Generated by JEB on 2019/02/01

PE: C:\Windows\System32\AxInstUI.exe Base=0x140000000 SHA-256=6DB1B1277444BAA2DA6D6C31B7824FC567FD6A79FF010D885384438DB09046CF
PDB: AxInstUI.pdb GUID={968FF0CE-82D8-8C78-45E3F82A190432A4} Age=1

140 located named symbols:
0x1400021B8: WINTRUST_NULL_THUNK_DATA
0x140001A64: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1400018A0: "__cdecl FindPESection" _FindPESection
0x1400021C8: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140002768: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140001890: "__cdecl wsetargv" _wsetargv
0x140003010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400022B8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140002220: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001CC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140002180: SHELL32_NULL_THUNK_DATA
0x140002110: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x140002158: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140002178: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x140003048: "__cdecl commode" _commode
0x140001790: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140002318: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140003054: "__cdecl fmode" _fmode
0x140001000: wWinMain
0x1400017E8: "__cdecl XcptFilter" _XcptFilter
0x140002320: "__cdecl _xc_a" __xc_a
0x140002210: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400010F0: "int __cdecl IsAuthenticodePublisherTrusted(struct _CERT_CONTEXT const * __ptr64,void * __ptr64 * __ptr64)" ?IsAuthenticodePublisherTrusted@@YAHPEBU_CERT_CONTEXT@@PEAPEAX@Z
0x140002130: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x140002300: "__cdecl _imp_memset" __imp_memset
0x140001A45: "__cdecl initterm" _initterm
0x1400027F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400035F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140002260: "__cdecl _imp_Sleep" __imp_Sleep
0x140002350: "__cdecl _xi_z" __xi_z
0x1400021D8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140002150: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140001A4B: "__cdecl _C_specific_handler" __C_specific_handler
0x140002388: "`string'" ??_C@_1CC@MEIEOINB@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x1400021A8: "__cdecl _imp_WTHelperProvDataFromStateData" __imp_WTHelperProvDataFromStateData
0x140001C40: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140001889: "__cdecl amsg_exit" _amsg_exit
0x1400022C0: "__cdecl _imp_exit" __imp_exit
0x1400021C0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400022A8: "__cdecl _imp__wcmdln" __imp__wcmdln
0x1400021E8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140002200: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400035E8: "__cdecl _native_startup_lock" __native_startup_lock
0x1400017D0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400022A0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140002250: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400021F8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140002138: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x140002170: KERNEL32_NULL_THUNK_DATA
0x140002168: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140001C20: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1400022F8: "__cdecl _imp__commode" __imp__commode
0x140002290: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140002118: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x140002218: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140001740: wWinMainCRTStartup
0x140001940: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400027CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140003050: "__cdecl newmode" _newmode
0x140002298: "__cdecl _imp__initterm" __imp__initterm
0x1400021B0: "__cdecl _imp_WTHelperGetProvCertFromChain" __imp_WTHelperGetProvCertFromChain
0x1400022D8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400022F0: "__cdecl _imp_swscanf_s" __imp_swscanf_s
0x1400011D4: "long __cdecl VerifyTrust(struct HWND__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,int * __ptr64)" ?VerifyTrust@@YAJPEAUHWND__@@PEBG1KKPEAH@Z
0x140002140: CRYPT32_NULL_THUNK_DATA
0x1400035D8: "__cdecl _onexitend" __onexitend
0x1400022D0: "__cdecl _imp__exit" __imp__exit
0x140002310: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140002208: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140002190: USER32_NULL_THUNK_DATA
0x140002280: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140002338: "__cdecl _xi_a" __xi_a
0x140002278: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001890: "__cdecl matherr" _matherr
0x1400027A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140001770: "__cdecl _security_check_cookie" __security_check_cookie
0x140002330: "__cdecl _xc_z" __xc_z
0x140002228: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140002188: "__cdecl _imp_IsWindow" __imp_IsWindow
0x1400022C8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140002270: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140002258: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140002380: "`string'" ??_C@_17FPPNEHKO@?$AA?$CF?$AAI?$AAu?$AA?$AA@
0x140002808: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140002238: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140002358: "__cdecl _guard_fids_table" __guard_fids_table
0x140002308: msvcrt_NULL_THUNK_DATA
0x140002010: "__cdecl load_config_used" _load_config_used
0x14000277C: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x140002740: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1400022E0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140002248: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140002230: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000304C: "__cdecl dowildcard" _dowildcard
0x140002240: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001A60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400017F0: RtlpImageNtHeader
0x1400021F0: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400022E8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140002120: "__cdecl _imp_CertControlStore" __imp_CertControlStore
0x140003008: "__cdecl _security_cookie" __security_cookie
0x140002198: "__cdecl _imp_WinVerifyTrust" __imp_WinVerifyTrust
0x140002160: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140002148: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140003000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400027B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400021D0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1400035E0: "__cdecl _onexitbegin" __onexitbegin
0x1400035D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUhvierxvhUofzUzcrhUzcrhfrUlyquivUznwGEUhgwzucOlyq@AxInstUI" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUhvierxvhUofzUzcrhUzcrhfrUlyquivUznwGEUhgwzucOlyq@AxInstUI
0x1400021E0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000272C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001970: "__cdecl _security_init_cookie" __security_init_cookie
0x140002288: "__cdecl _imp__cexit" __imp__cexit
0x140001844: "__cdecl get_image_app_type" _get_image_app_type
0x140002754: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140001AA0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400035F0: "__cdecl _native_startup_state" __native_startup_state
0x1400021A0: "__cdecl _imp_WTHelperGetProvSignerFromChain" __imp_WTHelperGetProvSignerFromChain
0x140002830: "__cdecl _IMPORT_DESCRIPTOR_WINTRUST" __IMPORT_DESCRIPTOR_WINTRUST
0x140002128: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x14000281C: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x1400022B0: "__cdecl _imp__fmode" __imp__fmode
0x1400027E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400018F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140002268: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140002790: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140001C9B: memset
0x140002844: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]