Generated by JEB on 2019/08/01
PE: C:\Windows\System32\mountvol.exe Base=0x140000000 SHA-256=0B6BBFD83C4A34DF78289470FF338E93F5A769317015043A121349A7836D8862
PDB: mountvol.pdb GUID={7A662959-2A83-0E56-4794D67F79B69A00} Age=1
183 located named symbols:
0x1400026C4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400031A8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140002AB0: "__cdecl FindPESection" _FindPESection
0x140001008: StringCchCatW
0x140003920: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140003350: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003200: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x140003288: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140002D60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003160: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140003170: "__cdecl _imp_FindNextVolumeW" __imp_FindNextVolumeW
0x140003198: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x1400038E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-1
0x1400055C0: "__cdecl commode" _commode
0x140003970: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x1400038D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1400031F8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140003220: "__cdecl _imp_FindVolumeMountPointClose" __imp_FindVolumeMountPointClose
0x1400031D8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002980: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400033B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400055CC: "__cdecl fmode" _fmode
0x140003250: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140001E0C: main
0x1400039D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x140005600: IsConsoleOutput
0x1400029DE: "__cdecl XcptFilter" _XcptFilter
0x1400033B8: "__cdecl _xc_a" __xc_a
0x1400031A0: "__cdecl _imp_DefineDosDeviceW" __imp_DefineDosDeviceW
0x1400031E0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140003268: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140002D36: memcpy
0x140003388: "__cdecl _imp_memset" __imp_memset
0x1400031C0: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x140002C6F: "__cdecl initterm" _initterm
0x140003A4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400055F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400032E8: "__cdecl _imp_Sleep" __imp_Sleep
0x1400033E8: "__cdecl _xi_z" __xi_z
0x140003138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140002C7B: "__cdecl _C_specific_handler" __C_specific_handler
0x140003210: "__cdecl _imp_FindFirstVolumeMountPointW" __imp_FindFirstVolumeMountPointW
0x140003228: "__cdecl _imp_SetVolumeMountPointW" __imp_SetVolumeMountPointW
0x1400031D0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140002CCC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140003148: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x14000112C: DisplayIt
0x140001BBC: DoPermanentDismount
0x140003414: "_" ??_C@_01IDAFKMJL@_?$AA@
0x1400032D0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140002A93: "__cdecl amsg_exit" _amsg_exit
0x140003340: "__cdecl _imp_exit" __imp_exit
0x1400032C8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x140003230: api-ms-win-core-kernel32-legacy-l1-1-1_NULL_THUNK_DATA
0x140003158: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140003270: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400055E0: "__cdecl _native_startup_lock" __native_startup_lock
0x1400029C0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400039C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140003328: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400032B0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140003240: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140003150: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002CA8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140003370: "__cdecl _imp__commode" __imp__commode
0x140003310: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140003280: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140002B60: "__cdecl ValidateImageBase" _ValidateImageBase
0x140002670: mainCRTStartup
0x140003A24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140003410: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1400031B8: "__cdecl _imp_GetVolumeNameForVolumeMountPointW" __imp_GetVolumeNameForVolumeMountPointW
0x140003178: "__cdecl _imp_DeleteVolumeMountPointW" __imp_DeleteVolumeMountPointW
0x1400032E0: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1400055C8: "__cdecl newmode" _newmode
0x140003320: "__cdecl _imp__initterm" __imp__initterm
0x140003348: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140003168: "__cdecl _imp_FindFirstVolumeW" __imp_FindFirstVolumeW
0x140002AA0: "__cdecl setargv" _setargv
0x140003130: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140003984: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x14000137C: IsVolumeOffline
0x1400010AC: StringCchPrintfW
0x1400055D0: "__cdecl _onexitend" __onexitend
0x140003330: "__cdecl _imp__exit" __imp__exit
0x1400033A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003278: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003120: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x140003308: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400033D0: "__cdecl _xi_a" __xi_a
0x140003300: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002AA0: "__cdecl matherr" _matherr
0x1400016BC: PrintVolumeList
0x140003180: "__cdecl _imp_QueryDosDeviceW" __imp_QueryDosDeviceW
0x140003A10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140002878: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140003118: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x1400039AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1400026A0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400033C8: "__cdecl _xc_z" __xc_z
0x14000395C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140003290: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140003378: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003208: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1400032F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140003418: "\\.\MountPointManager" ??_C@_1CM@HDGAIJEN@?$AA?2?$AA?2?$AA?4?$AA?2?$AAM?$AAo?$AAu?$AAn?$AAt?$AAP?$AAo?$AAi?$AAn?$AAt?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x140003260: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x1400031E8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140002D80: "__cdecl _chkstk" __chkstk
0x140001314: IsEfi
0x1400032C0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400039FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1400032A0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400033F0: "__cdecl _guard_fids_table" __guard_fids_table
0x1400032D8: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x140003390: msvcrt_NULL_THUNK_DATA
0x140003010: "__cdecl load_config_used" _load_config_used
0x1400031B0: "__cdecl _imp_GetVolumePathNamesForVolumeNameW" __imp_GetVolumePathNamesForVolumeNameW
0x140001528: SetAutoMountState
0x140003934: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x140001440: GetSystemPartition
0x14000390C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400055F8: OutputFile
0x140003358: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400032A8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140003298: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400055C4: "__cdecl dowildcard" _dowildcard
0x140001210: PrintMessage
0x1400032B8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140002C90: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140003258: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1400029EC: RtlpImageNtHeader
0x140003998: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140003238: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003360: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140003248: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x1400033A0: ntdll_NULL_THUNK_DATA
0x140003338: "__cdecl _imp_memcpy" __imp_memcpy
0x1400015DC: PrintMappedESP
0x140005008: "__cdecl _security_cookie" __security_cookie
0x140002D80: "__cdecl alloca_probe" _alloca_probe
0x1400031C8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400031F0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400038F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400055D8: "__cdecl _onexitbegin" __onexitbegin
0x140003380: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140003140: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140003448: "%hs" ??_C@_17LGGGMOOB@?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x140003128: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140002B94: "__cdecl _security_init_cookie" __security_init_cookie
0x140003318: "__cdecl _imp__cexit" __imp__cexit
0x140003398: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x140002A48: "__cdecl get_image_app_type" _get_image_app_type
0x140003218: "__cdecl _imp_FindNextVolumeMountPointW" __imp_FindNextVolumeMountPointW
0x140001940: ScrubRegistry
0x1400038BC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140003190: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140002700: "__cdecl _report_gsfailure" __report_gsfailure
0x1400055E8: "__cdecl _native_startup_state" __native_startup_state
0x140003188: "__cdecl _imp_FindVolumeClose" __imp_FindVolumeClose
0x140003368: "__cdecl _imp__fmode" __imp__fmode
0x140003A38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140002B00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400032F0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140003948: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400039E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140002D42: memset
0x140003A60: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]