Generated by JEB on 2019/08/01

PE: C:\Windows\SysWOW64\acwow64.dll Base=0x10000000 SHA-256=9ECD45B9E299055B4D251CD3DAD02AAC5B575A711147FDE8173168E726B8342A
PDB: AcWow64.pdb GUID={DA682084-923F-43AA-DEFF212C36332130} Age=1

563 located named symbols:
0x10002558: "NS_DopeWarsSanitizeSegmentRegist" ??_C@_0DK@FMIIJIOA@NS_DopeWarsSanitizeSegmentRegist@
0x10002068: "NS_SmartPhoneSDK2003::Initialize" ??_C@_0CL@HJGOKAFO@NS_SmartPhoneSDK2003?3?3Initialize@
0x10001654: "FindClose" ??_C@_09DNPPEBNO@FindClose?$AA@
0x10001FB0: "MsnInstaller uninitialized." ??_C@_0BM@DAEJEENP@MsnInstaller?5uninitialized?4?$AA@
0x10009640: "__cdecl __onexitend" ___onexitend
0x100095D8: "int NS_Wow64CoCreateInstanceFlag::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64CoCreateInstanceFlag@@3HA
0x10001F78: "MsnInstaller notification: All D" ??_C@_0DG@EOPNEDKE@MsnInstaller?5notification?3?5All?5D@
0x10001C0C: "Wow64SysWow64DirLie" ??_C@_1CI@BCCDJODP@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAS?$AAy?$AAs?$AAW?$AAo?$AAw?$AA6?$AA4?$AAD?$AAi?$AAr?$AAL?$AAi?$AAe?$AA?$AA@
0x10001E1C: "NS_ModifyShellLinkPath::Initiali" ??_C@_0CN@FGBLKDLI@NS_ModifyShellLinkPath?3?3Initiali@
0x1000A0BC: "__cdecl _imp__SE_ShimDPF" __imp__SE_ShimDPF
0x1000A1A4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1000903C: "char * NS_RedirectHhShortcutToSysWow64::g_szCommandLine" ?g_szCommandLine@NS_RedirectHhShortcutToSysWow64@@3PADA
0x1000247C: "GetNativeSystemInfo" ??_C@_0BE@HLKFLAJF@GetNativeSystemInfo?$AA@
0x10002E6C: "unsigned long __stdcall NS_DMsiCIKeyRedirection::GetShimmedAccessFlagW(struct HKEY__ *,unsigned short *)" ?GetShimmedAccessFlagW@NS_DMsiCIKeyRedirection@@YGKPAUHKEY__@@PAG@Z
0x10006FD6: "__cdecl __CppXcptFilter" ___CppXcptFilter
0x10004463: "public: int __thiscall ShimLib::CString::EndsWithNoCase(unsigned short const *)const " ?EndsWithNoCase@CString@ShimLib@@QBEHPBG@Z
0x10001B08: "MsnInstaller" ??_C@_1BK@CKNNAPFI@?$AAM?$AAs?$AAn?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x1000A02C: "__stdcall _imp__GetCommandLineW" __imp__GetCommandLineW@0
0x10009080: "__cdecl __security_cookie" ___security_cookie
0x100072D0: "__fastcall __security_check_cookie" @__security_check_cookie@4
0x100021C8: "NS_Wow64Mdm::InitializeHooksMult" ??_C@_0CC@KMHCFFCE@NS_Wow64Mdm?3?3InitializeHooksMult@
0x1000A15C: "__stdcall _imp__NtOpenFile" __imp__NtOpenFile@24
0x100095A8: "int NS_Wow64SysWow64DirLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64SysWow64DirLie@@3HA
0x10002230: "msoobci.dll" ??_C@_1BI@NODOACOA@?$AAm?$AAs?$AAo?$AAo?$AAb?$AAc?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1000A04C: "__stdcall _imp__QueryPerformanceCounter" __imp__QueryPerformanceCounter@4
0x10005B70: "struct tagHOOKAPI * __stdcall NS_Wow64ProcessLie::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64ProcessLie@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10002260: " 0x" ??_C@_17MJFKMNBO@?$AA?5?$AA0?$AAx?$AA?$AA@
0x10004CC0: "__stdcall APIHook_CoCreateInstance" _APIHook_CoCreateInstance@20
0x100095D4: "struct tagHOOKAPI * NS_wow64IsDelShare::g_pAPIHooks" ?g_pAPIHooks@NS_wow64IsDelShare@@3PAUtagHOOKAPI@@A
0x10002190: "NS_wow64IsDelShare::InitializeHo" ??_C@_0CJ@COGLKIMH@NS_wow64IsDelShare?3?3InitializeHo@
0x1000774D: "__cdecl _SEH_epilog4" __SEH_epilog4
0x1000A060: "__stdcall _imp__Sleep" __imp__Sleep@4
0x100095A4: "struct tagHOOKAPI * NS_Wow64UpdateDriverLie::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64UpdateDriverLie@@3PAUtagHOOKAPI@@A
0x1000601D: "unsigned short * __cdecl ShimLib::wcsistr(unsigned short const *,unsigned short const *)" ?wcsistr@ShimLib@@YAPAGPBG0@Z
0x10002C30: "long __stdcall NS_DisablMsiKeyRedirection::APIHook_NtMapViewOfSection(void *,void *,void * *,unsigned long,unsigned long,union _LARGE_INTEGER *,unsigned long *,enum _SECTION_INHERIT,unsigned long,unsigned long)" ?APIHook_NtMapViewOfSection@NS_DisablMsiKeyRedirection@@YGJPAX0PAPAXKKPAT_LARGE_INTEGER@@PAKW4_SECTION_INHERIT@@KK@Z
0x100021F8: "GetModuleFileNameExA" ??_C@_0BF@OFAHHCBJ@GetModuleFileNameExA?$AA@
0x1000A068: "__stdcall _imp__HeapFree" __imp__HeapFree@12
0x10009044: "char * NS_ModifyShellLinkPath::g_szCommandLine" ?g_szCommandLine@NS_ModifyShellLinkPath@@3PADA
0x1000140D: "" ??_C@_00CNPNBAHC@?$AA@
0x100018B8: "Wow64ProcessLie" ??_C@_0BA@DMPLELJP@Wow64ProcessLie?$AA@
0x1000959C: "int NS_Wow64UpdateDriverLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64UpdateDriverLie@@3HA
0x1000A030: "__stdcall _imp__lstrlenW" __imp__lstrlenW@4
0x100020B0: "NEWDEV.DLL" ??_C@_0L@FABOMLCA@NEWDEV?4DLL?$AA@
0x10007708: "__cdecl _SEH_prolog4" __SEH_prolog4
0x1000780B: "__cdecl _EH_prolog3_catch_GS" __EH_prolog3_catch_GS
0x10001D88: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x10009090: "unsigned long NS_Wow64Mdm::g_stShimId" ?g_stShimId@NS_Wow64Mdm@@3KA
0x100033A0: "struct tagHOOKAPI * __stdcall NS_Ignore2ndFindClose::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Ignore2ndFindClose@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10009568: "int NS_DuplicateHandleAccess::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DuplicateHandleAccess@@3HA
0x10006A80: "public: __thiscall ShimLib::CString::CStringError::~CStringError(void)" ??1CStringError@CString@ShimLib@@QAE@XZ
0x10009558: "int NS_DisablMsiKeyRedirection::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DisablMsiKeyRedirection@@3HA
0x10009614: "int NS_LimitLargeAddressAwareProcessTo3gb::g_bSubshimUsed" ?g_bSubshimUsed@NS_LimitLargeAddressAwareProcessTo3gb@@3HA
0x1000A074: "__stdcall _imp__WideCharToMultiByte" __imp__WideCharToMultiByte@32
0x100023B0: "GetVersion" ??_C@_0L@LNAOMCPJ@GetVersion?$AA@
0x10009048: "char * NS_DopeWarsSanitizeSegmentRegisters::g_szCommandLine" ?g_szCommandLine@NS_DopeWarsSanitizeSegmentRegisters@@3PADA
0x100090B4: "unsigned long NS_MsnInstaller::g_stShimId" ?g_stShimId@NS_MsnInstaller@@3KA
0x1000A108: "__cdecl _imp__wcsstr" __imp__wcsstr
0x1000656F: "public: void __thiscall ShimLib::CString::ReleaseBuffer(int)" ?ReleaseBuffer@CString@ShimLib@@QAEXH@Z
0x10001968: "wow64 shim is terminated." ??_C@_0BK@KCIPFPKE@wow64?5shim?5is?5terminated?4?$AA@
0x1000A158: "__stdcall _imp__RtlDosPathNameToNtPathName_U" __imp__RtlDosPathNameToNtPathName_U@16
0x10002030: "NS_RedirectHhShortcutToSysWow64:" ??_C@_0DG@GCMKKBCI@NS_RedirectHhShortcutToSysWow64?3@
0x10001D40: "/C """ ??_C@_05JLNNLALG@?1C?5?$CC?$CC?$AA@
0x10009004: "char * NS_DisablMsiKeyRedirection::g_szCommandLine" ?g_szCommandLine@NS_DisablMsiKeyRedirection@@3PADA
0x10006B39: "public: __thiscall ShimLib::CStringToken::CStringToken(class ShimLib::CString const &,class ShimLib::CString const &)" ??0CStringToken@ShimLib@@QAE@ABVCString@1@0@Z
0x10001F38: " (x86)" ??_C@_06NOEMODMP@?5?$CIx86?$CJ?$AA@
0x100095B4: "int NS_Wow64MM2::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64MM2@@3HA
0x100095EC: "struct tagHOOKAPI * NS_SmartPhoneSDK2003::g_pAPIHooks" ?g_pAPIHooks@NS_SmartPhoneSDK2003@@3PAUtagHOOKAPI@@A
0x10001518: "SOFTWARE\CLASSES\INSTALLER" ??_C@_1DG@GOAMGBCD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA?2?$AAI?$AAN?$AAS?$AAT?$AAA?$AAL?$AAL?$AAE?$AAR?$AA?$AA@
0x1000694D: "public: char * __thiscall ShimLib::CString::GetAnsi(void)const " ?GetAnsi@CString@ShimLib@@QBEPADXZ
0x100095D0: "int NS_wow64IsDelShare::g_bSubshimUsed" ?g_bSubshimUsed@NS_wow64IsDelShare@@3HA
0x10001D4C: " " ??_C@_01CLKCMJKC@?5?$AA@
0x10001EF0: "Program Files\MSN" ??_C@_0BC@BOFGMNLB@Program?5Files?2MSN?$AA@
0x1000A050: "__stdcall _imp__TerminateProcess" __imp__TerminateProcess@8
0x100062E3: "protected: void __thiscall ShimLib::CString::AllocCopy(class ShimLib::CString &,int,int,int)const " ?AllocCopy@CString@ShimLib@@IBEXAAV12@HHH@Z
0x10009580: "int NS_LimitLargeAddressAwareProcessTo3gb::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_LimitLargeAddressAwareProcessTo3gb@@3HA
0x10002094: "SetupDiCallClassInstaller" ??_C@_0BK@GFJFBLPL@SetupDiCallClassInstaller?$AA@
0x100065AC: "public: void __thiscall ShimLib::CString::Assign(char const *,int)" ?Assign@CString@ShimLib@@QAEXPBDH@Z
0x10009618: "int NS_GetFileVersionInfoRedirect::g_bSubshimUsed" ?g_bSubshimUsed@NS_GetFileVersionInfoRedirect@@3HA
0x1000A0F8: "__cdecl _imp__toupper" __imp__toupper
0x100044D0: "long __stdcall NS_MsnInstaller::APIHook_RegSetValueExW(struct HKEY__ *,unsigned short const *,unsigned long,unsigned long,unsigned char const *,unsigned long)" ?APIHook_RegSetValueExW@NS_MsnInstaller@@YGJPAUHKEY__@@PBGKKPBEK@Z
0x1000541E: "unsigned char __stdcall NS_Wow64MM2::ShimpVerifyInstallCommand(unsigned short const *,unsigned short const *,unsigned short const *,unsigned short const *)" ?ShimpVerifyInstallCommand@NS_Wow64MM2@@YGEPBG000@Z
0x10009624: "int NS_DopeWarsSanitizeSegmentRegisters::g_bSubshimUsed" ?g_bSubshimUsed@NS_DopeWarsSanitizeSegmentRegisters@@3HA
0x1000A178: "__cdecl __guard_check_icall_fptr" ___guard_check_icall_fptr
0x100023A0: "GetVersionExW" ??_C@_0O@KHLDIKFN@GetVersionExW?$AA@
0x10001DF8: "COMHook_IShellLinkA_SetArguments" ??_C@_0CB@PCEAIDCD@COMHook_IShellLinkA_SetArguments@
0x100095A0: "int NS_Wow64UpdateDriverLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64UpdateDriverLie@@3HA
0x10005C90: "unsigned int __stdcall NS_Wow64SysWow64DirLie::APIHook_GetSystemWow64DirectoryA(char *,unsigned int)" ?APIHook_GetSystemWow64DirectoryA@NS_Wow64SysWow64DirLie@@YGIPADI@Z
0x10001D6C: ".htm" ??_C@_19BHBAHPON@?$AA?4?$AAh?$AAt?$AAm?$AA?$AA@
0x10001960: "AcWow64" ??_C@_07KCHJJOLO@AcWow64?$AA@
0x1000155C: "SOFTWARE\CLASSES\INSTALLER" ??_C@_0BL@BMBNIAOG@SOFTWARE?2CLASSES?2INSTALLER?$AA@
0x1000900C: "char * NS_DuplicateHandleAccess::g_szCommandLine" ?g_szCommandLine@NS_DuplicateHandleAccess@@3PADA
0x10007793: "__cdecl _EH_epilog3_catch_GS" __EH_epilog3_catch_GS
0x10009024: "char * NS_Wow64SysWow64DirLie::g_szCommandLine" ?g_szCommandLine@NS_Wow64SysWow64DirLie@@3PADA
0x10001F04: "%SystemDrive%" ??_C@_0O@CFGPNODG@?$CFSystemDrive?$CF?$AA@
0x100095BC: "struct tagHOOKAPI * NS_Wow64MM2::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64MM2@@3PAUtagHOOKAPI@@A
0x10006D93: "__stdcall DllMain" _DllMain@12
0x10005320: "struct tagHOOKAPI * __stdcall NS_Wow64Mdm::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64Mdm@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x100069CC: "public: unsigned long __thiscall ShimLib::CString::ExpandEnvironmentStringsW(void)" ?ExpandEnvironmentStringsW@CString@ShimLib@@QAEKXZ
0x1000A044: "__stdcall _imp__GetSystemTimeAsFileTime" __imp__GetSystemTimeAsFileTime@4
0x100035A6: "int __stdcall NS_GetFileVersionInfoRedirect::ParseCommandLine(char const *)" ?ParseCommandLine@NS_GetFileVersionInfoRedirect@@YGHPBD@Z
0x10003994: "void __stdcall MultiShimEntry(unsigned long,char const *,unsigned long *,struct tagHOOKAPI * *,unsigned short const *,unsigned short const *,unsigned long *,int *,struct tagHOOKAPI * (__stdcall*)(unsigned long,char const *,unsigned long *))" ?MultiShimEntry@@YGXKPBDPAKPAPAUtagHOOKAPI@@PBG31PAHP6GPAU1@K01@Z@Z
0x100029A0: "void * __stdcall NS_DisableFilesystemRedirector::APIHook_FindFirstFileA(char const *,struct _WIN32_FIND_DATAA *)" ?APIHook_FindFirstFileA@NS_DisableFilesystemRedirector@@YGPAXPBDPAU_WIN32_FIND_DATAA@@@Z
0x100095DC: "int NS_Wow64CoCreateInstanceFlag::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64CoCreateInstanceFlag@@3HA
0x100095F4: "int NS_RedirectHhShortcutToSysWow64::g_bSubshimUsed" ?g_bSubshimUsed@NS_RedirectHhShortcutToSysWow64@@3HA
0x10006686: "public: int __thiscall ShimLib::CString::Insert(int,unsigned short const *)" ?Insert@CString@ShimLib@@QAEHHPBG@Z
0x1000901C: "char * NS_Wow64Mdm::g_szCommandLine" ?g_szCommandLine@NS_Wow64Mdm@@3PADA
0x1000909C: "unsigned long NS_Wow64MM2::g_stShimId" ?g_stShimId@NS_Wow64MM2@@3KA
0x10004920: "long __stdcall NS_RedirectHhShortcutToSysWow64::COMHook_IShellLinkA_SetPath(void *,char const *)" ?COMHook_IShellLinkA_SetPath@NS_RedirectHhShortcutToSysWow64@@YGJPAXPBD@Z
0x100061E7: "protected: void __thiscall ShimLib::CString::Release(void)" ?Release@CString@ShimLib@@IAEXXZ
0x1000A168: "__stdcall _imp__RtlpEnsureBufferSize" __imp__RtlpEnsureBufferSize@12
0x100068F6: "public: void __thiscall ShimLib::CString::Mid(int,int,class ShimLib::CString &)const " ?Mid@CString@ShimLib@@QBEXHHAAV12@@Z
0x100018D4: "Wow64SysWow64DirLie" ??_C@_0BE@PCBMADDP@Wow64SysWow64DirLie?$AA@
0x10006CD0: "void __stdcall ShimLib::NotifyShims(int,unsigned int)" ?NotifyShims@ShimLib@@YGXHI@Z
0x100090D0: "unsigned long NS_DisableFilesystemRedirector::g_stShimId" ?g_stShimId@NS_DisableFilesystemRedirector@@3KA
0x1000A010: "__stdcall _imp__ExpandEnvironmentStringsW" __imp__ExpandEnvironmentStringsW@12
0x10009010: "char * NS_Ignore2ndFindClose::g_szCommandLine" ?g_szCommandLine@NS_Ignore2ndFindClose@@3PADA
0x100055D8: "unsigned char __stdcall NS_Wow64MM2::ShimIsMovieMakerInstall(void)" ?ShimIsMovieMakerInstall@NS_Wow64MM2@@YGEXZ
0x10002248: "mm20ex.inf" ??_C@_1BG@GBAKEKGL@?$AAm?$AAm?$AA2?$AA0?$AAe?$AAx?$AA?4?$AAi?$AAn?$AAf?$AA?$AA@
0x10001B60: "SmartPhoneSDK2003" ??_C@_1CE@IGHBDBND@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAP?$AAh?$AAo?$AAn?$AAe?$AAS?$AAD?$AAK?$AA2?$AA0?$AA0?$AA3?$AA?$AA@
0x100018C8: "Wow64MM2" ??_C@_08FFAPKLKI@Wow64MM2?$AA@
0x100095FC: "int NS_MsnInstaller::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_MsnInstaller@@3HA
0x10001698: "VERSION.DLL" ??_C@_0M@PIEFMFPP@VERSION?4DLL?$AA@
0x100074D8: "__cdecl atexit" _atexit
0x10009588: "int NS_DMsiCIKeyRedirection::g_bSubshimUsed" ?g_bSubshimUsed@NS_DMsiCIKeyRedirection@@3HA
0x1000A014: "__stdcall _imp__lstrlenA" __imp__lstrlenA@4
0x10009608: "int NS_ModifyShellLinkPath::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_ModifyShellLinkPath@@3HA
0x1000A040: "__stdcall _imp__GetTickCount" __imp__GetTickCount@0
0x1000776D: "__cdecl _unlock" __unlock
0x1000216C: "\syswow64\installShield\_ISDEL.e" ??_C@_0CD@JFOGIILO@?2syswow64?2installShield?2_ISDEL?4e@
0x10006D30: "struct tagHOOKAPI * __stdcall ShimLib::GetHookAPIs(char *,unsigned short *,unsigned long *)" ?GetHookAPIs@ShimLib@@YGPAUtagHOOKAPI@@PADPAGPAK@Z
0x1000A01C: "__stdcall _imp__GetSystemWow64DirectoryW" __imp__GetSystemWow64DirectoryW@8
0x1000A0D0: "__cdecl _imp__memcpy" __imp__memcpy
0x1000A058: "__stdcall _imp__SetUnhandledExceptionFilter" __imp__SetUnhandledExceptionFilter@4
0x1000A0DC: "__cdecl _imp___amsg_exit" __imp___amsg_exit
0x10009594: "int NS_Wow64Mdm::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64Mdm@@3HA
0x100013EC: "FindFirstFileA" ??_C@_0P@FBOIBEBA@FindFirstFileA?$AA@
0x100013B4: "NotifyFn returned FALSE, fail lo" ??_C@_0CI@HFOCFJJ@NotifyFn?5returned?5FALSE?0?5fail?5lo@
0x10009620: "int NS_DopeWarsSanitizeSegmentRegisters::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DopeWarsSanitizeSegmentRegisters@@3HA
0x100023CC: "wceusbsh.sys" ??_C@_0N@GDKNPBFF@wceusbsh?4sys?$AA@
0x10006290: "public: __thiscall ShimLib::CString::~CString(void)" ??1CString@ShimLib@@QAE@XZ
0x10004B80: "int __stdcall NS_SmartPhoneSDK2003::APIHook_SetupDiCallClassInstaller(unsigned int,void *,struct _SP_DEVINFO_DATA *)" ?APIHook_SetupDiCallClassInstaller@NS_SmartPhoneSDK2003@@YGHIPAXPAU_SP_DEVINFO_DATA@@@Z
0x100090BC: "unsigned long NS_LimitLargeAddressAwareProcessTo3gb::g_stShimId" ?g_stShimId@NS_LimitLargeAddressAwareProcessTo3gb@@3KA
0x10009634: "__cdecl __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUrDIGUkivxlnkOlyq@ShimLib" ___@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUrDIGUkivxlnkOlyq@ShimLib
0x1000A064: "__stdcall _imp__GetCurrentProcessId" __imp__GetCurrentProcessId@0
0x100072C4: "__cdecl __CxxFrameHandler3" ___CxxFrameHandler3
0x1000A164: "__stdcall _imp__NtQueryInformationProcess" __imp__NtQueryInformationProcess@20
0x1000957C: "struct tagHOOKAPI * NS_GetFileVersionInfoRedirect::g_pAPIHooks" ?g_pAPIHooks@NS_GetFileVersionInfoRedirect@@3PAUtagHOOKAPI@@A
0x10007293: "__cdecl _initterm_e" __initterm_e
0x10006DD2: "__stdcall _CRT_INIT" __CRT_INIT@12
0x10001858: "RedirectHhShortcutToSysWow64" ??_C@_0BN@PILPFCEB@RedirectHhShortcutToSysWow64?$AA@
0x1000A0CC: apphelp_NULL_THUNK_DATA
0x10002CC0: "long __stdcall NS_DisablMsiKeyRedirection::APIHook_RegOpenKeyExW(struct HKEY__ *,unsigned short *,unsigned long,unsigned long,struct HKEY__ * *)" ?APIHook_RegOpenKeyExW@NS_DisablMsiKeyRedirection@@YGJPAUHKEY__@@PAGKKPAPAU2@@Z
0x1000955C: "struct tagHOOKAPI * NS_DisablMsiKeyRedirection::g_pAPIHooks" ?g_pAPIHooks@NS_DisablMsiKeyRedirection@@3PAUtagHOOKAPI@@A
0x10009600: "int NS_MsnInstaller::g_bSubshimUsed" ?g_bSubshimUsed@NS_MsnInstaller@@3HA
0x10002328: "[GetVersion] called. return WinX" ??_C@_0CD@OPCLAGHM@?$FLGetVersion?$FN?5called?4?5return?5WinX@
0x100015A8: "RegOpenKeyExA" ??_C@_0O@DCOGKJGG@RegOpenKeyExA?$AA@
0x100095B0: "struct tagHOOKAPI * NS_Wow64SysWow64DirLie::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64SysWow64DirLie@@3PAUtagHOOKAPI@@A
0x10001D28: ".bat" ??_C@_19PINKOIBI@?$AA?4?$AAb?$AAa?$AAt?$AA?$AA@
0x100015C8: "RegCreateKeyExA" ??_C@_0BA@NDHNNOGH@RegCreateKeyExA?$AA@
0x100090A4: "unsigned long NS_wow64IsDelShare::g_stShimId" ?g_stShimId@NS_wow64IsDelShare@@3KA
0x10001AE0: "ModifyShellLinkPath" ??_C@_1CI@NFIIGIIN@?$AAM?$AAo?$AAd?$AAi?$AAf?$AAy?$AAS?$AAh?$AAe?$AAl?$AAl?$AAL?$AAi?$AAn?$AAk?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x100037D0: "public: __thiscall ShimLib::CString::CString(char const *)" ??0CString@ShimLib@@QAE@PBD@Z
0x100021BC: "OpenFile" ??_C@_08JHCHADLJ@OpenFile?$AA@
0x100018E8: "Wow64UpdateDriverLie" ??_C@_0BF@JGOLGGNF@Wow64UpdateDriverLie?$AA@
0x10001210: "__cdecl IID_IShellLinkA" _IID_IShellLinkA
0x10004640: "int __stdcall NS_MsnInstaller::APIHook_SetupGetLineTextA(struct _INFCONTEXT *,void *,char const *,char const *,char *,unsigned long,unsigned long *)" ?APIHook_SetupGetLineTextA@NS_MsnInstaller@@YGHPAU_INFCONTEXT@@PAXPBD2PADKPAK@Z
0x10002290: "[GetVersionExA] called. return W" ??_C@_0CG@LNGMCFNM@?$FLGetVersionExA?$FN?5called?4?5return?5W@
0x1000A10C: "__cdecl _imp___strlwr" __imp___strlwr
0x10005A30: "struct tagHOOKAPI * __stdcall NS_Wow64UpdateDriverLie::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64UpdateDriverLie@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000259C: "")" ??_C@_02HPDBCLII@?$CC?$CJ?$AA@
0x10006A55: "public: void __thiscall ShimLib::CString::Truncate(int)" ?Truncate@CString@ShimLib@@QAEXH@Z
0x1000A038: "__stdcall _imp__FindFirstFileW" __imp__FindFirstFileW@8
0x10001878: "SmartPhoneSDK2003" ??_C@_0BC@IFLNANJH@SmartPhoneSDK2003?$AA@
0x100038A0: "struct tagHOOKAPI * __stdcall NS_LimitLargeAddressAwareProcessTo3gb::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_LimitLargeAddressAwareProcessTo3gb@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000A0FC: "__cdecl _imp__strstr" __imp__strstr
0x1000A144: "__cdecl _imp__memset" __imp__memset
0x10004E57: "int __stdcall NS_wow64IsDelShare::InitWow64Shim(void)" ?InitWow64Shim@NS_wow64IsDelShare@@YGHXZ
0x1000632D: "public: __thiscall ShimLib::CString::CString(unsigned short const *)" ??0CString@ShimLib@@QAE@PBG@Z
0x100019F0: "DopeWarsSanitizeSegmentRegisters" ??_C@_1EC@COKNPLFD@?$AAD?$AAo?$AAp?$AAe?$AAW?$AAa?$AAr?$AAs?$AAS?$AAa?$AAn?$AAi?$AAt?$AAi?$AAz?$AAe?$AAS?$AAe?$AAg?$AAm?$AAe?$AAn?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAs@
0x10009538: "class ShimLib::CString NS_GetFileVersionInfoRedirect::g_csFilenameToReplace" ?g_csFilenameToReplace@NS_GetFileVersionInfoRedirect@@3VCString@ShimLib@@A
0x100090D8: "protected: static int * ShimLib::CString::_afxInitData" ?_afxInitData@CString@ShimLib@@1PAHA
0x100025B0: "ShimLib::GetHookAPIs" ??_C@_0BF@NHNKNNIM@ShimLib?3?3GetHookAPIs?$AA@
0x1000A0A0: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x10007844: "__cdecl _SEH_prolog4_GS" __SEH_prolog4_GS
0x10001A98: "LimitLargeAddressAwareProcessTo3" ??_C@_1EG@DNECFKOH@?$AAL?$AAi?$AAm?$AAi?$AAt?$AAL?$AAa?$AAr?$AAg?$AAe?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AAA?$AAw?$AAa?$AAr?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAT?$AAo?$AA3@
0x100017F4: "GetFileVersionInfoRedirect" ??_C@_0BL@MLNBHPFM@GetFileVersionInfoRedirect?$AA@
0x10009564: "struct tagHOOKAPI * NS_DMsiCIKeyRedirection::g_pAPIHooks" ?g_pAPIHooks@NS_DMsiCIKeyRedirection@@3PAUtagHOOKAPI@@A
0x10001F14: "Program Files" ??_C@_0O@LLOECPBE@Program?5Files?$AA@
0x10009420: "char * NS_DisableFilesystemRedirector::g_szFilenamePattern" ?g_szFilenamePattern@NS_DisableFilesystemRedirector@@3PADA
0x100016B8: "GetFileVersionInfoSizeA" ??_C@_0BI@FKDAHLLJ@GetFileVersionInfoSizeA?$AA@
0x1000A0F4: "__cdecl _imp__wcsncmp" __imp__wcsncmp
0x10005DC0: "long __stdcall NS_DopeWarsSanitizeSegmentRegisters::VectoredHandler(struct _EXCEPTION_POINTERS *)" ?VectoredHandler@NS_DopeWarsSanitizeSegmentRegisters@@YGJPAU_EXCEPTION_POINTERS@@@Z
0x1000A018: "__stdcall _imp__ExpandEnvironmentStringsA" __imp__ExpandEnvironmentStringsA@12
0x1000A0C4: "__stdcall _imp__SE_COM_AddServer" __imp__SE_COM_AddServer@8
0x1000241C: "UpdateDriverForPlugAndPlayDevice" ??_C@_0CD@LLCKLJBB@UpdateDriverForPlugAndPlayDevice@
0x1000A008: "__stdcall _imp__Wow64DisableWow64FsRedirection" __imp__Wow64DisableWow64FsRedirection@4
0x1000A0B4: api-ms-win-core-versionansi-l1-1-0_NULL_THUNK_DATA
0x10001C34: "Wow64UpdateDriverLie" ??_C@_1CK@COFIFMJE@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAL?$AAi?$AAe?$AA?$AA@
0x10002004: "SETUPAPI.DLL" ??_C@_0N@KIHNNKDM@SETUPAPI?4DLL?$AA@
0x1000788C: "__cdecl _SEH_epilog4_GS" __SEH_epilog4_GS
0x100017A0: "DisablMsiKeyRedirection" ??_C@_0BI@OGBMGOGM@DisablMsiKeyRedirection?$AA@
0x10009630: "int NS_DisableFilesystemRedirector::g_bSubshimUsed" ?g_bSubshimUsed@NS_DisableFilesystemRedirector@@3HA
0x10004A70: "struct tagHOOKAPI * __stdcall NS_RedirectHhShortcutToSysWow64::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_RedirectHhShortcutToSysWow64@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10002AB0: "struct tagHOOKAPI * __stdcall NS_DisableFilesystemRedirector::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_DisableFilesystemRedirector@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x100017DC: "DuplicateHandleAccess" ??_C@_0BG@EMMIBOKC@DuplicateHandleAccess?$AA@
0x1000A138: "__cdecl _imp___initterm" __imp___initterm
0x10003200: "int __stdcall NS_DuplicateHandleAccess::APIHook_DuplicateHandle(void *,void *,void *,void * *,unsigned long,int,unsigned long)" ?APIHook_DuplicateHandle@NS_DuplicateHandleAccess@@YGHPAX00PAPAXKHK@Z
0x1000614C: "protected: void __thiscall ShimLib::CString::AllocBuffer(int)" ?AllocBuffer@CString@ShimLib@@IAEXH@Z
0x100014BC: "RegOpenKeyExW" ??_C@_0O@COHOBMLB@RegOpenKeyExW?$AA@
0x100012B8: "DisableFilesystemRedirector init" ??_C@_0CJ@DAOKEIOG@DisableFilesystemRedirector?5init@
0x100024E0: "[DopeWarsSanitizeSegmentRegister" ??_C@_0EG@KNKPJJKE@?$FLDopeWarsSanitizeSegmentRegister@
0x100015B8: "RegCreateKeyExW" ??_C@_0BA@MPOFGLLA@RegCreateKeyExW?$AA@
0x10005F9D: "char * __cdecl ShimLib::stristr(char const *,char const *)" ?stristr@ShimLib@@YAPADPBD0@Z
0x1000A094: KERNEL32_NULL_THUNK_DATA
0x100090A8: "unsigned long NS_Wow64CoCreateInstanceFlag::g_stShimId" ?g_stShimId@NS_Wow64CoCreateInstanceFlag@@3KA
0x100018A8: "wow64IsDelShare" ??_C@_0BA@BAFJGJGP@wow64IsDelShare?$AA@
0x10009040: "char * NS_MsnInstaller::g_szCommandLine" ?g_szCommandLine@NS_MsnInstaller@@3PADA
0x10005F08: "void * __stdcall ShimLib::SafeCalloc(unsigned int,unsigned int,unsigned int *)" ?SafeCalloc@ShimLib@@YGPAXIIPAI@Z
0x10009088: "unsigned long NS_DMsiCIKeyRedirection::g_stShimId" ?g_stShimId@NS_DMsiCIKeyRedirection@@3KA
0x100095E4: "int NS_SmartPhoneSDK2003::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_SmartPhoneSDK2003@@3HA
0x1000A0A8: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x1000190C: "Ignore2ndFindClose" ??_C@_0BD@PEFGJOJC@Ignore2ndFindClose?$AA@
0x10001848: "MsnInstaller" ??_C@_0N@CKCFKODC@MsnInstaller?$AA@
0x10001478: "NS_DisablMsiKeyRedirection::Init" ??_C@_0DB@LEPKCCGE@NS_DisablMsiKeyRedirection?3?3Init@
0x100014F0: "NtMapViewOfSection" ??_C@_0BD@OPIOPJOL@NtMapViewOfSection?$AA@
0x100012E8: "DisableFilesystemRedirector noti" ??_C@_0EF@CEPEBFPH@DisableFilesystemRedirector?5noti@
0x1000624E: "protected: void __thiscall ShimLib::CString::CopyBeforeWrite(void)" ?CopyBeforeWrite@CString@ShimLib@@IAEXXZ
0x10002EF6: "unsigned long __stdcall NS_DMsiCIKeyRedirection::GetShimmedAccessFlagA(struct HKEY__ *,char *)" ?GetShimmedAccessFlagA@NS_DMsiCIKeyRedirection@@YGKPAUHKEY__@@PAD@Z
0x100090B0: "unsigned long NS_RedirectHhShortcutToSysWow64::g_stShimId" ?g_stShimId@NS_RedirectHhShortcutToSysWow64@@3KA
0x10009018: "char * NS_LimitLargeAddressAwareProcessTo3gb::g_szCommandLine" ?g_szCommandLine@NS_LimitLargeAddressAwareProcessTo3gb@@3PADA
0x100095B8: "int NS_Wow64MM2::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64MM2@@3HA
0x100095C0: "int NS_Wow64ProcessLie::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64ProcessLie@@3HA
0x10008004: "__cdecl _TI1?AVCStringError@CString@ShimLib@@" __TI1?AVCStringError@CString@ShimLib@@
0x100020E0: "NS_Wow64CoCreateInstanceFlag::In" ??_C@_0DD@IGCDJLIF@NS_Wow64CoCreateInstanceFlag?3?3In@
0x100058E0: "int __stdcall NS_Wow64UpdateDriverLie::APIHook_UpdateDriverForPlugAndPlayDevicesA(struct HWND__ *,char const *,char const *,unsigned long,int *)" ?APIHook_UpdateDriverForPlugAndPlayDevicesA@NS_Wow64UpdateDriverLie@@YGHPAUHWND__@@PBD1KPAH@Z
0x10002C80: "long __stdcall NS_DisablMsiKeyRedirection::APIHook_NtAllocateVirtualMemory(void *,void * *,unsigned long,unsigned long *,unsigned long,unsigned long)" ?APIHook_NtAllocateVirtualMemory@NS_DisablMsiKeyRedirection@@YGJPAXPAPAXKPAKKK@Z
0x10002490: "NS_Wow64SysWow64DirLie::Initiali" ??_C@_0CN@MGBNNLCG@NS_Wow64SysWow64DirLie?3?3Initiali@
0x100013DC: "KERNEL32.DLL" ??_C@_0N@NHGLKGEC@KERNEL32?4DLL?$AA@
0x10001718: "NS_LimitLargeAddressAwareProcess" ??_C@_0DA@GJAEPMAL@NS_LimitLargeAddressAwareProcess@
0x100090D4: "long WinXPVersionLie" ?WinXPVersionLie@@3JA
0x1000907C: "__cdecl __native_dllmain_reason" ___native_dllmain_reason
0x10007767: "__cdecl _lock" __lock
0x10001208: "__cdecl __guard_iat_table" ___guard_iat_table
0x100021EC: "PSAPI.DLL" ??_C@_09EPMADGLA@PSAPI?4DLL?$AA@
0x1000A134: "__cdecl _imp___except_handler4_common" __imp___except_handler4_common
0x1000A034: "__stdcall _imp__GetFileAttributesW" __imp__GetFileAttributesW@4
0x10005B60: "void __stdcall NS_Wow64ProcessLie::APIHook_GetNativeSystemInfo(struct _SYSTEM_INFO *)" ?APIHook_GetNativeSystemInfo@NS_Wow64ProcessLie@@YGXPAU_SYSTEM_INFO@@@Z
0x10001230: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x10001EB0: "Program Files\MSN" ??_C@_1CE@KAGCCJFK@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x10004499: "public: int __thiscall ShimLib::CString::EndsWith(unsigned short const *)const " ?EndsWith@CString@ShimLib@@QBEHPBG@Z
0x1000A12C: "__cdecl _imp___unlock" __imp___unlock
0x100090C8: "unsigned long NS_DopeWarsSanitizeSegmentRegisters::g_stShimId" ?g_stShimId@NS_DopeWarsSanitizeSegmentRegisters@@3KA
0x1000956C: "struct tagHOOKAPI * NS_DuplicateHandleAccess::g_pAPIHooks" ?g_pAPIHooks@NS_DuplicateHandleAccess@@3PAUtagHOOKAPI@@A
0x1000A07C: "__stdcall _imp__AddVectoredExceptionHandler" __imp__AddVectoredExceptionHandler@8
0x10001D50: "%windir%\syswow64\cmd.exe" ??_C@_0BK@EKJAPFLJ@?$CFwindir?$CF?2syswow64?2cmd?4exe?$AA@
0x100015D8: "NS_DuplicateHandleAccess::Initia" ??_C@_0CP@MHCABHND@NS_DuplicateHandleAccess?3?3Initia@
0x10009610: "struct tagHOOKAPI * NS_ModifyShellLinkPath::g_pAPIHooks" ?g_pAPIHooks@NS_ModifyShellLinkPath@@3PAUtagHOOKAPI@@A
0x10003813: "void __stdcall NS_LimitLargeAddressAwareProcessTo3gb::ReserveAddressSpaceAbove3gb(void)" ?ReserveAddressSpaceAbove3gb@NS_LimitLargeAddressAwareProcessTo3gb@@YGXXZ
0x10009094: "unsigned long NS_Wow64UpdateDriverLie::g_stShimId" ?g_stShimId@NS_Wow64UpdateDriverLie@@3KA
0x1000651B: "public: unsigned short * __thiscall ShimLib::CString::GetBuffer(int)" ?GetBuffer@CString@ShimLib@@QAEPAGH@Z
0x10001410: "SOFTWARE\MICROSOFT\WINDOWS\CURRE" ??_C@_1GI@FBDMADJC@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?2?$AAC?$AAU?$AAR?$AAR?$AAE@
0x10001ED4: "%SystemDrive%" ??_C@_1BM@FOPDEAND@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$CF?$AA?$AA@
0x1000A1F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-versionansi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-versionansi-l1-1-0
0x10009030: "char * NS_wow64IsDelShare::g_szCommandLine" ?g_szCommandLine@NS_wow64IsDelShare@@3PADA
0x100090C0: "unsigned long NS_GetFileVersionInfoRedirect::g_stShimId" ?g_stShimId@NS_GetFileVersionInfoRedirect@@3KA
0x1000A150: "__stdcall _imp__RtlAllocateHeap" __imp__RtlAllocateHeap@12
0x10001810: "LimitLargeAddressAwareProcessTo3" ??_C@_0CD@EIDMKJOE@LimitLargeAddressAwareProcessTo3@
0x10001608: "DuplicateHandle" ??_C@_0BA@KKBHKMMH@DuplicateHandle?$AA@
0x1000A004: "__stdcall _imp__GetSystemInfo" __imp__GetSystemInfo@4
0x1000A1CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x10007665: "__cdecl __security_init_cookie" ___security_init_cookie
0x10007520: "__cdecl _FindPESection" __FindPESection
0x10001DD0: "%windir%\syswow64\" ??_C@_1CG@HFCCOHND@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAw?$AAo?$AAw?$AA6?$AA4?$AA?2?$AA?$AA@
0x1000A1E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x1000135C: "fdwReason(%d) pszCmdLine(%s)" ??_C@_0BN@BMJMMFGL@fdwReason?$CI?$CFd?$CJ?5pszCmdLine?$CI?$CFs?$CJ?$AA@
0x10009038: "char * NS_SmartPhoneSDK2003::g_szCommandLine" ?g_szCommandLine@NS_SmartPhoneSDK2003@@3PADA
0x100010C4: "__cdecl __xi_a" ___xi_a
0x10005F38: "char * __stdcall ShimLib::StringNDuplicateA(char const *,unsigned long)" ?StringNDuplicateA@ShimLib@@YGPADPBDK@Z
0x100010B4: "__cdecl __xc_a" ___xc_a
0x100010C0: "__cdecl __xc_z" ___xc_z
0x100010CC: "__cdecl __xi_z" ___xi_z
0x10002120: "CoCreateInstance" ??_C@_0BB@FBCNKNOO@CoCreateInstance?$AA@
0x100050F0: "unsigned long __stdcall NS_Wow64Mdm::APIHook_GetModuleFileNameExA(void *,struct HINSTANCE__ *,char *,unsigned long)" ?APIHook_GetModuleFileNameExA@NS_Wow64Mdm@@YGKPAXPAUHINSTANCE__@@PADK@Z
0x1000A098: "__stdcall _imp__RegOpenKeyExA" __imp__RegOpenKeyExA@20
0x100017B8: "DopeWarsSanitizeSegmentRegisters" ??_C@_0CB@GIFIMNGO@DopeWarsSanitizeSegmentRegisters@
0x1000A0AC: "__stdcall _imp__VerQueryValueA" __imp__VerQueryValueA@16
0x10001C74: "Ignore2ndFindClose" ??_C@_1CG@GCIMBAJH@?$AAI?$AAg?$AAn?$AAo?$AAr?$AAe?$AA2?$AAn?$AAd?$AAF?$AAi?$AAn?$AAd?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x100072E0: "__cdecl _except_handler4" __except_handler4
0x10002D30: "struct tagHOOKAPI * __stdcall NS_DisablMsiKeyRedirection::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_DisablMsiKeyRedirection@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000A0D4: "__stdcall _imp___CxxThrowException" __imp___CxxThrowException@8
0x1000A0D8: "__cdecl _imp__memmove" __imp__memmove
0x10009034: "char * NS_Wow64CoCreateInstanceFlag::g_szCommandLine" ?g_szCommandLine@NS_Wow64CoCreateInstanceFlag@@3PADA
0x10004180: "long __stdcall NS_ModifyShellLinkPath::COMHook_IShellLinkA_SetArguments(void *,char const *)" ?COMHook_IShellLinkA_SetArguments@NS_ModifyShellLinkPath@@YGJPAXPBD@Z
0x1000A104: "__cdecl _imp__wcstombs" __imp__wcstombs
0x1000A090: "__stdcall _imp__VirtualQuery" __imp__VirtualQuery@12
0x10004B90: "int __stdcall NS_SmartPhoneSDK2003::APIHook_UpdateDriverForPlugAndPlayDevicesW(struct HWND__ *,unsigned short const *,unsigned short const *,unsigned long,int *)" ?APIHook_UpdateDriverForPlugAndPlayDevicesW@NS_SmartPhoneSDK2003@@YGHPAUHWND__@@PBG1KPAH@Z
0x10007512: "__cdecl _XcptFilter" __XcptFilter
0x1000A054: "__stdcall _imp__GetCurrentProcess" __imp__GetCurrentProcess@0
0x10009554: "struct tagHOOKAPI * NS_DisableFilesystemRedirector::g_pAPIHooks" ?g_pAPIHooks@NS_DisableFilesystemRedirector@@3PAUtagHOOKAPI@@A
0x10008014: "__cdecl _CTA1?AVCStringError@CString@ShimLib@@" __CTA1?AVCStringError@CString@ShimLib@@
0x10009084: "__cdecl __security_cookie_complement" ___security_cookie_complement
0x10001F40: "MsnInstaller initialized." ??_C@_0BK@HMCDGPJP@MsnInstaller?5initialized?4?$AA@
0x1000A130: "__cdecl _imp___lock" __imp___lock
0x1000A0C0: "__stdcall _imp__SE_GetShimId" __imp__SE_GetShimId@8
0x10004F10: "int __stdcall NS_wow64IsDelShare::APIHook_OpenFile(char const *,struct _OFSTRUCT *,unsigned int)" ?APIHook_OpenFile@NS_wow64IsDelShare@@YGHPBDPAU_OFSTRUCT@@I@Z
0x10009540: "class ShimLib::CString NS_GetFileVersionInfoRedirect::g_csFilenameRedirected" ?g_csFilenameRedirected@NS_GetFileVersionInfoRedirect@@3VCString@ShimLib@@A
0x1000A140: "__cdecl _imp__free" __imp__free
0x100025A4: "%S%s%s%s " ??_C@_09EAGPOLDP@?$CFS?$CFs?$CFs?$CFs?6?$AA@
0x10001C9C: "DMsiCIKeyRedirection" ??_C@_1CK@PPNCFIKJ@?$AAD?$AAM?$AAs?$AAi?$AAC?$AAI?$AAK?$AAe?$AAy?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x10003520: "int __stdcall NS_GetFileVersionInfoRedirect::APIHook_GetFileVersionInfoA(char *,unsigned long,unsigned long,void *)" ?APIHook_GetFileVersionInfoA@NS_GetFileVersionInfoRedirect@@YGHPADKKPAX@Z
0x1000A000: "__stdcall _imp__Wow64RevertWow64FsRedirection" __imp__Wow64RevertWow64FsRedirection@4
0x10001578: "NS_DMsiCIKeyRedirection::Initial" ??_C@_0CO@GLMLNEOA@NS_DMsiCIKeyRedirection?3?3Initial@
0x1000A0E8: "__cdecl _imp___wcsnicmp" __imp___wcsnicmp
0x1000A00C: "__stdcall _imp__VirtualAlloc" __imp__VirtualAlloc@16
0x1000A0A4: "__stdcall _imp__RegQueryValueA" __imp__RegQueryValueA@16
0x10003050: "long __stdcall NS_DMsiCIKeyRedirection::APIHook_RegCreateKeyExA(struct HKEY__ *,char const *,unsigned long,char *,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES *,struct HKEY__ * *,unsigned long *)" ?APIHook_RegCreateKeyExA@NS_DMsiCIKeyRedirection@@YGJPAUHKEY__@@PBDKPADKKPAU_SECURITY_ATTRIBUTES@@PAPAU2@PAK@Z
0x10001938: "wow64 shim is initialized." ??_C@_0BL@COHFGHIM@wow64?5shim?5is?5initialized?4?$AA@
0x100013FC: "pdwHookCount(%d)" ??_C@_0BB@GEMBACLN@pdwHookCount?$CI?$CFd?$CJ?$AA@
0x10004D00: "__stdcall APIHook_CoCreateInstanceEx" _APIHook_CoCreateInstanceEx@24
0x10001008: "const type_info::`vftable'" ??_7type_info@@6B@
0x10001954: "NotifyFn" ??_C@_08LOJNPBNJ@NotifyFn?$AA@
0x10001A60: "GetFileVersionInfoRedirect" ??_C@_1DG@KBGGBIPA@?$AAG?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AA?$AA@
0x1000A024: "__stdcall _imp__GetWindowsDirectoryA" __imp__GetWindowsDirectoryA@8
0x1000777F: "__cdecl _EH_epilog3" __EH_epilog3
0x1000246C: "IsWow64Process" ??_C@_0P@LKABJJMO@IsWow64Process?$AA@
0x1000A160: "__stdcall _imp__NtClose" __imp__NtClose@4
0x10002FC0: "long __stdcall NS_DMsiCIKeyRedirection::APIHook_RegOpenKeyExA(struct HKEY__ *,char *,unsigned long,unsigned long,struct HKEY__ * *)" ?APIHook_RegOpenKeyExA@NS_DMsiCIKeyRedirection@@YGJPAUHKEY__@@PADKKPAPAU2@@Z
0x10002900: "void __cdecl operator delete(void *)" ??3@YAXPAX@Z
0x10001784: "DisableFilesystemRedirector" ??_C@_0BM@KDBGLCGJ@DisableFilesystemRedirector?$AA@
0x10001BF8: "Wow64MM2" ??_C@_1BC@BEJNKKJE@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAM?$AAM?$AA2?$AA?$AA@
0x10001DA0: "%windir%\system32\" ??_C@_1CG@ENEBNGDB@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$AA@
0x10002390: "GetVersionExA" ??_C@_0O@LLCLDPIK@GetVersionExA?$AA@
0x10006C5E: "int __stdcall ShimLib::NotifyShimsEx(int,unsigned int)" ?NotifyShimsEx@ShimLib@@YGHHI@Z
0x10009584: "struct tagHOOKAPI * NS_LimitLargeAddressAwareProcessTo3gb::g_pAPIHooks" ?g_pAPIHooks@NS_LimitLargeAddressAwareProcessTo3gb@@3PAUtagHOOKAPI@@A
0x10001618: "NS_Ignore2ndFindClose::Initializ" ??_C@_0CM@EELGDBBG@NS_Ignore2ndFindClose?3?3Initializ@
0x10001B24: "RedirectHhShortcutToSysWow64" ??_C@_1DK@PBGGIKEI@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAH?$AAh?$AAS?$AAh?$AAo?$AAr?$AAt?$AAc?$AAu?$AAt?$AAT?$AAo?$AAS?$AAy?$AAs?$AAW?$AAo?$AAw?$AA6?$AA4?$AA?$AA@
0x1000A06C: "__stdcall _imp__GetProcessHeap" __imp__GetProcessHeap@0
0x1000A0F0: "__cdecl _imp___wcsicmp" __imp___wcsicmp
0x100078A7: "__cdecl memset" _memset
0x1000A110: "__cdecl _imp__iswctype" __imp__iswctype
0x1000188C: "Wow64CoCreateInstanceFlag" ??_C@_0BK@KKLKADMH@Wow64CoCreateInstanceFlag?$AA@
0x1000A0B8: "__stdcall _imp__SE_COM_Lookup" __imp__SE_COM_Lookup@12
0x1000960C: "int NS_ModifyShellLinkPath::g_bSubshimUsed" ?g_bSubshimUsed@NS_ModifyShellLinkPath@@3HA
0x100023E0: "NS_Wow64UpdateDriverLie::Initial" ??_C@_0CO@GEDDKOIG@NS_Wow64UpdateDriverLie?3?3Initial@
0x1000743F: "__cdecl _onexit" __onexit
0x10002440: "NS_Wow64ProcessLie::InitializeHo" ??_C@_0CJ@IECCDGDA@NS_Wow64ProcessLie?3?3InitializeHo@
0x100095C8: "struct tagHOOKAPI * NS_Wow64ProcessLie::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64ProcessLie@@3PAUtagHOOKAPI@@A
0x10004330: "struct tagHOOKAPI * __stdcall NS_ModifyShellLinkPath::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_ModifyShellLinkPath@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10001330: "DisableFilesystemRedirector unin" ??_C@_0CL@GLLOHPMC@DisableFilesystemRedirector?5unin@
0x100077A2: "__cdecl _EH_prolog3" __EH_prolog3
0x10001220: "__cdecl CLSID_ShellLink" _CLSID_ShellLink
0x100020BC: "UpdateDriverForPlugAndPlayDevice" ??_C@_0CD@KHLCAMMG@UpdateDriverForPlugAndPlayDevice@
0x10007773: "__cdecl __dllonexit" ___dllonexit
0x10009604: "struct tagHOOKAPI * NS_MsnInstaller::g_pAPIHooks" ?g_pAPIHooks@NS_MsnInstaller@@3PAUtagHOOKAPI@@A
0x100034A0: "unsigned long __stdcall NS_GetFileVersionInfoRedirect::APIHook_GetFileVersionInfoSizeA(char *,unsigned long *)" ?APIHook_GetFileVersionInfoSizeA@NS_GetFileVersionInfoRedirect@@YGKPADPAK@Z
0x10004FB0: "struct tagHOOKAPI * __stdcall NS_wow64IsDelShare::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_wow64IsDelShare@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10001F5C: "NS_MsnInstaller::NotifyFn" ??_C@_0BK@JHFAJDKH@NS_MsnInstaller?3?3NotifyFn?$AA@
0x10001550: "INSTALLER" ??_C@_09BCKAKBAO@INSTALLER?$AA@
0x10002014: "SetupGetLineTextA" ??_C@_0BC@DBGFHKDB@SetupGetLineTextA?$AA@
0x10006A80: "__fastcall _guard_check_icall_nop" @_guard_check_icall_nop@4
0x1000A088: "__stdcall _imp__GetFileSize" __imp__GetFileSize@8
0x100095C4: "int NS_Wow64ProcessLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64ProcessLie@@3HA
0x10003650: "public: __thiscall ShimLib::CStringToken::~CStringToken(void)" ??1CStringToken@ShimLib@@QAE@XZ
0x1000908C: "unsigned long NS_Ignore2ndFindClose::g_stShimId" ?g_stShimId@NS_Ignore2ndFindClose@@3KA
0x10002114: "OLE32.DLL" ??_C@_09LFONMEPF@OLE32?4DLL?$AA@
0x10003240: "struct tagHOOKAPI * __stdcall NS_DuplicateHandleAccess::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_DuplicateHandleAccess@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000A14C: msvcrt_NULL_THUNK_DATA
0x100090AC: "unsigned long NS_SmartPhoneSDK2003::g_stShimId" ?g_stShimId@NS_SmartPhoneSDK2003@@3KA
0x10002028: "hh" ??_C@_15FEAIAMIH@?$AAh?$AAh?$AA?$AA@
0x10001D0C: "COMHook_IShellLinkA_SetPath" ??_C@_0BM@JHIDIFFJ@COMHook_IShellLinkA_SetPath?$AA@
0x1000962C: "int NS_DisablMsiKeyRedirection::g_bSubshimUsed" ?g_bSubshimUsed@NS_DisablMsiKeyRedirection@@3HA
0x10006229: "protected: static void __stdcall ShimLib::CString::Release(class ShimLib::CStringData<unsigned short> *)" ?Release@CString@ShimLib@@KGXPAV?$CStringData@G@2@@Z
0x10001984: "DisableFilesystemRedirector" ??_C@_1DI@GPCAFGA@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x10002A23: "int __stdcall NS_DisableFilesystemRedirector::NotifyFn(unsigned long)" ?NotifyFn@NS_DisableFilesystemRedirector@@YGHK@Z
0x100023BC: "wceusbsh.inf" ??_C@_0N@HCNFBFEP@wceusbsh?4inf?$AA@
0x100014CC: "ntdll.dll" ??_C@_09FLKFJBLM@ntdll?4dll?$AA@
0x1000961C: "int NS_DuplicateHandleAccess::g_bSubshimUsed" ?g_bSubshimUsed@NS_DuplicateHandleAccess@@3HA
0x10009548: "void * NS_Ignore2ndFindClose::g_OldFindFile" ?g_OldFindFile@NS_Ignore2ndFindClose@@3PAXA
0x10007761: "__cdecl _except_handler4_common" __except_handler4_common
0x1000A03C: "__stdcall _imp__FileTimeToSystemTime" __imp__FileTimeToSystemTime@8
0x10001664: "NS_GetFileVersionInfoRedirect::I" ??_C@_0DE@OJHLGHAM@NS_GetFileVersionInfoRedirect?3?3I@
0x10009008: "char * NS_DMsiCIKeyRedirection::g_szCommandLine" ?g_szCommandLine@NS_DMsiCIKeyRedirection@@3PADA
0x100076FF: "__cdecl _initterm" __initterm
0x10009644: "__cdecl __onexitbegin" ___onexitbegin
0x10001E4C: "SHELL32.DLL" ??_C@_1BI@GFHOFLPL@?$AAS?$AAH?$AAE?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x10004D40: "struct tagHOOKAPI * __stdcall NS_Wow64CoCreateInstanceFlag::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64CoCreateInstanceFlag@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10006A83: "__stdcall StringCchLengthA" _StringCchLengthA@12
0x100010D0: "__cdecl __guard_fids_table" ___guard_fids_table
0x10006ADC: "__stdcall StringCchLengthW" _StringCchLengthW@12
0x10005F81: "char * __stdcall ShimLib::StringDuplicateA(char const *)" ?StringDuplicateA@ShimLib@@YGPADPBD@Z
0x1000954C: "unsigned long NS_Ignore2ndFindClose::g_PassCount" ?g_PassCount@NS_Ignore2ndFindClose@@3KA
0x1000236C: "NS_Wow64MM2::InitializeHooksMult" ??_C@_0CC@CPHOJGAA@NS_Wow64MM2?3?3InitializeHooksMult@
0x1000A114: "__cdecl _imp__towlower" __imp__towlower
0x10002268: ",ProxyRemoteInstall" ??_C@_1CI@FMFOCKPP@?$AA?0?$AAP?$AAr?$AAo?$AAx?$AAy?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?$AA@
0x10005750: "unsigned long __stdcall NS_Wow64MM2::APIHook_GetVersion(void)" ?APIHook_GetVersion@NS_Wow64MM2@@YGKXZ
0x10002304: "NS_Wow64MM2::APIHook_GetVersionE" ??_C@_0CD@CPBPALDH@NS_Wow64MM2?3?3APIHook_GetVersionE@
0x10001C60: "Wow64Mdm" ??_C@_1BC@KHFAOBJO@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAM?$AAd?$AAm?$AA?$AA@
0x10002160: "_ISDEL.exe" ??_C@_0L@KFFBFKKI@_ISDEL?4exe?$AA@
0x100047C0: "struct tagHOOKAPI * __stdcall NS_MsnInstaller::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_MsnInstaller@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000A0E0: "__cdecl _imp____CxxFrameHandler3" __imp____CxxFrameHandler3
0x10009014: "char * NS_GetFileVersionInfoRedirect::g_szCommandLine" ?g_szCommandLine@NS_GetFileVersionInfoRedirect@@3PADA
0x1000A05C: "__stdcall _imp__UnhandledExceptionFilter" __imp__UnhandledExceptionFilter@4
0x100056C0: "int __stdcall NS_Wow64MM2::APIHook_GetVersionExW(struct _OSVERSIONINFOW *)" ?APIHook_GetVersionExW@NS_Wow64MM2@@YGHPAU_OSVERSIONINFOW@@@Z
0x1000291B: "int __stdcall NS_DisableFilesystemRedirector::MatchPattern(char const *,char const *)" ?MatchPattern@NS_DisableFilesystemRedirector@@YGHPBD0@Z
0x10009098: "unsigned long NS_Wow64SysWow64DirLie::g_stShimId" ?g_stShimId@NS_Wow64SysWow64DirLie@@3KA
0x100057A0: "struct tagHOOKAPI * __stdcall NS_Wow64MM2::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64MM2@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10001FCC: "NS_MsnInstaller::InitializeHooks" ??_C@_0CG@MMAOCNPO@NS_MsnInstaller?3?3InitializeHooks@
0x10009530: "void * ShimLib::g_hHeapTweakerMutex" ?g_hHeapTweakerMutex@ShimLib@@3PAXA
0x100024C0: "GetSystemWow64DirectoryA" ??_C@_0BJ@FNCHKEAA@GetSystemWow64DirectoryA?$AA@
0x1000732F: "__cdecl __report_gsfailure" ___report_gsfailure
0x10001D78: ".html" ??_C@_1M@FKJKLOKH@?$AA?4?$AAh?$AAt?$AAm?$AAl?$AA?$AA@
0x10005EC8: "void * __stdcall ShimLib::SafeMalloc(unsigned int,unsigned int,unsigned int *)" ?SafeMalloc@ShimLib@@YGPAXIIPAI@Z
0x10001B84: "Wow64CoCreateInstanceFlag" ??_C@_1DE@JILGHOMC@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAC?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AAF?$AAl?$AAa?$AAg?$AA?$AA@
0x10009638: "__cdecl __native_startup_lock" ___native_startup_lock
0x10009560: "int NS_DMsiCIKeyRedirection::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DMsiCIKeyRedirection@@3HA
0x10001FF4: "RegSetValueExW" ??_C@_0P@LIPJIDOO@RegSetValueExW?$AA@
0x100022B8: "NS_Wow64MM2::APIHook_GetVersionE" ??_C@_0CD@DDIHLOOA@NS_Wow64MM2?3?3APIHook_GetVersionE@
0x1000A13C: "__cdecl _imp__malloc" __imp__malloc
0x100090C4: "unsigned long NS_DuplicateHandleAccess::g_stShimId" ?g_stShimId@NS_DuplicateHandleAccess@@3KA
0x10005B30: "int __stdcall NS_Wow64ProcessLie::APIHook_IsWow64Process(void *,int *)" ?APIHook_IsWow64Process@NS_Wow64ProcessLie@@YGHPAXPAH@Z
0x10009528: "void * NS_wow64IsDelShare::h_IsDel" ?h_IsDel@NS_wow64IsDelShare@@3PAXA
0x1000137C: "NS_DisableFilesystemRedirector::" ??_C@_0DF@KBKKBMLC@NS_DisableFilesystemRedirector?3?3@
0x10001748: "NS_LimitLargeAddressAwareProcess" ??_C@_0DM@JMBFIIKD@NS_LimitLargeAddressAwareProcess@
0x1000963C: "__cdecl __native_startup_state" ___native_startup_state
0x1000902C: "char * NS_Wow64ProcessLie::g_szCommandLine" ?g_szCommandLine@NS_Wow64ProcessLie@@3PADA
0x10001BB8: "wow64IsDelShare" ??_C@_1CA@EBAKDPIP@?$AAw?$AAo?$AAw?$AA6?$AA4?$AAI?$AAs?$AAD?$AAe?$AAl?$AAS?$AAh?$AAa?$AAr?$AAe?$AA?$AA@
0x100090CC: "unsigned long NS_DisablMsiKeyRedirection::g_stShimId" ?g_stShimId@NS_DisablMsiKeyRedirection@@3KA
0x10001010: "__cdecl _load_config_used" __load_config_used
0x10002134: "CoCreateInstanceEx" ??_C@_0BD@PJCNOMMP@CoCreateInstanceEx?$AA@
0x10009574: "struct tagHOOKAPI * NS_Ignore2ndFindClose::g_pAPIHooks" ?g_pAPIHooks@NS_Ignore2ndFindClose@@3PAUtagHOOKAPI@@A
0x100078A1: "__cdecl memmove" _memmove
0x100095E8: "int NS_SmartPhoneSDK2003::g_bSubshimUsed" ?g_bSubshimUsed@NS_SmartPhoneSDK2003@@3HA
0x10001660: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x1000A080: "__stdcall _imp__FindClose" __imp__FindClose@4
0x10003D90: "long __stdcall NS_ModifyShellLinkPath::COMHook_IShellLinkA_SetPath(void *,char const *)" ?COMHook_IShellLinkA_SetPath@NS_ModifyShellLinkPath@@YGJPAXPBD@Z
0x100090A0: "unsigned long NS_Wow64ProcessLie::g_stShimId" ?g_stShimId@NS_Wow64ProcessLie@@3KA
0x1000A11C: "__cdecl _imp__wcspbrk" __imp__wcspbrk
0x1000A174: ntdll_NULL_THUNK_DATA
0x10001D34: ".cmd" ??_C@_19BDKLHPGC@?$AA?4?$AAc?$AAm?$AAd?$AA?$AA@
0x10001644: "Kernel32.DLL" ??_C@_0N@HNBMBBEI@Kernel32?4DLL?$AA@
0x1000789B: "__cdecl memcpy" _memcpy
0x10009534: "void * ShimLib::g_hHeapManagerMutex" ?g_hHeapManagerMutex@ShimLib@@3PAXA
0x10006B8A: "protected: int __thiscall ShimLib::CStringToken::GetToken(class ShimLib::CString &,int &)const " ?GetToken@CStringToken@ShimLib@@IBEHAAVCString@2@AAH@Z
0x1000952C: "struct HINSTANCE__ * ShimLib::g_hinstDll" ?g_hinstDll@ShimLib@@3PAUHINSTANCE__@@A
0x100063C8: "public: class ShimLib::CString const & __thiscall ShimLib::CString::operator=(class ShimLib::CString const &)" ??4CString@ShimLib@@QAEABV01@ABV01@@Z
0x10001238: "DisableFilesystemRedirector patt" ??_C@_0FC@GAHGCBJP@DisableFilesystemRedirector?5patt@
0x100014D8: "NtAllocateVirtualMemory" ??_C@_0BI@BKMFFNKN@NtAllocateVirtualMemory?$AA@
0x100095CC: "int NS_wow64IsDelShare::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_wow64IsDelShare@@3HA
0x10009050: "__vectorcall ??_R0?AVCStringError@CString@ShimLib@" ??_R0?AVCStringError@CString@ShimLib@@@8
0x1000964C: "__cdecl _pRawDllMain" __pRawDllMain
0x10001920: "DMsiCIKeyRedirection" ??_C@_0BF@FBMOHPKN@DMsiCIKeyRedirection?$AA@
0x100025A0: "("" ??_C@_02JBFCHHJF@?$CI?$CC?$AA@
0x10009598: "struct tagHOOKAPI * NS_Wow64Mdm::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64Mdm@@3PAUtagHOOKAPI@@A
0x100019BC: "DisablMsiKeyRedirection" ??_C@_1DA@FGDBLFFD@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAM?$AAs?$AAi?$AAK?$AAe?$AAy?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x10009570: "int NS_Ignore2ndFindClose::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Ignore2ndFindClose@@3HA
0x10001A34: "DuplicateHandleAccess" ??_C@_1CM@IDGBAEFK@?$AAD?$AAu?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAe?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x10009028: "char * NS_Wow64MM2::g_szCommandLine" ?g_szCommandLine@NS_Wow64MM2@@3PADA
0x10001900: "Wow64Mdm" ??_C@_08FPLAJHFM@Wow64Mdm?$AA@
0x10002594: "ShimLib" ??_C@_07HGHLCFFA@ShimLib?$AA@
0x10001BD8: "Wow64ProcessLie" ??_C@_1CA@IIAIKIFI@?$AAW?$AAo?$AAw?$AA6?$AA4?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAL?$AAi?$AAe?$AA?$AA@
0x1000A170: "__stdcall _imp__RtlFreeUnicodeString" __imp__RtlFreeUnicodeString@4
0x10001CC8: "Software\Microsoft\Windows\Curre" ??_C@_0EB@KJFOKCDE@Software?2Microsoft?2Windows?2Curre@
0x100023DC: "\" ??_C@_01KICIPPFI@?2?$AA@
0x1000643E: "protected: void __thiscall ShimLib::CString::ConcatCopy(int,unsigned short const *,int,unsigned short const *)" ?ConcatCopy@CString@ShimLib@@IAEXHPBGH0@Z
0x10009590: "int NS_Wow64Mdm::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_Wow64Mdm@@3HA
0x10009414: "__cdecl __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUdldGEUdldGEhsrnUlyquivUrDIGUkxsOlyq@AcWow64" ___@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUdldGEUdldGEhsrnUlyquivUrDIGUkxsOlyq@AcWow64
0x1000234C: "NS_Wow64MM2::APIHook_GetVersion" ??_C@_0CA@PFBFIDHH@NS_Wow64MM2?3?3APIHook_GetVersion?$AA@
0x100095AC: "int NS_Wow64SysWow64DirLie::g_bSubshimUsed" ?g_bSubshimUsed@NS_Wow64SysWow64DirLie@@3HA
0x10002630: "__cdecl __safe_se_handler_table" ___safe_se_handler_table
0x100077D5: "__cdecl _EH_prolog3_catch" __EH_prolog3_catch
0x100016A4: "GetFileVersionInfoA" ??_C@_0BE@JIHADGJK@GetFileVersionInfoA?$AA@
0x1000A084: "__stdcall _imp__CloseHandle" __imp__CloseHandle@4
0x100074F0: "public: virtual void * __thiscall type_info::`vector deleting destructor'(unsigned int)" ??_Etype_info@@UAEPAXI@Z
0x1000A0B0: "__stdcall _imp__GetFileVersionInfoExA" __imp__GetFileVersionInfoExA@20
0x10005630: "int __stdcall NS_Wow64MM2::APIHook_GetVersionExA(struct _OSVERSIONINFOA *)" ?APIHook_GetVersionExA@NS_Wow64MM2@@YGHPAU_OSVERSIONINFOA@@@Z
0x10009550: "int NS_DisableFilesystemRedirector::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_DisableFilesystemRedirector@@3HA
0x1000A1B8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x10006FC0: "__stdcall _DllMainCRTStartup" __DllMainCRTStartup@12
0x1000A16C: "__stdcall _imp__RtlNtPathNameToDosPathName" __imp__RtlNtPathNameToDosPathName@16
0x100095E0: "struct tagHOOKAPI * NS_Wow64CoCreateInstanceFlag::g_pAPIHooks" ?g_pAPIHooks@NS_Wow64CoCreateInstanceFlag@@3PAUtagHOOKAPI@@A
0x100064AE: "protected: void __thiscall ShimLib::CString::ConcatInPlace(int,unsigned short const *)" ?ConcatInPlace@CString@ShimLib@@IAEXHPBG@Z
0x10007779: "__stdcall _CxxThrowException" __CxxThrowException@8
0x10009628: "struct tagHOOKAPI * NS_DopeWarsSanitizeSegmentRegisters::g_pAPIHooks" ?g_pAPIHooks@NS_DopeWarsSanitizeSegmentRegisters@@3PAUtagHOOKAPI@@A
0x10001834: "ModifyShellLinkPath" ??_C@_0BE@JKMNMKFO@ModifyShellLinkPath?$AA@
0x10005DD0: "struct tagHOOKAPI * __stdcall NS_DopeWarsSanitizeSegmentRegisters::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_DopeWarsSanitizeSegmentRegisters@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10003340: "int __stdcall NS_Ignore2ndFindClose::APIHook_FindClose(void *)" ?APIHook_FindClose@NS_Ignore2ndFindClose@@YGHPAX@Z
0x1000A190: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x10003670: "struct tagHOOKAPI * __stdcall NS_GetFileVersionInfoRedirect::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_GetFileVersionInfoRedirect@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x1000A124: "__cdecl _imp___onexit" __imp___onexit
0x10002410: "newdev.DLL" ??_C@_0L@CKEJJLHI@newdev?4DLL?$AA@
0x1000A0EC: "__cdecl _imp___strnicmp" __imp___strnicmp
0x10003A1A: "struct tagHOOKAPI * __stdcall ShimLib::InitializeHooksEx(unsigned long,unsigned short const *,char const *,unsigned long *)" ?InitializeHooksEx@ShimLib@@YGPAUtagHOOKAPI@@KPBGPBDPAK@Z
0x1000A078: "__stdcall _imp__MultiByteToWideChar" __imp__MultiByteToWideChar@24
0x10007305: "__cdecl __raise_securityfailure" ___raise_securityfailure
0x10002210: ";0x" ??_C@_17OIILOAGD@?$AA?$DL?$AA0?$AAx?$AA?$AA@
0x1000A070: "__stdcall _imp__HeapAlloc" __imp__HeapAlloc@12
0x10009648: "__cdecl __dyn_tls_init_callback" ___dyn_tls_init_callback
0x1000A100: "__cdecl _imp___stricmp" __imp___stricmp
0x100022DC: "[GetVersionExW] called. return W" ??_C@_0CG@IOKAGOBE@?$FLGetVersionExW?$FN?5called?4?5return?5W@
0x10001D84: """ ??_C@_01BJJEKLCA@?$CC?$AA@
0x1000A17C: "__cdecl _IMPORT_DESCRIPTOR_apphelp" __IMPORT_DESCRIPTOR_apphelp
0x100016D0: "[LimitLargeAddressAwareProcessTo" ??_C@_0EI@FNGINCHB@?$FLLimitLargeAddressAwareProcessTo@
0x10009000: "char * NS_DisableFilesystemRedirector::g_szCommandLine" ?g_szCommandLine@NS_DisableFilesystemRedirector@@3PADA
0x1000128C: "NS_DisableFilesystemRedirector::" ??_C@_0CJ@IOIPOFPJ@NS_DisableFilesystemRedirector?3?3@
0x1000A048: "__stdcall _imp__GetCurrentThreadId" __imp__GetCurrentThreadId@0
0x10005CC0: "struct tagHOOKAPI * __stdcall NS_Wow64SysWow64DirLie::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_Wow64SysWow64DirLie@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10007518: "__cdecl _amsg_exit" __amsg_exit
0x10001E64: "InstallDir" ??_C@_1BG@JJPNHDGM@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAD?$AAi?$AAr?$AA?$AA@
0x1000904C: "protected: static unsigned short const * const ShimLib::CString::_afxPchNil" ?_afxPchNil@CString@ShimLib@@1PBGB
0x10007570: "__cdecl _IsNonwritableInCurrentImage" __IsNonwritableInCurrentImage
0x10009020: "char * NS_Wow64UpdateDriverLie::g_szCommandLine" ?g_szCommandLine@NS_Wow64UpdateDriverLie@@3PADA
0x10006370: "protected: void __thiscall ShimLib::CString::AssignCopy(int,unsigned short const *)" ?AssignCopy@CString@ShimLib@@IAEXHPBG@Z
0x10001F24: "Program Files (x86)" ??_C@_0BE@PHBPPMII@Program?5Files?5?$CIx86?$CJ?$AA@
0x10004BA0: "struct tagHOOKAPI * __stdcall NS_SmartPhoneSDK2003::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_SmartPhoneSDK2003@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x10002528: "NS_DopeWarsSanitizeSegmentRegist" ??_C@_0CO@BCFHAIEF@NS_DopeWarsSanitizeSegmentRegist@
0x10009578: "int NS_GetFileVersionInfoRedirect::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_GetFileVersionInfoRedirect@@3HA
0x10002148: "\_isdel.exe" ??_C@_1BI@BPLHCDFP@?$AA?2?$AA_?$AAi?$AAs?$AAd?$AAe?$AAl?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x10002218: ",DoInstall" ??_C@_1BG@FKLIDNHP@?$AA?0?$AAD?$AAo?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?$AA@
0x1000A148: "__cdecl _imp___XcptFilter" __imp___XcptFilter
0x1000A09C: "__stdcall _imp__RegCloseKey" __imp__RegCloseKey@4
0x1000A154: "__stdcall _imp__RtlFreeHeap" __imp__RtlFreeHeap@12
0x10003000: "long __stdcall NS_DMsiCIKeyRedirection::APIHook_RegCreateKeyExW(struct HKEY__ *,unsigned short const *,unsigned long,unsigned short *,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES *,struct HKEY__ * *,unsigned long *)" ?APIHook_RegCreateKeyExW@NS_DMsiCIKeyRedirection@@YGJPAUHKEY__@@PBGKPAGKKPAU_SECURITY_ATTRIBUTES@@PAPAU2@PAK@Z
0x100090B8: "unsigned long NS_ModifyShellLinkPath::g_stShimId" ?g_stShimId@NS_ModifyShellLinkPath@@3KA
0x1000A120: "__cdecl _imp_??1type_info@@UAE@XZ" __imp_??1type_info@@UAE@XZ
0x10001504: "INSTALLER" ??_C@_1BE@COBLOEIM@?$AAI?$AAN?$AAS?$AAT?$AAA?$AAL?$AAL?$AAE?$AAR?$AA?$AA@
0x10001E80: "Program Files (x86)\MSN" ??_C@_1DA@KOKCALM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?2?$AAM?$AAS?$AAN?$AA?$AA@
0x100030A0: "struct tagHOOKAPI * __stdcall NS_DMsiCIKeyRedirection::InitializeHooksMulti(unsigned long,char const *,unsigned long *)" ?InitializeHooksMulti@NS_DMsiCIKeyRedirection@@YGPAUtagHOOKAPI@@KPBDPAK@Z
0x100014AC: "ADVAPI32.DLL" ??_C@_0N@JJPEKNFO@ADVAPI32?4DLL?$AA@
0x10002F80: "long __stdcall NS_DMsiCIKeyRedirection::APIHook_RegOpenKeyExW(struct HKEY__ *,unsigned short *,unsigned long,unsigned long,struct HKEY__ * *)" ?APIHook_RegOpenKeyExW@NS_DMsiCIKeyRedirection@@YGJPAUHKEY__@@PAGKKPAPAU2@@Z
0x10003D1D: "int __stdcall NS_ModifyShellLinkPath::GetIExplorePath(char *,long)" ?GetIExplorePath@NS_ModifyShellLinkPath@@YGHPADJ@Z
0x10001D48: """" ??_C@_02JMMFPCED@?$CC?$CC?$AA@
0x1000612A: "protected: static int __stdcall ShimLib::CString::SafeStrlen(unsigned short const *)" ?SafeStrlen@CString@ShimLib@@KGHPBG@Z
0x1000A0C8: "__stdcall _imp__SE_COM_AddHook" __imp__SE_COM_AddHook@20
0x1000958C: "int NS_Ignore2ndFindClose::g_bSubshimUsed" ?g_bSubshimUsed@NS_Ignore2ndFindClose@@3HA
0x1000A0E4: "__cdecl _imp__tolower" __imp__tolower
0x100074F0: "public: virtual void * __thiscall type_info::`scalar deleting destructor'(unsigned int)" ??_Gtype_info@@UAEPAXI@Z
0x1000A028: "__stdcall _imp__IsWow64Process" __imp__IsWow64Process@8
0x1000641E: "public: class ShimLib::CString const & __thiscall ShimLib::CString::operator=(unsigned short const *)" ??4CString@ShimLib@@QAEABV01@PBG@Z
0x10006745: "protected: int __thiscall ShimLib::CString::ReplaceRoutine(unsigned short const *,unsigned short const *,unsigned short * (__cdecl*)(unsigned short const *,unsigned short const *))" ?ReplaceRoutine@CString@ShimLib@@IAEHPBG0P6APAG00@Z@Z
0x1000A128: "__cdecl _imp____dllonexit" __imp____dllonexit
0x1000801C: "__stdcall _CT??_R0?AVCStringError@CString@ShimLib@@" __CT??_R0?AVCStringError@CString@ShimLib@@@81
0x1000A020: "__stdcall _imp__SetLastError" __imp__SetLastError@4
0x100095F8: "struct tagHOOKAPI * NS_RedirectHhShortcutToSysWow64::g_pAPIHooks" ?g_pAPIHooks@NS_RedirectHhShortcutToSysWow64@@3PAUtagHOOKAPI@@A
0x1000A08C: "__stdcall _imp__CreateFileW" __imp__CreateFileW@28
0x10007630: "__cdecl _ValidateImageBase" __ValidateImageBase
0x1000A118: "__cdecl _imp__wcschr" __imp__wcschr
0x1000A208: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x100095F0: "int NS_RedirectHhShortcutToSysWow64::g_bStaticDllsInit" ?g_bStaticDllsInit@NS_RedirectHhShortcutToSysWow64@@3HA
0x1000476A: "int __stdcall NS_MsnInstaller::NotifyFn(unsigned long)" ?NotifyFn@NS_MsnInstaller@@YGHK@Z

[JEB Decompiler by PNF Software]