Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wintrust.dll Base=0x180000000 SHA-256=2F438AB4CC0496F3BF5EE9ECEBA0436F52A76C1E4E64D78E167D770ED224B09C
PDB: wintrust.pdb GUID={EBE9F113-5381-422C-B8A6F61FE2C0768D} Age=1

2103 located named symbols:
0x180050B34: "int g_fIncludePEPageHashes" ?g_fIncludePEPageHashes@@3HA
0x18003D800: "__cdecl _imp_CertEnumCertificatesInStore" __imp_CertEnumCertificatesInStore
0x180028FDC: "public: virtual __cdecl SIPObjectCAB_::~SIPObjectCAB_(void) __ptr64" ??1SIPObjectCAB_@@UEAA@XZ
0x18001F150: WinVerifyTrustEx
0x180007920: "int __cdecl _ExplodeMessage(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_ExplodeMessage@@YAHPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18001C2D0: WVTAsn1SpcSpAgencyInfoDecode
0x18003D2B0: g_SiPolicyTypeInfo
0x180044D88: "catadnew.cpp" ??_C@_0N@KHHAIFIB@catadnew?4cpp?$AA@
0x18003DFF8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180045838: "NoRevalidationUponRefreshValue" ??_C@_1DO@LPBBDPCN@?$AAN?$AAo?$AAR?$AAe?$AAv?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAo?$AAn?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x18002AEB0: "public: virtual int __cdecl SIPObjectCatalog_::PutSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?PutSignedDataMsg@SIPObjectCatalog_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKKPEAEK@Z
0x18003DD18: "__cdecl _imp_LockResource" __imp_LockResource
0x180021AF0: "int __cdecl CryptCATVerifyMember(void * __ptr64,struct CRYPTCATMEMBER_ * __ptr64,void * __ptr64)" ?CryptCATVerifyMember@@YAHPEAXPEAUCRYPTCATMEMBER_@@0@Z
0x18000FA20: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18003D8D8: "__cdecl _imp_CertVerifyValidityNesting" __imp_CertVerifyValidityNesting
0x1800431F0: "FALSE" ??_C@_05MAJJAKPI@FALSE?$AA@
0x18000DA74: "protected: int __cdecl SIPObjectPE_::CreateSpcLinkData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64,struct SPC_LINK_ * __ptr64) __ptr64" ?CreateSpcLinkData@SIPObjectPE_@@IEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@PEAUSPC_LINK_@@@Z
0x18003DC88: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x1800330C4: "private: void * __ptr64 __cdecl CTrustDB::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCTrustDB@@AEAAPEAXI@Z
0x18003034C: "void __cdecl PrintfPFNs(void * __ptr64,struct _CRYPT_PROVIDER_DATA * __ptr64)" ?PrintfPFNs@@YAXPEAXPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18003E000: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18000CB20: CatalogNew
0x18000DA20: "protected: int __cdecl SIPObject_::AllocateAndFillCryptBitBlob(struct _CRYPT_BIT_BLOB * __ptr64,unsigned long,unsigned long) __ptr64" ?AllocateAndFillCryptBitBlob@SIPObject_@@IEAAHPEAU_CRYPT_BIT_BLOB@@KK@Z
0x180032564: "private: void __cdecl std::unique_ptr<void * __ptr64,struct deleter<struct release::hcertstore::tag> >::_Delete(void) __ptr64" ?_Delete@?$unique_ptr@PEAXU?$deleter@Utag@hcertstore@release@@@@@std@@AEAAXXZ
0x1800100DD: "__cdecl _imp_load_CryptSetProvParam" __imp_load_CryptSetProvParam
0x180034564: PkiAsn1ToObjectIdentifier
0x18000FDE0: "__cdecl FindPESection" _FindPESection
0x18003D7A8: "__cdecl _imp_CryptMsgGetParam" __imp_CryptMsgGetParam
0x18003E118: "__cdecl _imp_atol" __imp_atol
0x18003F850: "Call_CatAdminCreatePath" ??_C@_1DA@KILPFFBN@?$AAC?$AAa?$AAl?$AAl?$AA_?$AAC?$AAa?$AAt?$AAA?$AAd?$AAm?$AAi?$AAn?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18003E050: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x18003F918: "MpQueryFileTrustByHandle" ??_C@_0BJ@LPGEENOO@MpQueryFileTrustByHandle?$AA@
0x18003DDB8: "__cdecl _imp_GetCurrentDirectoryW" __imp_GetCurrentDirectoryW
0x180040A60: "WVTAsn1SpcLinkEncode" ??_C@_0BF@BINELBCF@WVTAsn1SpcLinkEncode?$AA@
0x18002C720: "private: void __cdecl std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >::_Delete(void) __ptr64" ?_Delete@?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@AEAAXXZ
0x18000C9C0: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18003EAB0: "CRYPT_DEBUG_FORCE_FREE_LIBRARY" ??_C@_0BP@GPOEHLPC@CRYPT_DEBUG_FORCE_FREE_LIBRARY?$AA@
0x180041348: "0x00010001" ??_C@_1BG@CDNDMNCP@?$AA0?$AAx?$AA0?$AA0?$AA0?$AA1?$AA0?$AA0?$AA0?$AA1?$AA?$AA@
0x1800353D8: LockWaitToRead
0x180044420: "| | | | | |.. Issuer: " ??_C@_1FG@IOLCJJLJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAI?$AAs?$AAs?$AAu?$AAe?$AAr?$AA?3?$AA?5@
0x180020480: "public: static long __cdecl ViewInfo::HashMapViewOfFile(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?HashMapViewOfFile@ViewInfo@@SAJPEAXKPEAKPEAPEAX1@Z
0x18003E018: "__cdecl _imp_AddAce" __imp_AddAce
0x1800509C0: "struct _SORTED_CATALOG_INFO * __ptr64 __ptr64 pSortedCatalogInfoHead" ?pSortedCatalogInfoHead@@3PEAU_SORTED_CATALOG_INFO@@EA
0x18001A40C: "public: void __cdecl CCatalogCache::AdjustWintrustDataToCachedState(struct _WINTRUST_DATA * __ptr64,struct _CATALOG_CACHED_STATE * __ptr64,int) __ptr64" ?AdjustWintrustDataToCachedState@CCatalogCache@@QEAAXPEAU_WINTRUST_DATA@@PEAU_CATALOG_CACHED_STATE@@H@Z
0x180005620: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180041630: "SHA384" ??_C@_1O@KOBLHLEG@?$AAS?$AAH?$AAA?$AA3?$AA8?$AA4?$AA?$AA@
0x18004C5C4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18002FF04: "unsigned short * __ptr64 __cdecl GetNameFromBlob(struct _CRYPTOAPI_BLOB * __ptr64)" ?GetNameFromBlob@@YAPEAGPEAU_CRYPTOAPI_BLOB@@@Z
0x180055120: "__cdecl _imp_BCryptVerifySignature" __imp_BCryptVerifySignature
0x1800105CC: "__cdecl _imp_load_WaitServiceState" __imp_load_WaitServiceState
0x18000EAEC: "void __cdecl HashpAddExcludeRange(struct _EXCLUDE_RANGE * __ptr64 const,unsigned long * __ptr64,unsigned long,unsigned long)" ?HashpAddExcludeRange@@YAXQEAU_EXCLUDE_RANGE@@PEAKKK@Z
0x180043CF0: "| | |.. pCopyActionTextN" ??_C@_1FG@IHKGKHEF@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAo?$AAp?$AAy?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAe?$AAx?$AAt?$AAN@
0x1800402E0: "2.5.29.35" ??_C@_09EJJNLOEG@2?45?429?435?$AA@
0x180040B00: "WVTAsn1SpcSpAgencyInfoEncode" ??_C@_0BN@BBCBLGDE@WVTAsn1SpcSpAgencyInfoEncode?$AA@
0x18004C59C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18001B830: WVTAsn1SealingSignatureAttributeDecode
0x180041568: "CryptSIPRemoveSignedDataMsg" ??_C@_1DI@IEJPNGD@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAI?$AAP?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x180005950: CryptCATHandleFromStore
0x180032588: "struct _CERT_CONTEXT const * __ptr64 __cdecl _FindCertificate(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CERT_INFO * __ptr64)" ?_FindCertificate@@YAPEBU_CERT_CONTEXT@@PEAU_CRYPT_PROVIDER_DATA@@PEAU_CERT_INFO@@@Z
0x180044FA8: "RvkSi" ??_C@_1M@OOIIHGOB@?$AAR?$AAv?$AAk?$AAS?$AAi?$AA?$AA@
0x18001F060: WTHelperGetFileHash
0x180033380: "int __cdecl IsCertificateInStore(void * __ptr64,struct _CERT_CONTEXT const * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?IsCertificateInStore@@YAHPEAXPEBU_CERT_CONTEXT@@PEAPEBU1@@Z
0x18003D670: g_AnyFileWildCardString
0x18002ADC0: "public: virtual int __cdecl SIPObjectCatalog_::GetSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSignedDataMsg@SIPObjectCatalog_@@UEAAHPEAUSIP_SUBJECTINFO_@@KPEAKPEAE1@Z
0x1800426F0: "| |.. pahStores[%02.2d]: " ??_C@_1FK@LBMLHHHH@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAh?$AAS?$AAt?$AAo?$AAr?$AAe?$AAs?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5@
0x180040248: "TRUST" ??_C@_1M@NFAFBBJI@?$AAT?$AAR?$AAU?$AAS?$AAT?$AA?$AA@
0x18003F998: WldpScriptFileDisabled
0x180040AC0: "WVTAsn1SpcIndirectDataContentEnc" ??_C@_0CE@CLBAJOAJ@WVTAsn1SpcIndirectDataContentEnc@
0x180040D50: "WVTAsn1SpcLinkDecode" ??_C@_0BF@NEGEEKFC@WVTAsn1SpcLinkDecode?$AA@
0x1800501C0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18003F0F0: "Software\Microsoft\Cryptography\" ??_C@_1HE@FFAGLIML@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18003E160: "__cdecl _imp__stricmp" __imp__stricmp
0x1800415A0: "MSCF" ??_C@_19JLCLJAJP@?$AAM?$AAS?$AAC?$AAF?$AA?$AA@
0x180042690: "| +.. pahStores[%02.2d]: " ??_C@_1FK@BHIKGIKO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAh?$AAS?$AAt?$AAo?$AAr?$AAe?$AAs?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5@
0x18001A450: "void __cdecl CatalogCacheFreeEntryData(void * __ptr64)" ?CatalogCacheFreeEntryData@@YAXPEAX@Z
0x180040E98: "WVTAsn1SpcSpOpusInfoDecode" ??_C@_0BL@JAAJEBHD@WVTAsn1SpcSpOpusInfoDecode?$AA@
0x18003DCE8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18003EDE0: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180040A90: "1.3.6.1.4.1.311.2.1.30" ??_C@_0BH@DIGBLLJB@1?43?46?41?44?41?4311?42?41?430?$AA@
0x180044EB0: ".Default" ??_C@_1BC@KICPAAIK@?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x18003D7F0: "__cdecl _imp_CertCreateCertificateContext" __imp_CertCreateCertificateContext
0x180001430: "void __cdecl UpdateCertError(struct _CRYPT_PROVIDER_SGNR * __ptr64,struct _CERT_CHAIN_POLICY_STATUS * __ptr64)" ?UpdateCertError@@YAXPEAU_CRYPT_PROVIDER_SGNR@@PEAU_CERT_CHAIN_POLICY_STATUS@@@Z
0x180022F44: "int __cdecl CDFCheckOID(unsigned short const * __ptr64,void (__cdecl*)(unsigned long,unsigned long,unsigned short * __ptr64))" ?CDFCheckOID@@YAHPEBGP6AXKKPEAG@Z@Z
0x180042290: "| +-- pBlob: <<< bad parameter" ??_C@_1FA@NNMGOOLG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAB?$AAl?$AAo?$AAb?$AA?3?$AA?5?$AA?$DM?$AA?$DM?$AA?$DM?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr@
0x18000F50C: "__cdecl CRT_INIT" _CRT_INIT
0x18003DE08: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800225EC: "public: __cdecl std::unique_ptr<struct CATALOG_HASHES_<2> [0],struct deleter<struct release::localfree::tag> >::~unique_ptr<struct CATALOG_HASHES_<2> [0],struct deleter<struct release::localfree::tag> >(void) __ptr64" ??1?$unique_ptr@$$BY0A@U?$CATALOG_HASHES_@$01@@U?$deleter@Utag@localfree@release@@@@@std@@QEAA@XZ
0x18004C36C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-private-l1-1-0
0x18001AB50: WintrustDllRegisterServer
0x180040E78: "WVTAsn1CatMemberInfo2Decode" ??_C@_0BM@JDJOGDLH@WVTAsn1CatMemberInfo2Decode?$AA@
0x18000D850: "public: virtual int __cdecl SIPObjectCatalog_::VerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?VerifyIndirectData@SIPObjectCatalog_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x18001057E: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180055060: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x18003D8D0: "__cdecl _imp_CertVerifyTimeValidity" __imp_CertVerifyTimeValidity
0x180050860: "__cdecl _hmod__api_ms_win_security_lsalookup_l2_1_0_dll" __hmod__api_ms_win_security_lsalookup_l2_1_0_dll
0x180006370: WinVerifyTrust
0x1800023FC: "void * __ptr64 __cdecl GetChainEngine(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GetChainEngine@@YAPEAXPEAU_CRYPT_PROVIDER_DATA@@@Z
0x180005B38: "int __cdecl I_IsUnsignedPEFile(struct WINTRUST_FILE_INFO_ * __ptr64)" ?I_IsUnsignedPEFile@@YAHPEAUWINTRUST_FILE_INFO_@@@Z
0x180045638: "DriverSiPolicyVersion" ??_C@_1CM@FGGCIMGD@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18003E220: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18003E940: "1.3.6.1.5.5.7.3.3" ??_C@_0BC@ECLGBJGA@1?43?46?41?45?45?47?43?43?$AA@
0x1800458B0: "OriginalFileName" ??_C@_1CC@GIEPEENO@?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAa?$AAl?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000F4B0: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180041478: "CoCreateGuid" ??_C@_0N@KNBCBJMO@CoCreateGuid?$AA@
0x18002C600: OpenPersonalTrustDBDialog
0x180050A28: "struct _RTL_CRITICAL_SECTION MSCAT_CriticalSection" ?MSCAT_CriticalSection@@3U_RTL_CRITICAL_SECTION@@A
0x180041230: "1.3.6.1.4.1.311.96.1.1" ??_C@_0BH@DCMMCJGF@1?43?46?41?44?41?4311?496?41?41?$AA@
0x180005AA0: "protected: virtual unsigned long __cdecl SIPObject_::GetDigestFlags(struct SIP_SUBJECTINFO_ * __ptr64) __ptr64" ?GetDigestFlags@SIPObject_@@MEAAKPEAUSIP_SUBJECTINFO_@@@Z
0x180029330: "private: int __cdecl SIPObjectCAB_::CheckHeader(struct CFHEADER * __ptr64,struct CFRESERVE * __ptr64) __ptr64" ?CheckHeader@SIPObjectCAB_@@AEAAHPEAUCFHEADER@@PEAUCFRESERVE@@@Z
0x180044BB8: "TrustedOriginDataId" ??_C@_1CI@BHAEDDBG@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAD?$AAa?$AAt?$AAa?$AAI?$AAd?$AA?$AA@
0x180011820: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180043C90: "| | |.. pCopyActionText:" ??_C@_1FG@OPEAAEJG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAo?$AAp?$AAy?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAe?$AAx?$AAt?$AA?3@
0x180041030: "DefaultId" ??_C@_1BE@DADHLKDG@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAI?$AAd?$AA?$AA@
0x18001E870: WintrustAddDefaultForUsage
0x180022B70: CryptCATAdminCalcHashFromFileHandle
0x18001077F: "__cdecl _imp_load_StartServiceW" __imp_load_StartServiceW
0x18003D950: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18003D870: "__cdecl _imp_CryptSIPLoad" __imp_CryptSIPLoad
0x180005198: "protected: static int __cdecl SIPObject_::BuildDataDigest(char * __ptr64,struct DIGEST_DATA * __ptr64)" ?BuildDataDigest@SIPObject_@@KAHPEADPEAUDIGEST_DATA@@@Z
0x1800350A8: GetTokenUserSidHKCU
0x180026EE0: "public: virtual int __cdecl CCatalogParserV1::TagToTrustedSubjectIdentifier(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)const __ptr64" ?TagToTrustedSubjectIdentifier@CCatalogParserV1@@UEBAHPEBGPEAPEAEPEAK@Z
0x18003DC78: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18003F620: "__cdecl _sz_imagehlp_dll" __sz_imagehlp_dll
0x180055090: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x180044D20: "Software\Microsoft\Cryptography\" ??_C@_1FE@NMFLHBLI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180040268: "SPC" ??_C@_17MEFLCLJH@?$AAS?$AAP?$AAC?$AA?$AA@
0x180041924: "CA" ??_C@_02JLAAGLDA@CA?$AA@
0x18003A8A8: SIPolicyRootCertHashToKnownRoot
0x18003DAB8: "__cdecl _imp_ASN1CEREncNewBlkElement" __imp_ASN1CEREncNewBlkElement
0x18001DCFC: I_AddResourceStore
0x180044B60: "$Kernel.Smartlocker.OriginClaim" ??_C@_0CA@NIOIDHGE@$Kernel?4Smartlocker?4OriginClaim?$AA@
0x180042490: "| |.. cbMemSignedMsg: " ??_C@_1FI@EDIAFJLM@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAM?$AAe?$AAm?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAM?$AAs?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180042220: " " ??_C@_15JNBOKNOG@?$AA?$AN?$AA?6?$AA?$AA@
0x180032B50: "int __cdecl _IsValidTimeStampCert(struct _CERT_CONTEXT const * __ptr64)" ?_IsValidTimeStampCert@@YAHPEBU_CERT_CONTEXT@@@Z
0x180041710: "SoftpubCheckCert" ??_C@_1CC@EPCDBOFC@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAC?$AAh?$AAe?$AAc?$AAk?$AAC?$AAe?$AAr?$AAt?$AA?$AA@
0x180044B80: "SMARTLOCKER://ORIGINCLAIM" ??_C@_1DE@EPPICNLN@?$AAS?$AAM?$AAA?$AAR?$AAT?$AAL?$AAO?$AAC?$AAK?$AAE?$AAR?$AA?3?$AA?1?$AA?1?$AAO?$AAR?$AAI?$AAG?$AAI?$AAN?$AAC?$AAL?$AAA?$AAI?$AAM?$AA?$AA@
0x180042D60: "|.. pahStores: " ??_C@_1CC@PAOABONB@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAh?$AAS?$AAt?$AAo?$AAr?$AAe?$AAs?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180041918: "My" ??_C@_02IGABPKMB@My?$AA@
0x18003EAD8: "1.3.6.1.4.1.311.10.3.5" ??_C@_0BH@BJBPIJJA@1?43?46?41?44?41?4311?410?43?45?$AA@
0x180050B48: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil
0x18003E098: "__cdecl _imp_GetSidIdentifierAuthority" __imp_GetSidIdentifierAuthority
0x1800295D0: "public: virtual int __cdecl SIPObjectCAB_::CreateIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?CreateIndirectData@SIPObjectCAB_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x18003F470: "\StringFileInfo\%04X%04X\%s" ??_C@_1DI@IKFJEGJK@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAX?$AA?$CF?$AA0?$AA4?$AAX?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800453E0: "Kernel_WinSiStatus" ??_C@_1CG@BCEOPFOI@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAW?$AAi?$AAn?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800218F0: "__cdecl PathFindFileName" _PathFindFileName
0x1800084EC: "int __cdecl CatalogFillMemAttr(struct CRYPTCATSTORE_ * __ptr64,struct CRYPTCATMEMBER_ * __ptr64,struct _CRYPT_ATTRIBUTE * __ptr64)" ?CatalogFillMemAttr@@YAHPEAUCRYPTCATSTORE_@@PEAUCRYPTCATMEMBER_@@PEAU_CRYPT_ATTRIBUTE@@@Z
0x18001F228: "int __cdecl _FindKeyUsage(struct _CTL_USAGE * __ptr64,char const * __ptr64)" ?_FindKeyUsage@@YAHPEAU_CTL_USAGE@@PEBD@Z
0x180039F6C: SIPolicyValidateImageEx2
0x180055158: "__cdecl _imp_ImageEnumerateCertificates" __imp_ImageEnumerateCertificates
0x18003F580: "__cdecl _sz_ext_ms_win_advapi32_safer_l1_1_0_dll" __sz_ext_ms_win_advapi32_safer_l1_1_0_dll
0x18002736C: "int __cdecl EncodeUserOID(struct CRYPTCATSTORE_ * __ptr64,struct _CAT_NAMEVALUE * __ptr64)" ?EncodeUserOID@@YAHPEAUCRYPTCATSTORE_@@PEAU_CAT_NAMEVALUE@@@Z
0x1800550C0: "__cdecl _imp_WaitServiceState" __imp_WaitServiceState
0x18002397C: "int __cdecl CDFSplitAttrLine(unsigned short * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64,void (__cdecl*)(unsigned long,unsigned long,unsigned short * __ptr64))" ?CDFSplitAttrLine@@YAHPEAGPEAKPEAPEAG2P6AXKK0@Z@Z
0x180055040: CRYPTSP_NULL_THUNK_DATA_DLA
0x18003EB00: "AuthenticodeFlags" ??_C@_1CE@NABDIMLM@?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAo?$AAd?$AAe?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1800419F8: "SoftpubAuthenticode" ??_C@_1CI@FJDONBOB@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAA?$AAu?$AAt?$AAh?$AAe?$AAn?$AAt?$AAi?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x1800446E0: "| | | |.. fSelfSigned: " ??_C@_1FG@GLGPDPDI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAS?$AAe?$AAl?$AAf?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5@
0x180008570: "public: virtual int __cdecl CCatalogParserV2::TagToTrustedSubjectIdentifier(unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)const __ptr64" ?TagToTrustedSubjectIdentifier@CCatalogParserV2@@UEBAHPEBGPEAPEAEPEAK@Z
0x18004A6B4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll
0x18001BE90: WVTAsn1SpcLinkDecode
0x18003E928: "Disallowed" ??_C@_1BG@EDDCLAEJ@?$AAD?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?$AA@
0x180041200: "CompanyName" ??_C@_1BI@KBKGFMKH@?$AAC?$AAo?$AAm?$AAp?$AAa?$AAn?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180055100: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x18001F3F0: WTHelperGetAgencyInfo
0x1800054C0: "public: virtual int __cdecl CCatalogParserV2::DecodeMemberInfo(struct CRYPTCATMEMBER_ * __ptr64,struct _CRYPT_ATTRIBUTE const * __ptr64)const __ptr64" ?DecodeMemberInfo@CCatalogParserV2@@UEBAHPEAUCRYPTCATMEMBER_@@PEBU_CRYPT_ATTRIBUTE@@@Z
0x180042C48: "|.. padwTrustStepErrors: " ??_C@_1DG@MNFLHMKJ@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAd?$AAw?$AAT?$AAr?$AAu?$AAs?$AAt?$AAS?$AAt?$AAe?$AAp?$AAE?$AAr?$AAr?$AAo?$AAr?$AAs?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18003DF10: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18003D788: "__cdecl _imp_CryptImportPublicKeyInfoEx2" __imp_CryptImportPublicKeyInfoEx2
0x1800459D0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18003E918: "OSAttr" ??_C@_1O@HKGLJJPH@?$AAO?$AAS?$AAA?$AAt?$AAt?$AAr?$AA?$AA@
0x1800294EC: "private: int __cdecl SIPObjectCAB_::CreateEnhancedHash(char * __ptr64,unsigned __int64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateEnhancedHash@SIPObjectCAB_@@AEAAHPEAD_KPEAPEAEPEAK@Z
0x18003DE78: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x18003DA48: "__cdecl _imp_ASN1BEREncOctetString" __imp_ASN1BEREncOctetString
0x180045AB8: "cryptsvc" ??_C@_1BC@IEIJHLKL@?$AAc?$AAr?$AAy?$AAp?$AAt?$AAs?$AAv?$AAc?$AA?$AA@
0x180044EC8: "Si" ??_C@_15ICAJJMIM@?$AAS?$AAi?$AA?$AA@
0x18003DE68: "__cdecl _imp_RegEnumValueA" __imp_RegEnumValueA
0x18000F4BC: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x18001B1B0: "int __cdecl WVTAsn1GetSpcLinkPointer(struct SpcLink * __ptr64,unsigned long,struct SPC_LINK_ * __ptr64 * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetSpcLinkPointer@@YAHPEAUSpcLink@@KPEAPEAUSPC_LINK_@@PEAPEAEPEAJ@Z
0x180041B80: "| |.. cbStruct: " ??_C@_1FI@GLBLPPCI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18004C380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180025E64: "int __cdecl CatalogFreeCTL(struct _CTL_INFO * __ptr64)" ?CatalogFreeCTL@@YAHPEAU_CTL_INFO@@@Z
0x18004A8C0: imagehlp_NULL_THUNK_DATA_DLN
0x180005F80: DriverInitializePolicy
0x180055168: imagehlp_NULL_THUNK_DATA_DLA
0x18004ACB8: imagehlp_NULL_THUNK_DATA_DLB
0x18003E158: "__cdecl _imp__memicmp" __imp__memicmp
0x18003DCE0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000F450: "protected: virtual unsigned long __cdecl SIPObjectPE_::GetDigestFlags(struct SIP_SUBJECTINFO_ * __ptr64) __ptr64" ?GetDigestFlags@SIPObjectPE_@@MEAAKPEAUSIP_SUBJECTINFO_@@@Z
0x18003E068: "__cdecl _imp_GetAce" __imp_GetAce
0x18004AC78: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x18003DA38: "__cdecl _imp_ASN1BERDecObjectIdentifier2" __imp_ASN1BERDecObjectIdentifier2
0x180044740: "| | | |.. fTestCert: " ??_C@_1FG@HCCBPKJN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAT?$AAe?$AAs?$AAt?$AAC?$AAe?$AAr?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800399A0: SIPolicySecureSettingSearchCompare
0x18003E140: "__cdecl _imp_wcschr" __imp_wcschr
0x1800427D0: "| |.. psCertContext: " ??_C@_1FK@OKAJPBCN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAC?$AAe?$AAr?$AAt?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003242C: "int __cdecl _BuildChainForPubKeyParaInheritance(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CERT_CONTEXT const * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64 * __ptr64)" ?_BuildChainForPubKeyParaInheritance@@YAHPEAU_CRYPT_PROVIDER_DATA@@PEBU_CERT_CONTEXT@@PEAPEBU_CERT_CHAIN_CONTEXT@@@Z
0x180004E30: WVTNew
0x18003DB08: "__cdecl _imp_ASN1BEREncObjectIdentifier2" __imp_ASN1BEREncObjectIdentifier2
0x18003DF58: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18003C310: "const SIPObjectFlat_::`vftable'" ??_7SIPObjectFlat_@@6B@
0x18002D044: "private: void __cdecl FileMapping::cleanup(void) __ptr64" ?cleanup@FileMapping@@AEAAXXZ
0x18002C450: "int __cdecl SoftpubFreeDefUsageCallData(char const * __ptr64,struct _CRYPT_PROVIDER_DEFUSAGE * __ptr64)" ?SoftpubFreeDefUsageCallData@@YAHPEBDPEAU_CRYPT_PROVIDER_DEFUSAGE@@@Z
0x18002701C: CatalogStoreSetCatalogParserFromCTL
0x180035904: "long __cdecl I_HashComputeMemoryHash<struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64)" ??$I_HashComputeMemoryHash@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@PEAEKK1PEAK@Z
0x18003EA00: "Software\Microsoft\Cryptography\" ??_C@_1GA@NHAGFKLN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18003A7F0: SIPolicyValidatePolicyEkuBuffer
0x180055000: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x180045668: "DriverSiPolicyUpdateSigners" ??_C@_1DI@HBNNJEFM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x180050B44: "int g_fLogErrorsToFile" ?g_fLogErrorsToFile@@3HA
0x18003D6C8: "__cdecl _imp_CryptSIPGetSealedDigest" __imp_CryptSIPGetSealedDigest
0x18003DA78: "__cdecl _imp_ASN1BERDecOctetString" __imp_ASN1BERDecOctetString
0x18003DFA8: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x18003E258: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18004131C: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x18002CD8C: "private: long __cdecl SiChainInfo::GetCertName(struct _CERT_CONTEXT const * __ptr64,unsigned long,struct _UNICODE_STRING & __ptr64) __ptr64" ?GetCertName@SiChainInfo@@AEAAJPEBU_CERT_CONTEXT@@KAEAU_UNICODE_STRING@@@Z
0x18003EF70: "CATADMIN" ??_C@_1BC@KLMNEBIO@?$AAC?$AAA?$AAT?$AAA?$AAD?$AAM?$AAI?$AAN?$AA?$AA@
0x1800412D8: "[CatalogHeader]" ??_C@_1CA@BLBCGNHO@?$AA?$FL?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?$FN?$AA?$AA@
0x180005470: WVTAddStore
0x18004ACF8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x1800550B8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x1800550A0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x18004AD08: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x18004A7F8: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x18004A810: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x180022C10: CryptCATAdminPauseServiceForBackup
0x18003E8E8: "1.3.6.1.5.5.7.3.1" ??_C@_0BC@HAIAHLOC@1?43?46?41?45?45?47?43?41?$AA@
0x18003DEF0: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18003E168: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180033150: "public: static long __cdecl CTrustDB::CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@CTrustDB@@SAJAEBU_GUID@@PEAPEAX@Z
0x1800274CC: CatalogCryptAttr2CertExt
0x1800101F8: "__cdecl _imp_load_LookupAccountSidW" __imp_load_LookupAccountSidW
0x18000ED68: "bool __cdecl GetSealingState_(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GetSealingState_@@YA_NPEAU_CRYPT_PROVIDER_DATA@@@Z
0x1800456F8: "DriverSiPolicy.p7b" ??_C@_1CG@NDKNICDL@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x180041980: "CertificateAuxiliaryInfo" ??_C@_0BJ@JCILBMDO@CertificateAuxiliaryInfo?$AA@
0x18003DAC0: "__cdecl _imp_ASN1BERDecBool" __imp_ASN1BERDecBool
0x180004B60: "protected: virtual int __cdecl SIPObjectFlat_::MapFile(void) __ptr64" ?MapFile@SIPObjectFlat_@@MEAAHXZ
0x1800436F0: "| |.. pfnCertificateTrust: " ??_C@_1FK@IHNEGOKA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5@
0x180005360: WTHelperGetProvSignerFromChain
0x180045328: "WinSiPolicyVersion" ??_C@_1CG@DAHIIJOI@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180039B80: SIPolicyUninitialize
0x18003D940: "__cdecl _imp_CertGetCertificateChain" __imp_CertGetCertificateChain
0x18003DC58: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x1800235C8: "int __cdecl CDFGetParam(struct CRYPTCATCDF_ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?CDFGetParam@@YAHPEAUCRYPTCATCDF_@@PEBG11PEAPEAG1@Z
0x18004C5B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x1800078CC: "int __cdecl _CheckCryptoPolicy(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_CheckCryptoPolicy@@YAHPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18003436C: PkiAsn1GetIA5StringConvertedToUnicode
0x18003AF28: "long __cdecl I_GetSequenceNumber(void * __ptr64,unsigned long * __ptr64)" ?I_GetSequenceNumber@@YAJPEAXPEAK@Z
0x18001A4E0: "unsigned long __cdecl CatalogCacheHashIdentifier(struct _CRYPTOAPI_BLOB * __ptr64)" ?CatalogCacheHashIdentifier@@YAKPEAU_CRYPTOAPI_BLOB@@@Z
0x18003F4A8: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18002E438: I_SysDevEvWhqlEnabled
0x180036000: SIPolicyBlockErrorCodePerPolicy
0x18004A7C0: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLN
0x18004AC68: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLB
0x180008C80: "int __cdecl _LoadSIP(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_LoadSIP@@YAHPEAU_CRYPT_PROVIDER_DATA@@@Z
0x180055068: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLA
0x1800458D8: "\StringFileInfo\%04x%04x\" ??_C@_1DE@JAJGJDNB@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AA?$AA@
0x180044A18: "WhqlEnforcementDateTime" ??_C@_1DA@EEKIBJKP@?$AAW?$AAh?$AAq?$AAl?$AAE?$AAn?$AAf?$AAo?$AAr?$AAc?$AAe?$AAm?$AAe?$AAn?$AAt?$AAD?$AAa?$AAt?$AAe?$AAT?$AAi?$AAm?$AAe?$AA?$AA@
0x18000FDC5: "__cdecl XcptFilter" _XcptFilter
0x18003DE30: "__cdecl _imp_RegSetValueExA" __imp_RegSetValueExA
0x18003E260: "__cdecl _xc_a" __xc_a
0x18001018C: "__cdecl _imp_load_BCryptFinishHash" __imp_load_BCryptFinishHash
0x18003EDA0: "1.3.6.1.4.1.311.2.1.4" ??_C@_0BG@NAOBPDMJ@1?43?46?41?44?41?4311?42?41?44?$AA@
0x18003DD20: "__cdecl _imp_FreeResource" __imp_FreeResource
0x1800418F0: "DriverCleanupPolicy" ??_C@_1CI@BECECAGL@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x180041F00: "| +-- pgKnownSubject: " ??_C@_1FG@DBNPGJCD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAg?$AAK?$AAn?$AAo?$AAw?$AAn?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180040E38: "WVTAsn1CatNameValueDecode" ??_C@_0BK@LIOLJKFF@WVTAsn1CatNameValueDecode?$AA@
0x1800456A0: "System32\CodeIntegrity\DriverSiP" ??_C@_1FE@POMODNJE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP@
0x1800012A0: CryptCATAdminAcquireContext
0x1800276E4: "int __cdecl SipCreateHash(unsigned __int64,struct DIGEST_DATA * __ptr64)" ?SipCreateHash@@YAH_KPEAUDIGEST_DATA@@@Z
0x1800452B0: "\Boot\UpdateSkuSiPolicy.p7b" ??_C@_1DI@JIPOIAFC@?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18004ABD8: CRYPTSP_NULL_THUNK_DATA_DLB
0x18003D760: "__cdecl _imp_I_CryptCreateLruEntry" __imp_I_CryptCreateLruEntry
0x18002A770: "protected: virtual int __cdecl SIPObjectCAB_::UnmapFile(void) __ptr64" ?UnmapFile@SIPObjectCAB_@@MEAAHXZ
0x180041A48: "SoftpubDumpStructure" ??_C@_1CK@KNLJHPCM@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAD?$AAu?$AAm?$AAp?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x180032CB0: "int __cdecl _VerifyCountersignatureWithChainPubKeyParaInheritance(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,struct _CERT_CONTEXT const * __ptr64)" ?_VerifyCountersignatureWithChainPubKeyParaInheritance@@YAHPEAU_CRYPT_PROVIDER_DATA@@PEAEK1KPEBU_CERT_CONTEXT@@@Z
0x18003DA80: "__cdecl _imp_ASN1BEREncBool" __imp_ASN1BEREncBool
0x1800326DC: "long __cdecl _HandleSignerChoice(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_HandleSignerChoice@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18003EE00: "catroot2" ??_C@_1BC@NKIEIILE@?$AAc?$AAa?$AAt?$AAr?$AAo?$AAo?$AAt?$AA2?$AA?$AA@
0x180026B40: "public: virtual int __cdecl CCatalogParserV1::DecodeMemberInfo(struct CRYPTCATMEMBER_ * __ptr64,struct _CRYPT_ATTRIBUTE const * __ptr64)const __ptr64" ?DecodeMemberInfo@CCatalogParserV1@@UEBAHPEAUCRYPTCATMEMBER_@@PEBU_CRYPT_ATTRIBUTE@@@Z
0x18004C54C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x18002B148: "protected: class std::unique_ptr<struct _WIN_CERTIFICATE,struct deleter<struct release::c_free::tag> > __cdecl SIPObject_::BuildWinCertificate(unsigned char const * __ptr64,unsigned long) __ptr64" ?BuildWinCertificate@SIPObject_@@IEAA?AV?$unique_ptr@U_WIN_CERTIFICATE@@U?$deleter@Utag@c_free@release@@@@@std@@PEBEK@Z
0x18003EE30: "S-1-5-80-242729624-280608522-221" ??_C@_1HM@JOOFPKPD@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA2?$AA4?$AA2?$AA7?$AA2?$AA9?$AA6?$AA2?$AA4?$AA?9?$AA2?$AA8?$AA0?$AA6?$AA0?$AA8?$AA5?$AA2?$AA2?$AA?9?$AA2?$AA2?$AA1@
0x1800419A0: "CertificateTags" ??_C@_0BA@KFNDAAA@CertificateTags?$AA@
0x180055118: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x18003DB90: "__cdecl _imp_GetDateFormatA" __imp_GetDateFormatA
0x1800286F0: "public: virtual int __cdecl SIPObjectPE_::GetSealedDigest(struct SIP_SUBJECTINFO_ * __ptr64,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSealedDigest@SIPObjectPE_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEBEKPEAEPEAK@Z
0x180055070: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x18003DC20: "__cdecl _imp_FindClose" __imp_FindClose
0x180005AA0: mscat32DllUnregisterServer
0x18003E8A8: "S-%lu-" ??_C@_1O@NEDHCEJJ@?$AAS?$AA?9?$AA?$CF?$AAl?$AAu?$AA?9?$AA?$AA@
0x1800104B7: "__cdecl _tailMerge_imagehlp_dll" __tailMerge_imagehlp_dll
0x180040F68: "cryptnet.dll" ??_C@_0N@JLMGBCHD@cryptnet?4dll?$AA@
0x18003CD10: "const CTrustDB::`vftable'" ??_7CTrustDB@@6B@
0x18003DCC0: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180055078: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x180040FC0: "Software\Microsoft\Cryptography\" ??_C@_1GO@NDJDMCDK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18000FFB9: "__cdecl lock" _lock
0x1800415F8: "1.3.6.1.4.1.311.2.5.1" ??_C@_0BG@CCPEJANL@1?43?46?41?44?41?4311?42?45?41?$AA@
0x180042CF0: "| |.. Step[%02.2d]: " ??_C@_1GM@LMGCEHKB@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAS?$AAt?$AAe?$AAp?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18002A7A0: "private: int __cdecl SIPObjectCAB_::VerifyCabFile(void) __ptr64" ?VerifyCabFile@SIPObjectCAB_@@AEAAHXZ
0x180031A10: "long __cdecl I_GetRelaxedMarkerCheckFlags(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,unsigned long * __ptr64)" ?I_GetRelaxedMarkerCheckFlags@@YAJPEAU_CRYPT_PROVIDER_DATA@@KPEAK@Z
0x18001ACC0: "long __cdecl HError(void)" ?HError@@YAJXZ
0x180055028: "__cdecl _imp_CryptHashData" __imp_CryptHashData
0x18003D7E8: "__cdecl _imp_CertOpenSystemStoreA" __imp_CertOpenSystemStoreA
0x18003D970: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x18002E19C: DriverRegisterServer
0x18002C7B0: "public: __cdecl std::unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> >::~unique_ptr<unsigned char [0],struct std::default_delete<unsigned char [0]> >(void) __ptr64" ??1?$unique_ptr@$$BY0A@EU?$default_delete@$$BY0A@E@std@@@std@@QEAA@XZ
0x18000FD95: "__cdecl wcsicmp" _wcsicmp
0x180041308: "ResultDir" ??_C@_1BE@OFGJJEEA@?$AAR?$AAe?$AAs?$AAu?$AAl?$AAt?$AAD?$AAi?$AAr?$AA?$AA@
0x180042A30: "|.. hProv: " ??_C@_1FM@FALELDGM@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAh?$AAP?$AAr?$AAo?$AAv?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18000F3F0: "protected: virtual int __cdecl SIPObject_::MapFile(void) __ptr64" ?MapFile@SIPObject_@@MEAAHXZ
0x18000FDB9: "__cdecl callnewh" _callnewh
0x180004848: "protected: int __cdecl SIPObject_::GetDigestLength(unsigned long * __ptr64,unsigned __int64,char const * __ptr64) __ptr64" ?GetDigestLength@SIPObject_@@IEAAHPEAK_KPEBD@Z
0x180043C30: "| | |.. pAdvancedLinkTex" ??_C@_1FG@COHGFNHC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAA?$AAd?$AAv?$AAa?$AAn?$AAc?$AAe?$AAd?$AAL?$AAi?$AAn?$AAk?$AAT?$AAe?$AAx@
0x180050B00: "long g_ConfigCiRefCount" ?g_ConfigCiRefCount@@3JA
0x18003F8D8: "\Windows Defender\MpClient.dll" ??_C@_1DO@BNKICPIA@?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?2?$AAM?$AAp?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180041360: "EncodingType" ??_C@_1BK@NMKHIFKG@?$AAE?$AAn?$AAc?$AAo?$AAd?$AAi?$AAn?$AAg?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1800428A0: "| |-- psftVerifyAsOf: " ??_C@_1GI@KGKHCE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?9?$AA?9?$AA?5?$AAp?$AAs?$AAf?$AAt?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAA?$AAs?$AAO?$AAf?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800014A0: WTHelperGetProvCertFromChain
0x180001820: StringCchPrintfExW
0x18003E878: "__cdecl _guard_iat_table" __guard_iat_table
0x18001017A: "__cdecl _imp_load_BCryptCloseAlgorithmProvider" __imp_load_BCryptCloseAlgorithmProvider
0x18003DDD0: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180055038: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x1800117D2: memcpy
0x18001B6E0: WVTAsn1CatNameValueEncode
0x180033FC0: PkiAsn1Encode2
0x18003A07C: SIPolicyValidateImageInternal
0x180044810: "| | | |.. dwConfidence: " ??_C@_1GE@IENDCNMP@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAC?$AAo?$AAn?$AAf?$AAi?$AAd?$AAe?$AAn?$AAc?$AAe?$AA?3?$AA?5?$AA?5?$AA?5@
0x180034E40: RegCreateHKCUKeyExU
0x18001B680: WVTAsn1CatMemberInfoEncode
0x18000D8C0: "public: virtual char * __ptr64 __cdecl SIPObjectFlat_::GetDataOIDHint(void) __ptr64" ?GetDataOIDHint@SIPObjectFlat_@@UEAAPEADXZ
0x18003F7D0: "ReplaceCatalog" ??_C@_1BO@DAJGPFKL@?$AAR?$AAe?$AAp?$AAl?$AAa?$AAc?$AAe?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x18003F600: "__cdecl _sz_USER32_dll" __sz_USER32_dll
0x180043450: "| |.. pfnAddStore2Chain: " ??_C@_1FK@DGHNHEHC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAA?$AAd?$AAd?$AAS?$AAt?$AAo?$AAr?$AAe?$AA2?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180038E68: SIPolicyParseSigningScenarios
0x1800225FC: "public: __cdecl std::unique_ptr<unsigned short,struct deleter<struct release::catalogdelete_tag> >::~unique_ptr<unsigned short,struct deleter<struct release::catalogdelete_tag> >(void) __ptr64" ??1?$unique_ptr@GU?$deleter@Ucatalogdelete_tag@release@@@@@std@@QEAA@XZ
0x180055050: "__cdecl _imp_MessageBoxA" __imp_MessageBoxA
0x1800116AC: "__cdecl _GSHandlerCheck_EH" __GSHandlerCheck_EH
0x180041C40: "| |.. dwUIChoice: " ??_C@_1FI@NKCBANFA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAU?$AAI?$AAC?$AAh?$AAo?$AAi?$AAc?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DFF0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x180043510: "| |.. pfnAddCert2Chain: " ??_C@_1FK@PGDPJDEA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAA?$AAd?$AAd?$AAC?$AAe?$AAr?$AAt?$AA2?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18000A0C0: "int __cdecl _CatAdminAddCatalogsToCache(struct CRYPT_CAT_ADMIN_ * __ptr64,unsigned short * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64)" ?_CatAdminAddCatalogsToCache@@YAHPEAUCRYPT_CAT_ADMIN_@@PEAGPEAU_CRYPTOAPI_BLOB@@@Z
0x18000D500: WTGetSignatureInfo
0x180044A60: "1.2.840.113549.1.9.3" ??_C@_0BF@CNCDFIGF@1?42?4840?4113549?41?49?43?$AA@
0x18003E0E0: "__cdecl _imp_memset" __imp_memset
0x180010536: "__cdecl _imp_load_ImageRemoveCertificate" __imp_load_ImageRemoveCertificate
0x18004A7B0: USER32_NULL_THUNK_DATA_DLN
0x18003DF30: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x18003D828: "__cdecl _imp_CryptFindOIDInfo" __imp_CryptFindOIDInfo
0x18002319C: "int __cdecl CDFGetNextMember(struct CRYPTCATCDF_ * __ptr64,unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?CDFGetNextMember@@YAHPEAUCRYPTCATCDF_@@PEAG_KPEBG@Z
0x180055058: USER32_NULL_THUNK_DATA_DLA
0x18000FF9F: "__cdecl initterm" _initterm
0x18000AE30: WaitForCryptService
0x18003DB38: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x18004ACA0: USER32_NULL_THUNK_DATA_DLB
0x1800399FC: SIPolicySetActivePolicy
0x180020568: "public: void __cdecl ViewInfo::Unmap(void) __ptr64" ?Unmap@ViewInfo@@QEAAXXZ
0x18003D738: "__cdecl _imp_I_CryptGetAsn1Encoder" __imp_I_CryptGetAsn1Encoder
0x18004C484: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800508D0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18003DF78: "__cdecl _imp_Sleep" __imp_Sleep
0x18003E288: "__cdecl _xi_z" __xi_z
0x18003EBE0: "State" ??_C@_1M@LAGHHMEN@?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?$AA@
0x18003F718: "1.3.6.1.4.1.311.2.1.15" ??_C@_0BH@EGJCJLLK@1?43?46?41?44?41?4311?42?41?415?$AA@
0x18000D920: "public: virtual char * __ptr64 __cdecl SIPObjectCAB_::GetDataObjectID(void) __ptr64" ?GetDataObjectID@SIPObjectCAB_@@UEAAPEADXZ
0x180007BB8: CatalogReallyDecodeIndirectData
0x18003DBE0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180033C40: "void __cdecl ErrLog_LogString(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int)" ?ErrLog_LogString@@YAXPEAG00H@Z
0x18001F950: WTHelperOpenKnownStores
0x18003E1E0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180039D70: SIPolicyValidateChainAgainstSigner
0x1800048E0: PkiAsn1EncodeInfoEx
0x18000FA14: "__cdecl _C_specific_handler" __C_specific_handler
0x18001DF14: "int __cdecl _CompareAuthKeyId(unsigned long,struct _CERT_CONTEXT const * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?_CompareAuthKeyId@@YAHKPEBU_CERT_CONTEXT@@0@Z
0x18003ED00: "1.3.6.1.4.1.311.2.1.25" ??_C@_0BH@EENECFOD@1?43?46?41?44?41?4311?42?41?425?$AA@
0x18003DED0: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x18003E1A0: "__cdecl _imp_bsearch" __imp_bsearch
0x180005AB0: MIDL_user_free
0x18003DEF8: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180043870: "| |.. pfnCleanupPolicy: " ??_C@_1FK@NPPMJKBD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180005700: "protected: virtual int __cdecl SIPObject_::FileHandleFromSubject(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?FileHandleFromSubject@SIPObject_@@MEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x18004A694: "__cdecl _DELAY_IMPORT_DESCRIPTOR_imagehlp_dll" __DELAY_IMPORT_DESCRIPTOR_imagehlp_dll
0x18001E6B0: TrustIsCertificateSelfSigned
0x1800288AC: "private: bool __cdecl SIPObjectPE_::SealedDigestFile(char * __ptr64,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?SealedDigestFile@SIPObjectPE_@@AEAA_NPEADPEBEKPEAEPEAK@Z
0x180041430: "ATTR" ??_C@_19EKHKILOD@?$AAA?$AAT?$AAT?$AAR?$AA?$AA@
0x18003F780: "TrustedPublisher" ??_C@_1CC@MEIEOINB@?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAP?$AAu?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAr?$AA?$AA@
0x18003E1B0: "__cdecl _imp__onexit" __imp__onexit
0x180044EC4: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x180041320: "CAT" ??_C@_17LNKEKEKE@?$AAC?$AAA?$AAT?$AA?$AA@
0x1800425A0: "| +-- pSgnr: " ??_C@_1CC@HPNBNDCJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAS?$AAg?$AAn?$AAr?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x1800117DE: memmove
0x1800346E0: CatUtil_Close
0x18003DCA8: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180045620: "DriverSi" ??_C@_1BC@INHEMONK@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AA?$AA@
0x1800348D4: CatUtil_Open
0x18000FFF2: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x18003D9F8: "__cdecl _imp_ASN1BERDecU32Val" __imp_ASN1BERDecU32Val
0x1800103FC: "__cdecl _imp_load_BCryptGetProperty" __imp_load_BCryptGetProperty
0x180040D80: "WVTAsn1SpcIndirectDataContentDec" ??_C@_0CE@OHKAGFHO@WVTAsn1SpcIndirectDataContentDec@
0x180026968: CatalogDupeString
0x18003DA18: "__cdecl _imp_ASN1BERDecS32Val" __imp_ASN1BERDecS32Val
0x180041970: "Certificates" ??_C@_0N@GFNKDBBJ@Certificates?$AA@
0x1800100B9: "__cdecl _imp_load_CryptCreateHash" __imp_load_CryptCreateHash
0x18003D750: "__cdecl _imp_I_CryptFindLruEntryData" __imp_I_CryptFindLruEntryData
0x180045478: "ATPSi" ??_C@_1M@GABNFCL@?$AAA?$AAT?$AAP?$AAS?$AAi?$AA?$AA@
0x1800415B0: "0x00004550" ??_C@_1BG@BBAMNJII@?$AA0?$AAx?$AA0?$AA0?$AA0?$AA0?$AA4?$AA5?$AA5?$AA0?$AA?$AA@
0x180043DB0: "| |.. pfnOnMoreInfoClick: " ??_C@_1FK@ELLFMODK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAO?$AAn?$AAM?$AAo?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAC?$AAl?$AAi?$AAc?$AAk?$AA?3?$AA?5@
0x1800437B0: "| |.. pfnCertCheckPolicy: " ??_C@_1FK@OMGEDAOJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAe?$AAc?$AAk?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800225B4: CryptCATSetCreatePageHashesFlag
0x18001B750: WVTAsn1IntentToSealAttributeDecode
0x180042370: "| |.. pcwszDisplayName: " ??_C@_1FG@IGDKHBOC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAc?$AAw?$AAs?$AAz?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AA?5?$AA?5@
0x18000FDAD: malloc
0x18003EDF0: "keysvc" ??_C@_1O@IBDLKHPE@?$AAk?$AAe?$AAy?$AAs?$AAv?$AAc?$AA?$AA@
0x180041DE0: "| |.. cbStruct: " ??_C@_1FI@HAIMEFCB@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001F780: WTHelperIsChainedToMicrosoftFromStateData
0x180041078: "Certificate" ??_C@_1BI@HDGMAIJD@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?$AA@
0x1800441C0: "| +.. csCounterSigners: " ??_C@_1FI@CILKHLLI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAc?$AAs?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003E180: "__cdecl _imp__wtol" __imp__wtol
0x180055098: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18003EAD0: "MZ" ??_C@_02DIKIINKA@MZ?$AA@
0x1800452E8: "UpdateSkuSiPolicy.p7b" ??_C@_1CM@DMNCPDFG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x180010791: "__cdecl _imp_load_ControlService" __imp_load_ControlService
0x18000D300: WTGetSignatureInfoEx
0x18003DCA0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180055008: "__cdecl _imp_CryptSetProvParam" __imp_CryptSetProvParam
0x180043260: "|.. sftSystemTime: " ??_C@_1GA@DCEIGHCK@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAs?$AAf?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAi?$AAm?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001E020: "struct _CERT_CONTEXT const * __ptr64 __cdecl _GetExternalIssuerCert(struct _CERT_CONTEXT const * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,struct _FILETIME * __ptr64)" ?_GetExternalIssuerCert@@YAPEBU_CERT_CONTEXT@@PEBU1@KPEAK1PEAU_FILETIME@@@Z
0x18003DE58: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18001C960: WVTAsn1SpcSpOpusInfoEncode
0x180045590: "System32\CodeIntegrity\UpdateATP" ??_C@_1FK@FHCIHIPM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAT?$AAP@
0x180011648: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180039AE0: SIPolicySetFileRuleTypesPresent
0x180002040: "int __cdecl UpdateCertProvChain(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,unsigned long * __ptr64,int,unsigned long,struct _CRYPT_PROVIDER_SGNR * __ptr64,struct _CERT_CHAIN_CONTEXT const * __ptr64)" ?UpdateCertProvChain@@YAHPEAU_CRYPT_PROVIDER_DATA@@KPEAKHKPEAU_CRYPT_PROVIDER_SGNR@@PEBU_CERT_CHAIN_CONTEXT@@@Z
0x180040F48: "CryptDllDecodeObject" ??_C@_0BF@IDKBOKLC@CryptDllDecodeObject?$AA@
0x18000A830: Client_SSCatDBEnumCatalogs
0x180045090: "Kernel_RvkSiStatus" ??_C@_1CG@KEIKIMIO@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAR?$AAv?$AAk?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800433F0: "| |.. pfnFree: " ??_C@_1FK@CFGINEBB@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAF?$AAr?$AAe?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001EBB0: WintrustGetDefaultForUsage
0x1800279D0: InboxCryptSIPRemoveSignedDataMsg
0x180003CF0: WVTAsn1CatNameValueDecode
0x180004234: "int __cdecl WintrustUnloadProviderList(void)" ?WintrustUnloadProviderList@@YAHXZ
0x180035E44: RtlStringCbCatW
0x18002A2E4: "private: int __cdecl SIPObjectCAB_::ReadSignedData(unsigned char * __ptr64,unsigned long) __ptr64" ?ReadSignedData@SIPObjectCAB_@@AEAAHPEAEK@Z
0x18001B1E0: "int __cdecl WVTAsn1GetSpcSigInfo(struct SpcSigInfo * __ptr64,unsigned long,struct SPC_SIGINFO_ * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetSpcSigInfo@@YAHPEAUSpcSigInfo@@KPEAUSPC_SIGINFO_@@PEAPEAEPEAJ@Z
0x18003D770: "__cdecl _imp_I_CryptFreeLruCache" __imp_I_CryptFreeLruCache
0x18003F7A8: "DeferReplaceCatalog" ??_C@_1CI@FDFFGEBG@?$AAD?$AAe?$AAf?$AAe?$AAr?$AAR?$AAe?$AAp?$AAl?$AAa?$AAc?$AAe?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x18003F7F0: "Call_SortedCatalogOpen" ??_C@_1CO@NHAKHNIF@?$AAC?$AAa?$AAl?$AAl?$AA_?$AAS?$AAo?$AAr?$AAt?$AAe?$AAd?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAO?$AAp?$AAe?$AAn?$AA?$AA@
0x18003DAF0: "__cdecl _imp_ASN1EncSetError" __imp_ASN1EncSetError
0x18002AF60: "public: virtual void * __ptr64 __cdecl SIPObject_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSIPObject_@@UEAAPEAXI@Z
0x180033540: Client_SSCatDBAddCatalog
0x180040A40: "WVTAsn1SpcPeImageDataEncode" ??_C@_0BM@FMPFCFJC@WVTAsn1SpcPeImageDataEncode?$AA@
0x180042970: "|.. WndParent: " ??_C@_1FK@MHLENMAO@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAW?$AAn?$AAd?$AAP?$AAa?$AAr?$AAe?$AAn?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001E3B0: TrustDecode
0x18003DD10: "__cdecl _imp_GetModuleHandleExA" __imp_GetModuleHandleExA
0x180002570: DriverFinalPolicy
0x180035980: "long __cdecl I_HashGeneratePageHashesEx<struct PAGE_HASH_V2,struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,void const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,unsigned long * __ptr64,struct PAGE_HASH_V2 * __ptr64 * __ptr64)" ??$I_HashGeneratePageHashesEx@UPAGE_HASH_V2@@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@PEBXKKP6AJPEAXKPEAKPEAPEAX3@Z23PEAPEAUPAGE_HASH_V2@@@Z
0x18003D988: "__cdecl _imp_CertFreeCTLContext" __imp_CertFreeCTLContext
0x18003DE60: "__cdecl _imp_RegEnumKeyExA" __imp_RegEnumKeyExA
0x18002C5E0: AddPersonalTrustDBPages
0x180003E90: "int __cdecl WintrustDllMain(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?WintrustDllMain@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x18003E210: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x180041860: "DriverInitializePolicy" ??_C@_1CO@MNAGFMBN@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18003DEC8: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18003D9D0: "__cdecl _imp_ASN1bitstring_cmp" __imp_ASN1bitstring_cmp
0x18002A880: "public: virtual int __cdecl SIPObjectCAB_::VerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?VerifyIndirectData@SIPObjectCAB_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x18002AD1C: "public: virtual __cdecl SIPObjectCatalog_::~SIPObjectCatalog_(void) __ptr64" ??1SIPObjectCatalog_@@UEAA@XZ
0x18000E65C: "long __cdecl HashpEmitExcludeRange<struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,unsigned long,struct _EXCLUDE_RANGE * __ptr64 const,unsigned long,struct _HASHLIB_LOADED_IMAGE * __ptr64,unsigned long,unsigned long)" ??$HashpEmitExcludeRange@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@KQEAU_EXCLUDE_RANGE@@KPEAU_HASHLIB_LOADED_IMAGE@@KK@Z
0x180044FB8: "RvkSiPolicyVersion" ??_C@_1CG@JNJKGMLE@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180020664: "long __cdecl _ChainToMicrosoftRoot(struct _CERT_CHAIN_CONTEXT const * __ptr64,int * __ptr64)" ?_ChainToMicrosoftRoot@@YAJPEBU_CERT_CHAIN_CONTEXT@@PEAH@Z
0x1800438D0: "| +.. psUIpfns: " ??_C@_1CI@HFCPPMJK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAU?$AAI?$AAp?$AAf?$AAn?$AAs?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18000D8D0: "public: virtual char * __ptr64 __cdecl SIPObjectFlat_::GetDataObjectID(void) __ptr64" ?GetDataObjectID@SIPObjectFlat_@@UEAAPEADXZ
0x180044DC8: "CatalogDB: %s: %s at line #%u en" ??_C@_0DJ@HPEJFONA@CatalogDB?3?5?$CFs?3?5?$CFs?5at?5line?5?$CD?$CFu?5en@
0x18003E890: "-%lu" ??_C@_19DEJHOMFE@?$AA?9?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x18004C574: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180025714: "int __cdecl CatalogFillCTL(struct CRYPTCATSTORE_ * __ptr64,struct _CTL_INFO * __ptr64)" ?CatalogFillCTL@@YAHPEAUCRYPTCATSTORE_@@PEAU_CTL_INFO@@@Z
0x18003DE40: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x18000FDD1: "__cdecl amsg_exit" _amsg_exit
0x18003E0C8: "__cdecl _imp__callnewh" __imp__callnewh
0x180027A70: InboxCryptSIPVerifyIndirectData
0x1800442A0: "| | | |.. cbStruct: " ??_C@_1FI@HDFLEEPI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001B9D0: WVTAsn1SealingTimestampAttributeDecode
0x180005210: DriverCleanupPolicy
0x18003F730: "1.3.6.1.4.1.311.2.1.28" ??_C@_0BH@PBHKFLKO@1?43?46?41?44?41?4311?42?41?428?$AA@
0x180041158: "\StringFileInfo\040904B0\%s" ??_C@_1DI@ILFBMIDE@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA0?$AA4?$AA0?$AA9?$AA0?$AA4?$AAB?$AA0?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18002B570: "public: virtual int __cdecl SIPObject_::PutSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?PutSignedDataMsg@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKKPEAEK@Z
0x18002C350: "long __cdecl SoftpubDefCertInit(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?SoftpubDefCertInit@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18001FC20: "long __cdecl StringCchCopyA(char * __ptr64,unsigned __int64,char const * __ptr64)" ?StringCchCopyA@@YAJPEAD_KPEBD@Z
0x180005AA0: "protected: virtual unsigned long __cdecl SIPObject_::GetMyStructureSize(void) __ptr64" ?GetMyStructureSize@SIPObject_@@MEAAKXZ
0x18001DA70: "void __cdecl _RefreshStores(unsigned __int64)" ?_RefreshStores@@YAX_K@Z
0x1800459C8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18003A848: SIPolicyVersionsMatched
0x18003D8E8: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x18003D730: "__cdecl _imp_I_CryptInstallAsn1Module" __imp_I_CryptInstallAsn1Module
0x180003B10: "int __cdecl _ExtractSigner(void * __ptr64,struct _CRYPT_PROVIDER_DATA * __ptr64,int)" ?_ExtractSigner@@YAHPEAXPEAU_CRYPT_PROVIDER_DATA@@H@Z
0x180041488: "CryptSIPGetSignedDataMsg" ??_C@_1DC@BBOJBIDC@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAI?$AAP?$AAG?$AAe?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x1800413C8: "[CatalogFiles]" ??_C@_1BO@HBJDONMA@?$AA?$FL?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$FN?$AA?$AA@
0x180005AA0: "public: virtual char * __ptr64 __cdecl SIPObject_::GetDataObjectID(void) __ptr64" ?GetDataObjectID@SIPObject_@@UEAAPEADXZ
0x180041408: "true" ??_C@_19FKLFLPMF@?$AAt?$AAr?$AAu?$AAe?$AA?$AA@
0x180022760: "void __cdecl _CatAdminReleaseContext(struct CRYPT_CAT_ADMIN_ * __ptr64)" ?_CatAdminReleaseContext@@YAXPEAUCRYPT_CAT_ADMIN_@@@Z
0x180050898: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x1800087E0: "public: virtual void * __ptr64 __cdecl Stack_::`vector deleting destructor'(unsigned int) __ptr64" ??_EStack_@@UEAAPEAXI@Z
0x18003F9C0: "0x%02hx%02hx%02hx%02hx%02hx%02hx" ??_C@_1EC@MPDKEHCN@?$AA0?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx?$AA?$CF?$AA0?$AA2?$AAh?$AAx@
0x180021F90: CryptCATPersistStore
0x18003F968: WldpScriptFileAllowed
0x18003ABF4: "long __cdecl I_DeleteUnauthAttrByOID(void * __ptr64,char const * __ptr64)" ?I_DeleteUnauthAttrByOID@@YAJPEAXPEBD@Z
0x180027B80: mssip32DllRegisterServer
0x1800104AB: "__cdecl _imp_load_ImageEnumerateCertificates" __imp_load_ImageEnumerateCertificates
0x180025C10: "int __cdecl CatalogFillCatLevelAttr(struct CRYPTCATSTORE_ * __ptr64,struct CRYPTCATATTRIBUTE_ * __ptr64,struct _CERT_EXTENSION * __ptr64)" ?CatalogFillCatLevelAttr@@YAHPEAUCRYPTCATSTORE_@@PEAUCRYPTCATATTRIBUTE_@@PEAU_CERT_EXTENSION@@@Z
0x180040CB0: "1.3.6.1.4.1.311.2.4.3" ??_C@_0BG@KIHOJFDM@1?43?46?41?44?41?4311?42?44?43?$AA@
0x180021E40: CryptCATOpen
0x180028860: "public: virtual int __cdecl SIPObjectPE_::RemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?RemoveSignedDataMsg@SIPObjectPE_@@UEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x180007540: CryptCATClose
0x180055148: "__cdecl _imp_ImageRemoveCertificate" __imp_ImageRemoveCertificate
0x18003F62D: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x1800010F0: CryptCATAdminReleaseContext
0x180005AB0: "void __cdecl DestroyListAndFreeMemory(void * __ptr64)" ?DestroyListAndFreeMemory@@YAXPEAX@Z
0x180040CC8: "WVTAsn1SealingSignatureAttribute" ??_C@_0CH@BPGFCNFK@WVTAsn1SealingSignatureAttribute@
0x180050868: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x180040DA8: "WVTAsn1SpcSpAgencyInfoDecode" ??_C@_0BN@NNJBENED@WVTAsn1SpcSpAgencyInfoDecode?$AA@
0x180028CB0: "public: virtual int __cdecl SIPObjectPE_::VerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?VerifyIndirectData@SIPObjectPE_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x18003DA58: "__cdecl _imp_ASN1char16string_free" __imp_ASN1char16string_free
0x18001B4F0: WVTAsn1CatMemberInfo2Encode
0x180040C88: "WVTAsn1IntentToSealAttributeEnco" ??_C@_0CD@GOGJJBGK@WVTAsn1IntentToSealAttributeEnco@
0x180043750: "| |.. pfnFinalPolicy: " ??_C@_1FK@NDBLDGIB@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAF?$AAi?$AAn?$AAa?$AAl?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800100A7: "__cdecl _imp_load_CryptHashData" __imp_load_CryptHashData
0x180025D64: "int __cdecl CatalogFillCatStore(struct CRYPTCATSTORE_ * __ptr64,struct _CTL_INFO * __ptr64)" ?CatalogFillCatStore@@YAHPEAUCRYPTCATSTORE_@@PEAU_CTL_INFO@@@Z
0x180005560: SoftpubCheckCert
0x1800103F0: RtlInitUnicodeString
0x180034AC8: I_CryptGetMaxHeaderBytesToMapRegValue
0x180045560: "Kernel_ATPSiStatus" ??_C@_1CG@ONHIGBIO@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAA?$AAT?$AAP?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18002BF44: "void __cdecl GenericChainWalkSigner(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CRYPT_PROVIDER_SGNR * __ptr64,struct _WTD_GENERIC_CHAIN_POLICY_CREATE_INFO * __ptr64)" ?GenericChainWalkSigner@@YAXPEAU_CRYPT_PROVIDER_DATA@@PEAU_CRYPT_PROVIDER_SGNR@@PEAU_WTD_GENERIC_CHAIN_POLICY_CREATE_INFO@@@Z
0x180021830: WTValidateBioSignaturePolicy
0x180043FC0: "| |.. sftVerifyAsOf: " ??_C@_1GA@DAAGNOMI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAs?$AAf?$AAt?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAA?$AAs?$AAO?$AAf?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003F500: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x18003E120: "__cdecl _imp__lock" __imp__lock
0x18003DEC0: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180004EF0: WVTAsn1CatMemberInfo2Decode
0x180024BB0: CryptCATCDFOpen
0x18000FD6C: atexit
0x18003D8C0: "__cdecl _imp_CertVerifySubjectCertificateContext" __imp_CertVerifySubjectCertificateContext
0x18003E1B8: "__cdecl _imp_strcmp" __imp_strcmp
0x180041848: "1.3.6.1.4.1.311.10.3.39" ??_C@_0BI@PKBPHNMF@1?43?46?41?44?41?4311?410?43?439?$AA@
0x18003DB20: "__cdecl _imp_ASN1_FreeDecoded" __imp_ASN1_FreeDecoded
0x1800410C8: "MSTESTROOT" ??_C@_0L@DENDMEOF@MSTESTROOT?$AA@
0x180043690: "| |.. pfnSignatureTrust: " ??_C@_1FK@LFFDOHHO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180055010: "__cdecl _imp_CryptAcquireContextA" __imp_CryptAcquireContextA
0x18001AC18: "long __cdecl ASNUnregisterServer(void)" ?ASNUnregisterServer@@YAJXZ
0x180029BCC: "private: void __cdecl SIPObjectCAB_::FreeHeader(void) __ptr64" ?FreeHeader@SIPObjectCAB_@@AEAAXXZ
0x180040C68: "WVTAsn1SpcSpOpusInfoEncode" ??_C@_0BL@FMLJLKAE@WVTAsn1SpcSpOpusInfoEncode?$AA@
0x18003DC60: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x18003DD40: "__cdecl _imp_LoadLibraryExA" __imp_LoadLibraryExA
0x18003EB38: "FailInform" ??_C@_1BG@FALJIAGC@?$AAF?$AAa?$AAi?$AAl?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x1800443D0: "| | | | |.. pCertInfo: " ??_C@_1EC@PONNONEL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAe?$AAr?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?$AN?$AA?6@
0x18002A5B4: "private: int __cdecl SIPObjectCAB_::ShiftFileBytes(long) __ptr64" ?ShiftFileBytes@SIPObjectCAB_@@AEAAHJ@Z
0x1800286A0: "protected: virtual int __cdecl SIPObjectPE_::GetMessageFromFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetMessageFromFile@SIPObjectPE_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@KPEAK@Z
0x180023A9C: "void __cdecl CDFTextToGUID(unsigned short const * __ptr64,struct _GUID * __ptr64,void (__cdecl*)(unsigned long,unsigned long,unsigned short * __ptr64))" ?CDFTextToGUID@@YAXPEBGPEAU_GUID@@P6AXKKPEAG@Z@Z
0x18003DF08: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1800440F0: "| |.. psSigner: " ??_C@_1FK@LNFGDBDF@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800445A0: "| | | | +.. hCertStore: " ??_C@_1FK@DPBIABCI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAh?$AAC?$AAe?$AAr?$AAt?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?3?$AA?5@
0x18003DF60: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x1800432E0: "| +.. *** invalid parameter **" ??_C@_1EI@PGNGLBN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AA?5?$AA?$CK?$AA?$CK@
0x18003DA28: "__cdecl _imp_ASN1BERDecChar16String" __imp_ASN1BERDecChar16String
0x180021C10: CryptCATFreeSortedMemberInfo
0x18003DE90: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180034628: PkiFree
0x18003DF20: "__cdecl _imp_CreateEventA" __imp_CreateEventA
0x18003B370: "int __cdecl I_SignatureCompare(void * __ptr64,void const * __ptr64,void const * __ptr64)" ?I_SignatureCompare@@YAHPEAXPEBX1@Z
0x18003EEF8: "CatRoot2" ??_C@_1BC@JPPDOLHM@?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA2?$AA?$AA@
0x18003DBF8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180043900: "| +.. *** invalid paramete" ??_C@_1FA@BBCMHPL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe@
0x180007D80: InboxCryptSIPCreateIndirectData
0x18003DD08: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180010FF0: WTIsFirstConfigCiResultPreferred
0x180050B08: "struct _RTL_SRWLOCK g_ConfigCiSrwLock" ?g_ConfigCiSrwLock@@3U_RTL_SRWLOCK@@A
0x18003D6D8: "__cdecl _imp_CryptSIPGetCaps" __imp_CryptSIPGetCaps
0x180034EBC: GetTextualSidHKCU
0x18003D998: "__cdecl _imp_ASN1BEREncChar16String" __imp_ASN1BEREncChar16String
0x18003DA40: "__cdecl _imp_ASN1_CloseModule" __imp_ASN1_CloseModule
0x18004A830: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x18003F360: "Software\Microsoft\Cryptography\" ??_C@_1HI@HMMEJCM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180043E70: "| |.. pfnOnAdvancedClick: " ??_C@_1FK@OIJLODLA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAO?$AAn?$AAA?$AAd?$AAv?$AAa?$AAn?$AAc?$AAe?$AAd?$AAC?$AAl?$AAi?$AAc?$AAk?$AA?3?$AA?5@
0x180045220: "System32\CodeIntegrity\UpdateRvk" ??_C@_1FK@DIOGDNAB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAR?$AAv?$AAk@
0x18003DFA0: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18003DDF0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18004AD28: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x180034BE4: guid2wstr
0x18000FFD1: "__cdecl _dllonexit" __dllonexit
0x1800396CC: SIPolicyQuerySubVerBlock
0x1800550D8: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x18003DFE8: api-ms-win-core-version-private-l1-1-0_NULL_THUNK_DATA
0x18003E1F8: "__cdecl _imp_NtQueryEaFile" __imp_NtQueryEaFile
0x1800226F4: "int __cdecl _CatAdminFreeCachedCatalogs(struct CRYPT_CAT_ADMIN_ * __ptr64,int)" ?_CatAdminFreeCachedCatalogs@@YAHPEAUCRYPT_CAT_ADMIN_@@H@Z
0x18003D848: "__cdecl _imp_CryptMsgDuplicate" __imp_CryptMsgDuplicate
0x180050B10: "unsigned __int64 g_ConfigCiEventHandle" ?g_ConfigCiEventHandle@@3_KA
0x1800101E6: "__cdecl _imp_load_BCryptVerifySignature" __imp_load_BCryptVerifySignature
0x180050198: SpcPeImageData_flags_default
0x18000ECF4: "int __cdecl WVTAsn1SetSpcLink(struct SPC_LINK_ * __ptr64,struct SpcLink * __ptr64)" ?WVTAsn1SetSpcLink@@YAHPEAUSPC_LINK_@@PEAUSpcLink@@@Z
0x180005AA0: "protected: virtual int __cdecl SIPObject_::GetDigestStream(struct DIGEST_DATA * __ptr64,int (__cdecl*)(void * __ptr64,unsigned char * __ptr64,unsigned long),unsigned long) __ptr64" ?GetDigestStream@SIPObject_@@MEAAHPEAUDIGEST_DATA@@P6AHPEAXPEAEK@ZK@Z
0x18000EE38: "long __cdecl I_GetMessageIntentToSealSetting(void * __ptr64,struct _CRYPT_ATTRIBUTES * __ptr64 * __ptr64,bool & __ptr64)" ?I_GetMessageIntentToSealSetting@@YAJPEAXPEAPEAU_CRYPT_ATTRIBUTES@@AEA_N@Z
0x18003DED8: "__cdecl _imp_lstrlenA" __imp_lstrlenA
0x18003D840: "__cdecl _imp_CryptEncodeObject" __imp_CryptEncodeObject
0x180041890: "WintrustCertificateTrust" ??_C@_1DC@DEHEMDH@?$AAW?$AAi?$AAn?$AAt?$AAr?$AAu?$AAs?$AAt?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?$AA@
0x18001F600: WTHelperIsChainedToMicrosoft
0x18003D7D0: "__cdecl _imp_CryptHashCertificate2" __imp_CryptHashCertificate2
0x180042FB0: "| |.. pCATSip: " ??_C@_1FK@OGKKLCHI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAA?$AAT?$AAS?$AAi?$AAp?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18002B740: "public: virtual int __cdecl SIPObject_::VerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?VerifyIndirectData@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x180002378: "void * __ptr64 __cdecl GetChainAdditionalStore(struct _CRYPT_PROVIDER_DATA * __ptr64,int)" ?GetChainAdditionalStore@@YAPEAXPEAU_CRYPT_PROVIDER_DATA@@H@Z
0x180005AA0: "protected: virtual int __cdecl SIPObject_::GetMessageFromFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetMessageFromFile@SIPObject_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@KPEAK@Z
0x1800508B0: "__cdecl _native_startup_lock" __native_startup_lock
0x18003DA30: "__cdecl _imp_ASN1Free" __imp_ASN1Free
0x1800550F8: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180010840: DllMain
0x18003F820: "SkipHashNotInCatalog" ??_C@_1CK@LDKOOCF@?$AAS?$AAk?$AAi?$AAp?$AAH?$AAa?$AAs?$AAh?$AAN?$AAo?$AAt?$AAI?$AAn?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$AA@
0x18002B6BC: "protected: int __cdecl SIPObject_::SeekAndWriteFile(unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?SeekAndWriteFile@SIPObject_@@IEAAHKPEAEK@Z
0x180029C10: "protected: virtual int __cdecl SIPObjectCAB_::GetDigestStream(struct DIGEST_DATA * __ptr64,int (__cdecl*)(void * __ptr64,unsigned char * __ptr64,unsigned long),unsigned long) __ptr64" ?GetDigestStream@SIPObjectCAB_@@MEAAHPEAUDIGEST_DATA@@P6AHPEAXPEAEK@ZK@Z
0x1800368D0: SIPolicyFindScenarioExceptionRules
0x180041E40: "| |.. pcwszFilePath: " ??_C@_1FG@COGNGLPA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAc?$AAw?$AAs?$AAz?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800444E0: "| | | | | |.. NotAfter" ??_C@_1GA@JKDEFDOO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAN?$AAo?$AAt?$AAA?$AAf?$AAt?$AAe?$AAr@
0x18002D1E0: ConfigCiFinalPolicy
0x180029078: "private: int __cdecl SIPObjectCAB_::CheckData(struct CFHEADER const & __ptr64,struct CFRESERVE const & __ptr64,struct CFFOLDER const * __ptr64 const) __ptr64" ?CheckData@SIPObjectCAB_@@AEAAHAEBUCFHEADER@@AEBUCFRESERVE@@QEBUCFFOLDER@@@Z
0x180003A30: "void __cdecl _ExtractCounterSigners(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long)" ?_ExtractCounterSigners@@YAXPEAU_CRYPT_PROVIDER_DATA@@K@Z
0x180040EB8: "WVTAsn1IntentToSealAttributeDeco" ??_C@_0CD@KCNJGKBN@WVTAsn1IntentToSealAttributeDeco@
0x18002C610: OpenPersonalTrustDBDialogEx
0x180021A18: "int __cdecl CryptCATCreateStore(struct CRYPTCATSTORE_ * __ptr64,unsigned short * __ptr64)" ?CryptCATCreateStore@@YAHPEAUCRYPTCATSTORE_@@PEAG@Z
0x18001A514: "public: int __cdecl CCatalogCache::CreateCachedStateFromWintrustData(struct _WINTRUST_DATA * __ptr64,struct _WIN32_FILE_ATTRIBUTE_DATA * __ptr64,struct _CATALOG_CACHED_STATE * __ptr64 * __ptr64) __ptr64" ?CreateCachedStateFromWintrustData@CCatalogCache@@QEAAHPEAU_WINTRUST_DATA@@PEAU_WIN32_FILE_ATTRIBUTE_DATA@@PEAPEAU_CATALOG_CACHED_STATE@@@Z
0x18002ADA0: "public: virtual int __cdecl SIPObjectCatalog_::CreateIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?CreateIndirectData@SIPObjectCatalog_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x180022CA0: CryptCATAdminResolveCatalogPath
0x180027674: "public: __cdecl std::unique_ptr<class SIPObject_,struct std::default_delete<class SIPObject_> >::~unique_ptr<class SIPObject_,struct std::default_delete<class SIPObject_> >(void) __ptr64" ??1?$unique_ptr@VSIPObject_@@U?$default_delete@VSIPObject_@@@std@@@std@@QEAA@XZ
0x180011734: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18004C448: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180044680: "| | | |.. fTrustedRoot: " ??_C@_1FG@EJEMABDD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAT?$AAr?$AAu?$AAs?$AAt?$AAe?$AAd?$AAR?$AAo?$AAo?$AAt?$AA?3?$AA?5?$AA?5?$AA?5@
0x18003E110: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18003E178: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x180005760: "protected: virtual int __cdecl SIPObjectFlat_::GetDigestStream(struct DIGEST_DATA * __ptr64,int (__cdecl*)(void * __ptr64,unsigned char * __ptr64,unsigned long),unsigned long) __ptr64" ?GetDigestStream@SIPObjectFlat_@@MEAAHPEAUDIGEST_DATA@@P6AHPEAXPEAEK@ZK@Z
0x18003E090: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000D860: "public: virtual char const * __ptr64 __cdecl CCatalogParserV1::GetSubjectAlgorithmOID(void)const __ptr64" ?GetSubjectAlgorithmOID@CCatalogParserV1@@UEBAPEBDXZ
0x18003E1C0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800313B0: WhqlEnforcementEnabled
0x18001DDE8: "int __cdecl _CompareAuthKeyId2(unsigned long,struct _CERT_CONTEXT const * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?_CompareAuthKeyId2@@YAHKPEBU_CERT_CONTEXT@@0@Z
0x180055160: "__cdecl _imp_IsBufferCleanOfInvalidMarkers" __imp_IsBufferCleanOfInvalidMarkers
0x180043950: "| |.. cbStruct: " ??_C@_1FI@MAJNHEJE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180005AA0: "protected: virtual int __cdecl SIPObject_::PutMessageInFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long * __ptr64) __ptr64" ?PutMessageInFile@SIPObject_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@PEAK@Z
0x18003DEA8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180044AC0: "crypt32.dll" ??_C@_0M@DNEEGAAA@crypt32?4dll?$AA@
0x180001340: CryptCATAdminReleaseCatalogContext
0x18003DD58: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18003DD70: api-ms-win-core-libraryloader-l1-2-1_NULL_THUNK_DATA
0x180044260: "| | +.. casCertChain[%d]: " ??_C@_1EA@PDNDGNDJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAc?$AAa?$AAs?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180042E00: "| |.. Store[%02.2d]: " ??_C@_1GC@NNGDGGEI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003D960: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x18003D938: "__cdecl _imp_CertGetEnhancedKeyUsage" __imp_CertGetEnhancedKeyUsage
0x18004C3E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000383C: "int __cdecl _VerifyMessageSignatureWithChainPubKeyParaInheritance(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,struct _CERT_CONTEXT const * __ptr64)" ?_VerifyMessageSignatureWithChainPubKeyParaInheritance@@YAHPEAU_CRYPT_PROVIDER_DATA@@KPEBU_CERT_CONTEXT@@@Z
0x1800417A8: "SoftpubFreeDefUsageCallData" ??_C@_0BM@EDDKBONN@SoftpubFreeDefUsageCallData?$AA@
0x18003DAA0: "__cdecl _imp_ASN1_FreeEncoded" __imp_ASN1_FreeEncoded
0x180044360: "| | | | |.. dwCertEncodi" ??_C@_1GE@NELDMLJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAC?$AAe?$AAr?$AAt?$AAE?$AAn?$AAc?$AAo?$AAd?$AAi@
0x18003DC48: "__cdecl _imp_GetFileInformationByHandle" __imp_GetFileInformationByHandle
0x180035640: "private: int __cdecl Stack_::InitGetStackIfNecessary(void) __ptr64" ?InitGetStackIfNecessary@Stack_@@AEAAHXZ
0x18000FD89: atol
0x18003ECD8: "Unspecified Name" ??_C@_1CC@GHBDBNDL@?$AAU?$AAn?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?5?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180045388: "Boot\EFI\WinSiPolicy.p7b" ??_C@_1DC@NIONHHFF@?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003DBF0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000F470: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180041130: "WinTrustProviderClientInitialize" ??_C@_0CB@BIHGIDGJ@WinTrustProviderClientInitialize@
0x18003D888: "__cdecl _imp_CertGetNameStringW" __imp_CertGetNameStringW
0x180041818: "cryptui.dll" ??_C@_0M@HMNGNIHH@cryptui?4dll?$AA@
0x18003F660: "__cdecl _sz_api_ms_win_service_private_l1_1_0_dll" __sz_api_ms_win_service_private_l1_1_0_dll
0x18003DC98: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180021428: HRESULTFromLastErrorError
0x18003E010: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x180040E58: "WVTAsn1CatMemberInfoDecode" ??_C@_0BL@DJNEBIGA@WVTAsn1CatMemberInfoDecode?$AA@
0x18001E490: TrustFindIssuerCertificate
0x18002AF60: "public: virtual void * __ptr64 __cdecl SIPObject_::`vector deleting destructor'(unsigned int) __ptr64" ??_ESIPObject_@@UEAAPEAXI@Z
0x180055020: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x180028770: "protected: virtual int __cdecl SIPObjectPE_::PutMessageInFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long * __ptr64) __ptr64" ?PutMessageInFile@SIPObjectPE_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@PEAK@Z
0x1800501B0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18001031C: "__cdecl _tailMerge_ext_ms_win_advapi32_safer_l1_1_0_dll" __tailMerge_ext_ms_win_advapi32_safer_l1_1_0_dll
0x180011624: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18001BDB0: WVTAsn1SpcIndirectDataContentEncode
0x18000F420: "public: virtual int __cdecl SIPObjectPE_::GetCaps(struct _SIP_CAP_SET_V3 * __ptr64) __ptr64" ?GetCaps@SIPObjectPE_@@UEAAHPEAU_SIP_CAP_SET_V3@@@Z
0x180032DC0: SrpCheckSmartlockerEAandProcessToken
0x1800269D0: CatalogFindHashAlgorithm
0x18002050C: "public: void __cdecl ViewInfo::MapPartialFile(void) __ptr64" ?MapPartialFile@ViewInfo@@QEAAXXZ
0x180040F90: "CryptRetrieveObjectByUrlW" ??_C@_0BK@HDCHPLEH@CryptRetrieveObjectByUrlW?$AA@
0x18003E0F8: "__cdecl _imp_memcmp" __imp_memcmp
0x180007AF0: CryptCATAllocSortedMemberInfo
0x180031588: "long __cdecl CheckSealingSignatureTrust_(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _SEALING_SIGNATURE_ATTRIBUTE const * __ptr64)" ?CheckSealingSignatureTrust_@@YAJPEAU_CRYPT_PROVIDER_DATA@@PEBU_SEALING_SIGNATURE_ATTRIBUTE@@@Z
0x180002A20: CryptCATEnumerateCatAttr
0x18002D850: GetAuthenticodeSha256Hash
0x18001FE10: "struct _LOADED_PROVIDER_V1 * __ptr64 __cdecl Version1_RegLoadProvider(struct HKEY__ * __ptr64,char * __ptr64,struct _GUID * __ptr64)" ?Version1_RegLoadProvider@@YAPEAU_LOADED_PROVIDER_V1@@PEAUHKEY__@@PEADPEAU_GUID@@@Z
0x180045720: "Kernel_DriverSiStatus" ??_C@_1CM@LPNFHHGN@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18003D868: "__cdecl _imp_CertIsWeakHash" __imp_CertIsWeakHash
0x180033BA4: "void __cdecl ErrLog_LogPrintfW(unsigned short * __ptr64,int,unsigned short const * __ptr64,...)" ?ErrLog_LogPrintfW@@YAXPEAGHPEBGZZ
0x1800412F8: "Name" ??_C@_19DINFBLAK@?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1800300E0: "void __cdecl PrintfCertStruct(void * __ptr64,int,struct _CRYPT_PROVIDER_CERT * __ptr64,int)" ?PrintfCertStruct@@YAXPEAXHPEAU_CRYPT_PROVIDER_CERT@@H@Z
0x180035418: "public: virtual __cdecl Stack_::~Stack_(void) __ptr64" ??1Stack_@@UEAA@XZ
0x180036330: SIPolicyFileRuleSearchCompare
0x18001A760: WTHelperCertIsSelfSigned
0x180033280: "struct _CERT_CONTEXT const * __ptr64 __cdecl FindCertificateInStore(void * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?FindCertificateInStore@@YAPEBU_CERT_CONTEXT@@PEAXPEBU1@@Z
0x18001A9B4: DeallocateCertChain
0x180029258: "private: int __cdecl SIPObjectCAB_::CheckFolders(struct CFHEADER const & __ptr64,struct CFRESERVE const & __ptr64,struct CFFOLDER * __ptr64 * __ptr64) __ptr64" ?CheckFolders@SIPObjectCAB_@@AEAAHAEBUCFHEADER@@AEBUCFRESERVE@@PEAPEAUCFFOLDER@@@Z
0x180021D80: CryptCATGetMemberInfo
0x18000E468: "void __cdecl HashpPadHash<struct BCRYPT_HASH_CTXT * __ptr64>(struct BCRYPT_HASH_CTXT * __ptr64,unsigned long,unsigned long)" ??$HashpPadHash@PEAUBCRYPT_HASH_CTXT@@@@YAXPEAUBCRYPT_HASH_CTXT@@KK@Z
0x18003DBA8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x180041B48: "+-- pWintrustData: " ??_C@_1CK@PHNBIADA@?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAW?$AAi?$AAn?$AAt?$AAr?$AAu?$AAs?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x1800450F0: "SkuSiPolicyUpdateSigners" ??_C@_1DC@FBLHHCNL@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x180055108: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x1800457E8: "PolicyInfo" ??_C@_1BG@CLIFBBMA@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x180033E4C: "void __cdecl _WriteErrorOut(unsigned short * __ptr64,char * __ptr64,int)" ?_WriteErrorOut@@YAXPEAGPEADH@Z
0x18001A644: "public: struct _CATALOG_CACHED_STATE * __ptr64 __cdecl CCatalogCache::FindCachedState(struct _WINTRUST_DATA * __ptr64,struct _WIN32_FILE_ATTRIBUTE_DATA * __ptr64) __ptr64" ?FindCachedState@CCatalogCache@@QEAAPEAU_CATALOG_CACHED_STATE@@PEAU_WINTRUST_DATA@@PEAU_WIN32_FILE_ATTRIBUTE_DATA@@@Z
0x18003E058: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180022420: CryptCATPutMemberInfo
0x18003D920: "__cdecl _imp_CertCompareCertificateName" __imp_CertCompareCertificateName
0x180040BD8: "1.3.6.1.4.1.311.12.2.1" ??_C@_0BH@IIAHIKPK@1?43?46?41?44?41?4311?412?42?41?$AA@
0x18003D8A8: "__cdecl _imp_CertFindCertificateInStore" __imp_CertFindCertificateInStore
0x18003D810: "__cdecl _imp_CertDeleteCertificateFromStore" __imp_CertDeleteCertificateFromStore
0x18003E9E8: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x18001BC00: WVTAsn1SpcIndirectDataContentDecode
0x18003F438: "1.3.6.1.4.1.311.2.4.2" ??_C@_0BG@LBGFKEHN@1?43?46?41?44?41?4311?42?44?42?$AA@
0x1800508A8: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x18003EE18: "catroot" ??_C@_1BA@NDNLDEPN@?$AAc?$AAa?$AAt?$AAr?$AAo?$AAo?$AAt?$AA?$AA@
0x18001040E: "__cdecl _imp_load_GetDesktopWindow" __imp_load_GetDesktopWindow
0x18004C600: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18003DDD8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003180: SoftpubInitialize
0x180050890: "__cdecl _hmod__api_ms_win_service_private_l1_1_0_dll" __hmod__api_ms_win_service_private_l1_1_0_dll
0x18003DF18: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18003D8A0: "__cdecl _imp_CertVerifyCertificateChainPolicy" __imp_CertVerifyCertificateChainPolicy
0x180042A90: "|.. dwError: " ??_C@_1GE@BPFAIGEJ@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800270B0: CatalogDecodeIndirectData
0x180050188: g_CatalogParserV2
0x180050190: g_CatalogParserV1
0x180041380: "false" ??_C@_1M@HLGKFCJM@?$AAf?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x180041CA0: "| |.. fdRevocationChecks: " ??_C@_1FI@BIIIPNCF@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAd?$AAR?$AAe?$AAv?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AAC?$AAh?$AAe?$AAc?$AAk?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800087E0: "public: virtual void * __ptr64 __cdecl Stack_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GStack_@@UEAAPEAXI@Z
0x18003DB28: "__cdecl _imp_ASN1bitstring_free" __imp_ASN1bitstring_free
0x180041930: "Software\Microsoft\Cryptography\" ??_C@_0EA@ILKPLID@Software?2Microsoft?2Cryptography?2@
0x180041218: "1.3.6.1.4.1.311.10.41.1" ??_C@_0BI@JMGCFMDH@1?43?46?41?44?41?4311?410?441?41?$AA@
0x18003E218: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x18000D5F8: "public: int __cdecl CATALOG_HASHES_LIST_::add(struct CATALOG_HASHES_<2> const & __ptr64) __ptr64" ?add@CATALOG_HASHES_LIST_@@QEAAHAEBU?$CATALOG_HASHES_@$01@@@Z
0x1800459C8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180028DD0: "protected: virtual int __cdecl SIPObjectFlat_::UnmapFile(void) __ptr64" ?UnmapFile@SIPObjectFlat_@@MEAAHXZ
0x18000FE90: "__cdecl ValidateImageBase" _ValidateImageBase
0x180007F80: "class SIPObject_ * __ptr64 __cdecl mssip_CreateSubjectObject(struct _GUID const * __ptr64)" ?mssip_CreateSubjectObject@@YAPEAVSIPObject_@@PEBU_GUID@@@Z
0x18003D718: "__cdecl _imp_I_CertDiagControl" __imp_I_CertDiagControl
0x18003DDC0: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x180020594: "public: bool __cdecl ViewInfo::initialize(unsigned short const * __ptr64) __ptr64" ?initialize@ViewInfo@@QEAA_NPEBG@Z
0x1800314E4: "int __cdecl _NoContentWrap(unsigned char const * __ptr64,unsigned long)" ?_NoContentWrap@@YAHPEBEK@Z
0x18001F500: WTHelperGetKnownUsages
0x18003331C: "private: long __cdecl CTrustDB::Init(int) __ptr64" ?Init@CTrustDB@@AEAAJH@Z
0x18004143C: "{" ??_C@_13GCIFAHHO@?$AA?$HL?$AA?$AA@
0x18003F610: IID_IUnknown
0x18003DD30: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x18001058C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18003DDB0: "__cdecl _imp_GetEnvironmentVariableA" __imp_GetEnvironmentVariableA
0x180040B78: "WVTAsn1SpcFinancialCriteriaInfoE" ??_C@_0CG@OGOKOMBF@WVTAsn1SpcFinancialCriteriaInfoE@
0x18000D870: "public: virtual char const * __ptr64 __cdecl CCatalogParserV2::GetSubjectAlgorithmOID(void)const __ptr64" ?GetSubjectAlgorithmOID@CCatalogParserV2@@UEBAPEBDXZ
0x18003DB70: "__cdecl _imp_RpcEpResolveBinding" __imp_RpcEpResolveBinding
0x1800370E4: SIPolicyGetPolicyType
0x18001AB60: WintrustDllUnregisterServer
0x18000CAA0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18003EEC8: "$DLL" ??_C@_19FOEMNFKG@?$AA$?$AAD?$AAL?$AAL?$AA?$AA@
0x18000DB90: "protected: virtual int __cdecl SIPObject_::UnmapFile(void) __ptr64" ?UnmapFile@SIPObject_@@MEAAHXZ
0x18000DBCC: "public: virtual __cdecl SIPObject_::~SIPObject_(void) __ptr64" ??1SIPObject_@@UEAA@XZ
0x180044880: "| | | |.. pTrustListContex" ??_C@_1FK@GJAOMIPL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAT?$AAr?$AAu?$AAs?$AAt?$AAL?$AAi?$AAs?$AAt?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx@
0x18003E040: "__cdecl _imp_AddAccessAllowedAceEx" __imp_AddAccessAllowedAceEx
0x180041840: "2.5.4.3" ??_C@_07FBAAFAAA@2?45?44?43?$AA@
0x1800430D0: "| +.. psIndirectData: " ??_C@_1FK@NKGDFKHD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAI?$AAn?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180042E70: "|.. hMsg: " ??_C@_1FK@KIDDEIII@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAh?$AAM?$AAs?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003F938: SrpEventProviderId
0x180045898: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180041190: "\StringFileInfo\040904E4\%s" ??_C@_1DI@PGCCIBMB@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA0?$AA4?$AA0?$AA9?$AA0?$AA4?$AAE?$AA4?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18003DA90: "__cdecl _imp_ASN1BERDecNotEndOfContents" __imp_ASN1BERDecNotEndOfContents
0x18000D880: "public: virtual char * __ptr64 __cdecl SIPObjectPE_::GetDataOIDHint(void) __ptr64" ?GetDataOIDHint@SIPObjectPE_@@UEAAPEADXZ
0x180044AF0: "1.3.6.1.4.1.311.10.3.2" ??_C@_0BH@FGFOBPFH@1?43?46?41?44?41?4311?410?43?42?$AA@
0x18003E238: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18004A820: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLN
0x180040FB0: "2.5.29.1" ??_C@_08JAHMKNEH@2?45?429?41?$AA@
0x180041620: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x18004C40C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18002261C: "long __cdecl StringCbCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCatW@@YAJPEAG_KPEBG@Z
0x180041530: "CryptSIPVerifyIndirectData" ??_C@_1DG@OGELOJCG@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAI?$AAP?$AAV?$AAe?$AAr?$AAi?$AAf?$AAy?$AAI?$AAn?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18003B020: "unsigned short const * __ptr64 __cdecl I_OidToCngAlgId(char * __ptr64)" ?I_OidToCngAlgId@@YAPEBGPEAD@Z
0x180044F88: "Kernel_SiStatus" ??_C@_1CA@DDIOBOG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1800400B8: "1.3.6.1.4.1.311.61.4.1" ??_C@_0BH@OOFPJJAG@1?43?46?41?44?41?4311?461?44?41?$AA@
0x180005104: "unsigned char * __ptr64 __cdecl SipGetHashValue(struct DIGEST_DATA * __ptr64,unsigned long * __ptr64)" ?SipGetHashValue@@YAPEAEPEAUDIGEST_DATA@@PEAK@Z
0x180042830: "| |.. dwFlags: " ??_C@_1GE@DCKHCFOH@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800334C0: "private: virtual long __cdecl CTrustDB::RemoveCert(struct _CERT_CONTEXT const * __ptr64) __ptr64" ?RemoveCert@CTrustDB@@EEAAJPEBU_CERT_CONTEXT@@@Z
0x180042230: "| +-- cbCaclulatedFileHash" ??_C@_1FI@BAPKLPCD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAc?$AAb?$AAC?$AAa?$AAc?$AAl?$AAu?$AAl?$AAa?$AAt?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AAH?$AAa?$AAs?$AAh@
0x18003EEAC: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18003DCB8: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18002C194: HTTPSRegisterServer
0x18003DD48: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x18001B3D0: "void __cdecl WVTAsn1InfoFree(int,void * __ptr64)" ?WVTAsn1InfoFree@@YAXHPEAX@Z
0x18003ECA0: "Microsoft Enhanced RSA and AES C" ??_C@_0DG@DGPPHCJL@Microsoft?5Enhanced?5RSA?5and?5AES?5C@
0x18003DF50: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18004A734: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180024B60: CryptCATCDFEnumMembersByCDFTagEx
0x180050A98: g_NumberOfSiPolicies
0x1800380E8: SIPolicyMatchOneFileRule
0x180034698: LIST_RemoveAll
0x18003D710: "__cdecl _imp_I_CryptReadTrustedPublisherDWORDValueFromRegistry" __imp_I_CryptReadTrustedPublisherDWORDValueFromRegistry
0x18003DEE8: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180050A20: hStoreEvent
0x180009740: CryptCATAdminEnumCatalogFromHash
0x18000F3C0: "protected: virtual unsigned long __cdecl SIPObjectPE_::ConvertSPCFlags(unsigned long) __ptr64" ?ConvertSPCFlags@SIPObjectPE_@@MEAAKK@Z
0x180042310: " |.. gSubject: " ??_C@_1FG@PEALAGMI@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAg?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DB48: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x18003E060: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x18003D930: "__cdecl _imp_CertAddStoreToCollection" __imp_CertAddStoreToCollection
0x18003D708: "__cdecl _imp_I_CryptGetDefaultCryptProv" __imp_I_CryptGetDefaultCryptProv
0x18000F750: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18003DAD0: "__cdecl _imp_ASN1_CreateModule" __imp_ASN1_CreateModule
0x18000CB50: "int __cdecl _CatAdminCalcHashFromFileHandle(struct CATALOG_SUPPORTED_HASH_ const * __ptr64,void * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long)" ?_CatAdminCalcHashFromFileHandle@@YAHPEBUCATALOG_SUPPORTED_HASH_@@PEAXPEAKPEAEKK@Z
0x18003E0F0: "__cdecl _imp__initterm" __imp__initterm
0x18003DB58: "__cdecl _imp_RpcStringBindingComposeW" __imp_RpcStringBindingComposeW
0x18002EEE0: FindCertsByIssuer
0x18004C588: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x1800413F8: "<HASH>" ??_C@_1O@MACGANIH@?$AA?$DM?$AAH?$AAA?$AAS?$AAH?$AA?$DO?$AA?$AA@
0x180045408: "Boot\EFI\UpdateWinSiPolicy.p7b" ??_C@_1DO@MLMGJHDE@?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003D858: "__cdecl _imp_CryptSIPRetrieveSubjectGuidForCatalogFile" __imp_CryptSIPRetrieveSubjectGuidForCatalogFile
0x1800454F0: "System32\CodeIntegrity\ATPSiPoli" ??_C@_1EO@HBNPPGDM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi@
0x18000D8A0: "protected: virtual void * __ptr64 __cdecl SIPObjectFlat_::GetMyStructure(struct SIP_SUBJECTINFO_ * __ptr64) __ptr64" ?GetMyStructure@SIPObjectFlat_@@MEAAPEAXPEAUSIP_SUBJECTINFO_@@@Z
0x1800100FB: "__cdecl _tailMerge_bcrypt_dll" __tailMerge_bcrypt_dll
0x18002AFA0: "long __cdecl BigFileHashMapViewOfFileCallback(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64)" ?BigFileHashMapViewOfFileCallback@@YAJPEAXKPEAKPEAPEAX1@Z
0x18003DBE8: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180005950: WTHelperProvDataFromStateData
0x1800336AC: Client_SSCatDBDeleteCatalog
0x1800042B0: WVTAddCertContext
0x18003D850: "__cdecl _imp_CertCreateContext" __imp_CertCreateContext
0x1800431E8: "TRUE" ??_C@_04HCDDPBNL@TRUE?$AA@
0x18004C5EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180041124: "$DLL" ??_C@_04DMKGDKOB@$DLL?$AA@
0x18002FCA0: SoftpubDllUnregisterServer
0x180035F38: RtlStringCbPrintfW
0x180045878: "InternalName" ??_C@_1BK@OCJLMIBB@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18002C6F4: "public: class std::tuple<long & __ptr64,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> > & __ptr64,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil> & __ptr64 __cdecl std::tuple<long & __ptr64,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> > & __ptr64,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil>::operator=<long,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> > >(class std::tuple<long,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil> &&) __ptr64" ??$?4JV?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@@?$tuple@AEAJAEAV?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@U_Nil@2@U32@U32@U32@U32@U32@@std@@QEAAAEAV01@$$QEAV?$tuple@JV?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@U_Nil@2@U32@U32@U32@U32@U32@@1@@Z
0x18001076D: "__cdecl _imp_load_QueryServiceConfigW" __imp_load_QueryServiceConfigW
0x18003D9B8: "__cdecl _imp_ASN1CEREncEndBlk" __imp_ASN1CEREncEndBlk
0x180041828: "CryptUIDlgCertMgr" ??_C@_0BC@KOAJPJHE@CryptUIDlgCertMgr?$AA@
0x1800508A0: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x18003E208: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x18000E748: "long __cdecl HashpHashMappedBytes<struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,unsigned long,struct _HASHLIB_LOADED_IMAGE * __ptr64,unsigned long,unsigned long)" ??$HashpHashMappedBytes@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@KPEAU_HASHLIB_LOADED_IMAGE@@KK@Z
0x180044D98: "catdbcli.cpp" ??_C@_0N@FACAEKG@catdbcli?4cpp?$AA@
0x180027124: CatalogEncodeIndirectData
0x180042F50: "| |.. pSip: " ??_C@_1FK@JGNENKPE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAS?$AAi?$AAp?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180010548: "__cdecl _imp_load_ImageAddCertificate" __imp_load_ImageAddCertificate
0x180040F08: "WVTAsn1SealingTimestampAttribute" ??_C@_0CH@BOLIJJPC@WVTAsn1SealingTimestampAttribute@
0x18001FC98: "struct _LOADED_PROVIDER_V1 * __ptr64 __cdecl Version1_LoadProvider(struct _GUID * __ptr64)" ?Version1_LoadProvider@@YAPEAU_LOADED_PROVIDER_V1@@PEAU_GUID@@@Z
0x18001F2B0: WTHelperCheckCertUsage
0x180032620: "struct _CERT_CONTEXT const * __ptr64 __cdecl _FindCounterSignersCert(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64)" ?_FindCounterSignersCert@@YAPEBU_CERT_CONTEXT@@PEAU_CRYPT_PROVIDER_DATA@@PEAU_CRYPTOAPI_BLOB@@1@Z
0x180055140: "__cdecl _imp_ImageAddCertificate" __imp_ImageAddCertificate
0x1800419C8: "2.5.29.19" ??_C@_09OGKMCFCE@2?45?429?419?$AA@
0x180044AA8: "1.2.840.113549.1.9.5" ??_C@_0BF@HLHJPPOD@1?42?4840?4113549?41?49?45?$AA@
0x180043070: "| |.. psSipCATSubjectInfo: " ??_C@_1FK@EMNLHNCA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAS?$AAi?$AAp?$AAC?$AAA?$AAT?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5@
0x180037160: SIPolicyInitialize
0x18003AAF8: "long __cdecl I_AddUnauthAttr(void * __ptr64,unsigned long,struct _CRYPT_ATTRIBUTE * __ptr64,int)" ?I_AddUnauthAttr@@YAJPEAXKPEAU_CRYPT_ATTRIBUTE@@H@Z
0x18004C434: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180040D08: "WVTAsn1SealingTimestampAttribute" ??_C@_0CH@NCAIGCIF@WVTAsn1SealingTimestampAttribute@
0x180001A90: "int __cdecl _WalkChain(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,unsigned long * __ptr64,int,unsigned long,int,int * __ptr64)" ?_WalkChain@@YAHPEAU_CRYPT_PROVIDER_DATA@@KPEAKHKHPEAH@Z
0x180044E08: "CatalogDB: %s: %s at line #%u en" ??_C@_0DK@MOJNLDOC@CatalogDB?3?5?$CFs?3?5?$CFs?5at?5line?5?$CD?$CFu?5en@
0x18003D978: "__cdecl _imp_CertComparePublicKeyInfo" __imp_CertComparePublicKeyInfo
0x18002BE54: "void * __ptr64 __cdecl GenericChainGetAdditionalStore(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GenericChainGetAdditionalStore@@YAPEAXPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18003D768: "__cdecl _imp_I_CryptCreateLruCache" __imp_I_CryptCreateLruCache
0x18001B4AC: "int __cdecl WVTAsn1SetObjId(char * __ptr64,struct tagASN1objectidentifier2_t * __ptr64)" ?WVTAsn1SetObjId@@YAHPEADPEAUtagASN1objectidentifier2_t@@@Z
0x180050B38: "int g_fLogErrorsToDebugger" ?g_fLogErrorsToDebugger@@3HA
0x18003E900: "1.3.6.1.5.5.7.3.2" ??_C@_0BC@FLKNCICB@1?43?46?41?45?45?47?43?42?$AA@
0x180050880: "__cdecl _hmod__USER32_dll" __hmod__USER32_dll
0x18003D990: CRYPT32_NULL_THUNK_DATA
0x180040238: "ROOT" ??_C@_19OLEIDBPB@?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18003E030: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180041F60: "| +-- pCatalog: <<< bad parame" ??_C@_1FG@HAPPDONN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?3?$AA?5?$AA?$DM?$AA?$DM?$AA?$DM?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe@
0x18003D8E0: "__cdecl _imp_CertGetIssuerCertificateFromStore" __imp_CertGetIssuerCertificateFromStore
0x180004140: LockFree
0x18000DFDC: "public: __cdecl HashAlgHandles::~HashAlgHandles(void) __ptr64" ??1HashAlgHandles@@QEAA@XZ
0x1800413A8: "HashAlgorithms" ??_C@_1BO@IDJIGHIP@?$AAH?$AAa?$AAs?$AAh?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAs?$AA?$AA@
0x1800508C0: "__cdecl _onexitend" __onexitend
0x180005390: WVTAddPrivateData
0x180045020: "System32\CodeIntegrity\RvkSiPoli" ??_C@_1EO@BOBBLDMB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi@
0x18002D128: "public: long __cdecl FileMapping::reset(void * __ptr64) __ptr64" ?reset@FileMapping@@QEAAJPEAX@Z
0x18002B3C0: "public: virtual int __cdecl SIPObject_::GetSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSignedDataMsg@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@KPEAKPEAE1@Z
0x180001D30: "long __cdecl HTTPSCertificateTrust(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?HTTPSCertificateTrust@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18000FFC5: "__cdecl unlock" _unlock
0x18003EF88: "1.3.6.1.4.1.311.12.1.3" ??_C@_0BH@KIIEEHJG@1?43?46?41?44?41?4311?412?41?43?$AA@
0x18004C420: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-1
0x180045540: "ATPSiPolicy.p7b" ??_C@_1CA@IJNICIBC@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18002C720: "public: __cdecl std::tuple<long,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil>::~tuple<long,class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil,struct std::_Nil>(void) __ptr64" ??1?$tuple@JV?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@U_Nil@2@U32@U32@U32@U32@U32@@std@@QEAA@XZ
0x18003E250: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180041A78: "C:\TRUSTPOL.TXT" ??_C@_1CA@DBLCGCLD@?$AAC?$AA?3?$AA?2?$AAT?$AAR?$AAU?$AAS?$AAT?$AAP?$AAO?$AAL?$AA?4?$AAT?$AAX?$AAT?$AA?$AA@
0x180043BD0: "| | |.. pMoreInfoButtonT" ??_C@_1FG@BBICPBEC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAM?$AAo?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AAT@
0x180010083: "__cdecl _imp_load_CryptGetHashParam" __imp_load_CryptGetHashParam
0x18003D280: g_EmptyString
0x180034760: CatUtil_CreateCTLContextFromFileName
0x180050A08: sProvLock
0x180024B20: CryptCATCDFEnumMembersByCDFTag
0x180055110: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x18003D900: "__cdecl _imp_CryptUnregisterOIDFunction" __imp_CryptUnregisterOIDFunction
0x18002A03C: "private: int __cdecl SIPObjectCAB_::ReadHeader(void) __ptr64" ?ReadHeader@SIPObjectCAB_@@AEAAHXZ
0x18002BBA0: "long __cdecl GenericChainFinalProv(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GenericChainFinalProv@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18001AD7C: "int __cdecl WVTAsn1GetCatMemberInfo(struct MemberInfo * __ptr64,unsigned long,struct _CAT_MEMBERINFO * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetCatMemberInfo@@YAHPEAUMemberInfo@@KPEAU_CAT_MEMBERINFO@@PEAPEAEPEAJ@Z
0x18003DC00: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18001B5A0: WVTAsn1CatMemberInfoDecode
0x1800459E0: "Microsoft Enhanced RSA and AES C" ??_C@_1GM@HFJPHMLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAd?$AA?5?$AAR?$AAS?$AAA?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAA?$AAE?$AAS?$AA?5?$AAC@
0x18003DDE0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000DD10: "protected: virtual unsigned char * __ptr64 __cdecl SIPObjectPE_::DigestFile(unsigned __int64,unsigned long,char * __ptr64,unsigned long * __ptr64) __ptr64" ?DigestFile@SIPObjectPE_@@MEAAPEAE_KKPEADPEAK@Z
0x18003DC70: "__cdecl _imp_GetFileAttributesExW" __imp_GetFileAttributesExW
0x180034A8C: I_CryptGetMaxHashBytesToMapRegValue
0x18003F1F0: "Software\Microsoft\Cryptography\" ??_C@_1HA@IFBEGDMK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18003DAC8: "__cdecl _imp_ASN1objectidentifier_free" __imp_ASN1objectidentifier_free
0x180050858: "__cdecl _hmod__bcrypt_dll" __hmod__bcrypt_dll
0x18003DA50: "__cdecl _imp_ASN1BEREncNull" __imp_ASN1BEREncNull
0x180021B30: CryptCATEnumerateMember
0x18003C500: "const CCatalogParserV2::`vftable'" ??_7CCatalogParserV2@@6B@
0x18003E0A8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18003B068: "void * __ptr64 __cdecl I_OpenBlob(unsigned long,unsigned char * __ptr64,unsigned long)" ?I_OpenBlob@@YAPEAXKPEAEK@Z
0x18003B0F8: "long __cdecl I_OrderSignatures(void * __ptr64 * __ptr64,unsigned long)" ?I_OrderSignatures@@YAJPEAPEAXK@Z
0x18002DE74: "unsigned long __cdecl _CheckVersionNEW(struct _OSVERSIONINFOW * __ptr64,unsigned short * __ptr64,int)" ?_CheckVersionNEW@@YAKPEAU_OSVERSIONINFOW@@PEAGH@Z
0x180005010: "protected: virtual unsigned char * __ptr64 __cdecl SIPObject_::DigestFile(unsigned __int64,unsigned long,char * __ptr64,unsigned long * __ptr64) __ptr64" ?DigestFile@SIPObject_@@MEAAPEAE_KKPEADPEAK@Z
0x1800435D0: "| |.. pfnInitialize: " ??_C@_1FK@LPECLKBJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180040AA8: "WVTAsn1SpcSigInfoEncode" ??_C@_0BI@BLFEGNBF@WVTAsn1SpcSigInfoEncode?$AA@
0x180039498: SIPolicyQueryOneSecurityPolicy
0x18003E148: "__cdecl _imp_wcstol" __imp_wcstol
0x1800410A0: "Signer" ??_C@_1O@KPIAGFJJ@?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AA?$AA@
0x18003DA20: "__cdecl _imp_ASN1BEREncOpenType" __imp_ASN1BEREncOpenType
0x18002B63C: "protected: int __cdecl SIPObject_::SeekAndReadFile(unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?SeekAndReadFile@SIPObject_@@IEAAHKPEAEK@Z
0x18002CC30: "private: long __cdecl SiChainInfo::FillSignerInfoFromCert(struct _CERT_CONTEXT const * __ptr64,struct _SI_SIGNER_INFOW & __ptr64) __ptr64" ?FillSignerInfoFromCert@SiChainInfo@@AEAAJPEBU_CERT_CONTEXT@@AEAU_SI_SIGNER_INFOW@@@Z
0x18003E228: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180036158: SIPolicyConvertData
0x1800449C0: "System\CurrentControlSet\Control" ??_C@_1FG@OJOKHPGO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x1800550F0: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x18003D720: "__cdecl _imp_I_CryptGetAsn1Decoder" __imp_I_CryptGetAsn1Decoder
0x180044BE0: "System\CurrentControlSet\Control" ??_C@_1IC@HFOMGEHN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180045318: "WinSi" ??_C@_1M@OIGONFPA@?$AAW?$AAi?$AAn?$AAS?$AAi?$AA?$AA@
0x18003E958: "__cdecl gPESubject" _gPESubject
0x18003E968: "1.3.6.1.4.1.311.3.3.1" ??_C@_0BG@MMMDBMKC@1?43?46?41?44?41?4311?43?43?41?$AA@
0x18003D9C0: "__cdecl _imp_ASN1BERDecOpenType2" __imp_ASN1BERDecOpenType2
0x180041060: "CallbackFreeFunction" ??_C@_0BF@IGEKHKGJ@CallbackFreeFunction?$AA@
0x180040CF0: "1.3.6.1.4.1.311.2.4.4" ??_C@_0BG@OHDPADPL@1?43?46?41?44?41?4311?42?44?44?$AA@
0x18003F450: "FileDescription" ??_C@_1CA@JGBAIPOO@?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003DFB8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18003E278: "__cdecl _xi_a" __xi_a
0x180040BF0: "WVTAsn1CatNameValueEncode" ??_C@_0BK@HEFLGBCC@WVTAsn1CatNameValueEncode?$AA@
0x18000E4C4: "long __cdecl HashpInitHash(struct BCRYPT_HASH_CTXT * __ptr64,unsigned long * __ptr64)" ?HashpInitHash@@YAJPEAUBCRYPT_HASH_CTXT@@PEAK@Z
0x1800277F0: InboxCryptSIPGetSignedDataMsg
0x18003DFB0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180044E50: "CatalogDB: %s: File #%u at line " ??_C@_0EA@NIMOEKNP@CatalogDB?3?5?$CFs?3?5File?5?$CD?$CFu?5at?5line?5@
0x18003DBB0: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x18000D850: "protected: virtual int __cdecl SIPObjectFlat_::PutMessageInFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long * __ptr64) __ptr64" ?PutMessageInFile@SIPObjectFlat_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@PEAK@Z
0x18003DBC8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180041D00: "| |.. dwUnionChoice: " ??_C@_1FI@FKMEHGNC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAU?$AAn?$AAi?$AAo?$AAn?$AAC?$AAh?$AAo?$AAi?$AAc?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180041328: "CatalogVersion" ??_C@_1BO@DCADNBCN@?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18003E150: "__cdecl _imp__itow_s" __imp__itow_s
0x18003E1A8: "__cdecl _imp__unlock" __imp__unlock
0x18003DA00: "__cdecl _imp_ASN1BERDecNull" __imp_ASN1BERDecNull
0x1800410D8: "System\CurrentControlSet\Service" ??_C@_0DK@PJHKLBKJ@System?2CurrentControlSet?2Service@
0x180002D50: "long __cdecl _CheckTrustedCodeHash(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_CheckTrustedCodeHash@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x180044E90: "CatalogDB: %s: %S " ??_C@_0BE@GGAPKGFP@CatalogDB?3?5?$CFs?3?5?$CFS?$AN?6?$AA@
0x18003E8B8: "2.16.840.1.113730.4.1" ??_C@_0BG@OKBPPGBB@2?416?4840?41?4113730?44?41?$AA@
0x180027DA0: mssip32DllUnregisterServer
0x180041D60: "| +-- pFile: <<< bad parameter" ??_C@_1FA@LAOHLGBE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?3?$AA?5?$AA?$DM?$AA?$DM?$AA?$DM?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr@
0x180008D50: WTHelperGetFileName
0x18003480C: CatUtil_NoContentMsgDecode
0x18003E0B8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000EB68: "long __cdecl HashRetrieveHashLength(void * __ptr64,unsigned long * __ptr64)" ?HashRetrieveHashLength@@YAJPEAXPEAK@Z
0x18003D6E0: "__cdecl _imp_I_CryptGetTls" __imp_I_CryptGetTls
0x180050B4C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprgifhgUxlnnlmUlyquivUznwGEUtolyzoOlyq@authclib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUkprgifhgUxlnnlmUlyquivUznwGEUtolyzoOlyq@authclib
0x18002E17C: "int __cdecl _ValidCatAttr(struct CRYPTCATATTRIBUTE_ * __ptr64)" ?_ValidCatAttr@@YAHPEAUCRYPTCATATTRIBUTE_@@@Z
0x18000D890: "public: virtual char * __ptr64 __cdecl SIPObjectPE_::GetDataObjectID(void) __ptr64" ?GetDataObjectID@SIPObjectPE_@@UEAAPEADXZ
0x180007E30: "public: virtual void * __ptr64 __cdecl SIPObjectFlat_::`vector deleting destructor'(unsigned int) __ptr64" ??_ESIPObjectFlat_@@UEAAPEAXI@Z
0x18003F3F0: "CryptSvc" ??_C@_1BC@CALJKBMN@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAv?$AAc?$AA?$AA@
0x18001CA40: WVTAsn1SpcStatementTypeDecode
0x180044FE0: "RvkSiPolicyUpdateSigners" ??_C@_1DC@EHMFLKGA@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x180045070: "RvkSiPolicy.p7b" ??_C@_1CA@OGBGGNOP@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003F4E0: "2.16.840.1.101.3.4.2.1" ??_C@_0BH@NLFGIGEG@2?416?4840?41?4101?43?44?42?41?$AA@
0x18003D8F8: "__cdecl _imp_CryptRegisterOIDFunction" __imp_CryptRegisterOIDFunction
0x180031ABC: "void __cdecl I_VerifyCounterSignature(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CRYPT_PROVIDER_SGNR * __ptr64,unsigned long,struct _CRYPT_ATTRIBUTE * __ptr64)" ?I_VerifyCounterSignature@@YAXPEAU_CRYPT_PROVIDER_DATA@@PEAU_CRYPT_PROVIDER_SGNR@@KPEAU_CRYPT_ATTRIBUTE@@@Z
0x18003EDB8: "__cdecl gCATSubject" _gCATSubject
0x180055080: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18002AD60: "public: virtual void * __ptr64 __cdecl SIPObjectCatalog_::`vector deleting destructor'(unsigned int) __ptr64" ??_ESIPObjectCatalog_@@UEAAPEAXI@Z
0x180045350: "WinSiPolicyUpdateSigners" ??_C@_1DC@OCKBKPP@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x18001B7F0: WVTAsn1IntentToSealAttributeEncode
0x180029E20: "protected: virtual int __cdecl SIPObjectCAB_::GetMessageFromFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetMessageFromFile@SIPObjectCAB_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@KPEAK@Z
0x18003E198: "__cdecl _imp__ltoa" __imp__ltoa
0x18003DA08: "__cdecl _imp_ASN1charstring_free" __imp_ASN1charstring_free
0x18001041A: "__cdecl _tailMerge_user32_dll" __tailMerge_user32_dll
0x180040300: "1.3.6.1.5.5.7.3.8" ??_C@_0BC@KBECMAKL@1?43?46?41?45?45?47?43?48?$AA@
0x18003EEB0: "$Function" ??_C@_1BE@LPCCLKFG@?$AA$?$AAF?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x18003E1F0: "__cdecl _imp_NtQuerySecurityAttributesToken" __imp_NtQuerySecurityAttributesToken
0x18001ACF4: "void __cdecl WVTAsn1GetAlgorithm(struct AlgorithmIdentifier * __ptr64,unsigned long,struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetAlgorithm@@YAXPEAUAlgorithmIdentifier@@KPEAU_CRYPT_ALGORITHM_IDENTIFIER@@PEAPEAEPEAJ@Z
0x18000D8A0: "protected: virtual void * __ptr64 __cdecl SIPObjectPE_::GetMyStructure(struct SIP_SUBJECTINFO_ * __ptr64) __ptr64" ?GetMyStructure@SIPObjectPE_@@MEAAPEAXPEAUSIP_SUBJECTINFO_@@@Z
0x180042910: "| +.. ***Unknown structure" ??_C@_1FG@HFBDHLK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AAs?$AAt?$AAr?$AAu?$AAc?$AAt?$AAu?$AAr?$AAe@
0x18002C07C: GenericChainRegisterServer
0x18003ED80: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18004C4E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800013D0: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x18001C810: WVTAsn1SpcSpOpusInfoDecode
0x18003DD90: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18002A368: "private: int __cdecl SIPObjectCAB_::ReserveSignedData(unsigned long) __ptr64" ?ReserveSignedData@SIPObjectCAB_@@AEAAHK@Z
0x18000FBD8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000EC74: "void __cdecl WVTAsn1FreeSpcLink(struct SpcLink * __ptr64)" ?WVTAsn1FreeSpcLink@@YAXPEAUSpcLink@@@Z
0x18002D074: "public: void __cdecl std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >::reset(struct SiPolicies * __ptr64) __ptr64" ?reset@?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@QEAAXPEAUSiPolicies@@@Z
0x1800508D8: "__cdecl pRawDllMain" _pRawDllMain
0x1800427A0: "| +-- pCert: " ??_C@_1CC@HMJEPJCA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAC?$AAe?$AAr?$AAt?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180031E4C: "void __cdecl I_VerifyRfc3161CounterSignature(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CRYPT_PROVIDER_SGNR * __ptr64,unsigned long,struct _CRYPT_ATTRIBUTE * __ptr64,enum Rfc3161Timestamp::Enum)" ?I_VerifyRfc3161CounterSignature@@YAXPEAU_CRYPT_PROVIDER_DATA@@PEAU_CRYPT_PROVIDER_SGNR@@KPEAU_CRYPT_ATTRIBUTE@@W4Enum@Rfc3161Timestamp@@@Z
0x1800429D0: "|.. pgActionID: " ??_C@_1FG@OPHAKOCE@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAg?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAI?$AAD?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003D6F0: "__cdecl _imp_I_CryptFreeTls" __imp_I_CryptFreeTls
0x1800106EE: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x18003E188: "__cdecl _imp_towupper" __imp_towupper
0x18003DD00: "__cdecl _imp_FindResourceExA" __imp_FindResourceExA
0x18003DFD8: api-ms-win-core-version-l1-1-0_NULL_THUNK_DATA
0x18003F520: "__cdecl _sz_api_ms_win_security_lsalookup_l2_1_0_dll" __sz_api_ms_win_security_lsalookup_l2_1_0_dll
0x1800117F6: strcmp
0x18002FFDC: "void __cdecl GetStringDateTime(struct _FILETIME * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?GetStringDateTime@@YAXPEAU_FILETIME@@PEAG1@Z
0x18001AA60: DllUnregisterServer
0x180040BA0: "1.3.6.1.4.1.311.2.1.11" ??_C@_0BH@CCPOFOLO@1?43?46?41?44?41?4311?42?41?411?$AA@
0x180040F30: "CryptDllEncodeObject" ??_C@_0BF@CPKFJHDJ@CryptDllEncodeObject?$AA@
0x180043810: "| |.. pfnTestFinalPolicy: " ??_C@_1FK@HEAPPCNL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAT?$AAe?$AAs?$AAt?$AAF?$AAi?$AAn?$AAa?$AAl?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180010095: "__cdecl _imp_load_CryptDestroyHash" __imp_load_CryptDestroyHash
0x18001AB6C: "__cdecl TlgDefineProvider_annotation__Tlgg_hLogProviderProv" _TlgDefineProvider_annotation__Tlgg_hLogProviderProv
0x18000D910: "public: virtual char * __ptr64 __cdecl SIPObjectCAB_::GetDataOIDHint(void) __ptr64" ?GetDataOIDHint@SIPObjectCAB_@@UEAAPEADXZ
0x1800105D8: "__cdecl _tailMerge_api_ms_win_service_private_l1_1_0_dll" __tailMerge_api_ms_win_service_private_l1_1_0_dll
0x18003E1D8: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180041440: "}" ??_C@_13EHOOFIKC@?$AA?$HN?$AA?$AA@
0x18001079D: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x18003F6C0: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x18000F390: "void __cdecl WVTAsn1SetBMP(unsigned short * __ptr64,struct tagASN1char16string_t * __ptr64)" ?WVTAsn1SetBMP@@YAXPEAGPEAUtagASN1char16string_t@@@Z
0x18003F690: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x180025B0C: "int __cdecl CatalogFillCatAttr(struct CRYPTCATSTORE_ * __ptr64,struct _CERT_EXTENSION * __ptr64)" ?CatalogFillCatAttr@@YAHPEAUCRYPTCATSTORE_@@PEAU_CERT_EXTENSION@@@Z
0x18003F260: "Software\Microsoft\Cryptography\" ??_C@_1HO@DHBMJIGA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180043130: "|.. csSigners: " ??_C@_1FI@GKNFDFIK@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAs?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18000F4B0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18002643C: CatalogLoadSortedFileData
0x180043B10: "| | |.. pYesButtonText: " ??_C@_1FG@JFOPCKKF@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAY?$AAe?$AAs?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AAT?$AAe?$AAx?$AAt?$AA?3?$AA?5@
0x1800058B0: "int __cdecl DigestFileData(void * __ptr64,unsigned char const * __ptr64,unsigned long)" ?DigestFileData@@YAHPEAXPEBEK@Z
0x1800101B0: "__cdecl _imp_load_BCryptHashData" __imp_load_BCryptHashData
0x18002A588: "private: int __cdecl SIPObjectCAB_::SetFilePointerRelative(long) __ptr64" ?SetFilePointerRelative@SIPObjectCAB_@@AEAAHJ@Z
0x18003DFD0: "__cdecl _imp_VerQueryValueW" __imp_VerQueryValueW
0x18003E200: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x18004C45C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180003100: checkGetErrorBasedOnStepErrors
0x180041FE0: "| |.. dwCatalogVersion: " ??_C@_1FM@ONFIDCL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?3?$AA?5?$AA?5?$AA?5@
0x180002B30: SoftpubCallUI
0x180040DC8: "WVTAsn1SpcMinimalCriteriaInfoDec" ??_C@_0CE@BIOLPKMA@WVTAsn1SpcMinimalCriteriaInfoDec@
0x18003DF48: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18003E190: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x18000F9F0: "__cdecl _security_check_cookie" __security_check_cookie
0x18004191C: "ROOT" ??_C@_04BNGIIOIP@ROOT?$AA@
0x18001F4D0: WTHelperGetFileHandle
0x18003E270: "__cdecl _xc_z" __xc_z
0x180003410: IsWeakHashObjectIdentifier
0x1800264EC: CatalogSaveP7UData
0x18004C3D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18003C780: rgszDriverUsages
0x18003DE10: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180041768: "SoftpubCleanup" ??_C@_1BO@MCNELEA@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?$AA@
0x180041678: "SoftpubLoadMessage" ??_C@_1CG@FGMELDMO@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAL?$AAo?$AAa?$AAd?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x18003DD38: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18003DB30: MSASN1_NULL_THUNK_DATA
0x1800451A0: "System32\CodeIntegrity\UpdateSiP" ??_C@_1FE@IIJKIHJK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAP@
0x18002BA00: "long __cdecl GenericChainDefaultPolicyCallback(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,unsigned long,unsigned long,struct _WTD_GENERIC_CHAIN_POLICY_SIGNER_INFO * __ptr64 * __ptr64,void * __ptr64)" ?GenericChainDefaultPolicyCallback@@YAJPEAU_CRYPT_PROVIDER_DATA@@KKKPEAPEAU_WTD_GENERIC_CHAIN_POLICY_SIGNER_INFO@@PEAX@Z
0x180040318: "1.3.6.1.4.1.311.10.3.13" ??_C@_0BI@DHEEBCB@1?43?46?41?44?41?4311?410?43?413?$AA@
0x18001B074: "int __cdecl WVTAsn1GetSpcLink(struct SpcLink * __ptr64,unsigned long,struct SPC_LINK_ * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetSpcLink@@YAHPEAUSpcLink@@KPEAUSPC_LINK_@@PEAPEAEPEAJ@Z
0x18003DF70: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x180044020: "| |.. dwSignerType: " ??_C@_1GE@PPHKEMLN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180050870: "__cdecl _hmod__ext_ms_win_advapi32_safer_l1_1_0_dll" __hmod__ext_ms_win_advapi32_safer_l1_1_0_dll
0x180024AC0: CryptCATCDFEnumMembers
0x180041418: "ALTSIPID" ??_C@_1BC@DKINFEBJ@?$AAA?$AAL?$AAT?$AAS?$AAI?$AAP?$AAI?$AAD?$AA?$AA@
0x180036B90: SIPolicyFindScenarioFileRules
0x180026E00: "public: virtual int __cdecl CCatalogParserV1::ReallyDecodeMemberInfo(struct CRYPTCATSTORE_ const * __ptr64,struct CRYPTCATMEMBER_ * __ptr64,struct _CRYPTOAPI_BLOB const * __ptr64)const __ptr64" ?ReallyDecodeMemberInfo@CCatalogParserV1@@UEBAHPEBUCRYPTCATSTORE_@@PEAUCRYPTCATMEMBER_@@PEBU_CRYPTOAPI_BLOB@@@Z
0x18003CC70: "const SIPObjectCatalog_::`vftable'" ??_7SIPObjectCatalog_@@6B@
0x180044480: "| | | | | |.. NotBefor" ??_C@_1GA@HPLHGPCH@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAN?$AAo?$AAt?$AAB?$AAe?$AAf?$AAo?$AAr@
0x18002F2B0: OfficeCleanupPolicy
0x1800101C2: "__cdecl _imp_load_BCryptCreateHash" __imp_load_BCryptCreateHash
0x18003D948: "__cdecl _imp_CertFreeCertificateChainEngine" __imp_CertFreeCertificateChainEngine
0x1800035A0: SoftpubLoadSignature
0x18003EDC8: "1.3.6.1.4.1.311.12.1.2" ??_C@_0BH@LBJPHGNH@1?43?46?41?44?41?4311?412?41?42?$AA@
0x18003E8D0: "1.3.6.1.4.1.311.10.3.3" ??_C@_0BH@EPEFCOBG@1?43?46?41?44?41?4311?410?43?43?$AA@
0x180055030: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x18004A6D4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x18003D860: "__cdecl _imp_CertFindSubjectInSortedCTL" __imp_CertFindSubjectInSortedCTL
0x180005AD0: "int __cdecl _CatAdminAllocTlsSlot(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?_CatAdminAllocTlsSlot@@YAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x180041788: "SoftpubLoadDefUsageCallData" ??_C@_0BM@NCKBAAFN@SoftpubLoadDefUsageCallData?$AA@
0x18003DCF0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180042430: "| |.. pbMemObject: " ??_C@_1FK@DLKGAFIN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAb?$AAM?$AAe?$AAm?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800415E0: "1.3.6.1.4.1.311.2.3.2" ??_C@_0BG@CMLCJMME@1?43?46?41?44?41?4311?42?43?42?$AA@
0x1800448E0: "| | +-- +.. dwError: " ??_C@_1GE@EDCCGODJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18000FFE6: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x1800420A0: "| |.. pcwszMemberTag: " ??_C@_1FG@MFJMFMIG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAc?$AAw?$AAs?$AAz?$AAM?$AAe?$AAm?$AAb?$AAe?$AAr?$AAT?$AAa?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800360F8: SIPolicyClearAllActivePolicy
0x18003DF98: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18004A674: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USER32_dll" __DELAY_IMPORT_DESCRIPTOR_USER32_dll
0x18003548C: "public: void * __ptr64 __cdecl Stack_::Add(unsigned long) __ptr64" ?Add@Stack_@@QEAAPEAXK@Z
0x180005AA0: "public: virtual int __cdecl SIPObjectCatalog_::RemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?RemoveSignedDataMsg@SIPObjectCatalog_@@UEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x18001CB70: WVTAsn1SpcStatementTypeEncode
0x18000E434: "void __cdecl HashpFinalizeHash(struct BCRYPT_HASH_CTXT * __ptr64,unsigned char * __ptr64,void * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?HashpFinalizeHash@@YAXPEAUBCRYPT_HASH_CTXT@@PEAEPEAPEAX1K@Z
0x18003DA10: "__cdecl _imp_ASN1BEREncExplicitTag" __imp_ASN1BEREncExplicitTag
0x180028F38: "public: __cdecl SIPObjectCAB_::SIPObjectCAB_(unsigned long) __ptr64" ??0SIPObjectCAB_@@QEAA@K@Z
0x180038C30: SIPolicyParseSecureSettings
0x180043E10: "| |.. pfnOnMoreInfoClickDe" ??_C@_1FK@GHIDPBK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAO?$AAn?$AAM?$AAo?$AAr?$AAe?$AAI?$AAn?$AAf?$AAo?$AAC?$AAl?$AAi?$AAc?$AAk?$AAD?$AAe@
0x180002B00: SoftpubAuthenticode
0x18003606C: SIPolicyCheckVerBlock
0x18004C358: "__cdecl _IMPORT_DESCRIPTOR_MSASN1" __IMPORT_DESCRIPTOR_MSASN1
0x180007D00: InboxCryptSIPGetCaps
0x180041EA0: "| |.. hFile: " ??_C@_1FK@ILNPPLLO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAh?$AAF?$AAi?$AAl?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DCD8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180050A90: "protected: static unsigned __int64 volatile SIPObject_::hProv" ?hProv@SIPObject_@@1_KC
0x18003EA88: "MaxHashBytesToMap" ??_C@_1CE@JBGFCJAO@?$AAM?$AAa?$AAx?$AAH?$AAa?$AAs?$AAh?$AAB?$AAy?$AAt?$AAe?$AAs?$AAT?$AAo?$AAM?$AAa?$AAp?$AA?$AA@
0x180044EF0: "SiPolicyUpdateSigners" ??_C@_1CM@NABDHEDK@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x18003DBB8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x18003D758: "__cdecl _imp_I_CryptInsertLruEntry" __imp_I_CryptInsertLruEntry
0x1800379B0: SIPolicyInitializeFromSerializedPolicies
0x1800398D8: SIPolicySearchFileRules
0x1800422E0: "| +-- pBlob: " ??_C@_1CC@MEKNIKEM@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAB?$AAl?$AAo?$AAb?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180055018: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x1800550C8: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLA
0x18003D9E8: "__cdecl _imp_ASN1BERDecExplicitTag" __imp_ASN1BERDecExplicitTag
0x18003DCB0: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18003D9D8: "__cdecl _imp_ASN1octetstring_free" __imp_ASN1octetstring_free
0x18003DDA0: api-ms-win-core-memory-l1-1-1_NULL_THUNK_DATA
0x18003EB80: "Software\Microsoft\Internet Expl" ??_C@_1FM@PCEBBACD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?5?$AAE?$AAx?$AAp?$AAl@
0x180011840: "__cdecl _chkstk" __chkstk
0x18000DC30: "__cdecl StrTrimW" _StrTrimW
0x1800508F0: hMeDLL
0x180043D50: "| | |.. pCopyActionTextN" ??_C@_1GA@BLIELNIO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAo?$AAp?$AAy?$AAA?$AAc?$AAt?$AAi?$AAo?$AAn?$AAT?$AAe?$AAx?$AAt?$AAN@
0x18003DC10: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180042160: "| |.. hMemberFile: " ??_C@_1FK@BPDNANAA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAh?$AAM?$AAe?$AAm?$AAb?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180004360: HTTPSFinalProv
0x180005AA0: "public: virtual int __cdecl SIPObjectFlat_::PutSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long) __ptr64" ?PutSignedDataMsg@SIPObjectFlat_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKKPEAEK@Z
0x18003D980: "__cdecl _imp_CertCreateCertificateChainEngine" __imp_CertCreateCertificateChainEngine
0x180041390: "PageHashes" ??_C@_1BG@MFCFKDMJ@?$AAP?$AAa?$AAg?$AAe?$AAH?$AAa?$AAs?$AAh?$AAe?$AAs?$AA?$AA@
0x180005AA0: "protected: virtual void * __ptr64 __cdecl SIPObject_::GetMyStructure(struct SIP_SUBJECTINFO_ * __ptr64) __ptr64" ?GetMyStructure@SIPObject_@@MEAAPEAXPEAUSIP_SUBJECTINFO_@@@Z
0x180045488: "ATPSiPolicyVersion" ??_C@_1CG@HBJMKEGC@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800434B0: "| |.. pfnAddSgnr2Chain: " ??_C@_1FK@PDGGGEMC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAA?$AAd?$AAd?$AAS?$AAg?$AAn?$AAr?$AA2?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001082E: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x18003D890: "__cdecl _imp_CryptEnumOIDInfo" __imp_CryptEnumOIDInfo
0x18002B500: "protected: int __cdecl SIPObject_::OpenFile(unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?OpenFile@SIPObject_@@IEAAHPEBGKK@Z
0x18000DF6C: "unsigned long __cdecl GetAlgHandleFromOid(char const * __ptr64,unsigned __int64,void * __ptr64 * __ptr64)" ?GetAlgHandleFromOid@@YAKPEBD_KPEAPEAX@Z
0x180042750: "| +-- pCert: <<< bad parameter" ??_C@_1FA@PICOBFME@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAC?$AAe?$AAr?$AAt?$AA?3?$AA?5?$AA?$DM?$AA?$DM?$AA?$DM?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr@
0x18003EA60: "MaxHeaderBytesToMap" ??_C@_1CI@EMEMCOED@?$AAM?$AAa?$AAx?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AAB?$AAy?$AAt?$AAe?$AAs?$AAT?$AAo?$AAM?$AAa?$AAp?$AA?$AA@
0x180044600: "True" ??_C@_19BFOILMBF@?$AAT?$AAr?$AAu?$AAe?$AA?$AA@
0x1800339E0: "void __cdecl ErrLog_LogError(unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,int,int)" ?ErrLog_LogError@@YAXPEAGKKKHH@Z
0x18003DD78: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18001AAAC: TraceLoggingRegisterEx
0x180041048: "CallbackAllocFunction" ??_C@_0BG@MHHIJLNF@CallbackAllocFunction?$AA@
0x180022FD8: "unsigned long __cdecl CDFGetLine(struct CRYPTCATCDF_ * __ptr64,unsigned short * __ptr64,unsigned long)" ?CDFGetLine@@YAKPEAUCRYPTCATCDF_@@PEAGK@Z
0x18003EED8: "WINTRUST.DLL" ??_C@_1BK@BLHFBFOL@?$AAW?$AAI?$AAN?$AAT?$AAR?$AAU?$AAS?$AAT?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x1800447A0: "| | | |.. dwRevokedReason:" ??_C@_1GE@CBGOCHIA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAR?$AAe?$AAv?$AAo?$AAk?$AAe?$AAd?$AAR?$AAe?$AAa?$AAs?$AAo?$AAn?$AA?3@
0x18004025C: "MY" ??_C@_15ELPOAHMG@?$AAM?$AAY?$AA?$AA@
0x18003DB00: "__cdecl _imp_ASN1CEREncFlushBlkElement" __imp_ASN1CEREncFlushBlkElement
0x18003D908: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x18002BEE4: "unsigned long __cdecl GenericChainGetErrorBasedOnStepErrors(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GenericChainGetErrorBasedOnStepErrors@@YAKPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18002C870: "public: class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> > & __ptr64 __cdecl std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >::operator=(class std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> > &&) __ptr64" ??4?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@QEAAAEAV01@$$QEAV01@@Z
0x180044A78: "1.2.840.113549.1.7.1" ??_C@_0BF@PPMKENNE@1?42?4840?4113549?41?47?41?$AA@
0x18003F404: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x18003F2E0: "Software\Microsoft\Cryptography\" ??_C@_1HI@BDCGEBKN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x1800101D4: "__cdecl _imp_load_BCryptDestroyKey" __imp_load_BCryptDestroyKey
0x18003DC08: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18003DEB0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000D8F0: "public: virtual int __cdecl SIPObjectFlat_::GetSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSignedDataMsg@SIPObjectFlat_@@UEAAHPEAUSIP_SUBJECTINFO_@@KPEAKPEAE1@Z
0x18001056C: "__cdecl _imp_load_IsBufferCleanOfInvalidMarkers" __imp_load_IsBufferCleanOfInvalidMarkers
0x18003EFA0: "{???????????????????????????????" ??_C@_1EO@GCLNONCD@?$AA?$HL?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP@
0x180004A00: WVTAsn1SpcLinkEncode
0x1800509F0: sStoreLock
0x180050B30: "int g_PageHashes" ?g_PageHashes@@3HA
0x18002B860: "long __cdecl GenericChainCertificateTrust(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GenericChainCertificateTrust@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x180005320: WVTAddSigner
0x180042C80: "| +.. Step[%02.2d]: " ??_C@_1GM@MLBFKDLH@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAS?$AAt?$AAe?$AAp?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800029C0: CryptCATEnumerateAttr
0x1800410B0: "1.3.6.1.4.1.311.10.4.1" ??_C@_0BH@OAKEHECN@1?43?46?41?44?41?4311?410?44?41?$AA@
0x18003DAD8: "__cdecl _imp_ASN1_Encode" __imp_ASN1_Encode
0x18003146C: "void * __ptr64 __cdecl _GetCatalogMessage(struct SIP_SUBJECTINFO_ * __ptr64)" ?_GetCatalogMessage@@YAPEAXPEAUSIP_SUBJECTINFO_@@@Z
0x180022BB0: CryptCATAdminCalcHashFromFileHandle2
0x180029FA0: "protected: virtual int __cdecl SIPObjectCAB_::PutMessageInFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long * __ptr64) __ptr64" ?PutMessageInFile@SIPObjectCAB_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@PEAK@Z
0x18003DC80: "__cdecl _imp_SetFilePointerEx" __imp_SetFilePointerEx
0x18003D880: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x18003DEB8: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x1800450C8: "SkuSiPolicyVersion" ??_C@_1CG@CNALLOMA@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x18000EED8: "long __cdecl I_GetParamFromMessage(void * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?I_GetParamFromMessage@@YAJPEAXKKPEAPEAEPEAK@Z
0x18004C4D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180043A40: "| | |.. cbStruct: " ??_C@_1FI@CPMCEOOE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18004C5D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x18003DE20: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180005580: "public: virtual int __cdecl CCatalogParserV2::ReallyDecodeMemberInfo(struct CRYPTCATSTORE_ const * __ptr64,struct CRYPTCATMEMBER_ * __ptr64,struct _CRYPTOAPI_BLOB const * __ptr64)const __ptr64" ?ReallyDecodeMemberInfo@CCatalogParserV2@@UEBAHPEBUCRYPTCATSTORE_@@PEAUCRYPTCATMEMBER_@@PEBU_CRYPTOAPI_BLOB@@@Z
0x18003E290: "__cdecl _guard_fids_table" __guard_fids_table
0x180043200: "|.. fRecallWithState: " ??_C@_1FI@GGAFNPDO@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAR?$AAe?$AAc?$AAa?$AAl?$AAl?$AAW?$AAi?$AAt?$AAh?$AAS?$AAt?$AAa?$AAt?$AAe?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180041468: "OLE32.DLL" ??_C@_09LFONMEPF@OLE32?4DLL?$AA@
0x18000EC94: "int __cdecl WVTAsn1InfoEncode(int,void * __ptr64,unsigned char * __ptr64,unsigned long * __ptr64)" ?WVTAsn1InfoEncode@@YAHHPEAXPEAEPEAK@Z
0x18003DB98: "__cdecl _imp_GetTimeFormatA" __imp_GetTimeFormatA
0x18003E1E8: msvcrt_NULL_THUNK_DATA
0x18003F748: "1.3.6.1.4.1.311.2.1.12" ??_C@_0BH@JNDANHN@1?43?46?41?44?41?4311?42?41?412?$AA@
0x18004A6F4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x18003C530: "__cdecl load_config_used" _load_config_used
0x180028608: "protected: void __cdecl SIPObjectPE_::FreeSpcAttribute(struct _CRYPT_ATTRIBUTE * __ptr64) __ptr64" ?FreeSpcAttribute@SIPObjectPE_@@IEAAXPEAU_CRYPT_ATTRIBUTE@@@Z
0x180026670: IsCatalogFile
0x18003D8C8: "__cdecl _imp_CertCompareIntegerBlob" __imp_CertCompareIntegerBlob
0x180007E30: "public: virtual void * __ptr64 __cdecl SIPObjectFlat_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSIPObjectFlat_@@UEAAPEAXI@Z
0x18003F510: "__cdecl _sz_bcrypt_dll" __sz_bcrypt_dll
0x180044610: "False" ??_C@_1M@GDFLIJGE@?$AAF?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x18003D818: "__cdecl _imp_CryptEncodeObjectEx" __imp_CryptEncodeObjectEx
0x18003DF38: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18003D968: "__cdecl _imp_CertFreeCertificateChain" __imp_CertFreeCertificateChain
0x180044150: "| |.. dwError: " ??_C@_1GE@CIIIHDMN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18004A634: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x18004A880: bcrypt_NULL_THUNK_DATA_DLN
0x180040DF0: "WVTAsn1SpcFinancialCriteriaInfoD" ??_C@_0CG@CKFKBHGC@WVTAsn1SpcFinancialCriteriaInfoD@
0x180055128: bcrypt_NULL_THUNK_DATA_DLA
0x18004AC20: bcrypt_NULL_THUNK_DATA_DLB
0x18002AD60: "public: virtual void * __ptr64 __cdecl SIPObjectCatalog_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSIPObjectCatalog_@@UEAAPEAXI@Z
0x18003DB10: "__cdecl _imp_ASN1BEREncCharString" __imp_ASN1BEREncCharString
0x18003DAE8: "__cdecl _imp_ASN1DecRealloc" __imp_ASN1DecRealloc
0x18001AB78: "long __cdecl ASNRegisterServer(unsigned short const * __ptr64)" ?ASNRegisterServer@@YAJPEBG@Z
0x180002460: AllocateNewChain
0x18003DBD0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18003DBC0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180024900: CryptCATCDFEnumCatAttributes
0x18003D700: "__cdecl _imp_I_CryptDetachTls" __imp_I_CryptDetachTls
0x1800550A8: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x180033250: "private: virtual long __cdecl CTrustDB::DoesCertExist(struct _CERT_CONTEXT const * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64) __ptr64" ?DoesCertExist@CTrustDB@@EEAAJPEBU_CERT_CONTEXT@@PEAPEBU2@@Z
0x18003DAE0: "__cdecl _imp_ASN1BERDecCharString" __imp_ASN1BERDecCharString
0x180029464: "private: int __cdecl SIPObjectCAB_::CreateEncodedHash(char * __ptr64,unsigned __int64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?CreateEncodedHash@SIPObjectCAB_@@AEAAHPEAD_KPEAPEAEPEAK@Z
0x18004A714: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x180028DC0: WintrustSetDefaultIncludePEPageHashes
0x18002B2F0: "protected: static unsigned int __cdecl SIPObject_::CalgId(unsigned short const * __ptr64)" ?CalgId@SIPObject_@@KAIPEBG@Z
0x18004ACE8: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLB
0x18000DCD4: "__cdecl StrChrW" _StrChrW
0x18004C3BC: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180039858: SIPolicyScenarioTypesToScenarioIndexes
0x1800227A0: CryptCATAdminAcquireContext2
0x1800451F8: "UpdateSiPolicy.p7b" ??_C@_1CG@KFPJDIDF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003D6C0: "__cdecl _imp_CryptMsgEncodeAndSignCTL" __imp_CryptMsgEncodeAndSignCTL
0x1800382F4: SIPolicyParseAllowedSigners
0x18004C524: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180005AA0: SoftpubCleanup
0x18000D8E0: "protected: virtual unsigned long __cdecl SIPObjectFlat_::GetMyStructureSize(void) __ptr64" ?GetMyStructureSize@SIPObjectFlat_@@MEAAKXZ
0x18002E348: I_SatisfiesSysDevEvWhqlRequirement
0x18003DE48: "__cdecl _imp_RegQueryValueExA" __imp_RegQueryValueExA
0x18004C3F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180050B3C: "int g_fLogWarnings" ?g_fLogWarnings@@3HA
0x180045128: "\Boot\SkuSiPolicy.p7b" ??_C@_1CM@PJNHIFEH@?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003E138: "__cdecl _imp_qsort" __imp_qsort
0x180040D68: "WVTAsn1SpcSigInfoDecode" ??_C@_0BI@NHOEJGGC@WVTAsn1SpcSigInfoDecode?$AA@
0x18003DAA8: "__cdecl _imp_ASN1BERDecOctetString2" __imp_ASN1BERDecOctetString2
0x18003DBA0: api-ms-win-core-datetime-l1-1-0_NULL_THUNK_DATA
0x180035DBC: "long __cdecl HashGeneratePageHashesEx(void * __ptr64,void const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,unsigned long * __ptr64,struct PAGE_HASH_V2 * __ptr64 * __ptr64)" ?HashGeneratePageHashesEx@@YAJPEAXPEBXKKP6AJ0KPEAKPEAPEAX2@Z02PEAPEAUPAGE_HASH_V2@@@Z
0x18000D850: "protected: virtual int __cdecl SIPObjectFlat_::GetMessageFromFile(struct SIP_SUBJECTINFO_ * __ptr64,struct _WIN_CERTIFICATE * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetMessageFromFile@SIPObjectFlat_@@MEAAHPEAUSIP_SUBJECTINFO_@@PEAU_WIN_CERTIFICATE@@KPEAK@Z
0x18003DB50: "__cdecl _imp_RpcBindingFromStringBindingW" __imp_RpcBindingFromStringBindingW
0x1800508E0: WTASN_Module
0x18003E1C8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18002C7C0: "public: __cdecl SiChainInfo::~SiChainInfo(void) __ptr64" ??1SiChainInfo@@QEAA@XZ
0x180034C94: wstr2guid
0x18002E2C4: I_IsKitsEkuTrusted
0x18000EBB0: WVTAsn1SpcPeImageDataEncode
0x18003C4D0: "const CCatalogParserV1::`vftable'" ??_7CCatalogParserV1@@6B@
0x18001C660: WVTAsn1SpcSpAgencyInfoEncode
0x18002B258: "protected: static int __cdecl SIPObject_::CalcHashLength(unsigned long * __ptr64,unsigned __int64,unsigned long)" ?CalcHashLength@SIPObject_@@KAHPEAK_KK@Z
0x180042550: "| +-- pSgnr: <<< bad parameter" ??_C@_1FA@PNHHOCEG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAS?$AAg?$AAn?$AAr?$AA?3?$AA?5?$AA?$DM?$AA?$DM?$AA?$DM?$AA?5?$AAb?$AAa?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr@
0x18003AD28: "long __cdecl I_GetMessageHashParam(void * __ptr64,unsigned long,class std::unique_ptr<struct _CRYPT_ALGORITHM_IDENTIFIER,struct deleter<struct release::heapfree::tag> > * __ptr64)" ?I_GetMessageHashParam@@YAJPEAXKPEAV?$unique_ptr@U_CRYPT_ALGORITHM_IDENTIFIER@@U?$deleter@Utag@heapfree@release@@@@@std@@@Z
0x18002B350: "protected: unsigned __int64 __cdecl SIPObject_::GetProvider(struct SIP_SUBJECTINFO_ const * __ptr64) __ptr64" ?GetProvider@SIPObject_@@IEAA_KPEBUSIP_SUBJECTINFO_@@@Z
0x18001F290: WTHelperCertCheckValidSignature
0x180020164: "struct _LOADED_PROVIDER_V1 * __ptr64 __cdecl Version1_TestProviderForAction(struct HKEY__ * __ptr64,char * __ptr64,struct _GUID * __ptr64)" ?Version1_TestProviderForAction@@YAPEAU_LOADED_PROVIDER_V1@@PEAUHKEY__@@PEADPEAU_GUID@@@Z
0x1800550E8: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x1800450B8: "SkuSi" ??_C@_1M@MOEMBDMP@?$AAS?$AAk?$AAu?$AAS?$AAi?$AA?$AA@
0x18003D6F8: "__cdecl _imp_I_CryptAllocTlsEx" __imp_I_CryptAllocTlsEx
0x1800424F0: "| +.. pbMemSignedMsg: " ??_C@_1FK@LKJKNLGL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAp?$AAb?$AAM?$AAe?$AAm?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAM?$AAs?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DD50: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18003D778: "__cdecl _imp_I_CryptFlushLruCache" __imp_I_CryptFlushLruCache
0x180033D6C: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x1800419B0: "Copy Certificate Failed" ??_C@_0BI@DPPDMFLE@Copy?5Certificate?5Failed?$AA@
0x18001C050: WVTAsn1SpcPeImageDataDecode
0x18000ABA0: "void __cdecl _SSCatSetCryptSvcSidDaclAceOnSystemSubDir(void * __ptr64,unsigned short const * __ptr64)" ?_SSCatSetCryptSvcSidDaclAceOnSystemSubDir@@YAXPEAXPEBG@Z
0x18001B42C: "int __cdecl WVTAsn1SetAlgorithm(struct _CRYPT_ALGORITHM_IDENTIFIER * __ptr64,struct AlgorithmIdentifier * __ptr64)" ?WVTAsn1SetAlgorithm@@YAHPEAU_CRYPT_ALGORITHM_IDENTIFIER@@PEAUAlgorithmIdentifier@@@Z
0x18003DA98: "__cdecl _imp_ASN1_Decode" __imp_ASN1_Decode
0x18000F250: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18003DD60: "__cdecl _imp_LoadLibraryA" __imp_LoadLibraryA
0x18003DFC0: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x180005AA0: "public: virtual int __cdecl SIPObjectFlat_::RemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?RemoveSignedDataMsg@SIPObjectFlat_@@UEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x1800201C4: Version1_WinVerifyTrust
0x18003DEA0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800059AC: "int __cdecl I_IsProcessDetachFreeLibrary(void * __ptr64)" ?I_IsProcessDetachFreeLibrary@@YAHPEAX@Z
0x1800308B0: SoftpubDumpStructure
0x18003DE18: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18002FA30: SoftpubDllRegisterServer
0x180043AA0: "| | |.. dwFinalError: " ??_C@_1GE@FOPLPMAP@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAF?$AAi?$AAn?$AAa?$AAl?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?5?$AA?5@
0x18003F988: WintrustImageVerification
0x1800416D0: "GenericChainCertificateTrust" ??_C@_1DK@MGDCLDPL@?$AAG?$AAe?$AAn?$AAe?$AAr?$AAi?$AAc?$AAC?$AAh?$AAa?$AAi?$AAn?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?$AA@
0x18001B910: WVTAsn1SealingSignatureAttributeEncode
0x18003D728: "__cdecl _imp_I_CryptUninstallAsn1Module" __imp_I_CryptUninstallAsn1Module
0x180031218: "long __cdecl GetWhqlEnforcementDateTime(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?GetWhqlEnforcementDateTime@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18004A5D4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x18001C240: WVTAsn1SpcSigInfoEncode
0x180028680: "protected: virtual int __cdecl SIPObjectPE_::GetDigestStream(struct DIGEST_DATA * __ptr64,int (__cdecl*)(void * __ptr64,unsigned char * __ptr64,unsigned long),unsigned long) __ptr64" ?GetDigestStream@SIPObjectPE_@@MEAAHPEAUDIGEST_DATA@@P6AHPEAXPEAEK@ZK@Z
0x1800355D0: "public: void * __ptr64 __cdecl Stack_::Get(unsigned long,unsigned long * __ptr64) __ptr64" ?Get@Stack_@@QEAAPEAXKPEAK@Z
0x1800105C0: ApiSetQueryApiSetPresence
0x180040BB8: "WVTAsn1SpcStatementTypeEncode" ??_C@_0BO@JHPPNDOJ@WVTAsn1SpcStatementTypeEncode?$AA@
0x180005AA0: "public: virtual int __cdecl SIPObject_::RemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?RemoveSignedDataMsg@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x18003D740: "__cdecl _imp_I_CryptRemoveLruEntry" __imp_I_CryptRemoveLruEntry
0x18000FDA1: free
0x1800276A0: "void __cdecl CryptSIPGetRegWorkingFlags(unsigned long * __ptr64)" ?CryptSIPGetRegWorkingFlags@@YAXPEAK@Z
0x18003D910: "__cdecl _imp_CryptDecodeObjectEx" __imp_CryptDecodeObjectEx
0x1800414F8: "CryptSIPCreateIndirectData" ??_C@_1DG@BJBHPGPM@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAI?$AAP?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18003DD88: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x180005980: "int __cdecl SoftpubDllMain(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?SoftpubDllMain@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x18003DB68: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x18000D850: "int __cdecl mssip32DllMain(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?mssip32DllMain@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x18003DE98: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180044A90: "1.2.840.113549.1.9.4" ??_C@_0BF@GCGCMOKC@1?42?4840?4113549?41?49?44?$AA@
0x18003DC68: "__cdecl _imp_GetFileSizeEx" __imp_GetFileSizeEx
0x180022C50: CryptCATAdminRemoveCatalog
0x1800550D0: "__cdecl _imp_ControlService" __imp_ControlService
0x1800459D0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180045158: "SkuSiPolicy.p7b" ??_C@_1CA@IBPJBCBI@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18000E7F8: "long __cdecl HashpParsePEHeader(void const * __ptr64,unsigned long,unsigned long,unsigned char,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,struct HASHLIB_CERT_INFO * __ptr64,struct _HASHLIB_LOADED_IMAGE * __ptr64,struct _EXCLUDE_RANGE * __ptr64 const,unsigned long * __ptr64)" ?HashpParsePEHeader@@YAJPEBXKKEP6AJPEAXKPEAKPEAPEAX2@Z1PEAUHASHLIB_CERT_INFO@@PEAU_HASHLIB_LOADED_IMAGE@@QEAU_EXCLUDE_RANGE@@2@Z
0x180005A10: "public: virtual int __cdecl SIPObject_::GetCaps(struct _SIP_CAP_SET_V3 * __ptr64) __ptr64" ?GetCaps@SIPObject_@@UEAAHPEAU_SIP_CAP_SET_V3@@@Z
0x18001028F: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180040C10: "1.3.6.1.4.1.311.12.2.2" ??_C@_0BH@KDCKNJDJ@1?43?46?41?44?41?4311?412?42?42?$AA@
0x1800306F8: "void __cdecl PrintfSignerStruct(void * __ptr64,struct _CRYPT_PROVIDER_SGNR * __ptr64,int,int,int)" ?PrintfSignerStruct@@YAXPEAXPEAU_CRYPT_PROVIDER_SGNR@@HHH@Z
0x18003DA70: "__cdecl _imp_ASN1BEREncU32" __imp_ASN1BEREncU32
0x18003DAF8: "__cdecl _imp_ASN1BEREncS32" __imp_ASN1BEREncS32
0x1800400D0: "1.3.6.1.4.1.311.10.3.7" ??_C@_0BH@CLCJOLBC@1?43?46?41?44?41?4311?410?43?47?$AA@
0x18001C190: WVTAsn1SpcSigInfoDecode
0x180005930: MIDL_user_allocate
0x180028DF0: "public: virtual int __cdecl SIPObjectFlat_::VerifyIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?VerifyIndirectData@SIPObjectFlat_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAUSIP_INDIRECT_DATA_@@@Z
0x18000FFB0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18003DDC8: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1800117C6: memcmp
0x1800041B0: StoreProviderUnload
0x18004A890: ext-ms-win-advapi32-safer-l1-1-0_NULL_THUNK_DATA_DLN
0x18003DCD0: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x180050B40: "int g_fErrLogInitialized" ?g_fErrLogInitialized@@3HA
0x180055138: ext-ms-win-advapi32-safer-l1-1-0_NULL_THUNK_DATA_DLA
0x18003DF90: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x1800453C0: "WinSiPolicy.p7b" ??_C@_1CA@JMJMPADN@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1800248A0: CryptCATCDFEnumAttributes
0x18004AC88: ext-ms-win-advapi32-safer-l1-1-0_NULL_THUNK_DATA_DLB
0x180042040: "| |.. pcwszCatalogFilePath" ??_C@_1FG@POANBKLN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAc?$AAw?$AAs?$AAz?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh@
0x180040254: "CA" ??_C@_15OEFJBJMG@?$AAC?$AAA?$AA?$AA@
0x18003DDA8: "__cdecl _imp_ExpandEnvironmentStringsA" __imp_ExpandEnvironmentStringsA
0x180040C48: "WVTAsn1CatMemberInfo2Encode" ??_C@_0BM@FPCOJIMA@WVTAsn1CatMemberInfo2Encode?$AA@
0x18003E170: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x1800415C8: "1.3.6.1.4.1.311.2.3.1" ??_C@_0BG@HJPMPAH@1?43?46?41?44?41?4311?42?43?41?$AA@
0x180010663: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x18000DB58: "public: virtual __cdecl SIPObjectPE_::~SIPObjectPE_(void) __ptr64" ??1SIPObjectPE_@@UEAA@XZ
0x18003D6D0: "__cdecl _imp_CertCompareCertificate" __imp_CertCompareCertificate
0x1800417C8: "HTTPSCertificateTrust" ??_C@_1CM@GPBMDOD@?$AAH?$AAT?$AAT?$AAP?$AAS?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?$AA@
0x18003F978: WldpScriptFileAudited
0x18003395C: "void __cdecl ErrLog_Initialize(void)" ?ErrLog_Initialize@@YAXXZ
0x180040220: "1.2.840.113549.1.1.1" ??_C@_0BF@NKKBBCAI@1?42?4840?4113549?41?41?41?$AA@
0x180045280: "UpdateRvkSiPolicy.p7b" ??_C@_1CM@FLDNIMKB@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x180043330: "| |.. cbStruct: " ??_C@_1FI@NLAKMOJN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAS?$AAt?$AAr?$AAu?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180055048: "__cdecl _imp_GetDesktopWindow" __imp_GetDesktopWindow
0x180021460: WTGetBioSignatureInfo
0x1800390D4: SIPolicyParseV3Data
0x180041A20: "SoftpubDefCertInit" ??_C@_1CG@CJGDLOPB@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAD?$AAe?$AAf?$AAC?$AAe?$AAr?$AAt?$AAI?$AAn?$AAi?$AAt?$AA?$AA@
0x180040B60: "1.3.6.1.4.1.311.2.1.27" ??_C@_0BH@HGOCEHGB@1?43?46?41?44?41?4311?42?41?427?$AA@
0x18003F3D8: "1.3.6.1.4.1.311.10.3.6" ??_C@_0BH@DCDCNKFD@1?43?46?41?44?41?4311?410?43?46?$AA@
0x18003ED88: "1.3.6.1.4.1.311.12.2.3" ??_C@_0BH@LKDBOIHI@1?43?46?41?44?41?4311?412?42?43?$AA@
0x1800219A4: "public: static class CRYPTCATMEMBER_HRESERVED * __ptr64 __cdecl CRYPTCATMEMBER_HRESERVED::Create(void)" ?Create@CRYPTCATMEMBER_HRESERVED@@SAPEAV1@XZ
0x180022DBC: "int __cdecl CDFCalcIndirectData(struct CRYPTCATCDF_ const * __ptr64,bool,unsigned short const * __ptr64,struct _GUID const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,void (__cdecl*)(unsigned long,unsigned long,unsigned short * __ptr64))" ?CDFCalcIndirectData@@YAHPEBUCRYPTCATCDF_@@_NPEBGPEBU_GUID@@PEAKPEAPEAE4P6AXKKPEAG@Z@Z
0x180021A9C: "int __cdecl CryptCATOpenStore(struct CRYPTCATSTORE_ * __ptr64,unsigned short * __ptr64)" ?CryptCATOpenStore@@YAHPEAUCRYPTCATSTORE_@@PEAG@Z
0x180037E2C: SIPolicyMatchFileRules
0x180044950: "| | | +.. dwError: " ??_C@_1GE@HICICGGK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18004C470: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18001E730: TrustOpenStores
0x180044540: "| | | | | +.. Subject:" ??_C@_1FG@BPACEAHG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3@
0x180040C28: "WVTAsn1CatMemberInfoEncode" ??_C@_0BL@PFGEODBH@WVTAsn1CatMemberInfoEncode?$AA@
0x18003F880: "Call_GetFileAttributesExW" ??_C@_1DE@GEHAJAAM@?$AAC?$AAa?$AAl?$AAl?$AA_?$AAG?$AAe?$AAt?$AAF?$AAi?$AAl?$AAe?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAs?$AAE?$AAx?$AAW?$AA?$AA@
0x18002F2B0: OfficeInitializePolicy
0x18004C4AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-version-l1-1-0
0x180042BE0: "|.. dwEncoding: " ??_C@_1GE@BHGAFGLI@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAE?$AAn?$AAc?$AAo?$AAd?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003F170: "Software\Microsoft\Cryptography\" ??_C@_1HE@BMLENMLM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180041298: "Call_CryptSvcCatDBEnumCatalogs" ??_C@_1DO@HFOAJAAA@?$AAC?$AAa?$AAl?$AAl?$AA_?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAv?$AAc?$AAC?$AAa?$AAt?$AAD?$AAB?$AAE?$AAn?$AAu?$AAm?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAs?$AA?$AA@
0x180029040: "public: virtual void * __ptr64 __cdecl SIPObjectCAB_::`vector deleting destructor'(unsigned int) __ptr64" ??_ESIPObjectCAB_@@UEAAPEAXI@Z
0x180034664: PkiNonzeroAlloc
0x18002DAAC: "int __cdecl _CheckVersionAttributeNEW(struct DRIVER_VER_INFO_ * __ptr64,struct CRYPTCATATTRIBUTE_ * __ptr64)" ?_CheckVersionAttributeNEW@@YAHPEAUDRIVER_VER_INFO_@@PEAUCRYPTCATATTRIBUTE_@@@Z
0x18000D930: "private: virtual unsigned long __cdecl CTrustDB::AddRef(void) __ptr64" ?AddRef@CTrustDB@@EEAAKXZ
0x18001019E: "__cdecl _imp_load_BCryptDestroyHash" __imp_load_BCryptDestroyHash
0x18003F060: "Software\Microsoft\Cryptography\" ??_C@_1IC@NOLKJKOG@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x1800299AC: "private: int __cdecl SIPObjectCAB_::CreateSPCLink(unsigned __int64,struct SIP_SUBJECTINFO_ * __ptr64,struct SPC_LINK_ * __ptr64) __ptr64" ?CreateSPCLink@SIPObjectCAB_@@AEAAH_KPEAUSIP_SUBJECTINFO_@@PEAUSPC_LINK_@@@Z
0x18000D8B0: "protected: virtual unsigned long __cdecl SIPObjectPE_::GetMyStructureSize(void) __ptr64" ?GetMyStructureSize@SIPObjectPE_@@MEAAKXZ
0x18000AFE0: "struct _LOADED_PROVIDER * __ptr64 __cdecl _CheckRegisteredProviders(struct _GUID * __ptr64)" ?_CheckRegisteredProviders@@YAPEAU_LOADED_PROVIDER@@PEAU_GUID@@@Z
0x180005960: WVTDelete
0x1800105B4: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180027200: "int __cdecl DecodeUserOID(struct CRYPTCATSTORE_ * __ptr64,struct _CAT_NAMEVALUE * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?DecodeUserOID@@YAHPEAUCRYPTCATSTORE_@@PEAU_CAT_NAMEVALUE@@PEAPEAEPEAK@Z
0x1800276B0: "int __cdecl InboxCryptSIPGetInfo(struct _SIP_INFORMATION * __ptr64)" ?InboxCryptSIPGetInfo@@YAHPEAU_SIP_INFORMATION@@@Z
0x180004460: "public: virtual int __cdecl SIPObject_::CreateIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?CreateIndirectData@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x18000D950: "public: virtual int __cdecl SIPObjectPE_::CreateIndirectData(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long * __ptr64,struct SIP_INDIRECT_DATA_ * __ptr64) __ptr64" ?CreateIndirectData@SIPObjectPE_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEAKPEAUSIP_INDIRECT_DATA_@@@Z
0x18003E0C0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180041118: "$ActionIDs" ??_C@_0L@MKKCJJNI@$ActionIDs?$AA@
0x180005950: CryptCATStoreFromHandle
0x18003DEE0: "__cdecl _imp_lstrcmpA" __imp_lstrcmpA
0x18003D6E8: "__cdecl _imp_I_CryptSetTls" __imp_I_CryptSetTls
0x18001CE10: WintrustRemoveActionID
0x180040E18: "WVTAsn1SpcStatementTypeDecode" ??_C@_0BO@FLEPCIJO@WVTAsn1SpcStatementTypeDecode?$AA@
0x18002A714: "private: int __cdecl SIPObjectCAB_::SkipStringInFile(void) __ptr64" ?SkipStringInFile@SIPObjectCAB_@@AEAAHXZ
0x180005AFC: LockDoneReading
0x18003E248: ntdll_NULL_THUNK_DATA
0x18003E1D0: "__cdecl _imp_memcpy" __imp_memcpy
0x1800363F0: SIPolicyFindEkuBuffer
0x180034274: PkiAsn1GetBitString
0x18003E080: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x18003EB50: "Safety Warning Level" ??_C@_1CK@BACLHKHL@?$AAS?$AAa?$AAf?$AAe?$AAt?$AAy?$AA?5?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x180040EE0: "WVTAsn1SealingSignatureAttribute" ??_C@_0CH@NDNFNGCN@WVTAsn1SealingSignatureAttribute@
0x180038544: SIPolicyParseDeniedSigners
0x180041648: "MD5" ??_C@_17HLHJLHED@?$AAM?$AAD?$AA5?$AA?$AA@
0x18003F5B0: "ext-ms-win-advapi32-safer-l1-1-0" ??_C@_1EC@LFGLOAFJ@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?9?$AAs?$AAa?$AAf?$AAe?$AAr?$AA?9?$AAl?$AA1?$AA?9?$AA1?$AA?9?$AA0@
0x18003E078: "__cdecl _imp_SetFileSecurityW" __imp_SetFileSecurityW
0x180041250: "DONE Adding Catalog File (%ums):" ??_C@_1EI@JDMNNPJL@?$AAD?$AAO?$AAN?$AAE?$AA?5?$AAA?$AAd?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?5?$AAF?$AAi?$AAl?$AAe?$AA?5?$AA?$CI?$AA?$CF?$AAu?$AAm?$AAs?$AA?$CJ?$AA?3@
0x18003D8F0: "__cdecl _imp_CertControlStore" __imp_CertControlStore
0x1800291A4: "private: int __cdecl SIPObjectCAB_::CheckFiles(struct CFHEADER const & __ptr64) __ptr64" ?CheckFiles@SIPObjectCAB_@@AEAAHAEBUCFHEADER@@@Z
0x18003D790: "__cdecl _imp_CryptMsgControl" __imp_CryptMsgControl
0x180026FE0: "public: virtual int __cdecl CCatalogParserV2::TrustedSubjectIdentifierToTag(unsigned char * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)const __ptr64" ?TrustedSubjectIdentifierToTag@CCatalogParserV2@@UEBAHPEAEKPEAPEAG@Z
0x1800238C0: "int __cdecl CDFPositionAtLastMember(struct CRYPTCATCDF_ * __ptr64)" ?CDFPositionAtLastMember@@YAHPEAUCRYPTCATCDF_@@@Z
0x180043570: "| |.. pfnAddPrivData2Chain: " ??_C@_1FK@CDGCAKNC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAA?$AAd?$AAd?$AAP?$AAr?$AAi?$AAv?$AAD?$AAa?$AAt?$AAa?$AA2?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5@
0x180010DF8: "long __cdecl GetEventHandle(unsigned __int64 * __ptr64)" ?GetEventHandle@@YAJPEA_K@Z
0x180026F60: "public: virtual int __cdecl CCatalogParserV1::TrustedSubjectIdentifierToTag(unsigned char * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)const __ptr64" ?TrustedSubjectIdentifierToTag@CCatalogParserV1@@UEBAHPEAEKPEAPEAG@Z
0x180044C68: "ACUIProviderInvokeUI" ??_C@_0BF@GCIENBID@ACUIProviderInvokeUI?$AA@
0x180021CF0: CryptCATGetCatAttrInfo
0x18003E020: "__cdecl _imp_FreeSid" __imp_FreeSid
0x180055130: "__cdecl _imp_SaferiSearchMatchingHashRules" __imp_SaferiSearchMatchingHashRules
0x180002E70: "unsigned long __cdecl CheckValidSignature(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?CheckValidSignature@@YAKPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18003E0B0: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x1800040B0: "public: int __cdecl CCatalogCache::Initialize(void) __ptr64" ?Initialize@CCatalogCache@@QEAAHXZ
0x1800358B4: "unsigned short const * __ptr64 __cdecl CapiAlgIdToCngAlgId(unsigned int)" ?CapiAlgIdToCngAlgId@@YAPEBGI@Z
0x18003ED18: "1.3.14.3.2.26" ??_C@_0O@GPJKGEMP@1?43?414?43?42?426?$AA@
0x1800393D0: SIPolicyParseV5Data
0x18003DA88: "__cdecl _imp_ASN1_SetEncoderOption" __imp_ASN1_SetEncoderOption
0x180050850: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x18003D9B0: "__cdecl _imp_ASN1CEREncBeginBlk" __imp_ASN1CEREncBeginBlk
0x1800221A0: CryptCATPutCatAttrInfo
0x18002ABB0: "private: int __cdecl SIPObjectCAB_::WriteSignedData(unsigned char * __ptr64,unsigned long) __ptr64" ?WriteSignedData@SIPObjectCAB_@@AEAAHPEAEK@Z
0x18003AD98: "long __cdecl I_GetSecondarySignatures(void * __ptr64,unsigned long,void * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64)" ?I_GetSecondarySignatures@@YAJPEAXKPEAPEAPEAXPEAK@Z
0x18004C3A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800352B8: RegCloseHKCU
0x18003DFE0: "__cdecl _imp_GetFileVersionInfoByHandle" __imp_GetFileVersionInfoByHandle
0x1800454B0: "ATPSiPolicyUpdateSigners" ??_C@_1DC@DODCOFOB@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x180041AD0: "+===============================" ??_C@_1HE@PCFEKKKK@?$AA?$CL?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN@
0x18003D7C8: "__cdecl _imp_CertRDNValueToStrW" __imp_CertRDNValueToStrW
0x180055150: "__cdecl _imp_ImageGetCertificateDataEx" __imp_ImageGetCertificateDataEx
0x18003D928: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x18003E128: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180043F30: "|.. pasSigners[%d]: " ??_C@_1CM@DLHCIPK@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAs?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18000D850: CatalogCompactHashDatabase
0x18003DB80: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x1800501B8: "__cdecl _security_cookie" __security_cookie
0x1800392D0: SIPolicyParseV4Data
0x180044CA0: "%SystemRoot%\System32\CatRoot2\d" ??_C@_1FC@BECLGMGP@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA2?$AA?2?$AAd@
0x18001055A: "__cdecl _imp_load_ImageGetCertificateDataEx" __imp_load_ImageGetCertificateDataEx
0x18003DE70: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180029AD0: "private: int __cdecl SIPObjectCAB_::DigestHeader(int (__cdecl*)(void * __ptr64,unsigned char * __ptr64,unsigned long),void * __ptr64) __ptr64" ?DigestHeader@SIPObjectCAB_@@AEAAHP6AHPEAXPEAEK@Z0@Z
0x1800386D8: SIPolicyParseFileRules
0x18003D7C0: "__cdecl _imp_CertFindRDNAttr" __imp_CertFindRDNAttr
0x180011840: "__cdecl alloca_probe" _alloca_probe
0x18003D918: "__cdecl _imp_CertDuplicateStore" __imp_CertDuplicateStore
0x18001F5A0: WTHelperGetProvPrivateDataFromChain
0x18003D808: "__cdecl _imp_CertAddCertificateContextToStore" __imp_CertAddCertificateContextToStore
0x18001CC30: WintrustAddActionID
0x18003D748: "__cdecl _imp_I_CryptReleaseLruEntry" __imp_I_CryptReleaseLruEntry
0x1800248C0: CryptCATCDFEnumAttributesWithCDFTag
0x18003F8B8: "ProgramFiles" ??_C@_1BK@CECDDAML@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18003DAB0: "__cdecl _imp_ASN1BERDecEndOfContents" __imp_ASN1BERDecEndOfContents
0x180028034: "public: __cdecl std::unique_ptr<struct _WIN_CERTIFICATE,struct deleter<struct release::c_free::tag> >::~unique_ptr<struct _WIN_CERTIFICATE,struct deleter<struct release::c_free::tag> >(void) __ptr64" ??1?$unique_ptr@U_WIN_CERTIFICATE@@U?$deleter@Utag@c_free@release@@@@@std@@QEAA@XZ
0x18003D9A8: "__cdecl _imp_ASN1BERDecBitString" __imp_ASN1BERDecBitString
0x180004B90: "int __cdecl BigFileHeaderMap(void * __ptr64,struct _BIG_FILE_MAP_INFO * __ptr64)" ?BigFileHeaderMap@@YAHPEAXPEAU_BIG_FILE_MAP_INFO@@@Z
0x180036724: SIPolicyFindScenarioDenySigners
0x1800417F8: "HTTPSFinalProv" ??_C@_1BO@IDBMCLMD@?$AAH?$AAT?$AAT?$AAP?$AAS?$AAF?$AAi?$AAn?$AAa?$AAl?$AAP?$AAr?$AAo?$AAv?$AA?$AA@
0x18003EF20: "Call_CryptSvcCatDBEnumCatalogs_N" ??_C@_1FA@COGLEFLO@?$AAC?$AAa?$AAl?$AAl?$AA_?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAv?$AAc?$AAC?$AAa?$AAt?$AAD?$AAB?$AAE?$AAn?$AAu?$AAm?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAs?$AA_?$AAN@
0x18003DF40: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180045AD0: "ProtectedStorage" ??_C@_1CC@LDDGHCIP@?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAe?$AAd?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?$AA@
0x18003DC90: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180028268: "protected: int __cdecl SIPObjectPE_::CreatePageHashesAttribute(struct SIP_SUBJECTINFO_ * __ptr64,struct _CRYPT_ATTRIBUTE * __ptr64) __ptr64" ?CreatePageHashesAttribute@SIPObjectPE_@@IEAAHPEAUSIP_SUBJECTINFO_@@PEAU_CRYPT_ATTRIBUTE@@@Z
0x180041450: "1.3.6.1.4.1.311.12.1.1" ??_C@_0BH@JKLCCFBE@1?43?46?41?44?41?4311?412?41?41?$AA@
0x1800439E0: "| | +.. *** invalid para" ??_C@_1FI@PCMEPBPC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAi?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAp?$AAa?$AAr?$AAa@
0x18003DCC8: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800418C8: "DriverFinalPolicy" ??_C@_1CE@OBFLMOHM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAF?$AAi?$AAn?$AAa?$AAl?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18003E048: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x180010071: "__cdecl _imp_load_CryptAcquireContextA" __imp_load_CryptAcquireContextA
0x18001E680: TrustFreeDecode
0x180010657: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x18004C394: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180035ED8: RtlStringCbLengthW
0x18002ACB0: "private: int __cdecl SIPObjectCAB_::WriteSignedDataV1(unsigned char * __ptr64,unsigned long) __ptr64" ?WriteSignedDataV1@SIPObjectCAB_@@AEAAHPEAEK@Z
0x1800278F0: InboxCryptSIPPutSignedDataMsg
0x1800100CB: "__cdecl _imp_load_CryptAcquireContextW" __imp_load_CryptAcquireContextW
0x18003DD68: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x18003DC28: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x180044D78: "catdbsvc.cpp" ??_C@_0N@BLIMNFGL@catdbsvc?4cpp?$AA@
0x18002C4A0: "int __cdecl SoftpubLoadDefUsageCallData(char const * __ptr64,struct _CRYPT_PROVIDER_DEFUSAGE * __ptr64)" ?SoftpubLoadDefUsageCallData@@YAHPEBDPEAU_CRYPT_PROVIDER_DEFUSAGE@@@Z
0x18000E154: "long __cdecl HashComputeImageHashesEx(void * __ptr64 const * __ptr64,void const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long,struct HASHLIB_CERT_INFO * __ptr64,unsigned char * __ptr64)" ?HashComputeImageHashesEx@@YAJPEBQEAXPEBXKKP6AJPEAXKPEAKPEAPEAX3@Z2PEAPEAE3KPEAUHASHLIB_CERT_INFO@@PEAE@Z
0x18003E088: "__cdecl _imp_CopySid" __imp_CopySid
0x180043F60: "|.. pasSigners[%d] - CounterSign" ??_C@_1FE@BMBHBBHF@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAa?$AAs?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?5?$AA?9?$AA?5?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAS?$AAi?$AAg?$AAn@
0x18003C1B0: "const SIPObjectPE_::`vftable'" ??_7SIPObjectPE_@@6B@
0x18003D9C8: "__cdecl _imp_ASN1BEREncRemoveZeroBits" __imp_ASN1BEREncRemoveZeroBits
0x18000DB20: "public: virtual void * __ptr64 __cdecl SIPObjectPE_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSIPObjectPE_@@UEAAPEAXI@Z
0x180044620: "| | | |.. fCommercial: " ??_C@_1FG@MICBCCGE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAf?$AAC?$AAo?$AAm?$AAm?$AAe?$AAr?$AAc?$AAi?$AAa?$AAl?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003CBD0: "const SIPObjectCAB_::`vftable'" ??_7SIPObjectCAB_@@6B@
0x18003DE38: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800413E8: "CATATTR" ??_C@_1BA@KBDGJNDM@?$AAC?$AAA?$AAT?$AAA?$AAT?$AAT?$AAR?$AA?$AA@
0x18003DA68: "__cdecl _imp_ASN1BEREncBitString" __imp_ASN1BEREncBitString
0x1800508C8: "__cdecl _onexitbegin" __onexitbegin
0x18003DB18: "__cdecl _imp_ASN1BEREncEndOfContents" __imp_ASN1BEREncEndOfContents
0x180036DFC: SIPolicyGetOriginalFilenameAndVersionFromImageBase
0x18002AA80: "private: int __cdecl SIPObjectCAB_::WriteHeader(void) __ptr64" ?WriteHeader@SIPObjectCAB_@@AEAAHXZ
0x18003D958: "__cdecl _imp_CryptQueryObject" __imp_CryptQueryObject
0x180041090: "Blob" ??_C@_19GJPDHHOH@?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18003D9A0: "__cdecl _imp_ASN1BERDecUTCTime" __imp_ASN1BERDecUTCTime
0x18003D7F8: "__cdecl _imp_CryptSIPRetrieveSubjectGuid" __imp_CryptSIPRetrieveSubjectGuid
0x18003F760: "SucceedSilent" ??_C@_1BM@FNDFPHAL@?$AAS?$AAu?$AAc?$AAc?$AAe?$AAe?$AAd?$AAS?$AAi?$AAl?$AAe?$AAn?$AAt?$AA?$AA@
0x18003D7D8: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x18003D7E0: "__cdecl _imp_CryptExportPublicKeyInfo" __imp_CryptExportPublicKeyInfo
0x18003D820: "__cdecl _imp_CertFindAttribute" __imp_CertFindAttribute
0x180005AA0: "public: virtual char * __ptr64 __cdecl SIPObject_::GetDataOIDHint(void) __ptr64" ?GetDataOIDHint@SIPObject_@@UEAAPEADXZ
0x180004180: EventFree
0x18003C450: g_SupportedHashAlgorithms
0x18003E108: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180033020: "struct _SPC_SP_OPUS_INFO * __ptr64 __cdecl _AllocGetOpusInfo(struct _CRYPT_PROVIDER_DATA * __ptr64,struct _CRYPT_PROVIDER_SGNR * __ptr64,unsigned long * __ptr64)" ?_AllocGetOpusInfo@@YAPEAU_SPC_SP_OPUS_INFO@@PEAU_CRYPT_PROVIDER_DATA@@PEAU_CRYPT_PROVIDER_SGNR@@PEAK@Z
0x18003DCF8: "__cdecl _imp_CreateFileMappingA" __imp_CreateFileMappingA
0x18003DBD8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180043190: "|.. pszUsageOID: " ??_C@_1FG@DLOBAENC@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAz?$AAU?$AAs?$AAa?$AAg?$AAe?$AAO?$AAI?$AAD?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DDE8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18003F6F0: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x1800509A0: "struct _LOADED_PROVIDER * __ptr64 __ptr64 pProviderList" ?pProviderList@@3PEAU_LOADED_PROVIDER@@EA
0x18003EFF0: "Software\Microsoft\Cryptography\" ??_C@_1HA@DLEHGFHJ@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180044090: "| |.. csCertChain: " ??_C@_1FI@JNNMEAPI@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAs?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180024810: CryptCATCDFClose
0x18003443C: PkiAsn1SetUnicodeConvertedToIA5String
0x18003905C: SIPolicyParseString
0x18003D8B8: "__cdecl _imp_CryptMsgClose" __imp_CryptMsgClose
0x18004A7D0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x18004A614: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll
0x18000E56C: "long __cdecl HashpImageGetDigestStream<struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,unsigned long,void const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,struct HASHLIB_CERT_INFO * __ptr64)" ??$HashpImageGetDigestStream@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@KPEBXKKP6AJPEAXKPEAKPEAPEAX3@Z2PEAUHASHLIB_CERT_INFO@@@Z
0x18003DE50: "__cdecl _imp_RegQueryInfoKeyA" __imp_RegQueryInfoKeyA
0x180043B70: "| | |.. pNoButtonText: " ??_C@_1FG@BPPGBMCL@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAN?$AAo?$AAB?$AAu?$AAt?$AAt?$AAo?$AAn?$AAT?$AAe?$AAx?$AAt?$AA?3?$AA?5?$AA?5@
0x18003DE88: "__cdecl _imp_RegOpenKeyExA" __imp_RegOpenKeyExA
0x18003C3B0: "const Stack_::`vftable'" ??_7Stack_@@6B@
0x180021FD0: CryptCATPutAttrInfo
0x18000351C: "long __cdecl _CheckTrustedPublisher(struct _CRYPT_PROVIDER_DATA * __ptr64,unsigned long,int)" ?_CheckTrustedPublisher@@YAJPEAU_CRYPT_PROVIDER_DATA@@KH@Z
0x180042ED0: "|.. pPDSip: " ??_C@_1BM@LLGGKPCE@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAP?$AAD?$AAS?$AAi?$AAp?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18003DA60: "__cdecl _imp_ASN1CEREncUTCTime" __imp_ASN1CEREncUTCTime
0x180045800: "NoRevalidationUponRefresh" ??_C@_1DE@NKKELDJI@?$AAN?$AAo?$AAR?$AAe?$AAv?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAo?$AAn?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AA?$AA@
0x180045A50: "1.2.840.113549.1.9.25.4" ??_C@_0BI@ONHFBGPG@1?42?4840?4113549?41?49?425?44?$AA@
0x180021C50: CryptCATGetAttrInfo
0x18003DE80: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180025C68: "struct CRYPTCATMEMBER_ * __ptr64 __cdecl CatalogFillCatMember(struct CRYPTCATSTORE_ * __ptr64,struct _CTL_ENTRY * __ptr64)" ?CatalogFillCatMember@@YAPEAUCRYPTCATMEMBER_@@PEAUCRYPTCATSTORE_@@PEAU_CTL_ENTRY@@@Z
0x180050888: "__cdecl _hmod__imagehlp_dll" __hmod__imagehlp_dll
0x180010283: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x180044ED0: "SiPolicyVersion" ??_C@_1CA@JPCHJAPP@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1800061A0: WintrustLoadFunctionPointers
0x180029DDC: "private: int __cdecl SIPObjectCAB_::GetFilePointer(unsigned long * __ptr64) __ptr64" ?GetFilePointer@SIPObjectCAB_@@AEAAHPEAK@Z
0x18000FEC4: "__cdecl _security_init_cookie" __security_init_cookie
0x18003F410: "HashDigestLength" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180026CF0: "public: virtual int __cdecl CCatalogParserV2::EncodeMemberInfo(struct CRYPTCATSTORE_ const * __ptr64,struct CRYPTCATMEMBER_ const * __ptr64,struct _CRYPT_ATTRIBUTE * __ptr64)const __ptr64" ?EncodeMemberInfo@CCatalogParserV2@@UEBAHPEBUCRYPTCATSTORE_@@PEBUCRYPTCATMEMBER_@@PEAU_CRYPT_ATTRIBUTE@@@Z
0x180031558: "bool __cdecl didFirstAttemptNonSealing(struct _CRYPT_PROVIDER_DATA const * __ptr64)" ?didFirstAttemptNonSealing@@YA_NPEBU_CRYPT_PROVIDER_DATA@@@Z
0x180044DA8: "waitsvc.cpp" ??_C@_0M@MKLEHDMI@waitsvc?4cpp?$AA@
0x18001A720: "struct _CERT_CONTEXT const * __ptr64 __cdecl WTHelperCertFindIssuerCertificate(struct _CERT_CONTEXT const * __ptr64,unsigned long,void * __ptr64 * __ptr64,struct _FILETIME * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64)" ?WTHelperCertFindIssuerCertificate@@YAPEBU_CERT_CONTEXT@@PEBU1@KPEAPEAXPEAU_FILETIME@@KPEAK3@Z
0x1800550E0: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180040B38: "WVTAsn1SpcMinimalCriteriaInfoEnc" ??_C@_0CE@NEFLABLH@WVTAsn1SpcMinimalCriteriaInfoEnc@
0x18003E230: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18003DE28: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x18003E0A0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x180042B00: "|.. dwRegSecuritySettings: " ??_C@_1GE@EHOCMGHN@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAR?$AAe?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180027720: InboxCryptSIPGetSealedDigest
0x18003D7A0: "__cdecl _imp_CryptMsgVerifyCountersignatureEncodedEx" __imp_CryptMsgVerifyCountersignatureEncodedEx
0x180044300: "| | | |.. pCert: " ??_C@_1FK@MDEAHFPE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAC?$AAe?$AAr?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180026A20: CatalogFreeAttribute
0x180026A80: MsCatConstructHashTag
0x180041FB8: "| +-- pCatalog: " ??_C@_1CI@JDJCFPK@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18004C344: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180044C80: "struct _GUID const IID_IPersonalTrustDB" ?IID_IPersonalTrustDB@@3U_GUID@@B
0x180011802: wcscmp
0x1800341D4: PkiAsn1GetAny
0x18002D590: ConfigCiPackageFamilyNameCheck
0x1800337A8: Client_SSCatDBPauseResumeService
0x18003E0E8: "__cdecl _imp_memmove" __imp_memmove
0x18003DC50: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18003E028: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x18002A340: "public: virtual int __cdecl SIPObjectCAB_::RemoveSignedDataMsg(struct SIP_SUBJECTINFO_ * __ptr64,unsigned long) __ptr64" ?RemoveSignedDataMsg@SIPObjectCAB_@@UEAAHPEAUSIP_SUBJECTINFO_@@K@Z
0x180050AA0: g_SiPolicyHandles
0x18001DB78: StoreProviderGetStore
0x1800037B0: "long __cdecl CheckSignatureTrust_(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?CheckSignatureTrust_@@YAJPEAU_CRYPT_PROVIDER_DATA@@@Z
0x1800333E0: "private: virtual long __cdecl CTrustDB::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CTrustDB@@EEAAJAEBU_GUID@@PEAPEAX@Z
0x18002B3A0: "public: virtual int __cdecl SIPObject_::GetSealedDigest(struct SIP_SUBJECTINFO_ * __ptr64,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64) __ptr64" ?GetSealedDigest@SIPObject_@@UEAAHPEAUSIP_SUBJECTINFO_@@PEBEKPEAEPEAK@Z
0x18000A960: "unsigned long __cdecl _SSCatDBSetupRPCConnection(void * __ptr64 * __ptr64)" ?_SSCatDBSetupRPCConnection@@YAKPEAPEAX@Z
0x18002E004: "int __cdecl _GetVersionNumbers(unsigned short * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64)" ?_GetVersionNumbers@@YAHPEAGPEAK1100@Z
0x180043630: "| |.. pfnObjectTrust: " ??_C@_1FK@HBPDGECB@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180026354: CatalogLoadFileData
0x1800402F0: "2.5.29.14" ??_C@_09FDACFLGJ@2?45?429?414?$AA@
0x18003D780: "__cdecl _imp_CertGetSubjectCertificateFromStore" __imp_CertGetSubjectCertificateFromStore
0x18003B138: "long __cdecl I_ProcessSealingTimestamp(struct _CRYPT_TIMESTAMP_CONTEXT * __ptr64,void * __ptr64,unsigned char const * __ptr64,unsigned long,unsigned long,struct _CERT_CHAIN_CONTEXT const * __ptr64,enum SealTimestampAction::Enum)" ?I_ProcessSealingTimestamp@@YAJPEAU_CRYPT_TIMESTAMP_CONTEXT@@PEAXPEBEKKPEBU_CERT_CHAIN_CONTEXT@@W4Enum@SealTimestampAction@@@Z
0x180029040: "public: virtual void * __ptr64 __cdecl SIPObjectCAB_::`scalar deleting destructor'(unsigned int) __ptr64" ??_GSIPObjectCAB_@@UEAAPEAXI@Z
0x18004A5F4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_bcrypt_dll" __DELAY_IMPORT_DESCRIPTOR_bcrypt_dll
0x1800411C8: "\StringFileInfo\04090000\%s" ??_C@_1DI@FKIMFIEE@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA0?$AA4?$AA0?$AA9?$AA0?$AA0?$AA0?$AA0?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180044F20: "System32\CodeIntegrity\SiPolicy." ??_C@_1EI@GICELIG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4@
0x18004A798: CRYPTSP_NULL_THUNK_DATA_DLN
0x18003E0D0: "__cdecl _imp_malloc" __imp_malloc
0x1800387A8: SIPolicyParsePolicySigners
0x180003920: "bool __cdecl ExtractSigners_(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?ExtractSigners_@@YA_NPEAU_CRYPT_PROVIDER_DATA@@@Z
0x1800202A0: "int __cdecl ComputeFirstPageHash(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64,int)" ?ComputeFirstPageHash@@YAHPEBG0PEAXH@Z
0x1800439A8: "| |.. psUIData: " ??_C@_1DA@IAFBJIAC@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAU?$AAI?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180010310: "__cdecl _imp_load_SaferiSearchMatchingHashRules" __imp_load_SaferiSearchMatchingHashRules
0x180044F68: "SiPolicy.p7b" ??_C@_1BK@FEAPKNHI@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003D830: "__cdecl _imp_CryptSIPAddProvider" __imp_CryptSIPAddProvider
0x18003E008: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18003DC40: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180044CF8: "CatDBLogging" ??_C@_1BK@CLDFAMHE@?$AAC?$AAa?$AAt?$AAD?$AAB?$AAL?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?$AA@
0x1800414C0: "CryptSIPPutSignedDataMsg" ??_C@_1DC@NGIJNIPK@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAI?$AAP?$AAP?$AAu?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAD?$AAa?$AAt?$AAa?$AAM?$AAs?$AAg?$AA?$AA@
0x18001BBC0: WVTAsn1SpcFinancialCriteriaInfoEncode
0x18004C560: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800457B0: "UpdateDriverSiPolicy.p7b" ??_C@_1DC@EJPOECDE@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x18003DF88: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x180005AA0: mscat32DllRegisterServer
0x180044A48: "1.3.6.1.4.1.311.2.6.1" ??_C@_0BG@DAEBDPDF@1?43?46?41?44?41?4311?42?46?41?$AA@
0x18003E240: "__cdecl _imp_LdrResSearchResource" __imp_LdrResSearchResource
0x18003DC38: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x180042B70: "|.. dwRegPolicySettings: " ??_C@_1GE@NECCNPNJ@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAd?$AAw?$AAR?$AAe?$AAg?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAS?$AAe?$AAt?$AAt?$AAi?$AAn?$AAg?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180035518: "public: void * __ptr64 __cdecl Stack_::Get(unsigned long,unsigned long,unsigned char,void * __ptr64) __ptr64" ?Get@Stack_@@QEAAPEAXKKEPEAX@Z
0x1800356AC: "public: void __cdecl Stack_::Sort(unsigned long,unsigned long,unsigned char) __ptr64" ?Sort@Stack_@@QEAAXKKE@Z
0x180045750: "System32\CodeIntegrity\UpdateDri" ??_C@_1GA@MGIBDJJP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAr?$AAi@
0x18003DB78: RPCRT4_NULL_THUNK_DATA
0x180043390: "| |.. pfnAlloc: " ??_C@_1FK@GDJOCGAD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18000FA60: "__cdecl _report_gsfailure" __report_gsfailure
0x18001B244: "void __cdecl WVTAsn1GetSpcString(struct SpcString * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetSpcString@@YAXPEAUSpcString@@KPEAPEAGPEAPEAEPEAJ@Z
0x1800432C0: "|.. psPfns: " ??_C@_1BM@IOGKMADK@?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAP?$AAf?$AAn?$AAs?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18003DB88: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x180011040: WTLogConfigCiScriptEvent
0x180033878: Client_SSCatDBPrepareForCall
0x180022880: CryptCATAdminAddCatalog
0x1800100EF: "__cdecl _imp_load_BCryptOpenAlgorithmProvider" __imp_load_BCryptOpenAlgorithmProvider
0x18003DFC8: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x180041A98: "CRYPT_PROVIDER_DATA: " ??_C@_1CO@OHPJBIKD@?$AAC?$AAR?$AAY?$AAP?$AAT?$AA_?$AAP?$AAR?$AAO?$AAV?$AAI?$AAD?$AAE?$AAR?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18002751C: CatalogEncodeNameValue
0x180029F30: "protected: virtual int __cdecl SIPObjectCAB_::MapFile(void) __ptr64" ?MapFile@SIPObjectCAB_@@MEAAHXZ
0x1800014C0: RegOpenHKCUEx
0x180040AE8: "1.3.6.1.4.1.311.2.1.10" ??_C@_0BH@DLOFGPPP@1?43?46?41?44?41?4311?42?41?410?$AA@
0x18003DF00: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180036540: SIPolicyFindScenarioAllowSigners
0x18000FCD8: "__cdecl onexit" _onexit
0x180040F78: "CryptGetObjectUrl" ??_C@_0BC@NEEMEDGL@CryptGetObjectUrl?$AA@
0x18001A8F4: "int __cdecl _IsLifetimeSigningCert(struct _CERT_CONTEXT const * __ptr64)" ?_IsLifetimeSigningCert@@YAHPEBU_CERT_CONTEXT@@@Z
0x180042100: "| |.. pcwszMemberFilePath:" ??_C@_1FG@EHFGLAIE@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAc?$AAw?$AAs?$AAz?$AAM?$AAe?$AAm?$AAb?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?3@
0x18003E100: "__cdecl _imp_qsort_s" __imp_qsort_s
0x18002F9E8: "void * __ptr64 __cdecl _OpenHKCUStore(unsigned short const * __ptr64)" ?_OpenHKCUStore@@YAPEAXPEBG@Z
0x1800225FC: "public: __cdecl std::unique_ptr<class CATALOG_HASHES_LIST_,struct deleter<struct release::localfree::tag> >::~unique_ptr<class CATALOG_HASHES_LIST_,struct deleter<struct release::localfree::tag> >(void) __ptr64" ??1?$unique_ptr@VCATALOG_HASHES_LIST_@@U?$deleter@Utag@localfree@release@@@@@std@@QEAA@XZ
0x180026BC0: "public: virtual int __cdecl CCatalogParserV1::EncodeMemberInfo(struct CRYPTCATSTORE_ const * __ptr64,struct CRYPTCATMEMBER_ const * __ptr64,struct _CRYPT_ATTRIBUTE * __ptr64)const __ptr64" ?EncodeMemberInfo@CCatalogParserV1@@UEBAHPEBUCRYPTCATSTORE_@@PEBUCRYPTCATMEMBER_@@PEAU_CRYPT_ATTRIBUTE@@@Z
0x180037B2C: SIPolicyMatchFileRefRule
0x1800550B0: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x180050A50: "class CCatalogCache g_CatalogCache" ?g_CatalogCache@@3VCCatalogCache@@A
0x1800508B8: "__cdecl _native_startup_state" __native_startup_state
0x180021620: WTGetPluginSignatureInfo
0x180022FA4: "void __cdecl CDFEOLOut(unsigned short * __ptr64,unsigned long)" ?CDFEOLOut@@YAXPEAGK@Z
0x180008110: CatalogCopyIndirectData
0x180041928: "SPC" ??_C@_03LAOLLCNJ@SPC?$AA@
0x180040A78: "1.3.6.1.4.1.311.2.1.20" ??_C@_0BH@DJKDNBKG@1?43?46?41?44?41?4311?42?41?420?$AA@
0x18003D7B8: "__cdecl _imp_CryptMsgUpdate" __imp_CryptMsgUpdate
0x1800416A0: "SoftpubLoadSignature" ??_C@_1CK@IALNDIKK@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAL?$AAo?$AAa?$AAd?$AAS?$AAi?$AAg?$AAn?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?$AA@
0x18003E8A0: "%lu" ??_C@_17IJMNDCL@?$AA?$CF?$AAl?$AAu?$AA?$AA@
0x18004A654: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_safer_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_advapi32_safer_l1_1_0_dll
0x1800351D0: GetUserTextualSidHKCU
0x180001970: WintrustCertificateTrust
0x1800384A0: SIPolicyParseBinary
0x18003DD28: "__cdecl _imp_LoadResource" __imp_LoadResource
0x18003D838: "__cdecl _imp_CryptSIPRemoveProvider" __imp_CryptSIPRemoveProvider
0x18003D898: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x18003DF28: "__cdecl _imp_CreateMutexA" __imp_CreateMutexA
0x18003D9E0: "__cdecl _imp_ASN1DecSetError" __imp_ASN1DecSetError
0x180041640: "X" ??_C@_01MMEEDKFM@X?$AA@
0x180045910: "SignedScript" ??_C@_1BK@GOJKBFDA@?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAS?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?$AA@
0x180026B30: MsCatFreeHashTag
0x18001D950: WintrustGetRegPolicyFlags
0x180055088: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18003FEB8: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x18003E980: "1.2.840.113549.1.9.6" ??_C@_0BF@FAFEKMCA@1?42?4840?4113549?41?49?46?$AA@
0x180042EF0: "| |.. gSubject: " ??_C@_1FG@PJOEDPLP@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAg?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003EB28: "Query" ??_C@_1M@PLECIMCM@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AA?$AA@
0x180041BE0: "| |.. pPolicyCallbackData: " ??_C@_1FG@MKLCPAO@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5@
0x18001D9F0: WintrustSetRegPolicyFlags
0x18000E01C: "void __cdecl BigFileUnmap(struct _BIG_FILE_MAP_INFO * __ptr64)" ?BigFileUnmap@@YAXPEAU_BIG_FILE_MAP_INFO@@@Z
0x180045448: "UpdateWinSiPolicy.p7b" ??_C@_1CM@CBLHBBHD@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x180010499: "__cdecl _imp_load_MessageBoxA" __imp_load_MessageBoxA
0x1800113F0: WTLogConfigCiSignerEvent
0x1800423D0: "| |.. cbMemObject: " ??_C@_1FI@KJBIJDPA@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAb?$AAM?$AAe?$AAm?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x180008870: SoftpubLoadMessage
0x18004C538: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0
0x180040D30: "WVTAsn1SpcPeImageDataDecode" ??_C@_0BM@JAEFNOOF@WVTAsn1SpcPeImageDataDecode?$AA@
0x18001FADC: "struct _WINTRUST_DATA * __ptr64 __cdecl ConvertDataFromVersion1(struct HWND__ * __ptr64,struct _GUID * __ptr64,struct _WINTRUST_DATA * __ptr64,struct WINTRUST_FILE_INFO_ * __ptr64,void * __ptr64)" ?ConvertDataFromVersion1@@YAPEAU_WINTRUST_DATA@@PEAUHWND__@@PEAU_GUID@@PEAU1@PEAUWINTRUST_FILE_INFO_@@PEAX@Z
0x18003F550: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18002800C: "public: __cdecl std::unique_ptr<struct HASHLIB_BCRYPT_HASH_CTXT,struct deleter<struct release::bcrypthashctxt::tag> >::~unique_ptr<struct HASHLIB_BCRYPT_HASH_CTXT,struct deleter<struct release::bcrypthashctxt::tag> >(void) __ptr64" ??1?$unique_ptr@UHASHLIB_BCRYPT_HASH_CTXT@@U?$deleter@Utag@bcrypthashctxt@release@@@@@std@@QEAA@XZ
0x18003D798: "__cdecl _imp_CryptMemFree" __imp_CryptMemFree
0x18001AE2C: "void __cdecl WVTAsn1GetObjId(struct tagASN1objectidentifier2_t * __ptr64,unsigned long,char * __ptr64 * __ptr64,unsigned char * __ptr64 * __ptr64,long * __ptr64)" ?WVTAsn1GetObjId@@YAXPEAUtagASN1objectidentifier2_t@@KPEAPEADPEAPEAEPEAJ@Z
0x18003E070: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x18003D878: "__cdecl _imp_CertIsStrongHashToSign" __imp_CertIsStrongHashToSign
0x18004C498: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x18001E2CC: "void __cdecl _SetConfidenceOnIssuer(unsigned long,struct _CERT_CONTEXT const * __ptr64,struct _CERT_CONTEXT const * __ptr64,unsigned long,struct _FILETIME * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?_SetConfidenceOnIssuer@@YAXKPEBU_CERT_CONTEXT@@0KPEAU_FILETIME@@PEAK2@Z
0x18004C510: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1
0x180040B20: "1.3.6.1.4.1.311.2.1.26" ??_C@_0BH@GPPJHGCA@1?43?46?41?44?41?4311?42?41?426?$AA@
0x180043010: "| |.. psSipSubjectInfo: " ??_C@_1FK@BHHJCPHD@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAS?$AAi?$AAp?$AAS?$AAu?$AAb?$AAj?$AAe?$AAc?$AAt?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003C270: "const SIPObject_::`vftable'" ??_7SIPObject_@@6B@
0x1800421C0: "| |.. pbCaclulatedFileHash" ??_C@_1EO@FAKLPDPG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAb?$AAC?$AAa?$AAc?$AAl?$AAu?$AAl?$AAa?$AAt?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AAH?$AAa?$AAs?$AAh@
0x180045A80: "CryptSvcForceStartPolicy" ??_C@_1DC@DEJMOBJF@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAv?$AAc?$AAF?$AAo?$AAr?$AAc?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18003DE00: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18003D9F0: "__cdecl _imp_ASN1BERDecPeekTag" __imp_ASN1BERDecPeekTag
0x18001081C: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x18003DB40: "__cdecl _imp_NdrClientCall3" __imp_NdrClientCall3
0x18001AA10: DllRegisterServer
0x18003DD80: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x18001BAB0: WVTAsn1SealingTimestampAttributeEncode
0x18000DB20: "public: virtual void * __ptr64 __cdecl SIPObjectPE_::`vector deleting destructor'(unsigned int) __ptr64" ??_ESIPObjectPE_@@UEAAPEAXI@Z
0x180026874: SortedCatalogClose
0x180008F10: "int __cdecl _SetSubjectInfo(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_SetSubjectInfo@@YAHPEAU_CRYPT_PROVIDER_DATA@@@Z
0x18002C720: "public: __cdecl std::unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >::~unique_ptr<struct SiPolicies,struct deleter<struct release::system_integrity_policy_handle_tag> >(void) __ptr64" ??1?$unique_ptr@USiPolicies@@U?$deleter@Usystem_integrity_policy_handle_tag@release@@@@@std@@QEAA@XZ
0x18003D8B0: "__cdecl _imp_CertOIDToAlgId" __imp_CertOIDToAlgId
0x1800357F0: "int __cdecl Stack_compare(void const * __ptr64,void const * __ptr64)" ?Stack_compare@@YAHPEBX0@Z
0x18000D530: "int __cdecl AddToHashList(struct CATALOG_HASHES_<2> const & __ptr64)" ?AddToHashList@@YAHAEBU?$CATALOG_HASHES_@$01@@@Z
0x18003E038: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x18001BF70: WVTAsn1SpcMinimalCriteriaInfoDecode
0x180041650: "SoftpubInitialize" ??_C@_1CE@JIMHGBBO@?$AAS?$AAo?$AAf?$AAt?$AAp?$AAu?$AAb?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x180043ED0: "| +.. pfnOnAdvancedClickDe" ??_C@_1FK@DBHANEJ@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAp?$AAf?$AAn?$AAO?$AAn?$AAA?$AAd?$AAv?$AAa?$AAn?$AAc?$AAe?$AAd?$AAC?$AAl?$AAi?$AAc?$AAk?$AAD?$AAe@
0x180020258: "public: __cdecl ViewInfo::~ViewInfo(void) __ptr64" ??1ViewInfo@@QEAA@XZ
0x18001BB10: WVTAsn1SpcFinancialCriteriaInfoDecode
0x180044C90: "struct _GUID const IID_IPersonalDisallowDB" ?IID_IPersonalDisallowDB@@3U_GUID@@B
0x18003D7B0: "__cdecl _imp_CryptMsgOpenToDecode" __imp_CryptMsgOpenToDecode
0x1800225FC: "public: __cdecl std::unique_ptr<struct SIP_INDIRECT_DATA_,struct deleter<struct release::localfree::tag> >::~unique_ptr<struct SIP_INDIRECT_DATA_,struct deleter<struct release::localfree::tag> >(void) __ptr64" ??1?$unique_ptr@USIP_INDIRECT_DATA_@@U?$deleter@Utag@localfree@release@@@@@std@@QEAA@XZ
0x18004C4FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800455F0: "UpdateATPSiPolicy.p7b" ??_C@_1CM@DEPDMJFM@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x180042630: "| |.. chStores: " ??_C@_1FI@HDNNHJPN@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAh?$AAS?$AAt?$AAo?$AAr?$AAe?$AAs?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DD98: "__cdecl _imp_VirtualUnlock" __imp_VirtualUnlock
0x180042210: "%02.2X" ??_C@_1O@LEFLAFAD@?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAX?$AA?$AA@
0x180010204: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll
0x180041738: "GenericChainFinalProv" ??_C@_1CM@NCCMPKMH@?$AAG?$AAe?$AAn?$AAe?$AAr?$AAi?$AAc?$AAC?$AAh?$AAa?$AAi?$AAn?$AAF?$AAi?$AAn?$AAa?$AAl?$AAP?$AAr?$AAo?$AAv?$AA?$AA@
0x18002FE14: "void __cdecl FPrintfU(void * __ptr64,unsigned short const * __ptr64,...)" ?FPrintfU@@YAXPEAXPEBGZZ
0x1800106E2: "__cdecl _imp_load_ChangeServiceConfigW" __imp_load_ChangeServiceConfigW
0x180042D90: "| +.. Store[%02.2d]: " ??_C@_1GC@OLBBLGGM@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?4?$AA?4?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAe?$AA?$FL?$AA?$CF?$AA0?$AA2?$AA?4?$AA2?$AAd?$AA?$FN?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x1800502C0: "struct _WINTRUST_CLIENT_TP_INFO WinTrustClientTPInfo" ?WinTrustClientTPInfo@@3U_WINTRUST_CLIENT_TP_INFO@@A
0x18003EBF0: "Software\Microsoft\Windows\Curre" ??_C@_1KO@JEBDJBAO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18003E0D8: "__cdecl _imp_free" __imp_free
0x180041DB0: "| +-- pFile: " ??_C@_1CC@BHNGBCP@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$CL?$AA?9?$AA?9?$AA?5?$AAp?$AAF?$AAi?$AAl?$AAe?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x180044AD0: "CryptVerifyTimeStampSignature" ??_C@_0BO@JLDIHJLK@CryptVerifyTimeStampSignature?$AA@
0x18000FE30: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18001039C: IsSaferiSearchMatchingHashRulesPresent
0x18003DF80: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000C3D0: "int __cdecl mscat32DllMain(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?mscat32DllMain@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x18003EF10: "CatRoot" ??_C@_1BA@ILLJEMFA@?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18003DB60: "__cdecl _imp_RpcBindingSetAuthInfoExW" __imp_RpcBindingSetAuthInfoExW
0x18002C988: "public: long __cdecl SiChainInfo::ConvertFromProvData(struct _CRYPT_PROVIDER_DATA const * __ptr64,unsigned char) __ptr64" ?ConvertFromProvData@SiChainInfo@@QEAAJPEBU_CRYPT_PROVIDER_DATA@@E@Z
0x18003E130: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180033100: "private: virtual long __cdecl CTrustDB::AddCert(struct _CERT_CONTEXT const * __ptr64) __ptr64" ?AddCert@CTrustDB@@EEAAJPEBU_CERT_CONTEXT@@@Z
0x180007800: "int __cdecl _FindSignature(struct _CRYPT_PROVIDER_DATA * __ptr64)" ?_FindSignature@@YAHPEAU_CRYPT_PROVIDER_DATA@@@Z
0x180044DB8: "errlog.cpp" ??_C@_0L@FKPFKEKL@errlog?4cpp?$AA@
0x18003DDF8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180008DA0: CatalogDecodeNameValue
0x1800425D0: "| |.. psSignerInfo: " ??_C@_1FK@DCCMNKPG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAp?$AAs?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5?$AA?5@
0x18003DC18: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x180008640: SortedCatalogNoContentMsgDecode
0x18001F850: WTHelperIsInRootStore
0x18001B310: "int __cdecl WVTAsn1InfoDecodeAndAlloc(int,unsigned char const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?WVTAsn1InfoDecodeAndAlloc@@YAHHPEBEKPEAPEAX@Z
0x1800400A0: "1.3.6.1.4.1.311.10.3.20" ??_C@_0BI@CKBPKMLL@1?43?46?41?44?41?4311?410?43?420?$AA@
0x18003DF68: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180044220: "| | |.. casCertChain[%d]: " ??_C@_1EA@ECLICJCG@?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?5?$AA?5?$AA?5?$AA?$HM?$AA?4?$AA?4?$AA?5?$AAc?$AAa?$AAs?$AAC?$AAe?$AAr?$AAt?$AAC?$AAh?$AAa?$AAi?$AAn?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?3?$AA?$AN?$AA?6?$AA?$AA@
0x18004C4C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180045A68: "1.3.6.1.4.1.311.2.4.1" ??_C@_0BG@JKEIPHLO@1?43?46?41?44?41?4311?42?44?41?$AA@
0x180007494: CatalogFreeMember
0x1800082B0: CatalogAllocSortedMember
0x1800268E8: SortedCatalogOpen
0x1800340C8: PkiAsn1FromObjectIdentifier
0x180001020: CryptCATCatalogInfoFromContext
0x18001C020: WVTAsn1SpcMinimalCriteriaInfoEncode
0x1800117EA: memset
0x18000BDC0: GetRegProvider
0x18004C614: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180033490: "private: virtual unsigned long __cdecl CTrustDB::Release(void) __ptr64" ?Release@CTrustDB@@EEAAKXZ
0x180025F7C: "int __cdecl CatalogLoadData(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?CatalogLoadData@@YAHPEBGPEAKPEAPEAEPEAPEAX@Z
0x18000E2B8: "long __cdecl I_HashComputeImageHashesEx<struct BCRYPT_HASH_CTXT>(struct BCRYPT_HASH_CTXT * __ptr64,void const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64),void * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long,struct HASHLIB_CERT_INFO * __ptr64,unsigned char * __ptr64)" ??$I_HashComputeImageHashesEx@UBCRYPT_HASH_CTXT@@@@YAJPEAUBCRYPT_HASH_CTXT@@PEBXKKP6AJPEAXKPEAKPEAPEAX3@Z2PEAPEAE3KPEAUHASHLIB_CERT_INFO@@PEAE@Z
0x18003DC30: "__cdecl _imp_ReadFile" __imp_ReadFile
0x180045178: "Kernel_SkuSiStatus" ??_C@_1CG@IHKMJCGK@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAS?$AAk?$AAu?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x18001D6F0: SetRegProvider

[JEB Decompiler by PNF Software]