Generated by JEB on 2019/08/01

PE: C:\Windows\System32\dpapi.dll Base=0x180000000 SHA-256=0D1488B2FF471C1EF2F8F2742D685A8778B2C1512A044BDF2606C3ED92E0B512
PDB: dpapi.pdb GUID={A7EE03D1-DF0A-5B33-4A63E9ED8E7EAB90} Age=1

139 located named symbols:
0x180001620: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000430C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180003840: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180001660: iCryptIdentifyProtection
0x180003730: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003890: "__cdecl _sz_CRYPTBASE_dll" __sz_CRYPTBASE_dll
0x180001D30: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003850: "protected_storage" ??_C@_1CE@KBIBKOB@?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AA_?$AAs?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?$AA@
0x180003B70: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003718: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180003768: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x1800037E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005580: "__cdecl _hmod__RPCRT4_dll" __hmod__RPCRT4_dll
0x180001330: CryptUnprotectDataNoUI
0x180003834: "__cdecl _guard_iat_table" __guard_iat_table
0x180001CE9: memcpy
0x1800037D0: "__cdecl _imp_memset" __imp_memset
0x180001BB3: "__cdecl _imp_load_RpcBindingFree" __imp_load_RpcBindingFree
0x1800043AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800036E8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001A5B: "__cdecl _C_specific_handler" __C_specific_handler
0x180001E00: MIDL_user_free
0x180001C88: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180005588: "__cdecl _hmod__CRYPTBASE_dll" __hmod__CRYPTBASE_dll
0x180004348: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180003B68: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180001BC5: "__cdecl _imp_load_SystemFunction040" __imp_load_SystemFunction040
0x18000400C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll" __DELAY_IMPORT_DESCRIPTOR_RPCRT4_dll
0x180003770: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180002084: "unsigned long __cdecl lNtStatusToWinError(long)" ?lNtStatusToWinError@@YAKJ@Z
0x180003700: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180001F98: "unsigned long __cdecl DPAPIGetMasterKeyAlgs(unsigned char * __ptr64,unsigned long,unsigned int * __ptr64,unsigned int * __ptr64)" ?DPAPIGetMasterKeyAlgs@@YAKPEAEKPEAI1@Z
0x180003748: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180007040: RPCRT4_NULL_THUNK_DATA_DLA
0x1800041A0: RPCRT4_NULL_THUNK_DATA_DLB
0x1800040D0: RPCRT4_NULL_THUNK_DATA_DLN
0x180001B28: "__cdecl _imp_load_SystemFunction041" __imp_load_SystemFunction041
0x180001BE3: "__cdecl _tailMerge_samlib_dll" __tailMerge_samlib_dll
0x1800017B0: CryptUnprotectMemory
0x180003880: "__cdecl _sz_RPCRT4_dll" __sz_RPCRT4_dll
0x180003790: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x1800037C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800037B0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002058: "long __cdecl UnbindW(unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?UnbindW@@YAJPEAPEAGPEAPEAX@Z
0x180003728: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800041C8: CRYPTBASE_NULL_THUNK_DATA_DLB
0x1800036F0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180001C64: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180001EE0: "unsigned long __cdecl CNGGetOpaqueBlobAlgs(unsigned char * __ptr64,unsigned long,unsigned int * __ptr64,unsigned int * __ptr64)" ?CNGGetOpaqueBlobAlgs@@YAKPEAEKPEAI1@Z
0x1800043D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180003738: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003B68: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180004370: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180007010: CRYPTBASE_NULL_THUNK_DATA_DLA
0x18000406C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180001010: CryptProtectDataNoUI
0x180007038: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x180007028: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x1800036F8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800043C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000435C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800017E0: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x180007008: "__cdecl _imp_SystemFunction041" __imp_SystemFunction041
0x180007000: "__cdecl _imp_SystemFunction040" __imp_SystemFunction040
0x1800037E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003740: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800022D0: CryptResetMachineCredentials
0x1800037B8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180001BD7: "__cdecl _imp_load_SamiChangeKeys" __imp_load_SamiChangeKeys
0x180003788: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003780: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800036D0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180003798: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180003874: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180004398: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001810: "__cdecl _security_check_cookie" __security_check_cookie
0x180004320: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180003750: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180002000: "long __cdecl BindW(unsigned short * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?BindW@@YAJPEAPEAGPEAPEAX@Z
0x180003778: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180003710: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800036C0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800040A0: CRYPTBASE_NULL_THUNK_DATA_DLN
0x18000402C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll
0x180003760: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800037F0: "__cdecl _guard_fids_table" __guard_fids_table
0x180003040: "__cdecl load_config_used" _load_config_used
0x1800036D8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x1800036C8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800016A0: "unsigned long __cdecl DPAPIGetBlobKeyAlgs(unsigned char * __ptr64,unsigned long,unsigned int * __ptr64,unsigned int * __ptr64)" ?DPAPIGetBlobKeyAlgs@@YAKPEAEKPEAI1@Z
0x1800020B0: CryptUpdateProtectedState
0x180005590: "__cdecl _hmod__SAMLIB_dll" __hmod__SAMLIB_dll
0x180007030: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x180003720: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180001B34: "__cdecl _tailMerge_cryptbase_dll" __tailMerge_cryptbase_dll
0x1800037A8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180003758: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180007018: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x1800037C0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003B70: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180001600: MIDL_user_allocate
0x180001D10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180001780: CryptProtectMemory
0x180001E10: "unsigned long __cdecl CAPIGetKeyFileAlgs(unsigned char * __ptr64,unsigned long,unsigned int * __ptr64,unsigned int * __ptr64)" ?CAPIGetKeyFileAlgs@@YAKPEAEKPEAI1@Z
0x1800037D8: ntdll_NULL_THUNK_DATA
0x1800037A0: "__cdecl _imp_memcpy" __imp_memcpy
0x180007048: "__cdecl _imp_SamiChangeKeys" __imp_SamiChangeKeys
0x180005000: "__cdecl _security_cookie" __security_cookie
0x180003708: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180004334: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180001A73: "__cdecl _tailMerge_rpcrt4_dll" __tailMerge_rpcrt4_dll
0x180001A67: "__cdecl _imp_load_NdrClientCall3" __imp_load_NdrClientCall3
0x1800036E0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001B04: "__cdecl _imp_load_RpcStringBindingComposeW" __imp_load_RpcStringBindingComposeW
0x180001834: "__cdecl _security_init_cookie" __security_init_cookie
0x180001B16: "__cdecl _imp_load_RpcStringFreeW" __imp_load_RpcStringFreeW
0x18000404C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll" __DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll
0x180001AF2: "__cdecl _imp_load_RpcBindingFromStringBindingW" __imp_load_RpcBindingFromStringBindingW
0x180001910: "__cdecl _report_gsfailure" __report_gsfailure
0x1800038A0: "__cdecl _sz_SAMLIB_dll" __sz_SAMLIB_dll
0x1800040E0: SAMLIB_NULL_THUNK_DATA_DLN
0x1800041E8: SAMLIB_NULL_THUNK_DATA_DLB
0x180007050: SAMLIB_NULL_THUNK_DATA_DLA
0x180007020: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x180004384: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180001CF5: memset
0x1800043E8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]