Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winrs.exe Base=0x140000000 SHA-256=83790021F6315747DECCE5A9E15006DCDA7A7E7003660B5B3D07D1862261E73A
PDB: winrs.pdb GUID={9170ED50-4E25-5814-00BAC2F99214E811} Age=1

474 located named symbols:
0x140002534: "void __cdecl Close(struct WSMAN_SHELL * __ptr64)" ?Close@@YAXPEAUWSMAN_SHELL@@@Z
0x140009488: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140003F54: "public: unsigned long __cdecl Pipe_Thread::Initialize(void) __ptr64" ?Initialize@Pipe_Thread@@QEAAKXZ
0x140007B4C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140003130: "public: int __cdecl ClientPipe_StdInPipe_Thread::HandleShellTerminationMessage(struct WSMAN_API * __ptr64,struct WSMAN_SESSION * __ptr64,struct WSMAN_SHELL * __ptr64,char * __ptr64,unsigned long) __ptr64" ?HandleShellTerminationMessage@ClientPipe_StdInPipe_Thread@@QEAAHPEAUWSMAN_API@@PEAUWSMAN_SESSION@@PEAUWSMAN_SHELL@@PEADK@Z
0x14000DEA0: "struct ArgDefPresent Winrs_Arg_Password" ?Winrs_Arg_Password@@3UArgDefPresent@@A
0x140009DA0: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x140009BF0: "-p:" ??_C@_17GMBKECBF@?$AA?9?$AAp?$AA?3?$AA?$AA@
0x1400092E8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140009330: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x140009930: "-userName:" ??_C@_1BG@MJAKNAIO@?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x14000F000: "__cdecl _imp_IsTextUnicode" __imp_IsTextUnicode
0x140007960: "__cdecl FindPESection" _FindPESection
0x1400026D4: "void __cdecl Deinitialize(struct WSMAN_API * __ptr64)" ?Deinitialize@@YAXPEAUWSMAN_API@@@Z
0x1400073C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140007950: "__cdecl wsetargv" _wsetargv
0x140009C50: "-u:" ??_C@_17DMNHNDKG@?$AA?9?$AAu?$AA?3?$AA?$AA@
0x14000D7B0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140009040: "const ClientPipe_StdInPipe_Thread::`vftable'" ??_7ClientPipe_StdInPipe_Thread@@6B@
0x140009278: "__cdecl _imp_WriteConsoleInputA" __imp_WriteConsoleInputA
0x1400012A0: WPP_SF_LL
0x140009538: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000DE70: "class WinrsShellContext g_shellContext" ?g_shellContext@@3VWinrsShellContext@@A
0x140009310: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x1400011C0: "public: virtual void * __ptr64 __cdecl ClientPipe_StdInPipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GClientPipe_StdInPipe_Thread@@UEAAPEAXI@Z
0x14000A008: "127.0.0.1" ??_C@_1BE@KGBJBGOH@?$AA1?$AA2?$AA7?$AA?4?$AA0?$AA?4?$AA0?$AA?4?$AA1?$AA?$AA@
0x1400093A8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140007718: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x140003290: "private: virtual unsigned long __cdecl ClientPipe_StdInPipe_Thread::Execute(void) __ptr64" ?Execute@ClientPipe_StdInPipe_Thread@@EEAAKXZ
0x140009BE8: "/n" ??_C@_15GDDOGJIP@?$AA?1?$AAn?$AA?$AA@
0x1400091C0: "__cdecl _imp_??0?$AutoDeleteVector@D@@QEAA@PEAD@Z" __imp_??0?$AutoDeleteVector@D@@QEAA@PEAD@Z
0x14000125C: WPP_SF_L
0x140001400: WppControlCallback
0x140008080: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140009168: "__cdecl _imp_WSManCloseSession" __imp_WSManCloseSession
0x140009D50: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x140009338: "__cdecl _imp_CancelIoEx" __imp_CancelIoEx
0x140009D58: " " ??_C@_19KLGIPDEL@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AA?$AA@
0x140009C68: "/u" ??_C@_15OECGLJBB@?$AA?1?$AAu?$AA?$AA@
0x140001944: "public: unsigned long __cdecl WinrsShellContext::Initialize(void) __ptr64" ?Initialize@WinrsShellContext@@QEAAKXZ
0x14000D838: "__cdecl commode" _commode
0x14000A058: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1400092D8: "__cdecl _imp_GetFileType" __imp_GetFileType
0x14000AE4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14000AED8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x140009BF8: "-p" ??_C@_15JODAOICI@?$AA?9?$AAp?$AA?$AA@
0x140009F60: "http://schemas.microsoft.com/wbe" ??_C@_1HI@HCCHJAKI@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x140009F40: "WINRS_CODEPAGE" ??_C@_1BO@HMKOMDNJ@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAC?$AAO?$AAD?$AAE?$AAP?$AAA?$AAG?$AAE?$AA?$AA@
0x140009420: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140009318: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002E94: "public: virtual __cdecl Pipe_Thread::~Pipe_Thread(void) __ptr64" ??1Pipe_Thread@@UEAA@XZ
0x1400091C8: "__cdecl _imp_??0?$AutoDeleteVector@E@@QEAA@PEAE@Z" __imp_??0?$AutoDeleteVector@E@@QEAA@PEAE@Z
0x140007830: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400095B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140009C60: "/u:" ??_C@_17HOPCNENL@?$AA?1?$AAu?$AA?3?$AA?$AA@
0x140009FD8: "WINRS_CONSOLEMODE_STDIN" ??_C@_1DA@EOAKHDKB@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAC?$AAO?$AAN?$AAS?$AAO?$AAL?$AAE?$AAM?$AAO?$AAD?$AAE?$AA_?$AAS?$AAT?$AAD?$AAI?$AAN?$AA?$AA@
0x14000D844: "__cdecl fmode" _fmode
0x140009450: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x140009370: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000382C: "public: unsigned long __cdecl ClientPipe_StdInPipe_Thread::Read(unsigned char * __ptr64 * __ptr64,unsigned long & __ptr64) __ptr64" ?Read@ClientPipe_StdInPipe_Thread@@QEAAKPEAPEAEAEAK@Z
0x140009560: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140009BB8: "/un" ??_C@_17DKJNEMCO@?$AA?1?$AAu?$AAn?$AA?$AA@
0x1400097F0: "-environment" ??_C@_1BK@IDFIKCKH@?$AA?9?$AAe?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140009C00: "/p:" ??_C@_17CODPEFGI@?$AA?1?$AAp?$AA?3?$AA?$AA@
0x140009170: "__cdecl _imp_WSManSetSessionOption" __imp_WSManSetSessionOption
0x14000788E: "__cdecl XcptFilter" _XcptFilter
0x1400095C0: "__cdecl _xc_a" __xc_a
0x140002F80: "private: static unsigned long __cdecl Pipe_Thread::ThreadExecutionProcedure(void * __ptr64)" ?ThreadExecutionProcedure@Pipe_Thread@@CAKPEAX@Z
0x14000AD08: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLN
0x14000AC7C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x140009C78: "/ad" ??_C@_17MNGHOMMH@?$AA?1?$AAa?$AAd?$AA?$AA@
0x140009948: "-userName" ??_C@_1BE@GDBELCDM@?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140009320: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14000293C: "unsigned long __cdecl SetCommandHandleResource(struct WSMAN_COMMAND * __ptr64)" ?SetCommandHandleResource@@YAKPEAUWSMAN_COMMAND@@@Z
0x140007D07: "__cdecl lock" _lock
0x140009558: "__cdecl _imp_isdigit" __imp_isdigit
0x1400011C0: "public: virtual void * __ptr64 __cdecl ClientPipe_StdInPipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EClientPipe_StdInPipe_Thread@@UEAAPEAXI@Z
0x140009CD0: "-comp" ??_C@_1M@OOPKFCPK@?$AA?9?$AAc?$AAo?$AAm?$AAp?$AA?$AA@
0x1400044D0: "int __cdecl HandlerRoutine(unsigned long)" ?HandlerRoutine@@YAHK@Z
0x140009680: "__cdecl _guard_iat_table" __guard_iat_table
0x140009398: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140008056: memcpy
0x140009348: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140007FC4: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x140009730: "__cdecl _sz_ext_ms_win_security_credui_l1_1_0_dll" __sz_ext_ms_win_security_credui_l1_1_0_dll
0x1400095A0: "__cdecl _imp_memset" __imp_memset
0x140009B10: "/ssl" ??_C@_19HMLKGOHD@?$AA?1?$AAs?$AAs?$AAl?$AA?$AA@
0x140009428: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x140009440: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140007B1F: "__cdecl initterm" _initterm
0x1400094A8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x14000AFA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000DF08: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140009460: "__cdecl _imp_Sleep" __imp_Sleep
0x140009600: "__cdecl _xi_z" __xi_z
0x1400092B0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140009390: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140007B2B: "__cdecl _C_specific_handler" __C_specific_handler
0x1400094D0: "__cdecl _imp__onexit" __imp__onexit
0x14000DE08: WPP_REGISTRATION_GUIDS
0x140009240: "__cdecl _imp_SetConsoleCtrlHandler" __imp_SetConsoleCtrlHandler
0x140007EA2: "__cdecl _imp_load_IsTextUnicode" __imp_load_IsTextUnicode
0x140009B50: "-nop" ??_C@_19PBCKLAHD@?$AA?9?$AAn?$AAo?$AAp?$AA?$AA@
0x140009300: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140007D8C: "__cdecl _imp_load_CredUICmdLinePromptForCredentialsW" __imp_load_CredUICmdLinePromptForCredentialsW
0x140009158: "__cdecl _imp_?Alloc@WSManMemory@@SAPEAX_KHW4_NitsFaultMode@@@Z" __imp_?Alloc@WSManMemory@@SAPEAX_KHW4_NitsFaultMode@@@Z
0x140009830: "-unencrypted" ??_C@_1BK@OLGKEKOL@?$AA?9?$AAu?$AAn?$AAe?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAe?$AAd?$AA?$AA@
0x140007F60: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400047BC: "int __cdecl OutputData(struct _WSMAN_RECEIVE_DATA_RESULT const & __ptr64)" ?OutputData@@YAHAEBU_WSMAN_RECEIVE_DATA_RESULT@@@Z
0x140009810: "/environment" ??_C@_1BK@JGBCOJMI@?$AA?1?$AAe?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1400091F8: "__cdecl _imp_?Free@WSManMemory@@SAXPEAXH@Z" __imp_?Free@WSManMemory@@SAXPEAXH@Z
0x140009C70: "-ad" ??_C@_17IPECOLLK@?$AA?9?$AAa?$AAd?$AA?$AA@
0x1400099C0: "/timeout:" ??_C@_1BE@PABMPHDO@?$AA?1?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?3?$AA?$AA@
0x14000AD88: api-ms-win-base-util-l1-1-0_NULL_THUNK_DATA_DLB
0x140009410: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000DE48: WPP_MAIN_CB
0x14000A028: ">" ??_C@_13MOEPKPHB@?$AA?$DO?$AA?$AA@
0x140007EAE: "__cdecl _tailMerge_api_ms_win_base_util_l1_1_0_dll" __tailMerge_api_ms_win_base_util_l1_1_0_dll
0x140007943: "__cdecl amsg_exit" _amsg_exit
0x1400093B8: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x140009BA0: "/env" ??_C@_19EGICPAGB@?$AA?1?$AAe?$AAn?$AAv?$AA?$AA@
0x14000A050: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140001750: "unsigned long __cdecl WriteOutput(void * __ptr64,unsigned short * __ptr64,unsigned long)" ?WriteOutput@@YAKPEAXPEAGK@Z
0x14000D7C8: "long g_ReferenceCount" ?g_ReferenceCount@@3JA
0x14000DDD0: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x14000AF64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0
0x14000DDF0: "struct ArgDefPresent Winrs_Arg_UseSsl" ?Winrs_Arg_UseSsl@@3UArgDefPresent@@A
0x140003CC0: "private: unsigned long __cdecl Pipe_Thread::CreateSupportEnvironment(void) __ptr64" ?CreateSupportEnvironment@Pipe_Thread@@AEAAKXZ
0x140009528: "__cdecl _imp_exit" __imp_exit
0x14000DDF8: "struct WSMAN_SHELL * __ptr64 __ptr64 g_Shell" ?g_Shell@@3PEAUWSMAN_SHELL@@EA
0x14000AC9C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_base_util_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_base_util_l1_1_0_dll
0x1400094E8: "__cdecl _imp__lock" __imp__lock
0x14000DE88: "struct ArgDefPresent Winrs_Arg_NoProfile" ?Winrs_Arg_NoProfile@@3UArgDefPresent@@A
0x140009408: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x140009CE4: "/?" ??_C@_15BAIPABEI@?$AA?1?$AA?$DP?$AA?$AA@
0x1400077E8: atexit
0x140002624: "void __cdecl Close(struct WSMAN_SESSION * __ptr64)" ?Close@@YAXPEAUWSMAN_SESSION@@@Z
0x140009438: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x140009490: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1400092C8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400094B0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x14000DE00: "struct ArgDefPresent Winrs_Arg_Username" ?Winrs_Arg_Username@@3UArgDefPresent@@A
0x14000DE90: "struct ArgDefPresent Winrs_Arg_Host" ?Winrs_Arg_Host@@3UArgDefPresent@@A
0x14000114C: "public: __cdecl WinrsShellContext::~WinrsShellContext(void) __ptr64" ??1WinrsShellContext@@QEAA@XZ
0x1400093B0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140007D1F: "__cdecl _dllonexit" __dllonexit
0x140009918: "/password" ??_C@_1BE@OCCCOJPE@?$AA?1?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x140009B80: "-env" ??_C@_19ECHHCAFM@?$AA?9?$AAe?$AAn?$AAv?$AA?$AA@
0x14000DEC8: "struct WSMAN_COMMAND * __ptr64 __ptr64 g_Command" ?g_Command@@3PEAUWSMAN_COMMAND@@EA
0x14000DEE8: "__cdecl _native_startup_lock" __native_startup_lock
0x14000DED0: "bool g_Terminated" ?g_Terminated@@3_NA
0x1400099F0: "-remote:" ??_C@_1BC@BPBFBLAK@?$AA?9?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?3?$AA?$AA@
0x140009A70: "-noecho" ??_C@_1BA@POPJKGFA@?$AA?9?$AAn?$AAo?$AAe?$AAc?$AAh?$AAo?$AA?$AA@
0x140009B30: "-noe" ??_C@_19JGONBHNO@?$AA?9?$AAn?$AAo?$AAe?$AA?$AA@
0x1400020C0: "int __cdecl TextToUserAnswer(char const * __ptr64,unsigned long,enum UserAnswer & __ptr64)" ?TextToUserAnswer@@YAHPEBDKAEAW4UserAnswer@@@Z
0x14000DEE0: "unsigned long g_ctrlCPressedCount" ?g_ctrlCPressedCount@@3KA
0x140009360: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x140007870: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140002A60: "bool __cdecl SetShellResource(struct WSMAN_SHELL * __ptr64 & __ptr64)" ?SetShellResource@@YA_NAEAPEAUWSMAN_SHELL@@@Z
0x14000AF50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140009588: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140009500: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140001178: "public: virtual __cdecl ClientPipe_StdInPipe_Thread::~ClientPipe_StdInPipe_Thread(void) __ptr64" ??1ClientPipe_StdInPipe_Thread@@UEAA@XZ
0x1400093E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140009A80: "/noecho" ??_C@_1BA@HJFJIDDD@?$AA?1?$AAn?$AAo?$AAe?$AAc?$AAh?$AAo?$AA?$AA@
0x14000D000: "struct ArgDef * g_ArgDefs" ?g_ArgDefs@@3PAUArgDef@@A
0x14000AF28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x1400092C0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1400092F0: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x140009C48: "/t" ??_C@_15FMJKNOHE@?$AA?1?$AAt?$AA?$AA@
0x140007F3C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140009760: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x1400060F4: "void __cdecl PrintHelpMessage(int,unsigned short * __ptr64)" ?PrintHelpMessage@@YAXHPEAG@Z
0x1400094F0: "__cdecl _imp__commode" __imp__commode
0x140009510: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140009218: "__cdecl _imp_WSManSendShellInput" __imp_WSManSendShellInput
0x1400098E8: "-password" ??_C@_1BE@CIOMJPHI@?$AA?9?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x14000ACF8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x14000AD78: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x14000F018: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x14000B004: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1400093A0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140009418: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140009BE0: "-n" ??_C@_15COPGMIIE@?$AA?9?$AAn?$AA?$AA@
0x140007D98: "__cdecl _tailMerge_ext_ms_win_security_credui_l1_1_0_dll" __tailMerge_ext_ms_win_security_credui_l1_1_0_dll
0x14000AF3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x14000A050: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140007A10: "__cdecl ValidateImageBase" _ValidateImageBase
0x140009B20: "-ssl" ??_C@_19HIEPLOEO@?$AA?9?$AAs?$AAs?$AAl?$AA?$AA@
0x140009C18: "-r" ??_C@_15DEDJCAKD@?$AA?9?$AAr?$AA?$AA@
0x14000DEA8: "struct ArgDefPresent Winrs_Arg_NoEcho" ?Winrs_Arg_NoEcho@@3UArgDefPresent@@A
0x140001044: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140004000: "void __cdecl TerminateReaderThread(class ClientPipe_StdInPipe_Thread & __ptr64)" ?TerminateReaderThread@@YAXAEAVClientPipe_StdInPipe_Thread@@@Z
0x140009B60: "/nop" ??_C@_19PFNPGAEO@?$AA?1?$AAn?$AAo?$AAp?$AA?$AA@
0x140001CC8: "bool __cdecl ReleaseResourcesAndSetExit(unsigned long,bool,bool)" ?ReleaseResourcesAndSetExit@@YA_NK_N0@Z
0x14000A040: WPP_ThisDir_CTLGUID_RemoteShellClient
0x140001230: WPP_SF_
0x1400091F0: "__cdecl _imp_WSManReceiveShellOutput" __imp_WSManReceiveShellOutput
0x140009570: "__cdecl _imp__strnicmp" __imp__strnicmp
0x14000ACBC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x14000F008: api-ms-win-base-util-l1-1-0_NULL_THUNK_DATA_DLA
0x14000D840: "__cdecl newmode" _newmode
0x140009C30: "-t:" ??_C@_17PHILAAAD@?$AA?9?$AAt?$AA?3?$AA?$AA@
0x140009508: "__cdecl _imp__initterm" __imp__initterm
0x140009530: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400092A8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140009D98: "TRUE" ??_C@_04HCDDPBNL@TRUE?$AA@
0x14000AFF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x140005AFC: "int __cdecl ParseEnvArg(struct _WSMAN_ENVIRONMENT_VARIABLE * __ptr64 & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,unsigned short * __ptr64,unsigned short * __ptr64 & __ptr64,unsigned short * __ptr64 & __ptr64)" ?ParseEnvArg@@YAHAEAPEAU_WSMAN_ENVIRONMENT_VARIABLE@@AEAK1PEAGAEAPEAG3@Z
0x14000DE20: "struct _RTL_CRITICAL_SECTION g_CriticalSection" ?g_CriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x1400091A8: "__cdecl _imp_??1?$AutoDeleteVector@PEBG@@QEAA@XZ" __imp_??1?$AutoDeleteVector@PEBG@@QEAA@XZ
0x1400091B8: "__cdecl _imp_??0?$AutoDeleteVector@PEBG@@QEAA@XZ" __imp_??0?$AutoDeleteVector@PEBG@@QEAA@XZ
0x140009990: "-timeout:" ??_C@_1BE@DKNCIBLC@?$AA?9?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?3?$AA?$AA@
0x140009368: "__cdecl _imp_SetThreadPreferredUILanguages" __imp_SetThreadPreferredUILanguages
0x14000AE60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400048C8: "int __cdecl Main(int,unsigned short * __ptr64 * __ptr64,int,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,bool,unsigned long,struct _WSMAN_ENVIRONMENT_VARIABLE * __ptr64,unsigned long,unsigned long)" ?Main@@YAHHPEAPEAGHPEAG1K11_NKPEAU_WSMAN_ENVIRONMENT_VARIABLE@@KK@Z
0x140009BC0: "-d:" ??_C@_17PEFNACJI@?$AA?9?$AAd?$AA?3?$AA?$AA@
0x14000DED8: "struct ArgDefPresent Winrs_Arg_UnEncrypt" ?Winrs_Arg_UnEncrypt@@3UArgDefPresent@@A
0x140009A18: "/remote:" ??_C@_1BC@BKMBHAIJ@?$AA?1?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?3?$AA?$AA@
0x140009BD8: "/d" ??_C@_15MIDIJOL@?$AA?1?$AAd?$AA?$AA@
0x140009180: "__cdecl _imp_WSManCloseCommand" __imp_WSManCloseCommand
0x14000DEF8: "__cdecl _onexitend" __onexitend
0x1400093C0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x140009520: "__cdecl _imp__exit" __imp__exit
0x140007D13: "__cdecl unlock" _unlock
0x1400095B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400097A4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1400093C8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140009160: "__cdecl _imp_WSManRunShellCommand" __imp_WSManRunShellCommand
0x140009250: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x14000ACE8: api-ms-win-base-util-l1-1-0_NULL_THUNK_DATA_DLN
0x140009E50: "http://schemas.microsoft.com/wbe" ??_C@_1JE@GMCBICFE@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x140009C40: "/t:" ??_C@_17LFKOAHHO@?$AA?1?$AAt?$AA?3?$AA?$AA@
0x140009480: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400095E8: "__cdecl _xi_a" __xi_a
0x140009478: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140009298: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400099D8: "/timeout" ??_C@_1BC@CNELBIGB@?$AA?1?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140007950: "__cdecl matherr" _matherr
0x140009200: "__cdecl _imp_WSManCreateShell" __imp_WSManCreateShell
0x140009900: "/password:" ??_C@_1BG@DGJAIEIC@?$AA?1?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?3?$AA?$AA@
0x1400094E0: "__cdecl _imp__unlock" __imp__unlock
0x140006D98: wmain
0x1400091A0: "__cdecl _imp_??1AutoLibrary@@QEAA@XZ" __imp_??1AutoLibrary@@QEAA@XZ
0x14000D7E0: "class WmiAllocator g_Allocator" ?g_Allocator@@3VWmiAllocator@@A
0x14000DDE8: "struct ArgDefPresent Winrs_Arg_Compression" ?Winrs_Arg_Compression@@3UArgDefPresent@@A
0x14000169C: "unsigned long __cdecl GetArgs(int & __ptr64,unsigned short * __ptr64 * __ptr64 & __ptr64)" ?GetArgs@@YAKAEAHAEAPEAPEAG@Z
0x1400096E0: "ext-ms-win-security-credui-l1-1-" ??_C@_1EE@KCHBBNHO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAr?$AAe?$AAd?$AAu?$AAi?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x140009BD0: "/d:" ??_C@_17LGHIAFOF@?$AA?1?$AAd?$AA?3?$AA?$AA@
0x1400042A0: "void __cdecl Signal(unsigned short const * __ptr64)" ?Signal@@YAXPEBG@Z
0x14000D798: WPP_GLOBAL_Control
0x14000AEC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140009870: "-directory:" ??_C@_1BI@HEHIABHB@?$AA?9?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?3?$AA?$AA@
0x14000125C: WPP_SF_d
0x140009960: "/userName:" ??_C@_1BG@OHFKBJAO@?$AA?1?$AAu?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?$AA@
0x140007E17: "__cdecl _imp_load_CoFreeUnusedLibrariesEx" __imp_load_CoFreeUnusedLibrariesEx
0x14000DDC8: "__cdecl _hmod__ext_ms_win_security_credui_l1_1_0_dll" __hmod__ext_ms_win_security_credui_l1_1_0_dll
0x140009A40: "-noprofile" ??_C@_1BG@OEPJOKGB@?$AA?9?$AAn?$AAo?$AAp?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x1400094D8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x140009258: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x140009978: "/userName" ??_C@_1BE@KJNKMELA@?$AA?1?$AAu?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140002E50: "public: virtual void * __ptr64 __cdecl Pipe_Thread::`scalar deleting destructor'(unsigned int) __ptr64" ??_GPipe_Thread@@UEAAPEAXI@Z
0x1400091B0: "__cdecl _imp_??4?$AutoDeleteVector@PEBG@@QEAAAEAV0@PEAPEBG@Z" __imp_??4?$AutoDeleteVector@PEBG@@QEAAAEAV0@PEAPEBG@Z
0x14000AE74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140009430: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x140007730: "__cdecl _security_check_cookie" __security_check_cookie
0x140009268: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x1400095E0: "__cdecl _xc_z" __xc_z
0x1400093D0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140009F28: "FALSE" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x140002B7C: "void __cdecl PrintCommandError(unsigned long,unsigned short * __ptr64)" ?PrintCommandError@@YAXKPEAG@Z
0x140009B90: "/env:" ??_C@_1M@FOMNPGLN@?$AA?1?$AAe?$AAn?$AAv?$AA?3?$AA?$AA@
0x140009030: "const Pipe_Thread::`vftable'" ??_7Pipe_Thread@@6B@
0x1400097B0: "-environment:" ??_C@_1BM@EGAIHDHH@?$AA?9?$AAe?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?3?$AA?$AA@
0x1400094C8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140009340: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x140009470: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140009850: "/unencrypted" ??_C@_1BK@POCAABIE@?$AA?1?$AAu?$AAn?$AAe?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAe?$AAd?$AA?$AA@
0x140009380: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x140009CF0: " winrs.exe:" ??_C@_1BO@IAIBIGPP@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AAw?$AAi?$AAn?$AAr?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?3?$AA?$AA@
0x140009198: "__cdecl _imp_??1?$AutoDeleteVector@D@@QEAA@XZ" __imp_??1?$AutoDeleteVector@D@@QEAA@XZ
0x140009190: "__cdecl _imp_??1?$AutoDeleteVector@E@@QEAA@XZ" __imp_??1?$AutoDeleteVector@E@@QEAA@XZ
0x140001490: "public: unsigned long __cdecl CWSManCriticalSection::GetInitError(void)const __ptr64" ?GetInitError@CWSManCriticalSection@@QEBAKXZ
0x14000F010: "__cdecl _imp_CoFreeUnusedLibrariesEx" __imp_CoFreeUnusedLibrariesEx
0x140009288: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x140009A58: "/noprofile" ??_C@_1BG@MKKJCDOB@?$AA?1?$AAn?$AAo?$AAp?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x140009308: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400080A0: "__cdecl _chkstk" __chkstk
0x1400062E0: "int __cdecl ParseArgs(int,unsigned short * __ptr64 * __ptr64,int & __ptr64,int & __ptr64,unsigned short * __ptr64 & __ptr64,unsigned short * __ptr64 & __ptr64,unsigned long & __ptr64,unsigned short * __ptr64 & __ptr64,unsigned short * __ptr64 & __ptr64,bool & __ptr64,unsigned long & __ptr64,struct _WSMAN_ENVIRONMENT_VARIABLE * __ptr64 & __ptr64,unsigned long & __ptr64)" ?ParseArgs@@YAHHPEAPEAGAEAH1AEAPEAG2AEAK22AEA_N3AEAPEAU_WSMAN_ENVIRONMENT_VARIABLE@@3@Z
0x140005970: "int __cdecl Value(unsigned short * __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,int & __ptr64)" ?Value@@YAHPEAGAEAK11AEAH@Z
0x140009D68: " Resource Load Failure" ??_C@_1CO@FNCEBBJF@?$AA?6?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?5?$AAL?$AAo?$AAa?$AAd?$AA?5?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x140009400: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140009CA0: "-compression" ??_C@_1BK@PKOJBGFM@?$AA?9?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14000AFDC: "__cdecl _IMPORT_DESCRIPTOR_WsmSvc" __IMPORT_DESCRIPTOR_WsmSvc
0x140009A30: "/remote" ??_C@_1BA@IAPILBCM@?$AA?1?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?$AA@
0x14000AFB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000DEB8: "struct ArgDefPresent Winrs_Arg_Timeout" ?Winrs_Arg_Timeout@@3UArgDefPresent@@A
0x14000AFC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x1400093E0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140009608: "__cdecl _guard_fids_table" __guard_fids_table
0x1400095A8: msvcrt_NULL_THUNK_DATA
0x140009050: "__cdecl load_config_used" _load_config_used
0x1400091D8: "__cdecl _imp_WSManCloseOperation" __imp_WSManCloseOperation
0x140009C10: "-r:" ??_C@_17CBNCODBO@?$AA?9?$AAr?$AA?3?$AA?$AA@
0x140009238: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x1400092A0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140009290: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x140001DC8: "int __cdecl DisplayShellTerminationMessage(void)" ?DisplayShellTerminationMessage@@YAHXZ
0x14000D7D8: "struct ArgDefPresent Winrs_Arg_Help" ?Winrs_Arg_Help@@3UArgDefPresent@@A
0x140009780: "__cdecl _sz_api_ms_win_base_util_l1_1_0_dll" __sz_api_ms_win_base_util_l1_1_0_dll
0x140009690: "ext-ms-win-security-credui-l1-1-" ??_C@_1EE@BKMNHKBL@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAc?$AAr?$AAe?$AAd?$AAu?$AAi?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x14000DEC0: "unsigned long g_ExitCode" ?g_ExitCode@@3KA
0x140009248: "__cdecl _imp_GetConsoleCP" __imp_GetConsoleCP
0x14000AF14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x14000AEB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400058A0: "int __cdecl Equal(unsigned short * __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,int & __ptr64)" ?Equal@@YAHPEAGAEAK11AEAH@Z
0x140009540: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140009F18: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x140002E50: "public: virtual void * __ptr64 __cdecl Pipe_Thread::`vector deleting destructor'(unsigned int) __ptr64" ??_EPipe_Thread@@UEAAPEAXI@Z
0x14000DDD8: "__cdecl _hmod__api_ms_win_base_util_l1_1_0_dll" __hmod__api_ms_win_base_util_l1_1_0_dll
0x140009350: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400010CC: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140009388: "__cdecl _imp_SetStdHandle" __imp_SetStdHandle
0x140007D38: IsCredUICmdLinePromptForCredentialsWPresent
0x1400093F8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400093D8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000D83C: "__cdecl dowildcard" _dowildcard
0x140009C38: "-t" ??_C@_15BBFCHPHP@?$AA?9?$AAt?$AA?$AA@
0x140005EFC: "int __cdecl PromptPassword(unsigned short * __ptr64,unsigned short * __ptr64 & __ptr64,unsigned short * __ptr64 & __ptr64,bool & __ptr64)" ?PromptPassword@@YAHPEAGAEAPEAG1AEA_N@Z
0x140007F30: ApiSetQueryApiSetPresence
0x1400093F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140007810: "__cdecl purecall" _purecall
0x14000A058: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140009EF8: "WINRS_NOPROFILE" ??_C@_1CA@NHLAPBOL@?$AAW?$AAI?$AAN?$AAR?$AAS?$AA_?$AAN?$AAO?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x14000781C: "__cdecl _std_terminate" __std_terminate
0x14000A020: "" " ??_C@_17PCKNLGAH@?$AA?$CC?$AA?$AN?$AA?6?$AA?$AA@
0x14000F020: "__cdecl _imp_CredUICmdLinePromptForCredentialsW" __imp_CredUICmdLinePromptForCredentialsW
0x140007B40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140009378: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140009178: "__cdecl _imp_WSManDeinitialize" __imp_WSManDeinitialize
0x14000DE98: "struct ArgDefPresent Winrs_Arg_Directory" ?Winrs_Arg_Directory@@3UArgDefPresent@@A
0x140007E23: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x14000789C: RtlpImageNtHeader
0x140009DC0: "http://schemas.microsoft.com/wbe" ??_C@_1IM@NHBEJOCM@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAs?$AAc?$AAh?$AAe?$AAm?$AAa?$AAs?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAw?$AAb?$AAe@
0x1400098B8: "/directory" ??_C@_1BG@NEDCBCIK@?$AA?1?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x140009BC8: "-d" ??_C@_15EBELCIOA@?$AA?9?$AAd?$AA?$AA@
0x140009D38: "WsmRes.dll" ??_C@_1BG@DKBNENGP@?$AAW?$AAs?$AAm?$AAR?$AAe?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400098D0: "-password:" ??_C@_1BG@BIMAENAC@?$AA?9?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?3?$AA?$AA@
0x140009C28: "/r" ??_C@_15HJPBIBKI@?$AA?1?$AAr?$AA?$AA@
0x14000AEEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140009C80: "/compression" ??_C@_1BK@OPKDFNDD@?$AA?1?$AAc?$AAo?$AAm?$AAp?$AAr?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140009358: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140009CC0: "/comp" ??_C@_1M@CMBMMGF@?$AA?1?$AAc?$AAo?$AAm?$AAp?$AA?$AA@
0x140009AD0: "/allowdelegate" ??_C@_1BO@CEOPDEKK@?$AA?1?$AAa?$AAl?$AAl?$AAo?$AAw?$AAd?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x1400094B8: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x140009AF0: "/usessl" ??_C@_1BA@FONOEIFC@?$AA?1?$AAu?$AAs?$AAe?$AAs?$AAs?$AAl?$AA?$AA@
0x140009BB0: "-un" ??_C@_17HILIELFD@?$AA?9?$AAu?$AAn?$AA?$AA@
0x14000A030: WPP_9189c0aba9ae3cf5d795732eea04e431_Traceguids
0x140002D40: "void __cdecl PrintError(unsigned long,unsigned short * __ptr64)" ?PrintError@@YAXKPEAG@Z
0x140009548: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140009EE8: "stderr" ??_C@_1O@FINNGECF@?$AAs?$AAt?$AAd?$AAe?$AAr?$AAr?$AA?$AA@
0x1400094C0: "__cdecl _imp_memcpy" __imp_memcpy
0x140009DA8: "stdin" ??_C@_1M@IIPPDPJF@?$AAs?$AAt?$AAd?$AAi?$AAn?$AA?$AA@
0x140003BB8: "public: unsigned long __cdecl Pipe_Thread::WaitForStartup(void) __ptr64" ?WaitForStartup@Pipe_Thread@@QEAAKXZ
0x1400012FC: WPP_SF_LLL
0x14000135C: WPP_SF_LsL
0x14000AC5C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_0_dll
0x140002C3C: "void __cdecl PrintStatusCode(unsigned long,bool)" ?PrintStatusCode@@YAXK_N@Z
0x1400094A0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x14000AE9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140009C58: "-u" ??_C@_15KJOOBIBK@?$AA?9?$AAu?$AA?$AA@
0x1400094F8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x140009498: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x140009228: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x14000D7A8: "__cdecl _security_cookie" __security_cookie
0x1400080A0: "__cdecl alloca_probe" _alloca_probe
0x140009B40: "/noe" ??_C@_19JCBIMHOD@?$AA?1?$AAn?$AAo?$AAe?$AA?$AA@
0x1400092F8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140009A90: "-help" ??_C@_1M@EMIGGGGA@?$AA?9?$AAh?$AAe?$AAl?$AAp?$AA?$AA@
0x140009328: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000D7A0: "__cdecl _defaultmatherr" __defaultmatherr
0x14000AE88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140009CDC: "-?" ??_C@_15FNEHKAED@?$AA?9?$AA?$DP?$AA?$AA@
0x14000F028: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLA
0x140009220: WsmSvc_NULL_THUNK_DATA
0x14000DF00: "__cdecl _onexitbegin" __onexitbegin
0x140009208: "__cdecl _imp_WSManCreateSession" __imp_WSManCreateSession
0x140001914: "unsigned long __cdecl WriteOutput_StdError(unsigned short * __ptr64)" ?WriteOutput_StdError@@YAKPEAG@Z
0x140009590: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1400092B8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140009280: api-ms-win-core-console-l2-1-0_NULL_THUNK_DATA
0x140009260: "__cdecl _imp_ReadConsoleW" __imp_ReadConsoleW
0x1400097D0: "/environment:" ??_C@_1BM@EFGDIJEN@?$AA?1?$AAe?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?3?$AA?$AA@
0x140009270: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140009188: "__cdecl _imp_??0AutoLibrary@@QEAA@PEAUHINSTANCE__@@@Z" __imp_??0AutoLibrary@@QEAA@PEAUHINSTANCE__@@@Z
0x14000DE10: "struct _GUID g_correlationId" ?g_correlationId@@3U_GUID@@A
0x140001BB8: "bool __cdecl AcquireReaderResourceUsage(struct WSMAN_API * __ptr64 & __ptr64,struct WSMAN_SESSION * __ptr64 & __ptr64,struct WSMAN_SHELL * __ptr64 & __ptr64,struct WSMAN_COMMAND * __ptr64 & __ptr64)" ?AcquireReaderResourceUsage@@YA_NAEAPEAUWSMAN_API@@AEAPEAUWSMAN_SESSION@@AEAPEAUWSMAN_SHELL@@AEAPEAUWSMAN_COMMAND@@@Z
0x140007A44: "__cdecl _security_init_cookie" __security_init_cookie
0x1400091D0: "__cdecl _imp_WSManInitialize" __imp_WSManInitialize
0x140009518: "__cdecl _imp__cexit" __imp__cexit
0x1400098A0: "/directory:" ??_C@_1BI@KNEDMNHO@?$AA?1?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?3?$AA?$AA@
0x1400078F8: "__cdecl get_image_app_type" _get_image_app_type
0x140009A08: "-remote" ??_C@_1BA@HFIJEEP@?$AA?9?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?$AA@
0x14000DEB0: "struct WSMAN_API * __ptr64 __ptr64 g_apiHandle" ?g_apiHandle@@3PEAUWSMAN_API@@EA
0x14000AE38: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400099A8: "-timeout" ??_C@_1BC@CIJPHDOC@?$AA?9?$AAt?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140009B00: "-usessl" ??_C@_1BA@NJHOGNDB@?$AA?9?$AAu?$AAs?$AAe?$AAs?$AAs?$AAl?$AA?$AA@
0x140009B70: "-env:" ??_C@_1M@LCPGGICC@?$AA?9?$AAe?$AAn?$AAv?$AA?3?$AA?$AA@
0x1400091E0: "__cdecl _imp_??1CWSManCriticalSection@@QEAA@XZ" __imp_??1CWSManCriticalSection@@QEAA@XZ
0x14000D7D0: "struct ArgDefPresent Winrs_Arg_Environment" ?Winrs_Arg_Environment@@3UArgDefPresent@@A
0x140007700: wmainCRTStartup
0x140009D10: " Winrs error:" ??_C@_1CC@LADFDGKO@?$AA?$AN?$AA?6?$AA?$AN?$AA?6?$AAW?$AAi?$AAn?$AAr?$AAs?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?$AA@
0x140009550: "__cdecl _imp_malloc" __imp_malloc
0x140009AA0: "/help" ??_C@_1M@KALNPIPP@?$AA?1?$AAh?$AAe?$AAl?$AAp?$AA?$AA@
0x140009578: "__cdecl _imp__purecall" __imp__purecall
0x14000AD68: ext-ms-win-security-credui-l1-1-0_NULL_THUNK_DATA_DLB
0x1400092E0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x140009210: "__cdecl _imp_WSManCloseShell" __imp_WSManCloseShell
0x1400091E8: "__cdecl _imp_WSManSignalShell" __imp_WSManSignalShell
0x1400097A0: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x1400019B4: "long __cdecl Release(void)" ?Release@@YAJXZ
0x140009CEC: "-" ??_C@_13IMODFHAA@?$AA?9?$AA?$AA@
0x140007B90: "__cdecl _report_gsfailure" __report_gsfailure
0x140009230: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x1400014A0: "public: __cdecl CWSManCriticalSectionWithConditionVar::~CWSManCriticalSectionWithConditionVar(void) __ptr64" ??1CWSManCriticalSectionWithConditionVar@@QEAA@XZ
0x140009448: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140007754: "__cdecl onexit" _onexit
0x14000DEF0: "__cdecl _native_startup_state" __native_startup_state
0x14000D7C0: "struct ArgDefPresent Winrs_Arg_AllowDelegate" ?Winrs_Arg_AllowDelegate@@3UArgDefPresent@@A
0x14000DDE0: "struct WSMAN_SESSION * __ptr64 __ptr64 g_sessionHandle" ?g_sessionHandle@@3PEAUWSMAN_SESSION@@EA
0x140009F38: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x140009580: "__cdecl _imp__snwscanf_s" __imp__snwscanf_s
0x140009C08: "/p" ??_C@_15NDPIEJCD@?$AA?1?$AAp?$AA?$AA@
0x140007270: "void __cdecl WinrsShellOperationCallback(void * __ptr64,unsigned long,struct _WSMAN_ERROR * __ptr64,struct WSMAN_SHELL * __ptr64,struct WSMAN_COMMAND * __ptr64,struct WSMAN_OPERATION * __ptr64,struct _WSMAN_RECEIVE_DATA_RESULT * __ptr64)" ?WinrsShellOperationCallback@@YAXPEAXKPEAU_WSMAN_ERROR@@PEAUWSMAN_SHELL@@PEAUWSMAN_COMMAND@@PEAUWSMAN_OPERATION@@PEAU_WSMAN_RECEIVE_DATA_RESULT@@@Z
0x140009598: "__cdecl _imp__fmode" __imp__fmode
0x140009888: "-directory" ??_C@_1BG@PKGCNLAK@?$AA?9?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x140009AB0: "-allowdelegate" ??_C@_1BO@FMCOPCLK@?$AA?9?$AAa?$AAl?$AAl?$AAo?$AAw?$AAd?$AAe?$AAl?$AAe?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x140002860: "bool __cdecl SetApiHandleResource(struct WSMAN_API * __ptr64 & __ptr64)" ?SetApiHandleResource@@YA_NAEAPEAUWSMAN_API@@@Z
0x140002784: "bool __cdecl SetSessionHandleResource(struct WSMAN_SESSION * __ptr64 & __ptr64)" ?SetSessionHandleResource@@YA_NAEAPEAUWSMAN_SESSION@@@Z
0x14000AF8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400057D0: "int __cdecl Eof(unsigned short * __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,int & __ptr64)" ?Eof@@YAHPEAGAEAK11AEAH@Z
0x140009568: "__cdecl _imp_free" __imp_free
0x1400079B0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140009468: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14000AF00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x140009458: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x14000AF78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140009C20: "/r:" ??_C@_17GDPHOEGD@?$AA?1?$AAr?$AA?3?$AA?$AA@
0x140008062: memset
0x14000B018: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1400092D0: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]