Generated by JEB on 2019/08/01

PE: C:\Windows\System32\microsoft.windows.softwarelogo.showdesktop.exe Base=0x140000000 SHA-256=3F13C94B117C263EC77B112CB5E17528401211793CFE141C8D7F266F4ECDB72B
PDB: Microsoft.Windows.SoftwareLogo.ShowDesktop.pdb GUID={C9E61479-CB9F-4AFD-B559ACBF73D46319} Age=1

154 located named symbols:
0x140001DC4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140001C00: "__cdecl FindPESection" _FindPESection
0x140003680: "te.exe" ??_C@_1O@EPGALEFP@?$AAt?$AAe?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400032A8: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140001BF0: "__cdecl wsetargv" _wsetargv
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003398: " Monitor Mode: " ??_C@_1CC@KGACFEM@?$AA?7?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AA?5?$AAM?$AAo?$AAd?$AAe?$AA?3?$AA?7?$AA?7?$AA?$AA@
0x140003220: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140003180: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140003510: "IsWindowsStoreAppVisible failed:" ??_C@_1FA@OMIKNLNN@?$AAI?$AAs?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAS?$AAt?$AAo?$AAr?$AAe?$AAA?$AAp?$AAp?$AAV?$AAi?$AAs?$AAi?$AAb?$AAl?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?3@
0x140002020: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003A20: "CoInitializeEx failed: 0x%x " ??_C@_1DM@KFNKJIEF@?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AN?$AA?6?$AA?$AA@
0x140003138: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140001000: "void __cdecl ShowDesktop(void)" ?ShowDesktop@@YAXXZ
0x140005048: "__cdecl commode" _commode
0x140003570: "NOT FOUND" ??_C@_1BE@MNNJLANJ@?$AAN?$AAO?$AAT?$AA?5?$AAF?$AAO?$AAU?$AAN?$AAD?$AA?$AA@
0x1400032B0: ole32_NULL_THUNK_DATA
0x140001AF0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400032C0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140005054: "__cdecl fmode" _fmode
0x140003690: "te.processhost.exe" ??_C@_1CG@HEIDGPOI@?$AAt?$AAe?$AA?4?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400035C8: "GetTokenInformation error:%d " ??_C@_1DM@IPFAJCCD@?$AAG?$AAe?$AAt?$AAT?$AAo?$AAk?$AAe?$AAn?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?$CF?$AAd?$AA?6?$AA?$AA@
0x140003700: "Command line options: -o <file p" ??_C@_1BGM@PBKFOABH@?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AAl?$AAi?$AAn?$AAe?$AA?5?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?3?$AA?6?$AA?9?$AAo?$AA?5?$AA?$DM?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAp@
0x140001B48: "__cdecl XcptFilter" _XcptFilter
0x1400032C8: "__cdecl _xc_a" __xc_a
0x140003260: "__cdecl _imp__vsnwprintf_s" __imp__vsnwprintf_s
0x140003288: "__cdecl _imp_memset" __imp_memset
0x140001DA5: "__cdecl initterm" _initterm
0x140005600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140003150: "__cdecl _imp_Sleep" __imp_Sleep
0x1400032F8: "__cdecl _xi_z" __xi_z
0x140003330: CLSID_AppVisibility
0x1400031C0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140001DAB: "__cdecl _C_specific_handler" __C_specific_handler
0x140001FA0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400010C0: "int __cdecl MonitorEnumProc(struct HMONITOR__ * __ptr64,struct HDC__ * __ptr64,struct tagRECT * __ptr64,__int64)" ?MonitorEnumProc@@YAHPEAUHMONITOR__@@PEAUHDC__@@PEAUtagRECT@@_J@Z
0x140001BE9: "__cdecl amsg_exit" _amsg_exit
0x1400031E0: "__cdecl _imp_PathStripPathW" __imp_PathStripPathW
0x140003210: "__cdecl _imp_exit" __imp_exit
0x140003170: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x140003298: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x140003128: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400055F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140003498: " IsLauncherVisible: %s " ??_C@_1DC@ILHCIKHO@?$AA?7?$AAI?$AAs?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AAV?$AAi?$AAs?$AAi?$AAb?$AAl?$AAe?$AA?3?$AA?7?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x140001B30: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140003268: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140003240: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400031A8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400031D8: KERNEL32_NULL_THUNK_DATA
0x140003560: "FOUND" ??_C@_1M@ICHCOHJ@?$AAF?$AAO?$AAU?$AAN?$AAD?$AA?$AA@
0x140003158: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140001F80: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140003230: "__cdecl _imp__commode" __imp__commode
0x140003E8C: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x140003278: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140003E3C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140003188: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140003430: "Checking for Windows Store app U" ??_C@_1EI@OADIFMPO@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAa?$AAp?$AAp?$AA?5?$AAU@
0x140001CA0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400036B8: "appcert.exe" ??_C@_1BI@GBPLGJKL@?$AAa?$AAp?$AAp?$AAc?$AAe?$AAr?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140001148: "int __cdecl IsMetroVisible(void)" ?IsMetroVisible@@YAHXZ
0x140003E78: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x140003148: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140005050: "__cdecl newmode" _newmode
0x140003280: "__cdecl _imp__initterm" __imp__initterm
0x140003218: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140003640: "Failed to enum processes: 0x%x " ??_C@_1EA@BBGCOBCH@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAn?$AAu?$AAm?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAe?$AAs?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x140003368: "SendInput failed: 0x%x " ??_C@_1DA@BMJOMPBF@?$AAS?$AAe?$AAn?$AAd?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?3?$AA?5?$AA0?$AAx?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x1400031F8: "__cdecl _imp_EnumDisplayMonitors" __imp_EnumDisplayMonitors
0x1400036D0: "appcertui.exe" ??_C@_1BM@CCCLMEHA@?$AAa?$AAp?$AAp?$AAc?$AAe?$AAr?$AAt?$AAu?$AAi?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400031E8: SHLWAPI_NULL_THUNK_DATA
0x1400055E0: "__cdecl _onexitend" __onexitend
0x140003208: "__cdecl _imp__exit" __imp__exit
0x1400032B8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003588: " Windows Store app UI: %s " ??_C@_1DK@HMLABGOI@?$AA?7?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAa?$AAp?$AAp?$AA?5?$AAU?$AAI?$AA?3?$AA?7?$AA?7?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$AA@
0x1400031C8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003200: USER32_NULL_THUNK_DATA
0x140003118: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1400055D0: "void * __ptr64 __ptr64 g_hFile" ?g_hFile@@3PEAXEA
0x1400032E0: "__cdecl _xi_a" __xi_a
0x1400031D0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001BF0: "__cdecl matherr" _matherr
0x14000154C: wmain
0x140003980: "UI automation access is allowed." ??_C@_1EG@BIMDAMMN@?$AAU?$AAI?$AA?5?$AAa?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?4@
0x140001AD0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400032D8: "__cdecl _xc_z" __xc_z
0x140003488: "FALSE" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x1400031F0: "__cdecl _imp_SendInput" __imp_SendInput
0x140003228: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400032A0: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140003178: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140003168: "__cdecl _imp_K32EnumProcesses" __imp_K32EnumProcesses
0x1400033F0: "WINDOWSSTORE " ??_C@_1BO@GMBOBNKC@?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AAS?$AAT?$AAO?$AAR?$AAE?$AA?$AN?$AA?6?$AA?$AA@
0x140002040: "__cdecl _chkstk" __chkstk
0x140003300: "__cdecl _guard_fids_table" __guard_fids_table
0x140003290: msvcrt_NULL_THUNK_DATA
0x140003010: "__cdecl load_config_used" _load_config_used
0x140003EA0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x14000386C: "-f" ??_C@_15OLECOAGL@?$AA?9?$AAf?$AA?$AA@
0x140003410: "UNDEFINED " ??_C@_1BI@IEABEOKI@?$AAU?$AAN?$AAD?$AAE?$AAF?$AAI?$AAN?$AAE?$AAD?$AA?$AN?$AA?6?$AA?$AA@
0x140003250: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140003478: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x1400031B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140003190: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000504C: "__cdecl dowildcard" _dowildcard
0x1400031B8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400038F0: "WindowsACK is not running. Not p" ??_C@_1IK@BBBOLNIL@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAA?$AAC?$AAK?$AA?5?$AAi?$AAs?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAr?$AAu?$AAn?$AAn?$AAi?$AAn?$AAg?$AA?4?$AA?5?$AAN?$AAo?$AAt?$AA?5?$AAp@
0x140001DC0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140003340: "Sending 'Win-D' " ??_C@_1CE@KOBCMNJC@?$AAS?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AA?8?$AAW?$AAi?$AAn?$AA?9?$AAD?$AA?8?$AA?$AN?$AA?6?$AA?$AA@
0x140001B50: RtlpImageNtHeader
0x140003608: "Failed to open the token. " ??_C@_1DG@PHNOKOKP@?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAt?$AAo?$AAk?$AAe?$AAn?$AA?4?$AA?6?$AA?$AA@
0x1400033C0: "UNKNOWN " ??_C@_1BE@KFLCDEFE@?$AAU?$AAN?$AAK?$AAN?$AAO?$AAW?$AAN?$AA?$AN?$AA?6?$AA?$AA@
0x140001260: "int __cdecl OutputString(unsigned short * __ptr64,...)" ?OutputString@@YAHPEAGZZ
0x1400033D8: "DESKTOP " ??_C@_1BE@OMJBLDBC@?$AAD?$AAE?$AAS?$AAK?$AAT?$AAO?$AAP?$AA?$AN?$AA?6?$AA?$AA@
0x1400034D0: "EnumDisplayMonitors failed. " ??_C@_1DM@OAJKDLMA@?$AAE?$AAn?$AAu?$AAm?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAs?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?$AN?$AA?6?$AA?$AA@
0x140003198: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003258: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140005008: "__cdecl _security_cookie" __security_cookie
0x1400039D0: "UI automation access is NOT allo" ??_C@_1EO@DNNFFNFJ@?$AAU?$AAI?$AA?5?$AAa?$AAu?$AAt?$AAo?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAa?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAN?$AAO?$AAT?$AA?5?$AAa?$AAl?$AAl?$AAo@
0x140002040: "__cdecl alloca_probe" _alloca_probe
0x140003160: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400036EC: "-?" ??_C@_15FNEHKAED@?$AA?9?$AA?$DP?$AA?$AA@
0x1400055E8: "__cdecl _onexitbegin" __onexitbegin
0x140003140: "__cdecl _imp_K32GetProcessImageFileNameW" __imp_K32GetProcessImageFileNameW
0x1400031A0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140003E50: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001CD0: "__cdecl _security_init_cookie" __security_init_cookie
0x140003248: "__cdecl _imp__cexit" __imp__cexit
0x140001BA4: "__cdecl get_image_app_type" _get_image_app_type
0x140003E64: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140003270: "__cdecl _imp_wprintf" __imp_wprintf
0x140001AA0: wmainCRTStartup
0x140003880: "Cannot write to the specified fi" ??_C@_1GE@HMDKIJDC@?$AAC?$AAa?$AAn?$AAn?$AAo?$AAt?$AA?5?$AAw?$AAr?$AAi?$AAt?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?5?$AAf?$AAi@
0x140003120: ADVAPI32_NULL_THUNK_DATA
0x140003A60: "__cdecl GUID_2246ea2d_caea_4444_a3c4_6de827e44313" _GUID_2246ea2d_caea_4444_a3c4_6de827e44313
0x140003130: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140001E00: "__cdecl _report_gsfailure" __report_gsfailure
0x1400055F8: "__cdecl _native_startup_state" __native_startup_state
0x140001348: "bool __cdecl IsWinACKTestRunning(void)" ?IsWinACKTestRunning@@YA_NXZ
0x140003874: "-o" ??_C@_15JGEKKPOB@?$AA?9?$AAo?$AA?$AA@
0x1400055D8: "int g_fOutputToFile" ?g_fOutputToFile@@3HA
0x140003238: "__cdecl _imp__fmode" __imp__fmode
0x140001C50: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140003110: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140002000: memset
0x140003EB4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]