Generated by JEB on 2019/08/01

PE: C:\Windows\System32\amsiproxy.dll Base=0x180000000 SHA-256=62501DAD3A6EB96EE9751A178684B0B238DCD49AE475277AEA35FEF066F980CA
PDB: amsiproxy.pdb GUID={74092008-57A0-A9AD-A931ADE256814314} Age=1

148 located named symbols:
0x18000188C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800016A0: "__cdecl FindPESection" _FindPESection
0x180002928: "__cdecl _imp_IUnknown_Release_Proxy" __imp_IUnknown_Release_Proxy
0x180004010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002B70: CLSID_PSFactoryBuffer
0x180002958: "__cdecl _imp_IUnknown_QueryInterface_Proxy" __imp_IUnknown_QueryInterface_Proxy
0x18000117C: "__cdecl CRT_INIT" _CRT_INIT
0x180002A10: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001B70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001A90: ObjectStublessClient3
0x180001B50: ObjectStublessClient4
0x180001040: DllGetClassObject
0x180002968: "__cdecl _imp_IUnknown_AddRef_Proxy" __imp_IUnknown_AddRef_Proxy
0x180002B80: IID_IAntimalwareUacProvider
0x180002938: "__cdecl _imp_NdrOleFree" __imp_NdrOleFree
0x180002AB8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001AD0: CStdStubBuffer_CountRefs
0x180002918: "__cdecl _imp_CStdStubBuffer_DebugServerRelease" __imp_CStdStubBuffer_DebugServerRelease
0x180001684: "__cdecl XcptFilter" _XcptFilter
0x180002AC0: "__cdecl _xc_a" __xc_a
0x1800045A0: gPFactory
0x180001B40: CStdStubBuffer_Connect
0x180002988: "__cdecl _imp_NdrDllGetClassObject" __imp_NdrDllGetClassObject
0x180001B10: CStdStubBuffer_Disconnect
0x18000185F: "__cdecl initterm" _initterm
0x180003264: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800045E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180002A50: "__cdecl _imp_Sleep" __imp_Sleep
0x180002AE0: "__cdecl _xi_z" __xi_z
0x1800029D8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000186B: "__cdecl _C_specific_handler" __C_specific_handler
0x180001080: DllCanUnloadNow
0x180001690: "__cdecl amsg_exit" _amsg_exit
0x180001A70: IUnknown_AddRef_Proxy
0x180002920: "__cdecl _imp_CStdStubBuffer_CountRefs" __imp_CStdStubBuffer_CountRefs
0x1800029E0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800029F8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800045D8: "__cdecl _native_startup_lock" __native_startup_lock
0x1800010B4: DllMain
0x180002980: "__cdecl _imp_NdrDllRegisterProxy" __imp_NdrDllRegisterProxy
0x180002990: "__cdecl _imp_NdrDllCanUnloadNow" __imp_NdrDllCanUnloadNow
0x180002A98: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180002A40: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800029F0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800010A0: CStdStubBuffer_Release
0x1800029C0: "__cdecl _imp_ObjectStublessClient4" __imp_ObjectStublessClient4
0x1800029B8: "__cdecl _imp_ObjectStublessClient3" __imp_ObjectStublessClient3
0x180004000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002070: "__cdecl IAntimalwareUacProviderStubVtbl" _IAntimalwareUacProviderStubVtbl
0x1800029C8: api-ms-win-core-com-midlproxystub-l1-1-0_NULL_THUNK_DATA
0x180003214: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-midlproxystub-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-midlproxystub-l1-1-0
0x180002A00: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001750: "__cdecl ValidateImageBase" _ValidateImageBase
0x180001B00: CStdStubBuffer_DebugServerRelease
0x1800031EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001B20: IUnknown_QueryInterface_Proxy
0x180002960: "__cdecl _imp_CStdStubBuffer_Disconnect" __imp_CStdStubBuffer_Disconnect
0x1800013C0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180002A90: "__cdecl _imp__initterm" __imp__initterm
0x180001AF0: NdrOleAllocate
0x1800045C8: "__cdecl _onexitend" __onexitend
0x180002178: "__cdecl IAntimalwareUacProviderProxyVtbl" _IAntimalwareUacProviderProxyVtbl
0x180002AB0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002A08: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800029A8: "__cdecl _imp_CStdStubBuffer_QueryInterface" __imp_CStdStubBuffer_QueryInterface
0x180002B90: "IAntimalwareUacProvider" ??_C@_0BI@OAFLPCCA@IAntimalwareUacProvider?$AA@
0x180002978: "__cdecl _imp_NdrDllUnregisterProxy" __imp_NdrDllUnregisterProxy
0x180002A70: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180002AD0: "__cdecl _xi_a" __xi_a
0x180002010: aProxyFileList
0x180002A68: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180002998: "__cdecl _imp_NdrCStdStubBuffer_Release" __imp_NdrCStdStubBuffer_Release
0x180001010: "__cdecl amsi_IID_Lookup" _amsi_IID_Lookup
0x180003250: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001B30: CStdStubBuffer_IsIIDSupported
0x1800045F0: "__cdecl pRawDllMain" _pRawDllMain
0x180001110: DllUnregisterServer
0x180002498: "__cdecl amsi_ProxyVtblList" _amsi_ProxyVtblList
0x180001660: "__cdecl _security_check_cookie" __security_check_cookie
0x180002AC8: "__cdecl _xc_z" __xc_z
0x180002A18: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002A60: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180001A80: CStdStubBuffer_DebugServerQueryInterface
0x180002A48: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002930: "__cdecl _imp_CStdStubBuffer_AddRef" __imp_CStdStubBuffer_AddRef
0x180002970: "__cdecl _imp_NdrOleAllocate" __imp_NdrOleAllocate
0x180003278: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180002A28: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180002AE8: "__cdecl _guard_fids_table" __guard_fids_table
0x180002020: amsi_ProxyFileInfo
0x180002AA8: msvcrt_NULL_THUNK_DATA
0x180002810: "__cdecl load_config_used" _load_config_used
0x180001A60: CStdStubBuffer_Invoke
0x1800022E0: "__cdecl amsi_InterfaceNamesList" _amsi_InterfaceNamesList
0x180002800: "__cdecl amsi_StubVtblList" _amsi_StubVtblList
0x180002A88: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800029E8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002A30: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180002A20: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002A38: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001880: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002AA0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800045C0: hProxyDll
0x180001AE0: CStdStubBuffer_QueryInterface
0x180001AC0: IUnknown_Release_Proxy
0x180004008: "__cdecl _security_cookie" __security_cookie
0x180001AB0: CStdStubBuffer_AddRef
0x180002950: "__cdecl _imp_CStdStubBuffer_IsIIDSupported" __imp_CStdStubBuffer_IsIIDSupported
0x18000328C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002940: "__cdecl _imp_CStdStubBuffer_DebugServerQueryInterface" __imp_CStdStubBuffer_DebugServerQueryInterface
0x1800045D0: "__cdecl _onexitbegin" __onexitbegin
0x1800029D0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001784: "__cdecl _security_init_cookie" __security_init_cookie
0x1800031D8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180002A78: "__cdecl _imp_malloc" __imp_malloc
0x180003200: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800029B0: RPCRT4_NULL_THUNK_DATA
0x1800018D0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800045E0: "__cdecl _native_startup_state" __native_startup_state
0x1800029A0: "__cdecl _imp_CStdStubBuffer_Invoke" __imp_CStdStubBuffer_Invoke
0x180002948: "__cdecl _imp_CStdStubBuffer_Connect" __imp_CStdStubBuffer_Connect
0x1800010E0: DllRegisterServer
0x18000323C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180002A80: "__cdecl _imp_free" __imp_free
0x1800016F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180002A58: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180001AA0: NdrOleFree
0x180003228: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800032A0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]