Generated by JEB on 2019/02/01

PE: C:\Windows\System32\AcLayers.dll Base=0x180000000 SHA-256=82CBCA4DEA7E8B12DE972178D8AAA93E0D0659A199E08257EA36A66E077CFD6A
PDB: AcLayers.pdb GUID={2AF7E451-1509-7638-C083EC1EB8013DC1} Age=1

2506 located named symbols:
0x18002EBE0: "`string'" ??_C@_1KM@HOCOFNFP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180024EC8: "public: void __cdecl ShimLib::CString::Assign(char const * __ptr64,int) __ptr64" ?Assign@CString@ShimLib@@QEAAXPEBDH@Z
0x180031340: "`string'" ??_C@_1CM@CKKCOAFL@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x180035060: "`string'" ??_C@_1IC@GENAONLC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA2?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x18002C980: "`string'" ??_C@_1LG@EKBBOOO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002F940: "`string'" ??_C@_1BC@CAPAIEIF@?$AAd?$AA3?$AAd?$AA8?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180005874: "int __cdecl NS_DXMaximizedWindowedMode::NotifyFn(unsigned long)" ?NotifyFn@NS_DXMaximizedWindowedMode@@YAHK@Z
0x180010E50: "void __cdecl NS_VirtualRegistry::BuildWinNT(char const * __ptr64)" ?BuildWinNT@NS_VirtualRegistry@@YAXPEBD@Z
0x18001BD9C: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::FindValue(unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualValue * __ptr64 * __ptr64) __ptr64" ?FindValue@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGPEAPEAVCVirtualValue@2@@Z
0x180037880: "`string'" ??_C@_1GE@KCKOODDK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe@
0x18002A688: "`string'" ??_C@_0M@GPOOGHPH@CreateFileW?$AA@
0x18002505C: "protected: void __cdecl ShimLib::CString::ConcatCopy(int,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?ConcatCopy@CString@ShimLib@@IEAAXHPEBGH0@Z
0x180028B98: "__cdecl _imp_RtlUnicodeToMultiByteSize" __imp_RtlUnicodeToMultiByteSize
0x18003AA84: "`string'" ??_C@_04PHDOACEE@?5?5?$CFS?$AA@
0x180033258: "`string'" ??_C@_1BE@LALKNJGK@?$AAB?$AAA?$AAS?$AAI?$AAC?$AAM?$AAO?$AAD?$AAE?$AA?$AA@
0x180032D10: "`string'" ??_C@_1BC@FIHJIAN@?$AAV?$AAo?$AAi?$AAc?$AAe?$AAs?$AA3?$AA2?$AA?$AA@
0x180002FF0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800487C4: "int NS_Win7RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win7RTMVersionLie@@3HA
0x180048BC8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VerifyVersionInfoLite::g_pAPIHooks" ?g_pAPIHooks@NS_VerifyVersionInfoLite@@3PEAUtagHOOKAPI@@EA
0x180033730: "`string'" ??_C@_1GK@BNEGKNNN@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x1800322F0: "`string'" ??_C@_1HI@BEGLNFHN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003B0B0: "`string'" ??_C@_0M@DLGMIBOA@?5?5?5?5Path?$DN?$CFS?$AA@
0x1800294C0: "`string'" ??_C@_1CI@OJAPABBO@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAS?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAV?$AAi?$AAs?$AAt?$AAa?$AA?$AA@
0x18003A7A0: "`string'" ??_C@_1CK@GLKLJOFO@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAD?$AAE?$AAV?$AAA?$AAC?$AAC?$AAE?$AAL?$AA?$AA@
0x18001FA24: "void __cdecl NS_VistaRTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaRTMVersionLie@@YAXXZ
0x18002FA38: "`string'" ??_C@_0N@DBMGCDLD@LCMapStringW?$AA@
0x1800191F8: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGPEAKPEAE2@Z
0x180032368: "`string'" ??_C@_1CG@GBLLODAB@?$AAN?$AAo?$AAD?$AAr?$AAi?$AAv?$AAe?$AAT?$AAy?$AAp?$AAe?$AAA?$AAu?$AAt?$AAo?$AAR?$AAu?$AAn?$AA?$AA@
0x18002FF30: "`string'" ??_C@_0CJ@EAKBDFBK@NS_FaultTolerantHeap?3?3FthClientR@
0x18001C0F8: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetRootKey(struct HKEY__ * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?GetRootKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAVCVirtualKey@2@@Z
0x180048B5C: "unsigned long NS_FaultTolerantHeap::FthCookie" ?FthCookie@NS_FaultTolerantHeap@@3KA
0x1800314A8: "`string'" ??_C@_1BO@LMJPEBE@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAW?$AAr?$AAi?$AAt?$AAe?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x18003A468: "`string'" ??_C@_1BO@MMDENMAP@?$AAS?$AAo?$AAr?$AAt?$AAO?$AAr?$AAd?$AAe?$AAr?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x18002A4C8: "`string'" ??_C@_1DA@KBAACEHP@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18003CBB8: "`string'" ??_C@_0BN@NKGEDHJI@_lwrite?3?5Patched?5write?5to?5?$CFx?$AA@
0x1800032B0: "__cdecl FindPESection" _FindPESection
0x180028A38: "__cdecl _imp_atol" __imp_atol
0x18003AA90: "`string'" ??_C@_0CH@BEMCBEPN@NS_VirtualRegistry?3?3CRegLock?3?3CR@
0x180038A60: "`string'" ??_C@_1HE@MOMJNEPO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x1800361E0: "`string'" ??_C@_1IC@LHGPCHBF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18003A9E0: "`string'" ??_C@_0CF@GEEBEDNJ@Cannot?5create?5virtual?5registry?5v@
0x180023BD0: StringCchCatA
0x180030708: "`string'" ??_C@_0CB@MHHFGMAB@Client?9?$DOMaximumAllocOverhead?5?$DO?50@
0x180031750: "`string'" ??_C@_1CK@IDBLHGPB@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAU?$AAs?$AAe?$AA?$AA@
0x180029890: "`string'" ??_C@_0DB@BKMJGGIP@Overlapped?5?$CB?$DN?5NULL?5?$CG?$CG?5Overlapped@
0x180029DA8: "`string'" ??_C@_1CO@IDONCJBK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180028978: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18003B818: "`string'" ??_C@_0M@JBEAMLKM@RegOpenKeyA?$AA@
0x18002A638: "`string'" ??_C@_09KECPKCEO@CopyFileA?$AA@
0x180033F20: "`string'" ??_C@_0CA@HHAECGAF@?$FLDSDEVACCEL?$FN?5Invalid?5Parameters?$AA@
0x180031890: "`string'" ??_C@_1CI@EPEEFGFH@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAF?$AAo?$AAn?$AAt?$AAs?$AA?$AA@
0x180042000: "char * __ptr64 __ptr64 NS_WRPMitigation::g_szCommandLine" ?g_szCommandLine@NS_WRPMitigation@@3PEADEA
0x180012B8C: StringCchCatW
0x180048960: "class NS_VirtualRegistry::CVirtualRegistry NS_VirtualRegistry::VRegistry" ?VRegistry@NS_VirtualRegistry@@3VCVirtualRegistry@1@A
0x180016764: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::ExpandRegString(void * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long,int) __ptr64" ?ExpandRegString@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEAXPEAK1KH@Z
0x18003B690: "`string'" ??_C@_0CD@OMKKBJJ@?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9?9@
0x180048780: "struct HINSTANCE__ * __ptr64 __ptr64 ShimLib::g_hinstDll" ?g_hinstDll@ShimLib@@3PEAUHINSTANCE__@@EA
0x18003BCC0: "`string'" ??_C@_1DC@JDNAPBNG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
0x18003CB58: "`string'" ??_C@_0DI@OGEKDAHM@_lcreat?3?5Patched?5?$CFs?5to?5open?5with@
0x180034530: "`string'" ??_C@_1HE@EBNNOLEO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18003D488: "`string'" ??_C@_0O@LGDNFGAB@SecurityUtils?$AA@
0x180489C38: "void * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_TISid" ?g_TISid@NS_WRPRegDeleteKey@@3PEAXEA
0x180026840: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180011820: "long __cdecl NS_VirtualRegistry::Delphi5SetValue(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long)" ?Delphi5SetValue@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@KPEBEK@Z
0x180028B80: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180035858: "`string'" ??_C@_0CE@GKEHCAMC@NS_VirtualRegistry?3?3BuildIndeoSo@
0x180034820: "`string'" ??_C@_1FO@FCHPLKLK@?$AAx?$AA8?$AA6?$AA?5?$AAF?$AAa?$AAm?$AAi?$AAl?$AAy?$AA?5?$AA1?$AA5?$AA?5?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?5?$AA1?$AA?5?$AAS?$AAt?$AAe?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AA2@
0x180040A5C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180046370: "char * __ptr64 __ptr64 NS_EmulateSortingWindows61::g_szCommandLine" ?g_szCommandLine@NS_EmulateSortingWindows61@@3PEADEA
0x18003D418: "`string'" ??_C@_0CB@HJMIDDFC@Failed?5to?5acquire?5manager?5mutex?6@
0x180032E18: "`string'" ??_C@_1BI@PDLKGKJJ@?$AA4?$AA?4?$AA7?$AA2?$AA?4?$AA2?$AA1?$AA0?$AA6?$AA?4?$AA9?$AA?$AA@
0x180048C38: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaSP1VersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaSP1VersionLie@@3PEAUtagHOOKAPI@@EA
0x18000E670: "void __cdecl NS_VirtualRegistry::BuildIllustrator8(char const * __ptr64)" ?BuildIllustrator8@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B340: "`string'" ??_C@_0DB@JAPIKCMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x18000BEA0: "void __cdecl NS_VirtualRegistry::BuildCodecs(char const * __ptr64)" ?BuildCodecs@NS_VirtualRegistry@@YAXPEBD@Z
0x18003C2E8: "`string'" ??_C@_0CN@GAEBOND@NS_VistaRTMVersionLie?3?3APIHook_G@
0x18003183C: "`string'" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18003BF78: "`string'" ??_C@_0DE@ODJAANFB@NS_VirtualRegistry2?3?3CVirtualReg@
0x180014D78: "public: struct NS_VirtualRegistry::REDIRECTOR * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AddRedirect(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddRedirect@CVirtualRegistry@NS_VirtualRegistry@@QEAAPEAUREDIRECTOR@2@PEBG0@Z
0x1800137D0: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180021F50: "int __cdecl NS_WRPMitigation::APIHook_CopyFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_CopyFileW@NS_WRPMitigation@@YAHPEBG0H@Z
0x18003B098: "`string'" ??_C@_0BB@HMCLOCCJ@?$CF08lx?$DNOpenKeyW?$CI?$CJ?$AA@
0x1800205C4: "int __cdecl NS_VistaRTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaRTMVersionLie@@YAHPEBGZZ
0x180032390: "`string'" ??_C@_1GK@LIFPHOKG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180048CB0: "unsigned long NS_FaultTolerantHeap::FthDelayFreeQueueBlocks" ?FthDelayFreeQueueBlocks@NS_FaultTolerantHeap@@3KA
0x18002FC68: "`string'" ??_C@_0BF@NNHHEAOC@WerReportCloseHandle?$AA@
0x18002D190: "`string'" ??_C@_1LA@EHEHFFDB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180010980: "void __cdecl NS_VirtualRegistry::BuildWebSphereSetup(char const * __ptr64)" ?BuildWebSphereSetup@NS_VirtualRegistry@@YAXPEBD@Z
0x1800302E8: "`string'" ??_C@_0DP@FAMIAFIA@Client?5successfully?5initialized?5@
0x1800108E0: "void __cdecl NS_VirtualRegistry::BuildWABDLLPath(char const * __ptr64)" ?BuildWABDLLPath@NS_VirtualRegistry@@YAXPEBD@Z
0x180022990: "int __cdecl NS_WRPMitigation::APIHook_SetFileAttributesW(unsigned short const * __ptr64,unsigned long)" ?APIHook_SetFileAttributesW@NS_WRPMitigation@@YAHPEBGK@Z
0x180047B00: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180048938: "struct _RTL_CRITICAL_SECTION NS_VirtualRegistry::csRegCriticalSection" ?csRegCriticalSection@NS_VirtualRegistry@@3U_RTL_CRITICAL_SECTION@@A
0x180037B70: "`string'" ??_C@_1IC@CNBCMOMA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AAA?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180028A08: "__cdecl _imp__stricmp" __imp__stricmp
0x180032898: "`string'" ??_C@_0CF@BLJJGHNL@NS_VirtualRegistry?3?3BuildBogusCt@
0x180028A60: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18001E6C0: "void __cdecl NS_VirtualRegistry2::BuildEnvironmentLie(char const * __ptr64)" ?BuildEnvironmentLie@NS_VirtualRegistry2@@YAXPEBD@Z
0x180034C50: "`string'" ??_C@_0CD@ENEHHOGJ@ExpandValueString?5for?5Value?5fail@
0x180032B80: "`string'" ??_C@_1BM@OCLCOPCH@?$AAM?$AAS?$AAA?$AAC?$AAM?$AA?4?$AAM?$AAS?$AAA?$AAD?$AAP?$AAC?$AAM?$AA?$AA@
0x180028900: "__cdecl _imp_CharUpperW" __imp_CharUpperW
0x180013AC0: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKK@Z
0x180489B90: "unsigned long NS_FaultTolerantHeap::FthHeapLocksInProgress" ?FthHeapLocksInProgress@NS_FaultTolerantHeap@@3KA
0x180030110: "`string'" ??_C@_0O@BAFDFOCI@RtlUnlockHeap?$AA@
0x18003B908: "`string'" ??_C@_0BA@KECIECLD@RegDeleteKeyExA?$AA@
0x180032600: "`string'" ??_C@_1GE@EJHOHDLA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x180023A5C: "int __cdecl NS_WRPMitigation::MySfpIsParentKeyProtectedW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?MySfpIsParentKeyProtectedW@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBGKPEAPEAU2@@Z
0x18002E020: "`string'" ??_C@_1KE@JKMEACL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4@
0x1800205C4: "int __cdecl NS_Win7RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win7RTMVersionLie@@YAHPEBGZZ
0x180039C70: "`string'" ??_C@_1BE@NFPAEHCM@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAd?$AA?$AA@
0x18002B9E4: "`string'" ??_C@_15MJIMBFJA@?$AA1?$AA1?$AA?$AA@
0x1800321A0: "`string'" ??_C@_1GC@NPMLIOAJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x180032598: "`string'" ??_C@_1BI@DLMANABL@?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180039480: "`string'" ??_C@_1GC@DPMODELG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA3?$AAE?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18003A340: "`string'" ??_C@_1FI@FPFIGBOF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAa?$AAc?$AAr?$AAo?$AAm?$AAe?$AAd?$AAi?$AAa?$AA?2?$AAF?$AAl?$AAa?$AAs?$AAh?$AAP?$AAl@
0x180034368: "`string'" ??_C@_1BG@MEJPLMML@?$AAS?$AAh?$AAo?$AAw?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x180034F90: "`string'" ??_C@_1GE@DPEOJDHL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA2?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x180002AA4: "__cdecl CRT_INIT" _CRT_INIT
0x180031510: "`string'" ??_C@_1CA@MEPHHEIK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAF?$AAa?$AAu?$AAl?$AAt?$AAs?$AA?$AA@
0x180039AE8: "`string'" ??_C@_0BE@KOBPIJFG@EnableVirtualDelete?$AA@
0x18003C4D8: "`string'" ??_C@_0CM@GFCAOKAO@NS_VistaSP1VersionLie?3?3Initializ@
0x180004600: "long __cdecl NS_WRPMitigation::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_WRPMitigation@@YAJPEAUHKEY__@@@Z
0x18002B670: "`string'" ??_C@_1BE@DNCEJCKN@?$AAe?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002BAE0: "`string'" ??_C@_1EO@MHCNBNKH@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18001D7B0: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBG@Z
0x18001AB90: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x180028870: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800324D0: "`string'" ??_C@_0BK@GHNBPIFM@Failed?5to?5make?5NetBT?5path?$AA@
0x1800298F0: "`string'" ??_C@_0BO@KOHOIHMO@Pipe?5read?5message?5timed?5out?4?6?$AA@
0x180037F90: "`string'" ??_C@_1IC@KBOAMNPP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAE?$AA3?$AA6?$AA9?$AAA?$AA1?$AA6?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180038F20: "`string'" ??_C@_1EC@PKNMCMAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAc?$AAh?$AAm?$AA?4?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x1800320A0: "`string'" ??_C@_1HK@CJGJIIN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x18002A420: "`string'" ??_C@_1CK@ENIGEOAD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180015624: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::CloseKey(struct HKEY__ * __ptr64) __ptr64" ?CloseKey@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@@Z
0x18003C020: "`string'" ??_C@_0DC@BBFPABFH@NS_VirtualRegistry2?3?3CVirtualReg@
0x180037C00: "`string'" ??_C@_1GE@CCLFFPFA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA4?$AA7?$AA2?$AA5?$AAE?$AAA?$AA1?$AA?9?$AA2?$AAF?$AAB?$AAC?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAB@
0x1800333C0: "`string'" ??_C@_0BA@JIEDJPFF@BuildMSI?5Failed?$AA@
0x180002F6C: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18001AD4C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::DeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKK@Z
0x180029F10: "`string'" ??_C@_1FA@GOCGICK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18000B460: "void __cdecl NS_VirtualRegistry::BuildCLRVersionLie(char const * __ptr64)" ?BuildCLRVersionLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A3F8: "`string'" ??_C@_1CE@BIPJPOIJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180028B40: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18002A730: "`string'" ??_C@_0BD@MDOGBKMJ@SetFileAttributesA?$AA@
0x180031B80: "`string'" ??_C@_1FI@LBGJFLLN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr@
0x18001ADBC: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::DeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKK@Z
0x18001E1C0: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x180035000: "`string'" ??_C@_1FE@NLJKIMBN@?$AAT?$AAr?$AAu?$AAe?$AAM?$AAo?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA2?$AA?4?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?5?$AAP?$AAr?$AAo?$AAp@
0x1800047E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180031630: "`string'" ??_C@_1BI@JHCJEKM@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAF?$AAr?$AAe?$AAe?$AA?$AA@
0x18001C278: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::Initialize(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?Initialize@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEAUHKEY__@@PEBG1K@Z
0x180032920: "`string'" ??_C@_1EA@MLLKIBAE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAX?$AA?$AA@
0x180028710: "__cdecl _imp_GetTempPathA" __imp_GetTempPathA
0x1800331A0: "`string'" ??_C@_1FO@PHIPMJKP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAa?$AAe?$AAr?$AAe?$AA?5?$AAC?$AAo?$AAr?$AAp?$AA?2?$AAS?$AAc?$AAa?$AAn?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr@
0x180014520: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x180028748: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180030EE8: "`string'" ??_C@_0CB@EMHFENEL@?$FLHasbro?5hack?$FN?5Failed?5to?5query?5?$CFS@
0x18002F6D0: AE_SHIM_API_HIT_ONCE_EVENT
0x180016B7C: "public: void __cdecl NS_VirtualRegistry::OPENKEY::FlushEnumList(void) __ptr64" ?FlushEnumList@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x1800328D8: "`string'" ??_C@_1CC@PBKCLGDJ@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180031030: "`string'" ??_C@_0CA@KGAELMIL@?$FLHasbro?5hack?$FN?5Adding?5fix?5for?5?$CFS?$AA@
0x18002FFD8: "`string'" ??_C@_0BP@HBOHKBKH@NS_FaultTolerantHeap?3?3NotifyFn?$AA@
0x180013EF0: "long __cdecl NS_VirtualRegistry::APIHook_RegGetValueA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegGetValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBD1KPEAKPEAE2@Z
0x180031178: "`string'" ??_C@_1DG@PAICFPLO@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?$AA@
0x180030798: "`string'" ??_C@_0DL@EFOPBGED@Client?5failed?5to?5write?5?8acknowle@
0x1800145A0: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x1800287B8: "__cdecl _imp_WerRegisterMemoryBlock" __imp_WerRegisterMemoryBlock
0x180004310: "long __cdecl NS_VirtualRegistry::APIHook_RegGetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegGetValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBG1KPEAKPEAE2@Z
0x1800056B8: "void __cdecl NS_DXMaximizedWindowedHwndOverride::SetD3D9MaximizedWindowedHwndOverride(int)" ?SetD3D9MaximizedWindowedHwndOverride@NS_DXMaximizedWindowedHwndOverride@@YAXH@Z
0x18003BDB8: "`string'" ??_C@_0BB@NEIFBADC@User?5path?3?$FL?$CFws?$FN?6?$AA@
0x18002D9A0: "`string'" ??_C@_1HM@KNGLLKB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180038340: "`string'" ??_C@_1IK@DBAKFNJJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003BFD0: "`string'" ??_C@_0CP@JFBENFCK@NS_VirtualRegistry2?3?3CVirtualReg@
0x180033F40: "`string'" ??_C@_1BO@OMKAMOBJ@?$AAE?$AAM?$AAU?$AAL?$AAA?$AAT?$AAE?$AAD?$AAR?$AAE?$AAN?$AAD?$AAE?$AAR?$AA?$AA@
0x180031570: "`string'" ??_C@_1BM@IEPCKFCG@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AA?$AA@
0x18003C538: "`string'" ??_C@_0CN@EDDOEGFF@NS_VistaSP2VersionLie?3?3APIHook_G@
0x180029E38: "`string'" ??_C@_1CE@NIDINLJC@?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x1800299A0: "`string'" ??_C@_19NHABCBNP@?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800312F0: "`string'" ??_C@_1CC@KPBNMCGE@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAM?$AAa?$AAc?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180033318: "`string'" ??_C@_0P@FCJOOJPP@CopySID?5failed?$AA@
0x1800393A0: "`string'" ??_C@_1GC@GLDACDKA@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA2?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180047BB8: "unsigned __int64 NS_DXMaximizedWindowedHwndOverride::g_stShimId" ?g_stShimId@NS_DXMaximizedWindowedHwndOverride@@3_KA
0x180034500: "`string'" ??_C@_1CG@CLPJHCHC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAO?$AAD?$AAB?$AAC?$AA?$AA@
0x180047B98: "unsigned __int64 NS_FaultTolerantHeap::g_stShimId" ?g_stShimId@NS_FaultTolerantHeap@@3_KA
0x1800340B0: "`string'" ??_C@_0CF@FCPIIEIB@?$FLDSCACHEPOSITIONS?$FN?5Unknown?5devic@
0x1800325E0: "`string'" ??_C@_0BO@JHCDDHAF@Error?5adding?5the?5Key?5to?5NetBT?$AA@
0x180038998: "`string'" ??_C@_1CG@DFIEGEDH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAi?$AAT?$AAu?$AAn?$AAe?$AAs?$AA?4?$AAB?$AAu?$AAr?$AAn?$AAC?$AAD?$AA?$AA@
0x18003CF70: "`string'" ??_C@_1EG@GANPKLGD@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt@
0x180036C50: "`string'" ??_C@_1CC@MNBOPDPO@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAK?$AAe?$AAy?$AA?$AA@
0x180030590: "`string'" ??_C@_0DD@PCHBJNAE@Client?5failed?5to?5set?5pipe?5into?5r@
0x180019E28: "unsigned short * __ptr64 __cdecl NS_VirtualRegistry::SplitPath(unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?SplitPath@NS_VirtualRegistry@@YAPEAGPEBGPEAPEAUHKEY__@@@Z
0x180024B10: "public: __cdecl ShimLib::CString::CString(unsigned short const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBG@Z
0x18002EE00: "`string'" ??_C@_1IK@OBCHBDDC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180048C30: "int NS_VistaSP1VersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaSP1VersionLie@@3HA
0x18000AAF4: "public: __cdecl ShimLib::CString::CString(char const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBD@Z
0x180020E8C: "int __cdecl NS_Win7RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win7RTMVersionLie@@YAHK@Z
0x180021518: "int __cdecl NS_Win8RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win8RTMVersionLie@@YAHK@Z
0x1800387D8: "`string'" ??_C@_19GABGPCIC@?$AA?4?$AAa?$AAi?$AAf?$AA?$AA@
0x180031590: "`string'" ??_C@_1CC@OPLFINLL@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x18002EE90: "`string'" ??_C@_1CI@PKBBAFBH@?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x180029200: "`string'" ??_C@_00CNPNBAHC@?$AA@
0x1800487BC: "int NS_Win81RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win81RTMVersionLie@@3HA
0x180489BC8: "unsigned short * __ptr64 __ptr64 NS_VistaSP1VersionLie::pwszServicePack" ?pwszServicePack@NS_VistaSP1VersionLie@@3PEAGEA
0x180048C88: "int NS_DXMaximizedWindowedHwndOverride::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DXMaximizedWindowedHwndOverride@@3HA
0x18000C640: "void __cdecl NS_VirtualRegistry::BuildDSDisableDevice(char const * __ptr64)" ?BuildDSDisableDevice@NS_VirtualRegistry@@YAXPEBD@Z
0x18000A358: "int __cdecl NS_FaultTolerantHeap::FthClientInitialize(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64,char * __ptr64)" ?FthClientInitialize@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@PEAD@Z
0x18003B638: "`string'" ??_C@_0BB@HOOKDLOF@?$CF08lx?$DNCloseKey?$CI?$CJ?$AA@
0x180014A38: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddExpander(unsigned short const * __ptr64) __ptr64" ?AddExpander@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x180024948: "int __cdecl ShimLib::MutexExists(unsigned short const * __ptr64)" ?MutexExists@ShimLib@@YAHPEBG@Z
0x180028878: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18003D4C0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800303E8: "`string'" ??_C@_0CI@JMCEMAEN@Client?5connection?5not?5allowed?5an@
0x180048C00: "int NS_Win8RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win8RTMVersionLie@@3HA
0x180025D54: "public: __cdecl ShimLib::CStringToken::CStringToken(class ShimLib::CString const & __ptr64,class ShimLib::CString const & __ptr64) __ptr64" ??0CStringToken@ShimLib@@QEAA@AEBVCString@1@0@Z
0x180028940: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180013610: "long __cdecl NS_VirtualRegistry::APIHook_RegConnectRegistryA(char const * __ptr64,struct HKEY__ * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegConnectRegistryA@NS_VirtualRegistry@@YAJPEBDPEAUHKEY__@@PEAPEAU2@@Z
0x18002FBB0: "`string'" ??_C@_0BI@EGKIMOGO@GetFileVersionInfoSizeW?$AA@
0x180035BD8: "`string'" ??_C@_1BG@NIKOAEDK@?$AAI?$AAs?$AAR?$AAe?$AAn?$AAd?$AAe?$AAr?$AAe?$AAd?$AA?$AA@
0x1800311B0: "`string'" ??_C@_1BO@CBGEHFOD@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x18003A4C0: "`string'" ??_C@_1BE@BCENEDIG@?$AA4?$AA?4?$AA5?$AA?4?$AA5?$AA1?$AA6?$AA4?$AA1?$AA?$AA@
0x18002EB80: "`string'" ??_C@_1FO@LOHGPOLM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp@
0x1800091C4: "void __cdecl NS_FaultTolerantHeap::FthFreeTrackerLogStack(void * __ptr64)" ?FthFreeTrackerLogStack@NS_FaultTolerantHeap@@YAXPEAX@Z
0x18003CC30: "`string'" ??_C@_1EO@KOFBLBAB@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAs?$AAu?$AAb?$AAk?$AAe?$AAy?$AA?5?$AAm?$AAi?$AAt@
0x180032CC0: "`string'" ??_C@_0CD@BAJLJALP@SpellIt?3?5GetSystemDirectory?5Fail@
0x180032730: "`string'" ??_C@_17JKHNOBGI@?$AA5?$AA?4?$AA0?$AA?$AA@
0x18003C658: "`string'" ??_C@_0CJ@CMJJLAOP@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x18003CA60: "`string'" ??_C@_0CG@LLFMEBFG@NS_WRPMitigation?3?3APIHook_Access@
0x1800335E0: "`string'" ??_C@_1HA@ODMFMEHE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x180029800: "`string'" ??_C@_0BE@HENACFMA@wrong?5heap?3?5?$CFp?0?5?$CFp?6?$AA@
0x180028A20: "__cdecl _imp_sprintf_s" __imp_sprintf_s
0x180030190: "`string'" ??_C@_0BI@KDFJMCKL@FTH?3?5ASSERT?3?5?$CFs?$CI?$CFu?$CJ?3?5?$CFs?$AA@
0x1800102C0: "void __cdecl NS_VirtualRegistry::BuildSpellItDeluxe(char const * __ptr64)" ?BuildSpellItDeluxe@NS_VirtualRegistry@@YAXPEBD@Z
0x180048B50: "struct tagHOOKAPI * __ptr64 __ptr64 NS_FaultTolerantHeap::g_pAPIHooks" ?g_pAPIHooks@NS_FaultTolerantHeap@@3PEAUtagHOOKAPI@@EA
0x180030BB0: "`string'" ??_C@_1FI@GHMJDGBC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180037810: "`string'" ??_C@_1GE@MJHOKIBE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA5?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180030020: "`string'" ??_C@_0CF@PJNKJNJC@Failed?5to?5acquire?5heap?5manager?5m@
0x180039FA0: "`string'" ??_C@_1EI@DPHMDHAI@?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAD?$AAe?$AAs?$AAt?$AAr?$AAo?$AAy?$AAD?$AAe?$AAv@
0x180038EE0: "`string'" ??_C@_1DI@CADBMDLI@?$AAc?$AAh?$AAm?$AA?4?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x1800158B0: "struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::CreateNewEnumEntry(unsigned short const * __ptr64,struct NS_VirtualRegistry::ENUMENTRY * __ptr64)" ?CreateNewEnumEntry@NS_VirtualRegistry@@YAPEAUENUMENTRY@1@PEBGPEAU21@@Z
0x180037A30: "`string'" ??_C@_1IC@NEHDHEAN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA8?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18003BEA0: "`string'" ??_C@_0BM@FFJBHIBH@Failed?5to?5add?5child?5key?5?$CFd?6?$AA@
0x18002FFC0: "`string'" ??_C@_0BH@LBEIPNFC@?$FLApiName?$FN?5Hook?5Entered?$AA@
0x180037EC0: "`string'" ??_C@_1GE@OALFJILL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAE?$AA3?$AA6?$AA9?$AAA?$AA1?$AA6?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180028818: "__cdecl _imp_CancelIo" __imp_CancelIo
0x1800339A0: "`string'" ??_C@_1O@PGHBEGLO@?$AAh?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x180009038: "void __cdecl NS_FaultTolerantHeap::FthFreeTrackerFindStack(struct NS_FaultTolerantHeap::_FTH_ISSUE * __ptr64)" ?FthFreeTrackerFindStack@NS_FaultTolerantHeap@@YAXPEAU_FTH_ISSUE@1@@Z
0x1800289A8: "__cdecl _imp_GetAce" __imp_GetAce
0x18000E6A0: "void __cdecl NS_VirtualRegistry::BuildIndeo3(char const * __ptr64)" ?BuildIndeo3@NS_VirtualRegistry@@YAXPEBD@Z
0x18001FAD8: StringCchPrintfA
0x18001CDA4: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x180024FDC: "protected: void __cdecl ShimLib::CString::AssignCopy(int,unsigned short const * __ptr64) __ptr64" ?AssignCopy@CString@ShimLib@@IEAAXHPEBG@Z
0x180033E88: "`string'" ??_C@_01DNKMNLPK@?$HM?$AA@
0x180028A80: "__cdecl _imp_wcschr" __imp_wcschr
0x180488D58: "long NS_FaultTolerantHeap::FthMessageHistoryIndex" ?FthMessageHistoryIndex@NS_FaultTolerantHeap@@3JA
0x18003ACB8: "`string'" ??_C@_0BF@BDOBANOM@Adding?5Value?5?$CFls?2?$CFls?$AA@
0x1800305F8: "`string'" ??_C@_0CH@LPNCAED@Client?5failed?5to?5get?5full?5image?5@
0x1800487C0: "int NS_Win8RTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Win8RTMVersionLie@@3HA
0x180046330: "char * __ptr64 __ptr64 NS_Win8RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win8RTMVersionLie@@3PEADEA
0x18003C3F8: "`string'" ??_C@_0L@LNAOMCPJ@GetVersion?$AA@
0x18003C9A8: "`string'" ??_C@_0BJ@MOPDNMKK@Patched?5?$CFs?5to?5ignore?5WRP?$AA@
0x18003C378: "`string'" ??_C@_1CA@PCALKAHH@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x180036000: "`string'" ??_C@_1GE@GCAIMEOB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA4?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x1800388E8: "`string'" ??_C@_19KLNMNDPL@?$AA?4?$AAm?$AAp?$AAg?$AA?$AA@
0x1800294E8: "`string'" ??_C@_1DA@OOMDGOPM@?$AAD?$AAX?$AAM?$AAa?$AAx?$AAi?$AAm?$AAi?$AAz?$AAe?$AAd?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAe?$AAd?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x18003BBF0: "`string'" ??_C@_1GA@OHIANHOA@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4@
0x18003B300: "`string'" ??_C@_0EA@MBLGEDAD@?$FLQueryInfoA?$FN?5NULL?5passed?5for?5lpC@
0x180029AB0: "`string'" ??_C@_1CE@PNDGFGMN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AA?$AA@
0x180023474: "void __cdecl NS_WRPMitigation::LogSfpKeyA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyA@NS_WRPMitigation@@YAXPEAUHKEY__@@PEBDPEAG@Z
0x18003C108: "`string'" ??_C@_0DC@ELEENNMO@NS_VirtualRegistry2?3?3CVirtualReg@
0x180034AB0: "`string'" ??_C@_1CE@PLNJMHPE@?$AAE?$AAx?$AAi?$AAs?$AAt?$AAi?$AAn?$AAg?$AAP?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18002A678: "`string'" ??_C@_0M@HDHGNCCA@CreateFileA?$AA@
0x180032D80: "`string'" ??_C@_0BO@MJEOAOLL@SpellIt?3?5RegSetValueEx?5failed?$AA@
0x18002605C: "public: long __cdecl ShimLib::PathTree::GetFlags(class ShimLib::CString const & __ptr64,unsigned long & __ptr64) __ptr64" ?GetFlags@PathTree@ShimLib@@QEAAJAEBVCString@2@AEAK@Z
0x180028C18: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180025F64: "public: __cdecl ShimLib::PathTreeNodeSearch::~PathTreeNodeSearch(void) __ptr64" ??1PathTreeNodeSearch@ShimLib@@QEAA@XZ
0x18003D110: "`string'" ??_C@_0DH@OALJAIBH@RLCHECK?3?5Error?5opening?5activatio@
0x180033F60: "`string'" ??_C@_1BC@EDLPCHAI@?$AAK?$AAS?$AAR?$AAE?$AAN?$AAD?$AAE?$AAR?$AA?$AA@
0x18002F810: "`string'" ??_C@_0BD@PHPGDNAM@VistaSP1VersionLie?$AA@
0x180031BE0: "`string'" ??_C@_1FM@BNKKHABO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr@
0x180048C18: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win7RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win7RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x180033B90: "`string'" ??_C@_1CO@HPHLILLD@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAe?$AAd?$AAO?$AAr?$AAg?$AAa?$AAn?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000CD30: "void __cdecl NS_VirtualRegistry::BuildDelphi5Pro(char const * __ptr64)" ?BuildDelphi5Pro@NS_VirtualRegistry@@YAXPEBD@Z
0x18001D530: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18002B550: "`string'" ??_C@_1EO@EKOECGLG@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA2?$AA4?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18003B5E8: "`string'" ??_C@_0CE@JNHACDNA@?$FLRegDeleteKeyW?$FN?5Deleting?5subkey?5@
0x1800034F1: "__cdecl _imp_load_GetSecurityInfo" __imp_load_GetSecurityInfo
0x180048540: "int NS_WRPMitigation::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WRPMitigation@@3HA
0x180048BF8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win81RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win81RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x180028660: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1800305C8: "`string'" ??_C@_0CK@JPCAANBI@Client?5failed?5to?5initialize?5mapp@
0x180036270: "`string'" ??_C@_1HK@IJCOLMBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18001C2D0: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::Initialize(void) __ptr64" ?Initialize@CVirtualRegistry@NS_VirtualRegistry2@@QEAAKXZ
0x18002C540: "`string'" ??_C@_1MM@PCEFGFLO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002B688: "`string'" ??_C@_1DI@CODNCFCJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180034E20: "`string'" ??_C@_1GE@DOBDLFKK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x18002FC28: "`string'" ??_C@_0BA@MCMDMANI@WerReportSubmit?$AA@
0x180022DF0: "unsigned int __cdecl NS_WRPMitigation::APIHook__lwrite(int,char const * __ptr64,unsigned int)" ?APIHook__lwrite@NS_WRPMitigation@@YAIHPEBDI@Z
0x180020F80: "void __cdecl NS_Win7RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win7RTMVersionLie@@YAXXZ
0x180028BB0: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x180013C30: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x180028A48: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180035DA0: "`string'" ??_C@_1M@PFCMLKBL@?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?$AA@
0x180010AC0: "void __cdecl NS_VirtualRegistry::BuildWin81RTMLie(char const * __ptr64)" ?BuildWin81RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800222A0: "int __cdecl NS_WRPMitigation::APIHook_MoveFileExA(char const * __ptr64,char const * __ptr64,unsigned long)" ?APIHook_MoveFileExA@NS_WRPMitigation@@YAHPEBD0K@Z
0x1800332C0: "`string'" ??_C@_0CK@JJLFFJMF@?$FLGetStringSID?$FN?5Failed?5to?5OpenPro@
0x180028780: "__cdecl _imp_GetShortPathNameW" __imp_GetShortPathNameW
0x180028A28: "__cdecl _imp_vsprintf_s" __imp_vsprintf_s
0x180036A70: "`string'" ??_C@_1IC@HJILJICO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA3?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180488D60: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthMessageHistory" ?FthMessageHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x180489BC0: "char * __ptr64 __ptr64 NS_VistaSP1VersionLie::pszServicePack" ?pszServicePack@NS_VistaSP1VersionLie@@3PEADEA
0x18002D840: "`string'" ??_C@_1GK@KFFAGBKO@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo@
0x1800309D8: "`string'" ??_C@_0BD@LDFKKKHL@VerifyVersionInfoW?$AA@
0x180039410: "`string'" ??_C@_1GC@IJNFNEMG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA3?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180029620: "`string'" ??_C@_1EK@OFPIDJFP@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg@
0x180028740: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x18002FA58: "`string'" ??_C@_0BA@KCEFAGNO@FindNLSStringEx?$AA@
0x1800487B8: "int NS_WRPRegDeleteKey::g_bSubshimUsed" ?g_bSubshimUsed@NS_WRPRegDeleteKey@@3HA
0x1800387D0: "`string'" ??_C@_17DGBDBMGL@?$AA?4?$AAa?$AAa?$AA?$AA@
0x18000C090: "void __cdecl NS_VirtualRegistry::BuildD3DReleaseDevice(char const * __ptr64)" ?BuildD3DReleaseDevice@NS_VirtualRegistry@@YAXPEBD@Z
0x180048790: "void * __ptr64 * __ptr64 __ptr64 NS_FaultTolerantHeap::FthSpecialHeaps" ?FthSpecialHeaps@NS_FaultTolerantHeap@@3PEAPEAXEA
0x1800388D8: "`string'" ??_C@_1M@DKLHOHF@?$AA?4?$AAm?$AAp?$AAe?$AAg?$AA?$AA@
0x180047B60: "unsigned __int64 NS_Win8RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win8RTMVersionLie@@3_KA
0x18003C5C8: "`string'" ??_C@_0CM@IKGBJFE@NS_VistaSP2VersionLie?3?3Initializ@
0x180036BD8: "`string'" ??_C@_1DM@LMGODJJB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAl?$AA?2?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?2?$AA4?$AA?4?$AA1?$AA?$AA@
0x180002930: "void * __ptr64 __cdecl NS_WRPMitigation::APIHook_CreateFileW(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?APIHook_CreateFileW@NS_WRPMitigation@@YAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180489BD8: "char * __ptr64 __ptr64 NS_VistaSP2VersionLie::pszServicePack" ?pszServicePack@NS_VistaSP2VersionLie@@3PEADEA
0x180022920: "int __cdecl NS_WRPMitigation::APIHook_SetFileAttributesA(char const * __ptr64,unsigned long)" ?APIHook_SetFileAttributesA@NS_WRPMitigation@@YAHPEBDK@Z
0x1800116A0: "void __cdecl NS_VirtualRegistry::BuildX86ArchLie(char const * __ptr64)" ?BuildX86ArchLie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800381D0: "`string'" ??_C@_1HM@KJODJILF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003A3B8: "`string'" ??_C@_17LOPLCOAA@?$AA6?$AA?4?$AA2?$AA?$AA@
0x180038320: "`string'" ??_C@_1BO@DIBBFNFM@?$AAI?$AAI?$AAn?$AAd?$AAe?$AAo?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AAO?$AAA?$AA?$AA@
0x180012EC8: "int __cdecl NS_VirtualRegistry::AddDirectSoundAppHack(unsigned long,unsigned long,unsigned long)" ?AddDirectSoundAppHack@NS_VirtualRegistry@@YAHKKK@Z
0x180029CF8: "`string'" ??_C@_1BK@KKGGODJC@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x18000329B: "__cdecl XcptFilter" _XcptFilter
0x1800326D0: "`string'" ??_C@_1FM@FGPCJBDB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180028C20: "__cdecl _xc_a" __xc_a
0x180033CD8: "`string'" ??_C@_1DK@JIHICEAA@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAD?$AAr?$AAi?$AAv?$AAe?$AAL?$AAe?$AAt?$AAt?$AAe?$AAr?$AAA?$AAs?$AAs?$AAi?$AAg?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18002C0A0: "`string'" ??_C@_1KM@KHKPIBDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180028A90: "__cdecl _imp_wcsstr" __imp_wcsstr
0x1800300B0: "`string'" ??_C@_0M@BBFBOFBP@RtlFreeHeap?$AA@
0x18003A028: "`string'" ??_C@_19IAEMJIH@?$AA6?$AA0?$AA0?$AA0?$AA?$AA@
0x18003A8E0: "`string'" ??_C@_0BM@DBIJOJIO@Unknown?5DirectSound?5AppHack?$AA@
0x180029378: "`string'" ??_C@_1CG@MJHHIALJ@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAS?$AAP?$AA2?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x180032210: "`string'" ??_C@_1GE@PFEIIJMM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x18000C0E0: "void __cdecl NS_VirtualRegistry::BuildD3DReleaseProcessVid(char const * __ptr64)" ?BuildD3DReleaseProcessVid@NS_VirtualRegistry@@YAXPEBD@Z
0x180019B88: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::SetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGKPEBEK@Z
0x180048C20: "int NS_VistaSP2VersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaSP2VersionLie@@3HA
0x18003CAF8: "`string'" ??_C@_0DH@BDCMEDJC@_lopen?3?5Patched?5?$CFs?5to?5open?5with?5@
0x18003B210: "`string'" ??_C@_0P@KLGHLDGK@?5?5?5?5Result?$DN?$CFls?$AA@
0x1800387C8: "`string'" ??_C@_01CLKCMJKC@?5?$AA@
0x180489BE0: "unsigned short * __ptr64 __ptr64 NS_VistaSP2VersionLie::pwszServicePack" ?pwszServicePack@NS_VistaSP2VersionLie@@3PEAGEA
0x180038E70: "`string'" ??_C@_1GK@GDILBPNL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x1800286D8: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x180030330: "`string'" ??_C@_0EI@HDKPDMO@Client?5successfully?5initialized?5@
0x1800239F0: "int __cdecl NS_WRPMitigation::MySfpIsParentKeyProtectedA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?MySfpIsParentKeyProtectedA@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBDKPEAPEAU2@@Z
0x18003B9B8: "`string'" ??_C@_0DC@ELDEKJGH@NS_VirtualRegistry2?3?3CVirtualReg@
0x180038D90: "`string'" ??_C@_1GC@HGHKDJPO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA2?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x18000ECD0: "void __cdecl NS_VirtualRegistry::BuildLocale(char const * __ptr64)" ?BuildLocale@NS_VirtualRegistry@@YAXPEBD@Z
0x1800223C0: "int __cdecl NS_WRPMitigation::APIHook_MoveFileW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?APIHook_MoveFileW@NS_WRPMitigation@@YAHPEBG0@Z
0x18002B9F0: "`string'" ??_C@_1DG@JJCMNPCN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAV?$AAi?$AAs?$AAi?$AAo?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180048800: "unsigned long NS_FaultTolerantHeap::FthRandomSeed" ?FthRandomSeed@NS_FaultTolerantHeap@@3KA
0x180006870: "int __cdecl NS_EmulateSortingWindows61::APIHook_FindNLSString(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64)" ?APIHook_FindNLSString@NS_EmulateSortingWindows61@@YAHKKPEBGH0HPEAH@Z
0x180016E40: "public: int __cdecl NS_VirtualRegistry::CVirtualRegistry::Init(void) __ptr64" ?Init@CVirtualRegistry@NS_VirtualRegistry@@QEAAHXZ
0x18002B9C0: "`string'" ??_C@_1M@BEPPMGHC@?$AAV?$AAi?$AAs?$AAi?$AAo?$AA?$AA@
0x18003CA88: "`string'" ??_C@_03FNOCLAHC@WRP?$AA@
0x180022120: "int __cdecl NS_WRPMitigation::APIHook_DeleteFileA(char const * __ptr64)" ?APIHook_DeleteFileA@NS_WRPMitigation@@YAHPEBD@Z
0x1800339E0: "`string'" ??_C@_0CB@PHFFPNOA@NS_VirtualRegistry?3?3BuildMSA2001@
0x180028910: "__cdecl _imp_GetDefaultPrinterW" __imp_GetDefaultPrinterW
0x18003CCE8: "`string'" ??_C@_0CL@ECPFPKPA@RegCreateKey?5getting?5accedd?5deni@
0x18003AE60: "`string'" ??_C@_0BP@PMDMBFCM@Triggering?5?$CFS?5on?5opening?5of?5?$CFS?$AA@
0x18003AF20: "`string'" ??_C@_0DG@JPJNDHKL@NS_VirtualRegistry?3?3CVirtualRegi@
0x18001C77C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoKeyA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180489C30: "short NS_Win81RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win81RTMVersionLie@@3FA
0x1800117A0: "void __cdecl NS_VirtualRegistry::BuildXpSp3Lie(char const * __ptr64)" ?BuildXpSp3Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180036B00: "`string'" ??_C@_1GG@FPFIHNIP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9@
0x180028790: "__cdecl _imp_FindClose" __imp_FindClose
0x18003B928: "`string'" ??_C@_0N@DGDLFJKD@RegGetValueA?$AA@
0x180025838: "protected: static void __cdecl ShimLib::CString::Release(class ShimLib::CStringData<unsigned short> * __ptr64)" ?Release@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x1800487E4: "int NS_EmulateSortingVista::g_bSubshimUsed" ?g_bSubshimUsed@NS_EmulateSortingVista@@3HA
0x18002DD10: "`string'" ??_C@_1JE@DNGPPDEI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180048CD8: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthDelayFreeQueueFlushLock" ?FthDelayFreeQueueFlushLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x18000B4E0: "void __cdecl NS_VirtualRegistry::BuildCentennialOffice(char const * __ptr64)" ?BuildCentennialOffice@NS_VirtualRegistry@@YAXPEBD@Z
0x18002FFF8: "`string'" ??_C@_0BH@BKPCIMD@?$CIShimLib?$CJ?5Hook?5Entered?$AA@
0x18003D2D0: "`string'" ??_C@_0L@OKGHKNFP@User32?4dll?$AA@
0x18003BA78: "`string'" ??_C@_0BG@NPHGEMKN@Redirected?5to?3?5?$FL?$CFws?$FN?6?$AA@
0x180012BFC: StringCchCopyW
0x1800288A8: "__cdecl _imp_LCMapStringEx" __imp_LCMapStringEx
0x180048C78: "int NS_DXMaximizedWindowedMode::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DXMaximizedWindowedMode@@3HA
0x1800058E8: "void __cdecl NS_DXMaximizedWindowedMode::SetD3D9MaximizedWindowedMode(int)" ?SetD3D9MaximizedWindowedMode@NS_DXMaximizedWindowedMode@@YAXH@Z
0x180033670: "`string'" ??_C@_0CD@MIAPHEKD@?$FLPrinter?$FN?5Query?5for?5legacy?5print@
0x1800487DC: "int NS_FaultTolerantHeap::g_bSubshimUsed" ?g_bSubshimUsed@NS_FaultTolerantHeap@@3HA
0x180047BA0: "unsigned __int64 NS_EmulateSortingWindows61::g_stShimId" ?g_stShimId@NS_EmulateSortingWindows61@@3_KA
0x180034760: "`string'" ??_C@_1IE@DMLJODFH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18003C3E8: "`string'" ??_C@_0O@KHLDIKFN@GetVersionExW?$AA@
0x18000FEF0: "void __cdecl NS_VirtualRegistry::BuildProductSuite(char const * __ptr64)" ?BuildProductSuite@NS_VirtualRegistry@@YAXPEBD@Z
0x180011770: "void __cdecl NS_VirtualRegistry::BuildXpSp2Lie(char const * __ptr64)" ?BuildXpSp2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003C5F8: "`string'" ??_C@_0CM@NAOCPNEK@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x180002320: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180031C80: "`string'" ??_C@_1EC@DKFOFJAJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x180033AF8: "`string'" ??_C@_1CM@GBEFHPAA@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAn?$AAu?$AAr?$AAi?$AA?$AA@
0x18002FB80: "`string'" ??_C@_1BI@JADLCDAP@?$AAv?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003C000: "`string'" ??_C@_0BJ@CADAKMLB@Found?5open?5key?5?$FL?$CFws?$FN?5?$CFp?6?$AA@
0x1800295F8: "`string'" ??_C@_05GGGGPDDJ@?$FL?$CFS?$FN?6?$AA@
0x180040890: "__cdecl CTA1?AVCStringError@CString@ShimLib@@" _CTA1?AVCStringError@CString@ShimLib@@
0x18002D650: "`string'" ??_C@_1FK@GPAJLOEK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAs?$AA?2?$AAM?$AAa?$AAi?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x180039E20: "`string'" ??_C@_1HI@PPPAIOGM@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180024BDC: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(class ShimLib::CString const & __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@AEBV01@@Z
0x1800487D8: "int NS_VirtualRegistry::g_bSubshimUsed" ?g_bSubshimUsed@NS_VirtualRegistry@@3HA
0x18002FF60: "`string'" ??_C@_0BI@MKHNIFKN@FTH?5SQM?3?5version?3?5?$CFws?5?6?$AA@
0x1800376B0: "`string'" ??_C@_1GE@HPGFEIGE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA4?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18003B898: "`string'" ??_C@_0O@MLGBAFCL@RegEnumKeyExA?$AA@
0x180011740: "void __cdecl NS_VirtualRegistry::BuildXpSp1Lie(char const * __ptr64)" ?BuildXpSp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x1800119F0: "long __cdecl NS_VirtualRegistry::ExpandCodecString(unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ExpandCodecString@NS_VirtualRegistry@@YAJPEAGPEAKPEAPEAG@Z
0x1800216E0: "int __cdecl NS_Win81RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win81RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x1800217D0: "int __cdecl NS_Win81RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win81RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x18003B0E0: "`string'" ??_C@_0DC@CPABGLFE@NS_VirtualRegistry?3?3CVirtualRegi@
0x180048D38: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthWatsonObjectLock" ?FthWatsonObjectLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x180009B78: "long __cdecl NS_FaultTolerantHeap::FthWalkHeap(void * __ptr64,struct _RTL_HEAP_WALK_ENTRY * __ptr64)" ?FthWalkHeap@NS_FaultTolerantHeap@@YAJPEAXPEAU_RTL_HEAP_WALK_ENTRY@@@Z
0x1800316B8: "`string'" ??_C@_1CG@EGMAPNL@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x18001D670: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKK@Z
0x180029BF0: "`string'" ??_C@_1IA@MPNPHHNB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
0x180039060: "`string'" ??_C@_1EI@OJEFAPKM@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAI?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe@
0x18002D040: "`string'" ??_C@_17OILJKLPL@?$AA9?$AA?4?$AA6?$AA?$AA@
0x180489580: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthAssertHistory" ?FthAssertHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x18003D468: "`string'" ??_C@_0BL@IACPLCLC@ShimLib?3?3SearchGroupForSID?$AA@
0x180034BD8: "`string'" ??_C@_0CB@BCGDNMKI@ExpandEnvironmentStringsW?5failed@
0x180028A58: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x1800291F0: "__cdecl _guard_iat_table" __guard_iat_table
0x18003A150: "`string'" ??_C@_19KCANABAM@?$AA6?$AA0?$AA0?$AA2?$AA?$AA@
0x180033920: "`string'" ??_C@_1HO@FJGLOHEG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAE?$AAn?$AAc?$AAo?$AAr?$AAe?$AA?5?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi@
0x18002A308: "`string'" ??_C@_0N@EOGMNOG@RegSetValueW?$AA@
0x1800391B0: "`string'" ??_C@_1FK@NICHOHBC@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA4?$AA4?$AA5?$AA4?$AAF?$AA8?$AA2?$AA?9?$AAF?$AA8?$AA2?$AA7?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x1800100E0: "void __cdecl NS_VirtualRegistry::BuildRedirectors(char const * __ptr64)" ?BuildRedirectors@NS_VirtualRegistry@@YAXPEBD@Z
0x1800408A0: "__stdcall CT??_R0?AVCStringError@CString@ShimLib@@" _CT??_R0?AVCStringError@CString@ShimLib@@@81
0x18002C080: "`string'" ??_C@_1BG@CEGFPIM@?$AAv?$AA2?$AA?4?$AA0?$AA?4?$AA5?$AA0?$AA7?$AA2?$AA7?$AA?$AA@
0x1800047B0: memcpy
0x180038918: "`string'" ??_C@_19HMMBIOBP@?$AA?4?$AAr?$AAm?$AAp?$AA?$AA@
0x180046378: "char * __ptr64 __ptr64 NS_EmulateSortingVista::g_szCommandLine" ?g_szCommandLine@NS_EmulateSortingVista@@3PEADEA
0x18002DE48: "`string'" ??_C@_1BM@KADAJJA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x180048810: "struct NS_FaultTolerantHeap::__FTH_CLIENT NS_FaultTolerantHeap::FthClient" ?FthClient@NS_FaultTolerantHeap@@3U__FTH_CLIENT@1@A
0x180035D20: "`string'" ??_C@_1HM@MADMMOOL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180030730: "`string'" ??_C@_0CA@NDOLBAAN@Client?9?$DOMaximumFreeOverhead?5?$DO?50?$AA@
0x180034A98: "`string'" ??_C@_1BI@CFHAKEKA@?$AAP?$AAa?$AAg?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180489C28: "unsigned short * __ptr64 __ptr64 NS_Win81RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win81RTMVersionLie@@3PEAGEA
0x1800234CC: "void __cdecl NS_WRPMitigation::LogSfpKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyW@NS_WRPMitigation@@YAXPEAUHKEY__@@PEBGPEAG@Z
0x180039830: "`string'" ??_C@_1IO@HCKKNLCG@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18002A488: "`string'" ??_C@_1DM@FBPHAHCB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18002CBB0: "`string'" ??_C@_1NA@HJNDJHG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180033698: "`string'" ??_C@_0BP@MFHDILDO@NS_VirtualRegistry?3?3VR_Printer?$AA@
0x18003ACF8: "`string'" ??_C@_0CK@JIPKFGBK@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x1800046A8: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180028B20: "__cdecl _imp_RtlCaptureStackBackTrace" __imp_RtlCaptureStackBackTrace
0x180032668: "`string'" ??_C@_1BO@PHHDFEKP@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA5?$AA?$AA@
0x18003A6A8: "`string'" ??_C@_17CBHHOKFI@?$AAX?$AA8?$AA6?$AA?$AA@
0x18002FAC8: "`string'" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18002B858: "`string'" ??_C@_1BK@FBOGBOPH@?$AAp?$AAo?$AAw?$AAe?$AAr?$AAp?$AAn?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180038B80: "`string'" ??_C@_1HE@CBJIJCCE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x180035A00: "`string'" ??_C@_1M@DIPLLPAO@?$AAM?$AAe?$AAr?$AAi?$AAt?$AA?$AA@
0x180033650: "`string'" ??_C@_1BK@LEOFJMJL@?$AAM?$AAa?$AAj?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800245E0: "struct HWND__ * __ptr64 __cdecl NS_WsExCompositedShim::APIHook_CreateWindowExW(unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int,int,int,int,struct HWND__ * __ptr64,struct HMENU__ * __ptr64,struct HINSTANCE__ * __ptr64,void * __ptr64)" ?APIHook_CreateWindowExW@NS_WsExCompositedShim@@YAPEAUHWND__@@KPEBG0KHHHHPEAU2@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
0x1800286F8: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x1800289F0: "__cdecl _imp_memset" __imp_memset
0x18003AC00: "`string'" ??_C@_19GABEDHGO@?$AAH?$AAK?$AAU?$AAS?$AA?$AA@
0x18003D178: "`string'" ??_C@_0CH@GKGOENDF@RLCHECK?3?5There?5is?5a?5declared?5run@
0x1800287F8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180003455: "__cdecl initterm" _initterm
0x180038C00: "`string'" ??_C@_1IO@JDBECHFH@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x18003A188: "`string'" ??_C@_17KMEOIBOO@?$AA6?$AA?4?$AA1?$AA?$AA@
0x180015548: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckTriggers(unsigned short const * __ptr64) __ptr64" ?CheckTriggers@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEBG@Z
0x180048C5C: "int NS_EmulateSortingWindows61::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_EmulateSortingWindows61@@3HA
0x180029350: "`string'" ??_C@_1CE@DELDIDGJ@?$AAW?$AAi?$AAn?$AA7?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x1800301A8: "`string'" ??_C@_06NAAJNHCD@FTHSVC?$AA@
0x180038808: "`string'" ??_C@_19DHKNOJI@?$AA?4?$AAc?$AAd?$AAa?$AA?$AA@
0x1800106B0: "void __cdecl NS_VirtualRegistry::BuildVirtualizeHKCR(char const * __ptr64)" ?BuildVirtualizeHKCR@NS_VirtualRegistry@@YAXPEBD@Z
0x18002CB00: "`string'" ??_C@_1KM@HPKHNCHB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180048528: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800139E0: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBD@Z
0x180034C00: "`string'" ??_C@_0CH@OAMAGFA@ExpandValueString?5for?5ValueName?5@
0x1800297D0: "`string'" ??_C@_0CM@BCBHHFGK@NS_FaultTolerantHeap?3?3FthRecogni@
0x18001DFA0: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x180489BB4: "short NS_VistaRTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_VistaRTMVersionLie@@3FA
0x1800286C8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800288F0: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x18003A3D0: "`string'" ??_C@_1CI@JDMAKOGO@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA1?$AA2?$AA?$AA@
0x180029D30: "`string'" ??_C@_1CA@ENHFLNJC@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA1?$AA6?$AA?2?$AA?$AA@
0x18001FF50: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaSP1VersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaSP1VersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180028B70: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x18003A020: "`string'" ??_C@_17BEPCOGIL@?$AA6?$AA?4?$AA0?$AA?$AA@
0x1800205EC: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaSP2VersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaSP2VersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18003ABC0: "`string'" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x180037AC0: "`string'" ??_C@_1GE@ONEHNPPI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AAA?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180028C48: "__cdecl _xi_z" __xi_z
0x18001DE40: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x180047BB0: "unsigned __int64 NS_DXMaximizedWindowedMode::g_stShimId" ?g_stShimId@NS_DXMaximizedWindowedMode@@3_KA
0x180036F30: "`string'" ??_C@_1ME@IMHPFIGI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x180034F78: "`string'" ??_C@_19OBNAGCDI@?$AAB?$AAo?$AAt?$AAh?$AA?$AA@
0x1800286C0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18002BBF0: "`string'" ??_C@_1KK@NKGBLCEE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002CE30: "`string'" ??_C@_1BK@HOHCAPLI@?$AA_?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003B750: "`string'" ??_C@_0BN@CFGNLNEO@NS_VirtualRegistry?3?3NotifyFn?$AA@
0x1800343D8: "`string'" ??_C@_0CI@NEMOOMMJ@?$FLDSDISABLEDEVICE?$FN?5No?5devices?5spe@
0x180034968: "`string'" ??_C@_1BM@IKPPMDLB@?$AA6?$AA?0?$AA0?$AA?0?$AA2?$AA9?$AA0?$AA0?$AA?0?$AA2?$AA1?$AA8?$AA0?$AA?$AA@
0x18000CBC0: "void __cdecl NS_VirtualRegistry::BuildDX7A(char const * __ptr64)" ?BuildDX7A@NS_VirtualRegistry@@YAXPEBD@Z
0x18000DCD0: "void __cdecl NS_VirtualRegistry::BuildExpanders(char const * __ptr64)" ?BuildExpanders@NS_VirtualRegistry@@YAXPEBD@Z
0x180048C28: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaSP2VersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaSP2VersionLie@@3PEAUtagHOOKAPI@@EA
0x180002FAE: "__cdecl _C_specific_handler" __C_specific_handler
0x18003C0B0: "`string'" ??_C@_0CN@LIJKALG@Failed?5to?5get?5the?5virtual?5key?5ro@
0x180022E7C: "long __cdecl NS_WRPRegDeleteKey::GetKeyPath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetKeyPath@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBGPEAU_UNICODE_STRING@@@Z
0x180031AD0: "`string'" ??_C@_1EG@OIIMPNKG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AAt?$AAo?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa@
0x18002C4A0: "`string'" ??_C@_1JO@JPHANHIA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180030130: "`string'" ??_C@_0L@BBEDECJP@MSVCRT?4DLL?$AA@
0x180028858: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x1800316F8: "`string'" ??_C@_1CA@LPEGJPCO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x180038868: "`string'" ??_C@_19BKHOMEFN@?$AA?4?$AAm?$AA4?$AAa?$AA?$AA@
0x18002E7E0: "`string'" ??_C@_1NA@FAPOPJI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x1800218B0: "long __cdecl NS_Win81RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win81RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x18002B970: "`string'" ??_C@_1EO@FOCNIHON@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA1?$AA2?$AA3?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18002A760: "`string'" ??_C@_0M@PIEFMFPP@VERSION?4DLL?$AA@
0x180038F70: "`string'" ??_C@_1EI@KJFONBED@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe?$AAw@
0x180026150: "public: int __cdecl ShimLib::VectorT<class ShimLib::PathTreeNode * __ptr64>::Resize(int) __ptr64" ?Resize@?$VectorT@PEAVPathTreeNode@ShimLib@@@ShimLib@@QEAAHH@Z
0x18001E734: "struct tagHOOKAPI * __ptr64 __cdecl NS_VirtualRegistry2::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VirtualRegistry2@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18002F460: "`string'" ??_C@_1NA@EBLAFKKD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x1800399E0: "`string'" ??_C@_1IO@KGCEFPPN@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AAB?$AAD?$AA1?$AAA?$AAE?$AA5?$AAE?$AA0?$AA?9?$AAA?$AA6?$AAA?$AAE?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AAD@
0x180017D94: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64,int,int,unsigned short const * __ptr64) __ptr64" ?OpenKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAKHH1@Z
0x18000C180: "void __cdecl NS_VirtualRegistry::BuildDSCachePositions(char const * __ptr64)" ?BuildDSCachePositions@NS_VirtualRegistry@@YAXPEBD@Z
0x180036B70: "`string'" ??_C@_1GG@PABCHBPG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9@
0x18002DDB0: "`string'" ??_C@_1JI@ILODMDAL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180016950: "private: struct NS_VirtualRegistry::OPENKEY * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::FindOpenKey(struct HKEY__ * __ptr64) __ptr64" ?FindOpenKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAUOPENKEY@2@PEAUHKEY__@@@Z
0x18002A748: "`string'" ??_C@_0BD@NPHOKPBO@SetFileAttributesW?$AA@
0x180030208: "`string'" ??_C@_0CG@EPHNNIOB@FTH?5shim?5applied?5directly?5as?5a?5s@
0x1800288B0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18003A770: "`string'" ??_C@_0CK@BEGANALA@NS_VirtualRegistry?3?3AddDirectSou@
0x180029A10: "`string'" ??_C@_1FA@HFAFOAEN@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$CF?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18001F3E0: "unsigned long __cdecl NS_VistaRTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaRTMVersionLie@@YAKXZ
0x18003BB20: "`string'" ??_C@_1CG@ECHCOIBH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AA?$AA@
0x180021BBC: "int __cdecl NS_Win81RTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_Win81RTMVersionLie@@YAHK@Z
0x180489570: "long NS_FaultTolerantHeap::FthAssertHistoryIndex" ?FthAssertHistoryIndex@NS_FaultTolerantHeap@@3JA
0x180033BC0: "`string'" ??_C@_1CA@HIKLBPIH@?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAe?$AAd?$AAO?$AAw?$AAn?$AAe?$AAr?$AA?$AA@
0x18003BB50: "`string'" ??_C@_1EI@IGIMJNMH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs@
0x180048D28: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerpGetReportConsent)(void * __ptr64,enum _WER_CONSENT,enum _CONSENT_SETTING * __ptr64)" ?pfnWerpGetReportConsent@NS_FaultTolerantHeap@@3P6AJPEAXW4_WER_CONSENT@@PEAW4_CONSENT_SETTING@@@ZEA
0x1800060F0: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_LCMapStringEx@NS_EmulateSortingVista@@YAHPEBGK0HPEAGHPEAU_nlsversioninfo@@PEAX_J@Z
0x180028B58: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x18001DCA0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18002B5D0: "`string'" ??_C@_1DE@HBLFEHJB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x180031010: "`string'" ??_C@_1M@JIDAHKMD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$AA@
0x18003D378: "`string'" ??_C@_0CF@PNNDBNNG@Manager?5or?5tweaker?5already?5assig@
0x1800317B0: "`string'" ??_C@_1CO@GHCLOGBA@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAo?$AAp?$AAS?$AAr?$AAv?$AA?$AA@
0x18003B220: "`string'" ??_C@_0CC@BKNJINPH@Exception?5occurred?5in?5QueryValue@
0x180018330: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenUserClassesRoot(void * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenUserClassesRoot@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAXKKPEAPEAUHKEY__@@@Z
0x180033E90: "`string'" ??_C@_19PFCDLDMI@?$AAN?$AAO?$AAN?$AAE?$AA?$AA@
0x180048BE0: "int NS_WRPRegDeleteKey::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WRPRegDeleteKey@@3HA
0x1800341D0: "`string'" ??_C@_0CO@HOKAIOFM@?$FLDSRETURNWRITEPOSITION?$FN?5No?5devic@
0x180489BD4: "unsigned long NS_VistaSP1VersionLie::MinorVersion" ?MinorVersion@NS_VistaSP1VersionLie@@3KA
0x18001AAC8: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAK@Z
0x180036DC0: "`string'" ??_C@_1ME@DMNMGFPJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x180489BEC: "unsigned long NS_VistaSP2VersionLie::MinorVersion" ?MinorVersion@NS_VistaSP2VersionLie@@3KA
0x18003A900: "`string'" ??_C@_1LG@OKOKGGBH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x18003BF58: "`string'" ??_C@_0BO@CLHBHHMC@Failed?5to?5add?5value?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x1800310F0: "`string'" ??_C@_1EE@PJEGNKCD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?2?$AAP?$AAC@
0x1800395F0: "`string'" ??_C@_1IO@LKOPDHKN@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180028A88: "__cdecl _imp_wcspbrk" __imp_wcspbrk
0x180038898: "`string'" ??_C@_19NHLAKLHL@?$AA?4?$AAm?$AA4?$AAv?$AA?$AA@
0x180017C4C: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::OpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64,int) __ptr64" ?OpenKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU3@PEAKH@Z
0x18003C3A8: "`string'" ??_C@_0CM@ONKCOKHJ@NS_VistaRTMVersionLie?3?3Initializ@
0x180010E70: "void __cdecl NS_VirtualRegistry::BuildWinNTCurrentVersion(char const * __ptr64)" ?BuildWinNTCurrentVersion@NS_VirtualRegistry@@YAXPEBD@Z
0x1800135A4: "public: __cdecl NS_VirtualRegistry::CRegLock::~CRegLock(void) __ptr64" ??1CRegLock@NS_VirtualRegistry@@QEAA@XZ
0x18003B8B8: "`string'" ??_C@_0BB@ECNEDBH@RegQueryInfoKeyA?$AA@
0x18003D010: "`string'" ??_C@_1EM@INFBDMCN@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x18003B688: "`string'" ??_C@_04CBJLODNH@?5?0?7?$DL?$AA@
0x18003CBD8: "`string'" ??_C@_0CC@EHOCINOA@NS_WRPMitigation?3?3APIHook__lwrit@
0x180033118: "`string'" ??_C@_1BC@EANCBBIH@?$AAP?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x18002C060: "`string'" ??_C@_1BO@JKONHIKC@?$AAR?$AAu?$AAn?$AAt?$AAi?$AAm?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180028718: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180034028: "`string'" ??_C@_0CO@IAHKADHF@?$FLDSPADCURSORS?$FN?5Invalid?5number?5of@
0x180033C18: "`string'" ??_C@_1BC@GEHMAHPG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x18002C8B0: "`string'" ??_C@_1MO@FBELOHFH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180033C78: "`string'" ??_C@_1M@PBMEKDNI@?$AAC?$AAL?$AAA?$AAS?$AAS?$AA?$AA@
0x18002A060: "`string'" ??_C@_1CE@GEBIDOOD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?5?$AA?1?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180047B68: "unsigned __int64 NS_Win7RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win7RTMVersionLie@@3_KA
0x180028950: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800209B0: "int __cdecl NS_Win7RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win7RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180028B10: "__cdecl _imp_RtlUniform" __imp_RtlUniform
0x180028B68: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x18000464C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18002B738: "`string'" ??_C@_1DG@DADECIHP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAL?$AAy?$AAn?$AAc?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003C078: "`string'" ??_C@_0DD@IKLMOJA@NS_VirtualRegistry2?3?3CVirtualReg@
0x180024B74: "public: __cdecl ShimLib::CString::~CString(void) __ptr64" ??1CString@ShimLib@@QEAA@XZ
0x18003D338: "`string'" ??_C@_1DE@LDOEAACD@?$AAA?$AAP?$AAP?$AAC?$AAO?$AAM?$AAP?$AAA?$AAT?$AA_?$AAH?$AAE?$AAA?$AAP?$AA_?$AAT?$AAW?$AAE?$AAA?$AAK?$AAE?$AAR?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x180025B40: StringCchVPrintfA
0x18002FB48: "`string'" ??_C@_0O@DJEDHNNA@GetNLSVersion?$AA@
0x18002FC00: "`string'" ??_C@_0BF@CFMHBEII@WerpGetReportConsent?$AA@
0x180032EC0: "`string'" ??_C@_1KA@HABJAIPK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180030380: "`string'" ??_C@_0GH@CLFKADBC@?$CK?$CK?$CK?5Fault?5tolerant?5heap?5shim?5app@
0x1800134D4: "public: __cdecl NS_VirtualRegistry::CRegLock::CRegLock(void) __ptr64" ??0CRegLock@NS_VirtualRegistry@@QEAA@XZ
0x180029DE0: "`string'" ??_C@_1FI@CHHMMEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18002A6D8: "`string'" ??_C@_0M@MEBLMGKH@MoveFileExA?$AA@
0x18001E040: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180029F98: "`string'" ??_C@_1CO@CNOKLGBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x180024C4C: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(unsigned short const * __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@PEBG@Z
0x180029298: "`string'" ??_C@_0BJ@HMDEPODC@Layer?5Shims?5initialized?4?$AA@
0x1800387C4: "`string'" ??_C@_03LBPOHIOC@?$CF20?$AA@
0x180010A30: "void __cdecl NS_VirtualRegistry::BuildWin7RTMLie(char const * __ptr64)" ?BuildWin7RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003A488: "`string'" ??_C@_1CA@EFHKAPBD@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA8?$AA?4?$AA1?$AA?5?$AAP?$AAr?$AAo?$AA?$AA@
0x180028848: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x180038928: "`string'" ??_C@_19GGIIBPNM@?$AA?4?$AAw?$AAa?$AAv?$AA?$AA@
0x180036190: "`string'" ??_C@_1EM@OJPOOFFP@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA4?$AA?4?$AA4?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAF@
0x180047B10: "unsigned __int64 NS_WRPMitigation::g_stShimId" ?g_stShimId@NS_WRPMitigation@@3_KA
0x180030088: "`string'" ??_C@_0BA@HKDEHBAO@RtlAllocateHeap?$AA@
0x180007630: "void __cdecl NS_FaultTolerantHeap::APIHook_RtlExitUserProcess(long)" ?APIHook_RtlExitUserProcess@NS_FaultTolerantHeap@@YAXJ@Z
0x18003A4A8: "`string'" ??_C@_17GEHEJGF@?$AA6?$AA?4?$AA3?$AA?$AA@
0x1800296C0: "`string'" ??_C@_0CI@HFOCFJJ@NotifyFn?5returned?5FALSE?0?5fail?5lo@
0x180038140: "`string'" ??_C@_1IO@DGNEOJEO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180016F40: "struct tagHOOKAPI * __ptr64 __cdecl NS_VirtualRegistry::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VirtualRegistry@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180029258: "`string'" ??_C@_1BM@KOKPJGND@?$AAW?$AAR?$AAP?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180028938: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18003B0C0: "`string'" ??_C@_0BP@NCGJIOKL@Exception?5occurred?5in?5OpenKeyW?$AA@
0x18003B7D0: "`string'" ??_C@_0BE@GOLDJCHI@RegConnectRegistryW?$AA@
0x18002CCB8: "`string'" ??_C@_1DO@LEHGPEK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180048D08: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportAddDump)(void * __ptr64,void * __ptr64,void * __ptr64,enum _WER_DUMP_TYPE,struct _WER_EXCEPTION_INFORMATION * __ptr64,struct _WER_DUMP_CUSTOM_OPTIONS * __ptr64,unsigned long)" ?pfnWerReportAddDump@NS_FaultTolerantHeap@@3P6AJPEAX00W4_WER_DUMP_TYPE@@PEAU_WER_EXCEPTION_INFORMATION@@PEAU_WER_DUMP_CUSTOM_OPTIONS@@K@ZEA
0x180030290: "`string'" ??_C@_0FB@DEICGJIE@Client?5successfully?5initialized?5@
0x180029D70: "`string'" ??_C@_1BO@BNGMMGCD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA1?$AA6?$AA?$AA@
0x180032E78: "`string'" ??_C@_1BG@LKHNHALF@?$AA6?$AA?4?$AA0?$AA?4?$AA2?$AA4?$AA0?$AA4?$AA?4?$AA0?$AA?$AA@
0x18003CB90: "`string'" ??_C@_0CC@NMEHDAFO@NS_WRPMitigation?3?3APIHook__lcrea@
0x180039F00: "`string'" ??_C@_1EI@FOOJNKAH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAA?$AAB?$AA?2?$AAD?$AAL?$AAL?$AAP@
0x18003B7E8: "`string'" ??_C@_0BB@HHEIPGME@RegQueryValueExA?$AA@
0x180032840: "`string'" ??_C@_1CI@CPIFGNNG@?$AAF?$AAI?$AAL?$AAE?$AAO?$AAP?$AAE?$AAN?$AAB?$AAO?$AAG?$AAU?$AAS?$AAC?$AAT?$AAR?$AAL?$AAI?$AAD?$AA?$AA@
0x180034058: "`string'" ??_C@_0CG@KCADCOME@NS_VirtualRegistry?3?3BuildDSPadCu@
0x1800097D8: "unsigned __int64 __cdecl NS_FaultTolerantHeap::FthSizeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?FthSizeHeap@NS_FaultTolerantHeap@@YA_KPEAXK0@Z
0x180033270: "`string'" ??_C@_1FA@LAMCKEOE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x180028AE0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180048C50: "int NS_VirtualRegistry2::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VirtualRegistry2@@3HA
0x180039FE8: "`string'" ??_C@_1DI@KFIIBNKC@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAV?$AAi?$AAs?$AAt?$AAa?$AA?5?$AA?$CI?$AAT?$AAM?$AA?$CJ?$AA?5?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AA?$AA@
0x18002BB70: "`string'" ??_C@_1HM@POKMGFB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002D6C8: "`string'" ??_C@_1BE@HHCAKGJC@?$AAD?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AAE?$AAx?$AA?$AA@
0x180033EF8: "`string'" ??_C@_0CE@HGHJBMMI@NS_VirtualRegistry?3?3BuildDSDevAc@
0x18003B6B8: "`string'" ??_C@_0CG@PIGOFOIP@NS_VirtualRegistry?3?3ParseCommand@
0x1800392D0: "`string'" ??_C@_1FK@IIFBKFCJ@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAD?$AA2?$AAA?$AAF?$AA7?$AAA?$AA6?$AA0?$AA?9?$AA4?$AAC?$AA4?$AA2?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AA2?$AA7?$AAD?$AA?9?$AA0@
0x180010440: "void __cdecl NS_VirtualRegistry::BuildStarTrekArmada(char const * __ptr64)" ?BuildStarTrekArmada@NS_VirtualRegistry@@YAXPEBD@Z
0x18003AEC8: "`string'" ??_C@_0DC@PAJMKGDE@NS_VirtualRegistry?3?3CVirtualRegi@
0x180021FC0: "void * __ptr64 __cdecl NS_WRPMitigation::APIHook_CreateFileA(char const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?APIHook_CreateFileA@NS_WRPMitigation@@YAPEAXPEBDKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x18001AF48: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?EnumKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x180031868: "`string'" ??_C@_1M@JBEILCLK@?$AA?$CF?$AAd?$AA?0?$AA?$CF?$AAd?$AA?$AA@
0x18002CEE0: "`string'" ??_C@_1IO@EGCLHNKF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x18001D1C0: "public: __cdecl NS_VirtualRegistry2::CRegLock::~CRegLock(void) __ptr64" ??1CRegLock@NS_VirtualRegistry2@@QEAA@XZ
0x180046328: "char * __ptr64 __ptr64 NS_Win81RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win81RTMVersionLie@@3PEADEA
0x180029690: "`string'" ??_C@_0BA@HNAGEFDN@VirtualRegistry?$AA@
0x180028A98: "__cdecl _imp__vscprintf" __imp__vscprintf
0x180030448: "`string'" ??_C@_0DB@KJGNEBCG@Client?5resetting?5connection?5skip@
0x180018908: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryInfoA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180033390: "`string'" ??_C@_19DEJHOMFE@?$AA?9?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x180020B80: "long __cdecl NS_Win7RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win7RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x18003A070: "`string'" ??_C@_1HC@NAIPHLFA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt@
0x180040A84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18003B4E0: "`string'" ??_C@_0P@FPDECCMH@Key?5not?5found?$CB?$AA@
0x18003B1A0: "`string'" ??_C@_0DE@GHKPLKFO@?7Trimming?5data?5beyond?5end?5of?5str@
0x180028948: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180035210: "`string'" ??_C@_1EO@JDFHGLKC@?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9?$AAD?$AAF?$AAA?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AAA@
0x1800032A1: "__cdecl amsg_exit" _amsg_exit
0x18003B8F8: "`string'" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180036CC8: "`string'" ??_C@_1CC@FOKHIAJB@?$AAP?$AAl?$AAa?$AAy?$AAb?$AAa?$AAc?$AAk?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x180035BF0: "`string'" ??_C@_1BCC@PJPCJACA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x1800289D8: apphelp_NULL_THUNK_DATA
0x18002FDB8: "`string'" ??_C@_0CM@NBPJENLL@FTH?5WER?3?5Failed?5to?5get?5report?5co@
0x1800289C8: "__cdecl _imp_SE_ShimDPF" __imp_SE_ShimDPF
0x18003A160: "`string'" ??_C@_1CG@PICBAHLL@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA7?$AA?5?$AAU?$AAl?$AAt?$AAi?$AAm?$AAa?$AAt?$AAe?$AA?$AA@
0x180019900: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::SetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDKPEBEK@Z
0x18003C8D0: "`string'" ??_C@_1GA@MMKIAFPF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4@
0x1800258A8: "protected: int __cdecl ShimLib::CString::ReplaceRoutine(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 (__cdecl*)(unsigned short const * __ptr64,unsigned short const * __ptr64)) __ptr64" ?ReplaceRoutine@CString@ShimLib@@IEAAHPEBG0P6APEAG00@Z@Z
0x180048BE8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_pAPIHooks" ?g_pAPIHooks@NS_WRPRegDeleteKey@@3PEAUtagHOOKAPI@@EA
0x18003D1E0: "`string'" ??_C@_0CK@JFCDHHGO@NS_WRPRegDeleteKey?3?3APIHook_RegD@
0x180013CB0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x1800337E8: "`string'" ??_C@_1BE@CKEHMMCO@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAT?$AA?$AA@
0x18002C200: "`string'" ??_C@_1JI@JIPPACIB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180030678: "`string'" ??_C@_0DL@GAFFOBMK@Client?5failed?5to?5read?5?8permissio@
0x18003D498: "`string'" ??_C@_0CA@EEHHKDJ@CheckTokenMembership?5failed?3?5?$CFd?$AA@
0x180038938: "`string'" ??_C@_1M@KMHNOGFP@?$AA?4?$AAw?$AAa?$AAv?$AAe?$AA?$AA@
0x1800313D8: "`string'" ??_C@_1BM@KKNEBPMJ@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAM?$AAi?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x18003D4B8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180008418: "int __cdecl NS_FaultTolerantHeap::FthClientReportSQM(void)" ?FthClientReportSQM@NS_FaultTolerantHeap@@YAHXZ
0x18002A268: "`string'" ??_C@_0O@DCOGKJGG@RegOpenKeyExA?$AA@
0x1800106F0: "void __cdecl NS_VirtualRegistry::BuildVistaRTMLie(char const * __ptr64)" ?BuildVistaRTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180032490: "`string'" ??_C@_0CG@OMLALMDL@NS_VirtualRegistry?3?3BuildNetwork@
0x18003BE28: "`string'" ??_C@_0BM@IGLKBAG@Failed?5to?5copy?5key?5path?5?$CFd?6?$AA@
0x18001C08C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetOpenKey(struct HKEY__ * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?GetOpenKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAVCVirtualKey@2@@Z
0x18002DF40: "`string'" ??_C@_1KO@KAEPHDLC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180033D88: "`string'" ??_C@_0CB@PENLIFCM@NS_VirtualRegistry?3?3FindCDROMKey@
0x18003CA10: "`string'" ??_C@_0CI@KMLLHCBL@NS_WRPMitigation?3?3MySfpIsFilePro@
0x180032BA0: "`string'" ??_C@_1IO@GPCMEPNA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180031718: "`string'" ??_C@_1DC@CALAOIKI@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAf?$AAe?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x1800136A0: "long __cdecl NS_VirtualRegistry::APIHook_RegConnectRegistryW(unsigned short const * __ptr64,struct HKEY__ * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegConnectRegistryW@NS_VirtualRegistry@@YAJPEBGPEAUHKEY__@@PEAPEAU2@@Z
0x18003BA28: "`string'" ??_C@_0CD@HFIJFFGI@Found?5the?5virtual?5value?5now?5?$FL?$CFws@
0x180031C40: "`string'" ??_C@_1EA@CGGOPICC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x180048CC8: "struct _LIST_ENTRY NS_FaultTolerantHeap::FthDelayFreeQueue" ?FthDelayFreeQueue@NS_FaultTolerantHeap@@3U_LIST_ENTRY@@A
0x18002A2B8: "`string'" ??_C@_0BA@NDHNNOGH@RegCreateKeyExA?$AA@
0x180033340: "`string'" ??_C@_1EC@MPDKEHCN@?$AA0?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx@
0x18003D2E0: "`string'" ??_C@_0BA@NLHGOBLD@CreateWindowExA?$AA@
0x180030EC8: "`string'" ??_C@_0BO@DICMJGJH@NS_VirtualRegistry?3?3VR_Hasbro?$AA@
0x1800318E0: "`string'" ??_C@_1FI@DIBMNBHE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800346A8: "`string'" ??_C@_17DAHECJOD@?$AA5?$AA?4?$AA2?$AA?$AA@
0x18002F6E0: Microsoft_Windows_Application_ExperienceKeywords
0x18001A248: StringCchCopyA
0x18003BD60: "`string'" ??_C@_0CA@HAGFCEFA@Failed?5to?5get?5class?5path?3?5?$CF08x?6?$AA@
0x18003C4A8: "`string'" ??_C@_0CN@PJBMMAGI@NS_VistaSP1VersionLie?3?3APIHook_R@
0x18003A100: "`string'" ??_C@_19LALIKOOC@?$AA6?$AA0?$AA0?$AA1?$AA?$AA@
0x180028AF8: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x1800375B0: "`string'" ??_C@_1GE@IMJPALFL@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe@
0x18002A6F8: "`string'" ??_C@_08JHCHADLJ@OpenFile?$AA@
0x1800487D0: "int NS_VistaRTMVersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaRTMVersionLie@@3HA
0x180035770: "`string'" ??_C@_1KO@BMFCIEND@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180032E50: "`string'" ??_C@_1CG@FADKAHBA@?$AAI?$AAE?$AA?5?$AA6?$AA?5?$AA6?$AA?4?$AA0?$AA?4?$AA2?$AA4?$AA0?$AA4?$AA?4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1800388A8: "`string'" ??_C@_19LBPJFDEP@?$AA?4?$AAm?$AAo?$AAv?$AA?$AA@
0x18001F450: "int __cdecl NS_VistaRTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaRTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x18001F540: "int __cdecl NS_VistaRTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaRTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180036860: "`string'" ??_C@_1GE@BEPHDKHO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA2?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x1800311D0: "`string'" ??_C@_1DA@GJJDDOBP@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAr?$AAv?$AA?$AA@
0x180047B70: "unsigned __int64 NS_VistaSP2VersionLie::g_stShimId" ?g_stShimId@NS_VistaSP2VersionLie@@3_KA
0x18000DE50: "void __cdecl NS_VirtualRegistry::BuildHEDZ(char const * __ptr64)" ?BuildHEDZ@NS_VirtualRegistry@@YAXPEBD@Z
0x18002D2E0: "`string'" ??_C@_1IO@DJDANFIE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x18002FD08: "`string'" ??_C@_0BI@KGGGKAGM@FTH?5WER?3?5version?3?5?$CFws?5?6?$AA@
0x18001CB7C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x18002F8B0: "`string'" ??_C@_0BG@JNJOCKPP@VerifyVersionInfoLite?$AA@
0x180031020: "`string'" ??_C@_1BA@EDOEFMAB@?$AAP?$AAA?$AAL?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x180037720: "`string'" ??_C@_1FO@GHACAAJJ@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAF?$AAr?$AAa?$AAm?$AAe@
0x18002A720: "`string'" ??_C@_0BA@LPCPJMBP@PrivCopyFileExW?$AA@
0x180029670: GUID_NULL
0x180489BF0: "char * __ptr64 __ptr64 NS_Win7RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win7RTMVersionLie@@3PEADEA
0x180033878: "`string'" ??_C@_0BP@PIEOAHIK@NS_VirtualRegistry?3?3VR_MSA2001?$AA@
0x18003ADE0: "`string'" ??_C@_0DE@FOGMBCDL@NS_VirtualRegistry?3?3CVirtualRegi@
0x18000CC10: "void __cdecl NS_VirtualRegistry::BuildDX8(char const * __ptr64)" ?BuildDX8@NS_VirtualRegistry@@YAXPEBD@Z
0x180003948: "void __cdecl NS_FaultTolerantHeap::FthLogIssue(void * __ptr64,void * __ptr64,struct NS_FaultTolerantHeap::_FTH_BLOCK_PADDER * __ptr64,unsigned long)" ?FthLogIssue@NS_FaultTolerantHeap@@YAXPEAX0PEAU_FTH_BLOCK_PADDER@1@K@Z
0x180489170: "struct NS_FaultTolerantHeap::_FTH_DEBUG_INFORMATION * NS_FaultTolerantHeap::FthErrorHistory" ?FthErrorHistory@NS_FaultTolerantHeap@@3PAU_FTH_DEBUG_INFORMATION@1@A
0x180028890: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180047B78: "unsigned __int64 NS_VistaSP1VersionLie::g_stShimId" ?g_stShimId@NS_VistaSP1VersionLie@@3_KA
0x18003D36C: "`string'" ??_C@_02HPDBCLII@?$CC?$CJ?$AA@
0x18003B7B8: "`string'" ??_C@_0BE@HCCLCHKP@RegConnectRegistryA?$AA@
0x180032D30: "`string'" ??_C@_1FA@MKGOEMHI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAF?$AAi?$AAr?$AAs?$AAt?$AAB?$AAy?$AAt?$AAe?$AA?2?$AAP?$AAr?$AAo?$AAV?$AAo?$AAi?$AAc?$AAe?$AA?2?$AAS?$AAp?$AAe?$AAe@
0x18003B8D0: "`string'" ??_C@_0BB@BILFPGMA@RegQueryInfoKeyW?$AA@
0x180031290: "`string'" ??_C@_1BO@ILPNJKGM@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAs?$AA?$AA@
0x18001D710: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKK@Z
0x180039C38: "`string'" ??_C@_1DI@JEOJOPMD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAW?$AAP?$AAA?$AA?2?$AAM?$AAe?$AAd?$AAi?$AAa?$AAC?$AAe?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x180032DC0: "`string'" ??_C@_1FE@HBIFKMLK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt@
0x1800295B8: "`string'" ??_C@_0BE@MLGJKNHN@?7?7?7ValueData?3?5?$FL?$CFS?$FN?6?$AA@
0x1800388F8: "`string'" ??_C@_1O@EDILHNGG@?$AA?4?$AAp?$AAc?$AAa?$AAs?$AAt?$AA?$AA@
0x18000A578: "int __cdecl NS_FaultTolerantHeap::FthClientSendFinalAcknowledge(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthClientSendFinalAcknowledge@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x1800300E0: "`string'" ??_C@_0P@HGJJNGEH@RtlDestroyHeap?$AA@
0x180020C58: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win7RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win7RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800212E4: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win8RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win8RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180028AD0: "__cdecl _imp_strcmp" __imp_strcmp
0x1800243A4: "int __cdecl NS_WRPRegDeleteKey::MySfpIsKeyProtected(struct HKEY__ * __ptr64)" ?MySfpIsKeyProtected@NS_WRPRegDeleteKey@@YAHPEAUHKEY__@@@Z
0x18000B370: "void __cdecl NS_VirtualRegistry::BuildCLRVersion46Lie(char const * __ptr64)" ?BuildCLRVersion46Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180028880: "__cdecl _imp_IsNLSDefinedString" __imp_IsNLSDefinedString
0x18003D0B0: "`string'" ??_C@_0DG@BCAKKGJC@RLCHECK?3?5error?5getting?5path?5or?5p@
0x18002A350: "`string'" ??_C@_1GM@DHHGHNKB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
0x1800304F0: "`string'" ??_C@_0DC@NAJAMOGO@Client?5failed?5to?5open?5the?5FTH?5pi@
0x18002D950: "`string'" ??_C@_1EE@KNBDFIEH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI@
0x180032E90: "`string'" ??_C@_1CI@CGJEEKIM@?$AAP?$AAl?$AAu?$AAs?$AA?$CB?$AA?5?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x1800316E0: "`string'" ??_C@_1BI@HMEDDFNP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAS?$AAw?$AAa?$AAp?$AA?$AA@
0x180027028: "const ShimLib::PathTreeNodeVisitor::`vftable'" ??_7PathTreeNodeVisitor@ShimLib@@6B@
0x1800384E0: "`string'" ??_C@_1HA@PBNLNAMK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x18002F8E0: "`string'" ??_C@_1BE@MAPHHBEH@?$AAd?$AA3?$AAd?$AA9?$AAd?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180028A78: "__cdecl _imp_towlower" __imp_towlower
0x1800338F8: "`string'" ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x180023E50: "struct tagHOOKAPI * __ptr64 __cdecl NS_WRPRegDeleteKey::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WRPRegDeleteKey@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180014270: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180030848: "`string'" ??_C@_0DB@PDDNHNAA@NS_FaultTolerantHeap?3?3FthpClient@
0x180016160: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEADPEAK@Z
0x1800350E8: "`string'" ??_C@_0CD@JNNNHCIF@TrueMotion20?5initialization?5fail@
0x18003C398: "`string'" ??_C@_0BA@NMMOAGHL@Service?5Pack?5?$CFd?$AA@
0x180038818: "`string'" ??_C@_1M@LKEPNGO@?$AA?4?$AAc?$AAd?$AAd?$AAa?$AA?$AA@
0x180031A40: "`string'" ??_C@_1EA@FOFNGCHI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp?$AAe?$AAn?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x180033DB0: "`string'" ??_C@_1DM@BNJPOICG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x18002A600: "`string'" ??_C@_0CH@HOMEMNFP@NS_WRPMitigation?3?3InitializeHook@
0x1800261FC: "public: long __cdecl ShimLib::PathTree::Search(class ShimLib::CString const & __ptr64,class ShimLib::PathTreeNode * __ptr64,int,int & __ptr64,class ShimLib::PathTreeNode * __ptr64 & __ptr64) __ptr64" ?Search@PathTree@ShimLib@@QEAAJAEBVCString@2@PEAVPathTreeNode@2@HAEAHAEAPEAV42@@Z
0x180034380: "`string'" ??_C@_0CE@LJBMADNC@?$FLDSDISABLEDEVICE?$FN?5Unknown?5device@
0x180028730: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18001622C: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEAGPEAK@Z
0x180025AD0: "protected: static int __cdecl ShimLib::CString::SafeStrlen(unsigned short const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBG@Z
0x180028868: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x180031448: "`string'" ??_C@_1CA@JAMCPDGB@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAB?$AAW?$AAr?$AAi?$AAt?$AAe?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x180031388: "`string'" ??_C@_1CE@BNPGGCLE@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAL?$AAR?$AAU?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAs?$AA?$AA@
0x180014360: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegQueryInfoKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x180033EC8: "`string'" ??_C@_0CL@BIOLGGOO@?$FLDSDEVACCEL?$FN?5Invalid?5Acceleratio@
0x180047F70: "protected: static int * ShimLib::CString::_afxInitData" ?_afxInitData@CString@ShimLib@@1PAHA
0x180028708: "__cdecl _imp_GetTempFileNameA" __imp_GetTempFileNameA
0x180029210: "`string'" ??_C@_0BF@NHNKNNIM@ShimLib?3?3GetHookAPIs?$AA@
0x180028960: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180489C08: "char * __ptr64 __ptr64 NS_Win8RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win8RTMVersionLie@@3PEADEA
0x180038848: "`string'" ??_C@_1M@FCHDNEIK@?$AA?4?$AAi?$AAt?$AAp?$AAc?$AA?$AA@
0x180046340: "char * __ptr64 __ptr64 NS_VistaSP2VersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaSP2VersionLie@@3PEADEA
0x18003AD28: "`string'" ??_C@_0CH@GMHOPBAD@NS_VirtualRegistry?3?3CreateNewEnu@
0x18002C000: "`string'" ??_C@_1GA@NOFDBHLJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA@
0x18000A0F4: McGenEventWriteUM
0x180034F58: "`string'" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x180031098: "`string'" ??_C@_1BE@HGGMGJAM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x180489980: "unsigned short * NS_WRPRegDeleteKey::g_szExePath" ?g_szExePath@NS_WRPRegDeleteKey@@3PAGA
0x180048D00: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportCloseHandle)(void * __ptr64)" ?pfnWerReportCloseHandle@NS_FaultTolerantHeap@@3P6AJPEAX@ZEA
0x180007064: "struct tagHOOKAPI * __ptr64 __cdecl NS_EmulateSortingWindows61::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_EmulateSortingWindows61@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180022D50: "int __cdecl NS_WRPMitigation::APIHook__lopen(char const * __ptr64,int)" ?APIHook__lopen@NS_WRPMitigation@@YAHPEBDH@Z
0x18003A400: "`string'" ??_C@_1GE@KJFINFCC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA3?$AA1?$AAE?$AA4?$AA8?$AA2?$AA5?$AA?9?$AA7?$AAB?$AA9?$AA4?$AA?9?$AA4?$AAd?$AAc?$AA3?$AA?9?$AAB@
0x180031550: "`string'" ??_C@_1BM@HCLDLLNP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAO?$AAu?$AAt?$AAs?$AA?$AA@
0x18001DEF0: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180025EA4: "public: void __cdecl ShimLib::CStringToken::Initialize(class ShimLib::CString const & __ptr64,class ShimLib::CString const & __ptr64) __ptr64" ?Initialize@CStringToken@ShimLib@@QEAAXAEBVCString@2@0@Z
0x180024550: "struct HWND__ * __ptr64 __cdecl NS_WsExCompositedShim::APIHook_CreateWindowExA(unsigned long,char const * __ptr64,char const * __ptr64,unsigned long,int,int,int,int,struct HWND__ * __ptr64,struct HMENU__ * __ptr64,struct HINSTANCE__ * __ptr64,void * __ptr64)" ?APIHook_CreateWindowExA@NS_WsExCompositedShim@@YAPEAUHWND__@@KPEBD0KHHHHPEAU2@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
0x18003BD80: "`string'" ??_C@_0BC@OICOBNKM@Class?5path?3?$FL?$CFws?$FN?6?$AA@
0x18001DDA0: "long __cdecl NS_VirtualRegistry2::APIHook_RegOpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x180033470: "`string'" ??_C@_1FK@OIJDPHBB@?$AA?2?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AAs?$AA?2?$AA3?$AA5?$AA9?$AAE?$AA9?$AA2?$AAC?$AAC?$AA2?$AAC?$AAB?$AA7?$AA1?$AAD?$AA1?$AA1?$AA9?$AAA?$AA1?$AA2@
0x18002B7A0: "`string'" ??_C@_1EM@EJCFHJHB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5?$AA1?$AA6?$AA?4?$AA0?$AA?5?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAL?$AAi@
0x18000E1E0: "void __cdecl NS_VirtualRegistry::BuildIE11NoRevisionLie(char const * __ptr64)" ?BuildIE11NoRevisionLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180029680: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x180028668: "__cdecl _imp_CompareStringEx" __imp_CompareStringEx
0x180032B10: "`string'" ??_C@_1GO@BCADEPEJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180028A40: "__cdecl _imp__scwprintf" __imp__scwprintf
0x180025FC0: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreeNodeVisitor::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNodeVisitor@ShimLib@@UEAAPEAXI@Z
0x180033A68: "`string'" ??_C@_1CK@EPFMFCAA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAi?$AAr?$AAc?$AA?$AA@
0x180030A90: "`string'" ??_C@_1II@JNJOOBAI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180028840: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180030180: "`string'" ??_C@_0O@PMABMPNA@FTH?3?5?$CFs?$CI?$CFu?$CJ?3?5?$AA@
0x18002D240: "`string'" ??_C@_1JO@NGLGJFEA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x1800397A0: "`string'" ??_C@_1IO@CBOJIIJ@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180031A00: "`string'" ??_C@_1DO@KPOMOGPD@?$AA?$CF?$AAs?$AA?5?$AA?1?$AAp?$AAt?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA2?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA3?$AA?$CC?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA4?$AA?$CC?$AA?$AA@
0x18002EAB0: "`string'" ??_C@_1ME@NGPBFEPG@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?0?$AA?5?$AAV@
0x18003CFC0: "`string'" ??_C@_1EK@FKAJCNF@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg@
0x1800359B0: "`string'" ??_C@_1FA@KPDHLGPO@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA4?$AA?4?$AA4?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn@
0x180037D60: "`string'" ??_C@_1GE@KEJIIEHJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA1?$AAC?$AA0?$AAF?$AAE?$AA0?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18002A140: "`string'" ??_C@_1DI@CGEMHGGK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18002A090: "`string'" ??_C@_1HC@FOCNJCIO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180032980: "`string'" ??_C@_1BK@MGODAHLB@?$AA4?$AA?4?$AA0?$AA8?$AA?4?$AA0?$AA0?$AA?4?$AA0?$AA9?$AA0?$AA2?$AA?$AA@
0x180030A50: "`string'" ??_C@_1BE@LNEONGBF@?$AA4?$AA?4?$AA1?$AA0?$AA?4?$AA2?$AA2?$AA2?$AA2?$AA?$AA@
0x180037CD0: "`string'" ??_C@_1IC@JNJFBDAB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA4?$AA7?$AA2?$AA5?$AAE?$AAA?$AA1?$AA?9?$AA2?$AAF?$AAB?$AAC?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AAB@
0x18003BDD0: "`string'" ??_C@_0BO@JBJMLKEM@Failed?5to?5add?5entry?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x18002E730: "`string'" ??_C@_1KM@ILBHEFOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x1800328C0: "`string'" ??_C@_1BG@GNKAHCPC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1800353D0: "`string'" ??_C@_1GE@ELHFBAGF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA1?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180013880: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x18000DD80: "void __cdecl NS_VirtualRegistry::BuildFlashUpdaterLie(char const * __ptr64)" ?BuildFlashUpdaterLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180021DE0: "int __cdecl NS_WRPMitigation::APIHook_CopyFileA(char const * __ptr64,char const * __ptr64,int)" ?APIHook_CopyFileA@NS_WRPMitigation@@YAHPEBD0H@Z
0x180028B18: "__cdecl _imp_RtlValidateHeap" __imp_RtlValidateHeap
0x180048518: "__cdecl _native_startup_lock" __native_startup_lock
0x180025860: "public: void __cdecl ShimLib::CString::ReleaseBuffer(int) __ptr64" ?ReleaseBuffer@CString@ShimLib@@QEAAXH@Z
0x18003AC98: "`string'" ??_C@_0BL@INBOGBKK@Adding?5Value?5?$CFls?2?$CFls?5?$DN?5?$CFls?$AA@
0x18003D3C8: "`string'" ??_C@_0CC@DLBLOBMH@Failed?5to?5get?5manager?5mutex?5name@
0x180008380: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlValidateHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlValidateHeap@NS_FaultTolerantHeap@@YAEPEAXK0@Z
0x180489C10: "unsigned short * __ptr64 __ptr64 NS_Win8RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win8RTMVersionLie@@3PEAGEA
0x180009504: "int __cdecl NS_FaultTolerantHeap::FthInitializeSharedEntryPoints(void)" ?FthInitializeSharedEntryPoints@NS_FaultTolerantHeap@@YAHXZ
0x18000350C: "int __cdecl NS_FaultTolerantHeap::FthDelayFreeQueueInsert(void * __ptr64,unsigned __int64,int)" ?FthDelayFreeQueueInsert@NS_FaultTolerantHeap@@YAHPEAX_KH@Z
0x180004618: DllMain
0x180034138: "`string'" ??_C@_0DD@IGIFHL@?$FLDSCACHEPOSITIONS?$FN?5Unabled?5to?5ad@
0x180039C18: "`string'" ??_C@_1CA@ICMLPNCA@?$AAF?$AAi?$AAx?$AA?5?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180034320: "`string'" ??_C@_1EI@JAFEMCEB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAT?$AAF?$AA?2?$AAL?$AAa?$AAn?$AAg@
0x18003B1D8: "`string'" ??_C@_0BE@JENDPNCD@?$CF08lx?$DNQueryValueW?$CI?$CJ?$AA@
0x1800087E4: "int __cdecl NS_FaultTolerantHeap::FthCreateWerReport(void)" ?FthCreateWerReport@NS_FaultTolerantHeap@@YAHXZ
0x180034BB0: "`string'" ??_C@_0CG@BBILKPHB@NS_VirtualRegistry?3?3ExpandCodecS@
0x180029598: "`string'" ??_C@_0BN@BPCGILMN@NS_WRPMitigation?3?3LogSfpKeyW?$AA@
0x1800298C8: "`string'" ??_C@_0CH@BKCAEFIN@Failed?5to?5read?5message?5from?5the?5@
0x18002CD60: "`string'" ??_C@_1GA@HACFEKLP@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp@
0x1800096AC: "void __cdecl NS_FaultTolerantHeap::FthReportCriticalFailure(long)" ?FthReportCriticalFailure@NS_FaultTolerantHeap@@YAXJ@Z
0x180018B40: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryInfoW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x18002D0E0: "`string'" ??_C@_1KM@LCBGFHCK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180037260: "`string'" ??_C@_1GI@DGBINLID@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm@
0x18003C180: "`string'" ??_C@_0DG@MEKLMGPC@NS_VirtualRegistry2?3?3CVirtualReg@
0x180031810: "`string'" ??_C@_1CM@LFBKNMDG@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x18002FED8: "`string'" ??_C@_0DH@KBLHJFHJ@FTH?5WER?3?5report?5successfully?5sub@
0x1800061E8: "struct tagHOOKAPI * __ptr64 __cdecl NS_EmulateSortingVista::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_EmulateSortingVista@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800067B0: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int)" ?APIHook_CompareStringW@NS_EmulateSortingWindows61@@YAHKKPEBGH0H@Z
0x180004728: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180013A40: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long)" ?APIHook_RegDeleteKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKK@Z
0x180028A00: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180031FB0: "`string'" ??_C@_1GI@DDNFLMFE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x1800308E8: "`string'" ??_C@_0DF@DPJLAEHO@NS_FaultTolerantHeap?3?3FthpClient@
0x18003A838: "`string'" ??_C@_1DG@BEOBPILH@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAR?$AAE?$AAT?$AAU?$AAR?$AAN?$AAW?$AAR?$AAI?$AAT?$AAE?$AAP?$AAO?$AAS?$AA?$AA@
0x180028A10: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180029FE0: "`string'" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18002A278: "`string'" ??_C@_0O@COHOBMLB@RegOpenKeyExW?$AA@
0x18003C348: "`string'" ??_C@_0CN@DHPFKGPH@NS_VistaRTMVersionLie?3?3APIHook_R@
0x180033EA0: "`string'" ??_C@_1BC@NIJGDEBN@?$AAS?$AAT?$AAA?$AAN?$AAD?$AAA?$AAR?$AAD?$AA?$AA@
0x180028B30: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180037F30: "`string'" ??_C@_1GA@LCMJIDAB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe@
0x1800348B0: "`string'" ??_C@_1EG@PAOEGBIE@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAn?$AAe?$AAt?$AAc?$AAo?$AAm?$AAm?$AA?4?$AAd@
0x18000A158: McTemplateU0ssss
0x18002A2C8: "`string'" ??_C@_0BA@MPOFGLLA@RegCreateKeyExW?$AA@
0x18002A500: "`string'" ??_C@_1EA@GFDGDNJD@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18002A220: "`string'" ??_C@_0CH@IEOEKDIM@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x180032E30: "`string'" ??_C@_1BO@HMJODIOD@?$AA5?$AA?4?$AA5?$AA0?$AA?4?$AA4?$AA5?$AA2?$AA2?$AA?4?$AA1?$AA8?$AA0?$AA0?$AA?$AA@
0x180033010: "`string'" ??_C@_1EA@KDINMIEK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAM?$AAa?$AAk?$AAe?$AAr?$AA6?$AA5?$AA?$AA@
0x18003AA08: "`string'" ??_C@_0DD@MGNJOMIH@DirectSound?5Apphack?5?$CC?$CFS?$CC?5enabled@
0x18003B200: "`string'" ??_C@_0N@GEHGNFJA@?5?5?5?5Value?$DN?$CFS?$AA@
0x180040A98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180025BB4: "int __cdecl ShimLib::SearchGroupForSID(unsigned long,int * __ptr64)" ?SearchGroupForSID@ShimLib@@YAHKPEAH@Z
0x180028680: "__cdecl _imp_LCIDToLocaleName" __imp_LCIDToLocaleName
0x180030750: "`string'" ??_C@_0ED@GMGLCNEC@Client?5successfully?5connected?5to@
0x18002FC50: "`string'" ??_C@_0BB@ELHCJPEM@WerReportAddDump?$AA@
0x1800288D8: KERNEL32_NULL_THUNK_DATA
0x180040948: ADVAPI32_NULL_THUNK_DATA_DLN
0x1800326A8: "`string'" ??_C@_1BO@DIAJAHNB@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800299B0: "`string'" ??_C@_1EK@HJCNMIHE@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA?2?$AAP?$AAA?$AAC?$AAK?$AAA?$AAG?$AAE?$AAD?$AAC?$AAO?$AAM?$AA?2?$AAP?$AAA?$AAC@
0x180028778: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x1800409A8: ADVAPI32_NULL_THUNK_DATA_DLB
0x18001B104: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?EnumKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x180035660: "`string'" ??_C@_1HO@FHPDAHHO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18048C020: ADVAPI32_NULL_THUNK_DATA_DLA
0x18001F620: "long __cdecl NS_VistaRTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaRTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x1800315E0: "`string'" ??_C@_1CI@JIEOFHFK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAi?$AAd?$AA?$AA@
0x18003CF08: "`string'" ??_C@_0BE@GLFLACED@?7?7?7ValueData?3?5?$FL?$CFs?$FN?6?$AA@
0x18001C14C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetRootKeyPath(struct HKEY__ * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetRootKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEAPEAG@Z
0x180028B38: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x180035440: "`string'" ??_C@_1EM@KIJFALKK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy@
0x180035490: "`string'" ??_C@_1IC@OOIMDDFD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA1?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x18000DDB0: "void __cdecl NS_VirtualRegistry::BuildFutureCop(char const * __ptr64)" ?BuildFutureCop@NS_VirtualRegistry@@YAXPEBD@Z
0x18003A1D0: "`string'" ??_C@_1HE@JEGDNBKC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAN?$AAE?$AAT?$AA?5?$AAF?$AAr?$AAa?$AAm@
0x1800309C0: "`string'" ??_C@_0BD@KPMCBPKM@VerifyVersionInfoA?$AA@
0x1800288A0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180033A38: "`string'" ??_C@_1CK@LBNDPMHG@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAc?$AAo?$AAm?$AA?$AA@
0x18000F6F0: "void __cdecl NS_VirtualRegistry::BuildNowroBlue(char const * __ptr64)" ?BuildNowroBlue@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A108: "`string'" ??_C@_1DE@CMGEADCK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x1800487F0: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthSpecialHeapsLock" ?FthSpecialHeapsLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x180028970: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18003B538: "`string'" ??_C@_0CM@JFOLEANM@?$FLDeleteKeyW?$FN?5Deleting?5subkey?5?$CFS?5@
0x180036920: "`string'" ??_C@_1IC@GJJBLLBP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA2?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180047AF0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000462C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18003A110: "`string'" ??_C@_1DM@BNGCBEDI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA8?$AA?$AA@
0x18002360C: "void __cdecl NS_WRPMitigation::LogSfpValueA(char const * __ptr64,char const * __ptr64,unsigned long)" ?LogSfpValueA@NS_WRPMitigation@@YAXPEBD0K@Z
0x180029B20: "`string'" ??_C@_1FG@NGIEEEOO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO@
0x1800385B0: "`string'" ??_C@_1IA@HONKNAGP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x18003AE80: "`string'" ??_C@_0DE@PKHABEEB@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800205C4: "int __cdecl NS_Win81RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win81RTMVersionLie@@YAHPEBGZZ
0x180025A9C: "protected: static int __cdecl ShimLib::CString::SafeStrlen(char const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBD@Z
0x18002D6B0: "`string'" ??_C@_1BG@KEKKCBNN@?$AAm?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003AB48: "`string'" ??_C@_0CD@EAGDDMAN@?$FLTrimSlashW?$FN?5Bypass?5?2Registry?2Us@
0x1800333D0: "`string'" ??_C@_0BN@LNEHOAGM@NS_VirtualRegistry?3?3BuildMSI?$AA@
0x180033EB8: "`string'" ??_C@_19DLEPDAFO@?$AAF?$AAU?$AAL?$AAL?$AA?$AA@
0x180031D20: "`string'" ??_C@_1IE@NKEJDMBM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x18003CEC8: "`string'" ??_C@_07MCAEODGB@Default?$AA@
0x180046348: "char * __ptr64 __ptr64 NS_VistaSP1VersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaSP1VersionLie@@3PEADEA
0x180015258: "public: void __cdecl NS_VirtualRegistry::OPENKEY::BuildEnumList(void) __ptr64" ?BuildEnumList@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x180034990: "`string'" ??_C@_1GK@OFBOFNIN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x18003CEE8: "`string'" ??_C@_0BP@JMODFLFN@NS_WRPMitigation?3?3LogSfpValueA?$AA@
0x18002FCE0: "`string'" ??_C@_1BI@IEJCOLMP@?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?4?$AA?$CF?$AAu?$AA?$AA@
0x18002B540: "`string'" ??_C@_1BA@KJAPIHAM@?$AAD?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180037540: "`string'" ??_C@_1GE@MLMEOFLG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA3?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800358C8: "`string'" ??_C@_0BN@KHCFNDBA@Indeo3?5initialization?5failed?$AA@
0x180030010: "`string'" ??_C@_07IAKFNNID@ApiName?$AA@
0x1800314E8: "`string'" ??_C@_1CI@HFPBHNIK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAF?$AAa?$AAu?$AAl?$AAt?$AAs?$AA?$AA@
0x180037C70: "`string'" ??_C@_1FI@CLKHHHBK@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAR?$AAT?$AAE?$AA?5?$AAP?$AAr@
0x180047AE8: "protected: static unsigned short const * __ptr64 const __ptr64 ShimLib::CString::_afxPchNil" ?_afxPchNil@CString@ShimLib@@1PEBGEB
0x180035110: "`string'" ??_C@_0CG@JCDPKKIL@NS_VirtualRegistry?3?3BuildTrueMot@
0x180025784: "public: void __cdecl ShimLib::CString::Mid(int,int,class ShimLib::CString & __ptr64)const __ptr64" ?Mid@CString@ShimLib@@QEBAXHHAEAV12@@Z
0x18003C598: "`string'" ??_C@_0CN@HCMPPOHB@NS_VistaSP2VersionLie?3?3APIHook_R@
0x18002DA70: "`string'" ??_C@_1JI@MJKILEGC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18000DF20: "void __cdecl NS_VirtualRegistry::BuildHasbro(char const * __ptr64)" ?BuildHasbro@NS_VirtualRegistry@@YAXPEBD@Z
0x180040AC0: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180013B40: "long __cdecl NS_VirtualRegistry::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBG@Z
0x180046360: "char * __ptr64 __ptr64 NS_VirtualRegistry::g_szCommandLine" ?g_szCommandLine@NS_VirtualRegistry@@3PEADEA
0x18003B878: "`string'" ??_C@_0M@IMBFIMEL@RegEnumKeyA?$AA@
0x180033DF0: "`string'" ??_C@_0CG@KBPKBOBI@?$FLAirlineTycoon?$FN?5Cannot?5open?5ENUM@
0x18003B2A8: "`string'" ??_C@_0BN@DHMJBBOJ@?$CF08lx?$DNEnumValueW?$CIdwIndex?$DN?$CFd?$CJ?$AA@
0x180047B48: "unsigned __int64 NS_WsExCompositedShim::g_stShimId" ?g_stShimId@NS_WsExCompositedShim@@3_KA
0x1800286F0: "__cdecl _imp_CreateActCtxW" __imp_CreateActCtxW
0x180018F14: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::QueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDPEAKPEAE2@Z
0x180028920: "__cdecl _imp_RegGetKeySecurity" __imp_RegGetKeySecurity
0x180021CB0: "void __cdecl NS_Win81RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win81RTMVersionLie@@YAXXZ
0x18003C1C0: "`string'" ??_C@_1HK@MKBHAIFE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180028808: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18002FB58: "`string'" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x180038730: "`string'" ??_C@_1CE@BIBGDKEK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x180035EE0: "`string'" ??_C@_1GE@GALCIJED@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA2?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180489B8C: "unsigned long NS_FaultTolerantHeap::FthFreeTrackerIndex" ?FthFreeTrackerIndex@NS_FaultTolerantHeap@@3KA
0x18002B520: "`string'" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18003C058: "`string'" ??_C@_0BL@GGIBELLI@Failed?5to?5get?5key?5path?5?$CFd?6?$AA@
0x1800236A8: "void __cdecl NS_WRPMitigation::LogSfpValueW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?LogSfpValueW@NS_WRPMitigation@@YAXPEBG0K@Z
0x180034C28: "`string'" ??_C@_0CD@DHJKBHFL@NS_VirtualRegistry?3?3AddCodecValu@
0x18003A570: "`string'" ??_C@_1II@NKKHGDHO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x180048798: "int NS_WRPMitigation::g_fManifestCheck" ?g_fManifestCheck@NS_WRPMitigation@@3HA
0x18002A718: "`string'" ??_C@_07MCKEIOFM@_lwrite?$AA@
0x180034470: "`string'" ??_C@_1GO@DBMJPALL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18002A7E0: "`string'" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180030C10: "`string'" ??_C@_1FK@LGPHAGIB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x180021680: "unsigned long __cdecl NS_Win81RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win81RTMVersionLie@@YAKXZ
0x1800287E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180048C80: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DXMaximizedWindowedMode::g_pAPIHooks" ?g_pAPIHooks@NS_DXMaximizedWindowedMode@@3PEAUtagHOOKAPI@@EA
0x180028820: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18003C628: "`string'" ??_C@_0CM@MMHKEIJN@NS_Win7RTMVersionLie?3?3APIHook_Ge@
0x18002F8F4: "`string'" ??_C@_06CKGENIKG@Enable?$AA@
0x180026650: "public: long __cdecl ShimLib::PathTree::Traverse(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,int,class ShimLib::PathTreeNodeVisitor * __ptr64,class ShimLib::PathTreeNodeVisitor * __ptr64) __ptr64" ?Traverse@PathTree@ShimLib@@QEAAJPEAVPathTreeNode@2@0HPEAVPathTreeNodeVisitor@2@1@Z
0x18000FFD0: "void __cdecl NS_VirtualRegistry::BuildProductTypeServerNT(char const * __ptr64)" ?BuildProductTypeServerNT@NS_VirtualRegistry@@YAXPEBD@Z
0x18002C410: "`string'" ??_C@_1CE@MGEEJEJK@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180039CE0: "`string'" ??_C@_1DI@PFAMGBCG@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAM?$AAa?$AAi?$AAl?$AA?$AA@
0x18002D050: "`string'" ??_C@_1IO@PIPMCOJN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x1800010B0: "int __cdecl ShimLib::NotifyShimsEx(int,unsigned __int64)" ?NotifyShimsEx@ShimLib@@YAHH_K@Z
0x180489C34: "short NS_Win81RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win81RTMVersionLie@@3FA
0x18000E1B0: "void __cdecl NS_VirtualRegistry::BuildIBMDirector(char const * __ptr64)" ?BuildIBMDirector@NS_VirtualRegistry@@YAXPEBD@Z
0x18001EF5C: "int __cdecl NS_VirtualRegistry2::ParseCommandLineA(char const * __ptr64)" ?ParseCommandLineA@NS_VirtualRegistry2@@YAHPEBD@Z
0x180033FB0: "`string'" ??_C@_0BP@HKHDIMI@?$FLDSDEVACCEL?$FN?5Unknown?5device?5?$CFs?$AA@
0x180010C80: "void __cdecl NS_VirtualRegistry::BuildWin9x(char const * __ptr64)" ?BuildWin9x@NS_VirtualRegistry@@YAXPEBD@Z
0x180011070: "void __cdecl NS_VirtualRegistry::BuildWinXP(char const * __ptr64)" ?BuildWinXP@NS_VirtualRegistry@@YAXPEBD@Z
0x18002EEC0: "`string'" ??_C@_1KO@OEPAMGIJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18003C748: "`string'" ??_C@_0CJ@OFJFHMFB@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x180030410: "`string'" ??_C@_0DB@KPNMGDOG@NS_FaultTolerantHeap?3?3FthClientA@
0x18002F3B0: "`string'" ??_C@_1KM@OODODCEN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003B998: "`string'" ??_C@_0BK@OOJMGKOH@Combined?5key?5value?5?$FL?$CFws?$FN?6?$AA@
0x18003D4B8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800011E0: "void __cdecl ShimLib::NotifyShims(int,unsigned __int64)" ?NotifyShims@ShimLib@@YAXH_K@Z
0x180039330: "`string'" ??_C@_1GC@FCHCELC@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AAD?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180029F60: "`string'" ??_C@_1DG@NHOECKKJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAu?$AAr?$AAV?$AAe?$AAr?$AA?$AA@
0x18002D4D0: "`string'" ??_C@_1JO@FDILMNOO@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x18003AC30: "`string'" ??_C@_0DF@OLJKNCLM@Key?5not?5found?3?5?9?5did?5not?5get?5an?5@
0x180003350: "__cdecl ValidateImageBase" _ValidateImageBase
0x180033800: "`string'" ??_C@_1FE@COLKKECP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAB?$AAo?$AAd?$AAy?$AA5?$AA?2?$AAO?$AAp?$AAe?$AAn?$AA?2?$AAS?$AAh?$AAe?$AAl@
0x180029278: "`string'" ??_C@_0BL@KMOICFLO@Layer?5Shims?5uninitialized?4?$AA@
0x180047B18: "unsigned long NS_FaultTolerantHeap::FthSpecialHeapsMaxIndex" ?FthSpecialHeapsMaxIndex@NS_FaultTolerantHeap@@3KA
0x18002C610: "`string'" ??_C@_1BBK@PGCCBGGI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003B118: "`string'" ??_C@_0CC@GEBDICA@Exception?5occurred?5in?5QueryValue@
0x1800324B8: "`string'" ??_C@_1BE@CDNMJCAF@?$AA?2?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x180048560: "unsigned short * NS_WRPMitigation::g_szExePath" ?g_szExePath@NS_WRPMitigation@@3PAGA
0x180037620: "`string'" ??_C@_1IC@GEIMAING@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA3?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800326A0: "`string'" ??_C@_17FGNHOBPG@?$AA4?$AA?4?$AA0?$AA?$AA@
0x18001D5E0: "long __cdecl NS_VirtualRegistry2::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBD@Z
0x180033B30: "`string'" ??_C@_1FK@MPJNMLLM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18001DBA0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x18002A710: "`string'" ??_C@_07FJABDDOC@_lcreat?$AA@
0x180030168: "`string'" ??_C@_0BF@EGBMOION@FTH?3?5ERROR?3?5?$CFs?$CI?$CFu?$CJ?3?5?$AA@
0x18000E6F0: "void __cdecl NS_VirtualRegistry::BuildIndeo4(char const * __ptr64)" ?BuildIndeo4@NS_VirtualRegistry@@YAXPEBD@Z
0x180040AE8: "__cdecl _IMPORT_DESCRIPTOR_sfc" __IMPORT_DESCRIPTOR_sfc
0x18002A248: "`string'" ??_C@_0O@NHPKHNDD@Adding?5Key?5?$CFS?$AA@
0x1800255E0: "public: unsigned short * __ptr64 __cdecl ShimLib::CString::GetBuffer(int) __ptr64" ?GetBuffer@CString@ShimLib@@QEAAPEAGH@Z
0x1800369B0: "`string'" ??_C@_1GE@KCOMNKAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA3?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180035B90: "`string'" ??_C@_1BM@MPLNKBAG@?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAs?$AAT?$AAo?$AAP?$AAi?$AAn?$AA?$AA@
0x180031318: "`string'" ??_C@_1CC@GLPECNHA@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAM?$AAi?$AAn?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x1800379E8: "`string'" ??_C@_1DM@GIBMGLOJ@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x18002A1D0: "`string'" ??_C@_1FA@DONIFOEN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS@
0x180047B88: "unsigned __int64 NS_VirtualRegistry2::g_stShimId" ?g_stShimId@NS_VirtualRegistry2@@3_KA
0x1800129B0: "long __cdecl NS_VirtualRegistry::VR_Printer(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Printer@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x180029700: "`string'" ??_C@_0N@NHGLKGEC@KERNEL32?4DLL?$AA@
0x180033090: "`string'" ??_C@_1IC@FEABEGAG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003C268: "`string'" ??_C@_0BO@KMDDBPKF@NS_VirtualRegistry2?3?3NotifyFn?$AA@
0x1800325B0: "`string'" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180028AE8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18003CDE0: "`string'" ??_C@_1EM@CJMOLJDP@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x180009764: "void __cdecl NS_FaultTolerantHeap::FthSecureRemoveEntryList(struct _LIST_ENTRY * __ptr64)" ?FthSecureRemoveEntryList@NS_FaultTolerantHeap@@YAXPEAU_LIST_ENTRY@@@Z
0x18003ABF0: "`string'" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18003A6F0: "`string'" ??_C@_0BO@NOPPPCOF@NS_VirtualRegistry?3?3VR_Expand?$AA@
0x180001020: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::GetHookAPIs(char * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetHookAPIs@ShimLib@@YAPEAUtagHOOKAPI@@PEADPEAGPEAK@Z
0x1800378F0: "`string'" ??_C@_1IC@ENAMCHA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA5?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x180029988: "`string'" ??_C@_0BE@JFJOCNOK@ERROR?5OUT?5OF?5MEMORY?$AA@
0x18002FA18: "`string'" ??_C@_0P@FPCBKPJL@CompareStringA?$AA@
0x180034418: "`string'" ??_C@_0CN@IAIEBCGH@CString?5exception?5occured?5in?5Del@
0x18003CD90: "`string'" ??_C@_1EI@NNPNNKBD@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x180006AF0: "int __cdecl NS_EmulateSortingWindows61::APIHook_IsNLSDefinedString(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_IsNLSDefinedString@NS_EmulateSortingWindows61@@YAHKKPEAU_nlsversioninfo@@PEBGH@Z
0x180032120: "`string'" ??_C@_1HO@LPCELPOC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x180029600: "`string'" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18002CFF0: "`string'" ??_C@_1EO@LEMLLGCK@?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA2?$AAF?$AAF?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1800386AC: "`string'" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x1800387E8: "`string'" ??_C@_1M@HDJFFBAC@?$AA?4?$AAa?$AAi?$AAf?$AAc?$AA?$AA@
0x18000EBE0: "void __cdecl NS_VirtualRegistry::BuildKrondor(char const * __ptr64)" ?BuildKrondor@NS_VirtualRegistry@@YAXPEBD@Z
0x180028700: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x180034238: "`string'" ??_C@_0DC@CBNEHINI@?$FLDSSMOOTHWRITEPOS?$FN?5Invalid?5numbe@
0x180030100: "`string'" ??_C@_0M@DKBLBPDB@RtlLockHeap?$AA@
0x180028760: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x18002A2A8: "`string'" ??_C@_0O@NNILLHLD@RegCreateKeyW?$AA@
0x1800288C8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180007620: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlDestroyHeap(void * __ptr64)" ?APIHook_RtlDestroyHeap@NS_FaultTolerantHeap@@YAPEAXPEAX@Z
0x180020AA0: "int __cdecl NS_Win7RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win7RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180022330: "int __cdecl NS_WRPMitigation::APIHook_MoveFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?APIHook_MoveFileExW@NS_WRPMitigation@@YAHPEBG0K@Z
0x180028BA0: "__cdecl _imp_RtlUnicodeToMultiByteN" __imp_RtlUnicodeToMultiByteN
0x180030DC0: "`string'" ??_C@_1LK@OGKBPDPO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180033900: "`string'" ??_C@_0BO@PDGEFMJO@MSA2001?3?5The?5data?5value?5is?5?$CFS?$AA@
0x180031878: "`string'" ??_C@_1BG@ICGICGKB@?$AAR?$AAe?$AAs?$AAo?$AAl?$AAu?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800365D0: "`string'" ??_C@_1GE@KDLBPMNP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA0?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180048BC0: Microsoft_Windows_Application_ExperienceEnableBits
0x180034618: "`string'" ??_C@_19MHIAGAHK@?$AA2?$AA6?$AA0?$AA0?$AA?$AA@
0x18003BD28: "`string'" ??_C@_0DC@NGMACNGF@NS_VirtualRegistry2?3?3CVirtualReg@
0x180028860: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x180040904: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18002FBC8: "`string'" ??_C@_0P@BMNOKKJF@VerQueryValueW?$AA@
0x1800260CC: "private: long __cdecl ShimLib::PathTree::Initialize(void) __ptr64" ?Initialize@PathTree@ShimLib@@AEAAJXZ
0x18000C130: "void __cdecl NS_VirtualRegistry::BuildDDrawReleaseProcessVid(char const * __ptr64)" ?BuildDDrawReleaseProcessVid@NS_VirtualRegistry@@YAXPEBD@Z
0x1800333F0: "`string'" ??_C@_1HM@EIKCIBEN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800382B0: "`string'" ??_C@_1GM@GELEECLF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18002A318: "`string'" ??_C@_1CM@LPGAILIM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x18003B140: "`string'" ??_C@_0CC@IAEKIH@NULL?5handle?5passed?5to?5QueryValue@
0x18002A6C8: "`string'" ??_C@_09MAGPNIBH@MoveFileW?$AA@
0x18003A050: "`string'" ??_C@_1BI@JPCMFPH@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x180024164: "void __cdecl NS_WRPRegDeleteKey::LogSfpKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?LogSfpKeyW@NS_WRPRegDeleteKey@@YAXPEAUHKEY__@@PEBGPEAG@Z
0x18001F6FC: "struct tagHOOKAPI * __ptr64 __cdecl NS_VistaRTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VistaRTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800372D0: "`string'" ??_C@_1IC@OAPOIPGP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AAD?$AAE?$AA8?$AA9?$AA7?$AA8?$AA1?$AA?9?$AAD?$AAB?$AAF?$AA6?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800373D0: "`string'" ??_C@_1IC@OLCMAKAP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180010570: "void __cdecl NS_VirtualRegistry::BuildTrueMotion20(char const * __ptr64)" ?BuildTrueMotion20@NS_VirtualRegistry@@YAXPEBD@Z
0x180031A80: "`string'" ??_C@_1EC@GKNAOOLO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd@
0x180002CE0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180028AC0: "__cdecl _imp__initterm" __imp__initterm
0x180028BE0: "__cdecl _imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus" __imp_RtlSetLastWin32ErrorAndNtStatusFromNtStatus
0x18003B8E8: "`string'" ??_C@_0O@FLDDFNH@RegDeleteKeyA?$AA@
0x180036C18: "`string'" ??_C@_1BE@MBFMPAPK@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAK?$AAe?$AAy?$AA?$AA@
0x180036788: "`string'" ??_C@_1DO@BGFHEMPE@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAF?$AAr?$AAa?$AAm?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg?$AAe?$AA?$AA@
0x18002F9F8: "`string'" ??_C@_0BA@IHGNDAEB@CompareStringEx?$AA@
0x18002BB30: "`string'" ??_C@_1DK@HLAMNKCJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180489BB0: "short NS_VistaRTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaRTMVersionLie@@3FA
0x180035DB0: "`string'" ??_C@_1BCE@IJPCMHII@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180039D30: "`string'" ??_C@_1EC@IIJGINPL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x180025FC0: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreeNodeVisitor::`vector deleting destructor'(unsigned int) __ptr64" ??_EPathTreeNodeVisitor@ShimLib@@UEAAPEAXI@Z
0x180011690: "void __cdecl NS_VirtualRegistry::BuildWordPerfect2002(char const * __ptr64)" ?BuildWordPerfect2002@NS_VirtualRegistry@@YAXPEBD@Z
0x1800249B4: "void * __ptr64 __cdecl ShimLib::SafeMalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeMalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x18002F990: "`string'" ??_C@_0DB@MHOCIBEB@NS_DXMaximizedWindowedMode?3?3Init@
0x1800358B0: "`string'" ??_C@_1BE@NHMOODLC@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA3?$AA2?$AA?$AA@
0x180028690: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800250FC: "protected: void __cdecl ShimLib::CString::ConcatInPlace(int,unsigned short const * __ptr64) __ptr64" ?ConcatInPlace@CString@ShimLib@@IEAAXHPEBG@Z
0x180010CF0: "void __cdecl NS_VirtualRegistry::BuildWinHelpPath(char const * __ptr64)" ?BuildWinHelpPath@NS_VirtualRegistry@@YAXPEBD@Z
0x180030990: "`string'" ??_C@_0CP@NKCCIFNG@NS_VerifyVersionInfoLite?3?3Initia@
0x18002EF70: "`string'" ??_C@_1CC@GCDLBLAM@?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180030E80: "`string'" ??_C@_1BE@DNDHOCGP@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x180022200: "int __cdecl NS_WRPMitigation::APIHook_MoveFileA(char const * __ptr64,char const * __ptr64)" ?APIHook_MoveFileA@NS_WRPMitigation@@YAHPEBD0@Z
0x18003BAC8: "`string'" ??_C@_0BL@BOKAPCF@Closing?5virtual?5key?5?$FL?$CFws?$FN?6?$AA@
0x18002DC60: "`string'" ??_C@_1KM@ONCBDCOK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18003C7D8: "`string'" ??_C@_0CN@HCEKILFP@NS_Win81RTMVersionLie?3?3APIHook_G@
0x1800064F0: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringA(unsigned long,unsigned long,char const * __ptr64,int,char const * __ptr64,int)" ?APIHook_CompareStringA@NS_EmulateSortingWindows61@@YAHKKPEBDH0H@Z
0x18002C7F0: "`string'" ??_C@_1LM@IGICEGGH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180022190: "int __cdecl NS_WRPMitigation::APIHook_DeleteFileW(unsigned short const * __ptr64)" ?APIHook_DeleteFileW@NS_WRPMitigation@@YAHPEBG@Z
0x180035140: "`string'" ??_C@_1ME@KMBEMGCG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x180028770: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180028B78: "__cdecl _imp_RtlCreateUnicodeStringFromAsciiz" __imp_RtlCreateUnicodeStringFromAsciiz
0x18003B590: "`string'" ??_C@_0CI@MBANLGPK@?$FLDeleteKeyW?$FN?5subkey?5?$CFS?5was?5not?5d@
0x18000AEA0: "void __cdecl NS_VirtualRegistry::BuildAirlineTycoon(char const * __ptr64)" ?BuildAirlineTycoon@NS_VirtualRegistry@@YAXPEBD@Z
0x1800346B0: "`string'" ??_C@_1DM@MKGDJDDJ@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA3?$AA?$AA@
0x180033AC8: "`string'" ??_C@_1CM@ODNIAEFD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAn?$AAu?$AAr?$AAi?$AA?$AA@
0x180010FB0: "void __cdecl NS_VirtualRegistry::BuildWinSrv08Sp1Lie(char const * __ptr64)" ?BuildWinSrv08Sp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18001C910: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64) __ptr64" ?QueryInfoKeyW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x18001BF38: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyPath(void * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAXPEAPEAG@Z
0x18003A1A0: "`string'" ??_C@_1CO@BKGEIAFE@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?5?$AA2?$AA0?$AA0?$AA8?$AA?5?$AAR?$AA2?$AA?$AA@
0x1800314C8: "`string'" ??_C@_1BM@OMAPIBPI@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAD?$AAi?$AAs?$AAc?$AAa?$AAr?$AAd?$AAs?$AA?$AA@
0x180038E00: "`string'" ??_C@_1GC@PCELCAAP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA3?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x18002FCA0: "`string'" ??_C@_0CK@GGMADLJN@NS_FaultTolerantHeap?3?3FthGetVers@
0x180009498: "void __cdecl NS_FaultTolerantHeap::FthInitializeCookie(void)" ?FthInitializeCookie@NS_FaultTolerantHeap@@YAXXZ
0x18001D240: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x1800012D0: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::InitializeHooksEx(unsigned long,unsigned short const * __ptr64,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksEx@ShimLib@@YAPEAUtagHOOKAPI@@KPEBGPEBDPEAK@Z
0x18002F7B0: "`string'" ??_C@_0BI@NMCFBIEJ@EmulateSortingWindows61?$AA@
0x180037528: "`string'" ??_C@_1BI@KDPOLBCP@?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AAr?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800355D0: "`string'" ??_C@_1IC@FOMMIKCB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA8?$AA3?$AAB?$AA5?$AA6?$AA1?$AA0?$AA?9?$AAE?$AA0?$AAD?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180008630: "void * __ptr64 __cdecl NS_FaultTolerantHeap::FthCreateHeap(unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64,struct _RTL_HEAP_PARAMETERS * __ptr64)" ?FthCreateHeap@NS_FaultTolerantHeap@@YAPEAXKPEAX_K10PEAU_RTL_HEAP_PARAMETERS@@@Z
0x180029D50: "`string'" ??_C@_1BM@GKCDLGFA@?$AA?$CF?$AAs?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?4?$AA?$CF?$AAs?$AA_?$AA?$AA@
0x180037B28: "`string'" ??_C@_1DM@PAKMCDMB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x180048C90: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DXMaximizedWindowedHwndOverride::g_pAPIHooks" ?g_pAPIHooks@NS_DXMaximizedWindowedHwndOverride@@3PEAUtagHOOKAPI@@EA
0x180040A70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180036C30: "`string'" ??_C@_1CA@FNHNHGAO@?$AAB?$AAi?$AAD?$AAi?$AAr?$AAP?$AAr?$AAe?$AAd?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180002700: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x180026394: "public: long __cdecl ShimLib::PathTreeNode::Search(struct ShimLib::PathTreeNodeSearch * __ptr64) __ptr64" ?Search@PathTreeNode@ShimLib@@QEAAJPEAUPathTreeNodeSearch@2@@Z
0x1800292B8: "`string'" ??_C@_1CG@EFAPPAEK@?$AAW?$AAs?$AAE?$AAx?$AAC?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAe?$AAd?$AAS?$AAh?$AAi?$AAm?$AA?$AA@
0x180015738: "private: struct HKEY__ * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::CreateDummyKey(void) __ptr64" ?CreateDummyKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAUHKEY__@@XZ
0x180030148: "`string'" ??_C@_0BD@JDDPIELM@RtlExitUserProcess?$AA@
0x180034F18: "`string'" ??_C@_1DK@OLIJBAGC@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAt?$AAm?$AA2?$AA0?$AAd?$AAe?$AAc?$AA?4?$AAa?$AAx?$AA?$AA@
0x18002FD70: "`string'" ??_C@_0BK@GMDCKFFO@FTH?5WER?3?5timestamp?3?5?$CFws?5?6?$AA@
0x180489BB8: "unsigned long NS_VistaRTMVersionLie::MinorVersion" ?MinorVersion@NS_VistaRTMVersionLie@@3KA
0x180012590: "long __cdecl NS_VirtualRegistry::VR_MSA2001(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_MSA2001@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x18000E740: "void __cdecl NS_VirtualRegistry::BuildIndeo5(char const * __ptr64)" ?BuildIndeo5@NS_VirtualRegistry@@YAXPEBD@Z
0x180031134: "`string'" ??_C@_15LHNHECKK@?$AA?$CF?$AAx?$AA?$AA@
0x18003AD80: "`string'" ??_C@_19OLEIDBPB@?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000A200: StringCchPrintfW
0x180029570: "`string'" ??_C@_0BP@IAHLOOIK@NS_WRPMitigation?3?3LogSfpValueW?$AA@
0x1800265AC: "public: long __cdecl ShimLib::PathTree::SetFlags(class ShimLib::CString const & __ptr64,unsigned long,unsigned long) __ptr64" ?SetFlags@PathTree@ShimLib@@QEAAJAEBVCString@2@KK@Z
0x1800388B8: "`string'" ??_C@_19FHAPCMGL@?$AA?4?$AAm?$AAp?$AA2?$AA?$AA@
0x180034DB0: "`string'" ??_C@_1BG@JAICECBE@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1800295E8: "`string'" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x180029FC8: "`string'" ??_C@_1BG@BOGBHIMC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180007A80: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlLockHeap(void * __ptr64)" ?APIHook_RtlLockHeap@NS_FaultTolerantHeap@@YAEPEAX@Z
0x180032400: "`string'" ??_C@_1BE@MNOIGKKJ@?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAD?$AAi?$AAr?$AA?$AA@
0x1800296A0: "`string'" ??_C@_0BN@BMJMMFGL@fdwReason?$CI?$CFd?$CJ?5pszCmdLine?$CI?$CFs?$CJ?$AA@
0x1800288E8: SHLWAPI_NULL_THUNK_DATA
0x18002B538: "`string'" ??_C@_17NIABIIAO@?$AAx?$AA8?$AA6?$AA?$AA@
0x18003A3C0: "`string'" ??_C@_19LLCKJFHH@?$AA9?$AA2?$AA0?$AA0?$AA?$AA@
0x18003CE30: "`string'" ??_C@_1EM@MJJGBCLF@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x180048508: "__cdecl _onexitend" __onexitend
0x180030078: "`string'" ??_C@_09KKJFIDEP@NTDLL?4DLL?$AA@
0x18002E200: "`string'" ??_C@_1JO@JKEMKKHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18003AC10: "`string'" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x18000C840: "void __cdecl NS_VirtualRegistry::BuildDSPadCursors(char const * __ptr64)" ?BuildDSPadCursors@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B838: "`string'" ??_C@_0P@CDBCGPOI@RegQueryValueA?$AA@
0x180032F60: "`string'" ??_C@_0CD@BBBNFDPP@?$FLJoystick?5hack?$FN?5No?5joysticks?5fou@
0x18000A970: "struct tagHOOKAPI * __ptr64 __cdecl NS_VerifyVersionInfoLite::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_VerifyVersionInfoLite@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800356E0: "`string'" ??_C@_1HI@NJNNHFDK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18000E8F0: "void __cdecl NS_VirtualRegistry::BuildInstallRoot(char const * __ptr64)" ?BuildInstallRoot@NS_VirtualRegistry@@YAXPEBD@Z
0x18002B878: "`string'" ??_C@_1DE@KHNCPPFM@?$AAM?$AAS?$AA?5?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003A690: "`string'" ??_C@_1BE@MMAGAMLN@?$AA4?$AA?4?$AA6?$AA?4?$AA0?$AA2?$AA0?$AA1?$AA2?$AA?$AA@
0x180028C10: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180010BE0: "void __cdecl NS_VirtualRegistry::BuildWin8ShellNSSortOrderIndex(char const * __ptr64)" ?BuildWin8ShellNSSortOrderIndex@NS_VirtualRegistry@@YAXPEBD@Z
0x18003CE80: "`string'" ??_C@_1EI@KPCDAHIJ@?$AAR?$AAe?$AAg?$AAO?$AAp?$AAe?$AAn?$AAK?$AAe?$AAy?$AAE?$AAx?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x18003B938: "`string'" ??_C@_0N@CKKDOMHE@RegGetValueW?$AA@
0x18002FE38: "`string'" ??_C@_1CM@DAEBFPIP@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x18000B280: "void __cdecl NS_VirtualRegistry::BuildCLRVersion45Lie(char const * __ptr64)" ?BuildCLRVersion45Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18000AB30: "public: __cdecl ShimLib::CStringToken::~CStringToken(void) __ptr64" ??1CStringToken@ShimLib@@QEAA@XZ
0x18000346C: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x1800289E8: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180048544: "int NS_WRPMitigation::g_bSubshimUsed" ?g_bSubshimUsed@NS_WRPMitigation@@3HA
0x18003C288: "`string'" ??_C@_0CK@MLHKPFEF@NS_VirtualRegistry2?3?3InitializeH@
0x180032768: "`string'" ??_C@_17CCMBIGAN@?$AA5?$AA?4?$AA1?$AA?$AA@
0x18003D0E8: "`string'" ??_C@_0CC@KIEKFILF@NS_WRPMitigation?3?3IsExeManifeste@
0x18003D1A0: "`string'" ??_C@_0BP@CJKLCBAM@RLCHECK?3?5No?5Runlevel?5declared?4?$AA@
0x180002FC0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x180028798: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18003015C: "`string'" ??_C@_04HIBGFPH@NULL?$AA@
0x180033050: "`string'" ??_C@_1EA@BGPAJKPE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAM?$AAa?$AAk?$AAe?$AAr?$AA6?$AA5?$AA?$AA@
0x1800286B0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180048D40: "struct NS_FaultTolerantHeap::_FTH_TRACKER * NS_FaultTolerantHeap::FthFreeTracker" ?FthFreeTracker@NS_FaultTolerantHeap@@3PAU_FTH_TRACKER@1@A
0x18003CF20: "`string'" ??_C@_1EG@IAIHAAOJ@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt@
0x180048B58: "long volatile NS_FaultTolerantHeap::FthPerformCheckSums" ?FthPerformCheckSums@NS_FaultTolerantHeap@@3JC
0x18003BF10: "`string'" ??_C@_0BG@CMKKLNBP@Failed?5to?5add?5key?5?$CFd?6?$AA@
0x180028908: USER32_NULL_THUNK_DATA
0x180021130: "int __cdecl NS_Win8RTMVersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_Win8RTMVersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x18002C2A0: "`string'" ??_C@_1IK@HALOPDAO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180014890: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x18003C478: "`string'" ??_C@_0CK@JCEMCKKD@NS_VistaSP1VersionLie?3?3APIHook_G@
0x180028888: "__cdecl _imp_FindNLSStringEx" __imp_FindNLSStringEx
0x180028BC8: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1800286E8: "__cdecl _imp_QueryActCtxW" __imp_QueryActCtxW
0x180047BA8: "unsigned __int64 NS_EmulateSortingVista::g_stShimId" ?g_stShimId@NS_EmulateSortingVista@@3_KA
0x180030120: "`string'" ??_C@_0BA@EEJAMNOM@RtlValidateHeap?$AA@
0x180029560: "`string'" ??_C@_0O@BENKPHGO@WRPMitigation?$AA@
0x18002FF78: "`string'" ??_C@_0BG@CJAMGKGL@reuse?5after?5free?3?5?$CFp?6?$AA@
0x180036A20: "`string'" ??_C@_1EI@HNHOICGN@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP@
0x18002DA20: "`string'" ??_C@_1EC@DGMNHFMD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn@
0x180033E40: "`string'" ??_C@_1EG@CJFELOOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x180028980: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180012D00: "long __cdecl NS_VirtualRegistry::VR_Expand(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Expand@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x18003C6B8: "`string'" ??_C@_0CL@CJDGCOII@NS_Win7RTMVersionLie?3?3Initialize@
0x180007640: "int __cdecl NS_FaultTolerantHeap::APIHook_RtlFreeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlFreeHeap@NS_FaultTolerantHeap@@YAHPEAXK0@Z
0x180489C1C: "short NS_Win8RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win8RTMVersionLie@@3FA
0x180030A68: "`string'" ??_C@_1BM@OAENJGHL@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x1800286E0: "__cdecl _imp_ReleaseActCtx" __imp_ReleaseActCtx
0x180025510: "public: char * __ptr64 __cdecl ShimLib::CString::GetAnsi(void)const __ptr64" ?GetAnsi@CString@ShimLib@@QEBAPEADXZ
0x18048C000: "__cdecl _imp_GetFileSecurityA" __imp_GetFileSecurityA
0x180028B90: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1800487E0: "int NS_EmulateSortingWindows61::g_bSubshimUsed" ?g_bSubshimUsed@NS_EmulateSortingWindows61@@3HA
0x180031780: "`string'" ??_C@_1DA@DCCCMBPM@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1800387C0: "`string'" ??_C@_01JKBOJNNK@?$FO?$AA@
0x180014BF4: "public: struct NS_VirtualRegistry::PROTECTOR * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AddKeyProtector(unsigned short const * __ptr64) __ptr64" ?AddKeyProtector@CVirtualRegistry@NS_VirtualRegistry@@QEAAPEAUPROTECTOR@2@PEBG@Z
0x180038FC0: "`string'" ??_C@_1EO@BHNIDMCC@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAA?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV@
0x1800300C0: "`string'" ??_C@_0M@EHEBCDHL@RtlSizeHeap?$AA@
0x180489C20: "char * __ptr64 __ptr64 NS_Win81RTMVersionLie::pszServicePack" ?pszServicePack@NS_Win81RTMVersionLie@@3PEADEA
0x18002E670: "`string'" ??_C@_1LK@FLLJHFGD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002A6B8: "`string'" ??_C@_09NMPHGNMA@MoveFileA?$AA@
0x18002BF20: "`string'" ??_C@_1MG@KNFAICFI@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?0?$AA?5@
0x180031E40: "`string'" ??_C@_1IK@MFINLCNE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x18001B9DC: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindRootKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindRootKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEBGPEAPEAVCVirtualKey@2@PEAPEAG@Z
0x18000E160: "void __cdecl NS_VirtualRegistry::BuildHotFix(char const * __ptr64)" ?BuildHotFix@NS_VirtualRegistry@@YAXPEBD@Z
0x180034D60: "`string'" ??_C@_1EO@FACKCOBN@?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8?$AA3?$AAA?$AAA?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA9?$AA2?$AA9@
0x180035920: "`string'" ??_C@_1BG@GGKMJKEB@?$AAi?$AAr?$AA4?$AA1?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x180039680: "`string'" ??_C@_1IO@ICDGEMIE@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AAC?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180038908: "`string'" ??_C@_19OHANPFCJ@?$AA?4?$AAp?$AAl?$AAs?$AA?$AA@
0x180039D80: "`string'" ??_C@_1FA@FNPEDFMH@?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAV?$AAi?$AAd?$AAP?$AAn?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAA@
0x180028C38: "__cdecl _xi_a" __xi_a
0x180047B90: "unsigned __int64 NS_VirtualRegistry::g_stShimId" ?g_stShimId@NS_VirtualRegistry@@3_KA
0x180030268: "`string'" ??_C@_0BN@LJJGFBDC@Failed?5to?5create?5pipe?5event?6?$AA@
0x180006730: "int __cdecl NS_EmulateSortingWindows61::APIHook_CompareStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_CompareStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0H0HPEAU_nlsversioninfo@@PEAX_J@Z
0x180028698: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180028678: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180031938: "`string'" ??_C@_1BE@JIHFKFIP@?$AA?$CI?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$CJ?$AA?$AA@
0x18002DBC0: "`string'" ??_C@_1JK@CEKLPANA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180030B20: "`string'" ??_C@_1IO@PGNDLMBJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x1800345F0: "`string'" ??_C@_1CC@KMKCFOIP@?$AAS?$AAu?$AAb?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x18001BE7C: "private: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyHandle(class NS_VirtualRegistry2::CVirtualKey * __ptr64,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?GetKeyHandle@CVirtualRegistry@NS_VirtualRegistry2@@AEAAJPEAVCVirtualKey@2@PEAPEAUHKEY__@@@Z
0x180030F88: "`string'" ??_C@_1DI@LBCPMIIE@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAH?$AAa?$AAs?$AAb?$AAr?$AAo?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180023300: "int __cdecl NS_WRPMitigation::IsKeyComKey(struct HKEY__ * __ptr64,struct _UNICODE_STRING * __ptr64)" ?IsKeyComKey@NS_WRPMitigation@@YAHPEAUHKEY__@@PEAU_UNICODE_STRING@@@Z
0x1800310B0: "`string'" ??_C@_1DC@OGBHMLCL@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?5?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?2?$AAE?$AAn?$AAu?$AAm?$AA?$AA@
0x180039950: "`string'" ??_C@_1IO@CDJEPOPF@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA7?$AAF?$AAD?$AA5?$AA2?$AA3?$AA8?$AA0?$AA?9?$AA4?$AAE?$AA0?$AA7?$AA?9?$AA1?$AA0?$AA1?$AAB?$AA?9?$AAA?$AAE@
0x180022770: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegDeleteValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteValueW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBG@Z
0x180007610: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlCreateHeap(unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64,struct _RTL_HEAP_PARAMETERS * __ptr64)" ?APIHook_RtlCreateHeap@NS_FaultTolerantHeap@@YAPEAXKPEAX_K10PEAU_RTL_HEAP_PARAMETERS@@@Z
0x18000F850: "void __cdecl NS_VirtualRegistry::BuildPageKeepProDirectory(char const * __ptr64)" ?BuildPageKeepProDirectory@NS_VirtualRegistry@@YAXPEBD@Z
0x18003AB08: "`string'" ??_C@_0BP@FHAKIBJM@NS_VirtualRegistry?3?3TrimSlashW?$AA@
0x1800394F0: "`string'" ??_C@_1GC@LIFHIGMA@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AAF?$AAC?$AA3?$AA7?$AAE?$AA5?$AAB?$AAA?$AA?9?$AA4?$AAA?$AA8?$AAE?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8?$AA7@
0x1800487B0: "int NS_VerifyVersionInfoLite::g_bSubshimUsed" ?g_bSubshimUsed@NS_VerifyVersionInfoLite@@3HA
0x18003AB28: "`string'" ??_C@_1BO@MLIOGHOC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x180046388: "char * __ptr64 __ptr64 NS_DXMaximizedWindowedHwndOverride::g_szCommandLine" ?g_szCommandLine@NS_DXMaximizedWindowedHwndOverride@@3PEADEA
0x180032688: "`string'" ??_C@_1BG@MEBEMGBM@?$AAC?$AAS?$AAD?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002C440: "`string'" ??_C@_1FM@LKNKDPHF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl@
0x180016558: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEAGPEAK2PEAE2@Z
0x1800289C0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180048500: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x18003AF58: "`string'" ??_C@_0BK@OFFEMJGB@Adding?5Key?5Protector?3?5?5?$CFS?$AA@
0x18003CA90: "`string'" ??_C@_17EPHFHMBH@?$AAW?$AAR?$AAP?$AA?$AA@
0x180489BD0: "short NS_VistaSP1VersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaSP1VersionLie@@3FA
0x1800318B8: "`string'" ??_C@_1CG@EAMEFML@?$AAH?$AAK?$AAC?$AAC?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAF?$AAo?$AAn?$AAt?$AAs?$AA?$AA@
0x180035588: "`string'" ??_C@_1DM@KGJPKKMN@?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x18002B918: "`string'" ??_C@_1BE@BNEEFCGP@?$AAm?$AAs?$AAp?$AAu?$AAb?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180008320: "unsigned char __cdecl NS_FaultTolerantHeap::APIHook_RtlUnlockHeap(void * __ptr64)" ?APIHook_RtlUnlockHeap@NS_FaultTolerantHeap@@YAEPEAX@Z
0x180034400: "`string'" ??_C@_1BI@DLFJJCCO@?$AAI?$AAn?$AAs?$AAt?$AAR?$AAe?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18003B268: "`string'" ??_C@_0CP@HLAAFHMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x18002A658: "`string'" ??_C@_0M@GKMANEJL@CopyFileExA?$AA@
0x18000F2D0: "void __cdecl NS_VirtualRegistry::BuildNetworkCards(char const * __ptr64)" ?BuildNetworkCards@NS_VirtualRegistry@@YAXPEBD@Z
0x1800105BC: "void __cdecl NS_VirtualRegistry::BuildVersionLie(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?BuildVersionLie@NS_VirtualRegistry@@YAXPEBG000@Z
0x1800297B0: "`string'" ??_C@_0BM@NOCCEJML@buffer?5overrun?3?5?$CFp?0?5?$CFp?0?5?$CFp?6?$AA@
0x1800332F0: "`string'" ??_C@_0CB@MADEHLBD@NS_VirtualRegistry?3?3GetStringSID@
0x180031608: "`string'" ??_C@_1CI@PHPDLHDO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAi?$AAn?$AA?$AA@
0x180034080: "`string'" ??_C@_0CP@ONGENBJJ@?$FLDSPADCURSORS?$FN?5Unabled?5to?5add?5Di@
0x18002FB98: "`string'" ??_C@_0BE@IEOIIDEN@GetFileVersionInfoW?$AA@
0x18003B680: "`string'" ??_C@_05NMDBNOPO@Win9x?$AA@
0x180039A70: "`string'" ??_C@_1HI@HHNEBAAI@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?2?$AA?$HL?$AA6?$AA4?$AA4?$AA5?$AA4?$AAF?$AA8?$AA2?$AA?9?$AAF@
0x180031150: "`string'" ??_C@_1BI@PFENDFKH@?$AAH?$AAa?$AAr?$AAd?$AAW?$AAa?$AAr?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
0x18003A870: "`string'" ??_C@_1DG@KKINCALC@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAS?$AAM?$AAO?$AAO?$AAT?$AAH?$AAW?$AAR?$AAI?$AAT?$AAE?$AAP?$AAO?$AAS?$AA?$AA@
0x18003C930: "`string'" ??_C@_1FM@EKPPHNKM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?2?$AAS?$AAo?$AAf?$AAt@
0x180039010: "`string'" ??_C@_1EK@KJLCBCBB@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAI?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe@
0x1800306B8: "`string'" ??_C@_0CJ@NKLBCGJO@Client?5read?5an?5unexpected?5messag@
0x180048CE0: "unsigned long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetModuleBaseNameW)(void * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,unsigned long)" ?pfnGetModuleBaseNameW@NS_FaultTolerantHeap@@3P6AKPEAXPEAUHINSTANCE__@@PEAGK@ZEA
0x180047B50: "unsigned __int64 NS_WRPRegDeleteKey::g_stShimId" ?g_stShimId@NS_WRPRegDeleteKey@@3_KA
0x1800340D8: "`string'" ??_C@_0CK@NEJIELPJ@NS_VirtualRegistry?3?3BuildDSCache@
0x18003BA90: "`string'" ??_C@_0DE@EJBCEAEH@NS_VirtualRegistry2?3?3CVirtualReg@
0x1800299FC: "`string'" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x18002B8B0: "`string'" ??_C@_1EO@DJFBEGPI@?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8?$AA7?$AA0?$AA0?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AA6@
0x180024CB4: "protected: void __cdecl ShimLib::CString::AllocBuffer(int) __ptr64" ?AllocBuffer@CString@ShimLib@@IEAAXH@Z
0x180025358: "public: void __cdecl ShimLib::CString::Format(char const * __ptr64,...) __ptr64" ?Format@CString@ShimLib@@QEAAXPEBDZZ
0x180029228: "`string'" ??_C@_09EAGPOLDP@?$CFS?$CFs?$CFs?$CFs?6?$AA@
0x18000DE00: "void __cdecl NS_VirtualRegistry::BuildGOMPack(char const * __ptr64)" ?BuildGOMPack@NS_VirtualRegistry@@YAXPEBD@Z
0x180037780: "`string'" ??_C@_1IC@BEMKOBEB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA4?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800146F0: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char const * __ptr64,unsigned long)" ?APIHook_RegSetValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDK1K@Z
0x18002A7B0: "`string'" ??_C@_0BB@PMFHDDMB@SetFileSecurityA?$AA@
0x180030FF0: "`string'" ??_C@_0CA@CDCPMINO@NS_VirtualRegistry?3?3BuildHasbro?$AA@
0x180039270: "`string'" ??_C@_1FK@HJHMOHEK@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA7?$AAC?$AAE?$AA5?$AA5?$AA1?$AAE?$AAB?$AA?9?$AAF?$AA8?$AA5?$AAC?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x180037360: "`string'" ??_C@_1GE@NNAFGOFL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18003C0E0: "`string'" ??_C@_0CC@NDJOGFDG@Failed?5to?5allocate?5?$CFd?5for?5buffer@
0x18002FE98: "`string'" ??_C@_0DK@CEPBEIOO@FTH?5WER?3?5report?5submission?5faile@
0x180031668: "`string'" ??_C@_1CM@JHNOMLBA@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AAN?$AAo?$AAn?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x180048D20: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportCreate)(unsigned short const * __ptr64,enum _WER_REPORT_TYPE,struct _WER_REPORT_INFORMATION * __ptr64,void * __ptr64 * __ptr64)" ?pfnWerReportCreate@NS_FaultTolerantHeap@@3P6AJPEBGW4_WER_REPORT_TYPE@@PEAU_WER_REPORT_INFORMATION@@PEAPEAX@ZEA
0x180029590: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x180014930: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long)" ?APIHook_RegSetValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGK1K@Z
0x180025FFC: "public: long __cdecl ShimLib::PathTreeNode::AddChild(class ShimLib::PathTreeNode * __ptr64) __ptr64" ?AddChild@PathTreeNode@ShimLib@@QEAAJPEAV12@@Z
0x1800196B0: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::RemoveVirtualDeletedHKCRKeysFromEnum(struct NS_VirtualRegistry::OPENKEY * __ptr64) __ptr64" ?RemoveVirtualDeletedHKCRKeysFromEnum@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEAUOPENKEY@2@@Z
0x180028BA8: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x180008DB8: "void * __ptr64 __cdecl NS_FaultTolerantHeap::FthDestroyHeap(void * __ptr64)" ?FthDestroyHeap@NS_FaultTolerantHeap@@YAPEAXPEAX@Z
0x1800069D0: "int __cdecl NS_EmulateSortingWindows61::APIHook_GetNLSVersion(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64)" ?APIHook_GetNLSVersion@NS_EmulateSortingWindows61@@YAHKKPEAU_nlsversioninfo@@@Z
0x18001FE70: "long __cdecl NS_VistaSP1VersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaSP1VersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180037050: "`string'" ??_C@_1FC@EODEJFND@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo@
0x1800293F0: "`string'" ??_C@_1CC@CALOGMCJ@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA2?$AA?$AA@
0x180039D18: "`string'" ??_C@_1BI@LHIOEDHG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1800031A4: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180048530: "__cdecl pRawDllMain" _pRawDllMain
0x180489BE8: "short NS_VistaSP2VersionLie::SpMinorVersion" ?SpMinorVersion@NS_VistaSP2VersionLie@@3FA
0x180034A10: "`string'" ??_C@_1IG@MGCEDJOH@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000F130: "void __cdecl NS_VirtualRegistry::BuildNT4SP5(char const * __ptr64)" ?BuildNT4SP5@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A780: "`string'" ??_C@_0BA@JGFCNMMD@VerInstallFileW?$AA@
0x180028AC8: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180039BA0: "`string'" ??_C@_1HG@HKLPGGAK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5@
0x18002B9D0: "`string'" ??_C@_1BE@IPGODPI@?$AAv?$AAi?$AAs?$AAi?$AAo?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180038950: "`string'" ??_C@_1EI@PANOAGBH@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAi?$AAT?$AAu?$AAn?$AAe?$AAs?$AA?4?$AAB?$AAu?$AAr@
0x1800047BC: strcmp
0x1800287A0: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x180031220: "`string'" ??_C@_19MHOGOLNA@?$AAV?$AAF?$AAA?$AAT?$AA?$AA@
0x1800324F0: "`string'" ??_C@_1HE@PKDEENCL@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180048CB8: "unsigned __int64 NS_FaultTolerantHeap::FthDelayFreeQueueSize" ?FthDelayFreeQueueSize@NS_FaultTolerantHeap@@3_KA
0x180030230: "`string'" ??_C@_0DC@JBDDKLC@FTH?5shim?5applied?5with?5unrecogniz@
0x180031950: "`string'" ??_C@_1IA@PMEIEHOF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180039B00: "`string'" ??_C@_1EC@CBGKBHBB@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr@
0x180010520: "void __cdecl NS_VirtualRegistry::BuildThemeActive(char const * __ptr64)" ?BuildThemeActive@NS_VirtualRegistry@@YAXPEBD@Z
0x18002A628: "`string'" ??_C@_0M@NFEPJBAB@AccessCheck?$AA@
0x18001E360: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x18003BE48: "`string'" ??_C@_0DG@GIEPJEHL@NS_VirtualRegistry2?3?3CVirtualReg@
0x1800286D0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x18003C318: "`string'" ??_C@_0CK@KNBEBOLI@NS_VistaRTMVersionLie?3?3APIHook_G@
0x18002CE50: "`string'" ??_C@_1IK@LNAPHGFF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x180030958: "`string'" ??_C@_0DF@MHPGLBMP@NS_VerifyVersionInfoLite?3?3APIHoo@
0x180005554: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000F110: "void __cdecl NS_VirtualRegistry::BuildModemWizard(char const * __ptr64)" ?BuildModemWizard@NS_VirtualRegistry@@YAXPEBD@Z
0x18003BFB0: "`string'" ??_C@_0CA@PPJONAFP@FindKey?5key?5?$FL?$CFws?$FN?5subkey?5?$FL?$CFws?$FN?6?$AA@
0x1800461E0: "struct NS_VirtualRegistry2::VENTRY * NS_VirtualRegistry2::g_VEntryList" ?g_VEntryList@NS_VirtualRegistry2@@3PAUVENTRY@1@A
0x180014450: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEADPEAJ@Z
0x1800296E8: "`string'" ??_C@_0BB@GEMBACLN@pdwHookCount?$CI?$CFd?$CJ?$AA@
0x18002FD98: "`string'" ??_C@_0BM@IDKLDLDG@FTH?5WER?3?5errors?3?5?$CFws?5?$CF08X?5?6?$AA@
0x180036D48: "`string'" ??_C@_0BN@JGDNOEGH@Indeo4?5initialization?5failed?$AA@
0x18003CB30: "`string'" ??_C@_0CB@CODEBNEO@NS_WRPMitigation?3?3APIHook__lopen@
0x180027000: "const type_info::`vftable'" ??_7type_info@@6B@
0x180010490: "void __cdecl NS_VirtualRegistry::BuildTalkingDictionary(char const * __ptr64)" ?BuildTalkingDictionary@NS_VirtualRegistry@@YAXPEBD@Z
0x180029EB0: "`string'" ??_C@_1FI@DPDNJNCK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x18003C808: "`string'" ??_C@_0CN@GONCDOII@NS_Win81RTMVersionLie?3?3APIHook_G@
0x180029248: "`string'" ??_C@_08LOJNPBNJ@NotifyFn?$AA@
0x1800287F0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180028A68: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x18003B6E0: "`string'" ??_C@_0CD@MNODABLG@?5?5?5?5?5?5?5?5?5Virtual?5registry?5?5?5?5?5?5?5@
0x180002F90: "__cdecl _security_check_cookie" __security_check_cookie
0x180025F84: "public: virtual __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::~PathTreeNodeSetFlagsVisitor(void) __ptr64" ??1PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAA@XZ
0x180031B20: "`string'" ??_C@_1FG@EPBLECLL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?4?$AA1?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAo?$AAp@
0x180048B80: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUozbviUlyquivUznwGEUkivxlnkOlyq@AcLayers" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUozbviUlyquivUznwGEUkivxlnkOlyq@AcLayers
0x18003A398: "`string'" ??_C@_1BM@DNDBGDBJ@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA8?$AA?5?$AAP?$AAr?$AAo?$AA?$AA@
0x180028C30: "__cdecl _xc_z" __xc_z
0x18003C418: "`string'" ??_C@_0CN@NEHFMNJL@NS_VistaSP1VersionLie?3?3APIHook_G@
0x1800121F0: "long __cdecl NS_VirtualRegistry::VR_Hasbro(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64)" ?VR_Hasbro@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@@Z
0x180031648: "`string'" ??_C@_1BM@CNBLLPAA@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x180010130: "void __cdecl NS_VirtualRegistry::BuildRegisteredOwner(char const * __ptr64)" ?BuildRegisteredOwner@NS_VirtualRegistry@@YAXPEBD@Z
0x18002B770: "`string'" ??_C@_1BA@CNMFNJKN@?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?$AA@
0x18001E340: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDPEADPEAJ@Z
0x180024978: "void * __ptr64 __cdecl ShimLib::SafeCalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeCalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x18002BAA8: "`string'" ??_C@_1DG@GOGBGJNB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAo?$AAr?$AAd?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800288D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000E260: "void __cdecl NS_VirtualRegistry::BuildIE401(char const * __ptr64)" ?BuildIE401@NS_VirtualRegistry@@YAXPEBD@Z
0x18000A910: "int __cdecl NS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoW(struct _OSVERSIONINFOEXW * __ptr64,unsigned long,unsigned __int64)" ?APIHook_VerifyVersionInfoW@NS_VerifyVersionInfoLite@@YAHPEAU_OSVERSIONINFOEXW@@K_K@Z
0x180024018: "int __cdecl NS_WRPRegDeleteKey::IsWrpKeyDescriptor(void * __ptr64)" ?IsWrpKeyDescriptor@NS_WRPRegDeleteKey@@YAHPEAX@Z
0x18002DB08: "`string'" ??_C@_1BC@OMKMFBKC@?$AAo?$AAl?$AAe?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000AFE0: "void __cdecl NS_VirtualRegistry::BuildAutoRun(char const * __ptr64)" ?BuildAutoRun@NS_VirtualRegistry@@YAXPEBD@Z
0x1800367D0: "`string'" ??_C@_1IC@FJLPNOEM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA1?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180038828: "`string'" ??_C@_19GDAGBIBG@?$AA?4?$AAi?$AAt?$AAl?$AA?$AA@
0x1800398C0: "`string'" ??_C@_1IO@ODHGBPNH@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA4?$AA0?$AA2?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x18000E790: "void __cdecl NS_VirtualRegistry::BuildIndeoSound(char const * __ptr64)" ?BuildIndeoSound@NS_VirtualRegistry@@YAXPEBD@Z
0x180010780: "void __cdecl NS_VirtualRegistry::BuildVistaSP1Lie(char const * __ptr64)" ?BuildVistaSP1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180032AF8: "`string'" ??_C@_1BG@IDKBOGHH@?$AAF?$AAu?$AAl?$AAl?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x180036CA0: "`string'" ??_C@_1CC@GKBJCDAA@?$AAM?$AAi?$AAn?$AAV?$AAi?$AAe?$AAw?$AAp?$AAo?$AAr?$AAt?$AAW?$AAi?$AAd?$AAt?$AAh?$AA?$AA@
0x1800315B8: "`string'" ??_C@_1CI@OJMKONIO@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAD?$AAi?$AAs?$AAk?$AAc?$AAa?$AAc?$AAh?$AAe?$AAM?$AAa?$AAc?$AA?$AA@
0x18003C3D8: "`string'" ??_C@_0O@LLCLDPIK@GetVersionExA?$AA@
0x1800130A0: "int __cdecl NS_VirtualRegistry::GetDirectSoundAppId(unsigned short * __ptr64)" ?GetDirectSoundAppId@NS_VirtualRegistry@@YAHPEAG@Z
0x180032FE8: "`string'" ??_C@_1CI@KHBFFGHG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?$AA@
0x180040AFC: "__cdecl _IMPORT_DESCRIPTOR_WINSPOOL" __IMPORT_DESCRIPTOR_WINSPOOL
0x18003CA38: "`string'" ??_C@_0CF@CLAOEBEL@Patched?5an?5AccessCheck?5to?5ignore@
0x18003B770: "`string'" ??_C@_0CJ@DGEHFBMF@NS_VirtualRegistry?3?3InitializeHo@
0x1800306E8: "`string'" ??_C@_0BN@CIMGEPPE@Client?5was?5denied?5tracking?4?6?$AA@
0x18002FAB0: "`string'" ??_C@_0BC@CCDOCFGB@NlsValidateLocale?$AA@
0x180034DE8: "`string'" ??_C@_1DI@HFBADLFP@?$AAT?$AAr?$AAu?$AAe?$AAM?$AAo?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA2?$AA?4?$AA0?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
0x180035AE0: "`string'" ??_C@_1HK@GGIPDAPB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x18001EE4C: "int __cdecl NS_VirtualRegistry2::NotifyFn(unsigned long)" ?NotifyFn@NS_VirtualRegistry2@@YAHK@Z
0x18003ACD0: "`string'" ??_C@_0CF@POGFKFHB@?$FLFindValue?$FN?5Using?5virtual?5value?3@
0x180048B48: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VirtualRegistry::g_pAPIHooks" ?g_pAPIHooks@NS_VirtualRegistry@@3PEAUtagHOOKAPI@@EA
0x180004624: "__cdecl CxxThrowException" _CxxThrowException
0x18002FD8C: "`string'" ??_C@_15EFLNJKHH@?$AA?$CF?$AAu?$AA?$AA@
0x1800295D0: "`string'" ??_C@_0BE@KHAJLODC@?7?7?7ValueName?3?5?$FL?$CFS?$FN?6?$AA@
0x180029CB0: "`string'" ??_C@_1BA@FIJHCCCE@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x180025FC0: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`vector deleting destructor'(unsigned int) __ptr64" ??_EPathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAPEAXI@Z
0x180014A68: "public: struct NS_VirtualRegistry::VIRTUALKEY * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddKey(unsigned short const * __ptr64) __ptr64" ?AddKey@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAU12@PEBG@Z
0x18001FCA0: "int __cdecl NS_VistaSP1VersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaSP1VersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x18001FD90: "int __cdecl NS_VistaSP1VersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaSP1VersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x1800388C8: "`string'" ??_C@_19OPLDELAO@?$AA?4?$AAm?$AAp?$AA3?$AA?$AA@
0x180029860: "`string'" ??_C@_0CJ@HKJEJONC@NS_FaultTolerantHeap?3?3FthPipeRea@
0x1800286A0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180016C8C: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::GetValueA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBD1KPEAKPEAE2@Z
0x1800347E8: "`string'" ??_C@_1CO@KPLMNPIA@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAA?$AAR?$AAC?$AAH?$AAI?$AAT?$AAE?$AAC?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180037980: "`string'" ??_C@_1GE@HKBBNDCA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA8?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800390F0: "`string'" ??_C@_1FK@BPAHEKLE@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AA8?$AAD?$AA8?$AAA?$AAB?$AAA?$AA0?$AA?9?$AA4?$AAB?$AA7?$AA8?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AAB?$AA2?$AA7?$AAD?$AA?9?$AA0@
0x180046380: "char * __ptr64 __ptr64 NS_DXMaximizedWindowedMode::g_szCommandLine" ?g_szCommandLine@NS_DXMaximizedWindowedMode@@3PEADEA
0x180028898: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180048CA0: "struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64 (__cdecl* __ptr64 NS_EmulateSortingWindows61::g_pfnGetNamedLocaleHashNode)(unsigned short const * __ptr64,unsigned short)" ?g_pfnGetNamedLocaleHashNode@NS_EmulateSortingWindows61@@3P6APEAUloc_hash_s@1@PEBGG@ZEA
0x180023D70: "long __cdecl NS_WRPRegDeleteKey::APIHook_RegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?APIHook_RegDeleteKeyW@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBG@Z
0x18003ABD0: "`string'" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x180025B00: "public: void __cdecl ShimLib::CString::Truncate(int) __ptr64" ?Truncate@CString@ShimLib@@QEAAXH@Z
0x180034698: "`string'" ??_C@_19MDOHFKBC@?$AA3?$AA7?$AA9?$AA0?$AA?$AA@
0x180038878: "`string'" ??_C@_19IMLGLLD@?$AA?4?$AAm?$AA4?$AAb?$AA?$AA@
0x18003CC00: "`string'" ??_C@_1CK@ILIJIJOA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAV?$AAo?$AAl?$AAa?$AAt?$AAi?$AAl?$AAe?$AA?2?$AA0?$AA0?$AA?$AA@
0x180489C04: "short NS_Win7RTMVersionLie::SpMajorVersion" ?SpMajorVersion@NS_Win7RTMVersionLie@@3FA
0x180034AF8: "`string'" ??_C@_1BK@EKJCAKBC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?$AA@
0x180028758: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180025198: "protected: void __cdecl ShimLib::CString::CopyBeforeWrite(void) __ptr64" ?CopyBeforeWrite@CString@ShimLib@@IEAAXXZ
0x180002A50: "long __cdecl NS_VirtualRegistry::VR_Protect(struct NS_VirtualRegistry::OPENKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long)" ?VR_Protect@NS_VirtualRegistry@@YAJPEAUOPENKEY@1@PEAUVIRTUALKEY@1@PEAUVIRTUALVAL@1@KPEBEK@Z
0x180031488: "`string'" ??_C@_1BM@DGOHNLGO@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAR?$AAe?$AAa?$AAd?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x180038D00: "`string'" ??_C@_1GC@CBFIBFKM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA0?$AA0?$AA1?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
0x180032420: "`string'" ??_C@_1FA@JKNAADAE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1800487E8: "int NS_DXMaximizedWindowedMode::g_bSubshimUsed" ?g_bSubshimUsed@NS_DXMaximizedWindowedMode@@3HA
0x18003D270: "`string'" ??_C@_0CJ@KEPKDCNH@NS_WRPRegDeleteKey?3?3InitializeHo@
0x180039560: "`string'" ??_C@_1IO@EOGDEFLC@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180028670: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18002FA48: "`string'" ??_C@_0N@CNFOJGGE@LCMapStringA?$AA@
0x18003D2F0: "`string'" ??_C@_0BA@MHOOFEGE@CreateWindowExW?$AA@
0x18003B3F8: "`string'" ??_C@_0BD@DBPIOOMI@?$CF08lx?$DNQueryInfoW?$CI?$CJ?$AA@
0x180001790: "struct tagHOOKAPI * __ptr64 __cdecl NS_WRPMitigation::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WRPMitigation@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180030018: "`string'" ??_C@_07NBCGADJA@Unknown?$AA@
0x1800387F8: "`string'" ??_C@_1M@EEELKBDA@?$AA?4?$AAa?$AAi?$AAf?$AAf?$AA?$AA@
0x18002DF00: "`string'" ??_C@_1DE@CIPHFIDB@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x18003B968: "`string'" ??_C@_0CL@EDEGGCIE@NS_VirtualRegistry2?3?3CVirtualKey@
0x1800288C0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18003AF00: "`string'" ??_C@_0BP@PEJCCGHF@Adding?5Redirector?3?5?5?$CFS?5?9?$DO?6?5?5?$CFS?$AA@
0x180004800: "__cdecl _chkstk" __chkstk
0x18002BE40: "`string'" ??_C@_1BE@DPMNNGMJ@?$AAo?$AAl?$AAe?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003C508: "`string'" ??_C@_0CN@FPKGPDIC@NS_VistaSP2VersionLie?3?3APIHook_G@
0x180038550: "`string'" ??_C@_1FG@HIGOBHCG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?5?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAt?$AAy@
0x18001D1D0: "long __cdecl NS_VirtualRegistry2::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_VirtualRegistry2@@YAJPEAUHKEY__@@@Z
0x18003B4F0: "`string'" ??_C@_0DB@LMDEAEML@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800487B4: "int NS_WsExCompositedShim::g_bSubshimUsed" ?g_bSubshimUsed@NS_WsExCompositedShim@@3HA
0x18002D6E0: "`string'" ??_C@_1IC@KCKAIIKD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x180028BD0: "__cdecl _imp_RtlFormatCurrentUserKeyPath" __imp_RtlFormatCurrentUserKeyPath
0x180489B94: "unsigned long NS_FaultTolerantHeap::FthClientDebug" ?FthClientDebug@NS_FaultTolerantHeap@@3KA
0x18002FD50: "`string'" ??_C@_0BN@DKJFAHCM@FTH?5WER?3?5process?5name?3?5?$CFws?5?6?$AA@
0x180031238: "`string'" ??_C@_1DC@DANKHGMJ@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAt?$AAa?$AAt?$AA?$AA@
0x180030558: "`string'" ??_C@_0DG@LEBLLKNK@Client?5did?5not?5find?5server?5liste@
0x18003B010: "`string'" ??_C@_0CP@GGFFBACG@NS_VirtualRegistry?3?3CVirtualRegi@
0x180029DD8: "`string'" ??_C@_17CHCGIDNB@?$AA?$CF?$AAs?$AA?2?$AA?$AA@
0x180002FC0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18003D3F0: "`string'" ??_C@_0CC@PHAKDHKJ@Failed?5to?5get?5tweaker?5mutex?5name@
0x18001E430: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegQueryValueExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x1800230BC: "bool __cdecl NS_WRPMitigation::IsExeManifested(void)" ?IsExeManifested@NS_WRPMitigation@@YA_NXZ
0x180006A60: "int __cdecl NS_EmulateSortingWindows61::APIHook_GetNLSVersionEx(unsigned long,unsigned short const * __ptr64,struct _nlsversioninfoex * __ptr64)" ?APIHook_GetNLSVersionEx@NS_EmulateSortingWindows61@@YAHKPEBGPEAU_nlsversioninfoex@@@Z
0x180034448: "`string'" ??_C@_0CE@PBMFDHPE@NS_VirtualRegistry?3?3Delphi5SetVa@
0x180038858: "`string'" ??_C@_19NIAADECN@?$AA?4?$AAm?$AA3?$AAu?$AA?$AA@
0x18002D770: "`string'" ??_C@_1NA@OKMIBGHN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo@
0x180048BF0: "int NS_Win81RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win81RTMVersionLie@@3HA
0x180002770: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKPEAGKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180033BE0: "`string'" ??_C@_1DI@FNKEKAFP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x180031270: "`string'" ??_C@_1CA@NHJAKFMN@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAC?$AAP?$AAU?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18002C360: "`string'" ??_C@_1KO@KCNNKFFM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18002FF90: "`string'" ??_C@_0CO@IFLHALCJ@NS_FaultTolerantHeap?3?3FthDelayFr@
0x1800334E8: "`string'" ??_C@_0BN@NAGOJIJO@BuildMSI?5Failed?5to?5find?5keys?$AA@
0x1800370B0: "`string'" ??_C@_1GE@GNKGFDMK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x1800287D0: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18000FE80: "void __cdecl NS_VirtualRegistry::BuildPrincetonACT(char const * __ptr64)" ?BuildPrincetonACT@NS_VirtualRegistry@@YAXPEBD@Z
0x18001D840: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long)" ?APIHook_RegEnumKeyA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADK@Z
0x180024C80: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator+=(unsigned short const * __ptr64) __ptr64" ??YCString@ShimLib@@QEAAAEBV01@PEBG@Z
0x18003BA50: "`string'" ??_C@_0CG@HCPKIBLB@Virtual?5value?5?$FL?$CFws?$FN?5being?5enumer@
0x18001FAB0: StringCbCopyExW
0x18001A9F4: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::CloseKey(struct HKEY__ * __ptr64) __ptr64" ?CloseKey@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@@Z
0x18000AB50: "long __cdecl NS_VirtualRegistry::AddCodecValues(struct NS_VirtualRegistry::CODEC_VALUE * __ptr64,unsigned int)" ?AddCodecValues@NS_VirtualRegistry@@YAJPEAUCODEC_VALUE@1@I@Z
0x180032868: "`string'" ??_C@_0CL@PMAKEHDH@Added?5FILEOPENBOGUSCTRLID?5value?5@
0x18001FA8C: StringCbCopyExA
0x18002C730: "`string'" ??_C@_1LO@IGFEOMHH@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x1800163F8: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::EnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@KPEADPEAK2PEAE2@Z
0x1800292E0: "`string'" ??_C@_1CA@PIDBHHIO@?$AAW?$AAR?$AAP?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?$AA@
0x180488D48: "long * NS_FaultTolerantHeap::FthHeapLocksCounter" ?FthHeapLocksCounter@NS_FaultTolerantHeap@@3PAJA
0x180013D30: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?APIHook_RegEnumKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGK@Z
0x180011E40: "int __cdecl NS_VirtualRegistry::GetStringSID(unsigned short * __ptr64)" ?GetStringSID@NS_VirtualRegistry@@YAHPEAG@Z
0x180022CB0: "int __cdecl NS_WRPMitigation::APIHook__lcreat(char const * __ptr64,int)" ?APIHook__lcreat@NS_WRPMitigation@@YAHPEBDH@Z
0x180029CC0: "`string'" ??_C@_1DG@KJABMIGC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AA?$CF?$AAs?$AA?2?$AAC?$AAO?$AAM?$AAM?$AAO?$AAN?$AA?2?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180029D18: "`string'" ??_C@_1BG@KHHNBBEB@?$AA?$CF?$AAs?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA_?$AA?$AA@
0x18002FCD0: "`string'" ??_C@_1BA@OJFOBGOM@?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA0?$AA?$AA@
0x180030FC0: "`string'" ??_C@_0CN@OKKAHOFB@?$FLHasbro?5hack?$FN?5Ignoring?5fix?5?9?5no?5@
0x18002A7C8: "`string'" ??_C@_0BB@OAMPIGBG@SetFileSecurityW?$AA@
0x18003A0E8: "`string'" ??_C@_1O@IDAEOOD@?$AA7?$AA?4?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x1800338B8: "`string'" ??_C@_0DO@FFECNNOP@MSA2001?3?5return?5from?5RegQueryVal@
0x18002F8C8: "`string'" ??_C@_1BC@LLFFMIOK@?$AAd?$AA3?$AAd?$AA9?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18003AC20: "`string'" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x18002D5C8: "`string'" ??_C@_1BA@BMEEEHNA@?$AAB?$AAi?$AAt?$AAn?$AAe?$AAs?$AAs?$AA?$AA@
0x18002E420: "`string'" ??_C@_1LM@KLINNHJM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002BA80: "`string'" ??_C@_19LMNIHEDB@?$AAW?$AAo?$AAr?$AAd?$AA?$AA@
0x1800309F0: "`string'" ??_C@_1FO@OKMMBCLN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180035F70: "`string'" ??_C@_1IC@FOBAHKDK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA2?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18003AD50: "`string'" ??_C@_0CL@MKCODDKE@NS_VirtualRegistry?3?3CVirtualRegi@
0x180002A30: "public: virtual long __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::Visit(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Visit@PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAJPEAVPathTreeNode@3@0PEAUPathTreeNodeTraversal@3@@Z
0x1800288B8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18002FC80: "`string'" ??_C@_0BN@PFEIHELL@FTH?5WER?3?5process?5path?3?5?$CFws?5?6?$AA@
0x180038460: "`string'" ??_C@_1HM@EJGGEOIE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x18003C688: "`string'" ??_C@_0CM@PNILPALJ@NS_Win7RTMVersionLie?3?3APIHook_Rt@
0x180029FF0: "`string'" ??_C@_1GO@PIAMDPFJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180009ADC: "unsigned char __cdecl NS_FaultTolerantHeap::FthValidateHeap(void * __ptr64,unsigned long,void * __ptr64)" ?FthValidateHeap@NS_FaultTolerantHeap@@YAEPEAXK0@Z
0x180024A74: "unsigned short * __ptr64 __cdecl ShimLib::ToUnicode(char const * __ptr64)" ?ToUnicode@ShimLib@@YAPEAGPEBD@Z
0x18002391C: "int __cdecl NS_WRPMitigation::MySfpIsHandleProtected(void * __ptr64)" ?MySfpIsHandleProtected@NS_WRPMitigation@@YAHPEAX@Z
0x180024670: "struct tagHOOKAPI * __ptr64 __cdecl NS_WsExCompositedShim::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_WsExCompositedShim@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180048CE8: "int (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnVerQueryValueW)(void const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,unsigned int * __ptr64)" ?pfnVerQueryValueW@NS_FaultTolerantHeap@@3P6AHPEBXPEBGPEAPEAXPEAI@ZEA
0x180010830: "void __cdecl NS_VirtualRegistry::BuildVistaSP2Lie(char const * __ptr64)" ?BuildVistaSP2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B440: "`string'" ??_C@_0BC@OOCNKGKA@?$CF08lx?$DNSetValueW?$CI?$CJ?$AA@
0x180034C80: "`string'" ??_C@_1ME@GPGJIDJJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA8?$AA3?$AA8?$AA6?$AA3?$AAF?$AA1?$AA?9?$AA7?$AA0?$AAD?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18003B8A8: "`string'" ??_C@_0O@NHPJLAPM@RegEnumKeyExW?$AA@
0x18003AB70: "`string'" ??_C@_0CO@KCPCOJFB@?$FLTrimSlashW?$FN?5Removed?5slash?5from?5@
0x180048550: "unsigned long NS_FaultTolerantHeap::FthSpecialHeapsCounter" ?FthSpecialHeapsCounter@NS_FaultTolerantHeap@@3KA
0x180030F68: "`string'" ??_C@_0CA@NKGPFGOE@?$FLHasbro?5hack?$FN?5Returning?5path?5?$CFS?$AA@
0x1800132A4: "public: struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::OPENKEY::AddEnumEntries<struct NS_VirtualRegistry::VIRTUALKEY>(struct NS_VirtualRegistry::VIRTUALKEY * __ptr64,long (__cdecl*)(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)) __ptr64" ??$AddEnumEntries@UVIRTUALKEY@NS_VirtualRegistry@@@OPENKEY@NS_VirtualRegistry@@QEAAPEAUENUMENTRY@1@PEAUVIRTUALKEY@1@P6AJPEAUHKEY__@@KPEAGPEAKPEAX444@Z@Z
0x1800133BC: "public: struct NS_VirtualRegistry::ENUMENTRY * __ptr64 __cdecl NS_VirtualRegistry::OPENKEY::AddEnumEntries<struct NS_VirtualRegistry::VIRTUALVAL>(struct NS_VirtualRegistry::VIRTUALVAL * __ptr64,long (__cdecl*)(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)) __ptr64" ??$AddEnumEntries@UVIRTUALVAL@NS_VirtualRegistry@@@OPENKEY@NS_VirtualRegistry@@QEAAPEAUENUMENTRY@1@PEAUVIRTUALVAL@1@P6AJPEAUHKEY__@@KPEAGPEAKPEAX444@Z@Z
0x18002B900: "`string'" ??_C@_1BE@CCMLAJPM@?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x180028C50: "__cdecl _guard_fids_table" __guard_fids_table
0x180010FE0: "void __cdecl NS_VirtualRegistry::BuildWinSrv2012RTMLie(char const * __ptr64)" ?BuildWinSrv2012RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180489BF8: "unsigned short * __ptr64 __ptr64 NS_Win7RTMVersionLie::pwszServicePack" ?pwszServicePack@NS_Win7RTMVersionLie@@3PEAGEA
0x180034AD8: "`string'" ??_C@_1BM@DIBDHMGB@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$CF?$AAl?$AAl?$AAu?$AA?5?$AA?$AA@
0x18002BA30: "`string'" ??_C@_1EO@CMFMHBLG@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA1?$AAA?$AA2?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x18003A5F8: "`string'" ??_C@_1BK@JDNMLCKN@?$AA9?$AA?4?$AA1?$AA1?$AA?4?$AA1?$AA0?$AA2?$AA4?$AA0?$AA?4?$AA0?$AA?$AA@
0x180030480: "`string'" ??_C@_1GO@PFMCBDPG@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAa?$AAm?$AAe?$AAd?$AAP?$AAi?$AAp?$AAe?$AA?2?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAP?$AAr?$AAe?$AAf?$AAi@
0x18002F7C8: "`string'" ??_C@_0BC@PMOLEEFI@FaultTolerantHeap?$AA@
0x18003BE80: "`string'" ??_C@_0BN@BOFNGLIB@Failed?5to?5get?5entry?5root?5?$CFd?6?$AA@
0x180028AD8: msvcrt_NULL_THUNK_DATA
0x180039210: "`string'" ??_C@_1FK@HICBMBJL@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA7?$AAC?$AAE?$AA5?$AA5?$AA1?$AAE?$AAA?$AA?9?$AAF?$AA8?$AA5?$AAC?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA9?$AA0?$AA5?$AA9?$AA?9?$AA0@
0x180025DBC: "protected: int __cdecl ShimLib::CStringToken::GetToken(class ShimLib::CString & __ptr64,int & __ptr64)const __ptr64" ?GetToken@CStringToken@ShimLib@@IEBAHAEAVCString@2@AEAH@Z
0x180027040: "__cdecl load_config_used" _load_config_used
0x180031140: "`string'" ??_C@_19KLPPDPHB@?$AAP?$AAC?$AAI?$AA?2?$AA?$AA@
0x180046318: "char * __ptr64 __ptr64 NS_WsExCompositedShim::g_szCommandLine" ?g_szCommandLine@NS_WsExCompositedShim@@3PEADEA
0x180029D90: "`string'" ??_C@_1BG@HNCKHNHL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18002D5E0: "`string'" ??_C@_1HA@HLPGFHBF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x180013940: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18003B4A8: "`string'" ??_C@_0DB@KAKMLBBM@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800325C8: "`string'" ??_C@_1BI@BGAAOEPC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180020320: "int __cdecl NS_VistaSP2VersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_VistaSP2VersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180020410: "int __cdecl NS_VistaSP2VersionLie::APIHook_GetVersionExW(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_GetVersionExW@NS_VistaSP2VersionLie@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180023744: "int __cdecl NS_WRPMitigation::MySfpIsFileProtectedA(char const * __ptr64)" ?MySfpIsFileProtectedA@NS_WRPMitigation@@YAHPEBD@Z
0x180021E50: "int __cdecl NS_WRPMitigation::APIHook_CopyFileExA(char const * __ptr64,char const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_CopyFileExA@NS_WRPMitigation@@YAHPEBD0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x1800293A0: "`string'" ??_C@_1CG@JBGJCJJB@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAS?$AAP?$AA1?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x180010F20: "void __cdecl NS_VirtualRegistry::BuildWinSrv08R2RTMLie(char const * __ptr64)" ?BuildWinSrv08R2RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180489C40: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib
0x18002CC80: "`string'" ??_C@_1DC@GKDCJCLP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180042090: "struct NS_VirtualRegistry::VENTRY * NS_VirtualRegistry::g_VList" ?g_VList@NS_VirtualRegistry@@3PAUVENTRY@1@A
0x180034108: "`string'" ??_C@_0CJ@OEMGEMJI@?$FLDSCACHEPOSITIONS?$FN?5No?5devices?5sp@
0x18000BED0: "void __cdecl NS_VirtualRegistry::BuildCookiePath(char const * __ptr64)" ?BuildCookiePath@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B568: "`string'" ??_C@_0CE@MCGAEAPG@?$FLDeleteKeyW?$FN?5subkey?5?$CFS?5was?5delet@
0x1800337A0: "`string'" ??_C@_1EC@PFIAGJFN@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x1800487F8: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthDelayFreeQueueLock" ?FthDelayFreeQueueLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x180026750: "public: long __cdecl ShimLib::PathTreeNode::Traverse(class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Traverse@PathTreeNode@ShimLib@@QEAAJPEAV12@PEAUPathTreeNodeTraversal@2@@Z
0x1800147F0: "long __cdecl NS_VirtualRegistry::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x180048D18: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportSubmit)(void * __ptr64,enum _WER_CONSENT,unsigned long,enum _WER_SUBMIT_RESULT * __ptr64)" ?pfnWerReportSubmit@NS_FaultTolerantHeap@@3P6AJPEAXW4_WER_CONSENT@@KPEAW4_WER_SUBMIT_RESULT@@@ZEA
0x1800242AC: "int __cdecl NS_WRPRegDeleteKey::MySfpIsKeyOrAnySubkeyProtected(struct HKEY__ * __ptr64)" ?MySfpIsKeyOrAnySubkeyProtected@NS_WRPRegDeleteKey@@YAHPEAUHKEY__@@@Z
0x18002B780: "`string'" ??_C@_1BI@KLKHDLCC@?$AAo?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180035820: "`string'" ??_C@_1M@KHAKGNOC@?$AAw?$AAh?$AAe?$AAe?$AAl?$AA?$AA@
0x180005BA0: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_CompareStringEx@NS_EmulateSortingVista@@YAHPEBGK0H0HPEAU_nlsversioninfo@@PEAX_J@Z
0x18002FBD8: "`string'" ??_C@_0BD@PABDJIFP@GetModuleBaseNameW?$AA@
0x180029748: "`string'" ??_C@_0CG@KJLHKOI@NS_FaultTolerantHeap?3?3FthEncodeP@
0x180017AD0: "int __cdecl NS_VirtualRegistry::NotifyFn(unsigned long)" ?NotifyFn@NS_VirtualRegistry@@YAHK@Z
0x18002F828: "`string'" ??_C@_0BD@IAGIOPPM@VistaSP2VersionLie?$AA@
0x18003C9C8: "`string'" ??_C@_0CI@LACDMHMM@NS_WRPMitigation?3?3MySfpIsFilePro@
0x18001D9F0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x180033858: "`string'" ??_C@_0BO@INJFAGMN@MSA2001?3?5RegOpenKeyExW?5failed?$AA@
0x180029770: "`string'" ??_C@_0BH@EEMOFDAN@bogus?5address?3?5?$CFp?0?5?$CFp?6?$AA@
0x18002BCA0: "`string'" ??_C@_1PI@BFIBLHOP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x18003A8A8: "`string'" ??_C@_1DE@ODNNDCHE@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAD?$AAI?$AAS?$AAA?$AAB?$AAL?$AAE?$AAD?$AAE?$AAV?$AAI?$AAC?$AAE?$AA?$AA@
0x18002CDC0: "`string'" ??_C@_1GM@KHOHAHEK@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x180029CA0: "`string'" ??_C@_1BA@JMHHEKIK@?$AAS?$AAT?$AAA?$AAR?$AAT?$AAU?$AAP?$AA?$AA@
0x18002FBF0: "`string'" ??_C@_1BA@PKCHBLFB@?$AAw?$AAe?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180015B1C: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::DeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBGKK@Z
0x180036DA0: "`string'" ??_C@_1BI@NCNKOJEH@?$AAi?$AAr?$AA5?$AA0?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014020: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x180488D40: "struct _RTL_SRWLOCK NS_FaultTolerantHeap::FthFreeTrackerLock" ?FthFreeTrackerLock@NS_FaultTolerantHeap@@3U_RTL_SRWLOCK@@A
0x18003B918: "`string'" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x18002F2F0: "`string'" ??_C@_1LK@IOPAAICA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002FB38: "`string'" ??_C@_0BA@DODLENAI@GetNLSVersionEx?$AA@
0x180005CA0: "int __cdecl NS_EmulateSortingVista::APIHook_FindNLSString(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64)" ?APIHook_FindNLSString@NS_EmulateSortingVista@@YAHKKPEBGH0HPEAH@Z
0x18002DFF0: "`string'" ??_C@_1CO@FMNEEFDD@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180029910: "`string'" ??_C@_0CK@KDJENALF@NS_FaultTolerantHeap?3?3FthPipeWri@
0x180030F58: "`string'" ??_C@_1M@GHFIPEOA@?$AA?$CK?$AA?4?$AAP?$AAA?$AAL?$AA?$AA@
0x180034270: "`string'" ??_C@_0CK@HFEIMBLN@NS_VirtualRegistry?3?3BuildDSSmoot@
0x18002A540: "`string'" ??_C@_1EG@GKIGABNO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAN?$AAL?$AAS?$AAT?$AAE@
0x1800371A8: "`string'" ??_C@_1DM@OJJDEAOF@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAr?$AA5?$AA0?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180036D10: "`string'" ??_C@_1BI@FKPFIBJO@?$AAS?$AAc?$AAa?$AAl?$AAa?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x180030920: "`string'" ??_C@_0DF@NLGOAEBI@NS_VerifyVersionInfoLite?3?3APIHoo@
0x1800489D0: "class NS_VirtualRegistry2::CVirtualRegistry NS_VirtualRegistry2::VRegistry" ?VRegistry@NS_VirtualRegistry2@@3VCVirtualRegistry@1@A
0x180029B80: "`string'" ??_C@_1GI@CAEDIAPP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003A748: "`string'" ??_C@_0CE@JLCBIDPL@Unable?5to?5create?5DirectSound?5app@
0x18000C8E0: "void __cdecl NS_VirtualRegistry::BuildDSReturnWritePos(char const * __ptr64)" ?BuildDSReturnWritePos@NS_VirtualRegistry@@YAXPEBD@Z
0x18003A620: "`string'" ??_C@_1GM@MJHNPFAJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x18002FCF8: "`string'" ??_C@_19NGFMKOON@?$AA?$CF?$AA0?$AA8?$AAX?$AA?$AA@
0x18000F6C0: "void __cdecl NS_VirtualRegistry::BuildNortonAntiVirus(char const * __ptr64)" ?BuildNortonAntiVirus@NS_VirtualRegistry@@YAXPEBD@Z
0x180031530: "`string'" ??_C@_1BK@OBFPBIKP@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAP?$AAa?$AAg?$AAe?$AAI?$AAn?$AAs?$AA?$AA@
0x180046358: "char * __ptr64 __ptr64 NS_VirtualRegistry2::g_szCommandLine" ?g_szCommandLine@NS_VirtualRegistry2@@3PEADEA
0x180014D48: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddProtector(unsigned short const * __ptr64) __ptr64" ?AddProtector@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x180040AAC: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18003BCF8: "`string'" ??_C@_0CN@JAKKKLKB@Failed?5to?5add?5system?5current?5con@
0x18002A3C0: "`string'" ??_C@_1DI@CPIHNKPM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x180028C08: sfc_NULL_THUNK_DATA
0x18003B1F0: "`string'" ??_C@_0P@OBLFGOGE@?5?5?5?5Path?$DN?$CFS?2?$CFS?$AA@
0x180047B80: "unsigned __int64 NS_VistaRTMVersionLie::g_stShimId" ?g_stShimId@NS_VistaRTMVersionLie@@3_KA
0x18003A730: "`string'" ??_C@_0BE@OILCEFAF@Expanded?5Value?$DN?$CFls?6?$AA@
0x18003B298: "`string'" ??_C@_0O@CHFMDJJF@?5?5?5?5Result?$DN?$CFS?$AA@
0x180015A0C: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::DeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long) __ptr64" ?DeleteKeyA@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBDKK@Z
0x18003C9F0: "`string'" ??_C@_0BJ@NJMMKHNH@Patched?5?$CFS?5to?5ignore?5WRP?$AA@
0x18003ABE0: "`string'" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x1800329C8: "`string'" ??_C@_0CA@NFEDIAHJ@NS_VirtualRegistry?3?3BuildDXDiag?$AA@
0x1800287A8: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x18003BD98: "`string'" ??_C@_0BP@MIKJCEIP@Failed?5to?5get?5user?5path?3?5?$CF08x?6?$AA@
0x1800487C8: "int NS_VistaSP2VersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaSP2VersionLie@@3HA
0x18002FA08: "`string'" ??_C@_0P@EDLJBKEM@CompareStringW?$AA@
0x18002CF70: "`string'" ??_C@_1HM@EGCMIEJB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AA3?$AA0?$AA0?$AA1?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0@
0x180028AA8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18003C2B8: "`string'" ??_C@_0CN@BKJMKLAE@NS_VistaRTMVersionLie?3?3APIHook_G@
0x180036D68: "`string'" ??_C@_0CA@HGKILGCI@NS_VirtualRegistry?3?3BuildIndeo4?$AA@
0x18003B3C0: "`string'" ??_C@_0DB@IMGABHBG@NS_VirtualRegistry?3?3CVirtualRegi@
0x18002E360: "`string'" ??_C@_1LO@PGBEFKNM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18001D400: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180022BC0: "unsigned long __cdecl NS_WRPMitigation::APIHook_VerInstallFileW(unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned int * __ptr64)" ?APIHook_VerInstallFileW@NS_WRPMitigation@@YAKKPEBG0000PEAGPEAI@Z
0x18003ADC8: "`string'" ??_C@_0BG@IOPCNDPD@Redirecting?3?5?$CFS?5?9?$DO?5?$CFS?$AA@
0x180006EB0: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_LCMapStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0HPEAGHPEAU_nlsversioninfo@@PEAX_J@Z
0x18002A298: "`string'" ??_C@_0O@MBBDACGE@RegCreateKeyA?$AA@
0x180028B08: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x1800489A0: "struct _RTL_CRITICAL_SECTION NS_VirtualRegistry2::csRegCriticalSection" ?csRegCriticalSection@NS_VirtualRegistry2@@3U_RTL_CRITICAL_SECTION@@A
0x18003BF28: "`string'" ??_C@_0CO@JNDKNNHO@NS_VirtualRegistry2?3?3CVirtualReg@
0x18003C718: "`string'" ??_C@_0CM@GNEDEPCH@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x18002A5F0: "`string'" ??_C@_0O@PBIDEDBP@ManifestCheck?$AA@
0x180021210: "long __cdecl NS_Win8RTMVersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_Win8RTMVersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180014150: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x180037120: "`string'" ??_C@_1IC@MOIKFBBN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002C1E8: "`string'" ??_C@_1BI@KDOCJHPE@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x18002FA78: "`string'" ??_C@_0BD@JKILLKFO@IsNLSDefinedString?$AA@
0x1800041EC: "unsigned long __cdecl NS_VirtualRegistry::GetCentennialAppFolder(class ShimLib::CString & __ptr64,class ShimLib::CString * __ptr64)" ?GetCentennialAppFolder@NS_VirtualRegistry@@YAKAEAVCString@ShimLib@@PEAV23@@Z
0x180030620: "`string'" ??_C@_0BJ@EJIBOADM@Client?5full?5path?3?5?$FL?$CFws?$FN?6?$AA@
0x18003C408: "`string'" ??_C@_0O@JGECDCHJ@RtlGetVersion?$AA@
0x18002F958: "`string'" ??_C@_0CJ@ONEJGGPL@Direct3D8EnableMaximizedWindowed@
0x180028BF0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800095C8: "int __cdecl NS_FaultTolerantHeap::FthInitializeWerEntryPoints(void)" ?FthInitializeWerEntryPoints@NS_FaultTolerantHeap@@YAHXZ
0x18003AE28: "`string'" ??_C@_0DF@GGEKFEKK@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800286A8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800364A0: "`string'" ??_C@_1BCE@CEGKOHPF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18002C330: "`string'" ??_C@_1CK@OPLFJCHM@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AA1?$AA6?$AA?$AA@
0x1800034E5: "__cdecl _imp_load_OpenProcessToken" __imp_load_OpenProcessToken
0x18002F160: "`string'" ??_C@_1LM@FOGNBDJC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180021988: "struct tagHOOKAPI * __ptr64 __cdecl NS_Win81RTMVersionLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Win81RTMVersionLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800487CC: "int NS_VistaSP1VersionLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_VistaSP1VersionLie@@3HA
0x180010EC0: "void __cdecl NS_VirtualRegistry::BuildWinSrv03Lie(char const * __ptr64)" ?BuildWinSrv03Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180039710: "`string'" ??_C@_1IO@HKPOMDCH@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA1?$AA0?$AAE?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0@
0x180028BB8: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x180048D10: "long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnWerReportSetParameter)(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?pfnWerReportSetParameter@NS_FaultTolerantHeap@@3P6AJPEAXKPEBG1@ZEA
0x180029328: "`string'" ??_C@_1CE@LJOHDEFA@?$AAW?$AAi?$AAn?$AA8?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x18002A7A0: "`string'" ??_C@_0BA@GJPNJIAM@RegDeleteValueW?$AA@
0x18000C380: "void __cdecl NS_VirtualRegistry::BuildDSDevAccel(char const * __ptr64)" ?BuildDSDevAccel@NS_VirtualRegistry@@YAXPEBD@Z
0x18003AFE8: "`string'" ??_C@_0CC@LIKBMMID@?$FLOpenKeyW?$FN?5Removing?5volatile?5fla@
0x18002A698: "`string'" ??_C@_0M@CBNKJACB@DeleteFileA?$AA@
0x180004104: "void __cdecl NS_FaultTolerantHeap::FthClientMessage(char * __ptr64,int,char * __ptr64,...)" ?FthClientMessage@NS_FaultTolerantHeap@@YAXPEADH0ZZ
0x180013E50: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x1800487A0: "void * __ptr64 __ptr64 NS_WRPMitigation::g_TISid" ?g_TISid@NS_WRPMitigation@@3PEAXEA
0x180020184: "int __cdecl NS_VistaSP1VersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaSP1VersionLie@@YAHK@Z
0x1800487D4: "int NS_VirtualRegistry2::g_bSubshimUsed" ?g_bSubshimUsed@NS_VirtualRegistry2@@3HA
0x1800301D8: "`string'" ??_C@_0CK@LACFPBJC@NS_FaultTolerantHeap?3?3FthClientI@
0x180031370: "`string'" ??_C@_1BI@EMOAABBH@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAH?$AAi?$AAt?$AAs?$AA?$AA@
0x1800117D0: "void __cdecl NS_VirtualRegistry::BuildiRCPlayer(char const * __ptr64)" ?BuildiRCPlayer@NS_VirtualRegistry@@YAXPEBD@Z
0x180035BB0: "`string'" ??_C@_1O@GJMACMBA@?$AAO?$AAu?$AAt?$AAp?$AAu?$AAt?$AA?$AA@
0x180020820: "int __cdecl NS_VistaSP2VersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaSP2VersionLie@@YAHK@Z
0x1800225A0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x180028B88: "__cdecl _imp_RtlMultiByteToUnicodeN" __imp_RtlMultiByteToUnicodeN
0x18001E500: "long __cdecl NS_VirtualRegistry2::APIHook_RegQueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGPEAGPEAJ@Z
0x180047B40: "unsigned __int64 NS_VerifyVersionInfoLite::g_stShimId" ?g_stShimId@NS_VerifyVersionInfoLite@@3_KA
0x18002EA10: "`string'" ??_C@_1JK@NBELDENO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180028830: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x180035520: "`string'" ??_C@_1GE@EANOJILN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA8?$AA3?$AAB?$AA5?$AA6?$AA1?$AA0?$AA?9?$AAE?$AA0?$AAD?$AAF?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x1800389C0: "`string'" ??_C@_1JG@JFHGNHJB@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x180028968: "__cdecl _imp_EventWrite" __imp_EventWrite
0x18003B800: "`string'" ??_C@_0BB@GLNAEDBD@RegQueryValueExW?$AA@
0x18003C448: "`string'" ??_C@_0CN@MIONHIEM@NS_VistaSP1VersionLie?3?3APIHook_G@
0x180025FC0: "public: virtual void * __ptr64 __cdecl ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@UEAAPEAXI@Z
0x18003B708: "`string'" ??_C@_0BF@MJPLHALC@Adding?5command?5line?3?$AA@
0x180032F88: "`string'" ??_C@_0CC@LLDBFIJB@NS_VirtualRegistry?3?3BuildJoystic@
0x180046350: "char * __ptr64 __ptr64 NS_VistaRTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_VistaRTMVersionLie@@3PEADEA
0x18000BF60: "void __cdecl NS_VirtualRegistry::BuildCurrentConfig(char const * __ptr64)" ?BuildCurrentConfig@NS_VirtualRegistry@@YAXPEBD@Z
0x180048C68: "int NS_EmulateSortingVista::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_EmulateSortingVista@@3HA
0x1800287C8: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x180034B20: "`string'" ??_C@_1JA@KILLPOCI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180036640: "`string'" ??_C@_1EE@MBGFPGA@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg@
0x18000FB60: "void __cdecl NS_VirtualRegistry::BuildPageMaker65(char const * __ptr64)" ?BuildPageMaker65@NS_VirtualRegistry@@YAXPEBD@Z
0x1800343A8: "`string'" ??_C@_0CJ@JDNNINCO@NS_VirtualRegistry?3?3BuildDSDisab@
0x18002F760: "`string'" ??_C@_0CA@LACMFOOE@DXMaximizedWindowedHwndOverride?$AA@
0x180046320: "char * __ptr64 __ptr64 NS_WRPRegDeleteKey::g_szCommandLine" ?g_szCommandLine@NS_WRPRegDeleteKey@@3PEADEA
0x180039B50: "`string'" ??_C@_1EO@MMDALAAP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAE?$AA?5?$AAS?$AAe?$AAt?$AAu?$AAp@
0x18001A798: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::AddValue(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?AddValue@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGKKPEAEK@Z
0x180028BE8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180029968: "`string'" ??_C@_0BP@MJECMHGK@Pipe?5write?5message?5timed?5out?4?6?$AA@
0x1800390B0: "`string'" ??_C@_1EA@CHNJPEMB@?$AAO?$AAL?$AAE?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AA?5?$AAU?$AAD?$AAT?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAV?$AAi?$AAe?$AAw?$AAe?$AAr?$AAs?$AA?$AA@
0x1800083A0: "void __cdecl NS_FaultTolerantHeap::APIHook_exit(unsigned int)" ?APIHook_exit@NS_FaultTolerantHeap@@YAXI@Z
0x180030098: "`string'" ??_C@_0BC@KCCBPNDF@RtlReAllocateHeap?$AA@
0x180027018: "const ShimLib::PathTreePrivate::PathTreeNodeSetFlagsVisitor::`vftable'" ??_7PathTreeNodeSetFlagsVisitor@PathTreePrivate@ShimLib@@6B@
0x18002F798: "`string'" ??_C@_0BE@LOFMGMNA@EmulateSortingVista?$AA@
0x18003D4C0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18002537C: "public: void __cdecl ShimLib::CString::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@CString@ShimLib@@QEAAXPEBGZZ
0x180008310: "unsigned __int64 __cdecl NS_FaultTolerantHeap::APIHook_RtlSizeHeap(void * __ptr64,unsigned long,void * __ptr64)" ?APIHook_RtlSizeHeap@NS_FaultTolerantHeap@@YA_KPEAXK0@Z
0x18002442C: "int __cdecl NS_WRPRegDeleteKey::NotifyFn(unsigned long)" ?NotifyFn@NS_WRPRegDeleteKey@@YAHK@Z
0x18000E2B0: "void __cdecl NS_VirtualRegistry::BuildIE55(char const * __ptr64)" ?BuildIE55@NS_VirtualRegistry@@YAXPEBD@Z
0x18002DE70: "`string'" ??_C@_1IK@IEAOGEJE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x18002A668: "`string'" ??_C@_0M@HGFIGBEM@CopyFileExW?$AA@
0x180031200: "`string'" ??_C@_1O@IHKEHADE@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?$AA@
0x18001CF44: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::SetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x18002B610: "`string'" ??_C@_1EO@OJBIMEJD@?$AA?$HL?$AA7?$AA3?$AAA?$AA4?$AAC?$AA9?$AAC?$AA1?$AA?9?$AAD?$AA6?$AA8?$AAD?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9?$AA8?$AAB?$AAF?$AA?9?$AA0?$AA0?$AAA?$AA0?$AAC?$AA9?$AA0@
0x18003A190: "`string'" ??_C@_19CBKJKLDO@?$AA7?$AA6?$AA0?$AA0?$AA?$AA@
0x180034668: "`string'" ??_C@_19CMMCHKEM@?$AA2?$AA1?$AA6?$AA5?$AA?$AA@
0x1800487EC: "int NS_DXMaximizedWindowedHwndOverride::g_bSubshimUsed" ?g_bSubshimUsed@NS_DXMaximizedWindowedHwndOverride@@3HA
0x18003B248: "`string'" ??_C@_0BL@MJNAFBLI@?$CF08lx?$DNEnumKeyW?$CIdwIndex?$DN?$CFd?$CJ?$AA@
0x18003A038: "`string'" ??_C@_1BC@MNKEGIPF@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAN?$AAT?$AA?$AA@
0x18002B720: "`string'" ??_C@_1BC@FLFHENFP@?$AAl?$AAy?$AAn?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180035758: "`string'" ??_C@_1BG@LAGAEKDI@?$AAm?$AAs?$AAa?$AAc?$AAm?$AA?4?$AAi?$AAa?$AAc?$AA2?$AA?$AA@
0x18003ADB0: "`string'" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x1800204F0: "long __cdecl NS_VistaSP2VersionLie::APIHook_RtlGetVersion(struct _OSVERSIONINFOW * __ptr64)" ?APIHook_RtlGetVersion@NS_VistaSP2VersionLie@@YAJPEAU_OSVERSIONINFOW@@@Z
0x180034678: "`string'" ??_C@_1BO@NCBIALHD@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA3?$AA?$AA@
0x180009FF4: "int __cdecl NS_FaultTolerantHeap::NotifyFn(unsigned long)" ?NotifyFn@NS_FaultTolerantHeap@@YAHK@Z
0x180002A20: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180028788: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180025654: "public: int __cdecl ShimLib::CString::Insert(int,unsigned short) __ptr64" ?Insert@CString@ShimLib@@QEAAHHG@Z
0x180028768: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18003C898: "`string'" ??_C@_0CM@OGDBEJKL@NS_Win81RTMVersionLie?3?3Initializ@
0x180048CF8: "unsigned long (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetFileVersionInfoSizeW)(unsigned short const * __ptr64,unsigned long * __ptr64)" ?pfnGetFileVersionInfoSizeW@NS_FaultTolerantHeap@@3P6AKPEBGPEAK@ZEA
0x180030D20: "`string'" ??_C@_1GK@HMBNIGPC@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe@
0x180034200: "`string'" ??_C@_0DI@LKNPIACA@?$FLDSRETURNWRITEPOSITION?$FN?5Unabled?5@
0x180036C78: "`string'" ??_C@_1CE@HENMFEMD@?$AAM?$AAi?$AAn?$AAV?$AAi?$AAe?$AAw?$AAp?$AAo?$AAr?$AAt?$AAH?$AAe?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180048778: "void * __ptr64 __ptr64 ShimLib::g_hHeapManagerMutex" ?g_hHeapManagerMutex@ShimLib@@3PEAXEA
0x180008F8C: "void __cdecl NS_FaultTolerantHeap::FthExitUserProcess(long)" ?FthExitUserProcess@NS_FaultTolerantHeap@@YAXJ@Z
0x180028720: "__cdecl _imp_ExpandEnvironmentStringsA" __imp_ExpandEnvironmentStringsA
0x180028A50: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18001A2BC: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddEntries(struct NS_VirtualRegistry2::_KeyEntry * __ptr64,unsigned long) __ptr64" ?AddEntries@CVirtualRegistry@NS_VirtualRegistry2@@QEAAKPEAU_KeyEntry@2@K@Z
0x18002DB20: "`string'" ??_C@_1JM@PNCGAJI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1@
0x180025ED8: "public: __cdecl ShimLib::PathTreeNode::~PathTreeNode(void) __ptr64" ??1PathTreeNode@ShimLib@@QEAA@XZ
0x18000E7E0: "void __cdecl NS_VirtualRegistry::BuildInetComm(char const * __ptr64)" ?BuildInetComm@NS_VirtualRegistry@@YAXPEBD@Z
0x180033F78: "`string'" ??_C@_1CA@KEMJKMDF@?$AAE?$AAM?$AAU?$AAL?$AAA?$AAT?$AAE?$AAD?$AAC?$AAA?$AAP?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180034880: "`string'" ??_C@_1CK@FCAMODLL@?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AAO?$AAR?$AA_?$AAI?$AAD?$AAE?$AAN?$AAT?$AAI?$AAF?$AAI?$AAE?$AAR?$AA?$AA@
0x1800300F0: "`string'" ??_C@_0M@PHEMKBEG@RtlWalkHeap?$AA@
0x180014620: "long __cdecl NS_VirtualRegistry::APIHook_RegQueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,long * __ptr64)" ?APIHook_RegQueryValueW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGPEAGPEAJ@Z
0x18003CA98: "`string'" ??_C@_0DH@LKLCOIFK@OpenFile?3?5Patched?5?$CFhs?5to?5open?5wi@
0x180034E90: "`string'" ??_C@_1IC@FEPOIIOB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA4?$AAC?$AAB?$AA6?$AA3?$AAE?$AA6?$AA1?$AA?9?$AAC?$AA6?$AA1?$AA1?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA8@
0x180022A00: "int __cdecl NS_WRPMitigation::APIHook_SetFileSecurityA(char const * __ptr64,unsigned long,void * __ptr64)" ?APIHook_SetFileSecurityA@NS_WRPMitigation@@YAHPEBDKPEAX@Z
0x18002CD00: "`string'" ??_C@_1FE@COAJJAPP@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?4?$AAA?$AAp@
0x180028AF0: "__cdecl _imp_RtlReportException" __imp_RtlReportException
0x180033C98: "`string'" ??_C@_1CI@ONPCCHIE@?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180010A00: "void __cdecl NS_VirtualRegistry::BuildWin2kSp3Lie(char const * __ptr64)" ?BuildWin2kSp3Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180029468: "`string'" ??_C@_1CE@GIPCGGHN@?$AAF?$AAa?$AAu?$AAl?$AAt?$AAT?$AAo?$AAl?$AAe?$AAr?$AAa?$AAn?$AAt?$AAH?$AAe?$AAa?$AAp?$AA?$AA@
0x18002A2E8: "`string'" ??_C@_0P@LIPJIDOO@RegSetValueExW?$AA@
0x18002BFE8: "`string'" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x180032738: "`string'" ??_C@_1CO@DJEJPLLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AA2?$AA0?$AA0?$AA0?$AA?$AA@
0x1800202B0: "unsigned long __cdecl NS_VistaSP2VersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaSP2VersionLie@@YAKXZ
0x18003C140: "`string'" ??_C@_0CA@PPIKMKED@Failed?5calling?5NtQueryKey?5?$CF08x?6?$AA@
0x18002A6E8: "`string'" ??_C@_0M@NIIDHDHA@MoveFileExW?$AA@
0x1800135C0: "long __cdecl NS_VirtualRegistry::APIHook_RegCloseKey(struct HKEY__ * __ptr64)" ?APIHook_RegCloseKey@NS_VirtualRegistry@@YAJPEAUHKEY__@@@Z
0x180028BC0: "__cdecl _imp_NtQueryObject" __imp_NtQueryObject
0x180015398: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckRedirect(unsigned short * __ptr64 * __ptr64) __ptr64" ?CheckRedirect@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEAPEAG@Z
0x18003A260: "`string'" ??_C@_1HA@LFPHNBKE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAN?$AAE?$AAT?$AA?5?$AAF?$AAr?$AAa?$AAm@
0x18003AF78: "`string'" ??_C@_0DK@JAHMIPLI@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003AAB8: "`string'" ??_C@_1CE@NMBJJGCH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x1800254EC: "protected: static void __cdecl ShimLib::CString::FreeData(class ShimLib::CStringData<unsigned short> * __ptr64)" ?FreeData@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x180489C18: "short NS_Win8RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win8RTMVersionLie@@3FA
0x18002F898: "`string'" ??_C@_0BD@CBLNMCLO@WsExCompositedShim?$AA@
0x180028800: "__cdecl _imp_GetLocaleInfoEx" __imp_GetLocaleInfoEx
0x18002A2F8: "`string'" ??_C@_0N@BIHOHIDB@RegSetValueA?$AA@
0x180034648: "`string'" ??_C@_1BO@GKKEGMBG@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA2?$AA?$AA@
0x1800383D0: "`string'" ??_C@_1IO@NHNBLOFE@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA9?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180048C54: "int NS_VirtualRegistry::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VirtualRegistry@@3HA
0x180013BB0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long)" ?APIHook_RegEnumKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADK@Z
0x180048CF0: "int (__cdecl* __ptr64 NS_FaultTolerantHeap::pfnGetFileVersionInfoW)(unsigned short const * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?pfnGetFileVersionInfoW@NS_FaultTolerantHeap@@3P6AHPEBGKKPEAX@ZEA
0x180036E90: "`string'" ??_C@_1EO@DJPMIHN@?$AA?$HL?$AA1?$AAF?$AA7?$AA3?$AAE?$AA9?$AAB?$AA1?$AA?9?$AA8?$AAC?$AA3?$AAA?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA?$AA3?$AAB?$AAE?$AA?9?$AA0?$AA0?$AAA?$AA0?$AAC?$AA9?$AA2@
0x180039C90: "`string'" ??_C@_1FA@JEEHIBG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x18002FDE8: "`string'" ??_C@_1CC@PJFKMFOK@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180002A20: "public: __cdecl ShimLib::CString::CStringError::~CStringError(void) __ptr64" ??1CStringError@CString@ShimLib@@QEAA@XZ
0x180028688: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000AF80: "void __cdecl NS_VirtualRegistry::BuildArm64WOW(char const * __ptr64)" ?BuildArm64WOW@NS_VirtualRegistry@@YAXPEBD@Z
0x1800345A8: "`string'" ??_C@_1BK@LNFEFIJC@?$AAA?$AAp?$AAp?$AAI?$AAn?$AAi?$AAt?$AA_?$AAD?$AAL?$AAL?$AAs?$AA?$AA@
0x180035880: "`string'" ??_C@_1BE@MFHLEMFM@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA3?$AA1?$AA?$AA@
0x18000DD30: "void __cdecl NS_VirtualRegistry::BuildFileNetWebServer(char const * __ptr64)" ?BuildFileNetWebServer@NS_VirtualRegistry@@YAXPEBD@Z
0x180017B3C: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::NullTerminateRegSz(void * __ptr64,unsigned long * __ptr64,unsigned long,int,int) __ptr64" ?NullTerminateRegSz@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEAXPEAKKHH@Z
0x18001A648: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddSingleEntry(struct NS_VirtualRegistry2::_KeyEntry * __ptr64) __ptr64" ?AddSingleEntry@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAU_KeyEntry@2@@Z
0x18001C550: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualValue::Initialize(unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long) __ptr64" ?Initialize@CVirtualValue@NS_VirtualRegistry2@@QEAAKPEBGKPEAEKK@Z
0x180005DC0: "int __cdecl NS_EmulateSortingVista::APIHook_IsNLSDefinedString(unsigned long,unsigned long,struct _nlsversioninfo * __ptr64,unsigned short const * __ptr64,int)" ?APIHook_IsNLSDefinedString@NS_EmulateSortingVista@@YAHKKPEAU_nlsversioninfo@@PEBGH@Z
0x180031428: "`string'" ??_C@_1BO@EDFFPKLI@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAB?$AAR?$AAe?$AAa?$AAd?$AAs?$AAS?$AAe?$AAc?$AA?$AA@
0x18003BC70: "`string'" ??_C@_1FA@KLIKPOJN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180032568: "`string'" ??_C@_0CN@MBINAGEP@Failed?5to?5add?5Network?5card?5regis@
0x180005DD0: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringA(unsigned long,unsigned long,char const * __ptr64,int,char * __ptr64,int)" ?APIHook_LCMapStringA@NS_EmulateSortingVista@@YAHKKPEBDHPEADH@Z
0x18002A648: "`string'" ??_C@_09LILHBHJJ@CopyFileW?$AA@
0x1800308B0: "`string'" ??_C@_0DE@INCINDFG@Failed?5to?5map?5a?5view?5of?5the?5Wats@
0x18003D3A0: "`string'" ??_C@_0CB@PCBBAOCC@ShimLib?3?3AcquireHeapManagerMutex@
0x180014F6C: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::AddValue(unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?AddValue@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBGKPEAEK@Z
0x1800317E0: "`string'" ??_C@_1DA@DPEKDOFI@?$AAH?$AAK?$AAD?$AAD?$AA?2?$AAP?$AAe?$AAr?$AAf?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?2?$AAS?$AAt?$AAo?$AAp?$AAS?$AAt?$AAa?$AAt?$AA?$AA@
0x18002FA68: "`string'" ??_C@_0O@HDAMCPNB@FindNLSString?$AA@
0x180022E7C: "long __cdecl NS_WRPMitigation::GetKeyPath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?GetKeyPath@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBGPEAU_UNICODE_STRING@@@Z
0x1800257EC: "protected: void __cdecl ShimLib::CString::Release(void) __ptr64" ?Release@CString@ShimLib@@IEAAXXZ
0x180034900: "`string'" ??_C@_1GC@BNBDIEOL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAu?$AAt?$AAl?$AAo?$AAo?$AAk?$AA?5@
0x180035388: "`string'" ??_C@_1DM@DLIAFDBE@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAa?$AAc?$AA2?$AA5?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x18003A4E0: "`string'" ??_C@_1IM@HMOGIDLM@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs@
0x180039150: "`string'" ??_C@_1FK@BFFFGKLO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA5?$AA7?$AAE?$AAF?$AAB?$AAF?$AA4?$AA9?$AA?9?$AA4?$AAA?$AA8?$AAB?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8?$AA7?$AA0?$AAB?$AA?9?$AA0@
0x180048C40: "int NS_VistaRTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VistaRTMVersionLie@@3HA
0x18003C7A8: "`string'" ??_C@_0CL@MBKCOKCJ@NS_Win8RTMVersionLie?3?3Initialize@
0x18002E970: "`string'" ??_C@_1JM@NFILOFP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x180035B60: "`string'" ??_C@_1BI@ODALFPNB@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAM?$AAa?$AAn?$AAy?$AA?$AA@
0x180033C88: "`string'" ??_C@_1M@NEPFDHKI@?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$AA@
0x1800408E4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x180022A70: "int __cdecl NS_WRPMitigation::APIHook_SetFileSecurityW(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?APIHook_SetFileSecurityW@NS_WRPMitigation@@YAHPEBGKPEAX@Z
0x18001FC30: "unsigned long __cdecl NS_VistaSP1VersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_VistaSP1VersionLie@@YAKXZ
0x1800346F0: "`string'" ??_C@_1HA@OPICBAEL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAs?$AAe@
0x180028B28: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18002E4E0: "`string'" ??_C@_1MO@BLMFFEIO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x1800368D0: "`string'" ??_C@_1EE@CCCHLHAB@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAc?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAy?$AA?5?$AAP?$AAa?$AAg@
0x180006FF8: "int __cdecl NS_EmulateSortingWindows61::GetNLSVersionHelper(unsigned long,struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64,struct _nlsversioninfoex * __ptr64)" ?GetNLSVersionHelper@NS_EmulateSortingWindows61@@YAHKPEAUloc_hash_s@1@PEAU_nlsversioninfoex@@@Z
0x180039F50: "`string'" ??_C@_1EC@HHLFILGI@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AA3?$AAD@
0x180028AA0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18002F7F8: "`string'" ??_C@_0BD@ILAAHKJJ@VistaRTMVersionLie?$AA@
0x180031210: "`string'" ??_C@_1O@CPNLOKIN@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?$AA@
0x1800345C8: "`string'" ??_C@_1CG@HMPMFHA@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAB?$AAu?$AAi?$AAl?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180023990: "int __cdecl NS_WRPMitigation::MySfpIsKeyProtectedA(struct HKEY__ * __ptr64,char const * __ptr64)" ?MySfpIsKeyProtectedA@NS_WRPMitigation@@YAHPEAUHKEY__@@PEBD@Z
0x180036120: "`string'" ??_C@_1GE@MMGGLLBC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180010EF0: "void __cdecl NS_VirtualRegistry::BuildWinSrv03Sp1Lie(char const * __ptr64)" ?BuildWinSrv03Sp1Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x180029418: "`string'" ??_C@_1CA@LPINNANF@?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?$AA@
0x180029438: "`string'" ??_C@_1CM@PEDBICPM@?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAL?$AAi?$AAt?$AAe?$AA?$AA@
0x18002E2A0: "`string'" ??_C@_1LK@BJPCACAK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180029E60: "`string'" ??_C@_1FA@EKDDNLAA@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa@
0x180036090: "`string'" ??_C@_1IC@DOEMLAJM@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA8?$AA7?$AAC?$AAA?$AA6?$AAF?$AA0?$AA4?$AA?9?$AA4?$AA9?$AAE?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x18003D300: "`string'" ??_C@_1DE@HLPNMBB@?$AAA?$AAP?$AAP?$AAC?$AAO?$AAM?$AAP?$AAA?$AAT?$AA_?$AAH?$AAE?$AAA?$AAP?$AA_?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAR?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x180028BF8: ntdll_NULL_THUNK_DATA
0x180048770: "void * __ptr64 __ptr64 ShimLib::g_hHeapTweakerMutex" ?g_hHeapTweakerMutex@ShimLib@@3PEAXEA
0x18000A278: "void __cdecl NS_FaultTolerantHeap::FthClientError(char * __ptr64,int,char * __ptr64,...)" ?FthClientError@NS_FaultTolerantHeap@@YAXPEADH0ZZ
0x1800289E0: "__cdecl _imp_memcpy" __imp_memcpy
0x180033328: "`string'" ??_C@_1M@MNENLOKP@?$AAS?$AA?9?$AA?$CF?$AAu?$AA?9?$AA?$AA@
0x1800289D0: "__cdecl _imp_SE_GetShimId" __imp_SE_GetShimId
0x180028988: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18003CAD0: "`string'" ??_C@_0CD@FFHFLKBN@NS_WRPMitigation?3?3APIHook_OpenFi@
0x18002FE68: "`string'" ??_C@_1CM@FPOJLEHG@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?5?$AAM?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x18002E5B0: "`string'" ??_C@_1LG@DKBLOBFE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180030640: "`string'" ??_C@_0DE@OCEAAONG@Client?5failed?5to?5write?5?8ping?8?5me@
0x18003AAE0: "`string'" ??_C@_0CG@BAGLNAAI@?$FLTrimSlashW?$FN?5Bypass?5?2Registry?2Ma@
0x180039EB0: "`string'" ??_C@_1EM@FMLJMGCI@?$AA?$CF?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAw?$AAa?$AAb?$AA3@
0x18001CED0: "private: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::QueryValueWorker(class NS_VirtualRegistry2::CVirtualValue const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?QueryValueWorker@CVirtualRegistry@NS_VirtualRegistry2@@AEAAJPEBVCVirtualValue@2@PEAKPEAE1@Z
0x18002FE10: "`string'" ??_C@_1CI@LNNENDBB@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18002F9C8: "`string'" ??_C@_0CN@KALOIIPD@NS_EmulateSortingVista?3?3Initiali@
0x18003C868: "`string'" ??_C@_0CN@FPCDIGKM@NS_Win81RTMVersionLie?3?3APIHook_R@
0x18002F888: "`string'" ??_C@_0BA@GFMCBGDJ@WRPRegDeleteKey?$AA@
0x180023428: "int __cdecl NS_WRPMitigation::IsWrpFileDescriptor(void * __ptr64)" ?IsWrpFileDescriptor@NS_WRPMitigation@@YAHPEAX@Z
0x180023C60: "long __cdecl NS_WRPRegDeleteKey::APIHook_RegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteKeyA@NS_WRPRegDeleteKey@@YAJPEAUHKEY__@@PEBD@Z
0x180033130: "`string'" ??_C@_1GE@CMPBELBG@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAa?$AAe?$AAr?$AAe?$AA?5?$AAC?$AAo?$AAr?$AAp?$AA?2?$AAP?$AAa?$AAg?$AAe?$AAK?$AAe?$AAe@
0x18001786C: "unsigned short * __ptr64 __cdecl NS_VirtualRegistry::MakePath(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?MakePath@NS_VirtualRegistry@@YAPEAGPEAUHKEY__@@PEBG1@Z
0x18003C778: "`string'" ??_C@_0CM@FMLCPHAD@NS_Win8RTMVersionLie?3?3APIHook_Rt@
0x18003A6C8: "`string'" ??_C@_0CB@LGFJNLCL@Failed?5to?5query?5?$CFS?5for?5expansion@
0x180025444: "public: void __cdecl ShimLib::CString::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CString@ShimLib@@QEAAXPEBGPEAD@Z
0x18001B8BC: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAUHKEY__@@PEBGPEAPEAVCVirtualKey@2@PEAPEAG@Z
0x1800300D0: "`string'" ??_C@_0O@EKNIFGJP@RtlCreateHeap?$AA@
0x180029C70: "`string'" ??_C@_1CO@DOPIGBGK@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AA?$CF?$AAs?$AA?2?$AAC?$AAO?$AAM?$AAM?$AAO?$AAN?$AA?2?$AAG?$AAE?$AAN?$AAE?$AAR?$AAA?$AAL?$AA?$AA@
0x18003A710: "`string'" ??_C@_0BM@NJCACIDE@Expander?3?5Not?5a?5string?5type?$AA@
0x18000F740: "void __cdecl NS_VirtualRegistry::BuildOleViewRedirect(char const * __ptr64)" ?BuildOleViewRedirect@NS_VirtualRegistry@@YAXPEBD@Z
0x180006B30: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringA(unsigned long,unsigned long,char const * __ptr64,int,char * __ptr64,int)" ?APIHook_LCMapStringA@NS_EmulateSortingWindows61@@YAHKKPEBDHPEADH@Z
0x180042040: AE_LOG_Context
0x1800312C8: "`string'" ??_C@_1CC@HPJLHPOO@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAc?$AAC?$AAu?$AAr?$AAP?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180028990: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18002FF10: "`string'" ??_C@_0BN@KADHPBHB@FTH?5SQM?3?5process?5name?3?5?$CFws?5?6?$AA@
0x18001C65C: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::OpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenKeyExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKKPEAPEAU3@@Z
0x18003AA40: "`string'" ??_C@_1BO@MJAIDJFG@?$AA?$CF?$AAs?$AA?$CF?$AA8?$AA?4?$AA8?$AAl?$AAX?$AA?$CF?$AA8?$AA?4?$AA8?$AAl?$AAX?$AA?$AA@
0x180033FF8: "`string'" ??_C@_0CN@JFMGEIBC@?$FLDSDEVACCEL?$FN?5Unabled?5to?5add?5Dire@
0x18002CA40: "`string'" ??_C@_1LK@EIKFLEOJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18048C010: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x1800319D0: "`string'" ??_C@_1BC@DDGHMECK@?$AA?$CF?$AAs?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?$AA@
0x180031698: "`string'" ??_C@_1BK@DPFEJKNK@?$AAV?$AAM?$AAM?$AA?2?$AAc?$AAp?$AAg?$AAO?$AAt?$AAh?$AAe?$AAr?$AA?$AA@
0x1800253A0: "public: void __cdecl ShimLib::CString::FormatV(char const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CString@ShimLib@@QEAAXPEBDPEAD@Z
0x180032770: "`string'" ??_C@_1CK@DGODOGPM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAX?$AAP?$AA?$AA@
0x180042008: "__vectorcall ??_R0?AVCStringError@CString@ShimLib@" ??_R0?AVCStringError@CString@ShimLib@@@8
0x180048BD8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WsExCompositedShim::g_pAPIHooks" ?g_pAPIHooks@NS_WsExCompositedShim@@3PEAUtagHOOKAPI@@EA
0x1800169F0: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::FixRegGetValue(unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64,long,unsigned long,unsigned long,int) __ptr64" ?FixRegGetValue@CVirtualRegistry@NS_VirtualRegistry@@AEAAJKPEAKPEAE0JKKH@Z
0x180021050: "int __cdecl NS_Win8RTMVersionLie::APIHook_GetVersionExA(struct _OSVERSIONINFOA * __ptr64)" ?APIHook_GetVersionExA@NS_Win8RTMVersionLie@@YAHPEAU_OSVERSIONINFOA@@@Z
0x180022520: "int __cdecl NS_WRPMitigation::APIHook_PrivCopyFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_PrivCopyFileExW@NS_WRPMitigation@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x1800252EC: "public: int __cdecl ShimLib::CString::FindOneNotOf(unsigned short const * __ptr64,int)const __ptr64" ?FindOneNotOf@CString@ShimLib@@QEBAHPEBGH@Z
0x180489BA8: "unsigned short * __ptr64 __ptr64 NS_VistaRTMVersionLie::pwszServicePack" ?pwszServicePack@NS_VistaRTMVersionLie@@3PEAGEA
0x180038020: "`string'" ??_C@_1GM@NGIGBPFA@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180032C30: "`string'" ??_C@_1O@KNIGNIDC@?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x1800342A0: "`string'" ??_C@_0DD@EFKCKALH@?$FLDSSMOOTHWRITEPOS?$FN?5Unabled?5to?5ad@
0x180029830: "`string'" ??_C@_0CN@OIGBPDEH@Pipe?5?$CB?$DN?5NULL?5?$CG?$CG?5Pipe?5?$CB?$DN?5INVALID_@
0x18003B2C8: "`string'" ??_C@_0DB@KDKLFLFP@NS_VirtualRegistry?3?3CVirtualRegi@
0x180035B78: "`string'" ??_C@_1BI@KDFFABBJ@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAZ?$AAe?$AAr?$AAo?$AA?$AA@
0x1800289F8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180048BC4: "int NS_VerifyVersionInfoLite::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_VerifyVersionInfoLite@@3HA
0x180036CF0: "`string'" ??_C@_1BM@KPHFMHBB@?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x18003D370: "`string'" ??_C@_02JBFCHHJF@?$CI?$CC?$AA@
0x18002A6A8: "`string'" ??_C@_0M@DNECCFPG@DeleteFileW?$AA@
0x1800329E8: "`string'" ??_C@_1BI@JFLMNPMO@?$AA?2?$AAd?$AAx?$AAd?$AAi?$AAa?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180028B00: "__cdecl _imp_RtlRaiseException" __imp_RtlRaiseException
0x180030E98: "`string'" ??_C@_0CP@IAFMNLGD@?$FLHasbro?5hack?$FN?5Failed?5to?5query?5?$CFS@
0x180047AF8: "__cdecl _security_cookie" __security_cookie
0x180010B50: "void __cdecl NS_VirtualRegistry::BuildWin8RTMLie(char const * __ptr64)" ?BuildWin8RTMLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180015784: "private: long __cdecl NS_VirtualRegistry::CVirtualRegistry::CreateHKCUClassesKey(unsigned short const * __ptr64,int) __ptr64" ?CreateHKCUClassesKey@CVirtualRegistry@NS_VirtualRegistry@@AEAAJPEBGH@Z
0x180032C40: "`string'" ??_C@_1EA@EEINIPPF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x180030810: "`string'" ??_C@_0DB@GNEAMFKH@Client?9?$DOWatson?5?$DN?$DN?5?$CG?$CIClient?9?$DOWats@
0x180008C1C: "void __cdecl NS_FaultTolerantHeap::FthDelayFreeQueueFlush(void * __ptr64,int)" ?FthDelayFreeQueueFlush@NS_FaultTolerantHeap@@YAXPEAXH@Z
0x1800252BC: "public: int __cdecl ShimLib::CString::FindLastPathComponent(void)const __ptr64" ?FindLastPathComponent@CString@ShimLib@@QEBAHXZ
0x180028958: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800334D0: "`string'" ??_C@_1BC@FOGOLNOF@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA8?$AA?$AA@
0x180033A98: "`string'" ??_C@_1CK@HPIEIGMI@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAi?$AAr?$AAc?$AA?$AA@
0x18002BA90: "`string'" ??_C@_1BI@INKPHAML@?$AAw?$AAi?$AAn?$AAw?$AAo?$AAr?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18001A58C: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddKeyValues(class NS_VirtualRegistry2::CVirtualKey * __ptr64,struct NS_VirtualRegistry2::_KeyEntry * __ptr64) __ptr64" ?AddKeyValues@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAU_KeyEntry@2@@Z
0x1800109D0: "void __cdecl NS_VirtualRegistry::BuildWin2kSp2Lie(char const * __ptr64)" ?BuildWin2kSp2Lie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B168: "`string'" ??_C@_0DC@DDJJNOID@NS_VirtualRegistry?3?3CVirtualRegi@
0x180004800: "__cdecl alloca_probe" _alloca_probe
0x180031848: "`string'" ??_C@_1BK@EGIPGMKA@?$AAB?$AAi?$AAt?$AAs?$AAP?$AAe?$AAr?$AAP?$AAi?$AAx?$AAe?$AAl?$AA?$AA@
0x18003BEE0: "`string'" ??_C@_0CM@POBPGGGA@Failed?5to?5duplicate?5the?5redirect@
0x18002160C: "void __cdecl NS_Win8RTMVersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_Win8RTMVersionLie@@YAXXZ
0x180039E98: "`string'" ??_C@_1BI@KGBEBBME@?$AAT?$AAh?$AAe?$AAm?$AAe?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x1800289B8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18003B720: "`string'" ??_C@_0DA@DHJMNPLL@Failed?5to?5copy?5command?5line?5para@
0x18002FAE8: "`string'" ??_C@_0BH@IIACOBBB@GetNamedLocaleHashNode?$AA@
0x18003B858: "`string'" ??_C@_0O@BKCMGKED@RegEnumValueA?$AA@
0x180012B10: StringCbPrintfW
0x180048C70: "struct tagHOOKAPI * __ptr64 __ptr64 NS_EmulateSortingVista::g_pAPIHooks" ?g_pAPIHooks@NS_EmulateSortingVista@@3PEAUtagHOOKAPI@@EA
0x180048CC0: "unsigned long NS_FaultTolerantHeap::FthDelayFreeQueueTrims" ?FthDelayFreeQueueTrims@NS_FaultTolerantHeap@@3KA
0x1800344E0: "`string'" ??_C@_1BO@KHAANNCG@?$AAB?$AAo?$AAr?$AAl?$AAa?$AAn?$AAd?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA1?$AA?$AA@
0x180022AE0: "unsigned long __cdecl NS_WRPMitigation::APIHook_VerInstallFileA(unsigned long,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char * __ptr64,unsigned int * __ptr64)" ?APIHook_VerInstallFileA@NS_WRPMitigation@@YAKKPEBD0000PEADPEAI@Z
0x180003B18: "int __cdecl NS_FaultTolerantHeap::FthClientAttemptConnection(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthClientAttemptConnection@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x18002F780: "`string'" ??_C@_0BI@BNBADJHG@DXMaximizedWindowedMode?$AA@
0x180020248: "void __cdecl NS_VistaSP1VersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaSP1VersionLie@@YAXXZ
0x18003D210: "`string'" ??_C@_1CK@IOBGOMLN@?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x180038758: "`string'" ??_C@_1CI@DIIPOEKG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?$AA@
0x1800287D8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180029208: "`string'" ??_C@_07HGHLCFFA@ShimLib?$AA@
0x18003B888: "`string'" ??_C@_0M@JAINDJJM@RegEnumKeyW?$AA@
0x18003B610: "`string'" ??_C@_0CG@BABOMAGP@?$FLRegDeleteKeyExW?$FN?5Deleting?5subke@
0x18003CBFC: "`string'" ??_C@_01KICIPPFI@?2?$AA@
0x18003B410: "`string'" ??_C@_0DA@NEPNIBG@NS_VirtualRegistry?3?3CVirtualRegi@
0x180028750: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180008390: "long __cdecl NS_FaultTolerantHeap::APIHook_RtlWalkHeap(void * __ptr64,struct _RTL_HEAP_WALK_ENTRY * __ptr64)" ?APIHook_RtlWalkHeap@NS_FaultTolerantHeap@@YAJPEAXPEAU_RTL_HEAP_WALK_ENTRY@@@Z
0x18002E8B0: "`string'" ??_C@_1DI@IGBEEGLB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180028918: WINSPOOL_NULL_THUNK_DATA
0x180048C58: "int NS_FaultTolerantHeap::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_FaultTolerantHeap@@3HA
0x18000FB90: "void __cdecl NS_VirtualRegistry::BuildPagingFiles(char const * __ptr64)" ?BuildPagingFiles@NS_VirtualRegistry@@YAXPEBD@Z
0x18003B070: "`string'" ??_C@_0CG@PFFLJKAM@Couldn?8t?5create?5dummy?5key?5in?5Ope@
0x180029940: "`string'" ??_C@_0CG@HKMFDBIF@Failed?5to?5write?5message?5to?5the?5p@
0x180038AE0: "`string'" ??_C@_1JG@HKCHJBEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb@
0x180031F40: "`string'" ??_C@_1GE@KFMGDOHL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x1800387A0: "`string'" ??_C@_0CA@GPLDIHGJ@NS_VirtualRegistry?3?3BuildIndeo5?$AA@
0x180028850: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1800287B0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18003AEB8: "`string'" ??_C@_1M@LDJANICB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AA?$AA@
0x180028998: "__cdecl _imp_CopySid" __imp_CopySid
0x18000A7D0: "void __cdecl NS_FaultTolerantHeap::FthpClientInitializeWatsonView(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthpClientInitializeWatsonView@NS_FaultTolerantHeap@@YAXPEAU__FTH_CLIENT@1@@Z
0x180038C90: "`string'" ??_C@_1GM@JNDFHIPL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAM?$AAI?$AAM?$AAE?$AA?2?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?2@
0x18002FA28: "`string'" ??_C@_0O@KKBNKAPF@LCMapStringEx?$AA@
0x18000E4A0: "void __cdecl NS_VirtualRegistry::BuildITunesRedirectHKCR(char const * __ptr64)" ?BuildITunesRedirectHKCR@NS_VirtualRegistry@@YAXPEBD@Z
0x180028BD8: "__cdecl _imp_RtlGetLastNtStatus" __imp_RtlGetLastNtStatus
0x180003A64: "void __cdecl NS_FaultTolerantHeap::FthClientAssert(char * __ptr64,int,char * __ptr64)" ?FthClientAssert@NS_FaultTolerantHeap@@YAXPEADH0@Z
0x180025F90: "public: void * __ptr64 __cdecl ShimLib::PathTreeNode::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPathTreeNode@ShimLib@@QEAAPEAXI@Z
0x1800028B0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKKPEBEK@Z
0x1800029D0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegDeleteValueA(struct HKEY__ * __ptr64,char const * __ptr64)" ?APIHook_RegDeleteValueA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBD@Z
0x1800205C4: "int __cdecl NS_VistaSP1VersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaSP1VersionLie@@YAHPEBGZZ
0x18003A0F8: "`string'" ??_C@_15MKKAKNPH@?$AAI?$AAE?$AA?$AA@
0x180048510: "__cdecl _onexitbegin" __onexitbegin
0x1800358E8: "`string'" ??_C@_0CA@DJOJCAOP@NS_VirtualRegistry?3?3BuildIndeo3?$AA@
0x18000CAE0: "void __cdecl NS_VirtualRegistry::BuildDSSmoothWritePos(char const * __ptr64)" ?BuildDSSmoothWritePos@NS_VirtualRegistry@@YAXPEBD@Z
0x180003460: "__cdecl _imp_load_OpenThreadToken" __imp_load_OpenThreadToken
0x18003BC50: "`string'" ??_C@_1CA@DOEFBOAB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?$AA@
0x18002ED60: "`string'" ??_C@_1JI@FOKKLOEI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18003B5B8: "`string'" ??_C@_0CK@OOIEIJFK@?$FLDeleteKeyW?$FN?5No?5more?5subkey?5unde@
0x180030880: "`string'" ??_C@_0CJ@CAPDMCEO@Failed?5to?5create?5Watson?5section?5@
0x18000FEA0: "void __cdecl NS_VirtualRegistry::BuildPrinter(char const * __ptr64)" ?BuildPrinter@NS_VirtualRegistry@@YAXPEBD@Z
0x1800339B0: "`string'" ??_C@_0CN@PGBBBPCN@?$FLMiddle?5School?5Advantage?52001?$FN?5?5@
0x18002B530: "`string'" ??_C@_15FEFLCNCJ@?$AA1?$AA6?$AA?$AA@
0x18003C568: "`string'" ??_C@_0CK@FLFDCCBM@NS_VistaSP2VersionLie?3?3APIHook_G@
0x18003D2A0: "`string'" ??_C@_0CM@CNJDONIE@NS_WsExCompositedShim?3?3Initializ@
0x1800151AC: "private: unsigned short * __ptr64 __cdecl NS_VirtualRegistry::CVirtualRegistry::AllocateHKCUClassesKeyName(unsigned short const * __ptr64) __ptr64" ?AllocateHKCUClassesKeyName@CVirtualRegistry@NS_VirtualRegistry@@AEAAPEAGPEBG@Z
0x18003A9B8: "`string'" ??_C@_0CD@DGJCMJKH@Cannot?5create?5virtual?5registry?5k@
0x180035A10: "`string'" ??_C@_1IC@JCANAMHP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180028A18: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000CD80: "void __cdecl NS_VirtualRegistry::BuildDynData(char const * __ptr64)" ?BuildDynData@NS_VirtualRegistry@@YAXPEBD@Z
0x18000B0D0: "void __cdecl NS_VirtualRegistry::BuildBogusCtrlID(char const * __ptr64)" ?BuildBogusCtrlID@NS_VirtualRegistry@@YAXPEBD@Z
0x1800312B0: "`string'" ??_C@_1BG@JGIJDIJB@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA?2?$AAV?$AAM?$AAs?$AA?$AA@
0x18003B7A0: "`string'" ??_C@_0BH@KFNIPFHH@RegOpenUserClassesRoot?$AA@
0x180029A60: "`string'" ??_C@_1EK@KKBFPOGC@?$AA?$CF?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs@
0x180021D20: "int __cdecl NS_WRPMitigation::APIHook_AccessCheck(void * __ptr64,void * __ptr64,unsigned long,struct _GENERIC_MAPPING * __ptr64,struct _PRIVILEGE_SET * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?APIHook_AccessCheck@NS_WRPMitigation@@YAHPEAX0KPEAU_GENERIC_MAPPING@@PEAU_PRIVILEGE_SET@@PEAK3PEAH@Z
0x1800288F8: "__cdecl _imp_EnumDisplaySettingsW" __imp_EnumDisplaySettingsW
0x18000A8B0: "int __cdecl NS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoA(struct _OSVERSIONINFOEXA * __ptr64,unsigned long,unsigned __int64)" ?APIHook_VerifyVersionInfoA@NS_VerifyVersionInfoLite@@YAHPEAU_OSVERSIONINFOEXA@@K_K@Z
0x1800286B8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18003B488: "`string'" ??_C@_0CA@ICGKKOMC@Exception?5occurred?5in?5SetValueW?$AA@
0x180028838: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180002A60: "void __cdecl NS_VirtualRegistry::BuildDisableWin9xMode(char const * __ptr64)" ?BuildDisableWin9xMode@NS_VirtualRegistry@@YAXPEBD@Z
0x180036068: "`string'" ??_C@_1BM@KAMJNPCI@?$AAI?$AAV?$AAI?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x18002A770: "`string'" ??_C@_0BA@IKMKGJBE@VerInstallFileA?$AA@
0x18002F6C0: Microsoft_Windows_Application_ExperienceLevels
0x180037E30: "`string'" ??_C@_1IC@HAIJLJDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAC?$AA1?$AAC?$AA0?$AAF?$AAE?$AA0?$AA0?$AA?9?$AAF?$AA3?$AAC?$AA2?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180005960: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringA(unsigned long,unsigned long,char const * __ptr64,int,char const * __ptr64,int)" ?APIHook_CompareStringA@NS_EmulateSortingVista@@YAHKKPEBDH0H@Z
0x18002E190: "`string'" ??_C@_1GG@NEICBBIB@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt@
0x180028928: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x180040AD4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180489C00: "short NS_Win7RTMVersionLie::SpMinorVersion" ?SpMinorVersion@NS_Win7RTMVersionLie@@3FA
0x18002F0A0: "`string'" ??_C@_1LO@PEJOIEBL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002F840: "`string'" ??_C@_0BC@EMHKEHN@Win7RTMVersionLie?$AA@
0x1800152D0: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::CheckProtected(unsigned short const * __ptr64) __ptr64" ?CheckProtected@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEBG@Z
0x180035A98: "`string'" ??_C@_1DK@ONIHBADA@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAr?$AA4?$AA1?$AA_?$AA3?$AA2?$AA?4?$AAa?$AAx?$AA?$AA@
0x18002BDA0: "`string'" ??_C@_1JM@HPJCNGDD@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180028930: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180011710: "void __cdecl NS_VirtualRegistry::BuildXpLie(char const * __ptr64)" ?BuildXpLie@NS_VirtualRegistry@@YAXPEBD@Z
0x180033D20: "`string'" ??_C@_0GB@MBEMCOFE@?$FLAirline?5Tycoon?$FNAdded?5drive?5lett@
0x180033C30: "`string'" ??_C@_1EE@GGMCIGML@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?2?$AA0?$AA0?$AA0?$AA1?$AA?2?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AA?2?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg@
0x180003380: "__cdecl _security_init_cookie" __security_init_cookie
0x180048C48: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VistaRTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_VistaRTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x18002B5A0: "`string'" ??_C@_1O@PLNJEPPG@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x18003CD18: "`string'" ??_C@_0CI@LCDKHFDA@NS_WRPMitigation?3?3APIHook_RegCre@
0x180013DB0: "long __cdecl NS_VirtualRegistry::APIHook_RegEnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?APIHook_RegEnumValueA@NS_VirtualRegistry@@YAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x180038090: "`string'" ??_C@_1BO@INJIMAAA@?$AAI?$AAI?$AAn?$AAd?$AAe?$AAo?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AAO?$AAA?$AA?$AA@
0x180033228: "`string'" ??_C@_0CO@FKNMMHN@NS_VirtualRegistry?3?3BuildPageKee@
0x18003D148: "`string'" ??_C@_0CK@BGHKLMAB@RLCHECK?3?5ActCtx?5Query?5failed?5wit@
0x180024D88: "protected: void __cdecl ShimLib::CString::AllocCopy(class ShimLib::CString & __ptr64,int,int,int)const __ptr64" ?AllocCopy@CString@ShimLib@@IEBAXAEAV12@HHH@Z
0x180033F98: "`string'" ??_C@_1BE@COMGHKOG@?$AAK?$AAS?$AAC?$AAA?$AAP?$AAT?$AAU?$AAR?$AAE?$AA?$AA@
0x180038838: "`string'" ??_C@_1M@LNCCJCFA@?$AA?4?$AAi?$AAt?$AAm?$AAs?$AA?$AA@
0x18002A2D8: "`string'" ??_C@_0P@KEGBDGDJ@RegSetValueExA?$AA@
0x180006940: "int __cdecl NS_EmulateSortingWindows61::APIHook_FindNLSStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_FindNLSStringEx@NS_EmulateSortingWindows61@@YAHPEBGK0H0HPEAHPEAU_nlsversioninfo@@PEAX_J@Z
0x180028B50: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18001A460: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AddKey(class NS_VirtualRegistry2::CVirtualKey * __ptr64,unsigned short * __ptr64,unsigned long,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?AddKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAGKPEAPEAV32@@Z
0x180489BA0: "char * __ptr64 __ptr64 NS_VistaRTMVersionLie::pszServicePack" ?pszServicePack@NS_VistaRTMVersionLie@@3PEADEA
0x1800386B0: "`string'" ??_C@_1IA@BCDPKDNH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x18003A4B0: "`string'" ??_C@_19DPGAJLIN@?$AA9?$AA6?$AA0?$AA0?$AA?$AA@
0x18003B868: "`string'" ??_C@_0O@GLENPJE@RegEnumValueW?$AA@
0x18003CED0: "`string'" ??_C@_0BE@HDLBBAM@?7?7?7ValueName?3?5?$FL?$CFs?$FN?6?$AA@
0x180029AD8: "`string'" ??_C@_1DO@FNFHHCBO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?2?$AA1?$AA6?$AA?4?$AA0?$AA?$AA@
0x180033898: "`string'" ??_C@_0CA@EFOFLDDO@MSA2001?3?5RegQueryValueEx?5failed?$AA@
0x18003BDF0: "`string'" ??_C@_0DC@IBIHDNIC@NS_VirtualRegistry2?3?3CVirtualReg@
0x18002D570: "`string'" ??_C@_1FI@LGKEELKF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?2?$AA1@
0x180032470: "`string'" ??_C@_0BN@DNIFEBAK@Failed?5to?5add?5NetBT?5settings?$AA@
0x1800073D0: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlAllocateHeap(void * __ptr64,unsigned long,unsigned __int64)" ?APIHook_RtlAllocateHeap@NS_FaultTolerantHeap@@YAPEAXPEAXK_K@Z
0x18002A704: "`string'" ??_C@_06NAHHJBM@_lopen?$AA@
0x180016964: "public: struct NS_VirtualRegistry::VIRTUALVAL * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::FindValue(unsigned short const * __ptr64) __ptr64" ?FindValue@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAUVIRTUALVAL@2@PEBG@Z
0x180489160: "long NS_FaultTolerantHeap::FthErrorHistoryIndex" ?FthErrorHistoryIndex@NS_FaultTolerantHeap@@3JA
0x18003B848: "`string'" ??_C@_0P@DPIKNKDP@RegQueryValueW?$AA@
0x180040A48: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18002F988: "`string'" ??_C@_07MIKIFGAL@Disable?$AA@
0x180020950: "unsigned long __cdecl NS_Win7RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win7RTMVersionLie@@YAKXZ
0x18001D2F0: "long __cdecl NS_VirtualRegistry2::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x18002EFA0: "`string'" ??_C@_1FK@MDLPEDMP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AA?4?$AAA?$AAp?$AAp?$AAl?$AAi@
0x1800208E4: "void __cdecl NS_VistaSP2VersionLie::ReleaseServicePackStrings(void)" ?ReleaseServicePackStrings@NS_VistaSP2VersionLie@@YAXXZ
0x18003A2D0: "`string'" ??_C@_1GK@NGOOHOCE@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAa?$AAc?$AAr?$AAo?$AAm?$AAe?$AAd?$AAi?$AAa?$AA?2?$AAF?$AAl?$AAa?$AAs?$AAh?$AAP?$AAl@
0x18000F260: "void __cdecl NS_VirtualRegistry::BuildNT51(char const * __ptr64)" ?BuildNT51@NS_VirtualRegistry@@YAXPEBD@Z
0x180033CC0: "`string'" ??_C@_1BE@FFKCGBPP@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAc?$AAd?$AAr?$AAo?$AAm?$AA?$AA@
0x180028A30: "__cdecl _imp_memmove" __imp_memmove
0x180029608: "`string'" ??_C@_09LCCAEGJI@?$FL?$CFS?$FN?5?$FL?$CFS?$FN?$AA@
0x18003CC80: "`string'" ??_C@_1GE@PMBLBMAI@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AA?3?$AA?5?$AAn?$AAo?$AAn?$AA?9?$AAC?$AAO?$AAM?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAs?$AAu?$AAb?$AAk?$AAe?$AAy@
0x1800289B0: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x18003BAE8: "`string'" ??_C@_0DA@LECAHOHM@NS_VirtualRegistry2?3?3CVirtualReg@
0x180032FC0: "`string'" ??_C@_1CI@FBNAFCGD@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAA?$AAd?$AAo?$AAb?$AAe?$AA?$AA@
0x180035898: "`string'" ??_C@_1BI@FDCNBPBB@?$AAi?$AAr?$AA3?$AA2?$AA_?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180036EE0: "`string'" ??_C@_1EO@OMLHKFMG@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAC?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5@
0x1800371F0: "`string'" ??_C@_1GE@BJCKNNL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA2?$AAD?$AAE?$AA8?$AA9?$AA7?$AA8?$AA1?$AA?9?$AAD?$AAB?$AAF?$AA6?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA@
0x18002FC18: "`string'" ??_C@_0BA@HMJBMDF@WerReportCreate?$AA@
0x1800251FC: "public: unsigned long __cdecl ShimLib::CString::ExpandEnvironmentStringsW(void) __ptr64" ?ExpandEnvironmentStringsW@CString@ShimLib@@QEAAKXZ
0x18002A450: "`string'" ??_C@_1DI@KENNACFI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x1800341A0: "`string'" ??_C@_0CK@KPKAKCID@NS_VirtualRegistry?3?3BuildDSRetur@
0x18001E5F0: "long __cdecl NS_VirtualRegistry2::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x1800177DC: "private: int __cdecl NS_VirtualRegistry::CVirtualRegistry::IsHKCRPathVirtualDeleted(unsigned short const * __ptr64) __ptr64" ?IsHKCRPathVirtualDeleted@CVirtualRegistry@NS_VirtualRegistry@@AEAAHPEBG@Z
0x180029238: "`string'" ??_C@_08GFCFILDL@AcLayers?$AA@
0x180013F90: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x180037DD0: "`string'" ??_C@_1GA@KJEBAEKH@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAv?$AAi?$AAd?$AAe?$AAo?$AA?5?$AA5?$AA?4?$AA1?$AA0?$AA?5?$AAA?$AAb?$AAo?$AAu?$AAt?$AA?5?$AAE?$AAn?$AAc?$AAo?$AAd?$AAe@
0x18003BBA0: "`string'" ??_C@_1FA@GOMDBJJO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4@
0x18001845C: "int __cdecl NS_VirtualRegistry::ParseCommandLineA(char const * __ptr64)" ?ParseCommandLineA@NS_VirtualRegistry@@YAHPEBD@Z
0x18003B650: "`string'" ??_C@_0CP@JAGKJDAN@NS_VirtualRegistry?3?3CVirtualRegi@
0x18003B9F0: "`string'" ??_C@_0DB@PEBDAOMF@Unexpected?5error?5returned?5from?5R@
0x180007B00: "void * __ptr64 __cdecl NS_FaultTolerantHeap::APIHook_RtlReAllocateHeap(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64)" ?APIHook_RtlReAllocateHeap@NS_FaultTolerantHeap@@YAPEAXPEAXK0_K@Z
0x180029490: "`string'" ??_C@_1DA@LCKDOEMD@?$AAE?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAS?$AAo?$AAr?$AAt?$AAi?$AAn?$AAg?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA6?$AA1?$AA?$AA@
0x18001B358: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x18001C5F8: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::OpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64) __ptr64" ?OpenKeyExA@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBDKKPEAPEAU3@@Z
0x180009C0C: "struct tagHOOKAPI * __ptr64 __cdecl NS_FaultTolerantHeap::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_FaultTolerantHeap@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180028AB8: "__cdecl _imp_malloc" __imp_malloc
0x18002F858: "`string'" ??_C@_0BC@FAEPGHOA@Win8RTMVersionLie?$AA@
0x18003CD40: "`string'" ??_C@_1EI@DNKFHBJJ@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAA?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi?$AAg?$AAa@
0x180036720: "`string'" ??_C@_1GE@BFKKBMKP@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA1?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x180025CD4: "int __cdecl ShimLib::ShouldApplyShim(void)" ?ShouldApplyShim@ShimLib@@YAHXZ
0x180019884: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::SetHKCRPathVirtualDeleted(unsigned short const * __ptr64,int) __ptr64" ?SetHKCRPathVirtualDeleted@CVirtualRegistry@NS_VirtualRegistry@@AEAAXPEBGH@Z
0x1800205C4: "int __cdecl NS_VistaSP2VersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_VistaSP2VersionLie@@YAHPEBGZZ
0x180036D28: "`string'" ??_C@_1BK@EGIDFGFD@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAa?$AAr?$AAe?$AAn?$AAc?$AAy?$AA?$AA@
0x180028810: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18003C6E8: "`string'" ??_C@_0CM@HBNLPKPA@NS_Win8RTMVersionLie?3?3APIHook_Ge@
0x1800293C8: "`string'" ??_C@_1CG@KGCCJLEB@?$AAV?$AAi?$AAs?$AAt?$AAa?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x1800247F4: "int __cdecl ShimLib::AcquireHeapManagerMutex(void)" ?AcquireHeapManagerMutex@ShimLib@@YAHXZ
0x180038D68: "`string'" ??_C@_1BK@HJNBLNLJ@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
0x180024E00: "public: void __cdecl ShimLib::CString::AppendPath(unsigned short const * __ptr64) __ptr64" ?AppendPath@CString@ShimLib@@QEAAXPEBG@Z
0x180048C10: "int NS_Win7RTMVersionLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Win7RTMVersionLie@@3HA
0x180035908: "`string'" ??_C@_1BE@NIHOHMOE@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA4?$AA1?$AA?$AA@
0x18003A248: "`string'" ??_C@_1BE@LFHCOHHG@?$AA4?$AA?4?$AA0?$AA?4?$AA3?$AA0?$AA3?$AA1?$AA9?$AA?$AA@
0x1800226A0: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGPEAPEAU2@@Z
0x18002F870: "`string'" ??_C@_0BD@FOMIABKO@Win81RTMVersionLie?$AA@
0x180036D88: "`string'" ??_C@_1BE@KLJOMICE@?$AAv?$AAi?$AAd?$AAc?$AA?4?$AAi?$AAv?$AA5?$AA0?$AA?$AA@
0x180034A00: "`string'" ??_C@_1BA@OFLJGHK@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AA?$AA@
0x18003BEC0: "`string'" ??_C@_0BN@JMCJILNF@Failed?5to?5add?5key?5values?5?$CFd?6?$AA@
0x18003A7D0: "`string'" ??_C@_1CO@GJKMDJMM@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAP?$AAA?$AAD?$AAC?$AAU?$AAR?$AAS?$AAO?$AAR?$AAS?$AA?$AA@
0x180035940: "`string'" ??_C@_1GE@GDCMLHGL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA1?$AA3?$AA4?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8@
0x180037000: "`string'" ??_C@_1EO@LDDMPFOM@?$AA?$HL?$AA3?$AA0?$AA3?$AA5?$AA5?$AA6?$AA4?$AA9?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA1?$AA0?$AA?9?$AA8?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AAA?$AAA?$AA0?$AA0?$AA3@
0x180028738: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180036420: "`string'" ??_C@_1HM@IAKDPFCH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180004580: "void __cdecl NS_VirtualRegistry2::BuildProgramFilesDirX86Lie(char const * __ptr64)" ?BuildProgramFilesDirX86Lie@NS_VirtualRegistry2@@YAXPEBD@Z
0x1800287E0: "__cdecl _imp_SetNamedPipeHandleState" __imp_SetNamedPipeHandleState
0x180016C54: "public: void __cdecl NS_VirtualRegistry::OPENKEY::Free(void) __ptr64" ?Free@OPENKEY@NS_VirtualRegistry@@QEAAXXZ
0x18000E3F0: "void __cdecl NS_VirtualRegistry::BuildIESetupPath(char const * __ptr64)" ?BuildIESetupPath@NS_VirtualRegistry@@YAXPEBD@Z
0x180002A50: "public: virtual long __cdecl ShimLib::PathTreeNodeVisitor::Visit(class ShimLib::PathTreeNode * __ptr64,class ShimLib::PathTreeNode * __ptr64,struct ShimLib::PathTreeNodeTraversal * __ptr64) __ptr64" ?Visit@PathTreeNodeVisitor@ShimLib@@UEAAJPEAVPathTreeNode@2@0PEAUPathTreeNodeTraversal@2@@Z
0x18002E0D0: "`string'" ??_C@_1LG@HNLJOHMF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4@
0x180046368: "char * __ptr64 __ptr64 NS_FaultTolerantHeap::g_szCommandLine" ?g_szCommandLine@NS_FaultTolerantHeap@@3PEADEA
0x18000EDE0: "void __cdecl NS_VirtualRegistry::BuildMSA2001(char const * __ptr64)" ?BuildMSA2001@NS_VirtualRegistry@@YAXPEBD@Z
0x180035260: "`string'" ??_C@_1DA@IMBKBALB@?$AAI?$AAn?$AAd?$AAe?$AAo?$AA?o?$AA?$LP?$AA?$LN?$AA?5?$AAa?$AAu?$AAd?$AAi?$AAo?$AA?5?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180010C30: "void __cdecl NS_VirtualRegistry::BuildWin98SE(char const * __ptr64)" ?BuildWin98SE@NS_VirtualRegistry@@YAXPEBD@Z
0x180048B40: "struct tagHOOKAPI * __ptr64 __ptr64 NS_VirtualRegistry2::g_pAPIHooks" ?g_pAPIHooks@NS_VirtualRegistry2@@3PEAUtagHOOKAPI@@EA
0x1800034FD: "__cdecl _imp_load_GetFileSecurityA" __imp_load_GetFileSecurityA
0x18000EE60: "void __cdecl NS_VirtualRegistry::BuildMSI(char const * __ptr64)" ?BuildMSI@NS_VirtualRegistry@@YAXPEBD@Z
0x18003D240: "`string'" ??_C@_0CK@IJLLMCLJ@NS_WRPRegDeleteKey?3?3APIHook_RegD@
0x180029710: "`string'" ??_C@_0DF@JBFOFLDD@?$CI?$CIULONG_PTR?$CJ?$CIPadder?9?$DOHeap?$CJ?5?$CG?5?$CIUL@
0x180040A34: "__cdecl _IMPORT_DESCRIPTOR_apphelp" __IMPORT_DESCRIPTOR_apphelp
0x18003013C: "`string'" ??_C@_04MKNBDEPB@exit?$AA@
0x180032C80: "`string'" ??_C@_1EA@PBPANNEL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x180048BD0: "int NS_WsExCompositedShim::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_WsExCompositedShim@@3HA
0x1800313B0: "`string'" ??_C@_1CG@NJJELFPC@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAL?$AAR?$AAU?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x180003030: "__cdecl _report_gsfailure" __report_gsfailure
0x180034DC8: "`string'" ??_C@_1BK@BFIEKNFP@?$AAF?$AAr?$AAi?$AAe?$AAn?$AAd?$AAl?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A6E8: "int __cdecl NS_FaultTolerantHeap::FthpClientCreateMappedView(struct NS_FaultTolerantHeap::__FTH_CLIENT * __ptr64)" ?FthpClientCreateMappedView@NS_FaultTolerantHeap@@YAHPEAU__FTH_CLIENT@1@@Z
0x180005570: "struct tagHOOKAPI * __ptr64 __cdecl NS_DXMaximizedWindowedHwndOverride::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DXMaximizedWindowedHwndOverride@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180030528: "`string'" ??_C@_0CL@FLFPIMPH@Client?5failed?5to?5connect?5to?5the?5@
0x18003D060: "`string'" ??_C@_1EM@GNAJJHKH@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?3?$AA?5?$AAw?$AAr?$AAp?$AA?5?$AAk?$AAe?$AAy?$AA?5?$AAi?$AAs?$AA?5?$AAm?$AAi?$AAt?$AAi@
0x180035BC0: "`string'" ??_C@_1BE@IJNOJFIL@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800342D8: "`string'" ??_C@_0DJ@MNPOKCMA@?$FLDSSMOOTHWRITEPOS?$FN?5Added?5DS?5Hack@
0x180005720: "struct tagHOOKAPI * __ptr64 __cdecl NS_DXMaximizedWindowedMode::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DXMaximizedWindowedMode@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180028B48: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x18002BE60: "`string'" ??_C@_1JK@JKEGBCL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x1800249F0: "char * __ptr64 __cdecl ShimLib::StringDuplicateA(char const * __ptr64)" ?StringDuplicateA@ShimLib@@YAPEADPEBD@Z
0x18000E300: "void __cdecl NS_VirtualRegistry::BuildIE60(char const * __ptr64)" ?BuildIE60@NS_VirtualRegistry@@YAXPEBD@Z
0x180047B58: "unsigned __int64 NS_Win81RTMVersionLie::g_stShimId" ?g_stShimId@NS_Win81RTMVersionLie@@3_KA
0x180046338: "char * __ptr64 __ptr64 NS_Win7RTMVersionLie::g_szCommandLine" ?g_szCommandLine@NS_Win7RTMVersionLie@@3PEADEA
0x1800362F0: "`string'" ??_C@_1BCC@IKMOBGNG@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAA?$AA2?$AA5?$AA5?$AA1?$AAF?$AA6?$AA0?$AA?9?$AA7?$AA0?$AA5?$AAF?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AAA@
0x180028728: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18003B040: "`string'" ??_C@_1CO@BDKOIMJL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$AA@
0x180038250: "`string'" ??_C@_1EO@KGBKBFHC@?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAA?$AA3?$AA0?$AAE?$AA?9?$AA4?$AA4?$AA4?$AA5?$AA5?$AA3?$AA5@
0x18001A338: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::AddKey(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?AddKey@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBG0KPEAPEAV12@@Z
0x18002FC38: "`string'" ??_C@_0BG@DEHLLCKA@WerReportSetParameter?$AA@
0x180030048: "`string'" ??_C@_0CL@JJAOLHAC@NS_FaultTolerantHeap?3?3Initialize@
0x18001D098: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::SetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long) __ptr64" ?SetValueExW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x180039DD0: "`string'" ??_C@_1EG@BOIFLPDK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAr@
0x18002D370: "`string'" ??_C@_1KM@OICDNPLL@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x180032CE8: "`string'" ??_C@_0CH@EMLJDBHD@NS_VirtualRegistry?3?3BuildSpellIt@
0x18002F7E0: "`string'" ??_C@_0BB@LFGFBOCF@VirtualRegistry2?$AA@
0x180048520: "__cdecl _native_startup_state" __native_startup_state
0x18002C150: "`string'" ??_C@_1JE@DNFAMPC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0@
0x180038888: "`string'" ??_C@_19PCNLPEKH@?$AA?4?$AAm?$AA4?$AAp?$AA?$AA@
0x180048C08: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Win8RTMVersionLie::g_pAPIHooks" ?g_pAPIHooks@NS_Win8RTMVersionLie@@3PEAUtagHOOKAPI@@EA
0x180034628: "`string'" ??_C@_1BO@HIBBMDPI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAc?$AAk?$AA?5?$AA1?$AA?$AA@
0x18001BDF4: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::GetKeyFullPath(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetKeyFullPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAXPEBGPEAPEAG@Z
0x1800160F0: "public: int __cdecl NS_VirtualRegistry::CVirtualRegistry::EnableVirtualHKCRDelete(void) __ptr64" ?EnableVirtualHKCRDelete@CVirtualRegistry@NS_VirtualRegistry@@QEAAHXZ
0x180032900: "`string'" ??_C@_1BK@MEJJJKO@?$AAW?$AAa?$AAl?$AAl?$AAP?$AAa?$AAp?$AAe?$AAr?$AAD?$AAi?$AAr?$AA?$AA@
0x180038780: "`string'" ??_C@_0BN@BHBIIBEA@Indeo5?5initialization?5failed?$AA@
0x1800336B8: "`string'" ??_C@_0CN@MALDAGIO@?$FLPrinter?$FN?5No?5printers?5found?5or?5o@
0x180011080: "void __cdecl NS_VirtualRegistry::BuildWordPad(char const * __ptr64)" ?BuildWordPad@NS_VirtualRegistry@@YAXPEBD@Z
0x180033FD0: "`string'" ??_C@_0CD@OILMLILL@?$FLDSDEVACCEL?$FN?5No?5devices?5specifie@
0x180033388: "`string'" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x18002F000: "`string'" ??_C@_1JO@GEDAPBCP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x18002B660: "`string'" ??_C@_1M@LONJENBG@?$AAE?$AAx?$AAc?$AAe?$AAl?$AA?$AA@
0x18003BB18: "`string'" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x180031DB0: "`string'" ??_C@_1IG@OHJCLIPK@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo@
0x180005BF0: "int __cdecl NS_EmulateSortingVista::APIHook_CompareStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int)" ?APIHook_CompareStringW@NS_EmulateSortingVista@@YAHKKPEBGH0H@Z
0x18001DAF0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?APIHook_RegEnumKeyW@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEAGK@Z
0x18003C990: "`string'" ??_C@_1BE@FMPNIOEH@?$AA_?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AA?$AA@
0x180033510: "`string'" ??_C@_1MK@BNDLMGBP@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180038630: "`string'" ??_C@_1HM@OLEEIMMI@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA6?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1?$AAD?$AA0@
0x180046310: "char * __ptr64 __ptr64 NS_VerifyVersionInfoLite::g_szCommandLine" ?g_szCommandLine@NS_VerifyVersionInfoLite@@3PEADEA
0x18002FB68: "`string'" ??_C@_1BE@NPEIJFBC@?$AAp?$AAs?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800327A0: "`string'" ??_C@_1JO@JLAPMEHJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18003AFB8: "`string'" ??_C@_0CP@HKMNKFPB@NS_VirtualRegistry?3?3CVirtualRegi@
0x180016C30: "private: void __cdecl NS_VirtualRegistry::CVirtualRegistry::FlushEnumLists(void) __ptr64" ?FlushEnumLists@CVirtualRegistry@NS_VirtualRegistry@@AEAAXXZ
0x18002A180: "`string'" ??_C@_1EM@LHKOAGBL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS@
0x18000F1F0: "void __cdecl NS_VirtualRegistry::BuildNT50(char const * __ptr64)" ?BuildNT50@NS_VirtualRegistry@@YAXPEBD@Z
0x180006140: "int __cdecl NS_EmulateSortingVista::APIHook_LCMapStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int)" ?APIHook_LCMapStringW@NS_EmulateSortingVista@@YAHKKPEBGHPEAGH@Z
0x18002A590: "`string'" ??_C@_1EA@NGNHNFFH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAT?$AAE?$AAX?$AAT?$AA?$AA@
0x180019F80: "unsigned short const * __ptr64 __cdecl NS_VirtualRegistry::TrimSlashW(unsigned short const * __ptr64)" ?TrimSlashW@NS_VirtualRegistry@@YAPEBGPEBG@Z
0x18002E8F0: "`string'" ??_C@_1HM@PEKKOAPO@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA0?$AA9?$AAF?$AAF@
0x18001A8E8: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::AppendSubKeyPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?AppendSubKeyPath@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEBG0PEAPEAG@Z
0x18002B710: "`string'" ??_C@_19DAIBMMNL@?$AAL?$AAy?$AAn?$AAc?$AA?$AA@
0x18002D420: "`string'" ??_C@_1LA@IEBCODJE@?$AAH?$AAK?$AAC?$AAU?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2@
0x1800329A0: "`string'" ??_C@_0CH@CAACIMD@BuildDXDiag?3?5GetSystemDirectory?5@
0x18000ACC0: "void __cdecl NS_VirtualRegistry::BuildAddRedirect(char const * __ptr64)" ?BuildAddRedirect@NS_VirtualRegistry@@YAXPEBD@Z
0x18000AF90: "void __cdecl NS_VirtualRegistry::BuildArm64X86ProcLie(char const * __ptr64)" ?BuildArm64X86ProcLie@NS_VirtualRegistry@@YAXPEBD@Z
0x18003AC68: "`string'" ??_C@_0CJ@LPFGIEIA@NS_VirtualRegistry?3?3VIRTUALKEY?3?3@
0x180033A08: "`string'" ??_C@_1CK@IBALCILO@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAn?$AAo?$AAw?$AAc?$AAo?$AAm?$AA?$AA@
0x180033E18: "`string'" ??_C@_0CH@GEHMGGFC@NS_VirtualRegistry?3?3BuildAirline@
0x18003C160: "`string'" ??_C@_0BM@EDPEHGGK@Failed?5to?5open?5root?5key?5?$CFd?6?$AA@
0x1800100C0: "void __cdecl NS_VirtualRegistry::BuildProfile(char const * __ptr64)" ?BuildProfile@NS_VirtualRegistry@@YAXPEBD@Z
0x180009264: "int __cdecl NS_FaultTolerantHeap::FthGetTimeStampString(unsigned short * __ptr64,unsigned short * __ptr64,int)" ?FthGetTimeStampString@NS_FaultTolerantHeap@@YAHPEAG0H@Z
0x18003B948: "`string'" ??_C@_0BO@NNEHGIGH@Failed?5adding?5value?5?$FL?$CFws?$FN?5?$CFd?6?$AA@
0x180016888: "public: struct NS_VirtualRegistry::VIRTUALKEY * __ptr64 __cdecl NS_VirtualRegistry::VIRTUALKEY::FindKey(unsigned short const * __ptr64) __ptr64" ?FindKey@VIRTUALKEY@NS_VirtualRegistry@@QEAAPEAU12@PEBG@Z
0x18002EC90: "`string'" ??_C@_1MC@COALBGLH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AA?4?$AAI?$AAn?$AAt?$AAe?$AAr?$AAo?$AAp?$AA?4?$AAW?$AAo?$AAr?$AAd?$AA?0?$AA?5?$AAV@
0x1800289A0: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x180030D90: "`string'" ??_C@_1CM@NEGEHEMM@?$AA?$CF?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$CF?$AA?2?$AAC?$AAo?$AAo?$AAk?$AAi?$AAe?$AAs?$AA?$AA@
0x1800336E8: "`string'" ??_C@_0DL@LHPLADIL@?$FLPrinter?$FN?5Exception?5encountered?0@
0x18002B7F0: "`string'" ??_C@_1EO@EHKFEHBK@?$AA?$HL?$AA0?$AA0?$AA0?$AA6?$AAF?$AA0?$AA3?$AAA?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x1800408C8: "__cdecl TI1?AVCStringError@CString@ShimLib@@" _TI1?AVCStringError@CString@ShimLib@@
0x180029818: "`string'" ??_C@_0BF@CINDNDD@double?5free?3?5?$CFp?0?5?$CFp?6?$AA@
0x180031468: "`string'" ??_C@_1BO@NHIFMCH@?$AAV?$AAF?$AAA?$AAT?$AA?2?$AAD?$AAi?$AAr?$AAt?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18048C018: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18002A258: "`string'" ??_C@_0N@JJPEKNFO@ADVAPI32?4DLL?$AA@
0x180034D48: "`string'" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x18003D440: "`string'" ??_C@_0CD@MILCCCEK@AllocateAndInitializeSid?5failed?5@
0x18002F220: "`string'" ??_C@_1MO@IIMKDLDL@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAO?$AAW?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd@
0x180022460: "int __cdecl NS_WRPMitigation::APIHook_OpenFile(char const * __ptr64,struct _OFSTRUCT * __ptr64,unsigned int)" ?APIHook_OpenFile@NS_WRPMitigation@@YAHPEBDPEAU_OFSTRUCT@@I@Z
0x180030C70: "`string'" ??_C@_1KG@JDNIOIHA@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo@
0x180005D60: "int __cdecl NS_EmulateSortingVista::APIHook_FindNLSStringEx(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,int,unsigned short const * __ptr64,int,int * __ptr64,struct _nlsversioninfo * __ptr64,void * __ptr64,__int64)" ?APIHook_FindNLSStringEx@NS_EmulateSortingVista@@YAHPEBGK0H0HPEAHPEAU_nlsversioninfo@@PEAX_J@Z
0x1800287C0: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180030F10: "`string'" ??_C@_0ED@CFGOFMGG@?$FLHasbro?5hack?$FN?5return?5from?5RegQue@
0x1800313F8: "`string'" ??_C@_1CM@MOKMBFJF@?$AAV?$AAC?$AAA?$AAC?$AAH?$AAE?$AA?2?$AAR?$AAa?$AAn?$AAd?$AAo?$AAm?$AAR?$AAe?$AAc?$AAy?$AAc?$AAl?$AAe?$AAs?$AA?$AA@
0x180031230: "`string'" ??_C@_17NDCMEDIF@?$AAV?$AAM?$AAM?$AA?$AA@
0x180032A00: "`string'" ??_C@_1II@PGOFDDEG@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180028B60: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x18002FD20: "`string'" ??_C@_0CJ@ICDCPJFP@NS_FaultTolerantHeap?3?3FthCreateW@
0x180048D30: "void * __ptr64 __ptr64 NS_FaultTolerantHeap::FthWatsonObjectCurrentIssue" ?FthWatsonObjectCurrentIssue@NS_FaultTolerantHeap@@3PEAXEA
0x18001B864: "public: unsigned long __cdecl NS_VirtualRegistry2::CVirtualKey::FindKey(unsigned short const * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64) __ptr64" ?FindKey@CVirtualKey@NS_VirtualRegistry2@@QEAAKPEBGPEAPEAV12@@Z
0x180002810: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64 const,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_RegCreateKeyExA@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBDKPEADKKQEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180048548: "struct tagHOOKAPI * __ptr64 __ptr64 NS_WRPMitigation::g_pAPIHooks" ?g_pAPIHooks@NS_WRPMitigation@@3PEAUtagHOOKAPI@@EA
0x18003B380: "`string'" ??_C@_0EA@NODBCNNH@?$FLQueryInfoW?$FN?5NULL?5passed?5for?5lpC@
0x1800092B0: "int __cdecl NS_FaultTolerantHeap::FthGetVersionString(unsigned short * __ptr64,int)" ?FthGetVersionString@NS_FaultTolerantHeap@@YAHPEAGH@Z
0x180029788: "`string'" ??_C@_0CH@LEDGCOEC@NS_FaultTolerantHeap?3?3FthIsNtHea@
0x180032280: "`string'" ??_C@_1GI@LNAKMGND@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x18003A800: "`string'" ??_C@_1DG@LPBPKMAG@?$AAD?$AAS?$AAA?$AAP?$AAP?$AAH?$AAA?$AAC?$AAK?$AAI?$AAD?$AA_?$AAC?$AAA?$AAC?$AAH?$AAE?$AAP?$AAO?$AAS?$AAI?$AAT?$AAI?$AAO?$AAN?$AAS?$AA?$AA@
0x18003ABA0: "`string'" ??_C@_0BN@CFEHBLML@NS_VirtualRegistry?3?3MakePath?$AA@
0x180032960: "`string'" ??_C@_1BK@OLMICBFA@?$AA4?$AA?4?$AA0?$AA7?$AA?4?$AA0?$AA0?$AA?4?$AA0?$AA7?$AA1?$AA6?$AA?$AA@
0x18000E940: "void __cdecl NS_VirtualRegistry::BuildJoystick(char const * __ptr64)" ?BuildJoystick@NS_VirtualRegistry@@YAXPEBD@Z
0x18002570C: "public: class ShimLib::CString __cdecl ShimLib::CString::Mid(int,int)const __ptr64" ?Mid@CString@ShimLib@@QEBA?AV12@HH@Z
0x180028C00: "__cdecl _imp_SfcIsKeyProtected" __imp_SfcIsKeyProtected
0x180031ED0: "`string'" ??_C@_1GC@KHPIBEFD@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAr?$AAt?$AAf?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh@
0x1800380B0: "`string'" ??_C@_1IK@NBIHIOLH@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?2?$AA?$HL?$AA6?$AA6?$AA5?$AAA?$AA4?$AA4?$AA4?$AA7?$AA?9?$AAD?$AA9?$AA0?$AA5?$AA?9?$AA1?$AA1@
0x180048C98: "struct NS_EmulateSortingWindows61::loc_hash_s * __ptr64 (__cdecl* __ptr64 NS_EmulateSortingWindows61::g_pfnNlsValidateLocale)(unsigned long * __ptr64,int)" ?g_pfnNlsValidateLocale@NS_EmulateSortingWindows61@@3P6APEAUloc_hash_s@1@PEAKH@ZEA
0x18003D1C0: "`string'" ??_C@_0BP@CAFEEEML@NS_WRPRegDeleteKey?3?3LogSfpKeyW?$AA@
0x180031CD0: "`string'" ??_C@_1EG@GGFDIHCB@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAw?$AAr?$AAi?$AAf?$AAi?$AAl?$AAe?$AA?2?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?2?$AAp?$AAr?$AAi?$AAn?$AAt?$AAt?$AAo?$AA?2?$AAc?$AAo?$AAm?$AAm?$AAa@
0x18002F900: "`string'" ??_C@_0DJ@FMHHMDMO@NS_DXMaximizedWindowedHwndOverri@
0x180012C40: StringCchLengthW
0x18002B5B0: "`string'" ??_C@_1BK@OKEHL@?$AAm?$AAs?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18002A288: "`string'" ??_C@_0M@HLOHPNFA@RegCloseKey?$AA@
0x18001E520: "long __cdecl NS_VirtualRegistry2::APIHook_RegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x180032FB0: "`string'" ??_C@_1BA@PMKGIGGL@?$AAO?$AAE?$AAM?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180035290: "`string'" ??_C@_1GE@PNGOPABF@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180024A0C: "char * __ptr64 __cdecl ShimLib::StringNDuplicateA(char const * __ptr64,unsigned long)" ?StringNDuplicateA@ShimLib@@YAPEADPEBDK@Z
0x1800333A0: "`string'" ??_C@_0BL@GIGOLIBG@GetTokenInformation?5failed?$AA@
0x180013740: "long __cdecl NS_VirtualRegistry::APIHook_RegCreateKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegCreateKeyA@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBDPEAPEAU2@@Z
0x18003B828: "`string'" ??_C@_0M@INNIHOHL@RegOpenKeyW?$AA@
0x180023830: "int __cdecl NS_WRPMitigation::MySfpIsFileProtectedW(unsigned short const * __ptr64)" ?MySfpIsFileProtectedW@NS_WRPMitigation@@YAHPEBG@Z
0x18002A790: "`string'" ??_C@_0BA@HFGFCNNL@RegDeleteValueA?$AA@
0x1800141F0: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenUserClassesRoot(void * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenUserClassesRoot@NS_VirtualRegistry@@YAJPEAXKKPEAPEAUHKEY__@@@Z
0x180021ED0: "int __cdecl NS_WRPMitigation::APIHook_CopyFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?APIHook_CopyFileExW@NS_WRPMitigation@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x18002FB00: "`string'" ??_C@_0DB@ODEJHINE@NS_EmulateSortingWindows61?3?3Init@
0x180032DA0: "`string'" ??_C@_0BO@IIJPLCAG@SpellIt?3?5RegOpenKeyExW?5failed?$AA@
0x180035830: "`string'" ??_C@_0CB@MJGFMBKH@IndeoSound?5initialization?5failed@
0x1800043B0: "public: long __cdecl NS_VirtualRegistry::CVirtualRegistry::GetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetValueW@CVirtualRegistry@NS_VirtualRegistry@@QEAAJPEAUHKEY__@@PEBG1KPEAKPEAE2@Z
0x180028AB0: "__cdecl _imp_free" __imp_free
0x180029300: "`string'" ??_C@_1CG@MICCLKIO@?$AAW?$AAi?$AAn?$AA8?$AA1?$AAR?$AAT?$AAM?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAL?$AAi?$AAe?$AA?$AA@
0x18002B930: "`string'" ??_C@_1EA@DAMHPAGB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?5?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180003300: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006F40: "int __cdecl NS_EmulateSortingWindows61::APIHook_LCMapStringW(unsigned long,unsigned long,unsigned short const * __ptr64,int,unsigned short * __ptr64,int)" ?APIHook_LCMapStringW@NS_EmulateSortingWindows61@@YAHKKPEBGHPEAGH@Z
0x18002D8B0: "`string'" ??_C@_1JE@HKMNPFNJ@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA9?$AA1?$AA4?$AA9?$AA3?$AA4?$AA4?$AA1?$AA?9?$AA5?$AAA?$AA9?$AA1?$AA?9?$AA1?$AA1?$AAC?$AAF?$AA?9?$AA8@
0x18001B4E0: "public: long __cdecl NS_VirtualRegistry2::CVirtualRegistry::EnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EnumValueW@CVirtualRegistry@NS_VirtualRegistry2@@QEAAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18003AE18: "`string'" ??_C@_0BA@BGBLLNNB@?7Protecting?3?5?$CFS?$AA@
0x180002390: "unsigned long __cdecl NS_WRPMitigation::APIHook_RegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?APIHook_RegSetValueExW@NS_WRPMitigation@@YAKPEAUHKEY__@@PEBGKKPEBEK@Z
0x1800205C4: "int __cdecl NS_Win8RTMVersionLie::GetFormatStringLength(unsigned short const * __ptr64,...)" ?GetFormatStringLength@NS_Win8RTMVersionLie@@YAHPEBGZZ
0x180034170: "`string'" ??_C@_0CK@PGICDCCC@?$FLDSRETURNWRITEPOSITION?$FN?5Unknown?5@
0x180048C60: "struct tagHOOKAPI * __ptr64 __ptr64 NS_EmulateSortingWindows61::g_pAPIHooks" ?g_pAPIHooks@NS_EmulateSortingWindows61@@3PEAUtagHOOKAPI@@EA
0x1800382A0: "`string'" ??_C@_17BODHOPJC@?$AA1?$AA?4?$AA0?$AA?$AA@
0x1800227F0: "long __cdecl NS_WRPMitigation::APIHook_RegSetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char const * __ptr64,unsigned long)" ?APIHook_RegSetValueA@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBDK1K@Z
0x18002B6C0: "`string'" ??_C@_1EO@DMGNDLAI@?$AA?$HL?$AA0?$AA0?$AA0?$AA2?$AA4?$AA5?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAC?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x180031050: "`string'" ??_C@_1EG@PPKAPMLF@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAE?$AAn@
0x180032020: "`string'" ??_C@_1HI@PPFEAALI@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAW?$AAo?$AAr?$AAd?$AAp?$AAa?$AAd?$AA?4?$AAD?$AAo@
0x18048C008: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18001D8F0: "long __cdecl NS_VirtualRegistry2::APIHook_RegEnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExA@NS_VirtualRegistry2@@YAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x18001BCA8: "private: unsigned long __cdecl NS_VirtualRegistry2::CVirtualRegistry::FindSubKey(class NS_VirtualRegistry2::CVirtualKey * __ptr64,unsigned short * __ptr64,class NS_VirtualRegistry2::CVirtualKey * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?FindSubKey@CVirtualRegistry@NS_VirtualRegistry2@@AEAAKPEAVCVirtualKey@2@PEAGPEAPEAV32@PEAPEAG@Z
0x1800319E8: "`string'" ??_C@_1BI@BCKHLDDG@?$AA?$CF?$AAs?$AA?5?$AA?1?$AAp?$AA?5?$AA?$CC?$AA?$CF?$AA?$CF?$AA1?$AA?$CC?$AA?$AA@
0x180035300: "`string'" ??_C@_1IC@POJGBAGC@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AA4?$AAC?$AAA?$AA2?$AA9?$AA7?$AA0?$AA?9?$AAD?$AAD?$AA2?$AAB?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AA9@
0x180020FF0: "unsigned long __cdecl NS_Win8RTMVersionLie::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Win8RTMVersionLie@@YAKXZ
0x180032A90: "`string'" ??_C@_1GE@NAJOJEFJ@?$AAH?$AAK?$AAL?$AAM?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAE?$AAl?$AAe?$AAc?$AAt?$AAr?$AAo?$AAn?$AAi?$AAc?$AA?5?$AAA?$AAr?$AAt?$AAs?$AA?2?$AAF?$AAu@
0x180022880: "long __cdecl NS_WRPMitigation::APIHook_RegSetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long)" ?APIHook_RegSetValueW@NS_WRPMitigation@@YAJPEAUHKEY__@@PEBGK1K@Z
0x18000CC60: "void __cdecl NS_VirtualRegistry::BuildDXDiag(char const * __ptr64)" ?BuildDXDiag@NS_VirtualRegistry@@YAXPEBD@Z
0x180037460: "`string'" ??_C@_1ME@HOMBIOL@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AA3?$AA3?$AAD?$AA9?$AAA?$AA7?$AA6?$AA0?$AA?9?$AA9?$AA0?$AAC?$AA8?$AA?9?$AA1?$AA1?$AAD?$AA0?$AA?9?$AAB@
0x18003B528: "`string'" ??_C@_0O@DLADMFLH@Using?5path?5?$CFS?$AA@
0x180028A70: "__cdecl _imp_iswctype" __imp_iswctype
0x18001AEAC: "unsigned long __cdecl NS_VirtualRegistry2::DuplicateString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?DuplicateString@NS_VirtualRegistry2@@YAKPEBGPEAPEAG@Z
0x180035F48: "`string'" ??_C@_1BM@DIHJJHAA@?$AAI?$AAV?$AAI?$AA?5?$AAD?$AAe?$AAc?$AAo?$AAd?$AAe?$AA?5?$AAO?$AAA?$AA?$AA@
0x1800140B0: "long __cdecl NS_VirtualRegistry::APIHook_RegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?APIHook_RegOpenKeyExW@NS_VirtualRegistry@@YAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180036690: "`string'" ??_C@_1IC@EJKFPNHN@?$AAH?$AAK?$AAC?$AAR?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$HL?$AAB?$AAD?$AA3?$AA2?$AA3?$AA4?$AA3?$AA0?$AA?9?$AAC?$AAE?$AA9?$AA4?$AA?9?$AA1?$AA1?$AAC?$AAE?$AA?9?$AA8@
0x18003AD90: "`string'" ??_C@_0BO@EOFDJJCP@Initializing?5Virtual?5Registry?$AA@
0x180011B04: "void __cdecl NS_VirtualRegistry::FindCDROMKey(struct HKEY__ * __ptr64,class ShimLib::CString & __ptr64)" ?FindCDROMKey@NS_VirtualRegistry@@YAXPEAUHKEY__@@AEAVCString@ShimLib@@@Z
0x180047BC0: "unsigned long NS_FaultTolerantHeap::FthMaximumTrackedBlockSize" ?FthMaximumTrackedBlockSize@NS_FaultTolerantHeap@@3KA
0x1800307D8: "`string'" ??_C@_0DE@JNBDEOCB@NS_FaultTolerantHeap?3?3FthClientS@
0x180033200: "`string'" ??_C@_0CD@JFNKHAAH@?$FLPageKeepPro?53?40?$FN?5No?5scanner?5fou@
0x180031168: "`string'" ??_C@_1BA@EJPJCINB@?$AAP?$AAr?$AAo?$AAb?$AAl?$AAe?$AAm?$AA?$AA@
0x18003B458: "`string'" ??_C@_0DA@BBNHGNMB@NS_VirtualRegistry?3?3CVirtualRegi@
0x1800047B6: memset
0x180040B10: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800301B0: "`string'" ??_C@_0CG@CNCFMMAI@FTH?5shim?5applied?5by?5the?5FTH?5serv@
0x18002A5D0: "`string'" ??_C@_0BM@HAAGEDL@?5error?50x?$CF08x?5logging?5?$FL?$CFS?$FN?6?$AA@
0x18001F930: "int __cdecl NS_VistaRTMVersionLie::NotifyFn(unsigned long)" ?NotifyFn@NS_VistaRTMVersionLie@@YAHK@Z
0x18002B840: "`string'" ??_C@_1BG@CDLPJHA@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAP?$AAo?$AAi?$AAn?$AAt?$AA?$AA@
0x180028828: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18002BF00: "`string'" ??_C@_1BC@MCLMHEGP@?$AAA?$AAs?$AAs?$AAe?$AAm?$AAb?$AAl?$AAy?$AA?$AA@
0x18003C240: "`string'" ??_C@_0CH@OCDAHGLC@NS_VirtualRegistry2?3?3ParseComman@
0x1800288E0: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW
0x180029520: "`string'" ??_C@_1EA@FBDEONBM@?$AAD?$AAX?$AAM?$AAa?$AAx?$AAi?$AAm?$AAi?$AAz?$AAe?$AAd?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAe?$AAd?$AAH?$AAw?$AAn?$AAd?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x18003C838: "`string'" ??_C@_0CK@GDNBJKBP@NS_Win81RTMVersionLie?3?3APIHook_G@

[JEB Decompiler by PNF Software]