Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winrnr.dll Base=0x180000000 SHA-256=31BE5043828B12A361262398C06AD7D45915F4928C6DE64203EA9F136A691441
PDB: winrnr.pdb GUID={06ACE621-D1C3-803F-AB1D362BF75F7372} Age=1

287 located named symbols:
0x1800099B0: "__cdecl _hmod__WS2_32_dll" __hmod__WS2_32_dll
0x180009198: g_ServiceInstance
0x180001624: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800099A8: "__cdecl _hmod__DNSAPI_dll" __hmod__DNSAPI_dll
0x1800017F0: "__cdecl FindPESection" _FindPESection
0x180009080: HostAddrByInetStringGuid
0x18000548C: StringCchCatW
0x180007310: "__cdecl _sz_WLDAP32_dll" __sz_WLDAP32_dll
0x180007270: "__cdecl _imp_EtwTraceMessageVa" __imp_EtwTraceMessageVa
0x1800055B0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800081F4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003D80: NTDS_GetServiceClassInfo
0x180009A38: pDnsAllocFunction
0x18000B080: "__cdecl _imp_ldap_delete_sW" __imp_ldap_delete_sW
0x180009070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180009120: g_ServiceClass
0x180003D40: NTDS_Cleanup
0x180003198: FindServiceInstance
0x18000111C: "__cdecl CRT_INIT" _CRT_INIT
0x180007188: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180005264: Dns_Free
0x180003690: FreeRnrLookup
0x180007198: "__cdecl _imp_TlsGetValue" __imp_TlsGetValue
0x1800093F8: HostNameGuid
0x180001E40: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180009A1C: g_TlsIndex
0x180003CF0: NSPStartup
0x1800040B0: NTDS_LookupServiceNext
0x1800051B0: Dns_AllocMemCopy
0x1800052E8: Dns_CreateConcatenatedString_W
0x180003B48: ModifyAddressInServiceInstance
0x180001BB0: "__cdecl _imp_load_ldap_memfreeW" __imp_load_ldap_memfreeW
0x180007190: "__cdecl _imp_TlsAlloc" __imp_TlsAlloc
0x1800029B4: AllocDnArray
0x180007400: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180009A20: g_pFullName
0x180007168: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180007260: "__cdecl _imp_wcschr" __imp_wcschr
0x18000B010: "__cdecl _imp_DnsQueryConfigAllocEx" __imp_DnsQueryConfigAllocEx
0x180001B7A: "__cdecl _imp_load_DnsNameCompare_W" __imp_load_DnsNameCompare_W
0x180007288: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800091B8: g_FilterObjectClass_Star
0x180002DF0: DisconnectFromLDAPDirectory
0x18000B068: "__cdecl _imp_ldap_modify_sW" __imp_ldap_modify_sW
0x180004240: NTDS_RemoveServiceClass
0x1800017D7: "__cdecl XcptFilter" _XcptFilter
0x180007290: "__cdecl _xc_a" __xc_a
0x180002D7C: CreateFilterElement
0x18000555C: FastWppTraceMessage
0x18000B020: "__cdecl _imp_ldap_openW" __imp_ldap_openW
0x1800050F8: StringCchCopyW
0x18000B0C8: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x180007308: "__cdecl _guard_iat_table" __guard_iat_table
0x180001E15: memcpy
0x18000B038: "__cdecl _imp_ldap_next_entry" __imp_ldap_next_entry
0x180007228: "__cdecl _imp_memset" __imp_memset
0x1800019AF: "__cdecl initterm" _initterm
0x1800053EC: Dns_CreateStringCopy_W
0x1800081E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800099D8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800071F8: "__cdecl _imp_Sleep" __imp_Sleep
0x1800029F8: BuildDnArrayFromResults
0x1800072B0: "__cdecl _xi_z" __xi_z
0x180007140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000B000: "__cdecl _imp_DnsNameCompare_W" __imp_DnsNameCompare_W
0x1800019BB: "__cdecl _C_specific_handler" __C_specific_handler
0x180009A28: g_pHostName
0x1800073D0: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1800091D8: g_WinsockAddresses
0x180001ACB: "__cdecl _imp_load_DnsQueryConfigAllocEx" __imp_load_DnsQueryConfigAllocEx
0x18000B088: "__cdecl _imp_ldap_msgfree" __imp_ldap_msgfree
0x180001DB4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800090D0: g_ObjectName
0x180009A30: pDnsFreeFunction
0x1800017E3: "__cdecl amsg_exit" _amsg_exit
0x1800073F8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180009170: g_FilterParenCnEquals
0x180004C18: ReadServiceClass
0x180007E58: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WS2_32_dll" __DELAY_IMPORT_DESCRIPTOR_WS2_32_dll
0x1800071B8: "__cdecl _imp_TlsSetValue" __imp_TlsSetValue
0x180005208: Dns_AllocZero
0x180009140: g_DefaultDn
0x1800093D0: g_FilterParenServiceClassIdEquals
0x180007150: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180009A00: g_rgFastWppEnabledFlagsPerLevel
0x180003E40: NTDS_InstallServiceClass
0x1800071B0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001C71: "__cdecl _imp_load_ldap_delete_sW" __imp_load_ldap_delete_sW
0x1800099C8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001D28: DllMain
0x180001CB9: "__cdecl _imp_load_ldap_add_sW" __imp_load_ldap_add_sW
0x1800073C0: ")" ??_C@_13DIBMAFH@?$AA?$CJ?$AA?$AA@
0x180009268: g_FilterObjectClass_ServiceClass
0x180001B9E: "__cdecl _imp_load_ldap_value_free_len" __imp_load_ldap_value_free_len
0x180005178: Dns_Alloc
0x180007230: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800071E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180007178: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18000B0B8: WLDAP32_NULL_THUNK_DATA_DLA
0x180009060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001D90: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800036EC: GetAddressCountFromServiceInstance
0x180007330: "__cdecl _sz_WS2_32_dll" __sz_WS2_32_dll
0x180007F78: WS2_32_NULL_THUNK_DATA_DLN
0x180008068: WS2_32_NULL_THUNK_DATA_DLB
0x18000B0E0: WS2_32_NULL_THUNK_DATA_DLA
0x18000B078: "__cdecl _imp_ldap_unbind" __imp_ldap_unbind
0x1800073D8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180008230: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180007180: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001A83: "__cdecl _imp_load_ldap_bind_sW" __imp_load_ldap_bind_sW
0x180009090: HostAddrByNameGuid
0x1800073F8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800018A0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180007E38: "__cdecl _DELAY_IMPORT_DESCRIPTOR_DNSAPI_dll" __DELAY_IMPORT_DESCRIPTOR_DNSAPI_dll
0x180003980: IsNameADn
0x180001C95: "__cdecl _imp_load_ldap_get_values_lenW" __imp_load_ldap_get_values_lenW
0x180002B18: ConnectToDefaultLDAPDirectory
0x180001D13: "__cdecl _imp_load_WSACleanup" __imp_load_WSACleanup
0x180007E18: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll" __DELAY_IMPORT_DESCRIPTOR_WLDAP32_dll
0x180007FF0: WLDAP32_NULL_THUNK_DATA_DLB
0x180008190: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800073A0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1800019F2: "__cdecl _tailMerge_wldap32_dll" __tailMerge_wldap32_dll
0x180006008: WPP_SF_
0x180007E78: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001CDD: "__cdecl _imp_load_ldap_escape_filter_elementW" __imp_load_ldap_escape_filter_elementW
0x180001360: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180007238: "__cdecl _imp__initterm" __imp__initterm
0x18000500C: ReleaseRecurseLock
0x180007148: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000821C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800050D4: SetError
0x1800090B0: g_Comment
0x1800073B0: "))" ??_C@_15LDKEOKBG@?$AA?$CJ?$AA?$CJ?$AA?$AA@
0x180009310: g_NtdsProviderPath
0x180001AA7: "__cdecl _imp_load_ldap_openW" __imp_load_ldap_openW
0x1800099B8: "__cdecl _onexitend" __onexitend
0x180007280: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000B048: "__cdecl _imp_ldap_count_entries" __imp_ldap_count_entries
0x1800071A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800024F4: AddServiceClass
0x180003820: InstallNTDSProvider
0x180007218: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800072A0: "__cdecl _xi_a" __xi_a
0x18000B0D8: "__cdecl _imp_WSCInstallNameSpace" __imp_WSCInstallNameSpace
0x1800090C8: g_FilterCnEquals
0x180007210: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180007128: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800099A0: "__cdecl _hmod__WLDAP32_dll" __hmod__WLDAP32_dll
0x180009240: g_ServiceClassInfo
0x1800073B8: "(|(" ??_C@_17KJCIBDBO@?$AA?$CI?$AA?$HM?$AA?$CI?$AA?$AA@
0x180009058: WPP_GLOBAL_Control
0x180001BC2: "__cdecl _imp_load_WSCUnInstallNameSpace" __imp_load_WSCUnInstallNameSpace
0x180008168: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180009358: g_WinsockServicesDn
0x1800099E0: "__cdecl pRawDllMain" _pRawDllMain
0x18000B098: "__cdecl _imp_ldap_escape_filter_elementW" __imp_ldap_escape_filter_elementW
0x1800090F8: g_FilterParenServiceVersionEquals
0x180001600: "__cdecl _security_check_cookie" __security_check_cookie
0x180007298: "__cdecl _xc_z" __xc_z
0x180008208: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800071C0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002FC0: FindServiceClass
0x1800090E0: g_DisplayName
0x18000B050: "__cdecl _imp_ldap_value_free_len" __imp_ldap_value_free_len
0x180002EE0: ExtractCsaddrFromBerval
0x180009230: g_NtdsProviderName
0x18000B058: "__cdecl _imp_ldap_memfreeW" __imp_ldap_memfreeW
0x180007208: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180009A18: "__cdecl _@@_PchSym_@00@UlhUlyqUznwGEuivUnrmrlUwmhUwmhoryUlyquivUznwGEUolxzoOlyq@dnslib" __@@_PchSym_@00@UlhUlyqUznwGEuivUnrmrlUwmhUwmhoryUlyquivUznwGEUolxzoOlyq@dnslib
0x180001C83: "__cdecl _imp_load_ldap_msgfree" __imp_load_ldap_msgfree
0x180007158: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180007118: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800092A0: g_ServiceVersion
0x180001CCB: "__cdecl _imp_load_ldap_count_values_len" __imp_load_ldap_count_values_len
0x1800073A8: "(&" ??_C@_15CAJLCJOF@?$AA?$CI?$AA?$CG?$AA?$AA@
0x1800071F0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180001B56: "__cdecl _imp_load_ldap_unbind" __imp_load_ldap_unbind
0x1800081B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800071D0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000B040: "__cdecl _imp_ldap_bind_sW" __imp_ldap_bind_sW
0x1800072B8: "__cdecl _guard_fids_table" __guard_fids_table
0x180007268: msvcrt_NULL_THUNK_DATA
0x180007010: "__cdecl load_config_used" _load_config_used
0x180001AB9: "__cdecl _imp_load_ldap_first_entry" __imp_load_ldap_first_entry
0x18000B0A8: "__cdecl _imp_ldap_count_values_len" __imp_ldap_count_values_len
0x180007130: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180007120: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180001B68: "__cdecl _imp_load_ldap_next_entry" __imp_load_ldap_next_entry
0x180007F50: WLDAP32_NULL_THUNK_DATA_DLN
0x1800037F4: GetRecurseLock
0x18000B008: "__cdecl _imp_DnsApiFree" __imp_DnsApiFree
0x180007250: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800090A0: ServiceByNameGuid
0x180009394: g_CommonName
0x180007170: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800071D8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800071C8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800093A0: g_FilterObjectClass_Container
0x180002E50: DoLdapSearch
0x1800071E0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180007400: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800019D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800073C8: ")))" ??_C@_17IBHNONKB@?$AA?$CJ?$AA?$CJ?$AA?$CJ?$AA?$AA@
0x18000B0A0: "__cdecl _imp_ldap_add_sW" __imp_ldap_add_sW
0x180001A71: "__cdecl _imp_load_ldap_value_freeW" __imp_load_ldap_value_freeW
0x180001CA7: "__cdecl _imp_load_WSCInstallNameSpace" __imp_load_WSCInstallNameSpace
0x18000B0D0: "__cdecl _imp_WSCUnInstallNameSpace" __imp_WSCUnInstallNameSpace
0x18000B070: "__cdecl _imp_ldap_get_valuesW" __imp_ldap_get_valuesW
0x1800092D0: g_FilterObjectClass_ServiceInstance
0x1800073A4: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x180007258: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180007278: ntdll_NULL_THUNK_DATA
0x180007220: "__cdecl _imp_memcpy" __imp_memcpy
0x180001C5F: "__cdecl _imp_load_WSAStartup" __imp_load_WSAStartup
0x180009068: "__cdecl _security_cookie" __security_cookie
0x180005040: RemoveNTDSProvider
0x180001B8C: "__cdecl _imp_load_ldap_count_entries" __imp_load_ldap_count_entries
0x180007160: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800045C8: ReadQuerySet
0x18000817C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180009220: g_NtdsProviderGuid
0x1800099C0: "__cdecl _onexitbegin" __onexitbegin
0x180009000: nsrVector
0x18000B028: "__cdecl _imp_ldap_first_entry" __imp_ldap_first_entry
0x180007138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800018D4: "__cdecl _security_init_cookie" __security_init_cookie
0x18000B060: "__cdecl _imp_ldap_value_freeW" __imp_ldap_value_freeW
0x18000B030: "__cdecl _imp_ldap_get_dnW" __imp_ldap_get_dnW
0x180001010: NTDS_LookupServiceBegin
0x180009200: g_ServiceClassId
0x180008154: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800073E8: WPP_a0c6eb7f52c73eca0978e181c2176be8_Traceguids
0x180001D01: "__cdecl _imp_load_ldap_modify_sW" __imp_load_ldap_modify_sW
0x180007240: "__cdecl _imp_malloc" __imp_malloc
0x180004360: NTDS_SetService
0x180003648: FreeDnArray
0x180001660: "__cdecl _report_gsfailure" __report_gsfailure
0x1800023A0: AddClassInfoToServiceClass
0x1800019E6: "__cdecl _imp_load_ldap_search_sW" __imp_load_ldap_search_sW
0x1800099D0: "__cdecl _native_startup_state" __native_startup_state
0x180009180: g_ObjectClass
0x1800026C8: AddServiceInstance
0x180001AD7: "__cdecl _tailMerge_dnsapi_dll" __tailMerge_dnsapi_dll
0x180004060: NTDS_LookupServiceEnd
0x180001C4D: "__cdecl _imp_load_ldap_get_valuesW" __imp_load_ldap_get_valuesW
0x180003474: FindSubordinateContainers
0x180001CEF: "__cdecl _imp_load_DnsApiFree" __imp_load_DnsApiFree
0x18000B0B0: "__cdecl _imp_ldap_search_sW" __imp_ldap_search_sW
0x180005298: FlatBuf_Arg_Reserve
0x180001BCE: "__cdecl _tailMerge_ws2_32_dll" __tailMerge_ws2_32_dll
0x1800081CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180007320: "__cdecl _sz_DNSAPI_dll" __sz_DNSAPI_dll
0x180007248: "__cdecl _imp_free" __imp_free
0x18000B018: DNSAPI_NULL_THUNK_DATA_DLA
0x180008028: DNSAPI_NULL_THUNK_DATA_DLB
0x180001840: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180007200: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800071A0: "__cdecl _imp_TlsFree" __imp_TlsFree
0x180007EB0: DNSAPI_NULL_THUNK_DATA_DLN
0x18000B090: "__cdecl _imp_ldap_get_values_lenW" __imp_ldap_get_values_lenW
0x180001A95: "__cdecl _imp_load_ldap_get_dnW" __imp_load_ldap_get_dnW
0x1800081A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000B0C0: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x180006020: WPP_SF_S
0x180001E21: memset
0x180008244: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]