PDB Symbols - AcSpecfc.dll (0x83356164B2716A2413BF668EF30C9E26826E2F25CEBB5649C40344F4A61A8AF7)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\AcSpecfc.dll Base=0x180000000 SHA-256=83356164B2716A2413BF668EF30C9E26826E2F25CEBB5649C40344F4A61A8AF7
PDB: AcSpecfc.pdb GUID={3EFB59B2-89A3-114B-E190F66B0590159C} Age=1

759 located named symbols:
0x1800088D0: "public: void __cdecl ShimLib::CString::Assign(char const * __ptr64,int) __ptr64" ?Assign@CString@ShimLib@@QEAAXPEBDH@Z
0x18000C8A0: "ControlService call with SERVICE" ??_C@_0DP@MAPAMINE@ControlService?5call?5with?5SERVICE@
0x1800107FC: "int NS_SierraWirelessHideCDROM::g_bSubshimUsed" ?g_bSubshimUsed@NS_SierraWirelessHideCDROM@@3HA
0x180008A68: "protected: void __cdecl ShimLib::CString::ConcatCopy(int,unsigned short const * __ptr64,int,unsigned short const * __ptr64) __ptr64" ?ConcatCopy@CString@ShimLib@@IEAAXHPEBGH0@Z
0x18000B348: "PATH" ??_C@_19IJOJOJIB@?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x1800101E0: "unsigned __int64 NS_DisableDialogAPI::g_stShimId" ?g_stShimId@NS_DisableDialogAPI@@3_KA
0x180003A90: "unsigned long __cdecl NS_DisableTitanium::ThreadProc(void * __ptr64)" ?ThreadProc@NS_DisableTitanium@@YAKPEAX@Z
0x1800108B8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Sql2005MMCSnapin::g_pAPIHooks" ?g_pAPIHooks@NS_Sql2005MMCSnapin@@3PEAUtagHOOKAPI@@EA
0x180007CFC: "int __cdecl NS_Sql2005MMCSnapin::NotifyFn(unsigned long)" ?NotifyFn@NS_Sql2005MMCSnapin@@YAHK@Z
0x180001C78: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180006124: "unsigned long __cdecl NS_SproutService::StartServiceW(struct SC_HANDLE__ * __ptr64)" ?StartServiceW@NS_SproutService@@YAKPEAUSC_HANDLE__@@@Z
0x18000C3A0: "ConvertStringSecurityDescriptorT" ??_C@_0DF@EPNLHPOA@ConvertStringSecurityDescriptorT@
0x18000A860: "SproutService" ??_C@_1BM@LLEAPFKI@?$AAS?$AAp?$AAr?$AAo?$AAu?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x18000B158: "Sql2005Sp1Extractor" ??_C@_0BE@JPKJILAC@Sql2005Sp1Extractor?$AA@
0x1800109A0: "int NS_AuthentecFingerprint::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_AuthentecFingerprint@@3HA
0x180001E60: "__cdecl FindPESection" _FindPESection
0x180010180: "unsigned __int64 NS_SmartAccessFindWindow::g_stShimId" ?g_stShimId@NS_SmartAccessFindWindow@@3_KA
0x18000B770: "Status" ??_C@_1O@GGDILBNB@?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18000B910: "Unexpected exception thrown in T" ??_C@_0CP@HCLBHEJJ@Unexpected?5exception?5thrown?5in?5T@
0x18000D338: "COMHook_IEnumWbemClassObject_Nex" ??_C@_0CC@HBHKEHMH@COMHook_IEnumWbemClassObject_Nex@
0x180009834: StringCchCatW
0x180010840: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUhkvxrurxUlyquivUznwGEUkivxlnkOlyq@AcSpecfc" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUzkkxlnkzgUhsrnhUhkvxrurxUlyquivUznwGEUkivxlnkOlyq@AcSpecfc
0x1800109C8: "struct HINSTANCE__ * __ptr64 __ptr64 ShimLib::g_hinstDll" ?g_hinstDll@ShimLib@@3PEAUHINSTANCE__@@EA
0x1800101A0: "unsigned __int64 NS_NvidiaLPAC::g_stShimId" ?g_stShimId@NS_NvidiaLPAC@@3_KA
0x18000C570: "D:(A;CIOI;GA;;;AC)(A;CIOI;GA;;;S" ??_C@_1FG@CMNBLLJH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS@
0x180010930: "int NS_NitroPDFPro9::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_NitroPDFPro9@@3HA
0x18000EAEC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800108D8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_SproutService::g_pAPIHooks" ?g_pAPIHooks@NS_SproutService@@3PEAUtagHOOKAPI@@EA
0x18000B678: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18000B090: "NitroPDFPro9" ??_C@_0N@LFMPKFPI@NitroPDFPro9?$AA@
0x18000B8D0: "Registry information incomplete," ??_C@_0DN@FKEAFMI@Registry?5information?5incomplete?0@
0x180002A30: "struct HINSTANCE__ * __ptr64 __cdecl NS_AuthentecFingerprint::APIHook_LoadLibraryA(char const * __ptr64)" ?APIHook_LoadLibraryA@NS_AuthentecFingerprint@@YAPEAUHINSTANCE__@@PEBD@Z
0x180010140: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000A3F0: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x18000D420: "NS_Sql2005::COMHook_IWbemClassOb" ??_C@_0CJ@NDFGIOME@NS_Sql2005?3?3COMHook_IWbemClassOb@
0x18000B708: "WSCDisplayName" ??_C@_1BO@HIBGKLDH@?$AAW?$AAS?$AAC?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000D220: "[LoadPerfCounterTextStringsW] ap" ??_C@_0EO@NGBFLFEH@?$FLLoadPerfCounterTextStringsW?$FN?5ap@
0x18000BAC0: "\dwwin.exe " ??_C@_1BI@EEDOHGOF@?$AA?2?$AAd?$AAw?$AAw?$AAi?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?$AA@
0x18001082C: "int NS_AuthentecFingerprint::g_bSubshimUsed" ?g_bSubshimUsed@NS_AuthentecFingerprint@@3HA
0x18000171C: "__cdecl CRT_INIT" _CRT_INIT
0x18000A1F0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180010100: "char * __ptr64 __ptr64 NS_DWmigration::g_szCommandLine" ?g_szCommandLine@NS_DWmigration@@3PEADEA
0x18001080C: "int NS_NitroPDFPro9::g_bSubshimUsed" ?g_bSubshimUsed@NS_NitroPDFPro9@@3HA
0x1800077E4: "public: __cdecl NS_Sql2005MMCSnapin::AutoShim::~AutoShim(void) __ptr64" ??1AutoShim@NS_Sql2005MMCSnapin@@QEAA@XZ
0x18000A278: "__cdecl _imp_TlsGetValue" __imp_TlsGetValue
0x180001BF6: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180010098: "char * __ptr64 __ptr64 NS_Sql2005SetupComputerName::g_szCommandLine" ?g_szCommandLine@NS_Sql2005SetupComputerName@@3PEADEA
0x180007970: "long __cdecl NS_Sql2005MMCSnapin::COMHook_ISqlManager_GetSnapinDescription(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?COMHook_ISqlManager_GetSnapinDescription@NS_Sql2005MMCSnapin@@YAJPEAXPEAPEAG@Z
0x1800077B4: "public: __cdecl NS_Sql2005MMCSnapin::AutoShim::AutoShim(void) __ptr64" ??0AutoShim@NS_Sql2005MMCSnapin@@QEAA@XZ
0x1800023D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005A00: "struct HWND__ * __ptr64 __cdecl NS_SmartAccessFindWindow::APIHook_FindWindowW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?APIHook_FindWindowW@NS_SmartAccessFindWindow@@YAPEAUHWND__@@PEBG0@Z
0x18000A138: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x18000D870: "Common" ??_C@_06POMJKEPM@Common?$AA@
0x18000B290: "WriteValueToRegistry: failed to " ??_C@_0EC@HDIBHMDK@WriteValueToRegistry?3?5failed?5to?5@
0x1800109B4: "unsigned long NS_NitroPDFPro9::g_pcbNeeded" ?g_pcbNeeded@NS_NitroPDFPro9@@3KA
0x18000B9F8: "NS_DisableTitanium::InitializeHo" ??_C@_0CJ@CPAPPOHK@NS_DisableTitanium?3?3InitializeHo@
0x18000B5C0: "SOFTWARE\TrendMicro\Vizor" ??_C@_1DE@DDENNECI@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAT?$AAr?$AAe?$AAn?$AAd?$AAM?$AAi?$AAc?$AAr?$AAo?$AA?2?$AAV?$AAi?$AAz?$AAo?$AAr?$AA?$AA@
0x18000B0A0: "NvidiaLPAC" ??_C@_0L@GOPEIEIJ@NvidiaLPAC?$AA@
0x18000B420: "SOFTWARE\TrendMicro\UniClient\1\" ??_C@_1EI@GBFCGBBI@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAT?$AAr?$AAe?$AAn?$AAd?$AAM?$AAi?$AAc?$AAr?$AAo?$AA?2?$AAU?$AAn?$AAi?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?2?$AA1?$AA?2@
0x180002AE0: "struct tagHOOKAPI * __ptr64 __cdecl NS_AuthentecFingerprint::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_AuthentecFingerprint@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000864C: "public: __cdecl ShimLib::CString::CString(unsigned short const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBG@Z
0x180002930: "public: __cdecl ShimLib::CString::CString(char const * __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@PEBD@Z
0x180010818: "int NS_FCS::g_bSubshimUsed" ?g_bSubshimUsed@NS_FCS@@3HA
0x18000A270: "__cdecl _imp_TlsAlloc" __imp_TlsAlloc
0x18000A946: "" ??_C@_00CNPNBAHC@?$AA@
0x18000C798: "GetDriveTypeW" ??_C@_0O@FKPIFBDG@GetDriveTypeW?$AA@
0x18000BC38: "NS_FCS::APIHook_MsiEnumRelatedPr" ??_C@_0CI@JKEBOIID@NS_FCS?3?3APIHook_MsiEnumRelatedPr@
0x18000D450: "SuiteMask" ??_C@_1BE@BGLDFAGD@?$AAS?$AAu?$AAi?$AAt?$AAe?$AAM?$AAa?$AAs?$AAk?$AA?$AA@
0x18000BAD8: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18000B05C: "FCS" ??_C@_03IDIOBKAM@FCS?$AA@
0x18000CC98: "WindowsAuthentication" ??_C@_1CM@HFFBENLJ@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800089E4: "protected: void __cdecl ShimLib::CString::AssignCopy(int,unsigned short const * __ptr64) __ptr64" ?AssignCopy@CString@ShimLib@@IEAAXHPEBG@Z
0x18000A6E8: "DWmigration" ??_C@_1BI@PNAKKBEO@?$AAD?$AAW?$AAm?$AAi?$AAg?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000A3D8: "__cdecl _imp_wcschr" __imp_wcschr
0x180002040: "struct tagHOOKAPI * __ptr64 __cdecl NS_ExchangeConfigSetup::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_ExchangeConfigSetup@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000B6A0: "CtrlExeActionType" ??_C@_1CE@HIIDKKMO@?$AAC?$AAt?$AAr?$AAl?$AAE?$AAx?$AAe?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000BBF0: "Error: CString error while apply" ??_C@_0ED@FJJIIDFG@Error?3?5CString?5error?5while?5apply@
0x180005D00: "struct tagHOOKAPI * __ptr64 __cdecl NS_SproutService::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_SproutService@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000CC30: "StdRegProv" ??_C@_1BG@JLIBPOEA@?$AAS?$AAt?$AAd?$AAR?$AAe?$AAg?$AAP?$AAr?$AAo?$AAv?$AA?$AA@
0x18000A488: ole32_NULL_THUNK_DATA
0x18000CEC8: "NS_Sql2005::COMHook_IWbemLocator" ??_C@_0CP@HFACMDOI@NS_Sql2005?3?3COMHook_IWbemLocator@
0x18000A498: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000A3C8: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180005320: "long __cdecl NS_OneKeyRecovery::APIHook_RegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?APIHook_RegEnumKeyExW@NS_OneKeyRecovery@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x18000A298: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000CE18: "IWbemServices::ExecMethod" ??_C@_0BK@MMDNJJKE@IWbemServices?3?3ExecMethod?$AA@
0x180010998: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DisableDialogAPI::g_pAPIHooks" ?g_pAPIHooks@NS_DisableDialogAPI@@3PEAUtagHOOKAPI@@EA
0x18000BC70: "Error: FCS could not convert lpP" ??_C@_0HP@BMDIPBKC@Error?3?5FCS?5could?5not?5convert?5lpP@
0x18000D6D0: "NS_Sql2005SetupComputerName::Ini" ??_C@_0DC@JKLKFCNE@NS_Sql2005SetupComputerName?3?3Ini@
0x180010150: "unsigned __int64 NS_TerminateZTEFileAutExe::g_stShimId" ?g_stShimId@NS_TerminateZTEFileAutExe@@3_KA
0x180001E43: "__cdecl XcptFilter" _XcptFilter
0x18000A4A0: "__cdecl _xc_a" __xc_a
0x18000A3E0: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18000A730: "IntelGraphicsCPL" ??_C@_1CC@HNBLJDP@?$AAI?$AAn?$AAt?$AAe?$AAl?$AAG?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AAs?$AAC?$AAP?$AAL?$AA?$AA@
0x18000A198: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x18000A800: "SierraWirelessHideCDROM" ??_C@_1DA@IOKHJFIC@?$AAS?$AAi?$AAe?$AAr?$AAr?$AAa?$AAW?$AAi?$AAr?$AAe?$AAl?$AAe?$AAs?$AAs?$AAH?$AAi?$AAd?$AAe?$AAC?$AAD?$AAR?$AAO?$AAM?$AA?$AA@
0x180009B34: "unsigned short * __ptr64 * __ptr64 __cdecl ShimLib::_CommandLineToArgvW(unsigned short const * __ptr64,int * __ptr64)" ?_CommandLineToArgvW@ShimLib@@YAPEAPEAGPEBGPEAH@Z
0x180009240: "public: __cdecl ShimLib::AppAndCommandLine::AppAndCommandLine(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ??0AppAndCommandLine@ShimLib@@QEAA@PEBG0@Z
0x18000C030: "O:BAG:BAD:(A;;0xb;;;WD)(A;;0xb;;" ??_C@_1BEI@CDFIPCLE@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAb?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAb?$AA?$DL?$AA?$DL@
0x180005CA0: "int __cdecl NS_SproutService::APIHook_SetServiceStatus(struct SERVICE_STATUS_HANDLE__ * __ptr64,struct _SERVICE_STATUS * __ptr64)" ?APIHook_SetServiceStatus@NS_SproutService@@YAHPEAUSERVICE_STATUS_HANDLE__@@PEAU_SERVICE_STATUS@@@Z
0x18000CBE8: "ASPNET" ??_C@_1O@CHOOENPO@?$AAA?$AAS?$AAP?$AAN?$AAE?$AAT?$AA?$AA@
0x18000CD30: "System\CurrentControlSet\Service" ??_C@_1FG@ECEPDMDO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18000A2A0: "__cdecl _imp_FindClose" __imp_FindClose
0x180008F68: "protected: static void __cdecl ShimLib::CString::Release(class ShimLib::CStringData<unsigned short> * __ptr64)" ?Release@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x180007F60: "struct tagHOOKAPI * __ptr64 __cdecl NS_Sql2005SetupComputerName::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Sql2005SetupComputerName@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000A830: "SmartAccessFindWindow" ??_C@_1CM@DPPLCDFG@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAF?$AAi?$AAn?$AAd?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?$AA@
0x1800045D0: StringCchCopyW
0x180010884: "int NS_TerminateZTEFileAutExe::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_TerminateZTEFileAutExe@@3HA
0x180010190: "unsigned __int64 NS_OneKeyRecovery::g_stShimId" ?g_stShimId@NS_OneKeyRecovery@@3_KA
0x18000B238: "NS_DisableDialogAPI::InitializeH" ??_C@_0CK@GNFFJFLA@NS_DisableDialogAPI?3?3InitializeH@
0x18000EA08: "__cdecl CTA1?AVCStringError@CString@ShimLib@@" _CTA1?AVCStringError@CString@ShimLib@@
0x18000D800: "[AppAndCommandLineT::Set] BEFORE" ??_C@_0DB@FJJNEBKH@?$FLAppAndCommandLineT?3?3Set?$FN?5BEFORE@
0x180008720: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(class ShimLib::CString const & __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@AEBV01@@Z
0x18000B860: "Cannot set necessary environment" ??_C@_0EI@EKAPKNP@Cannot?5set?5necessary?5environment@
0x18000D658: "NS_Sql2005Sp1Extractor::Initiali" ??_C@_0CN@OEBICHKP@NS_Sql2005Sp1Extractor?3?3Initiali@
0x18000C6F0: "Windows Rollback" ??_C@_1CC@CEEHOGMO@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAR?$AAo?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180006180: "unsigned long __cdecl NS_SproutService::StopService(struct SC_HANDLE__ * __ptr64)" ?StopService@NS_SproutService@@YAKPEAUSC_HANDLE__@@@Z
0x180008E50: "public: unsigned long __cdecl ShimLib::CString::GetSystemDirectoryW(void) __ptr64" ?GetSystemDirectoryW@CString@ShimLib@@QEAAKXZ
0x1800107E8: "int NS_Sql2005SetupComputerName::g_bSubshimUsed" ?g_bSubshimUsed@NS_Sql2005SetupComputerName@@3HA
0x18000BD20: "NS_FCS::InitializeHooksMulti" ??_C@_0BN@BNFCFNDP@NS_FCS?3?3InitializeHooksMulti?$AA@
0x18000A3B8: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18000CB18: "SetPinnedKeyboard returning stat" ??_C@_0CI@OHLFHAAG@SetPinnedKeyboard?5returning?5stat@
0x18000B8A8: "NS_DisableTitanium::TMChangeStat" ??_C@_0CD@HLOEHKMP@NS_DisableTitanium?3?3TMChangeStat@
0x18000EA18: "__stdcall CT??_R0?AVCStringError@CString@ShimLib@@" _CT??_R0?AVCStringError@CString@ShimLib@@@81
0x180002396: memcpy
0x18000B728: "WSCCompanyName" ??_C@_1BO@JNBPNACN@?$AAW?$AAS?$AAC?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000D070: "system32\inetsrv\appcmd.exe set " ??_C@_1OG@CJNEKGGL@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAn?$AAe?$AAt?$AAs?$AAr?$AAv?$AA?2?$AAa?$AAp?$AAp?$AAc?$AAm?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAs?$AAe?$AAt?$AA?5@
0x18000A758: "IntelGraphicsLPAC" ??_C@_1CE@COFHJJEF@?$AAI?$AAn?$AAt?$AAe?$AAl?$AAG?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AAs?$AAL?$AAP?$AAA?$AAC?$AA?$AA@
0x18000BD40: "MSI.DLL" ??_C@_07FNOEHFIG@MSI?4DLL?$AA@
0x18000D510: IID_IEnumWbemClassObject
0x180010918: "struct tagHOOKAPI * __ptr64 __ptr64 NS_OfficeMetricsLie::g_pAPIHooks" ?g_pAPIHooks@NS_OfficeMetricsLie@@3PEAUtagHOOKAPI@@EA
0x180002308: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180010824: "int NS_DisableTitanium::g_bSubshimUsed" ?g_bSubshimUsed@NS_DisableTitanium@@3HA
0x18000A170: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000C828: "FindWindowW" ??_C@_0M@GGMMHJAL@FindWindowW?$AA@
0x180010890: "int NS_Sql2005Sp1Extractor::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Sql2005Sp1Extractor@@3HA
0x180006360: "long __cdecl NS_Sql2005::COMHook_IEnumWbemClassObject_Next(void * __ptr64,long,unsigned long,struct IWbemClassObject * __ptr64 * __ptr64,unsigned long * __ptr64)" ?COMHook_IEnumWbemClassObject_Next@NS_Sql2005@@YAJPEAXJKPEAPEAUIWbemClassObject@@PEAK@Z
0x18000A430: "__cdecl _imp_memset" __imp_memset
0x180010198: "unsigned __int64 NS_OfficeMetricsLie::g_stShimId" ?g_stShimId@NS_OfficeMetricsLie@@3_KA
0x18000201F: "__cdecl initterm" _initterm
0x18000CA60: "Software\Microsoft\TabletTip\1.7" ??_C@_1EC@IOIHKLGF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAT?$AAa?$AAb?$AAl?$AAe?$AAt?$AAT?$AAi?$AAp?$AA?2?$AA1?$AA?4?$AA7@
0x1800107C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000A1C8: "__cdecl _imp_Sleep" __imp_Sleep
0x18000A4C0: "__cdecl _xi_z" __xi_z
0x180004AB0: "int __cdecl NS_NitroPDFPro9::APIHook_ClosePrinter(void * __ptr64)" ?APIHook_ClosePrinter@NS_NitroPDFPro9@@YAHPEAX@Z
0x18000A218: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000B138: "Sql2005SetupComputerName" ??_C@_0BJ@OIBFFKLI@Sql2005SetupComputerName?$AA@
0x180010888: "struct tagHOOKAPI * __ptr64 __ptr64 NS_TerminateZTEFileAutExe::g_pAPIHooks" ?g_pAPIHooks@NS_TerminateZTEFileAutExe@@3PEAUtagHOOKAPI@@EA
0x18000D638: IID_ISqlManager
0x18000A2E0: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x180001E37: "__cdecl _C_specific_handler" __C_specific_handler
0x18000C6B0: "Type" ??_C@_19BIEPDBPA@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800107E4: "int NS_Sql2005Sp1Extractor::g_bSubshimUsed" ?g_bSubshimUsed@NS_Sql2005Sp1Extractor@@3HA
0x1800043F0: "enum tagINSTALLSTATE __cdecl NS_FCS::APIHook_MsiQueryProductStateW(unsigned short const * __ptr64)" ?APIHook_MsiQueryProductStateW@NS_FCS@@YA?AW4tagINSTALLSTATE@@PEBG@Z
0x18000B028: "DisableDialogAPI" ??_C@_0BB@BDDKIAKL@DisableDialogAPI?$AA@
0x18000C9B8: "OpenService failed with %08x" ??_C@_0BN@EDOIJMKI@OpenService?5failed?5with?5?$CF08x?$AA@
0x1800023A2: memmove
0x18000A248: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800108F0: "int NS_SierraWirelessHideCDROM::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_SierraWirelessHideCDROM@@3HA
0x180010000: "char * __ptr64 __ptr64 NS_ExchangeConfigSetup::g_szCommandLine" ?g_szCommandLine@NS_ExchangeConfigSetup@@3PEADEA
0x18000EB50: "__cdecl _IMPORT_DESCRIPTOR_msi" __IMPORT_DESCRIPTOR_msi
0x1800107F8: "int NS_SmartAccessFindWindow::g_bSubshimUsed" ?g_bSubshimUsed@NS_SmartAccessFindWindow@@3HA
0x180010108: "char * __ptr64 __ptr64 NS_DisableTitanium::g_szCommandLine" ?g_szCommandLine@NS_DisableTitanium@@3PEADEA
0x18000A148: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180006300: "int __cdecl NS_Sql2005::APIHook_LoadPerfCounterTextStringsW(unsigned short * __ptr64,int)" ?APIHook_LoadPerfCounterTextStringsW@NS_Sql2005@@YAHPEAGH@Z
0x18000D540: CLSID_WbemLocator
0x18000A320: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000C8E0: "Successfully stopped service" ??_C@_0BN@EPDJNALD@Successfully?5stopped?5service?$AA@
0x1800022A4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800086B4: "public: __cdecl ShimLib::CString::~CString(void) __ptr64" ??1CString@ShimLib@@QEAA@XZ
0x180008794: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator=(unsigned short const * __ptr64) __ptr64" ??4CString@ShimLib@@QEAAAEBV01@PEBG@Z
0x180005FE4: "unsigned long __cdecl NS_SproutService::SetPinnedKeyboard(void)" ?SetPinnedKeyboard@NS_SproutService@@YAKXZ
0x18000BBD0: "gpmc.msc" ??_C@_1BC@JLNDKBJO@?$AAg?$AAp?$AAm?$AAc?$AA?4?$AAm?$AAs?$AAc?$AA?$AA@
0x18000A980: "NotifyFn returned FALSE, fail lo" ??_C@_0CI@HFOCFJJ@NotifyFn?5returned?5FALSE?0?5fail?5lo@
0x180003CE8: "int __cdecl NS_DWmigration::DoNotShimDW(void)" ?DoNotShimDW@NS_DWmigration@@YAHXZ
0x18000CAA8: "TipPinnedToMonitor" ??_C@_1CG@EHNOEENH@?$AAT?$AAi?$AAp?$AAP?$AAi?$AAn?$AAn?$AAe?$AAd?$AAT?$AAo?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?$AA@
0x18000D360: "IEnumWbemClassObject::Next hooke" ??_C@_0CD@CJDDIJKJ@IEnumWbemClassObject?3?3Next?5hooke@
0x18000B268: "USER32.DLL" ??_C@_0L@NDEGIDAG@USER32?4DLL?$AA@
0x18000A440: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18000D708: "MsiGetPropertyW" ??_C@_0BA@CMGAOAMJ@MsiGetPropertyW?$AA@
0x18000A190: "__cdecl _imp_SetEnvironmentVariableW" __imp_SetEnvironmentVariableW
0x180003EB4: "int __cdecl NS_DWmigration::NotifyFn(unsigned long)" ?NotifyFn@NS_DWmigration@@YAHK@Z
0x18000A7B8: "OfficeMetricsLie" ??_C@_1CC@BLNGDFOM@?$AAO?$AAf?$AAf?$AAi?$AAc?$AAe?$AAM?$AAe?$AAt?$AAr?$AAi?$AAc?$AAs?$AAL?$AAi?$AAe?$AA?$AA@
0x1800108F8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_SierraWirelessHideCDROM::g_pAPIHooks" ?g_pAPIHooks@NS_SierraWirelessHideCDROM@@3PEAUtagHOOKAPI@@EA
0x18000A328: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000CDC0: "SYSTEM\CurrentControlSet\Service" ??_C@_1FG@BNPGEJOD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x180001E4F: "__cdecl amsg_exit" _amsg_exit
0x18000A370: apphelp_NULL_THUNK_DATA
0x18000A358: "__cdecl _imp_SE_ShimDPF" __imp_SE_ShimDPF
0x18000A2C0: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x18000B390: "NS_DisableTitanium::CreateWscCtr" ??_C@_0CJ@JOBMMGCP@NS_DisableTitanium?3?3CreateWscCtr@
0x18000CB80: "software\microsoft\inetstp\compo" ??_C@_1EM@OAPDLNDA@?$AAs?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAi?$AAn?$AAe?$AAt?$AAs?$AAt?$AAp?$AA?2?$AAc?$AAo?$AAm?$AAp?$AAo@
0x180010810: "int NS_IntelGraphicsLPAC::g_bSubshimUsed" ?g_bSubshimUsed@NS_IntelGraphicsLPAC@@3HA
0x18000CA00: "Failed to start service with %08" ??_C@_0CC@DIHCHILI@Failed?5to?5start?5service?5with?5?$CF08@
0x18000C448: "EnumFormsW" ??_C@_0L@DKPJIAKK@EnumFormsW?$AA@
0x18000D550: "COMHook_ISqlManager_GetSnapinDes" ??_C@_0CJ@OKBLPBGD@COMHook_ISqlManager_GetSnapinDes@
0x18000A880: "Sql2005" ??_C@_1BA@ICKJLFMA@?$AAS?$AAq?$AAl?$AA2?$AA0?$AA0?$AA5?$AA?$AA@
0x18000AF90: Microsoft_Windows_Application_ExperienceKeywords
0x18000CAF0: "NS_SproutService::SetPinnedKeybo" ??_C@_0CE@DKDEBMM@NS_SproutService?3?3SetPinnedKeybo@
0x180010940: "int NS_IntelGraphicsLPAC::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_IntelGraphicsLPAC@@3HA
0x18000BB08: "NS_DWmigration::InitializeHooksM" ??_C@_0CF@NECMFGEI@NS_DWmigration?3?3InitializeHooksM@
0x1800047A0: "int __cdecl NS_IntelGraphicsLPAC::APIHook_ConvertStringSecurityDescriptorToSecurityDescriptorW(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_ConvertStringSecurityDescriptorToSecurityDescriptorW@NS_IntelGraphicsLPAC@@YAHPEBGKPEAPEAXPEAK@Z
0x18000C7A8: "GetDriveTypeA" ??_C@_0O@EGGAOEOB@GetDriveTypeA?$AA@
0x18000C360: "NS_IntelGraphicsLPAC::Initialize" ??_C@_0CL@EEPLHOG@NS_IntelGraphicsLPAC?3?3Initialize@
0x18000A280: "__cdecl _imp_TlsSetValue" __imp_TlsSetValue
0x18000D7C0: "")" ??_C@_02HPDBCLII@?$CC?$CJ?$AA@
0x18000BCF0: "Error: CString error while apply" ??_C@_0CO@BFABEMCK@Error?3?5CString?5error?5while?5apply@
0x18000BAE8: "__COMPAT_LAYER" ??_C@_1BO@HDDLKMHN@?$AA_?$AA_?$AAC?$AAO?$AAM?$AAP?$AAA?$AAT?$AA_?$AAL?$AAA?$AAY?$AAE?$AAR?$AA?$AA@
0x18000A9B0: "%windir%\System32\Inetsrv\Config" ??_C@_1HO@HNENPCHJ@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAI?$AAn?$AAe?$AAt?$AAs?$AAr?$AAv?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg@
0x18000B520: "WSCDisplayName_AV" ??_C@_1CE@JHHMMAOE@?$AAW?$AAS?$AAC?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA_?$AAA?$AAV?$AA?$AA@
0x180009018: "protected: static int __cdecl ShimLib::CString::SafeStrlen(unsigned short const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBG@Z
0x180010208: "protected: static int * ShimLib::CString::_afxInitData" ?_afxInitData@CString@ShimLib@@1PAHA
0x180004660: "struct tagHOOKAPI * __ptr64 __cdecl NS_IntelGraphicsCPL::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_IntelGraphicsCPL@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000D7D8: "ShimLib::GetHookAPIs" ??_C@_0BF@NHNKNNIM@ShimLib?3?3GetHookAPIs?$AA@
0x18000A338: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180010088: "char * __ptr64 __ptr64 NS_TerminateZTEFileAutExe::g_szCommandLine" ?g_szCommandLine@NS_TerminateZTEFileAutExe@@3PEADEA
0x1800069A0: "void __cdecl NS_Sql2005::GrantReportServerPermissions(void)" ?GrantReportServerPermissions@NS_Sql2005@@YAXXZ
0x1800108A8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Sql2005SetupComputerName::g_pAPIHooks" ?g_pAPIHooks@NS_Sql2005SetupComputerName@@3PEAUtagHOOKAPI@@EA
0x1800101D0: "unsigned __int64 NS_DWmigration::g_stShimId" ?g_stShimId@NS_DWmigration@@3_KA
0x18000D5C8: "NS_Sql2005MMCSnapin::InitializeH" ??_C@_0CK@BGJOPBK@NS_Sql2005MMCSnapin?3?3InitializeH@
0x180006590: "long __cdecl NS_Sql2005::COMHook_IWbemLocator_ConnectServer(void * __ptr64,unsigned short * __ptr64 const,unsigned short * __ptr64 const,unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,unsigned short * __ptr64 const,struct IWbemContext * __ptr64,struct IWbemServices * __ptr64 * __ptr64)" ?COMHook_IWbemLocator_ConnectServer@NS_Sql2005@@YAJPEAXQEAG111J1PEAUIWbemContext@@PEAPEAUIWbemServices@@@Z
0x18000A208: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000B354: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x1800016C0: "__int64 __cdecl NS_DisableDialogAPI::APIHook_DialogBoxParamW(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,struct HWND__ * __ptr64,__int64 (__cdecl*)(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64),__int64)" ?APIHook_DialogBoxParamW@NS_DisableDialogAPI@@YA_JPEAUHINSTANCE__@@PEBGPEAUHWND__@@P6A_J2I_K_J@Z4@Z
0x18000D878: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x1800107B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180008F94: "public: void __cdecl ShimLib::CString::ReleaseBuffer(int) __ptr64" ?ReleaseBuffer@CString@ShimLib@@QEAAXH@Z
0x1800108E0: "int NS_SmartAccessFindWindow::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_SmartAccessFindWindow@@3HA
0x180002260: DllMain
0x18000B050: "DWmigration" ??_C@_0M@KCOLEFGK@DWmigration?$AA@
0x180010168: "unsigned __int64 NS_Sql2005MMCSnapin::g_stShimId" ?g_stShimId@NS_Sql2005MMCSnapin@@3_KA
0x180010950: "int NS_IntelGraphicsCPL::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_IntelGraphicsCPL@@3HA
0x18000D270: "[LoadPerfCounterTextStringsW] ap" ??_C@_0DA@OLADNLMO@?$FLLoadPerfCounterTextStringsW?$FN?5ap@
0x18000CC10: "GetDWORDValue" ??_C@_1BM@JKKDNMOE@?$AAG?$AAe?$AAt?$AAD?$AAW?$AAO?$AAR?$AAD?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1800100E8: "char * __ptr64 __ptr64 NS_IntelGraphicsLPAC::g_szCommandLine" ?g_szCommandLine@NS_IntelGraphicsLPAC@@3PEADEA
0x18000A398: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000A400: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800100A0: "char * __ptr64 __ptr64 NS_Sql2005MMCSnapin::g_szCommandLine" ?g_szCommandLine@NS_Sql2005MMCSnapin@@3PEADEA
0x18000A468: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000BC60: "GPMC.msc found" ??_C@_0P@JBHDIJAO@GPMC?4msc?5found?$AA@
0x180008460: McTemplateU0ssss
0x18000C860: "NS_SproutService::StopService" ??_C@_0BO@MPBLMDFD@NS_SproutService?3?3StopService?$AA@
0x18000A2F0: KERNEL32_NULL_THUNK_DATA
0x18000A230: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18000D718: "(ShimLib) Mitigation Success" ??_C@_0BN@IKJIAMOM@?$CIShimLib?$CJ?5Mitigation?5Success?$AA@
0x18000CCE8: "DefaultDocument" ??_C@_1CA@GNLKCMMO@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18000D748: "[ApiName] Mitigation Success" ??_C@_0BN@JDEBLOLC@?$FLApiName?$FN?5Mitigation?5Success?$AA@
0x18000A1A8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007A10: "long __cdecl NS_Sql2005MMCSnapin::COMHook_ISqlManager_GetSnapinVersion(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?COMHook_ISqlManager_GetSnapinVersion@NS_Sql2005MMCSnapin@@YAJPEAXPEAPEAG@Z
0x180010130: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002280: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000A640: "Application Specific Shims unini" ??_C@_0CK@GINCOHHO@Application?5Specific?5Shims?5unini@
0x1800078D0: "long __cdecl NS_Sql2005MMCSnapin::COMHook_ISqlManager_GetProvider(void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?COMHook_ISqlManager_GetProvider@NS_Sql2005MMCSnapin@@YAJPEAXPEAPEAG@Z
0x180008FE0: "protected: static int __cdecl ShimLib::CString::SafeStrlen(char const * __ptr64)" ?SafeStrlen@CString@ShimLib@@KAHPEBD@Z
0x18000CC48: "uValue" ??_C@_1O@HNLIOFAF@?$AAu?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18000A728: "FCS" ??_C@_17CFFLDDHC@?$AAF?$AAC?$AAS?$AA?$AA@
0x18000D738: "ApiName" ??_C@_07IAKFNNID@ApiName?$AA@
0x180010120: "protected: static unsigned short const * __ptr64 const __ptr64 ShimLib::CString::_afxPchNil" ?_afxPchNil@CString@ShimLib@@1PEBGEB
0x18000EB28: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18000B748: "WSCProductVersion" ??_C@_1CE@GMHJLNFN@?$AAW?$AAS?$AAC?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180004BB0: "int __cdecl NS_NitroPDFPro9::Initialize(void)" ?Initialize@NS_NitroPDFPro9@@YAHXZ
0x18000A250: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000835C: "int __cdecl NS_TerminateZTEFileAutExe::NotifyFn(unsigned long)" ?NotifyFn@NS_TerminateZTEFileAutExe@@YAHK@Z
0x18000A1D0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180003BB4: "void __cdecl NS_DisableTitanium::WriteValueToRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?WriteValueToRegistry@NS_DisableTitanium@@YAXPEAUHKEY__@@PEBG1K@Z
0x180001010: "int __cdecl ShimLib::NotifyShimsEx(int,unsigned __int64)" ?NotifyShimsEx@ShimLib@@YAHH_K@Z
0x18000B308: "WriteValueToRegistry: cannot ope" ??_C@_0DO@HJFEHLHN@WriteValueToRegistry?3?5cannot?5ope@
0x1800085A0: "void __cdecl ShimLib::NotifyShims(int,unsigned __int64)" ?NotifyShims@ShimLib@@YAXH_K@Z
0x18000C990: "TabletInputService" ??_C@_1CG@CAPMKCDK@?$AAT?$AAa?$AAb?$AAl?$AAe?$AAt?$AAI?$AAn?$AAp?$AAu?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x180001F10: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000A188: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x18000A160: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x180010170: "unsigned __int64 NS_Sql2005::g_stShimId" ?g_stShimId@NS_Sql2005@@3_KA
0x180002FF0: "int __cdecl NS_DisableTitanium::CreateWscCtrlProcess(unsigned short const * __ptr64)" ?CreateWscCtrlProcess@NS_DisableTitanium@@YAHPEBG@Z
0x18001081C: "int NS_ExchangeConfigSetup::g_bSubshimUsed" ?g_bSubshimUsed@NS_ExchangeConfigSetup@@3HA
0x180010898: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Sql2005Sp1Extractor::g_pAPIHooks" ?g_pAPIHooks@NS_Sql2005Sp1Extractor@@3PEAUtagHOOKAPI@@EA
0x180005150: "int __cdecl NS_OfficeMetricsLie::APIHook_SystemParametersInfoA(unsigned int,unsigned int,void * __ptr64,unsigned int)" ?APIHook_SystemParametersInfoA@NS_OfficeMetricsLie@@YAHIIPEAXI@Z
0x1800100D0: "char * __ptr64 __ptr64 NS_OfficeMetricsLie::g_szCommandLine" ?g_szCommandLine@NS_OfficeMetricsLie@@3PEADEA
0x18000B7D8: "WSCHasProductNotifyUser" ??_C@_1DA@CNNFMJNO@?$AAW?$AAS?$AAC?$AAH?$AAa?$AAs?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x18000BAB4: "-c" ??_C@_15NMJMBAFJ@?$AA?9?$AAc?$AA?$AA@
0x180008DD8: "public: unsigned short * __ptr64 __cdecl ShimLib::CString::GetBuffer(int) __ptr64" ?GetBuffer@CString@ShimLib@@QEAAPEAGH@Z
0x18000A8B8: "Sql2005SetupComputerName" ??_C@_1DC@MPHNKFMA@?$AAS?$AAq?$AAl?$AA2?$AA0?$AA0?$AA5?$AAS?$AAe?$AAt?$AAu?$AAp?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180004440: "struct tagHOOKAPI * __ptr64 __cdecl NS_FCS::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_FCS@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000B1B8: "KERNEL32.DLL" ??_C@_0N@NHGLKGEC@KERNEL32?4DLL?$AA@
0x18000A448: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x1800100F8: "char * __ptr64 __ptr64 NS_FCS::g_szCommandLine" ?g_szCommandLine@NS_FCS@@3PEADEA
0x180008500: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::GetHookAPIs(char * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetHookAPIs@ShimLib@@YAPEAUtagHOOKAPI@@PEADPEAGPEAK@Z
0x180004100: "unsigned int __cdecl NS_FCS::APIHook_MsiEnumRelatedProductsW(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned short * __ptr64)" ?APIHook_MsiEnumRelatedProductsW@NS_FCS@@YAIPEBGKKPEAG@Z
0x18000AF60: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000A290: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000B010: "AuthentecFingerprint" ??_C@_0BF@NOEIMMOA@AuthentecFingerprint?$AA@
0x18000EB3C: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x180007168: "int __cdecl NS_Sql2005::IsIISInstalled(void * __ptr64,long (__cdecl*)(void * __ptr64,unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64),struct IWbemClassObject * __ptr64)" ?IsIISInstalled@NS_Sql2005@@YAHPEAXP6AJ0QEAG1JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAPEAU3@PEAPEAUIWbemCallResult@@@Z3@Z
0x180010880: Microsoft_Windows_Application_ExperienceEnableBits
0x180003630: "void __cdecl NS_DisableTitanium::TMChangeStatus(void)" ?TMChangeStatus@NS_DisableTitanium@@YAXXZ
0x18000A1B0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180005870: "struct tagHOOKAPI * __ptr64 __cdecl NS_SierraWirelessHideCDROM::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_SierraWirelessHideCDROM@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180003120: "struct tagHOOKAPI * __ptr64 __cdecl NS_DisableTitanium::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DisableTitanium@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000C838: "QueryServiceStatusEx failed with" ??_C@_0CG@OLMCFKKA@QueryServiceStatusEx?5failed?5with@
0x180001960: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000B968: "EnumProcesses failed with error " ??_C@_0CE@LGKPMEJM@EnumProcesses?5failed?5with?5error?5@
0x18000A3F8: "__cdecl _imp_iswspace" __imp_iswspace
0x18000A410: "__cdecl _imp__initterm" __imp__initterm
0x18000A350: "__cdecl _imp_SE_COM_Lookup" __imp_SE_COM_Lookup
0x18000A2B0: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x18000CBF8: "sValueName" ??_C@_1BG@LIPCOELB@?$AAs?$AAV?$AAa?$AAl?$AAu?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180010814: "int NS_IntelGraphicsCPL::g_bSubshimUsed" ?g_bSubshimUsed@NS_IntelGraphicsCPL@@3HA
0x18000916C: "void * __ptr64 __cdecl ShimLib::SafeMalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeMalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x180002970: "__int64 (__cdecl*__cdecl NS_AuthentecFingerprint::APIHook_GetProcAddress(struct HINSTANCE__ * __ptr64,char const * __ptr64))(void)" ?APIHook_GetProcAddress@NS_AuthentecFingerprint@@YAP6A_JXZPEAUHINSTANCE__@@PEBD@Z
0x180008B0C: "protected: void __cdecl ShimLib::CString::ConcatInPlace(int,unsigned short const * __ptr64) __ptr64" ?ConcatInPlace@CString@ShimLib@@IEAAXHPEBG@Z
0x1800100B8: "char * __ptr64 __ptr64 NS_SmartAccessFindWindow::g_szCommandLine" ?g_szCommandLine@NS_SmartAccessFindWindow@@3PEADEA
0x180008EB4: "public: unsigned long __cdecl ShimLib::CString::GetWindowsDirectoryW(void) __ptr64" ?GetWindowsDirectoryW@CString@ShimLib@@QEAAKXZ
0x1800101B0: "unsigned __int64 NS_IntelGraphicsLPAC::g_stShimId" ?g_stShimId@NS_IntelGraphicsLPAC@@3_KA
0x18000A238: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x18000D2A0: "COMHook_IWbemServices_CreateInst" ??_C@_0CJ@DDEGACBE@COMHook_IWbemServices_CreateInst@
0x18000A260: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x180010110: "char * __ptr64 __ptr64 NS_DisableDialogAPI::g_szCommandLine" ?g_szCommandLine@NS_DisableDialogAPI@@3PEADEA
0x18000C900: "StartService failed %08x" ??_C@_0BJ@FEBAHNGF@StartService?5failed?5?$CF08x?$AA@
0x180001050: "struct tagHOOKAPI * __ptr64 __cdecl ShimLib::InitializeHooksEx(unsigned long,unsigned short const * __ptr64,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksEx@ShimLib@@YAPEAUtagHOOKAPI@@KPEBGPEBDPEAK@Z
0x1800100A8: "char * __ptr64 __ptr64 NS_Sql2005::g_szCommandLine" ?g_szCommandLine@NS_Sql2005@@3PEADEA
0x18000C690: "%s\Description" ??_C@_1BO@OHEKIGIM@?$AA?$CF?$AAs?$AA?2?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18000EB00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000D3F8: "Disabling WEB SKU in OSProductSu" ??_C@_0CE@KBKKDCAC@Disabling?5WEB?5SKU?5in?5OSProductSu@
0x18000B790: "WSCIsCallCoInit" ??_C@_1CA@CLJCIAEM@?$AAW?$AAS?$AAC?$AAI?$AAs?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AA?$AA@
0x1800099A8: "long __cdecl ShimLib::RegQueryValueExW(class ShimLib::CString & __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?RegQueryValueExW@ShimLib@@YAJAEAVCString@1@PEAUHKEY__@@PEBG@Z
0x18000CC70: "WMICompatibility" ??_C@_1CC@GOPFNAJF@?$AAW?$AAM?$AAI?$AAC?$AAo?$AAm?$AAp?$AAa?$AAt?$AAi?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x18000D880: "[AppAndCommandLineT::Set] AFTER " ??_C@_0DB@ONAEMPMC@?$FLAppAndCommandLineT?3?3Set?$FN?5AFTER?5@
0x18000A948: "fdwReason(%d) pszCmdLine(%s)" ??_C@_0BN@BMJMMFGL@fdwReason?$CI?$CFd?$CJ?5pszCmdLine?$CI?$CFs?$CJ?$AA@
0x1800107A0: "__cdecl _onexitend" __onexitend
0x18000A2E8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18000D300: "NS_Sql2005::COMHook_IWbemService" ??_C@_0DF@LGJIJNBH@NS_Sql2005?3?3COMHook_IWbemService@
0x18000A490: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000D580: "COMHook_ISqlManager_GetProvider" ??_C@_0CA@FBFLOKJN@COMHook_ISqlManager_GetProvider?$AA@
0x180006770: "long __cdecl NS_Sql2005::COMHook_IWbemServices_ExecMethod(void * __ptr64,unsigned short * __ptr64 const,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IWbemClassObject * __ptr64,struct IWbemClassObject * __ptr64 * __ptr64,struct IWbemCallResult * __ptr64 * __ptr64)" ?COMHook_IWbemServices_ExecMethod@NS_Sql2005@@YAJPEAXQEAG1JPEAUIWbemContext@@PEAUIWbemClassObject@@PEAPEAU3@PEAPEAUIWbemCallResult@@@Z
0x18000A3A0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x18000B108: "SproutService" ??_C@_0O@FPMCMJLK@SproutService?$AA@
0x180001C40: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x18000A2A8: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18000D608: "SysAllocString" ??_C@_0P@DMOFHADO@SysAllocString?$AA@
0x18000A200: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000A348: "__cdecl _imp_SE_COM_HookObject" __imp_SE_COM_HookObject
0x18000B570: "WSCProductVersion_AV" ??_C@_1CK@KJNJGCAD@?$AAW?$AAS?$AAC?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA_?$AAA?$AAV?$AA?$AA@
0x18000C180: "O:BAG:BAD:(A;;CCDCSW;;;WD)(A;;CC" ??_C@_1HG@LHLKGLMI@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAS?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x18000D5F8: "OLEAUT32.DLL" ??_C@_0N@PPCDBEGP@OLEAUT32?4DLL?$AA@
0x180010970: "int NS_DWmigration::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DWmigration@@3HA
0x18000B648: "WscStatusController.exe" ??_C@_1DA@IJCKADBB@?$AAW?$AAs?$AAc?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800107D0: "int NS_ExchangeConfigSetup::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_ExchangeConfigSetup@@3HA
0x1800108E8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_SmartAccessFindWindow::g_pAPIHooks" ?g_pAPIHooks@NS_SmartAccessFindWindow@@3PEAUtagHOOKAPI@@EA
0x18000A4B0: "__cdecl _xi_a" __xi_a
0x18000C620: "SystemParametersInfoA" ??_C@_0BG@BAIBJNOF@SystemParametersInfoA?$AA@
0x180008600: "public: __cdecl ShimLib::CString::CString(class ShimLib::CString const & __ptr64) __ptr64" ??0CString@ShimLib@@QEAA@AEBV01@@Z
0x18000B040: "DisableTitanium" ??_C@_0BA@OIJFLNJL@DisableTitanium?$AA@
0x18000A1E0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000C750: "NS_SierraWirelessHideCDROM::Init" ??_C@_0DB@LHPGAEJN@NS_SierraWirelessHideCDROM?3?3Init@
0x1800033C8: "class ShimLib::CString __cdecl NS_DisableTitanium::ReadValueFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ReadValueFromRegistry@NS_DisableTitanium@@YA?AVCString@ShimLib@@PEAUHKEY__@@PEBG11@Z
0x18000B2D8: "NS_DisableTitanium::WriteValueTo" ??_C@_0CJ@HHOGBCAO@NS_DisableTitanium?3?3WriteValueTo@
0x18000216C: "long __cdecl NS_ExchangeConfigSetup::RestoreExchangeConfigFile(void)" ?RestoreExchangeConfigFile@NS_ExchangeConfigSetup@@YAJXZ
0x18000D468: "Disabling WEB SKU in SuiteMask" ??_C@_0BP@FLIBCDKC@Disabling?5WEB?5SKU?5in?5SuiteMask?$AA@
0x18000CF98: "NS_Sql2005::IISReset" ??_C@_0BF@DGNBFLNJ@NS_Sql2005?3?3IISReset?$AA@
0x1800108C8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_Sql2005::g_pAPIHooks" ?g_pAPIHooks@NS_Sql2005@@3PEAUtagHOOKAPI@@EA
0x18000AF78: AE_SHIM_API_SUCCESS_EVENT
0x1800108B0: "int NS_Sql2005MMCSnapin::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Sql2005MMCSnapin@@3HA
0x180009308: "public: int __cdecl ShimLib::AppAndCommandLine::GetAppnameAndCommandline(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?GetAppnameAndCommandline@AppAndCommandLine@ShimLib@@QEAAHPEBG0@Z
0x180008100: "int __cdecl NS_Sql2005SetupComputerName::NotifyFn(unsigned long)" ?NotifyFn@NS_Sql2005SetupComputerName@@YAHK@Z
0x180010938: "struct tagHOOKAPI * __ptr64 __ptr64 NS_NitroPDFPro9::g_pAPIHooks" ?g_pAPIHooks@NS_NitroPDFPro9@@3PEAUtagHOOKAPI@@EA
0x18000A480: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000B7B0: "UpToDate" ??_C@_1BC@EEGMDGNC@?$AAU?$AAp?$AAT?$AAo?$AAD?$AAa?$AAt?$AAe?$AA?$AA@
0x1800109B8: "unsigned char * __ptr64 __ptr64 NS_NitroPDFPro9::g_pForm" ?g_pForm@NS_NitroPDFPro9@@3PEAEEA
0x18000A150: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18000BD60: "MsiQueryProductStateW" ??_C@_0BG@IDDLHEOM@MsiQueryProductStateW?$AA@
0x1800087F4: "protected: void __cdecl ShimLib::CString::AllocBuffer(int) __ptr64" ?AllocBuffer@CString@ShimLib@@IEAAXH@Z
0x18000D160: "[LoadPerfCounterTextStringsW] Cr" ??_C@_0EF@FHBEDAKI@?$FLLoadPerfCounterTextStringsW?$FN?5Cr@
0x18000D7C8: "%S%s%s%s " ??_C@_09EAGPOLDP@?$CFS?$CFs?$CFs?$CFs?6?$AA@
0x1800083FC: McGenEventWrite
0x18000A360: "__cdecl _imp_SE_COM_AddHook" __imp_SE_COM_AddHook
0x18000BA24: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800107EC: "int NS_Sql2005MMCSnapin::g_bSubshimUsed" ?g_bSubshimUsed@NS_Sql2005MMCSnapin@@3HA
0x18000A450: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x1800100C8: "char * __ptr64 __ptr64 NS_OneKeyRecovery::g_szCommandLine" ?g_szCommandLine@NS_OneKeyRecovery@@3PEADEA
0x1800107C8: "__cdecl pRawDllMain" _pRawDllMain
0x18000A408: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000B060: "IntelGraphicsCPL" ??_C@_0BB@LLOEDMAG@IntelGraphicsCPL?$AA@
0x18000D838: "ShimLib::AppAndCommandLine::GetA" ??_C@_0DF@KOKEGPFD@ShimLib?3?3AppAndCommandLine?3?3GetA@
0x18000A2F8: "__cdecl _imp_OpenPrinterW" __imp_OpenPrinterW
0x180002910: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180004940: "struct tagHOOKAPI * __ptr64 __cdecl NS_IntelGraphicsLPAC::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_IntelGraphicsLPAC@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180010968: "struct tagHOOKAPI * __ptr64 __ptr64 NS_FCS::g_pAPIHooks" ?g_pAPIHooks@NS_FCS@@3PEAUtagHOOKAPI@@EA
0x18000A968: "pdwHookCount(%d)" ??_C@_0BB@GEMBACLN@pdwHookCount?$CI?$CFd?$CJ?$AA@
0x18000D3B8: "COMHook_IWbemClassObject_Get" ??_C@_0BN@LBKBPPJM@COMHook_IWbemClassObject_Get?$AA@
0x18000A000: "const type_info::`vftable'" ??_7type_info@@6B@
0x18000A620: "NotifyFn" ??_C@_08LOJNPBNJ@NotifyFn?$AA@
0x18000A168: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x180001C10: "__cdecl _security_check_cookie" __security_check_cookie
0x18000B808: "WantsWSCNotify" ??_C@_1BO@CAFMPNGK@?$AAW?$AAa?$AAn?$AAt?$AAs?$AAW?$AAS?$AAC?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x18000B278: "DialogBoxParamW" ??_C@_0BA@EINFLHMP@DialogBoxParamW?$AA@
0x18000A4A8: "__cdecl _xc_z" __xc_z
0x18000912C: "void * __ptr64 __cdecl ShimLib::SafeCalloc(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?SafeCalloc@ShimLib@@YAPEAX_K0PEA_K@Z
0x18000A180: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180010090: "char * __ptr64 __ptr64 NS_Sql2005Sp1Extractor::g_szCommandLine" ?g_szCommandLine@NS_Sql2005Sp1Extractor@@3PEADEA
0x18000B1D8: "LoadLibraryA" ??_C@_0N@LOMLCOFC@LoadLibraryA?$AA@
0x18000CEF8: "Q188769" ??_C@_1BA@PKKFMDFE@?$AAQ?$AA1?$AA8?$AA8?$AA7?$AA6?$AA9?$AA?$AA@
0x1800101D8: "unsigned __int64 NS_DisableTitanium::g_stShimId" ?g_stShimId@NS_DisableTitanium@@3_KA
0x18000D3D8: "OSProductSuite" ??_C@_1BO@DHFCONPJ@?$AAO?$AAS?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
0x18000EB64: "__cdecl _IMPORT_DESCRIPTOR_WINSPOOL" __IMPORT_DESCRIPTOR_WINSPOOL
0x18000D648: CLSID_SqlManager
0x18000D488: "NS_Sql2005::InitializeHooksMulti" ??_C@_0CB@HPKDDEJG@NS_Sql2005?3?3InitializeHooksMulti@
0x180004AE0: "int __cdecl NS_NitroPDFPro9::APIHook_EnumFormsW(void * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?APIHook_EnumFormsW@NS_NitroPDFPro9@@YAHPEAXKPEAEKPEAK2@Z
0x180002272: "__cdecl CxxThrowException" _CxxThrowException
0x180006EF0: "struct tagHOOKAPI * __ptr64 __cdecl NS_Sql2005::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Sql2005@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000AB38: "NS_ExchangeConfigSetup::Initiali" ??_C@_0CN@LIPICKLO@NS_ExchangeConfigSetup?3?3Initiali@
0x18000D4E0: "WBEMPROX.DLL" ??_C@_1BK@LIEHDONK@?$AAW?$AAB?$AAE?$AAM?$AAP?$AAR?$AAO?$AAX?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x18000BD90: "NS_IntelGraphicsCPL::InitializeH" ??_C@_0CK@JDHKIDJP@NS_IntelGraphicsCPL?3?3InitializeH@
0x18000A1E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000C410: "NS_NitroPDFPro9::InitializeHooks" ??_C@_0CG@FJHOEOHI@NS_NitroPDFPro9?3?3InitializeHooks@
0x18000C640: "\REGISTRY\MACHINE\BCD00000000\Ob" ??_C@_1EM@BGAAFNHL@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAB?$AAC?$AAD?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?2?$AAO?$AAb@
0x18000B940: "VizorHtmlDialog.exe" ??_C@_1CI@LLEJLDIP@?$AAV?$AAi?$AAz?$AAo?$AAr?$AAH?$AAt?$AAm?$AAl?$AAD?$AAi?$AAa?$AAl?$AAo?$AAg?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800090E8: "public: void __cdecl ShimLib::CString::Truncate(int) __ptr64" ?Truncate@CString@ShimLib@@QEAAXH@Z
0x180010980: "int NS_DisableTitanium::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DisableTitanium@@3HA
0x18000A1C0: "__cdecl _imp_K32EnumProcesses" __imp_K32EnumProcesses
0x18000D5A0: "COMHook_ISqlManager_GetSnapinVer" ??_C@_0CF@DKBDPEDG@COMHook_ISqlManager_GetSnapinVer@
0x18000A228: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180008BAC: "protected: void __cdecl ShimLib::CString::CopyBeforeWrite(void) __ptr64" ?CopyBeforeWrite@CString@ShimLib@@IEAAXXZ
0x18000D530: IID_IWbemLocator
0x1800109A8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_AuthentecFingerprint::g_pAPIHooks" ?g_pAPIHooks@NS_AuthentecFingerprint@@3PEAUtagHOOKAPI@@EA
0x18000D740: "Unknown" ??_C@_07NBCGADJA@Unknown?$AA@
0x18000B6E8: "WSCHandlerName" ??_C@_1BO@GBPMCCFF@?$AAW?$AAS?$AAC?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A288: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800023F0: "__cdecl _chkstk" __chkstk
0x18000CF50: "[LoadPerfCounterTextStringsW] Cr" ??_C@_0EI@BGKFIMJI@?$FLLoadPerfCounterTextStringsW?$FN?5Cr@
0x180010158: "unsigned __int64 NS_Sql2005Sp1Extractor::g_stShimId" ?g_stShimId@NS_Sql2005Sp1Extractor@@3_KA
0x180003348: "int __cdecl NS_DisableTitanium::NotifyFn(unsigned long)" ?NotifyFn@NS_DisableTitanium@@YAHK@Z
0x18000BB30: "{ABABABAB-CDCD-EFEF-0000-ABABABA" ??_C@_1EO@CIGPIAPD@?$AA?$HL?$AAA?$AAB?$AAA?$AAB?$AAA?$AAB?$AAA?$AAB?$AA?9?$AAC?$AAD?$AAC?$AAD?$AA?9?$AAE?$AAF?$AAE?$AAF?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AAA?$AAB?$AAA?$AAB?$AAA?$AAB?$AAA@
0x180001C40: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x18000A7E0: "OneKeyRecovery" ??_C@_1BO@GGMLKMLB@?$AAO?$AAn?$AAe?$AAK?$AAe?$AAy?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?$AA@
0x18000D8B8: "[AppAndCommandLineT::Set] CL wit" ??_C@_0CO@OKELDDOL@?$FLAppAndCommandLineT?3?3Set?$FN?5CL?5wit@
0x18000B780: "True" ??_C@_19BFOILMBF@?$AAT?$AAr?$AAu?$AAe?$AA?$AA@
0x18000CA28: "Successfully restarted tablet in" ??_C@_0CM@BLDONDMO@Successfully?5restarted?5tablet?5in@
0x18000B3E8: "WSCProductStateForExit_AV" ??_C@_1DE@DHNLMAPG@?$AAW?$AAS?$AAC?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAe?$AAF?$AAo?$AAr?$AAE?$AAx?$AAi?$AAt?$AA_?$AAA?$AAV?$AA?$AA@
0x18000D2D0: "IWbemServices::CreateInstanceEnu" ??_C@_0CJ@MLKHMJCE@IWbemServices?3?3CreateInstanceEnu@
0x1800101B8: "unsigned __int64 NS_IntelGraphicsCPL::g_stShimId" ?g_stShimId@NS_IntelGraphicsCPL@@3_KA
0x18000B0F0: "SmartAccessFindWindow" ??_C@_0BG@CMLNBCLN@SmartAccessFindWindow?$AA@
0x180010910: "int NS_OfficeMetricsLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_OfficeMetricsLie@@3HA
0x180007810: "unsigned short * __ptr64 __cdecl NS_Sql2005MMCSnapin::APIHook_SysAllocString(unsigned short const * __ptr64)" ?APIHook_SysAllocString@NS_Sql2005MMCSnapin@@YAPEAGPEBG@Z
0x1800087C4: "public: class ShimLib::CString const & __ptr64 __cdecl ShimLib::CString::operator+=(unsigned short const * __ptr64) __ptr64" ??YCString@ShimLib@@QEAAAEBV01@PEBG@Z
0x180007AB0: "struct tagHOOKAPI * __ptr64 __cdecl NS_Sql2005MMCSnapin::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Sql2005MMCSnapin@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000A6A0: "DisableDialogAPI" ??_C@_1CC@HHPPLMBH@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAD?$AAi?$AAa?$AAl?$AAo?$AAg?$AAA?$AAP?$AAI?$AA?$AA@
0x1800100F0: "char * __ptr64 __ptr64 NS_IntelGraphicsCPL::g_szCommandLine" ?g_szCommandLine@NS_IntelGraphicsCPL@@3PEADEA
0x18000D7F8: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x18000B0C8: "OneKeyRecovery" ??_C@_0P@NMFKDAMN@OneKeyRecovery?$AA@
0x18000CD08: "HttpRedirect" ??_C@_1BK@IFCACNAG@?$AAH?$AAt?$AAt?$AAp?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AA?$AA@
0x18000B9B0: "CreateThread failed with error %" ??_C@_0CD@JMGCIJAB@CreateThread?5failed?5with?5error?5?$CF@
0x18000B078: "IntelGraphicsLPAC" ??_C@_0BC@LIAEFJEN@IntelGraphicsLPAC?$AA@
0x18000B188: "NS_AuthentecFingerprint::Initial" ??_C@_0CO@PAJCJNPE@NS_AuthentecFingerprint?3?3Initial@
0x18000A240: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18000AB18: "Failed to move config file. %d" ??_C@_0BP@JJPDIHOF@Failed?5to?5move?5config?5file?4?5?$CFd?$AA@
0x18000A128: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x18000C740: "RegEnumKeyExW" ??_C@_0O@NHPJLAPM@RegEnumKeyExW?$AA@
0x1800100D8: "char * __ptr64 __ptr64 NS_NvidiaLPAC::g_szCommandLine" ?g_szCommandLine@NS_NvidiaLPAC@@3PEADEA
0x18000A4C8: "__cdecl _guard_fids_table" __guard_fids_table
0x18000D6B0: "ComputerName" ??_C@_1BK@OADCIHHB@?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A438: msvcrt_NULL_THUNK_DATA
0x180010948: "struct tagHOOKAPI * __ptr64 __ptr64 NS_IntelGraphicsLPAC::g_pAPIHooks" ?g_pAPIHooks@NS_IntelGraphicsLPAC@@3PEAUtagHOOKAPI@@EA
0x18000A020: "__cdecl load_config_used" _load_config_used
0x180010188: "unsigned __int64 NS_SierraWirelessHideCDROM::g_stShimId" ?g_stShimId@NS_SierraWirelessHideCDROM@@3_KA
0x18000B480: "SOFTWARE\TrendMicro\UniClient\17" ??_C@_1HI@GPAJHMKP@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAT?$AAr?$AAe?$AAn?$AAd?$AAM?$AAi?$AAc?$AAr?$AAo?$AA?2?$AAU?$AAn?$AAi?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?2?$AA1?$AA7@
0x18000B7C8: "False" ??_C@_1M@GDFLIJGE@?$AAF?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x1800109E0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib
0x18000CCC8: "StaticContent" ??_C@_1BM@FJHDBGPO@?$AAS?$AAt?$AAa?$AAt?$AAi?$AAc?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AA?$AA@
0x180003CA8: "public: __cdecl ShimLib::AppAndCommandLine::~AppAndCommandLine(void) __ptr64" ??1AppAndCommandLine@ShimLib@@QEAA@XZ
0x18000D500: IID_IWbemClassObject
0x18000CE90: "IWbemLocator::ConnectServer hook" ??_C@_0DF@CBPENFMI@IWbemLocator?3?3ConnectServer?5hook@
0x18000C718: "NS_OneKeyRecovery::InitializeHoo" ??_C@_0CI@EHHHFLNI@NS_OneKeyRecovery?3?3InitializeHoo@
0x18000CFB0: "[LoadPerfCounterTextStringsW] II" ??_C@_0DP@JLMJALDF@?$FLLoadPerfCounterTextStringsW?$FN?5II@
0x180003D50: "struct tagHOOKAPI * __ptr64 __cdecl NS_DWmigration::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DWmigration@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000C458: "OpenPrinterW" ??_C@_0N@LCEDPELK@OpenPrinterW?$AA@
0x18000CFF0: "[LoadPerfCounterTextStringsW] II" ??_C@_0FA@JHHCFOFK@?$FLLoadPerfCounterTextStringsW?$FN?5II@
0x18000A428: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000B1C8: "GetProcAddress" ??_C@_0P@DGIDOA@GetProcAddress?$AA@
0x18000A5F8: "Application Specific Shims initi" ??_C@_0CI@CKOCBKIN@Application?5Specific?5Shims?5initi@
0x18000BD78: "igfxcpl.cpl" ??_C@_1BI@CHJGMKLJ@?$AAi?$AAg?$AAf?$AAx?$AAc?$AAp?$AAl?$AA?4?$AAc?$AAp?$AAl?$AA?$AA@
0x180001670: "void __cdecl MultiShimEntry(unsigned long,char const * __ptr64,unsigned long * __ptr64,struct tagHOOKAPI * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned __int64 * __ptr64,int * __ptr64,struct tagHOOKAPI * __ptr64 (__cdecl*)(unsigned long,char const * __ptr64,unsigned long * __ptr64))" ?MultiShimEntry@@YAXKPEBDPEAKPEAPEAUtagHOOKAPI@@PEBG3PEA_KPEAHP6APEAU1@K01@Z@Z
0x18000D698: "CreateDirectoryA" ??_C@_0BB@IFBLICJB@CreateDirectoryA?$AA@
0x18000CB40: "NS_SproutService::InitializeHook" ??_C@_0CH@JLDAEHAB@NS_SproutService?3?3InitializeHook@
0x180004C80: "struct tagHOOKAPI * __ptr64 __cdecl NS_NitroPDFPro9::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_NitroPDFPro9@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180009058: "public: void __cdecl ShimLib::CString::TrimRight(unsigned short const * __ptr64) __ptr64" ?TrimRight@CString@ShimLib@@QEAAXPEBG@Z
0x18000C468: "ClosePrinter" ??_C@_0N@IFFCHNBB@ClosePrinter?$AA@
0x18000A460: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000B3C0: "CreateProcess failed with error " ??_C@_0CI@LIILLLIJ@CreateProcess?5failed?5with?5error?5@
0x18000A1F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000C5F0: "NS_OfficeMetricsLie::InitializeH" ??_C@_0CK@FJCDBMJ@NS_OfficeMetricsLie?3?3InitializeH@
0x180010990: "int NS_DisableDialogAPI::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DisableDialogAPI@@3HA
0x18000C438: "winspool.drv" ??_C@_0N@ICCOAHAN@winspool?4drv?$AA@
0x18000C3D8: "Nitro PDF Creator (Pro 9)" ??_C@_1DE@KIOBHGLJ@?$AAN?$AAi?$AAt?$AAr?$AAo?$AA?5?$AAP?$AAD?$AAF?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAo?$AAr?$AA?5?$AA?$CI?$AAP?$AAr?$AAo?$AA?5?$AA9?$AA?$CJ?$AA?$AA@
0x1800100C0: "char * __ptr64 __ptr64 NS_SierraWirelessHideCDROM::g_szCommandLine" ?g_szCommandLine@NS_SierraWirelessHideCDROM@@3PEADEA
0x180004E90: "int __cdecl NS_NvidiaLPAC::APIHook_ConvertStringSecurityDescriptorToSecurityDescriptorW(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?APIHook_ConvertStringSecurityDescriptorToSecurityDescriptorW@NS_NvidiaLPAC@@YAHPEBGKPEAPEAXPEAK@Z
0x18000B118: "Sql2005" ??_C@_07NJMNPEGM@Sql2005?$AA@
0x18000CC58: "Metabase" ??_C@_1BC@JKPDMPKH@?$AAM?$AAe?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x18000BE50: "O:BAG:BAD:(A;;CCDCSW;;;WD)(A;;CC" ??_C@_1BGM@MIPAKLOP@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAS?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x18000A458: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000AB70: "AUTHUI.DLL: LogonUI Logon Window" ??_C@_1EC@MDMGMPCI@?$AAA?$AAU?$AAT?$AAH?$AAU?$AAI?$AA?4?$AAD?$AAL?$AAL?$AA?3?$AA?5?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA?5?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw@
0x18000A130: "__cdecl _imp_ControlService" __imp_ControlService
0x180008CD8: "public: void __cdecl ShimLib::CString::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@CString@ShimLib@@QEAAXPEBGZZ
0x180005840: "unsigned int __cdecl NS_SierraWirelessHideCDROM::APIHook_GetDriveTypeW(unsigned short const * __ptr64)" ?APIHook_GetDriveTypeW@NS_SierraWirelessHideCDROM@@YAIPEBG@Z
0x18000BDC0: "O:BAG:BAD:(A;;CCDCSW;;;WD)(A;;CC" ??_C@_1IG@LGOLADOK@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAS?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x18000BB80: "{2D9E65B5-E6FE-4239-9F33-D0C6781" ??_C@_1EO@MJIGKLNE@?$AA?$HL?$AA2?$AAD?$AA9?$AAE?$AA6?$AA5?$AAB?$AA5?$AA?9?$AAE?$AA6?$AAF?$AAE?$AA?9?$AA4?$AA2?$AA3?$AA9?$AA?9?$AA9?$AAF?$AA3?$AA3?$AA?9?$AAD?$AA0?$AAC?$AA6?$AA7?$AA8?$AA1@
0x1800016D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000A2B8: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18000A2D8: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18000B170: "TerminateZTEFileAutExe" ??_C@_0BH@OOMEGNNG@TerminateZTEFileAutExe?$AA@
0x18000D040: "[LoadPerfCounterTextStringsW] II" ??_C@_0DA@BAIDAABH@?$FLLoadPerfCounterTextStringsW?$FN?5II@
0x1800109D8: "void * __ptr64 __ptr64 ShimLib::g_hHeapManagerMutex" ?g_hHeapManagerMutex@ShimLib@@3PEAXEA
0x18000A3C0: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18000CE38: "NS_Sql2005::COMHook_IWbemService" ??_C@_0CN@KOGADIFE@NS_Sql2005?3?3COMHook_IWbemService@
0x18000B828: "WSCProductStateForExit_AS" ??_C@_1DE@FDAME@?$AAW?$AAS?$AAC?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAt?$AAa?$AAt?$AAe?$AAF?$AAo?$AAr?$AAE?$AAx?$AAi?$AAt?$AA_?$AAA?$AAS?$AA?$AA@
0x1800101C0: "unsigned __int64 NS_FCS::g_stShimId" ?g_stShimId@NS_FCS@@3_KA
0x18000C548: "D:(A;CIOI;GA;;;AC)" ??_C@_1CG@CIOGBCIC@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x18000AA90: "%windir%\System32\Inetsrv\Config" ??_C@_1IG@GBAKILKG@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAI?$AAn?$AAe?$AAt?$AAs?$AAr?$AAv?$AA?2?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg@
0x18000AA30: "Failed to expand config file pat" ??_C@_0CG@CNHCEJF@Failed?5to?5expand?5config?5file?5pat@
0x180010988: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DisableTitanium::g_pAPIHooks" ?g_pAPIHooks@NS_DisableTitanium@@3PEAUtagHOOKAPI@@EA
0x180008DAC: "protected: static void __cdecl ShimLib::CString::FreeData(class ShimLib::CStringData<unsigned short> * __ptr64)" ?FreeData@CString@ShimLib@@KAXPEAV?$CStringData@G@2@@Z
0x180003550: "unsigned long __cdecl NS_DisableTitanium::ReadValueFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?ReadValueFromRegistry@NS_DisableTitanium@@YAKPEAUHKEY__@@PEBG1K@Z
0x18000A300: "__cdecl _imp_EnumFormsW" __imp_EnumFormsW
0x1800107F0: "int NS_Sql2005::g_bSubshimUsed" ?g_bSubshimUsed@NS_Sql2005@@3HA
0x1800101C8: "unsigned __int64 NS_ExchangeConfigSetup::g_stShimId" ?g_stShimId@NS_ExchangeConfigSetup@@3_KA
0x180010928: "struct tagHOOKAPI * __ptr64 __ptr64 NS_NvidiaLPAC::g_pAPIHooks" ?g_pAPIHooks@NS_NvidiaLPAC@@3PEAUtagHOOKAPI@@EA
0x18000B9D8: "NS_DisableTitanium::NotifyFn" ??_C@_0BN@LAPKEMND@NS_DisableTitanium?3?3NotifyFn?$AA@
0x1800016D0: "public: __cdecl ShimLib::CString::CStringError::~CStringError(void) __ptr64" ??1CStringError@CString@ShimLib@@QEAA@XZ
0x18000A1D8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18000A158: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x180008178: "void __cdecl NS_Sql2005SetupComputerName::SetComputerNameProperty(unsigned long)" ?SetComputerNameProperty@NS_Sql2005SetupComputerName@@YAXK@Z
0x18000B0D8: "SierraWirelessHideCDROM" ??_C@_0BI@PJKFCAJE@SierraWirelessHideCDROM?$AA@
0x180006BF4: "void __cdecl NS_Sql2005::IISReset(unsigned short * __ptr64,int)" ?IISReset@NS_Sql2005@@YAXPEAGH@Z
0x18000A478: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x180008F18: "protected: void __cdecl ShimLib::CString::Release(void) __ptr64" ?Release@CString@ShimLib@@IEAAXXZ
0x180010118: "char * __ptr64 __ptr64 NS_AuthentecFingerprint::g_szCommandLine" ?g_szCommandLine@NS_AuthentecFingerprint@@3PEADEA
0x1800107D8: "struct tagHOOKAPI * __ptr64 __ptr64 NS_ExchangeConfigSetup::g_pAPIHooks" ?g_pAPIHooks@NS_ExchangeConfigSetup@@3PEAUtagHOOKAPI@@EA
0x18000C818: "user32.DLL" ??_C@_0L@GBAAOPPE@user32?4DLL?$AA@
0x18000A3A8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000A470: ntdll_NULL_THUNK_DATA
0x1800109D0: "void * __ptr64 __ptr64 ShimLib::g_hHeapTweakerMutex" ?g_hHeapTweakerMutex@ShimLib@@3PEAXEA
0x18000A3B0: "__cdecl _imp_memcpy" __imp_memcpy
0x18000A368: "__cdecl _imp_SE_GetShimId" __imp_SE_GetShimId
0x18000CE68: "COMHook_IWbemLocator_ConnectServ" ??_C@_0CD@BIPLBFN@COMHook_IWbemLocator_ConnectServ@
0x18000C788: "Kernel32.DLL" ??_C@_0N@HNBMBBEI@Kernel32?4DLL?$AA@
0x18000B548: "WSCCompanyName_AV" ??_C@_1CE@GJBCGNAG@?$AAW?$AAS?$AAC?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy?$AAN?$AAa?$AAm?$AAe?$AA_?$AAA?$AAV?$AA?$AA@
0x18000A890: "Sql2005MMCSnapin" ??_C@_1CC@CCMJOJGL@?$AAS?$AAq?$AAl?$AA2?$AA0?$AA0?$AA5?$AAM?$AAM?$AAC?$AAS?$AAn?$AAa?$AAp?$AAi?$AAn?$AA?$AA@
0x180008D00: "public: void __cdecl ShimLib::CString::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CString@ShimLib@@QEAAXPEBGPEAD@Z
0x180010040: AE_LOG_Context
0x180005E74: "unsigned long __cdecl NS_SproutService::RestartTabletInputService(void)" ?RestartTabletInputService@NS_SproutService@@YAKXZ
0x18000D790: "NS_TerminateZTEFileAutExe::Initi" ??_C@_0DA@EEMDODJ@NS_TerminateZTEFileAutExe?3?3Initi@
0x18000B990: "NS_DisableTitanium::ThreadProc" ??_C@_0BP@NNJENBNJ@NS_DisableTitanium?3?3ThreadProc?$AA@
0x180010008: "__vectorcall ??_R0?AVCStringError@CString@ShimLib@" ??_R0?AVCStringError@CString@ShimLib@@@8
0x18000B4F8: "WSCHandlerName_AV" ??_C@_1CE@MEIDIFPF@?$AAW?$AAS?$AAC?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA_?$AAA?$AAV?$AA?$AA@
0x18000A390: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000D7C4: "("" ??_C@_02JBFCHHJF@?$CI?$CC?$AA@
0x18000B120: "Sql2005MMCSnapin" ??_C@_0BB@OJNAKDAF@Sql2005MMCSnapin?$AA@
0x180010138: "__cdecl _security_cookie" __security_cookie
0x18000A318: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180007D60: "int __cdecl NS_Sql2005Sp1Extractor::APIHook_CreateDirectoryA(char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?APIHook_CreateDirectoryA@NS_Sql2005Sp1Extractor@@YAHPEBDPEAU_SECURITY_ATTRIBUTES@@@Z
0x1800023F0: "__cdecl alloca_probe" _alloca_probe
0x18000C6C0: "%s\Elements\%x" ??_C@_1BO@DMJJLFGP@?$AA?$CF?$AAs?$AA?2?$AAE?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?2?$AA?$CF?$AAx?$AA?$AA@
0x18000B5A0: "UCUiFrmWrkPath" ??_C@_1BO@BIHBBPOL@?$AAU?$AAC?$AAU?$AAi?$AAF?$AAr?$AAm?$AAW?$AAr?$AAk?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18000A2C8: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x1800108C0: "int NS_Sql2005::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Sql2005@@3HA
0x180010800: "int NS_OneKeyRecovery::g_bSubshimUsed" ?g_bSubshimUsed@NS_OneKeyRecovery@@3HA
0x18000C5C8: "NS_NvidiaLPAC::InitializeHooksMu" ??_C@_0CE@JBHLHBIC@NS_NvidiaLPAC?3?3InitializeHooksMu@
0x18000B610: "SOFTWARE\TrendMicro\AMSP" ??_C@_1DC@OAOCGIKC@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAT?$AAr?$AAe?$AAn?$AAd?$AAM?$AAi?$AAc?$AAr?$AAo?$AA?2?$AAA?$AAM?$AAS?$AAP?$AA?$AA@
0x18000A630: "AcSpecfc" ??_C@_08ONKPIKIA@AcSpecfc?$AA@
0x18000C960: "NS_SproutService::RestartTabletI" ??_C@_0CM@MAODNIJK@NS_SproutService?3?3RestartTabletI@
0x18000A1A0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000D7F0: "ShimLib" ??_C@_07HGHLCFFA@ShimLib?$AA@
0x1800100E0: "char * __ptr64 __ptr64 NS_NitroPDFPro9::g_szCommandLine" ?g_szCommandLine@NS_NitroPDFPro9@@3PEADEA
0x18000A258: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000A308: WINSPOOL_NULL_THUNK_DATA
0x18000D520: IID_IWbemServices
0x18000B0B0: "OfficeMetricsLie" ??_C@_0BB@EPNJAJAN@OfficeMetricsLie?$AA@
0x180002F84: "void __cdecl NS_DisableTitanium::AppendSuffix(class ShimLib::CString & __ptr64,unsigned short const * __ptr64)" ?AppendSuffix@NS_DisableTitanium@@YAXAEAVCString@ShimLib@@PEBG@Z
0x18000C7B8: "LogonUI Logon Window" ??_C@_1CK@DOCMILEG@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA?5?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?$AA@
0x180010828: "int NS_DisableDialogAPI::g_bSubshimUsed" ?g_bSubshimUsed@NS_DisableDialogAPI@@3HA
0x18000A220: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18000D4C0: "LoadPerfCounterTextStringsW" ??_C@_0BM@NEOEKKAG@LoadPerfCounterTextStringsW?$AA@
0x18000D4B0: "LOADPERF.DLL" ??_C@_0N@CEHDGOOL@LOADPERF?4DLL?$AA@
0x180005B30: "struct tagHOOKAPI * __ptr64 __cdecl NS_SmartAccessFindWindow::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_SmartAccessFindWindow@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x1800107A8: "__cdecl _onexitbegin" __onexitbegin
0x18000D618: "SqlManager.DLL" ??_C@_1BO@IACNPOID@?$AAS?$AAq?$AAl?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x18000C4D0: "D:(A;CIOI;GA;;;WD)(A;CIOI;GA;;;A" ??_C@_1HG@ENNJAFOO@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAA@
0x1800101E8: "unsigned __int64 NS_AuthentecFingerprint::g_stShimId" ?g_stShimId@NS_AuthentecFingerprint@@3_KA
0x1800056A0: "struct tagHOOKAPI * __ptr64 __cdecl NS_OneKeyRecovery::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_OneKeyRecovery@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180010178: "unsigned __int64 NS_SproutService::g_stShimId" ?g_stShimId@NS_SproutService@@3_KA
0x1800101A8: "unsigned __int64 NS_NitroPDFPro9::g_stShimId" ?g_stShimId@NS_NitroPDFPro9@@3_KA
0x18000A3D0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000C6E0: "Element" ??_C@_1BA@DLALOCKE@?$AAE?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x18000A1B8: "__cdecl _imp_K32GetProcessImageFileNameW" __imp_K32GetProcessImageFileNameW
0x18000A380: msi_NULL_THUNK_DATA
0x18000A210: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000BFC0: "O:BAG:BAD:(A;;0xb;;;WD)(A;;0xb;;" ??_C@_1GI@DEEIHGHA@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAb?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AAb?$AA?$DL?$AA?$DL@
0x180003284: "int __cdecl NS_DisableTitanium::IsVizorHtmlDialog(unsigned long)" ?IsVizorHtmlDialog@NS_DisableTitanium@@YAHK@Z
0x18000990C: "long __cdecl ShimLib::RegQueryValueExW(class ShimLib::CString & __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?RegQueryValueExW@ShimLib@@YAJAEAVCString@1@PEAUHKEY__@@PEBG2@Z
0x180010960: "int NS_FCS::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_FCS@@3HA
0x18000AF68: Microsoft_Windows_Application_ExperienceLevels
0x18000B680: "CtrlXXStatus" ??_C@_1BK@OBPEDDDO@?$AAC?$AAt?$AAr?$AAl?$AAX?$AAX?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18000EB14: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000D388: "NS_Sql2005::COMHook_IEnumWbemCla" ??_C@_0CO@ENNKGIEE@NS_Sql2005?3?3COMHook_IEnumWbemCla@
0x18000BD48: "MsiEnumRelatedProductsW" ??_C@_0BI@PDFBFBFL@MsiEnumRelatedProductsW?$AA@
0x18000A330: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180001F44: "__cdecl _security_init_cookie" __security_init_cookie
0x18000BA40: "Software\Microsoft\Windows\Windo" ??_C@_1HC@MHLNCCCH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo@
0x1800107E0: "int NS_TerminateZTEFileAutExe::g_bSubshimUsed" ?g_bSubshimUsed@NS_TerminateZTEFileAutExe@@3HA
0x18000CBD0: "sSubKeyName" ??_C@_1BI@BOEPAANC@?$AAs?$AAS?$AAu?$AAb?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000A310: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180007EF0: "unsigned int __cdecl NS_Sql2005SetupComputerName::APIHook_MsiGetPropertyW(unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?APIHook_MsiGetPropertyW@NS_Sql2005SetupComputerName@@YAIKPEBGPEAGPEAK@Z
0x1800108D0: "int NS_SproutService::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_SproutService@@3HA
0x180004FE0: "struct tagHOOKAPI * __ptr64 __cdecl NS_NvidiaLPAC::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_NvidiaLPAC@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000EAD8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A6C8: "DisableTitanium" ??_C@_1CA@PKGLIPKN@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAT?$AAi?$AAt?$AAa?$AAn?$AAi?$AAu?$AAm?$AA?$AA@
0x18000A388: "__cdecl _imp_memmove" __imp_memmove
0x18000A340: "__cdecl _imp_SE_COM_AddServer" __imp_SE_COM_AddServer
0x180006450: "long __cdecl NS_Sql2005::COMHook_IWbemClassObject_Get(void * __ptr64,unsigned short const * __ptr64,long,struct tagVARIANT * __ptr64,long * __ptr64,long * __ptr64)" ?COMHook_IWbemClassObject_Get@NS_Sql2005@@YAJPEAXPEBGJPEAUtagVARIANT@@PEAJ3@Z
0x180008C14: "public: unsigned long __cdecl ShimLib::CString::ExpandEnvironmentStringsW(void) __ptr64" ?ExpandEnvironmentStringsW@CString@ShimLib@@QEAAKXZ
0x18000D1D8: "[LoadPerfCounterTextStringsW] ap" ??_C@_0DN@ECIHPGDN@?$FLLoadPerfCounterTextStringsW?$FN?5ap@
0x18000C7E8: "NS_SmartAccessFindWindow::Initia" ??_C@_0CP@KICFJAE@NS_SmartAccessFindWindow?3?3Initia@
0x180007D80: "struct tagHOOKAPI * __ptr64 __cdecl NS_Sql2005Sp1Extractor::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_Sql2005Sp1Extractor@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000C200: "O:BAG:BAD:(A;;CCDCSW;;;WD)(A;;CC" ??_C@_1BFM@BDPMBHOC@?$AAO?$AA?3?$AAB?$AAA?$AAG?$AA?3?$AAB?$AAA?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC?$AAD?$AAC?$AAS?$AAW?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAC?$AAC@
0x180010804: "int NS_OfficeMetricsLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_OfficeMetricsLie@@3HA
0x18000A418: "__cdecl _imp_malloc" __imp_malloc
0x18000A700: "ExchangeConfigSetup" ??_C@_1CI@BAHCOGDH@?$AAE?$AAx?$AAc?$AAh?$AAa?$AAn?$AAg?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x18000A178: ADVAPI32_NULL_THUNK_DATA
0x1800107F4: "int NS_SproutService::g_bSubshimUsed" ?g_bSubshimUsed@NS_SproutService@@3HA
0x18000C480: "D:(A;CIOI;GA;;;WD)(A;CIOI;GA;;;A" ??_C@_1EG@HJBHLKDJ@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAC?$AAI?$AAO?$AAI?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAA@
0x180010920: "int NS_NvidiaLPAC::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_NvidiaLPAC@@3HA
0x18000A7A0: "NvidiaLPAC" ??_C@_1BG@OCAKKMPE@?$AAN?$AAv?$AAi?$AAd?$AAi?$AAa?$AAL?$AAP?$AAA?$AAC?$AA?$AA@
0x180010908: "struct tagHOOKAPI * __ptr64 __ptr64 NS_OneKeyRecovery::g_pAPIHooks" ?g_pAPIHooks@NS_OneKeyRecovery@@3PEAUtagHOOKAPI@@EA
0x180010200: "void * __ptr64 __ptr64 NS_NitroPDFPro9::g_phPrinter" ?g_phPrinter@NS_NitroPDFPro9@@3PEAXEA
0x18000EAC4: "__cdecl _IMPORT_DESCRIPTOR_apphelp" __IMPORT_DESCRIPTOR_apphelp
0x1800108A0: "int NS_Sql2005SetupComputerName::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Sql2005SetupComputerName@@3HA
0x180001CC0: "__cdecl _report_gsfailure" __report_gsfailure
0x180008200: "struct tagHOOKAPI * __ptr64 __cdecl NS_TerminateZTEFileAutExe::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_TerminateZTEFileAutExe@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000D1A8: "NS_Sql2005::GrantReportServerPer" ??_C@_0CJ@NPEHNJFC@NS_Sql2005?3?3GrantReportServerPer@
0x18000C940: "OpenSCManager failed with %08x" ??_C@_0BP@KJPGIFFL@OpenSCManager?5failed?5with?5?$CF08x?$AA@
0x180005810: "unsigned int __cdecl NS_SierraWirelessHideCDROM::APIHook_GetDriveTypeA(char const * __ptr64)" ?APIHook_GetDriveTypeA@NS_SierraWirelessHideCDROM@@YAIPEBD@Z
0x1800091B0: "char * __ptr64 __cdecl ShimLib::StringDuplicateA(char const * __ptr64)" ?StringDuplicateA@ShimLib@@YAPEADPEBD@Z
0x18000B468: "Accepted" ??_C@_1BC@KPNBJKOD@?$AAA?$AAc?$AAc?$AAe?$AAp?$AAt?$AAe?$AAd?$AA?$AA@
0x180002C70: "struct tagHOOKAPI * __ptr64 __cdecl NS_DisableDialogAPI::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_DisableDialogAPI@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x18000A3E8: "__cdecl _imp_wcsspn" __imp_wcsspn
0x18000B358: "WscStatusController.exe didn't c" ??_C@_0DB@DBFOAKJC@WscStatusController?4exe?5didn?8t?5c@
0x18000B5F8: "InstallDir" ??_C@_1BG@JJPNHDGM@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAD?$AAi?$AAr?$AA?$AA@
0x18000A2D0: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x1800107B8: "__cdecl _native_startup_state" __native_startup_state
0x18000CAD0: "Keyboard already set to pinned" ??_C@_0BP@KLOKKCMG@Keyboard?5already?5set?5to?5pinned?$AA@
0x18000B6C8: "SecurityType" ??_C@_1BK@FJIKFGK@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000C9D8: "Failed to stop service with %08x" ??_C@_0CB@INDPMPLF@Failed?5to?5stop?5service?5with?5?$CF08x@
0x180010978: "struct tagHOOKAPI * __ptr64 __ptr64 NS_DWmigration::g_pAPIHooks" ?g_pAPIHooks@NS_DWmigration@@3PEAUtagHOOKAPI@@EA
0x18000A378: "__cdecl _imp_MsiSetPropertyW" __imp_MsiSetPropertyW
0x18000A140: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180010900: "int NS_OneKeyRecovery::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_OneKeyRecovery@@3HA
0x18000CF08: "rsctr.ini" ??_C@_1BE@BHBDEEPM@?$AAr?$AAs?$AAc?$AAt?$AAr?$AA?4?$AAi?$AAn?$AAi?$AA?$AA@
0x1800066A0: "long __cdecl NS_Sql2005::COMHook_IWbemServices_CreateInstanceEnum(void * __ptr64,unsigned short * __ptr64 const,long,struct IWbemContext * __ptr64,struct IEnumWbemClassObject * __ptr64 * __ptr64)" ?COMHook_IWbemServices_CreateInstanceEnum@NS_Sql2005@@YAJPEAXQEAGJPEAUIWbemContext@@PEAPEAUIEnumWbemClassObject@@@Z
0x1800100B0: "char * __ptr64 __ptr64 NS_SproutService::g_szCommandLine" ?g_szCommandLine@NS_SproutService@@3PEADEA
0x18000C880: "Service is already stopped." ??_C@_0BM@DLKMPCAD@Service?5is?5already?5stopped?4?$AA@
0x18000AA58: "NS_ExchangeConfigSetup::RestoreE" ??_C@_0DC@PIFLIDGK@NS_ExchangeConfigSetup?3?3RestoreE@
0x18000EA40: "__cdecl TI1?AVCStringError@CString@ShimLib@@" _TI1?AVCStringError@CString@ShimLib@@
0x18000CF20: "System32\iisreset.exe" ??_C@_1CM@MOCHHJCO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAi?$AAi?$AAs?$AAr?$AAe?$AAs?$AAe?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x18000C390: "ADVAPI32.DLL" ??_C@_0N@JJPEKNFO@ADVAPI32?4DLL?$AA@
0x18000A8F0: "Sql2005Sp1Extractor" ??_C@_1CI@BDGNPAPA@?$AAS?$AAq?$AAl?$AA2?$AA0?$AA0?$AA5?$AAS?$AAp?$AA1?$AAE?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x1800109B0: "unsigned long NS_NitroPDFPro9::g_pcReturned" ?g_pcReturned@NS_NitroPDFPro9@@3KA
0x18000D688: "kernel32" ??_C@_08PNLNEKOB@kernel32?$AA@
0x18000D768: "NS_TerminateZTEFileAutExe::Notif" ??_C@_0CE@EJFBHHIA@NS_TerminateZTEFileAutExe?3?3Notif@
0x18000BA28: "DontShimDW" ??_C@_1BG@LGCIEKKC@?$AAD?$AAo?$AAn?$AAt?$AAS?$AAh?$AAi?$AAm?$AAD?$AAW?$AA?$AA@
0x180010958: "struct tagHOOKAPI * __ptr64 __ptr64 NS_IntelGraphicsCPL::g_pAPIHooks" ?g_pAPIHooks@NS_IntelGraphicsCPL@@3PEAUtagHOOKAPI@@EA
0x18000A918: "TerminateZTEFileAutExe" ??_C@_1CO@OCNLPCPN@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AAZ?$AAT?$AAE?$AAF?$AAi?$AAl?$AAe?$AAA?$AAu?$AAt?$AAE?$AAx?$AAe?$AA?$AA@
0x1800091D0: "char * __ptr64 __cdecl ShimLib::StringNDuplicateA(char const * __ptr64,unsigned long)" ?StringNDuplicateA@ShimLib@@YAPEADPEBDK@Z
0x18000A780: "NitroPDFPro9" ??_C@_1BK@LKNBBKOD@?$AAN?$AAi?$AAt?$AAr?$AAo?$AAP?$AAD?$AAF?$AAP?$AAr?$AAo?$AA9?$AA?$AA@
0x18000A670: "AuthentecFingerprint" ??_C@_1CK@ELPMCGJP@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAe?$AAc?$AAF?$AAi?$AAn?$AAg?$AAe?$AAr?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?$AA@
0x18000CD88: "start" ??_C@_1M@JGKKHEFC@?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x180010160: "unsigned __int64 NS_Sql2005SetupComputerName::g_stShimId" ?g_stShimId@NS_Sql2005SetupComputerName@@3_KA
0x18000C920: "NS_SproutService::StartServiceW" ??_C@_0CA@HGIALAOC@NS_SproutService?3?3StartServiceW?$AA@
0x18000A420: "__cdecl _imp_free" __imp_free
0x180001EB0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000A268: "__cdecl _imp_TlsFree" __imp_TlsFree
0x18000A5E0: "ExchangeConfigSetup" ??_C@_0BE@GCIEMMEE@ExchangeConfigSetup?$AA@
0x18000CD98: "COMHook_IWbemServices_ExecMethod" ??_C@_0CB@NKLGKHA@COMHook_IWbemServices_ExecMethod@
0x18000CB68: "SetServiceStatus" ??_C@_0BB@DCELCPIA@SetServiceStatus?$AA@
0x180002DD4: "int __cdecl NS_DisableTitanium::AddEnvironmentPath(class ShimLib::CString)" ?AddEnvironmentPath@NS_DisableTitanium@@YAHVCString@ShimLib@@@Z
0x180010820: "int NS_DWmigration::g_bSubshimUsed" ?g_bSubshimUsed@NS_DWmigration@@3HA
0x1800051B0: "struct tagHOOKAPI * __ptr64 __cdecl NS_OfficeMetricsLie::InitializeHooksMulti(unsigned long,char const * __ptr64,unsigned long * __ptr64)" ?InitializeHooksMulti@NS_OfficeMetricsLie@@YAPEAUtagHOOKAPI@@KPEBDPEAK@Z
0x180004B60: "int __cdecl NS_NitroPDFPro9::APIHook_OpenPrinterW(unsigned short * __ptr64,void * __ptr64 * __ptr64,struct _PRINTER_DEFAULTSW * __ptr64)" ?APIHook_OpenPrinterW@NS_NitroPDFPro9@@YAHPEAGPEAPEAXPEAU_PRINTER_DEFAULTSW@@@Z
0x1800023AE: memset
0x18000EB78: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180010808: "int NS_NvidiaLPAC::g_bSubshimUsed" ?g_bSubshimUsed@NS_NvidiaLPAC@@3HA

[JEB Decompiler by PNF Software]