Generated by JEB on 2019/02/01

PE: C:\Windows\System32\Eap3Host.exe Base=0x140000000 SHA-256=DA7B4F82B9F7C41D30F4CBBAB630EA5B5B007B1B0A6582CFC224AF2FBB923597
PDB: Eap3Host.pdb GUID={5DCF9806-33D3-53C7-733515C56DFD2576} Age=1

168 located named symbols:
0x140002470: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x140001CF4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140001B30: "__cdecl FindPESection" _FindPESection
0x1400021B0: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140002868: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x14000287C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140002190: "__cdecl _imp_CoInitializeSecurity" __imp_CoInitializeSecurity
0x1400022E8: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140004010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140001060: "public: virtual unsigned long __cdecl SurrClassFactory::AddRef(void) __ptr64" ?AddRef@SurrClassFactory@@UEAAKXZ
0x140002220: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140001308: WinMain
0x140001F50: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140002480: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x1400021B8: "__cdecl _imp_CoRevokeClassObject" __imp_CoRevokeClassObject
0x140004048: "__cdecl commode" _commode
0x140002430: "`string'" ??_C@_0BL@KBAACNFE@OpenSCManager?5failed?5?$CI?$CFd?$CJ?6?$AA@
0x140002330: "__cdecl _imp_wcschr" __imp_wcschr
0x140002268: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140001A30: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400023A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140004054: "__cdecl fmode" _fmode
0x140001260: "public: virtual long __cdecl CoSurrogate::LoadDllServer(struct _GUID const & __ptr64) __ptr64" ?LoadDllServer@CoSurrogate@@UEAAJAEBU_GUID@@@Z
0x140002160: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140001A88: "__cdecl XcptFilter" _XcptFilter
0x1400023B0: "__cdecl _xc_a" __xc_a
0x140002228: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140001230: "public: virtual unsigned long __cdecl CoSurrogate::AddRef(void) __ptr64" ?AddRef@CoSurrogate@@UEAAKXZ
0x140001A2A: "__cdecl callnewh" _callnewh
0x140001000: "public: virtual long __cdecl SurrClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@SurrClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140002460: "__cdecl GUID_00000022_0000_0000_c000_000000000046" _GUID_00000022_0000_0000_c000_000000000046
0x140002348: "__cdecl _imp__acmdln" __imp__acmdln
0x140002198: "__cdecl _imp_CLSIDFromString" __imp_CLSIDFromString
0x140002370: "__cdecl _imp_memset" __imp_memset
0x140002260: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140001CD5: "__cdecl initterm" _initterm
0x1400011D0: "public: virtual long __cdecl CoSurrogate::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CoSurrogate@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140001240: "public: virtual unsigned long __cdecl CoSurrogate::Release(void) __ptr64" ?Release@CoSurrogate@@UEAAKXZ
0x140002944: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140004600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140002278: "__cdecl _imp_Sleep" __imp_Sleep
0x1400023E0: "__cdecl _xi_z" __xi_z
0x1400021E0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140001CDB: "__cdecl _C_specific_handler" __C_specific_handler
0x140001A24: malloc
0x1400022B0: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x140002170: "__cdecl _imp_PeekMessageW" __imp_PeekMessageW
0x140001ED0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140002258: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x140001B29: "__cdecl amsg_exit" _amsg_exit
0x140002358: "__cdecl _imp__callnewh" __imp__callnewh
0x1400021C0: "__cdecl _imp_CoRegisterClassObject" __imp_CoRegisterClassObject
0x140002300: "__cdecl _imp_exit" __imp_exit
0x1400045D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUvzkslhgUvzkDwooslhgUlyquivUznwGEUkivxlnkrovwOlyq@Eap3Host" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUvzkslhgUvzkDwooslhgUlyquivUznwGEUkivxlnkrovwOlyq@Eap3Host
0x1400021D0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400021F8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400010E0: "public: virtual long __cdecl SurrClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@SurrClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x140002218: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400045F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140001A70: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400028A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140002340: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140002380: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140002208: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400021E8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140001628: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140001EB0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140002360: "__cdecl _imp__commode" __imp__commode
0x140002328: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140002210: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140001BD0: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000291C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140004050: "__cdecl newmode" _newmode
0x140002338: "__cdecl _imp__initterm" __imp__initterm
0x1400022F8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x1400011C0: "__cdecl setargv" _setargv
0x140002450: "`string'" ??_C@_1BA@JPLGMNAK@?$AAE?$AAa?$AAp?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x1400045E0: "__cdecl _onexitend" __onexitend
0x140002308: "__cdecl _imp__exit" __imp__exit
0x1400023A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140002230: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140002188: USER32_NULL_THUNK_DATA
0x140002298: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400023C8: "__cdecl _xi_a" __xi_a
0x140002288: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1400011C0: "__cdecl matherr" _matherr
0x1400022A0: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x140002908: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400045D8: "struct SC_HANDLE__ * __ptr64 __ptr64 schSCManager" ?schSCManager@@3PEAUSC_HANDLE__@@EA
0x1400028E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x140001620: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140001A00: "__cdecl _security_check_cookie" __security_check_cookie
0x1400023C0: "__cdecl _xc_z" __xc_z
0x140002238: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140002368: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400021C8: "__cdecl _imp_CoGetClassObject" __imp_CoGetClassObject
0x140002290: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140002010: "const CoSurrogate::`vftable'" ??_7CoSurrogate@@6B@
0x1400028B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x1400012D0: "public: virtual long __cdecl CoSurrogate::FreeSurrogate(void) __ptr64" ?FreeSurrogate@CoSurrogate@@UEAAJXZ
0x140002250: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1400022C0: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x1400022B8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1400022C8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x140002248: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1400023E8: "__cdecl _guard_fids_table" __guard_fids_table
0x140002378: msvcrt_NULL_THUNK_DATA
0x140002060: "__cdecl load_config_used" _load_config_used
0x1400022F0: "__cdecl _imp_printf" __imp_printf
0x140002180: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x1400011C0: "public: virtual long __cdecl SurrClassFactory::LockServer(int) __ptr64" ?LockServer@SurrClassFactory@@UEAAJH@Z
0x140002958: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140001598: "unsigned long __cdecl getEaphostProcessId(void)" ?getEaphostProcessId@@YAKXZ
0x1400022D8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400021A8: "__cdecl _imp_CoRegisterSurrogate" __imp_CoRegisterSurrogate
0x140002388: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140002240: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000404C: "__cdecl dowildcard" _dowildcard
0x140001A1E: free
0x140002390: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140001CF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140001A90: RtlpImageNtHeader
0x140002200: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140002168: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x1400021A0: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140002038: "const SurrClassFactory::`vftable'" ??_7SurrClassFactory@@6B@
0x1400022D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140002398: ntdll_NULL_THUNK_DATA
0x140002320: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140002890: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x140001070: "public: virtual unsigned long __cdecl SurrClassFactory::Release(void) __ptr64" ?Release@SurrClassFactory@@UEAAKXZ
0x140004008: "__cdecl _security_cookie" __security_cookie
0x140004000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400028CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400021D8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1400045E8: "__cdecl _onexitbegin" __onexitbegin
0x1400021F0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001790: WinMainCRTStartup
0x140001C00: "__cdecl _security_init_cookie" __security_init_cookie
0x140002310: "__cdecl _imp__cexit" __imp__cexit
0x140001AE4: "__cdecl get_image_app_type" _get_image_app_type
0x140002854: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400022E0: "__cdecl _imp_malloc" __imp_malloc
0x140001D30: "__cdecl _report_gsfailure" __report_gsfailure
0x1400045F8: "__cdecl _native_startup_state" __native_startup_state
0x140002178: "__cdecl _imp_MsgWaitForMultipleObjects" __imp_MsgWaitForMultipleObjects
0x1400022A8: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x140002350: "__cdecl _imp__fmode" __imp__fmode
0x140002930: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140002318: "__cdecl _imp_free" __imp_free
0x140001B80: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140002280: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140002270: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1400028F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140001F2B: memset
0x14000296C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]