PDB Symbols - ProtectionManagement.dll (0xD3AF723624D6E8DC7356931FF94464909128345AAFEE8A127C1196659AA8BF61)

Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_windows-defender-management-onecore_31bf3856ad364e35_10.0.17763.1_none_c4f9ce18f108db9a\ProtectionManagement.dll Base=0x180000000 SHA-256=D3AF723624D6E8DC7356931FF94464909128345AAFEE8A127C1196659AA8BF61
PDB: ProtectionManagement.pdb GUID={40E17608-A48A-B960-4070C23623FDC409} Age=1

5878 located named symbols:
0x180067EB8: "__vectorcall ??_R1A@DI@3FA@IRefCounted" ??_R1A@DI@3FA@IRefCounted@@8
0x18007E578: "public: static class CPseudoLockBase CPseudoLockBase::NoLock" ?NoLock@CPseudoLockBase@@2V1@A
0x180050630: "const Microsoft::SecurityClient::CBrandedValues::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_7CBrandedValues@SecurityClient@Microsoft@@6BIXMLBrandedValues@12@@
0x180068FB8: "__vectorcall ??_R3CUpdateContext@CWDOScanController@ThreatAbstraction" ??_R3CUpdateContext@CWDOScanController@ThreatAbstraction@@8
0x1800198F0: "long __cdecl ThreatAbstraction::NewSimpleMpConfigWriter(struct ThreatAbstraction::ISimpleMpConfigWriter * __ptr64 * __ptr64)" ?NewSimpleMpConfigWriter@ThreatAbstraction@@YAJPEAPEAUISimpleMpConfigWriter@1@@Z
0x18000F6F0: "public: virtual void * __ptr64 __cdecl CThreatDetails::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThreatDetails@@UEAAPEAXI@Z
0x180068F20: "__vectorcall ??_R2CUpdateContext@CWDOScanController@ThreatAbstraction" ??_R2CUpdateContext@CWDOScanController@ThreatAbstraction@@8
0x18000B1F4: "public: void __cdecl std::vector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> >::push_back(struct tagThreatDefaultAction const & __ptr64) __ptr64" ?push_back@?$vector@UtagThreatDefaultAction@@V?$allocator@UtagThreatDefaultAction@@@std@@@std@@QEAAXAEBUtagThreatDefaultAction@@@Z
0x180034440: "protected: virtual void * __ptr64 __cdecl CommonUtil::IRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_EIRefObject@CommonUtil@@MEAAPEAXI@Z
0x18005F988: "276" ??_C@_17JBAKOEPO@?$AA2?$AA7?$AA6?$AA?$AA@
0x180029800: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,224}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@OA@EBAXXZ
0x180060C88: "Signature_ScheduleTime" ??_C@_1CO@IFOAFOF@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18000B508: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@IEBAXXZ
0x18005B100: WINTRUST_NULL_THUNK_DATA
0x18007E7F8: "__vectorcall ??_R0?AVCBaseThreatManager@" ??_R0?AVCBaseThreatManager@@@8
0x1800672E0: "__vectorcall ??_R1A@?0A@EA@CBaseThreatManager" ??_R1A@?0A@EA@CBaseThreatManager@@8
0x18007E9B0: "__vectorcall ??_R0?AVISignaturesUpdateCallback@ThreatAbstraction@" ??_R0?AVISignaturesUpdateCallback@ThreatAbstraction@@@8
0x180029620: "[thunk]:public: virtual class Spynet::ISpynetInfo const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetInfo`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSpynetInfo@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVISpynetInfo@Spynet@@XZ
0x180010E10: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefObject@CommonUtil@@MEAAPEAXI@Z
0x18003ABDC: "long __cdecl CommonUtil::HrFromStdException(class exception const & __ptr64)" ?HrFromStdException@CommonUtil@@YAJAEBVexception@@@Z
0x180030D30: "protected: virtual int __cdecl MorroCommon::CWin32::PostMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?PostMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@I_K_J@Z
0x1800686C8: "__vectorcall ??_R1A@?0A@EA@CPseudoRefCountedBase" ??_R1A@?0A@EA@CPseudoRefCountedBase@@8
0x18006BED8: "__vectorcall ??_R1A@?0A@EA@CBrandedResources@MpCommonEx" ??_R1A@?0A@EA@CBrandedResources@MpCommonEx@@8
0x18001F3C0: "public: long __cdecl ThreatAbstraction::CActiveThreatsContextManager::RetrieveThreats(void) __ptr64" ?RetrieveThreats@CActiveThreatsContextManager@ThreatAbstraction@@QEAAJXZ
0x18005F8D8: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x18000C728: "public: __cdecl ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::~CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >(void) __ptr64" ??1?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@QEAA@XZ
0x180010824: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpThreatInfoFree>::~CUniqueHandle<struct CAutoMpThreatInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpThreatInfoFree@@@CommonUtil@@QEAA@XZ
0x18005E908: "182" ??_C@_17GBLBMGJP@?$AA1?$AA8?$AA2?$AA?$AA@
0x18005AC38: "__cdecl _imp_LockResource" __imp_LockResource
0x18002B9F0: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetContextID(void)const __ptr64" ?GetContextID@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18004ED18: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`vftable'{for `ILockable'}" ??_7?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6BILockable@@@
0x180012350: MSFT_MpHeartBeat_Invoke_Send
0x18005F4E0: "243" ??_C@_17CAEAGGGC@?$AA2?$AA4?$AA3?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IContextEvents::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIContextEvents@ThreatAbstraction@@UEAAPEAXI@Z
0x18005E698: "32772" ??_C@_1M@EHMONCDK@?$AA3?$AA2?$AA7?$AA7?$AA2?$AA?$AA@
0x18005AC08: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18005E730: "163" ??_C@_17ODAHMAIK@?$AA1?$AA6?$AA3?$AA?$AA@
0x18000532C: "public: __cdecl CommonUtil::CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>::~CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor>(void) __ptr64" ??1?$CGenericAutoLock@UCMpCriticalSectionFunctor@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18000D910: "public: virtual void __cdecl MpWmiSignatureProgress::Notify(struct ThreatAbstraction::SignaturesUpdateEvent const & __ptr64) __ptr64" ?Notify@MpWmiSignatureProgress@@UEAAXAEBUSignaturesUpdateEvent@ThreatAbstraction@@@Z
0x18005D87C: "1" ??_C@_13JGCMLPCH@?$AA1?$AA?$AA@
0x18001E000: "public: virtual long __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::PerformActions(class ThreatAbstraction::IActionEvents * __ptr64,bool) __ptr64" ?PerformActions@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@UEAAJPEAVIActionEvents@3@_N@Z
0x180029620: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetAvailableActionCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAvailableActionCount@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18005D2F0: "Composition" ??_C@_1BI@GKIJCEIJ@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001DAFC: "public: __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CActiveDetectionContexts(struct _GUID const & __ptr64,class CThreadManager * __ptr64,class ThreatAbstraction::CContextManager * __ptr64) __ptr64" ??0CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@QEAA@AEBU_GUID@@PEAVCThreadManager@@PEAVCContextManager@2@@Z
0x18001C220: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuarantineController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005CBF8: "illegal byte sequence" ??_C@_0BG@CDNPAGJK@illegal?5byte?5sequence?$AA@
0x180018CE0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECOnDemandController@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180014480: "public: __cdecl CommonUtil::AutoRef<struct Microsoft::SecurityClient::IXMLBrandedColors>::~AutoRef<struct Microsoft::SecurityClient::IXMLBrandedColors>(void) __ptr64" ??1?$AutoRef@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x18003546C: "public: class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@QEAAPEAVCFileUtils@1@XZ
0x180045958: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180031660: "protected: virtual int __cdecl MorroCommon::CWin32::SetEventImpl(void * __ptr64) __ptr64" ?SetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180083500: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUxlnnlmUoryUnhexigUlyquivUznwGEUhgwzucOlyq@Common" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUxlnnlmUoryUnhexigUlyquivUznwGEUhgwzucOlyq@Common
0x18005D168: "Enter to" ??_C@_08JKDBNODE@Enter?5to?$AA@
0x1800213A8: "public: __cdecl ThreatAbstraction::CContextManager::CContextManager(void) __ptr64" ??0CContextManager@ThreatAbstraction@@QEAA@XZ
0x18006D0C0: "__vectorcall ??_R3IXMLBrandedStrings@SecurityClient@Microsoft" ??_R3IXMLBrandedStrings@SecurityClient@Microsoft@@8
0x18006CCF0: "__vectorcall ??_R2IXMLBrandedStrings@SecurityClient@Microsoft" ??_R2IXMLBrandedStrings@SecurityClient@Microsoft@@8
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::CQuarantineDetectionContext,class VolatileOps<class ThreatAbstraction::CQuarantineDetectionContext> >::~CSmartPtr<class ThreatAbstraction::CQuarantineDetectionContext,class VolatileOps<class ThreatAbstraction::CQuarantineDetectionContext> >(void) __ptr64" ??1?$CSmartPtr@VCQuarantineDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCQuarantineDetectionContext@ThreatAbstraction@@@@@@QEAA@XZ
0x180005498: "public: __cdecl CommonUtil::AutoRef<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > >::~AutoRef<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > >(void) __ptr64" ??1?$AutoRef@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18002C6D4: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsAvailableAction(enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CDetectionContextBase@ThreatAbstraction@@UEBAHW4PermissibleAction@2@@Z
0x180062A70: "r" ??_C@_13BPINEIPE@?$AAr?$AA?$AA@
0x180027C68: "public: __cdecl ThreatAbstraction::CAutoIgnoreThreats::CAutoIgnoreThreats(void) __ptr64" ??0CAutoIgnoreThreats@ThreatAbstraction@@QEAA@XZ
0x180062110: WPP_0666010a6f2a37e99297d2bf7bd2a383_Traceguids
0x180045048: "public: __cdecl std::out_of_range::out_of_range(char const * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@PEBD@Z
0x18005EDF0: "207" ??_C@_17DELDLDCD@?$AA2?$AA0?$AA7?$AA?$AA@
0x18000ED00: MSFT_MpThreatCatalog_DeleteInstance
0x18005B320: mpclient_NULL_THUNK_DATA
0x18005C6E0: "function not supported" ??_C@_0BH@KEFGLDAF@function?5not?5supported?$AA@
0x18000B914: "unsigned long __cdecl MpMIUtil::MIDatetimeToMinutes(struct _MI_Datetime)" ?MIDatetimeToMinutes@MpMIUtil@@YAKU_MI_Datetime@@@Z
0x180080130: "__vectorcall ??_R0?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@" ??_R0?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@8
0x180043F50: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x18004D9B0: "const ThreatAbstraction::IDetectionContext::`vftable'{for `ThreatAbstraction::IDetectionContext'}" ??_7IDetectionContext@ThreatAbstraction@@6B01@@
0x18002DAB0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,256}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@BAA@EBAXXZ
0x18007F750: "__vectorcall ??_R0?AVCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@" ??_R0?AVCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@@8
0x1800504F0: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x180061E58: "const ThreatAbstraction::CScanHistoryContextManager::`vbtable'{for `CCritSectionBase'}" ??_8CScanHistoryContextManager@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005E6E8: "32792" ??_C@_1M@HNMELDEK@?$AA3?$AA2?$AA7?$AA9?$AA2?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18006AE78: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6BILockable@@@
0x180045BC0: "__cdecl FindPESection" _FindPESection
0x180029BD4: "public: __cdecl ThreatAbstraction::CScanHistoryDetectionContext::CScanHistoryDetectionContext(unsigned long) __ptr64" ??0CScanHistoryDetectionContext@ThreatAbstraction@@QEAA@K@Z
0x180029620: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CScanHistoryDetectionContext::IsActionTaken`vtordisp{4294967292,0}' (void)const __ptr64" ?IsActionTaken@CScanHistoryDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x180045080: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x1800507D0: "const Microsoft::SecurityClient::CBrandedColors::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_7CBrandedColors@SecurityClient@Microsoft@@6BIXMLBrandedColors@12@@
0x18005C828: "connection_aborted" ??_C@_0BD@OJMJDIGI@connection_aborted?$AA@
0x180016D00: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CServiceStatusController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCServiceStatusController@ThreatAbstraction@@UEAAPEAXI@Z
0x180021E20: "public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetAvailableActionCount(void)const __ptr64" ?GetAvailableActionCount@CThreatInfo@ThreatAbstraction@@UEBAKXZ
0x18006A9E8: "const ThreatAbstraction::CQuarantineContextManager::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CQuarantineContextManager@ThreatAbstraction@@6BILockable@@@
0x18006B7C0: "__vectorcall ??_R1A@?0A@EA@CAutoIgnoreThreat@ThreatAbstraction" ??_R1A@?0A@EA@CAutoIgnoreThreat@ThreatAbstraction@@8
0x180068570: "const ThreatAbstraction::IThreatInfo::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4IThreatInfo@ThreatAbstraction@@6B01@@
0x18003B6C4: "long __cdecl CommonUtil::NewVSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?NewVSprintfW@CommonUtil@@YAJPEAPEAGPEBGPEAD@Z
0x18004D758: "const ThreatAbstraction::IDetectionContexts::`vftable'{for `ILockable'}" ??_7IDetectionContexts@ThreatAbstraction@@6BILockable@@@
0x180016DB0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultException@CommonUtil@@MEAAPEAXI@Z
0x18004DF10: "const ThreatAbstraction::CQuarantineController::`vftable'" ??_7CQuarantineController@ThreatAbstraction@@6B@
0x180061F20: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vbtable'" ??_8CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@7B@
0x18000EF60: MSFT_MpPreference_EnumerateInstances
0x180002454: "long __cdecl MpMIUtil::GetRealTimeScanDirection(unsigned long * __ptr64)" ?GetRealTimeScanDirection@MpMIUtil@@YAJPEAK@Z
0x1800671F0: "__vectorcall ??_R1A@73FA@IRefCounted" ??_R1A@73FA@IRefCounted@@8
0x18005AB88: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18005AF78: "__cdecl _imp_CoCreateGuid" __imp_CoCreateGuid
0x18003F7E0: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedValues::HrGetValue(unsigned short const * __ptr64,unsigned long * __ptr64)const __ptr64" ?HrGetValue@CBrandedValues@SecurityClient@Microsoft@@UEBAJPEBGPEAK@Z
0x180021E20: "public: virtual class Spynet::ISpynetInfo const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetInfo(void)const __ptr64" ?GetSpynetInfo@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVISpynetInfo@Spynet@@XZ
0x180068800: "const CError::`RTTI Complete Object Locator'" ??_R4CError@@6B@
0x180068318: "const ThreatAbstraction::CExceptionThreats::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4CExceptionThreats@ThreatAbstraction@@6BIRefCounted@@@
0x18000BEA0: "public: void __cdecl MpWmiScanProgress::StartScan(struct _MSFT_MpScan_Start const * __ptr64) __ptr64" ?StartScan@MpWmiScanProgress@@QEAAXPEBU_MSFT_MpScan_Start@@@Z
0x180031840: ?SHGetSpecialFolderLocationImpl@CWin32@MorroCommon@@MEAAJPEAUHWND__@@HPEAPEFAU_ITEMIDLIST@@@Z
0x180035E30: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModulePathImpl(void) __ptr64" ?GetCurrentModulePathImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180062A88: ".//Deployment" ??_C@_1BM@JCKOHMAO@?$AA?4?$AA?1?$AA?1?$AAD?$AAe?$AAp?$AAl?$AAo?$AAy?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18005DBF0: "23" ??_C@_15OFBBKPLF@?$AA2?$AA3?$AA?$AA@
0x1800319E0: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQueryUserTokenImpl(unsigned long,void * __ptr64 * __ptr64) __ptr64" ?WTSQueryUserTokenImpl@CWin32@MorroCommon@@MEAAHKPEAPEAX@Z
0x18006C728: "__vectorcall ??_R1BA@?0A@EA@?$_String_val@U?$_Simple_types@G@std@@@std" ??_R1BA@?0A@EA@?$_String_val@U?$_Simple_types@G@std@@@std@@8
0x18002FFFC: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Replace(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Replace@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHPEBG0@Z
0x18005E860: "174" ??_C@_17LFIMCLJG@?$AA1?$AA7?$AA4?$AA?$AA@
0x18006ACF8: "__vectorcall ??_R1A@?0A@EA@IAutoActionManager@ThreatAbstraction" ??_R1A@?0A@EA@IAutoActionManager@ThreatAbstraction@@8
0x1800834B8: "private: static class MorroCommon::CPathUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@0PEAVCPathUtils@2@EA
0x18004D4D0: "const ThreatAbstraction::IScanProgress::`vftable'{for `IRefCounted'}" ??_7IScanProgress@ThreatAbstraction@@6BIRefCounted@@@
0x180011578: "public: __cdecl CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@QEAA@XZ
0x180050050: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`vftable'{for `MpCommonEx::IBrandParams'}" ??_7?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@6BIBrandParams@MpCommonEx@@@
0x180050468: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`vftable'{for `Microsoft::SecurityClient::IXMLReader'}" ??_7?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLReader@SecurityClient@Microsoft@@@
0x180050830: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`vftable'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_7?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLDeployment@SecurityClient@Microsoft@@@
0x180050520: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_7?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedStrings@SecurityClient@Microsoft@@@
0x18003C9D0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18001DF00: "public: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::Insert(class ThreatAbstraction::IDetectionContext * __ptr64) __ptr64" ?Insert@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@UEAAXPEAVIDetectionContext@3@@Z
0x180016A08: "public: __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::~vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >(void) __ptr64" ??1?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAA@XZ
0x18005B3A0: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x180068B28: "const ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180030F10: "protected: virtual int __cdecl MorroCommon::CWin32::DuplicateTokenExImpl(void * __ptr64,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,enum _SECURITY_IMPERSONATION_LEVEL,enum _TOKEN_TYPE,void * __ptr64 * __ptr64) __ptr64" ?DuplicateTokenExImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAU_SECURITY_ATTRIBUTES@@W4_SECURITY_IMPERSONATION_LEVEL@@W4_TOKEN_TYPE@@PEAPEAX@Z
0x18005B388: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x18006D478: "__vectorcall ??_R1A@?0A@EA@CBrandedValues@SecurityClient@Microsoft" ??_R1A@?0A@EA@CBrandedValues@SecurityClient@Microsoft@@8
0x18003FC8C: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@Z
0x18005CED8: "too many files open in system" ??_C@_0BO@HACHBEKI@too?5many?5files?5open?5in?5system?$AA@
0x18005E968: "RemediationScheduleTime" ??_C@_1DA@HKPMBBLL@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800170BC: WPP_SF_dDPDP
0x180024410: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,56}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@DI@EBAJXZ
0x18001499C: "public: long __cdecl CComputerHealth::Initialize(void) __ptr64" ?Initialize@CComputerHealth@@QEAAJXZ
0x1800244F0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanComplete`vtordisp{4294967292,80}' (class ThreatAbstraction::IDetectionContexts const * __ptr64,long,int) __ptr64" ?OnRoutineCleanComplete@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXPEBVIDetectionContexts@2@JH@Z
0x18005CBC8: "host unreachable" ??_C@_0BB@DHFDFGDM@host?5unreachable?$AA@
0x180061E58: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vbtable'{for `CPseudoLockBase'}" ??_8CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@7BCPseudoLockBase@@@
0x180029960: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsAvailableAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHW4PermissibleAction@2@@Z
0x180016FE0: "[thunk]:public: virtual int __cdecl CPseudoLockBase::TryLock`vtordisp{4294967292,0}' (void)const __ptr64" ?TryLock@CPseudoLockBase@@$4PPPPPPPM@A@EBAHXZ
0x18003E518: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::~CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>(void) __ptr64" ??1?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@MEAA@XZ
0x1800371B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?DeleteFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180030A00: "protected: virtual long __cdecl MorroCommon::CWin32::RegCloseKeyImpl(struct HKEY__ * __ptr64) __ptr64" ?RegCloseKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@@Z
0x18005FA80: "284" ??_C@_17MKFFJOKA@?$AA2?$AA8?$AA4?$AA?$AA@
0x180079074: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x180014B48: "public: long __cdecl CComputerHealth::PopulateData(struct tagMPSTATUS_INFO const & __ptr64,struct tagMPVERSION_INFO const & __ptr64) __ptr64" ?PopulateData@CComputerHealth@@QEAAJAEBUtagMPSTATUS_INFO@@AEBUtagMPVERSION_INFO@@@Z
0x18005F5C8: "252" ??_C@_17FDKANCKC@?$AA2?$AA5?$AA2?$AA?$AA@
0x180061F38: "const ThreatAbstraction::CAutoActionManager::`vbtable'{for `CCritSectionBase'}" ??_8CAutoActionManager@ThreatAbstraction@@7BCCritSectionBase@@@
0x1800624CC: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18005E808: "172" ??_C@_17JAOHHEEK@?$AA1?$AA7?$AA2?$AA?$AA@
0x18005ADA8: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180019ED0: "public: void __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::Uninitialize(void) __ptr64" ?Uninitialize@CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@QEAAXXZ
0x18005F860: "265" ??_C@_17EIODJILF@?$AA2?$AA6?$AA5?$AA?$AA@
0x18000CB38: "private: long __cdecl AMIndication::RegisterForNotifications(void) __ptr64" ?RegisterForNotifications@AMIndication@@AEAAJXZ
0x18002A210: "[thunk]:public: virtual class Spynet::ISpynetInfo const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetInfo`vtordisp{4294967292,40}' (void)const __ptr64" ?GetSpynetInfo@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVISpynetInfo@Spynet@@XZ
0x180020500: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionCompletion`vtordisp{4294967292,0}' (long,unsigned long) __ptr64" ?OnActionCompletion@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXJK@Z
0x18002C638: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableAction(unsigned long)const __ptr64" ?GetAvailableAction@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@K@Z
0x18002AA70: "[thunk]:public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CThreatInfo::GetThreatSeverity`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatSeverity@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x18006AA90: "__vectorcall ??_R2CAutoIgnoreThreats@ThreatAbstraction" ??_R2CAutoIgnoreThreats@ThreatAbstraction@@8
0x1800680C0: "__vectorcall ??_R1A@?0A@EA@IDetectionContext@ThreatAbstraction" ??_R1A@?0A@EA@IDetectionContext@ThreatAbstraction@@8
0x18003B06C: "long __cdecl CommonUtil::UtilLoadSystemLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?UtilLoadSystemLibrary@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBG@Z
0x18003045C: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x18006ADD8: "__vectorcall ??_R3CAutoIgnoreThreats@ThreatAbstraction" ??_R3CAutoIgnoreThreats@ThreatAbstraction@@8
0x180069038: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`RTTI Complete Object Locator'" ??_R4CUpdateContext@CWDOScanController@ThreatAbstraction@@6B@
0x180067E18: "__vectorcall ??_R1BA@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@" ??_R1BA@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@8
0x180021708: "public: virtual __cdecl ThreatAbstraction::CContextManager::~CContextManager(void) __ptr64" ??1CContextManager@ThreatAbstraction@@UEAA@XZ
0x180026AC4: "public: virtual __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::~CQuarantineDetectionContexts(void) __ptr64" ??1CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@UEAA@XZ
0x180080370: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@@8
0x1800830B0: "__cdecl _hmod__ext_ms_win_shell_shlwapi_l1_1_0_dll" __hmod__ext_ms_win_shell_shlwapi_l1_1_0_dll
0x180031AA0: "protected: virtual void __cdecl MorroCommon::CWin32::GetLocalTimeImpl(struct _SYSTEMTIME * __ptr64) __ptr64" ?GetLocalTimeImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEMTIME@@@Z
0x180039CD4: "public: virtual long __cdecl CRefCountedBaseX::AddRef(void)const __ptr64" ?AddRef@CRefCountedBaseX@@UEBAJXZ
0x180005510: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,40}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@CI@EBAJXZ
0x18005AE18: "__cdecl _imp_IsWow64Process" __imp_IsWow64Process
0x18005CA88: "already connected" ??_C@_0BC@DFIBIBIL@already?5connected?$AA@
0x180088010: ext-ms-win-shell-shell32-l1-2-1_NULL_THUNK_DATA_DLA
0x18003E7D8: "public: __cdecl std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >::~pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >(void) __ptr64" ??1?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@QEAA@XZ
0x180060780: "Reporting_CriticalFailureTimeOut" ??_C@_1EC@DGPGDAGK@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA_?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt@
0x180011684: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x18005CDF0: "operation would block" ??_C@_0BG@OEMDKMEE@operation?5would?5block?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoIgnoreThreat::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIAutoIgnoreThreat@ThreatAbstraction@@UEAAPEAXI@Z
0x180082870: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18002088C: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionStats::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionStats@CContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x180010918: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class ThreatAbstraction::CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@ThreatAbstraction@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@@Z
0x18005DB04: "18" ??_C@_15LEIEFKBK@?$AA1?$AA8?$AA?$AA@
0x180024490: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Unlock`vtordisp{4294967292,88}' (void)const __ptr64" ?Unlock@CPseudoLockBase@@$4PPPPPPPM@FI@EBAXXZ
0x180027660: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@XZ
0x180024720: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Unlock`vtordisp{4294967292,56}' (void)const __ptr64" ?Unlock@CPseudoLockBase@@$4PPPPPPPM@DI@EBAXXZ
0x180067290: "__vectorcall ??_R1A@?0A@EA@CActiveDetectionsManager" ??_R1A@?0A@EA@CActiveDetectionsManager@@8
0x18002A960: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreat::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAutoIgnoreThreat@ThreatAbstraction@@UEAAPEAXI@Z
0x180068548: "const ThreatAbstraction::IThreatInfo::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IThreatInfo@ThreatAbstraction@@6BIRefCounted@@@
0x18002F0F4: "public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CThreatInfo::GetThreatCategory(void)const __ptr64" ?GetThreatCategory@CThreatInfo@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x18002F0E4: "public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CThreatInfo::GetThreatSeverity(void)const __ptr64" ?GetThreatSeverity@CThreatInfo@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x18005E078: "62" ??_C@_15MGDMIKMG@?$AA6?$AA2?$AA?$AA@
0x18005ACC8: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180003318: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::operator unsigned short const * __ptr64(void)const __ptr64" ??B?$CSimpleStringT@G$0A@@ATL@@QEBAPEBGXZ
0x18002C420: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::SetPerformedAction(enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetPerformedAction@CDetectionContextBase@ThreatAbstraction@@UEAAXW4PermissibleAction@2@@Z
0x1800805E0: "__vectorcall ??_R0?AV?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@" ??_R0?AV?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@@8
0x18006CFC8: "__vectorcall ??_R1A@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R1A@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x1800461CC: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x18006DC80: "const Microsoft::SecurityClient::CBrandedColors::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_R4CBrandedColors@SecurityClient@Microsoft@@6BIXMLBrandedColors@12@@
0x180034DD8: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetSimplifiedSkuDirectory(class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > & __ptr64)" ?GetSimplifiedSkuDirectory@CPathUtilsEx@MpCommonEx@@SAJAEAV?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@Z
0x18001AB20: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,24}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@BI@EBAJXZ
0x18003AE18: "long __cdecl CommonUtil::UtilWaitForMultipleObjectsWithHibernate(unsigned long,void * __ptr64 const * __ptr64,unsigned long,unsigned long * __ptr64)" ?UtilWaitForMultipleObjectsWithHibernate@CommonUtil@@YAJKPEBQEAXKPEAK@Z
0x18006D7C0: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18005B468: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18007E858: "__vectorcall ??_R0?AVCRefCountedBase@" ??_R0?AVCRefCountedBase@@@8
0x18006DBD8: "__vectorcall ??_R3CBrandedColors@SecurityClient@Microsoft" ??_R3CBrandedColors@SecurityClient@Microsoft@@8
0x18006DB08: "__vectorcall ??_R2CBrandedColors@SecurityClient@Microsoft" ??_R2CBrandedColors@SecurityClient@Microsoft@@8
0x18001B504: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWDOScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x180018CA0: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,16}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@BA@EBAJXZ
0x18004057C: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CFeatureBrand::`vector deleting destructor'(unsigned int) __ptr64" ??_ECFeatureBrand@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x1800166E0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,24}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@BI@EBAJXZ
0x18004DC08: "const CPseudoRefCountedBase::`vftable'" ??_7CPseudoRefCountedBase@@6B@
0x18004CBE8: "const std::_System_error_category::`vftable'" ??_7_System_error_category@std@@6B@
0x180010DB0: "public: struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<unsigned __int64,class std::allocator<unsigned __int64> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@_KV?$allocator@_K@std@@@std@@QEAAPEAU?$_Tree_node@_KPEAX@2@XZ
0x180062838: "__cdecl GUID_2933bf86_7b36_11d2_b20e_00c04f983e60" _GUID_2933bf86_7b36_11d2_b20e_00c04f983e60
0x18000C8C0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,48}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@DA@EBAJXZ
0x18005ACB0: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x18006C520: "__vectorcall ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon" ??_R1A@?0A@EA@ILockedCertCheck@MorroCommon@@8
0x18004E530: "const ThreatAbstraction::CContextManager::`vftable'{for `CRefCountedBase'}" ??_7CContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x18006BDD8: "__vectorcall ??_R2?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil" ??_R2?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@8
0x18006BFC8: "__vectorcall ??_R3?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil" ??_R3?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@8
0x18003FB44: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18005AAE0: "__cdecl tls_used" _tls_used
0x18005E918: "184" ??_C@_17EENKJJED@?$AA1?$AA8?$AA4?$AA?$AA@
0x18006DF58: "__vectorcall ??_R1BA@?0A@EA@?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil" ??_R1BA@?0A@EA@?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@8
0x180067EE0: "__vectorcall ??_R1DI@?0A@EA@CRefCountedBaseX" ??_R1DI@?0A@EA@CRefCountedBaseX@@8
0x18005D95C: "11" ??_C@_15MJIMBFJA@?$AA1?$AA1?$AA?$AA@
0x18005D350: "Description" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18004D380: "const ThreatAbstraction::IActionEvents::`vftable'{for `IRefCounted'}" ??_7IActionEvents@ThreatAbstraction@@6BIRefCounted@@@
0x180060050: "MSFT_MpThreatDetection_Set_AMPro" ??_C@_0CM@EHJBNFID@MSFT_MpThreatDetection_Set_AMPro@
0x180061E00: "const ThreatAbstraction::CExceptionThreats::`vbtable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_8CExceptionThreats@ThreatAbstraction@@7B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct tagASRRuleDefaultAction> >::deallocate(struct tagASRRuleDefaultAction * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@UtagASRRuleDefaultAction@@@std@@@std@@QEAAXPEAUtagASRRuleDefaultAction@@_K@Z
0x1800318C0: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyEnvironmentBlockImpl(void * __ptr64) __ptr64" ?DestroyEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18003BBD0: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::append(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?append@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18005E308: "MSFT_MpThreatCatalog" ??_C@_1CK@NPJKJME@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x18000C8E0: "[thunk]:public: virtual void * __ptr64 __cdecl MpWmiScanProgress::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_EMpWmiScanProgress@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18002DCD0: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,256}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@BAA@EBAHXZ
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedValues::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLBrandedValues@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18004524C: "__cdecl CRT_INIT" _CRT_INIT
0x18005B390: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x18002AC70: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetDefaultAction`vtordisp{4294967292,8}' (void)const __ptr64" ?GetDefaultAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4PermissibleAction@2@XZ
0x1800342F4: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(unsigned short const * __ptr64) __ptr64" ?assign@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@PEBG@Z
0x1800621F0: "const ThreatAbstraction::CThreatInfo::`vbtable'{for `CCritSectionBase'}" ??_8CThreatInfo@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005E290: "DidThreatExecute" ??_C@_1CC@BGHPAGE@?$AAD?$AAi?$AAd?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?$AA@
0x18005CEF8: "too many links" ??_C@_0P@HCOMKFCC@too?5many?5links?$AA@
0x180062688: "GetSystemTimePreciseAsFileTime" ??_C@_0BP@FPNJPEJC@GetSystemTimePreciseAsFileTime?$AA@
0x1800245D0: "[thunk]:protected: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::`vector deleting destructor'`vtordisp{4294967292,96}' (unsigned int) __ptr64" ??_ECDetectionContextsBase@CContextManager@ThreatAbstraction@@$2PPPPPPPM@GA@EAAPEAXI@Z
0x180002230: MSFT_MpEvent_Unload
0x18000ED00: MSFT_MpPreference_DeleteInstance
0x18004F540: "const ThreatAbstraction::IAutoIgnoreThreat::`vftable'" ??_7IAutoIgnoreThreat@ThreatAbstraction@@6B@
0x18002A250: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,264}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@BAI@EBAHXZ
0x18005AD30: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18007EFC0: "__vectorcall ??_R0?AVCSimpleMpConfigComWriter@ThreatAbstraction@" ??_R0?AVCSimpleMpConfigComWriter@ThreatAbstraction@@@8
0x18001C324: "public: static long __cdecl ThreatAbstraction::CQuarantineController::Initialize(void)" ?Initialize@CQuarantineController@ThreatAbstraction@@SAJXZ
0x18005D5B8: "NonlocalType" ??_C@_1BK@IJPNGFHF@?$AAN?$AAo?$AAn?$AAl?$AAo?$AAc?$AAa?$AAl?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000ED00: MSFT_MpThreatDetection_ModifyInstance
0x18005C6F8: "no lock available" ??_C@_0BC@NJECKMKE@no?5lock?5available?$AA@
0x180069FE0: "const ThreatAbstraction::CActiveThreatsContextManager::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CActiveThreatsContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x18005F850: "263" ??_C@_17GNIIMHGJ@?$AA2?$AA6?$AA3?$AA?$AA@
0x18005C760: "operation canceled" ??_C@_0BD@MOLBPMEA@operation?5canceled?$AA@
0x18005EEF8: "216" ??_C@_17EHFDAHOD@?$AA2?$AA1?$AA6?$AA?$AA@
0x18003BAE0: "class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl CommonUtil::StringPrintfW(unsigned short const * __ptr64,...)" ?StringPrintfW@CommonUtil@@YA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@1@PEBGZZ
0x180083624: DloadSectionOldProtection
0x18006C8E0: "const CWString::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CWString@@6BILockable@@@
0x18006C378: "__vectorcall ??_R1A@?0A@EA@CFileUtils@MorroCommon" ??_R1A@?0A@EA@CFileUtils@MorroCommon@@8
0x18005B200: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA
0x1800246B0: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAPEAXI@Z
0x18002A690: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetShortDescription`vtordisp{4294967292,40}' (void)const __ptr64" ?GetShortDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x18003FBA0: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@UEAAPEAXI@Z
0x1800308A0: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?PathIsDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18005D428: "Experimental" ??_C@_1BK@DFLICNLJ@?$AAE?$AAx?$AAp?$AAe?$AAr?$AAi?$AAm?$AAe?$AAn?$AAt?$AAa?$AAl?$AA?$AA@
0x180021304: "public: __cdecl ThreatAbstraction::set_action_taken::~set_action_taken(void) __ptr64" ??1set_action_taken@ThreatAbstraction@@QEAA@XZ
0x180029AA0: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableAction`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetAvailableAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@K@Z
0x180045732: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18002ED88: "protected: long __cdecl ThreatAbstraction::CThreatInfo::InitializeThreatInfo(struct tagMPTHREAT_INFO const * __ptr64) __ptr64" ?InitializeThreatInfo@CThreatInfo@ThreatAbstraction@@IEAAJPEBUtagMPTHREAT_INFO@@@Z
0x18004CD00: MSFT_MpPreference_Add_rtti
0x180019274: "public: virtual __cdecl ThreatAbstraction::CScheduledScanController::~CScheduledScanController(void) __ptr64" ??1CScheduledScanController@ThreatAbstraction@@UEAA@XZ
0x18002A1C4: "public: virtual int __cdecl ThreatAbstraction::CQuarantineDetectionContext::IsActionTaken(void)const __ptr64" ?IsActionTaken@CQuarantineDetectionContext@ThreatAbstraction@@UEBAHXZ
0x180044FE0: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x18004ED98: "const ThreatAbstraction::CAutoIgnoreThreats::`vftable'{for `ILockable'}" ??_7CAutoIgnoreThreats@ThreatAbstraction@@6BILockable@@@
0x180069308: "__vectorcall ??_R1A@?0A@EA@CQuarantineController@ThreatAbstraction" ??_R1A@?0A@EA@CQuarantineController@ThreatAbstraction@@8
0x18001D568: "public: virtual unsigned long __cdecl ThreatAbstraction::CScanProgressInfo::GetScanProgress(void)const __ptr64" ?GetScanProgress@CScanProgressInfo@ThreatAbstraction@@UEBAKXZ
0x18005E688: "32768" ??_C@_1M@ODCPOBPL@?$AA3?$AA2?$AA7?$AA6?$AA8?$AA?$AA@
0x180031030: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LoadResourceImpl(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64) __ptr64" ?LoadResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAUHINSTANCE__@@PEAUHRSRC__@@@Z
0x18002AD38: WPP_SF_l
0x18005F8A8: "ScanType" ??_C@_1BC@CCEOIPON@?$AAS?$AAc?$AAa?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18003B2BC: "long __cdecl CommonUtil::UtilRawGetLoadedProcAddress(__int64 (__cdecl* * __ptr64)(void),unsigned short const * __ptr64,char const * __ptr64,bool)" ?UtilRawGetLoadedProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBGPEBD_N@Z
0x18006A3B8: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6BCPseudoLockBase@@@
0x18004ECD8: "const ThreatAbstraction::IAutoIgnoreThreats::`vftable'{for `ILockable'}" ??_7IAutoIgnoreThreats@ThreatAbstraction@@6BILockable@@@
0x18005B208: "__cdecl _imp_MpCleanStart" __imp_MpCleanStart
0x180082898: "private: static enum ThreatAbstraction::PermissibleAction * ThreatAbstraction::CQuarantineDetectionContext::m_permissibleActions" ?m_permissibleActions@CQuarantineDetectionContext@ThreatAbstraction@@0PAW4PermissibleAction@2@A
0x1800411C0: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CFeatureBrand::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECFeatureBrand@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180001D00: WppControlCallback
0x180014744: "public: __cdecl CSmartPtr<class ThreatAbstraction::CContextManager,class VolatileOps<class ThreatAbstraction::CContextManager> >::~CSmartPtr<class ThreatAbstraction::CContextManager,class VolatileOps<class ThreatAbstraction::CContextManager> >(void) __ptr64" ??1?$CSmartPtr@VCContextManager@ThreatAbstraction@@V?$VolatileOps@VCContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x180061EC8: "const ThreatAbstraction::CScheduledScanController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CScheduledScanController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x1800463F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18005E208: "107" ??_C@_17LKDMLEMA@?$AA1?$AA0?$AA7?$AA?$AA@
0x180060FB0: "Windows Defender Exploit Guard\A" ??_C@_1GK@GNGNOAII@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAA@
0x18005E178: "94" ??_C@_15BCABGHMP@?$AA9?$AA4?$AA?$AA@
0x18005EF40: "219" ??_C@_17BPDABHLF@?$AA2?$AA1?$AA9?$AA?$AA@
0x180069EF0: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BILockable@@@
0x18007EB18: "__vectorcall ??_R0?AVMpWmiWDOScanProgress@" ??_R0?AVMpWmiWDOScanProgress@@@8
0x180067BC0: "__vectorcall ??_R1A@?0A@EA@MpWmiWDOScanProgress" ??_R1A@?0A@EA@MpWmiWDOScanProgress@@8
0x18002A770: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,232}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@OI@EBAJXZ
0x18005EF78: "RandomizeScheduleTaskTimes" ??_C@_1DG@DNEGDDGJ@?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAi?$AAz?$AAe?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAa?$AAs?$AAk?$AAT?$AAi?$AAm?$AAe?$AAs?$AA?$AA@
0x1800439E0: "public: __cdecl std::vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::~vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >(void) __ptr64" ??1?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@QEAA@XZ
0x18000B854: "struct tagThreatDefaultAction * __ptr64 __cdecl std::_Uninit_move<struct tagThreatDefaultAction * __ptr64,struct tagThreatDefaultAction * __ptr64,class std::allocator<struct tagThreatDefaultAction>,struct tagThreatDefaultAction>(struct tagThreatDefaultAction * __ptr64,struct tagThreatDefaultAction * __ptr64,struct tagThreatDefaultAction * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct tagThreatDefaultAction> > & __ptr64,struct tagThreatDefaultAction * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAUtagThreatDefaultAction@@PEAU1@V?$allocator@UtagThreatDefaultAction@@@std@@U1@@std@@YAPEAUtagThreatDefaultAction@@PEAU1@00AEAU?$_Wrap_alloc@V?$allocator@UtagThreatDefaultAction@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x180041180: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::AddRef`vtordisp{4294967292,16}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@BA@EBAJXZ
0x180050820: "const CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >::`vftable'" ??_7?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@6B@
0x18000ED00: MSFT_MpThreat_ModifyInstance
0x18005AE90: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18005EEC0: "213" ??_C@_17HAINPHNB@?$AA2?$AA1?$AA3?$AA?$AA@
0x18004DE40: "const ThreatAbstraction::CHeartBeatController::`vftable'" ??_7CHeartBeatController@ThreatAbstraction@@6B@
0x18006DE90: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@8
0x1800326B0: "public: virtual long __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetOS(unsigned short * __ptr64 * __ptr64)const __ptr64" ?GetOS@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEBAJPEAPEAG@Z
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18006B810: "__vectorcall ??_R1A@?0A@EA@IAutoIgnoreThreat@ThreatAbstraction" ??_R1A@?0A@EA@IAutoIgnoreThreat@ThreatAbstraction@@8
0x180061F68: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`vbtable'" ??_8CUpdateContext@CHeartBeatController@ThreatAbstraction@@7B@
0x18002DB90: "[thunk]:public: virtual void __cdecl ThreatAbstraction::CThreatInfo::GetTimeStamp`vtordisp{4294967292,0}' (struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAXAEAU_FILETIME@@@Z
0x18005DA58: "AntivirusSignatureVersion" ??_C@_1DE@KFOIHPKJ@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180039F20: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,0}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@A@EBAXXZ
0x18004F898: "const ThreatAbstraction::IDetectionContext::CResource::`vftable'{for `CRefCountedBase'}" ??_7CResource@IDetectionContext@ThreatAbstraction@@6BCRefCountedBase@@@
0x180078B00: "__cdecl CTA1?AVCAtlException@ATL@@" _CTA1?AVCAtlException@ATL@@
0x18005D608: "Out" ??_C@_17NFNCFLGO@?$AAO?$AAu?$AAt?$AA?$AA@
0x180062508: WPP_ec2a303825493c616ddb432fd9400ed8_Traceguids
0x18006ACD0: "__vectorcall ??_R1A@?0A@EA@CAutoActionManager@ThreatAbstraction" ??_R1A@?0A@EA@CAutoActionManager@ThreatAbstraction@@8
0x180016D80: "public: __cdecl CommonUtil::CHResultException::CHResultException(class CommonUtil::CHResultException const & __ptr64) __ptr64" ??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z
0x180029620: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext::IConfigChange const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChange`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetConfigChange@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVIConfigChange@IDetectionContext@2@K@Z
0x18007E5B0: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x180060618: "Remediation_ScheduleDay" ??_C@_1DA@MIIJPAPN@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x180067338: "__vectorcall ??_R3CThreatCatalogManager" ??_R3CThreatCatalogManager@@8
0x180067E00: "__vectorcall ??_R2IThreatInfo@ThreatAbstraction" ??_R2IThreatInfo@ThreatAbstraction@@8
0x18005F978: "274" ??_C@_17DLADCMHF@?$AA2?$AA7?$AA4?$AA?$AA@
0x180030CE0: "protected: virtual int __cdecl MorroCommon::CWin32::IsWow64ProcessImpl(void * __ptr64,int * __ptr64) __ptr64" ?IsWow64ProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAH@Z
0x180001680: "public: virtual bool __cdecl std::error_category::equivalent(int,class std::error_condition const & __ptr64)const __ptr64" ?equivalent@error_category@std@@UEBA_NHAEBVerror_condition@2@@Z
0x180011C50: "public: __cdecl std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long>::~pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long>(void) __ptr64" ??1?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@QEAA@XZ
0x1800670D8: "__vectorcall ??_R2CThreatCatalogManager" ??_R2CThreatCatalogManager@@8
0x180068210: "__vectorcall ??_R3IThreatInfo@ThreatAbstraction" ??_R3IThreatInfo@ThreatAbstraction@@8
0x18005F510: "245" ??_C@_17FCLDJLO@?$AA2?$AA4?$AA5?$AA?$AA@
0x18001BEC0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanHistoryController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005EE28: "208" ??_C@_17GMNAKDHF@?$AA2?$AA0?$AA8?$AA?$AA@
0x1800615D0: "WIN32" ??_C@_1M@EKLNDDIP@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA?$AA@
0x180001920: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z
0x180018D18: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(unsigned short const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@PEBG_K@Z
0x180067FD0: "__vectorcall ??_R1A@73FA@ILockable" ??_R1A@73FA@ILockable@@8
0x18005E218: "109" ??_C@_17FKODMDPD@?$AA1?$AA0?$AA9?$AA?$AA@
0x1800224F0: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::RemoveAllContexts(void) __ptr64" ?RemoveAllContexts@CContextManager@ThreatAbstraction@@MEAAXXZ
0x180043AE4: "public: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::_Insert<class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > > >(class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,struct std::forward_iterator_tag) __ptr64" ??$_Insert@V?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@QEAAXV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@1@00Uforward_iterator_tag@1@@Z
0x180062A78: WPP_8afcff74dedb323c51213ca955f8cc51_Traceguids
0x18005F4F0: "PUAProtection" ??_C@_1BM@DEOOKGOD@?$AAP?$AAU?$AAA?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800068F0: "long __cdecl GetASRRuleIdsDefaultActions(struct _MI_Context * __ptr64,class CData & __ptr64,class CommonUtil::CStdVector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> > & __ptr64)" ?GetASRRuleIdsDefaultActions@@YAJPEAU_MI_Context@@AEAVCData@@AEAV?$CStdVector@UtagASRRuleDefaultAction@@V?$allocator@UtagASRRuleDefaultAction@@@std@@@CommonUtil@@@Z
0x18006E644: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x18000EF90: MSFT_MpPreference_Invoke_Remove
0x18005F710: "AttackSurfaceReductionRules_Acti" ??_C@_1EI@GEEEIIFI@?$AAA?$AAt?$AAt?$AAa?$AAc?$AAk?$AAS?$AAu?$AAr?$AAf?$AAa?$AAc?$AAe?$AAR?$AAe?$AAd?$AAu?$AAc?$AAt?$AAi?$AAo?$AAn?$AAR?$AAu?$AAl?$AAe?$AAs?$AA_?$AAA?$AAc?$AAt?$AAi@
0x180068180: "__vectorcall ??_R1A@77FA@ILockable" ??_R1A@77FA@ILockable@@8
0x180068E10: "const ThreatAbstraction::CSignatureUpdateController::`RTTI Complete Object Locator'" ??_R4CSignatureUpdateController@ThreatAbstraction@@6B@
0x180078FFC: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x1800691F0: "__vectorcall ??_R2CScanHistoryController@ThreatAbstraction" ??_R2CScanHistoryController@ThreatAbstraction@@8
0x180010918: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@Z
0x18000B508: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@@std@@@std@@IEBAXXZ
0x180069248: "__vectorcall ??_R3CScanHistoryController@ThreatAbstraction" ??_R3CScanHistoryController@ThreatAbstraction@@8
0x18006DFD0: "__vectorcall ??_R1A@?0A@EA@?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@8
0x1800621C8: "const ThreatAbstraction::CAutoIgnoreThreat::`vbtable'{for `ThreatAbstraction::IAutoIgnoreThreat'}" ??_8CAutoIgnoreThreat@ThreatAbstraction@@7BIAutoIgnoreThreat@1@@
0x18004D778: "const ThreatAbstraction::IDetectionContexts::`vftable'{for `IRefCounted'}" ??_7IDetectionContexts@ThreatAbstraction@@6BIRefCounted@@@
0x1800316D0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentThreadIdImpl(void) __ptr64" ?GetCurrentThreadIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x180017D0C: "public: void __cdecl ThreatAbstraction::COnDemandController::CScanContext::ReportProgress(struct tagMPSCAN_DATA * __ptr64) __ptr64" ?ReportProgress@CScanContext@COnDemandController@ThreatAbstraction@@QEAAXPEAUtagMPSCAN_DATA@@@Z
0x180015668: "public: static void __cdecl ThreatAbstraction::CThreatAbstraction::Shutdown(void)" ?Shutdown@CThreatAbstraction@ThreatAbstraction@@SAXXZ
0x18003F244: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedValues::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandedValues@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180080018: "__vectorcall ??_R0?AUILockedCertCheck@MorroCommon@" ??_R0?AUILockedCertCheck@MorroCommon@@@8
0x180067DA8: "__vectorcall ??_R2IDetectionContexts@ThreatAbstraction" ??_R2IDetectionContexts@ThreatAbstraction@@8
0x18007EF70: "__vectorcall ??_R0?AVCScheduledScanController@ThreatAbstraction@" ??_R0?AVCScheduledScanController@ThreatAbstraction@@@8
0x1800681E0: "__vectorcall ??_R3IDetectionContexts@ThreatAbstraction" ??_R3IDetectionContexts@ThreatAbstraction@@8
0x180028734: "public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::RemoveAutoIgnoreThreat(unsigned __int64) __ptr64" ?RemoveAutoIgnoreThreat@CAutoActionManager@ThreatAbstraction@@UEAAJ_K@Z
0x180012640: "public: virtual struct ATL::IAtlStringMgr * __ptr64 __cdecl ATL::CAtlStringMgr::Clone(void) __ptr64" ?Clone@CAtlStringMgr@ATL@@UEAAPEAUIAtlStringMgr@2@XZ
0x180061EC0: "const ThreatAbstraction::CScheduledScanController::`vbtable'{for `CCritSectionBase'}" ??_8CScheduledScanController@ThreatAbstraction@@7BCCritSectionBase@@@
0x180029620: "[thunk]:public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CDetectionContextBase::GetMatchType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetMatchType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4MatchType@2@XZ
0x18005C890: "bad_address" ??_C@_0M@IJGMGFGP@bad_address?$AA@
0x18005B0E0: "__cdecl _imp_CryptCATAdminEnumCatalogFromHash" __imp_CryptCATAdminEnumCatalogFromHash
0x18005D870: "Write" ??_C@_1M@GNJKCMMA@?$AAW?$AAr?$AAi?$AAt?$AAe?$AA?$AA@
0x18004EA18: "const ThreatAbstraction::CQuarantineContextManager::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7CQuarantineContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x180060D60: "Exclusions" ??_C@_1BG@EFHDCODG@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180088028: "__cdecl _imp_SHGetFolderPathW" __imp_SHGetFolderPathW
0x18007F0B0: "__vectorcall ??_R0?AVCSignatureUpdateController@ThreatAbstraction@" ??_R0?AVCSignatureUpdateController@ThreatAbstraction@@@8
0x18002DD24: "public: __cdecl ThreatAbstraction::CThreatInfo::CThreatInfo(struct tagMPTHREAT_INFO const * __ptr64) __ptr64" ??0CThreatInfo@ThreatAbstraction@@QEAA@PEBUtagMPTHREAT_INFO@@@Z
0x1800682F0: "const ThreatAbstraction::CExceptionThreats::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CExceptionThreats@ThreatAbstraction@@6BILockable@@@
0x180083628: DloadSectionLockCount
0x1800685C0: "__vectorcall ??_R2ILockable" ??_R2ILockable@@8
0x18002A4D0: "[thunk]:public: virtual enum ThreatAbstraction::IDetectionContext::DetectionLevel __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionLevel`vtordisp{4294967292,40}' (void)const __ptr64" ?GetDetectionLevel@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4DetectionLevel@IDetectionContext@2@XZ
0x1800685D0: "__vectorcall ??_R3ILockable" ??_R3ILockable@@8
0x18006BFA0: "__vectorcall ??_R1A@?0A@EA@IBrandedResources@MpCommonEx" ??_R1A@?0A@EA@IBrandedResources@MpCommonEx@@8
0x18001085C: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEAAX_K@Z
0x18000CCE8: "private: bool __cdecl AMIndication::HealthStateReady(void) __ptr64" ?HealthStateReady@AMIndication@@AEAA_NXZ
0x1800032E4: "public: __cdecl ATL::CSimpleStringT<unsigned short,0>::~CSimpleStringT<unsigned short,0>(void) __ptr64" ??1?$CSimpleStringT@G$0A@@ATL@@QEAA@XZ
0x18003E838: "public: bool __cdecl std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >::operator()(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64)const __ptr64" ??R?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@QEBA_NAEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@0@Z
0x18005AE78: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x180045020: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLDeployment::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLDeployment@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18002063C: "public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get(unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180016144: "public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get(unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x18005CE78: "result out of range" ??_C@_0BE@GOIPJJHG@result?5out?5of?5range?$AA@
0x18003464C: "private: long __cdecl MpCommonEx::CBrandedResources::InitXMLReader(struct MpCommonEx::IBrandParams * __ptr64) __ptr64" ?InitXMLReader@CBrandedResources@MpCommonEx@@AEAAJPEAUIBrandParams@2@@Z
0x180061BC0: "Microsoft Security Client" ??_C@_1DE@CIIAGCCJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x180061E70: WPP_e06f4eaa4ed837d0a0b0b4287c3fca33_Traceguids
0x1800435B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x180043610: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x18007F810: "__vectorcall ??_R0?AVCScanHistoryDetectionContext@ThreatAbstraction@" ??_R0?AVCScanHistoryDetectionContext@ThreatAbstraction@@@8
0x18005F9E8: "278" ??_C@_17HBNFJDMN@?$AA2?$AA7?$AA8?$AA?$AA@
0x18005E6D8: "32788" ??_C@_1M@NJCFIAIL@?$AA3?$AA2?$AA7?$AA8?$AA8?$AA?$AA@
0x18005C840: "connection_refused" ??_C@_0BD@NGKCIFEP@connection_refused?$AA@
0x180016850: "class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64 __cdecl std::_Uninit_move<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,class std::allocator<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > >,class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > >(class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > > > & __ptr64,class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@PEAV1@V?$allocator@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@@std@@V1@@std@@YAPEAV?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@PEAV1@00AEAU?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18006A5B0: "__vectorcall ??_R1A@?0A@EA@CScanHistoryContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CScanHistoryContextManager@ThreatAbstraction@@8
0x180083272: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils> MorroCommon::CFileUtils::m_instance" ?m_instance@CFileUtils@MorroCommon@@0V?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@2@A
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgress::`vector deleting destructor'(unsigned int) __ptr64" ??_EIScanProgress@ThreatAbstraction@@UEAAPEAXI@Z
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005ED18: "204" ??_C@_17CGAGBMMN@?$AA2?$AA0?$AA4?$AA?$AA@
0x180006BA8: "public: __cdecl MorroCommon::SFolderItem::~SFolderItem(void) __ptr64" ??1SFolderItem@MorroCommon@@QEAA@XZ
0x180030CB0: "protected: virtual int __cdecl MorroCommon::CWin32::VerQueryValueImpl(void const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned int * __ptr64) __ptr64" ?VerQueryValueImpl@CWin32@MorroCommon@@MEAAHPEBXPEBGPEAPEAXPEAI@Z
0x180003360: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >::~CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180030540: "long __cdecl MorroCommon::HrCStringFormatV(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?HrCStringFormatV@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGPEAD@Z
0x180010060: "public: virtual class CommonUtil::AutoRef<class CThreatDetails> __cdecl CThreatRollupManager::GetNextThreat(void) __ptr64" ?GetNextThreat@CThreatRollupManager@@UEAA?AV?$AutoRef@VCThreatDetails@@@CommonUtil@@XZ
0x1800618B0: WPP_2e198e525be63616f577550ca52c09b7_Traceguids
0x180062188: "const ThreatAbstraction::CScanHistoryDetectionContext::`vbtable'{for `CCritSectionBase'}" ??_8CScanHistoryDetectionContext@ThreatAbstraction@@7BCCritSectionBase@@@
0x180069B48: "__vectorcall ??_R1A@BA@M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R1A@BA@M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x180033F18: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@MEAAPEAXI@Z
0x18005B460: "__cdecl _imp_wcstoul" __imp_wcstoul
0x18006B170: "__vectorcall ??_R2COnDemandDetectionContext@ThreatAbstraction" ??_R2COnDemandDetectionContext@ThreatAbstraction@@8
0x18006B2F8: "__vectorcall ??_R3COnDemandDetectionContext@ThreatAbstraction" ??_R3COnDemandDetectionContext@ThreatAbstraction@@8
0x18005B258: "__cdecl _imp_MpGetCallistoDetections" __imp_MpGetCallistoDetections
0x1800695B0: "__vectorcall ??_R3IScanProgressInfoQueue@ThreatAbstraction" ??_R3IScanProgressInfoQueue@ThreatAbstraction@@8
0x180069500: "__vectorcall ??_R2IScanProgressInfoQueue@ThreatAbstraction" ??_R2IScanProgressInfoQueue@ThreatAbstraction@@8
0x180043EF0: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDeploymentBrand::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECDeploymentBrand@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18000EFD0: MSFT_MpScan_Invoke_Start
0x180020460: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanComplete`vtordisp{4294967292,88}' (class ThreatAbstraction::IDetectionContexts const * __ptr64,long,int) __ptr64" ?OnRoutineCleanComplete@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXPEBVIDetectionContexts@2@JH@Z
0x180001630: "public: virtual void * __ptr64 __cdecl std::error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_Eerror_category@std@@UEAAPEAXI@Z
0x180021B30: "public: virtual unsigned long __cdecl ThreatAbstraction::CContextManager::GetDetectionContextCount(void)const __ptr64" ?GetDetectionContextCount@CContextManager@ThreatAbstraction@@UEBAKXZ
0x1800037D4: "enum _MI_Result __cdecl GetThreatInstances(struct _MI_Context * __ptr64,bool,unsigned __int64,enum THREAT_TYPE_CLASS,unsigned short const * __ptr64)" ?GetThreatInstances@@YA?AW4_MI_Result@@PEAU_MI_Context@@_N_KW4THREAT_TYPE_CLASS@@PEBG@Z
0x18006D5E0: "__vectorcall ??_R1A@?0A@EA@?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil" ??_R1A@?0A@EA@?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@8
0x180068B78: "const ThreatAbstraction::CScheduledScanController::`RTTI Complete Object Locator'" ??_R4CScheduledScanController@ThreatAbstraction@@6B@
0x18000B508: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x18000EF60: MSFT_MpPreference_GetInstance
0x18000313C: "public: __cdecl MorroCommon::EHresultException::EHresultException(long) __ptr64" ??0EHresultException@MorroCommon@@QEAA@J@Z
0x180062410: "EppManifest.dll" ??_C@_1CA@JBDKFALD@?$AAE?$AAp?$AAp?$AAM?$AAa?$AAn?$AAi?$AAf?$AAe?$AAs?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000407C: "enum _MI_Result __cdecl FillAndPostThreatInstance(struct _MI_Context * __ptr64,class CommonUtil::AutoRef<class CThreatDetails>)" ?FillAndPostThreatInstance@@YA?AW4_MI_Result@@PEAU_MI_Context@@V?$AutoRef@VCThreatDetails@@@CommonUtil@@@Z
0x1800809A0: "__vectorcall ??_R0?AV?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@" ??_R0?AV?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@8
0x18005E4A0: "130" ??_C@_17KBHPPONH@?$AA1?$AA3?$AA0?$AA?$AA@
0x18005C998: "no_protocol_option" ??_C@_0BD@JHIHCGKP@no_protocol_option?$AA@
0x18005DC88: "RealTimeScanDirection" ??_C@_1CM@MAAOGODB@?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAS?$AAc?$AAa?$AAn?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005B170: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180069088: "__vectorcall ??_R2CUpdateContext@CHeartBeatController@ThreatAbstraction" ??_R2CUpdateContext@CHeartBeatController@ThreatAbstraction@@8
0x18006CB20: "__vectorcall ??_R3?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@8
0x18005E718: "160" ??_C@_17PBLCGPGE@?$AA1?$AA6?$AA0?$AA?$AA@
0x180069120: "__vectorcall ??_R3CUpdateContext@CHeartBeatController@ThreatAbstraction" ??_R3CUpdateContext@CHeartBeatController@ThreatAbstraction@@8
0x18000D220: "public: static long __cdecl AMIndication::MpNotificationCallback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?MpNotificationCallback@AMIndication@@SAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x18006CA70: "__vectorcall ??_R2?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@8
0x180002170: DllGetClassObject
0x1800310D0: "protected: virtual int __cdecl MorroCommon::CWin32::DeleteFileImpl(unsigned short const * __ptr64) __ptr64" ?DeleteFileImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18003225C: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEAAPEAXI@Z
0x18003C58C: "void __cdecl CommonUtil::MpAtlEnsureThrow(long)" ?MpAtlEnsureThrow@CommonUtil@@YAXJ@Z
0x180029860: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownGood`vtordisp{4294967292,0}' (void)const __ptr64" ?IsKnownGood@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x18006D8B0: "const Microsoft::SecurityClient::IXMLBrandedValues::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_R4IXMLBrandedValues@SecurityClient@Microsoft@@6B012@@
0x18002F124: "public: virtual void __cdecl ThreatAbstraction::CThreatInfo::GetTimeStamp(struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CThreatInfo@ThreatAbstraction@@UEBAXAEAU_FILETIME@@@Z
0x180067570: "__vectorcall ??_R1A@A@3FA@IRefCounted" ??_R1A@A@3FA@IRefCounted@@8
0x18005B328: "__cdecl _imp_memmove_s" __imp_memmove_s
0x18005D4C0: "Large" ??_C@_1M@HIBKACJB@?$AAL?$AAa?$AAr?$AAg?$AAe?$AA?$AA@
0x180079088: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1
0x180019FF0: "public: void __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::ReportStatus(struct ThreatAbstraction::SignaturesUpdateEvent & __ptr64) __ptr64" ?ReportStatus@CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@QEAAXAEAUSignaturesUpdateEvent@3@@Z
0x180030BE0: "protected: virtual int __cdecl MorroCommon::CWin32::CloseHandleImpl(void * __ptr64) __ptr64" ?CloseHandleImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18005DCE8: "35" ??_C@_15LCGCDMM@?$AA3?$AA5?$AA?$AA@
0x180060B60: "Signature_DisableUpdateOnStartup" ??_C@_1FM@IEAAGCCK@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp@
0x1800626C8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180016A08: "public: __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::~vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >(void) __ptr64" ??1?$vector@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAA@XZ
0x180016794: "public: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::push_back(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > &&) __ptr64" ?push_back@?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAX$$QEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@Z
0x18002A150: "public: void __cdecl ThreatAbstraction::CQuarantineDetectionContext::SetActionTaken(void) __ptr64" ?SetActionTaken@CQuarantineDetectionContext@ThreatAbstraction@@QEAAXXZ
0x18002A330: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext::CResource * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetResource`vtordisp{4294967292,40}' (unsigned long)const __ptr64" ?GetResource@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEAVCResource@IDetectionContext@2@K@Z
0x1800607F8: "Reporting_NonCriticalTimeOut" ??_C@_1DK@PGHEFAID@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA_?$AAN?$AAo?$AAn?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x180078D90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_1_dll
0x18004E780: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18007F6C0: "__vectorcall ??_R0?AVCDetectionStats@CContextManager@ThreatAbstraction@" ??_R0?AVCDetectionStats@CContextManager@ThreatAbstraction@@@8
0x18004ECF8: "const ThreatAbstraction::IAutoIgnoreThreats::`vftable'{for `IRefCounted'}" ??_7IAutoIgnoreThreats@ThreatAbstraction@@6BIRefCounted@@@
0x180062600: "GetFileVersionInfoSizeW" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x18005CB30: "connection already in progress" ??_C@_0BP@KAIHPOGN@connection?5already?5in?5progress?$AA@
0x18000FBCC: "protected: bool __cdecl CBaseThreatManager::MpClientReady(long * __ptr64,enum tagMPTHREAT_SOURCE,enum tagMPTHREAT_TYPE) __ptr64" ?MpClientReady@CBaseThreatManager@@IEAA_NPEAJW4tagMPTHREAT_SOURCE@@W4tagMPTHREAT_TYPE@@@Z
0x18001C0C8: "public: __cdecl ThreatAbstraction::CQuarantineController::CQuarantineController(void) __ptr64" ??0CQuarantineController@ThreatAbstraction@@QEAA@XZ
0x18002DB70: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCategoryName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18006A998: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x1800460AC: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x18007FD18: "__vectorcall ??_R0?AVCBrandedResources@MpCommonEx@" ??_R0?AVCBrandedResources@MpCommonEx@@@8
0x180031E50: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x18003A2B0: "[thunk]:public: virtual void __cdecl CWString::Lock`vtordisp{4294967292,0}' (void)const __ptr64" ?Lock@CWString@@$4PPPPPPPM@A@EBAXXZ
0x18006BA50: "const ThreatAbstraction::CDetectionContextBase::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CDetectionContextBase@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800607C8: "CriticalFailureTimeOut" ??_C@_1CO@ONJACCGL@?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x180012800: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x18000534C: "public: virtual void * __ptr64 __cdecl MpWmiCleanProgress::`vector deleting destructor'(unsigned int) __ptr64" ??_EMpWmiCleanProgress@@UEAAPEAXI@Z
0x180060040: "Set_DomainUser" ??_C@_0P@IKLIIJFE@Set_DomainUser?$AA@
0x18005EBD0: "199" ??_C@_17HNOMJCDL@?$AA1?$AA9?$AA9?$AA?$AA@
0x18005E4D8: "133" ??_C@_17LDMKFBDJ@?$AA1?$AA3?$AA3?$AA?$AA@
0x1800678D8: "const MpWmiSignatureProgress::`RTTI Complete Object Locator'{for `ThreatAbstraction::ISignaturesUpdateCallback'}" ??_R4MpWmiSignatureProgress@@6BISignaturesUpdateCallback@ThreatAbstraction@@@
0x18005E1E0: "104" ??_C@_17KIIJBLCO@?$AA1?$AA0?$AA4?$AA?$AA@
0x18006B030: "const ThreatAbstraction::IAutoActionManager::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IAutoActionManager@ThreatAbstraction@@6BIRefCounted@@@
0x180016AC0: "public: virtual void * __ptr64 __cdecl CPseudoRefCountedBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPseudoRefCountedBase@@UEAAPEAXI@Z
0x180012550: "public: virtual void __cdecl ATL::CAtlStringMgr::Free(struct ATL::CStringData * __ptr64) __ptr64" ?Free@CAtlStringMgr@ATL@@UEAAXPEAUCStringData@2@@Z
0x180067B48: "const CMpProviderLogger::`RTTI Complete Object Locator'{for `MpCommonEx::CEventLoggerBase'}" ??_R4CMpProviderLogger@@6BCEventLoggerBase@MpCommonEx@@@
0x180062398: WPP_89fb53f3aed63e0c5398ee718629a513_Traceguids
0x1800620C4: "public: static unsigned long const ThreatAbstraction::IThreatInfo::TT_KNOWNGOOD" ?TT_KNOWNGOOD@IThreatInfo@ThreatAbstraction@@2KB
0x18003C61C: HrGetLastFailureUnsafe
0x18005F5C0: "251" ??_C@_17EBBFHNEM@?$AA2?$AA5?$AA1?$AA?$AA@
0x18004D5F8: "const CMpProviderLogger::`vftable'{for `MpCommonEx::CEventLoggerBase'}" ??_7CMpProviderLogger@@6BCEventLoggerBase@MpCommonEx@@@
0x18001A9F8: "public: long __cdecl ThreatAbstraction::CSignatureUpdateController::RegisterUpdateNotification(class ThreatAbstraction::ISignaturesUpdateCallback * __ptr64) __ptr64" ?RegisterUpdateNotification@CSignatureUpdateController@ThreatAbstraction@@QEAAJPEAVISignaturesUpdateCallback@2@@Z
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedColors::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLBrandedColors@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18007E978: "__vectorcall ??_R0?AVMpWmiSignatureProgress@" ??_R0?AVMpWmiSignatureProgress@@@8
0x180020C60: "protected: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionContextsBase@CContextManager@ThreatAbstraction@@MEAAPEAXI@Z
0x18006C7C8: "__vectorcall ??_R1A@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R1A@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x18005D270: "Bag" ??_C@_17JEDMPGED@?$AAB?$AAa?$AAg?$AA?$AA@
0x1800317D0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetUserDefaultUILanguageImpl(void) __ptr64" ?GetUserDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x18004EAC0: "const ThreatAbstraction::CQuarantineContextManager::`vftable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_7CQuarantineContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x18005EDC0: "SignatureScheduleDay" ??_C@_1CK@BAIALKP@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x18004DBB8: "const ThreatAbstraction::CServiceStatusController::`vftable'{for `ILockable'}" ??_7CServiceStatusController@ThreatAbstraction@@6BILockable@@@
0x18006E0B0: "__vectorcall ??_R3CDeploymentBrand@SecurityClient@Microsoft" ??_R3CDeploymentBrand@SecurityClient@Microsoft@@8
0x18003C64C: "long __cdecl CommonUtil::VariantCreateBinaryBuffer(void const * __ptr64,unsigned __int64,struct tagVARIANT * __ptr64)" ?VariantCreateBinaryBuffer@CommonUtil@@YAJPEBX_KPEAUtagVARIANT@@@Z
0x180028184: "public: virtual __cdecl ThreatAbstraction::CAutoActionManager::~CAutoActionManager(void) __ptr64" ??1CAutoActionManager@ThreatAbstraction@@UEAA@XZ
0x18006DD18: "__vectorcall ??_R2CDeploymentBrand@SecurityClient@Microsoft" ??_R2CDeploymentBrand@SecurityClient@Microsoft@@8
0x180025B20: "void __cdecl std::push_heap<class std::_Vector_iterator<class std::_Vector_val<struct std::_Simple_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >,struct ThreatAbstraction::time_compare>(class std::_Vector_iterator<class std::_Vector_val<struct std::_Simple_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >,class std::_Vector_iterator<class std::_Vector_val<struct std::_Simple_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >,struct ThreatAbstraction::time_compare)" ??$push_heap@V?$_Vector_iterator@V?$_Vector_val@U?$_Simple_types@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@Utime_compare@ThreatAbstraction@@@std@@YAXV?$_Vector_iterator@V?$_Vector_val@U?$_Simple_types@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@0@0Utime_compare@ThreatAbstraction@@@Z
0x18006C110: "const MpCommonEx::CBrandedResources::`RTTI Complete Object Locator'" ??_R4CBrandedResources@MpCommonEx@@6B@
0x180025350: "public: __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::CScanHistoryDetectionContexts(class ThreatAbstraction::CContextManager * __ptr64) __ptr64" ??0CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@QEAA@PEAVCContextManager@2@@Z
0x18001C264: "public: virtual __cdecl ThreatAbstraction::CQuarantineController::~CQuarantineController(void) __ptr64" ??1CQuarantineController@ThreatAbstraction@@UEAA@XZ
0x18003A310: "[thunk]:public: virtual void * __ptr64 __cdecl CWString::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECWString@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18001B280: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,32}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@CA@EBAJXZ
0x180002948: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
0x180061FF0: "const ThreatAbstraction::CScanProgressInfoQueue::`vbtable'{for `CCritSectionBase'}" ??_8CScanProgressInfoQueue@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005F428: "ModerateThreatDefaultAction" ??_C@_1DI@NBGAKJGC@?$AAM?$AAo?$AAd?$AAe?$AAr?$AAa?$AAt?$AAe?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001BD64: "public: __cdecl ThreatAbstraction::CScanHistoryController::CScanHistoryController(void) __ptr64" ??0CScanHistoryController@ThreatAbstraction@@QEAA@XZ
0x180034240: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::Release`vtordisp{4294967292,24}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@BI@EBAJXZ
0x18001D5C0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,64}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@EA@EBAJXZ
0x180031880: "protected: virtual void __cdecl MorroCommon::CWin32::SetLastErrorImpl(unsigned long) __ptr64" ?SetLastErrorImpl@CWin32@MorroCommon@@MEAAXK@Z
0x180062708: "SelectionLanguage" ??_C@_1CE@CPDIBCNA@?$AAS?$AAe?$AAl?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AA?$AA@
0x18003C61C: HrGetLastFailure
0x180029DA0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetCheckpointID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCheckpointID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180068250: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6BILockable@@@
0x180067268: "__vectorcall ??_R1A@?0A@EA@CThreatRollupManager" ??_R1A@?0A@EA@CThreatRollupManager@@8
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IActionEvents::`vector deleting destructor'(unsigned int) __ptr64" ??_EIActionEvents@ThreatAbstraction@@UEAAPEAXI@Z
0x180062BF8: "%s%s%ls%s" ??_C@_1BE@FOKHNICL@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAl?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x180043D2C: "void __cdecl std::_Rotate<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64>(class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,struct std::random_access_iterator_tag)" ??$_Rotate@PEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@YAXPEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@00Urandom_access_iterator_tag@0@@Z
0x180003380: "public: __cdecl CActiveDetectionsManager::~CActiveDetectionsManager(void) __ptr64" ??1CActiveDetectionsManager@@QEAA@XZ
0x180067F80: "__vectorcall ??_R1EI@?0A@EA@CRefCountedBaseX" ??_R1EI@?0A@EA@CRefCountedBaseX@@8
0x1800245F0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,56}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@DI@EBAJXZ
0x18005FAD8: "288" ??_C@_17IAIDCBBI@?$AA2?$AA8?$AA8?$AA?$AA@
0x180030A30: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteValueImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteValueImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x180078C40: "__cdecl CTA2PEAVEHresultException@MorroCommon@@" _CTA2PEAVEHresultException@MorroCommon@@
0x18005C600: "permission denied" ??_C@_0BC@CIJDGCDI@permission?5denied?$AA@
0x1800318B0: "protected: virtual void __cdecl MorroCommon::CWin32::WTSFreeMemoryImpl(void * __ptr64) __ptr64" ?WTSFreeMemoryImpl@CWin32@MorroCommon@@MEAAXPEAX@Z
0x18006B620: "const ThreatAbstraction::CQuarantineDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CQuarantineDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800615E0: "const MpWmiScanProgress::`vbtable'{for `ThreatAbstraction::IScanProgress'}" ??_8MpWmiScanProgress@@7BIScanProgress@ThreatAbstraction@@@
0x180018ABC: "private: static long __cdecl ThreatAbstraction::COnDemandController::HandleScanCompletion(class ThreatAbstraction::COnDemandController::CScanContext * __ptr64)" ?HandleScanCompletion@COnDemandController@ThreatAbstraction@@CAJPEAVCScanContext@12@@Z
0x18005B488: "__cdecl _imp_wcschr" __imp_wcschr
0x18003A00C: "public: virtual void __cdecl CWString::Lock(void)const __ptr64" ?Lock@CWString@@UEBAXXZ
0x180078C58: "__stdcall CT??_R0PEAVEHresultException@MorroCommon@@" _CT??_R0PEAVEHresultException@MorroCommon@@@88
0x180005530: "[thunk]:public: virtual void * __ptr64 __cdecl MpWmiCleanProgress::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_EMpWmiCleanProgress@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180011D04: "public: void __cdecl MpWmiWDOScanProgress::StartWDOScan(void) __ptr64" ?StartWDOScan@MpWmiWDOScanProgress@@QEAAXXZ
0x18005B260: "__cdecl _imp_MpNotificationRegister" __imp_MpNotificationRegister
0x18005AC78: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18005E068: "60" ??_C@_15GMDFECEN@?$AA6?$AA0?$AA?$AA@
0x18006CDA8: "__vectorcall ??_R2?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R2?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x180062C30: "%MARKET%" ??_C@_1BC@NEOKKOB@?$AA?$CF?$AAM?$AAA?$AAR?$AAK?$AAE?$AAT?$AA?$CF?$AA?$AA@
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::deallocate(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@std@@QEAAXPEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_K@Z
0x18000C858: "private: static void __cdecl ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::CallDestructors(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,unsigned __int64)" ?CallDestructors@?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@CAXPEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@2@_K@Z
0x18006D0F0: "__vectorcall ??_R3?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R3?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x18002F20C: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryName(void)const __ptr64" ?GetCategoryName@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005F548: "246" ??_C@_17BHJOJGFA@?$AA2?$AA4?$AA6?$AA?$AA@
0x18005FDF0: "You don't have enough permission" ??_C@_1IM@CENOLDIC@?$AAY?$AAo?$AAu?$AA?5?$AAd?$AAo?$AAn?$AA?8?$AAt?$AA?5?$AAh?$AAa?$AAv?$AAe?$AA?5?$AAe?$AAn?$AAo?$AAu?$AAg?$AAh?$AA?5?$AAp?$AAe?$AAr?$AAm?$AAi?$AAs?$AAs?$AAi?$AAo?$AAn@
0x18006CA10: "__vectorcall ??_R3CHResultExceptionImpl@CommonUtil" ??_R3CHResultExceptionImpl@CommonUtil@@8
0x18003546C: "public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@2@XZ
0x180035118: "public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)" ?GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@2@XZ
0x18005E9F0: "ReportingCriticalFailureTimeOut" ??_C@_1EA@OOHLJBHG@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x18006CA28: "__vectorcall ??_R2CHResultExceptionImpl@CommonUtil" ??_R2CHResultExceptionImpl@CommonUtil@@8
0x1800378E0: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadLibraryImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,struct HINSTANCE__ * __ptr64 * __ptr64) __ptr64" ?SafeLoadLibraryImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAPEAUHINSTANCE__@@@Z
0x18005D368: "DisplayDescription" ??_C@_1CG@NBCOCMPI@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800612E8: "vector<T> too long" ??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
0x180045EC8: "__cdecl _imp_load_SHGetSpecialFolderLocation" __imp_load_SHGetSpecialFolderLocation
0x18005ABD0: "__cdecl _imp_PrivilegeCheck" __imp_PrivilegeCheck
0x180062178: "const ThreatAbstraction::COnDemandDetectionContext::`vbtable'{for `ThreatAbstraction::IDetectionContext'}" ??_8COnDemandDetectionContext@ThreatAbstraction@@7BIDetectionContext@1@@
0x180001800: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_System_error_category::message(int)const __ptr64" ?message@_System_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18005AF88: OLE32_NULL_THUNK_DATA
0x18005F2C0: "233" ??_C@_17DNEFFGNK@?$AA2?$AA3?$AA3?$AA?$AA@
0x18005B108: "__cdecl _imp_WTSQuerySessionInformationW" __imp_WTSQuerySessionInformationW
0x18006B388: "const ThreatAbstraction::COnDemandDetectionContext::`RTTI Complete Object Locator'" ??_R4COnDemandDetectionContext@ThreatAbstraction@@6B@
0x18005E460: "129" ??_C@_17BHCLGCPI@?$AA1?$AA2?$AA9?$AA?$AA@
0x18001C3C8: "public: __cdecl ThreatAbstraction::CConfigController::CConfigController(void) __ptr64" ??0CConfigController@ThreatAbstraction@@QEAA@XZ
0x18006D900: "__vectorcall ??_R2?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@8
0x18004E320: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `ThreatAbstraction::IActionEvents'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BIActionEvents@2@@
0x18006D9B0: "__vectorcall ??_R3?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@8
0x1800505D8: "const CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::`vftable'" ??_7?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@6B@
0x18000B508: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@IEBAXXZ
0x180045780: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x180029B20: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCategoryName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18005AF20: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x18006B550: "__vectorcall ??_R2CQuarantineDetectionContext@ThreatAbstraction" ??_R2CQuarantineDetectionContext@ThreatAbstraction@@8
0x18000ED00: MSFT_MpThreatCatalog_ModifyInstance
0x18006B5E0: "__vectorcall ??_R3CQuarantineDetectionContext@ThreatAbstraction" ??_R3CQuarantineDetectionContext@ThreatAbstraction@@8
0x18004F650: "const ThreatAbstraction::CAutoIgnoreThreat::`vftable'{for `ThreatAbstraction::CThreatInfo'}" ??_7CAutoIgnoreThreat@ThreatAbstraction@@6BCThreatInfo@1@@
0x18005D508: "MaxValue" ??_C@_1BC@KCONIAEJ@?$AAM?$AAa?$AAx?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18005B4B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180067A70: "__vectorcall ??_R2CMpProviderLogger" ??_R2CMpProviderLogger@@8
0x18005FDB4: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x18005D9D0: "13" ??_C@_15GDIFNNBL@?$AA1?$AA3?$AA?$AA@
0x180067B30: "__vectorcall ??_R3CMpProviderLogger" ??_R3CMpProviderLogger@@8
0x18006A278: "const ThreatAbstraction::CContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4CContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x180018244: "public: static void __cdecl ThreatAbstraction::COnDemandController::Shutdown(void)" ?Shutdown@COnDemandController@ThreatAbstraction@@SAXXZ
0x180013BA0: "public: static long __cdecl CData::GetConfigDword(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64)" ?GetConfigDword@CData@@SAJPEBG0PEAKPEAW4tagMP_CONFIG_ORIGIN@@@Z
0x180080328: "__vectorcall ??_R0?AUIXMLReader@SecurityClient@Microsoft@" ??_R0?AUIXMLReader@SecurityClient@Microsoft@@@8
0x180005410: "public: virtual void * __ptr64 __cdecl ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@UEAAPEAXI@Z
0x18005AEF0: "__cdecl _imp_GetSystemDefaultUILanguage" __imp_GetSystemDefaultUILanguage
0x18002F080: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatName(void)const __ptr64" ?GetThreatName@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18000ED00: MSFT_MpEvent_Unsubscribe
0x18007E828: "__vectorcall ??_R0?AVCDetectionsManager@" ??_R0?AVCDetectionsManager@@@8
0x180031BB0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GlobalFindAtomImpl(unsigned short const * __ptr64) __ptr64" ?GlobalFindAtomImpl@CWin32@MorroCommon@@MEAAGPEBG@Z
0x180061F90: "const ThreatAbstraction::CConfigController::`vbtable'{for `CCritSectionBase'}" ??_8CConfigController@ThreatAbstraction@@7BCCritSectionBase@@@
0x180016DB0: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> >::deallocate(struct MorroCommon::SFolderItem * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAAXPEAUSFolderItem@MorroCommon@@_K@Z
0x18007F330: "__vectorcall ??_R0?AVCScanProgressInfoQueue@ThreatAbstraction@" ??_R0?AVCScanProgressInfoQueue@ThreatAbstraction@@@8
0x18001D580: "public: virtual enum ThreatAbstraction::ScanType __cdecl ThreatAbstraction::CScanProgressInfo::GetScanType(void)const __ptr64" ?GetScanType@CScanProgressInfo@ThreatAbstraction@@UEBA?AW4ScanType@2@XZ
0x18005B188: "__cdecl _imp_PathIsRelativeW" __imp_PathIsRelativeW
0x18006C340: "const MorroCommon::CPathUtils::`RTTI Complete Object Locator'" ??_R4CPathUtils@MorroCommon@@6B@
0x18000F6F0: "public: virtual void * __ptr64 __cdecl CThreatDetails::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThreatDetails@@UEAAPEAXI@Z
0x18005ACB8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180034440: "protected: virtual void * __ptr64 __cdecl CommonUtil::IRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIRefObject@CommonUtil@@MEAAPEAXI@Z
0x18002BB3C: "public: virtual enum ThreatAbstraction::IDetectionContext::MiniFileterStatus __cdecl ThreatAbstraction::CDetectionContextBase::GetMiniFilterStatus(void)const __ptr64" ?GetMiniFilterStatus@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4MiniFileterStatus@IDetectionContext@2@XZ
0x180003148: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x180069CF8: "__vectorcall ??_R1A@FA@3FA@IRefCounted" ??_R1A@FA@3FA@IRefCounted@@8
0x18003442C: "protected: virtual __cdecl CommonUtil::IRefObject::~IRefObject(void) __ptr64" ??1IRefObject@CommonUtil@@MEAA@XZ
0x180068ED0: "const ThreatAbstraction::CActiveThreatsController::`RTTI Complete Object Locator'" ??_R4CActiveThreatsController@ThreatAbstraction@@6B@
0x180020480: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnInternalError`vtordisp{4294967292,88}' (long) __ptr64" ?OnInternalError@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXJ@Z
0x18005ADD0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180031860: ?SHGetPathFromIDListImpl@CWin32@MorroCommon@@MEAAHPEFBU_ITEMIDLIST@@PEAG@Z
0x18007F370: "__vectorcall ??_R0?AVIScanProgressInfoQueue@ThreatAbstraction@" ??_R0?AVIScanProgressInfoQueue@ThreatAbstraction@@@8
0x180010E10: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefObject@CommonUtil@@MEAAPEAXI@Z
0x18005D7D0: "Units" ??_C@_1M@MJEBNLHK@?$AAU?$AAn?$AAi?$AAt?$AAs?$AA?$AA@
0x180067218: "__vectorcall ??_R1A@?0A@EA@IActionEvents@ThreatAbstraction" ??_R1A@?0A@EA@IActionEvents@ThreatAbstraction@@8
0x1800029D8: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::LoadStringW(unsigned int) __ptr64" ?LoadStringW@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHI@Z
0x18005B218: "__cdecl _imp_MpConfigInitialize" __imp_MpConfigInitialize
0x1800627B8: ".//BrandedStrings" ??_C@_1CE@ICODDCAA@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18006A680: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContexts'}" ??_R4CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x18005EEB0: "211" ??_C@_17NKIEDPFK@?$AA2?$AA1?$AA1?$AA?$AA@
0x18002D9F0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsAvailableAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAHW4PermissibleAction@2@@Z
0x180001EE0: GetHelperDllFullPath
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IContextEvents::`vector deleting destructor'(unsigned int) __ptr64" ??_EIContextEvents@ThreatAbstraction@@UEAAPEAXI@Z
0x180005450: "public: virtual void __cdecl MpWmiCleanProgress::OnActionCompletion(long,unsigned long) __ptr64" ?OnActionCompletion@MpWmiCleanProgress@@UEAAXJK@Z
0x180005464: "public: __cdecl CommonUtil::AutoRef<class MpWmiCleanProgress>::~AutoRef<class MpWmiCleanProgress>(void) __ptr64" ??1?$AutoRef@VMpWmiCleanProgress@@@CommonUtil@@QEAA@XZ
0x180062BC0: " and @file and @type]" ??_C@_1CM@LPJKDLHP@?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAt?$AAy?$AAp?$AAe?$AA?$FN?$AA?$AA@
0x18005F858: "264" ??_C@_17PAFPPPNA@?$AA2?$AA6?$AA4?$AA?$AA@
0x180005440: "public: virtual void __cdecl ThreatAbstraction::IContextEvents::OnRoutineCleanStart(class ThreatAbstraction::IDetectionContexts const * __ptr64) __ptr64" ?OnRoutineCleanStart@IContextEvents@ThreatAbstraction@@UEAAXPEBVIDetectionContexts@2@@Z
0x18001C220: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuarantineController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005DD20: "QuickScanAge" ??_C@_1BK@HBAFJGMG@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x180041930: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedColors::HrGetColor(unsigned short const * __ptr64,unsigned long & __ptr64)const __ptr64" ?HrGetColor@CBrandedColors@SecurityClient@Microsoft@@UEBAJPEBGAEAK@Z
0x18005D308: "Correlatable" ??_C@_1BK@OJBCPINF@?$AAC?$AAo?$AAr?$AAr?$AAe?$AAl?$AAa?$AAt?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x1800232F0: "protected: struct std::pair<class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned long> > >,bool> __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Insert_nohint<unsigned long const & __ptr64,struct std::_Nil>(bool,unsigned long const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_nohint@AEBKU_Nil@std@@@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@K@std@@@std@@@std@@_N@1@_NAEBKU_Nil@1@@Z
0x1800299A0: "[thunk]:public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatStatus`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_STATUS@@XZ
0x18006D838: "const Microsoft::SecurityClient::CBrandedValues::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_R4CBrandedValues@SecurityClient@Microsoft@@6BIXMLBrandedValues@12@@
0x180060550: "PurgeItemsAfterDelay" ??_C@_1CK@DONOAMGO@?$AAP?$AAu?$AAr?$AAg?$AAe?$AAI?$AAt?$AAe?$AAm?$AAs?$AAA?$AAf?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180078CE0: "__stdcall CT??_R0PEAVEUnknownError@MorroCommon@@" _CT??_R0PEAVEUnknownError@MorroCommon@@@88
0x18005CAB8: "argument out of domain" ??_C@_0BH@CGIMPKIM@argument?5out?5of?5domain?$AA@
0x180029660: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x180031620: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateThreadImpl(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned __int64,unsigned long (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CreateThreadImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@_KP6AKPEAX@Z2KPEAK@Z
0x18005C6C0: "no such file or directory" ??_C@_0BK@NDOCBPGE@no?5such?5file?5or?5directory?$AA@
0x18005D478: "Indication" ??_C@_1BG@FMEACBDF@?$AAI?$AAn?$AAd?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800457F0: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x1800202C0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextCompleted`vtordisp{4294967292,8}' (class ThreatAbstraction::IDetectionContext const * __ptr64) __ptr64" ?OnContextCompleted@CContextManager@ThreatAbstraction@@$2PPPPPPPM@7EAAXPEBVIDetectionContext@2@@Z
0x18005CB18: "connection aborted" ??_C@_0BD@MGNDDEGM@connection?5aborted?$AA@
0x18001AEC4: "public: virtual __cdecl ThreatAbstraction::CActiveThreatsController::~CActiveThreatsController(void) __ptr64" ??1CActiveThreatsController@ThreatAbstraction@@UEAA@XZ
0x18005B458: "__cdecl _imp__wchmod" __imp__wchmod
0x180050398: "const CWString::`vftable'{for `ILockable'}" ??_7CWString@@6BILockable@@@
0x180078D50: "__cdecl TI3?AVCHResultExceptionImpl@CommonUtil@@" _TI3?AVCHResultExceptionImpl@CommonUtil@@
0x180028F30: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoActionManager::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_ECAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180012630: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::GetNilString(void) __ptr64" ?GetNilString@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@XZ
0x18001EFE4: "public: __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveThreatsContextManager(void) __ptr64" ??0CActiveThreatsContextManager@ThreatAbstraction@@QEAA@XZ
0x1800833D0: "private: static class CommonUtil::AutoRef<class MpCommonEx::CBrandedResourceWrapper::CBrandingSettings> MpCommonEx::CBrandedResourceWrapper::m_apSettings" ?m_apSettings@CBrandedResourceWrapper@MpCommonEx@@0V?$AutoRef@VCBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@@CommonUtil@@A
0x18005CBB8: "file too large" ??_C@_0P@DNAJLBJK@file?5too?5large?$AA@
0x180062758: WPP_9003b88d62443af8b93e7346d9e866de_Traceguids
0x180029760: "[thunk]:public: virtual enum tagMP_CONFIG_ORIGIN __cdecl ThreatAbstraction::CAutoIgnoreThreat::GetOrigin`vtordisp{4294967292,0}' (void)const __ptr64" ?GetOrigin@CAutoIgnoreThreat@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMP_CONFIG_ORIGIN@@XZ
0x1800612B8: "MpPreference" ??_C@_0N@ODEGHBBE@MpPreference?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::`vector deleting destructor'(unsigned int) __ptr64" ??_EIDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@UEBAJXZ
0x180040698: "public: static long __cdecl Microsoft::SecurityClient::CFeatureBrand::HrCreate(struct Microsoft::SecurityClient::IXMLFeatures * __ptr64 * __ptr64,struct Microsoft::SecurityClient::IXMLReader const * __ptr64)" ?HrCreate@CFeatureBrand@SecurityClient@Microsoft@@SAJPEAPEAUIXMLFeatures@23@PEBUIXMLReader@23@@Z
0x18005ABC0: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x180017AB8: "public: void __cdecl ThreatAbstraction::COnDemandController::CScanContext::UninitializeScan(void) __ptr64" ?UninitializeScan@CScanContext@COnDemandController@ThreatAbstraction@@QEAAXXZ
0x180080258: "__vectorcall ??_R0?AVinvalid_argument@std@" ??_R0?AVinvalid_argument@std@@@8
0x180062880: "SignatureUpdateFrequency" ??_C@_1DC@BIFIGJAL@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAF?$AAr?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x18007E8A8: "__vectorcall ??_R0?AW4_MI_Result@" ??_R0?AW4_MI_Result@@@8
0x18005CCA0: "no buffer space" ??_C@_0BA@PFFCAOFK@no?5buffer?5space?$AA@
0x18005D8EC: "4" ??_C@_13KBPCEPBF@?$AA4?$AA?$AA@
0x18005E738: "164" ??_C@_17HONAPIDD@?$AA1?$AA6?$AA4?$AA?$AA@
0x180069548: "__vectorcall ??_R1A@?0A@EA@CScanProgressInfoQueue@ThreatAbstraction" ??_R1A@?0A@EA@CScanProgressInfoQueue@ThreatAbstraction@@8
0x18006E648: "__cdecl tls_end" _tls_end
0x180016D00: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CServiceStatusController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECServiceStatusController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005D2B8: "BitValues" ??_C@_1BE@HJGFNHBG@?$AAB?$AAi?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AA?$AA@
0x1800834F0: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4V43@A
0x180016DB0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CHResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHResultException@CommonUtil@@MEAAPEAXI@Z
0x18005B0E8: "__cdecl _imp_CryptCATCatalogInfoFromContext" __imp_CryptCATCatalogInfoFromContext
0x180060AE8: "Signature Updates" ??_C@_1CE@JMMCENKD@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?5?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAs?$AA?$AA@
0x18005DB60: "20" ??_C@_15PHKEAAFL@?$AA2?$AA0?$AA?$AA@
0x180069178: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CUpdateContext@CHeartBeatController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18000ED00: MSFT_MpThreatDetection_DeleteInstance
0x180045BA0: "__cdecl XcptFilter" _XcptFilter
0x18005B110: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x18005CD88: "not connected" ??_C@_0O@GLMIBBEG@not?5connected?$AA@
0x18005B2D0: "__cdecl _imp_MpTriggerHeartbeatOnUninstall" __imp_MpTriggerHeartbeatOnUninstall
0x18005E618: "153" ??_C@_17GFJDLCCE@?$AA1?$AA5?$AA3?$AA?$AA@
0x18006B448: "__vectorcall ??_R1A@?0A@EA@CScanHistoryDetectionContext@ThreatAbstraction" ??_R1A@?0A@EA@CScanHistoryDetectionContext@ThreatAbstraction@@8
0x18005B4C0: "__cdecl _xc_a" __xc_a
0x18002C8E4: "private: bool __cdecl ThreatAbstraction::CDetectionContextBase::AddDetectionResources(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ?AddDetectionResources@CDetectionContextBase@ThreatAbstraction@@AEAA_NPEAUtagMPTHREAT_INFO@@@Z
0x18005DABC: "17" ??_C@_15OMOHEKEM@?$AA1?$AA7?$AA?$AA@
0x18006BF78: "__vectorcall ??_R1A@73FA@IRefObject@CommonUtil" ??_R1A@73FA@IRefObject@CommonUtil@@8
0x180062060: "const ThreatAbstraction::CScanHistoryDetectionContext::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8CScanHistoryDetectionContext@ThreatAbstraction@@7BIThreatInfo@1@@
0x18005B450: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18005D768: "SyntaxType" ??_C@_1BG@PIHGCGHO@?$AAS?$AAy?$AAn?$AAt?$AAa?$AAx?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18006A588: "__vectorcall ??_R1A@?0A@EA@CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@8
0x180061020: "Windows Defender Exploit Guard\C" ??_C@_1JI@DKOFCEJN@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAC@
0x18005E920: "185" ??_C@_17PMGGPOCG@?$AA1?$AA8?$AA5?$AA?$AA@
0x18005AE58: "__cdecl _imp_FreeResource" __imp_FreeResource
0x180060030: "Set_ProcessName" ??_C@_0BA@HFIDBEDF@Set_ProcessName?$AA@
0x180068BC8: "__vectorcall ??_R2CSimpleMpConfigComWriter@ThreatAbstraction" ??_R2CSimpleMpConfigComWriter@ThreatAbstraction@@8
0x180068C50: "__vectorcall ??_R3CSimpleMpConfigComWriter@ThreatAbstraction" ??_R3CSimpleMpConfigComWriter@ThreatAbstraction@@8
0x18005AE00: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x18005DCB4: "34" ??_C@_15LDJKEEKJ@?$AA3?$AA4?$AA?$AA@
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180068788: "const ThreatAbstraction::CServiceStatusController::`RTTI Complete Object Locator'" ??_R4CServiceStatusController@ThreatAbstraction@@6B@
0x18004F738: "const ThreatAbstraction::CDetectionContextBase::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CDetectionContextBase@ThreatAbstraction@@6BIThreatInfo@1@@
0x18002A9A4: "public: virtual enum tagMP_CONFIG_ORIGIN __cdecl ThreatAbstraction::CAutoIgnoreThreat::GetOrigin(void)const __ptr64" ?GetOrigin@CAutoIgnoreThreat@ThreatAbstraction@@UEBA?AW4tagMP_CONFIG_ORIGIN@@XZ
0x18001C0B0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,32}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@CA@EBAXXZ
0x1800321E0: "public: virtual __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::~CBrandingSettings(void) __ptr64" ??1CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEAA@XZ
0x18004EF88: "const ThreatAbstraction::COnDemandDetectionContext::`vftable'{for `ILockable'}" ??_7COnDemandDetectionContext@ThreatAbstraction@@6BILockable@@@
0x1800390FC: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCatalogCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftCatalogCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x1800193F0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,40}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@CI@EBAXXZ
0x18002A730: "[thunk]:public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatStatus`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4tagMPTHREAT_STATUS@@XZ
0x180010AD8: "protected: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned __int64> > > __cdecl std::_Tree<class std::_Tset_traits<unsigned __int64,struct std::less<unsigned __int64>,class std::allocator<unsigned __int64>,0> >::_Insert_at<unsigned __int64 const & __ptr64,struct std::_Nil>(bool,struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64,unsigned __int64 const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_at@AEB_KU_Nil@std@@@?$_Tree@V?$_Tset_traits@_KU?$less@_K@std@@V?$allocator@_K@2@$0A@@std@@@std@@IEAA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@_K@std@@@std@@@1@_NPEAU?$_Tree_node@_KPEAX@1@AEB_KU_Nil@1@@Z
0x18005F560: "249" ??_C@_17EPPNIGAG@?$AA2?$AA4?$AA9?$AA?$AA@
0x180046010: "__cdecl _imp_load_SHGetFolderPathW" __imp_load_SHGetFolderPathW
0x18005CFC0: "ext-ms-win-shell-shell32-l1-2-1" ??_C@_1EA@GIJDHLDK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA1?$AA?$AA@
0x18005B1D0: "__cdecl _imp_GetFileVersionInfoSizeW" __imp_GetFileVersionInfoSizeW
0x180039BA4: "long __cdecl HrMpAllocBuffer(unsigned char * __ptr64 * __ptr64,unsigned __int64,bool)" ?HrMpAllocBuffer@@YAJPEAPEAE_K_N@Z
0x18002E010: "public: __cdecl ThreatAbstraction::CThreatInfo::CThreatInfo(unsigned __int64) __ptr64" ??0CThreatInfo@ThreatAbstraction@@QEAA@_K@Z
0x18006DC58: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_R4?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedColors@SecurityClient@Microsoft@@@
0x180052C90: MSFT_MpThreatCatalog_rtti
0x18002AD80: "bool __cdecl ThreatAbstraction::operator<(class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64)" ??MThreatAbstraction@@YA_NAEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@0@Z
0x18005EE70: "209" ??_C@_17NEGMMEBA@?$AA2?$AA0?$AA9?$AA?$AA@
0x180050548: "const Microsoft::SecurityClient::CBrandedStrings::`vftable'{for `CommonUtil::IRefObject'}" ??_7CBrandedStrings@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180016850: "class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64 __cdecl std::_Uninit_move<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > & __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@PEAV1@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@V1@@std@@YAPEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@PEAV1@00AEAU?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18005E468: "LastThreatStatusChangeTime" ??_C@_1DG@ILHMGCLI@?$AAL?$AAa?$AAs?$AAt?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18006D9C8: "__vectorcall ??_R3CFeatureBrand@SecurityClient@Microsoft" ??_R3CFeatureBrand@SecurityClient@Microsoft@@8
0x18006D8D8: "__vectorcall ??_R2CFeatureBrand@SecurityClient@Microsoft" ??_R2CFeatureBrand@SecurityClient@Microsoft@@8
0x180034110: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x1800026C4: "void __cdecl MpMIUtil::LogOnFailedHr(struct _MI_Context * __ptr64,long,unsigned short const * __ptr64,unsigned short const * __ptr64,bool)" ?LogOnFailedHr@MpMIUtil@@YAXPEAU_MI_Context@@JPEBG1_N@Z
0x18002BC88: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatName(void)const __ptr64" ?GetThreatName@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18002CB68: "private: bool __cdecl ThreatAbstraction::CDetectionContextBase::AddDetectionThreats(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ?AddDetectionThreats@CDetectionContextBase@ThreatAbstraction@@AEAA_NPEAUtagMPTHREAT_INFO@@@Z
0x180030E30: "protected: virtual int __cdecl MorroCommon::CWin32::GetSystemMetricsImpl(int) __ptr64" ?GetSystemMetricsImpl@CWin32@MorroCommon@@MEAAHH@Z
0x180031490: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileSizeExImpl(void * __ptr64,union _LARGE_INTEGER * __ptr64) __ptr64" ?GetFileSizeExImpl@CWin32@MorroCommon@@MEAAHPEAXPEAT_LARGE_INTEGER@@@Z
0x180045EDC: IsSHGetPathFromIDListWPresent
0x1800622D0: WPP_5fd3309df4103c74f7a4f5a491cb733a_Traceguids
0x180061F68: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`vbtable'" ??_8CUpdateContext@CWDOScanController@ThreatAbstraction@@7B@
0x180062190: "const ThreatAbstraction::COnDemandDetectionContext::`vbtable'{for `CRefCountedBase'}" ??_8COnDemandDetectionContext@ThreatAbstraction@@7BCRefCountedBase@@@
0x18007FE20: "__vectorcall ??_R0?AUIBrandedResources@MpCommonEx@" ??_R0?AUIBrandedResources@MpCommonEx@@@8
0x18006C998: "const CThreadManager::`RTTI Complete Object Locator'" ??_R4CThreadManager@@6B@
0x18007EDF8: "__vectorcall ??_R0?AVCPseudoRefCountedBase@" ??_R0?AVCPseudoRefCountedBase@@@8
0x18005AC68: "__cdecl _imp_GetTimeZoneInformation" __imp_GetTimeZoneInformation
0x18005D860: "Weak" ??_C@_19PADJAIJK@?$AAW?$AAe?$AAa?$AAk?$AA?$AA@
0x180067AF0: "__vectorcall ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1A@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x180029B40: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsActionTaken`vtordisp{4294967292,0}' (void)const __ptr64" ?IsActionTaken@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x18004DDB0: "const ThreatAbstraction::CActiveThreatsController::`vftable'" ??_7CActiveThreatsController@ThreatAbstraction@@6B@
0x1800384FC: "public: class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64 __cdecl ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > >::operator=(char const * __ptr64) __ptr64" ??4?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBD@Z
0x18005AE70: "__cdecl _imp_FindClose" __imp_FindClose
0x18002C4B0: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::SetActionStatus(long) __ptr64" ?SetActionStatus@CDetectionContextBase@ThreatAbstraction@@UEAAXJ@Z
0x180013E6C: "public: long __cdecl CData::ConfigOpenIterator(unsigned short const * __ptr64) __ptr64" ?ConfigOpenIterator@CData@@QEAAJPEBG@Z
0x18005C950: "network_down" ??_C@_0N@FCPALPJK@network_down?$AA@
0x18006AE20: "__vectorcall ??_R3?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@" ??_R3?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@8
0x1800185A8: "public: int __cdecl ThreatAbstraction::COnDemandController::IsScanInProgress(void)const __ptr64" ?IsScanInProgress@COnDemandController@ThreatAbstraction@@QEBAHXZ
0x18006ABE8: "__vectorcall ??_R2?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@" ??_R2?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@8
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoIgnoreThreat::`vector deleting destructor'(unsigned int) __ptr64" ??_EIAutoIgnoreThreat@ThreatAbstraction@@UEAAPEAXI@Z
0x18002088C: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionStats::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionStats@CContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18004EAA0: "const ThreatAbstraction::CQuarantineContextManager::`vftable'{for `CRefCountedBase'}" ??_7CQuarantineContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x18005F0F8: "226" ??_C@_17MBMHHFEN@?$AA2?$AA2?$AA6?$AA?$AA@
0x18002A960: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreat::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAutoIgnoreThreat@ThreatAbstraction@@UEAAPEAXI@Z
0x18006BB18: "const ThreatAbstraction::IDetectionContext::CResource::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext::CResource'}" ??_R4CResource@IDetectionContext@ThreatAbstraction@@6B012@@
0x1800413E0: "private: void __cdecl Microsoft::SecurityClient::CBrandedColors::Initialize(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ?Initialize@CBrandedColors@SecurityClient@Microsoft@@AEAAXPEBUIXMLReader@23@@Z
0x18005E4C8: "131" ??_C@_17BJMDJJLC@?$AA1?$AA3?$AA1?$AA?$AA@
0x18003F150: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedStrings::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECBrandedStrings@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180062178: "const ThreatAbstraction::CQuarantineDetectionContext::`vbtable'{for `ThreatAbstraction::IDetectionContext'}" ??_8CQuarantineDetectionContext@ThreatAbstraction@@7BIDetectionContext@1@@
0x180068B00: "const ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@6BILockable@@@
0x18005CD10: "no stream resources" ??_C@_0BE@MKFDAFMP@no?5stream?5resources?$AA@
0x180022200: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnClearContextEventHandler(void) __ptr64" ?OnClearContextEventHandler@CContextManager@ThreatAbstraction@@MEAAXXZ
0x18005ED88: "SignatureFallbackOrder" ??_C@_1CO@EPHKHLPF@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x18003EC68: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@XZ
0x18004DB78: "const CError::`vftable'" ??_7CError@@6B@
0x18004DDE0: "const ThreatAbstraction::CWDOScanController::`vftable'" ??_7CWDOScanController@ThreatAbstraction@@6B@
0x18004F808: "const ThreatAbstraction::CDetectionContextBase::`vftable'{for `ILockable'}" ??_7CDetectionContextBase@ThreatAbstraction@@6BILockable@@@
0x1800629C0: "CompInstall" ??_C@_1BI@OGDINOCK@?$AAC?$AAo?$AAm?$AAp?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?$AA@
0x18001281C: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x1800247E0: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Lock`vtordisp{4294967292,0}' (void)const __ptr64" ?Lock@CPseudoLockBase@@$4PPPPPPPM@A@EBAXXZ
0x18004E468: "const ThreatAbstraction::IContextEventsImpl::`vftable'{for `IRefCounted'}" ??_7IContextEventsImpl@ThreatAbstraction@@6BIRefCounted@@@
0x18000F100: MSFT_MpEvent_DisableIndications
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::deallocate(class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@_K@Z
0x18004EEB8: "const ThreatAbstraction::COnDemandDetectionContext::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7COnDemandDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x18005F818: "EnableLowCpuPriority" ??_C@_1CK@IBIOOAJM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAo?$AAw?$AAC?$AAp?$AAu?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x18006C098: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandedResources'}" ??_R4?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@6BIBrandedResources@MpCommonEx@@@
0x180039D34: "public: __cdecl CCritSectionBase::CCritSectionBase(unsigned long) __ptr64" ??0CCritSectionBase@@QEAA@K@Z
0x18001B504: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWDOScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x18006DA70: "const Microsoft::SecurityClient::CFeatureBrand::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CFeatureBrand@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18004057C: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CFeatureBrand::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCFeatureBrand@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180079060: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0
0x18006AF90: "const ThreatAbstraction::CAutoActionManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IAutoActionManager'}" ??_R4CAutoActionManager@ThreatAbstraction@@6BIAutoActionManager@1@@
0x1800695C8: "const ThreatAbstraction::CScanProgressInfoQueue::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgressInfoQueue'}" ??_R4CScanProgressInfoQueue@ThreatAbstraction@@6BIScanProgressInfoQueue@1@@
0x180011C50: "public: __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAA@XZ
0x18005C928: "message_size" ??_C@_0N@HPMLKHPL@message_size?$AA@
0x1800626A8: WPP_af44aed7928d36b3a845cf895c8b8d6e_Traceguids
0x18001FB38: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> >,0> >::_Insert_hint<struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > >,struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CB_KK@std@@PEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CB_KK@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CB_KK@std@@@std@@@std@@@1@AEAU?$pair@$$CB_KK@1@PEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@1@@Z
0x18005F890: "Add" ??_C@_17FIMLMPPN@?$AAA?$AAd?$AAd?$AA?$AA@
0x18006B058: "const ThreatAbstraction::IAutoActionManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IAutoActionManager'}" ??_R4IAutoActionManager@ThreatAbstraction@@6B01@@
0x18003E8AC: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Erase(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@Z
0x18005AE40: "__cdecl _imp_CreateToolhelp32Snapshot" __imp_CreateToolhelp32Snapshot
0x180016660: "[thunk]:public: virtual class ThreatAbstraction::IAutoIgnoreThreat * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Get`vtordisp{4294967292,0}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EAAPEAVIAutoIgnoreThreat@ThreatAbstraction@@K@Z
0x180016640: "[thunk]:public: virtual class ThreatAbstraction::IAutoIgnoreThreat const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Get`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EBAPEBVIAutoIgnoreThreat@ThreatAbstraction@@K@Z
0x1800624F8: WPP_568b80391c753c099429bca14daa8ff6_Traceguids
0x180030F50: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateToolhelp32SnapshotImpl(unsigned long,unsigned long) __ptr64" ?CreateToolhelp32SnapshotImpl@CWin32@MorroCommon@@MEAAPEAXKK@Z
0x180043F10: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::Release`vtordisp{4294967292,72}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@EI@EBAJXZ
0x180043E90: "class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64 __cdecl std::_Uninit_copy<class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >(class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,class std::_Vector_const_iterator<class std::_Vector_val<struct std::_Simple_types<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > >,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > & __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_copy@V?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@PEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@2@@std@@YAPEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@0@0PEAV12@AEAU?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@0@U_Nonscalar_ptr_iterator_tag@0@@Z
0x1800506E0: "const Microsoft::SecurityClient::CFeatureBrand::`vftable'{for `CommonUtil::IRefObject'}" ??_7CFeatureBrand@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18003FB44: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18005FED0: WPP_22f48c0d955a386beeb94700249240f9_Traceguids
0x180030A90: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryImpl(unsigned short const * __ptr64) __ptr64" ?LoadLibraryImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBG@Z
0x18001D050: "[thunk]:public: virtual class ThreatAbstraction::IScanProgressInfo const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfoQueue::GetNextScanProgressInfo`vtordisp{4294967292,0}' (void) __ptr64" ?GetNextScanProgressInfo@CScanProgressInfoQueue@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEBVIScanProgressInfo@2@XZ
0x180045D8B: "__cdecl lock" _lock
0x18005FA78: "283" ??_C@_17FHICKGBJ@?$AA2?$AA8?$AA3?$AA?$AA@
0x18002BBD4: "public: virtual enum ThreatAbstraction::IDetectionContext::DetectionLevel __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionLevel(void)const __ptr64" ?GetDetectionLevel@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4DetectionLevel@IDetectionContext@2@XZ
0x180061E90: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x18005D6A8: "Provider" ??_C@_1BC@KFGOOCHO@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180050568: "const Microsoft::SecurityClient::CBrandedStrings::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_7CBrandedStrings@SecurityClient@Microsoft@@6BIXMLBrandedStrings@12@@
0x18005B180: "__cdecl _imp_PathRemoveFileSpecW" __imp_PathRemoveFileSpecW
0x180080230: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x180025F50: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::GetCount`vtordisp{4294967292,40}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CI@EBAKXZ
0x180016570: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::GetCount`vtordisp{4294967292,8}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@7EBAKXZ
0x18005FFF8: "Construct" ??_C@_09LMEBHIDN@Construct?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedValues::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLBrandedValues@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18002F424: ??1?$CAutoHandle@PEAUtagMPTHREAT_LOCALIZED_INFO@@$1?_FreeLocalizedThreatInfo@ThreatAbstraction@@YAXPEAU1@PEAX@Z@@QEAA@XZ
0x18000ECC0: MSFT_MpComputerStatus_Load
0x18005C810: "bad_file_descriptor" ??_C@_0BE@DLHHIBGN@bad_file_descriptor?$AA@
0x18006B698: "const ThreatAbstraction::CQuarantineDetectionContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CQuarantineDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x180035530: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithModuleDirImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithModuleDirImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005AFC8: "__cdecl _imp_SysStringByteLen" __imp_SysStringByteLen
0x1800245B0: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::GetCount`vtordisp{4294967292,32}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CA@EBAKXZ
0x180050438: "const Microsoft::SecurityClient::IXMLReader::`vftable'{for `Microsoft::SecurityClient::IXMLReader'}" ??_7IXMLReader@SecurityClient@Microsoft@@6B012@@
0x1800676E8: "__vectorcall ??_R1A@?0A@EA@IScanProgress@ThreatAbstraction" ??_R1A@?0A@EA@IScanProgress@ThreatAbstraction@@8
0x1800303A0: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x1800678B0: "const MpWmiSignatureProgress::`RTTI Complete Object Locator'" ??_R4MpWmiSignatureProgress@@6B@
0x18004D7C8: "const ISequence<class ThreatAbstraction::IDetectionContext>::`vftable'{for `IRefCounted'}" ??_7?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6BIRefCounted@@@
0x18002F418: "public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CThreatInfo::GetDetectionSource(void)const __ptr64" ?GetDetectionSource@CThreatInfo@ThreatAbstraction@@UEBA?AW4tagMPSOURCE@@XZ
0x18005D2D0: "ClassConstraint" ??_C@_1CA@GIBGNCJD@?$AAC?$AAl?$AAa?$AAs?$AAs?$AAC?$AAo?$AAn?$AAs?$AAt?$AAr?$AAa?$AAi?$AAn?$AAt?$AA?$AA@
0x180067898: "__vectorcall ??_R3ISignaturesUpdateCallback@ThreatAbstraction" ??_R3ISignaturesUpdateCallback@ThreatAbstraction@@8
0x18005DB10: "NISSignatureVersion" ??_C@_1CI@JICIHIHD@?$AAN?$AAI?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18003B644: "long __cdecl CommonUtil::HrGetFileAttributes(unsigned long * __ptr64,unsigned short const * __ptr64)" ?HrGetFileAttributes@CommonUtil@@YAJPEAKPEBG@Z
0x180067818: "__vectorcall ??_R2ISignaturesUpdateCallback@ThreatAbstraction" ??_R2ISignaturesUpdateCallback@ThreatAbstraction@@8
0x180030B80: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::WaitForSingleObjectImpl(void * __ptr64,unsigned long) __ptr64" ?WaitForSingleObjectImpl@CWin32@MorroCommon@@MEAAKPEAXK@Z
0x18002C52C: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsActionTaken(void)const __ptr64" ?IsActionTaken@CDetectionContextBase@ThreatAbstraction@@UEBAHXZ
0x180061F08: "/q MORRO" ??_C@_1BC@NLPIIJKF@?$AA?1?$AAq?$AA?5?$AAM?$AAO?$AAR?$AAR?$AAO?$AA?$AA@
0x1800276A8: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class ThreatAbstraction::CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Insert_nohint<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,struct std::_Nil>(bool,struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&,struct std::_Nil) __ptr64" ??$_Insert_nohint@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@U_Nil@2@@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@ThreatAbstraction@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@std@@_N@1@_N$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@U_Nil@1@@Z
0x180083518: DloadSrwLock
0x18004E6C0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vftable'" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6B@
0x180068AA8: "__vectorcall ??_R1A@?0A@EA@CScheduledScanController@ThreatAbstraction" ??_R1A@?0A@EA@CScheduledScanController@ThreatAbstraction@@8
0x18005DE08: "IoavProtectionEnabled" ??_C@_1CM@ECMPGMPA@?$AAI?$AAo?$AAa?$AAv?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18005B010: "__cdecl _imp_DestroyIcon" __imp_DestroyIcon
0x180014480: "public: __cdecl CommonUtil::AutoRef<class Microsoft::SecurityClient::CXMLReader>::~AutoRef<class Microsoft::SecurityClient::CXMLReader>(void) __ptr64" ??1?$AutoRef@VCXMLReader@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180003218: "class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MpMIUtil::LoadWmiString(unsigned int,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >)" ?LoadWmiString@MpMIUtil@@YA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@IV23@@Z
0x18000BB80: "public: virtual void __cdecl MpWmiScanProgress::OnScanProgress(void) __ptr64" ?OnScanProgress@MpWmiScanProgress@@UEAAXXZ
0x18005E100: "79" ??_C@_15NKGBNOGC@?$AA7?$AA9?$AA?$AA@
0x180080E20: "__vectorcall ??_R0?AV?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@" ??_R0?AV?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@@8
0x18007FEB8: "__vectorcall ??_R0?AVCFileUtils@MorroCommon@" ??_R0?AVCFileUtils@MorroCommon@@@8
0x18007E530: "public: static class std::_System_error_category std::_Error_objects<int>::_System_object" ?_System_object@?$_Error_objects@H@std@@2V_System_error_category@2@A
0x1800246B0: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAPEAXI@Z
0x180050590: "const Microsoft::SecurityClient::IXMLBrandedValues::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLBrandedValues@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18003FBA0: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@UEAAPEAXI@Z
0x180045B23: "__cdecl callnewh" _callnewh
0x180068D40: "__vectorcall ??_R1A@?0A@EA@CSignatureUpdateController@ThreatAbstraction" ??_R1A@?0A@EA@CSignatureUpdateController@ThreatAbstraction@@8
0x18005D520: "MethodConstraint" ??_C@_1CC@EDLMECMM@?$AAM?$AAe?$AAt?$AAh?$AAo?$AAd?$AAC?$AAo?$AAn?$AAs?$AAt?$AAr?$AAa?$AAi?$AAn?$AAt?$AA?$AA@
0x1800297A0: "[thunk]:public: virtual enum ThreatAbstraction::IDetectionContext::DetectionLevel __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionLevel`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDetectionLevel@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4DetectionLevel@IDetectionContext@2@XZ
0x1800144B4: "public: __cdecl CSmartPtr<struct ThreatAbstraction::ISimpleMpConfigWriter,class VolatileOps<struct ThreatAbstraction::ISimpleMpConfigWriter> >::~CSmartPtr<struct ThreatAbstraction::ISimpleMpConfigWriter,class VolatileOps<struct ThreatAbstraction::ISimpleMpConfigWriter> >(void) __ptr64" ??1?$CSmartPtr@UISimpleMpConfigWriter@ThreatAbstraction@@V?$VolatileOps@UISimpleMpConfigWriter@ThreatAbstraction@@@@@@QEAA@XZ
0x18006A8F8: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18003ACF8: "void __cdecl CommonUtil::UtilSetEvent(void * __ptr64)" ?UtilSetEvent@CommonUtil@@YAXPEAX@Z
0x18005F9C0: "MSFT_MpEvent" ??_C@_1BK@JMJJMDGB@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x18005AEE8: "__cdecl _imp_WritePrivateProfileStringW" __imp_WritePrivateProfileStringW
0x18005E3B0: "122" ??_C@_17MACKOFPJ@?$AA1?$AA2?$AA2?$AA?$AA@
0x18005AE80: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x18006E0F8: "__vectorcall ??_R3?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R3?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18006DE28: "__vectorcall ??_R2?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R2?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18005B2B8: "__cdecl _imp_MpConfigUnregisterNotifications" __imp_MpConfigUnregisterNotifications
0x180016078: "public: virtual class ThreatAbstraction::IAutoIgnoreThreat * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Get(unsigned long) __ptr64" ?Get@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAVIAutoIgnoreThreat@ThreatAbstraction@@K@Z
0x180016144: "public: virtual class ThreatAbstraction::IAutoIgnoreThreat const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Get(unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEBAPEBVIAutoIgnoreThreat@ThreatAbstraction@@K@Z
0x18001B210: "public: static class ThreatAbstraction::CActiveThreatsController * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsController::GetInstance(void)" ?GetInstance@CActiveThreatsController@ThreatAbstraction@@SAPEAV12@XZ
0x180011C50: "public: __cdecl std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool>::~pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool>(void) __ptr64" ??1?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@QEAA@XZ
0x18005B360: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180061F70: WPP_620d6dcb446233cfa61028eb2bf687f6_Traceguids
0x1800194F0: "public: virtual long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::WriteString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WriteString@CSimpleMpConfigComWriter@ThreatAbstraction@@UEAAJPEBG00@Z
0x18005C5E0: "__cdecl _guard_iat_table" __guard_iat_table
0x18005E1F0: "106" ??_C@_17CIANDKF@?$AA1?$AA0?$AA6?$AA?$AA@
0x18003A9E0: "long __cdecl CommonUtil::HrDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrDuplicateStringW@CommonUtil@@YAJPEAPEAGPEBG@Z
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18002AC10: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownGood`vtordisp{4294967292,8}' (void)const __ptr64" ?IsKnownGood@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAHXZ
0x180002260: MI_Main
0x18007FF38: "__vectorcall ??_R0PEAVEUnknownError@MorroCommon@" ??_R0PEAVEUnknownError@MorroCommon@@@8
0x18002A630: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetResourceCount`vtordisp{4294967292,40}' (void)const __ptr64" ?GetResourceCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x180068340: "const ThreatAbstraction::CExceptionThreats::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CExceptionThreats@ThreatAbstraction@@6BCCritSectionBase@@@
0x180035224: "public: static long __cdecl MpCommonEx::CFileUtilsEx::SafeLoadLibrary(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?SafeLoadLibrary@CFileUtilsEx@MpCommonEx@@SAJPEAPEAUHINSTANCE__@@PEBG@Z
0x180010DB0: "public: struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned long const,unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CBKK@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@XZ
0x180045B88: memcpy
0x18006E238: "const Microsoft::SecurityClient::IXMLDeployment::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLDeployment@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18004517C: "void __cdecl std::_Xout_of_range(char const * __ptr64)" ?_Xout_of_range@std@@YAXPEBD@Z
0x18005C8B8: "operation_in_progress" ??_C@_0BG@DJGBJIIK@operation_in_progress?$AA@
0x1800802E8: "__vectorcall ??_R0?AVCXMLReader@SecurityClient@Microsoft@" ??_R0?AVCXMLReader@SecurityClient@Microsoft@@@8
0x1800685E8: "const ILockable::`RTTI Complete Object Locator'" ??_R4ILockable@@6B@
0x1800058A4: "bool __cdecl ShouldProcess(struct _MI_Context * __ptr64,enum _MI_Result & __ptr64,struct _MI_ConstBooleanField)" ?ShouldProcess@@YA_NPEAU_MI_Context@@AEAW4_MI_Result@@U_MI_ConstBooleanField@@@Z
0x180083378: "private: static class CommonUtil::AutoRef<struct MpCommonEx::IBrandedResources> MpCommonEx::CBrandedResourceWrapper::m_pObj" ?m_pObj@CBrandedResourceWrapper@MpCommonEx@@0V?$AutoRef@UIBrandedResources@MpCommonEx@@@CommonUtil@@A
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x1800621B0: "const ThreatAbstraction::CQuarantineDetectionContext::`vbtable'{for `CRefCountedBase'}" ??_8CQuarantineDetectionContext@ThreatAbstraction@@7BCRefCountedBase@@@
0x18005EE78: "SignatureUpdateInterval" ??_C@_1DA@PPJFPCGJ@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1800261D4: "public: __cdecl ThreatAbstraction::CQuaMapGuard::~CQuaMapGuard(void) __ptr64" ??1CQuaMapGuard@ThreatAbstraction@@QEAA@XZ
0x180021E2C: "protected: unsigned long __cdecl ThreatAbstraction::CContextManager::GetNextAvailableID(void) __ptr64" ?GetNextAvailableID@CContextManager@ThreatAbstraction@@IEAAKXZ
0x18007E540: "public: static class std::_Generic_error_category std::_Error_objects<int>::_Generic_object" ?_Generic_object@?$_Error_objects@H@std@@2V_Generic_error_category@2@A
0x18005B068: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x18005EC40: "201" ??_C@_17BBNIOMPP@?$AA2?$AA0?$AA1?$AA?$AA@
0x1800817B0: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@@8
0x18005AC28: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180061EC0: "const ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`vbtable'" ??_8CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@7B@
0x18004601C: "__cdecl _tailMerge_ext_ms_win_shell32_shellfolders_l1_1_0_dll" __tailMerge_ext_ms_win_shell32_shellfolders_l1_1_0_dll
0x180069570: "__vectorcall ??_R1A@?0A@EA@IScanProgressInfoQueue@ThreatAbstraction" ??_R1A@?0A@EA@IScanProgressInfoQueue@ThreatAbstraction@@8
0x18002D038: "public: __cdecl std::_Tree<class std::_Tset_traits<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,0> >::~_Tree<class std::_Tset_traits<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tset_traits@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@$0A@@std@@@std@@QEAA@XZ
0x18005F558: "248" ??_C@_17PHEBOBGD@?$AA2?$AA4?$AA8?$AA?$AA@
0x180031230: "protected: virtual int __cdecl MorroCommon::CWin32::CheckTokenMembershipImpl(void * __ptr64,void * __ptr64,int * __ptr64) __ptr64" ?CheckTokenMembershipImpl@CWin32@MorroCommon@@MEAAHPEAX0PEAH@Z
0x18001D640: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSeverityName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x180039EF0: "public: virtual int __cdecl CCritSectionBase::TryLock(void)const __ptr64" ?TryLock@CCritSectionBase@@UEBAHXZ
0x18006C0C0: "const MpCommonEx::CBrandedAPI::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CBrandedAPI@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x18002AA30: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatID`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatID@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA_KXZ
0x18006A658: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`RTTI Complete Object Locator'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_R4CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x18005FA40: "ThreatNotificationsValue" ??_C@_1DC@GCPJPEAH@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18004633C: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18005F760: "ControlledFolderAccessAllowedApp" ??_C@_1FE@MELFJNDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAd?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAp?$AAp@
0x18005DD14: "36" ??_C@_15BJJDIMCC@?$AA3?$AA6?$AA?$AA@
0x180039FE0: "public: virtual __cdecl CError::~CError(void) __ptr64" ??1CError@@UEAA@XZ
0x18004DEC0: "const ThreatAbstraction::CScanHistoryController::`vftable'" ??_7CScanHistoryController@ThreatAbstraction@@6B@
0x18004D7E8: "const ISequence<class ThreatAbstraction::IDetectionContext>::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6B0@@
0x1800625C0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180016A88: "public: virtual __cdecl CPseudoRefCountedBase::~CPseudoRefCountedBase(void) __ptr64" ??1CPseudoRefCountedBase@@UEAA@XZ
0x18005F498: "241" ??_C@_17IKEJKOOJ@?$AA2?$AA4?$AA1?$AA?$AA@
0x18005DA50: "15" ??_C@_15EGOOICMH@?$AA1?$AA5?$AA?$AA@
0x180067008: "__vectorcall ??_R3error_category@std" ??_R3error_category@std@@8
0x180066FB8: "__vectorcall ??_R2error_category@std" ??_R2error_category@std@@8
0x18001BEC0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanHistoryController@ThreatAbstraction@@UEAAPEAXI@Z
0x1800681A8: "__vectorcall ??_R2?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R2?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x1800681C8: "__vectorcall ??_R3?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R3?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x1800202A0: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,72}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@EI@EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180020280: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,72}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@EI@EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x18007F708: "__vectorcall ??_R0?AVCDetectionContextBase@ThreatAbstraction@" ??_R0?AVCDetectionContextBase@ThreatAbstraction@@@8
0x18005FB50: "AdditionalData" ??_C@_1BO@KAAPCNKF@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18005ADE8: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x18005B4A0: "__cdecl _imp_memset" __imp_memset
0x18000ED00: MSFT_MpPreference_CreateInstance
0x18003C320: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18002DA30: "[thunk]:public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CThreatInfo::GetThreatStatus`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatStatus@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_STATUS@@XZ
0x180014650: "long __cdecl ThreatAbstraction::GetThreatsByType<class ThreatAbstraction::CActiveThreatsController>(unsigned long,class ThreatAbstraction::IDetectionContexts * __ptr64 * __ptr64)" ??$GetThreatsByType@VCActiveThreatsController@ThreatAbstraction@@@ThreatAbstraction@@YAJKPEAPEAVIDetectionContexts@0@@Z
0x180031110: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetProcessHeapImpl(void) __ptr64" ?GetProcessHeapImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x18001E2A0: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnSampleRequest(class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXPEAVISampleRequest@3@@Z
0x180061CB0: WPP_7bc32da227ab3973f3a3fba1a44931ff_Traceguids
0x18000B508: "protected: void __cdecl std::vector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@std@@IEBAXXZ
0x180031300: "protected: virtual int __cdecl MorroCommon::CWin32::ReadFileImpl(void * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadFileImpl@CWin32@MorroCommon@@MEAAHPEAX0KPEAKPEAU_OVERLAPPED@@@Z
0x18005AF50: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18002FE30: "long __cdecl MorroCommon::HrCStringLoadString(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned int)" ?HrCStringLoadString@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@I@Z
0x1800289BC: "public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::StartWrite(void) __ptr64" ?StartWrite@CAutoActionManager@ThreatAbstraction@@UEAAJXZ
0x180078DD0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell32_shellfolders_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell32_shellfolders_l1_1_0_dll
0x180083620: DloadSectionCommitPermanent
0x18004EDD8: "const ThreatAbstraction::CAutoIgnoreThreats::`vftable'{for `CCritSectionBase'}" ??_7CAutoIgnoreThreats@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800691A0: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`RTTI Complete Object Locator'" ??_R4CUpdateContext@CHeartBeatController@ThreatAbstraction@@6B@
0x18001F870: "protected: virtual struct _GUID const & __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::GetScanGuid(void)const __ptr64" ?GetScanGuid@CActiveThreatsContextManager@ThreatAbstraction@@MEBAAEBU_GUID@@XZ
0x180005DFC: "long __cdecl SetConfigListStr(struct _MI_Context * __ptr64,struct _MI_ConstStringAField,class CData & __ptr64,unsigned short const * __ptr64,bool)" ?SetConfigListStr@@YAJPEAU_MI_Context@@U_MI_ConstStringAField@@AEAVCData@@PEBG_N@Z
0x180045D7F: "__cdecl initterm" _initterm
0x18006B880: "const ThreatAbstraction::CAutoIgnoreThreat::`RTTI Complete Object Locator'{for `ThreatAbstraction::IAutoIgnoreThreat'}" ??_R4CAutoIgnoreThreat@ThreatAbstraction@@6BIAutoIgnoreThreat@1@@
0x18006A120: "__vectorcall ??_R1A@?0A@EA@CDetectionStats@CContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CDetectionStats@CContextManager@ThreatAbstraction@@8
0x18005AB08: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180031160: "protected: virtual int __cdecl MorroCommon::CWin32::_wchmodImpl(unsigned short const * __ptr64,int) __ptr64" ?_wchmodImpl@CWin32@MorroCommon@@MEAAHPEBGH@Z
0x18005C728: "resource unavailable try again" ??_C@_0BP@LKNGHENJ@resource?5unavailable?5try?5again?$AA@
0x18005ED80: "205" ??_C@_17JOLKHLKI@?$AA2?$AA0?$AA5?$AA?$AA@
0x180001750: "public: virtual char const * __ptr64 __cdecl std::_Iostream_error_category::name(void)const __ptr64" ?name@_Iostream_error_category@std@@UEBAPEBDXZ
0x18003D820: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::Release`vtordisp{4294967292,8}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x18003F244: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedValues::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandedValues@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18006D348: "__vectorcall ??_R2?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R2?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x18005CC38: "invalid seek" ??_C@_0N@OHAFKDEK@invalid?5seek?$AA@
0x18006DEE0: "__vectorcall ??_R1A@?0A@EA@IXMLDeployment@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLDeployment@SecurityClient@Microsoft@@8
0x18006D718: "__vectorcall ??_R3?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R3?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x180044FB8: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x18006C578: "const MorroCommon::CLockedCertCheckImpl::`RTTI Complete Object Locator'" ??_R4CLockedCertCheckImpl@MorroCommon@@6B@
0x1800308B0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetTempPathImpl(unsigned long,unsigned short * __ptr64) __ptr64" ?GetTempPathImpl@CWin32@MorroCommon@@MEAAKKPEAG@Z
0x18004D990: "const ThreatAbstraction::IDetectionContext::`vftable'{for `IRefCounted'}" ??_7IDetectionContext@ThreatAbstraction@@6BIRefCounted@@@
0x18005FDB8: "Real-Time Protection" ??_C@_1CK@OHIAJBPD@?$AAR?$AAe?$AAa?$AAl?$AA?9?$AAT?$AAi?$AAm?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005CCC8: "no link" ??_C@_07PLECNNKG@no?5link?$AA@
0x18005D3F8: "Exception" ??_C@_1BE@BOIBNEDH@?$AAE?$AAx?$AAc?$AAe?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005F610: "255" ??_C@_17MOHHOKBL@?$AA2?$AA5?$AA5?$AA?$AA@
0x18004F848: "const ThreatAbstraction::CDetectionContextBase::`vftable'{for `CCritSectionBase'}" ??_7CDetectionContextBase@ThreatAbstraction@@6BCCritSectionBase@@@
0x180067648: "const IRefCounted::`RTTI Complete Object Locator'" ??_R4IRefCounted@@6B@
0x18005D98C: "12" ??_C@_15NLDJLKHO@?$AA1?$AA2?$AA?$AA@
0x18005D6E0: "Required" ??_C@_1BC@KOHFMEOF@?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x180031700: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeThreadImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeThreadImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x1800313A0: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenServiceImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEAU3@PEBGK@Z
0x180060DC8: "UX Configuration" ??_C@_1CC@CMAMGFFD@?$AAU?$AAX?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180083610: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18004F020: "const ThreatAbstraction::CScanHistoryDetectionContext::`vftable'{for `ThreatAbstraction::IDetectionContext'}" ??_7CScanHistoryDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x18000B508: "protected: void __cdecl std::vector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@UtagThreatDefaultAction@@V?$allocator@UtagThreatDefaultAction@@@std@@@std@@IEBAXXZ
0x18005ACE0: "__cdecl _imp_Sleep" __imp_Sleep
0x18005B050: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x1800789E0: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24
0x18006D590: "__vectorcall ??_R1BA@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R1BA@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLDeployment::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLDeployment@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18006A480: "const CPseudoLockBase::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CPseudoLockBase@@6BILockable@@@
0x180083260: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4V43@A
0x1800834D8: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4V43@A
0x1800834C0: ?instance@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4V43@A
0x180019410: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScheduledScanController::`vector deleting destructor'`vtordisp{4294967292,88}' (unsigned int) __ptr64" ??_ECScheduledScanController@ThreatAbstraction@@$4PPPPPPPM@FI@EAAPEAXI@Z
0x18005B5D0: "__cdecl _xi_z" __xi_z
0x180002230: MSFT_MpPreference_Unload
0x1800435B0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x180043610: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@UEAAPEAXI@Z
0x18005AC70: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180040470: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedValues::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECBrandedValues@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180016850: "class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64 __cdecl std::_Uninit_move<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >(class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > & __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAV1@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V1@@std@@YAPEAV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAV1@00AEAU?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18007E798: "__vectorcall ??_R0?AVCThreatRollupManager@" ??_R0?AVCThreatRollupManager@@@8
0x18001D3EC: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityName(void)const __ptr64" ?GetSeverityName@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005E128: "84" ??_C@_15NJFNLEGK@?$AA8?$AA4?$AA?$AA@
0x18004DB98: "const CommonUtil::CHResultException::`vftable'" ??_7CHResultException@CommonUtil@@6B@
0x180016FE0: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@A@EBAJXZ
0x180061C08: "%ws" ??_C@_17EEOGHOKP@?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgress::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIScanProgress@ThreatAbstraction@@UEAAPEAXI@Z
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180031290: "protected: virtual int __cdecl MorroCommon::CWin32::VerifyVersionInfoImpl(struct _OSVERSIONINFOEXW * __ptr64,unsigned long,unsigned __int64) __ptr64" ?VerifyVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOEXW@@K_K@Z
0x1800672B8: "__vectorcall ??_R1A@?0A@EA@CDetectionsManager" ??_R1A@?0A@EA@CDetectionsManager@@8
0x180025FD0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_ECScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180067450: "const CThreatCatalogManager::`RTTI Complete Object Locator'" ??_R4CThreatCatalogManager@@6B@
0x18004D4F0: "const ThreatAbstraction::IScanProgress::`vftable'{for `ThreatAbstraction::IScanProgress'}" ??_7IScanProgress@ThreatAbstraction@@6B01@@
0x18005E1D8: "103" ??_C@_17DFFOCDJH@?$AA1?$AA0?$AA3?$AA?$AA@
0x1800624E8: WPP_f82b7f73123a312891723844711c1ea6_Traceguids
0x180002F28: "enum _MI_Result __cdecl MpMIUtil::MapHRESULTToMIResult(long)" ?MapHRESULTToMIResult@MpMIUtil@@YA?AW4_MI_Result@@J@Z
0x180029090: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnNewContext(unsigned long,unsigned long) __ptr64" ?OnNewContext@IContextEventsImpl@ThreatAbstraction@@MEAAXKK@Z
0x18005AD00: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180033F18: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@MEAAPEAXI@Z
0x18002A290: "[thunk]:public: virtual enum ThreatAbstraction::IDetectionContext::MiniFileterStatus __cdecl ThreatAbstraction::CDetectionContextBase::GetMiniFilterStatus`vtordisp{4294967292,40}' (void)const __ptr64" ?GetMiniFilterStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4MiniFileterStatus@IDetectionContext@2@XZ
0x18004D450: "const IRefCounted::`vftable'" ??_7IRefCounted@@6B@
0x180002230: MSFT_MpHeartBeat_Unload
0x1800675F8: "__vectorcall ??_R1A@?0A@EA@IRefCounted" ??_R1A@?0A@EA@IRefCounted@@8
0x180022370: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::RemoveContext(unsigned long) __ptr64" ?RemoveContext@CContextManager@ThreatAbstraction@@MEAAXK@Z
0x18002AC50: "[thunk]:public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CThreatInfo::GetThreatCategory`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatCategory@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x180069060: "const ThreatAbstraction::CWDOScanController::`RTTI Complete Object Locator'" ??_R4CWDOScanController@ThreatAbstraction@@6B@
0x180001630: "public: virtual void * __ptr64 __cdecl std::error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gerror_category@std@@UEAAPEAXI@Z
0x180016DF0: "public: virtual __cdecl ThreatAbstraction::CServiceStatusController::~CServiceStatusController(void) __ptr64" ??1CServiceStatusController@ThreatAbstraction@@UEAA@XZ
0x18004FF78: "const MpCommonEx::IBrandParams::`vftable'{for `CommonUtil::IRefObject'}" ??_7IBrandParams@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x18004E828: "const ThreatAbstraction::CScanHistoryContextManager::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7CScanHistoryContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x18003CFD0: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CVersionFormatter::ToInitializedString(void)const __ptr64" ?ToInitializedString@CVersionFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x1800297C0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSeverityName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18003C3B0: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x180042A84: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::Substitute(unsigned short const * __ptr64,unsigned short const * __ptr64,class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64)" ?Substitute@CDeploymentBrand@SecurityClient@Microsoft@@CAXPEBG0PEAV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@Z
0x180083520: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrsvokvioryUhixUlyquivUznwGEUhgwzucOlyq@WmiHelperLib
0x18005B0B0: USERENV_NULL_THUNK_DATA
0x18003AD98: "bool __cdecl CommonUtil::UtilWaitForSingleObject(void * __ptr64,unsigned long)" ?UtilWaitForSingleObject@CommonUtil@@YA_NPEAXK@Z
0x180078A08: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x18005CD68: "not a socket" ??_C@_0N@POEIPGGF@not?5a?5socket?$AA@
0x18003225C: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEAAPEAXI@Z
0x18006DC08: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18006D6E8: "__vectorcall ??_R3CBrandedValues@SecurityClient@Microsoft" ??_R3CBrandedValues@SecurityClient@Microsoft@@8
0x180069F90: "const ThreatAbstraction::CActiveThreatsContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4CActiveThreatsContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x18002A6B0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatType`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18001EEA0: "private: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::RetrieveScanGUIDs(class std::vector<struct _GUID,class std::allocator<struct _GUID> > & __ptr64)const __ptr64" ?RetrieveScanGUIDs@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@EEBAXAEAV?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@@Z
0x18006D2B8: "__vectorcall ??_R2CBrandedValues@SecurityClient@Microsoft" ??_R2CBrandedValues@SecurityClient@Microsoft@@8
0x180045B17: "__cdecl _C_specific_handler" __C_specific_handler
0x18005F468: "HighThreatDefaultAction" ??_C@_1DA@PEBLHCCK@?$AAH?$AAi?$AAg?$AAh?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18006D778: "__vectorcall ??_R3?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std" ??_R3?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@8
0x1800314D0: "protected: virtual unsigned __int64 __cdecl MorroCommon::CWin32::SetTimerImpl(struct HWND__ * __ptr64,unsigned __int64,unsigned int,void (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,unsigned long)) __ptr64" ?SetTimerImpl@CWin32@MorroCommon@@MEAA_KPEAUHWND__@@_KIP6AX0I1K@Z@Z
0x18006D418: "__vectorcall ??_R2?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std" ??_R2?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@8
0x180023E80: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::_Insert_nohint<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64>(bool,struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@1@PEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@1@@Z
0x18006B1E0: "__vectorcall ??_R2CDetectionContextBase@ThreatAbstraction" ??_R2CDetectionContextBase@ThreatAbstraction@@8
0x18006B2E0: "__vectorcall ??_R3CDetectionContextBase@ThreatAbstraction" ??_R3CDetectionContextBase@ThreatAbstraction@@8
0x18005E2D8: "MIReturn" ??_C@_1BC@NCFCPFNJ@?$AAM?$AAI?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x1800262D4: "private: void __cdecl ThreatAbstraction::CQuarantineContextManager::ConstructSequence(void) __ptr64" ?ConstructSequence@CQuarantineContextManager@ThreatAbstraction@@AEAAXXZ
0x18002F114: "public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CThreatInfo::GetThreatStatus(void)const __ptr64" ?GetThreatStatus@CThreatInfo@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_STATUS@@XZ
0x18006A1D8: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContexts'}" ??_R4CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x180067830: "__vectorcall ??_R1A@?0A@EA@MpWmiSignatureProgress" ??_R1A@?0A@EA@MpWmiSignatureProgress@@8
0x18005AD98: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180031180: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameExImpl(void * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameExImpl@CWin32@MorroCommon@@MEAAKPEAXPEAUHINSTANCE__@@PEAGK@Z
0x1800169D8: "public: __cdecl ATL::CComPtr<struct IXMLDOMDocument2>::~CComPtr<struct IXMLDOMDocument2>(void) __ptr64" ??1?$CComPtr@UIXMLDOMDocument2@@@ATL@@QEAA@XZ
0x180036CD0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetDriveFolderFromPathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetDriveFolderFromPathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x1800834FC: "long volatile `public: static class MorroCommon::CCertCheckFactory * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4JC
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x18001A334: "public: static long __cdecl ThreatAbstraction::CSignatureUpdateController::Initialize(void)" ?Initialize@CSignatureUpdateController@ThreatAbstraction@@SAJXZ
0x18006A430: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x180038F38: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftSelfCertCheck(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?MicrosoftSelfCertCheck@CCertCheck@MorroCommon@@CAJPEBGKPEAX@Z
0x18006D658: "__vectorcall ??_R1A@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std" ??_R1A@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@8
0x18005B1A0: "__cdecl _imp_PathAppendW" __imp_PathAppendW
0x180050760: "const Microsoft::SecurityClient::IXMLBrandedColors::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLBrandedColors@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18002F1FC: "public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetResourceCount(void)const __ptr64" ?GetResourceCount@CThreatInfo@ThreatAbstraction@@UEBAKXZ
0x18006B338: "const ThreatAbstraction::COnDemandDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4COnDemandDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800790B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0
0x180001860: "public: virtual class std::error_condition __cdecl std::_System_error_category::default_error_condition(int)const __ptr64" ?default_error_condition@_System_error_category@std@@UEBA?AVerror_condition@2@H@Z
0x18002AA90: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownBad`vtordisp{4294967292,8}' (void)const __ptr64" ?IsKnownBad@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAHXZ
0x180067088: "__vectorcall ??_R2MpWmiCleanProgress" ??_R2MpWmiCleanProgress@@8
0x180067308: "__vectorcall ??_R3MpWmiCleanProgress" ??_R3MpWmiCleanProgress@@8
0x18006AA60: "const ThreatAbstraction::CQuarantineContextManager::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CQuarantineContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x180031E50: "public: virtual void * __ptr64 __cdecl MpCommonEx::CEventLoggerBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEventLoggerBase@MpCommonEx@@UEAAPEAXI@Z
0x180067AA0: "__vectorcall ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx" ??_R1BA@?0A@EA@CEventLoggerBase@MpCommonEx@@8
0x180078EB0: ext-ms-win-shell-shell32-l1-2-1_NULL_THUNK_DATA_DLB
0x18000534C: "public: virtual void * __ptr64 __cdecl MpWmiCleanProgress::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMpWmiCleanProgress@@UEAAPEAXI@Z
0x18005AFF8: "__cdecl _imp_GetLastActivePopup" __imp_GetLastActivePopup
0x180062678: WPP_28d7b8d1fb9c3ced56c685149367209d_Traceguids
0x180016660: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get`vtordisp{4294967292,0}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180016640: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x18007F7C0: "__vectorcall ??_R0?AVCScanHistoryContextManager@ThreatAbstraction@" ??_R0?AVCScanHistoryContextManager@ThreatAbstraction@@@8
0x180016AC0: "public: virtual void * __ptr64 __cdecl CPseudoRefCountedBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPseudoRefCountedBase@@UEAAPEAXI@Z
0x180067B98: "__vectorcall ??_R2MpWmiWDOScanProgress" ??_R2MpWmiWDOScanProgress@@8
0x180067BE8: "__vectorcall ??_R3MpWmiWDOScanProgress" ??_R3MpWmiWDOScanProgress@@8
0x18005B400: "__cdecl _imp__onexit" __imp__onexit
0x180031060: "protected: virtual int __cdecl MorroCommon::CWin32::FreeResourceImpl(void * __ptr64) __ptr64" ?FreeResourceImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedColors::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLBrandedColors@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180020C60: "protected: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionContextsBase@CContextManager@ThreatAbstraction@@MEAAPEAXI@Z
0x18004F520: "const ThreatAbstraction::IAutoIgnoreThreat::`vftable'{for `IRefCounted'}" ??_7IAutoIgnoreThreat@ThreatAbstraction@@6BIRefCounted@@@
0x180010840: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpThreatLocalizedInfoFree>::~CUniqueHandle<struct CAutoMpThreatLocalizedInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpThreatLocalizedInfoFree@@@CommonUtil@@QEAA@XZ
0x180062430: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x18004D320: MSFT_MpPreference_Set_rtti
0x18005CE58: "resource deadlock would occur" ??_C@_0BO@BJBOMOEJ@resource?5deadlock?5would?5occur?$AA@
0x180045B94: memmove
0x18002C62C: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableActionCount(void)const __ptr64" ?GetAvailableActionCount@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18005F9F0: "279" ??_C@_17MJGJPEKI@?$AA2?$AA7?$AA9?$AA?$AA@
0x180083451: "struct CommonUtil::CCommonThrowWinErr CommonUtil::tWinErr" ?tWinErr@CommonUtil@@3UCCommonThrowWinErr@1@A
0x1800620C0: "public: static unsigned long const ThreatAbstraction::IThreatInfo::TT_KNOWNBAD" ?TT_KNOWNBAD@IThreatInfo@ThreatAbstraction@@2KB
0x18005AC98: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18005DC18: "25" ??_C@_15MAHKPAGJ@?$AA2?$AA5?$AA?$AA@
0x18006CDD8: "__vectorcall ??_R2?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std" ??_R2?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@8
0x18006D138: "__vectorcall ??_R3?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std" ??_R3?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@8
0x18005E9A0: "ReportingAdditionalActionTimeOut" ??_C@_1EC@DIKPJJCD@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt@
0x18006B670: "const ThreatAbstraction::CQuarantineDetectionContext::`RTTI Complete Object Locator'" ??_R4CQuarantineDetectionContext@ThreatAbstraction@@6B@
0x1800298E0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::COnDemandDetectionContext::GetCheckpointID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCheckpointID@COnDemandDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180038BD0: "private: static long __cdecl MorroCommon::CCertCheck::MicrosoftCertChainCheck(void * __ptr64,unsigned long)" ?MicrosoftCertChainCheck@CCertCheck@MorroCommon@@CAJPEAXK@Z
0x18005F928: "Update" ??_C@_1O@PBKAOOPF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x18007E668: "__vectorcall ??_R0?AV_Generic_error_category@std@" ??_R0?AV_Generic_error_category@std@@@8
0x180083668: WPP_REGISTRATION_GUIDS
0x18000B47C: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64 __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::operator=(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z
0x180069D20: "__vectorcall ??_R1FA@?0A@EA@CRefCountedBaseX" ??_R1FA@?0A@EA@CRefCountedBaseX@@8
0x18005CC58: "message size" ??_C@_0N@IFLPBIOP@message?5size?$AA@
0x180020260: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,96}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@GA@EBAJXZ
0x180068C00: "__vectorcall ??_R1A@?0A@EA@CSimpleMpConfigComWriter@ThreatAbstraction" ??_R1A@?0A@EA@CSimpleMpConfigComWriter@ThreatAbstraction@@8
0x18002C114: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetDefaultAction(void)const __ptr64" ?GetDefaultAction@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x1800501D0: "const MorroCommon::CPathUtils::`vftable'" ??_7CPathUtils@MorroCommon@@6B@
0x180062730: "__cdecl GUID_2933bf95_7b36_11d2_b20e_00c04f983e60" _GUID_2933bf95_7b36_11d2_b20e_00c04f983e60
0x180062060: "const ThreatAbstraction::CThreatInfo::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8CThreatInfo@ThreatAbstraction@@7BIThreatInfo@1@@
0x18001FAB4: "public: struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<unsigned __int64 const,unsigned long>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CB_KK@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@XZ
0x18005D8B8: "MSFT_MpComputerStatus" ??_C@_1CM@MHIBPOHC@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18002A210: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsBlockingDetection`vtordisp{4294967292,40}' (void) __ptr64" ?IsBlockingDetection@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EAAHXZ
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IActionEvents::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIActionEvents@ThreatAbstraction@@UEAAPEAXI@Z
0x1800244D0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSpynetVotingAvailable`vtordisp{4294967292,80}' (unsigned long,long) __ptr64" ?OnSpynetVotingAvailable@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXKJ@Z
0x18005E928: "186" ??_C@_17OONDFBMI@?$AA1?$AA8?$AA6?$AA?$AA@
0x18001814C: "public: static long __cdecl ThreatAbstraction::COnDemandController::Initialize(void)" ?Initialize@COnDemandController@ThreatAbstraction@@SAJXZ
0x18000ECC0: MSFT_MpThreatDetection_Load
0x18005DF3C: "46" ??_C@_15EJGLMJK@?$AA4?$AA6?$AA?$AA@
0x1800500A0: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`vftable'{for `MpCommonEx::IBrandedResources'}" ??_7?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@6BIBrandedResources@MpCommonEx@@@
0x180001760: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Iostream_error_category::message(int)const __ptr64" ?message@_Iostream_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x1800507B0: "const Microsoft::SecurityClient::CBrandedColors::`vftable'{for `CommonUtil::IRefObject'}" ??_7CBrandedColors@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180067620: "__vectorcall ??_R2IRefCounted" ??_R2IRefCounted@@8
0x180067630: "__vectorcall ??_R3IRefCounted" ??_R3IRefCounted@@8
0x180014398: "public: long __cdecl CData::SendHeartBeat(void) __ptr64" ?SendHeartBeat@CData@@QEAAJXZ
0x18005FFA0: "Set_ThreatName" ??_C@_0P@EGLDFGIP@Set_ThreatName?$AA@
0x18005F360: "236" ??_C@_17KJLKGOI@?$AA2?$AA3?$AA6?$AA?$AA@
0x18004D3A0: "const ThreatAbstraction::IActionEvents::`vftable'{for `ThreatAbstraction::IActionEvents'}" ??_7IActionEvents@ThreatAbstraction@@6B01@@
0x1800615E8: "const MpWmiScanProgress::`vbtable'{for `CRefCountedBase'}" ??_8MpWmiScanProgress@@7BCRefCountedBase@@@
0x18006C368: "__vectorcall ??_R2CFileUtils@MorroCommon" ??_R2CFileUtils@MorroCommon@@8
0x18006C3A0: "__vectorcall ??_R3CFileUtils@MorroCommon" ??_R3CFileUtils@MorroCommon@@8
0x18004E270: "const ThreatAbstraction::CActiveThreatsContextManager::`vftable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_7CActiveThreatsContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x180059CF0: MSFT_MpPreference_rtti
0x18005E7A8: "MSFT_MpPreference" ??_C@_1CE@DLLDOPMP@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18005EFB0: "221" ??_C@_17FMBAENPE@?$AA2?$AA2?$AA1?$AA?$AA@
0x180005498: "public: __cdecl CommonUtil::AutoRef<class CThreatDetails>::~AutoRef<class CThreatDetails>(void) __ptr64" ??1?$AutoRef@VCThreatDetails@@@CommonUtil@@QEAA@XZ
0x180080870: "__vectorcall ??_R0?AV?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@" ??_R0?AV?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@@8
0x18005B028: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x18006D180: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18004FF68: "const MpCommonEx::CEventLoggerBase::`vftable'" ??_7CEventLoggerBase@MpCommonEx@@6B@
0x180005440: "public: virtual void __cdecl MpWmiCleanProgress::OnActionAborted(void) __ptr64" ?OnActionAborted@MpWmiCleanProgress@@UEAAXXZ
0x18004610C: "public: __cdecl std::_Init_locks::~_Init_locks(void) __ptr64" ??1_Init_locks@std@@QEAA@XZ
0x18005ABA8: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18005B0C0: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x180014480: "public: __cdecl CommonUtil::AutoRef<struct Microsoft::SecurityClient::IXMLBrandedValues>::~AutoRef<struct Microsoft::SecurityClient::IXMLBrandedValues>(void) __ptr64" ??1?$AutoRef@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x18006BDB0: "__vectorcall ??_R2CBrandedAPI@MpCommonEx" ??_R2CBrandedAPI@MpCommonEx@@8
0x18006BFE0: "__vectorcall ??_R3CBrandedAPI@MpCommonEx" ??_R3CBrandedAPI@MpCommonEx@@8
0x180002BAC: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::SetString(unsigned short const * __ptr64,int) __ptr64" ?SetString@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBGH@Z
0x180016078: "public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get(unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180016144: "public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get(unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x180081560: "__vectorcall ??_R0?AV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@" ??_R0?AV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@@8
0x180008354: "void __cdecl GetConfiguration(struct _MI_Context * __ptr64)" ?GetConfiguration@@YAXPEAU_MI_Context@@@Z
0x1800043C0: "enum _MI_Result __cdecl FillAndPostThreatDetectionInstance(struct _MI_Context * __ptr64,class CommonUtil::AutoRef<class CThreatDetails>)" ?FillAndPostThreatDetectionInstance@@YA?AW4_MI_Result@@PEAU_MI_Context@@V?$AutoRef@VCThreatDetails@@@CommonUtil@@@Z
0x18005ADC0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18006A008: "const ThreatAbstraction::CActiveThreatsContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEventsImpl'}" ??_R4CActiveThreatsContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x18007FA00: "__vectorcall ??_R0?AVCAutoActionManager@ThreatAbstraction@" ??_R0?AVCAutoActionManager@ThreatAbstraction@@@8
0x18006B9C0: "__vectorcall ??_R2CResource@IDetectionContext@ThreatAbstraction" ??_R2CResource@IDetectionContext@ThreatAbstraction@@8
0x1800201E0: "struct _GUID * __ptr64 __cdecl std::_Uninit_move<struct _GUID * __ptr64,struct _GUID * __ptr64,class std::allocator<struct _GUID>,struct _GUID>(struct _GUID * __ptr64,struct _GUID * __ptr64,struct _GUID * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct _GUID> > & __ptr64,struct _GUID * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAU_GUID@@PEAU1@V?$allocator@U_GUID@@@std@@U1@@std@@YAPEAU_GUID@@PEAU1@00AEAU?$_Wrap_alloc@V?$allocator@U_GUID@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18005B478: "__cdecl _imp_iswalpha" __imp_iswalpha
0x18006BA10: "__vectorcall ??_R3CResource@IDetectionContext@ThreatAbstraction" ??_R3CResource@IDetectionContext@ThreatAbstraction@@8
0x180023480: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::_Insert_hint<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >,struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@1@AEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@1@PEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@1@@Z
0x18005E080: "63" ??_C@_15HOIAONKD@?$AA6?$AA3?$AA?$AA@
0x18007FFA8: "__vectorcall ??_R0?AVCLockEntireFile@MorroCommon@" ??_R0?AVCLockEntireFile@MorroCommon@@@8
0x18004E990: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vftable'{for `ILockable'}" ??_7CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BILockable@@@
0x180025F90: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,40}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CI@EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180025F70: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,40}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CI@EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x180069990: "__vectorcall ??_R2CActiveThreatsContextManager@ThreatAbstraction" ??_R2CActiveThreatsContextManager@ThreatAbstraction@@8
0x18007E7C8: "__vectorcall ??_R0?AVCActiveDetectionsManager@" ??_R0?AVCActiveDetectionsManager@@@8
0x180069E70: "__vectorcall ??_R3CActiveThreatsContextManager@ThreatAbstraction" ??_R3CActiveThreatsContextManager@ThreatAbstraction@@8
0x180005440: "public: virtual void __cdecl MpWmiCleanProgress::OnItemCompletion(unsigned long,long,enum ThreatAbstraction::PermissibleAction) __ptr64" ?OnItemCompletion@MpWmiCleanProgress@@UEAAXKJW4PermissibleAction@ThreatAbstraction@@@Z
0x18005AB38: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18005D900: "6" ??_C@_13LPLIHJO@?$AA6?$AA?$AA@
0x18005CB50: "connection refused" ??_C@_0BD@PJLIIJEL@connection?5refused?$AA@
0x18007FA40: "__vectorcall ??_R0?AVIAutoActionManager@ThreatAbstraction@" ??_R0?AVIAutoActionManager@ThreatAbstraction@@@8
0x180044100: "public: static long __cdecl Microsoft::SecurityClient::CXMLDataAccessor::QueryNode(class ATL::CComPtr<struct IXMLDOMNode> const & __ptr64,unsigned short const * __ptr64,struct IXMLDOMNodeList * __ptr64 * __ptr64)" ?QueryNode@CXMLDataAccessor@SecurityClient@Microsoft@@SAJAEBV?$CComPtr@UIXMLDOMNode@@@ATL@@PEBGPEAPEAUIXMLDOMNodeList@@@Z
0x18004E770: "const ThreatAbstraction::CContextManager::CDetectionStats::`vftable'{for `ThreatAbstraction::CContextManager::CDetectionStats'}" ??_7CDetectionStats@CContextManager@ThreatAbstraction@@6B012@@
0x18005EBA8: "198" ??_C@_17MFFAPFFO@?$AA1?$AA9?$AA8?$AA?$AA@
0x180060EB0: "Windows Defender Exploit Guard\N" ??_C@_1GE@DIMHCGPM@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAN@
0x1800410F8: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > >::_Buynode<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool> >(struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool> &&) __ptr64" ??$_Buynode@U?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@1@$$QEAU?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@1@@Z
0x180061E00: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vbtable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_8CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@7B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x180045DDC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180062290: "GetProductInfo" ??_C@_0P@FOMLLNOL@GetProductInfo?$AA@
0x180061E58: "const ThreatAbstraction::CQuarantineContextManager::`vbtable'{for `CCritSectionBase'}" ??_8CQuarantineContextManager@ThreatAbstraction@@7BCCritSectionBase@@@
0x18007F670: "__vectorcall ??_R0?AVCOnDemandDetectionContext@ThreatAbstraction@" ??_R0?AVCOnDemandDetectionContext@ThreatAbstraction@@@8
0x18006CED8: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x180061FF8: "const ThreatAbstraction::CActiveThreatsContextManager::`vbtable'{for `CRefCountedBase'}" ??_8CActiveThreatsContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x1800460B8: "public: __cdecl std::_Init_locks::_Init_locks(void) __ptr64" ??0_Init_locks@std@@QEAA@XZ
0x18002DAD0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetResourceCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetResourceCount@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18004DDD0: "const ThreatAbstraction::CActiveThreatsController::`vftable'{for `CCritSectionBase'}" ??_7CActiveThreatsController@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800316A0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateEventImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?CreateEventImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBG@Z
0x18006D248: "const Microsoft::SecurityClient::IXMLBrandedStrings::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_R4IXMLBrandedStrings@SecurityClient@Microsoft@@6B012@@
0x18005B290: "__cdecl _imp_MpDetectionEnumerate" __imp_MpDetectionEnumerate
0x180067368: "__vectorcall ??_R3CActiveDetectionsManager" ??_R3CActiveDetectionsManager@@8
0x180067108: "__vectorcall ??_R2CActiveDetectionsManager" ??_R2CActiveDetectionsManager@@8
0x18004EFC8: "const ThreatAbstraction::COnDemandDetectionContext::`vftable'{for `CCritSectionBase'}" ??_7COnDemandDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CB_KK@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x180061EB0: WPP_e0de7846acb43da6877c7b906b68d891_Traceguids
0x1800503F8: "const CommonUtil::CHResultExceptionImpl::`vftable'" ??_7CHResultExceptionImpl@CommonUtil@@6B@
0x1800363E0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesX86Impl(void) __ptr64" ?GetProgramFilesX86Impl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18005F518: "DisableBlockAtFirstSeen" ??_C@_1DA@KLEIMLJA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAB?$AAl?$AAo?$AAc?$AAk?$AAA?$AAt?$AAF?$AAi?$AAr?$AAs?$AAt?$AAS?$AAe?$AAe?$AAn?$AA?$AA@
0x18006BC98: "const ThreatAbstraction::CThreatInfo::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CThreatInfo@ThreatAbstraction@@6BILockable@@@
0x180005410: "public: virtual void * __ptr64 __cdecl ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@UEAAPEAXI@Z
0x180061D08: GUID_ATLVer70
0x18006BAA0: "const ThreatAbstraction::CDetectionContextBase::`RTTI Complete Object Locator'" ??_R4CDetectionContextBase@ThreatAbstraction@@6B@
0x1800673D8: "const MpWmiCleanProgress::`RTTI Complete Object Locator'{for `ThreatAbstraction::IActionEvents'}" ??_R4MpWmiCleanProgress@@6BIActionEvents@ThreatAbstraction@@@
0x1800035F0: "void __cdecl SetThreatDetectionResources(class CommonUtil::AutoRef<class CThreatDetails>,struct _MSFT_MpThreatDetection & __ptr64)" ?SetThreatDetectionResources@@YAXV?$AutoRef@VCThreatDetails@@@CommonUtil@@AEAU_MSFT_MpThreatDetection@@@Z
0x1800126D0: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Reallocate(void * __ptr64,unsigned __int64) __ptr64" ?Reallocate@CWin32Heap@ATL@@UEAAPEAXPEAX_K@Z
0x180062238: WPP_a93a13579eb93cd8e02dd36b383411e8_Traceguids
0x180016DB0: "public: virtual void * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHResultExceptionImpl@CommonUtil@@UEAAPEAXI@Z
0x180001C60: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z
0x18005DCF0: "QuickScanEndTime" ??_C@_1CC@ICKFCMMF@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAE?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180002130: DllCanUnloadNow
0x180067968: "__vectorcall ??_R1A@?0A@EA@CThreatDetails" ??_R1A@?0A@EA@CThreatDetails@@8
0x18005D248: "Aggregation" ??_C@_1BI@NFJBHKJO@?$AAA?$AAg?$AAg?$AAr?$AAe?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180068E38: "__vectorcall ??_R2CActiveThreatsController@ThreatAbstraction" ??_R2CActiveThreatsController@ThreatAbstraction@@8
0x180068E90: "__vectorcall ??_R3CActiveThreatsController@ThreatAbstraction" ??_R3CActiveThreatsController@ThreatAbstraction@@8
0x18005CF80: "ext-ms-win-shell-shell32-l1-2-0" ??_C@_1EA@NACPBMFP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA0?$AA?$AA@
0x180069850: "const ThreatAbstraction::IScanProgressInfo::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgressInfo'}" ??_R4IScanProgressInfo@ThreatAbstraction@@6B01@@
0x18005F0C8: "DisableScriptScanning" ??_C@_1CM@HNPEAOBE@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x18004DCE8: "const ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`vftable'{for `CCritSectionBase'}" ??_7CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18000ED00: MSFT_MpComputerStatus_DeleteInstance
0x18001F940: ??1?$CAutoHandle@PEAUtagMPTHREAT_INFO@@$1?_FreeThreatInfo@ThreatAbstraction@@YAXPEAU1@PEAX@Z@@QEAA@XZ
0x18000BCC0: "public: virtual void __cdecl MpWmiScanProgress::OnScanCompletion(long) __ptr64" ?OnScanCompletion@MpWmiScanProgress@@UEAAXJ@Z
0x180062060: "const ThreatAbstraction::CQuarantineDetectionContext::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8CQuarantineDetectionContext@ThreatAbstraction@@7BIThreatInfo@1@@
0x1800600D0: "There are currently no active de" ??_C@_1IE@MECHCKJJ@?$AAT?$AAh?$AAe?$AAr?$AAe?$AA?5?$AAa?$AAr?$AAe?$AA?5?$AAc?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAl?$AAy?$AA?5?$AAn?$AAo?$AA?5?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAd?$AAe@
0x18006C2F0: "__vectorcall ??_R2CPathUtils@MorroCommon" ??_R2CPathUtils@MorroCommon@@8
0x18006C328: "__vectorcall ??_R3CPathUtils@MorroCommon" ??_R3CPathUtils@MorroCommon@@8
0x180002D0C: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x180019230: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScheduledScanController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScheduledScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x180020970: "public: __cdecl std::map<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >::~map<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >(void) __ptr64" ??1?$map@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@QEAA@XZ
0x180031600: "protected: virtual int __cdecl MorroCommon::CWin32::MoveFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?MoveFileImpl@CWin32@MorroCommon@@MEAAHPEBG0@Z
0x180031330: "protected: virtual int __cdecl MorroCommon::CWin32::WriteFileImpl(void * __ptr64,void const * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?WriteFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEBXKPEAKPEAU_OVERLAPPED@@@Z
0x18006DF80: "__vectorcall ??_R1BA@?0A@EA@?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil" ??_R1BA@?0A@EA@?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@@8
0x180030850: "protected: virtual int __cdecl MorroCommon::CWin32::DestroyWindowImpl(struct HWND__ * __ptr64) __ptr64" ?DestroyWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x180061F90: "const ThreatAbstraction::CScanHistoryController::`vbtable'{for `CCritSectionBase'}" ??_8CScanHistoryController@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005E288: "116" ??_C@_17MJNMAAAA@?$AA1?$AA1?$AA6?$AA?$AA@
0x18004E8B0: "const ThreatAbstraction::CScanHistoryContextManager::`vftable'{for `CRefCountedBase'}" ??_7CScanHistoryContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x18001AB20: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,24}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@BI@EBAJXZ
0x180045E3D: "__cdecl _imp_load_SHGetPathFromIDListW" __imp_load_SHGetPathFromIDListW
0x18002C40C: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetPerformedAction(void)const __ptr64" ?GetPerformedAction@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x180005498: "public: __cdecl CommonUtil::AutoRef<class ThreatAbstraction::CWDOScanController::CUpdateContext>::~AutoRef<class ThreatAbstraction::CWDOScanController::CUpdateContext>(void) __ptr64" ??1?$AutoRef@VCUpdateContext@CWDOScanController@ThreatAbstraction@@@CommonUtil@@QEAA@XZ
0x180005600: "[thunk]:public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECRefCountedBaseX@@$4PPPPPPPM@A@EAAPEAXI@Z
0x1800388EC: "struct MorroCommon::SFolderItem * __ptr64 __cdecl std::_Uninit_move<struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,class std::allocator<struct MorroCommon::SFolderItem>,struct MorroCommon::SFolderItem>(struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64,struct MorroCommon::SFolderItem * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAUSFolderItem@MorroCommon@@PEAU12@V?$allocator@USFolderItem@MorroCommon@@@std@@U12@@std@@YAPEAUSFolderItem@MorroCommon@@PEAU12@00AEAU?$_Wrap_alloc@V?$allocator@USFolderItem@MorroCommon@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18003A8A8: ??1?$CAutoHandle@PEAX$1?_NORMAL_HANDLE_Finalizer@@YAXPEAX0@Z@@QEAA@XZ
0x18002A790: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryDescription`vtordisp{4294967292,40}' (void)const __ptr64" ?GetCategoryDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x180061910: "Virus and spyware definitions up" ??_C@_1IC@MJDNBBNG@?$AAV?$AAi?$AAr?$AAu?$AAs?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAd?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAu?$AAp@
0x180014778: "public: bool __cdecl ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::SetCount(unsigned __int64,int) __ptr64" ?SetCount@?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@QEAA_N_KH@Z
0x1800341B4: "public: struct std::_Tree_node<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@PEAX@2@XZ
0x18005E6C8: "32784" ??_C@_1M@JDPDDPDD@?$AA3?$AA2?$AA7?$AA8?$AA4?$AA?$AA@
0x18006DB48: "__vectorcall ??_R1A@?0A@EA@CBrandedColors@SecurityClient@Microsoft" ??_R1A@?0A@EA@CBrandedColors@SecurityClient@Microsoft@@8
0x180060860: "Scan_AvgCPULoadFactor" ??_C@_1CM@NIECGLCK@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAA?$AAv?$AAg?$AAC?$AAP?$AAU?$AAL?$AAo?$AAa?$AAd?$AAF?$AAa?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x18006A6A8: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x180016470: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::GetCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@A@EBAKXZ
0x18006E1C0: "const Microsoft::SecurityClient::CDeploymentBrand::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_R4CDeploymentBrand@SecurityClient@Microsoft@@6BIXMLDeployment@12@@
0x18005AF90: "__cdecl _imp_SafeArrayCreate" __imp_SafeArrayCreate
0x180069780: "__vectorcall ??_R1A@?0A@EA@IScanProgressInfo@ThreatAbstraction" ??_R1A@?0A@EA@IScanProgressInfo@ThreatAbstraction@@8
0x18007F050: "__vectorcall ??_R0?AVCUpdateContext@CSignatureUpdateController@ThreatAbstraction@" ??_R0?AVCUpdateContext@CSignatureUpdateController@ThreatAbstraction@@@8
0x180062460: WPP_62bc956533203bbc022dd1ecb69c4649_Traceguids
0x1800290F0: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSpynetVotingAvailable(unsigned long,long) __ptr64" ?OnSpynetVotingAvailable@IContextEventsImpl@ThreatAbstraction@@MEAAXKJ@Z
0x1800688F8: "__vectorcall ??_R2CScanContext@COnDemandController@ThreatAbstraction" ??_R2CScanContext@COnDemandController@ThreatAbstraction@@8
0x180068988: "__vectorcall ??_R3CScanContext@COnDemandController@ThreatAbstraction" ??_R3CScanContext@COnDemandController@ThreatAbstraction@@8
0x180010FA0: "void __cdecl LogProviderEvent(long,unsigned long,unsigned short * __ptr64,unsigned short const * __ptr64)" ?LogProviderEvent@@YAXJKPEAGPEBG@Z
0x180083640: WPP_MAIN_CB
0x180061F90: "const ThreatAbstraction::CQuarantineController::`vbtable'{for `CCritSectionBase'}" ??_8CQuarantineController@ThreatAbstraction@@7BCCritSectionBase@@@
0x180003188: "private: static struct ATL::CStringData * __ptr64 __cdecl ATL::CSimpleStringT<unsigned short,0>::CloneData(struct ATL::CStringData * __ptr64)" ?CloneData@?$CSimpleStringT@G$0A@@ATL@@CAPEAUCStringData@2@PEAU32@@Z
0x18004DD70: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vftable'{for `CCritSectionBase'}" ??_7CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180083528: "public: static class std::locale::id std::num_put<char,class std::back_insert_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::id" ?id@?$num_put@DV?$back_insert_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@std@@2V0locale@2@A
0x18002DCF0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownBad`vtordisp{4294967292,0}' (void)const __ptr64" ?IsKnownBad@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x1800620F0: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vbtable'{for `CRefCountedBase'}" ??_8CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x1800304D0: "long __cdecl MorroCommon::HrCComBSTRAssign(class ATL::CComBSTR & __ptr64,unsigned short const * __ptr64)" ?HrCComBSTRAssign@MorroCommon@@YAJAEAVCComBSTR@ATL@@PEBG@Z
0x180040C70: "private: bool __cdecl Microsoft::SecurityClient::CFeatureBrand::IsFeatureEnabled(unsigned short const * __ptr64)const __ptr64" ?IsFeatureEnabled@CFeatureBrand@SecurityClient@Microsoft@@AEBA_NPEBG@Z
0x18000A7E0: "void __cdecl MpRemoveConfiguration(struct _MI_Context * __ptr64,struct _MSFT_MpPreference_Remove const * __ptr64)" ?MpRemoveConfiguration@@YAXPEAU_MI_Context@@PEBU_MSFT_MpPreference_Remove@@@Z
0x18002B930: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::SetContextEventHandler(class ThreatAbstraction::IContextEvents * __ptr64) __ptr64" ?SetContextEventHandler@CDetectionContextBase@ThreatAbstraction@@UEAAXPEAVIContextEvents@2@@Z
0x180026028: "public: __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineContextManager(void) __ptr64" ??0CQuarantineContextManager@ThreatAbstraction@@QEAA@XZ
0x18002EFC0: "public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsUnknown(void)const __ptr64" ?IsUnknown@CThreatInfo@ThreatAbstraction@@UEBAHXZ
0x18004F8B8: "const ThreatAbstraction::IDetectionContext::CResource::`vftable'{for `ThreatAbstraction::IDetectionContext::CResource'}" ??_7CResource@IDetectionContext@ThreatAbstraction@@6B012@@
0x180037490: "private: long __cdecl MorroCommon::CFileUtils::CheckParams(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CheckParams@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005AEE0: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x18002BBB8: "public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionType(void)const __ptr64" ?GetDetectionType@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4DetectionType@2@XZ
0x180030EE0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetWindowThreadProcessIdImpl(struct HWND__ * __ptr64,unsigned long * __ptr64) __ptr64" ?GetWindowThreadProcessIdImpl@CWin32@MorroCommon@@MEAAKPEAUHWND__@@PEAK@Z
0x18004ECB8: "const ThreatAbstraction::IAutoIgnoreThreats::`vftable'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_7IAutoIgnoreThreats@ThreatAbstraction@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x18006DA48: "const Microsoft::SecurityClient::CFeatureBrand::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_R4CFeatureBrand@SecurityClient@Microsoft@@6BIXMLFeatures@12@@
0x18005D640: "PropertyConstraint" ??_C@_1CG@CAAENEPP@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AAC?$AAo?$AAn?$AAs?$AAt?$AAr?$AAa?$AAi?$AAn?$AAt?$AA?$AA@
0x18003E950: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@XZ
0x180061B08: WPP_f0375475963830aac2e6a2f3da91e8a3_Traceguids
0x18004EC38: "const ThreatAbstraction::CAutoActionManager::`vftable'{for `ThreatAbstraction::IAutoActionManager'}" ??_7CAutoActionManager@ThreatAbstraction@@6BIAutoActionManager@1@@
0x180013FE8: "public: long __cdecl CData::UpdateSignatures(enum ThreatAbstraction::tagUpdateType,unsigned short const * __ptr64) __ptr64" ?UpdateSignatures@CData@@QEAAJW4tagUpdateType@ThreatAbstraction@@PEBG@Z
0x18004DFE0: "const ThreatAbstraction::CScanProgressInfoQueue::`vftable'{for `ThreatAbstraction::IScanProgressInfoQueue'}" ??_7CScanProgressInfoQueue@ThreatAbstraction@@6BIScanProgressInfoQueue@1@@
0x18004ED78: "const ThreatAbstraction::CAutoIgnoreThreats::`vftable'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_7CAutoIgnoreThreats@ThreatAbstraction@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x1800693F0: "__vectorcall ??_R1A@?0A@EA@CConfigController@ThreatAbstraction" ??_R1A@?0A@EA@CConfigController@ThreatAbstraction@@8
0x1800188D8: "private: static long __cdecl ThreatAbstraction::COnDemandController::InternalScanWorker(class ThreatAbstraction::COnDemandController::CScanContext * __ptr64)" ?InternalScanWorker@COnDemandController@ThreatAbstraction@@CAJPEAVCScanContext@12@@Z
0x18005AB30: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180082B08: "public: static class std::locale::id std::num_put<wchar_t,class std::back_insert_iterator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::id" ?id@?$num_put@_WV?$back_insert_iterator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@2V0locale@2@A
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > >::_Freenode0(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@@Z
0x180045BAC: "__cdecl amsg_exit" _amsg_exit
0x18006D5B8: "__vectorcall ??_R1A@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std" ??_R1A@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@8
0x18005B380: "__cdecl _imp__callnewh" __imp__callnewh
0x1800626F0: "XPath" ??_C@_1M@HFCJKDDE@?$AAX?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180014744: "public: __cdecl CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager> >::~CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager> >(void) __ptr64" ??1?$CSmartPtr@VCScanHistoryContextManager@ThreatAbstraction@@V?$VolatileOps@VCScanHistoryContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18003F920: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedValues::HrGetTelemetryReportRate(unsigned long * __ptr64)const __ptr64" ?HrGetTelemetryReportRate@CBrandedValues@SecurityClient@Microsoft@@UEBAJPEAK@Z
0x18004233C: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::SetMapData(unsigned short const * __ptr64,unsigned short const * __ptr64,class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > * __ptr64)" ?SetMapData@CDeploymentBrand@SecurityClient@Microsoft@@CAXPEBG0PEAV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@Z
0x18006C400: "__vectorcall ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon" ??_R1A@?0A@EA@CCertCheckFactory@MorroCommon@@8
0x180068C80: "const ThreatAbstraction::CSimpleMpConfigComWriter::`RTTI Complete Object Locator'" ??_R4CSimpleMpConfigComWriter@ThreatAbstraction@@6B@
0x180029DD4: "public: __cdecl ThreatAbstraction::CQuarantineDetectionContext::CQuarantineDetectionContext(unsigned long) __ptr64" ??0CQuarantineDetectionContext@ThreatAbstraction@@QEAA@K@Z
0x18006C9E8: "__vectorcall ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil" ??_R1A@?0A@EA@CHResultExceptionImpl@CommonUtil@@8
0x1800616A0: "AntimalwareWMIProviders_ForceFir" ??_C@_1HC@NKNIKOBP@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAW?$AAM?$AAI?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA_?$AAF?$AAo?$AAr?$AAc?$AAe?$AAF?$AAi?$AAr@
0x180037980: "protected: virtual long __cdecl MorroCommon::CFileUtils::GetAvailableSpaceImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetAvailableSpaceImpl@CFileUtils@MorroCommon@@MEAAJPEBGPEAT_ULARGE_INTEGER@@@Z
0x18002BC6C: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatID(void)const __ptr64" ?GetThreatID@CDetectionContextBase@ThreatAbstraction@@UEBA_KXZ
0x1800177E4: "public: long __cdecl ThreatAbstraction::COnDemandController::CScanContext::InitializeScan(enum tagMPSCAN_TYPE,unsigned long,class ThreatAbstraction::IScanProgress * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64) __ptr64" ?InitializeScan@CScanContext@COnDemandController@ThreatAbstraction@@QEAAJW4tagMPSCAN_TYPE@@KPEAVIScanProgress@3@KPEAPEBG@Z
0x180062C90: WPP_85e9153fe97232689a92219bbabce89c_Traceguids
0x1800166A0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,64}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@EA@EBAXXZ
0x18007FC90: "__vectorcall ??_R0?AV?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@@8
0x18005D92C: "10" ??_C@_15HBDAHCPF@?$AA1?$AA0?$AA?$AA@
0x18006BA28: "const ThreatAbstraction::CDetectionContextBase::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext'}" ??_R4CDetectionContextBase@ThreatAbstraction@@6BIDetectionContext@1@@
0x180078E30: ext-ms-win-shell-shlwapi-l1-1-0_NULL_THUNK_DATA_DLN
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x18005CB08: "broken pipe" ??_C@_0M@KPHOFDBE@broken?5pipe?$AA@
0x180069348: "const ThreatAbstraction::CQuarantineController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CQuarantineController@ThreatAbstraction@@6BILockable@@@
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > >::_Freenode0(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@Z
0x180016550: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,72}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@EI@EBAXXZ
0x1800627E0: "AMSignatureDownloadGUID" ??_C@_1DA@PIKEJICC@?$AAA?$AAM?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x180068718: "__vectorcall ??_R3CServiceStatusController@ThreatAbstraction" ??_R3CServiceStatusController@ThreatAbstraction@@8
0x18006C700: "__vectorcall ??_R1BA@?0A@EA@_Container_base0@std" ??_R1BA@?0A@EA@_Container_base0@std@@8
0x180068610: "__vectorcall ??_R2CServiceStatusController@ThreatAbstraction" ??_R2CServiceStatusController@ThreatAbstraction@@8
0x180003DC4: "enum _MI_Result __cdecl FillAndPostThreatCatalogInstance(struct _MI_Context * __ptr64,class CommonUtil::AutoRef<class CThreatDetails>)" ?FillAndPostThreatCatalogInstance@@YA?AW4_MI_Result@@PEAU_MI_Context@@V?$AutoRef@VCThreatDetails@@@CommonUtil@@@Z
0x180069BF0: "__vectorcall ??_R3?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@" ??_R3?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@8
0x180031A80: "protected: virtual int __cdecl MorroCommon::CWin32::SystemTimeToFileTimeImpl(struct _SYSTEMTIME const * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?SystemTimeToFileTimeImpl@CWin32@MorroCommon@@MEAAHPEBU_SYSTEMTIME@@PEAU_FILETIME@@@Z
0x180069BA0: "__vectorcall ??_R2?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@" ??_R2?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@8
0x18006C188: "const MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x180060BC0: "DisableUpdateOnStartupWithoutEng" ??_C@_1EI@GEODFNAD@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAW?$AAi?$AAt?$AAh?$AAo?$AAu?$AAt?$AAE?$AAn?$AAg@
0x18001D58C: "public: __cdecl CSmartPtr<class CWString,class VolatileOps<class CWString> >::~CSmartPtr<class CWString,class VolatileOps<class CWString> >(void) __ptr64" ??1?$CSmartPtr@VCWString@@V?$VolatileOps@VCWString@@@@@@QEAA@XZ
0x180016064: "public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::GetCount(void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEBAKXZ
0x18005F050: "DisableIOAVProtection" ??_C@_1CM@LMLFIOKA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAI?$AAO?$AAA?$AAV?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005E0D0: "73" ??_C@_15LFNMDOAG@?$AA7?$AA3?$AA?$AA@
0x180016D44: "public: __cdecl CError::CError(class CError const & __ptr64) __ptr64" ??0CError@@QEAA@AEBV0@@Z
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryDetectionContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanHistoryDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18005C9B0: "not_connected" ??_C@_0O@GBCLHHD@not_connected?$AA@
0x1800620E0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vbtable'{for `ThreatAbstraction::IDetectionContexts'}" ??_8CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@7BIDetectionContexts@2@@
0x180062100: "const ThreatAbstraction::CScanHistoryContextManager::`vbtable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_8CScanHistoryContextManager@ThreatAbstraction@@7BIContextEventsImpl@1@@
0x180029840: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetPerformedAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetPerformedAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x180069640: "const ThreatAbstraction::CScanProgressInfoQueue::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScanProgressInfoQueue@ThreatAbstraction@@6BCCritSectionBase@@@
0x180050108: "const MpCommonEx::CBrandedAPI::`vftable'{for `MpCommonEx::IBrandedResources'}" ??_7CBrandedAPI@MpCommonEx@@6BIBrandedResources@1@@
0x180011C50: "public: __cdecl CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x18001F9FC: "protected: void __cdecl std::vector<struct _GUID,class std::allocator<struct _GUID> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@IEAAX_K@Z
0x180029A20: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x18006C930: "__vectorcall ??_R2CThreadManager" ??_R2CThreadManager@@8
0x18006C980: "__vectorcall ??_R3CThreadManager" ??_R3CThreadManager@@8
0x180067350: "__vectorcall ??_R3CThreatRollupManager" ??_R3CThreatRollupManager@@8
0x18006ADF0: "__vectorcall ??_R3CAutoActionManager@ThreatAbstraction" ??_R3CAutoActionManager@ThreatAbstraction@@8
0x180080050: "__vectorcall ??_R0?AV?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@" ??_R0?AV?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@@8
0x18007F960: "__vectorcall ??_R0?AV?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@" ??_R0?AV?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@@8
0x1800670F0: "__vectorcall ??_R2CThreatRollupManager" ??_R2CThreatRollupManager@@8
0x18006AB60: "__vectorcall ??_R2CAutoActionManager@ThreatAbstraction" ??_R2CAutoActionManager@ThreatAbstraction@@8
0x18005D7E0: "UnknownValues" ??_C@_1BM@PELHEDEM@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AA?$AA@
0x18000ECF0: MSFT_MpComputerStatus_EnumerateInstances
0x18000B7DC: "public: void __cdecl std::_Tree_buy<unsigned __int64,class std::allocator<unsigned __int64> >::_Freenode0(struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@_KV?$allocator@_K@std@@@std@@QEAAXPEAU?$_Tree_node@_KPEAX@2@@Z
0x1800396E0: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`vector deleting destructor'(unsigned int) __ptr64" ??_EILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18005CA18: "timed_out" ??_C@_09NCHNLHPG@timed_out?$AA@
0x18006DA98: "const Microsoft::SecurityClient::IXMLFeatures::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_R4IXMLFeatures@SecurityClient@Microsoft@@6B012@@
0x180024700: "[thunk]:public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vector deleting destructor'`vtordisp{4294967292,64}' (unsigned int) __ptr64" ??_E?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@EA@EAAPEAXI@Z
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IContextEvents,class VolatileOps<class ThreatAbstraction::IContextEvents> >::~CSmartPtr<class ThreatAbstraction::IContextEvents,class VolatileOps<class ThreatAbstraction::IContextEvents> >(void) __ptr64" ??1?$CSmartPtr@VIContextEvents@ThreatAbstraction@@V?$VolatileOps@VIContextEvents@ThreatAbstraction@@@@@@QEAA@XZ
0x1800398D0: "protected: virtual struct MorroCommon::ILockedCertCheck * __ptr64 __cdecl MorroCommon::CCertCheckFactory::CreateCertCheckImpl(void) __ptr64" ?CreateCertCheckImpl@CCertCheckFactory@MorroCommon@@MEAAPEAUILockedCertCheck@2@XZ
0x18005E390: "121" ??_C@_17NCJPEKBH@?$AA1?$AA2?$AA1?$AA?$AA@
0x180078CA0: "__cdecl CTA2PEAVEUnknownError@MorroCommon@@" _CTA2PEAVEUnknownError@MorroCommon@@
0x180062480: "MpAsDesc.dll" ??_C@_1BK@CGAJNEDF@?$AAM?$AAp?$AAA?$AAs?$AAD?$AAe?$AAs?$AAc?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18006B6C0: "__vectorcall ??_R2CAutoIgnoreThreat@ThreatAbstraction" ??_R2CAutoIgnoreThreat@ThreatAbstraction@@8
0x18006B850: "__vectorcall ??_R3CAutoIgnoreThreat@ThreatAbstraction" ??_R3CAutoIgnoreThreat@ThreatAbstraction@@8
0x18006B970: "const ThreatAbstraction::IAutoIgnoreThreat::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IAutoIgnoreThreat@ThreatAbstraction@@6BIRefCounted@@@
0x1800298C0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetResourceCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetResourceCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180069220: "__vectorcall ??_R1A@?0A@EA@CScanHistoryController@ThreatAbstraction" ??_R1A@?0A@EA@CScanHistoryController@ThreatAbstraction@@8
0x18001D740: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSeverityDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18001D538: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetProcessCount(void)const __ptr64" ?GetProcessCount@CScanProgressInfo@ThreatAbstraction@@UEBA_KXZ
0x18000B330: "public: __cdecl CommonUtil::CStdVector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> >::~CStdVector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> >(void) __ptr64" ??1?$CStdVector@UtagASRRuleDefaultAction@@V?$allocator@UtagASRRuleDefaultAction@@@std@@@CommonUtil@@QEAA@XZ
0x180069B20: "__vectorcall ??_R1A@?0A@EA@CPseudoLockBase" ??_R1A@?0A@EA@CPseudoLockBase@@8
0x18003D7C0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18005E3B8: "DomainUser" ??_C@_1BG@BGOOIHLH@?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x18001C920: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfoQueue::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanProgressInfoQueue@ThreatAbstraction@@UEAAPEAXI@Z
0x180061E60: "const ThreatAbstraction::CServiceStatusController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CServiceStatusController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x18002A4F0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityName`vtordisp{4294967292,40}' (void)const __ptr64" ?GetSeverityName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x18003D860: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::AddRef`vtordisp{4294967292,8}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x180024244: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> >,0> >::_Insert_nohint<struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBKK@std@@PEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKK@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBKK@1@PEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@1@@Z
0x18005D13B: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x180050870: "const Microsoft::SecurityClient::CDeploymentBrand::`vftable'{for `CommonUtil::IRefObject'}" ??_7CDeploymentBrand@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180021620: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18001BCA8: "public: static void __cdecl ThreatAbstraction::CHeartBeatController::Shutdown(void)" ?Shutdown@CHeartBeatController@ThreatAbstraction@@SAXXZ
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgressInfoQueue::`vector deleting destructor'(unsigned int) __ptr64" ??_EIScanProgressInfoQueue@ThreatAbstraction@@UEAAPEAXI@Z
0x180035810: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180040300: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::_Insert_nohint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@1@@Z
0x18005CE28: "protocol not supported" ??_C@_0BH@JPPPLHJB@protocol?5not?5supported?$AA@
0x18006AC08: "__vectorcall ??_R1A@DI@BA@FA@IAutoIgnoreThreats@ThreatAbstraction" ??_R1A@DI@BA@FA@IAutoIgnoreThreats@ThreatAbstraction@@8
0x18006CFA0: "__vectorcall ??_R1A@?0A@EA@?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil" ??_R1A@?0A@EA@?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@8
0x18007F638: "__vectorcall ??_R0?AVIContextEvents@ThreatAbstraction@" ??_R0?AVIContextEvents@ThreatAbstraction@@@8
0x1800621A8: "const ThreatAbstraction::CAutoIgnoreThreat::`vbtable'{for `CCritSectionBase'}" ??_8CAutoIgnoreThreat@ThreatAbstraction@@7BCCritSectionBase@@@
0x180060018: "MSFT_MpThreat_Destruct" ??_C@_0BH@FEOMAKKL@MSFT_MpThreat_Destruct?$AA@
0x18004D6B0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18001B62C: "public: static long __cdecl ThreatAbstraction::CWDOScanController::Initialize(void)" ?Initialize@CWDOScanController@ThreatAbstraction@@SAJXZ
0x18002A2F0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableActionCount`vtordisp{4294967292,40}' (void)const __ptr64" ?GetAvailableActionCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18005B2E8: "__cdecl _imp_MpConfigIteratorEnum" __imp_MpConfigIteratorEnum
0x180001908: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x18005EEC8: "MAPSReporting" ??_C@_1BM@ENBKNCGK@?$AAM?$AAA?$AAP?$AAS?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180041B3C: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18000D81C: "public: virtual void * __ptr64 __cdecl MpWmiSignatureProgress::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMpWmiSignatureProgress@@UEAAPEAXI@Z
0x1800621F8: "const ThreatAbstraction::CThreatInfo::`vbtable'{for `CRefCountedBase'}" ??_8CThreatInfo@ThreatAbstraction@@7BCRefCountedBase@@@
0x180005464: "public: __cdecl CommonUtil::AutoRef<class MpWmiSignatureProgress>::~AutoRef<class MpWmiSignatureProgress>(void) __ptr64" ??1?$AutoRef@VMpWmiSignatureProgress@@@CommonUtil@@QEAA@XZ
0x18005E090: "65" ??_C@_15FLOLLCHP@?$AA6?$AA5?$AA?$AA@
0x18006A080: "const ThreatAbstraction::IContextEvents::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4IContextEvents@ThreatAbstraction@@6B01@@
0x180017504: "public: __cdecl ThreatAbstraction::COnDemandController::CScanContext::CScanContext(void) __ptr64" ??0CScanContext@COnDemandController@ThreatAbstraction@@QEAA@XZ
0x18002AAF0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreat::`vector deleting destructor'`vtordisp{4294967292,312}' (unsigned int) __ptr64" ??_ECAutoIgnoreThreat@ThreatAbstraction@@$4PPPPPPPM@BDI@EAAPEAXI@Z
0x180005450: "public: virtual void __cdecl MpWmiScanProgress::OnScanError(long) __ptr64" ?OnScanError@MpWmiScanProgress@@UEAAXJ@Z
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::_Freenode0(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@Z
0x18005B298: "__cdecl _imp_MpConfigGetValue" __imp_MpConfigGetValue
0x1800677E0: "__vectorcall ??_R2MpWmiSignatureProgress" ??_R2MpWmiSignatureProgress@@8
0x180019104: "public: __cdecl ThreatAbstraction::CScheduledScanController::CScheduledScanController(void) __ptr64" ??0CScheduledScanController@ThreatAbstraction@@QEAA@XZ
0x180021E20: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsBlockingDetection(void) __ptr64" ?IsBlockingDetection@CDetectionContextBase@ThreatAbstraction@@UEAAHXZ
0x180067880: "__vectorcall ??_R3MpWmiSignatureProgress" ??_R3MpWmiSignatureProgress@@8
0x1800325D8: "public: virtual __cdecl MpCommonEx::CBrandedAPI::~CBrandedAPI(void) __ptr64" ??1CBrandedAPI@MpCommonEx@@UEAA@XZ
0x180013F20: "public: void __cdecl CData::ConfigCloseIterator(void) __ptr64" ?ConfigCloseIterator@CData@@QEAAXXZ
0x18005D040: "__cdecl _sz_ext_ms_win_shell_shlwapi_l1_1_0_dll" __sz_ext_ms_win_shell_shlwapi_l1_1_0_dll
0x180020220: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::GetCount`vtordisp{4294967292,72}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@EI@EBAKXZ
0x18004E570: "const ThreatAbstraction::CContextManager::`vftable'{for `CCritSectionBase'}" ??_7CContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003D610: "public: virtual long __cdecl Microsoft::SecurityClient::CXMLReader::HrGetNode(unsigned short const * __ptr64,struct IXMLDOMNode * __ptr64 * __ptr64)const __ptr64" ?HrGetNode@CXMLReader@SecurityClient@Microsoft@@UEBAJPEBGPEAPEAUIXMLDOMNode@@@Z
0x18006A2A0: "const ThreatAbstraction::CContextManager::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CContextManager@ThreatAbstraction@@6BILockable@@@
0x18002D0D8: "protected: void __cdecl std::_Tree<class std::_Tset_traits<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,0> >::_Erase(struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tset_traits@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@2@@Z
0x1800124B0: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Allocate(int,int) __ptr64" ?Allocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@HH@Z
0x18004D868: "const ThreatAbstraction::CExceptionThreats::`vftable'{for `CCritSectionBase'}" ??_7CExceptionThreats@ThreatAbstraction@@6BCCritSectionBase@@@
0x18002A0E8: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetAction(void)const __ptr64" ?GetAction@CQuarantineDetectionContext@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x180001908: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x180068228: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18000532C: "public: __cdecl CommonUtil::CGenericAutoScopeLock<class CommonUtil::CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor> >::~CGenericAutoScopeLock<class CommonUtil::CGenericAutoLock<struct CommonUtil::CMpCriticalSectionFunctor> >(void) __ptr64" ??1?$CGenericAutoScopeLock@V?$CGenericAutoLock@UCMpCriticalSectionFunctor@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18007EBD0: "__vectorcall ??_R0?AVCExceptionThreats@ThreatAbstraction@" ??_R0?AVCExceptionThreats@ThreatAbstraction@@@8
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IScanProgress,class VolatileOps<class ThreatAbstraction::IScanProgress> >::~CSmartPtr<class ThreatAbstraction::IScanProgress,class VolatileOps<class ThreatAbstraction::IScanProgress> >(void) __ptr64" ??1?$CSmartPtr@VIScanProgress@ThreatAbstraction@@V?$VolatileOps@VIScanProgress@ThreatAbstraction@@@@@@QEAA@XZ
0x180061F80: WPP_a946c28781b332be9e5011ec53ac0966_Traceguids
0x18007FA80: "__vectorcall ??_R0?AV?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@" ??_R0?AV?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@8
0x18005CA70: "address not available" ??_C@_0BG@DHPCNBJB@address?5not?5available?$AA@
0x180001908: "public: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAXXZ
0x18005B3E8: "__cdecl _imp__lock" __imp__lock
0x18005DD68: "37" ??_C@_15KBCPOLEH@?$AA3?$AA7?$AA?$AA@
0x18006DB98: "__vectorcall ??_R1A@?0A@EA@IXMLBrandedColors@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLBrandedColors@SecurityClient@Microsoft@@8
0x180002230: MSFT_MpScan_Unload
0x18006A8A0: "__vectorcall ??_R1A@?0A@EA@CQuarantineContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CQuarantineContextManager@ThreatAbstraction@@8
0x18005AFE0: OLEAUT32_NULL_THUNK_DATA
0x18006B0D0: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_R4?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6B0@@
0x180068828: "__vectorcall ??_R1A@?0A@EA@CHResultException@CommonUtil" ??_R1A@?0A@EA@CHResultException@CommonUtil@@8
0x180068020: "__vectorcall ??_R1A@7M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R1A@7M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x1800831B0: "void * __ptr64 __ptr64 g_hListenerThread" ?g_hListenerThread@@3PEAXEA
0x18005E430: "InitialDetectionTime" ??_C@_1CK@JNJBABLA@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18006B528: "const ThreatAbstraction::CScanHistoryDetectionContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScanHistoryDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x18002C274: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetAction(void)const __ptr64" ?GetAction@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x18004E9D0: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vftable'{for `ThreatAbstraction::IDetectionContexts'}" ??_7CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x180060DF0: "Threats\ThreatSeverityDefaultAct" ??_C@_1EI@HAADKNEE@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?2?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAS?$AAe?$AAv?$AAe?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt@
0x18004E720: "const CPseudoLockBase::`vftable'{for `CPseudoLockBase'}" ??_7CPseudoLockBase@@6B0@@
0x18005E1F8: "TypeID" ??_C@_1O@PLGDMGFC@?$AAT?$AAy?$AAp?$AAe?$AAI?$AAD?$AA?$AA@
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@UEBAJXZ
0x180021E20: "public: virtual class ThreatAbstraction::IDetectionContexts * __ptr64 __cdecl ThreatAbstraction::CContextManager::GetDetectionContextsByID(unsigned long) __ptr64" ?GetDetectionContextsByID@CContextManager@ThreatAbstraction@@UEAAPEAVIDetectionContexts@2@K@Z
0x1800458DC: atexit
0x18006C3E0: "__vectorcall ??_R2CCertCheckFactory@MorroCommon" ??_R2CCertCheckFactory@MorroCommon@@8
0x18006C450: "__vectorcall ??_R3CCertCheckFactory@MorroCommon" ??_R3CCertCheckFactory@MorroCommon@@8
0x1800686A0: "__vectorcall ??_R1A@?0A@EA@CServiceStatusController@ThreatAbstraction" ??_R1A@?0A@EA@CServiceStatusController@ThreatAbstraction@@8
0x18006C1D8: "const MpCommonEx::IBrandParams::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IBrandParams@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x180080DD0: "__vectorcall ??_R0?AUIXMLBrandedValues@SecurityClient@Microsoft@" ??_R0?AUIXMLBrandedValues@SecurityClient@Microsoft@@@8
0x18002A030: "public: virtual unsigned long __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleActions(void)const __ptr64" ?GetPermissibleActions@CQuarantineDetectionContext@ThreatAbstraction@@UEBAKXZ
0x1800315A0: "protected: virtual int __cdecl MorroCommon::CWin32::InitiateSystemShutdownExImpl(unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,int,int,unsigned long) __ptr64" ?InitiateSystemShutdownExImpl@CWin32@MorroCommon@@MEAAHPEAG0KHHK@Z
0x18006A630: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BILockable@@@
0x180019470: "public: virtual long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::WriteDword(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?WriteDword@CSimpleMpConfigComWriter@ThreatAbstraction@@UEAAJPEBG0K@Z
0x180016490: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CExceptionThreats::`vector deleting destructor'`vtordisp{4294967292,128}' (unsigned int) __ptr64" ??_ECExceptionThreats@ThreatAbstraction@@$4PPPPPPPM@IA@EAAPEAXI@Z
0x18002BD6C: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetDefaultActionName(void)const __ptr64" ?GetDefaultActionName@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x1800359F0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModuleNameByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModuleNameByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18001F964: "protected: void __cdecl CSafePtr<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext> >::Finalize(class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext * __ptr64) __ptr64" ?Finalize@?$CSafePtr@VCCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@V?$VolatileOps@VCCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@@@@@IEAAXPEAVCCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@@Z
0x180050368: "const CCritSectionBase::`vftable'{for `ILockable'}" ??_7CCritSectionBase@@6BILockable@@@
0x18005EAF8: "193" ??_C@_17BCFBHCFP@?$AA1?$AA9?$AA3?$AA?$AA@
0x18005E108: "80" ??_C@_15FGDPCDDN@?$AA8?$AA0?$AA?$AA@
0x18005C5F0: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x18005EEA8: "210" ??_C@_17GCDIFIDP@?$AA2?$AA1?$AA0?$AA?$AA@
0x18005D260: "Alias" ??_C@_1M@JBLBEOOM@?$AAA?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
0x180001618: "public: __cdecl ATL::CComBSTR::~CComBSTR(void) __ptr64" ??1CComBSTR@ATL@@QEAA@XZ
0x180078A28: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x180024780: "public: virtual void * __ptr64 __cdecl CPseudoLockBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCPseudoLockBase@@UEAAPEAXI@Z
0x180068098: "__vectorcall ??_R1A@77FA@IThreatInfo@ThreatAbstraction" ??_R1A@77FA@IThreatInfo@ThreatAbstraction@@8
0x1800832A0: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x18004E7A0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vftable'{for `ILockable'}" ??_7CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BILockable@@@
0x180005440: "public: virtual void __cdecl CPseudoLockBase::Unlock(void)const __ptr64" ?Unlock@CPseudoLockBase@@UEBAXXZ
0x18001BFC4: "public: static long __cdecl ThreatAbstraction::CScanHistoryController::Initialize(void)" ?Initialize@CScanHistoryController@ThreatAbstraction@@SAJXZ
0x18005ADA0: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x18005D730: "SourceType" ??_C@_1BG@GPKPHOKD@?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180036310: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetProgramFilesImpl(void) __ptr64" ?GetProgramFilesImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180036B50: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetProcessExecutableFullPathImpl(unsigned long,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetProcessExecutableFullPathImpl@CPathUtils@MorroCommon@@MEAAJKAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005B238: "__cdecl _imp_MpManagerOpen" __imp_MpManagerOpen
0x18002B2BC: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::CResource::`vector deleting destructor'(unsigned int) __ptr64" ??_ECResource@IDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18004EB80: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vftable'{for `ILockable'}" ??_7?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6BILockable@@@
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18006A8C8: "__vectorcall ??_R3CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction" ??_R3CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@8
0x18006A7A0: "__vectorcall ??_R2CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction" ??_R2CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@8
0x180066FC8: "const std::error_category::`RTTI Complete Object Locator'" ??_R4error_category@std@@6B@
0x18004D5B0: "const MpWmiSignatureProgress::`vftable'{for `ThreatAbstraction::ISignaturesUpdateCallback'}" ??_7MpWmiSignatureProgress@@6BISignaturesUpdateCallback@ThreatAbstraction@@@
0x18006CB38: "__vectorcall ??_R3CXMLReader@SecurityClient@Microsoft" ??_R3CXMLReader@SecurityClient@Microsoft@@8
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IAutoActionManager,class VolatileOps<class ThreatAbstraction::IAutoActionManager> >::~CSmartPtr<class ThreatAbstraction::IAutoActionManager,class VolatileOps<class ThreatAbstraction::IAutoActionManager> >(void) __ptr64" ??1?$CSmartPtr@VIAutoActionManager@ThreatAbstraction@@V?$VolatileOps@VIAutoActionManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18006CA48: "__vectorcall ??_R2CXMLReader@SecurityClient@Microsoft" ??_R2CXMLReader@SecurityClient@Microsoft@@8
0x18003C400: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy<class CommonUtil::CMpVersionDllWrapper> >::OnInitializeCallback(void * __ptr64)" ?OnInitializeCallback@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy@VCMpVersionDllWrapper@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAX@Z
0x180061EE8: "__cdecl GUID_cdfed399_7999_4309_b064_1ede04bc580d" _GUID_cdfed399_7999_4309_b064_1ede04bc580d
0x180034E98: "public: static long __cdecl MpCommonEx::CPathUtilsEx::GetManifestPath(unsigned short * __ptr64 * __ptr64)" ?GetManifestPath@CPathUtilsEx@MpCommonEx@@SAJPEAPEAG@Z
0x180006430: "long __cdecl SetThreatIdsDefaultActions(struct _MI_Context * __ptr64,struct _MI_ConstSint64AField,struct _MI_ConstUint8AField,class CData & __ptr64,bool)" ?SetThreatIdsDefaultActions@@YAJPEAU_MI_Context@@U_MI_ConstSint64AField@@U_MI_ConstUint8AField@@AEAVCData@@_N@Z
0x18005AD78: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18006A530: "__vectorcall ??_R2CScanHistoryContextManager@ThreatAbstraction" ??_R2CScanHistoryContextManager@ThreatAbstraction@@8
0x18005B168: api-ms-win-core-kernel32-legacy-l1-1-1_NULL_THUNK_DATA
0x18006A5F0: "__vectorcall ??_R3CScanHistoryContextManager@ThreatAbstraction" ??_R3CScanHistoryContextManager@ThreatAbstraction@@8
0x18001DD90: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18005D070: "ext-ms-win-shell32-shellfolders-" ??_C@_1EO@GHDLDGPK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AAf?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AA?9@
0x180061308: WPP_035043fac2b9374b72909d9e9ce06c51_Traceguids
0x180025480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18005C938: "filename_too_long" ??_C@_0BC@LEEIKBAL@filename_too_long?$AA@
0x18001C62C: "public: static long __cdecl ThreatAbstraction::CConfigController::Initialize(void)" ?Initialize@CConfigController@ThreatAbstraction@@SAJXZ
0x18005B118: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x180061B78: "invalid map/set<T> iterator" ??_C@_0BM@PAPJHAGI@invalid?5map?1set?$DMT?$DO?5iterator?$AA@
0x180034200: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x18005C668: "io error" ??_C@_08GLNPIFBN@io?5error?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl MpCommonEx::IBrandedResources::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIBrandedResources@MpCommonEx@@UEAAPEAXI@Z
0x18007E9F8: "__vectorcall ??_R0?AVCThreatDetails@" ??_R0?AVCThreatDetails@@@8
0x180050150: "const MpCommonEx::CBrandedResources::`vftable'" ??_7CBrandedResources@MpCommonEx@@6B@
0x180018BD4: "public: __cdecl CSafePtr<class ThreatAbstraction::CScheduledScanController::CScheduledScanContext,class VolatileOps<class ThreatAbstraction::CScheduledScanController::CScheduledScanContext> >::~CSafePtr<class ThreatAbstraction::CScheduledScanController::CScheduledScanContext,class VolatileOps<class ThreatAbstraction::CScheduledScanController::CScheduledScanContext> >(void) __ptr64" ??1?$CSafePtr@VCScheduledScanContext@CScheduledScanController@ThreatAbstraction@@V?$VolatileOps@VCScheduledScanContext@CScheduledScanController@ThreatAbstraction@@@@@@QEAA@XZ
0x18006CF28: "__vectorcall ??_R1BA@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std" ??_R1BA@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@8
0x18006CD80: "__vectorcall ??_R2?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std" ??_R2?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@8
0x18006D108: "__vectorcall ??_R3?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std" ??_R3?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@8
0x180044C9C: "public: static class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl Microsoft::SecurityClient::CXMLDataAccessor::Build_EQU_OR_Query(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > const & __ptr64)" ?Build_EQU_OR_Query@CXMLDataAccessor@SecurityClient@Microsoft@@SA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@5@AEBV?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@@Z
0x18005AB10: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180067DD0: "__vectorcall ??_R2IDetectionContext@ThreatAbstraction" ??_R2IDetectionContext@ThreatAbstraction@@8
0x18005D3B0: "EmbeddedInstance" ??_C@_1CC@EEMBBGCL@?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1800681F8: "__vectorcall ??_R3IDetectionContext@ThreatAbstraction" ??_R3IDetectionContext@ThreatAbstraction@@8
0x18007E548: "class ATL::CAtlStringMgr ATL::g_strmgr" ?g_strmgr@ATL@@3VCAtlStringMgr@1@A
0x1800322B0: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedResources::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandedResources@MpCommonEx@@UEAAPEAXI@Z
0x1800697D8: "const ThreatAbstraction::CScanProgressInfo::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgressInfo'}" ??_R4CScanProgressInfo@ThreatAbstraction@@6BIScanProgressInfo@1@@
0x180030480: "long __cdecl MorroCommon::HrCStringAssign(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64)" ?HrCStringAssign@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBG@Z
0x180069618: "const ThreatAbstraction::CScanProgressInfoQueue::`RTTI Complete Object Locator'" ??_R4CScanProgressInfoQueue@ThreatAbstraction@@6B@
0x18001A774: "public: bool __cdecl ThreatAbstraction::CSignatureUpdateController::IsUpdateInProgress(void)const __ptr64" ?IsUpdateInProgress@CSignatureUpdateController@ThreatAbstraction@@QEBA_NXZ
0x18006A6D0: "const ThreatAbstraction::CScanHistoryContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4CScanHistoryContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x1800294D0: "public: virtual void __cdecl ThreatAbstraction::COnDemandDetectionContext::SetActionComplete(long) __ptr64" ?SetActionComplete@COnDemandDetectionContext@ThreatAbstraction@@UEAAXJ@Z
0x1800412B4: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedColors::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandedColors@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18005ED20: "SignatureDisableUpdateOnStartupW" ??_C@_1FK@BEGMMGFF@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAO?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAW@
0x180024A10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanHistoryContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IScheduledScanProgress,class VolatileOps<class ThreatAbstraction::IScheduledScanProgress> >::~CSmartPtr<class ThreatAbstraction::IScheduledScanProgress,class VolatileOps<class ThreatAbstraction::IScheduledScanProgress> >(void) __ptr64" ??1?$CSmartPtr@VIScheduledScanProgress@ThreatAbstraction@@V?$VolatileOps@VIScheduledScanProgress@ThreatAbstraction@@@@@@QEAA@XZ
0x180005464: "public: __cdecl CSmartPtr<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts> >::~CSmartPtr<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts> >(void) __ptr64" ??1?$CSmartPtr@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@V?$VolatileOps@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18005FBB0: "MSFT_MpHeartBeat" ??_C@_1CC@JIFMMO@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAH?$AAe?$AAa?$AAr?$AAt?$AAB?$AAe?$AAa?$AAt?$AA?$AA@
0x180060890: "AvgCPULoadFactor" ??_C@_1CC@FCJPFOJN@?$AAA?$AAv?$AAg?$AAC?$AAP?$AAU?$AAL?$AAo?$AAa?$AAd?$AAF?$AAa?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x18005CE08: "owner dead" ??_C@_0L@BLPOFLNJ@owner?5dead?$AA@
0x180006BA8: "public: __cdecl tagASRRuleDefaultAction::~tagASRRuleDefaultAction(void) __ptr64" ??1tagASRRuleDefaultAction@@QEAA@XZ
0x18005EEF0: "215" ??_C@_17FFOGKIAN@?$AA2?$AA1?$AA5?$AA?$AA@
0x18005B1D8: "__cdecl _imp_GetFileVersionInfoW" __imp_GetFileVersionInfoW
0x18005AB20: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180013904: "public: long __cdecl CData::GetActiveThreats(unsigned int * __ptr64,unsigned int * __ptr64,unsigned int * __ptr64,unsigned int * __ptr64,unsigned int * __ptr64) __ptr64" ?GetActiveThreats@CData@@QEAAJPEAI0000@Z
0x180029BA0: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext::CResource * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetResource`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetResource@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEAVCResource@IDetectionContext@2@K@Z
0x18005B158: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180016718: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::_Reserve(unsigned __int64) __ptr64" ?_Reserve@?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@IEAAX_K@Z
0x180031830: "protected: virtual int __cdecl MorroCommon::CWin32::PathRemoveFileSpecImpl(unsigned short * __ptr64) __ptr64" ?PathRemoveFileSpecImpl@CWin32@MorroCommon@@MEAAHPEAG@Z
0x180069AA0: "__vectorcall ??_R1A@?0A@EA@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@8
0x18007EAB0: "__vectorcall ??_R0?AVEUnknownError@MorroCommon@" ??_R0?AVEUnknownError@MorroCommon@@@8
0x18001D660: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetFileCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetFileCount@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x18006D730: "__vectorcall ??_R3?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R3?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x180045B3B: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64" ??0exception@@QEAA@AEBQEBD@Z
0x18006B4D8: "const ThreatAbstraction::CScanHistoryDetectionContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanHistoryDetectionContext@ThreatAbstraction@@6BILockable@@@
0x180033F70: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@MEAAPEAXI@Z
0x18006D3E8: "__vectorcall ??_R2?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R2?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x18004E358: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18005D000: "ext-ms-win-shell-shell32-l1-2-2" ??_C@_1EA@HKCGNENE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA2?$AA?$AA@
0x18001E2C4: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionsStart(void) __ptr64" ?OnActionsStart@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXXZ
0x18001D4B4: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetTotalObjectCount(void)const __ptr64" ?GetTotalObjectCount@CScanProgressInfo@ThreatAbstraction@@UEBA_KXZ
0x1800451D8: "char const * __ptr64 __cdecl std::_Winerror_map(int)" ?_Winerror_map@std@@YAPEBDH@Z
0x18000ECC0: MSFT_MpWDOScan_Load
0x180078AD8: "__stdcall CT??_R0?AVCAtlException@ATL@@" _CT??_R0?AVCAtlException@ATL@@@84
0x18001AB10: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECUpdateContext@CSignatureUpdateController@ThreatAbstraction@@WBA@EAAPEAXI@Z
0x180062740: "__cdecl GUID_88d96a05_f192_11d4_a65f_0040963251e5" _GUID_88d96a05_f192_11d4_a65f_0040963251e5
0x180010918: "protected: void __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Erase(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@KPEAX@2@@Z
0x18005FA38: "282" ??_C@_17OPDOMBHM@?$AA2?$AA8?$AA2?$AA?$AA@
0x1800683E0: "const ISequence<class ThreatAbstraction::IDetectionContext>::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6B0@@
0x1800503D8: "const CThreadManager::`vftable'" ??_7CThreadManager@@6B@
0x18004D828: "const ThreatAbstraction::CExceptionThreats::`vftable'{for `ILockable'}" ??_7CExceptionThreats@ThreatAbstraction@@6BILockable@@@
0x18005E608: "151" ??_C@_17MPJKHKKP@?$AA1?$AA5?$AA1?$AA?$AA@
0x18006BBF8: "const ThreatAbstraction::CQuarantineThreatInfo::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CQuarantineThreatInfo@ThreatAbstraction@@6BILockable@@@
0x18000C42C: "void __cdecl MpStartScan(struct _MI_Context * __ptr64,struct _MSFT_MpScan_Start const * __ptr64)" ?MpStartScan@@YAXPEAU_MI_Context@@PEBU_MSFT_MpScan_Start@@@Z
0x180061F38: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vbtable'{for `CPseudoLockBase'}" ??_8CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@7BCPseudoLockBase@@@
0x18005C790: "permission_denied" ??_C@_0BC@FNODOBAE@permission_denied?$AA@
0x18004DC68: "const ThreatAbstraction::COnDemandController::CScanContext::`vftable'{for `CCritSectionBase'}" ??_7CScanContext@COnDemandController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003B38C: "long __cdecl CommonUtil::UtilSimpleCreateThread(void * __ptr64 * __ptr64,unsigned int (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long * __ptr64)" ?UtilSimpleCreateThread@CommonUtil@@YAJPEAPEAXP6AIPEAX@Z1PEAK@Z
0x18005E748: "166" ??_C@_17NENJDALI@?$AA1?$AA6?$AA6?$AA?$AA@
0x18005AD88: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18005AD10: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18003C5D4: "struct _SYSTEMTIME __cdecl CommonUtil::UtilSystemTimeFromUlong64(unsigned __int64 const & __ptr64)" ?UtilSystemTimeFromUlong64@CommonUtil@@YA?AU_SYSTEMTIME@@AEB_K@Z
0x18005DFE0: "ThreatName" ??_C@_1BG@EHILGFDL@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180045DA3: "__cdecl _dllonexit" __dllonexit
0x180015DDC: "public: long __cdecl ThreatAbstraction::CExceptionThreats::LuaElevateActionSession(int) __ptr64" ?LuaElevateActionSession@CExceptionThreats@ThreatAbstraction@@QEAAJH@Z
0x18005B318: "__cdecl _imp_MpElevationHandleAcquire" __imp_MpElevationHandleAcquire
0x18006D2E0: "__vectorcall ??_R2?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil" ??_R2?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@8
0x1800247E0: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Unlock`vtordisp{4294967292,0}' (void)const __ptr64" ?Unlock@CPseudoLockBase@@$4PPPPPPPM@A@EBAXXZ
0x18006D7A8: "__vectorcall ??_R3?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil" ??_R3?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@8
0x1800504A8: "const Microsoft::SecurityClient::IXMLBrandedStrings::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_7IXMLBrandedStrings@SecurityClient@Microsoft@@6B012@@
0x180069758: "__vectorcall ??_R1A@?0A@EA@CScanProgressInfo@ThreatAbstraction" ??_R1A@?0A@EA@CScanProgressInfo@ThreatAbstraction@@8
0x18007EDB0: "__vectorcall ??_R0?AVCServiceStatusController@ThreatAbstraction@" ??_R0?AVCServiceStatusController@ThreatAbstraction@@@8
0x18004CDD0: MSFT_MpSignature_Update_rtti
0x18000F420: "public: static void __cdecl CAutoMpThreatRollupFree::Release(struct tagMPTHREAT_ROLLUP_INFO * __ptr64)" ?Release@CAutoMpThreatRollupFree@@SAXPEAUtagMPTHREAT_ROLLUP_INFO@@@Z
0x180016600: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,56}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@DI@EBAXXZ
0x180061E58: "const ThreatAbstraction::CServiceStatusController::`vbtable'{for `CCritSectionBase'}" ??_8CServiceStatusController@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005F260: "DisableScanningMappedNetworkDriv" ??_C@_1FM@JLBAJCLC@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AAM?$AAa?$AAp?$AAp?$AAe?$AAd?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAD?$AAr?$AAi?$AAv@
0x18006C200: "const MpCommonEx::IBrandParams::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandParams'}" ??_R4IBrandParams@MpCommonEx@@6B01@@
0x180005074: "void __cdecl MpCleanThreat(struct _MI_Context * __ptr64,struct _MSFT_MpThreat_Remove const * __ptr64)" ?MpCleanThreat@@YAXPEAU_MI_Context@@PEBU_MSFT_MpThreat_Remove@@@Z
0x180028140: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoActionManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAutoActionManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18000CF84: "public: long __cdecl AMIndication::FireEvent(unsigned long,unsigned long,unsigned long,unsigned __int64) __ptr64" ?FireEvent@AMIndication@@QEAAJKKK_K@Z
0x18004E9E0: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vftable'{for `CPseudoLockBase'}" ??_7CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x18006DCD0: "const Microsoft::SecurityClient::IXMLBrandedColors::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_R4IXMLBrandedColors@SecurityClient@Microsoft@@6B012@@
0x180029FF0: "private: virtual class ThreatAbstraction::CThreatInfo * __ptr64 __cdecl ThreatAbstraction::CQuarantineDetectionContext::CreateThreatInfo(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ?CreateThreatInfo@CQuarantineDetectionContext@ThreatAbstraction@@EEAAPEAVCThreatInfo@2@PEAUtagMPTHREAT_INFO@@@Z
0x1800602C8: "const MpWmiCleanProgress::`vbtable'{for `ThreatAbstraction::IActionEvents'}" ??_8MpWmiCleanProgress@@7BIActionEvents@ThreatAbstraction@@@
0x1800162F0: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Reset(void) __ptr64" ?Reset@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXXZ
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x180020560: "[thunk]:public: virtual int __cdecl CPseudoLockBase::TryLock`vtordisp{4294967292,128}' (void)const __ptr64" ?TryLock@CPseudoLockBase@@$4PPPPPPPM@IA@EBAHXZ
0x1800379F0: "private: long __cdecl MorroCommon::CFileUtils::GetFolderItems(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> > & __ptr64) __ptr64" ?GetFolderItems@CFileUtils@MorroCommon@@AEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@@Z
0x18003A52C: "public: void * __ptr64 __cdecl CThreadManager::CreateThread(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned __int64,unsigned long (__cdecl*)(void * __ptr64),void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CreateThread@CThreadManager@@QEAAPEAXPEAU_SECURITY_ATTRIBUTES@@_KP6AKPEAX@Z2KPEAK@Z
0x180067A30: "__vectorcall ??_R3CRefObject@CommonUtil" ??_R3CRefObject@CommonUtil@@8
0x18005E760: "169" ??_C@_17IMLKCAOO@?$AA1?$AA6?$AA9?$AA?$AA@
0x18005E558: "139" ??_C@_17NMHHLBFN@?$AA1?$AA3?$AA9?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoActionManager::`vector deleting destructor'(unsigned int) __ptr64" ??_EIAutoActionManager@ThreatAbstraction@@UEAAPEAXI@Z
0x180016210: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Insert(class ThreatAbstraction::IDetectionContext * __ptr64) __ptr64" ?Insert@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXPEAVIDetectionContext@ThreatAbstraction@@@Z
0x180067A20: "__vectorcall ??_R2CRefObject@CommonUtil" ??_R2CRefObject@CommonUtil@@8
0x1800307E0: "protected: virtual int __cdecl MorroCommon::CWin32::CreateDirectoryImpl(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64) __ptr64" ?CreateDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x180062C8C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x18003D820: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::Release`vtordisp{4294967292,8}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x18001B0B4: "public: static long __cdecl ThreatAbstraction::CActiveThreatsController::Initialize(void)" ?Initialize@CActiveThreatsController@ThreatAbstraction@@SAJXZ
0x1800673B0: "const MpWmiCleanProgress::`RTTI Complete Object Locator'" ??_R4MpWmiCleanProgress@@6B@
0x180041304: "public: static long __cdecl Microsoft::SecurityClient::CBrandedColors::HrCreate(struct Microsoft::SecurityClient::IXMLBrandedColors * __ptr64 * __ptr64,struct Microsoft::SecurityClient::IXMLReader const * __ptr64)" ?HrCreate@CBrandedColors@SecurityClient@Microsoft@@SAJPEAPEAUIXMLBrandedColors@23@PEBUIXMLReader@23@@Z
0x18001A4CC: "public: long __cdecl ThreatAbstraction::CSignatureUpdateController::StartUpdate(enum ThreatAbstraction::tagUpdateType,unsigned short const * __ptr64) __ptr64" ?StartUpdate@CSignatureUpdateController@ThreatAbstraction@@QEAAJW4tagUpdateType@2@PEBG@Z
0x1800835F0: "__cdecl _native_startup_lock" __native_startup_lock
0x18006CB90: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18006B4B0: "const ThreatAbstraction::CScanHistoryDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CScanHistoryDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x18005DE78: "AntivirusEnabled" ??_C@_1CC@IPDIJMOL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180061FB8: WPP_5bf24b52c7fd3b6ed0076be800316366_Traceguids
0x180030C60: "protected: virtual long __cdecl MorroCommon::CWin32::GetFileVersionInfoSizeImpl(unsigned short const * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileVersionInfoSizeImpl@CWin32@MorroCommon@@MEAAJPEBGPEAK@Z
0x180036930: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetTempFolderPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetTempFolderPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005B268: "__cdecl _imp_MpManagerStatusQueryEx" __imp_MpManagerStatusQueryEx
0x18004DF60: "const ThreatAbstraction::CConfigController::`vftable'" ??_7CConfigController@ThreatAbstraction@@6B@
0x180001D90: DllMain
0x18001BF04: "public: virtual __cdecl ThreatAbstraction::CScanHistoryController::~CScanHistoryController(void) __ptr64" ??1CScanHistoryController@ThreatAbstraction@@UEAA@XZ
0x18004DD30: "const ThreatAbstraction::CSignatureUpdateController::`vftable'" ??_7CSignatureUpdateController@ThreatAbstraction@@6B@
0x180024570: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnNewContext`vtordisp{4294967292,80}' (unsigned long,unsigned long) __ptr64" ?OnNewContext@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXKK@Z
0x18006D120: "__vectorcall ??_R3?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std" ??_R3?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@8
0x180067740: "const MpWmiScanProgress::`RTTI Complete Object Locator'" ??_R4MpWmiScanProgress@@6B@
0x18006CDF0: "__vectorcall ??_R2?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std" ??_R2?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@8
0x18005C7F0: "connection_already_in_progress" ??_C@_0BP@FOJJHMCC@connection_already_in_progress?$AA@
0x180033E98: "public: __cdecl CommonUtil::CUniqueHandle<struct MorroCommon::CAutoDestroyIcon>::~CUniqueHandle<struct MorroCommon::CAutoDestroyIcon>(void) __ptr64" ??1?$CUniqueHandle@UCAutoDestroyIcon@MorroCommon@@@CommonUtil@@QEAA@XZ
0x18004F1A8: "const ThreatAbstraction::CScanHistoryDetectionContext::`vftable'{for `ILockable'}" ??_7CScanHistoryDetectionContext@ThreatAbstraction@@6BILockable@@@
0x18006A948: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`RTTI Complete Object Locator'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_R4CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x18002E1C0: "public: virtual __cdecl ThreatAbstraction::CThreatInfo::~CThreatInfo(void) __ptr64" ??1CThreatInfo@ThreatAbstraction@@UEAA@XZ
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgressInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIScanProgressInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x18005EA30: "190" ??_C@_17OENNLB@?$AA1?$AA9?$AA0?$AA?$AA@
0x18002A3B0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetThreatType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180020540: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnNewContext`vtordisp{4294967292,88}' (unsigned long,unsigned long) __ptr64" ?OnNewContext@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXKK@Z
0x18006B148: "const ThreatAbstraction::IAutoIgnoreThreats::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IAutoIgnoreThreats@ThreatAbstraction@@6BIRefCounted@@@
0x18001A1DC: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSignatureUpdateController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005DD40: "LastQuickScanSource" ??_C@_1CI@ENJJBLOD@?$AAL?$AAa?$AAs?$AAt?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180027EC0: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAXI@Z
0x18005FAD0: "287" ??_C@_17NIOADBEO@?$AA2?$AA8?$AA7?$AA?$AA@
0x18004E070: "const ThreatAbstraction::IScanProgressInfo::`vftable'{for `ThreatAbstraction::IScanProgressInfo'}" ??_7IScanProgressInfo@ThreatAbstraction@@6B01@@
0x18001D330: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanProgressInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x180029920: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18003AA44: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrDuplicateStringW(unsigned short const * __ptr64)" ?TrDuplicateStringW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBG@Z
0x180062258: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x18006BF28: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@8
0x180003BD0: "public: __cdecl CThreatRollupManager::~CThreatRollupManager(void) __ptr64" ??1CThreatRollupManager@@QEAA@XZ
0x18005E838: "ExclusionExtension" ??_C@_1CG@GDHIPLAN@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180011C88: "public: virtual void * __ptr64 __cdecl MpWmiWDOScanProgress::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMpWmiWDOScanProgress@@UEAAPEAXI@Z
0x18006D810: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_R4?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedValues@SecurityClient@Microsoft@@@
0x180062B20: ".//UpgradeSequence/PackageRef[@i" ??_C@_1EG@DPLKNNEN@?$AA?4?$AA?1?$AA?1?$AAU?$AAp?$AAg?$AAr?$AAa?$AAd?$AAe?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?1?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAR?$AAe?$AAf?$AA?$FL?$AA?$EA?$AAi@
0x18005FA88: "SignatureNotificationsValue" ??_C@_1DI@NMAKFHNN@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18000F010: MSFT_MpEvent_Load
0x18003E700: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@UEAAPEAXI@Z
0x18004D618: "const MpWmiWDOScanProgress::`vftable'" ??_7MpWmiWDOScanProgress@@6B@
0x18004DD50: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vftable'{for `ILockable'}" ??_7CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6BILockable@@@
0x180081110: "__vectorcall ??_R0?AV?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@" ??_R0?AV?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@8
0x18001CCDC: "public: void __cdecl std::queue<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::deque<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > > > >::push(class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > &&) __ptr64" ?push@?$queue@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@V?$deque@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@@std@@@std@@@std@@QEAAX$$QEAV?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@@Z
0x18000ECF0: MSFT_MpComputerStatus_GetInstance
0x18002D5D4: WPP_SF_id
0x18001D818: WPP_SF_ID
0x1800676A8: "__vectorcall ??_R2IScanProgress@ThreatAbstraction" ??_R2IScanProgress@ThreatAbstraction@@8
0x1800165D0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CExceptionThreats::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECExceptionThreats@ThreatAbstraction@@WBA@EAAPEAXI@Z
0x18006A748: "const ThreatAbstraction::CScanHistoryContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEventsImpl'}" ??_R4CScanHistoryContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x180067728: "__vectorcall ??_R3IScanProgress@ThreatAbstraction" ??_R3IScanProgress@ThreatAbstraction@@8
0x18005EFF0: "222" ??_C@_17EOKFOCBK@?$AA2?$AA2?$AA2?$AA?$AA@
0x18005B420: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180030C80: "protected: virtual int __cdecl MorroCommon::CWin32::GetFileVersionInfoImpl(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?GetFileVersionInfoImpl@CWin32@MorroCommon@@MEAAHPEBGKKPEAX@Z
0x18005DD98: "AMServiceEnabled" ??_C@_1CC@PIALHBGA@?$AAA?$AAM?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180002804: "void __cdecl MpMIUtil::MpPostResult(struct _MI_Context * __ptr64,long)" ?MpPostResult@MpMIUtil@@YAXPEAU_MI_Context@@J@Z
0x18002A650: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleAction`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetPermissibleAction@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@K@Z
0x180081850: "__vectorcall ??_R0?AUIXMLBrandedColors@SecurityClient@Microsoft@" ??_R0?AUIXMLBrandedColors@SecurityClient@Microsoft@@@8
0x180061E18: "const ThreatAbstraction::CExceptionThreats::`vbtable'{for `CRefCountedBase'}" ??_8CExceptionThreats@ThreatAbstraction@@7BCRefCountedBase@@@
0x1800351DC: "long __cdecl CommonUtil::MpNewBuffer<unsigned short>(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@G@CommonUtil@@YAJPEAPEAG_K@Z
0x1800831F8: "private: static enum tagMPSIGUPDATE_TYPE ThreatAbstraction::CSignatureUpdateController::m_mpUpdateType" ?m_mpUpdateType@CSignatureUpdateController@ThreatAbstraction@@0W4tagMPSIGUPDATE_TYPE@@A
0x1800145CC: "long __cdecl MorroCommon::HrAtlArrayCopy<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >(class ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > & __ptr64,class ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > const & __ptr64)" ??$HrAtlArrayCopy@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@MorroCommon@@YAJAEAV?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@AEBV12@@Z
0x18005B370: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180060C58: "Signature_ScheduleDay" ??_C@_1CM@GMMMEEAB@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x180069D98: "__vectorcall ??_R1A@77FA@IContextEvents@ThreatAbstraction" ??_R1A@77FA@IContextEvents@ThreatAbstraction@@8
0x18006CF50: "__vectorcall ??_R1BA@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R1BA@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x18007FF70: "__vectorcall ??_R0?AVCCertCheckFactory@MorroCommon@" ??_R0?AVCCertCheckFactory@MorroCommon@@@8
0x18005FD10: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180024A10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuarantineContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18006A2C8: "const ThreatAbstraction::CContextManager::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x180031500: "protected: virtual int __cdecl MorroCommon::CWin32::KillTimerImpl(struct HWND__ * __ptr64,unsigned __int64) __ptr64" ?KillTimerImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@_K@Z
0x18003F294: "public: static long __cdecl Microsoft::SecurityClient::CBrandedValues::HrCreate(struct Microsoft::SecurityClient::IXMLBrandedValues * __ptr64 * __ptr64,struct Microsoft::SecurityClient::IXMLReader const * __ptr64)" ?HrCreate@CBrandedValues@SecurityClient@Microsoft@@SAJPEAPEAUIXMLBrandedValues@23@PEBUIXMLReader@23@@Z
0x18001E7C0: "private: static long __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CleanCallback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?CleanCallback@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@CAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x18004E120: "const ThreatAbstraction::CScanProgressInfo::`vftable'" ??_7CScanProgressInfo@ThreatAbstraction@@6B@
0x180031A00: "protected: virtual int __cdecl MorroCommon::CWin32::WTSQuerySessionInformationImpl(void * __ptr64,unsigned long,enum _WTS_INFO_CLASS,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSQuerySessionInformationImpl@CWin32@MorroCommon@@MEAAHPEAXKW4_WTS_INFO_CLASS@@PEAPEAGPEAK@Z
0x18002BA6C: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatType(void)const __ptr64" ?GetThreatType@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18003D840: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x180081980: "__vectorcall ??_R0?AV?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@" ??_R0?AV?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@@@8
0x180069AC8: "__vectorcall ??_R1DI@?0A@EA@IDetectionContexts@ThreatAbstraction" ??_R1DI@?0A@EA@IDetectionContexts@ThreatAbstraction@@8
0x18002E8F0: "protected: long __cdecl ThreatAbstraction::CThreatInfo::InitializeLocalizedThreatInfo(unsigned __int64) __ptr64" ?InitializeLocalizedThreatInfo@CThreatInfo@ThreatAbstraction@@IEAAJ_K@Z
0x18005ACE8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000B7DC: "public: void __cdecl std::_Tree_buy<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::_Freenode0(struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAXPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@2@@Z
0x18006C3B8: "const MorroCommon::CFileUtils::`RTTI Complete Object Locator'" ??_R4CFileUtils@MorroCommon@@6B@
0x180062750: "const Microsoft::SecurityClient::CBrandedStrings::`vbtable'" ??_8CBrandedStrings@SecurityClient@Microsoft@@7B@
0x180040300: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::_Insert_nohint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64>(bool,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@1@@Z
0x1800451A8: "char const * __ptr64 __cdecl std::_Syserror_map(int)" ?_Syserror_map@std@@YAPEBDH@Z
0x1800671C8: "__vectorcall ??_R1A@?0A@EA@MpWmiCleanProgress" ??_R1A@?0A@EA@MpWmiCleanProgress@@8
0x18006D760: "__vectorcall ??_R3?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std" ??_R3?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@8
0x18006D430: "__vectorcall ??_R2?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std" ??_R2?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@8
0x180025FF0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::`vector deleting destructor'`vtordisp{4294967292,136}' (unsigned int) __ptr64" ??_ECQuarantineContextManager@ThreatAbstraction@@$4PPPPPPPM@II@EAAPEAXI@Z
0x18002DC90: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetAvailableAction`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetAvailableAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@K@Z
0x180061FD8: "deque<T> too long" ??_C@_0BC@KBDMBKEH@deque?$DMT?$DO?5too?5long?$AA@
0x18001C540: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CConfigController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCConfigController@ThreatAbstraction@@UEAAPEAXI@Z
0x18007FDA0: "__vectorcall ??_R0?AVCBrandingSettings@CBrandedResourceWrapper@MpCommonEx@" ??_R0?AVCBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@@8
0x180019F7C: "public: void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::GetAbortEvent(void)const __ptr64" ?GetAbortEvent@CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@QEBAPEAXXZ
0x18005C618: "file exists" ??_C@_0M@MIDIAGJP@file?5exists?$AA@
0x18002A05C: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleAction(unsigned long)const __ptr64" ?GetPermissibleAction@CQuarantineDetectionContext@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@K@Z
0x18005F9F8: "ScanNotificationsValue" ??_C@_1CO@GFNCJLII@?$AAS?$AAc?$AAa?$AAn?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180080F90: "__vectorcall ??_R0?AV?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@" ??_R0?AV?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@@8
0x18005E0D8: "74" ??_C@_15CIALAGLP@?$AA7?$AA4?$AA?$AA@
0x18006D9E0: "__vectorcall ??_R3IXMLFeatures@SecurityClient@Microsoft" ??_R3IXMLFeatures@SecurityClient@Microsoft@@8
0x180023410: "public: struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >::_Buynode<struct std::pair<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >(struct std::pair<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > &&) __ptr64" ??$_Buynode@U?$pair@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@?$_Tree_buy@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@1@$$QEAU?$pair@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@1@@Z
0x18006D920: "__vectorcall ??_R2IXMLFeatures@SecurityClient@Microsoft" ??_R2IXMLFeatures@SecurityClient@Microsoft@@8
0x18003A030: "public: virtual int __cdecl CWString::TryLock(void)const __ptr64" ?TryLock@CWString@@UEBAHXZ
0x18005CC10: "inappropriate io control operati" ??_C@_0CD@BNPLBMNA@inappropriate?5io?5control?5operati@
0x1800306F4: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGPEAD@Z
0x1800162F0: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Reset(void) __ptr64" ?Reset@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXXZ
0x18006E048: "__vectorcall ??_R1A@?0A@EA@?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R1A@?0A@EA@?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18003A0D4: "public: __cdecl CWString::CWString(unsigned short const * __ptr64) __ptr64" ??0CWString@@QEAA@PEBG@Z
0x18005E140: "87" ??_C@_15MLOIBLIE@?$AA8?$AA7?$AA?$AA@
0x180022DE4: "public: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::erase(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >) __ptr64" ?erase@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@2@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@2@@Z
0x180040AF0: "public: virtual long __cdecl Microsoft::SecurityClient::CFeatureBrand::HrIsDefaultSqmOptInEnabled(bool * __ptr64)const __ptr64" ?HrIsDefaultSqmOptInEnabled@CFeatureBrand@SecurityClient@Microsoft@@UEBAJPEA_N@Z
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IThreatInfo,class VolatileOps<class ThreatAbstraction::IThreatInfo> >::~CSmartPtr<class ThreatAbstraction::IThreatInfo,class VolatileOps<class ThreatAbstraction::IThreatInfo> >(void) __ptr64" ??1?$CSmartPtr@VIThreatInfo@ThreatAbstraction@@V?$VolatileOps@VIThreatInfo@ThreatAbstraction@@@@@@QEAA@XZ
0x18005AF68: KERNEL32_NULL_THUNK_DATA
0x18005AE28: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18005C778: "too many files open" ??_C@_0BE@GHAFMPAH@too?5many?5files?5open?$AA@
0x180069430: "const ThreatAbstraction::CConfigController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CConfigController@ThreatAbstraction@@6BILockable@@@
0x180083510: "__cdecl _puiHead" __puiHead
0x18004FF98: "const MpCommonEx::IBrandParams::`vftable'{for `MpCommonEx::IBrandParams'}" ??_7IBrandParams@MpCommonEx@@6B01@@
0x18006C058: "__vectorcall ??_R3IBrandedResources@MpCommonEx" ??_R3IBrandedResources@MpCommonEx@@8
0x180068A08: "const ThreatAbstraction::COnDemandController::`RTTI Complete Object Locator'" ??_R4COnDemandController@ThreatAbstraction@@6B@
0x18006BE70: "__vectorcall ??_R2IBrandedResources@MpCommonEx" ??_R2IBrandedResources@MpCommonEx@@8
0x18001D7D0: WPP_SF_I
0x18001D870: WPP_SF_i
0x18005DFC0: "ThreatID" ??_C@_1BC@NMNONBBO@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AA?$AA@
0x18005ABF0: "__cdecl _imp_LookupPrivilegeNameW" __imp_LookupPrivilegeNameW
0x180062060: "const ThreatAbstraction::CAutoIgnoreThreat::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8CAutoIgnoreThreat@ThreatAbstraction@@7BIThreatInfo@1@@
0x180005410: "public: virtual void * __ptr64 __cdecl MpCommonEx::IBrandParams::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIBrandParams@MpCommonEx@@UEAAPEAXI@Z
0x18000C968: "public: __cdecl AMIndication::AMIndication(struct _MI_Context * __ptr64) __ptr64" ??0AMIndication@@QEAA@PEAU_MI_Context@@@Z
0x180061DD0: WPP_495a2afb6917320b6d751aa4b8f7d724_Traceguids
0x18001AABC: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpUpdateSourceInfoFree>::~CUniqueHandle<struct CAutoMpUpdateSourceInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpUpdateSourceInfoFree@@@CommonUtil@@QEAA@XZ
0x180024394: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<unsigned long,class std::allocator<unsigned long> >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@KV?$allocator@K@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@2@XZ
0x18001D58C: "public: __cdecl CSmartPtr<class CThreadManager,class VolatileOps<class CThreadManager> >::~CSmartPtr<class CThreadManager,class VolatileOps<class CThreadManager> >(void) __ptr64" ??1?$CSmartPtr@VCThreadManager@@V?$VolatileOps@VCThreadManager@@@@@@QEAA@XZ
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IServiceStatusEvents,class VolatileOps<class ThreatAbstraction::IServiceStatusEvents> >::~CSmartPtr<class ThreatAbstraction::IServiceStatusEvents,class VolatileOps<class ThreatAbstraction::IServiceStatusEvents> >(void) __ptr64" ??1?$CSmartPtr@VIServiceStatusEvents@ThreatAbstraction@@V?$VolatileOps@VIServiceStatusEvents@ThreatAbstraction@@@@@@QEAA@XZ
0x180014744: "public: __cdecl CSmartPtr<class ThreatAbstraction::CActiveThreatsContextManager,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager> >::~CSmartPtr<class ThreatAbstraction::CActiveThreatsContextManager,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager> >(void) __ptr64" ??1?$CSmartPtr@VCActiveThreatsContextManager@ThreatAbstraction@@V?$VolatileOps@VCActiveThreatsContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::CScanHistoryDetectionContext,class VolatileOps<class ThreatAbstraction::CScanHistoryDetectionContext> >::~CSmartPtr<class ThreatAbstraction::CScanHistoryDetectionContext,class VolatileOps<class ThreatAbstraction::CScanHistoryDetectionContext> >(void) __ptr64" ??1?$CSmartPtr@VCScanHistoryDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCScanHistoryDetectionContext@ThreatAbstraction@@@@@@QEAA@XZ
0x180005464: "public: __cdecl CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts> >::~CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts> >(void) __ptr64" ??1?$CSmartPtr@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@V?$VolatileOps@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18005D898: "2" ??_C@_13IEJJBAMJ@?$AA2?$AA?$AA@
0x18004DC78: "const ThreatAbstraction::CScheduledScanController::`vftable'{for `ILockable'}" ??_7CScheduledScanController@ThreatAbstraction@@6BILockable@@@
0x180030BB0: "protected: virtual int __cdecl MorroCommon::CWin32::ConvertStringSecurityDescriptorToSecurityDescriptorImpl(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?ConvertStringSecurityDescriptorToSecurityDescriptorImpl@CWin32@MorroCommon@@MEAAHPEBGKPEAPEAXPEAK@Z
0x18005E998: "188" ??_C@_17OAMCGPL@?$AA1?$AA8?$AA8?$AA?$AA@
0x1800463C1: "__cdecl _RTDynamicCast" __RTDynamicCast
0x18005AD48: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x180019890: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSimpleMpConfigComWriter@ThreatAbstraction@@UEAAPEAXI@Z
0x180016510: "[thunk]:public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_E?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x18005AD60: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180044F80: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180078C20: "__cdecl TI3?AVCError@@" _TI3?AVCError@@
0x18005D6F8: "Revision" ??_C@_1BC@BNNBDBAG@?$AAR?$AAe?$AAv?$AAi?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002B460: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::CResource::GetPath(void)const __ptr64" ?GetPath@CResource@IDetectionContext@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x180045128: "void __cdecl std::_Xbad_alloc(void)" ?_Xbad_alloc@std@@YAXXZ
0x18005F9E0: "277" ??_C@_17CJLGIDJL@?$AA2?$AA7?$AA7?$AA?$AA@
0x180045098: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x18005C988: "no_buffer_space" ??_C@_0BA@FDIJKJCL@no_buffer_space?$AA@
0x18000ECC0: MSFT_MpHeartBeat_Load
0x18001AB40: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,128}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@IA@EBAXXZ
0x180067150: "__vectorcall ??_R1A@BA@3FA@IRefCounted" ??_R1A@BA@3FA@IRefCounted@@8
0x18005F328: "ThreatIDDefaultAction_Ids" ??_C@_1DE@DGOAIPLG@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA_?$AAI?$AAd?$AAs?$AA?$AA@
0x180030F70: "protected: virtual int __cdecl MorroCommon::CWin32::Process32FirstImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32FirstImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x18005EF48: "DisablePrivacyMode" ??_C@_1CG@JLEMAMEH@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAP?$AAr?$AAi?$AAv?$AAa?$AAc?$AAy?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180082860: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180045DB8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180083190: "__cdecl tls_index" _tls_index
0x18000ECC0: MSFT_MpPreference_Load
0x18001AB9C: "public: __cdecl ThreatAbstraction::CActiveThreatsController::CActiveThreatsController(void) __ptr64" ??0CActiveThreatsController@ThreatAbstraction@@QEAA@XZ
0x18005E398: "ProcessName" ??_C@_1BI@DMELAOBE@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18006C5F0: "const CCritSectionBase::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CCritSectionBase@@6BILockable@@@
0x18005E4A8: "RemediationTime" ??_C@_1CA@LILBBBBD@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18007F1A0: "__vectorcall ??_R0?AVCWDOScanController@ThreatAbstraction@" ??_R0?AVCWDOScanController@ThreatAbstraction@@@8
0x18005E6A8: "32776" ??_C@_1M@MIKMEFGN@?$AA3?$AA2?$AA7?$AA7?$AA6?$AA?$AA@
0x180019230: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScheduledScanController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScheduledScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x180022CA8: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::_Erase(struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@Z
0x18000EE40: MSFT_MpThreatCatalog_GetInstance
0x180016AB4: "public: virtual long __cdecl CPseudoRefCountedBase::Release(void)const __ptr64" ?Release@CPseudoRefCountedBase@@UEBAJXZ
0x180061B98: "map/set<T> too long" ??_C@_0BE@JONHPENG@map?1set?$DMT?$DO?5too?5long?$AA@
0x180016064: "public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::GetCount(void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEBAKXZ
0x180016794: "public: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::push_back(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > const & __ptr64) __ptr64" ?push_back@?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAXAEBV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@Z
0x18005E168: "92" ??_C@_15DHGKDIBD@?$AA9?$AA2?$AA?$AA@
0x180062470: WPP_4484fd4eaef0355a7a130a68ba2b2770_Traceguids
0x18007FBD0: "__vectorcall ??_R0?AVCResource@IDetectionContext@ThreatAbstraction@" ??_R0?AVCResource@IDetectionContext@ThreatAbstraction@@@8
0x18002E3A4: "protected: long __cdecl ThreatAbstraction::CThreatInfo::InitializeThreatInfo(unsigned __int64) __ptr64" ?InitializeThreatInfo@CThreatInfo@ThreatAbstraction@@IEAAJ_K@Z
0x180061D70: "quick" ??_C@_05DFMHJABL@quick?$AA@
0x18005CB68: "connection reset" ??_C@_0BB@IECNJNOI@connection?5reset?$AA@
0x18003BCF8: "long __cdecl CommonUtil::UtilRegOpenKey(struct HKEY__ * __ptr64 * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilRegOpenKey@CommonUtil@@YAJPEAPEAUHKEY__@@PEAU2@PEBGK@Z
0x180011584: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Reserve(unsigned __int64) __ptr64" ?_Reserve@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x18005E0E0: "75" ??_C@_15JALHGBNK@?$AA7?$AA5?$AA?$AA@
0x18002DA90: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCategoryDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18007FC58: "__vectorcall ??_R0?AVCWin32@MorroCommon@" ??_R0?AVCWin32@MorroCommon@@@8
0x18005E138: "86" ??_C@_15HDFEHMOB@?$AA8?$AA6?$AA?$AA@
0x1800405FC: "public: virtual __cdecl Microsoft::SecurityClient::CFeatureBrand::~CFeatureBrand(void) __ptr64" ??1CFeatureBrand@SecurityClient@Microsoft@@UEAA@XZ
0x18005E930: "RemediationScheduleDay" ??_C@_1CO@BFKCOJCG@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x18000313C: "public: __cdecl ATL::CAtlException::CAtlException(long) __ptr64" ??0CAtlException@ATL@@QEAA@J@Z
0x180066ED0: "const std::_Generic_error_category::`RTTI Complete Object Locator'" ??_R4_Generic_error_category@std@@6B@
0x18007F4C0: "__vectorcall ??_R0?AVCDetectionContextsBase@CContextManager@ThreatAbstraction@" ??_R0?AVCDetectionContextsBase@CContextManager@ThreatAbstraction@@@8
0x18006C8B0: "__vectorcall ??_R3?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R3?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x1800342E0: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x18005DCC0: "QuickScanStartTime" ??_C@_1CG@FOFCABBF@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18006C690: "__vectorcall ??_R2?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R2?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x18004E700: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18005B178: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x18002A2B0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryName`vtordisp{4294967292,40}' (void)const __ptr64" ?GetCategoryName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x18005EF00: "217" ??_C@_17PPOPGAIG@?$AA2?$AA1?$AA7?$AA?$AA@
0x18005D1F8: WPP_e6597e19db2a3b2c9d06112a55aaf4a7_Traceguids
0x1800169D8: ??1?$CComQIPtr@UIXMLDOMElement@@$1?_GUID_2933bf86_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@B@ATL@@QEAA@XZ
0x1800603D0: "Exclusions\Processes" ??_C@_1CK@DAMLIMHB@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x18001D754: "void __cdecl ThreatAbstraction::_CloseHandle(void * __ptr64,void * __ptr64)" ?_CloseHandle@ThreatAbstraction@@YAXPEAX0@Z
0x18004E290: "const ThreatAbstraction::CActiveThreatsContextManager::`vftable'{for `CCritSectionBase'}" ??_7CActiveThreatsContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x180037530: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadRtfFromFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<char,class ATL::StrTraitATL<char,class ATL::ChTraitsCRT<char> > > & __ptr64) __ptr64" ?ReadRtfFromFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z
0x180083268: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrxlnnlmUoryUlyquivUznwGEUhgwzucOlyq@WMICommon" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUdnrxlnnlmUoryUlyquivUznwGEUhgwzucOlyq@WMICommon
0x180060518: "SetASRRuleIdsDefaultActions" ??_C@_1DI@PAHNJMPP@?$AAS?$AAe?$AAt?$AAA?$AAS?$AAR?$AAR?$AAu?$AAl?$AAe?$AAI?$AAd?$AAs?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18005B190: "__cdecl _imp_PathCombineW" __imp_PathCombineW
0x18005CCD0: "no message available" ??_C@_0BF@PBGGPKKE@no?5message?5available?$AA@
0x180069480: "const ThreatAbstraction::CConfigController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CConfigController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180020C98: "protected: virtual __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::~CDetectionContextsBase(void) __ptr64" ??1CDetectionContextsBase@CContextManager@ThreatAbstraction@@MEAA@XZ
0x180060080: "ThreatDetection" ??_C@_0BA@GLJCHAMB@ThreatDetection?$AA@
0x180030B50: "protected: virtual int __cdecl MorroCommon::CWin32::FreeLibraryImpl(struct HINSTANCE__ * __ptr64) __ptr64" ?FreeLibraryImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@@Z
0x180038638: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEAAX_K@Z
0x18002A9B0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetAdvice`vtordisp{4294967292,8}' (void)const __ptr64" ?GetAdvice@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x180069D70: "__vectorcall ??_R1A@?0A@EA@CContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CContextManager@ThreatAbstraction@@8
0x18006C228: "const MpCommonEx::IBrandedResources::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IBrandedResources@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x18004E510: "const ThreatAbstraction::CContextManager::`vftable'{for `ILockable'}" ??_7CContextManager@ThreatAbstraction@@6BILockable@@@
0x1800232A8: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<unsigned long,class std::allocator<unsigned long> > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@KV?$allocator@K@std@@@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@2@XZ
0x18005DF0C: "45" ??_C@_15BGCDBDHE@?$AA4?$AA5?$AA?$AA@
0x18007E600: "__vectorcall ??_R0?AVerror_category@std@" ??_R0?AVerror_category@std@@@8
0x18006E640: "__cdecl tls_start" _tls_start
0x18003B4E4: "long __cdecl CommonUtil::UtilIsDirectoryExists(unsigned short const * __ptr64)" ?UtilIsDirectoryExists@CommonUtil@@YAJPEBG@Z
0x1800683B8: "const ISequence<class ThreatAbstraction::IDetectionContext>::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6BIRefCounted@@@
0x180061EA0: "const ThreatAbstraction::COnDemandController::`vbtable'" ??_8COnDemandController@ThreatAbstraction@@7B@
0x1800320F0: "public: __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::CBrandingSettings(void) __ptr64" ??0CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@QEAA@XZ
0x18004F9F0: "const ThreatAbstraction::CQuarantineThreatInfo::`vftable'{for `CCritSectionBase'}" ??_7CQuarantineThreatInfo@ThreatAbstraction@@6BCCritSectionBase@@@
0x180050678: "const Microsoft::SecurityClient::IXMLFeatures::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLFeatures@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18001AB80: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,128}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@IA@EBAHXZ
0x18005DA90: "AntivirusSignatureAge" ??_C@_1CM@INFONEKL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x18006A390: "const ThreatAbstraction::IContextEventsImpl::`RTTI Complete Object Locator'" ??_R4IContextEventsImpl@ThreatAbstraction@@6B@
0x180016FE0: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@A@EBAJXZ
0x180061F50: WPP_bf68947f69f33550c2224c62e2b59d15_Traceguids
0x1800016C0: "public: virtual bool __cdecl std::error_category::equivalent(class std::error_code const & __ptr64,int)const __ptr64" ?equivalent@error_category@std@@UEBA_NAEBVerror_code@2@H@Z
0x18006C908: "const CWString::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CWString@@6BCRefCountedBase@@@
0x180062400: WPP_7867767a03eb3382531d377e5f0984e3_Traceguids
0x18005B5E0: "__cdecl _xl_z" __xl_z
0x1800291B0: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextCompleted(class ThreatAbstraction::IDetectionContext const * __ptr64) __ptr64" ?OnContextCompleted@IContextEventsImpl@ThreatAbstraction@@MEAAXPEBVIDetectionContext@2@@Z
0x18005E3E8: "126" ??_C@_17EPEIHCKO@?$AA1?$AA2?$AA6?$AA?$AA@
0x18001C090: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryController::`vector deleting destructor'`vtordisp{4294967292,80}' (unsigned int) __ptr64" ??_ECScanHistoryController@ThreatAbstraction@@$4PPPPPPPM@FA@EAAPEAXI@Z
0x180062080: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vbtable'{for `ThreatAbstraction::IDetectionContexts'}" ??_8CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@7BIDetectionContexts@2@@
0x18000D740: "unsigned int __cdecl MpStartIndicationListener(void * __ptr64)" ?MpStartIndicationListener@@YAIPEAX@Z
0x18005FD38: "Adapter_UnRegisterDLL" ??_C@_0BG@LLPNBHDF@Adapter_UnRegisterDLL?$AA@
0x18005FBA0: "Send" ??_C@_19FAOHAKGD@?$AAS?$AAe?$AAn?$AAd?$AA?$AA@
0x180069F68: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x18006D608: "__vectorcall ??_R1A@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R1A@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x18005D850: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800326A0: "public: virtual long __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetMarket(unsigned short * __ptr64 * __ptr64)const __ptr64" ?GetMarket@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEBAJPEAPEAG@Z
0x180060F20: "Windows Defender Exploit Guard\C" ??_C@_1HA@BABBEENF@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAC@
0x180080410: "__vectorcall ??_R0?AUIXMLBrandedStrings@SecurityClient@Microsoft@" ??_R0?AUIXMLBrandedStrings@SecurityClient@Microsoft@@@8
0x1800411A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::Release`vtordisp{4294967292,16}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@BA@EBAJXZ
0x180005440: "public: virtual void __cdecl ThreatAbstraction::IContextEvents::OnRoutineCleanComplete(class ThreatAbstraction::IDetectionContexts const * __ptr64,long,int) __ptr64" ?OnRoutineCleanComplete@IContextEvents@ThreatAbstraction@@UEAAXPEBVIDetectionContexts@2@JH@Z
0x180079010: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x180060D80: "DefinitionUpdateFileSharesSource" ??_C@_1EE@NGMCJHCB@?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAS?$AAh?$AAa?$AAr?$AAe?$AAs?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe@
0x180068658: "__vectorcall ??_R2CError" ??_R2CError@@8
0x180031BA0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetDriveTypeImpl(unsigned short const * __ptr64) __ptr64" ?GetDriveTypeImpl@CWin32@MorroCommon@@MEAAIPEBG@Z
0x18007FC18: "__vectorcall ??_R0?AVCQuarantineThreatInfo@ThreatAbstraction@" ??_R0?AVCQuarantineThreatInfo@ThreatAbstraction@@@8
0x1800174AC: "public: void __cdecl ThreatAbstraction::COnDemandController::CScanContext::Resources::Uninitialize(void) __ptr64" ?Uninitialize@Resources@CScanContext@COnDemandController@ThreatAbstraction@@QEAAXXZ
0x180068748: "__vectorcall ??_R3CError" ??_R3CError@@8
0x180015A4C: "public: virtual __cdecl ThreatAbstraction::CExceptionThreats::~CExceptionThreats(void) __ptr64" ??1CExceptionThreats@ThreatAbstraction@@UEAA@XZ
0x180030930: "protected: virtual int __cdecl MorroCommon::CWin32::CopyFileImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?CopyFileImpl@CWin32@MorroCommon@@MEAAHPEBG0H@Z
0x18005F460: "240" ??_C@_17DCPFMJIM@?$AA2?$AA4?$AA0?$AA?$AA@
0x180069C30: "__vectorcall ??_R1A@?0A@EA@CDetectionContextsBase@CContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CDetectionContextsBase@CContextManager@ThreatAbstraction@@8
0x180022A60: "public: __cdecl CSafePtr<class std::map<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >,class VolatileOps<class std::map<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > >::~CSafePtr<class std::map<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >,class VolatileOps<class std::map<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > >(void) __ptr64" ??1?$CSafePtr@V?$map@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@@std@@V?$VolatileOps@V?$map@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@@std@@@@@@QEAA@XZ
0x180018D00: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,96}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@GA@EBAXXZ
0x180022670: "protected: virtual int __cdecl ThreatAbstraction::CContextManager::FindDetectionContext(unsigned __int64,unsigned long * __ptr64) __ptr64" ?FindDetectionContext@CContextManager@ThreatAbstraction@@MEAAH_KPEAK@Z
0x180060A60: "ScheduleTime" ??_C@_1BK@CLIIHINN@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18005D0C0: "ext-ms-win-shell32-shellfolders-" ??_C@_1EO@NPIHFBJP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?9?$AAs?$AAh?$AAe?$AAl?$AAl?$AAf?$AAo?$AAl?$AAd?$AAe?$AAr?$AAs?$AA?9@
0x180005498: "public: __cdecl CommonUtil::AutoRef<class ThreatAbstraction::CSignatureUpdateController::CUpdateContext>::~AutoRef<class ThreatAbstraction::CSignatureUpdateController::CUpdateContext>(void) __ptr64" ??1?$AutoRef@VCUpdateContext@CSignatureUpdateController@ThreatAbstraction@@@CommonUtil@@QEAA@XZ
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x180002230: "void __cdecl Unload(struct _MI_Module_Self * __ptr64,struct _MI_Context * __ptr64)" ?Unload@@YAXPEAU_MI_Module_Self@@PEAU_MI_Context@@@Z
0x18005FD88: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180018050: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoThreadHandleTag,0>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoThreadHandleTag,0>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoThreadHandleTag@CommonUtil@@$0A@@CommonUtil@@QEAA@XZ
0x18005D178: "Delete" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x18006D040: "__vectorcall ??_R1A@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std" ??_R1A@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@8
0x18004C010: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x1800220D0: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::_GetDetectionContextsByIDs(unsigned long * __ptr64,unsigned long,class CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase> * __ptr64) __ptr64" ?_GetDetectionContextsByIDs@CContextManager@ThreatAbstraction@@MEAAXPEAKKPEAV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@Z
0x180017BC0: "public: void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::CScanContext::GetAbortEvent(void)const __ptr64" ?GetAbortEvent@CScanContext@COnDemandController@ThreatAbstraction@@QEBAPEAXXZ
0x18005AD28: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800248D8: "public: __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryContextManager(void) __ptr64" ??0CScanHistoryContextManager@ThreatAbstraction@@QEAA@XZ
0x18006B8A8: "const ThreatAbstraction::CAutoIgnoreThreat::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CAutoIgnoreThreat@ThreatAbstraction@@6BIThreatInfo@1@@
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IActionEvents,class VolatileOps<class ThreatAbstraction::IActionEvents> >::~CSmartPtr<class ThreatAbstraction::IActionEvents,class VolatileOps<class ThreatAbstraction::IActionEvents> >(void) __ptr64" ??1?$CSmartPtr@VIActionEvents@ThreatAbstraction@@V?$VolatileOps@VIActionEvents@ThreatAbstraction@@@@@@QEAA@XZ
0x18005DC38: "29" ??_C@_15IKKMEPNB@?$AA2?$AA9?$AA?$AA@
0x18005AC80: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18005AC18: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryDetectionContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanHistoryDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18002A1F0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleActionCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetPermissibleActionCount@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180016470: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::GetCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EBAKXZ
0x180062208: WPP_e6258f56ce483d312bcc6fe9faf38069_Traceguids
0x18001578C: "public: __cdecl ThreatAbstraction::CExceptionThreats::CExceptionThreats(void) __ptr64" ??0CExceptionThreats@ThreatAbstraction@@QEAA@XZ
0x18005AEB8: "__cdecl _imp_GetLongPathNameW" __imp_GetLongPathNameW
0x18006B8F8: "const ThreatAbstraction::CAutoIgnoreThreat::`RTTI Complete Object Locator'{for `ThreatAbstraction::CThreatInfo'}" ??_R4CAutoIgnoreThreat@ThreatAbstraction@@6BCThreatInfo@1@@
0x18005E190: "97" ??_C@_15LEMICB@?$AA9?$AA7?$AA?$AA@
0x18005D7B0: "UMLPackagePath" ??_C@_1BO@BFKDNMLN@?$AAU?$AAM?$AAL?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18004E5F0: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7CDetectionContextsBase@CContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18005C960: "network_reset" ??_C@_0O@EHNDLHIG@network_reset?$AA@
0x1800629B8: "WGA" ??_C@_17PEMLNPMF@?$AAW?$AAG?$AAA?$AA?$AA@
0x18006B310: "const ThreatAbstraction::COnDemandDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext'}" ??_R4COnDemandDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x18001F810: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::SetScanGUID(struct _GUID const & __ptr64) __ptr64" ?SetScanGUID@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXAEBU_GUID@@@Z
0x18007F430: "__vectorcall ??_R0?AV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@" ??_R0?AV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@8
0x18005D190: "unknown error" ??_C@_0O@BFJCFAAK@unknown?5error?$AA@
0x18002BFE4: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleAction(unsigned long)const __ptr64" ?GetPermissibleAction@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@K@Z
0x18005F000: "DisableIntrusionPreventionSystem" ??_C@_1EC@GEADBGEN@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAI?$AAn?$AAt?$AAr?$AAu?$AAs?$AAi?$AAo?$AAn?$AAP?$AAr?$AAe?$AAv?$AAe?$AAn?$AAt?$AAi?$AAo?$AAn?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm@
0x18006D540: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std" ??_R1BA@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@8
0x180021BB0: "protected: virtual unsigned long __cdecl ThreatAbstraction::CContextManager::GetFirstContextID(void)const __ptr64" ?GetFirstContextID@CContextManager@ThreatAbstraction@@MEBAKXZ
0x180068070: "__vectorcall ??_R1A@7M@FA@ILockable" ??_R1A@7M@FA@ILockable@@8
0x18003B550: "long __cdecl CommonUtil::UtilRawGetLoadedKernel32ProcAddress(__int64 (__cdecl* * __ptr64)(void),char const * __ptr64,bool)" ?UtilRawGetLoadedKernel32ProcAddress@CommonUtil@@YAJPEAP6A_JXZPEBD_N@Z
0x180018BD4: "public: __cdecl CSafePtr<class ThreatAbstraction::COnDemandController::CScanContext,class VolatileOps<class ThreatAbstraction::COnDemandController::CScanContext> >::~CSafePtr<class ThreatAbstraction::COnDemandController::CScanContext,class VolatileOps<class ThreatAbstraction::COnDemandController::CScanContext> >(void) __ptr64" ??1?$CSafePtr@VCScanContext@COnDemandController@ThreatAbstraction@@V?$VolatileOps@VCScanContext@COnDemandController@ThreatAbstraction@@@@@@QEAA@XZ
0x18001F8B4: "public: __cdecl CSafePtr<class std::map<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > >,class VolatileOps<class std::map<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > > > >::~CSafePtr<class std::map<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > >,class VolatileOps<class std::map<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > > > >(void) __ptr64" ??1?$CSafePtr@V?$map@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@V?$VolatileOps@V?$map@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@@@@@QEAA@XZ
0x1800695F0: "const ThreatAbstraction::CScanProgressInfoQueue::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanProgressInfoQueue@ThreatAbstraction@@6BILockable@@@
0x18005B348: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x1800573A0: MSFT_MpSignature_rtti
0x18005D46C: "In" ??_C@_15LNJDIFMI@?$AAI?$AAn?$AA?$AA@
0x180060D50: "SpyNet" ??_C@_1O@NLELDOCF@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AA?$AA@
0x18005FAC0: "285" ??_C@_17HCOJPJMF@?$AA2?$AA8?$AA5?$AA?$AA@
0x1800608B8: "Scan" ??_C@_19IGDFBFF@?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x1800310C0: "protected: virtual int __cdecl MorroCommon::CWin32::RemoveDirectoryImpl(unsigned short const * __ptr64) __ptr64" ?RemoveDirectoryImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18002D154: "protected: struct std::pair<class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > >,bool> __cdecl std::_Tree<class std::_Tset_traits<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,0> >::_Insert_nohint<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64,struct std::_Nil>(bool,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_nohint@AEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U_Nil@std@@@?$_Tree@V?$_Tset_traits@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@_N@1@_NAEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U_Nil@1@@Z
0x180029AE0: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,224}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@OA@EBAHXZ
0x18003B72C: "long __cdecl CommonUtil::NewSprintfW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,...)" ?NewSprintfW@CommonUtil@@YAJPEAPEAGPEBGZZ
0x18004E750: "const ThreatAbstraction::CContextManager::CDetectionStats::`vftable'{for `CRefCountedBase'}" ??_7CDetectionStats@CContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x1800396E0: "public: virtual void * __ptr64 __cdecl MorroCommon::ILockedCertCheck::`scalar deleting destructor'(unsigned int) __ptr64" ??_GILockedCertCheck@MorroCommon@@UEAAPEAXI@Z
0x18004D680: "const ATL::CWin32Heap::`vftable'" ??_7CWin32Heap@ATL@@6B@
0x180060648: "Scan_ScheduleDay" ??_C@_1CC@LJOKMGDM@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IDetectionContexts,class VolatileOps<class ThreatAbstraction::IDetectionContexts> >::~CSmartPtr<class ThreatAbstraction::IDetectionContexts,class VolatileOps<class ThreatAbstraction::IDetectionContexts> >(void) __ptr64" ??1?$CSmartPtr@VIDetectionContexts@ThreatAbstraction@@V?$VolatileOps@VIDetectionContexts@ThreatAbstraction@@@@@@QEAA@XZ
0x18005B020: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x18005B1B8: api-ms-win-core-shlwapi-legacy-l1-1-0_NULL_THUNK_DATA
0x18005AB40: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x18005E830: "173" ??_C@_17CIFLBDCP@?$AA1?$AA7?$AA3?$AA?$AA@
0x180062750: "const Microsoft::SecurityClient::CXMLReader::`vbtable'" ??_8CXMLReader@SecurityClient@Microsoft@@7B@
0x18005E070: "61" ??_C@_15NEIJCFCI@?$AA6?$AA1?$AA?$AA@
0x180050328: "const MorroCommon::ILockedCertCheck::`vftable'" ??_7ILockedCertCheck@MorroCommon@@6B@
0x18006A0A8: "__vectorcall ??_R2CDetectionStats@CContextManager@ThreatAbstraction" ??_R2CDetectionStats@CContextManager@ThreatAbstraction@@8
0x18005EB00: "ScanPurgeItemsAfterDelay" ??_C@_1DC@OCPFJIGE@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAu?$AAr?$AAg?$AAe?$AAI?$AAt?$AAe?$AAm?$AAs?$AAA?$AAf?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x18006DF30: "__vectorcall ??_R1BA@?0A@EA@?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std" ??_R1BA@?0A@EA@?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@8
0x18006A148: "__vectorcall ??_R3CDetectionStats@CContextManager@ThreatAbstraction" ??_R3CDetectionStats@CContextManager@ThreatAbstraction@@8
0x18005AF40: "__cdecl _imp_GlobalFindAtomW" __imp_GlobalFindAtomW
0x18002A3D0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,264}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@BAI@EBAXXZ
0x18003F370: "private: void __cdecl Microsoft::SecurityClient::CBrandedValues::Initialize(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ?Initialize@CBrandedValues@SecurityClient@Microsoft@@AEAAXPEBUIXMLReader@23@@Z
0x18005B448: "__cdecl _imp_??_V@YAXPEAX@Z" __imp_??_V@YAXPEAX@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct tagThreatDefaultAction> >::deallocate(struct tagThreatDefaultAction * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@UtagThreatDefaultAction@@@std@@@std@@QEAAXPEAUtagThreatDefaultAction@@_K@Z
0x18004E050: "const ThreatAbstraction::IScanProgressInfo::`vftable'{for `IRefCounted'}" ??_7IScanProgressInfo@ThreatAbstraction@@6BIRefCounted@@@
0x18006BC48: "const ThreatAbstraction::CQuarantineThreatInfo::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CQuarantineThreatInfo@ThreatAbstraction@@6BCCritSectionBase@@@
0x180045C70: "__cdecl ValidateImageBase" _ValidateImageBase
0x180066F80: "__vectorcall ??_R3_Generic_error_category@std" ??_R3_Generic_error_category@std@@8
0x180066FF0: "__vectorcall ??_R2_Generic_error_category@std" ??_R2_Generic_error_category@std@@8
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18004EBA0: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vftable'" ??_7?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6B@
0x18003D7C0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x180010970: "public: struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<unsigned long const,unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBKK@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@XZ
0x18006D3C0: "__vectorcall ??_R2?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std" ??_R2?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@8
0x18001C920: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfoQueue::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanProgressInfoQueue@ThreatAbstraction@@UEAAPEAXI@Z
0x18000F4CC: "public: void __cdecl CThreatDetails::AddResource(class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> >) __ptr64" ?AddResource@CThreatDetails@@QEAAXV?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@Z
0x18005F368: "ThreatIDDefaultAction_Actions" ??_C@_1DM@FLOJDDGK@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA_?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18006D748: "__vectorcall ??_R3?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std" ??_R3?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@8
0x18006C480: "const MorroCommon::CCertCheckFactory::`RTTI Complete Object Locator'" ??_R4CCertCheckFactory@MorroCommon@@6B@
0x180061280: "GetASRRuleIdsDefaultActions" ??_C@_1DI@IEAJOIJC@?$AAG?$AAe?$AAt?$AAA?$AAS?$AAR?$AAR?$AAu?$AAl?$AAe?$AAI?$AAd?$AAs?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x18001B810: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,8}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@7EBAJXZ
0x18002A610: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityDescription`vtordisp{4294967292,40}' (void)const __ptr64" ?GetSeverityDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x180029820: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CDetectionContextBase::GetActionStatus`vtordisp{4294967292,0}' (void)const __ptr64" ?GetActionStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAJXZ
0x1800461B4: "void __cdecl operator delete(void * __ptr64,struct std::nothrow_t const & __ptr64)" ??3@YAXPEAXAEBUnothrow_t@std@@@Z
0x180069520: "__vectorcall ??_R1A@DI@M@FA@IScanProgressInfoQueue@ThreatAbstraction" ??_R1A@DI@M@FA@IScanProgressInfoQueue@ThreatAbstraction@@8
0x18004E010: "const ThreatAbstraction::CScanProgressInfoQueue::`vftable'" ??_7CScanProgressInfoQueue@ThreatAbstraction@@6B@
0x180021620: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18007EAE0: "__vectorcall ??_R0?AVEHresultException@MorroCommon@" ??_R0?AVEHresultException@MorroCommon@@@8
0x18005FF48: "GetThreatInstances Failed" ??_C@_1DE@DKLONCOJ@?$AAG?$AAe?$AAt?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAs?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x18006E0E0: "__vectorcall ??_R3?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil" ??_R3?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@@8
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgressInfoQueue::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIScanProgressInfoQueue@ThreatAbstraction@@UEAAPEAXI@Z
0x180021E20: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChangeCount(void)const __ptr64" ?GetConfigChangeCount@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18006DDA0: "__vectorcall ??_R2?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil" ??_R2?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@@8
0x18007E700: "__vectorcall ??_R0?AVMpWmiCleanProgress@" ??_R0?AVMpWmiCleanProgress@@@8
0x18005B310: "__cdecl _imp_MpUpdateStartEx" __imp_MpUpdateStartEx
0x180011F40: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,16}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@BA@EBAJXZ
0x180069DE8: "__vectorcall ??_R1A@?0A@EA@IContextEvents@ThreatAbstraction" ??_R1A@?0A@EA@IContextEvents@ThreatAbstraction@@8
0x18005AC30: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x18004618C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18005E0A8: "68" ??_C@_15KJIBGKKC@?$AA6?$AA8?$AA?$AA@
0x18006CAD0: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@8
0x180041B3C: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18000D81C: "public: virtual void * __ptr64 __cdecl MpWmiSignatureProgress::`vector deleting destructor'(unsigned int) __ptr64" ??_EMpWmiSignatureProgress@@UEAAPEAXI@Z
0x18005EF70: "220" ??_C@_17OEKMCKJB@?$AA2?$AA2?$AA0?$AA?$AA@
0x1800054F0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,40}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@CI@EBAJXZ
0x180060160: "Errors were encountered while at" ??_C@_1LA@GCBBHLPF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?5?$AAw?$AAe?$AAr?$AAe?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?5?$AAw?$AAh?$AAi?$AAl?$AAe?$AA?5?$AAa?$AAt@
0x180045B53: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x18002BF5C: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleActions(void)const __ptr64" ?GetPermissibleActions@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18005CEB8: "text file busy" ??_C@_0P@IPFDMIFL@text?5file?5busy?$AA@
0x180018E40: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x180011F80: MSFT_MpWDOScan_Invoke_Start
0x180050180: "const MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`vftable'{for `MpCommonEx::IBrandParams'}" ??_7CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@6BIBrandParams@2@@
0x180042E04: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::GetPackageData(unsigned short const * __ptr64,class ATL::CComPtr<struct IXMLDOMNode> const & __ptr64,class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64)" ?GetPackageData@CDeploymentBrand@SecurityClient@Microsoft@@CAXPEBGAEBV?$CComPtr@UIXMLDOMNode@@@ATL@@PEAV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@Z
0x180005440: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnShutdown(void) __ptr64" ?OnShutdown@CContextManager@ThreatAbstraction@@MEAAXXZ
0x180014828: "long __cdecl ThreatAbstraction::GetContextManager<class ThreatAbstraction::CActiveThreatsController>(class ThreatAbstraction::CContextManager * __ptr64 * __ptr64)" ??$GetContextManager@VCActiveThreatsController@ThreatAbstraction@@@ThreatAbstraction@@YAJPEAPEAVCContextManager@0@@Z
0x180061EF8: WPP_abe90b5f090433e728907ee5915c957f_Traceguids
0x180014480: "public: __cdecl CommonUtil::AutoRef<struct Microsoft::SecurityClient::IXMLBrandedStrings>::~AutoRef<struct Microsoft::SecurityClient::IXMLBrandedStrings>(void) __ptr64" ??1?$AutoRef@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x180062348: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::CScanProgressInfoQueue,class VolatileOps<class ThreatAbstraction::CScanProgressInfoQueue> >::~CSmartPtr<class ThreatAbstraction::CScanProgressInfoQueue,class VolatileOps<class ThreatAbstraction::CScanProgressInfoQueue> >(void) __ptr64" ??1?$CSmartPtr@VCScanProgressInfoQueue@ThreatAbstraction@@V?$VolatileOps@VCScanProgressInfoQueue@ThreatAbstraction@@@@@@QEAA@XZ
0x18005E4D0: "132" ??_C@_17LHGDGFM@?$AA1?$AA3?$AA2?$AA?$AA@
0x180062008: WPP_ac55560053a337715afd19eaeabcc5ab_Traceguids
0x1800313C0: "protected: virtual int __cdecl MorroCommon::CWin32::ChangeServiceConfigImpl(struct SC_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?ChangeServiceConfigImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KKKPEBG1PEAK1111@Z
0x18005AB78: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x18005D1E8: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x18005CAE0: "bad file descriptor" ??_C@_0BE@MPJPGCEO@bad?5file?5descriptor?$AA@
0x180061E80: "folder" ??_C@_1O@GOIANJP@?$AAf?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x18002AB70: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsUnknown`vtordisp{4294967292,8}' (void)const __ptr64" ?IsUnknown@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAHXZ
0x18005F4E8: "244" ??_C@_17LNJHFONL@?$AA2?$AA4?$AA4?$AA?$AA@
0x180068408: "const ThreatAbstraction::IDetectionContexts::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4IDetectionContexts@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18000E230: "[thunk]:public: virtual void * __ptr64 __cdecl MpWmiSignatureProgress::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_EMpWmiSignatureProgress@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18006AEF0: "const ThreatAbstraction::CAutoIgnoreThreats::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_R4CAutoIgnoreThreats@ThreatAbstraction@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x1800629D8: "const Microsoft::SecurityClient::CFeatureBrand::`vbtable'" ??_8CFeatureBrand@SecurityClient@Microsoft@@7B@
0x18005D490: "Invisible" ??_C@_1BE@PCNCEKLF@?$AAI?$AAn?$AAv?$AAi?$AAs?$AAi?$AAb?$AAl?$AAe?$AA?$AA@
0x180029A40: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleActions`vtordisp{4294967292,0}' (void)const __ptr64" ?GetPermissibleActions@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18007F150: "__vectorcall ??_R0?AVCUpdateContext@CWDOScanController@ThreatAbstraction@" ??_R0?AVCUpdateContext@CWDOScanController@ThreatAbstraction@@@8
0x18005E010: "53" ??_C@_15PIBEJPAN@?$AA5?$AA3?$AA?$AA@
0x18002C190: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::SetDefaultAction(enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetDefaultAction@CDetectionContextBase@ThreatAbstraction@@UEAAXW4PermissibleAction@2@@Z
0x18007913C: "__cdecl _IMPORT_DESCRIPTOR_WTSAPI32" __IMPORT_DESCRIPTOR_WTSAPI32
0x1800621E0: WPP_33d077932eb43dd07db1297ee38adbf5_Traceguids
0x18005E088: "64" ??_C@_15ODFHNFBK@?$AA6?$AA4?$AA?$AA@
0x18004DE20: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`vftable'{for `CCritSectionBase'}" ??_7CUpdateContext@CWDOScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005DC28: "27" ??_C@_15GKHDDIOC@?$AA2?$AA7?$AA?$AA@
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::CAutoIgnoreThreats,class VolatileOps<class ThreatAbstraction::CAutoIgnoreThreats> >::~CSmartPtr<class ThreatAbstraction::CAutoIgnoreThreats,class VolatileOps<class ThreatAbstraction::CAutoIgnoreThreats> >(void) __ptr64" ??1?$CSmartPtr@VCAutoIgnoreThreats@ThreatAbstraction@@V?$VolatileOps@VCAutoIgnoreThreats@ThreatAbstraction@@@@@@QEAA@XZ
0x180061470: "ScanPath parameter is required w" ??_C@_1HG@JIJFLHGG@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAt?$AAh?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AA?5?$AAi?$AAs?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAw@
0x18005D908: "9" ??_C@_13FDJIJHMI@?$AA9?$AA?$AA@
0x18005AFF0: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x18002A410: "[thunk]:public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionSource`vtordisp{4294967292,40}' (void)const __ptr64" ?GetDetectionSource@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4tagMPSOURCE@@XZ
0x180040FC8: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::~CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>(void) __ptr64" ??1?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@MEAA@XZ
0x180029AC0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsPermissibleAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHW4PermissibleAction@2@@Z
0x180030FB0: "protected: virtual int __cdecl MorroCommon::CWin32::TerminateProcessImpl(void * __ptr64,unsigned int) __ptr64" ?TerminateProcessImpl@CWin32@MorroCommon@@MEAAHPEAXI@Z
0x180062518: "const CWString::`vbtable'" ??_8CWString@@7B@
0x18004D638: "const MpWmiHeartBeat::`vftable'" ??_7MpWmiHeartBeat@@6B@
0x180038E24: "public: static long __cdecl MorroCommon::CCertCheck::IsMicrosoftCert(unsigned short const * __ptr64,void * __ptr64)" ?IsMicrosoftCert@CCertCheck@MorroCommon@@SAJPEBGPEAX@Z
0x180024780: "public: virtual void * __ptr64 __cdecl CPseudoLockBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECPseudoLockBase@@UEAAPEAXI@Z
0x18005D8E8: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x18005F3A8: "237" ??_C@_17LCCHMBIN@?$AA2?$AA3?$AA7?$AA?$AA@
0x18007F008: "__vectorcall ??_R0?AUISimpleMpConfigWriter@ThreatAbstraction@" ??_R0?AUISimpleMpConfigWriter@ThreatAbstraction@@@8
0x18001BBB0: "public: static long __cdecl ThreatAbstraction::CHeartBeatController::Initialize(void)" ?Initialize@CHeartBeatController@ThreatAbstraction@@SAJXZ
0x18001D740: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::GetResourcePath`vtordisp{4294967292,0}' (void)const __ptr64" ?GetResourcePath@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18006A188: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BILockable@@@
0x180061570: "A scan is already in progress on" ??_C@_1GA@MGICEMHL@?$AAA?$AA?5?$AAs?$AAc?$AAa?$AAn?$AA?5?$AAi?$AAs?$AA?5?$AAa?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AA?5?$AAi?$AAn?$AA?5?$AAp?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAo?$AAn@
0x18005ADE0: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x180062150: "const ThreatAbstraction::CAutoIgnoreThreats::`vbtable'{for `CRefCountedBase'}" ??_8CAutoIgnoreThreats@ThreatAbstraction@@7BCRefCountedBase@@@
0x1800033AC: WPP_SF_
0x180052F50: MSFT_MpComputerStatus_rtti
0x18001C070: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,32}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@CA@EBAHXZ
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x180080D30: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@@8
0x180012680: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::Allocate(unsigned __int64) __ptr64" ?Allocate@CWin32Heap@ATL@@UEAAPEAX_K@Z
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@UEBAJXZ
0x18005DC40: "LastFullScanSource" ??_C@_1CG@OLBBDEH@?$AAL?$AAa?$AAs?$AAt?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x18002A390: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatName`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x180081350: "__vectorcall ??_R0?AV?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@" ??_R0?AV?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@8
0x1800790D8: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x18005D1D0: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x18002B2BC: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::CResource::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCResource@IDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18005ACA0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180019B18: "long __cdecl CommonUtil::CreateNewRefObject<class ThreatAbstraction::CSimpleMpConfigComWriter>(class ThreatAbstraction::CSimpleMpConfigComWriter * __ptr64 * __ptr64)" ??$CreateNewRefObject@VCSimpleMpConfigComWriter@ThreatAbstraction@@@CommonUtil@@YAJPEAPEAVCSimpleMpConfigComWriter@ThreatAbstraction@@@Z
0x1800203E0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vector deleting destructor'`vtordisp{4294967292,136}' (unsigned int) __ptr64" ??_ECActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$4PPPPPPPM@II@EAAPEAXI@Z
0x18006D4A0: "__vectorcall ??_R1A@?0A@EA@IXMLBrandedValues@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLBrandedValues@SecurityClient@Microsoft@@8
0x1800387A0: "private: void __cdecl ATL::CSimpleStringT<char,0>::Reallocate(int) __ptr64" ?Reallocate@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x18006CC30: "const Microsoft::SecurityClient::IXMLReader::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLReader@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180079024: "__cdecl _IMPORT_DESCRIPTOR_OLE32" __IMPORT_DESCRIPTOR_OLE32
0x180062848: WPP_01a44028fa5f3de8dd2064fe214091ff_Traceguids
0x180031A40: "protected: virtual __int64 (__cdecl*__cdecl MorroCommon::CWin32::GetProcAddressImpl(struct HINSTANCE__ * __ptr64,char const * __ptr64) __ptr64)(void)" ?GetProcAddressImpl@CWin32@MorroCommon@@MEAAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x18005ACD0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800620A8: WPP_417fa00649ef30028b9c8c0df7b1d7d5_Traceguids
0x18000C758: "private: bool __cdecl ATL::CAtlArray<unsigned short const * __ptr64,class ATL::CElementTraits<unsigned short const * __ptr64> >::GrowBuffer(unsigned __int64) __ptr64" ?GrowBuffer@?$CAtlArray@PEBGV?$CElementTraits@PEBG@ATL@@@ATL@@AEAA_N_K@Z
0x18005E9E8: "189" ??_C@_17LGLAEBJO@?$AA1?$AA8?$AA9?$AA?$AA@
0x18005CDD8: "operation not supported" ??_C@_0BI@LNEGIFLN@operation?5not?5supported?$AA@
0x180067F30: "__vectorcall ??_R1A@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@" ??_R1A@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@8
0x18006BF00: "__vectorcall ??_R1A@?0A@EA@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx" ??_R1A@?0A@EA@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@8
0x18005D390: "DisplayName" ??_C@_1BI@EEKPCHLN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180029900: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetShortDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetShortDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x180061500: "Errors were encountered when att" ??_C@_1HA@KLNDCJNA@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?5?$AAw?$AAe?$AAr?$AAe?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?5?$AAw?$AAh?$AAe?$AAn?$AA?5?$AAa?$AAt?$AAt@
0x180061158: "Signatures_FallbackOrder" ??_C@_1DC@ONCELNBJ@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA_?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x18005E240: "114" ??_C@_17GDNFMIIL@?$AA1?$AA1?$AA4?$AA?$AA@
0x18001DD90: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vector deleting destructor'(unsigned int) __ptr64" ??_ECActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x180083194: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUeCUkilerwviUwvuvmwviUlyquivUznwGEUhgwzucOlyq@ProtectionManagement" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUnzmztvnvmgUdnrUeCUkilerwviUwvuvmwviUlyquivUznwGEUhgwzucOlyq@ProtectionManagement
0x18005AD90: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18006A368: "const ThreatAbstraction::IContextEventsImpl::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IContextEventsImpl@ThreatAbstraction@@6BIRefCounted@@@
0x180078DF0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180069800: "const ThreatAbstraction::CScanProgressInfo::`RTTI Complete Object Locator'" ??_R4CScanProgressInfo@ThreatAbstraction@@6B@
0x180025480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18005AF00: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x18004F8E0: "const ThreatAbstraction::CQuarantineThreatInfo::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CQuarantineThreatInfo@ThreatAbstraction@@6BIThreatInfo@1@@
0x180062668: "VerQueryValueW" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x180010F1C: "public: __cdecl CProviderSuperSafeCriticalSectionManager::~CProviderSuperSafeCriticalSectionManager(void) __ptr64" ??1CProviderSuperSafeCriticalSectionManager@@QEAA@XZ
0x18005B230: "__cdecl _imp_MpHandleClose" __imp_MpHandleClose
0x180005410: "public: virtual void * __ptr64 __cdecl MpCommonEx::IBrandedResources::`vector deleting destructor'(unsigned int) __ptr64" ??_EIBrandedResources@MpCommonEx@@UEAAPEAXI@Z
0x18006CC58: "__vectorcall ??_R2?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@8
0x180025BC8: "void __cdecl std::_Push_heap<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,__int64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct ThreatAbstraction::time_compare>(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,__int64,__int64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > &&,struct ThreatAbstraction::time_compare)" ??$_Push_heap@PEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@_JV1@Utime_compare@ThreatAbstraction@@@std@@YAXPEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@_J1$$QEAV1@Utime_compare@ThreatAbstraction@@@Z
0x18006D888: "const CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::`RTTI Complete Object Locator'" ??_R4?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@6B@
0x18007E6D8: "__vectorcall ??_R0?AVCAtlException@ATL@" ??_R0?AVCAtlException@ATL@@@8
0x180062C74: "="" ??_C@_15PMOCCNJK@?$AA?$DN?$AA?$CC?$AA?$AA@
0x18006D090: "__vectorcall ??_R3?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@8
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >::~CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >(void) __ptr64" ??1?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@QEAA@XZ
0x180066F98: "__vectorcall ??_R2_Iostream_error_category@std" ??_R2_Iostream_error_category@std@@8
0x180068158: "__vectorcall ??_R1A@?0A@EA@?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R1A@?0A@EA@?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x18001D55C: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetTotalFileByteCount(void)const __ptr64" ?GetTotalFileByteCount@CScanProgressInfo@ThreatAbstraction@@UEBA_KXZ
0x180060C08: "Signature_FallbackOrder" ??_C@_1DA@FJNNAJB@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x180066F48: "__vectorcall ??_R3_Iostream_error_category@std" ??_R3_Iostream_error_category@std@@8
0x180031E88: "public: virtual __cdecl MpCommonEx::CEventLoggerBase::~CEventLoggerBase(void) __ptr64" ??1CEventLoggerBase@MpCommonEx@@UEAA@XZ
0x180004B78: "public: __cdecl CComputerHealth::~CComputerHealth(void) __ptr64" ??1CComputerHealth@@QEAA@XZ
0x180032410: "long __cdecl MpCommonEx::LoadBrandedString(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?LoadBrandedString@MpCommonEx@@YAJPEAPEAGPEBG@Z
0x18007E538: "public: static class std::_Iostream_error_category std::_Error_objects<int>::_Iostream_object" ?_Iostream_object@?$_Error_objects@H@std@@2V_Iostream_error_category@2@A
0x18005AE38: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x18005AD50: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x18002AB10: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsAvailableAction`vtordisp{4294967292,8}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAHW4PermissibleAction@2@@Z
0x180045B2F: "public: __cdecl exception::exception(void) __ptr64" ??0exception@@QEAA@XZ
0x1800322B0: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedResources::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandedResources@MpCommonEx@@UEAAPEAXI@Z
0x18002F2D4: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetShortDescription(void)const __ptr64" ?GetShortDescription@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18002DB10: "[thunk]:public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CThreatInfo::GetMatchType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetMatchType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4MatchType@2@XZ
0x18005CD58: "not a directory" ??_C@_0BA@DOCPFFJG@not?5a?5directory?$AA@
0x18002B0F4: "public: __cdecl ThreatAbstraction::IDetectionContext::CResource::CResource(struct tagMPRESOURCE_INFO const * __ptr64) __ptr64" ??0CResource@IDetectionContext@ThreatAbstraction@@QEAA@PEBUtagMPRESOURCE_INFO@@@Z
0x18002C290: "public: virtual long __cdecl ThreatAbstraction::CDetectionContextBase::SetAction(enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetAction@CDetectionContextBase@ThreatAbstraction@@UEAAJW4PermissibleAction@2@@Z
0x180018050: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoUniqueWinHandleTag,0>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoUniqueWinHandleTag,0>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoUniqueWinHandleTag@CommonUtil@@$0A@@CommonUtil@@QEAA@XZ
0x1800197B8: "private: long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::WriteValue(unsigned short const * __ptr64,unsigned short const * __ptr64,enum _MP_COM_CONFIG_TYPE,struct tagVARIANT const & __ptr64) __ptr64" ?WriteValue@CSimpleMpConfigComWriter@ThreatAbstraction@@AEAAJPEBG0W4_MP_COM_CONFIG_TYPE@@AEBUtagVARIANT@@@Z
0x1800164F0: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get`vtordisp{4294967292,8}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@7EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x1800164D0: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Get`vtordisp{4294967292,8}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@7EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x180078BF8: "__cdecl CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32" _CT??_R0?AVCError@@@8??0CError@@QEAA@AEBV0@@Z32
0x18005E6F8: "32796" ??_C@_1M@PCKGCEBN@?$AA3?$AA2?$AA7?$AA9?$AA6?$AA?$AA@
0x1800412B4: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedColors::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandedColors@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180030E10: "protected: virtual int __cdecl MorroCommon::CWin32::SetWindowTextImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetWindowTextImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG@Z
0x180024A10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanHistoryContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x1800405CC: "public: __cdecl std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > >::~map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > >(void) __ptr64" ??1?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@@std@@QEAA@XZ
0x18005ADB8: "__cdecl _imp_TryEnterCriticalSection" __imp_TryEnterCriticalSection
0x18006BF50: "__vectorcall ??_R1A@?0A@EA@IBrandParams@MpCommonEx" ??_R1A@?0A@EA@IBrandParams@MpCommonEx@@8
0x180036DE0: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Left(int)const __ptr64" ?Left@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@H@Z
0x18005AB80: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x1800621F8: "const ThreatAbstraction::CQuarantineThreatInfo::`vbtable'{for `CRefCountedBase'}" ??_8CQuarantineThreatInfo@ThreatAbstraction@@7BCRefCountedBase@@@
0x180068D68: "__vectorcall ??_R3CUpdateContext@CSignatureUpdateController@ThreatAbstraction" ??_R3CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@8
0x180068CA8: "__vectorcall ??_R2CUpdateContext@CSignatureUpdateController@ThreatAbstraction" ??_R2CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@8
0x18005E1A8: "100" ??_C@_17CHOLIMHJ@?$AA1?$AA0?$AA0?$AA?$AA@
0x18005E420: "127" ??_C@_17PHPEBFML@?$AA1?$AA2?$AA7?$AA?$AA@
0x18002CE40: "private: virtual class ThreatAbstraction::CThreatInfo * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::CreateThreatInfo(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ?CreateThreatInfo@CDetectionContextBase@ThreatAbstraction@@EEAAPEAVCThreatInfo@2@PEAUtagMPTHREAT_INFO@@@Z
0x180061EC0: "const Microsoft::SecurityClient::CDeploymentBrand::`vbtable'" ??_8CDeploymentBrand@SecurityClient@Microsoft@@7B@
0x180045490: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180067A48: "const CommonUtil::CRefObject::`RTTI Complete Object Locator'" ??_R4CRefObject@CommonUtil@@6B@
0x180003360: "public: __cdecl CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180036770: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32FilePathImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32FilePathImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180024720: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Lock`vtordisp{4294967292,56}' (void)const __ptr64" ?Lock@CPseudoLockBase@@$4PPPPPPPM@DI@EBAXXZ
0x180020360: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequestComplete`vtordisp{4294967292,88}' (int) __ptr64" ?OnSampleRequestComplete@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXH@Z
0x18002A0F4: "public: virtual long __cdecl ThreatAbstraction::CQuarantineDetectionContext::SetAction(enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetAction@CQuarantineDetectionContext@ThreatAbstraction@@UEAAJW4PermissibleAction@2@@Z
0x180001EC0: GetProviderClassID
0x180012720: "public: virtual unsigned __int64 __cdecl ATL::CWin32Heap::GetSize(void * __ptr64) __ptr64" ?GetSize@CWin32Heap@ATL@@UEAA_KPEAX@Z
0x18003E550: "public: class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::operator[](class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ??A?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@QEAAAEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@AEBV23@@Z
0x180067060: "__vectorcall ??_R1A@?0A@EA@error_category@std" ??_R1A@?0A@EA@error_category@std@@8
0x18005B3D8: "__cdecl _imp__initterm" __imp__initterm
0x18005AE30: "__cdecl _imp_GetDiskFreeSpaceExW" __imp_GetDiskFreeSpaceExW
0x180061BF8: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x180083258: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4HA
0x1800834E0: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4HA
0x1800834C8: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4HA
0x180016B14: "public: __cdecl ThreatAbstraction::CServiceStatusController::CServiceStatusController(void) __ptr64" ??0CServiceStatusController@ThreatAbstraction@@QEAA@XZ
0x1800016F0: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Generic_error_category::message(int)const __ptr64" ?message@_Generic_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x180033F70: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@MEAAPEAXI@Z
0x1800203C0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::`vector deleting destructor'`vtordisp{4294967292,144}' (unsigned int) __ptr64" ??_ECActiveThreatsContextManager@ThreatAbstraction@@$4PPPPPPPM@JA@EAAPEAXI@Z
0x18002F104: "public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CThreatInfo::GetMatchType(void)const __ptr64" ?GetMatchType@CThreatInfo@ThreatAbstraction@@UEBA?AW4MatchType@2@XZ
0x18005B140: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x1800675D0: "const CRefCountedBase::`RTTI Complete Object Locator'" ??_R4CRefCountedBase@@6B@
0x1800834F8: ?$TSS0@?1??GetInstance@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@SAPEAVCCertCheckFactory@3@XZ@4HA
0x180018C04: "public: __cdecl CSafeArrayPtr<class ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo,class VolatileOps<class ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo> >::~CSafeArrayPtr<class ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo,class VolatileOps<class ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo> >(void) __ptr64" ??1?$CSafeArrayPtr@VCResourceInfo@CScanContext@COnDemandController@ThreatAbstraction@@V?$VolatileOps@VCResourceInfo@CScanContext@COnDemandController@ThreatAbstraction@@@@@@QEAA@XZ
0x18006E020: "__vectorcall ??_R1A@?0A@EA@?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil" ??_R1A@?0A@EA@?$CStdVector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@CommonUtil@@8
0x180088000: "__cdecl _imp_SHGetSpecialFolderLocation" __imp_SHGetSpecialFolderLocation
0x180061DA8: "DisableAntiVirus" ??_C@_1CC@PBHKAPHB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAA?$AAn?$AAt?$AAi?$AAV?$AAi?$AAr?$AAu?$AAs?$AA?$AA@
0x18006B9E8: "__vectorcall ??_R1A@?0A@EA@CResource@IDetectionContext@ThreatAbstraction" ??_R1A@?0A@EA@CResource@IDetectionContext@ThreatAbstraction@@8
0x18002B380: "public: virtual enum ThreatAbstraction::IDetectionContext::ResourceType __cdecl ThreatAbstraction::IDetectionContext::CResource::GetResourceType(void)const __ptr64" ?GetResourceType@CResource@IDetectionContext@ThreatAbstraction@@UEBA?AW4ResourceType@23@XZ
0x18005E7D8: "DisableAutoExclusions" ??_C@_1CM@LGGALIJB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAA?$AAu?$AAt?$AAo?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180061E38: WPP_104f7e995a6e3532dbee26419e384953_Traceguids
0x180041BA0: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedColors::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECBrandedColors@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18003ECBC: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@Z
0x18006B268: "__vectorcall ??_R1A@DI@M@FA@IThreatInfo@ThreatAbstraction" ??_R1A@DI@M@FA@IThreatInfo@ThreatAbstraction@@8
0x180067E68: "__vectorcall ??_R1A@DI@M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@" ??_R1A@DI@M@FA@?$ISequence@VIDetectionContext@ThreatAbstraction@@@@8
0x18001F8B4: "public: __cdecl CSafePtr<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >,class VolatileOps<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> > > >::~CSafePtr<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >,class VolatileOps<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> > > >(void) __ptr64" ??1?$CSafePtr@V?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@V?$VolatileOps@V?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@@@@@QEAA@XZ
0x1800801D0: "__vectorcall ??_R0?AVCHResultExceptionImpl@CommonUtil@" ??_R0?AVCHResultExceptionImpl@CommonUtil@@@8
0x180036200: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleNameImpl(void) __ptr64" ?GetCurrentModuleNameImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x180062248: "$(" ??_C@_15LHIGJOKN@?$AA$?$AA?$CI?$AA?$AA@
0x18002ABF0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetResourceCount`vtordisp{4294967292,8}' (void)const __ptr64" ?GetResourceCount@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAKXZ
0x180083540: "public: static class std::locale::id std::num_put<unsigned short,class std::back_insert_iterator<class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > > >::id" ?id@?$num_put@GV?$back_insert_iterator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@std@@@std@@2V0locale@2@A
0x18005EB80: "197" ??_C@_17JNDDOFAI@?$AA1?$AA9?$AA7?$AA?$AA@
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005AF70: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x180039FE0: "public: virtual __cdecl CommonUtil::CHResultExceptionImpl::~CHResultExceptionImpl(void) __ptr64" ??1CHResultExceptionImpl@CommonUtil@@UEAA@XZ
0x18004E630: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`vftable'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_7CDetectionContextsBase@CContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x18003A324: "public: __cdecl CThreadManager::CThreadManager(void) __ptr64" ??0CThreadManager@@QEAA@XZ
0x18005DEA8: "AntispywareEnabled" ??_C@_1CG@PABCPGPL@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18005AF08: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18006B120: "const ThreatAbstraction::IAutoIgnoreThreats::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4IAutoIgnoreThreats@ThreatAbstraction@@6BILockable@@@
0x180030910: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetModuleFileNameImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModuleFileNameImpl@CWin32@MorroCommon@@MEAAKPEAUHINSTANCE__@@PEAGK@Z
0x18003A864: "public: __cdecl CSafePtr<struct CThreadManager::ThreadContext,class VolatileOps<struct CThreadManager::ThreadContext> >::~CSafePtr<struct CThreadManager::ThreadContext,class VolatileOps<struct CThreadManager::ThreadContext> >(void) __ptr64" ??1?$CSafePtr@UThreadContext@CThreadManager@@V?$VolatileOps@UThreadContext@CThreadManager@@@@@@QEAA@XZ
0x18006DEB8: "__vectorcall ??_R1BA@?0A@EA@?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R1BA@?0A@EA@?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x1800603A0: "Exclusions\Extensions" ??_C@_1CM@MPBCMEGJ@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1800625F0: WPP_d39b67cfd2de3a126bf0d63b9c5e92c2_Traceguids
0x180083440: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_antimalwareServiceLogLocation" ?m_antimalwareServiceLogLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x18005F588: "250" ??_C@_17PJKJBKCJ@?$AA2?$AA5?$AA0?$AA?$AA@
0x180068AE8: "__vectorcall ??_R3CScheduledScanController@ThreatAbstraction" ??_R3CScheduledScanController@ThreatAbstraction@@8
0x180013520: "public: long __cdecl CData::StartManualScan(class ThreatAbstraction::IScanProgress * __ptr64) __ptr64" ?StartManualScan@CData@@QEAAJPEAVIScanProgress@ThreatAbstraction@@@Z
0x180017020: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,88}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@FI@EBAXXZ
0x180068A50: "__vectorcall ??_R2CScheduledScanController@ThreatAbstraction" ??_R2CScheduledScanController@ThreatAbstraction@@8
0x18004DE00: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`vftable'{for `ILockable'}" ??_7CUpdateContext@CWDOScanController@ThreatAbstraction@@6BILockable@@@
0x180041160: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@_K@Z
0x18001B1AC: "public: static void __cdecl ThreatAbstraction::CActiveThreatsController::Shutdown(void)" ?Shutdown@CActiveThreatsController@ThreatAbstraction@@SAXXZ
0x180028140: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoActionManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAutoActionManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18005F888: "267" ??_C@_17OCOKFADO@?$AA2?$AA6?$AA7?$AA?$AA@
0x18003E9FC: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Insert_hint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@1@@Z
0x180039C8C: MpAllocSprintfW
0x18002DC10: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetShortDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetShortDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18005D2A8: "BitMap" ??_C@_1O@NOMFGNEA@?$AAB?$AAi?$AAt?$AAM?$AAa?$AAp?$AA?$AA@
0x1800621A8: "const ThreatAbstraction::CQuarantineDetectionContext::`vbtable'{for `CCritSectionBase'}" ??_8CQuarantineDetectionContext@ThreatAbstraction@@7BCCritSectionBase@@@
0x180029A60: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CDetectionContextBase::SetAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EAAJW4PermissibleAction@2@@Z
0x180078980: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x18004D4A0: "const CActiveDetectionsManager::`vftable'" ??_7CActiveDetectionsManager@@6B@
0x18002EF88: "public: void __cdecl CWString::`vbase destructor'(void) __ptr64" ??_DCWString@@QEAAXXZ
0x18005FAC8: "286" ??_C@_17GAFMFGCL@?$AA2?$AA8?$AA6?$AA?$AA@
0x18004EC88: "const ThreatAbstraction::CAutoActionManager::`vftable'" ??_7CAutoActionManager@ThreatAbstraction@@6B@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoActionManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIAutoActionManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18001D5E0: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetTotalFileByteCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetTotalFileByteCount@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x18005B350: "__cdecl _imp_swscanf_s" __imp_swscanf_s
0x18005E1A0: "99" ??_C@_15OAGLLPBC@?$AA9?$AA9?$AA?$AA@
0x180024490: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Lock`vtordisp{4294967292,88}' (void)const __ptr64" ?Lock@CPseudoLockBase@@$4PPPPPPPM@FI@EBAXXZ
0x180028874: "public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::AddAutoIgnoreThreat(unsigned __int64) __ptr64" ?AddAutoIgnoreThreat@CAutoActionManager@ThreatAbstraction@@UEAAJ_K@Z
0x18005F1A8: "DisableEmailScanning" ??_C@_1CK@NHLLIPHK@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAE?$AAm?$AAa?$AAi?$AAl?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x18005ADF0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180020240: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanStart`vtordisp{4294967292,88}' (class ThreatAbstraction::IDetectionContexts const * __ptr64) __ptr64" ?OnRoutineCleanStart@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXPEBVIDetectionContexts@2@@Z
0x18004CF70: MSFT_MpPreference_Remove_rtti
0x180018CC0: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,96}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@GA@EBAHXZ
0x180062300: "SOFTWARE\Microsoft\Windows Defen" ??_C@_1EI@JENEKAMA@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn@
0x180067530: "__vectorcall ??_R3CRefCountedBaseX" ??_R3CRefCountedBaseX@@8
0x180081730: "__vectorcall ??_R0?AVCFeatureBrand@SecurityClient@Microsoft@" ??_R0?AVCFeatureBrand@SecurityClient@Microsoft@@@8
0x18006D960: "__vectorcall ??_R1A@?0A@EA@CFeatureBrand@SecurityClient@Microsoft" ??_R1A@?0A@EA@CFeatureBrand@SecurityClient@Microsoft@@8
0x180067518: "__vectorcall ??_R2CRefCountedBaseX" ??_R2CRefCountedBaseX@@8
0x18001B850: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::CUpdateContext::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECUpdateContext@CWDOScanController@ThreatAbstraction@@WBA@EAAPEAXI@Z
0x18006D4C8: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@8
0x180005440: "public: static void __cdecl CData::OnMiscConfigNotification(void * __ptr64,enum tagMP_CONFIG_ORIGIN)" ?OnMiscConfigNotification@CData@@SAXPEAXW4tagMP_CONFIG_ORIGIN@@@Z
0x180045B5F: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x18005B308: "__cdecl _imp_MpScanStartEx" __imp_MpScanStartEx
0x18005D410: "Expensive" ??_C@_1BE@CFEDKPJC@?$AAE?$AAx?$AAp?$AAe?$AAn?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x18006AD20: "__vectorcall ??_R1A@A@7FA@ILockable" ??_R1A@A@7FA@ILockable@@8
0x1800626E0: WPP_ae6ddf61721e377a51c0488cf434dc50_Traceguids
0x18001E520: "private: static unsigned long __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CleanThread(void * __ptr64)" ?CleanThread@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@CAKPEAX@Z
0x1800617A0: "Failed to register for antimalwa" ??_C@_1IO@IBICPFND@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAa?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa@
0x180060738: "AdditionalActionTimeOut" ??_C@_1DA@JFKLBEOC@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x18005AF30: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x18005FFC8: "PostInstance" ??_C@_0N@OMHGNKIH@PostInstance?$AA@
0x180039F60: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,0}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@A@EBAXXZ
0x180019A48: "long __cdecl CommonUtil::NewRefInstance<class ThreatAbstraction::CSimpleMpConfigComWriter,class ATL::CComPtr<struct IMsMpSimpleConfig> >(class ThreatAbstraction::CSimpleMpConfigComWriter * __ptr64 * __ptr64,class ATL::CComPtr<struct IMsMpSimpleConfig> const & __ptr64)" ??$NewRefInstance@VCSimpleMpConfigComWriter@ThreatAbstraction@@V?$CComPtr@UIMsMpSimpleConfig@@@ATL@@@CommonUtil@@YAJPEAPEAVCSimpleMpConfigComWriter@ThreatAbstraction@@AEBV?$CComPtr@UIMsMpSimpleConfig@@@ATL@@@Z
0x18005E3D0: "123" ??_C@_17HIJGICJM@?$AA1?$AA2?$AA3?$AA?$AA@
0x180002230: MSFT_MpComputerStatus_Unload
0x1800502E8: "const MorroCommon::CCertCheckFactory::`vftable'" ??_7CCertCheckFactory@MorroCommon@@6B@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IScanProgressInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_EIScanProgressInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x18005E058: "58" ??_C@_15CPBFBIAM@?$AA5?$AA8?$AA?$AA@
0x18006A058: "const ThreatAbstraction::IContextEvents::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IContextEvents@ThreatAbstraction@@6BIRefCounted@@@
0x18001A1DC: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSignatureUpdateController@ThreatAbstraction@@UEAAPEAXI@Z
0x18000B508: "protected: void __cdecl std::vector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@UtagASRRuleDefaultAction@@V?$allocator@UtagASRRuleDefaultAction@@@std@@@std@@IEBAXXZ
0x1800830A0: "__cdecl _hmod__ext_ms_win_shell_shell32_l1_2_1_dll" __hmod__ext_ms_win_shell_shell32_l1_2_1_dll
0x180027EC0: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAXI@Z
0x1800696E0: "__vectorcall ??_R2CScanProgressInfo@ThreatAbstraction" ??_R2CScanProgressInfo@ThreatAbstraction@@8
0x1800697A8: "__vectorcall ??_R3CScanProgressInfo@ThreatAbstraction" ??_R3CScanProgressInfo@ThreatAbstraction@@8
0x18001D330: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanProgressInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x180069828: "const ThreatAbstraction::IScanProgressInfo::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IScanProgressInfo@ThreatAbstraction@@6BIRefCounted@@@
0x18003FA30: "public: unsigned long & __ptr64 __cdecl std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > >::operator[](class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ??A?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@QEAAAEAKAEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@Z
0x180062C68: "value" ??_C@_1M@KBCLFMHN@?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180005440: "public: virtual void __cdecl ThreatAbstraction::IContextEvents::OnThreatsChanged(void) __ptr64" ?OnThreatsChanged@IContextEvents@ThreatAbstraction@@UEAAXXZ
0x180005614: "unsigned char __cdecl MpMIUtil::LogWmiErrorHr(struct _MI_Context * __ptr64,long)" ?LogWmiErrorHr@MpMIUtil@@YAEPEAU_MI_Context@@J@Z
0x1800688D0: "const CommonUtil::CHResultException::`RTTI Complete Object Locator'" ??_R4CHResultException@CommonUtil@@6B@
0x180069398: "const ThreatAbstraction::CQuarantineController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CQuarantineController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180011C88: "public: virtual void * __ptr64 __cdecl MpWmiWDOScanProgress::`vector deleting destructor'(unsigned int) __ptr64" ??_EMpWmiWDOScanProgress@@UEAAPEAXI@Z
0x180005DDC: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpFreeMemory<unsigned short * __ptr64,void> >::~CUniqueHandle<struct CAutoMpFreeMemory<unsigned short * __ptr64,void> >(void) __ptr64" ??1?$CUniqueHandle@U?$CAutoMpFreeMemory@PEAGX@@@CommonUtil@@QEAA@XZ
0x180019660: "public: virtual long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::WriteBinary(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64,void const * __ptr64) __ptr64" ?WriteBinary@CSimpleMpConfigComWriter@ThreatAbstraction@@UEAAJPEBG0_KPEBX@Z
0x180002DC4: "struct ATL::ATLSTRINGRESOURCEIMAGE const * __ptr64 __cdecl ATL::_AtlGetStringResourceImage(struct HINSTANCE__ * __ptr64,struct HRSRC__ * __ptr64,unsigned int)" ?_AtlGetStringResourceImage@ATL@@YAPEBUATLSTRINGRESOURCEIMAGE@1@PEAUHINSTANCE__@@PEAUHRSRC__@@I@Z
0x18005DBD0: "FullScanEndTime" ??_C@_1CA@MLLKEOGB@?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAE?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18002A1D0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CQuarantineDetectionContext::IsPermissibleAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAHW4PermissibleAction@2@@Z
0x180068918: "__vectorcall ??_R2COnDemandController@ThreatAbstraction" ??_R2COnDemandController@ThreatAbstraction@@8
0x18005D904: "7" ??_C@_13LDEHOAPL@?$AA7?$AA?$AA@
0x1800689A0: "__vectorcall ??_R3COnDemandController@ThreatAbstraction" ??_R3COnDemandController@ThreatAbstraction@@8
0x18001D700: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CScanProgressInfo::GetThreatDetected`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatDetected@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x180020400: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequest`vtordisp{4294967292,88}' (class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXPEAVISampleRequest@2@@Z
0x18003E700: "public: virtual void * __ptr64 __cdecl CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@UEAAPEAXI@Z
0x18005C748: "cross device link" ??_C@_0BC@PPHBOELF@cross?5device?5link?$AA@
0x180017000: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,64}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@EA@EBAJXZ
0x18006BE10: "__vectorcall ??_R2CBrandingSettings@CBrandedResourceWrapper@MpCommonEx" ??_R2CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@8
0x180062018: "const ThreatAbstraction::CScanProgressInfo::`vbtable'{for `ThreatAbstraction::IScanProgressInfo'}" ??_8CScanProgressInfo@ThreatAbstraction@@7BIScanProgressInfo@1@@
0x18006C028: "__vectorcall ??_R3CBrandingSettings@CBrandedResourceWrapper@MpCommonEx" ??_R3CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@8
0x18000B7DC: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@Z
0x18005F550: "247" ??_C@_17KPCCPBDF@?$AA2?$AA4?$AA7?$AA?$AA@
0x180068F90: "__vectorcall ??_R1A@?0A@EA@CWDOScanController@ThreatAbstraction" ??_R1A@?0A@EA@CWDOScanController@ThreatAbstraction@@8
0x180078BA8: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x18002C210: "private: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetFirstActionableAction(void)const __ptr64" ?GetFirstActionableAction@CDetectionContextBase@ThreatAbstraction@@EEBA?AW4PermissibleAction@2@XZ
0x180067178: "__vectorcall ??_R1BA@?0A@EA@CRefCountedBaseX" ??_R1BA@?0A@EA@CRefCountedBaseX@@8
0x1800164B0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,32}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@CA@EBAJXZ
0x180043CE4: "class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >(class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > > & __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@PEAV12@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x1800204C0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextUpdated`vtordisp{4294967292,88}' (unsigned long,unsigned long,unsigned long) __ptr64" ?OnContextUpdated@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXKKK@Z
0x180033190: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedFeatureEnable(bool * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadBrandedFeatureEnable@CBrandedAPI@MpCommonEx@@UEAAJPEA_NPEBG@Z
0x18005E570: "142" ??_C@_17BGHDAGOE@?$AA1?$AA4?$AA2?$AA?$AA@
0x180068DE8: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`RTTI Complete Object Locator'" ??_R4CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6B@
0x18005D910: "ComputerState" ??_C@_1BM@IFBFNLPI@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18005AC20: CRYPT32_NULL_THUNK_DATA
0x18005E180: "95" ??_C@_15KKLNAAKK@?$AA9?$AA5?$AA?$AA@
0x180050658: "const Microsoft::SecurityClient::CBrandedValues::`vftable'{for `CommonUtil::IRefObject'}" ??_7CBrandedValues@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180016700: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,24}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@BI@EBAJXZ
0x18007F270: "__vectorcall ??_R0?AVCScanHistoryController@ThreatAbstraction@" ??_R0?AVCScanHistoryController@ThreatAbstraction@@@8
0x18005E000: "51" ??_C@_15FCBNFHIG@?$AA5?$AA1?$AA?$AA@
0x180024550: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextUpdated`vtordisp{4294967292,80}' (unsigned long,unsigned long,unsigned long) __ptr64" ?OnContextUpdated@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXKKK@Z
0x18007F570: "__vectorcall ??_R0?AVCContextManager@ThreatAbstraction@" ??_R0?AVCContextManager@ThreatAbstraction@@@8
0x180011BE0: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_N_K@Z
0x180024A10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuarantineContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x1800684D0: "const ThreatAbstraction::IDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4IDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x18003F710: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedValues::HrGetBrandedValues(class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > * __ptr64 * __ptr64)const __ptr64" ?HrGetBrandedValues@CBrandedValues@SecurityClient@Microsoft@@UEBAJPEAPEAV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@CommonUtil@@@Z
0x1800507E0: "const Microsoft::SecurityClient::IXMLDeployment::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLDeployment@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18006C7F0: "__vectorcall ??_R1A@?0A@EA@?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R1A@?0A@EA@?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18004DCC8: "const ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`vftable'{for `ILockable'}" ??_7CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@6BILockable@@@
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<unsigned __int64 const,unsigned long>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > >::_Freenode0(struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CB_KK@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@Z
0x180016620: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,64}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@EA@EBAHXZ
0x180010738: "public: __cdecl CommonUtil::CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >::~CStdPtrContainerSeq<class CommonUtil::CStdVector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >,class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > >(void) __ptr64" ??1?$CStdPtrContainerSeq@V?$CStdVector@PEAGV?$allocator@PEAG@std@@@CommonUtil@@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@2@@CommonUtil@@QEAA@XZ
0x18007909C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x180062580: "forwarders\%ws" ??_C@_1BO@GFOANKMI@?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAr?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180035FA0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleParnetDirectoryImpl(void) __ptr64" ?GetCurrentModuleParnetDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18005F100: "DisableArchiveScanning" ??_C@_1CO@OKMNMBHK@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAA?$AAr?$AAc?$AAh?$AAi?$AAv?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x18006B0A8: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6BIRefCounted@@@
0x18006AA38: "const ThreatAbstraction::CQuarantineContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEventsImpl'}" ??_R4CQuarantineContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x180005498: "public: __cdecl CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >::~AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >(void) __ptr64" ??1?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180067598: "__vectorcall ??_R2CRefCountedBase" ??_R2CRefCountedBase@@8
0x1800675B8: "__vectorcall ??_R3CRefCountedBase" ??_R3CRefCountedBase@@8
0x180039EDC: "public: virtual void __cdecl CCritSectionBase::Lock(void)const __ptr64" ?Lock@CCritSectionBase@@UEBAXXZ
0x180045EDC: IsSHGetSpecialFolderLocationPresent
0x180061190: "Signature_SignatureUpdateCatchup" ??_C@_1FC@ECNAAKJM@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAC?$AAa?$AAt?$AAc?$AAh?$AAu?$AAp@
0x180067710: "__vectorcall ??_R3MpWmiScanProgress" ??_R3MpWmiScanProgress@@8
0x180062530: WPP_0700416ef3653430d2f32ba0bc47a132_Traceguids
0x180067670: "__vectorcall ??_R2MpWmiScanProgress" ??_R2MpWmiScanProgress@@8
0x18006A250: "const ThreatAbstraction::CContextManager::CDetectionStats::`RTTI Complete Object Locator'{for `ThreatAbstraction::CContextManager::CDetectionStats'}" ??_R4CDetectionStats@CContextManager@ThreatAbstraction@@6B012@@
0x18002DBF0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetAdvice`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAdvice@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x1800319B0: "protected: virtual int __cdecl MorroCommon::CWin32::WTSEnumerateSessionsImpl(void * __ptr64,unsigned long,unsigned long,struct _WTS_SESSION_INFOW * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?WTSEnumerateSessionsImpl@CWin32@MorroCommon@@MEAAHPEAXKKPEAPEAU_WTS_SESSION_INFOW@@PEAK@Z
0x18003EFB8: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Insert_nohint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64>(bool,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@1@@Z
0x18005F898: "268" ??_C@_17LKIJEAGI@?$AA2?$AA6?$AA8?$AA?$AA@
0x18001C540: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CConfigController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECConfigController@ThreatAbstraction@@UEAAPEAXI@Z
0x18003A2F0: "[thunk]:public: virtual void __cdecl CWString::Unlock`vtordisp{4294967292,0}' (void)const __ptr64" ?Unlock@CWString@@$4PPPPPPPM@A@EBAXXZ
0x180030DC0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetSystemDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetSystemDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x180083600: "__cdecl _onexitend" __onexitend
0x180062060: "const ThreatAbstraction::CActiveThreatsContextManager::`vbtable'{for `ThreatAbstraction::IContextEvents'}" ??_8CActiveThreatsContextManager@ThreatAbstraction@@7BIContextEvents@1@@
0x18005AEC0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180061D78: "full" ??_C@_04PLMLMMEO@full?$AA@
0x18005ABD8: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18006C560: "__vectorcall ??_R3ILockedCertCheck@MorroCommon" ??_R3ILockedCertCheck@MorroCommon@@8
0x18006C4E8: "__vectorcall ??_R2ILockedCertCheck@MorroCommon" ??_R2ILockedCertCheck@MorroCommon@@8
0x18007FEE8: "__vectorcall ??_R0PEAVEHresultException@MorroCommon@" ??_R0PEAVEHresultException@MorroCommon@@@8
0x18005CBA0: "executable format error" ??_C@_0BI@BNCLIGPB@executable?5format?5error?$AA@
0x18004F9B0: "const ThreatAbstraction::CQuarantineThreatInfo::`vftable'{for `ILockable'}" ??_7CQuarantineThreatInfo@ThreatAbstraction@@6BILockable@@@
0x180045D97: "__cdecl unlock" _unlock
0x180005590: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@A@EBAJXZ
0x18002C774: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::GetTimeStamp(struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CDetectionContextBase@ThreatAbstraction@@UEBAXAEAU_FILETIME@@@Z
0x180088018: "__cdecl _imp_PathIsDirectoryW" __imp_PathIsDirectoryW
0x180021C40: "public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl ThreatAbstraction::CContextManager::GetDetectionContext(unsigned long)const __ptr64" ?GetDetectionContext@CContextManager@ThreatAbstraction@@UEBAPEAVIDetectionContext@2@K@Z
0x180005A00: "long __cdecl GetConfigVector(class CData & __ptr64,class CommonUtil::CStdVector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > & __ptr64,unsigned short const * __ptr64)" ?GetConfigVector@@YAJAEAVCData@@AEAV?$CStdVector@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@CommonUtil@@PEBG@Z
0x18000ED00: MSFT_MpComputerStatus_CreateInstance
0x18005B4B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18005B278: "__cdecl _imp_MpThreatQuery" __imp_MpThreatQuery
0x18002A230: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableAction`vtordisp{4294967292,40}' (unsigned long)const __ptr64" ?GetAvailableAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4PermissibleAction@2@K@Z
0x180005410: "public: virtual void * __ptr64 __cdecl MpCommonEx::IBrandParams::`vector deleting destructor'(unsigned int) __ptr64" ??_EIBrandParams@MpCommonEx@@UEAAPEAXI@Z
0x18000BE90: "public: virtual void __cdecl MpWmiScanProgress::OnScanAborted(void) __ptr64" ?OnScanAborted@MpWmiScanProgress@@UEAAXXZ
0x1800670C0: "__vectorcall ??_R2IActionEvents@ThreatAbstraction" ??_R2IActionEvents@ThreatAbstraction@@8
0x180067320: "__vectorcall ??_R3IActionEvents@ThreatAbstraction" ??_R3IActionEvents@ThreatAbstraction@@8
0x18001D574: "public: virtual int __cdecl ThreatAbstraction::CScanProgressInfo::GetThreatDetected(void)const __ptr64" ?GetThreatDetected@CScanProgressInfo@ThreatAbstraction@@UEBAHXZ
0x18004EBC0: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vftable'{for `CCritSectionBase'}" ??_7?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6BCCritSectionBase@@@
0x180050510: "const CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::`vftable'" ??_7?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@6B@
0x180031AC0: "protected: virtual int __cdecl MorroCommon::CWin32::GetProductInfoImpl(unsigned long * __ptr64) __ptr64" ?GetProductInfoImpl@CWin32@MorroCommon@@MEAAHPEAK@Z
0x1800202E0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionAborted`vtordisp{4294967292,0}' (void) __ptr64" ?OnActionAborted@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXXZ
0x18005B088: "__cdecl _imp_IsDialogMessageW" __imp_IsDialogMessageW
0x180030DA0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetWindowsDirectoryImpl(unsigned short * __ptr64,unsigned int) __ptr64" ?GetWindowsDirectoryImpl@CWin32@MorroCommon@@MEAAIPEAGI@Z
0x18005B3B0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180019890: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSimpleMpConfigComWriter@ThreatAbstraction@@UEAAPEAXI@Z
0x18004D488: "const CThreatRollupManager::`vftable'" ??_7CThreatRollupManager@@6B@
0x18005E388: "120" ??_C@_17GKCDCNHC@?$AA1?$AA2?$AA0?$AA?$AA@
0x180069F40: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContexts'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x18007EE28: "__vectorcall ??_R0?AVCHResultException@CommonUtil@" ??_R0?AVCHResultException@CommonUtil@@@8
0x1800388B4: "long __cdecl CommonUtil::MpNewBuffer<unsigned char>(unsigned char * __ptr64 * __ptr64,unsigned __int64)" ??$MpNewBuffer@E@CommonUtil@@YAJPEAPEAE_K@Z
0x18006AC58: "__vectorcall ??_R1A@DI@M@FA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@" ??_R1A@DI@M@FA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@8
0x18002A0B0: "public: virtual int __cdecl ThreatAbstraction::CQuarantineDetectionContext::IsPermissibleAction(enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CQuarantineDetectionContext@ThreatAbstraction@@UEBAHW4PermissibleAction@2@@Z
0x18003FBE4: "public: __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::~_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@QEAA@XZ
0x18005E1E8: "105" ??_C@_17BADFHMEL@?$AA1?$AA0?$AA5?$AA?$AA@
0x180067768: "const MpWmiScanProgress::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgress'}" ??_R4MpWmiScanProgress@@6BIScanProgress@ThreatAbstraction@@@
0x18001D6E0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18000DF28: "void __cdecl MpUpdateSignature(struct _MI_Context * __ptr64,struct _MSFT_MpSignature_Update const * __ptr64)" ?MpUpdateSignature@@YAXPEAU_MI_Context@@PEBU_MSFT_MpSignature_Update@@@Z
0x18001DDD4: "public: virtual __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::~CActiveDetectionContexts(void) __ptr64" ??1CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@UEAA@XZ
0x180045920: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x180088008: "__cdecl _imp_SHGetPathFromIDListW" __imp_SHGetPathFromIDListW
0x180041C64: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDeploymentBrand::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDeploymentBrand@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18005AE60: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x1800602D8: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180016F80: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CServiceStatusController::`vector deleting destructor'`vtordisp{4294967292,136}' (unsigned int) __ptr64" ??_ECServiceStatusController@ThreatAbstraction@@$4PPPPPPPM@II@EAAPEAXI@Z
0x180068A80: "__vectorcall ??_R1A@?0A@EA@CScheduledScanContext@CScheduledScanController@ThreatAbstraction" ??_R1A@?0A@EA@CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@8
0x180028FD0: "public: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::SetContextEventHandler(class ThreatAbstraction::IContextEvents * __ptr64) __ptr64" ?SetContextEventHandler@IContextEventsImpl@ThreatAbstraction@@UEAAXPEAVIContextEvents@2@@Z
0x18005B150: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x18005AD18: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18005B300: "__cdecl _imp_MpCreateComInstance" __imp_MpCreateComInstance
0x18005CD98: "not supported" ??_C@_0O@NHEDABJP@not?5supported?$AA@
0x180069E58: "__vectorcall ??_R3IContextEventsImpl@ThreatAbstraction" ??_R3IContextEventsImpl@ThreatAbstraction@@8
0x180069A40: "__vectorcall ??_R2IContextEventsImpl@ThreatAbstraction" ??_R2IContextEventsImpl@ThreatAbstraction@@8
0x180018C80: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,96}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@GA@EBAXXZ
0x180010E40: "protected: virtual __cdecl CommonUtil::CRefObject::~CRefObject(void) __ptr64" ??1CRefObject@CommonUtil@@MEAA@XZ
0x180020320: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,96}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@GA@EBAJXZ
0x18005FB20: "NotificationTime" ??_C@_1CC@DOCFBHC@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18005B098: USER32_NULL_THUNK_DATA
0x1800622B0: "BrandName" ??_C@_1BE@BMDLFAGI@?$AAB?$AAr?$AAa?$AAn?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18005D458: "Ifdeleted" ??_C@_1BE@OPCGPCGL@?$AAI?$AAf?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?$AA@
0x18005DDC8: "OnAccessProtectionEnabled" ??_C@_1DE@IGHAHFFO@?$AAO?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180017040: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,88}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@FI@EBAXXZ
0x18002A490: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsOfflineDetection`vtordisp{4294967292,40}' (void)const __ptr64" ?IsOfflineDetection@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAHXZ
0x1800687B0: "const ThreatAbstraction::CServiceStatusController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CServiceStatusController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005D110: "__cdecl _sz_ext_ms_win_shell32_shellfolders_l1_1_0_dll" __sz_ext_ms_win_shell32_shellfolders_l1_1_0_dll
0x18006BA78: "const ThreatAbstraction::CDetectionContextBase::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CDetectionContextBase@ThreatAbstraction@@6BILockable@@@
0x18007FE58: "__vectorcall ??_R0?AUIRefObject@CommonUtil@" ??_R0?AUIRefObject@CommonUtil@@@8
0x18000B6DC: "protected: void __cdecl std::vector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@std@@IEAAX_K@Z
0x18002DD10: "[thunk]:public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CThreatInfo::GetDetectionType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDetectionType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4DetectionType@2@XZ
0x1800674C8: "const CDetectionsManager::`RTTI Complete Object Locator'" ??_R4CDetectionsManager@@6B@
0x18002A0DC: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetDefaultAction(void)const __ptr64" ?GetDefaultAction@CQuarantineDetectionContext@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x18001BD50: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECHeartBeatController@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180020580: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Reset(void) __ptr64" ?Reset@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAXXZ
0x180062940: ".//Features" ??_C@_1BI@OMGPAOOI@?$AA?4?$AA?1?$AA?1?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x18005B1E8: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18004DD90: "const ThreatAbstraction::CActiveThreatsController::`vftable'{for `ILockable'}" ??_7CActiveThreatsController@ThreatAbstraction@@6BILockable@@@
0x18005E4F0: "CurrentThreatExecutionStatusID" ??_C@_1DO@FJBHPIM@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAi?$AAo?$AAn?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAI?$AAD?$AA?$AA@
0x18004F3E0: "const ThreatAbstraction::CQuarantineDetectionContext::`vftable'" ??_7CQuarantineDetectionContext@ThreatAbstraction@@6B@
0x18005CB80: "destination address required" ??_C@_0BN@KDMIFEIP@destination?5address?5required?$AA@
0x18006ACA8: "__vectorcall ??_R1A@DI@M@FA@IAutoActionManager@ThreatAbstraction" ??_R1A@DI@M@FA@IAutoActionManager@ThreatAbstraction@@8
0x18001E4EC: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionError(long) __ptr64" ?OnActionError@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXJ@Z
0x18005EC48: "SignatureFirstAuGracePeriod" ??_C@_1DI@LCEGGFHH@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAF?$AAi?$AAr?$AAs?$AAt?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x180069B08: "__vectorcall ??_R3CPseudoLockBase" ??_R3CPseudoLockBase@@8
0x18005F250: "232" ??_C@_17IFPJDBLP@?$AA2?$AA3?$AA2?$AA?$AA@
0x18007ED48: "__vectorcall ??_R0?AVCExceptionThreat@ThreatAbstraction@" ??_R0?AVCExceptionThreat@ThreatAbstraction@@@8
0x180069AF0: "__vectorcall ??_R2CPseudoLockBase" ??_R2CPseudoLockBase@@8
0x18005AB68: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180018500: "public: void __cdecl ThreatAbstraction::COnDemandController::AbortScan(void) __ptr64" ?AbortScan@COnDemandController@ThreatAbstraction@@QEAAXXZ
0x18005AED8: "__cdecl _imp_GetPrivateProfileStringW" __imp_GetPrivateProfileStringW
0x18001E49C: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionCompletion(long,unsigned long) __ptr64" ?OnActionCompletion@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXJK@Z
0x18005B0A8: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x18004E488: "const ThreatAbstraction::IContextEventsImpl::`vftable'" ??_7IContextEventsImpl@ThreatAbstraction@@6B@
0x180024760: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,0}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@A@EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180016640: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@A@EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x18005C650: "device or resource busy" ??_C@_0BI@NGCEHDD@device?5or?5resource?5busy?$AA@
0x18002BD30: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityDescription(void)const __ptr64" ?GetSeverityDescription@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18004CB40: "const std::error_category::`vftable'" ??_7error_category@std@@6B@
0x18005D4F0: "Max" ??_C@_17EFGGKDCG@?$AAM?$AAa?$AAx?$AA?$AA@
0x180029940: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownBad`vtordisp{4294967292,0}' (void)const __ptr64" ?IsKnownBad@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x18005B2B0: "__cdecl _imp_MpConfigIteratorClose" __imp_MpConfigIteratorClose
0x1800216A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IContextEventsImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIContextEventsImpl@ThreatAbstraction@@UEAAPEAXI@Z
0x18006A340: "const ThreatAbstraction::IContextEventsImpl::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4IContextEventsImpl@ThreatAbstraction@@6BIContextEvents@1@@
0x18005D758: "Syntax" ??_C@_1O@EGNKCMDO@?$AAS?$AAy?$AAn?$AAt?$AAa?$AAx?$AA?$AA@
0x180040B70: "public: virtual long __cdecl Microsoft::SecurityClient::CFeatureBrand::HrIsCompetitiveUninstallEnabled(bool * __ptr64)const __ptr64" ?HrIsCompetitiveUninstallEnabled@CFeatureBrand@SecurityClient@Microsoft@@UEBAJPEA_N@Z
0x1800834D0: "private: static class MorroCommon::CFileUtils * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@0PEAVCFileUtils@2@EA
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18005F6B0: "257" ??_C@_17GEHOCCJA@?$AA2?$AA5?$AA7?$AA?$AA@
0x180060E38: "MpCloudBlockLevel" ??_C@_1CE@FLKBHCLK@?$AAM?$AAp?$AAC?$AAl?$AAo?$AAu?$AAd?$AAB?$AAl?$AAo?$AAc?$AAk?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::ISignaturesUpdateCallback::`vector deleting destructor'(unsigned int) __ptr64" ??_EISignaturesUpdateCallback@ThreatAbstraction@@UEAAPEAXI@Z
0x18006D220: "const Microsoft::SecurityClient::IXMLBrandedStrings::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLBrandedStrings@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18002A530: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,264}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@BAI@EBAXXZ
0x180026A80: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18005E768: "AdditionalActionsBitMask" ??_C@_1DC@ECJLDPC@?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AAB?$AAi?$AAt?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x18006BCE8: "const ThreatAbstraction::CThreatInfo::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CThreatInfo@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003FD6C: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::_Insert_hint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@1@@Z
0x1800606F0: "Reporting_AdditionalActionTimeOu" ??_C@_1EE@HPAJIPIN@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA_?$AAA?$AAd?$AAd?$AAi?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu@
0x180005544: "public: virtual __cdecl CRefCountedBase::~CRefCountedBase(void) __ptr64" ??1CRefCountedBase@@UEAA@XZ
0x180050790: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18001BA88: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECHeartBeatController@ThreatAbstraction@@UEAAPEAXI@Z
0x18004DC28: "const ThreatAbstraction::COnDemandController::`vftable'" ??_7COnDemandController@ThreatAbstraction@@6B@
0x180005410: "public: virtual void * __ptr64 __cdecl ISequence<class ThreatAbstraction::IDetectionContext>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$ISequence@VIDetectionContext@ThreatAbstraction@@@@UEAAPEAXI@Z
0x18005E538: "Blocked" ??_C@_1BA@BNFIHHGN@?$AAB?$AAl?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x1800621F0: "const ThreatAbstraction::CQuarantineThreatInfo::`vbtable'{for `CCritSectionBase'}" ??_8CQuarantineThreatInfo@ThreatAbstraction@@7BCCritSectionBase@@@
0x1800298A0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSeverityDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18005DDFC: "40" ??_C@_15CBPNODEG@?$AA4?$AA0?$AA?$AA@
0x180030D60: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LocalFreeImpl(void * __ptr64) __ptr64" ?LocalFreeImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x180030F00: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetCurrentProcessIdImpl(void) __ptr64" ?GetCurrentProcessIdImpl@CWin32@MorroCommon@@MEAAKXZ
0x180082884: "__cdecl Init_global_epoch" _Init_global_epoch
0x18001D680: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,64}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@EA@EBAJXZ
0x18005FA28: "280" ??_C@_17EFDHAJPH@?$AA2?$AA8?$AA0?$AA?$AA@
0x180037E80: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceRawImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?LoadResourceRawImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0PEAPEAEPEA_K@Z
0x18002BB00: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownBad(void)const __ptr64" ?IsKnownBad@CDetectionContextBase@ThreatAbstraction@@UEBAHXZ
0x18005EB40: "ScanOnlyIfIdleEnabled" ??_C@_1CM@ODOMAMCG@?$AAS?$AAc?$AAa?$AAn?$AAO?$AAn?$AAl?$AAy?$AAI?$AAf?$AAI?$AAd?$AAl?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18005C9D0: "operation_not_supported" ??_C@_0BI@ICEIDKLJ@operation_not_supported?$AA@
0x1800689E0: "const ThreatAbstraction::COnDemandController::CScanContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScanContext@COnDemandController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005B5C0: "__cdecl _xi_a" __xi_a
0x1800318A0: "protected: virtual void __cdecl MorroCommon::CWin32::GetNativeSystemInfoImpl(struct _SYSTEM_INFO * __ptr64) __ptr64" ?GetNativeSystemInfoImpl@CWin32@MorroCommon@@MEAAXPEAU_SYSTEM_INFO@@@Z
0x18005FB78: "MSFT_MpWDOScan" ??_C@_1BO@GDFCJDEL@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAW?$AAD?$AAO?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18006D988: "__vectorcall ??_R1A@?0A@EA@IXMLFeatures@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLFeatures@SecurityClient@Microsoft@@8
0x18005DF98: "MSFT_MpThreat" ??_C@_1BM@EPEBJEKJ@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AA?$AA@
0x18005EB70: "195" ??_C@_17DHDKCNID@?$AA1?$AA9?$AA5?$AA?$AA@
0x18005C7D0: "address_family_not_supported" ??_C@_0BN@LCBDHODA@address_family_not_supported?$AA@
0x18004E3B8: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `ThreatAbstraction::IDetectionContexts'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x18005AF10: "__cdecl _imp_GetNativeSystemInfo" __imp_GetNativeSystemInfo
0x1800144F8: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpConfigIteratorClose>::~CUniqueHandle<struct CAutoMpConfigIteratorClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpConfigIteratorClose@@@CommonUtil@@QEAA@XZ
0x18002BC50: "public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatStatus(void)const __ptr64" ?GetThreatStatus@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_STATUS@@XZ
0x18005E170: "93" ??_C@_15IPNGFPHG@?$AA9?$AA3?$AA?$AA@
0x180030A10: "protected: virtual long __cdecl MorroCommon::CWin32::RegDeleteKeyImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?RegDeleteKeyImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBG@Z
0x180021E20: "public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CDetectionContextBase::GetMatchType(void)const __ptr64" ?GetMatchType@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4MatchType@2@XZ
0x180030FD0: "protected: virtual int __cdecl MorroCommon::CWin32::MessageBoxImpl(struct HWND__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int) __ptr64" ?MessageBoxImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEBG1I@Z
0x18005AD40: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18005AF98: "__cdecl _imp_SysAllocStringLen" __imp_SysAllocStringLen
0x18006C880: "__vectorcall ??_R3?$_String_val@U?$_Simple_types@G@std@@@std" ??_R3?$_String_val@U?$_Simple_types@G@std@@@std@@8
0x18006C6D8: "__vectorcall ??_R2?$_String_val@U?$_Simple_types@G@std@@@std" ??_R2?$_String_val@U?$_Simple_types@G@std@@@std@@8
0x18001AAF0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,128}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@IA@EBAXXZ
0x18007ED88: "__vectorcall ??_R0?AVILockable@" ??_R0?AVILockable@@@8
0x180060B40: "AuGracePeriod" ??_C@_1BM@OBBBMHM@?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x180078EC8: ext-ms-win-shell-shlwapi-l1-1-0_NULL_THUNK_DATA_DLB
0x18006BD88: "const MpCommonEx::CEventLoggerBase::`RTTI Complete Object Locator'" ??_R4CEventLoggerBase@MpCommonEx@@6B@
0x18006B2B8: "__vectorcall ??_R1A@?0A@EA@CDetectionContextBase@ThreatAbstraction" ??_R1A@?0A@EA@CDetectionContextBase@ThreatAbstraction@@8
0x18002ABB0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryDescription`vtordisp{4294967292,8}' (void)const __ptr64" ?GetCategoryDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x18000C900: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,48}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@DA@EBAJXZ
0x18002F1C8: "public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsAvailableAction(enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CThreatInfo@ThreatAbstraction@@UEBAHW4PermissibleAction@2@@Z
0x180010340: "public: virtual class CommonUtil::AutoRef<class CThreatDetails> __cdecl CDetectionsManager::GetNextThreat(void) __ptr64" ?GetNextThreat@CDetectionsManager@@UEAA?AV?$AutoRef@VCThreatDetails@@@CommonUtil@@XZ
0x18004FB20: "const MorroCommon::CWin32::`vftable'" ??_7CWin32@MorroCommon@@6B@
0x18005B3F0: "__cdecl _imp__unlock" __imp__unlock
0x18000B624: "protected: void __cdecl std::vector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@UtagThreatDefaultAction@@V?$allocator@UtagThreatDefaultAction@@@std@@@std@@IEAAX_K@Z
0x1800608D0: "Scan_CheckForSignaturesBeforeRun" ??_C@_1FC@IFGFDCGA@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAC?$AAh?$AAe?$AAc?$AAk?$AAF?$AAo?$AAr?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAR?$AAu?$AAn@
0x18002F074: "public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CThreatInfo::GetDetectionType(void)const __ptr64" ?GetDetectionType@CThreatInfo@ThreatAbstraction@@UEBA?AW4DetectionType@2@XZ
0x18000ED00: MSFT_MpThreat_DeleteInstance
0x180068EF8: "const ThreatAbstraction::CActiveThreatsController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CActiveThreatsController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18001D620: "[thunk]:public: virtual enum ThreatAbstraction::ScanType __cdecl ThreatAbstraction::CScanProgressInfo::GetScanType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetScanType@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4ScanType@2@XZ
0x18002A3B0: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetDefaultAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDefaultAction@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x180081940: "__vectorcall ??_R0?AUIXMLDeployment@SecurityClient@Microsoft@" ??_R0?AUIXMLDeployment@SecurityClient@Microsoft@@@8
0x1800600A8: "MSFT_MpThreatDetection_Destruct" ??_C@_0CA@KOJLGDO@MSFT_MpThreatDetection_Destruct?$AA@
0x1800407A4: "private: void __cdecl Microsoft::SecurityClient::CFeatureBrand::Initialize(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ?Initialize@CFeatureBrand@SecurityClient@Microsoft@@AEAAXPEBUIXMLReader@23@@Z
0x180029B00: "[thunk]:public: virtual enum ThreatAbstraction::IDetectionContext::MiniFileterStatus __cdecl ThreatAbstraction::CDetectionContextBase::GetMiniFilterStatus`vtordisp{4294967292,0}' (void)const __ptr64" ?GetMiniFilterStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4MiniFileterStatus@IDetectionContext@2@XZ
0x18005DFF8: "50" ??_C@_15OKKBDAOD@?$AA5?$AA0?$AA?$AA@
0x18000B3BC: "public: __cdecl CommonUtil::CStdVector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> >::~CStdVector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> >(void) __ptr64" ??1?$CStdVector@UtagThreatDefaultAction@@V?$allocator@UtagThreatDefaultAction@@@std@@@CommonUtil@@QEAA@XZ
0x180062168: WPP_b539a0584fde3402b699dae01864e93a_Traceguids
0x18006AA10: "const ThreatAbstraction::CQuarantineContextManager::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CQuarantineContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x180069E88: "__vectorcall ??_R3IContextEvents@ThreatAbstraction" ??_R3IContextEvents@ThreatAbstraction@@8
0x18007EF10: "__vectorcall ??_R0?AVCScheduledScanContext@CScheduledScanController@ThreatAbstraction@" ??_R0?AVCScheduledScanContext@CScheduledScanController@ThreatAbstraction@@@8
0x180069A60: "__vectorcall ??_R2IContextEvents@ThreatAbstraction" ??_R2IContextEvents@ThreatAbstraction@@8
0x18002A210: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext::IConfigChange const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChange`vtordisp{4294967292,40}' (unsigned long)const __ptr64" ?GetConfigChange@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVIConfigChange@IDetectionContext@2@K@Z
0x18005E620: "154" ??_C@_17PIEEIKJN@?$AA1?$AA5?$AA4?$AA?$AA@
0x180025960: "void __cdecl ThreatAbstraction::MakeSortedCopy<class CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts> >,struct ThreatAbstraction::time_compare>(class CSmartPtr<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts,class VolatileOps<class ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts> > & __ptr64,class ThreatAbstraction::IDetectionContexts * __ptr64,struct ThreatAbstraction::time_compare)" ??$MakeSortedCopy@V?$CSmartPtr@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@V?$VolatileOps@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@@@@@Utime_compare@ThreatAbstraction@@@ThreatAbstraction@@YAXAEAV?$CSmartPtr@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@V?$VolatileOps@VCScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@@@@@PEAVIDetectionContexts@0@Utime_compare@0@@Z
0x18005E2C0: "IsActive" ??_C@_1BC@EODLIADE@?$AAI?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x18002EFFC: "public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownGood(void)const __ptr64" ?IsKnownGood@CThreatInfo@ThreatAbstraction@@UEBAHXZ
0x1800165B0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,32}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@CA@EBAJXZ
0x1800376B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::SafeLoadSystemLibraryImpl(unsigned short const * __ptr64,struct HINSTANCE__ * __ptr64 & __ptr64) __ptr64" ?SafeLoadSystemLibraryImpl@CFileUtils@MorroCommon@@MEAAJPEBGAEAPEAUHINSTANCE__@@@Z
0x18005DA10: "AntispywareSignatureLastUpdated" ??_C@_1EA@KPKPHNJL@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAL?$AAa?$AAs?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x180046158: "__cdecl Mtxdst" _Mtxdst
0x18001E4C4: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionAborted(void) __ptr64" ?OnActionAborted@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXXZ
0x1800055A4: "public: virtual void * __ptr64 __cdecl CRefCountedBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefCountedBase@@UEAAPEAXI@Z
0x180042660: "public: virtual long __cdecl Microsoft::SecurityClient::CDeploymentBrand::HrGetUninstallSequence(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > * __ptr64 * __ptr64)const __ptr64" ?HrGetUninstallSequence@CDeploymentBrand@SecurityClient@Microsoft@@UEBAJPEBG00PEAPEAV?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@@Z
0x180020380: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Unlock`vtordisp{4294967292,128}' (void)const __ptr64" ?Unlock@CPseudoLockBase@@$4PPPPPPPM@IA@EBAXXZ
0x180026158: "public: bool __cdecl ThreatAbstraction::CQuarantineInfoComparison::operator()(struct tagMPTHREAT_INFO * __ptr64 const,struct tagMPTHREAT_INFO * __ptr64 const)const __ptr64" ??RCQuarantineInfoComparison@ThreatAbstraction@@QEBA_NQEAUtagMPTHREAT_INFO@@0@Z
0x18007EB48: "__vectorcall ??_R0?AVMpWmiHeartBeat@" ??_R0?AVMpWmiHeartBeat@@@8
0x18001BAD8: "public: virtual __cdecl ThreatAbstraction::CHeartBeatController::~CHeartBeatController(void) __ptr64" ??1CHeartBeatController@ThreatAbstraction@@UEAA@XZ
0x180025FB0: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Unlock`vtordisp{4294967292,96}' (void)const __ptr64" ?Unlock@CPseudoLockBase@@$4PPPPPPPM@GA@EBAXXZ
0x18005B418: "__cdecl _imp___RTDynamicCast" __imp___RTDynamicCast
0x1800018A8: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_N_K@Z
0x18004D518: "const MpWmiScanProgress::`vftable'" ??_7MpWmiScanProgress@@6B@
0x180011260: "public: virtual void * __ptr64 __cdecl CMpProviderLogger::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMpProviderLogger@@UEAAPEAXI@Z
0x18006B470: "__vectorcall ??_R3CScanHistoryDetectionContext@ThreatAbstraction" ??_R3CScanHistoryDetectionContext@ThreatAbstraction@@8
0x18005AFA0: "__cdecl _imp_VarBstrCat" __imp_VarBstrCat
0x18006B3E0: "__vectorcall ??_R2CScanHistoryDetectionContext@ThreatAbstraction" ??_R2CScanHistoryDetectionContext@ThreatAbstraction@@8
0x180067C90: "const MpWmiHeartBeat::`RTTI Complete Object Locator'" ??_R4MpWmiHeartBeat@@6B@
0x180069010: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CUpdateContext@CWDOScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180082000: "__vectorcall ??_R0?AV?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@" ??_R0?AV?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@@8
0x18003BEE0: "long __cdecl CommonUtil::UtilRegGetValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned __int64 * __ptr64,void * __ptr64)" ?UtilRegGetValue@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAKPEA_KPEAX@Z
0x1800450B0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x18004ED58: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`vftable'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_7?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6B0@@
0x180062650: "GetFileVersionInfoW" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x180018050: "public: __cdecl CommonUtil::CAutoUniqueWinHandle<struct CommonUtil::CAutoWinEventTag,0>::~CAutoUniqueWinHandle<struct CommonUtil::CAutoWinEventTag,0>(void) __ptr64" ??1?$CAutoUniqueWinHandle@UCAutoWinEventTag@CommonUtil@@$0A@@CommonUtil@@QEAA@XZ
0x180005440: "private: virtual void __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::RetrieveScanGUIDs(class std::vector<struct _GUID,class std::allocator<struct _GUID> > & __ptr64)const __ptr64" ?RetrieveScanGUIDs@CDetectionContextsBase@CContextManager@ThreatAbstraction@@EEBAXAEAV?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@@Z
0x1800789B8: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x180046168: "__cdecl Mtxinit" _Mtxinit
0x18005AFE8: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x180011F60: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,16}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@BA@EBAJXZ
0x180019360: "public: static long __cdecl ThreatAbstraction::CScheduledScanController::Initialize(void)" ?Initialize@CScheduledScanController@ThreatAbstraction@@SAJXZ
0x18002F608: WPP_SF_dD
0x18002ACE8: WPP_SF_DD
0x1800030F4: WPP_SF_Dd
0x1800030F4: WPP_SF_dd
0x180055CE0: MSFT_MpThreatDetection_rtti
0x18005B070: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x18005E5F8: "149" ??_C@_17MBHCIBOF@?$AA1?$AA4?$AA9?$AA?$AA@
0x1800623F0: "%c:\" ??_C@_19MPFPGMJE@?$AA?$CF?$AAc?$AA?3?$AA?2?$AA?$AA@
0x180038B60: "private: static long __cdecl MorroCommon::CCertCheck::HrWinVerifyTrust(struct HWND__ * __ptr64,struct _GUID * __ptr64,struct _WINTRUST_DATA * __ptr64)" ?HrWinVerifyTrust@CCertCheck@MorroCommon@@CAJPEAUHWND__@@PEAU_GUID@@PEAU_WINTRUST_DATA@@@Z
0x1800169D8: "public: __cdecl CAutoLock::~CAutoLock(void) __ptr64" ??1CAutoLock@@QEAA@XZ
0x18005E338: "119" ??_C@_17JBLPBAFG@?$AA1?$AA1?$AA9?$AA?$AA@
0x180062930: WPP_118304b35cab347534b9c022aaf8fab3_Traceguids
0x18005ABE8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1800604C0: "Windows Defender Exploit Guard\A" ??_C@_1FC@OJMMMJJM@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAA@
0x18003DAE0: "private: void __cdecl Microsoft::SecurityClient::CBrandedStrings::Initialize(struct Microsoft::SecurityClient::IXMLReader const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Initialize@CBrandedStrings@SecurityClient@Microsoft@@AEAAXPEBUIXMLReader@23@PEBG@Z
0x18005E6B8: "32780" ??_C@_1M@BMJBKIGE@?$AA3?$AA2?$AA7?$AA8?$AA0?$AA?$AA@
0x180036ED4: WPP_SF_DS
0x180019C24: WPP_SF_dS
0x180062C0C: "[" ??_C@_13MCLHKIEA@?$AA?$FL?$AA?$AA@
0x180029150: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequestComplete(int) __ptr64" ?OnSampleRequestComplete@IContextEventsImpl@ThreatAbstraction@@MEAAXH@Z
0x18005DC20: "26" ??_C@_15NCMPFPIH@?$AA2?$AA6?$AA?$AA@
0x18006DC30: "const Microsoft::SecurityClient::CBrandedColors::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CBrandedColors@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18006A458: "const CPseudoLockBase::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4CPseudoLockBase@@6B0@@
0x180032E00: "public: void __cdecl MpCommonEx::CBrandedAPI::FreeBrandedResources(void) __ptr64" ?FreeBrandedResources@CBrandedAPI@MpCommonEx@@QEAAXXZ
0x18006E1E8: "const Microsoft::SecurityClient::CDeploymentBrand::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CDeploymentBrand@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180061FC8: WPP_1b06ef160fb03a9267dce5859226d95b_Traceguids
0x18005DA08: "14" ??_C@_15POFCOFKC@?$AA1?$AA4?$AA?$AA@
0x18001B554: "public: virtual __cdecl ThreatAbstraction::CWDOScanController::~CWDOScanController(void) __ptr64" ??1CWDOScanController@ThreatAbstraction@@UEAA@XZ
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLReader::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLReader@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x1800247F4: "public: virtual __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::~CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>(void) __ptr64" ??1?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAA@XZ
0x180066EA8: "const std::_System_error_category::`RTTI Complete Object Locator'" ??_R4_System_error_category@std@@6B@
0x18004CFD0: MSFT_MpWDOScan_Start_rtti
0x18005FD50: "Adapter_DllCanUnloadNow" ??_C@_0BI@DJDMNBNH@Adapter_DllCanUnloadNow?$AA@
0x18002DC70: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::`vector deleting destructor'`vtordisp{4294967292,304}' (unsigned int) __ptr64" ??_ECThreatInfo@ThreatAbstraction@@$4PPPPPPPM@BDA@EAAPEAXI@Z
0x18003D04C: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CXMLReader::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCXMLReader@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180029180: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextActivated(unsigned long) __ptr64" ?OnContextActivated@IContextEventsImpl@ThreatAbstraction@@MEAAXK@Z
0x18003FFD8: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@XZ
0x18007C000: WPP_GLOBAL_Control
0x18005E050: "57" ??_C@_15HHHGAIFK@?$AA5?$AA7?$AA?$AA@
0x180061600: "AntimalwareWMIProviders_IgnoreMp" ??_C@_1JE@EKHPBOMF@?$AAA?$AAn?$AAt?$AAi?$AAm?$AAa?$AAl?$AAw?$AAa?$AAr?$AAe?$AAW?$AAM?$AAI?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AA_?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AAM?$AAp@
0x180067900: "const ThreatAbstraction::ISignaturesUpdateCallback::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4ISignaturesUpdateCallback@ThreatAbstraction@@6BIRefCounted@@@
0x1800316E0: "protected: virtual int __cdecl MorroCommon::CWin32::PostThreadMessageImpl(unsigned long,unsigned int,unsigned __int64,__int64) __ptr64" ?PostThreadMessageImpl@CWin32@MorroCommon@@MEAAHKI_K_J@Z
0x18002DAF0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownGood`vtordisp{4294967292,0}' (void)const __ptr64" ?IsKnownGood@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x18006ADC0: "__vectorcall ??_R3?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@" ??_R3?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@8
0x18005E150: "89" ??_C@_15CLDHGMLH@?$AA8?$AA9?$AA?$AA@
0x18006AB10: "__vectorcall ??_R2?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@" ??_R2?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@8
0x18005E890: "175" ??_C@_17NDAEMPD@?$AA1?$AA7?$AA5?$AA?$AA@
0x180002530: "void __cdecl MpMIUtil::MpFreeStringArray(unsigned short * __ptr64 * __ptr64,unsigned __int64)" ?MpFreeStringArray@MpMIUtil@@YAXPEAPEAG_K@Z
0x18004E1C8: "const ThreatAbstraction::CActiveThreatsContextManager::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7CActiveThreatsContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x18005D89C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180067380: "__vectorcall ??_R3CBaseThreatManager" ??_R3CBaseThreatManager@@8
0x18003C820: DloadMakePermanentImageCommit
0x18005E578: "143" ??_C@_17KOMPGBIB@?$AA1?$AA4?$AA3?$AA?$AA@
0x180067140: "__vectorcall ??_R2CBaseThreatManager" ??_R2CBaseThreatManager@@8
0x18000CE24: "private: static enum _MI_Result __cdecl AMIndication::PostMpEvent(struct _MI_Context * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned __int64)" ?PostMpEvent@AMIndication@@CA?AW4_MI_Result@@PEAU_MI_Context@@KKKKKK_K@Z
0x18001F1A8: "private: long __cdecl ThreatAbstraction::CActiveThreatsContextManager::_AddThreat(struct tagMPTHREAT_INFO * __ptr64,int) __ptr64" ?_AddThreat@CActiveThreatsContextManager@ThreatAbstraction@@AEAAJPEAUtagMPTHREAT_INFO@@H@Z
0x18004D3D8: "const MpWmiCleanProgress::`vftable'" ??_7MpWmiCleanProgress@@6B@
0x18002ACB0: "[thunk]:public: virtual void __cdecl ThreatAbstraction::CThreatInfo::GetTimeStamp`vtordisp{4294967292,8}' (struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAXAEAU_FILETIME@@@Z
0x18005D218: "Abstract" ??_C@_1BC@EGFIMNHN@?$AAA?$AAb?$AAs?$AAt?$AAr?$AAa?$AAc?$AAt?$AA?$AA@
0x18005B1E0: api-ms-win-core-version-l1-1-1_NULL_THUNK_DATA
0x18003DD80: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedStrings::HrGetBrandedStrings(class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > * __ptr64 * __ptr64)const __ptr64" ?HrGetBrandedStrings@CBrandedStrings@SecurityClient@Microsoft@@UEBAJPEAPEAV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@Z
0x18005B198: "__cdecl _imp_PathMatchSpecW" __imp_PathMatchSpecW
0x18005D328: "Counter" ??_C@_1BA@MGJGGMO@?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x18000B3F0: "public: __cdecl CommonUtil::CStdVector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::~CStdVector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >(void) __ptr64" ??1?$CStdVector@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@CommonUtil@@QEAA@XZ
0x18005FEC0: "HRESULT" ??_C@_1BA@FDJMIAME@?$AAH?$AAR?$AAE?$AAS?$AAU?$AAL?$AAT?$AA?$AA@
0x180045150: "void __cdecl std::_Xlength_error(char const * __ptr64)" ?_Xlength_error@std@@YAXPEBD@Z
0x180045E49: "__cdecl _tailMerge_ext_ms_win_shell_shell32_l1_2_1_dll" __tailMerge_ext_ms_win_shell_shell32_l1_2_1_dll
0x18003D974: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedStrings::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandedStrings@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18003DE50: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedStrings::HrGetValue(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)const __ptr64" ?HrGetValue@CBrandedStrings@SecurityClient@Microsoft@@UEBAJPEBGPEAPEAG@Z
0x180067A90: "__vectorcall ??_R2CEventLoggerBase@MpCommonEx" ??_R2CEventLoggerBase@MpCommonEx@@8
0x180067B18: "__vectorcall ??_R3CEventLoggerBase@MpCommonEx" ??_R3CEventLoggerBase@MpCommonEx@@8
0x18006A920: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BILockable@@@
0x180003324: WPP_SF_D
0x180003324: WPP_SF_d
0x18005AC48: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x18005FFB0: "MSFT_MpThreatCatalog" ??_C@_0BF@MMMJDNLJ@MSFT_MpThreatCatalog?$AA@
0x18005B2E0: "__cdecl _imp_MpConfigIteratorOpen" __imp_MpConfigIteratorOpen
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLFeatures::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLFeatures@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180083618: "__cdecl pRawDllMain" _pRawDllMain
0x18005E588: "145" ??_C@_17ILKEDOFN@?$AA1?$AA4?$AA5?$AA?$AA@
0x180069D48: "__vectorcall ??_R1FA@?0A@EA@CRefCountedBase" ??_R1FA@?0A@EA@CRefCountedBase@@8
0x180030D80: "protected: virtual int __cdecl MorroCommon::CWin32::GetExitCodeProcessImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetExitCodeProcessImpl@CWin32@MorroCommon@@MEAAHPEAXPEAK@Z
0x18006B488: "const ThreatAbstraction::CScanHistoryDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext'}" ??_R4CScanHistoryDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x18006C160: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandParams'}" ??_R4?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@6BIBrandParams@MpCommonEx@@@
0x18006CB68: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLReader'}" ??_R4?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLReader@SecurityClient@Microsoft@@@
0x18006E170: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_R4?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLDeployment@SecurityClient@Microsoft@@@
0x18006D1D0: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_R4?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedStrings@SecurityClient@Microsoft@@@
0x18006CEB0: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@8
0x18003AAE0: "public: virtual char const * __ptr64 __cdecl CommonUtil::CHResultExceptionImpl::what(void)const __ptr64" ?what@CHResultExceptionImpl@CommonUtil@@UEBAPEBDXZ
0x18005E810: "ExclusionPath" ??_C@_1BM@HFADLNEB@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180016FC0: "[thunk]:public: virtual void * __ptr64 __cdecl CPseudoRefCountedBase::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECPseudoRefCountedBase@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180005600: "[thunk]:public: virtual void * __ptr64 __cdecl CRefCountedBase::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECRefCountedBase@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18005B408: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18005D5D8: "NullValue" ??_C@_1BE@PEMDIEPC@?$AAN?$AAu?$AAl?$AAl?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x180011BE0: "public: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAX_N_K@Z
0x18005EB88: "ScanParameters" ??_C@_1BO@DNBBFLBF@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1800623E4: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180062C48: WPP_f2acb172506d3670e5e6b060984c9b20_Traceguids
0x180031090: "protected: virtual int __cdecl MorroCommon::CWin32::FindNextFileImpl(void * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindNextFileImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_WIN32_FIND_DATAW@@@Z
0x18007E880: "__vectorcall ??_R0?AVCRefCountedBaseX@" ??_R0?AVCRefCountedBaseX@@@8
0x18005C690: "invalid argument" ??_C@_0BB@FCMFBGOM@invalid?5argument?$AA@
0x18004DEA0: "const ThreatAbstraction::CScanHistoryController::`vftable'{for `ILockable'}" ??_7CScanHistoryController@ThreatAbstraction@@6BILockable@@@
0x18000ED30: MSFT_MpThreat_EnumerateInstances
0x18005B1C8: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x18006A6F8: "const ThreatAbstraction::CScanHistoryContextManager::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanHistoryContextManager@ThreatAbstraction@@6BILockable@@@
0x18002A470: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetDefaultActionName`vtordisp{4294967292,40}' (void)const __ptr64" ?GetDefaultActionName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x18006B648: "const ThreatAbstraction::CQuarantineDetectionContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CQuarantineDetectionContext@ThreatAbstraction@@6BILockable@@@
0x180017C30: "public: void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::CScanContext::GetCompletionEvent(void)const __ptr64" ?GetCompletionEvent@CScanContext@COnDemandController@ThreatAbstraction@@QEBAPEAXXZ
0x18002DBD0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,224}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@OA@EBAJXZ
0x18004E160: "const ThreatAbstraction::IContextEvents::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7IContextEvents@ThreatAbstraction@@6B01@@
0x180027EC0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreats::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAutoIgnoreThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x180012844: "public: __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>::~CAtlSafeAllocBufferManager<class ATL::CCRTAllocator>(void) __ptr64" ??1?$CAtlSafeAllocBufferManager@VCCRTAllocator@ATL@@@_ATL_SAFE_ALLOCA_IMPL@ATL@@QEAA@XZ
0x1800021F0: "void __cdecl Load(struct _MI_Module_Self * __ptr64 * __ptr64,struct _MI_Context * __ptr64)" ?Load@@YAXPEAPEAU_MI_Module_Self@@PEAU_MI_Context@@@Z
0x180030E80: "protected: virtual int __cdecl MorroCommon::CWin32::GetTokenInformationImpl(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetTokenInformationImpl@CWin32@MorroCommon@@MEAAHPEAXW4_TOKEN_INFORMATION_CLASS@@0KPEAK@Z
0x1800020E0: DllUnregisterServer
0x180061250: "Computer Reporting ID" ??_C@_1CM@PDKBGDBN@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AA?5?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAD?$AA?$AA@
0x180034220: "[thunk]:public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18006A4B0: "__vectorcall ??_R2CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction" ??_R2CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@8
0x18005AF38: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x18007E8F0: "__vectorcall ??_R0?AVIRefCounted@" ??_R0?AVIRefCounted@@@8
0x18006A5D8: "__vectorcall ??_R3CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction" ??_R3CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@8
0x180014110: "public: long __cdecl CData::StartCleanComputer(class ThreatAbstraction::IActionEvents * __ptr64) __ptr64" ?StartCleanComputer@CData@@QEAAJPEAVIActionEvents@ThreatAbstraction@@@Z
0x18006C1B0: "const MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandParams'}" ??_R4CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@6BIBrandParams@2@@
0x180027F10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoIgnoreThreats::`vector deleting destructor'(unsigned int) __ptr64" ??_EIAutoIgnoreThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x180080A50: "__vectorcall ??_R0?AV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@" ??_R0?AV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@8
0x1800126A0: "public: virtual void __cdecl ATL::CWin32Heap::Free(void * __ptr64) __ptr64" ?Free@CWin32Heap@ATL@@UEAAXPEAX@Z
0x18005B3F8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18005F868: "266" ??_C@_17FKFGDHFL@?$AA2?$AA6?$AA6?$AA?$AA@
0x18002BD14: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetSeverityName(void)const __ptr64" ?GetSeverityName@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005AFC0: "__cdecl _imp_VariantClear" __imp_VariantClear
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDetectionContextBase@ThreatAbstraction@@UEAAPEAXI@Z
0x18006C818: "__vectorcall ??_R1A@?0A@EA@?$_String_val@U?$_Simple_types@G@std@@@std" ??_R1A@?0A@EA@?$_String_val@U?$_Simple_types@G@std@@@std@@8
0x18000F7CC: "public: __cdecl CBaseThreatManager::CBaseThreatManager(void) __ptr64" ??0CBaseThreatManager@@QEAA@XZ
0x180083300: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x1800310F0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::HeapAllocImpl(void * __ptr64,unsigned long,unsigned __int64) __ptr64" ?HeapAllocImpl@CWin32@MorroCommon@@MEAAPEAXPEAXK_K@Z
0x18003063C: "long __cdecl MorroCommon::HrCreateGuid(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64)" ?HrCreateGuid@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005EF10: "SubmitSamplesConsent" ??_C@_1CK@HEGAFMIF@?$AAS?$AAu?$AAb?$AAm?$AAi?$AAt?$AAS?$AAa?$AAm?$AAp?$AAl?$AAe?$AAs?$AAC?$AAo?$AAn?$AAs?$AAe?$AAn?$AAt?$AA?$AA@
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@_K@Z
0x180041F68: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::BuildPackage(unsigned short const * __ptr64,class ATL::CComPtr<struct IXMLDOMNode> const & __ptr64,class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64)" ?BuildPackage@CDeploymentBrand@SecurityClient@Microsoft@@CAXPEBGAEBV?$CComPtr@UIXMLDOMNode@@@ATL@@PEAV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@Z
0x180029FA0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineDetectionContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuarantineDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18005E0F8: "78" ??_C@_15GCNNLJAH@?$AA7?$AA8?$AA?$AA@
0x180033C80: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadStringW@CBrandedAPI@MpCommonEx@@UEAAJPEAPEAGPEBG@Z
0x180062770: ".//BrandedString[@name and @valu" ??_C@_1EG@DCHJOLMM@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$FL?$AA?$EA?$AAn?$AAa?$AAm?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAv?$AAa?$AAl?$AAu@
0x18005AE08: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x180062060: "const ThreatAbstraction::CQuarantineThreatInfo::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8CQuarantineThreatInfo@ThreatAbstraction@@7BIThreatInfo@1@@
0x18006E098: "__vectorcall ??_R3?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@8
0x180005440: "public: virtual void __cdecl MpWmiCleanProgress::OnActionError(long) __ptr64" ?OnActionError@MpWmiCleanProgress@@UEAAXJ@Z
0x18006DCF8: "__vectorcall ??_R2?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@8
0x1800387F4: "private: void __cdecl ATL::CSimpleStringT<char,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x180045726: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180021E20: "public: virtual int __cdecl ThreatAbstraction::CScanHistoryDetectionContext::IsActionTaken(void)const __ptr64" ?IsActionTaken@CScanHistoryDetectionContext@ThreatAbstraction@@UEBAHXZ
0x1800622E8: WPP_66f6a25fe27e34cb80df8b05f634bb6e_Traceguids
0x180061720: "Failed to create wbem object in " ??_C@_1HM@GCHBJGDC@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAw?$AAb?$AAe?$AAm?$AA?5?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAi?$AAn?$AA?5@
0x18005B288: "__cdecl _imp_MpThreatRollup" __imp_MpThreatRollup
0x18005E0C0: "71" ??_C@_15BPNFPGIN@?$AA7?$AA1?$AA?$AA@
0x18007FFE0: "__vectorcall ??_R0?AVCLockedCertCheckImpl@MorroCommon@" ??_R0?AVCLockedCertCheckImpl@MorroCommon@@@8
0x180061EA8: "const ThreatAbstraction::CActiveThreatsContextManager::`vbtable'{for `CCritSectionBase'}" ??_8CActiveThreatsContextManager@ThreatAbstraction@@7BCCritSectionBase@@@
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x18006E210: "const Microsoft::SecurityClient::IXMLDeployment::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_R4IXMLDeployment@SecurityClient@Microsoft@@6B012@@
0x180030DE0: "protected: virtual int __cdecl MorroCommon::CWin32::GetDiskFreeSpaceExImpl(unsigned short const * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64,union _ULARGE_INTEGER * __ptr64) __ptr64" ?GetDiskFreeSpaceExImpl@CWin32@MorroCommon@@MEAAHPEBGPEAT_ULARGE_INTEGER@@11@Z
0x18007F5F0: "__vectorcall ??_R0?AVCActiveThreatsContextManager@ThreatAbstraction@" ??_R0?AVCActiveThreatsContextManager@ThreatAbstraction@@@8
0x18002A9F0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityName`vtordisp{4294967292,8}' (void)const __ptr64" ?GetSeverityName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x180062550: "hr=0x%08X" ??_C@_09PANKGPKN@hr?$DN0x?$CF08X?$AA@
0x18006DB30: "__vectorcall ??_R2IXMLBrandedColors@SecurityClient@Microsoft" ??_R2IXMLBrandedColors@SecurityClient@Microsoft@@8
0x18005B470: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x18005B2A8: "__cdecl _imp_MpConfigClose" __imp_MpConfigClose
0x18006DBF0: "__vectorcall ??_R3IXMLBrandedColors@SecurityClient@Microsoft" ??_R3IXMLBrandedColors@SecurityClient@Microsoft@@8
0x18004D560: "const ThreatAbstraction::ISignaturesUpdateCallback::`vftable'{for `IRefCounted'}" ??_7ISignaturesUpdateCallback@ThreatAbstraction@@6BIRefCounted@@@
0x180062C64: "@" ??_C@_13EFKPHINO@?$AA?$EA?$AA?$AA@
0x18000F894: "public: __cdecl CBaseThreatManager::~CBaseThreatManager(void) __ptr64" ??1CBaseThreatManager@@QEAA@XZ
0x18005DED8: "RealTimeProtectionEnabled" ??_C@_1DE@JCCOCLBH@?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18004D5E8: "const CommonUtil::CRefObject::`vftable'" ??_7CRefObject@CommonUtil@@6B@
0x18005E198: "98" ??_C@_15FINHNIHH@?$AA9?$AA8?$AA?$AA@
0x18002A670: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetVotingResults`vtordisp{4294967292,40}' (void)const __ptr64" ?GetSpynetVotingResults@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18006D168: "__vectorcall ??_R3?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil" ??_R3?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@8
0x18006C0E8: "const MpCommonEx::CBrandedAPI::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandedResources'}" ??_R4CBrandedAPI@MpCommonEx@@6BIBrandedResources@1@@
0x18006CCA0: "__vectorcall ??_R2?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil" ??_R2?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@8
0x18002AB30: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetAvailableActionCount`vtordisp{4294967292,8}' (void)const __ptr64" ?GetAvailableActionCount@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAKXZ
0x18004C9C0: "const type_info::`vftable'" ??_7type_info@@6B@
0x18004E6E0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vftable'{for `ILockable'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6BILockable@@@
0x18005B1C0: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x180005830: "protected: virtual void * __ptr64 __cdecl IRefCounted::`vector deleting destructor'(unsigned int) __ptr64" ??_EIRefCounted@@MEAAPEAXI@Z
0x18005EB78: "196" ??_C@_17CFIPICGN@?$AA1?$AA9?$AA6?$AA?$AA@
0x180078D70: "__cdecl CTA3?AVCHResultExceptionImpl@CommonUtil@@" _CTA3?AVCHResultExceptionImpl@CommonUtil@@
0x1800501B0: "const CommonUtil::IRefObject::`vftable'" ??_7IRefObject@CommonUtil@@6B@
0x180083538: "public: static class std::locale::id std::numpunct<unsigned short>::id" ?id@?$numpunct@G@std@@2V0locale@2@A
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<unsigned short * __ptr64> >::deallocate(unsigned short * __ptr64 * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@PEAG@std@@@std@@QEAAXPEAPEAG_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct _GUID> >::deallocate(struct _GUID * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U_GUID@@@std@@@std@@QEAAXPEAU_GUID@@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > > >::deallocate(class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@@std@@@std@@QEAAXPEAV?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::deallocate(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAXPEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::deallocate(class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAXPEAV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@_K@Z
0x180024A54: "private: void __cdecl ThreatAbstraction::CScanHistoryContextManager::ConstructSequence(void) __ptr64" ?ConstructSequence@CScanHistoryContextManager@ThreatAbstraction@@AEAAXXZ
0x1800204A0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnThreatsChanged`vtordisp{4294967292,88}' (void) __ptr64" ?OnThreatsChanged@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXXZ
0x1800299E0: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::Release`vtordisp{4294967292,192}' (void)const __ptr64" ?Release@CRefCountedBaseX@@$4PPPPPPPM@MA@EBAJXZ
0x18005ACC0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18005D998: "AntispywareSignatureVersion" ??_C@_1DI@HLNKHDIG@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18005B430: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180066F20: "__vectorcall ??_R1A@?0A@EA@_Generic_error_category@std" ??_R1A@?0A@EA@_Generic_error_category@std@@8
0x180061ED8: WPP_ff450252a9c4300d4c3e2aa15a6488c0_Traceguids
0x18002DC70: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineThreatInfo::`vector deleting destructor'`vtordisp{4294967292,304}' (unsigned int) __ptr64" ??_ECQuarantineThreatInfo@ThreatAbstraction@@$4PPPPPPPM@BDA@EAAPEAXI@Z
0x180062050: WPP_b9b92f0c382d3427970973a0f32bc94d_Traceguids
0x18004F828: "const ThreatAbstraction::CDetectionContextBase::`vftable'" ??_7CDetectionContextBase@ThreatAbstraction@@6B@
0x180045750: "__cdecl _security_check_cookie" __security_check_cookie
0x180025960: "void __cdecl ThreatAbstraction::MakeSortedCopy<class CSmartPtr<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts> >,struct ThreatAbstraction::time_compare>(class CSmartPtr<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts> > & __ptr64,class ThreatAbstraction::IDetectionContexts * __ptr64,struct ThreatAbstraction::time_compare)" ??$MakeSortedCopy@V?$CSmartPtr@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@V?$VolatileOps@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@@@@@Utime_compare@ThreatAbstraction@@@ThreatAbstraction@@YAXAEAV?$CSmartPtr@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@V?$VolatileOps@VCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@@@@@PEAVIDetectionContexts@0@Utime_compare@0@@Z
0x180024530: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnThreatsChanged`vtordisp{4294967292,80}' (void) __ptr64" ?OnThreatsChanged@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXXZ
0x1800831A0: g_hHelper
0x18006D0A8: "__vectorcall ??_R3CBrandedStrings@SecurityClient@Microsoft" ??_R3CBrandedStrings@SecurityClient@Microsoft@@8
0x18006CC78: "__vectorcall ??_R2CBrandedStrings@SecurityClient@Microsoft" ??_R2CBrandedStrings@SecurityClient@Microsoft@@8
0x1800831D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x180061CF8: WPP_c0bd7bf68a1a36ed6f60a976a60ce847_Traceguids
0x180012158: "public: void __cdecl MpWmiHeartBeat::SendHeartBeat(void) __ptr64" ?SendHeartBeat@MpWmiHeartBeat@@QEAAXXZ
0x18005B5B8: "__cdecl _xc_z" __xc_z
0x18005E238: "113" ??_C@_17POACPADC@?$AA1?$AA1?$AA3?$AA?$AA@
0x1800317E0: "protected: virtual long __cdecl MorroCommon::CWin32::ProcessIdToSessionIdImpl(unsigned long,unsigned long * __ptr64) __ptr64" ?ProcessIdToSessionIdImpl@CWin32@MorroCommon@@MEAAJKPEAK@Z
0x180030E60: "protected: virtual int __cdecl MorroCommon::CWin32::OpenProcessTokenImpl(void * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?OpenProcessTokenImpl@CWin32@MorroCommon@@MEAAHPEAXKPEAPEAX@Z
0x180020A00: "public: virtual unsigned long __cdecl ThreatAbstraction::CContextManager::CDetectionStats::GetCountOfType(unsigned long)const __ptr64" ?GetCountOfType@CDetectionStats@CContextManager@ThreatAbstraction@@UEBAKK@Z
0x180020710: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Insert(class ThreatAbstraction::IDetectionContext * __ptr64) __ptr64" ?Insert@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAXPEAVIDetectionContext@ThreatAbstraction@@@Z
0x180062560: WPP_d9331a28cdf9347a3f7ce0b108860eb4_Traceguids
0x18001718C: "public: void __cdecl ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo::SetPath(unsigned short const * __ptr64) __ptr64" ?SetPath@CResourceInfo@CScanContext@COnDemandController@ThreatAbstraction@@QEAAXPEBG@Z
0x18005E3D8: "124" ??_C@_17OFEBLKCF@?$AA1?$AA2?$AA4?$AA?$AA@
0x180028EF0: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::StartWrite`vtordisp{4294967292,0}' (void) __ptr64" ?StartWrite@CAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@A@EAAJXZ
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKK@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x18005D610: "Override" ??_C@_1BC@DKGLGECA@?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x180017E7C: "public: class ThreatAbstraction::COnDemandController::CScanContext::Resources const & __ptr64 __cdecl ThreatAbstraction::COnDemandController::CScanContext::GetResources(void)const __ptr64" ?GetResources@CScanContext@COnDemandController@ThreatAbstraction@@QEBAAEBVResources@123@XZ
0x180021870: "public: virtual class ThreatAbstraction::CContextManager::CDetectionStats const * __ptr64 __cdecl ThreatAbstraction::CContextManager::GetDetectionStats(void)const __ptr64" ?GetDetectionStats@CContextManager@ThreatAbstraction@@UEBAPEBVCDetectionStats@12@XZ
0x18005EC18: "ScanScheduleTime" ??_C@_1CC@LJPCHHK@?$AAS?$AAc?$AAa?$AAn?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18004E398: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x18005D550: "MinLen" ??_C@_1O@FPCAKKLD@?$AAM?$AAi?$AAn?$AAL?$AAe?$AAn?$AA?$AA@
0x18006B290: "__vectorcall ??_R1A@DI@BA@FA@IDetectionContext@ThreatAbstraction" ??_R1A@DI@BA@FA@IDetectionContext@ThreatAbstraction@@8
0x18006BCC0: "const ThreatAbstraction::CThreatInfo::`RTTI Complete Object Locator'" ??_R4CThreatInfo@ThreatAbstraction@@6B@
0x18005F228: "DisableRestorePoint" ??_C@_1CI@IDJAPAMB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x180067D40: "__vectorcall ??_R2?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@" ??_R2?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@8
0x180068110: "__vectorcall ??_R3?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@" ??_R3?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@8
0x18005AD70: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18006B5B8: "__vectorcall ??_R1A@?0A@EA@CQuarantineDetectionContext@ThreatAbstraction" ??_R1A@?0A@EA@CQuarantineDetectionContext@ThreatAbstraction@@8
0x180014928: "private: static void __cdecl ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::CallConstructors(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,unsigned __int64)" ?CallConstructors@?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@CAXPEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@2@_K@Z
0x18005ABF8: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x18006E070: "__vectorcall ??_R1A@?0A@EA@?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std" ??_R1A@?0A@EA@?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@8
0x180060F90: "LowCpuPriority" ??_C@_1BO@DLKCPJKM@?$AAL?$AAo?$AAw?$AAC?$AAp?$AAu?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x18005EC88: "SignatureAuGracePeriod" ??_C@_1CO@HNNNCFLE@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x18007E940: "__vectorcall ??_R0?AVIScanProgress@ThreatAbstraction@" ??_R0?AVIScanProgress@ThreatAbstraction@@@8
0x18004E610: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`vftable'{for `ILockable'}" ??_7CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BILockable@@@
0x180031DC8: WPP_SF_qdhdd
0x18005F4D8: "242" ??_C@_17JIPMABAH@?$AA2?$AA4?$AA2?$AA?$AA@
0x180060CC0: "Signature_SignatureUpdateInterva" ??_C@_1EE@FIJMNOAK@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa@
0x180069C58: "__vectorcall ??_R1A@?0A@EA@CActiveThreatsContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CActiveThreatsContextManager@ThreatAbstraction@@8
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::CConfigController,class VolatileOps<class ThreatAbstraction::CConfigController> >::~CSmartPtr<class ThreatAbstraction::CConfigController,class VolatileOps<class ThreatAbstraction::CConfigController> >(void) __ptr64" ??1?$CSmartPtr@VCConfigController@ThreatAbstraction@@V?$VolatileOps@VCConfigController@ThreatAbstraction@@@@@@QEAA@XZ
0x18006AFB8: "const ThreatAbstraction::CAutoActionManager::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CAutoActionManager@ThreatAbstraction@@6BILockable@@@
0x18003A6F0: "private: static unsigned long __cdecl CThreadManager::_ThreadProc(void * __ptr64)" ?_ThreadProc@CThreadManager@@CAKPEAX@Z
0x180066EF8: "const std::_Iostream_error_category::`RTTI Complete Object Locator'" ??_R4_Iostream_error_category@std@@6B@
0x1800308D0: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetTempFileNameImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned short * __ptr64) __ptr64" ?GetTempFileNameImpl@CWin32@MorroCommon@@MEAAIPEBG0IPEAG@Z
0x180030950: "protected: virtual long __cdecl MorroCommon::CWin32::RegCreateKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?RegCreateKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKPEAGKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x18004F400: "const ThreatAbstraction::CQuarantineDetectionContext::`vftable'{for `CCritSectionBase'}" ??_7CQuarantineDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005D6D0: "Read" ??_C@_19EOHDNDII@?$AAR?$AAe?$AAa?$AAd?$AA?$AA@
0x18005D338: "Deprecated" ??_C@_1BG@PJOJINMN@?$AAD?$AAe?$AAp?$AAr?$AAe?$AAc?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x180060210: "Items detected as potentially ha" ??_C@_1IC@NJGBBDIO@?$AAI?$AAt?$AAe?$AAm?$AAs?$AA?5?$AAd?$AAe?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?5?$AAa?$AAs?$AA?5?$AAp?$AAo?$AAt?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAl?$AAy?$AA?5?$AAh?$AAa@
0x180010DB0: "public: struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@2@XZ
0x180078A70: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x1800296C0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetContextID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetContextID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18000FCF0: "public: virtual long __cdecl CBaseThreatManager::GetThreats(void) __ptr64" ?GetThreats@CBaseThreatManager@@UEAAJXZ
0x180018000: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECOnDemandController@ThreatAbstraction@@UEAAPEAXI@Z
0x180010918: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@Z
0x18004ED38: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`vftable'{for `IRefCounted'}" ??_7?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6BIRefCounted@@@
0x180031010: "protected: virtual struct HRSRC__ * __ptr64 __cdecl MorroCommon::CWin32::FindResourceImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindResourceImpl@CWin32@MorroCommon@@MEAAPEAUHRSRC__@@PEAUHINSTANCE__@@PEBG1@Z
0x180024740: "[thunk]:public: virtual int __cdecl CPseudoLockBase::TryLock`vtordisp{4294967292,56}' (void)const __ptr64" ?TryLock@CPseudoLockBase@@$4PPPPPPPM@DI@EBAHXZ
0x18004EFA8: "const ThreatAbstraction::COnDemandDetectionContext::`vftable'" ??_7COnDemandDetectionContext@ThreatAbstraction@@6B@
0x18005B0F8: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x180069150: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CUpdateContext@CHeartBeatController@ThreatAbstraction@@6BILockable@@@
0x180002C88: "public: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Empty(void) __ptr64" ?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
0x18007E730: "__vectorcall ??_R0?AVIActionEvents@ThreatAbstraction@" ??_R0?AVIActionEvents@ThreatAbstraction@@@8
0x180001B5C: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K0@Z
0x18005CCF8: "no protocol option" ??_C@_0BD@EAMBFIDF@no?5protocol?5option?$AA@
0x18006A408: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6BILockable@@@
0x180068760: "const ThreatAbstraction::CServiceStatusController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CServiceStatusController@ThreatAbstraction@@6BILockable@@@
0x180022960: "public: long __cdecl ThreatAbstraction::CContextManager::LuaElevateMpClientUtils(int) __ptr64" ?LuaElevateMpClientUtils@CContextManager@ThreatAbstraction@@QEAAJH@Z
0x180038AFC: "public: void __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
0x18000EDE0: MSFT_MpThreat_Invoke_Remove
0x18005E038: "55" ??_C@_15NNHPMANB@?$AA5?$AA5?$AA?$AA@
0x180067FF8: "__vectorcall ??_R1A@?0A@EA@CCritSectionBase" ??_R1A@?0A@EA@CCritSectionBase@@8
0x18001A42C: "public: static void __cdecl ThreatAbstraction::CSignatureUpdateController::Shutdown(void)" ?Shutdown@CSignatureUpdateController@ThreatAbstraction@@SAXXZ
0x18003E6A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18006C5A0: "const MorroCommon::ILockedCertCheck::`RTTI Complete Object Locator'" ??_R4ILockedCertCheck@MorroCommon@@6B@
0x180043474: "public: class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::operator[](class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > &&) __ptr64" ??A?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@QEAAAEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@$$QEAV23@@Z
0x18003D1CC: "private: static void __cdecl Microsoft::SecurityClient::CXMLReader::Create(struct Microsoft::SecurityClient::IXMLReader * __ptr64 * __ptr64,unsigned short const * __ptr64,int,int)" ?Create@CXMLReader@SecurityClient@Microsoft@@CAXPEAPEAUIXMLReader@23@PEBGHH@Z
0x180045B7C: "__cdecl CxxThrowException" _CxxThrowException
0x1800612FC: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x18005B3E0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1800626C8: "__cdecl _pfnDefaultDliNotifyHook2" __pfnDefaultDliNotifyHook2
0x180083271: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils> MorroCommon::CPathUtils::m_instance" ?m_instance@CPathUtils@MorroCommon@@0V?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@2@A
0x180034020: "private: static long __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnInitialize(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnInitialize@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAJPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18005F080: "224" ??_C@_17GLMOLNMG@?$AA2?$AA2?$AA4?$AA?$AA@
0x1800623D8: "*.scr" ??_C@_1M@EKDBLKPK@?$AA?$CK?$AA?4?$AAs?$AAc?$AAr?$AA?$AA@
0x18005F700: "258" ??_C@_17DMBNDCMG@?$AA2?$AA5?$AA8?$AA?$AA@
0x180001630: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Generic_error_category@std@@UEAAPEAXI@Z
0x18005CE40: "read only file system" ??_C@_0BG@EICBIHDP@read?5only?5file?5system?$AA@
0x18002A210: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChangeCount`vtordisp{4294967292,40}' (void)const __ptr64" ?GetConfigChangeCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18007EA50: "__vectorcall ??_R0?AVCEventLoggerBase@MpCommonEx@" ??_R0?AVCEventLoggerBase@MpCommonEx@@@8
0x180061DE0: WPP_4886efde13263cc5a225e8635ec4f48f_Traceguids
0x180050700: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`vftable'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_7?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLFeatures@SecurityClient@Microsoft@@@
0x180060688: "Remediation_ScheduleTime" ??_C@_1DC@HMFLHIIE@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180060768: "Reporting" ??_C@_1BE@IFLMBIDF@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x18005E118: "82" ??_C@_15PMDGOLLG@?$AA8?$AA2?$AA?$AA@
0x180062030: WPP_02fd802618da38d231f86103b6054c82_Traceguids
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContexts::`vector deleting destructor'(unsigned int) __ptr64" ??_EIDetectionContexts@ThreatAbstraction@@UEAAPEAXI@Z
0x18005AF80: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000BA68: "public: virtual void * __ptr64 __cdecl MpWmiScanProgress::`vector deleting destructor'(unsigned int) __ptr64" ??_EMpWmiScanProgress@@UEAAPEAXI@Z
0x180067B70: "const CMpProviderLogger::`RTTI Complete Object Locator'{for `CommonUtil::CRefObject'}" ??_R4CMpProviderLogger@@6BCRefObject@CommonUtil@@@
0x18005FA30: "281" ??_C@_17PNILGOJC@?$AA2?$AA8?$AA1?$AA?$AA@
0x18005AD38: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18006DFA8: "__vectorcall ??_R1A@?0A@EA@?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil" ??_R1A@?0A@EA@?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@8
0x18001C6B8: "public: class ThreatAbstraction::IAutoActionManager * __ptr64 __cdecl ThreatAbstraction::CConfigController::GetAutoActionManager(void) __ptr64" ?GetAutoActionManager@CConfigController@ThreatAbstraction@@QEAAPEAVIAutoActionManager@2@XZ
0x180003360: "public: __cdecl CommonUtil::CAutoUniqueArrayPtr<unsigned char,void>::~CAutoUniqueArrayPtr<unsigned char,void>(void) __ptr64" ??1?$CAutoUniqueArrayPtr@EX@CommonUtil@@QEAA@XZ
0x180062A48: ".//BrandedColors" ??_C@_1CC@IDLKIMJK@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAC?$AAo?$AAl?$AAo?$AAr?$AAs?$AA?$AA@
0x18004E0C8: "const ThreatAbstraction::CScanProgressInfo::`vftable'{for `ThreatAbstraction::IScanProgressInfo'}" ??_7CScanProgressInfo@ThreatAbstraction@@6BIScanProgressInfo@1@@
0x18006D4F0: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@8
0x18006D790: "__vectorcall ??_R3?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std" ??_R3?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@8
0x180060294: "MI" ??_C@_15BLOHFAFJ@?$AAM?$AAI?$AA?$AA@
0x18005D4D0: "MappingStrings" ??_C@_1BO@IMIONAEF@?$AAM?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18006D380: "__vectorcall ??_R2?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std" ??_R2?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@8
0x18005AC90: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x18007EA88: "__vectorcall ??_R0?AVCMpProviderLogger@" ??_R0?AVCMpProviderLogger@@@8
0x180031A60: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustWindowRectImpl(struct tagRECT * __ptr64,unsigned long,int) __ptr64" ?AdjustWindowRectImpl@CWin32@MorroCommon@@MEAAHPEAUtagRECT@@KH@Z
0x180062C20: "%OS%" ??_C@_19FIEKKKAJ@?$AA?$CF?$AAO?$AAS?$AA?$CF?$AA?$AA@
0x18005F7B8: "260" ??_C@_17HPDNGIIH@?$AA2?$AA6?$AA0?$AA?$AA@
0x18005ABE0: "__cdecl _imp_InitiateSystemShutdownExW" __imp_InitiateSystemShutdownExW
0x180029700: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,192}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@MA@EBAJXZ
0x180019700: "public: virtual long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::DeleteValue(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?DeleteValue@CSimpleMpConfigComWriter@ThreatAbstraction@@UEAAJPEBG0@Z
0x180018C50: ??1?$CAutoHandle@PEAX$1?_CloseHandle@ThreatAbstraction@@YAXPEAX0@Z@@QEAA@XZ
0x180080208: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x180034260: "[thunk]:public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedAPI::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECBrandedAPI@MpCommonEx@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18006D270: "const CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::`RTTI Complete Object Locator'" ??_R4?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@6B@
0x18003AAEC: "void __cdecl CommonUtil::CommonThrowHr(long)" ?CommonThrowHr@CommonUtil@@YAXJ@Z
0x180030890: "protected: virtual int __cdecl MorroCommon::CWin32::PathFileExistsImpl(unsigned short const * __ptr64) __ptr64" ?PathFileExistsImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x18002A210: "[thunk]:public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CDetectionContextBase::GetMatchType`vtordisp{4294967292,40}' (void)const __ptr64" ?GetMatchType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4MatchType@2@XZ
0x18002A4B0: "[thunk]:public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionType`vtordisp{4294967292,40}' (void)const __ptr64" ?GetDetectionType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4DetectionType@2@XZ
0x180062A74: "b" ??_C@_13EPJEBPGL@?$AAb?$AA?$AA@
0x18005B248: "__cdecl _imp_MpAllocMemory" __imp_MpAllocMemory
0x18006C958: "__vectorcall ??_R1A@?0A@EA@CThreadManager" ??_R1A@?0A@EA@CThreadManager@@8
0x180005440: MSFT_MpPreference_ModifyInstance
0x1800502F8: "const MorroCommon::CLockEntireFile::`vftable'" ??_7CLockEntireFile@MorroCommon@@6B@
0x18006B3B0: "const ThreatAbstraction::COnDemandDetectionContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4COnDemandDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x18006D1F8: "const Microsoft::SecurityClient::CBrandedStrings::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLBrandedStrings'}" ??_R4CBrandedStrings@SecurityClient@Microsoft@@6BIXMLBrandedStrings@12@@
0x18001AE80: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCActiveThreatsController@ThreatAbstraction@@UEAAPEAXI@Z
0x18006C5C8: "const CRefCountedBaseX::`RTTI Complete Object Locator'" ??_R4CRefCountedBaseX@@6B@
0x180068960: "__vectorcall ??_R1A@?0A@EA@COnDemandController@ThreatAbstraction" ??_R1A@?0A@EA@COnDemandController@ThreatAbstraction@@8
0x18005D710: "Schema" ??_C@_1O@EHCJLADP@?$AAS?$AAc?$AAh?$AAe?$AAm?$AAa?$AA?$AA@
0x180031670: "protected: virtual int __cdecl MorroCommon::CWin32::IsDialogMessageImpl(struct HWND__ * __ptr64,struct tagMSG * __ptr64) __ptr64" ?IsDialogMessageImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@PEAUtagMSG@@@Z
0x18004CB78: "const std::_Generic_error_category::`vftable'" ??_7_Generic_error_category@std@@6B@
0x180083380: "private: static struct CommonUtil::CSimpleGlobalAtStartup2nd<class CommonUtil::CMpCriticalSection> MpCommonEx::CBrandedResourceWrapper::m_CS" ?m_CS@CBrandedResourceWrapper@MpCommonEx@@0U?$CSimpleGlobalAtStartup2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@A
0x18006C4F8: "__vectorcall ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon" ??_R1A@?0A@EA@CLockedCertCheckImpl@MorroCommon@@8
0x180005498: "public: __cdecl CommonUtil::AutoRef<class CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::~AutoRef<class CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >(void) __ptr64" ??1?$AutoRef@V?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18005B1F0: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x180021F60: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::_GetDetectionContextsByType(unsigned long,class CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase> * __ptr64) __ptr64" ?_GetDetectionContextsByType@CContextManager@ThreatAbstraction@@MEAAXKPEAV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@Z
0x18005F908: "UpdateSource" ??_C@_1BK@PMJJHDGG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180060E60: "MpEngine" ??_C@_1BC@MIEENHCI@?$AAM?$AAp?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AA?$AA@
0x180011C50: "public: __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::~basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ
0x18006C138: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@6BIRefObject@1@@
0x18005EAB0: "CheckForSignaturesBeforeRunningS" ??_C@_1EI@IHBMIBFL@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAF?$AAo?$AAr?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAR?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AAS@
0x18003A084: "public: virtual void * __ptr64 __cdecl CWString::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWString@@UEAAPEAXI@Z
0x1800294C4: "public: virtual unsigned long __cdecl ThreatAbstraction::COnDemandDetectionContext::GetCheckpointID(void)const __ptr64" ?GetCheckpointID@COnDemandDetectionContext@ThreatAbstraction@@UEBAKXZ
0x1800689B8: "const ThreatAbstraction::COnDemandController::CScanContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanContext@COnDemandController@ThreatAbstraction@@6BILockable@@@
0x18005F608: "254" ??_C@_17HGMLINHO@?$AA2?$AA5?$AA4?$AA?$AA@
0x180034130: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<enum MpCommonEx::BrandParamType,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<enum MpCommonEx::BrandParamType>,class std::allocator<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Erase(struct std::_Tree_node<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@W4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$less@W4BrandParamType@MpCommonEx@@@std@@V?$allocator@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@6@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@PEAX@2@@Z
0x18006C250: "const MpCommonEx::IBrandedResources::`RTTI Complete Object Locator'{for `MpCommonEx::IBrandedResources'}" ??_R4IBrandedResources@MpCommonEx@@6B01@@
0x18003D09C: "public: virtual __cdecl Microsoft::SecurityClient::CXMLReader::~CXMLReader(void) __ptr64" ??1CXMLReader@SecurityClient@Microsoft@@UEAA@XZ
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandDetectionContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCOnDemandDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x180041BC0: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x180029B80: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAvailableActionCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAvailableActionCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18001384C: "public: static long __cdecl CData::ThreatHasPolicyDefaultAction(class ThreatAbstraction::IDetectionContext const * __ptr64,bool * __ptr64)" ?ThreatHasPolicyDefaultAction@CData@@SAJPEBVIDetectionContext@ThreatAbstraction@@PEA_N@Z
0x18005ACA8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000ED80: MSFT_MpThreat_GetInstance
0x18005F168: "228" ??_C@_17CBBIACHO@?$AA2?$AA2?$AA8?$AA?$AA@
0x180031BC0: "public: class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::operator->(void) __ptr64" ??C?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@QEAAPEAVCWin32@1@XZ
0x18006B240: "__vectorcall ??_R1A@?0A@EA@COnDemandDetectionContext@ThreatAbstraction" ??_R1A@?0A@EA@COnDemandDetectionContext@ThreatAbstraction@@8
0x180068EA8: "const ThreatAbstraction::CActiveThreatsController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CActiveThreatsController@ThreatAbstraction@@6BILockable@@@
0x180040070: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::_Insert_at<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@1@1@Z
0x18005E2F0: "Remove" ??_C@_1O@KEIBEGCK@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x1800504D0: "const Microsoft::SecurityClient::IXMLBrandedStrings::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLBrandedStrings@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18005CEA8: "stream timeout" ??_C@_0P@DIIFGFCG@stream?5timeout?$AA@
0x18001193C: "public: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAX_K0@Z
0x180050160: "const MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`vftable'{for `CommonUtil::IRefObject'}" ??_7CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x180038B30: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x18006C868: "__vectorcall ??_R3?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R3?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18003D820: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::Release`vtordisp{4294967292,8}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x18000FDD0: "public: virtual long __cdecl CThreatRollupManager::GetThreats(void) __ptr64" ?GetThreats@CThreatRollupManager@@UEAAJXZ
0x18006C6B8: "__vectorcall ??_R2?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R2?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x180002230: MSFT_MpWDOScan_Unload
0x180016DB0: "public: virtual void * __ptr64 __cdecl CError::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCError@@UEAAPEAXI@Z
0x18005E910: "183" ??_C@_17NJANKBPK@?$AA1?$AA8?$AA3?$AA?$AA@
0x18005B2C8: "__cdecl _imp_MpConfigOpen" __imp_MpConfigOpen
0x18005AE68: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180067E90: "__vectorcall ??_R1A@DI@7FA@ILockable" ??_R1A@DI@7FA@ILockable@@8
0x1800688A0: "__vectorcall ??_R2CHResultException@CommonUtil" ??_R2CHResultException@CommonUtil@@8
0x1800688B8: "__vectorcall ??_R3CHResultException@CommonUtil" ??_R3CHResultException@CommonUtil@@8
0x180032650: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedAPI::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBrandedAPI@MpCommonEx@@UEAAPEAXI@Z
0x18006DCA8: "const Microsoft::SecurityClient::IXMLBrandedColors::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLBrandedColors@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18005F3B0: "UnknownThreatDefaultAction" ??_C@_1DG@JGOKAAMH@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180068938: "__vectorcall ??_R1A@?0A@EA@CScanContext@COnDemandController@ThreatAbstraction" ??_R1A@?0A@EA@CScanContext@COnDemandController@ThreatAbstraction@@8
0x180030C20: "protected: virtual long __cdecl MorroCommon::CWin32::RegQueryValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?RegQueryValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x18005FCF8: "wmitomi.dll" ??_C@_1BI@FNKABONH@?$AAw?$AAm?$AAi?$AAt?$AAo?$AAm?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18005F320: "235" ??_C@_17BICOAJAG@?$AA2?$AA3?$AA5?$AA?$AA@
0x18006B798: "__vectorcall ??_R1A@DI@BA@FA@IAutoIgnoreThreat@ThreatAbstraction" ??_R1A@DI@BA@FA@IAutoIgnoreThreat@ThreatAbstraction@@8
0x18000B508: "protected: void __cdecl std::vector<unsigned short * __ptr64,class std::allocator<unsigned short * __ptr64> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@PEAGV?$allocator@PEAG@std@@@std@@IEBAXXZ
0x180067AC8: "__vectorcall ??_R1A@?0A@EA@CMpProviderLogger" ??_R1A@?0A@EA@CMpProviderLogger@@8
0x1800267F0: "public: virtual class ThreatAbstraction::IDetectionContexts * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::GetDetectionContextsByType(unsigned long) __ptr64" ?GetDetectionContextsByType@CQuarantineContextManager@ThreatAbstraction@@UEAAPEAVIDetectionContexts@2@K@Z
0x180001630: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_System_error_category@std@@UEAAPEAXI@Z
0x180061CA8: "const MpWmiHeartBeat::`vbtable'" ??_8MpWmiHeartBeat@@7B@
0x18005DC10: "24" ??_C@_15HIMGJHAM@?$AA2?$AA4?$AA?$AA@
0x18005E268: "115" ??_C@_17NLGJKPOO@?$AA1?$AA1?$AA5?$AA?$AA@
0x18005D3D8: "EmbeddedObject" ??_C@_1BO@GDNHKODO@?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x18000F20C: MPTHREAT_INFO_FREE
0x180039890: "public: virtual void __cdecl MorroCommon::CLockedCertCheckImpl::Unlock(void) __ptr64" ?Unlock@CLockedCertCheckImpl@MorroCommon@@UEAAXXZ
0x180045920: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18001A22C: "public: virtual __cdecl ThreatAbstraction::CSignatureUpdateController::~CSignatureUpdateController(void) __ptr64" ??1CSignatureUpdateController@ThreatAbstraction@@UEAA@XZ
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<unsigned __int64,void * __ptr64> > >::deallocate(struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@_KPEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@_KPEAX@2@_K@Z
0x18005CDA8: "operation in progress" ??_C@_0BG@KDKHOPCO@operation?5in?5progress?$AA@
0x180041C64: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CDeploymentBrand::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDeploymentBrand@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18005DB38: "19" ??_C@_15MDIDNHP@?$AA1?$AA9?$AA?$AA@
0x18001C3B0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineController::`vector deleting destructor'`vtordisp{4294967292,80}' (unsigned int) __ptr64" ??_ECQuarantineController@ThreatAbstraction@@$4PPPPPPPM@FA@EAAPEAXI@Z
0x18005D6C0: "PUnit" ??_C@_1M@OJKLPFEA@?$AAP?$AAU?$AAn?$AAi?$AAt?$AA?$AA@
0x18000ECC0: MSFT_MpThreatCatalog_Load
0x18005B0F0: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x18006A770: "const ThreatAbstraction::CScanHistoryContextManager::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScanHistoryContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x180061458: "Quick Scan" ??_C@_1BG@HIMIIFG@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AA?5?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18005EA78: "ScanAvgCPULoadFactor" ??_C@_1CK@PIJIDEHB@?$AAS?$AAc?$AAa?$AAn?$AAA?$AAv?$AAg?$AAC?$AAP?$AAU?$AAL?$AAo?$AAa?$AAd?$AAF?$AAa?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x18005B410: "__cdecl _imp__errno" __imp__errno
0x18005AE50: "__cdecl _imp_Process32NextW" __imp_Process32NextW
0x180016530: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,64}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@EA@EBAXXZ
0x18006D018: "__vectorcall ??_R1A@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std" ??_R1A@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@8
0x180024510: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnInternalError`vtordisp{4294967292,80}' (long) __ptr64" ?OnInternalError@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXJ@Z
0x18005F2C8: "DisableScanningNetworkFiles" ??_C@_1DI@FHBOBPFB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18003AD48: "void __cdecl CommonUtil::UtilResetEvent(void * __ptr64)" ?UtilResetEvent@CommonUtil@@YAXPEAX@Z
0x18007F910: "__vectorcall ??_R0?AVCQuarantineDetectionContext@ThreatAbstraction@" ??_R0?AVCQuarantineDetectionContext@ThreatAbstraction@@@8
0x18006B360: "const ThreatAbstraction::COnDemandDetectionContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4COnDemandDetectionContext@ThreatAbstraction@@6BILockable@@@
0x18004F2F0: "const ThreatAbstraction::CQuarantineDetectionContext::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CQuarantineDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x18005EFB8: "DisableBehaviorMonitoring" ??_C@_1DE@IJJADBBN@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180068598: "__vectorcall ??_R1A@?0A@EA@ILockable" ??_R1A@?0A@EA@ILockable@@8
0x180016AB4: "public: virtual int __cdecl CPseudoLockBase::TryLock(void)const __ptr64" ?TryLock@CPseudoLockBase@@UEBAHXZ
0x180078D28: "__cdecl CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48" _CT??_R0?AVCHResultExceptionImpl@CommonUtil@@@8??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z48
0x18005EA38: "ReportingNonCriticalTimeOut" ??_C@_1DI@LIOGNMKM@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAN?$AAo?$AAn?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x18005AC88: "__cdecl _imp_HeapSize" __imp_HeapSize
0x18007ED08: "__vectorcall ??_R0?AVIDetectionContext@ThreatAbstraction@" ??_R0?AVIDetectionContext@ThreatAbstraction@@@8
0x18003AB88: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(class CommonUtil::CHResultExceptionImpl const & __ptr64) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@AEBV01@@Z
0x180022B3C: "public: class CSafePtr<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >,class VolatileOps<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> > > > & __ptr64 __cdecl CSafePtr<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> >,class VolatileOps<class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> > > >::operator=(class std::set<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long> > * __ptr64) __ptr64" ??4?$CSafePtr@V?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@V?$VolatileOps@V?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@@@@@QEAAAEAV0@PEAV?$set@KU?$less@K@std@@V?$allocator@K@2@@std@@@Z
0x1800314B0: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLongPathNameImpl(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetLongPathNameImpl@CWin32@MorroCommon@@MEAAKPEBGPEAGK@Z
0x18003F998: "public: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::find(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64) __ptr64" ?find@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@2@AEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@Z
0x180018630: "private: static long __cdecl ThreatAbstraction::COnDemandController::ScanCallback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?ScanCallback@COnDemandController@ThreatAbstraction@@CAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x180016680: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,56}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@DI@EBAXXZ
0x1800615E0: "const MpWmiSignatureProgress::`vbtable'{for `ThreatAbstraction::ISignaturesUpdateCallback'}" ??_8MpWmiSignatureProgress@@7BISignaturesUpdateCallback@ThreatAbstraction@@@
0x18005EF08: "218" ??_C@_17KHIMHANA@?$AA2?$AA1?$AA8?$AA?$AA@
0x18006CBB8: "const Microsoft::SecurityClient::CXMLReader::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLReader'}" ??_R4CXMLReader@SecurityClient@Microsoft@@6BIXMLReader@12@@
0x18003C1C8: "long __cdecl CommonUtil::UtilRegGetValueString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,enum CommonUtil::UTIL_REG_EXPAND_STRING,unsigned long * __ptr64)" ?UtilRegGetValueString@CommonUtil@@YAJPEAUHKEY__@@PEBGPEAPEAGW4UTIL_REG_EXPAND_STRING@1@PEAK@Z
0x18005B498: "__cdecl _imp__beginthreadex" __imp__beginthreadex
0x180061AC0: WPP_b85f34bf62aa359d478a4127a7309a30_Traceguids
0x180014480: "public: __cdecl CommonUtil::AutoRef<struct Microsoft::SecurityClient::IXMLFeatures>::~AutoRef<struct Microsoft::SecurityClient::IXMLFeatures>(void) __ptr64" ??1?$AutoRef@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@QEAA@XZ
0x1800294C4: "public: virtual unsigned long __cdecl ThreatAbstraction::COnDemandDetectionContext::GetAgentID(void)const __ptr64" ?GetAgentID@COnDemandDetectionContext@ThreatAbstraction@@UEBAKXZ
0x180060D30: "SpyNetReporting" ??_C@_1CA@NOLDJJLB@?$AAS?$AAp?$AAy?$AAN?$AAe?$AAt?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005ECB8: "203" ??_C@_17LLNBCEHE@?$AA2?$AA0?$AA3?$AA?$AA@
0x180031520: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeValueImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _LUID * __ptr64) __ptr64" ?LookupPrivilegeValueImpl@CWin32@MorroCommon@@MEAAHPEBG0PEAU_LUID@@@Z
0x18005CAD0: "bad address" ??_C@_0M@KGHGGJGL@bad?5address?$AA@
0x180062908: "TelemetryReportRate" ??_C@_1CI@PLNJENIP@?$AAT?$AAe?$AAl?$AAe?$AAm?$AAe?$AAt?$AAr?$AAy?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAR?$AAa?$AAt?$AAe?$AA?$AA@
0x18005DD90: "38" ??_C@_15PJEMPLBB@?$AA3?$AA8?$AA?$AA@
0x180068678: "__vectorcall ??_R1DI@?0A@EA@CPseudoRefCountedBase" ??_R1DI@?0A@EA@CPseudoRefCountedBase@@8
0x180002E64: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::Fork(int) __ptr64" ?Fork@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18006A3E0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`RTTI Complete Object Locator'" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6B@
0x18002DBB0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetDefaultActionName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDefaultActionName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x1800613B0: "Scan was completed successfully." ??_C@_1EC@JIOAGMCI@?$AAS?$AAc?$AAa?$AAn?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAf?$AAu?$AAl?$AAl?$AAy?$AA?4@
0x180004BF8: "public: void __cdecl MpWmiCleanProgress::CleanThreat(struct _MSFT_MpThreat_Remove const * __ptr64) __ptr64" ?CleanThreat@MpWmiCleanProgress@@QEAAXPEBU_MSFT_MpThreat_Remove@@@Z
0x1800602A0: "CleanThreats Failed" ??_C@_1CI@ICHNAGBF@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x180039750: "public: virtual long __cdecl MorroCommon::CLockedCertCheckImpl::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CLockedCertCheckImpl@MorroCommon@@UEAAJPEBG@Z
0x180045048: "public: __cdecl std::length_error::length_error(char const * __ptr64) __ptr64" ??0length_error@std@@QEAA@PEBD@Z
0x180061DF0: WPP_7ecb9a6b5d6a3ec9384e8aa2075f5b6b_Traceguids
0x1800216A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IContextEventsImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_EIContextEventsImpl@ThreatAbstraction@@UEAAPEAXI@Z
0x18007F2B0: "__vectorcall ??_R0?AVCQuarantineController@ThreatAbstraction@" ??_R0?AVCQuarantineController@ThreatAbstraction@@@8
0x18005F880: "Set" ??_C@_17PNBAHNJB@?$AAS?$AAe?$AAt?$AA?$AA@
0x1800609E0: "ScheduleDay" ??_C@_1BI@HGLCIHEI@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x180017B48: "public: void __cdecl ThreatAbstraction::COnDemandController::CScanContext::SetScanState(enum ThreatAbstraction::COnDemandController::ScanState) __ptr64" ?SetScanState@CScanContext@COnDemandController@ThreatAbstraction@@QEAAXW4ScanState@23@@Z
0x1800621D8: "const ThreatAbstraction::IDetectionContext::CResource::`vbtable'" ??_8CResource@IDetectionContext@ThreatAbstraction@@7B@
0x18005AED0: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x18004D580: "const ThreatAbstraction::ISignaturesUpdateCallback::`vftable'{for `ThreatAbstraction::ISignaturesUpdateCallback'}" ??_7ISignaturesUpdateCallback@ThreatAbstraction@@6B01@@
0x180078E40: ext-ms-win-shell32-shellfolders-l1-1-0_NULL_THUNK_DATA_DLN
0x18003D820: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::Release`vtordisp{4294967292,8}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x180078A48: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24
0x180016AB4: "public: virtual long __cdecl CPseudoRefCountedBase::AddRef(void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@UEBAJXZ
0x18000B7EC: "struct tagASRRuleDefaultAction * __ptr64 __cdecl std::_Uninit_move<struct tagASRRuleDefaultAction * __ptr64,struct tagASRRuleDefaultAction * __ptr64,class std::allocator<struct tagASRRuleDefaultAction>,struct tagASRRuleDefaultAction>(struct tagASRRuleDefaultAction * __ptr64,struct tagASRRuleDefaultAction * __ptr64,struct tagASRRuleDefaultAction * __ptr64,struct std::_Wrap_alloc<class std::allocator<struct tagASRRuleDefaultAction> > & __ptr64,struct tagASRRuleDefaultAction * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAUtagASRRuleDefaultAction@@PEAU1@V?$allocator@UtagASRRuleDefaultAction@@@std@@U1@@std@@YAPEAUtagASRRuleDefaultAction@@PEAU1@00AEAU?$_Wrap_alloc@V?$allocator@UtagASRRuleDefaultAction@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18005EB38: "194" ??_C@_17IPIGEKOG@?$AA1?$AA9?$AA4?$AA?$AA@
0x18006CAA8: "__vectorcall ??_R1A@?0A@EA@CXMLReader@SecurityClient@Microsoft" ??_R1A@?0A@EA@CXMLReader@SecurityClient@Microsoft@@8
0x180035AD0: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::GetModulePathByFullPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?GetModulePathByFullPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x18004DF30: "const ThreatAbstraction::CQuarantineController::`vftable'{for `CCritSectionBase'}" ??_7CQuarantineController@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800290C0: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextUpdated(unsigned long,unsigned long,unsigned long) __ptr64" ?OnContextUpdated@IContextEventsImpl@ThreatAbstraction@@MEAAXKKK@Z
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::ISignaturesUpdateCallback::`scalar deleting destructor'(unsigned int) __ptr64" ??_GISignaturesUpdateCallback@ThreatAbstraction@@UEAAPEAXI@Z
0x18006BAF0: "const ThreatAbstraction::IDetectionContext::CResource::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CResource@IDetectionContext@ThreatAbstraction@@6BCRefCountedBase@@@
0x1800326F0: "public: virtual long __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetManifestPath(unsigned short * __ptr64 * __ptr64)const __ptr64" ?GetManifestPath@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEBAJPEAPEAG@Z
0x180029A80: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::`vector deleting destructor'`vtordisp{4294967292,272}' (unsigned int) __ptr64" ??_ECDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@BBA@EAAPEAXI@Z
0x180031070: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FindFirstFileImpl(unsigned short const * __ptr64,struct _WIN32_FIND_DATAW * __ptr64) __ptr64" ?FindFirstFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGPEAU_WIN32_FIND_DATAW@@@Z
0x1800612C8: "MSFT_MpPreference_Destruct" ??_C@_0BL@DFCKLCPB@MSFT_MpPreference_Destruct?$AA@
0x1800109B8: "protected: struct std::pair<class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned __int64> > >,bool> __cdecl std::_Tree<class std::_Tset_traits<unsigned __int64,struct std::less<unsigned __int64>,class std::allocator<unsigned __int64>,0> >::_Insert_nohint<unsigned __int64 const & __ptr64,struct std::_Nil>(bool,unsigned __int64 const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_nohint@AEB_KU_Nil@std@@@?$_Tree@V?$_Tset_traits@_KU?$less@_K@std@@V?$allocator@_K@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@_K@std@@@std@@@std@@_N@1@_NAEB_KU_Nil@1@@Z
0x18005DC70: "31" ??_C@_15IEEELEJL@?$AA3?$AA1?$AA?$AA@
0x180026A80: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x18001FDDC: "public: struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned __int64 const,unsigned long>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CB_KK@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@XZ
0x180083530: "public: static class std::locale::id std::numpunct<char>::id" ?id@?$numpunct@D@std@@2V0locale@2@A
0x180088030: ext-ms-win-shell32-shellfolders-l1-1-0_NULL_THUNK_DATA_DLA
0x1800676C0: "__vectorcall ??_R1A@?0A@EA@MpWmiScanProgress" ??_R1A@?0A@EA@MpWmiScanProgress@@8
0x180078ED8: ext-ms-win-shell32-shellfolders-l1-1-0_NULL_THUNK_DATA_DLB
0x180061B48: "SECURITY" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x1800364B0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetAppDataPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetAppDataPathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005ADD8: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x180029620: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsConfigChange`vtordisp{4294967292,0}' (void) __ptr64" ?IsConfigChange@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EAAHXZ
0x18002F350: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetDefaultActionName(void)const __ptr64" ?GetDefaultActionName@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x180067858: "__vectorcall ??_R1A@?0A@EA@ISignaturesUpdateCallback@ThreatAbstraction" ??_R1A@?0A@EA@ISignaturesUpdateCallback@ThreatAbstraction@@8
0x18001BA88: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCHeartBeatController@ThreatAbstraction@@UEAAPEAXI@Z
0x1800818A0: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@@8
0x1800626D0: "0.0.0.0" ??_C@_1BA@OJFOBGOM@?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x18005E358: "MSFT_MpThreatDetection" ??_C@_1CO@PNACANJK@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl ISequence<class ThreatAbstraction::IDetectionContext>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ISequence@VIDetectionContext@ThreatAbstraction@@@@UEAAPEAXI@Z
0x180061AD0: "MpComputerStatus" ??_C@_0BB@NGCLLGKC@MpComputerStatus?$AA@
0x18002A6F0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsAvailableAction`vtordisp{4294967292,40}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsAvailableAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAHW4PermissibleAction@2@@Z
0x18002A570: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetPerformedAction`vtordisp{4294967292,40}' (void)const __ptr64" ?GetPerformedAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4PermissibleAction@2@XZ
0x18004DB58: "const ILockable::`vftable'" ??_7ILockable@@6B@
0x1800831B8: "private: static bool AMIndication::g_flagStateReady" ?g_flagStateReady@AMIndication@@0_NA
0x18005CBE0: "identifier removed" ??_C@_0BD@JPHBMONG@identifier?5removed?$AA@
0x18005B018: "__cdecl _imp_CreateDialogParamW" __imp_CreateDialogParamW
0x180061F38: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vbtable'{for `CPseudoLockBase'}" ??_8CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@7BCPseudoLockBase@@@
0x180062528: "const CThreadManager::`vbtable'" ??_8CThreadManager@@7B@
0x18005AF18: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x180067CC0: "__vectorcall ??_R2CExceptionThreats@ThreatAbstraction" ??_R2CExceptionThreats@ThreatAbstraction@@8
0x18003873C: "private: void __cdecl ATL::CSimpleStringT<char,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@D$0A@@ATL@@AEAAXH@Z
0x1800834E8: "private: static class MorroCommon::CCertCheckFactory * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CCertCheckFactory>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCCertCheckFactory@MorroCommon@@@MorroCommon@@0PEAVCCertCheckFactory@2@EA
0x1800438C8: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@IEAAX_K@Z
0x18005C8F8: "already_connected" ??_C@_0BC@FIFLCHLO@already_connected?$AA@
0x180068128: "__vectorcall ??_R3CExceptionThreats@ThreatAbstraction" ??_R3CExceptionThreats@ThreatAbstraction@@8
0x18007EE80: "__vectorcall ??_R0?AVCScanContext@COnDemandController@ThreatAbstraction@" ??_R0?AVCScanContext@COnDemandController@ThreatAbstraction@@@8
0x18004E7F0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vftable'{for `CPseudoLockBase'}" ??_7CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x180002D60: "private: void __cdecl ATL::CSimpleStringT<unsigned short,0>::PrepareWrite2(int) __ptr64" ?PrepareWrite2@?$CSimpleStringT@G$0A@@ATL@@AEAAXH@Z
0x18005DF48: "NISEnabled" ??_C@_1BG@PLHLODIG@?$AAN?$AAI?$AAS?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180014518: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpConfigClose>::~CUniqueHandle<struct CAutoMpConfigClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpConfigClose@@@CommonUtil@@QEAA@XZ
0x18002B880: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::AddDetection(struct tagMPTHREAT_INFO * __ptr64,int) __ptr64" ?AddDetection@CDetectionContextBase@ThreatAbstraction@@UEAAHPEAUtagMPTHREAT_INFO@@H@Z
0x180021E20: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsConfigChange(void) __ptr64" ?IsConfigChange@CDetectionContextBase@ThreatAbstraction@@UEAAHXZ
0x1800311B0: "protected: virtual int __cdecl MorroCommon::CWin32::AllocateAndInitializeSidImpl(struct _SID_IDENTIFIER_AUTHORITY * __ptr64,unsigned char,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?AllocateAndInitializeSidImpl@CWin32@MorroCommon@@MEAAHPEAU_SID_IDENTIFIER_AUTHORITY@@EKKKKKKKKPEAPEAX@Z
0x180012A2C: "public: long __cdecl CData::Initialize(void) __ptr64" ?Initialize@CData@@QEAAJXZ
0x18000C758: "private: bool __cdecl ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > >::GrowBuffer(unsigned __int64) __ptr64" ?GrowBuffer@?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@AEAA_N_K@Z
0x18006C428: "__vectorcall ??_R1A@?0A@EA@CLockEntireFile@MorroCommon" ??_R1A@?0A@EA@CLockEntireFile@MorroCommon@@8
0x18003D3FC: "private: void __cdecl Microsoft::SecurityClient::CXMLReader::Load(unsigned short const * __ptr64,struct IXMLDOMDocument2 * __ptr64 * __ptr64) __ptr64" ?Load@CXMLReader@SecurityClient@Microsoft@@AEAAXPEBGPEAPEAUIXMLDOMDocument2@@@Z
0x180068860: "__vectorcall ??_R3exception" ??_R3exception@@8
0x18002AA10: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatName`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x180068850: "__vectorcall ??_R2exception" ??_R2exception@@8
0x18005ACD8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180062220: "webscript" ??_C@_1BE@HINJGEND@?$AAw?$AAe?$AAb?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?$AA@
0x18004DBF8: "const ThreatAbstraction::CServiceStatusController::`vftable'{for `CCritSectionBase'}" ??_7CServiceStatusController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18007EED0: "__vectorcall ??_R0?AVCOnDemandController@ThreatAbstraction@" ??_R0?AVCOnDemandController@ThreatAbstraction@@@8
0x180039F40: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,0}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@A@EBAHXZ
0x180020A4C: "protected: __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::CDetectionContextsBase(class ThreatAbstraction::CContextManager * __ptr64) __ptr64" ??0CDetectionContextsBase@CContextManager@ThreatAbstraction@@IEAA@PEAV12@@Z
0x18005E5C0: "ThreatStatusErrorCode" ??_C@_1CM@HCDOFINH@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18003E040: "private: void __cdecl Microsoft::SecurityClient::CBrandedStrings::SelectNamedPairWithMarket(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CComPtr<struct IXMLDOMNodeList> const & __ptr64,class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > * __ptr64)const __ptr64" ?SelectNamedPairWithMarket@CBrandedStrings@SecurityClient@Microsoft@@AEBAXPEBG00AEBV?$CComPtr@UIXMLDOMNodeList@@@ATL@@PEAV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@Z
0x1800341B4: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@XZ
0x1800800B0: "__vectorcall ??_R0?AV?$_String_val@U?$_Simple_types@G@std@@@std@" ??_R0?AV?$_String_val@U?$_Simple_types@G@std@@@std@@@8
0x1800619A0: "Virus and spyware definitions up" ??_C@_1IA@MAEGPFJM@?$AAV?$AAi?$AAr?$AAu?$AAs?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAd?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAu?$AAp@
0x18004D3F8: "const MpWmiCleanProgress::`vftable'{for `ThreatAbstraction::IActionEvents'}" ??_7MpWmiCleanProgress@@6BIActionEvents@ThreatAbstraction@@@
0x1800318D0: "protected: virtual int __cdecl MorroCommon::CWin32::LookupPrivilegeNameImpl(unsigned short const * __ptr64,struct _LUID * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?LookupPrivilegeNameImpl@CWin32@MorroCommon@@MEAAHPEBGPEAU_LUID@@PEAGPEAK@Z
0x18006D568: "__vectorcall ??_R1BA@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std" ??_R1BA@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@8
0x180062AB0: ".//InstallSequence/PackageRef[@i" ??_C@_1EG@CFEGALDK@?$AA?4?$AA?1?$AA?1?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?1?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAR?$AAe?$AAf?$AA?$FL?$AA?$EA?$AAi@
0x180061C10: WPP_6dd46e06b4fb32a0b6e541b873158fce_Traceguids
0x180022800: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::AddDetectionContext(class ThreatAbstraction::IDetectionContext * __ptr64,unsigned long) __ptr64" ?AddDetectionContext@CContextManager@ThreatAbstraction@@MEAAXPEAVIDetectionContext@2@K@Z
0x18004E7C0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vftable'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_7CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x1800298E0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::COnDemandDetectionContext::GetAgentID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAgentID@COnDemandDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x1800790C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x18006C750: "__vectorcall ??_R1BA@?0A@EA@?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std" ??_R1BA@?0A@EA@?$_String_alloc@$0A@U?$_String_base_types@GV?$allocator@G@std@@@std@@@std@@8
0x18006A1B0: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`RTTI Complete Object Locator'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_R4CDetectionContextsBase@CContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x1800682A0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6BCCritSectionBase@@@
0x180029880: "[thunk]:public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatCategory`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatCategory@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x18005B148: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x18005D1B0: "iostream stream error" ??_C@_0BG@PADBLCHM@iostream?5stream?5error?$AA@
0x180050780: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_7?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedColors@SecurityClient@Microsoft@@@
0x18005B5E8: "__cdecl _guard_fids_table" __guard_fids_table
0x18006AE38: "__vectorcall ??_R3IAutoIgnoreThreats@ThreatAbstraction" ??_R3IAutoIgnoreThreats@ThreatAbstraction@@8
0x1800629E0: WPP_aafe1aa9570d346955a656e480465825_Traceguids
0x18005DBF8: "FullScanAge" ??_C@_1BI@PMLKNFHD@?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAA?$AAg?$AAe?$AA?$AA@
0x18005B378: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18006ABC0: "__vectorcall ??_R2IAutoIgnoreThreats@ThreatAbstraction" ??_R2IAutoIgnoreThreats@ThreatAbstraction@@8
0x18001D8B4: "public: __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext::CCleanContext(struct _GUID const & __ptr64,class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts * __ptr64,class std::map<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > > const & __ptr64,bool) __ptr64" ??0CCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@QEAA@AEBU_GUID@@PEAV123@AEBV?$map@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@_N@Z
0x180038D58: "private: static void __cdecl MorroCommon::CCertCheck::CloseWinVerifyTrust(struct _WINTRUST_DATA * __ptr64)" ?CloseWinVerifyTrust@CCertCheck@MorroCommon@@CAXPEAU_WINTRUST_DATA@@@Z
0x1800032E4: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::~CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(void) __ptr64" ??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
0x1800207F0: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Reserve(unsigned long) __ptr64" ?Reserve@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@UEAAXK@Z
0x1800505B0: "const Microsoft::SecurityClient::IXMLBrandedValues::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_7IXMLBrandedValues@SecurityClient@Microsoft@@6B012@@
0x180083280: "class ATL::CWin32Heap ATL::g_strheap" ?g_strheap@ATL@@3VCWin32Heap@1@A
0x180015F74: "public: __cdecl CSmartPtr<class ThreatAbstraction::COnDemandDetectionContext,class VolatileOps<class ThreatAbstraction::COnDemandDetectionContext> >::~CSmartPtr<class ThreatAbstraction::COnDemandDetectionContext,class VolatileOps<class ThreatAbstraction::COnDemandDetectionContext> >(void) __ptr64" ??1?$CSmartPtr@VCOnDemandDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCOnDemandDetectionContext@ThreatAbstraction@@@@@@QEAA@XZ
0x180061CA8: "const MpWmiWDOScanProgress::`vbtable'" ??_8MpWmiWDOScanProgress@@7B@
0x180068B50: "const ThreatAbstraction::CScheduledScanController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScheduledScanController@ThreatAbstraction@@6BILockable@@@
0x180061D38: "Miscellaneous Configuration" ??_C@_1DI@KBKKDJCJ@?$AAM?$AAi?$AAs?$AAc?$AAe?$AAl?$AAl?$AAa?$AAn?$AAe?$AAo?$AAu?$AAs?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003E000: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedStrings::HrGetAMSignatureDownloadGUID(unsigned short * __ptr64 * __ptr64)const __ptr64" ?HrGetAMSignatureDownloadGUID@CBrandedStrings@SecurityClient@Microsoft@@UEBAJPEAPEAG@Z
0x180045774: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x18006A0D0: "__vectorcall ??_R17?0A@EA@CRefCountedBaseX" ??_R17?0A@EA@CRefCountedBaseX@@8
0x18006D1A8: "const Microsoft::SecurityClient::CBrandedStrings::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CBrandedStrings@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180017CA0: "public: enum tagMPSCAN_TYPE __cdecl ThreatAbstraction::COnDemandController::CScanContext::GetScanType(void)const __ptr64" ?GetScanType@CScanContext@COnDemandController@ThreatAbstraction@@QEBA?AW4tagMPSCAN_TYPE@@XZ
0x1800055A4: "public: virtual void * __ptr64 __cdecl CRefCountedBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefCountedBase@@UEAAPEAXI@Z
0x1800626B8: WPP_029b443b08043c19b345765ef007d4c5_Traceguids
0x180027AE4: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@XZ
0x18005B4A8: msvcrt_NULL_THUNK_DATA
0x18006AEA0: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`RTTI Complete Object Locator'" ??_R4?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6B@
0x18003F960: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::~CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>(void) __ptr64" ??1?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@MEAA@XZ
0x18005CC68: "network down" ??_C@_0N@KIIEAAIO@network?5down?$AA@
0x18005E550: "138" ??_C@_17GEMLNGDI@?$AA1?$AA3?$AA8?$AA?$AA@
0x180030F90: "protected: virtual int __cdecl MorroCommon::CWin32::Process32NextImpl(void * __ptr64,struct tagPROCESSENTRY32W * __ptr64) __ptr64" ?Process32NextImpl@CWin32@MorroCommon@@MEAAHPEAXPEAUtagPROCESSENTRY32W@@@Z
0x18004CA30: "__cdecl load_config_used" _load_config_used
0x18007E5D8: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x18005D828: "ValueMap" ??_C@_1BC@KCJPDANC@?$AAV?$AAa?$AAl?$AAu?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
0x1800381A0: "protected: virtual long __cdecl MorroCommon::CFileUtils::ReadBufferImpl(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64) __ptr64" ?ReadBufferImpl@CFileUtils@MorroCommon@@MEAAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18002827C: "public: virtual class ThreatAbstraction::IAutoIgnoreThreats * __ptr64 __cdecl ThreatAbstraction::CAutoActionManager::GetAutoIgnoreThreats(void)const __ptr64" ?GetAutoIgnoreThreats@CAutoActionManager@ThreatAbstraction@@UEBAPEAVIAutoIgnoreThreats@2@XZ
0x18005B440: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x18002A270: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CQuarantineDetectionContext::IsActionTaken`vtordisp{4294967292,0}' (void)const __ptr64" ?IsActionTaken@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x180029240: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanStart(class ThreatAbstraction::IDetectionContexts const * __ptr64) __ptr64" ?OnRoutineCleanStart@IContextEventsImpl@ThreatAbstraction@@MEAAXPEBVIDetectionContexts@2@@Z
0x18005F600: "253" ??_C@_17OLBMLFMH@?$AA2?$AA5?$AA3?$AA?$AA@
0x18000F630: "public: __cdecl CThreatDetails::CThreatDetails(void) __ptr64" ??0CThreatDetails@@QEAA@XZ
0x180062250: "@(" ??_C@_15CEODNDOB@?$AA?$EA?$AA?$CI?$AA?$AA@
0x18004E140: "const ThreatAbstraction::IContextEvents::`vftable'{for `IRefCounted'}" ??_7IContextEvents@ThreatAbstraction@@6BIRefCounted@@@
0x180044AE0: "public: static class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl Microsoft::SecurityClient::CXMLDataAccessor::GetNodeValue(class ATL::CComPtr<struct IXMLDOMNode> const & __ptr64)" ?GetNodeValue@CXMLDataAccessor@SecurityClient@Microsoft@@SA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@AEBV?$CComPtr@UIXMLDOMNode@@@ATL@@@Z
0x180061F98: "const ThreatAbstraction::CQuarantineController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CQuarantineController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x18001D6A0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CScanProgressInfo::GetScanProgress`vtordisp{4294967292,0}' (void)const __ptr64" ?GetScanProgress@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180030830: "protected: virtual struct HICON__ * __ptr64 __cdecl MorroCommon::CWin32::LoadIconImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadIconImpl@CWin32@MorroCommon@@MEAAPEAUHICON__@@PEAUHINSTANCE__@@PEBG@Z
0x180061FF8: "const ThreatAbstraction::CScanProgressInfoQueue::`vbtable'{for `CRefCountedBase'}" ??_8CScanProgressInfoQueue@ThreatAbstraction@@7BCRefCountedBase@@@
0x180078B10: "__cdecl TI1?AVCAtlException@ATL@@" _TI1?AVCAtlException@ATL@@
0x180011260: "public: virtual void * __ptr64 __cdecl CMpProviderLogger::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMpProviderLogger@@UEAAPEAXI@Z
0x1800299C0: "[thunk]:public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatSeverity`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatSeverity@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x180023908: "protected: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<unsigned long> > > __cdecl std::_Tree<class std::_Tset_traits<unsigned long,struct std::less<unsigned long>,class std::allocator<unsigned long>,0> >::_Insert_at<unsigned long const & __ptr64,struct std::_Nil>(bool,struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64,unsigned long const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_at@AEBKU_Nil@std@@@?$_Tree@V?$_Tset_traits@KU?$less@K@std@@V?$allocator@K@2@$0A@@std@@@std@@IEAA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@K@std@@@std@@@1@_NPEAU?$_Tree_node@KPEAX@1@AEBKU_Nil@1@@Z
0x1800620B8: "const CPseudoLockBase::`vbtable'" ??_8CPseudoLockBase@@7B@
0x1800450B0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x18005AE10: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18007FB88: "__vectorcall ??_R0?AVIAutoIgnoreThreat@ThreatAbstraction@" ??_R0?AVIAutoIgnoreThreat@ThreatAbstraction@@@8
0x180062260: WPP_8cee58a30f04332430a44e0dba47c811_Traceguids
0x18002A7A8: "public: __cdecl ThreatAbstraction::CAutoIgnoreThreat::CAutoIgnoreThreat(unsigned __int64,enum tagMP_CONFIG_ORIGIN) __ptr64" ??0CAutoIgnoreThreat@ThreatAbstraction@@QEAA@_KW4tagMP_CONFIG_ORIGIN@@@Z
0x18005D688: "PropertyUsage" ??_C@_1BM@BGDDMKGD@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18002BCF8: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryDescription(void)const __ptr64" ?GetCategoryDescription@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18007FB48: "__vectorcall ??_R0?AVCAutoIgnoreThreat@ThreatAbstraction@" ??_R0?AVCAutoIgnoreThreat@ThreatAbstraction@@@8
0x180078B88: "__cdecl CTA3?AVCError@@" _CTA3?AVCError@@
0x18003D880: "[thunk]:public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CXMLReader::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECXMLReader@SecurityClient@Microsoft@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180030D70: "protected: virtual void __cdecl MorroCommon::CWin32::SleepImpl(unsigned long) __ptr64" ?SleepImpl@CWin32@MorroCommon@@MEAAXK@Z
0x180061B60: "%ws:_%ws" ??_C@_1BC@PNPDGJAO@?$AA?$CF?$AAw?$AAs?$AA?3?$AA_?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180061CA8: "const ThreatAbstraction::CSignatureUpdateController::`vbtable'" ??_8CSignatureUpdateController@ThreatAbstraction@@7B@
0x180001A2C: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x1800341B4: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@XZ
0x18005D8FC: "5" ??_C@_13BJEOCIHA@?$AA5?$AA?$AA@
0x18005F1A0: "229" ??_C@_17JJKEGFBL@?$AA2?$AA2?$AA9?$AA?$AA@
0x18005F848: "262" ??_C@_17NFDEKAAM@?$AA2?$AA6?$AA2?$AA?$AA@
0x180029DA0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAgentID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAgentID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18001F880: "public: __cdecl CSafeArrayPtr<unsigned __int64,class VolatileOps<unsigned __int64> >::~CSafeArrayPtr<unsigned __int64,class VolatileOps<unsigned __int64> >(void) __ptr64" ??1?$CSafeArrayPtr@_KV?$VolatileOps@_K@@@@QEAA@XZ
0x18004F670: "const ThreatAbstraction::CAutoIgnoreThreat::`vftable'{for `CCritSectionBase'}" ??_7CAutoIgnoreThreat@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003C8C0: DloadProtectSection
0x18007E918: "__vectorcall ??_R0?AVMpWmiScanProgress@" ??_R0?AVMpWmiScanProgress@@@8
0x1800679F8: "__vectorcall ??_R1A@?0A@EA@CRefObject@CommonUtil" ??_R1A@?0A@EA@CRefObject@CommonUtil@@8
0x18005C970: "network_unreachable" ??_C@_0BE@JFNJIDNF@network_unreachable?$AA@
0x18002AB90: "[thunk]:public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CThreatInfo::GetDetectionSource`vtordisp{4294967292,8}' (void)const __ptr64" ?GetDetectionSource@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4tagMPSOURCE@@XZ
0x18002A450: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,232}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@OI@EBAJXZ
0x180035C50: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64 __cdecl MorroCommon::CPathUtils::GetCurrentModuleDirectoryImpl(void) __ptr64" ?GetCurrentModuleDirectoryImpl@CPathUtils@MorroCommon@@MEAAAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@XZ
0x18005F138: "DisableCatchupFullScan" ??_C@_1CO@IJMBOILB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAa?$AAt?$AAc?$AAh?$AAu?$AAp?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x1800609B8: "Scan_ScanParameters" ??_C@_1CI@FMHLJDAL@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18003ED28: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::_Insert_at<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@1@1@Z
0x180028FB0: "[thunk]:public: virtual class ThreatAbstraction::IAutoIgnoreThreats * __ptr64 __cdecl ThreatAbstraction::CAutoActionManager::GetAutoIgnoreThreats`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAutoIgnoreThreats@CAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEAVIAutoIgnoreThreats@2@XZ
0x18003FC8C: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::_Erase(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@Z
0x18005B080: "__cdecl _imp_KillTimer" __imp_KillTimer
0x180033AA0: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedColor(unsigned long & __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadBrandedColor@CBrandedAPI@MpCommonEx@@UEAAJAEAKPEBG@Z
0x180078B68: "__cdecl TI1?AW4_MI_Result@@" _TI1?AW4_MI_Result@@
0x180020D6C: "protected: long __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::InitiateAction(void) __ptr64" ?InitiateAction@CDetectionContextsBase@CContextManager@ThreatAbstraction@@IEAAJXZ
0x180067478: "const CThreatRollupManager::`RTTI Complete Object Locator'" ??_R4CThreatRollupManager@@6B@
0x18006AFE0: "const ThreatAbstraction::CAutoActionManager::`RTTI Complete Object Locator'" ??_R4CAutoActionManager@ThreatAbstraction@@6B@
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLReader::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLReader@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18005B060: "__cdecl _imp_GetWindowThreadProcessId" __imp_GetWindowThreadProcessId
0x1800605E0: "RTP_RealTimeScanDirection" ??_C@_1DE@GAKFLEOG@?$AAR?$AAT?$AAP?$AA_?$AAR?$AAe?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAS?$AAc?$AAa?$AAn?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005ABB0: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x18003C71C: MpRegisterForInitializationAtStartup
0x180061E10: "const ThreatAbstraction::CExceptionThreats::`vbtable'{for `CCritSectionBase'}" ??_8CExceptionThreats@ThreatAbstraction@@7BCCritSectionBase@@@
0x180001A2C: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEBAXXZ
0x180029A00: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryDescription`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCategoryDescription@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18000609C: "long __cdecl GetThreatIdsWithDefaultActions(struct _MI_Context * __ptr64,class CData & __ptr64,class CommonUtil::CStdVector<struct tagThreatDefaultAction,class std::allocator<struct tagThreatDefaultAction> > & __ptr64)" ?GetThreatIdsWithDefaultActions@@YAJPEAU_MI_Context@@AEAVCData@@AEAV?$CStdVector@UtagThreatDefaultAction@@V?$allocator@UtagThreatDefaultAction@@@std@@@CommonUtil@@@Z
0x1800342C0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::AddRef`vtordisp{4294967292,24}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@BI@EBAJXZ
0x18005DB68: "NISSignatureLastUpdated" ??_C@_1DA@CNANDGFC@?$AAN?$AAI?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAL?$AAa?$AAs?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x18003D04C: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CXMLReader::`vector deleting destructor'(unsigned int) __ptr64" ??_ECXMLReader@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18004D430: "const CRefCountedBase::`vftable'" ??_7CRefCountedBase@@6B@
0x180029B60: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetDefaultAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDefaultAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x18002C768: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAgentID(void)const __ptr64" ?GetAgentID@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x180032710: "public: virtual enum MpCommonEx::BrandInitComponents __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetInitComponents(void)const __ptr64" ?GetInitComponents@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEBA?AW4BrandInitComponents@3@XZ
0x18006A0F8: "__vectorcall ??_R17?0A@EA@CRefCountedBase" ??_R17?0A@EA@CRefCountedBase@@8
0x180043654: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::replace(unsigned __int64,unsigned __int64,class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?replace@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@_K0AEBV12@00@Z
0x18001B7D0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECWDOScanController@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180001A2C: "public: void __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAXXZ
0x180068368: "const ThreatAbstraction::CExceptionThreats::`RTTI Complete Object Locator'" ??_R4CExceptionThreats@ThreatAbstraction@@6B@
0x18005FB98: "292" ??_C@_17CEGCBCNJ@?$AA2?$AA9?$AA2?$AA?$AA@
0x18005D880: "BaseStatus" ??_C@_1BG@NBCBEBFB@?$AAB?$AAa?$AAs?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800168D8: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@IEAAX_K@Z
0x180033380: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedString(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadBrandedString@CBrandedAPI@MpCommonEx@@UEAAJPEAPEAGPEBG@Z
0x18003542C: "public: __cdecl MorroCommon::PRODUCTVERSION::~PRODUCTVERSION(void) __ptr64" ??1PRODUCTVERSION@MorroCommon@@QEAA@XZ
0x18002BCC0: "public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatCategory(void)const __ptr64" ?GetThreatCategory@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x180062820: ".//%ws/@%ws" ??_C@_1BI@NFLHBGNH@?$AA?4?$AA?1?$AA?1?$AA?$CF?$AAw?$AAs?$AA?1?$AA?$EA?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180060488: "SetThreatIdsDefaultActions" ??_C@_1DG@NNMLMBGO@?$AAS?$AAe?$AAt?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAd?$AAs?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x180079114: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::ISignaturesUpdateCallback,class VolatileOps<class ThreatAbstraction::ISignaturesUpdateCallback> >::~CSmartPtr<class ThreatAbstraction::ISignaturesUpdateCallback,class VolatileOps<class ThreatAbstraction::ISignaturesUpdateCallback> >(void) __ptr64" ??1?$CSmartPtr@VISignaturesUpdateCallback@ThreatAbstraction@@V?$VolatileOps@VISignaturesUpdateCallback@ThreatAbstraction@@@@@@QEAA@XZ
0x180060340: "Update MSFT_MpPreference" ??_C@_1DC@ODLLOGDN@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?5?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18006E0C8: "__vectorcall ??_R3IXMLDeployment@SecurityClient@Microsoft" ??_R3IXMLDeployment@SecurityClient@Microsoft@@8
0x18006DD88: "__vectorcall ??_R2IXMLDeployment@SecurityClient@Microsoft" ??_R2IXMLDeployment@SecurityClient@Microsoft@@8
0x180082520: "__vectorcall ??_R0?AV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@" ??_R0?AV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@8
0x180042288: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::AddSubstitutionData(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > * __ptr64)" ?AddSubstitutionData@CDeploymentBrand@SecurityClient@Microsoft@@CAXPEBG00PEAV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@Z
0x1800317C0: "protected: virtual unsigned short __cdecl MorroCommon::CWin32::GetSystemDefaultUILanguageImpl(void) __ptr64" ?GetSystemDefaultUILanguageImpl@CWin32@MorroCommon@@MEAAGXZ
0x18001FAFC: "public: struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned __int64 const,unsigned long>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> > >::_Buynode<struct std::pair<unsigned __int64,unsigned long> >(struct std::pair<unsigned __int64,unsigned long> &&) __ptr64" ??$_Buynode@U?$pair@_KK@std@@@?$_Tree_buy@U?$pair@$$CB_KK@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@1@$$QEAU?$pair@_KK@1@@Z
0x1800169D8: "public: __cdecl ATL::CComPtr<struct IXMLDOMNode>::~CComPtr<struct IXMLDOMNode>(void) __ptr64" ??1?$CComPtr@UIXMLDOMNode@@@ATL@@QEAA@XZ
0x18006DB70: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@8
0x18002DB30: "[thunk]:public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CThreatInfo::GetThreatCategory`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatCategory@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x18002DCB0: "[thunk]:public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CThreatInfo::GetThreatSeverity`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatSeverity@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x180002380: "long __cdecl MpMIUtil::GetReportingGuid(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64)" ?GetReportingGuid@MpMIUtil@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x180069910: "__vectorcall ??_R2CDetectionContextsBase@CContextManager@ThreatAbstraction" ??_R2CDetectionContextsBase@CContextManager@ThreatAbstraction@@8
0x18002A550: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CDetectionContextBase::GetActionStatus`vtordisp{4294967292,40}' (void)const __ptr64" ?GetActionStatus@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAJXZ
0x18003D974: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::CBrandedStrings::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandedStrings@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180069E10: "__vectorcall ??_R3CDetectionContextsBase@CContextManager@ThreatAbstraction" ??_R3CDetectionContextsBase@CContextManager@ThreatAbstraction@@8
0x18005D560: "MinValue" ??_C@_1BC@EPIOGINM@?$AAM?$AAi?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18002ABD0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityDescription`vtordisp{4294967292,8}' (void)const __ptr64" ?GetSeverityDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x18005E248: "RollupStatus" ??_C@_1BK@PBEHIBFC@?$AAR?$AAo?$AAl?$AAl?$AAu?$AAp?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180061B18: "O:BAG:BAD:(A;;0x40;;;B(" ??_C@_1DA@FBMOMLFE@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA4?$AA0?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AA?$CI?$AA?$AA@
0x18006A2F0: "const ThreatAbstraction::CContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEventsImpl'}" ??_R4CContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x1800624A0: "ProductLocalizedName" ??_C@_1CK@NAANICPG@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAL?$AAo?$AAc?$AAa?$AAl?$AAi?$AAz?$AAe?$AAd?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18005F170: "DisableCatchupQuickScan" ??_C@_1DA@GMBMOPHO@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAa?$AAt?$AAc?$AAh?$AAu?$AAp?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18001CCD0: "public: virtual unsigned long __cdecl ThreatAbstraction::CScanProgressInfoQueue::GetCount(void)const __ptr64" ?GetCount@CScanProgressInfoQueue@ThreatAbstraction@@UEBAKXZ
0x180078CB8: "__stdcall CT??_R0PEAX" _CT??_R0PEAX@88
0x18005C678: "directory not empty" ??_C@_0BE@JIDOCPHM@directory?5not?5empty?$AA@
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLFeatures::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLFeatures@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18005F3F0: "LowThreatDefaultAction" ??_C@_1CO@LMBHBFIL@?$AAL?$AAo?$AAw?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180029A80: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandDetectionContext::`vector deleting destructor'`vtordisp{4294967292,272}' (unsigned int) __ptr64" ??_ECOnDemandDetectionContext@ThreatAbstraction@@$4PPPPPPPM@BBA@EAAPEAXI@Z
0x18003F130: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x18005F980: "275" ??_C@_17IDLPELBA@?$AA2?$AA7?$AA5?$AA?$AA@
0x18003A1F0: "public: virtual __cdecl CWString::~CWString(void) __ptr64" ??1CWString@@UEAA@XZ
0x180005570: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@A@EBAJXZ
0x180062618: "GetFileVersionInfoSizeExW" ??_C@_0BK@NCKKICFJ@GetFileVersionInfoSizeExW?$AA@
0x18004002C: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@Z
0x18005F0C0: "225" ??_C@_17NDHCNKKD@?$AA2?$AA2?$AA5?$AA?$AA@
0x180033EB8: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::~CRefObjectFor<struct MpCommonEx::IBrandParams>(void) __ptr64" ??1?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@MEAA@XZ
0x180067990: "__vectorcall ??_R3CThreatDetails" ??_R3CThreatDetails@@8
0x1800503B8: "const CWString::`vftable'{for `CRefCountedBase'}" ??_7CWString@@6BCRefCountedBase@@@
0x18002F65C: "long __cdecl MorroCommon::CheckStringHasBrandParts(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,bool * __ptr64)" ?CheckStringHasBrandParts@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEA_N@Z
0x180067950: "__vectorcall ??_R2CThreatDetails" ??_R2CThreatDetails@@8
0x180067FA8: "__vectorcall ??_R1EI@?0A@EA@CRefCountedBase" ??_R1EI@?0A@EA@CRefCountedBase@@8
0x18002BCA4: "public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatSeverity(void)const __ptr64" ?GetThreatSeverity@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x1800620F0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vbtable'{for `CRefCountedBase'}" ??_8CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x18005D968: "AMServiceVersion" ??_C@_1CC@ENPANIFN@?$AAA?$AAM?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180030800: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::CreateDialogParamImpl(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,struct HWND__ * __ptr64,__int64 (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64),__int64) __ptr64" ?CreateDialogParamImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEAUHINSTANCE__@@PEBGPEAU3@P6A_J2I_K_J@Z4@Z
0x180062120: WPP_213762b404203e5a39b6084ac5ef4671_Traceguids
0x180050850: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x180081770: "__vectorcall ??_R0?AUIXMLFeatures@SecurityClient@Microsoft@" ??_R0?AUIXMLFeatures@SecurityClient@Microsoft@@@8
0x180080D90: "__vectorcall ??_R0?AVCBrandedValues@SecurityClient@Microsoft@" ??_R0?AVCBrandedValues@SecurityClient@Microsoft@@@8
0x180079038: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18005E160: "91" ??_C@_15CFNPJHPN@?$AA9?$AA1?$AA?$AA@
0x180027EC0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreats::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAutoIgnoreThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x18002BAC4: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownGood(void)const __ptr64" ?IsKnownGood@CDetectionContextBase@ThreatAbstraction@@UEBAHXZ
0x18005B000: "__cdecl _imp_SetWindowTextW" __imp_SetWindowTextW
0x18004DBD8: "const ThreatAbstraction::CServiceStatusController::`vftable'" ??_7CServiceStatusController@ThreatAbstraction@@6B@
0x18001C748: "public: __cdecl ThreatAbstraction::CScanProgressInfoQueue::CScanProgressInfoQueue(void) __ptr64" ??0CScanProgressInfoQueue@ThreatAbstraction@@QEAA@XZ
0x1800629F0: ".//BrandedColor[@name and @r and" ??_C@_1FI@DODCBBIK@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAC?$AAo?$AAl?$AAo?$AAr?$AA?$FL?$AA?$EA?$AAn?$AAa?$AAm?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAr?$AA?5?$AAa?$AAn?$AAd@
0x1800674F0: "__vectorcall ??_R1A@?0A@EA@CRefCountedBase" ??_R1A@?0A@EA@CRefCountedBase@@8
0x18004EDB8: "const ThreatAbstraction::CAutoIgnoreThreats::`vftable'" ??_7CAutoIgnoreThreats@ThreatAbstraction@@6B@
0x18004617C: "__cdecl _crtInitializeCriticalSectionEx" __crtInitializeCriticalSectionEx
0x180027F10: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IAutoIgnoreThreats::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIAutoIgnoreThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x1800165E0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,72}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@EI@EBAXXZ
0x180081900: "__vectorcall ??_R0?AVCDeploymentBrand@SecurityClient@Microsoft@" ??_R0?AVCDeploymentBrand@SecurityClient@Microsoft@@@8
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDetectionContextBase@ThreatAbstraction@@UEAAPEAXI@Z
0x180031250: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::FreeSidImpl(void * __ptr64) __ptr64" ?FreeSidImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18006D9F8: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_R4?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLFeatures@SecurityClient@Microsoft@@@
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18007FF20: "void * __ptr64 `RTTI Type Descriptor'" ??_R0PEAX@8
0x18005E720: "161" ??_C@_17EJAOAIAB@?$AA1?$AA6?$AA1?$AA?$AA@
0x18005F300: "234" ??_C@_17KAJCGOGD@?$AA2?$AA3?$AA4?$AA?$AA@
0x180068BA0: "const ThreatAbstraction::CScheduledScanController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScheduledScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180067C50: "__vectorcall ??_R1A@?0A@EA@MpWmiHeartBeat" ??_R1A@?0A@EA@MpWmiHeartBeat@@8
0x18005EBB0: "ScanScheduleDay" ??_C@_1CA@KLGPFAAA@?$AAS?$AAc?$AAa?$AAn?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAD?$AAa?$AAy?$AA?$AA@
0x18006DE68: "__vectorcall ??_R1A@?0A@EA@CDeploymentBrand@SecurityClient@Microsoft" ??_R1A@?0A@EA@CDeploymentBrand@SecurityClient@Microsoft@@8
0x180019CAC: "public: __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::CUpdateContext(void) __ptr64" ??0CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@QEAA@XZ
0x180035680: "protected: virtual long __cdecl MorroCommon::CPathUtils::CombineWithApplicationDirImpl(unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?CombineWithApplicationDirImpl@CPathUtils@MorroCommon@@MEAAJPEBGAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005E758: "168" ??_C@_17DEAGEHIL@?$AA1?$AA6?$AA8?$AA?$AA@
0x180029FA0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineDetectionContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuarantineDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x18005DBC4: "22" ??_C@_15FNKNMINA@?$AA2?$AA2?$AA?$AA@
0x18006B838: "__vectorcall ??_R3CThreatInfo@ThreatAbstraction" ??_R3CThreatInfo@ThreatAbstraction@@8
0x180067548: "__vectorcall ??_R1A@?0A@EA@CRefCountedBaseX" ??_R1A@?0A@EA@CRefCountedBaseX@@8
0x18006B730: "__vectorcall ??_R2CThreatInfo@ThreatAbstraction" ??_R2CThreatInfo@ThreatAbstraction@@8
0x18005B3D0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18007EA20: "__vectorcall ??_R0?AVCRefObject@CommonUtil@" ??_R0?AVCRefObject@CommonUtil@@@8
0x18005E8F8: "180" ??_C@_17MLLIAOBE@?$AA1?$AA8?$AA0?$AA?$AA@
0x180068278: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`RTTI Complete Object Locator'" ??_R4?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6B@
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >::~CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >(void) __ptr64" ??1?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@QEAA@XZ
0x180061400: "Scan was completed with errors." ??_C@_1EA@LGAMIBO@?$AAS?$AAc?$AAa?$AAn?$AA?5?$AAw?$AAa?$AAs?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?4?$AA?$AA@
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@2@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> > >::deallocate(struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@2@_K@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@PEAX@2@_K@Z
0x180045B70: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x18000ECC0: MSFT_MpScan_Load
0x18005D548: "Min" ??_C@_17NMEHCJAI@?$AAM?$AAi?$AAn?$AA?$AA@
0x180013D84: "public: long __cdecl CData::CreateConfigWriter(void) __ptr64" ?CreateConfigWriter@CData@@QEAAJXZ
0x18007E6A0: "__vectorcall ??_R0?AV_Iostream_error_category@std@" ??_R0?AV_Iostream_error_category@std@@@8
0x180061F28: WPP_7e4e09fbf7a83e92bb6b9bd0a75971c6_Traceguids
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x18006BD60: "const MorroCommon::CWin32::`RTTI Complete Object Locator'" ??_R4CWin32@MorroCommon@@6B@
0x18000FC88: "protected: long __cdecl CBaseThreatManager::MpClientOpen(void) __ptr64" ?MpClientOpen@CBaseThreatManager@@IEAAJXZ
0x18005F618: "EnableControlledFolderAccess" ??_C@_1DK@OKEHIHDK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAd?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18006A820: "__vectorcall ??_R2CQuarantineContextManager@ThreatAbstraction" ??_R2CQuarantineContextManager@ThreatAbstraction@@8
0x18004F630: "const ThreatAbstraction::CAutoIgnoreThreat::`vftable'{for `ILockable'}" ??_7CAutoIgnoreThreat@ThreatAbstraction@@6BILockable@@@
0x18006A8E0: "__vectorcall ??_R3CQuarantineContextManager@ThreatAbstraction" ??_R3CQuarantineContextManager@ThreatAbstraction@@8
0x180003BDC: "enum _MI_Result __cdecl PopulateThreatInstances(struct _MI_Context * __ptr64,enum THREAT_TYPE_CLASS,class CBaseThreatManager * __ptr64)" ?PopulateThreatInstances@@YA?AW4_MI_Result@@PEAU_MI_Context@@W4THREAT_TYPE_CLASS@@PEAVCBaseThreatManager@@@Z
0x180030D00: "protected: virtual int __cdecl MorroCommon::CWin32::LoadStringImpl(struct HINSTANCE__ * __ptr64,unsigned int,unsigned short * __ptr64,int) __ptr64" ?LoadStringImpl@CWin32@MorroCommon@@MEAAHPEAUHINSTANCE__@@IPEAGH@Z
0x18005F1D8: "230" ??_C@_17CPPAPJDE@?$AA2?$AA3?$AA0?$AA?$AA@
0x18006BC70: "const ThreatAbstraction::CThreatInfo::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CThreatInfo@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800168D8: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@IEAAX_K@Z
0x18004DEE0: "const ThreatAbstraction::CScanHistoryController::`vftable'{for `CCritSectionBase'}" ??_7CScanHistoryController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180061E18: "const ThreatAbstraction::CScanHistoryContextManager::`vbtable'{for `CRefCountedBase'}" ??_8CScanHistoryContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x180061EA8: "const ThreatAbstraction::COnDemandController::CScanContext::`vbtable'" ??_8CScanContext@COnDemandController@ThreatAbstraction@@7B@
0x18005E710: "159" ??_C@_17KCOFCEA@?$AA1?$AA5?$AA9?$AA?$AA@
0x18006E158: "__vectorcall ??_R3?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil" ??_R3?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@8
0x180005830: "protected: virtual void * __ptr64 __cdecl IRefCounted::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIRefCounted@@MEAAPEAXI@Z
0x18006DD40: "__vectorcall ??_R2?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil" ??_R2?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@8
0x18003FFD8: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@XZ
0x1800801A8: "__vectorcall ??_R0?AVCThreadManager@" ??_R0?AVCThreadManager@@@8
0x18005D9D8: "AntispywareSignatureAge" ??_C@_1DA@BBCLIACF@?$AAA?$AAn?$AAt?$AAi?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x18005AC50: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180062078: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vbtable'" ??_8CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@7B@
0x18005B2F8: "__cdecl _imp_MpManagerVersionQuery" __imp_MpManagerVersionQuery
0x180050800: "const Microsoft::SecurityClient::IXMLDeployment::`vftable'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_7IXMLDeployment@SecurityClient@Microsoft@@6B012@@
0x180031380: "protected: virtual struct SC_HANDLE__ * __ptr64 __cdecl MorroCommon::CWin32::OpenSCManagerImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OpenSCManagerImpl@CWin32@MorroCommon@@MEAAPEAUSC_HANDLE__@@PEBG0K@Z
0x18003D14C: "public: static long __cdecl Microsoft::SecurityClient::CXMLReader::HrCreate(struct Microsoft::SecurityClient::IXMLReader * __ptr64 * __ptr64,unsigned short const * __ptr64,int,int)" ?HrCreate@CXMLReader@SecurityClient@Microsoft@@SAJPEAPEAUIXMLReader@23@PEBGHH@Z
0x1800327F4: "private: static long __cdecl MpCommonEx::CBrandedResourceWrapper::CreateSettings(void)" ?CreateSettings@CBrandedResourceWrapper@MpCommonEx@@CAJXZ
0x18003A964: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180017EE8: "public: __cdecl ThreatAbstraction::COnDemandController::COnDemandController(void) __ptr64" ??0COnDemandController@ThreatAbstraction@@QEAA@XZ
0x18005E158: "90" ??_C@_15JNGDPAJI@?$AA9?$AA0?$AA?$AA@
0x1800602E0: WPP_6421803c36c83c54aa06cda9e052fafe_Traceguids
0x180061E00: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vbtable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_8CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@7B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18000A304: "void __cdecl MpAddConfiguration(struct _MI_Context * __ptr64,struct _MSFT_MpPreference_Add const * __ptr64)" ?MpAddConfiguration@@YAXPEAU_MI_Context@@PEBU_MSFT_MpPreference_Add@@@Z
0x18008325C: "long volatile `public: static class MorroCommon::CWin32 * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@SAPEAVCWin32@3@XZ@4JC
0x1800834E4: "long volatile `public: static class MorroCommon::CFileUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CFileUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCFileUtils@MorroCommon@@@MorroCommon@@SAPEAVCFileUtils@3@XZ@4JC
0x1800834CC: "long volatile `public: static class MorroCommon::CPathUtils * __ptr64 __cdecl MorroCommon::TSingletonWithProxy<class MorroCommon::CPathUtils>::GetInstance(void)'::`2'::ts_staticInstanceGuard" ?ts_staticInstanceGuard@?1??GetInstance@?$TSingletonWithProxy@VCPathUtils@MorroCommon@@@MorroCommon@@SAPEAVCPathUtils@3@XZ@4JC
0x18002FE3C: "long __cdecl MorroCommon::HrCStringFormatMessage(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned int,...)" ?HrCStringFormatMessage@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@IZZ
0x180067928: "const ThreatAbstraction::ISignaturesUpdateCallback::`RTTI Complete Object Locator'{for `ThreatAbstraction::ISignaturesUpdateCallback'}" ??_R4ISignaturesUpdateCallback@ThreatAbstraction@@6B01@@
0x18004D5D8: "const CThreatDetails::`vftable'" ??_7CThreatDetails@@6B@
0x18004D8C0: "const ThreatAbstraction::IDetectionContext::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7IDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800626C8: "__cdecl _pfnDliNotifyHook2" __pfnDliNotifyHook2
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x180028F50: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::RemoveAutoIgnoreThreat`vtordisp{4294967292,0}' (unsigned __int64) __ptr64" ?RemoveAutoIgnoreThreat@CAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@A@EAAJ_K@Z
0x180031690: "protected: virtual int __cdecl MorroCommon::CWin32::ResetEventImpl(void * __ptr64) __ptr64" ?ResetEventImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x180017458: "public: __cdecl ThreatAbstraction::COnDemandController::CScanContext::Resources::~Resources(void) __ptr64" ??1Resources@CScanContext@COnDemandController@ThreatAbstraction@@QEAA@XZ
0x18006CE10: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@8
0x18005B040: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x18000B9E8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180078AB0: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24
0x18005E0F0: "77" ??_C@_15DKLOKJFB@?$AA7?$AA7?$AA?$AA@
0x180069730: "__vectorcall ??_R1A@A@7FA@IScanProgressInfo@ThreatAbstraction" ??_R1A@A@7FA@IScanProgressInfo@ThreatAbstraction@@8
0x180045020: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x18001A7F0: "public: static long __cdecl ThreatAbstraction::CSignatureUpdateController::UpdateCallback(void * __ptr64,struct tagMPCALLBACK_DATA * __ptr64)" ?UpdateCallback@CSignatureUpdateController@ThreatAbstraction@@SAJPEAXPEAUtagMPCALLBACK_DATA@@@Z
0x18005AF48: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x18003056C: "long __cdecl MorroCommon::HrCStringFormatMessageV(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,char * __ptr64)" ?HrCStringFormatMessageV@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGPEAD@Z
0x18005E018: "54" ??_C@_15GFMDKHLE@?$AA5?$AA4?$AA?$AA@
0x18002A710: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetAdvice`vtordisp{4294967292,40}' (void)const __ptr64" ?GetAdvice@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAPEBVCWString@@XZ
0x18005D840: "Values" ??_C@_1O@EMKCMMOF@?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AA?$AA@
0x1800615E8: "const MpWmiSignatureProgress::`vbtable'{for `CRefCountedBase'}" ??_8MpWmiSignatureProgress@@7BCRefCountedBase@@@
0x18004E8D0: "const ThreatAbstraction::CScanHistoryContextManager::`vftable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_7CScanHistoryContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x180060838: "NonCriticalTimeOut" ??_C@_1CG@GPGJIKHG@?$AAN?$AAo?$AAn?$AAC?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AAT?$AAi?$AAm?$AAe?$AAO?$AAu?$AAt?$AA?$AA@
0x18006D068: "__vectorcall ??_R1A@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std" ??_R1A@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@8
0x1800826B0: "__vectorcall ??_R0?AV?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@" ??_R0?AV?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@@8
0x1800694B0: "__vectorcall ??_R2CScanProgressInfoQueue@ThreatAbstraction" ??_R2CScanProgressInfoQueue@ThreatAbstraction@@8
0x180031760: "protected: virtual unsigned int __cdecl MorroCommon::CWin32::GetPrivateProfileIntImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileIntImpl@CWin32@MorroCommon@@MEAAIPEBG0H0@Z
0x18005ACF0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180069598: "__vectorcall ??_R3CScanProgressInfoQueue@ThreatAbstraction" ??_R3CScanProgressInfoQueue@ThreatAbstraction@@8
0x18005E680: "157" ??_C@_17OKPBCFHD@?$AA1?$AA5?$AA7?$AA?$AA@
0x180061E48: "__cdecl GUID_e2d74550_8e41_460e_bb51_52e1f9522134" _GUID_e2d74550_8e41_460e_bb51_52e1f9522134
0x180083504: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUnhexigUlyquivUznwGEUhgwzucOlyq@MpGlobals" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUxlnnlmUhlfixvUnktolyzohUnhexigUlyquivUznwGEUhgwzucOlyq@MpGlobals
0x180088020: ext-ms-win-shell-shlwapi-l1-1-0_NULL_THUNK_DATA_DLA
0x180081220: "__vectorcall ??_R0?AV?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@" ??_R0?AV?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@@std@@@8
0x18005AD20: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180013C64: "public: long __cdecl CData::SetConfigBool(unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?SetConfigBool@CData@@QEAAJPEBG0H@Z
0x1800016E0: "public: virtual char const * __ptr64 __cdecl std::_Generic_error_category::name(void)const __ptr64" ?name@_Generic_error_category@std@@UEBAPEBDXZ
0x18005DAC8: "AntivirusSignatureLastUpdated" ??_C@_1DM@DHCOAAIL@?$AAA?$AAn?$AAt?$AAi?$AAv?$AAi?$AAr?$AAu?$AAs?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAL?$AAa?$AAs?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x180039F04: "public: virtual void __cdecl CCritSectionBase::Unlock(void)const __ptr64" ?Unlock@CCritSectionBase@@UEBAXXZ
0x18005C858: "connection_reset" ??_C@_0BB@JOANDNCK@connection_reset?$AA@
0x180062750: "const Microsoft::SecurityClient::CBrandedColors::`vbtable'" ??_8CBrandedColors@SecurityClient@Microsoft@@7B@
0x180034CCC: "public: void __cdecl MpCommonEx::CBrandedResources::LoadStringW(unsigned short * __ptr64 * __ptr64,unsigned int)const __ptr64" ?LoadStringW@CBrandedResources@MpCommonEx@@QEBAXPEAPEAGI@Z
0x180062060: "const ThreatAbstraction::CAutoActionManager::`vbtable'{for `ThreatAbstraction::IAutoActionManager'}" ??_8CAutoActionManager@ThreatAbstraction@@7BIAutoActionManager@1@@
0x180062140: "const ThreatAbstraction::CAutoIgnoreThreats::`vbtable'{for `ThreatAbstraction::IAutoIgnoreThreats'}" ??_8CAutoIgnoreThreats@ThreatAbstraction@@7BIAutoIgnoreThreats@1@@
0x180061E00: "const ThreatAbstraction::CScanProgressInfoQueue::`vbtable'{for `ThreatAbstraction::IScanProgressInfoQueue'}" ??_8CScanProgressInfoQueue@ThreatAbstraction@@7BIScanProgressInfoQueue@1@@
0x18005FAE0: "ComputerNotificationsValue" ??_C@_1DG@EKAEBBOB@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18005E8F0: "179" ??_C@_17EHOGPDEL@?$AA1?$AA7?$AA9?$AA?$AA@
0x180061E00: "const ThreatAbstraction::CAutoIgnoreThreats::`vbtable'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_8CAutoIgnoreThreats@ThreatAbstraction@@7B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x18006D7E8: "const Microsoft::SecurityClient::CBrandedValues::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CBrandedValues@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180068FE8: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CUpdateContext@CWDOScanController@ThreatAbstraction@@6BILockable@@@
0x1800625A0: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180021E20: "public: virtual class ThreatAbstraction::IDetectionContext::IConfigChange const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChange(unsigned long)const __ptr64" ?GetConfigChange@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVIConfigChange@IDetectionContext@2@K@Z
0x18005D1C8: "system" ??_C@_06FHFOAHML@system?$AA@
0x180010918: "protected: void __cdecl std::_Tree<class std::_Tset_traits<unsigned __int64,struct std::less<unsigned __int64>,class std::allocator<unsigned __int64>,0> >::_Erase(struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64) __ptr64" ?_Erase@?$_Tree@V?$_Tset_traits@_KU?$less@_K@std@@V?$allocator@_K@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@_KPEAX@2@@Z
0x18004C010: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x1800515A0: MSFT_MpThreat_rtti
0x180031A30: "protected: virtual unsigned short * __ptr64 __cdecl MorroCommon::CWin32::PathFindFileNameImpl(unsigned short const * __ptr64) __ptr64" ?PathFindFileNameImpl@CWin32@MorroCommon@@MEAAPEAGPEBG@Z
0x18004E550: "const ThreatAbstraction::CContextManager::`vftable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_7CContextManager@ThreatAbstraction@@6BIContextEventsImpl@1@@
0x180062360: "MSEv2" ??_C@_1M@JOOBKALK@?$AAM?$AAS?$AAE?$AAv?$AA2?$AA?$AA@
0x18003AA90: "public: __cdecl CommonUtil::CHResultExceptionImpl::CHResultExceptionImpl(long) __ptr64" ??0CHResultExceptionImpl@CommonUtil@@QEAA@J@Z
0x180062130: "const ThreatAbstraction::CAutoActionManager::`vbtable'{for `CRefCountedBase'}" ??_8CAutoActionManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x180083270: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32> MorroCommon::CWin32::m_instance" ?m_instance@CWin32@MorroCommon@@0V?$TSingletonWithProxy@VCWin32@MorroCommon@@@2@A
0x180026010: "[thunk]:public: virtual int __cdecl CPseudoLockBase::TryLock`vtordisp{4294967292,96}' (void)const __ptr64" ?TryLock@CPseudoLockBase@@$4PPPPPPPM@GA@EBAHXZ
0x18004E7E0: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vftable'{for `ThreatAbstraction::IDetectionContexts'}" ??_7CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x1800117F4: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > &&) __ptr64" ??0?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@$$QEAV01@@Z
0x18005F990: "CategoryDiscriminant" ??_C@_1CK@OKFICCOO@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAD?$AAi?$AAs?$AAc?$AAr?$AAi?$AAm?$AAi?$AAn?$AAa?$AAn?$AAt?$AA?$AA@
0x18002B3E0: "public: virtual int __cdecl ThreatAbstraction::IDetectionContext::CResource::IsShared(void)const __ptr64" ?IsShared@CResource@IDetectionContext@ThreatAbstraction@@UEBAHXZ
0x180018000: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCOnDemandController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005F758: "259" ??_C@_17IEKBFFKD@?$AA2?$AA5?$AA9?$AA?$AA@
0x180005464: "public: __cdecl CommonUtil::AutoRef<class MpWmiScanProgress>::~AutoRef<class MpWmiScanProgress>(void) __ptr64" ??1?$AutoRef@VMpWmiScanProgress@@@CommonUtil@@QEAA@XZ
0x180024590: "[thunk]:public: virtual int __cdecl CPseudoLockBase::TryLock`vtordisp{4294967292,88}' (void)const __ptr64" ?TryLock@CPseudoLockBase@@$4PPPPPPPM@FI@EBAHXZ
0x18006CAF8: "__vectorcall ??_R1A@?0A@EA@IXMLReader@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLReader@SecurityClient@Microsoft@@8
0x18002DC30: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x180023BAC: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@Z
0x18002C790: "private: unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::MergeDetection(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ?MergeDetection@CDetectionContextBase@ThreatAbstraction@@AEAAKPEAUtagMPTHREAT_INFO@@@Z
0x18006DDD0: "__vectorcall ??_R2?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil" ??_R2?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@8
0x18005F088: "DisableRealtimeMonitoring" ??_C@_1DE@KHHPPCFG@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAa?$AAl?$AAt?$AAi?$AAm?$AAe?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x18006E140: "__vectorcall ??_R3?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil" ??_R3?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@8
0x180044218: "public: static void __cdecl Microsoft::SecurityClient::CXMLDataAccessor::SelectNamedPair(unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CComPtr<struct IXMLDOMNodeList>,class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > * __ptr64)" ?SelectNamedPair@CXMLDataAccessor@SecurityClient@Microsoft@@SAXPEBG0V?$CComPtr@UIXMLDOMNodeList@@@ATL@@PEAV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@2@_K@Z
0x18004F3C0: "const ThreatAbstraction::CQuarantineDetectionContext::`vftable'{for `ILockable'}" ??_7CQuarantineDetectionContext@ThreatAbstraction@@6BILockable@@@
0x180033760: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandImage(void * __ptr64 * __ptr64,unsigned int,unsigned int,int,int,unsigned int) __ptr64" ?LoadBrandImage@CBrandedAPI@MpCommonEx@@UEAAJPEAPEAXIIHHI@Z
0x18005F8E8: "MSFT_MpScan" ??_C@_1BI@LEPMGFAL@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18001A694: "private: long __cdecl ThreatAbstraction::CSignatureUpdateController::InternalStartUpdate(enum ThreatAbstraction::tagUpdateType,unsigned short const * __ptr64) __ptr64" ?InternalStartUpdate@CSignatureUpdateController@ThreatAbstraction@@AEAAJW4tagUpdateType@2@PEBG@Z
0x18005D4B8: "Key" ??_C@_17KACEIPNC@?$AAK?$AAe?$AAy?$AA?$AA@
0x18004D8A0: "const ThreatAbstraction::IDetectionContext::`vftable'{for `ILockable'}" ??_7IDetectionContext@ThreatAbstraction@@6BILockable@@@
0x18002BCDC: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetCategoryName(void)const __ptr64" ?GetCategoryName@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18003D860: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::AddRef`vtordisp{4294967292,8}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x180062190: "const ThreatAbstraction::CScanHistoryDetectionContext::`vbtable'{for `CRefCountedBase'}" ??_8CScanHistoryDetectionContext@ThreatAbstraction@@7BCRefCountedBase@@@
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005B398: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18005C7A8: "address_in_use" ??_C@_0P@LNDJPBFK@address_in_use?$AA@
0x180069880: "__vectorcall ??_R2CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction" ??_R2CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@8
0x180002230: MSFT_MpSignature_Unload
0x18000ED00: MSFT_MpThreat_CreateInstance
0x18005E658: "156" ??_C@_17FCENECBG@?$AA1?$AA5?$AA6?$AA?$AA@
0x180069E28: "__vectorcall ??_R3CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction" ??_R3CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@8
0x18000B7DC: "public: void __cdecl std::_Tree_buy<unsigned long,class std::allocator<unsigned long> >::_Freenode0(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@KV?$allocator@K@std@@@std@@QEAAXPEAU?$_Tree_node@KPEAX@2@@Z
0x18003E6A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18006B008: "const ThreatAbstraction::CAutoActionManager::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CAutoActionManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005E630: "CleaningActionID" ??_C@_1CC@MBCNLLNJ@?$AAC?$AAl?$AAe?$AAa?$AAn?$AAi?$AAn?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$AA@
0x180026B90: "public: virtual long __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::PerformActions(class ThreatAbstraction::IActionEvents * __ptr64,bool) __ptr64" ?PerformActions@CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@UEAAJPEAVIActionEvents@3@_N@Z
0x18003E788: "public: __cdecl std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::~map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >(void) __ptr64" ??1?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@QEAA@XZ
0x1800460A0: ApiSetQueryApiSetPresence
0x18004C000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180001630: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Generic_error_category@std@@UEAAPEAXI@Z
0x180050498: "const Microsoft::SecurityClient::CXMLReader::`vftable'{for `Microsoft::SecurityClient::IXMLReader'}" ??_7CXMLReader@SecurityClient@Microsoft@@6BIXMLReader@12@@
0x18002AA50: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetAvailableAction`vtordisp{4294967292,8}' (unsigned long)const __ptr64" ?GetAvailableAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4PermissibleAction@2@K@Z
0x18003AC10: WPP_SF_SDd
0x180031C84: WPP_SF_Sdd
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContexts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIDetectionContexts@ThreatAbstraction@@UEAAPEAXI@Z
0x18004D7A8: "const ISequence<class ThreatAbstraction::IDetectionContext>::`vftable'{for `ILockable'}" ??_7?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6BILockable@@@
0x18005B1F8: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x18006CF78: "__vectorcall ??_R1A@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std" ??_R1A@?0A@EA@?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@8
0x18000BA68: "public: virtual void * __ptr64 __cdecl MpWmiScanProgress::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMpWmiScanProgress@@UEAAPEAXI@Z
0x180066E80: "__vectorcall ??_R1A@?0A@EA@_Iostream_error_category@std" ??_R1A@?0A@EA@_Iostream_error_category@std@@8
0x180050698: "const Microsoft::SecurityClient::IXMLFeatures::`vftable'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_7IXMLFeatures@SecurityClient@Microsoft@@6B012@@
0x18000B508: "protected: void __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@IEBAXXZ
0x18003A8F4: "void __cdecl _NORMAL_HANDLE_Finalizer(void * __ptr64,void * __ptr64)" ?_NORMAL_HANDLE_Finalizer@@YAXPEAX0@Z
0x18003D860: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::AddRef`vtordisp{4294967292,8}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x180062700: "XML" ??_C@_17HOBKDGNC@?$AAX?$AAM?$AAL?$AA?$AA@
0x18002AC90: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryName`vtordisp{4294967292,8}' (void)const __ptr64" ?GetCategoryName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x180029DC0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CScanHistoryDetectionContext::IsPermissibleAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CScanHistoryDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAHW4PermissibleAction@2@@Z
0x1800618C0: "Updating virus and spyware defin" ??_C@_1EO@KEMABNDK@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAv?$AAi?$AAr?$AAu?$AAs?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAd?$AAe?$AAf?$AAi?$AAn@
0x18004D798: "const ThreatAbstraction::IDetectionContexts::`vftable'" ??_7IDetectionContexts@ThreatAbstraction@@6B@
0x18004DEF0: "const ThreatAbstraction::CQuarantineController::`vftable'{for `ILockable'}" ??_7CQuarantineController@ThreatAbstraction@@6BILockable@@@
0x180032BD0: "public: long __cdecl MpCommonEx::CBrandedAPI::InitBrandedResources(struct MpCommonEx::IBrandParams * __ptr64) __ptr64" ?InitBrandedResources@CBrandedAPI@MpCommonEx@@QEAAJPEAUIBrandParams@2@@Z
0x180020300: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextError`vtordisp{4294967292,8}' (class ThreatAbstraction::IDetectionContext const * __ptr64,long) __ptr64" ?OnContextError@CContextManager@ThreatAbstraction@@$2PPPPPPPM@7EAAXPEBVIDetectionContext@2@J@Z
0x18001EA24: "private: void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::SetCleanActions(struct tagMPCONTEXT * __ptr64 * __ptr64) __ptr64" ?SetCleanActions@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@AEAAXPEAPEAUtagMPCONTEXT@@@Z
0x18002DA70: "[thunk]:public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CThreatInfo::GetDetectionSource`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDetectionSource@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPSOURCE@@XZ
0x18002A370: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsUnknown`vtordisp{4294967292,40}' (void)const __ptr64" ?IsUnknown@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAHXZ
0x18006D630: "__vectorcall ??_R1A@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R1A@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x180011870: "[thunk]:public: virtual void * __ptr64 __cdecl CMpProviderLogger::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECMpProviderLogger@@WBA@EAAPEAXI@Z
0x180027BC0: WPP_SF_dSS
0x180010E54: WPP_SF_SSD
0x180005754: WPP_SF_ssd
0x1800022BC: WPP_SF_SSd
0x18007EC10: "__vectorcall ??_R0?AVCCritSectionBase@" ??_R0?AVCCritSectionBase@@@8
0x18002DA10: "[thunk]:public: virtual long __cdecl CRefCountedBaseX::AddRef`vtordisp{4294967292,224}' (void)const __ptr64" ?AddRef@CRefCountedBaseX@@$4PPPPPPPM@OA@EBAJXZ
0x1800200C0: "protected: struct std::pair<class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > >,bool> __cdecl std::_Tree<class std::_Tmap_traits<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> >,0> >::_Insert_nohint<struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_nohint@AEAU?$pair@$$CB_KK@std@@PEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@$0A@@std@@@std@@IEAA?AU?$pair@V?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CB_KK@std@@@std@@@std@@@std@@_N@1@_NAEAU?$pair@$$CB_KK@1@PEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@1@@Z
0x18005D748: "Static" ??_C@_1O@ECDFCEKO@?$AAS?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?$AA@
0x18005E898: "QuarantinePurgeItemsAfterDelay" ??_C@_1DO@DMAFKMDK@?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AAP?$AAu?$AAr?$AAg?$AAe?$AAI?$AAt?$AAe?$AAm?$AAs?$AAA?$AAf?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x18005ADB0: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x180020440: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSpynetVotingAvailable`vtordisp{4294967292,88}' (unsigned long,long) __ptr64" ?OnSpynetVotingAvailable@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXKJ@Z
0x180010970: "public: struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@QEAAPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@2@XZ
0x18003CE74: "public: class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl Microsoft::SecurityClient::CVersionFormatter::ToString(void)const __ptr64" ?ToString@CVersionFormatter@SecurityClient@Microsoft@@QEBA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@CommonUtil@@XZ
0x18005AE48: "__cdecl _imp_Process32FirstW" __imp_Process32FirstW
0x180036A60: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetSpecialFolderPathImpl(int,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetSpecialFolderPathImpl@CPathUtils@MorroCommon@@MEAAJHAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18006E260: "const CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > >::`RTTI Complete Object Locator'" ??_R4?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@6B@
0x180045FBC: IsSHGetFolderPathWPresent
0x18001FE30: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned __int64 const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned __int64,unsigned long,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const,unsigned long> >,0> >::_Insert_at<struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64,struct std::pair<unsigned __int64 const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned __int64 const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CB_KK@std@@PEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@_KKU?$less@_K@std@@V?$allocator@U?$pair@$$CB_KK@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CB_KK@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CB_KK@std@@PEAX@1@AEAU?$pair@$$CB_KK@1@1@Z
0x18005ACF8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180015104: "public: static long __cdecl ThreatAbstraction::CThreatAbstraction::Initialize(void)" ?Initialize@CThreatAbstraction@ThreatAbstraction@@SAJXZ
0x180021350: "protected: virtual long __cdecl ThreatAbstraction::CContextManager::CDetectionContextsBase::_OnPreAction(class ThreatAbstraction::IDetectionContext const * __ptr64) __ptr64" ?_OnPreAction@CDetectionContextsBase@CContextManager@ThreatAbstraction@@MEAAJPEBVIDetectionContext@3@@Z
0x180041B04: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::~CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>(void) __ptr64" ??1?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@MEAA@XZ
0x180022C68: "public: __cdecl std::pair<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >::~pair<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >(void) __ptr64" ??1?$pair@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@QEAA@XZ
0x180045900: "__cdecl purecall" _purecall
0x18001AE80: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsController::`vector deleting destructor'(unsigned int) __ptr64" ??_ECActiveThreatsController@ThreatAbstraction@@UEAAPEAXI@Z
0x180011600: "public: __cdecl std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::~vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(void) __ptr64" ??1?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAA@XZ
0x18005AEB0: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x1800621B0: "const ThreatAbstraction::CAutoIgnoreThreat::`vbtable'{for `CRefCountedBase'}" ??_8CAutoIgnoreThreat@ThreatAbstraction@@7BCRefCountedBase@@@
0x18005ABB8: "__cdecl _imp_ControlService" __imp_ControlService
0x1800626C8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180005440: "public: virtual void __cdecl CPseudoLockBase::Lock(void)const __ptr64" ?Lock@CPseudoLockBase@@UEBAXXZ
0x180017160: "public: __cdecl ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo::~CResourceInfo(void) __ptr64" ??1CResourceInfo@CScanContext@COnDemandController@ThreatAbstraction@@QEAA@XZ
0x180029D88: "public: virtual int __cdecl ThreatAbstraction::CScanHistoryDetectionContext::IsPermissibleAction(enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CScanHistoryDetectionContext@ThreatAbstraction@@UEBAHW4PermissibleAction@2@@Z
0x180081CC0: "__vectorcall ??_R0?AV?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@" ??_R0?AV?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@8
0x18004590C: "__cdecl _std_terminate" __std_terminate
0x18002C768: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetCheckpointID(void)const __ptr64" ?GetCheckpointID@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18005DDBC: "39" ??_C@_15EBPAJMHE@?$AA3?$AA9?$AA?$AA@
0x180031270: "protected: virtual int __cdecl MorroCommon::CWin32::StringFromGUID2Impl(struct _GUID const & __ptr64,unsigned short * __ptr64,int) __ptr64" ?StringFromGUID2Impl@CWin32@MorroCommon@@MEAAHAEBU_GUID@@PEAGH@Z
0x18003E020: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedStrings::HrGetAMSKUID(unsigned short * __ptr64 * __ptr64)const __ptr64" ?HrGetAMSKUID@CBrandedStrings@SecurityClient@Microsoft@@UEBAJPEAPEAG@Z
0x180014538: "public: __cdecl ATL::CAtlArray<unsigned short const * __ptr64,class ATL::CElementTraits<unsigned short const * __ptr64> >::~CAtlArray<unsigned short const * __ptr64,class ATL::CElementTraits<unsigned short const * __ptr64> >(void) __ptr64" ??1?$CAtlArray@PEBGV?$CElementTraits@PEBG@ATL@@@ATL@@QEAA@XZ
0x18001FDDC: "public: struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >::_Buynode0(void) __ptr64" ?_Buynode0@?$_Tree_buy@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@XZ
0x1800691C8: "const ThreatAbstraction::CHeartBeatController::`RTTI Complete Object Locator'" ??_R4CHeartBeatController@ThreatAbstraction@@6B@
0x18003A084: "public: virtual void * __ptr64 __cdecl CWString::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWString@@UEAAPEAXI@Z
0x180067F58: "__vectorcall ??_R1BA@?0A@EA@CCritSectionBase" ??_R1BA@?0A@EA@CCritSectionBase@@8
0x180083250: "private: static class MorroCommon::CWin32 * __ptr64 __ptr64 MorroCommon::TSingletonWithProxy<class MorroCommon::CWin32>::mts_proxy" ?mts_proxy@?$TSingletonWithProxy@VCWin32@MorroCommon@@@MorroCommon@@0PEAVCWin32@2@EA
0x18005D5A0: "Nonlocal" ??_C@_1BC@CKCBCPCH@?$AAN?$AAo?$AAn?$AAl?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x18003FD6C: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::_Insert_hint<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > > >,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@std@@@std@@@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@1@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@1@@Z
0x180044780: "public: static class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl Microsoft::SecurityClient::CXMLDataAccessor::GetAttribute(class ATL::CComPtr<struct IXMLDOMElement> const & __ptr64,unsigned short const * __ptr64)" ?GetAttribute@CXMLDataAccessor@SecurityClient@Microsoft@@SA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@CommonUtil@@AEBV?$CComPtr@UIXMLDOMElement@@@ATL@@PEBG@Z
0x18007CBA0: schemaDecl
0x18005E4E0: "134" ??_C@_17COBNGJIA@?$AA1?$AA3?$AA4?$AA?$AA@
0x1800625E0: WPP_1c3e52e25d5b302f2ece2a7df877a490_Traceguids
0x180029480: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandDetectionContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECOnDemandDetectionContext@ThreatAbstraction@@UEAAPEAXI@Z
0x180024650: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,32}' (unsigned long) __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CA@EAAPEAVIDetectionContext@ThreatAbstraction@@K@Z
0x180024630: "[thunk]:public: virtual class ThreatAbstraction::IDetectionContext const * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::Get`vtordisp{4294967292,32}' (unsigned long)const __ptr64" ?Get@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@$4PPPPPPPM@CA@EBAPEBVIDetectionContext@ThreatAbstraction@@K@Z
0x18006BAC8: "const ThreatAbstraction::CDetectionContextBase::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CDetectionContextBase@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800461C0: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x18001CB2C: "public: virtual class ThreatAbstraction::IScanProgressInfo const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfoQueue::GetNextScanProgressInfo(void) __ptr64" ?GetNextScanProgressInfo@CScanProgressInfoQueue@ThreatAbstraction@@UEAAPEBVIScanProgressInfo@2@XZ
0x180061AE8: "MSFT_MpComputerStatus_Destruct" ??_C@_0BP@MPOPLNAM@MSFT_MpComputerStatus_Destruct?$AA@
0x18005DF78: "SchemaVersion" ??_C@_1BM@ILPMDCGE@?$AAS?$AAc?$AAh?$AAe?$AAm?$AAa?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180050750: "const Microsoft::SecurityClient::IXMLBrandedColors::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedColors'}" ??_7IXMLBrandedColors@SecurityClient@Microsoft@@6B012@@
0x180040DD0: "private: static bool __cdecl Microsoft::SecurityClient::CFeatureBrand::StringToBool(unsigned short const * __ptr64)" ?StringToBool@CFeatureBrand@SecurityClient@Microsoft@@CA_NPEBG@Z
0x18005D668: "CurrentContext" ??_C@_1BO@OLFGBFFB@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x180015B30: "public: virtual long __cdecl ThreatAbstraction::CExceptionThreats::PerformActions(class ThreatAbstraction::IActionEvents * __ptr64,bool) __ptr64" ?PerformActions@CExceptionThreats@ThreatAbstraction@@UEAAJPEAVIActionEvents@2@_N@Z
0x180018070: "public: virtual __cdecl ThreatAbstraction::COnDemandController::~COnDemandController(void) __ptr64" ??1COnDemandController@ThreatAbstraction@@UEAA@XZ
0x18001B830: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,8}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@7EBAXXZ
0x18000258C: "long __cdecl MpMIUtil::MpGetStringArrayFromStringVector(class CommonUtil::CStdVector<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > & __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64)" ?MpGetStringArrayFromStringVector@MpMIUtil@@YAJAEAV?$CStdVector@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@CommonUtil@@PEAKPEAPEAPEAG@Z
0x180005440: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180069CD0: "__vectorcall ??_R1A@FA@7FA@ILockable" ??_R1A@FA@7FA@ILockable@@8
0x180038B30: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockEntireFile::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockEntireFile@MorroCommon@@UEAAPEAXI@Z
0x180011A60: "public: class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x180002230: MSFT_MpThreat_Unload
0x18004F450: "const ThreatAbstraction::IAutoIgnoreThreat::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7IAutoIgnoreThreat@ThreatAbstraction@@6BIThreatInfo@1@@
0x180016DB0: "public: virtual void * __ptr64 __cdecl CError::`vector deleting destructor'(unsigned int) __ptr64" ??_ECError@@UEAAPEAXI@Z
0x180067D90: "__vectorcall ??_R2CCritSectionBase" ??_R2CCritSectionBase@@8
0x180017140: "public: __cdecl ThreatAbstraction::COnDemandController::CScanContext::CResourceInfo::CResourceInfo(void) __ptr64" ??0CResourceInfo@CScanContext@COnDemandController@ThreatAbstraction@@QEAA@XZ
0x180068140: "__vectorcall ??_R3CCritSectionBase" ??_R3CCritSectionBase@@8
0x18005AD68: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18006DFF8: "__vectorcall ??_R1A@?0A@EA@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R1A@?0A@EA@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18004002C: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@Z
0x18004F560: "const ThreatAbstraction::CAutoIgnoreThreat::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CAutoIgnoreThreat@ThreatAbstraction@@6BIThreatInfo@1@@
0x18005CCE8: "no message" ??_C@_0L@EDOLMPAK@no?5message?$AA@
0x180032650: "public: virtual void * __ptr64 __cdecl MpCommonEx::CBrandedAPI::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBrandedAPI@MpCommonEx@@UEAAPEAXI@Z
0x18005E0A0: "67" ??_C@_15PBOCHKPE@?$AA6?$AA7?$AA?$AA@
0x18004E4A8: "const ThreatAbstraction::CContextManager::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7CContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x18006DF08: "__vectorcall ??_R1BA@?0A@EA@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R1BA@?0A@EA@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18005B480: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18005DBA0: "FullScanStartTime" ??_C@_1CE@BFFCGHKD@?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAa?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18006AEC8: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6BCCritSectionBase@@@
0x18005EA70: "191" ??_C@_17LIFILKNE@?$AA1?$AA9?$AA1?$AA?$AA@
0x180024670: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::CDetectionStats::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECDetectionStats@CContextManager@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x1800168D8: "protected: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> > > >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@@std@@@std@@IEAAX_K@Z
0x1800310B0: "protected: virtual int __cdecl MorroCommon::CWin32::FindCloseImpl(void * __ptr64) __ptr64" ?FindCloseImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18005D938: "AMProductVersion" ??_C@_1CC@PEBDPMB@?$AAA?$AAM?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180062AF8: ".//Packages/Package" ??_C@_1CI@OGAAFJGL@?$AA?4?$AA?1?$AA?1?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAs?$AA?1?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AA?$AA@
0x18005F568: "CloudBlockLevel" ??_C@_1CA@DOHIGBHF@?$AAC?$AAl?$AAo?$AAu?$AAd?$AAB?$AAl?$AAo?$AAc?$AAk?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180067F08: "__vectorcall ??_R1DI@?0A@EA@CRefCountedBase" ??_R1DI@?0A@EA@CRefCountedBase@@8
0x180001630: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_System_error_category@std@@UEAAPEAXI@Z
0x18005EEB8: "212" ??_C@_17MIDBJALE@?$AA2?$AA1?$AA2?$AA?$AA@
0x1800500E8: "const MpCommonEx::CBrandedAPI::`vftable'{for `CommonUtil::IRefObject'}" ??_7CBrandedAPI@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x18005CAF8: "bad message" ??_C@_0M@PMMIEFCP@bad?5message?$AA@
0x18006C278: "__vectorcall ??_R1A@?0A@EA@IRefObject@CommonUtil" ??_R1A@?0A@EA@IRefObject@CommonUtil@@8
0x18005B2F0: "__cdecl _imp_MpOfflineScanInstall" __imp_MpOfflineScanInstall
0x1800620E0: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vbtable'{for `ThreatAbstraction::IDetectionContexts'}" ??_8CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@7BIDetectionContexts@2@@
0x18000E244: "void __cdecl PopulateComputerHealthInstance(struct _MI_Context * __ptr64)" ?PopulateComputerHealthInstance@@YAXPEAU_MI_Context@@@Z
0x18005E040: "7,8" ??_C@_17FACEGPPB@?$AA7?$AA?0?$AA8?$AA?$AA@
0x180062540: WPP_30049592ff0e3760e8a5875bacfc3e25_Traceguids
0x18005E020: "SeverityID" ??_C@_1BG@EDPDMIGB@?$AAS?$AAe?$AAv?$AAe?$AAr?$AAi?$AAt?$AAy?$AAI?$AAD?$AA?$AA@
0x18001C050: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,32}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@CA@EBAXXZ
0x18004D608: "const CMpProviderLogger::`vftable'{for `CommonUtil::CRefObject'}" ??_7CMpProviderLogger@@6BCRefObject@CommonUtil@@@
0x18005D8F0: "8" ??_C@_13OLCEPAKN@?$AA8?$AA?$AA@
0x18007904C: "__cdecl _IMPORT_DESCRIPTOR_mpclient" __IMPORT_DESCRIPTOR_mpclient
0x180061F38: "const ThreatAbstraction::CAutoIgnoreThreats::`vbtable'{for `CCritSectionBase'}" ??_8CAutoIgnoreThreats@ThreatAbstraction@@7BCCritSectionBase@@@
0x180044030: "public: static void __cdecl Microsoft::SecurityClient::CXMLDataAccessor::GetClassRoot(struct Microsoft::SecurityClient::IXMLReader const * __ptr64,unsigned short const * __ptr64,struct IXMLDOMNode * __ptr64 * __ptr64)" ?GetClassRoot@CXMLDataAccessor@SecurityClient@Microsoft@@SAXPEBUIXMLReader@23@PEBGPEAPEAUIXMLDOMNode@@@Z
0x18002A050: "public: virtual unsigned long __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleActionCount(void)const __ptr64" ?GetPermissibleActionCount@CQuarantineDetectionContext@ThreatAbstraction@@UEBAKXZ
0x18001F120: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCActiveThreatsContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x180040BF0: "public: virtual long __cdecl Microsoft::SecurityClient::CFeatureBrand::HrIsFeatureEnabled(unsigned short const * __ptr64,bool * __ptr64)const __ptr64" ?HrIsFeatureEnabled@CFeatureBrand@SecurityClient@Microsoft@@UEBAJPEBGPEA_N@Z
0x18005DE34: "41" ??_C@_15JJEBIECD@?$AA4?$AA1?$AA?$AA@
0x180031890: "protected: virtual int __cdecl MorroCommon::CWin32::PathIsRelativeImpl(unsigned short const * __ptr64) __ptr64" ?PathIsRelativeImpl@CWin32@MorroCommon@@MEAAHPEBG@Z
0x180012580: "public: virtual struct ATL::CStringData * __ptr64 __cdecl ATL::CAtlStringMgr::Reallocate(struct ATL::CStringData * __ptr64,int,int) __ptr64" ?Reallocate@CAtlStringMgr@ATL@@UEAAPEAUCStringData@2@PEAU32@HH@Z
0x18002AC30: "[thunk]:public: virtual enum ThreatAbstraction::MatchType __cdecl ThreatAbstraction::CThreatInfo::GetMatchType`vtordisp{4294967292,8}' (void)const __ptr64" ?GetMatchType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4MatchType@2@XZ
0x18002AAB0: "[thunk]:public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CThreatInfo::GetDetectionType`vtordisp{4294967292,8}' (void)const __ptr64" ?GetDetectionType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4DetectionType@2@XZ
0x18003B210: "long __cdecl CommonUtil::UtilRawGetProcAddress(__int64 (__cdecl* * __ptr64)(void),struct HINSTANCE__ * __ptr64,char const * __ptr64,bool)" ?UtilRawGetProcAddress@CommonUtil@@YAJPEAP6A_JXZPEAUHINSTANCE__@@PEBD_N@Z
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180045098: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x180018CA0: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,16}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@BA@EBAJXZ
0x180061320: "This might take some time, depen" ??_C@_1IG@PEDMOBDG@?$AAT?$AAh?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAg?$AAh?$AAt?$AA?5?$AAt?$AAa?$AAk?$AAe?$AA?5?$AAs?$AAo?$AAm?$AAe?$AA?5?$AAt?$AAi?$AAm?$AAe?$AA?0?$AA?5?$AAd?$AAe?$AAp?$AAe?$AAn@
0x18003A480: "public: virtual void * __ptr64 __cdecl CThreadManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThreadManager@@UEAAPEAXI@Z
0x180068C68: "__vectorcall ??_R3ISimpleMpConfigWriter@ThreatAbstraction" ??_R3ISimpleMpConfigWriter@ThreatAbstraction@@8
0x180068BE8: "__vectorcall ??_R2ISimpleMpConfigWriter@ThreatAbstraction" ??_R2ISimpleMpConfigWriter@ThreatAbstraction@@8
0x18003D894: "private: __cdecl Microsoft::SecurityClient::CBrandedStrings::CBrandedStrings(struct Microsoft::SecurityClient::IXMLReader const * __ptr64,unsigned short const * __ptr64) __ptr64" ??0CBrandedStrings@SecurityClient@Microsoft@@AEAA@PEBUIXMLReader@12@PEBG@Z
0x180019E20: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUpdateContext@CSignatureUpdateController@ThreatAbstraction@@UEAAPEAXI@Z
0x180019060: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScheduledScanContext@CScheduledScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x18001D550: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetFileCount(void)const __ptr64" ?GetFileCount@CScanProgressInfo@ThreatAbstraction@@UEBA_KXZ
0x18006BEB0: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@8
0x18005AB48: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18004DFB0: "const ThreatAbstraction::IScanProgressInfoQueue::`vftable'{for `IRefCounted'}" ??_7IScanProgressInfoQueue@ThreatAbstraction@@6BIRefCounted@@@
0x18003847C: "public: __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::~vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >(void) __ptr64" ??1?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@QEAA@XZ
0x18005CF28: "value too large" ??_C@_0BA@KGKGOOJA@value?5too?5large?$AA@
0x18005C638: "filename too long" ??_C@_0BC@EJHOMAAK@filename?5too?5long?$AA@
0x1800677B8: "const ThreatAbstraction::IScanProgress::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgress'}" ??_R4IScanProgress@ThreatAbstraction@@6B01@@
0x18005C9E8: "protocol_not_supported" ??_C@_0BH@KAPBAIJF@protocol_not_supported?$AA@
0x18001B3A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::CUpdateContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUpdateContext@CHeartBeatController@ThreatAbstraction@@UEAAPEAXI@Z
0x18000EDF0: MSFT_MpThreatCatalog_EnumerateInstances
0x180016420: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAXI@Z
0x18005E3E0: "125" ??_C@_17FNPNNNEA@?$AA1?$AA2?$AA5?$AA?$AA@
0x180069E40: "__vectorcall ??_R3CContextManager@ThreatAbstraction" ??_R3CContextManager@ThreatAbstraction@@8
0x1800699F0: "__vectorcall ??_R2CContextManager@ThreatAbstraction" ??_R2CContextManager@ThreatAbstraction@@8
0x18005FEF0: "MpThreat" ??_C@_08CEOKHHHJ@MpThreat?$AA@
0x18004FAD0: "const ThreatAbstraction::CThreatInfo::`vftable'{for `ILockable'}" ??_7CThreatInfo@ThreatAbstraction@@6BILockable@@@
0x1800690D0: "__vectorcall ??_R1A@?0A@EA@CUpdateContext@CHeartBeatController@ThreatAbstraction" ??_R1A@?0A@EA@CUpdateContext@CHeartBeatController@ThreatAbstraction@@8
0x180068640: "__vectorcall ??_R2CPseudoRefCountedBase" ??_R2CPseudoRefCountedBase@@8
0x18005F960: "271" ??_C@_17MNNNMEH@?$AA2?$AA7?$AA1?$AA?$AA@
0x180068730: "__vectorcall ??_R3CPseudoRefCountedBase" ??_R3CPseudoRefCountedBase@@8
0x18004FFE8: "const MpCommonEx::IBrandedResources::`vftable'{for `MpCommonEx::IBrandedResources'}" ??_7IBrandedResources@MpCommonEx@@6B01@@
0x180062C58: "name" ??_C@_19HHIIBINK@?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x18005DFB4: "48" ??_C@_15OEEJMLKJ@?$AA4?$AA8?$AA?$AA@
0x18005E740: "165" ??_C@_17MGGMJPFG@?$AA1?$AA6?$AA5?$AA?$AA@
0x18004F9D0: "const ThreatAbstraction::CQuarantineThreatInfo::`vftable'" ??_7CQuarantineThreatInfo@ThreatAbstraction@@6B@
0x18002F708: "long __cdecl MorroCommon::ReplaceBrandParts(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,enum MorroCommon::BrandingTagType,bool * __ptr64)" ?ReplaceBrandParts@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@W4BrandingTagType@1@PEA_N@Z
0x18006B920: "const ThreatAbstraction::CAutoIgnoreThreat::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CAutoIgnoreThreat@ThreatAbstraction@@6BCCritSectionBase@@@
0x180043F30: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::AddRef`vtordisp{4294967292,72}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@EI@EBAJXZ
0x18001B280: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,32}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@CA@EBAJXZ
0x180083273: "private: static class MorroCommon::TSingletonWithProxy<class MorroCommon::CProductUtils> MorroCommon::CProductUtils::m_instance" ?m_instance@CProductUtils@MorroCommon@@0V?$TSingletonWithProxy@VCProductUtils@MorroCommon@@@2@A
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> >::~CSmartPtr<class ThreatAbstraction::IAutoIgnoreThreat,class VolatileOps<class ThreatAbstraction::IAutoIgnoreThreat> >(void) __ptr64" ??1?$CSmartPtr@VIAutoIgnoreThreat@ThreatAbstraction@@V?$VolatileOps@VIAutoIgnoreThreat@ThreatAbstraction@@@@@@QEAA@XZ
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x18005FD20: "Adapter_RegisterDLL" ??_C@_0BE@PDLIGLLB@Adapter_RegisterDLL?$AA@
0x180067038: "__vectorcall ??_R1A@?0A@EA@_System_error_category@std" ??_R1A@?0A@EA@_System_error_category@std@@8
0x18000D7FC: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpClose>::~CUniqueHandle<struct CAutoMpClose>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpClose@@@CommonUtil@@QEAA@XZ
0x18005C870: "destination_address_required" ??_C@_0BN@JLJNLKLK@destination_address_required?$AA@
0x1800296E0: "[thunk]:public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionSource`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDetectionSource@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4tagMPSOURCE@@XZ
0x18005AF28: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18005F660: "AttackSurfaceReductionOnlyExclus" ??_C@_1EK@MGDJFMPE@?$AAA?$AAt?$AAt?$AAa?$AAc?$AAk?$AAS?$AAu?$AAr?$AAf?$AAa?$AAc?$AAe?$AAR?$AAe?$AAd?$AAu?$AAc?$AAt?$AAi?$AAo?$AAn?$AAO?$AAn?$AAl?$AAy?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs@
0x180050610: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x180062178: "const ThreatAbstraction::CScanHistoryDetectionContext::`vbtable'{for `ThreatAbstraction::IDetectionContext'}" ??_8CScanHistoryDetectionContext@ThreatAbstraction@@7BIDetectionContext@1@@
0x18003A8E0: "[thunk]:public: virtual void * __ptr64 __cdecl CThreadManager::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECThreadManager@@$4PPPPPPPM@A@EAAPEAXI@Z
0x1800790EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x18005F308: "UILockdown" ??_C@_1BG@BGBILHMM@?$AAU?$AAI?$AAL?$AAo?$AAc?$AAk?$AAd?$AAo?$AAw?$AAn?$AA?$AA@
0x18004D710: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vftable'{for `CCritSectionBase'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6BCCritSectionBase@@@
0x18000B508: "protected: void __cdecl std::vector<struct MorroCommon::SFolderItem,class std::allocator<struct MorroCommon::SFolderItem> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@USFolderItem@MorroCommon@@V?$allocator@USFolderItem@MorroCommon@@@std@@@std@@IEBAXXZ
0x18005CC48: "is a directory" ??_C@_0P@FLLDBIDK@is?5a?5directory?$AA@
0x1800623A8: WPP_2e31eeb618fe305a3fddc570975ca0af_Traceguids
0x18005B160: "__cdecl _imp_VerifyVersionInfoW" __imp_VerifyVersionInfoW
0x180062060: "const ThreatAbstraction::CScanHistoryContextManager::`vbtable'{for `ThreatAbstraction::IContextEvents'}" ??_8CScanHistoryContextManager@ThreatAbstraction@@7BIContextEvents@1@@
0x1800204E0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnSampleRequest`vtordisp{4294967292,0}' (class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXPEAVISampleRequest@3@@Z
0x180001A44: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18005B038: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x18006D680: "__vectorcall ??_R1A@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std" ??_R1A@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@8
0x18005CC88: "network unreachable" ??_C@_0BE@IFNCKGE@network?5unreachable?$AA@
0x1800620C8: "public: static unsigned long const ThreatAbstraction::IThreatInfo::TT_UNKNOWN" ?TT_UNKNOWN@IThreatInfo@ThreatAbstraction@@2KB
0x180050348: "const CRefCountedBaseX::`vftable'" ??_7CRefCountedBaseX@@6B@
0x180005498: "public: __cdecl CommonUtil::AutoRef<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >::~AutoRef<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >(void) __ptr64" ??1?$AutoRef@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x180062998: "DefaultSqmOptIn" ??_C@_1CA@BGFLIAPK@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAS?$AAq?$AAm?$AAO?$AAp?$AAt?$AAI?$AAn?$AA?$AA@
0x18005E060: "59" ??_C@_15JHKJHPGJ@?$AA5?$AA9?$AA?$AA@
0x1800831D4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUzkkUwzgzozbviUoryUlyquivUznwGEUhgwzucOlyq@DataLayer" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnklmvmghUzkkUwzgzozbviUoryUlyquivUznwGEUhgwzucOlyq@DataLayer
0x18005D8A0: "ComputerID" ??_C@_1BG@JAGHFOLC@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAI?$AAD?$AA?$AA@
0x18005E1B0: "101" ??_C@_17JPFHOLBM@?$AA1?$AA0?$AA1?$AA?$AA@
0x18007FD50: "__vectorcall ??_R0?AV?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@@8
0x1800055A4: "public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRefCountedBaseX@@UEAAPEAXI@Z
0x180031560: "protected: virtual int __cdecl MorroCommon::CWin32::AdjustTokenPrivilegesImpl(void * __ptr64,int,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long * __ptr64) __ptr64" ?AdjustTokenPrivilegesImpl@CWin32@MorroCommon@@MEAAHPEAXHPEAU_TOKEN_PRIVILEGES@@K1PEAK@Z
0x18005C910: "too_many_files_open" ??_C@_0BE@GJJJJDDA@too_many_files_open?$AA@
0x180023BF0: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::_Insert_at<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64,struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@1@AEAU?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@1@1@Z
0x180068D98: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6BILockable@@@
0x18002CE80: "public: virtual enum tagMPSOURCE __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionSource(void)const __ptr64" ?GetDetectionSource@CDetectionContextBase@ThreatAbstraction@@UEBA?AW4tagMPSOURCE@@XZ
0x18005E210: "108" ??_C@_17OCFPKEJG@?$AA1?$AA0?$AA8?$AA?$AA@
0x18005F870: "Force" ??_C@_1M@BHHFJIFF@?$AAF?$AAo?$AAr?$AAc?$AAe?$AA?$AA@
0x18003B754: "class CommonUtil::CReturnHandle<class CommonUtil::CUniqueHandle<struct CommonUtil::CAutoUniqueArrayPtrDelete2<unsigned short * __ptr64> > > __cdecl CommonUtil::TrNewSprintfW(unsigned short const * __ptr64,...)" ?TrNewSprintfW@CommonUtil@@YA?AV?$CReturnHandle@V?$CUniqueHandle@U?$CAutoUniqueArrayPtrDelete2@PEAG@CommonUtil@@@CommonUtil@@@1@PEBGZZ
0x180067240: "__vectorcall ??_R1A@?0A@EA@CThreatCatalogManager" ??_R1A@?0A@EA@CThreatCatalogManager@@8
0x18001F600: "public: virtual class ThreatAbstraction::IDetectionContexts * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::GetDetectionContextsByType(unsigned long) __ptr64" ?GetDetectionContextsByType@CActiveThreatsContextManager@ThreatAbstraction@@UEAAPEAVIDetectionContexts@2@K@Z
0x180041A68: "private: static unsigned char __cdecl Microsoft::SecurityClient::CBrandedColors::StringToByte(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64)" ?StringToByte@CBrandedColors@SecurityClient@Microsoft@@CAEAEBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@Z
0x180046330: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x1800424C0: "public: virtual long __cdecl Microsoft::SecurityClient::CDeploymentBrand::HrGetInstallSequence(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > * __ptr64 * __ptr64)const __ptr64" ?HrGetInstallSequence@CDeploymentBrand@SecurityClient@Microsoft@@UEBAJPEBG00PEAPEAV?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@@Z
0x18005DFD4: "49" ??_C@_15FMPFKMMM@?$AA4?$AA9?$AA?$AA@
0x18002D5C0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::CResource::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECResource@IDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x1800686F0: "__vectorcall ??_R1A@?0A@EA@CError" ??_R1A@?0A@EA@CError@@8
0x18002D980: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineThreatInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuarantineThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x18006B948: "const ThreatAbstraction::IAutoIgnoreThreat::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4IAutoIgnoreThreat@ThreatAbstraction@@6BIThreatInfo@1@@
0x180018ED8: "public: __cdecl ThreatAbstraction::CScheduledScanController::CScheduledScanContext::CScheduledScanContext(void) __ptr64" ??0CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@QEAA@XZ
0x1800602D0: "const MpWmiCleanProgress::`vbtable'{for `CRefCountedBase'}" ??_8MpWmiCleanProgress@@7BCRefCountedBase@@@
0x18005AFA8: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x180062A6C: "g" ??_C@_13HIEKOPFJ@?$AAg?$AA?$AA@
0x18004EA80: "const ThreatAbstraction::CQuarantineContextManager::`vftable'{for `ILockable'}" ??_7CQuarantineContextManager@ThreatAbstraction@@6BILockable@@@
0x180078B30: "__cdecl CTA1?AW4_MI_Result@@" _CTA1?AW4_MI_Result@@
0x180025FF0: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::`vector deleting destructor'`vtordisp{4294967292,136}' (unsigned int) __ptr64" ??_ECScanHistoryContextManager@ThreatAbstraction@@$4PPPPPPPM@II@EAAPEAXI@Z
0x18005E568: "141" ??_C@_17EMGKJAK@?$AA1?$AA4?$AA1?$AA?$AA@
0x1800830C0: "__cdecl _hmod__ext_ms_win_shell32_shellfolders_l1_1_0_dll" __hmod__ext_ms_win_shell32_shellfolders_l1_1_0_dll
0x180062958: ".//Feature[@name and @value]" ??_C@_1DK@MBMCHDNH@?$AA?4?$AA?1?$AA?1?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$FL?$AA?$EA?$AAn?$AAa?$AAm?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAv?$AAa?$AAl?$AAu?$AAe?$AA?$FN?$AA?$AA@
0x1800107F0: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpDetectionInfoFree>::~CUniqueHandle<struct CAutoMpDetectionInfoFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpDetectionInfoFree@@@CommonUtil@@QEAA@XZ
0x180030A70: "protected: virtual struct HINSTANCE__ * __ptr64 __cdecl MorroCommon::CWin32::LoadLibraryExImpl(unsigned short const * __ptr64,void * __ptr64,unsigned long) __ptr64" ?LoadLibraryExImpl@CWin32@MorroCommon@@MEAAPEAUHINSTANCE__@@PEBGPEAXK@Z
0x18004E400: "const ThreatAbstraction::IContextEventsImpl::`vftable'{for `ThreatAbstraction::IContextEvents'}" ??_7IContextEventsImpl@ThreatAbstraction@@6BIContextEvents@1@@
0x180022BD8: "public: unsigned long & __ptr64 __cdecl std::map<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >::operator[](unsigned long const & __ptr64) __ptr64" ??A?$map@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@QEAAAEAKAEBK@Z
0x18005DED0: "44" ??_C@_15KOJPHEBB@?$AA4?$AA4?$AA?$AA@
0x18005B210: "__cdecl _imp_MpCleanOpen" __imp_MpCleanOpen
0x18006D298: "__vectorcall ??_R2?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@8
0x1800310E0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::GetCurrentProcessImpl(void) __ptr64" ?GetCurrentProcessImpl@CWin32@MorroCommon@@MEAAPEAXXZ
0x18005CA40: "address family not supported" ??_C@_0BN@LKKBCCDB@address?5family?5not?5supported?$AA@
0x18006D6D0: "__vectorcall ??_R3?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@8
0x18005B3C8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18004DE30: "const ThreatAbstraction::CWDOScanController::CUpdateContext::`vftable'" ??_7CUpdateContext@CWDOScanController@ThreatAbstraction@@6B@
0x1800370B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::CreateFolderImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?CreateFolderImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18002DB50: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetDefaultAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDefaultAction@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x18002CEA0: "public: __cdecl CSafePtr<class std::set<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >,class VolatileOps<class std::set<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > > >::~CSafePtr<class std::set<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >,class VolatileOps<class std::set<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > > >(void) __ptr64" ??1?$CSafePtr@V?$set@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@@std@@V?$VolatileOps@V?$set@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@@std@@@@@@QEAA@XZ
0x180069668: "const ThreatAbstraction::IScanProgressInfoQueue::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4IScanProgressInfoQueue@ThreatAbstraction@@6BILockable@@@
0x18001D450: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::GetResourcePath(void)const __ptr64" ?GetResourcePath@CScanProgressInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005B030: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x18001FD60: "public: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > & __ptr64 __cdecl std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > >::operator--(void) __ptr64" ??F?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@std@@@std@@@std@@QEAAAEAV01@XZ
0x18007F5A8: "__vectorcall ??_R0?AVIContextEventsImpl@ThreatAbstraction@" ??_R0?AVIContextEventsImpl@ThreatAbstraction@@@8
0x180020520: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnItemCompletion`vtordisp{4294967292,0}' (unsigned long,long,enum ThreatAbstraction::PermissibleAction) __ptr64" ?OnItemCompletion@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXKJW4PermissibleAction@3@@Z
0x180010970: "public: struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<unsigned __int64,class std::allocator<unsigned __int64> > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@_KV?$allocator@_K@std@@@std@@@std@@QEAAPEAU?$_Tree_node@_KPEAX@2@XZ
0x18005CA60: "address in use" ??_C@_0P@LDMLAFHI@address?5in?5use?$AA@
0x18002C080: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsPermissibleAction(enum ThreatAbstraction::PermissibleAction)const __ptr64" ?IsPermissibleAction@CDetectionContextBase@ThreatAbstraction@@UEBAHW4PermissibleAction@2@@Z
0x18005E130: "85" ??_C@_15GBOBNDAP@?$AA8?$AA5?$AA?$AA@
0x180031900: "protected: virtual int __cdecl MorroCommon::CWin32::CreateEnvironmentBlockImpl(void * __ptr64 * __ptr64,void * __ptr64,int) __ptr64" ?CreateEnvironmentBlockImpl@CWin32@MorroCommon@@MEAAHPEAPEAXPEAXH@Z
0x1800328D0: "public: static long __cdecl MpCommonEx::CBrandedResourceWrapper::GetInstance(struct MpCommonEx::IBrandedResources * __ptr64 * __ptr64)" ?GetInstance@CBrandedResourceWrapper@MpCommonEx@@SAJPEAPEAUIBrandedResources@2@@Z
0x18004EC68: "const ThreatAbstraction::CAutoActionManager::`vftable'{for `ILockable'}" ??_7CAutoActionManager@ThreatAbstraction@@6BILockable@@@
0x18005B3B8: "__cdecl _imp_memcpy" __imp_memcpy
0x18006A970: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContexts'}" ??_R4CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x18005E0E8: "76" ??_C@_15ICACMODE@?$AA7?$AA6?$AA?$AA@
0x18007E8D0: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18005C8A0: "host_unreachable" ??_C@_0BB@KKNHPPIN@host_unreachable?$AA@
0x1800623C8: "*.com" ??_C@_1M@EJDCAMGD@?$AA?$CK?$AA?4?$AAc?$AAo?$AAm?$AA?$AA@
0x180061E18: "const ThreatAbstraction::CQuarantineContextManager::`vbtable'{for `CRefCountedBase'}" ??_8CQuarantineContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x18005F938: "MSFT_MpSignature" ??_C@_1CC@DBAJMIEL@?$AAM?$AAS?$AAF?$AAT?$AA_?$AAM?$AAp?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x18005E428: "128" ??_C@_17KPJHAFJN@?$AA1?$AA2?$AA8?$AA?$AA@
0x18004F238: "const ThreatAbstraction::CQuarantineDetectionContext::`vftable'{for `ThreatAbstraction::IDetectionContext'}" ??_7CQuarantineDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x180046240: "__cdecl Init_thread_footer" _Init_thread_footer
0x18005E0C8: "72" ??_C@_15NGAFJGD@?$AA7?$AA2?$AA?$AA@
0x1800292A0: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnThreatsChanged(void) __ptr64" ?OnThreatsChanged@IContextEventsImpl@ThreatAbstraction@@MEAAXXZ
0x18007F860: "__vectorcall ??_R0?AVCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@" ??_R0?AVCQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@@8
0x18002B3F0: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::IDetectionContext::CResource::GetScheme(void)const __ptr64" ?GetScheme@CResource@IDetectionContext@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x180078A90: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x18002D980: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x180017058: WPP_SF_PDP
0x1800399F4: "long __cdecl MpConfigUtils::GetProductLocalizedName(unsigned short * __ptr64 * __ptr64)" ?GetProductLocalizedName@MpConfigUtils@@YAJPEAPEAG@Z
0x180050080: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@6BIRefObject@1@@
0x180062060: "const ThreatAbstraction::COnDemandDetectionContext::`vbtable'{for `ThreatAbstraction::IThreatInfo'}" ??_8COnDemandDetectionContext@ThreatAbstraction@@7BIThreatInfo@1@@
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IThreatInfo::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x180031140: "protected: virtual unsigned long * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityImpl(void * __ptr64,unsigned long) __ptr64" ?GetSidSubAuthorityImpl@CWin32@MorroCommon@@MEAAPEAKPEAXK@Z
0x18003F164: "private: __cdecl Microsoft::SecurityClient::CBrandedValues::CBrandedValues(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ??0CBrandedValues@SecurityClient@Microsoft@@AEAA@PEBUIXMLReader@12@@Z
0x18004D650: "const ATL::CAtlStringMgr::`vftable'" ??_7CAtlStringMgr@ATL@@6B@
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005B058: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x18002F1AC: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetAvailableAction(unsigned long)const __ptr64" ?GetAvailableAction@CThreatInfo@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@K@Z
0x18002F500: WPP_SF_SSS
0x180068520: "const ThreatAbstraction::IDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext'}" ??_R4IDetectionContext@ThreatAbstraction@@6B01@@
0x18001D58C: "public: __cdecl CSmartPtr<class CWString const,class VolatileOps<class CWString const> >::~CSmartPtr<class CWString const,class VolatileOps<class CWString const> >(void) __ptr64" ??1?$CSmartPtr@$$CBVCWString@@V?$VolatileOps@$$CBVCWString@@@@@@QEAA@XZ
0x18005F968: "272" ??_C@_17BOGIHDKJ@?$AA2?$AA7?$AA2?$AA?$AA@
0x18005E610: "152" ??_C@_17NNCPNFEB@?$AA1?$AA5?$AA2?$AA?$AA@
0x18005D780: "Terminal" ??_C@_1BC@KDENIICE@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AA?$AA@
0x18000CA58: "public: __cdecl AMIndication::~AMIndication(void) __ptr64" ??1AMIndication@@QEAA@XZ
0x18001B978: "public: __cdecl ThreatAbstraction::CHeartBeatController::CHeartBeatController(void) __ptr64" ??0CHeartBeatController@ThreatAbstraction@@QEAA@XZ
0x180060A30: "ScheduleQuickScanTime" ??_C@_1CM@JPMALHNM@?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180025D28: "void __cdecl std::_Pop_heap_0<class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct ThreatAbstraction::time_compare>(class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64,struct ThreatAbstraction::time_compare,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > * __ptr64)" ??$_Pop_heap_0@PEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@V1@Utime_compare@ThreatAbstraction@@@std@@YAXPEAV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@0Utime_compare@ThreatAbstraction@@0@Z
0x180050288: "const MorroCommon::CFileUtils::`vftable'" ??_7CFileUtils@MorroCommon@@6B@
0x18003A2D0: "[thunk]:public: virtual int __cdecl CWString::TryLock`vtordisp{4294967292,0}' (void)const __ptr64" ?TryLock@CWString@@$4PPPPPPPM@A@EBAHXZ
0x18005CDC0: "operation not permitted" ??_C@_0BI@OHIEJAAB@operation?5not?5permitted?$AA@
0x180005464: "public: __cdecl CSmartPtr<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts> >::~CSmartPtr<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts> >(void) __ptr64" ??1?$CSmartPtr@VCActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@V?$VolatileOps@VCActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18004DE60: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`vftable'{for `ILockable'}" ??_7CUpdateContext@CHeartBeatController@ThreatAbstraction@@6BILockable@@@
0x18005E560: "140" ??_C@_17LMHKMOGP@?$AA1?$AA4?$AA0?$AA?$AA@
0x18005E220: "110" ??_C@_17OMLHFPNM@?$AA1?$AA1?$AA0?$AA?$AA@
0x18005FBD8: "293" ??_C@_17JMNOHFLM@?$AA2?$AA9?$AA3?$AA?$AA@
0x18005E8E0: "177" ??_C@_17KHDJIEHI@?$AA1?$AA7?$AA7?$AA?$AA@
0x180056260: BaseStatus_rtti
0x180024690: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CContextManager::`vector deleting destructor'`vtordisp{4294967292,136}' (unsigned int) __ptr64" ??_ECContextManager@ThreatAbstraction@@$4PPPPPPPM@II@EAAPEAXI@Z
0x180061D80: "DisableAntiSpyware" ??_C@_1CG@HEODCEJG@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAA?$AAn?$AAt?$AAi?$AAS?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180069260: "const ThreatAbstraction::CScanHistoryController::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CScanHistoryController@ThreatAbstraction@@6BILockable@@@
0x180068F68: "__vectorcall ??_R1A@?0A@EA@CUpdateContext@CWDOScanController@ThreatAbstraction" ??_R1A@?0A@EA@CUpdateContext@CWDOScanController@ThreatAbstraction@@8
0x18000ED00: MSFT_MpThreatCatalog_CreateInstance
0x180062068: "const ThreatAbstraction::CActiveThreatsContextManager::`vbtable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_8CActiveThreatsContextManager@ThreatAbstraction@@7BIContextEventsImpl@1@@
0x1800623B8: "*.exe" ??_C@_1M@FEDKBPCI@?$AA?$CK?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18004E970: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x180041000: "public: void __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,bool,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> >,0> >::clear(void) __ptr64" ?clear@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_NU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@4@$0A@@std@@@std@@QEAAXXZ
0x18006DAC0: "const Microsoft::SecurityClient::IXMLFeatures::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLFeatures@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18005F658: "256" ??_C@_17NMMCEFPF@?$AA2?$AA5?$AA6?$AA?$AA@
0x180031120: "protected: virtual int __cdecl MorroCommon::CWin32::HeapFreeImpl(void * __ptr64,unsigned long,void * __ptr64) __ptr64" ?HeapFreeImpl@CWin32@MorroCommon@@MEAAHPEAXK0@Z
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18007EE60: "__vectorcall ??_R0?AVCError@" ??_R0?AVCError@@@8
0x180021658: "public: virtual __cdecl ThreatAbstraction::IContextEventsImpl::~IContextEventsImpl(void) __ptr64" ??1IContextEventsImpl@ThreatAbstraction@@UEAA@XZ
0x18005AB98: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1800680E8: "__vectorcall ??_R1A@?0A@EA@IThreatInfo@ThreatAbstraction" ??_R1A@?0A@EA@IThreatInfo@ThreatAbstraction@@8
0x18002C42C: "public: virtual long __cdecl ThreatAbstraction::CDetectionContextBase::GetActionStatus(void)const __ptr64" ?GetActionStatus@CDetectionContextBase@ThreatAbstraction@@UEBAJXZ
0x18005B2D8: "__cdecl _imp_MpFreeMemory" __imp_MpFreeMemory
0x180062438: WPP_3408dc061f1b30530933f81725b4d779_Traceguids
0x18004E890: "const ThreatAbstraction::CScanHistoryContextManager::`vftable'{for `ILockable'}" ??_7CScanHistoryContextManager@ThreatAbstraction@@6BILockable@@@
0x180068430: "const ThreatAbstraction::IDetectionContexts::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4IDetectionContexts@ThreatAbstraction@@6BILockable@@@
0x18005DE40: "BehaviorMonitorEnabled" ??_C@_1CO@IDCJKFLL@?$AAB?$AAe?$AAh?$AAa?$AAv?$AAi?$AAo?$AAr?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18005AB70: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18005E530: "136" ??_C@_17IEBEKBAL@?$AA1?$AA3?$AA6?$AA?$AA@
0x180022564: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextCompleted(class ThreatAbstraction::IDetectionContext const * __ptr64) __ptr64" ?OnContextCompleted@CContextManager@ThreatAbstraction@@MEAAXPEBVIDetectionContext@2@@Z
0x180060B10: "Signature_AuGracePeriod" ??_C@_1DA@DHDKIONA@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x18006BBD0: "const ThreatAbstraction::CQuarantineThreatInfo::`RTTI Complete Object Locator'{for `ThreatAbstraction::IThreatInfo'}" ??_R4CQuarantineThreatInfo@ThreatAbstraction@@6BIThreatInfo@1@@
0x18003B7B0: "public: static long __cdecl CommonUtil::CSprintfAlloc<struct CommonUtil::CNewSprintfPolicy<unsigned short>,260>::DoFormating(unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,char * __ptr64,unsigned __int64)" ?DoFormating@?$CSprintfAlloc@U?$CNewSprintfPolicy@G@CommonUtil@@$0BAE@@CommonUtil@@SAJPEA_KPEAPEAGPEBGPEAD_K@Z
0x18001B3A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::CUpdateContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUpdateContext@CWDOScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x1800169D8: "public: __cdecl ATL::CComPtr<struct IXMLDOMNodeList>::~CComPtr<struct IXMLDOMNodeList>(void) __ptr64" ??1?$CComPtr@UIXMLDOMNodeList@@@ATL@@QEAA@XZ
0x18006CC08: "const Microsoft::SecurityClient::IXMLReader::`RTTI Complete Object Locator'{for `Microsoft::SecurityClient::IXMLReader'}" ??_R4IXMLReader@SecurityClient@Microsoft@@6B012@@
0x18005AB18: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18007FDF0: "__vectorcall ??_R0?AUIBrandParams@MpCommonEx@" ??_R0?AUIBrandParams@MpCommonEx@@@8
0x18000ED00: MSFT_MpThreatDetection_CreateInstance
0x18002A310: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetCheckpointID`vtordisp{4294967292,40}' (void)const __ptr64" ?GetCheckpointID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18002D620: "public: __cdecl ThreatAbstraction::CQuarantineThreatInfo::CQuarantineThreatInfo(struct tagMPTHREAT_INFO * __ptr64) __ptr64" ??0CQuarantineThreatInfo@ThreatAbstraction@@QEAA@PEAUtagMPTHREAT_INFO@@@Z
0x180069C08: "__vectorcall ??_R1A@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@" ??_R1A@?0A@EA@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@8
0x180069A78: "__vectorcall ??_R1A@BA@BA@FA@IActionEvents@ThreatAbstraction" ??_R1A@BA@BA@FA@IActionEvents@ThreatAbstraction@@8
0x18006CF00: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std" ??_R1BA@?0A@EA@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@8
0x18002F338: "public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CThreatInfo::GetDefaultAction(void)const __ptr64" ?GetDefaultAction@CThreatInfo@ThreatAbstraction@@UEBA?AW4PermissibleAction@2@XZ
0x1800831AA: "bool volatile g_fActiveIndication" ?g_fActiveIndication@@3_NC
0x180015A08: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CExceptionThreats::`vector deleting destructor'(unsigned int) __ptr64" ??_ECExceptionThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x180060C38: "FallbackOrder" ??_C@_1BM@DMLGECDN@?$AAF?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x18005E598: "ThreatStatusID" ??_C@_1BO@GNCNEAIP@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAI?$AAD?$AA?$AA@
0x18001D070: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfoQueue::`vector deleting destructor'`vtordisp{4294967292,120}' (unsigned int) __ptr64" ??_ECScanProgressInfoQueue@ThreatAbstraction@@$4PPPPPPPM@HI@EAAPEAXI@Z
0x180043F64: "class CommonUtil::CStdMoveable<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct CommonUtil::CStdMoveableDefaultPolicy<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > __cdecl CommonUtil::CStringCopyW(unsigned short const * __ptr64)" ?CStringCopyW@CommonUtil@@YA?AV?$CStdMoveable@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$CStdMoveableDefaultPolicy@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@2@@1@PEBG@Z
0x18005CD48: "no such process" ??_C@_0BA@ENLPPKBN@no?5such?5process?$AA@
0x18003DCCC: "public: virtual __cdecl Microsoft::SecurityClient::CBrandedStrings::~CBrandedStrings(void) __ptr64" ??1CBrandedStrings@SecurityClient@Microsoft@@UEAA@XZ
0x18006B0F8: "const ThreatAbstraction::IAutoIgnoreThreats::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_R4IAutoIgnoreThreats@ThreatAbstraction@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x18001B3F4: "public: __cdecl ThreatAbstraction::CWDOScanController::CWDOScanController(void) __ptr64" ??0CWDOScanController@ThreatAbstraction@@QEAA@XZ
0x18001B724: "public: static void __cdecl ThreatAbstraction::CWDOScanController::Shutdown(void)" ?Shutdown@CWDOScanController@ThreatAbstraction@@SAXXZ
0x18007F100: "__vectorcall ??_R0?AVCActiveThreatsController@ThreatAbstraction@" ??_R0?AVCActiveThreatsController@ThreatAbstraction@@@8
0x180041BD4: "public: virtual __cdecl Microsoft::SecurityClient::CDeploymentBrand::~CDeploymentBrand(void) __ptr64" ??1CDeploymentBrand@SecurityClient@Microsoft@@UEAA@XZ
0x18005D720: "Source" ??_C@_1O@FDGFDJPD@?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x180050030: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@6BIRefObject@1@@
0x18004E250: "const ThreatAbstraction::CActiveThreatsContextManager::`vftable'{for `CRefCountedBase'}" ??_7CActiveThreatsContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x180061F38: "const ThreatAbstraction::CActiveThreatsController::`vbtable'{for `CCritSectionBase'}" ??_8CActiveThreatsController@ThreatAbstraction@@7BCCritSectionBase@@@
0x18005B490: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000EFF0: MSFT_MpSignature_Invoke_Update
0x1800671A0: "__vectorcall ??_R1BA@?0A@EA@CRefCountedBase" ??_R1BA@?0A@EA@CRefCountedBase@@8
0x18000B508: "protected: void __cdecl std::vector<struct _GUID,class std::allocator<struct _GUID> >::_Xlen(void)const __ptr64" ?_Xlen@?$vector@U_GUID@@V?$allocator@U_GUID@@@std@@@std@@IEBAXXZ
0x18005AC00: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18001F8A4: "public: __cdecl CSafePtr<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext> >::~CSafePtr<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext,class VolatileOps<class ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext> >(void) __ptr64" ??1?$CSafePtr@VCCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@V?$VolatileOps@VCCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18005B130: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180082868: "__cdecl _security_cookie" __security_cookie
0x18006C040: "__vectorcall ??_R3IBrandParams@MpCommonEx" ??_R3IBrandParams@MpCommonEx@@8
0x18006AE50: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_R4?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x18006BE58: "__vectorcall ??_R2IBrandParams@MpCommonEx" ??_R2IBrandParams@MpCommonEx@@8
0x18000B7DC: "protected: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> >,0> >::_Destroy_if_not_nil(struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Destroy_if_not_nil@?$_Tree@V?$_Tmap_traits@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@$0A@@std@@@std@@IEAAXPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@Z
0x180062638: "GetFileVersionInfoExW" ??_C@_0BG@GEGOAKFF@GetFileVersionInfoExW?$AA@
0x1800679D0: "const CThreatDetails::`RTTI Complete Object Locator'" ??_R4CThreatDetails@@6B@
0x18005E900: "181" ??_C@_17HDAEGJHB@?$AA1?$AA8?$AA1?$AA?$AA@
0x1800182E4: "private: long __cdecl ThreatAbstraction::COnDemandController::StartScan(enum tagMPSCAN_TYPE,unsigned long,class ThreatAbstraction::IScanProgress * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64) __ptr64" ?StartScan@COnDemandController@ThreatAbstraction@@AEAAJW4tagMPSCAN_TYPE@@KPEAVIScanProgress@2@KPEAPEBG@Z
0x18005AB58: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18005CE18: "protocol error" ??_C@_0P@FNPOCJBE@protocol?5error?$AA@
0x180017000: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::AddRef`vtordisp{4294967292,64}' (void)const __ptr64" ?AddRef@CPseudoRefCountedBase@@$4PPPPPPPM@EA@EBAJXZ
0x180016EE8: "public: static long __cdecl ThreatAbstraction::CServiceStatusController::Initialize(void)" ?Initialize@CServiceStatusController@ThreatAbstraction@@SAJXZ
0x18006D518: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_comp@$0A@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@8
0x180033E1C: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::Release(void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18004D470: "const CThreatCatalogManager::`vftable'" ??_7CThreatCatalogManager@@6B@
0x18000B0A4: "public: void __cdecl std::vector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> >::push_back(struct tagASRRuleDefaultAction const & __ptr64) __ptr64" ?push_back@?$vector@UtagASRRuleDefaultAction@@V?$allocator@UtagASRRuleDefaultAction@@@std@@@std@@QEAAXAEBUtagASRRuleDefaultAction@@@Z
0x18005DE70: "42" ??_C@_15ILPECLMN@?$AA4?$AA2?$AA?$AA@
0x18000EFB0: MSFT_MpPreference_Invoke_Add
0x1800628C0: ".//BrandedValue[@name and @value" ??_C@_1EE@IIOCEIEK@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$FL?$AA?$EA?$AAn?$AAa?$AAm?$AAe?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AA?$EA?$AAv?$AAa?$AAl?$AAu?$AAe@
0x18005B220: "__cdecl _imp_MpConfigUninitialize" __imp_MpConfigUninitialize
0x18006A160: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4CDetectionContextsBase@CContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18006CBE0: "const Microsoft::SecurityClient::CXMLReader::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4CXMLReader@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18003060C: "long __cdecl MorroCommon::HrCStringFormat(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned short const * __ptr64,...)" ?HrCStringFormat@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEBGZZ
0x180019430: "[thunk]:public: virtual void __cdecl CCritSectionBase::Unlock`vtordisp{4294967292,40}' (void)const __ptr64" ?Unlock@CCritSectionBase@@$4PPPPPPPM@CI@EBAXXZ
0x180083524: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUyizmwrmtUyizmwrmtcnoUoryUlyquivUznwGEUhgwzucOlyq@BrandingXML" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUznxlivUzmgrnzodzivUhlfixvUzkkozbviUxlnnlmUyizmwrmtUyizmwrmtcnoUoryUlyquivUznwGEUhgwzucOlyq@BrandingXML
0x18005AF58: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x1800615F0: WPP_b62e782a62eb32d8dacf073bfe4b040d_Traceguids
0x18003AFC0: "long __cdecl CommonUtil::UtilLoadLibraryEx(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned long)" ?UtilLoadLibraryEx@CommonUtil@@YAJPEAPEAUHINSTANCE__@@PEBGK@Z
0x180061FA8: WPP_ed29a18e0f9c39e92408d25725113d70_Traceguids
0x18003C004: "long __cdecl CommonUtil::UtilRegGetValueAlloc(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned __int64 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64)" ?UtilRegGetValueAlloc@CommonUtil@@YAJPEAUHKEY__@@PEBGKPEAKPEA_KPEAPEAE_K@Z
0x18004D6F0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vftable'" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6B@
0x18005CE90: "state not recoverable" ??_C@_0BG@MPLKFPAE@state?5not?5recoverable?$AA@
0x1800302EC: "public: __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >(unsigned short const * __ptr64,int,struct ATL::IAtlStringMgr * __ptr64) __ptr64" ??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBGHPEAUIAtlStringMgr@1@@Z
0x18005AB90: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180039E50: "public: virtual void * __ptr64 __cdecl CCritSectionBase::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCritSectionBase@@UEAAPEAXI@Z
0x18005DB98: "21" ??_C@_15EPBIGHDO@?$AA2?$AA1?$AA?$AA@
0x18005B2C0: "__cdecl _imp_MpConfigRegisterForNotifications" __imp_MpConfigRegisterForNotifications
0x180042998: "private: static void __cdecl Microsoft::SecurityClient::CDeploymentBrand::ApplySubstitution(class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > const & __ptr64,class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64)" ?ApplySubstitution@CDeploymentBrand@SecurityClient@Microsoft@@CAXAEBV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@PEAV?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@Z
0x18001D030: "protected: void __cdecl std::deque<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > > >::_Xlen(void)const __ptr64" ?_Xlen@?$deque@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@@std@@@std@@IEBAXXZ
0x18005FF90: "MpThreatCatalog" ??_C@_0BA@IEBGOFCF@MpThreatCatalog?$AA@
0x18005B078: "__cdecl _imp_SetTimer" __imp_SetTimer
0x180061F40: "const ThreatAbstraction::CActiveThreatsController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CActiveThreatsController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x180030B60: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateMutexImpl(struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?CreateMutexImpl@CWin32@MorroCommon@@MEAAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBG@Z
0x18006BD48: "__vectorcall ??_R3CWin32@MorroCommon" ??_R3CWin32@MorroCommon@@8
0x18006BE38: "__vectorcall ??_R2?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil" ??_R2?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@8
0x18006BD38: "__vectorcall ??_R2CWin32@MorroCommon" ??_R2CWin32@MorroCommon@@8
0x18006C010: "__vectorcall ??_R3?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil" ??_R3?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@8
0x180027F38: "public: __cdecl ThreatAbstraction::CAutoActionManager::CAutoActionManager(struct ThreatAbstraction::ISimpleMpConfigWriter * __ptr64) __ptr64" ??0CAutoActionManager@ThreatAbstraction@@QEAA@PEAUISimpleMpConfigWriter@1@@Z
0x180029780: "[thunk]:public: virtual enum ThreatAbstraction::DetectionType __cdecl ThreatAbstraction::CDetectionContextBase::GetDetectionType`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDetectionType@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4DetectionType@2@XZ
0x18005AEC8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180078B40: "__stdcall CT??_R0?AW4_MI_Result@@" _CT??_R0?AW4_MI_Result@@@84
0x1800107D4: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpThreatRollupFree>::~CUniqueHandle<struct CAutoMpThreatRollupFree>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpThreatRollupFree@@@CommonUtil@@QEAA@XZ
0x18005B0B8: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x18005E008: "52" ??_C@_15EAKIPIGI@?$AA5?$AA2?$AA?$AA@
0x18005AC60: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180060318: "Get-MpPreference" ??_C@_1CC@BICNLGPG@?$AAG?$AAe?$AAt?$AA?9?$AAM?$AAp?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x180068F48: "__vectorcall ??_R2CWDOScanController@ThreatAbstraction" ??_R2CWDOScanController@ThreatAbstraction@@8
0x18006D330: "__vectorcall ??_R2IXMLBrandedValues@SecurityClient@Microsoft" ??_R2IXMLBrandedValues@SecurityClient@Microsoft@@8
0x18005B120: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x180068FD0: "__vectorcall ??_R3CWDOScanController@ThreatAbstraction" ??_R3CWDOScanController@ThreatAbstraction@@8
0x18006D700: "__vectorcall ??_R3IXMLBrandedValues@SecurityClient@Microsoft" ??_R3IXMLBrandedValues@SecurityClient@Microsoft@@8
0x18005DC30: "28" ??_C@_15DCBACILE@?$AA2?$AA8?$AA?$AA@
0x180031450: "protected: virtual int __cdecl MorroCommon::CWin32::ControlServiceImpl(struct SC_HANDLE__ * __ptr64,unsigned long,struct _SERVICE_STATUS * __ptr64) __ptr64" ?ControlServiceImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@KPEAU_SERVICE_STATUS@@@Z
0x18006C468: "__vectorcall ??_R3CLockEntireFile@MorroCommon" ??_R3CLockEntireFile@MorroCommon@@8
0x18006CE60: "__vectorcall ??_R1A@?0A@EA@IXMLBrandedStrings@SecurityClient@Microsoft" ??_R1A@?0A@EA@IXMLBrandedStrings@SecurityClient@Microsoft@@8
0x18006C3F0: "__vectorcall ??_R2CLockEntireFile@MorroCommon" ??_R2CLockEntireFile@MorroCommon@@8
0x180014558: "long __cdecl MorroCommon::HrAtlArrayPushBack<unsigned short const * __ptr64,class ATL::CElementTraits<unsigned short const * __ptr64> >(class ATL::CAtlArray<unsigned short const * __ptr64,class ATL::CElementTraits<unsigned short const * __ptr64> > & __ptr64,unsigned short const * __ptr64 const & __ptr64)" ??$HrAtlArrayPushBack@PEBGV?$CElementTraits@PEBG@ATL@@@MorroCommon@@YAJAEAV?$CAtlArray@PEBGV?$CElementTraits@PEBG@ATL@@@ATL@@AEBQEBG@Z
0x18005E4E8: "135" ??_C@_17JGKBAOOF@?$AA1?$AA3?$AA5?$AA?$AA@
0x180061F98: "const ThreatAbstraction::CScanHistoryController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CScanHistoryController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x18007F1E0: "__vectorcall ??_R0?AVCUpdateContext@CHeartBeatController@ThreatAbstraction@" ??_R0?AVCUpdateContext@CHeartBeatController@ThreatAbstraction@@@8
0x18005AE20: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18006C2C8: "const CommonUtil::IRefObject::`RTTI Complete Object Locator'" ??_R4IRefObject@CommonUtil@@6B@
0x18006C640: "__vectorcall ??_R2CWString" ??_R2CWString@@8
0x18006C8C8: "__vectorcall ??_R3CWString" ??_R3CWString@@8
0x180050890: "const Microsoft::SecurityClient::CDeploymentBrand::`vftable'{for `Microsoft::SecurityClient::IXMLDeployment'}" ??_7CDeploymentBrand@SecurityClient@Microsoft@@6BIXMLDeployment@12@@
0x18005C710: "not enough memory" ??_C@_0BC@ENOOLCNF@not?5enough?5memory?$AA@
0x18005C8D0: "interrupted" ??_C@_0M@EGEKIIMP@interrupted?$AA@
0x18001B878: "public: __cdecl ThreatAbstraction::CHeartBeatController::CUpdateContext::CUpdateContext(void) __ptr64" ??0CUpdateContext@CHeartBeatController@ThreatAbstraction@@QEAA@XZ
0x180079100: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-1
0x180062BEC: "id" ??_C@_15NFICGAJK@?$AAi?$AAd?$AA?$AA@
0x18004DFF0: "const ThreatAbstraction::CScanProgressInfoQueue::`vftable'{for `ILockable'}" ??_7CScanProgressInfoQueue@ThreatAbstraction@@6BILockable@@@
0x18002A590: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CQuarantineDetectionContext::SetAction`vtordisp{4294967292,0}' (enum ThreatAbstraction::PermissibleAction) __ptr64" ?SetAction@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EAAJW4PermissibleAction@2@@Z
0x180068E68: "__vectorcall ??_R1A@?0A@EA@CActiveThreatsController@ThreatAbstraction" ??_R1A@?0A@EA@CActiveThreatsController@ThreatAbstraction@@8
0x180035750: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@PEAGK@Z
0x18005CCB0: "no child process" ??_C@_0BB@IEPBLJHK@no?5child?5process?$AA@
0x180031720: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetPrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?GetPrivateProfileStringImpl@CWin32@MorroCommon@@MEAAKPEBG00PEAGK0@Z
0x18005AFB8: "__cdecl _imp_VariantInit" __imp_VariantInit
0x180005440: "public: virtual void __cdecl MpWmiCleanProgress::OnActionsStart(void) __ptr64" ?OnActionsStart@MpWmiCleanProgress@@UEAAXXZ
0x18004DF90: "const ThreatAbstraction::IScanProgressInfoQueue::`vftable'{for `ILockable'}" ??_7IScanProgressInfoQueue@ThreatAbstraction@@6BILockable@@@
0x1800163AC: "long __cdecl ThreatAbstraction::GetController<class ThreatAbstraction::CConfigController>(class ThreatAbstraction::CConfigController * __ptr64 * __ptr64)" ??$GetController@VCConfigController@ThreatAbstraction@@@ThreatAbstraction@@YAJPEAPEAVCConfigController@0@@Z
0x18005E960: "187" ??_C@_17FGGPDGKN@?$AA1?$AA8?$AA7?$AA?$AA@
0x18005E708: "158" ??_C@_17LCJCDFCF@?$AA1?$AA5?$AA8?$AA?$AA@
0x18002ACD0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetDefaultActionName`vtordisp{4294967292,8}' (void)const __ptr64" ?GetDefaultActionName@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x18005B5D8: "__cdecl _xl_a" __xl_a
0x18002A9D0: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetShortDescription`vtordisp{4294967292,8}' (void)const __ptr64" ?GetShortDescription@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAPEBVCWString@@XZ
0x18005FEE0: "Set_Resources" ??_C@_0O@OFKMPOHF@Set_Resources?$AA@
0x18004F0D8: "const ThreatAbstraction::CScanHistoryDetectionContext::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CScanHistoryDetectionContext@ThreatAbstraction@@6BIThreatInfo@1@@
0x180068C28: "__vectorcall ??_R1A@?0A@EA@ISimpleMpConfigWriter@ThreatAbstraction" ??_R1A@?0A@EA@ISimpleMpConfigWriter@ThreatAbstraction@@8
0x180078BD0: "__cdecl CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24" _CT??_R0?AVCHResultException@CommonUtil@@@8??0CHResultException@CommonUtil@@QEAA@AEBV01@@Z24
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedStrings>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedStrings@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x18005ADC8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18005DE9C: "43" ??_C@_15DDEIEMKI@?$AA4?$AA3?$AA?$AA@
0x18002F038: "public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsKnownBad(void)const __ptr64" ?IsKnownBad@CThreatInfo@ThreatAbstraction@@UEBAHXZ
0x1800169D8: "public: __cdecl ATL::CComPtr<struct IXMLDOMNamedNodeMap>::~CComPtr<struct IXMLDOMNamedNodeMap>(void) __ptr64" ??1?$CComPtr@UIXMLDOMNamedNodeMap@@@ATL@@QEAA@XZ
0x1800696B8: "const ThreatAbstraction::IScanProgressInfoQueue::`RTTI Complete Object Locator'{for `ThreatAbstraction::IScanProgressInfoQueue'}" ??_R4IScanProgressInfoQueue@ThreatAbstraction@@6B01@@
0x18003B478: "long __cdecl CommonUtil::UtilIsFileExists(unsigned short const * __ptr64)" ?UtilIsFileExists@CommonUtil@@YAJPEBG@Z
0x1800610C0: "Windows Defender Exploit Guard\C" ??_C@_1JC@CGMKLLMH@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAi?$AAt?$AA?5?$AAG?$AAu?$AAa?$AAr?$AAd?$AA?2?$AAC@
0x180030BA0: "protected: virtual int __cdecl MorroCommon::CWin32::ReleaseMutexImpl(void * __ptr64) __ptr64" ?ReleaseMutexImpl@CWin32@MorroCommon@@MEAAHPEAX@Z
0x18005DF68: "1.0.0.0" ??_C@_1BA@EHDGIHHN@?$AA1?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x18005D278: "ArrayType" ??_C@_1BE@JIMEOFNA@?$AAA?$AAr?$AAr?$AAa?$AAy?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180078C80: "__cdecl TI2PEAVEHresultException@MorroCommon@@" _TI2PEAVEHresultException@MorroCommon@@
0x18006AF18: "const ThreatAbstraction::CAutoIgnoreThreats::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CAutoIgnoreThreats@ThreatAbstraction@@6BILockable@@@
0x180013780: "public: long __cdecl CData::SetCustomScanFolders(class ATL::CAtlArray<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >,class ATL::CElementTraits<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > const & __ptr64) __ptr64" ?SetCustomScanFolders@CData@@QEAAJAEBV?$CAtlArray@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
0x1800611F0: "Signatures_DefinitionUpdateFileS" ??_C@_1FK@NHCNFHP@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAs?$AA_?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAS@
0x18005DF60: "47" ??_C@_15LMCKNLPP@?$AA4?$AA7?$AA?$AA@
0x18005CEC8: "timed out" ??_C@_09KJPPMAOI@timed?5out?$AA@
0x180031050: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::LockResourceImpl(void * __ptr64) __ptr64" ?LockResourceImpl@CWin32@MorroCommon@@MEAAPEAXPEAX@Z
0x18005CC78: "network reset" ??_C@_0O@FNPDBHEE@network?5reset?$AA@
0x18005AFB0: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x180036D80: "protected: virtual bool __cdecl MorroCommon::CPathUtils::IsPathExecutableImpl(unsigned short const * __ptr64) __ptr64" ?IsPathExecutableImpl@CPathUtils@MorroCommon@@MEAA_NPEBG@Z
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedStrings::`vector deleting destructor'(unsigned int) __ptr64" ??_EIXMLBrandedStrings@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x180036E78: "public: static long __cdecl MorroCommon::CFileUtils::ReadBuffer(unsigned char * __ptr64,unsigned __int64,class ATL::CComBSTR & __ptr64)" ?ReadBuffer@CFileUtils@MorroCommon@@SAJPEAE_KAEAVCComBSTR@ATL@@@Z
0x18005B280: "__cdecl _imp_MpThreatOpen" __imp_MpThreatOpen
0x18003A000: "public: virtual long __cdecl CError::GetErrorCode(void)const __ptr64" ?GetErrorCode@CError@@UEBAJXZ
0x18005E3F0: "DetectionSourceTypeID" ??_C@_1CM@BFJIGKJE@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AAI?$AAD?$AA?$AA@
0x18002BD4C: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetShortDescription(void)const __ptr64" ?GetShortDescription@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005AB28: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180003170: "protected: static void __cdecl ATL::CSimpleStringT<unsigned short,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@G$0A@@ATL@@KAXXZ
0x180017710: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::CScanContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScanContext@COnDemandController@ThreatAbstraction@@UEAAPEAXI@Z
0x18005E340: "DetectionID" ??_C@_1BI@BHLPCECP@?$AAD?$AAe?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?$AA@
0x180005498: "public: __cdecl CommonUtil::AutoRef<class ThreatAbstraction::CHeartBeatController::CUpdateContext>::~AutoRef<class ThreatAbstraction::CHeartBeatController::CUpdateContext>(void) __ptr64" ??1?$AutoRef@VCUpdateContext@CHeartBeatController@ThreatAbstraction@@@CommonUtil@@QEAA@XZ
0x1800335C0: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedIcon(struct HICON__ * __ptr64 * __ptr64,unsigned int) __ptr64" ?LoadBrandedIcon@CBrandedAPI@MpCommonEx@@UEAAJPEAPEAUHICON__@@I@Z
0x18002A510: "[thunk]:public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::GetTimeStamp`vtordisp{4294967292,40}' (struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAXAEAU_FILETIME@@@Z
0x180011788: "class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64 __cdecl std::_Uninit_move<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > & __ptr64,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V12@@std@@YAPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x180083608: "__cdecl _onexitbegin" __onexitbegin
0x180080188: "__vectorcall ??_R0?AVCWString@" ??_R0?AVCWString@@@8
0x18006C4D0: "__vectorcall ??_R2CLockedCertCheckImpl@MorroCommon" ??_R2CLockedCertCheckImpl@MorroCommon@@8
0x18005CAA0: "argument list too long" ??_C@_0BH@CAKOHOMI@argument?5list?5too?5long?$AA@
0x18006C778: "__vectorcall ??_R1BA@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std" ??_R1BA@?0A@EA@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@8
0x18006CD40: "__vectorcall ??_R2?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std" ??_R2?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@8
0x18000ED00: MSFT_MpComputerStatus_ModifyInstance
0x18006C548: "__vectorcall ??_R3CLockedCertCheckImpl@MorroCommon" ??_R3CLockedCertCheckImpl@MorroCommon@@8
0x180061CC0: "Failed to send heart beat." ??_C@_1DG@GIEEPMPL@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs?$AAe?$AAn?$AAd?$AA?5?$AAh?$AAe?$AAa?$AAr?$AAt?$AA?5?$AAb?$AAe?$AAa?$AAt?$AA?4?$AA?$AA@
0x180081400: "__vectorcall ??_R0?AV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@" ??_R0?AV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@@std@@@8
0x18006D150: "__vectorcall ??_R3?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std" ??_R3?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@8
0x180029270: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanComplete(class ThreatAbstraction::IDetectionContexts const * __ptr64,long,int) __ptr64" ?OnRoutineCleanComplete@IContextEventsImpl@ThreatAbstraction@@MEAAXPEBVIDetectionContexts@2@JH@Z
0x180027B40: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_ECQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180039F74: "public: __cdecl CError::CError(long) __ptr64" ??0CError@@QEAA@J@Z
0x180030EB0: "protected: virtual unsigned char * __ptr64 __cdecl MorroCommon::CWin32::GetSidSubAuthorityCountImpl(void * __ptr64) __ptr64" ?GetSidSubAuthorityCountImpl@CWin32@MorroCommon@@MEAAPEAEPEAX@Z
0x180035BCC: "public: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::CombinePath(unsigned short const * __ptr64 const,unsigned short const * __ptr64 const)" ?CombinePath@CPathUtils@MorroCommon@@SA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBG0@Z
0x18002D2AC: "protected: class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > > > __cdecl std::_Tree<class std::_Tset_traits<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,struct std::less<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > >,0> >::_Insert_at<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64,struct std::_Nil>(bool,struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64,class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64,struct std::_Nil) __ptr64" ??$_Insert_at@AEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U_Nil@std@@@?$_Tree@V?$_Tset_traits@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U?$less@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@3@$0A@@std@@@std@@IEAA?AV?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@1@_NPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@1@AEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@U_Nil@1@@Z
0x180061F60: "const ThreatAbstraction::CWDOScanController::`vbtable'" ??_8CWDOScanController@ThreatAbstraction@@7B@
0x180034470: "public: void __cdecl MpCommonEx::CBrandedResources::LoadBrandedResource(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned int,unsigned short const * __ptr64)const __ptr64" ?LoadBrandedResource@CBrandedResources@MpCommonEx@@QEBAXPEAPEAEPEAKIPEBG@Z
0x180001630: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Iostream_error_category@std@@UEAAPEAXI@Z
0x180039710: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x180033940: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedResource(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned int,unsigned short const * __ptr64) __ptr64" ?LoadBrandedResource@CBrandedAPI@MpCommonEx@@UEAAJPEAPEAEPEAKIPEBG@Z
0x18005B1A8: "__cdecl _imp_PathFileExistsW" __imp_PathFileExistsW
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandParams>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIBrandParams@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180014480: "public: __cdecl CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >::~CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >(void) __ptr64" ??1?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@QEAA@XZ
0x180050308: "const MorroCommon::CLockedCertCheckImpl::`vftable'" ??_7CLockedCertCheckImpl@MorroCommon@@6B@
0x18005AF60: "__cdecl _imp_SwitchToThread" __imp_SwitchToThread
0x18005E8E8: "178" ??_C@_17PPFKJECO@?$AA1?$AA7?$AA8?$AA?$AA@
0x180068878: "__vectorcall ??_R1A@?0A@EA@exception" ??_R1A@?0A@EA@exception@@8
0x180060670: "Remediation" ??_C@_1BI@CBNPFHFI@?$AAR?$AAe?$AAm?$AAe?$AAd?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180029740: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetDefaultActionName`vtordisp{4294967292,0}' (void)const __ptr64" ?GetDefaultActionName@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x180012650: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAtlStringMgr@ATL@@UEAAPEAXI@Z
0x18000B8A4: "class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64 __cdecl std::_Uninit_move<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > >,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > >(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,struct std::_Wrap_alloc<class std::allocator<class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > > > & __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,struct std::_Nonscalar_ptr_iterator_tag)" ??$_Uninit_move@PEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAV12@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@V12@@std@@YAPEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAV12@00AEAU?$_Wrap_alloc@V?$allocator@V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@std@@@0@0U_Nonscalar_ptr_iterator_tag@0@@Z
0x18005D8F4: "16" ??_C@_15FEFLCNCJ@?$AA1?$AA6?$AA?$AA@
0x18005E7D0: "171" ??_C@_17ICFCNLKE@?$AA1?$AA7?$AA1?$AA?$AA@
0x180011880: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Swap_bx(class std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64) __ptr64" ?_Swap_bx@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAXAEAV12@@Z
0x180036F70: "protected: virtual long __cdecl MorroCommon::CFileUtils::CopyFileImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,bool) __ptr64" ?CopyFileImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@0_N@Z
0x180019B98: "public: __cdecl ATL::CComVariant::~CComVariant(void) __ptr64" ??1CComVariant@ATL@@QEAA@XZ
0x18006B7E8: "__vectorcall ??_R1A@?0A@EA@CThreatInfo@ThreatAbstraction" ??_R1A@?0A@EA@CThreatInfo@ThreatAbstraction@@8
0x180080BB0: "__vectorcall ??_R0?AV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@" ??_R0?AV?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@8
0x1800697C0: "__vectorcall ??_R3IScanProgressInfo@ThreatAbstraction" ??_R3IScanProgressInfo@ThreatAbstraction@@8
0x18002CED0: "public: void __cdecl std::vector<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::push_back(class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64) __ptr64" ?push_back@?$vector@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAXAEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@Z
0x180069718: "__vectorcall ??_R2IScanProgressInfo@ThreatAbstraction" ??_R2IScanProgressInfo@ThreatAbstraction@@8
0x18005E660: "ActionSuccess" ??_C@_1BM@KDMLDKFK@?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18005E590: "146" ??_C@_17JJBBJBLD@?$AA1?$AA4?$AA6?$AA?$AA@
0x18001B7F0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,8}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@7EBAXXZ
0x180061830: "Failed to create event monitorin" ??_C@_1HM@GGIMMHEI@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAe?$AAv?$AAe?$AAn?$AAt?$AA?5?$AAm?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAi?$AAn@
0x180030BF0: "protected: virtual long __cdecl MorroCommon::CWin32::RegOpenKeyExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?RegOpenKeyExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEAPEAU3@@Z
0x18005B358: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180069DC0: "__vectorcall ??_R1A@?0A@EA@IContextEventsImpl@ThreatAbstraction" ??_R1A@?0A@EA@IContextEventsImpl@ThreatAbstraction@@8
0x18002F3B4: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetAdvice(void)const __ptr64" ?GetAdvice@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005B3A8: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x180040A70: "public: virtual long __cdecl Microsoft::SecurityClient::CFeatureBrand::HrIsWGAEnabled(bool * __ptr64)const __ptr64" ?HrIsWGAEnabled@CFeatureBrand@SecurityClient@Microsoft@@UEBAJPEA_N@Z
0x180031D70: WPP_SF_qd
0x18003A05C: "public: virtual void __cdecl CWString::Unlock(void)const __ptr64" ?Unlock@CWString@@UEBAXXZ
0x18005CD78: "not a stream" ??_C@_0N@LGAPMMPI@not?5a?5stream?$AA@
0x180083452: "struct CommonUtil::CCommonThrowHR CommonUtil::tHR" ?tHR@CommonUtil@@3UCCommonThrowHR@1@A
0x180061CA8: "const ThreatAbstraction::CContextManager::CDetectionStats::`vbtable'" ??_8CDetectionStats@CContextManager@ThreatAbstraction@@7B@
0x1800243F0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextCompleted`vtordisp{4294967292,0}' (class ThreatAbstraction::IDetectionContext const * __ptr64) __ptr64" ?OnContextCompleted@CContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXPEBVIDetectionContext@2@@Z
0x18005AD08: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18007FB10: "__vectorcall ??_R0?AVCThreatInfo@ThreatAbstraction@" ??_R0?AVCThreatInfo@ThreatAbstraction@@@8
0x18004FA00: "const ThreatAbstraction::CThreatInfo::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7CThreatInfo@ThreatAbstraction@@6BIThreatInfo@1@@
0x1800120DC: "public: virtual void * __ptr64 __cdecl MpWmiHeartBeat::`scalar deleting destructor'(unsigned int) __ptr64" ??_GMpWmiHeartBeat@@UEAAPEAXI@Z
0x18006C4A8: "const MorroCommon::CLockEntireFile::`RTTI Complete Object Locator'" ??_R4CLockEntireFile@MorroCommon@@6B@
0x18004FFC8: "const MpCommonEx::IBrandedResources::`vftable'{for `CommonUtil::IRefObject'}" ??_7IBrandedResources@MpCommonEx@@6BIRefObject@CommonUtil@@@
0x1800444E0: "public: static unsigned __int64 __cdecl Microsoft::SecurityClient::CXMLDataAccessor::SelectValByName(unsigned short const * __ptr64,class ATL::CComPtr<struct IXMLDOMNodeList>,class std::vector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > * __ptr64)" ?SelectValByName@CXMLDataAccessor@SecurityClient@Microsoft@@SA_KPEBGV?$CComPtr@UIXMLDOMNodeList@@@ATL@@PEAV?$vector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@@Z
0x18005B0A0: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x18005E188: "96" ??_C@_15LIAIKPEE@?$AA9?$AA6?$AA?$AA@
0x18007ECD0: "__vectorcall ??_R0?AVIThreatInfo@ThreatAbstraction@" ??_R0?AVIThreatInfo@ThreatAbstraction@@@8
0x180067E40: "__vectorcall ??_R1A@?0A@EA@CExceptionThreats@ThreatAbstraction" ??_R1A@?0A@EA@CExceptionThreats@ThreatAbstraction@@8
0x18000C918: WPP_SF_qq
0x1800298E0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetVotingResults`vtordisp{4294967292,0}' (void)const __ptr64" ?GetSpynetVotingResults@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x1800674A0: "const CActiveDetectionsManager::`RTTI Complete Object Locator'" ??_R4CActiveDetectionsManager@@6B@
0x18001D3EC: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::GetResourceScheme(void)const __ptr64" ?GetResourceScheme@CScanProgressInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18006E128: "__vectorcall ??_R3?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R3?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x18006DE50: "__vectorcall ??_R2?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std" ??_R2?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@8
0x180031F3C: "protected: void __cdecl MpCommonEx::CEventLoggerBase::LogEvent(enum MpCommonEx::EventSeverity,unsigned long,class CommonUtil::CStdVector<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > const & __ptr64,unsigned short) __ptr64" ?LogEvent@CEventLoggerBase@MpCommonEx@@IEAAXW4EventSeverity@2@KAEBV?$CStdVector@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@CommonUtil@@G@Z
0x180060428: "MpPreference" ??_C@_1BK@BEGELAFI@?$AAM?$AAp?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x180060008: "MSFT_MpThreat" ??_C@_0O@OHNKHHG@MSFT_MpThreat?$AA@
0x180002A90: "public: int __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::LoadStringW(struct HINSTANCE__ * __ptr64,unsigned int) __ptr64" ?LoadStringW@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAHPEAUHINSTANCE__@@I@Z
0x1800506C0: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x1800462B0: "__cdecl Init_thread_header" _Init_thread_header
0x180078FE8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18005FF80: "Set_ThreatID" ??_C@_0N@FGPBKEIJ@Set_ThreatID?$AA@
0x1800624D8: "%.*s" ??_C@_19IGEAAGFL@?$AA?$CF?$AA?4?$AA?$CK?$AAs?$AA?$AA@
0x1800410A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18006E198: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18005C628: "no such device" ??_C@_0P@FDINDDOK@no?5such?5device?$AA@
0x180061E28: "const ThreatAbstraction::CExceptionThreats::`vbtable'{for `ThreatAbstraction::IDetectionContexts'}" ??_8CExceptionThreats@ThreatAbstraction@@7BIDetectionContexts@1@@
0x180080460: "__vectorcall ??_R0?AV?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@" ??_R0?AV?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@@8
0x18005AB50: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180078DB0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shlwapi_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shlwapi_l1_1_0_dll
0x180067C00: "const MpWmiWDOScanProgress::`RTTI Complete Object Locator'" ??_R4MpWmiWDOScanProgress@@6B@
0x180012740: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCWin32Heap@ATL@@UEAAPEAXI@Z
0x180040450: "[thunk]:protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@$2PPPPPPPM@A@EAAPEAXI@Z
0x1800294C4: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetSpynetVotingResults(void)const __ptr64" ?GetSpynetVotingResults@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x180041CB4: "private: __cdecl Microsoft::SecurityClient::CDeploymentBrand::CDeploymentBrand(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ??0CDeploymentBrand@SecurityClient@Microsoft@@AEAA@PEBUIXMLReader@12@@Z
0x18001DA74: "public: long __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::CCleanContext::InitializeClean(void) __ptr64" ?InitializeClean@CCleanContext@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@QEAAJXZ
0x18005FB48: "290" ??_C@_17IOGLNKFC@?$AA2?$AA9?$AA0?$AA?$AA@
0x180011F20: "[thunk]:public: virtual void * __ptr64 __cdecl MpWmiWDOScanProgress::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_EMpWmiWDOScanProgress@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180051F30: MSFT_MpEvent_rtti
0x18006BD10: "__vectorcall ??_R1A@?0A@EA@CWin32@MorroCommon" ??_R1A@?0A@EA@CWin32@MorroCommon@@8
0x18007FE88: "__vectorcall ??_R0?AVCPathUtils@MorroCommon@" ??_R0?AVCPathUtils@MorroCommon@@@8
0x18001B860: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,8}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@7EBAHXZ
0x180069138: "__vectorcall ??_R3CHeartBeatController@ThreatAbstraction" ??_R3CHeartBeatController@ThreatAbstraction@@8
0x18005D448: "Gauge" ??_C@_1M@DENKPIG@?$AAG?$AAa?$AAu?$AAg?$AAe?$AA?$AA@
0x180029050: "public: virtual class ThreatAbstraction::IContextEvents const * __ptr64 __cdecl ThreatAbstraction::IContextEventsImpl::GetContextEventHandler(void)const __ptr64" ?GetContextEventHandler@IContextEventsImpl@ThreatAbstraction@@UEBAPEBVIContextEvents@2@XZ
0x18004E9B0: "const ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::`vftable'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_7CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x1800690B0: "__vectorcall ??_R2CHeartBeatController@ThreatAbstraction" ??_R2CHeartBeatController@ThreatAbstraction@@8
0x1800203A0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionsStart`vtordisp{4294967292,0}' (void) __ptr64" ?OnActionsStart@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXXZ
0x180045CA4: "__cdecl _security_init_cookie" __security_init_cookie
0x18001AB60: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_ECSignatureUpdateController@ThreatAbstraction@@$4PPPPPPPM@A@EAAPEAXI@Z
0x18004DA88: "const ThreatAbstraction::IThreatInfo::`vftable'{for `ThreatAbstraction::IThreatInfo'}" ??_7IThreatInfo@ThreatAbstraction@@6B01@@
0x180069C80: "__vectorcall ??_R1A@FA@M@FA@IContextEvents@ThreatAbstraction" ??_R1A@FA@M@FA@IContextEvents@ThreatAbstraction@@8
0x18001D640: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CScanProgressInfo::GetResourceScheme`vtordisp{4294967292,0}' (void)const __ptr64" ?GetResourceScheme@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18005F1E0: "DisableRemovableDriveScanning" ??_C@_1DM@GFLOECNG@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAa?$AAb?$AAl?$AAe?$AAD?$AAr?$AAi?$AAv?$AAe?$AAS?$AAc?$AAa?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x180012794: "public: struct HINSTANCE__ * __ptr64 __cdecl ATL::CAtlBaseModule::GetHInstanceAt(int) __ptr64" ?GetHInstanceAt@CAtlBaseModule@ATL@@QEAAPEAUHINSTANCE__@@H@Z
0x18006C618: "const CCritSectionBase::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CCritSectionBase@@6B0@@
0x180005440: "public: virtual void __cdecl MpWmiCleanProgress::OnSampleRequest(class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@MpWmiCleanProgress@@UEAAXPEAVISampleRequest@ThreatAbstraction@@@Z
0x1800033D0: WPP_SF_q
0x18004D848: "const ThreatAbstraction::CExceptionThreats::`vftable'{for `IRefCounted'}" ??_7CExceptionThreats@ThreatAbstraction@@6BIRefCounted@@@
0x18004EAE0: "const ThreatAbstraction::CQuarantineContextManager::`vftable'{for `CCritSectionBase'}" ??_7CQuarantineContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800195B0: "public: virtual long __cdecl ThreatAbstraction::CSimpleMpConfigComWriter::WriteMultiString(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64,unsigned short const * __ptr64) __ptr64" ?WriteMultiString@CSimpleMpConfigComWriter@ThreatAbstraction@@UEAAJPEBG0_K0@Z
0x18004E230: "const ThreatAbstraction::CActiveThreatsContextManager::`vftable'{for `ILockable'}" ??_7CActiveThreatsContextManager@ThreatAbstraction@@6BILockable@@@
0x18002A750: "[thunk]:public: virtual enum tagMPTHREAT_SEVERITY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatSeverity`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatSeverity@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4tagMPTHREAT_SEVERITY@@XZ
0x18001E2EC: "protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnItemCompletion(unsigned long,long,enum ThreatAbstraction::PermissibleAction) __ptr64" ?OnItemCompletion@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@MEAAXKJW4PermissibleAction@3@@Z
0x18000EEF0: MSFT_MpThreatDetection_GetInstance
0x180067400: "const ThreatAbstraction::IActionEvents::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IActionEvents@ThreatAbstraction@@6BIRefCounted@@@
0x180062188: "const ThreatAbstraction::COnDemandDetectionContext::`vbtable'{for `CCritSectionBase'}" ??_8COnDemandDetectionContext@ThreatAbstraction@@7BCCritSectionBase@@@
0x18007F8C0: "__vectorcall ??_R0?AVCQuarantineContextManager@ThreatAbstraction@" ??_R0?AVCQuarantineContextManager@ThreatAbstraction@@@8
0x18006D860: "const Microsoft::SecurityClient::IXMLBrandedValues::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4IXMLBrandedValues@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180083198: g_hModule
0x18005AEF8: "__cdecl _imp_GetUserDefaultUILanguage" __imp_GetUserDefaultUILanguage
0x18005E0B0: "69" ??_C@_15BBDNANMH@?$AA6?$AA9?$AA?$AA@
0x18004EBE8: "const ThreatAbstraction::IAutoActionManager::`vftable'{for `IRefCounted'}" ??_7IAutoActionManager@ThreatAbstraction@@6BIRefCounted@@@
0x1800356C0: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetModulePathImpl(struct HINSTANCE__ * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetModulePathImpl@CPathUtils@MorroCommon@@MEAAJPEAUHINSTANCE__@@AEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005F6C0: "AttackSurfaceReductionRules_Ids" ??_C@_1EA@KONBLCO@?$AAA?$AAt?$AAt?$AAa?$AAc?$AAk?$AAS?$AAu?$AAr?$AAf?$AAa?$AAc?$AAe?$AAR?$AAe?$AAd?$AAu?$AAc?$AAt?$AAi?$AAo?$AAn?$AAR?$AAu?$AAl?$AAe?$AAs?$AA_?$AAI?$AAd?$AAs?$AA?$AA@
0x1800605A0: "Quarantine_PurgeItemsAfterDelay" ??_C@_1EA@EIMMKEHI@?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AA_?$AAP?$AAu?$AAr?$AAg?$AAe?$AAI?$AAt?$AAe?$AAm?$AAs?$AAA?$AAf?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180040484: "private: __cdecl Microsoft::SecurityClient::CFeatureBrand::CFeatureBrand(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ??0CFeatureBrand@SecurityClient@Microsoft@@AEAA@PEBUIXMLReader@12@@Z
0x18003BA9C: "void __cdecl CommonUtil::StringCopyPrintfW(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,unsigned short const * __ptr64,...)" ?StringCopyPrintfW@CommonUtil@@YAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@1@PEBGZZ
0x18005F130: "227" ??_C@_17HJHLBCCI@?$AA2?$AA2?$AA7?$AA?$AA@
0x18001D450: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetSeverityDescription(void)const __ptr64" ?GetSeverityDescription@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18002FD08: "long __cdecl MorroCommon::HrCStringLoadStringWithLocale(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64,unsigned int,unsigned short,struct HINSTANCE__ * __ptr64)" ?HrCStringLoadStringWithLocale@MorroCommon@@YAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@IGPEAUHINSTANCE__@@@Z
0x180045F30: "__cdecl _imp_load_PathIsDirectoryW" __imp_load_PathIsDirectoryW
0x18005DC68: "30" ??_C@_15DMPINDPO@?$AA3?$AA0?$AA?$AA@
0x18002BDAC: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetResourceCount(void)const __ptr64" ?GetResourceCount@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x1800411D4: "private: __cdecl Microsoft::SecurityClient::CBrandedColors::CBrandedColors(struct Microsoft::SecurityClient::IXMLReader const * __ptr64) __ptr64" ??0CBrandedColors@SecurityClient@Microsoft@@AEAA@PEBUIXMLReader@12@@Z
0x18005D800: "UnsupportedValues" ??_C@_1CE@JOLBNBFM@?$AAU?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AA?$AA@
0x1800056E0: "struct _MI_Datetime & __ptr64 __cdecl MpMIUtil::GetMIDateTimeFromSystemTime(struct _SYSTEMTIME & __ptr64,struct _MI_Datetime & __ptr64)" ?GetMIDateTimeFromSystemTime@MpMIUtil@@YAAEAU_MI_Datetime@@AEAU_SYSTEMTIME@@AEAU2@@Z
0x1800620D0: WPP_55cb100f1a70325c2a21f760b530901e_Traceguids
0x18002BA88: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsUnknown(void)const __ptr64" ?IsUnknown@CDetectionContextBase@ThreatAbstraction@@UEBAHXZ
0x180029680: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleActionCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetPermissibleActionCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x180005810: "protected: virtual __cdecl IRefCounted::~IRefCounted(void) __ptr64" ??1IRefCounted@@MEAA@XZ
0x180061F60: "const ThreatAbstraction::CHeartBeatController::`vbtable'" ??_8CHeartBeatController@ThreatAbstraction@@7B@
0x180069458: "const ThreatAbstraction::CConfigController::`RTTI Complete Object Locator'" ??_R4CConfigController@ThreatAbstraction@@6B@
0x180030A50: "protected: virtual int __cdecl MorroCommon::CWin32::ShowWindowImpl(struct HWND__ * __ptr64,int) __ptr64" ?ShowWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@H@Z
0x180018850: "private: static unsigned int __cdecl ThreatAbstraction::COnDemandController::ScanThread(void * __ptr64)" ?ScanThread@COnDemandController@ThreatAbstraction@@CAIPEAX@Z
0x18005FD98: "ReportingGUID" ??_C@_1BM@NAJDBGOJ@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAG?$AAU?$AAI?$AAD?$AA?$AA@
0x180043468: "public: __cdecl CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >::~CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >(void) __ptr64" ??1?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18001F120: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsContextManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECActiveThreatsContextManager@ThreatAbstraction@@UEAAPEAXI@Z
0x1800833D8: "private: static class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > MorroCommon::CPathUtils::m_logLocation" ?m_logLocation@CPathUtils@MorroCommon@@0V?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@A
0x18002A5F0: "[thunk]:public: virtual enum tagMPTHREAT_CATEGORY __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatCategory`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatCategory@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA?AW4tagMPTHREAT_CATEGORY@@XZ
0x18005D230: "Aggregate" ??_C@_1BE@GKCJNDNO@?$AAA?$AAg?$AAg?$AAr?$AAe?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x180031540: "protected: virtual int __cdecl MorroCommon::CWin32::PrivilegeCheckImpl(void * __ptr64,struct _PRIVILEGE_SET * __ptr64,int * __ptr64) __ptr64" ?PrivilegeCheckImpl@CWin32@MorroCommon@@MEAAHPEAXPEAU_PRIVILEGE_SET@@PEAH@Z
0x18005B0D8: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x180023FB4: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> >,0> >::_Insert_at<struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64,struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBKK@std@@PEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKK@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@1@AEAU?$pair@$$CBKK@1@1@Z
0x180045B47: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x180040070: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> >,0> >::_Insert_at<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64>(bool,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64,struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_at@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@KU?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@4@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@1@AEAU?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@1@1@Z
0x18005C6A8: "no space on device" ??_C@_0BD@IJDJKDEA@no?5space?5on?5device?$AA@
0x18005E048: "56" ??_C@_15MPMKGPDP@?$AA5?$AA6?$AA?$AA@
0x180030AD0: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessImpl(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessImpl@CWin32@MorroCommon@@MEAAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x18006B998: "const ThreatAbstraction::IAutoIgnoreThreat::`RTTI Complete Object Locator'" ??_R4IAutoIgnoreThreat@ThreatAbstraction@@6B@
0x180067398: "__vectorcall ??_R3CDetectionsManager" ??_R3CDetectionsManager@@8
0x180060A80: "Signature_FirstAuGracePeriod" ??_C@_1DK@GFNFNLAD@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA_?$AAF?$AAi?$AAr?$AAs?$AAt?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x180034064: "public: __cdecl std::_Tree<class std::_Tmap_traits<enum MpCommonEx::BrandParamType,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<enum MpCommonEx::BrandParamType>,class std::allocator<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >::~_Tree<class std::_Tmap_traits<enum MpCommonEx::BrandParamType,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<enum MpCommonEx::BrandParamType>,class std::allocator<struct std::pair<enum MpCommonEx::BrandParamType const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >,0> >(void) __ptr64" ??1?$_Tree@V?$_Tmap_traits@W4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@U?$less@W4BrandParamType@MpCommonEx@@@std@@V?$allocator@U?$pair@$$CBW4BrandParamType@MpCommonEx@@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@6@$0A@@std@@@std@@QEAA@XZ
0x180067128: "__vectorcall ??_R2CDetectionsManager" ??_R2CDetectionsManager@@8
0x18003A480: "public: virtual void * __ptr64 __cdecl CThreadManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCThreadManager@@UEAAPEAXI@Z
0x18002AAD0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetThreatType`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatType@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBAKXZ
0x180028F70: "[thunk]:public: virtual long __cdecl ThreatAbstraction::CAutoActionManager::AddAutoIgnoreThreat`vtordisp{4294967292,0}' (unsigned __int64) __ptr64" ?AddAutoIgnoreThreat@CAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@A@EAAJ_K@Z
0x180028B78: "public: virtual __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::~CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>(void) __ptr64" ??1?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAA@XZ
0x180019E20: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUpdateContext@CSignatureUpdateController@ThreatAbstraction@@UEAAPEAXI@Z
0x180019060: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScheduledScanController::CScheduledScanContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECScheduledScanContext@CScheduledScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x1800271C0: "public: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > > __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class ThreatAbstraction::CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::erase(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > >) __ptr64" ?erase@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@ThreatAbstraction@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@2@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@2@@Z
0x18004CF10: MSFT_MpScan_Start_rtti
0x18000F080: MSFT_MpEvent_EnableIndications
0x1800324F4: "long __cdecl MpCommonEx::LoadStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?LoadStringW@MpCommonEx@@YAJPEAPEAGPEBG@Z
0x18001A0A8: "public: __cdecl ThreatAbstraction::CSignatureUpdateController::CSignatureUpdateController(void) __ptr64" ??0CSignatureUpdateController@ThreatAbstraction@@QEAA@XZ
0x180078FD4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18005B250: "__cdecl _imp_MpElevateCleanHandle" __imp_MpElevateCleanHandle
0x180029BC0: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x1800682C8: "const ThreatAbstraction::CExceptionThreats::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4CExceptionThreats@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18005B008: "__cdecl _imp_LoadImageW" __imp_LoadImageW
0x18001CDCC: "public: __cdecl std::deque<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > > >::~deque<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > > >(void) __ptr64" ??1?$deque@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@@std@@@std@@QEAA@XZ
0x18005E1D0: "102" ??_C@_17INOCEEPC@?$AA1?$AA0?$AA2?$AA?$AA@
0x180068458: "const ThreatAbstraction::IDetectionContexts::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IDetectionContexts@ThreatAbstraction@@6BIRefCounted@@@
0x18001B3A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::CUpdateContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUpdateContext@CHeartBeatController@ThreatAbstraction@@UEAAPEAXI@Z
0x1800236A8: "public: struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<unsigned long const,unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >::_Buynode<struct std::pair<unsigned long,unsigned long> >(struct std::pair<unsigned long,unsigned long> &&) __ptr64" ??$_Buynode@U?$pair@KK@std@@@?$_Tree_buy@U?$pair@$$CBKK@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@1@$$QEAU?$pair@KK@1@@Z
0x18005FFD8: "MSFT_MpThreatCatalog_Destruct" ??_C@_0BO@FMILKAH@MSFT_MpThreatCatalog_Destruct?$AA@
0x180016420: "public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAPEAXI@Z
0x18005B3C0: "__cdecl _imp_memmove" __imp_memmove
0x18005AD80: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18005CF38: "wrong protocol type" ??_C@_0BE@MIEJDDNH@wrong?5protocol?5type?$AA@
0x18002BD8C: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetAdvice(void)const __ptr64" ?GetAdvice@CDetectionContextBase@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18005D5F0: "Octetstring" ??_C@_1BI@HDECFNBP@?$AAO?$AAc?$AAt?$AAe?$AAt?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x180061D18: "ProductFeature" ??_C@_1BO@NGGPGCFP@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x18001D720: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetRegKeyCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetRegKeyCount@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x18005E548: "137" ??_C@_17DMKIMGGO@?$AA1?$AA3?$AA7?$AA?$AA@
0x18004C010: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x18004DCB8: "const ThreatAbstraction::CScheduledScanController::`vftable'{for `CCritSectionBase'}" ??_7CScheduledScanController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18002EFB0: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatID(void)const __ptr64" ?GetThreatID@CThreatInfo@ThreatAbstraction@@UEBA_KXZ
0x180028AC0: "public: virtual void __cdecl ThreatAbstraction::CAutoActionManager::EndWrite(void) __ptr64" ?EndWrite@CAutoActionManager@ThreatAbstraction@@UEAAXXZ
0x18002DA50: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CThreatInfo::IsUnknown`vtordisp{4294967292,0}' (void)const __ptr64" ?IsUnknown@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x180037EAC: "private: static long __cdecl MorroCommon::CFileUtils::LoadResourceInner(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?LoadResourceInner@CFileUtils@MorroCommon@@CAJIPEBG0PEAPEAEPEA_K@Z
0x18003E998: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > >::_Buynode<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >(struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > &&) __ptr64" ??$_Buynode@U?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@PEAX@1@$$QEAU?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@1@@Z
0x1800692B0: "const ThreatAbstraction::CScanHistoryController::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CScanHistoryController@ThreatAbstraction@@6BCCritSectionBase@@@
0x180069FB8: "const ThreatAbstraction::CActiveThreatsContextManager::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CActiveThreatsContextManager@ThreatAbstraction@@6BILockable@@@
0x1800450F0: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x18006BB40: "__vectorcall ??_R2CQuarantineThreatInfo@ThreatAbstraction" ??_R2CQuarantineThreatInfo@ThreatAbstraction@@8
0x18002A310: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetAgentID`vtordisp{4294967292,40}' (void)const __ptr64" ?GetAgentID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<unsigned long,void * __ptr64> > >::deallocate(struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@KPEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@KPEAX@2@_K@Z
0x18006BBB8: "__vectorcall ??_R3CQuarantineThreatInfo@ThreatAbstraction" ??_R3CQuarantineThreatInfo@ThreatAbstraction@@8
0x180062090: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vbtable'{for `CRefCountedBase'}" ??_8CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@7BCRefCountedBase@@@
0x18004DE80: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`vftable'{for `CCritSectionBase'}" ??_7CUpdateContext@CHeartBeatController@ThreatAbstraction@@6BCCritSectionBase@@@
0x1800684A8: "const ThreatAbstraction::IDetectionContext::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4IDetectionContext@ThreatAbstraction@@6BILockable@@@
0x180026950: "public: __cdecl ThreatAbstraction::CQuarantineContextManager::CQuarantineDetectionContexts::CQuarantineDetectionContexts(class ThreatAbstraction::CContextManager * __ptr64) __ptr64" ??0CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@QEAA@PEAVCContextManager@2@@Z
0x1800803D0: "__vectorcall ??_R0?AVCBrandedStrings@SecurityClient@Microsoft@" ??_R0?AVCBrandedStrings@SecurityClient@Microsoft@@@8
0x180028F10: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CAutoIgnoreThreats::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_ECAutoIgnoreThreats@ThreatAbstraction@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180050478: "const Microsoft::SecurityClient::CXMLReader::`vftable'{for `CommonUtil::IRefObject'}" ??_7CXMLReader@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x18001A93C: "public: void __cdecl ThreatAbstraction::CSignatureUpdateController::ShutdownSignatureUpdateObject(void) __ptr64" ?ShutdownSignatureUpdateObject@CSignatureUpdateController@ThreatAbstraction@@QEAAXXZ
0x18006D0D8: "__vectorcall ??_R3?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R3?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x18000340C: "void __cdecl SetThreatResources(class CommonUtil::AutoRef<class CThreatDetails>,struct _MSFT_MpThreat & __ptr64)" ?SetThreatResources@@YAXV?$AutoRef@VCThreatDetails@@@CommonUtil@@AEAU_MSFT_MpThreat@@@Z
0x18006CD08: "__vectorcall ??_R2?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R2?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x18004DD80: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`vftable'" ??_7CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6B@
0x180028F10: "[thunk]:public: virtual void * __ptr64 __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_E?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180031920: "protected: virtual int __cdecl MorroCommon::CWin32::CreateProcessAsUserImpl(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?CreateProcessAsUserImpl@CWin32@MorroCommon@@MEAAHPEAXPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x18005D1A0: "iostream" ??_C@_08LLGCOLLL@iostream?$AA@
0x180050418: "const Microsoft::SecurityClient::IXMLReader::`vftable'{for `CommonUtil::IRefObject'}" ??_7IXMLReader@SecurityClient@Microsoft@@6BIRefObject@CommonUtil@@@
0x180033EF0: "public: __cdecl CommonUtil::CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>::~CUniqueHandle<struct CommonUtil::CAutoFreeLibrary>(void) __ptr64" ??1?$CUniqueHandle@UCAutoFreeLibrary@CommonUtil@@@CommonUtil@@QEAA@XZ
0x18001D544: "public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetRegKeyCount(void)const __ptr64" ?GetRegKeyCount@CScanProgressInfo@ThreatAbstraction@@UEBA_KXZ
0x180030860: "protected: virtual __int64 __cdecl MorroCommon::CWin32::SendMessageImpl(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64) __ptr64" ?SendMessageImpl@CWin32@MorroCommon@@MEAA_JPEAUHWND__@@I_K_J@Z
0x180043430: "protected: virtual __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>::~CRefObjectFor<struct Microsoft::SecurityClient::IXMLDeployment>(void) __ptr64" ??1?$CRefObjectFor@UIXMLDeployment@SecurityClient@Microsoft@@@CommonUtil@@MEAA@XZ
0x18005FB18: "289" ??_C@_17DIDPEGHN@?$AA2?$AA8?$AA9?$AA?$AA@
0x18005EDB8: "206" ??_C@_17IMAPNEEG@?$AA2?$AA0?$AA6?$AA?$AA@
0x180001660: "public: virtual class std::error_condition __cdecl std::error_category::default_error_condition(int)const __ptr64" ?default_error_condition@error_category@std@@UEBA?AVerror_condition@2@H@Z
0x18005EBD8: "ScanScheduleQuickScanTime" ??_C@_1DE@JCENNECA@?$AAS?$AAc?$AAa?$AAn?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180021C60: "protected: virtual class ThreatAbstraction::IDetectionContext * __ptr64 __cdecl ThreatAbstraction::CContextManager::GetDetectionContext(unsigned long,unsigned long * __ptr64)const __ptr64" ?GetDetectionContext@CContextManager@ThreatAbstraction@@MEBAPEAVIDetectionContext@2@KPEAK@Z
0x1800055A4: "public: virtual void * __ptr64 __cdecl CRefCountedBaseX::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRefCountedBaseX@@UEAAPEAXI@Z
0x18005F970: "273" ??_C@_17KGNEBEMM@?$AA2?$AA7?$AA3?$AA?$AA@
0x1800622E0: "const MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::`vbtable'" ??_8CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@7B@
0x18005E228: "111" ??_C@_17FEALDILJ@?$AA1?$AA1?$AA1?$AA?$AA@
0x180055DA0: MSFT_MpWDOScan_rtti
0x18005B090: "__cdecl _imp_PostThreadMessageW" __imp_PostThreadMessageW
0x18005E300: "118" ??_C@_17CJADHHDD@?$AA1?$AA1?$AA8?$AA?$AA@
0x180060AC0: "FirstAuGracePeriod" ??_C@_1CG@KLDFMFGF@?$AAF?$AAi?$AAr?$AAs?$AAt?$AAA?$AAu?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x180029640: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsUnknown`vtordisp{4294967292,0}' (void)const __ptr64" ?IsUnknown@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x18002BFD8: "public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleActionCount(void)const __ptr64" ?GetPermissibleActionCount@CDetectionContextBase@ThreatAbstraction@@UEBAKXZ
0x18004F1E8: "const ThreatAbstraction::CScanHistoryDetectionContext::`vftable'{for `CCritSectionBase'}" ??_7CScanHistoryDetectionContext@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005E1B8: "CategoryID" ??_C@_1BG@KBAPIFFM@?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAy?$AAI?$AAD?$AA?$AA@
0x18004E650: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`vftable'{for `ThreatAbstraction::IDetectionContexts'}" ??_7CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BIDetectionContexts@2@@
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180028CB0: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Insert(class ThreatAbstraction::IAutoIgnoreThreat * __ptr64) __ptr64" ?Insert@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXPEAVIAutoIgnoreThreat@ThreatAbstraction@@@Z
0x18002DC50: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CThreatInfo::GetThreatID`vtordisp{4294967292,0}' (void)const __ptr64" ?GetThreatID@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x180028F90: "[thunk]:public: virtual void __cdecl ThreatAbstraction::CAutoActionManager::EndWrite`vtordisp{4294967292,0}' (void) __ptr64" ?EndWrite@CAutoActionManager@ThreatAbstraction@@$4PPPPPPPM@A@EAAXXZ
0x180082888: g_providerClassID
0x1800296A0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,224}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@OA@EBAXXZ
0x18006CE38: "__vectorcall ??_R1A@?0A@EA@CBrandedStrings@SecurityClient@Microsoft" ??_R1A@?0A@EA@CBrandedStrings@SecurityClient@Microsoft@@8
0x180020420: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::OnActionError`vtordisp{4294967292,0}' (long) __ptr64" ?OnActionError@CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXJ@Z
0x18004D5C0: "const CBaseThreatManager::`vftable'" ??_7CBaseThreatManager@@6B@
0x180039498: "public: __cdecl MorroCommon::CAutoLockedCertCheck::~CAutoLockedCertCheck(void) __ptr64" ??1CAutoLockedCertCheck@MorroCommon@@QEAA@XZ
0x180060090: "MSFT_MpThreatDetection" ??_C@_0BH@JIFMFCAO@MSFT_MpThreatDetection?$AA@
0x18006A200: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`RTTI Complete Object Locator'{for `CPseudoLockBase'}" ??_R4CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x18004DF40: "const ThreatAbstraction::CConfigController::`vftable'{for `ILockable'}" ??_7CConfigController@ThreatAbstraction@@6BILockable@@@
0x18005B338: "__cdecl _imp_malloc" __imp_malloc
0x18004EC08: "const ThreatAbstraction::IAutoActionManager::`vftable'{for `ThreatAbstraction::IAutoActionManager'}" ??_7IAutoActionManager@ThreatAbstraction@@6B01@@
0x180067428: "const ThreatAbstraction::IActionEvents::`RTTI Complete Object Locator'{for `ThreatAbstraction::IActionEvents'}" ??_R4IActionEvents@ThreatAbstraction@@6B01@@
0x180060580: "Quarantine" ??_C@_1BG@EJOBAGJF@?$AAQ?$AAu?$AAa?$AAr?$AAa?$AAn?$AAt?$AAi?$AAn?$AAe?$AA?$AA@
0x180039BFC: "long __cdecl HrMpDuplicateStringW(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?HrMpDuplicateStringW@@YAJPEAPEAGPEBG@Z
0x18001B298: "public: __cdecl ThreatAbstraction::CWDOScanController::CUpdateContext::CUpdateContext(void) __ptr64" ??0CUpdateContext@CWDOScanController@ThreatAbstraction@@QEAA@XZ
0x18005B438: "__cdecl _imp__purecall" __imp__purecall
0x18005AC10: ADVAPI32_NULL_THUNK_DATA
0x18004E3C8: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `CPseudoLockBase'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x180061BB0: WPP_fda77ac797c83915e3bfd457e2143ebe_Traceguids
0x18001B810: "[thunk]:public: virtual long __cdecl CPseudoRefCountedBase::Release`vtordisp{4294967292,8}' (void)const __ptr64" ?Release@CPseudoRefCountedBase@@$4PPPPPPPM@7EBAJXZ
0x18002D980: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineThreatInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_ECQuarantineThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x180003170: "protected: static void __cdecl ATL::CSimpleStringT<char,0>::ThrowMemoryException(void)" ?ThrowMemoryException@?$CSimpleStringT@D$0A@@ATL@@KAXXZ
0x180030EC0: "protected: virtual struct HWND__ * __ptr64 __cdecl MorroCommon::CWin32::FindWindowImpl(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?FindWindowImpl@CWin32@MorroCommon@@MEAAPEAUHWND__@@PEBG0@Z
0x180058360: MSFT_MpHeartBeat_rtti
0x1800687D8: "const CPseudoRefCountedBase::`RTTI Complete Object Locator'" ??_R4CPseudoRefCountedBase@@6B@
0x18006A720: "const ThreatAbstraction::CScanHistoryContextManager::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CScanHistoryContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x180024430: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextError`vtordisp{4294967292,0}' (class ThreatAbstraction::IDetectionContext const * __ptr64,long) __ptr64" ?OnContextError@CContextManager@ThreatAbstraction@@$2PPPPPPPM@A@EAAXPEBVIDetectionContext@2@J@Z
0x1800602F0: "Set-MpPreference" ??_C@_1CC@KPJCOLIN@?$AAS?$AAe?$AAt?$AA?9?$AAM?$AAp?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x180029980: "[thunk]:public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetAdvice`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAdvice@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAPEBVCWString@@XZ
0x18005E120: "83" ??_C@_15EEIKIMND@?$AA8?$AA3?$AA?$AA@
0x18005AEA0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18005E628: "155" ??_C@_17EAPIONPI@?$AA1?$AA5?$AA5?$AA?$AA@
0x18005EC10: "200" ??_C@_17KJGEILJK@?$AA2?$AA0?$AA0?$AA?$AA@
0x18005ADF8: "__cdecl _imp_GetLocaleInfoW" __imp_GetLocaleInfoW
0x180011174: "public: __cdecl CMpProviderLogger::CMpProviderLogger(void) __ptr64" ??0CMpProviderLogger@@QEAA@XZ
0x18005E728: "162" ??_C@_17FLLLKHOP@?$AA1?$AA6?$AA2?$AA?$AA@
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > >::deallocate(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@@std@@QEAAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_K@Z
0x180069690: "const ThreatAbstraction::IScanProgressInfoQueue::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IScanProgressInfoQueue@ThreatAbstraction@@6BIRefCounted@@@
0x180031470: "protected: virtual int __cdecl MorroCommon::CWin32::QueryServiceStatusImpl(struct SC_HANDLE__ * __ptr64,struct _SERVICE_STATUS * __ptr64) __ptr64" ?QueryServiceStatusImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@PEAU_SERVICE_STATUS@@@Z
0x18005F5D0: "EnableNetworkProtection" ??_C@_1DA@ONFENMJA@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180039CE8: "public: virtual long __cdecl CRefCountedBaseX::Release(void)const __ptr64" ?Release@CRefCountedBaseX@@UEBAJXZ
0x1800297E0: "[thunk]:public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::GetTimeStamp`vtordisp{4294967292,0}' (struct _FILETIME & __ptr64)const __ptr64" ?GetTimeStamp@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAXAEAU_FILETIME@@@Z
0x180062040: WPP_c9aa2675d7d835b68e2f0fb179b9e9a6_Traceguids
0x180082B10: "public: static class std::locale::id std::numpunct<wchar_t>::id" ?id@?$numpunct@_W@std@@2V0locale@2@A
0x180061E00: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`vbtable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_8CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@7B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x180027AA4: "public: struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > >::_Buynode<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >(struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&) __ptr64" ??$_Buynode@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@?$_Tree_buy@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@1@$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@@Z
0x1800690F8: "__vectorcall ??_R1A@?0A@EA@CHeartBeatController@ThreatAbstraction" ??_R1A@?0A@EA@CHeartBeatController@ThreatAbstraction@@8
0x180068D18: "__vectorcall ??_R1A@?0A@EA@CUpdateContext@CSignatureUpdateController@ThreatAbstraction" ??_R1A@?0A@EA@CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@8
0x18006ABA8: "__vectorcall ??_R2IAutoActionManager@ThreatAbstraction" ??_R2IAutoActionManager@ThreatAbstraction@@8
0x18006AD70: "__vectorcall ??_R1A@?0A@EA@IAutoIgnoreThreats@ThreatAbstraction" ??_R1A@?0A@EA@IAutoIgnoreThreats@ThreatAbstraction@@8
0x18006AE08: "__vectorcall ??_R3IAutoActionManager@ThreatAbstraction" ??_R3IAutoActionManager@ThreatAbstraction@@8
0x1800693C0: "__vectorcall ??_R2CConfigController@ThreatAbstraction" ??_R2CConfigController@ThreatAbstraction@@8
0x180041878: "public: virtual __cdecl Microsoft::SecurityClient::CBrandedColors::~CBrandedColors(void) __ptr64" ??1CBrandedColors@SecurityClient@Microsoft@@UEAA@XZ
0x18006DA20: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x180078D08: "__cdecl TI2PEAVEUnknownError@MorroCommon@@" _TI2PEAVEUnknownError@MorroCommon@@
0x180069418: "__vectorcall ??_R3CConfigController@ThreatAbstraction" ??_R3CConfigController@ThreatAbstraction@@8
0x18004E030: "const ThreatAbstraction::CScanProgressInfoQueue::`vftable'{for `CCritSectionBase'}" ??_7CScanProgressInfoQueue@ThreatAbstraction@@6BCCritSectionBase@@@
0x18004EB60: "const CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::`vftable'{for `ISequence<class ThreatAbstraction::IAutoIgnoreThreat>'}" ??_7?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@6B?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@@
0x18005FF00: "MpThreatDetection" ??_C@_0BC@MNKAIFCB@MpThreatDetection?$AA@
0x18005D798: "TriggerType" ??_C@_1BI@HICJOOLE@?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18003271C: "private: long __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetParam(enum MpCommonEx::BrandParamType,unsigned short * __ptr64 * __ptr64)const __ptr64" ?GetParam@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@AEBAJW4BrandParamType@3@PEAPEAG@Z
0x180025590: "public: virtual long __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::PerformActions(class ThreatAbstraction::IActionEvents * __ptr64,bool) __ptr64" ?PerformActions@CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@UEAAJPEAVIActionEvents@3@_N@Z
0x18005B0D0: "__cdecl _imp_CryptCATAdminCalcHashFromFileHandle" __imp_CryptCATAdminCalcHashFromFileHandle
0x180020380: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Lock`vtordisp{4294967292,128}' (void)const __ptr64" ?Lock@CPseudoLockBase@@$4PPPPPPPM@IA@EBAXXZ
0x18004DC48: "const ThreatAbstraction::COnDemandController::CScanContext::`vftable'{for `ILockable'}" ??_7CScanContext@COnDemandController@ThreatAbstraction@@6BILockable@@@
0x180060960: "Scan_ScanOnlyIfIdleEnabled" ??_C@_1DG@FKBOMPIK@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAS?$AAc?$AAa?$AAn?$AAO?$AAn?$AAl?$AAy?$AAI?$AAf?$AAI?$AAd?$AAl?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180013F68: "public: long __cdecl CData::ConfigIteratorEnum(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,enum tagMP_CONFIG_TYPE * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64) __ptr64" ?ConfigIteratorEnum@CData@@QEAAJPEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAW4tagMP_CONFIG_TYPE@@PEAKPEAPEAEPEAW4tagMP_CONFIG_ORIGIN@@@Z
0x18006AD98: "__vectorcall ??_R1A@?0A@EA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@" ??_R1A@?0A@EA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@8
0x18006D938: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@8
0x18005AEA8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18005E580: "144" ??_C@_17DDBIFJDI@?$AA1?$AA4?$AA4?$AA?$AA@
0x18005E868: "ExclusionProcess" ??_C@_1CC@JPFCGFEJ@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18005AD58: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x18002A5D0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetPermissibleActions`vtordisp{4294967292,0}' (void)const __ptr64" ?GetPermissibleActions@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18005D578: "ModelCorrespondence" ??_C@_1CI@PHACFOKC@?$AAM?$AAo?$AAd?$AAe?$AAl?$AAC?$AAo?$AAr?$AAr?$AAe?$AAs?$AAp?$AAo?$AAn?$AAd?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x180031000: "protected: virtual int __cdecl MorroCommon::CWin32::SetForegroundWindowImpl(struct HWND__ * __ptr64) __ptr64" ?SetForegroundWindowImpl@CWin32@MorroCommon@@MEAAHPEAUHWND__@@@Z
0x18003B9B8: "void __cdecl CommonUtil::StringVPrintfW(class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > * __ptr64,bool,unsigned short const * __ptr64,char * __ptr64)" ?StringVPrintfW@CommonUtil@@YAXPEAV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@1@_NPEBGPEAD@Z
0x18006B868: "__vectorcall ??_R3IAutoIgnoreThreat@ThreatAbstraction" ??_R3IAutoIgnoreThreat@ThreatAbstraction@@8
0x18006B778: "__vectorcall ??_R2IAutoIgnoreThreat@ThreatAbstraction" ??_R2IAutoIgnoreThreat@ThreatAbstraction@@8
0x180015770: "public: __cdecl CommonUtil::CUniqueHandle<struct CAutoMpSmartConfigUninitialize>::~CUniqueHandle<struct CAutoMpSmartConfigUninitialize>(void) __ptr64" ??1?$CUniqueHandle@UCAutoMpSmartConfigUninitialize@@@CommonUtil@@QEAA@XZ
0x18002D9D0: "[thunk]:public: virtual void __cdecl CCritSectionBase::Lock`vtordisp{4294967292,256}' (void)const __ptr64" ?Lock@CCritSectionBase@@$4PPPPPPPM@BAA@EBAXXZ
0x18005EAA8: "192" ??_C@_17KKONBFDK@?$AA1?$AA9?$AA2?$AA?$AA@
0x18002A350: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CDetectionContextBase::GetThreatID`vtordisp{4294967292,40}' (void)const __ptr64" ?GetThreatID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBA_KXZ
0x18005EDF8: "SignatureScheduleTime" ??_C@_1CM@NOLJKFEH@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x180039E88: "public: virtual __cdecl CCritSectionBase::~CCritSectionBase(void) __ptr64" ??1CCritSectionBase@@UEAA@XZ
0x18005DC78: "32" ??_C@_15JGPBBLHF@?$AA3?$AA2?$AA?$AA@
0x18006AC80: "__vectorcall ??_R1A@?0A@EA@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@" ??_R1A@?0A@EA@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@8
0x18002D980: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_ECThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x18006D450: "__vectorcall ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil" ??_R1A@?0A@EA@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@8
0x180067C78: "__vectorcall ??_R3MpWmiHeartBeat" ??_R3MpWmiHeartBeat@@8
0x180067C28: "__vectorcall ??_R2MpWmiHeartBeat" ??_R2MpWmiHeartBeat@@8
0x180005410: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::IThreatInfo::`vector deleting destructor'(unsigned int) __ptr64" ??_EIThreatInfo@ThreatAbstraction@@UEAAPEAXI@Z
0x18005ABC8: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x18004E378: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`vftable'{for `ILockable'}" ??_7CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BILockable@@@
0x180080760: "__vectorcall ??_R0?AV?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@" ??_R0?AV?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@8
0x18006B500: "const ThreatAbstraction::CScanHistoryDetectionContext::`RTTI Complete Object Locator'" ??_R4CScanHistoryDetectionContext@ThreatAbstraction@@6B@
0x180034AB8: "public: long __cdecl MpCommonEx::CBrandedResources::Initialize(struct MpCommonEx::IBrandParams * __ptr64) __ptr64" ?Initialize@CBrandedResources@MpCommonEx@@QEAAJPEAUIBrandParams@2@@Z
0x18002B6AC: "public: virtual __cdecl ThreatAbstraction::CDetectionContextBase::~CDetectionContextBase(void) __ptr64" ??1CDetectionContextBase@ThreatAbstraction@@UEAA@XZ
0x180069CA8: "__vectorcall ??_R1DI@?0A@EA@IContextEventsImpl@ThreatAbstraction" ??_R1DI@?0A@EA@IContextEventsImpl@ThreatAbstraction@@8
0x18002A2D0: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CQuarantineDetectionContext::GetAction`vtordisp{4294967292,0}' (void)const __ptr64" ?GetAction@CQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@XZ
0x180015FA8: "public: virtual __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::~CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>(void) __ptr64" ??1?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAA@XZ
0x18005F8C0: "ScanPath" ??_C@_1BC@ONAAJPMC@?$AAS?$AAc?$AAa?$AAn?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800459A0: "__cdecl _report_gsfailure" __report_gsfailure
0x18004D890: "const ThreatAbstraction::CExceptionThreats::`vftable'" ??_7CExceptionThreats@ThreatAbstraction@@6B@
0x180016170: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::Reserve(unsigned long) __ptr64" ?Reserve@?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXK@Z
0x18004D6D0: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CCritSectionBase>::`vftable'{for `ILockable'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@6BILockable@@@
0x1800112A4: "public: void __cdecl CMpProviderLogger::LogProviderEvent(long,unsigned long,unsigned short const * __ptr64) __ptr64" ?LogProviderEvent@CMpProviderLogger@@QEAAXJKPEBG@Z
0x180029620: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsBlockingDetection`vtordisp{4294967292,0}' (void) __ptr64" ?IsBlockingDetection@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EAAHXZ
0x18000ECC0: MSFT_MpThreat_Load
0x18005B138: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<unsigned long const,unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> > >::_Freenode0(struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CBKK@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@Z
0x1800292C8: "public: __cdecl ThreatAbstraction::COnDemandDetectionContext::COnDemandDetectionContext(unsigned long) __ptr64" ??0COnDemandDetectionContext@ThreatAbstraction@@QEAA@K@Z
0x18006BC20: "const ThreatAbstraction::CQuarantineThreatInfo::`RTTI Complete Object Locator'" ??_R4CQuarantineThreatInfo@ThreatAbstraction@@6B@
0x18004D808: "const ThreatAbstraction::CExceptionThreats::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7CExceptionThreats@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18004DCF8: "const ThreatAbstraction::CSimpleMpConfigComWriter::`vftable'" ??_7CSimpleMpConfigComWriter@ThreatAbstraction@@6B@
0x18005FE80: "Failed to modify preferences." ??_C@_1DM@KHIAHBJN@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAm?$AAo?$AAd?$AAi?$AAf?$AAy?$AA?5?$AAp?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAs?$AA?4?$AA?$AA@
0x1800254C4: "public: virtual __cdecl ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::~CScanHistoryDetectionContexts(void) __ptr64" ??1CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@UEAA@XZ
0x18004DA68: "const ThreatAbstraction::IThreatInfo::`vftable'{for `IRefCounted'}" ??_7IThreatInfo@ThreatAbstraction@@6BIRefCounted@@@
0x180031820: "protected: virtual int __cdecl MorroCommon::CWin32::CloseServiceHandleImpl(struct SC_HANDLE__ * __ptr64) __ptr64" ?CloseServiceHandleImpl@CWin32@MorroCommon@@MEAAHPEAUSC_HANDLE__@@@Z
0x180022AA4: "public: void __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::clear(void) __ptr64" ?clear@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@QEAAXXZ
0x180066F60: "__vectorcall ??_R2_System_error_category@std" ??_R2_System_error_category@std@@8
0x180062020: "const ThreatAbstraction::CScanProgressInfo::`vbtable'{for `CRefCountedBase'}" ??_8CScanProgressInfo@ThreatAbstraction@@7BCRefCountedBase@@@
0x180067020: "__vectorcall ??_R3_System_error_category@std" ??_R3_System_error_category@std@@8
0x180060448: "Threats\ThreatIDDefaultAction" ??_C@_1DM@LMEJNGOH@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAs?$AA?2?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAI?$AAD?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18001CA10: "public: virtual long __cdecl ThreatAbstraction::CScanProgressInfoQueue::Insert(class ThreatAbstraction::IScanProgressInfo const * __ptr64) __ptr64" ?Insert@CScanProgressInfoQueue@ThreatAbstraction@@UEAAJPEBVIScanProgressInfo@2@@Z
0x18005F048: "223" ??_C@_17PGBJIFHP@?$AA2?$AA2?$AA3?$AA?$AA@
0x18006AF40: "const ThreatAbstraction::CAutoIgnoreThreats::`RTTI Complete Object Locator'" ??_R4CAutoIgnoreThreats@ThreatAbstraction@@6B@
0x18005D4A8: "IsPUnit" ??_C@_1BA@BLMOBGMA@?$AAI?$AAs?$AAP?$AAU?$AAn?$AAi?$AAt?$AA?$AA@
0x18007F490: "__vectorcall ??_R0?AVCPseudoLockBase@" ??_R0?AVCPseudoLockBase@@@8
0x18004FB10: "const ThreatAbstraction::CThreatInfo::`vftable'{for `CCritSectionBase'}" ??_7CThreatInfo@ThreatAbstraction@@6BCCritSectionBase@@@
0x18000B520: "protected: void __cdecl std::vector<struct tagASRRuleDefaultAction,class std::allocator<struct tagASRRuleDefaultAction> >::_Reallocate(unsigned __int64) __ptr64" ?_Reallocate@?$vector@UtagASRRuleDefaultAction@@V?$allocator@UtagASRRuleDefaultAction@@@std@@@std@@IEAAX_K@Z
0x18007FCE8: "__vectorcall ??_R0?AVCBrandedAPI@MpCommonEx@" ??_R0?AVCBrandedAPI@MpCommonEx@@@8
0x18006BE88: "__vectorcall ??_R1A@?0A@EA@CBrandedAPI@MpCommonEx" ??_R1A@?0A@EA@CBrandedAPI@MpCommonEx@@8
0x180062270: "Kernel32.dll" ??_C@_1BK@EJBALEBG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18005AC58: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180030900: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetLastErrorImpl(void) __ptr64" ?GetLastErrorImpl@CWin32@MorroCommon@@MEAAKXZ
0x18002A210: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsConfigChange`vtordisp{4294967292,40}' (void) __ptr64" ?IsConfigChange@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EAAHXZ
0x180031790: "protected: virtual int __cdecl MorroCommon::CWin32::WritePrivateProfileStringImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WritePrivateProfileStringImpl@CWin32@MorroCommon@@MEAAHPEBG000@Z
0x18005F220: "231" ??_C@_17JHEMJOFB@?$AA2?$AA3?$AA1?$AA?$AA@
0x180045848: "__cdecl onexit" _onexit
0x1800679A8: "const CBaseThreatManager::`RTTI Complete Object Locator'" ??_R4CBaseThreatManager@@6B@
0x18006BB90: "__vectorcall ??_R1A@?0A@EA@CQuarantineThreatInfo@ThreatAbstraction" ??_R1A@?0A@EA@CQuarantineThreatInfo@ThreatAbstraction@@8
0x18005D208: WPP_ThisDir_CTLGUID_MSFT_WDefenderWmiv2Provider
0x180060E78: "MpBafsExtendedTimeout" ??_C@_1CM@FGCEEGFB@?$AAM?$AAp?$AAB?$AAa?$AAf?$AAs?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x18001B3A0: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CWDOScanController::CUpdateContext::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUpdateContext@CWDOScanController@ThreatAbstraction@@UEAAPEAXI@Z
0x180014744: "public: __cdecl CSmartPtr<class ThreatAbstraction::CQuarantineContextManager,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager> >::~CSmartPtr<class ThreatAbstraction::CQuarantineContextManager,class VolatileOps<class ThreatAbstraction::CQuarantineContextManager> >(void) __ptr64" ??1?$CSmartPtr@VCQuarantineContextManager@ThreatAbstraction@@V?$VolatileOps@VCQuarantineContextManager@ThreatAbstraction@@@@@@QEAA@XZ
0x18001316C: "public: __cdecl CData::~CData(void) __ptr64" ??1CData@@QEAA@XZ
0x18007E630: "__vectorcall ??_R0?AV_System_error_category@std@" ??_R0?AV_System_error_category@std@@@8
0x18005F3E8: "238" ??_C@_17OKEENBNL@?$AA2?$AA3?$AA8?$AA?$AA@
0x180062C80: " or " ??_C@_19LMDLCFLK@?$AA?5?$AAo?$AAr?$AA?5?$AA?$AA@
0x18006E110: "__vectorcall ??_R3?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std" ??_R3?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@8
0x180015A08: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::CExceptionThreats::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCExceptionThreats@ThreatAbstraction@@UEAAPEAXI@Z
0x18006DE08: "__vectorcall ??_R2?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std" ??_R2?$_Vector_alloc@$0A@U?$_Vec_base_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@std@@8
0x18001D6C0: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetProcessCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetProcessCount@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x180020340: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextActivated`vtordisp{4294967292,88}' (unsigned long) __ptr64" ?OnContextActivated@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FI@EAAXK@Z
0x180060378: "Exclusions\Paths" ??_C@_1CC@BMBCDNDL@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AAP?$AAa?$AAt?$AAh?$AAs?$AA?$AA@
0x18005CD28: "no such device or address" ??_C@_0BK@IMCPHCBI@no?5such?5device?5or?5address?$AA@
0x1800835F8: "__cdecl _native_startup_state" __native_startup_state
0x18005FD68: "Adapter_DllGetClassObject" ??_C@_0BK@JGBOCOLI@Adapter_DllGetClassObject?$AA@
0x18006CE88: "__vectorcall ??_R1BA@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std" ??_R1BA@?0A@EA@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@2@@std@@@std@@8
0x1800394F0: "public: long __cdecl MorroCommon::CAutoLockedCertCheck::LockAndCheck(unsigned short const * __ptr64) __ptr64" ?LockAndCheck@CAutoLockedCertCheck@MorroCommon@@QEAAJPEBG@Z
0x18006C070: "const CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::`RTTI Complete Object Locator'{for `CommonUtil::IRefObject'}" ??_R4?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@6BIRefObject@1@@
0x18000F9B0: "public: virtual class CommonUtil::AutoRef<class CThreatDetails> __cdecl CBaseThreatManager::GetNextThreat(void) __ptr64" ?GetNextThreat@CBaseThreatManager@@UEAA?AV?$AutoRef@VCThreatDetails@@@CommonUtil@@XZ
0x180037DC0: "protected: virtual long __cdecl MorroCommon::CFileUtils::LoadResourceImpl(unsigned int,unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CComBSTR & __ptr64) __ptr64" ?LoadResourceImpl@CFileUtils@MorroCommon@@MEAAJIPEBG0AEAVCComBSTR@ATL@@@Z
0x18000ECC0: MSFT_MpSignature_Load
0x18001D088: "public: __cdecl ThreatAbstraction::CScanProgressInfo::CScanProgressInfo(struct tagMPSCAN_DATA * __ptr64,int) __ptr64" ??0CScanProgressInfo@ThreatAbstraction@@QEAA@PEAUtagMPSCAN_DATA@@H@Z
0x18005AFD8: "__cdecl _imp_SysAllocStringByteLen" __imp_SysAllocStringByteLen
0x180068390: "const ISequence<class ThreatAbstraction::IDetectionContext>::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4?$ISequence@VIDetectionContext@ThreatAbstraction@@@@6BILockable@@@
0x180069F18: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6B?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@@
0x18005E0B8: "70" ??_C@_15KHGJJBOI@?$AA7?$AA0?$AA?$AA@
0x18005E2B8: "117" ??_C@_17HBGAGHGF@?$AA1?$AA1?$AA7?$AA?$AA@
0x18000DB50: "public: void __cdecl MpWmiSignatureProgress::UpdateSignature(struct _MSFT_MpSignature_Update const * __ptr64) __ptr64" ?UpdateSignature@MpWmiSignatureProgress@@QEAAXPEBU_MSFT_MpSignature_Update@@@Z
0x180032710: "public: virtual long __cdecl CommonUtil::CHResultExceptionImpl::GetErrorCode(void)const __ptr64" ?GetErrorCode@CHResultExceptionImpl@CommonUtil@@UEBAJXZ
0x180036850: "protected: virtual class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl MorroCommon::CPathUtils::RemoveTrailingSlashInPathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64) __ptr64" ?RemoveTrailingSlashInPathImpl@CPathUtils@MorroCommon@@MEAA?AV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@AEBV34@@Z
0x180012940: "public: __cdecl CData::CData(void) __ptr64" ??0CData@@QEAA@XZ
0x18005F8A0: "269" ??_C@_17CDFCHAN@?$AA2?$AA6?$AA9?$AA?$AA@
0x1800622A0: WPP_db61690a89973da19d491352a7a7c212_Traceguids
0x180081810: "__vectorcall ??_R0?AVCBrandedColors@SecurityClient@Microsoft@" ??_R0?AVCBrandedColors@SecurityClient@Microsoft@@@8
0x18007EC90: "__vectorcall ??_R0?AVIDetectionContexts@ThreatAbstraction@" ??_R0?AVIDetectionContexts@ThreatAbstraction@@@8
0x180068048: "__vectorcall ??_R1A@?0A@EA@IDetectionContexts@ThreatAbstraction" ??_R1A@?0A@EA@IDetectionContexts@ThreatAbstraction@@8
0x180010F60: "public: long __cdecl CProviderSuperSafeCriticalSectionManager::GetValidCriticalSection(void) __ptr64" ?GetValidCriticalSection@CProviderSuperSafeCriticalSectionManager@@QEAAJXZ
0x1800692D8: "__vectorcall ??_R2CQuarantineController@ThreatAbstraction" ??_R2CQuarantineController@ThreatAbstraction@@8
0x18001193C: "public: void __cdecl std::basic_string<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@std@@QEAAX_K0@Z
0x18004D100: MSFT_MpHeartBeat_Send_rtti
0x180069330: "__vectorcall ??_R3CQuarantineController@ThreatAbstraction" ??_R3CQuarantineController@ThreatAbstraction@@8
0x180019450: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,40}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@CI@EBAHXZ
0x18006A608: "const ThreatAbstraction::CScanHistoryContextManager::CScanHistoryDetectionContexts::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4CScanHistoryDetectionContexts@CScanHistoryContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18003F940: "public: virtual long __cdecl Microsoft::SecurityClient::CBrandedValues::HrGetSignatureUpdateFrequency(unsigned long * __ptr64)const __ptr64" ?HrGetSignatureUpdateFrequency@CBrandedValues@SecurityClient@Microsoft@@UEBAJPEAK@Z
0x180050388: "const CCritSectionBase::`vftable'{for `CCritSectionBase'}" ??_7CCritSectionBase@@6B0@@
0x18006D6A8: "__vectorcall ??_R1A@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std" ??_R1A@?0A@EA@?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@std@@@std@@8
0x18005C8E0: "invalid_argument" ??_C@_0BB@FFIHMIPJ@invalid_argument?$AA@
0x1800017F0: "public: virtual char const * __ptr64 __cdecl std::_System_error_category::name(void)const __ptr64" ?name@_System_error_category@std@@UEBAPEBDXZ
0x180039910: "long __cdecl MpConfigUtils::LoadMpResourceModule(struct HINSTANCE__ * __ptr64 * __ptr64,unsigned short const * __ptr64,bool)" ?LoadMpResourceModule@MpConfigUtils@@YAJPEAPEAUHINSTANCE__@@PEBG_N@Z
0x18002D550: "public: struct std::_Tree_node<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > > >::_Buynode<class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64>(class CSmartPtr<class ThreatAbstraction::IDetectionContext::CResource,class VolatileOps<class ThreatAbstraction::IDetectionContext::CResource> > const & __ptr64) __ptr64" ??$_Buynode@AEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@?$_Tree_buy@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@QEAAPEAU?$_Tree_node@V?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@PEAX@1@AEBV?$CSmartPtr@VCResource@IDetectionContext@ThreatAbstraction@@V?$VolatileOps@VCResource@IDetectionContext@ThreatAbstraction@@@@@@@Z
0x1800236E0: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,unsigned long> >,0> >::_Insert_hint<struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64>(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,unsigned long> > > >,struct std::pair<unsigned long const,unsigned long> & __ptr64,struct std::_Tree_node<struct std::pair<unsigned long const,unsigned long>,void * __ptr64> * __ptr64) __ptr64" ??$_Insert_hint@AEAU?$pair@$$CBKK@std@@PEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@2@@?$_Tree@V?$_Tmap_traits@KKU?$less@K@std@@V?$allocator@U?$pair@$$CBKK@std@@@2@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKK@std@@@std@@@std@@@1@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKK@std@@@std@@@std@@@1@AEAU?$pair@$$CBKK@1@PEAU?$_Tree_node@U?$pair@$$CBKK@std@@PEAX@1@@Z
0x18006A318: "const ThreatAbstraction::CContextManager::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005B0C8: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x180050448: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLReader>::`vftable'{for `CommonUtil::IRefObject'}" ??_7?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@6BIRefObject@1@@
0x18004DE90: "const ThreatAbstraction::CHeartBeatController::CUpdateContext::`vftable'" ??_7CUpdateContext@CHeartBeatController@ThreatAbstraction@@6B@
0x18006CA90: "__vectorcall ??_R2IXMLReader@SecurityClient@Microsoft" ??_R2IXMLReader@SecurityClient@Microsoft@@8
0x1800225DC: "protected: virtual void __cdecl ThreatAbstraction::CContextManager::OnContextError(class ThreatAbstraction::IDetectionContext const * __ptr64,long) __ptr64" ?OnContextError@CContextManager@ThreatAbstraction@@MEAAXPEBVIDetectionContext@2@J@Z
0x18006CB50: "__vectorcall ??_R3IXMLReader@SecurityClient@Microsoft" ??_R3IXMLReader@SecurityClient@Microsoft@@8
0x180024360: "public: struct std::_Tree_node<unsigned long,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<unsigned long,class std::allocator<unsigned long> >::_Buynode<unsigned long const & __ptr64>(unsigned long const & __ptr64) __ptr64" ??$_Buynode@AEBK@?$_Tree_buy@KV?$allocator@K@std@@@std@@QEAAPEAU?$_Tree_node@KPEAX@1@AEBK@Z
0x18005DF18: "NISEngineVersion" ??_C@_1CC@JHNJKFAJ@?$AAN?$AAI?$AAS?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18005E148: "88" ??_C@_15JDILALNC@?$AA8?$AA8?$AA?$AA@
0x18004F680: "const ThreatAbstraction::CDetectionContextBase::`vftable'{for `ThreatAbstraction::IDetectionContext'}" ??_7CDetectionContextBase@ThreatAbstraction@@6BIDetectionContext@1@@
0x180006F00: "void __cdecl MpModifyConfiguration(struct _MI_Context * __ptr64,struct _MSFT_MpPreference_Set const * __ptr64)" ?MpModifyConfiguration@@YAXPEAU_MI_Context@@PEBU_MSFT_MpPreference_Set@@@Z
0x18005DD70: "AMEngineVersion" ??_C@_1CA@FPNIMPCA@?$AAA?$AAM?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18005AC40: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180039E50: "public: virtual void * __ptr64 __cdecl CCritSectionBase::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCritSectionBase@@UEAAPEAXI@Z
0x1800312B0: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::CreateFileImpl(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64) __ptr64" ?CreateFileImpl@CWin32@MorroCommon@@MEAAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180079128: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x180031360: "protected: virtual unsigned long __cdecl MorroCommon::CWin32::GetFileSizeImpl(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFileSizeImpl@CWin32@MorroCommon@@MEAAKPEAXPEAK@Z
0x18003ACAC: "long __cdecl CommonUtil::UtilCreateEvent(void * __ptr64 * __ptr64,int,int,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES const * __ptr64)" ?UtilCreateEvent@CommonUtil@@YAJPEAPEAXHHPEBGPEBU_SECURITY_ATTRIBUTES@@@Z
0x18005D8E4: "3" ??_C@_13DMCFHHKM@?$AA3?$AA?$AA@
0x18004E8F0: "const ThreatAbstraction::CScanHistoryContextManager::`vftable'{for `CCritSectionBase'}" ??_7CScanHistoryContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x18005EC80: "202" ??_C@_17DGNEDBB@?$AA2?$AA0?$AA2?$AA?$AA@
0x18002A3F0: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetContextID`vtordisp{4294967292,40}' (void)const __ptr64" ?GetContextID@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAKXZ
0x180002230: MSFT_MpThreatDetection_Unload
0x180029720: "[thunk]:public: virtual enum ThreatAbstraction::PermissibleAction __cdecl ThreatAbstraction::CDetectionContextBase::GetPermissibleAction`vtordisp{4294967292,0}' (unsigned long)const __ptr64" ?GetPermissibleAction@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBA?AW4PermissibleAction@2@K@Z
0x18005C7B8: "address_not_available" ??_C@_0BG@IPMGOJF@address_not_available?$AA@
0x180060928: "Scan_PurgeItemsAfterDelay" ??_C@_1DE@ENEAPOOH@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAP?$AAu?$AAr?$AAg?$AAe?$AAI?$AAt?$AAe?$AAm?$AAs?$AAA?$AAf?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x180082360: "__vectorcall ??_R0?AV?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@" ??_R0?AV?$_Vector_val@U?$_Simple_types@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@@8
0x18005F420: "239" ??_C@_17FCPILGLO@?$AA2?$AA3?$AA9?$AA?$AA@
0x18003C7EC: MpEncodeVoidPointer
0x180060998: "ScanOnlyIfIdle" ??_C@_1BO@CIAGNBPI@?$AAS?$AAc?$AAa?$AAn?$AAO?$AAn?$AAl?$AAy?$AAI?$AAf?$AAI?$AAd?$AAl?$AAe?$AA?$AA@
0x18000EF70: MSFT_MpPreference_Invoke_Set
0x18006CFF0: "__vectorcall ??_R1A@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std" ??_R1A@?0A@EA@?$_Tree@V?$_Tmap_traits@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@$0A@@std@@@std@@8
0x1800684F8: "const ThreatAbstraction::IDetectionContext::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IDetectionContext@ThreatAbstraction@@6BIRefCounted@@@
0x18004F550: "const ThreatAbstraction::CAutoIgnoreThreat::`vftable'{for `ThreatAbstraction::IAutoIgnoreThreat'}" ??_7CAutoIgnoreThreat@ThreatAbstraction@@6BIAutoIgnoreThreat@1@@
0x18007F510: "__vectorcall ??_R0?AVCActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@" ??_R0?AVCActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@@8
0x18005ABA0: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18007E768: "__vectorcall ??_R0?AVCThreatCatalogManager@" ??_R0?AVCThreatCatalogManager@@@8
0x18005CF50: "__cdecl _sz_ext_ms_win_shell_shell32_l1_2_1_dll" __sz_ext_ms_win_shell_shell32_l1_2_1_dll
0x180062370: "Windows Defender" ??_C@_1CC@BGCBEJJH@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x180060D08: "MAPS_MAPSReporting" ??_C@_1CG@NODBINLA@?$AAM?$AAA?$AAP?$AAS?$AA_?$AAM?$AAA?$AAP?$AAS?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x180036610: "protected: virtual long __cdecl MorroCommon::CPathUtils::GetWindowsSystem32PathImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > & __ptr64) __ptr64" ?GetWindowsSystem32PathImpl@CPathUtils@MorroCommon@@MEAAJAEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@@Z
0x18005D628: "Propagated" ??_C@_1BG@EIOLDAEN@?$AAP?$AAr?$AAo?$AAp?$AAa?$AAg?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x18001D600: "[thunk]:public: virtual unsigned __int64 __cdecl ThreatAbstraction::CScanProgressInfo::GetTotalObjectCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetTotalObjectCount@CScanProgressInfo@ThreatAbstraction@@$4PPPPPPPM@A@EBA_KXZ
0x180016170: "public: virtual void __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::Reserve(unsigned long) __ptr64" ?Reserve@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEAAXK@Z
0x18005E110: "81" ??_C@_15OOIDEEFI@?$AA8?$AA1?$AA?$AA@
0x18004D0A0: MSFT_MpThreat_Remove_rtti
0x180013E18: "public: void __cdecl CData::DestroyConfigWriter(void) __ptr64" ?DestroyConfigWriter@CData@@QEAAXXZ
0x18005E750: "167" ??_C@_17GMGFFHNN@?$AA1?$AA6?$AA7?$AA?$AA@
0x18001F880: "public: __cdecl CSafeArrayPtr<enum tagMPTHREAT_ACTION,class VolatileOps<enum tagMPTHREAT_ACTION> >::~CSafeArrayPtr<enum tagMPTHREAT_ACTION,class VolatileOps<enum tagMPTHREAT_ACTION> >(void) __ptr64" ??1?$CSafeArrayPtr@W4tagMPTHREAT_ACTION@@V?$VolatileOps@W4tagMPTHREAT_ACTION@@@@@@QEAA@XZ
0x18001B850: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CHeartBeatController::CUpdateContext::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECUpdateContext@CHeartBeatController@ThreatAbstraction@@WBA@EAAPEAXI@Z
0x18007EB70: "__vectorcall ??_R0?AV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@" ??_R0?AV?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCCritSectionBase@@@@@8
0x180062B70: ".//UninstallSequence/PackageRef[" ??_C@_1EK@IDBEJDJO@?$AA?4?$AA?1?$AA?1?$AAU?$AAn?$AAi?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?1?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAR?$AAe?$AAf?$AA?$FL@
0x180062060: "const ThreatAbstraction::CQuarantineContextManager::`vbtable'{for `ThreatAbstraction::IContextEvents'}" ??_8CQuarantineContextManager@ThreatAbstraction@@7BIContextEvents@1@@
0x180011C50: "public: __cdecl CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >::~CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >(void) __ptr64" ??1?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@QEAA@XZ
0x18004F1C8: "const ThreatAbstraction::CScanHistoryDetectionContext::`vftable'" ??_7CScanHistoryDetectionContext@ThreatAbstraction@@6B@
0x180024470: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequestComplete`vtordisp{4294967292,80}' (int) __ptr64" ?OnSampleRequestComplete@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXH@Z
0x18006A878: "__vectorcall ??_R1A@?0A@EA@CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction" ??_R1A@?0A@EA@CQuarantineDetectionContexts@CQuarantineContextManager@ThreatAbstraction@@8
0x18002BE40: "public: virtual class ThreatAbstraction::IDetectionContext::CResource * __ptr64 __cdecl ThreatAbstraction::CDetectionContextBase::GetResource(unsigned long)const __ptr64" ?GetResource@CDetectionContextBase@ThreatAbstraction@@UEBAPEAVCResource@IDetectionContext@2@K@Z
0x18005D188: "generic" ??_C@_07DCLBNMLN@generic?$AA@
0x180029A80: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CScanHistoryDetectionContext::`vector deleting destructor'`vtordisp{4294967292,272}' (unsigned int) __ptr64" ??_ECScanHistoryDetectionContext@ThreatAbstraction@@$4PPPPPPPM@BBA@EAAPEAXI@Z
0x180062810: "AMSKUID" ??_C@_1BA@GJEJEJKM@?$AAA?$AAM?$AAS?$AAK?$AAU?$AAI?$AAD?$AA?$AA@
0x18004E730: "const CPseudoLockBase::`vftable'{for `ILockable'}" ??_7CPseudoLockBase@@6BILockable@@@
0x180011A60: "public: class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > & __ptr64 __cdecl std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::assign(class std::basic_string<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18005B428: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x180033FD0: "private: static void __cdecl CommonUtil::CGenericGlobalAtStartup<struct CommonUtil::CGenericAtStartupPolicy2nd<class CommonUtil::CMpCriticalSection> >::OnDestroy(struct tagMP_AT_STARTUP_TYPE * __ptr64)" ?OnDestroy@?$CGenericGlobalAtStartup@U?$CGenericAtStartupPolicy2nd@VCMpCriticalSection@CommonUtil@@@CommonUtil@@@CommonUtil@@CAXPEAUtagMP_AT_STARTUP_TYPE@@@Z
0x18006C840: "__vectorcall ??_R1A@?0A@EA@_Container_base0@std" ??_R1A@?0A@EA@_Container_base0@std@@8
0x180061F98: "const ThreatAbstraction::CConfigController::`vbtable'{for `CPseudoRefCountedBase'}" ??_8CConfigController@ThreatAbstraction@@7BCPseudoRefCountedBase@@@
0x18005E8D8: "176" ??_C@_17BPIFODBN@?$AA1?$AA7?$AA6?$AA?$AA@
0x1800309C0: "protected: virtual long __cdecl MorroCommon::CWin32::RegSetValueExImpl(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?RegSetValueExImpl@CWin32@MorroCommon@@MEAAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18004ECA8: "const ThreatAbstraction::CAutoActionManager::`vftable'{for `CCritSectionBase'}" ??_7CAutoActionManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x180006BE8: "long __cdecl SetASRRuleIdsDefaultActions(struct _MI_Context * __ptr64,struct _MI_ConstStringAField,struct _MI_ConstUint8AField,class CData & __ptr64,bool)" ?SetASRRuleIdsDefaultActions@@YAJPEAU_MI_Context@@U_MI_ConstStringAField@@U_MI_ConstUint8AField@@AEAVCData@@_N@Z
0x18004DC98: "const ThreatAbstraction::CScheduledScanController::`vftable'" ??_7CScheduledScanController@ThreatAbstraction@@6B@
0x1800614E8: "Custom Scan" ??_C@_1BI@KAFDDHJA@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?5?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x180060400: "ConfigListExtension" ??_C@_1CI@FCAPHNHP@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAL?$AAi?$AAs?$AAt?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000FF30: "private: long __cdecl CThreatRollupManager::AddUniqueThreatsToList(enum tagMPTHREAT_SOURCE) __ptr64" ?AddUniqueThreatsToList@CThreatRollupManager@@AEAAJW4tagMPTHREAT_SOURCE@@@Z
0x180025FB0: "[thunk]:public: virtual void __cdecl CPseudoLockBase::Lock`vtordisp{4294967292,96}' (void)const __ptr64" ?Lock@CPseudoLockBase@@$4PPPPPPPM@GA@EBAXXZ
0x18004D738: "const ThreatAbstraction::IDetectionContexts::`vftable'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_7IDetectionContexts@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18005F590: "CloudExtendedTimeout" ??_C@_1CK@NAIKLHEL@?$AAC?$AAl?$AAo?$AAu?$AAd?$AAE?$AAx?$AAt?$AAe?$AAn?$AAd?$AAe?$AAd?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x18005B048: "__cdecl _imp_AdjustWindowRectEx" __imp_AdjustWindowRectEx
0x180005860: "public: long __cdecl CommonUtil::CRefObject::Release(void)const __ptr64" ?Release@CRefObject@CommonUtil@@QEBAJXZ
0x18005D290: "Association" ??_C@_1BI@MLOOEMDE@?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180002230: MSFT_MpThreatCatalog_Unload
0x180069EA0: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `ThreatAbstraction::IActionEvents'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6BIActionEvents@2@@
0x180002090: DllRegisterServer
0x18007EC40: "__vectorcall ??_R0?AV?$ISequence@VIDetectionContext@ThreatAbstraction@@@" ??_R0?AV?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@8
0x18007F230: "__vectorcall ??_R0?AVCHeartBeatController@ThreatAbstraction@" ??_R0?AVCHeartBeatController@ThreatAbstraction@@@8
0x180062570: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18002C5B0: "public: virtual void __cdecl ThreatAbstraction::CDetectionContextBase::SetActionTaken(int) __ptr64" ?SetActionTaken@CDetectionContextBase@ThreatAbstraction@@UEAAXH@Z
0x180044910: "public: static void __cdecl Microsoft::SecurityClient::CXMLDataAccessor::GetNodeNameValue(class ATL::CComPtr<struct IXMLDOMNode> const & __ptr64,class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > * __ptr64)" ?GetNodeNameValue@CXMLDataAccessor@SecurityClient@Microsoft@@SAXAEBV?$CComPtr@UIXMLDOMNode@@@ATL@@PEAV?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@Z
0x180068CD0: "__vectorcall ??_R2CSignatureUpdateController@ThreatAbstraction" ??_R2CSignatureUpdateController@ThreatAbstraction@@8
0x180062750: "const Microsoft::SecurityClient::CBrandedValues::`vbtable'" ??_8CBrandedValues@SecurityClient@Microsoft@@7B@
0x180068D80: "__vectorcall ??_R3CSignatureUpdateController@ThreatAbstraction" ??_R3CSignatureUpdateController@ThreatAbstraction@@8
0x180068CF0: "__vectorcall ??_R1A@BI@3FA@ILockable" ??_R1A@BI@3FA@ILockable@@8
0x180069288: "const ThreatAbstraction::CScanHistoryController::`RTTI Complete Object Locator'" ??_R4CScanHistoryController@ThreatAbstraction@@6B@
0x180005410: "public: virtual void * __ptr64 __cdecl Microsoft::SecurityClient::IXMLBrandedStrings::`scalar deleting destructor'(unsigned int) __ptr64" ??_GIXMLBrandedStrings@SecurityClient@Microsoft@@UEAAPEAXI@Z
0x18000B7DC: "public: void __cdecl std::_Wrap_alloc<class std::allocator<struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> > >::deallocate(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64,unsigned __int64) __ptr64" ?deallocate@?$_Wrap_alloc@V?$allocator@U?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@std@@@std@@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@_K@Z
0x180017710: "public: virtual void * __ptr64 __cdecl ThreatAbstraction::COnDemandController::CScanContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCScanContext@COnDemandController@ThreatAbstraction@@UEAAPEAXI@Z
0x180003BD0: "public: __cdecl CThreatCatalogManager::~CThreatCatalogManager(void) __ptr64" ??1CThreatCatalogManager@@QEAA@XZ
0x18001D7AC: "public: __cdecl CommonUtil::AutoRef<struct IMsMpClientUtils>::~AutoRef<struct IMsMpClientUtils>(void) __ptr64" ??1?$AutoRef@UIMsMpClientUtils@@@CommonUtil@@QEAA@XZ
0x18006B080: "const ISequence<class ThreatAbstraction::IAutoIgnoreThreat>::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@6BILockable@@@
0x18005D4F8: "MaxLen" ??_C@_1O@HDJMCNOC@?$AAM?$AAa?$AAx?$AAL?$AAe?$AAn?$AA?$AA@
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@UEBAJXZ
0x18006A228: "const ThreatAbstraction::CContextManager::CDetectionStats::`RTTI Complete Object Locator'{for `CRefCountedBase'}" ??_R4CDetectionStats@CContextManager@ThreatAbstraction@@6BCRefCountedBase@@@
0x180068AD0: "__vectorcall ??_R3CScheduledScanContext@CScheduledScanController@ThreatAbstraction" ??_R3CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@8
0x18000D5E0: "public: void __cdecl AMIndication::Register(void) __ptr64" ?Register@AMIndication@@QEAAXXZ
0x18005E7A0: "170" ??_C@_17DKOOLMMB@?$AA1?$AA7?$AA0?$AA?$AA@
0x180068480: "const ThreatAbstraction::IDetectionContexts::`RTTI Complete Object Locator'" ??_R4IDetectionContexts@ThreatAbstraction@@6B@
0x180068A30: "__vectorcall ??_R2CScheduledScanContext@CScheduledScanController@ThreatAbstraction" ??_R2CScheduledScanContext@CScheduledScanController@ThreatAbstraction@@8
0x18002F270: "public: virtual class CWString const * __ptr64 __cdecl ThreatAbstraction::CThreatInfo::GetCategoryDescription(void)const __ptr64" ?GetCategoryDescription@CThreatInfo@ThreatAbstraction@@UEBAPEBVCWString@@XZ
0x18006C2A0: "__vectorcall ??_R2IRefObject@CommonUtil" ??_R2IRefObject@CommonUtil@@8
0x180061C20: "Errors were encountered when att" ??_C@_1IG@OOCFLNBL@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?5?$AAw?$AAe?$AAr?$AAe?$AA?5?$AAe?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?5?$AAw?$AAh?$AAe?$AAn?$AA?5?$AAa?$AAt?$AAt@
0x18006C2B0: "__vectorcall ??_R3IRefObject@CommonUtil" ??_R3IRefObject@CommonUtil@@8
0x180038AD8: "public: __cdecl ATL::CAutoVectorPtr<unsigned short>::~CAutoVectorPtr<unsigned short>(void) __ptr64" ??1?$CAutoVectorPtr@G@ATL@@QEAA@XZ
0x18002A430: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CQuarantineDetectionContext::`vector deleting destructor'`vtordisp{4294967292,312}' (unsigned int) __ptr64" ??_ECQuarantineDetectionContext@ThreatAbstraction@@$4PPPPPPPM@BDI@EAAPEAXI@Z
0x18002A5B0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownGood`vtordisp{4294967292,40}' (void)const __ptr64" ?IsKnownGood@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAHXZ
0x18005B128: WTSAPI32_NULL_THUNK_DATA
0x18006C300: "__vectorcall ??_R1A@?0A@EA@CPathUtils@MorroCommon" ??_R1A@?0A@EA@CPathUtils@MorroCommon@@8
0x1800326D0: "public: virtual long __cdecl MpCommonEx::CBrandedResourceWrapper::CBrandingSettings::GetArc(unsigned short * __ptr64 * __ptr64)const __ptr64" ?GetArc@CBrandingSettings@CBrandedResourceWrapper@MpCommonEx@@UEBAJPEAPEAG@Z
0x18005DC80: "33" ??_C@_15COENHMBA@?$AA3?$AA3?$AA?$AA@
0x180027800: "protected: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> > > > __cdecl std::_Tree<class std::_Tmap_traits<struct tagMPTHREAT_INFO * __ptr64,struct _GUID,class ThreatAbstraction::CQuarantineInfoComparison,class std::allocator<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> >,0> >::_Insert_at<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,struct std::_Nil>(bool,struct std::_Tree_node<struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID>,void * __ptr64> * __ptr64,struct std::pair<struct tagMPTHREAT_INFO * __ptr64 const,struct _GUID> &&,struct std::_Nil) __ptr64" ??$_Insert_at@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@U_Nil@2@@?$_Tree@V?$_Tmap_traits@PEAUtagMPTHREAT_INFO@@U_GUID@@VCQuarantineInfoComparison@ThreatAbstraction@@V?$allocator@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@$0A@@std@@@std@@IEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@@std@@@std@@@1@_NPEAU?$_Tree_node@U?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@std@@PEAX@1@$$QEAU?$pair@QEAUtagMPTHREAT_INFO@@U_GUID@@@1@U_Nil@1@@Z
0x18005AFD0: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x180038958: "public: long __cdecl ATL::CComBSTR::Append(char const * __ptr64) __ptr64" ?Append@CComBSTR@ATL@@QEAAJPEBD@Z
0x180024610: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnRoutineCleanStart`vtordisp{4294967292,80}' (class ThreatAbstraction::IDetectionContexts const * __ptr64) __ptr64" ?OnRoutineCleanStart@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXPEBVIDetectionContexts@2@@Z
0x180069370: "const ThreatAbstraction::CQuarantineController::`RTTI Complete Object Locator'" ??_R4CQuarantineController@ThreatAbstraction@@6B@
0x180001630: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Iostream_error_category@std@@UEAAPEAXI@Z
0x180039710: "public: virtual void * __ptr64 __cdecl MorroCommon::CLockedCertCheckImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLockedCertCheckImpl@MorroCommon@@UEAAPEAXI@Z
0x18002A9A4: "public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsOfflineDetection(void)const __ptr64" ?IsOfflineDetection@CDetectionContextBase@ThreatAbstraction@@UEBAHXZ
0x18001B260: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CActiveThreatsController::`vector deleting destructor'`vtordisp{4294967292,104}' (unsigned int) __ptr64" ??_ECActiveThreatsController@ThreatAbstraction@@$4PPPPPPPM@GI@EAAPEAXI@Z
0x180029120: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequest(class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@IContextEventsImpl@ThreatAbstraction@@MEAAXPEAVISampleRequest@2@@Z
0x18002B4C4: "public: __cdecl ThreatAbstraction::CDetectionContextBase::CDetectionContextBase(unsigned long) __ptr64" ??0CDetectionContextBase@ThreatAbstraction@@QEAA@K@Z
0x1800789A0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x180062448: "%d.%d.%d.%d" ??_C@_1BI@FCMLLAGN@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x18004CBB0: "const std::_Iostream_error_category::`vftable'" ??_7_Iostream_error_category@std@@6B@
0x180054C80: MSFT_MpScan_rtti
0x180029210: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnInternalError(long) __ptr64" ?OnInternalError@IContextEventsImpl@ThreatAbstraction@@MEAAXJ@Z
0x180061A20: "Virus and spyware definitions up" ??_C@_1JM@GOHAEAJG@?$AAV?$AAi?$AAr?$AAu?$AAs?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAs?$AAp?$AAy?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAd?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?5?$AAu?$AAp@
0x18002FEE4: "public: class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > __cdecl ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > >::Mid(int,int)const __ptr64" ?Mid@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@HH@Z
0x18005D3A8: "DN" ??_C@_15KBDPDJCI@?$AAD?$AAN?$AA?$AA@
0x180061440: "Full Scan" ??_C@_1BE@FIAPPBHB@?$AAF?$AAu?$AAl?$AAl?$AA?5?$AAS?$AAc?$AAa?$AAn?$AA?$AA@
0x18004E698: "const CSequenceBase<class ThreatAbstraction::IDetectionContext,class CPseudoLockBase>::`vftable'{for `CPseudoLockBase'}" ??_7?$CSequenceBase@VIDetectionContext@ThreatAbstraction@@VCPseudoLockBase@@@@6BCPseudoLockBase@@@
0x18004D4B8: "const CDetectionsManager::`vftable'" ??_7CDetectionsManager@@6B@
0x180012650: "public: virtual void * __ptr64 __cdecl ATL::CAtlStringMgr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAtlStringMgr@ATL@@UEAAPEAXI@Z
0x18005CA28: "operation_would_block" ??_C@_0BG@GDGHKFDH@operation_would_block?$AA@
0x180078E20: ext-ms-win-shell-shell32-l1-2-1_NULL_THUNK_DATA_DLN
0x18005F4A0: "SevereThreatDefaultAction" ??_C@_1DE@IDBILPHC@?$AAS?$AAe?$AAv?$AAe?$AAr?$AAe?$AAT?$AAh?$AAr?$AAe?$AAa?$AAt?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18005ECC0: "SignatureDefinitionUpdateFileSha" ??_C@_1FG@FFFGFIFP@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAD?$AAe?$AAf?$AAi?$AAn?$AAi?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AAS?$AAh?$AAa@
0x18005B228: "__cdecl _imp_MpClientUtilExportFunctions" __imp_MpClientUtilExportFunctions
0x18005B240: "__cdecl _imp_MpUtilsExportFunctions" __imp_MpUtilsExportFunctions
0x180068DC0: "const ThreatAbstraction::CSignatureUpdateController::CUpdateContext::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CUpdateContext@CSignatureUpdateController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18006C7A0: "__vectorcall ??_R1A@?0A@EA@CWString" ??_R1A@?0A@EA@CWString@@8
0x18006AF68: "const ThreatAbstraction::CAutoIgnoreThreats::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CAutoIgnoreThreats@ThreatAbstraction@@6BCCritSectionBase@@@
0x18004FAF0: "const ThreatAbstraction::CThreatInfo::`vftable'" ??_7CThreatInfo@ThreatAbstraction@@6B@
0x18006C9C0: "const CommonUtil::CHResultExceptionImpl::`RTTI Complete Object Locator'" ??_R4CHResultExceptionImpl@CommonUtil@@6B@
0x180041E5C: "public: static long __cdecl Microsoft::SecurityClient::CDeploymentBrand::HrCreate(struct Microsoft::SecurityClient::IXMLDeployment * __ptr64 * __ptr64,struct Microsoft::SecurityClient::IXMLReader const * __ptr64)" ?HrCreate@CDeploymentBrand@SecurityClient@Microsoft@@SAJPEAPEAUIXMLDeployment@23@PEBUIXMLReader@23@@Z
0x180031AB0: "protected: virtual int __cdecl MorroCommon::CWin32::GetVersionExImpl(struct _OSVERSIONINFOW * __ptr64) __ptr64" ?GetVersionExImpl@CWin32@MorroCommon@@MEAAHPEAU_OSVERSIONINFOW@@@Z
0x18005CA00: "wrong_protocol_type" ??_C@_0BE@GAOJJFPC@wrong_protocol_type?$AA@
0x180030AB0: "protected: virtual int __cdecl MorroCommon::CWin32::GetLocaleInfoImpl(unsigned long,unsigned long,unsigned short * __ptr64,int) __ptr64" ?GetLocaleInfoImpl@CWin32@MorroCommon@@MEAAHKKPEAGH@Z
0x180062100: "const ThreatAbstraction::CQuarantineContextManager::`vbtable'{for `ThreatAbstraction::IContextEventsImpl'}" ??_8CQuarantineContextManager@ThreatAbstraction@@7BIContextEventsImpl@1@@
0x180005DDC: "public: __cdecl CUniqueMpPtr<unsigned char,void>::~CUniqueMpPtr<unsigned char,void>(void) __ptr64" ??1?$CUniqueMpPtr@EX@@QEAA@XZ
0x18007F9C0: "__vectorcall ??_R0?AVCAutoIgnoreThreats@ThreatAbstraction@" ??_R0?AVCAutoIgnoreThreats@ThreatAbstraction@@@8
0x180043A78: "protected: void __cdecl std::vector<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > >,class std::allocator<class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > >::_Destroy(class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64,class CommonUtil::AutoRefWrapper<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > * __ptr64) __ptr64" ?_Destroy@?$vector@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@V?$allocator@V?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@std@@@std@@IEAAXPEAV?$AutoRefWrapper@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@0@Z
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool> > >::_Freenode0(struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,bool>,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@_N@std@@PEAX@2@@Z
0x180016064: "public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::GetCount(void)const __ptr64" ?GetCount@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@UEBAKXZ
0x18005B368: "__cdecl _imp_calloc" __imp_calloc
0x1800622C8: "const MpCommonEx::CBrandedAPI::`vbtable'" ??_8CBrandedAPI@MpCommonEx@@7B@
0x18007F3F0: "__vectorcall ??_R0?AVIScanProgressInfo@ThreatAbstraction@" ??_R0?AVIScanProgressInfo@ThreatAbstraction@@@8
0x180016FA0: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,88}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@FI@EBAHXZ
0x18006A030: "const ThreatAbstraction::CActiveThreatsContextManager::`RTTI Complete Object Locator'{for `CCritSectionBase'}" ??_R4CActiveThreatsContextManager@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003D860: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::AddRef`vtordisp{4294967292,8}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@7EBAJXZ
0x18005FF18: "ProtectionManagement" ??_C@_1CK@KNCNNGJA@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18007FAD0: "__vectorcall ??_R0?AVIAutoIgnoreThreats@ThreatAbstraction@" ??_R0?AVIAutoIgnoreThreats@ThreatAbstraction@@@8
0x18006DAE8: "__vectorcall ??_R2?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil" ??_R2?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@8
0x18006DBC0: "__vectorcall ??_R3?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil" ??_R3?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@8
0x1800244B0: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnSampleRequest`vtordisp{4294967292,80}' (class ThreatAbstraction::ISampleRequest * __ptr64) __ptr64" ?OnSampleRequest@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXPEAVISampleRequest@2@@Z
0x180019BA8: WPP_SF_SD
0x180019BA8: WPP_SF_Sd
0x180012874: WPP_SF_sd
0x18007F3B0: "__vectorcall ??_R0?AVCScanProgressInfo@ThreatAbstraction@" ??_R0?AVCScanProgressInfo@ThreatAbstraction@@@8
0x18005B340: "__cdecl _imp_free" __imp_free
0x180001F98: GetFunctionPointer
0x18005B2A0: "__cdecl _imp_MpConfigGetValueAlloc" __imp_MpConfigGetValueAlloc
0x18005E230: "112" ??_C@_17EGLOJHFH@?$AA1?$AA1?$AA2?$AA?$AA@
0x180080290: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLReader@SecurityClient@Microsoft@@@CommonUtil@@@8
0x180067790: "const ThreatAbstraction::IScanProgress::`RTTI Complete Object Locator'{for `IRefCounted'}" ??_R4IScanProgress@ThreatAbstraction@@6BIRefCounted@@@
0x180033E74: "public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::AddRef(void)const __ptr64" ?AddRef@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@UEBAJXZ
0x1800142B0: "public: long __cdecl CData::StartWDOScan(void) __ptr64" ?StartWDOScan@CData@@QEAAJXZ
0x180045C10: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003380: "public: __cdecl CDetectionsManager::~CDetectionsManager(void) __ptr64" ??1CDetectionsManager@@QEAA@XZ
0x1800120DC: "public: virtual void * __ptr64 __cdecl MpWmiHeartBeat::`vector deleting destructor'(unsigned int) __ptr64" ??_EMpWmiHeartBeat@@UEAAPEAXI@Z
0x180013CA4: "public: static long __cdecl CData::GetConfigString(unsigned short const * __ptr64,unsigned short const * __ptr64,class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > * __ptr64,enum tagMP_CONFIG_ORIGIN * __ptr64)" ?GetConfigString@CData@@SAJPEBG0PEAV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@PEAW4tagMP_CONFIG_ORIGIN@@@Z
0x18005E600: "150" ??_C@_17HHCGBNMK@?$AA1?$AA5?$AA0?$AA?$AA@
0x1800307B8: "public: __cdecl ATL::CHeapPtr<unsigned short,class ATL::CLocalAllocator>::~CHeapPtr<unsigned short,class ATL::CLocalAllocator>(void) __ptr64" ??1?$CHeapPtr@GVCLocalAllocator@ATL@@@ATL@@QEAA@XZ
0x18006C6F0: "__vectorcall ??_R2_Container_base0@std" ??_R2_Container_base0@std@@8
0x18006C898: "__vectorcall ??_R3_Container_base0@std" ??_R3_Container_base0@std@@8
0x18005F900: "270" ??_C@_17LEGBLLCC@?$AA2?$AA7?$AA0?$AA?$AA@
0x180031D00: WPP_SF_Sq
0x1800128E4: WPP_SF_sq
0x18002F448: WPP_SF_SS
0x180030E40: "protected: virtual void * __ptr64 __cdecl MorroCommon::CWin32::OpenProcessImpl(unsigned long,int,unsigned long) __ptr64" ?OpenProcessImpl@CWin32@MorroCommon@@MEAAPEAXKHK@Z
0x18004DFD0: "const ThreatAbstraction::IScanProgressInfoQueue::`vftable'{for `ThreatAbstraction::IScanProgressInfoQueue'}" ??_7IScanProgressInfoQueue@ThreatAbstraction@@6B01@@
0x1800251F0: "public: virtual class ThreatAbstraction::IDetectionContexts * __ptr64 __cdecl ThreatAbstraction::CScanHistoryContextManager::GetDetectionContextsByType(unsigned long) __ptr64" ?GetDetectionContextsByType@CScanHistoryContextManager@ThreatAbstraction@@UEAAPEAVIDetectionContexts@2@K@Z
0x18000F1D0: MSFT_MpEvent_Subscribe
0x18005E098: "66" ??_C@_15EJFOBNJB@?$AA6?$AA6?$AA?$AA@
0x18005FB70: "291" ??_C@_17DGNHLNDH@?$AA2?$AA9?$AA1?$AA?$AA@
0x18006AC30: "__vectorcall ??_R1A@?0A@EA@CAutoIgnoreThreats@ThreatAbstraction" ??_R1A@?0A@EA@CAutoIgnoreThreats@ThreatAbstraction@@8
0x180032FA0: "public: virtual long __cdecl MpCommonEx::CBrandedAPI::LoadBrandedValue(unsigned long * __ptr64,unsigned short const * __ptr64) __ptr64" ?LoadBrandedValue@CBrandedAPI@MpCommonEx@@UEAAJPEAKPEBG@Z
0x18003D9C4: "public: static long __cdecl Microsoft::SecurityClient::CBrandedStrings::HrCreate(struct Microsoft::SecurityClient::IXMLBrandedStrings * __ptr64 * __ptr64,unsigned short const * __ptr64,struct Microsoft::SecurityClient::IXMLReader const * __ptr64)" ?HrCreate@CBrandedStrings@SecurityClient@Microsoft@@SAJPEAPEAUIXMLBrandedStrings@23@PEBGPEBUIXMLReader@23@@Z
0x18005B330: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180031260: "protected: virtual long __cdecl MorroCommon::CWin32::CoCreateGuidImpl(struct _GUID * __ptr64) __ptr64" ?CoCreateGuidImpl@CWin32@MorroCommon@@MEAAJPEAU_GUID@@@Z
0x18002A6D0: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsKnownBad`vtordisp{4294967292,40}' (void)const __ptr64" ?IsKnownBad@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@CI@EBAHXZ
0x18001CEA8: "protected: void __cdecl std::deque<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> >,class std::allocator<class CSmartPtr<class ThreatAbstraction::IScanProgressInfo const,class VolatileOps<class ThreatAbstraction::IScanProgressInfo const> > > >::_Growmap(unsigned __int64) __ptr64" ?_Growmap@?$deque@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@V?$allocator@V?$CSmartPtr@$$CBVIScanProgressInfo@ThreatAbstraction@@V?$VolatileOps@$$CBVIScanProgressInfo@ThreatAbstraction@@@@@@@std@@@std@@IEAAX_K@Z
0x180034280: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedColors>::Release`vtordisp{4294967292,0}' (void)const __ptr64" ?Release@?$CRefObjectFor@UIXMLBrandedColors@SecurityClient@Microsoft@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180045020: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x1800166C0: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,72}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@EI@EBAHXZ
0x1800609F8: "Scan_ScheduleQuickScanTime" ??_C@_1DG@CGDCHEHA@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAS?$AAc?$AAa?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18005F7C0: "ControlledFolderAccessProtectedF" ??_C@_1EO@EMEFBDEC@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAd?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAF@
0x18005AB60: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18004D538: "const MpWmiScanProgress::`vftable'{for `ThreatAbstraction::IScanProgress'}" ??_7MpWmiScanProgress@@6BIScanProgress@ThreatAbstraction@@@
0x180016470: "[thunk]:public: virtual unsigned long __cdecl CSequenceBase<class ThreatAbstraction::IAutoIgnoreThreat,class CCritSectionBase>::GetCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetCount@?$CSequenceBase@VIAutoIgnoreThreat@ThreatAbstraction@@VCCritSectionBase@@@@$4PPPPPPPM@A@EBAKXZ
0x18000F380: MPTHREAT_LOCALIZED_INFO_FREE
0x18001C730: "[thunk]:public: virtual void * __ptr64 __cdecl ThreatAbstraction::CConfigController::`vector deleting destructor'`vtordisp{4294967292,80}' (unsigned int) __ptr64" ??_ECConfigController@ThreatAbstraction@@$4PPPPPPPM@FA@EAAPEAXI@Z
0x18001FAB4: "public: struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64 __cdecl std::_Tree_alloc<0,struct std::_Tree_base_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >::_Buyheadnode(void) __ptr64" ?_Buyheadnode@?$_Tree_alloc@$0A@U?$_Tree_base_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@2@@std@@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@XZ
0x18003C780: "long __cdecl CommonUtil::OnInitializeAtStartupNoThrow(long (__cdecl*)(void * __ptr64),void * __ptr64)" ?OnInitializeAtStartupNoThrow@CommonUtil@@YAJP6AJPEAX@Z0@Z
0x18006AD48: "__vectorcall ??_R1A@A@M@FA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@" ??_R1A@A@M@FA@?$ISequence@VIAutoIgnoreThreat@ThreatAbstraction@@@@8
0x1800410A0: "protected: virtual void * __ptr64 __cdecl CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLFeatures>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@MEAAPEAXI@Z
0x18005AE88: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x180029620: "[thunk]:public: virtual unsigned long __cdecl ThreatAbstraction::CDetectionContextBase::GetConfigChangeCount`vtordisp{4294967292,0}' (void)const __ptr64" ?GetConfigChangeCount@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAKXZ
0x18004E660: "const ThreatAbstraction::CContextManager::CDetectionContextsBase::`vftable'{for `CPseudoLockBase'}" ??_7CDetectionContextsBase@CContextManager@ThreatAbstraction@@6BCPseudoLockBase@@@
0x18005CF08: "too many symbolic link levels" ??_C@_0BO@EFGOJEF@too?5many?5symbolic?5link?5levels?$AA@
0x18005E5F0: "148" ??_C@_17HJMOOGIA@?$AA1?$AA4?$AA8?$AA?$AA@
0x18005EEE8: "214" ??_C@_17ONFKMPGI@?$AA2?$AA1?$AA4?$AA?$AA@
0x18000EEA0: MSFT_MpThreatDetection_EnumerateInstances
0x18005B270: "__cdecl _imp_MpThreatEnumerate" __imp_MpThreatEnumerate
0x1800800F8: "__vectorcall ??_R0?AU_Container_base0@std@" ??_R0?AU_Container_base0@std@@@8
0x1800291E0: "protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextError(class ThreatAbstraction::IDetectionContext const * __ptr64,long) __ptr64" ?OnContextError@IContextEventsImpl@ThreatAbstraction@@MEAAXPEBVIDetectionContext@2@J@Z
0x180022D24: "public: class std::_Tree_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > > __cdecl std::_Tree<class std::_Tmap_traits<unsigned long,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > >,0> >::erase(class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >,class std::_Tree_const_iterator<class std::_Tree_val<struct std::_Tree_simple_types<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > > >) __ptr64" ?erase@?$_Tree@V?$_Tmap_traits@KV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@U?$less@K@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@3@$0A@@std@@@std@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@2@V?$_Tree_const_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@std@@@std@@@2@0@Z
0x18006B5F8: "const ThreatAbstraction::CQuarantineDetectionContext::`RTTI Complete Object Locator'{for `ThreatAbstraction::IDetectionContext'}" ??_R4CQuarantineDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x1800505E8: "const CommonUtil::CRefObjectFor<struct Microsoft::SecurityClient::IXMLBrandedValues>::`vftable'{for `Microsoft::SecurityClient::IXMLBrandedValues'}" ??_7?$CRefObjectFor@UIXMLBrandedValues@SecurityClient@Microsoft@@@CommonUtil@@6BIXMLBrandedValues@SecurityClient@Microsoft@@@
0x180012740: "public: virtual void * __ptr64 __cdecl ATL::CWin32Heap::`vector deleting destructor'(unsigned int) __ptr64" ??_ECWin32Heap@ATL@@UEAAPEAXI@Z
0x18003F660: "public: virtual __cdecl Microsoft::SecurityClient::CBrandedValues::~CBrandedValues(void) __ptr64" ??1CBrandedValues@SecurityClient@Microsoft@@UEAA@XZ
0x18005F810: "261" ??_C@_17MHIBAPOC@?$AA2?$AA6?$AA1?$AA?$AA@
0x180062C10: "%ARC%" ??_C@_1M@HMODCKJD@?$AA?$CF?$AAA?$AAR?$AAC?$AA?$CF?$AA?$AA@
0x18004EE00: "const ThreatAbstraction::COnDemandDetectionContext::`vftable'{for `ThreatAbstraction::IDetectionContext'}" ??_7COnDemandDetectionContext@ThreatAbstraction@@6BIDetectionContext@1@@
0x18002A0DC: "public: virtual unsigned long __cdecl ThreatAbstraction::CThreatInfo::GetThreatType(void)const __ptr64" ?GetThreatType@CThreatInfo@ThreatAbstraction@@UEBAKXZ
0x180024450: "[thunk]:protected: virtual void __cdecl ThreatAbstraction::IContextEventsImpl::OnContextActivated`vtordisp{4294967292,80}' (unsigned long) __ptr64" ?OnContextActivated@IContextEventsImpl@ThreatAbstraction@@$2PPPPPPPM@FA@EAAXK@Z
0x180029760: "[thunk]:public: virtual int __cdecl ThreatAbstraction::CDetectionContextBase::IsOfflineDetection`vtordisp{4294967292,0}' (void)const __ptr64" ?IsOfflineDetection@CDetectionContextBase@ThreatAbstraction@@$4PPPPPPPM@A@EBAHXZ
0x180062858: ".//BrandedValues" ??_C@_1CC@HLDCBCEF@?$AA?4?$AA?1?$AA?1?$AAB?$AAr?$AAa?$AAn?$AAd?$AAe?$AAd?$AAV?$AAa?$AAl?$AAu?$AAe?$AAs?$AA?$AA@
0x180016590: "[thunk]:public: virtual int __cdecl CCritSectionBase::TryLock`vtordisp{4294967292,56}' (void)const __ptr64" ?TryLock@CCritSectionBase@@$4PPPPPPPM@DI@EBAHXZ
0x180069EC8: "const ThreatAbstraction::CActiveThreatsContextManager::CActiveDetectionContexts::`RTTI Complete Object Locator'{for `ISequence<class ThreatAbstraction::IDetectionContext>'}" ??_R4CActiveDetectionContexts@CActiveThreatsContextManager@ThreatAbstraction@@6B?$ISequence@VIDetectionContext@ThreatAbstraction@@@@@
0x18007F2F0: "__vectorcall ??_R0?AVCConfigController@ThreatAbstraction@" ??_R0?AVCConfigController@ThreatAbstraction@@@8
0x18002AB50: "[thunk]:public: virtual enum tagMPTHREAT_STATUS __cdecl ThreatAbstraction::CThreatInfo::GetThreatStatus`vtordisp{4294967292,8}' (void)const __ptr64" ?GetThreatStatus@CThreatInfo@ThreatAbstraction@@$4PPPPPPPM@7EBA?AW4tagMPTHREAT_STATUS@@XZ
0x180069B70: "__vectorcall ??_R1A@BA@7FA@ILockable" ??_R1A@BA@7FA@ILockable@@8
0x18005E5B8: "147" ??_C@_17CBKNPGNG@?$AA1?$AA4?$AA7?$AA?$AA@
0x180027B58: WPP_SF_S
0x18006BDF8: "__vectorcall ??_R2CBrandedResources@MpCommonEx" ??_R2CBrandedResources@MpCommonEx@@8
0x18006BFF8: "__vectorcall ??_R3CBrandedResources@MpCommonEx" ??_R3CBrandedResources@MpCommonEx@@8
0x1800342A0: "[thunk]:public: virtual long __cdecl CommonUtil::CRefObjectFor<struct MpCommonEx::IBrandedResources>::AddRef`vtordisp{4294967292,0}' (void)const __ptr64" ?AddRef@?$CRefObjectFor@UIBrandedResources@MpCommonEx@@@CommonUtil@@$4PPPPPPPM@A@EBAJXZ
0x180012330: "[thunk]:public: virtual void * __ptr64 __cdecl MpWmiHeartBeat::`vector deleting destructor'`vtordisp{4294967292,0}' (unsigned int) __ptr64" ??_EMpWmiHeartBeat@@$4PPPPPPPM@A@EAAPEAXI@Z
0x180042800: "public: virtual long __cdecl Microsoft::SecurityClient::CDeploymentBrand::HrGetUpgradeSequence(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class CommonUtil::CRefClass<class CommonUtil::CStdRefVector<class CommonUtil::CRefClass<class std::map<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,struct std::less<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > >,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > > > > > > > * __ptr64 * __ptr64)const __ptr64" ?HrGetUpgradeSequence@CDeploymentBrand@SecurityClient@Microsoft@@UEBAJPEBG00PEAPEAV?$CRefClass@V?$CStdRefVector@V?$CRefClass@V?$map@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@U?$less@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@V12@@std@@@4@@std@@@CommonUtil@@@CommonUtil@@@CommonUtil@@@Z
0x18005C9C0: "not_a_socket" ??_C@_0N@IMHKKLEM@not_a_socket?$AA@
0x1800463CD: memset
0x180079150: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18005DB40: "NISSignatureAge" ??_C@_1CA@DJGIGGFJ@?$AAN?$AAI?$AAS?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAA?$AAg?$AAe?$AA?$AA@
0x180050728: "const Microsoft::SecurityClient::CFeatureBrand::`vftable'{for `Microsoft::SecurityClient::IXMLFeatures'}" ??_7CFeatureBrand@SecurityClient@Microsoft@@6BIXMLFeatures@12@@
0x18000B7DC: "public: void __cdecl std::_Tree_buy<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,class std::allocator<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > > > >::_Freenode0(struct std::_Tree_node<struct std::pair<unsigned long const,class CSmartPtr<class ThreatAbstraction::IDetectionContext,class VolatileOps<class ThreatAbstraction::IDetectionContext> > >,void * __ptr64> * __ptr64) __ptr64" ?_Freenode0@?$_Tree_buy@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@V?$allocator@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@@2@@std@@QEAAXPEAU?$_Tree_node@U?$pair@$$CBKV?$CSmartPtr@VIDetectionContext@ThreatAbstraction@@V?$VolatileOps@VIDetectionContext@ThreatAbstraction@@@@@@@std@@PEAX@2@@Z
0x180010D7C: "public: struct std::_Tree_node<unsigned __int64,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<unsigned __int64,class std::allocator<unsigned __int64> >::_Buynode<unsigned __int64 const & __ptr64>(unsigned __int64 const & __ptr64) __ptr64" ??$_Buynode@AEB_K@?$_Tree_buy@_KV?$allocator@_K@std@@@std@@QEAAPEAU?$_Tree_node@_KPEAX@1@AEB_K@Z
0x18004D590: "const MpWmiSignatureProgress::`vftable'" ??_7MpWmiSignatureProgress@@6B@
0x18006A9C0: "const ThreatAbstraction::CQuarantineContextManager::`RTTI Complete Object Locator'{for `ThreatAbstraction::IContextEvents'}" ??_R4CQuarantineContextManager@ThreatAbstraction@@6BIContextEvents@1@@
0x1800606C0: "Scan_ScheduleTime" ??_C@_1CE@GBAAHKHB@?$AAS?$AAc?$AAa?$AAn?$AA_?$AAS?$AAc?$AAh?$AAe?$AAd?$AAu?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1800377B0: "protected: virtual long __cdecl MorroCommon::CFileUtils::DeleteFileIfSizeExceededImpl(class ATL::CStringT<unsigned short,class ATL::StrTraitATL<unsigned short,class ATL::ChTraitsCRT<unsigned short> > > const & __ptr64,__int64) __ptr64" ?DeleteFileIfSizeExceededImpl@CFileUtils@MorroCommon@@MEAAJAEBV?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@_J@Z
0x18006B8D0: "const ThreatAbstraction::CAutoIgnoreThreat::`RTTI Complete Object Locator'{for `ILockable'}" ??_R4CAutoIgnoreThreat@ThreatAbstraction@@6BILockable@@@
0x180045F3C: "__cdecl _tailMerge_ext_ms_win_shell_shlwapi_l1_1_0_dll" __tailMerge_ext_ms_win_shell_shlwapi_l1_1_0_dll
0x18005AE98: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18005E270: "Resources" ??_C@_1BE@PBIOBJMM@?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x1800816D0: "__vectorcall ??_R0?AV?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@" ??_R0?AV?$CRefObjectFor@UIXMLFeatures@SecurityClient@Microsoft@@@CommonUtil@@@8
0x18005B1B0: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW
0x18004DF80: "const ThreatAbstraction::CConfigController::`vftable'{for `CCritSectionBase'}" ??_7CConfigController@ThreatAbstraction@@6BCCritSectionBase@@@
0x18003FD10: "public: struct std::_Tree_node<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,void * __ptr64> * __ptr64 __cdecl std::_Tree_buy<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long>,class std::allocator<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> > const,unsigned long> > >::_Buynode<struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long> >(struct std::pair<class CommonUtil::CStdBasicString<unsigned short,struct CommonUtil::mp_char_traits<unsigned short>,class std::allocator<unsigned short> >,unsigned long> &&) __ptr64" ??$_Buynode@U?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@?$_Tree_buy@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@V?$allocator@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@@2@@std@@QEAAPEAU?$_Tree_node@U?$pair@$$CBV?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@std@@PEAX@1@$$QEAU?$pair@V?$CStdBasicString@GU?$mp_char_traits@G@CommonUtil@@V?$allocator@G@std@@@CommonUtil@@K@1@@Z
0x18005EE30: "SignatureUpdateCatchupInterval" ??_C@_1DO@NOEHMHDK@?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAC?$AAa?$AAt?$AAc?$AAh?$AAu?$AAp?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@

[JEB Decompiler by PNF Software]