Generated by JEB on 2019/08/01

PE: C:\Windows\System32\winlogon.exe Base=0x140000000 SHA-256=01075068DC177AE38293A76C9DA5B2E09426093ECA4F6A53281CB6EC2FC6CD17
PDB: winlogon.pdb GUID={60B394D8-F019-B67A-247432E71EB19D3D} Age=1

4755 located named symbols:
0x140085398: "__cdecl _imp_RtlInitUnicodeStringEx" __imp_RtlInitUnicodeStringEx
0x140064B28: "unsigned long __cdecl WlDisplayPowerMessageStatus(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum POWER_ACTION,enum _SYSTEM_POWER_STATE,int)" ?WlDisplayPowerMessageStatus@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@W4POWER_ACTION@@W4_SYSTEM_POWER_STATE@@H@Z
0x140059FA0: "void __cdecl WLGeneric_CompleteLockRequest_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_CompleteLockRequest_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140087C80: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x1400A6420: "struct _StateMachineSignal g_xTS_NoUnlockReconnect_Signal" ?g_xTS_NoUnlockReconnect_Signal@@3U_StateMachineSignal@@A
0x140095078: "GetUserStateKeyName" ??_C@_1CI@CKJMNPJB@?$AAG?$AAe?$AAt?$AAU?$AAs?$AAe?$AAr?$AAS?$AAt?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1400A65F0: "__vectorcall ??_R0?AVResultException@wil@" ??_R0?AVResultException@wil@@@8
0x1400197BC: "unsigned long __cdecl StartLogonUI(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?StartLogonUI@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140034C60: "__cdecl _imp_load_NaDynamicLockShouldIgnoreUserActivity" __imp_load_NaDynamicLockShouldIgnoreUserActivity
0x140035FA9: "__cdecl _imp_load_FindWindowW" __imp_load_FindWindowW
0x14001A450: "void __cdecl WLGeneric_SequentialLogonPrompt_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialLogonPrompt_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140036960: IsMinCredGetLogonCredentialsPresent
0x140077754: WlSecureDesktoppValidatePromptingInfo
0x14000A1E0: ?EnsureCoalescedTimer_SetTimer@details@wil@@YAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@2@AEA_N_J@Z
0x140036960: IsMinCredGetLogonTypePresent
0x140088E80: "__cdecl _sz_ext_ms_win_session_winlogon_l1_1_1_dll" __sz_ext_ms_win_session_winlogon_l1_1_1_dll
0x140095C48: "oobe\WinLGDep.dll" ??_C@_1CE@KEEKAFPG@?$AAo?$AAo?$AAb?$AAe?$AA?2?$AAW?$AAi?$AAn?$AAL?$AAG?$AAD?$AAe?$AAp?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14008BFB8: "Start" ??_C@_1M@IOJLKPKK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x1400A7BD8: "unsigned long * g_xWLGeneric_Logged_On_Reconnect_ResetSignals" ?g_xWLGeneric_Logged_On_Reconnect_ResetSignals@@3PAKA
0x1400880B0: "PATH" ??_C@_19IJOJOJIB@?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x14009FB48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-appcompat-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-appcompat-l1-1-0
0x140037238: "public: void __cdecl CUser::StopUserPresencePolling(bool) __ptr64" ?StopUserPresencePolling@CUser@@QEAAX_N@Z
0x1400A7370: "struct _StateMachineTransition * g_xWLGeneric_Unlocking_Transition" ?g_xWLGeneric_Unlocking_Transition@@3PAU_StateMachineTransition@@A
0x14007F748: "public: __cdecl wil::com_ptr_t<struct Windows::Foundation::Collections::IVectorView<class Windows::Internal::AssignedAccess::AssignedAccessUserInfo * __ptr64>,struct wil::err_returncode_policy>::~com_ptr_t<struct Windows::Foundation::Collections::IVectorView<class Windows::Internal::AssignedAccess::AssignedAccessUserInfo * __ptr64>,struct wil::err_returncode_policy>(void) __ptr64" ??1?$com_ptr_t@U?$IVectorView@PEAVAssignedAccessUserInfo@AssignedAccess@Internal@Windows@@@Collections@Foundation@Windows@@Uerr_returncode_policy@wil@@@wil@@QEAA@XZ
0x140084918: "__cdecl _imp_LockResource" __imp_LockResource
0x14009F340: wkscli_NULL_THUNK_DATA_DLB
0x1400914A0: "-CachedTerminalSession" ??_C@_1CO@GEEKBEGL@?$AA?9?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140088C70: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x1400B15A0: wkscli_NULL_THUNK_DATA_DLA
0x140071D88: "public: void __cdecl WinlogonProvider::ShouldLogoffOtherUsers::Stop(bool) __ptr64" ?Stop@ShouldLogoffOtherUsers@WinlogonProvider@@QEAAX_N@Z
0x14009E4E8: wkscli_NULL_THUNK_DATA_DLN
0x14009F648: ext-ms-win-session-candidateaccountmgr-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A5530: "struct _StateMachineState g_xWLGeneric_HandleSecureLuaBeforeShell_State" ?g_xWLGeneric_HandleSecureLuaBeforeShell_State@@3U_StateMachineState@@A
0x140084E10: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1400AA1C8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x14001B7D0: "unsigned long __cdecl WLGeneric_NotifyLogon_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyLogon_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400679BC: "unsigned long __cdecl WaitForBackupRestoreWizard(struct _WIZARD_CONTEXT * __ptr64)" ?WaitForBackupRestoreWizard@@YAKPEAU_WIZARD_CONTEXT@@@Z
0x1400863E0: WLEvt_ThemesOnTerminateSession_Stop
0x1400A6430: "struct _StateMachineSignal g_xTS_PreConnect_Signal" ?g_xTS_PreConnect_Signal@@3U_StateMachineSignal@@A
0x14008C808: "CAD_Return" ??_C@_1BG@PDHMNBDE@?$AAC?$AAA?$AAD?$AA_?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x1400343B4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140076F20: WlSecureDesktoppCompleteGenericRequest
0x140008AF0: "public: bool __cdecl wil::details_abi::heap_buffer::push_back(void const * __ptr64,unsigned __int64) __ptr64" ?push_back@heap_buffer@details_abi@wil@@QEAA_NPEBX_K@Z
0x140084D08: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x140036823: "__cdecl _imp_load_WinStationFreeUserCredentials" __imp_load_WinStationFreeUserCredentials
0x140026990: "private: void __cdecl CUser::InitializeEventsAndTimers(void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,struct _TP_WAIT * __ptr64 * __ptr64,struct _TP_WAIT * __ptr64 * __ptr64,unsigned short const * __ptr64,void (__cdecl*)(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)) __ptr64" ?InitializeEventsAndTimers@CUser@@AEAAXPEAPEAX0PEAPEAU_TP_WAIT@@1PEBGP6AXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU2@J@Z@Z
0x140091970: "Software\Microsoft\Windows\Curre" ??_C@_1HI@BEGLNFHN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140084F20: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x14008C660: "Logged_On_Hibernating" ??_C@_1CM@POJNDBGA@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA_?$AAH?$AAi?$AAb?$AAe?$AAr?$AAn?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x140002D08: "public: static int __cdecl CandidateAccountManagerPolicy::IsCachedSessionEnabled(void)" ?IsCachedSessionEnabled@CandidateAccountManagerPolicy@@SAHXZ
0x14002CB78: "public: void __cdecl CSession::SetShellStartupCompleteOrTimedOut(int,enum ShellStartupWaitStopReason,long) __ptr64" ?SetShellStartupCompleteOrTimedOut@CSession@@QEAAXHW4ShellStartupWaitStopReason@@J@Z
0x140091FA8: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x140084808: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1400921B0: "CloudExperienceHostOobe" ??_C@_1DA@DPIIINEL@?$AAC?$AAl?$AAo?$AAu?$AAd?$AAE?$AAx?$AAp?$AAe?$AAr?$AAi?$AAe?$AAn?$AAc?$AAe?$AAH?$AAo?$AAs?$AAt?$AAO?$AAo?$AAb?$AAe?$AA?$AA@
0x140088EB0: "__cdecl _sz_ext_ms_win_session_winlogon_l1_1_0_dll" __sz_ext_ms_win_session_winlogon_l1_1_0_dll
0x140032060: "void __cdecl WLGeneric_No_Unlock_Disconnected_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_No_Unlock_Disconnected_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140088CD0: "__cdecl _sz_wkscli_dll" __sz_wkscli_dll
0x1400179B0: "unsigned long __cdecl WLGeneric_Request_Logon_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Logon_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084E50: "__cdecl _imp_EventRegister" __imp_EventRegister
0x14008C4A0: "ChangingLogonPassword" ??_C@_1CM@CFHJIDGF@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAi?$AAn?$AAg?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x1400913F0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GK@KPIFGLPD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140050C1C: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x140084890: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x140062480: "unsigned long __cdecl WLGeneric_Logon_ReportFailedResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportFailedResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400914F0: "RAIL" ??_C@_19LNDGLPKO@?$AAR?$AAA?$AAI?$AAL?$AA?$AA@
0x14005AEA0: "unsigned long __cdecl WLGeneric_Locked_Reconnect_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Reconnect_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14005CA34: "unsigned long __cdecl PseudoLogging_Off(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?PseudoLogging_Off@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400852B0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x14008A400: "api-ms-win-eventing-provider-l1-" ??_C@_1FA@IOGJNGGM@?$AAa?$AAp?$AAi?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAi?$AAn?$AAg?$AA?9?$AAp?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9@
0x1400348A0: "__cdecl FindPESection" _FindPESection
0x14009F9CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-2-0
0x1400B12D8: "__cdecl _imp_SwitchDesktopWithFade" __imp_SwitchDesktopWithFade
0x140088B58: "shell32.dll,-48" ??_C@_1CA@CAPDLABB@?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AA?9?$AA4?$AA8?$AA?$AA@
0x140086040: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x140036A54: IsDwmpNotifyUserLogonPresent
0x1400012E4: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToUsageFlush(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64)) __ptr64" ?SubscribeToUsageFlush@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z@Z
0x14002ED80: I_WMsgSendMessage
0x140076AF8: WlSecureDesktopiCompleteRequest
0x14009DAC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_wkscli_dll" __DELAY_IMPORT_DESCRIPTOR_wkscli_dll
0x140009F30: "public: void __cdecl wil::details_abi::RawUsageIndex::Swap(class wil::details_abi::RawUsageIndex & __ptr64) __ptr64" ?Swap@RawUsageIndex@details_abi@wil@@QEAAXAEAV123@@Z
0x1400913E0: WPP_1962fbf67f66367b8bd7ff6b71867bff_Traceguids
0x140004F60: "void __cdecl wil::details::ReleaseMutex(void * __ptr64)" ?ReleaseMutex@details@wil@@YAXPEAX@Z
0x140003BA4: "public: unsigned long __cdecl CUser::UpdateLogonDataOnUnlock(struct _MSV1_0_INTERACTIVE_PROFILE * __ptr64,struct _FILETIME const & __ptr64,struct _QUOTA_LIMITS * __ptr64) __ptr64" ?UpdateLogonDataOnUnlock@CUser@@QEAAKPEAU_MSV1_0_INTERACTIVE_PROFILE@@AEBU_FILETIME@@PEAU_QUOTA_LIMITS@@@Z
0x140084EE8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x1400328B4: "public: void __cdecl CUser::UpdateProfileFromLsaLogonSession(void) __ptr64" ?UpdateProfileFromLsaLogonSession@CUser@@QEAAXXZ
0x1400A6410: "struct _StateMachineSignal g_xTS_RevertBack_Signal" ?g_xTS_RevertBack_Signal@@3U_StateMachineSignal@@A
0x1400852E8: "__cdecl _imp_RtlCreateEnvironment" __imp_RtlCreateEnvironment
0x1400A84E0: "struct _StateMachineTransition * g_xWLGeneric_AccessNotify_Transition" ?g_xWLGeneric_AccessNotify_Transition@@3PAU_StateMachineTransition@@A
0x140061460: "void __cdecl WLGeneric_CredsAreStaleReminder_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_CredsAreStaleReminder_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140051CB8: "__cdecl TlgCreateSz" _TlgCreateSz
0x140084778: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x1400A6AD0: "struct _StateMachineTransition * g_xWLGeneric_LogoffNotify_Transition" ?g_xWLGeneric_LogoffNotify_Transition@@3PAU_StateMachineTransition@@A
0x14005E798: "unsigned long __cdecl GetUserDisplayName(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64)" ?GetUserDisplayName@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAG1PEAPEAGPEA_K23@Z
0x1400A6310: "struct _StateMachineSignal g_xWLGeneric_Input_Timeout_Signal" ?g_xWLGeneric_Input_Timeout_Signal@@3U_StateMachineSignal@@A
0x14008BC08: "TS_PreConnect" ??_C@_1BM@GNAFEOHH@?$AAT?$AAS?$AA_?$AAP?$AAr?$AAe?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140069290: "unsigned long __cdecl ExecuteSetup(void * __ptr64)" ?ExecuteSetup@@YAKPEAX@Z
0x1400863F0: WLEvt_ThemesOnTerminateSession_Start
0x140001C14: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140055A40: "unsigned long __cdecl WLGeneric_Request_LogonChange_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_LogonChange_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140064750: "unsigned long __cdecl WLGeneric_Logged_On_Resume_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Resume_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084730: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x140084E98: api-ms-win-power-base-l1-1-0_NULL_THUNK_DATA
0x14006FC8C: "unsigned long __cdecl GetUMgrCredentials(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct _CRED_PROV_CREDENTIAL * __ptr64)" ?GetUMgrCredentials@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAU_CRED_PROV_CREDENTIAL@@@Z
0x140084A20: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x14008BCD8: "Wl_CredsAreStale" ??_C@_1CC@MBHEFGDF@?$AAW?$AAl?$AA_?$AAC?$AAr?$AAe?$AAd?$AAs?$AAA?$AAr?$AAe?$AAS?$AAt?$AAa?$AAl?$AAe?$AA?$AA@
0x14002D4C0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x14008FF48: "Control Panel\Accessibility" ??_C@_1DI@COGDNAIH@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAi?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AA?$AA@
0x140085518: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x140085148: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x14008D250: "PseudoLogging_Off2" ??_C@_1CG@BADKMMAG@?$AAP?$AAs?$AAe?$AAu?$AAd?$AAo?$AAL?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA_?$AAO?$AAf?$AAf?$AA2?$AA?$AA@
0x140084B88: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x140090280: WPP_a3fff12d5cee3f17225375225aebf0f0_Traceguids
0x1400A9128: "int JobManagerIsStarted" ?JobManagerIsStarted@@3HA
0x14009FC24: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140085140: "__cdecl _imp_??0exception@@QEAA@XZ" __imp_??0exception@@QEAA@XZ
0x1400A6B40: "struct _StateMachineTransition * g_xWLGeneric_DelayLock_DisplayOffHandler_Transition" ?g_xWLGeneric_DelayLock_DisplayOffHandler_Transition@@3PAU_StateMachineTransition@@A
0x14009E4A0: ext-ms-win-winlogon-mincreds-l1-1-0_NULL_THUNK_DATA_DLN
0x14009E308: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLN
0x1400A7270: "struct _StateMachineTransition * g_xWLGeneric_Unlock_Checking_LastLogonPolicy_Transition" ?g_xWLGeneric_Unlock_Checking_LastLogonPolicy_Transition@@3PAU_StateMachineTransition@@A
0x14009F9A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140012B40: "int __cdecl LaunchUmfdHostWithVirtualAccount(void)" ?LaunchUmfdHostWithVirtualAccount@@YAHXZ
0x1400878E0: "\Sessions\%d\AppContainerNamedOb" ??_C@_1EM@PKGMGFLM@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$CF?$AAd?$AA?2?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAa?$AAi?$AAn?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb@
0x1400A6440: "struct _StateMachineSignal g_xTS_Reconnected_Signal" ?g_xTS_Reconnected_Signal@@3U_StateMachineSignal@@A
0x140087660: "52EF130C-08FD-4388-86B3-6EDF%08X" ??_C@_1EC@GJJAFFCH@?$AA5?$AA2?$AAE?$AAF?$AA1?$AA3?$AA0?$AAC?$AA?9?$AA0?$AA8?$AAF?$AAD?$AA?9?$AA4?$AA3?$AA8?$AA8?$AA?9?$AA8?$AA6?$AAB?$AA3?$AA?9?$AA6?$AAE?$AAD?$AAF?$AA?$CF?$AA0?$AA8?$AAX@
0x14008CF60: "Killing_Scrnsaver_Locked" ??_C@_1DC@INKIGGLD@?$AAK?$AAi?$AAl?$AAl?$AAi?$AAn?$AAg?$AA_?$AAS?$AAc?$AAr?$AAn?$AAs?$AAa?$AAv?$AAe?$AAr?$AA_?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x1400B1348: "__cdecl _imp_RealGetWindowClassW" __imp_RealGetWindowClassW
0x1400852F8: "__cdecl _imp_TpWaitForTimer" __imp_TpWaitForTimer
0x140084D10: "__cdecl _imp_SetThreadpoolThreadMinimum" __imp_SetThreadpoolThreadMinimum
0x140063E68: "unsigned long __cdecl MprConvertSmartCardToInteractive(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?MprConvertSmartCardToInteractive@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@HPEAPEAXPEAK@Z
0x14008DF5A: ?_TlgEvent@?BL@??FeatureLoggingHook@details@wil@@YAXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@Z@4U<unnamed-type-_TlgEvent>@?BL@??123@YAXI01H23E4@Z@B
0x140081070: "const CandidateAccountManagerPolicyTraceProvider::`vftable'" ??_7CandidateAccountManagerPolicyTraceProvider@@6B@
0x14009FBAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x14008EAFB: ?_TlgEvent@?8??NotifyFailure@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@UEAA_NAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?8??123@UEAA_N0@Z@B
0x140087704: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x140009140: "enum FEATURE_ENABLED_STATE __cdecl wil::details::WilApiImpl_GetFeatureEnabledState(unsigned int,enum FEATURE_CHANGE_TIME)" ?WilApiImpl_GetFeatureEnabledState@details@wil@@YA?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@Z
0x1400AA2A4: "unsigned long s_WppControlLevel" ?s_WppControlLevel@@3KA
0x1400A90C8: "void (__cdecl* __ptr64 wil::details::g_pfnRethrow)(void)" ?g_pfnRethrow@details@wil@@3P6AXXZEA
0x14007BCA0: "public: virtual void * __ptr64 __cdecl OutOfProcEncryptHandle::`vector deleting destructor'(unsigned int) __ptr64" ??_EOutOfProcEncryptHandle@@UEAAPEAXI@Z
0x14005B210: "void __cdecl WLGeneric_Locked_Return_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Return_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x1400AA474: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUxzmwrwzgvzxxlfmgnzmztviklorxbUlyquivUznwGEUkivxlnkOlyq@CandidateAccountManagerPolicy" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUxzmwrwzgvzxxlfmgnzmztviklorxbUlyquivUznwGEUkivxlnkOlyq@CandidateAccountManagerPolicy
0x1400B1548: "__cdecl _imp_MinCredGetLogonCredentials" __imp_MinCredGetLogonCredentials
0x140036A3F: "__cdecl _imp_load_MinCredGetLogonCredentials" __imp_load_MinCredGetLogonCredentials
0x140032120: "public: virtual long __cdecl OutOfProcEncryptHandle::EasOpenVolume(unsigned short const * __ptr64,int,void * __ptr64 * __ptr64) __ptr64" ?EasOpenVolume@OutOfProcEncryptHandle@@UEAAJPEBGHPEAPEAX@Z
0x1400A90E0: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x1400850A0: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140095850: "onecore\ds\security\eas\policyen" ??_C@_1GE@DMOLJLLC@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x14009DCC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_private_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_private_l1_1_1_dll
0x1400A68F0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140084C80: "__cdecl _imp_InitOnceBeginInitialize" __imp_InitOnceBeginInitialize
0x1400A4EF0: "struct _StateMachineState g_xWLGeneric_MPRLogonNotify_Unlock_State" ?g_xWLGeneric_MPRLogonNotify_Unlock_State@@3U_StateMachineState@@A
0x140095480: "LoadLibraryExW" ??_C@_1BO@CAFDKEDD@?$AAL?$AAo?$AAa?$AAd?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AAE?$AAx?$AAW?$AA?$AA@
0x140086218: "DisplayLastLogonInfo" ??_C@_1CK@DHJKDMDJ@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1400207E0: WluiStartup
0x1400847C0: "__cdecl _imp_RaiseException" __imp_RaiseException
0x140004F54: "public: unsigned long * __ptr64 __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::GetPtrAs<unsigned long>(void)const __ptr64" ??$GetPtrAs@K@?$SP@EV?$SP_HLOCAL@E@@@@QEBAPEAKXZ
0x140035DAE: "__cdecl _imp_load_UnlockWindowStation" __imp_load_UnlockWindowStation
0x1400B1250: "__cdecl _imp_DwmpNotifyUserLogon" __imp_DwmpNotifyUserLogon
0x1400548C0: WPP_SF_ll
0x1400548C0: WPP_SF_Ll
0x1400548C0: WPP_SF_LL
0x1400953B0: "EasUpdateDeviceLockoutState" ??_C@_1DI@OGCLADP@?$AAE?$AAa?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x1400366C0: "__cdecl _imp_load_WinStationFreeUserSessionInfo" __imp_load_WinStationFreeUserSessionInfo
0x1400A8ED0: "__cdecl _hmod__api_ms_win_rtcore_ntuser_private_l1_1_2_dll" __hmod__api_ms_win_rtcore_ntuser_private_l1_1_2_dll
0x14008D1D0: "NotifyEndShell" ??_C@_1BO@IOAAAJOH@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAE?$AAn?$AAd?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x1400025A8: "void __cdecl NotifyPowerMgmt(unsigned char)" ?NotifyPowerMgmt@@YAXE@Z
0x14006E0B8: "unsigned long __cdecl NotifySetEnvironmentVariable(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?NotifySetEnvironmentVariable@@YAKPEAPEAGPEBG1@Z
0x14000B630: "unsigned long __cdecl WLGeneric_Welcome_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Welcome_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400548C0: WPP_SF_lD
0x14006A464: WPP_SF_Ld
0x140088570: Microsoft_Windows_Deplorch
0x14008B220: "Lock" ??_C@_19PDHPMPEG@?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x140088550: "WilStaging_02" ??_C@_0O@BKMDNGIM@WilStaging_02?$AA@
0x14007DEE8: WluiDisplayRequestCredentialsError
0x1400A9378: g_CleanupGroup
0x140075864: MprChangePasswordNotify
0x1400266C0: "private: void __cdecl CUser::InitializeBalloonReminderEvents(void) __ptr64" ?InitializeBalloonReminderEvents@CUser@@AEAAXXZ
0x140035A48: "__cdecl _tailMerge_ext_ms_win_ntuser_keyboard_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_keyboard_l1_1_0_dll
0x140087520: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x140084A10: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x14000C040: "public: virtual void * __ptr64 __cdecl CUser::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCUser@@UEAAPEAXI@Z
0x1400593B4: WPP_SF_lq
0x1400B1090: "__cdecl _imp_ChangeAccountPasswordW" __imp_ChangeAccountPasswordW
0x1400A49B0: "struct _StateMachineState g_xWLGeneric_DelayLock_State" ?g_xWLGeneric_DelayLock_State@@3U_StateMachineState@@A
0x14007F2E0: PfRpcServiceWaitforStart
0x1400A7D78: "struct _StateMachineTransition * g_xWLGeneric_DelayedSwitchDesktop_Transition" ?g_xWLGeneric_DelayedSwitchDesktop_Transition@@3PAU_StateMachineTransition@@A
0x140036E74: "public: __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>(char const * __ptr64,bool) __ptr64" ??0?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAA@PEBD_N@Z
0x14008CFC0: "CompleteLockRequest" ??_C@_1CI@FFIKHGNA@?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAL?$AAo?$AAc?$AAk?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x14007D1A4: "void __cdecl PrepareSetupExecution(unsigned short * __ptr64,unsigned long,unsigned long * __ptr64)" ?PrepareSetupExecution@@YAXPEAGKPEAK@Z
0x140060DAC: "void __cdecl WLEventWriteStartStopScenario(bool,struct _EVENT_DESCRIPTOR const & __ptr64,struct _GUID const & __ptr64,unsigned long)" ?WLEventWriteStartStopScenario@@YAX_NAEBU_EVENT_DESCRIPTOR@@AEBU_GUID@@K@Z
0x1400128AC: "unsigned long __cdecl SetUserIntegrityLabel(void * __ptr64,enum _MANDATORY_LEVEL)" ?SetUserIntegrityLabel@@YAKPEAXW4_MANDATORY_LEVEL@@@Z
0x140066658: "unsigned long __cdecl HandleBackupRestoreWizard(struct _StateMachineCallContext * __ptr64,unsigned short const * __ptr64,void * __ptr64,unsigned short)" ?HandleBackupRestoreWizard@@YAKPEAU_StateMachineCallContext@@PEBGPEAXG@Z
0x14001A664: "public: unsigned long __cdecl CUser::SetDomainName(unsigned short const * __ptr64) __ptr64" ?SetDomainName@CUser@@QEAAKPEBG@Z
0x1400A5E70: "struct _StateMachineState g_xWLGeneric_Authenticating_State" ?g_xWLGeneric_Authenticating_State@@3U_StateMachineState@@A
0x140095BC0: "RespecializeCmdLine" ??_C@_1CI@HHPKFPMA@?$AAR?$AAe?$AAs?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAC?$AAm?$AAd?$AAL?$AAi?$AAn?$AAe?$AA?$AA@
0x140089730: "__cdecl _sz_ext_ms_win_session_usermgr_l1_1_0_dll" __sz_ext_ms_win_session_usermgr_l1_1_0_dll
0x1400AA4A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbUkpvbrmhghUoryUlyquivUznwGEUhgwzucOlyq@pkeyinsts" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbUkpvbrmhghUoryUlyquivUznwGEUhgwzucOlyq@pkeyinsts
0x1400913A0: "$$$Secure UAP Background Window" ??_C@_1EA@OIOHMLEJ@?$AA$?$AA$?$AA$?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?5?$AAU?$AAA?$AAP?$AA?5?$AAB?$AAa?$AAc?$AAk?$AAg?$AAr?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?$AA@
0x140051440: "public: void __cdecl wil::details_abi::UsageIndexProperty::UpdateCount(unsigned int) __ptr64" ?UpdateCount@UsageIndexProperty@details_abi@wil@@QEAAXI@Z
0x1400642B0: "unsigned long __cdecl WLGeneric_MPRChangeNotify_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeNotify_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14008FCF8: WLEvt_AutomaticRestartSignOn_Info
0x1400888D8: "NamedEscape" ??_C@_0M@CAJILOBE@NamedEscape?$AA@
0x140003FA0: "void __cdecl wil::details::RecordFeatureUsageCallback(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?RecordFeatureUsageCallback@details@wil@@YAXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@Z
0x1400B1258: "__cdecl _imp_DwmpCreateSessionProcess" __imp_DwmpCreateSessionProcess
0x14008D0F8: "ReconnectionUpdate" ??_C@_1CG@CABMBIIO@?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140091198: "Microsoft.CachedLogon" ??_C@_1CM@LEFLFIN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140084A50: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140084620: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x1400958C0: "RegCreateKeyEx(SYSTEM\CurrentCon" ??_C@_1GK@MDOLKLPM@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AA?$CI?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn@
0x140034C2A: "__cdecl _imp_load_NaDynamicLockStop" __imp_load_NaDynamicLockStop
0x140051634: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1400A8F80: "__cdecl _hmod__ext_ms_win_ntuser_windowclass_l1_1_1_dll" __hmod__ext_ms_win_ntuser_windowclass_l1_1_1_dll
0x1400846F0: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x140084E88: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA
0x140092210: "SYSTEM\CurrentControlSet\Control" ??_C@_1JA@MNOHELKA@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14009FB70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-base-bootconfig-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-base-bootconfig-l1-1-0
0x14004EFBC: "public: __cdecl wil::details_abi::SubscriptionList::SubscriptionList(void) __ptr64" ??0SubscriptionList@details_abi@wil@@QEAA@XZ
0x14001D010: WinMain
0x140008C30: "public: bool __cdecl wil::details_abi::heap_buffer::ensure(unsigned __int64) __ptr64" ?ensure@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x1400A6C70: "unsigned long * g_xWLGeneric_Locked_Reconnect_ResetSignals" ?g_xWLGeneric_Locked_Reconnect_ResetSignals@@3PAKA
0x14006B72C: "public: long __cdecl CUser::GetPwdResetInfo(struct _FILETIME * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?GetPwdResetInfo@CUser@@QEAAJPEAU_FILETIME@@PEAPEAG@Z
0x140036DB9: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1400A9150: "int g_SafeToSwitch" ?g_SafeToSwitch@@3HA
0x14000A3E0: "void __cdecl ShutdownWindowsWorkerThread(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?ShutdownWindowsWorkerThread@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1400A8F28: "__cdecl _hmod__ext_ms_win_devmgmt_policy_l1_1_1_dll" __hmod__ext_ms_win_devmgmt_policy_l1_1_1_dll
0x140084F78: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x140036390: "__cdecl _imp_load_UMgrGetCachedCredentials" __imp_load_UMgrGetCachedCredentials
0x1400A8EF0: "__cdecl _hmod__ext_ms_win_session_winlogon_l1_1_0_dll" __hmod__ext_ms_win_session_winlogon_l1_1_0_dll
0x1400092C4: "long __cdecl wil::details::NtStatusToHr(long)" ?NtStatusToHr@details@wil@@YAJJ@Z
0x140013820: "unsigned long __cdecl WLGeneric_ShellStartup_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ShellStartup_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A5670: "struct _StateMachineState g_xWLGeneric_CAD_State" ?g_xWLGeneric_CAD_State@@3U_StateMachineState@@A
0x1400845F0: "__cdecl _imp_RpcServerRegisterIfEx" __imp_RpcServerRegisterIfEx
0x1400889F0: "NotWithinExpiryPeriod" ??_C@_1CM@JHBKPGDH@?$AAN?$AAo?$AAt?$AAW?$AAi?$AAt?$AAh?$AAi?$AAn?$AAE?$AAx?$AAp?$AAi?$AAr?$AAy?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x140054824: WPP_SF_l
0x140054824: WPP_SF_L
0x1400B14C0: "__cdecl _imp_WinStationFreeMemory" __imp_WinStationFreeMemory
0x140084DF0: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x1400053B0: "void __cdecl WLGeneric_Locked_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400A5F30: "struct _StateMachineState g_xWLGeneric_DisplayLegalNotice_State" ?g_xWLGeneric_DisplayLegalNotice_State@@3U_StateMachineState@@A
0x140091DD8: "Poll_Timer_Initial" ??_C@_1CG@GBANEOJF@?$AAP?$AAo?$AAl?$AAl?$AA_?$AAT?$AAi?$AAm?$AAe?$AAr?$AA_?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AA?$AA@
0x1400B1550: "__cdecl _imp_MinCredGetLogonType" __imp_MinCredGetLogonType
0x14007CFF0: "int __cdecl IsSetupAvailable(void)" ?IsSetupAvailable@@YAHXZ
0x140085460: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x140019D54: "private: unsigned long __cdecl CUser::SetIsAdminFlag(void) __ptr64" ?SetIsAdminFlag@CUser@@AEAAKXZ
0x1400923F0: "Enable" ??_C@_1O@PFBIKACK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140089580: "__cdecl _sz_ext_ms_win_ntuser_window_l1_1_0_dll" __sz_ext_ms_win_ntuser_window_l1_1_0_dll
0x140085260: "__cdecl _imp_RtlAddAce" __imp_RtlAddAce
0x140084688: "__cdecl _imp_RpcServerSubscribeForNotification" __imp_RpcServerSubscribeForNotification
0x14006ECA0: WppControlCallback
0x14008BA98: "Winsrv_ShellRestart" ??_C@_1CI@JCBPENAK@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAS?$AAh?$AAe?$AAl?$AAl?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140036928: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x140037550: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14009DE68: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_winlogon_mincreds_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_winlogon_mincreds_l1_1_0_dll
0x14009E080: USERENV_NULL_THUNK_DATA_DLN
0x140018DA0: "public: int __cdecl CUser::ShouldReportCachedLogon(unsigned long) __ptr64" ?ShouldReportCachedLogon@CUser@@QEAAHK@Z
0x140084648: "__cdecl _imp_RpcEpUnregister" __imp_RpcEpUnregister
0x140084EA8: "__cdecl _imp_PowerSettingRegisterNotification" __imp_PowerSettingRegisterNotification
0x14008C408: "NotifyLogon" ??_C@_1BI@NLGHPBOL@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140087710: "Software\Microsoft\Windows\Curre" ??_C@_1JK@GHFOBNCJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14005CC24: "void __cdecl AsyncLogoffSupportSetUser(void * __ptr64)" ?AsyncLogoffSupportSetUser@@YAXPEAX@Z
0x140068678: "public: unsigned long __cdecl CSession::SetInactivitySettings(struct _INACTIVITY_SETTINGS) __ptr64" ?SetInactivitySettings@CSession@@QEAAKU_INACTIVITY_SETTINGS@@@Z
0x14008CEC8: "MPRChangeUnlockNotify" ??_C@_1CM@LOFGHDML@?$AAM?$AAP?$AAR?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400662A4: "unsigned long __cdecl CreateBackupRestoreWizard(unsigned short const * __ptr64,void * __ptr64,unsigned short,struct _WIZARD_CONTEXT * __ptr64 * __ptr64)" ?CreateBackupRestoreWizard@@YAKPEBGPEAXGPEAPEAU_WIZARD_CONTEXT@@@Z
0x1400A8500: "struct _StateMachineTransition * g_xWLGeneric_AccessNotifyAsSystem_Transition" ?g_xWLGeneric_AccessNotifyAsSystem_Transition@@3PAU_StateMachineTransition@@A
0x1400A9100: "long (__cdecl* __ptr64 g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64)" ?g_wil_details_pfnRtlUnsubscribeWnfNotificationWaitForCompletion@@3P6AJPEAU__WIL__WNF_USER_SUBSCRIPTION@@@ZEA
0x140084800: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1400355C4: "__cdecl _imp_load_ConfigureUserArso" __imp_load_ConfigureUserArso
0x140094588: "C:\Debuggers\ntsd.exe" ??_C@_1CM@GCJMEMEJ@?$AAC?$AA?3?$AA?2?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AAs?$AA?2?$AAn?$AAt?$AAs?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400590C8: "int __cdecl WaitForJob(struct _WINLOGON_JOB * __ptr64,unsigned long)" ?WaitForJob@@YAHPEAU_WINLOGON_JOB@@K@Z
0x140084CA0: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x1400889A8: "LaunchCflScenario" ??_C@_1CE@EDKBFCKB@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAC?$AAf?$AAl?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$AA@
0x140084FD0: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x140057370: "void __cdecl WlInactivityTimeoutHandler(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?WlInactivityTimeoutHandler@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x1400A9A40: ?wrapper@?1??Instance@FeatureLogging@details@wil@@KAPEAV234@XZ@4V?$static_lazy@VFeatureLogging@details@wil@@@34@A
0x1400A7620: "struct _StateMachineTransition * g_xWLGeneric_InitiateLock_Transition" ?g_xWLGeneric_InitiateLock_Transition@@3PAU_StateMachineTransition@@A
0x14007FB90: "protected: unsigned long __cdecl Microsoft::WRL::ComPtr<struct Windows::Internal::AssignedAccess::IAssignedAccessUserInfo>::InternalRelease(void) __ptr64" ?InternalRelease@?$ComPtr@UIAssignedAccessUserInfo@AssignedAccess@Internal@Windows@@@WRL@Microsoft@@IEAAKXZ
0x14008B1F0: "StartSSAsUser" ??_C@_1BM@CJHIAFFH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAS?$AAA?$AAs?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x140054C74: "unsigned long __cdecl ChangingPassword(struct _StateMachineCallContext * __ptr64,int)" ?ChangingPassword@@YAKPEAU_StateMachineCallContext@@H@Z
0x140086DC8: "DisableCad" ??_C@_1BG@FJNGKJB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAa?$AAd?$AA?$AA@
0x140034B69: "__cdecl _imp_load_ThemesOnEarlyCreateSession" __imp_load_ThemesOnEarlyCreateSession
0x140079854: "long __cdecl wil::details::StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@details@wil@@YAJPEAD_KPEBDZZ
0x14001A400: "void __cdecl WLGeneric_Logon_ReportSuccessResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportSuccessResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400A72F0: "unsigned long * g_xWLGeneric_Unlock_LogonUser_ResetSignals" ?g_xWLGeneric_Unlock_LogonUser_ResetSignals@@3PAKA
0x140095BE8: "RespecializeOptional" ??_C@_1CK@MCOFADHC@?$AAR?$AAe?$AAs?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x1400853F8: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x140055660: "unsigned long __cdecl WLGeneric_ChangeUnlock_ReportResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangeUnlock_ReportResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140091258: "NT AUTHORITY" ??_C@_1BK@OAANEJOH@?$AAN?$AAT?$AA?5?$AAA?$AAU?$AAT?$AAH?$AAO?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x1400363B4: IsCamIsCandidateUserPresent
0x140064600: "unsigned long __cdecl WLGeneric_Locked_Resume_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Resume_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14000D190: "public: virtual void * __ptr64 __cdecl CSession::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSession@@UEAAPEAXI@Z
0x140060D50: "int __cdecl ValidateAndUnmarshalTicketLogonInfo(void * __ptr64,unsigned long)" ?ValidateAndUnmarshalTicketLogonInfo@@YAHPEAXK@Z
0x14002CC40: UmsHlprInit
0x14002B734: StateMachineCreate
0x140073090: "void __cdecl FreeHeap<struct _TOKEN_USER * __ptr64>(struct _TOKEN_USER * __ptr64)" ??$FreeHeap@PEAU_TOKEN_USER@@@@YAXPEAU_TOKEN_USER@@@Z
0x140032814: "private: int __cdecl CUser::ShouldPasswordExpirationWarningBeDisplayed(union _LARGE_INTEGER * __ptr64 const,unsigned long * __ptr64) __ptr64" ?ShouldPasswordExpirationWarningBeDisplayed@CUser@@AEAAHQEAT_LARGE_INTEGER@@PEAK@Z
0x140031E28: WPP_INIT_CONTROL_ARRAY
0x1400A8378: "struct _StateMachineTransition * g_xWLGeneric_MPRLogonNotify_Transition" ?g_xWLGeneric_MPRLogonNotify_Transition@@3PAU_StateMachineTransition@@A
0x140084600: "__cdecl _imp_RpcServerTestCancel" __imp_RpcServerTestCancel
0x140079758: "public: virtual __cdecl wil::ResultException::~ResultException(void) __ptr64" ??1ResultException@wil@@UEAA@XZ
0x14008DB90: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x14007D8D0: "unsigned long __cdecl WluiDisplayTSDisconnectOptionsList(unsigned long,unsigned long * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?WluiDisplayTSDisconnectOptionsList@@YAKKPEAKK00@Z
0x140081010: "const CSession::`vftable'" ??_7CSession@@6B@
0x1400364CC: IsWinStationGetRestrictedLogonInfoPresent
0x140091A70: "NotShownErrorTime" ??_C@_1CE@BNHHKJEP@?$AAN?$AAo?$AAt?$AAS?$AAh?$AAo?$AAw?$AAn?$AAE?$AAr?$AAr?$AAo?$AAr?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x14008D010: "No_Unlock_DisconnectedLock" ??_C@_1DG@HNMGGKCN@?$AAN?$AAo?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x140036811: "__cdecl _imp_load_WinStationGetUserCredentials" __imp_load_WinStationGetUserCredentials
0x140087CD0: "EtwEventEnabled" ??_C@_0BA@MIAFEPPA@EtwEventEnabled?$AA@
0x140094748: "SetupShutdownRequired" ??_C@_1CM@BBLNDNNG@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x140086760: "Software\Microsoft\Windows NT\Cu" ??_C@_1IA@BBMHNLJP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14001E650: "unsigned long __cdecl WLGeneric_NotifyEndShell_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyEndShell_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14009E1F8: ext-ms-win-ntuser-keyboard-l1-1-0_NULL_THUNK_DATA_DLN
0x14003145C: "void __cdecl AsyncLogoffSupportUninit(void)" ?AsyncLogoffSupportUninit@@YAXXZ
0x140086400: WLEvt_ThemesOnLogonPre_Stop
0x14008CB90: "Unlock_LogonUser" ??_C@_1CC@KEAKKILE@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x1400A6560: "struct _StateMachineSignal g_xLogoff_NtUserCompleted_Signal" ?g_xLogoff_NtUserCompleted_Signal@@3U_StateMachineSignal@@A
0x14008D2B8: WNF_SHEL_OOBE_USER_LOGON_COMPLETE
0x140019740: "public: unsigned long __cdecl CUser::GetUserSidString(unsigned short * __ptr64,unsigned long) __ptr64" ?GetUserSidString@CUser@@QEAAKPEAGK@Z
0x140090E60: "ShellExecute" ??_C@_1BK@LHFIGHJB@?$AAS?$AAh?$AAe?$AAl?$AAl?$AAE?$AAx?$AAe?$AAc?$AAu?$AAt?$AAe?$AA?$AA@
0x14006F610: "void __cdecl ForceLogoffOtherUsers(void * __ptr64 const,unsigned long,enum CandidateUserPhase,int * __ptr64)" ?ForceLogoffOtherUsers@@YAXQEAXKW4CandidateUserPhase@@PEAH@Z
0x1400A4CF0: "struct _StateMachineState g_xWLGeneric_MPRChangeUnlockNotify_State" ?g_xWLGeneric_MPRChangeUnlockNotify_State@@3U_StateMachineState@@A
0x14006EF24: "public: static void __cdecl OOBE::Health::details::OOBEHealthTracker::HandleEvent<24,bool>(bool)" ??$HandleEvent@$0BI@_N@OOBEHealthTracker@details@Health@OOBE@@SAX_N@Z
0x1400A98E0: "class LibraryInitLock g_lockObject" ?g_lockObject@@3VLibraryInitLock@@A
0x1400B11A0: api-ms-win-rtcore-ntuser-private-l1-1-2_NULL_THUNK_DATA_DLA
0x14006E8EC: "unsigned long __cdecl WinLogonSetup(int * __ptr64,int * __ptr64,enum _SHUTDOWN_ACTION * __ptr64)" ?WinLogonSetup@@YAKPEAH0PEAW4_SHUTDOWN_ACTION@@@Z
0x14001A4A0: "void __cdecl WLGeneric_FindDestinationSession_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_FindDestinationSession_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084EE0: "__cdecl _imp_GetSidIdentifierAuthority" __imp_GetSidIdentifierAuthority
0x1400360F8: IsSwitchDesktopPresent
0x140021628: "void __cdecl RecordLockScreenInitialization(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum LockScreenType,unsigned long,unsigned long)" ?RecordLockScreenInitialization@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@W4LockScreenType@@KK@Z
0x14005F1F4: "void __cdecl ReadSysProcsFromRegistry(void)" ?ReadSysProcsFromRegistry@@YAXXZ
0x140068980: "int __cdecl wil_details_SetPropertyCacheUsageCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyCacheUsageCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x1400845E8: "__cdecl _imp_RpcAsyncCancelCall" __imp_RpcAsyncCancelCall
0x14008C2B0: "Logon_Checking_LastLogonPolicy" ??_C@_1DO@LOOMPNFN@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAC?$AAh?$AAe?$AAc?$AAk?$AAi?$AAn?$AAg?$AA_?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x140035FBB: "__cdecl _imp_load_CloseDesktop" __imp_load_CloseDesktop
0x1400351C2: "__cdecl _imp_load_DestroyEnvironmentBlock" __imp_load_DestroyEnvironmentBlock
0x140094378: "fmifs.dll" ??_C@_1BE@IHGPAAHL@?$AAf?$AAm?$AAi?$AAf?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14008A378: WPP_e24da56f9de334935060f76621ccc52a_Traceguids
0x1400372D4: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Attach(unsigned short * __ptr64 * __ptr64) __ptr64" ?Attach@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXPEAPEAG@Z
0x140090980: "DefaultUserName" ??_C@_1CA@CPAFHNCF@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAU?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1400A4728: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x14006BA98: "private: void __cdecl CUser::GetUserPresenceMonitorConfiguration(unsigned __int64 * __ptr64,int * __ptr64) __ptr64" ?GetUserPresenceMonitorConfiguration@CUser@@AEAAXPEA_KPEAH@Z
0x14002C158: "unsigned long __cdecl AsyncLogoff(unsigned long)" ?AsyncLogoff@@YAKK@Z
0x1400303D8: "long __cdecl RemoveTokenPrivileges(void)" ?RemoveTokenPrivileges@@YAJXZ
0x1400515BC: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x14008FFD8: "Negotiate" ??_C@_1BE@ELFOBFGL@?$AAN?$AAe?$AAg?$AAo?$AAt?$AAi?$AAa?$AAt?$AAe?$AA?$AA@
0x140072D6C: ?Free@?$CAutoPtr@PEAX$1?HandleClose@@YAXPEAX@Z@@AEAAXXZ
0x140094D40: "Lockout Metadata Invalid - Total" ??_C@_1GM@BHPAINCA@?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AA?5?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AA?9?$AA?5?$AAT?$AAo?$AAt?$AAa?$AAl@
0x1400B1098: "__cdecl _imp_LsaDeregisterLogonProcess" __imp_LsaDeregisterLogonProcess
0x1400A83F0: "struct _StateMachineTransition * g_xWLGeneric_Request_Logon_Credz_Transition" ?g_xWLGeneric_Request_Logon_Credz_Transition@@3PAU_StateMachineTransition@@A
0x140035A3C: "__cdecl _imp_load_GetLastInputInfo" __imp_load_GetLastInputInfo
0x1400866C8: "Session" ??_C@_1BA@FJPOMCMI@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140079964: "public: class CandidateAccountManagerPolicyTraceProvider * __ptr64 __cdecl wil::details::static_lazy<class CandidateAccountManagerPolicyTraceProvider>::get(void (__cdecl*)(void)) __ptr64" ?get@?$static_lazy@VCandidateAccountManagerPolicyTraceProvider@@@details@wil@@QEAAPEAVCandidateAccountManagerPolicyTraceProvider@@P6AXXZ@Z
0x140089C2A: "" ??_C@_00CNPNBAHC@?$AA@
0x14001EF48: "unsigned long __cdecl WlDisplayStatus(unsigned short const * __ptr64,enum _WLUI_STATE,unsigned long)" ?WlDisplayStatus@@YAKPEBGW4_WLUI_STATE@@K@Z
0x140035F0C: "__cdecl _imp_load_ShowWindow" __imp_load_ShowWindow
0x140086410: WLEvt_ThemesOnLogonPre_Start
0x1400A6B10: "struct _StateMachineTransition * g_xWLGeneric_NotifyEndShell_Transition" ?g_xWLGeneric_NotifyEndShell_Transition@@3PAU_StateMachineTransition@@A
0x1400360E3: "__cdecl _imp_load_CreateDesktopW" __imp_load_CreateDesktopW
0x14001AB60: "unsigned long __cdecl WLGeneric_NotifyCreateSession_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyCreateSession_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140033F78: "public: __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x140089390: "ext-ms-win-ntuser-private-l1-1-1" ??_C@_1EC@MFGGMKFF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x140085188: "__cdecl _imp_memmove_s" __imp_memmove_s
0x1400874D0: WLDiagEvt_UserBootScenario_Info
0x1400852D0: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x140035129: "__cdecl _imp_load_LsaConnectUntrusted" __imp_load_LsaConnectUntrusted
0x1400A8E60: "__cdecl commode" _commode
0x140084A60: "__cdecl _imp_InitializeProcThreadAttributeList" __imp_InitializeProcThreadAttributeList
0x140084BC8: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x140095EA0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1400A6500: "struct _StateMachineSignal g_xWinsrv_LogoffNotify_Signal" ?g_xWinsrv_LogoffNotify_Signal@@3U_StateMachineSignal@@A
0x1400AA364: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x1400A5430: "struct _StateMachineState g_xWLGeneric_Killing_Scrnsaver_Logged_On_State" ?g_xWLGeneric_Killing_Scrnsaver_Logged_On_State@@3U_StateMachineState@@A
0x140084AF8: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x140084928: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x140035B4C: "__cdecl _tailMerge_ext_ms_win_ntuser_misc_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_misc_l1_1_0_dll
0x14007E20C: WluiPromptForCredentials
0x140023610: "public: unsigned long __cdecl CUser::AddUserToBNO(unsigned long) __ptr64" ?AddUserToBNO@CUser@@QEAAKK@Z
0x140086018: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x1400A8EA8: "__cdecl _hmod__USERENV_dll" __hmod__USERENV_dll
0x140032060: "protected: virtual void __cdecl wil::TraceLoggingProvider::Initialize(void) __ptr64" ?Initialize@TraceLoggingProvider@wil@@MEAAXXZ
0x1400A9B80: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x14007E914: WmsgpDisconnect
0x140086338: "ForceAutoLockOnLogon" ??_C@_1CK@HIOPOPME@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAA?$AAu?$AAt?$AAo?$AAL?$AAo?$AAc?$AAk?$AAO?$AAn?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x1400A6C28: "unsigned long * g_xWLGeneric_Locked_Hibernating_ResetSignals" ?g_xWLGeneric_Locked_Hibernating_ResetSignals@@3PAKA
0x1400A80F8: "unsigned long * g_xWLGeneric_FindDestinationSession_ResetSignals" ?g_xWLGeneric_FindDestinationSession_ResetSignals@@3PAKA
0x140087638: "WMsgKRpc%X%X%X" ??_C@_1BO@DGOFIHDP@?$AAW?$AAM?$AAs?$AAg?$AAK?$AAR?$AAp?$AAc?$AA?$CF?$AAX?$AA?$CF?$AAX?$AA?$CF?$AAX?$AA?$AA@
0x140091200: "Local\Wl_Stop_Reminder_Event_%ld" ??_C@_1EC@DJDBINKD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAW?$AAl?$AA_?$AAS?$AAt?$AAo?$AAp?$AA_?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA_?$AAE?$AAv?$AAe?$AAn?$AAt?$AA_?$AA?$CF?$AAl?$AAd@
0x140034E48: "__cdecl _tailMerge_samcli_dll" __tailMerge_samcli_dll
0x1400A61F0: "struct _StateMachineState g_xWLGeneric_Welcome_State" ?g_xWLGeneric_Welcome_State@@3U_StateMachineState@@A
0x1400915C0: "FveInitializeDeviceEncryption" ??_C@_0BO@KBLNFINA@FveInitializeDeviceEncryption?$AA@
0x14009DCA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_private_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_private_l1_1_0_dll
0x14008C468: "Request_LogonChange_Credz" ??_C@_1DE@PFOMLCAE@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAL?$AAo?$AAg?$AAo?$AAn?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x140087450: WLEvt_RequestCredentials_Stop
0x14008FBC8: WLEvt_PinResetLogon_Info
0x14008C760: "No_Unlock_Disconnected" ??_C@_1CO@GPFIACME@?$AAN?$AAo?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x1400A95B0: g_pSidLocal
0x1400506C4: "public: void __cdecl wil::details::EnabledStateManager::OnStateChange(void) __ptr64" ?OnStateChange@EnabledStateManager@details@wil@@QEAAXXZ
0x1400A7828: "struct _StateMachineTransition * g_xWLGeneric_TO_Disconnected_Transition" ?g_xWLGeneric_TO_Disconnected_Transition@@3PAU_StateMachineTransition@@A
0x140062AE0: "void __cdecl WLGeneric_NTLMIsDisabledReminder_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NTLMIsDisabledReminder_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140084B18: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x140086510: WLEvt_DwmpTerminateSessionProcess_Start
0x14009F9F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14004EE94: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<unsigned short const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64 * __ptr64)" ??$WriteResultString@PEBG@details@wil@@YAPEAEPEAE0PEBGPEAPEBG@Z
0x140095A08: "CreateFile(dllPath)" ??_C@_1CI@PFMEIPMP@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?$CI?$AAd?$AAl?$AAl?$AAP?$AAa?$AAt?$AAh?$AA?$CJ?$AA?$AA@
0x1400B13C8: "__cdecl _imp_CamIsCandidateUser" __imp_CamIsCandidateUser
0x14009FAA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x1400880E8: "TEMP" ??_C@_19LFDMGLCC@?$AAT?$AAE?$AAM?$AAP?$AA?$AA@
0x140090CE0: "SmartCardLogonNotify" ??_C@_1CK@EOIGLGDL@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAL?$AAo?$AAg?$AAo?$AAn?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400A5330: "struct _StateMachineState g_xWLGeneric_MPRChangeNotify_State" ?g_xWLGeneric_MPRChangeNotify_State@@3U_StateMachineState@@A
0x140012314: "unsigned long __cdecl WlAccessibilityOnLogoff(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlAccessibilityOnLogoff@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140088BA8: "wlrmdr.exe" ??_C@_1BG@KGLKHMIB@?$AAw?$AAl?$AAr?$AAm?$AAd?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14008FC98: WLEvt_AssignedAccessLogon_Info
0x140085358: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1400890D0: "ext-ms-win-devmgmt-policy-l1-1-2" ??_C@_1EC@PJPAPDNK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAv?$AAm?$AAg?$AAm?$AAt?$AA?9?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2@
0x140086E58: "InactivityTimeoutSecs" ??_C@_1CM@HICCDOFE@?$AAI?$AAn?$AAa?$AAc?$AAt?$AAi?$AAv?$AAi?$AAt?$AAy?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAS?$AAe?$AAc?$AAs?$AA?$AA@
0x140059460: WPP_SF_qql
0x14000B5D0: "unsigned char __cdecl WinStationDisconnectWrapper(struct _WLSM_GLOBAL_CONTEXT * __ptr64,void * __ptr64,unsigned long,unsigned char)" ?WinStationDisconnectWrapper@@YAEPEAU_WLSM_GLOBAL_CONTEXT@@PEAXKE@Z
0x14008C800: "CAD" ??_C@_17ONLNPDDL@?$AAC?$AAA?$AAD?$AA?$AA@
0x140084880: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140091248: WPP_9c5b5c35547f378fdfc4080f17056c2a_Traceguids
0x1400A6070: "struct _StateMachineState g_xWLGeneric_PowerTransition_ShowResumeMsg_State" ?g_xWLGeneric_PowerTransition_ShowResumeMsg_State@@3U_StateMachineState@@A
0x14009F2F8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x140084660: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x140084618: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x1400A9130: "int g_fLogoffTimingDataRelevant" ?g_fLogoffTimingDataRelevant@@3HA
0x14002351C: "int __cdecl IsUserManagerServiceAvailable(void)" ?IsUserManagerServiceAvailable@@YAHXZ
0x1400A8020: "struct _StateMachineTransition * g_xWLGeneric_NotifyStartShell_Transition" ?g_xWLGeneric_NotifyStartShell_Transition@@3PAU_StateMachineTransition@@A
0x14008FCA8: WLEvt_DelayLockDisplayLockScreen_Info
0x14003676F: "__cdecl _imp_load_WinStationQueryInformationW" __imp_load_WinStationQueryInformationW
0x14008A470: "RegCreateKeyEx" ??_C@_1BO@KAMNOIMA@?$AAR?$AAe?$AAg?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAK?$AAe?$AAy?$AAE?$AAx?$AA?$AA@
0x1400845A0: "__cdecl _imp_AppContainerDeriveSidFromMoniker" __imp_AppContainerDeriveSidFromMoniker
0x1400A62C0: "struct _StateMachineSignal g_xWLGeneric_ChangePassword_Signal" ?g_xWLGeneric_ChangePassword_Signal@@3U_StateMachineSignal@@A
0x140089E58: "OOBEHealth" ??_C@_1BG@PGEKCNPO@?$AAO?$AAO?$AAB?$AAE?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x1400216B0: ?GetGlobalTraceLoggingActivity@CGlobalStore@@QEAAPEAV?$TraceLoggingActivity@$1?g_WinlogonProvider@@3QEBU_TlgProvider_t@@EB$0EAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsHProvider@@@@XZ
0x140002BA4: WluiDisplayLocked
0x14000989C: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Read(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64) __ptr64" ?Read@UsageIndexProperty@details_abi@wil@@QEAA_NAEAPEAEPEAE@Z
0x140058960: "void __cdecl JobManagerCallback(void * __ptr64,unsigned char)" ?JobManagerCallback@@YAXPEAXE@Z
0x14000D894: "public: void __cdecl CUser::StopWinlogonRegistryKeyListener(void) __ptr64" ?StopWinlogonRegistryKeyListener@CUser@@QEAAXXZ
0x14009DEA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_MPR_dll" __DELAY_IMPORT_DESCRIPTOR_MPR_dll
0x14006BF90: "private: static void __cdecl CUser::LogonHoursActionCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?LogonHoursActionCallback@CUser@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x140085108: "__cdecl _imp_wcschr" __imp_wcschr
0x140062900: "void __cdecl WLGeneric_Logon_ReportLastLogon_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportLastLogon_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084F50: "__cdecl _imp_CredFree" __imp_CredFree
0x1400A9A38: "struct _WNF_STATE_NAME _wnfState" ?_wnfState@@3U_WNF_STATE_NAME@@A
0x1400761BC: "void __cdecl RecordHungSubscribersIntoBlackbox(struct _NOTIFICATION_CLIENT_DEF * __ptr64,int)" ?RecordHungSubscribersIntoBlackbox@@YAXPEAU_NOTIFICATION_CLIENT_DEF@@H@Z
0x1400868E0: "%TEMP%" ??_C@_1O@JJHLNNN@?$AA?$CF?$AAT?$AAE?$AAM?$AAP?$AA?$CF?$AA?$AA@
0x140086B90: "onecore\ds\security\eas\policyen" ??_C@_1HM@JABBFEKF@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x14003160C: WppInitUm
0x140084B70: "__cdecl _imp_InitiateShutdownW" __imp_InitiateShutdownW
0x140004CF0: "void __cdecl WLGeneric_Unlock_ReportSuccessResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportSuccessResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14003058C: WlSecureDesktoppAllocateTimeoutTimer
0x140086C90: "Profiles" ??_C@_1BC@MCCPHDFC@?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x140084C18: "__cdecl _imp_SetEvent" __imp_SetEvent
0x14008FE30: "MSScreenMagnifierAlreadyExistsMu" ??_C@_1EI@LKAKOGPM@?$AAM?$AAS?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAM?$AAa?$AAg?$AAn?$AAi?$AAf?$AAi?$AAe?$AAr?$AAA?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AAE?$AAx?$AAi?$AAs?$AAt?$AAs?$AAM?$AAu@
0x14000FD34: "public: unsigned long __cdecl CSession::CreatePrimaryTerminal(struct _LUID * __ptr64,int) __ptr64" ?CreatePrimaryTerminal@CSession@@QEAAKPEAU_LUID@@H@Z
0x140095D58: "Sysmain" ??_C@_1BA@CJGCCGHK@?$AAS?$AAy?$AAs?$AAm?$AAa?$AAi?$AAn?$AA?$AA@
0x14008BB88: "Secure_LuaReady" ??_C@_1CA@LEEBEDGI@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA_?$AAL?$AAu?$AAa?$AAR?$AAe?$AAa?$AAd?$AAy?$AA?$AA@
0x1400B1008: "__cdecl _imp_AuthziSourceAudit" __imp_AuthziSourceAudit
0x1400A8F88: "__cdecl _hmod__ext_ms_win_ntuser_windowclass_l1_1_0_dll" __hmod__ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x140009A04: "protected: void __cdecl wistd::_Func_class<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::_Tidy(void) __ptr64" ?_Tidy@?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@IEAAXXZ
0x14001A53C: "public: unsigned long __cdecl CUser::SetSamCompatibleUserName(unsigned short const * __ptr64) __ptr64" ?SetSamCompatibleUserName@CUser@@QEAAKPEBG@Z
0x140084AA8: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x140035240: "__cdecl _imp_load_AuthziInitializeAuditEvent" __imp_load_AuthziInitializeAuditEvent
0x1400A9020: "__cdecl _hmod__ext_ms_win_composition_init_l1_1_0_dll" __hmod__ext_ms_win_composition_init_l1_1_0_dll
0x140084838: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140035CF4: IsSwitchDesktopWithFadePresent
0x140036AA8: "__cdecl _imp_load_DwmpNotifyUserLogoff" __imp_load_DwmpNotifyUserLogoff
0x1400051B0: "public: virtual void * __ptr64 __cdecl wil::details::FeatureLogging::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFeatureLogging@details@wil@@UEAAPEAXI@Z
0x1400A8EE8: "__cdecl _hmod__ext_ms_win_session_winlogon_l1_1_1_dll" __hmod__ext_ms_win_session_winlogon_l1_1_1_dll
0x1400A8EB8: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_2_dll" __hmod__api_ms_win_security_lsalookup_l1_1_2_dll
0x14008FEF8: "DisplaySwitch.exe 5" ??_C@_1CI@LKKFDMBE@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA5?$AA?$AA@
0x14009FC10: "__cdecl _IMPORT_DESCRIPTOR_KERNELBASE" __IMPORT_DESCRIPTOR_KERNELBASE
0x140085500: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x1400051E4: "protected: virtual __cdecl wil::TraceLoggingProvider::~TraceLoggingProvider(void) __ptr64" ??1TraceLoggingProvider@wil@@MEAA@XZ
0x14008F7FB: ?_TlgEvent@?3???$PolicyEnabled@AEAY0P@$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY0P@$$CBG@Z@4U<unnamed-type-_TlgEvent>@?3???$PolicyEnabled@AEAY0P@$$CBG@1@SAX0@Z@B
0x140087980: "WlballoonKerberosNotificationEve" ??_C@_1EO@HKNPGADI@?$AAW?$AAl?$AAb?$AAa?$AAl?$AAl?$AAo?$AAo?$AAn?$AAK?$AAe?$AAr?$AAb?$AAe?$AAr?$AAo?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAE?$AAv?$AAe@
0x1400A92C0: Timer
0x140051CF0: "__cdecl TlgWrite" _TlgWrite
0x140084CC8: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x140069658: "int __cdecl GetTiToken(void * __ptr64 * __ptr64)" ?GetTiToken@@YAHPEAPEAX@Z
0x140063340: "unsigned long __cdecl WLGeneric_WaitForDisconnectAfterFailedAuth_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_WaitForDisconnectAfterFailedAuth_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140018470: "public: unsigned long __cdecl CMachine::RegQueryDWORD(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?RegQueryDWORD@CMachine@@QEAAKPEBG0KPEAK@Z
0x14008D228: "PseudoLogging_Off1" ??_C@_1CG@CIPGDOI@?$AAP?$AAs?$AAe?$AAu?$AAd?$AAo?$AAL?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA_?$AAO?$AAf?$AAf?$AA1?$AA?$AA@
0x140034780: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140085588: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400A9114: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x1400A4B30: "struct _StateMachineState g_xWLGeneric_No_Unlock_DisconnectedLock_State" ?g_xWLGeneric_No_Unlock_DisconnectedLock_State@@3U_StateMachineState@@A
0x140095058: "StringCchCat" ??_C@_1BK@KPIPDKI@?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAa?$AAt?$AA?$AA@
0x1400301FC: "unsigned long __cdecl RequestCredentials(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum _WLUI_REQUEST_REASON,enum _WLUI_REQUEST_FLAGS,struct _CRED_PROV_CREDENTIAL * __ptr64,struct _CRED_PROV_CREDENTIAL * __ptr64,unsigned int * __ptr64,int * __ptr64)" ?RequestCredentials@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@W4_WLUI_REQUEST_REASON@@W4_WLUI_REQUEST_FLAGS@@PEAU_CRED_PROV_CREDENTIAL@@3PEAIPEAH@Z
0x140035180: NdrServerCall2
0x140011870: "unsigned long __cdecl WlAccessibilitypConstructSATKeyName(unsigned long,unsigned short * __ptr64 * __ptr64)" ?WlAccessibilitypConstructSATKeyName@@YAKKPEAPEAG@Z
0x1400885A0: "EventWrite" ??_C@_0L@JMEHOADM@EventWrite?$AA@
0x1400AA33C: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x140027334: "private: void __cdecl CEtwProviderT<void>::CETWApiSet::Init(void) __ptr64" ?Init@CETWApiSet@?$CEtwProviderT@X@@AEAAXXZ
0x14009F904: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x1400A935C: "unsigned long g_dwRefCount" ?g_dwRefCount@@3KA
0x140091E38: "Inactive" ??_C@_08PINKDKH@Inactive?$AA@
0x140089D10: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x1400A8E6C: "__cdecl fmode" _fmode
0x140085D28: WLDiagEvt_LogoffAppsTerminationToSessionEnd_Stop
0x14002EF68: UHReportBootGood
0x140086060: WLDiagEvt_UnlockSuccess_Stop
0x14009F460: ext-ms-win-session-winlogon-l1-1-0_NULL_THUNK_DATA_DLB
0x1400320C0: DefaultWMsgMessageHandler
0x1400B1450: ext-ms-win-session-winlogon-l1-1-0_NULL_THUNK_DATA_DLA
0x140090B50: "DisableCAD" ??_C@_1BG@KCADMAJJ@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAA?$AAD?$AA?$AA@
0x140091BF0: "WlRemindersDisplayFailed" ??_C@_1DC@EMLEOAEK@?$AAW?$AAl?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AAs?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140084BD8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x14008C870: "ReadyForSecureLua" ??_C@_1CE@HMCEIDBE@?$AAR?$AAe?$AAa?$AAd?$AAy?$AAF?$AAo?$AAr?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAL?$AAu?$AAa?$AA?$AA@
0x1400647A0: "void __cdecl WLGeneric_Logged_On_Resume_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Resume_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008C088: "PowerTransition_Welcome" ??_C@_1DA@BLDDMFDF@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA_?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA?$AA@
0x140084948: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1400878C0: "\Sessions\%d" ??_C@_1BK@JJANIBL@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$CF?$AAd?$AA?$AA@
0x140086440: WLEvt_ThemesOnLogoff_Stop
0x1400A95C0: g_pSidAnyRestrictedPackage
0x140084640: "__cdecl _imp_RpcEpRegisterW" __imp_RpcEpRegisterW
0x14009E398: ext-ms-win-session-winlogon-l1-1-0_NULL_THUNK_DATA_DLN
0x14001AA3C: "unsigned long __cdecl AbortBlockedThread(struct _WLSM_GLOBAL_CONTEXT * __ptr64,void * __ptr64)" ?AbortBlockedThread@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAX@Z
0x14007C110: "public: virtual long __cdecl InProcEncryptHandle::EasUpdateDeviceLockoutState(void * __ptr64,unsigned char * __ptr64,unsigned long) __ptr64" ?EasUpdateDeviceLockoutState@InProcEncryptHandle@@UEAAJPEAXPEAEK@Z
0x140008EC0: "long __cdecl wil_details_StagingConfig_Load(struct wil_details_StagingConfig * __ptr64,enum wil_FeatureStore,unsigned __int64,void * __ptr64,int)" ?wil_details_StagingConfig_Load@@YAJPEAUwil_details_StagingConfig@@W4wil_FeatureStore@@_KPEAXH@Z
0x140085170: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140084930: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1400A6460: "struct _StateMachineSignal g_xSecure_LuaEnd_Signal" ?g_xSecure_LuaEnd_Signal@@3U_StateMachineSignal@@A
0x140084F28: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x140019FB0: "private: unsigned long __cdecl CUser::SetElevatedToken(void) __ptr64" ?SetElevatedToken@CUser@@AEAAKXZ
0x1400A7860: "unsigned long * g_xWLGeneric_TimeoutHandler_Logged_On_ResetSignals" ?g_xWLGeneric_TimeoutHandler_Logged_On_ResetSignals@@3PAKA
0x1400A7F30: "struct _StateMachineTransition * g_xWLGeneric_ChangingLogonPassword_Transition" ?g_xWLGeneric_ChangingLogonPassword_Transition@@3PAU_StateMachineTransition@@A
0x1400A73B0: "struct _StateMachineTransition * g_xWLGeneric_Request_Web_Unlock_Credz_Transition" ?g_xWLGeneric_Request_Web_Unlock_Credz_Transition@@3PAU_StateMachineTransition@@A
0x1400847F0: "__cdecl _imp_GetShortPathNameW" __imp_GetShortPathNameW
0x1400912C8: WPP_348957afe5083cea74b8201f2aff4ad4_Traceguids
0x1400A7A60: "struct _StateMachineTransition * g_xWLGeneric_CAD_Return_Transition" ?g_xWLGeneric_CAD_Return_Transition@@3PAU_StateMachineTransition@@A
0x14008F2F7: ?_TlgEvent@?3??UserSwitchReturnedToWelcomeLockscreen@WinlogonProvider@@SAXXZ@4U<unnamed-type-_TlgEvent>@?3??12@SAXXZ@B
0x14001FCC4: WluiAbort
0x140013008: "void __cdecl ExecuteNamedEscape(struct tagUMFD_WINLOGON_ESCAPE_ARGUMENT * __ptr64)" ?ExecuteNamedEscape@@YAXPEAUtagUMFD_WINLOGON_ESCAPE_ARGUMENT@@@Z
0x1400A55F0: "struct _StateMachineState g_xWLGeneric_SecureCredUI_Operation_State" ?g_xWLGeneric_SecureCredUI_Operation_State@@3U_StateMachineState@@A
0x14009F450: ext-ms-win-session-winlogon-l1-1-1_NULL_THUNK_DATA_DLB
0x1400B1460: ext-ms-win-session-winlogon-l1-1-1_NULL_THUNK_DATA_DLA
0x140057254: "void __cdecl WaitForInactivityExecuteThread(struct _StateMachineCallContext * __ptr64)" ?WaitForInactivityExecuteThread@@YAXPEAU_StateMachineCallContext@@@Z
0x14008CE60: "Request_UnlockChange_Credz" ??_C@_1DG@KPNPKCKM@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x1400A92B8: SecureDesktopPendingRequest
0x140004850: "unsigned long __cdecl WLGeneric_Unlock_ReportSuccessResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportSuccessResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400B1058: "__cdecl _imp_NaDynamicLockStop" __imp_NaDynamicLockStop
0x140063090: "unsigned long __cdecl WLGeneric_ShellRestart_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ShellRestart_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084DD8: "__cdecl _imp_WindowsGetStringRawBuffer" __imp_WindowsGetStringRawBuffer
0x14006BC64: "public: unsigned long __cdecl CUser::ImpersonateUser(int) __ptr64" ?ImpersonateUser@CUser@@QEAAKH@Z
0x14009DDA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_usermgr_l1_1_0_dll
0x14007BBA8: "public: unsigned long __cdecl CFveAutoPtr::ValidateLockoutState(int * __ptr64) __ptr64" ?ValidateLockoutState@CFveAutoPtr@@QEAAKPEAH@Z
0x14008A060: WPP_24d53c0456ea34a335bf99e1549b920b_Traceguids
0x140057D20: "void __cdecl WlLoadInactivitySettings(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct _INACTIVITY_SETTINGS * __ptr64)" ?WlLoadInactivitySettings@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@PEAU_INACTIVITY_SETTINGS@@@Z
0x140055354: "unsigned long __cdecl ProviderChangePassword(struct CHANGE_PASSWORD_DATA * __ptr64,long * __ptr64,long * __ptr64,struct _DOMAIN_PASSWORD_INFORMATION * __ptr64)" ?ProviderChangePassword@@YAKPEAUCHANGE_PASSWORD_DATA@@PEAJ1PEAU_DOMAIN_PASSWORD_INFORMATION@@@Z
0x14009E3A8: ext-ms-win-session-winlogon-l1-1-1_NULL_THUNK_DATA_DLN
0x1400351B0: "__cdecl _imp_load_CreateEnvironmentBlock" __imp_load_CreateEnvironmentBlock
0x140084E40: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x14009FBE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x140071728: "void __cdecl ProcessWluiResponse(enum _WLUI_REQUEST_REASON,long,long,enum _WLUI_CREDPROV_RESPONSE * __ptr64)" ?ProcessWluiResponse@@YAXW4_WLUI_REQUEST_REASON@@JJPEAW4_WLUI_CREDPROV_RESPONSE@@@Z
0x1400012B0: "void __cdecl wil::details::WilApiImpl_SubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?WilApiImpl_SubscribeFeatureStateChangeNotification@details@wil@@YAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x1400A5930: "struct _StateMachineState g_xWLGeneric_PowerTransition_Logged_On_State" ?g_xWLGeneric_PowerTransition_Logged_On_State@@3U_StateMachineState@@A
0x1400854D0: "__cdecl _imp_RtlInitString" __imp_RtlInitString
0x140068BDC: "int __cdecl CanRunSetup(void)" ?CanRunSetup@@YAHXZ
0x1400357E0: IsInitiateShutdownWPresent
0x140001494: "public: void __cdecl wil::details_abi::SubscriptionList::SubscribeUnderLock(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeUnderLock@SubscriptionList@details_abi@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x140095C70: "CreateSplashWindows" ??_C@_0BE@GFKMAHAK@CreateSplashWindows?$AA@
0x14008FC58: WLDiagEvt_UserBootScenario_Start
0x14008F7FB: ?_TlgEvent@?3???$PolicyEnabled@AEAY0N@$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY0N@$$CBG@Z@4U<unnamed-type-_TlgEvent>@?3???$PolicyEnabled@AEAY0N@$$CBG@1@SAX0@Z@B
0x14008FD3C: "System" ??_C@_06JIODDOFH@System?$AA@
0x14008C238: "Authenticating" ??_C@_1BO@KDHFECMJ@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x140094270: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140036847: "__cdecl _imp_load_WTSDisconnectSession" __imp_load_WTSDisconnectSession
0x140079050: "void __cdecl NotifyCallback(void * __ptr64)" ?NotifyCallback@@YAXPEAX@Z
0x140036414: "__cdecl _tailMerge_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll" __tailMerge_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll
0x140087B48: "TrustedInstaller" ??_C@_1CC@EGMNKOEC@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAI?$AAn?$AAs?$AAt?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
0x140085008: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x14008F923: ?__hInner_Meta@?1???0StaticHandle@OOBEHealthLogging@@QEAA@XZ@4U<unnamed-type-__hInner_Meta>@?1???012@QEAA@XZ@B
0x140031E84: WlNotificationClientDestroy
0x1400B1390: "__cdecl _imp_SwitchDesktop" __imp_SwitchDesktop
0x14009F440: api-ms-win-rtcore-ntuser-private-l1-1-2_NULL_THUNK_DATA_DLB
0x1400A6A90: "struct _StateMachineTransition * g_xWLGeneric_NotifyTerminateSession_Transition" ?g_xWLGeneric_NotifyTerminateSession_Transition@@3PAU_StateMachineTransition@@A
0x14009E118: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLN
0x14004F7D8: "public: static void __cdecl wil::details::ThreadFailureCallbackHolder::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@ThreadFailureCallbackHolder@details@wil@@SAXPEAUFailureInfo@3@PEAD_K@Z
0x140034D21: "__cdecl _imp_load_LsaDeregisterLogonProcess" __imp_load_LsaDeregisterLogonProcess
0x14009E108: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x1400B11C0: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x14009F3F8: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLB
0x1400B11D0: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLA
0x14009F410: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x1400347DE: "__cdecl XcptFilter" _XcptFilter
0x140084AB8: "__cdecl _imp_RegSetKeySecurity" __imp_RegSetKeySecurity
0x1400B1538: "__cdecl _imp_WTSQueryUserToken" __imp_WTSQueryUserToken
0x1400A6400: "struct _StateMachineSignal g_xTS_SessionCreateFailed_Signal" ?g_xTS_SessionCreateFailed_Signal@@3U_StateMachineSignal@@A
0x1400A7908: "struct _StateMachineTransition * g_xWLGeneric_ReadyForSecureLua_Transition" ?g_xWLGeneric_ReadyForSecureLua_Transition@@3PAU_StateMachineTransition@@A
0x1400A9498: "unsigned long g_FadeDelay" ?g_FadeDelay@@3KA
0x14007E43C: WluiSecureDelayLocked
0x140085590: "__cdecl _xc_a" __xc_a
0x140051C84: TraceLoggingRegister
0x1400850C8: "__cdecl _imp_wcsstr" __imp_wcsstr
0x1400AA270: "void (__cdecl* __ptr64 g_wil_details_apiSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_apiSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x140036D2E: "__cdecl _imp_load_DsrIsDeviceJoined" __imp_load_DsrIsDeviceJoined
0x140085300: "__cdecl _imp_TpAllocTimer" __imp_TpAllocTimer
0x140092480: WPP_9bbab7d123823d3848f507a3e6fc9bc7_Traceguids
0x140008814: "int __cdecl wil_details_FeaturePropertyCache_ReportUsageToServiceDirect(union wil_details_FeaturePropertyCache * __ptr64,unsigned int,enum wil_details_ServiceReportingKind,unsigned int,unsigned __int64)" ?wil_details_FeaturePropertyCache_ReportUsageToServiceDirect@@YAHPEATwil_details_FeaturePropertyCache@@IW4wil_details_ServiceReportingKind@@I_K@Z
0x140060520: "void __cdecl TSJobCallback(void * __ptr64,unsigned char)" ?TSJobCallback@@YAXPEAXE@Z
0x14006CA94: "public: unsigned long __cdecl CUser::SetMprLogonScripts(unsigned short * __ptr64) __ptr64" ?SetMprLogonScripts@CUser@@QEAAKPEAG@Z
0x140084A48: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x140092400: "NeverHostedWebContent" ??_C@_0BG@EPJAIAON@NeverHostedWebContent?$AA@
0x1400902C8: "DelayLockInterval" ??_C@_1CE@HFHHBMJE@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x140091088: "Microsoft.AuditingLogIsFull" ??_C@_1DI@MEFADJKH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAA?$AAu?$AAd?$AAi?$AAt?$AAi?$AAn?$AAg?$AAL?$AAo?$AAg?$AAI?$AAs?$AAF?$AAu?$AAl?$AAl?$AA?$AA@
0x14008FC88: WLEvt_WluiServerStartupFailure
0x1400885B0: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140090218: "ScreenSaverGracePeriod" ??_C@_1CO@LAIFCLD@?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAS?$AAa?$AAv?$AAe?$AAr?$AAG?$AAr?$AAa?$AAc?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AA?$AA@
0x1400320C0: DefaultWMsgPSPHandler
0x1400AA200: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1400893E0: "ext-ms-win-ntuser-private-l1-2-0" ??_C@_1EC@PDFFKKND@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA0@
0x140087490: WLDiagEvt_LogoffAppsTerminationToSessionEnd_Start
0x140089C40: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x140033B2C: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x140090B30: "launchtm.exe" ??_C@_1BK@ILOKLIEJ@?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AAt?$AAm?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140020AA0: WluiNotifyIsReadyForDesktopSwitch
0x1400B1060: "__cdecl _imp_NaDynamicLockStart" __imp_NaDynamicLockStart
0x140037040: "public: void __cdecl wil::details::StoredCallContextInfo::ClearMessage(void) __ptr64" ?ClearMessage@StoredCallContextInfo@details@wil@@QEAAXXZ
0x140090E30: "ToolTip" ??_C@_1BA@NBNABPCD@?$AAT?$AAo?$AAo?$AAl?$AAT?$AAi?$AAp?$AA?$AA@
0x140062840: "void __cdecl WLGeneric_Logon_ReportFailedResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportFailedResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140089F60: "AuthenticateUser" ??_C@_0BB@CIAABCFJ@AuthenticateUser?$AA@
0x14008BF00: "NoRetryAllowed" ??_C@_1BO@KNABLMJB@?$AAN?$AAo?$AAR?$AAe?$AAt?$AAr?$AAy?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x140087BC8: "ServicesActive" ??_C@_1BO@JHOJBCBI@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x14005D30C: "void __cdecl _TlgWriteActivityAutoStop<140737488355328,5>(struct _TlgProvider_t const * __ptr64,struct _GUID const * __ptr64)" ??$_TlgWriteActivityAutoStop@$0IAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z
0x14003694C: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x1400A9470: "class wil::details::static_lazy<class WinlogonProvider> `protected: static class WinlogonProvider * __ptr64 __cdecl WinlogonProvider::Instance(void)'::`2'::wrapper" ?wrapper@?1??Instance@WinlogonProvider@@KAPEAV2@XZ@4V?$static_lazy@VWinlogonProvider@@@details@wil@@A
0x140056900: "void __cdecl WLGeneric_TimeoutHandler_Locked_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Locked_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008C7B8: "No_Unlock_Reconnect" ??_C@_1CI@PEFPNLON@?$AAN?$AAo?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140050930: "void __cdecl wil::details::RecordSRUMFeatureUsage(unsigned int,unsigned int,unsigned int)" ?RecordSRUMFeatureUsage@details@wil@@YAXIII@Z
0x14005D63C: "public: class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType> & __ptr64 __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>::operator=(class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType> &&) __ptr64" ??4?$ActivityData@VWinlogonProvider@@U_TlgReflectorTag_Param0IsProviderType@@@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAAAEAV012@$$QEAV012@@Z
0x1400A9350: PfnEventUnregister
0x14009FC38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x14007C254: "private: long __cdecl OutOfProcEncryptHandle::WepHostClientInitializeRPC(void) __ptr64" ?WepHostClientInitializeRPC@OutOfProcEncryptHandle@@AEAAJXZ
0x140057408: "void __cdecl WlInactivityTimeoutHandler_Locked(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?WlInactivityTimeoutHandler_Locked@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x14005A070: "void __cdecl WLGeneric_DelayLock_DisplayOffHandler_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DelayLock_DisplayOffHandler_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140084A58: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14007BCA0: "public: virtual void * __ptr64 __cdecl OutOfProcEncryptHandle::`scalar deleting destructor'(unsigned int) __ptr64" ??_GOutOfProcEncryptHandle@@UEAAPEAXI@Z
0x14009FA08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x140066A00: "int __cdecl ShowLogonUIWindowEnumWindowsCallbackProc(struct HWND__ * __ptr64,__int64)" ?ShowLogonUIWindowEnumWindowsCallbackProc@@YAHPEAUHWND__@@_J@Z
0x140085D18: WLDiagEvt_Logoff_Trigger
0x140090178: "SCRNSAVE.EXE" ??_C@_1BK@CGKOIDEB@?$AAS?$AAC?$AAR?$AAN?$AAS?$AAA?$AAV?$AAE?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x14004FE54: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x14008BB18: "Winsrv_Kill_Scrnsaver" ??_C@_1CM@KBMJGLFI@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAK?$AAi?$AAl?$AAl?$AA_?$AAS?$AAc?$AAr?$AAn?$AAs?$AAa?$AAv?$AAe?$AAr?$AA?$AA@
0x1400A5AB0: "struct _StateMachineState g_xWLGeneric_ChangeLogon_ReportResult_State" ?g_xWLGeneric_ChangeLogon_ReportResult_State@@3U_StateMachineState@@A
0x1400562A8: "public: void __cdecl CGlobalStore::SetLogoffFlags(unsigned long) __ptr64" ?SetLogoffFlags@CGlobalStore@@QEAAXK@Z
0x1400A95F8: g_pSidFontDriverHost
0x1400A8E78: "__cdecl _hmod__NaturalAuthClient_dll" __hmod__NaturalAuthClient_dll
0x1400863C8: "USERINIT" ??_C@_1BC@COHLGDFA@?$AAU?$AAS?$AAE?$AAR?$AAI?$AAN?$AAI?$AAT?$AA?$AA@
0x14006EE30: "void __cdecl WlStateMachine_Exit_SetContext(struct _StateMachineCallContext * __ptr64,void * __ptr64)" ?WlStateMachine_Exit_SetContext@@YAXPEAU_StateMachineCallContext@@PEAX@Z
0x1400633E0: "protected: virtual bool __cdecl WinlogonProvider::AuthenticateUser::WasAlreadyReportedToTelemetry(long) __ptr64" ?WasAlreadyReportedToTelemetry@AuthenticateUser@WinlogonProvider@@MEAA_NJ@Z
0x14009FB20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-job-l2-1-0
0x1400B11E0: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x1400368D4: IsWTSQueryUserTokenPresent
0x14008FB30: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x1400A54F0: "struct _StateMachineState g_xWLGeneric_AbortPendingLuaRequest_State" ?g_xWLGeneric_AbortPendingLuaRequest_State@@3U_StateMachineState@@A
0x140091EE0: "System\CurrentControlSet\Service" ??_C@_1GO@NAFMGOCB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140033394: "unsigned long __cdecl WlRemindersiDisplayNow(struct SHELLREMINDER_PRIV * __ptr64,enum WlReminderType,void * __ptr64 * __ptr64)" ?WlRemindersiDisplayNow@@YAKPEAUSHELLREMINDER_PRIV@@W4WlReminderType@@PEAPEAX@Z
0x1400791C8: LaunchUmfdHostWithCurrentToken
0x140089B40: "__cdecl _sz_ext_ms_win_winlogon_mincreds_l1_1_0_dll" __sz_ext_ms_win_winlogon_mincreds_l1_1_0_dll
0x1400A9344: McGenPreVista
0x140086168: "AllowBlockingAppsAtShutdown" ??_C@_1DI@MKJJPFFA@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAB?$AAl?$AAo?$AAc?$AAk?$AAi?$AAn?$AAg?$AAA?$AAp?$AAp?$AAs?$AAA?$AAt?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?$AA@
0x140020244: StopWMsgServer
0x14005D430: "public: __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>(class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType> &&) __ptr64" ??0?$ActivityData@VWinlogonProvider@@U_TlgReflectorTag_Param0IsProviderType@@@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAA@$$QEAV012@@Z
0x140075C00: StringCchCopyW
0x140091D48: "DisableTaskMgr" ??_C@_1BO@IJPCJAPP@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAT?$AAa?$AAs?$AAk?$AAM?$AAg?$AAr?$AA?$AA@
0x14007C1A0: "public: virtual long __cdecl InProcEncryptHandle::EasValidateDeviceLockoutState(void * __ptr64) __ptr64" ?EasValidateDeviceLockoutState@InProcEncryptHandle@@UEAAJPEAX@Z
0x14004EE00: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x1400874A0: "AnimationAfterUserOOBE" ??_C@_1CO@EABILEGJ@?$AAA?$AAn?$AAi?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AAA?$AAf?$AAt?$AAe?$AAr?$AAU?$AAs?$AAe?$AAr?$AAO?$AAO?$AAB?$AAE?$AA?$AA@
0x140085468: "__cdecl _imp_NtAllocateLocallyUniqueId" __imp_NtAllocateLocallyUniqueId
0x1400A9BF8: g_ProviderRegistrationMicrosoft_Windows_Deplorch
0x140084DE8: "__cdecl _imp_WindowsCreateStringReference" __imp_WindowsCreateStringReference
0x1400880F8: "TMP" ??_C@_17DDHKMLLK@?$AAT?$AAM?$AAP?$AA?$AA@
0x140091840: WPP_32aee54e82d8337287a49ed63ff6e771_Traceguids
0x1400B1378: "__cdecl _imp_CreateDesktopW" __imp_CreateDesktopW
0x140084FB8: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA
0x140094BC0: "onecore\ds\security\eas\policyen" ??_C@_1GI@HJACODMP@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x1400877F0: "VerboseStatus" ??_C@_1BM@ODFPJGAE@?$AAV?$AAe?$AAr?$AAb?$AAo?$AAs?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140084EB0: api-ms-win-power-setting-l1-1-0_NULL_THUNK_DATA
0x14000BDC4: "public: static int __cdecl CandidateAccountManagerPolicy::IsWebDialogAllowed(void)" ?IsWebDialogAllowed@CandidateAccountManagerPolicy@@SAHXZ
0x14008EE30: ?_TlgEvent@?BO@??StopActivity@AuthenticateUser@WinlogonProvider@@MEAAXXZ@4U<unnamed-type-_TlgEvent>@?BO@??123@MEAAXXZ@B
0x140035BE9: "__cdecl _tailMerge_ext_ms_win_ntuser_private_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_private_l1_1_0_dll
0x140072DBC: RegValChoice_GetAndCompareRegValues
0x140031F90: "void __cdecl WLGeneric_ShellStartup_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ShellStartup_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14002D500: "unsigned long __cdecl WLGeneric_FindDestinationSession_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_FindDestinationSession_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14007F400: PfRpcSyncPrefetchforBoot
0x140084860: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140055EF8: "public: unsigned long __cdecl CGlobalStore::GetKerberosPackage(unsigned long * __ptr64) __ptr64" ?GetKerberosPackage@CGlobalStore@@QEAAKPEAK@Z
0x14000C040: "public: virtual void * __ptr64 __cdecl CUser::`vector deleting destructor'(unsigned int) __ptr64" ??_ECUser@@UEAAPEAXI@Z
0x1400B11F0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x1400A8FA0: "__cdecl _hmod__ext_ms_win_ntuser_windowstation_l1_1_1_dll" __hmod__ext_ms_win_ntuser_windowstation_l1_1_1_dll
0x140034A6B: "__cdecl lock" _lock
0x14008C5E0: "DifferentCredsAreRequiredReminde" ??_C@_1EE@NJEFFODI@?$AAD?$AAi?$AAf?$AAf?$AAe?$AAr?$AAe?$AAn?$AAt?$AAC?$AAr?$AAe?$AAd?$AAs?$AAA?$AAr?$AAe?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe@
0x1400B1580: "__cdecl _imp_NetLocalGroupAddMembers" __imp_NetLocalGroupAddMembers
0x1400209FC: WluiFinishOperation
0x1400AA1D8: g_pfnResultLoggingCallback
0x1400093F0: "public: int __cdecl wil::details_abi::UsageIndexProperty::Compare(void * __ptr64,unsigned __int64)const __ptr64" ?Compare@UsageIndexProperty@details_abi@wil@@QEBAHPEAX_K@Z
0x140090EF0: "Microsoft.PasswordExpiryWarning" ??_C@_1EA@CEKCNKDO@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAE?$AAx?$AAp?$AAi?$AAr?$AAy?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x1400A6904: "unsigned char g_fLockConsoleOnWake" ?g_fLockConsoleOnWake@@3EA
0x1400A4B70: "struct _StateMachineState g_xWLGeneric_Locked_Disconnected_State" ?g_xWLGeneric_Locked_Disconnected_State@@3U_StateMachineState@@A
0x14005CA90: "void __cdecl WLGeneric_InitiateForceLogoff_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_InitiateForceLogoff_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14000137C: "public: void __cdecl wil::details::FeatureStateManager::SubscribeToEnabledStateChanges(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64) __ptr64" ?SubscribeToEnabledStateChanges@FeatureStateManager@details@wil@@QEAAXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@Z
0x140089C58: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x1400A9508: "void * __ptr64 __ptr64 g_hPowerNotification" ?g_hPowerNotification@@3PEAXEA
0x14008A388: WPP_acf3d487851d35e64a3099cd5564aee8_Traceguids
0x140032040: "void __cdecl ReportBootGoodThread(void * __ptr64)" ?ReportBootGoodThread@@YAXPEAX@Z
0x14006C27C: "private: unsigned long __cdecl CUser::LogonHoursTakeAction(void) __ptr64" ?LogonHoursTakeAction@CUser@@AEAAKXZ
0x140088B78: "Microsoft.LogoffWarning" ??_C@_1DA@JBFNEEMN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x14003732C: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Reset(void) __ptr64" ?Reset@?$SP@KV?$SP_MEM@K@@@@QEAAXXZ
0x140085430: "__cdecl _imp_NtInitiatePowerAction" __imp_NtInitiatePowerAction
0x1400A6320: "struct _StateMachineSignal g_xWLGeneric_LogonUI_WebUnlock_Signal" ?g_xWLGeneric_LogonUI_WebUnlock_Signal@@3U_StateMachineSignal@@A
0x1400869E0: "UMFD-%d" ??_C@_1BA@JOFOBAOO@?$AAU?$AAM?$AAF?$AAD?$AA?9?$AA?$CF?$AAd?$AA?$AA@
0x140088660: "TracingControlLevel" ??_C@_1CI@PFIOIPBC@?$AAT?$AAr?$AAa?$AAc?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1400B1320: "__cdecl _imp_EnumWindows" __imp_EnumWindows
0x140035E81: "__cdecl _imp_load_GetWindowLongW" __imp_load_GetWindowLongW
0x140085378: "__cdecl _imp_RtlNtStatusToDosErrorNoTeb" __imp_RtlNtStatusToDosErrorNoTeb
0x14008BD98: "Wl_ShellReadyOrTimedOut" ??_C@_1DA@ICKPGGCI@?$AAW?$AAl?$AA_?$AAS?$AAh?$AAe?$AAl?$AAl?$AAR?$AAe?$AAa?$AAd?$AAy?$AAO?$AAr?$AAT?$AAi?$AAm?$AAe?$AAd?$AAO?$AAu?$AAt?$AA?$AA@
0x1400891E8: "ext-ms-win-ntuser-misc-l1-2-0" ??_C@_1DM@BDNJLNEB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9?$AA0?$AA?$AA@
0x14008C278: "Logon_ReportSuccessResult" ??_C@_1DE@IFGNKKHB@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x14000FA70: ?StartGlobalTraceLoggingActivity@CGlobalStore@@QEAAPEAV?$TraceLoggingActivity@$1?g_WinlogonProvider@@3QEBU_TlgProvider_t@@EB$0EAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsHProvider@@@@W4WinLogonActivityType@@@Z
0x1400900F8: "Control Panel\Desktop" ??_C@_1CM@FDDKAFMM@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x1400912F0: "%s %c "%s" /proceid=%u /usertoke" ??_C@_1HC@BOPNBOGA@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAc?$AA?5?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?1?$AAp?$AAr?$AAo?$AAc?$AAe?$AAi?$AAd?$AA?$DN?$AA?$CF?$AAu?$AA?5?$AA?1?$AAu?$AAs?$AAe?$AAr?$AAt?$AAo?$AAk?$AAe@
0x14007DE04: WluiDisplayMessage
0x140092018: "NumberOfInitialSessions" ??_C@_1DA@LMDDKGAG@?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AAO?$AAf?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14006CCE8: "private: long __cdecl CUser::SubscribeForDisplayRequestActivity(void) __ptr64" ?SubscribeForDisplayRequestActivity@CUser@@AEAAJXZ
0x140034768: "__cdecl callnewh" _callnewh
0x1400A5DF0: "struct _StateMachineState g_xWLGeneric_Logon_ReportSuccessResult_State" ?g_xWLGeneric_Logon_ReportSuccessResult_State@@3U_StateMachineState@@A
0x1400915A8: "fveapi.dll" ??_C@_1BG@OMGICJLD@?$AAf?$AAv?$AAe?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140089800: "ext-ms-win-session-candidateacco" ??_C@_1FM@CLBLGO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAc?$AAa?$AAn?$AAd?$AAi?$AAd?$AAa?$AAt?$AAe?$AAa?$AAc?$AAc?$AAo@
0x14007F15C: PfRpcServiceQueryConfigStatus
0x1400A7460: "struct _StateMachineTransition * g_xWLGeneric_Request_Unlock_Credz_Transition" ?g_xWLGeneric_Request_Unlock_Credz_Transition@@3PAU_StateMachineTransition@@A
0x14003064C: WluiGetLockScreenIdleTimeout
0x14008F7FB: ?_TlgEvent@?3???$PolicyEnabled@AEAY09$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY09$$CBG@Z@4U<unnamed-type-_TlgEvent>@?3???$PolicyEnabled@AEAY09$$CBG@1@SAX0@Z@B
0x140035B40: "__cdecl _imp_load_ExitWindowsEx" __imp_load_ExitWindowsEx
0x140084FE8: "__cdecl _imp_NotifyServiceStatusChangeW" __imp_NotifyServiceStatusChangeW
0x140094AF0: "onecore\base\ntsetup\lib\unatten" ??_C@_1HC@PLEDFMHN@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAb?$AAa?$AAs?$AAe?$AA?2?$AAn?$AAt?$AAs?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAl?$AAi?$AAb?$AA?2?$AAu?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn@
0x140017DE0: "int __cdecl AreVisibleLogoffScriptsSet(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?AreVisibleLogoffScriptsSet@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140089AF0: "ext-ms-win-winlogon-mincreds-l1-" ??_C@_1EI@LJIPHLJD@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?9?$AAm?$AAi?$AAn?$AAc?$AAr?$AAe?$AAd?$AAs?$AA?9?$AAl?$AA1?$AA?9@
0x1400848C8: "__cdecl _imp_UnregisterWait" __imp_UnregisterWait
0x140091E60: "Enabled" ??_C@_07DOAOMMKG@Enabled?$AA@
0x140085C2C: "__cdecl _guard_iat_table" __guard_iat_table
0x1400849C0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140036835: "__cdecl _imp_load_WinStationGetRestrictedLogonInfo" __imp_load_WinStationGetRestrictedLogonInfo
0x14008BF20: "NoRetryAndDisconnect" ??_C@_1CK@JFALOOKA@?$AAN?$AAo?$AAR?$AAe?$AAt?$AAr?$AAy?$AAA?$AAn?$AAd?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x14009031C: "same" ??_C@_04FMLAMFAK@same?$AA@
0x1400A6D60: "struct _StateMachineTransition * g_xWLGeneric_Killing_Scrnsaver_Locked_Transition" ?g_xWLGeneric_Killing_Scrnsaver_Locked_Transition@@3PAU_StateMachineTransition@@A
0x140020CA8: AddUserToWinsta
0x1400AA1E1: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x140037512: memcpy
0x1400A5AF0: "struct _StateMachineState g_xWLGeneric_MPRChangeLogonNotify_State" ?g_xWLGeneric_MPRChangeLogonNotify_State@@3U_StateMachineState@@A
0x14006C86C: "public: unsigned long __cdecl CUser::RetrieveLastLogonInfo(void) __ptr64" ?RetrieveLastLogonInfo@CUser@@QEAAKXZ
0x140052604: "int __cdecl WlAccessibilityOnWin32KMessage(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?WlAccessibilityOnWin32KMessage@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x1400A7C18: "struct _StateMachineTransition * g_xWLGeneric_No_Unlock_Disconnected_Transition" ?g_xWLGeneric_No_Unlock_Disconnected_Transition@@3PAU_StateMachineTransition@@A
0x1400B1288: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x140084900: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1400A7C98: "struct _StateMachineTransition * g_xWLGeneric_Locked_Resume_Transition" ?g_xWLGeneric_Locked_Resume_Transition@@3PAU_StateMachineTransition@@A
0x14005CE8C: "public: static void __cdecl OOBEHealthTelemetry::OOBEHealthNonCriticalMetric<unsigned char const & __ptr64,unsigned __int64,unsigned __int64,unsigned __int64 & __ptr64,unsigned short * __ptr64,unsigned short * __ptr64>(unsigned char const & __ptr64,unsigned __int64 &&,unsigned __int64,unsigned __int64 & __ptr64,unsigned short * __ptr64 &&,unsigned __int64 & __ptr64)" ??$OOBEHealthNonCriticalMetric@AEBE_K_KAEA_KPEAGPEAG@OOBEHealthTelemetry@@SAXAEBE$$QEA_K1AEA_K$$QEAPEAG3@Z
0x1400A99B0: "struct _RTL_CRITICAL_SECTION g_HungNotificationListLock" ?g_HungNotificationListLock@@3U_RTL_CRITICAL_SECTION@@A
0x1400306D8: "void __cdecl JobManagerUninitialize(void)" ?JobManagerUninitialize@@YAXXZ
0x14009DBE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_eventlog_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_eventlog_l1_1_0_dll
0x1400A7190: "struct _StateMachineTransition * g_xWLGeneric_SequentialUnlockPrompt_Transition" ?g_xWLGeneric_SequentialUnlockPrompt_Transition@@3PAU_StateMachineTransition@@A
0x14008F6B9: ?_TlgEvent@?BO@??StopActivity@ShouldLogoffOtherUsers@WinlogonProvider@@MEAAXXZ@4U<unnamed-type-_TlgEvent>@?BO@??123@MEAAXXZ@B
0x140004DC8: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Attach(unsigned char * __ptr64) __ptr64" ?Attach@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXPEAE@Z
0x1400851A0: "__cdecl _imp__acmdln" __imp__acmdln
0x140095AC0: "RegGetValueW(SYSTEM\CurrentContr" ??_C@_1GG@NECKCOGC@?$AAR?$AAe?$AAg?$AAG?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?$CI?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr@
0x1400373E8: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x1400511F8: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x1400A6D38: "struct _StateMachineTransition * g_xWLGeneric_PostUnlockActions_Transition" ?g_xWLGeneric_PostUnlockActions_Transition@@3PAU_StateMachineTransition@@A
0x140086D50: WLEvt_AuthenticateUser_Stop
0x140087BB0: "System-LSM" ??_C@_1BG@ILKGKDHI@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?9?$AAL?$AAS?$AAM?$AA?$AA@
0x14006342C: "void __cdecl wil::details::in1diag3::_Log_Win32(void * __ptr64,unsigned int,char const * __ptr64,unsigned long)" ?_Log_Win32@in1diag3@details@wil@@YAXPEAXIPEBDK@Z
0x14008FB10: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400B13E8: ext-ms-win-session-candidateaccountmgr-l1-1-0_NULL_THUNK_DATA_DLA
0x14002AEA0: "unsigned long __cdecl NotifySetEnvironmentVariableUnicode(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?NotifySetEnvironmentVariableUnicode@@YAKPEAPEAGPEBGPEAU_UNICODE_STRING@@@Z
0x1400776D0: WlSecureDesktoppValidateGenericRequest
0x140005120: "unsigned long __cdecl WLGeneric_Locked_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A6E60: "struct _StateMachineTransition * g_xWLGeneric_ChangingUnlockPassword_Transition" ?g_xWLGeneric_ChangingUnlockPassword_Transition@@3PAU_StateMachineTransition@@A
0x1400A6DE0: "struct _StateMachineTransition * g_xWLGeneric_ChangeUnlock_ReportResult_Transition" ?g_xWLGeneric_ChangeUnlock_ReportResult_Transition@@3PAU_StateMachineTransition@@A
0x1400A87B0: "unsigned short * g_wszDefaultShellCommand" ?g_wszDefaultShellCommand@@3PAGA
0x14008BB48: "Secure_Request" ??_C@_1BO@MDIOIKNI@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA_?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x140013068: "bool __cdecl OneTimeInitialize(void)" ?OneTimeInitialize@@YA_NXZ
0x140085040: "__cdecl _imp_memset" __imp_memset
0x14009DD88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x14000D190: "public: virtual void * __ptr64 __cdecl CSession::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSession@@UEAAPEAXI@Z
0x140084C00: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x140094DB0: "onecore\ds\security\eas\policyen" ??_C@_1HK@KEPKPNAP@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x140077220: WlSecureDesktoppTimeoutTimerCallback
0x1400862D8: "ShellDesktopSwitchEvent" ??_C@_1DA@JNJPEACF@?$AAS?$AAh?$AAe?$AAl?$AAl?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x1400942B0: "\StringFileInfo\%04x%04x\Company" ??_C@_1EK@ECOKLNNL@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy@
0x14002BD40: "int __cdecl WMsgKMessageHandler(unsigned long,unsigned long,struct _RPC_ASYNC_STATE * __ptr64,long * __ptr64)" ?WMsgKMessageHandler@@YAHKKPEAU_RPC_ASYNC_STATE@@PEAJ@Z
0x14005D7E8: "public: class wil::details::StoredCallContextInfo & __ptr64 __cdecl wil::details::StoredCallContextInfo::operator=(class wil::details::StoredCallContextInfo &&) __ptr64" ??4StoredCallContextInfo@details@wil@@QEAAAEAV012@$$QEAV012@@Z
0x1400352EF: "__cdecl _imp_load_AuthziSourceAudit" __imp_load_AuthziSourceAudit
0x140084D48: "__cdecl _imp_CloseThreadpoolCleanupGroup" __imp_CloseThreadpoolCleanupGroup
0x140073090: "void __cdecl FreeHeap<struct _KERB_S4U_LOGON * __ptr64>(struct _KERB_S4U_LOGON * __ptr64)" ??$FreeHeap@PEAU_KERB_S4U_LOGON@@@@YAXPEAU_KERB_S4U_LOGON@@@Z
0x1400A8F30: "__cdecl _hmod__ext_ms_win_ntuser_dialogbox_l1_1_0_dll" __hmod__ext_ms_win_ntuser_dialogbox_l1_1_0_dll
0x140084C28: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x140084818: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x140087340: "LegalNoticeCaption" ??_C@_1CG@DJNKNOJO@?$AAL?$AAe?$AAg?$AAa?$AAl?$AAN?$AAo?$AAt?$AAi?$AAc?$AAe?$AAC?$AAa?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140034A5F: "__cdecl initterm" _initterm
0x14003635A: "__cdecl _imp_load_UMgrInformUserLogon" __imp_load_UMgrInformUserLogon
0x1400900D0: WPP_3696218de9913e968a865765a015ef08_Traceguids
0x1400A6929: g_header_init_InitializeResultExceptions
0x14002BEA0: "int __cdecl WMsgMessageHandler(unsigned long,unsigned long,struct _RPC_ASYNC_STATE * __ptr64,long * __ptr64)" ?WMsgMessageHandler@@YAHKKPEAU_RPC_ASYNC_STATE@@PEAJ@Z
0x140088CC0: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x1400A95A0: g_pSidAdmin
0x14008D7B0: Microsoft_Windows_DeplorchKeywords
0x14005A9C0: "void __cdecl WLGeneric_DelayLock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DelayLock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140095410: "DeleteLockoutCounters" ??_C@_1CM@OINPJBIL@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1400A6B50: "unsigned long * g_xWLGeneric_DelayLock_ResetSignals" ?g_xWLGeneric_DelayLock_ResetSignals@@3PAKA
0x14002A374: StateMachineThreadContext_InitializeContextPool
0x14009F954: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1400A9068: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140053D20: "unsigned long __cdecl WlAccessibilitypCopyRegTreeWithoutACLs(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,bool)" ?WlAccessibilitypCopyRegTreeWithoutACLs@@YAKPEAUHKEY__@@0_N@Z
0x140035D48: IsLockWindowStationPresent
0x14008D498: "CommonProgramFiles" ??_C@_1CG@HMNDLOFD@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x14008C8D0: "AbortPendingLuaRequest" ??_C@_1CO@FANGGCNI@?$AAA?$AAb?$AAo?$AAr?$AAt?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAL?$AAu?$AAa?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x140085DB8: "Global\FirstWinlogonCheck" ??_C@_1DE@IFFKOIJA@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAF?$AAi?$AAr?$AAs?$AAt?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AAC?$AAh?$AAe?$AAc?$AAk?$AA?$AA@
0x1400648B0: "unsigned long __cdecl WLGeneric_PowerTransition_Logged_On_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PowerTransition_Logged_On_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140085F40: "-SpecialSession" ??_C@_1CA@MCNDDDKM@?$AA?9?$AAS?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140036574: "__cdecl _imp_load_WinStationIsSessionRemoteable" __imp_load_WinStationIsSessionRemoteable
0x1400A6130: "struct _StateMachineState g_xWLGeneric_Killing_Scrnsaver_Welcome_State" ?g_xWLGeneric_Killing_Scrnsaver_Welcome_State@@3U_StateMachineState@@A
0x140084C78: "__cdecl _imp_Sleep" __imp_Sleep
0x1400B13B0: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x1400594DC: "public: static void __cdecl WinlogonProvider::ConnectCandidateUser<bool & __ptr64,bool & __ptr64,bool,bool & __ptr64,unsigned long & __ptr64>(bool & __ptr64,bool & __ptr64,bool &&,bool & __ptr64,unsigned long & __ptr64)" ??$ConnectCandidateUser@AEA_NAEA_N_NAEA_NAEAK@WinlogonProvider@@SAXAEA_N0$$QEA_N0AEAK@Z
0x140034C3C: "__cdecl _imp_load_NaDynamicLockStart" __imp_load_NaDynamicLockStart
0x1400B1488: "__cdecl _imp_WinStationDisconnect" __imp_WinStationDisconnect
0x140085650: "__cdecl _xi_z" __xi_z
0x1400354C8: IsThemesOnLogonPresent
0x1400A9110: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x140084CC0: "__cdecl _imp_GetSystemTime" __imp_GetSystemTime
0x14003538C: "__cdecl _imp_load_GetBasicProfileFolderPath" __imp_load_GetBasicProfileFolderPath
0x14008C420: "NotifyStartShell" ??_C@_1CC@NADAHOJG@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x14006A5E0: "void __cdecl AlternateCredentialsRequiredEventCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?AlternateCredentialsRequiredEventCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x14007ED6C: PfRpcClientBind
0x14000542C: "unsigned long __cdecl ReportAuditingLog(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?ReportAuditingLog@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x140084DE0: "__cdecl _imp_WindowsDeleteString" __imp_WindowsDeleteString
0x140052268: "unsigned long __cdecl WlAccessibilityOnSlideToShutDown(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnSlideToShutDown@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x14007592C: MprGetNotifyApp
0x140086580: WLEvt_AuthenticateUser_Start
0x1400847B8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14006E214: "public: static void __cdecl WinlogonProvider::UserSwitchRecievedLsmEvent(void)" ?UserSwitchRecievedLsmEvent@WinlogonProvider@@SAXXZ
0x1400AA1F8: g_pfnThrowPlatformException
0x14007C1C0: "public: virtual long __cdecl OutOfProcEncryptHandle::EasValidateDeviceLockoutState(void * __ptr64) __ptr64" ?EasValidateDeviceLockoutState@OutOfProcEncryptHandle@@UEAAJPEAX@Z
0x1400854F0: "__cdecl _imp_NtOpenProcessToken" __imp_NtOpenProcessToken
0x14005C0B0: "void __cdecl WLGeneric_Unlock_ReportFailedResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportFailedResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140090128: "ScreenSaverIsSecure" ??_C@_1CI@DFOPIPHP@?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAS?$AAa?$AAv?$AAe?$AAr?$AAI?$AAs?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x140094460: "Software\Microsoft\Windows NT\Cu" ??_C@_1GK@FDCHPAFD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400772F0: WlSecureDesktoppUnsubscribeEvents
0x140085380: "__cdecl _imp_RtlSetEnvironmentVariable" __imp_RtlSetEnvironmentVariable
0x1400A6230: "struct _StateMachineState g_xWLGeneric_NotifyCreateSession_State" ?g_xWLGeneric_NotifyCreateSession_State@@3U_StateMachineState@@A
0x1400510B8: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x140061DF0: "void __cdecl WLGeneric_FindDestinationSession_Unlock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_FindDestinationSession_Unlock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400851A8: "__cdecl _imp_wcscmp" __imp_wcscmp
0x1400849B0: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x1400A942C: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x14009434C: "Yes" ??_C@_03CCLAEDDF@Yes?$AA@
0x1400205F0: WlSecureDesktoppRpcServerInit
0x1400A85C8: "struct _StateMachineTransition * g_xWLGeneric_Welcome_Return_Transition" ?g_xWLGeneric_Welcome_Return_Transition@@3PAU_StateMachineTransition@@A
0x14008B990: "Winsrv_Sas" ??_C@_1BG@GHKEHAJD@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAS?$AAa?$AAs?$AA?$AA@
0x140084F90: "__cdecl _imp_LsaStorePrivateData" __imp_LsaStorePrivateData
0x14005C810: "int __cdecl LockoutHandleFailedLogon(union _LARGE_INTEGER * __ptr64,int,int)" ?LockoutHandleFailedLogon@@YAHPEAT_LARGE_INTEGER@@HH@Z
0x140003C74: "unsigned long __cdecl WlDisplayStatusByResourceId(unsigned int,enum _WLUI_STATE,unsigned long,class CUser * __ptr64)" ?WlDisplayStatusByResourceId@@YAKIW4_WLUI_STATE@@KPEAVCUser@@@Z
0x1400852B8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x14003472C: "__cdecl _C_specific_handler" __C_specific_handler
0x140084BA0: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x140032060: "void __cdecl ServiceNotifyCallback(void * __ptr64)" ?ServiceNotifyCallback@@YAXPEAX@Z
0x1400369C0: "__cdecl _tailMerge_ext_ms_win_winlogon_mincreds_l1_1_0_dll" __tailMerge_ext_ms_win_winlogon_mincreds_l1_1_0_dll
0x1400AA2A0: "unsigned long s_WppManualOverride" ?s_WppManualOverride@@3KA
0x1400A6580: "struct _StateMachineSignal g_xAction_Succeeded_Signal" ?g_xAction_Succeeded_Signal@@3U_StateMachineSignal@@A
0x140086A00: "SYSTEM\CurrentControlSet\Control" ??_C@_1HA@JIJGOABD@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140037300: MIDL_user_free
0x140084C20: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x14006099C: "public: long __cdecl OOBE::Health::details::HealthTrackingInfo::ToString(unsigned short * __ptr64 * __ptr64) __ptr64" ?ToString@HealthTrackingInfo@details@Health@OOBE@@QEAAJPEAPEAG@Z
0x140081040: "const CUser::`vftable'" ??_7CUser@@6B@
0x1400B1308: "__cdecl _imp_LockWindowStation" __imp_LockWindowStation
0x14000E160: NoNeedToNotify
0x140084698: "__cdecl _imp_RpcBindingUnbind" __imp_RpcBindingUnbind
0x1400872E0: "ForceApplicationDesktopSwitch" ??_C@_1DM@MLIKD@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAA?$AAp?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?$AA@
0x1400543F4: "unsigned long __cdecl WlAccessibilitypStartProcessInAtJob(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned short const * __ptr64,unsigned long,int,void * __ptr64 * __ptr64)" ?WlAccessibilitypStartProcessInAtJob@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEBGKHPEAPEAX@Z
0x140089D78: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140084500: "const Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV0::`vftable'" ??_7AssignedAccessConfigStoreV0@AssignedAccess@Internal@Windows@@6B@
0x140090B70: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HO@FDJNOKKC@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400AA328: "unsigned long NumSysProcs" ?NumSysProcs@@3KA
0x140084C10: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x140035252: "__cdecl _imp_load_AuthziFreeAuditEventType" __imp_load_AuthziFreeAuditEventType
0x14009FB84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0
0x1400A7930: "struct _StateMachineTransition * g_xWLGeneric_StartSecureLua_Transition" ?g_xWLGeneric_StartSecureLua_Transition@@3PAU_StateMachineTransition@@A
0x1400AA1D0: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x14008FD98: "osk.exe -s" ??_C@_1BG@KCGPGFPH@?$AAo?$AAs?$AAk?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?9?$AAs?$AA?$AA@
0x1400A7D68: "struct _StateMachineTransition * g_xWLGeneric_CredsAreStaleReminder_Transition" ?g_xWLGeneric_CredsAreStaleReminder_Transition@@3PAU_StateMachineTransition@@A
0x140050908: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x140037300: "void __cdecl wil::details::FreeProcessHeap(void * __ptr64)" ?FreeProcessHeap@details@wil@@YAXPEAX@Z
0x140084AA0: api-ms-win-core-psapi-l1-1-0_NULL_THUNK_DATA
0x140086308: "TransitionCflScenario" ??_C@_1CM@CDEFFIAC@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AAC?$AAf?$AAl?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AA?$AA@
0x140034E3C: "__cdecl _imp_load_NetUserGetInfo" __imp_load_NetUserGetInfo
0x1400B1140: "__cdecl _imp_ThemesOnLogon" __imp_ThemesOnLogon
0x1400320A0: "public: virtual long __cdecl OutOfProcEncryptHandle::EasCloseVolume(void * __ptr64) __ptr64" ?EasCloseVolume@OutOfProcEncryptHandle@@UEAAJPEAX@Z
0x1400B1568: netutils_NULL_THUNK_DATA_DLA
0x14009F330: netutils_NULL_THUNK_DATA_DLB
0x140085038: "__cdecl _imp__onexit" __imp__onexit
0x14009E4B0: netutils_NULL_THUNK_DATA_DLN
0x1400313A0: "unsigned long __cdecl PowerSettingLockConsoleOnWakeCallback(void * __ptr64,unsigned long,void * __ptr64)" ?PowerSettingLockConsoleOnWakeCallback@@YAKPEAXK0@Z
0x1400B1010: "__cdecl _imp_AuthziInitializeAuditEvent" __imp_AuthziInitializeAuditEvent
0x140086C34: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1400A8EB0: "__cdecl _hmod__AUTHZ_dll" __hmod__AUTHZ_dll
0x14007947C: "public: static void __cdecl CandidateAccountManagerPolicyTraceProvider::PolicyEnabled<unsigned short const (& __ptr64)[10]>(unsigned short const (& __ptr64)[10])" ??$PolicyEnabled@AEAY09$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY09$$CBG@Z
0x14003751E: memmove
0x1400A6C00: "unsigned long * g_xWLGeneric_ReconnectionUpdate_ResetSignals" ?g_xWLGeneric_ReconnectionUpdate_ResetSignals@@3PAKA
0x140010F80: "unsigned long __cdecl WlAccessibilityOnDesktopSwitch(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnDesktopSwitch@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x1400848B8: "__cdecl _imp_TerminateJobObject" __imp_TerminateJobObject
0x14008C6C0: "Logged_On_Resume" ??_C@_1CC@MMLEJMO@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA_?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AA?$AA@
0x140088DA0: "ext-ms-win-gui-uxinit-l1-1-0" ??_C@_1DK@EHEJLGNJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAg?$AAu?$AAi?$AA?9?$AAu?$AAx?$AAi?$AAn?$AAi?$AAt?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x14007283C: WPP_SF_lDS
0x140084840: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14008D2C0: Microsoft_Windows_Shell_CoreLevels
0x1400844E8: "const Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV1::`vftable'" ??_7AssignedAccessConfigStoreV1@AssignedAccess@Internal@Windows@@6B@
0x1400892B0: "__cdecl _sz_ext_ms_win_ntuser_misc_l1_1_0_dll" __sz_ext_ms_win_ntuser_misc_l1_1_0_dll
0x140085CC8: "FadePeriodConfiguration" ??_C@_1DA@JGDIDIMC@?$AAF?$AAa?$AAd?$AAe?$AAP?$AAe?$AAr?$AAi?$AAo?$AAd?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140072CA0: WPP_SF_llS
0x1400766B0: WPP_SF_Sll
0x140086828: "Usermode Font Driver Host" ??_C@_1DE@DCHLONFI@?$AAU?$AAs?$AAe?$AAr?$AAm?$AAo?$AAd?$AAe?$AA?5?$AAF?$AAo?$AAn?$AAt?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x140091030: "::{20D04FE0-3AEA-1069-A2D8-08002" ??_C@_1FC@DEGAEOOF@?$AA?3?$AA?3?$AA?$HL?$AA2?$AA0?$AAD?$AA0?$AA4?$AAF?$AAE?$AA0?$AA?9?$AA3?$AAA?$AAE?$AAA?$AA?9?$AA1?$AA0?$AA6?$AA9?$AA?9?$AAA?$AA2?$AAD?$AA8?$AA?9?$AA0?$AA8?$AA0?$AA0?$AA2@
0x1400A9538: WPP_REGISTRATION_GUIDS
0x140035C74: "__cdecl _tailMerge_ext_ms_win_ntuser_private_l1_1_1_dll" __tailMerge_ext_ms_win_ntuser_private_l1_1_1_dll
0x14008CBB8: "Unlock_ReportSuccessResult" ??_C@_1DG@CHFLIM@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x1400768A8: WPP_SF_lSs
0x140076534: WPP_SF_SSl
0x140086C80: "TermSrv" ??_C@_1BA@DICNOGAJ@?$AAT?$AAe?$AAr?$AAm?$AAS?$AAr?$AAv?$AA?$AA@
0x140087CA0: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x140091A28: "DisableSwitchUserOption" ??_C@_1DA@HIIDFHLF@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAU?$AAs?$AAe?$AAr?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14009DA08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_UXINIT_dll" __DELAY_IMPORT_DESCRIPTOR_UXINIT_dll
0x1400B1300: "__cdecl _imp_CancelShutdown" __imp_CancelShutdown
0x1400A8F98: "__cdecl _hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll" __hmod__ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x14003518C: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1400362D0: IsUMgrGetCachedCredentialsPresent
0x14008A048: "unsigned char const * const `unsigned long __cdecl EnableManifestedProviderForMicrosoftTelemetry(unsigned __int64)'::`2'::Traits" ?Traits@?1??EnableManifestedProviderForMicrosoftTelemetry@@YAK_K@Z@4QBEB
0x140089C20: "__cdecl _sz_dsreg_dll" __sz_dsreg_dll
0x1400A51B0: "struct _StateMachineState g_xWLGeneric_LockScreen_State" ?g_xWLGeneric_LockScreen_State@@3U_StateMachineState@@A
0x1400364B7: "__cdecl _imp_load_CamIsCandidateUser" __imp_load_CamIsCandidateUser
0x140063390: "void __cdecl WLGeneric_WaitForDisconnectAfterFailedAuth_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_WaitForDisconnectAfterFailedAuth_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400B11F8: "__cdecl _imp_CredUIParseUserNameW" __imp_CredUIParseUserNameW
0x14004F48C: "private: long __cdecl wil::details_abi::SemaphoreValue::CreateFromValueInternal(unsigned short const * __ptr64,bool,unsigned __int64) __ptr64" ?CreateFromValueInternal@SemaphoreValue@details_abi@wil@@AEAAJPEBG_N_K@Z
0x140086500: WLEvt_DwmpTerminateSessionProcess_Stop
0x140032524: "public: void __cdecl CUser::NotifyPasswordExpirationIfNecessary(void) __ptr64" ?NotifyPasswordExpirationIfNecessary@CUser@@QEAAXXZ
0x140095C18: "RespecializeFailures" ??_C@_1CK@LDDBLPCN@?$AAR?$AAe?$AAs?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x1400791F0: I_WMsgSendPSPMessage
0x1400763DC: "unsigned long __cdecl WaitForServiceToStart(struct _NOTIFICATION_CLIENT_DEF * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64,unsigned long)" ?WaitForServiceToStart@@YAKPEAU_NOTIFICATION_CLIENT_DEF@@PEAU_NOTIFICATION_COMPONENT@@K@Z
0x1400853C0: "__cdecl _imp_NtCreateToken" __imp_NtCreateToken
0x1400A6340: "struct _StateMachineSignal g_xWLGeneric_LogonUI_Ok_Signal" ?g_xWLGeneric_LogonUI_Ok_Signal@@3U_StateMachineSignal@@A
0x140062C10: "unsigned long __cdecl WLGeneric_No_Unlock_Disconnected_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_No_Unlock_Disconnected_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140085350: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x14008D2B0: WNF_SHEL_LOCK_ON_LOGON
0x1400A6390: "struct _StateMachineSignal g_xMPR_Notify_Signal" ?g_xMPR_Notify_Signal@@3U_StateMachineSignal@@A
0x14003475C: malloc
0x1400AA4EC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUvnyvwwvwUhbhUolxpwldmUxlmurtUoryUlyquivUznwGEUhgwzucOlyq@LockdownConfig" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUvnyvwwvwUhbhUolxpwldmUxlmurtUoryUlyquivUznwGEUhgwzucOlyq@LockdownConfig
0x140084FC0: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x1400844D0: "const Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV2::`vftable'" ??_7AssignedAccessConfigStoreV2@AssignedAccess@Internal@Windows@@6B@
0x1400944D0: "BpidDebugger" ??_C@_1BK@PIMMPEDB@?$AAB?$AAp?$AAi?$AAd?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AA?$AA@
0x140085168: "__cdecl _imp__wtoi" __imp__wtoi
0x140084830: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x14005E024: "private: long __cdecl OOBE::Health::details::OOBEScenarioEvents::Evaluate(void) __ptr64" ?Evaluate@OOBEScenarioEvents@details@Health@OOBE@@AEAAJXZ
0x140087058: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14007F66C: "public: __cdecl Windows::Internal::AssignedAccess::AAManagerHelper::AAManagerHelper(void) __ptr64" ??0AAManagerHelper@AssignedAccess@Internal@Windows@@QEAA@XZ
0x1400A95D0: g_pSidWindowManager
0x140019458: "unsigned long __cdecl Logon_ReportSuccessResult(struct _StateMachineCallContext * __ptr64,int)" ?Logon_ReportSuccessResult@@YAKPEAU_StateMachineCallContext@@H@Z
0x1400872A0: "LastLogOffEndTimePerfCounter" ??_C@_1DK@JPPMLNFP@?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAO?$AAf?$AAf?$AAE?$AAn?$AAd?$AAT?$AAi?$AAm?$AAe?$AAP?$AAe?$AAr?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x140078B10: Attach
0x1400891A8: "ext-ms-win-ntuser-misc-l1-1-0" ??_C@_1DM@JNFGLKKC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0?$AA?$AA@
0x140084B00: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140005330: "void __cdecl FreeRpcBinding(struct _NOTIFICATION_COMPONENT * __ptr64)" ?FreeRpcBinding@@YAXPEAU_NOTIFICATION_COMPONENT@@@Z
0x1400918E0: "Winsta0\%s" ??_C@_1BG@IKODDKHN@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140091F50: WPP_10a2a086d71f3621b60d45e811e1df2a_Traceguids
0x1400B1380: "__cdecl _imp_SetThreadDesktop" __imp_SetThreadDesktop
0x1400854E8: "__cdecl _imp_NtQueryInformationToken" __imp_NtQueryInformationToken
0x140037384: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140085268: "__cdecl _imp_NtCreateEvent" __imp_NtCreateEvent
0x1400051B0: "public: virtual void * __ptr64 __cdecl wil::details::FeatureLogging::`vector deleting destructor'(unsigned int) __ptr64" ??_EFeatureLogging@details@wil@@UEAAPEAXI@Z
0x140094CC0: "Null Arg(s)" ??_C@_1BI@PFKBFKAN@?$AAN?$AAu?$AAl?$AAl?$AA?5?$AAA?$AAr?$AAg?$AA?$CI?$AAs?$AA?$CJ?$AA?$AA@
0x1400369B4: "__cdecl _imp_load_MinCredGetLogonType" __imp_load_MinCredGetLogonType
0x1400A8EC0: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x1400A6C60: "struct _StateMachineTransition * g_xWLGeneric_PowerTransition_Locked_Transition" ?g_xWLGeneric_PowerTransition_Locked_Transition@@3PAU_StateMachineTransition@@A
0x14009E380: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLN
0x140090BF0: WNF_PO_DISPLAY_REQUEST_ACTIVE
0x140078200: WlSecureDesktoprConfirmationRequest
0x1400A7750: "struct _StateMachineTransition * g_xWLGeneric_ChangingPassword_Transition" ?g_xWLGeneric_ChangingPassword_Transition@@3PAU_StateMachineTransition@@A
0x14008D1F0: "Logging_Off" ??_C@_1BI@BAPDMFBO@?$AAL?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA_?$AAO?$AAf?$AAf?$AA?$AA@
0x140030D70: "public: unsigned long __cdecl Timer::ElapsedULONG(void) __ptr64" ?ElapsedULONG@Timer@@QEAAKXZ
0x140090D30: "-s %ld -f %ld -t %s -m %s -a %d " ??_C@_1EO@GFMCFLAM@?$AA?9?$AAs?$AA?5?$AA?$CF?$AAl?$AAd?$AA?5?$AA?9?$AAf?$AA?5?$AA?$CF?$AAl?$AAd?$AA?5?$AA?9?$AAt?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?9?$AAm?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?9?$AAa?$AA?5?$AA?$CF?$AAd?$AA?5@
0x14008C550: "DelayedSwitchDesktop" ??_C@_1CK@BJKIBPCC@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x14007B938: "unsigned long __cdecl UnpackEASLockoutData(unsigned char * __ptr64,unsigned long,struct _USER_COUNT_ENTRY * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?UnpackEASLockoutData@@YAKPEAEKPEAPEAU_USER_COUNT_ENTRY@@PEAK2@Z
0x14008D7B8: Microsoft_Windows_DeplorchLevels
0x14007FB30: "public: void __cdecl wil::VectorRangeNoThrow<struct Windows::Foundation::Collections::IVectorView<class Windows::Internal::AssignedAccess::AssignedAccessUserInfo * __ptr64> >::GetAtCurrent(unsigned int) __ptr64" ?GetAtCurrent@?$VectorRangeNoThrow@U?$IVectorView@PEAVAssignedAccessUserInfo@AssignedAccess@Internal@Windows@@@Collections@Foundation@Windows@@@wil@@QEAAXI@Z
0x1400900E0: ".DEFAULT" ??_C@_1BC@GMMPGICE@?$AA?4?$AAD?$AAE?$AAF?$AAA?$AAU?$AAL?$AAT?$AA?$AA@
0x1400A8770: "unsigned short * s_WppLogSessionName" ?s_WppLogSessionName@@3PAGA
0x140084A98: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x1400847D0: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x1400717B4: "unsigned long __cdecl ReportResult(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum _WLUI_REQUEST_REASON,int,unsigned short * __ptr64 * __ptr64,enum _WLUI_CREDPROV_RESPONSE * __ptr64)" ?ReportResult@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@W4_WLUI_REQUEST_REASON@@HPEAPEAGPEAW4_WLUI_CREDPROV_RESPONSE@@@Z
0x140035840: "__cdecl _tailMerge_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __tailMerge_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x140095770: "SYSTEM\CurrentControlSet\Control" ??_C@_1EK@PIAKNLFL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140087578: "Winsta0\Winlogon" ??_C@_1CC@DDCBOEJI@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x1400876B8: WLEvt_WluiServerShutdown_Start
0x140034E18: "__cdecl _imp_load_LsaLogonUser" __imp_load_LsaLogonUser
0x1400363A2: "__cdecl _imp_load_UMgrFreeUserCredentials" __imp_load_UMgrFreeUserCredentials
0x140031BBC: "void __cdecl FixAdvapiHKEYCache(void)" ?FixAdvapiHKEYCache@@YAXXZ
0x140062CA0: "unsigned long __cdecl WLGeneric_ReconnectionUpdate_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ReconnectionUpdate_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400362D0: IsUMgrSetShellInformationPresent
0x14008D278: "NotifyTerminateSession" ??_C@_1CO@OIILHANH@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140084B08: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x14008FB64: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x14005CF9C: "private: void __cdecl OOBE::Health::details::OOBEScenarioEvents::SetHealthEventValueMember<long>(long & __ptr64,long const & __ptr64) __ptr64" ??$SetHealthEventValueMember@J@OOBEScenarioEvents@details@Health@OOBE@@AEAAXAEAJAEBJ@Z
0x140090AB8: "rdpinit.exe" ??_C@_1BI@NCAMIPEM@?$AAr?$AAd?$AAp?$AAi?$AAn?$AAi?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140073A94: ?Free@?$CAutoPtr@PEAU_TOKEN_USER@@$1??$FreeHeap@PEAU_TOKEN_USER@@@@YAXPEAU1@@Z@@AEAAXXZ
0x140061E40: "unsigned long __cdecl WLGeneric_Logged_On_Disconnected_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Disconnected_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A90D0: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1400A9108: "long (__cdecl* __ptr64 g_wil_details_pfnNtUpdateWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnNtUpdateWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@ZEA
0x14007D7E4: "int __cdecl ShouldSetupExecute(void)" ?ShouldSetupExecute@@YAHXZ
0x1400A9C30: "struct _WLSM_GLOBAL_CONTEXT xGlobalContext" ?xGlobalContext@@3U_WLSM_GLOBAL_CONTEXT@@A
0x14002F720: "public: unsigned long __cdecl CGlobalStore::SetCredentials(struct _CRED_PROV_CREDENTIAL * __ptr64) __ptr64" ?SetCredentials@CGlobalStore@@QEAAKPEAU_CRED_PROV_CREDENTIAL@@@Z
0x140088070: "NtQueryWnfStateData" ??_C@_0BE@KACOKPLP@NtQueryWnfStateData?$AA@
0x140094718: "SystemSetupInProgress" ??_C@_1CM@DHJDDPJO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAe?$AAt?$AAu?$AAp?$AAI?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1400A9600: g_pSidInteractive
0x14007BEE0: "public: virtual long __cdecl OutOfProcEncryptHandle::EasGetDeviceLockoutData(void * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EasGetDeviceLockoutData@OutOfProcEncryptHandle@@UEAAJPEAXPEAEPEAK@Z
0x140064970: "void __cdecl WLGeneric_PowerTransition_ShowResumeMsg_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PowerTransition_ShowResumeMsg_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14002EBB0: IsRpcCallerLocalSystem
0x140055D88: "unsigned long __cdecl WppGrowBuf(void * __ptr64 * __ptr64,unsigned long)" ?WppGrowBuf@@YAKPEAPEAXK@Z
0x14009DD48: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x140095208: "OpenVolume" ??_C@_1BG@IGMEOPNG@?$AAO?$AAp?$AAe?$AAn?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1400B14B0: "__cdecl _imp_WinStationNegotiateSession" __imp_WinStationNegotiateSession
0x14009F9B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0
0x140084B98: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x1400A8188: "unsigned long * g_xWLGeneric_SequentialLogonPrompt_ResetSignals" ?g_xWLGeneric_SequentialLogonPrompt_ResetSignals@@3PAKA
0x14000403C: "public: void __cdecl wil::details::EnabledStateManager::EnsureSubscribedToUsageFlush(void (__cdecl*)(void * __ptr64)) __ptr64" ?EnsureSubscribedToUsageFlush@EnabledStateManager@details@wil@@QEAAXP6AXPEAX@Z@Z
0x140081070: "const OOBEHealthLogging::`vftable'" ??_7OOBEHealthLogging@@6B@
0x1400A9168: "unsigned long g_dwCreateSessionRet" ?g_dwCreateSessionRet@@3KA
0x1400A9510: WPP_MAIN_CB
0x1400849A0: "__cdecl _imp_SetEnvironmentVariableW" __imp_SetEnvironmentVariableW
0x140077E60: WlSecureDesktoppRpcSecurityCallback
0x140085178: "__cdecl _imp__ultow" __imp__ultow
0x140037300: WlSecureDesktop_midl_user_free
0x14009D9C0: "__cdecl CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200" _CT??_R0?AVResultException@wil@@@8??0ResultException@wil@@QEAA@AEBV01@@Z200
0x140004E50: "void * __ptr64 __cdecl MemoryAlloc(unsigned __int64)" ?MemoryAlloc@@YAPEAX_K@Z
0x140057AE8: "void __cdecl WlInactivityTimeoutHandler_Welcome(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?WlInactivityTimeoutHandler_Welcome@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x1400A6AA8: "struct _StateMachineTransition * g_xWLGeneric_PseudoLogging_Off2_Transition" ?g_xWLGeneric_PseudoLogging_Off2_Transition@@3PAU_StateMachineTransition@@A
0x140086070: "Software\Microsoft\Windows NT\Cu" ??_C@_1HO@CIAPOABJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400B1400: "__cdecl _imp_UMgrFreeUserCredentials" __imp_UMgrFreeUserCredentials
0x1400557E0: "unsigned long __cdecl WLGeneric_ChangingLogonPassword_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangingLogonPassword_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400540C0: "unsigned long __cdecl WlAccessibilitypCreateSATKey(int,unsigned long,unsigned long,struct HKEY__ * __ptr64 * __ptr64)" ?WlAccessibilitypCreateSATKey@@YAKHKKPEAPEAUHKEY__@@@Z
0x14009DF80: AUTHZ_NULL_THUNK_DATA_DLN
0x140088580: "EventUnregister" ??_C@_0BA@FAKLIPIC@EventUnregister?$AA@
0x140017260: "public: void __cdecl CSession::PerformDelayedSwitchToApplicationDesktop(void * __ptr64,int) __ptr64" ?PerformDelayedSwitchToApplicationDesktop@CSession@@QEAAXPEAXH@Z
0x140089120: "__cdecl _sz_ext_ms_win_devmgmt_policy_l1_1_1_dll" __sz_ext_ms_win_devmgmt_policy_l1_1_1_dll
0x1400886F0: "Software\Microsoft\Windows\Curre" ??_C@_1GG@HHJGODOP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14009F968: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x14009F568: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A4830: "struct _StateMachineState g_xWLGeneric_LogoffNotify_State" ?g_xWLGeneric_LogoffNotify_State@@3U_StateMachineState@@A
0x140088130: "Environment" ??_C@_1BI@GGNGIFIL@?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140095B60: "Respecialize" ??_C@_1BK@CGJOHCEH@?$AAR?$AAe?$AAs?$AAp?$AAe?$AAc?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x14005ED90: "public: virtual bool __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::NotifyFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?NotifyFailure@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@UEAA_NAEBUFailureInfo@2@@Z
0x140090068: "Tracelogging activity not starte" ??_C@_0CD@CKCFFNMO@Tracelogging?5activity?5not?5starte@
0x140050C60: "protected: void __cdecl wil::TraceLoggingProvider::ReportTelemetryFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?ReportTelemetryFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@2@@Z
0x140075720: MprBindServer
0x140084B20: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x140034893: "__cdecl amsg_exit" _amsg_exit
0x140008DD8: "int __cdecl wil_details_StagingConfig_AreAnyFeaturesConfigured(struct wil_details_StagingConfig * __ptr64)" ?wil_details_StagingConfig_AreAnyFeaturesConfigured@@YAHPEAUwil_details_StagingConfig@@@Z
0x140085048: "__cdecl _imp__callnewh" __imp__callnewh
0x1400A5FB0: "struct _StateMachineState g_xWLGeneric_AccessNotify_State" ?g_xWLGeneric_AccessNotify_State@@3U_StateMachineState@@A
0x14008CAD8: "Request_Unlock_Credz" ??_C@_1CK@BPFCAJMA@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x140085CB8: WLDiagEvt_LogoffRequestToUserFeedback_Start
0x14008CC60: "SequentialUnlockPrompt" ??_C@_1CO@IINDHLFE@?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA?$AA@
0x140052120: "unsigned long __cdecl WlAccessibilityOnReconnect(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnReconnect@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140036348: "__cdecl _imp_load_UMgrLogonUser" __imp_load_UMgrLogonUser
0x140084F40: "__cdecl _imp_AllocateLocallyUniqueId" __imp_AllocateLocallyUniqueId
0x14006E140: "void __cdecl DisplayMessage_Callback(void * __ptr64,unsigned short const * __ptr64)" ?DisplayMessage_Callback@@YAXPEAXPEBG@Z
0x140089C10: "__cdecl _sz_WTSAPI32_dll" __sz_WTSAPI32_dll
0x14006C634: "public: unsigned long __cdecl CUser::RegQuerySZ(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?RegQuerySZ@CUser@@QEAAKPEBG00PEAGK@Z
0x140078764: "int __cdecl FoundDebugger(unsigned short * __ptr64,int)" ?FoundDebugger@@YAHPEAGH@Z
0x14007FCFC: MicrosoftTelemetryAssertTriggeredNoArgs
0x140056114: "public: unsigned long __cdecl CGlobalStore::ReportApplicationEvent(unsigned short,unsigned long,unsigned long,void * __ptr64,unsigned long,...) __ptr64" ?ReportApplicationEvent@CGlobalStore@@QEAAKGKKPEAXKZZ
0x140002D08: "public: static int __cdecl CandidateAccountManagerPolicy::IsSequentialLogonEnforced(void)" ?IsSequentialLogonEnforced@CandidateAccountManagerPolicy@@SAHXZ
0x140016280: "unsigned long __cdecl WLGeneric_Authenticating_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Authenticating_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140078560: WlSecureDesktoprSimulateSAS
0x140089EF0: "HealthEvaluation" ??_C@_1CC@NPAHNILE@?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AAE?$AAv?$AAa?$AAl?$AAu?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14008D0C8: "AbortPendingLockRequest" ??_C@_1DA@IBEKLLJE@?$AAA?$AAb?$AAo?$AAr?$AAt?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AAL?$AAo?$AAc?$AAk?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x140051318: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x140035CF4: IsSetWindowStationUserPresent
0x1400B1020: "__cdecl _imp_AuthziFreeAuditEventType" __imp_AuthziFreeAuditEventType
0x1400B1500: "__cdecl _imp_WinStationPreCreateGlassReplacementSessionEx" __imp_WinStationPreCreateGlassReplacementSessionEx
0x140084898: "__cdecl _imp_SetInformationJobObject" __imp_SetInformationJobObject
0x140095E9C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1400A8F00: "__cdecl _hmod__ext_ms_win_advapi32_eventlog_l1_1_0_dll" __hmod__ext_ms_win_advapi32_eventlog_l1_1_0_dll
0x14005B900: "void __cdecl WLGeneric_Request_Web_Unlock_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Web_Unlock_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140089E70: "Software\Microsoft\Windows\Curre" ??_C@_1GM@KKPOEDNJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140032130: "public: virtual long __cdecl InProcEncryptHandle::EasQueryProtectionStatus(enum _EasEncryptProvProtectionStatus_ * __ptr64,long * __ptr64) __ptr64" ?EasQueryProtectionStatus@InProcEncryptHandle@@UEAAJPEAW4_EasEncryptProvProtectionStatus_@@PEAJ@Z
0x140084770: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x1400A83C0: "struct _StateMachineTransition * g_xWLGeneric_Request_Logon_Credz_Return_Transition" ?g_xWLGeneric_Request_Logon_Credz_Return_Transition@@3PAU_StateMachineTransition@@A
0x14008C9A8: "Request_Change_Credz" ??_C@_1CK@IGGEBGHC@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x1400B1570: "__cdecl _imp_GetBasicProfileFolderPath" __imp_GetBasicProfileFolderPath
0x140035CF4: IsUpdatePerUserSystemParametersPresent
0x140094658: "Authentication" ??_C@_1BO@BFCBNOOG@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14000D5CC: "public: __cdecl CMachine::CMachine(void) __ptr64" ??0CMachine@@QEAA@XZ
0x140063A0C: "public: int __cdecl CMachine::IsDomainMember(void) __ptr64" ?IsDomainMember@CMachine@@QEAAHXZ
0x140050974: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x140073ABC: ?Free@?$CAutoPtr@PEAUHKEY__@@$1?CloseRegKey@@YAXPEAU1@@Z@@AEAAXXZ
0x140035914: "__cdecl _imp_load_PolicyManager_GetPolicy" __imp_load_PolicyManager_GetPolicy
0x14009FB98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x140084758: "__cdecl _imp_GetDateFormatW" __imp_GetDateFormatW
0x1400A8660: "struct _StateMachineTransition * g_xWLGeneric_NotifyCreateSession_Transition" ?g_xWLGeneric_NotifyCreateSession_Transition@@3PAU_StateMachineTransition@@A
0x14002F184: "unsigned long __cdecl WppStart(unsigned char,unsigned long)" ?WppStart@@YAKEK@Z
0x14001A8C0: "void __cdecl WLGeneric_NotifyCreateSession_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyCreateSession_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400A7C48: "struct _StateMachineTransition * g_xWLGeneric_Logged_On_Disconnected_Transition" ?g_xWLGeneric_Logged_On_Disconnected_Transition@@3PAU_StateMachineTransition@@A
0x1400845B0: "__cdecl _imp_RpcBindingCopy" __imp_RpcBindingCopy
0x1400A7638: "unsigned long * g_xWLGeneric_PostChangeActions_ResetSignals" ?g_xWLGeneric_PostChangeActions_ResetSignals@@3PAKA
0x140031964: "unsigned long __cdecl JobManagerInitialize(void)" ?JobManagerInitialize@@YAKXZ
0x14008F2CD: ?_TlgEvent@?3??UserSwitchRecievedLsmEvent@WinlogonProvider@@SAXXZ@4U<unnamed-type-_TlgEvent>@?3??12@SAXXZ@B
0x1400A9000: "__cdecl _hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll" __hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll
0x1400714D0: "unsigned short * __ptr64 __cdecl MyFormatMessage(unsigned long)" ?MyFormatMessage@@YAPEAGK@Z
0x14000C09C: "unsigned long __cdecl InitializeData(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?InitializeData@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400731B8: "unsigned long __cdecl CustomParseLookupName(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?CustomParseLookupName@@YAKPEBGPEAPEAG@Z
0x14007C558: "long __cdecl _myVariantClear(struct tagPROPVARIANT * __ptr64)" ?_myVariantClear@@YAJPEAUtagPROPVARIANT@@@Z
0x14009F4E8: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLB
0x140036FC0: "public: __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>::~ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>(void) __ptr64" ??1?$ActivityData@VWinlogonProvider@@U_TlgReflectorTag_Param0IsProviderType@@@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAA@XZ
0x140081020: "const CMachine::`vftable'" ??_7CMachine@@6B@
0x140036C12: "__cdecl _tailMerge_credui_dll" __tailMerge_credui_dll
0x1400AA0D0: "void (__cdecl* __ptr64 g_wil_details_internalUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_internalUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x140090058: "Kerberos" ??_C@_08DEIMIBAF@Kerberos?$AA@
0x140091850: WPP_fa89acd9154b308c6e1d3f6f24da8b26_Traceguids
0x1400B14D8: "__cdecl _imp_WinStationGetUserCredentials" __imp_WinStationGetUserCredentials
0x140090F90: "shell32.dll,-220" ??_C@_1CC@PGHGCCP@?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AA?9?$AA2?$AA2?$AA0?$AA?$AA@
0x14000D110: "public: virtual void * __ptr64 __cdecl CMachine::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCMachine@@UEAAPEAXI@Z
0x140095E90: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x140088F80: "__cdecl _sz_ext_ms_win_advapi32_eventlog_l1_1_0_dll" __sz_ext_ms_win_advapi32_eventlog_l1_1_0_dll
0x14002C6B4: "public: __cdecl wil::details::EnabledStateManager::~EnabledStateManager(void) __ptr64" ??1EnabledStateManager@details@wil@@QEAA@XZ
0x14002BE2C: "private: enum _SESSIONTYPE __cdecl CSession::QueryRemoteSessionType(void) __ptr64" ?QueryRemoteSessionType@CSession@@AEAA?AW4_SESSIONTYPE@@XZ
0x1400A5A30: "struct _StateMachineState g_xWLGeneric_DelayedSwitchDesktop_State" ?g_xWLGeneric_DelayedSwitchDesktop_State@@3U_StateMachineState@@A
0x14001F340: "unsigned short * __ptr64 __cdecl AllocAndLoadString(unsigned int,class CUser * __ptr64)" ?AllocAndLoadString@@YAPEAGIPEAVCUser@@@Z
0x14008C820: "SecureCredUI_Operation" ??_C@_1CO@HEPBJKH@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAC?$AAr?$AAe?$AAd?$AAU?$AAI?$AA_?$AAO?$AAp?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400354C8: IsThemesOnTerminateSessionPresent
0x1400728E0: "int __cdecl AllowSAS(void)" ?AllowSAS@@YAHXZ
0x140005190: "public: void __cdecl CGlobalStore::FreeWebDialogUri(void) __ptr64" ?FreeWebDialogUri@CGlobalStore@@QEAAXXZ
0x1400A5FF0: "struct _StateMachineState g_xWLGeneric_AccessNotifyAsUser_State" ?g_xWLGeneric_AccessNotifyAsUser_State@@3U_StateMachineState@@A
0x1400305C8: EasEngineInitialize
0x140084BD0: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x140086C68: "GPClient" ??_C@_1BC@HIMEKJPF@?$AAG?$AAP?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?$AA@
0x140087B70: WLEvt_CallSubscriber_Stop
0x1400364CC: IsWinStationNegotiateSessionPresent
0x1400A8E88: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x140095630: "Null Arg" ??_C@_1BC@FPHKKBAK@?$AAN?$AAu?$AAl?$AAl?$AA?5?$AAA?$AAr?$AAg?$AA?$AA@
0x14005415C: "unsigned long __cdecl WlAccessibilitypDuplicateKeyValues(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64)" ?WlAccessibilitypDuplicateKeyValues@@YAKPEAUHKEY__@@0@Z
0x14005B960: "unsigned long __cdecl WLGeneric_Unlock_LogonUser_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_LogonUser_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140036F84: "public: __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::~ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>(void) __ptr64" ??1?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAA@XZ
0x14008FDB0: "/hardwarebuttonlaunch" ??_C@_1CM@BJPALNFI@?$AA?1?$AAh?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AAb?$AAu?$AAt?$AAt?$AAo?$AAn?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AA?$AA@
0x140085538: "__cdecl _imp_RtlOpenCurrentUser" __imp_RtlOpenCurrentUser
0x1400A70F0: "unsigned long * g_xWLGeneric_Unlock_ReportFailedResult_ResetSignals" ?g_xWLGeneric_Unlock_ReportFailedResult_ResetSignals@@3PAKA
0x1400769B0: OverrideHybridShutdown
0x140084D38: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1400920A8: WPP_fa058be0cb0e34a25b025909c16d0e3a_Traceguids
0x140085FF0: "RtlSubscribeWnfStateChangeNotifi" ??_C@_0CH@DLHFNNLE@RtlSubscribeWnfStateChangeNotifi@
0x1400850B0: "__cdecl _imp_exit" __imp_exit
0x14004F720: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x14008A590: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x140021A80: "unsigned long __cdecl AuthenticateUser(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum _SECURITY_LOGON_TYPE,void * __ptr64,struct _CRED_PROV_CREDENTIAL * __ptr64,struct _LUID * __ptr64,void * __ptr64 * __ptr64,struct _QUOTA_LIMITS * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,long * __ptr64,long * __ptr64,int * __ptr64)" ?AuthenticateUser@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@W4_SECURITY_LOGON_TYPE@@PEAXPEAU_CRED_PROV_CREDENTIAL@@PEAU_LUID@@PEAPEAXPEAU_QUOTA_LIMITS@@5PEAKPEAJ8PEAH@Z
0x1400361A6: "__cdecl _imp_load_SystemParametersInfoW" __imp_load_SystemParametersInfoW
0x140010F28: "void __cdecl WlAccessibilitySwitchDesktop(struct _WLSM_GLOBAL_CONTEXT * __ptr64,enum _DESKTOPID,unsigned long,unsigned long)" ?WlAccessibilitySwitchDesktop@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@W4_DESKTOPID@@KK@Z
0x14001AAF0: "unsigned long __cdecl RestoreConnections(void * __ptr64)" ?RestoreConnections@@YAKPEAX@Z
0x1400A6F80: "unsigned long * g_xWLGeneric_SequentialLogonPrompt_Unlock_ResetSignals" ?g_xWLGeneric_SequentialLogonPrompt_Unlock_ResetSignals@@3PAKA
0x140031B70: "int __cdecl SetProcessPriority(void)" ?SetProcessPriority@@YAHXZ
0x140027440: "private: unsigned long __cdecl CUser::UpdateUserEnvironment(void * __ptr64 * __ptr64) __ptr64" ?UpdateUserEnvironment@CUser@@AEAAKPEAPEAX@Z
0x14008B918: "Action_Succeeded" ??_C@_1CC@OOJPDLDC@?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA_?$AAS?$AAu?$AAc?$AAc?$AAe?$AAe?$AAd?$AAe?$AAd?$AA?$AA@
0x1400B1240: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLA
0x14008BE08: "Wl_DisplayOff" ??_C@_1BM@BBLHFMJB@?$AAW?$AAl?$AA_?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAO?$AAf?$AAf?$AA?$AA@
0x140085068: "__cdecl _imp__lock" __imp__lock
0x1400A4DB0: "struct _StateMachineState g_xWLGeneric_FindDestinationSession_Unlock_State" ?g_xWLGeneric_FindDestinationSession_Unlock_State@@3U_StateMachineState@@A
0x140084B80: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400A95A8: g_pSidSystem
0x14007E948: WmsgpPostMessage
0x1400AA114: "int g_fWinPEMode" ?g_fWinPEMode@@3HA
0x14005FD10: "public: void __cdecl WinlogonProvider::AuthenticateUser::Stop(long,long) __ptr64" ?Stop@AuthenticateUser@WinlogonProvider@@QEAAXJJ@Z
0x140005300: ??_E?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x140095B28: "BitLocker" ??_C@_1BE@EFHPNAO@?$AAB?$AAi?$AAt?$AAL?$AAo?$AAc?$AAk?$AAe?$AAr?$AA?$AA@
0x140036182: "__cdecl _imp_load_SetProcessWindowStation" __imp_load_SetProcessWindowStation
0x1400346FC: atexit
0x140036243: "__cdecl _imp_load_UMgrSetCachedCredentials" __imp_load_UMgrSetCachedCredentials
0x1400A7CF0: "struct _StateMachineTransition * g_xWLGeneric_InitiateLock_On_Resume_Transition" ?g_xWLGeneric_InitiateLock_On_Resume_Transition@@3PAU_StateMachineTransition@@A
0x140091298: "Winsta0\Screen-saver" ??_C@_1CK@IEHLFIOH@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?9?$AAs?$AAa?$AAv?$AAe?$AAr?$AA?$AA@
0x14006A520: WPP_SF_ddll
0x140033B50: "void __cdecl WMsgDisplayOffHandler(int)" ?WMsgDisplayOffHandler@@YAXH@Z
0x1400A4930: "struct _StateMachineState g_xWLGeneric_DelayLock_DisplayOnHandler_State" ?g_xWLGeneric_DelayLock_DisplayOnHandler_State@@3U_StateMachineState@@A
0x140090290: "Winlogon Job %x-%x" ??_C@_1CG@LFGOBCLJ@?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?5?$AAJ?$AAo?$AAb?$AA?5?$AA?$CF?$AAx?$AA?9?$AA?$CF?$AAx?$AA?$AA@
0x1400B13F0: "__cdecl _imp_UMgrSetShellInformation" __imp_UMgrSetShellInformation
0x14008BFF0: "Welcome" ??_C@_1BA@IIELFCKH@?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA?$AA@
0x14007F888: "private: long __cdecl Windows::Internal::AssignedAccess::AAManagerHelper::GetAssignedAccessConfiguration(struct Windows::Internal::AssignedAccess::IAssignedAccessConfiguration * __ptr64 * __ptr64) __ptr64" ?GetAssignedAccessConfiguration@AAManagerHelper@AssignedAccess@Internal@Windows@@AEAAJPEAPEAUIAssignedAccessConfiguration@234@@Z
0x14000156C: "public: bool __cdecl wil::details_abi::heap_buffer::reserve(unsigned __int64) __ptr64" ?reserve@heap_buffer@details_abi@wil@@QEAA_N_K@Z
0x140085508: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x140034FDD: "__cdecl _imp_load_LogonUserExExW" __imp_load_LogonUserExExW
0x140071B88: "bool __cdecl ShouldLogoffOtherUsers(bool,class CUser * __ptr64)" ?ShouldLogoffOtherUsers@@YA_N_NPEAVCUser@@@Z
0x14002C4D0: StateMachineWorkerCallback
0x1400903E8: WPP_24f9111fc3533d460c64025214db86c3_Traceguids
0x1400A6350: "struct _StateMachineSignal g_xWl_HubScreen_Signal" ?g_xWl_HubScreen_Signal@@3U_StateMachineSignal@@A
0x1400726E4: "unsigned long __cdecl WlDisplayMessageByResourceId(unsigned int,unsigned int,unsigned int,unsigned int * __ptr64,class CUser * __ptr64)" ?WlDisplayMessageByResourceId@@YAKIIIPEAIPEAVCUser@@@Z
0x1400887C0: "IdleTimeout" ??_C@_1BI@MBBAJPEA@?$AAI?$AAd?$AAl?$AAe?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140088D70: "__cdecl _sz_api_ms_win_rtcore_ntuser_private_l1_1_2_dll" __sz_api_ms_win_rtcore_ntuser_private_l1_1_2_dll
0x1400AA0C8: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_internalGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_internalGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x1400B1588: "__cdecl _imp_NetUserGetInfo" __imp_NetUserGetInfo
0x14009E0D8: WTSAPI32_NULL_THUNK_DATA_DLN
0x1400AA208: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x140086E90: "Software\Microsoft\Windows NT\Cu" ??_C@_1GM@NFOGLLJA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400B1190: WTSAPI32_NULL_THUNK_DATA_DLA
0x14000C300: "public: unsigned long __cdecl CSession::Initialize(class CGlobalStore * __ptr64) __ptr64" ?Initialize@CSession@@QEAAKPEAVCGlobalStore@@@Z
0x1400A9428: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x140086628: "Configuration" ??_C@_1BM@ICBIINEM@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400897B0: "ext-ms-win-session-usermgr-l1-2-" ??_C@_1EE@POGAKNCO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA2?$AA?9@
0x14009F7C0: WTSAPI32_NULL_THUNK_DATA_DLB
0x14009DBC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winlogon_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winlogon_l1_1_0_dll
0x140087CF8: "EtwEventRegister" ??_C@_0BB@DHHHEAKO@EtwEventRegister?$AA@
0x1400366AE: "__cdecl _imp_load_WinStationGetAllUserSessions" __imp_load_WinStationGetAllUserSessions
0x1400A58F0: "struct _StateMachineState g_xWLGeneric_Logged_On_Hibernating_State" ?g_xWLGeneric_Logged_On_Hibernating_State@@3U_StateMachineState@@A
0x140092048: "SkipNextFirstLogonAnimation" ??_C@_1DI@EMCAONJB@?$AAS?$AAk?$AAi?$AAp?$AAN?$AAe?$AAx?$AAt?$AAF?$AAi?$AAr?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAA?$AAn?$AAi?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140075438: AddSQMDataPoint
0x140030084: "private: unsigned long __cdecl CMachine::FetchMachineName(void) __ptr64" ?FetchMachineName@CMachine@@AEAAKXZ
0x140070E84: "bool __cdecl IsDifferentUserLoggedOn(void * __ptr64 const,unsigned long,enum CandidateUserPhase)" ?IsDifferentUserLoggedOn@@YA_NQEAXKW4CandidateUserPhase@@@Z
0x1400182B0: "public: unsigned long __cdecl CUser::RegQueryDWORD(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?RegQueryDWORD@CUser@@QEAAKPEBG0KPEAK@Z
0x140088150: "Software\Microsoft\Windows\Curre" ??_C@_1FE@JJLIONGF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14008672C: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x1400895B0: "__cdecl _sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __sz_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x1400879D0: "WlballoonNTLMNotificationEventNa" ??_C@_1EG@FJJPNPGP@?$AAW?$AAl?$AAb?$AAa?$AAl?$AAl?$AAo?$AAo?$AAn?$AAN?$AAT?$AAL?$AAM?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAE?$AAv?$AAe?$AAn?$AAt?$AAN?$AAa@
0x1400508EC: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x140084F68: "__cdecl _imp_CredReadByTokenHandle" __imp_CredReadByTokenHandle
0x14000F348: "unsigned long __cdecl WlAccessibilityOnBoot(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlAccessibilityOnBoot@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140067B20: "public: void __cdecl CSession::DestroyScreenSaverDesktop(void) __ptr64" ?DestroyScreenSaverDesktop@CSession@@QEAAXXZ
0x1400A9118: "void (__cdecl* __ptr64 g_wil_details_pfnFeatureLoggingHook)(unsigned int,struct FEATURE_LOGGED_TRAITS const * __ptr64,struct FEATURE_ERROR const * __ptr64,int,enum wil_ReportingKind const * __ptr64,enum wil_VariantReportingKind const * __ptr64,unsigned char,unsigned __int64)" ?g_wil_details_pfnFeatureLoggingHook@@3P6AXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@ZEA
0x1400356EC: IsOpenEventLogWPresent
0x140085298: "__cdecl _imp_RtlRemovePrivileges" __imp_RtlRemovePrivileges
0x140084748: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x140085458: "__cdecl _imp_EtwEventWriteEndScenario" __imp_EtwEventWriteEndScenario
0x14004F240: "public: virtual void * __ptr64 __cdecl OOBEHealthLogging::`vector deleting destructor'(unsigned int) __ptr64" ??_EOOBEHealthLogging@@UEAAPEAXI@Z
0x1400A5270: "struct _StateMachineState g_xWLGeneric_InitiateLock_State" ?g_xWLGeneric_InitiateLock_State@@3U_StateMachineState@@A
0x1400A95F0: g_pSidService
0x140085248: "__cdecl _imp_NtAdjustPrivilegesToken" __imp_NtAdjustPrivilegesToken
0x140032344: "void __cdecl WlInactivityGetEASSettings(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WlInactivityGetEASSettings@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@PEAK@Z
0x1400509EC: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x14008FC68: WLEvt_HotKeyLockDesktopInvoked_Info
0x140086050: WLDiagEvt_Lock_Start
0x140076BDC: WlSecureDesktopiGenericRequest
0x1400A6030: "struct _StateMachineState g_xWLGeneric_AccessNotifyAsSystem_State" ?g_xWLGeneric_AccessNotifyAsSystem_State@@3U_StateMachineState@@A
0x140031E4C: WlNotificationClientInit
0x140094650: "%ws" ??_C@_03BMPLCLAP@?$CFws?$AA@
0x140051D90: "unsigned long __cdecl WlAccessibilityOnCtrlWinEnter(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnCtrlWinEnter@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140084BB8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x14008BEA0: "LogonUI_WebUnlock" ??_C@_1CE@MBDKDAPL@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA_?$AAW?$AAe?$AAb?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140035417: "__cdecl _imp_load_LsaLookupManageSidNameMapping" __imp_load_LsaLookupManageSidNameMapping
0x140087440: WLEvt_DisplayWelcomeScreen_Stop
0x1400329A4: "unsigned long __cdecl WlRemindersDisplay(enum WlReminderType,void * __ptr64,void * __ptr64,int)" ?WlRemindersDisplay@@YAKW4WlReminderType@@PEAX1H@Z
0x140094CA0: "_ReadPolicies" ??_C@_1BM@JLGDFIBO@?$AA_?$AAR?$AAe?$AAa?$AAd?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x1400A90B0: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x140084BB0: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x140084EA0: "__cdecl _imp_PowerSettingUnregisterNotification" __imp_PowerSettingUnregisterNotification
0x1400A7CC0: "unsigned long * g_xWLGeneric_Logged_On_Resume_ResetSignals" ?g_xWLGeneric_Logged_On_Resume_ResetSignals@@3PAKA
0x1400B1520: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x14005C110: "unsigned long __cdecl WLGeneric_Unlock_ReportLastLogon_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportLastLogon_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400914E0: "EHome" ??_C@_1M@BANOBHIG@?$AAE?$AAH?$AAo?$AAm?$AAe?$AA?$AA@
0x140094698: "EnableFastFirstSignIn" ??_C@_1CM@JBIIGJFK@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAF?$AAa?$AAs?$AAt?$AAF?$AAi?$AAr?$AAs?$AAt?$AAS?$AAi?$AAg?$AAn?$AAI?$AAn?$AA?$AA@
0x1400A51F0: "struct _StateMachineState g_xWLGeneric_Locked_Return_State" ?g_xWLGeneric_Locked_Return_State@@3U_StateMachineState@@A
0x14005B270: "unsigned long __cdecl WLGeneric_No_Unlock_DisconnectedLock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_No_Unlock_DisconnectedLock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400B10E0: "__cdecl _imp_LsaGetLogonSessionData" __imp_LsaGetLogonSessionData
0x1400131B0: "long __cdecl LogonUmfdAccountAndSetTokenIntegrityLevel(void * __ptr64 * __ptr64)" ?LogonUmfdAccountAndSetTokenIntegrityLevel@@YAJPEAPEAX@Z
0x140066B70: "void __cdecl WLGeneric_AbortPendingLuaRequest_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AbortPendingLuaRequest_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140084B28: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x14009DD68: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowstation_l1_1_1_dll
0x14006EDA4: "void __cdecl WlStateMachine_Exit_GetContext(struct _StateMachineCallContext * __ptr64,void * __ptr64 * __ptr64)" ?WlStateMachine_Exit_GetContext@@YAXPEAU_StateMachineCallContext@@PEAPEAX@Z
0x14008EC00: ?_TlgEvent@?BN@??NotifyFailure@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@UEAA_NAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?BN@??123@UEAA_N0@Z@B
0x1400A78D0: "unsigned long * g_xWLGeneric_AppLauncher_ResetSignals" ?g_xWLGeneric_AppLauncher_ResetSignals@@3PAKA
0x1400A7FD0: "unsigned long * g_xWLGeneric_ShellStartup_ResetSignals" ?g_xWLGeneric_ShellStartup_ResetSignals@@3PAKA
0x1400895E0: "__cdecl _sz_ext_ms_win_ntuser_windowstation_l1_1_1_dll" __sz_ext_ms_win_ntuser_windowstation_l1_1_1_dll
0x140088538: "AuditBoot" ??_C@_1BE@OLOLOOKB@?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x140084E08: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x14000FCBC: "public: void __cdecl CGlobalStore::DeleteGlobalTraceLoggingActivity(void) __ptr64" ?DeleteGlobalTraceLoggingActivity@CGlobalStore@@QEAAXXZ
0x1400950E0: "RegQueryValueEx" ??_C@_1CA@PIOAGELG@?$AAR?$AAe?$AAg?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AA?$AA@
0x140068C0C: "int __cdecl ChangeToken(void * __ptr64,struct _SID_AND_ATTRIBUTES * __ptr64,void * __ptr64 * __ptr64)" ?ChangeToken@@YAHPEAXPEAU_SID_AND_ATTRIBUTES@@PEAPEAX@Z
0x1400A6CE0: "struct _StateMachineTransition * g_xWLGeneric_Locked_Disconnected_Transition" ?g_xWLGeneric_Locked_Disconnected_Transition@@3PAU_StateMachineTransition@@A
0x140076A28: CredpValidateString
0x14009FA30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-power-setting-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-power-setting-l1-1-0
0x140030910: RegisterWMsgServer
0x14008CA48: "PostChangeActions" ??_C@_1CE@CNEBJLIJ@?$AAP?$AAo?$AAs?$AAt?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14004F17C: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x1400882B0: "SOFTWARE\Microsoft\Windows\Assig" ??_C@_1GO@GIJAEHEK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAA?$AAs?$AAs?$AAi?$AAg@
0x14008FAE0: WLDiagEvt_FirstLogonSuccessSwitchToUserDesktop_Stop
0x1400B1100: "__cdecl _imp_SeciIsProtectedUser" __imp_SeciIsProtectedUser
0x14008C900: "AppLauncher" ??_C@_1BI@OBAAIPPB@?$AAA?$AAp?$AAp?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AA?$AA@
0x140065F40: "unsigned long __cdecl WLGeneric_Killing_Scrnsaver_Locked_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Killing_Scrnsaver_Locked_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140087B08: WLEvt_NotifySubscriber_Stop
0x1400847E0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140084E00: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x140084D18: "__cdecl _imp_CreateThreadpoolCleanupGroup" __imp_CreateThreadpoolCleanupGroup
0x1400848E0: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x140019A24: "unsigned long __cdecl ToSetTimeout(unsigned long,struct _StateMachineSignalData)" ?ToSetTimeout@@YAKKU_StateMachineSignalData@@@Z
0x14000D900: "public: void __cdecl CUser::StopDeferredPostAuthenticationWork(void) __ptr64" ?StopDeferredPostAuthenticationWork@CUser@@QEAAXXZ
0x140064320: "void __cdecl WLGeneric_MPRChangeNotify_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeNotify_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140091740: "S-1-5-80-956008885-3418522649-18" ??_C@_1HO@PPDIHLHA@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA9?$AA5?$AA6?$AA0?$AA0?$AA8?$AA8?$AA8?$AA5?$AA?9?$AA3?$AA4?$AA1?$AA8?$AA5?$AA2?$AA2?$AA6?$AA4?$AA9?$AA?9?$AA1?$AA8@
0x14009DF98: MPR_NULL_THUNK_DATA_DLN
0x14003599F: "__cdecl _imp_load_PolicyManager_FreeGetPolicyData" __imp_load_PolicyManager_FreeGetPolicyData
0x1400AA498: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUhpforyUhixUlyquivUznwGEUhgwzucOlyq@skulib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUhpforyUhixUlyquivUznwGEUhgwzucOlyq@skulib
0x140094620: "DbgBreakPoint" ??_C@_0O@ODHAJHCA@DbgBreakPoint?$AA@
0x1400B13A0: "__cdecl _imp_OpenInputDesktop" __imp_OpenInputDesktop
0x1400946E0: "AutoAadConnect" ??_C@_1BO@DGJDHIII@?$AAA?$AAu?$AAt?$AAo?$AAA?$AAa?$AAd?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140084968: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x140085D38: WLEvt_DisplayWelcomeScreen_Start
0x1400B1078: "__cdecl _imp_NaDynamicLockShouldSkipGracePeriod" __imp_NaDynamicLockShouldSkipGracePeriod
0x140088888: "ProgramData" ??_C@_1BI@PCFBINBH@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x14008C918: "TimeoutHandler_Logged_On" ??_C@_1DC@OINBMPPB@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA_?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA?$AA@
0x140085220: "__cdecl _imp_isupper" __imp_isupper
0x14008C258: "MPRLogonNotify" ??_C@_1BO@PCJONLCP@?$AAM?$AAP?$AAR?$AAL?$AAo?$AAg?$AAo?$AAn?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x140084A08: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14008FCB8: WLDiagEvt_Lock_Stop
0x14001A910: "void __cdecl WLGeneric_Welcome_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Welcome_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140090EB8: "RetryCount" ??_C@_1BG@JFIMKLMC@?$AAR?$AAe?$AAt?$AAr?$AAy?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140034A83: "__cdecl _dllonexit" __dllonexit
0x1400644F0: "unsigned long __cdecl WLGeneric_InitiateLock_On_Resume_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_InitiateLock_On_Resume_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140086A70: "Components" ??_C@_1BG@DMMBENNH@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x1400A8110: "struct _StateMachineTransition * g_xWLGeneric_FindDestinationSession_Transition" ?g_xWLGeneric_FindDestinationSession_Transition@@3PAU_StateMachineTransition@@A
0x1400A6C38: "struct _StateMachineTransition * g_xWLGeneric_Locked_Hibernating_Transition" ?g_xWLGeneric_Locked_Hibernating_Transition@@3PAU_StateMachineTransition@@A
0x140090A40: "System\CurrentControlSet\Control" ??_C@_1HE@EBJCPEMK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140035DD2: "__cdecl _imp_load_LoadLocalFonts" __imp_load_LoadLocalFonts
0x14007262C: "unsigned long __cdecl WlDisplayMessage(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned int * __ptr64)" ?WlDisplayMessage@@YAKPEBG0IPEAI@Z
0x140089FB0: "SYSTEM\CurrentControlSet\Control" ??_C@_1GE@KLOHNIPO@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1400866F8: "Winlogon" ??_C@_1BC@LLFJKFDH@?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x1400372D4: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Attach(unsigned long * __ptr64) __ptr64" ?Attach@?$SP@KV?$SP_MEM@K@@@@QEAAXPEAK@Z
0x14000DC2C: "public: void __cdecl CUser::DeactivateLogonHoursTimers(void) __ptr64" ?DeactivateLogonHoursTimers@CUser@@QEAAXXZ
0x140090C60: "Software\Microsoft\Windows NT\Cu" ??_C@_1HK@DLLIJBGD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400AA138: "struct _PROVIDER_DATA gProvData" ?gProvData@@3U_PROVIDER_DATA@@A
0x14000B0E0: "unsigned long __cdecl WLGeneric_NotifyTerminateSession_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyTerminateSession_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140033BD8: "public: void __cdecl CSession::AsyncTurnOffMonitor(void) __ptr64" ?AsyncTurnOffMonitor@CSession@@QEAAXXZ
0x14009DAE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USERENV_dll" __DELAY_IMPORT_DESCRIPTOR_USERENV_dll
0x1400A8FE8: "__cdecl _hmod__ext_ms_win_session_winsta_l1_1_0_dll" __hmod__ext_ms_win_session_winsta_l1_1_0_dll
0x140090C18: "internal\sdk\inc\wil\Result.h" ??_C@_0BO@GKCEPMBE@internal?2sdk?2inc?2wil?2Result?4h?$AA@
0x140002B60: "void __cdecl RecordLockScreenDismissed(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?RecordLockScreenDismissed@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x1400372D4: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Attach(unsigned char * __ptr64) __ptr64" ?Attach@?$SP@EV?$SP_MEM@E@@@@QEAAXPEAE@Z
0x140004DA0: "void __cdecl WppFreeBuf(void * __ptr64 * __ptr64)" ?WppFreeBuf@@YAXPEAPEAX@Z
0x140086D70: "HideLogoffScripts" ??_C@_1CE@POBAABHH@?$AAH?$AAi?$AAd?$AAe?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AAs?$AA?$AA@
0x140087B18: WLEvt_NotifySubscriber_Start
0x1400A8F90: "__cdecl _hmod__ext_ms_win_ntuser_window_l1_1_0_dll" __hmod__ext_ms_win_ntuser_window_l1_1_0_dll
0x14006C5B0: "void __cdecl NTLMIsDisabledReminderEventCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?NTLMIsDisabledReminderEventCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x14000876C: "private: static void __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions>::ReportUsageToService(bool,enum wil::ReportingKind,unsigned __int64)" ?ReportUsageToService@?$Feature@U__WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions@@@wil@@CAX_NW4ReportingKind@2@_K@Z
0x14008FB48: "RtlNtStatusToDosErrorNoTeb" ??_C@_0BL@JCIJNLFN@RtlNtStatusToDosErrorNoTeb?$AA@
0x140034D0F: "__cdecl _imp_load_FreeContextBuffer" __imp_load_FreeContextBuffer
0x14001A6F8: "private: unsigned long __cdecl CUser::UpdateUserNames(void) __ptr64" ?UpdateUserNames@CUser@@AEAAKXZ
0x14007E6A0: NotifyPostCompletion
0x1400A9048: "__cdecl _native_startup_lock" __native_startup_lock
0x140008A38: "bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)" ?IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z
0x1400B10D0: "__cdecl _imp_GetUserNameExW" __imp_GetUserNameExW
0x1400639CC: "public: unsigned long __cdecl CMachine::GetLastLogonInfoPolicy(int) __ptr64" ?GetLastLogonInfoPolicy@CMachine@@QEAAKH@Z
0x140081570: "const EncryptHandle::`vftable'" ??_7EncryptHandle@@6B@
0x1400549B0: "unsigned long __cdecl Change_ReportResult(struct _StateMachineCallContext * __ptr64,int)" ?Change_ReportResult@@YAKPEAU_StateMachineCallContext@@H@Z
0x14008F3F1: ?_TlgEvent@?3???$GetUMgrCredentials@_NAEAK@WinlogonProvider@@SAX$$QEA_NAEAK@Z@4U<unnamed-type-_TlgEvent>@?3???$GetUMgrCredentials@_NAEAK@1@SAX01@Z@B
0x140072600: "unsigned long __cdecl WLMemSize(void const * __ptr64)" ?WLMemSize@@YAKPEBX@Z
0x1400B1218: dsreg_NULL_THUNK_DATA_DLA
0x140008984: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x1400851F8: "__cdecl _imp_NtDeleteWnfStateName" __imp_NtDeleteWnfStateName
0x14008BC58: "TS_RevertBack" ??_C@_1BM@CMGKPKGF@?$AAT?$AAS?$AA_?$AAR?$AAe?$AAv?$AAe?$AAr?$AAt?$AAB?$AAa?$AAc?$AAk?$AA?$AA@
0x1400B14D0: "__cdecl _imp_WinStationIsSessionPermitted" __imp_WinStationIsSessionPermitted
0x1400B1470: "__cdecl _imp_WinStationGetAllUserSessions" __imp_WinStationGetAllUserSessions
0x140035BCB: "__cdecl _imp_load_SetUserObjectSecurity" __imp_load_SetUserObjectSecurity
0x140088280: "USERNAME" ??_C@_1BC@GGLDBIGJ@?$AAU?$AAS?$AAE?$AAR?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
0x14008C178: "AccessNotify" ??_C@_1BK@HBNPJDDC@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400853E8: "__cdecl _imp_TpPostWork" __imp_TpPostWork
0x14006A7A0: "unsigned long __cdecl ExpandUserEnvironmentStrings(void * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?ExpandUserEnvironmentStrings@@YAKPEAXPEBGPEAGK@Z
0x140087810: "UIVerbosityLevel" ??_C@_1CC@HLPMLGGJ@?$AAU?$AAI?$AAV?$AAe?$AAr?$AAb?$AAo?$AAs?$AAi?$AAt?$AAy?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140087460: WLEvt_UpdatePerUserSystemParameters_Start
0x140017EBC: "public: int __cdecl CMachine::IsSiHostIntegrationEnabled(void) __ptr64" ?IsSiHostIntegrationEnabled@CMachine@@QEAAHXZ
0x1400B1000: "__cdecl _imp_AuthziInitializeAuditEventType" __imp_AuthziInitializeAuditEventType
0x1400AA210: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x1400782E0: WlSecureDesktoprCredmanBackupRequest
0x1400A9424: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x140090408: "TermService" ??_C@_1BI@ODEOPEPA@?$AAT?$AAe?$AAr?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140084B30: "__cdecl _imp_RegOpenKeyW" __imp_RegOpenKeyW
0x140078074: WlSecureDesktopGenericRequestHandler
0x1400A8720: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x140089080: "ext-ms-win-devmgmt-policy-l1-1-1" ??_C@_1EC@OLEFFMDE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAv?$AAm?$AAg?$AAm?$AAt?$AA?9?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x1400A5BF0: "struct _StateMachineState g_xWLGeneric_NotifyStartShell_State" ?g_xWLGeneric_NotifyStartShell_State@@3U_StateMachineState@@A
0x1400559E0: "void __cdecl WLGeneric_Request_Change_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Change_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008CC30: "Unlock_ReportLastLogon" ??_C@_1CO@BMFOCGCH@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x1400A92B4: SecureDesktopServerIsStarted
0x14006DD44: WPP_SF_Il
0x1400B1110: SspiCli_NULL_THUNK_DATA_DLA
0x1400846B8: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x140079718: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAUPMPolicyRetrievedInfo@@P6AJPEAU1@@Z$1?PolicyManager_FreeGetPolicyData@@YAJ0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x1400B1070: "__cdecl _imp_NaDynamicLockShouldIgnoreUserActivity" __imp_NaDynamicLockShouldIgnoreUserActivity
0x140031220: "unsigned long __cdecl WLGeneric_Logged_On_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084638: "__cdecl _imp_RpcServerInqBindings" __imp_RpcServerInqBindings
0x1400955A0: "FveUpdateDeviceLockoutState" ??_C@_0BM@GMALHBAM@FveUpdateDeviceLockoutState?$AA@
0x14008A450: "RegOpenKeyEx" ??_C@_1BK@IMJPMNJA@?$AAR?$AAe?$AAg?$AAO?$AAp?$AAe?$AAn?$AAK?$AAe?$AAy?$AAE?$AAx?$AA?$AA@
0x1400347C0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400A5970: "struct _StateMachineState g_xWLGeneric_DifferentCredsAreRequiredReminder_State" ?g_xWLGeneric_DifferentCredsAreRequiredReminder_State@@3U_StateMachineState@@A
0x140037470: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x140095560: "FveValidateDeviceLockoutState" ??_C@_0BO@CFOCNDHF@FveValidateDeviceLockoutState?$AA@
0x1400A7768: "unsigned long * g_xWLGeneric_Request_Change_Credz_ResetSignals" ?g_xWLGeneric_Request_Change_Credz_ResetSignals@@3PAKA
0x14009F990: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140085160: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1400AA230: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x140084F38: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x140088A90: "Software\Microsoft\Windows\Winlo" ??_C@_1HO@IGMPMJPI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAW?$AAi?$AAn?$AAl?$AAo@
0x14008D120: "DelayLock" ??_C@_1BE@FBFGFFDA@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x140085180: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140095548: "FveGetDeviceLockoutData" ??_C@_0BI@HJPHOEHJ@FveGetDeviceLockoutData?$AA@
0x14008BDC8: "MPR_Notify" ??_C@_1BG@EFFNJDKF@?$AAM?$AAP?$AAR?$AA_?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400AA118: "int g_fRunSetup" ?g_fRunSetup@@3HA
0x140087510: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14001A970: "void __cdecl WLGeneric_Request_Logon_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Logon_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140090E10: "Title" ??_C@_1M@MNHBCACD@?$AAT?$AAi?$AAt?$AAl?$AAe?$AA?$AA@
0x14007F748: "public: __cdecl wil::com_ptr_t<struct Windows::Internal::AssignedAccess::IAssignedAccessUserInfo,struct wil::err_returncode_policy>::~com_ptr_t<struct Windows::Internal::AssignedAccess::IAssignedAccessUserInfo,struct wil::err_returncode_policy>(void) __ptr64" ??1?$com_ptr_t@UIAssignedAccessUserInfo@AssignedAccess@Internal@Windows@@Uerr_returncode_policy@wil@@@wil@@QEAA@XZ
0x14008C790: "Logged_On_Reconnect" ??_C@_1CI@PJLNMABB@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA_?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x1400B1388: "__cdecl _imp_CloseDesktop" __imp_CloseDesktop
0x140094390: "QueryIsDiskCheckScheduledForNext" ??_C@_0CF@DFDEMOPG@QueryIsDiskCheckScheduledForNext@
0x140084A30: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x140084B50: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400A6450: "struct _StateMachineSignal g_xTS_Disconnected_Signal" ?g_xTS_Disconnected_Signal@@3U_StateMachineSignal@@A
0x140084940: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140095A30: "NtGetCachedSigningLevel" ??_C@_1DA@CHCHGDAA@?$AAN?$AAt?$AAG?$AAe?$AAt?$AAC?$AAa?$AAc?$AAh?$AAe?$AAd?$AAS?$AAi?$AAg?$AAn?$AAi?$AAn?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x140087500: WLEvt_WluiServerStartup_Start
0x140032940: "void __cdecl WLGeneric_LogoffNotify_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_LogoffNotify_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008D598: "ProgramW6432" ??_C@_1BK@IEDNHAFM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAW?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x140084DD0: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x140055B00: "unsigned long __cdecl WLGeneric_Request_UnlockChange_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_UnlockChange_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140094300: "ProviderPath" ??_C@_1BK@GMKIPMAG@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x140095690: "RegEnumValue" ??_C@_1BK@HPEMMDLC@?$AAR?$AAe?$AAg?$AAE?$AAn?$AAu?$AAm?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1400B1408: "__cdecl _imp_UMgrLogonUser" __imp_UMgrLogonUser
0x1400A7DA0: "struct _StateMachineTransition * g_xWLGeneric_Logged_On_Transition" ?g_xWLGeneric_Logged_On_Transition@@3PAU_StateMachineTransition@@A
0x140004DF8: ?close_reset@?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@SAXPEAU_TP_TIMER@@@Z
0x14007DCFC: WluiDelayLocked
0x1400A8FB8: "__cdecl _hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __hmod__ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x14009FB0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x1400A5230: "struct _StateMachineState g_xWLGeneric_Locked_State" ?g_xWLGeneric_Locked_State@@3U_StateMachineState@@A
0x140089F18: "Health" ??_C@_1O@DLBFDOGG@?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x140031CF0: "void __cdecl FontLoaderWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?FontLoaderWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1400877B0: "WluiReadyForDesktopSwitchEvent" ??_C@_1DO@MPCEEJLN@?$AAW?$AAl?$AAu?$AAi?$AAR?$AAe?$AAa?$AAd?$AAy?$AAF?$AAo?$AAr?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x1400888E8: "gdi32.dll" ??_C@_1BE@BCGFHNLP@?$AAg?$AAd?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400814E8: "const wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::`vftable'" ??_7?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@6B@
0x140001420: "private: void __cdecl wil::details::FeatureStateManager::EnsureSubscribedToProcessWideUsageFlushUnderLock(void) __ptr64" ?EnsureSubscribedToProcessWideUsageFlushUnderLock@FeatureStateManager@details@wil@@AEAAXXZ
0x140004E80: "int __cdecl wil_details_SetEnabledAndHasNotificationStateCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetEnabledAndHasNotificationStateCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x140008B58: "public: void __cdecl wil::details::EnabledStateManager::SubscribeFeaturePropertyCacheToEnabledStateChanges(union wil_details_FeaturePropertyCache * __ptr64,enum wil_FeatureChangeTime) __ptr64" ?SubscribeFeaturePropertyCacheToEnabledStateChanges@EnabledStateManager@details@wil@@QEAAXPEATwil_details_FeaturePropertyCache@@W4wil_FeatureChangeTime@@@Z
0x1400613E0: "void __cdecl WLGeneric_CAD_Return_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_CAD_Return_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140094FC0: "Software\Microsoft\Windows\Curre" ??_C@_1HA@IBLJCKLG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400B1338: "__cdecl _imp_GetWindowLongW" __imp_GetWindowLongW
0x14007F4F0: "private: void __cdecl Windows::Internal::NativeString<class Windows::Internal::LocalMemPolicy<unsigned short> >::_Free(void) __ptr64" ?_Free@?$NativeString@V?$LocalMemPolicy@G@Internal@Windows@@@Internal@Windows@@AEAAXXZ
0x14001A4F0: "void __cdecl WLGeneric_NotifyLogon_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyLogon_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400101D8: "unsigned long __cdecl WlAccessibilitypDeleteSATKey(unsigned long)" ?WlAccessibilitypDeleteSATKey@@YAKK@Z
0x1400121D0: "unsigned long __cdecl WlAccessibilitypAclKeyForUser(struct HKEY__ * __ptr64,void * __ptr64)" ?WlAccessibilitypAclKeyForUser@@YAKPEAUHKEY__@@PEAX@Z
0x14006DD00: WPP_SF_I
0x140036194: "__cdecl _imp_load_CloseWindowStation" __imp_load_CloseWindowStation
0x1400B11B8: "__cdecl _imp_LsaLookupManageSidNameMapping" __imp_LsaLookupManageSidNameMapping
0x140027300: "struct HINSTANCE__ * __ptr64 __cdecl wil_details_GetNtDllModuleHandle(void)" ?wil_details_GetNtDllModuleHandle@@YAPEAUHINSTANCE__@@XZ
0x140085218: "__cdecl _imp___isascii" __imp___isascii
0x1400A9358: McGenTracingSupportInit
0x140085488: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x140033E04: "public: long __cdecl CEtwProviderT<void>::Register(struct _GUID const & __ptr64) __ptr64" ?Register@?$CEtwProviderT@X@@QEAAJAEBU_GUID@@@Z
0x140089990: "ext-ms-win-session-winsta-l1-1-3" ??_C@_1EC@GMNGGCEH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA3@
0x140091860: "PROFILEPATH" ??_C@_1BI@BAODCMJD@?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AAP?$AAA?$AAT?$AAH?$AA?$AA@
0x1400847C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1400A8FC0: "__cdecl _hmod__ext_ms_win_session_usermgr_l1_1_0_dll" __hmod__ext_ms_win_session_usermgr_l1_1_0_dll
0x140064810: "unsigned long __cdecl WLGeneric_PowerTransition_Locked_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PowerTransition_Locked_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140033FA4: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140018B7C: "public: unsigned long __cdecl CUser::StartWinlogonRegistryKeyListener(void) __ptr64" ?StartWinlogonRegistryKeyListener@CUser@@QEAAKXZ
0x1400770C0: WlSecureDesktoppSubscribeEvents
0x14005E484: "private: long __cdecl OOBE::Health::details::OOBEScenarioEvents::GetImageIdentifier(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetImageIdentifier@OOBEScenarioEvents@details@Health@OOBE@@AEAAJPEAPEAG@Z
0x140033DAC: "void __cdecl _FreePolicies(unsigned long,struct _tagEASPolicy * __ptr64)" ?_FreePolicies@@YAXKPEAU_tagEASPolicy@@@Z
0x14009DBA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winlogon_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winlogon_l1_1_1_dll
0x140009EE0: "private: void __cdecl wil::details_abi::FeatureStateData::RetrieveUsageUnderLock(struct wil::details_abi::UsageIndexes & __ptr64) __ptr64" ?RetrieveUsageUnderLock@FeatureStateData@details_abi@wil@@AEAAXAEAUUsageIndexes@23@@Z
0x1400B11E8: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x140033AA0: I_WMsgSendNotifyMessage
0x140084820: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x1400A6920: "unsigned long s_VerbosityLevel" ?s_VerbosityLevel@@3KA
0x140084E60: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x1400309B8: "void __cdecl CleanupAutoLogonCredentials(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long,bool)" ?CleanupAutoLogonCredentials@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K_N@Z
0x140074500: "unsigned long __cdecl GetUnMarshalledUserName(unsigned short const * __ptr64,int * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetUnMarshalledUserName@@YAKPEBGPEAHPEAPEAG@Z
0x1400A6170: "struct _StateMachineState g_xWLGeneric_TimeoutHandler_Welcome_State" ?g_xWLGeneric_TimeoutHandler_Welcome_State@@3U_StateMachineState@@A
0x14000161C: ?EnsureSubscribedToStateChangesUnderLock@FeatureStateManager@details@wil@@CAXAEAV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@3@U__WIL__WNF_STATE_NAME@@PEAX@Z
0x140078B00: "long __cdecl MyUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?MyUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400B1168: "__cdecl _imp_ThemesOnDisconnect" __imp_ThemesOnDisconnect
0x1400A50F0: "struct _StateMachineState g_xWLGeneric_Request_Web_Unlock_Credz_State" ?g_xWLGeneric_Request_Web_Unlock_Credz_State@@3U_StateMachineState@@A
0x14004FC5C: "public: class wil::details::ThreadFailureCallbackHolder * __ptr64 * __ptr64 __cdecl wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>::GetLocal(bool) __ptr64" ?GetLocal@?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@wil@@QEAAPEAPEAVThreadFailureCallbackHolder@details@3@_N@Z
0x140037360: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140084BF8: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x14003078C: SetProfilesLocation
0x140087470: WLEvt_UpdatePerUserSystemParameters_Stop
0x140091500: "Rail" ??_C@_19ODNOHHPA@?$AAR?$AAa?$AAi?$AAl?$AA?$AA@
0x14005CF9C: "private: void __cdecl OOBE::Health::details::OOBEScenarioEvents::SetHealthEventValueMember<int>(int & __ptr64,int const & __ptr64) __ptr64" ??$SetHealthEventValueMember@H@OOBEScenarioEvents@details@Health@OOBE@@AEAAXAEAHAEBH@Z
0x1400B1468: "__cdecl _imp_WinStationFreeUserSessionInfo" __imp_WinStationFreeUserSessionInfo
0x140085CA8: WLDiagEvt_LogoffRequestToUserFeedback_Stop
0x14003710C: "public: void __cdecl wil::details::shared_object<class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType> >::reset(void) __ptr64" ?reset@?$shared_object@V?$ActivityData@VWinlogonProvider@@U_TlgReflectorTag_Param0IsProviderType@@@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@@details@wil@@QEAAXXZ
0x14008E4B3: ?_TlgEvent@?3???$OOBEHealthMetric@AEBE_K_KAEA_KPEAGPEAG@OOBEHealthTelemetry@@SAXAEBE$$QEA_K1AEA_K$$QEAPEAG3@Z@4U<unnamed-type-_TlgEvent>@?3???$OOBEHealthMetric@AEBE_K_KAEA_KPEAGPEAG@1@SAX011233@Z@B
0x140090420: WPP_aa77016abedf3fc5b03a14133a93c304_Traceguids
0x140085540: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x140089340: "ext-ms-win-ntuser-private-l1-1-0" ??_C@_1EC@HNNKKNDA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x140008D10: "int __cdecl wil_QueryFeatureState(struct wil_FeatureState * __ptr64,unsigned int,int,enum wil_FeatureStore,int * __ptr64)" ?wil_QueryFeatureState@@YAHPEAUwil_FeatureState@@IHW4wil_FeatureStore@@PEAH@Z
0x140036231: "__cdecl _imp_load_GetSystemMetrics" __imp_load_GetSystemMetrics
0x140064430: "unsigned long __cdecl WLGeneric_MPRLogonNotify_Unlock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRLogonNotify_Unlock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140095648: "unsupported type" ??_C@_1CC@FKGDKBF@?$AAu?$AAn?$AAs?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAe?$AAd?$AA?5?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x1400B10F8: "__cdecl _imp_LogonUserExExW" __imp_LogonUserExExW
0x140055B60: "void __cdecl WLGeneric_Request_UnlockChange_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_UnlockChange_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084B40: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x14005B6B0: "unsigned long __cdecl WLGeneric_Request_Web_Unlock_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Web_Unlock_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140085028: "__cdecl _imp_memcmp" __imp_memcmp
0x14002C850: "void __cdecl PerformDelayedSwitchToApplicationDesktopCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?PerformDelayedSwitchToApplicationDesktopCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x140087930: "\Device\NamedPipe" ??_C@_1CE@NKNMNDKL@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAa?$AAm?$AAe?$AAd?$AAP?$AAi?$AAp?$AAe?$AA?$AA@
0x14000CDA8: "public: unsigned long __cdecl CUser::Initialize(class CGlobalStore * __ptr64,class CSession * __ptr64,int) __ptr64" ?Initialize@CUser@@QEAAKPEAVCGlobalStore@@PEAVCSession@@H@Z
0x140035429: "__cdecl _imp_load_LsaLookupFreeMemory" __imp_load_LsaLookupFreeMemory
0x140020548: WlSecureDesktoppRpcServerUninit
0x140086608: WLEvt_WaitForLSM_Start
0x14008FD70: "utilman.exe /debug" ??_C@_1CG@GLMLOGNE@?$AAu?$AAt?$AAi?$AAl?$AAm?$AAa?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?1?$AAd?$AAe?$AAb?$AAu?$AAg?$AA?$AA@
0x1400941F8: WPP_7372e57b4a2033ea1e93d334433c9c08_Traceguids
0x14003715C: "public: void __cdecl wil::details::shared_buffer::reset(void) __ptr64" ?reset@shared_buffer@details@wil@@QEAAXXZ
0x14008FFC0: "sethc.exe" ??_C@_1BE@FKHJBOGP@?$AAs?$AAe?$AAt?$AAh?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140091A98: "NotShownErrorReason" ??_C@_1CI@GJNNEOMG@?$AAN?$AAo?$AAt?$AAS?$AAh?$AAo?$AAw?$AAn?$AAE?$AAr?$AAr?$AAo?$AAr?$AAR?$AAe?$AAa?$AAs?$AAo?$AAn?$AA?$AA@
0x140035170: Ndr64AsyncServerCallAll
0x140085070: "__cdecl _imp__commode" __imp__commode
0x140085548: "__cdecl _imp_RtlGetDeviceFamilyInfoEnum" __imp_RtlGetDeviceFamilyInfoEnum
0x1400846C0: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x140091880: "HOMEDIRECTORY" ??_C@_1BM@IINONCIN@?$AAH?$AAO?$AAM?$AAE?$AAD?$AAI?$AAR?$AAE?$AAC?$AAT?$AAO?$AAR?$AAY?$AA?$AA@
0x140091D68: "CloudAP" ??_C@_07MGOOMLMO@CloudAP?$AA@
0x140088A50: "NotShownReason" ??_C@_1BO@BPLBIIGP@?$AAN?$AAo?$AAt?$AAS?$AAh?$AAo?$AAw?$AAn?$AAR?$AAe?$AAa?$AAs?$AAo?$AAn?$AA?$AA@
0x140079940: "void __cdecl wil::details::in1diag3::_Log_NtStatus(void * __ptr64,unsigned int,char const * __ptr64,long)" ?_Log_NtStatus@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x1400649F0: "unsigned long __cdecl WLGeneric_PowerTransition_Welcome_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PowerTransition_Welcome_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400914D0: "-type" ??_C@_1M@EJNDEGCP@?$AA?9?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x1400A8520: "unsigned long * g_xWLGeneric_Welcome_Hibernating_ResetSignals" ?g_xWLGeneric_Welcome_Hibernating_ResetSignals@@3PAKA
0x1400853D8: "__cdecl _imp_TpAllocWait" __imp_TpAllocWait
0x140036058: "__cdecl _imp_load_OpenInputDesktop" __imp_load_OpenInputDesktop
0x14008FC78: WLEvt_EASEncryptProv_Init_Error
0x1400874F0: WLEvt_WluiServerStartup_Stop
0x1400848B0: "__cdecl _imp_QueryInformationJobObject" __imp_QueryInformationJobObject
0x1400850D8: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x1400B1440: "__cdecl _imp_NotifyInteractiveSessionLogoff" __imp_NotifyInteractiveSessionLogoff
0x1400A7728: "struct _StateMachineTransition * g_xWLGeneric_MPRChangeNotify_Transition" ?g_xWLGeneric_MPRChangeNotify_Transition@@3PAU_StateMachineTransition@@A
0x1400A4E70: "struct _StateMachineState g_xWLGeneric_Logon_Checking_LastLogonPolicy_Unlock_State" ?g_xWLGeneric_Logon_Checking_LastLogonPolicy_Unlock_State@@3U_StateMachineState@@A
0x1400260F0: WaitForDesiredService
0x140085438: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x14001FC1C: WluiWaitForLockScreenDismiss
0x1400881B0: "System\CurrentControlSet\Control" ??_C@_1HK@MKBHAIFE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140089DB0: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1400943B8: Notifications
0x140088298: "Version" ??_C@_1BA@LIACFDLB@?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1400646F0: "void __cdecl WLGeneric_Logged_On_Hibernating_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Hibernating_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084EB8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x140095350: "No more room for new entry" ??_C@_1DG@NMGBJFKL@?$AAN?$AAo?$AA?5?$AAm?$AAo?$AAr?$AAe?$AA?5?$AAr?$AAo?$AAo?$AAm?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAn?$AAe?$AAw?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x14009DFD0: NaturalAuthClient_NULL_THUNK_DATA_DLN
0x14000BB44: "int __cdecl IsHiberboot(unsigned long)" ?IsHiberboot@@YAHK@Z
0x1400B12A8: "__cdecl _imp_GetLastInputInfo" __imp_GetLastInputInfo
0x14009E178: ext-ms-win-advapi32-eventlog-l1-1-0_NULL_THUNK_DATA_DLN
0x140036623: "__cdecl _imp_load_WinStationConsumeCacheSession" __imp_load_WinStationConsumeCacheSession
0x1400A6927: g_header_init_InitializeStagingHeaderInternalApi
0x1400917C0: "ZDPRebootRequired" ??_C@_1CE@KKNDNMID@?$AAZ?$AAD?$AAP?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x14008FD10: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1400A67D8: "struct _TlgProvider_t `public: __cdecl CandidateAccountManagerPolicyTraceProvider::StaticHandle::StaticHandle(void) __ptr64'::`2'::__hInner" ?__hInner@?1???0StaticHandle@CandidateAccountManagerPolicyTraceProvider@@QEAA@XZ@4U_TlgProvider_t@@A
0x1400A7F60: "struct _StateMachineTransition * g_xWLGeneric_Request_LogonChange_Credz_Transition" ?g_xWLGeneric_Request_LogonChange_Credz_Transition@@3PAU_StateMachineTransition@@A
0x14006E278: "public: static void __cdecl WinlogonProvider::UserSwitchReturnedToWelcomeLockscreen(void)" ?UserSwitchReturnedToWelcomeLockscreen@WinlogonProvider@@SAXXZ
0x1400A7848: "struct _StateMachineTransition * g_xWLGeneric_Killing_Scrnsaver_Logged_On_Transition" ?g_xWLGeneric_Killing_Scrnsaver_Logged_On_Transition@@3PAU_StateMachineTransition@@A
0x14007C6FC: "unsigned long __cdecl DeleteRegPath(void)" ?DeleteRegPath@@YAKXZ
0x1400AA110: "int g_fExecuteSetup" ?g_fExecuteSetup@@3HA
0x14009FC74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x140089F28: "internal\onecoreuapshell\inc\oob" ??_C@_0DB@FDIDJACJ@internal?2onecoreuapshell?2inc?2oob@
0x140084A38: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000BB90: "int __cdecl CallCheckForHiberbootRpc(unsigned char,unsigned char)" ?CallCheckForHiberbootRpc@@YAHEE@Z
0x1400562EC: "public: unsigned long __cdecl CGlobalStore::SetWebDialogUri(unsigned short const * __ptr64) __ptr64" ?SetWebDialogUri@CGlobalStore@@QEAAKPEBG@Z
0x140084C40: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x14008A4F0: WPP_aaa2b0ac241d3d9d1d709b1244315c37_Traceguids
0x14009FAD0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x1400A8FF0: "__cdecl _hmod__ext_ms_win_session_winsta_l1_1_3_dll" __hmod__ext_ms_win_session_winsta_l1_1_3_dll
0x1400A53F0: "struct _StateMachineState g_xWLGeneric_TO_Disconnected_State" ?g_xWLGeneric_TO_Disconnected_State@@3U_StateMachineState@@A
0x140009E44: "public: void __cdecl wil::details_abi::FeatureStateData::RecordUsage(void) __ptr64" ?RecordUsage@FeatureStateData@details_abi@wil@@QEAAXXZ
0x1400A85F0: "struct _StateMachineTransition * g_xWLGeneric_Welcome_Transition" ?g_xWLGeneric_Welcome_Transition@@3PAU_StateMachineTransition@@A
0x1400868C0: "Winsta0\Default" ??_C@_1CA@BGFJHJCO@?$AAW?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1400217FC: "public: unsigned long __cdecl CGlobalStore::GetNegotiatePackage(unsigned long * __ptr64) __ptr64" ?GetNegotiatePackage@CGlobalStore@@QEAAKPEAK@Z
0x140064E50: "unsigned long __cdecl WlRemindersiAddPostShell(struct _tagSHELLREMINDER * __ptr64)" ?WlRemindersiAddPostShell@@YAKPEAU_tagSHELLREMINDER@@@Z
0x14009FBD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x1400A7D08: "unsigned long * g_xWLGeneric_Logged_On_Hibernating_ResetSignals" ?g_xWLGeneric_Logged_On_Hibernating_ResetSignals@@3PAKA
0x14008CAA0: "Locked_Return" ??_C@_1BM@MDFINHKP@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA_?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x140005370: "void __cdecl WLGeneric_Unlock_Checking_LastLogonPolicy_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_Checking_LastLogonPolicy_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x1400A8850: "unsigned long * g_dwPasswordProvPolicies" ?g_dwPasswordProvPolicies@@3PAKA
0x140002C5C: "public: enum _DESKTOPID __cdecl CSession::GetLockScreenDesktop(struct _WLSM_GLOBAL_CONTEXT * __ptr64) __ptr64" ?GetLockScreenDesktop@CSession@@QEAA?AW4_DESKTOPID@@PEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140034B33: "__cdecl _imp_load_ThemesOnLogoff" __imp_load_ThemesOnLogoff
0x1400354C8: IsThemesOnDisconnectPresent
0x1400A5EF0: "struct _StateMachineState g_xWLGeneric_Request_Logon_Credz_State" ?g_xWLGeneric_Request_Logon_Credz_State@@3U_StateMachineState@@A
0x140002604: "public: int __cdecl CSession::IsRemoteLuidLogon(void) __ptr64" ?IsRemoteLuidLogon@CSession@@QEAAHXZ
0x1400910C0: "Microsoft.KerbCredentialsExpired" ??_C@_1EC@GKLEMHEM@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAK?$AAe?$AAr?$AAb?$AAC?$AAr?$AAe?$AAd?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAs?$AAE?$AAx?$AAp?$AAi?$AAr?$AAe?$AAd@
0x14009F7D0: dsreg_NULL_THUNK_DATA_DLB
0x140076508: NotifyAllocate
0x140087C10: "ContentDeliveryManager-License-C" ??_C@_1GM@GNONNKCL@?$AAC?$AAo?$AAn?$AAt?$AAe?$AAn?$AAt?$AAD?$AAe?$AAl?$AAi?$AAv?$AAe?$AAr?$AAy?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?9?$AAL?$AAi?$AAc?$AAe?$AAn?$AAs?$AAe?$AA?9?$AAC@
0x140091F60: "OOBETransitionUXVisibilityEvent" ??_C@_1EA@MNCDNIHG@?$AAO?$AAO?$AAB?$AAE?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AAU?$AAX?$AAV?$AAi?$AAs?$AAi?$AAb?$AAi?$AAl?$AAi?$AAt?$AAy?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x140085480: "__cdecl _imp_RtlTimeToSecondsSince1980" __imp_RtlTimeToSecondsSince1980
0x14008BA70: "Winsrv_AccessNotify" ??_C@_1CI@HOFEANMO@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400A4D70: "struct _StateMachineState g_xWLGeneric_Request_UnlockChange_Credz_State" ?g_xWLGeneric_Request_UnlockChange_Credz_State@@3U_StateMachineState@@A
0x140084AD8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x140091490: "Debug" ??_C@_1M@OPFBIOCF@?$AAD?$AAe?$AAb?$AAu?$AAg?$AA?$AA@
0x140085410: "__cdecl _imp_TpReleaseWait" __imp_TpReleaseWait
0x14005075C: "public: void __cdecl wil::details::EnabledStateManager::OnTimer(void) __ptr64" ?OnTimer@EnabledStateManager@details@wil@@QEAAXXZ
0x14006ED48: "void __cdecl WlStateMachine_Execute_SetContext(struct _StateMachineCallContext * __ptr64,void * __ptr64)" ?WlStateMachine_Execute_SetContext@@YAXPEAU_StateMachineCallContext@@PEAX@Z
0x14000D110: "public: virtual void * __ptr64 __cdecl CMachine::`vector deleting destructor'(unsigned int) __ptr64" ??_ECMachine@@UEAAPEAXI@Z
0x140084708: api-ms-win-base-bootconfig-l1-1-0_NULL_THUNK_DATA
0x140085308: "__cdecl _imp_TpSetTimer" __imp_TpSetTimer
0x1400362D0: IsUMgrLogonUserPresent
0x140095E9C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1400667B8: "unsigned long __cdecl HandleSecurePrompting(unsigned long,struct _CREDUI_CONTEXT,struct CREDUI_INFO_INTERNAL_CONTEXT,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long,int,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?HandleSecurePrompting@@YAKKU_CREDUI_CONTEXT@@UCREDUI_INFO_INTERNAL_CONTEXT@@KKPEAEKHKPEAPEAEPEAKPEAH44@Z
0x1400360F8: IsCreateWindowStationWPresent
0x1400A7EB0: "struct _StateMachineTransition * g_xWLGeneric_ChangeLogon_ReportResult_Transition" ?g_xWLGeneric_ChangeLogon_ReportResult_Transition@@3PAU_StateMachineTransition@@A
0x140034950: "__cdecl ValidateImageBase" _ValidateImageBase
0x14005FFF0: "protected: virtual void __cdecl WinlogonProvider::AuthenticateUser::StopActivity(void) __ptr64" ?StopActivity@AuthenticateUser@WinlogonProvider@@MEAAXXZ
0x140084F98: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x1400B1248: "__cdecl _imp_DwmpNotifyUserLogoff" __imp_DwmpNotifyUserLogoff
0x140084E90: "__cdecl _imp_PowerDeterminePlatformRoleEx" __imp_PowerDeterminePlatformRoleEx
0x14009F2B8: SspiCli_NULL_THUNK_DATA_DLB
0x140078EFC: Breakin
0x1400A95E8: g_pSidRestricted
0x14008BAC0: "Winsrv_DwmControl" ??_C@_1CE@DLBHAKJH@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAD?$AAw?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x140085E30: "system\CurrentControlSet\Service" ??_C@_1EG@JCBABFLC@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x140034C90: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x14006CEB0: "public: int __cdecl CUser::TestPrivilege(unsigned long,int) __ptr64" ?TestPrivilege@CUser@@QEAAHKH@Z
0x1400364CC: IsWinStationReportUIResultPresent
0x1400903A0: "RestartLogonUI" ??_C@_1BO@KMOAOHPE@?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA?$AA@
0x140095440: "EasValidateDeviceLockoutState" ??_C@_1DM@LCDLKNGO@?$AAE?$AAa?$AAs?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x140089430: "ext-ms-win-ntuser-private-l1-3-1" ??_C@_1EC@IHEDMNCI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA3?$AA?9?$AA1@
0x1400092E4: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::FindInsertionPointOrIncrement(struct wil::details_abi::UsageIndexProperty & __ptr64,unsigned char * __ptr64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?FindInsertionPointOrIncrement@RawUsageIndex@details_abi@wil@@AEAAPEAEAEAUUsageIndexProperty@23@PEAEPEAX_KI@Z
0x1400846E0: "__cdecl _imp_RpcAsyncAbortCall" __imp_RpcAsyncAbortCall
0x1400921E0: "internal\onecoreuapshell\inc\sto" ??_C@_0CP@NCGCLFNJ@internal?2onecoreuapshell?2inc?2sto@
0x1400A9028: "__cdecl _hmod__MPR_dll" __hmod__MPR_dll
0x140089EE0: "Census" ??_C@_1O@GMPJHOLK@?$AAC?$AAe?$AAn?$AAs?$AAu?$AAs?$AA?$AA@
0x140036E16: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x14002C3A0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1400A90B8: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x14005F5C4: "unsigned long __cdecl ReportLastLogon(struct _StateMachineCallContext * __ptr64,int)" ?ReportLastLogon@@YAKPEAU_StateMachineCallContext@@H@Z
0x140090340: "%SYSTEMROOT%\System32\WinLogon.e" ??_C@_1FO@OPCJLPBP@?$AA?$CF?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AAR?$AAO?$AAO?$AAT?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?4?$AAe@
0x14009DF08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_dsreg_dll" __DELAY_IMPORT_DESCRIPTOR_dsreg_dll
0x140036793: "__cdecl _imp_load_WinStationTerminateGlassReplacementSession" __imp_load_WinStationTerminateGlassReplacementSession
0x140051788: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x140034738: "__cdecl wtoi" _wtoi
0x14009DE88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_composition_init_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_composition_init_l1_1_0_dll
0x140079280: I_WMsgSendReconnectionUpdateMessage
0x140020940: WluiGetShutdownResolverInfo
0x1400A9178: "bool gUmfdHostThreadProcExecuted" ?gUmfdHostThreadProcExecuted@@3_NA
0x14007F028: PfRpcSendCommand
0x1400A8750: "unsigned short * s_WppLogFileName" ?s_WppLogFileName@@3PAGA
0x140035570: IsNotifyInteractiveSessionLogoffPresent
0x14005DB38: "unsigned long __cdecl DisplayDisconnectRefusedMessage(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?DisplayDisconnectRefusedMessage@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x1400514C0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x1400853A0: "__cdecl _imp_RtlGetAce" __imp_RtlGetAce
0x140085408: "__cdecl _imp_TpWaitForWork" __imp_TpWaitForWork
0x140034F52: "__cdecl _imp_load_NetGetJoinInformation" __imp_load_NetGetJoinInformation
0x1400211D4: "public: unsigned long __cdecl CSession::SetUserDesktopSecurity(enum _DESKTOPID,void * __ptr64) __ptr64" ?SetUserDesktopSecurity@CSession@@QEAAKW4_DESKTOPID@@PEAX@Z
0x14005B300: "void __cdecl WLGeneric_No_Unlock_DisconnectedLock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_No_Unlock_DisconnectedLock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14009DC48: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_dialogbox_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_dialogbox_l1_1_0_dll
0x140052A2C: "unsigned long __cdecl WlAccessibilityStartShortcutTool(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityStartShortcutTool@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x1400860F0: "EnableLostMode" ??_C@_1BO@CKBLHMBG@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAo?$AAs?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1400851B8: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x140071890: "long __cdecl wil::details::in1diag3::Return_Win32(void * __ptr64,unsigned int,char const * __ptr64,unsigned long)" ?Return_Win32@in1diag3@details@wil@@YAJPEAXIPEBDK@Z
0x140084F18: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x140031EF0: "long __cdecl OnWNFNotificationNoAction(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?OnWNFNotificationNoAction@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x14001AEB0: "unsigned long __cdecl WLGeneric_Logging_Off_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logging_Off_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A9080: SecureDesktopRequestLock
0x140095DC0: "onecoreuap\base\embedded\sys\loc" ??_C@_0EO@IKJNNKHO@onecoreuap?2base?2embedded?2sys?2loc@
0x140094610: " -pv" ??_C@_19HECNBBFP@?$AA?5?$AA?9?$AAp?$AAv?$AA?$AA@
0x140035150: NdrAsyncServerCall
0x1400AA0B0: "void (__cdecl* __ptr64 g_wil_details_RecordSRUMFeatureUsage)(unsigned int,unsigned int,unsigned int)" ?g_wil_details_RecordSRUMFeatureUsage@@3P6AXIII@ZEA
0x1400A7F08: "struct _StateMachineTransition * g_xWLGeneric_MPRChangeLogonNotify_Transition" ?g_xWLGeneric_MPRChangeLogonNotify_Transition@@3PAU_StateMachineTransition@@A
0x140005300: ??_G?$_Func_impl@U?$_Callable_obj@V<lambda_2f784ef15c303f2c8d3bec493a729414>@@$0A@@wistd@@V?$function_allocator@V?$_Func_class@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@@details@2@_NPEAX_KPEAX_KIU_Nil@2@U52@@wistd@@UEAAPEAXI@Z
0x140086258: "RtlUnsubscribeWnfNotificationWai" ??_C@_0CP@IJFJHHED@RtlUnsubscribeWnfNotificationWai@
0x140095670: "invalid type" ??_C@_1BK@BJIJFBKL@?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x140089CA8: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x140084D28: "__cdecl _imp_CloseThreadpool" __imp_CloseThreadpool
0x14009F7EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1400A5D70: "struct _StateMachineState g_xWLGeneric_Logon_ReportLastLogon_State" ?g_xWLGeneric_Logon_ReportLastLogon_State@@3U_StateMachineState@@A
0x140065D4C: "int __cdecl ValidateScreenSaver(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct SCREEN_SAVER_DATA * __ptr64)" ?ValidateScreenSaver@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@PEAUSCREEN_SAVER_DATA@@@Z
0x140059D34: "long __cdecl StringCbCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCatW@@YAJPEAG_KPEBG@Z
0x1400B1228: "__cdecl _imp_OpenEventLogW" __imp_OpenEventLogW
0x140024EA0: "unsigned long __cdecl ConnectToSubscriber(struct _NOTIFICATION_CLIENT_DEF * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64,int,unsigned long * __ptr64,int * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64 * __ptr64)" ?ConnectToSubscriber@@YAKPEAU_NOTIFICATION_CLIENT_DEF@@PEAU_NOTIFICATION_COMPONENT@@HPEAKPEAHPEAPEAU2@@Z
0x1400A9C08: "protected: static struct CEtwProviderT<void>::CETWApiSet CEtwProviderT<void>::g_etwApi" ?g_etwApi@?$CEtwProviderT@X@@1UCETWApiSet@1@A
0x1400A4C30: "struct _StateMachineState g_xWLGeneric_Killing_Scrnsaver_Locked_State" ?g_xWLGeneric_Killing_Scrnsaver_Locked_State@@3U_StateMachineState@@A
0x14005C170: "void __cdecl WLGeneric_Unlock_ReportLastLogon_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportLastLogon_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400364CC: IsWinStationFreeUserSessionInfoPresent
0x14005BC90: "void __cdecl WLGeneric_Unlock_LogonUser_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_LogonUser_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14005D554: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x140020340: WluiShutdown
0x1400A84D0: "struct _StateMachineTransition * g_xWLGeneric_DwmControl_Transition" ?g_xWLGeneric_DwmControl_Transition@@3PAU_StateMachineTransition@@A
0x14008B278: "CreateSession" ??_C@_1BM@EJENEKDD@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14002FD2C: "private: void __cdecl wil::details::EnabledStateManager::RecordCachedUsageUnderLock(void) __ptr64" ?RecordCachedUsageUnderLock@EnabledStateManager@details@wil@@AEAAXXZ
0x140094500: "%SystemRoot%\Debuggers\ntsd.exe" ??_C@_1EA@FFOMHKOG@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AAs?$AA?2?$AAn?$AAt?$AAs?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140033EA4: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::EnabledStateManager>::Destroy(void) __ptr64" ?Destroy@?$manually_managed_shutdown_aware_object@VEnabledStateManager@details@wil@@@wil@@QEAAXXZ
0x1400368D4: IsWTSEnumerateSessionsWPresent
0x140086644: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140090AD0: "AutoRestartShell" ??_C@_1CC@FAAECNAL@?$AAA?$AAu?$AAt?$AAo?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140092448: "0" ??_C@_13COJANIEC@?$AA0?$AA?$AA@
0x1400A57F0: "struct _StateMachineState g_xWLGeneric_InitiateDisconnect_State" ?g_xWLGeneric_InitiateDisconnect_State@@3U_StateMachineState@@A
0x1400A5170: "struct _StateMachineState g_xWLGeneric_Request_Unlock_Credz_State" ?g_xWLGeneric_Request_Unlock_Credz_State@@3U_StateMachineState@@A
0x140036D3A: "__cdecl _tailMerge_dsreg_dll" __tailMerge_dsreg_dll
0x140054800: WPP_SF_
0x140094350: "No" ??_C@_02JINPPBEP@No?$AA@
0x14006FBDC: "long __cdecl OOBE::CompleteTime::details::GetOOBECompleteKey(struct HKEY__ * __ptr64 * __ptr64)" ?GetOOBECompleteKey@details@CompleteTime@OOBE@@YAJPEAPEAUHKEY__@@@Z
0x1400A52B0: "struct _StateMachineState g_xWLGeneric_PostChangeActions_State" ?g_xWLGeneric_PostChangeActions_State@@3U_StateMachineState@@A
0x14006805C: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_AutomaticSignOnLockSetting>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_AutomaticSignOnLockSetting@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x140090258: " /s" ??_C@_17OMNLPKFB@?$AA?5?$AA?1?$AAs?$AA?$AA@
0x1400A44F0: "struct _StateMachineSignal const * __ptr64 * g_rpWLGeneric_Signals" ?g_rpWLGeneric_Signals@@3PAPEBU_StateMachineSignal@@A
0x1400A6C5C: "unsigned long * g_xWLGeneric_PowerTransition_Locked_ResetSignals" ?g_xWLGeneric_PowerTransition_Locked_ResetSignals@@3PAKA
0x1400A7AD0: "struct _StateMachineTransition * g_xWLGeneric_CAD_Transition" ?g_xWLGeneric_CAD_Transition@@3PAU_StateMachineTransition@@A
0x140088240: "LOGONSERVER" ??_C@_1BI@KCBMFKLE@?$AAL?$AAO?$AAG?$AAO?$AAN?$AAS?$AAE?$AAR?$AAV?$AAE?$AAR?$AA?$AA@
0x140084848: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14004F240: "public: virtual void * __ptr64 __cdecl OOBEHealthLogging::`scalar deleting destructor'(unsigned int) __ptr64" ??_GOOBEHealthLogging@@UEAAPEAXI@Z
0x1400955C0: "FveDisableDeviceLockoutState" ??_C@_0BN@DOHCLAG@FveDisableDeviceLockoutState?$AA@
0x1400903C0: "WluiDelayLocked" ??_C@_0BA@OAIOFAAA@WluiDelayLocked?$AA@
0x140084E80: "__cdecl _imp_GetEventLogInformation" __imp_GetEventLogInformation
0x140035570: IsEnableDisableElevationForSessionWorkerPresent
0x14009E450: ext-ms-win-session-winsta-l1-1-2_NULL_THUNK_DATA_DLN
0x140084908: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x14009E460: ext-ms-win-session-winsta-l1-1-3_NULL_THUNK_DATA_DLN
0x14009E440: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLN
0x140086048: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x140084B90: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140052724: "unsigned long __cdecl WlAccessibilityOnWinPlus(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnWinPlus@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x14009E4C0: profapi_NULL_THUNK_DATA_DLN
0x1400B1368: "__cdecl _imp_CloseWindowStation" __imp_CloseWindowStation
0x14002EE04: "public: __cdecl AutoProviderRegistrar::AutoProviderRegistrar(void (__cdecl*)(void),void (__cdecl*)(void)) __ptr64" ??0AutoProviderRegistrar@@QEAA@P6AXXZ0@Z
0x140084C08: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1400B12E8: "__cdecl _imp_UpdatePerUserSystemParameters" __imp_UpdatePerUserSystemParameters
0x14009DF28: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x14009F6B0: ext-ms-win-session-winsta-l1-1-2_NULL_THUNK_DATA_DLB
0x140084F60: api-ms-win-security-credentials-l1-1-0_NULL_THUNK_DATA
0x140009BC4: "void __cdecl wil::details_abi::RecordWnfUsageIndex(struct __WIL__WNF_STATE_NAME const * __ptr64,unsigned __int64,class wil::details_abi::RawUsageIndex const & __ptr64)" ?RecordWnfUsageIndex@details_abi@wil@@YAXPEBU__WIL__WNF_STATE_NAME@@_KAEBVRawUsageIndex@12@@Z
0x1400B14F8: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLA
0x14009F690: ext-ms-win-session-winsta-l1-1-3_NULL_THUNK_DATA_DLB
0x14009F670: ext-ms-win-session-winsta-l1-1-0_NULL_THUNK_DATA_DLB
0x1400B1518: ext-ms-win-session-winsta-l1-1-3_NULL_THUNK_DATA_DLA
0x140058488: "void __cdecl WlUninitializeEasLib(void)" ?WlUninitializeEasLib@@YAXXZ
0x14008FD44: "User " ??_C@_06KDOFGLJG@User?5?5?$AA@
0x1400B1508: ext-ms-win-session-winsta-l1-1-2_NULL_THUNK_DATA_DLA
0x140084888: "__cdecl _imp_LocalSize" __imp_LocalSize
0x14004F76C: "public: void __cdecl wil::details_abi::SemaphoreValue::Destroy(void) __ptr64" ?Destroy@SemaphoreValue@details_abi@wil@@QEAAXXZ
0x1400A9430: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x140084A70: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140091720: "winsta0\Default" ??_C@_1CA@CMOLKEPM@?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA0?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x14000BFB8: ??1?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AJPEAX@Z$1?LsaClose@@YAJ0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@wil@@QEAA@XZ
0x1400A9140: "unsigned __int64 g_ulLogoffEndTick" ?g_ulLogoffEndTick@@3_KA
0x1400957F0: "RegGetValueW(ThirdPartyEncryptio" ??_C@_1FO@POCGEGMA@?$AAR?$AAe?$AAg?$AAG?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAW?$AA?$CI?$AAT?$AAh?$AAi?$AAr?$AAd?$AAP?$AAa?$AAr?$AAt?$AAy?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo@
0x14008D4C0: "ProgramFilesDir (x86)" ??_C@_1CM@LPGAILIM@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x140087AF0: "UserManager" ??_C@_1BI@HNEHJHBL@?$AAU?$AAs?$AAe?$AAr?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x140084BA8: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1400A8E68: "__cdecl newmode" _newmode
0x140072D94: RegValChoice_Close
0x140094798: "RtlPublishWnfStateData" ??_C@_0BH@PDOMMAII@RtlPublishWnfStateData?$AA@
0x1400A8EA0: "__cdecl _hmod__wkscli_dll" __hmod__wkscli_dll
0x140084C50: "__cdecl _imp_TryEnterCriticalSection" __imp_TryEnterCriticalSection
0x140075D10: "void __cdecl HungSubscriberWarningCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?HungSubscriberWarningCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x1400846A0: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x14005CBA0: "void __cdecl AsyncLogoffCb(void * __ptr64,unsigned char)" ?AsyncLogoffCb@@YAXPEAXE@Z
0x140035160: NdrServerCallAll
0x14002F110: I_WMsgkSendMessage
0x1400B12F8: "__cdecl _imp_UnlockWindowStation" __imp_UnlockWindowStation
0x14002B71C: "unsigned long __cdecl WlStateMachineInitialize(void)" ?WlStateMachineInitialize@@YAKXZ
0x1400A4F30: "struct _StateMachineState g_xWLGeneric_Unlock_ReportFailedResult_State" ?g_xWLGeneric_Unlock_ReportFailedResult_State@@3U_StateMachineState@@A
0x1400A6AC0: "struct _StateMachineTransition * g_xWLGeneric_PseudoLogging_Off1_Transition" ?g_xWLGeneric_PseudoLogging_Off1_Transition@@3PAU_StateMachineTransition@@A
0x1400898F0: "ext-ms-win-session-winsta-l1-1-1" ??_C@_1EC@MGNPKKMM@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA1@
0x140087858: "MICROSOFT_AUTHENTICATION_PACKAGE" ??_C@_0CG@HOKJPAKA@MICROSOFT_AUTHENTICATION_PACKAGE@
0x140095328: "GetLockoutCounter" ??_C@_1CE@HNNIDKGJ@?$AAG?$AAe?$AAt?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1400850E8: "__cdecl _imp_iswspace" __imp_iswspace
0x1400850F0: "__cdecl _imp__initterm" __imp__initterm
0x140084658: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1400356DA: "__cdecl _imp_load_EnableDisableElevationForSessionWorker" __imp_load_EnableDisableElevationForSessionWorker
0x140036CAF: "__cdecl _tailMerge_wtsapi32_dll" __tailMerge_wtsapi32_dll
0x140032170: "int __cdecl WMsgPSPHandler(unsigned long,struct tagPOWERSTATEPARAMS * __ptr64,struct _RPC_ASYNC_STATE * __ptr64,long * __ptr64)" ?WMsgPSPHandler@@YAHKPEAUtagPOWERSTATEPARAMS@@PEAU_RPC_ASYNC_STATE@@PEAJ@Z
0x140087210: "Software\Microsoft\Windows\Curre" ??_C@_1IM@NIOGAMED@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400850A8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14009F88C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x14002FAF8: "public: static int __cdecl CandidateAccountManagerPolicy::IsSharedPCMode(void)" ?IsSharedPCMode@CandidateAccountManagerPolicy@@SAHXZ
0x140095B40: "SYSTEM\Setup" ??_C@_1BK@BHBNHDAL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1400922C0: "DefaultUserSid" ??_C@_1BO@NPONLIOO@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAU?$AAs?$AAe?$AAr?$AAS?$AAi?$AAd?$AA?$AA@
0x14008FAD0: WPP_ThisDir_CTLGUID_WinLogon
0x1400B1330: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLA
0x140035398: "__cdecl _tailMerge_profapi_dll" __tailMerge_profapi_dll
0x140004D70: "unsigned long __cdecl WluiAbortUIThread(void * __ptr64)" ?WluiAbortUIThread@@YAKPEAX@Z
0x1400A6C08: "struct _StateMachineTransition * g_xWLGeneric_ReconnectionUpdate_Transition" ?g_xWLGeneric_ReconnectionUpdate_Transition@@3PAU_StateMachineTransition@@A
0x140084BC0: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x140094C68: "_myVariantCopy" ??_C@_1BO@CICBNBNK@?$AA_?$AAm?$AAy?$AAV?$AAa?$AAr?$AAi?$AAa?$AAn?$AAt?$AAC?$AAo?$AAp?$AAy?$AA?$AA@
0x14008E1F9: ?_TlgEvent@?3???$ConsumeCacheSessionFailed@AEAK@WinlogonProvider@@SAXAEAK@Z@4U<unnamed-type-_TlgEvent>@?3???$ConsumeCacheSessionFailed@AEAK@1@SAX0@Z@B
0x1400A63A0: "struct _StateMachineSignal g_xWl_ShellReadyOrTimedOut_Signal" ?g_xWl_ShellReadyOrTimedOut_Signal@@3U_StateMachineSignal@@A
0x140029DD0: SignalManagerResetSignal
0x14007C220: "private: long __cdecl OutOfProcEncryptHandle::HResultFromRpcException(long) __ptr64" ?HResultFromRpcException@OutOfProcEncryptHandle@@AEAAJJ@Z
0x1400A6F00: "unsigned long * g_xWLGeneric_FindDestinationSession_Unlock_ResetSignals" ?g_xWLGeneric_FindDestinationSession_Unlock_ResetSignals@@3PAKA
0x140089DD8: "internal\sdk\inc\wil/Staging.h" ??_C@_0BP@KCGEFLDE@internal?2sdk?2inc?2wil?1Staging?4h?$AA@
0x140019E98: LUAGetUserType
0x14004FBBC: "unsigned long __cdecl wil::details::GetLastErrorFail(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64)" ?GetLastErrorFail@details@wil@@YAKPEAXIPEBD110@Z
0x14005D104: "private: void __cdecl OOBE::Health::details::OOBEScenarioEvents::SetHealthEventValueMember<bool>(bool & __ptr64,bool const & __ptr64) __ptr64" ??$SetHealthEventValueMember@_N@OOBEScenarioEvents@details@Health@OOBE@@AEAAXAEA_NAEB_N@Z
0x1400846D0: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x140075C48: "void __cdecl ConstructInitialMessageForSubscriber(struct _NOTIFICATION_CLIENT_DEF * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64,unsigned short * __ptr64,unsigned long)" ?ConstructInitialMessageForSubscriber@@YAXPEAU_NOTIFICATION_CLIENT_DEF@@PEAU_NOTIFICATION_COMPONENT@@PEAGK@Z
0x1400320A0: "__cdecl setargv" _setargv
0x1400A63C0: "struct _StateMachineSignal g_xWl_DifferentCredsAreRequired_Signal" ?g_xWl_DifferentCredsAreRequired_Signal@@3U_StateMachineSignal@@A
0x14008CF30: "TimeoutHandler_Locked" ??_C@_1CM@BOHELHIP@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA_?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x14008D138: "DelayLock_DisplayOffHandler" ??_C@_1DI@OFCJLOKK@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AA_?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAO?$AAf?$AAf?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA?$AA@
0x140069E8C: "unsigned long __cdecl ToResetIRTimeout(void)" ?ToResetIRTimeout@@YAKXZ
0x1400847D8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400AA0D8: "unsigned char g_fIgnoreLockEvent" ?g_fIgnoreLockEvent@@3EA
0x1400A7918: "unsigned long * g_xWLGeneric_StartSecureLua_ResetSignals" ?g_xWLGeneric_StartSecureLua_ResetSignals@@3PAKA
0x1400A4660: Microsoft_Windows_Shell_Core_Provider_Context
0x1400A8E70: "__cdecl _hmod__UXINIT_dll" __hmod__UXINIT_dll
0x140075AD8: MprLogonNotify
0x1400A9280: "unsigned long g_WinlogonStage" ?g_WinlogonStage@@3KA
0x14008FDE0: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400643E0: "void __cdecl WLGeneric_MPRChangeUnlockNotify_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeUnlockNotify_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140091FA0: "TRUE" ??_C@_04HCDDPBNL@TRUE?$AA@
0x14009FC60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1400A90D8: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x140034E2A: "__cdecl _imp_load_LsaGetLogonSessionData" __imp_load_LsaGetLogonSessionData
0x140089B70: "ext-ms-win-composition-init-l1-1" ??_C@_1EG@MIHBJCBD@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAm?$AAp?$AAo?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA?9?$AAi?$AAn?$AAi?$AAt?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x140079EC4: RegGetDword
0x1400A8E98: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x140094678: "EnableWebSignIn" ??_C@_1CA@FHELNDNI@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAW?$AAe?$AAb?$AAS?$AAi?$AAg?$AAn?$AAI?$AAn?$AA?$AA@
0x14002A2B0: SignalManagerClearSignal
0x1400A8FF8: "__cdecl _hmod__ext_ms_win_session_winsta_l1_1_2_dll" __hmod__ext_ms_win_session_winsta_l1_1_2_dll
0x1400A4FB0: "struct _StateMachineState g_xWLGeneric_Unlock_ReportLastLogon_State" ?g_xWLGeneric_Unlock_ReportLastLogon_State@@3U_StateMachineState@@A
0x14006F0A0: "void __cdecl CleanupUnlock(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?CleanupUnlock@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140087BE8: "Global\%08x%08x_%s" ??_C@_1CG@JLPPDDPD@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA_?$AA?$CF?$AAs?$AA?$AA@
0x140088088: "UserInitLogonServer" ??_C@_1CI@KBECCHCH@?$AAU?$AAs?$AAe?$AAr?$AAI?$AAn?$AAi?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA?$AA@
0x14008C500: "ChangeLogon_ReportResult" ??_C@_1DC@HKIDMMOJ@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x1400362D0: IsUMgrInformUserLogoffPresent
0x140084D58: "__cdecl _imp_SetThreadpoolThreadMaximum" __imp_SetThreadpoolThreadMaximum
0x140084F70: api-ms-win-security-credentials-l2-1-0_NULL_THUNK_DATA
0x140088230: "%s\%lu" ??_C@_1O@FDOFGPC@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x1400848F0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x14000AF04: "unsigned long __cdecl ShutdownWindowsWrapper(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?ShutdownWindowsWrapper@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x14006ED28: "__cdecl TlgDefineProvider_annotation__Tlgg_WinlogonProviderCoreProv" _TlgDefineProvider_annotation__Tlgg_WinlogonProviderCoreProv
0x1400A4FF0: "struct _StateMachineState g_xWLGeneric_Unlock_Checking_LastLogonPolicy_State" ?g_xWLGeneric_Unlock_Checking_LastLogonPolicy_State@@3U_StateMachineState@@A
0x14008BBC8: "TS_Disconnected" ??_C@_1CA@JKKBEIDF@?$AAT?$AAS?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x140084D50: "__cdecl _imp_TrySubmitThreadpoolCallback" __imp_TrySubmitThreadpoolCallback
0x1400A6510: "struct _StateMachineSignal g_xWinsrv_Timeout_Signal" ?g_xWinsrv_Timeout_Signal@@3U_StateMachineSignal@@A
0x1400A4970: "struct _StateMachineState g_xWLGeneric_DelayLock_DisplayOffHandler_State" ?g_xWLGeneric_DelayLock_DisplayOffHandler_State@@3U_StateMachineState@@A
0x1400B10B0: "__cdecl _imp_LsaRegisterLogonProcess" __imp_LsaRegisterLogonProcess
0x1400B1478: "__cdecl _imp_WinStationGetConnectionProperty" __imp_WinStationGetConnectionProperty
0x1400A6270: "struct _StateMachineState g_xWLGeneric_Start_State" ?g_xWLGeneric_Start_State@@3U_StateMachineState@@A
0x14007DA6C: "unsigned long __cdecl WluiDisplayTSDisconnectUI(unsigned long,unsigned long * __ptr64,int,unsigned int * __ptr64,int * __ptr64)" ?WluiDisplayTSDisconnectUI@@YAKKPEAKHPEAIPEAH@Z
0x140084D40: "__cdecl _imp_CloseThreadpoolCleanupGroupMembers" __imp_CloseThreadpoolCleanupGroupMembers
0x140090D10: WPP_a6063622bdfb3870d0a810d61469829e_Traceguids
0x14008A510: "unsigned short const * const RuntimeClass_Windows_Internal_AssignedAccess_AssignedAccessManager" ?RuntimeClass_Windows_Internal_AssignedAccess_AssignedAccessManager@@3QBGB
0x1400B1448: "__cdecl _imp_EnableDisableElevationForSessionWorker" __imp_EnableDisableElevationForSessionWorker
0x1400B12C8: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLA
0x1400B10E8: "__cdecl _imp_FreeContextBuffer" __imp_FreeContextBuffer
0x140084CB8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x140091670: "userinit.exe" ??_C@_1BK@KODGDAJG@?$AAu?$AAs?$AAe?$AAr?$AAi?$AAn?$AAi?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14008C5B0: "NTLMIsDisabledReminder" ??_C@_1CO@INEGKLEI@?$AAN?$AAT?$AAL?$AAM?$AAI?$AAs?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x1400A7BA0: "unsigned long * g_xWLGeneric_No_Unlock_Reconnect_ResetSignals" ?g_xWLGeneric_No_Unlock_Reconnect_ResetSignals@@3PAKA
0x140088EE0: "ext-ms-win-advapi32-eventlog-l1-" ??_C@_1EI@JPCJNLP@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9@
0x14007FBBC: "private: bool __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV0::IsValidProfile(struct HKEY__ * __ptr64) __ptr64" ?IsValidProfile@AssignedAccessConfigStoreV0@AssignedAccess@Internal@Windows@@AEAA_NPEAUHKEY__@@@Z
0x140094E30: "Lockout Metadata Invalid - Total" ??_C@_1GI@KOGFGAKH@?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AA?5?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AA?9?$AA?5?$AAT?$AAo?$AAt?$AAa?$AAl@
0x14007D454: "void __cdecl SetSetupExitCode(unsigned long * __ptr64)" ?SetSetupExitCode@@YAXPEAK@Z
0x1400A949C: "int g_fShutdownResolverDisabled" ?g_fShutdownResolverDisabled@@3HA
0x140023EC0: "unsigned long __cdecl InternalNotifyExecute(void * __ptr64,enum WLNOTIFICATION_ID,union _WLN_CLIENT_PARAMS * __ptr64,void (__cdecl*)(void * __ptr64,unsigned short const * __ptr64),void * __ptr64,unsigned short * __ptr64)" ?InternalNotifyExecute@@YAKPEAXW4WLNOTIFICATION_ID@@PEAT_WLN_CLIENT_PARAMS@@P6AX0PEBG@Z0PEAG@Z
0x1400056FC: "public: __cdecl wil::details_abi::RawUsageIndex::RawUsageIndex(unsigned short,unsigned short,enum wil::details_abi::CountSize,unsigned short,enum wil::details_abi::CountSize) __ptr64" ??0RawUsageIndex@details_abi@wil@@QEAA@GGW4CountSize@12@G0@Z
0x14007DB68: "unsigned long __cdecl WluiDisplayTSReconnectUI(unsigned long,unsigned long * __ptr64,unsigned int * __ptr64)" ?WluiDisplayTSReconnectUI@@YAKKPEAKPEAI@Z
0x140085200: "__cdecl _imp_NtCreateWnfStateName" __imp_NtCreateWnfStateName
0x140086F30: "Software\Policies\Microsoft\Wind" ??_C@_1GI@NKOFGMEP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x140086460: WLEvt_ThemesOnEarlyCreateSession_Stop
0x14009F8B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x140066140: "unsigned long __cdecl WLGeneric_Killing_Scrnsaver_Welcome_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Killing_Scrnsaver_Welcome_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084810: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x14009E1D8: ext-ms-win-ntuser-dialogbox-l1-1-0_NULL_THUNK_DATA_DLN
0x1400A5030: "struct _StateMachineState g_xWLGeneric_Unlock_ReportSuccessResult_State" ?g_xWLGeneric_Unlock_ReportSuccessResult_State@@3U_StateMachineState@@A
0x1400B1290: ext-ms-win-ntuser-dialogbox-l1-1-0_NULL_THUNK_DATA_DLA
0x1400703B8: "unsigned long __cdecl HandleSecurityOptions(struct _StateMachineCallContext * __ptr64,unsigned int)" ?HandleSecurityOptions@@YAKPEAU_StateMachineCallContext@@I@Z
0x1400603B8: "long __cdecl StringCchCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x14009F4B8: ext-ms-win-ntuser-dialogbox-l1-1-0_NULL_THUNK_DATA_DLB
0x14003508C: "__cdecl _imp_load_AuthziLogAuditEvent" __imp_load_AuthziLogAuditEvent
0x14009D998: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x140091CE0: "DontDisplayLogonHoursWarnings" ??_C@_1DM@BGMAJLCG@?$AAD?$AAo?$AAn?$AAt?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAL?$AAo?$AAg?$AAo?$AAn?$AAH?$AAo?$AAu?$AAr?$AAs?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AAs?$AA?$AA@
0x140086AD0: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x14000CDF0: "protected: virtual unsigned long __cdecl CDataStoreObject::Initialize(void) __ptr64" ?Initialize@CDataStoreObject@@MEAAKXZ
0x1400A5CB0: "struct _StateMachineState g_xWLGeneric_SequentialLogonPrompt_State" ?g_xWLGeneric_SequentialLogonPrompt_State@@3U_StateMachineState@@A
0x14007303C: RegValChoice_Open
0x140034B21: "__cdecl _imp_load_ThemesOnDisconnect" __imp_load_ThemesOnDisconnect
0x140004AA0: "void __cdecl wil::details::FeatureLoggingHook(unsigned int,struct FEATURE_LOGGED_TRAITS const * __ptr64,struct FEATURE_ERROR const * __ptr64,int,enum wil_ReportingKind const * __ptr64,enum wil_VariantReportingKind const * __ptr64,unsigned char,unsigned __int64)" ?FeatureLoggingHook@details@wil@@YAXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@Z
0x140035740: "__cdecl _imp_load_OpenEventLogW" __imp_load_OpenEventLogW
0x14009FBFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-stateseparation-helpers-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-stateseparation-helpers-l1-1-0
0x1400A6D80: "struct _StateMachineTransition * g_xWLGeneric_TimeoutHandler_Locked_Transition" ?g_xWLGeneric_TimeoutHandler_Locked_Transition@@3PAU_StateMachineTransition@@A
0x14001F850: StringCchPrintfW
0x140091620: "Nddeagnt.exe" ??_C@_1BK@NLPBDADF@?$AAN?$AAd?$AAd?$AAe?$AAa?$AAg?$AAn?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14008B230: "Logoff" ??_C@_1O@OFNOPKBL@?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AA?$AA@
0x140031B00: "public: __cdecl LibraryInitLock::LibraryInitLock(void) __ptr64" ??0LibraryInitLock@@QEAA@XZ
0x14006A58C: "void __cdecl _TlgWriteActivityAutoStop<0,4>(struct _TlgProvider_t const * __ptr64,struct _GUID const * __ptr64)" ??$_TlgWriteActivityAutoStop@$0A@$03@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z
0x140035DC0: "__cdecl _imp_load_LockWindowStation" __imp_load_LockWindowStation
0x1400602C0: "long __cdecl StringCbLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCbLengthW@@YAJPEBG_KPEA_K@Z
0x14009FBC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x140086A88: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x14007E6E0: WmsgSendMessage
0x14008FC48: WLDiagEvt_UserShellLaunch_Info
0x14000CD20: "public: virtual unsigned long __cdecl CGlobalStore::Initialize(void) __ptr64" ?Initialize@CGlobalStore@@UEAAKXZ
0x140033530: I_WMsgkSendPSPMessage
0x1400586FC: "void * __ptr64 __cdecl GetNextProcessFromJob(void * __ptr64)" ?GetNextProcessFromJob@@YAPEAXPEAX@Z
0x14009F490: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A63B0: "struct _StateMachineSignal g_xWl_DelayedSwitchDesktop_Signal" ?g_xWl_DelayedSwitchDesktop_Signal@@3U_StateMachineSignal@@A
0x14008BD28: "Wl_DifferentCredsAreRequired" ??_C@_1DK@BOKODNAC@?$AAW?$AAl?$AA_?$AAD?$AAi?$AAf?$AAf?$AAe?$AAr?$AAe?$AAn?$AAt?$AAC?$AAr?$AAe?$AAd?$AAs?$AAA?$AAr?$AAe?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x140085EA0: "system\CurrentControlSet\Control" ??_C@_1GO@IMHEIDEL@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14006ED28: "__cdecl TlgDefineProvider_annotation__Tlgg_WinlogonProviderProv" _TlgDefineProvider_annotation__Tlgg_WinlogonProviderProv
0x14008CE98: "ChangingUnlockPassword" ??_C@_1CO@MILCDDLK@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAi?$AAn?$AAg?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x1400A9058: "__cdecl _onexitend" __onexitend
0x140009550: "private: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsageInternal(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsageInternal@RawUsageIndex@details_abi@wil@@AEAA_NPEAX_K01I@Z
0x140087618: "D:(A;;3;;;AU)" ??_C@_1BM@GLNMBKOF@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AA3?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$AA@
0x1400849E0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x140084F08: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x1400A59B0: "struct _StateMachineState g_xWLGeneric_NTLMIsDisabledReminder_State" ?g_xWLGeneric_NTLMIsDisabledReminder_State@@3U_StateMachineState@@A
0x140086F98: "NoLockScreen" ??_C@_1BK@DKBAMJAL@?$AAN?$AAo?$AAL?$AAo?$AAc?$AAk?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x140073504: "unsigned long __cdecl EASTamperingDetected(class CFveAutoPtr * __ptr64,int * __ptr64)" ?EASTamperingDetected@@YAKPEAVCFveAutoPtr@@PEAH@Z
0x1400850B8: "__cdecl _imp__exit" __imp__exit
0x1400592AC: WPP_SF_DDqqD
0x140034A77: "__cdecl unlock" _unlock
0x140035D48: IsUnlockWindowStationPresent
0x1400A7178: "unsigned long * g_xWLGeneric_SequentialUnlockPrompt_ResetSignals" ?g_xWLGeneric_SequentialUnlockPrompt_ResetSignals@@3PAKA
0x14001ED20: "void __cdecl WLEventWrite(struct _EVENT_DESCRIPTOR const & __ptr64,unsigned long)" ?WLEventWrite@@YAXAEBU_EVENT_DESCRIPTOR@@K@Z
0x14008FA6A: ?__hInner_Meta@?1???0StaticHandle@CandidateAccountManagerPolicyTraceProvider@@QEAA@XZ@4U<unnamed-type-__hInner_Meta>@?1???012@QEAA@XZ@B
0x140089030: "ext-ms-win-devmgmt-policy-l1-1-0" ??_C@_1EC@FDPJDLFB@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAd?$AAe?$AAv?$AAm?$AAg?$AAm?$AAt?$AA?9?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x140085580: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140062150: "void __cdecl WLGeneric_Logged_On_Disconnected_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Disconnected_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008D2A8: WNF_UMGR_SIHOST_READY
0x1400A95C8: g_pSidAnyPackage
0x14008CA00: "MPRChangeNotify" ??_C@_1CA@NPLIBOFJ@?$AAM?$AAP?$AAR?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x140084608: "__cdecl _imp_RpcServerUseProtseqEpW" __imp_RpcServerUseProtseqEpW
0x14000F840: "unsigned long __cdecl WLGeneric_Start_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Start_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14005ED48: "long __cdecl wil::details::in1diag3::Log_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Log_Hr@in1diag3@details@wil@@YAJPEAXIPEBDJ@Z
0x140001720: "private: bool __cdecl wil::details::FeatureStateManager::EnsureStateData(void) __ptr64" ?EnsureStateData@FeatureStateManager@details@wil@@AEAA_NXZ
0x14008CEF8: "ChangeUnlock_ReportResult" ??_C@_1DE@OHGAJHJH@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x1400A6E50: "unsigned long * g_xWLGeneric_ChangingUnlockPassword_ResetSignals" ?g_xWLGeneric_ChangingUnlockPassword_ResetSignals@@3PAKA
0x1400A5370: "struct _StateMachineState g_xWLGeneric_ChangingPassword_State" ?g_xWLGeneric_ChangingPassword_State@@3U_StateMachineState@@A
0x140072788: "unsigned short __cdecl WluipCopyToUnicodeString(unsigned short * __ptr64,unsigned short * __ptr64,struct _UNICODE_STRING * __ptr64)" ?WluipCopyToUnicodeString@@YAGPEAG0PEAU_UNICODE_STRING@@@Z
0x140088690: "SYSTEM\CurrentControlSet\Control" ??_C@_1FE@LHEBMHAC@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1400845A8: KERNELBASE_NULL_THUNK_DATA
0x14007AE10: "public: unsigned long __cdecl CFveAutoPtr::Initialize(int,int * __ptr64) __ptr64" ?Initialize@CFveAutoPtr@@QEAAKHPEAH@Z
0x1400AA4B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUvzhUklorxbvmtrmvUvcgmoryUlyquivUznwGEUkxsOlyq@EASExtn" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUvzhUklorxbvmtrmvUvcgmoryUlyquivUznwGEUkxsOlyq@EASExtn
0x140085030: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x140055980: "unsigned long __cdecl WLGeneric_Request_Change_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Change_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14007FA5C: "private: long __cdecl Windows::Internal::AssignedAccess::AAManagerHelper::GetAssignedAccessTypeForUserWithoutGroup(unsigned short const * __ptr64,enum Windows::Internal::AssignedAccess::AssignedAccessType * __ptr64) __ptr64" ?GetAssignedAccessTypeForUserWithoutGroup@AAManagerHelper@AssignedAccess@Internal@Windows@@AEAAJPEBGPEAW4AssignedAccessType@234@@Z
0x1400A7B88: "unsigned long * g_xWLGeneric_ShellRestart_ResetSignals" ?g_xWLGeneric_ShellRestart_ResetSignals@@3PAKA
0x140084B78: api-ms-win-core-shutdown-l1-1-1_NULL_THUNK_DATA
0x140090328: "different" ??_C@_09BEJCKEDA@different?$AA@
0x140035BDD: "__cdecl _imp_load_UpdatePerUserSystemParameters" __imp_load_UpdatePerUserSystemParameters
0x1400A8310: "struct _StateMachineTransition * g_xWLGeneric_Logon_Checking_LastLogonPolicy_Transition" ?g_xWLGeneric_Logon_Checking_LastLogonPolicy_Transition@@3PAU_StateMachineTransition@@A
0x14005D854: "int __cdecl AllocAndGetAlternateShell(unsigned short * __ptr64 * __ptr64)" ?AllocAndGetAlternateShell@@YAHPEAPEAG@Z
0x140060338: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x140031544: "unsigned long __cdecl InitializeCustomThreadPool(void)" ?InitializeCustomThreadPool@@YAKXZ
0x140071438: "unsigned long __cdecl LogoffFlagsToShutdownFlags(unsigned long)" ?LogoffFlagsToShutdownFlags@@YAKK@Z
0x140018550: "private: int __cdecl CUser::IsGoodbyeAllowed(void) __ptr64" ?IsGoodbyeAllowed@CUser@@AEAAHXZ
0x140084B10: "__cdecl _imp_RegGetValueA" __imp_RegGetValueA
0x140036DE0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x140087400: "LaunchUserOOBE" ??_C@_1BO@BMABGLOJ@?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAU?$AAs?$AAe?$AAr?$AAO?$AAO?$AAB?$AAE?$AA?$AA@
0x14008FD1C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x140086450: WLEvt_ThemesOnLogoff_Start
0x140009DB8: "public: void __cdecl wil::details_abi::UsageIndexes::Record(void) __ptr64" ?Record@UsageIndexes@details_abi@wil@@QEAAXXZ
0x1400366D2: "__cdecl _imp_load_WinStationPreCreateGlassReplacementSessionEx" __imp_load_WinStationPreCreateGlassReplacementSessionEx
0x140094210: "1f2a047b-96d8-488e-bc9b-1d5e%08X" ??_C@_1EC@KKGEPHNA@?$AA1?$AAf?$AA2?$AAa?$AA0?$AA4?$AA7?$AAb?$AA?9?$AA9?$AA6?$AAd?$AA8?$AA?9?$AA4?$AA8?$AA8?$AAe?$AA?9?$AAb?$AAc?$AA9?$AAb?$AA?9?$AA1?$AAd?$AA5?$AAe?$AA?$CF?$AA0?$AA8?$AAX@
0x140084A40: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400366DE: "__cdecl _tailMerge_ext_ms_win_session_winsta_l1_1_2_dll" __tailMerge_ext_ms_win_session_winsta_l1_1_2_dll
0x140034ED3: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x140051880: "int __cdecl wil_details_SetHasNotificationStateCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetHasNotificationStateCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x140089C00: "__cdecl _sz_credui_dll" __sz_credui_dll
0x140084D20: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x140037300: WMsg_midl_user_free
0x140032060: PfServiceNotifyCallback
0x1400A6E90: "struct _StateMachineTransition * g_xWLGeneric_Request_UnlockChange_Credz_Transition" ?g_xWLGeneric_Request_UnlockChange_Credz_Transition@@3PAU_StateMachineTransition@@A
0x140078360: WlSecureDesktoprCredmanRestoreRequest
0x14006A9D8: "public: unsigned short * __ptr64 __cdecl CUser::GetLastLogonInfoMessage(void) __ptr64" ?GetLastLogonInfoMessage@CUser@@QEAAPEAGXZ
0x140090260: "scrnsave.scr /s" ??_C@_1CA@DKEDKLCE@?$AAs?$AAc?$AAr?$AAn?$AAs?$AAa?$AAv?$AAe?$AA?4?$AAs?$AAc?$AAr?$AA?5?$AA?1?$AAs?$AA?$AA@
0x140020BEC: WlSecureDesktopiShutdown
0x140085320: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x140090150: "ScreenSaveActive" ??_C@_1CC@IBNFMNGE@?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAS?$AAa?$AAv?$AAe?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x140034AA2: "__cdecl _tailMerge_uxinit_dll" __tailMerge_uxinit_dll
0x1400B1578: profapi_NULL_THUNK_DATA_DLA
0x14004F240: "public: virtual void * __ptr64 __cdecl WinlogonProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GWinlogonProvider@@UEAAPEAXI@Z
0x14008FFF0: WPP_6c327c41df4d3ae81c959c249335a0cd_Traceguids
0x14008ED28: ?_TlgEvent@?M@??StopActivity@AuthenticateUser@WinlogonProvider@@MEAAXXZ@4U<unnamed-type-_TlgEvent>@?M@??123@MEAAXXZ@B
0x1400A9370: g_pThreadPool
0x140081070: "const WinlogonProvider::`vftable'" ??_7WinlogonProvider@@6B@
0x1400A6480: "struct _StateMachineSignal g_xSecure_LuaStart_Signal" ?g_xSecure_LuaStart_Signal@@3U_StateMachineSignal@@A
0x140084E70: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x1400A6AE0: "struct _StateMachineTransition * g_xWLGeneric_Logging_Off_Transition" ?g_xWLGeneric_Logging_Off_Transition@@3PAU_StateMachineTransition@@A
0x140037300: "void __cdecl MemoryFree(void * __ptr64)" ?MemoryFree@@YAXPEAX@Z
0x14007B2A8: "unsigned long __cdecl PackEASLockoutData(struct _USER_COUNT_ENTRY * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?PackEASLockoutData@@YAKPEAU_USER_COUNT_ENTRY@@KPEAPEAEPEAK@Z
0x140084F30: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x14009E150: credui_NULL_THUNK_DATA_DLN
0x140095930: "RegOpenKeyEx(SYSTEM\CurrentContr" ??_C@_1GG@MBHFDGMO@?$AAR?$AAe?$AAg?$AAO?$AAp?$AAe?$AAn?$AAK?$AAe?$AAy?$AAE?$AAx?$AA?$CI?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr@
0x1400553DC: "unsigned long __cdecl Request_Change_Credz(struct _StateMachineCallContext * __ptr64,int)" ?Request_Change_Credz@@YAKPEAU_StateMachineCallContext@@H@Z
0x140030190: "void __cdecl Checking_LastLogonPolicy(struct _StateMachineCallContext * __ptr64,int)" ?Checking_LastLogonPolicy@@YAXPEAU_StateMachineCallContext@@H@Z
0x140085550: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x140036324: "__cdecl _imp_load_UMgrInformFlags" __imp_load_UMgrInformFlags
0x1400B1130: "__cdecl _imp_CreateEnvironmentBlock" __imp_CreateEnvironmentBlock
0x1400A6C18: "struct _StateMachineTransition * g_xWLGeneric_AbortPendingLockRequest_Transition" ?g_xWLGeneric_AbortPendingLockRequest_Transition@@3PAU_StateMachineTransition@@A
0x14009F7A8: credui_NULL_THUNK_DATA_DLB
0x1400B1208: credui_NULL_THUNK_DATA_DLA
0x140063620: ?reset@?$unique_storage@U?$resource_policy@PEAUHKEY__@@P6AJPEAU1@@Z$1?RegCloseKey@@YAJ0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAUHKEY__@@@Z
0x140084CD8: "__cdecl _imp_GetProductInfo" __imp_GetProductInfo
0x140072D6C: "public: void __cdecl SH<void * __ptr64,class SH_HANDLE>::Reset(void) __ptr64" ?Reset@?$SH@PEAXVSH_HANDLE@@@@QEAAXXZ
0x14003522E: "__cdecl _imp_load_AuthziInitializeAuditParams" __imp_load_AuthziInitializeAuditParams
0x1400367FF: "__cdecl _imp_load_WinStationIsSessionPermitted" __imp_load_WinStationIsSessionPermitted
0x1400A8EC8: "__cdecl _hmod__profapi_dll" __hmod__profapi_dll
0x140085520: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x1400905C0: "AnyoneReadOOBECompleted" ??_C@_1DA@ILABDBKB@?$AAA?$AAn?$AAy?$AAo?$AAn?$AAe?$AAR?$AAe?$AAa?$AAd?$AAO?$AAO?$AAB?$AAE?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?$AA@
0x1400949B0: "OrchestratePublishWnfOobeUserLog" ??_C@_1PI@DBNDFBOM@?$AAO?$AAr?$AAc?$AAh?$AAe?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAW?$AAn?$AAf?$AAO?$AAo?$AAb?$AAe?$AAU?$AAs?$AAe?$AAr?$AAL?$AAo?$AAg@
0x140090BF8: WNF_NASV_USER_PRESENT
0x140079790: "public: virtual void * __ptr64 __cdecl wil::ResultException::`vector deleting destructor'(unsigned int) __ptr64" ??_EResultException@wil@@UEAAPEAXI@Z
0x1400A9038: "__cdecl _hmod__WTSAPI32_dll" __hmod__WTSAPI32_dll
0x140087600: "LogonUI.exe" ??_C@_1BI@LFOBLIOF@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14008FDF0: "/start narrator" ??_C@_1CA@PHPNHCBE@?$AA?1?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAn?$AAa?$AAr?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x1400919F8: "DisableChangePassword" ??_C@_1CM@CBMDJKDF@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x14007A808: "private: void __cdecl CFveAutoPtr::Free(void) __ptr64" ?Free@CFveAutoPtr@@AEAAXXZ
0x1400364CC: IsWinStationQueryInformationWPresent
0x14006DF00: "unsigned short * __ptr64 __cdecl AllocAndExpandEnvironmentStrings(unsigned short const * __ptr64)" ?AllocAndExpandEnvironmentStrings@@YAPEAGPEBG@Z
0x1400A8724: "long volatile `protected: static bool __cdecl wil::TraceLoggingProvider::WasAlreadyReportedToTelemetry(long)'::`2'::s_lastFailureSeen" ?s_lastFailureSeen@?1??WasAlreadyReportedToTelemetry@TraceLoggingProvider@wil@@KA_NJ@Z@4JC
0x140027784: "public: unsigned long __cdecl CUser::CreateProcessW(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64,int) __ptr64" ?CreateProcessW@CUser@@QEAAKPEBGPEAGKPEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@H@Z
0x1400922E0: "NoLockScreenSlideshow" ??_C@_1CM@GHABHEBJ@?$AAN?$AAo?$AAL?$AAo?$AAc?$AAk?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAS?$AAl?$AAi?$AAd?$AAe?$AAs?$AAh?$AAo?$AAw?$AA?$AA@
0x14008CFE8: "Locked_Disconnected" ??_C@_1CI@PMDMIPBO@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x14009DC88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_misc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_misc_l1_1_0_dll
0x140090F58: "Microsoft.LogonHoursWarning" ??_C@_1DI@BJMCPKIL@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAL?$AAo?$AAg?$AAo?$AAn?$AAH?$AAo?$AAu?$AAr?$AAs?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x14009F370: AUTHZ_NULL_THUNK_DATA_DLB
0x14005AE50: "void __cdecl WLGeneric_Locked_Disconnected_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Disconnected_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084780: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x14008CD00: "Logon_ReportSuccessResult_Unlock" ??_C@_1EC@GKEPEAGL@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAS?$AAu?$AAc?$AAc?$AAe?$AAs?$AAs?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk@
0x14008C3A8: "SequentialLogonPrompt" ??_C@_1CM@GBMAJIJE@?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA?$AA@
0x1400040B4: "public: void __cdecl wil::details::EnabledStateManager::QueueBackgroundUsageReporting(unsigned int,union wil_details_FeaturePropertyCache & __ptr64) __ptr64" ?QueueBackgroundUsageReporting@EnabledStateManager@details@wil@@QEAAXIAEATwil_details_FeaturePropertyCache@@@Z
0x14005ECA4: ?LockExclusive@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@AEAA?AV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAU_RTL_SRWLOCK@@P6AXPEAU1@@Z$1?ReleaseSRWLockExclusive@@YAX0@ZU?$integral_constant@_K$00@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@@2@XZ
0x14009E278: ext-ms-win-ntuser-window-l1-1-0_NULL_THUNK_DATA_DLN
0x140034F5E: "__cdecl _tailMerge_wkscli_dll" __tailMerge_wkscli_dll
0x14006E7E0: "unsigned long __cdecl ShutdownWindowsWorker(enum _SHUTDOWN_ACTION,int,unsigned long * __ptr64)" ?ShutdownWindowsWorker@@YAKW4_SHUTDOWN_ACTION@@HPEAK@Z
0x1400A7650: "struct _StateMachineTransition * g_xWLGeneric_PostChangeActions_Transition" ?g_xWLGeneric_PostChangeActions_Transition@@3PAU_StateMachineTransition@@A
0x14005C628: "public: class WinlogonProvider * __ptr64 __cdecl wil::details::static_lazy<class WinlogonProvider>::get(void (__cdecl*)(void)) __ptr64" ?get@?$static_lazy@VWinlogonProvider@@@details@wil@@QEAAPEAVWinlogonProvider@@P6AXXZ@Z
0x14008FC28: WLDiagEvt_SystemBootScenario_Stop
0x14008B9A8: "Winsrv_PowerMsgShow" ??_C@_1CI@PPFFPCPF@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAP?$AAo?$AAw?$AAe?$AAr?$AAM?$AAs?$AAg?$AAS?$AAh?$AAo?$AAw?$AA?$AA@
0x140091B00: "LastNotificationShownLessThan4Ho" ??_C@_1EO@OLDDIGHF@?$AAL?$AAa?$AAs?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAh?$AAo?$AAw?$AAn?$AAL?$AAe?$AAs?$AAs?$AAT?$AAh?$AAa?$AAn?$AA4?$AAH?$AAo@
0x140084CD0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400898A0: "ext-ms-win-session-winsta-l1-1-0" ??_C@_1EC@HOGDMNKJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x140085638: "__cdecl _xi_a" __xi_a
0x140088320: WLEvt_DwmpNotifyUserLogon_Stop
0x140084CE0: api-ms-win-core-sysinfo-l1-2-0_NULL_THUNK_DATA
0x140084728: api-ms-win-core-appcompat-l1-1-0_NULL_THUNK_DATA
0x1400A79D8: "unsigned long * g_xWLGeneric_SecureCredUI_Operation_ResetSignals" ?g_xWLGeneric_SecureCredUI_Operation_ResetSignals@@3PAKA
0x14006992C: "void __cdecl UpdateRegistryItem(struct _REG_CHANGE * __ptr64)" ?UpdateRegistryItem@@YAXPEAU_REG_CHANGE@@@Z
0x140005258: "void __cdecl wil::details::WilApi_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApi_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x14008BDE0: "Wl_LogonFromUnlock" ??_C@_1CG@EAOCKCEM@?$AAW?$AAl?$AA_?$AAL?$AAo?$AAg?$AAo?$AAn?$AAF?$AAr?$AAo?$AAm?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140095280: "Transforming the fvewarpper obje" ??_C@_1IE@FIDBKGHC@?$AAT?$AAr?$AAa?$AAn?$AAs?$AAf?$AAo?$AAr?$AAm?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAf?$AAv?$AAe?$AAw?$AAa?$AAr?$AAp?$AAp?$AAe?$AAr?$AA?5?$AAo?$AAb?$AAj?$AAe@
0x140095308: "Not Initialized" ??_C@_1CA@EJFLNKMD@?$AAN?$AAo?$AAt?$AA?5?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAd?$AA?$AA@
0x140084A80: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x14006A710: "long __cdecl DisplayRequestActivityWNFCallback(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?DisplayRequestActivityWNFCallback@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x1400AA180: Microsoft_Windows_DeplorchEnableBits
0x14005DDC8: "unsigned long __cdecl DisplayWaitDisconnectStatusMessage(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?DisplayWaitDisconnectStatusMessage@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x140084C98: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140084788: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x14008C9D8: "ChangingPassword" ??_C@_1CC@JFJEEFG@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAi?$AAn?$AAg?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x1400920B8: "OOBECompleteTimestamp" ??_C@_1CM@FOENILPO@?$AAO?$AAO?$AAB?$AAE?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AAs?$AAt?$AAa?$AAm?$AAp?$AA?$AA@
0x1400847A0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1400A9680: "struct _RTL_RESOURCE g_EvalLock" ?g_EvalLock@@3U_RTL_RESOURCE@@A
0x14008B130: "EndShell" ??_C@_1BC@FFDJLPBG@?$AAE?$AAn?$AAd?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140068564: "public: void __cdecl CSession::SetAutoLock(enum CSession::AutoLockType,enum CSession::AutoLockStartReason) __ptr64" ?SetAutoLock@CSession@@QEAAXW4AutoLockType@1@W4AutoLockStartReason@1@@Z
0x1400A7C88: "struct _StateMachineTransition * g_xWLGeneric_InitiateDisconnect_Transition" ?g_xWLGeneric_InitiateDisconnect_Transition@@3PAU_StateMachineTransition@@A
0x14006B540: "unsigned long __cdecl GetLogonHoursExtension(class CUser * __ptr64,int)" ?GetLogonHoursExtension@@YAKPEAVCUser@@H@Z
0x1400AA21C: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x1400320A0: "__cdecl matherr" _matherr
0x1400A62D0: "struct _StateMachineSignal g_xWLGeneric_App_Launcher_Signal" ?g_xWLGeneric_App_Launcher_Signal@@3U_StateMachineSignal@@A
0x140086C38: "Events" ??_C@_1O@DLLPAGKI@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x1400B1018: "__cdecl _imp_AuthziLogAuditEvent" __imp_AuthziLogAuditEvent
0x14000FF00: "unsigned long __cdecl SetWinlogonDesktopSecurity(struct HDESK__ * __ptr64)" ?SetWinlogonDesktopSecurity@@YAKPEAUHDESK__@@@Z
0x1400A5F70: "struct _StateMachineState g_xWLGeneric_DwmControl_State" ?g_xWLGeneric_DwmControl_State@@3U_StateMachineState@@A
0x1400A78D8: "struct _StateMachineTransition * g_xWLGeneric_AppLauncher_Transition" ?g_xWLGeneric_AppLauncher_Transition@@3PAU_StateMachineTransition@@A
0x14008FED0: "DisplaySwitch.exe 0" ??_C@_1CI@INHLMMCG@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA0?$AA?$AA@
0x140067FA0: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_AutomaticSignOnLockSetting>::GetCachedFeatureEnabledState(bool)" ?GetCachedFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_AutomaticSignOnLockSetting@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_N@Z
0x1400A76B0: "struct _StateMachineTransition * g_xWLGeneric_Change_ReportResult_Transition" ?g_xWLGeneric_Change_ReportResult_Transition@@3PAU_StateMachineTransition@@A
0x14008A038: WPP_ebe2f0b4c9173918502cfe6852eb812d_Traceguids
0x14006E8CC: "unsigned long __cdecl WLEventRegister(struct _GUID const & __ptr64)" ?WLEventRegister@@YAKAEBU_GUID@@@Z
0x140091510: "-UserSwitch" ??_C@_1BI@PFMICPOP@?$AA?9?$AAU?$AAs?$AAe?$AAr?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?$AA@
0x140085060: "__cdecl _imp__unlock" __imp__unlock
0x1400A7100: "struct _StateMachineTransition * g_xWLGeneric_Unlock_ReportFailedResult_Transition" ?g_xWLGeneric_Unlock_ReportFailedResult_Transition@@3PAU_StateMachineTransition@@A
0x1400357CB: "__cdecl _imp_load_CloseEventLog" __imp_load_CloseEventLog
0x14000F108: "public: void __cdecl CUser::RestoreNetworkConnections(unsigned long) __ptr64" ?RestoreNetworkConnections@CUser@@QEAAXK@Z
0x1400B1540: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLA
0x14008BEC8: "Input_Timeout" ??_C@_1BM@NCALPNMM@?$AAI?$AAn?$AAp?$AAu?$AAt?$AA_?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x1400A8788: "unsigned short * g_wszRestartShellCommand" ?g_wszRestartShellCommand@@3PAGA
0x14009F728: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLB
0x1400853D0: "__cdecl _imp_RtlQueryWnfStateData" __imp_RtlQueryWnfStateData
0x140084DC8: "__cdecl _imp_RoActivateInstance" __imp_RoActivateInstance
0x14009E488: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLN
0x14007F748: "public: __cdecl wil::com_ptr_t<struct Windows::Internal::AssignedAccess::IAssignedAccessConfiguration,struct wil::err_returncode_policy>::~com_ptr_t<struct Windows::Internal::AssignedAccess::IAssignedAccessConfiguration,struct wil::err_returncode_policy>(void) __ptr64" ??1?$com_ptr_t@UIAssignedAccessConfiguration@AssignedAccess@Internal@Windows@@Uerr_returncode_policy@wil@@@wil@@QEAA@XZ
0x1400894D0: "ext-ms-win-ntuser-private-l1-3-3" ??_C@_1EC@CNEKAFKD@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA3?$AA?9?$AA3@
0x14001FB20: WluiReportResult
0x1400354C8: IsThemesOnEarlyCreateSessionPresent
0x1400853C8: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x14007BF90: "public: virtual long __cdecl OutOfProcEncryptHandle::EasIsDeviceLockable(void * __ptr64) __ptr64" ?EasIsDeviceLockable@OutOfProcEncryptHandle@@UEAAJPEAX@Z
0x140031810: "void __cdecl WLGeneric_Logged_On_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008FD50: "atbroker.exe" ??_C@_1BK@MLNMKBFJ@?$AAa?$AAt?$AAb?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14006BEA0: "int __cdecl IsUserStillActive(unsigned __int64)" ?IsUserStillActive@@YAH_K@Z
0x14009DDC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll
0x14006FF5C: "unsigned long __cdecl HandlePowerRequestFromLogonUI(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned int,enum LogonUIPowerButtonSource,int * __ptr64)" ?HandlePowerRequestFromLogonUI@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@IW4LogonUIPowerButtonSource@@PEAH@Z
0x1400A9040: "__cdecl _hmod__dsreg_dll" __hmod__dsreg_dll
0x14002BBF0: "void __cdecl WLGeneric_DwmControl_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DwmControl_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140084D78: "__cdecl _imp_QueueUserWorkItem" __imp_QueueUserWorkItem
0x14008BE80: "LogonUI_Cancel" ??_C@_1BO@JBDMJPDE@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA_?$AAC?$AAa?$AAn?$AAc?$AAe?$AAl?$AA?$AA@
0x140086FC0: "Software\Microsoft\Windows\Curre" ??_C@_1JI@CDMGBPII@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14006E500: "void __cdecl WLGeneric_AccessNotify_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AccessNotify_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x1400314F4: "public: unsigned __int64 __cdecl Timer::Stop(void) __ptr64" ?Stop@Timer@@QEAA_KXZ
0x1400851F0: "__cdecl _imp_RtlGetCurrentServiceSessionId" __imp_RtlGetCurrentServiceSessionId
0x14008CF98: "PostUnlockActions" ??_C@_1CE@HGLKMDHA@?$AAP?$AAo?$AAs?$AAt?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14009DE08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_3_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_3_dll
0x140084F48: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1400B1598: "__cdecl _imp_NetGetJoinInformation" __imp_NetGetJoinInformation
0x140002AFC: "public: void __cdecl CSession::ResetAutoLock(enum CSession::AutoLockStopReason,unsigned long) __ptr64" ?ResetAutoLock@CSession@@QEAAXW4AutoLockStopReason@1@K@Z
0x1400953E8: "SetLockoutCounter" ??_C@_1CE@KEMJAAKC@?$AAS?$AAe?$AAt?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x14008F5AB: ?_TlgEvent@?M@??StopActivity@ShouldLogoffOtherUsers@WinlogonProvider@@MEAAXXZ@4U<unnamed-type-_TlgEvent>@?M@??123@MEAAXXZ@B
0x140058F28: "int __cdecl TerminateJob(struct _WINLOGON_JOB * __ptr64,unsigned long)" ?TerminateJob@@YAHPEAU_WINLOGON_JOB@@K@Z
0x140094B64: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x14008C690: "InitiateLock_On_Resume" ??_C@_1CO@NBAFEPAE@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAL?$AAo?$AAc?$AAk?$AA_?$AAO?$AAn?$AA_?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AA?$AA@
0x140091460: "LanguageChoicePending" ??_C@_1CM@IBBOALKO@?$AAL?$AAa?$AAn?$AAg?$AAu?$AAa?$AAg?$AAe?$AAC?$AAh?$AAo?$AAi?$AAc?$AAe?$AAP?$AAe?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?$AA@
0x14008E0AF: ?_TlgEvent@?3???$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z@4U<unnamed-type-_TlgEvent>@?3???$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAX01@Z@B
0x14008EACF: ?_TlgEvent@?3???$_TlgWriteActivityAutoStop@$0IAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z@4U<unnamed-type-_TlgEvent>@?3???$_TlgWriteActivityAutoStop@$0IAAAAAAAAAAA@$04@@YAX01@Z@B
0x140005798: RtlULongLongAdd
0x14007E608: WluiWaitForWebDialogComplete
0x14009E210: ext-ms-win-ntuser-misc-l1-1-0_NULL_THUNK_DATA_DLN
0x1400A80A0: "struct _StateMachineTransition * g_xWLGeneric_NotifyLogon_Transition" ?g_xWLGeneric_NotifyLogon_Transition@@3PAU_StateMachineTransition@@A
0x140050DF8: "protected: void __cdecl wil::TraceLoggingProvider::ReportTraceLoggingFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?ReportTraceLoggingFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@2@@Z
0x1400869B8: "Font Driver Host" ??_C@_1CC@EBNINKLO@?$AAF?$AAo?$AAn?$AAt?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x140076FB8: WlSecureDesktoppIsRequestInProgress
0x140084738: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x1400B12B8: "__cdecl _imp_ExitWindowsEx" __imp_ExitWindowsEx
0x140085310: "__cdecl _imp_NtOpenThreadToken" __imp_NtOpenThreadToken
0x140086520: WLEvt_DwmpNotifyUserLogoff_Stop
0x1400255A0: "void __cdecl GetSubscriberDisplayName(struct _NOTIFICATION_CLIENT_DEF * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64)" ?GetSubscriberDisplayName@@YAXPEAU_NOTIFICATION_CLIENT_DEF@@PEAU_NOTIFICATION_COMPONENT@@@Z
0x14003615E: "__cdecl _imp_load_SwitchDesktop" __imp_load_SwitchDesktop
0x1400A8580: "struct _StateMachineTransition * g_xWLGeneric_TimeoutHandler_Welcome_Transition" ?g_xWLGeneric_TimeoutHandler_Welcome_Transition@@3PAU_StateMachineTransition@@A
0x140091708: "ntsd %s %s" ??_C@_1BG@BGBBKINK@?$AAn?$AAt?$AAs?$AAd?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400638A8: WPP_SF_Di
0x1400AA288: "int g_wil_details_preventOnDemandStagingConfigReads" ?g_wil_details_preventOnDemandStagingConfigReads@@3HA
0x14000BD94: "public: static int __cdecl CandidateAccountManagerPolicy::IsCandidateUserSessionEnabled(void)" ?IsCandidateUserSessionEnabled@CandidateAccountManagerPolicy@@SAHXZ
0x1400516FC: ?reset@?$unique_storage@U?$resource_policy@PEAU_TP_TIMER@@P6AXPEAU1@@Z$1?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@@details@wil@@QEAAXPEAU_TP_TIMER@@@Z
0x1400B1560: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x140058538: WPP_SF_dl
0x14003693A: "__cdecl _imp_load_WTSQueryUserToken" __imp_load_WTSQueryUserToken
0x1400259F0: "unsigned long __cdecl CallNotificationSubscriber(struct _NOTIFICATION_COMPONENT * __ptr64,enum WLNOTIFICATION_ID,union _WLN_CLIENT_PARAMS * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?CallNotificationSubscriber@@YAKPEAU_NOTIFICATION_COMPONENT@@W4WLNOTIFICATION_ID@@PEAT_WLN_CLIENT_PARAMS@@PEAG3@Z
0x14000CF98: "public: virtual __cdecl CGlobalStore::~CGlobalStore(void) __ptr64" ??1CGlobalStore@@UEAA@XZ
0x140067B54: "public: void __cdecl CSession::ForceSwitchDesktopToDefaultDesktop(int * __ptr64) __ptr64" ?ForceSwitchDesktopToDefaultDesktop@CSession@@QEAAXPEAH@Z
0x1400100FC: "unsigned long __cdecl WlAccessibilityCreateSessionKeyWithPermissions(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?WlAccessibilityCreateSessionKeyWithPermissions@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAPEAUHKEY__@@@Z
0x1400548C0: WPP_SF_DD
0x1400548C0: WPP_SF_dd
0x1400727E8: WPP_SF_dD
0x140088778: "Wlclntfy" ??_C@_1BC@IBMNGLGC@?$AAW?$AAl?$AAc?$AAl?$AAn?$AAt?$AAf?$AAy?$AA?$AA@
0x140094AA8: "<unknown>" ??_C@_1BE@ELICABCK@?$AA?$DM?$AAu?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$DO?$AA?$AA@
0x140071CB0: "public: void __cdecl WinlogonProvider::ShouldLogoffOtherUsers::StartActivity(void) __ptr64" ?StartActivity@ShouldLogoffOtherUsers@WinlogonProvider@@QEAAXXZ
0x14006E2DC: "void __cdecl WLEventWriteStartStopScenario(bool,struct _EVENT_DESCRIPTOR const & __ptr64,struct _GUID const & __ptr64,unsigned long,unsigned long,unsigned long,unsigned long)" ?WLEventWriteStartStopScenario@@YAX_NAEBU_EVENT_DESCRIPTOR@@AEBU_GUID@@KKKK@Z
0x140084668: "__cdecl _imp_RpcServerUseProtseqW" __imp_RpcServerUseProtseqW
0x14008BF50: "App_Launcher" ??_C@_1BK@KIBBPOBN@?$AAA?$AAp?$AAp?$AA_?$AAL?$AAa?$AAu?$AAn?$AAc?$AAh?$AAe?$AAr?$AA?$AA@
0x140084FC8: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x1400A9170: "int (__cdecl* __ptr64 g_pfnNamedEscape)(struct HDC__ * __ptr64,unsigned short * __ptr64,int,int,char const * __ptr64,int,char * __ptr64)" ?g_pfnNamedEscape@@3P6AHPEAUHDC__@@PEAGHHPEBDHPEAD@ZEA
0x140086650: "Software\Microsoft\Windows NT\Cu" ??_C@_1HG@CFIEKGMJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140069D8C: WPP_SF_DS
0x140065450: WPP_SF_dq
0x140087530: "3BDB59A0-D736-4D44-9074-C1EE%08X" ??_C@_1EC@FOIPJOLI@?$AA3?$AAB?$AAD?$AAB?$AA5?$AA9?$AAA?$AA0?$AA?9?$AAD?$AA7?$AA3?$AA6?$AA?9?$AA4?$AAD?$AA4?$AA4?$AA?9?$AA9?$AA0?$AA7?$AA4?$AA?9?$AAC?$AA1?$AAE?$AAE?$AA?$CF?$AA0?$AA8?$AAX@
0x1400A95D8: g_pSidCreator
0x140053744: "unsigned long __cdecl WlAccessibilitypCompareConfiguration(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64)" ?WlAccessibilitypCompareConfiguration@@YAKPEAUHKEY__@@0@Z
0x1400621A0: "unsigned long __cdecl WLGeneric_Logged_On_Reconnect_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Reconnect_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400AA278: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::userStoreProbe" ?userStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x140026E70: CreateSecurityDescriptor
0x14004F210: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x140086420: WLEvt_ThemesOnLogonPost_Stop
0x14006986C: "void __cdecl SetSetupShutdownActionWorker(int * __ptr64,int * __ptr64,enum _SHUTDOWN_ACTION * __ptr64)" ?SetSetupShutdownActionWorker@@YAXPEAH0PEAW4_SHUTDOWN_ACTION@@@Z
0x1400A86C0: "struct _StateMachineTransition * g_xWLGeneric_Start_Transition" ?g_xWLGeneric_Start_Transition@@3PAU_StateMachineTransition@@A
0x14002C75C: "bool __cdecl wil::ProcessShutdownInProgress(void)" ?ProcessShutdownInProgress@wil@@YA_NXZ
0x140058C0C: "unsigned long __cdecl StartProcessInJob(struct _PROCESS_INFORMATION * __ptr64,unsigned long,struct _WINLOGON_JOB * __ptr64 * __ptr64)" ?StartProcessInJob@@YAKPEAU_PROCESS_INFORMATION@@KPEAPEAU_WINLOGON_JOB@@@Z
0x1400888C8: GUID_LOCK_CONSOLE_ON_WAKE
0x1400722B4: "void __cdecl StopOobeLoggingElevatedOperations(void)" ?StopOobeLoggingElevatedOperations@@YAXXZ
0x1400A6F90: "struct _StateMachineTransition * g_xWLGeneric_SequentialLogonPrompt_Unlock_Transition" ?g_xWLGeneric_SequentialLogonPrompt_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x14006CCA0: "void __cdecl StopAndReleaseTimer(struct _TP_TIMER * __ptr64 * __ptr64)" ?StopAndReleaseTimer@@YAXPEAPEAU_TP_TIMER@@@Z
0x140094B70: "Extra EasEngineUninitialize call" ??_C@_1EC@EJDDHGH@?$AAE?$AAx?$AAt?$AAr?$AAa?$AA?5?$AAE?$AAa?$AAs?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?5?$AAc?$AAa?$AAl?$AAl@
0x140091658: "nddeagnt" ??_C@_1BC@JMFKKPEM@?$AAn?$AAd?$AAd?$AAe?$AAa?$AAg?$AAn?$AAt?$AA?$AA@
0x140086110: "Software\Policies\Microsoft\Wind" ??_C@_1FG@FLNEDBHD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x1400A4AF0: "struct _StateMachineState g_xWLGeneric_Locked_Reconnect_State" ?g_xWLGeneric_Locked_Reconnect_State@@3U_StateMachineState@@A
0x14006373C: McGenEventWrite
0x1400A4178: WPP_GLOBAL_Control
0x14001475C: "public: unsigned long __cdecl CUser::GenerateLogoffInitiatedAudit(void) __ptr64" ?GenerateLogoffInitiatedAudit@CUser@@QEAAKXZ
0x140009950: "public: bool __cdecl wil::details_abi::UsageIndexProperty::Write(unsigned char * __ptr64 & __ptr64,unsigned char * __ptr64)const __ptr64" ?Write@UsageIndexProperty@details_abi@wil@@QEBA_NAEAPEAEPEAE@Z
0x1400507A8: "public: void __cdecl wil::details_abi::FeatureStateData::ProcessShutdown(void) __ptr64" ?ProcessShutdown@FeatureStateData@details_abi@wil@@QEAAXXZ
0x14009DE48: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x140086530: WLEvt_DwmpNotifyUserLogoff_Start
0x1400854C8: "__cdecl _imp_RtlGetActiveConsoleId" __imp_RtlGetActiveConsoleId
0x140084700: "__cdecl _imp_NotifyBootConfigStatus" __imp_NotifyBootConfigStatus
0x140003EB0: "void __cdecl wil::details::WilApiImpl_UnsubscribeFeatureStateChangeNotification(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?WilApiImpl_UnsubscribeFeatureStateChangeNotification@details@wil@@YAXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x1400AA2B4: "unsigned long g_BreakinProcessId" ?g_BreakinProcessId@@3KA
0x1400371D0: "public: void __cdecl CUser::StartUserPresencePolling(bool) __ptr64" ?StartUserPresencePolling@CUser@@QEAAX_N@Z
0x1400A90F0: "long (__cdecl* __ptr64 g_wil_details_pfnNtQueryWnfStateData)(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?g_wil_details_pfnNtQueryWnfStateData@@3P6AJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@ZEA
0x140051730: ?reset@?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@QEAAXPEAX@Z
0x140086C60: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14009F864: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14009F8C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x1400B1490: "__cdecl _imp_WinStationQueryInformationW" __imp_WinStationQueryInformationW
0x140004190: "unsigned long __cdecl WLGeneric_Request_Unlock_Credz_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Unlock_Credz_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140089DF8: PROPERTY_TYPE_GET_LOGON_DIALOG_TIMEOUT
0x140086C10: "Not initialized" ??_C@_1CA@LHINCELJ@?$AAN?$AAo?$AAt?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAd?$AA?$AA@
0x140033940: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x140084970: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x140091570: "EnableFirstLogonAnimation" ??_C@_1DE@KLJEPNOO@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAF?$AAi?$AAr?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAA?$AAn?$AAi?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140081090: "const wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vftable'" ??_7?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@6B@
0x1400A6B20: "struct _StateMachineTransition * g_xWLGeneric_InitiateForceLogoff_Transition" ?g_xWLGeneric_InitiateForceLogoff_Transition@@3PAU_StateMachineTransition@@A
0x140071234: "int __cdecl IsLockScreenSlideshowAutoLockDisabled(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?IsLockScreenSlideshowAutoLockDisabled@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140091278: "LocalService" ??_C@_1BK@INGGECPM@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140054824: WPP_SF_D
0x140054824: WPP_SF_d
0x1400848E8: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x140034568: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1400AA2B0: "unsigned long g_AttachProcessId" ?g_AttachProcessId@@3KA
0x14009FAF8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-winsvc-l1-1-0
0x140019820: "unsigned long __cdecl WlStateMachineSetSignal(unsigned long,struct _StateMachineSignalData * __ptr64)" ?WlStateMachineSetSignal@@YAKKPEAU_StateMachineSignalData@@@Z
0x14008CAC0: "LockScreen" ??_C@_1BG@KIOHFOPB@?$AAL?$AAo?$AAc?$AAk?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x140089660: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@OAMAPFNA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x1400A4C70: "struct _StateMachineState g_xWLGeneric_TimeoutHandler_Locked_State" ?g_xWLGeneric_TimeoutHandler_Locked_State@@3U_StateMachineState@@A
0x14006817C: "public: unsigned long __cdecl CSession::GetInactivitySettings(struct _INACTIVITY_SETTINGS * __ptr64) __ptr64" ?GetInactivitySettings@CSession@@QEAAKPEAU_INACTIVITY_SETTINGS@@@Z
0x14008FFA0: "sethc.exe %ld" ??_C@_1BM@FFBNBOHA@?$AAs?$AAe?$AAt?$AAh?$AAc?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?$CF?$AAl?$AAd?$AA?$AA@
0x1400864C0: WLEvt_RestoringNetConnections_Stop
0x140085128: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x140068484: "public: int __cdecl CSession::LockWindowStation(void) __ptr64" ?LockWindowStation@CSession@@QEAAHXZ
0x14002A840: "public: unsigned long __cdecl CUser::CreatePreNotifyEnvironment(unsigned short * __ptr64 * __ptr64) __ptr64" ?CreatePreNotifyEnvironment@CUser@@QEAAKPEAPEAG@Z
0x1400641F0: "unsigned long __cdecl WLGeneric_MPRChangeLogonNotify_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeLogonNotify_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A81A0: "struct _StateMachineTransition * g_xWLGeneric_SequentialLogonPrompt_Transition" ?g_xWLGeneric_SequentialLogonPrompt_Transition@@3PAU_StateMachineTransition@@A
0x140084630: "__cdecl _imp_RpcRaiseException" __imp_RpcRaiseException
0x1400846A8: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x140088D30: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x1400B1178: "__cdecl _imp_ThemesOnEarlyCreateSession" __imp_ThemesOnEarlyCreateSession
0x14005C1C8: "void __cdecl WlLockGetDelayLockInterval(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WlLockGetDelayLockInterval@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@PEAK@Z
0x140004E50: WMsg_midl_user_allocate
0x140088D00: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_2_dll" __sz_api_ms_win_security_lsalookup_l1_1_2_dll
0x140084DC0: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x1400AA100: Microsoft_Windows_Shell_CoreEnableBits
0x1400AA108: "struct _WINLOGON_JOB * __ptr64 __ptr64 g_pJob" ?g_pJob@@3PEAU_WINLOGON_JOB@@EA
0x1400A7070: "struct _StateMachineTransition * g_xWLGeneric_Logon_Checking_LastLogonPolicy_Unlock_Transition" ?g_xWLGeneric_Logon_Checking_LastLogonPolicy_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x14009FA80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x14007BE40: "public: virtual long __cdecl InProcEncryptHandle::EasDisableDeviceLockoutState(void * __ptr64) __ptr64" ?EasDisableDeviceLockoutState@InProcEncryptHandle@@UEAAJPEAX@Z
0x140084D88: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x1400336C0: "void __cdecl SleepWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?SleepWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x14003662F: "__cdecl _tailMerge_ext_ms_win_session_winsta_l1_1_3_dll" __tailMerge_ext_ms_win_session_winsta_l1_1_3_dll
0x140085330: "__cdecl _imp_RtlFreeSid" __imp_RtlFreeSid
0x1400283F0: "unsigned long __cdecl UpdateEnvironment(void * __ptr64 * __ptr64)" ?UpdateEnvironment@@YAKPEAPEAX@Z
0x140095580: "FveCloseVolume" ??_C@_0P@EMKHMBJF@FveCloseVolume?$AA@
0x14008E229: ?_TlgEvent@?3???$ConnectCandidateUser@AEA_NAEA_N_NAEA_NAEAK@WinlogonProvider@@SAXAEA_N0$$QEA_N0AEAK@Z@4U<unnamed-type-_TlgEvent>@?3???$ConnectCandidateUser@AEA_NAEA_N_NAEA_NAEAK@1@SAX00102@Z@B
0x14004F240: "protected: virtual void * __ptr64 __cdecl wil::TraceLoggingProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GTraceLoggingProvider@wil@@MEAAPEAXI@Z
0x1400797C8: "long __cdecl wil::details::ReportFailure_NtStatus(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_NtStatus@details@wil@@YAJPEAXIPEBD110W4FailureType@2@J@Z
0x140091C30: "Software\Microsoft\Windows\Curre" ??_C@_1IK@JPNIGJOJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400A5070: "struct _StateMachineState g_xWLGeneric_Unlock_LogonUser_State" ?g_xWLGeneric_Unlock_LogonUser_State@@3U_StateMachineState@@A
0x140051060: "unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)" ?RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z
0x14008D518: "CommonFilesDir (x86)" ??_C@_1CK@FONJNPCI@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?5?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x140091E48: "DynamicLock" ??_C@_1BI@MKIKHEPL@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x14000BE0C: "public: static int __cdecl CandidateAccountManagerPolicy::IsAutoAadConnectEnabled(void)" ?IsAutoAadConnectEnabled@CandidateAccountManagerPolicy@@SAHXZ
0x140021490: EnablePrivilege
0x140085118: "__cdecl _imp___dllonexit" __imp___dllonexit
0x14007C4C0: "private: virtual long __cdecl OutOfProcEncryptHandle::_Initialize(void) __ptr64" ?_Initialize@OutOfProcEncryptHandle@@EEAAJXZ
0x140095138: "RegDeleteTree" ??_C@_1BM@GGCEPJA@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAT?$AAr?$AAe?$AAe?$AA?$AA@
0x140063B10: "unsigned long __cdecl MprChangeNotifyHelper(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?MprChangeNotifyHelper@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x1400A7CC8: "struct _StateMachineTransition * g_xWLGeneric_Logged_On_Resume_Transition" ?g_xWLGeneric_Logged_On_Resume_Transition@@3PAU_StateMachineTransition@@A
0x14006F008: "void __cdecl CleanupLogon(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?CleanupLogon@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400A7D88: "unsigned long * g_xWLGeneric_Logged_On_ResetSignals" ?g_xWLGeneric_Logged_On_ResetSignals@@3PAKA
0x14008D048: "Locked_Reconnect" ??_C@_1CC@BKLAGLKH@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA_?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140090C48: WPP_7c625c09e6e13ef7985035f4902c9316_Traceguids
0x1400A9278: "int g_fSessionEndEventRequired" ?g_fSessionEndEventRequired@@3HA
0x140091608: "Userinit" ??_C@_1BC@PNKEHAID@?$AAU?$AAs?$AAe?$AAr?$AAi?$AAn?$AAi?$AAt?$AA?$AA@
0x14008D5D8: "CommonProgramW6432" ??_C@_1CG@NMMNPOME@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAW?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x1400B13B8: "__cdecl _imp_SystemParametersInfoW" __imp_SystemParametersInfoW
0x14008C150: "AccessNotifyAsUser" ??_C@_1CG@JKKKFEJO@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAA?$AAs?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x1400853A8: "__cdecl _imp_NtSetIRTimer" __imp_NtSetIRTimer
0x140088260: "USERDOMAIN" ??_C@_1BG@NDPCAAIC@?$AAU?$AAS?$AAE?$AAR?$AAD?$AAO?$AAM?$AAA?$AAI?$AAN?$AA?$AA@
0x1400231D8: "unsigned long __cdecl AceListSetWinstaSecurity(struct HWINSTA__ * __ptr64,void * __ptr64,int)" ?AceListSetWinstaSecurity@@YAKPEAUHWINSTA__@@PEAXH@Z
0x14000CE38: "public: __cdecl CSession::CSession(void) __ptr64" ??0CSession@@QEAA@XZ
0x140001B78: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x140084BE0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x1400A64A0: "struct _StateMachineSignal g_xWinsrv_Kill_Scrnsaver_Signal" ?g_xWinsrv_Kill_Scrnsaver_Signal@@3U_StateMachineSignal@@A
0x140033E50: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::EnabledStateManager>::Construct(void) __ptr64" ?Construct@?$manually_managed_shutdown_aware_object@VEnabledStateManager@details@wil@@@wil@@QEAAXXZ
0x1400A5B70: "struct _StateMachineState g_xWLGeneric_Request_LogonChange_Credz_State" ?g_xWLGeneric_Request_LogonChange_Credz_State@@3U_StateMachineState@@A
0x140033F98: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x14008D4F0: "ProgramFiles(x86)" ??_C@_1CE@EAPHGJBI@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x14006ED28: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x140085478: "__cdecl _imp_RtlRegisterWait" __imp_RtlRegisterWait
0x1400A7FD8: "struct _StateMachineTransition * g_xWLGeneric_ShellStartup_Transition" ?g_xWLGeneric_ShellStartup_Transition@@3PAU_StateMachineTransition@@A
0x140036170: "__cdecl _imp_load_CreateWindowStationW" __imp_load_CreateWindowStationW
0x14000EAE8: "public: void __cdecl CSession::WaitForAsyncSwitchDesktop(void) __ptr64" ?WaitForAsyncSwitchDesktop@CSession@@QEAAXXZ
0x1400B11C8: "__cdecl _imp_LsaLookupUserAccountType" __imp_LsaLookupUserAccountType
0x140027C10: "unsigned long __cdecl SetupBasicEnvironment(void * __ptr64 * __ptr64)" ?SetupBasicEnvironment@@YAKPEAPEAX@Z
0x140056084: "public: void * __ptr64 __cdecl CGlobalStore::GetNotifyConfig(int,unsigned short const * __ptr64) __ptr64" ?GetNotifyConfig@CGlobalStore@@QEAAPEAXHPEBG@Z
0x140081518: "const OutOfProcEncryptHandle::`vftable'" ??_7OutOfProcEncryptHandle@@6B@
0x140089000: "__cdecl _sz_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __sz_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x14007D4E4: "void __cdecl SetSetupShutdownAction(int * __ptr64,enum _SHUTDOWN_ACTION * __ptr64)" ?SetSetupShutdownAction@@YAXPEAHPEAW4_SHUTDOWN_ACTION@@@Z
0x1400A60F0: "struct _StateMachineState g_xWLGeneric_PowerTransition_Welcome_State" ?g_xWLGeneric_PowerTransition_Welcome_State@@3U_StateMachineState@@A
0x1400359B1: "__cdecl _imp_load_MessageBoxW" __imp_load_MessageBoxW
0x1400B1028: "__cdecl _imp_AuthziInitializeAuditParams" __imp_AuthziInitializeAuditParams
0x140010EC0: "void __cdecl SwitchDesktopWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?SwitchDesktopWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x1400814E0: "const type_info::`vftable'" ??_7type_info@@6B@
0x140084DB0: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x1400852E0: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x14009F828: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1400A7290: "struct _StateMachineTransition * g_xWLGeneric_Unlock_ReportSuccessResult_Transition" ?g_xWLGeneric_Unlock_ReportSuccessResult_Transition@@3PAU_StateMachineTransition@@A
0x1400B13F8: "__cdecl _imp_UMgrGetCachedCredentials" __imp_UMgrGetCachedCredentials
0x14004F240: "public: virtual void * __ptr64 __cdecl CandidateAccountManagerPolicyTraceProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ECandidateAccountManagerPolicyTraceProvider@@UEAAPEAXI@Z
0x140034D7B: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x140084D98: "__cdecl _imp_SystemTimeToTzSpecificLocalTime" __imp_SystemTimeToTzSpecificLocalTime
0x1400AA0C0: "void (__cdecl* __ptr64 g_wil_details_recordFeatureUsage)(unsigned int,enum wil_details_ServiceReportingKind,unsigned int,union wil_details_FeaturePropertyCache * __ptr64,struct wil_details_RecordUsageResult * __ptr64)" ?g_wil_details_recordFeatureUsage@@3P6AXIW4wil_details_ServiceReportingKind@@IPEATwil_details_FeaturePropertyCache@@PEAUwil_details_RecordUsageResult@@@ZEA
0x14009F790: MPR_NULL_THUNK_DATA_DLB
0x14003564F: "__cdecl _imp_load_NotifyInteractiveSessionLogoff" __imp_load_NotifyInteractiveSessionLogoff
0x14008BBE8: "TS_Reconnected" ??_C@_1BO@PJMHMGMC@?$AAT?$AAS?$AA_?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x140084C48: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x140011BC0: "public: void __cdecl CSession::SwitchDesktop(enum _DESKTOPID,int * __ptr64,unsigned long,unsigned long) __ptr64" ?SwitchDesktop@CSession@@QEAAXW4_DESKTOPID@@PEAHKK@Z
0x140085230: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x140084FA0: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x140018F70: "void __cdecl RecordLastLogoffEndTime(void)" ?RecordLastLogoffEndTime@@YAXXZ
0x1400A7D58: "struct _StateMachineTransition * g_xWLGeneric_NTLMIsDisabledReminder_Transition" ?g_xWLGeneric_NTLMIsDisabledReminder_Transition@@3PAU_StateMachineTransition@@A
0x14009FA58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-shutdown-l1-1-1
0x140004C50: "void __cdecl WLGeneric_LockScreen_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_LockScreen_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14007BD20: "public: static long __cdecl EncryptHandle::CreateEncryptHandle(class EncryptHandle * __ptr64 * __ptr64,enum EncryptHandlerType)" ?CreateEncryptHandle@EncryptHandle@@SAJPEAPEAV1@W4EncryptHandlerType@@@Z
0x14009DAA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x14008CE20: "FindDestinationSession_Unlock" ??_C@_1DM@NECBHDAH@?$AAF?$AAi?$AAn?$AAd?$AAD?$AAe?$AAs?$AAt?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140034390: "__cdecl _security_check_cookie" __security_check_cookie
0x140034D33: "__cdecl _imp_load_LsaCallAuthenticationPackage" __imp_load_LsaCallAuthenticationPackage
0x14008FB68: WLEvt_AssignedAccessUnlock_Info
0x14007DC38: "void __cdecl WluiiDestroySharedEvents(void)" ?WluiiDestroySharedEvents@@YAXXZ
0x140004DA0: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXXZ
0x140085630: "__cdecl _xc_z" __xc_z
0x1400337A0: "unsigned long __cdecl WinLogonBootShell(int)" ?WinLogonBootShell@@YAKH@Z
0x140085210: "__cdecl _imp_RtlQueryResourcePolicy" __imp_RtlQueryResourcePolicy
0x14008C320: "Logon_ReportFailedResult" ??_C@_1DC@FAFCICII@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x1400634EC: "public: bool __cdecl wil::details::shared_buffer::create(void const * __ptr64,unsigned __int64) __ptr64" ?create@shared_buffer@details@wil@@QEAA_NPEBX_K@Z
0x14009F8F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1400AA4F0: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x140089700: "__cdecl _sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __sz_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x140050B90: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x140084A68: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14007098C: "unsigned long __cdecl InternalInitiateShutdown(unsigned char,unsigned long,unsigned long,unsigned short * __ptr64,int)" ?InternalInitiateShutdown@@YAKEKKPEAGH@Z
0x14008FC38: CREDUIWIN_STRUCTURE_TYPE_SSPIPFC
0x1400B1088: NaturalAuthClient_NULL_THUNK_DATA_DLA
0x14008FBA8: WLEvt_PinResetUnlock_Info
0x140085F10: "SimulateDebugSession" ??_C@_1CK@MCCEJCDO@?$AAS?$AAi?$AAm?$AAu?$AAl?$AAa?$AAt?$AAe?$AAD?$AAe?$AAb?$AAu?$AAg?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14008DD14: ?_TlgEvent@?CE@??FeatureLoggingHook@details@wil@@YAXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@Z@4U<unnamed-type-_TlgEvent>@?CE@??123@YAXI01H23E4@Z@B
0x1400B1230: ext-ms-win-advapi32-eventlog-l1-1-0_NULL_THUNK_DATA_DLA
0x140084910: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x140094860: "OrchestratePublishWnfDwordData: " ??_C@_1LM@IOIHPMOG@?$AAO?$AAr?$AAc?$AAh?$AAe?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAW?$AAn?$AAf?$AAD?$AAw?$AAo?$AAr?$AAd?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5@
0x14007BE20: "public: virtual long __cdecl InProcEncryptHandle::EasCloseVolume(void * __ptr64) __ptr64" ?EasCloseVolume@InProcEncryptHandle@@UEAAJPEAX@Z
0x140084A28: "__cdecl _imp_CreateProcessAsUserW" __imp_CreateProcessAsUserW
0x140056560: "void __cdecl WLGeneric_TO_Disconnected_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TO_Disconnected_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140095CB0: ""%s" /flags:0x%lx /state0:0x%lx " ??_C@_1JE@CKPFPNDD@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?1?$AAf?$AAl?$AAa?$AAg?$AAs?$AA?3?$AA0?$AAx?$AA?$CF?$AAl?$AAx?$AA?5?$AA?1?$AAs?$AAt?$AAa?$AAt?$AAe?$AA0?$AA?3?$AA0?$AAx?$AA?$CF?$AAl?$AAx?$AA?5@
0x1400A5DB0: "struct _StateMachineState g_xWLGeneric_Logon_Checking_LastLogonPolicy_State" ?g_xWLGeneric_Logon_Checking_LastLogonPolicy_State@@3U_StateMachineState@@A
0x14008FBB8: WLEvt_EASSpeedBumpReachedWarning_Info
0x140086CA8: "DontDisplayLastUserName" ??_C@_1DA@NHMMEDEO@?$AAD?$AAo?$AAn?$AAt?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAL?$AAa?$AAs?$AAt?$AAU?$AAs?$AAe?$AAr?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14005C6D0: WPP_SF_lllll
0x1400018E0: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetPointer(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?TryGetPointer@SemaphoreValue@details_abi@wil@@SAJPEBGPEAPEAX@Z
0x1400A6924: g_header_init_StagingEventsInitialize
0x140034B7B: "__cdecl _imp_load_ThemesOnTerminateSession" __imp_load_ThemesOnTerminateSession
0x140091AC0: "RtlTimeToSecondsSince1980Failed" ??_C@_1EA@OFLPELOL@?$AAR?$AAt?$AAl?$AAT?$AAi?$AAm?$AAe?$AAT?$AAo?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AAS?$AAi?$AAn?$AAc?$AAe?$AA1?$AA9?$AA8?$AA0?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x14007CC68: "int __cdecl ClaimSetupLaunch(void)" ?ClaimSetupLaunch@@YAHXZ
0x140084C70: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x140085240: "__cdecl _imp_NtDuplicateToken" __imp_NtDuplicateToken
0x1400874E0: WLEvt_WinSqmUserLogin
0x140087480: WLEvt_WinSqmUserLogoff
0x1400A6928: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x140002370: "unsigned long __cdecl WLGeneric_PostUnlockActions_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PostUnlockActions_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400362D0: IsUMgrInformFlagsPresent
0x1400A9348: PfnEventWrite
0x14005985C: "int __cdecl AttemptSequentialLogon(struct _WLSM_GLOBAL_CONTEXT * __ptr64,void * __ptr64)" ?AttemptSequentialLogon@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@PEAX@Z
0x140018390: "int __cdecl IsLockScreenDisabled(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?IsLockScreenDisabled@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x14008E8C9: ?_TlgEvent@?M@??Stop@AuthenticateUser@WinlogonProvider@@QEAAXJJ@Z@4U<unnamed-type-_TlgEvent>@?M@??123@QEAAXJJ@Z@B
0x1400A99F0: g_TpEnvironment
0x140091B80: "LsaLookupUserAccountTypeFailed" ??_C@_1DO@ELMBDOON@?$AAL?$AAs?$AAa?$AAL?$AAo?$AAo?$AAk?$AAu?$AAp?$AAU?$AAs?$AAe?$AAr?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAT?$AAy?$AAp?$AAe?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140034EC7: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x140002654: "void __cdecl AsyncLogoffSupportSessionLocked(int)" ?AsyncLogoffSupportSessionLocked@@YAXH@Z
0x14009DE28: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_2_dll
0x140032140: "private: virtual unsigned long __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV1::GetVersion(void) __ptr64" ?GetVersion@AssignedAccessConfigStoreV1@AssignedAccess@Internal@Windows@@EEAAKXZ
0x140034C72: "__cdecl _imp_load_NaDynamicLockShouldSkipGracePeriod" __imp_load_NaDynamicLockShouldSkipGracePeriod
0x1400319D0: WppCleanupUm
0x140072F0C: RegValChoice_GetHighestValue
0x140095B80: "\SETUP_LAUNCH_CLAIMED" ??_C@_1CM@PDCEPDCJ@?$AA?2?$AAS?$AAE?$AAT?$AAU?$AAP?$AA_?$AAL?$AAA?$AAU?$AAN?$AAC?$AAH?$AA_?$AAC?$AAL?$AAA?$AAI?$AAM?$AAE?$AAD?$AA?$AA@
0x140067E08: "public: void * __ptr64 __cdecl CSession::GetAccessibilityJobObject(int) __ptr64" ?GetAccessibilityJobObject@CSession@@QEAAPEAXH@Z
0x1400339A0: "__cdecl TlgCreateWsz" _TlgCreateWsz
0x140094FA0: "HeapAlloc" ??_C@_1BE@BBBGFLMF@?$AAH?$AAe?$AAa?$AAp?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x1400902F0: "AllowDomainDelayLock" ??_C@_1CK@MDNHHFCN@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x140091528: "WinlogonAccess" ??_C@_1BO@LKDGPDIN@?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x14008DE34: ?_TlgEvent@?3??ReportTraceLoggingFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?3??123@IEAAX0@Z@B
0x140036CA3: "__cdecl _imp_load_WTSConnectSessionW" __imp_load_WTSConnectSessionW
0x140079350: ServerWMsg_midl_user_allocate
0x140088350: "SOFTWARE\Microsoft\Windows\Assig" ??_C@_1HO@NBGLIOII@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAA?$AAs?$AAs?$AAi?$AAg@
0x1400A7000: "struct _StateMachineTransition * g_xWLGeneric_Logon_ReportLastLogon_Unlock_Transition" ?g_xWLGeneric_Logon_ReportLastLogon_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x140094F70: "ConvertSidToStringSid" ??_C@_1CM@LGNDFKIP@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAi?$AAd?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAi?$AAd?$AA?$AA@
0x14008CBF0: "Unlock_Checking_LastLogonPolicy" ??_C@_1EA@LIKADGNN@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAC?$AAh?$AAe?$AAc?$AAk?$AAi?$AAn?$AAg?$AA_?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x140037352: "__cdecl CxxThrowException" _CxxThrowException
0x140085078: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400909E8: "DefaultPassword" ??_C@_1CA@GEPNFAGB@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x1400B1428: "__cdecl _imp_UMgrInformFlags" __imp_UMgrInformFlags
0x1400AA0B8: "void (__cdecl* __ptr64 g_wil_details_internalSubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64 * __ptr64,void (__cdecl*)(void * __ptr64),void * __ptr64)" ?g_wil_details_internalSubscribeFeatureStateChangeNotification@@3P6AXPEAPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@P6AXPEAX@Z1@ZEA
0x14008FAC9: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1400B1370: "__cdecl _imp_SetProcessWindowStation" __imp_SetProcessWindowStation
0x1400A47F0: "struct _StateMachineState g_xWLGeneric_PseudoLogging_Off1_State" ?g_xWLGeneric_PseudoLogging_Off1_State@@3U_StateMachineState@@A
0x14007BF70: "public: virtual long __cdecl InProcEncryptHandle::EasIsDeviceLockable(void * __ptr64) __ptr64" ?EasIsDeviceLockable@InProcEncryptHandle@@UEAAJPEAX@Z
0x140036B57: "__cdecl _imp_load_DwmpNotifyUserLogon" __imp_load_DwmpNotifyUserLogon
0x1400320A0: "private: virtual unsigned long __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV0::GetVersion(void) __ptr64" ?GetVersion@AssignedAccessConfigStoreV0@AssignedAccess@Internal@Windows@@EEAAKXZ
0x140095720: "ThirdPartyEncryptionProviderPath" ??_C@_1EC@BFJEMBDF@?$AAT?$AAh?$AAi?$AAr?$AAd?$AAP?$AAa?$AAr?$AAt?$AAy?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAP?$AAa?$AAt?$AAh@
0x140084CA8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400A82A0: "struct _StateMachineTransition * g_xWLGeneric_Logon_ReportLastLogon_Transition" ?g_xWLGeneric_Logon_ReportLastLogon_Transition@@3PAU_StateMachineTransition@@A
0x1400A6530: "struct _StateMachineSignal g_xWinsrv_PowerMsgHide_Signal" ?g_xWinsrv_PowerMsgHide_Signal@@3U_StateMachineSignal@@A
0x14005D264: "long __cdecl _AllocStringWorker<class CTCoAllocPolicy>(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned __int64,unsigned __int64,unsigned short * __ptr64 * __ptr64)" ??$_AllocStringWorker@VCTCoAllocPolicy@@@@YAJPEAXKPEBG_K2PEAPEAG@Z
0x14007BC40: "public: virtual void * __ptr64 __cdecl InProcEncryptHandle::`scalar deleting destructor'(unsigned int) __ptr64" ??_GInProcEncryptHandle@@UEAAPEAXI@Z
0x14008CA70: "InitiateLock" ??_C@_1BK@NFILDHGD@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x140010028: "unsigned long __cdecl WlAccessibilityOnShutdown(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlAccessibilityOnShutdown@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140052040: "unsigned long __cdecl WlAccessibilityOnDisplaySwitch(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnDisplaySwitch@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x1400A4EB0: "struct _StateMachineState g_xWLGeneric_Logon_ReportSuccessResult_Unlock_State" ?g_xWLGeneric_Logon_ReportSuccessResult_Unlock_State@@3U_StateMachineState@@A
0x140091B50: "PasswordNeverExpires" ??_C@_1CK@NLCPOHLI@?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAN?$AAe?$AAv?$AAe?$AAr?$AAE?$AAx?$AAp?$AAi?$AAr?$AAe?$AAs?$AA?$AA@
0x140035DF6: "__cdecl _imp_load_RealGetWindowClassW" __imp_load_RealGetWindowClassW
0x140071A9C: "int __cdecl ShouldAllowLockScreenOverRemoteSessionForCurrentUser(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?ShouldAllowLockScreenOverRemoteSessionForCurrentUser@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400AA360: "struct Diagnostics_Status g_Diagnostics_Status" ?g_Diagnostics_Status@@3UDiagnostics_Status@@A
0x1400272B0: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x1400868A0: "fontdrvhost.exe" ??_C@_1CA@OHMECBHA@?$AAf?$AAo?$AAn?$AAt?$AAd?$AAr?$AAv?$AAh?$AAo?$AAs?$AAt?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140035D9C: "__cdecl _imp_load_SetWindowStationUser" __imp_load_SetWindowStationUser
0x140019074: "unsigned long __cdecl DisplayLegalNotices(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?DisplayLegalNotices@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400A7780: "struct _StateMachineTransition * g_xWLGeneric_Request_Change_Credz_Transition" ?g_xWLGeneric_Request_Change_Credz_Transition@@3PAU_StateMachineTransition@@A
0x1400851C8: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x1400870A0: "DisableBackButton" ??_C@_1CE@LDAECLCB@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAB?$AAa?$AAc?$AAk?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AA?$AA@
0x140036B75: "__cdecl _tailMerge_mpr_dll" __tailMerge_mpr_dll
0x1400A9160: "void * __ptr64 __ptr64 g_hLogoffEvent" ?g_hLogoffEvent@@3PEAXEA
0x14007E73C: WmsgSendReconnectionUpdateMessage
0x14001AA78: "unsigned char __cdecl MprIsProtectedUser(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?MprIsProtectedUser@@YAEPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140084878: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1400852C8: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x140084E78: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x1400AA1E0: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x14003637E: "__cdecl _imp_load_UMgrSetShellInformation" __imp_load_UMgrSetShellInformation
0x1400364CC: IsWinStationDisconnectPresent
0x140084F88: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x140087BA0: WLEvt_NotifyExecute_Start
0x1400A74E8: "unsigned long * g_xWLGeneric_LockScreen_ResetSignals" ?g_xWLGeneric_LockScreen_ResetSignals@@3PAKA
0x14007A234: "long __cdecl _GetBuiltInProvidersPolicies(unsigned long,unsigned long,struct _tagEASPolicy * __ptr64,unsigned long * __ptr64,struct _tagEASPolicy * __ptr64 * __ptr64)" ?_GetBuiltInProvidersPolicies@@YAJKKPEAU_tagEASPolicy@@PEAKPEAPEAU1@@Z
0x1400918F8: "UserInitLogonScript" ??_C@_1CI@JNJEGNLE@?$AAU?$AAs?$AAe?$AAr?$AAI?$AAn?$AAi?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?$AA@
0x1400A8E80: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x140084790: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1400633F8: "void __cdecl wil::details::in1diag3::_Log_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?_Log_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x14001A5D0: "public: unsigned long __cdecl CUser::SetUserName(unsigned short const * __ptr64) __ptr64" ?SetUserName@CUser@@QEAAKPEBG@Z
0x1400A49F0: "struct _StateMachineState g_xWLGeneric_ReconnectionUpdate_State" ?g_xWLGeneric_ReconnectionUpdate_State@@3U_StateMachineState@@A
0x1400A9BD0: "class wil::details::static_lazy<class CandidateAccountManagerPolicyTraceProvider> `protected: static class CandidateAccountManagerPolicyTraceProvider * __ptr64 __cdecl CandidateAccountManagerPolicyTraceProvider::Instance(void)'::`2'::wrapper" ?wrapper@?1??Instance@CandidateAccountManagerPolicyTraceProvider@@KAPEAV2@XZ@4V?$static_lazy@VCandidateAccountManagerPolicyTraceProvider@@@details@wil@@A
0x1400AA0DC: "int g_fLaunchedFirstLogonAnimation" ?g_fLaunchedFirstLogonAnimation@@3HA
0x14004F0A0: "public: __cdecl wil::details_abi::UsageIndexes::~UsageIndexes(void) __ptr64" ??1UsageIndexes@details_abi@wil@@QEAA@XZ
0x140085270: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x1400A6570: "struct _StateMachineSignal g_xAction_Failed_Signal" ?g_xAction_Failed_Signal@@3U_StateMachineSignal@@A
0x140020E9C: "public: unsigned long __cdecl CGlobalStore::GetMsv10Package(unsigned long * __ptr64) __ptr64" ?GetMsv10Package@CGlobalStore@@QEAAKPEAK@Z
0x1400849F8: "__cdecl _imp_CreateRemoteThread" __imp_CreateRemoteThread
0x140036F1C: "public: __cdecl WinlogonProvider::AuthenticateUser::AuthenticateUser(void) __ptr64" ??0AuthenticateUser@WinlogonProvider@@QEAA@XZ
0x140084858: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140087B38: WLEvt_ConnectToSubscriber_Start
0x1400865E8: WLDiagEvt_NthLogonSuccessSwitchToUserDesktop_Stop
0x140071564: "unsigned long __cdecl PerformEmergencyShutdown(unsigned char)" ?PerformEmergencyShutdown@@YAKE@Z
0x140084998: api-ms-win-core-memory-l1-1-1_NULL_THUNK_DATA
0x1400AA478: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUwvkolixsUhixUlyquivUznwGEUkxsOlyq@DeplOrch" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmghvgfkUoryUwvkolixsUhixUlyquivUznwGEUkxsOlyq@DeplOrch
0x140031C90: "void __cdecl WLGeneric_MPRLogonNotify_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRLogonNotify_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140037570: "__cdecl _chkstk" __chkstk
0x140032150: "private: virtual unsigned long __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV2::GetVersion(void) __ptr64" ?GetVersion@AssignedAccessConfigStoreV2@AssignedAccess@Internal@Windows@@EEAAKXZ
0x1400871E0: "ReportControllerMissing" ??_C@_1DA@CMBHHID@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AAM?$AAi?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?$AA@
0x1400A7200: "struct _StateMachineTransition * g_xWLGeneric_Unlock_ReportLastLogon_Transition" ?g_xWLGeneric_Unlock_ReportLastLogon_Transition@@3PAU_StateMachineTransition@@A
0x1400017C4: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<class wil::details_abi::FeatureStateData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x140079CE0: McGenEventTracingRegister
0x140086590: MS_Winlogon_Provider
0x140091E2C: "Active" ??_C@_06MAFFGDO@Active?$AA@
0x140036B45: "__cdecl _imp_load_DwmpTerminateSessionProcess" __imp_load_DwmpTerminateSessionProcess
0x14008C3D8: "FindDestinationSession" ??_C@_1CO@OCNIINOB@?$AAF?$AAi?$AAn?$AAd?$AAD?$AAe?$AAs?$AAt?$AAi?$AAn?$AAa?$AAt?$AAi?$AAo?$AAn?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1400B1268: ext-ms-win-composition-init-l1-1-0_NULL_THUNK_DATA_DLA
0x140005670: "public: __cdecl wil::details_abi::UsageIndexes::UsageIndexes(void) __ptr64" ??0UsageIndexes@details_abi@wil@@QEAA@XZ
0x140036C06: "__cdecl _imp_load_CredUnPackAuthenticationBufferW" __imp_load_CredUnPackAuthenticationBufferW
0x14009F768: ext-ms-win-composition-init-l1-1-0_NULL_THUNK_DATA_DLB
0x14002C974: "void __cdecl PerformPostOOBEWorkIfNecessary(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?PerformPostOOBEWorkIfNecessary@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x14007E7DC: WmsgpConnect
0x1400AA470: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUfnhsokiUlyquivUznwGEUkivxlnkOlyq@UmsHlpr" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUfnhsokiUlyquivUznwGEUkivxlnkOlyq@UmsHlpr
0x14003675D: "__cdecl _imp_load_WinStationDisconnect" __imp_load_WinStationDisconnect
0x140084540: "const InProcEncryptHandle::`vftable'" ??_7InProcEncryptHandle@@6B@
0x1400A62B0: "struct _StateMachineSignal g_xWLGeneric_ChangeIsAlreadyDone_Signal" ?g_xWLGeneric_ChangeIsAlreadyDone_Signal@@3U_StateMachineSignal@@A
0x140073A94: ?Free@?$CAutoPtr@PEAU_KERB_S4U_LOGON@@$1??$FreeHeap@PEAU_KERB_S4U_LOGON@@@@YAXPEAU1@@Z@@AEAAXXZ
0x140037014: "public: __cdecl WinlogonProvider::AuthenticateUser::~AuthenticateUser(void) __ptr64" ??1AuthenticateUser@WinlogonProvider@@QEAA@XZ
0x1400B11A8: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x1400A9610: "struct _RTL_CRITICAL_SECTION g_csNamedEscape" ?g_csNamedEscape@@3U_RTL_CRITICAL_SECTION@@A
0x140050590: "protected: virtual void __cdecl wil::TraceLoggingProvider::OnErrorReported(bool,struct wil::FailureInfo const & __ptr64) __ptr64" ?OnErrorReported@TraceLoggingProvider@wil@@MEAAX_NAEBUFailureInfo@2@@Z
0x140087320: "LegalNoticeText" ??_C@_1CA@LKCGIAHJ@?$AAL?$AAe?$AAg?$AAa?$AAl?$AAN?$AAo?$AAt?$AAi?$AAc?$AAe?$AAT?$AAe?$AAx?$AAt?$AA?$AA@
0x140090F30: "shell32.dll,-194" ??_C@_1CC@GEENACFI@?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AA?9?$AA1?$AA9?$AA4?$AA?$AA@
0x14009E1B0: ext-ms-win-composition-init-l1-1-0_NULL_THUNK_DATA_DLN
0x14008BCA8: "Wl_ReconnectionUpdate" ??_C@_1CM@DDCFNHGG@?$AAW?$AAl?$AA_?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140084CF8: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x140036DE0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x14008FBD8: WLDiagEvt_LockIgnore_Stop
0x140035F18: "__cdecl _tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_window_l1_1_0_dll
0x14009FA6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x1400A5470: "struct _StateMachineState g_xWLGeneric_TimeoutHandler_Logged_On_State" ?g_xWLGeneric_TimeoutHandler_Logged_On_State@@3U_StateMachineState@@A
0x140089180: "__cdecl _sz_ext_ms_win_ntuser_keyboard_l1_1_0_dll" __sz_ext_ms_win_ntuser_keyboard_l1_1_0_dll
0x140036580: "__cdecl _tailMerge_ext_ms_win_session_winsta_l1_1_0_dll" __tailMerge_ext_ms_win_session_winsta_l1_1_0_dll
0x140088330: WLEvt_DwmpNotifyUserLogon_Start
0x14007BEC0: "public: virtual long __cdecl InProcEncryptHandle::EasGetDeviceLockoutData(void * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?EasGetDeviceLockoutData@InProcEncryptHandle@@UEAAJPEAXPEAEPEAK@Z
0x1400B13D8: "__cdecl _imp_CamConnectCandidateUser" __imp_CamConnectCandidateUser
0x140076FFC: WlSecureDesktoppReadCredential
0x140084850: "__cdecl _imp_HeapSize" __imp_HeapSize
0x14004F954: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x140095030: "StringCchCat(hr)" ??_C@_1CC@FLBLOLPM@?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAa?$AAt?$AA?$CI?$AAh?$AAr?$AA?$CJ?$AA?$AA@
0x14006BD28: "public: int __cdecl CUser::IsCachedLogon(void) __ptr64" ?IsCachedLogon@CUser@@QEAAHXZ
0x140085228: "__cdecl _imp__vsnprintf_s" __imp__vsnprintf_s
0x14006F4C8: "unsigned long __cdecl FixGroupMembership(void)" ?FixGroupMembership@@YAKXZ
0x14000BFF0: "unsigned long __cdecl WLGeneric_MPRLogonNotify_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRLogonNotify_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14008FBE8: WLEvt_LogonHoursExpiryWarning_Info
0x140084AB0: "__cdecl _imp_RegNotifyChangeKeyValue" __imp_RegNotifyChangeKeyValue
0x14004F240: "public: virtual void * __ptr64 __cdecl WinlogonProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_EWinlogonProvider@@UEAAPEAXI@Z
0x140084720: "__cdecl _imp_BaseInitAppcompatCacheSupport" __imp_BaseInitAppcompatCacheSupport
0x14002F688: TraceLoggingRegisterEx
0x140081070: "const wil::TraceLoggingProvider::`vftable'" ??_7TraceLoggingProvider@wil@@6B@
0x1400365FF: "__cdecl _imp_load_WinStationGetConnectionProperty" __imp_load_WinStationGetConnectionProperty
0x1400A57B0: "struct _StateMachineState g_xWLGeneric_Logged_On_Disconnected_State" ?g_xWLGeneric_Logged_On_Disconnected_State@@3U_StateMachineState@@A
0x140004B34: "public: class wil::details::FeatureLogging * __ptr64 __cdecl wil::details::static_lazy<class wil::details::FeatureLogging>::get(void (__cdecl*)(void)) __ptr64" ?get@?$static_lazy@VFeatureLogging@details@wil@@@details@wil@@QEAAPEAVFeatureLogging@23@P6AXXZ@Z
0x140010250: "unsigned long __cdecl WlAccessibilityOnLogon(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnLogon@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140076CE0: WlSecureDesktopiReferencePendingRequest
0x1400854A0: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x140028EA0: "private: unsigned long __cdecl CUser::LoadUserEnvironmentFromRegistry(unsigned short const * __ptr64,enum CUser::_ENV_PASS,void * __ptr64 * __ptr64) __ptr64" ?LoadUserEnvironmentFromRegistry@CUser@@AEAAKPEBGW4_ENV_PASS@1@PEAPEAX@Z
0x14008D208: "LogoffNotify" ??_C@_1BK@POHMBGP@?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400A9640: "unsigned short * gwszUmfdAccountName" ?gwszUmfdAccountName@@3PAGA
0x14007BDF0: "public: static void __cdecl EncryptHandle::DestroyEncryptHandle(class EncryptHandle * __ptr64)" ?DestroyEncryptHandle@EncryptHandle@@SAXPEAV1@@Z
0x14000454C: "public: unsigned long __cdecl CSession::GetLogonDialogTimeout(void * __ptr64,int) __ptr64" ?GetLogonDialogTimeout@CSession@@QEAAKPEAXH@Z
0x14009E298: ext-ms-win-ntuser-windowclass-l1-1-1_NULL_THUNK_DATA_DLN
0x140066DB0: "void __cdecl WLGeneric_ReadyForSecureLua_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ReadyForSecureLua_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14009E288: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLN
0x140095100: "RegSetValueEx" ??_C@_1BM@CHOIIKKM@?$AAR?$AAe?$AAg?$AAS?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAE?$AAx?$AA?$AA@
0x14009F548: ext-ms-win-ntuser-windowclass-l1-1-1_NULL_THUNK_DATA_DLB
0x14008BD00: "Wl_NTLMIsDisabled" ??_C@_1CE@CMCILPBL@?$AAW?$AAl?$AA_?$AAN?$AAT?$AAL?$AAM?$AAI?$AAs?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14009F558: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLB
0x140088758: "SharedPCMode" ??_C@_1BK@OFJLOCDP@?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AAP?$AAC?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x140092450: "SoftwareSASGeneration" ??_C@_1CM@MIDLCAGP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AAS?$AAA?$AAS?$AAG?$AAe?$AAn?$AAe?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400B1340: ext-ms-win-ntuser-windowclass-l1-1-0_NULL_THUNK_DATA_DLA
0x1400B1350: ext-ms-win-ntuser-windowclass-l1-1-1_NULL_THUNK_DATA_DLA
0x1400AA298: "void (__cdecl* __ptr64 g_wil_details_apiUnsubscribeFeatureStateChangeNotification)(struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64)" ?g_wil_details_apiUnsubscribeFeatureStateChangeNotification@@3P6AXPEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@ZEA
0x140091CC0: "LogonExtension" ??_C@_1BO@KPJJGHHK@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1400A84F0: "struct _StateMachineTransition * g_xWLGeneric_AccessNotifyAsUser_Transition" ?g_xWLGeneric_AccessNotifyAsUser_Transition@@3PAU_StateMachineTransition@@A
0x140079790: "public: virtual void * __ptr64 __cdecl wil::ResultException::`scalar deleting destructor'(unsigned int) __ptr64" ??_GResultException@wil@@UEAAPEAXI@Z
0x1400A9390: "struct _WNF_USER_SUBSCRIPTION * __ptr64 __ptr64 _wnfSubscription" ?_wnfSubscription@@3PEAU_WNF_USER_SUBSCRIPTION@@EA
0x1400849C8: "__cdecl _imp_DeleteProcThreadAttributeList" __imp_DeleteProcThreadAttributeList
0x14001A870: "void __cdecl WLGeneric_Start_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Start_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400090B4: "private: static enum wil_details_CachedFeatureEnabledState __cdecl wil::Feature<struct __WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions>::GetCurrentFeatureEnabledState(bool,enum wil_details_CachedHasNotificationState * __ptr64,int * __ptr64)" ?GetCurrentFeatureEnabledState@?$Feature@U__WilFeatureTraits_Feature_ContentDeliveryPolicyRestrictions@@@wil@@CA?AW4wil_details_CachedFeatureEnabledState@@_NPEAW4wil_details_CachedHasNotificationState@@PEAH@Z
0x1400946C8: "WebDialog" ??_C@_1BE@HCFMEOHN@?$AAW?$AAe?$AAb?$AAD?$AAi?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x140084DB8: "__cdecl _imp_GetFileVersionInfoSizeExW" __imp_GetFileVersionInfoSizeExW
0x140031A24: ResilientSwitchDesktopWithFade
0x14004F794: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140084B68: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400B1050: MPR_NULL_THUNK_DATA_DLA
0x14004FDF8: "public: struct wil::details_abi::ProcessLocalData * __ptr64 __cdecl wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData>::GetShared(void) __ptr64" ?GetShared@?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAUProcessLocalData@23@XZ
0x1400AA1F0: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1400A7AC0: "unsigned long * g_xWLGeneric_CAD_ResetSignals" ?g_xWLGeneric_CAD_ResetSignals@@3PAKA
0x14007C130: "public: virtual long __cdecl OutOfProcEncryptHandle::EasUpdateDeviceLockoutState(void * __ptr64,unsigned char * __ptr64,unsigned long) __ptr64" ?EasUpdateDeviceLockoutState@OutOfProcEncryptHandle@@UEAAJPEAXPEAEK@Z
0x1400908A0: "DefaultShell" ??_C@_1BK@KLBNBNNL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140084D60: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x1400875A0: ""%s" /flags:0x%lx /state0:0x%lx " ??_C@_1FM@EFHHGHGL@?$AA?$CC?$AA?$CF?$AAs?$AA?$CC?$AA?5?$AA?1?$AAf?$AAl?$AAa?$AAg?$AAs?$AA?3?$AA0?$AAx?$AA?$CF?$AAl?$AAx?$AA?5?$AA?1?$AAs?$AAt?$AAa?$AAt?$AAe?$AA0?$AA?3?$AA0?$AAx?$AA?$CF?$AAl?$AAx?$AA?5@
0x14005DACC: "void __cdecl CleanupSysProcs(void)" ?CleanupSysProcs@@YAXXZ
0x14000CB74: "unsigned long __cdecl IsFirstInteractiveSession(int * __ptr64)" ?IsFirstInteractiveSession@@YAKPEAH@Z
0x1400854C0: "__cdecl _imp_EtwEventActivityIdControl" __imp_EtwEventActivityIdControl
0x14005E570: "int __cdecl GetProcessBaseName(void * __ptr64,unsigned short * __ptr64,unsigned long)" ?GetProcessBaseName@@YAHPEAXPEAGK@Z
0x14008B250: "TerminateSession" ??_C@_1CC@COALCMAC@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x14000262C: "public: int __cdecl CSession::IsBoundToConsole(void) __ptr64" ?IsBoundToConsole@CSession@@QEAAHXZ
0x140013098: "long __cdecl CreateProcThreadAttributeList(struct _SECURITY_CAPABILITIES * __ptr64,struct _WIN32K_SYSCALL_FILTER * __ptr64,struct _PROC_THREAD_ATTRIBUTE_LIST * __ptr64 * __ptr64)" ?CreateProcThreadAttributeList@@YAJPEAU_SECURITY_CAPABILITIES@@PEAU_WIN32K_SYSCALL_FILTER@@PEAPEAU_PROC_THREAD_ATTRIBUTE_LIST@@@Z
0x140088CE0: "__cdecl _sz_USERENV_dll" __sz_USERENV_dll
0x1400A7D10: "struct _StateMachineTransition * g_xWLGeneric_Logged_On_Hibernating_Transition" ?g_xWLGeneric_Logged_On_Hibernating_Transition@@3PAU_StateMachineTransition@@A
0x140036A54: IsDwmpCreateSessionProcessPresent
0x14005FB60: "public: long __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityData<class WinlogonProvider,struct _TlgReflectorTag_Param0IsProviderType>::SetUnhandledException(void) __ptr64" ?SetUnhandledException@?$ActivityData@VWinlogonProvider@@U_TlgReflectorTag_Param0IsProviderType@@@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAAJXZ
0x140033D20: "int __cdecl ShouldDisconnectOnSleep(void)" ?ShouldDisconnectOnSleep@@YAHXZ
0x14008B160: "StopSSAsNoone" ??_C@_1BM@MMNFFBNP@?$AAS?$AAt?$AAo?$AAp?$AAS?$AAS?$AAA?$AAs?$AAN?$AAo?$AAo?$AAn?$AAe?$AA?$AA@
0x140087B90: WLEvt_NotifyExecute_Stop
0x140089A70: "__cdecl _sz_ext_ms_win_session_wtsapi32_l1_1_0_dll" __sz_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x1400798E0: "void __cdecl wil::details::ThrowResultExceptionInternal(struct wil::FailureInfo const & __ptr64)" ?ThrowResultExceptionInternal@details@wil@@YAXAEBUFailureInfo@2@@Z
0x140036046: "__cdecl _imp_load_GetUserObjectInformationW" __imp_load_GetUserObjectInformationW
0x14009F280: NaturalAuthClient_NULL_THUNK_DATA_DLB
0x140072BF0: "int __cdecl WMsgReconnectionUpdateHandler(struct _RECONNECTION_UPDATE_INFO * __ptr64,struct _RPC_ASYNC_STATE * __ptr64,long * __ptr64)" ?WMsgReconnectionUpdateHandler@@YAHPEAU_RECONNECTION_UPDATE_INFO@@PEAU_RPC_ASYNC_STATE@@PEAJ@Z
0x1400A9138: "int g_fResolverForceClicked" ?g_fResolverForceClicked@@3HA
0x14009F478: ext-ms-win-advapi32-eventlog-l1-1-0_NULL_THUNK_DATA_DLB
0x140076990: WlNotify_midl_user_free
0x14008C580: "CredsAreStaleReminder" ??_C@_1CM@EIDPGHEI@?$AAC?$AAr?$AAe?$AAd?$AAs?$AAA?$AAr?$AAe?$AAS?$AAt?$AAa?$AAl?$AAe?$AAR?$AAe?$AAm?$AAi?$AAn?$AAd?$AAe?$AAr?$AA?$AA@
0x1400848A0: "__cdecl _imp_CreateJobObjectW" __imp_CreateJobObjectW
0x140036520: IsWinStationConsumeCacheSessionPresent
0x140031278: EasEngineUninitialize
0x140094418: "Global\UMSServicesStarted" ??_C@_1DE@NEJIKEAE@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAU?$AAM?$AAS?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAS?$AAt?$AAa?$AAr?$AAt?$AAe?$AAd?$AA?$AA@
0x14008CDE0: "SequentialLogonPrompt_Unlock" ??_C@_1DK@PHNCHDHK@?$AAS?$AAe?$AAq?$AAu?$AAe?$AAn?$AAt?$AAi?$AAa?$AAl?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x1400A7588: "struct _StateMachineTransition * g_xWLGeneric_Locked_Return_Transition" ?g_xWLGeneric_Locked_Return_Transition@@3PAU_StateMachineTransition@@A
0x140084530: "const wil::ResultException::`vftable'" ??_7ResultException@wil@@6B@
0x14008DBA0: ?_TlgEvent@?3??ReportTelemetryFailure@TraceLoggingProvider@wil@@IEAAXAEBUFailureInfo@3@@Z@4U<unnamed-type-_TlgEvent>@?3??123@IEAAX0@Z@B
0x14001EE38: WluiInformLogonUI
0x140084FF0: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x14009FA94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14005F94C: "public: void __cdecl wil::StoredFailureInfo::SetFailureInfo(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetFailureInfo@StoredFailureInfo@wil@@QEAAXAEBUFailureInfo@2@@Z
0x1400869A0: "UmfdHost" ??_C@_1BC@GKDNJMPM@?$AAU?$AAm?$AAf?$AAd?$AAH?$AAo?$AAs?$AAt?$AA?$AA@
0x140078744: CreateSyncEvent
0x140084FE0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x1400A6B30: "struct _StateMachineTransition * g_xWLGeneric_DelayLock_DisplayOnHandler_Transition" ?g_xWLGeneric_DelayLock_DisplayOnHandler_Transition@@3PAU_StateMachineTransition@@A
0x14008C628: "PowerTransition_Logged_On" ??_C@_1DE@IKABBFAH@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA_?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA?$AA@
0x140085528: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x140085000: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x140031D78: "void __cdecl CleanupCustomThreadPool(void)" ?CleanupCustomThreadPool@@YAXXZ
0x1400905A0: "ImageIdentifier" ??_C@_1CA@KHBGGONE@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x140090FC0: "Microsoft.NetDriveReconnectFaile" ??_C@_1EE@MLMNALAA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAN?$AAe?$AAt?$AAD?$AAr?$AAi?$AAv?$AAe?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAF?$AAa?$AAi?$AAl?$AAe@
0x1400A58B0: "struct _StateMachineState g_xWLGeneric_InitiateLock_On_Resume_State" ?g_xWLGeneric_InitiateLock_On_Resume_State@@3U_StateMachineState@@A
0x140055720: "unsigned long __cdecl WLGeneric_Change_ReportResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Change_ReportResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14009FC88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x140084A90: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140084FB0: "__cdecl _imp_LsaClose" __imp_LsaClose
0x1400853B8: "__cdecl _imp_NtSetInformationToken" __imp_NtSetInformationToken
0x14008CB40: "Request_Web_Unlock_Credz" ??_C@_1DC@OBPOFPPP@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAW?$AAe?$AAb?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x14008BAE8: "Winsrv_Lock" ??_C@_1BI@CGLHHFIP@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x1400A62E0: "struct _StateMachineSignal g_xWLGeneric_NoRetryAndDisconnect_Signal" ?g_xWLGeneric_NoRetryAndDisconnect_Signal@@3U_StateMachineSignal@@A
0x140085658: "__cdecl _guard_fids_table" __guard_fids_table
0x1400850E0: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x14006A828: "public: unsigned int __cdecl CUser::FilterSecurityOptions(unsigned int,enum _LSA_USER_ACCOUNT_TYPE) __ptr64" ?FilterSecurityOptions@CUser@@QEAAIIW4_LSA_USER_ACCOUNT_TYPE@@@Z
0x14006D040: "private: static void __cdecl CUser::UserPresenceCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?UserPresenceCallback@CUser@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x140089480: "ext-ms-win-ntuser-private-l1-3-2" ??_C@_1EC@JFPGGCMG@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAp?$AAr?$AAi?$AAv?$AAa?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9?$AA3?$AA?9?$AA2@
0x1400A913C: "unsigned long g_dwResolverWaitTime" ?g_dwResolverWaitTime@@3KA
0x14003624F: "__cdecl _tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll" __tailMerge_ext_ms_win_session_usermgr_l1_1_0_dll
0x1400A6520: "struct _StateMachineSignal g_xWinsrv_PowerResumeShow_Signal" ?g_xWinsrv_PowerResumeShow_Signal@@3U_StateMachineSignal@@A
0x1400052B0: "void __cdecl WLGeneric_Request_Unlock_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Unlock_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14009E160: dsreg_NULL_THUNK_DATA_DLN
0x14008C850: "StartSecureLua" ??_C@_1BO@KOOLEBBK@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAL?$AAu?$AAa?$AA?$AA@
0x140050FB0: "unsigned __int64 __cdecl wil::details::ResultStringSize(char const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBD@Z
0x140084EC8: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x14008D2F0: Microsoft_Windows_Shell_CoreKeywords
0x1400852D8: "__cdecl _imp_NtShutdownSystem" __imp_NtShutdownSystem
0x14006CC00: "void __cdecl SmartCardUnlockRequiredEventCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?SmartCardUnlockRequiredEventCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x1400A9070: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUoltlmfrUzkrUlyquivUznwGEUkivxlnkrovwOlyq@wluiapi" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUfnhgzigfkUoltlmfrUzkrUlyquivUznwGEUkivxlnkrovwOlyq@wluiapi
0x1400861D0: "DisableLockScreenAppNotification" ??_C@_1EE@IKPNFLEH@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAL?$AAo?$AAc?$AAk?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AAA?$AAp?$AAp?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn@
0x140079094: WaitForAndDeleteTimer
0x140026640: DeleteSecurityDescriptor
0x140073090: "void __cdecl FreeHeap<unsigned short * __ptr64>(unsigned short * __ptr64)" ??$FreeHeap@PEAG@@YAXPEAG@Z
0x140076980: WlNotify_midl_user_allocate
0x14007C584: "long __cdecl _myVariantCopy(struct tagPROPVARIANT * __ptr64,struct tagPROPVARIANT * __ptr64)" ?_myVariantCopy@@YAJPEAUtagPROPVARIANT@@0@Z
0x1400851B0: msvcrt_NULL_THUNK_DATA
0x1400295C4: "int __cdecl BuildEnvironmentPath(void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?BuildEnvironmentPath@@YAHPEAPEAXPEBG1@Z
0x1400848A8: "__cdecl _imp_AssignProcessToJobObject" __imp_AssignProcessToJobObject
0x1400A5A70: "struct _StateMachineState g_xWLGeneric_Logged_On_State" ?g_xWLGeneric_Logged_On_State@@3U_StateMachineState@@A
0x14008FE10: "%s %s %s" ??_C@_1BC@FAODPNIE@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x1400A8460: "unsigned long * g_xWLGeneric_DisplayLegalNotice_ResetSignals" ?g_xWLGeneric_DisplayLegalNotice_ResetSignals@@3PAKA
0x140094F10: "Lockout Metadata Invalid - Inval" ??_C@_1FK@OJKOCEGC@?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AA?5?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AA?9?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl@
0x140081690: "__cdecl load_config_used" _load_config_used
0x140019858: "unsigned long __cdecl ToUninitialize(void)" ?ToUninitialize@@YAKXZ
0x140034D69: "__cdecl _imp_load_LsaLookupAuthenticationPackage" __imp_load_LsaLookupAuthenticationPackage
0x140079644: "public: __cdecl wil::ResultException::ResultException(class wil::ResultException const & __ptr64) __ptr64" ??0ResultException@wil@@QEAA@AEBV01@@Z
0x140036E3C: ??$Start@$$V@AuthenticateUser@WinlogonProvider@@SA?AV01@XZ
0x140061590: "void __cdecl WLGeneric_DifferentCredsAreRequiredReminder_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DifferentCredsAreRequiredReminder_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008A368: WPP_93b9e03668c83b5ad5bb53997a4e2f2c_Traceguids
0x1400A7F48: "unsigned long * g_xWLGeneric_Request_LogonChange_Credz_ResetSignals" ?g_xWLGeneric_Request_LogonChange_Credz_ResetSignals@@3PAKA
0x140086C48: "ServiceName" ??_C@_1BI@BGAAOEPC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1400B1270: "__cdecl _imp_PolicyManager_FreeGetPolicyData" __imp_PolicyManager_FreeGetPolicyData
0x1400A47B0: "struct _StateMachineState g_xWLGeneric_PseudoLogging_Off2_State" ?g_xWLGeneric_PseudoLogging_Off2_State@@3U_StateMachineState@@A
0x1400911C8: "Microsoft.SubscriberFailed" ??_C@_1DG@HHCOIJCL@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAS?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAb?$AAe?$AAr?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140084D80: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x1400361B2: "__cdecl _tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll" __tailMerge_ext_ms_win_rtcore_ntuser_sysparams_l1_1_0_dll
0x140085370: "__cdecl _imp_RtlCopySid" __imp_RtlCopySid
0x14009E058: SspiCli_NULL_THUNK_DATA_DLN
0x140084C38: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x14000F6D0: "void __cdecl WLGeneric_DelayedSwitchDesktop_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DelayedSwitchDesktop_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x1400B1510: "__cdecl _imp_WinStationConsumeCacheSession" __imp_WinStationConsumeCacheSession
0x140090040: "OptionValue" ??_C@_1BI@CBOLNBDL@?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1400864D0: WLEvt_RestoringNetConnections_Start
0x140052920: "unsigned long __cdecl WlAccessibilityOnWinU(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnWinU@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x1400A9368: "void (__cdecl* __ptr64 g_pFnLog)(unsigned long,unsigned short * __ptr64)" ?g_pFnLog@@3P6AXKPEAG@ZEA
0x140081050: "const wil::details::FeatureLogging::`vftable'" ??_7FeatureLogging@details@wil@@6B@
0x140064260: "void __cdecl WLGeneric_MPRChangeLogonNotify_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeLogonNotify_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14009DA68: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x140084F00: "__cdecl _imp_SetTokenInformation" __imp_SetTokenInformation
0x14007C7D0: "unsigned long __cdecl ReadFromRegistry(unsigned short * __ptr64 const)" ?ReadFromRegistry@@YAKQEAG@Z
0x14003520A: "__cdecl _imp_load_SeciIsProtectedUser" __imp_load_SeciIsProtectedUser
0x14007A40C: "public: unsigned long __cdecl CFveAutoPtr::ClearAllFailedCounts(void) __ptr64" ?ClearAllFailedCounts@CFveAutoPtr@@QEAAKXZ
0x1400A5730: "struct _StateMachineState g_xWLGeneric_Logged_On_Reconnect_State" ?g_xWLGeneric_Logged_On_Reconnect_State@@3U_StateMachineState@@A
0x14005F124: "private: void __cdecl OOBE::Health::details::OOBEScenarioEvents::ReadInfo(struct OOBE::Health::details::HealthInfoHeader & __ptr64,int,bool & __ptr64,bool & __ptr64,unsigned short const * __ptr64) __ptr64" ?ReadInfo@OOBEScenarioEvents@details@Health@OOBE@@AEAAXAEAUHealthInfoHeader@234@HAEA_N1PEBG@Z
0x14005D834: "public: void * __ptr64 __cdecl CFveAutoPtr::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCFveAutoPtr@@QEAAPEAXI@Z
0x140002690: "unsigned long __cdecl WLGeneric_LockScreen_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_LockScreen_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140033774: "void * __ptr64 __cdecl UHHeapAlloc(unsigned __int64)" ?UHHeapAlloc@@YAPEAX_K@Z
0x140063458: "private: void __cdecl wil::details::shared_buffer::assign(long * __ptr64,unsigned __int64) __ptr64" ?assign@shared_buffer@details@wil@@AEAAXPEAJ_K@Z
0x14003261C: "private: void __cdecl CUser::TracePwdExpiryNotfn(enum CUser::PwdExpNotfnState,unsigned long,unsigned short * __ptr64) __ptr64" ?TracePwdExpiryNotfn@CUser@@AEAAXW4PwdExpNotfnState@1@KPEAG@Z
0x14005D574: "public: class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType> & __ptr64 __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::operator=(class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType> &&) __ptr64" ??4?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAAAEAV01@$$QEAV01@@Z
0x140091D70: "Software\Microsoft\Windows NT\Cu" ??_C@_1GI@JFBIJAML@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400123DC: CreatePrimaryTerminal
0x1400A8390: "unsigned long * g_xWLGeneric_Authenticating_ResetSignals" ?g_xWLGeneric_Authenticating_ResetSignals@@3PAKA
0x14008A028: WPP_abe233a6bde53c1acf73aa2d7b43fc1f_Traceguids
0x14004F210: "public: virtual void * __ptr64 __cdecl wistd::_Func_base<bool,void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int,struct wistd::_Nil,struct wistd::_Nil>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$_Func_base@_NPEAX_KPEAX_KIU_Nil@wistd@@U12@@wistd@@UEAAPEAXI@Z
0x140064370: "unsigned long __cdecl WLGeneric_MPRChangeUnlockNotify_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRChangeUnlockNotify_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14008C1B0: "DisplayLegalNotice" ??_C@_1CG@BIJPBEGD@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAL?$AAe?$AAg?$AAa?$AAl?$AAN?$AAo?$AAt?$AAi?$AAc?$AAe?$AA?$AA@
0x14004F8A0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x14009DD28: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_window_l1_1_0_dll
0x14008C2F0: "Logon_ReportLastLogon" ??_C@_1CM@GMJKHPHJ@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x1400847A8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x140084798: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1400297A0: StateMachineRun
0x140031F58: McGenEventUnregister
0x1400865A0: "RPCSS" ??_C@_1M@BJMOGEFA@?$AAR?$AAP?$AAC?$AAS?$AAS?$AA?$AA@
0x1400A5D30: "struct _StateMachineState g_xWLGeneric_Logon_ReportFailedResult_State" ?g_xWLGeneric_Logon_ReportFailedResult_State@@3U_StateMachineState@@A
0x14009DA88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_samcli_dll" __DELAY_IMPORT_DESCRIPTOR_samcli_dll
0x140090AF8: "Shell" ??_C@_1M@JLDCNMKN@?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x140051000: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x140084F58: "__cdecl _imp_CredUnmarshalCredentialW" __imp_CredUnmarshalCredentialW
0x14007C63C: "unsigned long __cdecl CheckThirdPartyStatus(int * __ptr64)" ?CheckThirdPartyStatus@@YAKPEAH@Z
0x1400A63D0: "struct _StateMachineSignal g_xWl_NTLMIsDisabled_Signal" ?g_xWl_NTLMIsDisabled_Signal@@3U_StateMachineSignal@@A
0x1400A7BC8: "struct _StateMachineTransition * g_xWLGeneric_No_Unlock_Reconnect_Transition" ?g_xWLGeneric_No_Unlock_Reconnect_Transition@@3PAU_StateMachineTransition@@A
0x140076F60: WlSecureDesktoppFreeRequest
0x140056360: "bool __cdecl _TlgGuidIsZero(struct _GUID const & __ptr64)" ?_TlgGuidIsZero@@YA_NAEBU_GUID@@@Z
0x1400230B4: "public: void __cdecl CUser::StartDeferredPostAuthenticationWork(void) __ptr64" ?StartDeferredPostAuthenticationWork@CUser@@QEAAXXZ
0x140089550: "__cdecl _sz_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __sz_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x140059ED0: "void __cdecl WLGeneric_AbortPendingLockRequest_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AbortPendingLockRequest_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140089520: "__cdecl _sz_ext_ms_win_ntuser_windowclass_l1_1_1_dll" __sz_ext_ms_win_ntuser_windowclass_l1_1_1_dll
0x140036408: "__cdecl _imp_load_CamRefreshCandidateUser" __imp_load_CamRefreshCandidateUser
0x14004F3F4: "public: void __cdecl wil::details_abi::ThreadLocalData::Clear(void) __ptr64" ?Clear@ThreadLocalData@details_abi@wil@@QEAAXXZ
0x140055C18: "long __cdecl StringCchLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCchLengthW@@YAJPEBG_KPEA_K@Z
0x140085130: "__cdecl _imp_toupper" __imp_toupper
0x140035117: "__cdecl _imp_load_AuthzFreeAuditEvent" __imp_load_AuthzFreeAuditEvent
0x140004DA0: ?Free@?$CAutoPtr@PEAG$1?DeleteSidString@@YAXPEAG@Z@@AEAAXXZ
0x1400363B4: IsCamConnectCandidateUserPresent
0x140088340: WLEvt_ReceivedLogoffRequest_Info
0x1400A5EB0: "struct _StateMachineState g_xWLGeneric_Request_Logon_Credz_Return_State" ?g_xWLGeneric_Request_Logon_Credz_Return_State@@3U_StateMachineState@@A
0x14004F730: "public: static void __cdecl wil::details::DestroyThreadPoolTimer<struct wil::details::SystemThreadPoolMethods,0>::Destroy(struct _TP_TIMER * __ptr64)" ?Destroy@?$DestroyThreadPoolTimer@USystemThreadPoolMethods@details@wil@@$0A@@details@wil@@SAXPEAU_TP_TIMER@@@Z
0x140050FD8: "unsigned __int64 __cdecl wil::details::ResultStringSize(unsigned short const * __ptr64)" ?ResultStringSize@details@wil@@YA_KPEBG@Z
0x1400AA220: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x140087AE0: WLEvt_NotifySubscriber_Failed
0x1400852A8: "__cdecl _imp_NtSetInformationProcess" __imp_NtSetInformationProcess
0x14006E6D8: "bool __cdecl IsUserOOBELanguageChoicePending(void)" ?IsUserOOBELanguageChoicePending@@YA_NXZ
0x1400903D0: "WluiSecureDelayLocked" ??_C@_0BG@LGHEMMLG@WluiSecureDelayLocked?$AA@
0x140034C4E: "__cdecl _imp_load_NaDynamicLockShouldIgnoreDisplayRequestActivity" __imp_load_NaDynamicLockShouldIgnoreDisplayRequestActivity
0x14002B568: "void __cdecl WlStateMachineCleanUp(void)" ?WlStateMachineCleanUp@@YAXXZ
0x1400A9500: "void * __ptr64 __ptr64 g_hTSJobCallbackWaitHandle" ?g_hTSJobCallbackWaitHandle@@3PEAXEA
0x14007D87C: StateMachineThreadContext_FreeContextPool
0x140051F8C: "unsigned long __cdecl WlAccessibilityOnDisconnect(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlAccessibilityOnDisconnect@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x14009F940: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x1400845C0: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x1400919E8: "NoClose" ??_C@_1BA@MDFCMEJD@?$AAN?$AAo?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x14002C420: "private: virtual bool __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV1::DoesGroupConfigExistInStore(void) __ptr64" ?DoesGroupConfigExistInStore@AssignedAccessConfigStoreV1@AssignedAccess@Internal@Windows@@EEAA_NXZ
0x140084C30: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x140018E80: "public: unsigned long __cdecl CMachine::GetMachinePolicy(unsigned short const * __ptr64,unsigned long) __ptr64" ?GetMachinePolicy@CMachine@@QEAAKPEBGK@Z
0x140084978: "__cdecl _imp_VirtualLock" __imp_VirtualLock
0x1400B14F0: "__cdecl _imp_WinStationIsSessionRemoteable" __imp_WinStationIsSessionRemoteable
0x140085C40: "%SYSTEMROOT%\System32\WinLogon.e" ??_C@_1GG@CFDIBGNO@?$AA?$CF?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AAR?$AAO?$AAO?$AAT?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAW?$AAi?$AAn?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?4?$AAe@
0x14008FB98: WLEvt_NotifySubscriber_Pended
0x140027F68: "public: unsigned long __cdecl CUser::CreateUserEnvironment(int,void * __ptr64 * __ptr64) __ptr64" ?CreateUserEnvironment@CUser@@QEAAKHPEAPEAX@Z
0x1400A7D48: "struct _StateMachineTransition * g_xWLGeneric_DifferentCredsAreRequiredReminder_Transition" ?g_xWLGeneric_DifferentCredsAreRequiredReminder_Transition@@3PAU_StateMachineTransition@@A
0x140091950: "NoLogoff" ??_C@_1BC@EHHFMEMF@?$AAN?$AAo?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AA?$AA@
0x1400505C4: "public: void __cdecl wil::details_abi::SubscriptionList::OnSignaled(class wil::srwlock & __ptr64) __ptr64" ?OnSignaled@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@@Z
0x1400870F0: "Software\Microsoft\Policies\Pass" ??_C@_1HA@BHFHKHON@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAP?$AAa?$AAs?$AAs@
0x140094258: "mpnotify" ??_C@_1BC@LGPODAOD@?$AAm?$AAp?$AAn?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x140086A98: "Configurations" ??_C@_1BO@LGEPHCPO@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1400892E0: "__cdecl _sz_ext_ms_win_ntuser_private_l1_1_0_dll" __sz_ext_ms_win_ntuser_private_l1_1_0_dll
0x1400A4BB0: "struct _StateMachineState g_xWLGeneric_CompleteLockRequest_State" ?g_xWLGeneric_CompleteLockRequest_State@@3U_StateMachineState@@A
0x1400A8530: "struct _StateMachineTransition * g_xWLGeneric_Welcome_Hibernating_Transition" ?g_xWLGeneric_Welcome_Hibernating_Transition@@3PAU_StateMachineTransition@@A
0x1400B1120: "__cdecl _imp_GetProfileType" __imp_GetProfileType
0x14004F240: "protected: virtual void * __ptr64 __cdecl wil::TraceLoggingProvider::`vector deleting destructor'(unsigned int) __ptr64" ??_ETraceLoggingProvider@wil@@MEAAPEAXI@Z
0x140089310: "__cdecl _sz_ext_ms_win_ntuser_private_l1_1_1_dll" __sz_ext_ms_win_ntuser_private_l1_1_1_dll
0x140090578: "UnexpectedReboot" ??_C@_1CC@FFCMMPEN@?$AAU?$AAn?$AAe?$AAx?$AAp?$AAe?$AAc?$AAt?$AAe?$AAd?$AAR?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x1400845F8: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x140090E20: "Text" ??_C@_19DHKNKHAD@?$AAT?$AAe?$AAx?$AAt?$AA?$AA@
0x140084768: api-ms-win-core-datetime-l1-1-0_NULL_THUNK_DATA
0x140001DA0: "unsigned long __cdecl WLGeneric_InitiateLock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_InitiateLock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140087A80: "WlballoonAlternateCredsNotificat" ??_C@_1FK@GEKMLBOB@?$AAW?$AAl?$AAb?$AAa?$AAl?$AAl?$AAo?$AAo?$AAn?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AAC?$AAr?$AAe?$AAd?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt@
0x1400B1360: "__cdecl _imp_GetUserObjectInformationW" __imp_GetUserObjectInformationW
0x14003574C: "__cdecl _tailMerge_ext_ms_win_advapi32_eventlog_l1_1_0_dll" __tailMerge_ext_ms_win_advapi32_eventlog_l1_1_0_dll
0x140085288: "__cdecl _imp_RtlGetNtProductType" __imp_RtlGetNtProductType
0x14000D360: NotifyUnloadConfiguration
0x14006E5D0: "void __cdecl WLGeneric_Request_Logon_Credz_Return_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Logon_Credz_Return_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140095168: "EasGetOSVolume" ??_C@_1BO@EDIAKANA@?$AAE?$AAa?$AAs?$AAG?$AAe?$AAt?$AAO?$AAS?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1400696F8: "int __cdecl GetTokenInformationWithAlloc(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?GetTokenInformationWithAlloc@@YAHPEAXW4_TOKEN_INFORMATION_CLASS@@PEAPEAXPEAK@Z
0x140087A20: "WlballoonSmartCardUnlockNotifica" ??_C@_1FM@HGOMMIGK@?$AAW?$AAl?$AAb?$AAa?$AAl?$AAl?$AAo?$AAo?$AAn?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa@
0x140031EBC: "unsigned long __cdecl WLEventUnregister(void)" ?WLEventUnregister@@YAKXZ
0x14009F420: profapi_NULL_THUNK_DATA_DLB
0x1400845E0: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x14008C000: "Welcome_Return" ??_C@_1BO@HIPJFFHO@?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA_?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x1400362D0: IsUMgrInformUserLogonPresent
0x14007D974: "unsigned long __cdecl WluiDisplayTSDisconnectOptionsMessage(unsigned long,unsigned long * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?WluiDisplayTSDisconnectOptionsMessage@@YAKKPEAKK00@Z
0x140085338: "__cdecl _imp_NtSetSecurityObject" __imp_NtSetSecurityObject
0x14008CCC8: "MPRLogonNotify_Unlock" ??_C@_1CM@FLHAAOD@?$AAM?$AAP?$AAR?$AAL?$AAo?$AAg?$AAo?$AAn?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140085098: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14007DFEC: WluiDisplaySecurityOptions
0x1400A7838: "unsigned long * g_xWLGeneric_Killing_Scrnsaver_Logged_On_ResetSignals" ?g_xWLGeneric_Killing_Scrnsaver_Logged_On_ResetSignals@@3PAKA
0x140068880: "int __cdecl wil_details_SetPropertyCacheOpportunityCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyCacheOpportunityCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x1400852F0: "__cdecl _imp_TpReleaseTimer" __imp_TpReleaseTimer
0x140094778: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x14001FF7C: StartWMsgServer
0x140033774: "void * __ptr64 __cdecl WLAlloc(unsigned __int64)" ?WLAlloc@@YAPEAX_K@Z
0x140086430: WLEvt_ThemesOnLogonPost_Start
0x140086910: "O:SYD:(A;;GA;;;%s)(A;;GA;;;SY)" ??_C@_1DO@KBPFGJHL@?$AAO?$AA?3?$AAS?$AAY?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AA?$CF?$AAs?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$AA@
0x140095E58: "AppUserModelId" ??_C@_1BO@CLNAADNG@?$AAA?$AAp?$AAp?$AAU?$AAs?$AAe?$AAr?$AAM?$AAo?$AAd?$AAe?$AAl?$AAI?$AAd?$AA?$AA@
0x140085420: "__cdecl _imp_TpSetWait" __imp_TpSetWait
0x140086248: WLDiagEvt_Unlock_Start
0x1400585C4: "void __cdecl DeletepJob(struct _WINLOGON_JOB * __ptr64 * __ptr64,int)" ?DeletepJob@@YAXPEAPEAU_WINLOGON_JOB@@H@Z
0x140035834: "__cdecl _imp_load_CheckForHiberboot" __imp_load_CheckForHiberboot
0x1400848C0: api-ms-win-core-job-l2-1-0_NULL_THUNK_DATA
0x14008C4D0: "MPRChangeLogonNotify" ??_C@_1CK@POOBADNL@?$AAM?$AAP?$AAR?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1400901A0: "Software\Policies\Microsoft\Wind" ??_C@_1HE@GDAHJNMA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x1400920F0: "Software\Microsoft\Windows\Curre" ??_C@_1IK@OPADCAEN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140085290: "__cdecl _imp_RtlSetSystemBootStatus" __imp_RtlSetSystemBootStatus
0x140085368: "__cdecl _imp_RtlDestroyEnvironment" __imp_RtlDestroyEnvironment
0x1400A85E0: "unsigned long * g_xWLGeneric_Welcome_ResetSignals" ?g_xWLGeneric_Welcome_ResetSignals@@3PAKA
0x140085570: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x14008FE78: "/start magnifierpane" ??_C@_1CK@BGBJPOIC@?$AA?1?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAm?$AAa?$AAg?$AAn?$AAi?$AAf?$AAi?$AAe?$AAr?$AAp?$AAa?$AAn?$AAe?$AA?$AA@
0x1400A64E0: "struct _StateMachineSignal g_xWinsrv_ShellRestart_Signal" ?g_xWinsrv_ShellRestart_Signal@@3U_StateMachineSignal@@A
0x140061380: "void __cdecl WLGeneric_CAD_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_CAD_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400B1260: "__cdecl _imp_DwmpTerminateSessionProcess" __imp_DwmpTerminateSessionProcess
0x1400880C0: "Os2LibPath" ??_C@_1BG@PDJCPNFL@?$AAO?$AAs?$AA2?$AAL?$AAi?$AAb?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14004F240: "public: virtual void * __ptr64 __cdecl CandidateAccountManagerPolicyTraceProvider::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCandidateAccountManagerPolicyTraceProvider@@UEAAPEAXI@Z
0x140085530: "__cdecl _imp_NtClose" __imp_NtClose
0x1400367A5: "__cdecl _imp_load_WinStationConnectAndLockDesktop" __imp_load_WinStationConnectAndLockDesktop
0x1400A75C0: "struct _StateMachineTransition * g_xWLGeneric_Locked_Transition" ?g_xWLGeneric_Locked_Transition@@3PAU_StateMachineTransition@@A
0x14006BD50: "public: int __cdecl CUser::IsTaskMgrDisabled(void) __ptr64" ?IsTaskMgrDisabled@CUser@@QEAAHXZ
0x14004F910: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x1400B1038: AUTHZ_NULL_THUNK_DATA_DLA
0x140079F94: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x140090C38: WPP_fbc3afda5d223834fdf347a043062646_Traceguids
0x1400783E0: WlSecureDesktoprPromptingRequest
0x1400351D4: "__cdecl _imp_load_SeciAllocateAndSetIPAddress" __imp_load_SeciAllocateAndSetIPAddress
0x1400916D8: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1400A7438: "struct _StateMachineTransition * g_xWLGeneric_Request_Unlock_Credz_Return_Transition" ?g_xWLGeneric_Request_Unlock_Credz_Return_Transition@@3PAU_StateMachineTransition@@A
0x14008CA90: "Locked" ??_C@_1O@EEOCOOLO@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x140084938: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140026DE0: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14009E4D8: samcli_NULL_THUNK_DATA_DLN
0x14009DC68: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_keyboard_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_keyboard_l1_1_0_dll
0x140084D90: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x14008B210: "Unlock" ??_C@_1O@OMNIMHMB@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140084F80: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x14008CB78: "Unlocking" ??_C@_1BE@JJDCFLGI@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAi?$AAn?$AAg?$AA?$AA@
0x140086950: "SYSTEM\CurrentControlSet\Control" ??_C@_1FA@OCMECJIP@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14009F320: samcli_NULL_THUNK_DATA_DLB
0x140051520: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x1400B1590: samcli_NULL_THUNK_DATA_DLA
0x1400364CC: IsWinStationIsSessionRemoteablePresent
0x1400793C0: ServerWMsg_midl_user_free
0x14008A350: "%ld" ??_C@_17OADJODNB@?$AA?$CF?$AAl?$AAd?$AA?$AA@
0x140084B58: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14005B650: "void __cdecl WLGeneric_Request_Unlock_Credz_Return_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_Unlock_Credz_Return_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140084A88: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140036336: "__cdecl _imp_load_UMgrInformUserLogoff" __imp_load_UMgrInformUserLogoff
0x1400947B0: "OrchestratePublishWnfDwordData: " ??_C@_1KC@PPAEIBCO@?$AAO?$AAr?$AAc?$AAh?$AAe?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAW?$AAn?$AAf?$AAD?$AAw?$AAo?$AAr?$AAd?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5@
0x1400B1198: "__cdecl _imp_RegisterLogonProcess" __imp_RegisterLogonProcess
0x14007F8F8: "private: long __cdecl Windows::Internal::AssignedAccess::AAManagerHelper::GetAssignedAccessTypeForUserWithGroup(unsigned short const * __ptr64,enum Windows::Internal::AssignedAccess::AssignedAccessType * __ptr64) __ptr64" ?GetAssignedAccessTypeForUserWithGroup@AAManagerHelper@AssignedAccess@Internal@Windows@@AEAAJPEBGPEAW4AssignedAccessType@234@@Z
0x140094370: "All" ??_C@_17HBCMGFHP@?$AAA?$AAl?$AAl?$AA?$AA@
0x140004F10: "int __cdecl wil_details_SetPropertyFlagCallback(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64)" ?wil_details_SetPropertyFlagCallback@@YAHPEATwil_details_FeaturePropertyCache@@PEAX@Z
0x1400A8E64: "__cdecl dowildcard" _dowildcard
0x140023180: "unsigned long __cdecl WlRemindersTerminate(enum WlReminderType)" ?WlRemindersTerminate@@YAKW4WlReminderType@@@Z
0x140095530: "FveIsDeviceLockable" ??_C@_0BE@PBFNKOEA@FveIsDeviceLockable?$AA@
0x140086CD8: "HideFastUserSwitching" ??_C@_1CM@BAPGDOFG@?$AAH?$AAi?$AAd?$AAe?$AAF?$AAa?$AAs?$AAt?$AAU?$AAs?$AAe?$AAr?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAi?$AAn?$AAg?$AA?$AA@
0x1400A6D78: "unsigned long * g_xWLGeneric_TimeoutHandler_Locked_ResetSignals" ?g_xWLGeneric_TimeoutHandler_Locked_ResetSignals@@3PAKA
0x140088CB0: "__cdecl _sz_samcli_dll" __sz_samcli_dll
0x140078634: MyRtlAdjustPrivilege
0x140089D80: "internal\sdk\inc\wil\resource.h" ??_C@_0CA@BIKDFFBC@internal?2sdk?2inc?2wil?2resource?4h?$AA@
0x1400854B0: "__cdecl _imp_RtlCopyLuid" __imp_RtlCopyLuid
0x140085498: "__cdecl _imp_RtlEqualSid" __imp_RtlEqualSid
0x140057988: "void __cdecl WlInactivityTimeoutHandler_Logged_On_Hibernating(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlInactivityTimeoutHandler_Logged_On_Hibernating@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140085250: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1400A8F10: "__cdecl _hmod__ext_ms_win_advapi32_shutdown_l1_1_0_dll" __hmod__ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x1400A5CF0: "struct _StateMachineState g_xWLGeneric_WaitForDisconnectAfterFailedAuth_State" ?g_xWLGeneric_WaitForDisconnectAfterFailedAuth_State@@3U_StateMachineState@@A
0x14008BEE8: "SasDisabled" ??_C@_1BI@KGMINHIL@?$AAS?$AAa?$AAs?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140094C88: "_LockStore" ??_C@_1BG@DLHNPHFP@?$AA_?$AAL?$AAo?$AAc?$AAk?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?$AA@
0x1400852C0: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1400845B8: "__cdecl _imp_RpcMgmtIsServerListening" __imp_RpcMgmtIsServerListening
0x140031A98: "bool __cdecl IsCredentialReset(void)" ?IsCredentialReset@@YA_NXZ
0x14007EA4C: WmsgpSendMessage
0x14009DDE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_winsta_l1_1_0_dll
0x140087B28: WLEvt_ConnectToSubscriber_Stop
0x1400646A0: "unsigned long __cdecl WLGeneric_Logged_On_Hibernating_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logged_On_Hibernating_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400351F8: "__cdecl _imp_load_SeciFreeCallContext" __imp_load_SeciFreeCallContext
0x140084D00: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x140066C10: "void __cdecl WLGeneric_HandleSecureLuaBeforeShell_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_HandleSecureLuaBeforeShell_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14005043C: ?MakeAndInitialize@?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x14006E630: "void __cdecl WLGeneric_Welcome_Return_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Welcome_Return_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140095388: "PackEASLockoutData" ??_C@_1CG@NJGOGPPD@?$AAP?$AAa?$AAc?$AAk?$AAE?$AAA?$AAS?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1400888A0: "PUBLIC" ??_C@_1O@OIBMMMPB@?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AA?$AA@
0x140084960: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x140091008: "shell32.dll,-11" ??_C@_1CA@NDGGOCI@?$AAs?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AA?9?$AA1?$AA1?$AA?$AA@
0x140085138: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x1400AA4F8: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x1400145E0: "long __cdecl EasEngineGetPolicies(int,void * __ptr64,unsigned long,unsigned long * __ptr64,struct _tagEASPolicy * __ptr64 * __ptr64)" ?EasEngineGetPolicies@@YAJHPEAXKPEAKPEAPEAU_tagEASPolicy@@@Z
0x140036C91: "__cdecl _imp_load_CredUIParseUserNameW" __imp_load_CredUIParseUserNameW
0x1400871D0: WLEvt_RequestCredentials_Start
0x140089DC0: "NtUpdateWnfStateData" ??_C@_0BF@NPHHEHP@NtUpdateWnfStateData?$AA@
0x140064AE0: "void __cdecl WLGeneric_Welcome_Hibernating_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Welcome_Hibernating_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008FCD0: WLEvt_EASDeviceRebootWarning_Info
0x1400A6F10: "struct _StateMachineTransition * g_xWLGeneric_FindDestinationSession_Unlock_Transition" ?g_xWLGeneric_FindDestinationSession_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x14008FB78: WLDiagEvt_UnlockFailure_Stop
0x140031D3C: StartLoadingFonts
0x14008BF70: "ChangePassword" ??_C@_1BO@OJHHLPON@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$AA@
0x140036E30: ApiSetQueryApiSetPresence
0x140089E20: "internal\onecoreuapshell\inc\oob" ??_C@_0DI@DFCHOHKP@internal?2onecoreuapshell?2inc?2oob@
0x1400854F8: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x14007240C: "int __cdecl TestTokenPrivilege(void * __ptr64,unsigned long)" ?TestTokenPrivilege@@YAHPEAXK@Z
0x140034750: free
0x140088DE0: "ext-ms-win-session-winlogon-l1-1" ??_C@_1EG@BAKKCCBF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x140058494: WPP_SF_ddS
0x140066210: WPP_SF_Sdd
0x140066010: "unsigned long __cdecl WLGeneric_Killing_Scrnsaver_Logged_On_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Killing_Scrnsaver_Logged_On_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084E68: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x14002B590: StateMachineDestroy
0x1400B1430: "__cdecl _imp_UMgrSetCachedCredentials" __imp_UMgrSetCachedCredentials
0x140036B69: "__cdecl _imp_load_WNetClearConnections" __imp_load_WNetClearConnections
0x1400B14E8: "__cdecl _imp_WinStationGetRestrictedLogonInfo" __imp_WinStationGetRestrictedLogonInfo
0x140088A20: "PasswordExpiryWarning" ??_C@_1CM@HJFEHJAN@?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAE?$AAx?$AAp?$AAi?$AAr?$AAy?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x14007BC40: "public: virtual void * __ptr64 __cdecl InProcEncryptHandle::`vector deleting destructor'(unsigned int) __ptr64" ??_EInProcEncryptHandle@@UEAAPEAXI@Z
0x1400652DC: WPP_SF_SqD
0x14008D5B8: "CommonW6432Dir" ??_C@_1BO@EBJJHLMH@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAW?$AA6?$AA4?$AA3?$AA2?$AAD?$AAi?$AAr?$AA?$AA@
0x140091548: "FirstLogonTimeout" ??_C@_1CE@ILMIKOKA@?$AAF?$AAi?$AAr?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x14006EAF4: WPP_SF_SSD
0x14000DC88: "unsigned long __cdecl MprLogonNotifyHelper(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?MprLogonNotifyHelper@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x14008E9E4: ?_TlgEvent@?BO@??Stop@AuthenticateUser@WinlogonProvider@@QEAAXJJ@Z@4U<unnamed-type-_TlgEvent>@?BO@??123@QEAAXJJ@Z@B
0x140030008: "public: unsigned long __cdecl CMachine::GetName(unsigned short * __ptr64,unsigned long * __ptr64) __ptr64" ?GetName@CMachine@@QEAAKPEAGPEAK@Z
0x1400904A0: "OOBECompletedForOOBEHealth" ??_C@_1DG@POPDBPPJ@?$AAO?$AAO?$AAB?$AAE?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AAF?$AAo?$AAr?$AAO?$AAO?$AAB?$AAE?$AAH?$AAe?$AAa?$AAl?$AAt?$AAh?$AA?$AA@
0x1400851E0: "__cdecl _imp_NtOpenEvent" __imp_NtOpenEvent
0x14006A680: "void __cdecl CredsStaleReminderEventCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WAIT * __ptr64,long)" ?CredsStaleReminderEventCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WAIT@@J@Z
0x14002A0D0: SignalManagerGetSignal
0x1400845D8: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1400351E6: "__cdecl _imp_load_SeciAllocateAndSetCallFlags" __imp_load_SeciAllocateAndSetCallFlags
0x1400889E0: Microsoft_Windows_Shell_Core_Provider
0x14006E460: "void __cdecl WLGeneric_AccessNotifyAsUser_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AccessNotifyAsUser_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x140090440: "Software\Microsoft\Windows\Curre" ??_C@_1FO@MLNDMPPM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140094EA0: "Lockout Metadata Invalid - Total" ??_C@_1GE@MMNNHEBK@?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AA?5?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AA?9?$AA?5?$AAT?$AAo?$AAt?$AAa?$AAl@
0x14004FC28: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x140084B60: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400A64B0: "struct _StateMachineSignal g_xWinsrv_WinL_Signal" ?g_xWinsrv_WinL_Signal@@3U_StateMachineSignal@@A
0x140020B48: WluiDisplayWelcome
0x1400915E0: "CSession::QueryRemoteSessionType" ??_C@_0CB@HAABANHM@CSession?3?3QueryRemoteSessionType@
0x140034720: "__cdecl purecall" _purecall
0x140084AE8: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x140050B04: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x140029F90: SignalManagerWaitForSignal
0x140094700: "SetupType" ??_C@_1BE@MMGHIOAH@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x14001615C: "long __cdecl _ReadPolicies(void * __ptr64,unsigned long * __ptr64,struct _tagEASPolicy * __ptr64 * __ptr64)" ?_ReadPolicies@@YAJPEAXPEAKPEAPEAU_tagEASPolicy@@@Z
0x140095EA0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x140091640: "userinit" ??_C@_1BC@KAOCMILD@?$AAu?$AAs?$AAe?$AAr?$AAi?$AAn?$AAi?$AAt?$AA?$AA@
0x140036DC8: "__cdecl _std_terminate" __std_terminate
0x1400A9148: "unsigned __int64 g_ulLogoffStartTick" ?g_ulLogoffStartTick@@3_KA
0x140085450: "__cdecl _imp_EtwEventWriteStartScenario" __imp_EtwEventWriteStartScenario
0x14005C5D8: "public: void __cdecl wil::details::static_lazy<class WinlogonProvider>::cleanup(void) __ptr64" ?cleanup@?$static_lazy@VWinlogonProvider@@@details@wil@@QEAAXXZ
0x14008FF20: "SlideToShutDown.exe" ??_C@_1CI@BDJMAKEI@?$AAS?$AAl?$AAi?$AAd?$AAe?$AAT?$AAo?$AAS?$AAh?$AAu?$AAt?$AAD?$AAo?$AAw?$AAn?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14002CAC4: RegExists
0x140034D87: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x14009E188: ext-ms-win-advapi32-shutdown-l1-1-0_NULL_THUNK_DATA_DLN
0x1400644A0: "void __cdecl WLGeneric_MPRLogonNotify_Unlock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_MPRLogonNotify_Unlock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140084628: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x1400A6360: "struct _StateMachineSignal g_xWl_DisplayOn_Signal" ?g_xWl_DisplayOn_Signal@@3U_StateMachineSignal@@A
0x14007BE60: "public: virtual long __cdecl OutOfProcEncryptHandle::EasDisableDeviceLockoutState(void * __ptr64) __ptr64" ?EasDisableDeviceLockoutState@OutOfProcEncryptHandle@@UEAAJPEAX@Z
0x140036A54: IsDwmpTerminateSessionProcessPresent
0x140091D20: "LogonHoursAction" ??_C@_1CC@ELCIJGIM@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAH?$AAo?$AAu?$AAr?$AAs?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140017FE0: "int __cdecl IsSASRequired(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?IsSASRequired@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140090430: WPP_527934a3e86a319fb70b2250f35cceb8_Traceguids
0x1400232E0: SetUserDesktopSecurity
0x140059DC0: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x14000521C: "protected: void __cdecl wil::TraceLoggingProvider::Register(struct _TlgProvider_t const * __ptr64 const) __ptr64" ?Register@TraceLoggingProvider@wil@@IEAAXQEBU_TlgProvider_t@@@Z
0x14008B1B8: "Disconnect" ??_C@_1BG@DNEMHIE@?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140089BC0: "__cdecl _sz_ext_ms_win_composition_init_l1_1_0_dll" __sz_ext_ms_win_composition_init_l1_1_0_dll
0x140085020: api-ms-win-stateseparation-helpers-l1-1-0_NULL_THUNK_DATA
0x140068800: "void __cdecl wil_details_FeaturePropertyCache_ReportUsageToService(union wil_details_FeaturePropertyCache * __ptr64,unsigned int,struct FEATURE_LOGGED_TRAITS const * __ptr64,int,enum wil_ReportingKind,unsigned __int64)" ?wil_details_FeaturePropertyCache_ReportUsageToService@@YAXPEATwil_details_FeaturePropertyCache@@IPEBUFEATURE_LOGGED_TRAITS@@HW4wil_ReportingKind@@_K@Z
0x1400B1080: "__cdecl _imp_NaDynamicLockForceEvaluate" __imp_NaDynamicLockForceEvaluate
0x140004E50: MIDL_user_allocate
0x14004EFF4: "public: __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::~ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>(void) __ptr64" ??1?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAA@XZ
0x140032060: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400849A8: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x140084958: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x140094AC8: "UnattendLogWV" ??_C@_1BM@PPHHDPAK@?$AAU?$AAn?$AAa?$AAt?$AAt?$AAe?$AAn?$AAd?$AAL?$AAo?$AAg?$AAW?$AAV?$AA?$AA@
0x140037506: memcmp
0x140084868: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x14005E6B4: "long __cdecl GetRedirectionKeyPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetRedirectionKeyPath@@YAJPEBG0PEAPEAG@Z
0x14005FBC4: "public: void __cdecl WinlogonProvider::AuthenticateUser::StartActivity(void) __ptr64" ?StartActivity@AuthenticateUser@WinlogonProvider@@QEAAXXZ
0x1400697FC: "int __cdecl IsMiniNTMode(void)" ?IsMiniNTMode@@YAHXZ
0x140035AC7: "__cdecl _imp_load_GetKeyState" __imp_load_GetKeyState
0x1400A9030: "__cdecl _hmod__credui_dll" __hmod__credui_dll
0x140085E00: "\NetworkProvider" ??_C@_1CC@CKANOMJL@?$AA?2?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x140094CF8: "_GetBuiltInProvidersPolicies" ??_C@_1DK@LDOMNLPE@?$AA_?$AAG?$AAe?$AAt?$AAB?$AAu?$AAi?$AAl?$AAt?$AAI?$AAn?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAs?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x1400876C8: "Secure Desktop LRPC interface" ??_C@_1DM@EICDLIFP@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?5?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?5?$AAL?$AAR?$AAP?$AAC?$AA?5?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x140085100: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x14008B940: "Action_Failed" ??_C@_1BM@CPEJBDCA@?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AA_?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x140036853: "__cdecl _tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll" __tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x14009E258: ext-ms-win-ntuser-private-l1-1-1_NULL_THUNK_DATA_DLN
0x1400633E0: "protected: virtual bool __cdecl WinlogonProvider::ShouldLogoffOtherUsers::WasAlreadyReportedToTelemetry(long) __ptr64" ?WasAlreadyReportedToTelemetry@ShouldLogoffOtherUsers@WinlogonProvider@@MEAA_NJ@Z
0x140089DA0: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x14009E238: ext-ms-win-ntuser-private-l1-1-0_NULL_THUNK_DATA_DLN
0x140094358: "Non-admin" ??_C@_1BE@HKNEHPDB@?$AAN?$AAo?$AAn?$AA?9?$AAa?$AAd?$AAm?$AAi?$AAn?$AA?$AA@
0x1400347EC: RtlpImageNtHeader
0x140089F5C: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x1400A4A70: "struct _StateMachineState g_xWLGeneric_Locked_Hibernating_State" ?g_xWLGeneric_Locked_Hibernating_State@@3U_StateMachineState@@A
0x1400A7B90: "struct _StateMachineTransition * g_xWLGeneric_ShellRestart_Transition" ?g_xWLGeneric_ShellRestart_Transition@@3PAU_StateMachineTransition@@A
0x1400888B0: "USERPROFILE" ??_C@_1BI@FAOJLPH@?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x1400A6540: "struct _StateMachineSignal g_xWinsrv_PowerMsgShow_Signal" ?g_xWinsrv_PowerMsgShow_Signal@@3U_StateMachineSignal@@A
0x140032160: "private: virtual bool __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV0::DoesGroupConfigExistInStore(void) __ptr64" ?DoesGroupConfigExistInStore@AssignedAccessConfigStoreV0@AssignedAccess@Internal@Windows@@EEAA_NXZ
0x1400849E8: "__cdecl _imp_SetPriorityClass" __imp_SetPriorityClass
0x1400B12F0: ext-ms-win-ntuser-private-l1-1-0_NULL_THUNK_DATA_DLA
0x140085428: "__cdecl _imp_NtFilterToken" __imp_NtFilterToken
0x14000D690: "private: void __cdecl CUser::CleanUp(void) __ptr64" ?CleanUp@CUser@@AEAAXXZ
0x1400B1310: ext-ms-win-ntuser-private-l1-1-1_NULL_THUNK_DATA_DLA
0x14002B890: SignalManagerCreate
0x14009F510: ext-ms-win-ntuser-private-l1-1-1_NULL_THUNK_DATA_DLB
0x140065370: WPP_SF_dSSl
0x1400B1418: "__cdecl _imp_UMgrInformUserLogon" __imp_UMgrInformUserLogon
0x14009F500: ext-ms-win-ntuser-private-l1-1-0_NULL_THUNK_DATA_DLB
0x1400A5C70: "struct _StateMachineState g_xWLGeneric_FindDestinationSession_State" ?g_xWLGeneric_FindDestinationSession_State@@3U_StateMachineState@@A
0x14008B180: "StartSSAsNoone" ??_C@_1BO@CMKEOHOJ@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAS?$AAA?$AAs?$AAN?$AAo?$AAo?$AAn?$AAe?$AA?$AA@
0x140088460: "SOFTWARE\Microsoft\Windows Embed" ??_C@_1FK@CMCMFDIB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAE?$AAm?$AAb?$AAe?$AAd@
0x140072040: "protected: virtual void __cdecl WinlogonProvider::ShouldLogoffOtherUsers::StopActivity(void) __ptr64" ?StopActivity@ShouldLogoffOtherUsers@WinlogonProvider@@MEAAXXZ
0x140095A60: "SE_SIGNING_LEVEL_MICROSOFT > res" ??_C@_1GA@JGALKOMB@?$AAS?$AAE?$AA_?$AAS?$AAI?$AAG?$AAN?$AAI?$AAN?$AAG?$AA_?$AAL?$AAE?$AAV?$AAE?$AAL?$AA_?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?5?$AA?$DO?$AA?5?$AAr?$AAe?$AAs@
0x14005EBB0: "int __cdecl IsProcInSysProcs(unsigned __int64,void * __ptr64)" ?IsProcInSysProcs@@YAH_KPEAX@Z
0x14006C118: "void __cdecl LogonHoursDisplayWarning(class CUser * __ptr64,unsigned long,unsigned long)" ?LogonHoursDisplayWarning@@YAXPEAVCUser@@KK@Z
0x1400A9010: "__cdecl _hmod__ext_ms_win_winlogon_mincreds_l1_1_0_dll" __hmod__ext_ms_win_winlogon_mincreds_l1_1_0_dll
0x140085F60: "Software\Microsoft\Windows NT\Cu" ??_C@_1IO@ICBJLHPK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400508D0: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x14004EF44: ??0?$ProcessLocalStorageData@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAA@$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@2@$$QEAVSemaphoreValue@12@@Z
0x140089C68: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x1400A8558: "struct _StateMachineTransition * g_xWLGeneric_Killing_Scrnsaver_Welcome_Transition" ?g_xWLGeneric_Killing_Scrnsaver_Welcome_Transition@@3PAU_StateMachineTransition@@A
0x1400A90E8: "long (__cdecl* __ptr64 g_wil_details_pfnRtlSubscribeWnfStateChangeNotification)(struct __WIL__WNF_USER_SUBSCRIPTION * __ptr64 * __ptr64,struct __WIL__WNF_STATE_NAME,unsigned long,long (__cdecl*)(struct __WIL__WNF_STATE_NAME,unsigned long,struct __WIL__WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long),void * __ptr64,struct __WIL__WNF_TYPE_ID * __ptr64,unsigned long,unsigned long)" ?g_wil_details_pfnRtlSubscribeWnfStateChangeNotification@@3P6AJPEAPEAU__WIL__WNF_USER_SUBSCRIPTION@@U__WIL__WNF_STATE_NAME@@KP6AJ1KPEAU__WIL__WNF_TYPE_ID@@PEAXPEBXK@Z32KK@ZEA
0x1400916FC: "-d" ??_C@_15EBELCIOA@?$AA?9?$AAd?$AA?$AA@
0x140087848: PROPERTY_TYPE_ALLOW_BLANK_PASSWORD
0x1400A78E8: "struct _StateMachineTransition * g_xWLGeneric_AbortPendingLuaRequest_Transition" ?g_xWLGeneric_AbortPendingLuaRequest_Transition@@3PAU_StateMachineTransition@@A
0x140085DF0: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x14004FD18: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x14003707C: "protected: void __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::Destroy(void) __ptr64" ?Destroy@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@IEAAXXZ
0x1400057C0: "bool __cdecl CreativeFramework::Policy::IsContentDeliveryPolicyEnforced(void)" ?IsContentDeliveryPolicyEnforced@Policy@CreativeFramework@@YA_NXZ
0x14000ED20: "unsigned long __cdecl WLGeneric_NotifyStartShell_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyStartShell_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140075E00: "unsigned long __cdecl IsServiceExpectedToStart(struct _NOTIFICATION_CLIENT_DEF * __ptr64,struct _NOTIFICATION_COMPONENT * __ptr64,int * __ptr64,int * __ptr64)" ?IsServiceExpectedToStart@@YAKPEAU_NOTIFICATION_CLIENT_DEF@@PEAU_NOTIFICATION_COMPONENT@@PEAH2@Z
0x1400056D0: "public: unsigned __int64 __cdecl wil::details_abi::UsageIndexProperty::GetSize(void)const __ptr64" ?GetSize@UsageIndexProperty@details_abi@wil@@QEBA_KXZ
0x1400599D0: "void __cdecl InitiateDisconnectWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?InitiateDisconnectWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1400AA49C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbrmhgUoryUlyquivUznwGEUhgwzucOlyq@pkeyinst" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUorxvmhrmtUhkkUkpvbrmhgUoryUlyquivUznwGEUhgwzucOlyq@pkeyinst
0x140084BE8: "__cdecl _imp_SleepEx" __imp_SleepEx
0x1400628A0: "unsigned long __cdecl WLGeneric_Logon_ReportLastLogon_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportLastLogon_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140034D45: "__cdecl _imp_load_LsaFreeReturnBuffer" __imp_load_LsaFreeReturnBuffer
0x14009E330: ext-ms-win-session-candidateaccountmgr-l1-1-0_NULL_THUNK_DATA_DLN
0x14008C1D8: "Request_Logon_Credz" ??_C@_1CI@GGMKHGAO@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA?$AA@
0x140075520: ExtractVersionInfo
0x1400B1358: "__cdecl _imp_CreateWindowStationW" __imp_CreateWindowStationW
0x140094788: "ntdll" ??_C@_1M@OAIMIKLP@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?$AA@
0x1400123A0: "public: unsigned long __cdecl CSession::TerminateAtJob(void) __ptr64" ?TerminateAtJob@CSession@@QEAAKXZ
0x1400B1498: "__cdecl _imp_WinStationPreCreateGlassReplacementSession" __imp_WinStationPreCreateGlassReplacementSession
0x1400865F8: WLEvt_WaitForLSM_Stop
0x140036A54: IsDwmpNotifyUserLogoffPresent
0x1400B11D8: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x140087958: "Winlogon" ??_C@_08GBLIGBPF@Winlogon?$AA@
0x14007E534: WluiSecureDisplayLocked
0x140036611: "__cdecl _imp_load_WinStationFreePropertyValue" __imp_load_WinStationFreePropertyValue
0x14006C77C: "public: unsigned long __cdecl CUser::RegSetDWORD(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?RegSetDWORD@CUser@@QEAAKPEBG0K@Z
0x1400A83D8: "unsigned long * g_xWLGeneric_Request_Logon_Credz_ResetSignals" ?g_xWLGeneric_Request_Logon_Credz_ResetSignals@@3PAKA
0x1400866D8: "Screen-saver" ??_C@_1BK@HDINKHPF@?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?9?$AAs?$AAa?$AAv?$AAe?$AAr?$AA?$AA@
0x1400A64F0: "struct _StateMachineSignal g_xWinsrv_AccessNotify_Signal" ?g_xWinsrv_AccessNotify_Signal@@3U_StateMachineSignal@@A
0x14006C440: "private: static void __cdecl CUser::LogonHoursWarningCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?LogonHoursWarningCallback@CUser@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x1400B14B8: "__cdecl _imp_WinStationReportUIResult" __imp_WinStationReportUIResult
0x1400A6678: "struct _TlgProvider_t `public: __cdecl WinlogonProvider::StaticHandle::StaticHandle(void) __ptr64'::`2'::__hInner" ?__hInner@?1???0StaticHandle@WinlogonProvider@@QEAA@XZ@4U_TlgProvider_t@@A
0x14009F8A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x14009FB34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsapolicy-l1-1-0
0x14008BA48: "Winsrv_LogoffNotify" ??_C@_1CI@GMFPJD@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x140092098: WPP_9bd27bee419c35f67410f3fcdb591e8b_Traceguids
0x140051624: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x140034744: wcsstr
0x140085D08: WLEvt_ShutdownWindows_Start
0x1400364A5: "__cdecl _imp_load_CamCleanupDisardedCandidateAccounts" __imp_load_CamCleanupDisardedCandidateAccounts
0x1400909C8: "AutoLogonCount" ??_C@_1BO@LDEMOFFD@?$AAA?$AAu?$AAt?$AAo?$AAL?$AAo?$AAg?$AAo?$AAn?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x14008A500: WPP_5d65531830443082e86bcf7e0459223e_Traceguids
0x1400A9608: g_pSidPowerUser
0x1400848F8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140051654: "void __cdecl wil::details::in1diag3::_FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1400193F0: "unsigned long __cdecl WLGeneric_DisplayLegalNotice_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DisplayLegalNotice_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084FA8: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x14009FAE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x14008CA20: "Change_ReportResult" ??_C@_1CI@DPPAKFHI@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x140084650: "__cdecl _imp_RpcServerListen" __imp_RpcServerListen
0x1400A4170: PfnEventRegister
0x1400659C4: "unsigned long __cdecl RunScreenSaver(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct SCREEN_SAVER_DATA * __ptr64,struct _WINLOGON_JOB * __ptr64 * __ptr64)" ?RunScreenSaver@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAUSCREEN_SAVER_DATA@@PEAPEAU_WINLOGON_JOB@@@Z
0x1400364CC: IsWinStationTerminateGlassReplacementSessionPresent
0x1400A5830: "struct _StateMachineState g_xWLGeneric_Locked_Resume_State" ?g_xWLGeneric_Locked_Resume_State@@3U_StateMachineState@@A
0x1400908C0: "Software\Microsoft\Windows NT\Cu" ??_C@_1IM@FJPEAHOM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x1400B1328: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x140088E30: "ext-ms-win-session-winlogon-l1-1" ??_C@_1EG@KIBGEFHA@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x1400846E8: "__cdecl _imp_I_RpcMapWin32Status" __imp_I_RpcMapWin32Status
0x1400B13E0: "__cdecl _imp_CamRefreshCandidateUser" __imp_CamRefreshCandidateUser
0x1400A4CB0: "struct _StateMachineState g_xWLGeneric_ChangeUnlock_ReportResult_State" ?g_xWLGeneric_ChangeUnlock_ReportResult_State@@3U_StateMachineState@@A
0x1400959A0: "RegDeleteValue(ThirdPartyEncrypt" ??_C@_1GC@PNCBNHKD@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$CI?$AAT?$AAh?$AAi?$AAr?$AAd?$AAP?$AAa?$AAr?$AAt?$AAy?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt@
0x1400A6300: "struct _StateMachineSignal g_xWLGeneric_SasDisabled_Signal" ?g_xWLGeneric_SasDisabled_Signal@@3U_StateMachineSignal@@A
0x1400848D8: "__cdecl _imp_RegisterWaitForSingleObject" __imp_RegisterWaitForSingleObject
0x1400359BD: "__cdecl _tailMerge_ext_ms_win_ntuser_dialogbox_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_dialogbox_l1_1_0_dll
0x14007E150: WluiInitialize
0x1400923D8: "%s\%s\%s\%s" ??_C@_1BI@GNPPDLIB@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x140084E28: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x1400846B0: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x1400A4BF0: "struct _StateMachineState g_xWLGeneric_PostUnlockActions_State" ?g_xWLGeneric_PostUnlockActions_State@@3U_StateMachineState@@A
0x14005766C: "void __cdecl WlInactivityTimeoutHandler_Logged_On(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long)" ?WlInactivityTimeoutHandler_Logged_On@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@K@Z
0x140085278: "__cdecl _imp_WinSqmEndSession" __imp_WinSqmEndSession
0x1400883D0: "SOFTWARE\Microsoft\Windows\Assig" ??_C@_1II@LEKBEFB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAA?$AAs?$AAs?$AAi?$AAg@
0x140084D70: "__cdecl _imp_CreateTimerQueueTimer" __imp_CreateTimerQueueTimer
0x1400AA1C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUdrmoltlmUxlivUlyquivUznwGEUkivxlnkOlyq@winlogon" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUdrmoltlmUxlivUlyquivUznwGEUkivxlnkOlyq@winlogon
0x1400088B4: "struct wil_details_RecordUsageResult __cdecl wil_details_RecordUsageInPropertyCache(union wil_details_FeaturePropertyCache * __ptr64,enum wil_details_ServiceReportingKind,unsigned int,unsigned int)" ?wil_details_RecordUsageInPropertyCache@@YA?AUwil_details_RecordUsageResult@@PEATwil_details_FeaturePropertyCache@@W4wil_details_ServiceReportingKind@@II@Z
0x140091920: "UserInitMprLogonScript" ??_C@_1CO@BJDLBKNK@?$AAU?$AAs?$AAe?$AAr?$AAI?$AAn?$AAi?$AAt?$AAM?$AAp?$AAr?$AAL?$AAo?$AAg?$AAo?$AAn?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?$AA@
0x140084740: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140084678: "__cdecl _imp_RpcBindingVectorFree" __imp_RpcBindingVectorFree
0x14007F840: "private: void __cdecl Microsoft::WRL::Wrappers::HStringReference::CreateReference(unsigned short const * __ptr64,unsigned int,unsigned int) __ptr64" ?CreateReference@HStringReference@Wrappers@WRL@Microsoft@@AEAAXPEBGII@Z
0x140086C30: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x140094C28: "LocalAlloc" ??_C@_1BG@CAMFAADD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x14007C4CC: "long __cdecl _RegValueToVariant(unsigned long,unsigned long,unsigned char const * __ptr64,struct tagPROPVARIANT * __ptr64)" ?_RegValueToVariant@@YAJKKPEBEPEAUtagPROPVARIANT@@@Z
0x140009424: "public: bool __cdecl wil::details_abi::RawUsageIndex::RecordUsage(void * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64,unsigned int) __ptr64" ?RecordUsage@RawUsageIndex@details_abi@wil@@QEAA_NPEAX_K01I@Z
0x14009F750: ext-ms-win-winlogon-mincreds-l1-1-0_NULL_THUNK_DATA_DLB
0x14002FE78: "public: unsigned long __cdecl CGlobalStore::RegAllocAndQueryWinlogonSZ(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?RegAllocAndQueryWinlogonSZ@CGlobalStore@@QEAAKPEBGPEAPEAG@Z
0x14009F5E0: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLB
0x140051C90: TraceLoggingUnregister
0x140084E20: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x14002C7A0: "private: virtual bool __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV0::DoesProfileExistInStore(unsigned short const * __ptr64) __ptr64" ?DoesProfileExistInStore@AssignedAccessConfigStoreV0@AssignedAccess@Internal@Windows@@EEAA_NPEBG@Z
0x1400B1238: "__cdecl _imp_CheckForHiberboot" __imp_CheckForHiberboot
0x140090E98: "RetryInterval" ??_C@_1BM@ICIJAPNC@?$AAR?$AAe?$AAt?$AAr?$AAy?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x14009DA48: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x140036BF4: "__cdecl _imp_load_WNetRestoreAllConnectionsW" __imp_load_WNetRestoreAllConnectionsW
0x1400A8570: "unsigned long * g_xWLGeneric_TimeoutHandler_Welcome_ResetSignals" ?g_xWLGeneric_TimeoutHandler_Welcome_ResetSignals@@3PAKA
0x140085440: "__cdecl _imp_RtlPublishWnfStateData" __imp_RtlPublishWnfStateData
0x140076A68: WlSecureDesktopiCompletePromptingRequest
0x140087CE0: "EtwEventUnregister" ??_C@_0BD@JDHMJNFM@EtwEventUnregister?$AA@
0x1400916E8: "lsass.exe" ??_C@_1BE@FPBDCMAD@?$AAl?$AAs?$AAa?$AAs?$AAs?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140089D50: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x14007EF4C: PfRpcGetTokenUserInfo
0x140086AF0: "SYSTEM\CurrentControlSet\Control" ??_C@_1FM@LNJAANCJ@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x140012FB0: TerminateUmfdHost
0x140085D50: "System\CurrentControlSet\Control" ??_C@_1GC@OPEDJIOF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x14007FD18: MicrosoftTelemetryAssertTriggeredWorker
0x140085090: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140086390: "NoDebugThread" ??_C@_1BM@JLMGJFLL@?$AAN?$AAo?$AAD?$AAe?$AAb?$AAu?$AAg?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
0x140035C68: "__cdecl _imp_load_CancelShutdown" __imp_load_CancelShutdown
0x1400A5630: "struct _StateMachineState g_xWLGeneric_CAD_Return_State" ?g_xWLGeneric_CAD_Return_State@@3U_StateMachineState@@A
0x140088C00: "Global\BootShellComplete" ??_C@_1DC@DCPMIOHJ@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAB?$AAo?$AAo?$AAt?$AAS?$AAh?$AAe?$AAl?$AAl?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x140089610: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@FIHMJCLF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140055840: "unsigned long __cdecl WLGeneric_ChangingPassword_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangingPassword_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400B1530: "__cdecl _imp_WTSDisconnectSession" __imp_WTSDisconnectSession
0x14000D600: "public: __cdecl CGlobalStore::CGlobalStore(void) __ptr64" ??0CGlobalStore@@QEAA@XZ
0x140085238: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x140085208: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x1400191C0: "unsigned long __cdecl GetLegalNotices(unsigned short const * __ptr64,struct _LEGALINFO * __ptr64)" ?GetLegalNotices@@YAKPEBGPEAU_LEGALINFO@@@Z
0x140056960: "unsigned long __cdecl WLGeneric_TimeoutHandler_Logged_On_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Logged_On_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400595E0: "public: static void __cdecl WinlogonProvider::ConsumeCacheSessionFailed<unsigned long & __ptr64>(unsigned long & __ptr64)" ??$ConsumeCacheSessionFailed@AEAK@WinlogonProvider@@SAXAEAK@Z
0x140086D98: "DisableLockWorkstation" ??_C@_1CO@IPPKJECH@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAL?$AAo?$AAc?$AAk?$AAW?$AAo?$AAr?$AAk?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140084760: "__cdecl _imp_GetTimeFormatW" __imp_GetTimeFormatW
0x1400B14E0: "__cdecl _imp_WinStationFreeUserCredentials" __imp_WinStationFreeUserCredentials
0x1400A7C78: "unsigned long * g_xWLGeneric_InitiateDisconnect_ResetSignals" ?g_xWLGeneric_InitiateDisconnect_ResetSignals@@3PAKA
0x1400846D8: "__cdecl _imp_I_RpcBindingInqLocalClientPID" __imp_I_RpcBindingInqLocalClientPID
0x140085578: ntdll_NULL_THUNK_DATA
0x14000C980: "int __cdecl Parse_Cmdline(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64,int * __ptr64,int * __ptr64)" ?Parse_Cmdline@@YAHPEBGPEAPEAGPEAGPEAH3@Z
0x140033D6C: "public: void __cdecl CSession::WaitForMonitorOffThread(void) __ptr64" ?WaitForMonitorOffThread@CSession@@QEAAXXZ
0x140085050: "__cdecl _imp_memcpy" __imp_memcpy
0x140095BB0: "Cmdline" ??_C@_1BA@DOPIGINC@?$AAC?$AAm?$AAd?$AAl?$AAi?$AAn?$AAe?$AA?$AA@
0x1400A923C: "int g_fShellStartupReached" ?g_fShellStartupReached@@3HA
0x140094630: WPP_f9d6e7366a593f8ceaa9f2f65b1296e6_Traceguids
0x1400A6620: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x140031FEC: "void __cdecl SetupDestroySplashScreen(void)" ?SetupDestroySplashScreen@@YAXXZ
0x140084EF0: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x14003530D: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x14008E47B: ?_TlgEvent@?5??StartActivity@AuthenticateUser@WinlogonProvider@@QEAAXXZ@4U<unnamed-type-_TlgEvent>@?5??123@QEAAXXZ@B
0x1400853F0: "__cdecl _imp_TpAllocWork" __imp_TpAllocWork
0x14009D9E8: "__cdecl TI2?AVResultException@wil@@" _TI2?AVResultException@wil@@
0x140089C30: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x140004E50: WlSecureDesktop_midl_user_allocate
0x1400364CC: IsWinStationPreCreateGlassReplacementSessionPresent
0x1400A5130: "struct _StateMachineState g_xWLGeneric_Request_Unlock_Credz_Return_State" ?g_xWLGeneric_Request_Unlock_Credz_Return_State@@3U_StateMachineState@@A
0x14008BC78: "TS_SessionCreateFailed" ??_C@_1CO@DNAJGFMA@?$AAT?$AAS?$AA_?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x14008A490: "onecore\ds\security\eas\policyen" ??_C@_1GA@IOAPFPJM@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x1400850D0: "__cdecl _imp__ismbblead" __imp__ismbblead
0x14009E1C8: ext-ms-win-devmgmt-policy-l1-1-1_NULL_THUNK_DATA_DLN
0x14006A4B4: WPP_SF_ddd
0x1400A63F0: "struct _StateMachineSignal g_xWl_ReconnectionUpdate_Signal" ?g_xWl_ReconnectionUpdate_Signal@@3U_StateMachineSignal@@A
0x14005646C: "void __cdecl NotifyScreenSaverStopped(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?NotifyScreenSaverStopped@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140020778: WluiNotifyUserIsLoggedOn
0x140085348: "__cdecl _imp_RtlAddMandatoryAce" __imp_RtlAddMandatoryAce
0x14009F4A0: ext-ms-win-devmgmt-policy-l1-1-1_NULL_THUNK_DATA_DLB
0x140085470: "__cdecl _imp_RtlDeregisterWait" __imp_RtlDeregisterWait
0x1400367ED: "__cdecl _imp_load__WinStationWaitForConnect" __imp_load__WinStationWaitForConnect
0x14006DE9C: WPP_SF_lil
0x1400B1280: ext-ms-win-devmgmt-policy-l1-1-1_NULL_THUNK_DATA_DLA
0x1400B1318: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x1400363B4: IsCamRefreshCandidateUserPresent
0x140063978: WPP_SF_lll
0x140076740: WPP_SF_Sls
0x1400765F4: WPP_SF_SlS
0x140087420: WLEvt_ThemesOnCreateSession_Start
0x14008B960: "Logoff_NtUserCompleted" ??_C@_1CO@DIBFCLEA@?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AA_?$AAN?$AAt?$AAU?$AAs?$AAe?$AAr?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?$AA@
0x14006DD9C: WPP_SF_SSS
0x14006EBB8: WPP_SF_sss
0x1400654A4: WPP_SF_dqD
0x140086AB8: "(0x%x,0x%x)" ??_C@_1BI@ILKGEOCF@?$AA?$CI?$AA0?$AAx?$AA?$CF?$AAx?$AA?0?$AA0?$AAx?$AA?$CF?$AAx?$AA?$CJ?$AA?$AA@
0x14008B9F8: "Winsrv_PowerResumeShow" ??_C@_1CO@GBKLAGJO@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAP?$AAo?$AAw?$AAe?$AAr?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AAS?$AAh?$AAo?$AAw?$AA?$AA@
0x140088FB0: "ext-ms-win-advapi32-shutdown-l1-" ??_C@_1EI@KOFPNHCG@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAs?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?9?$AAl?$AA1?$AA?9@
0x140094AC0: "[%S] %S" ??_C@_07EKKPINLM@?$FL?$CFS?$FN?5?$CFS?$AA@
0x140060264: "public: void __cdecl wil::details::ThreadFailureCallbackHolder::StopWatching(void) __ptr64" ?StopWatching@ThreadFailureCallbackHolder@details@wil@@QEAAXXZ
0x140001CF0: ?acquire@?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEBA?AV?$unique_any_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?ReleaseMutex@details@wil@@YAX0@ZU?$integral_constant@_K$01@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@@2@PEAKKH@Z
0x1400313EC: "void __cdecl CleanupData(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?CleanupData@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x140089D00: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x140092430: "ShouldLogoffOtherUsers" ??_C@_0BH@LOMDFPEN@ShouldLogoffOtherUsers?$AA@
0x140067A60: "public: unsigned long __cdecl CSession::CreateScreenSaverDesktop(void * __ptr64) __ptr64" ?CreateScreenSaverDesktop@CSession@@QEAAKPEAX@Z
0x14009DB28: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_2_dll
0x140085558: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x140085328: "__cdecl _imp_NtOpenDirectoryObject" __imp_NtOpenDirectoryObject
0x140091FB0: "System\CurrentControlSet\Control" ??_C@_1GC@NNJFMOAL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1400AA4A8: "void (__cdecl* __ptr64 g_Uninitialize)(void)" ?g_Uninitialize@@3P6AXXZEA
0x140089C90: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x1400A79E0: "struct _StateMachineTransition * g_xWLGeneric_SecureCredUI_Operation_Transition" ?g_xWLGeneric_SecureCredUI_Operation_Transition@@3PAU_StateMachineTransition@@A
0x1400848D0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x1400A59F0: "struct _StateMachineState g_xWLGeneric_CredsAreStaleReminder_State" ?g_xWLGeneric_CredsAreStaleReminder_State@@3U_StateMachineState@@A
0x14008F3B3: ?_TlgEvent@?5??StartActivity@ShouldLogoffOtherUsers@WinlogonProvider@@QEAAXXZ@4U<unnamed-type-_TlgEvent>@?5??123@QEAAXXZ@B
0x14003732C: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x140063030: "void __cdecl WLGeneric_SequentialLogonPrompt_Unlock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialLogonPrompt_Unlock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140034B9F: "__cdecl _imp_load_NaDynamicLockForceEvaluate" __imp_load_NaDynamicLockForceEvaluate
0x1400A6925: g_header_init_InitializeStagingSRUMFeatureReporting
0x140035FC7: "__cdecl _tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_windowstation_l1_1_0_dll
0x1400318D0: "unsigned long __cdecl WLGeneric_Logon_ReportSuccessResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportSuccessResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14007A764: "int __cdecl FindEASLockOutEntryForSID(struct _USER_COUNT_ENTRY * __ptr64,unsigned long,void * __ptr64,int * __ptr64)" ?FindEASLockOutEntryForSID@@YAHPEAU_USER_COUNT_ENTRY@@KPEAXPEAH@Z
0x1400B14A0: "__cdecl _imp_WinStationTerminateGlassReplacementSession" __imp_WinStationTerminateGlassReplacementSession
0x140033C50: "void __cdecl MonitorOffWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_WORK * __ptr64)" ?MonitorOffWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_WORK@@@Z
0x1400556C0: "void __cdecl WLGeneric_ChangeUnlock_ReportResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangeUnlock_ReportResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14007C340: "private: virtual long __cdecl InProcEncryptHandle::_Initialize(void) __ptr64" ?_Initialize@InProcEncryptHandle@@EEAAJXZ
0x1400775CC: WlSecureDesktoppValidateCredmanRestoreInfo
0x140067310: "void __cdecl WLGeneric_SecureCredUI_Operation_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SecureCredUI_Operation_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400A8F60: "__cdecl _hmod__ext_ms_win_ntuser_private_l1_1_1_dll" __hmod__ext_ms_win_ntuser_private_l1_1_1_dll
0x140095610: "RegQueryInfoKey" ??_C@_1CA@EPOOGCJD@?$AAR?$AAe?$AAg?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAI?$AAn?$AAf?$AAo?$AAK?$AAe?$AAy?$AA?$AA@
0x140084ED0: "__cdecl _imp_FreeSid" __imp_FreeSid
0x14006DA88: "void __cdecl WLEventWrite(struct _EVENT_DESCRIPTOR const & __ptr64,unsigned long,unsigned long)" ?WLEventWrite@@YAXAEBU_EVENT_DESCRIPTOR@@KK@Z
0x1400A6CA0: "struct _StateMachineTransition * g_xWLGeneric_Locked_Reconnect_Transition" ?g_xWLGeneric_Locked_Reconnect_Transition@@3PAU_StateMachineTransition@@A
0x140020384: WluiReleaseUI
0x140034E06: "__cdecl _imp_load_GetUserNameExW" __imp_load_GetUserNameExW
0x14009F238: UXINIT_NULL_THUNK_DATA_DLB
0x140012AA0: "unsigned long __cdecl LaunchUmfdHostWithVirtualAccountThreadProc(void * __ptr64)" ?LaunchUmfdHostWithVirtualAccountThreadProc@@YAKPEAX@Z
0x140085560: "__cdecl _imp_EtwEventWriteTransfer" __imp_EtwEventWriteTransfer
0x1400B1180: UXINIT_NULL_THUNK_DATA_DLA
0x14009E0C8: UXINIT_NULL_THUNK_DATA_DLN
0x1400A4770: "struct _StateMachineState g_xWLGeneric_NotifyTerminateSession_State" ?g_xWLGeneric_NotifyTerminateSession_State@@3U_StateMachineState@@A
0x1400A4DF0: "struct _StateMachineState g_xWLGeneric_SequentialLogonPrompt_Unlock_State" ?g_xWLGeneric_SequentialLogonPrompt_Unlock_State@@3U_StateMachineState@@A
0x140084DF8: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1400A7820: "unsigned long * g_xWLGeneric_TO_Disconnected_ResetSignals" ?g_xWLGeneric_TO_Disconnected_ResetSignals@@3PAKA
0x14009F814: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x14006ED34: "unsigned long __cdecl WlStateMachineRun(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WlStateMachineRun@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAK@Z
0x140089228: "ext-ms-win-ntuser-misc-l1-5-0" ??_C@_1DM@BJBMLEFI@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA5?$AA?9?$AA0?$AA?$AA@
0x1400A7360: "unsigned long * g_xWLGeneric_Unlocking_ResetSignals" ?g_xWLGeneric_Unlocking_ResetSignals@@3PAKA
0x14008C050: "Killing_Scrnsaver_Welcome" ??_C@_1DE@NOIGOOLC@?$AAK?$AAi?$AAl?$AAl?$AAi?$AAn?$AAg?$AA_?$AAS?$AAc?$AAr?$AAn?$AAs?$AAa?$AAv?$AAe?$AAr?$AA_?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA?$AA@
0x140035098: "__cdecl _tailMerge_authz_dll" __tailMerge_authz_dll
0x140088510: "System\Setup\Status" ??_C@_1CI@EDJKIOEK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1400A6E78: "unsigned long * g_xWLGeneric_Request_UnlockChange_Credz_ResetSignals" ?g_xWLGeneric_Request_UnlockChange_Credz_ResetSignals@@3PAKA
0x1400909A0: "DefaultDomainName" ??_C@_1CE@KHNBBMJ@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAD?$AAo?$AAm?$AAa?$AAi?$AAn?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140084D30: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x14001FA30: WluiRequestCredentials
0x1400189E4: "private: void __cdecl CUser::StopUserPresencePollingUnderLock(void) __ptr64" ?StopUserPresencePollingUnderLock@CUser@@AEAAXXZ
0x1400A60B0: "struct _StateMachineState g_xWLGeneric_Welcome_Hibernating_State" ?g_xWLGeneric_Welcome_Hibernating_State@@3U_StateMachineState@@A
0x1400A6D10: "struct _StateMachineTransition * g_xWLGeneric_CompleteLockRequest_Transition" ?g_xWLGeneric_CompleteLockRequest_Transition@@3PAU_StateMachineTransition@@A
0x1400B1438: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA
0x1400507F0: "public: void __cdecl wil::details::FeatureStateManager::QueueBackgroundSRUMUsageReporting(unsigned int,unsigned short,unsigned int) __ptr64" ?QueueBackgroundSRUMUsageReporting@FeatureStateManager@details@wil@@QEAAXIGI@Z
0x14008CB08: "Request_Unlock_Credz_Return" ??_C@_1DI@BODHMLPP@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA_?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x140095C88: "DestroySplashWindows" ??_C@_0BF@LMAJFGEI@DestroySplashWindows?$AA@
0x1400AA2A8: "unsigned __int64 s_WppLogger" ?s_WppLogger@@3_KA
0x1400905F0: "{ %d; %d; %d; %d; %d; %d; %d; %d" ??_C@_1BPG@FLOIFHPF@?$AA?$HL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd?$AA?$DL?$AA?5?$AA?$CF?$AAd@
0x140085150: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x1400951C0: "EncryptHandle::CreateEncryptHand" ??_C@_1EG@HFPJODOI@?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?3?$AA?3?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAH?$AAa?$AAn?$AAd@
0x14008D578: "ProgramW6432Dir" ??_C@_1CA@CFPJEBPB@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAW?$AA6?$AA4?$AA3?$AA2?$AAD?$AAi?$AAr?$AA?$AA@
0x140064650: "void __cdecl WLGeneric_Locked_Resume_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Resume_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140088C40: "__cdecl _sz_UXINIT_dll" __sz_UXINIT_dll
0x140086D10: "MaxDevicePasswordFailedAttempts" ??_C@_1EA@FOFPAEFE@?$AAM?$AAa?$AAx?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAA?$AAt?$AAt?$AAe?$AAm?$AAp?$AAt?$AAs?$AA?$AA@
0x140084E18: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x14007C010: "public: virtual long __cdecl OutOfProcEncryptHandle::EasLockDevice(void * __ptr64) __ptr64" ?EasLockDevice@OutOfProcEncryptHandle@@UEAAJPEAX@Z
0x140084710: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x1400864E0: WLEvt_ExecuteShellCommandList_Stop
0x1400A68E8: "__cdecl _security_cookie" __security_cookie
0x14008E530: ?_TlgEvent@?3???$OOBEHealthNonCriticalMetric@AEBE_K_KAEA_KPEAGPEAG@OOBEHealthTelemetry@@SAXAEBE$$QEA_K1AEA_K$$QEAPEAG3@Z@4U<unnamed-type-_TlgEvent>@?3???$OOBEHealthNonCriticalMetric@AEBE_K_KAEA_KPEAGPEAG@1@SAX011233@Z@B
0x140068A7C: WPP_SF_dddS
0x14006E684: "bool __cdecl IsOOBETransitionUXVisible(void)" ?IsOOBETransitionUXVisible@@YA_NXZ
0x14008C360: "WaitForDisconnectAfterFailedAuth" ??_C@_1EC@DFCJPMHO@?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAA?$AAf?$AAt?$AAe?$AAr?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAA?$AAu?$AAt?$AAh@
0x14008C988: "TO_Disconnected" ??_C@_1CA@CDLIOGBG@?$AAT?$AAO?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x140084AC0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14008BE28: "Wl_DisplayOn" ??_C@_1BK@MHPDACPB@?$AAW?$AAl?$AA_?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAO?$AAn?$AA?$AA@
0x14009F358: USERENV_NULL_THUNK_DATA_DLB
0x140009034: "long __cdecl wil_details_NtQueryWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?wil_details_NtQueryWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBU__WIL__WNF_TYPE_ID@@PEBXPEAKPEAX3@Z
0x14002120C: "unsigned long __cdecl SetDefaultWinstaSecurity(struct HWINSTA__ * __ptr64,void * __ptr64 * __ptr64)" ?SetDefaultWinstaSecurity@@YAKPEAUHWINSTA__@@PEAPEAX@Z
0x1400A5570: "struct _StateMachineState g_xWLGeneric_ReadyForSecureLua_State" ?g_xWLGeneric_ReadyForSecureLua_State@@3U_StateMachineState@@A
0x1400629C0: "void __cdecl WLGeneric_Logon_ReportLastLogon_Unlock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportLastLogon_Unlock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140089E10: WPP_7c2a9380cec23ee86b174e73d6881eef_Traceguids
0x14008BFC8: "NotifyCreateSession" ??_C@_1CI@LOPLALGK@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x140037570: "__cdecl alloca_probe" _alloca_probe
0x140055600: "void __cdecl WLGeneric_ChangeLogon_ReportResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangeLogon_ReportResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400335B8: "unsigned long __cdecl SuspendComputer(int,int,int,int)" ?SuspendComputer@@YAKHHHH@Z
0x1400B1118: "__cdecl _imp_CreateAppContainerProfile" __imp_CreateAppContainerProfile
0x140086290: "b08669ee-8cb5-43a5-a017-84fe%08X" ??_C@_1EC@KCBNLCCM@?$AAb?$AA0?$AA8?$AA6?$AA6?$AA9?$AAe?$AAe?$AA?9?$AA8?$AAc?$AAb?$AA5?$AA?9?$AA4?$AA3?$AAa?$AA5?$AA?9?$AAa?$AA0?$AA1?$AA7?$AA?9?$AA8?$AA4?$AAf?$AAe?$AA?$CF?$AA0?$AA8?$AAX@
0x1400364CC: Is_WinStationWaitForConnectPresent
0x14007BFF0: "public: virtual long __cdecl InProcEncryptHandle::EasLockDevice(void * __ptr64) __ptr64" ?EasLockDevice@InProcEncryptHandle@@UEAAJPEAX@Z
0x140068498: "public: void __cdecl CSession::RestartNtuserInactivityTimer(void * __ptr64) __ptr64" ?RestartNtuserInactivityTimer@CSession@@QEAAXPEAX@Z
0x14004FFD4: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x140086490: WLEvt_StartLogonUI_Start
0x1400A5870: "struct _StateMachineState g_xWLGeneric_Logged_On_Resume_State" ?g_xWLGeneric_Logged_On_Resume_State@@3U_StateMachineState@@A
0x140088900: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1KG@BALAGELK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140089D68: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x1400849D0: "__cdecl _imp_GetExitCodeProcess" __imp_GetExitCodeProcess
0x140084680: "__cdecl _imp_RpcServerUnsubscribeForNotification" __imp_RpcServerUnsubscribeForNotification
0x1400A55B0: "struct _StateMachineState g_xWLGeneric_StartSecureLua_State" ?g_xWLGeneric_StartSecureLua_State@@3U_StateMachineState@@A
0x1400AA330: "unsigned short * __ptr64 * __ptr64 __ptr64 SysProcs" ?SysProcs@@3PEAPEAGEA
0x1400B12A0: "__cdecl _imp_GetAsyncKeyState" __imp_GetAsyncKeyState
0x14004F0E4: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorage<class wil::details_abi::FeatureStateData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorage@VFeatureStateData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x140030DB4: "public: unsigned long __cdecl CUser::ApplyLogonHoursRestrictions(void) __ptr64" ?ApplyLogonHoursRestrictions@CUser@@QEAAKXZ
0x140084EC0: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x1400707D8: "unsigned long __cdecl HandleShutdownConfirmation(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long,unsigned long,unsigned short * __ptr64)" ?HandleShutdownConfirmation@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@KKPEAG@Z
0x14008D458: "ProgramFiles" ??_C@_1BK@CECDDAML@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1400A9420: "union wil_details_FeaturePropertyCache `bool __cdecl wil::details::IsFeatureConfigured(struct wil_FeatureState * __ptr64,unsigned int,bool,enum wil_FeatureStore)'::`2'::machineStoreProbe" ?machineStoreProbe@?1??IsFeatureConfigured@details@wil@@YA_NPEAUwil_FeatureState@@I_NW4wil_FeatureStore@@@Z@4Twil_details_FeaturePropertyCache@@A
0x140084CF0: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x1400A7300: "struct _StateMachineTransition * g_xWLGeneric_Unlock_LogonUser_Transition" ?g_xWLGeneric_Unlock_LogonUser_Transition@@3PAU_StateMachineTransition@@A
0x14008D0A0: "Locked_Hibernating" ??_C@_1CG@JPAEFPCI@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA_?$AAH?$AAi?$AAb?$AAe?$AAr?$AAn?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x140086570: WLEvt_CreatePrimaryTerminal_Start
0x1400354C8: IsThemesOnReconnectPresent
0x14009DC28: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_devmgmt_policy_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_devmgmt_policy_l1_1_1_dll
0x14008CD50: "Logon_Checking_LastLogonPolicy_U" ??_C@_1EM@JAOHHGA@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAC?$AAh?$AAe?$AAc?$AAk?$AAi?$AAn?$AAg?$AA_?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA_?$AAU@
0x140075BA0: StringCbPrintfW
0x1400539F4: "unsigned long __cdecl WlAccessibilitypCopyConfiguration(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,int)" ?WlAccessibilitypCopyConfiguration@@YAKPEAUHKEY__@@0H@Z
0x1400B1278: "__cdecl _imp_PolicyManager_GetPolicy" __imp_PolicyManager_GetPolicy
0x1400A7500: "struct _StateMachineTransition * g_xWLGeneric_LockScreen_Transition" ?g_xWLGeneric_LockScreen_Transition@@3PAU_StateMachineTransition@@A
0x14008C950: "Killing_Scrnsaver_Logged_On" ??_C@_1DI@LMCLFOEG@?$AAK?$AAi?$AAl?$AAl?$AAi?$AAn?$AAg?$AA_?$AAS?$AAc?$AAr?$AAn?$AAs?$AAa?$AAv?$AAe?$AAr?$AA_?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA?$AA@
0x140095590: "FveLockDevice" ??_C@_0O@KDNENPJJ@FveLockDevice?$AA@
0x1400A64C0: "struct _StateMachineSignal g_xWinsrv_Lock_Signal" ?g_xWinsrv_Lock_Signal@@3U_StateMachineSignal@@A
0x14001E62C: "public: unsigned long __cdecl CUser::StopImpersonating(void) __ptr64" ?StopImpersonating@CUser@@QEAAKXZ
0x14008EF6D: ?_TlgEvent@?3???$_TlgWriteActivityAutoStop@$0A@$03@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z@4U<unnamed-type-_TlgEvent>@?3???$_TlgWriteActivityAutoStop@$0A@$03@@YAX01@Z@B
0x140035F97: "__cdecl _imp_load_EnumWindows" __imp_load_EnumWindows
0x140084C60: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x140090090: "Tried to delete WinLogonActivity" ??_C@_0DP@HMHBBGNG@Tried?5to?5delete?5WinLogonActivity@
0x1400362D0: IsUMgrLaunchShellInfrastructureHostPresent
0x1400956D8: "_RegValueToVariant" ??_C@_1CG@JBDAJCEO@?$AA_?$AAR?$AAe?$AAg?$AAV?$AAa?$AAl?$AAu?$AAe?$AAT?$AAo?$AAV?$AAa?$AAr?$AAi?$AAa?$AAn?$AAt?$AA?$AA@
0x140084828: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14008C708: "InitiateDisconnect" ??_C@_1CG@FIAKDKIP@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140084E38: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x1400853E0: "__cdecl _imp_WinSqmSetDWORD" __imp_WinSqmSetDWORD
0x140079840: "void __cdecl wil::details::Rethrow(void)" ?Rethrow@details@wil@@YAXXZ
0x1400B1528: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x140084B48: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x14008A3A0: "onecore\ds\security\umstartup\ca" ??_C@_0FO@GAHLPBEI@onecore?2ds?2security?2umstartup?2ca@
0x1400A6550: "struct _StateMachineSignal g_xWinsrv_Sas_Signal" ?g_xWinsrv_Sas_Signal@@3U_StateMachineSignal@@A
0x14006FABC: "unsigned long __cdecl GetInputDesktopNameEx(struct HDESK__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetInputDesktopNameEx@@YAKPEAUHDESK__@@PEAPEAG@Z
0x1400B12D0: "__cdecl _imp_LoadLocalFonts" __imp_LoadLocalFonts
0x1400873D0: "DefaultAccountSAMName" ??_C@_1CM@BBNBFGJJ@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AAS?$AAA?$AAM?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140081030: "const CGlobalStore::`vftable'" ??_7CGlobalStore@@6B@
0x14009F8DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x1400687EC: "public: int __cdecl CSession::UnlockWindowStation(void) __ptr64" ?UnlockWindowStation@CSession@@QEAAHXZ
0x140085490: "__cdecl _imp_TpSimpleTryPost" __imp_TpSimpleTryPost
0x14005CBF0: "int __cdecl AsyncLogoffSupportIsLogoffInProgress(void)" ?AsyncLogoffSupportIsLogoffInProgress@@YAHXZ
0x1400A5BB0: "struct _StateMachineState g_xWLGeneric_ShellStartup_State" ?g_xWLGeneric_ShellStartup_State@@3U_StateMachineState@@A
0x1400A56F0: "struct _StateMachineState g_xWLGeneric_No_Unlock_Reconnect_State" ?g_xWLGeneric_No_Unlock_Reconnect_State@@3U_StateMachineState@@A
0x1400B1220: "__cdecl _imp_CloseEventLog" __imp_CloseEventLog
0x1400B1030: "__cdecl _imp_AuthzFreeAuditEvent" __imp_AuthzFreeAuditEvent
0x140070BB8: "bool __cdecl IsAdmin(void * __ptr64)" ?IsAdmin@@YA_NPEAX@Z
0x14008BB00: "Winsrv_WinL" ??_C@_1BI@LOONICEO@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAW?$AAi?$AAn?$AAL?$AA?$AA@
0x14008CC90: "Unlock_ReportFailedResult" ??_C@_1DE@POALFHLE@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AA?$AA@
0x14009F4C8: ext-ms-win-ntuser-keyboard-l1-1-0_NULL_THUNK_DATA_DLB
0x140087068: "DelayedDesktopSwitchTimeout" ??_C@_1DI@JCDMPLHE@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140084870: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1400A6490: "struct _StateMachineSignal g_xSecure_Request_Signal" ?g_xSecure_Request_Signal@@3U_StateMachineSignal@@A
0x14000CF60: "public: virtual void * __ptr64 __cdecl CGlobalStore::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCGlobalStore@@UEAAPEAXI@Z
0x14005D760: "public: class WinlogonProvider::AuthenticateUser & __ptr64 __cdecl WinlogonProvider::AuthenticateUser::operator=(class WinlogonProvider::AuthenticateUser &&) __ptr64" ??4AuthenticateUser@WinlogonProvider@@QEAAAEAV01@$$QEAV01@@Z
0x140086710: "Disconnected" ??_C@_1BK@GGPLAOLF@?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x14000D1C8: "public: virtual __cdecl CSession::~CSession(void) __ptr64" ??1CSession@@UEAA@XZ
0x1400B10A0: "__cdecl _imp_LsaCallAuthenticationPackage" __imp_LsaCallAuthenticationPackage
0x140094540: "%SystemDrive%\Debuggers\ntsd.exe" ??_C@_1EC@JHJEDHOA@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAr?$AAi?$AAv?$AAe?$AA?$CF?$AA?2?$AAD?$AAe?$AAb?$AAu?$AAg?$AAg?$AAe?$AAr?$AAs?$AA?2?$AAn?$AAt?$AAs?$AAd?$AA?4?$AAe?$AAx?$AAe@
0x140084ED8: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1400354C8: IsThemesOnCreateSessionPresent
0x140079738: ??1?$unique_ptr@U_POLICY_DNS_DOMAIN_INFO@@U?$function_deleter@P6AJPEAX@Z$1?LsaFreeMemory@@YAJ0@Z@wil@@@wistd@@QEAA@XZ
0x140051698: ?close_reset@?$resource_policy@PEAU__WIL__WNF_USER_SUBSCRIPTION@@P6AXPEAU1@@Z$1?UnsubscribeWilWnf@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAU1@$0A@$$T@details@wil@@SAXPEAU__WIL__WNF_USER_SUBSCRIPTION@@@Z
0x1400A8FD0: "__cdecl _hmod__ext_ms_win_session_candidateaccountmgr_l1_1_0_dll" __hmod__ext_ms_win_session_candidateaccountmgr_l1_1_0_dll
0x1400A68E0: "__cdecl _defaultmatherr" __defaultmatherr
0x140086480: WLEvt_StartLogonUI_Stop
0x140055BE0: "protected: virtual void * __ptr64 __cdecl CDataStoreObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDataStoreObject@@MEAAPEAXI@Z
0x14009F83C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x14002A4A0: McGenControlCallbackV2
0x140084750: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x1400902B8: WPP_3040f12f2a443e62ea84143a198ec620_Traceguids
0x140092338: "AnyoneRead" ??_C@_1BG@JPDNFBMK@?$AAA?$AAn?$AAy?$AAo?$AAn?$AAe?$AAR?$AAe?$AAa?$AAd?$AA?$AA@
0x140057000: "unsigned long __cdecl WLGeneric_TimeoutHandler_Welcome_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Welcome_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14005AAB0: "void __cdecl WLGeneric_InitiateDisconnect_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_InitiateDisconnect_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008BE48: "Wl_HubScreen" ??_C@_1BK@OMPLEPKK@?$AAW?$AAl?$AA_?$AAH?$AAu?$AAb?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x14000577C: RtlUIntAdd
0x140003D00: "void __cdecl TransferCredentialsWorkerThread(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?TransferCredentialsWorkerThread@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1400B1170: "__cdecl _imp_ThemesOnLogoff" __imp_ThemesOnLogoff
0x140091368: "LogonUI Logon Window" ??_C@_1CK@DOCMILEG@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA?5?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?5?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AA?$AA@
0x140036781: "__cdecl _imp_load_WinStationPreCreateGlassReplacementSession" __imp_load_WinStationPreCreateGlassReplacementSession
0x1400B10C8: "__cdecl _imp_SeciAllocateAndSetIPAddress" __imp_SeciAllocateAndSetIPAddress
0x14002C544: "public: __cdecl wil::details::FeatureStateManager::~FeatureStateManager(void) __ptr64" ??1FeatureStateManager@details@wil@@QEAA@XZ
0x14002FFB0: "public: __cdecl OOBE::Health::details::OOBEHealthTracker::~OOBEHealthTracker(void) __ptr64" ??1OOBEHealthTracker@details@Health@OOBE@@QEAA@XZ
0x1400847E8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140087880: "\Sessions\%d\BaseNamedObjects" ??_C@_1DM@GPEAFMED@?$AA?2?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AAs?$AA?2?$AA?$CF?$AAd?$AA?2?$AAB?$AAa?$AAs?$AAe?$AAN?$AAa?$AAm?$AAe?$AAd?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1400B12C0: "__cdecl _imp_SetUserObjectSecurity" __imp_SetUserObjectSecurity
0x14002BBCC: "public: int __cdecl CSession::IsShellRequiredInSession(void) __ptr64" ?IsShellRequiredInSession@CSession@@QEAAHXZ
0x140059B48: "unsigned long __cdecl LaunchNewCandidateUseSession(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?LaunchNewCandidateUseSession@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x1400A7C08: "struct _StateMachineTransition * g_xWLGeneric_Logged_On_Reconnect_Transition" ?g_xWLGeneric_Logged_On_Reconnect_Transition@@3PAU_StateMachineTransition@@A
0x1400A5B30: "struct _StateMachineState g_xWLGeneric_ChangingLogonPassword_State" ?g_xWLGeneric_ChangingLogonPassword_State@@3U_StateMachineState@@A
0x140090B08: "launchtm.exe /%lu" ??_C@_1CE@DNDELJFG@?$AAl?$AAa?$AAu?$AAn?$AAc?$AAh?$AAt?$AAm?$AA?4?$AAe?$AAx?$AAe?$AA?5?$AA?1?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x1400918C0: "USERDNSDOMAIN" ??_C@_1BM@OPCNFIBF@?$AAU?$AAS?$AAE?$AAR?$AAD?$AAN?$AAS?$AAD?$AAO?$AAM?$AAA?$AAI?$AAN?$AA?$AA@
0x140088590: "EventRegister" ??_C@_0O@BAMBGLIE@EventRegister?$AA@
0x1400B1148: "__cdecl _imp_ThemeWatchForStart" __imp_ThemeWatchForStart
0x14003551C: IsConfigureUserArsoPresent
0x14002C2F0: "private: virtual bool __cdecl Windows::Internal::AssignedAccess::AssignedAccessConfigStoreV1::DoesProfileExistInStore(unsigned short const * __ptr64) __ptr64" ?DoesProfileExistInStore@AssignedAccessConfigStoreV1@AssignedAccess@Internal@Windows@@EEAA_NPEBG@Z
0x14008DCA3: ?_TlgEvent@?9??FeatureLoggingHook@details@wil@@YAXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@Z@4U<unnamed-type-_TlgEvent>@?9??123@YAXI01H23E4@Z@B
0x140014950: NotifyLoadConfiguration
0x1400B1108: "__cdecl _imp_LsaConnectUntrusted" __imp_LsaConnectUntrusted
0x14003513B: "__cdecl _imp_load_NetLocalGroupAddMembers" __imp_load_NetLocalGroupAddMembers
0x1400903F8: "Console" ??_C@_1BA@GIKDDGPH@?$AAC?$AAo?$AAn?$AAs?$AAo?$AAl?$AAe?$AA?$AA@
0x140084AE0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140025200: "unsigned long __cdecl BuildRpcBinding(struct _NOTIFICATION_COMPONENT * __ptr64)" ?BuildRpcBinding@@YAKPEAU_NOTIFICATION_COMPONENT@@@Z
0x1400A6640: "struct _TlgProvider_t `public: __cdecl wil::details::FeatureLogging::StaticHandle::StaticHandle(void) __ptr64'::`2'::__hInner" ?__hInner@?1???0StaticHandle@FeatureLogging@details@wil@@QEAA@XZ@4U_TlgProvider_t@@A
0x140084598: "__cdecl _imp_CreateProcessInternalW" __imp_CreateProcessInternalW
0x1400680E0: "public: static int __cdecl CSession::GetDesktopName(struct HDESK__ * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetDesktopName@CSession@@SAHPEAUHDESK__@@PEAPEAG@Z
0x1400A9060: "__cdecl _onexitbegin" __onexitbegin
0x140088CF0: "__cdecl _sz_AUTHZ_dll" __sz_AUTHZ_dll
0x140084DA8: "__cdecl _imp_GetFileVersionInfoExW" __imp_GetFileVersionInfoExW
0x14002D3FC: "public: __cdecl OOBE::Health::details::OOBEHealthTracker::OOBEHealthTracker(void) __ptr64" ??0OOBEHealthTracker@details@Health@OOBE@@QEAA@XZ
0x14002E858: "public: __cdecl wil::details::FeatureStateManager::FeatureStateManager(void) __ptr64" ??0FeatureStateManager@details@wil@@QEAA@XZ
0x14002E950: RemoveCriticalPrivileges
0x14005D380: "public: __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>(class wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType> &&,bool) __ptr64" ??0?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAA@$$QEAV01@_N@Z
0x1400950A0: "DevicePasswordFailedAttempts" ??_C@_1DK@LJKAFGCJ@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAP?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AAA?$AAt?$AAt?$AAe?$AAm?$AAp?$AAt?$AAs?$AA?$AA@
0x140084670: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x1400A4AB0: "struct _StateMachineState g_xWLGeneric_PowerTransition_Locked_State" ?g_xWLGeneric_PowerTransition_Locked_State@@3U_StateMachineState@@A
0x1400A6380: "struct _StateMachineSignal g_xWl_LogonFromUnlock_Signal" ?g_xWl_LogonFromUnlock_Signal@@3U_StateMachineSignal@@A
0x14008FEA8: "DisplaySwitch.exe" ??_C@_1CE@BOAALBFE@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140090E40: "IconResource" ??_C@_1BK@GMPJMCGF@?$AAI?$AAc?$AAo?$AAn?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AA?$AA@
0x1400A7D38: "struct _StateMachineTransition * g_xWLGeneric_PowerTransition_Logged_On_Transition" ?g_xWLGeneric_PowerTransition_Logged_On_Transition@@3PAU_StateMachineTransition@@A
0x140084E48: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x1400B1160: "__cdecl _imp_ThemesOnCreateSession" __imp_ThemesOnCreateSession
0x1400A4D30: "struct _StateMachineState g_xWLGeneric_ChangingUnlockPassword_State" ?g_xWLGeneric_ChangingUnlockPassword_State@@3U_StateMachineState@@A
0x1400B1458: "__cdecl _imp_ConfigureUserArso" __imp_ConfigureUserArso
0x14008BE68: "LogonUI_Ok" ??_C@_1BG@IFLBICGD@?$AAL?$AAo?$AAg?$AAo?$AAn?$AAU?$AAI?$AA_?$AAO?$AAk?$AA?$AA@
0x140085400: "__cdecl _imp_TpReleaseWork" __imp_TpReleaseWork
0x140095120: "RegFlushKey" ??_C@_1BI@PEOJJLFE@?$AAR?$AAe?$AAg?$AAF?$AAl?$AAu?$AAs?$AAh?$AAK?$AAe?$AAy?$AA?$AA@
0x140087370: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1FO@ICCKHOGD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140095E10: "onecoreuap\base\embedded\sys\loc" ??_C@_0EF@EBPDHPFM@onecoreuap?2base?2embedded?2sys?2loc@
0x1400A4E30: "struct _StateMachineState g_xWLGeneric_Logon_ReportLastLogon_Unlock_State" ?g_xWLGeneric_Logon_ReportLastLogon_Unlock_State@@3U_StateMachineState@@A
0x1400AA098: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x1400A63E0: "struct _StateMachineSignal g_xWl_CredsAreStale_Signal" ?g_xWl_CredsAreStale_Signal@@3U_StateMachineSignal@@A
0x140055AA0: "void __cdecl WLGeneric_Request_LogonChange_Credz_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Request_LogonChange_Credz_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400B10B8: "__cdecl _imp_LsaLookupAuthenticationPackage" __imp_LsaLookupAuthenticationPackage
0x1400AA120: "struct _RTL_CRITICAL_SECTION * __ptr64 __ptr64 g_pTSJobCallbackLock" ?g_pTSJobCallbackLock@@3PEAU_RTL_CRITICAL_SECTION@@EA
0x1400A8330: "struct _StateMachineTransition * g_xWLGeneric_Logon_ReportSuccessResult_Transition" ?g_xWLGeneric_Logon_ReportSuccessResult_Transition@@3PAU_StateMachineTransition@@A
0x14002E92C: "public: unsigned long __cdecl CGlobalStore::CreateLessPrivilegedToken(void) __ptr64" ?CreateLessPrivilegedToken@CGlobalStore@@QEAAKXZ
0x140086618: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x1400A4F70: "struct _StateMachineState g_xWLGeneric_SequentialUnlockPrompt_State" ?g_xWLGeneric_SequentialUnlockPrompt_State@@3U_StateMachineState@@A
0x140084988: "__cdecl _imp_GetProcessWorkingSetSizeEx" __imp_GetProcessWorkingSetSizeEx
0x140013470: "long __cdecl MapUmfdVirtualAccount(void)" ?MapUmfdVirtualAccount@@YAJXZ
0x1400A9880: "private: static class CEasPolicySettings CEasPolicySettings::EasPolicySettings" ?EasPolicySettings@CEasPolicySettings@@0V1@A
0x140069FAC: "unsigned long __cdecl ToSetIRTimeout(unsigned long,struct _StateMachineSignalData)" ?ToSetIRTimeout@@YAKKU_StateMachineSignalData@@@Z
0x1400853B0: "__cdecl _imp_NtCreateIRTimer" __imp_NtCreateIRTimer
0x140085360: "__cdecl _imp_RtlAllocateAndInitializeSid" __imp_RtlAllocateAndInitializeSid
0x140030150: "void __cdecl WLGeneric_Logon_Checking_LastLogonPolicy_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_Checking_LastLogonPolicy_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008BC28: "TS_NoUnlockReconnect" ??_C@_1CK@LALLGIGN@?$AAT?$AAS?$AA_?$AAN?$AAo?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x140092418: "HasHostedWebContent" ??_C@_0BE@OCGCBBIB@HasHostedWebContent?$AA@
0x140089150: "__cdecl _sz_ext_ms_win_ntuser_dialogbox_l1_1_0_dll" __sz_ext_ms_win_ntuser_dialogbox_l1_1_0_dll
0x1400645B0: "void __cdecl WLGeneric_Locked_Hibernating_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Hibernating_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x140094920: "OrchestratePublishWnfDwordData: " ??_C@_1IE@JNJELEDA@?$AAO?$AAr?$AAc?$AAh?$AAe?$AAs?$AAt?$AAr?$AAa?$AAt?$AAe?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAW?$AAn?$AAf?$AAD?$AAw?$AAo?$AAr?$AAd?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5@
0x140084B38: "__cdecl _imp_RegCreateKeyW" __imp_RegCreateKeyW
0x1400956B0: "Invalid policy id" ??_C@_1CE@KBMLBKID@?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?5?$AAi?$AAd?$AA?$AA@
0x1400A5770: "struct _StateMachineState g_xWLGeneric_No_Unlock_Disconnected_State" ?g_xWLGeneric_No_Unlock_Disconnected_State@@3U_StateMachineState@@A
0x1400B1480: "__cdecl _imp_WinStationFreePropertyValue" __imp_WinStationFreePropertyValue
0x1400A53B0: "struct _StateMachineState g_xWLGeneric_Request_Change_Credz_State" ?g_xWLGeneric_Request_Change_Credz_State@@3U_StateMachineState@@A
0x1400197F0: "int __cdecl IsNoLogonUIMode(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?IsNoLogonUIMode@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x14005940C: WPP_SF_ql
0x140068B2C: WPP_SF_qL
0x140085120: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14006349C: "public: void __cdecl wil::details::static_lazy<class OOBEHealthLogging>::cleanup(void) __ptr64" ?cleanup@?$static_lazy@VOOBEHealthLogging@@@details@wil@@QEAAXXZ
0x1400275E0: "int __cdecl SetUserEnvironmentVariable(void * __ptr64 * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int)" ?SetUserEnvironmentVariable@@YAHPEAPEAXPEBG1H@Z
0x140054E88: "unsigned long __cdecl NtChangePassword(struct CHANGE_PASSWORD_DATA * __ptr64,long * __ptr64,long * __ptr64,struct _DOMAIN_PASSWORD_INFORMATION * __ptr64)" ?NtChangePassword@@YAKPEAUCHANGE_PASSWORD_DATA@@PEAJ1PEAU_DOMAIN_PASSWORD_INFORMATION@@@Z
0x140088D60: "__cdecl _sz_profapi_dll" __sz_profapi_dll
0x1400944F0: "ntsd" ??_C@_19MCLDCDBL@?$AAn?$AAt?$AAs?$AAd?$AA?$AA@
0x140034A96: "__cdecl _imp_load_ThemesOnReconnect" __imp_load_ThemesOnReconnect
0x140065508: WPP_SF_qD
0x140086470: WLEvt_ThemesOnEarlyCreateSession_Start
0x1400A7090: "struct _StateMachineTransition * g_xWLGeneric_Logon_ReportSuccessResult_Unlock_Transition" ?g_xWLGeneric_Logon_ReportSuccessResult_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x1400846C8: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x14009FABC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l1-1-0
0x1400B10D8: "__cdecl _imp_LsaLogonUser" __imp_LsaLogonUser
0x140035CF4: IsLoadLocalFontsPresent
0x1400847B0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400A8014: "unsigned long * g_xWLGeneric_NotifyStartShell_ResetSignals" ?g_xWLGeneric_NotifyStartShell_ResetSignals@@3PAKA
0x140034120: WinMainCRTStartup
0x1400849D8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x140095158: "\\.\" ??_C@_19BKJMDJK@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
0x14005AB60: "unsigned long __cdecl WLGeneric_Locked_Disconnected_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Disconnected_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14008BB68: "Secure_LuaStart" ??_C@_1CA@MAGNNMIK@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA_?$AAL?$AAu?$AAa?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140030304: CreateLogonSid
0x14008D170: "DelayLock_DisplayOnHandler" ??_C@_1DG@LLGKCEIO@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AA_?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAO?$AAn?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA?$AA@
0x1400B1128: "__cdecl _imp_DestroyEnvironmentBlock" __imp_DestroyEnvironmentBlock
0x14009E138: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x14006555C: WPP_SF_qS
0x1400907F0: "Software\Microsoft\Windows NT\Cu" ??_C@_1KM@DKDKDFHO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140088790: "COMPUTERNAME" ??_C@_1BK@ENEDBDPA@?$AAC?$AAO?$AAM?$AAP?$AAU?$AAT?$AAE?$AAR?$AAN?$AAA?$AAM?$AAE?$AA?$AA@
0x14009DC08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_shutdown_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_shutdown_l1_1_0_dll
0x14008B9D0: "Winsrv_PowerMsgHide" ??_C@_1CI@HMGGOHKD@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAP?$AAo?$AAw?$AAe?$AAr?$AAM?$AAs?$AAg?$AAH?$AAi?$AAd?$AAe?$AA?$AA@
0x1400358C0: IsPolicyManager_GetPolicyPresent
0x14008D438: "ProgramFilesDir" ??_C@_1CA@BENHECIP@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?$AA@
0x140084AC8: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x140050940: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,2>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$01@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x1400861A0: "Global\WinlogonLogoff" ??_C@_1CM@BIIJIOAJ@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAW?$AAi?$AAn?$AAl?$AAo?$AAg?$AAo?$AAn?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AA?$AA@
0x14009FC4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x140085418: "__cdecl _imp_TpWaitForWait" __imp_TpWaitForWait
0x140036064: "__cdecl _tailMerge_ext_ms_win_ntuser_windowstation_l1_1_1_dll" __tailMerge_ext_ms_win_ntuser_windowstation_l1_1_1_dll
0x140087968: "User32 " ??_C@_08INOCCGKN@User32?5?5?$AA@
0x140018CAC: "public: unsigned long __cdecl CGlobalStore::RegQueryWinlogonDWORD(unsigned short const * __ptr64,unsigned long) __ptr64" ?RegQueryWinlogonDWORD@CGlobalStore@@QEAAKPEBGK@Z
0x140091BC0: "GetPwdResetInfoFailed" ??_C@_1CM@IJGODBHI@?$AAG?$AAe?$AAt?$AAP?$AAw?$AAd?$AAR?$AAe?$AAs?$AAe?$AAt?$AAI?$AAn?$AAf?$AAo?$AAF?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1400864A0: WLEvt_RunStateMachine_Stop
0x1400A8F58: "__cdecl _hmod__ext_ms_win_ntuser_private_l1_1_0_dll" __hmod__ext_ms_win_ntuser_private_l1_1_0_dll
0x1400A46E0: Microsoft_Windows_Deplorch_Context
0x140084AD0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1400354C8: IsThemesOnLogoffPresent
0x1400943D8: "Software\Microsoft\Windows\Curre" ??_C@_0DK@IFNHFOHB@Software?2Microsoft?2Windows?2Curre@
0x14003507A: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x140067510: "unsigned long __cdecl WLGeneric_StartSecureLua_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_StartSecureLua_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400941D8: "winlogon" ??_C@_08ODEJODFG@winlogon?$AA@
0x14008FAF0: WLDiagEvt_ShutdownDiagnostics_Start
0x140076DB4: WlSecureDesktoppCompleteConfirmationRequest
0x1400371A4: "public: struct _GUID const * __ptr64 __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::zInternalRelatedId(void)const __ptr64" ?zInternalRelatedId@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEBAPEBU_GUID@@XZ
0x14002F960: "unsigned long __cdecl WLGeneric_SequentialLogonPrompt_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialLogonPrompt_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14008D1A8: "InitiateForceLogoff" ??_C@_1CI@PEKPCMPO@?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAF?$AAo?$AAr?$AAc?$AAe?$AAL?$AAo?$AAg?$AAo?$AAf?$AAf?$AA?$AA@
0x140079A10: "public: virtual char const * __ptr64 __cdecl wil::ResultException::what(void)const __ptr64" ?what@ResultException@wil@@UEBAPEBDXZ
0x1400AA228: "void (__cdecl* __ptr64 g_wil_details_apiRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_apiRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x14007E164: WluiPrepareWebDialog
0x1400A90F8: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x140090248: "(NONE)" ??_C@_1O@NICCHDKB@?$AA?$CI?$AAN?$AAO?$AAN?$AAE?$AA?$CJ?$AA?$AA@
0x1400885F0: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1GM@GIBHDOLK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14000A224: "public: __cdecl CUser::CUser(void) __ptr64" ??0CUser@@QEAA@XZ
0x140036B33: "__cdecl _imp_load_DwmpCreateSessionProcess" __imp_load_DwmpCreateSessionProcess
0x140081500: "const WinlogonProvider::AuthenticateUser::`vftable'" ??_7AuthenticateUser@WinlogonProvider@@6B@
0x140094640: WPP_f9be4a30e7d533fe2713472534fe0b5c_Traceguids
0x1400656AC: "unsigned long __cdecl CreateLowPrivilegedTokenForScreenSaver(struct _WLSM_GLOBAL_CONTEXT * __ptr64,void * __ptr64 * __ptr64)" ?CreateLowPrivilegedTokenForScreenSaver@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAPEAX@Z
0x140062A80: "void __cdecl WLGeneric_Logon_ReportSuccessResult_Unlock_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportSuccessResult_Unlock_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14004FF4C: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x1400954A0: "onecore\ds\security\eas\policyen" ??_C@_1IA@LNHLIOJA@?$AAo?$AAn?$AAe?$AAc?$AAo?$AAr?$AAe?$AA?2?$AAd?$AAs?$AA?2?$AAs?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAe?$AAa?$AAs?$AA?2?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AAe?$AAn@
0x140034984: "__cdecl _security_init_cookie" __security_init_cookie
0x14008FD28: "ATConfig" ??_C@_1BC@OGONFPFE@?$AAA?$AAT?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x140004F80: "unsigned long __cdecl WLGeneric_SequentialUnlockPrompt_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialUnlockPrompt_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140056048: "public: unsigned long __cdecl CGlobalStore::GetLogoffFlags(void) __ptr64" ?GetLogoffFlags@CGlobalStore@@QEAAKXZ
0x1400AA088: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x140058588: WPP_SF_q
0x140094450: WPP_b2d9be87fed7360ec7124feb4b91f0e5_Traceguids
0x140091E68: "Disabled" ??_C@_08JGILNPHN@Disabled?$AA@
0x14002B1B8: "enum AssignedAccessType __cdecl GetAssignedAccessType(void * __ptr64)" ?GetAssignedAccessType@@YA?AW4AssignedAccessType@@PEAX@Z
0x140087CC0: "EtwEventWrite" ??_C@_0O@MJPOMPOC@EtwEventWrite?$AA@
0x1400A61B0: "struct _StateMachineState g_xWLGeneric_Welcome_Return_State" ?g_xWLGeneric_Welcome_Return_State@@3U_StateMachineState@@A
0x1400850C0: "__cdecl _imp__cexit" __imp__cexit
0x140075330: "void __cdecl WLEventWrite(struct _EVENT_DESCRIPTOR const & __ptr64,void * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?WLEventWrite@@YAXAEBU_EVENT_DESCRIPTOR@@PEAXPEBG2@Z
0x14009DB88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_rtcore_ntuser_private_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_rtcore_ntuser_private_l1_1_2_dll
0x140034BAB: "__cdecl _tailMerge_naturalauthclient_dll" __tailMerge_naturalauthclient_dll
0x14000B030: "public: void __cdecl CSession::AsyncSwitchDesktop(enum _DESKTOPID,unsigned long) __ptr64" ?AsyncSwitchDesktop@CSession@@QEAAXW4_DESKTOPID@@K@Z
0x14008C020: "TimeoutHandler_Welcome" ??_C@_1CO@FMKBOGND@?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAr?$AA_?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA?$AA@
0x1400854D8: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x1400A94B0: "struct _RTL_CRITICAL_SECTION s_LogoffThreadCritSec" ?s_LogoffThreadCritSec@@3U_RTL_CRITICAL_SECTION@@A
0x140084518: "const WinlogonProvider::ShouldLogoffOtherUsers::`vftable'" ??_7ShouldLogoffOtherUsers@WinlogonProvider@@6B@
0x1400B1420: "__cdecl _imp_UMgrInformUserLogoff" __imp_UMgrInformUserLogoff
0x14006DB20: "private: static void __cdecl CUser::WinlogonKeyChangedCallback(void * __ptr64,unsigned char)" ?WinlogonKeyChangedCallback@CUser@@CAXPEAXE@Z
0x140009A40: "private: unsigned char * __ptr64 __cdecl wil::details_abi::RawUsageIndex::LowerBound(unsigned char * __ptr64,unsigned __int64,void * __ptr64,unsigned __int64) __ptr64" ?LowerBound@RawUsageIndex@details_abi@wil@@AEAAPEAEPEAE_KPEAX1@Z
0x140084AF0: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140086D60: WLDiagEvt_Logon_Start
0x14007A010: UnattendLogW
0x140051490: "void __cdecl wil::details::WilApi_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApi_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x140073A94: ?Free@?$CAutoPtr@PEAG$1??$FreeHeap@PEAG@@YAXPEAG@Z@@AEAAXXZ
0x14008C6E8: "Locked_Resume" ??_C@_1BM@EAFPLJJ@?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA_?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AA?$AA@
0x1400851D0: "__cdecl _imp_NtGetCachedSigningLevel" __imp_NtGetCachedSigningLevel
0x140034848: "__cdecl get_image_app_type" _get_image_app_type
0x14008BF90: "ChangeIsAlreadyDone" ??_C@_1CI@PEFGBPE@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAI?$AAs?$AAA?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AAD?$AAo?$AAn?$AAe?$AA?$AA@
0x14008FBF8: WLDiagEvt_LogonFailure_Stop
0x1400A6E38: "struct _StateMachineTransition * g_xWLGeneric_MPRChangeUnlockNotify_Transition" ?g_xWLGeneric_MPRChangeUnlockNotify_Transition@@3PAU_StateMachineTransition@@A
0x1400876A8: WLEvt_WluiServerShutdown_Stop
0x140004D30: "void __cdecl WLGeneric_SequentialUnlockPrompt_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialUnlockPrompt_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400851D8: "__cdecl _imp_WinSqmSetString" __imp_WinSqmSetString
0x140050550: "private: virtual bool __cdecl wil::TraceLoggingProvider::NotifyFailure(struct wil::FailureInfo const & __ptr64) __ptr64" ?NotifyFailure@TraceLoggingProvider@wil@@EEAA_NAEBUFailureInfo@2@@Z
0x140077370: WlSecureDesktoppValidateConfirmationInfo
0x14000A0AC: "public: void __cdecl wil::details::FeatureStateManager::RecordFeatureUsage(unsigned int,enum wil_details_ServiceReportingKind,unsigned __int64) __ptr64" ?RecordFeatureUsage@FeatureStateManager@details@wil@@QEAAXIW4wil_details_ServiceReportingKind@@_K@Z
0x14000E078: MprNotifyAppStart
0x140004808: NotifyFree
0x140084950: "__cdecl _imp_GetThreadUILanguage" __imp_GetThreadUILanguage
0x1400364CC: IsWinStationGetUserCredentialsPresent
0x140021920: "public: unsigned long __cdecl CGlobalStore::GetLsaHandle(void * __ptr64 * __ptr64) __ptr64" ?GetLsaHandle@CGlobalStore@@QEAAKPEAPEAX@Z
0x14006E3C0: "void __cdecl WLGeneric_AccessNotifyAsSystem_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AccessNotifyAsSystem_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008B1D0: "StopSSAsUser" ??_C@_1BK@KHJEGCDB@?$AAS?$AAt?$AAo?$AAp?$AAS?$AAS?$AAA?$AAs?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x140051A9C: "long __cdecl wil_details_WriteSRUMWnfUsageBuffer(class wil::details_abi::heap_vector<struct wil_details_FeatureUsageSRUM> * __ptr64)" ?wil_details_WriteSRUMWnfUsageBuffer@@YAJPEAV?$heap_vector@Uwil_details_FeatureUsageSRUM@@@details_abi@wil@@@Z
0x1400A73A0: "unsigned long * g_xWLGeneric_Request_Web_Unlock_Credz_ResetSignals" ?g_xWLGeneric_Request_Web_Unlock_Credz_ResetSignals@@3PAKA
0x140009764: ?Iterate@RawUsageIndex@details_abi@wil@@QEBA_NV?$function@$$A6A_NPEAX_K01I@Z@wistd@@@Z
0x140004BDC: "int __cdecl wil_details_ModifyFeatureData(union wil_details_FeaturePropertyCache * __ptr64,int (__cdecl*)(union wil_details_FeaturePropertyCache * __ptr64,void * __ptr64),void * __ptr64)" ?wil_details_ModifyFeatureData@@YAHPEATwil_details_FeaturePropertyCache@@P6AH0PEAX@Z1@Z
0x14008C448: "ShellStartup" ??_C@_1BK@IDEAAEPJ@?$AAS?$AAh?$AAe?$AAl?$AAl?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x140031300: "unsigned long __cdecl ToInitialize(void)" ?ToInitialize@@YAKXZ
0x14000554C: "public: int __cdecl CSession::IsLogonFromUnlockEnabled(void * __ptr64) __ptr64" ?IsLogonFromUnlockEnabled@CSession@@QEAAHPEAX@Z
0x14007B818: "void __cdecl SortEASLockoutData(struct _USER_COUNT_ENTRY * __ptr64,unsigned long)" ?SortEASLockoutData@@YAXPEAU_USER_COUNT_ENTRY@@K@Z
0x1400A7870: "struct _StateMachineTransition * g_xWLGeneric_TimeoutHandler_Logged_On_Transition" ?g_xWLGeneric_TimeoutHandler_Logged_On_Transition@@3PAU_StateMachineTransition@@A
0x140063578: "public: class OOBEHealthLogging * __ptr64 __cdecl wil::details::static_lazy<class OOBEHealthLogging>::get(void (__cdecl*)(void)) __ptr64" ?get@?$static_lazy@VOOBEHealthLogging@@@details@wil@@QEAAPEAVOOBEHealthLogging@@P6AXXZ@Z
0x140034FEF: "__cdecl _imp_load_GetProfileType" __imp_load_GetProfileType
0x140009F7C: "void __cdecl wistd::swap_wil<struct wil::details_abi::heap_buffer>(struct wil::details_abi::heap_buffer & __ptr64,struct wil::details_abi::heap_buffer & __ptr64)" ??$swap_wil@Uheap_buffer@details_abi@wil@@@wistd@@YAXAEAUheap_buffer@details_abi@wil@@0@Z
0x14005C3E8: "void __cdecl WlLockGetDelayLockSettings(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned long * __ptr64)" ?WlLockGetDelayLockSettings@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@PEAK@Z
0x140055BB4: "protected: virtual __cdecl CDataStoreObject::~CDataStoreObject(void) __ptr64" ??1CDataStoreObject@@MEAA@XZ
0x14009F7D8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14008BBA8: "Secure_LuaEnd" ??_C@_1BM@ODIFEJME@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA_?$AAL?$AAu?$AAa?$AAE?$AAn?$AAd?$AA?$AA@
0x140037536: wcscmp
0x140067800: "void __cdecl WLGeneric_StartSecureLua_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_StartSecureLua_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14008C0B8: "Welcome_Hibernating" ??_C@_1CI@CDOBGPNO@?$AAW?$AAe?$AAl?$AAc?$AAo?$AAm?$AAe?$AA_?$AAH?$AAi?$AAb?$AAe?$AAr?$AAn?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?$AA@
0x140092080: "bootim.exe" ??_C@_1BG@MEEPCNKP@?$AAb?$AAo?$AAo?$AAt?$AAi?$AAm?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1400B1150: "__cdecl _imp_ThemesOnTerminateSession" __imp_ThemesOnTerminateSession
0x14007CA6C: "unsigned long __cdecl ValidateSigning(unsigned short const * __ptr64,int)" ?ValidateSigning@@YAKPEBGH@Z
0x1400A64D0: "struct _StateMachineSignal g_xWinsrv_DwmControl_Signal" ?g_xWinsrv_DwmControl_Signal@@3U_StateMachineSignal@@A
0x14008F8D9: ?__hInner_Meta@?1???0StaticHandle@WinlogonProvider@@QEAA@XZ@4U<unnamed-type-__hInner_Meta>@?1???012@QEAA@XZ@B
0x140091108: "Microsoft.NTLMDisabledWarning" ??_C@_1DM@NPGPNODK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAN?$AAT?$AAL?$AAM?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x1400B1068: "__cdecl _imp_NaDynamicLockShouldIgnoreDisplayRequestActivity" __imp_NaDynamicLockShouldIgnoreDisplayRequestActivity
0x140056380: "void __cdecl NotifyScreenSaverStarted(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?NotifyScreenSaverStarted@@YAXPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140085110: "__cdecl _imp_memmove" __imp_memmove
0x1400847F8: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x140077F40: CompareClientSidToLoggedOnUserSid
0x1400854E0: "__cdecl _imp_NtSystemDebugControl" __imp_NtSystemDebugControl
0x140035264: "__cdecl _imp_load_LsaLookupUserAccountType" __imp_load_LsaLookupUserAccountType
0x14009D980: "__cdecl CTA2?AVResultException@wil@@" _CTA2?AVResultException@wil@@
0x1400A66B0: "struct _TlgProvider_t `public: __cdecl OOBEHealthLogging::StaticHandle::StaticHandle(void) __ptr64'::`2'::__hInner" ?__hInner@?1???0StaticHandle@OOBEHealthLogging@@QEAA@XZ@4U_TlgProvider_t@@A
0x1400B12B0: ext-ms-win-ntuser-keyboard-l1-1-0_NULL_THUNK_DATA_DLA
0x140088BC0: "-s %ld -f %ld -t %s -m %s -a %d" ??_C@_1EA@KHMOGOII@?$AA?9?$AAs?$AA?5?$AA?$CF?$AAl?$AAd?$AA?5?$AA?9?$AAf?$AA?5?$AA?$CF?$AAl?$AAd?$AA?5?$AA?9?$AAt?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?9?$AAm?$AA?5?$AA?$CF?$AAs?$AA?5?$AA?9?$AAa?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x140091A58: "ShownTime" ??_C@_1BE@EEIEIOOO@?$AAS?$AAh?$AAo?$AAw?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1400502D0: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x14008FC18: WLDiagEvt_LogonCancel_Stop
0x14003543B: "__cdecl _imp_load_RegisterLogonProcess" __imp_load_RegisterLogonProcess
0x1400198FC: "unsigned long __cdecl ToResetTimeout(void)" ?ToResetTimeout@@YAKXZ
0x140090960: "AutoAdminLogon" ??_C@_1BO@IKBCMOPJ@?$AAA?$AAu?$AAt?$AAo?$AAA?$AAd?$AAm?$AAi?$AAn?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140034B57: "__cdecl _imp_load_ThemesOnCreateSession" __imp_load_ThemesOnCreateSession
0x140031FC0: "void __cdecl WLGeneric_NotifyStartShell_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_NotifyStartShell_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400363B4: IsCamCleanupDisardedCandidateAccountsPresent
0x14001369C: "public: int __cdecl CMachine::IsAuditingLogFull(void) __ptr64" ?IsAuditingLogFull@CMachine@@QEAAHXZ
0x14009E0E8: api-ms-win-rtcore-ntuser-private-l1-1-2_NULL_THUNK_DATA_DLN
0x14006E07C: "unsigned long __cdecl CreateEnvironment(void * __ptr64 * __ptr64)" ?CreateEnvironment@@YAKPEAPEAX@Z
0x140034C84: "__cdecl _imp_load_ChangeAccountPasswordW" __imp_load_ChangeAccountPasswordW
0x140086B50: "(0x%08x) %ws:%u : %ws:%ws " ??_C@_1DG@EKADEKBL@?$AA?$CI?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AAw?$AAs?$AA?3?$AA?$CF?$AAu?$AA?5?$AA?3?$AA?5?$AA?$CF?$AAw?$AAs?$AA?3?$AA?$CF?$AAw?$AAs?$AA?6?$AA?$AA@
0x1400A9C00: "private: static class CEtwProviderT<void> CChkMacroETWLoggerT<class CEmptyType>::g_chkMacroETWProvider" ?g_chkMacroETWProvider@?$CChkMacroETWLoggerT@VCEmptyType@@@@0V?$CEtwProviderT@X@@A
0x14008A018: WPP_0e9a9b667c56316cb1a2d21302260e33_Traceguids
0x14009DB68: "__cdecl _DELAY_IMPORT_DESCRIPTOR_profapi_dll" __DELAY_IMPORT_DESCRIPTOR_profapi_dll
0x140090E80: "ShowTime" ??_C@_1BC@OBEMAGND@?$AAS?$AAh?$AAo?$AAw?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x1400865B0: "NetworkConnectionsTimeout" ??_C@_1DE@CPFJLKNC@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140051020: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x14007A038: UnattendLogWV
0x14000D554: "public: void __cdecl CGlobalStore::FreeCredentials(void) __ptr64" ?FreeCredentials@CGlobalStore@@QEAAXXZ
0x140092180: "internal\onecoreuapshell\inc\oob" ??_C@_0DA@KDAMFJIP@internal?2onecoreuapshell?2inc?2oob@
0x140031F20: McGenEventRegister
0x1400A8728: "unsigned short * s_WppBackupFileName" ?s_WppBackupFileName@@3PAGA
0x1400A8398: "struct _StateMachineTransition * g_xWLGeneric_Authenticating_Transition" ?g_xWLGeneric_Authenticating_Transition@@3PAU_StateMachineTransition@@A
0x14004F278: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x140088B10: "%02d::%02d::%02d, %04d/%02d/%02d" ??_C@_1EC@JDKNECOB@?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?3?$AA?3?$AA?$CF?$AA0?$AA2?$AAd?$AA?0?$AA?5?$AA?$CF?$AA0?$AA4?$AAd?$AA?1?$AA?$CF?$AA0?$AA2?$AAd?$AA?1?$AA?$CF?$AA0?$AA2?$AAd@
0x1400AA2F0: "int WinlogonDebugSetup" ?WinlogonDebugSetup@@3HA
0x140081000: "const CDataStoreObject::`vftable'" ??_7CDataStoreObject@@6B@
0x140052414: "unsigned long __cdecl WlAccessibilityOnTabletLaunchAT(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnTabletLaunchAT@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140031CC4: "void __cdecl MprCancelNotification(void)" ?MprCancelNotification@@YAXXZ
0x1400A92C8: SecureDesktopLoggedOnUserSid
0x140095D70: "onecoreuap\base\embedded\sys\loc" ??_C@_0EK@GMMPDJKN@onecoreuap?2base?2embedded?2sys?2loc@
0x140084EF8: "__cdecl _imp_CreateRestrictedToken" __imp_CreateRestrictedToken
0x140032100: DefaultWMsgReconnectionUpdateHandler
0x140087160: "Software\Policies\Microsoft\Pass" ??_C@_1HA@BLACKMDK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAP?$AAa?$AAs?$AAs@
0x140085CF8: WLEvt_ShutdownWindows_Stop
0x14006CDCC: "private: long __cdecl CUser::SubscribeForUserPresenceMonitoring(void) __ptr64" ?SubscribeForUserPresenceMonitoring@CUser@@AEAAJXZ
0x14007A8C4: "public: unsigned long __cdecl CFveAutoPtr::GetFailedCountForSID(void * __ptr64,unsigned long * __ptr64) __ptr64" ?GetFailedCountForSID@CFveAutoPtr@@QEAAKPEAXPEAK@Z
0x1400558A0: "unsigned long __cdecl WLGeneric_ChangingUnlockPassword_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangingUnlockPassword_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400518B0: "int __cdecl wil_details_StagingConfigFeature_HasUniqueState(struct wil_details_StagingConfigFeature const * __ptr64)" ?wil_details_StagingConfigFeature_HasUniqueState@@YAHPEBUwil_details_StagingConfigFeature@@@Z
0x140085058: "__cdecl _imp_malloc" __imp_malloc
0x140064550: "unsigned long __cdecl WLGeneric_Locked_Hibernating_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Locked_Hibernating_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14000CD90: "public: virtual unsigned long __cdecl CMachine::Initialize(void) __ptr64" ?Initialize@CMachine@@UEAAKXZ
0x140064A80: "unsigned long __cdecl WLGeneric_Welcome_Hibernating_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Welcome_Hibernating_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140085190: "__cdecl _imp__purecall" __imp__purecall
0x1400904E0: "Software\Microsoft\Windows\Curre" ??_C@_1JE@EHNGKHDJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140035301: "__cdecl _imp_load_LookupAccountSidLocalW" __imp_load_LookupAccountSidLocalW
0x140053BB4: "unsigned long __cdecl WlAccessibilitypCopyConfigurationSettings(struct HKEY__ * __ptr64,struct HKEY__ * __ptr64,bool)" ?WlAccessibilitypCopyConfigurationSettings@@YAKPEAUHKEY__@@0_N@Z
0x140031C5C: "public: unsigned long __cdecl CUser::OpenHKeyCurrentUser(void) __ptr64" ?OpenHKeyCurrentUser@CUser@@QEAAKXZ
0x140055E84: "void __cdecl _TlgWriteActivityAutoStop<70368744177664,5>(struct _TlgProvider_t const * __ptr64,struct _GUID const * __ptr64)" ??$_TlgWriteActivityAutoStop@$0EAAAAAAAAAAA@$04@@YAXPEBU_TlgProvider_t@@PEBU_GUID@@@Z
0x140009B8C: "public: bool __cdecl wil::details_abi::UsageIndex<enum wil_details_ServiceReportingKind,unsigned int,0>::RecordUsage(enum wil_details_ServiceReportingKind,unsigned int,unsigned int) __ptr64" ?RecordUsage@?$UsageIndex@W4wil_details_ServiceReportingKind@@I$0A@@details_abi@wil@@QEAA_NW4wil_details_ServiceReportingKind@@II@Z
0x140084E58: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1400A8470: "struct _StateMachineTransition * g_xWLGeneric_DisplayLegalNotice_Transition" ?g_xWLGeneric_DisplayLegalNotice_Transition@@3PAU_StateMachineTransition@@A
0x140030508: WlSecureDesktopiStartup
0x14008CDA0: "Logon_ReportLastLogon_Unlock" ??_C@_1DK@IBLEGFJB@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAL?$AAa?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140003F08: "public: void __cdecl wil::details_abi::SubscriptionList::Unsubscribe(class wil::srwlock & __ptr64,struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ * __ptr64) __ptr64" ?Unsubscribe@SubscriptionList@details_abi@wil@@QEAAXAEAVsrwlock@3@PEAUFEATURE_STATE_CHANGE_SUBSCRIPTION__@@@Z
0x140085E78: "ProviderOrder" ??_C@_1BM@FBFHHHJN@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAO?$AAr?$AAd?$AAe?$AAr?$AA?$AA@
0x14008C198: "DwmControl" ??_C@_1BG@HOMGIEDC@?$AAD?$AAw?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x140086560: WLEvt_CreatePrimaryTerminal_Stop
0x14001A054: "public: unsigned long __cdecl CUser::InitializeLogonData(void * __ptr64,struct _LUID,void * __ptr64,struct _MSV1_0_INTERACTIVE_PROFILE * __ptr64,int,struct _FILETIME const & __ptr64,struct _QUOTA_LIMITS * __ptr64) __ptr64" ?InitializeLogonData@CUser@@QEAAKPEAXU_LUID@@0PEAU_MSV1_0_INTERACTIVE_PROFILE@@HAEBU_FILETIME@@PEAU_QUOTA_LIMITS@@@Z
0x140051390: "long __cdecl StringCchVPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,char * __ptr64)" ?StringCchVPrintfW@@YAJPEAG_KPEBGPEAD@Z
0x1400214E4: "long __cdecl SetKernelIntegrityLabel(void * __ptr64,enum _MANDATORY_LEVEL)" ?SetKernelIntegrityLabel@@YAJPEAXW4_MANDATORY_LEVEL@@@Z
0x14009F97C: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1400A78F8: "struct _StateMachineTransition * g_xWLGeneric_HandleSecureLuaBeforeShell_Transition" ?g_xWLGeneric_HandleSecureLuaBeforeShell_Transition@@3PAU_StateMachineTransition@@A
0x1400870C8: "EnableGoodbye" ??_C@_1BM@MHNIACFA@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAG?$AAo?$AAo?$AAd?$AAb?$AAy?$AAe?$AA?$AA@
0x14000A020: "void __cdecl wil::details::WilApiImpl_RecordFeatureUsage(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?WilApiImpl_RecordFeatureUsage@details@wil@@YAXIIIPEBD@Z
0x140084CB0: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x1400B14C8: "__cdecl _imp__WinStationWaitForConnect" __imp__WinStationWaitForConnect
0x1400A66F0: "struct _REG_CHANGE * WinlogonSetupChanges" ?WinlogonSetupChanges@@3PAU_REG_CHANGE@@A
0x14003614C: "__cdecl _imp_load_SetThreadDesktop" __imp_load_SetThreadDesktop
0x14006CF1C: "public: unsigned long __cdecl CUser::UpdateLogonDataOnReconnect(void) __ptr64" ?UpdateLogonDataOnReconnect@CUser@@QEAAKXZ
0x140031DC0: "long __cdecl OnWNFNotification(struct _WNF_STATE_NAME,unsigned long,struct _WNF_TYPE_ID * __ptr64,void * __ptr64,void const * __ptr64,unsigned long)" ?OnWNFNotification@@YAJU_WNF_STATE_NAME@@KPEAU_WNF_TYPE_ID@@PEAXPEBXK@Z
0x140085448: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1400367C9: "__cdecl _imp_load_WinStationReportUIResult" __imp_load_WinStationReportUIResult
0x1400A6470: "struct _StateMachineSignal g_xSecure_LuaReady_Signal" ?g_xSecure_LuaReady_Signal@@3U_StateMachineSignal@@A
0x140089D28: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x140084C58: "__cdecl _imp_InitializeCriticalSectionEx" __imp_InitializeCriticalSectionEx
0x1400316F8: "public: unsigned long __cdecl CSession::SubscribeForWnfNotifications(void) __ptr64" ?SubscribeForWnfNotifications@CSession@@QEAAKXZ
0x140084F10: "__cdecl _imp_DuplicateToken" __imp_DuplicateToken
0x14009DA28: "__cdecl _DELAY_IMPORT_DESCRIPTOR_NaturalAuthClient_dll" __DELAY_IMPORT_DESCRIPTOR_NaturalAuthClient_dll
0x140062E60: "unsigned long __cdecl WLGeneric_SequentialLogonPrompt_Unlock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SequentialLogonPrompt_Unlock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400AA080: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x140095CA0: WPP_c6db3ee58e84378e9d1008d6e475c92c_Traceguids
0x14008DFE2: ?_TlgEvent@?BC@??FeatureLoggingHook@details@wil@@YAXIPEBUFEATURE_LOGGED_TRAITS@@PEBUFEATURE_ERROR@@HPEBW4wil_ReportingKind@@PEBW4wil_VariantReportingKind@@E_K@Z@4U<unnamed-type-_TlgEvent>@?BC@??123@YAXI01H23E4@Z@B
0x1400B1158: "__cdecl _imp_ThemesOnReconnect" __imp_ThemesOnReconnect
0x1400367B7: "__cdecl _imp_load_WinStationNegotiateSession" __imp_load_WinStationNegotiateSession
0x140035270: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_2_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_2_dll
0x1400A9360: "int g_bInitialized" ?g_bInitialized@@3HA
0x1400355D0: "__cdecl _tailMerge_ext_ms_win_session_winlogon_l1_1_1_dll" __tailMerge_ext_ms_win_session_winlogon_l1_1_1_dll
0x1400869F0: "LW" ??_C@_15GAHNKDFA@?$AAL?$AAW?$AA?$AA@
0x14005FC9C: "public: void __cdecl wil::details::ThreadFailureCallbackHolder::StartWatching(void) __ptr64" ?StartWatching@ThreadFailureCallbackHolder@details@wil@@QEAAXXZ
0x140085510: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x1400B13D0: "__cdecl _imp_CamCleanupDisardedCandidateAccounts" __imp_CamCleanupDisardedCandidateAccounts
0x140086550: WLEvt_DwmpCreateSessionProcess_Start
0x140036AB4: "__cdecl _tailMerge_ext_ms_win_composition_init_l1_1_0_dll" __tailMerge_ext_ms_win_composition_init_l1_1_0_dll
0x140052308: "unsigned long __cdecl WlAccessibilityOnStartOSK(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WlAccessibilityOnStartOSK@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x14009DEE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_WTSAPI32_dll
0x1400852A0: "__cdecl _imp_RtlpVerifyAndCommitUILanguageSettings" __imp_RtlpVerifyAndCommitUILanguageSettings
0x1400846F8: RPCRT4_NULL_THUNK_DATA
0x140087B80: WLEvt_CallSubscriber_Start
0x140035E8D: "__cdecl _tailMerge_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __tailMerge_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x1400864F0: WLEvt_ExecuteShellCommandList_Start
0x1400B1410: "__cdecl _imp_UMgrLaunchShellInfrastructureHost" __imp_UMgrLaunchShellInfrastructureHost
0x14007D748: "void __cdecl SetupCreateSplashScreen(struct HDESK__ * __ptr64)" ?SetupCreateSplashScreen@@YAXPEAUHDESK__@@@Z
0x14009FB5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-credentials-l2-1-0
0x140095520: "FveOpenVolumeW" ??_C@_0P@MPPKGAM@FveOpenVolumeW?$AA@
0x1400655DC: WPP_SF_qSS
0x14005BCF0: "unsigned long __cdecl WLGeneric_Unlock_ReportFailedResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlock_ReportFailedResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400343F0: "__cdecl _report_gsfailure" __report_gsfailure
0x140057200: "void __cdecl WLGeneric_TimeoutHandler_Welcome_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Welcome_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14009DB48: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x140061690: "unsigned long __cdecl WLGeneric_FindDestinationSession_Unlock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_FindDestinationSession_Unlock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084718: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x140084A00: "__cdecl _imp_UpdateProcThreadAttribute" __imp_UpdateProcThreadAttribute
0x140090A08: "SafeModeBlockNonAdmins" ??_C@_1CO@IJLMGNED@?$AAS?$AAa?$AAf?$AAe?$AAM?$AAo?$AAd?$AAe?$AAB?$AAl?$AAo?$AAc?$AAk?$AAN?$AAo?$AAn?$AAA?$AAd?$AAm?$AAi?$AAn?$AAs?$AA?$AA@
0x1400854A8: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x140004808: "public: void __cdecl SP<unsigned short,class SP_MEM<unsigned short> >::Reset(void) __ptr64" ?Reset@?$SP@GV?$SP_MEM@G@@@@QEAAXXZ
0x140084DA0: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x140090C08: OOBEHealth_Progress_Info
0x14008C120: "AccessNotifyAsSystem" ??_C@_1CK@BNEHNEAK@?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAA?$AAs?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1400887E0: "Software\Microsoft\Windows\Curre" ??_C@_1IC@HGHACFLN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140004EE4: "void __cdecl wil::details::CloseHandle(void * __ptr64)" ?CloseHandle@details@wil@@YAXPEAX@Z
0x1400612C0: "unsigned long __cdecl WLGeneric_CAD_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_CAD_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140036493: "__cdecl _imp_load_CamConnectCandidateUser" __imp_load_CamConnectCandidateUser
0x140090ED0: "TypeFlags" ??_C@_1BE@OJDFDMLL@?$AAT?$AAy?$AAp?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x140084CE8: "__cdecl _imp_CreateThreadpool" __imp_CreateThreadpool
0x1400A4180: "struct _StateMachineState const * __ptr64 * g_rpWLGeneric_States" ?g_rpWLGeneric_States@@3PAPEBU_StateMachineState@@A
0x14006ED28: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x140095E78: "ConfigLevel" ??_C@_1BI@CPIHNNBJ@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x14009DD08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_0_dll
0x140085318: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x140085390: "__cdecl _imp_RtlExpandEnvironmentStrings_U" __imp_RtlExpandEnvironmentStrings_U
0x140086730: "SettingConfiguration" ??_C@_1CK@BAHOPLML@?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1400945B8: "%SystemRoot%\System32\ntsd.exe" ??_C@_1DO@JNDLDMLD@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAn?$AAt?$AAs?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x140034B45: "__cdecl _imp_load_ThemesOnLogon" __imp_load_ThemesOnLogon
0x140088A70: "NotShownTime" ??_C@_1BK@MGAIFLDM@?$AAN?$AAo?$AAt?$AAS?$AAh?$AAo?$AAw?$AAn?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x14008F8A1: ?__hInner_Meta@?1???0StaticHandle@FeatureLogging@details@wil@@QEAA@XZ@4U<unnamed-type-__hInner_Meta>@?1???01234@QEAA@XZ@B
0x140084BF0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1400A8220: "struct _StateMachineTransition * g_xWLGeneric_Logon_ReportFailedResult_Transition" ?g_xWLGeneric_Logon_ReportFailedResult_Transition@@3PAU_StateMachineTransition@@A
0x14007E0B4: WluiDisplayTSReconnectOptions
0x14001EDA0: "unsigned long __cdecl WMsgClntInitialize(struct _WLSM_GLOBAL_CONTEXT * __ptr64,int)" ?WMsgClntInitialize@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@H@Z
0x140095188: "CheckThirdPartyStatus" ??_C@_1CM@GIPOPENI@?$AAC?$AAh?$AAe?$AAc?$AAk?$AAT?$AAh?$AAi?$AAr?$AAd?$AAP?$AAa?$AAr?$AAt?$AAy?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1400A9134: "int g_fResolverShown" ?g_fResolverShown@@3HA
0x140031E00: "public: __cdecl Timer::Timer(int) __ptr64" ??0Timer@@QEAA@H@Z
0x1400774D8: WlSecureDesktoppValidateCredmanBackupInfo
0x1400922A0: "ForceAutoLogon" ??_C@_1BO@KGDFOB@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAA?$AAu?$AAt?$AAo?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140034668: "__cdecl onexit" _onexit
0x1400845C8: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x1400884C0: "System\Setup\Status\AuditBootVol" ??_C@_1EM@EIPHPJDH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?2?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?2?$AAA?$AAu?$AAd?$AAi?$AAt?$AAB?$AAo?$AAo?$AAt?$AAV?$AAo?$AAl@
0x140091690: "%SystemRoot%\system32\userinit.e" ??_C@_1EG@PJHIKHEB@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAu?$AAs?$AAe?$AAr?$AAi?$AAn?$AAi?$AAt?$AA?4?$AAe@
0x140085010: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA
0x14008B148: "StartShell" ??_C@_1BG@DALMALBA@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x1400A8548: "struct _StateMachineTransition * g_xWLGeneric_PowerTransition_Welcome_Transition" ?g_xWLGeneric_PowerTransition_Welcome_Transition@@3PAU_StateMachineTransition@@A
0x1400A7F20: "unsigned long * g_xWLGeneric_ChangingLogonPassword_ResetSignals" ?g_xWLGeneric_ChangingLogonPassword_ResetSignals@@3PAKA
0x1400945F8: "%s -d -p %d" ??_C@_1BI@GGBEDBNJ@?$AA?$CF?$AAs?$AA?5?$AA?9?$AAd?$AA?5?$AA?9?$AAp?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x14009DB08: "__cdecl _DELAY_IMPORT_DESCRIPTOR_AUTHZ_dll" __DELAY_IMPORT_DESCRIPTOR_AUTHZ_dll
0x140056FA0: "void __cdecl WLGeneric_TimeoutHandler_Logged_On_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Logged_On_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x14007A53C: "int __cdecl CompareSIDs(void * __ptr64,void * __ptr64)" ?CompareSIDs@@YAHPEAX0@Z
0x14003521C: "__cdecl _imp_load_AuthziInitializeAuditEventType" __imp_load_AuthziInitializeAuditEventType
0x1400943C0: "SoftwareSASGeneration" ??_C@_0BG@BDIFPDNL@SoftwareSASGeneration?$AA@
0x1400AA280: "unsigned long (__cdecl* __ptr64 `unsigned long __cdecl wil::details::RtlNtStatusToDosErrorNoTeb(long)'::`2'::s_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?s_pfnRtlNtStatusToDosErrorNoTeb@?1??RtlNtStatusToDosErrorNoTeb@details@wil@@YAKJ@Z@4P6AKJ@ZEA
0x14005A1D0: "unsigned long __cdecl WLGeneric_DelayLock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DelayLock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084E30: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x1400AA1E8: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x1400B1188: "__cdecl _imp_WTSConnectSessionW" __imp_WTSConnectSessionW
0x14008C0E0: "PowerTransition_ShowResumeMsg" ??_C@_1DM@FKLGKBLP@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA_?$AAS?$AAh?$AAo?$AAw?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AAM?$AAs?$AAg?$AA?$AA@
0x1400849B8: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x140089AA0: "ext-ms-win-session-wtsapi32-l1-1" ??_C@_1EG@MFPCCJEE@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAt?$AAs?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAl?$AA1?$AA?9?$AA1@
0x140086540: WLEvt_DwmpCreateSessionProcess_Stop
0x140084FF8: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x1400091B4: "public: void __cdecl wil::details_abi::RawUsageIndex::SetBuffer(void * __ptr64,unsigned __int64,unsigned __int64) __ptr64" ?SetBuffer@RawUsageIndex@details_abi@wil@@QEAAXPEAX_K1@Z
0x1400A9050: "__cdecl _native_startup_state" __native_startup_state
0x1400868F0: "LOCALAPPDATA" ??_C@_1BK@HGNHJGKH@?$AAL?$AAO?$AAC?$AAA?$AAL?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x140095700: "RegDeleteValue" ??_C@_1BO@KHOBGKIM@?$AAR?$AAe?$AAg?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1400A7448: "unsigned long * g_xWLGeneric_Request_Unlock_Credz_ResetSignals" ?g_xWLGeneric_Request_Unlock_Credz_ResetSignals@@3PAKA
0x1400B12E0: "__cdecl _imp_SetWindowStationUser" __imp_SetWindowStationUser
0x140087D10: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400A8E90: "__cdecl _hmod__samcli_dll" __hmod__samcli_dll
0x140088F30: "ext-ms-win-advapi32-eventlog-l1-" ??_C@_1EI@LBEOPKNK@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg?$AA?9?$AAl?$AA1?$AA?9@
0x140021744: "public: unsigned long __cdecl CGlobalStore::IsKnownAuthenticationPackage(unsigned long,int * __ptr64) __ptr64" ?IsKnownAuthenticationPackage@CGlobalStore@@QEAAKKPEAH@Z
0x140085388: "__cdecl _imp_RtlQueryEnvironmentVariable_U" __imp_RtlQueryEnvironmentVariable_U
0x14001E5E0: "void __cdecl WLEventWrite(struct _EVENT_DESCRIPTOR const & __ptr64)" ?WLEventWrite@@YAXAEBU_EVENT_DESCRIPTOR@@@Z
0x140088100: "Volatile Environment" ??_C@_1CK@FFBPGAMN@?$AAV?$AAo?$AAl?$AAa?$AAt?$AAi?$AAl?$AAe?$AA?5?$AAE?$AAn?$AAv?$AAi?$AAr?$AAo?$AAn?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1400A87F8: "unsigned short * Parameters" ?Parameters@@3PAGA
0x1400AA0A0: "unsigned long (__cdecl* __ptr64 wil::details::g_pfnRtlNtStatusToDosErrorNoTeb)(long)" ?g_pfnRtlNtStatusToDosErrorNoTeb@details@wil@@3P6AKJ@ZEA
0x1400A8510: "struct _StateMachineTransition * g_xWLGeneric_PowerTransition_ShowResumeMsg_Transition" ?g_xWLGeneric_PowerTransition_ShowResumeMsg_Transition@@3PAU_StateMachineTransition@@A
0x140034FFB: "__cdecl _tailMerge_userenv_dll" __tailMerge_userenv_dll
0x1400A6D50: "unsigned long * g_xWLGeneric_Killing_Scrnsaver_Locked_ResetSignals" ?g_xWLGeneric_Killing_Scrnsaver_Locked_ResetSignals@@3PAKA
0x1400AA338: ?data@?1??GetFeaturePropertyCache@?$Feature@U__WilFeatureTraits_Feature_AutomaticSignOnLockSetting@@@wil@@CAAEATwil_details_FeaturePropertyCache@@XZ@4T4@A
0x1400A9438: "struct _LIST_ENTRY JobManagerList" ?JobManagerList@@3U_LIST_ENTRY@@A
0x140019C3C: "bool __cdecl IsUserOOBE(void)" ?IsUserOOBE@@YA_NXZ
0x1400637A0: McTemplateU0dxxxzz
0x1400A8F50: "__cdecl _hmod__ext_ms_win_ntuser_misc_l1_1_0_dll" __hmod__ext_ms_win_ntuser_misc_l1_1_0_dll
0x1400A94D8: "class wil::details::static_lazy<class OOBEHealthLogging> `protected: static class OOBEHealthLogging * __ptr64 __cdecl OOBEHealthLogging::Instance(void)'::`2'::wrapper" ?wrapper@?1??Instance@OOBEHealthLogging@@KAPEAV2@XZ@4V?$static_lazy@VOOBEHealthLogging@@@details@wil@@A
0x1400A90E4: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x14002B600: SignalManagerDestroy
0x14006830C: "public: void __cdecl CSession::InitializeDeviceEncryption(void) __ptr64" ?InitializeDeviceEncryption@CSession@@QEAAXXZ
0x14008BA28: "Winsrv_Timeout" ??_C@_1BO@EOMGJFKH@?$AAW?$AAi?$AAn?$AAs?$AAr?$AAv?$AA_?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140086860: "microsoft.windows.fontdrvhost" ??_C@_1DM@MFDIAJIM@?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAf?$AAo?$AAn?$AAt?$AAd?$AAr?$AAv?$AAh?$AAo?$AAs?$AAt?$AA?$AA@
0x1400B10A8: "__cdecl _imp_LsaFreeReturnBuffer" __imp_LsaFreeReturnBuffer
0x140084980: "__cdecl _imp_SetProcessWorkingSetSizeEx" __imp_SetProcessWorkingSetSizeEx
0x1400B1298: "__cdecl _imp_GetKeyState" __imp_GetKeyState
0x14008F424: ?_TlgEvent@?M@??Stop@ShouldLogoffOtherUsers@WinlogonProvider@@QEAAX_N@Z@4U<unnamed-type-_TlgEvent>@?M@??123@QEAAX0@Z@B
0x1400B1210: "__cdecl _imp_DsrIsDeviceJoined" __imp_DsrIsDeviceJoined
0x1400A48F0: "struct _StateMachineState g_xWLGeneric_InitiateForceLogoff_State" ?g_xWLGeneric_InitiateForceLogoff_State@@3U_StateMachineState@@A
0x140034D57: "__cdecl _imp_load_LsaRegisterLogonProcess" __imp_load_LsaRegisterLogonProcess
0x1400790D8: "int __cdecl LaunchUmfdHostWithCurrentTokenUnconditional(void)" ?LaunchUmfdHostWithCurrentTokenUnconditional@@YAHXZ
0x140015F60: "unsigned long __cdecl AllocAndRegQuery(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?AllocAndRegQuery@@YAKPEAUHKEY__@@PEBGPEAPEAGPEAK@Z
0x140055900: "void __cdecl WLGeneric_PostChangeActions_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PostChangeActions_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x1400364CC: IsWinStationIsSessionPermittedPresent
0x140033DC8: "public: void __cdecl CEtwProviderT<void>::Unregister(void) __ptr64" ?Unregister@?$CEtwProviderT@X@@QEAAXXZ
0x14009F5A0: ext-ms-win-ntuser-windowstation-l1-1-1_NULL_THUNK_DATA_DLB
0x140086368: "Microsoft\UMStartup" ??_C@_1CI@PDEEIKKB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAU?$AAM?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x1400867E0: "Global\LSA_SUBSYSTEM_INITIALIZED" ??_C@_1EC@GIPHDCME@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAL?$AAS?$AAA?$AA_?$AAS?$AAU?$AAB?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAI?$AAN?$AAI?$AAT?$AAI?$AAA?$AAL?$AAI?$AAZ?$AAE?$AAD@
0x1400364CC: IsWinStationGetAllUserSessionsPresent
0x1400B13A8: ext-ms-win-ntuser-windowstation-l1-1-1_NULL_THUNK_DATA_DLA
0x140089940: "ext-ms-win-session-winsta-l1-1-2" ??_C@_1EC@NEGKAFCC@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAw?$AAi?$AAn?$AAs?$AAt?$AAa?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA2@
0x1400AA0A8: "void (__cdecl* __ptr64 g_wil_details_internalRecordFeatureUsage)(unsigned int,unsigned int,unsigned int,char const * __ptr64)" ?g_wil_details_internalRecordFeatureUsage@@3P6AXIIIPEBD@ZEA
0x140079514: "public: static void __cdecl CandidateAccountManagerPolicyTraceProvider::PolicyEnabled<unsigned short const (& __ptr64)[13]>(unsigned short const (& __ptr64)[13])" ??$PolicyEnabled@AEAY0N@$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY0N@$$CBG@Z
0x1400795AC: "public: static void __cdecl CandidateAccountManagerPolicyTraceProvider::PolicyEnabled<unsigned short const (& __ptr64)[15]>(unsigned short const (& __ptr64)[15])" ??$PolicyEnabled@AEAY0P@$$CBG@CandidateAccountManagerPolicyTraceProvider@@SAXAEAY0P@$$CBG@Z
0x140062420: "void __cdecl WLGeneric_Logon_Checking_LastLogonPolicy_Unlock_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_Checking_LastLogonPolicy_Unlock_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14008A358: WPP_1ef36a78667131dc70d91177d32aebf8_Traceguids
0x140094CD8: "pSID is NULL" ??_C@_1BK@KMHJFKOD@?$AAp?$AAS?$AAI?$AAD?$AA?5?$AAi?$AAs?$AA?5?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x140084920: "__cdecl _imp_LoadResource" __imp_LoadResource
0x1400320E0: DefaultWMsgNotifyHandler
0x1400A62F0: "struct _StateMachineSignal g_xWLGeneric_NoRetryAllowed_Signal" ?g_xWLGeneric_NoRetryAllowed_Signal@@3U_StateMachineSignal@@A
0x14007EBB4: WmsgpSendReconnectionUpdateMessage
0x140088868: "ALLUSERSPROFILE" ??_C@_1CA@KKKDHABE@?$AAA?$AAL?$AAL?$AAU?$AAS?$AAE?$AAR?$AAS?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x140092310: "RemoteLockScreen" ??_C@_1CC@NBFIMCDC@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAL?$AAo?$AAc?$AAk?$AAS?$AAc?$AAr?$AAe?$AAe?$AAn?$AA?$AA@
0x140079B90: McGenControlCallback
0x14000EB44: "unsigned long __cdecl AsyncLogoffSupportInit(void)" ?AsyncLogoffSupportInit@@YAKXZ
0x14009E2F0: ext-ms-win-ntuser-windowstation-l1-1-1_NULL_THUNK_DATA_DLN
0x140032070: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x14008B240: "Logon" ??_C@_1M@GJNKAIAB@?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140086DE0: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400A6370: "struct _StateMachineSignal g_xWl_DisplayOff_Signal" ?g_xWl_DisplayOff_Signal@@3U_StateMachineSignal@@A
0x1400A927C: "unsigned char g_fNeedLockIgnoreEvent" ?g_fNeedLockIgnoreEvent@@3EA
0x1400A9448: "struct _RTL_CRITICAL_SECTION JobManagerLock" ?JobManagerLock@@3U_RTL_CRITICAL_SECTION@@A
0x140064B90: "void __cdecl WlRemindersTerminateWorkerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?WlRemindersTerminateWorkerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x140084FD8: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x140085018: "__cdecl _imp_GetPersistedRegistryLocationW" __imp_GetPersistedRegistryLocationW
0x1400518F0: "long __cdecl wil_details_StagingConfig_FireNotification(struct wil_details_StagingConfig * __ptr64,unsigned int,unsigned short,int)" ?wil_details_StagingConfig_FireNotification@@YAJPEAUwil_details_StagingConfig@@IGH@Z
0x14008C898: "HandleSecureLuaBeforeShell" ??_C@_1DG@BDANFILI@?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAL?$AAu?$AAa?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x14007325C: "unsigned long __cdecl EASApplyLogonPolicy(void * __ptr64,unsigned long,unsigned long,void * __ptr64,unsigned long,long,class CFveAutoPtr * __ptr64,void * __ptr64,int * __ptr64)" ?EASApplyLogonPolicy@@YAKPEAXKK0KJPEAVCFveAutoPtr@@0PEAH@Z
0x140035570: IsWinLogonExtPresent
0x1400850F8: "__cdecl _imp_wcstok" __imp_wcstok
0x1400849F0: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x14001EFC0: WluiDisplayStatus
0x14009F588: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLB
0x1400B1398: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLA
0x140033ED8: "public: void __cdecl wil::manually_managed_shutdown_aware_object<class wil::details::FeatureStateManager>::Destroy(void) __ptr64" ?Destroy@?$manually_managed_shutdown_aware_object@VFeatureStateManager@details@wil@@@wil@@QEAAXXZ
0x140089CC8: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x140003E78: "void __cdecl WLFree(void * __ptr64 * __ptr64)" ?WLFree@@YAXPEAPEAX@Z
0x140091150: "Microsoft.SmartCardUnlockRequire" ??_C@_1EE@PPNHEBFH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe@
0x14001FF64: "unsigned long __cdecl WMsgClntTerminate(void)" ?WMsgClntTerminate@@YAKXZ
0x140087430: WLEvt_ThemesOnCreateSession_Stop
0x14009FA1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0
0x14007C070: "public: virtual long __cdecl InProcEncryptHandle::EasOpenVolume(unsigned short const * __ptr64,int,void * __ptr64 * __ptr64) __ptr64" ?EasOpenVolume@InProcEncryptHandle@@UEAAJPEBGHPEAPEAX@Z
0x140066F00: "unsigned long __cdecl WLGeneric_SecureCredUI_Operation_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_SecureCredUI_Operation_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14000CF60: "public: virtual void * __ptr64 __cdecl CGlobalStore::`vector deleting destructor'(unsigned int) __ptr64" ??_ECGlobalStore@@UEAAPEAXI@Z
0x140089860: "__cdecl _sz_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll" __sz_ext_ms_win_session_candidateaccountmgr_l1_1_0_dll
0x1400B14A8: "__cdecl _imp_WinStationConnectAndLockDesktop" __imp_WinStationConnectAndLockDesktop
0x14003200C: "public: __cdecl AutoProviderRegistrar::~AutoProviderRegistrar(void) __ptr64" ??1AutoProviderRegistrar@@QEAA@XZ
0x14009E2E0: ext-ms-win-ntuser-windowstation-l1-1-0_NULL_THUNK_DATA_DLN
0x1400517E0: "long __cdecl wil_details_NtUpdateWnfStateData(struct __WIL__WNF_STATE_NAME const * __ptr64,void const * __ptr64,unsigned long,struct __WIL__WNF_TYPE_ID const * __ptr64,void const * __ptr64,unsigned long,unsigned long)" ?wil_details_NtUpdateWnfStateData@@YAJPEBU__WIL__WNF_STATE_NAME@@PEBXKPEBU__WIL__WNF_TYPE_ID@@1KK@Z
0x14005F56C: "long __cdecl wil::details::ReportFailure_Win32(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,unsigned long)" ?ReportFailure_Win32@details@wil@@YAJPEAXIPEBD110W4FailureType@2@K@Z
0x140088C80: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x140055BE0: "protected: virtual void * __ptr64 __cdecl CDataStoreObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDataStoreObject@@MEAAPEAXI@Z
0x14009F918: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x14001FD8C: StartWMsgKServer
0x14009F92C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1
0x14008A580: "__cdecl GUID_3ea0718b_7dc4_4cb2_83fa_9f86d639fc6a" _GUID_3ea0718b_7dc4_4cb2_83fa_9f86d639fc6a
0x14006EE84: "public: static void __cdecl WinlogonProvider::GetUMgrCredentials<bool,unsigned long & __ptr64>(bool &&,unsigned long & __ptr64)" ??$GetUMgrCredentials@_NAEAK@WinlogonProvider@@SAX$$QEA_NAEAK@Z
0x1400B1040: "__cdecl _imp_WNetClearConnections" __imp_WNetClearConnections
0x140095250: "UnpackEASLockoutData" ??_C@_1CK@HKIEIPEL@?$AAU?$AAn?$AAp?$AAa?$AAc?$AAk?$AAE?$AAA?$AAS?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x140085080: "__cdecl _imp__fmode" __imp__fmode
0x14008C200: "Request_Logon_Credz_Return" ??_C@_1DG@GFFOLHEJ@?$AAR?$AAe?$AAq?$AAu?$AAe?$AAs?$AAt?$AA_?$AAL?$AAo?$AAg?$AAo?$AAn?$AA_?$AAC?$AAr?$AAe?$AAd?$AAz?$AA_?$AAR?$AAe?$AAt?$AAu?$AAr?$AAn?$AA?$AA@
0x14001EEE4: WluiReleaseContext
0x1400555A0: "unsigned long __cdecl WLGeneric_ChangeLogon_ReportResult_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_ChangeLogon_ReportResult_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140084C88: "__cdecl _imp_InitOnceComplete" __imp_InitOnceComplete
0x1400851C0: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x140062960: "unsigned long __cdecl WLGeneric_Logon_ReportLastLogon_Unlock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportLastLogon_Unlock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400B11B0: "__cdecl _imp_LsaLookupFreeMemory" __imp_LsaLookupFreeMemory
0x1400735A0: "void __cdecl EasEngineLogFunction(unsigned long,unsigned short * __ptr64)" ?EasEngineLogFunction@@YAXKPEAG@Z
0x14003636C: "__cdecl _imp_load_UMgrLaunchShellInfrastructureHost" __imp_load_UMgrLaunchShellInfrastructureHost
0x1400889D0: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x140050280: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x140092350: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1IE@OPKHPNGK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1400A50B0: "struct _StateMachineState g_xWLGeneric_Unlocking_State" ?g_xWLGeneric_Unlocking_State@@3U_StateMachineState@@A
0x140033F14: "public: __cdecl wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>::~ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64>(void) __ptr64" ??1?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@wil@@QEAA@XZ
0x14008C7E0: "ShellRestart" ??_C@_1BK@JNJENDPG@?$AAS?$AAh?$AAe?$AAl?$AAl?$AAR?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x140033CC0: "void __cdecl DbgPrintfW(unsigned long,unsigned short const * __ptr64,...)" ?DbgPrintfW@@YAXKPEBGZZ
0x140084690: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x14008C538: "Logged_On" ??_C@_1BE@OLPEKDFN@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA?$AA@
0x14006367C: "public: void __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::zInternalStart(void) __ptr64" ?zInternalStart@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAAXXZ
0x1400A8210: "struct _StateMachineTransition * g_xWLGeneric_WaitForDisconnectAfterFailedAuth_Transition" ?g_xWLGeneric_WaitForDisconnectAfterFailedAuth_Transition@@3PAU_StateMachineTransition@@A
0x1400B10F0: "__cdecl _imp_SeciFreeCallContext" __imp_SeciFreeCallContext
0x1400941E8: "%ws\%ws" ??_C@_1BA@NPEHGALP@?$AA?$CF?$AAw?$AAs?$AA?2?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14009F9E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-power-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-power-base-l1-1-0
0x1400B1558: ext-ms-win-winlogon-mincreds-l1-1-0_NULL_THUNK_DATA_DLA
0x1400B13C0: ext-ms-win-rtcore-ntuser-sysparams-l1-1-0_NULL_THUNK_DATA_DLA
0x140085340: "__cdecl _imp_RtlSetSaclSecurityDescriptor" __imp_RtlSetSaclSecurityDescriptor
0x14005B350: "unsigned long __cdecl WLGeneric_No_Unlock_Reconnect_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_No_Unlock_Reconnect_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A6CB0: "struct _StateMachineTransition * g_xWLGeneric_No_Unlock_DisconnectedLock_Transition" ?g_xWLGeneric_No_Unlock_DisconnectedLock_Transition@@3PAU_StateMachineTransition@@A
0x140088C50: "__cdecl _sz_NaturalAuthClient_dll" __sz_NaturalAuthClient_dll
0x140090D20: WPP_1f7b0d6a5bb633e037699432fedc66c3_Traceguids
0x14000FC04: "public: void __cdecl CGlobalStore::StopGlobalTraceLoggingActivity(unsigned long,enum WinLogonActivityStopReason,enum WinLogonActivityType,int,int,int,unsigned long,int) __ptr64" ?StopGlobalTraceLoggingActivity@CGlobalStore@@QEAAXKW4WinLogonActivityStopReason@@W4WinLogonActivityType@@HHHKH@Z
0x140035AD9: "__cdecl _imp_load_GetAsyncKeyState" __imp_load_GetAsyncKeyState
0x14003085C: "unsigned long __cdecl SetShellInformation(struct _WLSM_GLOBAL_CONTEXT * __ptr64,unsigned short * __ptr64,void * __ptr64)" ?SetShellInformation@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@PEAGPEAX@Z
0x140085158: "__cdecl _imp__tolower" __imp__tolower
0x1400B10C0: "__cdecl _imp_SeciAllocateAndSetCallFlags" __imp_SeciAllocateAndSetCallFlags
0x1400AA090: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x140035AEC: IsSetUserObjectSecurityPresent
0x14005CB40: "unsigned long __cdecl WLGeneric_PseudoLogging_Off2_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PseudoLogging_Off2_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A5C30: "struct _StateMachineState g_xWLGeneric_NotifyLogon_State" ?g_xWLGeneric_NotifyLogon_State@@3U_StateMachineState@@A
0x14005CAE0: "unsigned long __cdecl WLGeneric_PseudoLogging_Off1_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_PseudoLogging_Off1_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x1400A93A0: "class wil::shutdown_aware_object<class wil::details::EnabledStateManager> wil::details::g_enabledStateManager" ?g_enabledStateManager@details@wil@@3V?$shutdown_aware_object@VEnabledStateManager@details@wil@@@2@A
0x1400A9A70: "class wil::shutdown_aware_object<class wil::details::FeatureStateManager> wil::details::g_featureStateManager" ?g_featureStateManager@details@wil@@3V?$shutdown_aware_object@VFeatureStateManager@details@wil@@@2@A
0x14002FB58: NotifyReportEvent
0x140090950: "shell" ??_C@_1M@IDADAHFF@?$AAs?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x1400918A0: "HOMEDRIVE" ??_C@_1BE@DIJOKLDI@?$AAH?$AAO?$AAM?$AAE?$AAD?$AAR?$AAI?$AAV?$AAE?$AA?$AA@
0x140085258: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x140018780: "private: void __cdecl CUser::StartUserPresencePollingUnderLock(void) __ptr64" ?StartUserPresencePollingUnderLock@CUser@@AEAAXXZ
0x14008B1A0: "Reconnect" ??_C@_1BE@NKFANNOF@?$AAR?$AAe?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AA?$AA@
0x14005A170: "void __cdecl WLGeneric_DelayLock_DisplayOnHandler_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DelayLock_DisplayOnHandler_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14007C090: "public: virtual long __cdecl OutOfProcEncryptHandle::EasQueryProtectionStatus(enum _EasEncryptProvProtectionStatus_ * __ptr64,long * __ptr64) __ptr64" ?EasQueryProtectionStatus@OutOfProcEncryptHandle@@UEAAJPEAW4_EasEncryptProvProtectionStatus_@@PEAJ@Z
0x14007D094: "int __cdecl IsSetupInProgress(void)" ?IsSetupInProgress@@YAHXZ
0x1400880D8: "LibPath" ??_C@_1BA@LHIOKFDA@?$AAL?$AAi?$AAb?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x14005CD7C: "public: static void __cdecl OOBEHealthTelemetry::OOBEHealthMetric<unsigned char const & __ptr64,unsigned __int64,unsigned __int64,unsigned __int64 & __ptr64,unsigned short * __ptr64,unsigned short * __ptr64>(unsigned char const & __ptr64,unsigned __int64 &&,unsigned __int64,unsigned __int64 & __ptr64,unsigned short * __ptr64 &&,unsigned __int64 & __ptr64)" ??$OOBEHealthMetric@AEBE_K_KAEA_KPEAGPEAG@OOBEHealthTelemetry@@SAXAEBE$$QEA_K1AEA_K$$QEAPEAG3@Z
0x1400A52F0: "struct _StateMachineState g_xWLGeneric_Change_ReportResult_State" ?g_xWLGeneric_Change_ReportResult_State@@3U_StateMachineState@@A
0x1400A95B8: g_pSidLocalService
0x140031C08: InitDebugHelpers
0x14006E8A4: "unsigned long __cdecl WLEventOptIn(void)" ?WLEventOptIn@@YAKXZ
0x1400A54B0: "struct _StateMachineState g_xWLGeneric_AppLauncher_State" ?g_xWLGeneric_AppLauncher_State@@3U_StateMachineState@@A
0x140091E80: "ReadyBootTrainingCountSinceLastS" ??_C@_1FC@KPEHNDAK@?$AAR?$AAe?$AAa?$AAd?$AAy?$AAB?$AAo?$AAo?$AAt?$AAT?$AAr?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAC?$AAo?$AAu?$AAn?$AAt?$AAS?$AAi?$AAn?$AAc?$AAe?$AAL?$AAa?$AAs?$AAt?$AAS@
0x1400863B0: "FirstLogon" ??_C@_1BG@BMPANPFO@?$AAF?$AAi?$AAr?$AAs?$AAt?$AAL?$AAo?$AAg?$AAo?$AAn?$AA?$AA@
0x140055780: "void __cdecl WLGeneric_Change_ReportResult_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Change_ReportResult_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400854B8: "__cdecl _imp_NtPowerInformation" __imp_NtPowerInformation
0x1400339E0: "int __cdecl WMsgNotifyHandler(unsigned long,unsigned long,unsigned short const * __ptr64,struct _RPC_ASYNC_STATE * __ptr64,long * __ptr64)" ?WMsgNotifyHandler@@YAHKKPEBGPEAU_RPC_ASYNC_STATE@@PEAJ@Z
0x140002D30: "unsigned long __cdecl WLGeneric_Unlocking_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Unlocking_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140062A20: "unsigned long __cdecl WLGeneric_Logon_ReportSuccessResult_Unlock_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_Logon_ReportSuccessResult_Unlock_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x140055C18: StringCchLengthW
0x140084A78: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x14008C730: "Logged_On_Disconnected" ??_C@_1CO@GOJGGHNF@?$AAL?$AAo?$AAg?$AAg?$AAe?$AAd?$AA_?$AAO?$AAn?$AA_?$AAD?$AAi?$AAs?$AAc?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x1400AA368: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUvzhUoryUlyquivUznwGEUkxsOlyq@easlogon" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUfnhgzigfkUvzhUoryUlyquivUznwGEUkxsOlyq@easlogon
0x14005967C: "int __cdecl AttemptAADConnect(struct _WLSM_GLOBAL_CONTEXT * __ptr64,struct _CRED_PROV_CREDENTIAL * __ptr64,bool,bool)" ?AttemptAADConnect@@YAHPEAU_WLSM_GLOBAL_CONTEXT@@PEAU_CRED_PROV_CREDENTIAL@@_N2@Z
0x140085280: "__cdecl _imp_WinSqmStartSession" __imp_WinSqmStartSession
0x140087838: "Negotiate" ??_C@_09OBFLGEDM@Negotiate?$AA@
0x14009FA44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400864B0: WLEvt_RunStateMachine_Start
0x140003E78: UHHeapFree
0x140019CA4: "bool __cdecl wil::IsDefaultSystemManagedAccount(unsigned short const * __ptr64)" ?IsDefaultSystemManagedAccount@wil@@YA_NPEBG@Z
0x140089F78: "UEFISecureBootEnabled" ??_C@_1CM@DKFPDMAB@?$AAU?$AAE?$AAF?$AAI?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAB?$AAo?$AAo?$AAt?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140019F40: LUAIsElevatedToken
0x140060E50: "void __cdecl WLGeneric_AppLauncher_Enter(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_AppLauncher_Enter@@YAXPEAU_StateMachineCallContext@@@Z
0x14005932C: WPP_SF_lDDqqD
0x140084990: "__cdecl _imp_VirtualUnlock" __imp_VirtualUnlock
0x14003732C: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Reset(void) __ptr64" ?Reset@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXXZ
0x14003565B: "__cdecl _tailMerge_ext_ms_win_session_winlogon_l1_1_0_dll" __tailMerge_ext_ms_win_session_winlogon_l1_1_0_dll
0x140086F00: "EnableSiHostIntegration" ??_C@_1DA@BFNDKLAA@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAi?$AAH?$AAo?$AAs?$AAt?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x140084610: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x140035920: "__cdecl _tailMerge_ext_ms_win_devmgmt_policy_l1_1_1_dll" __tailMerge_ext_ms_win_devmgmt_policy_l1_1_1_dll
0x14008F54B: ?_TlgEvent@?BO@??Stop@ShouldLogoffOtherUsers@WinlogonProvider@@QEAAX_N@Z@4U<unnamed-type-_TlgEvent>@?BO@??123@QEAAX0@Z@B
0x140089268: "ext-ms-win-ntuser-misc-l1-5-1" ??_C@_1DM@KBKANDDN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAm?$AAi?$AAs?$AAc?$AA?9?$AAl?$AA1?$AA?9?$AA5?$AA?9?$AA1?$AA?$AA@
0x140035DE4: "__cdecl _imp_load_SwitchDesktopWithFade" __imp_load_SwitchDesktopWithFade
0x140017F10: "public: int __cdecl CUser::IsLockWorkstationDisabled(void) __ptr64" ?IsLockWorkstationDisabled@CUser@@QEAAHXZ
0x140053170: "unsigned long __cdecl WlAccessibilityStartShortcutToolDuringSetup(struct _WLSM_GLOBAL_CONTEXT * __ptr64)" ?WlAccessibilityStartShortcutToolDuringSetup@@YAKPEAU_WLSM_GLOBAL_CONTEXT@@@Z
0x14005C7A0: WPP_SF_sl
0x140063900: WPP_SF_Sl
0x140078FC0: WPP_SF_SL
0x1400AA2C0: "struct _LOCKOUT_DATA s_xLockoutData" ?s_xLockoutData@@3U_LOCKOUT_DATA@@A
0x140056590: "unsigned long __cdecl WLGeneric_TimeoutHandler_Locked_Execute(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_TimeoutHandler_Locked_Execute@@YAKPEAU_StateMachineCallContext@@@Z
0x14007B3B0: "public: unsigned long __cdecl CFveAutoPtr::SetFailedCountForSID(void * __ptr64,unsigned long,int * __ptr64) __ptr64" ?SetFailedCountForSID@CFveAutoPtr@@QEAAKPEAXKPEAH@Z
0x140035E02: "__cdecl _tailMerge_ext_ms_win_ntuser_windowclass_l1_1_1_dll" __tailMerge_ext_ms_win_ntuser_windowclass_l1_1_1_dll
0x140090D80: "Software\Microsoft\Windows\Curre" ??_C@_1IK@CIOPKNIH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14005CC6C: "public: static void __cdecl OOBE::Health::details::OOBEHealthTracker::HandleEvent<12,long>(long)" ??$HandleEvent@$0M@J@OOBEHealthTracker@details@Health@OOBE@@SAXJ@Z
0x1400AA218: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x140063900: WPP_SF_SD
0x140068B84: WPP_SF_sd
0x1400B1200: "__cdecl _imp_CredUnPackAuthenticationBufferW" __imp_CredUnPackAuthenticationBufferW
0x140008E28: "int __cdecl wil_details_StagingConfig_QueryFeatureState(struct wil_details_StagingConfig * __ptr64,struct wil_FeatureState * __ptr64,unsigned int,int)" ?wil_details_StagingConfig_QueryFeatureState@@YAHPEAUwil_details_StagingConfig@@PEAUwil_FeatureState@@IH@Z
0x140085088: "__cdecl _imp_free" __imp_free
0x1400A7598: "unsigned long * g_xWLGeneric_Locked_ResetSignals" ?g_xWLGeneric_Locked_ResetSignals@@3PAKA
0x14008FC08: WLEvt_KillingScreenSaverToLockWorkStation_Info
0x14008D548: "CommonProgramFiles(x86)" ??_C@_1DA@NDENMJEC@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$CI?$AAx?$AA8?$AA6?$AA?$CJ?$AA?$AA@
0x1400764E8: GetFailedSubscriberName
0x140084D68: "__cdecl _imp_DeleteTimerQueueTimer" __imp_DeleteTimerQueueTimer
0x1400348F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140084C90: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400A5E30: "struct _StateMachineState g_xWLGeneric_MPRLogonNotify_State" ?g_xWLGeneric_MPRLogonNotify_State@@3U_StateMachineState@@A
0x14001A9F0: "void __cdecl WLGeneric_DisplayLegalNotice_Exit(struct _StateMachineCallContext * __ptr64)" ?WLGeneric_DisplayLegalNotice_Exit@@YAXPEAU_StateMachineCallContext@@@Z
0x1400851E8: "__cdecl _imp_NtSetEvent" __imp_NtSetEvent
0x140094C40: "Invalid Provider" ??_C@_1CC@MKGPBOGE@?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x140036F4C: "public: __cdecl wil::details::ThreadFailureCallbackHolder::ThreadFailureCallbackHolder(struct wil::details::IFailureCallback * __ptr64,struct wil::CallContextInfo * __ptr64,bool) __ptr64" ??0ThreadFailureCallbackHolder@details@wil@@QEAA@PEAUIFailureCallback@12@PEAUCallContextInfo@2@_N@Z
0x140001950: "private: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValueInternal(unsigned short const * __ptr64,bool,unsigned __int64 * __ptr64,bool * __ptr64)" ?TryGetValueInternal@SemaphoreValue@details_abi@wil@@CAJPEBG_NPEA_KPEA_N@Z
0x1400A9120: "unsigned __int64 g_TraceRegHandle" ?g_TraceRegHandle@@3_KA
0x14003519E: "__cdecl _imp_load_CreateAppContainerProfile" __imp_load_CreateAppContainerProfile
0x140054908: WPP_SF_sS
0x140065230: WPP_SF_SS
0x140076800: WPP_SF_Ss
0x14002A580: SignalManagerSetSignal
0x1400845D0: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x14007DC7C: WluiClearUIState
0x14008FCE8: WLEvt_InitiateShutdown_Stop
0x140085568: "__cdecl _imp_EtwEventSetInformation" __imp_EtwEventSetInformation
0x14006F1F4: "int __cdecl FetchAutoLogonCredentials(unsigned short * __ptr64,unsigned long,int * __ptr64,unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned long)" ?FetchAutoLogonCredentials@@YAHPEAGKPEAH0K0K@Z
0x140012A48: "bool __cdecl LaunchUmfdHostWithVirtualAccountAsync(void)" ?LaunchUmfdHostWithVirtualAccountAsync@@YA_NXZ
0x140085198: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x14009F850: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x140089C4C: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x14007D100: "int __cdecl IsThisSetup(void)" ?IsThisSetup@@YAHXZ
0x140084A18: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x14009DCE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_ntuser_windowclass_l1_1_1_dll
0x1400A4A30: "struct _StateMachineState g_xWLGeneric_AbortPendingLockRequest_State" ?g_xWLGeneric_AbortPendingLockRequest_State@@3U_StateMachineState@@A
0x140063700: "public: void __cdecl wil::ActivityBase<class WinlogonProvider,1,140737488355328,5,struct _TlgReflectorTag_Param0IsProviderType>::zInternalStop(void) __ptr64" ?zInternalStop@?$ActivityBase@VWinlogonProvider@@$00$0IAAAAAAAAAAA@$04U_TlgReflectorTag_Param0IsProviderType@@@wil@@QEAAXXZ
0x1400A8F38: "__cdecl _hmod__ext_ms_win_ntuser_keyboard_l1_1_0_dll" __hmod__ext_ms_win_ntuser_keyboard_l1_1_0_dll
0x140091E00: "Poll_Timer_Increment" ??_C@_1CK@KFCKIAIA@?$AAP?$AAo?$AAl?$AAl?$AA_?$AAT?$AAi?$AAm?$AAe?$AAr?$AA_?$AAI?$AAn?$AAc?$AAr?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140032430: "private: static void __cdecl CUser::StartDeferredPostAuthenticationWorkTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?StartDeferredPostAuthenticationWorkTimerCallback@CUser@@CAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x1400A4870: "struct _StateMachineState g_xWLGeneric_Logging_Off_State" ?g_xWLGeneric_Logging_Off_State@@3U_StateMachineState@@A
0x14009F878: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400B1048: "__cdecl _imp_WNetRestoreAllConnectionsW" __imp_WNetRestoreAllConnectionsW
0x140095220: "EasGetDeviceLockoutData" ??_C@_1DA@IMMBDJNP@?$AAE?$AAa?$AAs?$AAG?$AAe?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAc?$AAk?$AAo?$AAu?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1400A70D8: "struct _StateMachineTransition * g_xWLGeneric_MPRLogonNotify_Unlock_Transition" ?g_xWLGeneric_MPRLogonNotify_Unlock_Transition@@3PAU_StateMachineTransition@@A
0x14007C8D0: "void __cdecl SQMBitLockerIfNeeded(void)" ?SQMBitLockerIfNeeded@@YAXXZ
0x1400912D8: "credwiz.exe" ??_C@_1BI@BNMONCBI@?$AAc?$AAr?$AAe?$AAd?$AAw?$AAi?$AAz?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14007DDF0: WluiDestroy
0x140035447: "__cdecl _tailMerge_api_ms_win_rtcore_ntuser_private_l1_1_2_dll" __tailMerge_api_ms_win_rtcore_ntuser_private_l1_1_2_dll
0x1400896B0: "ext-ms-win-ntuser-windowstation-" ??_C@_1EO@PCHFFKDO@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?9?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAt?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?9@
0x140084C68: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1400762EC: "void __cdecl WLEventWrite(struct _EVENT_DESCRIPTOR const & __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?WLEventWrite@@YAXAEBU_EVENT_DESCRIPTOR@@KPEBG1@Z
0x1400A6D20: "unsigned long * g_xWLGeneric_PostUnlockActions_ResetSignals" ?g_xWLGeneric_PostUnlockActions_ResetSignals@@3PAKA
0x1400955E0: "Missing FVE functions" ??_C@_1CM@DOOCDOMJ@?$AAM?$AAi?$AAs?$AAs?$AAi?$AAn?$AAg?$AA?5?$AAF?$AAV?$AAE?$AA?5?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14009F800: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400A90C0: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x14008D070: "PowerTransition_Locked" ??_C@_1CO@JNGIOKPK@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAT?$AAr?$AAa?$AAn?$AAs?$AAi?$AAt?$AAi?$AAo?$AAn?$AA_?$AAL?$AAo?$AAc?$AAk?$AAe?$AAd?$AA?$AA@
0x14008FF80: "Warning Sounds" ??_C@_1BO@MDHCEEMD@?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAS?$AAo?$AAu?$AAn?$AAd?$AAs?$AA?$AA@
0x1400364CC: IsWinStationConnectAndLockDesktopPresent
0x1400AA290: "enum FEATURE_ENABLED_STATE (__cdecl* __ptr64 g_wil_details_apiGetFeatureEnabledState)(unsigned int,enum FEATURE_CHANGE_TIME)" ?g_wil_details_apiGetFeatureEnabledState@@3P6A?AW4FEATURE_ENABLED_STATE@@IW4FEATURE_CHANGE_TIME@@@ZEA
0x14002BBCC: "public: int __cdecl CSession::IsDwmRequiredInSession(void) __ptr64" ?IsDwmRequiredInSession@CSession@@QEAAHXZ
0x1400A7740: "unsigned long * g_xWLGeneric_ChangingPassword_ResetSignals" ?g_xWLGeneric_ChangingPassword_ResetSignals@@3PAKA
0x1400367DB: "__cdecl _imp_load_WinStationFreeMemory" __imp_load_WinStationFreeMemory
0x1400A56B0: "struct _StateMachineState g_xWLGeneric_ShellRestart_State" ?g_xWLGeneric_ShellRestart_State@@3U_StateMachineState@@A
0x1400A6330: "struct _StateMachineSignal g_xWLGeneric_LogonUI_Cancel_Signal" ?g_xWLGeneric_LogonUI_Cancel_Signal@@3U_StateMachineSignal@@A
0x140089760: "ext-ms-win-session-usermgr-l1-1-" ??_C@_1EE@HAOPKKMN@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAs?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?9?$AAu?$AAs?$AAe?$AAr?$AAm?$AAg?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9@
0x140063AC0: "public: int __cdecl CMachine::IsSecurePPIEdition(void) __ptr64" ?IsSecurePPIEdition@CMachine@@QEAAHXZ
0x140054860: WPP_SF_S
0x14005C744: WPP_SF_s
0x14009F5F8: ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLB
0x140076D64: WlSecureDesktoppAbortAndFreeRequest
0x14002FCC8: UmsReportApplicationEvent
0x14003752A: memset
0x14009FC9C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1400A48B0: "struct _StateMachineState g_xWLGeneric_NotifyEndShell_State" ?g_xWLGeneric_NotifyEndShell_State@@3U_StateMachineState@@A
0x1400899E0: "__cdecl _sz_ext_ms_win_session_winsta_l1_1_0_dll" __sz_ext_ms_win_session_winsta_l1_1_0_dll
0x1400957C0: "SQMBitLockerAlreadySet" ??_C@_1CO@ICAEHIOG@?$AAS?$AAQ?$AAM?$AAB?$AAi?$AAt?$AAL?$AAo?$AAc?$AAk?$AAe?$AAr?$AAA?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AAS?$AAe?$AAt?$AA?$AA@
0x140089BF0: "__cdecl _sz_MPR_dll" __sz_MPR_dll
0x1400A6926: g_header_init_InitializeResultHeader
0x140089A10: "__cdecl _sz_ext_ms_win_session_winsta_l1_1_3_dll" __sz_ext_ms_win_session_winsta_l1_1_3_dll
0x140034B8D: "__cdecl _imp_load_ThemeWatchForStart" __imp_load_ThemeWatchForStart
0x14009DEC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_credui_dll" __DELAY_IMPORT_DESCRIPTOR_credui_dll
0x140089A40: "__cdecl _sz_ext_ms_win_session_winsta_l1_1_2_dll" __sz_ext_ms_win_session_winsta_l1_1_2_dll
0x1400A6B60: "struct _StateMachineTransition * g_xWLGeneric_DelayLock_Transition" ?g_xWLGeneric_DelayLock_Transition@@3PAU_StateMachineTransition@@A
0x14008D478: "CommonFilesDir" ??_C@_1BO@HALHHILJ@?$AAC?$AAo?$AAm?$AAm?$AAo?$AAn?$AAF?$AAi?$AAl?$AAe?$AAs?$AAD?$AAi?$AAr?$AA?$AA@
0x140055C80: "void __cdecl WlpPeriodicBreak(void * __ptr64,unsigned char)" ?WlpPeriodicBreak@@YAXPEAXE@Z
0x14008BD68: "Wl_DelayedSwitchDesktop" ??_C@_1DA@BKKKGLOM@?$AAW?$AAl?$AA_?$AAD?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x1400A95E0: g_pSidWorld
0x140077DCC: WlSecureDesktoppValidateRequestInfo
0x14008FB88: WLEvt_InitiateShutdown_Start
0x14002C2BC: "public: int __cdecl CMachine::IsPPIEdition(void) __ptr64" ?IsPPIEdition@CMachine@@QEAAHXZ
0x140018D38: "private: unsigned long __cdecl CGlobalStore::FetchHKLMSoftwareWinlogon(void) __ptr64" ?FetchHKLMSoftwareWinlogon@CGlobalStore@@AEAAKXZ
0x1400A9180: "void * __ptr64 __ptr64 ServerReadyEvent" ?ServerReadyEvent@@3PEAXEA
0x1400B1138: USERENV_NULL_THUNK_DATA_DLA
0x1400885D0: "ReportBootOk" ??_C@_1BK@IEGAHKGL@?$AAR?$AAe?$AAp?$AAo?$AAr?$AAt?$AAB?$AAo?$AAo?$AAt?$AAO?$AAk?$AA?$AA@

[JEB Decompiler by PNF Software]