Generated by JEB on 2019/08/01

PE: C:\Windows\System32\AcLayers.dll Base=0x180000000 SHA-256=3392AC749072249EBC2295638F8A330E1D32F7964B486D3FA1AA79DCE6A501A5
PDB: AcLayers.pdb GUID={BCA20AB3-3AEF-D927-E7F6343C31694F95} Age=1

2556 located named symbols:
0x18003C530: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1KM@HOCOFNFP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180026300: "public: void __cdecl ShimLib::CString::Assign(char const * __ptr64,int) __ptr64" ?Assign@CString@ShimLib@@QEAAXPEBDH@Z
0x1800305A0: "VCACHE\FailedRecycles" ??_C@_1CM@CKKCOAFL@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x1800342E0: "HKCR\CLSID\{4CB63E62-C611-11D0-8" ??_C@_1IC@GENAONLC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA2?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x18003A670: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LG@EKBBOOO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002EB38: "d3d8.dll" ??_C@_1BC@CAPAIEIF@?$AAd?$AA3?$AAd?$AA8?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000589C: "int __cdecl NS_DXMaximizedWindowedMode::NotifyFn(unsigned long)" ?NotifyFn@NS_DXMaximizedWindowedMode@@YAHK@Z
0x1800111C0: "void __cdecl NS_VirtualRegistry::BuildWinNT(char const * __ptr64)" ?BuildWinNT@NS_VirtualRegistry@@YAXPEBD@Z
0x18001C984: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::FindValue(unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualValue * __ptr64 * __ptr64) __ptr64" ?FindValue@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGPEAPEAVCVirtualValue@2@@Z
0x180036B00: "Indeo� video 5.10 Encode Seque" ??_C@_1GE@KCKOODDK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe@
0x18002AF00: "CreateFileW" ??_C@_0M@GPOOGHPH@CreateFileW?$AA@
0x18002649C: "protected: void __cdecl ShimLib::CString::ConcatCopy(int,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?ConcatCopy@CString@ShimLib@@IEAAXHPEBGH0@Z
0x18002A508: "__cdecl _imp_RtlUnicodeToMultiByteSize" __imp_RtlUnicodeToMultiByteSize
0x18003D970: " %S" ??_C@_04PHDOACEE@?5?5?$CFS?$AA@
0x1800324D8: "BASICMODE" ??_C@_1BE@LALKNJGK@?$AAB?$AAA?$AAS?$AAI?$AAC?$AAM?$AAO?$AAD?$AAE?$AA?$AA@
0x180031F80: "Voices32" ??_C@_1BC@FIHJIAN@?$AAV?$AAo?$AAi?$AAc?$AAe?$AAs?$AA3?$AA2?$AA?$AA@
0x180003058: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18004B768: "int NS_Win7RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win7RTMVersionLie@@3HA
0x18004BD88: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VerifyVersionInfoLite::g_pAPIHooks" ?g_pAPIHooks@NS_VerifyVersionInfoLite@@3PEAUtagHOOKAPI@@EA
0x1800329B0: "HKCC\System\CurrentControlSet\Co" ??_C@_1GK@BNEGKNNN@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180031550: "Software\Microsoft\Windows\Curre" ??_C@_1HI@BEGLNFHN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003DF90: " Path=%S" ??_C@_0M@DLGMIBOA@?5?5?5?5Path?$DN?$CFS?$AA@
0x18002B238: "EmulateSortingVista" ??_C@_1CI@OJAPABBO@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAS?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAV?$AAi?$AAs?$AAt?$AAa?$AA?$AA@
0x18003D6A8: "DSAPPHACKID_DEVACCEL" ??_C@_1CK@GLKLJOFO@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAD?$AAE?$AAV?$AAA?$AAC?$AAC?$AAE?$AAL?$AA?$AA@
0x180020C54: "void __cdecl NS_VistaRTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaRTMVersionLie@@YAXXZ
0x18002EC30: "LCMapStringW" ??_C@_0N@DBMGCDLD@LCMapStringW?$AA@
0x180019D48: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGPEAKPEAE2@Z
0x1800315C8: "NoDriveTypeAutoRun" ??_C@_1CG@GBLLODAB@?$AAN?$AAo?$AAD?$AAr?$AAi?$AAv?$AAe?$AAT?$AAy?$AAp?$AAe?$AAA?$AAu?$AAt?$AAo?$AAR?$AAu?$AAn?$AA?$AA@
0x18002F128: "NS_FaultTolerantHeap::FthClientR" ??_C@_0CJ@EAKBDFBK@NS_FaultTolerantHeap?3?3FthClientR@
0x18001CCF4: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetRootKey(struct HKEY__ * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?GetRootKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAVCVirtualKey@2@@Z
0x18004BD14: "unsigned long NS_FaultTolerantHeap::FthCookie" ?FthCookie@NS_FaultTolerantHeap@@3KA
0x180030708: "VFAT\WritesSec" ??_C@_1BO@LMJPEBE@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAW?$AAr?$AAi?$AAt?$AAe?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x18002E3D0: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1JG@BFJLGDEG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x18003F1F4: ", ;" ??_C@_03HDMOENC@?0?7?$DL?$AA@
0x180039738: "SortOrderIndex" ??_C@_1BO@MMDENMAP@?$AAS?$AAo?$AAr?$AAt?$AAO?$AAr?$AAd?$AAe?$AAr?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x18002B9D8: "\Registry\HKEY_DYN_DATA" ??_C@_1DA@KBAACEHP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18003FB68: "_lwrite: Patched write to %x" ??_C@_0BN@NKGEDHJI@_lwrite?3?5Patched?5write?5to?5?$CFx?$AA@
0x180003330: "__cdecl FindPESection" _FindPESection
0x18002A3A0: "__cdecl _imp_atol" __imp_atol
0x18003D978: "NS_VirtualRegistry::CRegLock::CR" ??_C@_0CH@BEMCBEPN@NS_VirtualRegistry?3?3CRegLock?3?3CR@
0x180037D30: "HKCR\MIME\Database\Content Type\" ??_C@_1HE@MOMJNEPO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x180035460: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1IC@LHGPCHBF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18003D8F0: "Cannot create virtual registry v" ??_C@_0CF@GEEBEDNJ@Cannot?5create?5virtual?5registry?5v@
0x180024F78: StringCchCatA
0x18002F948: "Client->MaximumAllocOverhead > 0" ??_C@_0CB@MHHFGMAB@Client?9?$DOMaximumAllocOverhead?5?$DO?50@
0x1800309B0: "VMM\cpgSwapFileInUse" ??_C@_1CK@IDBLHGPB@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAU?$AAs?$AAe?$AA?$AA@
0x18002B460: "Overlapped != NULL && Overlapped" ??_C@_0DB@BKMJGGIP@Overlapped?5?$CB?$DN?5NULL?5?$CG?$CG?5Overlapped@
0x18003D068: "HKLM\%s\%s\InstallRoot" ??_C@_1CO@IDONCJBK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18002A2E0: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18003E6F8: "RegOpenKeyA" ??_C@_0M@JBEAMLKM@RegOpenKeyA?$AA@
0x18002AF50: "CopyFileA" ??_C@_09KECPKCEO@CopyFileA?$AA@
0x1800331A0: "[DSDEVACCEL] Invalid Parameters" ??_C@_0CA@HHAECGAF@?$FLDSDEVACCEL?$FN?5Invalid?5Parameters?$AA@
0x180030AF0: "HKCC\Software\Fonts" ??_C@_1CI@EPEEFGFH@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAF?$AAo?$AAn?$AAt?$AAs?$AA?$AA@
0x180045000: "char * __ptr64 __ptr64 NS_WRPMitigation::g_szCommandLine" ?g_szCommandLine@NS_WRPMitigation@@3PEADEA
0x180013044: StringCchCatW
0x18004B8F0: "class NS_VirtualRegistry::CVirtualRegistry NS_VirtualRegistry::VRegistry" ?VRegistry@NS_VirtualRegistry@@3VCVirtualRegistry@1@A
0x180017070: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::ExpandRegString(void * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long,int) __ptr64" ?ExpandRegString@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEAXPEAK1KH@Z
0x18003E570: "--------------------------------" ??_C@_0CD@OMKKBJJ@?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9@
0x18004B718: "struct HINSTANCE__ * __ptr64 __ptr64 ShimLib::g_hinstDll" ?g_hinstDll@ShimLib@@3PEAUHINSTANCE__@@EA
0x18003EBC0: "System\CurrentControlSet" ??_C@_1DC@JDNAPBNG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
0x18003FB08: "_lcreat: Patched %s to open with" ??_C@_0DI@OGEKDAHM@_lcreat?3?5Patched?5?$CFs?5to?5open?5with@
0x1800337B0: "HKLM\Software\Microsoft\Windows " ??_C@_1HE@EBNNOLEO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x180040438: "SecurityUtils" ??_C@_0O@LGDNFGAB@SecurityUtils?$AA@
0x18048CDF8: "void * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_TISid" ?g_TISid@NS_WRPRegDeleteKey@@3PEAXEA
0x18002E350: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1HC@KFPBDJCD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180011BA0: "long __cdecl NS_VirtualRegistry::Delphi5SetValue(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long)" ?Delphi5SetValue@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@KPEBEK@Z
0x18002A4F0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180034AD8: "NS_VirtualRegistry::BuildIndeoSo" ??_C@_0CE@GKEHCAMC@NS_VirtualRegistry?3?3BuildIndeoSo@
0x180033AA0: "x86 Family 15 Model 1 Stepping 2" ??_C@_1FO@FCHPLKLK@?$AAx?$AA8?$AA6?$AA?5?$AAF?$AAa?$AAm?$AAi?$AAl?$AAy?$AA?5?$AA1?$AA5?$AA?5?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?5?$AA1?$AA?5?$AAS?$AAt?$AAe?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AA2@
0x18004347C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180049540: "char * __ptr64 __ptr64 NS_EmulateSortingWindows61::g_szCommandLine" ?g_szCommandLine@NS_EmulateSortingWindows61@@3PEADEA
0x1800403C8: "Failed to acquire manager mutex " ??_C@_0CB@HJMIDDFC@Failed?5to?5acquire?5manager?5mutex?6@
0x180032098: "4.72.2106.9" ??_C@_1BI@PDLKGKJJ@?$AA4?$AA?4?$AA7?$AA2?$AA?4?$AA2?$AA1?$AA0?$AA6?$AA?4?$AA9?$AA?$AA@
0x18004BDF8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaSP1VersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaSP1VersionLie@@3PEAUtagHOOKAPI@@EA
0x18000E930: "void __cdecl NS_VirtualRegistry::BuildIllustrator8(char const * __ptr64)" ?BuildIllustrator8@NS_VirtualRegistry@@YAXPEBD@Z
0x18003E220: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DB@JAPIKCMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x18000C0D0: "void __cdecl NS_VirtualRegistry::BuildCodecs(char const * __ptr64)" ?BuildCodecs@NS_VirtualRegistry@@YAXPEBD@Z
0x18003F2A0: "NS_VistaRTMVersionLie::APIHook_G" ??_C@_0CN@GAEBOND@NS_VistaRTMVersionLie?3?3APIHook_G@
0x180030A9C: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18003EE78: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DE@ODJAANFB@NS_VirtualRegistry2?3?3CVirtualReg@
0x180015630: "public: struct NS_VirtualRegistry::REDIRECTOR * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AddRedirect(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddRedirect@CVirtualRegistry@NS_VirtualRegistry@@QEAAPEAUREDIRECTOR@2@PEBG0@Z
0x180013CE0: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180023230: "int __cdecl NS_WRPMitigation::APIHook_CopyFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_CopyFileW@NS_WRPMitigation@@YAHPEBG0H@Z
0x18003DF78: "%08lx=OpenKeyW()" ??_C@_0BB@HMCLOCCJ@?$CF08lx?$DNOpenKeyW?$CI?$CJ?$AA@
0x1800208F0: "int __cdecl NS_VistaRTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaRTMVersionLie@@YAHPEBGZZ
0x1800315F0: "HKLM\Software\Microsoft\Windows\" ??_C@_1GK@LIFPHOKG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18004BE70: "unsigned long NS_FaultTolerantHeap::FthDelayFreeQueueBlocks" ?FthDelayFreeQueueBlocks@NS_FaultTolerantHeap@@3KA
0x18002EE60: "WerReportCloseHandle" ??_C@_0BF@NNHHEAOC@WerReportCloseHandle?$AA@
0x18003AE40: "HKLM\SOFTWARE\Classes\Interface\" ??_C@_1LA@EHEHFFDB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180010CE0: "void __cdecl NS_VirtualRegistry::BuildWebSphereSetup(char const * __ptr64)" ?BuildWebSphereSetup@NS_VirtualRegistry@@YAXPEBD@Z
0x18002F528: "Client successfully initialized " ??_C@_0DP@FAMIAFIA@Client?5successfully?5initialized?5@
0x180010C40: "void __cdecl NS_VirtualRegistry::BuildWABDLLPath(char const * __ptr64)" ?BuildWABDLLPath@NS_VirtualRegistry@@YAXPEBD@Z
0x180023CB0: "int __cdecl NS_WRPMitigation::APIHook_SetFileAttributesW(unsigned short const * __ptr64,unsigned long)" ?APIHook_SetFileAttributesW@NS_WRPMitigation@@YAHPEBGK@Z
0x18004ACD0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18002B870: "%sDesktop.Outlook_" ??_C@_1CG@LPEECEB@?$AA?$CF?$AAs?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?4?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA_?$AA?$AA@
0x18004B930: "struct _RTL_CRITICAL_SECTION NS_VirtualRegistry::csRegCriticalSection" ?csRegCriticalSection@NS_VirtualRegistry@@3U_RTL_CRITICAL_SECTION@@A
0x180036DF0: "HKCR\CLSID\{665A444A-D905-11D0-A" ??_C@_1IC@CNBCMOMA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AAA?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002A378: "__cdecl _imp__stricmp" __imp__stricmp
0x180031AF8: "NS_VirtualRegistry::BuildBogusCt" ??_C@_0CF@BLJJGHNL@NS_VirtualRegistry?3?3BuildBogusCt@
0x18002A3C8: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18001F3F0: "void __cdecl NS_VirtualRegistry2::BuildEnvironmentLie(char const * __ptr64)" ?BuildEnvironmentLie@NS_VirtualRegistry2@@YAXPEBD@Z
0x180033ED0: "ExpandValueString for Value fail" ??_C@_0CD@ENEHHOGJ@ExpandValueString?5for?5Value?5fail@
0x180031DF0: "MSACM.MSADPCM" ??_C@_1BM@OCLCOPCH@?$AAM?$AAS?$AAA?$AAC?$AAM?$AA?4?$AAM?$AAS?$AAA?$AAD?$AAP?$AAC?$AAM?$AA?$AA@
0x18002A260: "__cdecl _imp_CharUpperW" __imp_CharUpperW
0x180013FF0: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKK@Z
0x18048CD54: "unsigned long NS_FaultTolerantHeap::FthHeapLocksInProgress" ?FthHeapLocksInProgress@NS_FaultTolerantHeap@@3KA
0x18002F358: "RtlUnlockHeap" ??_C@_0O@BAFDFOCI@RtlUnlockHeap?$AA@
0x18003E7E8: "RegDeleteKeyExA" ??_C@_0BA@KECIECLD@RegDeleteKeyExA?$AA@
0x180031860: "HKLM\Software\Microsoft\Windows " ??_C@_1GE@EJHOHDLA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x180024E00: "int __cdecl NS_WRPMitigation::MySfpIsParentKeyProtectedW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?MySfpIsParentKeyProtectedW@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBGKPEAPEAU2@@Z
0x18003BAA0: "HKLM\SOFTWARE\Classes\CLSID\{914" ??_C@_1KE@JKMEACL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4@
0x1800208F0: "int __cdecl NS_Win7RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win7RTMVersionLie@@YAHPEBGZZ
0x180038F40: "Installed" ??_C@_1BE@NFPAEHCM@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAd?$AA?$AA@
0x18002CC84: "11" ??_C@_15MJIMBFJA@?$AA1?$AA1?$AA?$AA@
0x180031400: "HKLM\Software\Classes\wrifile\sh" ??_C@_1GC@NPMLIOAJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x1800317F8: "Description" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180038750: "Interface\{0000013E-0000-0000-C0" ??_C@_1GC@DPMODELG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA3?$AAE?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180039610: "HKLM\SOFTWARE\Macromedia\FlashPl" ??_C@_1FI@FPFIGBOF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAa?$AAc?$AAr?$AAo?$AAm?$AAe?$AAd?$AAi?$AAa?$AA?2?$AAF?$AAl?$AAa?$AAs?$AAh?$AAP?$AAl@
0x1800335E8: "ShowStatus" ??_C@_1BG@MEJPLMML@?$AAS?$AAh?$AAo?$AAw?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180034210: "HKCR\CLSID\{4CB63E62-C611-11D0-8" ??_C@_1GE@DPEOJDHL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA2?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x180002AFC: "__cdecl CRT_INIT" _CRT_INIT
0x180030770: "VMM\cPageFaults" ??_C@_1CA@MEPHHEIK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAF?$AAa?$AAu?$AAl?$AAt?$AAs?$AA?$AA@
0x180038DB8: "EnableVirtualDelete" ??_C@_0BE@KOBPIJFG@EnableVirtualDelete?$AA@
0x18003F490: "NS_VistaSP1VersionLie::Initializ" ??_C@_0CM@GFCAOKAO@NS_VistaSP1VersionLie?3?3Initializ@
0x180002770: "long __cdecl NS_WRPMitigation::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_WRPMitigation@@YAJPEAUHKEY__@@@Z
0x18002C970: "excel.exe" ??_C@_1BE@DNCEJCKN@?$AAe?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002CD80: "{000209FF-0000-0000-C000-0000000" ??_C@_1EO@MHCNBNKH@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18001E480: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBG@Z
0x18001B738: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x18002A1D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180031730: "Failed to make NetBT path" ??_C@_0BK@GHNBPIFM@Failed?5to?5make?5NetBT?5path?$AA@
0x18002B4C0: "Pipe read message timed out. " ??_C@_0BO@KOHOIHMO@Pipe?5read?5message?5timed?5out?4?6?$AA@
0x180037210: "HKCR\CLSID\{E369A160-F3C2-11D0-9" ??_C@_1IC@KBOAMNPP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAE?$AA3?$AA6?$AA9?$AAA?$AA1?$AA6?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x1800381F0: "HKCR\chm.file\shell\open\command" ??_C@_1EC@PKNMCMAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAc?$AAh?$AAm?$AA?4?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x180031300: "HKLM\Software\Classes\Wordpad.Do" ??_C@_1HK@CJGJIIN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x18002B930: "\Registry\HKEY_USERS" ??_C@_1CK@ENIGEOAD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180015F04: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::CloseKey(struct HKEY__ * __ptr64) __ptr64" ?CloseKey@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@@Z
0x18003EF20: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DC@BBFPABFH@NS_VirtualRegistry2?3?3CVirtualReg@
0x180036E80: "HKCR\CLSID\{84725EA1-2FBC-11D1-B" ??_C@_1GE@CCLFFPFA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA4?$AA7?$AA2?$AA5?$AAE?$AAA?$AA1?$AA?9?$AA2?$AAF?$AAB?$AAC?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAB@
0x180032640: "BuildMSI Failed" ??_C@_0BA@JIEDJPFF@BuildMSI?5Failed?$AA@
0x180002FD6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18002DF70: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1IE@FFBODFKI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x18001B8F8: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::DeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKK@Z
0x18003D1D0: "HKLM\SOFTWARE\Classes\%s.Applica" ??_C@_1FA@GOCGICK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18000B670: "void __cdecl NS_VirtualRegistry::BuildCLRVersionLie(char const * __ptr64)" ?BuildCLRVersionLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002B908: "\Registry\MACHINE" ??_C@_1CE@BIPJPOIJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x18002A4B0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18002E220: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1IC@FHEAEMKN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x18002AE50: "SetFileAttributesA" ??_C@_0BD@MDOGBKMJ@SetFileAttributesA?$AA@
0x180030DE0: "HKCR\Wordpad.Document.1\shell\pr" ??_C@_1FI@LBGJFLLN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr@
0x18001B96C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::DeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKK@Z
0x18001EEC0: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x180034280: "TrueMotion 2.0 Decompressor Prop" ??_C@_1FE@NLJKIMBN@?$AAT?$AAr?$AAu?$AAe?$AAM?$AAo?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA2?$AA?4?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAp@
0x180004740: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180030890: "VMM\cpgFree" ??_C@_1BI@JHCJEKM@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAF?$AAr?$AAe?$AAe?$AA?$AA@
0x18001CE80: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::Initialize(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?Initialize@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEAUHKEY__@@PEBG1K@Z
0x180031B80: "HKLM\Software\Microsoft\DirectX" ??_C@_1EA@MLLKIBAE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAX?$AA?$AA@
0x18002A078: "__cdecl _imp_GetTempPathA" __imp_GetTempPathA
0x180032420: "Software\Caere Corp\Scan Manager" ??_C@_1FO@PHIPMJKP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAa?$AAe?$AAr?$AAe?$AA?5?$AAC?$AAo?$AAr?$AAp?$AA?2?$AAS?$AAc?$AAa?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr@
0x180014C70: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x18002A0B0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180030128: "[Hasbro hack] Failed to query %S" ??_C@_0CB@EMHFENEL@?$FLHasbro?5hack?$FN?5Failed?5to?5query?5?$CFS@
0x18002E890: AE_SHIM_API_HIT_ONCE_EVENT
0x1800174A8: "public: void __cdecl NS_VirtualRegistry::OPENKEY::FlushEnumList(void) __ptr64" ?FlushEnumList@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x180031B38: "ProgramFilesPath" ??_C@_1CC@PBKCLGDJ@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180030288: "[Hasbro hack] Adding fix for %S" ??_C@_0CA@KGAELMIL@?$FLHasbro?5hack?$FN?5Adding?5fix?5for?5?$CFS?$AA@
0x18002F220: "NS_FaultTolerantHeap::NotifyFn" ??_C@_0BP@HBOHKBKH@NS_FaultTolerantHeap?3?3NotifyFn?$AA@
0x180014450: "long __cdecl NS_VirtualRegistry::APIHook_RegGetValueA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegGetValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBD1KPEAKPEAE2@Z
0x1800303D8: "HKDD\Config Manager\Global" ??_C@_1DG@PAICFPLO@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$AA@
0x18002F9D8: "Client failed to write 'acknowle" ??_C@_0DL@EFOPBGED@Client?5failed?5to?5write?5?8acknowle@
0x180014CF0: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x18002A120: "__cdecl _imp_WerRegisterMemoryBlock" __imp_WerRegisterMemoryBlock
0x180014500: "long __cdecl NS_VirtualRegistry::APIHook_RegGetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegGetValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBG1KPEAKPEAE2@Z
0x18002DD60: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1JE@BHHKABOO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x1800056D0: "void __cdecl NS_DXMaximizedWindowedHwndOverride::SetD3D9MaximizedWindowedHwndOverride(int)" ?SetD3D9MaximizedWindowedHwndOverride@NS_DXMaximizedWindowedHwndOverride@@YAXH@Z
0x18003ECB8: "User path:[%ws] " ??_C@_0BB@NEIFBADC@User?5path?3?$FL?$CFws?$FN?6?$AA@
0x18003B4E0: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1HM@KNGLLKB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18002F1E0: "NS_FaultTolerantHeap::FthReAlloc" ??_C@_0CI@JGPKPCCJ@NS_FaultTolerantHeap?3?3FthReAlloc@
0x180037610: "HKCR\Interface\{665A4449-D905-11" ??_C@_1IK@DBAKFNJJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003EED0: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0CP@JFBENFCK@NS_VirtualRegistry2?3?3CVirtualReg@
0x1800331C0: "EMULATEDRENDER" ??_C@_1BO@OMKAMOBJ@?$AAE?$AAM?$AAU?$AAL?$AAA?$AAT?$AAE?$AAD?$AAR?$AAE?$AAN?$AAD?$AAE?$AAR?$AA?$AA@
0x1800307D0: "VMM\cpgCommit" ??_C@_1BM@IEPCKFCG@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AA?$AA@
0x18003F4F0: "NS_VistaSP2VersionLie::APIHook_G" ??_C@_0CN@EDDOEGFF@NS_VistaSP2VersionLie?3?3APIHook_G@
0x18003D0F8: "%s.Application.%s" ??_C@_1CE@NIDINLJC@?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x180031FF0: "Path" ??_C@_19NHABCBNP@?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180030550: "VCACHE\cMacPages" ??_C@_1CC@KPBNMCGE@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAM?$AAa?$AAc?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180032598: "CopySID failed" ??_C@_0P@FCJOOJPP@CopySID?5failed?$AA@
0x18002DCA0: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1LG@DHDHFEBM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x180038670: "Interface\{00000020-0000-0000-C0" ??_C@_1GC@GLDACDKA@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA2?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18004AD88: "unsigned __int64 NS_DXMaximizedWindowedHwndOverride::g_stShimId" ?g_stShimId@NS_DXMaximizedWindowedHwndOverride@@3_KA
0x180033780: "HKLM\Software\ODBC" ??_C@_1CG@CLPJHCHC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAO?$AAD?$AAB?$AAC?$AA?$AA@
0x18004AD68: "unsigned __int64 NS_FaultTolerantHeap::g_stShimId" ?g_stShimId@NS_FaultTolerantHeap@@3_KA
0x180033330: "[DSCACHEPOSITIONS] Unknown devic" ??_C@_0CF@FCPIIEIB@?$FLDSCACHEPOSITIONS?$FN?5Unknown?5devic@
0x180031840: "Error adding the Key to NetBT" ??_C@_0BO@JHCDDHAF@Error?5adding?5the?5Key?5to?5NetBT?$AA@
0x180037C68: "HKCR\iTunes.BurnCD" ??_C@_1CG@DFIEGEDH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAi?$AAT?$AAu?$AAn?$AAe?$AAs?$AA?4?$AAB?$AAu?$AAr?$AAn?$AAC?$AAD?$AA?$AA@
0x18003FF20: "RegSetValueW: wrp key is mitigat" ??_C@_1EG@GANPKLGD@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt@
0x180035ED0: "EnabledAccessKey" ??_C@_1CC@MNBOPDPO@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAK?$AAe?$AAy?$AA?$AA@
0x18002F7D0: "Client failed to set pipe into r" ??_C@_0DD@PCHBJNAE@Client?5failed?5to?5set?5pipe?5into?5r@
0x18001A98C: "unsigned short * __ptr64 __cdecl NS_VirtualRegistry::SplitPath(unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?SplitPath@NS_VirtualRegistry@@YAPEAGPEBGPEAPEAUHKEY__@@@Z
0x180025F38: "public: __cdecl ShimLib::CString::CString(unsigned short const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBG@Z
0x18003C680: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1IK@OBCHBDDC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18004BDF0: "int NS_VistaSP1VersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaSP1VersionLie@@3HA
0x18000ACD0: "public: __cdecl ShimLib::CString::CString(char const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBD@Z
0x180022118: "int __cdecl NS_Win7RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win7RTMVersionLie@@YAHK@Z
0x1800227D4: "int __cdecl NS_Win8RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win8RTMVersionLie@@YAHK@Z
0x180037AA8: ".aif" ??_C@_19GABGPCIC@?$AA?4?$AAa?$AAi?$AAf?$AA?$AA@
0x1800307F0: "VMM\cpgDiskcache" ??_C@_1CC@OPLFINLL@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x18002D3B8: "Word.Application.16" ??_C@_1CI@PKBBAFBH@?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x18002ABD5: "" ??_C@_00CNPNBAHC@?$AA@
0x18004B760: "int NS_Win81RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win81RTMVersionLie@@3HA
0x18048CD88: "unsigned short * __ptr64 __ptr64 NS_VistaSP1VersionLie::pwszServicePack" ?pwszServicePack@NS_VistaSP1VersionLie@@3PEAGEA
0x18004BE50: "int NS_DXMaximizedWindowedHwndOverride::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DXMaximizedWindowedHwndOverride@@3HA
0x18000C8A0: "void __cdecl NS_VirtualRegistry::BuildDSDisableDevice(char const * __ptr64)" ?BuildDSDisableDevice@NS_VirtualRegistry@@YAXPEBD@Z
0x18000A508: "int __cdecl NS_FaultTolerantHeap::FthClientInitialize(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64,char * __ptr64)" ?FthClientInitialize@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@PEAD@Z
0x18003E518: "%08lx=CloseKey()" ??_C@_0BB@HOOKDLOF@?$CF08lx?$DNCloseKey?$CI?$CJ?$AA@
0x1800152DC: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddExpander(unsigned short const * __ptr64) __ptr64" ?AddExpander@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x180025D4C: "int __cdecl ShimLib::MutexExists(unsigned short const * __ptr64)" ?MutexExists@ShimLib@@YAHPEBG@Z
0x18002A1E0: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18002F628: "Client connection not allowed an" ??_C@_0CI@JMCEMAEN@Client?5connection?5not?5allowed?5an@
0x18004BDC0: "int NS_Win8RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win8RTMVersionLie@@3HA
0x1800272D0: "public: __cdecl ShimLib::CStringToken::CStringToken(class ShimLib::CString const & __ptr64,class ShimLib::CString const & __ptr64) __ptr64" ??0CStringToken@ShimLib@@QEAA@AEBVCString@1@0@Z
0x18002A2A0: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180013B10: "long __cdecl NS_VirtualRegistry::APIHook_RegConnectRegistryA(char const * __ptr64,struct HKEY__ * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegConnectRegistryA@NS_VirtualRegistry@@YAJPEBDPEAUHKEY__@@PEAPEAU2@@Z
0x18002EDA8: "GetFileVersionInfoSizeW" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x180034E58: "IsRendered" ??_C@_1BG@NIKOAEDK@?$AAI?$AAs?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AAe?$AAd?$AA?$AA@
0x180030410: "HKDD\PerfStats" ??_C@_1BO@CBGEHFOD@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x180039790: "4.5.51641" ??_C@_1BE@BCENEDIG@?$AA4?$AA?4?$AA5?$AA?4?$AA5?$AA1?$AA6?$AA4?$AA1?$AA?$AA@
0x18002D290: "Microsoft.Office.Interop.Word.Ap" ??_C@_1FO@LOHGPOLM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp@
0x180009318: "void __cdecl NS_FaultTolerantHeap::FthFreeTrackerLogStack(void * __ptr64)" ?FthFreeTrackerLogStack@NS_FaultTolerantHeap@@YAXPEAX@Z
0x18003FBE0: "RegCreateKey: wrp key subkey mit" ??_C@_1EO@KOFBLBAB@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAs?$AAu?$AAb?$AAk?$AAe?$AAy?$AA?5?$AAm?$AAi?$AAt@
0x180031F30: "SpellIt: GetSystemDirectory Fail" ??_C@_0CD@BAJLJALP@SpellIt?3?5GetSystemDirectory?5Fail@
0x180031990: "5.0" ??_C@_17JKHNOBGI@?$AA5?$AA?4?$AA0?$AA?$AA@
0x18003F610: "NS_Win7RTMVersionLie::APIHook_Ge" ??_C@_0CJ@CMJJLAOP@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x18003FA10: "NS_WRPMitigation::APIHook_Access" ??_C@_0CG@LLFMEBFG@NS_WRPMitigation?3?3APIHook_Access@
0x180032860: "HKLM\System\CurrentControlSet\Se" ??_C@_1HA@ODMFMEHE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x18002B3D0: "wrong heap: %p, %p " ??_C@_0BE@HENACFMA@wrong?5heap?3?5?$CFp?0?5?$CFp?6?$AA@
0x18002A390: "__cdecl _imp_sprintf_s" __imp_sprintf_s
0x18002F3D8: "FTH: ASSERT: %s(%u): %s" ??_C@_0BI@KDFJMCKL@FTH?3?5ASSERT?3?5?$CFs?$CI?$CFu?$CJ?3?5?$CFs?$AA@
0x1800105E0: "void __cdecl NS_VirtualRegistry::BuildSpellItDeluxe(char const * __ptr64)" ?BuildSpellItDeluxe@NS_VirtualRegistry@@YAXPEBD@Z
0x18004BD08: "struct tagHOOKAPI * __ptr64 __ptr64 NS_FaultTolerantHeap::g_pAPIHooks" ?g_pAPIHooks@NS_FaultTolerantHeap@@3PEAUtagHOOKAPI@@EA
0x18002FDF0: "HKLM\System\CurrentControlSet\Co" ??_C@_1FI@GHMJDGBC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180036A90: "HKCR\CLSID\{665A4445-D905-11D0-A" ??_C@_1GE@MJHOKIBE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA5?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002F268: "Failed to acquire heap manager m" ??_C@_0CF@PJNKJNJC@Failed?5to?5acquire?5heap?5manager?5m@
0x180039270: "ReleaseOwnershipBeforeDestroyDev" ??_C@_1EI@DPHMDHAI@?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAD?$AAe?$AAs?$AAt?$AAr?$AAo?$AAy?$AAD?$AAe?$AAv@
0x1800381B0: "chm.file\shell\open\command" ??_C@_1DI@CADBMDLI@?$AAc?$AAh?$AAm?$AA?4?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x1800161A8: "struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::CreateNewEnumEntry(unsigned short const * __ptr64,struct NS_VirtualRegistry::ENUMENTRY * __ptr64)" ?CreateNewEnumEntry@NS_VirtualRegistry@@YAPEAUENUMENTRY@1@PEBGPEAU21@@Z
0x180036CB0: "HKCR\CLSID\{665A4448-D905-11D0-A" ??_C@_1IC@NEHDHEAN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA8?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18003EDA0: "Failed to add child key %d " ??_C@_0BM@FFJBHIBH@Failed?5to?5add?5child?5key?5?$CFd?6?$AA@
0x18002F1B8: "(Issues & FTH_ISSUE_DOUBLE_FREE)" ??_C@_0CG@KGAPNGOP@?$CIIssues?5?$CG?5FTH_ISSUE_DOUBLE_FREE?$CJ@
0x18002F208: "[ApiName] Hook Entered" ??_C@_0BH@LBEIPNFC@?$FLApiName?$FN?5Hook?5Entered?$AA@
0x180037140: "HKCR\CLSID\{E369A160-F3C2-11D0-9" ??_C@_1GE@OALFJILL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAE?$AA3?$AA6?$AA9?$AAA?$AA1?$AA6?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18002A180: "__cdecl _imp_CancelIo" __imp_CancelIo
0x180032C20: "health" ??_C@_1O@PGHBEGLO@?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x180009188: "void __cdecl NS_FaultTolerantHeap::FthFreeTrackerFindStack(struct NS_FaultTolerantHeap::_FTH_ISSUE * __ptr64)" ?FthFreeTrackerFindStack@NS_FaultTolerantHeap@@YAXPEAU_FTH_ISSUE@1@@Z
0x18002A310: "__cdecl _imp_GetAce" __imp_GetAce
0x18000E960: "void __cdecl NS_VirtualRegistry::BuildIndeo3(char const * __ptr64)" ?BuildIndeo3@NS_VirtualRegistry@@YAXPEBD@Z
0x180020D18: StringCchPrintfA
0x18001D9F4: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x180026418: "protected: void __cdecl ShimLib::CString::AssignCopy(int,unsigned short const * __ptr64) __ptr64" ?AssignCopy@CString@ShimLib@@IEAAXHPEBG@Z
0x180033108: "|" ??_C@_01DNKMNLPK@?$HM?$AA@
0x18002A3E8: "__cdecl _imp_wcschr" __imp_wcschr
0x18048BF18: "long NS_FaultTolerantHeap::FthMessageHistoryIndex" ?FthMessageHistoryIndex@NS_FaultTolerantHeap@@3JA
0x18003DBD8: "Adding Value %ls\%ls" ??_C@_0BF@BDOBANOM@Adding?5Value?5?$CFls?2?$CFls?$AA@
0x18002F838: "Client failed to get full image " ??_C@_0CH@LPNCAED@Client?5failed?5to?5get?5full?5image?5@
0x18004B764: "int NS_Win8RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win8RTMVersionLie@@3HA
0x180049500: "char * __ptr64 __ptr64 NS_Win8RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win8RTMVersionLie@@3PEADEA
0x18003F3B0: "GetVersion" ??_C@_0L@LNAOMCPJ@GetVersion?$AA@
0x18003F958: "Patched %s to ignore WRP" ??_C@_0BJ@MOPDNMKK@Patched?5?$CFs?5to?5ignore?5WRP?$AA@
0x18003F330: "Service Pack %d" ??_C@_1CA@PCALKAHH@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x180035280: "HKCR\CLSID\{87CA6F04-49E4-11CF-A" ??_C@_1GE@GCAIMEOB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA4?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180037BB8: ".mpg" ??_C@_19KLNMNDPL@?$AA?4?$AAm?$AAp?$AAg?$AA?$AA@
0x18002B260: "DXMaximizedWindowedMode" ??_C@_1DA@OOMDGOPM@?$AAD?$AAX?$AAM?$AAa?$AAx?$AAi?$AAm?$AAi?$AAz?$AAe?$AAd?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAe?$AAd?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x18003EAF0: "\REGISTRY\MACHINE\SOFTWARE\WOW64" ??_C@_1GA@OHIANHOA@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4@
0x18003E1E0: "[QueryInfoA] NULL passed for lpC" ??_C@_0EA@MBLGEDAD@?$FLQueryInfoA?$FN?5NULL?5passed?5for?5lpC@
0x18002B630: "Microsoft.Office." ??_C@_1CE@PNDGFGMN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AA?$AA@
0x1800247E0: "void __cdecl NS_WRPMitigation::LogSfpKeyA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyA@NS_WRPMitigation@@YAXPEAUHKEY__@@PEBDPEAG@Z
0x18003F008: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DC@ELEENNMO@NS_VirtualRegistry2?3?3CVirtualReg@
0x180033D30: "ExistingPageFiles" ??_C@_1CE@PLNJMHPE@?$AAE?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18002AF10: "CreateFileA" ??_C@_0M@HDHGNCCA@CreateFileA?$AA@
0x180032000: "SpellIt: RegSetValueEx failed" ??_C@_0BO@MJEOAOLL@SpellIt?3?5RegSetValueEx?5failed?$AA@
0x180027614: "public: long __cdecl ShimLib::PathTree::GetFlags(class ShimLib::CString const & __ptr64,unsigned long & __ptr64) __ptr64" ?GetFlags@PathTree@ShimLib@@QEAAJAEBVCString@2@AEAK@Z
0x18002A588: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800274F4: "public: __cdecl ShimLib::PathTreeNodeSearch::~PathTreeNodeSearch(void) __ptr64" ??1PathTreeNodeSearch@ShimLib@@QEAA@XZ
0x1800400C0: "RLCHECK: Error opening activatio" ??_C@_0DH@OALJAIBH@RLCHECK?3?5Error?5opening?5activatio@
0x1800331E0: "KSRENDER" ??_C@_1BC@EDLPCHAI@?$AAK?$AAS?$AAR?$AAE?$AAN?$AAD?$AAE?$AAR?$AA?$AA@
0x18002E9E0: "VistaSP1VersionLie" ??_C@_0BD@PHPGDNAM@VistaSP1VersionLie?$AA@
0x180030E40: "HKCR\Wordpad.Document.1\shell\pr" ??_C@_1FM@BNKKHABO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr@
0x18004BDD8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win7RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win7RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x180032E10: "RegisteredOrganization" ??_C@_1CO@HPHLILLD@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAe?$AAd?$AAO?$AAr?$AAg?$AAa?$AAn?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000CFA0: "void __cdecl NS_VirtualRegistry::BuildDelphi5Pro(char const * __ptr64)" ?BuildDelphi5Pro@NS_VirtualRegistry@@YAXPEBD@Z
0x18001E1D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x1800373C0: "{00020424-0000-0000-C000-0000000" ??_C@_1EO@EKOECGLG@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA2?$AA4?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18003E4C8: "[RegDeleteKeyW] Deleting subkey " ??_C@_0CE@JNHACDNA@?$FLRegDeleteKeyW?$FN?5Deleting?5subkey?5@
0x18004B700: "int NS_WRPMitigation::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WRPMitigation@@3HA
0x18004BDB8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win81RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win81RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x18002A168: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18002F808: "Client failed to initialize mapp" ??_C@_0CK@JPCAANBI@Client?5failed?5to?5initialize?5mapp@
0x1800354F0: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1HK@IJCOLMBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18001CEE0: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::Initialize(void) __ptr64" ?Initialize@CVirtualRegistry@NS_VirtualRegistry2@@QEAAKXZ
0x18003A230: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1MM@PCEFGFLO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002C988: "Microsoft Excel Application" ??_C@_1DI@CODNCFCJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800340A0: "HKCR\CLSID\{4CB63E61-C611-11D0-8" ??_C@_1GE@DOBDLFKK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x18002EE20: "WerReportSubmit" ??_C@_0BA@MCMDMANI@WerReportSubmit?$AA@
0x180024140: "unsigned int __cdecl NS_WRPMitigation::APIHook__lwrite(int,char const * __ptr64,unsigned int)" ?APIHook__lwrite@NS_WRPMitigation@@YAIHPEBDI@Z
0x180022214: "void __cdecl NS_Win7RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win7RTMVersionLie@@YAXXZ
0x18002A520: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x180014170: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x18002A3B0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x18003F1E4: "HKCU" ??_C@_04KIFLFONO@HKCU?$AA@
0x180035020: "Input" ??_C@_1M@PFCMLKBL@?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?$AA@
0x180010E20: "void __cdecl NS_VirtualRegistry::BuildWin81RTMLie(char const * __ptr64)" ?BuildWin81RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180023590: "int __cdecl NS_WRPMitigation::APIHook_MoveFileExA(char const * __ptr64,char const * __ptr64,unsigned long)" ?APIHook_MoveFileExA@NS_WRPMitigation@@YAHPEBD0K@Z
0x180032540: "[GetStringSID] Failed to OpenPro" ??_C@_0CK@JJLFFJMF@?$FLGetStringSID?$FN?5Failed?5to?5OpenPro@
0x18002A0E8: "__cdecl _imp_GetShortPathNameW" __imp_GetShortPathNameW
0x18002A398: "__cdecl _imp_vsprintf_s" __imp_vsprintf_s
0x180035CF0: "HKCR\CLSID\{BD323433-CE94-11CE-8" ??_C@_1IC@HJILJICO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA3?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18048BF20: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthMessageHistory" ?FthMessageHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x18048CD80: "char * __ptr64 __ptr64 NS_VistaSP1VersionLie::pszServicePack" ?pszServicePack@NS_VistaSP1VersionLie@@3PEADEA
0x18003B380: "Microsoft.Office.Interop.PowerPo" ??_C@_1GK@KFFAGBKO@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo@
0x18002FC18: "VerifyVersionInfoW" ??_C@_0BD@LDFKKKHL@VerifyVersionInfoW?$AA@
0x1800386E0: "Interface\{0000013D-0000-0000-C0" ??_C@_1GC@IJNFNEMG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA3?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002ACA0: "RegSetValueExW: wrp key is mitig" ??_C@_1EK@OFPIDJFP@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg@
0x18002A0A8: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x18002EC50: "FindNLSStringEx" ??_C@_0BA@KCEFAGNO@FindNLSStringEx?$AA@
0x18004B758: "int NS_WRPRegDeleteKey::g_bSubshimUsed" ?g_bSubshimUsed@NS_WRPRegDeleteKey@@3HA
0x180037AA0: ".aa" ??_C@_17DGBDBMGL@?$AA?4?$AAa?$AAa?$AA?$AA@
0x18000C2F0: "void __cdecl NS_VirtualRegistry::BuildD3DReleaseDevice(char const * __ptr64)" ?BuildD3DReleaseDevice@NS_VirtualRegistry@@YAXPEBD@Z
0x18004B730: "void * __ptr64 * __ptr64 __ptr64 NS_FaultTolerantHeap::FthSpecialHeaps" ?FthSpecialHeaps@NS_FaultTolerantHeap@@3PEAPEAXEA
0x180037BA8: ".mpeg" ??_C@_1M@DKLHOHF@?$AA?4?$AAm?$AAp?$AAe?$AAg?$AA?$AA@
0x18004AD30: "unsigned __int64 NS_Win8RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win8RTMVersionLie@@3_KA
0x18003F580: "NS_VistaSP2VersionLie::Initializ" ??_C@_0CM@IKGBJFE@NS_VistaSP2VersionLie?3?3Initializ@
0x180035E58: "HKCU\Software\Intel\Indeo\4.1" ??_C@_1DM@LMGODJJB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAl?$AA?2?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?2?$AA4?$AA?4?$AA1?$AA?$AA@
0x180002970: "void * __ptr64 __cdecl NS_WRPMitigation::APIHook_CreateFileW(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?APIHook_CreateFileW@NS_WRPMitigation@@YAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x18048CD98: "char * __ptr64 __ptr64 NS_VistaSP2VersionLie::pszServicePack" ?pszServicePack@NS_VistaSP2VersionLie@@3PEADEA
0x180023C40: "int __cdecl NS_WRPMitigation::APIHook_SetFileAttributesA(char const * __ptr64,unsigned long)" ?APIHook_SetFileAttributesA@NS_WRPMitigation@@YAHPEBDK@Z
0x180011A20: "void __cdecl NS_VirtualRegistry::BuildX86ArchLie(char const * __ptr64)" ?BuildX86ArchLie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800374A0: "HKCR\Interface\{665A4447-D905-11" ??_C@_1HM@KJODJILF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180039688: "6.2" ??_C@_17LOPLCOAA@?$AA6?$AA?4?$AA2?$AA?$AA@
0x1800375F0: "IIndeoEncodeOA" ??_C@_1BO@DIBBFNFM@?$AAI?$AAI?$AAn?$AAd?$AAe?$AAo?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AAO?$AAA?$AA?$AA@
0x1800133B0: "int __cdecl NS_VirtualRegistry::AddDirectSoundAppHack(unsigned long,unsigned long,unsigned long)" ?AddDirectSoundAppHack@NS_VirtualRegistry@@YAHKKK@Z
0x18003CFB8: "InstallCount" ??_C@_1BK@KKGGODJC@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x180003315: "__cdecl XcptFilter" _XcptFilter
0x18002D600: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1IE@CFFOIDAD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180031930: "HKLM\System\CurrentControlSet\Co" ??_C@_1FM@FGPCJBDB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18002A590: "__cdecl _xc_a" __xc_a
0x180032F58: "CurrentDriveLetterAssignment" ??_C@_1DK@JIHICEAA@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAD?$AAr?$AAi?$AAv?$AAe?$AAL?$AAe?$AAt?$AAt?$AAe?$AAr?$AAA?$AAs?$AAs?$AAi?$AAg?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x180039DF0: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1KM@KHKPIBDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002A3F8: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18002F2F8: "RtlFreeHeap" ??_C@_0M@BBFBOFBP@RtlFreeHeap?$AA@
0x1800392F8: "6000" ??_C@_19IAEMJIH@?$AA6?$AA0?$AA0?$AA0?$AA?$AA@
0x18003D7E8: "Unknown DirectSound AppHack" ??_C@_0BM@DBIJOJIO@Unknown?5DirectSound?5AppHack?$AA@
0x18002B0F0: "VistaSP2VersionLie" ??_C@_1CG@MJHHIALJ@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAS?$AAP?$AA2?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x180031470: "HKLM\Software\Classes\wrifile\sh" ??_C@_1GE@PFEIIJMM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x18000C340: "void __cdecl NS_VirtualRegistry::BuildD3DReleaseProcessVid(char const * __ptr64)" ?BuildD3DReleaseProcessVid@NS_VirtualRegistry@@YAXPEBD@Z
0x18001A6E8: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::SetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGKPEBEK@Z
0x18004BDE0: "int NS_VistaSP2VersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaSP2VersionLie@@3HA
0x18003FAA8: "_lopen: Patched %s to open with " ??_C@_0DH@BDCMEDJC@_lopen?3?5Patched?5?$CFs?5to?5open?5with?5@
0x18003E0F0: " Result=%ls" ??_C@_0P@KLGHLDGK@?5?5?5?5Result?$DN?$CFls?$AA@
0x180037A98: " " ??_C@_01CLKCMJKC@?5?$AA@
0x18048CDA0: "unsigned short * __ptr64 __ptr64 NS_VistaSP2VersionLie::pwszServicePack" ?pwszServicePack@NS_VistaSP2VersionLie@@3PEAGEA
0x18002B898: "%s\%s\%s" ??_C@_1BC@GLIGFLDD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180038140: "HKLM\SYSTEM\CurrentControlSet\Co" ??_C@_1GK@GDILBPNL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18002A040: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x18002F570: "Client successfully initialized " ??_C@_0EI@HDKPDMO@Client?5successfully?5initialized?5@
0x180024D90: "int __cdecl NS_WRPMitigation::MySfpIsParentKeyProtectedA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?MySfpIsParentKeyProtectedA@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBDKPEAPEAU2@@Z
0x18003E8C0: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DC@ELDEKJGH@NS_VirtualRegistry2?3?3CVirtualReg@
0x180038060: "HKLM\SYSTEM\ControlSet002\Contro" ??_C@_1GC@HGHKDJPO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA2?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x18000EFA0: "void __cdecl NS_VirtualRegistry::BuildLocale(char const * __ptr64)" ?BuildLocale@NS_VirtualRegistry@@YAXPEBD@Z
0x1800236B0: "int __cdecl NS_WRPMitigation::APIHook_MoveFileW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?APIHook_MoveFileW@NS_WRPMitigation@@YAHPEBG0@Z
0x18002CC90: "Microsoft Visio Automation" ??_C@_1DG@JJCMNPCN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAV?$AAi?$AAs?$AAi?$AAo?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18004B7B0: "unsigned long NS_FaultTolerantHeap::FthRandomSeed" ?FthRandomSeed@NS_FaultTolerantHeap@@3KA
0x180006910: "int __cdecl NS_EmulateSortingWindows61::APIHook_FindNLSString(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64)" ?APIHook_FindNLSString@NS_EmulateSortingWindows61@@YAHKKPEBGH0HPEAH@Z
0x18001794C: "public: int __cdecl NS_VirtualRegistry::CVirtualRegistry::Init(void) __ptr64" ?Init@CVirtualRegistry@NS_VirtualRegistry@@QEAAHXZ
0x18002CC60: "Visio" ??_C@_1M@BEPPMGHC@?$AAV?$AAi?$AAs?$AAi?$AAo?$AA?$AA@
0x18003FA38: "WRP" ??_C@_03FNOCLAHC@WRP?$AA@
0x180023410: "int __cdecl NS_WRPMitigation::APIHook_DeleteFileA(char const * __ptr64)" ?APIHook_DeleteFileA@NS_WRPMitigation@@YAHPEBD@Z
0x180032C60: "NS_VirtualRegistry::BuildMSA2001" ??_C@_0CB@PHFFPNOA@NS_VirtualRegistry?3?3BuildMSA2001@
0x18002A278: "__cdecl _imp_GetDefaultPrinterW" __imp_GetDefaultPrinterW
0x18003FC98: "RegCreateKey getting accedd deni" ??_C@_0CL@ECPFPKPA@RegCreateKey?5getting?5accedd?5deni@
0x18003DD80: "Triggering %S on opening of %S" ??_C@_0BP@PMDMBFCM@Triggering?5?$CFS?5on?5opening?5of?5?$CFS?$AA@
0x18003DE30: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DG@JPJNDHKL@NS_VirtualRegistry?3?3CVirtualRegi@
0x18001D3B4: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoKeyA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x18048CDF0: "short NS_Win81RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win81RTMVersionLie@@3FA
0x180011B20: "void __cdecl NS_VirtualRegistry::BuildXpSp3Lie(char const * __ptr64)" ?BuildXpSp3Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180035D80: "HKCR\Filter\{31345649-0000-0010-" ??_C@_1GG@FPFIHNIP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9@
0x18002A0F8: "__cdecl _imp_FindClose" __imp_FindClose
0x18003E808: "RegGetValueA" ??_C@_0N@DGDLFJKD@RegGetValueA?$AA@
0x180026D00: "protected: static void __cdecl ShimLib::CString::Release(class ShimLib::CStringData<unsigned short> * __ptr64)" ?Release@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x18004B788: "int NS_EmulateSortingVista::g_bSubshimUsed" ?g_bSubshimUsed@NS_EmulateSortingVista@@3HA
0x18003B800: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1JE@DNGPPDEI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18004BE98: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthDelayFreeQueueFlushLock" ?FthDelayFreeQueueFlushLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x18000B700: "void __cdecl NS_VirtualRegistry::BuildCentennialOffice(char const * __ptr64)" ?BuildCentennialOffice@NS_VirtualRegistry@@YAXPEBD@Z
0x18002F240: "(ShimLib) Hook Entered" ??_C@_0BH@BKPCIMD@?$CIShimLib?$CJ?5Hook?5Entered?$AA@
0x180040280: "User32.dll" ??_C@_0L@OKGHKNFP@User32?4dll?$AA@
0x18003E980: "Redirected to: [%ws] " ??_C@_0BG@NPHGEMKN@Redirected?5to?3?5?$FL?$CFws?$FN?6?$AA@
0x1800130BC: StringCchCopyW
0x18002A210: "__cdecl _imp_LCMapStringEx" __imp_LCMapStringEx
0x18004BE40: "int NS_DXMaximizedWindowedMode::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DXMaximizedWindowedMode@@3HA
0x180005918: "void __cdecl NS_DXMaximizedWindowedMode::SetD3D9MaximizedWindowedMode(int)" ?SetD3D9MaximizedWindowedMode@NS_DXMaximizedWindowedMode@@YAXH@Z
0x1800328F0: "[Printer] Query for legacy print" ??_C@_0CD@MIAPHEKD@?$FLPrinter?$FN?5Query?5for?5legacy?5print@
0x18004B780: "int NS_FaultTolerantHeap::g_bSubshimUsed" ?g_bSubshimUsed@NS_FaultTolerantHeap@@3HA
0x18004AD70: "unsigned __int64 NS_EmulateSortingWindows61::g_stShimId" ?g_stShimId@NS_EmulateSortingWindows61@@3_KA
0x1800339E0: "HKLM\SYSTEM\CurrentControlSet\Co" ??_C@_1IE@DMLJODFH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18003F3A0: "GetVersionExW" ??_C@_0O@KHLDIKFN@GetVersionExW?$AA@
0x180010200: "void __cdecl NS_VirtualRegistry::BuildProductSuite(char const * __ptr64)" ?BuildProductSuite@NS_VirtualRegistry@@YAXPEBD@Z
0x18002D410: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1GE@FCFEKALP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x18002D520: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1OA@GLEGJIIM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180011AF0: "void __cdecl NS_VirtualRegistry::BuildXpSp2Lie(char const * __ptr64)" ?BuildXpSp2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003F5B0: "NS_Win7RTMVersionLie::APIHook_Ge" ??_C@_0CM@NAOCPNEK@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x180002690: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180030EE0: "HKCR\wrifile\shell\print\command" ??_C@_1EC@DKFOFJAJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x180032D78: "HKCU\Software\nownuri" ??_C@_1CM@GBEFHPAA@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAn?$AAu?$AAr?$AAi?$AA?$AA@
0x18002ED78: "version.dll" ??_C@_1BI@JADLCDAP@?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003EF00: "Found open key [%ws] %p " ??_C@_0BJ@CADAKMLB@Found?5open?5key?5?$FL?$CFws?$FN?5?$CFp?6?$AA@
0x18002AC80: "[%S] " ??_C@_05GGGGPDDJ@?$FL?$CFS?$FN?6?$AA@
0x180043398: "__cdecl CTA1?AVCStringError@CString@ShimLib@@" _CTA1?AVCStringError@CString@ShimLib@@
0x18002B560: "HKLM\SOFTWARE\Clients\Mail\Micro" ??_C@_1FK@GPAJLOEK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAs?$AA?2?$AAM?$AAa?$AAi?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1800390F0: "HKCU\Software\Microsoft\Windows\" ??_C@_1HI@PPPAIOGM@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002600C: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(class ShimLib::CString const & __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@AEBV01@@Z
0x18004B77C: "int NS_VirtualRegistry::g_bSubshimUsed" ?g_bSubshimUsed@NS_VirtualRegistry@@3HA
0x18002F158: "FTH SQM: version: %ws " ??_C@_0BI@MKHNIFKN@FTH?5SQM?3?5version?3?5?$CFws?5?6?$AA@
0x180036930: "HKCR\CLSID\{665A4444-D905-11D0-A" ??_C@_1GE@HPGFEIGE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA4?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18003E778: "RegEnumKeyExA" ??_C@_0O@MLGBAFCL@RegEnumKeyExA?$AA@
0x180011AC0: "void __cdecl NS_VirtualRegistry::BuildXpSp1Lie(char const * __ptr64)" ?BuildXpSp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180011D74: "long __cdecl NS_VirtualRegistry::ExpandCodecString(unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ExpandCodecString@NS_VirtualRegistry@@YAJPEAGPEAKPEAPEAG@Z
0x1800229B0: "int __cdecl NS_Win81RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win81RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180022AA0: "int __cdecl NS_Win81RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win81RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x18003DFC0: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DC@CPABGLFE@NS_VirtualRegistry?3?3CVirtualRegi@
0x18004BEF8: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthWatsonObjectLock" ?FthWatsonObjectLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x180009D04: "long __cdecl NS_FaultTolerantHeap::FthWalkHeap(void * __ptr64,struct _RTL_HEAP_WALK_ENTRY * __ptr64)" ?FthWalkHeap@NS_FaultTolerantHeap@@YAJPEAXPEAU_RTL_HEAP_WALK_ENTRY@@@Z
0x180030918: "VMM\cpgSharedPages" ??_C@_1CG@EGMAPNL@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x18001E320: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKK@Z
0x18003CEB0: "SOFTWARE\Wow6432Node\Microsoft\W" ??_C@_1IA@MPNPHHNB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
0x180038330: "OLEViewer IUnknown Interface Vie" ??_C@_1EI@OJEFAPKM@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAI?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe@
0x18003ACF0: "9.6" ??_C@_17OILJKLPL@?$AA9?$AA?4?$AA6?$AA?$AA@
0x18048C740: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthAssertHistory" ?FthAssertHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x180040418: "ShimLib::SearchGroupForSID" ??_C@_0BL@IACPLCLC@ShimLib?3?3SearchGroupForSID?$AA@
0x180033E58: "ExpandEnvironmentStringsW failed" ??_C@_0CB@BCGDNMKI@ExpandEnvironmentStringsW?5failed@
0x18002A3C0: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18002AB68: "__cdecl _guard_iat_table" __guard_iat_table
0x180039420: "6002" ??_C@_19KCANABAM@?$AA6?$AA0?$AA0?$AA2?$AA?$AA@
0x180032BA0: "HKLM\Software\Encore Software\Mi" ??_C@_1HO@FJGLOHEG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAE?$AAn?$AAc?$AAo?$AAr?$AAe?$AA?5?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi@
0x18002AD98: "RegSetValueW" ??_C@_0N@EOGMNOG@RegSetValueW?$AA@
0x180038480: "CLSID\{64454F82-F827-11CE-9059-0" ??_C@_1FK@NICHOHBC@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA4?$AA4?$AA5?$AA4?$AAF?$AA8?$AA2?$AA?9?$AAF?$AA8?$AA2?$AA7?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x180010400: "void __cdecl NS_VirtualRegistry::BuildRedirectors(char const * __ptr64)" ?BuildRedirectors@NS_VirtualRegistry@@YAXPEBD@Z
0x1800433A8: "__stdcall CT??_R0?AVCStringError@CString@ShimLib@@" _CT??_R0?AVCStringError@CString@ShimLib@@@81
0x18002CF60: "v2.0.50727" ??_C@_1BG@CEGFPIM@?$AAv?$AA2?$AA?4?$AA0?$AA?4?$AA5?$AA0?$AA7?$AA2?$AA7?$AA?$AA@
0x180004706: memcpy
0x180037BE8: ".rmp" ??_C@_19HMMBIOBP@?$AA?4?$AAr?$AAm?$AAp?$AA?$AA@
0x180049548: "char * __ptr64 __ptr64 NS_EmulateSortingVista::g_szCommandLine" ?g_szCommandLine@NS_EmulateSortingVista@@3PEADEA
0x18003B938: "LocalServer32" ??_C@_1BM@KADAJJA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18004B7C0: "struct NS_FaultTolerantHeap::__FTH_CLIENT NS_FaultTolerantHeap::FthClient" ?FthClient@NS_FaultTolerantHeap@@3U__FTH_CLIENT@1@A
0x180034FA0: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1HM@MADMMOOL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18002F970: "Client->MaximumFreeOverhead > 0" ??_C@_0CA@NDOLBAAN@Client?9?$DOMaximumFreeOverhead?5?$DO?50?$AA@
0x180033D18: "PagingFiles" ??_C@_1BI@CFHAKEKA@?$AAP?$AAa?$AAg?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18048CDE8: "unsigned short * __ptr64 __ptr64 NS_Win81RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win81RTMVersionLie@@3PEAGEA
0x18002483C: "void __cdecl NS_WRPMitigation::LogSfpKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyW@NS_WRPMitigation@@YAXPEAUHKEY__@@PEBGPEAG@Z
0x180038B00: "Interface\{00020401-0000-0000-C0" ??_C@_1IO@HCKKNLCG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002B998: "\Registry\HKEY_CURRENT_CONFIG" ??_C@_1DM@FBPHAHCB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18003A8A0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1NA@HJNDJHG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180032918: "NS_VirtualRegistry::VR_Printer" ??_C@_0BP@MFHDILDO@NS_VirtualRegistry?3?3VR_Printer?$AA@
0x18003DC18: "NS_VirtualRegistry::VIRTUALKEY::" ??_C@_0CK@JIPKFGBK@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x1800045EC: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x18002A490: "__cdecl _imp_RtlCaptureStackBackTrace" __imp_RtlCaptureStackBackTrace
0x1800318C8: "Service Pack 5" ??_C@_1BO@PHHDFEKP@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA5?$AA?$AA@
0x18002A2D0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180039978: "X86" ??_C@_17CBHHOKFI@?$AAX?$AA8?$AA6?$AA?$AA@
0x18002ECC0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18002CAF8: "powerpnt.exe" ??_C@_1BK@FBOGBOPH@?$AAp?$AAo?$AAw?$AAe?$AAr?$AAp?$AAn?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180037E50: "HKCR\MIME\Database\Content Type\" ??_C@_1HE@CBJIJCCE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x180034C80: "Merit" ??_C@_1M@DIPLLPAO@?$AAM?$AAe?$AAr?$AAi?$AAt?$AA?$AA@
0x1800328D0: "MajorVersion" ??_C@_1BK@LEOFJMJL@?$AAM?$AAa?$AAj?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800259D0: "struct HWND__ * __ptr64 __cdecl NS_WsExCompositedShim::APIHook_CreateWindowExW(unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int,int,int,int,struct HWND__ * __ptr64,struct HMENU__ * __ptr64,struct HINSTANCE__ * __ptr64,void * __ptr64)" ?APIHook_CreateWindowExW@NS_WsExCompositedShim@@YAPEAUHWND__@@KPEBG0KHHHHPEAU2@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
0x18002A060: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x18002A360: "__cdecl _imp_memset" __imp_memset
0x18003DAE8: "HKUS" ??_C@_19GABEDHGO@?$AAH?$AAK?$AAU?$AAS?$AA?$AA@
0x180040128: "RLCHECK: There is a declared run" ??_C@_0CH@GKGOENDF@RLCHECK?3?5There?5is?5a?5declared?5run@
0x180029FE8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1800034EF: "__cdecl initterm" _initterm
0x180037ED0: "HKCU\Software\Classes\MIME\Datab" ??_C@_1IO@JDBECHFH@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x180039458: "6.1" ??_C@_17KMEOIBOO@?$AA6?$AA?4?$AA1?$AA?$AA@
0x180015E24: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckTriggers(unsigned short const * __ptr64) __ptr64" ?CheckTriggers@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEBG@Z
0x18004BE24: "int NS_EmulateSortingWindows61::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_EmulateSortingWindows61@@3HA
0x18002B0C8: "Win7RTMVersionLie" ??_C@_1CE@DELDIDGJ@?$AAW?$AAi?$AAn?$AA7?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x18002F3F0: "FTHSVC" ??_C@_06NAAJNHCD@FTHSVC?$AA@
0x180037AD8: ".cda" ??_C@_19DHKNOJI@?$AA?4?$AAc?$AAd?$AAa?$AA?$AA@
0x1800109E0: "void __cdecl NS_VirtualRegistry::BuildVirtualizeHKCR(char const * __ptr64)" ?BuildVirtualizeHKCR@NS_VirtualRegistry@@YAXPEBD@Z
0x18003A7F0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1KM@HPKHNCHB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18004B6F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180013F00: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBD@Z
0x180033E80: "ExpandValueString for ValueName " ??_C@_0CH@OAMAGFA@ExpandValueString?5for?5ValueName?5@
0x18002B3A0: "NS_FaultTolerantHeap::FthRecogni" ??_C@_0CM@BCBHHFGK@NS_FaultTolerantHeap?3?3FthRecogni@
0x18001EC90: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18048CD74: "short NS_VistaRTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_VistaRTMVersionLie@@3FA
0x18002A030: "__cdecl _imp_Sleep" __imp_Sleep
0x18002A258: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x1800396A0: "Windows Server 2012" ??_C@_1CI@JDMAKOGO@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA1?$AA2?$AA?$AA@
0x18003CFF0: "%s\%s\Office16\" ??_C@_1CA@ENHFLNJC@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA1?$AA6?$AA?2?$AA?$AA@
0x1800211B4: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaSP1VersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaSP1VersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002A4E0: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1800392F0: "6.0" ??_C@_17BEPCOGIL@?$AA6?$AA?4?$AA0?$AA?$AA@
0x18002184C: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaSP2VersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaSP2VersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18003DAA8: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x180036D40: "HKCR\CLSID\{665A444A-D905-11D0-A" ??_C@_1GE@ONEHNPPI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AAA?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002A5B8: "__cdecl _xi_z" __xi_z
0x18001EB30: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x18004AD80: "unsigned __int64 NS_DXMaximizedWindowedMode::g_stShimId" ?g_stShimId@NS_DXMaximizedWindowedMode@@3_KA
0x1800361B0: "HKCR\CLSID\{083863F1-70DE-11D0-B" ??_C@_1ME@IMHPFIGI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x1800341F8: "Both" ??_C@_19OBNAGCDI@?$AAB?$AAo?$AAt?$AAh?$AA?$AA@
0x18002A028: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180039B00: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1KK@NKGBLCEE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18003AAE0: "_Application" ??_C@_1BK@HOHCAPLI@?$AA_?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003E630: "NS_VirtualRegistry::NotifyFn" ??_C@_0BN@CFGNLNEO@NS_VirtualRegistry?3?3NotifyFn?$AA@
0x180033658: "[DSDISABLEDEVICE] No devices spe" ??_C@_0CI@NEMOOMMJ@?$FLDSDISABLEDEVICE?$FN?5No?5devices?5spe@
0x180033BE8: "6,0,2900,2180" ??_C@_1BM@IKPPMDLB@?$AA6?$AA?0?$AA0?$AA?0?$AA2?$AA9?$AA0?$AA0?$AA?0?$AA2?$AA1?$AA8?$AA0?$AA?$AA@
0x18000CE30: "void __cdecl NS_VirtualRegistry::BuildDX7A(char const * __ptr64)" ?BuildDX7A@NS_VirtualRegistry@@YAXPEBD@Z
0x18000DF50: "void __cdecl NS_VirtualRegistry::BuildExpanders(char const * __ptr64)" ?BuildExpanders@NS_VirtualRegistry@@YAXPEBD@Z
0x18004BDE8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaSP2VersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaSP2VersionLie@@3PEAUtagHOOKAPI@@EA
0x180003014: "__cdecl _C_specific_handler" __C_specific_handler
0x18003EFB0: "Failed to get the virtual key ro" ??_C@_0CN@LIJKALG@Failed?5to?5get?5the?5virtual?5key?5ro@
0x1800241D4: "long __cdecl NS_WRPRegDeleteKey::GetKeyPath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetKeyPath@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBGPEAU_UNICODE_STRING@@@Z
0x180030D30: "HKCR\rtffile\shell\printto\comma" ??_C@_1EG@OIIMPNKG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AAt?$AAo?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa@
0x18003A190: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1JO@JPHANHIA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002F378: "MSVCRT.DLL" ??_C@_0L@BBEDECJP@MSVCRT?4DLL?$AA@
0x18002A1C0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180030958: "VMM\cpgSwapFile" ??_C@_1CA@LPEGJPCO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x180037B38: ".m4a" ??_C@_19BKHOMEFN@?$AA?4?$AAm?$AA4?$AAa?$AA?$AA@
0x18003C260: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1NA@FAPOPJI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180022B80: "long __cdecl NS_Win81RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win81RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x18002CC10: "{0002123D-0000-0000-C000-0000000" ??_C@_1EO@FOCNIHON@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA1?$AA2?$AA3?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18002ACF0: "VERSION.DLL" ??_C@_0M@PIEFMFPP@VERSION?4DLL?$AA@
0x180038240: "OLEViewer TypeLib Interface View" ??_C@_1EI@KJFONBED@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe?$AAw@
0x180027710: "public: int __cdecl ShimLib::VectorT<class ShimLib::PathTreeNode * __ptr64>::Resize(int) __ptr64" ?Resize@?$VectorT@PEAVPathTreeNode@ShimLib@@@ShimLib@@QEAAHH@Z
0x18001F8A4: "struct tagHOOKAPI * __ptr64 __cdecl NS_VirtualRegistry2::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VirtualRegistry2@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18003CC80: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1NA@EBLAFKKD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180038CB0: "Interface\{BD1AE5E0-A6AE-11CE-BD" ??_C@_1IO@KGCEFPPN@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AAB?$AAD?$AA1?$AAA?$AAE?$AA5?$AAE?$AA0?$AA?9?$AAA?$AA6?$AAA?$AAE?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AAD@
0x1800188C4: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?OpenKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAKHH1@Z
0x18000C3E0: "void __cdecl NS_VirtualRegistry::BuildDSCachePositions(char const * __ptr64)" ?BuildDSCachePositions@NS_VirtualRegistry@@YAXPEBD@Z
0x180035DF0: "HKCR\Filter\{A2551F60-705F-11CF-" ??_C@_1GG@PABCHBPG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9@
0x18003B8A0: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1JI@ILODMDAL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180017268: "private: struct NS_VirtualRegistry::OPENKEY * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::FindOpenKey(struct HKEY__ * __ptr64) __ptr64" ?FindOpenKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAUOPENKEY@2@PEAUHKEY__@@@Z
0x18002AE38: "SetFileAttributesW" ??_C@_0BD@NPHOKPBO@SetFileAttributesW?$AA@
0x18002F450: "FTH shim applied directly as a s" ??_C@_0CG@EPHNNIOB@FTH?5shim?5applied?5directly?5as?5a?5s@
0x180004712: memmove
0x18002A218: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18003D678: "NS_VirtualRegistry::AddDirectSou" ??_C@_0CK@BEGANALA@NS_VirtualRegistry?3?3AddDirectSou@
0x18002B5E0: "%SystemDrive%\Program Files\Wind" ??_C@_1FA@HFAFOAEN@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$CF?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x1800205C0: "unsigned long __cdecl NS_VistaRTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaRTMVersionLie@@YAKXZ
0x18003EA28: "\Registry\Machine\" ??_C@_1CG@ECHCOIBH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AA?$AA@
0x180022E98: "int __cdecl NS_Win81RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win81RTMVersionLie@@YAHK@Z
0x18048C730: "long NS_FaultTolerantHeap::FthAssertHistoryIndex" ?FthAssertHistoryIndex@NS_FaultTolerantHeap@@3JA
0x180032E40: "RegisteredOwner" ??_C@_1CA@HIKLBPIH@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAe?$AAd?$AAO?$AAw?$AAn?$AAe?$AAr?$AA?$AA@
0x18003EA50: "\Registry\Machine\Software\Class" ??_C@_1EI@IGIMJNMH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs@
0x18004BEE8: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerpGetReportConsent)(void * __ptr64,enum _WER_CONSENT,enum _CONSENT_SETTING * __ptr64)" ?pfnWerpGetReportConsent@NS_FaultTolerantHeap@@3P6AJPEAXW4_WER_CONSENT@@PEAW4_CONSENT_SETTING@@@ZEA
0x180006150: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_LCMapStringEx@NS_EmulateSortingVista@@YAHPEBGK0HPEAGHPEAU_nlsversioninfo@@PEAX_J@Z
0x18002A4C8: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x18001E990: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18002C8D8: "Microsoft Access Database" ??_C@_1DE@HBLFEHJB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x180030268: "HKLM\" ??_C@_1M@JIDAHKMD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$AA@
0x180040328: "Manager or tweaker already assig" ??_C@_0CF@PNNDBNNG@Manager?5or?5tweaker?5already?5assig@
0x180030A10: "HKDD\PerfStats\StopSrv" ??_C@_1CO@GHCLOGBA@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAo?$AAp?$AAS?$AAr?$AAv?$AA?$AA@
0x18003E100: "Exception occurred in QueryValue" ??_C@_0CC@BKNJINPH@Exception?5occurred?5in?5QueryValue@
0x180018E64: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenUserClassesRoot(void * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenUserClassesRoot@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAXKKPEAPEAUHKEY__@@@Z
0x180033110: "NONE" ??_C@_19PFCDLDMI@?$AAN?$AAO?$AAN?$AAE?$AA?$AA@
0x18004BDA0: "int NS_WRPRegDeleteKey::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WRPRegDeleteKey@@3HA
0x180033450: "[DSRETURNWRITEPOSITION] No devic" ??_C@_0CO@HOKAIOFM@?$FLDSRETURNWRITEPOSITION?$FN?5No?5devic@
0x18048CD94: "unsigned long NS_VistaSP1VersionLie::MinorVersion" ?MinorVersion@NS_VistaSP1VersionLie@@3KA
0x18001B66C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x180036040: "HKCR\CLSID\{083863F1-70DE-11D0-B" ??_C@_1ME@DMNMGFPJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18048CDAC: "unsigned long NS_VistaSP2VersionLie::MinorVersion" ?MinorVersion@NS_VistaSP2VersionLie@@3KA
0x18003D810: "HKLM\System\CurrentControlSet\Co" ??_C@_1LG@OKOKGGBH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18003EE58: "Failed to add value [%ws] %d " ??_C@_0BO@CLHBHHMC@Failed?5to?5add?5value?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x180030350: "SYSTEM\CurrentControlSet\Enum\PC" ??_C@_1EE@PJEGNKCD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?2?$AAP?$AAC@
0x1800388C0: "Interface\{00000109-0000-0000-C0" ??_C@_1IO@LKOPDHKN@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002A3F0: "__cdecl _imp_wcspbrk" __imp_wcspbrk
0x180037B68: ".m4v" ??_C@_19NHLAKLHL@?$AA?4?$AAm?$AA4?$AAv?$AA?$AA@
0x180018774: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64,int) __ptr64" ?OpenKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAKH@Z
0x18003F360: "NS_VistaRTMVersionLie::Initializ" ??_C@_0CM@ONKCOKHJ@NS_VistaRTMVersionLie?3?3Initializ@
0x1800111F0: "void __cdecl NS_VirtualRegistry::BuildWinNTCurrentVersion(char const * __ptr64)" ?BuildWinNTCurrentVersion@NS_VirtualRegistry@@YAXPEBD@Z
0x180013AA8: "public: __cdecl NS_VirtualRegistry::CRegLock::~CRegLock(void) __ptr64" ??1CRegLock@NS_VirtualRegistry@@QEAA@XZ
0x18003E798: "RegQueryInfoKeyA" ??_C@_0BB@ECNEDBH@RegQueryInfoKeyA?$AA@
0x18003FFC0: "RegDeleteValueA: wrp key is miti" ??_C@_1EM@INFBDMCN@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x18003E568: " , ;" ??_C@_04CBJLODNH@?5?0?7?$DL?$AA@
0x18003FB88: "NS_WRPMitigation::APIHook__lwrit" ??_C@_0CC@EHOCINOA@NS_WRPMitigation?3?3APIHook__lwrit@
0x180032398: "Personal" ??_C@_1BC@EANCBBIH@?$AAP?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x18002CF40: "RuntimeVersion" ??_C@_1BO@JKONHIKC@?$AAR?$AAu?$AAn?$AAt?$AAi?$AAm?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002A080: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x1800332A8: "[DSPADCURSORS] Invalid number of" ??_C@_0CO@IAHKADHF@?$FLDSPADCURSORS?$FN?5Invalid?5number?5of@
0x180032E98: "HKLM\MSN" ??_C@_1BC@GEHMAHPG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x18003A5A0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1MO@FBELOHFH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180032EF8: "CLASS" ??_C@_1M@PBMEKDNI@?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?$AA@
0x18003D2B0: "%s\%s /Automation" ??_C@_1CE@GEBIDOOD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?5?$AA?1?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18004AD38: "unsigned __int64 NS_Win7RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win7RTMVersionLie@@3_KA
0x18002A290: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180021C30: "int __cdecl NS_Win7RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win7RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x18002A480: "__cdecl _imp_RtlUniform" __imp_RtlUniform
0x18002A4D8: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x180004588: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180039A00: "Microsoft Lync Application" ??_C@_1DG@DADECIHP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAL?$AAy?$AAn?$AAc?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003EF78: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DD@IKLMOJA@NS_VirtualRegistry2?3?3CVirtualReg@
0x180025FA0: "public: __cdecl ShimLib::CString::~CString(void) __ptr64" ??1CString@ShimLib@@QEAA@XZ
0x1800402E8: "APPCOMPAT_HEAP_TWEAKER_%d" ??_C@_1DE@LDOEAACD@?$AAA?$AAP?$AAP?$AAC?$AAO?$AAM?$AAP?$AAA?$AAT?$AA_?$AAH?$AAE?$AAA?$AAP?$AA_?$AAT?$AAW?$AAE?$AAA?$AAK?$AAE?$AAR?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x1800270AC: StringCchVPrintfA
0x18002ED40: "GetNLSVersion" ??_C@_0O@DJEDHNNA@GetNLSVersion?$AA@
0x18002EDF8: "WerpGetReportConsent" ??_C@_0BF@CFMHBEII@WerpGetReportConsent?$AA@
0x180032140: "System\CurrentControlSet\Control" ??_C@_1KA@HABJAIPK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18002F5C0: "*** Fault tolerant heap shim app" ??_C@_0GH@CLFKADBC@?$CK?$CK?$CK?5Fault?5tolerant?5heap?5shim?5app@
0x1800139D0: "public: __cdecl NS_VirtualRegistry::CRegLock::CRegLock(void) __ptr64" ??0CRegLock@NS_VirtualRegistry@@QEAA@XZ
0x18003D0A0: "HKCU\SOFTWARE\Classes\%s.Applica" ??_C@_1FI@CHHMMEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18002AEB0: "MoveFileExA" ??_C@_0M@MEBLMGKH@MoveFileExA?$AA@
0x18001ED30: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x18003D258: "HKCR\%s.Application.%s" ??_C@_1CO@CNOKLGBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x180026080: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(unsigned short const * __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@PEBG@Z
0x18002B010: "Layer Shims initialized." ??_C@_0BJ@HMDEPODC@Layer?5Shims?5initialized?4?$AA@
0x180037A94: "%20" ??_C@_03LBPOHIOC@?$CF20?$AA@
0x180010D90: "void __cdecl NS_VirtualRegistry::BuildWin7RTMLie(char const * __ptr64)" ?BuildWin7RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180039758: "Windows 8.1 Pro" ??_C@_1CA@EFHKAPBD@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA8?$AA?4?$AA1?$AA?5?$AAP?$AAr?$AAo?$AA?$AA@
0x18002A1B0: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x180037BF8: ".wav" ??_C@_19GGIIBPNM@?$AA?4?$AAw?$AAa?$AAv?$AA?$AA@
0x180035410: "Indeo� video 4.4 Compression F" ??_C@_1EM@OJPOOFFP@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA4?$AA?4?$AA4?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAF@
0x18004AD20: "unsigned __int64 NS_WRPMitigation::g_stShimId" ?g_stShimId@NS_WRPMitigation@@3_KA
0x18002F2D0: "RtlAllocateHeap" ??_C@_0BA@HKDEHBAO@RtlAllocateHeap?$AA@
0x180007710: "void __cdecl NS_FaultTolerantHeap::APIHook_RtlExitUserProcess(long)" ?APIHook_RtlExitUserProcess@NS_FaultTolerantHeap@@YAXJ@Z
0x180039778: "6.3" ??_C@_17GEHEJGF@?$AA6?$AA?4?$AA3?$AA?$AA@
0x18002EB10: "NotifyFn returned FALSE, fail lo" ??_C@_0CI@HFOCFJJ@NotifyFn?5returned?5FALSE?0?5fail?5lo@
0x180037410: "HKCR\Interface\{665A4447-D905-11" ??_C@_1IO@DGNEOJEO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180017A50: "struct tagHOOKAPI * __ptr64 __cdecl NS_VirtualRegistry::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VirtualRegistry@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002AFD0: "WRPMitigation" ??_C@_1BM@KOKPJGND@?$AAW?$AAR?$AAP?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002A298: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18003DFA0: "Exception occurred in OpenKeyW" ??_C@_0BP@NCGJIOKL@Exception?5occurred?5in?5OpenKeyW?$AA@
0x18003E6B0: "RegConnectRegistryW" ??_C@_0BE@GOLDJCHI@RegConnectRegistryW?$AA@
0x18003A970: "HKCR\Outlook.Application\CLSID" ??_C@_1DO@LEHGPEK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18004BEC8: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportAddDump)(void * __ptr64,void * __ptr64,void * __ptr64,enum _WER_DUMP_TYPE,struct _WER_EXCEPTION_INFORMATION * __ptr64,struct _WER_DUMP_CUSTOM_OPTIONS * __ptr64,unsigned long)" ?pfnWerReportAddDump@NS_FaultTolerantHeap@@3P6AJPEAX00W4_WER_DUMP_TYPE@@PEAU_WER_EXCEPTION_INFORMATION@@PEAU_WER_DUMP_CUSTOM_OPTIONS@@K@ZEA
0x18002F4D0: "Client successfully initialized " ??_C@_0FB@DEICGJIE@Client?5successfully?5initialized?5@
0x18003D030: "%s\%s\Office16" ??_C@_1BO@BNGMMGCD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA1?$AA6?$AA?$AA@
0x1800320F8: "6.0.2404.0" ??_C@_1BG@LKHNHALF@?$AA6?$AA?4?$AA0?$AA?4?$AA2?$AA4?$AA0?$AA4?$AA?4?$AA0?$AA?$AA@
0x18003FB40: "NS_WRPMitigation::APIHook__lcrea" ??_C@_0CC@NMEHDAFO@NS_WRPMitigation?3?3APIHook__lcrea@
0x1800391D0: "HKLM\Software\Microsoft\WAB\DLLP" ??_C@_1EI@FOOJNKAH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAA?$AAB?$AA?2?$AAD?$AAL?$AAL?$AAP@
0x18003E6C8: "RegQueryValueExA" ??_C@_0BB@HHEIPGME@RegQueryValueExA?$AA@
0x180031AA0: "FILEOPENBOGUSCTRLID" ??_C@_1CI@CPIFGNNG@?$AAF?$AAI?$AAL?$AAE?$AAO?$AAP?$AAE?$AAN?$AAB?$AAO?$AAG?$AAU?$AAS?$AAC?$AAT?$AAR?$AAL?$AAI?$AAD?$AA?$AA@
0x1800332D8: "NS_VirtualRegistry::BuildDSPadCu" ??_C@_0CG@KCADCOME@NS_VirtualRegistry?3?3BuildDSPadCu@
0x180009948: "unsigned __int64 __cdecl NS_FaultTolerantHeap::FthSizeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?FthSizeHeap@NS_FaultTolerantHeap@@YA_KPEAXK0@Z
0x1800324F0: "HKLM\SYSTEM\CurrentControlSet\En" ??_C@_1FA@LAMCKEOE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x18002A450: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18004BE10: "int NS_VirtualRegistry2::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VirtualRegistry2@@3HA
0x1800392B8: "Windows Vista (TM) Ultimate" ??_C@_1DI@KFIIBNKC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAV?$AAi?$AAs?$AAt?$AAa?$AA?5?$AA?$CI?$AAT?$AAM?$AA?$CJ?$AA?5?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AA?$AA@
0x180039A80: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1HM@POKMGFB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002B5C0: "DllPathEx" ??_C@_1BE@HHCAKGJC@?$AAD?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?$AA@
0x180033178: "NS_VirtualRegistry::BuildDSDevAc" ??_C@_0CE@HGHJBMMI@NS_VirtualRegistry?3?3BuildDSDevAc@
0x18003E598: "NS_VirtualRegistry::ParseCommand" ??_C@_0CG@PIGOFOIP@NS_VirtualRegistry?3?3ParseCommand@
0x1800385A0: "CLSID\{D2AF7A60-4C42-11CE-B27D-0" ??_C@_1FK@IIFBKFCJ@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAD?$AA2?$AAA?$AAF?$AA7?$AAA?$AA6?$AA0?$AA?9?$AA4?$AAC?$AA4?$AA2?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AA2?$AA7?$AAD?$AA?9?$AA0@
0x180010760: "void __cdecl NS_VirtualRegistry::BuildStarTrekArmada(char const * __ptr64)" ?BuildStarTrekArmada@NS_VirtualRegistry@@YAXPEBD@Z
0x18003DDD8: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DC@PAJMKGDE@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800232A0: "void * __ptr64 __cdecl NS_WRPMitigation::APIHook_CreateFileA(char const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?APIHook_CreateFileA@NS_WRPMitigation@@YAPEAXPEBDKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x18001BB08: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?EnumKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x180030AC8: "%d,%d" ??_C@_1M@JBEILCLK@?$AA?$CF?$AAd?$AA?0?$AA?$CF?$AAd?$AA?$AA@
0x18003AB90: "HKCR\Interface\{00063001-0000-00" ??_C@_1IO@EGCLHNKF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x18001DE24: "public: __cdecl NS_VirtualRegistry2::CRegLock::~CRegLock(void) __ptr64" ??1CRegLock@NS_VirtualRegistry2@@QEAA@XZ
0x1800494F8: "char * __ptr64 __ptr64 NS_Win81RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win81RTMVersionLie@@3PEADEA
0x18002E9A0: "VirtualRegistry" ??_C@_0BA@HNAGEFDN@VirtualRegistry?$AA@
0x18002A400: "__cdecl _imp__vscprintf" __imp__vscprintf
0x18002F688: "Client resetting connection skip" ??_C@_0DB@KJGNEBCG@Client?5resetting?5connection?5skip@
0x180019444: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryInfoA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180032610: "-%lu" ??_C@_19DEJHOMFE@?$AA?9?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x180021E00: "long __cdecl NS_Win7RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win7RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180039340: "HKLM\SOFTWARE\Microsoft\Internet" ??_C@_1HC@NAIPHLFA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt@
0x1800434A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18003E3C0: "Key not found!" ??_C@_0P@FPDECCMH@Key?5not?5found?$CB?$AA@
0x18003E080: " Trimming data beyond end of str" ??_C@_0DE@GHKPLKFO@?7Trimming?5data?5beyond?5end?5of?5str@
0x18002A288: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180034490: "{B4CA2970-DD2B-11D0-9DFA-00AA00A" ??_C@_1EO@JDFHGLKC@?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9?$AAD?$AAF?$AAA?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AAA@
0x180003321: "__cdecl amsg_exit" _amsg_exit
0x18003E7D8: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180035F48: "PlaybackPlatform" ??_C@_1CC@FOKHIAJB@?$AAP?$AAl?$AAa?$AAy?$AAb?$AAa?$AAc?$AAk?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x180034E70: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1BCC@PJPCJACA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18002A340: apphelp_NULL_THUNK_DATA
0x18002EFB0: "FTH WER: Failed to get report co" ??_C@_0CM@NBPJENLL@FTH?5WER?3?5Failed?5to?5get?5report?5co@
0x18002A330: "__cdecl _imp_SE_ShimDPF" __imp_SE_ShimDPF
0x180039430: "Windows 7 Ultimate" ??_C@_1CG@PICBAHLL@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA7?$AA?5?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AA?$AA@
0x18001A460: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::SetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDKPEBEK@Z
0x18003F880: "\Registry\Machine\Software\Wow64" ??_C@_1GA@MMKIAFPF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4@
0x180026D78: "protected: int __cdecl ShimLib::CString::ReplaceRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 (__cdecl*)(unsigned short const * __ptr64,unsigned short const * __ptr64)) __ptr64" ?ReplaceRoutine@CString@ShimLib@@IEAAHPEBG0P6APEAG00@Z@Z
0x18004BDA8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_pAPIHooks" ?g_pAPIHooks@NS_WRPRegDeleteKey@@3PEAUtagHOOKAPI@@EA
0x180040190: "NS_WRPRegDeleteKey::APIHook_RegD" ??_C@_0CK@JFCDHHGO@NS_WRPRegDeleteKey?3?3APIHook_RegD@
0x1800141F0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x180032A68: "DisableST" ??_C@_1BE@CKEHMMCO@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAT?$AA?$AA@
0x180039F50: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1JI@JIPPACIB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002F8B8: "Client failed to read 'permissio" ??_C@_0DL@GAFFOBMK@Client?5failed?5to?5read?5?8permissio@
0x180040448: "CheckTokenMembership failed: %d" ??_C@_0CA@EEHHKDJ@CheckTokenMembership?5failed?3?5?$CFd?$AA@
0x180037C08: ".wave" ??_C@_1M@KMHNOGFP@?$AA?4?$AAw?$AAa?$AAv?$AAe?$AA?$AA@
0x180030638: "VCACHE\Misses" ??_C@_1BM@KKNEBPMJ@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAM?$AAi?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x18000853C: "int __cdecl NS_FaultTolerantHeap::FthClientReportSQM(void)" ?FthClientReportSQM@NS_FaultTolerantHeap@@YAHXZ
0x18002ADC8: "RegOpenKeyExA" ??_C@_0O@DCOGKJGG@RegOpenKeyExA?$AA@
0x180010A30: "void __cdecl NS_VirtualRegistry::BuildVistaRTMLie(char const * __ptr64)" ?BuildVistaRTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800316F0: "NS_VirtualRegistry::BuildNetwork" ??_C@_0CG@OMLALMDL@NS_VirtualRegistry?3?3BuildNetwork@
0x18003ED28: "Failed to copy key path %d " ??_C@_0BM@IGLKBAG@Failed?5to?5copy?5key?5path?5?$CFd?6?$AA@
0x18001CC84: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetOpenKey(struct HKEY__ * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?GetOpenKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAVCVirtualKey@2@@Z
0x18003B9F0: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1KO@KAEPHDLC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180033008: "NS_VirtualRegistry::FindCDROMKey" ??_C@_0CB@PENLIFCM@NS_VirtualRegistry?3?3FindCDROMKey@
0x18003F9C0: "NS_WRPMitigation::MySfpIsFilePro" ??_C@_0CI@KMLLHCBL@NS_WRPMitigation?3?3MySfpIsFilePro@
0x180031E10: "HKLM\System\CurrentControlSet\Co" ??_C@_1IO@GPCMEPNA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180030978: "VMM\cpgSwapFileDefective" ??_C@_1DC@CALAOIKI@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAf?$AAe?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180013BA0: "long __cdecl NS_VirtualRegistry::APIHook_RegConnectRegistryW(unsigned short const * __ptr64,struct HKEY__ * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegConnectRegistryW@NS_VirtualRegistry@@YAJPEBGPEAUHKEY__@@PEAPEAU2@@Z
0x18003E930: "Found the virtual value now [%ws" ??_C@_0CD@HFIJFFGI@Found?5the?5virtual?5value?5now?5?$FL?$CFws@
0x180030EA0: "HKCR\wrifile\shell\open\command" ??_C@_1EA@CGGOPICC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x18004BE88: "struct _LIST_ENTRY NS_FaultTolerantHeap::FthDelayFreeQueue" ?FthDelayFreeQueue@NS_FaultTolerantHeap@@3U_LIST_ENTRY@@A
0x18002ADE8: "RegCreateKeyExA" ??_C@_0BA@NDHNNOGH@RegCreateKeyExA?$AA@
0x1800325C0: "0x%02hx%02hx%02hx%02hx%02hx%02hx" ??_C@_1EC@MPDKEHCN@?$AA0?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx@
0x180040290: "CreateWindowExA" ??_C@_0BA@NLHGOBLD@CreateWindowExA?$AA@
0x180030108: "NS_VirtualRegistry::VR_Hasbro" ??_C@_0BO@DICMJGJH@NS_VirtualRegistry?3?3VR_Hasbro?$AA@
0x180030B40: "System\CurrentControlSet\Control" ??_C@_1FI@DIBMNBHE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180033928: "5.2" ??_C@_17DAHECJOD@?$AA5?$AA?4?$AA2?$AA?$AA@
0x18002E8A0: Microsoft_Windows_Application_ExperienceKeywords
0x18001ADB8: StringCchCopyA
0x18003EC60: "Failed to get class path: %08x " ??_C@_0CA@HAGFCEFA@Failed?5to?5get?5class?5path?3?5?$CF08x?6?$AA@
0x18003F460: "NS_VistaSP1VersionLie::APIHook_R" ??_C@_0CN@PJBMMAGI@NS_VistaSP1VersionLie?3?3APIHook_R@
0x1800393D0: "6001" ??_C@_19LALIKOOC@?$AA6?$AA0?$AA0?$AA1?$AA?$AA@
0x18002A468: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x180036830: "Indeo� video 5.10 Decode Seque" ??_C@_1GE@IMJPALFL@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe@
0x18002AE90: "OpenFile" ??_C@_08JHCHADLJ@OpenFile?$AA@
0x18004B774: "int NS_VistaRTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaRTMVersionLie@@3HA
0x1800349F0: "HKLM\System\CurrentControlSet\Co" ??_C@_1KO@BMFCIEND@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x1800320D0: "IE 6 6.0.2404.0000" ??_C@_1CG@FADKAHBA@?$AAI?$AAE?$AA?5?$AA6?$AA?5?$AA6?$AA?4?$AA0?$AA?4?$AA2?$AA4?$AA0?$AA4?$AA?4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x180037B78: ".mov" ??_C@_19LBPJFDEP@?$AA?4?$AAm?$AAo?$AAv?$AA?$AA@
0x180020630: "int __cdecl NS_VistaRTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaRTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180020720: "int __cdecl NS_VistaRTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaRTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180035AE0: "HKCR\CLSID\{BD323432-CE94-11CE-8" ??_C@_1GE@BEPHDKHO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA2?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180030430: "HKDD\PerfStats\StartSrv" ??_C@_1DA@GJJDDOBP@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAr?$AAv?$AA?$AA@
0x18004AD40: "unsigned __int64 NS_VistaSP2VersionLie::g_stShimId" ?g_stShimId@NS_VistaSP2VersionLie@@3_KA
0x18000E0E0: "void __cdecl NS_VirtualRegistry::BuildHEDZ(char const * __ptr64)" ?BuildHEDZ@NS_VirtualRegistry@@YAXPEBD@Z
0x18003AF90: "HKCU\SOFTWARE\Classes\Interface\" ??_C@_1IO@DJDANFIE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x18002E500: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1KG@DBHBBIKC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18002EF00: "FTH WER: version: %ws " ??_C@_0BI@KGGGKAGM@FTH?5WER?3?5version?3?5?$CFws?5?6?$AA@
0x18001D7C4: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x18002EA80: "VerifyVersionInfoLite" ??_C@_0BG@JNJOCKPP@VerifyVersionInfoLite?$AA@
0x180030278: "PALFILE" ??_C@_1BA@EDOEFMAB@?$AAP?$AAA?$AAL?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x1800369A0: "Indeo� video 5.10 Decode Frame" ??_C@_1FO@GHACAAJJ@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAF?$AAr?$AAa?$AAm?$AAe@
0x18002AE68: "PrivCopyFileExW" ??_C@_0BA@LPCPJMBP@PrivCopyFileExW?$AA@
0x18002B2D0: GUID_NULL
0x18048CDB0: "char * __ptr64 __ptr64 NS_Win7RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win7RTMVersionLie@@3PEADEA
0x180032AF8: "NS_VirtualRegistry::VR_MSA2001" ??_C@_0BP@PIEOAHIK@NS_VirtualRegistry?3?3VR_MSA2001?$AA@
0x18003DD00: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DE@FOGMBCDL@NS_VirtualRegistry?3?3CVirtualRegi@
0x18000CE80: "void __cdecl NS_VirtualRegistry::BuildDX8(char const * __ptr64)" ?BuildDX8@NS_VirtualRegistry@@YAXPEBD@Z
0x180003940: "void __cdecl NS_FaultTolerantHeap::FthLogIssue(void * __ptr64,void * __ptr64,struct NS_FaultTolerantHeap::_FTH_BLOCK_PADDER * __ptr64,unsigned long)" ?FthLogIssue@NS_FaultTolerantHeap@@YAXPEAX0PEAU_FTH_BLOCK_PADDER@1@K@Z
0x18048C330: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthErrorHistory" ?FthErrorHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x18002A1F8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x18004AD48: "unsigned __int64 NS_VistaSP1VersionLie::g_stShimId" ?g_stShimId@NS_VistaSP1VersionLie@@3_KA
0x18004031C: "")" ??_C@_02HPDBCLII@?$CC?$CJ?$AA@
0x18003E698: "RegConnectRegistryA" ??_C@_0BE@HCCLCHKP@RegConnectRegistryA?$AA@
0x180031FA0: "Software\FirstByte\ProVoice\Spee" ??_C@_1FA@MKGOEMHI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAF?$AAi?$AAr?$AAs?$AAt?$AAB?$AAy?$AAt?$AAe?$AA?2?$AAP?$AAr?$AAo?$AAV?$AAo?$AAi?$AAc?$AAe?$AA?2?$AAS?$AAp?$AAe?$AAe@
0x18003E7B0: "RegQueryInfoKeyW" ??_C@_0BB@BILFPGMA@RegQueryInfoKeyW?$AA@
0x1800304F0: "KERNEL\Threads" ??_C@_1BO@ILPNJKGM@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?$AA@
0x18001E3D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKK@Z
0x180038F08: "HKLM\SYSTEM\WPA\MediaCenter" ??_C@_1DI@JEOJOPMD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAW?$AAP?$AAA?$AA?2?$AAM?$AAe?$AAd?$AAi?$AAa?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x180032040: "HKLM\Software\Microsoft\Internet" ??_C@_1FE@HBIFKMLK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt@
0x18002AC40: " ValueData: [%S] " ??_C@_0BE@MLGJKNHN@?7?7?7ValueData?3?5?$FL?$CFS?$FN?6?$AA@
0x180037BC8: ".pcast" ??_C@_1O@EDILHNGG@?$AA?4?$AAp?$AAc?$AAa?$AAs?$AAt?$AA?$AA@
0x18000A72C: "int __cdecl NS_FaultTolerantHeap::FthClientSendFinalAcknowledge(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthClientSendFinalAcknowledge@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x18002F328: "RtlDestroyHeap" ??_C@_0P@HGJJNGEH@RtlDestroyHeap?$AA@
0x180021EE0: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win7RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win7RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002259C: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win8RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win8RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002A440: "__cdecl _imp_strcmp" __imp_strcmp
0x18002577C: "int __cdecl NS_WRPRegDeleteKey::MySfpIsKeyProtected(struct HKEY__ * __ptr64)" ?MySfpIsKeyProtected@NS_WRPRegDeleteKey@@YAHPEAUHKEY__@@@Z
0x18000B570: "void __cdecl NS_VirtualRegistry::BuildCLRVersion46Lie(char const * __ptr64)" ?BuildCLRVersion46Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A1E8: "__cdecl _imp_IsNLSDefinedString" __imp_IsNLSDefinedString
0x180040060: "RLCHECK: error getting path or p" ??_C@_0DG@BCAKKGJC@RLCHECK?3?5error?5getting?5path?5or?5p@
0x18003F170: "Software\Wow6432Node\Microsoft\W" ??_C@_1GM@DHHGHNKB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
0x18002F730: "Client failed to open the FTH pi" ??_C@_0DC@NAJAMOGO@Client?5failed?5to?5open?5the?5FTH?5pi@
0x18003B490: "HKCR\PowerPoint.Application\CLSI" ??_C@_1EE@KNBDFIEH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI@
0x180032110: "Plus! VersionNumber" ??_C@_1CI@CGJEEKIM@?$AAP?$AAl?$AAu?$AAs?$AA?$CB?$AA?5?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180030940: "VMM\cpgSwap" ??_C@_1BI@HMEDDFNP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AA?$AA@
0x180028028: "const ShimLib::PathTreeNodeVisitor::`vftable'" ??_7PathTreeNodeVisitor@ShimLib@@6B@
0x1800377B0: "HKCR\TypeLib\{665A4446-D905-11D0" ??_C@_1HA@PBNLNAMK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x18002EAB0: "d3d9d.dll" ??_C@_1BE@MAPHHBEH@?$AAd?$AA3?$AAd?$AA9?$AAd?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18002A3E0: "__cdecl _imp_towlower" __imp_towlower
0x180032B78: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x180025214: "struct tagHOOKAPI * __ptr64 __cdecl NS_WRPRegDeleteKey::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WRPRegDeleteKey@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800148A0: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x18002FA88: "NS_FaultTolerantHeap::FthpClient" ??_C@_0DB@PDDNHNAA@NS_FaultTolerantHeap?3?3FthpClient@
0x180016A58: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEADPEAK@Z
0x180034368: "TrueMotion20 initialization fail" ??_C@_0CD@JNNNHCIF@TrueMotion20?5initialization?5fail@
0x18003F350: "Service Pack %d" ??_C@_0BA@NMMOAGHL@Service?5Pack?5?$CFd?$AA@
0x180037AE8: ".cdda" ??_C@_1M@LKEPNGO@?$AA?4?$AAc?$AAd?$AAd?$AAa?$AA?$AA@
0x180030CA0: "HKCR\rtffile\shell\open\command" ??_C@_1EA@FOFNGCHI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x180033030: "System\CurrentControlSet\Enum" ??_C@_1DM@BNJPOICG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x18002AB90: "NS_WRPMitigation::InitializeHook" ??_C@_0CH@HOMEMNFP@NS_WRPMitigation?3?3InitializeHook@
0x1800277C4: "public: long __cdecl ShimLib::PathTree::Search(class ShimLib::CString const & __ptr64,class ShimLib::PathTreeNode * __ptr64,int,int & __ptr64,class ShimLib::PathTreeNode * __ptr64 & __ptr64) __ptr64" ?Search@PathTree@ShimLib@@QEAAJAEBVCString@2@PEAVPathTreeNode@2@HAEAHAEAPEAV42@@Z
0x180033600: "[DSDISABLEDEVICE] Unknown device" ??_C@_0CE@LJBMADNC@?$FLDSDISABLEDEVICE?$FN?5Unknown?5device@
0x18002A098: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180016B28: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEAGPEAK@Z
0x180026FAC: "protected: static int __cdecl ShimLib::CString::SafeStrlen(unsigned short const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBG@Z
0x18002A1D0: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x1800306A8: "VFAT\BWritesSec" ??_C@_1CA@JAMCPDGB@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAB?$AAW?$AAr?$AAi?$AAt?$AAe?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x1800305E8: "VCACHE\LRUBuffers" ??_C@_1CE@BNPGGCLE@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAL?$AAR?$AAU?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x180014990: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x180033148: "[DSDEVACCEL] Invalid Acceleratio" ??_C@_0CL@BIOLGGOO@?$FLDSDEVACCEL?$FN?5Invalid?5Acceleratio@
0x18004B140: "protected: static int * ShimLib::CString::_afxInitData" ?_afxInitData@CString@ShimLib@@1PAHA
0x18002B810: "HKLM\SOFTWARE\Classes\CLSID\%s\L" ??_C@_1FK@GDOHHDBE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL@
0x18002A070: "__cdecl _imp_GetTempFileNameA" __imp_GetTempFileNameA
0x18002AF88: "ShimLib::GetHookAPIs" ??_C@_0BF@NHNKNNIM@ShimLib?3?3GetHookAPIs?$AA@
0x18002A2C8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18048CDC8: "char * __ptr64 __ptr64 NS_Win8RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win8RTMVersionLie@@3PEADEA
0x180037B18: ".itpc" ??_C@_1M@FCHDNEIK@?$AA?4?$AAi?$AAt?$AAp?$AAc?$AA?$AA@
0x180049510: "char * __ptr64 __ptr64 NS_VistaSP2VersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaSP2VersionLie@@3PEADEA
0x18003DC48: "NS_VirtualRegistry::CreateNewEnu" ??_C@_0CH@GMHOPBAD@NS_VirtualRegistry?3?3CreateNewEnu@
0x18002CEE0: "Microsoft.Office.Interop.Excel.A" ??_C@_1GA@NOFDBHLJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA@
0x1800341D8: "ThreadingModel" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x18002DEF8: "x64" ??_C@_17EIACCBPF@?$AAx?$AA6?$AA4?$AA?$AA@
0x1800302F8: "HKLM\Enum" ??_C@_1BE@HGGMGJAM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x18048CB40: "unsigned short * NS_WRPRegDeleteKey::g_szExePath" ?g_szExePath@NS_WRPRegDeleteKey@@3PAGA
0x18004BEC0: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportCloseHandle)(void * __ptr64)" ?pfnWerReportCloseHandle@NS_FaultTolerantHeap@@3P6AJPEAX@ZEA
0x180007130: "struct tagHOOKAPI * __ptr64 __cdecl NS_EmulateSortingWindows61::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_EmulateSortingWindows61@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180024090: "int __cdecl NS_WRPMitigation::APIHook__lopen(char const * __ptr64,int)" ?APIHook__lopen@NS_WRPMitigation@@YAHPEBDH@Z
0x1800396D0: "HKCR\CLSID\{031E4825-7B94-4dc3-B" ??_C@_1GE@KJFINFCC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA3?$AA1?$AAE?$AA4?$AA8?$AA2?$AA5?$AA?9?$AA7?$AAB?$AA9?$AA4?$AA?9?$AA4?$AAd?$AAc?$AA3?$AA?9?$AAB@
0x1800307B0: "VMM\cPageOuts" ??_C@_1BM@HCLDLLNP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAO?$AAu?$AAt?$AAs?$AA?$AA@
0x18001EBE0: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x18002742C: "public: void __cdecl ShimLib::CStringToken::Initialize(class ShimLib::CString const & __ptr64,class ShimLib::CString const & __ptr64) __ptr64" ?Initialize@CStringToken@ShimLib@@QEAAXAEBVCString@2@0@Z
0x180025930: "struct HWND__ * __ptr64 __cdecl NS_WsExCompositedShim::APIHook_CreateWindowExA(unsigned long,char const * __ptr64,char const * __ptr64,unsigned long,int,int,int,int,struct HWND__ * __ptr64,struct HMENU__ * __ptr64,struct HINSTANCE__ * __ptr64,void * __ptr64)" ?APIHook_CreateWindowExA@NS_WsExCompositedShim@@YAPEAUHWND__@@KPEBD0KHHHHPEAU2@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
0x18003EC80: "Class path:[%ws] " ??_C@_0BC@OICOBNKM@Class?5path?3?$FL?$CFws?$FN?6?$AA@
0x18001EA90: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x1800326F0: "\Components\359E92CC2CB71D119A12" ??_C@_1FK@OIJDPHBB@?$AA?2?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AAs?$AA?2?$AA3?$AA5?$AA9?$AAE?$AA9?$AA2?$AAC?$AAC?$AA2?$AAC?$AAB?$AA7?$AA1?$AAD?$AA1?$AA1?$AA9?$AAA?$AA1?$AA2@
0x18002CA40: "Microsoft Outlook 16.0 Object Li" ??_C@_1EM@EJCFHJHB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5?$AA1?$AA6?$AA?4?$AA0?$AA?5?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAL?$AAi@
0x18000E480: "void __cdecl NS_VirtualRegistry::BuildIE11NoRevisionLie(char const * __ptr64)" ?BuildIE11NoRevisionLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180029FD8: "__cdecl _imp_CompareStringEx" __imp_CompareStringEx
0x180031D80: "Software\Microsoft\Windows NT\Cu" ??_C@_1GO@BCADEPEJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18002A3A8: "__cdecl _imp__scwprintf" __imp__scwprintf
0x180027570: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreeNodeVisitor::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNodeVisitor@ShimLib@@UEAAPEAXI@Z
0x180032CE8: "HKLM\Software\nowirc" ??_C@_1CK@EPFMFCAA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAi?$AAr?$AAc?$AA?$AA@
0x18002FCD0: "HKLM\Software\Microsoft\Windows\" ??_C@_1II@JNJOOBAI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002A1A8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18002F3C8: "FTH: %s(%u): " ??_C@_0O@PMABMPNA@FTH?3?5?$CFs?$CI?$CFu?$CJ?3?5?$AA@
0x18003AEF0: "HKLM\SOFTWARE\Classes\Interface\" ??_C@_1JO@NGLGJFEA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180038A70: "Interface\{00020400-0000-0000-C0" ??_C@_1IO@CBOJIIJ@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180030C60: "%s /pt "%%1" "%%2" "%%3" "%%4"" ??_C@_1DO@KPOMOGPD@?$AA?$CF?$AAs?$AA?5?$AA?1?$AAp?$AAt?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA2?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA3?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA4?$AA?$CC?$AA?$AA@
0x18002D1C0: "Microsoft.Office.Interop.Word, V" ??_C@_1ME@NGPBFEPG@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?0?$AA?5?$AAV@
0x18003FF70: "RegSetValueExA: wrp key is mitig" ??_C@_1EK@FKAJCNF@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg@
0x180034C30: "Indeo� video 4.4 Decompression" ??_C@_1FA@KPDHLGPO@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA4?$AA?4?$AA4?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn@
0x180036FE0: "HKCR\CLSID\{C1C0FE00-F3C2-11D0-9" ??_C@_1GE@KEJIIEHJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA1?$AAC?$AA0?$AAF?$AAE?$AA0?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18003D310: "HKCR\CLSID\%s\LocalServer32" ??_C@_1DI@CGEMHGGK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18002B6D0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1HC@FOCNJCIO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180031BF0: "4.08.00.0902" ??_C@_1BK@MGODAHLB@?$AA4?$AA?4?$AA0?$AA8?$AA?4?$AA0?$AA0?$AA?4?$AA0?$AA9?$AA0?$AA2?$AA?$AA@
0x18002FC90: "4.10.2222" ??_C@_1BE@LNEONGBF@?$AA4?$AA?4?$AA1?$AA0?$AA?4?$AA2?$AA2?$AA2?$AA2?$AA?$AA@
0x180036F50: "HKCR\CLSID\{84725EA1-2FBC-11D1-B" ??_C@_1IC@JNJFBDAB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA4?$AA7?$AA2?$AA5?$AAE?$AAA?$AA1?$AA?9?$AA2?$AAF?$AAB?$AAC?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAB@
0x18003ECD0: "Failed to add entry [%ws] %d " ??_C@_0BO@JBJMLKEM@Failed?5to?5add?5entry?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x18003C1B0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1KM@ILBHEFOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180031B20: "DevicePath" ??_C@_1BG@GNKAHCPC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180034650: "HKCR\CLSID\{B4CA2971-DD2B-11D0-9" ??_C@_1GE@ELHFBAGF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA1?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180013DA0: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x18000E000: "void __cdecl NS_VirtualRegistry::BuildFlashUpdaterLie(char const * __ptr64)" ?BuildFlashUpdaterLie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800230C0: "int __cdecl NS_WRPMitigation::APIHook_CopyFileA(char const * __ptr64,char const * __ptr64,int)" ?APIHook_CopyFileA@NS_WRPMitigation@@YAHPEBD0H@Z
0x18002A488: "__cdecl _imp_RtlValidateHeap" __imp_RtlValidateHeap
0x18004B6E0: "__cdecl _native_startup_lock" __native_startup_lock
0x180026D2C: "public: void __cdecl ShimLib::CString::ReleaseBuffer(int) __ptr64" ?ReleaseBuffer@CString@ShimLib@@QEAAXH@Z
0x18003DBB8: "Adding Value %ls\%ls = %ls" ??_C@_0BL@INBOGBKK@Adding?5Value?5?$CFls?2?$CFls?5?$DN?5?$CFls?$AA@
0x180040378: "Failed to get manager mutex name" ??_C@_0CC@DLBLOBMH@Failed?5to?5get?5manager?5mutex?5name@
0x1800084A0: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlValidateHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlValidateHeap@NS_FaultTolerantHeap@@YAEPEAXK0@Z
0x18048CDD0: "unsigned short * __ptr64 __ptr64 NS_Win8RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win8RTMVersionLie@@3PEAGEA
0x18000966C: "int __cdecl NS_FaultTolerantHeap::FthInitializeSharedEntryPoints(void)" ?FthInitializeSharedEntryPoints@NS_FaultTolerantHeap@@YAHXZ
0x180003508: "int __cdecl NS_FaultTolerantHeap::FthDelayFreeQueueInsert(void * __ptr64,unsigned __int64,int)" ?FthDelayFreeQueueInsert@NS_FaultTolerantHeap@@YAHPEAX_KH@Z
0x180004544: DllMain
0x1800333B8: "[DSCACHEPOSITIONS] Unabled to ad" ??_C@_0DD@IGIFHL@?$FLDSCACHEPOSITIONS?$FN?5Unabled?5to?5ad@
0x180038EE8: "Fix Description" ??_C@_1CA@ICMLPNCA@?$AAF?$AAi?$AAx?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800335A0: "HKCU\Software\Microsoft\CTF\Lang" ??_C@_1EI@JAFEMCEB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAT?$AAF?$AA?2?$AAL?$AAa?$AAn?$AAg@
0x18003E0B8: "%08lx=QueryValueW()" ??_C@_0BE@JENDPNCD@?$CF08lx?$DNQueryValueW?$CI?$CJ?$AA@
0x180008908: "int __cdecl NS_FaultTolerantHeap::FthCreateWerReport(void)" ?FthCreateWerReport@NS_FaultTolerantHeap@@YAHXZ
0x180033E30: "NS_VirtualRegistry::ExpandCodecS" ??_C@_0CG@BBILKPHB@NS_VirtualRegistry?3?3ExpandCodecS@
0x18002AC20: "NS_WRPMitigation::LogSfpKeyW" ??_C@_0BN@BPCGILMN@NS_WRPMitigation?3?3LogSfpKeyW?$AA@
0x18002B498: "Failed to read message from the " ??_C@_0CH@BKCAEFIN@Failed?5to?5read?5message?5from?5the?5@
0x18003AA10: "HKCU\SOFTWARE\Classes\Outlook.Ap" ??_C@_1GA@HACFEKLP@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp@
0x18000980C: "void __cdecl NS_FaultTolerantHeap::FthReportCriticalFailure(long)" ?FthReportCriticalFailure@NS_FaultTolerantHeap@@YAXJ@Z
0x180019688: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryInfoW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x18003AD90: "HKLM\SOFTWARE\Classes\Interface\" ??_C@_1KM@LCBGFHCK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x1800364E0: "Indeo� video 5.10 Encode Param" ??_C@_1GI@DGBINLID@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm@
0x18003F080: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DG@MEKLMGPC@NS_VirtualRegistry2?3?3CVirtualReg@
0x180030A70: "HKCC\Display\Settings" ??_C@_1CM@LFBKNMDG@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18002F0D0: "FTH WER: report successfully sub" ??_C@_0DH@KBLHJFHJ@FTH?5WER?3?5report?5successfully?5sub@
0x180006260: "struct tagHOOKAPI * __ptr64 __cdecl NS_EmulateSortingVista::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_EmulateSortingVista@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180006850: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int)" ?APIHook_CompareStringW@NS_EmulateSortingWindows61@@YAHKKPEBGH0H@Z
0x180004674: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180013F70: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKK@Z
0x18002A370: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180031210: "HKLM\Software\Classes\rtffile\sh" ??_C@_1GI@DDNFLMFE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x18002FB28: "NS_FaultTolerantHeap::FthpClient" ??_C@_0DF@DPJLAEHO@NS_FaultTolerantHeap?3?3FthpClient@
0x18003D740: "DSAPPHACKID_RETURNWRITEPOS" ??_C@_1DG@BEOBPILH@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAR?$AAE?$AAT?$AAU?$AAR?$AAN?$AAW?$AAR?$AAI?$AAT?$AAE?$AAP?$AAO?$AAS?$AA?$AA@
0x18002A380: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18003D2A0: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18002ADB8: "RegOpenKeyExW" ??_C@_0O@COHOBMLB@RegOpenKeyExW?$AA@
0x18003F300: "NS_VistaRTMVersionLie::APIHook_R" ??_C@_0CN@DHPFKGPH@NS_VistaRTMVersionLie?3?3APIHook_R@
0x180033120: "STANDARD" ??_C@_1BC@NIJGDEBN@?$AAS?$AAT?$AAA?$AAN?$AAD?$AAA?$AAR?$AAD?$AA?$AA@
0x18002A4A0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800371B0: "Indeo� video 5.10 About Decode" ??_C@_1GA@LCMJIDAB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe@
0x180033B30: "%SystemRoot%\system32\inetcomm.d" ??_C@_1EG@PAOEGBIE@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAn?$AAe?$AAt?$AAc?$AAo?$AAm?$AAm?$AA?4?$AAd@
0x18000A2EC: McTemplateU0ssss
0x18002ADD8: "RegCreateKeyExW" ??_C@_0BA@MPOFGLLA@RegCreateKeyExW?$AA@
0x18002BA10: "\Registry\HKEY_PERFORMANCE_DATA" ??_C@_1EA@GFDGDNJD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18003DB50: "NS_VirtualRegistry::VIRTUALKEY::" ??_C@_0CH@IEOEKDIM@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x1800320B0: "5.50.4522.1800" ??_C@_1BO@HMJODIOD@?$AA5?$AA?4?$AA5?$AA0?$AA?4?$AA4?$AA5?$AA2?$AA2?$AA?4?$AA1?$AA8?$AA0?$AA0?$AA?$AA@
0x180032290: "HKLM\Software\Adobe\PageMaker65" ??_C@_1EA@KDINMIEK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAM?$AAa?$AAk?$AAe?$AAr?$AA6?$AA5?$AA?$AA@
0x18003D918: "DirectSound Apphack "%S" enabled" ??_C@_0DD@MGNJOMIH@DirectSound?5Apphack?5?$CC?$CFS?$CC?5enabled@
0x18003E0E0: " Value=%S" ??_C@_0N@GEHGNFJA@?5?5?5?5Value?$DN?$CFS?$AA@
0x1800434B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180027128: "int __cdecl ShimLib::SearchGroupForSID(unsigned long,int * __ptr64)" ?SearchGroupForSID@ShimLib@@YAHKPEAH@Z
0x180029FF0: "__cdecl _imp_LCIDToLocaleName" __imp_LCIDToLocaleName
0x18002F990: "Client successfully connected to" ??_C@_0ED@GMGLCNEC@Client?5successfully?5connected?5to@
0x18002EE48: "WerReportAddDump" ??_C@_0BB@ELHCJPEM@WerReportAddDump?$AA@
0x18002A240: KERNEL32_NULL_THUNK_DATA
0x180031908: "CurrentVersion" ??_C@_1BO@DIAJAHNB@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180039980: "SOFTWARE\CLASSES\PACKAGEDCOM\PAC" ??_C@_1EK@HJCNMIHE@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA?2?$AAP?$AAA?$AAC?$AAK?$AAA?$AAG?$AAE?$AAD?$AAC?$AAO?$AAM?$AA?2?$AAP?$AAA?$AAC@
0x18002A0E0: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18001BCC8: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?EnumKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x1800348E0: "HKLM\Software\Microsoft\Windows " ??_C@_1HO@FHPDAHHO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x180020810: "long __cdecl NS_VistaRTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaRTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180030840: "VMM\cpgDiskcacheMid" ??_C@_1CI@JIEOFHFK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAi?$AAd?$AA?$AA@
0x18003FEB8: " ValueData: [%s] " ??_C@_0BE@GLFLACED@?7?7?7ValueData?3?5?$FL?$CFs?$FN?6?$AA@
0x18001CD4C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetRootKeyPath(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetRootKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAG@Z
0x18002A4A8: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x1800346C0: "Indeo� audio software Property" ??_C@_1EM@KIJFALKK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy@
0x180034710: "HKCR\CLSID\{B4CA2971-DD2B-11D0-9" ??_C@_1IC@OOIMDDFD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA1?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18000E040: "void __cdecl NS_VirtualRegistry::BuildFutureCop(char const * __ptr64)" ?BuildFutureCop@NS_VirtualRegistry@@YAXPEBD@Z
0x1800394A0: "HKLM\SOFTWARE\Microsoft\NET Fram" ??_C@_1HE@JEGDNBKC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAN?$AAE?$AAT?$AA?5?$AAF?$AAr?$AAa?$AAm@
0x18002FC00: "VerifyVersionInfoA" ??_C@_0BD@KPMCBPKM@VerifyVersionInfoA?$AA@
0x18002A208: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180032CB8: "HKCU\Software\nowcom" ??_C@_1CK@LBNDPMHG@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAc?$AAo?$AAm?$AA?$AA@
0x18000F9F0: "void __cdecl NS_VirtualRegistry::BuildNowroBlue(char const * __ptr64)" ?BuildNowroBlue@NS_VirtualRegistry@@YAXPEBD@Z
0x18003D2D8: "HKCR\CLSID\%s\LocalServer" ??_C@_1DE@CMGEADCK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x18004B7A0: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthSpecialHeapsLock" ?FthSpecialHeapsLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x18002A2D8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18003E418: "[DeleteKeyW] Deleting subkey %S " ??_C@_0CM@JFOLEANM@?$FLDeleteKeyW?$FN?5Deleting?5subkey?5?$CFS?5@
0x180035BA0: "HKCR\CLSID\{BD323432-CE94-11CE-8" ??_C@_1IC@GJJBLLBP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA2?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18004ACC0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004564: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18003F1EC: "HKCR" ??_C@_04OHBKMIBJ@HKCR?$AA@
0x1800393E0: "Microsoft Windows Server 2008" ??_C@_1DM@BNGCBEDI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA8?$AA?$AA@
0x180024980: "void __cdecl NS_WRPMitigation::LogSfpValueA(char const * __ptr64,char const * __ptr64,unsigned long)" ?LogSfpValueA@NS_WRPMitigation@@YAXPEBD0K@Z
0x18003CDE0: "SOFTWARE\Wow6432Node\Microsoft\O" ??_C@_1FG@NGIEEEOO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO@
0x180037880: "HKCR\TypeLib\{665A4446-D905-11D0" ??_C@_1IA@HONKNAGP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x18003DDA0: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DE@PKHABEEB@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800208F0: "int __cdecl NS_Win81RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win81RTMVersionLie@@YAHPEBGZZ
0x180026F74: "protected: static int __cdecl ShimLib::CString::SafeStrlen(char const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBD@Z
0x18002D0F0: "mapi32.dll" ??_C@_1BG@KEKKCBNN@?$AAm?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003DA30: "[TrimSlashW] Bypass \Registry\Us" ??_C@_0CD@EAGDDMAN@?$FLTrimSlashW?$FN?5Bypass?5?2Registry?2Us@
0x180032650: "NS_VirtualRegistry::BuildMSI" ??_C@_0BN@LNEHOAGM@NS_VirtualRegistry?3?3BuildMSI?$AA@
0x180033138: "FULL" ??_C@_19DLEPDAFO@?$AAF?$AAU?$AAL?$AAL?$AA?$AA@
0x180030F80: "HKLM\Software\Classes\Applicatio" ??_C@_1IE@NKEJDMBM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x18003FE78: "Default" ??_C@_07MCAEODGB@Default?$AA@
0x180049518: "char * __ptr64 __ptr64 NS_VistaSP1VersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaSP1VersionLie@@3PEADEA
0x180015B24: "public: void __cdecl NS_VirtualRegistry::OPENKEY::BuildEnumList(void) __ptr64" ?BuildEnumList@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x180033C10: "HKLM\Software\Microsoft\Outlook " ??_C@_1GK@OFBOFNIN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x18003FE98: "NS_WRPMitigation::LogSfpValueA" ??_C@_0BP@JMODFLFN@NS_WRPMitigation?3?3LogSfpValueA?$AA@
0x18002EED8: "%u.%u.%u.%u" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x18002C898: "DllPath" ??_C@_1BA@KJAPIHAM@?$AAD?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800367C0: "HKCR\CLSID\{665A4443-D905-11D0-A" ??_C@_1GE@MLMEOFLG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA3?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180034B48: "Indeo3 initialization failed" ??_C@_0BN@KHCFNDBA@Indeo3?5initialization?5failed?$AA@
0x18002F258: "ApiName" ??_C@_07IAKFNNID@ApiName?$AA@
0x180030748: "VMM\cInstanceFaults" ??_C@_1CI@HFPBHNIK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAF?$AAa?$AAu?$AAl?$AAt?$AAs?$AA?$AA@
0x18002E2B0: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1JE@OJMCJKGM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180036EF0: "Indeo� video 5.10 About RTE Pr" ??_C@_1FI@CLKHHHBK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAR?$AAT?$AAE?$AA?5?$AAP?$AAr@
0x18004ACB8: "protected: static unsigned short const * __ptr64 const __ptr64 ShimLib::CString::_afxPchNil" ?_afxPchNil@CString@ShimLib@@1PEBGEB
0x180034390: "NS_VirtualRegistry::BuildTrueMot" ??_C@_0CG@JCDPKKIL@NS_VirtualRegistry?3?3BuildTrueMot@
0x180026C40: "public: void __cdecl ShimLib::CString::Mid(int,int,class ShimLib::CString & __ptr64)const __ptr64" ?Mid@CString@ShimLib@@QEBAXHHAEAV12@@Z
0x18003F550: "NS_VistaSP2VersionLie::APIHook_R" ??_C@_0CN@HCMPPOHB@NS_VistaSP2VersionLie?3?3APIHook_R@
0x18003B560: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1JI@MJKILEGC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18000E1B0: "void __cdecl NS_VirtualRegistry::BuildHasbro(char const * __ptr64)" ?BuildHasbro@NS_VirtualRegistry@@YAXPEBD@Z
0x1800434E0: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180014080: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBG@Z
0x180049530: "char * __ptr64 __ptr64 NS_VirtualRegistry::g_szCommandLine" ?g_szCommandLine@NS_VirtualRegistry@@3PEADEA
0x18003E758: "RegEnumKeyA" ??_C@_0M@IMBFIMEL@RegEnumKeyA?$AA@
0x180033070: "[AirlineTycoon] Cannot open ENUM" ??_C@_0CG@KBPKBOBI@?$FLAirlineTycoon?$FN?5Cannot?5open?5ENUM@
0x18003E188: "%08lx=EnumValueW(dwIndex=%d)" ??_C@_0BN@DHMJBBOJ@?$CF08lx?$DNEnumValueW?$CIdwIndex?$DN?$CFd?$CJ?$AA@
0x18004AD10: "unsigned __int64 NS_WsExCompositedShim::g_stShimId" ?g_stShimId@NS_WsExCompositedShim@@3_KA
0x18002A058: "__cdecl _imp_CreateActCtxW" __imp_CreateActCtxW
0x180019A60: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDPEAKPEAE2@Z
0x18002A2C0: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x180022F94: "void __cdecl NS_Win81RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win81RTMVersionLie@@YAXXZ
0x18003F0C0: "System\CurrentControlSet\Control" ??_C@_1HK@MKBHAIFE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18002A170: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18002ED50: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x180037A00: "%windir%\system32" ??_C@_1CE@BIBGDKEK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x180035160: "HKCR\CLSID\{87CA6F02-49E4-11CF-A" ??_C@_1GE@GALCIJED@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA2?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18048CD50: "unsigned long NS_FaultTolerantHeap::FthFreeTrackerIndex" ?FthFreeTrackerIndex@NS_FaultTolerantHeap@@3KA
0x180031BE0: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180043508: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18003EF58: "Failed to get key path %d " ??_C@_0BL@GGIBELLI@Failed?5to?5get?5key?5path?5?$CFd?6?$AA@
0x18002B750: "VFS\ProgramFilesCommonX64\SYSTEM" ??_C@_1FK@PDGBHLFO@?$AAV?$AAF?$AAS?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAX?$AA6?$AA4?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM@
0x180024A24: "void __cdecl NS_WRPMitigation::LogSfpValueW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?LogSfpValueW@NS_WRPMitigation@@YAXPEBG0K@Z
0x180033EA8: "NS_VirtualRegistry::AddCodecValu" ??_C@_0CD@DHJKBHFL@NS_VirtualRegistry?3?3AddCodecValu@
0x180039840: "HKLM\SOFTWARE\Wow6432Node\Micros" ??_C@_1II@NKKHGDHO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x18004B738: "int NS_WRPMitigation::g_fManifestCheck" ?g_fManifestCheck@NS_WRPMitigation@@3HA
0x18002AE78: "_lwrite" ??_C@_07MCKEIOFM@_lwrite?$AA@
0x1800336F0: "HKLM\SOFTWARE\Microsoft\Windows\" ??_C@_1GO@DBMJPALL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002BB00: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18002FE50: "HKLM\System\CurrentControlSet\Se" ??_C@_1FK@LGPHAGIB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x180022940: "unsigned long __cdecl NS_Win81RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win81RTMVersionLie@@YAKXZ
0x18002A150: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18004BE48: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DXMaximizedWindowedMode::g_pAPIHooks" ?g_pAPIHooks@NS_DXMaximizedWindowedMode@@3PEAUtagHOOKAPI@@EA
0x18002A188: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18003F5E0: "NS_Win7RTMVersionLie::APIHook_Ge" ??_C@_0CM@MMHKEIJN@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x18002EAC4: "Enable" ??_C@_06CKGENIKG@Enable?$AA@
0x180027C24: "public: long __cdecl ShimLib::PathTree::Traverse(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,int,class ShimLib::PathTreeNodeVisitor * __ptr64,class ShimLib::PathTreeNodeVisitor * __ptr64) __ptr64" ?Traverse@PathTree@ShimLib@@QEAAJPEAVPathTreeNode@2@0HPEAVPathTreeNodeVisitor@2@1@Z
0x1800102E0: "void __cdecl NS_VirtualRegistry::BuildProductTypeServerNT(char const * __ptr64)" ?BuildProductTypeServerNT@NS_VirtualRegistry@@YAXPEBD@Z
0x18002CFA8: "Excel.Application" ??_C@_1CE@MGEEJEJK@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180038FB0: "%ProgramFiles%\Windows Mail" ??_C@_1DI@PFAMGBCG@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAM?$AAa?$AAi?$AAl?$AA?$AA@
0x18003AD00: "HKLM\SOFTWARE\Classes\Interface\" ??_C@_1IO@PIPMCOJN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180001FA0: "int __cdecl ShimLib::NotifyShimsEx(int,unsigned __int64)" ?NotifyShimsEx@ShimLib@@YAHH_K@Z
0x18048CDF4: "short NS_Win81RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win81RTMVersionLie@@3FA
0x18000E440: "void __cdecl NS_VirtualRegistry::BuildIBMDirector(char const * __ptr64)" ?BuildIBMDirector@NS_VirtualRegistry@@YAXPEBD@Z
0x1800200D4: "int __cdecl NS_VirtualRegistry2::ParseCommandLineA(char const * __ptr64)" ?ParseCommandLineA@NS_VirtualRegistry2@@YAHPEBD@Z
0x180033230: "[DSDEVACCEL] Unknown device %s" ??_C@_0BP@HKHDIMI@?$FLDSDEVACCEL?$FN?5Unknown?5device?5?$CFs?$AA@
0x180010FE0: "void __cdecl NS_VirtualRegistry::BuildWin9x(char const * __ptr64)" ?BuildWin9x@NS_VirtualRegistry@@YAXPEBD@Z
0x1800113F0: "void __cdecl NS_VirtualRegistry::BuildWinXP(char const * __ptr64)" ?BuildWinXP@NS_VirtualRegistry@@YAXPEBD@Z
0x18003C710: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1KO@OEPAMGIJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18003F700: "NS_Win8RTMVersionLie::APIHook_Ge" ??_C@_0CJ@OFJFHMFB@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x18002F650: "NS_FaultTolerantHeap::FthClientA" ??_C@_0DB@KPNMGDOG@NS_FaultTolerantHeap?3?3FthClientA@
0x18003CBD0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1KM@OODODCEN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003E8A0: "Combined key value [%ws] " ??_C@_0BK@OOJMGKOH@Combined?5key?5value?5?$FL?$CFws?$FN?6?$AA@
0x1800020D0: "void __cdecl ShimLib::NotifyShims(int,unsigned __int64)" ?NotifyShims@ShimLib@@YAXH_K@Z
0x180038600: "Interface\{0000001D-0000-0000-C0" ??_C@_1GC@FCHCELC@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18003D220: "HKCR\%s.Application\CurVer" ??_C@_1DG@NHOECKKJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAu?$AAr?$AAV?$AAe?$AAr?$AA?$AA@
0x18003B180: "HKCU\SOFTWARE\Classes\Interface\" ??_C@_1JO@FDILMNOO@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x18003DB18: "Key not found: - did not get an " ??_C@_0DF@OLJKNCLM@Key?5not?5found?3?5?9?5did?5not?5get?5an?5@
0x1800033E0: "__cdecl ValidateImageBase" _ValidateImageBase
0x18002DF00: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1GE@FHGINNEP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x180032A80: "Software\Classes\Body5\Open\Shel" ??_C@_1FE@COLKKECP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAB?$AAo?$AAd?$AAy?$AA5?$AA?2?$AAO?$AAp?$AAe?$AAn?$AA?2?$AAS?$AAh?$AAe?$AAl@
0x18002AFF0: "Layer Shims uninitialized." ??_C@_0BL@KMOICFLO@Layer?5Shims?5uninitialized?4?$AA@
0x18004ACE0: "unsigned long NS_FaultTolerantHeap::FthSpecialHeapsMaxIndex" ?FthSpecialHeapsMaxIndex@NS_FaultTolerantHeap@@3KA
0x18003A300: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1BBK@PGCCBGGI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003DFF8: "Exception occurred in QueryValue" ??_C@_0CC@GEBDICA@Exception?5occurred?5in?5QueryValue@
0x180031718: "\Adapters" ??_C@_1BE@CDNMJCAF@?$AA?2?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18004B980: "unsigned short * NS_WRPMitigation::g_szExePath" ?g_szExePath@NS_WRPMitigation@@3PAGA
0x1800368A0: "HKCR\CLSID\{665A4443-D905-11D0-A" ??_C@_1IC@GEIMAING@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA3?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180031900: "4.0" ??_C@_17FGNHOBPG@?$AA4?$AA?4?$AA0?$AA?$AA@
0x18001E290: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBD@Z
0x180032DB0: "Software\Microsoft\Windows NT\Cu" ??_C@_1FK@MPJNMLLM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18001E890: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x18002AE80: "_lcreat" ??_C@_07FJABDDOC@_lcreat?$AA@
0x18002F3B0: "FTH: ERROR: %s(%u): " ??_C@_0BF@EGBMOION@FTH?3?5ERROR?3?5?$CFs?$CI?$CFu?$CJ?3?5?$AA@
0x18000E9B0: "void __cdecl NS_VirtualRegistry::BuildIndeo4(char const * __ptr64)" ?BuildIndeo4@NS_VirtualRegistry@@YAXPEBD@Z
0x18004351C: "__cdecl _IMPORT_DESCRIPTOR_sfc" __IMPORT_DESCRIPTOR_sfc
0x18003DB78: "Adding Key %S" ??_C@_0O@NHPKHNDD@Adding?5Key?5?$CFS?$AA@
0x180026A60: "public: unsigned short * __ptr64 __cdecl ShimLib::CString::GetBuffer(int) __ptr64" ?GetBuffer@CString@ShimLib@@QEAAPEAGH@Z
0x180035C30: "HKCR\CLSID\{BD323433-CE94-11CE-8" ??_C@_1GE@KCOMNKAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA3?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180034E10: "ConnectsToPin" ??_C@_1BM@MPLNKBAG@?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAs?$AAT?$AAo?$AAP?$AAi?$AAn?$AA?$AA@
0x180030578: "VCACHE\cMinPages" ??_C@_1CC@GLPECNHA@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAM?$AAi?$AAn?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180036C68: "Indeo� video 5.10 Decode OA" ??_C@_1DM@GIBMGLOJ@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x18003D3A0: "HKCR\WOW6432Node\CLSID\%s\LocalS" ??_C@_1FA@DONIFOEN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS@
0x18004AD58: "unsigned __int64 NS_VirtualRegistry2::g_stShimId" ?g_stShimId@NS_VirtualRegistry2@@3_KA
0x180012E60: "long __cdecl NS_VirtualRegistry::VR_Printer(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Printer@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x18002ABD8: "KERNEL32.DLL" ??_C@_0N@NHGLKGEC@KERNEL32?4DLL?$AA@
0x180032310: "Software\Microsoft\Windows\Curre" ??_C@_1IC@FEABEGAG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003F220: "NS_VirtualRegistry2::NotifyFn" ??_C@_0BO@KMDDBPKF@NS_VirtualRegistry2?3?3NotifyFn?$AA@
0x180031810: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18002A458: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18003FD90: "RegCreateKeyExA: wrp key is miti" ??_C@_1EM@CJMOLJDP@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x1800098CC: "void __cdecl NS_FaultTolerantHeap::FthSecureRemoveEntryList(struct _LIST_ENTRY * __ptr64)" ?FthSecureRemoveEntryList@NS_FaultTolerantHeap@@YAXPEAU_LIST_ENTRY@@@Z
0x18003DAD8: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18002DEB8: "Microsoft Outlook Application" ??_C@_1DM@IEABOLOJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003D5F8: "NS_VirtualRegistry::VR_Expand" ??_C@_0BO@NOPPPCOF@NS_VirtualRegistry?3?3VR_Expand?$AA@
0x180001020: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::GetHookAPIs(char * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetHookAPIs@ShimLib@@YAPEAUtagHOOKAPI@@PEADPEAGPEAK@Z
0x180036B70: "HKCR\CLSID\{665A4445-D905-11D0-A" ??_C@_1IC@ENAMCHA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA5?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800301C8: "ERROR OUT OF MEMORY" ??_C@_0BE@JFJOCNOK@ERROR?5OUT?5OF?5MEMORY?$AA@
0x18002EC10: "CompareStringA" ??_C@_0P@FPCBKPJL@CompareStringA?$AA@
0x180033698: "CString exception occured in Del" ??_C@_0CN@IAIEBCGH@CString?5exception?5occured?5in?5Del@
0x18003FD40: "RegCreateKeyW: wrp key is mitiga" ??_C@_1EI@NNPNNKBD@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x180006BA0: "int __cdecl NS_EmulateSortingWindows61::APIHook_IsNLSDefinedString(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_IsNLSDefinedString@NS_EmulateSortingWindows61@@YAHKKPEAU_nlsversioninfo@@PEBGH@Z
0x180031380: "HKLM\Software\Classes\Wordpad.Do" ??_C@_1HO@LPCELPOC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x18002AC88: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18003ACA0: "{00062FFF-0000-0000-C000-0000000" ??_C@_1EO@LEMLLGCK@?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA2?$AAF?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18003797C: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x180037AB8: ".aifc" ??_C@_1M@HDJFFBAC@?$AA?4?$AAa?$AAi?$AAf?$AAc?$AA?$AA@
0x18000EEB0: "void __cdecl NS_VirtualRegistry::BuildKrondor(char const * __ptr64)" ?BuildKrondor@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A068: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x1800334B8: "[DSSMOOTHWRITEPOS] Invalid numbe" ??_C@_0DC@CBNEHINI@?$FLDSSMOOTHWRITEPOS?$FN?5Invalid?5numbe@
0x18002F348: "RtlLockHeap" ??_C@_0M@DKBLBPDB@RtlLockHeap?$AA@
0x18002A0C8: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x18002ADF8: "RegCreateKeyW" ??_C@_0O@NNILLHLD@RegCreateKeyW?$AA@
0x18002A230: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180007700: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlDestroyHeap(void * __ptr64)" ?APIHook_RtlDestroyHeap@NS_FaultTolerantHeap@@YAPEAXPEAX@Z
0x180021D20: "int __cdecl NS_Win7RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win7RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180023620: "int __cdecl NS_WRPMitigation::APIHook_MoveFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?APIHook_MoveFileExW@NS_WRPMitigation@@YAHPEBG0K@Z
0x18002A510: "__cdecl _imp_RtlUnicodeToMultiByteN" __imp_RtlUnicodeToMultiByteN
0x180030000: "HKLM\Software\Microsoft\Windows\" ??_C@_1LK@OGKBPDPO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180032B80: "MSA2001: The data value is %S" ??_C@_0BO@PDGEFMJO@MSA2001?3?5The?5data?5value?5is?5?$CFS?$AA@
0x180030AD8: "Resolution" ??_C@_1BG@ICGICGKB@?$AAR?$AAe?$AAs?$AAo?$AAl?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180035850: "HKCR\CLSID\{BD323430-CE94-11CE-8" ??_C@_1GE@KDLBPMNP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA0?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18004BD80: Microsoft_Windows_Application_ExperienceEnableBits
0x180033898: "2600" ??_C@_19MHIAGAHK@?$AA2?$AA6?$AA0?$AA0?$AA?$AA@
0x18003EC28: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DC@NGMACNGF@NS_VirtualRegistry2?3?3CVirtualReg@
0x18002A1C8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18002EDC0: "VerQueryValueW" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x180027688: "private: long __cdecl ShimLib::PathTree::Initialize(void) __ptr64" ?Initialize@PathTree@ShimLib@@AEAAJXZ
0x18000C390: "void __cdecl NS_VirtualRegistry::BuildDDrawReleaseProcessVid(char const * __ptr64)" ?BuildDDrawReleaseProcessVid@NS_VirtualRegistry@@YAXPEBD@Z
0x180032670: "Software\Microsoft\Windows\Curre" ??_C@_1HM@EIKCIBEN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180037580: "HKCR\Interface\{665A4449-D905-11" ??_C@_1GM@GELEECLF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003F140: "ProgramFilesDir (x86)" ??_C@_1CM@LPGAILIM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x18003E020: "NULL handle passed to QueryValue" ??_C@_0CC@IAEKIH@NULL?5handle?5passed?5to?5QueryValue@
0x18002AEC0: "MoveFileW" ??_C@_09MAGPNIBH@MoveFileW?$AA@
0x180039320: "ProductType" ??_C@_1BI@JPCMFPH@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180025530: "void __cdecl NS_WRPRegDeleteKey::LogSfpKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyW@NS_WRPRegDeleteKey@@YAXPEAUHKEY__@@PEBGPEAG@Z
0x180020920: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaRTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaRTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180036550: "HKCR\CLSID\{2DE89781-DBF6-11D0-A" ??_C@_1IC@OAPOIPGP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AAD?$AAE?$AA8?$AA9?$AA7?$AA8?$AA1?$AA?9?$AAD?$AAB?$AAF?$AA6?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180036650: "HKCR\CLSID\{30355649-0000-0010-8" ??_C@_1IC@OLCMAKAP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180010890: "void __cdecl NS_VirtualRegistry::BuildTrueMotion20(char const * __ptr64)" ?BuildTrueMotion20@NS_VirtualRegistry@@YAXPEBD@Z
0x180030CE0: "HKCR\rtffile\shell\print\command" ??_C@_1EC@GKNAOOLO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x180002D40: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18002A408: "__cdecl _imp_iswspace" __imp_iswspace
0x18002A430: "__cdecl _imp__initterm" __imp__initterm
0x18002A550: "__cdecl _imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus" __imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus
0x18003E7C8: "RegDeleteKeyA" ??_C@_0O@FLDDFNH@RegDeleteKeyA?$AA@
0x180035E98: "AccessKey" ??_C@_1BE@MBFMPAPK@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAK?$AAe?$AAy?$AA?$AA@
0x180035A08: "IVI Decode Frame Property Page" ??_C@_1DO@BGFHEMPE@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAF?$AAr?$AAa?$AAm?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg?$AAe?$AA?$AA@
0x18002EBF0: "CompareStringEx" ??_C@_0BA@IHGNDAEB@CompareStringEx?$AA@
0x180039A38: "HKCR\Excel.Application\CLSID" ??_C@_1DK@HLAMNKCJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18048CD70: "short NS_VistaRTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaRTMVersionLie@@3FA
0x180035030: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1BCE@IJPCMHII@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180039000: "HKLM\Software\Microsoft\Direct3D" ??_C@_1EC@IIJGINPL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x180027570: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreeNodeVisitor::`vector deleting destructor'(unsigned int) __ptr64" ??_EPathTreeNodeVisitor@ShimLib@@UEAAPEAXI@Z
0x180011A10: "void __cdecl NS_VirtualRegistry::BuildWordPerfect2002(char const * __ptr64)" ?BuildWordPerfect2002@NS_VirtualRegistry@@YAXPEBD@Z
0x180025DC0: "void * __ptr64 __cdecl ShimLib::SafeMalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeMalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x18002EB88: "NS_DXMaximizedWindowedMode::Init" ??_C@_0DB@MHOCIBEB@NS_DXMaximizedWindowedMode?3?3Init@
0x180034B30: "vidc.iv32" ??_C@_1BE@NHMOODLC@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA3?$AA2?$AA?$AA@
0x180029FF8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180026540: "protected: void __cdecl ShimLib::CString::ConcatInPlace(int,unsigned short const * __ptr64) __ptr64" ?ConcatInPlace@CString@ShimLib@@IEAAXHPEBG@Z
0x180011060: "void __cdecl NS_VirtualRegistry::BuildWinHelpPath(char const * __ptr64)" ?BuildWinHelpPath@NS_VirtualRegistry@@YAXPEBD@Z
0x18001F4F0: "void __cdecl NS_VirtualRegistry2::BuildWow64KeyLie(char const * __ptr64)" ?BuildWow64KeyLie@NS_VirtualRegistry2@@YAXPEBD@Z
0x18002FBD0: "NS_VerifyVersionInfoLite::Initia" ??_C@_0CP@NKCCIFNG@NS_VerifyVersionInfoLite?3?3Initia@
0x18002D3E0: "Word.Application" ??_C@_1CC@GCDLBLAM@?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800300C0: "Directory" ??_C@_1BE@DNDHOCGP@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x1800234F0: "int __cdecl NS_WRPMitigation::APIHook_MoveFileA(char const * __ptr64,char const * __ptr64)" ?APIHook_MoveFileA@NS_WRPMitigation@@YAHPEBD0@Z
0x18003E9D0: "Closing virtual key [%ws] " ??_C@_0BL@BOKAPCF@Closing?5virtual?5key?5?$FL?$CFws?$FN?6?$AA@
0x18003B750: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1KM@ONCBDCOK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18003F790: "NS_Win81RTMVersionLie::APIHook_G" ??_C@_0CN@HCEKILFP@NS_Win81RTMVersionLie?3?3APIHook_G@
0x180006570: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringA(unsigned long,unsigned long,char const * __ptr64,int,char const * __ptr64,int)" ?APIHook_CompareStringA@NS_EmulateSortingWindows61@@YAHKKPEBDH0H@Z
0x18003A4E0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LM@IGICEGGH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180023480: "int __cdecl NS_WRPMitigation::APIHook_DeleteFileW(unsigned short const * __ptr64)" ?APIHook_DeleteFileW@NS_WRPMitigation@@YAHPEBG@Z
0x1800343C0: "HKCR\CLSID\{083863F1-70DE-11D0-B" ??_C@_1ME@KMBEMGCG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18002A0D8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18002A4E8: "__cdecl _imp_RtlCreateUnicodeStringFromAsciiz" __imp_RtlCreateUnicodeStringFromAsciiz
0x18003E470: "[DeleteKeyW] subkey %S was not d" ??_C@_0CI@MBANLGPK@?$FLDeleteKeyW?$FN?5subkey?5?$CFS?5was?5not?5d@
0x18000B090: "void __cdecl NS_VirtualRegistry::BuildAirlineTycoon(char const * __ptr64)" ?BuildAirlineTycoon@NS_VirtualRegistry@@YAXPEBD@Z
0x180033930: "Microsoft Windows Server 2003" ??_C@_1DM@MKGDJDDJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA3?$AA?$AA@
0x180032D48: "HKLM\Software\nownuri" ??_C@_1CM@ODNIAEFD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAn?$AAu?$AAr?$AAi?$AA?$AA@
0x180011330: "void __cdecl NS_VirtualRegistry::BuildWinSrv08Sp1Lie(char const * __ptr64)" ?BuildWinSrv08Sp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18001D550: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoKeyW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x18001CB2C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyPath(void * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAXPEAPEAG@Z
0x180039470: "Windows Server 2008 R2" ??_C@_1CO@BKGEIAFE@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA8?$AA?5?$AAR?$AA2?$AA?$AA@
0x180030728: "VMM\cDiscards" ??_C@_1BM@OMAPIBPI@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAD?$AAi?$AAs?$AAc?$AAa?$AAr?$AAd?$AAs?$AA?$AA@
0x1800380D0: "HKLM\SYSTEM\ControlSet003\Contro" ??_C@_1GC@PCELCAAP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA3?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x18002EE98: "NS_FaultTolerantHeap::FthGetVers" ??_C@_0CK@GGMADLJN@NS_FaultTolerantHeap?3?3FthGetVers@
0x1800095FC: "void __cdecl NS_FaultTolerantHeap::FthInitializeCookie(void)" ?FthInitializeCookie@NS_FaultTolerantHeap@@YAXXZ
0x18001DEC0: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x1800021C0: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::InitializeHooksEx(unsigned long,unsigned short const * __ptr64,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksEx@ShimLib@@YAPEAUtagHOOKAPI@@KPEBGPEBDPEAK@Z
0x18002E970: "EmulateSortingWindows61" ??_C@_0BI@NMCFBIEJ@EmulateSortingWindows61?$AA@
0x1800367A8: "EncoderType" ??_C@_1BI@KDPOLBCP@?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AAr?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180034850: "HKCR\CLSID\{C83B5610-E0DF-11D0-9" ??_C@_1IC@FOMMIKCB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA8?$AA3?$AAB?$AA5?$AA6?$AA1?$AA0?$AA?9?$AAE?$AA0?$AAD?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18000874C: "void * __ptr64 __cdecl NS_FaultTolerantHeap::FthCreateHeap(unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64,struct _RTL_HEAP_PARAMETERS * __ptr64)" ?FthCreateHeap@NS_FaultTolerantHeap@@YAPEAXKPEAX_K10PEAU_RTL_HEAP_PARAMETERS@@@Z
0x18003D010: "%sDesktop.%s_" ??_C@_1BM@GKCDLGFA@?$AA?$CF?$AAs?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?4?$AA?$CF?$AAs?$AA_?$AA?$AA@
0x180036DA8: "Indeo� video 5.10 Encode OA" ??_C@_1DM@PAKMCDMB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x18004BE58: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DXMaximizedWindowedHwndOverride::g_pAPIHooks" ?g_pAPIHooks@NS_DXMaximizedWindowedHwndOverride@@3PEAUtagHOOKAPI@@EA
0x18002E000: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1HC@MANIEOIF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x180043490: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180035EB0: "BiDirPrediction" ??_C@_1CA@FNHNHGAO@?$AAB?$AAi?$AAD?$AAi?$AAr?$AAP?$AAr?$AAe?$AAd?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180002700: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x180027960: "public: long __cdecl ShimLib::PathTreeNode::Search(struct ShimLib::PathTreeNodeSearch * __ptr64) __ptr64" ?Search@PathTreeNode@ShimLib@@QEAAJPEAUPathTreeNodeSearch@2@@Z
0x18002B030: "WsExCompositedShim" ??_C@_1CG@EFAPPAEK@?$AAW?$AAs?$AAE?$AAx?$AAC?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAe?$AAd?$AAS?$AAh?$AAi?$AAm?$AA?$AA@
0x180016020: "private: struct HKEY__ * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::CreateDummyKey(void) __ptr64" ?CreateDummyKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAUHKEY__@@XZ
0x18002F390: "RtlExitUserProcess" ??_C@_0BD@JDDPIELM@RtlExitUserProcess?$AA@
0x180034198: "%windir%\system32\tm20dec.ax" ??_C@_1DK@OLIJBAGC@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAt?$AAm?$AA2?$AA0?$AAd?$AAe?$AAc?$AA?4?$AAa?$AAx?$AA?$AA@
0x18002EF68: "FTH WER: timestamp: %ws " ??_C@_0BK@GMDCKFFO@FTH?5WER?3?5timestamp?3?5?$CFws?5?6?$AA@
0x18048CD78: "unsigned long NS_VistaRTMVersionLie::MinorVersion" ?MinorVersion@NS_VistaRTMVersionLie@@3KA
0x180012A60: "long __cdecl NS_VirtualRegistry::VR_MSA2001(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_MSA2001@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x18000EA00: "void __cdecl NS_VirtualRegistry::BuildIndeo5(char const * __ptr64)" ?BuildIndeo5@NS_VirtualRegistry@@YAXPEBD@Z
0x180030394: "%x" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x18003DCA0: "ROOT" ??_C@_19OLEIDBPB@?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000A3A0: StringCchPrintfW
0x18002ABF8: "NS_WRPMitigation::LogSfpValueW" ??_C@_0BP@IAHLOOIK@NS_WRPMitigation?3?3LogSfpValueW?$AA@
0x180027B78: "public: long __cdecl ShimLib::PathTree::SetFlags(class ShimLib::CString const & __ptr64,unsigned long,unsigned long) __ptr64" ?SetFlags@PathTree@ShimLib@@QEAAJAEBVCString@2@KK@Z
0x180037B88: ".mp2" ??_C@_19FHAPCMGL@?$AA?4?$AAm?$AAp?$AA2?$AA?$AA@
0x180034030: "FilterData" ??_C@_1BG@JAICECBE@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18002AC70: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x18003D288: "HKLM\%s\%s" ??_C@_1BG@BOGBHIMC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180007B70: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlLockHeap(void * __ptr64)" ?APIHook_RtlLockHeap@NS_FaultTolerantHeap@@YAEPEAX@Z
0x180031660: "SharedDir" ??_C@_1BE@MNOIGKKJ@?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAD?$AAi?$AAr?$AA?$AA@
0x18002ABB8: "fdwReason(%d) pszCmdLine(%s)" ??_C@_0BN@BMJMMFGL@fdwReason?$CI?$CFd?$CJ?5pszCmdLine?$CI?$CFs?$CJ?$AA@
0x18002A250: SHLWAPI_NULL_THUNK_DATA
0x180033A68: "x86" ??_C@_17NIABIIAO@?$AAx?$AA8?$AA6?$AA?$AA@
0x180039690: "9200" ??_C@_19LLCKJFHH@?$AA9?$AA2?$AA0?$AA0?$AA?$AA@
0x18003FDE0: "RegCreateKeyExW: wrp key is miti" ??_C@_1EM@MJJGBCLF@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x18004B6D0: "__cdecl _onexitend" __onexitend
0x18002F2C0: "NTDLL.DLL" ??_C@_09KKJFIDEP@NTDLL?4DLL?$AA@
0x18003BC80: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1JO@JKEMKKHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003DAF8: "HKPD" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x18000CAA0: "void __cdecl NS_VirtualRegistry::BuildDSPadCursors(char const * __ptr64)" ?BuildDSPadCursors@NS_VirtualRegistry@@YAXPEBD@Z
0x18003E718: "RegQueryValueA" ??_C@_0P@CDBCGPOI@RegQueryValueA?$AA@
0x1800321E0: "[Joystick hack] No joysticks fou" ??_C@_0CD@BBBNFDPP@?$FLJoystick?5hack?$FN?5No?5joysticks?5fou@
0x18000AB44: "struct tagHOOKAPI * __ptr64 __cdecl NS_VerifyVersionInfoLite::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VerifyVersionInfoLite@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180034960: "HKLM\Software\Microsoft\Windows " ??_C@_1HI@NJNNHFDK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18000EBC0: "void __cdecl NS_VirtualRegistry::BuildInstallRoot(char const * __ptr64)" ?BuildInstallRoot@NS_VirtualRegistry@@YAXPEBD@Z
0x18002CB18: "MS PowerPoint Application" ??_C@_1DE@KHNCPPFM@?$AAM?$AAS?$AA?5?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180039960: "4.6.02012" ??_C@_1BE@MMAGAMLN@?$AA4?$AA?4?$AA6?$AA?4?$AA0?$AA2?$AA0?$AA1?$AA2?$AA?$AA@
0x18002A580: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180010F40: "void __cdecl NS_VirtualRegistry::BuildWin8ShellNSSortOrderIndex(char const * __ptr64)" ?BuildWin8ShellNSSortOrderIndex@NS_VirtualRegistry@@YAXPEBD@Z
0x18003FE30: "RegOpenKeyExA: wrp key is mitiga" ??_C@_1EI@KPCDAHIJ@?$AAR?$AAe?$AAg?$AAO?$AAp?$AAe?$AAn?$AAK?$AAe?$AAy?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x18003E818: "RegGetValueW" ??_C@_0N@CKKDOMHE@RegGetValueW?$AA@
0x18002F030: "Application TimeStamp" ??_C@_1CM@DAEBFPIP@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x18000B470: "void __cdecl NS_VirtualRegistry::BuildCLRVersion45Lie(char const * __ptr64)" ?BuildCLRVersion45Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18000AD10: "public: __cdecl ShimLib::CStringToken::~CStringToken(void) __ptr64" ??1CStringToken@ShimLib@@QEAA@XZ
0x18002A358: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x18004B75C: "int NS_WRPMitigation::g_bSubshimUsed" ?g_bSubshimUsed@NS_WRPMitigation@@3HA
0x18003F240: "NS_VirtualRegistry2::InitializeH" ??_C@_0CK@MLHKPFEF@NS_VirtualRegistry2?3?3InitializeH@
0x1800319C8: "5.1" ??_C@_17CCMBIGAN@?$AA5?$AA?4?$AA1?$AA?$AA@
0x180040098: "NS_WRPMitigation::IsExeManifeste" ??_C@_0CC@KIEKFILF@NS_WRPMitigation?3?3IsExeManifeste@
0x180040150: "RLCHECK: No Runlevel declared." ??_C@_0BP@CJKLCBAM@RLCHECK?3?5No?5Runlevel?5declared?4?$AA@
0x180003020: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18002A100: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18002F3A4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800322D0: "HKCU\Software\Adobe\PageMaker65" ??_C@_1EA@BGPAJKPE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAM?$AAa?$AAk?$AAe?$AAr?$AA6?$AA5?$AA?$AA@
0x18002A018: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18004BF00: "struct NS_FaultTolerantHeap::_FTH_TRACKER * NS_FaultTolerantHeap::FthFreeTracker" ?FthFreeTracker@NS_FaultTolerantHeap@@3PAU_FTH_TRACKER@1@A
0x18003FED0: "RegSetValueA: wrp key is mitigat" ??_C@_1EG@IAIHAAOJ@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt@
0x18004BD10: "long volatile NS_FaultTolerantHeap::FthPerformCheckSums" ?FthPerformCheckSums@NS_FaultTolerantHeap@@3JC
0x18003EE10: "Failed to add key %d " ??_C@_0BG@CMKKLNBP@Failed?5to?5add?5key?5?$CFd?6?$AA@
0x18002A270: USER32_NULL_THUNK_DATA
0x1800223E0: "int __cdecl NS_Win8RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win8RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180039FF0: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1IK@HALOPDAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180015120: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18003F430: "NS_VistaSP1VersionLie::APIHook_G" ??_C@_0CK@JCEMCKKD@NS_VistaSP1VersionLie?3?3APIHook_G@
0x18002A1F0: "__cdecl _imp_FindNLSStringEx" __imp_FindNLSStringEx
0x18002A538: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x18002A050: "__cdecl _imp_QueryActCtxW" __imp_QueryActCtxW
0x18004AD78: "unsigned __int64 NS_EmulateSortingVista::g_stShimId" ?g_stShimId@NS_EmulateSortingVista@@3_KA
0x18002F368: "RtlValidateHeap" ??_C@_0BA@EEJAMNOM@RtlValidateHeap?$AA@
0x18002AB80: "WRPMitigation" ??_C@_0O@BENKPHGO@WRPMitigation?$AA@
0x18002F170: "reuse after free: %p " ??_C@_0BG@CJAMGKGL@reuse?5after?5free?3?5?$CFp?6?$AA@
0x180035CA0: "IVI Encode Parameters Property P" ??_C@_1EI@HNHOICGN@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP@
0x18002D110: "Microsoft PowerPoint Application" ??_C@_1EC@DGMNHFMD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn@
0x1800330C0: "HKLM\System\CurrentControlSet\En" ??_C@_1EG@CJFELOOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x18002A300: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1800131E0: "long __cdecl NS_VirtualRegistry::VR_Expand(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Expand@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x18003F670: "NS_Win7RTMVersionLie::Initialize" ??_C@_0CL@CJDGCOII@NS_Win7RTMVersionLie?3?3Initialize@
0x180007720: "int __cdecl NS_FaultTolerantHeap::APIHook_RtlFreeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlFreeHeap@NS_FaultTolerantHeap@@YAHPEAXK0@Z
0x18048CDDC: "short NS_Win8RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win8RTMVersionLie@@3FA
0x18002FCA8: "VersionNumber" ??_C@_1BM@OAENJGHL@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x18002A048: "__cdecl _imp_ReleaseActCtx" __imp_ReleaseActCtx
0x18002698C: "public: char * __ptr64 __cdecl ShimLib::CString::GetAnsi(void)const __ptr64" ?GetAnsi@CString@ShimLib@@QEBAPEADXZ
0x180029FC0: "__cdecl _imp_GetFileSecurityA" __imp_GetFileSecurityA
0x18002A500: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18004B784: "int NS_EmulateSortingWindows61::g_bSubshimUsed" ?g_bSubshimUsed@NS_EmulateSortingWindows61@@3HA
0x1800309E0: "HKDD\PerfStats\StatData" ??_C@_1DA@DCCCMBPM@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180037A90: "^" ??_C@_01JKBOJNNK@?$FO?$AA@
0x1800154A0: "public: struct NS_VirtualRegistry::PROTECTOR * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AddKeyProtector(unsigned short const * __ptr64) __ptr64" ?AddKeyProtector@CVirtualRegistry@NS_VirtualRegistry@@QEAAPEAUPROTECTOR@2@PEBG@Z
0x180038290: "OLEViewer Automation Interface V" ??_C@_1EO@BHNIDMCC@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV@
0x18002F308: "RtlSizeHeap" ??_C@_0M@EHEBCDHL@RtlSizeHeap?$AA@
0x18048CDE0: "char * __ptr64 __ptr64 NS_Win81RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win81RTMVersionLie@@3PEADEA
0x18003C0F0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LK@FLLJHFGD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002AED0: "MoveFileA" ??_C@_09NMPHGNMA@MoveFileA?$AA@
0x18002CE00: "Microsoft.Office.Interop.Excel, " ??_C@_1MG@KNFAICFI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?0?$AA?5@
0x1800310A0: "HKLM\Software\Classes\Applicatio" ??_C@_1IK@MFINLCNE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x18001C5BC: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindRootKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindRootKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEBGPEAPEAVCVirtualKey@2@PEAPEAG@Z
0x18000E3F0: "void __cdecl NS_VirtualRegistry::BuildHotFix(char const * __ptr64)" ?BuildHotFix@NS_VirtualRegistry@@YAXPEBD@Z
0x180033FE0: "{4CB63E61-C611-11D0-83AA-0000929" ??_C@_1EO@FACKCOBN@?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8?$AA3?$AAA?$AAA?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA9?$AA2?$AA9@
0x180034BA0: "ir41_32.ax" ??_C@_1BG@GGKMJKEB@?$AAi?$AAr?$AA4?$AA1?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x180038950: "Interface\{0000010C-0000-0000-C0" ??_C@_1IO@ICDGEMIE@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AAC?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180037BD8: ".pls" ??_C@_19OHANPFCJ@?$AA?4?$AAp?$AAl?$AAs?$AA?$AA@
0x180039050: "ReleaseProcessVidPnSourceOwnersA" ??_C@_1FA@FNPEDFMH@?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAV?$AAi?$AAd?$AAP?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAA@
0x18002A5A8: "__cdecl _xi_a" __xi_a
0x18004AD60: "unsigned __int64 NS_VirtualRegistry::g_stShimId" ?g_stShimId@NS_VirtualRegistry@@3_KA
0x18002F4B0: "Failed to create pipe event " ??_C@_0BN@LJJGFBDC@Failed?5to?5create?5pipe?5event?6?$AA@
0x1800067C0: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_CompareStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0H0HPEAU_nlsversioninfo@@PEAX_J@Z
0x18002A000: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180030B98: "(Default)" ??_C@_1BE@JIHFKFIP@?$AA?$CI?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$CJ?$AA?$AA@
0x18003B6B0: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1JK@CEKLPANA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18002FD60: "HKLM\Software\Microsoft\Windows\" ??_C@_1IO@PGNDLMBJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002D690: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1IC@IPKPBJFI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180033870: "SubVersionNumber" ??_C@_1CC@KMKCFOIP@?$AAS?$AAu?$AAb?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x18001CA6C: "private: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyHandle(class NS_VirtualRegistry2::CVirtualKey * __ptr64,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?GetKeyHandle@CVirtualRegistry@NS_VirtualRegistry2@@AEAAJPEAVCVirtualKey@2@PEAPEAUHKEY__@@@Z
0x1800301E0: "SOFTWARE\Hasbro Interactive" ??_C@_1DI@LBCPMIIE@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAH?$AAa?$AAs?$AAb?$AAr?$AAo?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180024660: "int __cdecl NS_WRPMitigation::IsKeyComKey(struct HKEY__ * __ptr64,struct _UNICODE_STRING * __ptr64)" ?IsKeyComKey@NS_WRPMitigation@@YAHPEAUHKEY__@@PEAU_UNICODE_STRING@@@Z
0x180030310: "HKDD\Config Manager\Enum" ??_C@_1DC@OGBHMLCL@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x180038C20: "Interface\{7FD52380-4E07-101B-AE" ??_C@_1IO@CDJEPOPF@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA7?$AAF?$AAD?$AA5?$AA2?$AA3?$AA8?$AA0?$AA?9?$AA4?$AAE?$AA0?$AA7?$AA?9?$AA1?$AA0?$AA1?$AAB?$AA?9?$AAA?$AAE@
0x180023A80: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegDeleteValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteValueW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBG@Z
0x1800076F0: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlCreateHeap(unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64,struct _RTL_HEAP_PARAMETERS * __ptr64)" ?APIHook_RtlCreateHeap@NS_FaultTolerantHeap@@YAPEAXKPEAX_K10PEAU_RTL_HEAP_PARAMETERS@@@Z
0x18000FB50: "void __cdecl NS_VirtualRegistry::BuildPageKeepProDirectory(char const * __ptr64)" ?BuildPageKeepProDirectory@NS_VirtualRegistry@@YAXPEBD@Z
0x18003D9F0: "NS_VirtualRegistry::TrimSlashW" ??_C@_0BP@FHAKIBJM@NS_VirtualRegistry?3?3TrimSlashW?$AA@
0x1800387C0: "Interface\{FC37E5BA-4A8E-11CE-87" ??_C@_1GC@LIFHIGMA@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AAF?$AAC?$AA3?$AA7?$AAE?$AA5?$AAB?$AAA?$AA?9?$AA4?$AAA?$AA8?$AAE?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8?$AA7@
0x18004B750: "int NS_VerifyVersionInfoLite::g_bSubshimUsed" ?g_bSubshimUsed@NS_VerifyVersionInfoLite@@3HA
0x18003DA10: "\Registry\User" ??_C@_1BO@MLIOGHOC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x180049558: "char * __ptr64 __ptr64 NS_DXMaximizedWindowedHwndOverride::g_szCommandLine" ?g_szCommandLine@NS_DXMaximizedWindowedHwndOverride@@3PEADEA
0x1800318E8: "CSDVersion" ??_C@_1BG@MEBEMGBM@?$AAC?$AAS?$AAD?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18003A130: "HKLM\SOFTWARE\Classes\Excel.Appl" ??_C@_1FM@LKNKDPHF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl@
0x180016E60: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEAGPEAK2PEAE2@Z
0x18002A328: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18003DE68: "Adding Key Protector: %S" ??_C@_0BK@OFFEMJGB@Adding?5Key?5Protector?3?5?5?$CFS?$AA@
0x18003FA40: "WRP" ??_C@_17EPHFHMBH@?$AAW?$AAR?$AAP?$AA?$AA@
0x18048CD90: "short NS_VistaSP1VersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaSP1VersionLie@@3FA
0x180030B18: "HKCC\Display\Fonts" ??_C@_1CG@EAMEFML@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAF?$AAo?$AAn?$AAt?$AAs?$AA?$AA@
0x180034808: "About Indeo� audio software" ??_C@_1DM@KGJPKKMN@?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x18002CBB8: "mspub.exe" ??_C@_1BE@BNEEFCGP@?$AAm?$AAs?$AAp?$AAu?$AAb?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002E470: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1IG@JPHIELNP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x180008440: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlUnlockHeap(void * __ptr64)" ?APIHook_RtlUnlockHeap@NS_FaultTolerantHeap@@YAEPEAX@Z
0x180033680: "InstReg.exe" ??_C@_1BI@DLFJJCCO@?$AAI?$AAn?$AAs?$AAt?$AAR?$AAe?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18003E148: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0CP@HLAAFHMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x18002AF30: "CopyFileExA" ??_C@_0M@GKMANEJL@CopyFileExA?$AA@
0x18000F5B0: "void __cdecl NS_VirtualRegistry::BuildNetworkCards(char const * __ptr64)" ?BuildNetworkCards@NS_VirtualRegistry@@YAXPEBD@Z
0x1800108E0: "void __cdecl NS_VirtualRegistry::BuildVersionLie(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?BuildVersionLie@NS_VirtualRegistry@@YAXPEBG000@Z
0x18002B380: "buffer overrun: %p, %p, %p " ??_C@_0BM@NOCCEJML@buffer?5overrun?3?5?$CFp?0?5?$CFp?0?5?$CFp?6?$AA@
0x180032570: "NS_VirtualRegistry::GetStringSID" ??_C@_0CB@MADEHLBD@NS_VirtualRegistry?3?3GetStringSID@
0x180030868: "VMM\cpgDiskcacheMin" ??_C@_1CI@PHPDLHDO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAi?$AAn?$AA?$AA@
0x180033300: "[DSPADCURSORS] Unabled to add Di" ??_C@_0CP@ONGENBJJ@?$FLDSPADCURSORS?$FN?5Unabled?5to?5add?5Di@
0x18002ED90: "GetFileVersionInfoW" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x18003E560: "Win9x" ??_C@_05NMDBNOPO@Win9x?$AA@
0x180038D40: "Component Categories\{64454F82-F" ??_C@_1HI@HHNEBAAI@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?2?$AA?$HL?$AA6?$AA4?$AA4?$AA5?$AA4?$AAF?$AA8?$AA2?$AA?9?$AAF@
0x18002DE00: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1LI@EGHICLPC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x1800303B0: "HardWareKey" ??_C@_1BI@PFENDFKH@?$AAH?$AAa?$AAr?$AAd?$AAW?$AAa?$AAr?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
0x18003D778: "DSAPPHACKID_SMOOTHWRITEPOS" ??_C@_1DG@KKINCALC@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAS?$AAM?$AAO?$AAO?$AAT?$AAH?$AAW?$AAR?$AAI?$AAT?$AAE?$AAP?$AAO?$AAS?$AA?$AA@
0x18003F8E0: "\Registry\HKEY_CURRENT_USER\Soft" ??_C@_1FM@EKPPHNKM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?2?$AAS?$AAo?$AAf?$AAt@
0x1800382E0: "OLEViewer IPersist Interface Vie" ??_C@_1EK@KJLCBCBB@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAI?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe@
0x18002F8F8: "Client read an unexpected messag" ??_C@_0CJ@NKLBCGJO@Client?5read?5an?5unexpected?5messag@
0x18004BEA0: "unsigned long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetModuleBaseNameW)(void * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long)" ?pfnGetModuleBaseNameW@NS_FaultTolerantHeap@@3P6AKPEAXPEAUHINSTANCE__@@PEAGK@ZEA
0x18004AD18: "unsigned __int64 NS_WRPRegDeleteKey::g_stShimId" ?g_stShimId@NS_WRPRegDeleteKey@@3_KA
0x180033358: "NS_VirtualRegistry::BuildDSCache" ??_C@_0CK@NEJIELPJ@NS_VirtualRegistry?3?3BuildDSCache@
0x18003E998: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DE@EJBCEAEH@NS_VirtualRegistry2?3?3CVirtualReg@
0x1800399CC: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x18002CB50: "{91493441-5A91-11CF-8700-00AA006" ??_C@_1EO@DJFBEGPI@?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8?$AA7?$AA0?$AA0?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AA6@
0x1800260E0: "protected: void __cdecl ShimLib::CString::AllocBuffer(int) __ptr64" ?AllocBuffer@CString@ShimLib@@IEAAXH@Z
0x1800267BC: "public: void __cdecl ShimLib::CString::Format(char const * __ptr64,...) __ptr64" ?Format@CString@ShimLib@@QEAAXPEBDZZ
0x18002AFA0: "%S%s%s%s " ??_C@_09EAGPOLDP@?$CFS?$CFs?$CFs?$CFs?6?$AA@
0x18000E090: "void __cdecl NS_VirtualRegistry::BuildGOMPack(char const * __ptr64)" ?BuildGOMPack@NS_VirtualRegistry@@YAXPEBD@Z
0x18000A288: McGenEventWrite
0x180036A00: "HKCR\CLSID\{665A4444-D905-11D0-A" ??_C@_1IC@BEMKOBEB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA4?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180014F70: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char const * __ptr64,unsigned long)" ?APIHook_RegSetValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDK1K@Z
0x18002AD30: "SetFileSecurityA" ??_C@_0BB@PMFHDDMB@SetFileSecurityA?$AA@
0x180030248: "NS_VirtualRegistry::BuildHasbro" ??_C@_0CA@CDCPMINO@NS_VirtualRegistry?3?3BuildHasbro?$AA@
0x180038540: "CLSID\{7CE551EB-F85C-11CE-9059-0" ??_C@_1FK@HJHMOHEK@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA7?$AAC?$AAE?$AA5?$AA5?$AA1?$AAE?$AAB?$AA?9?$AAF?$AA8?$AA5?$AAC?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x1800365E0: "HKCR\CLSID\{30355649-0000-0010-8" ??_C@_1GE@NNAFGOFL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18003EFE0: "Failed to allocate %d for buffer" ??_C@_0CC@NDJOGFDG@Failed?5to?5allocate?5?$CFd?5for?5buffer@
0x18002F090: "FTH WER: report submission faile" ??_C@_0DK@CEPBEIOO@FTH?5WER?3?5report?5submission?5faile@
0x1800308C8: "VMM\cpgLockedNonCache" ??_C@_1CM@JHNOMLBA@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AAN?$AAo?$AAn?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x18004BEE0: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportCreate)(unsigned short const * __ptr64,enum _WER_REPORT_TYPE,struct _WER_REPORT_INFORMATION * __ptr64,void * __ptr64 * __ptr64)" ?pfnWerReportCreate@NS_FaultTolerantHeap@@3P6AJPEBGW4_WER_REPORT_TYPE@@PEAU_WER_REPORT_INFORMATION@@PEAPEAX@ZEA
0x18002AC18: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800151D0: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long)" ?APIHook_RegSetValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGK1K@Z
0x1800275B0: "public: long __cdecl ShimLib::PathTreeNode::AddChild(class ShimLib::PathTreeNode * __ptr64) __ptr64" ?AddChild@PathTreeNode@ShimLib@@QEAAJPEAV12@@Z
0x18001A204: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::RemoveVirtualDeletedHKCRKeysFromEnum(struct NS_VirtualRegistry::OPENKEY * __ptr64) __ptr64" ?RemoveVirtualDeletedHKCRKeysFromEnum@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEAUOPENKEY@2@@Z
0x18002A518: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x180008EF8: "void * __ptr64 __cdecl NS_FaultTolerantHeap::FthDestroyHeap(void * __ptr64)" ?FthDestroyHeap@NS_FaultTolerantHeap@@YAPEAXPEAX@Z
0x180006A80: "int __cdecl NS_EmulateSortingWindows61::APIHook_GetNLSVersion(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64)" ?APIHook_GetNLSVersion@NS_EmulateSortingWindows61@@YAHKKPEAU_nlsversioninfo@@@Z
0x1800210D0: "long __cdecl NS_VistaSP1VersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaSP1VersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x1800362D0: "Indeo� video 5.10 Decompressio" ??_C@_1FC@EODEJFND@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo@
0x18002B168: "VirtualRegistry2" ??_C@_1CC@CALOGMCJ@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA2?$AA?$AA@
0x180038FE8: "InstallRoot" ??_C@_1BI@LHIOEDHG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180003218: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18004B6F8: "__cdecl pRawDllMain" _pRawDllMain
0x18048CDA8: "short NS_VistaSP2VersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaSP2VersionLie@@3FA
0x180033C90: "SYSTEM\CurrentControlSet\Control" ??_C@_1IG@MGCEDJOH@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000F410: "void __cdecl NS_VirtualRegistry::BuildNT4SP5(char const * __ptr64)" ?BuildNT4SP5@NS_VirtualRegistry@@YAXPEBD@Z
0x18002AE18: "VerInstallFileW" ??_C@_0BA@JGFCNMMD@VerInstallFileW?$AA@
0x18002A438: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180038E70: "HKLM\software\microsoft\Windows " ??_C@_1HG@HKLPGGAK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18002CC70: "visio.exe" ??_C@_1BE@IPGODPI@?$AAv?$AAi?$AAs?$AAi?$AAo?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180037C20: "HKCU\Software\Classes\iTunes.Bur" ??_C@_1EI@PANOAGBH@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAi?$AAT?$AAu?$AAn?$AAe?$AAs?$AA?4?$AAB?$AAu?$AAr@
0x18000472A: strcmp
0x18002A108: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x180030480: "VFAT" ??_C@_19MHOGOLNA@?$AAV?$AAF?$AAA?$AAT?$AA?$AA@
0x180031750: "Software\Microsoft\Windows NT\Cu" ??_C@_1HE@PKDEENCL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18004BE78: "unsigned __int64 NS_FaultTolerantHeap::FthDelayFreeQueueSize" ?FthDelayFreeQueueSize@NS_FaultTolerantHeap@@3_KA
0x18002F478: "FTH shim applied with unrecogniz" ??_C@_0DC@JBDDKLC@FTH?5shim?5applied?5with?5unrecogniz@
0x180030BB0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1IA@PMEIEHOF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180038DD0: "%Programfiles%\Internet Explorer" ??_C@_1EC@CBGKBHBB@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr@
0x180010840: "void __cdecl NS_VirtualRegistry::BuildThemeActive(char const * __ptr64)" ?BuildThemeActive@NS_VirtualRegistry@@YAXPEBD@Z
0x18002AF60: "AccessCheck" ??_C@_0M@NFEPJBAB@AccessCheck?$AA@
0x18001F080: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x18003ED48: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DG@GIEPJEHL@NS_VirtualRegistry2?3?3CVirtualReg@
0x18002A038: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x18003F2D0: "NS_VistaRTMVersionLie::APIHook_G" ??_C@_0CK@KNBEBOLI@NS_VistaRTMVersionLie?3?3APIHook_G@
0x18003AB00: "HKCR\Interface\{00063001-0000-00" ??_C@_1IK@LNAPHGFF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x18002FB98: "NS_VerifyVersionInfoLite::APIHoo" ??_C@_0DF@MHPGLBMP@NS_VerifyVersionInfoLite?3?3APIHoo@
0x180005560: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000F3F0: "void __cdecl NS_VirtualRegistry::BuildModemWizard(char const * __ptr64)" ?BuildModemWizard@NS_VirtualRegistry@@YAXPEBD@Z
0x18003EEB0: "FindKey key [%ws] subkey [%ws] " ??_C@_0CA@PPJONAFP@FindKey?5key?5?$FL?$CFws?$FN?5subkey?5?$FL?$CFws?$FN?6?$AA@
0x180049280: "struct NS_VirtualRegistry2::VENTRY * NS_VirtualRegistry2::g_VEntryList" ?g_VEntryList@NS_VirtualRegistry2@@3PAUVENTRY@1@A
0x180014A80: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEADPEAJ@Z
0x18002DA30: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1BAC@ICKINNCD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18002AD00: "pdwHookCount(%d)" ??_C@_0BB@GEMBACLN@pdwHookCount?$CI?$CFd?$CJ?$AA@
0x18002EF90: "FTH WER: errors: %ws %08X " ??_C@_0BM@IDKLDLDG@FTH?5WER?3?5errors?3?5?$CFws?5?$CF08X?5?6?$AA@
0x180035FC8: "Indeo4 initialization failed" ??_C@_0BN@JGDNOEGH@Indeo4?5initialization?5failed?$AA@
0x18003FAE0: "NS_WRPMitigation::APIHook__lopen" ??_C@_0CB@CODEBNEO@NS_WRPMitigation?3?3APIHook__lopen@
0x180028000: "const type_info::`vftable'" ??_7type_info@@6B@
0x1800107B0: "void __cdecl NS_VirtualRegistry::BuildTalkingDictionary(char const * __ptr64)" ?BuildTalkingDictionary@NS_VirtualRegistry@@YAXPEBD@Z
0x18003D170: "HKLM\SOFTWARE\Classes\%s.Applica" ??_C@_1FI@DPDNJNCK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18003F7C0: "NS_Win81RTMVersionLie::APIHook_G" ??_C@_0CN@GONCDOII@NS_Win81RTMVersionLie?3?3APIHook_G@
0x18002AFC0: "NotifyFn" ??_C@_08LOJNPBNJ@NotifyFn?$AA@
0x18002A158: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18002A3D0: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x18003E5C0: " Virtual registry " ??_C@_0CD@MNODABLG@?5?5?5?5?5?5?5?5?5Virtual?5registry?5?5?5?5?5?5?5@
0x180002FF0: "__cdecl _security_check_cookie" __security_check_cookie
0x18002751C: "public: virtual __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::~PathTreeNodeSetFlagsVisitor(void) __ptr64" ??1PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAA@XZ
0x180030D80: "HKCR\Wordpad.Document.1\shell\op" ??_C@_1FG@EPBLECLL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp@
0x18004BD40: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUozbviUlyquivUznwGEUkivxlnkOlyq@AcLayers" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUozbviUlyquivUznwGEUkivxlnkOlyq@AcLayers
0x180039668: "Windows 8 Pro" ??_C@_1BM@DNDBGDBJ@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA8?$AA?5?$AAP?$AAr?$AAo?$AA?$AA@
0x18002A5A0: "__cdecl _xc_z" __xc_z
0x18003F3D0: "NS_VistaSP1VersionLie::APIHook_G" ??_C@_0CN@NEHFMNJL@NS_VistaSP1VersionLie?3?3APIHook_G@
0x1800126B0: "long __cdecl NS_VirtualRegistry::VR_Hasbro(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Hasbro@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x1800308A8: "VMM\cpgLocked" ??_C@_1BM@CNBLLPAA@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x180010450: "void __cdecl NS_VirtualRegistry::BuildRegisteredOwner(char const * __ptr64)" ?BuildRegisteredOwner@NS_VirtualRegistry@@YAXPEBD@Z
0x18002CA10: "Outlook" ??_C@_1BA@CNMFNJKN@?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?$AA@
0x18001F050: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEADPEAJ@Z
0x180025D80: "void * __ptr64 __cdecl ShimLib::SafeCalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeCalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x18002CD48: "Microsoft Word Application" ??_C@_1DG@GOGBGJNB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAo?$AAr?$AAd?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002A160: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000E510: "void __cdecl NS_VirtualRegistry::BuildIE401(char const * __ptr64)" ?BuildIE401@NS_VirtualRegistry@@YAXPEBD@Z
0x18000AAE0: "int __cdecl NS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoW(struct _OSVERSIONINFOEXW * __ptr64,unsigned long,unsigned __int64)" ?APIHook_VerifyVersionInfoW@NS_VerifyVersionInfoLite@@YAHPEAU_OSVERSIONINFOEXW@@K_K@Z
0x1800253E0: "int __cdecl NS_WRPRegDeleteKey::IsWrpKeyDescriptor(void * __ptr64)" ?IsWrpKeyDescriptor@NS_WRPRegDeleteKey@@YAHPEAX@Z
0x180004200: "void __cdecl NS_VirtualRegistry::BuildCentennialOfficex64(char const * __ptr64)" ?BuildCentennialOfficex64@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B5F8: "ole2.dll" ??_C@_1BC@OMKMFBKC@?$AAo?$AAl?$AAe?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000B1D0: "void __cdecl NS_VirtualRegistry::BuildAutoRun(char const * __ptr64)" ?BuildAutoRun@NS_VirtualRegistry@@YAXPEBD@Z
0x180035A50: "HKCR\CLSID\{BD323431-CE94-11CE-8" ??_C@_1IC@FJLPNOEM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA1?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180037AF8: ".itl" ??_C@_19GDAGBIBG@?$AA?4?$AAi?$AAt?$AAl?$AA?$AA@
0x180038B90: "Interface\{00020402-0000-0000-C0" ??_C@_1IO@ODHGBPNH@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA2?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002D970: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1LE@BAJOBHDF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18000EA50: "void __cdecl NS_VirtualRegistry::BuildIndeoSound(char const * __ptr64)" ?BuildIndeoSound@NS_VirtualRegistry@@YAXPEBD@Z
0x180010AC0: "void __cdecl NS_VirtualRegistry::BuildVistaSP1Lie(char const * __ptr64)" ?BuildVistaSP1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180031D68: "FullScreen" ??_C@_1BG@IDKBOGHH@?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x180035F20: "MinViewportWidth" ??_C@_1CC@GKBJCDAA@?$AAM?$AAi?$AAn?$AAV?$AAi?$AAe?$AAw?$AAp?$AAo?$AAr?$AAt?$AAW?$AAi?$AAd?$AAt?$AAh?$AA?$AA@
0x180030818: "VMM\cpgDiskcacheMac" ??_C@_1CI@OJMKONIO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAa?$AAc?$AA?$AA@
0x18003F390: "GetVersionExA" ??_C@_0O@LLCLDPIK@GetVersionExA?$AA@
0x180013590: "int __cdecl NS_VirtualRegistry::GetDirectSoundAppId(unsigned short * __ptr64)" ?GetDirectSoundAppId@NS_VirtualRegistry@@YAHPEAG@Z
0x180032268: "HKLM\Software\Adobe" ??_C@_1CI@KHBFFGHG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?$AA@
0x180043530: "__cdecl _IMPORT_DESCRIPTOR_WINSPOOL" __IMPORT_DESCRIPTOR_WINSPOOL
0x18003F9E8: "Patched an AccessCheck to ignore" ??_C@_0CF@CLAOEBEL@Patched?5an?5AccessCheck?5to?5ignore@
0x18003E650: "NS_VirtualRegistry::InitializeHo" ??_C@_0CJ@DGEHFBMF@NS_VirtualRegistry?3?3InitializeHo@
0x18002F928: "Client was denied tracking. " ??_C@_0BN@CIMGEPPE@Client?5was?5denied?5tracking?4?6?$AA@
0x18002ECA8: "NlsValidateLocale" ??_C@_0BC@CCDOCFGB@NlsValidateLocale?$AA@
0x180034068: "TrueMotion 2.0 Decompressor" ??_C@_1DI@HFBADLFP@?$AAT?$AAr?$AAu?$AAe?$AAM?$AAo?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA2?$AA?4?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
0x180034D60: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1HK@GGIPDAPB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18001FFBC: "int __cdecl NS_VirtualRegistry2::NotifyFn(unsigned long)" ?NotifyFn@NS_VirtualRegistry2@@YAHK@Z
0x18003DBF0: "[FindValue] Using virtual value:" ??_C@_0CF@POGFKFHB@?$FLFindValue?$FN?5Using?5virtual?5value?3@
0x18004BE18: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VirtualRegistry::g_pAPIHooks" ?g_pAPIHooks@NS_VirtualRegistry@@3PEAUtagHOOKAPI@@EA
0x180004556: "__cdecl CxxThrowException" _CxxThrowException
0x18002EF84: "%u" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x18002AC58: " ValueName: [%S] " ??_C@_0BE@KHAJLODC@?7?7?7ValueName?3?5?$FL?$CFS?$FN?6?$AA@
0x18003CF70: "Startup" ??_C@_1BA@FIJHCCCE@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x180027570: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`vector deleting destructor'(unsigned int) __ptr64" ??_EPathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAPEAXI@Z
0x180015310: "public: struct NS_VirtualRegistry::VIRTUALKEY * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddKey(unsigned short const * __ptr64) __ptr64" ?AddKey@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAU12@PEBG@Z
0x180020EF0: "int __cdecl NS_VistaSP1VersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaSP1VersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180020FE0: "int __cdecl NS_VistaSP1VersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaSP1VersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180037B98: ".mp3" ??_C@_19OPLDELAO@?$AA?4?$AAm?$AAp?$AA3?$AA?$AA@
0x18002B430: "NS_FaultTolerantHeap::FthPipeRea" ??_C@_0CJ@HKJEJONC@NS_FaultTolerantHeap?3?3FthPipeRea@
0x18002A008: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800175CC: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::GetValueA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBD1KPEAKPEAE2@Z
0x180033A70: "PROCESSOR_ARCHITECTURE" ??_C@_1CO@KPLMNPIA@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAA?$AAR?$AAC?$AAH?$AAI?$AAT?$AAE?$AAC?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180036C00: "HKCR\CLSID\{665A4448-D905-11D0-A" ??_C@_1GE@HKBBNDCA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA8?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800383C0: "CLSID\{28D8ABA0-4B78-11CE-B27D-0" ??_C@_1FK@BPAHEKLE@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA8?$AAD?$AA8?$AAA?$AAB?$AAA?$AA0?$AA?9?$AA4?$AAB?$AA7?$AA8?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AA2?$AA7?$AAD?$AA?9?$AA0@
0x180049550: "char * __ptr64 __ptr64 NS_DXMaximizedWindowedMode::g_szCommandLine" ?g_szCommandLine@NS_DXMaximizedWindowedMode@@3PEADEA
0x18002A200: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x18004BE68: "struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64 (__cdecl* __ptr64 NS_EmulateSortingWindows61::g_pfnGetNamedLocaleHashNode)(unsigned short const * __ptr64,unsigned short)" ?g_pfnGetNamedLocaleHashNode@NS_EmulateSortingWindows61@@3P6APEAUloc_hash_s@1@PEBGG@ZEA
0x180025130: "long __cdecl NS_WRPRegDeleteKey::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBG@Z
0x18003DAB8: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x180027064: "public: void __cdecl ShimLib::CString::Truncate(int) __ptr64" ?Truncate@CString@ShimLib@@QEAAXH@Z
0x180033918: "3790" ??_C@_19MDOHFKBC@?$AA3?$AA7?$AA9?$AA0?$AA?$AA@
0x18002E660: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1LG@OOLGIIHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x180037B48: ".m4b" ??_C@_19IMLGLLD@?$AA?4?$AAm?$AA4?$AAb?$AA?$AA@
0x18003FBB0: "Software\Volatile\00" ??_C@_1CK@ILIJIJOA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAV?$AAo?$AAl?$AAa?$AAt?$AAi?$AAl?$AAe?$AA?2?$AA0?$AA0?$AA?$AA@
0x18048CDC4: "short NS_Win7RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win7RTMVersionLie@@3FA
0x180033D78: "%s %llu %llu" ??_C@_1BK@EKJCAKBC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?$AA@
0x18002A0C0: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800265E0: "protected: void __cdecl ShimLib::CString::CopyBeforeWrite(void) __ptr64" ?CopyBeforeWrite@CString@ShimLib@@IEAAXXZ
0x180002A80: "long __cdecl NS_VirtualRegistry::VR_Protect(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long)" ?VR_Protect@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@KPEBEK@Z
0x1800306E8: "VFAT\ReadsSec" ??_C@_1BM@DGOHNLGO@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAR?$AAe?$AAa?$AAd?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x180037FD0: "HKLM\SYSTEM\ControlSet001\Contro" ??_C@_1GC@CBFIBFKM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA1?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x180031680: "System\CurrentControlSet\Service" ??_C@_1FA@JKNAADAE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18004B78C: "int NS_DXMaximizedWindowedMode::g_bSubshimUsed" ?g_bSubshimUsed@NS_DXMaximizedWindowedMode@@3HA
0x180040220: "NS_WRPRegDeleteKey::InitializeHo" ??_C@_0CJ@KEPKDCNH@NS_WRPRegDeleteKey?3?3InitializeHo@
0x180038830: "Interface\{00000000-0000-0000-C0" ??_C@_1IO@EOGDEFLC@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002EC40: "LCMapStringA" ??_C@_0N@CNFOJGGE@LCMapStringA?$AA@
0x18002DB40: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1KG@EDLLHAMO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x1800402A0: "CreateWindowExW" ??_C@_0BA@MHOOFEGE@CreateWindowExW?$AA@
0x18003E2D8: "%08lx=QueryInfoW()" ??_C@_0BD@DBPIOOMI@?$CF08lx?$DNQueryInfoW?$CI?$CJ?$AA@
0x180001440: "struct tagHOOKAPI * __ptr64 __cdecl NS_WRPMitigation::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WRPMitigation@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002F260: "Unknown" ??_C@_07NBCGADJA@Unknown?$AA@
0x180037AC8: ".aiff" ??_C@_1M@EEELKBDA@?$AA?4?$AAa?$AAi?$AAf?$AAf?$AA?$AA@
0x18002D158: "PowerPoint.Application.16" ??_C@_1DE@CIPHFIDB@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x18003E870: "NS_VirtualRegistry2::CVirtualKey" ??_C@_0CL@EDEGGCIE@NS_VirtualRegistry2?3?3CVirtualKey@
0x18002A228: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18003DE10: "Adding Redirector: %S -> %S" ??_C@_0BP@PEJCCGHF@Adding?5Redirector?3?5?5?$CFS?5?9?$DO?6?5?5?$CFS?$AA@
0x180004760: "__cdecl _chkstk" __chkstk
0x18002CDD0: "ole32.dll" ??_C@_1BE@DPMNNGMJ@?$AAo?$AAl?$AAe?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003F4C0: "NS_VistaSP2VersionLie::APIHook_G" ??_C@_0CN@FPKGPDIC@NS_VistaSP2VersionLie?3?3APIHook_G@
0x180037820: "Indeo� video custom control ty" ??_C@_1FG@HIGOBHCG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?5?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAt?$AAy@
0x18001DE40: "long __cdecl NS_VirtualRegistry2::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_VirtualRegistry2@@YAJPEAUHKEY__@@@Z
0x18003E3D0: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DB@LMDEAEML@NS_VirtualRegistry?3?3CVirtualRegi@
0x18004B754: "int NS_WsExCompositedShim::g_bSubshimUsed" ?g_bSubshimUsed@NS_WsExCompositedShim@@3HA
0x18003B220: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1IC@KCKAIIKD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x18002A540: "__cdecl _imp_RtlFormatCurrentUserKeyPath" __imp_RtlFormatCurrentUserKeyPath
0x18048CD58: "unsigned long NS_FaultTolerantHeap::FthClientDebug" ?FthClientDebug@NS_FaultTolerantHeap@@3KA
0x18002EF48: "FTH WER: process name: %ws " ??_C@_0BN@DKJFAHCM@FTH?5WER?3?5process?5name?3?5?$CFws?5?6?$AA@
0x180030498: "HKDD\PerfStats\StartStat" ??_C@_1DC@DANKHGMJ@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAt?$AAa?$AAt?$AA?$AA@
0x180026FDC: "public: void __cdecl ShimLib::CString::TrimRight(void) __ptr64" ?TrimRight@CString@ShimLib@@QEAAXXZ
0x18002F798: "Client did not find server liste" ??_C@_0DG@LEBLLKNK@Client?5did?5not?5find?5server?5liste@
0x18003DF20: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0CP@GGFFBACG@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003D098: "%s\" ??_C@_17CHCGIDNB@?$AA?$CF?$AAs?$AA?2?$AA?$AA@
0x180003020: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x1800403A0: "Failed to get tweaker mutex name" ??_C@_0CC@PHAKDHKJ@Failed?5to?5get?5tweaker?5mutex?5name@
0x18001F150: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x180024418: "bool __cdecl NS_WRPMitigation::IsExeManifested(void)" ?IsExeManifested@NS_WRPMitigation@@YA_NXZ
0x180006B10: "int __cdecl NS_EmulateSortingWindows61::APIHook_GetNLSVersionEx(unsigned long,unsigned short const * __ptr64,struct _nlsversioninfoex * __ptr64)" ?APIHook_GetNLSVersionEx@NS_EmulateSortingWindows61@@YAHKPEBGPEAU_nlsversioninfoex@@@Z
0x1800336C8: "NS_VirtualRegistry::Delphi5SetVa" ??_C@_0CE@PBMFDHPE@NS_VirtualRegistry?3?3Delphi5SetVa@
0x180037B28: ".m3u" ??_C@_19NIAADECN@?$AA?4?$AAm?$AA3?$AAu?$AA?$AA@
0x18003B2B0: "Microsoft.Office.Interop.PowerPo" ??_C@_1NA@OKMIBGHN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo@
0x18004BDB0: "int NS_Win81RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win81RTMVersionLie@@3HA
0x180002790: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKPEAGKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180032E60: "HKLM\Software\Microsoft\MSN" ??_C@_1DI@FNKEKAFP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x1800304D0: "KERNEL\CPUUsage" ??_C@_1CA@NHJAKFMN@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAC?$AAP?$AAU?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18003A080: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1KO@KCNNKFFM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002F188: "NS_FaultTolerantHeap::FthDelayFr" ??_C@_0CO@IFLHALCJ@NS_FaultTolerantHeap?3?3FthDelayFr@
0x180032768: "BuildMSI Failed to find keys" ??_C@_0BN@NAGOJIJO@BuildMSI?5Failed?5to?5find?5keys?$AA@
0x180036330: "HKCR\CLSID\{1F73E9B1-8C3A-11D0-A" ??_C@_1GE@GNKGFDMK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002A138: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x180010180: "void __cdecl NS_VirtualRegistry::BuildPrincetonACT(char const * __ptr64)" ?BuildPrincetonACT@NS_VirtualRegistry@@YAXPEBD@Z
0x18001E510: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long)" ?APIHook_RegEnumKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADK@Z
0x1800260B0: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator+=(unsigned short const * __ptr64) __ptr64" ??YCString@ShimLib@@QEAAAEBV01@PEBG@Z
0x18003E958: "Virtual value [%ws] being enumer" ??_C@_0CG@HCPKIBLB@Virtual?5value?5?$FL?$CFws?$FN?5being?5enumer@
0x18002D720: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1JE@DAEDEGAA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180020CEC: StringCbCopyExW
0x18001B594: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CloseKey(struct HKEY__ * __ptr64) __ptr64" ?CloseKey@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@@Z
0x18000AD38: "long __cdecl NS_VirtualRegistry::AddCodecValues(struct NS_VirtualRegistry::CODEC_VALUE * __ptr64,unsigned int)" ?AddCodecValues@NS_VirtualRegistry@@YAJPEAUCODEC_VALUE@1@I@Z
0x180031AC8: "Added FILEOPENBOGUSCTRLID value " ??_C@_0CL@PMAKEHDH@Added?5FILEOPENBOGUSCTRLID?5value?5@
0x180020CC0: StringCbCopyExA
0x18003A420: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LO@IGFEOMHH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180016CFC: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEADPEAK2PEAE2@Z
0x18002B058: "WRPRegDeleteKey" ??_C@_1CA@PIDBHHIO@?$AAW?$AAR?$AAP?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
0x18048BF08: "long * NS_FaultTolerantHeap::FthHeapLocksCounter" ?FthHeapLocksCounter@NS_FaultTolerantHeap@@3PAJA
0x180014270: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?APIHook_RegEnumKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGK@Z
0x1800122FC: "int __cdecl NS_VirtualRegistry::GetStringSID(unsigned short * __ptr64)" ?GetStringSID@NS_VirtualRegistry@@YAHPEAG@Z
0x180023FE0: "int __cdecl NS_WRPMitigation::APIHook__lcreat(char const * __ptr64,int)" ?APIHook__lcreat@NS_WRPMitigation@@YAHPEBDH@Z
0x18003CF80: "HKLM\%s\COMMON\InstallRoot" ??_C@_1DG@KJABMIGC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AAC?$AAO?$AAM?$AAM?$AAO?$AAN?$AA?2?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18003CFD8: "%sDesktop_" ??_C@_1BG@KHHNBBEB@?$AA?$CF?$AAs?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA_?$AA?$AA@
0x18002EEC8: "0.0.0.0" ??_C@_1BA@OJFOBGOM@?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x180030218: "[Hasbro hack] Ignoring fix - no " ??_C@_0CN@OKKAHOFB@?$FLHasbro?5hack?$FN?5Ignoring?5fix?5?9?5no?5@
0x18002AD18: "SetFileSecurityW" ??_C@_0BB@OAMPIGBG@SetFileSecurityW?$AA@
0x1800393B8: "7.0000" ??_C@_1O@IDAEOOD@?$AA7?$AA?4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x180032B38: "MSA2001: return from RegQueryVal" ??_C@_0DO@FFECNNOP@MSA2001?3?5return?5from?5RegQueryVal@
0x18002EA98: "d3d9.dll" ??_C@_1BC@LLFFMIOK@?$AAd?$AA3?$AAd?$AA9?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003DB08: "HKDD" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x18002D068: "Bitness" ??_C@_1BA@BMEEEHNA@?$AAB?$AAi?$AAt?$AAn?$AAe?$AAs?$AAs?$AA?$AA@
0x18003BEA0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LM@KLINNHJM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002CD20: "Word" ??_C@_19LMNIHEDB@?$AAW?$AAo?$AAr?$AAd?$AA?$AA@
0x18002FC30: "HKLM\Software\Microsoft\Windows\" ??_C@_1FO@OKMMBCLN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x1800351F0: "HKCR\CLSID\{87CA6F02-49E4-11CF-A" ??_C@_1IC@FOBAHKDK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA2?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18003DC70: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0CL@MKCODDKE@NS_VirtualRegistry?3?3CVirtualRegi@
0x180002AA0: "public: virtual long __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::Visit(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Visit@PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAJPEAVPathTreeNode@3@0PEAUPathTreeNodeTraversal@3@@Z
0x18002A220: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18002EE78: "FTH WER: process path: %ws " ??_C@_0BN@PFEIHELL@FTH?5WER?3?5process?5path?3?5?$CFws?5?6?$AA@
0x180037730: "HKCR\Interface\{665A4449-D905-11" ??_C@_1HM@EJGGEOIE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003F640: "NS_Win7RTMVersionLie::APIHook_Rt" ??_C@_0CM@PNILPALJ@NS_Win7RTMVersionLie?3?3APIHook_Rt@
0x18002B660: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1GO@PIAMDPFJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180009C60: "unsigned char __cdecl NS_FaultTolerantHeap::FthValidateHeap(void * __ptr64,unsigned long,void * __ptr64)" ?FthValidateHeap@NS_FaultTolerantHeap@@YAEPEAXK0@Z
0x180025E94: "unsigned short * __ptr64 __cdecl ShimLib::ToUnicode(char const * __ptr64)" ?ToUnicode@ShimLib@@YAPEAGPEBD@Z
0x180024CB0: "int __cdecl NS_WRPMitigation::MySfpIsHandleProtected(void * __ptr64)" ?MySfpIsHandleProtected@NS_WRPMitigation@@YAHPEAX@Z
0x180025A64: "struct tagHOOKAPI * __ptr64 __cdecl NS_WsExCompositedShim::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WsExCompositedShim@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18004BEA8: "int (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnVerQueryValueW)(void const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned int * __ptr64)" ?pfnVerQueryValueW@NS_FaultTolerantHeap@@3P6AHPEBXPEBGPEAPEAXPEAI@ZEA
0x180010B80: "void __cdecl NS_VirtualRegistry::BuildVistaSP2Lie(char const * __ptr64)" ?BuildVistaSP2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003E320: "%08lx=SetValueW()" ??_C@_0BC@OOCNKGKA@?$CF08lx?$DNSetValueW?$CI?$CJ?$AA@
0x180033F00: "HKCR\CLSID\{083863F1-70DE-11D0-B" ??_C@_1ME@GPGJIDJJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18003E788: "RegEnumKeyExW" ??_C@_0O@NHPJLAPM@RegEnumKeyExW?$AA@
0x18003DA58: "[TrimSlashW] Removed slash from " ??_C@_0CO@KCPCOJFB@?$FLTrimSlashW?$FN?5Removed?5slash?5from?5@
0x18004B710: "unsigned long NS_FaultTolerantHeap::FthSpecialHeapsCounter" ?FthSpecialHeapsCounter@NS_FaultTolerantHeap@@3KA
0x1800301A8: "[Hasbro hack] Returning path %S" ??_C@_0CA@NKGPFGOE@?$FLHasbro?5hack?$FN?5Returning?5path?5?$CFS?$AA@
0x180013798: "public: struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::OPENKEY::AddEnumEntries<struct NS_VirtualRegistry::VIRTUALKEY>(struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,long (__cdecl*)(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)) __ptr64" ??$AddEnumEntries@UVIRTUALKEY@NS_VirtualRegistry@@@OPENKEY@NS_VirtualRegistry@@QEAAPEAUENUMENTRY@1@PEAUVIRTUALKEY@1@P6AJPEAUHKEY__@@KPEAGPEAKPEAX444@Z@Z
0x1800138B4: "public: struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::OPENKEY::AddEnumEntries<struct NS_VirtualRegistry::VIRTUALVAL>(struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,long (__cdecl*)(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)) __ptr64" ??$AddEnumEntries@UVIRTUALVAL@NS_VirtualRegistry@@@OPENKEY@NS_VirtualRegistry@@QEAAPEAUENUMENTRY@1@PEAUVIRTUALVAL@1@P6AJPEAUHKEY__@@KPEAGPEAKPEAX444@Z@Z
0x18002CBA0: "Publisher" ??_C@_1BE@CCMLAJPM@?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x18002A5C0: "__cdecl _guard_fids_table" __guard_fids_table
0x180011360: "void __cdecl NS_VirtualRegistry::BuildWinSrv2012RTMLie(char const * __ptr64)" ?BuildWinSrv2012RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18048CDB8: "unsigned short * __ptr64 __ptr64 NS_Win7RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win7RTMVersionLie@@3PEAGEA
0x18002D480: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1JC@KKKNGCKD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180033D58: "%s %llu %llu " ??_C@_1BM@DIBDHMGB@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$AA@
0x18002CCD0: "{00021A20-0000-0000-C000-0000000" ??_C@_1EO@CMFMHBLG@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA1?$AAA?$AA2?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1800398C8: "9.11.10240.0" ??_C@_1BK@JDNMLCKN@?$AA9?$AA?4?$AA1?$AA1?$AA?4?$AA1?$AA0?$AA2?$AA4?$AA0?$AA?4?$AA0?$AA?$AA@
0x18002F6C0: "\Device\NamedPipe\ProtectedPrefi" ??_C@_1GO@PFMCBDPG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAa?$AAm?$AAe?$AAd?$AAP?$AAi?$AAp?$AAe?$AA?2?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAP?$AAr?$AAe?$AAf?$AAi@
0x18002E988: "FaultTolerantHeap" ??_C@_0BC@PMOLEEFI@FaultTolerantHeap?$AA@
0x18003ED80: "Failed to get entry root %d " ??_C@_0BN@BOFNGLIB@Failed?5to?5get?5entry?5root?5?$CFd?6?$AA@
0x18002A448: msvcrt_NULL_THUNK_DATA
0x1800384E0: "CLSID\{7CE551EA-F85C-11CE-9059-0" ??_C@_1FK@HICBMBJL@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA7?$AAC?$AAE?$AA5?$AA5?$AA1?$AAE?$AAA?$AA?9?$AAF?$AA8?$AA5?$AAC?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x18002733C: "protected: int __cdecl ShimLib::CStringToken::GetToken(class ShimLib::CString & __ptr64,int & __ptr64)const __ptr64" ?GetToken@CStringToken@ShimLib@@IEBAHAEAVCString@2@AEAH@Z
0x180028040: "__cdecl load_config_used" _load_config_used
0x1800303A0: "PCI\" ??_C@_19KLPPDPHB@?$AAP?$AAC?$AAI?$AA?2?$AA?$AA@
0x1800494E8: "char * __ptr64 __ptr64 NS_WsExCompositedShim::g_szCommandLine" ?g_szCommandLine@NS_WsExCompositedShim@@3PEADEA
0x18003D050: "HKCU\%s\%s" ??_C@_1BG@HNCKHNHL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18002D080: "HKLM\SOFTWARE\WOW6432Node\Micros" ??_C@_1HA@HLPGFHBF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x180013E60: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18003E388: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DB@KAKMLBBM@NS_VirtualRegistry?3?3CVirtualRegi@
0x180031828: "ServiceName" ??_C@_1BI@BGAAOEPC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180021590: "int __cdecl NS_VistaSP2VersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaSP2VersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180021680: "int __cdecl NS_VistaSP2VersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaSP2VersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180024AC8: "int __cdecl NS_WRPMitigation::MySfpIsFileProtectedA(char const * __ptr64)" ?MySfpIsFileProtectedA@NS_WRPMitigation@@YAHPEBD@Z
0x180023130: "int __cdecl NS_WRPMitigation::APIHook_CopyFileExA(char const * __ptr64,char const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_CopyFileExA@NS_WRPMitigation@@YAHPEBD0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x18002B118: "VistaSP1VersionLie" ??_C@_1CG@JBGJCJJB@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAS?$AAP?$AA1?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x1800112A0: "void __cdecl NS_VirtualRegistry::BuildWinSrv08R2RTMLie(char const * __ptr64)" ?BuildWinSrv08R2RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18048CE00: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib
0x18002E080: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1JG@FBCENGHN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x18002CFD0: "HKCR\Outlook.Application" ??_C@_1DC@GKDCJCLP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180045090: "struct NS_VirtualRegistry::VENTRY * NS_VirtualRegistry::g_VList" ?g_VList@NS_VirtualRegistry@@3PAUVENTRY@1@A
0x180033388: "[DSCACHEPOSITIONS] No devices sp" ??_C@_0CJ@OEMGEMJI@?$FLDSCACHEPOSITIONS?$FN?5No?5devices?5sp@
0x18000C110: "void __cdecl NS_VirtualRegistry::BuildCookiePath(char const * __ptr64)" ?BuildCookiePath@NS_VirtualRegistry@@YAXPEBD@Z
0x18003E448: "[DeleteKeyW] subkey %S was delet" ??_C@_0CE@MCGAEAPG@?$FLDeleteKeyW?$FN?5subkey?5?$CFS?5was?5delet@
0x180032A20: "HKLM\SOFTWARE\Microsoft\Direct3D" ??_C@_1EC@PFIAGJFN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x18004B7A8: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthDelayFreeQueueLock" ?FthDelayFreeQueueLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x180027D2C: "public: long __cdecl ShimLib::PathTreeNode::Traverse(class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Traverse@PathTreeNode@ShimLib@@QEAAJPEAV12@PEAUPathTreeNodeTraversal@2@@Z
0x180015070: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x18004BED8: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportSubmit)(void * __ptr64,enum _WER_CONSENT,unsigned long,enum _WER_SUBMIT_RESULT * __ptr64)" ?pfnWerReportSubmit@NS_FaultTolerantHeap@@3P6AJPEAXW4_WER_CONSENT@@KPEAW4_WER_SUBMIT_RESULT@@@ZEA
0x18002567C: "int __cdecl NS_WRPRegDeleteKey::MySfpIsKeyOrAnySubkeyProtected(struct HKEY__ * __ptr64)" ?MySfpIsKeyOrAnySubkeyProtected@NS_WRPRegDeleteKey@@YAHPEAUHKEY__@@@Z
0x18002CA20: "outlook.exe" ??_C@_1BI@KLKHDLCC@?$AAo?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002E190: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1IE@FHJEOLGP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180034AA0: "wheel" ??_C@_1M@KHAKGNOC@?$AAw?$AAh?$AAe?$AAe?$AAl?$AA?$AA@
0x180005BD0: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_CompareStringEx@NS_EmulateSortingVista@@YAHPEBGK0H0HPEAU_nlsversioninfo@@PEAX_J@Z
0x18002EDD0: "GetModuleBaseNameW" ??_C@_0BD@PABDJIFP@GetModuleBaseNameW?$AA@
0x18002B318: "NS_FaultTolerantHeap::FthEncodeP" ??_C@_0CG@KJLHKOI@NS_FaultTolerantHeap?3?3FthEncodeP@
0x1800185EC: "int __cdecl NS_VirtualRegistry::NotifyFn(unsigned long)" ?NotifyFn@NS_VirtualRegistry@@YAHK@Z
0x18002E9F8: "VistaSP2VersionLie" ??_C@_0BD@IAGIOPPM@VistaSP2VersionLie?$AA@
0x18003F978: "NS_WRPMitigation::MySfpIsFilePro" ??_C@_0CI@LACDMHMM@NS_WRPMitigation?3?3MySfpIsFilePro@
0x18001E6D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x180032AD8: "MSA2001: RegOpenKeyExW failed" ??_C@_0BO@INJFAGMN@MSA2001?3?5RegOpenKeyExW?5failed?$AA@
0x18002B340: "bogus address: %p, %p " ??_C@_0BH@EEMOFDAN@bogus?5address?3?5?$CFp?0?5?$CFp?6?$AA@
0x180039BB0: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1PI@BFIBLHOP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18003D7B0: "DSAPPHACKID_DISABLEDEVICE" ??_C@_1DE@ODNNDCHE@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAD?$AAI?$AAS?$AAA?$AAB?$AAL?$AAE?$AAD?$AAE?$AAV?$AAI?$AAC?$AAE?$AA?$AA@
0x18003AA70: "HKCR\Interface\{00063001-0000-00" ??_C@_1GM@KHOHAHEK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x18003CF60: "STARTUP" ??_C@_1BA@JMHHEKIK@?$AAS?$AAT?$AAA?$AAR?$AAT?$AAU?$AAP?$AA?$AA@
0x18002EDE8: "wer.dll" ??_C@_1BA@PKCHBLFB@?$AAw?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180016420: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::DeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGKK@Z
0x180036020: "ir50_32.dll" ??_C@_1BI@NCNKOJEH@?$AAi?$AAr?$AA5?$AA0?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014640: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x18048BF00: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthFreeTrackerLock" ?FthFreeTrackerLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x18003E7F8: "RegDeleteKeyExW" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x18003CB10: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LK@IOPAAICA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002ED30: "GetNLSVersionEx" ??_C@_0BA@DODLENAI@GetNLSVersionEx?$AA@
0x180005CE0: "int __cdecl NS_EmulateSortingVista::APIHook_FindNLSString(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64)" ?APIHook_FindNLSString@NS_EmulateSortingVista@@YAHKKPEBGH0HPEAH@Z
0x18002D190: "PowerPoint.Application" ??_C@_1CO@FMNEEFDD@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002B4E0: "NS_FaultTolerantHeap::FthPipeWri" ??_C@_0CK@KDJENALF@NS_FaultTolerantHeap?3?3FthPipeWri@
0x180030198: "*.PAL" ??_C@_1M@GHFIPEOA@?$AA?$CK?$AA?4?$AAP?$AAA?$AAL?$AA?$AA@
0x1800334F0: "NS_VirtualRegistry::BuildDSSmoot" ??_C@_0CK@HFEIMBLN@NS_VirtualRegistry?3?3BuildDSSmoot@
0x18002BA50: "\Registry\HKEY_PERFORMANCE_NLSTE" ??_C@_1EG@GKIGABNO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAN?$AAL?$AAS?$AAT?$AAE@
0x180036428: "%windir%\system32\ir50_32.dll" ??_C@_1DM@OJJDEAOF@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAr?$AA5?$AA0?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180035F90: "Scalability" ??_C@_1BI@FKPFIBJO@?$AAS?$AAc?$AAa?$AAl?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x18002FB60: "NS_VerifyVersionInfoLite::APIHoo" ??_C@_0DF@NLGOAEBI@NS_VerifyVersionInfoLite?3?3APIHoo@
0x18004BB90: "class NS_VirtualRegistry2::CVirtualRegistry NS_VirtualRegistry2::VRegistry" ?VRegistry@NS_VirtualRegistry2@@3VCVirtualRegistry@1@A
0x18003CE40: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GI@CAEDIAPP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003D650: "Unable to create DirectSound app" ??_C@_0CE@JLCBIDPL@Unable?5to?5create?5DirectSound?5app@
0x18000CB50: "void __cdecl NS_VirtualRegistry::BuildDSReturnWritePos(char const * __ptr64)" ?BuildDSReturnWritePos@NS_VirtualRegistry@@YAXPEBD@Z
0x1800398F0: "HKLM\Software\Wow6432Node\Micros" ??_C@_1GM@MJHNPFAJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x18002EEF0: "%08X" ??_C@_19NGFMKOON@?$AA?$CF?$AA0?$AA8?$AAX?$AA?$AA@
0x18000F9B0: "void __cdecl NS_VirtualRegistry::BuildNortonAntiVirus(char const * __ptr64)" ?BuildNortonAntiVirus@NS_VirtualRegistry@@YAXPEBD@Z
0x180030790: "VMM\cPageIns" ??_C@_1BK@OBFPBIKP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAI?$AAn?$AAs?$AA?$AA@
0x180049528: "char * __ptr64 __ptr64 NS_VirtualRegistry2::g_szCommandLine" ?g_szCommandLine@NS_VirtualRegistry2@@3PEADEA
0x1800155FC: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddProtector(unsigned short const * __ptr64) __ptr64" ?AddProtector@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x1800434CC: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18003EBF8: "Failed to add system current con" ??_C@_0CN@JAKKKLKB@Failed?5to?5add?5system?5current?5con@
0x18002B8D0: "\Registry\HKEY_CLASSES_ROOT" ??_C@_1DI@CPIHNKPM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18002A578: sfc_NULL_THUNK_DATA
0x18003E0D0: " Path=%S\%S" ??_C@_0P@OBLFGOGE@?5?5?5?5Path?$DN?$CFS?2?$CFS?$AA@
0x18004AD50: "unsigned __int64 NS_VistaRTMVersionLie::g_stShimId" ?g_stShimId@NS_VistaRTMVersionLie@@3_KA
0x18003D638: "Expanded Value=%ls " ??_C@_0BE@OILCEFAF@Expanded?5Value?$DN?$CFls?6?$AA@
0x18003E178: " Result=%S" ??_C@_0O@CHFMDJJF@?5?5?5?5Result?$DN?$CFS?$AA@
0x180016308: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::DeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDKK@Z
0x18003F9A0: "Patched %S to ignore WRP" ??_C@_0BJ@NJMMKHNH@Patched?5?$CFS?5to?5ignore?5WRP?$AA@
0x18003DAC8: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x180031C38: "NS_VirtualRegistry::BuildDXDiag" ??_C@_0CA@NFEDIAHJ@NS_VirtualRegistry?3?3BuildDXDiag?$AA@
0x18002A110: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x18003EC98: "Failed to get user path: %08x " ??_C@_0BP@MIKJCEIP@Failed?5to?5get?5user?5path?3?5?$CF08x?6?$AA@
0x18004B76C: "int NS_VistaSP2VersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaSP2VersionLie@@3HA
0x18002EC00: "CompareStringW" ??_C@_0P@EDLJBKEM@CompareStringW?$AA@
0x18003AC20: "HKCR\Interface\{00063001-0000-00" ??_C@_1HM@EGCMIEJB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x18002A418: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18003F270: "NS_VistaRTMVersionLie::APIHook_G" ??_C@_0CN@BKJMKLAE@NS_VistaRTMVersionLie?3?3APIHook_G@
0x180035FE8: "NS_VirtualRegistry::BuildIndeo4" ??_C@_0CA@HGKILGCI@NS_VirtualRegistry?3?3BuildIndeo4?$AA@
0x18003E2A0: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DB@IMGABHBG@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003BDE0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LO@PGBEFKNM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18001E0A0: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180023EF0: "unsigned long __cdecl NS_WRPMitigation::APIHook_VerInstallFileW(unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned int * __ptr64)" ?APIHook_VerInstallFileW@NS_WRPMitigation@@YAKKPEBG0000PEAGPEAI@Z
0x18003DCE8: "Redirecting: %S -> %S" ??_C@_0BG@IOPCNDPD@Redirecting?3?5?$CFS?5?9?$DO?5?$CFS?$AA@
0x180006F70: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_LCMapStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0HPEAGHPEAU_nlsversioninfo@@PEAX_J@Z
0x18002AE08: "RegCreateKeyA" ??_C@_0O@MBBDACGE@RegCreateKeyA?$AA@
0x18002A478: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x18004B958: "struct _RTL_CRITICAL_SECTION NS_VirtualRegistry2::csRegCriticalSection" ?csRegCriticalSection@NS_VirtualRegistry2@@3U_RTL_CRITICAL_SECTION@@A
0x18003EE28: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0CO@JNDKNNHO@NS_VirtualRegistry2?3?3CVirtualReg@
0x18003F6D0: "NS_Win8RTMVersionLie::APIHook_Ge" ??_C@_0CM@GNEDEPCH@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x18002AF70: "ManifestCheck" ??_C@_0O@PBIDEDBP@ManifestCheck?$AA@
0x1800224C0: "long __cdecl NS_Win8RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win8RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180014780: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x1800363A0: "HKCR\CLSID\{1F73E9B1-8C3A-11D0-A" ??_C@_1IC@MOIKFBBN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180039F38: "LocalServer" ??_C@_1BI@KDOCJHPE@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x18002EC70: "IsNLSDefinedString" ??_C@_0BD@JKILLKFO@IsNLSDefinedString?$AA@
0x1800121D8: "unsigned long __cdecl NS_VirtualRegistry::GetCentennialAppFolder(class ShimLib::CString & __ptr64,class ShimLib::CString * __ptr64)" ?GetCentennialAppFolder@NS_VirtualRegistry@@YAKAEAVCString@ShimLib@@PEAV23@@Z
0x18002F860: "Client full path: [%ws] " ??_C@_0BJ@EJIBOADM@Client?5full?5path?3?5?$FL?$CFws?$FN?6?$AA@
0x18003F3C0: "RtlGetVersion" ??_C@_0O@JGECDCHJ@RtlGetVersion?$AA@
0x18002EB50: "Direct3D8EnableMaximizedWindowed" ??_C@_0CJ@ONEJGGPL@Direct3D8EnableMaximizedWindowed@
0x18002A560: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000972C: "int __cdecl NS_FaultTolerantHeap::FthInitializeWerEntryPoints(void)" ?FthInitializeWerEntryPoints@NS_FaultTolerantHeap@@YAHXZ
0x18003DD48: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DF@GGEKFEKK@NS_VirtualRegistry?3?3CVirtualRegi@
0x18002A010: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180035720: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1BCE@CEGKOHPF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18002CF78: "Excel.Application.16" ??_C@_1CK@OPLFJCHM@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x18003C980: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LM@FOGNBDJC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180022C60: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win81RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win81RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18004B770: "int NS_VistaSP1VersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaSP1VersionLie@@3HA
0x180011240: "void __cdecl NS_VirtualRegistry::BuildWinSrv03Lie(char const * __ptr64)" ?BuildWinSrv03Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800389E0: "Interface\{0000010E-0000-0000-C0" ??_C@_1IO@HKPOMDCH@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AAE?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002A528: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x18004BED0: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportSetParameter)(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?pfnWerReportSetParameter@NS_FaultTolerantHeap@@3P6AJPEAXKPEBG1@ZEA
0x18002B0A0: "Win8RTMVersionLie" ??_C@_1CE@LJOHDEFA@?$AAW?$AAi?$AAn?$AA8?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x18002AD48: "RegDeleteValueW" ??_C@_0BA@GJPNJIAM@RegDeleteValueW?$AA@
0x18000C5E0: "void __cdecl NS_VirtualRegistry::BuildDSDevAccel(char const * __ptr64)" ?BuildDSDevAccel@NS_VirtualRegistry@@YAXPEBD@Z
0x18003DEF8: "[OpenKeyW] Removing volatile fla" ??_C@_0CC@LIKBMMID@?$FLOpenKeyW?$FN?5Removing?5volatile?5fla@
0x18002AEF0: "DeleteFileA" ??_C@_0M@CBNKJACB@DeleteFileA?$AA@
0x18000410C: "void __cdecl NS_FaultTolerantHeap::FthClientMessage(char * __ptr64,int,char * __ptr64,...)" ?FthClientMessage@NS_FaultTolerantHeap@@YAXPEADH0ZZ
0x1800143A0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18004B740: "void * __ptr64 __ptr64 NS_WRPMitigation::g_TISid" ?g_TISid@NS_WRPMitigation@@3PEAXEA
0x1800213EC: "int __cdecl NS_VistaSP1VersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaSP1VersionLie@@YAHK@Z
0x18004B778: "int NS_VirtualRegistry2::g_bSubshimUsed" ?g_bSubshimUsed@NS_VirtualRegistry2@@3HA
0x18002F420: "NS_FaultTolerantHeap::FthClientI" ??_C@_0CK@LACFPBJC@NS_FaultTolerantHeap?3?3FthClientI@
0x1800305D0: "VCACHE\Hits" ??_C@_1BI@EMOAABBH@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAH?$AAi?$AAt?$AAs?$AA?$AA@
0x180011B50: "void __cdecl NS_VirtualRegistry::BuildiRCPlayer(char const * __ptr64)" ?BuildiRCPlayer@NS_VirtualRegistry@@YAXPEBD@Z
0x180034E30: "Output" ??_C@_1O@GJMACMBA@?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AA?$AA@
0x180021A84: "int __cdecl NS_VistaSP2VersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaSP2VersionLie@@YAHK@Z
0x180023890: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x18002A4F8: "__cdecl _imp_RtlMultiByteToUnicodeN" __imp_RtlMultiByteToUnicodeN
0x18001F220: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAGPEAJ@Z
0x18004AD08: "unsigned __int64 NS_VerifyVersionInfoLite::g_stShimId" ?g_stShimId@NS_VerifyVersionInfoLite@@3_KA
0x18003C490: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1JK@NBELDENO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18002A198: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x1800347A0: "HKCR\CLSID\{C83B5610-E0DF-11D0-9" ??_C@_1GE@EANOJILN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA8?$AA3?$AAB?$AA5?$AA6?$AA1?$AA0?$AA?9?$AAE?$AA0?$AAD?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180037C90: "HKCU\Software\Classes\MIME\Datab" ??_C@_1JG@JFHGNHJB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x18003E6E0: "RegQueryValueExW" ??_C@_0BB@GLNAEDBD@RegQueryValueExW?$AA@
0x18003F400: "NS_VistaSP1VersionLie::APIHook_G" ??_C@_0CN@MIONHIEM@NS_VistaSP1VersionLie?3?3APIHook_G@
0x180027570: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAPEAXI@Z
0x18003E5E8: "Adding command line:" ??_C@_0BF@MJPLHALC@Adding?5command?5line?3?$AA@
0x180032208: "NS_VirtualRegistry::BuildJoystic" ??_C@_0CC@LLDBFIJB@NS_VirtualRegistry?3?3BuildJoystic@
0x180049520: "char * __ptr64 __ptr64 NS_VistaRTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaRTMVersionLie@@3PEADEA
0x18000C1B0: "void __cdecl NS_VirtualRegistry::BuildCurrentConfig(char const * __ptr64)" ?BuildCurrentConfig@NS_VirtualRegistry@@YAXPEBD@Z
0x18004BE30: "int NS_EmulateSortingVista::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_EmulateSortingVista@@3HA
0x18002A130: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x180033DA0: "HKLM\SYSTEM\CurrentControlSet\Co" ??_C@_1JA@KILLPOCI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x1800358C0: "IVI Decode Sequence Property Pag" ??_C@_1EE@MBGFPGA@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg@
0x18000FE60: "void __cdecl NS_VirtualRegistry::BuildPageMaker65(char const * __ptr64)" ?BuildPageMaker65@NS_VirtualRegistry@@YAXPEBD@Z
0x180033628: "NS_VirtualRegistry::BuildDSDisab" ??_C@_0CJ@JDNNINCO@NS_VirtualRegistry?3?3BuildDSDisab@
0x18002E920: "DXMaximizedWindowedHwndOverride" ??_C@_0CA@LACMFOOE@DXMaximizedWindowedHwndOverride?$AA@
0x1800494F0: "char * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_szCommandLine" ?g_szCommandLine@NS_WRPRegDeleteKey@@3PEADEA
0x180038E20: "HKLM\software\microsoft\IE Setup" ??_C@_1EO@MMDALAAP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAE?$AA?5?$AAS?$AAe?$AAt?$AAu?$AAp@
0x18001B328: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::AddValue(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?AddValue@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGKKPEAEK@Z
0x18002A558: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18002B538: "Pipe write message timed out. " ??_C@_0BP@MJECMHGK@Pipe?5write?5message?5timed?5out?4?6?$AA@
0x180038380: "OLEViewer UDT Interface Viewers" ??_C@_1EA@CHNJPEMB@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAU?$AAD?$AAT?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AAs?$AA?$AA@
0x1800084C0: "void __cdecl NS_FaultTolerantHeap::APIHook_exit(unsigned int)" ?APIHook_exit@NS_FaultTolerantHeap@@YAXI@Z
0x18002F2E0: "RtlReAllocateHeap" ??_C@_0BC@KCCBPNDF@RtlReAllocateHeap?$AA@
0x180028018: "const ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`vftable'" ??_7PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@6B@
0x18002E958: "EmulateSortingVista" ??_C@_0BE@LOFMGMNA@EmulateSortingVista?$AA@
0x1800267E4: "public: void __cdecl ShimLib::CString::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@CString@ShimLib@@QEAAXPEBGZZ
0x180008430: "unsigned __int64 __cdecl NS_FaultTolerantHeap::APIHook_RtlSizeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlSizeHeap@NS_FaultTolerantHeap@@YA_KPEAXK0@Z
0x180025808: "int __cdecl NS_WRPRegDeleteKey::NotifyFn(unsigned long)" ?NotifyFn@NS_WRPRegDeleteKey@@YAHK@Z
0x18000E560: "void __cdecl NS_VirtualRegistry::BuildIE55(char const * __ptr64)" ?BuildIE55@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B960: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1IK@IEAOGEJE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18002AF20: "CopyFileExW" ??_C@_0M@HGFIGBEM@CopyFileExW?$AA@
0x180030460: "KERNEL" ??_C@_1O@IHKEHADE@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?$AA@
0x18001DB9C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::SetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x18002C910: "{73A4C9C1-D68D-11D0-98BF-00A0C90" ??_C@_1EO@OJBIMEJD@?$AA?$HL?$AA7?$AA3?$AAA?$AA4?$AAC?$AA9?$AAC?$AA1?$AA?9?$AAD?$AA6?$AA8?$AAD?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9?$AA8?$AAB?$AAF?$AA?9?$AA0?$AA0?$AAA?$AA0?$AAC?$AA9?$AA0@
0x180039460: "7600" ??_C@_19CBKJKLDO@?$AA7?$AA6?$AA0?$AA0?$AA?$AA@
0x1800338E8: "2165" ??_C@_19CMMCHKEM@?$AA2?$AA1?$AA6?$AA5?$AA?$AA@
0x18004B790: "int NS_DXMaximizedWindowedHwndOverride::g_bSubshimUsed" ?g_bSubshimUsed@NS_DXMaximizedWindowedHwndOverride@@3HA
0x18003E128: "%08lx=EnumKeyW(dwIndex=%d)" ??_C@_0BL@MJNAFBLI@?$CF08lx?$DNEnumKeyW?$CIdwIndex?$DN?$CFd?$CJ?$AA@
0x180039308: "ServerNT" ??_C@_1BC@MNKEGIPF@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAT?$AA?$AA@
0x1800399E8: "lync.exe" ??_C@_1BC@FLFHENFP@?$AAl?$AAy?$AAn?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800349D8: "msacm.iac2" ??_C@_1BG@LAGAEKDI@?$AAm?$AAs?$AAa?$AAc?$AAm?$AA?4?$AAi?$AAa?$AAc?$AA2?$AA?$AA@
0x18003DCD0: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180021770: "long __cdecl NS_VistaSP2VersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaSP2VersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x1800338F8: "Service Pack 3" ??_C@_1BO@NCBIALHD@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA3?$AA?$AA@
0x18000A184: "int __cdecl NS_FaultTolerantHeap::NotifyFn(unsigned long)" ?NotifyFn@NS_FaultTolerantHeap@@YAHK@Z
0x180002A90: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18002A0F0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180026AD8: "public: int __cdecl ShimLib::CString::Insert(int,unsigned short) __ptr64" ?Insert@CString@ShimLib@@QEAAHHG@Z
0x18002A0D0: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18003F850: "NS_Win81RTMVersionLie::Initializ" ??_C@_0CM@OGDBEJKL@NS_Win81RTMVersionLie?3?3Initializ@
0x18004BEB8: "unsigned long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetFileVersionInfoSizeW)(unsigned short const * __ptr64,unsigned long * __ptr64)" ?pfnGetFileVersionInfoSizeW@NS_FaultTolerantHeap@@3P6AKPEBGPEAK@ZEA
0x18002FF60: "HKLM\System\CurrentControlSet\Se" ??_C@_1GK@HMBNIGPC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x180033480: "[DSRETURNWRITEPOSITION] Unabled " ??_C@_0DI@LKNPIACA@?$FLDSRETURNWRITEPOSITION?$FN?5Unabled?5@
0x180035EF8: "MinViewportHeight" ??_C@_1CE@HENMFEMD@?$AAM?$AAi?$AAn?$AAV?$AAi?$AAe?$AAw?$AAp?$AAo?$AAr?$AAt?$AAH?$AAe?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x18004B728: "void * __ptr64 __ptr64 ShimLib::g_hHeapManagerMutex" ?g_hHeapManagerMutex@ShimLib@@3PEAXEA
0x1800090D4: "void __cdecl NS_FaultTolerantHeap::FthExitUserProcess(long)" ?FthExitUserProcess@NS_FaultTolerantHeap@@YAXJ@Z
0x18002A088: "__cdecl _imp_ExpandEnvironmentStringsA" __imp_ExpandEnvironmentStringsA
0x18002A3B8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18001AE30: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddEntries(struct NS_VirtualRegistry2::_KeyEntry * __ptr64,unsigned long) __ptr64" ?AddEntries@CVirtualRegistry@NS_VirtualRegistry2@@QEAAKPEAU_KeyEntry@2@K@Z
0x18003B610: "HKCR\WOW6432Node\CLSID\{91493441" ??_C@_1JM@PNCGAJI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180027464: "public: __cdecl ShimLib::PathTreeNode::~PathTreeNode(void) __ptr64" ??1PathTreeNode@ShimLib@@QEAA@XZ
0x18000EAA0: "void __cdecl NS_VirtualRegistry::BuildInetComm(char const * __ptr64)" ?BuildInetComm@NS_VirtualRegistry@@YAXPEBD@Z
0x1800331F8: "EMULATEDCAPTURE" ??_C@_1CA@KEMJKMDF@?$AAE?$AAM?$AAU?$AAL?$AAA?$AAT?$AAE?$AAD?$AAC?$AAA?$AAP?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180033B00: "PROCESSOR_IDENTIFIER" ??_C@_1CK@FCAMODLL@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAI?$AAD?$AAE?$AAN?$AAT?$AAI?$AAF?$AAI?$AAE?$AAR?$AA?$AA@
0x18002F338: "RtlWalkHeap" ??_C@_0M@PHEMKBEG@RtlWalkHeap?$AA@
0x180014D70: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAGPEAJ@Z
0x18003FA48: "OpenFile: Patched %hs to open wi" ??_C@_0DH@LKLCOIFK@OpenFile?3?5Patched?5?$CFhs?5to?5open?5wi@
0x180034110: "HKCR\CLSID\{4CB63E61-C611-11D0-8" ??_C@_1IC@FEPOIIOB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x180023D20: "int __cdecl NS_WRPMitigation::APIHook_SetFileSecurityA(char const * __ptr64,unsigned long,void * __ptr64)" ?APIHook_SetFileSecurityA@NS_WRPMitigation@@YAHPEBDKPEAX@Z
0x18003A9B0: "HKCU\SOFTWARE\Classes\Outlook.Ap" ??_C@_1FE@COAJJAPP@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp@
0x18002A460: "__cdecl _imp_RtlReportException" __imp_RtlReportException
0x180032F18: "LocationInformation" ??_C@_1CI@ONPCCHIE@?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180010D60: "void __cdecl NS_VirtualRegistry::BuildWin2kSp3Lie(char const * __ptr64)" ?BuildWin2kSp3Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002B1E0: "FaultTolerantHeap" ??_C@_1CE@GIPCGGHN@?$AAF?$AAa?$AAu?$AAl?$AAt?$AAT?$AAo?$AAl?$AAe?$AAr?$AAa?$AAn?$AAt?$AAH?$AAe?$AAa?$AAp?$AA?$AA@
0x18002AD78: "RegSetValueExW" ??_C@_0P@LIPJIDOO@RegSetValueExW?$AA@
0x18002CEC8: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x180031998: "Microsoft Windows 2000" ??_C@_1CO@DJEJPLLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA2?$AA0?$AA0?$AA0?$AA?$AA@
0x180021520: "unsigned long __cdecl NS_VistaSP2VersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaSP2VersionLie@@YAKXZ
0x18003F040: "Failed calling NtQueryKey %08x " ??_C@_0CA@PPIKMKED@Failed?5calling?5NtQueryKey?5?$CF08x?6?$AA@
0x18002AEA0: "MoveFileExW" ??_C@_0M@NIIDHDHA@MoveFileExW?$AA@
0x180013AC0: "long __cdecl NS_VirtualRegistry::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_VirtualRegistry@@YAJPEAUHKEY__@@@Z
0x18002A530: "__cdecl _imp_NtQueryObject" __imp_NtQueryObject
0x180015C6C: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckRedirect(unsigned short * __ptr64 * __ptr64) __ptr64" ?CheckRedirect@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEAPEAG@Z
0x180039530: "HKLM\SOFTWARE\Microsoft\NET Fram" ??_C@_1HA@LFPHNBKE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAN?$AAE?$AAT?$AA?5?$AAF?$AAr?$AAa?$AAm@
0x18003DE88: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DK@JAHMIPLI@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003D9A0: "\Registry\Machine" ??_C@_1CE@NMBJJGCH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x180026960: "protected: static void __cdecl ShimLib::CString::FreeData(class ShimLib::CStringData<unsigned short> * __ptr64)" ?FreeData@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x18048CDD8: "short NS_Win8RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win8RTMVersionLie@@3FA
0x18002EA68: "WsExCompositedShim" ??_C@_0BD@CBLNMCLO@WsExCompositedShim?$AA@
0x18002A238: "__cdecl _imp_GetLocaleInfoEx" __imp_GetLocaleInfoEx
0x18002ADA8: "RegSetValueA" ??_C@_0N@BIHOHIDB@RegSetValueA?$AA@
0x1800338C8: "Service Pack 2" ??_C@_1BO@GKKEGMBG@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA2?$AA?$AA@
0x1800376A0: "HKCR\Interface\{665A4449-D905-11" ??_C@_1IO@NHNBLOFE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18004BE14: "int NS_VirtualRegistry::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VirtualRegistry@@3HA
0x1800140F0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long)" ?APIHook_RegEnumKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADK@Z
0x18004BEB0: "int (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetFileVersionInfoW)(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?pfnGetFileVersionInfoW@NS_FaultTolerantHeap@@3P6AHPEBGKKPEAX@ZEA
0x180036110: "{1F73E9B1-8C3A-11D0-A3BE-00A0C92" ??_C@_1EO@DJPMIHN@?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA?$AA3?$AAB?$AAE?$AA?9?$AA0?$AA0?$AAA?$AA0?$AAC?$AA9?$AA2@
0x180038F60: "HKLM\software\microsoft\Outlook " ??_C@_1FA@JEEHIBG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x18002EFE0: "Application Name" ??_C@_1CC@PJFKMFOK@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180002A90: "public: __cdecl ShimLib::CString::CStringError::~CStringError(void) __ptr64" ??1CStringError@CString@ShimLib@@QEAA@XZ
0x180029FE0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000B170: "void __cdecl NS_VirtualRegistry::BuildArm64WOW(char const * __ptr64)" ?BuildArm64WOW@NS_VirtualRegistry@@YAXPEBD@Z
0x180033828: "AppInit_DLLs" ??_C@_1BK@LNFEFIJC@?$AAA?$AAp?$AAp?$AAI?$AAn?$AAi?$AAt?$AA_?$AAD?$AAL?$AAL?$AAs?$AA?$AA@
0x180034B00: "vidc.iv31" ??_C@_1BE@MFHLEMFM@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA3?$AA1?$AA?$AA@
0x18002D7C0: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1HC@DEGINJBP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x18000DFB0: "void __cdecl NS_VirtualRegistry::BuildFileNetWebServer(char const * __ptr64)" ?BuildFileNetWebServer@NS_VirtualRegistry@@YAXPEBD@Z
0x18001865C: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::NullTerminateRegSz(void * __ptr64,unsigned long * __ptr64,unsigned long,int,int) __ptr64" ?NullTerminateRegSz@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEAXPEAKKHH@Z
0x18001B1D4: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddSingleEntry(struct NS_VirtualRegistry2::_KeyEntry * __ptr64) __ptr64" ?AddSingleEntry@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAU_KeyEntry@2@@Z
0x18001D164: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualValue::Initialize(unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long) __ptr64" ?Initialize@CVirtualValue@NS_VirtualRegistry2@@QEAAKPEBGKPEAEKK@Z
0x180005E00: "int __cdecl NS_EmulateSortingVista::APIHook_IsNLSDefinedString(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_IsNLSDefinedString@NS_EmulateSortingVista@@YAHKKPEAU_nlsversioninfo@@PEBGH@Z
0x180030688: "VFAT\BReadsSec" ??_C@_1BO@EDFFPKLI@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAB?$AAR?$AAe?$AAa?$AAd?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x18003EB70: "\Registry\Machine\System\Control" ??_C@_1FA@KLIKPOJN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800317C8: "Failed to add Network card regis" ??_C@_0CN@MBINAGEP@Failed?5to?5add?5Network?5card?5regis@
0x180005E20: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringA(unsigned long,unsigned long,char const * __ptr64,int,char * __ptr64,int)" ?APIHook_LCMapStringA@NS_EmulateSortingVista@@YAHKKPEBDHPEADH@Z
0x18002AF40: "CopyFileW" ??_C@_09LILHBHJJ@CopyFileW?$AA@
0x18002FAF0: "Failed to map a view of the Wats" ??_C@_0DE@INCINDFG@Failed?5to?5map?5a?5view?5of?5the?5Wats@
0x180040350: "ShimLib::AcquireHeapManagerMutex" ??_C@_0CB@PCBBAOCC@ShimLib?3?3AcquireHeapManagerMutex@
0x180015828: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddValue(unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?AddValue@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBGKPEAEK@Z
0x180030A40: "HKDD\PerfStats\StopStat" ??_C@_1DA@DPEKDOFI@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAo?$AAp?$AAS?$AAt?$AAa?$AAt?$AA?$AA@
0x18002EC60: "FindNLSString" ??_C@_0O@HDAMCPNB@FindNLSString?$AA@
0x1800241D4: "long __cdecl NS_WRPMitigation::GetKeyPath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetKeyPath@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBGPEAU_UNICODE_STRING@@@Z
0x180026CB0: "protected: void __cdecl ShimLib::CString::Release(void) __ptr64" ?Release@CString@ShimLib@@IEAAXXZ
0x180033B80: "HKLM\Software\Microsoft\Outlook " ??_C@_1GC@BNBDIEOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x180034608: "%windir%\system32\iac25_32.ax" ??_C@_1DM@DLIAFDBE@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAa?$AAc?$AA2?$AA5?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x1800397B0: "HKLM\SOFTWARE\Wow6432Node\Micros" ??_C@_1IM@HMOGIDLM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x180038420: "CLSID\{57EFBF49-4A8B-11CE-870B-0" ??_C@_1FK@BFFFGKLO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA5?$AA7?$AAE?$AAF?$AAB?$AAF?$AA4?$AA9?$AA?9?$AA4?$AAA?$AA8?$AAB?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8?$AA7?$AA0?$AAB?$AA?9?$AA0@
0x18004BE00: "int NS_VistaRTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaRTMVersionLie@@3HA
0x18003F760: "NS_Win8RTMVersionLie::Initialize" ??_C@_0CL@MBKCOKCJ@NS_Win8RTMVersionLie?3?3Initialize@
0x18003C3F0: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1JM@NFILOFP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180034DE0: "AllowedMany" ??_C@_1BI@ODALFPNB@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAM?$AAa?$AAn?$AAy?$AA?$AA@
0x180032F08: "CDROM" ??_C@_1M@NEPFDHKI@?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$AA@
0x180023D90: "int __cdecl NS_WRPMitigation::APIHook_SetFileSecurityW(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?APIHook_SetFileSecurityW@NS_WRPMitigation@@YAHPEBGKPEAX@Z
0x180020E80: "unsigned long __cdecl NS_VistaSP1VersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaSP1VersionLie@@YAKXZ
0x180033970: "HKLM\System\CurrentControlSet\se" ??_C@_1HA@OPICBAEL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAs?$AAe@
0x18002A498: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18003BF60: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1MO@BLMFFEIO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180035B50: "IVI Encode Sequence Property Pag" ??_C@_1EE@CCCHLHAB@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg@
0x1800070BC: "int __cdecl NS_EmulateSortingWindows61::GetNLSVersionHelper(unsigned long,struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64,struct _nlsversioninfoex * __ptr64)" ?GetNLSVersionHelper@NS_EmulateSortingWindows61@@YAHKPEAUloc_hash_s@1@PEAU_nlsversioninfoex@@@Z
0x180039220: "HKCU\Software\Microsoft\Direct3D" ??_C@_1EC@HHLFILGI@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x18002A410: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18002E9C8: "VistaRTMVersionLie" ??_C@_0BD@ILAAHKJJ@VistaRTMVersionLie?$AA@
0x180030470: "VCACHE" ??_C@_1O@CPNLOKIN@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?$AA@
0x180033848: "CurrentBuildNumber" ??_C@_1CG@HMPMFHA@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAB?$AAu?$AAi?$AAl?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180024D2C: "int __cdecl NS_WRPMitigation::MySfpIsKeyProtectedA(struct HKEY__ * __ptr64,char const * __ptr64)" ?MySfpIsKeyProtectedA@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBD@Z
0x1800353A0: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1GE@MMGGLLBC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180011270: "void __cdecl NS_VirtualRegistry::BuildWinSrv03Sp1Lie(char const * __ptr64)" ?BuildWinSrv03Sp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002B190: "VirtualRegistry" ??_C@_1CA@LPINNANF@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?$AA@
0x18002B1B0: "VerifyVersionInfoLite" ??_C@_1CM@PEDBICPM@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAL?$AAi?$AAt?$AAe?$AA?$AA@
0x18003BD20: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LK@BJPCACAK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003D120: "HKCU\SOFTWARE\Classes\%s.Applica" ??_C@_1FA@EKDDNLAA@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x180035310: "HKCR\CLSID\{87CA6F04-49E4-11CF-A" ??_C@_1IC@DOEMLAJM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA4?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x1800402B0: "APPCOMPAT_HEAP_MANAGER_%d" ??_C@_1DE@HLPNMBB@?$AAA?$AAP?$AAP?$AAC?$AAO?$AAM?$AAP?$AAA?$AAT?$AA_?$AAH?$AAE?$AAA?$AAP?$AA_?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAR?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x18002A568: ntdll_NULL_THUNK_DATA
0x18004B720: "void * __ptr64 __ptr64 ShimLib::g_hHeapTweakerMutex" ?g_hHeapTweakerMutex@ShimLib@@3PEAXEA
0x18000A420: "void __cdecl NS_FaultTolerantHeap::FthClientError(char * __ptr64,int,char * __ptr64,...)" ?FthClientError@NS_FaultTolerantHeap@@YAXPEADH0ZZ
0x18002A350: "__cdecl _imp_memcpy" __imp_memcpy
0x1800325A8: "S-%u-" ??_C@_1M@MNENLOKP@?$AAS?$AA?9?$AA?$CF?$AAu?$AA?9?$AA?$AA@
0x18002A338: "__cdecl _imp_SE_GetShimId" __imp_SE_GetShimId
0x18002A320: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18003FA80: "NS_WRPMitigation::APIHook_OpenFi" ??_C@_0CD@FFHFLKBN@NS_WRPMitigation?3?3APIHook_OpenFi@
0x18002F060: "Error Types Mitigated" ??_C@_1CM@FPOJLEHG@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?5?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x18003C030: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LG@DKBLOBFE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002F880: "Client failed to write 'ping' me" ??_C@_0DE@OCEAAONG@Client?5failed?5to?5write?5?8ping?8?5me@
0x18003D9C8: "[TrimSlashW] Bypass \Registry\Ma" ??_C@_0CG@BAGLNAAI@?$FLTrimSlashW?$FN?5Bypass?5?2Registry?2Ma@
0x180039180: "%CommonProgramFiles%\System\wab3" ??_C@_1EM@FMLJMGCI@?$AA?$CF?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAw?$AAa?$AAb?$AA3@
0x18001DB24: "private: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueWorker(class NS_VirtualRegistry2::CVirtualValue const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueWorker@CVirtualRegistry@NS_VirtualRegistry2@@AEAAJPEBVCVirtualValue@2@PEAKPEAE1@Z
0x18002F008: "Application Version" ??_C@_1CI@LNNENDBB@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002EBC0: "NS_EmulateSortingVista::Initiali" ??_C@_0CN@KALOIIPD@NS_EmulateSortingVista?3?3Initiali@
0x18003F820: "NS_Win81RTMVersionLie::APIHook_R" ??_C@_0CN@FPCDIGKM@NS_Win81RTMVersionLie?3?3APIHook_R@
0x18002EA58: "WRPRegDeleteKey" ??_C@_0BA@GFMCBGDJ@WRPRegDeleteKey?$AA@
0x18002478C: "int __cdecl NS_WRPMitigation::IsWrpFileDescriptor(void * __ptr64)" ?IsWrpFileDescriptor@NS_WRPMitigation@@YAHPEAX@Z
0x180025010: "long __cdecl NS_WRPRegDeleteKey::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBD@Z
0x1800323B0: "HKCU\Software\Caere Corp\PageKee" ??_C@_1GE@CMPBELBG@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAa?$AAe?$AAr?$AAe?$AA?5?$AAC?$AAo?$AAr?$AAp?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAK?$AAe?$AAe@
0x180018384: "unsigned short * __ptr64 __cdecl NS_VirtualRegistry::MakePath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?MakePath@NS_VirtualRegistry@@YAPEAGPEAUHKEY__@@PEBG1@Z
0x18002B8B0: "%s\msmapi32.dll" ??_C@_1CA@DDLHACCE@?$AA?$CF?$AAs?$AA?2?$AAm?$AAs?$AAm?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003F730: "NS_Win8RTMVersionLie::APIHook_Rt" ??_C@_0CM@FMLCPHAD@NS_Win8RTMVersionLie?3?3APIHook_Rt@
0x18003D5D0: "Failed to query %S for expansion" ??_C@_0CB@LGFJNLCL@Failed?5to?5query?5?$CFS?5for?5expansion@
0x1800268B4: "public: void __cdecl ShimLib::CString::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CString@ShimLib@@QEAAXPEBGPEAD@Z
0x18001C498: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEBGPEAPEAVCVirtualKey@2@PEAPEAG@Z
0x18002F318: "RtlCreateHeap" ??_C@_0O@EKNIFGJP@RtlCreateHeap?$AA@
0x18003CF30: "HKCU\%s\COMMON\GENERAL" ??_C@_1CO@DOPIGBGK@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AA?$CF?$AAs?$AA?2?$AAC?$AAO?$AAM?$AAM?$AAO?$AAN?$AA?2?$AAG?$AAE?$AAN?$AAE?$AAR?$AAA?$AAL?$AA?$AA@
0x18003D618: "Expander: Not a string type" ??_C@_0BM@NJCACIDE@Expander?3?5Not?5a?5string?5type?$AA@
0x18000FA40: "void __cdecl NS_VirtualRegistry::BuildOleViewRedirect(char const * __ptr64)" ?BuildOleViewRedirect@NS_VirtualRegistry@@YAXPEBD@Z
0x180006BE0: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringA(unsigned long,unsigned long,char const * __ptr64,int,char * __ptr64,int)" ?APIHook_LCMapStringA@NS_EmulateSortingWindows61@@YAHKKPEBDHPEADH@Z
0x180045040: AE_LOG_Context
0x180030528: "VCACHE\cCurPages" ??_C@_1CC@HPJLHPOO@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAC?$AAu?$AAr?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x18002A2E8: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18002F108: "FTH SQM: process name: %ws " ??_C@_0BN@KADHPBHB@FTH?5SQM?3?5process?5name?3?5?$CFws?5?6?$AA@
0x18001D278: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::OpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKKPEAPEAU3@@Z
0x18003D950: "%s%8.8lX%8.8lX" ??_C@_1BO@MJAIDJFG@?$AA?$CF?$AAs?$AA?$CF?$AA8?$AA?4?$AA8?$AAl?$AAX?$AA?$CF?$AA8?$AA?4?$AA8?$AAl?$AAX?$AA?$AA@
0x180033278: "[DSDEVACCEL] Unabled to add Dire" ??_C@_0CN@JFMGEIBC@?$FLDSDEVACCEL?$FN?5Unabled?5to?5add?5Dire@
0x18003A730: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LK@EIKFLEOJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180029FB8: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x180030C30: "%s "%%1"" ??_C@_1BC@DDGHMECK@?$AA?$CF?$AAs?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?$AA@
0x1800308F8: "VMM\cpgOther" ??_C@_1BK@DPFEJKNK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAO?$AAt?$AAh?$AAe?$AAr?$AA?$AA@
0x18002680C: "public: void __cdecl ShimLib::CString::FormatV(char const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CString@ShimLib@@QEAAXPEBDPEAD@Z
0x1800319D0: "Microsoft Windows XP" ??_C@_1CK@DGODOGPM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAX?$AAP?$AA?$AA@
0x180045008: "__vectorcall ??_R0?AVCStringError@CString@ShimLib@" ??_R0?AVCStringError@CString@ShimLib@@@8
0x18004BD98: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WsExCompositedShim::g_pAPIHooks" ?g_pAPIHooks@NS_WsExCompositedShim@@3PEAUtagHOOKAPI@@EA
0x180017314: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::FixRegGetValue(unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64,long,unsigned long,unsigned long,int) __ptr64" ?FixRegGetValue@CVirtualRegistry@NS_VirtualRegistry@@AEAAJKPEAKPEAE0JKKH@Z
0x1800222F0: "int __cdecl NS_Win8RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win8RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180023810: "int __cdecl NS_WRPMitigation::APIHook_PrivCopyFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_PrivCopyFileExW@NS_WRPMitigation@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x180026748: "public: int __cdecl ShimLib::CString::FindOneNotOf(unsigned short const * __ptr64,int)const __ptr64" ?FindOneNotOf@CString@ShimLib@@QEBAHPEBGH@Z
0x18048CD68: "unsigned short * __ptr64 __ptr64 NS_VistaRTMVersionLie::pwszServicePack" ?pwszServicePack@NS_VistaRTMVersionLie@@3PEAGEA
0x1800372A0: "HKCR\Interface\{665A4447-D905-11" ??_C@_1GM@NGIGBPFA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180031EA0: "driver" ??_C@_1O@KNIGNIDC@?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x180033520: "[DSSMOOTHWRITEPOS] Unabled to ad" ??_C@_0DD@EFKCKALH@?$FLDSSMOOTHWRITEPOS?$FN?5Unabled?5to?5ad@
0x18002B400: "Pipe != NULL && Pipe != INVALID_" ??_C@_0CN@OIGBPDEH@Pipe?5?$CB?$DN?5NULL?5?$CG?$CG?5Pipe?5?$CB?$DN?5INVALID_@
0x18003E1A8: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DB@KDKLFLFP@NS_VirtualRegistry?3?3CVirtualRegi@
0x180034DF8: "AllowedZero" ??_C@_1BI@KDFFABBJ@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAZ?$AAe?$AAr?$AAo?$AA?$AA@
0x18002A368: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18004BD84: "int NS_VerifyVersionInfoLite::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VerifyVersionInfoLite@@3HA
0x180035F70: "QuickCompress" ??_C@_1BM@KPHFMHBB@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x180040320: "("" ??_C@_02JBFCHHJF@?$CI?$CC?$AA@
0x18002AEE0: "DeleteFileW" ??_C@_0M@DNECCFPG@DeleteFileW?$AA@
0x180031C58: "\dxdiag.exe" ??_C@_1BI@JFLMNPMO@?$AA?2?$AAd?$AAx?$AAd?$AAi?$AAa?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002A470: "__cdecl _imp_RtlRaiseException" __imp_RtlRaiseException
0x1800300D8: "[Hasbro hack] Failed to query %S" ??_C@_0CP@IAFMNLGD@?$FLHasbro?5hack?$FN?5Failed?5to?5query?5?$CFS@
0x18004ACC8: "__cdecl _security_cookie" __security_cookie
0x180010EB0: "void __cdecl NS_VirtualRegistry::BuildWin8RTMLie(char const * __ptr64)" ?BuildWin8RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180016074: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::CreateHKCUClassesKey(unsigned short const * __ptr64,int) __ptr64" ?CreateHKCUClassesKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEBGH@Z
0x180031EB0: "HKLM\Software\Microsoft\Windows" ??_C@_1EA@EEINIPPF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x18002FA50: "Client->Watson == &(Client->Wats" ??_C@_0DB@GNEAMFKH@Client?9?$DOWatson?5?$DN?$DN?5?$CG?$CIClient?9?$DOWats@
0x18002B7B0: "HKLM\SOFTWARE\Classes\CLSID\%s\L" ??_C@_1FG@CECLJHPE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL@
0x180008D44: "void __cdecl NS_FaultTolerantHeap::FthDelayFreeQueueFlush(void * __ptr64,int)" ?FthDelayFreeQueueFlush@NS_FaultTolerantHeap@@YAXPEAXH@Z
0x18002670C: "public: int __cdecl ShimLib::CString::FindLastPathComponent(void)const __ptr64" ?FindLastPathComponent@CString@ShimLib@@QEBAHXZ
0x18002A2B0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180032750: "S-1-5-18" ??_C@_1BC@FOGOLNOF@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?$AA@
0x180032D18: "HKCU\Software\nowirc" ??_C@_1CK@HPIEIGMI@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAi?$AAr?$AAc?$AA?$AA@
0x18002CD30: "winword.exe" ??_C@_1BI@INKPHAML@?$AAw?$AAi?$AAn?$AAw?$AAo?$AAr?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18001B114: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddKeyValues(class NS_VirtualRegistry2::CVirtualKey * __ptr64,struct NS_VirtualRegistry2::_KeyEntry * __ptr64) __ptr64" ?AddKeyValues@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAU_KeyEntry@2@@Z
0x180010D30: "void __cdecl NS_VirtualRegistry::BuildWin2kSp2Lie(char const * __ptr64)" ?BuildWin2kSp2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003E048: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DC@DDJJNOID@NS_VirtualRegistry?3?3CVirtualRegi@
0x180004760: "__cdecl alloca_probe" _alloca_probe
0x180030AA8: "BitsPerPixel" ??_C@_1BK@EGIPGMKA@?$AAB?$AAi?$AAt?$AAs?$AAP?$AAe?$AAr?$AAP?$AAi?$AAx?$AAe?$AAl?$AA?$AA@
0x18003EDE0: "Failed to duplicate the redirect" ??_C@_0CM@POBPGGGA@Failed?5to?5duplicate?5the?5redirect@
0x1800228D0: "void __cdecl NS_Win8RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win8RTMVersionLie@@YAXXZ
0x180039168: "ThemeActive" ??_C@_1BI@KGBEBBME@?$AAT?$AAh?$AAe?$AAm?$AAe?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x18002A308: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18003E600: "Failed to copy command line para" ??_C@_0DA@DHJMNPLL@Failed?5to?5copy?5command?5line?5para@
0x18002ECE0: "GetNamedLocaleHashNode" ??_C@_0BH@IIACOBBB@GetNamedLocaleHashNode?$AA@
0x18003E738: "RegEnumValueA" ??_C@_0O@BKCMGKED@RegEnumValueA?$AA@
0x180012FC4: StringCbPrintfW
0x18004BE38: "struct tagHOOKAPI * __ptr64 __ptr64 NS_EmulateSortingVista::g_pAPIHooks" ?g_pAPIHooks@NS_EmulateSortingVista@@3PEAUtagHOOKAPI@@EA
0x18004BE80: "unsigned long NS_FaultTolerantHeap::FthDelayFreeQueueTrims" ?FthDelayFreeQueueTrims@NS_FaultTolerantHeap@@3KA
0x180033760: "BorlandReboot1" ??_C@_1BO@KHAANNCG@?$AAB?$AAo?$AAr?$AAl?$AAa?$AAn?$AAd?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA1?$AA?$AA@
0x180023E00: "unsigned long __cdecl NS_WRPMitigation::APIHook_VerInstallFileA(unsigned long,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char * __ptr64,unsigned int * __ptr64)" ?APIHook_VerInstallFileA@NS_WRPMitigation@@YAKKPEBD0000PEADPEAI@Z
0x180003B18: "int __cdecl NS_FaultTolerantHeap::FthClientAttemptConnection(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthClientAttemptConnection@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x18002E940: "DXMaximizedWindowedMode" ??_C@_0BI@BNBADJHG@DXMaximizedWindowedMode?$AA@
0x1800214B4: "void __cdecl NS_VistaSP1VersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaSP1VersionLie@@YAXXZ
0x1800401C0: "wrp key is mitigated" ??_C@_1CK@IOBGOMLN@?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x180037A28: "Indeo� video 5.10" ??_C@_1CI@DIIPOEKG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?$AA@
0x18002A140: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18002AF80: "ShimLib" ??_C@_07HGHLCFFA@ShimLib?$AA@
0x18003E768: "RegEnumKeyW" ??_C@_0M@JAINDJJM@RegEnumKeyW?$AA@
0x18003E4F0: "[RegDeleteKeyExW] Deleting subke" ??_C@_0CG@BABOMAGP@?$FLRegDeleteKeyExW?$FN?5Deleting?5subke@
0x18003FBAC: "\" ??_C@_01KICIPPFI@?2?$AA@
0x18003E2F0: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DA@NEPNIBG@NS_VirtualRegistry?3?3CVirtualRegi@
0x18002A0B8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800084B0: "long __cdecl NS_FaultTolerantHeap::APIHook_RtlWalkHeap(void * __ptr64,struct _RTL_HEAP_WALK_ENTRY * __ptr64)" ?APIHook_RtlWalkHeap@NS_FaultTolerantHeap@@YAJPEAXPEAU_RTL_HEAP_WALK_ENTRY@@@Z
0x18003C330: "HKCR\Word.Application\CLSID" ??_C@_1DI@IGBEEGLB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18002A280: WINSPOOL_NULL_THUNK_DATA
0x18004BE20: "int NS_FaultTolerantHeap::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_FaultTolerantHeap@@3HA
0x18000FE90: "void __cdecl NS_VirtualRegistry::BuildPagingFiles(char const * __ptr64)" ?BuildPagingFiles@NS_VirtualRegistry@@YAXPEBD@Z
0x18003DF50: "Couldn't create dummy key in Ope" ??_C@_0CG@PFFLJKAM@Couldn?8t?5create?5dummy?5key?5in?5Ope@
0x18002B510: "Failed to write message to the p" ??_C@_0CG@HKMFDBIF@Failed?5to?5write?5message?5to?5the?5p@
0x180037DB0: "HKCU\Software\Classes\MIME\Datab" ??_C@_1JG@HKCHJBEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x1800311A0: "HKLM\Software\Classes\rtffile\sh" ??_C@_1GE@KFMGDOHL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x180037A70: "NS_VirtualRegistry::BuildIndeo5" ??_C@_0CA@GPLDIHGJ@NS_VirtualRegistry?3?3BuildIndeo5?$AA@
0x18002A1B8: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x18002A118: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18003D5B0: "HKCR\" ??_C@_1M@LDJANICB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$AA@
0x18002A2F8: "__cdecl _imp_CopySid" __imp_CopySid
0x18000A98C: "void __cdecl NS_FaultTolerantHeap::FthpClientInitializeWatsonView(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthpClientInitializeWatsonView@NS_FaultTolerantHeap@@YAXPEAU__FTH_CLIENT@1@@Z
0x180037F60: "HKCR\MIME\Database\Content Type\" ??_C@_1GM@JNDFHIPL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x18002EC20: "LCMapStringEx" ??_C@_0O@KKBNKAPF@LCMapStringEx?$AA@
0x18000E750: "void __cdecl NS_VirtualRegistry::BuildITunesRedirectHKCR(char const * __ptr64)" ?BuildITunesRedirectHKCR@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A548: "__cdecl _imp_RtlGetLastNtStatus" __imp_RtlGetLastNtStatus
0x180003A60: "void __cdecl NS_FaultTolerantHeap::FthClientAssert(char * __ptr64,int,char * __ptr64)" ?FthClientAssert@NS_FaultTolerantHeap@@YAXPEADH0@Z
0x180027530: "public: void * __ptr64 __cdecl ShimLib::PathTreeNode::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNode@ShimLib@@QEAAPEAXI@Z
0x1800028F0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKKPEBEK@Z
0x180002A20: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegDeleteValueA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteValueA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBD@Z
0x1800208F0: "int __cdecl NS_VistaSP1VersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaSP1VersionLie@@YAHPEBGZZ
0x1800393C8: "IE" ??_C@_15MKKAKNPH@?$AAI?$AAE?$AA?$AA@
0x18004B6D8: "__cdecl _onexitbegin" __onexitbegin
0x180034B68: "NS_VirtualRegistry::BuildIndeo3" ??_C@_0CA@DJOJCAOP@NS_VirtualRegistry?3?3BuildIndeo3?$AA@
0x18000CD50: "void __cdecl NS_VirtualRegistry::BuildDSSmoothWritePos(char const * __ptr64)" ?BuildDSSmoothWritePos@NS_VirtualRegistry@@YAXPEBD@Z
0x18003EB50: "\Registry\User\" ??_C@_1CA@DOEFBOAB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?$AA@
0x18003C5E0: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1JI@FOKKLOEI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18003E498: "[DeleteKeyW] No more subkey unde" ??_C@_0CK@OOIEIJFK@?$FLDeleteKeyW?$FN?5No?5more?5subkey?5unde@
0x18002FAC0: "Failed to create Watson section " ??_C@_0CJ@CAPDMCEO@Failed?5to?5create?5Watson?5section?5@
0x180026B94: "public: void __cdecl ShimLib::CString::Left(int,class ShimLib::CString & __ptr64)const __ptr64" ?Left@CString@ShimLib@@QEBAXHAEAV12@@Z
0x1800101A0: "void __cdecl NS_VirtualRegistry::BuildPrinter(char const * __ptr64)" ?BuildPrinter@NS_VirtualRegistry@@YAXPEBD@Z
0x180032C30: "[Middle School Advantage 2001] " ??_C@_0CN@PGBBBPCN@?$FLMiddle?5School?5Advantage?52001?$FN?5?5@
0x18002C890: "16" ??_C@_15FEFLCNCJ@?$AA1?$AA6?$AA?$AA@
0x18003F520: "NS_VistaSP2VersionLie::APIHook_G" ??_C@_0CK@FLFDCCBM@NS_VistaSP2VersionLie?3?3APIHook_G@
0x180040250: "NS_WsExCompositedShim::Initializ" ??_C@_0CM@CNJDONIE@NS_WsExCompositedShim?3?3Initializ@
0x180015A70: "private: unsigned short * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AllocateHKCUClassesKeyName(unsigned short const * __ptr64) __ptr64" ?AllocateHKCUClassesKeyName@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAGPEBG@Z
0x18003D8C8: "Cannot create virtual registry k" ??_C@_0CD@DGJCMJKH@Cannot?5create?5virtual?5registry?5k@
0x180034C90: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1IC@JCANAMHP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18002A388: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000D000: "void __cdecl NS_VirtualRegistry::BuildDynData(char const * __ptr64)" ?BuildDynData@NS_VirtualRegistry@@YAXPEBD@Z
0x18000B2C0: "void __cdecl NS_VirtualRegistry::BuildBogusCtrlID(char const * __ptr64)" ?BuildBogusCtrlID@NS_VirtualRegistry@@YAXPEBD@Z
0x180030510: "KERNEL\VMs" ??_C@_1BG@JGIJDIJB@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAV?$AAM?$AAs?$AA?$AA@
0x18003E680: "RegOpenUserClassesRoot" ??_C@_0BH@KFNIPFHH@RegOpenUserClassesRoot?$AA@
0x18003CD50: "%LocalAppData%\Microsoft\Windows" ??_C@_1EK@KKBFPOGC@?$AA?$CF?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs@
0x180023000: "int __cdecl NS_WRPMitigation::APIHook_AccessCheck(void * __ptr64,void * __ptr64,unsigned long,struct _GENERIC_MAPPING * __ptr64,struct _PRIVILEGE_SET * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?APIHook_AccessCheck@NS_WRPMitigation@@YAHPEAX0KPEAU_GENERIC_MAPPING@@PEAU_PRIVILEGE_SET@@PEAK3PEAH@Z
0x18002A268: "__cdecl _imp_EnumDisplaySettingsW" __imp_EnumDisplaySettingsW
0x18000AA70: "int __cdecl NS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoA(struct _OSVERSIONINFOEXA * __ptr64,unsigned long,unsigned __int64)" ?APIHook_VerifyVersionInfoA@NS_VerifyVersionInfoLite@@YAHPEAU_OSVERSIONINFOEXA@@K_K@Z
0x18002A020: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18003E368: "Exception occurred in SetValueW" ??_C@_0CA@ICGKKOMC@Exception?5occurred?5in?5SetValueW?$AA@
0x18002A1A0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180002A70: "void __cdecl NS_VirtualRegistry::BuildDisableWin9xMode(char const * __ptr64)" ?BuildDisableWin9xMode@NS_VirtualRegistry@@YAXPEBD@Z
0x1800352E8: "IVI Encode OA" ??_C@_1BM@KAMJNPCI@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x18002E720: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1JE@IGODOBNC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18002AE28: "VerInstallFileA" ??_C@_0BA@IKMKGJBE@VerInstallFileA?$AA@
0x18002E880: Microsoft_Windows_Application_ExperienceLevels
0x1800370B0: "HKCR\CLSID\{C1C0FE00-F3C2-11D0-9" ??_C@_1IC@HAIJLJDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA1?$AAC?$AA0?$AAF?$AAE?$AA0?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180005990: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringA(unsigned long,unsigned long,char const * __ptr64,int,char const * __ptr64,int)" ?APIHook_CompareStringA@NS_EmulateSortingVista@@YAHKKPEBDH0H@Z
0x18003BC10: "HKLM\SOFTWARE\Classes\PowerPoint" ??_C@_1GG@NEICBBIB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt@
0x18002A2A8: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x1800434F4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18048CDC0: "short NS_Win7RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win7RTMVersionLie@@3FA
0x18003C8C0: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1LO@PEJOIEBL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002EA10: "Win7RTMVersionLie" ??_C@_0BC@EMHKEHN@Win7RTMVersionLie?$AA@
0x180015BA0: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckProtected(unsigned short const * __ptr64) __ptr64" ?CheckProtected@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEBG@Z
0x180034D18: "%windir%\system32\ir41_32.ax" ??_C@_1DK@ONIHBADA@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAr?$AA4?$AA1?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x180039CB0: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1JM@HPJCNGDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002A2B8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180011A90: "void __cdecl NS_VirtualRegistry::BuildXpLie(char const * __ptr64)" ?BuildXpLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002DBF0: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1KE@CEKDNBNA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x180032FA0: "[Airline Tycoon]Added drive lett" ??_C@_0GB@MBEMCOFE@?$FLAirline?5Tycoon?$FNAdded?5drive?5lett@
0x18002E120: "HKCR\CLSID\{000209FF-0000-0000-C" ??_C@_1GE@KJBEIGBA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x180032EB0: "HKLM\Config\0001\Display\Setting" ??_C@_1EE@GGMCIGML@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?2?$AA0?$AA0?$AA0?$AA1?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg@
0x180003414: "__cdecl _security_init_cookie" __security_init_cookie
0x18004BE08: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaRTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaRTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x18002C8A8: "Access" ??_C@_1O@PLNJEPPG@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18003FCC8: "NS_WRPMitigation::APIHook_RegCre" ??_C@_0CI@LCDKHFDA@NS_WRPMitigation?3?3APIHook_RegCre@
0x1800142F0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x180037310: "IIndeoDecodeOA" ??_C@_1BO@INJIMAAA@?$AAI?$AAI?$AAn?$AAd?$AAe?$AAo?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AAO?$AAA?$AA?$AA@
0x1800324A8: "NS_VirtualRegistry::BuildPageKee" ??_C@_0CO@FKNMMHN@NS_VirtualRegistry?3?3BuildPageKee@
0x1800400F8: "RLCHECK: ActCtx Query failed wit" ??_C@_0CK@BGHKLMAB@RLCHECK?3?5ActCtx?5Query?5failed?5wit@
0x1800261BC: "protected: void __cdecl ShimLib::CString::AllocCopy(class ShimLib::CString & __ptr64,int,int,int)const __ptr64" ?AllocCopy@CString@ShimLib@@IEBAXAEAV12@HHH@Z
0x180033218: "KSCAPTURE" ??_C@_1BE@COMGHKOG@?$AAK?$AAS?$AAC?$AAA?$AAP?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180037B08: ".itms" ??_C@_1M@LNCCJCFA@?$AA?4?$AAi?$AAt?$AAm?$AAs?$AA?$AA@
0x18002AD88: "RegSetValueExA" ??_C@_0P@KEGBDGDJ@RegSetValueExA?$AA@
0x1800069E0: "int __cdecl NS_EmulateSortingWindows61::APIHook_FindNLSStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_FindNLSStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0H0HPEAHPEAU_nlsversioninfo@@PEAX_J@Z
0x18002A4C0: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18001AFE0: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddKey(class NS_VirtualRegistry2::CVirtualKey * __ptr64,unsigned short * __ptr64,unsigned long,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?AddKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAGKPEAPEAV32@@Z
0x18048CD60: "char * __ptr64 __ptr64 NS_VistaRTMVersionLie::pszServicePack" ?pszServicePack@NS_VistaRTMVersionLie@@3PEADEA
0x180037980: "HKCR\TypeLib\{665A4446-D905-11D0" ??_C@_1IA@BCDPKDNH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x180039780: "9600" ??_C@_19DPGAJLIN@?$AA9?$AA6?$AA0?$AA0?$AA?$AA@
0x18003E748: "RegEnumValueW" ??_C@_0O@GLENPJE@RegEnumValueW?$AA@
0x18003FE80: " ValueName: [%s] " ??_C@_0BE@HDLBBAM@?7?7?7ValueName?3?5?$FL?$CFs?$FN?6?$AA@
0x18003CDA0: "SOFTWARE\Microsoft\Office\16.0" ??_C@_1DO@FNFHHCBO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?2?$AA1?$AA6?$AA?4?$AA0?$AA?$AA@
0x180032B18: "MSA2001: RegQueryValueEx failed" ??_C@_0CA@EFOFLDDO@MSA2001?3?5RegQueryValueEx?5failed?$AA@
0x18003ECF0: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DC@IBIHDNIC@NS_VirtualRegistry2?3?3CVirtualReg@
0x18002D010: "HKLM\SOFTWARE\Microsoft\Office\1" ??_C@_1FI@LGKEELKF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?2?$AA1@
0x1800316D0: "Failed to add NetBT settings" ??_C@_0BN@DNIFEBAK@Failed?5to?5add?5NetBT?5settings?$AA@
0x1800074B0: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlAllocateHeap(void * __ptr64,unsigned long,unsigned __int64)" ?APIHook_RtlAllocateHeap@NS_FaultTolerantHeap@@YAPEAXPEAXK_K@Z
0x18002AE88: "_lopen" ??_C@_06NAHHJBM@_lopen?$AA@
0x180017284: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::FindValue(unsigned short const * __ptr64) __ptr64" ?FindValue@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x18048C320: "long NS_FaultTolerantHeap::FthErrorHistoryIndex" ?FthErrorHistoryIndex@NS_FaultTolerantHeap@@3JA
0x18003E728: "RegQueryValueW" ??_C@_0P@DPIKNKDP@RegQueryValueW?$AA@
0x180043468: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18002EB80: "Disable" ??_C@_07MIKIFGAL@Disable?$AA@
0x180021BC0: "unsigned long __cdecl NS_Win7RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win7RTMVersionLie@@YAKXZ
0x18001DF80: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x18003C7C0: "HKLM\SOFTWARE\Classes\Word.Appli" ??_C@_1FK@MDLPEDMP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi@
0x180021B4C: "void __cdecl NS_VistaSP2VersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaSP2VersionLie@@YAXXZ
0x1800395A0: "HKLM\SOFTWARE\Macromedia\FlashPl" ??_C@_1GK@NGOOHOCE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAa?$AAc?$AAr?$AAo?$AAm?$AAe?$AAd?$AAi?$AAa?$AA?2?$AAF?$AAl?$AAa?$AAs?$AAh?$AAP?$AAl@
0x18000F540: "void __cdecl NS_VirtualRegistry::BuildNT51(char const * __ptr64)" ?BuildNT51@NS_VirtualRegistry@@YAXPEBD@Z
0x180032F40: "\\?\cdrom" ??_C@_1BE@FFKCGBPP@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAc?$AAd?$AAr?$AAo?$AAm?$AA?$AA@
0x18002A348: "__cdecl _imp_memmove" __imp_memmove
0x18002AC90: "[%S] [%S]" ??_C@_09LCCAEGJI@?$FL?$CFS?$FN?5?$FL?$CFS?$FN?$AA@
0x18003FC30: "RegCreateKey: non-COM wrp subkey" ??_C@_1GE@PMBLBMAI@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AAn?$AAo?$AAn?$AA?9?$AAC?$AAO?$AAM?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAs?$AAu?$AAb?$AAk?$AAe?$AAy@
0x18002A2F0: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x18003E9F0: "NS_VirtualRegistry2::CVirtualReg" ??_C@_0DA@LECAHOHM@NS_VirtualRegistry2?3?3CVirtualReg@
0x180032240: "HKCU\Software\Adobe" ??_C@_1CI@FBNAFCGD@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?$AA@
0x180034B18: "ir32_32.dll" ??_C@_1BI@FDCNBPBB@?$AAi?$AAr?$AA3?$AA2?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180036160: "Indeo� video 5.10 Compression " ??_C@_1EO@OMLHKFMG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5@
0x180036470: "HKCR\CLSID\{2DE89781-DBF6-11D0-A" ??_C@_1GE@BJCKNNL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AAD?$AAE?$AA8?$AA9?$AA7?$AA8?$AA1?$AA?9?$AAD?$AAB?$AAF?$AA6?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002EE10: "WerReportCreate" ??_C@_0BA@HMJBMDF@WerReportCreate?$AA@
0x180026648: "public: unsigned long __cdecl ShimLib::CString::ExpandEnvironmentStringsW(void) __ptr64" ?ExpandEnvironmentStringsW@CString@ShimLib@@QEAAKXZ
0x18002B960: "\Registry\HKEY_CURRENT_USER" ??_C@_1DI@KENNACFI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180033420: "NS_VirtualRegistry::BuildDSRetur" ??_C@_0CK@KPKAKCID@NS_VirtualRegistry?3?3BuildDSRetur@
0x18002E5B0: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1KE@PMEMIECF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18001F320: "long __cdecl NS_VirtualRegistry2::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x1800182EC: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::IsHKCRPathVirtualDeleted(unsigned short const * __ptr64) __ptr64" ?IsHKCRPathVirtualDeleted@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEBG@Z
0x18002AFB0: "AcLayers" ??_C@_08GFCFILDL@AcLayers?$AA@
0x1800145B0: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x180037050: "Indeo� video 5.10 About Encode" ??_C@_1GA@KJEBAEKH@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe@
0x18003EAA0: "\REGISTRY\MACHINE\SOFTWARE\WOW64" ??_C@_1FA@GOMDBJJO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4@
0x180018F94: "int __cdecl NS_VirtualRegistry::ParseCommandLineA(char const * __ptr64)" ?ParseCommandLineA@NS_VirtualRegistry@@YAHPEBD@Z
0x18003E530: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0CP@JAGKJDAN@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003E8F8: "Unexpected error returned from R" ??_C@_0DB@PEBDAOMF@Unexpected?5error?5returned?5from?5R@
0x180007BF0: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlReAllocateHeap(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64)" ?APIHook_RtlReAllocateHeap@NS_FaultTolerantHeap@@YAPEAXPEAXK0_K@Z
0x18002B208: "EmulateSortingWindows61" ??_C@_1DA@LCKDOEMD@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAS?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA6?$AA1?$AA?$AA@
0x18001BF24: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x18001D210: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::OpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKKPEAPEAU3@@Z
0x180009D9C: "struct tagHOOKAPI * __ptr64 __cdecl NS_FaultTolerantHeap::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_FaultTolerantHeap@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002A428: "__cdecl _imp_malloc" __imp_malloc
0x18002EA28: "Win8RTMVersionLie" ??_C@_0BC@FAEPGHOA@Win8RTMVersionLie?$AA@
0x18003FCF0: "RegCreateKeyA: wrp key is mitiga" ??_C@_1EI@DNKFHBJJ@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x180029FD0: ADVAPI32_NULL_THUNK_DATA
0x1800359A0: "HKCR\CLSID\{BD323431-CE94-11CE-8" ??_C@_1GE@BFKKBMKP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA1?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18002724C: "int __cdecl ShimLib::ShouldApplyShim(void)" ?ShouldApplyShim@ShimLib@@YAHXZ
0x18001A3DC: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::SetHKCRPathVirtualDeleted(unsigned short const * __ptr64,int) __ptr64" ?SetHKCRPathVirtualDeleted@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEBGH@Z
0x1800208F0: "int __cdecl NS_VistaSP2VersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaSP2VersionLie@@YAHPEBGZZ
0x180035FA8: "Transparency" ??_C@_1BK@EGIDFGFD@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAa?$AAr?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x18002A178: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18003F6A0: "NS_Win8RTMVersionLie::APIHook_Ge" ??_C@_0CM@HBNLPKPA@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x18002B140: "VistaRTMVersionLie" ??_C@_1CG@KGCCJLEB@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x180025BF0: "int __cdecl ShimLib::AcquireHeapManagerMutex(void)" ?AcquireHeapManagerMutex@ShimLib@@YAHXZ
0x180038038: "ProductSuite" ??_C@_1BK@HJNBLNLJ@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
0x180026238: "public: void __cdecl ShimLib::CString::AppendPath(unsigned short const * __ptr64) __ptr64" ?AppendPath@CString@ShimLib@@QEAAXPEBG@Z
0x18004BDD0: "int NS_Win7RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win7RTMVersionLie@@3HA
0x180034B88: "vidc.iv41" ??_C@_1BE@NIHOHMOE@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA4?$AA1?$AA?$AA@
0x180039518: "4.0.30319" ??_C@_1BE@LFHCOHHG@?$AA4?$AA?4?$AA0?$AA?4?$AA3?$AA0?$AA3?$AA1?$AA9?$AA?$AA@
0x1800239A0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18002EA40: "Win81RTMVersionLie" ??_C@_0BD@FOMIABKO@Win81RTMVersionLie?$AA@
0x180036008: "vidc.iv50" ??_C@_1BE@KLJOMICE@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA5?$AA0?$AA?$AA@
0x180033C80: "Current" ??_C@_1BA@OFLJGHK@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
0x18003EDC0: "Failed to add key values %d " ??_C@_0BN@JMCJILNF@Failed?5to?5add?5key?5values?5?$CFd?6?$AA@
0x18003D6D8: "DSAPPHACKID_PADCURSORS" ??_C@_1CO@GJKMDJMM@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAP?$AAA?$AAD?$AAC?$AAU?$AAR?$AAS?$AAO?$AAR?$AAS?$AA?$AA@
0x180034BC0: "HKCR\CLSID\{31345649-0000-0010-8" ??_C@_1GE@GDCMLHGL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180036280: "{30355649-0000-0010-8000-00AA003" ??_C@_1EO@LDDMPFOM@?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AA3@
0x18002A0A0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x1800356A0: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1HM@IAKDPFCH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18001F470: "void __cdecl NS_VirtualRegistry2::BuildProgramFilesDirX86Lie(char const * __ptr64)" ?BuildProgramFilesDirX86Lie@NS_VirtualRegistry2@@YAXPEBD@Z
0x18002A148: "__cdecl _imp_SetNamedPipeHandleState" __imp_SetNamedPipeHandleState
0x18001758C: "public: void __cdecl NS_VirtualRegistry::OPENKEY::Free(void) __ptr64" ?Free@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x18000E6A0: "void __cdecl NS_VirtualRegistry::BuildIESetupPath(char const * __ptr64)" ?BuildIESetupPath@NS_VirtualRegistry@@YAXPEBD@Z
0x180002A80: "public: virtual long __cdecl ShimLib::PathTreeNodeVisitor::Visit(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Visit@PathTreeNodeVisitor@ShimLib@@UEAAJPEAVPathTreeNode@2@0PEAUPathTreeNodeTraversal@2@@Z
0x18003BB50: "HKLM\SOFTWARE\Classes\CLSID\{914" ??_C@_1LG@HNLJOHMF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4@
0x180049538: "char * __ptr64 __ptr64 NS_FaultTolerantHeap::g_szCommandLine" ?g_szCommandLine@NS_FaultTolerantHeap@@3PEADEA
0x18000F0C0: "void __cdecl NS_VirtualRegistry::BuildMSA2001(char const * __ptr64)" ?BuildMSA2001@NS_VirtualRegistry@@YAXPEBD@Z
0x1800344E0: "Indeo� audio software" ??_C@_1DA@IMBKBALB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180010F90: "void __cdecl NS_VirtualRegistry::BuildWin98SE(char const * __ptr64)" ?BuildWin98SE@NS_VirtualRegistry@@YAXPEBD@Z
0x18004BD00: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VirtualRegistry2::g_pAPIHooks" ?g_pAPIHooks@NS_VirtualRegistry2@@3PEAUtagHOOKAPI@@EA
0x18000F140: "void __cdecl NS_VirtualRegistry::BuildMSI(char const * __ptr64)" ?BuildMSI@NS_VirtualRegistry@@YAXPEBD@Z
0x1800401F0: "NS_WRPRegDeleteKey::APIHook_RegD" ??_C@_0CK@IJLLMCLJ@NS_WRPRegDeleteKey?3?3APIHook_RegD@
0x18002B2E0: "((ULONG_PTR)(Padder->Heap) & (UL" ??_C@_0DF@JBFOFLDD@?$CI?$CIULONG_PTR?$CJ?$CIPadder?9?$DOHeap?$CJ?5?$CG?5?$CIUL@
0x180043454: "__cdecl _IMPORT_DESCRIPTOR_apphelp" __IMPORT_DESCRIPTOR_apphelp
0x18002F384: "exit" ??_C@_04MKNBDEPB@exit?$AA@
0x180031EF0: "HKCU\Software\Microsoft\Windows" ??_C@_1EA@PBPANNEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x18004BD90: "int NS_WsExCompositedShim::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WsExCompositedShim@@3HA
0x180030610: "VCACHE\LRURecycles" ??_C@_1CG@NJJELFPC@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAL?$AAR?$AAU?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x1800030A0: "__cdecl _report_gsfailure" __report_gsfailure
0x180034048: "FriendlyName" ??_C@_1BK@BFIEKNFP@?$AAF?$AAr?$AAi?$AAe?$AAn?$AAd?$AAl?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A8A0: "int __cdecl NS_FaultTolerantHeap::FthpClientCreateMappedView(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthpClientCreateMappedView@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x180005580: "struct tagHOOKAPI * __ptr64 __cdecl NS_DXMaximizedWindowedHwndOverride::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DXMaximizedWindowedHwndOverride@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002F768: "Client failed to connect to the " ??_C@_0CL@FLFPIMPH@Client?5failed?5to?5connect?5to?5the?5@
0x180040010: "RegDeleteValueW: wrp key is miti" ??_C@_1EM@GNAJJHKH@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x180034E40: "Direction" ??_C@_1BE@IJNOJFIL@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180033558: "[DSSMOOTHWRITEPOS] Added DS Hack" ??_C@_0DJ@MNPOKCMA@?$FLDSSMOOTHWRITEPOS?$FN?5Added?5DS?5Hack@
0x180005740: "struct tagHOOKAPI * __ptr64 __cdecl NS_DXMaximizedWindowedMode::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DXMaximizedWindowedMode@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002A4B8: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180039D50: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1JK@JKEGBCL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180025E04: "char * __ptr64 __cdecl ShimLib::StringDuplicateA(char const * __ptr64)" ?StringDuplicateA@ShimLib@@YAPEADPEBD@Z
0x18000E5B0: "void __cdecl NS_VirtualRegistry::BuildIE60(char const * __ptr64)" ?BuildIE60@NS_VirtualRegistry@@YAXPEBD@Z
0x18004AD28: "unsigned __int64 NS_Win81RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win81RTMVersionLie@@3_KA
0x180049508: "char * __ptr64 __ptr64 NS_Win7RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win7RTMVersionLie@@3PEADEA
0x180035570: "HKCR\CLSID\{A2551F60-705F-11CF-A" ??_C@_1BCC@IKMOBGNG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18002A090: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18003D580: "HKCU\Software\Classes\" ??_C@_1CO@BDKOIMJL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$AA@
0x180037520: "{665A4446-D905-11D0-A30E-4445535" ??_C@_1EO@KGBKBFHC@?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA?$AA3?$AA0?$AAE?$AA?9?$AA4?$AA4?$AA4?$AA5?$AA5?$AA3?$AA5@
0x18001AEB0: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::AddKey(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?AddKey@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBG0KPEAPEAV12@@Z
0x18002EE30: "WerReportSetParameter" ??_C@_0BG@DEHLLCKA@WerReportSetParameter?$AA@
0x18002F290: "NS_FaultTolerantHeap::Initialize" ??_C@_0CL@JJAOLHAC@NS_FaultTolerantHeap?3?3Initialize@
0x18003F1DC: "HKLM" ??_C@_04CBBMIBLK@HKLM?$AA@
0x18001DCF8: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::SetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18002E7C0: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1LI@FFEICH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x1800390A0: "HKLM\Software\Microsoft\DirectDr" ??_C@_1EG@BOIFLPDK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAr@
0x18003B020: "HKCU\SOFTWARE\Classes\Interface\" ??_C@_1KM@OICDNPLL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180031F58: "NS_VirtualRegistry::BuildSpellIt" ??_C@_0CH@EMLJDBHD@NS_VirtualRegistry?3?3BuildSpellIt@
0x18002E9B0: "VirtualRegistry2" ??_C@_0BB@LFGFBOCF@VirtualRegistry2?$AA@
0x18004B6E8: "__cdecl _native_startup_state" __native_startup_state
0x180039EA0: "HKCR\WOW6432Node\CLSID\{00024500" ??_C@_1JE@DNFAMPC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180037B58: ".m4p" ??_C@_19PCNLPEKH@?$AA?4?$AAm?$AA4?$AAp?$AA?$AA@
0x18004BDC8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win8RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win8RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x1800338A8: "Service Pack 1" ??_C@_1BO@HIBBMDPI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA1?$AA?$AA@
0x18001C9E0: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyFullPath(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetKeyFullPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAXPEBGPEAPEAG@Z
0x1800169E0: "public: int __cdecl NS_VirtualRegistry::CVirtualRegistry::EnableVirtualHKCRDelete(void) __ptr64" ?EnableVirtualHKCRDelete@CVirtualRegistry@NS_VirtualRegistry@@QEAAHXZ
0x180031B60: "WallPaperDir" ??_C@_1BK@MEJJJKO@?$AAW?$AAa?$AAl?$AAl?$AAP?$AAa?$AAp?$AAe?$AAr?$AAD?$AAi?$AAr?$AA?$AA@
0x180037A50: "Indeo5 initialization failed" ??_C@_0BN@BHBIIBEA@Indeo5?5initialization?5failed?$AA@
0x180032938: "[Printer] No printers found or o" ??_C@_0CN@MALDAGIO@?$FLPrinter?$FN?5No?5printers?5found?5or?5o@
0x180011400: "void __cdecl NS_VirtualRegistry::BuildWordPad(char const * __ptr64)" ?BuildWordPad@NS_VirtualRegistry@@YAXPEBD@Z
0x180033250: "[DSDEVACCEL] No devices specifie" ??_C@_0CD@OILMLILL@?$FLDSDEVACCEL?$FN?5No?5devices?5specifie@
0x180032608: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x18003C820: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1JO@GEDAPBCP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002C960: "Excel" ??_C@_1M@LONJENBG@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?$AA@
0x18003EA20: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x180031010: "HKLM\Software\Classes\Applicatio" ??_C@_1IG@OHJCLIPK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x180005C30: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int)" ?APIHook_CompareStringW@NS_EmulateSortingVista@@YAHKKPEBGH0H@Z
0x18001E7D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?APIHook_RegEnumKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGK@Z
0x18003F940: "_Classes\" ??_C@_1BE@FMPNIOEH@?$AA_?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$AA@
0x180032790: "HKLM\SOFTWARE\Microsoft\Windows\" ??_C@_1MK@BNDLMGBP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180037900: "HKCR\TypeLib\{665A4446-D905-11D0" ??_C@_1HM@OLEEIMMI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x1800494E0: "char * __ptr64 __ptr64 NS_VerifyVersionInfoLite::g_szCommandLine" ?g_szCommandLine@NS_VerifyVersionInfoLite@@3PEADEA
0x18002ED60: "psapi.dll" ??_C@_1BE@NPEIJFBC@?$AAp?$AAs?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180031A00: "HKLM\Software\Microsoft\Windows\" ??_C@_1JO@JLAPMEHJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18003DEC8: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0CP@HKMNKFPB@NS_VirtualRegistry?3?3CVirtualRegi@
0x180017564: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::FlushEnumLists(void) __ptr64" ?FlushEnumLists@CVirtualRegistry@NS_VirtualRegistry@@AEAAXXZ
0x18003D350: "HKCR\WOW6432Node\CLSID\%s\LocalS" ??_C@_1EM@LHKOAGBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS@
0x18000F4D0: "void __cdecl NS_VirtualRegistry::BuildNT50(char const * __ptr64)" ?BuildNT50@NS_VirtualRegistry@@YAXPEBD@Z
0x1800061B0: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int)" ?APIHook_LCMapStringW@NS_EmulateSortingVista@@YAHKKPEBGHPEAGH@Z
0x18002BAA0: "\Registry\HKEY_PERFORMANCE_TEXT" ??_C@_1EA@NGNHNFFH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAT?$AAE?$AAX?$AAT?$AA?$AA@
0x18001AAEC: "unsigned short const * __ptr64 __cdecl NS_VirtualRegistry::TrimSlashW(unsigned short const * __ptr64)" ?TrimSlashW@NS_VirtualRegistry@@YAPEBGPEBG@Z
0x18003C370: "HKCR\WOW6432Node\CLSID\{000209FF" ??_C@_1HM@PEKKOAPO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18001B480: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AppendSubKeyPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?AppendSubKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEBG0PEAPEAG@Z
0x1800399D8: "Lync" ??_C@_19DAIBMMNL@?$AAL?$AAy?$AAn?$AAc?$AA?$AA@
0x18003B0D0: "HKCU\SOFTWARE\Classes\Interface\" ??_C@_1LA@IEBCODJE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180031C10: "BuildDXDiag: GetSystemDirectory " ??_C@_0CH@CAACIMD@BuildDXDiag?3?5GetSystemDirectory?5@
0x18000AEB0: "void __cdecl NS_VirtualRegistry::BuildAddRedirect(char const * __ptr64)" ?BuildAddRedirect@NS_VirtualRegistry@@YAXPEBD@Z
0x18000B180: "void __cdecl NS_VirtualRegistry::BuildArm64X86ProcLie(char const * __ptr64)" ?BuildArm64X86ProcLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003DB88: "NS_VirtualRegistry::VIRTUALKEY::" ??_C@_0CJ@LPFGIEIA@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x180032C88: "HKLM\Software\nowcom" ??_C@_1CK@IBALCILO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAc?$AAo?$AAm?$AA?$AA@
0x180033098: "NS_VirtualRegistry::BuildAirline" ??_C@_0CH@GEHMGGFC@NS_VirtualRegistry?3?3BuildAirline@
0x18003F060: "Failed to open root key %d " ??_C@_0BM@EDPEHGGK@Failed?5to?5open?5root?5key?5?$CFd?6?$AA@
0x1800103E0: "void __cdecl NS_VirtualRegistry::BuildProfile(char const * __ptr64)" ?BuildProfile@NS_VirtualRegistry@@YAXPEBD@Z
0x1800093C0: "int __cdecl NS_FaultTolerantHeap::FthGetTimeStampString(unsigned short * __ptr64,unsigned short * __ptr64,int)" ?FthGetTimeStampString@NS_FaultTolerantHeap@@YAHPEAG0H@Z
0x18003E850: "Failed adding value [%ws] %d " ??_C@_0BO@NNEHGIGH@Failed?5adding?5value?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x180017198: "public: struct NS_VirtualRegistry::VIRTUALKEY * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::FindKey(unsigned short const * __ptr64) __ptr64" ?FindKey@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAU12@PEBG@Z
0x18002D2F0: "Microsoft.Office.Interop.Word, V" ??_C@_1MC@COALBGLH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?0?$AA?5?$AAV@
0x18002A318: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x18002FFD0: "%USERPROFILE%\Cookies" ??_C@_1CM@NEGEHEMM@?$AA?$CF?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$CF?$AA?2?$AAC?$AAo?$AAo?$AAk?$AAi?$AAe?$AAs?$AA?$AA@
0x180032968: "[Printer] Exception encountered," ??_C@_0DL@LHPLADIL@?$FLPrinter?$FN?5Exception?5encountered?0@
0x18002CA90: "{0006F03A-0000-0000-C000-0000000" ??_C@_1EO@EHKFEHBK@?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AAF?$AA0?$AA3?$AAA?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1800433D0: "__cdecl TI1?AVCStringError@CString@ShimLib@@" _TI1?AVCStringError@CString@ShimLib@@
0x18002B3E8: "double free: %p, %p " ??_C@_0BF@CINDNDD@double?5free?3?5?$CFp?0?5?$CFp?6?$AA@
0x1800306C8: "VFAT\DirtyData" ??_C@_1BO@NHIFMCH@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAD?$AAi?$AAr?$AAt?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180029FC8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18002ABE8: "ADVAPI32.DLL" ??_C@_0N@JJPEKNFO@ADVAPI32?4DLL?$AA@
0x180033FC8: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x1800403F0: "AllocateAndInitializeSid failed " ??_C@_0CD@MILCCCEK@AllocateAndInitializeSid?5failed?5@
0x18003CA40: "HKLM\SOFTWARE\Classes\WOW6432Nod" ??_C@_1MO@IIMKDLDL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180023750: "int __cdecl NS_WRPMitigation::APIHook_OpenFile(char const * __ptr64,struct _OFSTRUCT * __ptr64,unsigned int)" ?APIHook_OpenFile@NS_WRPMitigation@@YAHPEBDPEAU_OFSTRUCT@@I@Z
0x18002FEB0: "HKLM\System\CurrentControlSet\Co" ??_C@_1KG@JDNIOIHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180005DA0: "int __cdecl NS_EmulateSortingVista::APIHook_FindNLSStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_FindNLSStringEx@NS_EmulateSortingVista@@YAHPEBGK0H0HPEAHPEAU_nlsversioninfo@@PEAX_J@Z
0x18002A128: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180030150: "[Hasbro hack] return from RegQue" ??_C@_0ED@CFGOFMGG@?$FLHasbro?5hack?$FN?5return?5from?5RegQue@
0x180030658: "VCACHE\RandomRecycles" ??_C@_1CM@MOKMBFJF@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x180030490: "VMM" ??_C@_17NDCMEDIF@?$AAV?$AAM?$AAM?$AA?$AA@
0x180031C70: "HKLM\Software\Microsoft\Windows\" ??_C@_1II@PGOFDDEG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002A4D0: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x18002EF18: "NS_FaultTolerantHeap::FthCreateW" ??_C@_0CJ@ICDCPJFP@NS_FaultTolerantHeap?3?3FthCreateW@
0x18004BEF0: "void * __ptr64 __ptr64 NS_FaultTolerantHeap::FthWatsonObjectCurrentIssue" ?FthWatsonObjectCurrentIssue@NS_FaultTolerantHeap@@3PEAXEA
0x18001C438: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::FindKey(unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?FindKey@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGPEAPEAV12@@Z
0x180002840: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKPEADKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x18004B708: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WRPMitigation::g_pAPIHooks" ?g_pAPIHooks@NS_WRPMitigation@@3PEAUtagHOOKAPI@@EA
0x18003E260: "[QueryInfoW] NULL passed for lpC" ??_C@_0EA@NODBCNNH@?$FLQueryInfoW?$FN?5NULL?5passed?5for?5lpC@
0x180009410: "int __cdecl NS_FaultTolerantHeap::FthGetVersionString(unsigned short * __ptr64,int)" ?FthGetVersionString@NS_FaultTolerantHeap@@YAHPEAGH@Z
0x18002B358: "NS_FaultTolerantHeap::FthIsNtHea" ??_C@_0CH@LEDGCOEC@NS_FaultTolerantHeap?3?3FthIsNtHea@
0x1800314E0: "HKLM\Software\Classes\wrifile\sh" ??_C@_1GI@LNAKMGND@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x18002D8E0: "HKLM\SOFTWARE\Classes\CLSID\{000" ??_C@_1IG@GEDIGNHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0@
0x18003D708: "DSAPPHACKID_CACHEPOSITIONS" ??_C@_1DG@LPBPKMAG@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAC?$AAA?$AAC?$AAH?$AAE?$AAP?$AAO?$AAS?$AAI?$AAT?$AAI?$AAO?$AAN?$AAS?$AA?$AA@
0x18003DA88: "NS_VirtualRegistry::MakePath" ??_C@_0BN@CFEHBLML@NS_VirtualRegistry?3?3MakePath?$AA@
0x180031BC0: "4.07.00.0716" ??_C@_1BK@OLMICBFA@?$AA4?$AA?4?$AA0?$AA7?$AA?4?$AA0?$AA0?$AA?4?$AA0?$AA7?$AA1?$AA6?$AA?$AA@
0x18000EC10: "void __cdecl NS_VirtualRegistry::BuildJoystick(char const * __ptr64)" ?BuildJoystick@NS_VirtualRegistry@@YAXPEBD@Z
0x180026BC4: "public: class ShimLib::CString __cdecl ShimLib::CString::Mid(int,int)const __ptr64" ?Mid@CString@ShimLib@@QEBA?AV12@HH@Z
0x18002A570: "__cdecl _imp_SfcIsKeyProtected" __imp_SfcIsKeyProtected
0x180031130: "HKLM\Software\Classes\rtffile\sh" ??_C@_1GC@KHPIBEFD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x180037330: "HKCR\Interface\{665A4447-D905-11" ??_C@_1IK@NBIHIOLH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18004BE60: "struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64 (__cdecl* __ptr64 NS_EmulateSortingWindows61::g_pfnNlsValidateLocale)(unsigned long * __ptr64,int)" ?g_pfnNlsValidateLocale@NS_EmulateSortingWindows61@@3P6APEAUloc_hash_s@1@PEAKH@ZEA
0x180040170: "NS_WRPRegDeleteKey::LogSfpKeyW" ??_C@_0BP@CAFEEEML@NS_WRPRegDeleteKey?3?3LogSfpKeyW?$AA@
0x180030F30: "HKCR\wrifile\shell\printto\comma" ??_C@_1EG@GGFDIHCB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AAt?$AAo?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa@
0x18002EAD0: "NS_DXMaximizedWindowedHwndOverri" ??_C@_0DJ@FMHHMDMO@NS_DXMaximizedWindowedHwndOverri@
0x180013104: StringCchLengthW
0x18002C8B8: "msaccess.exe" ??_C@_1BK@OKEHL@?$AAm?$AAs?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002AD68: "RegCloseKey" ??_C@_0M@HLOHPNFA@RegCloseKey?$AA@
0x18001F250: "long __cdecl NS_VirtualRegistry2::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x180032230: "OEMName" ??_C@_1BA@PMKGIGGL@?$AAO?$AAE?$AAM?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180034510: "HKCR\CLSID\{B4CA2970-DD2B-11D0-9" ??_C@_1GE@PNGOPABF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180025E24: "char * __ptr64 __cdecl ShimLib::StringNDuplicateA(char const * __ptr64,unsigned long)" ?StringNDuplicateA@ShimLib@@YAPEADPEBDK@Z
0x180032620: "GetTokenInformation failed" ??_C@_0BL@GIGOLIBG@GetTokenInformation?5failed?$AA@
0x180013C40: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x18003E708: "RegOpenKeyW" ??_C@_0M@INNIHOHL@RegOpenKeyW?$AA@
0x180024BBC: "int __cdecl NS_WRPMitigation::MySfpIsFileProtectedW(unsigned short const * __ptr64)" ?MySfpIsFileProtectedW@NS_WRPMitigation@@YAHPEBG@Z
0x18002AD58: "RegDeleteValueA" ??_C@_0BA@HFGFCNNL@RegDeleteValueA?$AA@
0x180014820: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenUserClassesRoot(void * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenUserClassesRoot@NS_VirtualRegistry@@YAJPEAXKKPEAPEAUHKEY__@@@Z
0x1800231B0: "int __cdecl NS_WRPMitigation::APIHook_CopyFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_CopyFileExW@NS_WRPMitigation@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x18002ECF8: "NS_EmulateSortingWindows61::Init" ??_C@_0DB@ODEJHINE@NS_EmulateSortingWindows61?3?3Init@
0x180032020: "SpellIt: RegOpenKeyExW failed" ??_C@_0BO@IIJPLCAG@SpellIt?3?5RegOpenKeyExW?5failed?$AA@
0x180034AB0: "IndeoSound initialization failed" ??_C@_0CB@MJGFMBKH@IndeoSound?5initialization?5failed@
0x180017784: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::GetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBG1KPEAKPEAE2@Z
0x18002A420: "__cdecl _imp_free" __imp_free
0x18002B078: "Win81RTMVersionLie" ??_C@_1CG@MICCLKIO@?$AAW?$AAi?$AAn?$AA8?$AA1?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x18002CBD0: "Microsoft Publisher Application" ??_C@_1EA@DAMHPAGB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180003380: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180007000: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int)" ?APIHook_LCMapStringW@NS_EmulateSortingWindows61@@YAHKKPEBGHPEAGH@Z
0x18003B3F0: "HKCR\CLSID\{91493441-5A91-11CF-8" ??_C@_1JE@HKMNPFNJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x18001C0B0: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18003DD38: " Protecting: %S" ??_C@_0BA@BGBLLNNB@?7Protecting?3?5?$CFS?$AA@
0x1800010C0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKKPEBEK@Z
0x1800208F0: "int __cdecl NS_Win8RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win8RTMVersionLie@@YAHPEBGZZ
0x1800333F0: "[DSRETURNWRITEPOSITION] Unknown " ??_C@_0CK@PGICDCCC@?$FLDSRETURNWRITEPOSITION?$FN?5Unknown?5@
0x18004BE28: "struct tagHOOKAPI * __ptr64 __ptr64 NS_EmulateSortingWindows61::g_pAPIHooks" ?g_pAPIHooks@NS_EmulateSortingWindows61@@3PEAUtagHOOKAPI@@EA
0x180037570: "1.0" ??_C@_17BODHOPJC@?$AA1?$AA?4?$AA0?$AA?$AA@
0x180023B00: "long __cdecl NS_WRPMitigation::APIHook_RegSetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char const * __ptr64,unsigned long)" ?APIHook_RegSetValueA@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBDK1K@Z
0x18002C9C0: "{00024500-0000-0000-C000-0000000" ??_C@_1EO@DMGNDLAI@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1800302B0: "HKLM\SYSTEM\CurrentControlSet\En" ??_C@_1EG@PPKAPMLF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x180031280: "HKLM\Software\Classes\Wordpad.Do" ??_C@_1HI@PPFEAALI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x180029FB0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18001E5D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x18001C88C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindSubKey(class NS_VirtualRegistry2::CVirtualKey * __ptr64,unsigned short * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindSubKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAGPEAPEAV32@PEAPEAG@Z
0x180030C48: "%s /p "%%1"" ??_C@_1BI@BCKHLDDG@?$AA?$CF?$AAs?$AA?5?$AA?1?$AAp?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?$AA@
0x180034580: "HKCR\CLSID\{B4CA2970-DD2B-11D0-9" ??_C@_1IC@POJGBAGC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180022280: "unsigned long __cdecl NS_Win8RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win8RTMVersionLie@@YAKXZ
0x180031D00: "HKLM\Software\Electronic Arts\Fu" ??_C@_1GE@NAJOJEFJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAE?$AAl?$AAe?$AAc?$AAt?$AAr?$AAo?$AAn?$AAi?$AAc?$AA?5?$AAA?$AAr?$AAt?$AAs?$AA?2?$AAF?$AAu@
0x180023BA0: "long __cdecl NS_WRPMitigation::APIHook_RegSetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long)" ?APIHook_RegSetValueW@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBGK1K@Z
0x18000CED0: "void __cdecl NS_VirtualRegistry::BuildDXDiag(char const * __ptr64)" ?BuildDXDiag@NS_VirtualRegistry@@YAXPEBD@Z
0x1800366E0: "HKCR\CLSID\{33D9A760-90C8-11D0-B" ??_C@_1ME@HOMBIOL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA3?$AAD?$AA9?$AAA?$AA7?$AA6?$AA0?$AA?9?$AA9?$AA0?$AAC?$AA8?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18003E408: "Using path %S" ??_C@_0O@DLADMFLH@Using?5path?5?$CFS?$AA@
0x18002A3D8: "__cdecl _imp_iswctype" __imp_iswctype
0x18001BA64: "unsigned long __cdecl NS_VirtualRegistry2::DuplicateString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?DuplicateString@NS_VirtualRegistry2@@YAKPEBGPEAPEAG@Z
0x1800351C8: "IVI Decode OA" ??_C@_1BM@DIHJJHAA@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x1800146E0: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180035910: "HKCR\CLSID\{BD323430-CE94-11CE-8" ??_C@_1IC@EJKFPNHN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA0?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18003DCB0: "Initializing Virtual Registry" ??_C@_0BO@EOFDJJCP@Initializing?5Virtual?5Registry?$AA@
0x180011E90: "void __cdecl NS_VirtualRegistry::FindCDROMKey(struct HKEY__ * __ptr64,class ShimLib::CString & __ptr64)" ?FindCDROMKey@NS_VirtualRegistry@@YAXPEAUHKEY__@@AEAVCString@ShimLib@@@Z
0x18004AD90: "unsigned long NS_FaultTolerantHeap::FthMaximumTrackedBlockSize" ?FthMaximumTrackedBlockSize@NS_FaultTolerantHeap@@3KA
0x18002D840: "HKCR\CLSID\{00024500-0000-0000-C" ??_C@_1JG@FDLGAAJD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC@
0x18002FA18: "NS_FaultTolerantHeap::FthClientS" ??_C@_0DE@JNBDEOCB@NS_FaultTolerantHeap?3?3FthClientS@
0x180032480: "[PageKeepPro 3.0] No scanner fou" ??_C@_0CD@JFNKHAAH@?$FLPageKeepPro?53?40?$FN?5No?5scanner?5fou@
0x1800303C8: "Problem" ??_C@_1BA@EJPJCINB@?$AAP?$AAr?$AAo?$AAb?$AAl?$AAe?$AAm?$AA?$AA@
0x18003E338: "NS_VirtualRegistry::CVirtualRegi" ??_C@_0DA@BBNHGNMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x18000471E: memset
0x180043544: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18002F3F8: "FTH shim applied by the FTH serv" ??_C@_0CG@CNCFMMAI@FTH?5shim?5applied?5by?5the?5FTH?5serv@
0x18002BAE0: " error 0x%08x logging [%S] " ??_C@_0BM@HAAGEDL@?5error?50x?$CF08x?5logging?5?$FL?$CFS?$FN?6?$AA@
0x180020B58: "int __cdecl NS_VistaRTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaRTMVersionLie@@YAHK@Z
0x18002CAE0: "PowerPoint" ??_C@_1BG@CDLPJHA@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x18002A190: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18002CDE8: "Assembly" ??_C@_1BC@MCLMHEGP@?$AAA?$AAs?$AAs?$AAe?$AAm?$AAb?$AAl?$AAy?$AA?$AA@
0x18003F1F8: "NS_VirtualRegistry2::ParseComman" ??_C@_0CH@OCDAHGLC@NS_VirtualRegistry2?3?3ParseComman@
0x18002A248: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW
0x18002B290: "DXMaximizedWindowedHwndOverride" ??_C@_1EA@FBDEONBM@?$AAD?$AAX?$AAM?$AAa?$AAx?$AAi?$AAm?$AAi?$AAz?$AAe?$AAd?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAe?$AAd?$AAH?$AAw?$AAn?$AAd?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x18003F7F0: "NS_Win81RTMVersionLie::APIHook_G" ??_C@_0CK@GDNBJKBP@NS_Win81RTMVersionLie?3?3APIHook_G@

[JEB Decompiler by PNF Software]