Generated by JEB on 2019/08/01

PE: C:\Windows\System32\mshta.exe Base=0x140000000 SHA-256=E616C5CE71886652C13E2E1FA45A653B44D492B054F16B15A38418B8507F57C7
PDB: mshta.pdb GUID={6434AB15-AAA0-4538-E4EC864ECF601268} Age=1

123 located named symbols:
0x140001B0C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140001920: "__cdecl FindPESection" _FindPESection
0x140002278: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140003010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140002188: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001008: WinMain
0x140001CE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003048: "__cdecl commode" _commode
0x1400017F0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400022B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140003054: "__cdecl fmode" _fmode
0x14000184E: "__cdecl XcptFilter" _XcptFilter
0x1400022B8: "__cdecl _xc_a" __xc_a
0x1400021E0: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400017D0: "__cdecl callnewh" _callnewh
0x140002220: "__cdecl _imp__acmdln" __imp__acmdln
0x140001ADF: "__cdecl initterm" _initterm
0x1400036B0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400021D8: "__cdecl _imp_Sleep" __imp_Sleep
0x1400022E8: "__cdecl _xi_z" __xi_z
0x140002158: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140001AEB: "__cdecl _C_specific_handler" __C_specific_handler
0x1400017C4: malloc
0x140002118: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140001903: "__cdecl amsg_exit" _amsg_exit
0x140002298: "__cdecl _imp__callnewh" __imp__callnewh
0x140002268: "__cdecl _imp_exit" __imp_exit
0x140003688: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUxlnnlmUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_common_iel1" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUoryUxlnnlmUrvoBUlyquivUznwGEUhglxpOlyq@ieshare_common_iel1
0x1400021B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400036A0: "__cdecl _native_startup_lock" __native_startup_lock
0x140001830: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140002230: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140002170: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002200: KERNEL32_NULL_THUNK_DATA
0x1400013AC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140002210: "__cdecl _imp__commode" __imp__commode
0x140002248: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140002784: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400021F8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400019D0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140001380: "int __cdecl InitOnceVersionInfo(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?InitOnceVersionInfo@@YAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x1400021B0: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140003050: "__cdecl newmode" _newmode
0x140002228: "__cdecl _imp__initterm" __imp__initterm
0x140002270: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140001910: "__cdecl setargv" _setargv
0x140002138: "__cdecl _imp_GetVersionExA" __imp_GetVersionExA
0x140002238: "__cdecl _imp_rand_s" __imp_rand_s
0x140003690: "__cdecl _onexitend" __onexitend
0x140002370: "WldpGetLockdownPolicy" ??_C@_0BG@JBAHAIGO@WldpGetLockdownPolicy?$AA@
0x140002260: "__cdecl _imp__exit" __imp__exit
0x1400022A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140002150: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140002358: "WLDP.DLL" ??_C@_1BC@FFMNMDJM@?$AAW?$AAL?$AAD?$AAP?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x1400022D0: "__cdecl _xi_a" __xi_a
0x140002178: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001910: "__cdecl matherr" _matherr
0x1400013EC: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1400017A0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400022C8: "__cdecl _xc_z" __xc_z
0x1400021A0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140002148: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x140002208: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140002180: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400021D0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1400022F0: "__cdecl _guard_fids_table" __guard_fids_table
0x1400022A0: msvcrt_NULL_THUNK_DATA
0x140002010: "__cdecl load_config_used" _load_config_used
0x140002128: "__cdecl _imp_RegQueryValueExA" __imp_RegQueryValueExA
0x140002280: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140002340: "HeapSetInformation" ??_C@_0BD@GBODGBFL@HeapSetInformation?$AA@
0x140002388: "clsid\{25336920-03f9-11cf-8fd0-0" ??_C@_0DM@MEMGJBDI@clsid?2?$HL25336920?903f9?911cf?98fd0?90@
0x1400021C8: "__cdecl _imp_LoadLibraryA" __imp_LoadLibraryA
0x140002168: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400021F0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400023C8: "kernel32.dll" ??_C@_1BK@MGMFAEKH@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000304C: "__cdecl dowildcard" _dowildcard
0x140002408: "RunHTMLApplication" ??_C@_0BD@MFIHKBIL@RunHTMLApplication?$AA@
0x140002140: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x1400017DC: free
0x140002160: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001B00: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400021C0: "__cdecl _imp_ExpandEnvironmentStringsA" __imp_ExpandEnvironmentStringsA
0x14000185C: RtlpImageNtHeader
0x1400035D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUnhsgnoUhixUlgsviUsgzUlyquivUznwGEUsvzwvihOlyq@mshta" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUrmvgxlivUnhsgnoUhixUlgsviUsgzUlyquivUznwGEUsvzwvihOlyq@mshta
0x140002198: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140002288: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140002250: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140003008: "__cdecl _security_cookie" __security_cookie
0x140003000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400021A8: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x140003698: "__cdecl _onexitbegin" __onexitbegin
0x1400021E8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001530: WinMainCRTStartup
0x140002120: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x140002770: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001A04: "__cdecl _security_init_cookie" __security_init_cookie
0x140002258: "__cdecl _imp__cexit" __imp__cexit
0x1400023E8: "RegisterApplicationRestart" ??_C@_0BL@PGAJLCMF@RegisterApplicationRestart?$AA@
0x1400018B8: "__cdecl get_image_app_type" _get_image_app_type
0x14000275C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140002240: "__cdecl _imp_malloc" __imp_malloc
0x140002130: ADVAPI32_NULL_THUNK_DATA
0x140001B50: "__cdecl _report_gsfailure" __report_gsfailure
0x140002320: "Kernel32.dll" ??_C@_1BK@EJBALEBG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400036A8: "__cdecl _native_startup_state" __native_startup_state
0x140002218: "__cdecl _imp__fmode" __imp__fmode
0x140002190: "__cdecl _imp_GetVersion" __imp_GetVersion
0x140002290: "__cdecl _imp_free" __imp_free
0x140001970: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140002798: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]