RWHVA::ShowWithVisibility nested-pump UAF (Windows)