Generated by JEB on 2019/08/01

PE: C:\Windows\System32\pcalua.exe Base=0x140000000 SHA-256=36EF04735ADFFF417AE761BF6595BADB54A4CCEB3550ABA7CFD4F7234C90EE7D
PDB: pcalua.pdb GUID={1975EC8A-E207-808F-F500570656B513D0} Age=1

400 located named symbols:
0x14000A4D8: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x14000AA7C: "PRINT" ??_C@_05ECKPOFCN@PRINT?$AA@
0x140008964: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000B010: "RtlStringCchLengthA failed [%x]" ??_C@_0CA@JMEKPAGN@RtlStringCchLengthA?5failed?5?$FL?$CFx?$FN?$AA@
0x14000A1E8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x14000B1E8: "%systemroot%\system32" ??_C@_1CM@JBIGCHCD@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x140008D10: "__cdecl FindPESection" _FindPESection
0x14000B100: "AslEnvVarQuery failed [%x]" ??_C@_0BL@JLFODMA@AslEnvVarQuery?5failed?5?$FL?$CFx?$FN?$AA@
0x140005610: RtlStringCchCatW
0x140001DC0: "long __cdecl RtlStringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?RtlStringCchPrintfA@@YAJPEAD_KPEBDZZ
0x14000C1E8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140008D00: "__cdecl wsetargv" _wsetargv
0x14000A528: pcaui_NULL_THUNK_DATA
0x14000550C: RtlStringCchCopyW
0x1400025C0: AslLogDebugVPrintf
0x14000D120: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14000B5A8: "Failed to open reg key [%x]" ??_C@_0BM@PIJDJEI@Failed?5to?5open?5reg?5key?5?$FL?$CFx?$FN?$AA@
0x14000A380: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000ACB8: "AslRegistryOpenKey passed bad Pa" ??_C@_0CI@FAHCLLPP@AslRegistryOpenKey?5passed?5bad?5Pa@
0x14000A258: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140008928: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000A4C8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x140008FF0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000A2D8: SHELL32_NULL_THUNK_DATA
0x14000A228: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14000B808: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x14000A2D0: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x14000AA30: "" ??_C@_00CNPNBAHC@?$AA@
0x140001F7C: AslLogCreate
0x14000D6E0: "__cdecl commode" _commode
0x140003004: AslTelemetryFlush
0x14000A400: "__cdecl _imp_sprintf_s" __imp_sprintf_s
0x140006760: AslEnvVarQuery
0x14000692C: AslEnvExpandStrings
0x14000A610: "Failed to obtain command-line" ??_C@_0BO@GABJHJPE@Failed?5to?5obtain?5command?9line?$AA@
0x14000AA10: AE_LOG
0x14000A9C0: "wWinMain" ??_C@_08GBIGGCJG@wWinMain?$AA@
0x14000A410: "__cdecl _imp_wcschr" __imp_wcschr
0x14000A2B8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14000A4B0: "__cdecl _imp_RtlEqualString" __imp_RtlEqualString
0x14000A470: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x14000119C: "__cdecl TlgWrite" _TlgWrite
0x140008BE0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000A538: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000B298: "%systemdrive%\Program Files" ??_C@_1DI@GAAGMOFG@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAd?$AAr?$AAi?$AAv?$AAe?$AA?$CF?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14000D6EC: "__cdecl fmode" _fmode
0x14000A408: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x14000AFD0: "RtlStringCchCopyW failed [%x]" ??_C@_0BO@LFCDCAJH@RtlStringCchCopyW?5failed?5?$FL?$CFx?$FN?$AA@
0x14000A208: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x140001C34: wWinMain
0x14000AD90: "AslRegistryGetString" ??_C@_0BF@BEDJKLON@AslRegistryGetString?$AA@
0x140004434: AslRegistryGetString
0x14000ADA8: "Out of memory [%x]" ??_C@_0BD@PKOKAJCB@Out?5of?5memory?5?$FL?$CFx?$FN?$AA@
0x14000ABA0: "Message too long!" ??_C@_0BC@CHJNCCME@Message?5too?5long?$CB?$AA@
0x14000A770: "Invalid current directory buffer" ??_C@_0CB@FPJAKEC@Invalid?5current?5directory?5buffer@
0x14000AC90: "%d" ??_C@_02DPKJAMEF@?$CFd?$AA@
0x14000B5D0: "\Registry\Machine\Software\Micro" ??_C@_1JG@LOBJJIBH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x140008C3E: "__cdecl XcptFilter" _XcptFilter
0x140003DD0: AslTelemetryTrackError
0x14000A540: "__cdecl _xc_a" __xc_a
0x14000B190: "AslpEnvResolveVars failed [%x]" ??_C@_0BP@FBDBOKFK@AslpEnvResolveVars?5failed?5?$FL?$CFx?$FN?$AA@
0x140001090: TraceLoggingRegister
0x14000A3C8: "__cdecl _imp_wcsstr" __imp_wcsstr
0x14000A670: "Invalid application name buffer" ??_C@_0CA@EJMGLMJN@Invalid?5application?5name?5buffer?$AA@
0x14000A298: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140001318: "public: __cdecl AslTelemetry::~AslTelemetry(void) __ptr64" ??1AslTelemetry@@QEAA@XZ
0x14000A4E8: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x140001260: StringCchCopyW
0x1400021FC: AslLogDelete
0x14000ACA8: "ERROR#%s#%d" ??_C@_0M@DNCHPEGO@ERROR?$CD?$CFs?$CD?$CFd?$AA@
0x140008EF9: "__cdecl lock" _lock
0x14000A6B8: "Failed to parse command-line arg" ??_C@_0CG@BMJIHHGL@Failed?5to?5parse?5command?9line?5arg@
0x14000A888: "Invalid event type" ??_C@_0BD@KPBMBJON@Invalid?5event?5type?$AA@
0x14000AC94: "%s#%s" ??_C@_05CPDNPOCI@?$CFs?$CD?$CFs?$AA@
0x140001EBC: "void __cdecl AslLogpRollStream(struct _RTL_MEMORY_STREAM * __ptr64,unsigned __int64)" ?AslLogpRollStream@@YAXPEAU_RTL_MEMORY_STREAM@@_K@Z
0x14000A5B4: "__cdecl _guard_iat_table" __guard_iat_table
0x14000ADE8: "AslRegistryGetStringExpand" ??_C@_0BL@PDPDPHAO@AslRegistryGetStringExpand?$AA@
0x14000AD38: "Invalid value type" ??_C@_0BD@BBKBCNOK@Invalid?5value?5type?$AA@
0x140008FB9: memcpy
0x14000AA84: "ERROR" ??_C@_05MBDEGLCK@ERROR?$AA@
0x14000A2C0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x14000A1E0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x14000A430: "__cdecl _imp_memset" __imp_memset
0x14000B1B0: "AslEnvExpandStrings failed [%x]" ??_C@_0CA@IDIOIIBO@AslEnvExpandStrings?5failed?5?$FL?$CFx?$FN?$AA@
0x140006D10: AslpEnvResolveVars
0x140008ECF: "__cdecl initterm" _initterm
0x14000638C: AslStringDuplicate
0x14000AF68: "FileVersion" ??_C@_1BI@HCCAONKE@?$AAF?$AAi?$AAl?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14000D748: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000B3A0: "CommonProgramFiles" ??_C@_1CG@HMNDLOFD@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14000A2A0: "__cdecl _imp_Sleep" __imp_Sleep
0x14000A2F0: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x14000D708: "class AslLogGlobalLogger g_AslLogger" ?g_AslLogger@@3VAslLogGlobalLogger@@A
0x14000B138: "AslpEnvResolveVars failed to fai" ??_C@_0DL@ECPNLKFD@AslpEnvResolveVars?5failed?5to?5fai@
0x14000A578: "__cdecl _xi_z" __xi_z
0x14000A290: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000AA00: AE_MARK_EVENT
0x14000A8C8: "Invalid flags buffer" ??_C@_0BF@CBDPGAFD@Invalid?5flags?5buffer?$AA@
0x14000A990: "Failed to launch application wit" ??_C@_0CN@NKPEFEMM@Failed?5to?5launch?5application?5wit@
0x1400061AC: AslStringDuplicateA
0x140008EDB: "__cdecl _C_specific_handler" __C_specific_handler
0x14000A848: "Invalid eventtype buffer" ??_C@_0BJ@JMPLDKOP@Invalid?5eventtype?5buffer?$AA@
0x14000A318: "__cdecl _imp__onexit" __imp__onexit
0x140008FC5: memmove
0x140008480: AslEnvGetProcessWowInfo
0x14000A398: "__cdecl _imp__wtoi" __imp__wtoi
0x14000B248: "%systemroot%" ??_C@_1BK@JEOALCGP@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?$AA@
0x14000B500: "SystemRoot=" ??_C@_1BI@KJNLBMHH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$DN?$AA?$AA@
0x14000A5D8: "Failed to store command-line" ??_C@_0BN@LPHMNBNE@Failed?5to?5store?5command?9line?$AA@
0x140008F4C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400040F4: "public: long __cdecl RtlArray<struct _ASL_TELEMETRY_EVENT>::Initialize(unsigned __int64,unsigned __int64) __ptr64" ?Initialize@?$RtlArray@U_ASL_TELEMETRY_EVENT@@@@QEAAJ_K0@Z
0x14000140C: "public: __cdecl AslLogGlobalLogger::AslLogGlobalLogger(char const * __ptr64,unsigned int) __ptr64" ??0AslLogGlobalLogger@@QEAA@PEBDI@Z
0x14000AF08: "NtOpenKey failed for %ws [%x]" ??_C@_0BO@KHIHGBEI@NtOpenKey?5failed?5for?5?$CFws?5?$FL?$CFx?$FN?$AA@
0x14000A460: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x14000B120: "AslEnvExpandStrings" ??_C@_0BE@MJPLEBLE@AslEnvExpandStrings?$AA@
0x140008CF3: "__cdecl amsg_exit" _amsg_exit
0x14000A210: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x14000A7E0: "Invalid layername buffer" ??_C@_0BJ@CIJDIAAJ@Invalid?5layername?5buffer?$AA@
0x140003C54: AslpTelemetryProcessError
0x14000A920: "Invalid user sid buffer" ??_C@_0BI@PLFBGCOC@Invalid?5user?5sid?5buffer?$AA@
0x14000A370: "__cdecl _imp_exit" __imp_exit
0x14000AC20: "EventSetInformation" ??_C@_0BE@BJEEGHGK@EventSetInformation?$AA@
0x14000A8A0: "Failed to parse context flags ar" ??_C@_0CH@NFDGEHNK@Failed?5to?5parse?5context?5flags?5ar@
0x14000A330: "__cdecl _imp__lock" __imp__lock
0x140005B40: PiiFilterEmbeddedPathsExecute
0x140008BAC: atexit
0x14000A8E0: "Failed to store flags" ??_C@_0BG@ECMMGGNG@Failed?5to?5store?5flags?$AA@
0x14000A478: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x14000A798: "Failed to store current director" ??_C@_0CC@CPGNIOCL@Failed?5to?5store?5current?5director@
0x14000B310: "Invalid combination of Host/Curr" ??_C@_0HA@EFIDDFNE@Invalid?5combination?5of?5Host?1Curr@
0x14000B4E8: "AslEnvBuildBasic" ??_C@_0BB@OHEKBGFD@AslEnvBuildBasic?$AA@
0x14000A348: "__cdecl _imp__wcmdln" __imp__wcmdln
0x14000A800: "Failed to store layer name" ??_C@_0BL@FMKIMEPM@Failed?5to?5store?5layer?5name?$AA@
0x14000B6F0: "RtlGetNtSystemRoot" ??_C@_0BD@FEHADEKB@RtlGetNtSystemRoot?$AA@
0x14000A2E8: "__cdecl _imp_RegisterClassExW" __imp_RegisterClassExW
0x14000A740: "Failed to parse current director" ??_C@_0CL@JHEHLCPP@Failed?5to?5parse?5current?5director@
0x14000B4C0: "ProgramData" ??_C@_1BI@PCFBINBH@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x14000A280: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140008F11: "__cdecl _dllonexit" __dllonexit
0x14000A518: "__cdecl _imp_?PcaPersistSettingsAndLaunchApplication@@YAKPEAUHWND__@@PEBG111HK@Z" __imp_?PcaPersistSettingsAndLaunchApplication@@YAKPEAUHWND__@@PEBG111HK@Z
0x14000AC8C: ";" ??_C@_13PJJBFPED@?$AA?$DL?$AA?$AA@
0x140004604: AslRegistryGetStringExpand
0x14000D728: "__cdecl _native_startup_lock" __native_startup_lock
0x14000AD18: "AslRegistryGetUInt32_UStr" ??_C@_0BK@GEIFCLB@AslRegistryGetUInt32_UStr?$AA@
0x14000A4F8: "__cdecl _imp_RtlUpcaseUnicodeChar" __imp_RtlUpcaseUnicodeChar
0x14000AF48: "StringFileInfo" ??_C@_1BO@PBBNDBNF@?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x14000AF80: "JanFebMarAprMayJunJulAugSepOctNo" ??_C@_1EK@KKCLMHNJ@?$AAJ?$AAa?$AAn?$AAF?$AAe?$AAb?$AAM?$AAa?$AAr?$AAA?$AAp?$AAr?$AAM?$AAa?$AAy?$AAJ?$AAu?$AAn?$AAJ?$AAu?$AAl?$AAA?$AAu?$AAg?$AAS?$AAe?$AAp?$AAO?$AAc?$AAt?$AAN?$AAo@
0x140005F44: "public: long __cdecl RtlArray<unsigned short * __ptr64>::Insert(unsigned short * __ptr64 const & __ptr64,unsigned __int64) __ptr64" ?Insert@?$RtlArray@PEAG@@QEAAJAEBQEAG_K@Z
0x140008C20: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000A418: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14000A428: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x14000A350: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000AA50: "\SysWOW64" ??_C@_1BE@MJECBGNO@?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
0x140004F38: RtlGetVersionResource
0x14000A440: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140005858: "long __cdecl PiiFilterpAddItemSorted(struct _PII_FILTER * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?PiiFilterpAddItemSorted@@YAJPEAU_PII_FILTER@@PEAG1@Z
0x14000B698: "AslEnvGetProcessWowInfo" ??_C@_0BI@EDMELJOD@AslEnvGetProcessWowInfo?$AA@
0x14000AF28: "VS_VERSION_INFO" ??_C@_1CA@FOECMPGO@?$AAV?$AAS?$AA_?$AAV?$AAE?$AAR?$AAS?$AAI?$AAO?$AAN?$AA_?$AAI?$AAN?$AAF?$AAO?$AA?$AA@
0x14000A2C8: KERNEL32_NULL_THUNK_DATA
0x14000B1D0: "%system32%" ??_C@_1BG@IBFJLDBC@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$CF?$AA?$AA@
0x14000670C: AslStringUpper
0x14000A220: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140008F28: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000A3B8: "__cdecl _imp_memcmp" __imp_memcmp
0x140001E3C: "long __cdecl RtlStringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?RtlStringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000A338: "__cdecl _imp__commode" __imp__commode
0x140005594: AslPathGetNtSystemRoot
0x14000B2E8: "RtlStringCchCatW failed [%x]" ??_C@_0BN@IGBCHOAA@RtlStringCchCatW?5failed?5?$FL?$CFx?$FN?$AA@
0x14000A7C0: "Failed to parse layer argument" ??_C@_0BP@MLBHBCGJ@Failed?5to?5parse?5layer?5argument?$AA@
0x14000A3C0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000A3F8: "__cdecl _imp_strchr" __imp_strchr
0x14000A238: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x14000C224: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14000A260: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000A468: "__cdecl _imp_RtlReAllocateHeap" __imp_RtlReAllocateHeap
0x14000B048: "SIZE_T arithmetic failed [%x]" ??_C@_0BO@JIGJHMGC@SIZE_T?5arithmetic?5failed?5?$FL?$CFx?$FN?$AA@
0x14000A648: "Failed to parse app name argumen" ??_C@_0CC@OLKMENGD@Failed?5to?5parse?5app?5name?5argumen@
0x14000ABC0: "api-ms-win-eventing-provider-l1-" ??_C@_1EI@JCOINDP@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9@
0x140008910: wWinMainCRTStartup
0x140008DC0: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000A5C8: "PCALUA" ??_C@_1O@DOBDDFIF@?$AAP?$AAC?$AAA?$AAL?$AAU?$AAA?$AA?$AA@
0x14000ACE0: "AslRegistryOpenKey" ??_C@_0BD@JLBNOBM@AslRegistryOpenKey?$AA@
0x14000A480: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x140005594: RtlDownlevelGetNtSystemRoot
0x14000AC34: "Simple" ??_C@_06MIPDDPP@Simple?$AA@
0x14000A1F8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140001350: "public: static void __cdecl AslLogGlobalLogger::LogVPrintf(enum ASL_LOG_LEVEL,char const * __ptr64,unsigned __int64,char const * __ptr64,char * __ptr64)" ?LogVPrintf@AslLogGlobalLogger@@SAXW4ASL_LOG_LEVEL@@PEBD_K1PEAD@Z
0x14000B468: "ProgramFilesDir (x86)" ??_C@_1CM@LPGAILIM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x1400056E8: "long __cdecl RtlStringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?RtlStringCchCatW@@YAJPEAG_KPEBG@Z
0x14000D6E8: "__cdecl newmode" _newmode
0x14000AB38: "%s\Temp\AslLog_%S_%s_%d.txt" ??_C@_1DI@NMOMNJAN@?$AA?$CF?$AAs?$AA?2?$AAT?$AAe?$AAm?$AAp?$AA?2?$AAA?$AAs?$AAl?$AAL?$AAo?$AAg?$AA_?$AA?$CF?$AAS?$AA_?$AA?$CF?$AAs?$AA_?$AA?$CF?$AAd?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x1400042D4: AslRegistryGetUInt32_UStr
0x14000A3D0: "__cdecl _imp__initterm" __imp__initterm
0x14000B268: "%programfilesnative%" ??_C@_1CK@KKONAJDD@?$AA?$CF?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAf?$AAi?$AAl?$AAe?$AAs?$AAn?$AAa?$AAt?$AAi?$AAv?$AAe?$AA?$CF?$AA?$AA@
0x14000A378: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14000A708: "Failed to extract command-line f" ??_C@_0DC@NHFIOEGL@Failed?5to?5extract?5command?9line?5f@
0x14000A2B0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000A500: "__cdecl _imp_RtlGetNativeSystemInformation" __imp_RtlGetNativeSystemInformation
0x14000AC84: ";" ??_C@_01ICJEACDI@?$DL?$AA@
0x14000A230: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x140004908: AslRegistryGetKey
0x140002DA0: "public: long __cdecl PiiFilter::Initialize(void) __ptr64" ?Initialize@PiiFilter@@QEAAJXZ
0x14000D738: "__cdecl _onexitend" __onexitend
0x14000A368: "__cdecl _imp__exit" __imp__exit
0x140008F05: "__cdecl unlock" _unlock
0x14000A530: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000A2F8: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x14000A278: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000A310: USER32_NULL_THUNK_DATA
0x14000A300: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x14000A4F0: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x140006540: AslAnsiStringDuplicate
0x14000A690: "Failed to store application name" ??_C@_0CB@LKDBLGPH@Failed?5to?5store?5application?5name@
0x14000A4A0: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x14000A560: "__cdecl _xi_a" __xi_a
0x140002EA4: "__cdecl TlgDefineProvider_annotation__TlgASL_UTC_PROVIDERProv" _TlgDefineProvider_annotation__TlgASL_UTC_PROVIDERProv
0x14000A248: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140008D00: "__cdecl matherr" _matherr
0x14000A328: "__cdecl _imp__unlock" __imp__unlock
0x14000AD50: "RtlInitUnicodeStringEx failed [%" ??_C@_0CD@LDGCFCIP@RtlInitUnicodeStringEx?5failed?5?$FL?$CF@
0x14000D758: g_AslLogPfnVPrintf
0x14000D700: "public: static class AslLogGlobalLogger * __ptr64 __ptr64 AslLogGlobalLogger::Instance" ?Instance@AslLogGlobalLogger@@2PEAV1@EA
0x140002EB0: AslTelemetryDelete
0x14000A2E0: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x14000AB78: "%s,%s,%d," ??_C@_09CHPHCLBL@?$CFs?0?$CFs?0?$CFd?0?$AA@
0x1400012E8: "public: __cdecl AslLog::~AslLog(void) __ptr64" ??1AslLog@@QEAA@XZ
0x14000AC3C: "Metric" ??_C@_06NLMEEMAC@Metric?$AA@
0x14000AC60: "Out of memory" ??_C@_0O@NALGGDJF@Out?5of?5memory?$AA@
0x14000A4E0: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x14000AC9C: "%s#%d" ??_C@_05CKLOHKLO@?$CFs?$CD?$CFd?$AA@
0x14000ABB4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x14000AC50: "Activity" ??_C@_08CEBOFODC@Activity?$AA@
0x1400028A4: "public: long __cdecl RtlMemoryStream::WriteStringA(char const * __ptr64,char const * __ptr64) __ptr64" ?WriteStringA@RtlMemoryStream@@QEAAJPEBD0@Z
0x14000B4D8: "Public" ??_C@_1O@OBJINMIH@?$AAP?$AAu?$AAb?$AAl?$AAi?$AAc?$AA?$AA@
0x14000ABB4: "" ??_C@_01LOCGONAA@?$AA?$AA@
0x14000B3C8: "CommonFilesDir (x86)" ??_C@_1CK@FONJNPCI@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x14000AC08: "advapi32" ??_C@_1BC@DNHGCMLG@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?$AA@
0x14000A320: "__cdecl _imp___dllonexit" __imp___dllonexit
0x140004238: AslRegistryOpenKey
0x14000B498: "ProgramFiles(x86)" ??_C@_1CE@EAPHGJBI@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x14000A3E0: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x140008940: "__cdecl _security_check_cookie" __security_check_cookie
0x14000A558: "__cdecl _xc_z" __xc_z
0x14000B6B0: "ZwQuerySystemInformation failed " ??_C@_0CF@MHINMGAF@ZwQuerySystemInformation?5failed?5@
0x14000AB20: "LogFlags" ??_C@_1BC@EJEJANH@?$AAL?$AAo?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14000A200: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140005994: "long __cdecl PiiFilterpAddEnvironment(struct _PII_FILTER * __ptr64)" ?PiiFilterpAddEnvironment@@YAJPEAU_PII_FILTER@@@Z
0x14000B530: "\Registry\Machine\Software\Micro" ??_C@_1HI@BHMKBIMG@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x14000AE70: "Failed to allocate %d bytes for " ??_C@_0DA@BGOMJCLG@Failed?5to?5allocate?5?$CFd?5bytes?5for?5@
0x14000A3A8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000B8EC: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x14000A250: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000A6E0: "Invalid application commandline " ??_C@_0CH@KCDLMOKN@Invalid?5application?5commandline?5@
0x14000B030: "AslStringDuplicateA" ??_C@_0BE@MAGCEBKC@AslStringDuplicateA?$AA@
0x140006AFC: AslEnvExpandStrings2
0x14000B230: "%windir%" ??_C@_1BC@CGIBIBCK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?$AA@
0x14000A4B8: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x14000AA68: "\SysARM32" ??_C@_1BE@GAOKLHBG@?$AA?2?$AAS?$AAy?$AAs?$AAA?$AAR?$AAM?$AA3?$AA2?$AA?$AA@
0x14000AEC0: "AslRegistryBuildMachinePath fail" ??_C@_0DA@HFFCFNMM@AslRegistryBuildMachinePath?5fail@
0x14000AA38: "\System32" ??_C@_1BE@JPDJANBF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x14000B088: "AslStringDuplicate" ??_C@_0BD@NJPGHOHJ@AslStringDuplicate?$AA@
0x140004208: AslLogCallPrintf
0x14000A958: "Did not receive at least one req" ??_C@_0DG@KEFOPBCO@Did?5not?5receive?5at?5least?5one?5req@
0x14000AB70: " " ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x14000A580: "__cdecl _guard_fids_table" __guard_fids_table
0x14000A420: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x14000B218: "%sysnative%" ??_C@_1BI@CLEAEAIO@?$AA?$CF?$AAs?$AAy?$AAs?$AAn?$AAa?$AAt?$AAi?$AAv?$AAe?$AA?$CF?$AA?$AA@
0x1400066B8: AslAnsiStringFree
0x14000A438: msvcrt_NULL_THUNK_DATA
0x14000A0D0: "__cdecl load_config_used" _load_config_used
0x14000B668: "RtlGetNativeSystemInformation fa" ??_C@_0CK@HFBOFPOI@RtlGetNativeSystemInformation?5fa@
0x140001610: "__int64 __cdecl HiddenWindowProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?HiddenWindowProc@@YA_JPEAUHWND__@@I_K_J@Z
0x140002294: "void __cdecl AslLogpWriteLog(struct _ASL_LOG * __ptr64,char const * __ptr64,unsigned __int64)" ?AslLogpWriteLog@@YAXPEAU_ASL_LOG@@PEBD_K@Z
0x14000A4A8: "__cdecl _imp_ZwClose" __imp_ZwClose
0x14000AA8C: "MARK" ??_C@_04MGKDMHFC@MARK?$AA@
0x14000C1C0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140002B14: "public: long __cdecl RtlMemoryStream::WriteString(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?WriteString@RtlMemoryStream@@QEAAJPEBG0@Z
0x14000A388: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14000AEA0: "AslRegistryBuildMachinePath" ??_C@_0BM@HODODFBC@AslRegistryBuildMachinePath?$AA@
0x14000ACF8: "Failed to query key value [%x]" ??_C@_0BP@PMIDEKOL@Failed?5to?5query?5key?5value?5?$FL?$CFx?$FN?$AA@
0x14000A448: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000A268: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000D6E4: "__cdecl dowildcard" _dowildcard
0x14000AA94: "TRACE" ??_C@_05EHILDPJH@TRACE?$AA@
0x140003F94: "public: long __cdecl RtlArray<struct _ASL_TELEMETRY_EVENT>::Append(struct _ASL_TELEMETRY_EVENT const & __ptr64) __ptr64" ?Append@?$RtlArray@U_ASL_TELEMETRY_EVENT@@@@QEAAJAEBU_ASL_TELEMETRY_EVENT@@@Z
0x14000A4C0: "__cdecl _imp_RtlMultiByteToUnicodeN" __imp_RtlMultiByteToUnicodeN
0x14000A5C0: "pcalua" ??_C@_06PLOFGLEF@pcalua?$AA@
0x14000A488: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x14000A450: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000AFF0: "SystemDrive=" ??_C@_1BK@NFBPFMLB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$DN?$AA?$AA@
0x140008BCC: "__cdecl _std_terminate" __std_terminate
0x140006608: AslAnsiStringCreate
0x140008EF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140008FAD: memcmp
0x14000D750: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUhszivwUoryfUlyquivUznwGEUxlnkzghszivwxlivkOlyq@compatsharedcore" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUzkkxlnkzgUhszivwUoryfUlyquivUznwGEUxlnkzghszivwxlivkOlyq@compatsharedcore
0x14000A3E8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140008C4C: RtlpImageNtHeader
0x14000AC88: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x1400043B8: AslRegistryGetUInt32
0x14000A308: "__cdecl _imp_GetDesktopWindow" __imp_GetDesktopWindow
0x14000AE48: "\Registry\Machine" ??_C@_1CE@NMBJJGCH@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x14000AB88: "ASL_LOG FAIL: " ??_C@_0P@ECHOIEKI@ASL_LOG?5FAIL?3?5?$AA@
0x14000B178: "AslEnvExpandStrings2" ??_C@_0BF@CBLFNIKF@AslEnvExpandStrings2?$AA@
0x14000A270: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000B0E8: "systemroot" ??_C@_1BG@MCEEPJDG@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$AA@
0x14000A508: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x14000A9D0: "Failed to launch application wit" ??_C@_0CP@DIMKDBPH@Failed?5to?5launch?5application?5wit@
0x14000A390: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000A510: ntdll_NULL_THUNK_DATA
0x14000A3B0: "__cdecl _imp_memcpy" __imp_memcpy
0x14000B00C: "%" ??_C@_13EJFHHPOP@?$AA?$CF?$AA?$AA@
0x14000A490: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x14000B5C4: "=" ??_C@_13NMPKAAJP@?$AA?$DN?$AA?$AA@
0x14000B068: "RtlStringCchLengthW failed [%x]" ??_C@_0CA@CDKIHLH@RtlStringCchLengthW?5failed?5?$FL?$CFx?$FN?$AA@
0x14000A3A0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x14000D118: "__cdecl _security_cookie" __security_cookie
0x14000AE08: "AslEnvExpandStrings2 failed to e" ??_C@_0DL@NEFCFCEC@AslEnvExpandStrings2?5failed?5to?5e@
0x14000A3F0: "__cdecl _imp_strcpy_s" __imp_strcpy_s
0x14000B448: "ProgramFiles" ??_C@_1BK@CECDDAML@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14000AAA0: "\Software\Microsoft\Windows NT\C" ??_C@_1HK@FCHHNOGK@?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC@
0x14000A218: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000A2A8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000AC48: "Message" ??_C@_07BEIHKDLJ@Message?$AA@
0x14000D110: "__cdecl _defaultmatherr" __defaultmatherr
0x14000AC70: "AslTelemetryCreate" ??_C@_0BD@NIOMDNK@AslTelemetryCreate?$AA@
0x14000D740: "__cdecl _onexitbegin" __onexitbegin
0x14000B518: "WinDir=" ??_C@_1BA@NJFCNLDI@?$AAW?$AAi?$AAn?$AAD?$AAi?$AAr?$AA?$DN?$AA?$AA@
0x14000B0D0: "AslAnsiStringCreate" ??_C@_0BE@IKJKFOPD@AslAnsiStringCreate?$AA@
0x14000A8F8: "Failed to parse user SID argumen" ??_C@_0CC@JGHOGBFH@Failed?5to?5parse?5user?5SID?5argumen@
0x1400016E0: "unsigned long __cdecl ParseCommandLine(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned __int64,unsigned __int64,unsigned __int64,unsigned __int64,unsigned __int64,unsigned short const * __ptr64)" ?ParseCommandLine@@YAKPEAG0000PEAK0_K2222PEBG@Z
0x14000A3D8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000A938: "Failed to store user sid" ??_C@_0BJ@PPFNAFBH@Failed?5to?5store?5user?5sid?$AA@
0x14000A288: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000B428: "ProgramFilesDir" ??_C@_1CA@BENHECIP@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?$AA@
0x14000C1AC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140004848: AslRegistryBuildMachinePath
0x140008DF4: "__cdecl _security_init_cookie" __security_init_cookie
0x14000A360: "__cdecl _imp__cexit" __imp__cexit
0x140008CA8: "__cdecl get_image_app_type" _get_image_app_type
0x14000A520: "__cdecl _imp_?PcaLaunchApplicationWithConsent@@YAKPEAUHWND__@@PEBG11@Z" __imp_?PcaLaunchApplicationWithConsent@@YAKPEAUHWND__@@PEBG11@Z
0x14000ADC0: "AslEnvGetProcessWowInfo failed [" ??_C@_0CE@JCOOOONA@AslEnvGetProcessWowInfo?5failed?5?$FL@
0x140001620: "struct HWND__ * __ptr64 __cdecl CreateHiddenWindow(struct HINSTANCE__ * __ptr64)" ?CreateHiddenWindow@@YAPEAUHWND__@@PEAUHINSTANCE__@@@Z
0x14000C1D4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000A358: "__cdecl _imp_memmove" __imp_memmove
0x14000A1F0: ADVAPI32_NULL_THUNK_DATA
0x14000A1D8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x14000A240: "__cdecl _imp_WriteFile" __imp_WriteFile
0x14000A820: "Failed to parse event type argum" ??_C@_0CE@INFPBEFH@Failed?5to?5parse?5event?5type?5argum@
0x14000A458: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x1400089A0: "__cdecl _report_gsfailure" __report_gsfailure
0x14000A498: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x140008B18: "__cdecl onexit" _onexit
0x14000C210: "__cdecl _IMPORT_DESCRIPTOR_pcaui" __IMPORT_DESCRIPTOR_pcaui
0x14000D730: "__cdecl _native_startup_state" __native_startup_state
0x14000B6D8: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140005788: "public: void __cdecl RtlNameValueArray::Free(void) __ptr64" ?Free@RtlNameValueArray@@QEAAXXZ
0x1400024E0: "void __cdecl AslLogpFinalizeBuffer(char * __ptr64,unsigned __int64)" ?AslLogpFinalizeBuffer@@YAXPEAD_K@Z
0x14000C1FC: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x14000A340: "__cdecl _imp__fmode" __imp__fmode
0x140007008: AslEnvBuildBasic
0x14000AD78: "AslRegistryGetUInt32" ??_C@_0BF@GLMGGLJH@AslRegistryGetUInt32?$AA@
0x14000AEF0: "AslRegistryGetKey" ??_C@_0BC@FAHHPEFC@AslRegistryGetKey?$AA@
0x14000B2D0: "AslpEnvResolveVars" ??_C@_0BD@FJEPFPIH@AslpEnvResolveVars?$AA@
0x1400039EC: AslpTelemetryAppend
0x140005480: AslFileGetLongVersionForCurrentModule
0x14000A630: "ParseCommandLine" ??_C@_0BB@BIIBDKCG@ParseCommandLine?$AA@
0x14000A5F8: "ExtractAppCommandLine" ??_C@_0BG@IOPGFMOJ@ExtractAppCommandLine?$AA@
0x14000B0A0: "AslStringDuplicate failed with "" ??_C@_0CJ@BMHBNALG@AslStringDuplicate?5failed?5with?5?$CC@
0x14000B3F8: "CommonProgramFiles(x86)" ??_C@_1DA@NDENMJEC@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x140008D60: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000A868: "Failed to store event type" ??_C@_0BL@DNNKDIJB@Failed?5to?5store?5event?5type?$AA@
0x14000AA20: AE_DEBUG_EVENT
0x14000A4D0: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x140008FD1: memset
0x14000C238: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000B380: "CommonFilesDir" ??_C@_1BO@HALHHILJ@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?$AA@

[JEB Decompiler by PNF Software]