Generated by JEB on 2019/08/01

PE: C:\Windows\System32\vfluapriv.dll Base=0x180000000 SHA-256=BAB0C90CE0B8625B6C6A45BF1FED6A5BC72BE959F7BC8DF2E63CE3460B964A5F
PDB: vfLuaPriv.pdb GUID={68BC3E8F-33C0-CBA9-528E38046CA19258} Age=1

1812 located named symbols:
0x180025D28: "CreateSemaphoreW" ??_C@_0BB@MEFPJLHN@CreateSemaphoreW?$AA@
0x180023BF0: "__cdecl _newclmap" __newclmap
0x1800308A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileShortNameASemantics" ?SetFileShortNameASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800240B8: "Wednesday" ??_C@_1BE@EBOGMDOH@?$AAW?$AAe?$AAd?$AAn?$AAe?$AAs?$AAd?$AAa?$AAy?$AA?$AA@
0x180030470: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenMutexWSemantics" ?OpenMutexWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026C50: "SeProfileSingleProcessPrivilege" ??_C@_1EA@EDIGMFBC@?$AAS?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180018E1C: "__cdecl _updatetlocinfo" __updatetlocinfo
0x1800255EC: "lpName" ??_C@_06BJHLLKAO@lpName?$AA@
0x180025C70: "CreateFileW" ??_C@_0M@GPOOGHPH@CreateFileW?$AA@
0x180009B10: "int __cdecl NS_LuaPriv::VfHookWriteProfileSectionW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookWriteProfileSectionW@NS_LuaPriv@@YAHPEBG0@Z
0x180030210: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenJobObjectWSemantics" ?OpenJobObjectWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002E1C0: "struct NS_LuaPriv::__obj_data NS_LuaPriv::ProcessObjectData" ?ProcessObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180027030: "SeCreateSymbolicLinkPrivilege" ??_C@_1DM@MMDBEHJC@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800259E0: "RegSaveKeyW" ??_C@_0M@ELMMIIDL@RegSaveKeyW?$AA@
0x180020E54: "__cdecl fclose_nolock" _fclose_nolock
0x1800180C0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18002B8A0: "__cdecl cfltcvt_tab" _cfltcvt_tab
0x180003C04: "int __cdecl NS_LuaPriv::CheckMaximumAllowed(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64)" ?CheckMaximumAllowed@NS_LuaPriv@@YAHPEAU__this_object@1@PEAX@Z
0x1800228E0: "__cdecl _imp_GetSecurityDescriptorOwner" __imp_GetSecurityDescriptorOwner
0x180029828: OLE32_NULL_THUNK_DATA_DLN
0x180025298: "Token" ??_C@_05JLAFMLMB@Token?$AA@
0x1800263E8: "GetFileSecurityW" ??_C@_0BB@IEJGDIKE@GetFileSecurityW?$AA@
0x180024EC0: "
" ??_C@_04HEOBMJEH@?$AE?$AB?$AA?$AA?$AA@
0x180003770: "int __cdecl NS_LuaPriv::AnalyzeLuaPermission(struct NS_LuaPriv::__this_object * __ptr64,unsigned long,void * __ptr64,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64)" ?AnalyzeLuaPermission@NS_LuaPriv@@YAHPEAU__this_object@1@KPEAXPEAUACCESS_DEFINITION@1@@Z
0x180018A60: "__cdecl FindPESection" _FindPESection
0x180019974: "__cdecl get_errno_from_oserr" _get_errno_from_oserr
0x180025284: "Timer" ??_C@_05NHFJDMOA@Timer?$AA@
0x180024838: "Runtime Error! Program: " ??_C@_0BK@OFGJDLJJ@Runtime?5Error?$CB?6?6Program?3?5?$AA@
0x18001F9CC: "__cdecl calloc_impl" _calloc_impl
0x180030700: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstChangeNotificationASemantics" ?FindFirstChangeNotificationASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025B70: "CopyFileA" ??_C@_09KECPKCEO@CopyFileA?$AA@
0x1800304E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::DeregisterEventSourceSemantics" ?DeregisterEventSourceSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027D78: "TOKEN_DUPLICATE" ??_C@_0BA@IGGGBPGA@TOKEN_DUPLICATE?$AA@
0x180018758: "__cdecl iswctype_l" _iswctype_l
0x18000E010: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateMutexA(struct _SECURITY_ATTRIBUTES * __ptr64,int,char const * __ptr64)" ?VfHookCreateMutexA@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBD@Z
0x180015AAC: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1800307A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstChangeNotificationWSemantics" ?FindFirstChangeNotificationWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025564: "Owner" ??_C@_05HDCNEILF@Owner?$AA@
0x1800170E0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180029928: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18002B000: "__cdecl _ptmbcinfo" __ptmbcinfo
0x180026B80: "SeTakeOwnershipPrivilege" ??_C@_1DC@DAFGHJAD@?$AAS?$AAe?$AAT?$AAa?$AAk?$AAe?$AAO?$AAw?$AAn?$AAe?$AAr?$AAs?$AAh?$AAi?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800259A0: "RegReplaceKeyW" ??_C@_0P@LLDHADKJ@RegReplaceKeyW?$AA@
0x180030100: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateDirectoryExASemantics" ?CreateDirectoryExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800306D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileAttributesASemantics" ?SetFileAttributesASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025268: "Event" ??_C@_05GCNIINAF@Event?$AA@
0x180037018: "__cdecl _imp_GetPrinterW" __imp_GetPrinterW
0x180022D00: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180025B48: "SetEndOfFile" ??_C@_0N@KGGGLBCJ@SetEndOfFile?$AA@
0x180024150: "Sep" ??_C@_17HCHCOKMG@?$AAS?$AAe?$AAp?$AA?$AA@
0x180030050: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateMutexWSemantics" ?CreateMutexWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800316D0: StandardSDAccessRights
0x18002F058: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_NETAPI32_Thunks" ?VfProvider_NETAPI32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180023F0C: "Thu" ??_C@_03IOFIKPDN@Thu?$AA@
0x1800043C0: "int __cdecl NS_LuaPriv::CheckSecurityOnObjectOpenByName(char const * __ptr64,unsigned short const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,unsigned long,enum NS_LuaPriv::OBJECT_DIRECTIVE_FLAGS)" ?CheckSecurityOnObjectOpenByName@NS_LuaPriv@@YAHPEBDPEBGPEAU__obj_data@1@KW4OBJECT_DIRECTIVE_FLAGS@1@@Z
0x180020720: "__cdecl fcloseall" _fcloseall
0x180025990: "RegReplaceKeyA" ??_C@_0P@KHKPLGHO@RegReplaceKeyA?$AA@
0x1800242D8: "R6008 - not enough space for ar" ??_C@_0CK@KMMJOAPP@R6008?$AN?6?9?5not?5enough?5space?5for?5ar@
0x180027128: "SystemRoot" ??_C@_1BG@FIGGICF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180024068: "Wed" ??_C@_17CJEDCEPE@?$AAW?$AAe?$AAd?$AA?$AA@
0x180031928: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180022C38: "__cdecl _imp_FreeEnvironmentStringsW" __imp_FreeEnvironmentStringsW
0x180010750: "long __cdecl NS_LuaPriv::VfHookRegNotifyChangeKeyValue(struct HKEY__ * __ptr64,int,unsigned long,void * __ptr64,int)" ?VfHookRegNotifyChangeKeyValue@NS_LuaPriv@@YAJPEAUHKEY__@@HKPEAXH@Z
0x18000A030: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateFileA(char const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?VfHookCreateFileA@NS_LuaPriv@@YAPEAXPEBDKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x1800303F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateMutexASemantics" ?CreateMutexASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026310: "ClearEventLogA" ??_C@_0P@CBEAAAPH@ClearEventLogA?$AA@
0x180026D40: "SeBackupPrivilege" ??_C@_1CE@MBNFGOEN@?$AAS?$AAe?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180032670: "__cdecl _locale_changed" __locale_changed
0x180019204: "__cdecl _updatetmbcinfo" __updatetmbcinfo
0x180027910: "[future expansion 0x8000]" ??_C@_0BK@OIIDBEHE@?$FLfuture?5expansion?50x8000?$FN?$AA@
0x18001FF80: "__cdecl ismbblead" _ismbblead
0x1800244C8: "R6025 - pure virtual function c" ??_C@_0CG@IOHKGFNJ@R6025?$AN?6?9?5pure?5virtual?5function?5c@
0x180027C10: "SERVICE_ENUMERATE_DEPENDENTS" ??_C@_0BN@HDADCNPB@SERVICE_ENUMERATE_DEPENDENTS?$AA@
0x180022C50: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180030630: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegLoadKeyASemantics" ?RegLoadKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800307D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetActivePwrSchemeSemantics" ?SetActivePwrSchemeSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800248B0: "GetActiveWindow" ??_C@_0BA@HNOPNCHB@GetActiveWindow?$AA@
0x180022AD8: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x180025834: "0" ??_C@_01GBGANLPD@0?$AA@
0x180032EF8: "void * __ptr64 __ptr64 NS_LuaPriv::s_hPidMemMap" ?s_hPidMemMap@NS_LuaPriv@@3PEAXEA
0x180025C58: "CreateFileMappingW" ??_C@_0BD@HFNFJDEE@CreateFileMappingW?$AA@
0x18001F270: mbtowc
0x180022CA0: "__cdecl _imp_LCMapStringW" __imp_LCMapStringW
0x180024F4C: "NOS_PO" ??_C@_06HPCJEBIJ@NOS_PO?$AA@
0x180018338: "__cdecl CRT_INIT" _CRT_INIT
0x1800277B8: "PROCESS_VM_OPERATION" ??_C@_0BF@DIBGJKOD@PROCESS_VM_OPERATION?$AA@
0x1800227A8: "unsigned short const * __ptr64 const __ptr64 NS_LuaPriv::g_UnknownSid" ?g_UnknownSid@NS_LuaPriv@@3PEBGEB
0x180032A34: "__cdecl cflush" _cflush
0x180022C08: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001DB0: "void __cdecl NS_LuaPriv::InitObjectData(void)" ?InitObjectData@NS_LuaPriv@@YAXXZ
0x18000362C: "void __cdecl NS_LuaPriv::LogCreatorOwnerQuandry(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64)" ?LogCreatorOwnerQuandry@NS_LuaPriv@@YAXPEAU__this_object@1@PEAXPEAUACCESS_DEFINITION@1@@Z
0x180026E48: "SeRemoteShutdownPrivilege" ??_C@_1DE@JGCMPEED@?$AAS?$AAe?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18002E610: "struct NS_LuaPriv::__obj_data NS_LuaPriv::TokenObjectData" ?TokenObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x1800010E0: SXSEnumProc
0x180027CF8: "SECTION_EXTEND_SIZE" ??_C@_0BE@BDMDCAEK@SECTION_EXTEND_SIZE?$AA@
0x18001FABC: "__cdecl initp_misc_rand_s" _initp_misc_rand_s
0x180026D90: "SeShutdownPrivilege" ??_C@_1CI@NKKEIBLI@?$AAS?$AAe?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180004F30: "int __cdecl NS_LuaPriv::VfHookCopyFileA(char const * __ptr64,char const * __ptr64,int)" ?VfHookCopyFileA@NS_LuaPriv@@YAHPEBD0H@Z
0x180027CA0: "SECTION_QUERY" ??_C@_0O@EPLCAHHI@SECTION_QUERY?$AA@
0x18000B8A0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenMutexA(unsigned long,int,char const * __ptr64)" ?VfHookOpenMutexA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x180024290: "HH:mm:ss" ??_C@_1BC@GDGBMEMK@?$AAH?$AAH?$AA?3?$AAm?$AAm?$AA?3?$AAs?$AAs?$AA?$AA@
0x180030A00: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegCloseKeySemantics" ?RegCloseKeySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030510: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateFileMappingWSemantics" ?CreateFileMappingWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022928: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x18000D570: "long __cdecl NS_LuaPriv::VfHookRegOpenKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?VfHookRegOpenKeyExA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDKKPEAPEAU2@@Z
0x180027A60: "KEY_CREATE_SUB_KEY" ??_C@_0BD@PJFPBLKN@KEY_CREATE_SUB_KEY?$AA@
0x180027B98: "PRINTER_ACCESS_USE" ??_C@_0BD@OHOHJECM@PRINTER_ACCESS_USE?$AA@
0x18000B650: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenJobObjectW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenJobObjectW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x18000149C: TestByteMatchEntry
0x180026120: "SetFileAttributesA" ??_C@_0BD@MDOGBKMJ@SetFileAttributesA?$AA@
0x1800213D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180031898: CheckSdSemaphoreRights
0x180030370: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileSecurityASemantics" ?SetFileSecurityASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030820: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteProfileStringWSemantics" ?WriteProfileStringWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026298: "WriteProfileStringA" ??_C@_0BE@HAMBEAEO@WriteProfileStringA?$AA@
0x180022A88: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800207C8: "__cdecl fflush_nolock" _fflush_nolock
0x18002FA70: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_NTDLL_Thunks" ?VfProvider_NTDLL_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180006C60: "int __cdecl NS_LuaPriv::VfHookBackupEventLogA(void * __ptr64,char const * __ptr64)" ?VfHookBackupEventLogA@NS_LuaPriv@@YAHPEAXPEBD@Z
0x180030880: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CoCreateInstanceSemantics" ?CoCreateInstanceSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030950: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileSecurityWSemantics" ?SetFileSecurityWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025330: "SYSTEM\CurrentControlSet\Service" ??_C@_1FG@HBJHEFK@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x180002B70: "void __cdecl NS_LuaPriv::CloseKernelHandle(void * __ptr64)" ?CloseKernelHandle@NS_LuaPriv@@YAXPEAX@Z
0x1800305D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CloseHandleSemantics" ?CloseHandleSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800188A0: "__cdecl towlower_l" _towlower_l
0x180024828: "runtime error " ??_C@_0P@GGKDKEEG@runtime?5error?5?$AA@
0x1800263D0: "GetFileSecurityA" ??_C@_0BB@JIAOINHD@GetFileSecurityA?$AA@
0x1800303E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RemoveDirectoryWSemantics" ?RemoveDirectoryWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180017A60: "__cdecl vsnwprintf" _vsnwprintf
0x18001D094: "__cdecl initp_eh_hooks" _initp_eh_hooks
0x180025F80: "MoveFileWithProgressW" ??_C@_0BG@PMGOKHAA@MoveFileWithProgressW?$AA@
0x1800300D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegNotifyChangeKeyValueSemantics" ?RegNotifyChangeKeyValueSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025A10: "RegUnLoadKeyA" ??_C@_0O@HPKACLIM@RegUnLoadKeyA?$AA@
0x180008230: "int __cdecl NS_LuaPriv::VfHookSetCurrentDirectoryW(unsigned short const * __ptr64)" ?VfHookSetCurrentDirectoryW@NS_LuaPriv@@YAHPEBG@Z
0x180023F04: "Tue" ??_C@_03NAGEINEP@Tue?$AA@
0x18000FBC0: "unsigned long __cdecl NS_LuaPriv::VfHookSetSecurityInfo(void * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64)" ?VfHookSetSecurityInfo@NS_LuaPriv@@YAKPEAXW4_SE_OBJECT_TYPE@@K00PEAU_ACL@@2@Z
0x1800328F0: "__cdecl winver" _winver
0x1800250C0: "*?" ??_C@_15EAECJAPL@?$AA?$CK?$AA?$DP?$AA?$AA@
0x180018B68: "__cdecl _addlocaleref" __addlocaleref
0x180030990: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RemoveDirectoryASemantics" ?RemoveDirectoryASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800077C0: "struct HHOOK__ * __ptr64 __cdecl NS_LuaPriv::VfHookSetWindowsHookA(int,__int64 (__cdecl*)(int,unsigned __int64,__int64))" ?VfHookSetWindowsHookA@NS_LuaPriv@@YAPEAUHHOOK__@@HP6A_JH_K_J@Z@Z
0x180023F8C: "Nov" ??_C@_03JPJOFNIA@Nov?$AA@
0x180025B58: "WinExec" ??_C@_07NHLKNDLA@WinExec?$AA@
0x180030620: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::IsUserAnAdminSemantics" ?IsUserAnAdminSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022E28: "__cdecl _xp_a" __xp_a
0x1800051C0: "int __cdecl NS_LuaPriv::VfHookMoveFileA(char const * __ptr64,char const * __ptr64)" ?VfHookMoveFileA@NS_LuaPriv@@YAHPEBD0@Z
0x180024EA8: "EXTRACTOPT" ??_C@_1BG@NNGDEEBG@?$AAE?$AAX?$AAT?$AAR?$AAA?$AAC?$AAT?$AAO?$AAP?$AAT?$AA?$AA@
0x180025CF0: "CreateProcessA" ??_C@_0P@NJIBPEPK@CreateProcessA?$AA@
0x180032EC0: "unsigned short const * __ptr64 * NS_LuaPriv::g_GoodFilePrefixes" ?g_GoodFilePrefixes@NS_LuaPriv@@3PAPEBGA
0x180025138: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x180032094: cCheckSdFileRights
0x180026038: "OpenProcessToken" ??_C@_0BB@EANJDCJP@OpenProcessToken?$AA@
0x1800064F0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstFileA(char const * __ptr64,struct _WIN32_FIND_DATAA * __ptr64)" ?VfHookFindFirstFileA@NS_LuaPriv@@YAPEAXPEBDPEAU_WIN32_FIND_DATAA@@@Z
0x1800320A4: cCheckSdJobRights
0x180024B50: "Gentee.Installer" ??_C@_0BB@FCOMPIIA@Gentee?4Installer?$AA@
0x180026208: "WritePrivateProfileStringW" ??_C@_0BL@MBEMNBKD@WritePrivateProfileStringW?$AA@
0x180032F00: "void * __ptr64 __ptr64 NS_LuaPriv::s_hCmdProcessedEvent" ?s_hCmdProcessedEvent@NS_LuaPriv@@3PEAXEA
0x180026FE0: "SeRelabelPrivilege" ??_C@_1CG@CFCMPGGL@?$AAS?$AAe?$AAR?$AAe?$AAl?$AAa?$AAb?$AAe?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180025540: "" ??_C@_00CNPNBAHC@?$AA@
0x180025650: "lpPathName" ??_C@_0L@JGLAOGPH@lpPathName?$AA@
0x180025E10: "FindFirstFileW" ??_C@_0P@ENHAKBMH@FindFirstFileW?$AA@
0x1800229C0: "__cdecl _imp_MapGenericMask" __imp_MapGenericMask
0x180025BE0: "CreateDirectoryExW" ??_C@_0BD@ELJGLJGA@CreateDirectoryExW?$AA@
0x180011A40: "long __cdecl NS_LuaPriv::VfHookRegUnLoadKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?VfHookRegUnLoadKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBD@Z
0x180026958: "CompanyName" ??_C@_1BI@KBKGFMKH@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1800305F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegCreateKeyExASemantics" ?RegCreateKeyExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180018A20: "__cdecl NLG_Notify" _NLG_Notify
0x180025738: "[HKEY_CLASSES_ROOT]" ??_C@_0BE@NGBLEJDF@?$FLHKEY_CLASSES_ROOT?$FN?$AA@
0x180027B60: "SERVER_ACCESS_ADMINISTER" ??_C@_0BJ@OJGOCIBG@SERVER_ACCESS_ADMINISTER?$AA@
0x1800054B0: "int __cdecl NS_LuaPriv::VfHookMoveFileWithProgressA(char const * __ptr64,char const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,unsigned long)" ?VfHookMoveFileWithProgressA@NS_LuaPriv@@YAHPEBD0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2K@Z
0x180023F10: "Fri" ??_C@_03IDIOELNC@Fri?$AA@
0x180027F58: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180025A40: "RegSetKeySecurity" ??_C@_0BC@JHEIFHIB@RegSetKeySecurity?$AA@
0x180013E18: "void __cdecl NS_LuaPriv::CheckWindowsHook(char const * __ptr64,int,struct HINSTANCE__ * __ptr64,unsigned long,struct HHOOK__ * __ptr64,unsigned long)" ?CheckWindowsHook@NS_LuaPriv@@YAXPEBDHPEAUHINSTANCE__@@KPEAUHHOOK__@@K@Z
0x180024870: " " ??_C@_02PHMGELLB@?6?6?$AA@
0x180022C78: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x1800030EC: "void __cdecl NS_LuaPriv::CheckVirtualization(class NS_LuaPriv::CSHIMHOOK * __ptr64,unsigned short const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64)" ?CheckVirtualization@NS_LuaPriv@@YAXPEAVCSHIMHOOK@1@PEBGPEAU__obj_data@1@@Z
0x180027220: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180022C68: "__cdecl _imp_GetFileType" __imp_GetFileType
0x1800029D4: "int __cdecl NS_LuaPriv::StrCatAlloc(unsigned short * __ptr64 * __ptr64,...)" ?StrCatAlloc@NS_LuaPriv@@YAHPEAPEAGZZ
0x180027240: "<propagate_shim>" ??_C@_1CC@JDGCALCN@?$AA?$DM?$AAp?$AAr?$AAo?$AAp?$AAa?$AAg?$AAa?$AAt?$AAe?$AA_?$AAs?$AAh?$AAi?$AAm?$AA?$DO?$AA?$AA@
0x18001FAC4: "__cdecl _get_sigabrt" __get_sigabrt
0x180025D10: "CreateSemaphoreA" ??_C@_0BB@NIMHCOKK@CreateSemaphoreA?$AA@
0x180022D48: VERSION_NULL_THUNK_DATA
0x1800122C0: "int __cdecl NS_LuaPriv::VfHookSetEndOfFile(void * __ptr64)" ?VfHookSetEndOfFile@NS_LuaPriv@@YAHPEAX@Z
0x1800271C4: "file" ??_C@_04DAMGJPCA@file?$AA@
0x180013418: "long __cdecl StringCbPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCbPrintfA@@YAJPEAD_KPEBDZZ
0x180027970: "JOB_OBJECT_TERMINATE" ??_C@_0BF@LIMFNEL@JOB_OBJECT_TERMINATE?$AA@
0x180030810: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetNamedSecurityInfoASemantics" ?SetNamedSecurityInfoASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180032A28: "void (__cdecl* __ptr64 __pInconsistency)(void)" ?__pInconsistency@@3P6AXXZEA
0x1800252A0: "Key" ??_C@_03CCEPDEKL@Key?$AA@
0x1800235E0: "char const * const __lookuptable" ?__lookuptable@@3QBDB
0x1800087C0: "unsigned long __cdecl NS_LuaPriv::VfHookSetNamedSecurityInfoW(unsigned short * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64)" ?VfHookSetNamedSecurityInfoW@NS_LuaPriv@@YAKPEAGW4_SE_OBJECT_TYPE@@KPEAX2PEAU_ACL@@3@Z
0x180022970: "__cdecl _imp_GetAce" __imp_GetAce
0x1800241B8: "June" ??_C@_19EPFLPGAP@?$AAJ?$AAu?$AAn?$AAe?$AA?$AA@
0x180007A50: "int __cdecl NS_LuaPriv::VfHookDeleteFileW(unsigned short const * __ptr64)" ?VfHookDeleteFileW@NS_LuaPriv@@YAHPEBG@Z
0x1800279B0: "JOB_OBJECT_QUERY" ??_C@_0BB@JMJJAEFD@JOB_OBJECT_QUERY?$AA@
0x18002E8B0: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_ADVAPI32_Thunks" ?VfProvider_ADVAPI32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x18002528C: "Job" ??_C@_03DOFCBNIC@Job?$AA@
0x180019AB0: "__cdecl freefls" _freefls
0x180025660: "lpTemplateDirectory" ??_C@_0BE@DBFLAHLH@lpTemplateDirectory?$AA@
0x180030690: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CopyFileExWSemantics" ?CopyFileExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024120: "Mar" ??_C@_17CKNLEDEC@?$AAM?$AAa?$AAr?$AA?$AA@
0x180022B00: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180023F78: "Jun" ??_C@_03IDFGHECI@Jun?$AA@
0x180025C80: "CreateHardLinkA" ??_C@_0BA@KKKENGMH@CreateHardLinkA?$AA@
0x1800192CC: "__cdecl setmbcp" _setmbcp
0x180026808: "WH_CALLWNDPROC" ??_C@_0P@KLCOMKPJ@WH_CALLWNDPROC?$AA@
0x180022DD0: "__cdecl _imp_VerifierTlsSetValue" __imp_VerifierTlsSetValue
0x180022C58: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x18001D69C: "__cdecl _crtLCMapStringA" __crtLCMapStringA
0x180026660: "CoGetClassObject" ??_C@_0BB@ENIODEPL@CoGetClassObject?$AA@
0x180025C30: "CreateFileA" ??_C@_0M@HDHGNCCA@CreateFileA?$AA@
0x180031260: CheckSdServiceControlManagerRights
0x180025CE0: "CreateMutexW" ??_C@_0N@MDNOAJMP@CreateMutexW?$AA@
0x180024F68: "!sfx!" ??_C@_05PEIPJGAE@?$CBsfx?$CB?$AA@
0x1800274A0: "Global\SUAnalyzer_MemMap_ExitCod" ??_C@_1EE@CMILKKPG@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAM?$AAe?$AAm?$AAM?$AAa?$AAp?$AA_?$AAE?$AAx?$AAi?$AAt?$AAC?$AAo?$AAd@
0x180001F00: "unsigned long __cdecl NS_LuaPriv::GetKernelSec(struct NS_LuaPriv::GETSECFN_ARGS * __ptr64)" ?GetKernelSec@NS_LuaPriv@@YAKPEAUGETSECFN_ARGS@1@@Z
0x180022DF0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180025278: "Semaphore" ??_C@_09LAFHGJNG@Semaphore?$AA@
0x180010400: "long __cdecl NS_LuaPriv::VfHookRegEnumValueW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?VfHookRegEnumValueW@NS_LuaPriv@@YAJPEAUHKEY__@@KPEAGPEAK22PEAE2@Z
0x18001D188: "__cdecl _crtLCMapStringW" __crtLCMapStringW
0x180021243: "__cdecl _tailMerge_winspool_drv" __tailMerge_winspool_drv
0x180024408: "R6017 - unexpected multithread " ??_C@_0CN@FOLDKNG@R6017?$AN?6?9?5unexpected?5multithread?5@
0x180026D68: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180026A98: "SeLockMemoryPrivilege" ??_C@_1CM@JPKFCMPM@?$AAS?$AAe?$AAL?$AAo?$AAc?$AAk?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180004B30: "long __cdecl NS_LuaPriv::VfHookRegDeleteKeyA(struct HKEY__ * __ptr64,char const * __ptr64)" ?VfHookRegDeleteKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBD@Z
0x180022390: g_Methods
0x180024244: "PM" ??_C@_15CLMNNGEL@?$AAP?$AAM?$AA?$AA@
0x180026050: "OpenSemaphoreA" ??_C@_0P@JMJFDBDJ@OpenSemaphoreA?$AA@
0x1800270E0: "registry key" ??_C@_0N@OFCGKOKI@registry?5key?$AA@
0x180023FE8: "October" ??_C@_07JJNFCEND@October?$AA@
0x180022A40: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180026700: "SetWindowsHookExW" ??_C@_0BC@PIBNIJA@SetWindowsHookExW?$AA@
0x180032ED8: "int NS_LuaPriv::g_bShimInitialized" ?g_bShimInitialized@NS_LuaPriv@@3HA
0x1800263B8: "GetTokenInformation" ??_C@_0BE@JIDLIKOL@GetTokenInformation?$AA@
0x1800236E0: "__cdecl _newctype" __newctype
0x180022C48: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x180011C60: "int __cdecl NS_LuaPriv::VfHookFlushFileBuffers(void * __ptr64)" ?VfHookFlushFileBuffers@NS_LuaPriv@@YAHPEAX@Z
0x180022BE8: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x180022A58: "__cdecl _imp_GetShortPathNameW" __imp_GetShortPathNameW
0x1800260F0: "SetCurrentDirectoryA" ??_C@_0BF@ENCECICD@SetCurrentDirectoryA?$AA@
0x180017D1C: wcstok
0x180024140: "Jul" ??_C@_17IJPCKHK@?$AAJ?$AAu?$AAl?$AA?$AA@
0x180026430: "OpenEventLogW" ??_C@_0O@FPPBPLLN@OpenEventLogW?$AA@
0x180017060: InsertTailList
0x180013BB4: "void __cdecl NS_LuaPriv::_LuaFree(void * __ptr64 * __ptr64)" ?_LuaFree@NS_LuaPriv@@YAXPEAPEAX@Z
0x180022AA0: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x1800277A0: "PROCESS_SET_SESSIONID" ??_C@_0BG@PGMNFBOD@PROCESS_SET_SESSIONID?$AA@
0x180025EF8: "GetUserObjectSecurity" ??_C@_0BG@BAJCKDBD@GetUserObjectSecurity?$AA@
0x180002684: "int __cdecl NS_LuaPriv::StapleFileOntoDirectoryName(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ?StapleFileOntoDirectoryName@NS_LuaPriv@@YAHPEBDPEBG1PEAPEBG@Z
0x1800261E8: "WritePrivateProfileStringA" ??_C@_0BL@NNNEGEHE@WritePrivateProfileStringA?$AA@
0x180009330: "int __cdecl NS_LuaPriv::VfHookReportEventW(void * __ptr64,unsigned short,unsigned short,unsigned long,void * __ptr64,unsigned short,unsigned long,unsigned short const * __ptr64 * __ptr64,void * __ptr64)" ?VfHookReportEventW@NS_LuaPriv@@YAHPEAXGGK0GKPEAPEBG0@Z
0x180025388: "Cannot open %ws: 0x%x " ??_C@_0BH@LHLHEGBE@Cannot?5open?5?$CFws?3?50x?$CFx?6?$AA@
0x180030540: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateFileMappingASemantics" ?CreateFileMappingASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026998: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180025BF8: "CreateDirectoryW" ??_C@_0BB@JJIDDHEG@CreateDirectoryW?$AA@
0x180024170: "January" ??_C@_1BA@EFMEIEBA@?$AAJ?$AAa?$AAn?$AAu?$AAa?$AAr?$AAy?$AA?$AA@
0x18002FF80: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CloseEventLogSemantics" ?CloseEventLogSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001C470: "__cdecl XcptFilter" _XcptFilter
0x18001435C: "int __cdecl NS_LuaPriv::ExtractDataFromToken(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?ExtractDataFromToken@NS_LuaPriv@@YAHPEAXKPEAPEAX@Z
0x180022DF8: "__cdecl _xc_a" __xc_a
0x180030080: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateFileASemantics" ?CreateFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800262B0: "WriteProfileStringW" ??_C@_0BE@GMFJPFJJ@WriteProfileStringW?$AA@
0x180027A30: "FILE_DELETE_CHILD" ??_C@_0BC@BBPHDJDF@FILE_DELETE_CHILD?$AA@
0x1800271F0: "Profile Value (Key)" ??_C@_0BE@HPNOHGC@Profile?5Value?5?$CIKey?$CJ?$AA@
0x1800261C8: "WritePrivateProfileSectionW" ??_C@_0BM@CIDKOIHK@WritePrivateProfileSectionW?$AA@
0x180008E60: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstFileW(unsigned short const * __ptr64,struct _WIN32_FIND_DATAW * __ptr64)" ?VfHookFindFirstFileW@NS_LuaPriv@@YAPEAXPEBGPEAU_WIN32_FIND_DATAW@@@Z
0x1800025E8: "void __cdecl NS_LuaPriv::CheckSecurityOnParentDirectoryOfWildcard(char const * __ptr64,unsigned short const * __ptr64)" ?CheckSecurityOnParentDirectoryOfWildcard@NS_LuaPriv@@YAXPEBDPEBG@Z
0x180027E90: "SC_MANAGER_QUERY_LOCK_STATUS" ??_C@_0BN@PEPCIINI@SC_MANAGER_QUERY_LOCK_STATUS?$AA@
0x1800276F0: "GENERIC_ALL" ??_C@_0M@IAEDAMCF@GENERIC_ALL?$AA@
0x180023FCC: "August" ??_C@_06LBBHFDDG@August?$AA@
0x1800254C0: "Sddl conversion failed (0x%x) fo" ??_C@_0EA@EBPHLOCO@Sddl?5conversion?5failed?5?$CI0x?$CFx?$CJ?5fo@
0x18001E220: "__cdecl isatty" _isatty
0x180022D98: psapi_NULL_THUNK_DATA
0x180027E40: "SC_MANAGER_CREATE_SERVICE" ??_C@_0BK@GECFIDMC@SC_MANAGER_CREATE_SERVICE?$AA@
0x180025B08: "SetFileShortNameA" ??_C@_0BC@CNLEJMFO@SetFileShortNameA?$AA@
0x180022B18: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x180025750: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x1800328C4: "__cdecl _argc" __argc
0x180022D30: "__cdecl _imp_GetFileVersionInfoSizeW" __imp_GetFileVersionInfoSizeW
0x180003444: "void __cdecl NS_LuaPriv::LogRestrictedRight(struct NS_LuaPriv::__this_object * __ptr64,struct _ACL * __ptr64,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64)" ?LogRestrictedRight@NS_LuaPriv@@YAXPEAU__this_object@1@PEAU_ACL@@PEAUACCESS_DEFINITION@1@@Z
0x180006750: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenEventLogA(char const * __ptr64,char const * __ptr64)" ?VfHookOpenEventLogA@NS_LuaPriv@@YAPEAXPEBD0@Z
0x1800263A0: "DeregisterEventSource" ??_C@_0BG@LPHFFLAA@DeregisterEventSource?$AA@
0x180026838: "WH_DEBUG" ??_C@_08MAKILNIE@WH_DEBUG?$AA@
0x180022C70: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x18000E160: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateMutexW(struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned short const * __ptr64)" ?VfHookCreateMutexW@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBG@Z
0x18001B0CC: "__cdecl mtdeletelocks" _mtdeletelocks
0x1800301F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WinExecSemantics" ?WinExecSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180013370: "int __cdecl NS_LuaPriv::VfHookIsUserAnAdmin(void)" ?VfHookIsUserAnAdmin@NS_LuaPriv@@YAHXZ
0x180027A00: "FILE_READ_EA" ??_C@_0N@CNBJBELP@FILE_READ_EA?$AA@
0x180022BF8: "__cdecl _imp_FlsGetValue" __imp_FlsGetValue
0x1800253A0: "CustomSD" ??_C@_1BC@CJPMIAAO@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAS?$AAD?$AA?$AA@
0x180024810: "TLOSS error " ??_C@_0O@MJNIPGOH@TLOSS?5error?$AN?6?$AA@
0x180018300: iswspace
0x180022DB0: "__cdecl _imp_VerifierRegisterLayer" __imp_VerifierRegisterLayer
0x180026A20: "TokenGroupsAndPrivileges" ??_C@_0BJ@KDHFMLKE@TokenGroupsAndPrivileges?$AA@
0x18002682C: "WH_CBT" ??_C@_06PJMBBBIO@WH_CBT?$AA@
0x18000C710: "int __cdecl NS_LuaPriv::VfHookOpenProcessToken(void * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?VfHookOpenProcessToken@NS_LuaPriv@@YAHPEAXKPEAPEAX@Z
0x1800265C0: "NtAdjustPrivilegesToken" ??_C@_0BI@JGDBJEPN@NtAdjustPrivilegesToken?$AA@
0x180032010: "__cdecl coninpfh" _coninpfh
0x180027720: "GENERIC_EXECUTE" ??_C@_0BA@JNPFDOEE@GENERIC_EXECUTE?$AA@
0x180030290: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileAttributesWSemantics" ?SetFileAttributesWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025BC8: "CreateDirectoryExA" ??_C@_0BD@FHAOAMLH@CreateDirectoryExA?$AA@
0x1800276E0: "LuaPriv" ??_C@_1BA@HBONNNKA@?$AAL?$AAu?$AAa?$AAP?$AAr?$AAi?$AAv?$AA?$AA@
0x1800268B0: "WH_KEYBOARD_LL" ??_C@_0P@HKPDKOED@WH_KEYBOARD_LL?$AA@
0x180015B7C: "void __cdecl NS_LuaPriv::NotifySUAOfProcessCreation(unsigned long)" ?NotifySUAOfProcessCreation@NS_LuaPriv@@YAXK@Z
0x18001B60C: "__cdecl unlockexit" _unlockexit
0x180024FA8: "open" ??_C@_04PMOCAHAA@open?$AA@
0x180012E80: "long __cdecl NS_LuaPriv::VfHookWinVerifyTrust(struct HWND__ * __ptr64,struct _GUID * __ptr64,void * __ptr64)" ?VfHookWinVerifyTrust@NS_LuaPriv@@YAJPEAUHWND__@@PEAU_GUID@@PEAX@Z
0x180024010: "PM" ??_C@_02CJNFDJBF@PM?$AA@
0x18001B088: "__cdecl lock" _lock
0x180007370: "int __cdecl NS_LuaPriv::VfHookWriteProfileSectionA(char const * __ptr64,char const * __ptr64)" ?VfHookWriteProfileSectionA@NS_LuaPriv@@YAHPEBD0@Z
0x180002B78: "int __cdecl NS_LuaPriv::GetObjectFromSeObjectType(enum _SE_OBJECT_TYPE,struct NS_LuaPriv::__obj_data * __ptr64 * __ptr64)" ?GetObjectFromSeObjectType@NS_LuaPriv@@YAHW4_SE_OBJECT_TYPE@@PEAPEAU__obj_data@1@@Z
0x1800308C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateDirectoryExWSemantics" ?CreateDirectoryExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180017F28: "__cdecl vsnprintf_l" _vsnprintf_l
0x180005EE0: "int __cdecl NS_LuaPriv::VfHookCreateHardLinkA(char const * __ptr64,char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateHardLinkA@NS_LuaPriv@@YAHPEBD0PEAU_SECURITY_ATTRIBUTES@@@Z
0x180023F6C: "Mar" ??_C@_03ODNJBKGA@Mar?$AA@
0x180034BC8: "__cdecl _winitenv_end" __winitenv_end
0x180027DF8: "TOKEN_ADJUST_DEFAULT" ??_C@_0BF@BBJMOJCB@TOKEN_ADJUST_DEFAULT?$AA@
0x1800257C0: "RegEnumKeyExA" ??_C@_0O@MLGBAFCL@RegEnumKeyExA?$AA@
0x180030750: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegOpenKeyExASemantics" ?RegOpenKeyExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800309E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenJobObjectASemantics" ?OpenJobObjectASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800272C0: "Global\SUAnalyzer_Event_SendCmd" ??_C@_1EA@HFLPHFNA@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAS?$AAe?$AAn?$AAd?$AAC?$AAm?$AAd?$AA?$AA@
0x180025A58: "FILE_GENERIC_WRITE" ??_C@_0BD@OFPOCHAM@FILE_GENERIC_WRITE?$AA@
0x180009A00: "int __cdecl NS_LuaPriv::VfHookWriteProfileStringW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookWriteProfileStringW@NS_LuaPriv@@YAHPEBG00@Z
0x180001FF0: "unsigned long __cdecl NS_LuaPriv::GetServiceControlManagerSec(struct NS_LuaPriv::GETSECFN_ARGS * __ptr64)" ?GetServiceControlManagerSec@NS_LuaPriv@@YAKPEAUGETSECFN_ARGS@1@@Z
0x1800279E8: "FILE_APPEND_DATA" ??_C@_0BB@NIGHGJAO@FILE_APPEND_DATA?$AA@
0x180017B60: "__cdecl wcsicmp" _wcsicmp
0x180025A98: "WriteFileEx" ??_C@_0M@LLJMENOE@WriteFileEx?$AA@
0x1800306C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenMutexASemantics" ?OpenMutexASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001FA7C: "__cdecl callnewh" _callnewh
0x1800265D8: "NtCreateProcess" ??_C@_0BA@OJKJNKOD@NtCreateProcess?$AA@
0x18000B180: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenFileMappingW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenFileMappingW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x18000DAE0: "long __cdecl NS_LuaPriv::VfHookRegOpenCurrentUser(unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?VfHookRegOpenCurrentUser@NS_LuaPriv@@YAJKPEAPEAUHKEY__@@@Z
0x1800270D0: "" privilege)" ??_C@_0N@DBJIFDDF@?$CC?5privilege?$CJ?$AA@
0x180032EDC: "unsigned long VfProviderInitialized" ?VfProviderInitialized@@3KA
0x180026088: "OpenWaitableTimerW" ??_C@_0BD@IHEAOGFG@OpenWaitableTimerW?$AA@
0x180012600: "unsigned int __cdecl NS_LuaPriv::VfHookWinExec(char const * __ptr64,unsigned int)" ?VfHookWinExec@NS_LuaPriv@@YAIPEBDI@Z
0x1800204B0: "__cdecl _lock_fhandle" __lock_fhandle
0x18002088C: "__cdecl flushall" _flushall
0x1800256C8: "lpApplicationName" ??_C@_0BC@KMNBCBOC@lpApplicationName?$AA@
0x18001C8B0: "__cdecl ioterm" _ioterm
0x1800232D8: "__cdecl _guard_iat_table" __guard_iat_table
0x180023F7C: "Jul" ??_C@_03LBGABGKK@Jul?$AA@
0x180025950: "RegSetValueW" ??_C@_0N@EOGMNOG@RegSetValueW?$AA@
0x180002E20: "int __cdecl NS_LuaPriv::WarnOfSecurityKey(char const * __ptr64,unsigned short const * __ptr64,void * __ptr64)" ?WarnOfSecurityKey@NS_LuaPriv@@YAHPEBDPEBGPEAX@Z
0x180021440: memcpy
0x180024268: "dddd, MMMM dd, yyyy" ??_C@_1CI@KNAKOEBC@?$AAd?$AAd?$AAd?$AAd?$AA?0?$AA?5?$AAM?$AAM?$AAM?$AAM?$AA?5?$AAd?$AAd?$AA?0?$AA?5?$AAy?$AAy?$AAy?$AAy?$AA?$AA@
0x180025788: "KEY_ENUMERATE_SUB_KEYS" ??_C@_0BH@BMBFGKMC@KEY_ENUMERATE_SUB_KEYS?$AA@
0x1800229F0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180027268: "CLSID\%ws\LocalServer32" ??_C@_1DA@BHNHLJFH@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$CF?$AAw?$AAs?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x180016C30: "__cdecl initp_misc_winxfltr" _initp_misc_winxfltr
0x180010100: "long __cdecl NS_LuaPriv::VfHookRegEnumKeyExA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,char * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?VfHookRegEnumKeyExA@NS_LuaPriv@@YAJPEAUHKEY__@@KPEADPEAK212PEAU_FILETIME@@@Z
0x180018274: "__cdecl isleadbyte_l" _isleadbyte_l
0x18000EEC0: "long __cdecl NS_LuaPriv::VfHookNtAdjustPrivilegesToken(void * __ptr64,unsigned char,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long,struct _TOKEN_PRIVILEGES * __ptr64,unsigned long * __ptr64)" ?VfHookNtAdjustPrivilegesToken@NS_LuaPriv@@YAJPEAXEPEAU_TOKEN_PRIVILEGES@@K1PEAK@Z
0x180010B90: "long __cdecl NS_LuaPriv::VfHookRegQueryMultipleValuesW(struct HKEY__ * __ptr64,struct value_entW * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?VfHookRegQueryMultipleValuesW@NS_LuaPriv@@YAJPEAUHKEY__@@PEAUvalue_entW@@KPEAGPEAK@Z
0x1800328F4: "__cdecl winmajor" _winmajor
0x1800304D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileASemantics" ?MoveFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180031FB4: "__cdecl First_FPE_Indx" _First_FPE_Indx
0x180025678: "ObjName" ??_C@_07ODPKDAPI@ObjName?$AA@
0x180014318: "int __cdecl NS_LuaPriv::GetThreadOrProcessTokenHandle2(unsigned long,void * __ptr64 * __ptr64)" ?GetThreadOrProcessTokenHandle2@NS_LuaPriv@@YAHKPEAPEAX@Z
0x180007F50: "int __cdecl NS_LuaPriv::VfHookMoveFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?VfHookMoveFileExW@NS_LuaPriv@@YAHPEBG0K@Z
0x18000C950: "int __cdecl NS_LuaPriv::VfHookOpenPrinterA(char * __ptr64,void * __ptr64 * __ptr64,struct _PRINTER_DEFAULTSA * __ptr64)" ?VfHookOpenPrinterA@NS_LuaPriv@@YAHPEADPEAPEAXPEAU_PRINTER_DEFAULTSA@@@Z
0x180023FD8: "September" ??_C@_09BHHEALKD@September?$AA@
0x18000AF00: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenFileMappingA(unsigned long,int,char const * __ptr64)" ?VfHookOpenFileMappingA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x180030380: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::NetUserGetInfoSemantics" ?NetUserGetInfoSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022BF0: "__cdecl _imp_FlsAlloc" __imp_FlsAlloc
0x180023D70: "__cdecl _newcumap" __newcumap
0x1800268C0: "WH_MOUSE" ??_C@_08FGGCIFPL@WH_MOUSE?$AA@
0x180034BD0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001F808: "__cdecl NMSG_WRITE" _NMSG_WRITE
0x180022350: ByteMatchEOFInstallers
0x180007870: "struct HHOOK__ * __ptr64 __cdecl NS_LuaPriv::VfHookSetWindowsHookExA(int,__int64 (__cdecl*)(int,unsigned __int64,__int64),struct HINSTANCE__ * __ptr64,unsigned long)" ?VfHookSetWindowsHookExA@NS_LuaPriv@@YAPEAUHHOOK__@@HP6A_JH_K_J@ZPEAUHINSTANCE__@@K@Z
0x180024148: "Aug" ??_C@_17ICPELBCN@?$AAA?$AAu?$AAg?$AA?$AA@
0x180022CB0: "__cdecl _imp_Sleep" __imp_Sleep
0x180031D68: "__cdecl _flsindex" __flsindex
0x18000FAD0: "int __cdecl NS_LuaPriv::VfHookGetKernelObjectSecurity(void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?VfHookGetKernelObjectSecurity@NS_LuaPriv@@YAHPEAXK0KPEAK@Z
0x1800256B8: "win.ini" ??_C@_1BA@DINDGOOJ@?$AAw?$AAi?$AAn?$AA?4?$AAi?$AAn?$AAi?$AA?$AA@
0x180016A14: "void __cdecl NS_LuaPriv::CheckProcessElevation(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long)" ?CheckProcessElevation@NS_LuaPriv@@YAXPEBDPEBG1HK@Z
0x180022D68: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1800256E0: "lpCommandLine" ??_C@_0O@OKDPKEKN@lpCommandLine?$AA@
0x1800256FC: "%hs" ??_C@_03LIBMPEC@?$CFhs?$AA@
0x180022E20: "__cdecl _xi_z" __xi_z
0x18001B3C0: "__cdecl exit" _exit
0x180027AB8: "MUTEX_MODIFY_STATE" ??_C@_0BD@HODJCFCH@MUTEX_MODIFY_STATE?$AA@
0x180019CE8: "__cdecl initptd" _initptd
0x1800253D0: "D:(A;;0x1;;;WD)(A;;0x7;;;BA)(A;;" ??_C@_1FE@FBEKDCAJ@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA1?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA7?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL@
0x180012A10: "long __cdecl NS_LuaPriv::VfHookCoCreateInstance(struct _GUID const & __ptr64,struct IUnknown * __ptr64,unsigned long,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?VfHookCoCreateInstance@NS_LuaPriv@@YAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z
0x180027D50: "FILE_TRAVERSE" ??_C@_0O@GFLLHJHK@FILE_TRAVERSE?$AA@
0x18001EADC: "__cdecl lseeki64" _lseeki64
0x180023EFC: "Sun" ??_C@_03KOEHGMDN@Sun?$AA@
0x180022B90: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180026248: "WritePrivateProfileStructW" ??_C@_0BL@IIFGGONE@WritePrivateProfileStructW?$AA@
0x180024168: "Dec" ??_C@_17EGKACKIF@?$AAD?$AAe?$AAc?$AA?$AA@
0x1800265E8: "NtCreateProcessEx" ??_C@_0BC@ICOCMOJJ@NtCreateProcessEx?$AA@
0x180026A68: "SeCreateTokenPrivilege" ??_C@_1CO@JDHOHHKI@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18002E030: "struct NS_LuaPriv::ACCESS_DEFINITION * NS_LuaPriv::EventlogRights" ?EventlogRights@NS_LuaPriv@@3PAUACCESS_DEFINITION@1@A
0x1800172E0: "__cdecl _C_specific_handler" __C_specific_handler
0x180024198: "March" ??_C@_1M@IKEENEDF@?$AAM?$AAa?$AAr?$AAc?$AAh?$AA?$AA@
0x180030F40: CheckSdSectionRights
0x1800267E8: "-- LuaPriv initialized-- " ??_C@_0BK@GJDNBBIF@?9?9?5LuaPriv?5initialized?9?9?6?$AA@
0x1800033C8: "void __cdecl NS_LuaPriv::LogRestrictedRightEntry(struct NS_LuaPriv::__this_object * __ptr64,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64,int,unsigned short const * __ptr64)" ?LogRestrictedRightEntry@NS_LuaPriv@@YAXPEAU__this_object@1@PEAUACCESS_DEFINITION@1@HPEBG@Z
0x1800255D0: "not present" ??_C@_0M@MPDIEKLE@not?5present?$AA@
0x1800252F8: "EVENTLOG_WRITE" ??_C@_0P@JPJJKGBI@EVENTLOG_WRITE?$AA@
0x180002E88: "void __cdecl NS_LuaPriv::RecordOpenEventLog(char const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?RecordOpenEventLog@NS_LuaPriv@@YAXPEBDPEBGKPEAX@Z
0x180025430: "D:(A;;0x3;;;WD)(A;;0x7;;;BA)(A;;" ??_C@_1FE@JLDBACEN@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA3?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA7?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL@
0x180022BA8: "__cdecl _imp_GetCommandLineA" __imp_GetCommandLineA
0x180010AB0: "long __cdecl NS_LuaPriv::VfHookRegQueryMultipleValuesA(struct HKEY__ * __ptr64,struct value_entA * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64)" ?VfHookRegQueryMultipleValuesA@NS_LuaPriv@@YAJPEAUHKEY__@@PEAUvalue_entA@@KPEADPEAK@Z
0x180030AB0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetKernelObjectSecuritySemantics" ?SetKernelObjectSecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180005710: "int __cdecl NS_LuaPriv::VfHookSetCurrentDirectoryA(char const * __ptr64)" ?VfHookSetCurrentDirectoryA@NS_LuaPriv@@YAHPEBD@Z
0x18002DDB0: "struct NS_LuaPriv::__obj_data NS_LuaPriv::MutexObjectData" ?MutexObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x18002E430: "struct NS_LuaPriv::__obj_data NS_LuaPriv::KeyObjectData" ?KeyObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x1800300C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CoGetClassObjectSemantics" ?CoGetClassObjectSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027D28: "FILE_ADD_FILE" ??_C@_0O@JLMNHGIE@FILE_ADD_FILE?$AA@
0x180030960: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenProcessTokenSemantics" ?OpenProcessTokenSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180019DB4: "__cdecl mtinit" _mtinit
0x180026108: "SetCurrentDirectoryW" ??_C@_0BF@FBLMJNPE@SetCurrentDirectoryW?$AA@
0x180024CF8: "InstallShield 自動抽出 Exe" ??_C@_1CO@GHHAEBBG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$IB?jR?Ub?$LNQ?z?$AA?5?$AAE?$AAx?$AAe?$AA?$AA@
0x180020698: "__cdecl unlock_fhandle" _unlock_fhandle
0x180025DE0: "FindFirstFileExA" ??_C@_0BB@GMPKEHDP@FindFirstFileExA?$AA@
0x1800124D0: "int __cdecl NS_LuaPriv::VfHookCreateProcessWithTokenW(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessWithTokenW@NS_LuaPriv@@YAHPEAXKPEBGPEAGK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x1800261A8: "WritePrivateProfileSectionA" ??_C@_0BM@DEKCFNKN@WritePrivateProfileSectionA?$AA@
0x180026138: "SetFileAttributesW" ??_C@_0BD@NPHOKPBO@SetFileAttributesW?$AA@
0x180021440: memmove
0x180025B20: "SetFileShortNameW" ??_C@_0BC@DBCMCJIJ@SetFileShortNameW?$AA@
0x180030660: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetNamedSecurityInfoWSemantics" ?GetNamedSecurityInfoWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022A48: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800309A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateJobObjectASemantics" ?CreateJobObjectASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800249B8: "InstallShield.Setup" ??_C@_1CI@JAPAFNLG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?4?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1800308E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegFlushKeySemantics" ?RegFlushKeySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030830: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateJobObjectWSemantics" ?CreateJobObjectWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180017654: "__cdecl strnicmp" _strnicmp
0x180022D70: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x18002E300: "struct NS_LuaPriv::STATIC_HANDLE * NS_LuaPriv::KeyHandles" ?KeyHandles@NS_LuaPriv@@3PAUSTATIC_HANDLE@1@A
0x180026BB8: "SeLoadDriverPrivilege" ??_C@_1CM@GJCAPIAN@?$AAS?$AAe?$AAL?$AAo?$AAa?$AAd?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180023F40: "Thursday" ??_C@_08HACCIKIA@Thursday?$AA@
0x180025E68: "GetFileAttributesExA" ??_C@_0BF@ICKFJADH@GetFileAttributesExA?$AA@
0x1800270C8: " (the "" ??_C@_07DFAPEBJB@?5?$CIthe?5?$CC?$AA@
0x180024F38: "HEROSOFTSOUTHERN" ??_C@_0BB@IPNJNBB@HEROSOFTSOUTHERN?$AA@
0x18002359C: "__cdecl _clocalestr" __clocalestr
0x18001F384: "__cdecl _crtwsetenv" __crtwsetenv
0x18001D0D0: malloc
0x180009150: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenBackupEventLogW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookOpenBackupEventLogW@NS_LuaPriv@@YAPEAXPEBG0@Z
0x18001B2E0: calloc
0x18000BB20: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenMutexW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenMutexW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x1800271E0: "Profile Section" ??_C@_0BA@CFFMOIHP@Profile?5Section?$AA@
0x180003314: "void __cdecl NS_LuaPriv::LogDenyAce(struct NS_LuaPriv::__this_object * __ptr64,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64,struct _ACCESS_ALLOWED_ACE * __ptr64)" ?LogDenyAce@NS_LuaPriv@@YAXPEAU__this_object@1@PEAUACCESS_DEFINITION@1@PEAU_ACCESS_ALLOWED_ACE@@@Z
0x180025880: "RegQueryInfoKeyA" ??_C@_0BB@ECNEDBH@RegQueryInfoKeyA?$AA@
0x180022C20: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180027730: "DELETE" ??_C@_06FKDAMKFP@DELETE?$AA@
0x180023F30: "Wednesday" ??_C@_09DLIGFAKA@Wednesday?$AA@
0x180001290: StringTable
0x180026B38: "SeTcbPrivilege" ??_C@_1BO@DHGLBHEP@?$AAS?$AAe?$AAT?$AAc?$AAb?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180019C08: "__cdecl freeptd" _freeptd
0x1800229B8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180024588: "R6030 - CRT not initialized " ??_C@_0BP@LPMHJOKI@R6030?$AN?6?9?5CRT?5not?5initialized?$AN?6?$AA@
0x180032EB0: "__cdecl _hmod__OLE32_dll" __hmod__OLE32_dll
0x180006B30: "int __cdecl NS_LuaPriv::VfHookReportEventA(void * __ptr64,unsigned short,unsigned short,unsigned long,void * __ptr64,unsigned short,unsigned long,char const * __ptr64 * __ptr64,void * __ptr64)" ?VfHookReportEventA@NS_LuaPriv@@YAHPEAXGGK0GKPEAPEBD0@Z
0x18001D008: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000B3D0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenJobObjectA(unsigned long,int,char const * __ptr64)" ?VfHookOpenJobObjectA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x180001A90: "int __cdecl NS_LuaPriv::ResolveMostWin32Objs(struct NS_LuaPriv::RESOLVEFN_ARGS * __ptr64)" ?ResolveMostWin32Objs@NS_LuaPriv@@YAHPEAURESOLVEFN_ARGS@1@@Z
0x180030720: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileWithProgressWSemantics" ?MoveFileWithProgressWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024018: "MM/dd/yy" ??_C@_08BPBNCDIB@MM?1dd?1yy?$AA@
0x1800305C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegGetKeySecuritySemantics" ?RegGetKeySecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180034C18: DloadResolveDelayLoadsFromDll
0x180006DC0: "int __cdecl NS_LuaPriv::VfHookClearEventLogA(void * __ptr64,char const * __ptr64)" ?VfHookClearEventLogA@NS_LuaPriv@@YAHPEAXPEBD@Z
0x1800320B0: cCheckSdTimerRights
0x180029900: "__cdecl _IMPORT_DESCRIPTOR_VERSION" __IMPORT_DESCRIPTOR_VERSION
0x1800241E8: "September" ??_C@_1BE@DKAAMBJL@?$AAS?$AAe?$AAp?$AAt?$AAe?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180025F38: "MoveFileExA" ??_C@_0M@MEBLMGKH@MoveFileExA?$AA@
0x1800297C0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WINSPOOL_DRV" __DELAY_IMPORT_DESCRIPTOR_WINSPOOL_DRV
0x180030020: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSetKeySecuritySemantics" ?RegSetKeySecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001B46C: "__cdecl cexit" _cexit
0x180009590: "int __cdecl NS_LuaPriv::VfHookClearEventLogW(void * __ptr64,unsigned short const * __ptr64)" ?VfHookClearEventLogW@NS_LuaPriv@@YAHPEAXPEBG@Z
0x1800211F4: "__cdecl freebuf" _freebuf
0x180025F68: "MoveFileWithProgressA" ??_C@_0BG@OAPGBCNH@MoveFileWithProgressA?$AA@
0x18001FAB4: "__cdecl initp_heap_handler" _initp_heap_handler
0x1800259C0: "RegRestoreKeyW" ??_C@_0P@JDDLNNIL@RegRestoreKeyW?$AA@
0x180030670: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenServiceWSemantics" ?OpenServiceWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025DD0: "FindFirstFileA" ??_C@_0P@FBOIBEBA@FindFirstFileA?$AA@
0x180025DF8: "FindFirstFileExW" ??_C@_0BB@HAGCPCOI@FindFirstFileExW?$AA@
0x180024070: "Thu" ??_C@_17PDPHAADD@?$AAT?$AAh?$AAu?$AA?$AA@
0x180001000: InstallDetectInternal
0x180027D88: "TOKEN_IMPERSONATE" ??_C@_0BC@PBEAIHJE@TOKEN_IMPERSONATE?$AA@
0x180009460: "int __cdecl NS_LuaPriv::VfHookBackupEventLogW(void * __ptr64,unsigned short const * __ptr64)" ?VfHookBackupEventLogW@NS_LuaPriv@@YAHPEAXPEBG@Z
0x1800229A0: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180019794: "__cdecl tolower_l" _tolower_l
0x180024228: "December" ??_C@_1BC@FEMKIFH@?$AAD?$AAe?$AAc?$AAe?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180030330: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenServiceASemantics" ?OpenServiceASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180009050: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenEventLogW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookOpenEventLogW@NS_LuaPriv@@YAPEAXPEBG0@Z
0x180027D38: "FILE_ADD_SUBDIRECTORY" ??_C@_0BG@LOIPNOIO@FILE_ADD_SUBDIRECTORY?$AA@
0x180024A38: "Roshal.WinRAR.WinRAR" ??_C@_0BF@OFOABJP@Roshal?4WinRAR?4WinRAR?$AA@
0x1800258E0: "RegQueryValueExA" ??_C@_0BB@HHEIPGME@RegQueryValueExA?$AA@
0x180017DDC: "__cdecl wgetenv" _wgetenv
0x1800302F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteFileExSemantics" ?WriteFileExSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800262F0: "BackupEventLogA" ??_C@_0BA@GILFMDNH@BackupEventLogA?$AA@
0x180030610: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenPrinterWSemantics" ?OpenPrinterWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022D80: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18001EEE4: "__cdecl unlock_file2" _unlock_file2
0x180015EB8: "void __cdecl NS_LuaPriv::SUA_PropagateShimForDCOM(struct _GUID const & __ptr64,unsigned short * __ptr64 * __ptr64)" ?SUA_PropagateShimForDCOM@NS_LuaPriv@@YAXAEBU_GUID@@PEAPEAG@Z
0x1800278D0: "[future expansion 0x2000]" ??_C@_0BK@EJBIDHBC@?$FLfuture?5expansion?50x2000?$FN?$AA@
0x180026678: "CoGetInstanceFromFile" ??_C@_0BG@KHDKJELC@CoGetInstanceFromFile?$AA@
0x180030240: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSetValueExWSemantics" ?RegSetValueExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022CD8: "__cdecl _imp_SetEnvironmentVariableW" __imp_SetEnvironmentVariableW
0x180018A40: "__cdecl _NLG_Dispatch2" __NLG_Dispatch2
0x180026228: "WritePrivateProfileStructA" ??_C@_0BL@JEMONLAD@WritePrivateProfileStructA?$AA@
0x180027C30: "SERVICE_START" ??_C@_0O@HBFJJBMJ@SERVICE_START?$AA@
0x18001EE94: "__cdecl unlock_file" _unlock_file
0x180030170: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenPrinterASemantics" ?OpenPrinterASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800297E0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLE32_dll" __DELAY_IMPORT_DESCRIPTOR_OLE32_dll
0x180017868: "__cdecl wcsnicmp" _wcsnicmp
0x180008460: "int __cdecl NS_LuaPriv::VfHookSetFileAttributesW(unsigned short const * __ptr64,unsigned long)" ?VfHookSetFileAttributesW@NS_LuaPriv@@YAHPEBGK@Z
0x180026470: "OpenServiceA" ??_C@_0N@MPAGLEEC@OpenServiceA?$AA@
0x18001B438: "__cdecl amsg_exit" _amsg_exit
0x180030360: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateFileWSemantics" ?CreateFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180005A40: "int __cdecl NS_LuaPriv::VfHookSetFileAttributesA(char const * __ptr64,unsigned long)" ?VfHookSetFileAttributesA@NS_LuaPriv@@YAHPEBDK@Z
0x180011BA0: "long __cdecl NS_LuaPriv::VfHookRegSetKeySecurity(struct HKEY__ * __ptr64,unsigned long,void * __ptr64)" ?VfHookRegSetKeySecurity@NS_LuaPriv@@YAJPEAUHKEY__@@KPEAX@Z
0x1800264D0: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180007E40: "int __cdecl NS_LuaPriv::VfHookMoveFileW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookMoveFileW@NS_LuaPriv@@YAHPEBG0@Z
0x180031930: "__cdecl mbctype" _mbctype
0x1800349A8: "__cdecl nstream" _nstream
0x1800270F0: "USR:" ??_C@_19EGDBJPJJ@?$AAU?$AAS?$AAR?$AA?3?$AA?$AA@
0x180022C40: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x180032918: "__cdecl crtheap" _crtheap
0x180027870: "PROCESS_SET_PORT" ??_C@_0BB@JIDKJKDA@PROCESS_SET_PORT?$AA@
0x180030590: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileAttributesExWSemantics" ?GetFileAttributesExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002E750: "struct NS_LuaPriv::__obj_data NS_LuaPriv::EventlogObjectData" ?EventlogObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180011AF0: "long __cdecl NS_LuaPriv::VfHookRegUnLoadKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?VfHookRegUnLoadKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBG@Z
0x180030730: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileAttributesASemantics" ?GetFileAttributesASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001B47C: "__cdecl cinit" _cinit
0x18001D070: "void __cdecl terminate(void)" ?terminate@@YAXXZ
0x180026540: "RegOpenKeyExA" ??_C@_0O@DCOGKJGG@RegOpenKeyExA?$AA@
0x180008080: "int __cdecl NS_LuaPriv::VfHookMoveFileWithProgressW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,unsigned long)" ?VfHookMoveFileWithProgressW@NS_LuaPriv@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2K@Z
0x180030030: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileAttributesExASemantics" ?GetFileAttributesExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000F980: "int __cdecl NS_LuaPriv::VfHookCloseHandle(void * __ptr64)" ?VfHookCloseHandle@NS_LuaPriv@@YAHPEAX@Z
0x180027310: "Global\SUAnalyzer_Event_CmdProce" ??_C@_1EK@BCMPDKEC@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAC?$AAm?$AAd?$AAP?$AAr?$AAo?$AAc?$AAe@
0x1800227D0: "int NS_LuaPriv::g_bTrackHandles" ?g_bTrackHandles@NS_LuaPriv@@3HA
0x180021237: "__cdecl _imp_load_GetPrinterW" __imp_load_GetPrinterW
0x1800264A0: "RegCreateKeyExA" ??_C@_0BA@NDHNNOGH@RegCreateKeyExA?$AA@
0x180022960: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x180026910: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x1800235D0: "CorExitProcess" ??_C@_0P@MIGLKIOC@CorExitProcess?$AA@
0x180031FB8: "__cdecl Num_FPE" _Num_FPE
0x180005DB0: "unsigned long __cdecl NS_LuaPriv::VfHookSetNamedSecurityInfoA(char * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64,void * __ptr64,struct _ACL * __ptr64,struct _ACL * __ptr64)" ?VfHookSetNamedSecurityInfoA@NS_LuaPriv@@YAKPEADW4_SE_OBJECT_TYPE@@KPEAX2PEAU_ACL@@3@Z
0x180008F40: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstFileExW(unsigned short const * __ptr64,enum _FINDEX_INFO_LEVELS,void * __ptr64,enum _FINDEX_SEARCH_OPS,void * __ptr64,unsigned long)" ?VfHookFindFirstFileExW@NS_LuaPriv@@YAPEAXPEBGW4_FINDEX_INFO_LEVELS@@PEAXW4_FINDEX_SEARCH_OPS@@2K@Z
0x180032F38: "void * __ptr64 __ptr64 NS_LuaPriv::s_hCmdMemMap" ?s_hCmdMemMap@NS_LuaPriv@@3PEAXEA
0x180031A40: "__cdecl mbcasemap" _mbcasemap
0x180026AC8: "SeIncreaseQuotaPrivilege" ??_C@_1DC@OJMEBNEI@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180022DC0: "__cdecl _imp_VerifierUnregisterLayer" __imp_VerifierUnregisterLayer
0x180022BC0: "__cdecl _imp_GetACP" __imp_GetACP
0x1800162B0: "void __cdecl NS_LuaPriv::SUA_RemoveShim(unsigned short * __ptr64 * __ptr64)" ?SUA_RemoveShim@NS_LuaPriv@@YAXPEAPEAG@Z
0x18000AA30: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenEventA(unsigned long,int,char const * __ptr64)" ?VfHookOpenEventA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x18000F9F0: "int __cdecl NS_LuaPriv::VfHookSetKernelObjectSecurity(void * __ptr64,unsigned long,void * __ptr64)" ?VfHookSetKernelObjectSecurity@NS_LuaPriv@@YAHPEAXK0@Z
0x1800226E0: SXSManifestInstallers
0x180004C70: "int __cdecl NS_LuaPriv::VfHookDeleteFileA(char const * __ptr64)" ?VfHookDeleteFileA@NS_LuaPriv@@YAHPEBD@Z
0x180024F54: "Rar!" ??_C@_04CDHOKNPC@Rar?$CB?$AA@
0x180032680: "__cdecl _mbulinfo" __mbulinfo
0x180030140: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegOpenKeyExWSemantics" ?RegOpenKeyExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18003209C: cCheckSdServiceRights
0x180021044: "__cdecl close" _close
0x18002E120: "struct NS_LuaPriv::__obj_data NS_LuaPriv::PrinterObjectData" ?PrinterObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x1800256B0: "win.ini" ??_C@_07NODBMACL@win?4ini?$AA@
0x180020EE0: fclose
0x180022B50: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180027A78: "KEY_CREATE_LINK" ??_C@_0BA@MHHOCJPM@KEY_CREATE_LINK?$AA@
0x180025898: "RegQueryInfoKeyW" ??_C@_0BB@BILFPGMA@RegQueryInfoKeyW?$AA@
0x18001C624: "__cdecl ioinit" _ioinit
0x180030460: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateEventWSemantics" ?CreateEventWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002DE50: "struct NS_LuaPriv::__obj_data NS_LuaPriv::ServiceObjectData" ?ServiceObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180025FE8: "OpenJobObjectA" ??_C@_0P@GPDBCJPL@OpenJobObjectA?$AA@
0x1800339A0: "__cdecl bufin" _bufin
0x18000FD90: "int __cdecl NS_LuaPriv::VfHookGetUserObjectSecurity(void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?VfHookGetUserObjectSecurity@NS_LuaPriv@@YAHPEAXK0KPEAK@Z
0x180026C20: "SeSystemtimePrivilege" ??_C@_1CM@BIFFIICD@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAt?$AAi?$AAm?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180030420: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateEventASemantics" ?CreateEventASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180007930: "long __cdecl NS_LuaPriv::VfHookRegDeleteKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64)" ?VfHookRegDeleteKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBG@Z
0x1800258B0: "RegQueryMultipleValuesA" ??_C@_0BI@CEEIBGKL@RegQueryMultipleValuesA?$AA@
0x180032A30: "__cdecl maxwait" _maxwait
0x1800304C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileSecurityASemantics" ?GetFileSecurityASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027C50: "SERVICE_PAUSE_CONTINUE" ??_C@_0BH@OHLFOEIC@SERVICE_PAUSE_CONTINUE?$AA@
0x1800275E0: "OLE32.DLL" ??_C@_1BE@DBKAINNB@?$AAO?$AAL?$AAE?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180022CE0: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x180026410: "OpenSCManagerW" ??_C@_0P@LEIGFCJD@OpenSCManagerW?$AA@
0x180017F10: "__cdecl vsnprintf" _vsnprintf
0x180024AF8: "RR.Raphael.Install.Builder" ??_C@_0BL@OLNBOGDN@RR?4Raphael?4Install?4Builder?$AA@
0x180026818: "WH_CALLWNDPROCRET" ??_C@_0BC@JOFEGKKN@WH_CALLWNDPROCRET?$AA@
0x180027F20: "ResolveDelayLoadedAPI" ??_C@_0BG@BDAPJIAD@ResolveDelayLoadedAPI?$AA@
0x18001E290: "__cdecl write" _write
0x18001B550: "__cdecl init_pointers" _init_pointers
0x180024EC8: "SZDD" ??_C@_04BFIPNCC@SZDD?$AA@
0x180025700: "%ws" ??_C@_03BMPLCLAP@?$CFws?$AA@
0x1800252E8: "EVENTLOG_READ" ??_C@_0O@GBALKLOG@EVENTLOG_READ?$AA@
0x180030AA0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileSecurityWSemantics" ?GetFileSecurityWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022C10: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180010200: "long __cdecl NS_LuaPriv::VfHookRegEnumKeyExW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?VfHookRegEnumKeyExW@NS_LuaPriv@@YAJPEAUHKEY__@@KPEAGPEAK212PEAU_FILETIME@@@Z
0x180026C90: "SeIncreaseBasePriorityPrivilege" ??_C@_1EA@EIENMLLB@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAB?$AAa?$AAs?$AAe?$AAP?$AAr?$AAi?$AAo?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800328EC: "__cdecl osver" _osver
0x180026458: "OpenBackupEventLogW" ??_C@_0BE@JHBKNBPG@OpenBackupEventLogW?$AA@
0x180019A8C: "__cdecl decode_pointer" _decode_pointer
0x180030770: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileWSemantics" ?MoveFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024800: "SING error " ??_C@_0N@BONNPDHF@SING?5error?$AN?6?$AA@
0x180023568: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x180027C68: "SERVICE_INTERROGATE" ??_C@_0BE@DJAMDANI@SERVICE_INTERROGATE?$AA@
0x180002100: "int __cdecl NS_LuaPriv::CheckPrefixLoad(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?CheckPrefixLoad@NS_LuaPriv@@YAHPEBGKPEAPEBGPEAK@Z
0x180031228: CheckSdTimerRights
0x1800306B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessWithTokenWSemantics" ?CreateProcessWithTokenWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18003208C: cCheckSdTokenRights
0x180013D28: "private: void __cdecl NS_LuaPriv::CSHIMHOOK::ShadowReturnWorker(int,unsigned long) __ptr64" ?ShadowReturnWorker@CSHIMHOOK@NS_LuaPriv@@AEAAXHK@Z
0x180022968: "__cdecl _imp_GetSecurityDescriptorLength" __imp_GetSecurityDescriptorLength
0x180001790: NonInstallerDefault
0x180022D40: "__cdecl _imp_GetFileVersionInfoW" __imp_GetFileVersionInfoW
0x1800258C8: "RegQueryMultipleValuesW" ??_C@_0BI@DINAKDHM@RegQueryMultipleValuesW?$AA@
0x1800128F0: "long __cdecl NS_LuaPriv::VfHookNtCreateUserProcess(void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,unsigned long,unsigned long,struct _OBJECT_ATTRIBUTES * __ptr64,struct _OBJECT_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64,struct _PS_CREATE_INFO * __ptr64,struct _PS_ATTRIBUTE_LIST * __ptr64)" ?VfHookNtCreateUserProcess@NS_LuaPriv@@YAJPEAPEAX0KKPEAU_OBJECT_ATTRIBUTES@@1KKPEAXPEAU_PS_CREATE_INFO@@PEAU_PS_ATTRIBUTE_LIST@@@Z
0x180012D90: "long __cdecl NS_LuaPriv::VfHookCoGetInstanceFromIStorage(struct _COSERVERINFO * __ptr64,struct _GUID * __ptr64,struct IUnknown * __ptr64,unsigned long,struct IStorage * __ptr64,unsigned long,struct tagMULTI_QI * __ptr64)" ?VfHookCoGetInstanceFromIStorage@NS_LuaPriv@@YAJPEAU_COSERVERINFO@@PEAU_GUID@@PEAUIUnknown@@KPEAUIStorage@@KPEAUtagMULTI_QI@@@Z
0x180016E94: "public: __cdecl CHandleTable::CHandleTable(void) __ptr64" ??0CHandleTable@@QEAA@XZ
0x180009F70: "struct HHOOK__ * __ptr64 __cdecl NS_LuaPriv::VfHookSetWindowsHookExW(int,__int64 (__cdecl*)(int,unsigned __int64,__int64),struct HINSTANCE__ * __ptr64,unsigned long)" ?VfHookSetWindowsHookExW@NS_LuaPriv@@YAPEAUHHOOK__@@HP6A_JH_K_J@ZPEAUHINSTANCE__@@K@Z
0x180002070: "unsigned long __cdecl NS_LuaPriv::GetServiceSec(struct NS_LuaPriv::GETSECFN_ARGS * __ptr64)" ?GetServiceSec@NS_LuaPriv@@YAKPEAUGETSECFN_ARGS@1@@Z
0x1800250B8: "Section" ??_C@_07OEBDPOLH@Section?$AA@
0x180032F28: "unsigned short * __ptr64 __ptr64 NS_LuaPriv::s_pwszCmd" ?s_pwszCmd@NS_LuaPriv@@3PEAGEA
0x180019A94: "__cdecl encode_pointer" _encode_pointer
0x180022E48: "__cdecl _xt_a" __xt_a
0x180020608: "__cdecl get_osfhandle" _get_osfhandle
0x180022190: "__cdecl pDestructExceptionObject" _pDestructExceptionObject
0x1800257E0: "KEY_QUERY_VALUE" ??_C@_0BA@KFDBODKN@KEY_QUERY_VALUE?$AA@
0x180022CF0: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x180022A90: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18001B8BC: "__cdecl output_l" _output_l
0x180027828: "PROCESS_SET_QUOTA" ??_C@_0BC@IMFMKHLG@PROCESS_SET_QUOTA?$AA@
0x18002FFD0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenEventWSemantics" ?OpenEventWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800240A8: "Tuesday" ??_C@_1BA@ENFBFFEK@?$AAT?$AAu?$AAe?$AAs?$AAd?$AAa?$AAy?$AA?$AA@
0x180023EF8: "__cdecl _lconv_static_W_null" __lconv_static_W_null
0x180027770: "PROCESS_TERMINATE" ??_C@_0BC@CEKIKMPN@PROCESS_TERMINATE?$AA@
0x180032F20: "void * __ptr64 __ptr64 NS_LuaPriv::s_hPidProcessedEvent" ?s_hPidProcessedEvent@NS_LuaPriv@@3PEAXEA
0x1800250E8: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18002722C: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x18001F120: "__cdecl mbtowc_l" _mbtowc_l
0x180006610: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstFileExA(char const * __ptr64,enum _FINDEX_INFO_LEVELS,void * __ptr64,enum _FINDEX_SEARCH_OPS,void * __ptr64,unsigned long)" ?VfHookFindFirstFileExA@NS_LuaPriv@@YAPEAXPEBDW4_FINDEX_INFO_LEVELS@@PEAXW4_FINDEX_SEARCH_OPS@@2K@Z
0x180026388: "CreateProcessWithTokenW" ??_C@_0BI@NNMIOLAP@CreateProcessWithTokenW?$AA@
0x180024E60: "InstallShield Self-extracting EX" ??_C@_1EE@GIJGGIJB@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAS?$AAe?$AAl?$AAf?$AA?9?$AAe?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAE?$AAX@
0x180026510: "RegisterEventSourceA" ??_C@_0BF@EBHPDBGP@RegisterEventSourceA?$AA@
0x180019E34: "__cdecl mtterm" _mtterm
0x180016C94: DllMain
0x18002FF40: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileStructASemantics" ?WritePrivateProfileStructASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024EEC: "GIPEND" ??_C@_06LBKAHNNN@GIPEND?$AA@
0x1800309C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetSecurityInfoSemantics" ?SetSecurityInfoSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800049C8: "public: __cdecl NS_LuaPriv::CSHIMHOOK::CSHIMHOOK(struct NS_LuaPriv::SHIMHOOK_SEMANTICS * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,unsigned short const * __ptr64) __ptr64" ??0CSHIMHOOK@NS_LuaPriv@@QEAA@PEAUSHIMHOOK_SEMANTICS@1@PEAU__obj_data@1@PEBG@Z
0x180025E20: "GetCompressedFileSizeA" ??_C@_0BH@GHAPJBKB@GetCompressedFileSizeA?$AA@
0x180014950: "void __cdecl NS_LuaPriv::InitPrivileges(void)" ?InitPrivileges@NS_LuaPriv@@YAXXZ
0x180030680: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstFileExASemantics" ?FindFirstFileExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800304F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetNamedSecurityInfoASemantics" ?GetNamedSecurityInfoASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024200: "October" ??_C@_1BA@EPANDLNG@?$AAO?$AAc?$AAt?$AAo?$AAb?$AAe?$AAr?$AA?$AA@
0x180024080: "Sat" ??_C@_17GGIBDPIH@?$AAS?$AAa?$AAt?$AA?$AA@
0x180026268: "WriteProfileSectionA" ??_C@_0BF@PCADJBDL@WriteProfileSectionA?$AA@
0x18002FF10: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstFileASemantics" ?FindFirstFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025290: "Process" ??_C@_07MNGBFJEN@Process?$AA@
0x180026888: "WH_JOURNALRECORD" ??_C@_0BB@KNOOGOAO@WH_JOURNALRECORD?$AA@
0x180015BF8: "void __cdecl NS_LuaPriv::SUA_PropagateShim(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SUA_PropagateShim@NS_LuaPriv@@YAXPEBG0PEAPEAG@Z
0x180025770: "User Object" ??_C@_1BI@HEOHIFH@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1800201F0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1800229B0: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x180027AD0: "SEMAPHORE_QUERY_STATE" ??_C@_0BG@LIOLJBOL@SEMAPHORE_QUERY_STATE?$AA@
0x18002FFB0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstFileExWSemantics" ?FindFirstFileExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800229A8: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180027D60: "TOKEN_ASSIGN_PRIMARY" ??_C@_0BF@BEIDCHBA@TOKEN_ASSIGN_PRIMARY?$AA@
0x180027D10: "FILE_LIST_DIRECTORY" ??_C@_0BE@PMDGDHIM@FILE_LIST_DIRECTORY?$AA@
0x18001DD08: strcat_s
0x180026550: "RegOpenKeyExW" ??_C@_0O@COHOBMLB@RegOpenKeyExW?$AA@
0x180005800: "int __cdecl NS_LuaPriv::VfHookCreateDirectoryA(char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateDirectoryA@NS_LuaPriv@@YAHPEBDPEAU_SECURITY_ATTRIBUTES@@@Z
0x180030010: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ClearEventLogASemantics" ?ClearEventLogASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180006890: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenBackupEventLogA(char const * __ptr64,char const * __ptr64)" ?VfHookOpenBackupEventLogA@NS_LuaPriv@@YAPEAXPEBD0@Z
0x180022B78: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180025820: "RegGetKeySecurity" ??_C@_0BC@FJFGKNKN@RegGetKeySecurity?$AA@
0x1800159EC: DoneWithHandle
0x180026320: "ClearEventLogW" ??_C@_0P@DNNILFCA@ClearEventLogW?$AA@
0x180027690: "{1ee74803-9d0b-409a-82cf-10cb5e8" ??_C@_1EO@MOKHODAB@?$AA?$HL?$AA1?$AAe?$AAe?$AA7?$AA4?$AA8?$AA0?$AA3?$AA?9?$AA9?$AAd?$AA0?$AAb?$AA?9?$AA4?$AA0?$AA9?$AAa?$AA?9?$AA8?$AA2?$AAc?$AAf?$AA?9?$AA1?$AA0?$AAc?$AAb?$AA5?$AAe?$AA8@
0x180027A98: "KEY_WOW64_64KEY" ??_C@_0BA@DBCPEIGE@KEY_WOW64_64KEY?$AA@
0x1800305B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegRestoreKeyWSemantics" ?RegRestoreKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027CB0: "SECTION_MAP_WRITE" ??_C@_0BC@HKBIPFBJ@SECTION_MAP_WRITE?$AA@
0x180027DB0: "TOKEN_QUERY_SOURCE" ??_C@_0BD@IOAAAMJG@TOKEN_QUERY_SOURCE?$AA@
0x180023F80: "Aug" ??_C@_03IFJFEIGA@Aug?$AA@
0x180024F00: "NullsoftInst" ??_C@_0N@LBNCJJHP@NullsoftInst?$AA@
0x1800264B0: "RegCreateKeyExW" ??_C@_0BA@MPOFGLLA@RegCreateKeyExW?$AA@
0x180026370: "CreateProcessWithLogonW" ??_C@_0BI@CDLEDEMD@CreateProcessWithLogonW?$AA@
0x1800162F4: "unsigned long __cdecl NS_LuaPriv::InitCommunicationWithSUA(void)" ?InitCommunicationWithSUA@NS_LuaPriv@@YAKXZ
0x180022DC8: "__cdecl _imp_VerifierTlsGetValue" __imp_VerifierTlsGetValue
0x180007C80: "int __cdecl NS_LuaPriv::VfHookCopyFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?VfHookCopyFileW@NS_LuaPriv@@YAHPEBG0H@Z
0x180027548: "CheckElevation" ??_C@_0P@JHJNKHBN@CheckElevation?$AA@
0x180022D28: KERNEL32_NULL_THUNK_DATA
0x1800302C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteProfileSectionWSemantics" ?WriteProfileSectionWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030310: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileWithProgressASemantics" ?MoveFileWithProgressASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000D830: "long __cdecl NS_LuaPriv::VfHookRegOpenKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?VfHookRegOpenKeyExW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGKKPEAPEAU2@@Z
0x180023EF0: "__cdecl _lconv_static_decimal" __lconv_static_decimal
0x180022998: "__cdecl _imp_LookupPrivilegeNameW" __imp_LookupPrivilegeNameW
0x180025640: "lpNewFileName" ??_C@_0O@JEADOMHH@lpNewFileName?$AA@
0x18002134D: GetProcAddress
0x1800303B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteProfileSectionASemantics" ?WriteProfileSectionASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800328E0: "__cdecl pgmptr" _pgmptr
0x1800175F8: "__cdecl _ascii_strnicmp" __ascii_strnicmp
0x180024F2C: "ESIV" ??_C@_04ODNMDDAK@ESIV?$AA@
0x180022A80: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180032EB8: "unsigned short const * __ptr64 * NS_LuaPriv::g_GoodRegistryPrefixes" ?g_GoodRegistryPrefixes@NS_LuaPriv@@3PAPEBGA
0x180022920: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180030300: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileShortNameWSemantics" ?SetFileShortNameWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800266D8: "SetWindowsHookW" ??_C@_0BA@LJJIANFO@SetWindowsHookW?$AA@
0x18000416C: "unsigned long __cdecl NS_LuaPriv::CheckSecurityOnOpenObject(char const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,enum NS_LuaPriv::OBJECT_DIRECTIVE_FLAGS)" ?CheckSecurityOnOpenObject@NS_LuaPriv@@YAKPEBDPEBGKPEAXPEAU__obj_data@1@W4OBJECT_DIRECTIVE_FLAGS@1@@Z
0x180020B1C: "__cdecl set_error_mode" _set_error_mode
0x180025930: "KEY_SET_VALUE" ??_C@_0O@IBNLBEAP@KEY_SET_VALUE?$AA@
0x18000DD60: "long __cdecl NS_LuaPriv::VfHookRegOpenUserClassesRoot(void * __ptr64,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?VfHookRegOpenUserClassesRoot@NS_LuaPriv@@YAJPEAXKKPEAPEAUHKEY__@@@Z
0x180019954: "__cdecl errno" _errno
0x1800058F0: "int __cdecl NS_LuaPriv::VfHookCreateDirectoryExA(char const * __ptr64,char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateDirectoryExA@NS_LuaPriv@@YAHPEBD0PEAU_SECURITY_ATTRIBUTES@@@Z
0x18001CFE8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800250A0: "Session\" ??_C@_1BC@PHJCBHDO@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?2?$AA?$AA@
0x18000F910: "long __cdecl NS_LuaPriv::VfHookRegCloseKey(struct HKEY__ * __ptr64)" ?VfHookRegCloseKey@NS_LuaPriv@@YAJPEAUHKEY__@@@Z
0x18001E38C: "__cdecl write_nolock" _write_nolock
0x18002B170: "__cdecl aexit_rtn" _aexit_rtn
0x180025C40: "CreateFileMappingA" ??_C@_0BD@GJENCGJD@CreateFileMappingA?$AA@
0x180012F50: "int __cdecl NS_LuaPriv::VfHookCloseEventLog(void * __ptr64)" ?VfHookCloseEventLog@NS_LuaPriv@@YAHPEAX@Z
0x18002E260: "struct NS_LuaPriv::__obj_data NS_LuaPriv::DirObjectData" ?DirObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180008380: "int __cdecl NS_LuaPriv::VfHookCreateDirectoryExW(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateDirectoryExW@NS_LuaPriv@@YAHPEBG0PEAU_SECURITY_ATTRIBUTES@@@Z
0x1800260D0: "ReplaceFileA" ??_C@_0N@ELAKAENG@ReplaceFileA?$AA@
0x18002FFA0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ReportEventWSemantics" ?ReportEventWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000E640: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateSemaphoreW(struct _SECURITY_ATTRIBUTES * __ptr64,long,long,unsigned short const * __ptr64)" ?VfHookCreateSemaphoreW@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@JJPEBG@Z
0x180025308: "EVENTLOG_CLEAR" ??_C@_0P@INLGJFMD@EVENTLOG_CLEAR?$AA@
0x180005330: "int __cdecl NS_LuaPriv::VfHookMoveFileExA(char const * __ptr64,char const * __ptr64,unsigned long)" ?VfHookMoveFileExA@NS_LuaPriv@@YAHPEBD0K@Z
0x180020980: "__cdecl flswbuf" _flswbuf
0x180034C10: DloadResolveDelayLoadedAPI
0x180012C90: "long __cdecl NS_LuaPriv::VfHookCoGetInstanceFromFile(struct _COSERVERINFO * __ptr64,struct _GUID * __ptr64,struct IUnknown * __ptr64,unsigned long,unsigned long,unsigned short * __ptr64,unsigned long,struct tagMULTI_QI * __ptr64)" ?VfHookCoGetInstanceFromFile@NS_LuaPriv@@YAJPEAU_COSERVERINFO@@PEAU_GUID@@PEAUIUnknown@@KKPEAGKPEAUtagMULTI_QI@@@Z
0x180024058: "Mon" ??_C@_17KBOMKBF@?$AAM?$AAo?$AAn?$AA?$AA@
0x180027AE8: "SEMAPHORE_MODIFY_STATE" ??_C@_0BH@NBKMHMLB@SEMAPHORE_MODIFY_STATE?$AA@
0x180030A80: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ReportEventASemantics" ?ReportEventASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026180: "SetNamedSecurityInfoW" ??_C@_0BG@DECPAHOF@SetNamedSecurityInfoW?$AA@
0x180025570: "contains " ??_C@_09DHHJJLGG@contains?5?$AA@
0x1800257A0: "RegEnumKeyA" ??_C@_0M@IMBFIMEL@RegEnumKeyA?$AA@
0x180027E10: "TOKEN_ADJUST_SESSIONID" ??_C@_0BH@LDGPEFBP@TOKEN_ADJUST_SESSIONID?$AA@
0x180022B20: "__cdecl _imp_CreateActCtxW" __imp_CreateActCtxW
0x180022CE8: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x1800250D8: "pathname" ??_C@_08PEIJGPHF@pathname?$AA@
0x1800045DC: "void * __ptr64 __cdecl NS_LuaPriv::InitTrustedInstallerSid(void)" ?InitTrustedInstallerSid@NS_LuaPriv@@YAPEAXXZ
0x180022BD8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x1800235A8: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x18001F278: "__cdecl initp_misc_cfltcvt_tab" _initp_misc_cfltcvt_tab
0x180022918: "__cdecl _imp_EqualSid" __imp_EqualSid
0x1800298EC: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18002EF90: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_USER32_Thunks" ?VfProvider_USER32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180022B70: "__cdecl _imp_RtlUnwindEx" __imp_RtlUnwindEx
0x180030090: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteFileSemantics" ?WriteFileSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180001848: LoadImageFile
0x18001D0B0: wcsnlen
0x180022C88: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180022AE0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180026760: "(access mask 0x%x)" ??_C@_0BD@KAOCCLLH@?$CIaccess?5mask?50x?$CFx?$CJ?$AA@
0x180004874: "public: __cdecl NS_LuaPriv::CSHIMHOOK::CSHIMHOOK(struct NS_LuaPriv::SHIMHOOK_SEMANTICS * __ptr64) __ptr64" ??0CSHIMHOOK@NS_LuaPriv@@QEAA@PEAUSHIMHOOK_SEMANTICS@1@@Z
0x180027BF8: "SERVICE_QUERY_STATUS" ??_C@_0BF@GJELGN@SERVICE_QUERY_STATUS?$AA@
0x18002E820: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_OLE32_Thunks" ?VfProvider_OLE32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x1800229D8: "__cdecl _imp_GetLongPathNameW" __imp_GetLongPathNameW
0x180007610: "int __cdecl NS_LuaPriv::VfHookCreateProcessAsUserA(void * __ptr64,char const * __ptr64,char * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,char const * __ptr64,struct _STARTUPINFOA * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessAsUserA@NS_LuaPriv@@YAHPEAXPEBDPEADPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOA@@PEAU_PROCESS_INFORMATION@@@Z
0x180009D60: "int __cdecl NS_LuaPriv::VfHookCreateProcessAsUserW(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessAsUserW@NS_LuaPriv@@YAHPEAXPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@3HK01PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x18001F7BC: "__cdecl _crtInitCritSecAndSpinCountEx" __crtInitCritSecAndSpinCountEx
0x180030A30: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::NtCreateProcessSemantics" ?NtCreateProcessSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022BB0: "__cdecl _imp_FlsSetValue" __imp_FlsSetValue
0x180024970: "Nullsoft.NSIS" ??_C@_0O@JCMHJLI@Nullsoft?4NSIS?$AA@
0x180027618: "USER32.DLL" ??_C@_1BG@GOEBHBDC@?$AAU?$AAS?$AAE?$AAR?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x18000490C: "public: __cdecl NS_LuaPriv::CSHIMHOOK::CSHIMHOOK(struct NS_LuaPriv::SHIMHOOK_SEMANTICS * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,char const * __ptr64) __ptr64" ??0CSHIMHOOK@NS_LuaPriv@@QEAA@PEAUSHIMHOOK_SEMANTICS@1@PEAU__obj_data@1@PEBD@Z
0x18000A400: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateFileW(unsigned short const * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,void * __ptr64)" ?VfHookCreateFileW@NS_LuaPriv@@YAPEAXPEBGKKPEAU_SECURITY_ATTRIBUTES@@KKPEAX@Z
0x180026DE0: "SeAuditPrivilege" ??_C@_1CC@IBLEJACI@?$AAS?$AAe?$AAA?$AAu?$AAd?$AAi?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180018B00: "__cdecl ValidateImageBase" _ValidateImageBase
0x180027A88: "KEY_WOW64_32KEY" ??_C@_0BA@OOKCCMHH@KEY_WOW64_32KEY?$AA@
0x180022AC8: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x180024528: "R6027 - not enough space for lo" ??_C@_0DF@GAKBPDFP@R6027?$AN?6?9?5not?5enough?5space?5for?5lo@
0x1800328C0: "__cdecl C_Exit_Done" _C_Exit_Done
0x180030150: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetFileAttributesWSemantics" ?GetFileAttributesWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180012370: "int __cdecl NS_LuaPriv::VfHookCreateProcessWithLogonW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessWithLogonW@NS_LuaPriv@@YAHPEBG00K0PEAGKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180017A78: "__cdecl vsnwprintf_l" _vsnwprintf_l
0x1800036D8: "void __cdecl NS_LuaPriv::LogRestrictedByMIC(struct NS_LuaPriv::__this_object * __ptr64,unsigned long,unsigned long,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64)" ?LogRestrictedByMIC@NS_LuaPriv@@YAXPEAU__this_object@1@KKPEAUACCESS_DEFINITION@1@@Z
0x1800127F0: "long __cdecl NS_LuaPriv::VfHookNtCreateProcessEx(void * __ptr64 * __ptr64,unsigned long,struct _OBJECT_ATTRIBUTES * __ptr64,void * __ptr64,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64,unsigned long)" ?VfHookNtCreateProcessEx@NS_LuaPriv@@YAJPEAPEAXKPEAU_OBJECT_ATTRIBUTES@@PEAXK222K@Z
0x1800023F8: "int __cdecl NS_LuaPriv::AllocFullPathName(char const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?AllocFullPathName@NS_LuaPriv@@YAHPEBDPEBGPEAPEAG2@Z
0x180030000: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegLoadKeyWSemantics" ?RegLoadKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030560: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CoGetInstanceFromIStorageSemantics" ?CoGetInstanceFromIStorageSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180023FB4: "April" ??_C@_05DMJDNLEJ@April?$AA@
0x180022AB8: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180019904: "__cdecl dosmaperr" _dosmaperr
0x180025628: "lpExistingFileName" ??_C@_0BD@HEPFGDLJ@lpExistingFileName?$AA@
0x180025F98: "OpenEventA" ??_C@_0L@PONCCAH@OpenEventA?$AA@
0x1800248D8: "GetUserObjectInformationA" ??_C@_0BK@CIDNPOGP@GetUserObjectInformationA?$AA@
0x180024D30: "InstallShield Selbstausführbares" ??_C@_1FM@FKPHAEAL@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAh?$AAi?$AAe?$AAl?$AAd?$AA?5?$AAS?$AAe?$AAl?$AAb?$AAs?$AAt?$AAa?$AAu?$AAs?$AAf?$AA?$PM?$AAh?$AAr?$AAb?$AAa?$AAr?$AAe?$AAs@
0x18001EBDC: "__cdecl lseeki64_nolock" _lseeki64_nolock
0x180014CA8: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180013688: "private: void __cdecl NS_LuaPriv::CAccessMask::WriteUnknownMask(unsigned long) __ptr64" ?WriteUnknownMask@CAccessMask@NS_LuaPriv@@AEAAXK@Z
0x180029880: WINSPOOL_NULL_THUNK_DATA_DLB
0x180025838: "RegLoadKeyA" ??_C@_0M@FIICNDJL@RegLoadKeyA?$AA@
0x180023F68: "Feb" ??_C@_03HJBDCHOM@Feb?$AA@
0x180037020: WINSPOOL_NULL_THUNK_DATA_DLA
0x180029840: WINSPOOL_NULL_THUNK_DATA_DLN
0x180020814: "__cdecl flush" _flush
0x180014524: "unsigned long __cdecl NS_LuaPriv::ComputeTokenGroupSize(struct _TOKEN_GROUPS * __ptr64,unsigned long,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ComputeTokenGroupSize@NS_LuaPriv@@YAKPEAU_TOKEN_GROUPS@@KPEAPEAXPEAK@Z
0x180014D2C: "int __cdecl NS_LuaPriv::OpenSubKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int,struct HKEY__ * __ptr64 * __ptr64)" ?OpenSubKey@NS_LuaPriv@@YAHPEAUHKEY__@@PEBGHPEAPEAU2@@Z
0x180012EE0: "int __cdecl NS_LuaPriv::VfHookDeregisterEventSource(void * __ptr64)" ?VfHookDeregisterEventSource@NS_LuaPriv@@YAHPEAX@Z
0x180022A98: "__cdecl _imp_EnumResourceNamesW" __imp_EnumResourceNamesW
0x1800266B0: "SetActivePwrScheme" ??_C@_0BD@CNKDFBCM@SetActivePwrScheme?$AA@
0x180026940: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1800317C0: CheckSdFileRights
0x180022D78: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180022B58: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x180024560: "R6028 - unable to initialize he" ??_C@_0CF@KJDAIALP@R6028?$AN?6?9?5unable?5to?5initialize?5he@
0x180025D90: "FindFirstChangeNotificationA" ??_C@_0BN@FGOMNMKI@FindFirstChangeNotificationA?$AA@
0x180030400: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSetValueExASemantics" ?RegSetValueExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002DD10: "struct NS_LuaPriv::__obj_data NS_LuaPriv::EventObjectData" ?EventObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x18001AE68: "__cdecl wsetenvp" _wsetenvp
0x180031180: CheckSdJobRights
0x1800166D0: "int __cdecl NS_LuaPriv::SendCmdToSUA(unsigned short * __ptr64,...)" ?SendCmdToSUA@NS_LuaPriv@@YAHPEAGZZ
0x180026570: "ReportEventW" ??_C@_0N@OGEMJOHI@ReportEventW?$AA@
0x18002B4E0: "__cdecl iob" _iob
0x1800227A4: "int NS_LuaPriv::g_bAppendReadControl" ?g_bAppendReadControl@NS_LuaPriv@@3HA
0x1800248F8: "GetProcessWindowStation" ??_C@_0BI@DFKBFLJE@GetProcessWindowStation?$AA@
0x1800320B4: cCheckSdEventRights
0x18002493C: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180027E80: "SC_MANAGER_LOCK" ??_C@_0BA@FBNEEKOB@SC_MANAGER_LOCK?$AA@
0x180023F28: "Tuesday" ??_C@_07BAAGCFCM@Tuesday?$AA@
0x180022C30: "__cdecl _imp_GetEnvironmentStringsW" __imp_GetEnvironmentStringsW
0x180024C68: "PackageForTheWeb Error" ??_C@_1CO@OKLMHIPJ@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAF?$AAo?$AAr?$AAT?$AAh?$AAe?$AAW?$AAe?$AAb?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x180030060: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteProfileStringASemantics" ?WriteProfileStringASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800252C8: "ServiceControlManager" ??_C@_0BG@GNNOJDJM@ServiceControlManager?$AA@
0x180024650: "R6033 - Attempt to use MSIL cod" ??_C@_0PH@EPAFIJ@R6033?$AN?6?9?5Attempt?5to?5use?5MSIL?5cod@
0x180022A78: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180025A88: "WriteFile" ??_C@_09NOIIIIGM@WriteFile?$AA@
0x1800268F0: "WH_SHELL" ??_C@_08ELDPDCJL@WH_SHELL?$AA@
0x180025C20: "CreateEventW" ??_C@_0N@PFDOPFFB@CreateEventW?$AA@
0x180022A00: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180030390: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ClearEventLogWSemantics" ?ClearEventLogWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024618: "R6032 - not enough space for lo" ??_C@_0DD@BKEEABMM@R6032?$AN?6?9?5not?5enough?5space?5for?5lo@
0x180022CD0: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180030640: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegRestoreKeyASemantics" ?RegRestoreKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027300: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x180025A20: "RegUnLoadKeyW" ??_C@_0O@GDDIJOFL@RegUnLoadKeyW?$AA@
0x180002360: "int __cdecl NS_LuaPriv::CheckForSafeObjectName(struct NS_LuaPriv::NAMEFN_ARGS * __ptr64)" ?CheckForSafeObjectName@NS_LuaPriv@@YAHPEAUNAMEFN_ARGS@1@@Z
0x180029800: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180011390: "long __cdecl NS_LuaPriv::VfHookRegFlushKey(struct HKEY__ * __ptr64)" ?VfHookRegFlushKey@NS_LuaPriv@@YAJPEAUHKEY__@@@Z
0x180032900: "__cdecl C_Termination_Done" _C_Termination_Done
0x180024750: "R6034 An application has made a" ??_C@_0JL@DFDOOABL@R6034?$AN?6An?5application?5has?5made?5a@
0x180027BC8: "SERVICE_QUERY_CONFIG" ??_C@_0BF@ENHEKAHP@SERVICE_QUERY_CONFIG?$AA@
0x180032F48: pRegistryObjectHandles
0x1800271B8: "INI file" ??_C@_08IIPECMIM@INI?5file?$AA@
0x180025F58: "MoveFileW" ??_C@_09MAGPNIBH@MoveFileW?$AA@
0x18002FF50: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::NtAdjustPrivilegesTokenSemantics" ?NtAdjustPrivilegesTokenSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180032DB8: "__cdecl newmode" _newmode
0x180022980: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x1800252E0: "Service" ??_C@_07LMLHFMEG@Service?$AA@
0x180022BC8: "__cdecl _imp_GetOEMCP" __imp_GetOEMCP
0x180018378: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180027ED0: "api-ms-win-core-delayload-l1-1-1" ??_C@_1EK@JANKHMBM@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAd?$AAe?$AAl?$AAa?$AAy?$AAl?$AAo?$AAa?$AAd?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x180009EC0: "struct HHOOK__ * __ptr64 __cdecl NS_LuaPriv::VfHookSetWindowsHookW(int,__int64 (__cdecl*)(int,unsigned __int64,__int64))" ?VfHookSetWindowsHookW@NS_LuaPriv@@YAPEAUHHOOK__@@HP6A_JH_K_J@Z@Z
0x1800309D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileStructWSemantics" ?WritePrivateProfileStructWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001B3CC: "__cdecl _crtCorExitProcess" __crtCorExitProcess
0x1800264C0: "RegDeleteKeyA" ??_C@_0O@FLDDFNH@RegDeleteKeyA?$AA@
0x1800266C8: "SetWindowsHookA" ??_C@_0BA@KFAALIIJ@SetWindowsHookA?$AA@
0x180014EC4: "int __cdecl NS_LuaPriv::AnalyzeRegMap(unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned short const * __ptr64 * __ptr64,int * __ptr64)" ?AnalyzeRegMap@NS_LuaPriv@@YAHPEBGPEAPEAUHKEY__@@PEAPEBGPEAH@Z
0x18001C92C: "__cdecl setargv" _setargv
0x1800249A0: "InstallShield.Setup" ??_C@_0BE@HFKKDFKL@InstallShield?4Setup?$AA@
0x180037000: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x180025580: "Unknown [Not given]" ??_C@_1CI@IMKJPAPG@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$FL?$AAN?$AAo?$AAt?$AA?5?$AAg?$AAi?$AAv?$AAe?$AAn?$AA?$FN?$AA?$AA@
0x1800229E8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180024AB0: "ThraexSoftware.AstrumInstallWiza" ??_C@_1EG@IKCNKPGH@?$AAT?$AAh?$AAr?$AAa?$AAe?$AAx?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?4?$AAA?$AAs?$AAt?$AAr?$AAu?$AAm?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAW?$AAi?$AAz?$AAa@
0x18002400C: "AM" ??_C@_02DEDBPAFC@AM?$AA@
0x180018B30: "__cdecl _except_validate_context_record" __except_validate_context_record
0x180016C30: "void __cdecl VfProviderDllUnloadCallback(unsigned short * __ptr64,void * __ptr64,unsigned __int64,void * __ptr64)" ?VfProviderDllUnloadCallback@@YAXPEAGPEAX_K1@Z
0x18002568C: "lpFile" ??_C@_06ONHNLDBH@lpFile?$AA@
0x180025A30: "WRITE_DAC" ??_C@_09KBPNIALE@WRITE_DAC?$AA@
0x1800312F0: CheckSdDirectoryRights
0x1800200A4: "void __cdecl _CallMemberFunction0(void * __ptr64 const,void * __ptr64 const)" ?_CallMemberFunction0@@YAXQEAX0@Z
0x1800121E0: "int __cdecl NS_LuaPriv::VfHookWriteFileGather(void * __ptr64,union _FILE_SEGMENT_ELEMENT * __ptr64 const,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64)" ?VfHookWriteFileGather@NS_LuaPriv@@YAHPEAXQEAT_FILE_SEGMENT_ELEMENT@@KPEAKPEAU_OVERLAPPED@@@Z
0x180034BC0: "__cdecl _initenv_end" __initenv_end
0x1800228E8: "__cdecl _imp_LookupPrivilegeDisplayNameW" __imp_LookupPrivilegeDisplayNameW
0x180001B50: "void __cdecl NS_LuaPriv::FreeWin32Name(unsigned short const * __ptr64)" ?FreeWin32Name@NS_LuaPriv@@YAXPEBG@Z
0x1800082D0: "int __cdecl NS_LuaPriv::VfHookCreateDirectoryW(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateDirectoryW@NS_LuaPriv@@YAHPEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x1800328C8: "__cdecl _argv" __argv
0x1800305A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegCreateKeyExWSemantics" ?RegCreateKeyExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180020414: "__cdecl recalloc" _recalloc
0x1800306E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::AccessCheckSemantics" ?AccessCheckSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800302D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FindFirstFileWSemantics" ?FindFirstFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027A48: "FILE_READ_ATTRIBUTES" ??_C@_0BF@IHEBLOA@FILE_READ_ATTRIBUTES?$AA@
0x18001830C: wcsrchr
0x180026900: "WH_SYSMSGFILTER" ??_C@_0BA@INDILANN@WH_SYSMSGFILTER?$AA@
0x1800235B8: "mscoree.dll" ??_C@_1BI@BGOHAHKC@?$AAm?$AAs?$AAc?$AAo?$AAr?$AAe?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180022A50: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180030930: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CoCreateInstanceExSemantics" ?CoCreateInstanceExSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030480: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetKernelObjectSecuritySemantics" ?GetKernelObjectSecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000CBF0: "int __cdecl NS_LuaPriv::VfHookOpenPrinterW(unsigned short * __ptr64,void * __ptr64 * __ptr64,struct _PRINTER_DEFAULTSW * __ptr64)" ?VfHookOpenPrinterW@NS_LuaPriv@@YAHPEAGPEAPEAXPEAU_PRINTER_DEFAULTSW@@@Z
0x1800268E0: "WH_MSGFILTER" ??_C@_0N@HCKEBMEI@WH_MSGFILTER?$AA@
0x180022A60: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x180026600: "NtCreateUserProcess" ??_C@_0BE@IIPCAPLK@NtCreateUserProcess?$AA@
0x180025000: "D:(A;;0x1;;;AU)(A;;0x15;;;IU)(A;" ??_C@_1JA@FLFKPIDJ@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA1?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA0?$AAx?$AA1?$AA5?$AA?$DL?$AA?$DL?$AA?$DL?$AAI?$AAU?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL@
0x180002C8C: "int __cdecl NS_LuaPriv::GetEventlogSecurity(char const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?GetEventlogSecurity@NS_LuaPriv@@YAHPEBDPEBGPEAPEAX@Z
0x1800250C8: "%ws%ws" ??_C@_1O@PEBEJIFE@?$AA?$CF?$AAw?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800244F0: "R6026 - not enough space for st" ??_C@_0DF@IBLNNAIG@R6026?$AN?6?9?5not?5enough?5space?5for?5st@
0x180030980: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryInfoKeyWSemantics" ?RegQueryInfoKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800309F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetNamedSecurityInfoWSemantics" ?SetNamedSecurityInfoWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180032088: cCheckSdProcessRights
0x18000ACB0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenEventW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenEventW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x180026280: "WriteProfileSectionW" ??_C@_0BF@OOJLCEOM@WriteProfileSectionW?$AA@
0x180023FBC: "June" ??_C@_04CNLMGBGM@June?$AA@
0x18000EC10: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateFileMappingA(void * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,unsigned long,char const * __ptr64)" ?VfHookCreateFileMappingA@NS_LuaPriv@@YAPEAXPEAXPEAU_SECURITY_ATTRIBUTES@@KKKPEBD@Z
0x180023F88: "Oct" ??_C@_03BMAOKBAD@Oct?$AA@
0x18000179C: LoadImageMappings
0x180025500: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1800241D8: "August" ??_C@_1O@PAHLKOAC@?$AAA?$AAu?$AAg?$AAu?$AAs?$AAt?$AA?$AA@
0x18002FF90: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenEventASemantics" ?OpenEventASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030230: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryInfoKeyASemantics" ?RegQueryInfoKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000ED90: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateFileMappingW(void * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long,unsigned long,unsigned long,unsigned short const * __ptr64)" ?VfHookCreateFileMappingW@NS_LuaPriv@@YAPEAXPEAXPEAU_SECURITY_ATTRIBUTES@@KKKPEBG@Z
0x1800088F0: "int __cdecl NS_LuaPriv::VfHookCreateHardLinkW(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookCreateHardLinkW@NS_LuaPriv@@YAHPEBG0PEAU_SECURITY_ATTRIBUTES@@@Z
0x180025980: "RegFlushKey" ??_C@_0M@KEOLPCO@RegFlushKey?$AA@
0x1800229C8: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x18000FEB0: "int __cdecl NS_LuaPriv::VfHookSetUserObjectSecurity(void * __ptr64,unsigned long * __ptr64,void * __ptr64)" ?VfHookSetUserObjectSecurity@NS_LuaPriv@@YAHPEAXPEAK0@Z
0x180032EF0: "unsigned long * __ptr64 __ptr64 NS_LuaPriv::s_pdwExitCode" ?s_pdwExitCode@NS_LuaPriv@@3PEAKEA
0x180026018: "OpenMutexW" ??_C@_0L@CFJFGLEO@OpenMutexW?$AA@
0x180025AE8: "DELETE | FILE_GENERIC_WRITE" ??_C@_0BM@EMNJAIC@DELETE?5?$HM?5FILE_GENERIC_WRITE?$AA@
0x180019C6C: "__cdecl getptd_noexit" _getptd_noexit
0x180007260: "int __cdecl NS_LuaPriv::VfHookWriteProfileStringA(char const * __ptr64,char const * __ptr64,char const * __ptr64)" ?VfHookWriteProfileStringA@NS_LuaPriv@@YAHPEBD00@Z
0x180025258: "Kernel Object" ??_C@_0O@KEOCFEHJ@Kernel?5Object?$AA@
0x180027DE0: "TOKEN_ADJUST_GROUPS" ??_C@_0BE@MHCFKOEE@TOKEN_ADJUST_GROUPS?$AA@
0x1800303D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CopyFileExASemantics" ?CopyFileExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024A50: "Roshal.WinRAR.WinRAR" ??_C@_1CK@NHMKGNFO@?$AAR?$AAo?$AAs?$AAh?$AAa?$AAl?$AA?4?$AAW?$AAi?$AAn?$AAR?$AAA?$AAR?$AA?4?$AAW?$AAi?$AAn?$AAR?$AAA?$AAR?$AA?$AA@
0x18002113C: "__cdecl close_nolock" _close_nolock
0x180034BD8: "__cdecl _onexitend" __onexitend
0x180015614: "void __cdecl NS_LuaPriv::CheckProfileWrite(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int,unsigned long,int)" ?CheckProfileWrite@NS_LuaPriv@@YAXPEBDPEBG11HKH@Z
0x180016BD4: "public: __cdecl NS_LuaPriv::CSHIMHOOK::~CSHIMHOOK(void) __ptr64" ??1CSHIMHOOK@NS_LuaPriv@@QEAA@XZ
0x180025910: "RegQueryValueA" ??_C@_0P@CDBCGPOI@RegQueryValueA?$AA@
0x18001B2C8: "__cdecl unlock" _unlock
0x180026738: "WinVerifyTrust" ??_C@_0P@CBOPOJKE@WinVerifyTrust?$AA@
0x180016684: "unsigned short const * __ptr64 __cdecl NS_LuaPriv::CurrentExeName(void)" ?CurrentExeName@NS_LuaPriv@@YAPEBGXZ
0x180014850: "int __cdecl NS_LuaPriv::GetPrivilegeDisplayName(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ?GetPrivilegeDisplayName@NS_LuaPriv@@YAHPEBDPEBGPEAPEBG@Z
0x180022DE8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180010300: "long __cdecl NS_LuaPriv::VfHookRegEnumValueA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?VfHookRegEnumValueA@NS_LuaPriv@@YAJPEAUHKEY__@@KPEADPEAK22PEAE2@Z
0x180030B90: "struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR VfProviderDescriptor" ?VfProviderDescriptor@@3U_RTL_VERIFIER_PROVIDER_DESCRIPTOR@@A
0x180032EE0: "unsigned long * __ptr64 __ptr64 NS_LuaPriv::s_pdwPid" ?s_pdwPid@NS_LuaPriv@@3PEAKEA
0x180024340: " This application has requested" ??_C@_0JG@LBKMGKLD@?$AN?6This?5application?5has?5requested@
0x180025AC0: "SetFileTime" ??_C@_0M@LENFMBIC@SetFileTime?$AA@
0x18000E4E0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateSemaphoreA(struct _SECURITY_ATTRIBUTES * __ptr64,long,long,char const * __ptr64)" ?VfHookCreateSemaphoreA@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@JJPEBD@Z
0x1800047F8: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x180026630: "CoCreateInstance" ??_C@_0BB@FBCNKNOO@CoCreateInstance?$AA@
0x180030A50: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenFileMappingWSemantics" ?OpenFileMappingWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022A10: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x180022BA0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180007D50: "int __cdecl NS_LuaPriv::VfHookCopyFileExW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?VfHookCopyFileExW@NS_LuaPriv@@YAHPEBG0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x1800320AC: cCheckSdSemaphoreRights
0x180027238: " "" ??_C@_15EDKKDMNP@?$AA?5?$AA?$CC?$AA?$AA@
0x1800252C0: "Printer" ??_C@_07KLNKAJI@Printer?$AA@
0x180025680: "lpFileName" ??_C@_0L@HCCAAHMO@lpFileName?$AA@
0x180026420: "OpenEventLogA" ??_C@_0O@EDGJEOGK@OpenEventLogA?$AA@
0x180013C78: "int __cdecl NS_LuaPriv::NOTIFY_FUNCTION(unsigned long)" ?NOTIFY_FUNCTION@NS_LuaPriv@@YAHK@Z
0x180030530: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenFileMappingASemantics" ?OpenFileMappingASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180032EE8: "void * __ptr64 __ptr64 NS_LuaPriv::s_hSendPidEvent" ?s_hSendPidEvent@NS_LuaPriv@@3PEAXEA
0x180023640: "__cdecl XcptActTab" _XcptActTab
0x180022B28: "__cdecl _imp_QueryActCtxW" __imp_QueryActCtxW
0x180025C90: "CreateHardLinkW" ??_C@_0BA@LGDMGDBA@CreateHardLinkW?$AA@
0x180032090: cCheckSdKeyRights
0x180034BE8: "__cdecl FPinit" _FPinit
0x180022908: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180027988: "JOB_OBJECT_SET_SECURITY_ATTRIBUT" ??_C@_0CD@HDIIGANP@JOB_OBJECT_SET_SECURITY_ATTRIBUT@
0x180022CC8: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x180024210: "November" ??_C@_1BC@BGLIFPF@?$AAN?$AAo?$AAv?$AAe?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x180022B40: "__cdecl _imp_ReleaseActCtx" __imp_ReleaseActCtx
0x180030900: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenWaitableTimerASemantics" ?OpenWaitableTimerASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024460: "R6019 - unable to open console " ??_C@_0CJ@EGEJHFME@R6019?$AN?6?9?5unable?5to?5open?5console?5@
0x180027298: "<remove_shim>" ??_C@_1BM@HBOEAGAB@?$AA?$DM?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AA_?$AAs?$AAh?$AAi?$AAm?$AA?$DO?$AA?$AA@
0x1800313D0: CheckSdPrinterRights
0x180025E98: "GetFileAttributesW" ??_C@_0BD@CFFEJJPG@GetFileAttributesW?$AA@
0x180032908: "__cdecl _winitenv" __winitenv
0x180025D00: "CreateProcessW" ??_C@_0P@MFBJEBCN@CreateProcessW?$AA@
0x1800301E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenProcessSemantics" ?OpenProcessSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000EB00: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateJobObjectW(struct _SECURITY_ATTRIBUTES * __ptr64,unsigned short const * __ptr64)" ?VfHookCreateJobObjectW@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@PEBG@Z
0x180024EF4: "DKNJ" ??_C@_04KICJCOBC@DKNJ?$AA@
0x180025F28: "MoveFileA" ??_C@_09NMPHGNMA@MoveFileA?$AA@
0x1800275F8: "POWRPROF.DLL" ??_C@_1BK@KEHNOEBN@?$AAP?$AAO?$AAW?$AAR?$AAP?$AAR?$AAO?$AAF?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180025558: ", " ??_C@_02KEGNLNML@?0?5?$AA@
0x180001D20: "int __cdecl NS_LuaPriv::GetAccessFromKernelHandle(struct NS_LuaPriv::GETACCESSFN_ARGS * __ptr64)" ?GetAccessFromKernelHandle@NS_LuaPriv@@YAHPEAUGETACCESSFN_ARGS@1@@Z
0x180030520: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileStringWSemantics" ?WritePrivateProfileStringWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025CB8: "CreateJobObjectW" ??_C@_0BB@DHPLIDLP@CreateJobObjectW?$AA@
0x180026920: "FileDescription" ??_C@_1CA@JGBAIPOO@?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180022E08: "__cdecl _xi_a" __xi_a
0x180007470: "int __cdecl NS_LuaPriv::VfHookCreateProcessA(char const * __ptr64,char * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,char const * __ptr64,struct _STARTUPINFOA * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessA@NS_LuaPriv@@YAHPEBDPEADPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOA@@PEAU_PROCESS_INFORMATION@@@Z
0x180025160: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180022C98: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800247F0: "DOMAIN error " ??_C@_0P@MBDAJNE@DOMAIN?5error?$AN?6?$AA@
0x180026330: "CloseEventLog" ??_C@_0O@CMPADMMI@CloseEventLog?$AA@
0x18001C450: "__cdecl heap_term" _heap_term
0x180010FF0: "long __cdecl NS_LuaPriv::VfHookRegSetValueA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char const * __ptr64,unsigned long)" ?VfHookRegSetValueA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDK1K@Z
0x18002555C: "DACL" ??_C@_04JJBGPKKD@DACL?$AA@
0x1800277F8: "PROCESS_DUP_HANDLE" ??_C@_0BD@FNKPIEBO@PROCESS_DUP_HANDLE?$AA@
0x180032F08: "void * __ptr64 __ptr64 NS_LuaPriv::s_hSendCmdMutex" ?s_hSendCmdMutex@NS_LuaPriv@@3PEAXEA
0x1800303A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetWindowsHookASemantics" ?SetWindowsHookASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000E8A0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateWaitableTimerW(struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned short const * __ptr64)" ?VfHookCreateWaitableTimerW@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBG@Z
0x18001FEF0: wctomb_s
0x180024920: "__cdecl _sz_WINSPOOL_DRV" __sz_WINSPOOL_DRV
0x180024A00: "Illustrate.Spoon.Installer" ??_C@_1DG@MMHKMPJO@?$AAI?$AAl?$AAl?$AAu?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AA?4?$AAS?$AAp?$AAo?$AAo?$AAn?$AA?4?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x180024980: "Nullsoft.NSIS" ??_C@_1BM@EBPMKFLG@?$AAN?$AAu?$AAl?$AAl?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAN?$AAS?$AAI?$AAS?$AA?$AA@
0x180026028: "OpenProcess" ??_C@_0M@MMCMKPDL@OpenProcess?$AA@
0x18002FA08: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_WINTRUST_Thunks" ?VfProvider_WINTRUST_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180008500: "int __cdecl NS_LuaPriv::VfHookSetFileSecurityW(unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?VfHookSetFileSecurityW@NS_LuaPriv@@YAHPEBGKPEAX@Z
0x180004DE0: "int __cdecl NS_LuaPriv::VfHookReplaceFileA(char const * __ptr64,char const * __ptr64,char const * __ptr64,unsigned long,void * __ptr64,void * __ptr64)" ?VfHookReplaceFileA@NS_LuaPriv@@YAHPEBD00KPEAX1@Z
0x180025180: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180027B48: "EVENT_MODIFY_STATE" ??_C@_0BD@BCMHDFKH@EVENT_MODIFY_STATE?$AA@
0x18001AFC0: "__cdecl _mbtow_environ" __mbtow_environ
0x18001F2AC: "__cdecl _crtCompareStringW" __crtCompareStringW
0x180027758: "ACCESS_SYSTEM_SECURITY" ??_C@_0BH@KPFNKPFO@ACCESS_SYSTEM_SECURITY?$AA@
0x180023EF2: "__cdecl _lconv_static_null" __lconv_static_null
0x180025B80: "CopyFileExA" ??_C@_0M@GKMANEJL@CopyFileExA?$AA@
0x180030500: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::DeleteFileWSemantics" ?DeleteFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002423C: "AM" ??_C@_15ODEHAHHF@?$AAA?$AAM?$AA?$AA@
0x180024078: "Fri" ??_C@_17HFOLPPLP@?$AAF?$AAr?$AAi?$AA?$AA@
0x18001D210: strcpy_s
0x180011ED0: "int __cdecl NS_LuaPriv::VfHookSetFileTime(void * __ptr64,struct _FILETIME const * __ptr64,struct _FILETIME const * __ptr64,struct _FILETIME const * __ptr64)" ?VfHookSetFileTime@NS_LuaPriv@@YAHPEAXPEBU_FILETIME@@11@Z
0x180011980: "long __cdecl NS_LuaPriv::VfHookRegSaveKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long)" ?VfHookRegSaveKeyExW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGPEAU_SECURITY_ATTRIBUTES@@K@Z
0x180022910: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180032098: cStandardSDAccessRights
0x180023FC4: "July" ??_C@_04MIEPOIFP@July?$AA@
0x1800245B0: "R6031 - Attempt to initialize t" ??_C@_0GD@OFKILIED@R6031?$AN?6?9?5Attempt?5to?5initialize?5t@
0x1800199C4: "__cdecl invoke_watson" _invoke_watson
0x180032018: "__cdecl confh" _confh
0x180010030: "long __cdecl NS_LuaPriv::VfHookRegEnumKeyW(struct HKEY__ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?VfHookRegEnumKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@KPEAGK@Z
0x180024050: "Sun" ??_C@_17MBGCMIPB@?$AAS?$AAu?$AAn?$AA?$AA@
0x180030A90: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateDirectoryASemantics" ?CreateDirectoryASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025208: "HKEY_PERFORMANCE_NLSTEXT" ??_C@_1DC@NHNIJGKB@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAN?$AAL?$AAS?$AAT?$AAE?$AAX?$AAT?$AA?$AA@
0x180026580: "SetFileSecurityA" ??_C@_0BB@PMFHDDMB@SetFileSecurityA?$AA@
0x1800044EC: "unsigned short const * __ptr64 __cdecl NS_LuaPriv::SidToString(void * __ptr64)" ?SidToString@NS_LuaPriv@@YAPEBGPEAX@Z
0x180030440: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateDirectoryWSemantics" ?CreateDirectoryWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002B8F0: VfProviderLuaPrivBreakDescriptors
0x1800235A0: "(null)" ??_C@_06OJHGLDPL@?$CInull?$CJ?$AA@
0x1800046D0: "int __cdecl NS_LuaPriv::SidIsTrusted(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64)" ?SidIsTrusted@NS_LuaPriv@@YAHPEAU__this_object@1@PEAX@Z
0x18002E4D0: "struct NS_LuaPriv::__obj_data NS_LuaPriv::JobObjectData" ?JobObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x1800255DC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180024490: "R6024 - not enough space for _o" ??_C@_0DF@JIJJFJDC@R6024?$AN?6?9?5not?5enough?5space?5for?5_o@
0x180022A38: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x180018D74: "__cdecl _removelocaleref" __removelocaleref
0x18000C4C0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenWaitableTimerW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenWaitableTimerW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x1800305E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessASemantics" ?CreateProcessASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024118: "Feb" ??_C@_17LMDJEKJN@?$AAF?$AAe?$AAb?$AA?$AA@
0x180027008: "SeTimeZonePrivilege" ??_C@_1CI@JJNMEPGC@?$AAS?$AAe?$AAT?$AAi?$AAm?$AAe?$AAZ?$AAo?$AAn?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180023F74: "May" ??_C@_03CNMDKL@May?$AA@
0x180014A48: "void __cdecl NS_LuaPriv::AuditPrivilege(char const * __ptr64,struct _LUID,int)" ?AuditPrivilege@NS_LuaPriv@@YAXPEBDU_LUID@@H@Z
0x180022A28: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x180011D10: "int __cdecl NS_LuaPriv::VfHookWriteFile(void * __ptr64,void const * __ptr64,unsigned long,unsigned long * __ptr64,struct _OVERLAPPED * __ptr64)" ?VfHookWriteFile@NS_LuaPriv@@YAHPEAXPEBXKPEAKPEAU_OVERLAPPED@@@Z
0x180012120: "int __cdecl NS_LuaPriv::VfHookSetFileShortNameW(void * __ptr64,unsigned short const * __ptr64)" ?VfHookSetFileShortNameW@NS_LuaPriv@@YAHPEAXPEBG@Z
0x180034BF8: "__cdecl pRawDllMain" _pRawDllMain
0x1800265B0: "NetUserGetInfo" ??_C@_0P@BNFEMIFM@NetUserGetInfo?$AA@
0x180024F70: ";!@Install@!UTF-8!" ??_C@_0BD@OJMNPICA@?$DL?$CB?$EAInstall?$EA?$CBUTF?98?$CB?$AA@
0x180018F00: "__cdecl _initmbctable" __initmbctable
0x180018810: iswctype
0x180008D80: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstChangeNotificationW(unsigned short const * __ptr64,int,unsigned long)" ?VfHookFindFirstChangeNotificationW@NS_LuaPriv@@YAPEAXPEBGHK@Z
0x180026870: "WH_JOURNALPLAYBACK" ??_C@_0BD@HBEPMNNK@WH_JOURNALPLAYBACK?$AA@
0x1800241C8: "July" ??_C@_19BIFMLPCD@?$AAJ?$AAu?$AAl?$AAy?$AA?$AA@
0x180020290: strcmp
0x1800252A4: "File" ??_C@_04PBAHLACE@File?$AA@
0x180024128: "Apr" ??_C@_17LFPOIHDD@?$AAA?$AAp?$AAr?$AA?$AA@
0x180024950: "JR.Inno.Setup" ??_C@_1BM@ICJKBJCJ@?$AAJ?$AAR?$AA?4?$AAI?$AAn?$AAn?$AAo?$AA?4?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x180021359: LoadLibraryExA
0x180030490: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CoGetInstanceFromFileSemantics" ?CoGetInstanceFromFileSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022D10: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x1800262C8: "AccessCheck" ??_C@_0M@NFEPJBAB@AccessCheck?$AA@
0x180003A64: "int __cdecl NS_LuaPriv::AnalyzeLuaSecurity(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64,unsigned long,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64,unsigned long * __ptr64)" ?AnalyzeLuaSecurity@NS_LuaPriv@@YAHPEAU__this_object@1@PEAXKPEAUACCESS_DEFINITION@1@PEAK@Z
0x1800301C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateHardLinkASemantics" ?CreateHardLinkASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024930: "__cdecl _sz_OLE32_dll" __sz_OLE32_dll
0x18001D7A0: "__cdecl _free_lconv_mon" __free_lconv_mon
0x180025A70: "FlushFileBuffers" ??_C@_0BB@MOGECGEP@FlushFileBuffers?$AA@
0x180018BF8: "__cdecl _freetlocinfo" __freetlocinfo
0x180016E78: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18001950C: "__cdecl setmbcp_nolock" _setmbcp_nolock
0x1800063D0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookFindFirstChangeNotificationA(char const * __ptr64,int,unsigned long)" ?VfHookFindFirstChangeNotificationA@NS_LuaPriv@@YAPEAXPEBDHK@Z
0x180022BE0: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x18001E1E8: "__cdecl fileno" _fileno
0x180025848: "RegLoadKeyW" ??_C@_0M@EEBKGGEM@RegLoadKeyW?$AA@
0x18000FCC0: "void __cdecl NS_LuaPriv::QueryAndCheckUserObjectSecurityHandle(char const * __ptr64,void * __ptr64,unsigned long)" ?QueryAndCheckUserObjectSecurityHandle@NS_LuaPriv@@YAXPEBDPEAXK@Z
0x180030FC0: CheckSdServiceRights
0x180026F40: "SeImpersonatePrivilege" ??_C@_1CO@HBMPHMGO@?$AAS?$AAe?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180022D38: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x180027700: "GENERIC_WRITE" ??_C@_0O@DKHPBJPE@GENERIC_WRITE?$AA@
0x180032F58: "unsigned long VfLuaPrivLayerEnabled" ?VfLuaPrivLayerEnabled@@3KA
0x180006170: "unsigned long __cdecl NS_LuaPriv::VfHookGetFileAttributesA(char const * __ptr64)" ?VfHookGetFileAttributesA@NS_LuaPriv@@YAKPEBD@Z
0x180022C28: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180017500: "__cdecl _security_check_cookie" __security_check_cookie
0x180027558: "<NULL>" ??_C@_1O@DPFEOIGE@?$AA?$DM?$AAN?$AAU?$AAL?$AAL?$AA?$DO?$AA?$AA@
0x180024E28: "Setup Initialization Error" ??_C@_1DG@KAIPKDLI@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x180025610: "lpReplacedFileName" ??_C@_0BD@CFGEDLBN@lpReplacedFileName?$AA@
0x180014D9C: "int __cdecl NS_LuaPriv::GetStringValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetStringValue@NS_LuaPriv@@YAHPEAUHKEY__@@PEBGPEAPEAG@Z
0x18001E168: "__cdecl calloc_crt" _calloc_crt
0x180022E00: "__cdecl _xc_z" __xc_z
0x1800011C0: SXSManifest
0x1800013B0: ResourceDataMatch
0x180024BF0: "Setup cannot start the program _" ??_C@_1FE@IAGJDCIE@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAc?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AA_@
0x180008B20: "unsigned long __cdecl NS_LuaPriv::VfHookGetFileAttributesW(unsigned short const * __ptr64)" ?VfHookGetFileAttributesW@NS_LuaPriv@@YAKPEBG@Z
0x180032000: "__cdecl _abort_behavior" __abort_behavior
0x1800177B0: strncmp
0x180032F40: pEventlogObjectHandles
0x180016C30: "void __cdecl VfProviderDllLoadCallback(unsigned short * __ptr64,void * __ptr64,unsigned __int64,void * __ptr64)" ?VfProviderDllLoadCallback@@YAXPEAGPEAX_K1@Z
0x180022B38: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001EE60: "__cdecl lock_file2" _lock_file2
0x1800279C8: "FILE_READ_DATA" ??_C@_0P@MGDAJKIL@FILE_READ_DATA?$AA@
0x18001517C: "int __cdecl NS_LuaPriv::CheckIniMapping(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?CheckIniMapping@NS_LuaPriv@@YAHPEBDPEBG11@Z
0x1800112A0: "long __cdecl NS_LuaPriv::VfHookRegSetValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?VfHookRegSetValueExW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGKKPEBEK@Z
0x1800320A8: cCheckSdServiceControlManagerRights
0x18003266C: "__cdecl _error_mode" __error_mode
0x180031D6C: "__cdecl _globallocalestatus" __globallocalestatus
0x180013B44: "int __cdecl NS_LuaPriv::LuaRealloc(char const * __ptr64,char const * __ptr64,unsigned __int64,void * __ptr64 * __ptr64)" ?LuaRealloc@NS_LuaPriv@@YAHPEBD0_KPEAPEAX@Z
0x180010D60: "long __cdecl NS_LuaPriv::VfHookRegQueryValueExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?VfHookRegQueryValueExW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGPEAK2PEAE2@Z
0x18001EDF8: "__cdecl lock_file" _lock_file
0x180026848: "WH_FOREGROUNDIDLE" ??_C@_0BC@EFKCCKEN@WH_FOREGROUNDIDLE?$AA@
0x180027BB0: "JOB_ACCESS_ADMINISTER" ??_C@_0BG@DEGLIMIK@JOB_ACCESS_ADMINISTER?$AA@
0x180027B30: "EVENT_QUERY_STATE" ??_C@_0BC@NPCMCGBG@EVENT_QUERY_STATE?$AA@
0x1800111B0: "long __cdecl NS_LuaPriv::VfHookRegSetValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long)" ?VfHookRegSetValueExA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDKKPEBEK@Z
0x180037010: "__cdecl _imp_ClosePrinter" __imp_ClosePrinter
0x180026A58: "TokenOwner" ??_C@_0L@NMFHCPLP@TokenOwner?$AA@
0x180013170: "int __cdecl NS_LuaPriv::VfHookAccessCheck(void * __ptr64,void * __ptr64,unsigned long,struct _GENERIC_MAPPING * __ptr64,struct _PRIVILEGE_SET * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?VfHookAccessCheck@NS_LuaPriv@@YAHPEAX0KPEAU_GENERIC_MAPPING@@PEAU_PRIVILEGE_SET@@PEAK3PEAH@Z
0x180032ED0: "void * __ptr64 __ptr64 NS_LuaPriv::g_hShimHeap" ?g_hShimHeap@NS_LuaPriv@@3PEAXEA
0x180024A80: "ThraexSoftware.AstrumInstallWiza" ??_C@_0CD@IMEJCBCA@ThraexSoftware?4AstrumInstallWiza@
0x180026B00: "SeMachineAccountPrivilege" ??_C@_1DE@DCPKNDPB@?$AAS?$AAe?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180027A10: "FILE_WRITE_EA" ??_C@_0O@KMLMGIMI@FILE_WRITE_EA?$AA@
0x180025AD0: "SetFileValidData" ??_C@_0BB@CIIJFHPA@SetFileValidData?$AA@
0x180026BE8: "SeSystemProfilePrivilege" ??_C@_1DC@KMGNOJNI@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800320B8: cCheckSdSectionRights
0x180027F58: "__cdecl _pfnDefaultDliNotifyHook2" __pfnDefaultDliNotifyHook2
0x180027140: "Software\Microsoft\Windows NT\Cu" ??_C@_1HI@GIGAFHNN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180030760: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetWindowsHookExWSemantics" ?SetWindowsHookExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026690: "CoGetInstanceFromIStorage" ??_C@_0BK@ELPOGOCK@CoGetInstanceFromIStorage?$AA@
0x18002FF20: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegDeleteKeyWSemantics" ?RegDeleteKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022C90: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180027DA0: "TOKEN_QUERY" ??_C@_0M@HKJIGJHB@TOKEN_QUERY?$AA@
0x180027B00: "TIMER_QUERY_STATE" ??_C@_0BC@JKCLBEEA@TIMER_QUERY_STATE?$AA@
0x180013F54: "void __cdecl NS_LuaPriv::DumpFileVersionInfo(void)" ?DumpFileVersionInfo@NS_LuaPriv@@YAXXZ
0x180030350: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegUnLoadKeyWSemantics" ?RegUnLoadKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180021353: GetModuleHandleW
0x180022A70: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180026070: "OpenWaitableTimerA" ??_C@_0BD@JLNIFDIB@OpenWaitableTimerA?$AA@
0x1800328D8: "__cdecl wenviron" _wenviron
0x180025D40: "CreateWaitableTimerA" ??_C@_0BF@NKGLEDNJ@CreateWaitableTimerA?$AA@
0x1800255F8: "lpReplacementFileName" ??_C@_0BG@DPKONCGG@lpReplacementFileName?$AA@
0x180022C60: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x180025110: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x18001C3E0: "__cdecl heap_init" _heap_init
0x180022DE0: vrfcore_NULL_THUNK_DATA
0x18001687C: "int __cdecl NS_LuaPriv::GetRunLevelFromManifest(unsigned short const * __ptr64,enum ACTCTX_REQUESTED_RUN_LEVEL * __ptr64)" ?GetRunLevelFromManifest@NS_LuaPriv@@YAHPEBGPEAW4ACTCTX_REQUESTED_RUN_LEVEL@@@Z
0x180006230: "int __cdecl NS_LuaPriv::VfHookGetFileAttributesExA(char const * __ptr64,enum _GET_FILEEX_INFO_LEVELS,void * __ptr64)" ?VfHookGetFileAttributesExA@NS_LuaPriv@@YAHPEBDW4_GET_FILEEX_INFO_LEVELS@@PEAX@Z
0x180022A20: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180027E60: "SC_MANAGER_ENUMERATE_SERVICE" ??_C@_0BN@JALGPBOK@SC_MANAGER_ENUMERATE_SERVICE?$AA@
0x180011740: "long __cdecl NS_LuaPriv::VfHookRegSaveKeyA(struct HKEY__ * __ptr64,char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookRegSaveKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDPEAU_SECURITY_ATTRIBUTES@@@Z
0x180027588: "ADVAPI32.DLL" ??_C@_1BK@GAEMIDIL@?$AAA?$AAD?$AAV?$AAA?$AAP?$AAI?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180022D20: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18001EF3C: "__cdecl get_printf_count_output" _get_printf_count_output
0x180026748: "IsUserAnAdmin" ??_C@_0O@PCKMHJN@IsUserAnAdmin?$AA@
0x180024F20: "nsisinstall" ??_C@_0M@FIIDFBBP@nsisinstall?$AA@
0x18002FFC0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileExWSemantics" ?MoveFileExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180019A88: "__cdecl _set_flsgetvalue" __set_flsgetvalue
0x180002940: "int __cdecl NS_LuaPriv::OpenDirectoryFor(struct NS_LuaPriv::OPENOBJ_ARGS * __ptr64)" ?OpenDirectoryFor@NS_LuaPriv@@YAHPEAUOPENOBJ_ARGS@1@@Z
0x180030570: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegOpenCurrentUserSemantics" ?RegOpenCurrentUserSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180021370: "__cdecl _chkstk" __chkstk
0x180024FA0: "read" ??_C@_04POLDLDMI@read?$AA@
0x180026400: "OpenSCManagerA" ??_C@_0P@KIBOOHEE@OpenSCManagerA?$AA@
0x180011440: "long __cdecl NS_LuaPriv::VfHookRegReplaceKeyA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64)" ?VfHookRegReplaceKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBD11@Z
0x180025548: "%hs%ws" ??_C@_1O@IKJIOKNJ@?$AA?$CF?$AAh?$AAs?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000E9B0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateJobObjectA(struct _SECURITY_ATTRIBUTES * __ptr64,char const * __ptr64)" ?VfHookCreateJobObjectA@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@PEBD@Z
0x1800279D8: "FILE_WRITE_DATA" ??_C@_0BA@PPPNMJAI@FILE_WRITE_DATA?$AA@
0x180027A20: "FILE_EXECUTE" ??_C@_0N@GCOKKDKC@FILE_EXECUTE?$AA@
0x180011500: "long __cdecl NS_LuaPriv::VfHookRegReplaceKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookRegReplaceKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBG11@Z
0x180002190: "int __cdecl NS_LuaPriv::CheckPrefixInsensitively(struct NS_LuaPriv::NAMEFN_ARGS * __ptr64)" ?CheckPrefixInsensitively@NS_LuaPriv@@YAHPEAUNAMEFN_ARGS@1@@Z
0x18002FF70: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::BackupEventLogWSemantics" ?BackupEventLogWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180023F20: "Monday" ??_C@_06JLEDEDGH@Monday?$AA@
0x180032F5C: "unsigned long VfProviderLoadedAsProvider" ?VfProviderLoadedAsProvider@@3KA
0x1800260B8: "RemoveDirectoryW" ??_C@_0BB@HGOEIPNP@RemoveDirectoryW?$AA@
0x180010690: "long __cdecl NS_LuaPriv::VfHookRegLoadKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookRegLoadKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBG1@Z
0x18002B180: "__cdecl _lconv_c" __lconv_c
0x180002788: "void __cdecl NS_LuaPriv::CheckTargetForFileCreationOrOverwrite(char const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?CheckTargetForFileCreationOrOverwrite@NS_LuaPriv@@YAXPEBDPEBG1K@Z
0x180022D18: "__cdecl _imp_HeapSize" __imp_HeapSize
0x1800024EC: "int __cdecl NS_LuaPriv::CheckParentDirectoryForAccess(char const * __ptr64,unsigned short const * __ptr64,unsigned long,enum NS_LuaPriv::OBJECT_DIRECTIVE_FLAGS)" ?CheckParentDirectoryForAccess@NS_LuaPriv@@YAHPEBDPEBGKW4OBJECT_DIRECTIVE_FLAGS@1@@Z
0x180017E38: "__cdecl wgetenv_helper_nolock" _wgetenv_helper_nolock
0x18002DF90: "struct NS_LuaPriv::__obj_data NS_LuaPriv::TimerObjectData" ?TimerObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180025698: "lpSourceName" ??_C@_0N@LMCNGMN@lpSourceName?$AA@
0x180030410: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileSectionWSemantics" ?WritePrivateProfileSectionWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800212BC: "__cdecl _imp_load_ClosePrinter" __imp_load_ClosePrinter
0x180022BB8: "__cdecl _imp_IsValidCodePage" __imp_IsValidCodePage
0x1800301A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenBackupEventLogWSemantics" ?OpenBackupEventLogWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027650: "WINTRUST.DLL" ??_C@_1BK@BLHFBFOL@?$AAW?$AAI?$AAN?$AAT?$AAR?$AAU?$AAS?$AAT?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180024438: "R6018 - unexpected heap error " ??_C@_0CB@GNHNIELH@R6018?$AN?6?9?5unexpected?5heap?5error?$AN?6@
0x180025E80: "GetFileAttributesExW" ??_C@_0BF@JODNCFOA@GetFileAttributesExW?$AA@
0x180026008: "OpenMutexA" ??_C@_0L@DJANNOJJ@OpenMutexA?$AA@
0x180007B90: "int __cdecl NS_LuaPriv::VfHookReplaceFileW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64,void * __ptr64)" ?VfHookReplaceFileW@NS_LuaPriv@@YAHPEBG00KPEAX1@Z
0x18001FD48: "__cdecl wctomb_s_l" _wctomb_s_l
0x180025318: "Eventlog" ??_C@_08BICJEHKP@Eventlog?$AA@
0x1800199BC: "__cdecl invalid_parameter" _invalid_parameter
0x180026480: "OpenServiceW" ??_C@_0N@NDJOABJF@OpenServiceW?$AA@
0x180030280: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumKeyASemantics" ?RegEnumKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180005AE0: "int __cdecl NS_LuaPriv::VfHookSetFileSecurityA(char const * __ptr64,unsigned long,void * __ptr64)" ?VfHookSetFileSecurityA@NS_LuaPriv@@YAHPEBDKPEAX@Z
0x180030650: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessWSemantics" ?CreateProcessWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180020340: realloc
0x1800240F8: "Saturday" ??_C@_1BC@ENMNNPAJ@?$AAS?$AAa?$AAt?$AAu?$AAr?$AAd?$AAa?$AAy?$AA?$AA@
0x180023F4C: "Friday" ??_C@_06JECMNKMI@Friday?$AA@
0x180016C30: "void __cdecl VfProviderHeapFreeCallback(void * __ptr64,unsigned __int64)" ?VfProviderHeapFreeCallback@@YAXPEAX_K@Z
0x180001530: ByteMatch
0x1800260E0: "ReplaceFileW" ??_C@_0N@FHJCLBAB@ReplaceFileW?$AA@
0x180024FD0: "short profile directory" ??_C@_0BI@CINGFHCE@short?5profile?5directory?$AA@
0x18001D8AC: "__cdecl _free_lconv_num" __free_lconv_num
0x1800242A8: "R6002 - floating point support " ??_C@_0CN@LEKKICBM@R6002?$AN?6?9?5floating?5point?5support?5@
0x1800304A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileValidDataSemantics" ?SetFileValidDataSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800349A0: "__cdecl _piob" __piob
0x180026598: "SetFileSecurityW" ??_C@_0BB@OAMPIGBG@SetFileSecurityW?$AA@
0x180022E40: "__cdecl _xp_z" __xp_z
0x18001AC3C: "__cdecl wcsnicoll" _wcsnicoll
0x180025488: "Unexpected error 0x%x reading ev" ??_C@_0CM@CGHGMOFJ@Unexpected?5error?50x?$CFx?5reading?5ev@
0x180020030: "__cdecl _DestructExceptionObject" __DestructExceptionObject
0x18002F090: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_KERNEL32_Thunks" ?VfProvider_KERNEL32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180004060: "int __cdecl NS_LuaPriv::CheckLuaAccess(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64)" ?CheckLuaAccess@NS_LuaPriv@@YAHPEAU__this_object@1@PEAX@Z
0x18002DDA8: "unsigned long NS_LuaPriv::cEventlogRights" ?cEventlogRights@NS_LuaPriv@@3KA
0x180014750: "void __cdecl NS_LuaPriv::FudgeGroupSize(struct NS_LuaPriv::TOKEN_MODIFIER_PARAMS * __ptr64)" ?FudgeGroupSize@NS_LuaPriv@@YAXPEAUTOKEN_MODIFIER_PARAMS@1@@Z
0x180022A08: "__cdecl _imp_SetFilePointerEx" __imp_SetFilePointerEx
0x180027230: "" "" ??_C@_17CMBJCHDO@?$AA?$CC?$AA?5?$AA?$CC?$AA?$AA@
0x180022B48: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180002B50: "int __cdecl NS_LuaPriv::CanonicalizeFilePathName(struct NS_LuaPriv::CANONICALIZE_PATH_ARGS * __ptr64)" ?CanonicalizeFilePathName@NS_LuaPriv@@YAHPEAUCANONICALIZE_PATH_ARGS@1@@Z
0x180025C10: "CreateEventA" ??_C@_0N@OJKGEAIG@CreateEventA?$AA@
0x1800259B0: "RegRestoreKeyA" ??_C@_0P@IPKDGIFM@RegRestoreKeyA?$AA@
0x180024820: " " ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x1800257D0: "RegEnumKeyExW" ??_C@_0O@NHPJLAPM@RegEnumKeyExW?$AA@
0x180022E58: "__cdecl _guard_fids_table" __guard_fids_table
0x180027C80: "SERVICE_USER_DEFINED_CONTROL" ??_C@_0BN@JPJCILBL@SERVICE_USER_DEFINED_CONTROL?$AA@
0x180027788: "PROCESS_CREATE_THREAD" ??_C@_0BG@MINMOFME@PROCESS_CREATE_THREAD?$AA@
0x180024158: "Oct" ??_C@_17FNLKOI@?$AAO?$AAc?$AAt?$AA?$AA@
0x1800302A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ReplaceFileWSemantics" ?ReplaceFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025FF8: "OpenJobObjectW" ??_C@_0P@HDKJJMCM@OpenJobObjectW?$AA@
0x1800349AC: "__cdecl nhandle" _nhandle
0x180024878: "Microsoft Visual C++ Runtime Lib" ??_C@_0CF@GOGNBNAK@Microsoft?5Visual?5C?$CL?$CL?5Runtime?5Lib@
0x1800227E0: "__cdecl load_config_used" _load_config_used
0x180025FA8: "OpenEventW" ??_C@_0L@BDHFJHNA@OpenEventW?$AA@
0x1800308B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::ReplaceFileASemantics" ?ReplaceFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027EB0: "SC_MANAGER_MODIFY_BOOT_CONFIG" ??_C@_0BO@ILEMOKED@SC_MANAGER_MODIFY_BOOT_CONFIG?$AA@
0x180030110: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileStringASemantics" ?WritePrivateProfileStringASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800275A8: "NETAPI32.DLL" ??_C@_1BK@ECNDHJLG@?$AAN?$AAE?$AAT?$AAA?$AAP?$AAI?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180002F48: "void __cdecl NS_LuaPriv::RegisterEventlogSource(char const * __ptr64,unsigned short const * __ptr64,void * __ptr64)" ?RegisterEventlogSource@NS_LuaPriv@@YAXPEBDPEBGPEAX@Z
0x180024B68: "Gentee.Installer" ??_C@_1CC@LDBBPNCH@?$AAG?$AAe?$AAn?$AAt?$AAe?$AAe?$AA?4?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x180022AF0: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x180033198: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUdrmwldhUzkkxlnkzgUhsrnhUoryUlyquivUznwGEUkivxlnkOlyq@ShimLib
0x180030160: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSaveKeyExASemantics" ?RegSaveKeyExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027BE0: "SERVICE_CHANGE_CONFIG" ??_C@_0BG@OJDOAAEF@SERVICE_CHANGE_CONFIG?$AA@
0x180030A60: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenEventLogASemantics" ?OpenEventLogASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800097D0: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileSectionW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookWritePrivateProfileSectionW@NS_LuaPriv@@YAHPEBG00@Z
0x18001EC74: "__cdecl getbuf" _getbuf
0x18000E750: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateWaitableTimerA(struct _SECURITY_ATTRIBUTES * __ptr64,int,char const * __ptr64)" ?VfHookCreateWaitableTimerA@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HPEBD@Z
0x1800243D8: "R6016 - not enough space for th" ??_C@_0CM@FAHFJNHO@R6016?$AN?6?9?5not?5enough?5space?5for?5th@
0x1800212C8: "__cdecl _imp_load_StringFromGUID2" __imp_load_StringFromGUID2
0x180023F64: "Jan" ??_C@_03JIHJHPIE@Jan?$AA@
0x180025EC8: "GetNamedSecurityInfoA" ??_C@_0BG@NNOBGLHD@GetNamedSecurityInfoA?$AA@
0x1800255E0: "lpSubKey" ??_C@_08FJCFFHEM@lpSubKey?$AA@
0x180030270: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessAsUserWSemantics" ?CreateProcessAsUserWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800304B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CheckTokenMembershipSemantics" ?CheckTokenMembershipSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025868: "RegNotifyChangeKeyValue" ??_C@_0BI@ILHBFDHH@RegNotifyChangeKeyValue?$AA@
0x1800110D0: "long __cdecl NS_LuaPriv::VfHookRegSetValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned long)" ?VfHookRegSetValueW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGK1K@Z
0x180026DB8: "SeDebugPrivilege" ??_C@_1CC@DMDJMJLM@?$AAS?$AAe?$AAD?$AAe?$AAb?$AAu?$AAg?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800300F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessAsUserASemantics" ?CreateProcessAsUserASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180020F50: "__cdecl commit" _commit
0x180032668: "__cdecl _app_type" __app_type
0x180022940: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorA" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorA
0x180030A20: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenWaitableTimerWSemantics" ?OpenWaitableTimerWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022CC0: "__cdecl _imp_GetConsoleCP" __imp_GetConsoleCP
0x18001D918: "__cdecl _free_lc_time" __free_lc_time
0x180025B60: "CloseHandle" ??_C@_0M@JHJNLFGC@CloseHandle?$AA@
0x180004A84: "public: __cdecl NS_LuaPriv::CSHIMHOOK::CSHIMHOOK(struct NS_LuaPriv::SHIMHOOK_SEMANTICS * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,void * __ptr64) __ptr64" ??0CSHIMHOOK@NS_LuaPriv@@QEAA@PEAUSHIMHOOK_SEMANTICS@1@PEAU__obj_data@1@PEAX@Z
0x180024ED8: "Gentee installer" ??_C@_0BB@EPMHNAFG@Gentee?5installer?$AA@
0x180022AE8: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180026728: "OpenPrinterW" ??_C@_0N@LCEDPELK@OpenPrinterW?$AA@
0x180024028: "dddd, MMMM dd, yyyy" ??_C@_0BE@CKGJFCPC@dddd?0?5MMMM?5dd?0?5yyyy?$AA@
0x180021231: FreeLibrary
0x180024B18: "RR.Raphael.Install.Builder" ??_C@_1DG@OJGJPGFN@?$AAR?$AAR?$AA?4?$AAR?$AAa?$AAp?$AAh?$AAa?$AAe?$AAl?$AA?4?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AA?4?$AAB?$AAu?$AAi?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x1800115C0: "long __cdecl NS_LuaPriv::VfHookRegRestoreKeyA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long)" ?VfHookRegRestoreKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDK@Z
0x180027670: "SHELL32.DLL" ??_C@_1BI@GFHOFLPL@?$AAS?$AAH?$AAE?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x18001792C: "__cdecl wcsnicmp_l" _wcsnicmp_l
0x180032F18: "void * __ptr64 __ptr64 NS_LuaPriv::s_hExitCodeMemMap" ?s_hExitCodeMemMap@NS_LuaPriv@@3PEAXEA
0x180026168: "SetNamedSecurityInfoA" ??_C@_0BG@CILHLCDC@SetNamedSecurityInfoA?$AA@
0x180022CA8: "__cdecl _imp_GetStringTypeW" __imp_GetStringTypeW
0x180011680: "long __cdecl NS_LuaPriv::VfHookRegRestoreKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?VfHookRegRestoreKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGK@Z
0x18001EF04: ferror
0x180023EF4: "__cdecl _lconv_static_W_decimal" __lconv_static_W_decimal
0x180025BB0: "CreateDirectoryA" ??_C@_0BB@IFBLICJB@CreateDirectoryA?$AA@
0x180023FF0: "November" ??_C@_08HCHEGEOA@November?$AA@
0x180013DC8: "int __cdecl NS_LuaPriv::AllFlagsKnown(class NS_LuaPriv::CSHIMHOOK * __ptr64,unsigned long,unsigned long)" ?AllFlagsKnown@NS_LuaPriv@@YAHPEAVCSHIMHOOK@1@KK@Z
0x18000446C: "int __cdecl NS_LuaPriv::CheckQueriedSecurity(char const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,unsigned short const * __ptr64,unsigned long,struct _ACL * __ptr64,void * __ptr64)" ?CheckQueriedSecurity@NS_LuaPriv@@YAHPEBDPEAU__obj_data@1@PEBGKPEAU_ACL@@PEAX@Z
0x180026D08: "SeCreatePermanentPrivilege" ??_C@_1DG@NDBAKHHP@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAe?$AAr?$AAm?$AAa?$AAn?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180027DC8: "TOKEN_ADJUST_PRIVILEGES" ??_C@_0BI@CBOKAIIH@TOKEN_ADJUST_PRIVILEGES?$AA@
0x180017520: "public: __cdecl _LocaleUpdate::_LocaleUpdate(struct localeinfo_struct * __ptr64) __ptr64" ??0_LocaleUpdate@@QEAA@PEAUlocaleinfo_struct@@@Z
0x18000D210: "long __cdecl NS_LuaPriv::VfHookRegCreateKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long,char * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?VfHookRegCreateKeyExA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDKPEADKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x1800328D0: "__cdecl environ" _environ
0x180025AA8: "FILE_WRITE_ATTRIBUTES" ??_C@_0BG@EAHOCAEJ@FILE_WRITE_ATTRIBUTES?$AA@
0x180032658: "__cdecl aenvptr" _aenvptr
0x180030340: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CopyFileASemantics" ?CopyFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800249E0: "Illustrate.Spoon.Installer" ??_C@_0BL@IANPBHBI@Illustrate?4Spoon?4Installer?$AA@
0x180013418: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180025E38: "GetCompressedFileSizeW" ??_C@_0BH@HLJHCEHG@GetCompressedFileSizeW?$AA@
0x180030220: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetTokenInformationSemantics" ?GetTokenInformationSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800253B8: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x180027F58: "__cdecl _pfnDliNotifyHook2" __pfnDliNotifyHook2
0x1800018EC: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180022D08: "__cdecl _imp_SetStdHandle" __imp_SetStdHandle
0x1800301B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSaveKeyWSemantics" ?RegSaveKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800311F8: CheckSdEventRights
0x1800252B0: "Directory" ??_C@_09EOAFACM@Directory?$AA@
0x180026CD0: "SeCreatePagefilePrivilege" ??_C@_1DE@JPAKAFPO@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAg?$AAe?$AAf?$AAi?$AAl?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800267C0: "LuaPriv: Attaching to process..." ??_C@_0CC@GHODJNM@LuaPriv?3?5Attaching?5to?5process?4?4?4@
0x180022B80: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180026060: "OpenSemaphoreW" ??_C@_0P@IAANIEOO@OpenSemaphoreW?$AA@
0x18000A7A0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenProcess(unsigned long,int,unsigned long)" ?VfHookOpenProcess@NS_LuaPriv@@YAPEAXKHK@Z
0x180027F38: "ResolveDelayLoadsFromDll" ??_C@_0BJ@ILPNKHOP@ResolveDelayLoadsFromDll?$AA@
0x180022C80: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180030580: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumValueASemantics" ?RegEnumValueASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180023F00: "Mon" ??_C@_03PDAGKDH@Mon?$AA@
0x180027528: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180008BE0: "int __cdecl NS_LuaPriv::VfHookGetFileAttributesExW(unsigned short const * __ptr64,enum _GET_FILEEX_INFO_LEVELS,void * __ptr64)" ?VfHookGetFileAttributesExW@NS_LuaPriv@@YAHPEBGW4_GET_FILEEX_INFO_LEVELS@@PEAX@Z
0x18002993C: "__cdecl _IMPORT_DESCRIPTOR_vrfcore" __IMPORT_DESCRIPTOR_vrfcore
0x1800170A0: "public: __cdecl CHandleList::CHandleList(void) __ptr64" ??0CHandleList@@QEAA@XZ
0x180024088: "Sunday" ??_C@_1O@IHNHDHPB@?$AAS?$AAu?$AAn?$AAd?$AAa?$AAy?$AA?$AA@
0x1800085D0: "unsigned long __cdecl NS_LuaPriv::VfHookGetNamedSecurityInfoW(unsigned short * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?VfHookGetNamedSecurityInfoW@NS_LuaPriv@@YAKPEAGW4_SE_OBJECT_TYPE@@KPEAPEAX2PEAPEAU_ACL@@32@Z
0x180025D70: "DeleteFileA" ??_C@_0M@CBNKJACB@DeleteFileA?$AA@
0x180030430: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetUserObjectSecuritySemantics" ?GetUserObjectSecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025EE0: "GetNamedSecurityInfoW" ??_C@_0BG@MBHJNOKE@GetNamedSecurityInfoW?$AA@
0x1800278F0: "[future expansion 0x4000]" ??_C@_0BK@JPEBNEAP@?$FLfuture?5expansion?50x4000?$FN?$AA@
0x18000F1C0: "int __cdecl NS_LuaPriv::VfHookCheckTokenMembership(void * __ptr64,void * __ptr64,int * __ptr64)" ?VfHookCheckTokenMembership@NS_LuaPriv@@YAHPEAX0PEAH@Z
0x180032D58: "int (__cdecl* __ptr64 _pnhHeap)(unsigned __int64)" ?_pnhHeap@@3P6AH_K@ZEA
0x180022CF8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180001B10: "int __cdecl NS_LuaPriv::ResolveFileObject(struct NS_LuaPriv::RESOLVEFN_ARGS * __ptr64)" ?ResolveFileObject@NS_LuaPriv@@YAHPEAURESOLVEFN_ARGS@1@@Z
0x1800258F8: "RegQueryValueExW" ??_C@_0BB@GLNAEDBD@RegQueryValueExW?$AA@
0x1800182B8: isleadbyte
0x180022930: "__cdecl _imp_GetSecurityDescriptorSacl" __imp_GetSecurityDescriptorSacl
0x180019A9C: "__cdecl encoded_null" _encoded_null
0x180031FB0: "__cdecl XcptActTabCount" _XcptActTabCount
0x180013090: "unsigned char __cdecl NS_LuaPriv::VfHookSetActivePwrScheme(unsigned int,struct _GLOBAL_POWER_POLICY * __ptr64,struct _POWER_POLICY * __ptr64)" ?VfHookSetActivePwrScheme@NS_LuaPriv@@YAEIPEAU_GLOBAL_POWER_POLICY@@PEAU_POWER_POLICY@@@Z
0x180018080: free
0x180025D58: "CreateWaitableTimerW" ??_C@_0BF@MGPDPGAO@CreateWaitableTimerW?$AA@
0x1800328F8: "__cdecl winminor" _winminor
0x18002FFE0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateWaitableTimerWSemantics" ?CreateWaitableTimerWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180019C48: "__cdecl getptd" _getptd
0x180023F98: "January" ??_C@_07CGJPFGJA@January?$AA@
0x1800273F0: "Global\SUAnalyzer_Mutex_Cmd" ??_C@_1DI@GKBDMCHG@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAM?$AAu?$AAt?$AAe?$AAx?$AA_?$AAC?$AAm?$AAd?$AA?$AA@
0x180011FA0: "int __cdecl NS_LuaPriv::VfHookSetFileValidData(void * __ptr64,__int64)" ?VfHookSetFileValidData@NS_LuaPriv@@YAHPEAX_J@Z
0x180025858: "KEY_NOTIFY" ??_C@_0L@JFKONFFF@KEY_NOTIFY?$AA@
0x180010E50: "long __cdecl NS_LuaPriv::VfHookRegQueryValueA(struct HKEY__ * __ptr64,char const * __ptr64,char * __ptr64,long * __ptr64)" ?VfHookRegQueryValueA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDPEADPEAJ@Z
0x180024060: "Tue" ??_C@_17BMKGEGOJ@?$AAT?$AAu?$AAe?$AA?$AA@
0x180030780: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateWaitableTimerASemantics" ?CreateWaitableTimerASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800229F8: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x1800256A8: "lpSN" ??_C@_04OCAMAFA@lpSN?$AA@
0x180010F20: "long __cdecl NS_LuaPriv::VfHookRegQueryValueW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,long * __ptr64)" ?VfHookRegQueryValueW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGPEAGPEAJ@Z
0x180023F14: "Sat" ??_C@_03FEFJNEK@Sat?$AA@
0x180022B88: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006310: "unsigned long __cdecl NS_LuaPriv::VfHookGetCompressedFileSizeA(char const * __ptr64,unsigned long * __ptr64)" ?VfHookGetCompressedFileSizeA@NS_LuaPriv@@YAKPEBDPEAK@Z
0x180010C70: "long __cdecl NS_LuaPriv::VfHookRegQueryValueExA(struct HKEY__ * __ptr64,char const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?VfHookRegQueryValueExA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDPEAK2PEAE2@Z
0x180023F18: "Sunday" ??_C@_06OOPIFAJ@Sunday?$AA@
0x180022AA8: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x180027F58: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18001FAD0: "__cdecl initp_misc_winsig" _initp_misc_winsig
0x180027B18: "TIMER_MODIFY_STATE" ??_C@_0BD@JAIKMGFE@TIMER_MODIFY_STATE?$AA@
0x180022BD0: "__cdecl _imp_GetCPInfo" __imp_GetCPInfo
0x180025B90: "CopyFileExW" ??_C@_0M@HGFIGBEM@CopyFileExW?$AA@
0x180008CC0: "unsigned long __cdecl NS_LuaPriv::VfHookGetCompressedFileSizeW(unsigned short const * __ptr64,unsigned long * __ptr64)" ?VfHookGetCompressedFileSizeW@NS_LuaPriv@@YAKPEBGPEAK@Z
0x180014410: "void __cdecl NS_LuaPriv::AnalyzeToken(void)" ?AnalyzeToken@NS_LuaPriv@@YAXXZ
0x1800248C0: "GetLastActivePopup" ??_C@_0BD@HHGDFDBJ@GetLastActivePopup?$AA@
0x180029914: "__cdecl _IMPORT_DESCRIPTOR_psapi" __IMPORT_DESCRIPTOR_psapi
0x180030450: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumKeyExWSemantics" ?RegEnumKeyExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800278A8: "PROCESS_QUERY_LIMITED_INFORMATIO" ??_C@_0CC@IPMINIDO@PROCESS_QUERY_LIMITED_INFORMATIO@
0x180022AF8: "__cdecl _imp_OpenFileMappingW" __imp_OpenFileMappingW
0x180027110: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180026A40: "TokenPrimaryGroup" ??_C@_0BC@HKIJAMBK@TokenPrimaryGroup?$AA@
0x180027B80: "SERVER_ACCESS_ENUMERATE" ??_C@_0BI@MINLPOPD@SERVER_ACCESS_ENUMERATE?$AA@
0x180016C30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180022AD0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18001DFB0: memcmp
0x1800136E4: "private: unsigned long __cdecl NS_LuaPriv::CAccessMask::AddMasks(unsigned long,struct NS_LuaPriv::ACCESS_DEFINITION * __ptr64,unsigned long) __ptr64" ?AddMasks@CAccessMask@NS_LuaPriv@@AEAAKKPEAUACCESS_DEFINITION@2@K@Z
0x18002B178: "__cdecl pwctype" _pwctype
0x1800306F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryMultipleValuesASemantics" ?RegQueryMultipleValuesASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000C240: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenWaitableTimerA(unsigned long,int,char const * __ptr64)" ?VfHookOpenWaitableTimerA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x180024308: "R6009 - not enough space for en" ??_C@_0CM@FLCNIPKK@R6009?$AN?6?9?5not?5enough?5space?5for?5en@
0x180024FB8: "USERPROFILE" ??_C@_1BI@FAOJLPH@?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x180026780: "%%hs%%hs succeeded for %%hs "%h" ??_C@_0DC@KMLKNHLA@?$CF?$CFhs?$CF?$CFhs?5succeeded?5for?5?$CF?$CFhs?5?5?$CC?$CFh@
0x180002C2C: "struct HKEY__ * __ptr64 __cdecl NS_LuaPriv::GetEventlogBaseKey(void)" ?GetEventlogBaseKey@NS_LuaPriv@@YAPEAUHKEY__@@XZ
0x180024F90: "Local\" ??_C@_1O@MHLCHDPA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AA?$AA@
0x18001382C: "public: __cdecl NS_LuaPriv::CAccessMask::CAccessMask(unsigned long,struct NS_LuaPriv::__obj_data * __ptr64) __ptr64" ??0CAccessMask@NS_LuaPriv@@QEAA@KPEAU__obj_data@1@@Z
0x180030860: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::BackupEventLogASemantics" ?BackupEventLogASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002FA38: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_SHELL32_Thunks" ?VfProvider_SHELL32_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180032F30: "void * __ptr64 __ptr64 NS_LuaPriv::s_hSendCmdEvent" ?s_hSendCmdEvent@NS_LuaPriv@@3PEAXEA
0x18000BFF0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenSemaphoreW(unsigned long,int,unsigned short const * __ptr64)" ?VfHookOpenSemaphoreW@NS_LuaPriv@@YAPEAXKHPEBG@Z
0x180024040: "HH:mm:ss" ??_C@_08JCCMCCIL@HH?3mm?3ss?$AA@
0x180016FDC: "public: int __cdecl CHandleTable::Lookup(void * __ptr64,class CTrackedHandle * __ptr64 * __ptr64) __ptr64" ?Lookup@CHandleTable@@QEAAHPEAXPEAPEAVCTrackedHandle@@@Z
0x18001DF0C: "__cdecl _crtGetStringTypeA" __crtGetStringTypeA
0x180026A10: "TokenGroups" ??_C@_0M@FCMPKGJC@TokenGroups?$AA@
0x180025970: "RegSetValueExW" ??_C@_0P@LIPJIDOO@RegSetValueExW?$AA@
0x180025F48: "MoveFileExW" ??_C@_0M@NIIDHDHA@MoveFileExW?$AA@
0x18000F6C0: "struct SC_HANDLE__ * __ptr64 __cdecl NS_LuaPriv::VfHookOpenServiceW(struct SC_HANDLE__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?VfHookOpenServiceW@NS_LuaPriv@@YAPEAUSC_HANDLE__@@PEAU2@PEBGK@Z
0x18001D730: "__cdecl _crtGetStringTypeW" __crtGetStringTypeW
0x180022D50: "__cdecl _imp_NtQueryObject" __imp_NtQueryObject
0x180030A10: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenBackupEventLogASemantics" ?OpenBackupEventLogASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024250: "MM/dd/yy" ??_C@_1BC@IEBCMHCM@?$AAM?$AAM?$AA?1?$AAd?$AAd?$AA?1?$AAy?$AAy?$AA?$AA@
0x1800225C0: StringTableInstallers
0x180030890: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WritePrivateProfileSectionASemantics" ?WritePrivateProfileSectionASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180012700: "long __cdecl NS_LuaPriv::VfHookNtCreateProcess(void * __ptr64 * __ptr64,unsigned long,struct _OBJECT_ATTRIBUTES * __ptr64,void * __ptr64,unsigned char,void * __ptr64,void * __ptr64,void * __ptr64)" ?VfHookNtCreateProcess@NS_LuaPriv@@YAJPEAPEAXKPEAU_OBJECT_ATTRIBUTES@@PEAXE222@Z
0x180024C48: "LauncherMain" ??_C@_1BK@CABPEANJ@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AAM?$AAa?$AAi?$AAn?$AA?$AA@
0x180017FDC: wcschr
0x180022988: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180025940: "RegSetValueA" ??_C@_0N@BIHOHIDB@RegSetValueA?$AA@
0x18001B158: "__cdecl mtinitlocknum" _mtinitlocknum
0x1800301D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenSCManagerASemantics" ?OpenSCManagerASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800213F0: "__cdecl CallSettingFrame" _CallSettingFrame
0x180029898: OLE32_NULL_THUNK_DATA_DLB
0x18002FFF0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumKeyWSemantics" ?RegEnumKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800300E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegisterEventSourceASemantics" ?RegisterEventSourceASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18002DE48: "unsigned short const * __ptr64 * NS_LuaPriv::g_GoodKernelPrefixes" ?g_GoodKernelPrefixes@NS_LuaPriv@@3PAPEBGA
0x1800307E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegOpenUserClassesRootSemantics" ?RegOpenUserClassesRootSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001348C: "long __cdecl StringCchPrintfExA(char * __ptr64,unsigned __int64,char * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,char const * __ptr64,...)" ?StringCchPrintfExA@@YAJPEAD_KPEAPEADPEA_KKPEBDZZ
0x180030790: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateProcessWithLogonWSemantics" ?CreateProcessWithLogonWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030910: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegisterEventSourceWSemantics" ?RegisterEventSourceWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800240D0: "Thursday" ??_C@_1BC@HHMNLIHE@?$AAT?$AAh?$AAu?$AAr?$AAs?$AAd?$AAa?$AAy?$AA?$AA@
0x180022B68: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180030740: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryValueExASemantics" ?RegQueryValueExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027568: "KERNEL32.DLL" ??_C@_1BK@DBDEIDLH@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x180024000: "December" ??_C@_08EDHMEBNP@December?$AA@
0x180024ED0: ".data" ??_C@_05LDKNOBJL@?4data?$AA@
0x180024FB0: "query" ??_C@_05BKABJGDH@query?$AA@
0x1800264F8: "RegOpenCurrentUser" ??_C@_0BD@OINALHPG@RegOpenCurrentUser?$AA@
0x1800308F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryValueASemantics" ?RegQueryValueASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800028A0: "int __cdecl NS_LuaPriv::OpenFileFor(struct NS_LuaPriv::OPENOBJ_ARGS * __ptr64)" ?OpenFileFor@NS_LuaPriv@@YAHPEAUOPENOBJ_ARGS@1@@Z
0x1800320BC: cCheckSdPrinterRights
0x180023F58: "Saturday" ??_C@_08INBOOONO@Saturday?$AA@
0x1800200A8: "__cdecl resetstkoflw" _resetstkoflw
0x180030040: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryValueExWSemantics" ?RegQueryValueExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026648: "CoCreateInstanceEx" ??_C@_0BD@PJCNOMMP@CoCreateInstanceEx?$AA@
0x1800221A0: ResourceDataMatchInstallers
0x180025BA0: "CopyFileW" ??_C@_09LILHBHJJ@CopyFileW?$AA@
0x18001585C: "void __cdecl NS_LuaPriv::ConsumeHandle(char const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,void * __ptr64,unsigned long,char const * __ptr64)" ?ConsumeHandle@NS_LuaPriv@@YAXPEBDPEAU__obj_data@1@PEAXK0@Z
0x180022010: "__cdecl _initiallocalestructinfo" __initiallocalestructinfo
0x1800306A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::NtCreateProcessExSemantics" ?NtCreateProcessExSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800262D8: "CheckTokenMembership" ??_C@_0BF@KEDGKLKA@CheckTokenMembership?$AA@
0x1800307C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetCompressedFileSizeWSemantics" ?GetCompressedFileSizeWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024FE8: "long profile directory" ??_C@_0BH@DFBEDDMH@long?5profile?5directory?$AA@
0x180024110: "Jan" ??_C@_17DKNBKCHM@?$AAJ?$AAa?$AAn?$AA?$AA@
0x180026440: "OpenBackupEventLogA" ??_C@_0BE@ILICGECB@OpenBackupEventLogA?$AA@
0x180025270: "Mutex" ??_C@_05IBGOOFKP@Mutex?$AA@
0x18001B23C: "__cdecl mtinitlocks" _mtinitlocks
0x1800268D0: "WH_MOUSE_LL" ??_C@_0M@OKPLJLEE@WH_MOUSE_LL?$AA@
0x180034C00: "__cdecl acmdln" _acmdln
0x180032F10: "void * __ptr64 __ptr64 NS_LuaPriv::s_hSendPidMutex" ?s_hSendPidMutex@NS_LuaPriv@@3PEAXEA
0x180007140: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileStructA(char const * __ptr64,char const * __ptr64,void * __ptr64,unsigned int,char const * __ptr64)" ?VfHookWritePrivateProfileStructA@NS_LuaPriv@@YAHPEBD0PEAXI0@Z
0x1800248A0: "MessageBoxA" ??_C@_0M@CHKKJDAI@MessageBoxA?$AA@
0x180024F88: "CRC1,0x" ??_C@_07LFGBPCBK@CRC1?00x?$AA@
0x1800255A8: "[Unknown Sid]" ??_C@_1BM@LACKCMKJ@?$AA?$FL?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAS?$AAi?$AAd?$AA?$FN?$AA?$AA@
0x180022D90: "__cdecl _imp_GetModuleBaseNameW" __imp_GetModuleBaseNameW
0x180022D88: ntdll_NULL_THUNK_DATA
0x180034BF0: "__cdecl _mbctype_initialized" __mbctype_initialized
0x180024C98: "PackageForTheWeb Fehler" ??_C@_1DA@POKHCEBI@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAF?$AAo?$AAr?$AAT?$AAh?$AAe?$AAW?$AAe?$AAb?$AA?5?$AAF?$AAe?$AAh?$AAl?$AAe?$AAr?$AA?$AA@
0x1800271D0: "Ini File name" ??_C@_0O@MBMGIMGK@Ini?5File?5name?$AA@
0x1800098E0: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileStructW(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,unsigned int,unsigned short const * __ptr64)" ?VfHookWritePrivateProfileStructW@NS_LuaPriv@@YAHPEBG0PEAXI0@Z
0x180022948: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x180026528: "RegisterEventSourceW" ??_C@_0BF@FNOHIELI@RegisterEventSourceW?$AA@
0x180026340: "CreateProcessAsUserA" ??_C@_0BF@FDFOBPKF@CreateProcessAsUserA?$AA@
0x18001696C: "int __cdecl NS_LuaPriv::IsProcessElevatedOnVista(unsigned short const * __ptr64)" ?IsProcessElevatedOnVista@NS_LuaPriv@@YAHPEBG@Z
0x1800212D4: "__cdecl _tailMerge_ole32_dll" __tailMerge_ole32_dll
0x180027748: "SYNCHRONIZE" ??_C@_0M@PGJGCCNK@SYNCHRONIZE?$AA@
0x1800300B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegReplaceKeyWSemantics" ?RegReplaceKeyWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800269D0: "\StringFileInfo\%04x%04x\%ws" ??_C@_1DK@PEMHMKPL@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x180030AD0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSaveKeyExWSemantics" ?RegSaveKeyExWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030200: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenEventLogWSemantics" ?OpenEventLogWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180024F60: "idska32" ??_C@_07BBDFFBN@idska32?$AA@
0x1800157CC: "int __cdecl NS_LuaPriv::TrackHandle(char const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,void * __ptr64,unsigned long,unsigned long)" ?TrackHandle@NS_LuaPriv@@YAHPEBDPEAU__obj_data@1@PEAXKK@Z
0x180027360: "Global\SUAnalyzer_Event_SendPid" ??_C@_1EA@BMBKABAO@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAS?$AAe?$AAn?$AAd?$AAP?$AAi?$AAd?$AA?$AA@
0x180026618: "RtlAdjustPrivilege" ??_C@_0BD@IKPAIGNL@RtlAdjustPrivilege?$AA@
0x180024940: "JR.Inno.Setup" ??_C@_0O@HEPPOCF@JR?4Inno?4Setup?$AA@
0x1800320A0: cCheckSdMutexRights
0x180024160: "Nov" ??_C@_17BBDMLCIG@?$AAN?$AAo?$AAv?$AA?$AA@
0x180011800: "long __cdecl NS_LuaPriv::VfHookRegSaveKeyW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64)" ?VfHookRegSaveKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGPEAU_SECURITY_ATTRIBUTES@@@Z
0x180030120: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenSemaphoreASemantics" ?OpenSemaphoreASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800268A0: "WH_KEYBOARD" ??_C@_0M@CDBMHJDD@WH_KEYBOARD?$AA@
0x180022978: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x180030130: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetEndOfFileSemantics" ?SetEndOfFileSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022950: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x180027738: "WRITE_OWNER" ??_C@_0M@OEMAHDKA@WRITE_OWNER?$AA@
0x180016C40: VfDllMainCRTStartup
0x1800256F0: "object name" ??_C@_0M@LKJHHNMP@object?5name?$AA@
0x18002DEF0: "struct NS_LuaPriv::__obj_data NS_LuaPriv::GenericKernelObjectData" ?GenericKernelObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180027208: "[lost]" ??_C@_1O@MAMIAGOH@?$AA?$FL?$AAl?$AAo?$AAs?$AAt?$AA?$FN?$AA?$AA@
0x180030260: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::NtCreateUserProcessSemantics" ?NtCreateUserProcessSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800315F0: CheckSdKeyRights
0x1800176B4: "__cdecl strnicmp_l" _strnicmp_l
0x180025D80: "DeleteFileW" ??_C@_0M@DNECCFPG@DeleteFileW?$AA@
0x180031920: "__cdecl _security_cookie" __security_cookie
0x180027AA8: "KEY_WOW64_RES" ??_C@_0O@KHCLIBIH@KEY_WOW64_RES?$AA@
0x1800241A8: "April" ??_C@_1M@GJNLMHFD@?$AAA?$AAp?$AAr?$AAi?$AAl?$AA?$AA@
0x180022958: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800183B8: "__cdecl _CRT_INIT" __CRT_INIT
0x180013BE0: "public: void __cdecl NS_LuaPriv::CUNICODE::Set(char const * __ptr64) __ptr64" ?Set@CUNICODE@NS_LuaPriv@@QEAAXPEBD@Z
0x180020B10: "__cdecl fptrap" _fptrap
0x18001A110: "__cdecl woutput_l" _woutput_l
0x180021370: "__cdecl alloca_probe" _alloca_probe
0x180005070: "int __cdecl NS_LuaPriv::VfHookCopyFileExA(char const * __ptr64,char const * __ptr64,unsigned long (__cdecl*)(union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,union _LARGE_INTEGER,unsigned long,unsigned long,void * __ptr64,void * __ptr64,void * __ptr64),void * __ptr64,int * __ptr64,unsigned long)" ?VfHookCopyFileExA@NS_LuaPriv@@YAHPEBD0P6AKT_LARGE_INTEGER@@111KKPEAX22@Z2PEAHK@Z
0x1800277D0: "PROCESS_VM_READ" ??_C@_0BA@BMCFFCKO@PROCESS_VM_READ?$AA@
0x180026358: "CreateProcessAsUserW" ??_C@_0BF@EPMGKKHC@CreateProcessAsUserW?$AA@
0x180030180: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RtlAdjustPrivilegeSemantics" ?RtlAdjustPrivilegeSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800257F0: "RegEnumValueA" ??_C@_0O@BKCMGKED@RegEnumValueA?$AA@
0x18002F9D8: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_POWRPROF_Thunks" ?VfProvider_POWRPROF_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x180022B08: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x1800229E0: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x180022A30: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180027428: "Global\SUAnalyzer_Mutex_Pid" ??_C@_1DI@DLGLGKI@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAM?$AAu?$AAt?$AAe?$AAx?$AA_?$AAP?$AAi?$AAd?$AA?$AA@
0x1800257B0: "RegEnumKeyW" ??_C@_0M@JAINDJJM@RegEnumKeyW?$AA@
0x1800145C0: "int __cdecl NS_LuaPriv::CopyTokenGroups(struct _TOKEN_GROUPS * __ptr64,unsigned long,unsigned long,unsigned long,void * __ptr64 * __ptr64,struct _TOKEN_GROUPS * __ptr64,unsigned long * __ptr64)" ?CopyTokenGroups@NS_LuaPriv@@YAHPEAU_TOKEN_GROUPS@@KKKPEAPEAX0PEAK@Z
0x180030970: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CopyFileWSemantics" ?CopyFileWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022AC0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180032660: "__cdecl wenvptr" _wenvptr
0x1800228F8: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180022DA0: "__cdecl _imp_VerifierGetRecursionTlsSlot" __imp_VerifierGetRecursionTlsSlot
0x1800251D8: "HKEY_PERFORMANCE_TEXT" ??_C@_1CM@BEDMOGEG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAT?$AAE?$AAX?$AAT?$AA?$AA@
0x180022DB8: "__cdecl _imp_VerifierIsLayerEnabled" __imp_VerifierIsLayerEnabled
0x180022B30: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x180022A18: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18002FF60: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSaveKeyASemantics" ?RegSaveKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180001B68: "int __cdecl NS_LuaPriv::CanonicalizePathname(char const * __ptr64,unsigned short const * __ptr64,unsigned long (__cdecl*)(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long),unsigned short const * __ptr64 * __ptr64)" ?CanonicalizePathname@NS_LuaPriv@@YAHPEBDPEBGP6AK1PEAGK@ZPEAPEBG@Z
0x18001CEE4: "__cdecl _crtGetEnvironmentStringsA" __crtGetEnvironmentStringsA
0x180017FFC: "__cdecl wcsdup" _wcsdup
0x18002B008: "__cdecl _ptlocinfo" __ptlocinfo
0x180027CC8: "SECTION_MAP_READ" ??_C@_0BB@DFOGKHCL@SECTION_MAP_READ?$AA@
0x180030A70: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumValueWSemantics" ?RegEnumValueWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180014294: "int __cdecl NS_LuaPriv::IsRunningOnVistaOrLater(void)" ?IsRunningOnVistaOrLater@NS_LuaPriv@@YAHXZ
0x180010830: "long __cdecl NS_LuaPriv::VfHookRegQueryInfoKeyA(struct HKEY__ * __ptr64,char * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?VfHookRegQueryInfoKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEADPEAK22222222PEAU_FILETIME@@@Z
0x180026300: "BackupEventLogW" ??_C@_0BA@HECNHGAA@BackupEventLogW?$AA@
0x18002055C: "__cdecl free_osfhnd" _free_osfhnd
0x180034BE0: "__cdecl _onexitbegin" __onexitbegin
0x180023FA0: "February" ??_C@_08GNJGEPFN@February?$AA@
0x18001B324: "__cdecl _crtGetEnvironmentStringsW" __crtGetEnvironmentStringsW
0x180025240: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x180023F70: "Apr" ??_C@_03LEOLGMJP@Apr?$AA@
0x180024CC8: "PackageForTheWeb ｴﾗｰ" ??_C@_1CK@LDGIDKFD@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAF?$AAo?$AAr?$AAT?$AAh?$AAe?$AAW?$AAe?$AAb?$AA?5?$PPt?$PP?$JH?$PPp?$AA?$AA@
0x1800206C4: "__cdecl putwch_nolock" _putwch_nolock
0x18002E570: "struct NS_LuaPriv::__obj_data NS_LuaPriv::SemaphoreObjectData" ?SemaphoreObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180024098: "Monday" ??_C@_1O@MMNBFLIA@?$AAM?$AAo?$AAn?$AAd?$AAa?$AAy?$AA?$AA@
0x180027858: "PROCESS_SUSPEND_RESUME" ??_C@_0BH@LFCPMENH@PROCESS_SUSPEND_RESUME?$AA@
0x180024D90: "EXE d'auto-extraction d'InstallS" ??_C@_1EM@NJFPDGIO@?$AAE?$AAX?$AAE?$AA?5?$AAd?$AA?8?$AAa?$AAu?$AAt?$AAo?$AA?9?$AAe?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AA?8?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS@
0x180030BE0: "struct _RTL_VERIFIER_DLL_DESCRIPTOR * VfProviderHooks" ?VfProviderHooks@@3PAU_RTL_VERIFIER_DLL_DESCRIPTOR@@A
0x18000EFC0: "long __cdecl NS_LuaPriv::VfHookRtlAdjustPrivilege(unsigned long,unsigned char,unsigned char,unsigned char * __ptr64)" ?VfHookRtlAdjustPrivilege@NS_LuaPriv@@YAJKEEPEAE@Z
0x180024B90: "Setup couldn't decompress the fi" ??_C@_1FC@GAGNECEB@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?5?$AAc?$AAo?$AAu?$AAl?$AAd?$AAn?$AA?8?$AAt?$AA?5?$AAd?$AAe?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAf?$AAi@
0x180019E5C: "__cdecl flsbuf" _flsbuf
0x180004748: "void __cdecl NS_LuaPriv::AnalyzeTokenMembership(void * __ptr64,void * __ptr64,int)" ?AnalyzeTokenMembership@NS_LuaPriv@@YAXPEAX0H@Z
0x180025708: "pid 0x%08x" ??_C@_1BG@HDJPOJHM@?$AAp?$AAi?$AAd?$AA?5?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
0x180005600: "int __cdecl NS_LuaPriv::VfHookRemoveDirectoryA(char const * __ptr64)" ?VfHookRemoveDirectoryA@NS_LuaPriv@@YAHPEBD@Z
0x1800264E0: "RegOpenUserClassesRoot" ??_C@_0BH@KFNIPFHH@RegOpenUserClassesRoot?$AA@
0x1800118C0: "long __cdecl NS_LuaPriv::VfHookRegSaveKeyExA(struct HKEY__ * __ptr64,char const * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,unsigned long)" ?VfHookRegSaveKeyExA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBDPEAU_SECURITY_ATTRIBUTES@@K@Z
0x180022D58: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x180022B98: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800138B0: "int __cdecl NS_LuaPriv::LogApiFail(char const * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64,void * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long)" ?LogApiFail@NS_LuaPriv@@YAHPEBDPEAU__obj_data@1@PEAXPEBGKK@Z
0x180022AB0: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x180017080: InsertHeadList
0x18001FF94: abort
0x180027C40: "SERVICE_STOP" ??_C@_0N@LMLKJKCB@SERVICE_STOP?$AA@
0x180031FC0: "__cdecl _badioinfo" __badioinfo
0x180027CE0: "SECTION_MAP_EXECUTE" ??_C@_0BE@NPJJFNNB@SECTION_MAP_EXECUTE?$AA@
0x180023FAC: "March" ??_C@_05HPCKOFNC@March?$AA@
0x1800298D8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180025CA0: "CreateJobObjectA" ??_C@_0BB@CLGDDGGI@CreateJobObjectA?$AA@
0x180006010: "int __cdecl NS_LuaPriv::VfHookGetFileSecurityA(char const * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?VfHookGetFileSecurityA@NS_LuaPriv@@YAHPEBDKPEAXKPEAK@Z
0x180022990: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180001F90: "unsigned long __cdecl NS_LuaPriv::GetPrinterSec(struct NS_LuaPriv::GETSECFN_ARGS * __ptr64)" ?GetPrinterSec@NS_LuaPriv@@YAKPEAUGETSECFN_ARGS@1@@Z
0x1800267B8: "%hs" ??_C@_17LGGGMOOB@?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x180026774: " %hs" ??_C@_04CNCGMIEH@?5?$CFhs?$AA@
0x1800328FC: "__cdecl exitflag" _exitflag
0x180030850: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegEnumKeyExASemantics" ?RegEnumKeyExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001CE0C: "__cdecl _security_init_cookie" __security_init_cookie
0x18001ACFC: "__cdecl wcsnicoll_l" _wcsnicoll_l
0x180022C00: "__cdecl _imp_FlsFree" __imp_FlsFree
0x180012060: "int __cdecl NS_LuaPriv::VfHookSetFileShortNameA(void * __ptr64,char const * __ptr64)" ?VfHookSetFileShortNameA@NS_LuaPriv@@YAHPEAXPEBD@Z
0x18000F270: "struct SC_HANDLE__ * __ptr64 __cdecl NS_LuaPriv::VfHookOpenSCManagerW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long)" ?VfHookOpenSCManagerW@NS_LuaPriv@@YAPEAUSC_HANDLE__@@PEBG0K@Z
0x180025960: "RegSetValueExA" ??_C@_0P@KEGBDGDJ@RegSetValueExA?$AA@
0x180030AC0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryMultipleValuesWSemantics" ?RegQueryMultipleValuesWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000F330: "struct SC_HANDLE__ * __ptr64 __cdecl NS_LuaPriv::VfHookOpenSCManagerA(char const * __ptr64,char const * __ptr64,unsigned long)" ?VfHookOpenSCManagerA@NS_LuaPriv@@YAPEAUSC_HANDLE__@@PEBD0K@Z
0x180032F50: pKernelObjectHandles
0x18002FF30: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenSemaphoreWSemantics" ?OpenSemaphoreWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025800: "RegEnumValueW" ??_C@_0O@GLENPJE@RegEnumValueW?$AA@
0x180022938: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x18002F010: "struct _RTL_VERIFIER_THUNK_DESCRIPTOR * NS_LuaPriv::VfProvider_WINSPOOL_Thunks" ?VfProvider_WINSPOOL_Thunks@NS_LuaPriv@@3PAU_RTL_VERIFIER_THUNK_DESCRIPTOR@@A
0x1800277E0: "PROCESS_VM_WRITE" ??_C@_0BB@OHODEBED@PROCESS_VM_WRITE?$AA@
0x180001964: "unsigned short * __ptr64 __cdecl NS_LuaPriv::GetWin32ObjectNameFromHandle(void * __ptr64)" ?GetWin32ObjectNameFromHandle@NS_LuaPriv@@YAPEAGPEAX@Z
0x180020B6C: "__cdecl _crtMessageBoxA" __crtMessageBoxA
0x180023F90: "Dec" ??_C@_03MKABNOCG@Dec?$AA@
0x180025920: "RegQueryValueW" ??_C@_0P@DPIKNKDP@RegQueryValueW?$AA@
0x180026150: "SetKernelObjectSecurity" ??_C@_0BI@CIHCMAMM@SetKernelObjectSecurity?$AA@
0x180026198: "SetSecurityInfo" ??_C@_0BA@KIJGHDEI@SetSecurityInfo?$AA@
0x180025720: "[HKEY_CURRENT_USER]" ??_C@_0BE@COIELFEN@?$FLHKEY_CURRENT_USER?$FN?$AA@
0x18001E080: "__cdecl isctype_l" _isctype_l
0x18000F0A0: "int __cdecl NS_LuaPriv::VfHookGetTokenInformation(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?VfHookGetTokenInformation@NS_LuaPriv@@YAHPEAXW4_TOKEN_INFORMATION_CLASS@@0KPEAK@Z
0x180025B38: "WriteFileGather" ??_C@_0BA@LCILKOMI@WriteFileGather?$AA@
0x180026758: " 0x%x" ??_C@_05JPFLBMGK@?50x?$CFx?$AA@
0x1800300A0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetCurrentDirectoryWSemantics" ?SetCurrentDirectoryWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180009C10: "int __cdecl NS_LuaPriv::VfHookCreateProcessW(unsigned short const * __ptr64,unsigned short * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,struct _SECURITY_ATTRIBUTES * __ptr64,int,unsigned long,void * __ptr64,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?VfHookCreateProcessW@NS_LuaPriv@@YAHPEBGPEAGPEAU_SECURITY_ATTRIBUTES@@2HKPEAX0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x1800240E8: "Friday" ??_C@_1O@PDICJHAG@?$AAF?$AAr?$AAi?$AAd?$AAa?$AAy?$AA?$AA@
0x180006F20: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileStringA(char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64)" ?VfHookWritePrivateProfileStringA@NS_LuaPriv@@YAHPEBD000@Z
0x1800307B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSetValueASemantics" ?RegSetValueASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000CE60: "long __cdecl NS_LuaPriv::VfHookRegCreateKeyExW(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long,unsigned long,struct _SECURITY_ATTRIBUTES * __ptr64,struct HKEY__ * __ptr64 * __ptr64,unsigned long * __ptr64)" ?VfHookRegCreateKeyExW@NS_LuaPriv@@YAJPEAUHKEY__@@PEBGKPEAGKKPEAU_SECURITY_ATTRIBUTES@@PEAPEAU2@PEAK@Z
0x180026ED8: "SeEnableDelegationPrivilege" ??_C@_1DI@HDBMKKGG@?$AAS?$AAe?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAD?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180032D88: "private: static class Replicator * __ptr64 __ptr64 UnDecorator::pArgList" ?pArgList@UnDecorator@@0PEAVReplicator@@EA
0x180030AE0: "struct _AVRF_LAYER_DESCRIPTOR VfLuaPrivLayerDescriptor" ?VfLuaPrivLayerDescriptor@@3U_AVRF_LAYER_DESCRIPTOR@@A
0x1800096C0: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileStringW(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookWritePrivateProfileStringW@NS_LuaPriv@@YAHPEBG000@Z
0x180022E50: "__cdecl _xt_z" __xt_z
0x180027810: "PROCESS_CREATE_PROCESS" ??_C@_0BH@OMLANPOG@PROCESS_CREATE_PROCESS?$AA@
0x180030190: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetCurrentDirectoryASemantics" ?SetCurrentDirectoryASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18001576C: "public: __cdecl NS_LuaPriv::CLuaPrivTrackedHandle::CLuaPrivTrackedHandle(void * __ptr64,char const * __ptr64,unsigned long,void * __ptr64,unsigned short const * __ptr64) __ptr64" ??0CLuaPrivTrackedHandle@NS_LuaPriv@@QEAA@PEAXPEBDK0PEBG@Z
0x180030920: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegSetValueWSemantics" ?RegSetValueWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180023F84: "Sep" ??_C@_03GGCAPAJC@Sep?$AA@
0x1800259D0: "RegSaveKeyA" ??_C@_0M@FHFEDNOM@RegSaveKeyA?$AA@
0x1800229D0: ADVAPI32_NULL_THUNK_DATA
0x180016C30: "__cdecl initp_misc_except" _initp_misc_except
0x180011DF0: "int __cdecl NS_LuaPriv::VfHookWriteFileEx(void * __ptr64,void const * __ptr64,unsigned long,struct _OVERLAPPED * __ptr64,void (__cdecl*)(unsigned long,unsigned long,struct _OVERLAPPED * __ptr64))" ?VfHookWriteFileEx@NS_LuaPriv@@YAHPEAXPEBXKPEAU_OVERLAPPED@@P6AXKK2@Z@Z
0x180030800: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetWindowsHookWSemantics" ?SetWindowsHookWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030840: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegReplaceKeyASemantics" ?RegReplaceKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022CB8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180022DD8: "__cdecl _imp_VerifierRegisterProvider" __imp_VerifierRegisterProvider
0x180026E80: "SeUndockPrivilege" ??_C@_1CE@CBEKCMOJ@?$AAS?$AAe?$AAU?$AAn?$AAd?$AAo?$AAc?$AAk?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180005BB0: "unsigned long __cdecl NS_LuaPriv::VfHookGetNamedSecurityInfoA(char * __ptr64,enum _SE_OBJECT_TYPE,unsigned long,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,struct _ACL * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?VfHookGetNamedSecurityInfoA@NS_LuaPriv@@YAKPEADW4_SE_OBJECT_TYPE@@KPEAPEAX2PEAPEAU_ACL@@32@Z
0x180030940: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::FlushFileBuffersSemantics" ?FlushFileBuffersSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800349C0: "__cdecl _pioinfo" __pioinfo
0x1800227A0: g_nMethods
0x180017C10: "__cdecl wcsicmp_l" _wcsicmp_l
0x180032EA8: "__cdecl _hmod__WINSPOOL_DRV" __hmod__WINSPOOL_DRV
0x180012BC0: "long __cdecl NS_LuaPriv::VfHookCoGetClassObject(struct _GUID const & __ptr64,unsigned long,void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?VfHookCoGetClassObject@NS_LuaPriv@@YAJAEBU_GUID@@KPEAX0PEAPEAX@Z
0x1800266E8: "SetWindowsHookExA" ??_C@_0BC@BDBJGNEH@SetWindowsHookExA?$AA@
0x18003267C: "__cdecl _mblcid" __mblcid
0x180030710: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegQueryValueWSemantics" ?RegQueryValueWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180013F2C: "public: void __cdecl NS_LuaPriv::CSHIMHOOK::CheckSecurity(void) __ptr64" ?CheckSecurity@CSHIMHOOK@NS_LuaPriv@@QEAAXXZ
0x1800260A0: "RemoveDirectoryA" ??_C@_0BB@GKHMDKAI@RemoveDirectoryA?$AA@
0x1800303C0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetFileTimeSemantics" ?SetFileTimeSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000E270: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateEventA(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,char const * __ptr64)" ?VfHookCreateEventA@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBD@Z
0x1800198E4: "__cdecl _doserrno" __doserrno
0x1800302E0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::DeleteFileASemantics" ?DeleteFileASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000FF60: "long __cdecl NS_LuaPriv::VfHookRegEnumKeyA(struct HKEY__ * __ptr64,unsigned long,char * __ptr64,unsigned long)" ?VfHookRegEnumKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@KPEADK@Z
0x18002B220: "__cdecl _lc_time_c" __lc_time_c
0x1800275C8: "NTDLL.DLL" ??_C@_1BE@LCNNIAEL@?$AAN?$AAT?$AAD?$AAL?$AAL?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x18001F7C4: "__cdecl FF_MSGBANNER" _FF_MSGBANNER
0x180034BF4: "__cdecl _env_initialized" __env_initialized
0x180020DE0: "__cdecl _termcon" __termcon
0x180018100: "__cdecl _report_gsfailure" __report_gsfailure
0x180003200: "void __cdecl NS_LuaPriv::DumpSecurityDescriptor(int,struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64)" ?DumpSecurityDescriptor@NS_LuaPriv@@YAXHPEAU__this_object@1@PEAX@Z
0x180030550: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::GetCompressedFileSizeASemantics" ?GetCompressedFileSizeASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180032674: "__cdecl _mbcodepage" __mbcodepage
0x180012FC0: "unsigned long __cdecl NS_LuaPriv::VfHookNetUserGetInfo(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64)" ?VfHookNetUserGetInfo@NS_LuaPriv@@YAKPEBG0KPEAPEAE@Z
0x180023F08: "Wed" ??_C@_03MHOMLAJA@Wed?$AA@
0x180026860: "WH_GETMESSAGE" ??_C@_0O@OHMMONNB@WH_GETMESSAGE?$AA@
0x180024F10: "NullSoftInst" ??_C@_0N@DDCDBLNM@NullSoftInst?$AA@
0x18000F430: "struct SC_HANDLE__ * __ptr64 __cdecl NS_LuaPriv::VfHookOpenServiceA(struct SC_HANDLE__ * __ptr64,char const * __ptr64,unsigned long)" ?VfHookOpenServiceA@NS_LuaPriv@@YAPEAUSC_HANDLE__@@PEAU2@PEBDK@Z
0x180032910: "__cdecl _initenv" __initenv
0x180022C18: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180024130: "May" ??_C@_17PNNKMEED@?$AAM?$AAa?$AAy?$AA?$AA@
0x180026F10: "SeManageVolumePrivilege" ??_C@_1DA@LIHDNJND@?$AAS?$AAe?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180034C08: DloadKernel32
0x180022DA8: "__cdecl _imp_VerifierStopMessageEx" __imp_VerifierStopMessageEx
0x180025FB8: "OpenFileMappingA" ??_C@_0BB@LOCJLGON@OpenFileMappingA?$AA@
0x180027460: "Global\SUAnalyzer_MemMap_Cmd" ??_C@_1DK@LOCBLLCG@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAM?$AAe?$AAm?$AAM?$AAa?$AAp?$AA_?$AAC?$AAm?$AAd?$AA?$AA@
0x180025F10: "SetUserObjectSecurity" ??_C@_0BG@OFMEHKFC@SetUserObjectSecurity?$AA@
0x180020E18: "__cdecl _initconout" __initconout
0x180025810: "READ_CONTROL" ??_C@_0N@LHHPNLKB@READ_CONTROL?$AA@
0x180024910: "CONOUT$" ??_C@_1BA@BALFACEM@?$AAC?$AAO?$AAN?$AAO?$AAU?$AAT?$AA$?$AA?$AA@
0x180027840: "PROCESS_SET_INFORMATION" ??_C@_0BI@BPHMODIJ@PROCESS_SET_INFORMATION?$AA@
0x180009250: "void * __ptr64 __cdecl NS_LuaPriv::VfHookRegisterEventSourceW(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?VfHookRegisterEventSourceW@NS_LuaPriv@@YAPEAXPEBG0@Z
0x180030A40: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::OpenSCManagerWSemantics" ?OpenSCManagerWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027E28: "SC_MANAGER_CONNECT" ??_C@_0BD@IOJHIGEA@SC_MANAGER_CONNECT?$AA@
0x1800328E8: "__cdecl osplatform" _osplatform
0x180015060: "int __cdecl NS_LuaPriv::GetIniFileFullPath(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetIniFileFullPath@NS_LuaPriv@@YAHPEBGPEAPEAG@Z
0x180025528: "Application" ??_C@_1BI@JBDNBBGL@?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x180032678: "__cdecl _ismbcodepage" __ismbcodepage
0x1800105D0: "long __cdecl NS_LuaPriv::VfHookRegLoadKeyA(struct HKEY__ * __ptr64,char const * __ptr64,char const * __ptr64)" ?VfHookRegLoadKeyA@NS_LuaPriv@@YAJPEAUHKEY__@@PEBD1@Z
0x18002E7F0: ?SeInfoAccessRequired@NS_LuaPriv@@3PAU<unnamed-type-SeInfoAccessRequired>@1@A
0x180025EB0: "GetKernelObjectSecurity" ??_C@_0BI@DOBPCBKO@GetKernelObjectSecurity?$AA@
0x18002E6B0: "struct NS_LuaPriv::__obj_data NS_LuaPriv::FileObjectData" ?FileObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x18000BD70: "void * __ptr64 __cdecl NS_LuaPriv::VfHookOpenSemaphoreA(unsigned long,int,char const * __ptr64)" ?VfHookOpenSemaphoreA@NS_LuaPriv@@YAPEAXKHPEBD@Z
0x180026560: "ReportEventA" ??_C@_0N@PKNECLKP@ReportEventA?$AA@
0x180022A68: "__cdecl _imp_LoadResource" __imp_LoadResource
0x180030070: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateHardLinkWSemantics" ?CreateHardLinkWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180008160: "int __cdecl NS_LuaPriv::VfHookRemoveDirectoryW(unsigned short const * __ptr64)" ?VfHookRemoveDirectoryW@NS_LuaPriv@@YAHPEBG@Z
0x180027888: "PROCESS_QUERY_INFORMATION" ??_C@_0BK@LKPGPBDD@PROCESS_QUERY_INFORMATION?$AA@
0x180027070: "SeDelegateSessionUserImpersonate" ??_C@_1FE@NGKIPFAI@?$AAS?$AAe?$AAD?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AAI?$AAm?$AAp?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAt?$AAe@
0x1800274E8: "Global\SUAnalyzer_MemMap_Pid" ??_C@_1DK@NHIEMPPI@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAM?$AAe?$AAm?$AAM?$AAa?$AAp?$AA_?$AAP?$AAi?$AAd?$AA?$AA@
0x180006A10: "void * __ptr64 __cdecl NS_LuaPriv::VfHookRegisterEventSourceA(char const * __ptr64,char const * __ptr64)" ?VfHookRegisterEventSourceA@NS_LuaPriv@@YAPEAXPEBD0@Z
0x1800310A0: CheckSdTokenRights
0x180026B58: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180024DE0: "Autoextractor EXE de InstallShie" ??_C@_1EG@EJOJHEFA@?$AAA?$AAu?$AAt?$AAo?$AAe?$AAx?$AAt?$AAr?$AAa?$AAc?$AAt?$AAo?$AAr?$AA?5?$AAE?$AAX?$AAE?$AA?5?$AAd?$AAe?$AA?5?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAS?$AAh?$AAi?$AAe@
0x180037008: OLE32_NULL_THUNK_DATA_DLA
0x1800307F0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WinVerifyTrustSemantics" ?WinVerifyTrustSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x1800318D0: CheckSdMutexRights
0x180024858: "<program name unknown>" ??_C@_0BH@DNAGHKFM@?$DMprogram?5name?5unknown?$DO?$AA@
0x180026FA0: "SeTrustedCredManAccessPrivilege" ??_C@_1EA@ELNOHCCG@?$AAS?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAC?$AAr?$AAe?$AAd?$AAM?$AAa?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18002B010: "__cdecl _initiallocinfo" __initiallocinfo
0x1800251A8: "HKEY_PERFORMANCE_DATA" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180024180: "February" ??_C@_1BC@JGDDFFAM@?$AAF?$AAe?$AAb?$AAr?$AAu?$AAa?$AAr?$AAy?$AA?$AA@
0x180020D88: "__cdecl msize" _msize
0x18001B420: "__cdecl _crtExitProcess" __crtExitProcess
0x18002FF00: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateSemaphoreWSemantics" ?CreateSemaphoreWSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x18000E3D0: "void * __ptr64 __cdecl NS_LuaPriv::VfHookCreateEventW(struct _SECURITY_ATTRIBUTES * __ptr64,int,int,unsigned short const * __ptr64)" ?VfHookCreateEventW@NS_LuaPriv@@YAPEAXPEAU_SECURITY_ATTRIBUTES@@HHPEBG@Z
0x18001ECE0: "__cdecl _initstdio" __initstdio
0x180025FD0: "OpenFileMappingW" ??_C@_0BB@KCLBADDK@OpenFileMappingW?$AA@
0x1800302B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::CreateSemaphoreASemantics" ?CreateSemaphoreASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180022900: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180004378: "void __cdecl NS_LuaPriv::CheckNamespaceOnCreatedObject(char const * __ptr64,unsigned short const * __ptr64,void * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64)" ?CheckNamespaceOnCreatedObject@NS_LuaPriv@@YAXPEBDPEBGPEAXPEAU__obj_data@1@@Z
0x180026970: "OriginalFilename" ??_C@_1CC@CHBCEHAO@?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAa?$AAl?$AAF?$AAi?$AAl?$AAe?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x180016F34: "public: int __cdecl CHandleTable::Add(class CTrackedHandle * __ptr64) __ptr64" ?Add@CHandleTable@@QEAAHPEAVCTrackedHandle@@@Z
0x180027930: "JOB_OBJECT_ASSIGN_PROCESS" ??_C@_0BK@IICGIDOC@JOB_OBJECT_ASSIGN_PROCESS?$AA@
0x180022B10: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180025518: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800239E0: "__cdecl wctype" _wctype
0x18001CCC4: "__cdecl setenvp" _setenvp
0x18001EDD0: "__cdecl _endstdio" __endstdio
0x18002E390: "struct NS_LuaPriv::__obj_data NS_LuaPriv::SectionObjectData" ?SectionObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180010500: "long __cdecl NS_LuaPriv::VfHookRegGetKeySecurity(struct HKEY__ * __ptr64,unsigned long,void * __ptr64,unsigned long * __ptr64)" ?VfHookRegGetKeySecurity@NS_LuaPriv@@YAJPEAUHKEY__@@KPEAXPEAK@Z
0x180022D60: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x180024138: "Jun" ??_C@_17KCJGOCPB@?$AAJ?$AAu?$AAn?$AA?$AA@
0x180014780: "void __cdecl NS_LuaPriv::FudgeGroups(struct NS_LuaPriv::TOKEN_MODIFIER_PARAMS * __ptr64)" ?FudgeGroups@NS_LuaPriv@@YAXPEAUTOKEN_MODIFIER_PARAMS@1@@Z
0x1800273A0: "Global\SUAnalyzer_Event_PidProce" ??_C@_1EK@CDMMBCJN@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAU?$AAA?$AAn?$AAa?$AAl?$AAy?$AAz?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AAP?$AAi?$AAd?$AAP?$AAr?$AAo?$AAc?$AAe@
0x180025DB0: "FindFirstChangeNotificationW" ??_C@_0BN@EKHEGJHP@FindFirstChangeNotificationW?$AA@
0x1800089F0: "int __cdecl NS_LuaPriv::VfHookGetFileSecurityW(unsigned short const * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?VfHookGetFileSecurityW@NS_LuaPriv@@YAHPEBGKPEAXKPEAK@Z
0x18001FAF0: raise
0x180003EBC: "int __cdecl NS_LuaPriv::AnalyzeObjectIntegrityLabel(struct NS_LuaPriv::__this_object * __ptr64,void * __ptr64)" ?AnalyzeObjectIntegrityLabel@NS_LuaPriv@@YAHPEAU__this_object@1@PEAX@Z
0x1800259F0: "RegSaveKeyExA" ??_C@_0O@JGEBHHFO@RegSaveKeyExA?$AA@
0x180030870: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetUserObjectSecuritySemantics" ?SetUserObjectSecuritySemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180025CD0: "CreateMutexA" ??_C@_0N@NPEGLMBI@CreateMutexA?$AA@
0x180018974: wcscpy_s
0x180031450: CheckSdProcessRights
0x180026490: "RegCloseKey" ??_C@_0M@HLOHPNFA@RegCloseKey?$AA@
0x180031B40: "__cdecl _initialmbcinfo" __initialmbcinfo
0x18002E080: "struct NS_LuaPriv::__obj_data NS_LuaPriv::ServiceControlManagerObjectData" ?ServiceControlManagerObjectData@NS_LuaPriv@@3U__obj_data@1@A
0x180026718: "OpenPrinterA" ??_C@_0N@KONLEBGN@OpenPrinterA?$AA@
0x180030320: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::SetWindowsHookExASemantics" ?SetWindowsHookExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180026E08: "SeSystemEnvironmentPrivilege" ??_C@_1DK@IKHCMBBJ@?$AAS?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180026F70: "SeCreateGlobalPrivilege" ??_C@_1DA@PNNNMOAF@?$AAS?$AAe?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180025090: "Global\" ??_C@_1BA@LJDFMAL@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AA?$AA@
0x1800308D0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegDeleteKeyASemantics" ?RegDeleteKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180030600: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::RegUnLoadKeyASemantics" ?RegUnLoadKeyASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180007030: "int __cdecl NS_LuaPriv::VfHookWritePrivateProfileSectionA(char const * __ptr64,char const * __ptr64,char const * __ptr64)" ?VfHookWritePrivateProfileSectionA@NS_LuaPriv@@YAHPEBD00@Z
0x18001EF54: "__cdecl fputwc_nolock" _fputwc_nolock
0x180018AB0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180025A00: "RegSaveKeyExW" ??_C@_0O@IKNJMCIJ@RegSaveKeyExW?$AA@
0x180015534: "void __cdecl NS_LuaPriv::CheckProfileWrite(char const * __ptr64,char const * __ptr64,char const * __ptr64,char const * __ptr64,int,unsigned long,int)" ?CheckProfileWrite@NS_LuaPriv@@YAXPEBD000HKH@Z
0x1800228F0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180012AE0: "long __cdecl NS_LuaPriv::VfHookCoCreateInstanceEx(struct _GUID const & __ptr64,struct IUnknown * __ptr64,unsigned long,struct _COSERVERINFO * __ptr64,unsigned long,struct tagMULTI_QI * __ptr64)" ?VfHookCoCreateInstanceEx@NS_LuaPriv@@YAJAEBU_GUID@@PEAUIUnknown@@KPEAU_COSERVERINFO@@KPEAUtagMULTI_QI@@@Z
0x180027218: "0x%08x" ??_C@_06BJBFBFHM@0x?$CF08x?$AA@
0x18002FB00: "struct NS_LuaPriv::PRIVILEGE * NS_LuaPriv::Privileges" ?Privileges@NS_LuaPriv@@3PAUPRIVILEGE@1@A
0x180027710: "GENERIC_READ" ??_C@_0N@INABCMMB@GENERIC_READ?$AA@
0x1800255C8: "present" ??_C@_07KONDCJBL@present?$AA@
0x180030250: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::WriteFileGatherSemantics" ?WriteFileGatherSemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180018A50: "__cdecl _NLG_Return2" __NLG_Return2
0x1800309B0: "struct NS_LuaPriv::SHIMHOOK_SEMANTICS NS_LuaPriv::MoveFileExASemantics" ?MoveFileExASemantics@NS_LuaPriv@@3USHIMHOOK_SEMANTICS@1@A
0x180027100: "SYS:" ??_C@_19BBLDCALD@?$AAS?$AAY?$AAS?$AA?3?$AA?$AA@
0x180010970: "long __cdecl NS_LuaPriv::VfHookRegQueryInfoKeyW(struct HKEY__ * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?VfHookRegQueryInfoKeyW@NS_LuaPriv@@YAJPEAUHKEY__@@PEAGPEAK22222222PEAU_FILETIME@@@Z
0x1800320C0: cCheckSdDirectoryRights
0x180027950: "JOB_OBJECT_SET_ATTRIBUTES" ??_C@_0BK@LKEEIAJA@JOB_OBJECT_SET_ATTRIBUTES?$AA@
0x180013A64: "void __cdecl NS_LuaPriv::LogApiSuccess(char const * __ptr64,char const * __ptr64,void * __ptr64,unsigned long,void * __ptr64,struct NS_LuaPriv::__obj_data * __ptr64)" ?LogApiSuccess@NS_LuaPriv@@YAXPEBD0PEAXK1PEAU__obj_data@1@@Z
0x180021780: memset
0x180029950: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180025E50: "GetFileAttributesA" ??_C@_0BD@DJMMCMCB@GetFileAttributesA?$AA@
0x180026EA8: "SeSyncAgentPrivilege" ??_C@_1CK@KGLBCJFN@?$AAS?$AAe?$AAS?$AAy?$AAn?$AAc?$AAA?$AAg?$AAe?$AAn?$AAt?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x1800227B0: ByteMatchSectionInstallers
0x180002AB0: "int __cdecl NS_LuaPriv::CanonicalizeStdPathNameWithParentHandle(struct NS_LuaPriv::CANONICALIZE_PATH_ARGS * __ptr64)" ?CanonicalizeStdPathNameWithParentHandle@NS_LuaPriv@@YAHPEAUCANONICALIZE_PATH_ARGS@1@@Z
0x180022B60: "__cdecl _imp_ReadFile" __imp_ReadFile
0x1800221F0: ByteMatchAppendedDataInstallers
0x180027630: "WINSPOOL.DRV" ??_C@_1BK@KNFKLOBK@?$AAW?$AAI?$AAN?$AAS?$AAP?$AAO?$AAO?$AAL?$AA?4?$AAD?$AAR?$AAV?$AA?$AA@

[JEB Decompiler by PNF Software]