Generated by JEB on 2019/08/01

PE: C:\Windows\System32\mpnotify.exe Base=0x140000000 SHA-256=11AEEDEADEF669487F4445116F617924EC4355D33EFF895509F4A46EEC8EF217
PDB: mpnotify.pdb GUID={727DA4C6-DD89-9A93-B3E0B747AE4A8D70} Age=1

199 located named symbols:
0x14000259C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140001CD0: MPDecodeSecret
0x1400023C0: "__cdecl FindPESection" _FindPESection
0x140003558: "__cdecl _imp_CredIsProtectedW" __imp_CredIsProtectedW
0x140001008: StringCchCatW
0x140001E70: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x140004204: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140003770: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1400039C0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x1400036E0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140003628: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x140001AD4: WinMain
0x140003660: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x140002970: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140003640: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x140005048: "__cdecl commode" _commode
0x140003B68: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x140003668: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x140004084: "__cdecl _DELAY_IMPORT_DESCRIPTOR_MPR_dll" __DELAY_IMPORT_DESCRIPTOR_MPR_dll
0x1400035C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1400035D8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140002290: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140003800: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140002780: NdrServerCall2
0x140005054: "__cdecl fmode" _fmode
0x140003638: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x1400022EE: "__cdecl XcptFilter" _XcptFilter
0x140003808: "__cdecl _xc_a" __xc_a
0x1400036E8: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140003880: "__cdecl _guard_iat_table" __guard_iat_table
0x140002940: memcpy
0x1400037B0: "__cdecl _imp__acmdln" __imp__acmdln
0x1400037D8: "__cdecl _imp_memset" __imp_memset
0x1400035B0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14000257F: "__cdecl initterm" _initterm
0x1400041DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140005600: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140003728: "__cdecl _imp_Sleep" __imp_Sleep
0x140003838: "__cdecl _xi_z" __xi_z
0x1400036A0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140002242: "__cdecl _C_specific_handler" __C_specific_handler
0x140001160: MIDL_user_free
0x140003590: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140003960: "MSV1_0:Interactive" ??_C@_1CG@JBLKCOHK@?$AAM?$AAS?$AAV?$AA1?$AA_?$AA0?$AA?3?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x140003578: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140002850: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000144C: IsRpcCallerLocalSystem
0x1400023A3: "__cdecl amsg_exit" _amsg_exit
0x140003B60: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x140003790: "__cdecl _imp_exit" __imp_exit
0x1400036B0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400040D8: MPR_NULL_THUNK_DATA_DLN
0x1400036D8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400055F0: "__cdecl _native_startup_lock" __native_startup_lock
0x140003680: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x140003630: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x1400022D0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400028B4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x14000118C: NotifySpecificProvider
0x1400037C0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140003708: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400036C0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140003918: "ProviderPath" ??_C@_1BK@GMKIPMAG@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140003618: KERNEL32_NULL_THUNK_DATA
0x140007008: "__cdecl _imp_WNetLogonNotify" __imp_WNetLogonNotify
0x1400035B8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000282C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140003780: "__cdecl _imp__commode" __imp__commode
0x140003760: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140004128: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400036C8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400035A0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140003B60: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140002470: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400055D0: "__cdecl _hmod__MPR_dll" __hmod__MPR_dll
0x1400041B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1400035E0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140003600: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x1400040A4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140005050: "__cdecl newmode" _newmode
0x140002770: NdrServerCallAll
0x140003758: "__cdecl _imp__initterm" __imp__initterm
0x140003778: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140003658: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x1400023B0: "__cdecl setargv" _setargv
0x1400010A8: StringCchPrintfW
0x140003988: "Microsoft Windows Network" ??_C@_1DE@IPKMBBIK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?$AA@
0x1400055E0: "__cdecl _onexitend" __onexitend
0x140003798: "__cdecl _imp__exit" __imp__exit
0x1400037F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400039D0: "1f2a047b-96d8-488e-bc9b-1d5e%08X" ??_C@_1EC@KKGEPHNA@?$AA1?$AAf?$AA2?$AAa?$AA0?$AA4?$AA7?$AAb?$AA?9?$AA9?$AA6?$AAd?$AA8?$AA?9?$AA4?$AA8?$AA8?$AAe?$AA?9?$AAb?$AAc?$AA9?$AAb?$AA?9?$AA1?$AAd?$AA5?$AAe?$AA?$CF?$AA0?$AA8?$AAX@
0x1400036D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400037E8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x140003748: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140003820: "__cdecl _xi_a" __xi_a
0x140003740: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140003610: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400023B0: "__cdecl matherr" _matherr
0x140003670: "__cdecl _imp_RpcServerUseProtseqW" __imp_RpcServerUseProtseqW
0x14000418C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400017B0: ChangePasswordNotify
0x14000278C: "__cdecl _imp_load_WNetLogonNotify" __imp_load_WNetLogonNotify
0x140001530: LogonNotify
0x140004118: MPR_NULL_THUNK_DATA_DLB
0x140002260: "__cdecl _security_check_cookie" __security_check_cookie
0x140003818: "__cdecl _xc_z" __xc_z
0x1400036F0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400035E8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140003938: "NPPasswordChangeNotify" ??_C@_0BH@GEALDDC@NPPasswordChangeNotify?$AA@
0x140003788: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140003738: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140002798: "__cdecl _tailMerge_mpr_dll" __tailMerge_mpr_dll
0x1400035A8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140003608: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1400035F8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140003720: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140007010: MPR_NULL_THUNK_DATA_DLA
0x1400041F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140003700: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140003840: "__cdecl _guard_fids_table" __guard_fids_table
0x1400037E0: msvcrt_NULL_THUNK_DATA
0x140003450: "__cdecl load_config_used" _load_config_used
0x140003768: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140003688: "__cdecl _imp_RpcBindingInqAuthClientW" __imp_RpcBindingInqAuthClientW
0x140003718: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400036F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000504C: "__cdecl dowildcard" _dowildcard
0x140003570: "__cdecl _imp_CredUnprotectW" __imp_CredUnprotectW
0x140003710: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140003B68: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1400038A0: "System\CurrentControlSet\Service" ??_C@_1EG@GFAIDJBN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140001130: MIDL_user_allocate
0x140002590: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140003598: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1400022FC: RtlpImageNtHeader
0x1400038F0: "\networkprovider" ??_C@_1CC@ENPJIJHJ@?$AA?2?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x140002817: "__cdecl _imp_load_WNetPasswordChangeNotify" __imp_load_WNetPasswordChangeNotify
0x1400036B8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140003648: "__cdecl _imp_RpcServerListen" __imp_RpcServerListen
0x140003A18: LocalSystem
0x140003690: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x1400037D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1400037F0: ntdll_NULL_THUNK_DATA
0x1400037A0: "__cdecl _imp_memcpy" __imp_memcpy
0x1400037B8: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140005008: "__cdecl _security_cookie" __security_cookie
0x140003580: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140003568: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x1400035C8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400035F0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140005000: "__cdecl _defaultmatherr" __defaultmatherr
0x1400041A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400035D0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1400055E8: "__cdecl _onexitbegin" __onexitbegin
0x140003678: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x1400037C8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140003650: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x1400036A8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001FE0: WinMainCRTStartup
0x14000413C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140003560: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400024A4: "__cdecl _security_init_cookie" __security_init_cookie
0x1400037A8: "__cdecl _imp__cexit" __imp__cexit
0x140002358: "__cdecl get_image_app_type" _get_image_app_type
0x140003950: "Winsta0" ??_C@_1BA@MDOLMOGL@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?$AA@
0x140004150: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140003588: ADVAPI32_NULL_THUNK_DATA
0x140004164: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x140003698: RPCRT4_NULL_THUNK_DATA
0x1400025E0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400055F8: "__cdecl _native_startup_state" __native_startup_state
0x140003750: "__cdecl _imp__fmode" __imp__fmode
0x140007000: "__cdecl _imp_WNetPasswordChangeNotify" __imp_WNetPasswordChangeNotify
0x1400041C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140003620: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x140002410: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140003730: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x140004178: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x14000294C: memset
0x140004218: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140003890: "__cdecl _sz_MPR_dll" __sz_MPR_dll

[JEB Decompiler by PNF Software]