Generated by JEB on 2019/08/01

PE: C:\Windows\System32\netsh.exe Base=0x101800000 SHA-256=D70D165B6706C61C56F2CA91307F4BBDB9846ACAE1DA3CFD84BF978FFB21AF23
PDB: netsh.pdb GUID={E639436B-27BB-33C9-0E0E5F5BE8085596} Age=1

547 located named symbols:
0x10180B790: "help" ??_C@_19FCEHBCGP@?$AAh?$AAe?$AAl?$AAp?$AA?$AA@
0x10180BDD0: "NetSecurity" ??_C@_1BI@FKNMOEEI@?$AAN?$AAe?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x10180A134: "__cdecl _raise_securityfailure" __raise_securityfailure
0x10180B8F8: "STRING" ??_C@_1O@PCPBINCG@?$AAS?$AAT?$AAR?$AAI?$AAN?$AAG?$AA?$AA@
0x10180B228: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x10180BB10: "r" ??_C@_13BPINEIPE@?$AAr?$AA?$AA@
0x101817C38: g_dwNumDlls
0x10180F644: g_SQM
0x10180A520: "__cdecl FindPESection" _FindPESection
0x101802628: StringCchCatW
0x10180B150: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x101809DA0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x10180D1C4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x10180D14C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x101817C3C: g_dwNumHelpers
0x101817C68: pMprMsgGetErrorString
0x10180B940: "netsh" ??_C@_1M@CJLJHGFL@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?$AA@
0x10180C224: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x10180A510: "__cdecl wsetargv" _wsetargv
0x10181E1D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUiizhUmvghsUhsvooUlyquivUznwGEUkivxlnkOlyq@netsh" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUiizhUmvghsUhsvooUlyquivUznwGEUkivxlnkOlyq@netsh
0x101802B30: RegisterHelper
0x10180F630: "__cdecl _security_cookie_complement" __security_cookie_complement
0x10180B4E8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x1018180C0: g_CIMServicePackMajorVersion
0x101806AFC: SetMachine
0x10180B1A8: "__cdecl _imp_GetConsoleScreenBufferInfo" __imp_GetConsoleScreenBufferInfo
0x10180B2D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x101804220: GenericMonitor
0x10180BA08: "alias" ??_C@_1M@IJIAJFBE@?$AAa?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
0x10180BCF8: "%1!-14s! - " ??_C@_1BI@FBMKGPLO@?$AA?$CF?$AA1?$AA?$CB?$AA?9?$AA1?$AA4?$AAs?$AA?$CB?$AA?5?$AA?9?$AA?5?$AA?$AA@
0x10180A9B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x10180B9D0: "bye" ??_C@_17CIMGNMGI@?$AAb?$AAy?$AAe?$AA?$AA@
0x101802AF8: GetHelperEntry
0x10180C048: "MultiTenancyEnabled" ??_C@_1CI@NACIOLLF@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAT?$AAe?$AAn?$AAa?$AAn?$AAc?$AAy?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x10180B430: "__cdecl _imp__wcslwr" __imp__wcslwr
0x10180B220: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x101820018: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x10180C198: "BuildNumber" ??_C@_1BI@NLJPOIDO@?$AAB?$AAu?$AAi?$AAl?$AAd?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AA?$AA@
0x10180BA60: "machine" ??_C@_1BA@FOMDDNNM@?$AAm?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x10180BC64: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x101817C48: g_bInteractive
0x10180D138: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x10180BD58: "NRPT" ??_C@_19MDOEMECD@?$AAN?$AAR?$AAP?$AAT?$AA?$AA@
0x1018016E0: HandleSetMachine
0x10180BFA0: "dhcp" ??_C@_19CCCIFFOF@?$AAd?$AAh?$AAc?$AAp?$AA?$AA@
0x101808530: DisplayMessageToConsole
0x101817C00: "__cdecl commode" _commode
0x10180C258: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x10180BC58: ""%s"" ??_C@_19GBMGDAIM@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?$AA@
0x10180B330: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x10180D034: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x10180BC48: "-p" ??_C@_15JODAOICI@?$AA?9?$AAp?$AA?$AA@
0x10180B278: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1018019C0: HandleSetFile
0x101804938: GetParentContext
0x101801680: HandleShellUncommit
0x10180CC3C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_MPR_dll" __DELAY_IMPORT_DESCRIPTOR_MPR_dll
0x101802340: HandleShellUplevel
0x10180B4D0: "__cdecl _imp_wcschr" __imp_wcschr
0x10180B3C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x10180B258: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x10180BAE8: "[%1!s!] " ??_C@_1BC@BBLGBDNO@?$AA?$FL?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?$FN?$AA?5?$AA?$AA@
0x10180A3F0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x10180B568: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x10180C0E4: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x10180BDA8: "netsh advfirewall" ??_C@_1CE@OGDJJCKP@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAa?$AAd?$AAv?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?$AA@
0x101817C0C: "__cdecl fmode" _fmode
0x101801D80: HandleSetMode
0x10180B2B8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x10180B510: "__cdecl _imp__wcsdup" __imp__wcsdup
0x10180B450: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x10180B720: "__cdecl _sz_ext_ms_win_security_credui_l1_1_1_dll" __sz_ext_ms_win_security_credui_l1_1_1_dll
0x10180B210: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x10180D1B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x101807B50: OEMfgets
0x10180C1B0: "ServicePackMajorVersion" ??_C@_1DA@NONEMMMB@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAc?$AAk?$AAM?$AAa?$AAj?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1018058D0: ConvertArgListToArray
0x10180A44E: "__cdecl XcptFilter" _XcptFilter
0x10180B570: "__cdecl _xc_a" __xc_a
0x101808740: InitializeConsole
0x101802728: DumpContext
0x10180BB30: "GetModuleHandle failed" ??_C@_1CO@NDLCNCCP@?$AAG?$AAe?$AAt?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x10180B3F0: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x101801550: StringCchCopyW
0x10180B1C0: "__cdecl _imp_CreateConsoleScreenBuffer" __imp_CreateConsoleScreenBuffer
0x10180B268: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x101804770: NetshStartHelper
0x10180BA70: "file" ??_C@_19HMOGJADO@?$AAf?$AAi?$AAl?$AAe?$AA?$AA@
0x1018057DC: ConvertArgListToBuffer
0x10180B908: "SOFTWARE\Microsoft\NetSh" ??_C@_1DC@LOKDFDAG@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAN?$AAe?$AAt?$AAS?$AAh?$AA?$AA@
0x1018041B4: VerifyOsVersion
0x10180B6CC: "__cdecl _guard_iat_table" __guard_iat_table
0x10180BB68: "%s>" ??_C@_17LGAJLMFJ@?$AA?$CF?$AAs?$AA?$DO?$AA?$AA@
0x10180B2D0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x101817C94: g_CIMOSProductSuite
0x10180A986: memcpy
0x10180B298: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x10180C1E0: "ServicePackMinorVersion" ??_C@_1DA@FAHIGDHP@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAc?$AAk?$AAM?$AAi?$AAn?$AAo?$AAr?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x101806D34: MainFunction
0x101817C88: ulNumHelpCommands
0x10180B538: "__cdecl _imp_memset" __imp_memset
0x10180BA30: "pushd" ??_C@_1M@MCDMINKI@?$AAp?$AAu?$AAs?$AAh?$AAd?$AA?$AA@
0x10180B3A8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x10180A6DF: "__cdecl initterm" _initterm
0x10180BD10: " %1!s!" ??_C@_1O@EEGHGOPC@?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?$AA@
0x10180D084: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x101818500: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x10180B3D0: "__cdecl _imp_Sleep" __imp_Sleep
0x10180B5A0: "__cdecl _xi_z" __xi_z
0x10180B528: "__cdecl _imp___iob_func" __imp___iob_func
0x10180B1F8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1018012F0: ATDeleteAlias
0x10180BF10: "DNS Client" ??_C@_1BG@PHHELEOJ@?$AAD?$AAN?$AAS?$AA?5?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x10180CCD0: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLN
0x10180BEF0: "netsh dnsclient" ??_C@_1CA@DHEGJBEH@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAd?$AAn?$AAs?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x10180A6EB: "__cdecl _C_specific_handler" __C_specific_handler
0x101805778: FreeArgArray
0x10180B81C: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x10180B7A0: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x10180B248: "__cdecl _imp_HeapFree" __imp_HeapFree
0x10180BF28: "namespace" ??_C@_1BE@MNHOIDFP@?$AAn?$AAa?$AAm?$AAe?$AAs?$AAp?$AAa?$AAc?$AAe?$AA?$AA@
0x10180B160: "__cdecl _imp_SetConsoleCtrlHandler" __imp_SetConsoleCtrlHandler
0x101820028: "__cdecl _imp_CredUIParseUserNameW" __imp_CredUIParseUserNameW
0x1018029E8: AddHelper
0x10180B460: "__cdecl _imp_wcspbrk" __imp_wcspbrk
0x10180C230: CLSID_WbemLocator
0x10180B238: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x10180B320: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x101809070: PreprocessCommand
0x10180A920: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x101819B00: RtmonPrompt
0x10180B788: "pwd" ??_C@_17JEOOOMCL@?$AAp?$AAw?$AAd?$AA?$AA@
0x10180B778: "user" ??_C@_19LHMFLJNI@?$AAu?$AAs?$AAe?$AAr?$AA?$AA@
0x101802ED0: AddDllEntry
0x101802470: HandleShellPushd
0x1018079D0: MatchToken
0x10180B388: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x10180B9D8: "exit" ??_C@_19JPKILLMB@?$AAe?$AAx?$AAi?$AAt?$AA?$AA@
0x10180BBE0: "mprmsg.dll" ??_C@_1BG@BFIPEMFH@?$AAm?$AAp?$AAr?$AAm?$AAs?$AAg?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x101801444: PrintAliasTable
0x10180BFF0: "ip" ??_C@_15KPJKAFC@?$AAi?$AAp?$AA?$AA@
0x101807E30: GetEnumString
0x10180D0FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x101809C80: "long __cdecl UpdateVersionInfoGlobalsFromLocalMachine(void)" ?UpdateVersionInfoGlobalsFromLocalMachine@@YAJXZ
0x10180B310: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x10180A503: "__cdecl amsg_exit" _amsg_exit
0x10180B970: "netsh ras diagnostics" ??_C@_1CM@FCFPCBLE@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAr?$AAa?$AAs?$AA?5?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x10180B118: "__cdecl _imp_VariantChangeType" __imp_VariantChangeType
0x10180C250: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x10180BEC0: "DhcpServer" ??_C@_1BG@ELNKLAEO@?$AAD?$AAh?$AAc?$AAp?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x101808908: AddHelpCommand
0x10180F210: g_UbiqCmds
0x101803F20: RegisterContext
0x10180BA50: "helper" ??_C@_1O@NPLFIPKP@?$AAh?$AAe?$AAl?$AAp?$AAe?$AAr?$AA?$AA@
0x10180C108: "WQL" ??_C@_17NDCOOGJO@?$AAW?$AAQ?$AAL?$AA?$AA@
0x10180D124: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l2-1-0
0x10180104C: ATInitTable
0x10180B9B0: "exec" ??_C@_19CFKEBEJM@?$AAe?$AAx?$AAe?$AAc?$AA?$AA@
0x10180B500: "__cdecl _imp_exit" __imp_exit
0x101802020: HandleShellCommit
0x10180B390: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x10180B380: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x10180B130: OLEAUT32_NULL_THUNK_DATA
0x10180BAAC: "/?" ??_C@_15BAIPABEI@?$AA?1?$AA?$DP?$AA?$AA@
0x10180BA80: "add" ??_C@_17KBLNKNKL@?$AAa?$AAd?$AAd?$AA?$AA@
0x10181DB18: g_DllTable
0x1018014A8: FreeAliasTable
0x10180B468: "__cdecl _imp_fputwc" __imp_fputwc
0x10180B818: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x10180B148: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x10180BF40: "branchcache" ??_C@_1BI@FECDIKNK@?$AAb?$AAr?$AAa?$AAn?$AAc?$AAh?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x101802E1C: StartNewHelpers
0x10180B350: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x101801008: ATHashAlias
0x10180B208: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x101803958: FreeHelpers
0x10180B518: "__cdecl _imp__wcsupr" __imp__wcsupr
0x10180CCB0: MPR_NULL_THUNK_DATA_DLN
0x101817C80: g_pwszRememberedConnection
0x10180C030: "diagnostics" ??_C@_1BI@BKLMKKOH@?$AAd?$AAi?$AAa?$AAg?$AAn?$AAo?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x101817C70: g_bVerbose
0x10180B2F0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x101817EB0: g_CIMOSBuildNumber
0x10180BAC0: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x1018184F0: "__cdecl _native_startup_lock" __native_startup_lock
0x101808970: helpcmp
0x101805278: ProcessHelperCommand
0x101807730: MatchTagsInCmdLine
0x101804FC0: ProcessHelperCommand2
0x10180A430: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x10180D0D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x10180B498: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x10180CCC0: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLN
0x10180B470: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x10180BC20: "-a" ??_C@_15HGJFNINC@?$AA?9?$AAa?$AA?$AA@
0x10180B368: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x10180B2A8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x101817C8C: g_MultiTenancyState
0x10180B79C: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x101804F20: ConvertArgArrayToBuffer
0x101820000: "__cdecl _imp_WNetAddConnection2W" __imp_WNetAddConnection2W
0x10180B550: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x10180B7A8: "mode" ??_C@_19KODKOACD@?$AAm?$AAo?$AAd?$AAe?$AA?$AA@
0x10180B198: "__cdecl _imp_FillConsoleOutputCharacterW" __imp_FillConsoleOutputCharacterW
0x10180B200: "__cdecl _imp_GetLastError" __imp_GetLastError
0x10180F330: g_ShellSetCmdTable
0x101809508: "long __cdecl UpdateVersionInfoGlobalsFromWMI(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?UpdateVersionInfoGlobalsFromWMI@@YAJPEBG00@Z
0x10180A8FC: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x10180B888: "InitHelperDll" ??_C@_0O@HJNDDNCM@InitHelperDll?$AA@
0x101817CA0: g_CIMOSVersion
0x1018015F0: HandleShellExit
0x10180B480: "__cdecl _imp__commode" __imp__commode
0x101808620: HandlerRoutine
0x10180B448: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x10180C168: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1018049E8: AppendFullContextName
0x10180D1EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x10180B2E0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x10180B3B0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x10180A870: "__cdecl _tailMerge_ext_ms_win_security_credui_l1_1_1_dll" __tailMerge_ext_ms_win_security_credui_l1_1_1_dll
0x10180CC1C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_registry_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_registry_l2_1_0_dll
0x10180BD40: "DnsClient" ??_C@_1BE@PAKNNJCI@?$AAD?$AAn?$AAs?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x10180BCC8: "NetshStopRefreshEvent" ??_C@_1CM@JIJKFJFB@?$AAN?$AAe?$AAt?$AAs?$AAh?$AAS?$AAt?$AAo?$AAp?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x10180B328: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x10180BC18: "-v" ??_C@_15LLFLLHPE@?$AA?9?$AAv?$AA?$AA@
0x10180C250: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x10180A5D0: "__cdecl ValidateImageBase" _ValidateImageBase
0x10180A748: "__cdecl _tailMerge_api_ms_win_core_registry_l2_1_0_dll" __tailMerge_api_ms_win_core_registry_l2_1_0_dll
0x10180BC38: "-r" ??_C@_15DEDJCAKD@?$AA?9?$AAr?$AA?$AA@
0x10180BC10: "-h" ??_C@_15LJNJHFI@?$AA?9?$AAh?$AA?$AA@
0x101804E4C: AppendString
0x101817C18: "__cdecl _hmod__MPR_dll" __hmod__MPR_dll
0x10180BE60: "netsh interface" ??_C@_1CA@EAHPGMJI@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x10180BC28: "-c" ??_C@_15NMJMBAFJ@?$AA?9?$AAc?$AA?$AA@
0x1018091FC: SetNetshSQMState
0x10180D05C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x101808318: DisplayMessageVA
0x10180BE98: "TCP/IP" ??_C@_1O@CNAGAFAK@?$AAT?$AAC?$AAP?$AA?1?$AAI?$AAP?$AA?$AA@
0x10180B250: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x10180B280: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x101802700: ContextCmp
0x10180CC7C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x10180B398: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x101817C08: "__cdecl newmode" _newmode
0x101801630: HandleShellLoad
0x10180A718: "__cdecl _acrt_iob_func" __acrt_iob_func
0x10180B458: "__cdecl _imp__initterm" __imp__initterm
0x10180B4F0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x10180B6E0: "__cdecl _sz_api_ms_win_core_registry_l2_1_0_dll" __sz_api_ms_win_core_registry_l2_1_0_dll
0x10180BB70: "netsh.exe" ??_C@_1BE@FEPGBAGI@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x101806A9C: DisconnectFromCurrentRouter
0x101804ACC: ParseCommand
0x10180B7F8: "offline" ??_C@_1BA@CNOGGFBF@?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?$AA@
0x101805CE0: ProcessCommand
0x10180D1D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x101809454: "long __cdecl SetSecurity(struct IUnknown * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?SetSecurity@@YAJPEAUIUnknown@@PEAG11@Z
0x101808988: DisplayContextHelp
0x10180B3F8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x10180B9C0: "quit" ??_C@_19CKOIIPIC@?$AAq?$AAu?$AAi?$AAt?$AA?$AA@
0x10180BA18: "unalias" ??_C@_1BA@PMJHKMII@?$AAu?$AAn?$AAa?$AAl?$AAi?$AAa?$AAs?$AA?$AA@
0x10180D070: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x10180D0AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x10180B1A0: "__cdecl _imp_SetConsoleCursorPosition" __imp_SetConsoleCursorPosition
0x101804A4C: StringCchPrintfW
0x10181DB04: g_dwTotalArgCount
0x1018184E0: "__cdecl _onexitend" __onexitend
0x10180B508: "__cdecl _imp__exit" __imp__exit
0x10180B560: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x101813650: g_bQuiet
0x10180F3A8: g_ShellAddCmdTable
0x1018069F0: LoadScriptFile
0x1018075B0: MatchCmdLine
0x10180B2E8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x101808670: cls
0x10180BA40: "popd" ??_C@_19FMJBMNJD@?$AAp?$AAo?$AAp?$AAd?$AA?$AA@
0x10180B8B8: "ipxmontr.dll" ??_C@_1BK@PNEPGDOK@?$AAi?$AAp?$AAx?$AAm?$AAo?$AAn?$AAt?$AAr?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x10180B180: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x10180282C: CommitContext
0x1018022C0: HandleUbiqHelp
0x101803D00: HandleAddHelper
0x1018182D0: g_CIMServicePackMinorVersion
0x10180BE40: "netsh firewall" ??_C@_1BO@IOMDNLHM@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?$AA@
0x10180B400: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x10180B9E8: "abort" ??_C@_1M@EJLDOEKM@?$AAa?$AAb?$AAo?$AAr?$AAt?$AA?$AA@
0x10180B588: "__cdecl _xi_a" __xi_a
0x10180B3E0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x10180B820: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x10180B1E0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x10180A510: "__cdecl matherr" _matherr
0x1018013C8: ATLookupAliasTable
0x1018074E4: wmain
0x101818520: help
0x10180B418: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x10180BBF8: "MprmsgGetErrorString" ??_C@_0BF@FLJGGLNI@MprmsgGetErrorString?$AA@
0x10180C018: "ras" ??_C@_17MOIKGFPG@?$AAr?$AAa?$AAs?$AA?$AA@
0x10180BA88: "delete" ??_C@_1O@MEFPJPNF@?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x10180C158: "OSType" ??_C@_1O@HGLGOLLK@?$AAO?$AAS?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x10181DB10: g_HelperTable
0x10180A7C7: "__cdecl _imp_load_WNetCancelConnection2W" __imp_load_WNetCancelConnection2W
0x10180BC70: "Error %d in FormatMessageW() " ??_C@_1DM@CPGPENIJ@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AA?$CF?$AAd?$AA?5?$AAi?$AAn?$AA?5?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAW?$AA?$CI?$AA?$CJ?$AA?6?$AA?$AA@
0x101805878: AppendArgument
0x10180BC50: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x10180D188: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x10180A2E8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x10180BA28: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x10181DB30: leContextStackHead
0x101817C20: "__cdecl _hmod__ext_ms_win_security_credui_l1_1_1_dll" __hmod__ext_ms_win_security_credui_l1_1_1_dll
0x101802110: HandleShellAlias
0x10180D00C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x10180CD50: MPR_NULL_THUNK_DATA_DLB
0x101817C58: g_bDone
0x10180A110: "__cdecl _security_check_cookie" __security_check_cookie
0x10180B178: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x10180B580: "__cdecl _xc_z" __xc_z
0x10180D0E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x10180B2F8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x10180B290: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x101807E60: MakeString
0x10180BCB0: "GetResourceString" ??_C@_0BC@JDKJENEF@GetResourceString?$AA@
0x10180BFF8: "ipv6" ??_C@_19JFOMGAAC@?$AAi?$AAp?$AAv?$AA6?$AA?$AA@
0x10180C178: "OSProductSuite" ??_C@_1BO@DHFCONPJ@?$AAO?$AAS?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAS?$AAu?$AAi?$AAt?$AAe?$AA?$AA@
0x101802C80: ConvertStringToGuid
0x10180B4A8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x10180B490: "__cdecl _imp_fflush" __imp_fflush
0x10180B140: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x10180B3E8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x101803094: InstallDll
0x1018038E0: GetContextEntry
0x10180B260: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1018022A0: HandleUbiqDump
0x10180CD40: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLB
0x10180B2C8: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x10180A7D3: "__cdecl _tailMerge_mpr_dll" __tailMerge_mpr_dll
0x10180C240: IID_IWbemLocator
0x10180B1D0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x101803714: LoadDllInfoFromRegistry
0x10180B8D8: "ipxpromn.dll" ??_C@_1BK@BJEOKPFB@?$AAi?$AAp?$AAx?$AAp?$AAr?$AAo?$AAm?$AAn?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x101817C10: "__cdecl _hmod__api_ms_win_core_registry_l2_1_0_dll" __hmod__api_ms_win_core_registry_l2_1_0_dll
0x10180B240: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x10180A9D0: "__cdecl _chkstk" __chkstk
0x101803D90: HandleDelHelper
0x10180BE80: "NetTCPIP" ??_C@_1BC@HHBDEEIE@?$AAN?$AAe?$AAt?$AAT?$AAC?$AAP?$AAI?$AAP?$AA?$AA@
0x10180F4E0: g_NetshDeprecnWarning
0x10180BD20: "netsh namespace" ??_C@_1CA@NNANODOD@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAn?$AAa?$AAm?$AAe?$AAs?$AAp?$AAa?$AAc?$AAe?$AA?$AA@
0x10180BD90: "BranchCache" ??_C@_1BI@LCMEKPFI@?$AAB?$AAr?$AAa?$AAn?$AAc?$AAh?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x101803DE8: GenericAddContext
0x10180F470: g_NetshSQMDetails
0x101802590: HandleShellPopd
0x10180B370: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x101820010: MPR_NULL_THUNK_DATA_DLA
0x101817C60: g_pwszRouterName
0x1018083E0: PrintMessageFromModule
0x10180B808: "%1!s! " ??_C@_1O@MJACCCIM@?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?6?$AA?$AA@
0x10180B378: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x10180D174: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x10180BC54: " " ??_C@_02PCIJFNDE@?$AN?6?$AA@
0x10180B308: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x10180B5A8: "__cdecl _guard_fids_table" __guard_fids_table
0x10180B4B0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x10180B410: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x10180F290: g_ShellShowCmdTable
0x10180B540: msvcrt_NULL_THUNK_DATA
0x10180B010: "__cdecl load_config_used" _load_config_used
0x10180BF58: "advfirewall" ??_C@_1BI@OAOPJCPM@?$AAa?$AAd?$AAv?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?$AA@
0x10180BA98: "set" ??_C@_17EGGBPMH@?$AAs?$AAe?$AAt?$AA?$AA@
0x101806714: AppendLineToCommand
0x101805AF8: ConvertBufferToArgList
0x101820020: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA_DLA
0x10180B170: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x101804D28: UpdateNewContext
0x10180B7D8: "close" ??_C@_1M@JILIKJNP@?$AAc?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x1018048A8: GetRootContext
0x10180B1E8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x10180B1D8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x10180B9A0: "dump" ??_C@_19PPJMBAGP@?$AAd?$AAu?$AAm?$AAp?$AA?$AA@
0x10180D0C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x10180B3A0: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x10180F308: g_ShellDelCmdTable
0x10180B138: "__cdecl _imp_CoSetProxyBlanket" __imp_CoSetProxyBlanket
0x10180BC30: "-f" ??_C@_15OLECOAGL@?$AA?9?$AAf?$AA?$AA@
0x10180B530: "__cdecl _imp_qsort" __imp_qsort
0x101817C90: g_CIMOSType
0x10180B4C8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x101802CB4: LoadDll
0x10180BFB0: "dnsclient" ??_C@_1BE@CHDFPBPL@?$AAd?$AAn?$AAs?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x101817C78: g_hMprMsgModule
0x101802080: HandleShellFlush
0x10180C0E8: "\\%s\root\cimv2" ??_C@_1CA@ECJNGEII@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?2?$AAr?$AAo?$AAo?$AAt?$AA?2?$AAc?$AAi?$AAm?$AAv?$AA2?$AA?$AA@
0x10180B2A0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x101804A4C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x101802BD0: ConvertGuidToString
0x101802300: HandleShowMode
0x10181DB40: AliasTable
0x10180B360: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x10180B300: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x101817C40: g_CurrentHelper
0x101817C04: "__cdecl dowildcard" _dowildcard
0x1018083A0: PrintMessage
0x10180BB60: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x10180A864: "__cdecl _imp_load_CredUIParseUserNameW" __imp_load_CredUIParseUserNameW
0x10180B420: "__cdecl _imp_fclose" __imp_fclose
0x101807F20: FreeString
0x10181DB00: g_dwContextArgCount
0x10180B358: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x10180B340: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x10180C258: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x101805548: ExecuteHandler
0x10180C210: "%d.%d.%d" ??_C@_1BC@JNJAIJGK@?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAd?$AA?$AA@
0x10180F5C0: g_MultiTenancyDepreciatedContext
0x101809258: CheckMultiTenancyDepreciatedContext
0x10180A700: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x10180B2C0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x10180F000: g_ShellCmds
0x1018074F0: IsLocalCommand
0x10180B4E0: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x10180A45C: RtlpImageNtHeader
0x10180B4A0: "__cdecl _imp_fgets" __imp_fgets
0x10180B548: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x10180B898: "InitHelperDll" ??_C@_1BM@DNPFPPAG@?$AAI?$AAn?$AAi?$AAt?$AAH?$AAe?$AAl?$AAp?$AAe?$AAr?$AAD?$AAl?$AAl?$AA?$AA@
0x10180BAC8: "> %1!s! " ??_C@_1BC@CFFBJNK@?$AA?$DO?$AA?5?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?6?$AA?$AA@
0x10180BFE0: "routing" ??_C@_1BA@IJCLNAAJ@?$AAr?$AAo?$AAu?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x1018067E0: MainCommandLoop
0x101817C30: g_CurrentContext
0x101807F30: MakeQuotedString
0x10180D020: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x10180B768: "name" ??_C@_19HHIIBINK@?$AAn?$AAa?$AAm?$AAe?$AA?$AA@
0x10180B748: "%1!s! %2!s! " ??_C@_1BK@BCLMLDOP@?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?7?$AA?$CF?$AA2?$AA?$CB?$AAs?$AA?$CB?$AA?6?$AA?$AA@
0x10180B288: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x101817C28: bContextStackInit
0x10180B7B8: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x101803A44: ShowHelpers
0x101820030: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLA
0x10180B4B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x10180B2B0: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x10180B4C0: "__cdecl _imp__wfopen" __imp__wfopen
0x101803268: UninstallDll
0x10180B558: ntdll_NULL_THUNK_DATA
0x10180B4F8: "__cdecl _imp_memcpy" __imp_memcpy
0x10180CC5C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_1_dll
0x10181DB20: g_dwDllIndex
0x10180A8EF: "__cdecl _iob_func" __iob_func
0x10180BABC: "=" ??_C@_13NMPKAAJP@?$AA?$DN?$AA?$AA@
0x10180B1B8: "__cdecl _imp_SetConsoleScreenBufferSize" __imp_SetConsoleScreenBufferSize
0x10180D110: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x101808870: RefreshConsole
0x10180BC40: "-u" ??_C@_15KJOOBIBK@?$AA?9?$AAu?$AA?$AA@
0x10180F628: "__cdecl _security_cookie" __security_cookie
0x10180BAE0: "..." ??_C@_17LGKOMLJ@?$AA?4?$AA?4?$AA?4?$AA?$AA@
0x10180B9F8: "commit" ??_C@_1O@CAGPIMEA@?$AAc?$AAo?$AAm?$AAm?$AAi?$AAt?$AA?$AA@
0x10180A9D0: "__cdecl alloca_probe" _alloca_probe
0x10180F3D0: g_ShellCmdGroups
0x10180B408: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x10180C110: "select * from Win32_OperatingSys" ??_C@_1EI@IFCFGKIF@?$AAs?$AAe?$AAl?$AAe?$AAc?$AAt?$AA?5?$AA?$CK?$AA?5?$AAf?$AAr?$AAo?$AAm?$AA?5?$AAW?$AAi?$AAn?$AA3?$AA2?$AA_?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAn?$AAg?$AAS?$AAy?$AAs@
0x10180B3B8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x1018039D0: FreeDlls
0x10180B230: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1018084A0: DisplayMessageM
0x1018184D8: g_CIMSucceeded
0x10180B270: "__cdecl _imp_LocalFree" __imp_LocalFree
0x10180F620: "__cdecl _defaultmatherr" __defaultmatherr
0x10180D048: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x10180B158: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x10180BAB4: "-?" ??_C@_15FNEHKAED@?$AA?9?$AA?$DP?$AA?$AA@
0x101820008: "__cdecl _imp_WNetCancelConnection2W" __imp_WNetCancelConnection2W
0x10180C070: "System\CurrentControlSet\Service" ??_C@_1HE@KKIHMMDN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x10180B128: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x101804810: InitHelperDll
0x10180B338: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1018184E8: "__cdecl _onexitbegin" __onexitbegin
0x101817C50: g_hLogFile
0x1018015E0: HandleShowAlias
0x10180BEA8: "netsh dhcp" ??_C@_1BG@HHLNGPLH@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAd?$AAh?$AAc?$AAp?$AA?$AA@
0x10180BB00: "%1!s!>" ??_C@_1O@LGELENHK@?$AA?$CF?$AA1?$AA?$CB?$AAs?$AA?$CB?$AA?$DO?$AA?$AA@
0x10180B520: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x10180F640: g_bCommit
0x10180B1F0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x10180B1C8: api-ms-win-core-console-l2-1-0_NULL_THUNK_DATA
0x10180B168: "__cdecl _imp_ReadConsoleW" __imp_ReadConsoleW
0x101807D00: OEMfprintf
0x10180B318: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x10180BD68: "netsh branchcache" ??_C@_1CE@FCPFIKIJ@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAb?$AAr?$AAa?$AAn?$AAc?$AAh?$AAc?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x10180B188: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x10180BF70: "firewall" ??_C@_1BC@CIILBCJA@?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?$AA@
0x10180BF88: "interface" ??_C@_1BE@FAAMAMCE@?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x10180A604: "__cdecl _security_init_cookie" __security_init_cookie
0x10181DB08: g_hModule
0x10180B440: "__cdecl _imp__cexit" __imp__cexit
0x1018020A0: HandleShellUnalias
0x10180BAA0: "show" ??_C@_19NEPDHLG@?$AAs?$AAh?$AAo?$AAw?$AA?$AA@
0x10180299C: FindHelper
0x10180B348: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x10180A4B8: "__cdecl get_image_app_type" _get_image_app_type
0x101803B50: HandleShowHelper
0x10180CFF8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x101808000: PrintError
0x101813660: g_pwszNewContext
0x10180B438: "__cdecl _imp_wprintf" __imp_wprintf
0x10180BB18: "\\%s\ipc$" ??_C@_1BE@JMHONLBH@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?2?$AAi?$AAp?$AAc?$AA$?$AA?$AA@
0x10180A0E0: wmainCRTStartup
0x101807A10: GetPasswdStr
0x1018076A0: MatchEnumTag
0x10180B218: "__cdecl _imp_WriteFile" __imp_WriteFile
0x10180B1B0: "__cdecl _imp_FillConsoleOutputAttribute" __imp_FillConsoleOutputAttribute
0x10180A170: "__cdecl _report_gsfailure" __report_gsfailure
0x1018010F8: ATAddAlias
0x1018184F8: "__cdecl _native_startup_state" __native_startup_state
0x101807FD0: FreeQuotedString
0x10180B7C8: "append" ??_C@_1O@PDCEEMKK@?$AAa?$AAp?$AAp?$AAe?$AAn?$AAd?$AA?$AA@
0x10180B190: "__cdecl _imp_SetConsoleActiveScreenBuffer" __imp_SetConsoleActiveScreenBuffer
0x10180BB90: "api-ms-win-appmodel-runtime-l1-1" ??_C@_1EO@GFLIKGML@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAp?$AAp?$AAm?$AAo?$AAd?$AAe?$AAl?$AA?9?$AAr?$AAu?$AAn?$AAt?$AAi?$AAm?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x10180B488: "__cdecl _imp_wcstok" __imp_wcstok
0x101801660: HandleShellSave
0x10180C020: "tracing" ??_C@_1BA@MBJOLJMI@?$AAt?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AA?$AA@
0x10180BED8: "DHCP Server" ??_C@_1BI@JDLOCADJ@?$AAD?$AAH?$AAC?$AAP?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x10180B478: "__cdecl _imp__fmode" __imp__fmode
0x10180BDF0: "Windows Firewall with Advanced S" ??_C@_1FA@JHBLPHEM@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAF?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?5?$AAw?$AAi?$AAt?$AAh?$AA?5?$AAA?$AAd?$AAv?$AAa?$AAn?$AAc?$AAe?$AAd?$AA?5?$AAS@
0x10180919C: DoesContextNeedToBeSQMed
0x101802918: CallCommit
0x10180CD68: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLB
0x10180B120: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x10180D19C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x10180F650: g_pwszContext
0x10180B4D8: "__cdecl _imp_free" __imp_free
0x10180A570: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x10180B3D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x10180C008: "aaaa" ??_C@_19HOCDBEHL@?$AAa?$AAa?$AAa?$AAa?$AA?$AA@
0x10180B7E8: "online" ??_C@_1O@PBHDEIE@?$AAo?$AAn?$AAl?$AAi?$AAn?$AAe?$AA?$AA@
0x10180D098: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x10180B428: "__cdecl _imp_iswctype" __imp_iswctype
0x10180B3C8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x10180D160: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x10180A852: "__cdecl _imp_load_WNetAddConnection2W" __imp_load_WNetAddConnection2W
0x10180A73C: "__cdecl _imp_load_RegConnectRegistryW" __imp_load_RegConnectRegistryW
0x10180A992: memset
0x10180D200: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x10180B710: "__cdecl _sz_MPR_dll" __sz_MPR_dll

[JEB Decompiler by PNF Software]