Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winrshost.exe Base=0x140000000 SHA-256=401441DB1DBE8189EB5CF230714D8271F10F1023E893901C6DB95E6325B46884
PDB: winrshost.pdb GUID={EE7A2466-52BD-5398-E973EBF14C87FA12} Age=1

361 located named symbols:
0x14000A0D0: "__cdecl _imp_RegisterClassW" __imp_RegisterClassW
0x1400043DC: "__cdecl _tailMerge_ext_ms_win_ntuser_message_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_message_l1_1_0_dll
0x140005408: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140003F3C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400050D0: "const CServerClassFactory::`vftable'" ??_7CServerClassFactory@@6B@
0x140003D50: "__cdecl FindPESection" _FindPESection
0x140002430: "public: virtual long __cdecl Winrs_CommandHostShell::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@Winrs_CommandHostShell@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000A018: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140003760: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140006544: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x14000A020: "__cdecl _imp_CoInitializeSecurity" __imp_CoInitializeSecurity
0x1400054C0: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140002850: "private: unsigned long __cdecl Winrs_CommandHostShell::SetCodePage(unsigned long) __ptr64" ?SetCodePage@Winrs_CommandHostShell@@AEAAKK@Z
0x140008020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400043D0: "__cdecl _imp_load_PostMessageW" __imp_load_PostMessageW
0x1400041D5: "__cdecl _imp_load_CoInitializeSecurity" __imp_load_CoInitializeSecurity
0x140001B30: WPP_SF_LL
0x1400052D0: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x140008618: "__cdecl _hmod__ext_ms_win_ntuser_draw_l1_1_0_dll" __hmod__ext_ms_win_ntuser_draw_l1_1_0_dll
0x140005348: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001854: WinMain
0x14000115C: WPP_SF_L
0x140005700: "__cdecl _sz_ext_ms_win_ntuser_window_l1_1_0_dll" __sz_ext_ms_win_ntuser_window_l1_1_0_dll
0x1400011A0: WppControlCallback
0x140004710: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400061C0: ext-ms-win-ntuser-draw-l1-1-0_NULL_THUNK_DATA_DLN
0x1400026B8: "private: unsigned long __cdecl Winrs_CommandHostShell::SetString(unsigned short * __ptr64 & __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?SetString@Winrs_CommandHostShell@@AEAAKAEAPEAGPEBGK@Z
0x140004333: "__cdecl _imp_load_GetSystemMenu" __imp_load_GetSystemMenu
0x1400041F9: "__cdecl _imp_load_CoRegisterClassObject" __imp_load_CoRegisterClassObject
0x14000A000: "__cdecl _imp_CoRevokeClassObject" __imp_CoRevokeClassObject
0x14000452E: "__cdecl _imp_load_ShowWindow" __imp_load_ShowWindow
0x140008088: "__cdecl commode" _commode
0x140005A60: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x140005A08: WPP_560cd2298efc35aebe0ba7ea0c1801b0_Traceguids
0x1400064F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x1400053B8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140008664: "unsigned long g_HostRegisterProfile" ?g_HostRegisterProfile@@3KA
0x140008648: "__cdecl _hmod__ext_ms_win_ntuser_windowclass_l1_1_0_dll" __hmod__ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x1400052C0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140003C20: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140005508: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000235C: "public: virtual __cdecl Winrs_CommandHostShell::~Winrs_CommandHostShell(void) __ptr64" ??1Winrs_CommandHostShell@@UEAA@XZ
0x1400060DC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_menu_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_menu_l1_1_0_dll
0x140008094: "__cdecl fmode" _fmode
0x140001D70: "public: virtual unsigned long __cdecl Winrs_CommandHost::AddRef(void) __ptr64" ?AddRef@Winrs_CommandHost@@UEAAKXZ
0x140005250: "__cdecl _imp_GenerateConsoleCtrlEvent" __imp_GenerateConsoleCtrlEvent
0x1400053C0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1400045A8: "__cdecl _imp_load_RegisterClassW" __imp_load_RegisterClassW
0x140008620: "__cdecl _hmod__ext_ms_win_ntuser_gui_l1_1_0_dll" __hmod__ext_ms_win_ntuser_gui_l1_1_0_dll
0x1400061D8: ext-ms-win-ntuser-gui-l1-1-0_NULL_THUNK_DATA_DLN
0x140006428: ext-ms-win-ntuser-gui-l1-1-0_NULL_THUNK_DATA_DLB
0x14000A058: ext-ms-win-ntuser-gui-l1-1-0_NULL_THUNK_DATA_DLA
0x14000A080: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140003C7E: "__cdecl XcptFilter" _XcptFilter
0x140005510: "__cdecl _xc_a" __xc_a
0x140005350: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140003740: "public: virtual long __cdecl CServerClassFactory::LockServer(int) __ptr64" ?LockServer@CServerClassFactory@@UEAAJH@Z
0x14000607C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x140005358: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400052E8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x1400040F7: "__cdecl lock" _lock
0x140005670: "__cdecl _sz_ext_ms_win_ntuser_gui_l1_1_0_dll" __sz_ext_ms_win_ntuser_gui_l1_1_0_dll
0x1400017B0: "int __cdecl HandlerRoutine(unsigned long)" ?HandlerRoutine@@YAHK@Z
0x1400055D8: "__cdecl _guard_iat_table" __guard_iat_table
0x140005328: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1400046E1: memcpy
0x140005488: "__cdecl _imp__acmdln" __imp__acmdln
0x1400054F0: "__cdecl _imp_memset" __imp_memset
0x1400053B0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x1400033C0: "public: virtual long __cdecl Winrs_CommandHostShell::SendEof(void) __ptr64" ?SendEof@Winrs_CommandHostShell@@UEAAJXZ
0x1400053C8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140003F0F: "__cdecl initterm" _initterm
0x140005430: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x140006508: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400086F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400053D8: "__cdecl _imp_Sleep" __imp_Sleep
0x140005548: "__cdecl _xi_z" __xi_z
0x140005288: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000446D: "__cdecl _imp_load_TranslateMessage" __imp_load_TranslateMessage
0x140003F1B: "__cdecl _C_specific_handler" __C_specific_handler
0x140008670: "struct _RTL_CRITICAL_SECTION s_CriticalSection" ?s_CriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x1400054B0: "__cdecl _imp__onexit" __imp__onexit
0x1400052E0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1400058C8: WPP_ThisDir_CTLGUID_RemoteShell
0x1400086C0: WPP_REGISTRATION_GUIDS
0x140005230: "__cdecl _imp_SetConsoleCtrlHandler" __imp_SetConsoleCtrlHandler
0x14000A0A0: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x1400052B0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1400060FC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_message_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_message_l1_1_0_dll
0x140004680: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140004296: "__cdecl _imp_load_LoadIconW" __imp_load_LoadIconW
0x140004126: "__cdecl _imp_load_CoRevokeClassObject" __imp_load_CoRevokeClassObject
0x140008698: WPP_MAIN_CB
0x140006480: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLB
0x140003D33: "__cdecl amsg_exit" _amsg_exit
0x140005630: IID_IClassFactory
0x14000A008: "__cdecl _imp_CoRegisterClassObject" __imp_CoRegisterClassObject
0x140005A58: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140008610: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x140006594: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0
0x140005480: "__cdecl _imp_exit" __imp_exit
0x140003140: "public: virtual long __cdecl Winrs_CommandHostShell::Send(unsigned long,unsigned char * __ptr64) __ptr64" ?Send@Winrs_CommandHostShell@@UEAAJKPEAE@Z
0x140002320: "public: virtual void * __ptr64 __cdecl Winrs_CommandHostShell::`vector deleting destructor'(unsigned int) __ptr64" ??_EWinrs_CommandHostShell@@UEAAPEAXI@Z
0x140005440: "__cdecl _imp__lock" __imp__lock
0x140008628: "__cdecl _hmod__ext_ms_win_ntuser_menu_l1_1_0_dll" __hmod__ext_ms_win_ntuser_menu_l1_1_0_dll
0x140003BF8: atexit
0x140002BF8: "private: unsigned long __cdecl Winrs_CommandHostShell::Creation(unsigned short const * __ptr64,unsigned short * __ptr64,int,unsigned short * __ptr64,void * __ptr64,unsigned long,int,struct _STARTUPINFOW & __ptr64,unsigned long & __ptr64,void * __ptr64 & __ptr64,void * __ptr64 & __ptr64) __ptr64" ?Creation@Winrs_CommandHostShell@@AEAAKPEBGPEAGH1PEAXKHAEAU_STARTUPINFOW@@AEAKAEAPEAX5@Z
0x14000451C: "__cdecl _imp_load_CreateWindowExW" __imp_load_CreateWindowExW
0x14000A010: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x14000609C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_draw_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_draw_l1_1_0_dll
0x140005418: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1400052A0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140005410: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1400052F8: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x140005340: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000410F: "__cdecl _dllonexit" __dllonexit
0x140002D30: "public: virtual long __cdecl Winrs_CommandHostShell::RunCommand(unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,__int64,__int64,__int64,struct _CMD_WINRS_RUN_COMMAND_RESULT * __ptr64) __ptr64" ?RunCommand@Winrs_CommandHostShell@@UEAAJKKPEBG0_J11PEAU_CMD_WINRS_RUN_COMMAND_RESULT@@@Z
0x140008638: "__cdecl _hmod__ext_ms_win_ntuser_window_l1_1_0_dll" __hmod__ext_ms_win_ntuser_window_l1_1_0_dll
0x1400086D8: "__cdecl _native_startup_lock" __native_startup_lock
0x1400035F0: "public: virtual unsigned long __cdecl CServerClassFactory::Release(void) __ptr64" ?Release@CServerClassFactory@@UEAAKXZ
0x140005308: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x140003C60: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400054E0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400025E0: "public: virtual unsigned long __cdecl Winrs_CommandHostShell::Release(void) __ptr64" ?Release@Winrs_CommandHostShell@@UEAAKXZ
0x140005490: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140005398: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002264: "public: __cdecl Winrs_CommandHostShell::Winrs_CommandHostShell(void) __ptr64" ??0Winrs_CommandHostShell@@QEAA@XZ
0x1400065E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x140004633: "__cdecl _imp_load_UnregisterClassW" __imp_load_UnregisterClassW
0x140005298: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1400043BE: "__cdecl _imp_load_DeleteMenu" __imp_load_DeleteMenu
0x14000465C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140002970: "private: unsigned long __cdecl Winrs_CommandHostShell::CreateEnvironment(unsigned long,unsigned char * __ptr64) __ptr64" ?CreateEnvironment@Winrs_CommandHostShell@@AEAAKKPEAE@Z
0x1400055E0: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x140005470: "__cdecl _imp__commode" __imp__commode
0x1400054A0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400061B0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x1400063E0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x14000A030: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x140006634: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x140005330: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000A050: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x140005A58: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140003E00: "__cdecl ValidateImageBase" _ValidateImageBase
0x140005258: "__cdecl _imp_WriteConsoleInputW" __imp_WriteConsoleInputW
0x140005620: IID_IUnknown
0x140005A18: CLSID_Winrs_CommandHost
0x1400086D4: "long s_LocksInProgress" ?s_LocksInProgress@@3JA
0x140002320: "public: virtual void * __ptr64 __cdecl Winrs_CommandHostShell::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWinrs_CommandHostShell@@UEAAPEAXI@Z
0x140004540: "__cdecl _imp_load_DestroyWindow" __imp_load_DestroyWindow
0x14000A078: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x140001024: "public: enum WmiStatusCode __cdecl WmiAllocator::UnInitialize(void) __ptr64" ?UnInitialize@WmiAllocator@@QEAA?AW4WmiStatusCode@@XZ
0x140001138: WPP_SF_
0x1400052D8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140004554: IsCreateWindowExWPresent
0x14000615C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140005368: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140008090: "__cdecl newmode" _newmode
0x140005498: "__cdecl _imp__initterm" __imp__initterm
0x1400054B8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400061F0: ext-ms-win-ntuser-menu-l1-1-0_NULL_THUNK_DATA_DLN
0x14000A0C0: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLA
0x140003D40: "__cdecl setargv" _setargv
0x14000A048: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x140006620: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1400058B8: WPP_85b0b537459f3078e1011a94e09f719a_Traceguids
0x1400053E8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x140005310: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x14000A038: "__cdecl _imp_UpdateWindow" __imp_UpdateWindow
0x140006530: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x14000A088: "__cdecl _imp_GetMessageW" __imp_GetMessageW
0x1400086E8: "__cdecl _onexitend" __onexitend
0x140005458: "__cdecl _imp__exit" __imp__exit
0x140004103: "__cdecl unlock" _unlock
0x140005500: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140001534: "long __cdecl InitFactories(void)" ?InitFactories@@YAJXZ
0x14000A0A8: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x140005338: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000A0B8: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x140005218: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x1400041E7: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x140005A48: IID_IHost
0x140005970: "http://schemas.microsoft.com/wbe" ??_C@_1JE@GMCBICFE@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x140006240: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLN
0x14000A070: ext-ms-win-ntuser-menu-l1-1-0_NULL_THUNK_DATA_DLA
0x140005400: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140005530: "__cdecl _xi_a" __xi_a
0x140005370: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1400053F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002550: "public: virtual unsigned long __cdecl Winrs_CommandHostShell::AddRef(void) __ptr64" ?AddRef@Winrs_CommandHostShell@@UEAAKXZ
0x140005278: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x140003D40: "__cdecl matherr" _matherr
0x140005448: "__cdecl _imp__unlock" __imp__unlock
0x140008668: "struct HWND__ * __ptr64 __ptr64 g_Hwnd" ?g_Hwnd@@3PEAUHWND__@@EA
0x140005240: "__cdecl _imp_SetConsoleCP" __imp_SetConsoleCP
0x140001280: "__int64 __cdecl WindowsMainProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?WindowsMainProc@@YA_JPEAUHWND__@@I_K_J@Z
0x140008030: "class WmiAllocator g_Allocator" ?g_Allocator@@3VWmiAllocator@@A
0x140008000: WPP_GLOBAL_Control
0x140001E00: "public: virtual unsigned long __cdecl Winrs_CommandHost::Release(void) __ptr64" ?Release@Winrs_CommandHost@@UEAAKXZ
0x140005A04: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14000656C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140006558: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1400052C8: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x140005460: "__cdecl _imp___dllonexit" __imp___dllonexit
0x1400052F0: "__cdecl _imp_GetConsoleWindow" __imp_GetConsoleWindow
0x1400064CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1400053A8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x140003B40: "__cdecl _security_check_cookie" __security_check_cookie
0x14000A060: "__cdecl _imp_GetSystemMenu" __imp_GetSystemMenu
0x140005528: "__cdecl _xc_z" __xc_z
0x1400041C3: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x140005360: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14000162C: "unsigned long __cdecl WorkLoop(void)" ?WorkLoop@@YAKXZ
0x140001080: "public: enum WmiStatusCode __cdecl WmiAllocator::New(void * __ptr64 * __ptr64,unsigned __int64) __ptr64" ?New@WmiAllocator@@QEAA?AW4WmiStatusCode@@PEAPEAX_K@Z
0x140001228: WppCleanupUm
0x140005468: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140001B90: "public: virtual void * __ptr64 __cdecl Winrs_CommandHost::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWinrs_CommandHost@@UEAAPEAXI@Z
0x14000A028: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1400053F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140008658: "struct IUnknown * __ptr64 __ptr64 g_HostClassFactory" ?g_HostClassFactory@@3PEAUIUnknown@@EA
0x140005320: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x140005A38: IID_IShell
0x140005268: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1400052B8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x14000449D: "__cdecl _tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll
0x140005640: "__cdecl _sz_ext_ms_win_ntuser_draw_l1_1_0_dll" __sz_ext_ms_win_ntuser_draw_l1_1_0_dll
0x140006258: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLN
0x1400064A8: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLB
0x14000A0D8: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLA
0x140005730: "ext-ms-win-ntuser-window-l1-1-0" ??_C@_1EA@EOLBBGDA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x1400053A0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400041B1: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x1400013D4: "long __cdecl InitComServer(unsigned long,unsigned long)" ?InitComServer@@YAJKK@Z
0x14000660C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140006648: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140005380: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140005550: "__cdecl _guard_fids_table" __guard_fids_table
0x1400054F8: msvcrt_NULL_THUNK_DATA
0x140005100: "__cdecl load_config_used" _load_config_used
0x1400050A0: "const Winrs_CommandHost::`vftable'" ??_7Winrs_CommandHost@@6B@
0x140005220: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x14000611C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll
0x140005280: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140005270: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140003560: "public: virtual long __cdecl CServerClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CServerClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140005870: "__cdecl _sz_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __sz_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x140004491: "__cdecl _imp_load_DefWindowProcW" __imp_load_DefWindowProcW
0x1400010E8: "public: enum WmiStatusCode __cdecl WmiAllocator::Delete(void * __ptr64) __ptr64" ?Delete@WmiAllocator@@QEAA?AW4WmiStatusCode@@PEAX@Z
0x1400058A0: "Winrs Host" ??_C@_1BG@EDFMLIBC@?$AAW?$AAi?$AAn?$AAr?$AAs?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x1400065BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400054C8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140005610: CLSID_GlobalOptions
0x140008650: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUvcvUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrshost" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUdncUdrmihUkoftrmUvcvUozgvhgUlyquivUznwGEUkivxlnkOlyq@winrshost
0x140005A70: "__stdcall _xmm" __xmm@00000000000000000000000000000006
0x1400012B8: "struct HWND__ * __ptr64 __cdecl WindowsStart(struct HINSTANCE__ * __ptr64)" ?WindowsStart@@YAPEAUHWND__@@PEAUHINSTANCE__@@@Z
0x140006440: ext-ms-win-ntuser-menu-l1-1-0_NULL_THUNK_DATA_DLB
0x14000420B: "__cdecl _imp_load_UpdateWindow" __imp_load_UpdateWindow
0x140005388: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140005378: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000808C: "__cdecl dowildcard" _dowildcard
0x1400035D0: "public: virtual unsigned long __cdecl CServerClassFactory::AddRef(void) __ptr64" ?AddRef@CServerClassFactory@@UEAAKXZ
0x140001C50: "public: virtual long __cdecl Winrs_CommandHost::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@Winrs_CommandHost@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140004650: ApiSetQueryApiSetPresence
0x14000433F: "__cdecl _tailMerge_ext_ms_win_ntuser_menu_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_menu_l1_1_0_dll
0x140001B90: "public: virtual void * __ptr64 __cdecl Winrs_CommandHost::`vector deleting destructor'(unsigned int) __ptr64" ??_EWinrs_CommandHost@@UEAAPEAXI@Z
0x140005390: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140005A60: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140005248: "__cdecl _imp_SetConsoleOutputCP" __imp_SetConsoleOutputCP
0x140003F30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140005318: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140004132: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x140003C8C: RtlpImageNtHeader
0x1400058E0: "http://schemas.microsoft.com/wbe" ??_C@_1IM@NHBEJOCM@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x1400060BC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_gui_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_gui_l1_1_0_dll
0x140006580: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140005300: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000A0B0: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x140006218: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLN
0x14000A098: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLA
0x140006458: ext-ms-win-ntuser-message-l1-1-0_NULL_THUNK_DATA_DLB
0x14000A090: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x140005438: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1400056A0: "__cdecl _sz_ext_ms_win_ntuser_menu_l1_1_0_dll" __sz_ext_ms_win_ntuser_menu_l1_1_0_dll
0x1400054D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400054E8: "__cdecl _imp_memcpy" __imp_memcpy
0x140005450: "__cdecl _imp__ismbblead" __imp__ismbblead
0x1400056D0: "__cdecl _sz_ext_ms_win_ntuser_message_l1_1_0_dll" __sz_ext_ms_win_ntuser_message_l1_1_0_dll
0x140005428: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x14000651C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140003630: "public: virtual long __cdecl CServerClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CServerClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x140005420: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x140005208: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x140008018: "__cdecl _security_cookie" __security_cookie
0x140006418: ext-ms-win-ntuser-draw-l1-1-0_NULL_THUNK_DATA_DLB
0x1400052A8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140008010: "__cdecl _defaultmatherr" __defaultmatherr
0x1400064E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140005830: "ext-ms-win-ntuser-window-l1-1-4" ??_C@_1EA@MBNDIBGH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA4?$AA?$AA@
0x1400042A2: "__cdecl _tailMerge_ext_ms_win_ntuser_gui_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_gui_l1_1_0_dll
0x1400054D8: "__cdecl _imp_mbtowc" __imp_mbtowc
0x1400086F0: "__cdecl _onexitbegin" __onexitbegin
0x140005060: "const Winrs_CommandHostShell::`vftable'" ??_7Winrs_CommandHostShell@@6B@
0x14000445B: "__cdecl _imp_load_GetMessageW" __imp_load_GetMessageW
0x1400057F0: "ext-ms-win-ntuser-window-l1-1-3" ??_C@_1EA@FMAELJNO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3?$AA?$AA@
0x140005290: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400038D0: WinMainCRTStartup
0x140005260: api-ms-win-core-console-l2-1-0_NULL_THUNK_DATA
0x140005238: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140001BCC: "public: virtual __cdecl Winrs_CommandHost::~Winrs_CommandHost(void) __ptr64" ??1Winrs_CommandHost@@UEAA@XZ
0x140003E34: "__cdecl _security_init_cookie" __security_init_cookie
0x1400054A8: "__cdecl _imp__cexit" __imp__cexit
0x140005600: IID_IGlobalOptions
0x140003CE8: "__cdecl get_image_app_type" _get_image_app_type
0x14000A040: ext-ms-win-ntuser-draw-l1-1-0_NULL_THUNK_DATA_DLA
0x140001F10: "public: virtual long __cdecl Winrs_CommandHost::IndicateCLSID(struct _GUID) __ptr64" ?IndicateCLSID@Winrs_CommandHost@@UEAAJU_GUID@@@Z
0x1400064B8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400086C8: "void * __ptr64 __ptr64 g_ShutdownEvent" ?g_ShutdownEvent@@3PEAXEA
0x140005228: "__cdecl _imp_AllocConsole" __imp_AllocConsole
0x1400045B4: "__cdecl _tailMerge_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x14000A0C8: "__cdecl _imp_UnregisterClassW" __imp_UnregisterClassW
0x140003F80: "__cdecl _report_gsfailure" __report_gsfailure
0x140005210: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x14000613C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x140003B64: "__cdecl onexit" _onexit
0x1400086D0: "long s_ObjectsInProgress" ?s_ObjectsInProgress@@3JA
0x1400086E0: "__cdecl _native_startup_state" __native_startup_state
0x140002A64: "public: unsigned long __cdecl Winrs_CommandHostShell::Initialize(unsigned long,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned short const * __ptr64,unsigned long,unsigned char * __ptr64) __ptr64" ?Initialize@Winrs_CommandHostShell@@QEAAKKKPEBG0KK0KPEAE@Z
0x140008660: "unsigned long g_HostRegisterNoProfile" ?g_HostRegisterNoProfile@@3KA
0x1400057B0: "ext-ms-win-ntuser-window-l1-1-2" ??_C@_1EA@OELINOLL@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2?$AA?$AA@
0x14000A068: "__cdecl _imp_DeleteMenu" __imp_DeleteMenu
0x140002FA0: "public: virtual long __cdecl Winrs_CommandHostShell::Signal(unsigned short const * __ptr64) __ptr64" ?Signal@Winrs_CommandHostShell@@UEAAJPEBG@Z
0x14000447F: "__cdecl _imp_load_DispatchMessageW" __imp_load_DispatchMessageW
0x140005478: "__cdecl _imp__fmode" __imp__fmode
0x140008630: "__cdecl _hmod__ext_ms_win_ntuser_message_l1_1_0_dll" __hmod__ext_ms_win_ntuser_message_l1_1_0_dll
0x140005A28: CLSID_Winrs_CommandHostWithUserSettings
0x1400065F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140003DA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400053E0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140004217: "__cdecl _tailMerge_ext_ms_win_ntuser_draw_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_draw_l1_1_0_dll
0x140002030: "public: virtual long __cdecl Winrs_CommandHost::CreateShell(unsigned long,unsigned long,unsigned long,struct _CMD_WINRS_CREATE_SHELL_RESULT * __ptr64,struct IUnknown * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64) __ptr64" ?CreateShell@Winrs_CommandHost@@UEAAJKKKPEAU_CMD_WINRS_CREATE_SHELL_RESULT@@PEAPEAUIUnknown@@KPEAEPEBG3K3@Z
0x140005770: "ext-ms-win-ntuser-window-l1-1-1" ??_C@_1EA@PGANHBFF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1?$AA?$AA@
0x1400065A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400053D0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1400065D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140004321: "__cdecl _imp_load_LoadCursorW" __imp_load_LoadCursorW
0x1400046ED: memset
0x14000665C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]