Generated by JEB on 2019/08/01
PE: C:\Windows\System32\mspatcha.dll Base=0x158F40000 SHA-256=3422E1A4AE5606BDE57E4A8C134B16AB6B96E4234C2EDC8E9F1A04E79A0DA0D9
PDB: mspatcha.pdb GUID={3F77BE32-CE98-62E8-09391E6B4E27D03A} Age=1
197 located named symbols:
0x158F48A8C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x158F4A190: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x158F488A0: "__cdecl FindPESection" _FindPESection
0x158F47628: initialise_decoder_bitbuf
0x158F4B9DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x158F4D010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x158F4A128: "__cdecl _imp_RaiseException" __imp_RaiseException
0x158F46358: SafeCompleteMD5
0x158F4836C: "__cdecl CRT_INIT" _CRT_INIT
0x158F4A1F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x158F4770C: decode_aligned_or_verbatim_block
0x158F48E80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x158F4A178: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x158F4A180: "__cdecl _imp_CreateFileA" __imp_CreateFileA
0x158F44038: GetNtHeader
0x158F441A0: ImageDirectoryRvaAndSize
0x158F45238: TransformOldFile_PE_Imports
0x158F4B98C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x158F4A2C0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x158F47EC0: make_table
0x158F4A168: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x158F455B0: TransformOldFile_PE_RelativeJmps
0x158F45F50: TransformOldFile_PE_Resources
0x158F48884: "__cdecl XcptFilter" _XcptFilter
0x158F4A2C8: "__cdecl _xc_a" __xc_a
0x158F44A18: TransformOldFile_PE_Relocations
0x158F4A148: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x158F4A150: "__cdecl _imp_DeleteFileA" __imp_DeleteFileA
0x158F45874: TransformOldFile_PE_RelativeCalls
0x158F48E5C: memcpy
0x158F4A2A8: "__cdecl _imp_memset" __imp_memset
0x158F48A6C: "__cdecl initterm" _initterm
0x158F4BA2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x158F4D5C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x158F4A248: "__cdecl _imp_Sleep" __imp_Sleep
0x158F4A2E8: "__cdecl _xi_z" __xi_z
0x158F4A130: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x158F48846: "__cdecl _C_specific_handler" __C_specific_handler
0x158F46FEC: LZX_DecodeNewGroup
0x158F4A1A0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x158F48D6C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x158F4A240: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x158F48890: "__cdecl amsg_exit" _amsg_exit
0x158F45054: TransformOldFile_PE_Exports
0x158F440E4: ImageRvaToFileOffset
0x158F42F40: TestApplyPatchToFileByHandles
0x158F43D4C: ApplyRawLzxPatchToBuffer
0x158F41070: NormalizeOldFileImageForPatching
0x158F4A170: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x158F4A140: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x158F4A1B0: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x158F4A1D0: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x158F4A1E0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x158F4D5B0: "__cdecl _native_startup_lock" __native_startup_lock
0x158F48A60: DllMain
0x158F45DD4: TransformResourceRecursive
0x158F48DD0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x158F4B9B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x158F4A290: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x158F4A220: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x158F46030: TransformCoffImage
0x158F41400: GetFilePatchSignatureByHandle
0x158F43310: TestApplyPatchToFileByBuffers
0x158F4A120: "__cdecl _imp_GetLastError" __imp_GetLastError
0x158F4D000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x158F48D48: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x158F43180: ApplyPatchToFileW
0x158F4A1E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x158F42FC0: ApplyPatchToFileA
0x158F467B4: UpdateMD5_64ByteChunk
0x158F48950: "__cdecl ValidateImageBase" _ValidateImageBase
0x158F46630: MyVirtualAlloc
0x158F417B0: DecodePatchHeader
0x158F485B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x158F4401C: ThrowPeFmtException
0x158F4A2A0: "__cdecl _imp__initterm" __imp__initterm
0x158F4A138: "__cdecl _imp_SetLastError" __imp_SetLastError
0x158F4494C: RelocQsort
0x158F4D5A0: "__cdecl _onexitend" __onexitend
0x158F4A2B8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x158F4A1F0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x158F4A268: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x158F4A2D8: "__cdecl _xi_a" __xi_a
0x158F4A380: gCrcTable32
0x158F4A260: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x158F47084: decode_data
0x158F48164: make_table_8bit
0x158F4BA18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x158F4A1D8: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x158F48C48: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x158F4D5C8: "__cdecl pRawDllMain" _pRawDllMain
0x158F44494: UnBindMappedImage
0x158F48860: "__cdecl _security_check_cookie" __security_check_cookie
0x158F441F8: ImageDirectoryOffsetAndSize
0x158F4A2D0: "__cdecl _xc_z" __xc_z
0x158F412A0: GetFilePatchSignatureW
0x158F4A200: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x158F45BB0: TransformResourceRecursiveOldCompatible
0x158F4A258: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x158F4A1C8: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x158F41654: TransformOldFileImageForPatching
0x158F4A230: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x158F4A238: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x158F4BA40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x158F4A210: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x158F4A2F0: "__cdecl _guard_fids_table" __guard_fids_table
0x158F4A2B0: msvcrt_NULL_THUNK_DATA
0x158F4A010: "__cdecl load_config_used" _load_config_used
0x158F446C8: SmashLockPrefixesInMappedImage
0x158F42640: ApplyPatchToFileByHandlesEx
0x158F466E0: SubAllocate
0x158F46494: MyMapViewOfFileByHandle
0x158F424D4: CreateNewFileFromPatchData
0x158F422B4: CreateNewFileBufferFromPatchData
0x158F46568: MyCreateMappedFileByHandle
0x158F4A360: "0123456789abcdef" ??_C@_0BB@JCEFLFJE@0123456789abcdef?$AA@
0x158F4A280: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x158F442E8: RebaseMappedImage
0x158F41718: VariableLengthUnsignedDecode
0x158F4A218: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x158F4A208: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x158F447C4: NormalizeCoffImage
0x158F4A1C0: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x158F45AA0: TransformOldFile_PE_MarkNonExe
0x158F4A228: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x158F44904: GetNewRvaFromRiftTable
0x158F48A80: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x158F4AC10: dec_extra_bits
0x158F4A158: "__cdecl _imp_SetFileTime" __imp_SetFileTime
0x158F46650: CreateSubAllocator
0x158F45CFC: TransformOldFile_PE_ResourcesOldCompatible
0x158F4B9A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x158F4A288: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x158F4A298: "__cdecl _imp_memcpy" __imp_memcpy
0x158F4D008: "__cdecl _security_cookie" __security_cookie
0x158F465CC: MyUnmapCreatedMappedFile
0x158F43150: TestApplyPatchToFileW
0x158F42F90: TestApplyPatchToFileA
0x158F4A198: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x158F4B978: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x158F41008: ProgressCallbackWrapper
0x158F4D5A8: "__cdecl _onexitbegin" __onexitbegin
0x158F462D8: Crc32
0x158F47670: fillbuf
0x158F46318: SafeCompleteCrc32
0x158F47560: decoder_translate_e8
0x158F4A780: MP_POS_minus2
0x158F4A1A8: "__cdecl _imp_CreateFileMappingA" __imp_CreateFileMappingA
0x158F41FC8: SaveRetainRanges
0x158F4A118: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x158F48984: "__cdecl _security_init_cookie" __security_init_cookie
0x158F4174C: VariableLengthSignedDecode
0x158F4B964: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x158F431A0: ApplyPatchToFileExW
0x158F42FE0: ApplyPatchToFileExA
0x158F42138: CreateNewFileFromOldFileMapped
0x158F4A270: "__cdecl _imp_malloc" __imp_malloc
0x158F43360: ApplyPatchToFileByBuffers
0x158F4A160: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x158F4A188: "__cdecl _imp_GetFileTime" __imp_GetFileTime
0x158F414D0: GetFilePatchSignatureByBuffer
0x158F48AD0: "__cdecl _report_gsfailure" __report_gsfailure
0x158F4D5B8: "__cdecl _native_startup_state" __native_startup_state
0x158F44248: ImageDirectoryMappedAddress
0x158F4B9C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x158F411D0: GetFilePatchSignatureA
0x158F4A1B8: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x158F44FA8: TransformOldFile_PE_InferRelocsX86
0x158F4BA04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x158F4A278: "__cdecl _imp_free" __imp_free
0x158F488F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x158F4A250: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x158F4B9F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x158F4D5D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUxlnkivhhUnhkzgxsUnhkzgxszUlyquivUznwGEUkivxlnkOlyq@mspatcha" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUxlnkivhhUnhkzgxsUnhkzgxszUlyquivUznwGEUkivxlnkOlyq@mspatcha
0x158F48E68: memset
0x158F4BA54: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x158F42F70: ApplyPatchToFileByHandles
[JEB Decompiler by PNF Software]