Generated by JEB on 2019/02/01

PE: C:\Windows\System32\OskSupport.dll Base=0x180000000 SHA-256=F02C6919735C4C4BA29B3C2CC48C0E390BD171FB02D1835584CD24DCA70A62BA
PDB: OskSupport.pdb GUID={0EB490B1-19CB-7662-DA6AB3423948E3D3} Age=1

91 located named symbols:
0x180001824: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800010A0: "private: static __int64 __cdecl COskSupport::OSKShellHookProc(int,unsigned __int64,__int64)" ?OSKShellHookProc@COskSupport@@CA_JH_K_J@Z
0x180002198: "__cdecl _imp_CallNextHookEx" __imp_CallNextHookEx
0x180001660: "__cdecl FindPESection" _FindPESection
0x180003010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180001154: "__cdecl CRT_INIT" _CRT_INIT
0x180002130: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800019F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800021F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800035A8: "private: static struct HHOOK__ * __ptr64 __ptr64 COskSupport::s_hHookShell" ?s_hHookShell@COskSupport@@0PEAUHHOOK__@@EA
0x18000164E: "__cdecl XcptFilter" _XcptFilter
0x180002200: "__cdecl _xc_a" __xc_a
0x180001805: "__cdecl initterm" _initterm
0x1800035D8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180002170: "__cdecl _imp_Sleep" __imp_Sleep
0x180002220: "__cdecl _xi_z" __xi_z
0x180002160: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000180B: "__cdecl _C_specific_handler" __C_specific_handler
0x180001654: "__cdecl amsg_exit" _amsg_exit
0x180002150: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800035C8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001000: DllMain
0x1800021B8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180002120: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002180: KERNEL32_NULL_THUNK_DATA
0x180002168: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180003000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002138: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001700: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800021A0: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x180001390: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800021C8: "__cdecl _imp__initterm" __imp__initterm
0x1800035A0: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x1800035B8: "__cdecl _onexitend" __onexitend
0x1800021F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002148: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800021B0: USER32_NULL_THUNK_DATA
0x180002210: "__cdecl _xi_a" __xi_a
0x180002128: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180001020: "long __cdecl InitializeOSKSupport(void)" ?InitializeOSKSupport@@YAJXZ
0x1800035E0: "__cdecl pRawDllMain" _pRawDllMain
0x180001630: "__cdecl _security_check_cookie" __security_check_cookie
0x180002208: "__cdecl _xc_z" __xc_z
0x180002110: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800035B0: "private: static struct HWND__ * __ptr64 __ptr64 COskSupport::s_hWndOSK" ?s_hWndOSK@COskSupport@@0PEAUHWND__@@EA
0x180002228: "__cdecl _guard_fids_table" __guard_fids_table
0x1800021E8: msvcrt_NULL_THUNK_DATA
0x180002010: "__cdecl load_config_used" _load_config_used
0x1800026A0: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1800021E0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180002250: "`string'" ??_C@_1BK@BOOICEGP@?$AAO?$AAS?$AAK?$AAM?$AAa?$AAi?$AAn?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x180002118: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180002140: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002178: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001820: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002190: "__cdecl _imp_UnhookWindowsHookEx" __imp_UnhookWindowsHookEx
0x1800021A8: "__cdecl _imp_SetWindowsHookExW" __imp_SetWindowsHookExW
0x1800021C0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180002188: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x180003008: "__cdecl _security_cookie" __security_cookie
0x1800035C0: "__cdecl _onexitbegin" __onexitbegin
0x180002158: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000268C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180001730: "__cdecl _security_init_cookie" __security_init_cookie
0x180002678: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800021D0: "__cdecl _imp_malloc" __imp_malloc
0x180001860: "__cdecl _report_gsfailure" __report_gsfailure
0x180001070: "void __cdecl UninitializeOSKSupport(void)" ?UninitializeOSKSupport@@YAXXZ
0x1800035D0: "__cdecl _native_startup_state" __native_startup_state
0x1800021D8: "__cdecl _imp_free" __imp_free
0x1800016B0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800026B4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]