Generated by JEB on 2019/08/01

PE: C:\Windows\Installer\$PatchCache$\Managed\2F220489ACB9D14AA683A16E850F4151\8.100.25984\fil84501c2ac315497b1459766b060c1754 Base=0x400000 SHA-256=71ACC061AB45232FFC95BC29B243B226FB91ED6D1DC60803963F94BD7ECC3E1B
PDB: FiltReg.pdb GUID={02E5F891-3E5B-4B2F-8FA62AC7B41AF19C} Age=1

120 located named symbols:
0x401090: "Filters loaded by extension: " ??_C@_0BO@LKBLACBA@Filters?5loaded?5by?5extension?3?6?$AA@
0x404014: "__stdcall _imp__RegSetValueExW" __imp__RegSetValueExW@24
0x40335C: "__cdecl __onexitend" ___onexitend
0x4012B8: "InprocServer32" ??_C@_1BO@MNKPAJEP@?$AAI?$AAn?$AAp?$AAr?$AAo?$AAc?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x404054: "__cdecl _imp____p__fmode" __imp____p__fmode
0x403004: "__cdecl __security_cookie" ___security_cookie
0x402306: "__fastcall __security_check_cookie" @__security_check_cookie@4
0x401310: "Error %u opening HKCR\%ws " ??_C@_0BL@IAFAMNBD@Error?5?$CFu?5opening?5HKCR?2?$CFws?6?$AA@
0x404030: "__stdcall _imp__QueryPerformanceCounter" __imp__QueryPerformanceCounter@4
0x40147F: "long __stdcall StringCchCatW(unsigned short *,unsigned int,unsigned short const *)" ?StringCchCatW@@YGJPAGIPBG@Z
0x4027F1: "__cdecl _SEH_epilog4" __SEH_epilog4
0x404048: "__stdcall _imp__Sleep" __imp__Sleep@4
0x40277F: "__cdecl _matherr" __matherr
0x4011EC: " " ??_C@_02PHMGELLB@?6?6?$AA@
0x4027AC: "__cdecl _SEH_prolog4" __SEH_prolog4
0x403000: "__cdecl __defaultmatherr" ___defaultmatherr
0x40406C: "__cdecl _imp___exit" __imp___exit
0x404038: "__stdcall _imp__TerminateProcess" __imp__TerminateProcess@8
0x401000: "__cdecl __guard_check_icall_fptr" ___guard_check_icall_fptr
0x404024: "__stdcall _imp__GetSystemTimeAsFileTime" __imp__GetSystemTimeAsFileTime@4
0x4011D4: "%ws Filter: %ws (%ws) " ??_C@_0BI@CLNMMGFP@?$CFws?6?7Filter?3?5?$CFws?5?$CI?$CFws?$CJ?6?$AA@
0x404090: "__cdecl _imp____setusermatherr" __imp____setusermatherr
0x40400C: "__stdcall _imp__RegEnumKeyExW" __imp__RegEnumKeyExW@32
0x404068: "__cdecl _imp___cexit" __imp___cexit
0x40404C: "__stdcall _imp__GetTickCount" __imp__GetTickCount@0
0x404040: "__stdcall _imp__SetUnhandledExceptionFilter" __imp__SetUnhandledExceptionFilter@4
0x40407C: "__cdecl _imp___amsg_exit" __imp___amsg_exit
0x401358: "Error %u creating persistent han" ??_C@_0DD@HKOBLNGF@Error?5?$CFu?5creating?5persistent?5han@
0x40402C: "__stdcall _imp__GetCurrentProcessId" __imp__GetCurrentProcessId@0
0x4022CE: "__cdecl _initterm_e" __initterm_e
0x404058: "__cdecl _imp___initterm" __imp___initterm
0x404050: KERNEL32_NULL_THUNK_DATA
0x401537: "__cdecl wmain" _wmain
0x404034: "__stdcall _imp__GetModuleHandleA" __imp__GetModuleHandleA@4
0x404098: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x4024A7: "__cdecl __CxxSetUnhandledExceptionFilter" ___CxxSetUnhandledExceptionFilter
0x40245F: "long __stdcall __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS *)" ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z
0x4012E8: " " ??_C@_01EEMJAFIK@?6?$AA@
0x40132C: "Error %u reading persistent hand" ??_C@_0CM@PGJGIPDC@Error?5?$CFu?5reading?5persistent?5hand@
0x404060: "__cdecl _imp___controlfp" __imp___controlfp
0x404020: "__stdcall _imp__HeapSetInformation" __imp__HeapSetInformation@16
0x404064: "__cdecl _imp___except_handler4_common" __imp___except_handler4_common
0x401445: "long __stdcall StringCchCopyW(unsigned short *,unsigned int,unsigned short const *)" ?StringCchCopyW@@YGJPAGIPBG@Z
0x403350: "__cdecl _dowildcard" __dowildcard
0x403354: "__cdecl _newmode" __newmode
0x4026D8: "__cdecl __security_init_cookie" ___security_init_cookie
0x402580: "__cdecl _FindPESection" __FindPESection
0x404070: "__cdecl _imp__exit" __imp__exit
0x401010: "__cdecl __xi_a" ___xi_a
0x401004: "__cdecl __xc_a" ___xc_a
0x40100C: "__cdecl __xc_z" ___xc_z
0x40101C: "__cdecl __xi_z" ___xi_z
0x40280A: "__cdecl _except_handler4" __except_handler4
0x4024BA: "__cdecl _XcptFilter" __XcptFilter
0x40403C: "__stdcall _imp__GetCurrentProcess" __imp__GetCurrentProcess@0
0x403008: "__cdecl __security_cookie_complement" ___security_cookie_complement
0x4011F0: "\PersistentHandler" ??_C@_1CG@KHPDPGHK@?$AA?2?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA?$AA@
0x401198: "%ws --> %ws (%ws) " ??_C@_0BD@FJGLKGOK@?$CFws?5?9?9?$DO?5?$CFws?5?$CI?$CFws?$CJ?6?$AA@
0x401E45: "long __stdcall Replicate(unsigned short const *,unsigned short const *)" ?Replicate@@YGJPBG0@Z
0x401220: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x402840: "__cdecl _alloca_probe" __alloca_probe
0x4012D8: "\CLSID" ??_C@_1O@HEJDOEN@?$AA?2?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x40405C: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x4015E1: "void __stdcall LocateByExtension(struct HKEY__ *)" ?LocateByExtension@@YGXPAUHKEY__@@@Z
0x40408C: "__cdecl _imp___wcsicmp" __imp___wcsicmp
0x40106C: "RegOpenKey( "CLSID" ) returned %" ??_C@_0CD@LFMMLIEE@RegOpenKey?$CI?5?$CCCLSID?$CC?5?$CJ?5returned?5?$CF@
0x402840: "__cdecl _chkstk" __chkstk
0x4022F7: "__cdecl wmainCRTStartup" _wmainCRTStartup
0x402870: "__fastcall _guard_check_icall_nop" @_guard_check_icall_nop@4
0x40277F: "__cdecl _wsetargv" __wsetargv
0x402787: "__cdecl _setdefaultprecision" __setdefaultprecision
0x404094: msvcrt_NULL_THUNK_DATA
0x403358: "__cdecl _fmode" __fmode
0x402834: "__cdecl _except_handler4_common" __except_handler4_common
0x4011AC: "RegQueryInfoKey( "CLSID" ) retur" ??_C@_0CI@FGHIMAEI@RegQueryInfoKey?$CI?5?$CCCLSID?$CC?5?$CJ?5retur@
0x4010B0: " Filters loaded by class: " ??_C@_0BM@HLPHPPPN@?6?6Filters?5loaded?5by?5class?3?6?$AA@
0x4027A0: "__cdecl _initterm" __initterm
0x403360: "__cdecl __onexitbegin" ___onexitbegin
0x404044: "__stdcall _imp__UnhandledExceptionFilter" __imp__UnhandledExceptionFilter@4
0x404000: "__stdcall _imp__RegQueryValueExW" __imp__RegQueryValueExW@24
0x40234A: "__cdecl __report_gsfailure" ___report_gsfailure
0x403364: "__cdecl __native_startup_lock" ___native_startup_lock
0x403368: "__cdecl __native_startup_state" ___native_startup_state
0x401390: "__cdecl _load_config_used" __load_config_used
0x401304: "%ws (%ws) " ??_C@_0L@HMCNOHDP@?$CFws?5?$CI?$CFws?$CJ?5?$AA@
0x40334C: "__cdecl _commode" __commode
0x4010D0: "Usage: filtreg [dstExt] [srcExt]" ??_C@_0KA@NLBMHJI@Usage?3?5filtreg?5?$FLdstExt?$FN?5?$FLsrcExt?$FN@
0x401230: "\PersistentAddinsRegistered\{89B" ??_C@_1IG@CNPMIIPH@?$AA?2?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AAA?$AAd?$AAd?$AAi?$AAn?$AAs?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?2?$AA?$HL?$AA8?$AA9?$AAB@
0x404018: "__stdcall _imp__RegCreateKeyExW" __imp__RegCreateKeyExW@36
0x401430: "__cdecl __safe_se_handler_table" ___safe_se_handler_table
0x4016E9: "void __stdcall LocateByCLSID(struct HKEY__ *)" ?LocateByCLSID@@YGXPAUHKEY__@@@Z
0x4040AC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x404008: "__stdcall _imp__RegOpenKeyExW" __imp__RegOpenKeyExW@20
0x404078: "__cdecl _imp____wgetmainargs" __imp____wgetmainargs
0x4040C0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x401170: "RegQueryInfoKey( HKCR ) returned" ??_C@_0CF@GKFKDKFH@RegQueryInfoKey?$CI?5HKCR?5?$CJ?5returned@
0x401877: "int __stdcall LocateFilter(struct HKEY__ *,struct HKEY__ *,unsigned short const *,unsigned short *,unsigned short *)" ?LocateFilter@@YGHPAUHKEY__@@0PBGPAG2@Z
0x40401C: ADVAPI32_NULL_THUNK_DATA
0x40231B: "__cdecl __raise_securityfailure" ___raise_securityfailure
0x402534: "__cdecl _get_image_app_type" __get_image_app_type
0x40336C: "__cdecl __dyn_tls_init_callback" ___dyn_tls_init_callback
0x404028: "__stdcall _imp__GetCurrentThreadId" __imp__GetCurrentThreadId@0
0x402570: "__cdecl _amsg_exit" __amsg_exit
0x404004: "__stdcall _imp__RegQueryInfoKeyW" __imp__RegQueryInfoKeyW@48
0x4024C5: "__stdcall RtlpImageNtHeader" _RtlpImageNtHeader@4
0x4025D0: "__cdecl _IsNonwritableInCurrentImage" __IsNonwritableInCurrentImage
0x404074: "__cdecl _imp____set_app_type" __imp____set_app_type
0x404084: "__cdecl _imp___XcptFilter" __imp___XcptFilter
0x404010: "__stdcall _imp__RegCloseKey" __imp__RegCloseKey@4
0x404088: "__cdecl _imp__printf" __imp__printf
0x401060: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x404080: "__cdecl _imp____p__commode" __imp____p__commode
0x401B0A: "void __stdcall PrintExtensions(struct HKEY__ *,unsigned short const *)" ?PrintExtensions@@YGXPAUHKEY__@@PBG@Z
0x4026A0: "__cdecl _ValidateImageBase" __ValidateImageBase
0x4012EC: " Extensions: %ws (%ws) " ??_C@_0BI@HAMKHDDD@?7Extensions?3?5?$CFws?5?$CI?$CFws?$CJ?5?$AA@
0x4040D4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]