Generated by JEB on 2019/08/01

PE: C:\Windows\System32\shpafact.dll Base=0x180000000 SHA-256=B10E2E4AB2FE6833011ED692A37A2B16DBF2C4FCAE4F46302E91E163C28ED46A
PDB: shpafact.pdb GUID={959B0636-CB3F-A848-EFCF4FCE68B8B5A9} Age=1

240 located named symbols:
0x180004710: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x180004408: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800033BC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800031D0: "__cdecl FindPESection" _FindPESection
0x1800045A0: CLSID_ElevatedFactoryServerManager
0x1800042C8: "__cdecl _imp_StringFromCLSID" __imp_StringFromCLSID
0x180004D34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180006020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004018: "const CElevatedFactoryServerManager::`vftable'" ??_7CElevatedFactoryServerManager@@6B@
0x180002CAC: "__cdecl CRT_INIT" _CRT_INIT
0x180004340: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800040B8: "const CElevatedFactoryServer::`vftable'" ??_7CElevatedFactoryServer@@6B@
0x180001D50: WppControlCallback
0x180003630: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001738: "public: virtual __cdecl CElevatedFactoryServerManager::CFactoryData::~CFactoryData(void) __ptr64" ??1CFactoryData@CElevatedFactoryServerManager@@UEAA@XZ
0x180001E20: DllGetClassObject
0x180004010: "const CElevatedFactoryServerManager::CFactoryData::`vftable'" ??_7CFactoryData@CElevatedFactoryServerManager@@6B@
0x180001640: "public: virtual long __cdecl CElevatedFactoryServerManager::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CElevatedFactoryServerManager@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180002700: "public: virtual long __cdecl CElevatedFactoryServer::ServerCreateElevatedObject(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?ServerCreateElevatedObject@CElevatedFactoryServer@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x180004D48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180001BD0: "protected: virtual __cdecl CElevatedFactoryServerManager::~CElevatedFactoryServerManager(void) __ptr64" ??1CElevatedFactoryServerManager@@MEAA@XZ
0x180004498: ole32_NULL_THUNK_DATA
0x1800044A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800043C0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1800046D0: "CLSID\%s\VirtualServerObjects" ??_C@_1DM@FGLEINGN@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1800012A0: "protected: long __cdecl CElevatedFactoryClient::_Initialize(struct HWND__ * __ptr64,struct _GUID const & __ptr64,bool) __ptr64" ?_Initialize@CElevatedFactoryClient@@IEAAJPEAUHWND__@@AEBU_GUID@@_N@Z
0x1800031B4: "__cdecl XcptFilter" _XcptFilter
0x1800044B0: "__cdecl _xc_a" __xc_a
0x180001200: "public: virtual long __cdecl CElevatedFactoryClient::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CElevatedFactoryClient@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180001240: "public: virtual unsigned long __cdecl CElevatedFactoryClient::Release(void) __ptr64" ?Release@CElevatedFactoryClient@@UEAAKXZ
0x180004328: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000178C: "protected: void __cdecl CElevatedFactoryServerManager::_GetExistingFactory(struct _GUID const & __ptr64,struct IElevatedFactoryServer * __ptr64 * __ptr64) __ptr64" ?_GetExistingFactory@CElevatedFactoryServerManager@@IEAAXAEBU_GUID@@PEAPEAUIElevatedFactoryServer@@@Z
0x180004690: WPP_ThisDir_CTLGUID_ShellTraceHomeGroupProvider
0x1800040E0: "__cdecl _imp_DPA_GetPtr" __imp_DPA_GetPtr
0x180002C00: "long __cdecl CCv6s_HeapReallocArray<void * __ptr64>(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64 * __ptr64 * __ptr64)" ??$CCv6s_HeapReallocArray@PEAX@@YAJPEAXK0_K1PEAPEAPEAX@Z
0x1800040F0: g_pfn_DPA_Destroy
0x180004680: WPP_ThisDir_CTLGUID_ShellTraceCredUIProvider
0x180004480: "__cdecl _imp_memset" __imp_memset
0x18000338F: "__cdecl initterm" _initterm
0x180004410: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180004DE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180006748: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800043E0: "__cdecl _imp_Sleep" __imp_Sleep
0x1800044D0: "__cdecl _xi_z" __xi_z
0x1800040E8: "__cdecl _imp_DPA_Create" __imp_DPA_Create
0x1800042E8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800026C0: "public: virtual unsigned long __cdecl CElevatedFactoryServer::Release(void) __ptr64" ?Release@CElevatedFactoryServer@@UEAAKXZ
0x18000339B: "__cdecl _C_specific_handler" __C_specific_handler
0x180004650: WPP_ca5267c725cb350e4b2403094e8a2d48_Traceguids
0x18000360D: memmove
0x180004318: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800066F0: WPP_REGISTRATION_GUIDS
0x180004380: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800035AC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001DE0: DllCanUnloadNow
0x180001C50: "int __cdecl DPA_DeleteCB<class CElevatedFactoryServerManager::CFactoryData>(class CElevatedFactoryServerManager::CFactoryData * __ptr64,void * __ptr64)" ??$DPA_DeleteCB@VCFactoryData@CElevatedFactoryServerManager@@@@YAHPEAVCFactoryData@CElevatedFactoryServerManager@@PEAX@Z
0x180006600: WPP_MAIN_CB
0x1800031C0: "__cdecl amsg_exit" _amsg_exit
0x180001C40: "private: static int __cdecl CDPA_Base<class CElevatedFactoryServerManager::CFactoryData,class CTContainer_PolicyUnOwned<class CElevatedFactoryServerManager::CFactoryData> >::_StandardDestroyCB(class CElevatedFactoryServerManager::CFactoryData * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@VCFactoryData@CElevatedFactoryServerManager@@V?$CTContainer_PolicyUnOwned@VCFactoryData@CElevatedFactoryServerManager@@@@@@CAHPEAVCFactoryData@CElevatedFactoryServerManager@@PEAX@Z
0x1800045C0: IID_IClassFactory
0x180004298: "__cdecl _imp_QISearch" __imp_QISearch
0x180004720: WPP_6c949b1c2d8432a3ec441f14ac4b0aad_Traceguids
0x180001AE0: "public: virtual long __cdecl CElevatedFactoryServerManager::ManagerCreateElevatedObject(struct _GUID const & __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?ManagerCreateElevatedObject@CElevatedFactoryServerManager@@UEAAJAEBU_GUID@@00PEAPEAX@Z
0x180001118: "public: static long __cdecl CElevatedFactoryClient::CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@CElevatedFactoryClient@@SAJAEBU_GUID@@PEAPEAX@Z
0x180002510: "public: virtual long __cdecl CClassFactory::LockServer(int) __ptr64" ?LockServer@CClassFactory@@UEAAJH@Z
0x180001010: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryClient::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCElevatedFactoryClient@@MEAAPEAXI@Z
0x180001840: "public: virtual long __cdecl CElevatedFactoryServerManager::CheckFactoryExists(struct _GUID const & __ptr64,int * __ptr64) __ptr64" ?CheckFactoryExists@CElevatedFactoryServerManager@@UEAAJAEBU_GUID@@PEAH@Z
0x180002220: "public: virtual unsigned long __cdecl CElevatedFactoryServer::AddRef(void) __ptr64" ?AddRef@CElevatedFactoryServer@@UEAAKXZ
0x1800043C8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180004390: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004420: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180004300: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004430: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1800040F8: "__cdecl _imp_DPA_DestroyCallback" __imp_DPA_DestroyCallback
0x180004640: "__cdecl GUID_6fabda16_031e_47e3_b2a2_2339c05ccb9e" _GUID_6fabda16_031e_47e3_b2a2_2339c05ccb9e
0x180004358: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180006738: "__cdecl _native_startup_lock" __native_startup_lock
0x180001F08: DllMain
0x180004440: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800043A8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004338: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800042F0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003588: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180004490: "__cdecl _imp_CoGetObject" __imp_CoGetObject
0x180004D20: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x1800046A0: WPP_ThisDir_CTLGUID_ShellPerfTraceProvider
0x180002200: "public: virtual long __cdecl CClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180001890: "public: virtual long __cdecl CElevatedFactoryServerManager::SetFactory(struct _GUID const & __ptr64,struct IElevatedFactoryServer * __ptr64) __ptr64" ?SetFactory@CElevatedFactoryServerManager@@UEAAJAEBU_GUID@@PEAUIElevatedFactoryServer@@@Z
0x180004348: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003280: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800045B0: IID_IUnknown
0x180004D84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001010: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryClient::`vector deleting destructor'(unsigned int) __ptr64" ??_ECElevatedFactoryClient@@MEAAPEAXI@Z
0x1800010B8: WPP_SF_
0x180004310: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180004E24: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x180002280: "long __cdecl _IsValidVirtualFactory(struct _GUID const & __ptr64)" ?_IsValidVirtualFactory@@YAJAEBU_GUID@@@Z
0x180002240: "public: virtual unsigned long __cdecl CClassFactory::Release(void) __ptr64" ?Release@CClassFactory@@UEAAKXZ
0x180002EF0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004448: "__cdecl _imp__initterm" __imp__initterm
0x180004088: "const CClassFactory::`vftable'" ??_7CClassFactory@@6B@
0x180002940: DPA_Destroy
0x1800042C0: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x1800042B0: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x180004D98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800042A0: SHLWAPI_NULL_THUNK_DATA
0x180001680: "public: virtual unsigned long __cdecl CElevatedFactoryServerManager::Release(void) __ptr64" ?Release@CElevatedFactoryServerManager@@UEAAKXZ
0x180006728: "__cdecl _onexitend" __onexitend
0x1800044A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004100: g_pfn_DPA_InsertPtr
0x180004350: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180001660: "public: virtual unsigned long __cdecl CElevatedFactoryServerManager::AddRef(void) __ptr64" ?AddRef@CElevatedFactoryServerManager@@UEAAKXZ
0x1800042B8: USER32_NULL_THUNK_DATA
0x180002AC0: DPA_InsertPtr
0x1800016F0: "public: virtual void * __ptr64 __cdecl CElevatedFactoryServerManager::CFactoryData::`vector deleting destructor'(unsigned int) __ptr64" ??_ECFactoryData@CElevatedFactoryServerManager@@UEAAPEAXI@Z
0x1800045D0: CLSID_MultiObjectElevationFactory
0x180004400: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800044C0: "__cdecl _xi_a" __xi_a
0x1800043F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800014D0: "public: virtual long __cdecl CElevatedFactoryClient::CreateElevatedObject(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateElevatedObject@CElevatedFactoryClient@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x1800042D8: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180004630: "__cdecl GUID_36df1a3d_973d_4956_b55a_47de453e8103" _GUID_36df1a3d_973d_4956_b55a_47de453e8103
0x180006000: WPP_GLOBAL_Control
0x180004790: WPP_7284f73dde40300e20b225c5dce29284_Traceguids
0x180004DD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001CFC: WPP_SF_D
0x1800010DC: WPP_SF_d
0x180006750: "__cdecl pRawDllMain" _pRawDllMain
0x180004D70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1800043D0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180003190: "__cdecl _security_check_cookie" __security_check_cookie
0x1800044B8: "__cdecl _xc_z" __xc_z
0x180004360: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002530: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryServer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECElevatedFactoryServer@@MEAAPEAXI@Z
0x180002390: "public: virtual long __cdecl CClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180001070: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryServerManager::`vector deleting destructor'(unsigned int) __ptr64" ??_ECElevatedFactoryServerManager@@MEAAPEAXI@Z
0x1800042D0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800043F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004320: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1800065B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhskzuzxgUwooUlyquivUznwGEUkxsOlyq@shpafact" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhskzuzxgUwooUlyquivUznwGEUkxsOlyq@shpafact
0x18000214C: "public: static long __cdecl CClassFactory::CreateFactoryInstance(struct _GUID const & __ptr64,class CClassFactory * __ptr64 * __ptr64)" ?CreateFactoryInstance@CClassFactory@@SAJAEBU_GUID@@PEAPEAV1@@Z
0x180004308: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800016F0: "public: virtual void * __ptr64 __cdecl CElevatedFactoryServerManager::CFactoryData::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCFactoryData@CElevatedFactoryServerManager@@UEAAPEAXI@Z
0x1800043B0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180001220: "public: virtual unsigned long __cdecl CElevatedFactoryClient::AddRef(void) __ptr64" ?AddRef@CElevatedFactoryClient@@UEAAKXZ
0x180004DFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180004370: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800044D8: "__cdecl _guard_fids_table" __guard_fids_table
0x180004488: msvcrt_NULL_THUNK_DATA
0x180004190: "__cdecl load_config_used" _load_config_used
0x180001290: "public: virtual long __cdecl CElevatedFactoryClient::Initialize(struct HWND__ * __ptr64,struct _GUID const & __ptr64) __ptr64" ?Initialize@CElevatedFactoryClient@@UEAAJPEAUHWND__@@AEBU_GUID@@@Z
0x1800040E0: g_pfn_DPA_GetPtr
0x180004E38: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1800065F0: "long g_cDllRefs" ?g_cDllRefs@@3JA
0x180004468: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004620: "__cdecl GUID_804bd226_af47_4d71_b492_443a57610b08" _GUID_804bd226_af47_4d71_b492_443a57610b08
0x1800025A8: "public: static long __cdecl CElevatedFactoryServer::CreateInstance(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@CElevatedFactoryServer@@SAJAEBU_GUID@@0PEAPEAX@Z
0x1800040F0: "__cdecl _imp_DPA_Destroy" __imp_DPA_Destroy
0x1800045E0: "Elevation:Administrator!new:%s" ??_C@_1DO@BMONIIMG@?$AAE?$AAl?$AAe?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?3?$AAA?$AAd?$AAm?$AAi?$AAn?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?$CB?$AAn?$AAe?$AAw?$AA?3?$AA?$CF?$AAs?$AA?$AA@
0x180004330: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180001C7C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800043A0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004368: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800040E8: g_pfn_DPA_Create
0x180002530: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryServer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCElevatedFactoryServer@@MEAAPEAXI@Z
0x180001510: "public: static long __cdecl CElevatedFactoryServerManager::GetSingleton(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?GetSingleton@CElevatedFactoryServerManager@@SAJAEBU_GUID@@PEAPEAX@Z
0x18000256C: WPP_SF__guid_
0x180001070: "protected: virtual void * __ptr64 __cdecl CElevatedFactoryServerManager::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCElevatedFactoryServerManager@@MEAAPEAXI@Z
0x180004398: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800033B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004730: "Software\Classes\CLSID\%s\Virtua" ??_C@_1FO@GKIPGKAF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs?$AAe?$AAs?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAs?$AA?2?$AAV?$AAi?$AAr?$AAt?$AAu?$AAa@
0x180002B80: DPA_DestroyCallback
0x1800042A8: "__cdecl _imp_SetCursor" __imp_SetCursor
0x180001280: "public: virtual long __cdecl CElevatedFactoryClient::InitializeNoWaitCursor(struct HWND__ * __ptr64,struct _GUID const & __ptr64) __ptr64" ?InitializeNoWaitCursor@CElevatedFactoryClient@@UEAAJPEAUHWND__@@AEBU_GUID@@@Z
0x1800065C8: g_csDll
0x180004438: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180002110: "protected: virtual void * __ptr64 __cdecl CClassFactory::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClassFactory@@MEAAPEAXI@Z
0x180004470: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800065C0: "class CElevatedFactoryServerManager * __ptr64 __ptr64 g_pEFSM" ?g_pEFSM@@3PEAVCElevatedFactoryServerManager@@EA
0x180004418: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180004D5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800046B0: WPP_ThisDir_CTLGUID_ShellTraceProvider
0x180004428: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180004660: WPP_ThisDir_CTLGUID_ShellTraceImmersiveColorProvider
0x180006018: "__cdecl _security_cookie" __security_cookie
0x180004388: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800040F8: g_pfn_DPA_DestroyCallback
0x1800026A0: "public: virtual long __cdecl CElevatedFactoryServer::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CElevatedFactoryServer@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800028DC: DPA_CreateEx
0x180004E10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800042E0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x180006730: "__cdecl _onexitbegin" __onexitbegin
0x180004670: WPP_ThisDir_CTLGUID_ShellTraceImageValidatorProvider
0x180004458: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800042F8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180006720: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa
0x180004378: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800028D0: DPA_Create
0x1800032B4: "__cdecl _security_init_cookie" __security_init_cookie
0x180004D0C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004478: "__cdecl _imp_memmove" __imp_memmove
0x180004450: "__cdecl _imp_malloc" __imp_malloc
0x180002110: "protected: virtual void * __ptr64 __cdecl CClassFactory::`vector deleting destructor'(unsigned int) __ptr64" ??_ECClassFactory@@MEAAPEAXI@Z
0x180003400: "__cdecl _report_gsfailure" __report_gsfailure
0x1800043B8: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180006740: "__cdecl _native_startup_state" __native_startup_state
0x1800029F0: DPA_GetPtr
0x1800046C0: WPP_67bd147b71f538da4ac94a735fe74386_Traceguids
0x180004DC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004460: "__cdecl _imp_free" __imp_free
0x180003220: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004050: "const CElevatedFactoryClient::`vftable'" ??_7CElevatedFactoryClient@@6B@
0x1800043E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180004100: "__cdecl _imp_DPA_InsertPtr" __imp_DPA_InsertPtr
0x180002A14: DPA_Grow
0x180002220: "public: virtual unsigned long __cdecl CClassFactory::AddRef(void) __ptr64" ?AddRef@CClassFactory@@UEAAKXZ
0x1800043D8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180004DAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180003619: memset
0x180004E4C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]