Generated by JEB on 2019/08/01

PE: C:\Windows\System32\NtlmShared.dll Base=0x180000000 SHA-256=1E7F74147094DB850FD1F0EEC3697BE0D693C15509B03C44EC871641F3AD3EE1
PDB: NtlmShared.pdb GUID={719F927E-1376-71D7-5E2E37DC2FF92F19} Age=1

280 located named symbols:
0x180002160: MsvpDeriveSecureCredKey
0x1800049AC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003E44: "int __cdecl ReusableHMAC(void * __ptr64,void * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long)" ?ReusableHMAC@@YAHPEAX0KPEAEK1K1K1K@Z
0x180005338: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x1800045A0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180005398: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x18000652C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180004558: "public: int __cdecl CLinkedList::Initialize(void) __ptr64" ?Initialize@CLinkedList@@QEAAHXZ
0x180008048: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002A50: MsvpUpdateSharedConfiguration
0x1800045DC: "__cdecl CRT_INIT" _CRT_INIT
0x1800056B0: "NtlmShared" ??_C@_1BG@FFCFCMBD@?$AAN?$AAt?$AAl?$AAm?$AAS?$AAh?$AAa?$AAr?$AAe?$AAd?$AA?$AA@
0x1800051F0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000A000: "__cdecl _imp_SystemFunction036" __imp_SystemFunction036
0x1800054A0: "__cdecl _sz_CRYPTBASE_dll" __sz_CRYPTBASE_dll
0x180005370: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180002630: WppControlCallback
0x1800055D8: "HandleMsvSupplementalCred" ??_C@_0BK@KDCOLOBF@HandleMsvSupplementalCred?$AA@
0x180002B20: WPP_SF_sDZZZDD
0x180004DF0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000259C: MsvpAvlGet
0x1800019A0: MsvpNtlm3Response
0x180003790: MsvpValidateSupplementalCredsBuffer
0x1800052F0: "__cdecl _imp_RtlUpperChar" __imp_RtlUpperChar
0x180005530: "MsvpLm3Response" ??_C@_0BA@DKEOAFMB@MsvpLm3Response?$AA@
0x180005570: "MsvpLm20GetNtlm3ChallengeRespons" ??_C@_0CC@PADFCDHF@MsvpLm20GetNtlm3ChallengeRespons@
0x18000A038: CRYPTSP_NULL_THUNK_DATA_DLA
0x1800056AC: "" ??_C@_00CNPNBAHC@?$AA@
0x1800052D0: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x180005378: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x1800058B8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800052D8: bcrypt_NULL_THUNK_DATA
0x180005148: "__cdecl _imp__initterm_e" __imp__initterm_e
0x1800051C8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180003F78: PKCS5DerivePBKDF2
0x1800026D0: NtlmSharedInit
0x1800053B0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180005228: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180005268: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x180004C8C: "__cdecl _imp_load_SystemFunction006" __imp_load_SystemFunction006
0x180005540: "MsvpNtlm3Response" ??_C@_0BC@DFFPEEGO@MsvpNtlm3Response?$AA@
0x1800053B8: "__cdecl _xc_a" __xc_a
0x180005648: "MsvpDecryptDpapiMasterKey" ??_C@_0BK@JKAOPIKN@MsvpDecryptDpapiMasterKey?$AA@
0x1800060D0: CRYPTSP_NULL_THUNK_DATA_DLB
0x180004B76: "__cdecl _imp_load_SystemFunction036" __imp_load_SystemFunction036
0x1800052B8: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x1800023C0: MsvpCachePasswordsToCredential
0x180002390: MsvpCredentialToCachePasswords
0x180005820: "AES" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x18000383C: "__cdecl TlgDefineProvider_annotation__TlgNtlmTraceLoggerProv" _TlgDefineProvider_annotation__TlgNtlmTraceLoggerProv
0x1800051B0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000A020: "__cdecl _imp_SystemFunction011" __imp_SystemFunction011
0x18000548C: "__cdecl _guard_iat_table" __guard_iat_table
0x180004D41: memcpy
0x180003848: "unsigned long __cdecl DecryptMasterKeyToMemoryEx(unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,void * __ptr64 (__cdecl*)(unsigned __int64),unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned int * __ptr64,unsigned int * __ptr64,unsigned long * __ptr64)" ?DecryptMasterKeyToMemoryEx@@YAKPEAEK0KP6APEAX_K@ZPEAPEAEPEAKPEAI54@Z
0x180005290: "__cdecl _imp_BCryptDecrypt" __imp_BCryptDecrypt
0x180005348: "__cdecl _imp_RtlConvertSidToUnicodeString" __imp_RtlConvertSidToUnicodeString
0x180004C01: "__cdecl _imp_load_SystemFunction007" __imp_load_SystemFunction007
0x180005130: "__cdecl _imp_memset" __imp_memset
0x18000496B: "__cdecl initterm" _initterm
0x1800065B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800042E4: GetBCryptProviderHandle
0x1800053D0: "__cdecl _xi_z" __xi_z
0x180001690: MsvpCalculateNtlm3Owf
0x180005178: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180005388: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180004CD4: "__cdecl _C_specific_handler" __C_specific_handler
0x180003DC0: "int __cdecl BCryptProvIsMatch(struct _ELT * __ptr64,struct _ELT * __ptr64)" ?BCryptProvIsMatch@@YAHPEAU_ELT@@0@Z
0x180005688: WPP_00455145ae8b323005fda892635f0223_Traceguids
0x1800051A0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180004C0D: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x18000121C: "void __cdecl NtlmTraceErrorWithStatusViaWpp(char const * __ptr64,unsigned long,char const * __ptr64,long)" ?NtlmTraceErrorWithStatusViaWpp@@YAXPEBDK0J@Z
0x180008620: WPP_REGISTRATION_GUIDS
0x1800057B0: WPP_9c7a4d64eb273e23791bcbc0188c64c7_Traceguids
0x180005808: "MD4" ??_C@_17MDMFNACG@?$AAM?$AAD?$AA4?$AA?$AA@
0x1800087D0: "struct _NtlmGlobalConfiguration GlobalConfig" ?GlobalConfig@@3U_NtlmGlobalConfiguration@@A
0x1800087F8: "struct _LM_OWF_PASSWORD NlpNullNtOwfPassword" ?NlpNullNtOwfPassword@@3U_LM_OWF_PASSWORD@@A
0x18000A030: "__cdecl _imp_SystemFunction007" __imp_SystemFunction007
0x18000A018: "__cdecl _imp_SystemFunction006" __imp_SystemFunction006
0x18000A010: "__cdecl _imp_SystemFunction009" __imp_SystemFunction009
0x18000A028: "__cdecl _imp_SystemFunction008" __imp_SystemFunction008
0x180004D80: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180008808: "struct _NtlmSharedConfiguration GlobalSharedConfig" ?GlobalSharedConfig@@3U_NtlmSharedConfiguration@@A
0x180008600: "__cdecl _hmod__CRYPTBASE_dll" __hmod__CRYPTBASE_dll
0x180008628: WPP_MAIN_CB
0x1800058B4: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180005698: "MsvpAvlGetTimestamp" ??_C@_0BE@IIMGJGCF@MsvpAvlGetTimestamp?$AA@
0x180005598: "MsvpComputeSaltedHashedPassword" ??_C@_0CA@KLNLGJAD@MsvpComputeSaltedHashedPassword?$AA@
0x180006540: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x1800054B0: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x1800026C0: MsvpGMSACred
0x180005230: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180004864: "__cdecl decode_pointer" _decode_pointer
0x1800022E0: MsvpCompareCredentials
0x18000657C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0
0x180004C9E: "__cdecl _imp_load_SystemFunction011" __imp_load_SystemFunction011
0x180005190: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180005200: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001DA0: MsvpComputeSaltedHashedPassword
0x1800052C0: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180004978: DllMain
0x180005270: api-ms-win-core-util-l1-1-0_NULL_THUNK_DATA
0x180005508: "(empty)" ??_C@_1BA@OGKPHKHF@?$AA?$CI?$AAe?$AAm?$AAp?$AAt?$AAy?$AA?$CJ?$AA?$AA@
0x1800029D0: NtlmSharedAllocate
0x180001318: WPP_SF_sZZ
0x180005118: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180005318: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800051E0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004704: "__cdecl _DllMainCRTStartup" __DllMainCRTStartup
0x1800060C0: CRYPTBASE_NULL_THUNK_DATA_DLB
0x1800017B0: MsvpLm3Response
0x180005758: "MsvpLm3ValidateResponse" ??_C@_0BI@GFANELMN@MsvpLm3ValidateResponse?$AA@
0x180004CE0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180001FA0: MsvpPutClearOwfsInPrimaryCredential
0x180004D5C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005390: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180002A10: NtlmSharedAllocatePrivateHeap
0x180005770: "MsvpPasswordValidate" ??_C@_0BF@MLHGCPFP@MsvpPasswordValidate?$AA@
0x180005128: "__cdecl _imp_memcmp" __imp_memcmp
0x180005280: "__cdecl _imp_BCryptDeriveKeyPBKDF2" __imp_BCryptDeriveKeyPBKDF2
0x180005518: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x1800052A8: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180005838: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x180006644: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800051E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800058B4: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180002DF0: WPP_SF_ssI
0x180005848: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x180006554: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000A008: CRYPTBASE_NULL_THUNK_DATA_DLA
0x1800052E0: "__cdecl _imp_PBKDF2" __imp_PBKDF2
0x1800055B8: "MsvpMakeSecretPasswordNT5" ??_C@_0BK@PIBICPPJ@MsvpMakeSecretPasswordNT5?$AA@
0x1800051A8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180005FDC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800046C0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005140: "__cdecl _imp__initterm" __imp__initterm
0x180005188: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180005810: "RC4" ??_C@_17HLFLMDBJ@?$AAR?$AAC?$AA4?$AA?$AA@
0x180006630: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800051D8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180005300: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x180005150: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x1800053A8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180005298: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180005138: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x180005528: "" ??_C@_13IOKCHHHM@?$AA?$BA?$AA?$AA@
0x1800065E0: "__cdecl _IMPORT_DESCRIPTOR_cryptdll" __IMPORT_DESCRIPTOR_cryptdll
0x1800054BC: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800051F8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005308: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x180005358: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180005288: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x180005258: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1800053C8: "__cdecl _xi_a" __xi_a
0x180005248: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180005168: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180005728: "MsvpUpdateSharedConfiguration" ??_C@_0BO@ONNFCJKD@MsvpUpdateSharedConfiguration?$AA@
0x180008000: WPP_GLOBAL_Control
0x1800065A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180005860: "KeyLengths" ??_C@_1BG@OOALDDHJ@?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AAs?$AA?$AA@
0x180005818: "DES" ??_C@_17LBCHNHBC@?$AAD?$AAE?$AAS?$AA?$AA@
0x180004D0C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180005260: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x180006568: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180005238: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180004840: "__cdecl _security_check_cookie" __security_check_cookie
0x1800053C0: "__cdecl _xc_z" __xc_z
0x1800065F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180005208: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180005858: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x180005250: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800051B8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180005380: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x180005158: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180005198: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180006008: CRYPTBASE_NULL_THUNK_DATA_DLN
0x180001264: "void __cdecl NtlmTraceInfoViaWpp(char const * __ptr64,unsigned long,char const * __ptr64)" ?NtlmTraceInfoViaWpp@@YAXPEBDK0@Z
0x180005F9C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTBASE_dll
0x180003E00: "void __cdecl BCryptProvFreeElt(struct _ELT * __ptr64)" ?BCryptProvFreeElt@@YAXPEAU_ELT@@@Z
0x180008058: "__cdecl _dllonexit_data" __dllonexit_data
0x180005218: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800053D8: "__cdecl _guard_fids_table" __guard_fids_table
0x180005010: "__cdecl load_config_used" _load_config_used
0x180003770: MsvpValidateSupplementalCreds
0x180005558: "RtlGetRandomFailure" ??_C@_0BE@CMBIKGHM@RtlGetRandomFailure?$AA@
0x180005170: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180005160: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180008610: "struct _LM_OWF_PASSWORD NlpNullLmOwfPassword" ?NlpNullLmOwfPassword@@3U_LM_OWF_PASSWORD@@A
0x1800014C0: MsvpCalculateNtlm2Challenge
0x1800052C8: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x180002F60: MsvpNtlm3ValidateResponse
0x1800051D0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002960: NtlmSharedCleanup
0x1800052E8: cryptdll_NULL_THUNK_DATA
0x180004B82: "__cdecl _tailMerge_cryptbase_dll" __tailMerge_cryptbase_dll
0x1800041EC: FBCryptProviderSupportsAlg
0x180005320: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800052A0: "__cdecl _imp_BCryptGenerateSymmetricKey" __imp_BCryptGenerateSymmetricKey
0x180005748: "true" ??_C@_04LOAJBDKD@true?$AA@
0x180005210: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180005368: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800057E8: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180005FBC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x180004874: "__cdecl encoded_null" _encoded_null
0x180005328: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800058B8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800049A0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004D35: memcmp
0x180005330: "__cdecl _imp_RtlDowncaseUnicodeString" __imp_RtlDowncaseUnicodeString
0x180003180: MsvpPasswordValidate
0x180004CB0: "__cdecl _imp_load_SystemFunction008" __imp_load_SystemFunction008
0x1800015B0: MsvpCalculateNtlm2SessionKeys
0x18000495F: "__cdecl initterm_e" _initterm_e
0x1800053A0: ntdll_NULL_THUNK_DATA
0x180005120: "__cdecl _imp_memcpy" __imp_memcpy
0x180001090: WPP_SF_sds
0x180008810: "class CBCryptProvList * __ptr64 __ptr64 g_pBCProvList" ?g_pBCProvList@@3PEAVCBCryptProvList@@EA
0x1800055F8: "MsvpPutClearOwfsInPrimaryCredent" ??_C@_0CE@IPPEPCNG@MsvpPutClearOwfsInPrimaryCredent@
0x1800054C8: WPP_1ee9a07b73a9344ab95657e58de2ac8f_Traceguids
0x180005788: "MsvpValidateSupplementalCredsBuf" ??_C@_0CE@BNOGGIAE@MsvpValidateSupplementalCredsBuf@
0x180005310: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180005350: "__cdecl _imp_NtQuerySystemTime" __imp_NtQuerySystemTime
0x180008608: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x180006608: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000114C: WPP_SF_sdsD
0x180008040: "__cdecl _security_cookie" __security_cookie
0x180004CC2: "__cdecl _imp_load_SystemFunction009" __imp_load_SystemFunction009
0x1800052F8: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1800051C0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800029F0: NtlmSharedFree
0x1800065CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180006518: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x1800044F8: "public: __cdecl CLinkedList::~CLinkedList(void) __ptr64" ??1CLinkedList@@QEAA@XZ
0x180005180: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004884: "__cdecl _security_init_cookie" __security_init_cookie
0x1800057C0: "HashDigestLength" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180005278: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180005340: "__cdecl _imp_RtlUpcaseUnicodeString" __imp_RtlUpcaseUnicodeString
0x180005750: "false" ??_C@_05LAPONLG@false?$AA@
0x180001B90: MsvpLm20GetNtlm3ChallengeResponse
0x180005828: "3DES" ??_C@_19LEELFJDG@?$AA3?$AAD?$AAE?$AAS?$AA?$AA@
0x18000661C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x180002AC0: NtLmAlterRtlEqualUnicodeString
0x180006038: CRYPTSP_NULL_THUNK_DATA_DLN
0x1800054E8: "NtlmSuccess" ??_C@_0M@BOCCHOMP@NtlmSuccess?$AA@
0x180005878: "Microsoft Primitive Provider" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180002E90: MsvpLm3ValidateResponse
0x1800049F0: "__cdecl _report_gsfailure" __report_gsfailure
0x180002A30: NtlmSharedFreePrivateHeap
0x180005220: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800054F8: "NtlmFailure" ??_C@_0M@NHGAMFJF@NtlmFailure?$AA@
0x1800052B0: "__cdecl _imp_BCryptHash" __imp_BCryptHash
0x180005620: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1800056D0: "_SA_{262E99C9-6160-4871-ACEC-4E6" ??_C@_1FG@BJMNNLDB@?$AA_?$AAS?$AAA?$AA_?$AA?$HL?$AA2?$AA6?$AA2?$AAE?$AA9?$AA9?$AAC?$AA9?$AA?9?$AA6?$AA1?$AA6?$AA0?$AA?9?$AA4?$AA8?$AA7?$AA1?$AA?9?$AAA?$AAC?$AAE?$AAC?$AA?9?$AA4?$AAE?$AA6@
0x180002420: MsvpDecryptDpapiMasterKey
0x180006590: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800054D8: WPP_ThisDir_CTLGUID_NtlmSharedDebugTraceControlGuid
0x1800012A8: WPP_SF_sD
0x180002D70: WPP_SF_ss
0x180005360: "__cdecl _imp_EtwEventSetInformation" __imp_EtwEventSetInformation
0x18000552C: "" ??_C@_13DOGEFHNA@?$AA?$AO?$AA?$AA@
0x180005240: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180004D4D: memset
0x180006658: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180005668: "DecryptMasterKeyToMemoryFailure" ??_C@_0CA@IOFIGBMB@DecryptMasterKeyToMemoryFailure?$AA@
0x180001F00: MsvpMakeSecretPasswordNT5
0x180005630: "BCryptHashFailure" ??_C@_0BC@GOEPEFIJ@BCryptHashFailure?$AA@

[JEB Decompiler by PNF Software]