Generated by JEB on 2019/08/01

PE: C:\Windows\System32\pcwrun.exe Base=0x140000000 SHA-256=3DE0D85F8170457E741B8C7B2EC0CBFC5BDF6EB37012E4A5E7EEE93B149AE7CF
PDB: pcwrun.pdb GUID={BB5C9B01-CDD1-1F31-1C11A5E00A2B4AF4} Age=1

157 located named symbols:
0x140003188: "__cdecl _imp_LockResource" __imp_LockResource
0x14000223C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400034A8: "%windir%\System32\msdt.exe" ??_C@_1DG@PAJFJOGK@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAm?$AAs?$AAd?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400033B0: "PCW" ??_C@_17BAONJMIJ@?$AAP?$AAC?$AAW?$AA?$AA@
0x140003588: ".tmp" ??_C@_19LKKOIHJI@?$AA?4?$AAt?$AAm?$AAp?$AA?$AA@
0x1400033D0: "/Answers/Interaction[@ID='IT_Bro" ??_C@_1GG@MDBJHDLI@?$AA?1?$AAA?$AAn?$AAs?$AAw?$AAe?$AAr?$AAs?$AA?1?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$FL?$AA?$EA?$AAI?$AAD?$AA?$DN?$AA?8?$AAI?$AAT?$AA_?$AAB?$AAr?$AAo@
0x140002050: "__cdecl FindPESection" _FindPESection
0x140003278: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400039E0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140003A30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140002040: "__cdecl wsetargv" _wsetargv
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003140: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1400032E0: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x1400031B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400024B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003250: SHELL32_NULL_THUNK_DATA
0x140003128: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1400039F4: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x140003248: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x140005048: "__cdecl commode" _commode
0x140003440: "/Answers/Interaction[@ID='IT_Lau" ??_C@_1GE@GFFMMFKN@?$AA?1?$AAA?$AAn?$AAs?$AAw?$AAe?$AAr?$AAs?$AA?1?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$FL?$AA?$EA?$AAI?$AAD?$AA?$DN?$AA?8?$AAI?$AAT?$AA_?$AAL?$AAa?$AAu@
0x140001AD8: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x1400031A0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140001F20: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140003350: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140005054: "__cdecl fmode" _fmode
0x140001AF0: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x1400018C0: wWinMain
0x140001F7E: "__cdecl XcptFilter" _XcptFilter
0x140003358: "__cdecl _xc_a" __xc_a
0x140003198: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140001354: "long __cdecl ConfigureAnswerFile(unsigned short const * __ptr64,unsigned short const * __ptr64,struct IXMLDOMDocument * __ptr64)" ?ConfigureAnswerFile@@YAJPEBG0PEAUIXMLDOMDocument@@@Z
0x1400031D8: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14000178C: "long __cdecl LaunchPcw(unsigned short const * __ptr64)" ?LaunchPcw@@YAJPEBG@Z
0x14000248D: memcpy
0x140003120: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x140003318: "__cdecl _imp_memset" __imp_memset
0x14000220F: "__cdecl initterm" _initterm
0x1400055F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400031E0: "__cdecl _imp_Sleep" __imp_Sleep
0x140003388: "__cdecl _xi_z" __xi_z
0x1400031F0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000221B: "__cdecl _C_specific_handler" __C_specific_handler
0x140003148: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000242C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140002033: "__cdecl amsg_exit" _amsg_exit
0x1400032B8: "__cdecl _imp_exit" __imp_exit
0x140003240: OLEAUT32_NULL_THUNK_DATA
0x140003280: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400032D8: "__cdecl _imp__wcmdln" __imp__wcmdln
0x1400035A8: "__cdecl GUID_88d96a05_f192_11d4_a65f_0040963251e5" _GUID_88d96a05_f192_11d4_a65f_0040963251e5
0x1400031F8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000169C: "long __cdecl GenerateAnswerFile(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?GenerateAnswerFile@@YAJPEBG0PEAG@Z
0x1400055E8: "__cdecl _native_startup_lock" __native_startup_lock
0x140001F60: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400032A8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140003328: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140003210: KERNEL32_NULL_THUNK_DATA
0x140003160: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002408: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140003290: "__cdecl _imp__commode" __imp__commode
0x140003A1C: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x140003298: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400031C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140003260: "__cdecl _imp_PathAddExtensionW" __imp_PathAddExtensionW
0x140001EC0: wWinMainCRTStartup
0x140002100: "__cdecl ValidateImageBase" _ValidateImageBase
0x140003170: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x140003118: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x140003178: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140005050: "__cdecl newmode" _newmode
0x140003308: "__cdecl _imp__initterm" __imp__initterm
0x1400032B0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140001008: "long __cdecl LoadXMLStream(unsigned char * __ptr64,int,unsigned short * __ptr64,struct IXMLDOMDocument * __ptr64)" ?LoadXMLStream@@YAJPEAEHPEAGPEAUIXMLDOMDocument@@@Z
0x1400031A8: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x140003598: "__cdecl GUID_2933bf81_7b36_11d2_b20e_00c04f983e60" _GUID_2933bf81_7b36_11d2_b20e_00c04f983e60
0x140003268: SHLWAPI_NULL_THUNK_DATA
0x1400055D8: "__cdecl _onexitend" __onexitend
0x1400032C0: "__cdecl _imp__exit" __imp__exit
0x140003348: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003540: "%ls -path %ls -af %ls /skip TRUE" ??_C@_1EC@LINCGOBP@?$AA?$CF?$AAl?$AAs?$AA?5?$AA?9?$AAp?$AAa?$AAt?$AAh?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AA?9?$AAa?$AAf?$AA?5?$AA?$CF?$AAl?$AAs?$AA?5?$AA?1?$AAs?$AAk?$AAi?$AAp?$AA?5?$AAT?$AAR?$AAU?$AAE@
0x140003168: "__cdecl _imp_FindResourceW" __imp_FindResourceW
0x140003200: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003370: "__cdecl _xi_a" __xi_a
0x1400031E8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002040: "__cdecl matherr" _matherr
0x140003230: "__cdecl _imp_VariantClear" __imp_VariantClear
0x140001B08: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140001EF0: "__cdecl _security_check_cookie" __security_check_cookie
0x140003368: "__cdecl _xc_z" __xc_z
0x140003258: "__cdecl _imp_PathRemoveExtensionW" __imp_PathRemoveExtensionW
0x1400032A0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003270: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140003208: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140003150: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140003390: "__cdecl _guard_fids_table" __guard_fids_table
0x140003320: msvcrt_NULL_THUNK_DATA
0x140003010: "__cdecl load_config_used" _load_config_used
0x140001598: "long __cdecl SaveAnswerFile(struct IXMLDOMDocument * __ptr64,unsigned short * __ptr64)" ?SaveAnswerFile@@YAJPEAUIXMLDOMDocument@@PEAG@Z
0x140001218: "long __cdecl LoadAnswerFile(unsigned int,unsigned short * __ptr64,struct IXMLDOMDocument * __ptr64)" ?LoadAnswerFile@@YAJIPEAGPEAUIXMLDOMDocument@@@Z
0x1400032E8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140001A58: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140003330: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400031C8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000504C: "__cdecl dowildcard" _dowildcard
0x140001F14: free
0x1400033B8: ".xml" ??_C@_19PHMOHKPA@?$AA?4?$AAx?$AAm?$AAl?$AA?$AA@
0x140003338: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140002230: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140003190: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140001F8C: RtlpImageNtHeader
0x140003158: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003220: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x1400032F0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140003340: ntdll_NULL_THUNK_DATA
0x1400032D0: "__cdecl _imp_memcpy" __imp_memcpy
0x140005008: "__cdecl _security_cookie" __security_cookie
0x140003138: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400031B0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x140003288: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x140003238: "__cdecl _imp_VariantInit" __imp_VariantInit
0x140003228: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x1400055E0: "__cdecl _onexitbegin" __onexitbegin
0x1400055D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUwrztmlhrhUkwrUhxirkgvwwrztUkzxpztvhUkxdUrmelpviUlyquivUznwGEUkivxlnkOlyq@pcwrun" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUwrztmlhrhUkwrUhxirkgvwwrztUkzxpztvhUkxdUrmelpviUlyquivUznwGEUkivxlnkOlyq@pcwrun
0x140003300: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1400031D0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400039B8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140002134: "__cdecl _security_init_cookie" __security_init_cookie
0x1400032C8: "__cdecl _imp__cexit" __imp__cexit
0x140001FE8: "__cdecl get_image_app_type" _get_image_app_type
0x1400039CC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140003130: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140002280: "__cdecl _report_gsfailure" __report_gsfailure
0x1400055F0: "__cdecl _native_startup_state" __native_startup_state
0x1400034E0: "%windir%\diagnostics\index\PCWDi" ??_C@_1FK@KELIECDL@?$AA?$CF?$AAw?$AAi?$AAn?$AAd?$AAi?$AAr?$AA?$CF?$AA?2?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?2?$AAi?$AAn?$AAd?$AAe?$AAx?$AA?2?$AAP?$AAC?$AAW?$AAD?$AAi@
0x140003180: "__cdecl _imp_LoadResource" __imp_LoadResource
0x140003A08: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x140003310: "__cdecl _imp__fmode" __imp__fmode
0x140003218: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x1400032F8: "__cdecl _imp_free" __imp_free
0x1400020A0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140002499: memset
0x140003A44: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]