Generated by JEB on 2019/08/01

PE: C:\Windows\System32\bcrypt.dll Base=0x180000000 SHA-256=4682B99FD63617241BDE436554C5B9D2BA0247BE4ED958EF05785D1A12E50E01
PDB: bcrypt.pdb GUID={2321E963-504C-55CC-56BA233F6CC372FF} Age=1

622 located named symbols:
0x18001B5D8: PseudoHandleTableSize
0x180006198: "long __cdecl _IoOpenDevice(void)" ?_IoOpenDevice@@YAJXZ
0x18001A8A0: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x180002E80: BCryptHash
0x18001226C: CachedCloseAlgorithmProvider
0x180007E40: BCryptRegisterConfigChangeNotify
0x180015580: BCryptConfigureContextFunction
0x1800066E0: BCryptImportKey
0x18001A8A8: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800186F4: "unsigned long __cdecl IoCopy_ImageRegs(struct _CRYPT_IMAGE_REG * __ptr64,struct _CRYPT_IMAGE_REG * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_ImageRegs@@YAKPEAU_CRYPT_IMAGE_REG@@0PEAPEAE1PEAKPEAE@Z
0x18001A9C0: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x18000E480: BCryptProcessMultiOperations
0x180007C78: "int __cdecl ValidateTableId(unsigned long,unsigned long)" ?ValidateTableId@@YAHKK@Z
0x180019750: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18001B488: "SHA384" ??_C@_1O@KOBLHLEG@?$AAS?$AAH?$AAA?$AA3?$AA8?$AA4?$AA?$AA@
0x18001E910: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18001B538: "MD2" ??_C@_17OGKOIPPK@?$AAM?$AAD?$AA2?$AA?$AA@
0x180012784: ConvertDhPublicBlobToLegacy
0x180018CEC: "int __cdecl ValidateConfigurationFlags(unsigned long,unsigned long,unsigned long)" ?ValidateConfigurationFlags@@YAHKKK@Z
0x18000ECA8: WPP_SF_qSqdD
0x18001A7C0: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180023030: "__cdecl _imp_GetSecretAgreementInterface" __imp_GetSecretAgreementInterface
0x18000F3E4: WPP_SF_qqqdD
0x18000F62C: "__cdecl ProcessBufferDescParameters" _ProcessBufferDescParameters
0x1800206C0: g_fLoadCNGDone
0x18001AE88: "ProviderHandle" ??_C@_1BO@PKGJCANO@?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x1800206C8: g_hInstance
0x180020098: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180006F80: BCryptDeriveKeyPBKDF2
0x1800206B8: Microsoft_Windows_Crypto_BCryptEnableBits
0x18001B800: "KeyLength" ??_C@_1BE@FGBADLPC@?$AAK?$AAe?$AAy?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800206B0: g_pResolveProviderCache
0x180018C78: "unsigned long __cdecl IoUnpack_Providers(struct _CRYPT_PROVIDERS * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_Providers@@YAKPEAPEAU_CRYPT_PROVIDERS@@PEAEK@Z
0x1800130AC: ConvertLegacyDhPrivateBlob
0x18001A250: AlgorithmClassPropertyTable
0x180023028: "__cdecl _imp_GetKeyDerivationInterface" __imp_GetKeyDerivationInterface
0x180010998: ApplyPSSPaddingSalted
0x1800081A6: "__cdecl _tailMerge_bcryptprimitives_dll" __tailMerge_bcryptprimitives_dll
0x18001994C: VerifyLegacyDsaV2PrivateBlob
0x18001AC60: "V2CAPIDSAPUBLICBLOB" ??_C@_1CI@POHJGOON@?$AAV?$AA2?$AAC?$AAA?$AAP?$AAI?$AAD?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180014EB0: BCryptAddContextFunctionProvider
0x180006528: "long __cdecl IoStartup(void)" ?IoStartup@@YAJXZ
0x18001A908: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1800101F0: WppControlCallback
0x180008610: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180019004: VsmLoadInterface
0x1800206F8: g_fLoaderInitialized
0x18001B708: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18001B8B0: "ChainingModeGCM" ??_C@_1CA@HMDKAIAD@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAG?$AAC?$AAM?$AA?$AA@
0x18000F464: WPP_SF_qqqdqdD
0x18001B188: "onecore\ds\security\cryptoapi\nc" ??_C@_0DJ@EIFEJOME@onecore?2ds?2security?2cryptoapi?2nc@
0x180014AF8: "int __cdecl BcpIsValidStringArray(unsigned short * __ptr64 * __ptr64,unsigned long)" ?BcpIsValidStringArray@@YAHPEAPEAGK@Z
0x180002620: BCryptDestroySecret
0x180006A60: BCryptCloseAlgorithmProvider
0x18000DD00: BCryptEnumAlgorithms
0x180005D0C: "unsigned long __cdecl IoUnpack_PropertyRefArray(struct _CRYPT_PROPERTY_REF * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long)" ?IoUnpack_PropertyRefArray@@YAKPEAPEAPEAU_CRYPT_PROPERTY_REF@@KPEAEK@Z
0x180007830: "unsigned long __cdecl IoUnpack_SG_ProviderReg(struct _CRYPT_PROVIDER_REG * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_ProviderReg@@YAKPEAPEAU_CRYPT_PROVIDER_REG@@PEAEK1@Z
0x180006960: BCryptSetProperty
0x180020628: g_ulAdditionalProbeSize
0x18001B5BA: Microsoft_Windows_Crypto_BCryptLevels
0x1800060E8: "int __cdecl ValidateInterfaceId(unsigned long,unsigned long)" ?ValidateInterfaceId@@YAHKK@Z
0x180011BF8: MaskGeneration
0x18001A9D8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18001A800: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x18001BC20: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180006C60: GetPBKDF2Block
0x18000F054: WPP_SF_qqSqqdD
0x180012614: ConvertDhPrivateBlobToLegacy
0x18001B450: "3DES_112" ??_C@_1BC@OBELMIOB@?$AA3?$AAD?$AAE?$AAS?$AA_?$AA1?$AA1?$AA2?$AA?$AA@
0x1800184B4: UninitializeConfig
0x180002998: WppInitUm
0x18001A8B8: "__cdecl _imp_PrivilegeCheck" __imp_PrivilegeCheck
0x18001A950: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x180018570: "__cdecl TlgWrite" _TlgWrite
0x1800065AC: GetTrustedEnvironment
0x18001B350: "ECDSA" ??_C@_1M@FNACMMMF@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA?$AA@
0x18001894C: "unsigned long __cdecl IoCopy_ProviderReg(struct _CRYPT_PROVIDER_REG * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_ProviderReg@@YAKPEAU_CRYPT_PROVIDER_REG@@PEAKPEAE@Z
0x18001AA38: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18001B440: "DESX" ??_C@_19GOPKKBMO@?$AAD?$AAE?$AAS?$AAX?$AA?$AA@
0x180001E20: "__cdecl GetImagePath" _GetImagePath
0x180001010: BCryptImportKeyPair
0x18001B108: "STATUS_NO_MEMORY" ??_C@_0BB@NKBGLBFK@STATUS_NO_MEMORY?$AA@
0x18001A830: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18001B950: "DSAPRIVATEBLOB" ??_C@_1BO@DPNHNIIM@?$AAD?$AAS?$AAA?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18001A780: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1800082B0: "__cdecl _imp_load_GetSecretAgreementInterface" __imp_load_GetSecretAgreementInterface
0x18001BBF0: "bcryptprimitives.dll" ??_C@_1CK@GBKKCJGO@?$AAb?$AAc?$AAr?$AAy?$AAp?$AAt?$AAp?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180002390: BCryptSecretAgreement
0x18001B260: "ntStatus" ??_C@_08DBOEHLEI@ntStatus?$AA@
0x180007C90: "unsigned long __cdecl IoUnpack_SG_SzStringArray(unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_SzStringArray@@YAKPEAPEAPEAGKPEAEK1@Z
0x18001AF10: "MDMEnabled" ??_C@_1BG@EDNMAGPK@?$AAM?$AAD?$AAM?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x180014AC0: "int __cdecl BcpIsValidString(unsigned short const * __ptr64)" ?BcpIsValidString@@YAHPEBG@Z
0x180023008: "__cdecl _imp_GetAsymmetricEncryptionInterface" __imp_GetAsymmetricEncryptionInterface
0x18001DF9C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_bcryptPrimitives_dll" __DELAY_IMPORT_DESCRIPTOR_bcryptPrimitives_dll
0x180013C80: ConvertRsaPublicBlobToLegacy
0x18001853C: "__cdecl TlgKeywordOn" _TlgKeywordOn
0x1800128D0: ConvertDsaPrivateBlobToLegacy
0x180020960: g_handleCacheNextReplace
0x18001A9D0: "__cdecl _imp_LdrDisableThreadCalloutsForDll" __imp_LdrDisableThreadCalloutsForDll
0x18001B330: "AES" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x180006114: StringCchCopyW
0x180018A5C: "unsigned long __cdecl IoCopy_SzStringArray(unsigned short * __ptr64 * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_SzStringArray@@YAKPEAPEAGKPEAKPEAE@Z
0x18001A120: PseudoHandleAlgName
0x18001BC28: "onecore\ds\security\cryptoapi\nc" ??_C@_0DI@GLOKGOOL@onecore?2ds?2security?2cryptoapi?2nc@
0x18001A978: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18001ABB8: "__cdecl _guard_iat_table" __guard_iat_table
0x1800046DC: "unsigned long __cdecl IoUnpack_ProviderRefArray(struct _CRYPT_PROVIDER_REF * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long)" ?IoUnpack_ProviderRefArray@@YAKPEAPEAPEAU_CRYPT_PROVIDER_REF@@KPEAEK@Z
0x1800085D3: memcpy
0x18001B288: "GetKeyProtectionInterface" ??_C@_0BK@FECGEIAN@GetKeyProtectionInterface?$AA@
0x18001A790: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000666C: RegisterReopenWait
0x1800080CC: "__cdecl _security_init_cookie_ex" __security_init_cookie_ex
0x18001A890: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18001A8F0: "__cdecl _imp_memset" __imp_memset
0x18001A818: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180001C00: "__cdecl NewLoadedProviderHandle" _NewLoadedProviderHandle
0x18001E9C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180019600: "__cdecl resetstkoflw_static" _resetstkoflw_static
0x18001B258: "sResult" ??_C@_07LMHMJEJF@sResult?$AA@
0x18001BB30: "onecore\ds\security\cryptoapi\nc" ??_C@_0EB@HDEEDHIL@onecore?2ds?2security?2cryptoapi?2nc@
0x18001B568: "RNG" ??_C@_17LOEPNPLF@?$AAR?$AAN?$AAG?$AA?$AA@
0x18000818E: RtlUnhandledExceptionFilter
0x180023018: "__cdecl _imp_GetCipherInterface" __imp_GetCipherInterface
0x18001AA20: "__cdecl _imp_wcscmp" __imp_wcscmp
0x18001A9E8: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180008302: "__cdecl _C_specific_handler" __C_specific_handler
0x180020968: g_pHandleCacheLock
0x180015240: BCryptConfigureContext
0x18001A828: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x18000816A: RtlCaptureContext
0x18001A7F8: api-ms-win-core-psapi-l1-1-0_NULL_THUNK_DATA
0x18001B520: "RSA_SIGN" ??_C@_1BC@HHLBCJHC@?$AAR?$AAS?$AAA?$AA_?$AAS?$AAI?$AAG?$AAN?$AA?$AA@
0x1800206A8: WPP_REGISTRATION_GUIDS
0x180004C58: "unsigned long __cdecl IoCopy_SzString(unsigned short * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_SzString@@YAKPEAGPEAKPEAE@Z
0x180014B50: BCryptAddContextFunction
0x180006C24: DebugTraceError
0x18001B540: "MD4" ??_C@_17MDMFNACG@?$AAM?$AAD?$AA4?$AA?$AA@
0x18001A778: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18001AFC0: "Enabled" ??_C@_1BA@NPJPKIM@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x18000E678: VsmOpenAlgorithmProvider
0x1800084CC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18001AD00: "CAPIPRIVATEBLOB" ??_C@_1CA@LHEFDM@?$AAC?$AAA?$AAP?$AAI?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x1800038D0: BCryptGetProperty
0x18001A7F0: "__cdecl _imp_QueryFullProcessImageNameW" __imp_QueryFullProcessImageNameW
0x18001B9D0: "KeyDataBlob" ??_C@_1BI@NNGJONND@?$AAK?$AAe?$AAy?$AAD?$AAa?$AAt?$AAa?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18001B970: "DHPRIVATEBLOB" ??_C@_1BM@PLIDECBB@?$AAD?$AAH?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180001D24: "__cdecl LoadImage" _LoadImage
0x18001AFD0: "\Registry\Machine\System\Current" ??_C@_1JG@MJIPHKMM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18001AD58: "GetCipherInterface" ??_C@_0BD@CLBFJFIO@GetCipherInterface?$AA@
0x1800195E0: SafeAllocaFreeToHeap
0x18001A920: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18001E9B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0
0x180020680: WPP_MAIN_CB
0x1800082F0: "__cdecl _imp_load_GetRngInterface" __imp_load_GetRngInterface
0x180002780: BCryptVerifySignature
0x18001E974: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18001B5A0: "XTS-AES" ??_C@_1BA@EPFFOHL@?$AAX?$AAT?$AAS?$AA?9?$AAA?$AAE?$AAS?$AA?$AA@
0x180012BEC: ConvertDsaPublicBlobToLegacy
0x1800139E0: ConvertRsaPrivateBlobToLegacy
0x18001BC1C: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180006568: "__cdecl InitializeLoaderLock" _InitializeLoaderLock
0x18000F4FC: WPP_SF_qqqdqdqD
0x180012A88: ConvertDsaPrivateBlobToLegacyV2
0x18001E9EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-legacy-l1-1-0
0x18001B930: "RSAPRIVATEBLOB" ??_C@_1BO@MGHJKOLO@?$AAR?$AAS?$AAA?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18000EF58: WPP_SF_qqSqdqD
0x18001ABE0: "CAPIDHPRIVATEBLOB" ??_C@_1CE@IAPDJAJG@?$AAC?$AAA?$AAP?$AAI?$AAD?$AAH?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180012380: addEntryToCache
0x18001A8D8: "__cdecl _imp_NtTerminateProcess" __imp_NtTerminateProcess
0x180002150: BCryptDecrypt
0x18001B990: "AlgorithmName" ??_C@_1BM@GMOELGKK@?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x180023010: "__cdecl _imp_GetHashInterface" __imp_GetHashInterface
0x180001220: BCryptExportKey
0x18001B270: "GetKeyStorageInterface" ??_C@_0BH@IJGFAJFP@GetKeyStorageInterface?$AA@
0x180020930: "struct _RTL_CRITICAL_SECTION g_csIoInitialize" ?g_csIoInitialize@@3U_RTL_CRITICAL_SECTION@@A
0x1800138F8: ConvertRsaPrivateBlobToFullRsa
0x18001AD20: "CAPIPUBLICBLOB" ??_C@_1BO@PMFJPOML@?$AAC?$AAA?$AAP?$AAI?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180020010: ETW_LOG_BCRYPT_PROVIDER_Context
0x1800032C0: VerifyStackAvailable
0x18001AD40: "GetHashInterface" ??_C@_0BB@BKDJOIGI@GetHashInterface?$AA@
0x1800173D0: BCryptRemoveContextFunction
0x18001A968: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x180017730: BCryptRemoveContextFunctionProvider
0x18001B8F0: "KeyStrength" ??_C@_1BI@HLPJMFNK@?$AAK?$AAe?$AAy?$AAS?$AAt?$AAr?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180018210: BcpUnregisterConfigChangeNotifyNoLogging
0x18000DAD0: BCryptDuplicateKey
0x18001A840: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18001A808: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x18001B4D0: "SP800_56A_CONCAT" ??_C@_1CC@MMGMOOPO@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA5?$AA6?$AAA?$AA_?$AAC?$AAO?$AAN?$AAC?$AAA?$AAT?$AA?$AA@
0x18001A768: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000F35C: WPP_SF_qqqDqD
0x18000ED78: WPP_SF_qSqdqD
0x18001B220: "onecore\ds\security\cryptoapi\nc" ??_C@_0DF@JHBMEGKP@onecore?2ds?2security?2cryptoapi?2nc@
0x180003FC0: InitializePseudoHandleEntry
0x18001B5B0: "HKDF" ??_C@_19MPFJEBPN@?$AAH?$AAK?$AAD?$AAF?$AA?$AA@
0x180018530: "__cdecl TlgDefineProvider_annotation__Tlgg_hBCryptTraceLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_hBCryptTraceLoggingProviderProv
0x18001BA28: "BlockLength" ??_C@_1BI@JJDKEEML@?$AAB?$AAl?$AAo?$AAc?$AAk?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18001B340: "DSA" ??_C@_17JOLIKJIA@?$AAD?$AAS?$AAA?$AA?$AA@
0x18001ADE0: "GetSignatureInterface" ??_C@_0BG@PPKIELNH@GetSignatureInterface?$AA@
0x18001A858: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18001A7D8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180008250: "__cdecl _imp_load_GetCipherInterface" __imp_load_GetCipherInterface
0x18001B1D8: WPP_730f0291646339bcce65da2b32a792c3_Traceguids
0x18001BAE0: "onecore\ds\security\cryptoapi\nc" ??_C@_0DG@NAPNDKCF@onecore?2ds?2security?2cryptoapi?2nc@
0x180023000: "__cdecl _imp_MSCryptConvertRsaPrivateBlobToFullRsaBlob" __imp_MSCryptConvertRsaPrivateBlobToFullRsaBlob
0x180008310: DllMain
0x18001AEF0: "HashBlockLength" ??_C@_1CA@CMJOPBMK@?$AAH?$AAa?$AAs?$AAh?$AAB?$AAl?$AAo?$AAc?$AAk?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18001B838: "DUALECRNG" ??_C@_1BE@OJGOOAHF@?$AAD?$AAU?$AAA?$AAL?$AAE?$AAC?$AAR?$AAN?$AAG?$AA?$AA@
0x18001B178: WPP_c9517e13cefa3fe9dafe685f8097e17e_Traceguids
0x18001B850: "ChainingModeECB" ??_C@_1CA@GGHMBPCI@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAE?$AAC?$AAB?$AA?$AA@
0x180008530: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18001A9A0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18001A8F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18001BB98: "DSAPUBLICBLOB" ??_C@_1BM@HHFLMOJ@?$AAD?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18000D730: AllocateMultiObjectBuffer
0x18001A8E0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18001B570: "TLS1_1_KDF" ??_C@_1BG@EHJFEFOJ@?$AAT?$AAL?$AAS?$AA1?$AA_?$AA1?$AA_?$AAK?$AAD?$AAF?$AA?$AA@
0x18001A7A8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18001A888: api-ms-win-core-threadpool-private-l1-1-0_NULL_THUNK_DATA
0x180013F80: ExportLegacyDhKey
0x18001E99C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180004780: "unsigned long __cdecl IoUnpack_ImageRef(struct _CRYPT_IMAGE_REF * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_ImageRef@@YAKPEAPEAU_CRYPT_IMAGE_REF@@PEAEK@Z
0x18001A760: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18001A8B0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18001B4F8: "PBKDF2" ??_C@_1O@JNLJINNB@?$AAP?$AAB?$AAK?$AAD?$AAF?$AA2?$AA?$AA@
0x1800084A8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180005DB4: "long __cdecl IoCallKernelDriverQueryLoop(unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?IoCallKernelDriverQueryLoop@@YAJKPEAEKPEAPEAEPEAKPEAH@Z
0x180023020: "__cdecl _imp_GetSignatureInterface" __imp_GetSignatureInterface
0x180004494: "unsigned long __cdecl IoPack_Configuration_ParamBlock(unsigned long,unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,struct _CRYPT_CONTEXT_CONFIG * __ptr64,struct _CRYPT_CONTEXT_FUNCTION_CONFIG * __ptr64,unsigned long,unsigned char * __ptr64,void * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoPack_Configuration_ParamBlock@@YAKKPEBGK000KPEAU_CRYPT_CONTEXT_CONFIG@@PEAU_CRYPT_CONTEXT_FUNCTION_CONFIG@@KPEAEPEAXPEAK3@Z
0x18001A8C8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18001AC30: "V2CAPIDSAPRIVATEBLOB" ??_C@_1CK@DDGGFHHM@?$AAV?$AA2?$AAC?$AAA?$AAP?$AAI?$AAD?$AAS?$AAA?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18001AA10: "__cdecl _imp_memcmp" __imp_memcmp
0x1800104F4: ApplyOAEPPaddingSeeded
0x180003000: BCryptDeriveKeyCapi
0x180012D84: ConvertDsaPublicBlobToLegacyV2
0x18001BB20: WPP_136b2bdcac0e38533393541b4c639450_Traceguids
0x180020638: g_pLoadedProviderList
0x180003D40: BCryptDestroyKey
0x18001B120: "STATUS_BUFFER_TOO_SMALL" ??_C@_0BI@BNNALGJ@STATUS_BUFFER_TOO_SMALL?$AA@
0x18001A980: "__cdecl _imp_NtDeviceIoControlFile" __imp_NtDeviceIoControlFile
0x18001A7D0: "__cdecl _imp_SetThreadStackGuarantee" __imp_SetThreadStackGuarantee
0x18001B5C0: PseudoHandleFlags
0x18001200C: CleanupSystemPreferredCache
0x18001BBB8: "DHPUBLICBLOB" ??_C@_1BK@GCPILPMB@?$AAD?$AAH?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18001B468: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x18001B7F0: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001EA28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180002B40: BCryptGenRandom
0x18000EE5C: WPP_SF_qSqqDqD
0x180012300: CachedOpenAlgorithmProvider
0x18001BC1C: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000F7F0: RouterAesKeyUnwrap
0x18001A9F8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18001A958: "__cdecl _imp_RtlInitializeResource" __imp_RtlInitializeResource
0x18001B498: "SHA512" ??_C@_1O@GKBAHMNF@?$AAS?$AAH?$AAA?$AA5?$AA1?$AA2?$AA?$AA@
0x18001E924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180019390: WPP_SF_
0x18001B3E8: "ECDH_P521" ??_C@_1BE@NAPMNIN@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA5?$AA2?$AA1?$AA?$AA@
0x180003640: BCryptGenerateSymmetricKey
0x18001A788: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180018C2C: "void __cdecl IoPack_SzStringArray(unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoPack_SzStringArray@@YAXPEAPEAPEAGKPEAE@Z
0x18001A810: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001DFBC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180018D2C: UninitializeLoader
0x180008230: "__cdecl _imp_load_GetHashInterface" __imp_load_GetHashInterface
0x180018DD8: VsmGetInterfaceProviderFromLibrary
0x180018BC4: "void __cdecl IoPack_InterfaceRegArray(struct _CRYPT_INTERFACE_REG * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoPack_InterfaceRegArray@@YAXPEAPEAPEAU_CRYPT_INTERFACE_REG@@KPEAE@Z
0x18001B0A8: "Status" ??_C@_06PGDKHFME@Status?$AA@
0x18001B420: "RC4" ??_C@_17HLFLMDBJ@?$AAR?$AAC?$AA4?$AA?$AA@
0x18001EA14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18001A7A0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180004100: "unsigned long __cdecl IoUnpack_SG_Buffer(unsigned char * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_Buffer@@YAKPEAPEAEKPEAEK1@Z
0x180012530: getCache
0x180018F50: VsmGetLinkedInterfaceProvider
0x180002060: BCryptKeyDerivation
0x180004D60: BCryptOpenAlgorithmProvider
0x180003340: BCryptCreateHash
0x1800078AC: "unsigned long __cdecl IoUnpack_SG_ImageReg(struct _CRYPT_IMAGE_REG * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_ImageReg@@YAKPEAPEAU_CRYPT_IMAGE_REG@@PEAEK1@Z
0x18001AF28: "FipsAlgorithmPolicy" ??_C@_1CI@FGKEIGLD@?$AAF?$AAi?$AAp?$AAs?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x18001AA30: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180008176: RtlLookupFunctionEntry
0x1800079E4: "unsigned long __cdecl IoUnpack_SG_InterfaceReg(struct _CRYPT_INTERFACE_REG * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_InterfaceReg@@YAKPEAPEAU_CRYPT_INTERFACE_REG@@PEAEK1@Z
0x18001347C: ConvertLegacyDsaV2PrivateBlob
0x18001BB18: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18001B390: "ECDSA_P521" ??_C@_1BG@PLLBJNPN@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA5?$AA2?$AA1?$AA?$AA@
0x1800026F0: BCryptFinalizeKeyPair
0x1800149DC: "int __cdecl BcpIsValidInterfaceRegArray(struct _CRYPT_INTERFACE_REG * __ptr64 * __ptr64,unsigned long)" ?BcpIsValidInterfaceRegArray@@YAHPEAPEAU_CRYPT_INTERFACE_REG@@K@Z
0x18001A9B0: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x18001B890: "ChainingModeCCM" ??_C@_1CA@PIHAAGPJ@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAC?$AAC?$AAM?$AA?$AA@
0x18000815E: NtTerminateProcess
0x18001B8D0: "ChainingMode" ??_C@_1BK@BCJKEJJO@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x18001B870: "ChainingModeCFB" ??_C@_1CA@PANOIHBM@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAC?$AAF?$AAB?$AA?$AA@
0x18001A990: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180007D6C: CngSetAuditingInterface
0x18001B088: "PaddingSchemes" ??_C@_1BO@KDHHGEPN@?$AAP?$AAa?$AAd?$AAd?$AAi?$AAn?$AAg?$AAS?$AAc?$AAh?$AAe?$AAm?$AAe?$AAs?$AA?$AA@
0x18000F150: WPP_SF_qqSqqdqdD
0x18001A868: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18001A750: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18001888C: "unsigned long __cdecl IoCopy_InterfaceRegArray(struct _CRYPT_INTERFACE_REG * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_InterfaceRegArray@@YAKPEAPEAU_CRYPT_INTERFACE_REG@@KKPEAKPEAE@Z
0x1800137F0: ConvertRsaFullPrivateBlob
0x180016BD0: BCryptQueryContextFunctionProperty
0x180003CB0: BCryptHashData
0x180014248: ExportLegacyDsaKey
0x18001A8C0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18001BBD8: "hResult" ??_C@_07JNKNLJOI@hResult?$AA@
0x1800146CC: ExportLegacyRsaKey
0x1800199CC: VerifyRsaFullPrivateBlob
0x18000E504: McGenEventWrite
0x180020000: WPP_GLOBAL_Control
0x18000406C: "unsigned long __cdecl IoUnpack_PropertyRef(struct _CRYPT_PROPERTY_REF * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_PropertyRef@@YAKPEAPEAU_CRYPT_PROPERTY_REF@@PEAEK@Z
0x18001E94C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180002A70: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x18001A7C8: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18001ACB0: "CAPIDSAPUBLICBLOB" ??_C@_1CE@HMAFGOGO@?$AAC?$AAA?$AAP?$AAI?$AAD?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x1800206D4: g_TrustedEnvironment
0x18001B588: "TLS1_2_KDF" ??_C@_1BG@DAALJHBJ@?$AAT?$AAL?$AAS?$AA1?$AA_?$AA2?$AA_?$AAK?$AAD?$AAF?$AA?$AA@
0x18001B438: "DES" ??_C@_17LBCHNHBC@?$AAD?$AAE?$AAS?$AA?$AA@
0x18001A878: api-ms-win-core-threadpool-legacy-l1-1-0_NULL_THUNK_DATA
0x18001A880: "__cdecl _imp_RegisterWaitForSingleObjectEx" __imp_RegisterWaitForSingleObjectEx
0x18001AA00: "__cdecl _imp_RtlAcquireResourceShared" __imp_RtlAcquireResourceShared
0x18001A998: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x18001A918: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x18001A848: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x18001B378: "ECDSA_P384" ??_C@_1BG@KLJLEHCO@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA3?$AA8?$AA4?$AA?$AA@
0x180007EE0: "__cdecl _security_check_cookie" __security_check_cookie
0x18001A6F0: PseudohandleChainingMode
0x18000F5F4: "__cdecl LogBCryptOpenProviderFailure" _LogBCryptOpenProviderFailure
0x18001A7E8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001978C: VerifyLegacyDhPrivateBlob
0x18001A798: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18001185C: CheckSignaturePadding
0x18001B338: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x180003210: BCryptFinishHash
0x180013604: ConvertLegacyRsaPrivateBlob
0x180002A18: WppCleanupUm
0x18001B3B8: "ECDH_P256" ??_C@_1BE@IHBIMMJF@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA2?$AA5?$AA6?$AA?$AA@
0x18001B818: "FIPS186DSARNG" ??_C@_1BM@HNKOKJLO@?$AAF?$AAI?$AAP?$AAS?$AA1?$AA8?$AA6?$AAD?$AAS?$AAA?$AAR?$AAN?$AAG?$AA?$AA@
0x18001E9D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-private-l1-1-0
0x18001B7E6: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x18001AEA8: "MultiObjectLength" ??_C@_1CE@PIIJDGMM@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800193C0: WPP_SF_qSD
0x18001A948: "__cdecl _imp_RtlReleaseResource" __imp_RtlReleaseResource
0x18001A9E0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x18001A740: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180003F54: UnloadProvider
0x1800085BB: "__cdecl _chkstk" __chkstk
0x180007D60: BCryptSetAuditingInterface
0x18000EA3C: WPP_SF_DqqD
0x18000F27C: WPP_SF_qqdD
0x18000FB18: RouterAesKeyWrap
0x180007524: "unsigned long __cdecl IoUnpack_ContextFunctionProviders(struct _CRYPT_CONTEXT_FUNCTION_PROVIDERS * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_ContextFunctionProviders@@YAKPEAPEAU_CRYPT_CONTEXT_FUNCTION_PROVIDERS@@PEAEK@Z
0x180018B78: "void __cdecl IoPack_ImageReg(struct _CRYPT_IMAGE_REG * __ptr64 * __ptr64,unsigned char * __ptr64)" ?IoPack_ImageReg@@YAXPEAPEAU_CRYPT_IMAGE_REG@@PEAE@Z
0x18001B1C8: "GetLastError()" ??_C@_0P@OLMLMBJL@GetLastError?$CI?$CJ?$AA@
0x180007A70: BCryptEnumContextFunctionProviders
0x18001B5E0: PseudoHandlePropertyTable
0x180018610: "unsigned long __cdecl IoCopy_ImageReg(struct _CRYPT_IMAGE_REG * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_ImageReg@@YAKPEAU_CRYPT_IMAGE_REG@@KPEAKPEAE@Z
0x1800187C4: "unsigned long __cdecl IoCopy_InterfaceReg(struct _CRYPT_INTERFACE_REG * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoCopy_InterfaceReg@@YAKPEAU_CRYPT_INTERFACE_REG@@KPEAKPEAE@Z
0x18000437C: BcpRegisterConfigChangeNotifyNoLogging
0x180008270: "__cdecl _imp_load_GetSignatureInterface" __imp_load_GetSignatureInterface
0x180012488: findEntryInCache
0x18001AA40: "__cdecl _guard_fids_table" __guard_fids_table
0x18001B068: "\Device\KsecDD" ??_C@_1BO@BAEMGIAB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAK?$AAs?$AAe?$AAc?$AAD?$AAD?$AA?$AA@
0x180017AB0: BCryptSetContextFunctionProperty
0x18001A010: "__cdecl load_config_used" _load_config_used
0x18001A870: "__cdecl _imp_UnregisterWaitEx" __imp_UnregisterWaitEx
0x180004CF0: "unsigned long __cdecl IoUnpack_SG_SzString(unsigned short * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_SzString@@YAKPEAPEAGPEAEK1@Z
0x180020970: g_handleCache
0x18001A758: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18001A748: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180002B08: McGenEventUnregister
0x18001B550: "AES-CMAC" ??_C@_1BC@MOFIKMAK@?$AAA?$AAE?$AAS?$AA?9?$AAC?$AAM?$AAA?$AAC?$AA?$AA@
0x18001BAC8: "HashOIDList" ??_C@_1BI@DDDAFHFK@?$AAH?$AAa?$AAs?$AAh?$AAO?$AAI?$AAD?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x18000E120: BCryptEnumProviders
0x18001B2C0: WPP_2a7a6eafdd0232b06032cedc657d334c_Traceguids
0x180020668: g_pCachedRngRWLock
0x18001ADF8: "GetKeyDerivationInterface" ??_C@_0BK@BMPPCKFB@GetKeyDerivationInterface?$AA@
0x180020700: PseudoHandleTableTable
0x180017010: BCryptRegisterProvider
0x18001A928: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x1800206E0: "void * __ptr64 __ptr64 g_hIoDevice" ?g_hIoDevice@@3PEAXEA
0x18001ACD8: "RSAFULLPRIVATEBLOB" ??_C@_1CG@JHEDLLPA@?$AAR?$AAS?$AAA?$AAF?$AAU?$AAL?$AAL?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18001B3A8: "ECDH" ??_C@_19JJNKGML@?$AAE?$AAC?$AAD?$AAH?$AA?$AA@
0x18001A910: "__cdecl _imp_NtClose" __imp_NtClose
0x180019AD8: ReverseMemCopy
0x18001A940: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180015F50: BCryptEnumContexts
0x180011024: CheckEncryptionPadding
0x180004B70: "unsigned long __cdecl IoUnpack_ProviderRef(struct _CRYPT_PROVIDER_REF * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_ProviderRef@@YAKPEAPEAU_CRYPT_PROVIDER_REF@@PEAEK@Z
0x18001AE18: ETW_LOG_BCRYPT_PROVIDER
0x18001A9C8: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18001AED0: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x18001B400: "AES-GMAC" ??_C@_1BC@MHLDAMHA@?$AAA?$AAE?$AAS?$AA?9?$AAG?$AAM?$AAA?$AAC?$AA?$AA@
0x18001A820: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x18001A7B0: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180014994: "int __cdecl BcpIsValidImageReg(struct _CRYPT_IMAGE_REG * __ptr64)" ?BcpIsValidImageReg@@YAHPEAU_CRYPT_IMAGE_REG@@@Z
0x18001A970: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x18000EAA8: WPP_SF_SSD
0x18001A7B8: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x18001AF50: "\Registry\Machine\System\Current" ??_C@_1GO@BNNKBEEN@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x18000D7F8: AllocateObjectBuffer
0x18001A8D0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18001BC20: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000E554: McTemplateU0zzqdq
0x180004A2C: "unsigned long __cdecl IoPack_Resolution_ParamBlock(unsigned short const * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoPack_Resolution_ParamBlock@@YAKPEBGK00KKPEAKPEAE@Z
0x180007590: BCryptQueryProviderRegistration
0x18001B418: "RC2" ??_C@_17FODAJMMF@?$AAR?$AAC?$AA2?$AA?$AA@
0x180008490: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800085C7: memcmp
0x18001A860: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x180006870: BCryptGenerateKeyPair
0x180007370: BCryptEnumContextFunctions
0x180005EF4: "long __cdecl IoCallKernelDriver(unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long * __ptr64)" ?IoCallKernelDriver@@YAJKPEAEK0PEAK@Z
0x180007524: "unsigned long __cdecl IoUnpack_ContextFunctions(struct _CRYPT_CONTEXT_FUNCTIONS * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_ContextFunctions@@YAKPEAPEAU_CRYPT_CONTEXT_FUNCTIONS@@PEAEK@Z
0x18001AC88: "CAPIDSAPRIVATEBLOB" ??_C@_1CG@CDMIBOII@?$AAC?$AAA?$AAP?$AAI?$AAD?$AAS?$AAA?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180020618: g_ulMaxStackAllocSize
0x18001E960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180001710: LoadProviderEx
0x18000819A: "__cdecl _imp_load_MSCryptConvertRsaPrivateBlobToFullRsaBlob" __imp_load_MSCryptConvertRsaPrivateBlobToFullRsaBlob
0x180001F00: BCryptDuplicateHash
0x18001B4A8: "SP800_108_CTR_HMAC" ??_C@_1CG@GKFGHMMK@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA1?$AA0?$AA8?$AA_?$AAC?$AAT?$AAR?$AA_?$AAH?$AAM?$AAA?$AAC?$AA?$AA@
0x18001A9A8: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x18001B5D0: Microsoft_Windows_Crypto_BCryptKeywords
0x1800082D0: "__cdecl _imp_load_GetAsymmetricEncryptionInterface" __imp_load_GetAsymmetricEncryptionInterface
0x180020640: g_csLoaderLock
0x18001A8E8: "__cdecl _imp_RtlUnhandledExceptionFilter" __imp_RtlUnhandledExceptionFilter
0x18001A938: "__cdecl _imp_RtlDeleteResource" __imp_RtlDeleteResource
0x18001AA28: ntdll_NULL_THUNK_DATA
0x18001AA18: "__cdecl _imp_memcpy" __imp_memcpy
0x18001B548: "MD5" ??_C@_17HLHJLHED@?$AAM?$AAD?$AA5?$AA?$AA@
0x180019464: WPP_SF_qSq
0x18001A9B8: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x18001B1E8: "onecore\ds\security\cryptoapi\nc" ??_C@_0DG@FIMDEBJE@onecore?2ds?2security?2cryptoapi?2nc@
0x180006220: BCryptGetFipsAlgorithmMode
0x180010C64: ApplySignaturePadding
0x18001E988: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800121A4: WPP_SF_sDsd
0x180012F0C: ConvertFullRsaToLegacy
0x18001B360: "ECDSA_P256" ??_C@_1BG@HBKGJMOF@?$AAE?$AAC?$AAD?$AAS?$AAA?$AA_?$AAP?$AA2?$AA5?$AA6?$AA?$AA@
0x180020090: "__cdecl _security_cookie" __security_cookie
0x18000F2EC: WPP_SF_qqqD
0x1800042F0: InitializeConfig
0x180020620: g_pfnAllocate
0x18001ADC8: "bcrypt.dll" ??_C@_1BG@LDILNKDG@?$AAb?$AAc?$AAr?$AAy?$AAp?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180004800: BCryptResolveProviders
0x18001AD90: "GetRngInterface" ??_C@_0BA@BFGABNCK@GetRngInterface?$AA@
0x18001A770: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001B0F0: "__cdecl _sz_bcryptPrimitives_dll" __sz_bcryptPrimitives_dll
0x18001E938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180010010: McGenControlCallbackV2
0x18001159C: CheckPSSPadding
0x180019878: VerifyLegacyDsaPrivateBlob
0x1800024C0: BCryptSignHash
0x180015C20: BCryptDeleteContext
0x18000FE84: RouterGetKeyDataBlob
0x18001E020: bcryptPrimitives_NULL_THUNK_DATA_DLN
0x180023040: bcryptPrimitives_NULL_THUNK_DATA_DLA
0x18001E110: bcryptPrimitives_NULL_THUNK_DATA_DLB
0x18000EC54: WPP_SF_qD
0x18001AC08: "CAPIDHPUBLICBLOB" ??_C@_1CC@PKMMNOPP@?$AAC?$AAA?$AAP?$AAI?$AAD?$AAH?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180010184: WPP_SF_qS
0x180003EA0: DestroyAlgorithmHeader
0x180008080: "__cdecl _security_init_cookie" __security_init_cookie
0x18001AE28: "HashDigestLength" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800167E0: BCryptQueryContextFunctionConfiguration
0x180017F30: BCryptUnregisterProvider
0x18000EC10: WPP_SF_q
0x18001AA08: "__cdecl _imp___chkstk" __imp___chkstk
0x180023038: "__cdecl _imp_GetRngInterface" __imp_GetRngInterface
0x18001BB78: "RSAPUBLICBLOB" ??_C@_1BM@BJJGGDHH@?$AAR?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x1800041F4: InitializeSystemPreferredCache
0x180007940: "unsigned long __cdecl IoUnpack_SG_InterfaceRegArray(struct _CRYPT_INTERFACE_REG * __ptr64 * __ptr64 * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64)" ?IoUnpack_SG_InterfaceRegArray@@YAKPEAPEAPEAU_CRYPT_INTERFACE_REG@@KPEAEK1@Z
0x180020630: g_pfnFree
0x180002280: BCryptDeriveKey
0x180011E20: VerifyPKCS1SigningFormat
0x1800085EB: wcscmp
0x18001ADA0: "GetAsymmetricEncryptionInterface" ??_C@_0CB@FFCMDJPG@GetAsymmetricEncryptionInterface@
0x18001B908: "Rfc3565KeyWrapBlob" ??_C@_1CG@HHCKKMCI@?$AAR?$AAf?$AAc?$AA3?$AA5?$AA6?$AA5?$AAK?$AAe?$AAy?$AAW?$AAr?$AAa?$AAp?$AAB?$AAl?$AAo?$AAb?$AA?$AA@
0x18001B3D0: "ECDH_P384" ??_C@_1BE@FNCFBHFO@?$AAE?$AAC?$AAD?$AAH?$AA_?$AAP?$AA3?$AA8?$AA4?$AA?$AA@
0x1800060C8: "int __cdecl ValidateProviderMode(unsigned long,unsigned long)" ?ValidateProviderMode@@YAHKK@Z
0x18001B428: "3DES" ??_C@_19LEELFJDG@?$AA3?$AAD?$AAE?$AAS?$AA?$AA@
0x180006624: IsTrustlet
0x180002AD0: McGenEventRegister
0x18001A900: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x180002E30: BCryptFreeBuffer
0x1800158E0: BCryptCreateContext
0x180008182: RtlVirtualUnwind
0x18001B138: "Microsoft Primitive Provider" ??_C@_1DK@HJHMGPGD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x180011294: CheckOAEPPadding
0x180016220: BCryptEnumRegisteredProviders
0x18001A898: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x18000F5A0: "__cdecl FreeProcessedBufferDescParameters" _FreeProcessedBufferDescParameters
0x18001B348: "DH" ??_C@_15IEFEGGPE@?$AAD?$AAH?$AA?$AA@
0x180007720: "unsigned long __cdecl IoPack_Registration_ParamBlock(unsigned short const * __ptr64,unsigned long,unsigned long,unsigned long,struct _CRYPT_PROVIDER_REG * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64)" ?IoPack_Registration_ParamBlock@@YAKPEBGKKKPEAU_CRYPT_PROVIDER_REG@@PEAKPEAE@Z
0x18001AD70: "GetSecretAgreementInterface" ??_C@_0BM@MOBGJCDL@GetSecretAgreementInterface?$AA@
0x18001B2A8: "GetSChannelInterface" ??_C@_0BF@KINJPDKM@GetSChannelInterface?$AA@
0x18001A930: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x180016460: BCryptQueryContextConfiguration
0x180007F30: "__cdecl _report_gsfailure" __report_gsfailure
0x18001B0B0: "onecore\ds\security\cryptoapi\nc" ??_C@_0DC@DEJDOGFO@onecore?2ds?2security?2cryptoapi?2nc@
0x18001A9F0: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x180010278: ApplyEncryptionPadding
0x18001A988: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x18001A838: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18001B508: "CAPI_KDF" ??_C@_1BC@NEGGPAMC@?$AAC?$AAA?$AAP?$AAI?$AA_?$AAK?$AAD?$AAF?$AA?$AA@
0x180014A54: "int __cdecl BcpIsValidProviderReg(struct _CRYPT_PROVIDER_REG * __ptr64)" ?BcpIsValidProviderReg@@YAHPEAU_CRYPT_PROVIDER_REG@@@Z
0x180019508: WPP_SF_qqSD
0x18000EB64: WPP_SF_SqqD
0x1800028DC: SafeAllocaInitialize
0x18001BA90: "onecore\ds\security\cryptoapi\nc" ??_C@_0DF@MOLBKACE@onecore?2ds?2security?2cryptoapi?2nc@
0x18001B9C0: ETW_LOG_BCRYPT_OPEN_PROVIDER_FAILED
0x180017E50: BCryptUnregisterConfigChangeNotify
0x18001B478: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180013DA8: ExportFullRsaKey
0x18001BBE0: "NTE_FAIL" ??_C@_08OCLNAKPD@NTE_FAIL?$AA@
0x1800032E8: InternalVerifyStackAvailable
0x18001EA00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x18000D8C0: BCryptCreateMultiHash
0x18001A960: "__cdecl _imp_RtlAcquireResourceExclusive" __imp_RtlAcquireResourceExclusive
0x180002D3C: OpenSystemPreferredAlgorithmProvider
0x18001AE50: "IsKeyedHash" ??_C@_1BI@DMBABOCJ@?$AAI?$AAs?$AAK?$AAe?$AAy?$AAe?$AAd?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1800195C0: SafeAllocaAllocateFromHeap
0x180013278: ConvertLegacyDsaPrivateBlob
0x1800015B0: BCryptEncrypt
0x180005890: "unsigned long __cdecl SzString_CchLength(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long)" ?SzString_CchLength@@YAKPEBGPEAKK@Z
0x180008290: "__cdecl _imp_load_GetKeyDerivationInterface" __imp_load_GetKeyDerivationInterface
0x180020610: "__cdecl _hmod__bcryptPrimitives_dll" __hmod__bcryptPrimitives_dll
0x18001B9B0: WPP_ThisDir_CTLGUID_CNGTraceControlGuid
0x18001B9E8: "onecore\ds\security\cryptoapi\nc" ??_C@_0DO@BNNOABLJ@onecore?2ds?2security?2cryptoapi?2nc@
0x18001AE68: "PrimitiveType" ??_C@_1BM@JBKFHMPN@?$AAP?$AAr?$AAi?$AAm?$AAi?$AAt?$AAi?$AAv?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18001A7E0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180007D34: BCryptFree
0x180018C78: "unsigned long __cdecl IoUnpack_Contexts(struct _CRYPT_CONTEXTS * __ptr64 * __ptr64,unsigned char * __ptr64,unsigned long)" ?IoUnpack_Contexts@@YAKPEAPEAU_CRYPT_CONTEXTS@@PEAEK@Z
0x18001A850: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18001BA40: "__cdecl _enclave_config" __enclave_config
0x18001080C: ApplyPKCS1SigningFormat
0x180007F04: "__cdecl DllMainCRTStartupForGS2" _DllMainCRTStartupForGS2
0x1800085DF: memset
0x18001EA3C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180002F20: BCryptDestroyHash
0x180012100: ReopenSystemPreferredRngCallback

[JEB Decompiler by PNF Software]