Generated by JEB on 2019/02/01

PE: C:\Windows\System32\NcaSvc.dll Base=0x180000000 SHA-256=F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D
PDB: NcaSvc.pdb GUID={A08D53A9-D923-DE29-972A40956F019816} Age=1

1300 located named symbols:
0x18001FF28: WPP_ThisDir_CTLGUID_NcaSvc
0x180020590: "`string'" ??_C@_1CA@FHDHHIHD@?$AAN?$AAc?$AAa?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x1800198A8: NcaRegQueryNumKeys
0x18001DC40: "__cdecl _imp_NotifyUnicastIpAddressChange" __imp_NotifyUnicastIpAddressChange
0x18001E268: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18001F500: "`string'" ??_C@_1GA@OADEGGFM@?$AAI?$AAP?$AAs?$AAe?$AAc?$AA?5?$AAQ?$AAu?$AAi?$AAc?$AAk?$AA?5?$AAM?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAA?$AA?8?$AAs?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP@
0x18001E380: "__cdecl _imp_ProxyHelperProviderRegisterForEventNotification" __imp_ProxyHelperProviderRegisterForEventNotification
0x18001E980: WPP_a372f38423cf3170029832c5365d2fcc_Traceguids
0x18000EBA0: "void __cdecl NcaEvCollInsideOutsideCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollInsideOutsideCollect@@YAXPEAX000@Z
0x180016E90: "int __cdecl NcaUserStoreEnumeratorNext(struct _LIST_ENTRY * __ptr64 * __ptr64,struct NCA_USER_ * __ptr64 * __ptr64)" ?NcaUserStoreEnumeratorNext@@YAHPEAPEAU_LIST_ENTRY@@PEAPEAUNCA_USER_@@@Z
0x1800192F0: NcaRegIsKeyPresent
0x18001FF78: "`string'" ??_C@_1BK@HHOBNCAL@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?5?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180020040: "`string'" ??_C@_1EI@KNNBEEFE@?$AAS?$AAE?$AAL?$AAE?$AAC?$AAT?$AA?5?$AA?$CK?$AA?5?$AAF?$AAR?$AAO?$AAM?$AA?5?$AAM?$AAS?$AAF?$AAT?$AA_?$AAD?$AAA?$AAS?$AAi?$AAt?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AAE?$AAn@
0x18001E238: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18001FD40: ModuleShutdownStart
0x18000195C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000AEF8: "void __cdecl NcaNlmTriggerConnectionStateUnadviceRelease(struct NCA_NLM_CONN_POINT_STATE * __ptr64)" ?NcaNlmTriggerConnectionStateUnadviceRelease@@YAXPEAUNCA_NLM_CONN_POINT_STATE@@@Z
0x18001E1C8: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x180010E4C: "unsigned long __cdecl NcaEvCollProbesInnerCreate(struct NCA_EVCOLL_USER_PROBES_ * __ptr64,unsigned long)" ?NcaEvCollProbesInnerCreate@@YAKPEAUNCA_EVCOLL_USER_PROBES_@@K@Z
0x18001E860: CLSID_NetFwPolicy2
0x18001E4A8: "__cdecl _imp_vDbgPrintEx" __imp_vDbgPrintEx
0x1800210A0: "`string'" ??_C@_05MAJJAKPI@FALSE?$AA@
0x18001DF10: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180021BA0: "`string'" ??_C@_0BK@MIHKMAHC@ExpandEnvironmentStringsW?$AA@
0x1800202A0: "`string'" ??_C@_1JI@BBGOMGAA@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18001E270: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18001EA48: "`string'" ??_C@_1BC@GPPEHOJC@?$AAi?$AAp?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x18001A710: Rpc_NcaGetEvidenceCollectorResult
0x18001DE28: "__cdecl _imp_WinHttpSendRequest" __imp_WinHttpSendRequest
0x1800038B0: "void __cdecl NcaSqmTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?NcaSqmTimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x180001C10: "__cdecl FindPESection" _FindPESection
0x180019594: NcaRegNotifyDestroy
0x180006534: "unsigned long __cdecl NcaApiSrvImplNotifySubscriptions(struct NCA_STATUS_EVENT_ * __ptr64,struct NCA_DAP_USER_EVSNPSHT_ * __ptr64)" ?NcaApiSrvImplNotifySubscriptions@@YAKPEAUNCA_STATUS_EVENT_@@PEAUNCA_DAP_USER_EVSNPSHT_@@@Z
0x180021AC8: WPP_c76e41f6770633f63e98d23934f93e7f_Traceguids
0x18000B4E0: "public: virtual long __cdecl CNlmTriggerProfileEventSink::NetworkPropertyChanged(struct _GUID,enum NLM_NETWORK_PROPERTY_CHANGE) __ptr64" ?NetworkPropertyChanged@CNlmTriggerProfileEventSink@@UEAAJU_GUID@@W4NLM_NETWORK_PROPERTY_CHANGE@@@Z
0x180020400: "`string'" ??_C@_1EO@IAJGMGHI@?$AAO?$AA?3?$AAS?$AAY?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD@
0x18001EC60: "`string'" ??_C@_1M@KKFBDPGM@?$AAp?$AAr?$AAo?$AAx?$AAy?$AA?$AA@
0x18001DE90: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x180013C40: "void __cdecl NcaEvCollProxyShutdown(void)" ?NcaEvCollProxyShutdown@@YAXXZ
0x18001DFC8: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18001A110: "void __cdecl NcaRpcAPIsShutdownSecurityMode(unsigned long)" ?NcaRpcAPIsShutdownSecurityMode@@YAXK@Z
0x180023B38: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008368: "unsigned long __cdecl NcaScriptLogsFinishProcess(void * __ptr64,struct NCA_COMMAND_ENVIROMENT_ * __ptr64,unsigned long,void * __ptr64)" ?NcaScriptLogsFinishProcess@@YAKPEAXPEAUNCA_COMMAND_ENVIROMENT_@@K0@Z
0x180023930: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x18000B690: "public: virtual unsigned long __cdecl CNlmTriggerProfileEventSink::Release(void) __ptr64" ?Release@CNlmTriggerProfileEventSink@@UEAAKXZ
0x180021B60: WPP_222b883fcab63deb7fedc4d469ecfbf7_Traceguids
0x18000FED4: "unsigned long __cdecl NcaEvCollHttpProbeCollectWinHttpSessionInit(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeCollectWinHttpSessionInit@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x180026A88: "unsigned long gNcaEtwPerfTrackSessionID" ?gNcaEtwPerfTrackSessionID@@3KA
0x180020278: "`string'" ??_C@_1O@GHFGDLAP@?$AAS?$AAh?$AAo?$AAw?$AAU?$AAI?$AA?$AA@
0x180026D80: "struct NCA_WFP_TRIGGER_COMP_ gNcaWfpTriggerComp" ?gNcaWfpTriggerComp@@3UNCA_WFP_TRIGGER_COMP_@@A
0x18000AA60: "enum NCA_PROFILE_CATEGORY_ __cdecl GetProfileForINetwork(struct INetwork * __ptr64)" ?GetProfileForINetwork@@YA?AW4NCA_PROFILE_CATEGORY_@@PEAUINetwork@@@Z
0x18001E388: "__cdecl _imp_ProxyHelperProviderConnectToServer" __imp_ProxyHelperProviderConnectToServer
0x1800069A0: "unsigned long __cdecl SvrImpl_NcaEngineOpen(void * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaEngineOpen@@YAKPEAXPEAPEAX@Z
0x180026380: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180021B30: "`string'" ??_C@_1CA@BGNNDANC@?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAo?$AAr?$AAe?$AAP?$AAh?$AAa?$AAs?$AAe?$AA2?$AA?$AA@
0x180020528: "`string'" ??_C@_15HCCCGECN@?$AAS?$AAY?$AA?$AA@
0x18001E378: "__cdecl _imp_ProxyHelperProviderDisconnectFromServer" __imp_ProxyHelperProviderDisconnectFromServer
0x180021F60: "__cdecl _midl_frag35" __midl_frag35
0x18001D8D0: "__cdecl _midl_frag34" __midl_frag34
0x180021F64: "__cdecl _midl_frag37" __midl_frag37
0x180021F30: "__cdecl _midl_frag31" __midl_frag31
0x18001D880: "__cdecl _midl_frag30" __midl_frag30
0x18001EE60: "`string'" ??_C@_1EC@LNBAINPK@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAT?$AAe?$AAr?$AAe?$AAd?$AAo?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt@
0x180021F48: "__cdecl _midl_frag32" __midl_frag32
0x18001D920: "__cdecl _midl_frag39" __midl_frag39
0x18001F6A8: "`string'" ??_C@_1M@BEEMKOBE@?$AAr?$AAo?$AAu?$AAt?$AAe?$AA?$AA@
0x18000BB20: NcaNlmTriggerInitialize
0x180021EC8: "`string'" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180022480: "`string'" ??_C@_0CH@CBMMEDDH@?$CFs?3?5Unexpected?5ALPC?5message?5type@
0x18001D190: "__cdecl tls_used" _tls_used
0x18001FC20: MS_NCASVC_ETW_PROVIDER_ID
0x1800160B4: LoopbackAuthAndImpersonate
0x18000D1E0: NcaWtsSessionChangeTriggerRegisterWait
0x180005620: "long __cdecl NcaProbeConstruct(void * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,int * __ptr64)" ?NcaProbeConstruct@@YAJPEAXPEAUHKEY__@@PEBG20PEAH@Z
0x1800097CC: "unsigned long __cdecl NcaScriptLogsWriteHeader(void * __ptr64,struct NCA_USER_ * __ptr64)" ?NcaScriptLogsWriteHeader@@YAKPEAXPEAUNCA_USER_@@@Z
0x1800279A8: "unsigned short * __ptr64 * wszNcaScriptLogHtmlHeader" ?wszNcaScriptLogHtmlHeader@@3PAPEAGA
0x180014CF8: "void __cdecl NcaDAPEvidenceSnapshotGetCopy(struct NCA_EVIDENCE_ * __ptr64,struct NCA_DAP_USER_EVSNPSHT_ * __ptr64)" ?NcaDAPEvidenceSnapshotGetCopy@@YAXPEAUNCA_EVIDENCE_@@PEAUNCA_DAP_USER_EVSNPSHT_@@@Z
0x180001364: "__cdecl CRT_INIT" _CRT_INIT
0x18001E478: "__cdecl _imp_TpWaitForAlpcCompletion" __imp_TpWaitForAlpcCompletion
0x18000FC74: "void __cdecl NcaEvCollHttpProbeCollectUpdateEvidence(struct NCA_EVCOLL_PROBE_ * __ptr64,int,enum NCA_PROBE_TEST_TYPE_,enum NCA_EVCOLL_PROBE_PRV_RESULT_,int)" ?NcaEvCollHttpProbeCollectUpdateEvidence@@YAXPEAUNCA_EVCOLL_PROBE_@@HW4NCA_PROBE_TEST_TYPE_@@W4NCA_EVCOLL_PROBE_PRV_RESULT_@@H@Z
0x180021BF8: "`string'" ??_C@_0BB@DAIHMEEM@PathCanonicalize?$AA@
0x18001DFE0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18001E1F0: "__cdecl _imp_CloseThreadpoolWait" __imp_CloseThreadpoolWait
0x18001DD30: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x18001B3DC: NcaRpcAPIsInterfaceSecurityCallback
0x18001E488: "__cdecl _imp_AlpcGetMessageAttribute" __imp_AlpcGetMessageAttribute
0x18001DD28: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180019BBC: NcaRegSetDWord
0x18001E438: "__cdecl _imp_TpAllocAlpcCompletion" __imp_TpAllocAlpcCompletion
0x18001DDF8: "__cdecl _imp_RegisterGPNotification" __imp_RegisterGPNotification
0x18001E338: "__cdecl _imp_BCryptGetFipsAlgorithmMode" __imp_BCryptGetFipsAlgorithmMode
0x18001DD50: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x180018FB4: NcaRegDeleteValue
0x180003FD0: WPP_SF_L
0x180027A28: "unsigned short * __ptr64 * wszNcaProbeOrigin" ?wszNcaProbeOrigin@@3PAPEAGA
0x18001E4B8: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180004060: WppControlCallback
0x180002700: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001D460: NCA_StubDesc
0x18001DD70: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x18001DD18: "__cdecl _imp_RpcServerRegisterAuthInfoW" __imp_RpcServerRegisterAuthInfoW
0x18001E090: "__cdecl _imp_PathCanonicalizeW" __imp_PathCanonicalizeW
0x18001DF08: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18001EAE0: "`string'" ??_C@_1GI@DFNPCLKH@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?9?$AAA?$AAl?$AAl?$AA?5?$AA?9?$AAD?$AAe?$AAt@
0x180021788: "`string'" ??_C@_1DM@MPAPGHOM@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAN?$AAA?$AAT?$AAI?$AAV?$AAE?$AAV?$AA6?$AA_?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x1800124E8: "int __cdecl NcaEvCollStrongAuthIsUserUsingSmartcard(void * __ptr64)" ?NcaEvCollStrongAuthIsUserUsingSmartcard@@YAHPEAX@Z
0x180010690: "void __cdecl NcaEvCollProbeCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollProbeCollect@@YAXPEAX000@Z
0x180004CD0: "void __cdecl NcaConfigMgrMultisiteUpdate(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaConfigMgrMultisiteUpdate@@YAXPEAX000@Z
0x180022910: "__cdecl Init_thread_epoch" _Init_thread_epoch
0x18002391C: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x180003FB4: WPP_INIT_CONTROL_ARRAY
0x18001FB10: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000A314: NcaSyncedListCreate
0x1800213A0: "`string'" ??_C@_1DA@LDIBCCNI@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAN?$AAV?$AAA?$AAL?$AAI?$AAD?$AA?$AA@
0x18001FEA8: "`string'" ??_C@_0BF@FLOIGAGO@RegisterStopCallback?$AA@
0x180021330: "`string'" ??_C@_0CP@ECPFCFOO@NCA_EVCOLLECTOR_USER_IDLE?3?$CFd?5?$CISE@
0x18001E8B0: ProbeStart
0x18001E1F8: "__cdecl _imp_CreateThreadpoolWait" __imp_CreateThreadpoolWait
0x1800129A0: NcaEvCollStrongAuthInitialize
0x1800041D4: "unsigned long __cdecl NcaConfigMgrGetProbeObjectCopy(unsigned long,struct NCA_PROBE_LIST_ * __ptr64,struct NCA_PROBE_ * __ptr64)" ?NcaConfigMgrGetProbeObjectCopy@@YAKKPEAUNCA_PROBE_LIST_@@PEAUNCA_PROBE_@@@Z
0x180005BE0: NcaConfigMgrPolUpdateInitialize
0x18001E200: "__cdecl _imp_SetThreadpoolWait" __imp_SetThreadpoolWait
0x180007CB4: "void __cdecl SvrImpl_NcaStatusEventUnsubscribeCore(struct NCA_INTSERVER_EVENTS_HANDLE_ * __ptr64)" ?SvrImpl_NcaStatusEventUnsubscribeCore@@YAXPEAUNCA_INTSERVER_EVENTS_HANDLE_@@@Z
0x180017AB0: NcaEtwInitialize
0x18000EE50: NcaEvCollInsideOutsideShutdown
0x180026F70: "struct NCA_USER_STORE_COMPONENT_ gNcaUserStore" ?gNcaUserStore@@3UNCA_USER_STORE_COMPONENT_@@A
0x18001E208: "__cdecl _imp_WaitForThreadpoolWaitCallbacks" __imp_WaitForThreadpoolWaitCallbacks
0x180021940: "`string'" ??_C@_1FA@GHJFEJI@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAF?$AAO?$AAR?$AAC?$AAE?$AA_?$AAT?$AAU?$AAN?$AAN?$AAE?$AAL?$AAI?$AAN?$AAG?$AA_@
0x18001E120: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x1800211D8: WPP_11d85ad1cfc630203be5693001deac09_Traceguids
0x180003154: "long __cdecl NcaServiceChangeState(unsigned long)" ?NcaServiceChangeState@@YAJK@Z
0x180012DB0: "void __cdecl NcaEvCollHealthCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollHealthCollect@@YAXPEAX000@Z
0x18001EF40: "`string'" ??_C@_1FE@EAIBGFL@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAH?$AAt?$AAt?$AAp?$AAs?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu@
0x1800239D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x180020A50: WPP_e9942d1048e93b2645d2305d9bb7b0e8_Traceguids
0x18000C640: NcaIPTriggerShutdown
0x18001E028: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x1800239BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000D75C: NcaTimerTriggerRegisterWait
0x18001E340: bcrypt_NULL_THUNK_DATA
0x180023854: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x18001D830: "__cdecl _midl_frag27" __midl_frag27
0x180021F28: "__cdecl _midl_frag20" __midl_frag20
0x180021F2C: "__cdecl _midl_frag28" __midl_frag28
0x18001F100: "`string'" ??_C@_1BG@PIGDDAJB@?$AAn?$AAr?$AAp?$AAt?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1800272C0: Microsoft_Windows_NcasvcEnableBits
0x18001DF68: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18001D700: "__cdecl _midl_frag2" __midl_frag2
0x180026390: "unsigned long * NcaScriptLogHtmlHeaderIds" ?NcaScriptLogHtmlHeaderIds@@3PAKA
0x18001FD70: "`string'" ??_C@_0BO@HNANDMBA@NcaServiceAsyncStartupRoutine?$AA@
0x18001E8D0: ModuleInitializeStart
0x18001DCD0: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x180026CD0: "struct NCA_NLM_TRIGGER_COMP_ gNcaNlmTriggerComp" ?gNcaNlmTriggerComp@@3UNCA_NLM_TRIGGER_COMP_@@A
0x1800263B0: "unsigned long * NcaScriptLogMultisiteStatusIds" ?NcaScriptLogMultisiteStatusIds@@3PAKA
0x180021200: "`string'" ??_C@_1JO@GIEELDIG@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18001DE60: "__cdecl _imp_GetAddrInfoW" __imp_GetAddrInfoW
0x18001E3D0: "__cdecl _imp_wcschr" __imp_wcschr
0x18001DC48: "__cdecl _imp_Icmp6CreateFile" __imp_Icmp6CreateFile
0x180008B6C: "void __cdecl NcaScriptLogsLoadStrings(void)" ?NcaScriptLogsLoadStrings@@YAXXZ
0x1800040E0: WppInitUm
0x180027B84: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUfgrohUlyquivUznwGEUkivxlnkOlyq@NcaUtil
0x18001E0E0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18001E8F0: ModuleInitializeEnd
0x1800218F0: "`string'" ??_C@_1EE@KKGPGCOF@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAN?$AAC?$AAA?$AA_?$AAP?$AAR?$AAO?$AAP?$AAE?$AAR?$AAL?$AAY?$AA_?$AAC?$AAO?$AAN@
0x180021400: "`string'" ??_C@_1DI@DFNIEHDO@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAP?$AAR?$AAO?$AAB?$AAE?$AAS?$AA_?$AAP?$AAI?$AAN?$AAG?$AA?$AA@
0x180026B60: "struct NCA_MAIN_COMPONENT_ gNcaMain" ?gNcaMain@@3UNCA_MAIN_COMPONENT_@@A
0x180016018: "__cdecl TlgWrite" _TlgWrite
0x1800279E8: "unsigned short * __ptr64 * wszNcaScriptLogMultisiteStatus" ?wszNcaScriptLogMultisiteStatus@@3PAPEAGA
0x1800204C0: "`string'" ??_C@_1GG@PCBNAOCK@?$AAO?$AA?3?$AAS?$AAY?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD@
0x18001E4D0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180019660: NcaRegOpenKey
0x1800274D0: "struct NCA_EVCOLL_STRONGAUTH_COMPONENT_ gNcaEvCollStrongAuth" ?gNcaEvCollStrongAuth@@3UNCA_EVCOLL_STRONGAUTH_COMPONENT_@@A
0x18000EF50: "void __cdecl NcaEvCollInternetConnectivityCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollInternetConnectivityCollect@@YAXPEAX000@Z
0x18001FAF0: "`string'" ??_C@_1CA@INGGADOK@?$AAN?$AAc?$AAa?$AA?5?$AAB?$AAf?$AAe?$AA?5?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180020E40: "`string'" ??_C@_1CI@NLKPNMOA@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAI?$AAn?$AAs?$AAi?$AAd?$AAe?$AAO?$AAu?$AAt?$AAs?$AAi?$AAd?$AAe?$AA?$AA@
0x18001E930: "`string'" ??_C@_0P@BGOJOGNI@MibAddInstance?$AA@
0x1800212F8: "__cdecl GUID_98325047_c671_4174_8d81_defcd3f03186" _GUID_98325047_c671_4174_8d81_defcd3f03186
0x180017540: "void __cdecl NcaEtwPerfTrackScenarioPublishStartEvent(enum NCA_ETW_PERFTRACK_SCENARIO_TYPE_)" ?NcaEtwPerfTrackScenarioPublishStartEvent@@YAXW4NCA_ETW_PERFTRACK_SCENARIO_TYPE_@@@Z
0x180020740: WPP_d7fa4a57286f3da713d1052cf716e1d9_Traceguids
0x18001DD10: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x18001E400: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180018798: NcaLoadMuiStringTable
0x18001E2B0: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180020008: "`string'" ??_C@_19HMFHFJMC@?$AAD?$AAT?$AAE?$AAs?$AA?$AA@
0x18001EFC0: "`string'" ??_C@_1EK@OEMJMFEP@?$AAI?$AAP?$AA?9?$AAH?$AAT?$AAT?$AAP?$AAs?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAH?$AAt?$AAt?$AAp?$AAs?$AAS?$AAt@
0x180011B88: NcaEvCollProbesDelete
0x1800038B8: NcaComponentsInitialize
0x18001DEF0: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180027610: "struct NCA_EVCOLL_IPHTTPS_CERT_COMPONENT_ gNcaEvCollIphttpsCert" ?gNcaEvCollIphttpsCert@@3UNCA_EVCOLL_IPHTTPS_CERT_COMPONENT_@@A
0x180012C30: NcaEvCollStrongAuthShutdown
0x18001E968: "`string'" ??_C@_1BG@OBHBAFJO@?$AAW?$AAf?$AAp?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x180021B50: WPP_00622af4a69d325ca11acb35260caabf_Traceguids
0x180020338: WPP_1d497c400fe838fd72ed5fc6ceae7606_Traceguids
0x18001EA30: Microsoft_Windows_NcasvcKeywords
0x180022914: "__cdecl tls_end" _tls_end
0x18001A3B0: NcaRpcAPIsSecurityCallback
0x18001E2F8: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180001BFB: "__cdecl XcptFilter" _XcptFilter
0x180021CF0: "`string'" ??_C@_0O@BFKMLGOF@NcaRegOpenKey?$AA@
0x18001E4D8: "__cdecl _xc_a" __xc_a
0x18001E7F0: IID_IConnectionPointContainer
0x18001DFF0: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x18001D3D8: "const NcaMultisiteEventSink::`vftable'" ??_7NcaMultisiteEventSink@@6B@
0x180015FF4: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x180021DE0: "`string'" ??_C@_0BC@KKGLIIBL@NcaRegDeleteValue?$AA@
0x180023B9C: "__cdecl _IMPORT_DESCRIPTOR_FirewallAPI" __IMPORT_DESCRIPTOR_FirewallAPI
0x1800208F8: "`string'" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180013258: "unsigned long __cdecl NcaEvCollNamePrefReadNrptRelevantPolicy(unsigned long * __ptr64)" ?NcaEvCollNamePrefReadNrptRelevantPolicy@@YAKPEAK@Z
0x180020FA0: "`string'" ??_C@_1BK@PHALGDPN@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAP?$AAr?$AAo?$AAb?$AAe?$AAs?$AA?$AA@
0x180014670: "void __cdecl NcaEvCollIdlePdcChange(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollIdlePdcChange@@YAXPEAX000@Z
0x1800189D4: NcaSizeTMultiply
0x180017DA0: NcaEtwShutdown
0x18000EC60: NcaEvCollInsideOutsideInitialize
0x180021A80: "`string'" ??_C@_1EG@CHOMAAID@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AN?$AA?6?$AA?$CF?$AAd?$AA?1?$AA?$CF?$AAd?$AA?1?$AA?$CF?$AAd?$AA?5?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?5?$AA?$CI?$AAU?$AAT?$AAC?$AA?$CJ?$AA?$AN?$AA?6@
0x180001210: NcaTriggerRearm
0x18001E2D8: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18001E180: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x18000DE20: "long __cdecl NotificationCallback(void * __ptr64,unsigned long)" ?NotificationCallback@@YAJPEAXK@Z
0x180006640: "void __cdecl NcaApiSrvImplShutdown(void)" ?NcaApiSrvImplShutdown@@YAXXZ
0x180017624: "void __cdecl NcaEtwPerfTrackScenarioPublishStopEvent(enum NCA_ETW_PERFTRACK_SCENARIO_TYPE_,enum NCA_STATUS_EVENT_TYPE_,enum NCA_STATUS_EVENT_SUBTYPE_)" ?NcaEtwPerfTrackScenarioPublishStopEvent@@YAXW4NCA_ETW_PERFTRACK_SCENARIO_TYPE_@@W4NCA_STATUS_EVENT_TYPE_@@W4NCA_STATUS_EVENT_SUBTYPE_@@@Z
0x18001EC10: "`string'" ??_C@_1EO@NPHMJKLK@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AA6?$AAt?$AAo?$AA4?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD@
0x18000B4A0: "void __cdecl NcaNlmTriggerSvcNotify(void * __ptr64)" ?NcaNlmTriggerSvcNotify@@YAXPEAX@Z
0x180002B44: "unsigned long __cdecl NcaCreateCancelableLock(struct _tag_NCA_CANCELABLE_LOCK * __ptr64)" ?NcaCreateCancelableLock@@YAKPEAU_tag_NCA_CANCELABLE_LOCK@@@Z
0x180021F20: "__cdecl _midl_frag15" __midl_frag15
0x18001D7E0: "__cdecl _midl_frag17" __midl_frag17
0x180021740: "`string'" ??_C@_1EI@EFCNPEIG@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAP?$AAH?$AAT?$AAT?$AAP?$AAS?$AA_?$AAC?$AAE?$AAR?$AAT?$AA_?$AAN?$AAE?$AAE@
0x18001D780: "__cdecl _midl_frag10" __midl_frag10
0x180021F18: "__cdecl _midl_frag13" __midl_frag13
0x180021C90: "`string'" ??_C@_0BJ@LIAKJAPI@NcaCriticalSectionCreate?$AA@
0x180023B24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-legacy-l1-1-0
0x180021F24: "__cdecl _midl_frag18" __midl_frag18
0x18001E370: "__cdecl _imp_ProxyHelperProviderUnregisterEventNotification" __imp_ProxyHelperProviderUnregisterEventNotification
0x18001DBE8: "__cdecl _imp_FWChangeNotificationCreate" __imp_FWChangeNotificationCreate
0x18001DF50: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18001AE3C: NcaRpcAPIsGetAccessTokenFromClientBinding
0x180020530: "`string'" ??_C@_1BM@BIOGEOLH@?$AAN?$AAc?$AAa?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x1800272D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUhexUlyquivUznwGEUkivxlnkOlyq@NcaSvc" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUhexUlyquivUznwGEUkivxlnkOlyq@NcaSvc
0x180006000: NcaCustomCommandEmpty
0x180026E20: "struct NCA_WTS_TRIGGER_COMP_ gNcaWtsTriggerComp" ?gNcaWtsTriggerComp@@3UNCA_WTS_TRIGGER_COMP_@@A
0x18001EBB0: "`string'" ??_C@_1FM@PHLBHBKI@?$AA6?$AAt?$AAo?$AA4?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AA6?$AAt?$AAo?$AA4?$AAC@
0x18001AC18: "long __cdecl NcaRpcAPIsRegisterAuthInfo(void)" ?NcaRpcAPIsRegisterAuthInfo@@YAJXZ
0x1800066E4: "void __cdecl NcaApiSrvImplShutdownAbortSubscriptions(void)" ?NcaApiSrvImplShutdownAbortSubscriptions@@YAXXZ
0x1800209B0: "`string'" ??_C@_1CC@ONGCALBM@?$AAW?$AAt?$AAs?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA?$AA@
0x18001E328: "__cdecl _imp_NotifyServiceStatusChangeW" __imp_NotifyServiceStatusChangeW
0x180003AF0: ServiceMain
0x18001DE68: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x18001DC88: "__cdecl _imp_UnregisterWait" __imp_UnregisterWait
0x18001E7D4: "__cdecl _guard_iat_table" __guard_iat_table
0x18001DF90: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1800026D0: memcpy
0x180027430: "struct NCA_EVCOLL_IPV6_COMPONENT_ gNcaEvCollIPv6" ?gNcaEvCollIPv6@@3UNCA_EVCOLL_IPV6_COMPONENT_@@A
0x18000BDAC: "unsigned long __cdecl NcaIPTriggerGetAddresses(void)" ?NcaIPTriggerGetAddresses@@YAKXZ
0x18001DDB8: "__cdecl _imp_ImpersonateSecurityContext" __imp_ImpersonateSecurityContext
0x1800140D0: "long __cdecl NcaEvCollFirewallInitialize(void)" ?NcaEvCollFirewallInitialize@@YAJXZ
0x1800216E0: "`string'" ??_C@_1FG@JOENIEGC@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAP?$AAH?$AAT?$AAT?$AAP?$AAS?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY?$AA_?$AAC?$AAR@
0x180020918: "`string'" ??_C@_1BC@FLHCEALD@?$AAN?$AAe?$AAt?$AAP?$AAr?$AAo?$AAf?$AAm?$AA?$AA@
0x18001DE58: "__cdecl _imp_InetPtonW" __imp_InetPtonW
0x18001DAF0: NCA_ServerInfo
0x180021878: "`string'" ??_C@_1DA@MIKJMGON@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAD?$AAT?$AAE?$AA_?$AAS?$AAA?$AAS?$AA?$AA@
0x18001E250: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000D900: "void __cdecl NcaProxyProviderEventCallback(void * __ptr64,enum _PROXYMGR_PROVIDER_EVENT)" ?NcaProxyProviderEventCallback@@YAXPEAXW4_PROXYMGR_PROVIDER_EVENT@@@Z
0x180002C1C: "int __cdecl NcaIsPolicyPresent(void)" ?NcaIsPolicyPresent@@YAHXZ
0x18001DEE8: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x18001E3F8: "__cdecl _imp_memset" __imp_memset
0x18001E0F0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x180020E00: "`string'" ??_C@_1CA@BDHBBFAK@?$AAF?$AAo?$AAr?$AAc?$AAe?$AA_?$AAT?$AAu?$AAn?$AAn?$AAe?$AAl?$AAi?$AAn?$AAg?$AA?$AA@
0x1800184E0: NcaGetLongPathName
0x18001E108: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x18001DF20: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x180001DB5: "__cdecl initterm" _initterm
0x18000A910: "public: virtual long __cdecl CNlmTriggerInetConnEventSink::ConnectivityChanged(enum NLM_CONNECTIVITY) __ptr64" ?ConnectivityChanged@CNlmTriggerInetConnEventSink@@UEAAJW4NLM_CONNECTIVITY@@@Z
0x18001DCF0: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x18001E228: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180026A8C: "unsigned long gNcaEtwPerfTrackDeploymentID" ?gNcaEtwPerfTrackDeploymentID@@3KA
0x180001310: "long __cdecl NcaApiSrvImplPhase2Initialize(void)" ?NcaApiSrvImplPhase2Initialize@@YAJXZ
0x18001F9B8: "`string'" ??_C@_1O@BBFOALLJ@?$AAc?$AAe?$AAr?$AAt?$AAM?$AAy?$AA?$AA@
0x18001DCE8: "__cdecl _imp_RpcServerInqDefaultPrincNameW" __imp_RpcServerInqDefaultPrincNameW
0x18000E184: "long __cdecl NcaMultisiteRegisterWMINotification(void)" ?NcaMultisiteRegisterWMINotification@@YAJXZ
0x180023A70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180026A28: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001E140: "__cdecl _imp_Sleep" __imp_Sleep
0x180016F24: "unsigned long __cdecl NcaUserStoreGetUsername(struct NCA_USER_ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?NcaUserStoreGetUsername@@YAKPEAUNCA_USER_@@KPEAGPEAK@Z
0x18001FC60: NcaSvc_PerfTrack_NAPRequired_DAConnected_Start
0x18001E508: "__cdecl _xi_z" __xi_z
0x18001E188: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x180020090: "`string'" ??_C@_1M@LAGHHMEN@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18000E4C0: "public: virtual long __cdecl NcaMultisiteEventSink::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@NcaMultisiteEventSink@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180010C64: "void __cdecl NcaEvCollProbeStop(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollProbeStop@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x18001FEF0: "`string'" ??_C@_0N@OGAMMJPI@CreateThread?$AA@
0x18001E900: "`string'" ??_C@_1O@OKMOLHOL@?$AAN?$AAc?$AAa?$AAS?$AAv?$AAc?$AA?$AA@
0x1800215C8: "`string'" ??_C@_1DM@PHBLGAJF@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAR?$AAE?$AAS?$AAO?$AAL?$AAV?$AAE?$AA_?$AAN?$AAA?$AAM?$AAE?$AAS?$AA?$AA@
0x18001DEC0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18001E958: WPP_471d032596d03d2d67180357ec197cd0_Traceguids
0x18001E408: "__cdecl _imp_wcscmp" __imp_wcscmp
0x18001DE08: USERENV_NULL_THUNK_DATA
0x180005590: "long __cdecl NcaCustomCommandConstruct(void * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,int * __ptr64)" ?NcaCustomCommandConstruct@@YAJPEAXPEAUHKEY__@@PEBG20PEAH@Z
0x180001DBB: "__cdecl _C_specific_handler" __C_specific_handler
0x180027480: "struct NCA_EVCOLL_PROBES_COMPONENT_ gNcaEvCollProbes" ?gNcaEvCollProbes@@3UNCA_EVCOLL_PROBES_COMPONENT_@@A
0x18001E358: "__cdecl _imp_FwpmNetEventUnsubscribe0" __imp_FwpmNetEventUnsubscribe0
0x18001ED30: "`string'" ??_C@_1GE@JFMNPHLF@?$AAT?$AAe?$AAr?$AAe?$AAd?$AAo?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAT?$AAe?$AAr@
0x18001E0D0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180021640: "`string'" ??_C@_1DK@JIANBIJG@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAP?$AAH?$AAT?$AAT?$AAP?$AAS?$AA_?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x18000AE58: "long __cdecl NcaNlmTriggerConnectionStateAdvice(struct NCA_NLM_CONN_POINT_STATE * __ptr64)" ?NcaNlmTriggerConnectionStateAdvice@@YAJPEAUNCA_NLM_CONN_POINT_STATE@@@Z
0x18001D4F8: RundownRoutines
0x18001BCC8: PdcPortClose
0x180014FC4: "void __cdecl NcaDAPEvidenceUserSnapshotDestroy(struct NCA_DAP_USER_EVSNPSHT_ * __ptr64)" ?NcaDAPEvidenceUserSnapshotDestroy@@YAXPEAUNCA_DAP_USER_EVSNPSHT_@@@Z
0x18001A520: Rpc_NcaExecuteAndCaptureLogs
0x180018B84: NcaStringCopy
0x18001DC98: "__cdecl _imp_TerminateJobObject" __imp_TerminateJobObject
0x18001DF38: "__cdecl _imp_HeapFree" __imp_HeapFree
0x1800200E0: "`string'" ??_C@_1IC@ODJPFAEO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x18001C324: PdcpProcessMessageInternal
0x180026C30: WPP_REGISTRATION_GUIDS
0x180005250: "void __cdecl NcaConfigMgrUpdate(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaConfigMgrUpdate@@YAXPEAX000@Z
0x180018D74: WPP_SF_ssL
0x18001E880: ProbeCallback
0x180003380: "void __cdecl NcaServiceOnShutdownCallback(void * __ptr64,unsigned char)" ?NcaServiceOnShutdownCallback@@YAXPEAXE@Z
0x18001E310: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x1800081FC: "unsigned long __cdecl NcaScriptLogsCreateTempFile(void * __ptr64 * __ptr64)" ?NcaScriptLogsCreateTempFile@@YAKPEAPEAX@Z
0x180002C58: "void __cdecl NcaReleaseCancelableLock(struct _tag_NCA_CANCELABLE_LOCK * __ptr64)" ?NcaReleaseCancelableLock@@YAXPEAU_tag_NCA_CANCELABLE_LOCK@@@Z
0x1800224C8: CLSID_WbemLocator
0x18001DF30: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18001E0D8: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x180020E20: "`string'" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18001C468: SymCryptMarvin32
0x18000FF98: "unsigned long __cdecl NcaEvCollHttpProbeSessionInit(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeSessionInit@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x180020CE0: "`string'" ??_C@_1CC@HPKMCEMH@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAs?$AAi?$AAt?$AAe?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x18001E018: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180013B00: "long __cdecl NcaEvCollProxyInitialize(void)" ?NcaEvCollProxyInitialize@@YAJXZ
0x18001E368: fwpuclnt_NULL_THUNK_DATA
0x180020550: "`string'" ??_C@_1BO@CAAIGKFF@?$AAN?$AAc?$AAa?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x18000266C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180006630: "void __cdecl NcaApiSrvImplPhase2Shutdown(void)" ?NcaApiSrvImplPhase2Shutdown@@YAXXZ
0x180005A70: NcaConfigMgrInitialize
0x18001DDD0: "__cdecl _imp_AcquireCredentialsHandleW" __imp_AcquireCredentialsHandleW
0x180021B90: "`string'" ??_C@_0P@NFLPNNLK@NcaStringBuild?$AA@
0x180008C50: "unsigned long __cdecl NcaScriptLogsOpenLogFile(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?NcaScriptLogsOpenLogFile@@YAKPEBGPEAPEAX@Z
0x180010270: "void __cdecl NcaEvCollPingProbeCollect(struct NCA_EVCOLL_PROBE_ * __ptr64,struct NCA_EVCOLL_USER_PROBES_ * __ptr64)" ?NcaEvCollPingProbeCollect@@YAXPEAUNCA_EVCOLL_PROBE_@@PEAUNCA_EVCOLL_USER_PROBES_@@@Z
0x18001F070: "`string'" ??_C@_1GA@PPFEEHOH@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AA?$CI?$AAr?$AAo?$AAo?$AAt?$AA?$CJ?$AA?5?$AA?$CI?$AAc?$AAe?$AAr?$AAt?$AAu?$AAt@
0x180015DDC: NcaDAPEvidenceUserSnapshotRemove
0x180007B8C: "unsigned long __cdecl SvrImpl_NcaStatusEventUnsubscribe(void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaStatusEventUnsubscribe@@YAKPEAX0PEAPEAX@Z
0x18000B980: NcaNlmTriggerGetInternetConnectivity
0x18001A5D0: Rpc_NcaGetConfig
0x180020F00: "`string'" ??_C@_1GK@MGNNPNHB@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x18001E498: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180020668: "`string'" ??_C@_1BK@MALHNDOI@?$AAN?$AAc?$AAa?$AAG?$AAe?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x18001DC38: "__cdecl _imp_FreeMibTable" __imp_FreeMibTable
0x18001E0A8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180026C08: WPP_MAIN_CB
0x18001F120: "`string'" ??_C@_1EM@NOEJPIGA@?$AAN?$AAR?$AAP?$AAT?$AA?5?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAn?$AAs?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAN?$AAr?$AAp?$AAt?$AAP?$AAo@
0x18001E480: "__cdecl _imp_AlpcInitializeMessageAttribute" __imp_AlpcInitializeMessageAttribute
0x1800070D4: "unsigned long __cdecl SvrImpl_NcaGetEvidenceCollectorResult(void * __ptr64,void * __ptr64,enum NCA_EVCOLLECTOR_,unsigned long,unsigned long,int * __ptr64)" ?SvrImpl_NcaGetEvidenceCollectorResult@@YAKPEAX0W4NCA_EVCOLLECTOR_@@KKPEAH@Z
0x180023994: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18001E050: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180001C01: "__cdecl amsg_exit" _amsg_exit
0x18001E458: "__cdecl _imp_ZwAlpcQueryInformation" __imp_ZwAlpcQueryInformation
0x18000B560: "public: virtual long __cdecl CNlmTriggerInetConnEventSink::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CNlmTriggerInetConnEventSink@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180021B80: "`string'" ??_C@_08JIGOGMIK@NcaAlloc?$AA@
0x180014E24: "void __cdecl NcaDAPEvidenceSnapshotTrace(struct NCA_EVIDENCE_ * __ptr64)" ?NcaDAPEvidenceSnapshotTrace@@YAXPEAUNCA_EVIDENCE_@@@Z
0x180020BE0: "`string'" ??_C@_1GC@HDPIAGEA@?$AAP?$AAR?$AAO?$AAX?$AAY?$AAM?$AAG?$AAR?$AA_?$AAP?$AAR?$AAO?$AAV?$AAI?$AAD?$AAE?$AAR?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY?$AA_?$AAS?$AAE@
0x18001FD20: ApiActivityStart
0x180027B7C: "unsigned long gNcaSQMLogUIStatesValue" ?gNcaSQMLogUIStatesValue@@3KA
0x18001ED08: "`string'" ??_C@_1BK@GHNGOOG@?$AAt?$AAe?$AAr?$AAe?$AAd?$AAo?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x180021608: "`string'" ??_C@_1DI@HEJNACJA@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAT?$AAE?$AAR?$AAE?$AAD?$AAO?$AA_?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x18001E170: "__cdecl _imp_CreateWaitableTimerW" __imp_CreateWaitableTimerW
0x1800224D8: CLSID_WbemAdministrativeLocator
0x1800206C8: "`string'" ??_C@_1DC@EJCPGEJC@?$AAN?$AAc?$AAa?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AAA?$AAn?$AAd?$AAC?$AAa?$AAp?$AAt?$AAu?$AAr?$AAe?$AAL?$AAo?$AAg?$AAs?$AA?$AA@
0x18001DBE0: DNSAPI_NULL_THUNK_DATA
0x18001E2A8: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x180020088: "`string'" ??_C@_17NDCOOGJO@?$AAW?$AAQ?$AAL?$AA?$AA@
0x180027B78: "int gNcaEtwEventsInitialized" ?gNcaEtwEventsInitialized@@3HA
0x180021DC0: "`string'" ??_C@_0CA@GAHKGDOC@NcaRegEnumValueNameAndValueData?$AA@
0x1800130E0: "void __cdecl NcaEvCollNamePrefGroupPolicyChange(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollNamePrefGroupPolicyChange@@YAXPEAX000@Z
0x18000E790: "void __cdecl NcaEvCollPolicyPresenceCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollPolicyPresenceCollect@@YAXPEAX000@Z
0x180023AFC: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x180022350: "unsigned long * AccessCheckAccessRights" ?AccessCheckAccessRights@@3PAKA
0x180021AD8: "`string'" ??_C@_1BC@KFNANHG@?$AAK?$AAe?$AAr?$AAb?$AAe?$AAr?$AAo?$AAs?$AA?$AA@
0x18000DB80: "long __cdecl NcaProxyTriggerInitializeProvider(void)" ?NcaProxyTriggerInitializeProvider@@YAJXZ
0x1800010E0: "void __cdecl NotifyCallback(void * __ptr64,enum _MIB_NOTIFICATION_TYPE)" ?NotifyCallback@@YAXPEAXW4_MIB_NOTIFICATION_TYPE@@@Z
0x18000A6C4: NcaGPTriggerRegisterWait
0x18001E158: "__cdecl _imp_SleepConditionVariableCS" __imp_SleepConditionVariableCS
0x1800150C0: "void __cdecl NcaDAPProcessRequest(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaDAPProcessRequest@@YAXPEAX000@Z
0x18000E560: NcaMultisiteTriggerInitialize
0x180003ED0: SvchostPushServiceGlobals
0x18000CB80: NcaWfpTriggerInitialize
0x1800273F0: "struct NCA_EVCOLL_INTERNET_COMPONENT_ gNcaEvCollInet" ?gNcaEvCollInet@@3UNCA_EVCOLL_INTERNET_COMPONENT_@@A
0x18001E1D8: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x18001A9C0: Rpc_NcaStatusEventSubscriptionGetLastEvent
0x180008F0C: "unsigned long __cdecl NcaScriptLogsStartProcess(unsigned short * __ptr64,unsigned short * __ptr64,void * __ptr64,struct NCA_PROCESS_ENVIRONMENT_ * __ptr64)" ?NcaScriptLogsStartProcess@@YAKPEAG0PEAXPEAUNCA_PROCESS_ENVIRONMENT_@@@Z
0x180027A88: "unsigned short * __ptr64 * wszNcaLogStatusEventTypes" ?wszNcaLogStatusEventTypes@@3PAPEAGA
0x1800263E0: "unsigned long * NcaProbeResultIds" ?NcaProbeResultIds@@3PAKA
0x18001F7A0: "`string'" ??_C@_1FA@DDIAFEAP@?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAA?$AAE?$AAn?$AAt?$AAr?$AAy?$AAP?$AAo?$AAi?$AAn?$AAt?$AAT?$AAa?$AAb?$AAl?$AAe?$AAI?$AAt?$AAe?$AAm?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9@
0x18001DCC8: OLEAUT32_NULL_THUNK_DATA
0x180021D00: "`string'" ??_C@_0BB@BILFPGMA@RegQueryInfoKeyW?$AA@
0x180020E30: WPP_90e03f77129537b7d576e0fd271b26be_Traceguids
0x180014A60: NcaEvCollIdleShutdown
0x18001E830: CLSID_NetworkListManager
0x18001F1C0: "`string'" ??_C@_1BA@KEMBLBMD@?$AAw?$AAi?$AAn?$AAs?$AAo?$AAc?$AAk?$AA?$AA@
0x180021C68: "`string'" ??_C@_0CG@PKBDLMEO@InitializeCriticalSectionAndSpin@
0x1800034F4: "void __cdecl NcaServiceShutdown(void)" ?NcaServiceShutdown@@YAXXZ
0x18001DE10: "__cdecl _imp_WinHttpOpen" __imp_WinHttpOpen
0x18001DE98: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x18001E300: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180007EC0: MIDL_nca_allocate
0x180001310: "public: virtual long __cdecl NcaMultisiteEventSink::SetStatus(long,long,unsigned short * __ptr64,struct IWbemClassObject * __ptr64) __ptr64" ?SetStatus@NcaMultisiteEventSink@@UEAAJJJPEAGPEAUIWbemClassObject@@@Z
0x180017924: "void __cdecl NcaEtwPerfTrackStopScenarios(void)" ?NcaEtwPerfTrackStopScenarios@@YAXXZ
0x180020B20: "`string'" ??_C@_1FE@BIPCDNJB@?$AAP?$AAR?$AAO?$AAX?$AAY?$AAM?$AAG?$AAR?$AA_?$AAP?$AAR?$AAO?$AAV?$AAI?$AAD?$AAE?$AAR?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA_?$AAN?$AAO?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY@
0x18001E0B8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180019D78: NcaArrayCreateFromRegistry
0x18001E0B0: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x18001FAA8: "`string'" ??_C@_1CK@HOMFNFHK@?$AAG?$AAr?$AAo?$AAu?$AAp?$AAs?$AA?5?$AA?$CI?$AAw?$AAh?$AAo?$AAa?$AAm?$AAi?$AA?5?$AA?1?$AAa?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x18001E060: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18001E240: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180001F64: McGenEventWriteUM
0x18001F970: "`string'" ??_C@_1EE@PNONPEDH@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl@
0x180004DBC: "void __cdecl NcaConfigMgrPolicyEmpty(struct NCA_POLICY_ * __ptr64)" ?NcaConfigMgrPolicyEmpty@@YAXPEAUNCA_POLICY_@@@Z
0x18001E8C0: ProbeEnd
0x18001DED8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18001E218: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180020EB0: WPP_84c58bc6017d39770cd44905612634ba_Traceguids
0x1800260D0: "struct NCA_COMMAND_ENVIROMENT_ * gScriptLogAdminCommands" ?gScriptLogAdminCommands@@3PAUNCA_COMMAND_ENVIROMENT_@@A
0x18001DE18: "__cdecl _imp_WinHttpCloseHandle" __imp_WinHttpCloseHandle
0x18000DD00: "void __cdecl NcaProxyTriggerShutdown(void)" ?NcaProxyTriggerShutdown@@YAXXZ
0x1800127C0: "void __cdecl NcaEvCollStrongAuthLockUnlockCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollStrongAuthLockUnlockCollect@@YAXPEAX000@Z
0x18001C044: PdcPortSendMessage
0x18002639C: "unsigned long * NcaScriptLogProbeStatusIds" ?NcaScriptLogProbeStatusIds@@3PAKA
0x18000AAB0: "long __cdecl NcaNlmTriggerConnectionPointInitialize(void)" ?NcaNlmTriggerConnectionPointInitialize@@YAJXZ
0x1800210B8: "`string'" ??_C@_1BK@JOLBGGPF@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x1800272E0: "struct NCA_API_SRV_IMPL_COMPONENT_ gNcaApiSrvImpl" ?gNcaApiSrvImpl@@3UNCA_API_SRV_IMPL_COMPONENT_@@A
0x18001A270: NcaRpcAPIsSecModeAccessCheckForClient
0x18001DFB8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180009B38: "unsigned long __cdecl NcaScriptsAppendChars(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?NcaScriptsAppendChars@@YAKPEBGKPEAGPEAK@Z
0x180023B4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l1-1-0
0x18001EA60: "`string'" ??_C@_1HC@JABDFNCC@?$AAI?$AAP?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAC?$AAo?$AAn?$AAf?$AAi@
0x18001D3A0: "const CNlmTriggerProfileEventSink::`vftable'" ??_7CNlmTriggerProfileEventSink@@6B@
0x180026A18: "__cdecl _native_startup_lock" __native_startup_lock
0x18001DE38: "__cdecl _imp_WinHttpOpenRequest" __imp_WinHttpOpenRequest
0x18001DDC8: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x180001EE0: DllMain
0x1800211B0: WPP_6fec6c1ad8a8303f14ca16bc8d5fe9a7_Traceguids
0x1800025B0: McTemplateU0qqqq
0x18001F310: "`string'" ??_C@_1M@JEONLKOG@?$AAi?$AAp?$AAs?$AAe?$AAc?$AA?$AA@
0x1800165D0: "unsigned long __cdecl NcaGetThreadToken(void * __ptr64,void * __ptr64 * __ptr64)" ?NcaGetThreadToken@@YAKPEAXPEAPEAX@Z
0x18001E820: IID_INetworkEvents
0x18000DA30: "long __cdecl NcaProxyTriggerInitialize(void)" ?NcaProxyTriggerInitialize@@YAJXZ
0x18000ABF8: "long __cdecl NcaNlmTriggerConnectionPointObjectsRefresh(struct NCA_NLM_CONN_POINT_STATE * __ptr64,struct NCA_NLM_CONN_POINT_STATE * __ptr64)" ?NcaNlmTriggerConnectionPointObjectsRefresh@@YAJPEAUNCA_NLM_CONN_POINT_STATE@@0@Z
0x18001DA70: "__cdecl _midl_frag61" __midl_frag61
0x18001ECD0: "`string'" ??_C@_1DC@MECDBBJE@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAi?$AAn?$AAh?$AAt?$AAt?$AAp?$AA?5?$AAs?$AAh?$AAo?$AAw?$AA?5?$AAp?$AAr?$AAo?$AAx?$AAy?$AA?$AA@
0x180021FE0: "__cdecl _midl_frag63" __midl_frag63
0x180021FD8: "__cdecl _midl_frag62" __midl_frag62
0x180021AF0: "`string'" ??_C@_1M@MAKFBKFH@?$AAh?$AAo?$AAs?$AAt?$AA?1?$AA?$AA@
0x1800211C0: "`string'" ??_C@_1BI@IOPCIJHM@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAP?$AAr?$AAo?$AAx?$AAy?$AA?$AA@
0x18001FD10: NcaSvc_PerfTrack_SmartcardEntered_DAConnected_Stop
0x180021FF8: "__cdecl _midl_frag68" __midl_frag68
0x18001DD20: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x180006294: "void __cdecl NcaApiSrvImplInvalidateSubscriptionHandle(struct NCA_INTSERVER_NETWORK_HANDLE_ * __ptr64)" ?NcaApiSrvImplInvalidateSubscriptionHandle@@YAXPEAUNCA_INTSERVER_NETWORK_HANDLE_@@@Z
0x1800239F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18001FFE8: "`string'" ??_C@_1M@IHOKFDFC@?$AAF?$AAI?$AAL?$AAE?$AA?3?$AA?$AA@
0x18001D740: "__cdecl _midl_frag6" __midl_frag6
0x18001E3D8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18001E148: "__cdecl _imp_InitializeConditionVariable" __imp_InitializeConditionVariable
0x18000241C: McTemplateU0qzq
0x18001E398: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180001DF0: SymCryptWipeAsm
0x180020FC0: "`string'" ??_C@_1BG@EPCLCDIM@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$DM?$AAb?$AAr?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x1800207E8: "`string'" ??_C@_17NOCMDLGK@?$AA?5?$AA?$HN?$AA?$CC?$AA?$AA@
0x180021CE0: "`string'" ??_C@_0O@COHOBMLB@RegOpenKeyExW?$AA@
0x18001DFD8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x18001E078: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800276B0: "struct NCA_EVCOLL_IDLE_COMPONENT_ gNcaEvCollIdle" ?gNcaEvCollIdle@@3UNCA_EVCOLL_IDLE_COMPONENT_@@A
0x18000F1E0: NcaEvCollInternetConnectivityShutdown
0x18001DF80: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180026A90: "unsigned long gNcaEtwPerfTrackMachineID" ?gNcaEtwPerfTrackMachineID@@3KA
0x180021CC0: "`string'" ??_C@_0BA@MPOFGLLA@RegCreateKeyExW?$AA@
0x1800238B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18001F058: "`string'" ??_C@_1BC@FDCJNGFE@?$AAc?$AAe?$AAr?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18000225C: McTemplateU0zz
0x1800211E8: "`string'" ??_C@_1BE@ILMBBNLH@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAd?$AAe?$AA?$AA@
0x18001F8E8: "`string'" ??_C@_1BK@DPDDFIFF@?$AAp?$AAr?$AAe?$AAf?$AAi?$AAx?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18001DCA0: KERNEL32_NULL_THUNK_DATA
0x180021D18: "`string'" ??_C@_0BF@MIFKEACC@NcaRegQueryNumValues?$AA@
0x180027570: "struct NCA_EVCOLL_NAMEPREF_COMPONENT_ gNcaEvCollNamePref" ?gNcaEvCollNamePref@@3UNCA_EVCOLL_NAMEPREF_COMPONENT_@@A
0x180002388: McTemplateU0qz
0x18001E138: "__cdecl _imp_SleepConditionVariableSRW" __imp_SleepConditionVariableSRW
0x18001DED0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180020958: "`string'" ??_C@_1BE@HLMIOACP@?$AAI?$AAP?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x18001E278: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180021530: "`string'" ??_C@_1EE@BONDJNFD@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAN?$AAE?$AAT?$AA_?$AAC?$AAO?$AAN?$AAN?$AAE?$AAC?$AAT?$AAI?$AAV?$AAI?$AAT@
0x180022100: rpcncaengine__MIDL_ProcFormatString
0x180026374: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18001B324: NcaRpcAPIsInterfaceDestroy
0x18000264C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18001EDF8: "`string'" ??_C@_1BI@JOEIKNLH@?$AAt?$AAe?$AAr?$AAe?$AAd?$AAo?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180026A00: "__cdecl tls_index" _tls_index
0x1800105F4: "unsigned long __cdecl NcaEvCollPingProbeSessionShutdown(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollPingProbeSessionShutdown@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x180002140: "void __cdecl NcaWfpNetEventCallback(void * __ptr64,struct FWPM_NET_EVENT4_ const * __ptr64)" ?NcaWfpNetEventCallback@@YAXPEAXPEBUFWPM_NET_EVENT4_@@@Z
0x1800214B0: "`string'" ??_C@_1EC@NLCFMMBH@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAS?$AAM?$AAA?$AAR?$AAT?$AAC?$AAA?$AAR?$AAD?$AA_?$AAN?$AAE?$AAE?$AAD?$AAE?$AAD@
0x18001E420: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180021080: "`string'" ??_C@_1BG@NBPGGBBH@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA6?$AA5?$AA?9?$AA1?$AA?$AA@
0x180001320: "public: virtual unsigned long __cdecl CNlmTriggerInetConnEventSink::AddRef(void) __ptr64" ?AddRef@CNlmTriggerInetConnEventSink@@UEAAKXZ
0x180021CD0: "`string'" ??_C@_0BA@NMGGPCHL@NcaRegCreateKey?$AA@
0x18002290C: "__cdecl tls_start" _tls_start
0x18001FA50: "`string'" ??_C@_1EC@MIFNPKIL@?$AAc?$AAe?$AAr?$AAt?$AAu?$AAt?$AAi?$AAl?$AA?5?$AA?9?$AAs?$AAi?$AAl?$AAe?$AAn?$AAt?$AA?5?$AA?9?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?5?$AA?9?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAm?$AAy@
0x18001E3E8: "__cdecl _imp_strchr" __imp_strchr
0x18001E518: "__cdecl _xl_z" __xl_z
0x18001DEA8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18000C1B0: NcaIPTriggerFindTunnelAddresses
0x180013530: NcaEvCollNamePrefInitialize
0x1800072FC: "unsigned long __cdecl SvrImpl_NcaNetworkClose(void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaNetworkClose@@YAKPEAX0PEAPEAX@Z
0x180026A98: gNcaThisModuleHandle
0x180005FE4: NcaConfigMgrUpdateVanUI
0x18001E2B8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18001E910: "`string'" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001DFA8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180021000: "`string'" ??_C@_1O@ICEICFKB@?$AA?$CF?$AAs?$AA?$DM?$AAb?$AAr?$AA?$DO?$AA?$AA@
0x180027530: "struct NCA_EVCOLL_HEALTH_COMPONENT_ gNcaEvCollHealth" ?gNcaEvCollHealth@@3UNCA_EVCOLL_HEALTH_COMPONENT_@@A
0x18001E110: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18001DC30: "__cdecl _imp_CreateSortedAddressPairs" __imp_CreateSortedAddressPairs
0x18001DF00: "__cdecl _imp_GetLongPathNameW" __imp_GetLongPathNameW
0x18001E150: "__cdecl _imp_WakeConditionVariable" __imp_WakeConditionVariable
0x180022400: "`string'" ??_C@_0EK@FKGLCLNP@?$CFs?3?5ALPC?5message?5id?$DN?$CFx?5required?5@
0x180027A58: "unsigned short * __ptr64 * wszNcaProbeType" ?wszNcaProbeType@@3PAPEAGA
0x180021318: "`string'" ??_C@_1BG@LEOAGOPM@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAI?$AAd?$AAl?$AAe?$AA?$AA@
0x18001FFAC: "`string'" ??_C@_15KNGHAKFK@?$AAI?$AAP?$AA?$AA@
0x18001E098: api-ms-win-core-shlwapi-legacy-l1-1-0_NULL_THUNK_DATA
0x18001E030: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180021360: "`string'" ??_C@_0CL@OOIIMFCH@NCA_EVCOLLECTOR_USER_IDLE?3?$CFd?5?$CIPD@
0x18000590C: NcaConfigMgrGetBool
0x180001CB0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180021058: "`string'" ??_C@_1CC@JMDFEEGN@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAS?$AAt?$AAr?$AAo?$AAn?$AAg?$AAA?$AAu?$AAt?$AAh?$AA?$AA@
0x180021FD0: "__cdecl _midl_frag57" __midl_frag57
0x18001DA20: "__cdecl _midl_frag56" __midl_frag56
0x18001D9E0: "__cdecl _midl_frag53" __midl_frag53
0x180021FD4: "__cdecl _midl_frag59" __midl_frag59
0x18001E840: IID_IUnknown
0x180022380: "`string'" ??_C@_1BC@LPLMDA@?$AA?2?$AAP?$AAd?$AAc?$AAP?$AAo?$AAr?$AAt?$AA?$AA@
0x18001DD78: "__cdecl _imp_RpcAsyncAbortCall" __imp_RpcAsyncAbortCall
0x18001DE20: "__cdecl _imp_WinHttpSetStatusCallback" __imp_WinHttpSetStatusCallback
0x18001101C: "void __cdecl NcaEvCollProbesInnerDelete(struct NCA_EVCOLL_USER_PROBES_ * __ptr64)" ?NcaEvCollProbesInnerDelete@@YAXPEAUNCA_EVCOLL_USER_PROBES_@@@Z
0x180020210: "`string'" ??_C@_1BI@KIIBCOID@?$AAP?$AAa?$AAs?$AAs?$AAi?$AAv?$AAe?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180010E2C: "struct NCA_EVCOLL_USER_PROBES_ * __ptr64 __cdecl NcaEvCollProbesFind(unsigned long)" ?NcaEvCollProbesFind@@YAPEAUNCA_EVCOLL_USER_PROBES_@@K@Z
0x180020F80: "enum TUNNEL_TYPE * TunnelTypeForIpv6SubEvcoll" ?TunnelTypeForIpv6SubEvcoll@@3PAW4TUNNEL_TYPE@@A
0x180014740: "void __cdecl NcaEvCollIdleSessionChange(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollIdleSessionChange@@YAXPEAX000@Z
0x18001E4A0: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18001E298: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x180004C2C: "long __cdecl NcaConfigMgrLoadProbeList(struct HKEY__ * __ptr64,struct NCA_PROBE_LIST_ * __ptr64)" ?NcaConfigMgrLoadProbeList@@YAJPEAUHKEY__@@PEAUNCA_PROBE_LIST_@@@Z
0x18001FAD8: "`string'" ??_C@_1BI@MMLHALHO@?$AAw?$AAh?$AAo?$AAa?$AAm?$AAi?$AA?5?$AA?1?$AAa?$AAl?$AAl?$AA?$AA@
0x18001D510: "unsigned short * __ptr64 * wszNCA_EVCOLLECTOR" ?wszNCA_EVCOLLECTOR@@3PAPEAGA
0x18001F3A0: "`string'" ??_C@_1HC@DKMMIBCG@?$AAS?$AAh?$AAo?$AAw?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAs?$AAe?$AAc?$AAR?$AAu?$AAl?$AAe?$AA?5?$AA?9?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAA@
0x18000B4E0: "public: virtual long __cdecl CNlmTriggerProfileEventSink::NetworkAdded(struct _GUID) __ptr64" ?NetworkAdded@CNlmTriggerProfileEventSink@@UEAAJU_GUID@@@Z
0x18001DC70: "__cdecl _imp_CloseThreadpool" __imp_CloseThreadpool
0x180023908: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800271B0: "struct NCA_IP_TRIGGER_COMP_ gNcaIpTriggerComp" ?gNcaIpTriggerComp@@3UNCA_IP_TRIGGER_COMP_@@A
0x180017E24: "long __cdecl StringCbCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCatW@@YAJPEAG_KPEBG@Z
0x1800143AC: "long __cdecl QueryFirewallEnabled(int * __ptr64)" ?QueryFirewallEnabled@@YAJPEAH@Z
0x180016EB4: "struct NCA_USER_ * __ptr64 __cdecl NcaUserStoreFind(unsigned long)" ?NcaUserStoreFind@@YAPEAUNCA_USER_@@K@Z
0x18001FF00: "`string'" ??_C@_0BG@OGFAJCKC@CreateThreadpoolTimer?$AA@
0x1800063B0: "unsigned long __cdecl NcaApiSrvImplIsNetworkReferenced(struct NCA_INTSERVER_NETWORK_HANDLE_ * __ptr64)" ?NcaApiSrvImplIsNetworkReferenced@@YAKPEAUNCA_INTSERVER_NETWORK_HANDLE_@@@Z
0x18000D0D0: NcaWtsSessionChangeIndicate
0x18000FDCC: "unsigned long __cdecl NcaEvCollHttpProbeCollectWinHttpRequestInit(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeCollectWinHttpRequestInit@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x180020700: "`string'" ??_C@_1DM@HBDBFICH@?$AAN?$AAc?$AAa?$AAG?$AAe?$AAt?$AAE?$AAv?$AAi?$AAd?$AAe?$AAn?$AAc?$AAe?$AAC?$AAo?$AAl?$AAl?$AAe?$AAc?$AAt?$AAo?$AAr?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x180011260: "void __cdecl NcaEvCollSMBProbeCollect(struct NCA_EVCOLL_PROBE_ * __ptr64,struct NCA_EVCOLL_USER_PROBES_ * __ptr64)" ?NcaEvCollSMBProbeCollect@@YAXPEAUNCA_EVCOLL_PROBE_@@PEAUNCA_EVCOLL_USER_PROBES_@@@Z
0x18001DF18: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x180002B24: WPP_SF_
0x1800239E4: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x18001DF40: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18001DC18: "__cdecl _imp_IcmpCloseHandle" __imp_IcmpCloseHandle
0x18001FEC0: "`string'" ??_C@_0N@PFDOPFFB@CreateEventW?$AA@
0x18001DB30: NCA_v1_0_DispatchTable
0x18001E0C8: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x180021CB0: WPP_f538e3dc944c310e96edfc86655d00ff_Traceguids
0x180018634: NcaLoadMuiString
0x180021B70: "`string'" ??_C@_0O@LDMFBLMD@NcaStringCopy?$AA@
0x18000875C: "unsigned long __cdecl NcaScriptLogsGetMultisiteStatus(unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?NcaScriptLogsGetMultisiteStatus@@YAKKPEAGPEAK@Z
0x1800107EC: "unsigned long __cdecl NcaEvCollProbeStart(unsigned long,enum NCA_EVCOLL_PROBE_ORIGIN_,struct NCA_EVCOLL_USER_PROBES_ * __ptr64,struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollProbeStart@@YAKKW4NCA_EVCOLL_PROBE_ORIGIN_@@PEAUNCA_EVCOLL_USER_PROBES_@@PEAUNCA_EVCOLL_PROBE_@@@Z
0x18001E360: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x18001E130: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x180003410: "long __cdecl NcaServiceSetStatus(void)" ?NcaServiceSetStatus@@YAJXZ
0x18001F010: "`string'" ??_C@_1EE@HIHAJHJH@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAH?$AAt?$AAt?$AAp?$AAs?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl@
0x18001E348: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x180023B60: "__cdecl _IMPORT_DESCRIPTOR_httpprxp" __IMPORT_DESCRIPTOR_httpprxp
0x18000FB50: "void __cdecl NcaEvCollHttpProbeCollectAsyncComplete(struct NCA_EVCOLL_PROBE_ * __ptr64,unsigned long)" ?NcaEvCollHttpProbeCollectAsyncComplete@@YAXPEAUNCA_EVCOLL_PROBE_@@K@Z
0x180009B84: "unsigned long __cdecl NcaScriptsLogsGetProbesStatus(struct NCA_USER_ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?NcaScriptsLogsGetProbesStatus@@YAKPEAUNCA_USER_@@KPEAGPEAK@Z
0x1800015A0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18001F9D0: "`string'" ??_C@_1HE@JHDKLCN@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?5?$AA?$CI?$AAm?$AAy?$AA?$CJ?$AA?5?$AA?$CI?$AAc?$AAe?$AAr?$AAt?$AAu?$AAt?$AAi?$AAl@
0x18001E3A0: "__cdecl _imp__initterm" __imp__initterm
0x180023AE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180017EF8: NcaCriticalSectionCreate
0x1800207C8: "`string'" ??_C@_1BO@FFKGLBHC@?$AA?5?$AA?$DL?$AA?5?$AA?$FL?$AAc?$AAh?$AAa?$AAr?$AA?$FN?$AA3?$AA0?$AA?5?$AA?$DL?$AA?5?$AA?$AA@
0x180021440: "`string'" ??_C@_1EA@DGCNNGFH@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAN?$AAA?$AAM?$AAE?$AA_?$AAP?$AAR?$AAE?$AAF?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA?$AA@
0x1800214F8: "`string'" ??_C@_1DE@EKBDEMAI@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAU?$AAN?$AAH?$AAE?$AAA?$AAL?$AAH?$AAT?$AAY?$AA?$AA@
0x18001DD58: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18000F4A0: NcaEvCollIPv6Initialize
0x18001DEC8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18001F418: "`string'" ??_C@_1BE@MMOBEHBD@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAM?$AAa?$AAi?$AAn?$AA?$AA@
0x1800201F0: "`string'" ??_C@_1BK@NDEIIPKJ@?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAE?$AAm?$AAa?$AAi?$AAl?$AA?$AA@
0x180013D10: "long __cdecl NcaEvCollIPHTTPsCertInitialize(void)" ?NcaEvCollIPHTTPsCertInitialize@@YAJXZ
0x1800263D8: "unsigned long * NcaProbeOriginIds" ?NcaProbeOriginIds@@3PAKA
0x180020D48: WPP_3578f31270733276cc8bdd5859d2a734_Traceguids
0x180017490: "int __cdecl NcaUserStoreTransferOwnership(struct NCA_USER_ * __ptr64)" ?NcaUserStoreTransferOwnership@@YAHPEAUNCA_USER_@@@Z
0x180021EC0: "`string'" ??_C@_04OFFCAMCD@Test?$AA@
0x180021098: "`string'" ??_C@_04HCDDPBNL@TRUE?$AA@
0x18001DC10: "__cdecl _imp_NotifyIpInterfaceChange" __imp_NotifyIpInterfaceChange
0x18001E468: "__cdecl _imp_RtlWaitOnAddress" __imp_RtlWaitOnAddress
0x18001DDD8: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x180007F40: NCA_EVENT_SUBSCRIPTION_HANDLE_rundown
0x180020D08: "`string'" ??_C@_1DM@GGJKEPPI@?$AAN?$AAc?$AAa?$AAM?$AAu?$AAl?$AAt?$AAi?$AAs?$AAi?$AAt?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAW?$AAM?$AAI?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180021A30: "`string'" ??_C@_1CI@MOPHILDC@?$AAD?$AAA?$AAP?$AAE?$AAv?$AAi?$AAd?$AAe?$AAn?$AAc?$AAe?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo?$AAt?$AA?$AA@
0x180021FA8: "__cdecl _midl_frag45" __midl_frag45
0x180023958: "__cdecl _IMPORT_DESCRIPTOR_IPHLPAPI" __IMPORT_DESCRIPTOR_IPHLPAPI
0x180021F80: "__cdecl _midl_frag44" __midl_frag44
0x180021FB8: "__cdecl _midl_frag47" __midl_frag47
0x180021F68: "__cdecl _midl_frag41" __midl_frag41
0x180023AC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18001D9C0: "__cdecl _midl_frag43" __midl_frag43
0x1800043B0: "long __cdecl NcaConfigMgrLoadCustomCommandList(struct HKEY__ * __ptr64,struct NCA_CUSTOM_COMMAND_LIST_ * __ptr64)" ?NcaConfigMgrLoadCustomCommandList@@YAJPEAUHKEY__@@PEAUNCA_CUSTOM_COMMAND_LIST_@@@Z
0x18001D9B0: "__cdecl _midl_frag42" __midl_frag42
0x18000D450: NcaWtsTriggerInitialize
0x18000230C: McTemplateU0qxx
0x180021F0C: "__cdecl _midl_frag4" __midl_frag4
0x18001AB20: Rpc_NcaToggleNamePreferenceState
0x18001E430: "__cdecl _imp_RtlWakeAddressAll" __imp_RtlWakeAddressAll
0x18000E520: "public: virtual unsigned long __cdecl NcaMultisiteEventSink::Release(void) __ptr64" ?Release@NcaMultisiteEventSink@@UEAAKXZ
0x180014B60: "void __cdecl NcaDAP(struct NCA_EVIDENCE_ const * __ptr64,struct NCA_STATUS_EVENT_ * __ptr64)" ?NcaDAP@@YAXPEBUNCA_EVIDENCE_@@PEAUNCA_STATUS_EVENT_@@@Z
0x180013390: "unsigned long __cdecl NcaEvCollNamePrefSetNrptRelevantPolicy(unsigned long)" ?NcaEvCollNamePrefSetNrptRelevantPolicy@@YAKK@Z
0x18000E690: NcaMultisiteTriggerShutdown
0x180026A08: "__cdecl _onexitend" __onexitend
0x18001DFD0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18001F740: "`string'" ??_C@_1FC@BAEAEMCN@?$AAD?$AAA?$AA?5?$AAM?$AAu?$AAl?$AAt?$AAi?$AAs?$AAi?$AAt?$AAe?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAA?$AAE?$AAn?$AAt?$AAr?$AAy?$AAP?$AAo?$AAi?$AAn?$AAt?$AAT?$AAa@
0x1800020A4: McTemplateU0zx
0x18001E4C8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000D384: NcaWtsSessionChangeTriggerUnregisterWait
0x18000B6C0: NcaNlmTriggerGetCurrentProfiles
0x18001FC70: NcaSvc_PerfTrack_SmartcardEntered_DAConnected_Start
0x180015344: "void __cdecl NcaTelemetryEventWriteDirectAccessDiag(struct NCA_DAP_USER_EVSNPSHT_ * __ptr64 const,struct NCA_STATUS_EVENT_ const * __ptr64,unsigned long)" ?NcaTelemetryEventWriteDirectAccessDiag@@YAXQEAUNCA_DAP_USER_EVSNPSHT_@@PEBUNCA_STATUS_EVENT_@@K@Z
0x18001DD90: "__cdecl _imp_QuerySecurityPackageInfoW" __imp_QuerySecurityPackageInfoW
0x180019FD4: NcaDebugPrintf
0x180007ED0: MIDL_nca_free
0x1800139F0: "void __cdecl NcaEvCollProxyChanged(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollProxyChanged@@YAXPEAX000@Z
0x180001E9A: SymCryptWipeAsmT4
0x180001E9D: SymCryptWipeAsmT5
0x180020A28: "`string'" ??_C@_1CG@KJLPCBBB@?$AAW?$AAT?$AAS?$AA_?$AAS?$AAE?$AAS?$AAS?$AAI?$AAO?$AAN?$AA_?$AAL?$AAO?$AAG?$AAO?$AAF?$AAF?$AA?$AA@
0x180001E97: SymCryptWipeAsmT6
0x180020940: "`string'" ??_C@_04HIBGFPH@NULL?$AA@
0x180001EA3: SymCryptWipeAsmT7
0x180001E89: SymCryptWipeAsmT0
0x180001E8A: SymCryptWipeAsmT1
0x18001DFC0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180001E93: SymCryptWipeAsmT2
0x180001E90: SymCryptWipeAsmT3
0x180001EB0: SymCryptWipeAsmT10
0x180001E86: SymCryptWipeAsmT8
0x18001E1B8: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180001EA9: SymCryptWipeAsmT9
0x180022360: WPP_e5a20f5dad90385975c866257caf5ce3_Traceguids
0x180020F90: WPP_53b07d360c1a3e753bfe4661c75aff79_Traceguids
0x18001107C: "void __cdecl NcaEvCollProbesUpdateEvidenceSummary(enum NCA_PROBE_TEST_TYPE_,int,unsigned long,struct NCA_EVCOLL_USER_PROBES_ * __ptr64)" ?NcaEvCollProbesUpdateEvidenceSummary@@YAXW4NCA_PROBE_TEST_TYPE_@@HKPEAUNCA_EVCOLL_USER_PROBES_@@@Z
0x18001F270: "`string'" ??_C@_1GA@KCAFHIGM@?$AAW?$AAF?$AAP?$AA?5?$AAN?$AAe?$AAt?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?5?$AA?$CI?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAf?$AAp?$AA?5?$AAs?$AAh?$AAo?$AAw?$AA?5?$AAn?$AAe@
0x18001E940: "`string'" ??_C@_0BC@LPNHCLEO@MibDeleteInstance?$AA@
0x18001E290: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18001DDF0: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x180020358: "`string'" ??_C@_1CO@CDIPGJM@?$AAO?$AA?3?$AAS?$AAY?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$AA@
0x18001DD98: "__cdecl _imp_FreeCredentialsHandle" __imp_FreeCredentialsHandle
0x180009FB8: NcaSrcLnkdTriggerRearm
0x180011F28: NcaEvCollProbesRestart
0x180027700: "struct NCA_DAP_EVSNPSHT_COMPONENT_ gNcaDapEvSnpshot" ?gNcaDapEvSnpshot@@3UNCA_DAP_EVSNPSHT_COMPONENT_@@A
0x18001DDC0: "__cdecl _imp_AcceptSecurityContext" __imp_AcceptSecurityContext
0x18001FED0: "`string'" ??_C@_0BM@HAHFPJPE@SvchostRegisterStopCallback?$AA@
0x180021840: "`string'" ??_C@_1DC@PFIOADOG@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAP?$AAI?$AAN?$AAG?$AA_?$AAD?$AAT?$AAE?$AA?$AA@
0x18001F0D0: "`string'" ??_C@_1CK@ILFCKOOD@?$AAc?$AAe?$AAr?$AAt?$AAu?$AAt?$AAi?$AAl?$AA?5?$AA?9?$AAs?$AAt?$AAo?$AAr?$AAe?$AA?5?$AAr?$AAo?$AAo?$AAt?$AA?$AA@
0x180020FD8: "`string'" ??_C@_1CE@BPBFOHJI@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?5?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$DM?$AAb?$AAr?$AA?$DO?$AA?$AN?$AA?6?$AA?$AA@
0x180020D90: "`string'" ??_C@_1GO@FDDADFB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x180026370: "__cdecl Init_global_epoch" _Init_global_epoch
0x18001E1A8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18001E4F8: "__cdecl _xi_a" __xi_a
0x18001F7F0: "`string'" ??_C@_1BC@NEBABOHG@?$AAd?$AAa?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x180003A50: NcaServiceAcceptWtsSessionChange
0x180021C40: "`string'" ??_C@_0CE@IMFIEJIK@NcaGetExpandedCanonicalLongPathN@
0x180008990: "unsigned long __cdecl NcaScriptLogsGetUserStatus(struct NCA_USER_ * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long * __ptr64)" ?NcaScriptLogsGetUserStatus@@YAKPEAUNCA_USER_@@KPEAGPEAK@Z
0x18001E190: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18001DEB0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180017200: "long __cdecl NcaUserStorePhrase2Initialize(void)" ?NcaUserStorePhrase2Initialize@@YAJXZ
0x180004280: "void __cdecl NcaConfigMgrIPUpdate(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaConfigMgrIPUpdate@@YAXPEAX000@Z
0x18001FE48: "`string'" ??_C@_0BE@PFMGOOMO@NcaServiceSetStatus?$AA@
0x18000A958: "long __cdecl GetConnectionPoints(struct INetworkListManager * __ptr64,struct _GUID const & __ptr64,struct IConnectionPoint * __ptr64 * __ptr64)" ?GetConnectionPoints@@YAJPEAUINetworkListManager@@AEBU_GUID@@PEAPEAUIConnectionPoint@@@Z
0x180020988: "`string'" ??_C@_1CC@FNJAKKOG@?$AAW?$AAT?$AAS?$AA_?$AAS?$AAE?$AAS?$AAS?$AAI?$AAO?$AAN?$AA_?$AAL?$AAO?$AAC?$AAK?$AA?$AA@
0x180021BE0: "`string'" ??_C@_0BI@PKNAODNF@NcaGetCanonicalPathName?$AA@
0x180021EBC: "`string'" ??_C@_03JDAHCAHC@Nca?$AA@
0x18001E2C0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18001AA80: Rpc_NcaStatusEventUnsubscribe
0x18001DC50: IPHLPAPI_NULL_THUNK_DATA
0x180017328: "void __cdecl NcaUserStoreRemove(struct NCA_USER_ * __ptr64)" ?NcaUserStoreRemove@@YAXPEAUNCA_USER_@@@Z
0x18001DD80: "__cdecl _imp_RpcServerUseProtseqW" __imp_RpcServerUseProtseqW
0x180004E74: "void __cdecl NcaConfigMgrProbeListEmpty(struct NCA_PROBE_LIST_ * __ptr64)" ?NcaConfigMgrProbeListEmpty@@YAXPEAUNCA_PROBE_LIST_@@@Z
0x180021390: WPP_e079a5808a7a30224e8923e8632460ed_Traceguids
0x18001E308: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1800172A0: "void __cdecl NcaUserStorePhrase2Shutdown(void)" ?NcaUserStorePhrase2Shutdown@@YAXXZ
0x1800145B0: NcaEvCollOnFirewallChange
0x180012D2C: WPP_SF_ds
0x18000DE4C: NcaPDCTriggerRearm
0x18001EDA0: "`string'" ??_C@_1FC@JLHLLDFK@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAT?$AAe?$AAr?$AAe?$AAd?$AAo?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt@
0x18001F560: "`string'" ??_C@_1EM@EEIGNNFD@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAs?$AAe?$AAc?$AAQ?$AAu?$AAi?$AAc?$AAk?$AAM?$AAo?$AAd?$AAe?$AAS?$AAA?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe@
0x1800064A4: "unsigned long __cdecl NcaApiSrvImplIsSubscriptionsValid(struct NCA_INTSERVER_EVENTS_HANDLE_ * __ptr64)" ?NcaApiSrvImplIsSubscriptionsValid@@YAKPEAUNCA_INTSERVER_EVENTS_HANDLE_@@@Z
0x180019CCC: NcaAlloc
0x180026000: WPP_GLOBAL_Control
0x18000AF40: "unsigned long __cdecl NcaNlmTriggerNotifySinkProc(void * __ptr64)" ?NcaNlmTriggerNotifySinkProc@@YAKPEAX@Z
0x1800142C0: "void __cdecl NcaEvCollFirewallShutdown(void)" ?NcaEvCollFirewallShutdown@@YAXXZ
0x180027A10: "unsigned short * __ptr64 * wszNcaScriptLogUserStatus" ?wszNcaScriptLogUserStatus@@3PAPEAGA
0x18001DE30: "__cdecl _imp_WinHttpConnect" __imp_WinHttpConnect
0x180021044: "`string'" ??_C@_11LOCGONAA@?$AA?$AA@
0x1800238F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18001ACF4: NcaAPIsIsAccessGranted
0x180004160: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180020A90: "`string'" ??_C@_1EO@DACCMBHI@?$AAP?$AAR?$AAO?$AAX?$AAY?$AAM?$AAG?$AAR?$AA_?$AAP?$AAR?$AAO?$AAV?$AAI?$AAD?$AAE?$AAR?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA_?$AAN?$AAO?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY@
0x180015824: NcaDAPEvidenceSnapshotSetUserState
0x180002AF0: WPP_SF_D
0x180002AF0: WPP_SF_d
0x1800213D0: "`string'" ??_C@_1CO@PIKHFNKM@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAP?$AAR?$AAO?$AAB?$AAE?$AAS?$AA?$AA@
0x180001B04: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x180026A30: "__cdecl pRawDllMain" _pRawDllMain
0x180021480: "`string'" ??_C@_1CO@OHIHJICL@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAN?$AAS?$AAI?$AAD?$AAE?$AA?$AA@
0x180017B90: NcaEtwPerfTrackGetHashId
0x180027B58: "int * gNcaEtwPerfTrackScenarioState" ?gNcaEtwPerfTrackScenarioState@@3PAHA
0x18001FF98: "`string'" ??_C@_1BE@MINLMOAD@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAs?$AAi?$AAt?$AAe?$AA?$AA@
0x18000DCA0: "unsigned long __cdecl NcaProxyTriggerRegisterWait(struct NCA_TRIGGER_OBJECT_ * __ptr64,void (__cdecl*)(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long),void * __ptr64,struct NCA_SRCLNKD_TRIGGER_OBJECT_ * __ptr64 * __ptr64)" ?NcaProxyTriggerRegisterWait@@YAKPEAUNCA_TRIGGER_OBJECT_@@P6AXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z2PEAPEAUNCA_SRCLNKD_TRIGGER_OBJECT_@@@Z
0x180023A20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x180001EB7: SymCryptWipeAsmT11
0x180015058: "void __cdecl NcaDAPLastEventTrace(struct NCA_DAP_USER_EVSNPSHT_ * __ptr64)" ?NcaDAPLastEventTrace@@YAXPEAUNCA_DAP_USER_EVSNPSHT_@@@Z
0x18001DCC0: "__cdecl _imp_VariantClear" __imp_VariantClear
0x1800224B8: IID_IWbemObjectSink
0x180008CD4: "unsigned long __cdecl NcaScriptLogsRunCommands(struct NCA_COMMAND_ENVIROMENT_ * __ptr64,unsigned long,void * __ptr64,struct NCA_PROCESS_ENVIRONMENT_ * __ptr64)" ?NcaScriptLogsRunCommands@@YAKPEAUNCA_COMMAND_ENVIROMENT_@@KPEAXPEAUNCA_PROCESS_ENVIRONMENT_@@@Z
0x180021ED8: "`string'" ??_C@_1BK@BPGFLIHL@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAi?$AAp?$AA_?$AAt?$AAc?$AAp?$AA?$AA@
0x180020C90: "`string'" ??_C@_1FA@PDJBGAAF@?$AAS?$AAE?$AAL?$AAE?$AAC?$AAT?$AA?5?$AA?$CK?$AA?5?$AAF?$AAR?$AAO?$AAM?$AA?5?$AAM?$AAS?$AAF?$AAT?$AA_?$AAD?$AAA?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AAI?$AAn?$AAd@
0x180020A70: "`string'" ??_C@_1BK@GPHAIHMH@?$AAP?$AAr?$AAo?$AAx?$AAy?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x18000DEF4: NcaPDCTriggerRegisterWait
0x180012114: NcaEvcollProbesProbesStatus
0x180005948: NcaConfigMgrGetCustomCommandCopy
0x180026C40: "struct NCA_CONFIG_MGR_COMPONENT_ gNcaConfigMgr" ?gNcaConfigMgr@@3UNCA_CONFIG_MGR_COMPONENT_@@A
0x180021C28: "`string'" ??_C@_0BB@PPFKPLJJ@GetLongPathNameW?$AA@
0x18001DC28: "__cdecl _imp_NotifyRouteChange2" __imp_NotifyRouteChange2
0x18001DDE0: SspiCli_NULL_THUNK_DATA
0x180002520: McTemplateU0qttx
0x18001BAF0: PdcpNotificationClientCallback
0x18001F268: "`string'" ??_C@_17IJNKPEME@?$AAw?$AAf?$AAp?$AA?$AA@
0x180023AD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180004870: "long __cdecl NcaConfigMgrLoadPolicy(struct NCA_POLICY_ * __ptr64)" ?NcaConfigMgrLoadPolicy@@YAJPEAUNCA_POLICY_@@@Z
0x180007EE0: NCA_ENGINE_HANDLE_rundown
0x18001E448: "__cdecl _imp_ZwAlpcSendWaitReceivePort" __imp_ZwAlpcSendWaitReceivePort
0x180006130: "long __cdecl NcaApiSrvImplInitialize(void)" ?NcaApiSrvImplInitialize@@YAJXZ
0x18001E0C0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001FC90: NcaSvc_PerfTrack_NAPRequired_DAConnected_Stop
0x18001A160: NcaRpcAPIsInitialize
0x180001840: "__cdecl _security_check_cookie" __security_check_cookie
0x18000A82C: NcaGPTriggerUnregisterWait
0x18001E4F0: "__cdecl _xc_z" __xc_z
0x180005EE0: NcaConfigMgrShutdown
0x180023980: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800154D8: NcaDAPEvidenceSnapshotGetGlobalState
0x18001E000: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800039A4: NcaComponentsShutdown
0x18001DC08: "__cdecl _imp_GetAdaptersAddresses" __imp_GetAdaptersAddresses
0x180027B74: "int gNcaEtwPerfTrackInitialized" ?gNcaEtwPerfTrackInitialized@@3HA
0x180019734: NcaRegQueryDWord
0x180005704: NcaConfigMgrDisableVanUI
0x18001DFF8: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x180021A68: "`string'" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x180019F70: NcaArrayDestroy
0x180011FD0: NcaEvCollProbesShutdown
0x18001B8DC: PdcNotificationClientRegister
0x180009250: "unsigned long __cdecl NcaScriptLogsWriteBody(void * __ptr64,struct NCA_USER_ * __ptr64)" ?NcaScriptLogsWriteBody@@YAKPEAXPEAUNCA_USER_@@@Z
0x18001FC10: ApiActivityEnd
0x1800152C0: "void __cdecl NcaTelemetryEventWriteDirectAccessCensus(void)" ?NcaTelemetryEventWriteDirectAccessCensus@@YAXXZ
0x18001B7B4: NcaRpcAPIsIsAccessGranted
0x180023B88: "__cdecl _IMPORT_DESCRIPTOR_fwpuclnt" __IMPORT_DESCRIPTOR_fwpuclnt
0x18001FF38: "`string'" ??_C@_1BE@PGIMJDHM@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAM?$AAg?$AAr?$AA?$AA@
0x18001FD50: ConfigUpdateStart
0x180004010: WppCleanupUm
0x180018618: NcaHResultToWindowsError
0x18000A060: NcaSrcLnkdTriggerRegisterWait
0x1800210D8: WPP_eb1a0b95a3bc3a3413ac9693d26475f6_Traceguids
0x18000BF80: "void __cdecl NotifyRouteCallback(void * __ptr64,struct _MIB_IPFORWARD_ROW2 * __ptr64,enum _MIB_NOTIFICATION_TYPE)" ?NotifyRouteCallback@@YAXPEAXPEAU_MIB_IPFORWARD_ROW2@@W4_MIB_NOTIFICATION_TYPE@@@Z
0x180002C90: "unsigned long __cdecl NcaServiceAsyncStartupRoutine(void * __ptr64)" ?NcaServiceAsyncStartupRoutine@@YAKPEAX@Z
0x180006414: "unsigned long __cdecl NcaApiSrvImplIsNetworkValid(struct NCA_INTSERVER_NETWORK_HANDLE_ * __ptr64)" ?NcaApiSrvImplIsNetworkValid@@YAKPEAUNCA_INTSERVER_NETWORK_HANDLE_@@@Z
0x180020948: "`string'" ??_C@_07PLBDLODJ@1s?5Mark?$AA@
0x18001FC08: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18001DE88: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18001E198: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180021B10: "`string'" ??_C@_1CA@EGIJPDM@?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAo?$AAr?$AAe?$AAP?$AAh?$AAa?$AAs?$AAe?$AA1?$AA?$AA@
0x1800195F0: NcaRegNotifyOnChange
0x180020C68: WPP_61c903364b7d331f2b9904545b8f42b8_Traceguids
0x18001E890: DapStateChanged
0x18001F6B8: "`string'" ??_C@_1CK@EHGMCNKH@?$AAR?$AAo?$AAu?$AAt?$AAe?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAR?$AAo?$AAu?$AAt?$AAe?$AA?$CJ?$AA?$AA@
0x18001FC30: NcaSvc_PerfTrack_SmartcardRequired_SmartcardEntered_Stop
0x18001DF58: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800224A8: IID_IWbemLocator
0x180021EA0: "`string'" ??_C@_0BL@LOPEKKIB@NcaArrayCreateFromRegistry?$AA@
0x18001E2D0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA
0x18001DDA0: "__cdecl _imp_InitializeSecurityContextW" __imp_InitializeSecurityContextW
0x18001E418: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x18001FCF0: NCA_NETWORK_DIRECTACCESS
0x180006D64: "unsigned long __cdecl SvrImpl_NcaGetConfig(void * __ptr64,void * __ptr64,enum NCA_CONFIG_,unsigned char * __ptr64,unsigned long * __ptr64)" ?SvrImpl_NcaGetConfig@@YAKPEAX0W4NCA_CONFIG_@@PEAEPEAK@Z
0x180021D48: "`string'" ??_C@_0BB@ELDHPCAL@NcaRegQueryDWord?$AA@
0x18001DF48: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180002720: "__cdecl _chkstk" __chkstk
0x18001FD60: ConfigUpdateEnd
0x180006050: NcaEventLogInitialize
0x18001DE50: "__cdecl _imp_FreeAddrInfoW" __imp_FreeAddrInfoW
0x180003240: "unsigned long __cdecl NcaServiceHandlerEx(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?NcaServiceHandlerEx@@YAKKKPEAX0@Z
0x18000B4E0: "public: virtual long __cdecl CNlmTriggerProfileEventSink::NetworkDeleted(struct _GUID) __ptr64" ?NetworkDeleted@CNlmTriggerProfileEventSink@@UEAAJU_GUID@@@Z
0x18001E2C8: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x1800200A0: "`string'" ??_C@_1BO@ONMOEGNC@?$AAE?$AAn?$AAt?$AAr?$AAy?$AAP?$AAo?$AAi?$AAn?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180020018: "`string'" ??_C@_1CG@CNBMEKBG@?$AAr?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAt?$AAa?$AAn?$AAd?$AAa?$AAr?$AAd?$AAC?$AAi?$AAm?$AAv?$AA2?$AA?$AA@
0x18001E2F0: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x18001E1B0: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x180023A0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x18001C2BC: PdcpAlpcReleaseResources
0x18001E810: IID_INetworkListManagerEvents
0x180001EBE: SymCryptWipeAsmT12
0x180011C00: NcaEvCollProbesInitialize
0x18001E3C8: "__cdecl _imp__vsnprintf_s" __imp__vsnprintf_s
0x180005DE0: NcaConfigMgrPolUpdateShutdown
0x18000B500: "public: virtual long __cdecl CNlmTriggerProfileEventSink::NetworkConnectivityChanged(struct _GUID,enum NLM_CONNECTIVITY) __ptr64" ?NetworkConnectivityChanged@CNlmTriggerProfileEventSink@@UEAAJU_GUID@@W4NLM_CONNECTIVITY@@@Z
0x18001E040: "__cdecl _imp_RegNotifyChangeKeyValue" __imp_RegNotifyChangeKeyValue
0x180003F18: TraceLoggingRegisterEx
0x180020C48: "`string'" ??_C@_1CA@DDGOFJOJ@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAe?$AAd?$AA?$AA@
0x18001E470: "__cdecl _imp_ZwAlpcConnectPort" __imp_ZwAlpcConnectPort
0x18001FFB8: "`string'" ??_C@_19HNIHAGKA@?$AAU?$AAD?$AAP?$AA?3?$AA?$AA@
0x18001DCE0: "__cdecl _imp_RpcStringBindingParseW" __imp_RpcStringBindingParseW
0x180006320: "unsigned long __cdecl NcaApiSrvImplIsEngineValid(struct NCA_INTSERVER_ENGINE_HANDLE_ * __ptr64)" ?NcaApiSrvImplIsEngineValid@@YAKPEAUNCA_INTSERVER_ENGINE_HANDLE_@@@Z
0x180006B5C: "unsigned long __cdecl SvrImpl_NcaExecuteAndCaptureLogs(void * __ptr64,void * __ptr64,unsigned short const * __ptr64 const)" ?SvrImpl_NcaExecuteAndCaptureLogs@@YAKPEAX0QEBG@Z
0x18000BEC0: "void __cdecl NotifyIpInterfaceCallback(void * __ptr64,struct _MIB_IPFORWARD_ROW2 * __ptr64,enum _MIB_NOTIFICATION_TYPE)" ?NotifyIpInterfaceCallback@@YAXPEAXPEAU_MIB_IPFORWARD_ROW2@@W4_MIB_NOTIFICATION_TYPE@@@Z
0x18001FCE0: NcaSvc_PerfTrack_InternetConnected_DAConnected_Start
0x18001E088: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18001E210: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x18000A378: NcaTriggerRegisterWait
0x180021808: "`string'" ??_C@_1DG@MJBDCLEO@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAD?$AAT?$AAE?$AA_?$AAE?$AAX?$AAI?$AAS?$AAT?$AAS?$AA?$AA@
0x180019968: NcaRegQueryNumValues
0x1800212D8: "`string'" ??_C@_1BO@NEEALFGI@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAF?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?$AA@
0x180021990: "`string'" ??_C@_1DM@IGFFEEME@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAF?$AAI?$AAR?$AAE?$AAW?$AAA?$AAL?$AAL?$AA_?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x180021E40: "`string'" ??_C@_0BG@HNKOLBGN@NcaRegNotifyCreateKey?$AA@
0x180022370: WPP_60a529cda91939f7629d8692f775f55a_Traceguids
0x18001FCB0: NcaSvc_PerfTrack_SmartcardRequired_SmartcardEntered_Start
0x180019A28: NcaRegQueryString
0x180020F70: "enum NCA_EVCOLLECTOR_ * NcaEvCollectorIDForIpv6SubEvcoll" ?NcaEvCollectorIDForIpv6SubEvcoll@@3PAW4NCA_EVCOLLECTOR_@@A
0x18001DC60: "__cdecl _imp_CreateJobObjectW" __imp_CreateJobObjectW
0x18001E0A0: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18001F5B0: "`string'" ??_C@_1BE@EOECFGJK@?$AAi?$AAp?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x180023A48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180015524: NcaDAPEvidenceSnapshotGetUserState
0x18001E320: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x18001E330: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x180004EBC: "long __cdecl NcaConfigMgrSortDteList(struct NCA_POLICY_ * __ptr64)" ?NcaConfigMgrSortDteList@@YAJPEAUNCA_POLICY_@@@Z
0x18001FC40: NcaSvc_PerfTrack_InternetConnected_DAConnected_Stop
0x18001E010: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180021D78: "`string'" ??_C@_0P@OCNFOOE@NcaRegSetDWord?$AA@
0x18001E520: "__cdecl _guard_fids_table" __guard_fids_table
0x1800060C0: NcaEventLogShutdown
0x180020A60: WPP_3af2e629995d3629ccc96387b724eda4_Traceguids
0x18001EB60: "`string'" ??_C@_1DC@MBOKGAPA@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAI?$AAn?$AAf?$AAo?$AA?5?$AA?$CI?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAi?$AAn?$AAf?$AAo?$AA?$CJ?$AA?$AA@
0x18001FC80: ModuleShutdownEnd
0x18001E410: msvcrt_NULL_THUNK_DATA
0x18001DC58: "__cdecl _imp_AssignProcessToJobObject" __imp_AssignProcessToJobObject
0x18001D090: "__cdecl load_config_used" _load_config_used
0x180027B88: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUhvieviUlyquivUznwGEUkivxlnkOlyq@NcaApiServer" __@@_PchSym_@00@KxulyqvxgPillgKxumvgUmxzUzkrUhvieviUlyquivUznwGEUkivxlnkOlyq@NcaApiServer
0x18001DC80: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180015D44: NcaDAPEvidenceUserSnapshotRelease
0x18001A3C0: NcaRpcAPIsShutdown
0x18001AF8C: NcaRpcAPIsInterfaceCreate
0x18002396C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18001F810: "`string'" ??_C@_1GE@MKPGCIDE@?$AAD?$AAA?$AA?5?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAA?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAE?$AAx?$AAp?$AAe?$AAr?$AAi?$AAe@
0x18001DFE8: "__cdecl _imp_QueueUserAPC" __imp_QueueUserAPC
0x18001E990: "`string'" ??_C@_1DM@EMDKHCFL@?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAs?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAm?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18000C5E4: NcaIPTriggerRegisterWait
0x180021308: WPP_850635ee9b8332c4a67d4561df683d90_Traceguids
0x1800205B0: "`string'" ??_C@_1DA@JFGIPFCF@?$AAN?$AAc?$AAa?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAb?$AAe?$AA?$AA@
0x180020AE0: "`string'" ??_C@_1DM@NINMPHKN@?$AAN?$AAc?$AAa?$AAP?$AAr?$AAo?$AAx?$AAy?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAE?$AAv?$AAe?$AAn?$AAt?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x180001320: "public: virtual unsigned long __cdecl NcaMultisiteEventSink::AddRef(void) __ptr64" ?AddRef@NcaMultisiteEventSink@@UEAAKXZ
0x180017A80: McGenEventUnregister
0x18001D380: "const CNlmTriggerInetConnEventSink::`vftable'" ??_7CNlmTriggerInetConnEventSink@@6B@
0x1800193DC: NcaRegNotifyCreate
0x18001E490: "__cdecl _imp_ZwClose" __imp_ZwClose
0x180021E78: "`string'" ??_C@_0BI@ILHBFDHH@RegNotifyChangeKeyValue?$AA@
0x180010520: "unsigned long __cdecl NcaEvCollPingProbeSessionInit(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollPingProbeSessionInit@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x18001DBF0: "__cdecl _imp_FWChangeNotificationDestroy" __imp_FWChangeNotificationDestroy
0x18001EED0: "`string'" ??_C@_1GK@DCPOBGJF@?$AAI?$AAP?$AA?9?$AAH?$AAT?$AAT?$AAP?$AAs?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI@
0x18000E150: "public: virtual long __cdecl NcaMultisiteEventSink::Indicate(long,struct IWbemClassObject * __ptr64 * __ptr64) __ptr64" ?Indicate@NcaMultisiteEventSink@@UEAAJJPEAPEAUIWbemClassObject@@@Z
0x18000BD70: "unsigned long __cdecl NVNWorkerThread(void * __ptr64)" ?NVNWorkerThread@@YAKPEAX@Z
0x180023AAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000CA90: NcaWfpNetEventTriggerUnregisterWait
0x18000FE9C: "void __cdecl NcaEvCollHttpProbeCollectWinHttpSessionCloseUnderLock(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeCollectWinHttpSessionCloseUnderLock@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x18001DE80: "__cdecl _imp_CoSetProxyBlanket" __imp_CoSetProxyBlanket
0x180009F0C: "void __cdecl NcaSrcLnkdTriggerUnregisterFromSource(struct NCA_SYNCED_LIST_HEAD_ * __ptr64,struct _LIST_ENTRY * __ptr64)" ?NcaSrcLnkdTriggerUnregisterFromSource@@YAXPEAUNCA_SYNCED_LIST_HEAD_@@PEAU_LIST_ENTRY@@@Z
0x18001BDCC: PdcPortOpen
0x180020C78: WPP_f74f972af20b3cee80caf4f330cbf87e_Traceguids
0x18001E1E0: "__cdecl _imp_LeaveCriticalSectionWhenCallbackReturns" __imp_LeaveCriticalSectionWhenCallbackReturns
0x180020688: "`string'" ??_C@_1DK@KDJNELJN@?$AAN?$AAc?$AAa?$AAT?$AAo?$AAg?$AAg?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x180021580: "`string'" ??_C@_1EE@OPCOCCHM@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAC?$AAO?$AAR?$AAP?$AA_?$AAC?$AAO?$AAN?$AAN?$AAE?$AAC?$AAT?$AAI?$AAV?$AAI?$AAT@
0x180001EC5: SymCryptWipeAsmT13
0x180020868: "unsigned long * NcaScriptLogUserCommandsIds" ?NcaScriptLogUserCommandsIds@@3PAKA
0x180019D08: NcaAllocCheckSize
0x18001DD38: "__cdecl _imp_RpcBindingToStringBindingW" __imp_RpcBindingToStringBindingW
0x1800212A0: "`string'" ??_C@_1CE@ICNCCCJD@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAI?$AAP?$AAH?$AAT?$AAT?$AAP?$AAs?$AAC?$AAe?$AAr?$AAt?$AA?$AA@
0x18001FE98: "`string'" ??_C@_0M@CNALKNPF@ServiceMain?$AA@
0x180021048: WPP_6c0517c5ba2f35a3e81c6063da4de26c_Traceguids
0x18001EA40: Microsoft_Windows_NcasvcLevels
0x18001A860: Rpc_NcaNetworkOpen
0x18001E3B8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180013458: "long __cdecl NcaEvCollNamePrefValidateNrptRelevantPolicyConfig(void)" ?NcaEvCollNamePrefValidateNrptRelevantPolicyConfig@@YAJXZ
0x180021A58: "`string'" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x180007F80: NCA_NETWORK_HANDLE_rundown
0x180007D10: "unsigned long __cdecl SvrImpl_NcaToggleNamePreferenceState(void * __ptr64,void * __ptr64)" ?SvrImpl_NcaToggleNamePreferenceState@@YAKPEAX0@Z
0x180021D30: "`string'" ??_C@_0BD@HPNCFAMC@NcaRegQueryNumKeys?$AA@
0x180012350: "void __cdecl NcaEvCollStrongAuthCollect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollStrongAuthCollect@@YAXPEAX000@Z
0x18001EB98: "`string'" ??_C@_19NHGJCIOF@?$AA6?$AAt?$AAo?$AA4?$AA?$AA@
0x18000C240: NcaIPTriggerInitialize
0x18000B660: "public: virtual unsigned long __cdecl CNlmTriggerInetConnEventSink::Release(void) __ptr64" ?Release@CNlmTriggerInetConnEventSink@@UEAAKXZ
0x18001DF70: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18001DCD8: "__cdecl _imp_RpcBindingInqAuthClientW" __imp_RpcBindingInqAuthClientW
0x18000BFE0: "void __cdecl RouteChangeNotifierAPC(unsigned __int64)" ?RouteChangeNotifierAPC@@YAX_K@Z
0x18001DF78: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x180015460: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180026330: "struct _tag_NCA_RPC_INTF_CONTROL_INFO gNcaRpcAPIsControlStruct" ?gNcaRpcAPIsControlStruct@@3U_tag_NCA_RPC_INTF_CONTROL_INFO@@A
0x18000676C: "unsigned long __cdecl NcaIsNonSystemUser(void * __ptr64,int * __ptr64)" ?NcaIsNonSystemUser@@YAKPEAXPEAH@Z
0x18001E070: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180017090: "long __cdecl NcaUserStorePhrase1Initialize(void)" ?NcaUserStorePhrase1Initialize@@YAJXZ
0x18001E008: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18001E168: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x180020870: "unsigned long * NcaScriptLogAdminCommandsIds" ?NcaScriptLogAdminCommandsIds@@3PAKA
0x180021A08: "`string'" ??_C@_1CI@JKDEEBOD@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAM?$AAA?$AAX?$AA?$AA@
0x18001F720: "`string'" ??_C@_1BE@NCCHJOAI@?$AAm?$AAu?$AAl?$AAt?$AAi?$AAs?$AAi?$AAt?$AAe?$AA?$AA@
0x180013FB0: "void __cdecl NcaEvCollIphttpsCertChanged(void * __ptr64,long)" ?NcaEvCollIphttpsCertChanged@@YAXPEAXJ@Z
0x180021DF8: "`string'" ??_C@_0BA@GJPNJIAM@RegDeleteValueW?$AA@
0x18001FF50: "`string'" ??_C@_1CG@DPCFHFAD@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAM?$AAg?$AAr?$AAP?$AAo?$AAl?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x180026F10: "struct NCA_MULTISITE_TRIGGER_COMP_ gNcaMultisiteTriggerComp" ?gNcaMultisiteTriggerComp@@3UNCA_MULTISITE_TRIGGER_COMP_@@A
0x18001FD30: NcaSvc_PerfTrack_InternetConnected_ResolveName_Start
0x18001E1E8: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x18001C0E0: PdcpAlpcCallback
0x18001E0E8: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x18001E258: "__cdecl _imp_EventWrite" __imp_EventWrite
0x180021D60: "`string'" ??_C@_0BB@GLNAEDBD@RegQueryValueExW?$AA@
0x18001E450: "__cdecl _imp_TpReleaseAlpcCompletion" __imp_TpReleaseAlpcCompletion
0x180020228: "`string'" ??_C@_1CM@OLEJKNMP@?$AAN?$AAa?$AAm?$AAe?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x180020970: "`string'" ??_C@_1BG@CBPPAFFF@?$AAW?$AAt?$AAs?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x1800260A0: "struct NCA_COMMAND_ENVIROMENT_ * gScriptLogUserCommands" ?gScriptLogUserCommands@@3PAUNCA_COMMAND_ENVIROMENT_@@A
0x180018048: NcaExpandEnvironmentStrings
0x18001DBD8: "__cdecl _imp_DnsGetPolicyTableInfo" __imp_DnsGetPolicyTableInfo
0x180012290: WPP_SF_SSd
0x180017CBC: NcaEtwPerfTrackUpdate
0x180021F10: "__cdecl _midl_frag8" __midl_frag8
0x18000FCBC: "void __cdecl NcaEvCollHttpProbeCollectUpdateEvidenceAfterNameResolution(struct NCA_EVCOLL_PROBE_ * __ptr64,int,enum NCA_PROBE_TEST_TYPE_,int)" ?NcaEvCollHttpProbeCollectUpdateEvidenceAfterNameResolution@@YAXPEAUNCA_EVCOLL_PROBE_@@HW4NCA_PROBE_TEST_TYPE_@@H@Z
0x180017170: "void __cdecl NcaUserStorePhrase1Shutdown(void)" ?NcaUserStorePhrase1Shutdown@@YAXXZ
0x18000F410: "int __cdecl NcaEvCollIPv6IsDisabled(void)" ?NcaEvCollIPv6IsDisabled@@YAHXZ
0x18000FA90: "void __cdecl NcaEvCollHttpProbeCollectAsyncCallback(void * __ptr64,unsigned __int64,unsigned long,void * __ptr64,unsigned long)" ?NcaEvCollHttpProbeCollectAsyncCallback@@YAXPEAX_KK0K@Z
0x18001DD40: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x18001E080: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180018EDC: NcaRegCreateKey
0x18001E038: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800212C8: WPP_871cc87e7db4372ec0143faf09cb2146_Traceguids
0x18001571C: NcaDAPEvidenceSnapshotSetGlobalState
0x18001DD68: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x18001FC50: NcaSvc_PerfTrack_InternetConnected_ResolveName_Stop
0x180020A00: "`string'" ??_C@_1CE@FKDHCAOO@?$AAW?$AAT?$AAS?$AA_?$AAS?$AAE?$AAS?$AAS?$AAI?$AAO?$AAN?$AA_?$AAL?$AAO?$AAG?$AAO?$AAN?$AA?$AA@
0x180021E08: "`string'" ??_C@_0BD@JKCNJAPA@NcaRegNotifyCreate?$AA@
0x18001A7D0: Rpc_NcaNetworkClose
0x180001DD0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18001DF88: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18001F170: "`string'" ??_C@_1EM@HAMENGFB@?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAn?$AAs?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAN?$AAr?$AAp?$AAt?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe@
0x1800114C8: "void __cdecl NcaEvcollProbeStatePrintf(int,int,unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvcollProbeStatePrintf@@YAXHHPEAG_KPEAPEAGPEA_KPEAUNCA_EVCOLL_PROBE_@@@Z
0x1800076B0: "unsigned long __cdecl SvrImpl_NcaStatusEventSubscribe(void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaStatusEventSubscribe@@YAKPEAX0PEAPEAX@Z
0x180006960: "void __cdecl SvrImpl_NcaEngineCloseCore(struct NCA_INTSERVER_ENGINE_HANDLE_ * __ptr64)" ?SvrImpl_NcaEngineCloseCore@@YAXPEAUNCA_INTSERVER_ENGINE_HANDLE_@@@Z
0x18001DC20: "__cdecl _imp_Icmp6SendEcho2" __imp_Icmp6SendEcho2
0x18000BC80: NcaNlmTriggerShutdown
0x1800057B4: NcaConfigMgrEnableVanUI
0x180009C48: NcaScriptLogsGenerateLogsAndCaptureFile
0x1800182B4: NcaGetCanonicalPathName
0x18001E920: WPP_6cb3d90c6f9438b6550600ea18f69f53_Traceguids
0x180001ED0: SymCryptWipeAsmT14
0x18001F2D0: "`string'" ??_C@_1EA@JEKJMLKE@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAf?$AAp?$AA?5?$AAs?$AAh?$AAo?$AAw?$AA?5?$AAn?$AAe?$AAt?$AAe?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?$DN?$AA?9?$AA?$AA@
0x18000D03C: "void __cdecl NcaWtsTriggerCleanup(void)" ?NcaWtsTriggerCleanup@@YAXXZ
0x180021D88: "`string'" ??_C@_0P@LIPJIDOO@RegSetValueExW?$AA@
0x18001DDB0: "__cdecl _imp_RevertSecurityContext" __imp_RevertSecurityContext
0x18001FCD0: NcaSvc_PerfTrack_InternetConnected_ActionableState_Stop
0x18001DE00: "__cdecl _imp_UnregisterGPNotification" __imp_UnregisterGPNotification
0x180020760: "`string'" ??_C@_1GG@MGPBCJCC@?$AA?5?$AA?9?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?5?$AA?$CC?$AA?$CG?$AA?5?$AA?$HL?$AA?5?$AA$?$AAg?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?3?$AAF?$AAo?$AAr?$AAm?$AAa?$AAt?$AAE?$AAn?$AAu@
0x18000F610: NcaEvCollIPv6Shutdown
0x1800166D0: "void __cdecl NcaUserStoreCloseCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?NcaUserStoreCloseCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x18000BF20: "void __cdecl NotifyIpUnicastAddrCallback(void * __ptr64,struct _MIB_IPFORWARD_ROW2 * __ptr64,enum _MIB_NOTIFICATION_TYPE)" ?NotifyIpUnicastAddrCallback@@YAXPEAXPEAU_MIB_IPFORWARD_ROW2@@W4_MIB_NOTIFICATION_TYPE@@@Z
0x1800207F0: "`string'" ??_C@_1HI@NKIMLECN@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAP?$AAo?$AAw@
0x18001E2E0: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18001FD00: NcaSvc_PerfTrack_InternetConnected_DTESucceeded_Start
0x18001DD00: "__cdecl _imp_RpcServerUnregisterIfEx" __imp_RpcServerUnregisterIfEx
0x180019D50: NcaFree
0x180023890: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180018210: NcaFreeMuiStringTable
0x18001E4B0: "__cdecl _imp_RtlIpv6AddressToStringW" __imp_RtlIpv6AddressToStringW
0x18000E930: NcaEvCollPolicyPresenceInitialize
0x18001FFD8: "`string'" ??_C@_1M@EAMODDKC@?$AAH?$AAT?$AAT?$AAP?$AA?3?$AA?$AA@
0x180013180: "void __cdecl NcaEvCollNamePrefProfileChange(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollNamePrefProfileChange@@YAXPEAX000@Z
0x180022398: "`string'" ??_C@_0BH@NNNJKHIK@PdcpAlpcProcessMessage?$AA@
0x18001DC90: "__cdecl _imp_RegisterWaitForSingleObject" __imp_RegisterWaitForSingleObject
0x18001FCC0: NcaSvc_PerfTrack_InternetConnected_ActionableState_Start
0x180021020: "`string'" ??_C@_1BG@LNCGHJPF@?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?5?$AAN?$AAC?$AAA?$AA?$AA@
0x18000FDA0: "void __cdecl NcaEvCollHttpProbeCollectWinHttpRequestCloseUnderLock(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeCollectWinHttpRequestCloseUnderLock@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x18001DD60: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x180026010: MS_NCASVC_ETW_PROVIDER_ID_Context
0x18001EC70: "`string'" ??_C@_1FO@LJEHFPJG@?$AAP?$AAr?$AAo?$AAx?$AAy?$AA?5?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AA?$CI?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAi?$AAn?$AAh?$AAt@
0x18001E248: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x18000A224: NcaSrcLnkdTriggerUnregisterWait
0x18001FFF8: "`string'" ??_C@_1O@FCKPDLGO@?$AAP?$AAr?$AAo?$AAb?$AAe?$AAs?$AA?$AA@
0x180026420: "unsigned long * NcaLogStatusEventSubtypeIds" ?NcaLogStatusEventSubtypeIds@@3PAKA
0x18000FD64: "void __cdecl NcaEvCollHttpProbeCollectWinHttpRequestClose(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeCollectWinHttpRequestClose@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x180023A5C: "__cdecl _IMPORT_DESCRIPTOR_WINHTTP" __IMPORT_DESCRIPTOR_WINHTTP
0x180015580: NcaDAPEvidenceSnapshotInitialize
0x1800078BC: "void __cdecl SvrImpl_NcaStatusEventSubscriptionGetLastEvent(struct _RPC_ASYNC_STATE * __ptr64,void * __ptr64,void * __ptr64,struct NCA_STATUS_EVENT_ * __ptr64)" ?SvrImpl_NcaStatusEventSubscriptionGetLastEvent@@YAXPEAU_RPC_ASYNC_STATE@@PEAX1PEAUNCA_STATUS_EVENT_@@@Z
0x180027940: "struct NCA_RPC_APIS_COMPONENT_ gNcaRpcAPIs" ?gNcaRpcAPIs@@3UNCA_RPC_APIS_COMPONENT_@@A
0x1800200C0: "`string'" ??_C@_1BO@EFMELPNL@?$AAC?$AAu?$AAs?$AAt?$AAo?$AAm?$AAC?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AAs?$AA?$AA@
0x180021B00: WPP_3763270b5ef73b7953ea04f094ad4c3c_Traceguids
0x18001E3C0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800086A4: "void __cdecl NcaScriptLogsFreeStrings(void)" ?NcaScriptLogsFreeStrings@@YAXXZ
0x180023A84: "__cdecl _IMPORT_DESCRIPTOR_DNSAPI" __IMPORT_DESCRIPTOR_DNSAPI
0x180012E70: NcaEvCollHealthInitialize
0x180011A44: NcaEvCollProbesCreate
0x1800223B0: "`string'" ??_C@_0CI@ONNGEIAO@?$CFs?3?5Error?5receiving?5message?5from@
0x18001E4C0: ntdll_NULL_THUNK_DATA
0x18001E3F0: "__cdecl _imp_memcpy" __imp_memcpy
0x180001878: "__cdecl Init_thread_footer" _Init_thread_footer
0x180023A98: "__cdecl _IMPORT_DESCRIPTOR_SspiCli" __IMPORT_DESCRIPTOR_SspiCli
0x1800263A0: "unsigned long * NcaScriptLogProcessStatusIds" ?NcaScriptLogProcessStatusIds@@3PAKA
0x180027A38: "unsigned short * __ptr64 * wszNcaProbeResult" ?wszNcaProbeResult@@3PAPEAGA
0x18001FE78: "`string'" ??_C@_0BN@PFAJKLFD@RegisterServiceCtrlHandlerEx?$AA@
0x18001C43C: PdcPrint
0x180023944: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x180004420: "long __cdecl NcaConfigMgrLoadDteList(struct HKEY__ * __ptr64,struct NCA_PROBE_LIST_ * __ptr64)" ?NcaConfigMgrLoadDteList@@YAJPEAUHKEY__@@PEAUNCA_PROBE_LIST_@@@Z
0x180020930: WPP_a4fec3a3c94030a207946759d8e20f3d_Traceguids
0x18001DC78: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180021010: "`string'" ??_C@_1M@GFFHLPEC@?$AA2?$AA0?$AA0?$AA0?$AA0?$AA?$AA@
0x18001E850: FWPM_CONDITION_NET_EVENT_TYPE
0x1800279C8: "unsigned short * __ptr64 * wszNcaScriptLogProcessStatus" ?wszNcaScriptLogProcessStatus@@3PAPEAGA
0x18001C140: PdcpAlpcProcessMessage
0x180014F50: "void __cdecl NcaDAPEvidenceUserSnapshotAddRef(struct NCA_DAP_USER_EVSNPSHT_ * __ptr64)" ?NcaDAPEvidenceUserSnapshotAddRef@@YAXPEAUNCA_DAP_USER_EVSNPSHT_@@@Z
0x18001F320: "`string'" ??_C@_1HC@PGMJDACJ@?$AAI?$AAP?$AAs?$AAe?$AAc?$AA?5?$AAR?$AAu?$AAl?$AAe?$AAs?$AA?5?$AA?$CI?$AAS?$AAh?$AAo?$AAw?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAs?$AAe?$AAc?$AAR?$AAu?$AAl?$AAe?$AA?5?$AA?9@
0x18001E220: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180023868: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180017FE0: NcaExcludeShareLockLeave
0x18001E8A0: StatusChanged
0x180018A04: NcaStringBuild
0x18001E1C0: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x18001EB48: "`string'" ??_C@_1BG@HBLHACOB@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x18000D630: NcaWtsTriggerShutdown
0x18001FF18: WPP_ea69e65453b43016a6f30e313b5815b1_Traceguids
0x18001E230: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180026378: "__cdecl _security_cookie" __security_cookie
0x18001E058: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000E078: NcaPDCTriggerUnregisterWait
0x180002720: "__cdecl alloca_probe" _alloca_probe
0x180001ED8: SymCryptWipeAsmT15
0x18000F6E4: "void __cdecl NcaEvCollHttpProbeCollect(struct NCA_EVCOLL_PROBE_ * __ptr64,struct NCA_EVCOLL_USER_PROBES_ * __ptr64)" ?NcaEvCollHttpProbeCollect@@YAXPEAUNCA_EVCOLL_PROBE_@@PEAUNCA_EVCOLL_USER_PROBES_@@@Z
0x180016BDC: "unsigned long __cdecl NcaUserStoreCreateEvColls(struct NCA_USER_ * __ptr64)" ?NcaUserStoreCreateEvColls@@YAKPEAUNCA_USER_@@@Z
0x1800219D0: "`string'" ??_C@_1DE@DMMLIDDG@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAU?$AAS?$AAE?$AAR?$AA_?$AAI?$AAD?$AAL?$AAE?$AA?$AA@
0x180021038: "`string'" ??_C@_19CABHAKPH@?$AAH?$AAE?$AAA?$AAD?$AA?$AA@
0x18001DE78: WS2_32_NULL_THUNK_DATA
0x180021D98: "`string'" ??_C@_0BC@IMJLMALJ@NcaRegQueryString?$AA@
0x18000A530: NcaTriggerUnregisterWait
0x18001E288: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180013750: NcaEvCollNamePrefShutdown
0x18001DBC0: "char * __ptr64 * PolicyObjectName" ?PolicyObjectName@@3PAPEADA
0x18001E1D0: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180020EC0: "`string'" ??_C@_1BG@MOJCLCMK@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAI?$AAP?$AAv?$AA6?$AA?$AA@
0x18001E8E0: Trigger
0x18001A490: Rpc_NcaEngineOpen
0x18001E0F8: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x18001F910: "`string'" ??_C@_1FE@BBHEMHON@?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AA?5?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5?$AAT?$AAa?$AAb?$AAl?$AAe?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAP?$AAr?$AAe?$AAf@
0x18001DF28: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001E460: "__cdecl _imp_WinSqmSetDWORD" __imp_WinSqmSetDWORD
0x18001E068: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x18001DF60: "__cdecl _imp_LocalFree" __imp_LocalFree
0x18001E280: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800263C8: "unsigned long * NcaScriptLogUserStatusIds" ?NcaScriptLogUserStatusIds@@3PAKA
0x18001FE60: "`string'" ??_C@_0BI@PKPPMMME@NcaComponentsInitialize?$AA@
0x180027660: "struct NCA_EVCOLL_FIREWALL_COMPONENT_ gNcaEvCollFirewall" ?gNcaEvCollFirewall@@3UNCA_EVCOLL_FIREWALL_COMPONENT_@@A
0x1800238E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180017950: McGenControlCallbackV2
0x18001DEA0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x18001DCB8: "__cdecl _imp_VariantInit" __imp_VariantInit
0x18001E870: EvCollUpdate
0x18001E510: "__cdecl _xl_a" __xl_a
0x18001E2A0: "__cdecl _imp_CopySid" __imp_CopySid
0x18001DCB0: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x180009E5C: "void __cdecl NcaSrcLnkdTriggerRegisterForSource(struct NCA_SYNCED_LIST_HEAD_ * __ptr64,struct _LIST_ENTRY * __ptr64)" ?NcaSrcLnkdTriggerRegisterForSource@@YAXPEAUNCA_SYNCED_LIST_HEAD_@@PEAU_LIST_ENTRY@@@Z
0x18001E048: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180026A10: "__cdecl _onexitbegin" __onexitbegin
0x18001DE48: WINHTTP_NULL_THUNK_DATA
0x180020D58: "`string'" ??_C@_1CK@FKAAOKLD@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAP?$AAr?$AAe?$AAs?$AAe?$AAn?$AAc?$AAe?$AA?$AA@
0x18001DCF8: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x180011750: "long __cdecl StringCchPrintfExW(unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,unsigned short const * __ptr64,...)" ?StringCchPrintfExW@@YAJPEAG_KPEAPEAGPEA_KKPEBGZZ
0x18001E3E0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180013ED0: "void __cdecl NcaEvCollIPHTTPsCertShutdown(void)" ?NcaEvCollIPHTTPsCertShutdown@@YAXXZ
0x18001EF98: "`string'" ??_C@_1BK@MLBBGCPH@?$AAi?$AAp?$AAh?$AAt?$AAt?$AAp?$AAs?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18001A400: Rpc_NcaEngineClose
0x180026FD0: "struct NCA_COMMAND_ENVIROMENT_ * gScriptLogCustomCommands" ?gScriptLogCustomCommands@@3PAUNCA_COMMAND_ENVIROMENT_@@A
0x18001DD08: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x18000A61C: NcaGPTriggerRearm
0x18001DEB8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18001DF98: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18001DDE8: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x18000F2C0: "void __cdecl NcaEvCollIPv6Collect(void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64)" ?NcaEvCollIPv6Collect@@YAXPEAX000@Z
0x18000D86C: NcaTimerTriggerUnregisterWait
0x18000E42C: "long __cdecl NcaMultisiteUnregisterWMINotification(void)" ?NcaMultisiteUnregisterWMINotification@@YAJXZ
0x1800018E4: "__cdecl Init_thread_header" _Init_thread_header
0x180023B74: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18001E800: IID_INetworkListManager
0x180022020: rpcncaengine__MIDL_TypeFormatString
0x18001E020: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800223D8: "`string'" ??_C@_0BL@NLEMLGCG@PdcpProcessMessageInternal?$AA@
0x180021680: "`string'" ??_C@_1FI@FOLLNAEI@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAP?$AAH?$AAT?$AAT?$AAP?$AAS?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY?$AA_?$AAC?$AAO@
0x180018E24: "long __cdecl NcaRegNotifyRegisterForChanges(struct NCA_REG_NOTIFY_ * __ptr64)" ?NcaRegNotifyRegisterForChanges@@YAJPEAUNCA_REG_NOTIFY_@@@Z
0x180001CE0: "__cdecl _security_init_cookie" __security_init_cookie
0x180004354: "long __cdecl NcaConfigMgrLoadBool(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int,int * __ptr64)" ?NcaConfigMgrLoadBool@@YAJPEAUHKEY__@@PEBGHPEAH@Z
0x180020ED8: "`string'" ??_C@_1CG@OOFOGOIN@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x180021110: "`string'" ??_C@_1GM@BCNGHFAL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1800059D4: NcaConfigMgrGetString
0x1800238CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x180020950: "`string'" ??_C@_07HFJMLJNK@2s?5Mark?$AA@
0x1800044E8: "long __cdecl NcaConfigMgrLoadMultisite(struct NCA_POLICY_ * __ptr64)" ?NcaConfigMgrLoadMultisite@@YAJPEAUNCA_POLICY_@@@Z
0x180021DB0: "`string'" ??_C@_0O@GLENPJE@RegEnumValueW?$AA@
0x180026E80: "struct NCA_PROXY_TRIGGER_COMPONENT_ gNcaProxyTriggerComponent" ?gNcaProxyTriggerComponent@@3UNCA_PROXY_TRIGGER_COMPONENT_@@A
0x180015C80: NcaDAPEvidenceUserSnapshotFind
0x180020288: "`string'" ??_C@_1O@EMLLFJNI@?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x180023840: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800026DC: wcscmp
0x18001E2E8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180011E18: NcaEvCollProbesMultisiteUpdate
0x180006020: NcaProbeEmpty
0x1800205E0: "`string'" ??_C@_1EO@EMJJIBML@?$AAN?$AAc?$AAa?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AAG?$AAe?$AAt?$AAL?$AAa?$AAs@
0x1800263F0: "unsigned long * NcaProbeTypeIds" ?NcaProbeTypeIds@@3PAKA
0x18001383C: NcaEvCollNamePrefToggle
0x180026408: "unsigned long * NcaLogStatusEventTypeIds" ?NcaLogStatusEventTypeIds@@3PAKA
0x180017A54: McGenEventRegister
0x18001E100: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x1800128E0: "void __cdecl NcaEvCollStrongAuthLoopbackImpersonateCheck(int * __ptr64)" ?NcaEvCollStrongAuthLoopbackImpersonateCheck@@YAXPEAH@Z
0x180022450: "`string'" ??_C@_0CJ@HGJOHFDH@?$CFs?3?5Unable?5to?5cancel?5ALPC?5messag@
0x180018968: NcaSQMSubmit
0x18001E3A8: "__cdecl _imp_malloc" __imp_malloc
0x180020630: "`string'" ??_C@_1DE@PLBLHCKF@?$AAN?$AAc?$AAa?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAv?$AAe?$AAn?$AAt?$AAU?$AAn?$AAs?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAb?$AAe?$AA?$AA@
0x1800210E8: "`string'" ??_C@_1BO@JHCDJDHM@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAN?$AAa?$AAm?$AAe?$AAP?$AAr?$AAe?$AAf?$AA?$AA@
0x1800218A8: "`string'" ??_C@_1DK@LEBPFAEN@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAP?$AAA?$AAS?$AAS?$AAI?$AAV?$AAE?$AA_?$AAT?$AAE?$AAS?$AAT?$AA?$AA@
0x18001E260: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18001DEE0: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18001772C: "void __cdecl NcaEtwPerfTrackScenarioUpdate(enum NCA_ETW_PERFTRACK_SCENARIO_TYPE_,struct NCA_EVIDENCE_ const * __ptr64,struct NCA_STATUS_EVENT_)" ?NcaEtwPerfTrackScenarioUpdate@@YAXW4NCA_ETW_PERFTRACK_SCENARIO_TYPE_@@PEBUNCA_EVIDENCE_@@UNCA_STATUS_EVENT_@@@Z
0x18001E428: "__cdecl _imp_ZwAlpcCancelMessage" __imp_ZwAlpcCancelMessage
0x18001F880: "`string'" ??_C@_1GE@HGECAMMO@?$AAG?$AAe?$AAt?$AA?9?$AAD?$AAA?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAE?$AAx?$AAp?$AAe?$AAr?$AAi?$AAe?$AAn?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt@
0x1800239A8: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180018858: NcaReportErrorAsWinError
0x18001E1A0: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x18000A1D4: NcaSrcLnkdTriggerSignalTriggersInList
0x18000F050: NcaEvCollInternetConnectivityInitialize
0x180016C90: "unsigned long __cdecl NcaUserStoreCreateHelper(struct _TOKEN_USER * __ptr64,void * __ptr64,int,struct NCA_USER_ * __ptr64 * __ptr64,int * __ptr64)" ?NcaUserStoreCreateHelper@@YAKPEAU_TOKEN_USER@@PEAXHPEAPEAUNCA_USER_@@PEAH@Z
0x18001E440: "__cdecl _imp_ZwAlpcDisconnectPort" __imp_ZwAlpcDisconnectPort
0x18001F430: "`string'" ??_C@_1FM@BGIEBEMN@?$AAI?$AAP?$AAs?$AAe?$AAc?$AA?5?$AAM?$AAa?$AAi?$AAn?$AA?5?$AAM?$AAo?$AAd?$AAe?$AA?5?$AAS?$AAA?$AA?8?$AAs?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAs@
0x1800183D8: NcaGetExpandedCanonicalLongPathName
0x1800208E0: "`string'" ??_C@_1BG@GMPADONC@?$AAN?$AAl?$AAm?$AAT?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x18001EE10: "`string'" ??_C@_1EE@EDJOJKJP@?$AAT?$AAe?$AAr?$AAe?$AAd?$AAo?$AA?5?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAT?$AAe?$AAr?$AAe?$AAd?$AAo?$AAS?$AAt?$AAa?$AAt?$AAe@
0x18001A04C: "long __cdecl NcaRpcAPIsInitSecurityMode(unsigned long)" ?NcaRpcAPIsInitSecurityMode@@YAJK@Z
0x18001DD88: RPCRT4_NULL_THUNK_DATA
0x18001F610: "`string'" ??_C@_1JC@FLBDFPD@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AA?$HM?$AA?5?$AAw?$AAh?$AAe?$AAr?$AAe?$AA?$HL?$AA$?$AA_?$AA?4?$AAA?$AAd?$AAd?$AAr@
0x180002BC4: "void __cdecl NcaDestroyCancelableLock(struct _tag_NCA_CANCELABLE_LOCK * __ptr64)" ?NcaDestroyCancelableLock@@YAXPEAU_tag_NCA_CANCELABLE_LOCK@@@Z
0x18001FFC8: "`string'" ??_C@_1M@GLCCLNDI@?$AAP?$AAI?$AAN?$AAG?$AA?3?$AA?$AA@
0x1800067EC: "unsigned long __cdecl SvrImpl_NcaEngineClose(void * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaEngineClose@@YAKPEAXPEAPEAX@Z
0x18001FD90: "`string'" ??_C@_1IC@KOINJPMG@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x1800107A4: "void __cdecl NcaEvCollProbeRearm(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollProbeRearm@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x1800279C0: "unsigned short * __ptr64 * wszNcaScriptLogProbeStatus" ?wszNcaScriptLogProbeStatus@@3PAPEAGA
0x18001DBD0: "__cdecl _imp_DnsFreePolicyConfig" __imp_DnsFreePolicyConfig
0x180001990: "__cdecl _report_gsfailure" __report_gsfailure
0x180020258: "`string'" ??_C@_1BK@BFIEKNFP@?$AAF?$AAr?$AAi?$AAe?$AAn?$AAd?$AAl?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18001DC68: "__cdecl _imp_CreateThreadpool" __imp_CreateThreadpool
0x180020450: "`string'" ??_C@_1GG@MHPKMJCM@?$AAO?$AA?3?$AAS?$AAY?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD@
0x18001E118: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180001320: "public: virtual unsigned long __cdecl CNlmTriggerProfileEventSink::AddRef(void) __ptr64" ?AddRef@CNlmTriggerProfileEventSink@@UEAAKXZ
0x18002387C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x180021180: "`string'" ??_C@_1DA@KKIEKPBH@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAP?$AAr?$AAe?$AAf?$AAe?$AAr?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x18001BA24: PdcNotificationClientUnregister
0x1800024B4: McTemplateU0qq
0x180026A20: "__cdecl _native_startup_state" __native_startup_state
0x180004C9C: "long __cdecl NcaConfigMgrLoadString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int,unsigned short * __ptr64 * __ptr64)" ?NcaConfigMgrLoadString@@YAJPEAUHKEY__@@PEBGHPEAPEAG@Z
0x18001DE40: "__cdecl _imp_WinHttpCrackUrl" __imp_WinHttpCrackUrl
0x180011658: "int __cdecl ResolveName(unsigned short const * __ptr64,struct sockaddr_in6 * __ptr64)" ?ResolveName@@YAHPEBGPEAUsockaddr_in6@@@Z
0x18001F6E8: "`string'" ??_C@_1DG@NODNMHHP@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAR?$AAo?$AAu?$AAt?$AAe?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x18001A910: Rpc_NcaStatusEventSubscribe
0x180020570: "`string'" ??_C@_1BO@OCJEILBF@?$AAN?$AAc?$AAa?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x180020B80: "`string'" ??_C@_1FM@DOAKACAE@?$AAP?$AAR?$AAO?$AAX?$AAY?$AAM?$AAG?$AAR?$AA_?$AAP?$AAR?$AAO?$AAV?$AAI?$AAD?$AAE?$AAR?$AA_?$AAE?$AAV?$AAE?$AAN?$AAT?$AA_?$AAP?$AAR?$AAO?$AAX?$AAY?$AA_?$AAC?$AAR@
0x1800101BC: "unsigned long __cdecl NcaEvCollHttpProbeSessionShutdown(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollHttpProbeSessionShutdown@@YAKPEAUNCA_EVCOLL_PROBE_@@@Z
0x180021E90: WPP_7989db582612321e6bdc4d6d9f99f818_Traceguids
0x180020390: "`string'" ??_C@_1GK@LGFDBJLM@?$AAO?$AA?3?$AAS?$AAY?$AAG?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAR?$AAC?$AAW?$AAD@
0x1800262B0: "struct NCA_PROBE_TYPE_PREFIX_ * g_NcaProbeTypePrefixTable" ?g_NcaProbeTypePrefixTable@@3PAUNCA_PROBE_TYPE_PREFIX_@@A
0x18001DDA8: "__cdecl _imp_DeleteSecurityContext" __imp_DeleteSecurityContext
0x180027360: "struct NCA_EVCOLL_POL_COMPONENT_ gNcaEvCollPol" ?gNcaEvCollPol@@3UNCA_EVCOLL_POL_COMPONENT_@@A
0x18000C7F4: NcaWfpNetEventTriggerRegisterWait
0x180021C10: "`string'" ??_C@_0BD@LGFGNMHF@NcaGetLongPathName?$AA@
0x1800209D8: "`string'" ??_C@_1CG@KALJBMML@?$AAW?$AAT?$AAS?$AA_?$AAS?$AAE?$AAS?$AAS?$AAI?$AAO?$AAN?$AA_?$AAU?$AAN?$AAL?$AAO?$AAC?$AAK?$AA?$AA@
0x180017F90: NcaCriticalSectionDestroy
0x180020170: "`string'" ??_C@_1HM@CFJLJOF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAD?$AAi?$AAr?$AAe@
0x18001E318: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180021E20: "`string'" ??_C@_0BM@ONKCFHFK@RegisterWaitForSingleObject?$AA@
0x1800062BC: "unsigned long __cdecl NcaApiSrvImplIsEngineReferenced(struct NCA_INTSERVER_ENGINE_HANDLE_ * __ptr64)" ?NcaApiSrvImplIsEngineReferenced@@YAKPEAUNCA_INTSERVER_ENGINE_HANDLE_@@@Z
0x180021E58: "`string'" ??_C@_0BP@LJMLEABJ@NcaRegNotifyRegisterForChanges?$AA@
0x180020E68: WPP_703941b86341348a204a214be1f9d57d_Traceguids
0x18001EEA8: "`string'" ??_C@_1BM@PNNPKLJL@?$AAi?$AAp?$AAh?$AAt?$AAt?$AAp?$AAs?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x1800190BC: NcaRegEnumValueNameAndValueData
0x18001E350: "__cdecl _imp_FwpmNetEventSubscribe3" __imp_FwpmNetEventSubscribe3
0x180010DB8: "void __cdecl NcaEvCollProbeVerifySubTypeChange(struct NCA_EVCOLL_PROBE_ * __ptr64)" ?NcaEvCollProbeVerifySubTypeChange@@YAXPEAUNCA_EVCOLL_PROBE_@@@Z
0x18001F5C8: "`string'" ??_C@_1DM@JGLBOIEB@?$AAI?$AAP?$AA?5?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AA?$CI?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$CJ?$AA?$AA@
0x180020348: WPP_addd7e32e8b43cd7c74cb9c1872557a1_Traceguids
0x1800188F0: NcaReportReturnError
0x18001DFA0: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000EAD0: NcaEvCollPolicyPresenceShutdown
0x18001E390: httpprxp_NULL_THUNK_DATA
0x180007FD8: "unsigned long __cdecl NcaScriptLogsCopyOutput(void * __ptr64,void * __ptr64)" ?NcaScriptLogsCopyOutput@@YAKPEAX0@Z
0x180027B80: "unsigned long gNcaSQMLogSettingsValue" ?gNcaSQMLogSettingsValue@@3KA
0x180015A14: NcaDAPEvidenceUserSnapshotCreate
0x18000B5E0: "public: virtual long __cdecl CNlmTriggerProfileEventSink::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CNlmTriggerProfileEventSink@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180015E60: NcaDAPGetLastEvent
0x18001FA98: "`string'" ??_C@_1O@LJNBHOAA@?$AAg?$AAr?$AAo?$AAu?$AAp?$AAs?$AA?$AA@
0x18001DCA8: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18001F230: "`string'" ??_C@_1DG@POMGEFOO@?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAi?$AAn?$AAs?$AAo?$AAc?$AAk?$AA?5?$AAs?$AAh?$AAo?$AAw?$AA?5?$AAc?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x180021EF8: "`string'" ??_C@_1BC@FHKNBFAH@?$AAN?$AAc?$AAa?$AA?5?$AAA?$AAP?$AAI?$AAs?$AA?$AA@
0x18001F4E0: "`string'" ??_C@_1BG@POLJLLHD@?$AAi?$AAp?$AAs?$AAe?$AAc?$AAQ?$AAu?$AAi?$AAc?$AAk?$AA?$AA@
0x180023B10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180015900: NcaDAPEvidenceSnapshotShutdown
0x18000ADA4: "void __cdecl NcaNlmTriggerConnectionPointShutdown(void)" ?NcaNlmTriggerConnectionPointShutdown@@YAXXZ
0x18001DD48: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180020750: "`string'" ??_C@_17MKOLHND@?$AAN?$AAC?$AAA?$AA?$AA@
0x18001F1D0: "`string'" ??_C@_1FK@JBKOOPDO@?$AAW?$AAi?$AAn?$AAs?$AAo?$AAc?$AAk?$AA?5?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?5?$AA?$CI?$AAn?$AAe?$AAt?$AAs?$AAh?$AA?5?$AAw?$AAi?$AAn?$AAs?$AAo?$AAc?$AAk?$AA?5?$AAs@
0x1800074A0: "unsigned long __cdecl SvrImpl_NcaNetworkOpen(void * __ptr64,void * __ptr64,struct _GUID const * __ptr64,void * __ptr64 * __ptr64)" ?SvrImpl_NcaNetworkOpen@@YAKPEAX0PEBU_GUID@@PEAPEAX@Z
0x180014830: NcaEvCollIdleInitialize
0x1800210A8: WPP_a5e2f82ae5dc32ae1b66063911b87e7e_Traceguids
0x180018CFC: WPP_SF_sD
0x180002A80: WPP_SF_sd
0x18001673C: "unsigned long __cdecl NcaUserStoreCreate(void * __ptr64,struct NCA_USER_ * __ptr64 * __ptr64)" ?NcaUserStoreCreate@@YAKPEAXPEAPEAUNCA_USER_@@@Z
0x18001E3B0: "__cdecl _imp_free" __imp_free
0x180001C60: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18001E160: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18001DC00: "__cdecl _imp_CancelMibChangeNotify2" __imp_CancelMibChangeNotify2
0x18001E178: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x180015F50: WPP_SF_SS
0x1800208D0: WPP_4e8f7b6c19db3464e69a3c2e96374f48_Traceguids
0x18001FCA0: NcaSvc_PerfTrack_InternetConnected_DTESucceeded_Stop
0x1800238A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x18001FE30: "`string'" ??_C@_0BB@DCELCPIA@SetServiceStatus?$AA@
0x18001DFB0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18001403C: "int __cdecl NcaEvCollIphttpsIsCertError(void)" ?NcaEvCollIphttpsIsCertError@@YAHXZ
0x18001FE18: "`string'" ??_C@_0BG@FLGOMDDE@NcaServiceChangeState?$AA@
0x18000D720: "void __cdecl TimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?TimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x18001DBF8: FirewallAPI_NULL_THUNK_DATA
0x180005884: NcaConfigMgrGetActiveSite
0x180004158: "__cdecl TlgDefineProvider_annotation__Tlgg_hNcaProv" _TlgDefineProvider_annotation__Tlgg_hNcaProv
0x1800208C0: WPP_76590fa6bcbf3118d3c5509c5d3db454_Traceguids
0x18001E128: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800106D4: "enum NCA_PROBE_TEST_TYPE_ __cdecl NcaEvCollProbeGetTestType(unsigned long,int * __ptr64)" ?NcaEvCollProbeGetTestType@@YA?AW4NCA_PROBE_TEST_TYPE_@@KPEAH@Z
0x1800273A0: "struct NCA_EVCOLL_INOUT_COMPONENT_ gNcaEvCollInOut" ?gNcaEvCollInOut@@3UNCA_EVCOLL_INOUT_COMPONENT_@@A
0x1800275C0: "struct NCA_EVCOLL_PROXY_COMPONENT_ gNcaEvCollProxy" ?gNcaEvCollProxy@@3UNCA_EVCOLL_PROXY_COMPONENT_@@A
0x180023A34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180001860: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x180027AC0: "unsigned short * __ptr64 * wszNcaLogStatusEventSubtypes" ?wszNcaLogStatusEventSubtypes@@3PAPEAGA
0x180001FD4: McTemplateU0q
0x18001DE70: "__cdecl _imp_WSAStartup" __imp_WSAStartup
0x180016688: "void __cdecl NcaUserStoreClose(struct NCA_USER_ * __ptr64)" ?NcaUserStoreClose@@YAXPEAUNCA_USER_@@@Z
0x18001ABB8: WPP_SF_s
0x180018CA4: WPP_SF_S
0x18000202C: McTemplateU0z
0x1800026D6: memset
0x180023BB0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180013010: NcaEvCollHealthShutdown
0x18001F490: "`string'" ??_C@_1EK@NCJDILND@?$AAG?$AAe?$AAt?$AA?9?$AAN?$AAe?$AAt?$AAI?$AAP?$AAs?$AAe?$AAc?$AAM?$AAa?$AAi?$AAn?$AAM?$AAo?$AAd?$AAe?$AAS?$AAA?$AA?5?$AA?$HM?$AA?5?$AAO?$AAu?$AAt?$AA?9?$AAD?$AAe?$AAf@
0x1800217C8: "`string'" ??_C@_1DM@FIIIKPBN@?$AAN?$AAC?$AAA?$AA_?$AAE?$AAV?$AAC?$AAO?$AAL?$AAL?$AAE?$AAC?$AAT?$AAO?$AAR?$AA_?$AAI?$AAP?$AAV?$AA6?$AA_?$AAD?$AAI?$AAS?$AAA?$AAB?$AAL?$AAE?$AAD?$AA?$AA@
0x180021BC0: "`string'" ??_C@_0BM@FFIBEPJM@NcaExpandEnvironmentStrings?$AA@
0x18001DEF8: "__cdecl _imp_ReadFile" __imp_ReadFile
0x180020E78: "`string'" ??_C@_1DG@NPAEGLNA@?$AAE?$AAv?$AAC?$AAo?$AAl?$AAl?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAv?$AAi?$AAt?$AAy?$AA?$AA@
0x18000CF20: NcaWfpTriggerShutdown

[JEB Decompiler by PNF Software]