PDB Symbols - shacctprofile.dll (0x5367FFB066851601D71E0623FD1D3E17526F0389E54066257275F97C4D5A95BB)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\shacctprofile.dll Base=0x180000000 SHA-256=5367FFB066851601D71E0623FD1D3E17526F0389E54066257275F97C4D5A95BB
PDB: shacctprofile.pdb GUID={4284504B-5BCD-EEEC-8E72CC46F4124F26} Age=1

619 located named symbols:
0x180009F80: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x1800098C8: PKEY_SAM_DateChanged
0x18000DED8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x180007F04: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180005FEC: "long __cdecl _SetDeletePrivilegeOnFile(unsigned short const * __ptr64,void * __ptr64)" ?_SetDeletePrivilegeOnFile@@YAJPEBGPEAX@Z
0x180009280: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180009AC0: PKEY_SAM_PasswordHint
0x180002AD4: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x1800081D0: "__cdecl FindPESection" _FindPESection
0x180009F40: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x180009208: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x180001EBC: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1800094D8: "__cdecl _imp_AddAce" __imp_AddAce
0x180007930: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180009400: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18000B4C0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180009A30: PKEY_SAM_LogonHours
0x18000B498: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18000DF78: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x18000D030: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800079FC: "__cdecl CRT_INIT" _CRT_INIT
0x180009200: SHCORE_NULL_THUNK_DATA
0x180009360: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180002CE4: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1800083DD: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180008A60: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180009A90: PKEY_SAM_PasswordCanChange
0x180009278: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180009D20: "__cdecl _sz_api_ms_win_security_provider_l1_1_0_dll" __sz_api_ms_win_security_provider_l1_1_0_dll
0x1800088AD: "__cdecl _imp_load_SamOpenDomain" __imp_load_SamOpenDomain
0x180009868: PKEY_SAM_BatchLogin
0x180009790: CLSID_SyncRootManager
0x18000DE90: "__cdecl _hmod__SHELL32_dll" __hmod__SHELL32_dll
0x180006578: SHDeleteDataFileForUser
0x18000D008: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x1800097E0: FOLDERID_ProgramData
0x180002374: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x1800042A0: "public: static long __cdecl CAce::CreateInstance(void * __ptr64,unsigned long,unsigned char,unsigned char,class CAce * __ptr64 * __ptr64)" ?CreateInstance@CAce@@SAJPEAXKEEPEAPEAV1@@Z
0x180009D50: "" ??_C@_00CNPNBAHC@?$AA@
0x180009820: PKEY_SAM_AccountIsDisabledForLogonUI
0x180004010: DllGetClassObject
0x180009958: PKEY_SAM_Domain
0x18000A2D8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180009F18: "internal\sdk\inc\wil\Resource.h" ??_C@_0CA@JODPNKMF@internal?2sdk?2inc?2wil?2Resource?4h?$AA@
0x1800093B0: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x1800092F8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180009F58: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x18000E030: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x18000B45C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180005320: "public: virtual long __cdecl CProfileNotificationHandler::OnLoad(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int) __ptr64" ?OnLoad@CProfileNotificationHandler@@UEAAJPEBG0KH@Z
0x1800092D0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800094E0: "__cdecl _imp_GetAce" __imp_GetAce
0x18000B1B0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x1800059D0: "int __cdecl DPA_DeleteCB<class CAce>(class CAce * __ptr64,void * __ptr64)" ??$DPA_DeleteCB@VCAce@@@@YAHPEAVCAce@@PEAX@Z
0x1800088BF: "__cdecl _imp_load_LsaLookupSids" __imp_load_LsaLookupSids
0x1800084A5: "__cdecl _imp_load_QISearch" __imp_load_QISearch
0x1800095E0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000DFEC: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x180006A2C: "long __cdecl SHAcctGetProgramDataDirectory(unsigned short * __ptr64,unsigned long)" ?SHAcctGetProgramDataDirectory@@YAJPEAGK@Z
0x180005E40: DPA_DeletePtr
0x180009E70: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180009318: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180003090: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x180009300: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x18000B4AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x180004E90: "public: virtual long __cdecl CProfileNotificationHandler::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CProfileNotificationHandler@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180005A10: "long __cdecl SHCreateFileOperation(struct HWND__ * __ptr64,unsigned long,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?SHCreateFileOperation@@YAJPEAUHWND__@@KAEBU_GUID@@PEAPEAX@Z
0x1800081B5: "__cdecl XcptFilter" _XcptFilter
0x180009C40: PKEY_SAM_Workstations
0x1800095E8: "__cdecl _xc_a" __xc_a
0x180009598: "__cdecl _imp_wcsstr" __imp_wcsstr
0x180009FD8: "DelayLockInterval" ??_C@_1CE@HFHHBMJE@?$AAD?$AAe?$AAl?$AAa?$AAy?$AAL?$AAo?$AAc?$AAk?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x18000DF38: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180009DA0: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x18000AD58: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x1800085CD: "__cdecl _imp_load_CoTaskMemFree" __imp_load_CoTaskMemFree
0x180003308: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x180010100: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x180009EE0: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x180009970: PKEY_SAM_DontEnumerateForLogon
0x180009C10: PKEY_SAM_UserPicture
0x180003CC8: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x180009898: PKEY_SAM_CountryCode
0x180006378: SHCreateDataFileForUser
0x180010018: "__cdecl _imp_SamOpenDomain" __imp_SamOpenDomain
0x1800092B8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180009488: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x180010108: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x1800083B9: "__cdecl lock" _lock
0x18000DEF0: g_pfnResultLoggingCallback
0x180009088: "__cdecl _imp_DPA_GetPtr" __imp_DPA_GetPtr
0x180006E20: CSGetAccountDomainSid
0x180009DB8: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x180008493: "__cdecl _imp_load_SHGetFolderPathEx" __imp_load_SHGetFolderPathEx
0x1800081A9: "__cdecl callnewh" _callnewh
0x180009270: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180005F80: "long __cdecl CCv6s_HeapReallocArray<void * __ptr64>(void * __ptr64,unsigned long,void * __ptr64,unsigned __int64,unsigned __int64,void * __ptr64 * __ptr64 * __ptr64)" ??$CCv6s_HeapReallocArray@PEAX@@YAJPEAXK0_K1PEAPEAPEAX@Z
0x180009748: "__cdecl _guard_iat_table" __guard_iat_table
0x180009348: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180006FBC: CSGetBuiltInDomainSid
0x18000DF08: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x180008A32: memcpy
0x180009098: g_pfn_DPA_Destroy
0x180003128: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x180006124: "long __cdecl _TakeDeletePrivilegeOnFile(unsigned short const * __ptr64)" ?_TakeDeletePrivilegeOnFile@@YAJPEBG@Z
0x180009D70: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800095A0: "__cdecl _imp_memset" __imp_memset
0x1800087EC: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x180009430: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x18000867C: "__cdecl _imp_load_GetPwrCapabilities" __imp_load_GetPwrCapabilities
0x18000838F: "__cdecl initterm" _initterm
0x180009CB0: "__cdecl _sz_api_ms_win_power_base_l1_1_0_dll" __sz_api_ms_win_power_base_l1_1_0_dll
0x18000B420: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000E0F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003554: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x180009460: "__cdecl _imp_Sleep" __imp_Sleep
0x1800099A0: PKEY_SAM_FullName
0x1800095C8: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x180009658: "__cdecl _xi_z" __xi_z
0x18000DFE0: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x18000DE98: "__cdecl _hmod__SHLWAPI_dll" __hmod__SHLWAPI_dll
0x180009090: "__cdecl _imp_DPA_Create" __imp_DPA_Create
0x180009250: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000DF30: g_pfnThrowPlatformException
0x180010038: "__cdecl _imp_SHGetFolderPathEx" __imp_SHGetFolderPathEx
0x180002E9C: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x18000DFE4: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x180009810: CLSID_HomeGroupCollection
0x18000AE88: SHELL32_NULL_THUNK_DATA_DLN
0x180009328: "__cdecl _imp_PathCchCanonicalizeEx" __imp_PathCchCanonicalizeEx
0x18000839B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800098E0: PKEY_SAM_DenyBatchLogin
0x180009ED8: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x180009450: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x18000DEE8: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x18000231C: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x180009CE0: "__cdecl _sz_api_ms_win_security_lsapolicy_l1_1_0_dll" __sz_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180009510: "__cdecl _imp__onexit" __imp__onexit
0x180008A3E: memmove
0x1800092B0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180009EF8: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x180008719: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18000819D: malloc
0x180009290: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800093D0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800089B8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000AF20: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLN
0x180009A48: PKEY_SAM_Name
0x180004110: "public: virtual unsigned long __cdecl CProfileNotificationHandler::AddRef(void) __ptr64" ?AddRef@CProfileNotificationHandler@@UEAAKXZ
0x1800040D0: DllCanUnloadNow
0x1800044A0: "private: long __cdecl CAce::_Init(void * __ptr64,unsigned long,unsigned char,unsigned char,unsigned short,void * __ptr64) __ptr64" ?_Init@CAce@@AEAAJPEAXKEEG0@Z
0x180010098: "__cdecl _imp_GetPwrCapabilities" __imp_GetPwrCapabilities
0x180009F14: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x18000DF48: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800056B8: "long __cdecl AddRemoveDeleteAceOnFolder(unsigned short const * __ptr64,void * __ptr64,int)" ?AddRemoveDeleteAceOnFolder@@YAJPEBGPEAXH@Z
0x180004EF0: "public: virtual long __cdecl CProfileNotificationHandler::OnCreate(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OnCreate@CProfileNotificationHandler@@UEAAJPEBG0K@Z
0x180009408: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000B3A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x1800093B8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1800081C1: "__cdecl amsg_exit" _amsg_exit
0x180009570: "__cdecl _imp__callnewh" __imp__callnewh
0x180008481: "__cdecl _imp_load_SHCreateItemFromParsingName" __imp_load_SHCreateItemFromParsingName
0x18000AEA0: SHLWAPI_NULL_THUNK_DATA_DLN
0x180010060: "__cdecl _imp_QISearch" __imp_QISearch
0x18000A2D0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x1800041E0: "long __cdecl AllocAndCopySid(void * __ptr64,void * __ptr64 * __ptr64)" ?AllocAndCopySid@@YAJPEAXPEAPEAX@Z
0x180009210: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x1800037DC: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x18000DEA0: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x1800099E8: PKEY_SAM_HomeDirectory
0x180005310: "public: virtual long __cdecl CProfileNotificationHandler::OnUnload(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,int) __ptr64" ?OnUnload@CProfileNotificationHandler@@UEAAJPEBG0KH@Z
0x180009448: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x180009788: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x18000DEA8: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x180009080: "__cdecl _imp_DPA_DeletePtr" __imp_DPA_DeletePtr
0x180002520: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x1800041C0: "public: virtual long __cdecl CClassFactory::LockServer(int) __ptr64" ?LockServer@CClassFactory@@UEAAJH@Z
0x180009410: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x180008688: "__cdecl _tailMerge_api_ms_win_power_base_l1_1_0_dll" __tailMerge_api_ms_win_power_base_l1_1_0_dll
0x180009538: "__cdecl _imp__lock" __imp__lock
0x18000814C: atexit
0x18000DF40: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x18000DFDC: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180002338: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x1800029C8: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x18000DEE0: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x1800093D8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000AD38: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll
0x180009268: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800092E0: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x1800090A0: "__cdecl _imp_DPA_DestroyCallback" __imp_DPA_DestroyCallback
0x180005310: "public: virtual long __cdecl CProfileNotificationHandler::OnMigrate(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OnMigrate@CProfileNotificationHandler@@UEAAJPEBG00K@Z
0x180009378: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800083D1: "__cdecl _dllonexit" __dllonexit
0x18000A138: "Microsoft\Windows\SystemData" ??_C@_1DK@KHGPFFIA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180003970: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x1800088E3: "__cdecl _imp_load_SamGetMembersInAlias" __imp_load_SamGetMembersInAlias
0x18000E0B0: "class CAccountFilter g_accountFilter" ?g_accountFilter@@3VCAccountFilter@@A
0x1800068F8: "long __cdecl GetCurrentUsersSidString(unsigned short * __ptr64 * __ptr64)" ?GetCurrentUsersSidString@@YAJPEAPEAG@Z
0x18000E0D0: "__cdecl _native_startup_lock" __native_startup_lock
0x1800088D1: "__cdecl _imp_load_SamOpenAlias" __imp_load_SamOpenAlias
0x180003FE4: DllMain
0x18000880A: "__cdecl _tailMerge_samlib_dll" __tailMerge_samlib_dll
0x18000DF68: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x18000DFD8: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x18000D040: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x18000B448: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000DF90: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x1800094A8: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180009590: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000A208: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000DFF0: "long g_cRefCount" ?g_cRefCount@@3JA
0x1800093F0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000889B: "__cdecl _imp_load_SamConnect" __imp_load_SamConnect
0x180009310: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180008749: "__cdecl _tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll" __tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180009258: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180007978: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800100F0: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x18000D020: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180008994: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180009428: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x180010058: "__cdecl _imp_StrChrW" __imp_StrChrW
0x180009B80: PKEY_SAM_SecurityID
0x180009C60: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x1800095B0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180009568: "__cdecl _imp_memcmp" __imp_memcmp
0x180006C4C: "long __cdecl _AppendPathAndCreateFolder(unsigned short const * __ptr64,unsigned short const * __ptr64,enum SYSTEM_DATA_FOLDER_USER_ACCESS,enum SYSTEM_DATA_FOLDER_FLAGS,bool,unsigned short * __ptr64,unsigned int)" ?_AppendPathAndCreateFolder@@YAJPEBG0W4SYSTEM_DATA_FOLDER_USER_ACCESS@@W4SYSTEM_DATA_FOLDER_FLAGS@@_NPEAGI@Z
0x1800040F0: "public: virtual long __cdecl CClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180004398: "public: static long __cdecl CAce::CreateInstance(struct _ACE_HEADER * __ptr64,class CAce * __ptr64 * __ptr64)" ?CreateInstance@CAce@@SAJPEAU_ACE_HEADER@@PEAPEAV1@@Z
0x1800094F8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x18000AEC8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x18000A070: "Microsoft\User Account Pictures" ??_C@_1EA@MPLOLDGH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAP?$AAi?$AAc?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x18000B198: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180010090: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x18000B4E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180009358: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180009440: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000ADB8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll
0x18000A2D0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180008280: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800100B0: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x18000A220: "Software\Microsoft\Windows\Curre" ??_C@_1IA@OKOJOMHK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18000816C: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180001E34: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18000DF00: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x180006994: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x1800094D0: "__cdecl _imp_AddAccessAllowedAceEx" __imp_AddAccessAllowedAceEx
0x180002530: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180010020: "__cdecl _imp_SamConnect" __imp_SamConnect
0x1800066A8: "long __cdecl DeleteSystemDataFolderForUser(void * __ptr64,enum SYSTEM_DATA_FOLDER_USER_ACCESS,unsigned short const * __ptr64,bool)" ?DeleteSystemDataFolderForUser@@YAJPEAXW4SYSTEM_DATA_FOLDER_USER_ACCESS@@PEBG_N@Z
0x180009E08: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x18000B308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180009D48: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x180009298: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180009F38: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x18000872B: "__cdecl _imp_load_CoTaskMemAlloc" __imp_load_CoTaskMemAlloc
0x18000AE18: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18000DFE8: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180009390: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x180009418: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180004130: "public: virtual unsigned long __cdecl CClassFactory::Release(void) __ptr64" ?Release@CClassFactory@@UEAAKXZ
0x180007C40: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180009548: "__cdecl _imp__initterm" __imp__initterm
0x1800087C8: "__cdecl _imp_load_LsaQueryInformationPolicy" __imp_load_LsaQueryInformationPolicy
0x18000B380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180009010: "const CClassFactory::`vftable'" ??_7CClassFactory@@6B@
0x180009420: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x180005C00: DPA_Destroy
0x180009260: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180005310: "public: virtual long __cdecl CProfileNotificationHandler::OnUpgrade(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OnUpgrade@CProfileNotificationHandler@@UEAAJPEBG0K@Z
0x18000B4D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000DF70: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x18000DEC8: "__cdecl _hmod__api_ms_win_security_provider_l1_1_0_dll" __hmod__api_ms_win_security_provider_l1_1_0_dll
0x180009B50: PKEY_SAM_ResidualID
0x18000B470: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0
0x18000B3D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180007248: "int __cdecl ContainsSID(void * __ptr64 * __ptr64,unsigned long,void * __ptr64)" ?ContainsSID@@YAHPEAPEAXKPEAX@Z
0x1800094B8: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x1800072BC: CSIsUserInAdministratorGroup
0x18000E0E0: "__cdecl _onexitend" __onexitend
0x180009498: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x180006A88: "long __cdecl SHAcctGetUserPicturePath(unsigned short * __ptr64,unsigned long)" ?SHAcctGetUserPicturePath@@YAJPEAGK@Z
0x1800083C5: "__cdecl unlock" _unlock
0x180009AF0: PKEY_SAM_PasswordLastSet
0x180009B08: PKEY_SAM_PasswordMustChange
0x1800095D8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180009BC8: PKEY_SAM_Type
0x18000AD98: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_base_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_power_base_l1_1_0_dll
0x1800090A8: g_pfn_DPA_InsertPtr
0x180009370: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180005620: "long __cdecl CProfileNotificationHandler_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CProfileNotificationHandler_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180008901: "__cdecl _tailMerge_api_ms_win_security_provider_l1_1_0_dll" __tailMerge_api_ms_win_security_provider_l1_1_0_dll
0x180005D80: DPA_InsertPtr
0x1800091F8: "__cdecl _imp_SHStrDupW" __imp_SHStrDupW
0x180009490: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180006830: "long __cdecl DeleteSystemDataRegistryKeyForUser(void * __ptr64)" ?DeleteSystemDataRegistryKeyForUser@@YAJPEAX@Z
0x180008542: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x180009218: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x1800100C8: "__cdecl _imp_LsaLookupSids" __imp_LsaLookupSids
0x180009480: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180009648: "__cdecl _xi_a" __xi_a
0x180009A00: PKEY_SAM_HomeDirectoryDrive
0x180009398: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180009478: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000B180: SHLWAPI_NULL_THUNK_DATA_DLB
0x180009220: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180009238: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800100D8: "__cdecl _imp_SetNamedSecurityInfoW" __imp_SetNamedSecurityInfoW
0x18000DF84: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x1800087FE: "__cdecl _imp_load_SamFreeMemory" __imp_load_SamFreeMemory
0x180009910: PKEY_SAM_DenyNetworkLogin
0x180009530: "__cdecl _imp__unlock" __imp__unlock
0x180009800: CLSID_FileOperation
0x180009508: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180010070: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180009038: "const CProfileNotificationHandler::`vftable'" ??_7CProfileNotificationHandler@@6B@
0x180010000: "__cdecl _imp_SamFreeMemory" __imp_SamFreeMemory
0x18000D000: WPP_GLOBAL_Control
0x1800077F8: "long __cdecl SHQueryToken<struct _TOKEN_USER>(void * __ptr64,enum _TOKEN_INFORMATION_CLASS,int,struct _TOKEN_USER * __ptr64 * __ptr64)" ??$SHQueryToken@U_TOKEN_USER@@@@YAJPEAXW4_TOKEN_INFORMATION_CLASS@@HPEAPEAU_TOKEN_USER@@@Z
0x18000B358: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000B434: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180006DE4: WPP_SF_D
0x18000E0F8: "__cdecl pRawDllMain" _pRawDllMain
0x180004B60: "public: long __cdecl CAceList::GetAclForExplicitEntries(void * __ptr64,struct _ACL * __ptr64 * __ptr64) __ptr64" ?GetAclForExplicitEntries@CAceList@@QEAAJPEAXPEAPEAU_ACL@@@Z
0x180009528: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180009880: PKEY_SAM_CodePage
0x180002D58: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x1800100D0: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLA
0x18000796C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000B1F0: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLB
0x180009FA0: "%s\Control Panel\Desktop" ??_C@_1DC@CDLCOIFJ@?$AA?$CF?$AAs?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAP?$AAa?$AAn?$AAe?$AAl?$AA?2?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x18000AF08: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLN
0x18000B330: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180008707: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x1800100B8: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x180007EE0: "__cdecl _security_check_cookie" __security_check_cookie
0x180009640: "__cdecl _xc_z" __xc_z
0x18000B3BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180002BD0: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x180009388: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000A0B0: "D:(A;;FA;;;%s)" ??_C@_1BO@OFDICGHB@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AA?$CF?$AAs?$AA?$CJ?$AA?$AA@
0x180009940: PKEY_SAM_DenyServiceLogin
0x1800092F0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800088F5: "__cdecl _imp_load_GetNamedSecurityInfoW" __imp_load_GetNamedSecurityInfoW
0x18000D045: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x180010010: "__cdecl _imp_SamOpenAlias" __imp_SamOpenAlias
0x18000489C: "private: class CAce * __ptr64 __cdecl CAceList::s_FindAce(class CDPA<class CAce,class CTContainer_PolicyUnOwned<class CAce> > & __ptr64,void * __ptr64,unsigned char,class CAce const * __ptr64) __ptr64" ?s_FindAce@CAceList@@AEAAPEAVCAce@@AEAV?$CDPA@VCAce@@V?$CTContainer_PolicyUnOwned@VCAce@@@@@@PEAXEPEBV2@@Z
0x180006AF8: "long __cdecl SHAcctAccountName2DataFileName(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?SHAcctAccountName2DataFileName@@YAJPEBGPEAGK@Z
0x1800097F0: FOLDERID_PublicUserTiles
0x180004170: "public: virtual long __cdecl CClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180010080: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x1800083F6: "__cdecl _imp_load_SHGetKnownFolderPath" __imp_load_SHGetKnownFolderPath
0x180009470: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800092A0: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180004DD0: "unsigned long __cdecl _RegSetKeyValue(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void const * __ptr64,unsigned long)" ?_RegSetKeyValue@@YAKPEAUHKEY__@@PEBG1KPEBXK@Z
0x18000DED0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhszxxgUoryUdrmwldhUlyquivUznwGEUkxsOlyq@shacctprofile" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhszxxgUoryUdrmwldhUlyquivUznwGEUkxsOlyq@shacctprofile
0x180002590: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x1800092C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18000DEF8: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x180009228: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800092A8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800097A0: "__cdecl _sz_SHELL32_dll" __sz_SHELL32_dll
0x180008A80: "__cdecl _chkstk" __chkstk
0x18000ADF8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_provider_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_provider_l1_1_0_dll
0x18000A2C0: WPP_fe670fae509c3ad053a17f8faae633a7_Traceguids
0x180002098: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x180009F90: CLSID_ProfileNotificationHandler
0x180002D04: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x1800093F8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000DFF8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUhglxpUlyquivUznwGEUhglxpOlyq@stock" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUhglxpUlyquivUznwGEUhglxpOlyq@stock
0x18000DF18: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800097D0: FOLDERID_PublicDesktop
0x180008889: "__cdecl _imp_load_SamCloseHandle" __imp_load_SamCloseHandle
0x18000B3F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800093A8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800100C0: "__cdecl _imp_LsaClose" __imp_LsaClose
0x180009660: "__cdecl _guard_fids_table" __guard_fids_table
0x18000B2F4: "__cdecl _IMPORT_DESCRIPTOR_SHCORE" __IMPORT_DESCRIPTOR_SHCORE
0x1800095A8: msvcrt_NULL_THUNK_DATA
0x1800090F0: "__cdecl load_config_used" _load_config_used
0x180009AD8: PKEY_SAM_PasswordIsEmpty
0x180009438: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x18000AD78: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x18000DEB8: "__cdecl _hmod__api_ms_win_security_lsapolicy_l1_1_0_dll" __hmod__api_ms_win_security_lsapolicy_l1_1_0_dll
0x180005060: "public: virtual long __cdecl CProfileNotificationHandler::OnDelete(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?OnDelete@CProfileNotificationHandler@@UEAAJPEBG0K@Z
0x180003410: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x180009240: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180009230: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800099D0: PKEY_SAM_Groups
0x180009C28: PKEY_SAM_Version
0x18000A0D0: ".dat" ??_C@_19DOLFOBJP@?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x180009A60: PKEY_SAM_NetworkLogin
0x180002CC4: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x18000DEC0: "__cdecl _hmod__SAMLIB_dll" __hmod__SAMLIB_dll
0x18000DF88: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x1800100E0: "__cdecl _imp_GetNamedSecurityInfoW" __imp_GetNamedSecurityInfoW
0x18000B484: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180009088: g_pfn_DPA_GetPtr
0x180010078: "__cdecl _imp_CoSetProxyBlanket" __imp_CoSetProxyBlanket
0x180009988: PKEY_SAM_DontShowInLogonUI
0x180009550: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000A000: "__cdecl GUID_387fdb83_dd33_4995_9d2d_1f647e846705" _GUID_387fdb83_dd33_4995_9d2d_1f647e846705
0x18000A0E0: "D:(A;;FA;;;SY)(A;;FA;;;BA)(A;;FR" ??_C@_1FG@BAICJAFP@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAS?$AAY?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAB?$AAA?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR@
0x180009098: "__cdecl _imp_DPA_Destroy" __imp_DPA_Destroy
0x18000866A: "__cdecl _imp_load_CoSetProxyBlanket" __imp_load_CoSetProxyBlanket
0x180009308: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000A010: "__cdecl GUID_9642ab2b_2198_4234_8f68_c3f55e5e9247" _GUID_9642ab2b_2198_4234_8f68_c3f55e5e9247
0x1800024D0: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x1800049D0: "private: long __cdecl CAceList::_AddAllowedAceToAcl(class CAce * __ptr64 const,bool,struct _ACL * __ptr64) __ptr64" ?_AddAllowedAceToAcl@CAceList@@AEAAJQEAVCAce@@_NPEAU_ACL@@@Z
0x180010028: "__cdecl _imp_SamCloseHandle" __imp_SamCloseHandle
0x180001F94: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x180010068: SHLWAPI_NULL_THUNK_DATA_DLA
0x18000292C: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x1800093E8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800093A0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180009090: g_pfn_DPA_Create
0x1800087DA: "__cdecl _imp_load_LsaFreeMemory" __imp_load_LsaFreeMemory
0x180003D68: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValue<unsigned __int64>(unsigned short const * __ptr64,unsigned __int64 * __ptr64,bool * __ptr64)" ??$TryGetValue@_K@SemaphoreValue@details_abi@wil@@SAJPEBGPEA_KPEA_N@Z
0x180008191: free
0x18000DEB0: "__cdecl _hmod__api_ms_win_power_base_l1_1_0_dll" __hmod__api_ms_win_power_base_l1_1_0_dll
0x1800025F8: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x1800093E0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002B18: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x18000E01C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUslnvtilfkPhszxxgUlyquivUznwGEUkxsOlyq@homegroup_shacct_all" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUslnvtilfkPhszxxgUlyquivUznwGEUkxsOlyq@homegroup_shacct_all
0x18000A2D8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180009B20: PKEY_SAM_ProfilePath
0x1800085EB: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x18000AED8: api-ms-win-power-base-l1-1-0_NULL_THUNK_DATA_DLN
0x1800100A0: api-ms-win-power-base-l1-1-0_NULL_THUNK_DATA_DLA
0x18000B1C8: api-ms-win-power-base-l1-1-0_NULL_THUNK_DATA_DLB
0x180009B98: PKEY_SAM_ServiceLogin
0x180005424: "private: long __cdecl CProfileNotificationHandler::_DeleteUserTiles(unsigned short const * __ptr64) __ptr64" ?_DeleteUserTiles@CProfileNotificationHandler@@AEAAJPEBG@Z
0x1800083B0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180009340: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180009320: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180008A26: memcmp
0x18000854E: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x180009F48: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x180005F00: DPA_DestroyCallback
0x180002300: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x180009DC8: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x1800098B0: PKEY_SAM_DateAccountExpires
0x1800023A0: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x1800100F8: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800084B1: "__cdecl _tailMerge_shlwapi_dll" __tailMerge_shlwapi_dll
0x18000B394: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180002D48: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x1800092E8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1800100A8: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x18000E020: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUhvxfgroUlyquivUznwGEUkxsOlyq@secutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUhvxfgroUlyquivUznwGEUkxsOlyq@secutil
0x180010088: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x180010050: SHELL32_NULL_THUNK_DATA_DLA
0x180009EB0: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x180009558: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180009928: PKEY_SAM_DenyRemoteInteractiveLogin
0x180009080: g_pfn_DPA_DeletePtr
0x1800095D0: ntdll_NULL_THUNK_DATA
0x180009560: "__cdecl _imp_memcpy" __imp_memcpy
0x180009D90: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x1800094A0: "__cdecl _imp_SetFileSecurityW" __imp_SetFileSecurityW
0x180009E60: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x180009DF0: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x1800092D8: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x18000AD18: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SHELL32_dll" __DELAY_IMPORT_DESCRIPTOR_SHELL32_dll
0x18000B31C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800100E8: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLA
0x1800045B0: "public: void * __ptr64 __cdecl CAceList::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCAceList@@QEAAPEAXI@Z
0x180009518: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18000D028: "__cdecl _security_cookie" __security_cookie
0x1800070E8: "long __cdecl SamHandleForDomain(void * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?SamHandleForDomain@@YAJPEAXKKPEAPEAX1@Z
0x1800090A0: g_pfn_DPA_DestroyCallback
0x180008A80: "__cdecl alloca_probe" _alloca_probe
0x180002678: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x180009EC8: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x1800097C0: FOLDERID_CommonStartMenu
0x1800094C0: "__cdecl _imp_AddAccessDeniedAceEx" __imp_AddAccessDeniedAceEx
0x180009A18: PKEY_SAM_InteractiveLogin
0x18000746C: "long __cdecl StringCbCatNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCbCatNW@@YAJPEAG_KPEBG1@Z
0x18000A060: "__cdecl GUID_947aab5f_0a5c_4c13_b4d6_4bf7836fc9f8" _GUID_947aab5f_0a5c_4c13_b4d6_4bf7836fc9f8
0x180009288: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180005B9C: DPA_CreateEx
0x1800092C0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800094F0: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x18000B344: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180009330: "__cdecl _imp_PathCchAppend" __imp_PathCchAppend
0x180009500: "__cdecl _imp_CopySid" __imp_CopySid
0x1800093C0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000E0E8: "__cdecl _onexitbegin" __onexitbegin
0x180008980: "__cdecl _imp_load_SetNamedSecurityInfoW" __imp_load_SetNamedSecurityInfoW
0x1800059C0: "private: static int __cdecl CDPA_Base<class CAce,class CTContainer_PolicyUnOwned<class CAce> >::_StandardDestroyCB(class CAce * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@VCAce@@V?$CTContainer_PolicyUnOwned@VCAce@@@@@@CAHPEAVCAce@@PEAX@Z
0x1800073CC: "long __cdecl SHOpenEffectiveToken(unsigned long,int,void * __ptr64 * __ptr64)" ?SHOpenEffectiveToken@@YAJKHPEAPEAX@Z
0x1800046A4: "private: long __cdecl CAceList::_InitFromAcl(struct _ACL * __ptr64) __ptr64" ?_InitFromAcl@CAceList@@AEAAJPEAU_ACL@@@Z
0x180009BE0: PKEY_SAM_UserAccountControl
0x18000A050: "__cdecl GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe" _GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe
0x18000DF60: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x180002654: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x180009520: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180009248: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180009368: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000AF40: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x1800093C8: "__cdecl _imp_RegDeleteTreeW" __imp_RegDeleteTreeW
0x18000DFF4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa
0x1800085DF: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x180009BF8: PKEY_SAM_UserComment
0x180005B90: DPA_Create
0x18000DFD0: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x180003248: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x1800082B4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800095B8: "__cdecl _imp_RtlMapGenericMask" __imp_RtlMapGenericMask
0x180010008: "__cdecl _imp_SamGetMembersInAlias" __imp_SamGetMembersInAlias
0x18000DF50: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x1800094B0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x18000B2E0: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180009540: "__cdecl _imp_memmove" __imp_memmove
0x180008402: "__cdecl _tailMerge_shell32_dll" __tailMerge_shell32_dll
0x180009B38: PKEY_SAM_RemoteInteractiveLogin
0x180003A5C: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x18000A2A0: "%ProgramData%" ??_C@_1BM@BPCHLFEE@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?$AA@
0x180002C88: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x180004EB0: "public: virtual unsigned long __cdecl CProfileNotificationHandler::Release(void) __ptr64" ?Release@CProfileNotificationHandler@@UEAAKXZ
0x1800035F0: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x180009578: "__cdecl _imp_malloc" __imp_malloc
0x18000ADD8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll" __DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll
0x1800099B8: PKEY_SAM_GroupMembers
0x180009838: PKEY_SAM_AdminComment
0x180009E88: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x18000DF28: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x180009D4C: "/" ??_C@_13CGOKJPIL@?$AA?1?$AA?$AA@
0x180005ACC: "long __cdecl RecursiveRemoveDirectory(unsigned short const * __ptr64)" ?RecursiveRemoveDirectory@@YAJPEBG@Z
0x180007F40: "__cdecl _report_gsfailure" __report_gsfailure
0x18000873D: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x1800080B8: "__cdecl onexit" _onexit
0x18000DF10: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x18000E0D8: "__cdecl _native_startup_state" __native_startup_state
0x180005CB0: DPA_GetPtr
0x1800097B0: "__cdecl _sz_SHLWAPI_dll" __sz_SHLWAPI_dll
0x180009D58: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000DF80: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x180010048: "__cdecl _imp_SHGetKnownFolderPath" __imp_SHGetKnownFolderPath
0x180009A78: PKEY_SAM_Password
0x180009850: PKEY_SAM_AllowedLogon
0x180009D10: "__cdecl _sz_SAMLIB_dll" __sz_SAMLIB_dll
0x180002360: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x18000A020: "__cdecl GUID_c042fb2f_bc74_4636_95b1_2bbe308f7391" _GUID_c042fb2f_bc74_4636_95b1_2bbe308f7391
0x180009338: api-ms-win-core-path-l1-1-0_NULL_THUNK_DATA
0x180009E28: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x18000AE68: SAMLIB_NULL_THUNK_DATA_DLN
0x18000B218: SAMLIB_NULL_THUNK_DATA_DLB
0x180010030: SAMLIB_NULL_THUNK_DATA_DLA
0x180009C80: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18000A030: "__cdecl GUID_e10f6c3a_f1ae_4adc_aa9d_2fe65525666e" _GUID_e10f6c3a_f1ae_4adc_aa9d_2fe65525666e
0x1800094E8: "__cdecl _imp_GetAclInformation" __imp_GetAclInformation
0x180010040: "__cdecl _imp_SHCreateItemFromParsingName" __imp_SHCreateItemFromParsingName
0x180009350: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180002014: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x18000A180: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1IE@OPKHPNGK@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180009B68: PKEY_SAM_ScriptPath
0x1800095C0: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x180007568: SHTranslateSIDToName
0x18000B160: SHELL32_NULL_THUNK_DATA_DLB
0x18000DF58: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x180008530: "__cdecl _imp_load_StrChrW" __imp_load_StrChrW
0x1800094C8: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x18000B40C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800098F8: PKEY_SAM_DenyInteractiveLogin
0x18000DF7C: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x180009580: "__cdecl _imp_free" __imp_free
0x180008220: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180009468: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800090A8: "__cdecl _imp_DPA_InsertPtr" __imp_DPA_InsertPtr
0x180009588: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x180009DAC: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x180009380: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x180009BB0: PKEY_SAM_ShellAdminObjectProps
0x180005CD4: DPA_Grow
0x18000B36C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180004110: "public: virtual unsigned long __cdecl CClassFactory::AddRef(void) __ptr64" ?AddRef@CClassFactory@@UEAAKXZ
0x180009458: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18000B3E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000DF20: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x18000B258: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA_DLB
0x180008A4A: memset
0x18000B4FC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18000D044: g_header_init_InitializeResultHeader
0x180009AA8: PKEY_SAM_PasswordExpired

[JEB Decompiler by PNF Software]