectProcessHeap@CommonUtil@@8
0x18000FEA8: "long __cdecl CommonUtil::UtilLoadSystemLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilLoadSystemLibrary@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBG@Z
0x1800022F8: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x180022488: "__vectorcall ??_R1A@?0A@EA@CRegObject@ATL" ??_R1A@?0A@EA@CRegObject@ATL@@8
0x180012CB0: "protected: virtual void __cdecl MorroCommon::CWin32::GetLocalTimeImpl(struct _SYSTEMTIME * __ptr64) __ptr64" ?GetLocalTimeImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEMTIME@@@Z
0x18001DBC0: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x18001EC18: "`string'" ??_C@_0BC@DFIBIBIL@already?5connected?$AA@
0x18002A2F0: "__vectorcall ??_R0?AVCDetectionItemSizeCalculator@" ??_R0?AVCDetectionItemSizeCalculator@@@8
0x18000D1F8: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x18001EF80: "`string'" ??_C@_0BG@OEMDKMEE@operation?5would?5block?$AA@
0x18002AE30: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18001DA00: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180001C90: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::operator unsigned short const * __ptr64(void)const __ptr64" ??B?$CSimpleStringT@G$0A@@ATL@@QEBAPEBGXZ
0x18001E018: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x18001DF10: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18000CB38: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogDetectionsMaxNumberExceeded(unsigned long) __ptr64" ?LogDetectionsMaxNumberExceeded@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXK@Z
0x18001C9F8: "const std::_System_error_category::`vftable'" ??_7_System_error_category@std@@6B@
0x18001F5C8: "`string'" ??_C@_1BE@NFEFJPBP@?$AAP?$AAa?$AAc?$AAk?$AAe?$AAd?$AAX?$AAm?$AAl?$AA?$AA@
0x1800036A0: "public: virtual long __cdecl CInfectionStateClass::ExecQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecQueryAsync@CInfectionStateClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001DC30: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180003BF0: "public: virtual long __cdecl CInfectionStateClass::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CInfectionStateClass@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x180021F90: "__vectorcall ??_R17?0A@EC@IUnknown" ??_R17?0A@EC@IUnknown@@8
0x180023110: "__vectorcall ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon" ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon@@8
0x18001D7C0: "__cdecl tls_used" _tls_used
0x18001F95C: "`string'" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x18001F160: "`string'" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180012B20: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyEnvironmentBlockImpl(void * __ptr64) __ptr64" ?DestroyEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180005090: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x180018584: "__cdecl CRT_INIT" _CRT_INIT
0x18001DFA0: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x18001F088: "`string'" ??_C@_0P@HCOMKFCC@too?5many?5links?$AA@
0x1800206B0: "`string'" ??_C@_0BP@FPNJPEJC@GetSystemTimePreciseAsFileTime?$AA@
0x18001D9B0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18001E888: "`string'" ??_C@_0BC@NJECKMKE@no?5lock?5available?$AA@
0x18001E8F0: "`string'" ??_C@_0BD@MOLBPMEA@operation?5canceled?$AA@
0x180007810: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x180010748: "class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl CommonUtil::StringPrintfW(unsigned short const * __ptr64,...)" ?StringPrintfW@CommonUtil@@YA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@1@PEBGZZ
0x180022B80: "__vectorcall ??_R1A@?0A@EA@CFileUtils@MorroCommon" ??_R1A@?0A@EA@CFileUtils@MorroCommon@@8
0x180011DC0: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?PathIsDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180018A4C: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteClass(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteClass@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x1800055D4: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180008AE0: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x1800036A0: "public: virtual long __cdecl CInfectionStateClass::ExecMethodAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecMethodAsync@CInfectionStateClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@@Z
0x1800123B0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LoadResourceImpl(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64) __ptr64" ?LoadResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAUHINSTANCE__@@PEAUHRSRC__@@@Z
0x180004CE0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CInfectionStateClass> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCInfectionStateClass@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000BC64: MpManagerStatusQuery
0x1800100DC: "long __cdecl CommonUtil::UtilRawGetLoadedProcAddress(__int64 (__cdecl* * __ptr64)(void),unsigned short const * __ptr64,char const * __ptr64,bool)" ?UtilRawGetLoadedProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBGPEBD_N@Z
0x18002A898: "__vectorcall ??_R0?AVCMpProviderModule@" ??_R0?AVCMpProviderModule@@@8
0x180022818: "__vectorcall ??_R3?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R3?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x180001460: WppControlCallback
0x180022630: "__vectorcall ??_R2?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R2?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x180022E28: ??_R4CDetectionItem@SecurityClient@Microsoft@@6B@
0x180019370: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001DD60: SHELL32_NULL_THUNK_DATA
0x18001F1D0: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x18001DB88: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18002A5F0: "__vectorcall ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@" ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@@8
0x18001FD08: "`string'" ??_C@_1DE@KFOIHPKJ@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800275B0: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x18000F83C: "public: __cdecl CommonUtil::CHResultException::CHResultException(class CommonUtil::CHResultException const & __ptr64) __ptr64" ??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z
0x18002A120: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x180012150: "protected: virtual int __cdecl MorroCommon::CWin32::IsWow64ProcessImpl(void * __ptr64,int * __ptr64) __ptr64" ?IsWow64ProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAH@Z
0x180002490: "public: virtual bool __cdecl std::error_category::equivalent(int,class std::error_condition const & __ptr64)const __ptr64" ?equivalent@error_category@std@@UEBA_NHAEBVerror_condition@2@@Z
0x180002F8C: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z
0x18002B8C0: ?instance@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV23@XZ@4V23@A
0x18001DD08: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x1800236B4: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x18002790C: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180022250: ??_R4CProviderHelper@ATL@@6B@
0x180012970: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentThreadIdImpl(void) __ptr64" ?GetCurrentThreadIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x180022228: ??_R4CInstanceProviderHelper@ATL@@6B@
0x18002AD40: "__vectorcall ??_R0?AUILockedCertCheck@MorroCommon@" ??_R0?AUILockedCertCheck@MorroCommon@@@8
0x180021C50: "__vectorcall ??_R2CDetectionItemSizeCalculator" ??_R2CDetectionItemSizeCalculator@@8
0x1800119B0: "public: virtual struct ATL::IAtlStringMgr * __ptr64 __cdecl ATL::CAtlStringMgr::Clone(void) __ptr64" ?Clone@CAtlStringMgr@ATL@@UEAAPEAUIAtlStringMgr@2@XZ
0x18001EA20: "`string'" ??_C@_0M@IJGMGFGP@bad_address?$AA@
0x1800220A8: "__vectorcall ??_R3CDetectionItemSizeCalculator" ??_R3CDetectionItemSizeCalculator@@8
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::GetObjectW(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?GetObjectW@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemClassObject@@PEAPEAUIWbemCallResult@@@Z
0x18000CE70: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogInfectiosnStateGenericError(long) __ptr64" ?LogInfectiosnStateGenericError@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXJ@Z
0x18001DEB0: "__cdecl _imp_CryptCATAdminEnumCatalogFromHash" __imp_CryptCATAdminEnumCatalogFromHash
0x18001DD48: "__cdecl _imp_SHGetFolderPathW" __imp_SHGetFolderPathW
0x18000F574: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEAAX_K@Z
0x18000A7C8: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::~CSimpleStringT<unsigned short,0>(void) __ptr64" ??1?$CSimpleStringT@G$0A@@ATL@@QEAA@XZ
0x18001DB68: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x180020680: WPP_65955c1b438e3b4ae62b1cb23eb0933d_Traceguids
0x180018450: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x18001F5E0: "`string'" ??_C@_1BO@LHDIOIBF@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18002A900: "__vectorcall ??_R0?AV?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@" ??_R0?AV?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@@8
0x18001F008: "`string'" ??_C@_0BE@GOIPJJHG@result?5out?5of?5range?$AA@
0x180022080: "__vectorcall ??_R1A@?0A@EA@?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x180020328: "`string'" ??_C@_1DE@CIIAGCCJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x18001E9D0: "`string'" ??_C@_0BD@NGKCIFEP@connection_refused?$AA@
0x18002B450: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils> MorroCommon::CFileUtils::m_instance" ?m_instance@CFileUtils@MorroCommon@@0V?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@2@A
0x18001F928: "`string'" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18001DD10: "__cdecl _imp_SafeArrayLock" __imp_SafeArrayLock
0x1800205B0: "`string'" ??_C@_1GK@NBFCFHP@?$AA?$CF?$AAs?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0@
0x18001CBE0: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x18001345C: "public: __cdecl MorroCommon::SFolderItem::~SFolderItem(void) __ptr64" ??1SFolderItem@MorroCommon@@QEAA@XZ
0x180012130: "protected: virtual int __cdecl MorroCommon::CWin32::VerQueryValueImpl(void const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned int * __ptr64) __ptr64" ?VerQueryValueImpl@CWin32@MorroCommon@@MEAAHPEBXPEBGPEAPEAXPEAI@Z
0x1800055BC: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >::~CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180016484: "long __cdecl MorroCommon::HrCStringFormatV(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?HrCStringFormatV@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGPEAD@Z
0x1800277E8: "__cdecl _pobjMap_CInfectionStateClass" __pobjMap_CInfectionStateClass
0x18001F950: "`string'" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x180002450: "public: virtual void * __ptr64 __cdecl std::error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_Eerror_category@std@@UEAAPEAXI@Z
0x18002A6D8: "__vectorcall ??_R0?AVCRegObject@ATL@" ??_R0?AVCRegObject@ATL@@@8
0x180002318: "public: __cdecl MorroCommon::EHresultException::EHresultException(long) __ptr64" ??0EHresultException@MorroCommon@@QEAA@J@Z
0x18001EB28: "`string'" ??_C@_0BD@JHIHCGKP@no_protocol_option?$AA@
0x18001FD98: "`string'" ??_C@_1CM@MAAOGODB@?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAS?$AAc?$AAa?$AAn?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001D8B8: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x1800018C0: DllGetClassObject
0x180012420: "protected: virtual int __cdecl MorroCommon::CWin32::DeleteFileImpl(unsigned short const * __ptr64) __ptr64" ?DeleteFileImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x1800113F0: "void __cdecl CommonUtil::MpAtlEnsureThrow(long)" ?MpAtlEnsureThrow@CommonUtil@@YAXJ@Z
0x18001DFC0: "__cdecl _imp_memmove_s" __imp_memmove_s
0x180012080: "protected: virtual int __cdecl MorroCommon::CWin32::CloseHandleImpl(void * __ptr64) __ptr64" ?CloseHandleImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180002EE4: "public: __cdecl CommonUtil::AutoRef<struct IWbemContext>::~AutoRef<struct IWbemContext>(void) __ptr64" ??1?$AutoRef@UIWbemContext@@@CommonUtil@@QEAA@XZ
0x18001D810: "__cdecl _imp_EnableTrace" __imp_EnableTrace
0x180017D14: "public: static unsigned short const * __ptr64 __cdecl MpCommonEx::CCommonRegistryEx::GetSecurityClientRegKey(void)" ?GetSecurityClientRegKey@CCommonRegistryEx@MpCommonEx@@SAPEBGXZ
0x180020880: "`string'" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x18001ECC0: "`string'" ??_C@_0BP@KAIHPOGN@connection?5already?5in?5progress?$AA@
0x1800036A0: "public: virtual long __cdecl CMpProviderClass::DeleteInstanceAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteInstanceAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180017A90: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x180004D00: ?GetObjectDescription@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@SAPEBGXZ
0x1800016EC: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x18001F770: "__cdecl GUID_361290c0_cb1b_49ae_9f3e_ba1cbe5dab35" _GUID_361290c0_cb1b_49ae_9f3e_ba1cbe5dab35
0x18001FCC0: "`string'" ??_C@_1EG@CMHOIPDJ@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi@
0x1800118D0: "public: virtual void __cdecl ATL::CAtlStringMgr::Free(struct ATL::CStringData * __ptr64) __ptr64" ?Free@CAtlStringMgr@ATL@@UEAAXPEAUCStringData@2@@Z
0x18001DE88: VERSION_NULL_THUNK_DATA
0x180012A40: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetUserDefaultUILanguageImpl(void) __ptr64" ?GetUserDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x18000AB4C: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
0x180021D58: "__vectorcall ??_R2CProviderHelper@ATL" ??_R2CProviderHelper@ATL@@8
0x180022138: "__vectorcall ??_R3CProviderHelper@ATL" ??_R3CProviderHelper@ATL@@8
0x180012AE0: "protected: virtual void __cdecl MorroCommon::CWin32::SetLastErrorImpl(unsigned long) __ptr64" ?SetLastErrorImpl@CWin32@MorroCommon@@MEAAXK@Z
0x18001160C: HrGetLastFailure
0x180021D40: "__vectorcall ??_R2CInstanceProviderHelper@ATL" ??_R2CInstanceProviderHelper@ATL@@8
0x180022120: "__vectorcall ??_R3CInstanceProviderHelper@ATL" ??_R3CInstanceProviderHelper@ATL@@8
0x180022740: "__vectorcall ??_R17?0A@EA@_ATL_MODULE70@ATL" ??_R17?0A@EA@_ATL_MODULE70@ATL@@8
0x1800277F8: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18001FA50: "`string'" ??_C@_1BA@JIHHIEDE@?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?$AA@
0x180011F20: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteValueImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteValueImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x1800276F8: "__cdecl CTA2PEAVEHresultException@MorroCommon@@" _CTA2PEAVEHresultException@MorroCommon@@
0x18001E790: "`string'" ??_C@_0BC@CIJDGCDI@permission?5denied?$AA@
0x180012B10: "protected: virtual void __cdecl MorroCommon::CWin32::WTSFreeMemoryImpl(void * __ptr64) __ptr64" ?WTSFreeMemoryImpl@CWin32@MorroCommon@@MEAAXPEAX@Z
0x18001DF28: "__cdecl _imp_wcschr" __imp_wcschr
0x180027710: "__stdcall CT??_R0PEAVEHresultException@MorroCommon@@" _CT??_R0PEAVEHresultException@MorroCommon@@@88
0x180006684: "long __cdecl ATL::AtlHresultFromWin32(unsigned long)" ?AtlHresultFromWin32@ATL@@YAJK@Z
0x18001DBB0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180022EB8: "__vectorcall ??_R3CHResultExceptionImpl@CommonUtil" ??_R3CHResultExceptionImpl@CommonUtil@@8
0x18000AA8C: "public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@2@XZ
0x18000A9CC: "public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@2@XZ
0x180022EE8: "__vectorcall ??_R2CHResultExceptionImpl@CommonUtil" ??_R2CHResultExceptionImpl@CommonUtil@@8
0x1800138E0: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadLibraryImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,struct HINSTANCE__ * __ptr64 * __ptr64) __ptr64" ?SafeLoadLibraryImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAPEAUHINSTANCE__@@@Z
0x180020370: "`string'" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x180005B5C: "public: __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18001D880: "__cdecl _imp_PrivilegeCheck" __imp_PrivilegeCheck
0x180005B5C: "public: __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::~CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x1800204A8: WPP_68f9607bb7ab3f0d6779eced9bfc2f79_Traceguids
0x180002600: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_System_error_category::message(int)const __ptr64" ?message@_System_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18001E0A8: ole32_NULL_THUNK_DATA
0x18001DEE0: "__cdecl _imp_WTSQuerySessionInformationW" __imp_WTSQuerySessionInformationW
0x1800076D0: "public: virtual void * __ptr64 __cdecl CMpProviderModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpProviderModule@@UEAAPEAXI@Z
0x180004D04: "public: __cdecl CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>::~CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x18001F260: "`string'" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x18001DC00: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x180021EA0: "__vectorcall ??_R1BA@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R1BA@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18000F328: "private: void __cdecl Microsoft::SecurityClient::CDetectionItem::AddResources(struct tagMPTHREAT_INFO * __ptr64 const) __ptr64" ?AddResources@CDetectionItem@SecurityClient@Microsoft@@AEAAXQEAUtagMPTHREAT_INFO@@@Z
0x18001E0B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180020664: "`string'" ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x18000ABCC: "private: bool __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CheckImplicitLoad(void const * __ptr64) __ptr64" ?CheckImplicitLoad@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAA_NPEBX@Z
0x18001E060: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x18001DA98: "__cdecl _imp_GetSystemDefaultUILanguage" __imp_GetSystemDefaultUILanguage
0x18002B918: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUzkkozbvixlnnlmUoryUlyquivUznwGEUhgwzucOlyq@MorroCommon" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUzkkozbvixlnnlmUoryUlyquivUznwGEUhgwzucOlyq@MorroCommon
0x18001C9C8: "__cdecl _imp__recalloc" __imp__recalloc
0x180007018: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEAGH@Z
0x180012DC0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GlobalFindAtomImpl(unsigned short const * __ptr64) __ptr64" ?GlobalFindAtomImpl@CWin32@MorroCommon@@MEAAGPEBG@Z
0x18000F630: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x180005290: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> >::deallocate(struct MorroCommon::SFolderItem * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAAXPEAUSFolderItem@MorroCommon@@_K@Z
0x18001DD90: "__cdecl _imp_PathIsRelativeW" __imp_PathIsRelativeW
0x180022BD8: ??_R4CPathUtils@MorroCommon@@6B@
0x180020058: "`string'" ??_C@_1DA@JKGMPCBD@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x18001DC58: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180002320: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180012AD0: ?SHGetPathFromIDListImpl@CWin32@MorroCommon@@MEAAHPEFBU_ITEMIDLIST@@PEAG@Z
0x1800033A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefObject@CommonUtil@@MEAAPEAXI@Z
0x18001DAE8: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x18001F2F8: WPP_ad54849a3f7c383cf850b77aa75bd2b9_Traceguids
0x180009788: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,struct tagSAFEARRAY * __ptr64 const) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGQEAUtagSAFEARRAY@@@Z
0x1800206F0: CLSID_WbemContext
0x180005B74: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18001FBF8: "`string'" ??_C@_1DG@MBECOPLD@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180005B74: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18002A3D8: "__vectorcall ??_R0?AVCInfectionStateClass@" ??_R0?AVCInfectionStateClass@@@8
0x180021EC8: "__vectorcall ??_R1A@?0A@EA@CInfectionStateClass" ??_R1A@?0A@EA@CInfectionStateClass@@8
0x180027798: "__stdcall CT??_R0PEAVEUnknownError@MorroCommon@@" _CT??_R0PEAVEUnknownError@MorroCommon@@@88
0x18001EC48: "`string'" ??_C@_0BH@CGIMPKIM@argument?5out?5of?5domain?$AA@
0x1800128E0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateThreadImpl(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned __int64,unsigned long (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CreateThreadImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@_KP6AKPEAX@Z2KPEAK@Z
0x18001E850: "`string'" ??_C@_0BK@NDOCBPGE@no?5such?5file?5or?5directory?$AA@
0x18001ECA8: "`string'" ??_C@_0BD@MGNDDEGM@connection?5aborted?$AA@
0x18001DF08: "__cdecl _imp__wchmod" __imp__wchmod
0x1800276B8: "__cdecl TI3?AVCHResultExceptionImpl@CommonUtil@@" _TI3?AVCHResultExceptionImpl@CommonUtil@@
0x1800119A0: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::GetNilString(void) __ptr64" ?GetNilString@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@XZ
0x18001ED48: "`string'" ??_C@_0P@DNAJLBJK@file?5too?5large?$AA@
0x180001CB8: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x18001D870: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x18002ABB0: "__vectorcall ??_R0?AVinvalid_argument@std@" ??_R0?AVinvalid_argument@std@@@8
0x18001EE30: "`string'" ??_C@_0BA@PFFCAOFK@no?5buffer?5space?$AA@
0x180005BAC: "public: int __cdecl ATL::CRegParser::CParseBuffer::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@CParseBuffer@CRegParser@ATL@@QEAAHPEBGH@Z
0x1800236B8: "__cdecl tls_end" _tls_end
0x18001FBD8: "`string'" ??_C@_1BM@KPEJNEAK@?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002B928: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4V43@A
0x18000F630: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultException@CommonUtil@@MEAAPEAXI@Z
0x180009D58: "public: static class CommonUtil::CReturnHandle<class CommonUtil::CAutoBSTR> __cdecl Microsoft::SecurityClient::CWmiObjectSerializer::SerializeToXml(struct IWbemClassObject * __ptr64,unsigned long)" ?SerializeToXml@CWmiObjectSerializer@SecurityClient@Microsoft@@SA?AV?$CReturnHandle@VCAutoBSTR@CommonUtil@@@CommonUtil@@PEAUIWbemClassObject@@K@Z
0x18001DEA8: "__cdecl _imp_CryptCATCatalogInfoFromContext" __imp_CryptCATCatalogInfoFromContext
0x180018ED0: "__cdecl XcptFilter" _XcptFilter
0x18001DEE8: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x18001EF18: "`string'" ??_C@_0O@GLMIBBEG@not?5connected?$AA@
0x18002B3F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUwooUlyquivUznwGEUhgwzucOlyq@MpProvider" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUwooUlyquivUznwGEUhgwzucOlyq@MpProvider
0x180004C9C: "public: __cdecl CConversionStrategyDetectionItem::~CConversionStrategyDetectionItem(void) __ptr64" ??1CConversionStrategyDetectionItem@@QEAA@XZ
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CancelAsyncCall(struct IWbemObjectSink * __ptr64) __ptr64" ?CancelAsyncCall@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemObjectSink@@@Z
0x18001E0C0: "__cdecl _xc_a" __xc_a
0x18001DA40: "__cdecl _imp_FreeResource" __imp_FreeResource
0x18001DBD8: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x1800050D0: "public: virtual long __cdecl ATL::CComObject<class CInfectionStateClass>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001F2C8: "`string'" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800231E0: ??_R4CPredefinedMpHeapsHolder@CommonUtil@@6B@
0x180008A70: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CMpProviderClass>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCMpProviderClass@@@ATL@@UEAAPEAXI@Z
0x180016B38: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCatalogCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftCatalogCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x18001DE80: "__cdecl _imp_GetFileVersionInfoSizeW" __imp_GetFileVersionInfoSizeW
0x180004BF4: "public: __cdecl CDetectionItemSizeCalculator::~CDetectionItemSizeCalculator(void) __ptr64" ??1CDetectionItemSizeCalculator@@QEAA@XZ
0x18002AAD8: "__vectorcall ??_R0?AVCDetectionItem@SecurityClient@Microsoft@" ??_R0?AVCDetectionItem@SecurityClient@Microsoft@@@8
0x18000C700: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x180003914: WPP_SF_qSSdd
0x180020398: WPP_eccdf766551a3cbb1a967249b1004be7_Traceguids
0x180012220: "protected: virtual int __cdecl MorroCommon::CWin32::GetSystemMetricsImpl(int) __ptr64" ?GetSystemMetricsImpl@CWin32@MorroCommon@@MEAAHH@Z
0x180012790: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileSizeExImpl(void * __ptr64,union _LARGE_INTEGER * __ptr64) __ptr64" ?GetFileSizeExImpl@CWin32@MorroCommon@@MEAAHPEAXPEAT_LARGE_INTEGER@@@Z
0x180022D28: "__vectorcall ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x1800144BC: "public: class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64 __cdecl ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > >::operator=(char const * __ptr64) __ptr64" ??4?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBD@Z
0x18001DB78: "__cdecl _imp_FindClose" __imp_FindClose
0x18001EAE0: "`string'" ??_C@_0N@FCPALPJK@network_down?$AA@
0x18001EEA0: "`string'" ??_C@_0BE@MKFDAFMP@no?5stream?5resources?$AA@
0x18001DA10: "__cdecl _imp_SetThreadLocale" __imp_SetThreadLocale
0x1800220C0: "__vectorcall ??_R3?$CComObject@VCInfectionStateClass@@@ATL" ??_R3?$CComObject@VCInfectionStateClass@@@ATL@@8
0x180021C70: "__vectorcall ??_R2?$CComObject@VCInfectionStateClass@@@ATL" ??_R2?$CComObject@VCInfectionStateClass@@@ATL@@8
0x1800054FC: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x1800229A8: "__vectorcall ??_R1A@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R1A@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18000C718: "public: __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAA@XZ
0x18001EAB8: "`string'" ??_C@_0N@HPMLKHPL@message_size?$AA@
0x180020690: WPP_af44aed7928d36b3a845cf895c8b8d6e_Traceguids
0x18001D970: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x180012320: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateToolhelp32SnapshotImpl(unsigned long,unsigned long) __ptr64" ?CreateToolhelp32SnapshotImpl@CWin32@MorroCommon@@MEAAPEAXKK@Z
0x180011F60: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryImpl(unsigned short const * __ptr64) __ptr64" ?LoadLibraryImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBG@Z
0x18001908B: "__cdecl lock" _lock
0x18001DDA0: "__cdecl _imp_PathRemoveFileSpecW" __imp_PathRemoveFileSpecW
0x18002AB88: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x1800202B0: "`string'" ??_C@_0BB@PDIDAFAI@MpConfigGetValue?$AA@
0x18001E9A0: "`string'" ??_C@_0BE@DLHHIBGN@bad_file_descriptor?$AA@
0x180014AA0: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithModuleDirImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithModuleDirImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DD00: "__cdecl _imp_SysStringByteLen" __imp_SysStringByteLen
0x18001620C: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x180022348: "__vectorcall ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180010550: "long __cdecl CommonUtil::HrGetFileAttributes(unsigned long * __ptr64,unsigned short const * __ptr64)" ?HrGetFileAttributes@CommonUtil@@YAJPEAKPEBG@Z
0x180012040: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::WaitForSingleObjectImpl(void * __ptr64,unsigned long) __ptr64" ?WaitForSingleObjectImpl@CWin32@MorroCommon@@MEAAKPEAXK@Z
0x180022360: "__vectorcall ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180021E00: "__vectorcall ??_R1A@?0A@EA@CDetectionItemSizeCalculator" ??_R1A@?0A@EA@CDetectionItemSizeCalculator@@8
0x1800056F0: "public: virtual long __cdecl ATL::CRegObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRegObject@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001FB18: "`string'" ??_C@_1CM@ECMPGMPA@?$AAI?$AAo?$AAa?$AAv?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18002A9E0: "__vectorcall ??_R0?AVCFileUtils@MorroCommon@" ??_R0?AVCFileUtils@MorroCommon@@@8
0x18002A0D8: "public: static class std::_System_error_category std::_Error_objects<int>::_System_object" ?_System_object@?$_Error_objects@H@std@@2V_System_error_category@2@A
0x18001CCA8: "const CMpProviderModule::`vftable'" ??_7CMpProviderModule@@6B@
0x18000A0C4: "public: __cdecl Microsoft::SecurityClient::CDateTimeFormatter::CDateTimeFormatter(struct _SYSTEMTIME const & __ptr64) __ptr64" ??0CDateTimeFormatter@SecurityClient@Microsoft@@QEAA@AEBU_SYSTEMTIME@@@Z
0x1800232A0: "__vectorcall ??_R3CPredefinedMpHeapsHolder@CommonUtil" ??_R3CPredefinedMpHeapsHolder@CommonUtil@@8
0x180023220: "__vectorcall ??_R2CPredefinedMpHeapsHolder@CommonUtil" ??_R2CPredefinedMpHeapsHolder@CommonUtil@@8
0x18001DA90: "__cdecl _imp_WritePrivateProfileStringW" __imp_WritePrivateProfileStringW
0x18001DBB8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180005790: "public: long __cdecl ATL::CExpansionVector::ClearReplacements(void) __ptr64" ?ClearReplacements@CExpansionVector@ATL@@QEAAJXZ
0x18001E774: "__cdecl _guard_iat_table" __guard_iat_table
0x1800105C8: "long __cdecl CommonUtil::HrDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrDuplicateStringW@CommonUtil@@YAJPEAPEAGPEBG@Z
0x18002AC60: "__vectorcall ??_R0PEAVEUnknownError@MorroCommon@" ??_R0PEAVEUnknownError@MorroCommon@@@8
0x180017738: "public: static long __cdecl MpCommonEx::CFileUtilsEx::SafeLoadLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?SafeLoadLibrary@CFileUtilsEx@MpCommonEx@@SAJPEAPEAUHINSTANCE__@@PEBG@Z
0x180018EBE: memcpy
0x180018524: "void __cdecl std::_Xout_of_range(char const * __ptr64)" ?_Xout_of_range@std@@YAXPEBD@Z
0x18001EA48: "`string'" ??_C@_0BG@DJGBJIIK@operation_in_progress?$AA@
0x18001CB00: "const ATL::CComObject<class CInfectionStateClass>::`vftable'{for `IWbemServices'}" ??_7?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemServices@@@
0x18002A0C8: "public: static class std::_Generic_error_category std::_Error_objects<int>::_Generic_object" ?_Generic_object@?$_Error_objects@H@std@@2V_Generic_error_category@2@A
0x18001DE18: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x18001DA30: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180012550: "protected: virtual int __cdecl MorroCommon::CWin32::CheckTokenMembershipImpl(void * __ptr64,void * __ptr64,int * __ptr64) __ptr64" ?CheckTokenMembershipImpl@CWin32@MorroCommon@@MEAAHPEAX0PEAH@Z
0x1800192E0: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180020640: "`string'" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180021AF8: "__vectorcall ??_R3error_category@std" ??_R3error_category@std@@8
0x1800219C0: "__vectorcall ??_R2error_category@std" ??_R2error_category@std@@8
0x18001DCB0: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x18001DFC8: "__cdecl _imp_memset" __imp_memset
0x18001F360: "`string'" ??_C@_1DG@HADFNLKM@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180018070: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180012460: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetProcessHeapImpl(void) __ptr64" ?GetProcessHeapImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x180012620: "protected: virtual int __cdecl MorroCommon::CWin32::ReadFileImpl(void * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadFileImpl@CWin32@MorroCommon@@MEAAHPEAX0KPEAKPEAU_OVERLAPPED@@@Z
0x18001DBA8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180019085: "__cdecl initterm" _initterm
0x18001D938: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x1800124A0: "protected: virtual int __cdecl MorroCommon::CWin32::_wchmodImpl(unsigned short const * __ptr64,int) __ptr64" ?_wchmodImpl@CWin32@MorroCommon@@MEAAHPEBGH@Z
0x18001E8B8: "`string'" ??_C@_0BP@LKNGHENJ@resource?5unavailable?5try?5again?$AA@
0x180002560: "public: virtual char const * __ptr64 __cdecl std::_Iostream_error_category::name(void)const __ptr64" ?name@_Iostream_error_category@std@@UEBAPEBDXZ
0x180004D00: ?GetObjectDescription@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18001EDC8: "`string'" ??_C@_0N@OHAFKDEK@invalid?5seek?$AA@
0x180008B9C: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x180023168: ??_R4CLockedCertCheckImpl@MorroCommon@@6B@
0x180011DD0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetTempPathImpl(unsigned long,unsigned short * __ptr64) __ptr64" ?GetTempPathImpl@CWin32@MorroCommon@@MEAAKKPEAG@Z
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecQuery@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x1800203A8: "`string'" ??_C@_1CK@OHIAJBPD@?$AAR?$AAe?$AAa?$AAl?$AA?9?$AAT?$AAi?$AAm?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001EE58: "`string'" ??_C@_07PLECNNKG@no?5link?$AA@
0x180003390: "void __cdecl operator delete(void * __ptr64,void * __ptr64)" ??3@YAXPEAX0@Z
0x1800129A0: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeThreadImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeThreadImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x1800126B0: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenServiceImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEAU3@PEBGK@Z
0x18002B9F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001F790: "__cdecl GUID_9556dc99_828c_11cf_a37e_00aa003240c7" _GUID_9556dc99_828c_11cf_a37e_00aa003240c7
0x18001D988: "__cdecl _imp_Sleep" __imp_Sleep
0x18001DDF8: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x180027490: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24
0x180021E78: "__vectorcall ??_R1BA@?0A@EA@CComObjectRootBase@ATL" ??_R1BA@?0A@EA@CComObjectRootBase@ATL@@8
0x18002B910: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4V43@A
0x18002B890: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4V43@A
0x18002B8A8: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4V43@A
0x18001F7E0: "`string'" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x18001E158: "__cdecl _xi_z" __xi_z
0x18001CF58: "const CommonUtil::CHResultException::`vftable'" ??_7CHResultException@CommonUtil@@6B@
0x1800125B0: "protected: virtual int __cdecl MorroCommon::CWin32::VerifyVersionInfoImpl(struct _OSVERSIONINFOEXW * __ptr64,unsigned long,unsigned __int64) __ptr64" ?VerifyVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOEXW@@K_K@Z
0x18001D9E0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002450: "public: virtual void * __ptr64 __cdecl std::error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gerror_category@std@@UEAAPEAXI@Z
0x1800180F0: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18002B880: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib
0x18001DE68: USERENV_NULL_THUNK_DATA
0x180001D70: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x1800274B8: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x18001EEF8: "`string'" ??_C@_0N@POEIPGGF@not?5a?5socket?$AA@
0x180018E36: "__cdecl _C_specific_handler" __C_specific_handler
0x1800127C0: "protected: virtual unsigned __int64 __cdecl MorroCommon::CWin32::SetTimerImpl(struct HWND__ * __ptr64,unsigned __int64,unsigned int,void (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,unsigned long)) __ptr64" ?SetTimerImpl@CWin32@MorroCommon@@MEAA_KPEAUHWND__@@_KIP6AX0I1K@Z@Z
0x18000E334: "private: void __cdecl Microsoft::SecurityClient::CInfectionState::MapComputerStatus(void) __ptr64" ?MapComputerStatus@CInfectionState@SecurityClient@Microsoft@@AEAAXXZ
0x18000EFEC: "public: __cdecl Microsoft::SecurityClient::CDetectionItem::CDetectionItem(struct tagMPTHREAT_INFO * __ptr64 const) __ptr64" ??0CDetectionItem@SecurityClient@Microsoft@@QEAA@QEAUtagMPTHREAT_INFO@@@Z
0x180009AB0: "public: __cdecl Microsoft::SecurityClient::CEnsureImpersonationLevel::CEnsureImpersonationLevel(unsigned long) __ptr64" ??0CEnsureImpersonationLevel@SecurityClient@Microsoft@@QEAA@K@Z
0x18001DC38: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x1800124B0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameExImpl(void * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameExImpl@CWin32@MorroCommon@@MEAAKPEAXPEAUHINSTANCE__@@PEAGK@Z
0x180016100: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetDriveFolderFromPathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetDriveFolderFromPathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18002B934: "long volatile `public: static class MorroCommon::CCertCheckFactory * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4JC
0x180016978: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftSelfCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftSelfCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x18001DD98: "__cdecl _imp_PathAppendW" __imp_PathAppendW
0x180002660: "public: virtual class std::error_condition __cdecl std::_System_error_category::default_error_condition(int)const __ptr64" ?default_error_condition@_System_error_category@std@@UEBA?AVerror_condition@2@H@Z
0x180017A90: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x180022CD8: "__vectorcall ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x1800206A0: WPP_28d7b8d1fb9c3ced56c685149367209d_Traceguids
0x18001DF58: "__cdecl _imp__onexit" __imp__onexit
0x1800123D0: "protected: virtual int __cdecl MorroCommon::CWin32::FreeResourceImpl(void * __ptr64) __ptr64" ?FreeResourceImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180020660: "`string'" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x18001EFE8: "`string'" ??_C@_0BO@BJBOMOEJ@resource?5deadlock?5would?5occur?$AA@
0x1800054F0: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CInfectionStateClass>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x18002B611: "struct CommonUtil::CCommonThrowWinErr CommonUtil::tWinErr" ?tWinErr@CommonUtil@@3UCCommonThrowWinErr@1@A
0x18001DC18: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000D8C4: "public: static void __cdecl CAutoMpClose::Release(struct tagMPCONTEXT * __ptr64)" ?Release@CAutoMpClose@@SAXPEAUtagMPCONTEXT@@@Z
0x180016620: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCertChainCheck(void * __ptr64,unsigned long)" ?MicrosoftCertChainCheck@CCertCheck@MorroCommon@@CAJPEAXK@Z
0x18002A258: "__vectorcall ??_R0?AV_Generic_error_category@std@" ??_R0?AV_Generic_error_category@std@@@8
0x18002B448: WPP_REGISTRATION_GUIDS
0x18001FF90: WPP_5cc9b64ceb5d3d6286345330db72c61c_Traceguids
0x180012E8C: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64 __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::operator=(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z
0x18001EDE8: "`string'" ??_C@_0N@IFLPBIOP@message?5size?$AA@
0x1800201C0: "`string'" ??_C@_1EA@HEALEMPM@?$AA?$CF?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x18001CE60: "const MorroCommon::CPathUtils::`vftable'" ??_7CPathUtils@MorroCommon@@6B@
0x18000E568: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x180002570: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Iostream_error_category::message(int)const __ptr64" ?message@_Iostream_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x180022B48: "__vectorcall ??_R2CFileUtils@MorroCommon" ??_R2CFileUtils@MorroCommon@@8
0x180022BC0: "__vectorcall ??_R3CFileUtils@MorroCommon" ??_R3CFileUtils@MorroCommon@@8
0x18001F4F8: "`string'" ??_C@_1CA@CIMPKAAA@?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001DDC8: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x1800220F0: "__vectorcall ??_R3CInfectionStateClass" ??_R3CInfectionStateClass@@8
0x180021CD0: "__vectorcall ??_R2CInfectionStateClass" ??_R2CInfectionStateClass@@8
0x18001D498: "const MpCommonEx::CEventLoggerBase::`vftable'" ??_7CEventLoggerBase@MpCommonEx@@6B@
0x18001D858: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18001DED0: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x18000AD20: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::SetString(unsigned short const * __ptr64,int) __ptr64" ?SetString@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x18001DBE8: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18001FAB8: "`string'" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001F7B0: "`string'" ??_C@_1BG@JBACFMF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAR?$AAa?$AAw?$AA?$AA@
0x18001E030: "__cdecl _imp_iswalpha" __imp_iswalpha
0x18002ACD0: "__vectorcall ??_R0?AVCLockEntireFile@MorroCommon@" ??_R0?AVCLockEntireFile@MorroCommon@@@8
0x180004C9C: "public: __cdecl CommonUtil::AutoRef<class Microsoft::SecurityClient::CDetectionItem>::~AutoRef<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$AutoRef@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180005B5C: "public: __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::~CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>(void) __ptr64" ??1?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@QEAA@XZ
0x18001D920: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18001ECE0: "`string'" ??_C@_0BD@PJLIIJEL@connection?5refused?$AA@
0x1800191A0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800076D0: "public: virtual void * __ptr64 __cdecl CMpProviderModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpProviderModule@@UEAAPEAXI@Z
0x180020738: "`string'" ??_C@_0P@FOMLLNOL@GetProductInfo?$AA@
0x18002795C: "__cdecl _IMPORT_DESCRIPTOR_VERSION" __IMPORT_DESCRIPTOR_VERSION
0x180012950: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateEventImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?CreateEventImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBG@Z
0x18002A370: "__vectorcall ??_R0?AV?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@" ??_R0?AV?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@@8
0x180020018: "`string'" ??_C@_1CE@HDJBFMCI@?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAQ?$AAu?$AAa?$AAl?$AAi?$AAf?$AAi?$AAe?$AAr?$AAs?$AA?$AA@
0x18001CF78: "const CommonUtil::CHResultExceptionImpl::`vftable'" ??_7CHResultExceptionImpl@CommonUtil@@6B@
0x1800158C0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesX86Impl(void) __ptr64" ?GetProgramFilesX86Impl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18000E3E0: "public: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::push_back(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> &&) __ptr64" ?push_back@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAAX$$QEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@Z
0x18001FFC0: GUID_ATLVer70
0x18000A91C: "public: static void __cdecl Microsoft::SecurityClient::MpCommonEx::CSimpleLogCreator::Stop(bool)" ?Stop@CSimpleLogCreator@MpCommonEx@SecurityClient@Microsoft@@SAX_N@Z
0x180011A20: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Reallocate(void * __ptr64,unsigned __int64) __ptr64" ?Reallocate@CWin32Heap@ATL@@UEAAPEAXPEAX_K@Z
0x18000F630: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x1800032B4: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z
0x180004D00: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x180001820: DllCanUnloadNow
0x180022168: "__vectorcall ??_R3IWbemProviderInit" ??_R3IWbemProviderInit@@8
0x180021D98: "__vectorcall ??_R2IWbemProviderInit" ??_R2IWbemProviderInit@@8
0x1800033E0: "public: virtual void * __ptr64 __cdecl ATL::CProviderHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_ECProviderHelper@ATL@@UEAAPEAXI@Z
0x180008FA0: WPP_SF_S_guid_
0x18001D908: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18001F118: CLSID_StdComponentCategoriesMgr
0x180022B38: "__vectorcall ??_R2CPathUtils@MorroCommon" ??_R2CPathUtils@MorroCommon@@8
0x180022BA8: "__vectorcall ??_R3CPathUtils@MorroCommon" ??_R3CPathUtils@MorroCommon@@8
0x18000B014: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x1800128D0: "protected: virtual int __cdecl MorroCommon::CWin32::MoveFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?MoveFileImpl@CWin32@MorroCommon@@MEAAHPEBG0@Z
0x180012650: "protected: virtual int __cdecl MorroCommon::CWin32::WriteFileImpl(void * __ptr64,void const * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?WriteFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEBXKPEAKPEAU_OVERLAPPED@@@Z
0x180011D80: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyWindowImpl(struct HWND__ * __ptr64) __ptr64" ?DestroyWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x180022418: "__vectorcall ??_R2CComClassFactory@ATL" ??_R2CComClassFactory@ATL@@8
0x180022448: "__vectorcall ??_R3CComClassFactory@ATL" ??_R3CComClassFactory@ATL@@8
0x1800148F0: "struct MorroCommon::SFolderItem * __ptr64 __cdecl std::_Uninit_move<struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,class std::allocator<struct MorroCommon::SFolderItem>,struct MorroCommon::SFolderItem>(struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAUSFolderItem@MorroCommon@@PEAU12@V?$allocator@USFolderItem@MorroCommon@@@std@@U12@@std@@YAPEAUSFolderItem@MorroCommon@@PEAU12@00AEAU?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18001FA28: "`string'" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180021F18: "__vectorcall ??_R1A@?0A@EA@IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R1A@?0A@EA@IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x18002A460: "__vectorcall ??_R0?AVCInstanceProviderHelper@ATL@" ??_R0?AVCInstanceProviderHelper@ATL@@@8
0x18001DD18: "__cdecl _imp_SafeArrayCreate" __imp_SafeArrayCreate
0x180023320: "__vectorcall ??_R3CPtrObject@CommonUtil" ??_R3CPtrObject@CommonUtil@@8
0x180023290: "__vectorcall ??_R2CPtrObject@CommonUtil" ??_R2CPtrObject@CommonUtil@@8
0x1800207C8: WPP_62bc956533203bbc022dd1ecb69c4649_Traceguids
0x18001F398: "`string'" ??_C@_1BM@CPCKAAIO@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800101A4: "long __cdecl CommonUtil::UtilFormatStringFromUuid(unsigned short * __ptr64 * __ptr64,struct _GUID const & __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UtilFormatStringFromUuid@CommonUtil@@YAJPEAPEAGAEBU_GUID@@PEBG2@Z
0x18002B420: WPP_MAIN_CB
0x18000AC98: "private: static struct ATL::CStringData * __ptr64 __cdecl ATL::CSimpleStringT<unsigned short,0>::CloneData(struct ATL::CStringData * __ptr64)" ?CloneData@?$CSimpleStringT@G$0A@@ATL@@CAPEAUCStringData@2@PEAU32@@Z
0x180020088: "`string'" ??_C@_1CG@BNGPLHPD@?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AA?$AA@
0x18002B940: "public: static class std::locale::id std::num_put<char,class std::back_insert_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::id" ?id@?$num_put@DV?$back_insert_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@std@@2V0locale@2@A
0x1800227C0: "__vectorcall ??_R1A@?0A@EA@?$CAtlModuleT@VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlModuleT@VCMpProviderModule@@@ATL@@8
0x18001CC40: "const CDetectionItemSizeCalculator::`vftable'" ??_7CDetectionItemSizeCalculator@@6B@
0x18001641C: "long __cdecl MorroCommon::HrCComBSTRAssign(class ATL::CComBSTR & __ptr64,unsigned short const * __ptr64)" ?HrCComBSTRAssign@MorroCommon@@YAJAEAVCComBSTR@ATL@@PEBG@Z
0x180005710: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegObject@ATL@@UEAAPEAXI@Z
0x180013494: "private: long __cdecl MorroCommon::CFileUtils::CheckParams(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CheckParams@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DA88: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x1800122C0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetWindowThreadProcessIdImpl(struct HWND__ * __ptr64,unsigned long * __ptr64) __ptr64" ?GetWindowThreadProcessIdImpl@CWin32@MorroCommon@@MEAAKPEAUHWND__@@PEAK@Z
0x18001D900: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18002AE58: "public: static class std::locale::id std::num_put<wchar_t,class std::back_insert_iterator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::id" ?id@?$num_put@_WV?$back_insert_iterator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@2V0locale@2@A
0x180018ED6: "__cdecl amsg_exit" _amsg_exit
0x180020748: WPP_0c5188e3415a3eacbef14bfb20a61e24_Traceguids
0x18001F2E8: "`string'" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180022FF0: "__vectorcall ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon" ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon@@8
0x180022E90: "__vectorcall ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil" ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil@@8
0x180013980: "protected: virtual long __cdecl MorroCommon::CFileUtils::GetAvailableSpaceImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetAvailableSpaceImpl@CFileUtils@MorroCommon@@MEAAJPEBGPEAT_ULARGE_INTEGER@@@Z
0x18001151C: MpUtilsOnDllMain
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x18001EC98: "`string'" ??_C@_0M@KPHOFDBE@broken?5pipe?$AA@
0x18001F138: IID_IClassFactory
0x18000A134: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToRoundTrip(void)const __ptr64" ?ToRoundTrip@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x180012CA0: "protected: virtual int __cdecl MorroCommon::CWin32::SystemTimeToFileTimeImpl(struct _SYSTEMTIME const * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?SystemTimeToFileTimeImpl@CWin32@MorroCommon@@MEAAHPEBU_SYSTEMTIME@@PEAU_FILETIME@@@Z
0x180021F68: "__vectorcall ??_R1A@?0A@EA@CProviderHelper@ATL" ??_R1A@?0A@EA@CProviderHelper@ATL@@8
0x18001EB40: "`string'" ??_C@_0O@GBCLHHD@not_connected?$AA@
0x180002344: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned long) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGK@Z
0x18000C718: "public: __cdecl CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x180020238: "`string'" ??_C@_0BG@BPEBJMPE@MpManagerVersionQuery?$AA@
0x180017110: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`vector deleting destructor'(unsigned int) __ptr64" ??_EILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18001EBA8: "`string'" ??_C@_09NCHNLHPG@timed_out?$AA@
0x1800054D0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAKXZ
0x180017300: "protected: virtual struct MorroCommon::ILockedCertCheck * __ptr64 __cdecl MorroCommon::CCertCheckFactory::CreateCertCheckImpl(void) __ptr64" ?CreateCertCheckImpl@CCertCheckFactory@MorroCommon@@MEAAPEAUILockedCertCheck@2@XZ
0x180027758: "__cdecl CTA2PEAVEUnknownError@MorroCommon@@" _CTA2PEAVEUnknownError@MorroCommon@@
0x180022830: "__vectorcall ??_R3CMpProviderModule" ??_R3CMpProviderModule@@8
0x18001F1F0: "`string'" ??_C@_1CK@IFBKBFAA@?$AA?2?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x1800225B8: "__vectorcall ??_R2CMpProviderModule" ??_R2CMpProviderModule@@8
0x18001F954: "`string'" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x18000E148: "private: bool __cdecl Microsoft::SecurityClient::CInfectionState::IsServiceAvailable(void) __ptr64" ?IsServiceAvailable@CInfectionState@SecurityClient@Microsoft@@AEAA_NXZ
0x18001F670: "`string'" ??_C@_1DA@KDACBBFB@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800223F0: "__vectorcall ??_R17?0A@EA@CComObjectRootBase@ATL" ??_R17?0A@EA@CComObjectRootBase@ATL@@8
0x180014D60: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001EFB8: "`string'" ??_C@_0BH@JPPPLHJB@protocol?5not?5supported?$AA@
0x180002F78: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x180011830: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Allocate(int,int) __ptr64" ?Allocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@HH@Z
0x18002B8F4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUnkxlnnlmvcUoryUlyquivUznwGEUhgwzucOlyq@MpCommonEx" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUnkxlnnlmvcUoryUlyquivUznwGEUhgwzucOlyq@MpCommonEx
0x18001F128: GUID_NULL
0x1800102C0: "long __cdecl CommonUtil::HrExpandEnvironmentStrings(unsigned short const * __ptr64,unsigned __int64 * __ptr64,unsigned short * __ptr64)" ?HrExpandEnvironmentStrings@CommonUtil@@YAJPEBGPEA_KPEAG@Z
0x180008070: "public: virtual long __cdecl CMpProviderClass::GetObjectAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?GetObjectAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180002F78: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x18001DAD8: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18001EC00: "`string'" ??_C@_0BG@DHPCNBJB@address?5not?5available?$AA@
0x18001DF70: "__cdecl _imp__lock" __imp__lock
0x18001FF68: "`string'" ??_C@_1CI@DBMPFKBB@?$AAN?$AAi?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180020850: WPP_f3e3aaa1d7ab3100d8ae3cb75d7e43b9_Traceguids
0x1800082B0: "public: virtual long __cdecl CMpProviderClass::CreateInstanceEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateInstanceEnumAsync@CMpProviderClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001DD40: OLEAUT32_NULL_THUNK_DATA
0x180022F08: "__vectorcall ??_R1A@?0A@EA@CHResultException@CommonUtil" ??_R1A@?0A@EA@CHResultException@CommonUtil@@8
0x180018E0C: atexit
0x180022FD0: "__vectorcall ??_R2CCertCheckFactory@MorroCommon" ??_R2CCertCheckFactory@MorroCommon@@8
0x180023040: "__vectorcall ??_R3CCertCheckFactory@MorroCommon" ??_R3CCertCheckFactory@MorroCommon@@8
0x18002A7C0: "__vectorcall ??_R0?AV?$CAtlDllModuleT@VCMpProviderModule@@@ATL@" ??_R0?AV?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@@8
0x180012870: "protected: virtual int __cdecl MorroCommon::CWin32::InitiateSystemShutdownExImpl(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,int,int,unsigned long) __ptr64" ?InitiateSystemShutdownExImpl@CWin32@MorroCommon@@MEAAHPEAG0KHHK@Z
0x180014F30: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModuleNameByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModuleNameByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18001FFB0: "`string'" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x180003350: "public: __cdecl ATL::CComSafeArray<unsigned short * __ptr64,8>::~CComSafeArray<unsigned short * __ptr64,8>(void) __ptr64" ??1?$CComSafeArray@PEAG$07@ATL@@QEAA@XZ
0x180001420: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x1800274D8: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x1800050F0: "public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::Release(void) __ptr64" ?Release@?$CComObject@VCMpProviderClass@@@ATL@@UEAAKXZ
0x18002B500: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x180010CB0: "long __cdecl CommonUtil::UtilRegGetValueDword(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?UtilRegGetValueDword@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAK@Z
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteClassAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteClassAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180015820: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesImpl(void) __ptr64" ?GetProgramFilesImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180015F90: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetProcessExecutableFullPathImpl(unsigned long,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetProcessExecutableFullPathImpl@CPathUtils@MorroCommon@@MEAAJKAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001C9D8: "const Microsoft::SecurityClient::CDetectionWbemCreator::`vftable'" ??_7CDetectionWbemCreator@SecurityClient@Microsoft@@6B@
0x180022A40: ??_R4?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemServices@@@
0x180022678: "__vectorcall ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x180021BB0: ??_R4error_category@std@@6B@
0x180018130: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x18001DAB8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180005B74: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18001CC10: "const ATL::CComObjectCached<class ATL::CComClassFactory>::`vftable'" ??_7?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x18001EAC8: "`string'" ??_C@_0BC@LEEIKBAL@filename_too_long?$AA@
0x18001DEF0: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x18001E7F8: "`string'" ??_C@_08GLNPIFBN@io?5error?$AA@
0x1800202C8: "`string'" ??_C@_0N@NLOFEOJC@MpThreatOpen?$AA@
0x18001FDC8: "`string'" ??_C@_1DC@IIJIMEND@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x18001F6E0: "`string'" ??_C@_1CG@CJMPKDDI@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAM?$AAa?$AAn?$AAu?$AAa?$AAl?$AAS?$AAt?$AAe?$AAp?$AAs?$AA?$AA@
0x18002A050: "struct ATL::_ATL_OBJMAP_ENTRY30 __objMap_CMpProviderClass" ?__objMap_CMpProviderClass@@3U_ATL_OBJMAP_ENTRY30@ATL@@A
0x18001D7F0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18001F0E0: "`string'" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x18002A0F0: "class ATL::CAtlStringMgr ATL::g_strmgr" ?g_strmgr@ATL@@3VCAtlStringMgr@1@A
0x18000D00C: "public: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::push_back(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ?push_back@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAAXAEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@Z
0x1800163D4: "long __cdecl MorroCommon::HrCStringAssign(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64)" ?HrCStringAssign@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBG@Z
0x18001156C: "unsigned __int64 __cdecl CommonUtil::UtilGetSystemTimeAsUlong64(void)" ?UtilGetSystemTimeAsUlong64@CommonUtil@@YA_KXZ
0x180022798: "__vectorcall ??_R1A@?0A@EA@CAtlModule@ATL" ??_R1A@?0A@EA@CAtlModule@ATL@@8
0x18001EF98: "`string'" ??_C@_0L@BLPOFLNJ@owner?5dead?$AA@
0x18001DE70: "__cdecl _imp_GetFileVersionInfoW" __imp_GetFileVersionInfoW
0x18001D8E0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180012AA0: "protected: virtual int __cdecl MorroCommon::CWin32::PathRemoveFileSpecImpl(unsigned short * __ptr64) __ptr64" ?PathRemoveFileSpecImpl@CWin32@MorroCommon@@MEAAHPEAG@Z
0x18002A670: "__vectorcall ??_R0?AVEUnknownError@MorroCommon@" ??_R0?AVEUnknownError@MorroCommon@@@8
0x180018ECA: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64" ??0exception@@QEAA@AEBQEBD@Z
0x180018428: "char const * __ptr64 __cdecl std::_Winerror_map(int)" ?_Winerror_map@std@@YAPEBDH@Z
0x180027588: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x18000A904: "public: static long __cdecl Microsoft::SecurityClient::MpCommonEx::CSimpleLogCreator::Start(bool,struct _GUID const * __ptr64 const,unsigned long,unsigned short const * __ptr64,unsigned long)" ?Start@CSimpleLogCreator@MpCommonEx@SecurityClient@Microsoft@@SAJ_NQEBU_GUID@@KPEBGK@Z
0x180010830: "public: class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::operator=(unsigned short const * __ptr64) __ptr64" ??4?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAAAEAV01@PEBG@Z
0x1800226C8: "__vectorcall ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x18001E920: "`string'" ??_C@_0BC@FNODOBAE@permission_denied?$AA@
0x18001D9D0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800115C8: "struct _SYSTEMTIME __cdecl CommonUtil::UtilSystemTimeFromUlong64(unsigned __int64 const & __ptr64)" ?UtilSystemTimeFromUlong64@CommonUtil@@YA?AU_SYSTEMTIME@@AEB_K@Z
0x18001F3E8: "`string'" ??_C@_1BG@EHILGFDL@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180019097: "__cdecl _dllonexit" __dllonexit
0x180003690: "public: static long __cdecl CInfectionStateClass::UpdateRegistry(int)" ?UpdateRegistry@CInfectionStateClass@@SAJH@Z
0x1800139EC: "private: long __cdecl MorroCommon::CFileUtils::GetFolderItems(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64) __ptr64" ?GetFolderItems@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@@Z
0x180020250: "`string'" ??_C@_0O@KNNLILAN@MpHandleClose?$AA@
0x180021C10: "__vectorcall ??_R3CRefObject@CommonUtil" ??_R3CRefObject@CommonUtil@@8
0x18001F848: "`string'" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180021C00: "__vectorcall ??_R2CRefObject@CommonUtil" ??_R2CRefObject@CommonUtil@@8
0x180011D30: "protected: virtual int __cdecl MorroCommon::CWin32::CreateDirectoryImpl(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64) __ptr64" ?CreateDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x18002B9D8: "__cdecl _native_startup_lock" __native_startup_lock
0x18001FB78: "`string'" ??_C@_1CC@IPDIJMOL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001F4E8: "`string'" ??_C@_1BA@NMDNJJOO@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x180012100: "protected: virtual long __cdecl MorroCommon::CWin32::GetFileVersionInfoSizeImpl(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileVersionInfoSizeImpl@CWin32@MorroCommon@@MEAAJPEBGPEAK@Z
0x180015DA0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempFolderPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempFolderPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180008BD0: DllMain
0x18001E980: "`string'" ??_C@_0BP@FOJJHMCC@connection_already_in_progress?$AA@
0x18001FED8: "`string'" ??_C@_1CI@ENJJBLOD@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1800204C8: "`string'" ??_C@_1BA@DLOBEII@?$AA?$CF?$AAw?$AAs?$AA?3?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180010628: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrDuplicateStringW(unsigned short const * __ptr64)" ?TrDuplicateStringW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBG@Z
0x1800088C0: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CMpProviderClass> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCMpProviderClass@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001E020: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18001F540: WPP_67893f29ad2936cb9fe5ebf6c96abdf5_Traceguids
0x180012110: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileVersionInfoImpl(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?GetFileVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEBGKKPEAX@Z
0x18000A7F8: "long __cdecl CommonUtil::MpNewBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@G@CommonUtil@@YAJPEAPEAG_K@Z
0x18001DF48: "__cdecl _imp_realloc" __imp_realloc
0x18001E000: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18002AC98: "__vectorcall ??_R0?AVCCertCheckFactory@MorroCommon@" ??_R0?AVCCertCheckFactory@MorroCommon@@@8
0x1800127E0: "protected: virtual int __cdecl MorroCommon::CWin32::KillTimerImpl(struct HWND__ * __ptr64,unsigned __int64) __ptr64" ?KillTimerImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@_K@Z
0x180012C30: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQuerySessionInformationImpl(void * __ptr64,unsigned long,enum _WTS_INFO_CLASS,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSQuerySessionInformationImpl@CWin32@MorroCommon@@MEAAHPEAXKW4_WTS_INFO_CLASS@@PEAPEAGPEAK@Z
0x18001D9F8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180022C00: ??_R4CFileUtils@MorroCommon@@6B@
0x18001D4F0: ?_entries@?1??_GetEntries@CMpProviderClass@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x180018400: "char const * __ptr64 __cdecl std::_Syserror_map(int)" ?_Syserror_map@std@@YAPEBDH@Z
0x18001E7A8: "`string'" ??_C@_0M@MIDIAGJP@file?5exists?$AA@
0x18001F450: "`string'" ??_C@_1CC@CAIHFDOC@?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001EDA0: "`string'" ??_C@_0CD@BNPLBMNA@inappropriate?5io?5control?5operati@
0x180011C5C: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGPEAD@Z
0x18000C850: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpProviderEventLogger@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x1800036A0: "public: virtual long __cdecl CMpProviderClass::PutInstanceAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutInstanceAsync@CMpProviderClass@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001F478: "`string'" ??_C@_1BE@ILMBBNLH@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18001DCB8: KERNEL32_NULL_THUNK_DATA
0x180003390: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18001D960: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18001E908: "`string'" ??_C@_0BE@GHAFMPAH@too?5many?5files?5open?$AA@
0x18001F3D0: "`string'" ??_C@_1BC@NMNONBBO@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AA?$AA@
0x18001D898: "__cdecl _imp_LookupPrivilegeNameW" __imp_LookupPrivilegeNameW
0x180012060: "protected: virtual int __cdecl MorroCommon::CWin32::ConvertStringSecurityDescriptorToSecurityDescriptorImpl(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?ConvertStringSecurityDescriptorToSecurityDescriptorImpl@CWin32@MorroCommon@@MEAAHPEBGKPEAPEAXPEAK@Z
0x18002A598: "__vectorcall ??_R0?AVCComClassFactory@ATL@" ??_R0?AVCComClassFactory@ATL@@@8
0x18001DC50: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x18001DA18: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008BC0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800184E0: "void __cdecl std::_Xbad_alloc(void)" ?_Xbad_alloc@std@@YAXXZ
0x1800184A4: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x18001FFF0: "`string'" ??_C@_1M@OBKMGAH@?$AA?$CF?$AAI?$AA6?$AA4?$AAd?$AA?$AA@
0x18001EB18: "`string'" ??_C@_0BA@FDIJKJCL@no_buffer_space?$AA@
0x18001FF28: "`string'" ??_C@_1BG@LMMBALLN@?$AAN?$AAi?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001909D: "__cdecl errno" _errno
0x180012330: "protected: virtual int __cdecl MorroCommon::CWin32::Process32FirstImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32FirstImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x18002AE20: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180019180: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800033E0: "public: virtual void * __ptr64 __cdecl ATL::CProviderHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCProviderHelper@ATL@@UEAAPEAXI@Z
0x18002B3F0: "__cdecl tls_index" _tls_index
0x180008504: "private: void __cdecl CMpProviderClass::InitializeInstance(struct IWbemClassObject * __ptr64) __ptr64" ?InitializeInstance@CMpProviderClass@@AEAAXPEAUIWbemClassObject@@@Z
0x18001FA60: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecNotificationQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecNotificationQueryAsync@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001ECF8: "`string'" ??_C@_0BB@IECNJNOI@connection?5reset?$AA@
0x18001095C: "long __cdecl CommonUtil::UtilRegOpenKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilRegOpenKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGK@Z
0x18002ABE0: "__vectorcall ??_R0?AVCWin32@MorroCommon@" ??_R0?AVCWin32@MorroCommon@@@8
0x180002318: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x18002A640: "__vectorcall ??_R0?AVCComObjectRootBase@ATL@" ??_R0?AVCComObjectRootBase@ATL@@@8
0x180021B88: ??_R4_Generic_error_category@std@@6B@
0x180013550: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadRtfFromFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64) __ptr64" ?ReadRtfFromFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z
0x18002ADE0: "__vectorcall ??_R0?AVCPredefinedMpHeapsHolder@CommonUtil@" ??_R0?AVCPredefinedMpHeapsHolder@CommonUtil@@@8
0x18001DD80: "__cdecl _imp_PathCombineW" __imp_PathCombineW
0x18001EE60: "`string'" ??_C@_0BF@PBGGPKKE@no?5message?5available?$AA@
0x180012010: "protected: virtual int __cdecl MorroCommon::CWin32::FreeLibraryImpl(struct HINSTANCE__ * __ptr64) __ptr64" ?FreeLibraryImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@@Z
0x180014690: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEAAX_K@Z
0x180027984: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x18002A290: "__vectorcall ??_R0?AVerror_category@std@" ??_R0?AVerror_category@std@@@8
0x1800236B0: "__cdecl tls_start" _tls_start
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::QueryObjectSink(long,struct IWbemObjectSink * __ptr64 * __ptr64) __ptr64" ?QueryObjectSink@IWbemInstProviderImpl@ATL@@UEAAJJPEAPEAUIWbemObjectSink@@@Z
0x180005710: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegObject@ATL@@UEAAPEAXI@Z
0x180002EBC: "public: __cdecl ATL::CComPtr<struct IWbemPath>::~CComPtr<struct IWbemPath>(void) __ptr64" ??1?$CComPtr@UIWbemPath@@@ATL@@QEAA@XZ
0x18001FE78: "`string'" ??_C@_1CM@INFONEKL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x1800200E8: WPP_293d76f92c0f3b94aeb3cef6d67d60b3_Traceguids
0x1800024D0: "public: virtual bool __cdecl std::error_category::equivalent(class std::error_code const & __ptr64,int)const __ptr64" ?equivalent@error_category@std@@UEBA_NAEBVerror_code@2@H@Z
0x18001E168: "__cdecl _xl_z" __xl_z
0x18001CC98: "const ATL::CProviderHelper::`vftable'" ??_7CProviderHelper@ATL@@6B@
0x18001D998: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18001FBC8: "`string'" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180021DB0: "__vectorcall ??_R2IWbemServices" ??_R2IWbemServices@@8
0x1800278E4: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180022180: "__vectorcall ??_R3IWbemServices" ??_R3IWbemServices@@8
0x180012DB0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetDriveTypeImpl(unsigned short const * __ptr64) __ptr64" ?GetDriveTypeImpl@CWin32@MorroCommon@@MEAAIPEBG@Z
0x180011E30: "protected: virtual int __cdecl MorroCommon::CWin32::CopyFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?CopyFileImpl@CWin32@MorroCommon@@MEAAHPEBG0H@Z
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x18001F578: "`string'" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001F190: "`string'" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x18001C9A0: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x18002A5C8: "__vectorcall ??_R0?AUIClassFactory@" ??_R0?AUIClassFactory@@@8
0x18001D9B8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003438: "public: __cdecl ATL::CInstanceProviderHelper::CInstanceProviderHelper(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64) __ptr64" ??0CInstanceProviderHelper@ATL@@QEAA@PEAUIWbemServices@@PEAUIWbemContext@@@Z
0x18001DB80: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18001D948: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x18001F178: "`string'" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x18001DA60: "__cdecl _imp_GetLongPathNameW" __imp_GetLongPathNameW
0x18001EAF0: "`string'" ??_C@_0O@EHNDLHIG@network_reset?$AA@
0x18001F320: "`string'" ??_C@_0O@BFJCFAAK@unknown?5error?$AA@
0x180017334: "public: static long __cdecl MpCommonEx::CPathUtilsEx::CombinePath(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?CombinePath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAGPEBG1@Z
0x18000B804: "long __cdecl Microsoft::SecurityClient::InitializeMpClientApi(void)" ?InitializeMpClientApi@SecurityClient@Microsoft@@YAJXZ
0x180010468: "long __cdecl CommonUtil::UtilRawGetLoadedKernel32ProcAddress(__int64 (__cdecl* * __ptr64)(void),char const * __ptr64,bool)" ?UtilRawGetLoadedKernel32ProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBD_N@Z
0x180012410: "protected: virtual int __cdecl MorroCommon::CWin32::RemoveDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?RemoveDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18000F9D4: "long __cdecl CommonUtil::NewSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?NewSprintfW@CommonUtil@@YAJPEAPEAGPEBGZZ
0x180005B10: "public: virtual long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@UEAAJPEBG0@Z
0x180017110: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`scalar deleting destructor'(unsigned int) __ptr64" ??_GILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18001CFC0: "const ATL::CWin32Heap::`vftable'" ??_7CWin32Heap@ATL@@6B@
0x18001DE10: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x18001E050: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x18001D8F0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x18002A768: "__vectorcall ??_R0?AVCAtlModule@ATL@" ??_R0?AVCAtlModule@ATL@@@8
0x18001D478: "const MorroCommon::ILockedCertCheck::`vftable'" ??_7ILockedCertCheck@MorroCommon@@6B@
0x18001E068: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x180002718: "public: __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::CDetectionWbemCreator(struct IWbemServices * __ptr64,struct IWbemContext * __ptr64) __ptr64" ??0CDetectionWbemCreator@SecurityClient@Microsoft@@QEAA@PEAUIWbemServices@@PEAUIWbemContext@@@Z
0x18001DC88: "__cdecl _imp_GlobalFindAtomW" __imp_GlobalFindAtomW
0x1800200D8: "__cdecl GUID_44aca674_e8fc_11d0_a07c_00c04fb68820" _GUID_44aca674_e8fc_11d0_a07c_00c04fb68820
0x180018F80: "__cdecl ValidateImageBase" _ValidateImageBase
0x180021AE0: "__vectorcall ??_R3_Generic_error_category@std" ??_R3_Generic_error_category@std@@8
0x1800219A8: "__vectorcall ??_R2_Generic_error_category@std" ??_R2_Generic_error_category@std@@8
0x180023070: ??_R4CCertCheckFactory@MorroCommon@@6B@
0x18002A6A0: "__vectorcall ??_R0?AVEHresultException@MorroCommon@" ??_R0?AVEHresultException@MorroCommon@@@8
0x18001FE50: "`string'" ??_C@_1CC@FBDLNMLE@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x180020000: "`string'" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x18001DC70: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180018EAC: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x180007820: "long __cdecl MpSmartConfigInitialize(struct MpConfigLibraryType * __ptr64 * __ptr64)" ?MpSmartConfigInitialize@@YAJPEAPEAUMpConfigLibraryType@@@Z
0x18001F048: "`string'" ??_C@_0P@IPFDMIFL@text?5file?5busy?$AA@
0x180002EE4: "public: __cdecl CommonUtil::AutoRef<struct IWbemClassObject>::~AutoRef<struct IWbemClassObject>(void) __ptr64" ??1?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAA@XZ
0x180003708: WPP_SF_SDSSqqq
0x18001CAD8: "const ATL::CComObject<class CInfectionStateClass>::`vftable'{for `IWbemProviderInit'}" ??_7?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemProviderInit@@@
0x18002A8C0: "__vectorcall ??_R0?AV?$CComObject@VCMpProviderClass@@@ATL@" ??_R0?AV?$CComObject@VCMpProviderClass@@@ATL@@@8
0x1800126D0: "protected: virtual int __cdecl MorroCommon::CWin32::ChangeServiceConfigImpl(struct SC_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?ChangeServiceConfigImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KKKPEBG1PEAK1111@Z
0x18001D830: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x180022848: ??_R4CMpProviderModule@@6B@
0x18001F530: "`string'" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x180020008: WPP_96c2db06e5a03b9c99a3d5391a49746a_Traceguids
0x18001EC70: "`string'" ??_C@_0BE@MPJPGCEO@bad?5file?5descriptor?$AA@
0x180003A80: "public: virtual __cdecl CInfectionStateClass::~CInfectionStateClass(void) __ptr64" ??1CInfectionStateClass@@UEAA@XZ
0x18001F800: "`string'" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x1800222F8: "__vectorcall ??_R1A@?0A@EA@IClassFactory" ??_R1A@?0A@EA@IClassFactory@@8
0x180027920: "__cdecl _IMPORT_DESCRIPTOR_WTSAPI32" __IMPORT_DESCRIPTOR_WTSAPI32
0x18001DDE8: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x180021D30: "__vectorcall ??_R2IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R2IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x180022108: "__vectorcall ??_R3IDetectionItemSizeCalculator@SecurityClient@Microsoft" ??_R3IDetectionItemSizeCalculator@SecurityClient@Microsoft@@8
0x180022D00: "__vectorcall ??_R1A@?0A@EA@CMpProviderEventLogger@SecurityClient@Microsoft" ??_R1A@?0A@EA@CMpProviderEventLogger@SecurityClient@Microsoft@@8
0x180012350: "protected: virtual int __cdecl MorroCommon::CWin32::TerminateProcessImpl(void * __ptr64,unsigned int) __ptr64" ?TerminateProcessImpl@CWin32@MorroCommon@@MEAAHPEAXI@Z
0x180016868: "public: static long __cdecl MorroCommon::CCertCheck::IsMicrosoftCert(unsigned short const * __ptr64,void * __ptr64)" ?IsMicrosoftCert@CCertCheck@MorroCommon@@SAJPEBGPEAX@Z
0x1800207F0: "`string'" ??_C@_1FK@OKJMJONP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc@
0x18001DB70: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x1800223A0: "__vectorcall ??_R1A@?0A@EA@CComObjectRootBase@ATL" ??_R1A@?0A@EA@CComObjectRootBase@ATL@@8
0x1800017A8: WPP_SF_
0x1800119F0: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Allocate(unsigned __int64) __ptr64" ?Allocate@CWin32Heap@ATL@@UEAAPEAX_K@Z
0x18001FF00: "`string'" ??_C@_1CG@OLBBDEH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180027970: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x18001F518: "`string'" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x18001DC20: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800147E4: "private: void __cdecl ATL::CSimpleStringT<char,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x1800278F8: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x180012C70: "protected: virtual __int64 (__cdecl*__cdecl MorroCommon::CWin32::GetProcAddressImpl(struct HINSTANCE__ * __ptr64,char const * __ptr64) __ptr64)(void)" ?GetProcAddressImpl@CWin32@MorroCommon@@MEAAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x18001DAD0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18001EF68: "`string'" ??_C@_0BI@LNEGIFLN@operation?5not?5supported?$AA@
0x1800201A8: WPP_cc33a21dc7b8337d8ea502ecc58ea06a_Traceguids
0x18001DAC8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18001634C: "private: long __cdecl MorroCommon::CWPPTrace::SetTracingEnabled(bool) __ptr64" ?SetTracingEnabled@CWPPTrace@MorroCommon@@AEAAJ_N@Z
0x18001DC40: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001DAA8: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x1800208E8: "`string'" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x18002A170: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180021988: "__vectorcall ??_R2_Iostream_error_category@std" ??_R2_Iostream_error_category@std@@8
0x180021AC8: "__vectorcall ??_R3_Iostream_error_category@std" ??_R3_Iostream_error_category@std@@8
0x180017AC0: "public: virtual __cdecl MpCommonEx::CEventLoggerBase::~CEventLoggerBase(void) __ptr64" ??1CEventLoggerBase@MpCommonEx@@UEAA@XZ
0x18002A0D0: "public: static class std::_Iostream_error_category std::_Error_objects<int>::_Iostream_object" ?_Iostream_object@?$_Error_objects@H@std@@2V_Iostream_error_category@2@A
0x18001DBA0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x18001DC48: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x180018EC4: "public: __cdecl exception::exception(void) __ptr64" ??0exception@@QEAA@XZ
0x18001EEE8: "`string'" ??_C@_0BA@DOCPFFJG@not?5a?5directory?$AA@
0x180012210: "protected: virtual int __cdecl MorroCommon::CWin32::SetWindowTextImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetWindowTextImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG@Z
0x1800145FC: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Left(int)const __ptr64" ?Left@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@H@Z
0x18001D838: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x1800187C0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180021C28: ??_R4CRefObject@CommonUtil@@6B@
0x180015BE0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32FilePathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32FilePathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180011A70: "public: virtual unsigned __int64 __cdecl ATL::CWin32Heap::GetSize(void * __ptr64) __ptr64" ?GetSize@CWin32Heap@ATL@@UEAA_KPEAX@Z
0x180021A70: "__vectorcall ??_R1A@?0A@EA@error_category@std" ??_R1A@?0A@EA@error_category@std@@8
0x18001DF88: "__cdecl _imp__initterm" __imp__initterm
0x18001D968: "__cdecl _imp_GetDiskFreeSpaceExW" __imp_GetDiskFreeSpaceExW
0x180020360: "`string'" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x18002B908: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4HA
0x18002B898: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4HA
0x18002B8B0: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4HA
0x180002500: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Generic_error_category::message(int)const __ptr64" ?message@_Generic_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18000A43C: "public: struct _SYSTEMTIME __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToSystemTime(void)const __ptr64" ?ToSystemTime@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AU_SYSTEMTIME@@XZ
0x18001DA68: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateClassEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateClassEnum@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18002B930: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4HA
0x180005F68: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG@Z
0x18001DD50: "__cdecl _imp_SHGetSpecialFolderLocation" __imp_SHGetSpecialFolderLocation
0x180022A18: ??_R4?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemProviderInit@@@
0x1800222A0: "__vectorcall ??_R1A@?0A@EA@CComClassFactory@ATL" ??_R1A@?0A@EA@CComClassFactory@ATL@@8
0x18002AB18: "__vectorcall ??_R0?AVCHResultExceptionImpl@CommonUtil@" ??_R0?AVCHResultExceptionImpl@CommonUtil@@@8
0x180015710: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleNameImpl(void) __ptr64" ?GetCurrentModuleNameImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18002B950: "public: static class std::locale::id std::num_put<unsigned short,class std::back_insert_iterator<class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > > >::id" ?id@?$num_put@GV?$back_insert_iterator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@std@@@std@@2V0locale@2@A
0x18001E070: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18000F748: "public: virtual __cdecl CommonUtil::CHResultExceptionImpl::~CHResultExceptionImpl(void) __ptr64" ??1CHResultExceptionImpl@CommonUtil@@UEAA@XZ
0x18001FBA0: "`string'" ??_C@_1CG@PABCPGPL@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001DB28: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180011E10: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameImpl@CWin32@MorroCommon@@MEAAKPEAUHINSTANCE__@@PEAGK@Z
0x1800064A4: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x18002B648: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_antimalwareServiceLogLocation" ?m_antimalwareServiceLogLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x18001AD60: "void __cdecl `public: static class CWPPTrace::Instance & __ptr64 __cdecl MorroCommon::CWPPTrace::Instance(void)'::`2'::Finstance::`dynamic atexit destructor for '(void)" ??__Finstance@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV12@XZ@YAXXZ
0x1800222E0: "__vectorcall ??_R3IClassFactory" ??_R3IClassFactory@@8
0x1800222C8: "__vectorcall ??_R2IClassFactory" ??_R2IClassFactory@@8
0x1800275F8: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x18000654C: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180018E40: "__cdecl recalloc" _recalloc
0x180009CC8: "public: __cdecl CommonUtil::CAutoUniquePtr<class ATL::CImpersonateClientHelper,void>::~CAutoUniquePtr<class ATL::CImpersonateClientHelper,void>(void) __ptr64" ??1?$CAutoUniquePtr@VCImpersonateClientHelper@ATL@@X@CommonUtil@@QEAA@XZ
0x18001F980: "`string'" ??_C@_1CK@OEKPKBNA@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18001DA20: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180020260: "`string'" ??_C@_0BD@BNECPIGO@MpConfigInitialize?$AA@
0x18001F708: "`string'" ??_C@_1CG@LGCIEEGE@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAO?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x180018EA6: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x180020198: WPP_ae6ddf61721e377a51c0488cf434dc50_Traceguids
0x18002A410: "__vectorcall ??_R0?AVIDetectionItemSizeCalculator@SecurityClient@Microsoft@" ??_R0?AVIDetectionItemSizeCalculator@SecurityClient@Microsoft@@@8
0x18001DC78: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x18001D438: "const MorroCommon::CCertCheckFactory::`vftable'" ??_7CCertCheckFactory@MorroCommon@@6B@
0x180022F30: ??_R4CHResultException@CommonUtil@@6B@
0x18000B124: "struct ATL::ATLSTRINGRESOURCEIMAGE const * __ptr64 __cdecl ATL::_AtlGetStringResourceImage(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64,unsigned int)" ?_AtlGetStringResourceImage@ATL@@YAPEBUATLSTRINGRESOURCEIMAGE@1@PEAUHINSTANCE__@@PEAUHRSRC__@@I@Z
0x18001E8D8: "`string'" ??_C@_0BC@PPHBOELF@cross?5device?5link?$AA@
0x180027618: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1800054E0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAKXZ
0x18000B28C: "public: __cdecl Microsoft::SecurityClient::CMpClientApi::CMpClientApi(void) __ptr64" ??0CMpClientApi@SecurityClient@Microsoft@@QEAA@XZ
0x18001D950: CRYPT32_NULL_THUNK_DATA
0x18000D2EC: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_N_K@Z
0x180005590: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x18000A834: "public: static class MorroCommon::CWPPTrace & __ptr64 __cdecl MorroCommon::CWPPTrace::Instance(void)" ?Instance@CWPPTrace@MorroCommon@@SAAEAV12@XZ
0x180020860: WPP_197294aab8103b8a0631898ae3d03ea3_Traceguids
0x18000F4DC: "public: __cdecl CommonUtil::CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CStdPtrContainerSeq@V?$CStdVector@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x180020588: "`string'" ??_C@_1BO@GFOANKMI@?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800154B0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleParnetDirectoryImpl(void) __ptr64" ?GetCurrentModuleParnetDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18001FA08: "`string'" ??_C@_17OMAOINJK@?$AAS?$AAA?$AAM?$AA?$AA@
0x18001DDA8: SHLWAPI_NULL_THUNK_DATA
0x18001F550: "`string'" ??_C@_1CC@BDPEAPKB@?$AA_?$AA_?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180012BF0: "protected: virtual int __cdecl MorroCommon::CWin32::WTSEnumerateSessionsImpl(void * __ptr64,unsigned long,unsigned long,struct _WTS_SESSION_INFOW * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSEnumerateSessionsImpl@CWin32@MorroCommon@@MEAAHPEAXKKPEAPEAU_WTS_SESSION_INFOW@@PEAK@Z
0x1800121E0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetSystemDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetSystemDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x18002B9E8: "__cdecl _onexitend" __onexitend
0x1800034F8: "public: long __cdecl ATL::CInstanceProviderHelper::CheckInstancePath(struct IClassFactory * __ptr64,unsigned short * __ptr64 const,unsigned short * __ptr64 const,unsigned __int64) __ptr64" ?CheckInstancePath@CInstanceProviderHelper@ATL@@QEAAJPEAUIClassFactory@@QEAG1_K@Z
0x18001DA70: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18001D888: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18001F818: "`string'" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x180023150: "__vectorcall ??_R3ILockedCertCheck@MorroCommon" ??_R3ILockedCertCheck@MorroCommon@@8
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecMethod(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?ExecMethod@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAPEAU4@PEAPEAUIWbemCallResult@@@Z
0x1800230D8: "__vectorcall ??_R2ILockedCertCheck@MorroCommon" ??_R2ILockedCertCheck@MorroCommon@@8
0x180007800: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x18002AC10: "__vectorcall ??_R0PEAVEHresultException@MorroCommon@" ??_R0PEAVEHresultException@MorroCommon@@@8
0x18001ED30: "`string'" ??_C@_0BI@BNCLIGPB@executable?5format?5error?$AA@
0x180019091: "__cdecl unlock" _unlock
0x180006694: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x18001DD78: "__cdecl _imp_PathIsDirectoryW" __imp_PathIsDirectoryW
0x18002B460: "class CMpProviderModule _AtlModule" ?_AtlModule@@3VCMpProviderModule@@A
0x18000C850: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpProviderEventLogger@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18001FFA0: "__cdecl GUID_8a696d12_576b_422e_9712_01b9dd84b446" _GUID_8a696d12_576b_422e_9712_01b9dd84b446
0x18001E0B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180012CD0: "protected: virtual int __cdecl MorroCommon::CWin32::GetProductInfoImpl(unsigned long * __ptr64) __ptr64" ?GetProductInfoImpl@CWin32@MorroCommon@@MEAAHPEAK@Z
0x18000CCD4: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogHealthStateGenericError(long) __ptr64" ?LogHealthStateGenericError@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXJ@Z
0x18001DE38: "__cdecl _imp_IsDialogMessageW" __imp_IsDialogMessageW
0x1800121D0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetWindowsDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetWindowsDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x18001DFB8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x18002AB50: "__vectorcall ??_R0?AVCHResultException@CommonUtil@" ??_R0?AVCHResultException@CommonUtil@@@8
0x180018AA0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18001DD58: "__cdecl _imp_SHGetPathFromIDListW" __imp_SHGetPathFromIDListW
0x18001DB40: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18001F584: "`string'" ??_C@_04HIBGFPH@NULL?$AA@
0x18001DA38: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x18001D9C8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001EF28: "`string'" ??_C@_0O@NHEDABJP@not?5supported?$AA@
0x180017D1C: "long __cdecl CommonUtil::MpSetWindowsVersionInfoImpl(void)" ?MpSetWindowsVersionInfoImpl@CommonUtil@@YAJXZ
0x18001D4B8: "const CommonUtil::CPtrObjectProcessHeap::`vftable'" ??_7CPtrObjectProcessHeap@CommonUtil@@6B@
0x180003394: "protected: virtual __cdecl CommonUtil::CRefObject::~CRefObject(void) __ptr64" ??1CRefObject@CommonUtil@@MEAA@XZ
0x180004724: "private: void __cdecl CInfectionStateClass::InitializeInstance(struct IWbemClassObject * __ptr64) __ptr64" ?InitializeInstance@CInfectionStateClass@@AEAAXPEAUIWbemClassObject@@@Z
0x18001DE50: USER32_NULL_THUNK_DATA
0x18001FAE0: "`string'" ??_C@_1DE@IGHAHFFO@?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180022DA8: ??_R4CMpProviderEventLogger@SecurityClient@Microsoft@@6BCRefObject@CommonUtil@@@
0x18000DA28: "public: unsigned long __cdecl Microsoft::SecurityClient::CInfectionStateConfig::GetMaxDetectionsAllowed(void)const __ptr64" ?GetMaxDetectionsAllowed@CInfectionStateConfig@SecurityClient@Microsoft@@QEBAKXZ
0x180004C38: "public: __cdecl Microsoft::SecurityClient::CInfectionState::~CInfectionState(void) __ptr64" ??1CInfectionState@SecurityClient@Microsoft@@QEAA@XZ
0x18001CF48: "const Microsoft::SecurityClient::CDetectionItem::`vftable'" ??_7CDetectionItem@SecurityClient@Microsoft@@6B@
0x180020278: "`string'" ??_C@_0BF@DIIDBCDO@MpConfigUninitialize?$AA@
0x18001D808: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18001ED10: "`string'" ??_C@_0BN@KDMIFEIP@destination?5address?5required?$AA@
0x18001F780: "__cdecl GUID_1be41572_91dd_11d1_aeb2_00c04fb68820" _GUID_1be41572_91dd_11d1_aeb2_00c04fb68820
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutClass(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutClass@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x18001D8D8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18001DA80: "__cdecl _imp_GetPrivateProfileStringW" __imp_GetPrivateProfileStringW
0x18001DE58: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x18001E7E0: "`string'" ??_C@_0BI@NGCEHDD@device?5or?5resource?5busy?$AA@
0x18001CAA0: "const std::error_category::`vftable'" ??_7error_category@std@@6B@
0x18001E048: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18002B888: "private: static class MorroCommon::CFileUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@0PEAVCFileUtils@2@EA
0x180005010: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x18000F2A0: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionItem::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionItem@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180020220: "`string'" ??_C@_0BF@NGGLNLB@MpManagerStatusQuery?$AA@
0x1800121A0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LocalFreeImpl(void * __ptr64) __ptr64" ?LocalFreeImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x1800122D0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentProcessIdImpl(void) __ptr64" ?GetCurrentProcessIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x18002AE40: "__cdecl Init_global_epoch" _Init_global_epoch
0x180013E70: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceRawImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?LoadResourceRawImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0PEAPEAEPEA_K@Z
0x18001EB60: "`string'" ??_C@_0BI@ICEIDKLJ@operation_not_supported?$AA@
0x18001E148: "__cdecl _xi_a" __xi_a
0x1800162C0: "public: long __cdecl MorroCommon::CWPPTrace::StopLog(void) __ptr64" ?StopLog@CWPPTrace@MorroCommon@@QEAAJXZ
0x180012B00: "protected: virtual void __cdecl MorroCommon::CWin32::GetNativeSystemInfoImpl(struct _SYSTEM_INFO * __ptr64) __ptr64" ?GetNativeSystemInfoImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEM_INFO@@@Z
0x18001E960: "`string'" ??_C@_0BN@LCBDHODA@address_family_not_supported?$AA@
0x18001D958: "__cdecl _imp_GetNativeSystemInfo" __imp_GetNativeSystemInfo
0x180022200: ??_R4?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemServices@@@
0x180011F10: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteKeyImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x180012360: "protected: virtual int __cdecl MorroCommon::CWin32::MessageBoxImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int) __ptr64" ?MessageBoxImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG1I@Z
0x18001F908: "`string'" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18001D9A0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18001DCD0: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x1800231B8: ??_R4CEventLoggerBase@MpCommonEx@@6B@
0x18002A328: "__vectorcall ??_R0?AV?$CComObject@VCInfectionStateClass@@@ATL@" ??_R0?AV?$CComObject@VCInfectionStateClass@@@ATL@@@8
0x180005520: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18001036C: "long __cdecl CommonUtil::UtilExpandEnvironmentStrings(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilExpandEnvironmentStrings@CommonUtil@@YAJPEAPEAGPEBG@Z
0x18001CCE0: "const ATL::CComObject<class CMpProviderClass>::`vftable'{for `IWbemProviderInit'}" ??_7?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemProviderInit@@@
0x18001CFF0: "const MorroCommon::CWin32::`vftable'" ??_7CWin32@MorroCommon@@6B@
0x18001DF68: "__cdecl _imp__unlock" __imp__unlock
0x180011768: MpInvokeExitDestruction
0x18002B400: "long (__cdecl* __ptr64 ATL::_pPerfRegFunc)(struct HINSTANCE__ * __ptr64)" ?_pPerfRegFunc@ATL@@3P6AJPEAUHINSTANCE__@@@ZEA
0x18000D1E4: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x18001DD38: "__cdecl _imp_SafeArrayDestroy" __imp_SafeArrayDestroy
0x18001F958: "`string'" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x1800136C0: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadSystemLibraryImpl(unsigned short const * __ptr64,struct HINSTANCE__ * __ptr64 & __ptr64) __ptr64" ?SafeLoadSystemLibraryImpl@CFileUtils@MorroCommon@@MEAAJPEBGAEAPEAUHINSTANCE__@@@Z
0x18001F9F8: "`string'" ??_C@_19HLLLM@?$AAM?$AAi?$AAm?$AAe?$AA?$AA@
0x18001F898: "`string'" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180002F1C: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_N_K@Z
0x18001E090: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000DA30: WPP_SF_DI
0x18001DCC0: "__cdecl _imp_VarBstrCat" __imp_VarBstrCat
0x180010B50: "long __cdecl CommonUtil::UtilRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegGetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAKPEA_KPEAX@Z
0x180008B30: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x1800208D0: "`string'" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x180027640: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x18001DDC0: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x18000FBF0: WPP_SF_Dd
0x18000EF9C: WPP_SF_DD
0x18000A8C0: WPP_SF_dd
0x180022198: "__vectorcall ??_R3?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R3?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x180021DC8: "__vectorcall ??_R2?$CComObjectCached@VCComClassFactory@ATL@@@ATL" ??_R2?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@8
0x18001DE20: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x1800224E0: "__vectorcall ??_R1A@?0A@EA@IRegistrarBase" ??_R1A@?0A@EA@IRegistrarBase@@8
0x180020788: "`string'" ??_C@_19MPFPGMJE@?$AA?$CF?$AAc?$AA?3?$AA?2?$AA?$AA@
0x1800165B8: "private: static long __cdecl MorroCommon::CCertCheck::HrWinVerifyTrust(struct HWND__ * __ptr64,struct _GUID * __ptr64,struct _WINTRUST_DATA * __ptr64)" ?HrWinVerifyTrust@CCertCheck@MorroCommon@@CAJPEAUHWND__@@PEAU_GUID@@PEAU_WINTRUST_DATA@@@Z
0x18001D8A8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18000A038: WPP_SF_DS
0x1800098F4: WPP_SF_dS
0x1800190AC: "__cdecl invoke_watson" _invoke_watson
0x180004FF0: "public: virtual long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180021B38: ??_R4_System_error_category@std@@6B@
0x18002A0C0: WPP_GLOBAL_Control
0x180020290: "`string'" ??_C@_0N@MMCCAMHH@MpConfigOpen?$AA@
0x180012980: "protected: virtual int __cdecl MorroCommon::CWin32::PostThreadMessageImpl(unsigned long,unsigned int,unsigned __int64,__int64) __ptr64" ?PostThreadMessageImpl@CWin32@MorroCommon@@MEAAHKI_K_J@Z
0x18001FA70: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001DD68: "__cdecl _imp_PathMatchSpecW" __imp_PathMatchSpecW
0x180005180: "public: __cdecl std::vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::~vector<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >(void) __ptr64" ??1?$vector@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAA@XZ
0x180018500: "void __cdecl std::_Xlength_error(char const * __ptr64)" ?_Xlength_error@std@@YAXPEBD@Z
0x18002B868: "public: static struct _GUID ATL::CAtlModule::m_libid" ?m_libid@CAtlModule@ATL@@2U_GUID@@A
0x18001F220: "`string'" ??_C@_1O@FHBGLCIO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x180022CC8: "__vectorcall ??_R2CEventLoggerBase@MpCommonEx" ??_R2CEventLoggerBase@MpCommonEx@@8
0x180022D50: "__vectorcall ??_R3CEventLoggerBase@MpCommonEx" ??_R3CEventLoggerBase@MpCommonEx@@8
0x18000142C: WPP_SF_D
0x18000142C: WPP_SF_d
0x18001DC60: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x180018C84: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18002BA00: "__cdecl pRawDllMain" _pRawDllMain
0x1800121C0: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeProcessImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x18002A700: "__vectorcall ??_R0?AUIRegistrarBase@" ??_R0?AUIRegistrarBase@@@8
0x18000F740: "public: virtual char const * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::what(void)const __ptr64" ?what@CHResultExceptionImpl@CommonUtil@@UEBAPEBDXZ
0x18001DF78: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180020668: "`string'" ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x1800123F0: "protected: virtual int __cdecl MorroCommon::CWin32::FindNextFileImpl(void * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindNextFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_WIN32_FIND_DATAW@@@Z
0x18001E820: "`string'" ??_C@_0BB@FCMFBGOM@invalid?5argument?$AA@
0x18000C39C: MpThreatOpen
0x18000BF54: MpConfigUninitialize
0x1800022CC: "public: __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>::~CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>(void) __ptr64" ??1?$CAtlSafeAllocBufferManager@VCCRTAllocator@ATL@@@_ATL_SAFE_ALLOCA_IMPL@ATL@@QEAA@XZ
0x180012270: "protected: virtual int __cdecl MorroCommon::CWin32::GetTokenInformationImpl(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetTokenInformationImpl@CWin32@MorroCommon@@MEAAHPEAXW4_TOKEN_INFORMATION_CLASS@@0KPEAK@Z
0x180001B70: DllUnregisterServer
0x18001DC80: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1800204B8: "`string'" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x180011A00: "public: virtual void __cdecl ATL::CWin32Heap::Free(void * __ptr64) __ptr64" ?Free@CWin32Heap@ATL@@UEAAXPEAX@Z
0x18001DF60: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18001DCE0: "__cdecl _imp_VariantClear" __imp_VariantClear
0x18002B560: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180009CF0: "public: __cdecl Microsoft::SecurityClient::CEnsureImpersonationLevel::~CEnsureImpersonationLevel(void) __ptr64" ??1CEnsureImpersonationLevel@SecurityClient@Microsoft@@QEAA@XZ
0x18001FFFC: "`string'" ??_C@_13EHOOFIKC@?$AA?$HN?$AA?$AA@
0x180012440: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::HeapAllocImpl(void * __ptr64,unsigned long,unsigned __int64) __ptr64" ?HeapAllocImpl@CWin32@MorroCommon@@MEAAPEAXPEAXK_K@Z
0x1800164D4: "long __cdecl MorroCommon::HrCreateGuid(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64)" ?HrCreateGuid@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180017E40: "protected: virtual void * __ptr64 __cdecl CommonUtil::CPtrObjectProcessHeap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPtrObjectProcessHeap@CommonUtil@@MEAAPEAXI@Z
0x180005840: "public: virtual long __cdecl ATL::CRegObject::ClearReplacements(void) __ptr64" ?ClearReplacements@CRegObject@ATL@@UEAAJXZ
0x180021FB8: "__vectorcall ??_R17?0A@EA@IWbemProviderInit" ??_R17?0A@EA@IWbemProviderInit@@8
0x18001DC98: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x180014838: "private: void __cdecl ATL::CSimpleStringT<char,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x180008BC8: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18002AD08: "__vectorcall ??_R0?AVCLockedCertCheckImpl@MorroCommon@" ??_R0?AVCLockedCertCheckImpl@MorroCommon@@@8
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x1800121F0: "protected: virtual int __cdecl MorroCommon::CWin32::GetDiskFreeSpaceExImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetDiskFreeSpaceExImpl@CWin32@MorroCommon@@MEAAHPEBGPEAT_ULARGE_INTEGER@@11@Z
0x180003390: "public: __cdecl ATL::CComCriticalSection::~CComCriticalSection(void) __ptr64" ??1CComCriticalSection@ATL@@QEAA@XZ
0x180020558: "`string'" ??_C@_09PANKGPKN@hr?$DN0x?$CF08X?$AA@
0x18001DF38: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x18001DAF0: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180022150: "__vectorcall ??_R3IWbemInstProviderImpl@ATL" ??_R3IWbemInstProviderImpl@ATL@@8
0x180021D68: "__vectorcall ??_R2IWbemInstProviderImpl@ATL" ??_R2IWbemInstProviderImpl@ATL@@8
0x18001F1B0: WPP_8c30319661453c8dbbd2680ff45b1eca_Traceguids
0x18001C9E8: "const CommonUtil::CRefObject::`vftable'" ??_7CRefObject@CommonUtil@@6B@
0x18000EF84: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>::~CUniqueHandle<struct CommonUtil::CAutoCloseRegistryKey>(void) __ptr64" ??1?$CUniqueHandle@UCAutoCloseRegistryKey@CommonUtil@@@CommonUtil@@QEAA@XZ
0x1800232F8: "__vectorcall ??_R17?0A@EA@CPtrObject@CommonUtil" ??_R17?0A@EA@CPtrObject@CommonUtil@@8
0x18001C9B0: "const type_info::`vftable'" ??_7type_info@@6B@
0x18001DE78: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x1800276D8: "__cdecl CTA3?AVCHResultExceptionImpl@CommonUtil@@" _CTA3?AVCHResultExceptionImpl@CommonUtil@@
0x18002B958: "public: static class std::locale::id std::numpunct<unsigned short>::id" ?id@?$numpunct@G@std@@2V0locale@2@A
0x180005290: "public: void __cdecl std::_Wrap_alloc<class std::allocator<unsigned short * __ptr64> >::deallocate(unsigned short * __ptr64 * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@PEAG@std@@@std@@QEAAXPEAPEAG_K@Z
0x180022958: "__vectorcall ??_R1EI@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R1EI@?0A@EA@?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18001D990: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001FD40: "`string'" ??_C@_1DI@HLNKHDIG@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18001DF20: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180021A48: "__vectorcall ??_R1A@?0A@EA@_Generic_error_category@std" ??_R1A@?0A@EA@_Generic_error_category@std@@8
0x180018A70: "__cdecl _security_check_cookie" __security_check_cookie
0x18002B87C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18001E140: "__cdecl _xc_z" __xc_z
0x180012A50: "protected: virtual long __cdecl MorroCommon::CWin32::ProcessIdToSessionIdImpl(unsigned long,unsigned long * __ptr64) __ptr64" ?ProcessIdToSessionIdImpl@CWin32@MorroCommon@@MEAAJKPEAK@Z
0x180012250: "protected: virtual int __cdecl MorroCommon::CWin32::OpenProcessTokenImpl(void * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?OpenProcessTokenImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAPEAX@Z
0x180020568: WPP_d9331a28cdf9347a3f7ce0b108860eb4_Traceguids
0x18001DA28: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001D8A0: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x18001CF38: "const Microsoft::SecurityClient::CMpProviderEventLogger::`vftable'{for `CommonUtil::CRefObject'}" ??_7CMpProviderEventLogger@SecurityClient@Microsoft@@6BCRefObject@CommonUtil@@@
0x180017A08: WPP_SF_qdhdd
0x180021B60: ??_R4_Iostream_error_category@std@@6B@
0x180011DE0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetTempFileNameImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64) __ptr64" ?GetTempFileNameImpl@CWin32@MorroCommon@@MEAAIPEBG0IPEAG@Z
0x180011E50: "protected: virtual long __cdecl MorroCommon::CWin32::RegCreateKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?RegCreateKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKPEAGKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x180027520: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x1800224B0: "__vectorcall ??_R2IRegistrarBase" ??_R2IRegistrarBase@@8
0x1800224C8: "__vectorcall ??_R3IRegistrarBase" ??_R3IRegistrarBase@@8
0x180012390: "protected: virtual struct HRSRC__ * __ptr64 __cdecl MorroCommon::CWin32::FindResourceImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindResourceImpl@CWin32@MorroCommon@@MEAAPEAUHRSRC__@@PEAUHINSTANCE__@@PEBG1@Z
0x180022A98: "__vectorcall ??_R1A@?0A@EA@bad_alloc@std" ??_R1A@?0A@EA@bad_alloc@std@@8
0x18001DEA0: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x18000AF34: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Empty(void) __ptr64" ?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
0x1800031C0: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K0@Z
0x18001EE88: "`string'" ??_C@_0BD@EAMBFIDF@no?5protocol?5option?$AA@
0x180011C38: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
0x180023190: ??_R4ILockedCertCheck@MorroCommon@@6B@
0x180018EB8: "__cdecl CxxThrowException" _CxxThrowException
0x18001D4C0: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x180020320: "`string'" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x18001DF80: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180020150: "`string'" ??_C@_1EI@DJAEAGOL@?$AA?$CF?$AA0?$AA4?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAu?$AA?9?$AA?$CF?$AA0?$AA2?$AAu?$AAT?$AA?$CF?$AA0?$AA2?$AAu?$AA?3?$AA?$CF?$AA0?$AA2?$AAu?$AA?3?$AA?$CF?$AA0?$AA2?$AAu?$AA?4?$AA?$CF?$AA0@
0x180022C90: "__vectorcall ??_R3CMpClientApi@SecurityClient@Microsoft" ??_R3CMpClientApi@SecurityClient@Microsoft@@8
0x18002B451: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils> MorroCommon::CPathUtils::m_instance" ?m_instance@CPathUtils@MorroCommon@@0V?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@2@A
0x18000C6C0: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180022C28: "__vectorcall ??_R2CMpClientApi@SecurityClient@Microsoft" ??_R2CMpClientApi@SecurityClient@Microsoft@@8
0x180020778: "`string'" ??_C@_1M@EKDBLKPK@?$AA?$CK?$AA?4?$AAs?$AAc?$AAr?$AA?$AA@
0x180002450: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Generic_error_category@std@@UEAAPEAXI@Z
0x18001EFD0: "`string'" ??_C@_0BG@EICBIHDP@read?5only?5file?5system?$AA@
0x18002AA50: "__vectorcall ??_R0?AVCEventLoggerBase@MpCommonEx@" ??_R0?AVCEventLoggerBase@MpCommonEx@@@8
0x18000B220: WPP_SF_qdd
0x18001E098: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18001E078: "__cdecl _imp_CoGetClassObject" __imp_CoGetClassObject
0x1800050F0: "public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::Release(void) __ptr64" ?Release@?$CComObject@VCInfectionStateClass@@@ATL@@UEAAKXZ
0x18001D9A8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800202A0: "`string'" ??_C@_0O@HPLGDDMO@MpConfigClose?$AA@
0x18001DC10: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180012C80: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustWindowRectImpl(struct tagRECT * __ptr64,unsigned long,int) __ptr64" ?AdjustWindowRectImpl@CWin32@MorroCommon@@MEAAHPEAUtagRECT@@KH@Z
0x18001F590: "`string'" ??_C@_1DG@HHJCOAIL@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAI?$AAn?$AAf?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001D890: "__cdecl _imp_InitiateSystemShutdownExW" __imp_InitiateSystemShutdownExW
0x1800223D8: "__vectorcall ??_R3CComObjectRootBase@ATL" ??_R3CComObjectRootBase@ATL@@8
0x1800223C8: "__vectorcall ??_R2CComObjectRootBase@ATL" ??_R2CComObjectRootBase@ATL@@8
0x18001F838: "`string'" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18001F308: LIBID_MpProvider
0x18002A988: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18001FF40: "`string'" ??_C@_1CC@EMLDAANP@?$AAN?$AAi?$AAs?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000F75C: "void __cdecl CommonUtil::CommonThrowHr(long)" ?CommonThrowHr@CommonUtil@@YAXJ@Z
0x180011DB0: "protected: virtual int __cdecl MorroCommon::CWin32::PathFileExistsImpl(unsigned short const * __ptr64) __ptr64" ?PathFileExistsImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180022590: ??_R4CRegObject@ATL@@6B@
0x18001D448: "const MorroCommon::CLockEntireFile::`vftable'" ??_7CLockEntireFile@MorroCommon@@6B@
0x18001F870: "`string'" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180012930: "protected: virtual int __cdecl MorroCommon::CWin32::IsDialogMessageImpl(struct HWND__ * __ptr64,struct tagMSG * __ptr64) __ptr64" ?IsDialogMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEAUtagMSG@@@Z
0x18001CA68: "const std::_Generic_error_category::`vftable'" ??_7_Generic_error_category@std@@6B@
0x1800230E8: "__vectorcall ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon" ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon@@8
0x18001D7F8: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x18001DC28: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180012DCC: "public: class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@QEAAPEAVCWin32@1@XZ
0x180021E50: "__vectorcall ??_R1EI@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R1EI@?0A@EA@?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x180019390: "__cdecl _chkstk" __chkstk
0x18001F038: "`string'" ??_C@_0P@DIIFGFCG@stream?5timeout?$AA@
0x18001DCF0: "__cdecl _imp_SafeArrayGetVartype" __imp_SafeArrayGetVartype
0x180016590: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x18001137C: "long __cdecl CommonUtil::UtilCoCreateInstanceImpl(void * __ptr64 * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,unsigned long,struct IUnknown * __ptr64)" ?UtilCoCreateInstanceImpl@CommonUtil@@YAJPEAPEAXAEBU_GUID@@1KPEAUIUnknown@@@Z
0x18001F490: "`string'" ??_C@_1BO@LPIIFKOK@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18001DB50: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180022ED0: "__vectorcall ??_R2CHResultException@CommonUtil" ??_R2CHResultException@CommonUtil@@8
0x180022E78: "__vectorcall ??_R3CHResultException@CommonUtil" ??_R3CHResultException@CommonUtil@@8
0x1800120C0: "protected: virtual long __cdecl MorroCommon::CWin32::RegQueryValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegQueryValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x180021B10: ??_R4CDetectionWbemCreator@SecurityClient@Microsoft@@6B@
0x18000D1E4: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEBAXXZ
0x180002450: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_System_error_category@std@@UEAAPEAXI@Z
0x18000D76C: MPTHREAT_INFO_FREE
0x1800172C0: "public: virtual void __cdecl MorroCommon::CLockedCertCheckImpl::Unlock(void) __ptr64" ?Unlock@CLockedCertCheckImpl@MorroCommon@@UEAAXXZ
0x18001F9E0: "`string'" ??_C@_1BC@MAICEHGI@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180005868: "public: int __cdecl ATL::CExpansionVector::Add(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Add@CExpansionVector@ATL@@QEAAHPEBG0@Z
0x180018AA0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18001EF38: "`string'" ??_C@_0BG@KDKHOPCO@operation?5in?5progress?$AA@
0x18001F1C0: WPP_ThisDir_CTLGUID_MpProvider
0x18001DE98: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x1800221D8: ??_R4?$CComObject@VCInfectionStateClass@@@ATL@@6BIWbemProviderInit@@@
0x18001DF50: "__cdecl _imp__errno" __imp__errno
0x18001D980: "__cdecl _imp_Process32NextW" __imp_Process32NextW
0x180027668: "__cdecl CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48" _CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48
0x18001DC08: "__cdecl _imp_HeapSize" __imp_HeapSize
0x18000F7F0: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(class CommonUtil::CHResultExceptionImpl const & __ptr64) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z
0x1800127A0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLongPathNameImpl(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetLongPathNameImpl@CWin32@MorroCommon@@MEAAKPEBGPEAGK@Z
0x18001F730: "`string'" ??_C@_19LECOIFCA@?$AA?$CF?$AAs?$AA?$DN?$AA?$EA?$AA?$AA@
0x180017574: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetAntimalwareClientFullPath(unsigned short * __ptr64 * __ptr64)" ?GetAntimalwareClientFullPath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAG@Z
0x1800127F0: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeValueImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _LUID * __ptr64) __ptr64" ?LookupPrivilegeValueImpl@CWin32@MorroCommon@@MEAAHPEBG0PEAU_LUID@@@Z
0x18001EC60: "`string'" ??_C@_0M@KGHGGJGL@bad?5address?$AA@
0x18000B068: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x180017180: "public: virtual long __cdecl MorroCommon::CLockedCertCheckImpl::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CLockedCertCheckImpl@MorroCommon@@UEAAJPEBG@Z
0x180018474: "public: __cdecl std::length_error::length_error(char const * __ptr64) __ptr64" ??0length_error@std@@QEAA@PEBD@Z
0x1800190A4: "__cdecl invalid_parameter" _invalid_parameter
0x18001DA78: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x1800274F8: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24
0x18001916F: realloc
0x1800054D0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CInfectionStateClass>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCInfectionStateClass@@@ATL@@W7EAAKXZ
0x180015000: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModulePathByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModulePathByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18001F430: "`string'" ??_C@_1CA@IDFDLMLC@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1800123E0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FindFirstFileImpl(unsigned short const * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindFirstFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGPEAU_WIN32_FIND_DATAW@@@Z
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::CreateInstanceEnum(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?CreateInstanceEnum@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18002B948: "public: static class std::locale::id std::numpunct<char>::id" ?id@?$numpunct@D@std@@2V0locale@2@A
0x18001FA10: "`string'" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x180015960: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetAppDataPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetAppDataPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001DB30: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18002B4B0: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x18000F2A0: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionItem::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionItem@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180001700: "public: void __cdecl ATL::CAtlModule::Term(void) __ptr64" ?Term@CAtlModule@ATL@@QEAAXXZ
0x18001ED70: "`string'" ??_C@_0BD@JPHBMONG@identifier?5removed?$AA@
0x18001F750: "__cdecl GUID_dc12a681_737f_11cf_884d_00aa004b2e24" _GUID_dc12a681_737f_11cf_884d_00aa004b2e24
0x18001DDB8: "__cdecl _imp_CreateDialogParamW" __imp_CreateDialogParamW
0x180022460: ??_R4CComClassFactory@ATL@@6B@
0x18001DB08: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x180014784: "private: void __cdecl ATL::CSimpleStringT<char,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x18002B920: "private: static class MorroCommon::CCertCheckFactory * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@0PEAVCCertCheckFactory@2@EA
0x18001EA88: "`string'" ??_C@_0BC@FIFLCHLO@already_connected?$AA@
0x18001F828: "`string'" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x1800077F0: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x18000AFB4: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18000ED98: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpConfigClose>::~CUniqueHandle<struct CAutoMpConfigClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpConfigClose@@@CommonUtil@@QEAA@XZ
0x180020300: "`string'" ??_C@_0N@LKFEIFBJ@MpFreeMemory?$AA@
0x1800124D0: "protected: virtual int __cdecl MorroCommon::CWin32::AllocateAndInitializeSidImpl(struct _SID_IDENTIFIER_AUTHORITY * __ptr64,unsigned char,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?AllocateAndInitializeSidImpl@CWin32@MorroCommon@@MEAAHPEAU_SID_IDENTIFIER_AUTHORITY@@EKKKKKKKKPEAPEAX@Z
0x180023018: "__vectorcall ??_R1A@?0A@EA@CLockEntireFile@MorroCommon" ??_R1A@?0A@EA@CLockEntireFile@MorroCommon@@8
0x180022A68: "__vectorcall ??_R3exception" ??_R3exception@@8
0x180022AC0: "__vectorcall ??_R2exception" ??_R2exception@@8
0x18001DAE0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180004E44: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CInfectionStateClass> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCInfectionStateClass@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutClassAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutClassAsync@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x18001FA88: "`string'" ??_C@_1DA@BOOIIGKD@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180012B30: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeNameImpl(unsigned short const * __ptr64,struct _LUID * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?LookupPrivilegeNameImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_LUID@@PEAGPEAK@Z
0x18001F638: "`string'" ??_C@_1DE@HHNBPPJB@?$AAR?$AAe?$AAc?$AAe?$AAn?$AAt?$AAl?$AAy?$AAC?$AAl?$AAe?$AAa?$AAn?$AAe?$AAd?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180002EE4: "public: __cdecl CommonUtil::AutoRef<struct IUnknown>::~AutoRef<struct IUnknown>(void) __ptr64" ??1?$AutoRef@UIUnknown@@@CommonUtil@@QEAA@XZ
0x18000939C: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned char) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGE@Z
0x18001DCA8: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x18001F340: "`string'" ??_C@_0BG@PADBLCHM@iostream?5stream?5error?$AA@
0x18001E170: "__cdecl _guard_fids_table" __guard_fids_table
0x18000BA0C: "void __cdecl Microsoft::SecurityClient::UninitializeMpClientApi(void)" ?UninitializeMpClientApi@SecurityClient@Microsoft@@YAXXZ
0x18001DF30: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x1800167A0: "private: static void __cdecl MorroCommon::CCertCheck::CloseWinVerifyTrust(struct _WINTRUST_DATA * __ptr64)" ?CloseWinVerifyTrust@CCertCheck@MorroCommon@@CAXPEAU_WINTRUST_DATA@@@Z
0x18002A4F8: "__vectorcall ??_R0?AUIWbemProviderInit@" ??_R0?AUIWbemProviderInit@@@8
0x1800202D8: "`string'" ??_C@_0BF@FOFOBIMG@MpDetectionEnumerate?$AA@
0x18000A7C8: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::~CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(void) __ptr64" ??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
0x18002B628: "class ATL::CWin32Heap ATL::g_strheap" ?g_strheap@ATL@@3VCWin32Heap@1@A
0x18001DDB0: "__cdecl _imp_CharNextW" __imp_CharNextW
0x1800206D0: WPP_029b443b08043c19b345765ef007d4c5_Traceguids
0x18001E040: msvcrt_NULL_THUNK_DATA
0x18001EDF8: "`string'" ??_C@_0N@KIIEAAIO@network?5down?$AA@
0x180012340: "protected: virtual int __cdecl MorroCommon::CWin32::Process32NextImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32NextImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x18001D6C0: "__cdecl load_config_used" _load_config_used
0x18002A148: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x180014170: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadBufferImpl(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64) __ptr64" ?ReadBufferImpl@CFileUtils@MorroCommon@@MEAAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18001DFD8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x1800226F0: "__vectorcall ??_R1A@?0A@EA@_ATL_MODULE70@ATL" ??_R1A@?0A@EA@_ATL_MODULE70@ATL@@8
0x180020210: "`string'" ??_C@_0O@JIOHGFBI@MpManagerOpen?$AA@
0x180011D70: "protected: virtual struct HICON__ * __ptr64 __cdecl MorroCommon::CWin32::LoadIconImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadIconImpl@CWin32@MorroCommon@@MEAAPEAUHICON__@@PEAUHINSTANCE__@@PEBG@Z
0x1800275C0: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x180008B30: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x18001DC90: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x180022D80: ??_R4CMpProviderEventLogger@SecurityClient@Microsoft@@6BCEventLoggerBase@MpCommonEx@@@
0x1800121B0: "protected: virtual void __cdecl MorroCommon::CWin32::SleepImpl(unsigned long) __ptr64" ?SleepImpl@CWin32@MorroCommon@@MEAAXK@Z
0x1800031AC: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x180021BD8: "__vectorcall ??_R1A@?0A@EA@CRefObject@CommonUtil" ??_R1A@?0A@EA@CRefObject@CommonUtil@@8
0x18001EB00: "`string'" ??_C@_0BE@JFNJIDNF@network_unreachable?$AA@
0x180015170: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleDirectoryImpl(void) __ptr64" ?GetCurrentModuleDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x1800203F0: "`string'" ??_C@_1FG@FPHGCJIM@?$AAM?$AAa?$AAx?$AAN?$AAu?$AAm?$AAO?$AAf?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAs?$AA_?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAt?$AAe?$AAm?$AA_@
0x18001FD78: "`string'" ??_C@_1BM@HCPJKCGD@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001DE30: "__cdecl _imp_KillTimer" __imp_KillTimer
0x1800219D0: "__vectorcall ??_R1A@?0A@EA@CDetectionWbemCreator@SecurityClient@Microsoft" ??_R1A@?0A@EA@CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x18001DE08: "__cdecl _imp_GetWindowThreadProcessId" __imp_GetWindowThreadProcessId
0x18001D860: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x180011638: MpRegisterForInitializationAtStartup
0x1800031AC: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x180004180: "public: virtual long __cdecl CInfectionStateClass::GetObjectAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?GetObjectAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x1800200B0: "`string'" ??_C@_1BE@OIICCNIH@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x180005700: "public: virtual unsigned long __cdecl ATL::CRegObject::AddRef(void) __ptr64" ?AddRef@CRegObject@ATL@@UEAAKXZ
0x18000919C: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,bool) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG_N@Z
0x18000A5B0: "public: __cdecl MorroCommon::PRODUCTVERSION::~PRODUCTVERSION(void) __ptr64" ??1PRODUCTVERSION@MorroCommon@@QEAA@XZ
0x1800279AC: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x18001F2B8: "`string'" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x180012A30: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetSystemDefaultUILanguageImpl(void) __ptr64" ?GetSystemDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x1800054E0: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAKXZ
0x180027770: "__stdcall CT??_R0PEAX" _CT??_R0PEAX@88
0x18001E808: "`string'" ??_C@_0BE@JIDOCPHM@directory?5not?5empty?$AA@
0x180020310: WPP_8ece11a1b6a13b3fe4cea85edd8f0a45_Traceguids
0x180020898: "`string'" ??_C@_0BK@NCKKICFJ@GetFileVersionInfoSizeExW?$AA@
0x18000A5E8: "public: static void __cdecl Microsoft::SecurityClient::CPropertyFormatter::SeparateDomainAndUser(unsigned short const * __ptr64 const,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SeparateDomainAndUser@CPropertyFormatter@SecurityClient@Microsoft@@SAXQEBGPEAPEAG1@Z
0x180011D40: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::CreateDialogParamImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,struct HWND__ * __ptr64,__int64 (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64),__int64) __ptr64" ?CreateDialogParamImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEAUHINSTANCE__@@PEBGPEAU3@P6A_J2I_K_J@Z4@Z
0x18001DBF8: "__cdecl _imp_VirtualLock" __imp_VirtualLock
0x180011ACC: "public: __cdecl MorroCommon::PRODUCTVERSION::operator unsigned short const * __ptr64(void)const __ptr64" ??BPRODUCTVERSION@MorroCommon@@QEBAPEBGXZ
0x1800278D0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18001DDF0: "__cdecl _imp_SetWindowTextW" __imp_SetWindowTextW
0x18002B410: "public: static bool ATL::CAtlBaseModule::m_bInitFailed" ?m_bInitFailed@CAtlBaseModule@ATL@@2_NA
0x180012570: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FreeSidImpl(void * __ptr64) __ptr64" ?FreeSidImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18001F7F0: "`string'" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x1800206E0: CLSID_WbemObjectTextSrc
0x18002AC48: ??_R0PEAX@8
0x180017E40: "protected: virtual void * __ptr64 __cdecl CommonUtil::CPtrObjectProcessHeap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPtrObjectProcessHeap@CommonUtil@@MEAAPEAXI@Z
0x180014BE0: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithApplicationDirImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithApplicationDirImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180020388: WPP_7c80c98183d13a4c76c1e9387dac9dd7_Traceguids
0x18001DF90: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18002A2C0: "__vectorcall ??_R0?AVCRefObject@CommonUtil@" ??_R0?AVCRefObject@CommonUtil@@@8
0x180018EA0: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x18002A220: "__vectorcall ??_R0?AV_Iostream_error_category@std@" ??_R0?AV_Iostream_error_category@std@@@8
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x180022FA8: ??_R4CWin32@MorroCommon@@6B@
0x18001FA78: "`string'" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x1800043C0: "public: virtual long __cdecl CInfectionStateClass::CreateInstanceEnumAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?CreateInstanceEnumAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180022320: "__vectorcall ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180012160: "protected: virtual int __cdecl MorroCommon::CWin32::LoadStringImpl(struct HINSTANCE__ * __ptr64,unsigned int,unsigned short * __ptr64,int) __ptr64" ?LoadStringImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@IPEAGH@Z
0x180022DE8: "__vectorcall ??_R1A@?0A@EA@CDetectionItem@SecurityClient@Microsoft" ??_R1A@?0A@EA@CDetectionItem@SecurityClient@Microsoft@@8
0x18002B8F8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUoryUlyquivUznwGEUhgwzucOlyq@MpProviderLib" __@@_PchSym_@00@KxulyqvxgPillgKxuznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUznUlkvizgrlmhUnkkilerwviUoryUlyquivUznwGEUhgwzucOlyq@MpProviderLib
0x18000C510: MpFreeMemory
0x18001FEA8: "`string'" ??_C@_1DA@BBCLIACF@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x18001DBF0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180012690: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenSCManagerImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenSCManagerImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEBG0K@Z
0x180005B50: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000F66C: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x1800036A0: "public: virtual long __cdecl CInfectionStateClass::PutInstanceAsync(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?PutInstanceAsync@CInfectionStateClass@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180005B50: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18002B90C: "long volatile `public: static class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4JC
0x18002B89C: "long volatile `public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4JC
0x18002B8B4: "long volatile `public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4JC
0x180020200: "`string'" ??_C@_1BA@JPNMJFGG@?$AA?$CF?$AAl?$AAs?$AA?2?$AA?$CF?$AAl?$AAs?$AA?$AA@
0x180012940: "protected: virtual int __cdecl MorroCommon::CWin32::ResetEventImpl(void * __ptr64) __ptr64" ?ResetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001DDE0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x180027560: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24
0x180018450: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x18001DB10: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x180009490: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::PutVersion(unsigned short const * __ptr64,unsigned __int64) __ptr64" ?PutVersion@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG_K@Z
0x18000684C: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x1800129F0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetPrivateProfileIntImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileIntImpl@CWin32@MorroCommon@@MEAAIPEBG0H0@Z
0x18001D9F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18002A1A0: "__vectorcall ??_R0?AVCDetectionWbemCreator@SecurityClient@Microsoft@" ??_R0?AVCDetectionWbemCreator@SecurityClient@Microsoft@@@8
0x18001D9C0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800024F0: "public: virtual char const * __ptr64 __cdecl std::_Generic_error_category::name(void)const __ptr64" ?name@_Generic_error_category@std@@UEBAPEBDXZ
0x18001E9E8: "`string'" ??_C@_0BB@JOANDNCK@connection_reset?$AA@
0x18001D4F0: ?_entries@?1??_GetEntries@CInfectionStateClass@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x1800079A0: "public: static long __cdecl CMpProviderClass::UpdateRegistry(int)" ?UpdateRegistry@CMpProviderClass@@SAJH@Z
0x180022030: "__vectorcall ??_R1A@?0A@EA@IWbemProviderInit" ??_R1A@?0A@EA@IWbemProviderInit@@8
0x180020620: "`string'" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001F358: "`string'" ??_C@_06FHFOAHML@system?$AA@
0x18002A550: "__vectorcall ??_R0?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@" ??_R0?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@8
0x18001C9A0: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x180012C60: "protected: virtual unsigned short * __ptr64 __cdecl MorroCommon::CWin32::PathFindFileNameImpl(unsigned short const * __ptr64) __ptr64" ?PathFindFileNameImpl@CWin32@MorroCommon@@MEAAPEAGPEBG@Z
0x18000F6E0: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(long) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@J@Z
0x18002B452: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32> MorroCommon::CWin32::m_instance" ?m_instance@CWin32@MorroCommon@@0V?$TSingletonWithProxy@VCWin32@MorroCommon@@@2@A
0x18002A000: "struct ATL::_ATL_OBJMAP_ENTRY30 __objMap_CInfectionStateClass" ?__objMap_CInfectionStateClass@@3U_ATL_OBJMAP_ENTRY30@ATL@@A
0x18000F88C: "public: static long __cdecl CommonUtil::CSprintfAllocWideCharPolicy::StringFormat(unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?StringFormat@CSprintfAllocWideCharPolicy@CommonUtil@@SAJPEAG_KPEA_KPEBGPEAD@Z
0x18001DFD0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18001E938: "`string'" ??_C@_0P@LNDJPBFK@address_in_use?$AA@
0x18001CDE8: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180002450: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Generic_error_category@std@@UEAAPEAXI@Z
0x180008D34: WPP_SF_SDd
0x180008D34: WPP_SF_Sdd
0x18001D800: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x180021A20: "__vectorcall ??_R1A@?0A@EA@_Iostream_error_category@std" ??_R1A@?0A@EA@_Iostream_error_category@std@@8
0x18000D1E4: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x18000910C: WPP_SF_Sld
0x180008EE0: WPP_SF_SSd
0x1800079B0: "public: virtual __cdecl CMpProviderClass::~CMpProviderClass(void) __ptr64" ??1CMpProviderClass@@UEAA@XZ
0x18000A4AC: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CVersionFormatter::ToString(void)const __ptr64" ?ToString@CVersionFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x18001D978: "__cdecl _imp_Process32FirstW" __imp_Process32FirstW
0x180015ED0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetSpecialFolderPathImpl(int,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetSpecialFolderPathImpl@CPathUtils@MorroCommon@@MEAAJHAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001D9E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180018E30: "__cdecl purecall" _purecall
0x18001D918: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18001DB48: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x18001D868: "__cdecl _imp_ControlService" __imp_ControlService
0x180018A90: "__cdecl _std_terminate" __std_terminate
0x18001FE00: "`string'" ??_C@_1DA@MMIDNKGH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAE?$AAn?$AAd?$AA?$AA@
0x180012590: "protected: virtual int __cdecl MorroCommon::CWin32::StringFromGUID2Impl(struct _GUID const & __ptr64,unsigned short * __ptr64,int) __ptr64" ?StringFromGUID2Impl@CWin32@MorroCommon@@MEAAHAEBU_GUID@@PEAGH@Z
0x18002B900: "private: static class MorroCommon::CWin32 * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@0PEAVCWin32@2@EA
0x18001D8D0: "__cdecl _imp_GetUserNameW" __imp_GetUserNameW
0x180022C68: ??_R4CMpClientApi@SecurityClient@Microsoft@@6B@
0x18001FA38: "`string'" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180003390: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18001DB60: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180016590: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x18000D40C: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18001DB98: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18001EE78: "`string'" ??_C@_0L@EDOLMPAK@no?5message?$AA@
0x18001DF40: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180002F04: "public: __cdecl CommonUtil::CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy>::~CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy>(void) __ptr64" ??1?$CUniqueHandle@UCAutoSafeArrayReleaseStartegy@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180012400: "protected: virtual int __cdecl MorroCommon::CWin32::FindCloseImpl(void * __ptr64) __ptr64" ?FindCloseImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18001F600: "`string'" ??_C@_1DG@HJJHLIEK@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAl?$AAy?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180004D10: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectCached<class ATL::CComClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000A2A0: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CDateTimeFormatter::ToCimDateTime(void)const __ptr64" ?ToCimDateTime@CDateTimeFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x180002450: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_System_error_category@std@@UEAAPEAXI@Z
0x18001EC88: "`string'" ??_C@_0M@PMMIEFCP@bad?5message?$AA@
0x18001F1E0: "__cdecl GUID_0002e012_0000_0000_c000_000000000046" _GUID_0002e012_0000_0000_c000_000000000046
0x18001F400: "`string'" ??_C@_1BG@EDPDMIGB@?$AAS?$AAe?$AAv?$AAe?$AAr?$AAi?$AAt?$AAy?$AAI?$AAD?$AA?$AA@
0x180012AF0: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsRelativeImpl(unsigned short const * __ptr64) __ptr64" ?PathIsRelativeImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180011900: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Reallocate(struct ATL::CStringData * __ptr64,int,int) __ptr64" ?Reallocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@PEAU32@HH@Z
0x180010048: "long __cdecl CommonUtil::UtilRawGetProcAddress(__int64 (__cdecl* * __ptr64)(void),struct HINSTANCE__ * __ptr64,char const * __ptr64,bool)" ?UtilRawGetProcAddress@CommonUtil@@YAJPEAP6A_JXZPEAUHINSTANCE__@@PEBD_N@Z
0x180017E80: "public: virtual void * __ptr64 __cdecl CommonUtil::CPredefinedMpHeapsHolder::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPredefinedMpHeapsHolder@CommonUtil@@UEAAPEAXI@Z
0x1800184A4: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x1800033E0: "public: virtual void * __ptr64 __cdecl ATL::CInstanceProviderHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_ECInstanceProviderHelper@ATL@@UEAAPEAXI@Z
0x180023268: "__vectorcall ??_R1A@?0A@EA@CPredefinedMpHeapsHolder@CommonUtil" ??_R1A@?0A@EA@CPredefinedMpHeapsHolder@CommonUtil@@8
0x18002A960: "__vectorcall ??_R0?AVCMpProviderClass@" ??_R0?AVCMpProviderClass@@@8
0x18001D820: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180014440: "public: __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::~vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >(void) __ptr64" ??1?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAA@XZ
0x18001F0B8: "`string'" ??_C@_0BA@KGKGOOJA@value?5too?5large?$AA@
0x18001E7C8: "`string'" ??_C@_0BC@EJHOMAAK@filename?5too?5long?$AA@
0x18001EB78: "`string'" ??_C@_0BH@KAPBAIJF@protocol_not_supported?$AA@
0x180002430: "public: __cdecl CommonUtil::CAutoBSTR::~CAutoBSTR(void) __ptr64" ??1CAutoBSTR@CommonUtil@@QEAA@XZ
0x18002A498: "__vectorcall ??_R0?AVCProviderHelper@ATL@" ??_R0?AVCProviderHelper@ATL@@@8
0x18002B453: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CProductUtils> MorroCommon::CProductUtils::m_instance" ?m_instance@CProductUtils@MorroCommon@@0V?$TSingletonWithProxy@VCProductUtils@MorroCommon@@@2@A
0x1800228D0: "__vectorcall ??_R2CMpProviderClass" ??_R2CMpProviderClass@@8
0x180022A00: "__vectorcall ??_R3CMpProviderClass" ??_R3CMpProviderClass@@8
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x1800219F8: "__vectorcall ??_R1A@?0A@EA@_System_error_category@std" ??_R1A@?0A@EA@_System_error_category@std@@8
0x18000E550: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpClose>::~CUniqueHandle<struct CAutoMpClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpClose@@@CommonUtil@@QEAA@XZ
0x18001EA00: "`string'" ??_C@_0BN@JLJNLKLK@destination_address_required?$AA@
0x18001DAB0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180002880: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionWbemCreator@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18001D4A8: "const CommonUtil::CPredefinedMpHeapsHolder::`vftable'" ??_7CPredefinedMpHeapsHolder@CommonUtil@@6B@
0x18000D1E4: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEBAXXZ
0x18001EDD8: "`string'" ??_C@_0P@FLLDBIDK@is?5a?5directory?$AA@
0x18001DA50: "__cdecl _imp_VerifyVersionInfoW" __imp_VerifyVersionInfoW
0x180005B50: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x180022780: "__vectorcall ??_R3CAtlModule@ATL" ??_R3CAtlModule@ATL@@8
0x18002B408: "long (__cdecl* __ptr64 ATL::_pPerfUnRegFunc)(void)" ?_pPerfUnRegFunc@ATL@@3P6AJXZEA
0x180022768: "__vectorcall ??_R2CAtlModule@ATL" ??_R2CAtlModule@ATL@@8
0x180022AF8: "__vectorcall ??_R3bad_alloc@std" ??_R3bad_alloc@std@@8
0x180022A80: "__vectorcall ??_R2bad_alloc@std" ??_R2bad_alloc@std@@8
0x180003094: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18001DDD8: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x18001EE18: "`string'" ??_C@_0BE@IFNCKGE@network?5unreachable?$AA@
0x180012830: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustTokenPrivilegesImpl(void * __ptr64,int,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long * __ptr64) __ptr64" ?AdjustTokenPrivilegesImpl@CWin32@MorroCommon@@MEAAHPEAXHPEAU_TOKEN_PRIVILEGES@@K1PEAK@Z
0x18001D818: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x18001EAA0: "`string'" ??_C@_0BE@GJJJJDDA@too_many_files_open?$AA@
0x18000F9F8: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrNewSprintfW(unsigned short const * __ptr64,...)" ?TrNewSprintfW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBGZZ
0x180010DC0: "int __cdecl MpUtilsExports::UtilRegIsValidValueImpl(unsigned long,unsigned __int64,void const * __ptr64)" ?UtilRegIsValidValueImpl@MpUtilsExports@@YAHK_KPEBX@Z
0x18001E080: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x180022008: "__vectorcall ??_R1A@?0A@EA@IWbemInstProviderImpl@ATL" ??_R1A@?0A@EA@IWbemInstProviderImpl@ATL@@8
0x18000B740: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpClientApi::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpClientApi@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180007770: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x1800207A8: "`string'" ??_C@_1BK@JDCFPJCO@?$AAM?$AAp?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001DCF8: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x18000E524: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpDetectionInfoFree>::~CUniqueHandle<struct CAutoMpDetectionInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpDetectionInfoFree@@@CommonUtil@@QEAA@XZ
0x180011F40: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryExImpl(unsigned short const * __ptr64,void * __ptr64,unsigned long) __ptr64" ?LoadLibraryExImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBGPEAXK@Z
0x180003350: "public: __cdecl ATL::CComSafeArray<struct IUnknown * __ptr64,13>::~CComSafeArray<struct IUnknown * __ptr64,13>(void) __ptr64" ??1?$CComSafeArray@PEAUIUnknown@@$0N@@ATL@@QEAA@XZ
0x180007750: "public: virtual long __cdecl ATL::CAtlModuleT<class CMpProviderModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCMpProviderModule@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x180012430: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetCurrentProcessImpl(void) __ptr64" ?GetCurrentProcessImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x18001EBD0: "`string'" ??_C@_0BN@LKKBCCDB@address?5family?5not?5supported?$AA@
0x18001DF98: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800130A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::CreateFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CreateFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180022980: "__vectorcall ??_R1A@?0A@EA@CMpProviderClass" ??_R1A@?0A@EA@CMpProviderClass@@8
0x18001DDD0: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x180002EBC: "public: __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::~CWbemClassObjectHelper(void) __ptr64" ??1CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAA@XZ
0x18001EBF0: "`string'" ??_C@_0P@LDMLAFHI@address?5in?5use?$AA@
0x180012B50: "protected: virtual int __cdecl MorroCommon::CWin32::CreateEnvironmentBlockImpl(void * __ptr64 * __ptr64,void * __ptr64,int) __ptr64" ?CreateEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAPEAXPEAXH@Z
0x18001E058: ntdll_NULL_THUNK_DATA
0x18001DFB0: "__cdecl _imp_memcpy" __imp_memcpy
0x18000DABC: "private: void __cdecl Microsoft::SecurityClient::CInfectionState::EnumerateDetections(void) __ptr64" ?EnumerateDetections@CInfectionState@SecurityClient@Microsoft@@AEAAXXZ
0x18002A748: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18001EA30: "`string'" ??_C@_0BB@KKNHPPIN@host_unreachable?$AA@
0x180020768: "`string'" ??_C@_1M@EJDCAMGD@?$AA?$CK?$AA?4?$AAc?$AAo?$AAm?$AA?$AA@
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::PutInstance(struct IWbemClassObject * __ptr64,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?PutInstance@IWbemInstProviderImpl@ATL@@UEAAJPEAUIWbemClassObject@@JPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x1800191FC: "__cdecl Init_thread_footer" _Init_thread_footer
0x180027540: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x18001FFE0: IID_IWbemPath
0x180022718: "__vectorcall ??_R2_ATL_MODULE70@ATL" ??_R2_ATL_MODULE70@ATL@@8
0x180022728: "__vectorcall ??_R3_ATL_MODULE70@ATL" ??_R3_ATL_MODULE70@ATL@@8
0x1800028D8: "public: class CommonUtil::AutoRef<struct IUnknown> __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::Create(class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?Create@CDetectionWbemCreator@SecurityClient@Microsoft@@QEBA?AV?$AutoRef@UIUnknown@@@CommonUtil@@PEBVCDetectionItem@23@@Z
0x1800232D0: "__vectorcall ??_R1A@?0A@EA@CPtrObject@CommonUtil" ??_R1A@?0A@EA@CPtrObject@CommonUtil@@8
0x180009980: WPP_SF_ddd
0x180012490: "protected: virtual unsigned long * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityImpl(void * __ptr64,unsigned long) __ptr64" ?GetSidSubAuthorityImpl@CWin32@MorroCommon@@MEAAPEAKPEAXK@Z
0x18001CF90: "const ATL::CAtlStringMgr::`vftable'" ??_7CAtlStringMgr@ATL@@6B@
0x18002AD78: "__vectorcall ??_R0?AVCPtrObjectProcessHeap@CommonUtil@" ??_R0?AVCPtrObjectProcessHeap@CommonUtil@@@8
0x18001DE00: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x180020450: "`string'" ??_C@_1FG@OIGKGPLM@?$AAM?$AAa?$AAx?$AAS?$AAi?$AAz?$AAe?$AAO?$AAf?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA_?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAt?$AAe?$AAm?$AA_@
0x18001CE00: "const MorroCommon::CFileUtils::`vftable'" ??_7CFileUtils@MorroCommon@@6B@
0x18001EF50: "`string'" ??_C@_0BI@OHIEJAAB@operation?5not?5permitted?$AA@
0x18000E86C: "public: __cdecl Microsoft::SecurityClient::CMpStatus::CMpStatus(void) __ptr64" ??0CMpStatus@SecurityClient@Microsoft@@QEAA@XZ
0x18001F6C0: "`string'" ??_C@_1BM@HBDHPLIM@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x180020758: "`string'" ??_C@_1M@FEDKBPCI@?$AA?$CK?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180012470: "protected: virtual int __cdecl MorroCommon::CWin32::HeapFreeImpl(void * __ptr64,unsigned long,void * __ptr64) __ptr64" ?HeapFreeImpl@CWin32@MorroCommon@@MEAAHPEAXK0@Z
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::DeleteInstance(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64) __ptr64" ?DeleteInstance@IWbemInstProviderImpl@ATL@@UEAAJQEAGJPEAUIWbemContext@@PEAPEAUIWbemCallResult@@@Z
0x180005220: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CInfectionStateClass>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCInfectionStateClass@@@ATL@@UEAAPEAXI@Z
0x18001D8B0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18000529C: "public: static class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct Microsoft::SecurityClient::CAutoSafeArrayReleaseStartegy> > __cdecl Microsoft::SecurityClient::CSafeArrayFactory::Convert<class CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem>,class CConversionStrategyDetectionItem>(class CommonUtil::CStdRefVector<class Microsoft::SecurityClient::CDetectionItem> const & __ptr64,class CConversionStrategyDetectionItem)" ??$Convert@V?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@VCConversionStrategyDetectionItem@@@CSafeArrayFactory@SecurityClient@Microsoft@@SA?AV?$CReturnHandle@V?$CUniqueHandle@UCAutoSafeArrayReleaseStartegy@SecurityClient@Microsoft@@@CommonUtil@@@CommonUtil@@AEBV?$CStdRefVector@VCDetectionItem@SecurityClient@Microsoft@@@4@VCConversionStrategyDetectionItem@@@Z
0x18001FB48: "`string'" ??_C@_1CO@IDCJKFLL@?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001D828: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18000FA4C: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CNewSprintfPolicy<unsigned short>,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@U?$CNewSprintfPolicy@G@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x18001D8E8: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180001C94: "public: __cdecl ATL::CRegKey::~CRegKey(void) __ptr64" ??1CRegKey@ATL@@QEAA@XZ
0x18001EED8: "`string'" ??_C@_0BA@ENLPPKBN@no?5such?5process?$AA@
0x18002A728: "__vectorcall ??_R0?AUIUnknown@" ??_R0?AUIUnknown@@@8
0x1800026A0: WPP_SF_P
0x18001E038: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18001D930: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18002AE28: "__cdecl _security_cookie" __security_cookie
0x1800208B8: "`string'" ??_C@_0BG@GEGOAKFF@GetFileVersionInfoExW?$AA@
0x1800050D0: "public: virtual long __cdecl ATL::CComObject<class CMpProviderClass>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCMpProviderClass@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001D8C0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18001EFA8: "`string'" ??_C@_0P@FNPOCJBE@protocol?5error?$AA@
0x18002B8F0: ?$TSS0@?1??Instance@CWPPTrace@MorroCommon@@SAAEAV23@XZ@4HA
0x1800054F0: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CMpProviderClass>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCMpProviderClass@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180019390: "__cdecl alloca_probe" _alloca_probe
0x1800164A8: "long __cdecl MorroCommon::HrCStringFormat(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,...)" ?HrCStringFormat@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGZZ
0x18001DBE0: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x18000FDF0: "long __cdecl CommonUtil::UtilLoadLibraryEx(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilLoadLibraryEx@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBGK@Z
0x18001F020: "`string'" ??_C@_0BG@MPLKFPAE@state?5not?5recoverable?$AA@
0x180011B80: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64,int,struct ATL::IAtlStringMgr * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBGHPEAUIAtlStringMgr@1@@Z
0x18001D848: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x1800017C8: WPP_SF__guid__guid_
0x18001DE28: "__cdecl _imp_SetTimer" __imp_SetTimer
0x180012020: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateMutexImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?CreateMutexImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBG@Z
0x180022F90: "__vectorcall ??_R3CWin32@MorroCommon" ??_R3CWin32@MorroCommon@@8
0x180022F80: "__vectorcall ??_R2CWin32@MorroCommon" ??_R2CWin32@MorroCommon@@8
0x18001DBC8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18001DEC0: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x18001DD30: "__cdecl _imp_SafeArrayGetUBound" __imp_SafeArrayGetUBound
0x18001DB00: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001DEF8: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x180012760: "protected: virtual int __cdecl MorroCommon::CWin32::ControlServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned long,struct _SERVICE_STATUS * __ptr64) __ptr64" ?ControlServiceImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KPEAU_SERVICE_STATUS@@@Z
0x180023058: "__vectorcall ??_R3CLockEntireFile@MorroCommon" ??_R3CLockEntireFile@MorroCommon@@8
0x180022FE0: "__vectorcall ??_R2CLockEntireFile@MorroCommon" ??_R2CLockEntireFile@MorroCommon@@8
0x18001FAC8: "`string'" ??_C@_1BG@EMMFIEBG@?$AAR?$AAt?$AAp?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001DBD0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18001E8A0: "`string'" ??_C@_0BC@ENOOLCNF@not?5enough?5memory?$AA@
0x18001EA60: "`string'" ??_C@_0M@EGEKIIMP@interrupted?$AA@
0x180014CA0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEAGK@Z
0x18001EE40: "`string'" ??_C@_0BB@IEPBLJHK@no?5child?5process?$AA@
0x1800129B0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetPrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileStringImpl@CWin32@MorroCommon@@MEAAKPEBG00PEAGK0@Z
0x18001DCE8: "__cdecl _imp_VariantInit" __imp_VariantInit
0x180004490: "private: class CommonUtil::AutoRef<struct IWbemClassObject> __cdecl CInfectionStateClass::GetInstanceByPath(unsigned short * __ptr64 const) __ptr64" ?GetInstanceByPath@CInfectionStateClass@@AEAA?AV?$AutoRef@UIWbemClassObject@@@CommonUtil@@QEAG@Z
0x18001E160: "__cdecl _xl_a" __xl_a
0x180005BA0: "public: __cdecl ATL::CRegParser::CParseBuffer::~CParseBuffer(void) __ptr64" ??1CParseBuffer@CRegParser@ATL@@QEAA@XZ
0x180027690: "__cdecl CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24" _CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24
0x18001DB90: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18001F6A0: "`string'" ??_C@_1CA@MKNCEAJH@?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x180010258: "long __cdecl CommonUtil::UtilIsFileExists(unsigned short const * __ptr64)" ?UtilIsFileExists@CommonUtil@@YAJPEBG@Z
0x180012050: "protected: virtual int __cdecl MorroCommon::CWin32::ReleaseMutexImpl(void * __ptr64) __ptr64" ?ReleaseMutexImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180001C90: "public: __cdecl ATL::CComBSTR::operator unsigned short * __ptr64(void)const __ptr64" ??BCComBSTR@ATL@@QEBAPEAGXZ
0x180027738: "__cdecl TI2PEAVEHresultException@MorroCommon@@" _TI2PEAVEHresultException@MorroCommon@@
0x18001F058: "`string'" ??_C@_09KJPPMAOI@timed?5out?$AA@
0x1800123C0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LockResourceImpl(void * __ptr64) __ptr64" ?LockResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18001EE08: "`string'" ??_C@_0O@FNPDBHEE@network?5reset?$AA@
0x18001DCD8: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1800161B0: "protected: virtual bool __cdecl MorroCommon::CPathUtils::IsPathExecutableImpl(unsigned short const * __ptr64) __ptr64" ?IsPathExecutableImpl@CPathUtils@MorroCommon@@MEAA_NPEBG@Z
0x180012F10: "public: static long __cdecl MorroCommon::CFileUtils::ReadBuffer(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64)" ?ReadBuffer@CFileUtils@MorroCommon@@SAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18001D8F8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000AF24: "protected: static void __cdecl ATL::CSimpleStringT<unsigned short,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@G$0A@@ATL@@KAXXZ
0x18001F3B8: "`string'" ??_C@_1BI@BHLPCECP@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$AA@
0x18000D6A0: "class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > & __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18002AA10: "__vectorcall ??_R0?AVCMpClientApi@SecurityClient@Microsoft@" ??_R0?AVCMpClientApi@SecurityClient@Microsoft@@@8
0x18002B9F0: "__cdecl _onexitbegin" __onexitbegin
0x1800230C0: "__vectorcall ??_R2CLockedCertCheckImpl@MorroCommon" ??_R2CLockedCertCheckImpl@MorroCommon@@8
0x18001EC30: "`string'" ??_C@_0BH@CAKOHOMI@argument?5list?5too?5long?$AA@
0x18001F8C0: "`string'" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180023138: "__vectorcall ??_R3CLockedCertCheckImpl@MorroCommon" ??_R3CLockedCertCheckImpl@MorroCommon@@8
0x18000F320: "public: __cdecl CommonUtil::CStdPtrVector<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CStdPtrVector<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CStdPtrVector@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180022C40: "__vectorcall ??_R1A@?0A@EA@CMpClientApi@SecurityClient@Microsoft" ??_R1A@?0A@EA@CMpClientApi@SecurityClient@Microsoft@@8
0x1800122A0: "protected: virtual unsigned char * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityCountImpl(void * __ptr64) __ptr64" ?GetSidSubAuthorityCountImpl@CWin32@MorroCommon@@MEAAPEAEPEAX@Z
0x1800150F4: "public: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::CombinePath(unsigned short const * __ptr64 const,unsigned short const * __ptr64 const)" ?CombinePath@CPathUtils@MorroCommon@@SA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBG0@Z
0x180002450: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Iostream_error_category@std@@UEAAPEAXI@Z
0x180017140: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x18001DD70: "__cdecl _imp_PathFileExistsW" __imp_PathFileExistsW
0x18001F7A0: "`string'" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x18001D458: "const MorroCommon::CLockedCertCheckImpl::`vftable'" ??_7CLockedCertCheckImpl@MorroCommon@@6B@
0x18001DB18: "__cdecl _imp_SwitchToThread" __imp_SwitchToThread
0x180005290: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > >::deallocate(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@_K@Z
0x180022B10: "__vectorcall ??_R1A@?0A@EA@exception" ??_R1A@?0A@EA@exception@@8
0x1800119C0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAtlStringMgr@ATL@@UEAAPEAXI@Z
0x180017450: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetClientInstallPath(unsigned short * __ptr64 * __ptr64)" ?GetClientInstallPath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAG@Z
0x18000D354: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Swap_bx(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64) __ptr64" ?_Swap_bx@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAXAEAV12@@Z
0x180012F70: "protected: virtual long __cdecl MorroCommon::CFileUtils::CopyFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,bool) __ptr64" ?CopyFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@0_N@Z
0x1800098EC: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x180022800: "__vectorcall ??_R3?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R3?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x180022620: "__vectorcall ??_R2?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL" ??_R2?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@8
0x18001F960: "`string'" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x180012090: "protected: virtual long __cdecl MorroCommon::CWin32::RegOpenKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?RegOpenKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEAPEAU3@@Z
0x18001DF18: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18001CD08: "const ATL::CComObject<class CMpProviderClass>::`vftable'{for `IWbemServices'}" ??_7?$CComObject@VCMpProviderClass@@@ATL@@6BIWbemServices@@@
0x18001DFE8: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x1800179B8: WPP_SF_qd
0x18001EF08: "`string'" ??_C@_0N@LGAPMMPI@not?5a?5stream?$AA@
0x18002B612: "struct CommonUtil::CCommonThrowHR CommonUtil::tHR" ?tHR@CommonUtil@@3UCCommonThrowHR@1@A
0x18001D9D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18001DAF8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180023098: ??_R4CLockEntireFile@MorroCommon@@6B@
0x18000EDB0: "private: void __cdecl Microsoft::SecurityClient::CInfectionStateConfig::Initialize(void) __ptr64" ?Initialize@CInfectionStateConfig@SecurityClient@Microsoft@@AEAAXXZ
0x1800073BC: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18001DE60: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x1800026D4: WPP_SF_qq
0x180020670: WPP_b022d1e254683f9de6cc38f73b4c2f97_Traceguids
0x18000B1B4: WPP_SF_qS
0x18000E6B8: MpConfigGetValueDword
0x18001F9B0: "`string'" ??_C@_1BC@NKMMNMGL@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180017B70: "protected: void __cdecl MpCommonEx::CEventLoggerBase::LogEvent(enum MpCommonEx::EventSeverity,unsigned long,class CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > const & __ptr64,unsigned short) __ptr64" ?LogEvent@CEventLoggerBase@MpCommonEx@@IEAAXW4EventSeverity@2@KAEBV?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@G@Z
0x18000AE00: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::LoadStringW(struct HINSTANCE__ * __ptr64,unsigned int) __ptr64" ?LoadStringW@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHPEAUHINSTANCE__@@I@Z
0x180019268: "__cdecl Init_thread_header" _Init_thread_header
0x1800278BC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180023240: "__vectorcall ??_R1A@?0A@EA@CPtrObjectProcessHeap@CommonUtil" ??_R1A@?0A@EA@CPtrObjectProcessHeap@CommonUtil@@8
0x18001E7B8: "`string'" ??_C@_0P@FDINDDOK@no?5such?5device?$AA@
0x180009538: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,struct _SYSTEMTIME const & __ptr64) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBGAEBU_SYSTEMTIME@@@Z
0x180002EBC: "public: __cdecl ATL::CComPtr<struct IWbemClassObject>::~CComPtr<struct IWbemClassObject>(void) __ptr64" ??1?$CComPtr@UIWbemClassObject@@@ATL@@QEAA@XZ
0x18001D910: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180011A80: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32Heap@ATL@@UEAAPEAXI@Z
0x18001F1A0: CLSID_StdGlobalInterfaceTable
0x180022F58: "__vectorcall ??_R1A@?0A@EA@CWin32@MorroCommon" ??_R1A@?0A@EA@CWin32@MorroCommon@@8
0x18002A9B0: "__vectorcall ??_R0?AVCPathUtils@MorroCommon@" ??_R0?AVCPathUtils@MorroCommon@@@8
0x18000C230: MpConfigClose
0x180018FB0: "__cdecl _security_init_cookie" __security_init_cookie
0x18000C0B8: MpConfigOpen
0x180008C54: "public: struct HINSTANCE__ * __ptr64 __cdecl ATL::CAtlBaseModule::GetHInstanceAt(int) __ptr64" ?GetHInstanceAt@CAtlBaseModule@ATL@@QEAAPEAUHINSTANCE__@@H@Z
0x1800026A0: WPP_SF_q
0x180004610: "public: virtual unsigned long __cdecl CDetectionItemSizeCalculator::GetSize(class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?GetSize@CDetectionItemSizeCalculator@@UEBAKPEBVCDetectionItem@SecurityClient@Microsoft@@@Z
0x18000BDDC: MpManagerVersionQuery
0x18001F4C0: "`string'" ??_C@_19PIJILKAI@?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x180020548: WPP_730953bd1c66335f4d9d2052277eb108_Traceguids
0x18001DD20: "__cdecl _imp_SafeArrayUnlock" __imp_SafeArrayUnlock
0x18001DAA0: "__cdecl _imp_GetUserDefaultUILanguage" __imp_GetUserDefaultUILanguage
0x180014C10: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@AEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18001F230: "`string'" ??_C@_1DA@BIHALFED@?$AA?2?$AAI?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180022AD0: ??_R4bad_alloc@std@@6B@
0x180011F30: "protected: virtual int __cdecl MorroCommon::CWin32::ShowWindowImpl(struct HWND__ * __ptr64,int) __ptr64" ?ShowWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@H@Z
0x18002B640: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_logLocation" ?m_logLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x180012810: "protected: virtual int __cdecl MorroCommon::CWin32::PrivilegeCheckImpl(void * __ptr64,struct _PRIVILEGE_SET * __ptr64,int * __ptr64) __ptr64" ?PrivilegeCheckImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_PRIVILEGE_SET@@PEAH@Z
0x18001DD28: "__cdecl _imp_SafeArrayGetLBound" __imp_SafeArrayGetLBound
0x18001DEB8: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x18001E838: "`string'" ??_C@_0BD@IJDJKDEA@no?5space?5on?5device?$AA@
0x180017E80: "public: virtual void * __ptr64 __cdecl CommonUtil::CPredefinedMpHeapsHolder::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPredefinedMpHeapsHolder@CommonUtil@@UEAAPEAXI@Z
0x180004C9C: "public: __cdecl CommonUtil::AutoRef<class Microsoft::SecurityClient::CMpProviderEventLogger>::~AutoRef<class Microsoft::SecurityClient::CMpProviderEventLogger>(void) __ptr64" ??1?$AutoRef@VCMpProviderEventLogger@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180011F90: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessImpl(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessImpl@CWin32@MorroCommon@@MEAAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x1800033E0: "public: virtual void * __ptr64 __cdecl ATL::CInstanceProviderHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCInstanceProviderHelper@ATL@@UEAAPEAXI@Z
0x18000C748: "private: __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::CMpProviderEventLogger(void) __ptr64" ??0CMpProviderEventLogger@SecurityClient@Microsoft@@AEAA@XZ
0x1800099E4: "void __cdecl Microsoft::SecurityClient::TraceUserName(enum Microsoft::SecurityClient::ClientImpersonationSteps)" ?TraceUserName@SecurityClient@Microsoft@@YAXW4ClientImpersonationSteps@12@@Z
0x180017F28: "long __cdecl CommonUtil::CreateNewPtrObject<class CommonUtil::CPredefinedMpHeapsHolder>(class CommonUtil::CPredefinedMpHeapsHolder * __ptr64 * __ptr64)" ??$CreateNewPtrObject@VCPredefinedMpHeapsHolder@CommonUtil@@@CommonUtil@@YAJPEAPEAVCPredefinedMpHeapsHolder@0@@Z
0x1800278A8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18001E010: "__cdecl _imp_memmove" __imp_memmove
0x18001F0C8: "`string'" ??_C@_0BE@MIEJDDNH@wrong?5protocol?5type?$AA@
0x180023338: ??_R4CPtrObjectProcessHeap@CommonUtil@@6B@
0x18001C9A0: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x180018328: MpUtilsDllMainInitialize
0x180013E98: "private: static long __cdecl MorroCommon::CFileUtils::LoadResourceInner(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?LoadResourceInner@CFileUtils@MorroCommon@@CAJIPEBG0PEAPEAEPEA_K@Z
0x1800184B0: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x18001CC88: "const ATL::CInstanceProviderHelper::`vftable'" ??_7CInstanceProviderHelper@ATL@@6B@
0x180021F40: "__vectorcall ??_R1A@?0A@EA@CInstanceProviderHelper@ATL" ??_R1A@?0A@EA@CInstanceProviderHelper@ATL@@8
0x180002880: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionWbemCreator@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x1800226A0: "__vectorcall ??_R1A@?0A@EA@?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R1A@?0A@EA@?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x1800227E8: "__vectorcall ??_R3?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R3?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x1800225F0: "__vectorcall ??_R2?$CAtlDllModuleT@VCMpProviderModule@@@ATL" ??_R2?$CAtlDllModuleT@VCMpProviderModule@@@ATL@@8
0x180012B70: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessAsUserImpl(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessAsUserImpl@CWin32@MorroCommon@@MEAAHPEAXPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180022930: "__vectorcall ??_R1A@?0A@EA@?$CComObject@VCMpProviderClass@@@ATL" ??_R1A@?0A@EA@?$CComObject@VCMpProviderClass@@@ATL@@8
0x18001D620: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x18001E088: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18001F330: "`string'" ??_C@_08LLGCOLLL@iostream?$AA@
0x18000C64C: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>::~CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>(void) __ptr64" ??1?$CUniqueHandle@UCAutoFreeLibrary@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18001F9C8: "`string'" ??_C@_1BE@EKPAFMCP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x1800200C8: "__cdecl GUID_bfbf883a_cad7_11d3_a11b_00105a1f515a" _GUID_bfbf883a_cad7_11d3_a11b_00105a1f515a
0x180011D90: "protected: virtual __int64 __cdecl MorroCommon::CWin32::SendMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?SendMessageImpl@CWin32@MorroCommon@@MEAA_JPEAUHWND__@@I_K_J@Z
0x18000E674: "class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> >,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> >(class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> > > & __ptr64,class CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem> * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@PEAV12@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x180002480: "public: virtual class std::error_condition __cdecl std::error_category::default_error_condition(int)const __ptr64" ?default_error_condition@error_category@std@@UEBA?AVerror_condition@2@H@Z
0x18001DE40: "__cdecl _imp_PostThreadMessageW" __imp_PostThreadMessageW
0x18001F418: "`string'" ??_C@_1BG@KBAPIFFM@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAI?$AAD?$AA?$AA@
0x18000B740: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpClientApi::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpClientApi@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180016ED0: "public: __cdecl MorroCommon::CAutoLockedCertCheck::~CAutoLockedCertCheck(void) __ptr64" ??1CAutoLockedCertCheck@MorroCommon@@QEAA@XZ
0x18001DFF0: "__cdecl _imp_malloc" __imp_malloc
0x18001E008: "__cdecl _imp__purecall" __imp__purecall
0x18001D940: ADVAPI32_NULL_THUNK_DATA
0x18000AF24: "protected: static void __cdecl ATL::CSimpleStringT<char,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@D$0A@@ATL@@KAXXZ
0x1800122B0: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::FindWindowImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindWindowImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEBG0@Z
0x180022920: "__vectorcall ??_R2?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R2?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x1800229E8: "__vectorcall ??_R3?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL" ??_R3?$CComCoClass@VCMpProviderClass@@$1?CLSID_MpProviderClass@@3U_GUID@@B@ATL@@8
0x18001DB58: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18001DCA0: "__cdecl _imp_GetLocaleInfoW" __imp_GetLocaleInfoW
0x180005290: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::deallocate(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_K@Z
0x1800036A0: "public: virtual long __cdecl CInfectionStateClass::DeleteInstanceAsync(unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?DeleteInstanceAsync@CInfectionStateClass@@UEAAJQEAGJPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180012780: "protected: virtual int __cdecl MorroCommon::CWin32::QueryServiceStatusImpl(struct SC_HANDLE__ * __ptr64,struct _SERVICE_STATUS * __ptr64) __ptr64" ?QueryServiceStatusImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@PEAU_SERVICE_STATUS@@@Z
0x1800029CC: "private: void __cdecl Microsoft::SecurityClient::CDetectionWbemCreator::InitializeInstance(struct IWbemClassObject * __ptr64,class Microsoft::SecurityClient::CDetectionItem const * __ptr64)const __ptr64" ?InitializeInstance@CDetectionWbemCreator@SecurityClient@Microsoft@@AEBAXPEAUIWbemClassObject@@PEBVCDetectionItem@23@@Z
0x18002AE60: "public: static class std::locale::id std::numpunct<wchar_t>::id" ?id@?$numpunct@_W@std@@2V0locale@2@A
0x180004C9C: "public: __cdecl CommonUtil::AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>::~AutoRefWrapper<class Microsoft::SecurityClient::CDetectionItem>(void) __ptr64" ??1?$AutoRefWrapper@VCDetectionItem@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x1800277C0: "__cdecl TI2PEAVEUnknownError@MorroCommon@@" _TI2PEAVEUnknownError@MorroCommon@@
0x18001DEC8: "__cdecl _imp_CryptCATAdminCalcHashFromFileHandle" __imp_CryptCATAdminCalcHashFromFileHandle
0x18001DA58: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180012380: "protected: virtual int __cdecl MorroCommon::CWin32::SetForegroundWindowImpl(struct HWND__ * __ptr64) __ptr64" ?SetForegroundWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x18001066C: "void __cdecl CommonUtil::StringVPrintfW(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,bool,unsigned short const * __ptr64,char * __ptr64)" ?StringVPrintfW@CommonUtil@@YAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@1@_NPEBGPEAD@Z
0x180005CC8: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEAGPEAPEAG@Z
0x180005170: "public: virtual unsigned long __cdecl ATL::CComObject<class CMpProviderClass>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCMpProviderClass@@@ATL@@UEAAKXZ
0x18001F760: WPP_6f5eab5deb3e35356088f636632b5f30_Traceguids
0x18001D878: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x18000D760: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECMpProviderEventLogger@SecurityClient@Microsoft@@WBA@EAAPEAXI@Z
0x180007B40: "public: virtual long __cdecl CMpProviderClass::Initialize(unsigned short * __ptr64,long,unsigned short * __ptr64,unsigned short * __ptr64,struct IWbemServices * __ptr64,struct IWbemContext * __ptr64,struct IWbemProviderInitSink * __ptr64) __ptr64" ?Initialize@CMpProviderClass@@UEAAJPEAGJ00PEAUIWbemServices@@PEAUIWbemContext@@PEAUIWbemProviderInitSink@@@Z
0x1800036A0: "public: virtual long __cdecl CMpProviderClass::ExecQueryAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecQueryAsync@CMpProviderClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemObjectSink@@@Z
0x180018B10: "__cdecl _report_gsfailure" __report_gsfailure
0x1800202F0: "`string'" ??_C@_0O@FDBECPNN@MpAllocMemory?$AA@
0x1800203D8: WPP_ba7d25f69aac3fe1539902094218c7eb_Traceguids
0x180022278: ??_R4?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x180020040: "`string'" ??_C@_1BE@NIAPAEHB@?$AAP?$AAa?$AAt?$AAh?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180012A90: "protected: virtual int __cdecl MorroCommon::CWin32::CloseServiceHandleImpl(struct SC_HANDLE__ * __ptr64) __ptr64" ?CloseServiceHandleImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@@Z
0x180021968: "__vectorcall ??_R2_System_error_category@std" ??_R2_System_error_category@std@@8
0x180021AB0: "__vectorcall ??_R3_System_error_category@std" ??_R3_System_error_category@std@@8
0x180020718: "`string'" ??_C@_1BK@EJBALEBG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180005220: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CInfectionStateClass>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCInfectionStateClass@@@ATL@@UEAAPEAXI@Z
0x18001DAC0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180011E00: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLastErrorImpl(void) __ptr64" ?GetLastErrorImpl@CWin32@MorroCommon@@MEAAKXZ
0x180021D20: "__vectorcall ??_R2?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R2?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x180012A10: "protected: virtual int __cdecl MorroCommon::CWin32::WritePrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WritePrivateProfileStringImpl@CWin32@MorroCommon@@MEAAHPEBG000@Z
0x1800220D8: "__vectorcall ??_R3?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL" ??_R3?$CComCoClass@VCInfectionStateClass@@$1?CLSID_InfectionStateClass@@3U_GUID@@B@ATL@@8
0x180018D7C: "__cdecl onexit" _onexit
0x18001F7C8: "`string'" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x1800033D0: "public: virtual long __cdecl ATL::IWbemInstProviderImpl::ExecNotificationQuery(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64) __ptr64" ?ExecNotificationQuery@IWbemInstProviderImpl@ATL@@UEAAJQEAG0JPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x18002A1E8: "__vectorcall ??_R0?AV_System_error_category@std@" ??_R0?AV_System_error_category@std@@@8
0x180002EE4: "public: __cdecl CommonUtil::AutoRef<struct IWbemObjectTextSrc>::~AutoRef<struct IWbemObjectTextSrc>(void) __ptr64" ??1?$AutoRef@UIWbemObjectTextSrc@@@CommonUtil@@QEAA@XZ
0x18001EEB8: "`string'" ??_C@_0BK@IMCPHCBI@no?5such?5device?5or?5address?$AA@
0x18002B9E0: "__cdecl _native_startup_state" __native_startup_state
0x1800014E0: HrDllMain
0x180016F20: "public: long __cdecl MorroCommon::CAutoLockedCertCheck::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CAutoLockedCertCheck@MorroCommon@@QEAAJPEBG@Z
0x180013DC0: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CComBSTR & __ptr64) __ptr64" ?LoadResourceImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0AEAVCComBSTR@ATL@@@Z
0x180003874: WPP_SF_SDqq
0x18000F730: "public: virtual long __cdecl CommonUtil::CHResultExceptionImpl::GetErrorCode(void)const __ptr64" ?GetErrorCode@CHResultExceptionImpl@CommonUtil@@UEBAJXZ
0x180015CC0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::RemoveTrailingSlashInPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?RemoveTrailingSlashInPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x180020870: WPP_db61690a89973da19d491352a7a7c212_Traceguids
0x18000D588: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_K0@Z
0x18002B3F8: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x18002A4C8: "__vectorcall ??_R0?AVIWbemInstProviderImpl@ATL@" ??_R0?AVIWbemInstProviderImpl@ATL@@@8
0x18001CC50: "const ATL::CRegObject::`vftable'" ??_7CRegObject@ATL@@6B@
0x18001EA70: "`string'" ??_C@_0BB@FFIHMIPJ@invalid_argument?$AA@
0x1800025F0: "public: virtual char const * __ptr64 __cdecl std::_System_error_category::name(void)const __ptr64" ?name@_System_error_category@std@@UEBAPEBDXZ
0x18001F4B0: "`string'" ??_C@_1O@OAMNPMOM@?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AA?$AA@
0x18001DE90: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x18001F810: "`string'" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18001DC68: "__cdecl _imp_LoadResource" __imp_LoadResource
0x1800125D0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateFileImpl(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?CreateFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180027998: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x180012680: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetFileSizeImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileSizeImpl@CWin32@MorroCommon@@MEAAKPEAXPEAK@Z
0x1800036A0: "public: virtual long __cdecl CMpProviderClass::ExecMethodAsync(unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemObjectSink * __ptr64) __ptr64" ?ExecMethodAsync@CMpProviderClass@@UEAAJQEAG0JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAUIWbemObjectSink@@@Z
0x18001E948: "`string'" ??_C@_0BG@IPMGOJF@address_not_available?$AA@
0x1800088A0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CMpProviderClass> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCMpProviderClass@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001D850: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18002ADB0: "__vectorcall ??_R0?AVCPtrObject@CommonUtil@" ??_R0?AVCPtrObject@CommonUtil@@@8
0x180020798: WPP_186f0747e154398220c668ad71302e02_Traceguids
0x180015AA0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32PathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32PathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180004D00: "public: virtual unsigned long __cdecl ATL::CRegObject::Release(void) __ptr64" ?Release@CRegObject@ATL@@UEAAKXZ
0x18000DA2C: "public: unsigned long __cdecl Microsoft::SecurityClient::CInfectionStateConfig::GetMaxDetectionSizeAllowed(void)const __ptr64" ?GetMaxDetectionSizeAllowed@CInfectionStateConfig@SecurityClient@Microsoft@@QEBAKXZ
0x18001F8D8: "`string'" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18000C718: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@XZ
0x18001F318: "`string'" ??_C@_07DCLBNMLN@generic?$AA@
0x180021FE0: "__vectorcall ??_R1A@?0A@EC@IUnknown" ??_R1A@?0A@EC@IUnknown@@8
0x180022530: "__vectorcall ??_R1A@?0A@EA@IUnknown" ??_R1A@?0A@EA@IUnknown@@8
0x18001F158: "`string'" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x180027948: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x18002A520: "__vectorcall ??_R0?AUIWbemServices@" ??_R0?AUIWbemServices@@@8
0x18000C680: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180011EC0: "protected: virtual long __cdecl MorroCommon::CWin32::RegSetValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?RegSetValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18001D7E8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18002A858: "__vectorcall ??_R0?AV?$CAtlModuleT@VCMpProviderModule@@@ATL@" ??_R0?AV?$CAtlModuleT@VCMpProviderModule@@@ATL@@@8
0x18001F970: "`string'" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18001CF18: "const Microsoft::SecurityClient::CMpClientApi::`vftable'" ??_7CMpClientApi@SecurityClient@Microsoft@@6B@
0x18001DE48: "__cdecl _imp_AdjustWindowRectEx" __imp_AdjustWindowRectEx
0x180001A40: DllRegisterServer
0x180020578: "`string'" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800221B0: ??_R4CDetectionItemSizeCalculator@@6B@
0x18000584C: "public: __cdecl ATL::CAutoVectorPtr<unsigned short>::~CAutoVectorPtr<unsigned short>(void) __ptr64" ??1?$CAutoVectorPtr@G@ATL@@QEAA@XZ
0x1800071D4: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x18000C890: "public: void __cdecl Microsoft::SecurityClient::CMpProviderEventLogger::LogDetectionsMaxSizeExceeded(unsigned long,unsigned long) __ptr64" ?LogDetectionsMaxSizeExceeded@CMpProviderEventLogger@SecurityClient@Microsoft@@QEAAXKK@Z
0x18001DF00: WTSAPI32_NULL_THUNK_DATA
0x180022B58: "__vectorcall ??_R1A@?0A@EA@CPathUtils@MorroCommon" ??_R1A@?0A@EA@CPathUtils@MorroCommon@@8
0x18001DCC8: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18001495C: "public: long __cdecl ATL::CComBSTR::Append(char const * __ptr64) __ptr64" ?Append@CComBSTR@ATL@@QEAAJPEBD@Z
0x180002450: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Iostream_error_category@std@@UEAAPEAXI@Z
0x180017140: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x1800275E0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x180020700: "`string'" ??_C@_1BI@FCMLLAGN@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x18001CA30: "const std::_Iostream_error_category::`vftable'" ??_7_Iostream_error_category@std@@6B@
0x180009280: "public: void __cdecl Microsoft::SecurityClient::CWbemClassObjectHelper::Put(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Put@CWbemClassObjectHelper@SecurityClient@Microsoft@@QEAAXPEBG0@Z
0x18001D660: "protected: static unsigned short const * __ptr64 const * const ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1QBQEBGB
0x180002430: "public: __cdecl CommonUtil::CReturnHandle<class CommonUtil::CAutoBSTR>::~CReturnHandle<class CommonUtil::CAutoBSTR>(void) __ptr64" ??1?$CReturnHandle@VCAutoBSTR@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18000DA80: WPP_SF__guid_d
0x1800119C0: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAtlStringMgr@ATL@@UEAAPEAXI@Z
0x18001EBB8: "`string'" ??_C@_0BG@GDGHKFDH@operation_would_block?$AA@
0x18001D540: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x180022E50: ??_R4CHResultExceptionImpl@CommonUtil@@6B@
0x180012CC0: "protected: virtual int __cdecl MorroCommon::CWin32::GetVersionExImpl(struct _OSVERSIONINFOW * __ptr64) __ptr64" ?GetVersionExImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOW@@@Z
0x18002A800: "__vectorcall ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@" ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCMpProviderModule@@@ATL@@@8
0x18001EB90: "`string'" ??_C@_0BE@GAOJJFPC@wrong_protocol_type?$AA@
0x180011F70: "protected: virtual int __cdecl MorroCommon::CWin32::GetLocaleInfoImpl(unsigned long,unsigned long,unsigned short * __ptr64,int) __ptr64" ?GetLocaleInfoImpl@CWin32@MorroCommon@@MEAAHKKPEAGH@Z
0x180008DBC: WPP_SF_SI
0x180009010: WPP_SF_Si
0x18000908C: WPP_SF_Sl
0x1800277E0: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x18000FC3C: WPP_SF_sd
0x180008CC0: WPP_SF_SD
0x180008CC0: WPP_SF_Sd
0x180022508: "__vectorcall ??_R2IUnknown" ??_R2IUnknown@@8
0x180022518: "__vectorcall ??_R3IUnknown" ??_R3IUnknown@@8
0x18001E028: "__cdecl _imp_free" __imp_free
0x180022578: "__vectorcall ??_R3CRegObject@ATL" ??_R3CRegObject@ATL@@8
0x180022558: "__vectorcall ??_R2CRegObject@ATL" ??_R2CRegObject@ATL@@8
0x180018F30: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18001794C: WPP_SF_Sq
0x180003A28: WPP_SF_sq
0x180008E3C: WPP_SF_SS
0x180011698: MpInvokeStartupInitialization
0x180012230: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::OpenProcessImpl(unsigned long,int,unsigned long) __ptr64" ?OpenProcessImpl@CWin32@MorroCommon@@MEAAPEAXKHK@Z
0x18001DFF8: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180012580: "protected: virtual long __cdecl MorroCommon::CWin32::CoCreateGuidImpl(struct _GUID * __ptr64) __ptr64" ?CoCreateGuidImpl@CWin32@MorroCommon@@MEAAJPEAU_GUID@@@Z
0x180018450: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x18001D8C8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1800277F0: "__cdecl _pobjMap_CMpProviderClass" __pobjMap_CMpProviderClass
0x180022058: "__vectorcall ??_R1A@?0A@EA@IWbemServices" ??_R1A@?0A@EA@IWbemServices@@8
0x180022378: "__vectorcall ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x1800117C4: "long __cdecl CommonUtil::OnInitializeAtStartupNoThrow(long (__cdecl*)(void * __ptr64),void * __ptr64)" ?OnInitializeAtStartupNoThrow@CommonUtil@@YAJP6AJPEAX@Z0@Z
0x18001DA48: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x18001F098: "`string'" ??_C@_0BO@EFGOJEF@too?5many?5symbolic?5link?5levels?$AA@
0x18002AA90: "__vectorcall ??_R0?AVCMpProviderEventLogger@SecurityClient@Microsoft@" ??_R0?AVCMpProviderEventLogger@SecurityClient@Microsoft@@@8
0x18001FC70: "`string'" ??_C@_1EC@IIAPJBMK@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe@
0x180011A80: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32Heap@ATL@@UEAAPEAXI@Z
0x18001CF28: "const Microsoft::SecurityClient::CMpProviderEventLogger::`vftable'{for `MpCommonEx::CEventLoggerBase'}" ??_7CMpProviderEventLogger@SecurityClient@Microsoft@@6BCEventLoggerBase@MpCommonEx@@@
0x1800036A8: WPP_SF_S
0x18001EB50: "`string'" ??_C@_0N@IMHKKLEM@not_a_socket?$AA@
0x180018EB2: memset
0x1800279C0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800137B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFileIfSizeExceededImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,__int64) __ptr64" ?DeleteFileIfSizeExceededImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_J@Z
0x180022870: "__vectorcall ??_R2?$CComObject@VCMpProviderClass@@@ATL" ??_R2?$CComObject@VCMpProviderClass@@@ATL@@8
0x18001DB38: "__cdecl _imp_ReadFile" __imp_ReadFile
0x1800229D0: "__vectorcall ??_R3?$CComObject@VCMpProviderClass@@@ATL" ??_R3?$CComObject@VCMpProviderClass@@@ATL@@8
0x180020100: "`string'" ??_C@_1EE@BLCEBEPO@?$AA?$CF?$AA0?$AA4?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?$CF?$AA0?$AA2?$AAu?$AA?4?$AA?$CF?$AA0?$AA6?$AAu?$AA?9?$AA0?$AA0@
0x18001F4D0: "`string'" ??_C@_1BE@PBIOBJMM@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x180021950: "__vectorcall ??_R2CDetectionWbemCreator@SecurityClient@Microsoft" ??_R2CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x180021A98: "__vectorcall ??_R3CDetectionWbemCreator@SecurityClient@Microsoft" ??_R3CDetectionWbemCreator@SecurityClient@Microsoft@@8
0x18001DD88: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW

[JEB Decompiler by PNF Software]