Generated by JEB on 2019/08/01

PE: C:\Windows\System32\WaaSMedicPS.dll Base=0x180000000 SHA-256=49F3EC6C19D91E71E97BBD4879BF8047FC9B7830452EECD4B0C3E705FE9E1636
PDB: WaaSMedicPS.pdb GUID={AD876164-D385-BCF7-CF8025B2ADC083BD} Age=1

243 located named symbols:
0x180001B40: ObjectStublessClient11
0x1800018EC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001700: "__cdecl FindPESection" _FindPESection
0x180004D08: "__cdecl _imp_CStdStubBuffer2_QueryInterface" __imp_CStdStubBuffer2_QueryInterface
0x180004CE0: "__cdecl _imp_IUnknown_Release_Proxy" __imp_IUnknown_Release_Proxy
0x180001D10: HSTRING_UserFree
0x180004BD8: "__cdecl _imp_VARIANT_UserSize64" __imp_VARIANT_UserSize64
0x180007010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005060: CLSID_PSFactoryBuffer
0x180004C90: "__cdecl _imp_IUnknown_QueryInterface_Proxy" __imp_IUnknown_QueryInterface_Proxy
0x1800011DC: "__cdecl CRT_INIT" _CRT_INIT
0x180004DC0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180004E80: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x180001E70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001CB0: ObjectStublessClient8
0x180001CC0: ObjectStublessClient9
0x180001B80: ObjectStublessClient3
0x180001D00: ObjectStublessClient10
0x180001C90: ObjectStublessClient6
0x180001BF0: ObjectStublessClient7
0x180001E40: ObjectStublessClient4
0x180001C00: ObjectStublessClient5
0x180005DAC: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x1800010E0: DllGetClassObject
0x180004CF0: "__cdecl _imp_IUnknown_AddRef_Proxy" __imp_IUnknown_AddRef_Proxy
0x180001DE0: NdrStubCall3
0x180004D18: "__cdecl _imp_CStdStubBuffer2_Disconnect" __imp_CStdStubBuffer2_Disconnect
0x180005070: IID_IWaaSRemediation
0x180004C50: "__cdecl _imp_BSTR_UserSize" __imp_BSTR_UserSize
0x180004CF8: "__cdecl _imp_NdrOleFree" __imp_NdrOleFree
0x180004ED0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004BF8: "__cdecl _imp_VARIANT_UserUnmarshal64" __imp_VARIANT_UserUnmarshal64
0x180001CF0: CStdStubBuffer_CountRefs
0x180004C98: "__cdecl _imp_CStdStubBuffer_DebugServerRelease" __imp_CStdStubBuffer_DebugServerRelease
0x180001D70: HSTRING_UserUnmarshal
0x1800016E4: "__cdecl XcptFilter" _XcptFilter
0x180004ED8: "__cdecl _xc_a" __xc_a
0x1800075A0: gPFactory
0x180005DC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x180001DC0: NdrProxyForwardingFunction3
0x180001C60: NdrProxyForwardingFunction4
0x180001C80: NdrProxyForwardingFunction5
0x180001E30: CStdStubBuffer_Connect
0x180001BD0: NdrProxyForwardingFunction6
0x180004C68: "__cdecl _imp_NdrDllGetClassObject" __imp_NdrDllGetClassObject
0x180001DB0: CStdStubBuffer_Disconnect
0x180001B20: VARIANT_UserMarshal64
0x180005080: IID_IWaaSProtectedSettingsProvider
0x180003070: "__cdecl IWaaSRemediationProxyVtbl" _IWaaSRemediationProxyVtbl
0x180004BF0: "__cdecl _imp_BSTR_UserUnmarshal64" __imp_BSTR_UserUnmarshal64
0x180004E68: "__cdecl _imp_HSTRING_UserFree64" __imp_HSTRING_UserFree64
0x1800036C8: "__cdecl waasmedic_BaseIIDList" _waasmedic_BaseIIDList
0x180001C30: VARIANT_UserSize
0x1800018BF: "__cdecl initterm" _initterm
0x1800050D0: "IWaaSProtectedSettingsProvider" ??_C@_0BP@BEKLGMPD@IWaaSProtectedSettingsProvider?$AA@
0x180003020: waasmedic_ProxyFileInfo
0x180005E24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800075E0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004E18: "__cdecl _imp_Sleep" __imp_Sleep
0x180004EF8: "__cdecl _xi_z" __xi_z
0x180004D98: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800018CB: "__cdecl _C_specific_handler" __C_specific_handler
0x1800040F0: "__cdecl waasmedic_InterfaceNamesList" _waasmedic_InterfaceNamesList
0x180001DA0: BSTR_UserSize64
0x180004C18: "__cdecl _imp_VARIANT_UserMarshal" __imp_VARIANT_UserMarshal
0x180001120: DllCanUnloadNow
0x180001C20: CStdStubBuffer2_QueryInterface
0x180004D78: "__cdecl _imp_ObjectStublessClient10" __imp_ObjectStublessClient10
0x180004E78: "__cdecl _imp_HSTRING_UserFree" __imp_HSTRING_UserFree
0x180001E20: HSTRING_UserUnmarshal64
0x1800016F0: "__cdecl amsg_exit" _amsg_exit
0x180001B90: HSTRING_UserFree64
0x180001B60: IUnknown_AddRef_Proxy
0x180004C58: OLEAUT32_NULL_THUNK_DATA
0x180004CA0: "__cdecl _imp_NdrStubCall3" __imp_NdrStubCall3
0x180004D58: "__cdecl _imp_ObjectStublessClient11" __imp_ObjectStublessClient11
0x180004CC8: "__cdecl _imp_CStdStubBuffer_CountRefs" __imp_CStdStubBuffer_CountRefs
0x180004DA8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004DD8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004C38: "__cdecl _imp_BSTR_UserFree64" __imp_BSTR_UserFree64
0x1800075D0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001AC0: BSTR_UserSize
0x180004C30: "__cdecl _imp_VARIANT_UserMarshal64" __imp_VARIANT_UserMarshal64
0x180001174: DllMain
0x180004CD8: "__cdecl _imp_NdrDllCanUnloadNow" __imp_NdrDllCanUnloadNow
0x180004EA0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004DF8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004DB8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180001140: CStdStubBuffer_Release
0x180004D80: "__cdecl _imp_ObjectStublessClient5" __imp_ObjectStublessClient5
0x180004D70: "__cdecl _imp_ObjectStublessClient4" __imp_ObjectStublessClient4
0x180004D10: "__cdecl _imp_ObjectStublessClient7" __imp_ObjectStublessClient7
0x180004D40: "__cdecl _imp_ObjectStublessClient6" __imp_ObjectStublessClient6
0x180004D30: "__cdecl _imp_ObjectStublessClient3" __imp_ObjectStublessClient3
0x180007000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180004D88: "__cdecl _imp_ObjectStublessClient9" __imp_ObjectStublessClient9
0x180004D50: "__cdecl _imp_ObjectStublessClient8" __imp_ObjectStublessClient8
0x180004EB8: "__cdecl _imp_memcmp" __imp_memcmp
0x180004E60: "__cdecl _imp_HSTRING_UserUnmarshal" __imp_HSTRING_UserUnmarshal
0x180004C48: "__cdecl _imp_VARIANT_UserSize" __imp_VARIANT_UserSize
0x180004D90: api-ms-win-core-com-midlproxystub-l1-1-0_NULL_THUNK_DATA
0x180005DD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-midlproxystub-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-midlproxystub-l1-1-0
0x180004DC8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001B10: HSTRING_UserMarshal
0x1800017B0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180001B50: CStdStubBuffer2_CountRefs
0x180001D50: CStdStubBuffer_DebugServerRelease
0x180004C10: "__cdecl _imp_BSTR_UserUnmarshal" __imp_BSTR_UserUnmarshal
0x180005D98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001DD0: IUnknown_QueryInterface_Proxy
0x180001BE0: CStdStubBuffer2_Disconnect
0x180004C80: "__cdecl _imp_CStdStubBuffer_Disconnect" __imp_CStdStubBuffer_Disconnect
0x180001420: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004C88: "__cdecl _imp_NdrCStdStubBuffer2_Release" __imp_NdrCStdStubBuffer2_Release
0x180001AD0: VARIANT_UserSize64
0x180004EA8: "__cdecl _imp__initterm" __imp__initterm
0x180001D30: NdrOleAllocate
0x1800075C0: "__cdecl _onexitend" __onexitend
0x180004EC8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004DD0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180004CA8: "__cdecl _imp_CStdStubBuffer_QueryInterface" __imp_CStdStubBuffer_QueryInterface
0x180001C70: BSTR_UserUnmarshal
0x180001AF0: NdrStubForwardingFunction
0x180003110: "__cdecl IWaaSRemediationExStubVtbl" _IWaaSRemediationExStubVtbl
0x180004E38: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004EE8: "__cdecl _xi_a" __xi_a
0x180003010: aProxyFileList
0x180004E28: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004E50: "__cdecl _imp_HSTRING_UserMarshal" __imp_HSTRING_UserMarshal
0x180004C60: "__cdecl _imp_NdrCStdStubBuffer_Release" __imp_NdrCStdStubBuffer_Release
0x180001B00: HSTRING_UserSize
0x180005E10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180003340: "__cdecl IWaaSProtectedSettingsProviderProxyVtbl" _IWaaSProtectedSettingsProviderProxyVtbl
0x180001DF0: CStdStubBuffer_IsIIDSupported
0x1800075E8: "__cdecl pRawDllMain" _pRawDllMain
0x180001D60: HSTRING_UserMarshal64
0x180004C00: "__cdecl _imp_VARIANT_UserFree64" __imp_VARIANT_UserFree64
0x1800016C0: "__cdecl _security_check_cookie" __security_check_cookie
0x180004EE0: "__cdecl _xc_z" __xc_z
0x180004DE0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003CB0: "__cdecl waasmedic_ProxyVtblList" _waasmedic_ProxyVtblList
0x180005090: IID_IWaaSRemediationEx
0x180001BC0: VARIANT_UserUnmarshal
0x180004E30: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004E48: "__cdecl _imp_HSTRING_UserUnmarshal64" __imp_HSTRING_UserUnmarshal64
0x180004C28: "__cdecl _imp_BSTR_UserMarshal" __imp_BSTR_UserMarshal
0x180001E10: CStdStubBuffer2_Connect
0x180001B70: CStdStubBuffer_DebugServerQueryInterface
0x180004E10: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180004CE8: "__cdecl _imp_CStdStubBuffer_AddRef" __imp_CStdStubBuffer_AddRef
0x180004CD0: "__cdecl _imp_NdrOleAllocate" __imp_NdrOleAllocate
0x180005E38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180004D48: "__cdecl _imp_CStdStubBuffer2_CountRefs" __imp_CStdStubBuffer2_CountRefs
0x180004DF0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004F00: "__cdecl _guard_fids_table" __guard_fids_table
0x180004EC0: msvcrt_NULL_THUNK_DATA
0x180004AD0: "__cdecl load_config_used" _load_config_used
0x180001AE0: CStdStubBuffer_Invoke
0x180001010: "__cdecl waasmedic_IID_Lookup" _waasmedic_IID_Lookup
0x180001D90: BSTR_UserFree64
0x180001E00: BSTR_UserMarshal64
0x180004E88: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004DB0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180004E40: "__cdecl _imp_HSTRING_UserSize64" __imp_HSTRING_UserSize64
0x180004E00: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004DE8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180001160: CStdStubBuffer2_Release
0x180004E08: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001BB0: VARIANT_UserFree
0x180004C20: "__cdecl _imp_BSTR_UserFree" __imp_BSTR_UserFree
0x1800018E0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001E4C: memcmp
0x1800050A0: "IWaaSRemediation" ??_C@_0BB@NJJHIOGJ@IWaaSRemediation?$AA@
0x180005050: IID_IDispatch
0x180004E98: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180001CE0: HSTRING_UserSize64
0x180001D20: CStdStubBuffer_QueryInterface
0x180001C50: IUnknown_Release_Proxy
0x180007008: "__cdecl _security_cookie" __security_cookie
0x180001B30: BSTR_UserFree
0x180001C40: CStdStubBuffer_AddRef
0x180004CB8: "__cdecl _imp_CStdStubBuffer_IsIIDSupported" __imp_CStdStubBuffer_IsIIDSupported
0x180001CA0: VARIANT_UserMarshal
0x180005E4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180004CB0: "__cdecl _imp_CStdStubBuffer_DebugServerQueryInterface" __imp_CStdStubBuffer_DebugServerQueryInterface
0x1800075C8: "__cdecl _onexitbegin" __onexitbegin
0x180004BE0: "__cdecl _imp_VARIANT_UserUnmarshal" __imp_VARIANT_UserUnmarshal
0x180004E70: "__cdecl _imp_HSTRING_UserSize" __imp_HSTRING_UserSize
0x180004D20: "__cdecl _imp_NdrProxyForwardingFunction6" __imp_NdrProxyForwardingFunction6
0x180004D38: "__cdecl _imp_NdrProxyForwardingFunction5" __imp_NdrProxyForwardingFunction5
0x180004D28: "__cdecl _imp_NdrProxyForwardingFunction4" __imp_NdrProxyForwardingFunction4
0x180004D60: "__cdecl _imp_NdrProxyForwardingFunction3" __imp_NdrProxyForwardingFunction3
0x180004DA0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800017E4: "__cdecl _security_init_cookie" __security_init_cookie
0x180005D70: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004E58: "__cdecl _imp_HSTRING_UserMarshal64" __imp_HSTRING_UserMarshal64
0x180004C78: "__cdecl _imp_NdrStubForwardingFunction" __imp_NdrStubForwardingFunction
0x1800030A0: "__cdecl IWaaSRemediationStubVtbl" _IWaaSRemediationStubVtbl
0x180004EB0: "__cdecl _imp_malloc" __imp_malloc
0x180005D84: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180004D00: RPCRT4_NULL_THUNK_DATA
0x180001930: "__cdecl _report_gsfailure" __report_gsfailure
0x180001BA0: BSTR_UserUnmarshal64
0x1800075D8: "__cdecl _native_startup_state" __native_startup_state
0x180001CD0: BSTR_UserMarshal
0x180004C70: "__cdecl _imp_CStdStubBuffer_Invoke" __imp_CStdStubBuffer_Invoke
0x180004D68: "__cdecl _imp_CStdStubBuffer2_Connect" __imp_CStdStubBuffer2_Connect
0x180004C08: "__cdecl _imp_BSTR_UserMarshal64" __imp_BSTR_UserMarshal64
0x1800050B8: "IWaaSRemediationEx" ??_C@_0BD@CPIIBLIL@IWaaSRemediationEx?$AA@
0x180004CC0: "__cdecl _imp_CStdStubBuffer_Connect" __imp_CStdStubBuffer_Connect
0x180003220: "__cdecl IWaaSRemediationExProxyVtbl" _IWaaSRemediationExProxyVtbl
0x180004C40: "__cdecl _imp_BSTR_UserSize64" __imp_BSTR_UserSize64
0x180005DFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180001D80: VARIANT_UserUnmarshal64
0x180003538: "__cdecl waasmedic_StubVtblList" _waasmedic_StubVtblList
0x180004E90: "__cdecl _imp_free" __imp_free
0x180001750: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004E20: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180001D40: VARIANT_UserFree64
0x180001C10: NdrOleFree
0x180005DE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180004BE8: "__cdecl _imp_VARIANT_UserFree" __imp_VARIANT_UserFree
0x180005E60: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800033B0: "__cdecl IWaaSProtectedSettingsProviderStubVtbl" _IWaaSProtectedSettingsProviderStubVtbl

[JEB Decompiler by PNF Software]