Generated by JEB on 2019/08/01

PE: C:\Windows\System32\RemotePosWorker.exe Base=0x140000000 SHA-256=B1A25D53C302C3B4E7D6AFFBC309E67C3761E0D189B9FC1389E16C626EF8B09D
PDB: RemotePosWorker.pdb GUID={49819744-F350-EF74-670439C63EBA4E47} Age=1

135 located named symbols:
0x140001154: "long __cdecl DisassociateAep(unsigned short const * __ptr64)" ?DisassociateAep@@YAJPEBG@Z
0x140002238: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x140001D3C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002230: "__cdecl _imp_EventRegister" __imp_EventRegister
0x140001B50: "__cdecl FindPESection" _FindPESection
0x140001B40: "__cdecl wsetargv" _wsetargv
0x140004050: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400022A8: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140002380: "DafCreateAssociationContext" ??_C@_0BM@MNFENKDG@DafCreateAssociationContext?$AA@
0x140002170: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001130: "__cdecl TlgDefineProvider_annotation__TlgLoggingProviderProv" _TlgDefineProvider_annotation__TlgLoggingProviderProv
0x140001FA0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140002458: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x140004088: "__cdecl commode" _commode
0x1400022C0: "__cdecl _imp_wcschr" __imp_wcschr
0x1400021E0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140001090: "__cdecl TlgWrite" _TlgWrite
0x140001A20: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400022D8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140004094: "__cdecl fmode" _fmode
0x140001490: wWinMain
0x140001A7E: "__cdecl XcptFilter" _XcptFilter
0x1400022E0: "__cdecl _xc_a" __xc_a
0x140002188: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140002260: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x140002148: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x140002220: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x1400021D0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140001D0F: "__cdecl initterm" _initterm
0x140002910: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140004630: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400021F0: "__cdecl _imp_Sleep" __imp_Sleep
0x140002310: "__cdecl _xi_z" __xi_z
0x140002120: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140001D1B: "__cdecl _C_specific_handler" __C_specific_handler
0x140002140: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x140001F2C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400023A0: "DafStartRemoveAssociation" ??_C@_0BK@MHNFNKJA@DafStartRemoveAssociation?$AA@
0x140001B33: "__cdecl amsg_exit" _amsg_exit
0x140002290: "__cdecl _imp_exit" __imp_exit
0x140002258: "__cdecl _imp__wcmdln" __imp__wcmdln
0x140002130: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140002190: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140004620: "__cdecl _native_startup_lock" __native_startup_lock
0x140001A60: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140002298: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1400021B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002168: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400028E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x140002128: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140002240: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x140001F08: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140002248: "__cdecl _imp__commode" __imp__commode
0x140002278: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140002178: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400021D8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1400019C0: wWinMainCRTStartup
0x140001C00: "__cdecl ValidateImageBase" _ValidateImageBase
0x140002960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140002150: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140004090: "__cdecl newmode" _newmode
0x140002270: "__cdecl _imp__initterm" __imp__initterm
0x1400022A0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140004610: "__cdecl _onexitend" __onexitend
0x140002288: "__cdecl _imp__exit" __imp__exit
0x1400022D0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140002180: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140002218: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400022F8: "__cdecl _xi_a" __xi_a
0x140002208: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140001B40: "__cdecl matherr" _matherr
0x1400023C0: "DafCloseAssociationContext" ??_C@_0BL@IAAODCLD@DafCloseAssociationContext?$AA@
0x140002340: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140002974: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x140002350: "\DeviceAssociation.dll" ??_C@_1CO@BGKIDMGL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400019F0: "__cdecl _security_check_cookie" __security_check_cookie
0x1400022F0: "__cdecl _xc_z" __xc_z
0x140002198: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140002158: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140002268: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140002526: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x140002210: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400021C8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x14000299C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1400021A8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140002318: "__cdecl _guard_fids_table" __guard_fids_table
0x1400022C8: msvcrt_NULL_THUNK_DATA
0x140002010: "__cdecl load_config_used" _load_config_used
0x1400022B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400021C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400021A0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000408C: "__cdecl dowildcard" _dowildcard
0x1400021B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001D30: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140002200: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x140001A8C: RtlpImageNtHeader
0x14000294C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x140002160: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400022B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400028FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140004048: "__cdecl _security_cookie" __security_cookie
0x140002138: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140004040: "__cdecl _defaultmatherr" __defaultmatherr
0x140002938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140004618: "__cdecl _onexitbegin" __onexitbegin
0x140002118: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001C34: "__cdecl _security_init_cookie" __security_init_cookie
0x140002280: "__cdecl _imp__cexit" __imp__cexit
0x140001AE8: "__cdecl get_image_app_type" _get_image_app_type
0x1400028D4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140002228: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x140001D80: "__cdecl _report_gsfailure" __report_gsfailure
0x140004628: "__cdecl _native_startup_state" __native_startup_state
0x1400023E0: "/Disassociate" ??_C@_1BM@EAPKANGH@?$AA?1?$AAD?$AAi?$AAs?$AAa?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AA?$AA@
0x140002250: "__cdecl _imp__fmode" __imp__fmode
0x140002988: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140001BA0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400021F8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400021E8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x140002924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400029B0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]