Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rasadhlp.dll Base=0x180000000 SHA-256=8899B7C7268188F33BCB639CD58FB14DAB6E39A0EB5C4A0C587E779F74A03D15
PDB: rasadhlp.pdb GUID={90726800-D7A5-CDF2-56C7EFC0944B998F} Age=1

159 located named symbols:
0x1800055C0: "__cdecl _hmod__WS2_32_dll" __hmod__WS2_32_dll
0x18000195C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003178: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180001770: "__cdecl FindPESection" _FindPESection
0x180002990: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180003B90: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000124C: "__cdecl CRT_INIT" _CRT_INIT
0x1800031B8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800032B8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180005020: HostnameGuid
0x180001C80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800034B8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800032E0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002388: AcsHlpSendCommand
0x1800033E0: "dnsapi.dll" ??_C@_1BG@JPPKHNDJ@?$AAd?$AAn?$AAs?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180001754: "__cdecl XcptFilter" _XcptFilter
0x1800032E8: "__cdecl _xc_a" __xc_a
0x180003340: "__cdecl _guard_iat_table" __guard_iat_table
0x180001C59: memcpy
0x180003180: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180003290: "__cdecl _imp_memset" __imp_memset
0x180003218: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18000192F: "__cdecl initterm" _initterm
0x180003C6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800055E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003228: "__cdecl _imp_Sleep" __imp_Sleep
0x180003308: "__cdecl _xi_z" __xi_z
0x180003140: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000193B: "__cdecl _C_specific_handler" __C_specific_handler
0x180003160: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800031F0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180001BF8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180003280: "__cdecl _imp__strlwr" __imp__strlwr
0x180003208: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180001760: "__cdecl amsg_exit" _amsg_exit
0x1800034B4: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180003A60: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WS2_32_dll" __DELAY_IMPORT_DESCRIPTOR_WS2_32_dll
0x180003200: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1800031F8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180003150: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800033F8: "DnsValidateName_W" ??_C@_0BC@LCBNCGPO@DnsValidateName_W?$AA@
0x1800031C0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800055D8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001BB4: DllMain
0x180003C30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180003250: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800032A0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800031A0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180003148: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180005000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001BD4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180003370: "__cdecl _sz_WS2_32_dll" __sz_WS2_32_dll
0x180003AA8: WS2_32_NULL_THUNK_DATA_DLN
0x180003AB8: WS2_32_NULL_THUNK_DATA_DLB
0x180007008: WS2_32_NULL_THUNK_DATA_DLA
0x1800032B0: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x180003C94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800031B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003210: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180003BF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x1800034B4: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180001820: "__cdecl ValidateImageBase" _ValidateImageBase
0x180003BCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180003188: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180003A80: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001490: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180003278: "__cdecl _imp__initterm" __imp__initterm
0x180003C80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180003BE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180003410: "SYSTEM\CurrentControlSet\Service" ??_C@_1GK@OEECDHBJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1800055C8: "__cdecl _onexitend" __onexitend
0x1800032A8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800032D8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002580: pszDupWtoA
0x1800031A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003248: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800032F8: "__cdecl _xi_a" __xi_a
0x180003238: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003128: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180002170: AcsHlpNbConnection
0x180003C08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800055F0: "__cdecl pRawDllMain" _pRawDllMain
0x180001730: "__cdecl _security_check_cookie" __security_check_cookie
0x1800032F0: "__cdecl _xc_z" __xc_z
0x1800031C8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003190: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800027F0: WSNoteSuccessfulHostentLookup
0x180003240: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003170: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180003118: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800026D0: WSAttemptAutodialAddr
0x1800031D8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180003310: "__cdecl _guard_fids_table" __guard_fids_table
0x180003298: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x180003130: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180003120: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180003350: "\Device\RasAcd" ??_C@_1BO@BDPDNGHK@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAa?$AAs?$AAA?$AAc?$AAd?$AA?$AA@
0x180003260: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003198: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800032C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800031D0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800032C8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800034B8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180002638: ulGetAutodialSleepInterval
0x180001950: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180003BB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180003268: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800032D0: ntdll_NULL_THUNK_DATA
0x180003270: "__cdecl _imp_memcpy" __imp_memcpy
0x180003C44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180005008: "__cdecl _security_cookie" __security_cookie
0x1800031E0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180003158: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003168: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180003BA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800055D0: "__cdecl _onexitbegin" __onexitbegin
0x180003138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180003480: "NewTransportWaitInterval" ??_C@_1DC@CHDFPGD@?$AAN?$AAe?$AAw?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AAW?$AAa?$AAi?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1800031E8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180001854: "__cdecl _security_init_cookie" __security_init_cookie
0x180007000: "__cdecl _imp_inet_addr" __imp_inet_addr
0x180005030: AddressGuid
0x1800024FC: fIsDnsName
0x180003B7C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180001B26: "__cdecl _imp_load_inet_addr" __imp_load_inet_addr
0x180003288: "__cdecl _imp_malloc" __imp_malloc
0x1800019A0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800055E0: "__cdecl _native_startup_state" __native_startup_state
0x180001010: WSAttemptAutodialName
0x180001B32: "__cdecl _tailMerge_ws2_32_dll" __tailMerge_ws2_32_dll
0x180003C1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003258: "__cdecl _imp_free" __imp_free
0x1800017C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003230: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180003220: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180003C58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001C65: memset
0x180003CA8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]