Generated by JEB on 2019/08/01

PE: C:\Windows\System32\eventcreate.exe Base=0x140000000 SHA-256=F8A2DE8135A402BEDBDC3DBEB87677B70793E4AFEEF8A66B9792EA0C0315302E
PDB: evcreate.pdb GUID={7B279354-0B28-B975-252792E89CF3E2E8} Age=1

362 located named symbols:
0x1400028C0: WNetSaveLastError
0x14000B740: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline
0x140008920: "\StringFileInfo\%04x%04x\Interna" ??_C@_1EM@LGBMMPEJ@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa@
0x140003958: StringCompareExW
0x14000765C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140008218: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140008508: "__cdecl _imp_wcstod" __imp_wcstod
0x140008290: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x140007470: "__cdecl FindPESection" _FindPESection
0x140006BB4: DynArrayAppendDWORD
0x140004F14: CloseConnection
0x1400091A0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140007460: "__cdecl wsetargv" _wsetargv
0x140008670: "CustomSource" ??_C@_1BK@CGDDLBNF@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAS?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x14000B010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400084B0: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140008168: "__cdecl _imp_CharUpperW" __imp_CharUpperW
0x1400091B4: "__cdecl _IMPORT_DESCRIPTOR_MPR" __IMPORT_DESCRIPTOR_MPR
0x1400082F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140008448: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA
0x14000338C: FindString2
0x140007900: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140008380: "__cdecl _imp_StrChrIW" __imp_StrChrIW
0x140008350: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x1400082B0: "__cdecl _imp_CompareStringA" __imp_CompareStringA
0x14000879C: "p" ??_C@_13LFIEIAHP@?$AAp?$AA?$AA@
0x140008828: "|%s|" ??_C@_19ONMJPOOG@?$AA?$HM?$AA?$CF?$AAs?$AA?$HM?$AA?$AA@
0x140004328: FreeMemory
0x1400084C8: "__cdecl _imp_wcstoul" __imp_wcstoul
0x140008798: "u" ??_C@_13ICFKHAEN@?$AAu?$AA?$AA@
0x14000B078: "__cdecl commode" _commode
0x140008560: "__cdecl _imp_NetServerGetInfo" __imp_NetServerGetInfo
0x140006DA4: DynArrayAddColumns
0x140008208: "__cdecl _imp_GetFileType" __imp_GetFileType
0x140009290: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x140008520: "__cdecl _imp__memicmp" __imp__memicmp
0x140008270: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140008180: "__cdecl _imp_GetAddrInfoW" __imp_GetAddrInfoW
0x1400067A0: "__cdecl _DynArrayGetItem" __DynArrayGetItem
0x140007340: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140008578: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400088B8: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x14000B084: "__cdecl fmode" _fmode
0x140008298: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140009204: "__cdecl _IMPORT_DESCRIPTOR_srvcli" __IMPORT_DESCRIPTOR_srvcli
0x140003430: TrimString2
0x14000B038: g_wszDefaultSource
0x140008238: "__cdecl _imp_HeapValidate" __imp_HeapValidate
0x1400092CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x140008840: "%c" ??_C@_15DAMPJCDE@?$AA?$CF?$AAc?$AA?$AA@
0x140004C50: GetTargetVersion
0x1400088E0: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400045B4: GetBufferSize
0x14000739E: "__cdecl XcptFilter" _XcptFilter
0x140008580: "__cdecl _xc_a" __xc_a
0x140006F84: DynArrayGetItemType2
0x140008658: "%s\%s\%s" ??_C@_1BC@GLIGFLDD@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14000611C: MatchOption
0x1400083F8: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x140008390: "__cdecl _imp_StrStrIW" __imp_StrStrIW
0x140001298: CreateLogEvent
0x140008260: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140006E00: DynArrayGetCount2
0x140002814: SaveLastError
0x140002EEC: AsFloat
0x140008178: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x140002BAC: IsWin2KOrLater
0x1400082C8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140003158: FindChar2
0x140008480: "__cdecl _imp_memset" __imp_memset
0x14000762F: "__cdecl initterm" _initterm
0x140002C6C: GetResString
0x140008970: ".EXE" ??_C@_19GAILEKPG@?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x140009178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000B738: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400083E0: "__cdecl _imp_Sleep" __imp_Sleep
0x1400085B0: "__cdecl _xi_z" __xi_z
0x1400084F8: "__cdecl _imp___iob_func" __imp___iob_func
0x1400081F8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140002410: GetInternalTemporaryBuffer
0x1400092E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-obsolete-l1-2-0
0x14000763B: "__cdecl _C_specific_handler" __C_specific_handler
0x1400083D0: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x1400087A0: "l" ??_C@_13KPELGIFI@?$AAl?$AA?$AA@
0x14000634C: ReleaseAllocatedMemory
0x1400085E0: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1400090D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0
0x1400087BC: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1400031C0: InString
0x140008240: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1400083A0: api-ms-win-core-shlwapi-obsolete-l1-1-0_NULL_THUNK_DATA
0x140008860: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x140008228: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1400048C0: IsValidServer
0x140008340: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000787C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000885C: cwszNullString
0x140008338: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x1400086F0: "EventMessageFile" ??_C@_1CC@JONFAEOP@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
0x140002A6C: ReleaseGlobals
0x1400083C0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1400069D4: DynArrayRemoveAll
0x140006AB8: DynArrayAppendString
0x1400090B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1400087F8: "WARNING" ??_C@_1BA@KPCCLDOC@?$AAW?$AAA?$AAR?$AAN?$AAI?$AAN?$AAG?$AA?$AA@
0x140008330: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x140007453: "__cdecl amsg_exit" _amsg_exit
0x1400082E0: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x14000580C: VerifyParserOptions
0x140003CF0: ShowMessageEx
0x140003554: IsConsoleHandle
0x140008498: "__cdecl _imp_exit" __imp_exit
0x1400083B8: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x140006C88: DynArrayAppendDouble
0x140008600: "SYSTEM\CurrentControlSet\Service" ??_C@_1FG@POGPBGAM@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140008808: "INFORMATION" ??_C@_1BI@MEILNJAO@?$AAI?$AAN?$AAF?$AAO?$AAR?$AAM?$AAA?$AAT?$AAI?$AAO?$AAN?$AA?$AA@
0x140008820: "%s " ??_C@_17GMPJMPF@?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x140008348: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x140008200: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140008140: "__cdecl _imp_WNetGetLastErrorW" __imp_WNetGetLastErrorW
0x1400082D8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400083C8: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x14000B728: "__cdecl _native_startup_lock" __native_startup_lock
0x140008388: "__cdecl _imp_StrStrW" __imp_StrStrW
0x140008150: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x1400049AC: IsValidIPAddress
0x140007380: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000927C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x1400084E8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140008690: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140008370: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140008288: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140008790: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x1400035AC: IsConsoleFile
0x140008138: "__cdecl _imp_WNetAddConnection2W" __imp_WNetAddConnection2W
0x1400081E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140007858: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1400087A8: "so" ??_C@_15KAMOMGGG@?$AAs?$AAo?$AA?$AA@
0x140008398: "__cdecl _imp_StrChrW" __imp_StrChrW
0x140008358: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x1400084D0: "__cdecl _imp__commode" __imp__commode
0x1400084A0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140009218: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400082E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400087B8: "d" ??_C@_13GKPPEALH@?$AAd?$AA?$AA@
0x140007520: "__cdecl ValidateImageBase" _ValidateImageBase
0x140008848: "" ??_C@_13EDGMBIFK@?$AA?$AH?$AA?$AA@
0x1400044AC: ReallocateMemory
0x140002FA4: AsLong
0x1400046F8: IsLocalSystem
0x140008550: "__cdecl _imp_VerSetConditionMask" __imp_VerSetConditionMask
0x140008148: MPR_NULL_THUNK_DATA
0x140009150: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140008118: "__cdecl _imp_OpenEventLogW" __imp_OpenEventLogW
0x140008258: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1400083A8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x1400083D8: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x14000B080: "__cdecl newmode" _newmode
0x140008740: "|error|information|warning|succe" ??_C@_1EG@CEPOHNNG@?$AA?$HM?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?$HM?$AAi?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$HM?$AAw?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$HM?$AAs?$AAu?$AAc?$AAc?$AAe@
0x140008470: "__cdecl _imp__fileno" __imp__fileno
0x140007828: "__cdecl _acrt_iob_func" __acrt_iob_func
0x1400084F0: "__cdecl _imp__initterm" __imp__initterm
0x140006E48: DynArrayItem2
0x1400084A8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140001440: CheckExistence
0x1400081E8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140008980: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400081A0: "__cdecl _imp_GetNameInfoW" __imp_GetNameInfoW
0x140008278: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1400090C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1400092A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x140001A8C: AddEventSource
0x14000460C: StringCchPrintfW
0x140009114: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x140008990: cszParserSignature
0x14000B718: "__cdecl _onexitend" __onexitend
0x140008488: "__cdecl _imp__exit" __imp__exit
0x140004014: GetPassword
0x140008570: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400082D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140008170: USER32_NULL_THUNK_DATA
0x140008540: netutils_NULL_THUNK_DATA
0x140008440: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x140008450: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x1400081C8: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x1400084E0: "__cdecl _imp_wcstol" __imp_wcstol
0x140006C1C: DynArrayAppendFloat
0x140004FE8: EstablishConnection
0x140008408: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140008598: "__cdecl _xi_a" __xi_a
0x140008880: " \/[]:|<>+=;,?$#()!@^"`{}*%" ??_C@_1DI@HNOIKCEE@?$AA?5?$AA?2?$AA?1?$AA?$FL?$AA?$FN?$AA?3?$AA?$HM?$AA?$DM?$AA?$DO?$AA?$CL?$AA?$DN?$AA?$DL?$AA?0?$AA?$DP?$AA$?$AA?$CD?$AA?$CI?$AA?$CJ?$AA?$CB?$AA?$EA?$AA?$FO?$AA?$CC?$AA?$GA?$AA?$HL?$AA?$HN?$AA?$CK?$AA?$CF?$AA?$AA@
0x140008400: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140007460: "__cdecl matherr" _matherr
0x140001008: wmain
0x140008458: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x140005408: PrepareUsageHelperText
0x140008538: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x1400086EC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140009100: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140006CF4: DynArrayAppendRow
0x140008428: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x140008568: srvcli_NULL_THUNK_DATA
0x1400081C0: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x14000883C: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x140008158: SspiCli_NULL_THUNK_DATA
0x140008420: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x1400092F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140007310: "__cdecl _security_check_cookie" __security_check_cookie
0x1400081B8: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x140008590: "__cdecl _xc_z" __xc_z
0x140009254: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140008300: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400039AC: ShowMessage
0x1400084C0: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140008518: "__cdecl _imp_fflush" __imp_fflush
0x1400091F0: "__cdecl _IMPORT_DESCRIPTOR_netutils" __IMPORT_DESCRIPTOR_netutils
0x1400083F0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140008250: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1400082C0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x140008430: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x140008794: "s" ??_C@_13KHDBCPJB@?$AAs?$AA?$AA@
0x140008248: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140004D34: ConnectServer2
0x140008188: "__cdecl _imp_FreeAddrInfoW" __imp_FreeAddrInfoW
0x1400085E8: "\\%s" ??_C@_19JDDPIMDB@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1400082B8: api-ms-win-core-localization-obsolete-l1-2-0_NULL_THUNK_DATA
0x140008510: "__cdecl _imp__errno" __imp__errno
0x140008230: "__cdecl _imp_HeapSize" __imp_HeapSize
0x140008198: "__cdecl _imp_WSAGetLastError" __imp_WSAGetLastError
0x14000B710: g_bWinsockLoaded
0x140003708: StringCopyW
0x140003678: StringCopyA
0x1400067DC: "__cdecl _DynArrayAppend" __DynArrayAppend
0x140008834: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x140008410: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x140008378: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400083B0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x14000918C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1400087C0: "security" ??_C@_1BC@PNLDLOL@?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x140008310: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140002974: ShowLastError
0x1400085B8: "__cdecl _guard_fids_table" __guard_fids_table
0x1400086A0: "%SystemRoot%\System32\EventCreat" ??_C@_1EM@IBDAFJFB@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAE?$AAv?$AAe?$AAn?$AAt?$AAC?$AAr?$AAe?$AAa?$AAt@
0x140008530: msvcrt_NULL_THUNK_DATA
0x140008010: "__cdecl load_config_used" _load_config_used
0x1400088D0: "\\%s\%s" ??_C@_1BA@MAEPBKLL@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140008468: "__cdecl _imp__get_osfhandle" __imp__get_osfhandle
0x1400081B0: "__cdecl _imp_SetConsoleMode" __imp_SetConsoleMode
0x140008868: "localhost" ??_C@_1BE@JDLPANCI@?$AAl?$AAo?$AAc?$AAa?$AAl?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x140008854: cszSignature
0x140004408: AllocateMemory
0x1400092B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14000922C: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1400087D8: "ERROR" ??_C@_1M@BJACCECO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x1400084B8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400032E4: FindOneOf2
0x140009268: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0
0x140008160: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140008360: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140008308: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000B07C: "__cdecl dowildcard" _dowildcard
0x1400087A4: "t" ??_C@_13DKOGBHCI@?$AAt?$AA?$AA@
0x140008438: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x1400087E8: "SUCCESS" ??_C@_1BA@FBNCKCPD@?$AAS?$AAU?$AAC?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x14000B714: g_bInitialized
0x140008368: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140007650: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400082A8: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1400073AC: RtlpImageNtHeader
0x140001C48: ProcessOptions
0x140006874: "__cdecl _DynArrayFreeItemValue" __DynArrayFreeItemValue
0x140006B4C: DynArrayAppendLong
0x140009128: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1400023A4: GetInternalTemporaryBufferRef
0x140008280: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140009308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x140006A3C: DestroyDynamicArray
0x1400037BC: StringConcatW
0x1400088C0: "IPC$" ??_C@_19INGAAIIO@?$AAI?$AAP?$AAC?$AA$?$AA?$AA@
0x140008788: "PARSER2" ??_C@_07DNPALHNK@PARSER2?$AA@
0x140008460: "__cdecl _imp_fprintf" __imp_fprintf
0x140008528: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400082A0: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x1400063FC: DoParseParam2
0x140008558: ntdll_NULL_THUNK_DATA
0x140008998: cwszOptionChars
0x1400091DC: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x1400091C8: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x14000784C: "__cdecl _iob_func" __iob_func
0x140002CA4: GetResString2FromModule
0x1400022C4: InitGlobals
0x14000B008: "__cdecl _security_cookie" __security_cookie
0x140008328: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1400081A8: WS2_32_NULL_THUNK_DATA
0x140005AE8: ParseAndSaveOptionValue
0x1400043B4: CheckMemory
0x140008220: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140008120: "__cdecl _imp_CloseEventLog" __imp_CloseEventLog
0x140008268: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000B000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400087B0: "id" ??_C@_15NFICGAJK@?$AAi?$AAd?$AA?$AA@
0x1400090EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140008130: "__cdecl _imp_WNetCancelConnection2W" __imp_WNetCancelConnection2W
0x140008320: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x14000B720: "__cdecl _onexitbegin" __onexitbegin
0x140008418: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x14000884C: " " ??_C@_15IABLJNFO@?$AA?6?$AA?6?$AA?$AA@
0x140008478: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000261C: GetReason
0x1400081F0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400081D0: "__cdecl _imp_ReadConsoleW" __imp_ReadConsoleW
0x140002238: UnInitializeGlobals
0x14000265C: SetReason
0x140005748: ExtractMainOption
0x140008318: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400081D8: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140003078: IsNumeric
0x140003EF8: GetAsUnicodeString2
0x140007554: "__cdecl _security_init_cookie" __security_init_cookie
0x140008490: "__cdecl _imp__cexit" __imp__cexit
0x140007408: "__cdecl get_image_app_type" _get_image_app_type
0x140006224: MatchOptionEx
0x140004A98: GetHostByIPAddr
0x14000909C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400038C8: StringCompareW
0x1400072E0: wmainCRTStartup
0x140008128: ADVAPI32_NULL_THUNK_DATA
0x14000898C: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x1400076A0: "__cdecl _report_gsfailure" __report_gsfailure
0x140008718: "TypesSupported" ??_C@_1BO@CHOLPGLN@?$AAT?$AAy?$AAp?$AAe?$AAs?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x14000B730: "__cdecl _native_startup_state" __native_startup_state
0x140008548: "__cdecl _imp_RtlVerifyVersionInfo" __imp_RtlVerifyVersionInfo
0x140006EAC: DynArraySetString
0x140008500: "__cdecl _imp_wcstok" __imp_wcstok
0x14000468C: IsUNCFormat
0x1400068F4: "__cdecl _DynArrayFind" __DynArrayFind
0x1400084D8: "__cdecl _imp__fmode" __imp__fmode
0x140009164: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400074C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400083E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400026D8: SetReason2
0x14000B020: g_wszDefaultLog
0x1400082F0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140009240: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400029B0: ShowLastErrorEx
0x14000913C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140008190: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x1400078DD: memset
0x14000931C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140008210: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]