Generated by JEB on 2019/08/01

PE: C:\Windows\System32\sas.dll Base=0x180000000 SHA-256=DD41E10CA2853268F3927AB279B8E6FEB4FEFE8A57268C277FEB1BB8B32BCD3B
PDB: SAS.pdb GUID={822A0725-F7CC-1321-B91C453772DA5C8F} Age=1

123 located named symbols:
0x180001ABC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800018D0: "__cdecl FindPESection" _FindPESection
0x180003DB0: "52EF130C-08FD-4388-86B3-6EDF%08X" ??_C@_1EC@GJJAFFCH@?$AA5?$AA2?$AAE?$AAF?$AA1?$AA3?$AA0?$AAC?$AA?9?$AA0?$AA8?$AAF?$AAD?$AA?9?$AA4?$AA3?$AA8?$AA8?$AA?9?$AA8?$AA6?$AAB?$AA3?$AA?9?$AA6?$AAE?$AAD?$AAF?$AA?$CF?$AA0?$AA8?$AAX@
0x180005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003DF8: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x1800013AC: "__cdecl CRT_INIT" _CRT_INIT
0x180003968: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001D30: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001224: WlSecureDesktoppRpcClientInit
0x180003A20: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800018B4: "__cdecl XcptFilter" _XcptFilter
0x180003A28: "__cdecl _xc_a" __xc_a
0x180003A08: "__cdecl _imp_memset" __imp_memset
0x180001A8F: "__cdecl initterm" _initterm
0x1800042A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800055C8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800039A8: "__cdecl _imp_Sleep" __imp_Sleep
0x180003A48: "__cdecl _xi_z" __xi_z
0x180003930: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001A9B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800038B0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180001CAC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800010F0: WlSecureDesktop_midl_user_free
0x1800018C0: "__cdecl amsg_exit" _amsg_exit
0x180003938: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180003958: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800055B8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001098: DllMain
0x1800039E0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180003990: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003948: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800038E0: KERNEL32_NULL_THUNK_DATA
0x180005000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001C88: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003960: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001980: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004258: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800038C0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800038D8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180003A80: "wmsgapi.dll" ??_C@_0M@PHCGJBGA@wmsgapi?4dll?$AA@
0x180003910: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x1800015F0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800039E8: "__cdecl _imp__initterm" __imp__initterm
0x1800038F8: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800038B8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800011A4: StringCchPrintfW
0x1800055A8: "__cdecl _onexitend" __onexitend
0x180003A18: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003950: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000111C: WlSecureDesktopSimulateSAS
0x1800039C8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003A38: "__cdecl _xi_a" __xi_a
0x1800039C0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180004294: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800055D0: "__cdecl pRawDllMain" _pRawDllMain
0x180003918: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x180001890: "__cdecl _security_check_cookie" __security_check_cookie
0x180003A30: "__cdecl _xc_z" __xc_z
0x180003970: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800038D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800039B8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800038C8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180003A90: "WmsgSendMessage" ??_C@_0BA@FHMHCMAO@WmsgSendMessage?$AA@
0x1800039A0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800042BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180003980: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180003A50: "__cdecl _guard_fids_table" __guard_fids_table
0x180003A10: msvcrt_NULL_THUNK_DATA
0x1800037A0: "__cdecl load_config_used" _load_config_used
0x1800038F0: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180003A00: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003940: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800038A8: "__cdecl _imp_LoadLibraryA" __imp_LoadLibraryA
0x180003988: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003978: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180003908: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180003998: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180001AB0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800039D8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800010C0: WlSecureDesktop_midl_user_allocate
0x180005008: "__cdecl _security_cookie" __security_cookie
0x1800042D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800055B0: "__cdecl _onexitbegin" __onexitbegin
0x1800039D0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180003928: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800042E4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180001010: SendSAS
0x1800019B4: "__cdecl _security_init_cookie" __security_init_cookie
0x180004244: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800039F0: "__cdecl _imp_malloc" __imp_malloc
0x1800042F8: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180003920: RPCRT4_NULL_THUNK_DATA
0x180001B00: "__cdecl _report_gsfailure" __report_gsfailure
0x1800055C0: "__cdecl _native_startup_state" __native_startup_state
0x1800038E8: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180004280: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800039F8: "__cdecl _imp_free" __imp_free
0x180001920: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800039B0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180003900: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x18000426C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001D0D: memset
0x18000430C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]