PDB Symbols - wlrmdr.exe (0x4C13CCD996D58673BEC9FA19B1F06B8CA1D6823307B76C5A2A79799F1073BF64)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wlrmdr.exe Base=0x140000000 SHA-256=4C13CCD996D58673BEC9FA19B1F06B8CA1D6823307B76C5A2A79799F1073BF64
PDB: wlrmdr.pdb GUID={01E622D9-B206-E994-0F166B03D608F869} Age=1

349 located named symbols:
0x140002EA4: "unsigned long __cdecl GetWinLogonProcessId(unsigned long,unsigned long * __ptr64)" ?GetWinLogonProcessId@@YAKKPEAK@Z
0x1400041BC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400073E8: "__cdecl GUID_04124b20_82c6_4229_b109_fd9ed4662b53" _GUID_04124b20_82c6_4229_b109_fd9ed4662b53
0x140003FD0: "__cdecl FindPESection" _FindPESection
0x1400081FC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140008134: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140006C20: "__cdecl _imp___getmainargs" __imp___getmainargs
0x14000A010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140006920: "__cdecl _imp_RaiseException" __imp_RaiseException
0x140001620: "public: long __cdecl CSystemPopupWindow::ShowSystemDialog(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64) __ptr64" ?ShowSystemDialog@CSystemPopupWindow@@QEAAJPEBG0PEAX@Z
0x140006880: "__cdecl _imp_InitProcessPriv" __imp_InitProcessPriv
0x140006C80: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x1400075E0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x140006AB8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140006980: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x140006A40: "__cdecl _imp_GetAncestor" __imp_GetAncestor
0x140002C7C: WinMain
0x140004377: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x140006F40: "__cdecl GUID_4da31a12_cc32_49bc_b2cc_060dbcf2bafc" _GUID_4da31a12_cc32_49bc_b2cc_060dbcf2bafc
0x140006B78: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x1400030C8: "unsigned long __cdecl AicLogonWithSmartCardCreds(unsigned long,struct HWND__ * __ptr64)" ?AicLogonWithSmartCardCreds@@YAKKPEAUHWND__@@@Z
0x140004520: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400069B8: SHELL32_NULL_THUNK_DATA
0x140006F30: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x140006828: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x140006868: "__cdecl _imp_?Destroy@Element@DirectUI@@QEAAJ_N@Z" __imp_?Destroy@Element@DirectUI@@QEAAJ_N@Z
0x140006978: "__cdecl _imp_RpcAsyncCancelCall" __imp_RpcAsyncCancelCall
0x1400026D8: "void __cdecl UserClickAction(void)" ?UserClickAction@@YAXXZ
0x140006A08: "__cdecl _imp_GetThreadDesktop" __imp_GetThreadDesktop
0x14000A058: "__cdecl commode" _commode
0x1400074E0: "Local\Wl_Stop_Reminder_Event_%ld" ??_C@_1EC@DJDBINKD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAW?$AAl?$AA_?$AAS?$AAt?$AAo?$AAp?$AA_?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AA?$CF?$AAl?$AAd@
0x140007548: CLSID_PopupWindowFactory
0x14000A630: "long g_lCallCount" ?g_lCallCount@@3JA
0x140006B80: "__cdecl _imp_wcschr" __imp_wcschr
0x140006C88: ole32_NULL_THUNK_DATA
0x1400068D0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14000354C: "unsigned long __cdecl AicpStartAIS(unsigned long)" ?AicpStartAIS@@YAKK@Z
0x1400072B8: "WLReminderGroup" ??_C@_1CA@HOBLECI@?$AAW?$AAL?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
0x140003EB0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140006C98: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000A064: "__cdecl fmode" _fmode
0x140006930: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x140001534: "public: long __cdecl CSystemPopupWindow::SetButtonsOnDialog(void) __ptr64" ?SetButtonsOnDialog@CSystemPopupWindow@@QEAAJXZ
0x140005000: MsftWatermark
0x140006810: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x1400069F0: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140003F0E: "__cdecl XcptFilter" _XcptFilter
0x140006CA0: "__cdecl _xc_a" __xc_a
0x140006B88: "__cdecl _imp_wcsstr" __imp_wcsstr
0x14000815C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x140006AC8: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140006B30: "__cdecl _imp_RoInitialize" __imp_RoInitialize
0x140007458: "__cdecl GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637" _GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637
0x1400025C0: "public: virtual unsigned long __cdecl CNotificationCallback::AddRef(void) __ptr64" ?AddRef@CNotificationCallback@@UEAAKXZ
0x140007390: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotification" ?RuntimeClass_Windows_UI_Notifications_ToastNotification@@3QBGB
0x14000A638: "void * __ptr64 __ptr64 g_hStopEvent" ?g_hStopEvent@@3PEAXEA
0x140006B70: "__cdecl _imp_WindowsCreateStringReference" __imp_WindowsCreateStringReference
0x14000A5EC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUdoinwiUlyquivUznwGEUhgwzucOlyq@wlrmdr" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUdoinwiUlyquivUznwGEUhgwzucOlyq@wlrmdr
0x1400069F8: "__cdecl _imp_DestroyIcon" __imp_DestroyIcon
0x140003E99: "__cdecl callnewh" _callnewh
0x140006F50: "WlrmdrRoot" ??_C@_1BG@KFOGJFEF@?$AAW?$AAl?$AAr?$AAm?$AAd?$AAr?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x140006D54: "__cdecl _guard_iat_table" __guard_iat_table
0x140006BD8: "__cdecl _imp__acmdln" __imp__acmdln
0x140006BB8: "__cdecl _imp_memset" __imp_memset
0x1400068B8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14000418F: "__cdecl initterm" _initterm
0x140001010: "public: virtual long __cdecl CShutdownPopupCommandHandler::Invoke(struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64) __ptr64" ?Invoke@CShutdownPopupCommandHandler@@UEAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z
0x1400081D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000A668: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140002620: "public: virtual long __cdecl CQueryContinue::QueryContinue(void) __ptr64" ?QueryContinue@CQueryContinue@@UEAAJXZ
0x140006B10: "__cdecl _imp_Sleep" __imp_Sleep
0x1400069E8: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x140006DC0: IID_IUserNotificationCallback
0x140006CD0: "__cdecl _xi_z" __xi_z
0x140006B60: "__cdecl _imp_WindowsDeleteString" __imp_WindowsDeleteString
0x140006AA8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1400068C8: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x14000419B: "__cdecl _C_specific_handler" __C_specific_handler
0x1400072D8: "__cdecl GUID_5541d8a7_497c_5aa4_86fc_7713adbf2a2c" _GUID_5541d8a7_497c_5aa4_86fc_7713adbf2a2c
0x140003A20: MIDL_user_free
0x140006B40: "__cdecl _imp_RoGetActivationFactory" __imp_RoGetActivationFactory
0x140003E8D: malloc
0x140006A48: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x140006BB0: "__cdecl _imp__wtol" __imp__wtol
0x140006830: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x140006B90: "__cdecl _imp__wtoi" __imp__wtoi
0x140006A18: "__cdecl _imp_PeekMessageW" __imp_PeekMessageW
0x140004410: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140001040: "public: virtual long __cdecl CShutdownPopupCommand::get_Label(unsigned short * __ptr64 * __ptr64) __ptr64" ?get_Label@CShutdownPopupCommand@@UEAAJPEAPEAG@Z
0x140003FC3: "__cdecl amsg_exit" _amsg_exit
0x140006C38: "__cdecl _imp__callnewh" __imp__callnewh
0x140001330: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140001A00: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400068F8: "__cdecl _imp_CreateWaitableTimerW" __imp_CreateWaitableTimerW
0x140002FF8: "int __cdecl IsParentProcessWinlogon(void)" ?IsParentProcessWinlogon@@YAHXZ
0x140006D88: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x140006858: "__cdecl _imp_UnInitThread" __imp_UnInitThread
0x140006C10: "__cdecl _imp_exit" __imp_exit
0x1400072E8: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x140006A90: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x140006848: "__cdecl _imp_?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z" __imp_?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z
0x140007478: "ToolbarWindow32" ??_C@_1CA@BPIDFFJM@?$AAT?$AAo?$AAo?$AAl?$AAb?$AAa?$AAr?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AA3?$AA2?$AA?$AA@
0x140006AB0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x14000A634: "unsigned char g_bObjectMarkedForRelease" ?g_bObjectMarkedForRelease@@3EA
0x140006AC0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000A658: "__cdecl _native_startup_lock" __native_startup_lock
0x1400069C0: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x140003EF0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140004474: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x140006BE0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400074C4: "-a" ??_C@_15HGJFNINC@?$AA?9?$AAa?$AA?$AA@
0x140006AF8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000A020: "enum WlReminderType g_ReminderType" ?g_ReminderType@@3W4WlReminderType@@A
0x140006B50: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x140006950: KERNEL32_NULL_THUNK_DATA
0x140006910: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140003A3C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140001BA0: "long __cdecl UpdatePwdExpiryModernNotfnInActionCenter(unsigned short const * __ptr64,unsigned short const * __ptr64,bool,bool)" ?UpdatePwdExpiryModernNotfnInActionCenter@@YAJPEBG0_N1@Z
0x1400073F8: "__cdecl GUID_9dfb9fd1_143a_490e_90bf_b9fba7132de7" _GUID_9dfb9fd1_143a_490e_90bf_b9fba7132de7
0x1400026A0: "public: virtual unsigned long __cdecl CNotificationCallback::Release(void) __ptr64" ?Release@CNotificationCallback@@UEAAKXZ
0x1400043EC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140006FD0: "<toast scenario="reminder" launc" ??_C@_1BNI@LNKBFJEH@?$AA?$DM?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?5?$AAs?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$DN?$AA?$CC?$AAr?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA?$CC?$AA?5?$AAl?$AAa?$AAu?$AAn?$AAc@
0x140006BC8: "__cdecl _imp__commode" __imp__commode
0x140006BF0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140001330: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140006040: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@6B@
0x140008260: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400068C0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140006940: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1400075B0: "Winsta0\Default" ??_C@_1CA@BGFJHJCO@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1400069E0: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x140004080: "__cdecl ValidateImageBase" _ValidateImageBase
0x140006D90: IID_IUnknown
0x140003E5C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140002560: "public: virtual long __cdecl CQueryContinue::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CQueryContinue@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400033A8: "unsigned long __cdecl AicpGetCurrentDesktop(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?AicpGetCurrentDesktop@@YAKPEBGPEAPEAG@Z
0x140008210: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x140006948: "__cdecl _imp_ProcessIdToSessionId" __imp_ProcessIdToSessionId
0x1400068E0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x14000A060: "__cdecl newmode" _newmode
0x140006970: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x140006B38: "__cdecl _imp_RoUninitialize" __imp_RoUninitialize
0x140006BE8: "__cdecl _imp__initterm" __imp__initterm
0x140006990: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x140006C18: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140002830: "__cdecl setargv" _setargv
0x140006A10: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x140001450: "public: long __cdecl CSystemPopupWindow::CreateSystemPopupWindow(unsigned short const * __ptr64) __ptr64" ?CreateSystemPopupWindow@CSystemPopupWindow@@QEAAJPEBG@Z
0x140001220: "long __cdecl StringCchCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x140002850: "long __cdecl WlrmdrDisplayBalloonNotification(struct HICON__ * __ptr64,struct _tagSHELLREMINDER * __ptr64)" ?WlrmdrDisplayBalloonNotification@@YAJPEAUHICON__@@PEAU_tagSHELLREMINDER@@@Z
0x140006F18: "__cdecl GUID_629bdbc8_d932_4ff4_96b9_8d96c5c1e858" _GUID_629bdbc8_d932_4ff4_96b9_8d96c5c1e858
0x14000A648: "__cdecl _onexitend" __onexitend
0x140006C08: "__cdecl _imp__exit" __imp__exit
0x1400068B0: DUI70_NULL_THUNK_DATA
0x140006C90: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400069D8: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x1400075D0: "AppInfo" ??_C@_1BA@EHFBHEIB@?$AAA?$AAp?$AAp?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1400074BC: "-m" ??_C@_15DMEDGHGK@?$AA?9?$AAm?$AA?$AA@
0x140006AD0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140007468: "__cdecl GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494" _GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494
0x140006A68: USER32_NULL_THUNK_DATA
0x140006838: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x140006C58: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140006B28: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140006CB8: "__cdecl _xi_a" __xi_a
0x140006B20: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140002830: "__cdecl matherr" _matherr
0x140006B48: "__cdecl _imp_RoActivateInstance" __imp_RoActivateInstance
0x1400071B0: "<toast launch="%ws" activationTy" ??_C@_1BAG@KHBAGJGM@?$AA?$DM?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?5?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$DN?$AA?$CC?$AA?$CF?$AAw?$AAs?$AA?$CC?$AA?5?$AAa?$AAc?$AAt?$AAi?$AAv?$AAa?$AAt?$AAi?$AAo?$AAn?$AAT?$AAy@
0x140001330: "public: virtual void * __ptr64 __cdecl CShutdownPopupCommand::`vector deleting destructor'(unsigned int) __ptr64" ??_ECShutdownPopupCommand@@UEAAPEAXI@Z
0x140006888: "__cdecl _imp_InitThread" __imp_InitThread
0x1400069D0: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x140003664: "unsigned long __cdecl AicpCreateBindingHandle(unsigned short * __ptr64,int,void * __ptr64 * __ptr64)" ?AicpCreateBindingHandle@@YAKPEAGHPEAPEAX@Z
0x140006818: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x140006ED0: "unsigned short const * const RuntimeClass_Windows_Foundation_PropertyValue" ?RuntimeClass_Windows_Foundation_PropertyValue@@3QBGB
0x1400074A4: "-s" ??_C@_15IMIFEHMG@?$AA?9?$AAs?$AA?$AA@
0x140006F28: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140008198: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140006E30: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@OAMAPFNA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140006988: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x140003A30: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1400069C8: SspiCli_NULL_THUNK_DATA
0x140006C60: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x140007300: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotificationManager" ?RuntimeClass_Windows_UI_Notifications_ToastNotificationManager@@3QBGB
0x140003E20: "__cdecl _security_check_cookie" __security_check_cookie
0x140001900: "public: static long __cdecl CSystemPopupWindow::OnCommand(struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64,void * __ptr64)" ?OnCommand@CSystemPopupWindow@@SAJPEAUIPopupWindow@@PEAUIPopupCommand@@PEAX@Z
0x140006CB0: "__cdecl _xc_z" __xc_z
0x140006AD8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140006B68: "__cdecl _imp_WindowsIsStringEmpty" __imp_WindowsIsStringEmpty
0x140006BA0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140006A80: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140006908: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400060C8: "const CShutdownPopupCommand::`vftable'" ??_7CShutdownPopupCommand@@6B@
0x14000A5F8: "int g_bUserClickedToast" ?g_bUserClickedToast@@3HA
0x140001170: "public: virtual long __cdecl CShutdownPopupCommand::get_Handler(struct IPopupCommandHandler * __ptr64 * __ptr64) __ptr64" ?get_Handler@CShutdownPopupCommand@@UEAAJPEAPEAUIPopupCommandHandler@@@Z
0x140006F68: "__cdecl GUID_4452ce09_0488_4ca7_a896_c4f140907549" _GUID_4452ce09_0488_4ca7_a896_c4f140907549
0x140006918: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140006100: "const CNotificationCallback::`vftable'" ??_7CNotificationCallback@@6B@
0x140003874: "unsigned long __cdecl AicpMsgWaitForCompletion(struct _RPC_ASYNC_STATE * __ptr64,unsigned long)" ?AicpMsgWaitForCompletion@@YAKPEAU_RPC_ASYNC_STATE@@K@Z
0x140007368: "__cdecl GUID_7ab93c52_0e48_4750_ba9d_1a4113981847" _GUID_7ab93c52_0e48_4750_ba9d_1a4113981847
0x140006890: "__cdecl _imp_?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z" __imp_?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
0x140006B08: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140001A50: "long __cdecl RemoveDuplicate(class Microsoft::WRL::ComPtr<struct Windows::UI::Notifications::IToastNotificationManagerStatics>,struct HSTRING__ * __ptr64,struct HSTRING__ * __ptr64)" ?RemoveDuplicate@@YAJV?$ComPtr@UIToastNotificationManagerStatics@Notifications@UI@Windows@@@WRL@Microsoft@@PEAUHSTRING__@@1@Z
0x1400081E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140008274: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140006AE8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140006CD8: "__cdecl _guard_fids_table" __guard_fids_table
0x140006808: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x140006C50: msvcrt_NULL_THUNK_DATA
0x140001330: "public: virtual void * __ptr64 __cdecl CShutdownPopupCommand::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCShutdownPopupCommand@@UEAAPEAXI@Z
0x140006700: "__cdecl load_config_used" _load_config_used
0x1400037FC: "unsigned long __cdecl AicpAsyncFinishCall(struct _RPC_ASYNC_STATE * __ptr64,int,unsigned long,unsigned long)" ?AicpAsyncFinishCall@@YAKPEAU_RPC_ASYNC_STATE@@HKK@Z
0x140006938: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x140006A30: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x1400013E0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400037B0: "unsigned long __cdecl AicpAsyncInitializeHandle(struct _RPC_ASYNC_STATE * __ptr64,unsigned long)" ?AicpAsyncInitializeHandle@@YAKPEAU_RPC_ASYNC_STATE@@K@Z
0x140006968: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x140002640: "public: virtual long __cdecl CNotificationCallback::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CNotificationCallback@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000810C: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1400074AC: "-f" ??_C@_15OLECOAGL@?$AA?9?$AAf?$AA?$AA@
0x140003344: "int __cdecl AicpImpersonatingCrossSession(void)" ?AicpImpersonatingCrossSession@@YAHXZ
0x140006130: "const CQueryContinue::`vftable'" ??_7CQueryContinue@@6B@
0x140006A28: "__cdecl _imp_GetUserObjectInformationW" __imp_GetUserObjectInformationW
0x140006998: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x140002810: "public: virtual long __cdecl CNotificationCallback::OnLeftClick(struct tagPOINT * __ptr64) __ptr64" ?OnLeftClick@CNotificationCallback@@UEAAJPEAUtagPOINT@@@Z
0x140006C28: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140006C68: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x140006A38: "__cdecl _imp_GetProcessWindowStation" __imp_GetProcessWindowStation
0x140006A50: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400024D8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140006AF0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140006AE0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140002810: "public: virtual long __cdecl CNotificationCallback::OnBalloonUserClick(struct tagPOINT * __ptr64) __ptr64" ?OnBalloonUserClick@CNotificationCallback@@UEAAJPEAUtagPOINT@@@Z
0x14000A05C: "__cdecl dowildcard" _dowildcard
0x140001360: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400074B4: "-t" ??_C@_15BBFCHPHP@?$AA?9?$AAt?$AA?$AA@
0x140006A60: "__cdecl _imp_EnableWindow" __imp_EnableWindow
0x14000824C: "__cdecl _IMPORT_DESCRIPTOR_DUI70" __IMPORT_DESCRIPTOR_DUI70
0x1400043E0: ApiSetQueryApiSetPresence
0x140003E81: free
0x140006870: "__cdecl _imp_?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z" __imp_?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
0x140001400: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400068A0: "__cdecl _imp_?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z" __imp_?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
0x140006958: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x140006B00: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140003E50: "__cdecl purecall" _purecall
0x140004388: IsGetProcessWindowStationPresent
0x140007378: "__cdecl GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4" _GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4
0x140003A00: MIDL_user_allocate
0x1400041B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140003F1C: RtlpImageNtHeader
0x140006A20: "__cdecl _imp_SetCursor" __imp_SetCursor
0x1400025E0: "public: virtual unsigned long __cdecl CQueryContinue::Release(void) __ptr64" ?Release@CQueryContinue@@UEAAKXZ
0x140006DA0: IID_IQueryContinue
0x140006928: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140007498: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x1400068E8: "__cdecl _imp_RegisterWaitForSingleObject" __imp_RegisterWaitForSingleObject
0x1400013E0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAKXZ
0x140007560: "201ef99a-7fa0-444c-9399-19ba84f1" ??_C@_1EK@PNAIGACG@?$AA2?$AA0?$AA1?$AAe?$AAf?$AA9?$AA9?$AAa?$AA?9?$AA7?$AAf?$AAa?$AA0?$AA?9?$AA4?$AA4?$AA4?$AAc?$AA?9?$AA9?$AA3?$AA9?$AA9?$AA?9?$AA1?$AA9?$AAb?$AAa?$AA8?$AA4?$AAf?$AA1@
0x140006A00: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x140006A88: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140006C30: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140006DE0: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@FIHMJCLF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140002830: "public: virtual long __cdecl CNotificationCallback::OnContextMenu(struct tagPOINT * __ptr64) __ptr64" ?OnContextMenu@CNotificationCallback@@UEAAJPEAUtagPOINT@@@Z
0x140006C78: ntdll_NULL_THUNK_DATA
0x140008170: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x140006BF8: "__cdecl _imp__ismbblead" __imp__ismbblead
0x1400074CC: "-u" ??_C@_15KJOOBIBK@?$AA?9?$AAu?$AA?$AA@
0x140001330: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140006BC0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x140006A70: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x14000A008: "__cdecl _security_cookie" __security_cookie
0x14000A600: "unsigned short * __ptr64 __ptr64 g_pwszUrl" ?g_pwszUrl@@3PEAGEA
0x140006DB0: CLSID_UserNotification
0x1400068D8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140006900: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000A000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400081AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140006A98: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x14000A650: "__cdecl _onexitbegin" __onexitbegin
0x140006BA8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140006AA0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140003BB0: WinMainCRTStartup
0x140001330: "public: virtual void * __ptr64 __cdecl CShutdownPopupCommandHandler::`vector deleting destructor'(unsigned int) __ptr64" ??_ECShutdownPopupCommandHandler@@UEAAPEAXI@Z
0x140008148: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x1400080F8: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1400040B4: "__cdecl _security_init_cookie" __security_init_cookie
0x140006C00: "__cdecl _imp__cexit" __imp__cexit
0x140006C70: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x140003F78: "__cdecl get_image_app_type" _get_image_app_type
0x140008120: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140006878: "__cdecl _imp_?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z" __imp_?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
0x140001980: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000A5F0: "public: static class Microsoft::WRL::Details::ModuleBase * __ptr64 __ptr64 Microsoft::WRL::Details::ModuleBase::module_" ?module_@ModuleBase@Details@WRL@Microsoft@@2PEAV1234@EA
0x1400068F0: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x140006C40: "__cdecl _imp_malloc" __imp_malloc
0x140006B98: "__cdecl _imp__purecall" __imp__purecall
0x140006840: ADVAPI32_NULL_THUNK_DATA
0x140001160: "public: virtual long __cdecl CShutdownPopupCommand::get_ID(unsigned int * __ptr64) __ptr64" ?get_ID@CShutdownPopupCommand@@UEAAJPEAI@Z
0x140008224: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1400069A8: RPCRT4_NULL_THUNK_DATA
0x140006F78: "__cdecl GUID_6a0017fe_df25_46eb_8a96_38df889cb5b1" _GUID_6a0017fe_df25_46eb_8a96_38df889cb5b1
0x140004200: "__cdecl _report_gsfailure" __report_gsfailure
0x140006A78: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x1400068A8: "__cdecl _imp_?_ZeroRelease@Value@DirectUI@@AEAAXXZ" __imp_?_ZeroRelease@Value@DirectUI@@AEAAXXZ
0x1400069A0: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x1400025C0: "public: virtual unsigned long __cdecl CQueryContinue::AddRef(void) __ptr64" ?AddRef@CQueryContinue@@UEAAKXZ
0x140001330: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@UEAAPEAXI@Z
0x14000A660: "__cdecl _native_startup_state" __native_startup_state
0x140007528: "winlogon.exe" ??_C@_1BK@HLMOGDAH@?$AAw?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140006A58: "__cdecl _imp_MsgWaitForMultipleObjects" __imp_MsgWaitForMultipleObjects
0x140006820: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x140006850: "__cdecl _imp_UnInitProcessPriv" __imp_UnInitProcessPriv
0x140006898: "__cdecl _imp_?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ" __imp_?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
0x140008238: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x140006DD0: IID_IUserNotification2
0x140006BD0: "__cdecl _imp__fmode" __imp__fmode
0x140002A88: "int __cdecl ParseCommandLine(unsigned short * __ptr64,struct _tagSHELLREMINDER * __ptr64)" ?ParseCommandLine@@YAHPEAGPEAU_tagSHELLREMINDER@@@Z
0x140006F88: "Windows.SystemToast.Winlogon" ??_C@_1DK@LKAMFIBK@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAo?$AAa?$AAs?$AAt?$AA?4?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140007410: "unsigned short const * const RuntimeClass_Windows_Data_Xml_Dom_XmlDocument" ?RuntimeClass_Windows_Data_Xml_Dom_XmlDocument@@3QBGB
0x1400081C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140006C48: "__cdecl _imp_free" __imp_free
0x140006B58: "__cdecl _imp_WindowsCreateString" __imp_WindowsCreateString
0x1400069B0: "__cdecl _imp_ShellExecuteW" __imp_ShellExecuteW
0x140004020: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140001330: "public: virtual void * __ptr64 __cdecl CShutdownPopupCommandHandler::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCShutdownPopupCommandHandler@@UEAAPEAXI@Z
0x140006B18: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140006068: "const CShutdownPopupCommandHandler::`vftable'" ??_7CShutdownPopupCommandHandler@@6B@
0x140006960: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x140002840: "void __cdecl CleanupBalloonCallback(void * __ptr64,unsigned char)" ?CleanupBalloonCallback@@YAXPEAXE@Z
0x140006090: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@6B@
0x140006E80: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@PCHFFKDO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140008184: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140004500: memset
0x140008288: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140006860: "__cdecl _imp_?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ" __imp_?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ

[JEB Decompiler by PNF Software]