Generated by JEB on 2019/08/01
PE: C:\Windows\System32\drivers\ndistapi.sys Base=0x1C0000000 SHA-256=26456C1B6E485F876898C596CCEA7F48D611D5F116A49E5350581F17B429792C
PDB: ndistapi.pdb GUID={291FD4D4-C965-7ACF-02E35B6BB5A78AB4} Age=1
147 located named symbols:
0x1C00041F0: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C0008768: SepSddlGetAclForString
0x1C0007168: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0005088: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0007020: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C00053C0: PfnIoCreateDeviceSecure
0x1C0007068: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C0007030: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0002EA0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0001560: NdisTapiRegisterProvider
0x1C0007028: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C00070C8: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C00070D0: "__cdecl _imp_IoDeviceObjectType" __imp_IoDeviceObjectType
0x1C00041F8: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C0007090: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0007120: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C00080F0: IoDevObjCreateDeviceSecure
0x1C0007110: "__cdecl _imp_wcschr" __imp_wcschr
0x1C0007198: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00053CC: PiRegStateDiscriptor
0x1C0007150: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1C0007118: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C000829C: IopDevObjApplyPostCreationSettings
0x1C00070B8: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C0007038: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C0001A30: NdisTapiIndicateStatus
0x1C0004218: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C0007098: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0007050: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C00020D8: SendProviderShutdown
0x1C00070A0: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C0002EC0: memcpy
0x1C0004120: "\Device\NdisTapi" ??_C@_1CC@LNPOGONP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAd?$AAi?$AAs?$AAT?$AAa?$AAp?$AAi?$AA?$AA@
0x1C0004148: SDDL_SYS_ALL_NS_ALL_buffer
0x1C00085B0: SepSddlDaclFromSDDLString
0x1C00070B0: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0007040: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0007108: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C0002DDD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0002EC0: memmove
0x1C0008434: SepSddlSecurityDescriptorFromSDDLString
0x1C0004180: "IoCreateDeviceSecure" ??_C@_1CK@LEEDIGFP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1C0002E2C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0002B30: DoLineCreateWork
0x1C0007060: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C0008C4C: SepSddlParseWideStringUlong
0x1C0004228: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C0004200: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C0001430: NdisTapiUnload
0x1C0007070: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0007138: "__cdecl _imp__snwprintf" __imp__snwprintf
0x1C0001F6C: SendProviderInitRequest
0x1C0007000: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C000429C: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C0007140: "__cdecl _imp_SeCaptureSecurityDescriptor" __imp_SeCaptureSecurityDescriptor
0x1C0002E08: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0007100: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0007010: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C0007078: "__cdecl _imp_IoAcquireCancelSpinLock" __imp_IoAcquireCancelSpinLock
0x1C0007128: "__cdecl _imp_SeExports" __imp_SeExports
0x1C00018C0: NdisTapiDeregisterProvider
0x1C0002924: DoGetProviderEventsWork
0x1C000986C: CmRegUtilWstrValueGetDword
0x1C00041B0: "IoValidateDeviceIoControlAccess" ??_C@_1EA@BAHCLPHE@?$AAI?$AAo?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0007130: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C0004208: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C00095F4: CmRegUtilUcValueSetUcString
0x1C0008370: SeSddlSecurityDescriptorFromSDDL
0x1C0007158: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x1C0004380: "\Registry\Machine\System\Current" ??_C@_1HC@DKINPPAJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0009738: CmRegUtilOpenExistingWstrKey
0x1C0008EFC: PiRegStateReadStackCreationSettingsFromKey
0x1C00090CC: PiRegStateOpenClassKey
0x1C0002D48: WdmlibRtlInitUnicodeStringEx
0x1C00053D0: DeviceExtension
0x1C0001E24: DoProviderInitComplete
0x1C0004300: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000B2D0: GsDriverEntry
0x1C0007190: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0008D50: PpRegStateReadCreateClassCreationSettings
0x1C0008690: SepSddlGetSidForString
0x1C0004318: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C0004400: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1C0001100: NdisTapiCleanup
0x1C0007178: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0004210: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0002DA0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C00021B4: DoIrpMjCloseWork
0x1C00071A0: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0004230: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C0005340: ProviderEventLookaside
0x1C000C000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00070D8: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C0004010: "__cdecl load_config_used" _load_config_used
0x1C0005090: NdisTapiOids
0x1C00042A0: "Properties" ??_C@_1BG@COALCEMK@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x1C00070E0: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0008B4C: SepSddlAddAceToAcl
0x1C00097B4: CmRegUtilCreateWstrKey
0x1C0007088: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00070C0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0007148: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1C00042C8: "NoDisplayClass" ??_C@_1BO@DAOBINHA@?$AAN?$AAo?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0007160: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1C000925C: PpRegStateUpdateStackCreationSettings
0x1C00070F0: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C0004330: "DeviceCharacteristics" ??_C@_1CM@DIJFBEC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0005300: PiRegStateSysAllInherittedSecurityDescriptor
0x1C00053C8: WdmlibInitialized
0x1C0007018: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C00022AC: DoIoctlConnectWork
0x1C0002DF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0008008: WdmlibIoCreateDeviceSecure
0x1C00042B8: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0004000: SDDL_SYS_ALL_NS_ALL
0x1C0007008: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0005080: "__cdecl _security_cookie" __security_cookie
0x1C00070A8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C0001C20: NdisTapiCompleteRequest
0x1C0004360: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1C000247C: DoIoctlQuerySetWork
0x1C00094B0: CmRegUtilUcValueGetFullBuffer
0x1C00042E8: "NoUseClass" ??_C@_1BG@OPOOGLJC@?$AAN?$AAo?$AAU?$AAs?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C000B304: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0007058: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00093C8: SeUtilSecurityInfoFromSecurityDescriptor
0x1C00070D0: IoDeviceObjectType
0x1C0004220: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C00070F8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0002DD0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0007048: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C0007170: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C0001340: NdisTapiDispatch
0x1C0007188: ntoskrnl_NULL_THUNK_DATA
0x1C0007080: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00070E8: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C000B008: DriverEntry
0x1C0001010: NdisTapiCancel
0x1C0007180: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0003200: memset
0x1C00071B4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
[JEB Decompiler by PNF Software]