Generated by JEB on 2019/08/01

PE: C:\Windows\System32\tlscsp.dll Base=0x180000000 SHA-256=508B1309E0FFDC401460DA086C06C46ADC92602FAD1601606C3620CBCC716EF3
PDB: tlscsp.pdb GUID={DB12D8EA-C13E-8447-4D58130C3834B923} Age=1

333 located named symbols:
0x18000C750: csp_abServerPrivateKey
0x180006710: Add
0x1800076D0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180006C20: BenalohModExp64
0x1800052AC: VerifyX509CertificateChain
0x1800078A0: "__cdecl FindPESection" _FindPESection
0x180001C4C: LsCsp_ReadProprietaryDataFromStorageOld
0x180007B67: "__cdecl _imp_load_CryptDestroyKey" __imp_load_CryptDestroyKey
0x18000E000: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x1800068C0: BenalohMod64
0x180007140: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000AA5C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1800055FC: "void __cdecl RDP_ReverseMemoryCopy(unsigned char * __ptr64,unsigned char * __ptr64,int)" ?RDP_ReverseMemoryCopy@@YAXPEAE0H@Z
0x180009890: "Use512LenPropCert" ??_C@_1CE@CPCKMIBI@?$AAU?$AAs?$AAe?$AA5?$AA1?$AA2?$AAL?$AAe?$AAn?$AAP?$AAr?$AAo?$AAp?$AAC?$AAe?$AAr?$AAt?$AA?$AA@
0x18000C010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000C768: csp_abServerCertificate
0x18000E070: "__cdecl _imp_CertCreateCertificateContext" __imp_CertCreateCertificateContext
0x180004C0C: LicenseEncryptHwid
0x1800071BC: "__cdecl CRT_INIT" _CRT_INIT
0x180009140: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000E020: "__cdecl _imp_SystemFunction036" __imp_SystemFunction036
0x180008230: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000E0A0: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x1800066C0: Sub
0x180002148: LsCsp_InstallX509Certificate
0x180002720: LsCsp_InstallX509Certificate2
0x18000E0D8: CRYPTSP_NULL_THUNK_DATA_DLA
0x1800053A0: TLSVerifyProprietyChainedCertificate
0x180009620: "L$HYDRAENCPUBLICKEY_dd2d98db-231" ??_C@_1HC@GDEOPJMN@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAK?$AAE?$AAY?$AA_?$AAd?$AAd?$AA2?$AAd?$AA9?$AA8?$AAd?$AAb?$AA?9?$AA2?$AA3?$AA1@
0x180009278: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x1800099C8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003734: ReloadCSPCertificateAndData
0x180007F70: AccumulateSquares64
0x180007C04: "__cdecl _imp_load_RegDeleteValueW" __imp_load_RegDeleteValueW
0x180009280: bcrypt_NULL_THUNK_DATA
0x180009880: "1.3.14.3.2.15" ??_C@_0O@EGPBIJFF@1?43?414?43?42?415?$AA@
0x1800091C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180007CA6: "__cdecl _imp_load_RegCloseKey" __imp_load_RegCloseKey
0x18000E0C8: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x180009310: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180009470: "TLSShutdown" ??_C@_0M@PGCDJGEC@TLSShutdown?$AA@
0x180009200: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x1800044F0: TLSCspInit
0x180001130: TLSFreeTSCertificate
0x180007887: "__cdecl XcptFilter" _XcptFilter
0x180009318: "__cdecl _xc_a" __xc_a
0x180007C94: "__cdecl _imp_load_AllocateAndInitializeSid" __imp_load_AllocateAndInitializeSid
0x18000A800: CRYPTSP_NULL_THUNK_DATA_DLB
0x180009188: "__cdecl _imp_OpenMutexW" __imp_OpenMutexW
0x180007C5E: "__cdecl _imp_load_SystemFunction036" __imp_load_SystemFunction036
0x180009240: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x180004CD0: UnpackServerCert
0x180001638: LsCsp_GetBinaryData
0x180007C3A: "__cdecl _imp_load_CheckTokenMembership" __imp_load_CheckTokenMembership
0x180007E50: Accumulate
0x18000816B: "__cdecl callnewh" _callnewh
0x1800093A0: "__cdecl _guard_iat_table" __guard_iat_table
0x18000E0C0: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x180003C08: CreateProprietaryKeyAndCert
0x180008209: memcpy
0x18000C700: csp_abX509CertID
0x180009408: "TLSConnectToAnySpecifiedLs" ??_C@_0BL@NNBGJEGB@TLSConnectToAnySpecifiedLs?$AA@
0x18000C708: csp_dwX509CertIDLen
0x180001FD4: LsCsp_UseBuiltInCert
0x1800092D8: "__cdecl _imp_memset" __imp_memset
0x1800091D8: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180007A77: "__cdecl initterm" _initterm
0x18000C7C0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000C740: csp_abServerCertificateOld
0x1800091D0: "__cdecl _imp_Sleep" __imp_Sleep
0x180009338: "__cdecl _xi_z" __xi_z
0x180009170: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000E088: "__cdecl _imp_CryptUnprotectData" __imp_CryptUnprotectData
0x1800076C4: "__cdecl _C_specific_handler" __C_specific_handler
0x1800095B0: "L$HYDRAENCKEY_28ada6da-d622-11d1" ??_C@_1GG@HKOGABDL@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAK?$AAE?$AAY?$AA_?$AA2?$AA8?$AAa?$AAd?$AAa?$AA6?$AAd?$AAa?$AA?9?$AAd?$AA6?$AA2?$AA2?$AA?9?$AA1?$AA1?$AAd?$AA1@
0x180007AB2: "__cdecl _tailMerge_cryptsp_dll" __tailMerge_cryptsp_dll
0x180007CCA: "__cdecl _imp_load_CryptEncodeObject" __imp_load_CryptEncodeObject
0x180009530: "L$HYDRAENCKEY_52d1ad03-4565-44f3" ??_C@_1GG@HFIBPFEL@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAK?$AAE?$AAY?$AA_?$AA5?$AA2?$AAd?$AA1?$AAa?$AAd?$AA0?$AA3?$AA?9?$AA4?$AA5?$AA6?$AA5?$AA?9?$AA4?$AA4?$AAf?$AA3@
0x18000798F: malloc
0x180009598: "Certificate" ??_C@_1BI@HDGMAIJD@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?$AA@
0x180007B43: "__cdecl _imp_load_CryptGenKey" __imp_load_CryptGenKey
0x18000E008: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000819C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180009858: "X509 Certificate ID" ??_C@_1CI@OPDFFPHD@?$AAX?$AA5?$AA0?$AA9?$AA?5?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?5?$AAI?$AAD?$AA?$AA@
0x18000586C: RDP_MD5Init
0x180009780: "L$HYDRAENCKEY_dd2d98db-2316-11d2" ??_C@_1GG@BPENKMMD@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAK?$AAE?$AAY?$AA_?$AAd?$AAd?$AA2?$AAd?$AA9?$AA8?$AAd?$AAb?$AA?9?$AA2?$AA3?$AA1?$AA6?$AA?9?$AA1?$AA1?$AAd?$AA2@
0x18000A588: CRYPT32_NULL_THUNK_DATA_DLN
0x180001510: LsCsp_DecryptEnvelopedData
0x18000E028: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180007893: "__cdecl amsg_exit" _amsg_exit
0x1800092D0: "__cdecl _imp__callnewh" __imp__callnewh
0x180005698: RDP_RsaBSafeEncPublic
0x180007FC0: Accumulate64
0x1800099C0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800098C0: "System\CurrentControlSet\Control" ??_C@_1HK@FGCDCLMC@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000E098: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x18000E0B0: "__cdecl _imp_CryptExportKey" __imp_CryptExportKey
0x18000AA70: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x18000C798: "void * __ptr64 __ptr64 g_hMD5Alg" ?g_hMD5Alg@@3PEAXEA
0x18000C6F4: g_bUseOldProprietaryCert
0x180007C70: "__cdecl _imp_load_RegCreateKeyExW" __imp_load_RegCreateKeyExW
0x18000C690: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x1800093B0: "__cdecl _sz_CRYPTSP_dll" __sz_CRYPTSP_dll
0x18000E068: "__cdecl _imp_CertVerifySubjectCertificateContext" __imp_CertVerifySubjectCertificateContext
0x180007C4C: "__cdecl _imp_load_RegSetValueExW" __imp_load_RegSetValueExW
0x180009228: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x1800093C0: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x180009160: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000E078: "__cdecl _imp_CryptEncodeObject" __imp_CryptEncodeObject
0x18000C7B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180009248: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x180001008: DllMain
0x180002D8C: GenerateMachineHWID
0x1800092C8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800092E8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180007D9D: "__cdecl _imp_load_CertDuplicateCertificateContext" __imp_load_CertDuplicateCertificateContext
0x180009230: KERNEL32_NULL_THUNK_DATA
0x18000A540: ADVAPI32_NULL_THUNK_DATA_DLN
0x180009428: "TLSDisconnectFromServer" ??_C@_0BI@JLNEJGPO@TLSDisconnectFromServer?$AA@
0x18000C778: csp_abServerPrivateKeyOld
0x18000A830: ADVAPI32_NULL_THUNK_DATA_DLB
0x180003154: LsCsp_FreeServerData
0x18000E060: ADVAPI32_NULL_THUNK_DATA_DLA
0x1800091C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180008120: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000E0B8: "__cdecl _imp_CryptGenKey" __imp_CryptGenKey
0x18000C000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180008178: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180009288: "__cdecl _imp_memcmp" __imp_memcmp
0x180005D80: BenalohModExp
0x180007DC1: "__cdecl _imp_load_CertVerifySubjectCertificateContext" __imp_load_CertVerifySubjectCertificateContext
0x180009260: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180006760: BenalohSetup64
0x180009148: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800091F0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1800092C0: "__cdecl _imp_swprintf_s" __imp_swprintf_s
0x18000E040: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x1800099C0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180007950: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000C730: csp_abX509CertPrivateKey2
0x180003440: FreeCapiPubKey
0x18000C710: csp_abX509CertPrivateKey
0x18000C728: csp_dwX509CertPrivateKeyLen
0x18000C758: csp_dwServerX509CertLen
0x18000C738: csp_abServerX509Cert
0x180004A40: LsCsp_RetrieveSecret
0x18000C788: csp_abServerX509Cert2
0x180009190: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180009720: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x18000A4C0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180007400: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180009298: "__cdecl _imp__initterm" __imp__initterm
0x180002E50: LsCsp_EncryptHwid
0x180007DE0: rc4
0x18000E010: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x1800091E8: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x1800018B0: LsCsp_Exit
0x180005634: "int __cdecl RsaBCryptInitAlgHandle(void)" ?RsaBCryptInitAlgHandle@@YAHXZ
0x18000E050: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180005F00: BenalohModRoot
0x18000C7A0: "__cdecl _onexitend" __onexitend
0x1800091A8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180006A50: BenalohModSquare64
0x180009308: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180007B79: "__cdecl _imp_load_RegQueryValueExW" __imp_load_RegQueryValueExW
0x180007B85: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x180009238: "__cdecl _imp_BCryptEncrypt" __imp_BCryptEncrypt
0x180009158: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180009010: "const CBuffer::`vftable'" ??_7CBuffer@@6B@
0x18000A898: CRYPT32_NULL_THUNK_DATA_DLB
0x180009258: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x180009328: "__cdecl _xi_a" __xi_a
0x180005110: "public: virtual void * __ptr64 __cdecl CBuffer::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBuffer@@UEAAPEAXI@Z
0x180009130: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180009180: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180007B55: "__cdecl _imp_load_CryptExportKey" __imp_load_CryptExportKey
0x180001A10: LsCsp_GetServerData
0x18000C688: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x180004950: LsCsp_StoreSecret
0x180007D79: "__cdecl _imp_load_CryptDecodeObject" __imp_load_CryptDecodeObject
0x180006B50: BenalohModMultiply64
0x180004714: "private: static long __cdecl CSecretStorage::CreateStorageKey(struct HKEY__ * __ptr64 * __ptr64)" ?CreateStorageKey@CSecretStorage@@CAJPEAPEAUHKEY__@@@Z
0x18000C7C8: "__cdecl pRawDllMain" _pRawDllMain
0x1800091F8: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x180008160: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180007CB8: "__cdecl _imp_load_SetSecurityDescriptorDacl" __imp_load_SetSecurityDescriptorDacl
0x180001154: LoadTLSAPIS
0x180009210: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800076A0: "__cdecl _security_check_cookie" __security_check_cookie
0x180009320: "__cdecl _xc_z" __xc_z
0x180007F50: BenalohEstimateQuotient64
0x1800091A0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000C820: csp_hscData
0x180009758: "X509 Certificate2" ??_C@_1CE@DFOONOFF@?$AAX?$AA5?$AA0?$AA9?$AA?5?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA2?$AA?$AA@
0x180004D98: ValidateServerCert
0x18000C790: "void * __ptr64 __ptr64 g_hRSAAlg" ?g_hRSAAlg@@3PEAXEA
0x180009990: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x18000C770: csp_dwServerPrivateKeyLen
0x180003480: VerifyTermServCertificate
0x180006710: "__cdecl Add" _Add
0x180007AA6: "__cdecl _imp_load_CryptReleaseContext" __imp_load_CryptReleaseContext
0x180009138: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180009510: "CertificateOld" ??_C@_1BO@LHAKMOKK@?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAO?$AAl?$AAd?$AA?$AA@
0x180009218: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180009178: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180007ED0: Reduce
0x180007C28: "__cdecl _imp_load_InitializeSecurityDescriptor" __imp_load_InitializeSecurityDescriptor
0x18000C718: csp_hMutex
0x18000C724: csp_dwServerPrivateKeyOldLen
0x18000E080: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x180009440: "TLSRequestTermServCert" ??_C@_0BH@LIGAODMD@TLSRequestTermServCert?$AA@
0x180005110: "public: virtual void * __ptr64 __cdecl CBuffer::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBuffer@@UEAAPEAXI@Z
0x18000E0D0: "__cdecl _imp_CryptDestroyKey" __imp_CryptDestroyKey
0x1800096A0: "L$HYDRAENCPUBLICKEY_9c5b61c5-d19" ??_C@_1HC@MCOJCDDL@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAK?$AAE?$AAY?$AA_?$AA9?$AAc?$AA5?$AAb?$AA6?$AA1?$AAc?$AA5?$AA?9?$AAd?$AA1?$AA9@
0x180009340: "__cdecl _guard_fids_table" __guard_fids_table
0x1800092E0: msvcrt_NULL_THUNK_DATA
0x180009020: "__cdecl load_config_used" _load_config_used
0x1800091E0: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18000C7E0: csp_hscOldData
0x180009400: "TLSInit" ??_C@_07MAEPEOKL@TLSInit?$AA@
0x18000C748: csp_dwServerCertificateOldLen
0x18000C760: csp_InitCount
0x180002EF8: LsCsp_SetServerData
0x180006230: Mod
0x180007C82: "__cdecl _imp_load_SetEntriesInAclW" __imp_load_SetEntriesInAclW
0x1800092B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000E0A8: CRYPT32_NULL_THUNK_DATA_DLA
0x180009270: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x180007D67: "__cdecl _imp_load_CryptProtectData" __imp_load_CryptProtectData
0x180009208: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800092F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180009150: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000A460: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPTSP_dll
0x180001070: TLSGetTSCertificate
0x180007983: free
0x1800039D8: ReloadCSPCertificateAndData2
0x180007CD6: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x1800092F8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800099C8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18000A4A0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x180007A90: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800081FD: memcmp
0x18000C020: csp_abPublicKeyModulus
0x180006170: Multiply
0x180001E10: LsCsp_ReadProprietaryDataFromStorage
0x180009480: "TSLicensingLock" ??_C@_1CA@MABBBAMI@?$AAT?$AAS?$AAL?$AAi?$AAc?$AAe?$AAn?$AAs?$AAi?$AAn?$AAg?$AAL?$AAo?$AAc?$AAk?$AA?$AA@
0x180004F10: ConvertKeyToBSafeKey
0x180009730: "X509 Certificate" ??_C@_1CC@EFHBGBMO@?$AAX?$AA5?$AA0?$AA9?$AA?5?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AA?$AA@
0x18000A480: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x1800092B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180007D55: "__cdecl _imp_load_CryptUnprotectData" __imp_load_CryptUnprotectData
0x180009300: ntdll_NULL_THUNK_DATA
0x180009290: "__cdecl _imp_memcpy" __imp_memcpy
0x18000E090: "__cdecl _imp_CryptProtectData" __imp_CryptProtectData
0x1800097F0: "L$HYDRAENCKEY_d524f64c-d84c-45f7" ??_C@_1GG@GDDHFIOA@?$AAL?$AA$?$AAH?$AAY?$AAD?$AAR?$AAA?$AAE?$AAN?$AAC?$AAK?$AAE?$AAY?$AA_?$AAd?$AA5?$AA2?$AA4?$AAf?$AA6?$AA4?$AAc?$AA?9?$AAd?$AA8?$AA4?$AAc?$AA?9?$AA4?$AA5?$AAf?$AA7@
0x1800099B8: "MD5" ??_C@_17HLHJLHED@?$AAM?$AAD?$AA5?$AA?$AA@
0x180009198: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180002CC0: GetSubjectRdn
0x18000C680: "__cdecl _hmod__CRYPTSP_dll" __hmod__CRYPTSP_dll
0x18000C008: "__cdecl _security_cookie" __security_cookie
0x18000C860: g_lpCriticalSection
0x18000E030: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x18000C75C: csp_dwServerX509CertLen2
0x180007D8B: "__cdecl _imp_load_CertFreeCertificateContext" __imp_load_CertFreeCertificateContext
0x18000E038: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18000C080: "struct PUBLIC_KEY_MODULUS_STORAGE g_abPublicKeyModulusStorage" ?g_abPublicKeyModulusStorage@@3UPUBLIC_KEY_MODULUS_STORAGE@@A
0x1800091B8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180009220: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180001270: LsCsp_CreateMutex
0x180009940: "Microsoft Strong Cryptographic P" ??_C@_1FA@LCDFCMIP@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAt?$AAr?$AAo?$AAn?$AAg?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc?$AA?5?$AAP@
0x180007B31: "__cdecl _imp_load_CryptAcquireContextW" __imp_load_CryptAcquireContextW
0x1800091B0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x18000C780: csp_pRootPublicKey
0x180009250: "__cdecl _imp_BCryptImportKeyPair" __imp_BCryptImportKeyPair
0x18000E018: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800045F0: TLSCspStartInstallCertificateThread
0x18000C7A8: "__cdecl _onexitbegin" __onexitbegin
0x18000C6F8: csp_dwX509CertPrivateKeyLen2
0x1800093E0: "mstlsapi.dll" ??_C@_1BK@NHNGFGJL@?$AAm?$AAs?$AAt?$AAl?$AAs?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180004690: InstallCertificateThread
0x180009168: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180007DAF: "__cdecl _imp_load_CertCreateCertificateContext" __imp_load_CertCreateCertificateContext
0x18000AA84: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000E048: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000799C: "__cdecl _security_init_cookie" __security_init_cookie
0x180009268: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x180009998: "RSAPUBLICBLOB" ??_C@_1BM@BJJGGDHH@?$AAR?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x18000E058: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x1800094A0: "System\CurrentControlSet\Control" ??_C@_1GK@BKCPLKBH@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x18000AA48: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A5B8: CRYPTSP_NULL_THUNK_DATA_DLN
0x1800092A0: "__cdecl _imp_malloc" __imp_malloc
0x180008080: Add64
0x1800093D0: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x180007710: "__cdecl _report_gsfailure" __report_gsfailure
0x1800043F0: TLSCspShutdown
0x180009128: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180007C16: "__cdecl _imp_load_RegOpenKeyExW" __imp_load_RegOpenKeyExW
0x18000C7B8: "__cdecl _native_startup_state" __native_startup_state
0x1800032C0: Bsafe2CapiPubKey
0x180008010: Reduce64
0x180001714: LsCsp_Initialize
0x18000C720: csp_dwServerCertificateLen
0x1800080D0: Sub64
0x18000C6F0: g_DLLAttached
0x180009458: "TLSRetrieveTermServCert" ??_C@_0BI@MNOHKLLF@TLSRetrieveTermServCert?$AA@
0x1800066C0: "__cdecl Sub" _Sub
0x1800092A8: "__cdecl _imp_free" __imp_free
0x1800078F0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180005910: BSafeDecPrivate
0x180005B10: rc4_key
0x180008215: memset
0x18000AA98: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180009718: "cn=" ??_C@_17PEAGMJJI@?$AAc?$AAn?$AA?$DN?$AA?$AA@

[JEB Decompiler by PNF Software]