Generated by JEB on 2019/02/01

PE: C:\Windows\System32\NcaApi.dll Base=0x180000000 SHA-256=4FE700D249E8BCD4FB2C39AA17E7B7106FDA40B8E8F11DB4D5E0C380A764CF0F
PDB: NcaApi.pdb GUID={E991BB86-FAE2-FD97-DCA5F0ECCA6C3D40} Age=1

160 located named symbols:
0x180001B90: "unsigned long __cdecl Int_NcaInitSubscriptionRpcAsync(struct NCA_INTCLIENT_EVENTS_HANDLE_ * __ptr64)" ?Int_NcaInitSubscriptionRpcAsync@@YAKPEAUNCA_INTCLIENT_EVENTS_HANDLE_@@@Z
0x180003C64: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800058C0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180003AB0: "__cdecl FindPESection" _FindPESection
0x1800065CC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180001C10: "void __cdecl Int_NcaSubscribeCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?Int_NcaSubscribeCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x180007020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005DC0: "`string'" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x1800035A4: "__cdecl CRT_INIT" _CRT_INIT
0x180005748: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800057B8: "__cdecl _imp_CloseThreadpoolWait" __imp_CloseThreadpoolWait
0x180005800: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180001060: WppControlCallback
0x180003EC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800057A8: "__cdecl _imp_CreateThreadpoolWait" __imp_CreateThreadpoolWait
0x180005778: "__cdecl _imp_SetThreadpoolWait" __imp_SetThreadpoolWait
0x1800058A0: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800075F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil
0x1800058F0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002070: "unsigned long __cdecl NcaNetworkClose(void * __ptr64,void * __ptr64)" ?NcaNetworkClose@@YAKPEAX0@Z
0x180003AA4: "__cdecl XcptFilter" _XcptFilter
0x1800058F8: "__cdecl _xc_a" __xc_a
0x180005888: "__cdecl _imp_memset" __imp_memset
0x1800057B0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180003C55: "__cdecl initterm" _initterm
0x180007618: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180001900: "unsigned long __cdecl NcaEngineClose(void * __ptr64)" ?NcaEngineClose@@YAKPEAX@Z
0x180005760: "__cdecl _imp_Sleep" __imp_Sleep
0x180005918: "__cdecl _xi_z" __xi_z
0x180005730: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800058C8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180003A9E: "__cdecl _C_specific_handler" __C_specific_handler
0x180005788: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800075E8: WPP_REGISTRATION_GUIDS
0x180003218: WPP_SF_ssL
0x180003E40: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005E10: "`string'" ??_C@_0P@NFLPNNLK@NcaStringBuild?$AA@
0x1800075C0: WPP_MAIN_CB
0x180006608: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180003AAA: "__cdecl amsg_exit" _amsg_exit
0x180005E00: "`string'" ??_C@_08JIGOGMIK@NcaAlloc?$AA@
0x1800030C0: MIDL_nca_allocate
0x180005768: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000661C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0
0x180007608: "__cdecl _native_startup_lock" __native_startup_lock
0x1800010F0: DllMain
0x180005880: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800058B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800057D8: KERNEL32_NULL_THUNK_DATA
0x1800057C0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003E20: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005898: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180005DF0: "`string'" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180005750: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003B50: "__cdecl ValidateImageBase" _ValidateImageBase
0x180005980: "`string'" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180001000: WPP_SF_
0x180005798: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180005E20: WPP_f538e3dc944c310e96edfc86655d00ff_Traceguids
0x180005810: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x1800037E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005858: "__cdecl _imp__initterm" __imp__initterm
0x1800057E0: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800057A0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180002EC0: "unsigned long __cdecl NcaGetEvidenceCollectorResult(void * __ptr64,enum NCA_EVCOLLECTOR_,unsigned long,unsigned long,int * __ptr64)" ?NcaGetEvidenceCollectorResult@@YAKPEAXW4NCA_EVCOLLECTOR_@@KKPEAH@Z
0x1800075F8: "__cdecl _onexitend" __onexitend
0x1800058E8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800030F0: MIDL_nca_free
0x180005DE0: WPP_ThisDir_CTLGUID_NcaApi
0x1800057D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800015C0: "unsigned long __cdecl Int_NcaCreateConnectionHandle(unsigned long,struct NCA_INTCLIENT_ENGINE_HANDLE_ * __ptr64)" ?Int_NcaCreateConnectionHandle@@YAKKPEAUNCA_INTCLIENT_ENGINE_HANDLE_@@@Z
0x180005908: "__cdecl _xi_a" __xi_a
0x180005738: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005840: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800030F8: NcaAlloc
0x180007000: WPP_GLOBAL_Control
0x180001020: WPP_SF_D
0x180001020: WPP_SF_d
0x180007620: "__cdecl pRawDllMain" _pRawDllMain
0x180002D10: "unsigned long __cdecl NcaExecuteAndCaptureLogs(void * __ptr64,unsigned short const * __ptr64)" ?NcaExecuteAndCaptureLogs@@YAKPEAXPEBG@Z
0x180003A80: "__cdecl _security_check_cookie" __security_check_cookie
0x180005900: "__cdecl _xc_z" __xc_z
0x180005DD0: WPP_f9a6c093474b33997658b49d4e8d0eeb_Traceguids
0x180005740: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800058D8: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180005850: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA
0x180005790: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180002740: "unsigned long __cdecl NcaStatusEventUnsubscribe(void * __ptr64,void * __ptr64)" ?NcaStatusEventUnsubscribe@@YAKPEAX0@Z
0x180005848: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x180001B20: "void __cdecl Int_NcaEventHandleRelease(struct NCA_INTCLIENT_EVENTS_HANDLE_ * __ptr64)" ?Int_NcaEventHandleRelease@@YAXPEAUNCA_INTCLIENT_EVENTS_HANDLE_@@@Z
0x1800016F0: "unsigned long __cdecl NcaEngineOpen(void * __ptr64 * __ptr64)" ?NcaEngineOpen@@YAKPEAPEAX@Z
0x180005808: "__cdecl _imp_RpcBindingSetOption" __imp_RpcBindingSetOption
0x180005920: "__cdecl _guard_fids_table" __guard_fids_table
0x180005838: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x180005890: msvcrt_NULL_THUNK_DATA
0x180005630: "__cdecl load_config_used" _load_config_used
0x1800057F8: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x180002320: "unsigned long __cdecl NcaStatusEventSubscribe(void * __ptr64,void (__cdecl*)(void * __ptr64,struct NCA_STATUS_EVENT_ const * __ptr64),void * __ptr64,void * __ptr64 * __ptr64)" ?NcaStatusEventSubscribe@@YAKPEAXP6AX0PEBUNCA_STATUS_EVENT_@@@Z0PEAPEAX@Z
0x1800057E8: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180005870: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800057C8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800058B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005770: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800058D0: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x180005818: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1800058A8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003C60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002B80: "unsigned long __cdecl NcaToggleNamePreferenceState(void * __ptr64)" ?NcaToggleNamePreferenceState@@YAKPEAX@Z
0x180003120: NcaFree
0x180005878: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800058E0: ntdll_NULL_THUNK_DATA
0x180003298: NcaStringBuild
0x180001E20: "unsigned long __cdecl NcaNetworkOpen(void * __ptr64,struct _GUID const * __ptr64,void * __ptr64 * __ptr64)" ?NcaNetworkOpen@@YAKPEAXPEBU_GUID@@PEAPEAX@Z
0x180007018: "__cdecl _security_cookie" __security_cookie
0x180005780: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180007600: "__cdecl _onexitbegin" __onexitbegin
0x1800028F0: "unsigned long __cdecl NcaGetConfig(void * __ptr64,enum NCA_CONFIG_,void * __ptr64,unsigned long * __ptr64)" ?NcaGetConfig@@YAKPEAXW4NCA_CONFIG_@@0PEAK@Z
0x180005758: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800065F4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180003B80: "__cdecl _security_init_cookie" __security_init_cookie
0x1800065B8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800011F4: "unsigned long __cdecl Int_NcaLocalRpcBindingCreate(void * __ptr64 * __ptr64)" ?Int_NcaLocalRpcBindingCreate@@YAKPEAPEAX@Z
0x180005860: "__cdecl _imp_malloc" __imp_malloc
0x1800065E0: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180003514: NcaReportErrorAsWinError
0x180005830: RPCRT4_NULL_THUNK_DATA
0x180003CA0: "__cdecl _report_gsfailure" __report_gsfailure
0x180005820: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x180007610: "__cdecl _native_startup_state" __native_startup_state
0x180001684: "void __cdecl Int_NcaCleanupClientConnectionHandle(struct NCA_INTCLIENT_ENGINE_HANDLE_ * __ptr64)" ?Int_NcaCleanupClientConnectionHandle@@YAXPEAUNCA_INTCLIENT_ENGINE_HANDLE_@@@Z
0x1800034AC: NcaReportReturnError
0x180005828: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x1800031B4: WPP_SF_sD
0x180005868: "__cdecl _imp_free" __imp_free
0x180003B00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800057F0: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x1800075B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUxorvmgUlyquivUznwGEUkivxlnkOlyq@NcaApi" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUxorvmgUlyquivUznwGEUkivxlnkOlyq@NcaApi
0x180003148: WPP_SF_S
0x180003E9B: memset
0x180006630: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]