Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wbem\Dscpspluginwkr.dll Base=0x180000000 SHA-256=C62C24034EF9571A4CA2C8320195E179B4C22F19DD4D467BF9E918E6EFAB8AE5
PDB: Dscpspluginwkr.pdb GUID={91C1BD2F-F1D9-F4D8-2B251A42CB61D2BD} Age=1

192 located named symbols:
0x180002F7C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002CF0: "__cdecl FindPESection" _FindPESection
0x180001520: CALogFreeMemory
0x180006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800027CC: "__cdecl CRT_INIT" _CRT_INIT
0x180004600: "NitsInjectorLock_" ??_C@_1CE@CJEJMGAA@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAL?$AAo?$AAc?$AAk?$AA_?$AA?$AA@
0x1800042C0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003210: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002744: Wcslcpy
0x180001530: LogCAWarningMessage
0x1800043B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002CD4: "__cdecl XcptFilter" _XcptFilter
0x1800043C0: "__cdecl _xc_a" __xc_a
0x1800045D8: "NitsInjectorOut_" ??_C@_1CC@OKHAGCKB@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAO?$AAu?$AAt?$AA_?$AA?$AA@
0x180003137: "__cdecl lock" _lock
0x180004494: "__cdecl _guard_iat_table" __guard_iat_table
0x180004300: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1800065A0: "struct _CAJobInformation s_CAJobInformation" ?s_CAJobInformation@@3U_CAJobInformation@@A
0x1800043A0: "__cdecl _imp_memset" __imp_memset
0x180002EAF: "__cdecl initterm" _initterm
0x1800065F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800042A8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800043E0: "__cdecl _xi_z" __xi_z
0x180004280: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002EBB: "__cdecl _C_specific_handler" __C_specific_handler
0x180004380: "__cdecl _imp__onexit" __imp__onexit
0x1800042F8: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180004250: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000318C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800045A0: "LogCAWarningMessage" ??_C@_0BE@PLLGGOMA@LogCAWarningMessage?$AA@
0x180006608: NitsStartInjectorFunc
0x180002CE0: "__cdecl amsg_exit" _amsg_exit
0x1800045B8: "NitsInjectorIn_" ??_C@_1CA@MKEDHNFM@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AAI?$AAn?$AA_?$AA?$AA@
0x180004330: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x180004358: "__cdecl _imp__lock" __imp__lock
0x180002F5C: atexit
0x180004528: "LogCAWhatIfMessage" ??_C@_0BD@JGPFFBCM@LogCAWhatIfMessage?$AA@
0x1800042E8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180004588: "LogCAVerboseMessage" ??_C@_0BE@EKPIJPCP@LogCAVerboseMessage?$AA@
0x180004660: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GA@PHJBGDKF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800065C8: nitsinj_handle
0x180004268: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000314F: "__cdecl _dllonexit" __dllonexit
0x1800065E0: "__cdecl _native_startup_lock" __native_startup_lock
0x180002510: DllMain
0x180004318: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x180004390: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180004350: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004278: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000251C: WFixupFormat
0x1800042D8: KERNEL32_NULL_THUNK_DATA
0x180004D94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x180001220: LogCAWriteMIError
0x180006000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003168: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180004320: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x180001690: LogCAProgressMessage
0x180004D6C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1800042B8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004328: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180002DA0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004310: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1800065C0: NITS_PRESENCE_STUB
0x180002A10: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004360: "__cdecl _imp__initterm" __imp__initterm
0x1800013C0: LogCAVerboseMessage
0x1800042E0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800046DC: "name" ??_C@_04MEMAJGDJ@name?$AA@
0x1800065D0: "__cdecl _onexitend" __onexitend
0x180003143: "__cdecl unlock" _unlock
0x1800043B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180004288: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800016F0: CALogSetJobDeviceName
0x180004010: NITS_STUB
0x1800043D0: "__cdecl _xi_a" __xi_a
0x1800042D0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004348: "__cdecl _imp__unlock" __imp__unlock
0x180004628: "NitsStartInjector" ??_C@_0BC@FKLPPPII@NitsStartInjector?$AA@
0x1800044A8: "[%S]: %-16S [%S] %S" ??_C@_1DM@IMGAKKNC@?$AA?$FL?$AA?$CF?$AAS?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CF?$AA?9?$AA1?$AA6?$AAS?$AA?5?$AA?5?$AA?5?$AA?$FL?$AA?$CF?$AAS?$AA?$FN?$AA?5?$AA?$CF?$AAS?$AA?$AA@
0x1800044A0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800065F8: "__cdecl pRawDllMain" _pRawDllMain
0x180004368: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180004398: "__cdecl _imp_vswprintf_s" __imp_vswprintf_s
0x180002CB0: "__cdecl _security_check_cookie" __security_check_cookie
0x1800043C8: "__cdecl _xc_z" __xc_z
0x180004308: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800016E0: GetResourceIdFromContext
0x18000261C: Vswprintf
0x180001260: LogCADebugMessage
0x1800025F8: Swprintf
0x1800042C8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180001B24: LoadInjectorIfRequired
0x1800026C4: NamedSem_Open_Injected
0x180004540: "DSCPowershellResource" ??_C@_1CM@BCPFIKCD@?$AAD?$AAS?$AAC?$AAP?$AAo?$AAw?$AAe?$AAr?$AAs?$AAh?$AAe?$AAl?$AAl?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1800046C0: "NitsInjector" ??_C@_1BK@DNPIFNII@?$AAN?$AAi?$AAt?$AAs?$AAI?$AAn?$AAj?$AAe?$AAc?$AAt?$AAo?$AAr?$AA?$AA@
0x180001A24: LoadInjector
0x1800043E8: "__cdecl _guard_fids_table" __guard_fids_table
0x1800043A8: msvcrt_NULL_THUNK_DATA
0x180004140: "__cdecl load_config_used" _load_config_used
0x180006600: NitsStopInjectorFunc
0x180004340: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180004270: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800042B0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004640: "NitsStopInjector" ??_C@_0BB@NGONBINC@NitsStopInjector?$AA@
0x1800044E8: "servercommon\admin\dsc\engine\ca" ??_C@_0DN@OEAEIKLD@servercommon?2admin?2dsc?2engine?2ca@
0x180001BF8: CheckInjector
0x180004290: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001DC0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001734: SignalInjector
0x180004DA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180004570: "LogCADebugMessage" ??_C@_0BC@CLDKMBDA@LogCADebugMessage?$AA@
0x180004370: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800042A0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180004D80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180006008: "__cdecl _security_cookie" __security_cookie
0x180004248: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800042F0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180004DBC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800065D8: "__cdecl _onexitbegin" __onexitbegin
0x180004298: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004D58: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180004258: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002DD4: "__cdecl _security_init_cookie" __security_init_cookie
0x180001090: CAWhatIfEnabled
0x1800010B0: LogCAWhatIfMessage
0x180004D44: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004378: "__cdecl _imp_malloc" __imp_malloc
0x180004260: ADVAPI32_NULL_THUNK_DATA
0x180002FC0: "__cdecl _report_gsfailure" __report_gsfailure
0x180002EC8: "__cdecl onexit" _onexit
0x1800065E8: "__cdecl _native_startup_state" __native_startup_state
0x180004388: "__cdecl _imp_free" __imp_free
0x180002D40: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004338: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800031ED: memset
0x180004DD0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]