Generated by JEB on 2019/08/01

PE: C:\Windows\System32\NcaApi.dll Base=0x180000000 SHA-256=DA91575EBC3F63E28A012DCAC9811F01F29F60E29BE8285355D06BB58C232E0A
PDB: NcaApi.pdb GUID={9BCAB39C-EA81-CF0A-FE7B5FC6BA5A5F74} Age=1

160 located named symbols:
0x180001BB0: "unsigned long __cdecl Int_NcaInitSubscriptionRpcAsync(struct NCA_INTCLIENT_EVENTS_HANDLE_ * __ptr64)" ?Int_NcaInitSubscriptionRpcAsync@@YAKPEAUNCA_INTCLIENT_EVENTS_HANDLE_@@@Z
0x180003D0C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800058C8: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180003B30: "__cdecl FindPESection" _FindPESection
0x1800065DC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180001C30: "void __cdecl Int_NcaSubscribeCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?Int_NcaSubscribeCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x180007020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180005DD0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x1800035FC: "__cdecl CRT_INIT" _CRT_INIT
0x180005750: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800057C0: "__cdecl _imp_CloseThreadpoolWait" __imp_CloseThreadpoolWait
0x180005808: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180001070: WppControlCallback
0x180003F80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800057B0: "__cdecl _imp_CreateThreadpoolWait" __imp_CreateThreadpoolWait
0x180005780: "__cdecl _imp_SetThreadpoolWait" __imp_SetThreadpoolWait
0x1800058A8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800075F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil
0x1800058F8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002090: "unsigned long __cdecl NcaNetworkClose(void * __ptr64,void * __ptr64)" ?NcaNetworkClose@@YAKPEAX0@Z
0x180003B10: "__cdecl XcptFilter" _XcptFilter
0x180005900: "__cdecl _xc_a" __xc_a
0x180005890: "__cdecl _imp_memset" __imp_memset
0x1800057B8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180003CEF: "__cdecl initterm" _initterm
0x180007618: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180001910: "unsigned long __cdecl NcaEngineClose(void * __ptr64)" ?NcaEngineClose@@YAKPEAX@Z
0x180005768: "__cdecl _imp_Sleep" __imp_Sleep
0x180005920: "__cdecl _xi_z" __xi_z
0x180005738: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800058D0: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180003B04: "__cdecl _C_specific_handler" __C_specific_handler
0x180005790: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800075E8: WPP_REGISTRATION_GUIDS
0x180003258: WPP_SF_ssL
0x180003EFC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005E20: "NcaStringBuild" ??_C@_0P@NFLPNNLK@NcaStringBuild?$AA@
0x1800075C0: WPP_MAIN_CB
0x180006618: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180003B1C: "__cdecl amsg_exit" _amsg_exit
0x180005E10: "NcaAlloc" ??_C@_08JIGOGMIK@NcaAlloc?$AA@
0x1800030E0: MIDL_nca_allocate
0x180005770: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000662C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0
0x180007608: "__cdecl _native_startup_lock" __native_startup_lock
0x180001100: DllMain
0x180005888: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800058C0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800057E0: KERNEL32_NULL_THUNK_DATA
0x1800057C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003ED8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800058A0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180005E00: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180005758: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003BE0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180005990: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180001008: WPP_SF_
0x1800057A0: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180005E30: WPP_f538e3dc944c310e96edfc86655d00ff_Traceguids
0x180005818: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180003840: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005860: "__cdecl _imp__initterm" __imp__initterm
0x1800057E8: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800057A8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180002EE0: "unsigned long __cdecl NcaGetEvidenceCollectorResult(void * __ptr64,enum NCA_EVCOLLECTOR_,unsigned long,unsigned long,int * __ptr64)" ?NcaGetEvidenceCollectorResult@@YAKPEAXW4NCA_EVCOLLECTOR_@@KKPEAH@Z
0x1800075F8: "__cdecl _onexitend" __onexitend
0x1800058F0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003110: MIDL_nca_free
0x180005DF0: WPP_ThisDir_CTLGUID_NcaApi
0x1800057D8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800015D8: "unsigned long __cdecl Int_NcaCreateConnectionHandle(unsigned long,struct NCA_INTCLIENT_ENGINE_HANDLE_ * __ptr64)" ?Int_NcaCreateConnectionHandle@@YAKKPEAUNCA_INTCLIENT_ENGINE_HANDLE_@@@Z
0x180005910: "__cdecl _xi_a" __xi_a
0x180005740: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005848: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000311C: NcaAlloc
0x180007000: WPP_GLOBAL_Control
0x18000102C: WPP_SF_D
0x18000102C: WPP_SF_d
0x180007620: "__cdecl pRawDllMain" _pRawDllMain
0x180002D30: "unsigned long __cdecl NcaExecuteAndCaptureLogs(void * __ptr64,unsigned short const * __ptr64)" ?NcaExecuteAndCaptureLogs@@YAKPEAXPEBG@Z
0x180003AE0: "__cdecl _security_check_cookie" __security_check_cookie
0x180005908: "__cdecl _xc_z" __xc_z
0x180005DE0: WPP_f9a6c093474b33997658b49d4e8d0eeb_Traceguids
0x180005748: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800058E0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180005858: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA
0x180005798: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180002760: "unsigned long __cdecl NcaStatusEventUnsubscribe(void * __ptr64,void * __ptr64)" ?NcaStatusEventUnsubscribe@@YAKPEAX0@Z
0x180005850: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x180001B38: "void __cdecl Int_NcaEventHandleRelease(struct NCA_INTCLIENT_EVENTS_HANDLE_ * __ptr64)" ?Int_NcaEventHandleRelease@@YAXPEAUNCA_INTCLIENT_EVENTS_HANDLE_@@@Z
0x180001700: "unsigned long __cdecl NcaEngineOpen(void * __ptr64 * __ptr64)" ?NcaEngineOpen@@YAKPEAPEAX@Z
0x180005810: "__cdecl _imp_RpcBindingSetOption" __imp_RpcBindingSetOption
0x180005928: "__cdecl _guard_fids_table" __guard_fids_table
0x180005840: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x180005898: msvcrt_NULL_THUNK_DATA
0x180005630: "__cdecl load_config_used" _load_config_used
0x180005800: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x180002340: "unsigned long __cdecl NcaStatusEventSubscribe(void * __ptr64,void (__cdecl*)(void * __ptr64,struct NCA_STATUS_EVENT_ const * __ptr64),void * __ptr64,void * __ptr64 * __ptr64)" ?NcaStatusEventSubscribe@@YAKPEAXP6AX0PEBUNCA_STATUS_EVENT_@@@Z0PEAPEAX@Z
0x1800057F0: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180005878: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800057D0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800058B8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180005778: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800058D8: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x180005820: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1800058B0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003D00: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002BA0: "unsigned long __cdecl NcaToggleNamePreferenceState(void * __ptr64)" ?NcaToggleNamePreferenceState@@YAKPEAX@Z
0x180003148: NcaFree
0x180005880: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800058E8: ntdll_NULL_THUNK_DATA
0x1800032DC: NcaStringBuild
0x180001E40: "unsigned long __cdecl NcaNetworkOpen(void * __ptr64,struct _GUID const * __ptr64,void * __ptr64 * __ptr64)" ?NcaNetworkOpen@@YAKPEAXPEBU_GUID@@PEAPEAX@Z
0x180007018: "__cdecl _security_cookie" __security_cookie
0x180005788: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180007600: "__cdecl _onexitbegin" __onexitbegin
0x180002910: "unsigned long __cdecl NcaGetConfig(void * __ptr64,enum NCA_CONFIG_,void * __ptr64,unsigned long * __ptr64)" ?NcaGetConfig@@YAKPEAXW4NCA_CONFIG_@@0PEAK@Z
0x180005760: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180006604: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180003C14: "__cdecl _security_init_cookie" __security_init_cookie
0x1800065C8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180001208: "unsigned long __cdecl Int_NcaLocalRpcBindingCreate(void * __ptr64 * __ptr64)" ?Int_NcaLocalRpcBindingCreate@@YAKPEAPEAX@Z
0x180005868: "__cdecl _imp_malloc" __imp_malloc
0x1800065F0: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180003560: NcaReportErrorAsWinError
0x180005838: RPCRT4_NULL_THUNK_DATA
0x180003D50: "__cdecl _report_gsfailure" __report_gsfailure
0x180005828: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x180007610: "__cdecl _native_startup_state" __native_startup_state
0x1800016A0: "void __cdecl Int_NcaCleanupClientConnectionHandle(struct NCA_INTCLIENT_ENGINE_HANDLE_ * __ptr64)" ?Int_NcaCleanupClientConnectionHandle@@YAXPEAUNCA_INTCLIENT_ENGINE_HANDLE_@@@Z
0x1800034F4: NcaReportReturnError
0x180005830: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x1800031EC: WPP_SF_sD
0x180005870: "__cdecl _imp_free" __imp_free
0x180003B80: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800057F8: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x1800075B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUxorvmgUlyquivUznwGEUkivxlnkOlyq@NcaApi" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUxorvmgUlyquivUznwGEUkivxlnkOlyq@NcaApi
0x180003178: WPP_SF_S
0x180003F5D: memset
0x180006640: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]