Generated by JEB on 2019/08/01

PE: C:\Windows\WinSxS\amd64_netfx-mscortim_dll_b03f5f7f11d50a3a_10.0.17763.1_none_4311e2cde947f8f5\mscortim.dll Base=0x642FFBB0000 SHA-256=9000F7CAB7CDBC9EFC53A31517B99297707295CE16E790A53BDFDC8C089E8B60
PDB: mscortim.pdb GUID={D3E14503-8D9C-4B2F-A6805BFFEAF19A0C} Age=1

138 located named symbols:
0x642FFBB2030: "__cdecl FindPESection" _FindPESection
0x642FFBB3024: "__cdecl forceCRTManifest" _forceCRTManifest
0x642FFBB3010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x642FFBB1A70: "__cdecl CRT_INIT" _CRT_INIT
0x642FFBB1048: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x642FFBB10A8: "__cdecl _imp_CreateFileA" __imp_CreateFileA
0x642FFBB1F80: "__cdecl RTC_Initialize" _RTC_Initialize
0x642FFBB12EF: "" ??_C@_00CNPNBAHC@?$AA@
0x642FFBB1150: "__cdecl _imp__lseek" __imp__lseek
0x642FFBB1328: "__cdecl _rtc_taa" __rtc_taa
0x642FFBB1118: "__cdecl _imp__initterm_e" __imp__initterm_e
0x642FFBB13E0: "int __cdecl fci_close(int,int * __ptr64,void * __ptr64)" ?fci_close@@YAHHPEAHPEAX@Z
0x642FFBB1318: "__cdecl _rtc_iaa" __rtc_iaa
0x642FFBB250C: "__cdecl _IMPORT_DESCRIPTOR_MSVCR80" __IMPORT_DESCRIPTOR_MSVCR80
0x642FFBB11C0: "__cdecl _xc_a" __xc_a
0x642FFBB10E8: "__cdecl _imp___clean_type_info_names_internal" __imp___clean_type_info_names_internal
0x642FFBB1210: "__cdecl pDefaultRawDllMain" _pDefaultRawDllMain
0x642FFBB234C: "__cdecl lock" _lock
0x642FFBB1260: "FCIFlushFolder" ??_C@_0P@PNNHBDLI@FCIFlushFolder?$AA@
0x642FFBB1078: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x642FFBB11B0: "__cdecl _imp_memset" __imp_memset
0x642FFBB20E2: "__cdecl initterm" _initterm
0x642FFBB10B0: "__cdecl _imp_FileTimeToDosDateTime" __imp_FileTimeToDosDateTime
0x642FFBB3600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x642FFBB1068: "__cdecl _imp_Sleep" __imp_Sleep
0x642FFBB11E0: "__cdecl _xi_z" __xi_z
0x642FFBB1020: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x642FFBB20F4: "__cdecl _C_specific_handler" __C_specific_handler
0x642FFBB12B0: " (Above file is a later seg" ??_C@_0DL@GCALANLA@?5?5?5?5?5?5?$CIAbove?5file?5is?5a?5later?5seg@
0x642FFBB11A0: "__cdecl _imp__onexit" __imp__onexit
0x642FFBB11B8: MSVCR80_NULL_THUNK_DATA
0x642FFBB3004: "__cdecl _native_vcclrit_reason" __native_vcclrit_reason
0x642FFBB20EE: "__cdecl amsg_exit" _amsg_exit
0x642FFBB233A: "__cdecl _clean_type_info_names_internal" __clean_type_info_names_internal
0x642FFBB13B0: "unsigned int __cdecl fci_write(int,void * __ptr64,unsigned int,int * __ptr64,void * __ptr64)" ?fci_write@@YAIHPEAXIPEAH0@Z
0x642FFBB10D0: "__cdecl _imp__lock" __imp__lock
0x642FFBB1F60: atexit
0x642FFBB20FA: "__cdecl _CppXcptFilter" __CppXcptFilter
0x642FFBB1028: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x642FFBB2346: "__cdecl _dllonexit" __dllonexit
0x642FFBB1438: "int __cdecl fci_delete(char * __ptr64,int * __ptr64,void * __ptr64)" ?fci_delete@@YAHPEADPEAHPEAX@Z
0x642FFBB35E8: "__cdecl _native_startup_lock" __native_startup_lock
0x642FFBB2100: DllMain
0x642FFBB140C: "long __cdecl fci_seek(int,long,int,int * __ptr64,void * __ptr64)" ?fci_seek@@YAJHJHPEAHPEAX@Z
0x642FFBB1FC0: "__cdecl RTC_Terminate" _RTC_Terminate
0x642FFBB10F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x642FFBB10B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x642FFBB10C0: KERNEL32_NULL_THUNK_DATA
0x642FFBB1070: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x642FFBB3000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x642FFBB2370: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x642FFBB1240: "FCIAddFile" ??_C@_0L@GMEIMLEP@FCIAddFile?$AA@
0x642FFBB1040: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x642FFBB1608: "int __cdecl CreateCab(char * __ptr64,char * __ptr64)" ?CreateCab@@YAHPEAD0@Z
0x642FFBB2000: "__cdecl ValidateImageBase" _ValidateImageBase
0x642FFBB10A0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x642FFBB1140: "__cdecl _imp_strncpy_s" __imp_strncpy_s
0x642FFBB1E10: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x642FFBB1120: "__cdecl _imp__initterm" __imp__initterm
0x642FFBB1250: "FCIFlushCabinet" ??_C@_0BA@JKDJLCFD@FCIFlushCabinet?$AA@
0x642FFBB35F0: "__cdecl _onexitend" __onexitend
0x642FFBB2340: "__cdecl unlock" _unlock
0x642FFBB235E: RtlLookupFunctionEntry
0x642FFBB2352: "__cdecl _crt_debugger_hook" __crt_debugger_hook
0x642FFBB1030: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x642FFBB10E0: "__cdecl _imp___crt_debugger_hook" __imp___crt_debugger_hook
0x642FFBB1514: "long __cdecl progress(unsigned int,unsigned long,unsigned long,void * __ptr64)" ?progress@@YAJIKKPEAX@Z
0x642FFBB1010: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x642FFBB11D0: "__cdecl _xi_a" __xi_a
0x642FFBB1050: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x642FFBB10D8: "__cdecl _imp__unlock" __imp__unlock
0x642FFBB1138: "__cdecl _imp__close" __imp__close
0x642FFBB1168: "__cdecl _imp__read" __imp__read
0x642FFBB1210: "__cdecl pRawDllMain" _pRawDllMain
0x642FFBB10C8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x642FFBB1518: "int __cdecl get_next_cabinet(struct CCAB * __ptr64,unsigned long,void * __ptr64)" ?get_next_cabinet@@YAHPEAUCCAB@@KPEAX@Z
0x642FFBB1320: "__cdecl _rtc_izz" __rtc_izz
0x642FFBB1E60: "__cdecl _security_check_cookie" __security_check_cookie
0x642FFBB11C8: "__cdecl _xc_z" __xc_z
0x642FFBB1270: "FCIDestroy" ??_C@_0L@CEMECEMA@FCIDestroy?$AA@
0x642FFBB1128: "__cdecl _imp__malloc_crt" __imp__malloc_crt
0x642FFBB1090: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x642FFBB10F0: "__cdecl _imp___CppXcptFilter" __imp___CppXcptFilter
0x642FFBB134C: "void __cdecl mem_free(void * __ptr64)" ?mem_free@@YAXPEAX@Z
0x642FFBB1038: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x642FFBB1520: "int __cdecl get_open_info(char * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int * __ptr64,void * __ptr64)" ?get_open_info@@YAHPEADPEAG11PEAHPEAX@Z
0x642FFBB1464: "int __cdecl file_placed(struct CCAB * __ptr64,char * __ptr64,long,int,void * __ptr64)" ?file_placed@@YAHPEAUCCAB@@PEADJHPEAX@Z
0x642FFBB1180: "__cdecl _imp__errno" __imp__errno
0x642FFBB1148: "__cdecl _imp__write" __imp__write
0x642FFBB1354: "int __cdecl fci_open(char * __ptr64,int,int,int * __ptr64,void * __ptr64)" ?fci_open@@YAHPEADHHPEAHPEAX@Z
0x642FFBB1330: "__cdecl _rtc_tzz" __rtc_tzz
0x642FFBB1170: "__cdecl _imp_printf" __imp_printf
0x642FFBB1E80: "__cdecl _clean_type_info_names" __clean_type_info_names
0x642FFBB1108: "__cdecl _imp__decode_pointer" __imp__decode_pointer
0x642FFBB1100: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x642FFBB1060: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x642FFBB1088: "__cdecl _imp_LoadLibraryA" __imp_LoadLibraryA
0x642FFBB1098: "__cdecl _imp_GetFileAttributesA" __imp_GetFileAttributesA
0x642FFBB1000: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x642FFBB1058: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x642FFBB149C: "int __cdecl get_temp_file(char * __ptr64,int,void * __ptr64)" ?get_temp_file@@YAHPEADHPEAX@Z
0x642FFBB11A8: "__cdecl _imp__tempnam" __imp__tempnam
0x642FFBB1008: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x642FFBB1130: "__cdecl _imp__encode_pointer" __imp__encode_pointer
0x642FFBB1190: "__cdecl _imp_?_open@@YAHPEBDHH@Z" __imp_?_open@@YAHPEBDHH@Z
0x642FFBB1340: "void * __ptr64 __cdecl mem_alloc(unsigned long)" ?mem_alloc@@YAPEAXK@Z
0x642FFBB20E8: "__cdecl initterm_e" _initterm_e
0x642FFBB1158: "__cdecl _imp_strrchr" __imp_strrchr
0x642FFBB3008: "__cdecl _security_cookie" __security_cookie
0x642FFBB1160: "__cdecl _imp_strcpy_s" __imp_strcpy_s
0x642FFBB1080: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x642FFBB35F8: "__cdecl _onexitbegin" __onexitbegin
0x642FFBB1018: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x642FFBB2520: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x642FFBB1110: "__cdecl _imp__encoded_null" __imp__encoded_null
0x642FFBB2130: "__cdecl _security_init_cookie" __security_init_cookie
0x642FFBB1230: "FCICreate" ??_C@_09PECPPCHB@FCICreate?$AA@
0x642FFBB12EC: "xx" ??_C@_02LNLKOMPL@xx?$AA@
0x642FFBB1188: "__cdecl _imp_malloc" __imp_malloc
0x642FFBB2358: RtlVirtualUnwind
0x642FFBB1228: "CABINET" ??_C@_07BLINPCHP@CABINET?$AA@
0x642FFBB21F0: "__cdecl _report_gsfailure" __report_gsfailure
0x642FFBB1E90: "__cdecl onexit" _onexit
0x642FFBB35E0: "__cdecl _native_startup_state" __native_startup_state
0x642FFBB3028: "struct __type_info_node __type_info_root_node" ?__type_info_root_node@@3U__type_info_node@@A
0x642FFBB1198: "__cdecl _imp_free" __imp_free
0x642FFBB1178: "__cdecl _imp_remove" __imp_remove
0x642FFBB2080: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x642FFBB1280: " placed file '%s' (size %d) on" ??_C@_0CP@LMGBMJJB@?5?5?5placed?5file?5?8?$CFs?8?5?$CIsize?5?$CFd?$CJ?5on@
0x642FFBB1380: "unsigned int __cdecl fci_read(int,void * __ptr64,unsigned int,int * __ptr64,void * __ptr64)" ?fci_read@@YAIHPEAXIPEAH0@Z
0x642FFBB2364: memset
0x642FFBB2534: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]