Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drprov.dll Base=0x180000000 SHA-256=ED43E7F8810FB89578C830391EFEE45D2E64B178F230D2197D8FAC802D264286
PDB: drprov.pdb GUID={8BD7BD3F-520D-D3E2-9C059A1C5E542E24} Age=1

172 located named symbols:
0x180001CA4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003D48: ValidateRemoteName
0x180005168: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180001F70: "__cdecl FindPESection" _FindPESection
0x180001130: NPAddConnection3
0x180005FC4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005388: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x180005360: "\Device\RdpDr" ??_C@_1BM@CAJHHOAL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAR?$AAd?$AAp?$AAD?$AAr?$AA?$AA@
0x180007020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003E64: DrDeviceControlGetInfo
0x18000179C: "__cdecl CRT_INIT" _CRT_INIT
0x1800053A0: "SYSTEM\CurrentControlSet\Service" ??_C@_1HA@DNDCOCJB@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1800051B0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003D04: ValidateConnectionName
0x180005298: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180002300: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180005420: "tsclient" ??_C@_1BC@BCDECHOI@?$AAt?$AAs?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x180002D48: IsPortDriveName
0x180005FEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180005260: "__cdecl _imp_wcschr" __imp_wcschr
0x1800052E0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003900: NPGetUniversalName
0x180002EF0: NPEnumResource
0x180005250: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1800060A0: "__cdecl _IMPORT_DESCRIPTOR_WINSTA" __IMPORT_DESCRIPTOR_WINSTA
0x180001F55: "__cdecl XcptFilter" _XcptFilter
0x1800052E8: "__cdecl _xc_a" __xc_a
0x180007000: DrDeviceName
0x180005258: "__cdecl _imp_wcsstr" __imp_wcsstr
0x180003C68: StringCbCopyW
0x180005158: "__cdecl _imp_DefineDosDeviceW" __imp_DefineDosDeviceW
0x180001010: NPGetCaps
0x180005190: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180003BE4: StringCbCatW
0x1800022E5: memcpy
0x18000212F: "__cdecl initterm" _initterm
0x180006078: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800075E0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180005118: "__cdecl _imp_Sleep" __imp_Sleep
0x180005308: "__cdecl _xi_z" __xi_z
0x180005138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000213B: "__cdecl _C_specific_handler" __C_specific_handler
0x180005188: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180005178: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800051E0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180002284: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180001F61: "__cdecl amsg_exit" _amsg_exit
0x180003B34: OpenConnection
0x1800051F8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180005150: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800051B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800075D0: "__cdecl _native_startup_lock" __native_startup_lock
0x180002168: DllMain
0x180005218: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005288: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800051A0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180005120: KERNEL32_NULL_THUNK_DATA
0x180005140: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002260: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005410: "Name" ??_C@_19DINFBLAK@?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000476C: DrOpenMiniRdr
0x1800051A8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180002020: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006028: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180005390: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180005180: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800019E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005240: "__cdecl _imp__initterm" __imp__initterm
0x18000603C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004338: DrEnumServerInfo
0x1800075C0: "__cdecl _onexitend" __onexitend
0x1800052C8: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x1800052D8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800051C0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800052C0: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x180001090: NPOpenEnum
0x180003660: NPGetResourceParent
0x180004034: DrEnumConnectionInfo
0x180005210: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800052F8: "__cdecl _xi_a" __xi_a
0x180005208: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005160: "__cdecl _imp_QueryDosDeviceW" __imp_QueryDosDeviceW
0x180006050: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001E58: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1800075E8: "__cdecl pRawDllMain" _pRawDllMain
0x180003150: NPGetConnectionPerformance
0x180006014: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180001C80: "__cdecl _security_check_cookie" __security_check_cookie
0x1800052F0: "__cdecl _xc_z" __xc_z
0x1800051C8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180005380: "\;" ??_C@_15BCFLOJHA@?$AA?2?$AA?$DL?$AA?$AA@
0x180005200: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800044D4: DrEnumShareInfo
0x1800051D8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180005310: "__cdecl _guard_fids_table" __guard_fids_table
0x180005278: msvcrt_NULL_THUNK_DATA
0x180005010: "__cdecl load_config_used" _load_config_used
0x180002E50: NPAddConnection
0x180007810: DrProviderName
0x180002D74: IsRemoteNameTsclient
0x180007600: ProviderName
0x180005128: "__cdecl _imp_WinStationIsSessionRemoteable" __imp_WinStationIsSessionRemoteable
0x180005228: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180002B94: CreateConnectionName
0x180002E1C: IsValidWNetReturn
0x180005198: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800052B0: "__cdecl _imp_NtClose" __imp_NtClose
0x180005280: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800051D0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002F70: NPGetConnection
0x1800054C0: WNetValidReturn
0x1800052A8: "__cdecl _imp_NtFsControlFile" __imp_NtFsControlFile
0x1800052A0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002E80: NPCloseEnum
0x180002150: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180005248: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18000537C: ":" ??_C@_13EBCNDICG@?$AA?3?$AA?$AA@
0x180006000: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800054A0: "\\tsclient" ??_C@_1BG@FNFFLDBL@?$AA?2?$AA?2?$AAt?$AAs?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x180005230: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800052D0: ntdll_NULL_THUNK_DATA
0x180005270: "__cdecl _imp_memcpy" __imp_memcpy
0x180001410: NPCancelConnection
0x1800052B8: "__cdecl _imp_NtQueryAttributesFile" __imp_NtQueryAttributesFile
0x180007018: "__cdecl _security_cookie" __security_cookie
0x1800051F0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x1800016D0: StringCbPrintfW
0x180005170: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180005FD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800075C8: "__cdecl _onexitbegin" __onexitbegin
0x180005238: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180005148: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000608C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1800051E8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180002054: "__cdecl _security_init_cookie" __security_init_cookie
0x180005FB0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180005220: "__cdecl _imp_malloc" __imp_malloc
0x180003190: NPGetResourceInformation
0x180001CE0: "__cdecl _report_gsfailure" __report_gsfailure
0x180005290: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x1800075D8: "__cdecl _native_startup_state" __native_startup_state
0x180005130: WINSTA_NULL_THUNK_DATA
0x180006064: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180005268: "__cdecl _imp_free" __imp_free
0x180001FC0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800060B4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]