Generated by JEB on 2019/08/01

PE: C:\Windows\System32\eventvwr.exe Base=0x140000000 SHA-256=BC87E4F462F00B826EC09AC16B625D0F70439C48FC04A52A41B4CD9E78401F70
PDB: eventvwr.pdb GUID={5DFDD80A-2147-4B28-85979C58DEC1EEFD} Age=1

169 located named symbols:
0x1400032B8: "__cdecl _imp_DialogBoxParamW" __imp_DialogBoxParamW
0x140002BF8: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002A20: "__cdecl FindPESection" _FindPESection
0x1400012C4: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140003368: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140001220: "protected: virtual __int64 __cdecl CDlg::_OnStaticCtlColor(struct HDC__ * __ptr64,struct HWND__ * __ptr64) __ptr64" ?_OnStaticCtlColor@CDlg@@MEAA_JPEAUHDC__@@PEAUHWND__@@@Z
0x140003250: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400032C0: "__cdecl _imp_GetWindowLongPtrW" __imp_GetWindowLongPtrW
0x140002E70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003298: SHELL32_NULL_THUNK_DATA
0x140003208: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1400014D8: "void __cdecl PopupMessageEx2(unsigned long,unsigned short const * __ptr64,unsigned long)" ?PopupMessageEx2@@YAXKPEBGK@Z
0x140003290: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x140005048: "__cdecl commode" _commode
0x140001668: "long __cdecl LoadStr(unsigned long,unsigned short * __ptr64,unsigned long,unsigned short const * __ptr64)" ?LoadStr@@YAJKPEAGKPEBG@Z
0x1400031E8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002900: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400033C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140005054: "__cdecl fmode" _fmode
0x1400031D0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140001BCC: main
0x140001230: "protected: virtual bool __cdecl CDlg::_OnMinMaxInfo(struct tagMINMAXINFO * __ptr64) __ptr64" ?_OnMinMaxInfo@CDlg@@MEAA_NPEAUtagMINMAXINFO@@@Z
0x140001210: "protected: virtual void __cdecl CDlg::_OnSysColorChange(void) __ptr64" ?_OnSysColorChange@CDlg@@MEAAXXZ
0x14000295E: "__cdecl XcptFilter" _XcptFilter
0x1400033D0: "__cdecl _xc_a" __xc_a
0x140003218: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x1400032C8: "__cdecl _imp_SetWindowLongPtrW" __imp_SetWindowLongPtrW
0x1400028EC: "__cdecl callnewh" _callnewh
0x1400033B0: "__cdecl _imp_memset" __imp_memset
0x140002BDF: "__cdecl initterm" _initterm
0x1400055F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400032F0: "__cdecl _imp_SendDlgItemMessageW" __imp_SendDlgItemMessageW
0x140003270: "__cdecl _imp_Sleep" __imp_Sleep
0x140003400: "__cdecl _xi_z" __xi_z
0x140003220: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1400031F8: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x140002BEB: "__cdecl _C_specific_handler" __C_specific_handler
0x140003200: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x1400028E0: malloc
0x140003308: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x140002DEC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140001230: "protected: virtual bool __cdecl CDlg::_OnCommand(unsigned __int64,__int64) __ptr64" ?_OnCommand@CDlg@@MEAA_N_K_J@Z
0x140002A13: "__cdecl amsg_exit" _amsg_exit
0x1400033A8: "__cdecl _imp__callnewh" __imp__callnewh
0x1400032B0: "__cdecl _imp_WaitForInputIdle" __imp_WaitForInputIdle
0x140003358: "__cdecl _imp_exit" __imp_exit
0x140001B70: "public: virtual void * __ptr64 __cdecl CMessageDlg::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMessageDlg@@UEAAPEAXI@Z
0x140003494: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x140001904: "public: __int64 __cdecl CMessageDlg::DoModalDialog(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,char * __ptr64) __ptr64" ?DoModalDialog@CMessageDlg@@QEAA_JPEAUHINSTANCE__@@PEBG1KKKPEAD@Z
0x140003280: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140003498: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x1400055E8: "__cdecl _native_startup_lock" __native_startup_lock
0x140001090: "public: static __int64 __cdecl CDlg::_DlgProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?_DlgProc@CDlg@@SA_JPEAUHWND__@@I_K_J@Z
0x1400032D0: "__cdecl _imp_EndDialog" __imp_EndDialog
0x140002940: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140003330: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140003238: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140003288: KERNEL32_NULL_THUNK_DATA
0x1400031E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002540: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140002DC8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140001230: "protected: virtual bool __cdecl CDlg::_OnSize(unsigned __int64,__int64) __ptr64" ?_OnSize@CDlg@@MEAA_N_K_J@Z
0x140003398: "__cdecl _imp__commode" __imp__commode
0x140003A14: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x140003340: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140003258: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400032E8: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x140002AD0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140002880: mainCRTStartup
0x14000123C: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1400032D8: "__cdecl _imp_GetDlgItem" __imp_GetDlgItem
0x140001B70: "public: virtual void * __ptr64 __cdecl CMessageDlg::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMessageDlg@@UEAAPEAXI@Z
0x14000141C: "void __cdecl PopupMessage(unsigned long,...)" ?PopupMessage@@YAXKZZ
0x140005050: "__cdecl newmode" _newmode
0x140003338: "__cdecl _imp__initterm" __imp__initterm
0x140003360: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140003068: "const CMessageDlg::`vftable'" ??_7CMessageDlg@@6B@
0x140001220: "__cdecl setargv" _setargv
0x140001210: "protected: virtual void __cdecl CDlg::_OnDestroy(void) __ptr64" ?_OnDestroy@CDlg@@MEAAXXZ
0x1400032A8: SHLWAPI_NULL_THUNK_DATA
0x1400055D8: "__cdecl _onexitend" __onexitend
0x140003350: "__cdecl _imp__exit" __imp__exit
0x1400033C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140003278: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140003320: USER32_NULL_THUNK_DATA
0x1400033E8: "__cdecl _xi_a" __xi_a
0x140003240: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001220: "__cdecl matherr" _matherr
0x140003458: "Error message not found." ??_C@_1DC@NIAMEBEH@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?4?$AA?$AA@
0x14000348C: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x140003450: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140002534: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1400028B0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400033E0: "__cdecl _xc_z" __xc_z
0x140003328: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003248: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140002E90: "__cdecl _chkstk" __chkstk
0x1400016FC: "void __cdecl PopupErrorMessage(long,unsigned long)" ?PopupErrorMessage@@YAXJK@Z
0x1400034A0: "" "" ??_C@_17CMBJCHDO@?$AA?$CC?$AA?5?$AA?$CC?$AA?$AA@
0x140003408: "__cdecl _guard_fids_table" __guard_fids_table
0x1400033B8: msvcrt_NULL_THUNK_DATA
0x1400030C0: "__cdecl load_config_used" _load_config_used
0x140003560: "__cdecl _xmm@0000000000007f010000000000000000" __xmm@0000000000007f010000000000000000
0x140001210: "protected: virtual void __cdecl CDlg::_OnHelp(unsigned int,unsigned __int64,__int64) __ptr64" ?_OnHelp@CDlg@@MEAAXI_K_J@Z
0x1400039D8: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140003310: "__cdecl _imp_SetWindowTextW" __imp_SetWindowTextW
0x140003370: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400032E0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x14000139C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140003230: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140003260: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000504C: "__cdecl dowildcard" _dowildcard
0x140003318: "__cdecl _imp_EnableWindow" __imp_EnableWindow
0x1400028D4: free
0x140003228: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000103C: "protected: __int64 __cdecl CDlg::_DoModalDlg(struct HWND__ * __ptr64,int) __ptr64" ?_DoModalDlg@CDlg@@IEAA_JPEAUHWND__@@H@Z
0x140001210: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400031F0: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x14000296C: RtlpImageNtHeader
0x140001220: "protected: virtual long __cdecl CDlg::_OnInit(bool * __ptr64) __ptr64" ?_OnInit@CDlg@@MEAAJPEA_N@Z
0x1400031C8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400032F8: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x140001B40: "private: virtual bool __cdecl CMessageDlg::_OnCommand(unsigned __int64,__int64) __ptr64" ?_OnCommand@CMessageDlg@@EEAA_N_K_J@Z
0x140003378: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140003300: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x140005008: "__cdecl _security_cookie" __security_cookie
0x140002E90: "__cdecl alloca_probe" _alloca_probe
0x140003210: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400031D8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400055E0: "__cdecl _onexitbegin" __onexitbegin
0x140003390: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140003268: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001200: "protected: virtual bool __cdecl CDlg::_OnNotify(unsigned __int64,__int64) __ptr64" ?_OnNotify@CDlg@@MEAA_N_K_J@Z
0x1400039C4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001A20: "private: virtual long __cdecl CMessageDlg::_OnInit(bool * __ptr64) __ptr64" ?_OnInit@CMessageDlg@@EEAAJPEA_N@Z
0x140002B04: "__cdecl _security_init_cookie" __security_init_cookie
0x140001200: "protected: virtual bool __cdecl CDlg::_OnDrawItem(unsigned __int64,__int64) __ptr64" ?_OnDrawItem@CDlg@@MEAA_N_K_J@Z
0x140001010: "public: virtual void * __ptr64 __cdecl CDlg::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDlg@@UEAAPEAXI@Z
0x140003348: "__cdecl _imp__cexit" __imp__cexit
0x140003010: "const CDlg::`vftable'" ??_7CDlg@@6B@
0x1400032A0: "__cdecl _imp_StrCmpNIW" __imp_StrCmpNIW
0x1400029C8: "__cdecl get_image_app_type" _get_image_app_type
0x1400039EC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140003380: "__cdecl _imp_malloc" __imp_malloc
0x140002C40: "__cdecl _report_gsfailure" __report_gsfailure
0x1400055F0: "__cdecl _native_startup_state" __native_startup_state
0x140003A00: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x1400033A0: "__cdecl _imp__fmode" __imp__fmode
0x140003570: "__cdecl _xmm@0000000000007f040000000000000000" __xmm@0000000000007f040000000000000000
0x140003388: "__cdecl _imp_free" __imp_free
0x140002A70: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400055D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuzwnrmUhmzkrmUvevmgoltUvcvhgfyUlyquivUznwGEUsvzwvihOlyq@eventvwr" __@@_PchSym_@00@KxulyqvxgPillgKxuzwnrmUhmzkrmUvevmgoltUvcvhgfyUlyquivUznwGEUsvzwvihOlyq@eventvwr
0x140002E56: memset
0x140003A28: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140001010: "public: virtual void * __ptr64 __cdecl CDlg::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDlg@@UEAAPEAXI@Z

[JEB Decompiler by PNF Software]