Generated by JEB on 2019/08/01

PE: C:\Windows\System32\dsparse.dll Base=0x180000000 SHA-256=67ACD93C7961EB8F5C5DFBE8988881D3A930BFCCA5FA230CE9183A652899FECD
PDB: dsparse.pdb GUID={AA2F1A52-D0B4-71AB-D16FF160F03BF8D1} Age=1

209 located named symbols:
0x1800085C0: "__cdecl _hmod__WS2_32_dll" __hmod__WS2_32_dll
0x180006240: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180006468: "%hu.%hu.%hu.%hu" ??_C@_1CA@EEKMHEGJ@?$AA?$CF?$AAh?$AAu?$AA?4?$AA?$CF?$AAh?$AAu?$AA?4?$AA?$CF?$AAh?$AAu?$AA?4?$AA?$CF?$AAh?$AAu?$AA?$AA@
0x180001A1C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001820: "__cdecl FindPESection" _FindPESection
0x1800055D0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800074DC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800012FC: "__cdecl CRT_INIT" _CRT_INIT
0x180006190: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800026B0: WppControlCallback
0x180001E20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800062C0: "__cdecl _imp_wcstoul" __imp_wcstoul
0x180006538: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003620: DsMakeSpnA
0x180007400: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006170: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800062A8: "__cdecl _imp_wcschr" __imp_wcschr
0x1800011B0: WppInitUm
0x180004100: DsCrackUnquotedMangledRdnW
0x180006308: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004360: DsIsMangledRdnValueW
0x1800064A0: "CNF" ??_C@_17LGOCIJGF@?$AAC?$AAN?$AAF?$AA?$AA@
0x180001804: "__cdecl XcptFilter" _XcptFilter
0x180006310: "__cdecl _xc_a" __xc_a
0x180003C0C: WPP_SF_SSSSd
0x180003370: DsMakeSpn2W
0x18000A000: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x1800063BC: "__cdecl _guard_iat_table" __guard_iat_table
0x180001DF8: memcpy
0x1800045F0: DsUnquoteRdnValueA
0x1800062E0: "__cdecl _imp_memset" __imp_memset
0x1800019F7: "__cdecl initterm" _initterm
0x180006228: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180006490: WPP_a5f56f795acc324b7e129e5316cd165c_Traceguids
0x180007464: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800085E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180006200: "__cdecl _imp_Sleep" __imp_Sleep
0x180006330: "__cdecl _xi_z" __xi_z
0x180006148: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001A03: "__cdecl _C_specific_handler" __C_specific_handler
0x180008628: WPP_REGISTRATION_GUIDS
0x18000190F: malloc
0x180006290: "__cdecl _imp__wtoi" __imp__wtoi
0x180001D08: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800042F0: DsIsMangledRdnValueA
0x1800061F8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180008600: WPP_MAIN_CB
0x180001810: "__cdecl amsg_exit" _amsg_exit
0x180006530: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800062A0: "__cdecl _imp_iswdigit" __imp_iswdigit
0x180007144: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WS2_32_dll" __DELAY_IMPORT_DESCRIPTOR_WS2_32_dll
0x1800061E0: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1800062B0: "__cdecl _imp_towlower" __imp_towlower
0x180004760: DsUnquoteRdnValueW
0x180006238: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180006158: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180006248: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1800061A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800085D8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001C74: DllMain
0x180004DB4: QuoteRDNValue
0x180006118: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x180001D6C: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x180004814: AllocConvertWide
0x1800074A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180006270: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800061C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180006180: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180008010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001CE4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800063D0: "__cdecl _sz_WS2_32_dll" __sz_WS2_32_dll
0x180007190: WS2_32_NULL_THUNK_DATA_DLN
0x180007198: WS2_32_NULL_THUNK_DATA_DLB
0x18000A008: WS2_32_NULL_THUNK_DATA_DLA
0x180006458: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180007504: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180006198: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180006448: WPP_ThisDir_CTLGUID_DSPARSELIB
0x180006530: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800018D0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180001C5F: "__cdecl _imp_load_WSACleanup" __imp_load_WSACleanup
0x180007414: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180003B68: WPP_SF_
0x1800061E8: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180007164: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001540: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180006278: "__cdecl _imp__initterm" __imp__initterm
0x1800074F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180006288: "__cdecl _imp_swscanf_s" __imp_swscanf_s
0x180003820: DsMakeSpnW
0x180004080: DsCrackUnquotedMangledRdnA
0x1800085C8: "__cdecl _onexitend" __onexitend
0x1800049C4: GetRDN
0x180006300: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180006188: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800062B8: "__cdecl _imp_wcstol" __imp_wcstol
0x180006220: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180006320: "__cdecl _xi_a" __xi_a
0x180006210: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180006138: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180006298: "__cdecl _imp__itow_s" __imp__itow_s
0x180008000: WPP_GLOBAL_Control
0x1800063DC: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180007450: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800085F0: "__cdecl pRawDllMain" _pRawDllMain
0x180002740: DsCrackSpn2A
0x1800017E0: "__cdecl _security_check_cookie" __security_check_cookie
0x180006318: "__cdecl _xc_z" __xc_z
0x1800074B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800061A8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180001240: WppCleanupUm
0x180006218: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003860: LocalAllocCchW
0x180006160: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180006128: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180004580: DsQuoteRdnValueW
0x180003160: DsCrackSpnW
0x180002E50: DsCrackSpnA
0x180004210: DsIsMangledDnA
0x1800061D8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800012A0: TerminateWinsockIfNeeded
0x1800061F0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180007478: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800061B8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180006338: "__cdecl _guard_fids_table" __guard_fids_table
0x1800062C8: "__cdecl _imp_iswxdigit" __imp_iswxdigit
0x1800062E8: msvcrt_NULL_THUNK_DATA
0x180006010: "__cdecl load_config_used" _load_config_used
0x180006140: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180006130: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800062D8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003958: StringCchCopyNExW
0x180006178: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000520C: UnquoteRDNValue
0x1800061D0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800061B0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000403C: extractString
0x180001903: free
0x1800062F0: "__cdecl _imp_RtlIpv6StringToAddressExW" __imp_RtlIpv6StringToAddressExW
0x1800061C0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180006538: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180001A10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004270: DsIsMangledDnW
0x180006488: ":" ??_C@_13EBCNDICG@?$AA?3?$AA?$AA@
0x1800048E0: AllocConvertWideBuffer
0x180006258: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180004F9C: RDNReasonMangledEx
0x180006260: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800062F8: ntdll_NULL_THUNK_DATA
0x180006268: "__cdecl _imp_memcpy" __imp_memcpy
0x180004A70: GetTopNameComponent
0x180003894: StringCchCopyExW
0x180006230: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180006250: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180008018: "__cdecl _security_cookie" __security_cookie
0x1800050C8: StepToNextDNSep
0x180006168: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18000748C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800085D0: "__cdecl _onexitbegin" __onexitbegin
0x180006150: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000191C: "__cdecl _security_init_cookie" __security_init_cookie
0x1800073EC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800041A0: DsGetRdnW
0x180006280: "__cdecl _imp_malloc" __imp_malloc
0x1800074C8: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180006120: RPCRT4_NULL_THUNK_DATA
0x180006440: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x180001A60: "__cdecl _report_gsfailure" __report_gsfailure
0x1800085E0: "__cdecl _native_startup_state" __native_startup_state
0x180001010: DsCrackSpn2W
0x1800064A8: "DEL" ??_C@_17LJFNJANL@?$AAD?$AAE?$AAL?$AA?$AA@
0x180002A80: DsCrackSpn3W
0x180001BE0: "__cdecl _tailMerge_ws2_32_dll" __tailMerge_ws2_32_dll
0x18000743C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800062D0: "__cdecl _imp_free" __imp_free
0x180001870: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180006208: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180002BE0: DsCrackSpn4W
0x180007428: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180004410: DsQuoteRdnValueA
0x180003B98: WPP_SF_S
0x180001E04: memset
0x180007518: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]