Generated by JEB on 2019/08/01

PE: C:\Windows\System32\bi.dll Base=0x180000000 SHA-256=5A280F83E83F60CCCAA3AC37744BA471C624415BDE15BF21EB0D16FA50C28058
PDB: bi.pdb GUID={16F9CF3D-98E7-F45E-23A58EBFA15013D7} Age=1

172 located named symbols:
0x180002740: BiUpdateEventParameters
0x18000316C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002F80: "__cdecl FindPESection" _FindPESection
0x1800070B8: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007158: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-private-l1-1-0
0x180002A4C: "__cdecl CRT_INIT" _CRT_INIT
0x1800055C0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800033E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800013D0: BiAssociateActivationProxy
0x180005628: "__cdecl _imp_WaitServiceState" __imp_WaitServiceState
0x180001B10: BiEnumerateBrokeredEvents
0x1800056B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002360: BiSignalEventEx
0x180001EF0: BiFreeMemory
0x180002F64: "__cdecl XcptFilter" _XcptFilter
0x1800056C0: "__cdecl _xc_a" __xc_a
0x180002530: BiSignalTriggerEventEx
0x180005668: "__cdecl _imp_memset" __imp_memset
0x18000314C: "__cdecl initterm" _initterm
0x180007130: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800085C8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800055E0: "__cdecl _imp_Sleep" __imp_Sleep
0x1800056E0: "__cdecl _xi_z" __xi_z
0x180005598: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002F26: "__cdecl _C_specific_handler" __C_specific_handler
0x180001EF0: MIDL_user_free
0x180002430: BiSignalMultipleEvents
0x180005608: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18000335C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005688: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180002F70: "__cdecl amsg_exit" _amsg_exit
0x180002600: BiUpdateEventFlags
0x180001A00: BiDisassociateWorkItem
0x180001690: BiCancelWorkItemEx
0x1800027D0: BiSignalEvent
0x1800055A0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800055B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800085B8: "__cdecl _native_startup_lock" __native_startup_lock
0x180003140: DllMain
0x180005578: "__cdecl _imp_RpcExceptionFilter" __imp_RpcExceptionFilter
0x180005648: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005678: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180008000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003338: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005570: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x1800055A8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003030: "__cdecl ValidateImageBase" _ValidateImageBase
0x180005680: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180005630: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA
0x180005560: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180002C90: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005658: "__cdecl _imp__initterm" __imp__initterm
0x180002030: BiQueryUserContext
0x180002210: BiQueryWorkItemEx
0x180001C40: BiEnumerateUserSessions
0x1800085A8: "__cdecl _onexitend" __onexitend
0x1800056B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800055B0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800057B0: "BrokerInfrastructure" ??_C@_1CK@PHNLGGBD@?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AAI?$AAn?$AAf?$AAr?$AAa?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x180005600: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800056D0: "__cdecl _xi_a" __xi_a
0x1800055F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005618: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1800070F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001A90: BiDiscardPendingActivations
0x1800085D0: "__cdecl pRawDllMain" _pRawDllMain
0x180001720: BiCreateEvent
0x180002F40: "__cdecl _security_check_cookie" __security_check_cookie
0x1800056C8: "__cdecl _xc_z" __xc_z
0x1800055C8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180001FB0: BiQuerySystemStateBroadcastChannels
0x1800055F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180007144: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x180001F10: BiQueryBrokeredEvent
0x180005620: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x180001850: BiCreateEventForPackageName
0x1800055D8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800056E8: "__cdecl _guard_fids_table" __guard_fids_table
0x180005670: msvcrt_NULL_THUNK_DATA
0x180005450: "__cdecl load_config_used" _load_config_used
0x180002500: BiSignalTriggerEvent
0x180001980: BiDeleteEvent
0x1800026A0: BiUpdateEventInformation
0x180005660: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800014E0: BiAssociateApplicationExtensionClass
0x180005698: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800055D0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002160: BiQueryWorkItem
0x180001010: BiActivateDeferredWorkItem
0x1800056A0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002800: MIDL_user_allocate
0x180003160: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001610: BiCancelWorkItem
0x180001DE0: BiEnumerateWorkItemsForPackageNameEx
0x180005580: "__cdecl _imp_I_RpcMapWin32Status" __imp_I_RpcMapWin32Status
0x180005568: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x180001BB0: BiEnumerateUserContexts
0x1800020D0: BiQueryUserSession
0x180005640: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800056A8: ntdll_NULL_THUNK_DATA
0x180001CD0: BiEnumerateWorkItemsForPackageName
0x180008008: "__cdecl _security_cookie" __security_cookie
0x180002820: BipCreateRpcBinding
0x1800070E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800085B0: "__cdecl _onexitbegin" __onexitbegin
0x180005590: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003064: "__cdecl _security_init_cookie" __security_init_cookie
0x180001090: BiActivateInBackground
0x1800070A4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005650: "__cdecl _imp_malloc" __imp_malloc
0x1800070CC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180005690: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x180005588: RPCRT4_NULL_THUNK_DATA
0x1800031B0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800085C0: "__cdecl _native_startup_state" __native_startup_state
0x180001110: BiActivateInBackgroundEx
0x180005610: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x1800022D0: BiQueryWorkItemStatusStateName
0x180005558: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180001350: BiActivateWorkItem
0x180007108: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180005638: "__cdecl _imp_free" __imp_free
0x180002FD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800055E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000711C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800033BD: memset
0x18000716C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]