Generated by JEB on 2019/08/01

PE: C:\Windows\System32\LogonUI.exe Base=0x140000000 SHA-256=9358EF8CB7FB08581D74274005263BD8FA2E6E0FC443930B25FD345CF6CE9071
PDB: logonui.pdb GUID={3219B03C-2CD1-6318-063D51815B9A26A1} Age=1

123 located named symbols:
0x140001CFC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140001B10: "__cdecl FindPESection" _FindPESection
0x140003118: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400038D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140001B00: "__cdecl wsetargv" _wsetargv
0x140004010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003258: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140003198: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001ED0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003330: "/flags:" ??_C@_1BA@CFPNOMLN@?$AA?1?$AAf?$AAl?$AAa?$AAg?$AAs?$AA?3?$AA?$AA@
0x140003288: "__cdecl _imp_wcstoul" __imp_wcstoul
0x140004058: "__cdecl commode" _commode
0x140003160: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140003278: "__cdecl _imp_wcschr" __imp_wcschr
0x1400019E0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400032A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140004064: "__cdecl fmode" _fmode
0x140001010: wWinMain
0x140001A3E: "__cdecl XcptFilter" _XcptFilter
0x1400032A8: "__cdecl _xc_a" __xc_a
0x140003190: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140003270: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x140001CCF: "__cdecl initterm" _initterm
0x140003318: "/state0:" ??_C@_1BC@HJACKDGN@?$AA?1?$AAs?$AAt?$AAa?$AAt?$AAe?$AA0?$AA?3?$AA?$AA@
0x14000394C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140004600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400031E0: "__cdecl _imp_Sleep" __imp_Sleep
0x1400032D8: "__cdecl _xi_z" __xi_z
0x140003140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140001CDB: "__cdecl _C_specific_handler" __C_specific_handler
0x140003340: "/testclientprocessid:" ??_C@_1CM@JEFPMEAK@?$AA?1?$AAt?$AAe?$AAs?$AAt?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAi?$AAd?$AA?3?$AA?$AA@
0x140001AF3: "__cdecl amsg_exit" _amsg_exit
0x140003248: "__cdecl _imp_exit" __imp_exit
0x140003300: "/state1:" ??_C@_1BC@LCFOHAMI@?$AA?1?$AAs?$AAt?$AAa?$AAt?$AAe?$AA1?$AA?3?$AA?$AA@
0x140003120: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x140003220: "__cdecl _imp__wcmdln" __imp__wcmdln
0x140003370: "__cdecl GUID_e76c5d5b_7ad9_4496_9efd_dfa08ec700bb" _GUID_e76c5d5b_7ad9_4496_9efd_dfa08ec700bb
0x140003148: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140003180: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400045F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140001A20: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140003228: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400031D0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140003170: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140003210: "__cdecl _imp__commode" __imp__commode
0x140003230: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140003178: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140001980: wWinMainCRTStartup
0x140001BC0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140003924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140004060: "__cdecl newmode" _newmode
0x140003380: CLSID_LogonUIController
0x140003280: "__cdecl _imp__initterm" __imp__initterm
0x140003250: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140004610: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUxfoUoryUlyquivUznwGEUkivxlnkOlyq@CommonUtilityLibrary" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUxfoUoryUlyquivUznwGEUkivxlnkOlyq@CommonUtilityLibrary
0x1400045E0: "__cdecl _onexitend" __onexitend
0x140003240: "__cdecl _imp__exit" __imp__exit
0x140003298: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003188: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003200: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400032C0: "__cdecl _xi_a" __xi_a
0x1400031F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001B00: "__cdecl matherr" _matherr
0x1400038C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400019B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400032B8: "__cdecl _xc_z" __xc_z
0x1400038E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1400031A8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140004020: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x140003208: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003128: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1400031F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140003158: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400031D8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140003960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1400031B8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400032E0: "__cdecl _guard_fids_table" __guard_fids_table
0x140003290: msvcrt_NULL_THUNK_DATA
0x140003010: "__cdecl load_config_used" _load_config_used
0x140003260: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400031C8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400031B0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000405C: "__cdecl dowildcard" _dowildcard
0x1400031C0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001CF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140001A4C: RtlpImageNtHeader
0x1400031A0: "__cdecl _imp_SetPriorityClass" __imp_SetPriorityClass
0x140003168: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003268: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140001320: ParseCommandLineToStringArrayLocalAlloc
0x140004008: "__cdecl _security_cookie" __security_cookie
0x140003150: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140004000: "__cdecl _defaultmatherr" __defaultmatherr
0x140003910: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140003130: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1400045E8: "__cdecl _onexitbegin" __onexitbegin
0x140003138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001BF4: "__cdecl _security_init_cookie" __security_init_cookie
0x140003238: "__cdecl _imp__cexit" __imp__cexit
0x140001AA8: "__cdecl get_image_app_type" _get_image_app_type
0x1400038AC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140001D40: "__cdecl _report_gsfailure" __report_gsfailure
0x1400045F8: "__cdecl _native_startup_state" __native_startup_state
0x140003218: "__cdecl _imp__fmode" __imp__fmode
0x140003938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140001B60: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400031E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400038FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140003974: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]