Generated by JEB on 2019/08/01

PE: C:\Windows\System32\amsi.dll Base=0x180000000 SHA-256=F675D2A8686A7CFD7A7056AC490E159A17D6B728420CF15C4EE26C670437370A
PDB: Amsi.pdb GUID={4E9720EC-1428-445A-54761C1871B6F6D1} Age=1

840 located named symbols:
0x1800103C8: "__vectorcall ??_R0?AVResultException@wil@" ??_R0?AVResultException@wil@@@8
0x18000BE68: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x1800020F0: "public: virtual long __cdecl CAmsiBufferStream::Read(unsigned __int64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?Read@CAmsiBufferStream@@UEAAJ_KKPEAEPEAK@Z
0x18000AFF0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18000AFE0: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180010D48: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x18000BAA0: "illegal byte sequence" ??_C@_0BG@CDNPAGJK@illegal?5byte?5sequence?$AA@
0x180007C2C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000B018: "__cdecl _imp_EventRegister" __imp_EventRegister
0x180007F68: "public: __cdecl std::out_of_range::out_of_range(char const * __ptr64) __ptr64" ??0out_of_range@std@@QEAA@PEBD@Z
0x18000C9D8: "const CAmsiBufferStream::`RTTI Complete Object Locator'" ??_R4CAmsiBufferStream@@6B@
0x18000B588: "function not supported" ??_C@_0BH@KEFGLDAF@function?5not?5supported?$AA@
0x180003F3C: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x18000AB90: "const ATL::CComAggObject<class CAmsiAntimalware>::`vftable'" ??_7?$CComAggObject@VCAmsiAntimalware@@@ATL@@6B@
0x18000CC50: "__vectorcall ??_R1A@?0A@EA@CAmsiAntimalware" ??_R1A@?0A@EA@CAmsiAntimalware@@8
0x180007A60: "__cdecl FindPESection" _FindPESection
0x18000E5B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0
0x180007FA0: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18000B6D0: "connection_aborted" ??_C@_0BD@OJMJDIGI@connection_aborted?$AA@
0x180006240: "public: virtual long __cdecl ATL::CComObject<class CAmsiAntimalware>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCAmsiAntimalware@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000ADF0: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x18000ADC0: "__cdecl _imp_StringFromCLSID" __imp_StringFromCLSID
0x18000B0D8: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x1800063C0: "public: virtual void * __ptr64 __cdecl ATL::CComAggObject<class CAmsiAntimalware>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x18000E5F4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000B0D0: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x18000BD80: "too many files open in system" ??_C@_0BO@HACHBEKI@too?5many?5files?5open?5in?5system?$AA@
0x18000E464: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x18000BA70: "host unreachable" ??_C@_0BB@DHFDFGDM@host?5unreachable?$AA@
0x180010180: "__vectorcall ??_R0?AU_ATL_MODULE70@ATL@" ??_R0?AU_ATL_MODULE70@ATL@@@8
0x180010D88: "void (__cdecl* __ptr64 wil::details::g_pfnRethrow)(void)" ?g_pfnRethrow@details@wil@@3P6AXXZEA
0x18000C648: "__vectorcall ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL" ??_R1A@?0A@EA@?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@@8
0x180010F40: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x18000B930: "already connected" ??_C@_0BC@DFIBIBIL@already?5connected?$AA@
0x18000BC98: "operation would block" ??_C@_0BG@OEMDKMEE@operation?5would?5block?$AA@
0x1800106A0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000AE00: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1800079CC: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_KHP6AX0@Z2@Z
0x18000CD68: "__vectorcall ??_R1EA@?0A@EA@?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL" ??_R1EA@?0A@EA@?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@8
0x18000A0C8: "const std::_System_error_category::`vftable'" ??_7_System_error_category@std@@6B@
0x18000728C: "__cdecl CRT_INIT" _CRT_INIT
0x18000B090: "__cdecl _imp_??0exception@@QEAA@AEBQEBD@Z" __imp_??0exception@@QEAA@AEBQEBD@Z
0x18000BDA0: "too many links" ??_C@_0P@HCOMKFCC@too?5many?5links?$AA@
0x18000AEA8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000B5A0: "no lock available" ??_C@_0BC@NJECKMKE@no?5lock?5available?$AA@
0x18000B608: "operation canceled" ??_C@_0BD@MOLBPMEA@operation?5canceled?$AA@
0x180001440: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x180007772: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180003384: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x180002A6C: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180007F00: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x180001510: WppControlCallback
0x180008930: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002920: AmsiUacScan
0x18000ADA8: "__cdecl _imp_ExpandEnvironmentStringsForUserW" __imp_ExpandEnvironmentStringsForUserW
0x18000BE18: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x180006050: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::AddRef(void) __ptr64" ?AddRef@?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x1800105F0: "__vectorcall ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@" ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@@8
0x1800033DC: "long __cdecl wil::details::StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@details@wil@@YAJPEAD_KPEBDZZ
0x1800100B0: "__vectorcall ??_R0?AVlogic_error@std@" ??_R0?AVlogic_error@std@@@8
0x180008540: "public: virtual bool __cdecl std::error_category::equivalent(int,class std::error_condition const & __ptr64)const __ptr64" ?equivalent@error_category@std@@UEBA_NHAEBVerror_condition@2@@Z
0x1800083A4: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(char const * __ptr64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z
0x1800038E8: "public: virtual __cdecl wil::ResultException::~ResultException(void) __ptr64" ??1ResultException@wil@@UEAA@XZ
0x18000D128: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000B738: "bad_address" ??_C@_0M@IJGMGFGP@bad_address?$AA@
0x18000CD20: "__vectorcall ??_R3IAntimalware" ??_R3IAntimalware@@8
0x18000CF08: "__vectorcall ??_R2IAntimalware" ??_R2IAntimalware@@8
0x180007F40: "public: __cdecl std::out_of_range::out_of_range(class std::out_of_range const & __ptr64) __ptr64" ??0out_of_range@std@@QEAA@AEBV01@@Z
0x18000BD20: "result out of range" ??_C@_0BE@GOIPJJHG@result?5out?5of?5range?$AA@
0x18000B6E8: "connection_refused" ??_C@_0BD@NGKCIFEP@connection_refused?$AA@
0x18000AC08: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x180004DC4: "public: virtual __cdecl CAmsiAntimalware::~CAmsiAntimalware(void) __ptr64" ??1CAmsiAntimalware@@UEAA@XZ
0x1800030F4: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_Eerror_category@std@@UEAAPEAXI@Z
0x18000B840: "no_protocol_option" ??_C@_0BD@JHIHCGKP@no_protocol_option?$AA@
0x18000BEBE: "" ??_C@_00CNPNBAHC@?$AA@
0x180001890: DllGetClassObject
0x18000AF38: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18000AE68: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18000B9D8: "connection already in progress" ??_C@_0BP@KAIHPOGN@connection?5already?5in?5progress?$AA@
0x18000AFA8: "__cdecl _imp_GetSystemTimePreciseAsFileTime" __imp_GetSystemTimePreciseAsFileTime
0x18000615C: "public: virtual __cdecl ATL::CComAggObject<class CAmsiAntimalware>::~CComAggObject<class CAmsiAntimalware>(void) __ptr64" ??1?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAA@XZ
0x180001344: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x180006520: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x18000E48C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180005384: "private: long __cdecl CAmsiAntimalware::GenerateEtwEvent(struct IAmsiStream * __ptr64,enum CAmsiAntimalware::ScanStatus,enum AMSI_RESULT) __ptr64" ?GenerateEtwEvent@CAmsiAntimalware@@AEAAJPEAUIAmsiStream@@W4ScanStatus@1@W4AMSI_RESULT@@@Z
0x1800063F8: "public: virtual __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::~CComContainedObject<class CAmsiAntimalware>(void) __ptr64" ??1?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAA@XZ
0x18000CA78: "__vectorcall ??_R1A@?0A@EA@?$CComObject@VCAmsiAntimalware@@@ATL" ??_R1A@?0A@EA@?$CComObject@VCAmsiAntimalware@@@ATL@@8
0x18000C830: "__vectorcall ??_R17?0A@EA@_ATL_MODULE70@ATL" ??_R17?0A@EA@_ATL_MODULE70@ATL@@8
0x18000E2A0: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18000B4A8: "permission denied" ??_C@_0BC@CIJDGCDI@permission?5denied?$AA@
0x180008710: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_System_error_category::message(int)const __ptr64" ?message@_System_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18000B050: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x1800077D0: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_KHP6AX0@Z@Z
0x1800010A0: "__cdecl TlgWrite" _TlgWrite
0x18000B178: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180010FC0: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x1800042D4: WPP_SF_DDIP
0x18000BFA0: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x18000AF60: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000AE90: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x18000AE78: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000C900: "__vectorcall ??_R1A@?0A@EA@IAmsiStream" ??_R1A@?0A@EA@IAmsiStream@@8
0x180005FF0: "public: virtual unsigned long __cdecl ATL::CComObject<class CAmsiAntimalware>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x18000B960: "argument out of domain" ??_C@_0BH@CGIMPKIM@argument?5out?5of?5domain?$AA@
0x18000B568: "no such file or directory" ??_C@_0BK@NDOCBPGE@no?5such?5file?5or?5directory?$AA@
0x180007840: "void __cdecl __ArrayUnwind(void * __ptr64,unsigned __int64,int,void (__cdecl*)(void * __ptr64))" ?__ArrayUnwind@@YAXPEAX_KHP6AX0@Z@Z
0x18000B9C0: "connection aborted" ??_C@_0BD@MGNDDEGM@connection?5aborted?$AA@
0x18000BA60: "file too large" ??_C@_0P@DNAJLBJK@file?5too?5large?$AA@
0x18000C720: "const CAmsiModule::`RTTI Complete Object Locator'" ??_R4CAmsiModule@@6B@
0x18000BB48: "no buffer space" ??_C@_0BA@PFFCAOFK@no?5buffer?5space?$AA@
0x180007A3F: "__cdecl XcptFilter" _XcptFilter
0x18000BC30: "not connected" ??_C@_0O@GLMIBBEG@not?5connected?$AA@
0x18000B180: "__cdecl _xc_a" __xc_a
0x180010D90: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800063C0: "public: virtual void * __ptr64 __cdecl ATL::CComAggObject<class CAmsiAntimalware>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x18000BED0: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x18000BE48: "__cdecl GUID_82d29c2e_f062_44e6_b5c9_3d9a2f24a2df" _GUID_82d29c2e_f062_44e6_b5c9_3d9a2f24a2df
0x18000C8E8: "__vectorcall ??_R3CAmsiBufferStream" ??_R3CAmsiBufferStream@@8
0x18000C968: "__vectorcall ??_R2CAmsiBufferStream" ??_R2CAmsiBufferStream@@8
0x180010130: "__vectorcall ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@" ??_R0?AU?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@@@8
0x180010238: "__vectorcall ??_R0?AV?$CAtlModuleT@VCAmsiModule@@@ATL@" ??_R0?AV?$CAtlModuleT@VCAmsiModule@@@ATL@@@8
0x18000C010: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x18000B7F8: "network_down" ??_C@_0N@FCPALPJK@network_down?$AA@
0x1800065E0: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x18000BBB8: "no stream resources" ??_C@_0BE@MKFDAFMP@no?5stream?5resources?$AA@
0x18000136C: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x18000B7D0: "message_size" ??_C@_0N@HPMLKHPL@message_size?$AA@
0x18000AE58: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180007DE7: "__cdecl lock" _lock
0x18000C748: "__vectorcall ??_R3CAmsiModule" ??_R3CAmsiModule@@8
0x18000C610: "__vectorcall ??_R2CAmsiModule" ??_R2CAmsiModule@@8
0x180010D58: g_pfnResultLoggingCallback
0x180010100: "__vectorcall ??_R0?AVout_of_range@std@" ??_R0?AVout_of_range@std@@@8
0x1800019F8: "public: virtual __cdecl CAmsiUacAntimalware::~CAmsiUacAntimalware(void) __ptr64" ??1CAmsiUacAntimalware@@UEAA@XZ
0x18000B028: "__cdecl _imp_CryptHashData" __imp_CryptHashData
0x18000BEE8: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x180001D7C: WPP_SF_qqDqq
0x18000B6B8: "bad_file_descriptor" ??_C@_0BE@DLHHIBGN@bad_file_descriptor?$AA@
0x18000CFF0: "__vectorcall ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R2?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18000CAE0: "__vectorcall ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R3?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18000C0B8: "Software\Classes\CLSID" ??_C@_1CO@JLBPHABP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180010010: "public: static class std::_System_error_category std::_Error_objects<int>::_System_object" ?_System_object@?$_Error_objects@H@std@@2V_System_error_category@2@A
0x18000882F: "__cdecl callnewh" _callnewh
0x18000B3A8: "__cdecl _guard_iat_table" __guard_iat_table
0x18000B038: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x18000AB60: "const ATL::CComObjectNoLock<class ATL::CComClassFactory>::`vftable'" ??_7?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@6B@
0x180010D61: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x180008878: memcpy
0x180008248: "void __cdecl std::_Xout_of_range(char const * __ptr64)" ?_Xout_of_range@std@@YAXPEBD@Z
0x18000B760: "operation_in_progress" ??_C@_0BG@DJGBJIIK@operation_in_progress?$AA@
0x180010000: "public: static class std::_Generic_error_category std::_Error_objects<int>::_Generic_object" ?_Generic_object@?$_Error_objects@H@std@@2V_Generic_error_category@2@A
0x18000AE60: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180002A50: "public: __cdecl ATL::CComPtr<struct IAntimalwareUacProvider>::CComPtr<struct IAntimalwareUacProvider>(void) __ptr64" ??0?$CComPtr@UIAntimalwareUacProvider@@@ATL@@QEAA@XZ
0x180008890: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18000AFF8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000BEA0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000B150: "__cdecl _imp_memset" __imp_memset
0x180004E24: "public: long __cdecl CAmsiAntimalware::FinalConstruct(void) __ptr64" ?FinalConstruct@CAmsiAntimalware@@QEAAJXZ
0x180007C1F: "__cdecl initterm" _initterm
0x18000AFC8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x1800106B1: g_header_init_InitializeResultExceptions
0x180001AD0: "public: __cdecl ATL::CComPtr<struct IAntimalwareUacProvider>::~CComPtr<struct IAntimalwareUacProvider>(void) __ptr64" ??1?$CComPtr@UIAntimalwareUacProvider@@@ATL@@QEAA@XZ
0x18000B5D0: "resource unavailable try again" ??_C@_0BP@LKNGHENJ@resource?5unavailable?5try?5again?$AA@
0x180008780: "public: virtual char const * __ptr64 __cdecl std::_Iostream_error_category::name(void)const __ptr64" ?name@_Iostream_error_category@std@@UEBAPEBDXZ
0x18000BAE0: "invalid seek" ??_C@_0N@OHAFKDEK@invalid?5seek?$AA@
0x180007ED8: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x18000BB70: "no link" ??_C@_07PLECNNKG@no?5link?$AA@
0x18000E4F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180010FE8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000AF80: "__cdecl _imp_Sleep" __imp_Sleep
0x18000E110: "__cdecl CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@QEAA@AEBV01@@Z24
0x18000B1D8: "__cdecl _xi_z" __xi_z
0x180010FAC: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x18000BE58: WPP_589f8473ee363dffb2d387ad72c4e5b3_Traceguids
0x18000AE20: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180010D80: g_pfnThrowPlatformException
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gerror_category@std@@UEAAPEAXI@Z
0x18000ADB0: USERENV_NULL_THUNK_DATA
0x180010FB0: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x18000E138: "__cdecl TI3?AVlength_error@std@@" _TI3?AVlength_error@std@@
0x18000BC10: "not a socket" ??_C@_0N@POEIPGGF@not?5a?5socket?$AA@
0x18000777E: "__cdecl _C_specific_handler" __C_specific_handler
0x18000CFC8: "__vectorcall ??_R1A@?0A@EA@?$CComContainedObject@VCAmsiAntimalware@@@ATL" ??_R1A@?0A@EA@?$CComContainedObject@VCAmsiAntimalware@@@ATL@@8
0x18000E298: "__cdecl _pobjMap_CAmsiAntimalware" __pobjMap_CAmsiAntimalware
0x180005D08: "public: static long __cdecl ATL::CComCreator<class ATL::CComAggObject<class CAmsiAntimalware> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComAggObject@VCAmsiAntimalware@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000AF70: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180001F00: "public: virtual unsigned long __cdecl CAmsiBufferStream::AddRef(void) __ptr64" ?AddRef@CAmsiBufferStream@@UEAAKXZ
0x18000C008: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1800084B0: "public: virtual class std::error_condition __cdecl std::_System_error_category::default_error_condition(int)const __ptr64" ?default_error_condition@_System_error_category@std@@UEBA?AVerror_condition@2@H@Z
0x180010D50: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x18000309C: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x18000B070: "__cdecl _imp__onexit" __imp__onexit
0x18000BD00: "resource deadlock would occur" ??_C@_0BO@BJBOMOEJ@resource?5deadlock?5would?5occur?$AA@
0x180008884: memmove
0x18000AE48: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180010C70: WPP_REGISTRATION_GUIDS
0x18000BB00: "message size" ??_C@_0N@IFLPBIOP@message?5size?$AA@
0x180008680: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Iostream_error_category::message(int)const __ptr64" ?message@_Iostream_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18000AE38: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000AF00: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180010560: "__vectorcall ??_R0?AVCAmsiAntimalware@" ??_R0?AVCAmsiAntimalware@@@8
0x18000B9F8: "connection refused" ??_C@_0BD@PJLIIJEL@connection?5refused?$AA@
0x180007E3C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180008580: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::erase(unsigned __int64,unsigned __int64) __ptr64" ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z
0x180002A60: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x180001860: DllCanUnloadNow
0x18000AEF8: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x1800058C4: "public: long __cdecl CAmsiUacAntimalware::UacScan(struct AMSI_UAC_REQUEST_CONTEXT * __ptr64,enum AMSI_RESULT * __ptr64,struct IAntimalwareUacProvider * __ptr64 * __ptr64) __ptr64" ?UacScan@CAmsiUacAntimalware@@QEAAJPEAUAMSI_UAC_REQUEST_CONTEXT@@PEAW4AMSI_RESULT@@PEAPEAUIAntimalwareUacProvider@@@Z
0x180010D98: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000C078: "onecore\amcore\antimalware\sourc" ??_C@_0DP@BONPEAID@onecore?2amcore?2antimalware?2sourc@
0x18000CD38: "__vectorcall ??_R2CComClassFactory@ATL" ??_R2CComClassFactory@ATL@@8
0x18000D098: "__vectorcall ??_R3CComClassFactory@ATL" ??_R3CComClassFactory@ATL@@8
0x180010C78: WPP_MAIN_CB
0x180010C48: "public: static class std::locale::id std::num_put<char,class std::back_insert_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::id" ?id@?$num_put@DV?$back_insert_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@std@@2V0locale@2@A
0x18000E240: "__cdecl CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200" _CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200
0x1800015B0: "public: virtual void * __ptr64 __cdecl CAmsiModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAmsiModule@@UEAAPEAXI@Z
0x180010C50: "public: static class std::locale::id std::num_put<wchar_t,class std::back_insert_iterator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >::id" ?id@?$num_put@_WV?$back_insert_iterator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@@std@@2V0locale@2@A
0x180007A4B: "__cdecl amsg_exit" _amsg_exit
0x18000B098: "__cdecl _imp__callnewh" __imp__callnewh
0x18000C6A8: "__vectorcall ??_R1A@?0A@EA@CAmsiModule" ??_R1A@?0A@EA@CAmsiModule@@8
0x180008040: "public: virtual void * __ptr64 __cdecl std::out_of_range::`vector deleting destructor'(unsigned int) __ptr64" ??_Eout_of_range@std@@UEAAPEAXI@Z
0x18000B9B0: "broken pipe" ??_C@_0M@KPHOFDBE@broken?5pipe?$AA@
0x18000ADE8: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x18000B858: "not_connected" ??_C@_0O@GBCLHHD@not_connected?$AA@
0x180004F10: "public: virtual long __cdecl CAmsiAntimalware::Scan(struct IAmsiStream * __ptr64,enum AMSI_RESULT * __ptr64,struct IAntimalwareProvider * __ptr64 * __ptr64) __ptr64" ?Scan@CAmsiAntimalware@@UEAAJPEAUIAmsiStream@@PEAW4AMSI_RESULT@@PEAPEAUIAntimalwareProvider@@@Z
0x180001A90: "public: virtual void * __ptr64 __cdecl CAmsiUacAntimalware::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAmsiUacAntimalware@@UEAAPEAXI@Z
0x18000B8C0: "timed_out" ??_C@_09NCHNLHPG@timed_out?$AA@
0x180002A60: "public: static long __cdecl CAmsiAntimalware::UpdateRegistry(int)" ?UpdateRegistry@CAmsiAntimalware@@SAJH@Z
0x18000B3B0: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x18000CC78: "__vectorcall ??_R17?0A@EA@CComObjectRootBase@ATL" ??_R17?0A@EA@CComObjectRootBase@ATL@@8
0x18000BCD0: "protocol not supported" ??_C@_0BH@JPPPLHJB@protocol?5not?5supported?$AA@
0x180008274: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xran(void)const __ptr64" ?_Xran@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x1800032A0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x18000B400: GUID_NULL
0x18000B918: "address not available" ??_C@_0BG@DHPCNBJB@address?5not?5available?$AA@
0x18000B0A8: "__cdecl _imp__lock" __imp__lock
0x18000AAE0: "const CAmsiUacAntimalware::`vftable'" ??_7CAmsiUacAntimalware@@6B@
0x18000792C: atexit
0x180001BD0: WPP_SF_IDqq
0x18000B3B8: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x1800060E0: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CAmsiAntimalware>::Release(void) __ptr64" ?Release@?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x180010FA8: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x18000E158: "__cdecl CTA3?AVlength_error@std@@" _CTA3?AVlength_error@std@@
0x18000BE08: WPP_ThisDir_CTLGUID_Amsi
0x1800030B8: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x180003E30: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x18000C044: "%ws" ??_C@_03BMPLCLAP@?$CFws?$AA@
0x18000AF58: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18000CB60: "__vectorcall ??_R2?$CComObject@VCAmsiAntimalware@@@ATL" ??_R2?$CComObject@VCAmsiAntimalware@@@ATL@@8
0x18000CAF8: "__vectorcall ??_R3?$CComObject@VCAmsiAntimalware@@@ATL" ??_R3?$CComObject@VCAmsiAntimalware@@@ATL@@8
0x18000AF40: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x18000B7E0: "filename_too_long" ??_C@_0BC@LEEIKBAL@filename_too_long?$AA@
0x18000B510: "io error" ??_C@_08GLNPIFBN@io?5error?$AA@
0x18000AF10: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000AFD0: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000C760: "__vectorcall ??_R1A@?0A@EA@CAtlModule@ATL" ??_R1A@?0A@EA@CAtlModule@ATL@@8
0x18000BCB0: "owner dead" ??_C@_0L@BLPOFLNJ@owner?5dead?$AA@
0x18000AE28: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000AFD8: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18000883B: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64" ??0exception@@QEAA@AEBQEBD@Z
0x1800087D0: "char const * __ptr64 __cdecl std::_Winerror_map(int)" ?_Winerror_map@std@@YAPEBDH@Z
0x18000B638: "permission_denied" ??_C@_0BC@FNODOBAE@permission_denied?$AA@
0x18000CD08: "__vectorcall ??_R3?$CComAggObject@VCAmsiAntimalware@@@ATL" ??_R3?$CComAggObject@VCAmsiAntimalware@@@ATL@@8
0x18000CE68: "__vectorcall ??_R2?$CComAggObject@VCAmsiAntimalware@@@ATL" ??_R2?$CComAggObject@VCAmsiAntimalware@@@ATL@@8
0x18000AEB8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180007DFF: "__cdecl _dllonexit" __dllonexit
0x180004D0C: "public: __cdecl CAmsiAntimalware::CAmsiAntimalware(void) __ptr64" ??0CAmsiAntimalware@@QEAA@XZ
0x1800104B0: "__vectorcall ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@" ??_R0?AV?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@@@8
0x18000C028: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x180010FC8: "__cdecl _native_startup_lock" __native_startup_lock
0x18000420C: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAGP6AXPEAX@Z$1?CoTaskMemFree@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAG$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x180001638: DllMain
0x18000B698: "connection_already_in_progress" ??_C@_0BP@FOJJHMCC@connection_already_in_progress?$AA@
0x180002A50: "public: __cdecl ATL::CComPtr<struct IAntimalwareProvider>::CComPtr<struct IAntimalwareProvider>(void) __ptr64" ??0?$CComPtr@UIAntimalwareProvider@@@ATL@@QEAA@XZ
0x180010DB8: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x180010F9C: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x1800044E4: WPP_SF_PDI
0x18000AD98: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x180001AD0: "public: __cdecl ATL::CComPtr<struct IAntimalwareProvider>::~CComPtr<struct IAntimalwareProvider>(void) __ptr64" ??1?$CComPtr@UIAntimalwareProvider@@@ATL@@QEAA@XZ
0x180010F50: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x18000B128: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000AF28: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000AE88: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004684: "public: __cdecl CGuidEnum::~CGuidEnum(void) __ptr64" ??1CGuidEnum@@QEAA@XZ
0x1800087A0: "char const * __ptr64 __cdecl std::_Syserror_map(int)" ?_Syserror_map@std@@YAPEBDH@Z
0x18000B4C0: "file exists" ??_C@_0M@MIDIAGJP@file?5exists?$AA@
0x18000C700: "__vectorcall ??_R2?$CAtlModuleT@VCAmsiModule@@@ATL" ??_R2?$CAtlModuleT@VCAmsiModule@@@ATL@@8
0x18000C5F8: "__vectorcall ??_R3?$CAtlModuleT@VCAmsiModule@@@ATL" ??_R3?$CAtlModuleT@VCAmsiModule@@@ATL@@8
0x18000CBD8: "const ATL::CComAggObject<class CAmsiAntimalware>::`RTTI Complete Object Locator'" ??_R4?$CComAggObject@VCAmsiAntimalware@@@ATL@@6B@
0x18000BAB8: "inappropriate io control operati" ??_C@_0CD@BNPLBMNA@inappropriate?5io?5control?5operati@
0x18000E478: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000CD90: "__vectorcall ??_R3?$CComContainedObject@VCAmsiAntimalware@@@ATL" ??_R3?$CComContainedObject@VCAmsiAntimalware@@@ATL@@8
0x18000CEA0: "__vectorcall ??_R2?$CComContainedObject@VCAmsiAntimalware@@@ATL" ??_R2?$CComContainedObject@VCAmsiAntimalware@@@ATL@@8
0x180001360: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18000B620: "too many files open" ??_C@_0BE@GHAFMPAH@too?5many?5files?5open?$AA@
0x180010588: "__vectorcall ??_R0?AVCComClassFactory@ATL@" ??_R0?AVCComClassFactory@ATL@@@8
0x18000AE08: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007EA0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800081DC: "void __cdecl std::_Xbad_alloc(void)" ?_Xbad_alloc@std@@YAXXZ
0x18000B020: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180007FB8: "public: virtual __cdecl std::length_error::~length_error(void) __ptr64" ??1length_error@std@@UEAA@XZ
0x18000B830: "no_buffer_space" ??_C@_0BA@FDIJKJCL@no_buffer_space?$AA@
0x18000B030: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x180010690: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180007E18: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000BE38: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x18000AAA8: "const CAmsiModule::`vftable'" ??_7CAmsiModule@@6B@
0x18000D0F0: "__vectorcall ??_R2?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL" ??_R2?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@8
0x18000CE10: "__vectorcall ??_R3?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL" ??_R3?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@8
0x18000BA10: "connection reset" ??_C@_0BB@IECNJNOI@connection?5reset?$AA@
0x1800105B8: "__vectorcall ??_R0?AVCComObjectRootBase@ATL@" ??_R0?AVCComObjectRootBase@ATL@@@8
0x18000BB78: "no message available" ??_C@_0BF@PBGGPKKE@no?5message?5available?$AA@
0x18000D008: "__vectorcall ??_R3?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL" ??_R3?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@@8
0x18000CF60: "__vectorcall ??_R2?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL" ??_R2?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@@8
0x18000D0B0: "__vectorcall ??_R1A@?0A@EA@?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@8
0x1800015B0: "public: virtual void * __ptr64 __cdecl CAmsiModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAmsiModule@@UEAAPEAXI@Z
0x180008520: "public: virtual bool __cdecl std::error_category::equivalent(class std::error_code const & __ptr64,int)const __ptr64" ?equivalent@error_category@std@@UEBA_NAEBVerror_code@2@H@Z
0x180008040: "public: virtual void * __ptr64 __cdecl std::out_of_range::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gout_of_range@std@@UEAAPEAXI@Z
0x18000C068: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000A028: "const std::out_of_range::`vftable'" ??_7out_of_range@std@@6B@
0x180010310: "__vectorcall ??_R0?AUIClassFactory@" ??_R0?AUIClassFactory@@@8
0x18000AEB0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000B808: "network_reset" ??_C@_0O@EHNDLHIG@network_reset?$AA@
0x18000B440: "unknown error" ??_C@_0O@BFJCFAAK@unknown?5error?$AA@
0x180001A90: "public: virtual void * __ptr64 __cdecl CAmsiUacAntimalware::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAmsiUacAntimalware@@UEAAPEAXI@Z
0x1800101A8: "__vectorcall ??_R0?AVCAtlModule@ATL@" ??_R0?AVCAtlModule@ATL@@@8
0x18000B120: "__cdecl _imp_??_V@YAXPEAX@Z" __imp_??_V@YAXPEAX@Z
0x180001F50: "public: virtual long __cdecl CAmsiBufferStream::GetAttribute(enum AMSI_ATTRIBUTE,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetAttribute@CAmsiBufferStream@@UEAAJW4AMSI_ATTRIBUTE@@KPEAEPEAK@Z
0x180007B10: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000B3F0: IID_IUnknown
0x180007998: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180008818: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x18000BD60: "text file busy" ??_C@_0P@IPFDMIFL@text?5file?5busy?$AA@
0x180002540: AmsiScanBuffer
0x1800032B0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180004154: "long __cdecl wil::details::in1diag3::Return_Win32(void * __ptr64,unsigned int,char const * __ptr64,unsigned long)" ?Return_Win32@in1diag3@details@wil@@YAJPEAXIPEBDK@Z
0x18000B498: "string too long" ??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
0x18000B988: "bad file descriptor" ??_C@_0BE@MPJPGCEO@bad?5file?5descriptor?$AA@
0x18000BF38: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x18000E52C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000CDC0: "__vectorcall ??_R1A@?0A@EA@IClassFactory" ??_R1A@?0A@EA@IClassFactory@@8
0x18000B058: api-ms-win-security-cryptoapi-l1-1-0_NULL_THUNK_DATA
0x18000C230: WPP_b81299c2b87537261d3ae6232a5e451b_Traceguids
0x18000D048: "__vectorcall ??_R1A@?0A@EA@CComObjectRootBase@ATL" ??_R1A@?0A@EA@CComObjectRootBase@ATL@@8
0x180001B00: WPP_SF_
0x18000E57C: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x18000B480: "invalid string position" ??_C@_0BI@CFPLBAOH@invalid?5string?5position?$AA@
0x18000AE40: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000BC80: "operation not supported" ??_C@_0BI@LNEGIFLN@operation?5not?5supported?$AA@
0x18000AF48: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x180010FB4: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180010008: "public: static class std::_Iostream_error_category std::_Error_objects<int>::_Iostream_object" ?_Iostream_object@?$_Error_objects@H@std@@2V_Iostream_error_category@2@A
0x18000AEC8: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180005FF0: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x18000BC00: "not a directory" ??_C@_0BA@DOCPFFJG@not?5a?5directory?$AA@
0x1800074D0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B0C8: "__cdecl _imp__initterm" __imp__initterm
0x180008620: "public: virtual class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > __cdecl std::_Generic_error_category::message(int)const __ptr64" ?message@_Generic_error_category@std@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@H@Z
0x18000E518: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x18000CE28: "__vectorcall ??_R1A@?0A@EA@CComClassFactory@ATL" ??_R1A@?0A@EA@CComClassFactory@ATL@@8
0x18000CA00: "__vectorcall ??_R1A@?0A@EA@CAmsiUacAntimalware" ??_R1A@?0A@EA@CAmsiUacAntimalware@@8
0x18000AE18: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000CBA0: "__vectorcall ??_R2CAmsiAntimalware" ??_R2CAmsiAntimalware@@8
0x18000CE50: "__vectorcall ??_R3CAmsiAntimalware" ??_R3CAmsiAntimalware@@8
0x18000CDA8: "__vectorcall ??_R3IClassFactory" ??_R3IClassFactory@@8
0x18000CF48: "__vectorcall ??_R2IClassFactory" ??_R2IClassFactory@@8
0x18000E0B0: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x18000880C: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x18000CCE0: "const ATL::CComContainedObject<class CAmsiAntimalware>::`RTTI Complete Object Locator'" ??_R4?$CComContainedObject@VCAmsiAntimalware@@@ATL@@6B@
0x18000E590: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000B5F0: "cross device link" ??_C@_0BC@PPHBOELF@cross?5device?5link?$AA@
0x18000E268: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x180002C00: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x180010FD8: "__cdecl _onexitend" __onexitend
0x180001460: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x18000BA48: "executable format error" ??_C@_0BI@BNCLIGPB@executable?5format?5error?$AA@
0x180007DF3: "__cdecl unlock" _unlock
0x18000B170: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000B148: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180007960: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18000AEA0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000BC40: "not supported" ??_C@_0O@NHEDABJP@not?5supported?$AA@
0x1800102E8: "__vectorcall ??_R0?AUIAmsiStream@" ??_R0?AUIAmsiStream@@@8
0x180002140: "public: virtual void * __ptr64 __cdecl CAmsiBufferStream::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAmsiBufferStream@@UEAAPEAXI@Z
0x18000BA28: "destination address required" ??_C@_0BN@KDMIFEIP@destination?5address?5required?$AA@
0x18000B4F8: "device or resource busy" ??_C@_0BI@NGCEHDD@device?5or?5resource?5busy?$AA@
0x18000A038: "const std::error_category::`vftable'" ??_7error_category@std@@6B@
0x180001EB0: "public: virtual unsigned long __cdecl CAmsiBufferStream::Release(void) __ptr64" ?Release@CAmsiBufferStream@@UEAAKXZ
0x1800038B0: "public: virtual void * __ptr64 __cdecl wil::ResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_EResultException@wil@@UEAAPEAXI@Z
0x180002460: AmsiUninitialize
0x18000ADE0: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180010CA0: "class CAmsiModule _AtlModule" ?_AtlModule@@3VCAmsiModule@@A
0x18000B878: "operation_not_supported" ??_C@_0BI@ICEIDKLJ@operation_not_supported?$AA@
0x18000AFA0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000B1C8: "__cdecl _xi_a" __xi_a
0x18000AFB0: api-ms-win-core-sysinfo-l1-2-0_NULL_THUNK_DATA
0x18000B678: "address_family_not_supported" ??_C@_0BN@LCBDHODA@address_family_not_supported?$AA@
0x18000AED0: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x18000AF98: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000ADF8: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180002B90: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000B0A0: "__cdecl _imp__unlock" __imp__unlock
0x18000817C: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Tidy(bool,unsigned __int64) __ptr64" ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_N_K@Z
0x180006010: "public: virtual long __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000ADB8: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000C798: "__vectorcall ??_R1A@?0A@EA@?$CAtlModuleT@VCAmsiModule@@@ATL" ??_R1A@?0A@EA@?$CAtlModuleT@VCAmsiModule@@@ATL@@8
0x180008000: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x180001AD0: "public: __cdecl ATL::CComPtr<struct IProxyServerIdentity>::~CComPtr<struct IProxyServerIdentity>(void) __ptr64" ??1?$CComPtr@UIProxyServerIdentity@@@ATL@@QEAA@XZ
0x18000E0E8: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x18000422C: WPP_SF_DD
0x1800043D8: WPP_SF_Dd
0x1800064A0: "public: virtual void * __ptr64 __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x18000C6E8: "__vectorcall ??_R3?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL" ??_R3?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@@8
0x180004344: WPP_SF_DS
0x18000C788: "__vectorcall ??_R2?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL" ??_R2?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@@8
0x180010018: WPP_GLOBAL_Control
0x18000BDF4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000E4DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000E5CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x18000821C: "void __cdecl std::_Xlength_error(char const * __ptr64)" ?_Xlength_error@std@@YAXPEBD@Z
0x180004544: WPP_SF_d
0x180001B24: WPP_SF_D
0x180004478: WPP_SF_PDDI
0x180010FF0: "__cdecl pRawDllMain" _pRawDllMain
0x1800028C0: AmsiUacUninitialize
0x18000B118: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000B538: "invalid argument" ??_C@_0BB@FCMFBGOM@invalid?5argument?$AA@
0x1800101D0: "__vectorcall ??_R0?AV?$CAtlDllModuleT@VCAmsiModule@@@ATL@" ??_R0?AV?$CAtlDllModuleT@VCAmsiModule@@@ATL@@@8
0x1800019C0: DllUnregisterServer
0x1800040A8: "long __cdecl wil::details::ReportFailure_NtStatus(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_NtStatus@details@wil@@YAJPEAXIPEBD110W4FailureType@2@J@Z
0x180003310: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x18000B088: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180007766: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180008040: "public: virtual void * __ptr64 __cdecl std::logic_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elogic_error@std@@UEAAPEAXI@Z
0x18000C0E8: "%s\%s\InprocServer32" ??_C@_1CK@PHLANIMF@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAI?$AAn?$AAp?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x180001360: "public: __cdecl ATL::CComCriticalSection::~CComCriticalSection(void) __ptr64" ??1CComCriticalSection@ATL@@QEAA@XZ
0x180010290: "__vectorcall ??_R0?AVCAmsiBufferStream@" ??_R0?AVCAmsiBufferStream@@@8
0x18000A000: "const type_info::`vftable'" ??_7type_info@@6B@
0x18000E568: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000AF50: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800077A0: "__cdecl _security_check_cookie" __security_check_cookie
0x180010D44: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18000B1C0: "__cdecl _xc_z" __xc_z
0x180002F94: "public: bool __cdecl wil::details::shared_buffer::create(void const * __ptr64,unsigned __int64) __ptr64" ?create@shared_buffer@details@wil@@QEAA_NPEBX_K@Z
0x180003FF0: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x18000C940: "__vectorcall ??_R1A@?0A@EA@CAmsiBufferStream" ??_R1A@?0A@EA@CAmsiBufferStream@@8
0x18000AEC0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800019D0: "public: virtual long __cdecl ATL::CAtlModuleT<class CAmsiModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCAmsiModule@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x18000AE80: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000C180: "Software\Microsoft\AMSI\UacProvi" ??_C@_1EK@PPCFGBOB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAA?$AAM?$AAS?$AAI?$AA?2?$AAU?$AAa?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi@
0x18000E1A0: "__cdecl TI3?AVout_of_range@std@@" _TI3?AVout_of_range@std@@
0x18000AC60: ?_entries@?1??_GetEntries@CAmsiAntimalware@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x1800106B0: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x180008078: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Copy(unsigned __int64,unsigned __int64) __ptr64" ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K0@Z
0x18000BBA0: "no protocol option" ??_C@_0BD@EAMBFIDF@no?5protocol?5option?$AA@
0x18000B048: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x18000AB28: "const ATL::CComContainedObject<class CAmsiAntimalware>::`vftable'" ??_7?$CComContainedObject@VCAmsiAntimalware@@@ATL@@6B@
0x18000886C: "__cdecl CxxThrowException" _CxxThrowException
0x18000AC30: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x18000B0B8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x180010060: "struct ATL::_ATL_OBJMAP_ENTRY30 __objMap_CAmsiAntimalware" ?__objMap_CAmsiAntimalware@@3U_ATL_OBJMAP_ENTRY30@ATL@@A
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Generic_error_category@std@@UEAAPEAXI@Z
0x18000BCE8: "read only file system" ??_C@_0BG@EICBIHDP@read?5only?5file?5system?$AA@
0x18000D24F: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18000ADD0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000AF90: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000C858: "__vectorcall ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL" ??_R1EI@?0A@EN@?$CAtlValidateModuleConfiguration@$00VCAmsiModule@@@ATL@@8
0x180001D18: WPP_SF_qqD
0x18000D0D8: "__vectorcall ??_R3CComObjectRootBase@ATL" ??_R3CComObjectRootBase@ATL@@8
0x18000CA68: "__vectorcall ??_R2CComObjectRootBase@ATL" ??_R2CComObjectRootBase@ATL@@8
0x180010338: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18000A068: "const std::_Generic_error_category::`vftable'" ??_7_Generic_error_category@std@@6B@
0x180010D60: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x18000B040: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x18000C928: "__vectorcall ??_R3IAmsiStream" ??_R3IAmsiStream@@8
0x18000C9C0: "__vectorcall ??_R2IAmsiStream" ??_R2IAmsiStream@@8
0x18000AE50: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180008950: "__cdecl _chkstk" __chkstk
0x18000BD50: "stream timeout" ??_C@_0P@DIIFGFCG@stream?5timeout?$AA@
0x180001B60: WPP_SF_DDqq
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_System_error_category@std@@UEAAPEAXI@Z
0x180007960: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18000BC50: "operation in progress" ??_C@_0BG@KDKHOPCO@operation?5in?5progress?$AA@
0x180002D34: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x18000B0B0: "__cdecl _imp__vsnprintf_s" __imp__vsnprintf_s
0x180001E00: "public: virtual long __cdecl CAmsiBufferStream::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CAmsiBufferStream@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000C1E0: "__cdecl GUID_5524fe34_8da7_40a8_8165_e8b37a8b4a4b" _GUID_5524fe34_8da7_40a8_8165_e8b37a8b4a4b
0x18000B978: "bad address" ??_C@_0M@KGHGGJGL@bad?5address?$AA@
0x180002140: "public: virtual void * __ptr64 __cdecl CAmsiBufferStream::`vector deleting destructor'(unsigned int) __ptr64" ??_ECAmsiBufferStream@@UEAAPEAXI@Z
0x180007F68: "public: __cdecl std::length_error::length_error(char const * __ptr64) __ptr64" ??0length_error@std@@QEAA@PEBD@Z
0x18000E178: "__cdecl CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVlength_error@std@@@8??0length_error@std@@QEAA@AEBV01@@Z24
0x1800038B0: "public: virtual void * __ptr64 __cdecl wil::ResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GResultException@wil@@UEAAPEAXI@Z
0x180001598: "__cdecl TlgDefineProvider_annotation__Tlgg_hAmsiProviderProv" _TlgDefineProvider_annotation__Tlgg_hAmsiProviderProv
0x180010C60: "public: static class std::locale::id std::numpunct<char>::id" ?id@?$numpunct@D@std@@2V0locale@2@A
0x180010CF0: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x18000AF30: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180001394: "public: void __cdecl ATL::CAtlModule::Term(void) __ptr64" ?Term@CAtlModule@ATL@@QEAAXXZ
0x180010D68: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x18000BA88: "identifier removed" ??_C@_0BD@JPHBMONG@identifier?5removed?$AA@
0x18000CF20: "__vectorcall ??_R1A@?0A@EA@IAntimalware" ??_R1A@?0A@EA@IAntimalware@@8
0x18000CA28: "const ATL::CComClassFactory::`RTTI Complete Object Locator'" ??_R4CComClassFactory@ATL@@6B@
0x18000B7A0: "already_connected" ??_C@_0BC@FIFLCHLO@already_connected?$AA@
0x180010388: "__vectorcall ??_R0?AV?$CComAggObject@VCAmsiAntimalware@@@ATL@" ??_R0?AV?$CComAggObject@VCAmsiAntimalware@@@ATL@@@8
0x180001480: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x1800041CC: "void __cdecl wil::details::in1diag3::_Throw_NullAlloc(void * __ptr64,unsigned int,char const * __ptr64)" ?_Throw_NullAlloc@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1800039D0: "void __cdecl wil::details::ThrowResultExceptionInternal(struct wil::FailureInfo const & __ptr64)" ?ThrowResultExceptionInternal@details@wil@@YAXAEBUFailureInfo@2@@Z
0x18000CA50: "__vectorcall ??_R3exception" ??_R3exception@@8
0x18000CE90: "__vectorcall ??_R2exception" ??_R2exception@@8
0x18000ABF0: "const wil::ResultException::`vftable'" ??_7ResultException@wil@@6B@
0x18000E504: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000345C: "public: void __cdecl wil::StoredFailureInfo::SetFailureInfo(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetFailureInfo@StoredFailureInfo@wil@@QEAAXAEBUFailureInfo@2@@Z
0x18000C210: AMSI
0x1800103F8: "__vectorcall ??_R0?AV?$CComObject@VCAmsiAntimalware@@@ATL@" ??_R0?AV?$CComObject@VCAmsiAntimalware@@@ATL@@@8
0x18000AEE0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000B460: "iostream stream error" ??_C@_0BG@PADBLCHM@iostream?5stream?5error?$AA@
0x18000B1E0: "__cdecl _guard_fids_table" __guard_fids_table
0x1800077C4: "void __cdecl `eh vector destructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64))" ??_M@YAXPEAX_K1P6AX0@Z@Z
0x18000B158: msvcrt_NULL_THUNK_DATA
0x18000BB10: "network down" ??_C@_0N@KIIEAAIO@network?5down?$AA@
0x18000AC90: "__cdecl load_config_used" _load_config_used
0x1800100D8: "__vectorcall ??_R0?AVlength_error@std@" ??_R0?AVlength_error@std@@@8
0x18000CAA0: "const ATL::CComObjectNoLock<class ATL::CComClassFactory>::`RTTI Complete Object Locator'" ??_R4?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@6B@
0x18000B080: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x1800039FC: "public: __cdecl wil::ResultException::ResultException(class wil::ResultException const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBV01@@Z
0x18000CDE8: "__vectorcall ??_R1A@?0A@EA@?$CComAggObject@VCAmsiAntimalware@@@ATL" ??_R1A@?0A@EA@?$CComAggObject@VCAmsiAntimalware@@@ATL@@8
0x18000C7D8: "__vectorcall ??_R1A@?0A@EA@_ATL_MODULE70@ATL" ??_R1A@?0A@EA@_ATL_MODULE70@ATL@@8
0x180008000: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x1800064A0: "public: virtual void * __ptr64 __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x180008204: "public: void __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::_Xlen(void)const __ptr64" ?_Xlen@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAXXZ
0x18000B818: "network_unreachable" ??_C@_0BE@JFNJIDNF@network_unreachable?$AA@
0x180002520: AmsiCloseSession
0x180006070: "public: virtual long __cdecl ATL::CComAggObject<class CAmsiAntimalware>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180004178: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x18000B520: "directory not empty" ??_C@_0BE@JIDOCPHM@directory?5not?5empty?$AA@
0x180010D40: "public: static bool ATL::CAtlBaseModule::m_bInitFailed" ?m_bInitFailed@CAtlBaseModule@ATL@@2_NA
0x180005CE4: "public: __cdecl ATL::CComObjectRootEx<class ATL::CComMultiThreadModel>::~CComObjectRootEx<class ATL::CComMultiThreadModel>(void) __ptr64" ??1?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@QEAA@XZ
0x18000AAF0: "const CAmsiBufferStream::`vftable'" ??_7CAmsiBufferStream@@6B@
0x18000B0E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180008860: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x180008040: "public: virtual void * __ptr64 __cdecl std::logic_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glogic_error@std@@UEAAPEAXI@Z
0x18000BDF8: "APPID" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x18000D020: "__vectorcall ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x18000B160: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x18000CEE0: "__vectorcall ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL" ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@@8
0x180003250: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x180002C30: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18000E1E0: "__cdecl CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVout_of_range@std@@@8??0out_of_range@std@@QEAA@AEBV01@@Z24
0x180007F40: "public: __cdecl std::length_error::length_error(class std::length_error const & __ptr64) __ptr64" ??0length_error@std@@QEAA@AEBV01@@Z
0x18000CC28: "const ATL::CComObject<class CAmsiAntimalware>::`RTTI Complete Object Locator'" ??_R4?$CComObject@VCAmsiAntimalware@@@ATL@@6B@
0x180003D94: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x18000C800: "__vectorcall ??_R3?$CAtlDllModuleT@VCAmsiModule@@@ATL" ??_R3?$CAtlDllModuleT@VCAmsiModule@@@ATL@@8
0x18000AF18: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000C5C8: "__vectorcall ??_R2?$CAtlDllModuleT@VCAmsiModule@@@ATL" ??_R2?$CAtlDllModuleT@VCAmsiModule@@@ATL@@8
0x180005FF0: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CAmsiAntimalware>::AddRef(void) __ptr64" ?AddRef@?$CComAggObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x18000AED8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180008770: "public: virtual char const * __ptr64 __cdecl std::_Generic_error_category::name(void)const __ptr64" ?name@_Generic_error_category@std@@UEBAPEBDXZ
0x18000B700: "connection_reset" ??_C@_0BB@JOANDNCK@connection_reset?$AA@
0x18000C680: "__vectorcall ??_R1A@?0A@EA@?$CAtlDllModuleT@VCAmsiModule@@@ATL" ??_R1A@?0A@EA@?$CAtlDllModuleT@VCAmsiModule@@@ATL@@8
0x18000B478: "system" ??_C@_06FHFOAHML@system?$AA@
0x1800062DC: "public: virtual __cdecl ATL::CComObject<class CAmsiAntimalware>::~CComObject<class CAmsiAntimalware>(void) __ptr64" ??1?$CComObject@VCAmsiAntimalware@@@ATL@@UEAA@XZ
0x18000A028: "const std::logic_error::`vftable'" ??_7logic_error@std@@6B@
0x180010360: "__vectorcall ??_R0?AUIAntimalware@" ??_R0?AUIAntimalware@@@8
0x18000C048: "internal\sdk\inc\wil\resource.h" ??_C@_0CA@BIKDFFBC@internal?2sdk?2inc?2wil?2resource?4h?$AA@
0x180005300: "private: static void __cdecl CAmsiAntimalware::EtwConfigurationCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?EtwConfigurationCallback@CAmsiAntimalware@@CAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x18000B0C0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18000B650: "address_in_use" ??_C@_0P@LNDJPBFK@address_in_use?$AA@
0x18000B008: "__cdecl _imp_EventWrite" __imp_EventWrite
0x18000A018: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_Generic_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Generic_error_category@std@@UEAAPEAXI@Z
0x18000C1D0: AMSI_SCANBUFFER
0x18000C240: IID_IAmsiStream
0x180010640: "__vectorcall ??_R0?AV?$CComContainedObject@VCAmsiAntimalware@@@ATL@" ??_R0?AV?$CComContainedObject@VCAmsiAntimalware@@@ATL@@@8
0x18000AF20: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180008800: "__cdecl purecall" _purecall
0x18000AF08: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18000794C: "__cdecl _std_terminate" __std_terminate
0x18000CCA0: "__vectorcall ??_R1A@?0A@EA@ResultException@wil" ??_R1A@?0A@EA@ResultException@wil@@8
0x1800079C0: "void __cdecl `eh vector constructor iterator'(void * __ptr64,unsigned __int64,unsigned __int64,void (__cdecl*)(void * __ptr64),void (__cdecl*)(void * __ptr64))" ??_L@YAXPEAX_K1P6AX0@Z2@Z
0x18000C220: "__cdecl GUID_b2cabfe4_fe04_42b1_a5df_08d483d4d125" _GUID_b2cabfe4_fe04_42b1_a5df_08d483d4d125
0x180001360: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000AE98: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18000BB90: "no message" ??_C@_0L@EDOLMPAK@no?5message?$AA@
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_System_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_System_error_category@std@@UEAAPEAXI@Z
0x180004198: "long __cdecl wil::details::in1diag3::Return_NtStatus(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_NtStatus@in1diag3@details@wil@@YAJPEAXIPEBDJ@Z
0x18000B9A0: "bad message" ??_C@_0M@PMMIEFCP@bad?5message?$AA@
0x180003080: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x18000BEF8: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180003120: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x180007FB8: "public: virtual __cdecl std::out_of_range::~out_of_range(void) __ptr64" ??1out_of_range@std@@UEAA@XZ
0x180005F90: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x180005290: "public: virtual void __cdecl CAmsiAntimalware::CloseSession(unsigned __int64) __ptr64" ?CloseSession@CAmsiAntimalware@@UEAAX_K@Z
0x18000C118: "DllGetClassObject" ??_C@_0BC@JDLGBILA@DllGetClassObject?$AA@
0x18000BDD0: "value too large" ??_C@_0BA@KGKGOOJA@value?5too?5large?$AA@
0x18000B4E0: "filename too long" ??_C@_0BC@EJHOMAAK@filename?5too?5long?$AA@
0x18000B890: "protocol_not_supported" ??_C@_0BH@KAPBAIJF@protocol_not_supported?$AA@
0x18000E5E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800041BC: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x180004588: "public: long __cdecl CHashRAII::HashBuffer(unsigned char * __ptr64 const,unsigned long,unsigned char * __ptr64 const) __ptr64" ?HashBuffer@CHashRAII@@QEAAJQEAEKQEAE@Z
0x180008040: "public: virtual void * __ptr64 __cdecl std::length_error::`vector deleting destructor'(unsigned int) __ptr64" ??_Elength_error@std@@UEAAPEAXI@Z
0x18000B718: "destination_address_required" ??_C@_0BN@JLJNLKLK@destination_address_required?$AA@
0x18000AE70: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000BAF0: "is a directory" ??_C@_0P@FLLDBIDK@is?5a?5directory?$AA@
0x18000C818: "__vectorcall ??_R3CAtlModule@ATL" ??_R3CAtlModule@ATL@@8
0x18000C7C0: "__vectorcall ??_R2CAtlModule@ATL" ??_R2CAtlModule@ATL@@8
0x18000828C: "public: class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::assign(class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const & __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
0x18000BB30: "network unreachable" ??_C@_0BE@IFNCKGE@network?5unreachable?$AA@
0x18000B7B8: "too_many_files_open" ??_C@_0BE@GJJJJDDA@too_many_files_open?$AA@
0x18000ADC8: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x180008824: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000AFE8: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180001490: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x180005B80: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CAmsiAntimalware> >,class ATL::CComCreator<class ATL::CComAggObject<class CAmsiAntimalware> > >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCAmsiAntimalware@@@ATL@@@ATL@@V?$CComCreator@V?$CComAggObject@VCAmsiAntimalware@@@ATL@@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000BFE0: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x180010210: "__vectorcall ??_R0?AVCAmsiModule@" ??_R0?AVCAmsiModule@@@8
0x18000B8E8: "address family not supported" ??_C@_0BN@LKKBCCDB@address?5family?5not?5supported?$AA@
0x18000B0F8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000B908: "address in use" ??_C@_0P@LDMLAFHI@address?5in?5use?$AA@
0x18000B168: ntdll_NULL_THUNK_DATA
0x18000B068: "__cdecl _imp_memcpy" __imp_memcpy
0x180010440: "__vectorcall ??_R0?AV?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@" ??_R0?AV?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@@8
0x18000CB10: "__vectorcall ??_R3?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL" ??_R3?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@8
0x18000CB28: "__vectorcall ??_R2?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL" ??_R2?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@8
0x180010488: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x18000B748: "host_unreachable" ??_C@_0BB@KKNHPPIN@host_unreachable?$AA@
0x18000E208: "__cdecl TI2?AVResultException@wil@@" _TI2?AVResultException@wil@@
0x18000BEC0: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x18000E1C0: "__cdecl CTA3?AVout_of_range@std@@" _CTA3?AVout_of_range@std@@
0x18000C670: "__vectorcall ??_R2_ATL_MODULE70@ATL" ??_R2_ATL_MODULE70@ATL@@8
0x18000C6D0: "__vectorcall ??_R3_ATL_MODULE70@ATL" ??_R3_ATL_MODULE70@ATL@@8
0x180004280: WPP_SF_DDD
0x180004420: WPP_SF_PD
0x18000BC68: "operation not permitted" ??_C@_0BI@OHIEJAAB@operation?5not?5permitted?$AA@
0x18000BF90: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x18000BF20: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x18000485C: "public: long __cdecl CGuidEnum::NextGuid(struct _GUID * __ptr64) __ptr64" ?NextGuid@CGuidEnum@@QEAAJPEAU_GUID@@@Z
0x180006460: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CAmsiAntimalware>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x18000AFC0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000E450: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180010500: "__vectorcall ??_R0?AV?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@" ??_R0?AV?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@@8
0x18000C200: "__cdecl GUID_b2cabfe3_fe04_42b1_a5df_08d483d4d125" _GUID_b2cabfe3_fe04_42b1_a5df_08d483d4d125
0x18000BBF0: "no such process" ??_C@_0BA@ENLPPKBN@no?5such?5process?$AA@
0x180010270: "__vectorcall ??_R0?AUIUnknown@" ??_R0?AUIUnknown@@@8
0x180001C40: WPP_SF_P
0x18000B138: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000AFB8: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180010698: "__cdecl _security_cookie" __security_cookie
0x18000BCC0: "protocol error" ??_C@_0P@FNPOCJBE@protocol?5error?$AA@
0x180008950: "__cdecl alloca_probe" _alloca_probe
0x180003AEC: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x18000C8B0: "const CAmsiUacAntimalware::`RTTI Complete Object Locator'" ??_R4CAmsiUacAntimalware@@6B@
0x18000BFF8: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x18000C130: "Software\Microsoft\AMSI\Provider" ??_C@_1EE@KPANIOLG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAA?$AAM?$AAS?$AAI?$AA?2?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr@
0x18000BD38: "state not recoverable" ??_C@_0BG@MPLKFPAE@state?5not?5recoverable?$AA@
0x18000AE30: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800039B0: "void __cdecl wil::details::Rethrow(void)" ?Rethrow@details@wil@@YAXXZ
0x18000B5B8: "not enough memory" ??_C@_0BC@ENOOLCNF@not?5enough?5memory?$AA@
0x18000B778: "interrupted" ??_C@_0M@EGEKIIMP@interrupted?$AA@
0x18000E4A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000BB58: "no child process" ??_C@_0BB@IEPBLJHK@no?5child?5process?$AA@
0x18000ADD8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x18000BD70: "timed out" ??_C@_09KJPPMAOI@timed?5out?$AA@
0x18000BB20: "network reset" ??_C@_0O@FNPDBHEE@network?5reset?$AA@
0x180010FE0: "__cdecl _onexitbegin" __onexitbegin
0x18000CC00: "__vectorcall ??_R1A@?0A@EA@?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL" ??_R1A@?0A@EA@?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@8
0x18000B948: "argument list too long" ??_C@_0BH@CAKOHOMI@argument?5list?5too?5long?$AA@
0x18000B000: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`vector deleting destructor'(unsigned int) __ptr64" ??_E_Iostream_error_category@std@@UEAAPEAXI@Z
0x1800021E0: AmsiInitialize
0x18000C8D8: "__vectorcall ??_R2CAmsiUacAntimalware" ??_R2CAmsiUacAntimalware@@8
0x18000C880: "__vectorcall ??_R3CAmsiUacAntimalware" ??_R3CAmsiUacAntimalware@@8
0x18000D100: "__vectorcall ??_R1A@?0A@EA@exception" ??_R1A@?0A@EA@exception@@8
0x180003988: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x18000B130: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000B078: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x18000BC20: "not a stream" ??_C@_0N@LGAPMMPI@not?5a?5stream?$AA@
0x18000AE10: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001CC4: WPP_SF_qq
0x18000B4D0: "no such device" ??_C@_0P@FDINDDOK@no?5such?5device?$AA@
0x18000AEE8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800037F0: "public: virtual char const * __ptr64 __cdecl wil::ResultException::what(void)const __ptr64" ?what@ResultException@wil@@UEBAPEBDXZ
0x18000BE28: CLSID_StdGlobalInterfaceTable
0x180010F90: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x180007B44: "__cdecl _security_init_cookie" __security_init_cookie
0x1800070C8: "long __cdecl VerifyProtectionLevel(unsigned long,int * __ptr64)" ?VerifyProtectionLevel@@YAJKPEAH@Z
0x180010DA0: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x180001C88: WPP_SF_q
0x18000AEF0: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180006260: "public: virtual unsigned long __cdecl ATL::CComObject<class CAmsiAntimalware>::Release(void) __ptr64" ?Release@?$CComObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x180008847: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x18000B550: "no space on device" ??_C@_0BD@IJDJKDEA@no?5space?5on?5device?$AA@
0x18000E43C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000B060: "__cdecl _imp_memmove" __imp_memmove
0x18000BDE0: "wrong protocol type" ??_C@_0BE@MIEJDDNH@wrong?5protocol?5type?$AA@
0x18000A028: "const std::length_error::`vftable'" ??_7length_error@std@@6B@
0x18000E228: "__cdecl CTA2?AVResultException@wil@@" _CTA2?AVResultException@wil@@
0x180008040: "public: virtual void * __ptr64 __cdecl std::length_error::`scalar deleting destructor'(unsigned int) __ptr64" ??_Glength_error@std@@UEAAPEAXI@Z
0x180002A60: ?GetObjectDescription@?$CComCoClass@VCAmsiAntimalware@@$1?CLSID_Antimalware@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18000B450: "iostream" ??_C@_08LLGCOLLL@iostream?$AA@
0x180004118: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x180008500: "public: virtual class std::error_condition __cdecl std::error_category::default_error_condition(int)const __ptr64" ?default_error_condition@error_category@std@@UEBA?AVerror_condition@2@H@Z
0x18000B108: "__cdecl _imp_malloc" __imp_malloc
0x18000B0E0: "__cdecl _imp__purecall" __imp__purecall
0x18000B010: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000E554: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180010C58: "public: static class std::locale::id std::numpunct<wchar_t>::id" ?id@?$numpunct@_W@std@@2V0locale@2@A
0x18000BE78: CLSID_Antimalware
0x18000BFB8: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180010D78: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x18000ADA0: RPCRT4_NULL_THUNK_DATA
0x1800046C0: "public: long __cdecl CGuidEnum::StartEnum(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?StartEnum@CGuidEnum@@QEAAJPEAUHKEY__@@PEBG@Z
0x180007C70: "__cdecl _report_gsfailure" __report_gsfailure
0x1800102B8: "__vectorcall ??_R0?AVCAmsiUacAntimalware@" ??_R0?AVCAmsiUacAntimalware@@@8
0x18000C1F0: WPP_ee8a30f047c6368ca649ee983eed28df_Traceguids
0x18000AF68: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180005E54: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CAmsiAntimalware> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCAmsiAntimalware@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180006460: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CAmsiAntimalware>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCAmsiAntimalware@@@ATL@@UEAAPEAXI@Z
0x180007898: "__cdecl onexit" _onexit
0x18000ABB8: "const ATL::CComObject<class CAmsiAntimalware>::`vftable'" ??_7?$CComObject@VCAmsiAntimalware@@@ATL@@6B@
0x180010FA0: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x18000BBD0: "no such device or address" ??_C@_0BK@IMCPHCBI@no?5such?5device?5or?5address?$AA@
0x180010FD0: "__cdecl _native_startup_state" __native_startup_state
0x18000BE88: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180010DB0: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x180010F48: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x18000CF78: "__vectorcall ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL" ??_R1A@?0A@EA@?$CComObjectRootEx@VCComMultiThreadModelNoCS@ATL@@@ATL@@8
0x180010D38: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x18000B788: "invalid_argument" ??_C@_0BB@FFIHMIPJ@invalid_argument?$AA@
0x180008790: "public: virtual char const * __ptr64 __cdecl std::_System_error_category::name(void)const __ptr64" ?name@_System_error_category@std@@UEBAPEBDXZ
0x18000B660: "address_not_available" ??_C@_0BG@IPMGOJF@address_not_available?$AA@
0x180005BA0: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectNoLock<class ATL::CComClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x1800030E0: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x180005F70: "public: virtual long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectNoLock@VCComClassFactory@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000E540: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-cryptoapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-cryptoapi-l1-1-0
0x18000BF58: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000B0F0: "__cdecl _imp_rand" __imp_rand
0x18000D1C1: ?_TlgEvent@?P@??Scan@CAmsiAntimalware@@UEAAJPEAUIAmsiStream@@PEAW4AMSI_RESULT@@PEAPEAUIAntimalwareProvider@@@Z@4U<unnamed-type-_TlgEvent>@?P@??12@UEAAJ012@Z@B
0x180003F8C: "long __cdecl wil::details::ReportFailure_Win32(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,unsigned long)" ?ReportFailure_Win32@details@wil@@YAJPEAXIPEBD110W4FailureType@2@K@Z
0x18000B438: "generic" ??_C@_07DCLBNMLN@generic?$AA@
0x180002640: AmsiScanString
0x18000C998: "__vectorcall ??_R1A@?0A@EA@IUnknown" ??_R1A@?0A@EA@IUnknown@@8
0x18000B140: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x180003788: "public: __cdecl wil::ResultException::ResultException(struct wil::FailureInfo const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBUFailureInfo@1@@Z
0x180002CB0: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x18000CFA0: "const wil::ResultException::`RTTI Complete Object Locator'" ??_R4ResultException@wil@@6B@
0x1800019C0: DllRegisterServer
0x180010DA8: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x180007FD0: "public: virtual void * __ptr64 __cdecl std::_Iostream_error_category::`scalar deleting destructor'(unsigned int) __ptr64" ??_G_Iostream_error_category@std@@UEAAPEAXI@Z
0x18000E0D0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x18000A098: "const std::_Iostream_error_category::`vftable'" ??_7_Iostream_error_category@std@@6B@
0x18000B8D0: "operation_would_block" ??_C@_0BG@GDGHKFDH@operation_would_block?$AA@
0x18000E4C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000B8A8: "wrong_protocol_type" ??_C@_0BE@GAOJJFPC@wrong_protocol_type?$AA@
0x180006030: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CAmsiAntimalware>::Release(void) __ptr64" ?Release@?$CComContainedObject@VCAmsiAntimalware@@@ATL@@UEAAKXZ
0x18000E290: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x180010F44: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x18000C988: "__vectorcall ??_R2IUnknown" ??_R2IUnknown@@8
0x18000C898: "__vectorcall ??_R3IUnknown" ??_R3IUnknown@@8
0x18000B110: "__cdecl _imp_free" __imp_free
0x180007AB0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000AF88: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800024C0: AmsiOpenSession
0x18000B100: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000BEDC: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x180007F40: "public: __cdecl std::logic_error::logic_error(class std::logic_error const & __ptr64) __ptr64" ??0logic_error@std@@QEAA@AEBV01@@Z
0x18000D070: "__vectorcall ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL" ??_R17?0A@EA@?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@8
0x180001AD0: "public: __cdecl ATL::CComPtr<struct IClassFactory>::~CComPtr<struct IClassFactory>(void) __ptr64" ??1?$CComPtr@UIClassFactory@@@ATL@@QEAA@XZ
0x18000BDB0: "too many symbolic link levels" ??_C@_0BO@EFGOJEF@too?5many?5symbolic?5link?5levels?$AA@
0x18000E5A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18000AF78: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000E4B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180010D70: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x18000CCC8: "__vectorcall ??_R2ResultException@wil" ??_R2ResultException@wil@@8
0x18000CAC8: "__vectorcall ??_R3ResultException@wil" ??_R3ResultException@wil@@8
0x18000B868: "not_a_socket" ??_C@_0N@IMHKKLEM@not_a_socket?$AA@
0x180008916: memset
0x18000E608: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800026A0: AmsiUacInitialize

[JEB Decompiler by PNF Software]