Generated by JEB on 2019/08/01

PE: C:\Windows\System32\newdev.exe Base=0x140000000 SHA-256=2CBF1FA6A259A39E14F3C02C6CD1BEF205F7C6BB4B922B61C2E5F17372503481
PDB: NewDev.pdb GUID={2FFF1540-5F06-C0E9-BA9A13A02FF5E7CF} Age=1

222 located named symbols:
0x140002E5C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002C80: "__cdecl FindPESection" _FindPESection
0x1400042E8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x140006668: EventLogFilePath
0x1400041D0: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400043B8: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x140004CC0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140004D60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140001E10: pSetupOpenKey
0x140004308: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140004170: "__cdecl _imp_RaiseException" __imp_RaiseException
0x140004268: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400011D0: WinMain
0x1400043A8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1400031C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140004190: SHELL32_NULL_THUNK_DATA
0x1400044F0: "Software\Microsoft\Windows\Curre" ??_C@_1GA@MOFIHEOM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140004178: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x140004188: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x140006058: "__cdecl commode" _commode
0x140004380: "__cdecl _imp_wcschr" __imp_wcschr
0x140004128: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140004210: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002B50: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140004400: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140006064: "__cdecl fmode" _fmode
0x1400044C8: "__cdecl GUID_e4785230_0e43_47dc_826a_07dbc3aa63d8" _GUID_e4785230_0e43_47dc_826a_07dbc3aa63d8
0x140001120: pHandleRunFinishInstallOperations
0x140004198: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140002BAE: "__cdecl XcptFilter" _XcptFilter
0x140004408: "__cdecl _xc_a" __xc_a
0x140004260: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140001BAC: StringCchCopyW
0x140004218: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140004258: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x14000319D: memcpy
0x140004388: "__cdecl _imp__acmdln" __imp__acmdln
0x140004120: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x140004118: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140002E3F: "__cdecl initterm" _initterm
0x140004D9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400066A8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400042B0: "__cdecl _imp_Sleep" __imp_Sleep
0x1400045A8: "INF" ??_C@_17CHCCJFKN@?$AAI?$AAN?$AAF?$AA?$AA@
0x140004438: "__cdecl _xi_z" __xi_z
0x1400041F0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140004250: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140002B02: "__cdecl _C_specific_handler" __C_specific_handler
0x1400044A0: "%lx" ??_C@_17PKPGALPG@?$AA?$CF?$AAl?$AAx?$AA?$AA@
0x140004140: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140004208: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x14000313C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140002604: "__cdecl pSpUtilsInstallLogUninitialize" _pSpUtilsInstallLogUninitialize
0x140001A8C: SpUtilsSetTargetWindowsDir
0x140004DD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140002C63: "__cdecl amsg_exit" _amsg_exit
0x140004280: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x140004488: "SetInternetPolicies" ??_C@_0BE@LDDKMGAE@SetInternetPolicies?$AA@
0x1400042F8: "__cdecl _imp_exit" __imp_exit
0x1400041C0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400041F8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140002330: pSetupMakeSurePathExists
0x140004278: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140006698: "__cdecl _native_startup_lock" __native_startup_lock
0x140002B90: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140004328: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400043D0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140004238: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140004248: api-ms-win-core-libraryloader-l1-2-1_NULL_THUNK_DATA
0x140004180: KERNEL32_NULL_THUNK_DATA
0x1400046E0: "setupapi.app.log" ??_C@_1CC@MLAOCMDE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAa?$AAp?$AAp?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x1400041E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140003118: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140001B60: pSetupExceptionHandler
0x140002684: "__cdecl pSpUtilsLogSetPath" _pSpUtilsLogSetPath
0x140004358: "__cdecl _imp__commode" __imp__commode
0x140004370: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140004270: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140004650: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1IK@IEFPOEFM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x140002D30: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400065F0: g_sputils_WindowsDirectory
0x140004D4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1400041A0: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x140004148: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140004228: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140006020: g_sputils_IsOnlineWindowsDirectory
0x140006060: "__cdecl newmode" _newmode
0x140004378: "__cdecl _imp__initterm" __imp__initterm
0x140004300: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140004758: "setupapi.ev2" ??_C@_1BK@GPOMBCMC@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA2?$AA?$AA@
0x140002C70: "__cdecl setargv" _setargv
0x140004168: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400041A8: "__cdecl _imp_GetMessageW" __imp_GetMessageW
0x140006688: "__cdecl _onexitend" __onexitend
0x140004290: "__cdecl _imp_CreateThread" __imp_CreateThread
0x140004340: "__cdecl _imp__exit" __imp__exit
0x140004D10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1
0x1400043F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400045B0: "\REGISTRY\MACHINE" ??_C@_1CE@BGEMHEPM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x140004288: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400041B8: USER32_NULL_THUNK_DATA
0x140001EF0: pSetupQueryValue
0x140004338: "__cdecl _imp__resetstkoflw" __imp__resetstkoflw
0x140004320: "__cdecl _imp_swscanf" __imp_swscanf
0x140001008: pHandleSearchConfig
0x1400043C8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1400042D0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140004420: "__cdecl _xi_a" __xi_a
0x1400042C8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002C70: "__cdecl matherr" _matherr
0x1400042F0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1400021C8: pSetupAppendPath
0x140004D24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140003018: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140002530: "__cdecl pSpUtilsSetTextLogPath" _pSpUtilsSetTextLogPath
0x1400044A8: "pDiRunFinishInstallOperations" ??_C@_0BO@PMNHILPH@pDiRunFinishInstallOperations?$AA@
0x140004D38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1400043E8: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x140002B20: "__cdecl _security_check_cookie" __security_check_cookie
0x140001D4C: pSetupOpenPredefinedKey
0x140004418: "__cdecl _xc_z" __xc_z
0x140004298: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140004220: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140004550: "SetupOverride" ??_C@_1BM@IOHCBIPI@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x1400044D8: "__cdecl GUID_46147e3d_0380_450d_b48e_cca7f77d1c69" _GUID_46147e3d_0380_450d_b48e_cca7f77d1c69
0x140004360: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400041C8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1400042C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140004138: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400043C0: "__cdecl _imp_RtlFormatCurrentUserKeyPath" __imp_RtlFormatCurrentUserKeyPath
0x140006630: GlobalDevLogData
0x140001998: pSetupUninitializeUtils
0x140004150: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x140001190: MessagePumpThreadProc
0x1400042A8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140004440: "__cdecl _guard_fids_table" __guard_fids_table
0x140004398: msvcrt_NULL_THUNK_DATA
0x140004010: "__cdecl load_config_used" _load_config_used
0x140001438: RefreshDevices
0x14000202C: pSetupDuplicateString
0x140004CD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x140004C98: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140004310: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400043B0: "__cdecl _imp_NtClose" __imp_NtClose
0x1400043D8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400042A0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000605C: "__cdecl dowildcard" _dowildcard
0x1400065E8: g_sputils_LogInitialized
0x1400043E0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140002E50: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140004130: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140004348: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140002BBC: RtlpImageNtHeader
0x140004CFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140004778: "setupapi.ev3" ??_C@_1BK@NHFAHFKH@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA3?$AA?$AA@
0x1400066B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu
0x140004230: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400018D0: pSpUtilsSetLogPath
0x1400041B0: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x140004318: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400043F0: ntdll_NULL_THUNK_DATA
0x140004390: "__cdecl _imp_memcpy" __imp_memcpy
0x140001684: pSpUtilsQueryOverrideValue
0x140004368: "__cdecl _imp__ismbblead" __imp__ismbblead
0x1400045E0: "\REGISTRY\MACHINE\SOFTWARE\Class" ??_C@_1EG@LKPPLMDE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs@
0x1400042E0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x140001C34: pSetupIsUserAdmin
0x140006008: "__cdecl _security_cookie" __security_cookie
0x1400015A4: pSpUtilsOpenSetupKey
0x1400042D8: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x140004580: "setupapi.dev.log" ??_C@_1CC@LMHLAGMD@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAe?$AAv?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140004160: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x140004200: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140006000: "__cdecl _defaultmatherr" __defaultmatherr
0x140004CE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400041D8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x140004470: "newdev.dll" ??_C@_1BG@NHPHCDFN@?$AAn?$AAe?$AAw?$AAd?$AAe?$AAv?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140004240: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x140004158: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140006690: "__cdecl _onexitbegin" __onexitbegin
0x140006670: InstallLogFilePath
0x140006660: StringLogFilePath
0x1400041E8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400028A0: WinMainCRTStartup
0x140004DC4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140002D64: "__cdecl _security_init_cookie" __security_init_cookie
0x140004350: "__cdecl _imp__cexit" __imp__cexit
0x140002C18: "__cdecl get_image_app_type" _get_image_app_type
0x140004CAC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140001728: pSpUtilsSetLogPathFromRegKey
0x1400043A0: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x140004628: "\REGISTRY\USER" ??_C@_1BO@PBBLJICK@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x140004738: "setupapi.ev1" ??_C@_1BK@HNFJLNCM@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA1?$AA?$AA@
0x1400020C4: pSetupConcatenatePaths
0x140002EA0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400066A0: "__cdecl _native_startup_state" __native_startup_state
0x140004DB0: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x140004330: "__cdecl _imp__fmode" __imp__fmode
0x140004708: "setupapi.offline.log" ??_C@_1CK@ENDBLDLE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140004D88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140006600: GlobalAppLogData
0x140002CD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400042B8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140004D74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140004DEC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140004570: "LogPath" ??_C@_1BA@NHOPJJJG@?$AAL?$AAo?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@

[JEB Decompiler by PNF Software]