PDB Symbols - ieinstal.exe (0xA57B027F6619281B920503C26A30FA3DAEFC874BE3FC31257F63106F7A434643)

Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_11.0.17763.1_none_0d533ddc54a5a754\ieinstal.exe Base=0x140000000 SHA-256=A57B027F6619281B920503C26A30FA3DAEFC874BE3FC31257F63106F7A434643
PDB: ieinstal.pdb GUID={3068FA38-DBFB-CE08-2416E5056E968E30} Age=1

703 located named symbols:
0x140011740: WINTRUST_NULL_THUNK_DATA
0x1400058A0: "public: virtual long __cdecl CIEAdminBrokerObject::CreateExtensionsManager(unsigned short * __ptr64,struct _GUID const & __ptr64,struct IUnknown * __ptr64 * __ptr64) __ptr64" ?CreateExtensionsManager@CIEAdminBrokerObject@@UEAAJPEAGAEBU_GUID@@PEAPEAUIUnknown@@@Z
0x140015750: "class CLock g_oLock" ?g_oLock@@3VCLock@@A
0x140015618: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x140005AB8: "long __cdecl StringCchCopyExA(char * __ptr64,unsigned __int64,char const * __ptr64,char * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyExA@@YAJPEAD_KPEBDPEAPEADPEA_KK@Z
0x140006330: "unsigned short * __ptr64 __cdecl FindFileNameFromPath(unsigned short const * __ptr64)" ?FindFileNameFromPath@@YAPEAGPEBG@Z
0x140011170: "struct SettingStore::VALUEID<int> const SettingStore::IEVALUE_DeprecatedHashingAlgorithm_ENABLE_MD2_MD4" ?IEVALUE_DeprecatedHashingAlgorithm_ENABLE_MD2_MD4@SettingStore@@3U?$VALUEID@H@1@B
0x14000E300: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000CE64: PathCchIsRoot
0x140003460: "public: long __cdecl CActiveXInstallBroker::RegisterExeFile(unsigned short * __ptr64,unsigned short * __ptr64,int,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?RegisterExeFile@CActiveXInstallBroker@@QEAAJPEAG0HPEAU_PROCESS_INFORMATION@@@Z
0x14000B090: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyBytes(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyBytes@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x14000C354: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x14000E6B0: "__cdecl FindPESection" _FindPESection
0x140011378: "__cdecl _imp_RegOverridePredefKey" __imp_RegOverridePredefKey
0x140012988: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x1400112B0: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x140011548: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x140001164: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140011900: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400137C8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140009AE4: "long __cdecl StringCchCopyExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyExW@@YAJPEAG_KPEBGPEAPEAGPEA_KK@Z
0x1400115D0: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x14000E6A0: "__cdecl wsetargv" _wsetargv
0x14000CFE4: PathCchSkipRoot
0x1400118F0: "__cdecl _imp_CoInitializeSecurity" __imp_CoInitializeSecurity
0x140015800: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x140006D7C: "long __cdecl SetFileListIntegrityLevel(struct sFNAME * __ptr64,int)" ?SetFileListIntegrityLevel@@YAJPEAUsFNAME@@H@Z
0x140011730: "__cdecl _imp_CryptCATAdminAddCatalog" __imp_CryptCATAdminAddCatalog
0x140015020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140009FC0: "long __cdecl Detour_RegisterTypeLib(struct ITypeLib * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?Detour_RegisterTypeLib@@YAJPEAUITypeLib@@PEAG1@Z
0x1400115E0: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1400117D8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x1400127D0: IEVALUE_GUID_DeprecatedHashingAlgorithm_ENABLE_MD2_MD4
0x140011928: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x1400012A4: "int __cdecl IsSystem(void)" ?IsSystem@@YAHXZ
0x140011BB0: IID_IServerSecurity
0x1400073D4: "long __cdecl MakeUniqueTempDirectory(char const * __ptr64,char * __ptr64,unsigned long)" ?MakeUniqueTempDirectory@@YAJPEBDPEADK@Z
0x140011600: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140004EB8: "public: long __cdecl CActiveXInstallBroker::CreateExtensionsManager(unsigned short * __ptr64,struct _GUID const & __ptr64,struct IUnknown * __ptr64 * __ptr64) __ptr64" ?CreateExtensionsManager@CActiveXInstallBroker@@QEAAJPEAGAEBU_GUID@@PEAPEAUIUnknown@@@Z
0x14000C564: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140011758: "__cdecl _imp_?SetFileHandleIntegrityLevel@@YAJPEAX0@Z" __imp_?SetFileHandleIntegrityLevel@@YAJPEAX0@Z
0x140001514: "unsigned long __cdecl RegisterAppID(struct HKEY__ * __ptr64)" ?RegisterAppID@@YAKPEAUHKEY__@@@Z
0x1400122F0: "Software\Microsoft\Internet Expl" ??_C@_1HK@DNOCODFI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl@
0x14000E970: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140015708: "public: static long (__cdecl* __ptr64 Abandonment::hostExceptionFilter)(struct _EXCEPTION_POINTERS * __ptr64)" ?hostExceptionFilter@Abandonment@@2P6AJPEAU_EXCEPTION_POINTERS@@@ZEA
0x1400056E0: "public: virtual long __cdecl CIEAdminBrokerObject::UpdateDistributionUnit2(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64,unsigned short const * __ptr64,long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,int * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?UpdateDistributionUnit2@CIEAdminBrokerObject@@UEAAJPEAGPEBG1KPEAK1H11J111KPEAPEBGPEAHK3K33@Z
0x140011458: "__cdecl _imp_GetTempPathA" __imp_GetTempPathA
0x140011658: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14000F010: "const CIEAdminBrokerClassFactory::`vftable'" ??_7CIEAdminBrokerClassFactory@@6B@
0x140011520: "__cdecl _imp_CreateFileA" __imp_CreateFileA
0x1400137F0: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x140007194: "long __cdecl SetSecurityAttributes(struct _SECURITY_ATTRIBUTES * __ptr64,struct _EXPLICIT_ACCESS_W * __ptr64 const,void * __ptr64,void * __ptr64,void * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?SetSecurityAttributes@@YAJPEAU_SECURITY_ATTRIBUTES@@QEAU_EXPLICIT_ACCESS_W@@PEAX22PEAPEAU_ACL@@PEAPEAX@Z
0x140011C48: ",-1001" ??_C@_1O@BFKJHMJ@?$AA?0?$AA?9?$AA1?$AA0?$AA0?$AA1?$AA?$AA@
0x140011EF8: "DllRegisterServer" ??_C@_0BC@NPBLIDJ@DllRegisterServer?$AA@
0x140009A10: "private: static void __cdecl Abandonment::InduceAbandonment(enum Abandonment::Category,void * __ptr64,unsigned long,unsigned __int64 const * __ptr64)" ?InduceAbandonment@Abandonment@@CAXW4Category@1@PEAXKPEB_K@Z
0x140015000: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x14000BE4C: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x140011930: "__cdecl _imp_CoRevokeClassObject" __imp_CoRevokeClassObject
0x1400112F0: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x140011CF0: "" ??_C@_00CNPNBAHC@?$AA@
0x1400050E0: "public: virtual unsigned long __cdecl CIEAdminBrokerObject::AddRef(void) __ptr64" ?AddRef@CIEAdminBrokerObject@@UEAAKXZ
0x1400155F0: "__cdecl commode" _commode
0x140006FBC: "long __cdecl GetExecutablePathFromCommandLine(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetExecutablePathFromCommandLine@@YAJPEBGPEAPEAG@Z
0x140011578: "__cdecl _imp_DeactivateActCtx" __imp_DeactivateActCtx
0x1400113F8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x140012A28: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x140011398: "__cdecl _imp_AuthzInitializeResourceManager" __imp_AuthzInitializeResourceManager
0x1400158E0: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x1400112C8: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x140007B1C: "long __cdecl CleanupTempDirs(void)" ?CleanupTempDirs@@YAJXZ
0x14000AB10: DetourUpdateThread
0x140011360: "__cdecl _imp_GetAce" __imp_GetAce
0x140001818: "long __cdecl RegisterClassFactory(void)" ?RegisterClassFactory@@YAJXZ
0x140006148: "long __cdecl WSZtoSZ(unsigned int,unsigned short const * __ptr64,char * __ptr64 * __ptr64)" ?WSZtoSZ@@YAJIPEBGPEAPEAD@Z
0x140011878: "__cdecl _imp_wcschr" __imp_wcschr
0x140011768: "__cdecl _imp_?EDL_InitializeAllowedDomainsList@@YAJAEBU_GUID@@PEBG@Z" __imp_?EDL_InitializeAllowedDomainsList@@YAJAEBU_GUID@@PEBG@Z
0x140011DD0: "RunSetupCommandW" ??_C@_0BB@MBNPNNOK@RunSetupCommandW?$AA@
0x1400023FC: "private: long __cdecl CActiveXInstallBroker::UpdateSharedDlls(char const * __ptr64) __ptr64" ?UpdateSharedDlls@CActiveXInstallBroker@@AEAAJPEBD@Z
0x140011D20: "RedirectToHKCU" ??_C@_1BO@HGAKGNKL@?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAT?$AAo?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x1400116A0: "__cdecl _imp_UnRegisterTypeLib" __imp_UnRegisterTypeLib
0x1400114B0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1400157E8: g_hinstCC
0x140011948: ole32_NULL_THUNK_DATA
0x1400114B8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14000E580: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140011990: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140015820: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x1400118F8: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x140011778: "__cdecl _imp_?GetCurrentUserSid@@YAKPEAPEAX@Z" __imp_?GetCurrentUserSid@@YAKPEAPEAX@Z
0x14000623C: "long __cdecl SZtoWSZ(unsigned int,char const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SZtoWSZ@@YAJIPEBDPEAPEAG@Z
0x1400128F0: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x1400155FC: "__cdecl fmode" _fmode
0x140005540: "public: virtual long __cdecl CIEAdminBrokerObject::RegisterDllFile(unsigned short * __ptr64,unsigned short * __ptr64,int) __ptr64" ?RegisterDllFile@CIEAdminBrokerObject@@UEAAJPEAG0H@Z
0x140011660: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x140011550: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000C910: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x1400117C0: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140004B0C: "public: long __cdecl CActiveXInstallBroker::EnumerateFiles(unsigned short * __ptr64,char const * __ptr64,struct sSESSION * __ptr64) __ptr64" ?EnumerateFiles@CActiveXInstallBroker@@QEAAJPEAGPEBDPEAUsSESSION@@@Z
0x140011420: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x140011C88: "Elevation" ??_C@_1BE@OFHFIOOJ@?$AAE?$AAl?$AAe?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400090A0: wWinMain
0x14000D138: PathCchRemoveFileSpec
0x14000B450: "protected: unsigned char * __ptr64 __cdecl CDetourDis::Copy0F(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?Copy0F@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x14000E5DE: "__cdecl XcptFilter" _XcptFilter
0x1400112E8: "__cdecl _imp_RegSetValueExA" __imp_RegSetValueExA
0x140011998: "__cdecl _xc_a" __xc_a
0x1400113D0: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140007FE0: "long __cdecl VerifyFileHasExtensionW(unsigned short const * __ptr64)" ?VerifyFileHasExtensionW@@YAJPEBG@Z
0x1400055A0: "public: virtual long __cdecl CIEAdminBrokerObject::InstallCatalogFile(unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?InstallCatalogFile@CIEAdminBrokerObject@@UEAAJPEAG0@Z
0x140015660: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140011C58: "LocalizedString" ??_C@_1CA@KMFDEJAN@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAi?$AAz?$AAe?$AAd?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?$AA@
0x140012820: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x14000B358: "protected: unsigned char * __ptr64 __cdecl CDetourDis::AdjustTarget(unsigned char * __ptr64,unsigned char * __ptr64,long,long,long) __ptr64" ?AdjustTarget@CDetourDis@@IEAAPEAEPEAE0JJJ@Z
0x140011418: "__cdecl _imp_CreateDirectoryExA" __imp_CreateDirectoryExA
0x140011630: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14000CB88: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x140011338: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x140011438: "__cdecl _imp_FindClose" __imp_FindClose
0x140012240: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x1400058D0: "public: virtual long __cdecl CIEAdminBrokerObject::UpdateAllowedDomainsList(struct _GUID const & __ptr64,unsigned short * __ptr64,int) __ptr64" ?UpdateAllowedDomainsList@CIEAdminBrokerObject@@UEAAJAEBU_GUID@@PEAGH@Z
0x1400059F0: "[thunk]:public: virtual unsigned long __cdecl CIEAdminBrokerObject::Release`adjustor{16}' (void) __ptr64" ?Release@CIEAdminBrokerObject@@WBA@EAAKXZ
0x14000DBAC: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x140001AD0: "public: virtual long __cdecl CIEAdminBrokerClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CIEAdminBrokerClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x140007D7C: "long __cdecl VerifyCallerIsSystemOrAdminWithHighIL(void)" ?VerifyCallerIsSystemOrAdminWithHighIL@@YAJXZ
0x14000E889: "__cdecl lock" _lock
0x140015628: g_pfnResultLoggingCallback
0x140006EE4: "long __cdecl EnsureACILCanReadFile(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?EnsureACILCanReadFile@@YAJPEBG0@Z
0x140012838: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x14000B440: "protected: unsigned char * __ptr64 __cdecl CDetourDis::Invalid(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?Invalid@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x1400127A8: "Security_HKLM_Only" ??_C@_1CG@PKMJDKLI@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA_?$AAH?$AAK?$AAL?$AAM?$AA_?$AAO?$AAn?$AAl?$AAy?$AA?$AA@
0x140011508: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x140011810: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x140011B4C: "__cdecl _guard_iat_table" __guard_iat_table
0x140011510: "__cdecl _imp_DeleteFileA" __imp_DeleteFileA
0x140005A10: "[thunk]:public: virtual long __cdecl CIEAdminBrokerObject::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CIEAdminBrokerObject@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x140015631: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x14000E946: memcpy
0x140012578: "LocalServer32" ??_C@_1BM@KADAJJA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x1400113F0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140004FA0: "public: virtual long __cdecl CIEAdminBrokerObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CIEAdminBrokerObject@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140009ACC: "public: static void __cdecl Abandonment::OutOfMemory(void)" ?OutOfMemory@Abandonment@@SAXXZ
0x14000C9A8: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x140011940: "__cdecl _imp_CLSIDFromString" __imp_CLSIDFromString
0x140012220: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140011888: "__cdecl _imp_memset" __imp_memset
0x140012280: "%s\%s" ??_C@_05BMGBEOOC@?$CFs?2?$CFs?$AA@
0x140011540: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x140008D00: "unsigned long __cdecl WinVerifyTrustThreadProc(struct _WINVERIFYTRUST_PARAMS * __ptr64)" ?WinVerifyTrustThreadProc@@YAKPEAU_WINVERIFYTRUST_PARAMS@@@Z
0x1400114A0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14000E86F: "__cdecl initterm" _initterm
0x1400113A8: "__cdecl _imp_AuthzFreeContext" __imp_AuthzFreeContext
0x1400095BC: "long __cdecl RegisterLocalServer(struct _GUID,struct _GUID)" ?RegisterLocalServer@@YAJU_GUID@@U1@@Z
0x140015950: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000D438: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x140011638: "__cdecl _imp_Sleep" __imp_Sleep
0x140008DE8: "long __cdecl VerifyTrust(struct HWND__ * __ptr64,struct _GUID,unsigned short * __ptr64,void * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?VerifyTrust@@YAJPEAUHWND__@@U_GUID@@PEAGPEAX22KK3@Z
0x140011A08: "__cdecl _xi_z" __xi_z
0x140015814: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x140011628: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140015658: g_pfnThrowPlatformException
0x140008C90: "public: virtual long __cdecl CActiveXInstallSecurityManager::QueryCustomPolicy(struct _GUID const & __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long) __ptr64" ?QueryCustomPolicy@CActiveXInstallSecurityManager@@UEAAJAEBU_GUID@@PEAPEAEPEAKPEAEKK@Z
0x140011B90: IID_IInternetHostSecurityManager
0x14000C71C: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x140015818: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x14000E2F4: "__cdecl _C_specific_handler" __C_specific_handler
0x14000B8EC: SHActivateContext
0x140005840: "public: virtual long __cdecl CIEAdminBrokerObject::ExtractFiles(unsigned short * __ptr64,char const * __ptr64,struct sSESSION * __ptr64) __ptr64" ?ExtractFiles@CIEAdminBrokerObject@@UEAAJPEAGPEBDPEAUsSESSION@@@Z
0x1400115A8: "__cdecl _imp_FlushInstructionCache" __imp_FlushInstructionCache
0x140012958: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140011568: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x140015620: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x14000BE14: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x140011860: "__cdecl _imp__onexit" __imp__onexit
0x14000ABC0: DetourAttachEx
0x1400114D0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000D324: "bool __cdecl StringIsGUIDWorker(unsigned short const * __ptr64)" ?StringIsGUIDWorker@@YA_NPEBG@Z
0x140012258: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x1400051E0: "public: virtual long __cdecl CIEAdminBrokerObject::InitializeAdminInstaller(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64) __ptr64" ?InitializeAdminInstaller@CIEAdminBrokerObject@@UEAAJPEAGKPEAPEAG@Z
0x1400113B8: "__cdecl _imp_AuthzAccessCheck" __imp_AuthzAccessCheck
0x140011748: "__cdecl _imp_IsPolicyEnabledValue" __imp_IsPolicyEnabledValue
0x1400117B0: "__cdecl _imp__wtoi" __imp__wtoi
0x140011CA0: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140011808: "__cdecl _imp_iswalpha" __imp_iswalpha
0x1400112B8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140003CF8: "public: long __cdecl CActiveXInstallBroker::InstallCatalogFile(unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?InstallCatalogFile@CActiveXInstallBroker@@QEAAJPEAG0@Z
0x140005870: "public: virtual long __cdecl CIEAdminBrokerObject::RemoveExtractedFilesAndDirs(unsigned short * __ptr64,struct sSESSION * __ptr64) __ptr64" ?RemoveExtractedFilesAndDirs@CIEAdminBrokerObject@@UEAAJPEAGPEAUsSESSION@@@Z
0x14000E8DC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400113A0: "__cdecl _imp_AuthzInitializeContextFromSid" __imp_AuthzInitializeContextFromSid
0x140006770: "int __cdecl CatDirAndFileA(char const * __ptr64,char const * __ptr64,unsigned long,char * __ptr64)" ?CatDirAndFileA@@YAHPEBD0KPEAD@Z
0x140012A10: "\\?\Volume" ??_C@_1BG@CPJCOMEA@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x14001295C: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x140015670: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140005A20: "[thunk]:public: virtual long __cdecl CIEAdminBrokerObject::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CIEAdminBrokerObject@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x140005810: "public: virtual long __cdecl CIEAdminBrokerObject::EnumerateFiles(unsigned short * __ptr64,char const * __ptr64,struct sSESSION * __ptr64) __ptr64" ?EnumerateFiles@CIEAdminBrokerObject@@UEAAJPEAGPEBDPEAUsSESSION@@@Z
0x140007770: "long __cdecl CopyFileToRandomDir(char const * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CopyFileToRandomDir@@YAJPEBDPEAGPEAPEAG@Z
0x14000B95C: SHFusionInitializeFromModuleID
0x14000272C: "public: long __cdecl CActiveXInstallBroker::VerifyFile(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,struct _GUID const & __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64) __ptr64" ?VerifyFile@CActiveXInstallBroker@@QEAAJPEAGPEAUHWND__@@000KKAEBU_GUID@@PEAPEAGPEAKPEAPEAE@Z
0x14000D20C: PathCchFindExtension
0x14000D270: PathCchRemoveExtension
0x14000B590: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyFF(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyFF@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x1400112A0: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14000E693: "__cdecl amsg_exit" _amsg_exit
0x140011B70: IID_IClassFactory
0x140005A40: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x140011938: "__cdecl _imp_CoRegisterClassObject" __imp_CoRegisterClassObject
0x140011498: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x14000D6C0: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x1400052C0: "public: virtual long __cdecl CIEAdminBrokerObject::InitializeSystemInstaller(unsigned short * __ptr64,unsigned long,struct IUnknown * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?InitializeSystemInstaller@CIEAdminBrokerObject@@UEAAJPEAGKPEAUIUnknown@@PEAPEAG@Z
0x140003B34: "public: long __cdecl CActiveXInstallBroker::RegisterDllFile2(unsigned short * __ptr64,unsigned short * __ptr64,int,int) __ptr64" ?RegisterDllFile2@CActiveXInstallBroker@@QEAAJPEAG0HH@Z
0x140011C78: "REG_SZ" ??_C@_1O@JOCLCBME@?$AAR?$AAE?$AAG?$AA_?$AAS?$AAZ?$AA?$AA@
0x140011560: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x140007988: "long __cdecl CopyFileToTempDir(char const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CopyFileToTempDir@@YAJPEBDPEAPEAG@Z
0x140001EE8: "private: long __cdecl CActiveXInstallBroker::DuplicateProcessInformation(struct _PROCESS_INFORMATION * __ptr64,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?DuplicateProcessInformation@CActiveXInstallBroker@@AEAAJPEAU_PROCESS_INFORMATION@@0@Z
0x1400117E8: "__cdecl _imp_exit" __imp_exit
0x140006070: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x1400113E0: "__cdecl _imp_lstrcmpiA" __imp_lstrcmpiA
0x1400050F0: "public: virtual unsigned long __cdecl CIEAdminBrokerObject::Release(void) __ptr64" ?Release@CIEAdminBrokerObject@@UEAAKXZ
0x140011B80: GUID_NULL
0x1400113E8: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x140011848: "__cdecl _imp__lock" __imp__lock
0x140001980: "public: virtual unsigned long __cdecl CIEAdminBrokerClassFactory::AddRef(void) __ptr64" ?AddRef@CIEAdminBrokerClassFactory@@UEAAKXZ
0x140011490: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400116D8: OLEAUT32_NULL_THUNK_DATA
0x1400158D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUxlnnlmUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_common_iel1" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUxlnnlmUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_common_iel1
0x14000E54C: atexit
0x140011C18: "actxprxy.dll" ??_C@_1BK@GDADHGHM@?$AAa?$AAc?$AAt?$AAx?$AAp?$AAr?$AAx?$AAy?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140015668: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x140015810: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x14000BE30: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x140011920: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x14000C248: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x140011830: "__cdecl _imp__wcmdln" __imp__wcmdln
0x140011688: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1400157F0: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x1400125E0: "user32.dll" ??_C@_1BG@OILDLIOJ@?$AAu?$AAs?$AAe?$AAr?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000D3F4: "bool __cdecl PathIsVolumeGUIDWorker(unsigned short const * __ptr64)" ?PathIsVolumeGUIDWorker@@YA_NPEBG@Z
0x1400124E0: "-CLSID:" ??_C@_1BA@GKCOBBOH@?$AA?9?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?3?$AA?$AA@
0x14000CDD4: PathIsUNCEx
0x140012598: "ThreadingModel" ??_C@_1BO@NMEHGCBD@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAl?$AA?$AA@
0x140012740: "Software\Policies\Microsoft\Inte" ??_C@_1GG@KAMEKOCM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe@
0x1400115C8: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x140012458: "-Embedding" ??_C@_1BG@DJPNNKHD@?$AA?9?$AAE?$AAm?$AAb?$AAe?$AAd?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x140011690: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000E8A1: "__cdecl _dllonexit" __dllonexit
0x14000D854: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x140012288: "ME" ??_C@_15FBDBOPOB@?$AAM?$AAE?$AA?$AA@
0x14001260C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x140015930: "__cdecl _native_startup_lock" __native_startup_lock
0x140015690: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x14001580C: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x140015040: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x140005A00: "[thunk]:public: virtual unsigned long __cdecl CIEAdminBrokerObject::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CIEAdminBrokerObject@@WBA@EAAKXZ
0x14000E5C0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140011388: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x1400156B0: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x1400113C0: AUTHZ_NULL_THUNK_DATA
0x140011330: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x140011880: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140012290: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1400115B8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x140012080: "__cdecl GUID_1823e7ba_ec36_447a_9b2e_b4912e15afe7" _GUID_1823e7ba_ec36_447a_9b2e_b4912e15afe7
0x1400118B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000B280: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyBytesRax(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyBytesRax@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x140011698: KERNEL32_NULL_THUNK_DATA
0x1400114E8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000123C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140011648: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x1400099D8: "void __cdecl std::_Xbad_alloc(void)" ?_Xbad_alloc@std@@YAXXZ
0x14000E8B8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140011538: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x140011840: "__cdecl _imp__commode" __imp__commode
0x140005DD4: "long __cdecl StringCchCatA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCatA@@YAJPEAD_KPEBD@Z
0x140009FD0: "long __cdecl Detour_UnRegisterTypeLib(struct _GUID const & __ptr64,unsigned short,unsigned short,unsigned long,enum tagSYSKIND)" ?Detour_UnRegisterTypeLib@@YAJAEBU_GUID@@GGKW4tagSYSKIND@@@Z
0x140011590: "__cdecl _imp_CreateActCtxW" __imp_CreateActCtxW
0x140011820: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400129AC: ":\" ??_C@_15GKAHMKIN@?$AA?3?$AA?2?$AA?$AA@
0x140011358: "__cdecl _imp_EqualSid" __imp_EqualSid
0x140013778: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140015608: "unsigned long g_dwIntegrity" ?g_dwIntegrity@@3KA
0x1400116A8: "__cdecl _imp_UnRegisterTypeLibForUser" __imp_UnRegisterTypeLibForUser
0x140011608: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140011580: "__cdecl _imp_ActivateActCtx" __imp_ActivateActCtx
0x1400114E0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1400125F8: "SetProcessDPIAware" ??_C@_0BD@ENICNPLM@SetProcessDPIAware?$AA@
0x140001A00: "public: virtual long __cdecl CIEAdminBrokerClassFactory::LockServer(int) __ptr64" ?LockServer@CIEAdminBrokerClassFactory@@UEAAJH@Z
0x14000E2A0: wWinMainCRTStartup
0x140011288: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x1400118D8: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x140001990: "public: virtual unsigned long __cdecl CIEAdminBrokerClassFactory::Release(void) __ptr64" ?Release@CIEAdminBrokerClassFactory@@UEAAKXZ
0x14000E760: "__cdecl ValidateImageBase" _ValidateImageBase
0x140010160: "protected: static struct CDetourDis::COPYENTRY const * const CDetourDis::s_rceCopyTable" ?s_rceCopyTable@CDetourDis@@1QBUCOPYENTRY@1@B
0x140011BF0: CLSID_CIeAxiInstaller
0x140011428: "__cdecl _imp_GetFinalPathNameByHandleW" __imp_GetFinalPathNameByHandleW
0x140011B60: IID_IUnknown
0x140001BB4: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1400157F8: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x140011950: "__cdecl _imp_CompatFlagsFromClsid" __imp_CompatFlagsFromClsid
0x140006080: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x140011980: urlmon_NULL_THUNK_DATA
0x140012888: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x140001E60: "private: long __cdecl CActiveXInstallBroker::FileIsAuthorized(unsigned short const * __ptr64,int) __ptr64" ?FileIsAuthorized@CActiveXInstallBroker@@AEAAJPEBGH@Z
0x14000DED0: "int __cdecl InitOnceVersionInfo(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?InitOnceVersionInfo@@YAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x1400069A4: "long __cdecl DeleteExtractedFiles(char * __ptr64,struct sFNAME * __ptr64)" ?DeleteExtractedFiles@@YAJPEADPEAUsFNAME@@@Z
0x140015600: "int g_fRunningAsSystem" ?g_fRunningAsSystem@@3HA
0x140011640: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400137DC: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x1400113D8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140012980: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x14000250C: "public: long __cdecl CActiveXInstallBroker::InitializeAxInstaller(int,unsigned short * __ptr64,unsigned long,struct IUnknown * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?InitializeAxInstaller@CActiveXInstallBroker@@QEAAJHPEAGKPEAUIUnknown@@PEAPEAG@Z
0x14001581C: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x14000B5F4: "unsigned long __cdecl IERegGetDWORDWithPoliciesExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int * __ptr64,int * __ptr64)" ?IERegGetDWORDWithPoliciesExW@@YAKPEBG00KPEAH1@Z
0x140011670: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140011BE0: IID_IeAxiAdminInstaller
0x140009C14: "long __cdecl QuotePath(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64)" ?QuotePath@@YAJPEBGKPEAG@Z
0x1400155F8: "__cdecl newmode" _newmode
0x140011780: "__cdecl _imp_IsPolicyKeyPresentW" __imp_IsPolicyKeyPresentW
0x1400122E4: "IDC*" ??_C@_04GFPPACAB@IDC?$CK?$AA@
0x140011828: "__cdecl _imp__initterm" __imp__initterm
0x140011480: "__cdecl _imp_RemoveDirectoryA" __imp_RemoveDirectoryA
0x1400117E0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140011530: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x140003E6C: "public: long __cdecl CActiveXInstallBroker::UpdateLanguageCheck(unsigned short * __ptr64,unsigned short const * __ptr64,struct _FILETIME) __ptr64" ?UpdateLanguageCheck@CActiveXInstallBroker@@QEAAJPEAGPEBGU_FILETIME@@@Z
0x140011350: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x140015700: "void * __ptr64 __ptr64 g_hQuitEvent" ?g_hQuitEvent@@3PEAXEA
0x1400118E8: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x140011408: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140012500: "%ProgramFiles%\Internet Explorer" ??_C@_1EE@FCEIIIN@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CF?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr@
0x140013840: "__cdecl _IMPORT_DESCRIPTOR_AUTHZ" __IMPORT_DESCRIPTOR_AUTHZ
0x14000CF70: PathCchRemoveBackslashEx
0x140015698: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x140012400: "%.08X" ??_C@_1M@DGHBFHOL@?$AA?$CF?$AA?4?$AA0?$AA8?$AAX?$AA?$AA@
0x140011570: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1400114C8: "__cdecl _imp_GetVersionExA" __imp_GetVersionExA
0x14001229C: "IDC" ??_C@_03JEGAAOIO@IDC?$AA@
0x1400117F8: "__cdecl _imp_rand_s" __imp_rand_s
0x14000F150: "protected: static struct CDetourDis::COPYENTRY const * const CDetourDis::s_rceCopyTable0F" ?s_rceCopyTable0F@CDetourDis@@1QBUCOPYENTRY@1@B
0x140009D34: "long __cdecl GetInstallScopeFromIntegrityLevel(unsigned long * __ptr64)" ?GetInstallScopeFromIntegrityLevel@@YAJPEAK@Z
0x140005CC4: "long __cdecl StringCchCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x1400114A8: "__cdecl _imp_K32GetModuleBaseNameW" __imp_K32GetModuleBaseNameW
0x140008AE0: "public: virtual long __cdecl CActiveXInstallSecurityManager::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CActiveXInstallSecurityManager@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140011DE8: "AdvInstallFileW" ??_C@_0BA@CNNLEONL@AdvInstallFileW?$AA@
0x140011328: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x14001560C: "unsigned long g_dwRegister" ?g_dwRegister@@3KA
0x140015940: "__cdecl _onexitend" __onexitend
0x1400114F8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1400117F0: "__cdecl _imp__exit" __imp__exit
0x14000E895: "__cdecl unlock" _unlock
0x140012438: "WinVerifyTrust" ??_C@_0P@CBOPOJKE@WinVerifyTrust?$AA@
0x1400115C0: "__cdecl _imp_SuspendThread" __imp_SuspendThread
0x140011988: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000A48C: DetourCodeFromPointer
0x140008B50: "public: virtual unsigned long __cdecl CActiveXInstallSecurityManager::Release(void) __ptr64" ?Release@CActiveXInstallSecurityManager@@UEAAKXZ
0x140001CBC: "public: __cdecl CLock::CLock(void) __ptr64" ??0CLock@@QEAA@XZ
0x140011CB0: ",-1002" ??_C@_1O@BDOPDICH@?$AA?0?$AA?9?$AA1?$AA0?$AA0?$AA2?$AA?$AA@
0x140011618: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140011718: USER32_NULL_THUNK_DATA
0x140011308: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x140011588: "__cdecl _imp_ReleaseActCtx" __imp_ReleaseActCtx
0x140012278: "." ??_C@_01LFCBOECM@?4?$AA@
0x140011528: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x14000F038: "const CIEAdminBrokerObject::`vftable'{for `IeAxiSystemInstaller'}" ??_7CIEAdminBrokerObject@@6BIeAxiSystemInstaller@@@
0x1400116B0: "__cdecl _imp_RegisterTypeLibForUser" __imp_RegisterTypeLibForUser
0x1400119F0: "__cdecl _xi_a" __xi_a
0x1400054C0: "public: virtual long __cdecl CIEAdminBrokerObject::InstallFile(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?InstallFile@CIEAdminBrokerObject@@UEAAJPEAGPEAUHWND__@@0000K@Z
0x1400115F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140015804: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x14000E6A0: "__cdecl matherr" _matherr
0x14000A83C: DetourTransactionCommitEx
0x14001227C: ".." ??_C@_02DJGKEECL@?4?4?$AA@
0x140011850: "__cdecl _imp__unlock" __imp__unlock
0x1400125B8: "ServerExecutable" ??_C@_1CC@LFOJNHCF@?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140013818: "__cdecl _IMPORT_DESCRIPTOR_urlmon" __IMPORT_DESCRIPTOR_urlmon
0x1400118A0: "__cdecl _imp_iswcntrl" __imp_iswcntrl
0x140011C38: "RunAs" ??_C@_1M@DMOFNHON@?$AAR?$AAu?$AAn?$AAA?$AAs?$AA?$AA@
0x1400118E0: "__cdecl _imp_CoGetCallContext" __imp_CoGetCallContext
0x140011D08: "FilesFlags" ??_C@_1BG@HCEKDLLP@?$AAF?$AAi?$AAl?$AAe?$AAs?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x140006518: "long __cdecl AddFilesToFileList(char const * __ptr64,struct sFNAME * __ptr64,struct sFNAME * __ptr64 * __ptr64)" ?AddFilesToFileList@@YAJPEBDPEAUsFNAME@@PEAPEAU1@@Z
0x140011908: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x140011958: "__cdecl _imp_GetZoneAgnosticSecurityIdFromUrl" __imp_GetZoneAgnosticSecurityIdFromUrl
0x1400066B0: "int __cdecl FilesInFileList(struct sSESSION * __ptr64,struct sFNAME * __ptr64)" ?FilesInFileList@@YAHPEAUsSESSION@@PEAUsFNAME@@@Z
0x1400015E4: "unsigned long __cdecl RegisterCLSID(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?RegisterCLSID@@YAKPEAUHKEY__@@PEBG@Z
0x140002128: "private: long __cdecl CActiveXInstallBroker::UpdateFileList(struct HKEY__ * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?UpdateFileList@CActiveXInstallBroker@@AEAAJPEAUHKEY__@@KPEAPEBGPEAH@Z
0x1400114D8: "__cdecl _imp_SetProcessShutdownParameters" __imp_SetProcessShutdownParameters
0x140002044: "private: long __cdecl CActiveXInstallBroker::UpdateDependencyList(struct HKEY__ * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64) __ptr64" ?UpdateDependencyList@CActiveXInstallBroker@@AEAAJPEAUHKEY__@@KPEAPEBG@Z
0x140004DDC: "public: long __cdecl CActiveXInstallBroker::RemoveExtractedFilesAndDirs(unsigned short * __ptr64,struct sSESSION * __ptr64) __ptr64" ?RemoveExtractedFilesAndDirs@CActiveXInstallBroker@@QEAAJPEAGPEAUsSESSION@@@Z
0x140006CC0: "long __cdecl SetFileIntegrityLevelByNameW(unsigned short const * __ptr64,int)" ?SetFileIntegrityLevelByNameW@@YAJPEBGH@Z
0x140011C10: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140009D8C: "long __cdecl GetRegistrationRootKeyFromIntegrityLevel(struct HKEY__ * __ptr64 * __ptr64)" ?GetRegistrationRootKeyFromIntegrityLevel@@YAJPEAPEAUHKEY__@@@Z
0x140011858: "__cdecl _imp___dllonexit" __imp___dllonexit
0x140011F70: "Software\Microsoft\Code Store Da" ??_C@_1HE@GBBCHGIN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAD?$AAa@
0x14000C5D8: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x140009F14: "long __cdecl DestroyDetoursRedirectToHKCU(void)" ?DestroyDetoursRedirectToHKCU@@YAJXZ
0x140001274: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1400076F4: "long __cdecl CreateTempDir(char * __ptr64,unsigned long)" ?CreateTempDir@@YAJPEADK@Z
0x1400113C8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1400118A8: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x14000E2D0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400119E8: "__cdecl _xc_z" __xc_z
0x14000C450: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x140006A74: "long __cdecl RemoveDirectoryAndChildren(char const * __ptr64)" ?RemoveDirectoryAndChildren@@YAJPEBD@Z
0x1400114F0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1400114C0: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x140015044: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x14000B81C: SHRegGetValueFromHKCUHKLM
0x140011320: "__cdecl _imp_GetKernelObjectSecurity" __imp_GetKernelObjectSecurity
0x1400115E8: "__cdecl _imp_RaiseFailFastException" __imp_RaiseFailFastException
0x140011728: "__cdecl _imp_CryptCATAdminReleaseCatalogContext" __imp_CryptCATAdminReleaseCatalogContext
0x140012610: "Software\Classes" ??_C@_1CC@GHMGMOKH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?$AA@
0x1400099E8: "private: static long __cdecl Abandonment::HostExceptionFilterWrapper(struct _EXCEPTION_POINTERS * __ptr64)" ?HostExceptionFilterWrapper@Abandonment@@CAJPEAU_EXCEPTION_POINTERS@@@Z
0x140011868: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140011910: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1400115F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400060E0: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x1400047CC: "public: long __cdecl CActiveXInstallBroker::UpdateModuleUsage(unsigned short * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long) __ptr64" ?UpdateModuleUsage@CActiveXInstallBroker@@QEAAJPEAGPEBD111K@Z
0x140012558: "REG_EXPAND_SZ" ??_C@_1BM@MODNJEIN@?$AAR?$AAE?$AAG?$AA_?$AAE?$AAX?$AAP?$AAA?$AAN?$AAD?$AA_?$AAS?$AAZ?$AA?$AA@
0x140011440: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140015630: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x140011468: "__cdecl _imp_SetFileAttributesA" __imp_SetFileAttributesA
0x14001579C: "int g_fRegisterTypeLibDetoured" ?g_fRegisterTypeLibDetoured@@3HA
0x140011678: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x14000E990: "__cdecl _chkstk" __chkstk
0x140011978: "__cdecl _imp_Extract" __imp_Extract
0x140006880: "int __cdecl CatDirAndFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CatDirAndFileW@@YAHPEBG0PEAPEAG@Z
0x140011430: "__cdecl _imp_FindNextFileA" __imp_FindNextFileA
0x140015958: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUhsufhrlmUmzgrevUlyquivUznwGEUhglxpOlyq@shfusion" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUhsufhrlmUmzgrevUlyquivUznwGEUhglxpOlyq@shfusion
0x140011720: "__cdecl _imp_CryptCATAdminReleaseContext" __imp_CryptCATAdminReleaseContext
0x14000BB90: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x140011E30: "rundll32.exe IEAdvpack.dll,Regis" ??_C@_1FE@GDOBNLPP@?$AAr?$AAu?$AAn?$AAd?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AAI?$AAE?$AAA?$AAd?$AAv?$AAp?$AAa?$AAc?$AAk?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AAR?$AAe?$AAg?$AAi?$AAs@
0x140001374: "int __cdecl IsAdminWithHighIL(void)" ?IsAdminWithHighIL@@YAHXZ
0x1400063A0: "long __cdecl AddToFileListA(char const * __ptr64,struct sFNAME * __ptr64 * __ptr64)" ?AddToFileListA@@YAJPEBDPEAPEAUsFNAME@@@Z
0x140011518: "__cdecl _imp_GetExitCodeThread" __imp_GetExitCodeThread
0x1400075C0: "long __cdecl MakeRandomTempDirectory(char const * __ptr64,char * __ptr64,unsigned long)" ?MakeRandomTempDirectory@@YAJPEBDPEADK@Z
0x14000C584: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140004028: "public: long __cdecl CActiveXInstallBroker::UpdateDistributionUnit2(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64,unsigned short const * __ptr64,long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,int * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?UpdateDistributionUnit2@CActiveXInstallBroker@@QEAAJPEAGPEBG1KPEAK1H11J111KPEAPEBGPEAHK3K33@Z
0x140015640: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140011788: "__cdecl _imp_?IsProtectedModeCOMCaller@@YAJPEAH@Z" __imp_?IsProtectedModeCOMCaller@@YAJPEAH@Z
0x14000F118: "const CActiveXInstallSecurityManager::`vftable'" ??_7CActiveXInstallSecurityManager@@6B@
0x140008838: "int __cdecl ContainingPathIsTamperProof(unsigned short const * __ptr64)" ?ContainingPathIsTamperProof@@YAHPEBG@Z
0x140011450: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x140012274: "\*" ??_C@_02KHDDNBB@?2?$CK?$AA@
0x14000F058: "const CIEAdminBrokerObject::`vftable'{for `IeAxiAdminInstaller'}" ??_7CIEAdminBrokerObject@@6BIeAxiAdminInstaller@@@
0x1400124F0: "-PID:" ??_C@_1M@IGCNOMLH@?$AA?9?$AAP?$AAI?$AAD?$AA?3?$AA?$AA@
0x14000AF3C: DetourDetach
0x140012488: "-REGSERVER" ??_C@_1BG@FMBALBMP@?$AA?9?$AAR?$AAE?$AAG?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x140011488: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x140011A10: "__cdecl _guard_fids_table" __guard_fids_table
0x14000D2CC: "bool __cdecl StrIsEqualCaseInsensitive(unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?StrIsEqualCaseInsensitive@@YA_NPEBG0H@Z
0x140011708: "__cdecl _imp_CharNextW" __imp_CharNextW
0x140011348: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x1400118B0: msvcrt_NULL_THUNK_DATA
0x140011180: "__cdecl load_config_used" _load_config_used
0x140003710: "private: static unsigned long __cdecl CActiveXInstallBroker::RegisterDllFile2ThreadProc(void * __ptr64)" ?RegisterDllFile2ThreadProc@CActiveXInstallBroker@@CAKPEAX@Z
0x140011790: "__cdecl _imp_?SetWindowsHandleAccess@@YAJPEAXKK@Z" __imp_?SetWindowsHandleAccess@@YAJPEAXKK@Z
0x140012448: " , " ??_C@_19LFEDFCOM@?$AA?5?$AA?0?$AA?7?$AA?6?$AA?$AA@
0x14000A530: DetourTransactionBegin
0x140011BD0: IID_IeAxiInstaller2
0x140011558: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x140011750: "__cdecl _imp_GetValue" __imp_GetValue
0x140007EA0: "long __cdecl AxiPreScanPathA(char const * __ptr64)" ?AxiPreScanPathA@@YAJPEBD@Z
0x140011BC0: IID_IeAxiInstaller
0x1400055D0: "public: virtual long __cdecl CIEAdminBrokerObject::UpdateLanguageCheck(unsigned short * __ptr64,unsigned short const * __ptr64,struct _FILETIME) __ptr64" ?UpdateLanguageCheck@CIEAdminBrokerObject@@UEAAJPEAGPEBGU_FILETIME@@@Z
0x14000CC90: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x140013854: "__cdecl _IMPORT_DESCRIPTOR_iertutil" __IMPORT_DESCRIPTOR_iertutil
0x140011700: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x140005A30: "[thunk]:public: virtual unsigned long __cdecl CIEAdminBrokerObject::Release`adjustor{8}' (void) __ptr64" ?Release@CIEAdminBrokerObject@@W7EAAKXZ
0x14000C544: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x1400031C0: "public: long __cdecl CActiveXInstallBroker::InstallFile(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?InstallFile@CActiveXInstallBroker@@QEAAJPEAGPEAUHWND__@@0000K@Z
0x140015808: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x140012640: "protected: static unsigned char const * const CDetourDis::s_rbModRm" ?s_rbModRm@CDetourDis@@1QBEB
0x140015718: "struct _RTL_CRITICAL_SECTION g_DetourCriticalSection" ?g_DetourCriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x1400112F8: "__cdecl _imp_RegQueryValueExA" __imp_RegQueryValueExA
0x140011F48: "LastCheckedHi" ??_C@_1BM@LLIHPAEI@?$AAL?$AAa?$AAs?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AAe?$AAd?$AAH?$AAi?$AA?$AA@
0x1400137A0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1400117D0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400117A8: "__cdecl _imp_iswascii" __imp_iswascii
0x140001458: "long __cdecl RegisterMyLocalServer(void)" ?RegisterMyLocalServer@@YAJXZ
0x140015038: g_hActCtx
0x140011F20: "LanguageCheckPeriod" ??_C@_1CI@CIPBAEEB@?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAh?$AAe?$AAc?$AAk?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x140006020: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x140005E98: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x140011710: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140001C3C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1400122B8: "%s\%s.dat" ??_C@_1BE@LFBKIFEH@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x140011460: "__cdecl _imp_GetFileAttributesA" __imp_GetFileAttributesA
0x14000C1AC: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x14000A5BC: DetourTransactionAbort
0x1400118C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400059E0: "[thunk]:public: virtual unsigned long __cdecl CIEAdminBrokerObject::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CIEAdminBrokerObject@@W7EAAKXZ
0x140011610: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400065D8: "int __cdecl IsInFileListA(char const * __ptr64,struct sFNAME * __ptr64)" ?IsInFileListA@@YAHPEBDPEAUsFNAME@@@Z
0x1400155F4: "__cdecl dowildcard" _dowildcard
0x140012960: "internal\sdk\inc\wil\resource.h" ??_C@_0CA@BIKDFFBC@internal?2sdk?2inc?2wil?2resource?4h?$AA@
0x14000DC4C: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValue<unsigned __int64>(unsigned short const * __ptr64,unsigned __int64 * __ptr64,bool * __ptr64)" ??$TryGetValue@_K@SemaphoreValue@details_abi@wil@@SAJPEBGPEA_KPEA_N@Z
0x140005600: "public: virtual long __cdecl CIEAdminBrokerObject::UpdateDistributionUnit(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned short const * __ptr64,int,unsigned short const * __ptr64,unsigned short const * __ptr64,long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned short const * __ptr64 * __ptr64) __ptr64" ?UpdateDistributionUnit@CIEAdminBrokerObject@@UEAAJPEAGPEBG1KPEAK1H11J111KPEAPEBGK3K33@Z
0x140002E78: "public: long __cdecl CActiveXInstallBroker::RunSetupCommand(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64 * __ptr64) __ptr64" ?RunSetupCommand@CActiveXInstallBroker@@QEAAJPEAGPEAUHWND__@@0000KPEAPEAX@Z
0x1400115D8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x140011960: "__cdecl _imp_CoInternetApproveExtension" __imp_CoInternetApproveExtension
0x140011370: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x140011CF8: "Files" ??_C@_1M@NAHBCAFF@?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x140011598: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x140011CC0: "IconReference" ??_C@_1BM@NDOHOLHH@?$AAI?$AAc?$AAo?$AAn?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x1400116E8: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x14000BE78: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x1400118C8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000C398: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x140011760: "__cdecl _imp_?GetProcessIntegrityLevel@@YAJPEAXPEAK@Z" __imp_?GetProcessIntegrityLevel@@YAJPEAXPEAK@Z
0x140009DD8: EnableRedirectToHKCU
0x140005510: "public: virtual long __cdecl CIEAdminBrokerObject::RegisterExeFile(unsigned short * __ptr64,unsigned short * __ptr64,int,struct _PROCESS_INFORMATION * __ptr64) __ptr64" ?RegisterExeFile@CIEAdminBrokerObject@@UEAAJPEAG0HPEAU_PROCESS_INFORMATION@@@Z
0x14000E880: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400064C4: "long __cdecl AddToFileListW(unsigned short const * __ptr64,struct sFNAME * __ptr64 * __ptr64)" ?AddToFileListW@@YAJPEBGPEAPEAUsFNAME@@@Z
0x140011898: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140012990: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x14000E5EC: RtlpImageNtHeader
0x1400127E0: "comctl32.dll" ??_C@_1BK@JKBHGHPP@?$AAc?$AAo?$AAm?$AAc?$AAt?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000BDF8: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x140012848: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x140005F34: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x14000E569: wcschr
0x14000C5C8: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x140011680: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400116D0: "__cdecl _imp_RegisterTypeLib" __imp_RegisterTypeLib
0x140008BC0: "public: virtual long __cdecl CActiveXInstallSecurityManager::GetSecurityId(unsigned char * __ptr64,unsigned long * __ptr64,unsigned __int64) __ptr64" ?GetSecurityId@CActiveXInstallSecurityManager@@UEAAJPEAEPEAK_K@Z
0x140011918: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140006E00: "long __cdecl IsFileAtIntegrityLevel(unsigned short const * __ptr64,int)" ?IsFileAtIntegrityLevel@@YAJPEBGH@Z
0x1400116B8: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x14000B2F0: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyBytesJump(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyBytesJump@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x1400124A0: "/UNREGSERVER" ??_C@_1BK@JDNHDKIC@?$AA?1?$AAU?$AAN?$AAR?$AAE?$AAG?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x140012930: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x1400117B8: "__cdecl _imp_wcstok_s" __imp_wcstok_s
0x1400117C8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140003774: "private: long __cdecl CActiveXInstallBroker::RegisterDllFile2Helper(unsigned short * __ptr64,unsigned short * __ptr64,int,int) __ptr64" ?RegisterDllFile2Helper@CActiveXInstallBroker@@AEAAJPEAG0HH@Z
0x140011448: "__cdecl _imp_lstrcmpA" __imp_lstrcmpA
0x140001CF4: "public: __cdecl CActiveXInstallBroker::CActiveXInstallBroker(void) __ptr64" ??0CActiveXInstallBroker@@QEAA@XZ
0x1400118D0: ntdll_NULL_THUNK_DATA
0x1400124C0: "-UNREGSERVER" ??_C@_1BK@IGJNHBON@?$AA?9?$AAU?$AAN?$AAR?$AAE?$AAG?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x140011870: "__cdecl _imp_memcpy" __imp_memcpy
0x140012810: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x140007F34: "long __cdecl AxiPreScanPathW(unsigned short const * __ptr64)" ?AxiPreScanPathW@@YAJPEBG@Z
0x1400129A0: "\UNC\" ??_C@_1M@NGGGHLBG@?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x1400128E0: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140012870: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x140011298: "__cdecl _imp_FreeSid" __imp_FreeSid
0x1400053D0: "public: virtual long __cdecl CIEAdminBrokerObject::VerifyFile(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned long,struct _GUID const & __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64) __ptr64" ?VerifyFile@CIEAdminBrokerObject@@UEAAJPEAGPEAUHWND__@@000KKAEBU_GUID@@PEAPEAGPEAKPEAPEAE@Z
0x140001A60: "public: virtual long __cdecl CIEAdminBrokerClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CIEAdminBrokerClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400117A0: "__cdecl _imp_iscntrl" __imp_iscntrl
0x140015018: "__cdecl _security_cookie" __security_cookie
0x1400112C0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14000E990: "__cdecl alloca_probe" _alloca_probe
0x140004CAC: "public: long __cdecl CActiveXInstallBroker::ExtractFiles(unsigned short * __ptr64,char const * __ptr64,struct sSESSION * __ptr64) __ptr64" ?ExtractFiles@CActiveXInstallBroker@@QEAAJPEAGPEBDPEAUsSESSION@@@Z
0x140001924: "long __cdecl CheckLockCountAndShutdownBroker(void)" ?CheckLockCountAndShutdownBroker@@YAJXZ
0x14000BEF8: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x140012948: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x140011290: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x1400122D0: "%s\[%d]%s" ??_C@_1BE@FNKMDDJC@?$AA?$CF?$AAs?$AA?2?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?$CF?$AAs?$AA?$AA@
0x140015710: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUfcUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_ux_iel1" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUfcUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_ux_iel1
0x140011410: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x140011500: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140005460: "public: virtual long __cdecl CIEAdminBrokerObject::RunSetupCommand(unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned __int64 * __ptr64) __ptr64" ?RunSetupCommand@CIEAdminBrokerObject@@UEAAJPEAGPEAUHWND__@@0000KPEA_K@Z
0x1400122EC: "\" ??_C@_01KICIPPFI@?2?$AA@
0x140011478: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140011318: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x140011E90: "Software\Microsoft\Windows\Curre" ??_C@_1GE@HLGCOFKK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140015010: "__cdecl _defaultmatherr" __defaultmatherr
0x14000BA58: SHFusionLoadLibrary
0x140011650: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140011340: "__cdecl _imp_CopySid" __imp_CopySid
0x1400116C0: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1400112A8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140015948: "__cdecl _onexitbegin" __onexitbegin
0x140015030: "long g_LockCount" ?g_LockCount@@3JA
0x140011300: "__cdecl _imp_RegCreateKeyA" __imp_RegCreateKeyA
0x140015688: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x1400115B0: "__cdecl _imp_GetThreadContext" __imp_GetThreadContext
0x14000BED4: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x1400112D0: "__cdecl _imp_RegCreateKeyW" __imp_RegCreateKeyW
0x140012548: "AppID" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x140011890: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140005570: "public: virtual long __cdecl CIEAdminBrokerObject::RegisterDllFile2(unsigned short * __ptr64,unsigned short * __ptr64,int,int) __ptr64" ?RegisterDllFile2@CIEAdminBrokerObject@@UEAAJPEAG0HH@Z
0x140011C00: CLSID_MAOAdminBroker
0x140011620: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140011470: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x140015610: "int g_fRunningAsAdminWithHighIL" ?g_fRunningAsAdminWithHighIL@@3HA
0x1400112E0: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x14001378C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140011D40: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GK@NKELMJIO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400113B0: "__cdecl _imp_AuthzFreeResourceManager" __imp_AuthzFreeResourceManager
0x140011FF0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GM@PLEICGEB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400112D8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400156F0: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x14000CAC8: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x14000E794: "__cdecl _security_init_cookie" __security_init_cookie
0x140015678: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x140011770: "__cdecl _imp_?EDL_AddNewDomain@@YAJAEBU_GUID@@PEBG@Z" __imp_?EDL_AddNewDomain@@YAJAEBU_GUID@@PEBG@Z
0x140011818: "__cdecl _imp__cexit" __imp__cexit
0x140011400: "__cdecl _imp_FindFirstFileA" __imp_FindFirstFileA
0x140011380: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140011968: "__cdecl _imp_CoInternetSetFeatureEnabled" __imp_CoInternetSetFeatureEnabled
0x140012370: "Software\Policies\Microsoft\Inte" ??_C@_1IM@OAHIHGC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe@
0x14000E648: "__cdecl get_image_app_type" _get_image_app_type
0x140011368: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x1400122A0: "%s%s%d.tmp" ??_C@_0L@GPAINONO@?$CFs?$CFs?$CFd?4tmp?$AA@
0x140011738: "__cdecl _imp_CryptCATAdminAcquireContext" __imp_CryptCATAdminAcquireContext
0x14000B4B0: "protected: unsigned char * __ptr64 __cdecl CDetourDis::Copy66(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?Copy66@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x140011DB0: "IEAdvpack.Dll" ??_C@_1BM@OAGJGEPG@?$AAI?$AAE?$AAA?$AAd?$AAv?$AAp?$AAa?$AAc?$AAk?$AA?4?$AAD?$AAl?$AAl?$AA?$AA@
0x14000B4F0: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyF6(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyF6@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x1400129C0: "{00000000-0000-0000-0000-0000000" ??_C@_1EO@NFBNALDE@?$AA?$HL?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA?9?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0?$AA0@
0x140003BB8: "private: long __cdecl CActiveXInstallBroker::STARegisterDllFile2(unsigned short * __ptr64,unsigned short * __ptr64,int,int) __ptr64" ?STARegisterDllFile2@CActiveXInstallBroker@@AEAAJPEAG0HH@Z
0x1400137B4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000B4D0: "protected: unsigned char * __ptr64 __cdecl CDetourDis::Copy67(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?Copy67@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x14000B540: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyF7(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyF7@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x14000D940: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x14000C508: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x14000D4D4: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x1400116E0: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x140012418: "WinTrust.Dll" ??_C@_1BK@FFIOLDDH@?$AAW?$AAi?$AAn?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?4?$AAD?$AAl?$AAl?$AA?$AA@
0x140011390: ADVAPI32_NULL_THUNK_DATA
0x14000BAB4: DelayLoadCC
0x140011E00: " /RegServer" ??_C@_1BI@MEIDCOMO@?$AA?5?$AA?1?$AAR?$AAe?$AAg?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x140015614: "long g_fClassRegistered" ?g_fClassRegistered@@3JA
0x140013804: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x140012908: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x140015650: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x14001240C: "LW" ??_C@_15GAHNKDFA@?$AAL?$AAW?$AA?$AA@
0x1400116F8: RPCRT4_NULL_THUNK_DATA
0x140011798: iertutil_NULL_THUNK_DATA
0x14000E340: "__cdecl _report_gsfailure" __report_gsfailure
0x1400122AC: "%s%s" ??_C@_04HDOCAJNK@?$CFs?$CFs?$AA@
0x14000B220: "protected: unsigned char * __ptr64 __cdecl CDetourDis::CopyBytesPrefix(struct CDetourDis::COPYENTRY const * __ptr64,unsigned char * __ptr64,unsigned char * __ptr64) __ptr64" ?CopyBytesPrefix@CDetourDis@@IEAAPEAEPEBUCOPYENTRY@1@PEAE1@Z
0x140012470: "/REGSERVER" ??_C@_1BG@HCEAHIEP@?$AA?1?$AAR?$AAE?$AAG?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x140011668: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x14000E4B8: "__cdecl onexit" _onexit
0x140015638: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x140015938: "__cdecl _native_startup_state" __native_startup_state
0x140012208: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140011970: "__cdecl _imp_CoInternetCreateSecurityManager" __imp_CoInternetCreateSecurityManager
0x1400156A4: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x1400115A0: "__cdecl _imp_SetThreadContext" __imp_SetThreadContext
0x14001382C: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x140015740: "struct _GUID g_clsid" ?g_clsid@@3U_GUID@@A
0x140011BA0: IID_IeAxiSystemInstaller
0x140005F20: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x140008C10: "public: virtual long __cdecl CActiveXInstallSecurityManager::ProcessUrlAction(unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long,unsigned long) __ptr64" ?ProcessUrlAction@CActiveXInstallSecurityManager@@UEAAJKPEAEK0KKK@Z
0x1400128A8: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140005930: "public: virtual long __cdecl CIEAdminBrokerObject::DeleteExtractedFile(char const * __ptr64) __ptr64" ?DeleteExtractedFile@CIEAdminBrokerObject@@UEAAJPEBD@Z
0x140011E18: "ICDRegOCX%u" ??_C@_1BI@CACCNJMC@?$AAI?$AAC?$AAD?$AAR?$AAe?$AAg?$AAO?$AAC?$AAX?$AA?$CF?$AAu?$AA?$AA@
0x140011838: "__cdecl _imp__fmode" __imp__fmode
0x140011310: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x140011F10: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x14000BB0C: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x140001D58: "private: void __cdecl CActiveXInstallBroker::Reset(int) __ptr64" ?Reset@CActiveXInstallBroker@@AEAAXH@Z
0x1400116F0: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x140015680: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x1400116C8: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x140015604: "long g_ObjectCount" ?g_ObjectCount@@3JA
0x1400156A0: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x14000E700: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140001980: "public: virtual unsigned long __cdecl CActiveXInstallSecurityManager::AddRef(void) __ptr64" ?AddRef@CActiveXInstallSecurityManager@@UEAAKXZ
0x140011800: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x14001282C: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x140015648: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x14000E952: memset
0x140013868: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140015045: g_header_init_InitializeResultHeader
0x14000F078: "const CIEAdminBrokerObject::`vftable'{for `IeAxiInstaller2'}" ??_7CIEAdminBrokerObject@@6BIeAxiInstaller2@@@
0x1400057C0: "public: virtual long __cdecl CIEAdminBrokerObject::UpdateModuleUsage(unsigned short * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long) __ptr64" ?UpdateModuleUsage@CIEAdminBrokerObject@@UEAAJPEAGPEBD111K@Z

[JEB Decompiler by PNF Software]