Generated by JEB on 2019/02/01

PE: C:\Windows\System32\wbem\Dscpspluginwkr.dll Base=0x180000000 SHA-256=994691F45C13FFA69280832942F4B308E7BB886A8B8B11E2016C8DCD13166B31
PDB: Dscpspluginwkr.pdb GUID={248586CB-4C24-BA1C-BB93E67C37BCAB6B} Age=1

142 located named symbols:
0x180002E5C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002C00: "__cdecl FindPESection" _FindPESection
0x180001510: CALogFreeMemory
0x180006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800026F4: "__cdecl CRT_INIT" _CRT_INIT
0x180004600: "`string'" ??_C@_1CE@CJEJMGAA@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAL?$AAo?$AAc?$AAk?$AA_?$AA?$AA@
0x1800042B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800030C0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002674: Wcslcpy
0x180001520: LogCAWarningMessage
0x1800043B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002BEE: "__cdecl XcptFilter" _XcptFilter
0x1800043B8: "__cdecl _xc_a" __xc_a
0x1800045D8: "`string'" ??_C@_1CC@OKHAGCKB@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAO?$AAu?$AAt?$AA_?$AA?$AA@
0x180003001: "__cdecl lock" _lock
0x18000448C: "__cdecl _guard_iat_table" __guard_iat_table
0x1800042F8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800065A0: "struct _CAJobInformation s_CAJobInformation" ?s_CAJobInformation@@3U_CAJobInformation@@A
0x180004398: "__cdecl _imp_memset" __imp_memset
0x180002DA5: "__cdecl initterm" _initterm
0x1800065F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800042A0: "__cdecl _imp_Sleep" __imp_Sleep
0x1800043D8: "__cdecl _xi_z" __xi_z
0x180004278: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002DAB: "__cdecl _C_specific_handler" __C_specific_handler
0x180004378: "__cdecl _imp__onexit" __imp__onexit
0x1800042F0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180004248: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003040: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800045A0: "`string'" ??_C@_0BE@PLLGGOMA@LogCAWarningMessage?$AA@
0x180006608: NitsStartInjectorFunc
0x180002BF4: "__cdecl amsg_exit" _amsg_exit
0x1800045B8: "`string'" ??_C@_1CA@MKEDHNFM@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAI?$AAn?$AA_?$AA?$AA@
0x180004328: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x180004350: "__cdecl _imp__lock" __imp__lock
0x180002E44: atexit
0x180004528: "`string'" ??_C@_0BD@JGPFFBCM@LogCAWhatIfMessage?$AA@
0x1800042E0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004588: "`string'" ??_C@_0BE@EKPIJPCP@LogCAVerboseMessage?$AA@
0x180004660: "`string'" ??_C@_1GA@PHJBGDKF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800065C8: nitsinj_handle
0x180004260: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000300D: "__cdecl _dllonexit" __dllonexit
0x1800065E0: "__cdecl _native_startup_lock" __native_startup_lock
0x180002460: DllMain
0x180004310: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x180004388: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180004348: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004270: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002468: WFixupFormat
0x1800042D0: KERNEL32_NULL_THUNK_DATA
0x180004D94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x180001210: LogCAWriteMIError
0x180006000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003020: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180004318: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x180001680: LogCAProgressMessage
0x180004D6C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800042B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004320: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180002CA0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004308: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800065C0: NITS_PRESENCE_STUB
0x180002930: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004358: "__cdecl _imp__initterm" __imp__initterm
0x1800013B0: LogCAVerboseMessage
0x1800042D8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800046DC: "`string'" ??_C@_04MEMAJGDJ@name?$AA@
0x1800065D0: "__cdecl _onexitend" __onexitend
0x180003007: "__cdecl unlock" _unlock
0x1800043A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004280: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800016E0: CALogSetJobDeviceName
0x180004010: NITS_STUB
0x1800043C8: "__cdecl _xi_a" __xi_a
0x1800042C8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004340: "__cdecl _imp__unlock" __imp__unlock
0x180004628: "`string'" ??_C@_0BC@FKLPPPII@NitsStartInjector?$AA@
0x1800044A8: "`string'" ??_C@_1DM@IMGAKKNC@?$AA?$FL?$AA?$CF?$AAS?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA1?$AA6?$AAS?$AA?5?$AA?5?$AA?5?$AA?$FL?$AA?$CF?$AAS?$AA?$FN?$AA?5?$AA?$CF?$AAS?$AA?$AA@
0x1800044A0: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800065F8: "__cdecl pRawDllMain" _pRawDllMain
0x180004360: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180004390: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x180002BD0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800043C0: "__cdecl _xc_z" __xc_z
0x180004300: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800016D0: GetResourceIdFromContext
0x180002558: Vswprintf
0x180001250: LogCADebugMessage
0x180002538: Swprintf
0x1800042C0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180001B0C: LoadInjectorIfRequired
0x1800025F8: NamedSem_Open_Injected
0x180004540: "`string'" ??_C@_1CM@BCPFIKCD@?$AAD?$AAS?$AAC?$AAP?$AAo?$AAw?$AAe?$AAr?$AAs?$AAh?$AAe?$AAl?$AAl?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1800046C0: "`string'" ??_C@_1BK@DNPIFNII@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x180001A10: LoadInjector
0x1800043E0: "__cdecl _guard_fids_table" __guard_fids_table
0x1800043A0: msvcrt_NULL_THUNK_DATA
0x180004140: "__cdecl load_config_used" _load_config_used
0x180006600: NitsStopInjectorFunc
0x180004338: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004268: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800042A8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004640: "`string'" ??_C@_0BB@NGONBINC@NitsStopInjector?$AA@
0x1800044E8: "`string'" ??_C@_0DN@OEAEIKLD@servercommon?2admin?2dsc?2engine?2ca@
0x180001BD8: CheckInjector
0x180004288: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001D70: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001720: SignalInjector
0x180004DA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180004570: "`string'" ??_C@_0BC@CLDKMBDA@LogCADebugMessage?$AA@
0x180004368: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004298: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180004D80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180006008: "__cdecl _security_cookie" __security_cookie
0x180004240: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800042E8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004DBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800065D8: "__cdecl _onexitbegin" __onexitbegin
0x180004290: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004D58: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180004250: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002CD0: "__cdecl _security_init_cookie" __security_init_cookie
0x180001080: CAWhatIfEnabled
0x1800010A0: LogCAWhatIfMessage
0x180004D44: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004370: "__cdecl _imp_malloc" __imp_malloc
0x180004258: ADVAPI32_NULL_THUNK_DATA
0x180002E90: "__cdecl _report_gsfailure" __report_gsfailure
0x180002DB4: "__cdecl onexit" _onexit
0x1800065E8: "__cdecl _native_startup_state" __native_startup_state
0x180004380: "__cdecl _imp_free" __imp_free
0x180002C50: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004330: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000309B: memset
0x180004DD0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]