Generated by JEB on 2019/08/01

PE: C:\Windows\System32\shacct.dll Base=0x180000000 SHA-256=5404883B972C55F0C25FD873E6075CF78B25CE7B18163B01974F9B537D173C25
PDB: shacct.pdb GUID={FA09900B-D07F-7C13-DC3DCFE8BABD258A} Age=1

1065 located named symbols:
0x18000F9B8: "__cdecl TlgDefineProvider_annotation__Tlgg_shacctLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_shacctLoggingProviderProv
0x18001A6E8: PKEY_Identity_ProviderID
0x18001AF58: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x180018CD8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x18001A8C8: PKEY_SAM_DateChanged
0x18000725C: "public: int __cdecl CDPA_Base<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> >::Destroy(void) __ptr64" ?Destroy@?$CDPA_Base@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@QEAAHXZ
0x18001A530: "__cdecl _sz_SspiCli_dll" __sz_SspiCli_dll
0x18000F490: "public: virtual unsigned long __cdecl CEnumUserAccounts::Release(void) __ptr64" ?Release@CEnumUserAccounts@@UEAAKXZ
0x180009E4C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180018B10: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18001AAC0: PKEY_SAM_PasswordHint
0x180018CE0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x1800094A0: "public: virtual long __cdecl CUserAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUserAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009BB0: "__cdecl FindPESection" _FindPESection
0x180009530: "public: virtual long __cdecl CLoggedOnAccounts::Create(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?Create@CLoggedOnAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180003610: "protected: virtual long __cdecl CLocalUsers::_Init(void) __ptr64" ?_Init@CLocalUsers@@MEAAJXZ
0x180015F88: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x180008E20: "public: virtual long __cdecl CConnectedAccounts::Reset(void) __ptr64" ?Reset@CConnectedAccounts@@UEAAJXZ
0x180009210: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180018C38: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18001E8C4: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000A7B3: "__cdecl _imp_load_LsaAddAccountRights" __imp_load_LsaAddAccountRights
0x1800094E0: "public: virtual unsigned long __cdecl CEnumUserAccounts::AddRef(void) __ptr64" ?AddRef@CEnumUserAccounts@@UEAAKXZ
0x18001AA30: PKEY_SAM_LogonHours
0x18001E888: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18001B220: "Need to implement Groups" ??_C@_1DC@FMACHHEN@?$AAN?$AAe?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?5?$AAG?$AAr?$AAo?$AAu?$AAp?$AAs?$AA?$AA@
0x180009520: "public: virtual long __cdecl CProfilePropStore::Commit(void) __ptr64" ?Commit@CProfilePropStore@@UEAAJXZ
0x180009520: "public: virtual long __cdecl CUserAccounts::Advise(struct IComputerAccountNotify * __ptr64,unsigned long * __ptr64) __ptr64" ?Advise@CUserAccounts@@UEAAJPEAUIComputerAccountNotify@@PEAK@Z
0x18001A648: IID_IComputerAccountNotify
0x18000F3D0: "public: virtual long __cdecl CEnumLocalAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CEnumLocalAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000A534: "__cdecl _tailMerge_oleaut32_dll" __tailMerge_oleaut32_dll
0x18001AE78: "SeDenyInteractiveLogonRight" ??_C@_1DI@FHICHPLG@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180024218: "__cdecl _imp_LsaEnumerateAccountRights" __imp_LsaEnumerateAccountRights
0x180020050: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007370: "public: virtual void * __ptr64 __cdecl CLocalUsers::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLocalUsers@@UEAAPEAXI@Z
0x18000FB90: "public: virtual void * __ptr64 __cdecl CEnumLocalGroups::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEnumLocalGroups@@UEAAPEAXI@Z
0x18000966C: "__cdecl CRT_INIT" _CRT_INIT
0x180018AA8: SHCORE_NULL_THUNK_DATA
0x180018BA8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180004C80: "public: long __cdecl CSamPropStore::_Init(void * __ptr64,unsigned short const * __ptr64,unsigned long,enum _ACCOUNT_OBJECT_TYPE,int) __ptr64" ?_Init@CSamPropStore@@QEAAJPEAXPEBGKW4_ACCOUNT_OBJECT_TYPE@@H@Z
0x180024060: "__cdecl _imp_PropVariantToStringAlloc" __imp_PropVariantToStringAlloc
0x18000EB40: "public: virtual long __cdecl CEnumUserAccounts::Clone(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?Clone@CEnumUserAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x180016E70: "private: long __cdecl CSamPropStore::_NotifyShell(void) __ptr64" ?_NotifyShell@CSamPropStore@@AEAAJXZ
0x18000AC27: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x18000A163: "__cdecl _imp_load_PropVariantToUInt64WithDefault" __imp_load_PropVariantToUInt64WithDefault
0x180018DF0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000ADA0: "[thunk]:public: virtual unsigned long __cdecl CLoggedOnPropStore::Release`adjustor{8}' (void) __ptr64" ?Release@CLoggedOnPropStore@@W7EAAKXZ
0x18001A760: PKEY_LOGON_LogonTime
0x18000AABC: "__cdecl _imp_load_WTSEnumerateSessionsW" __imp_load_WTSEnumerateSessionsW
0x18000AD30: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001AA90: PKEY_SAM_PasswordCanChange
0x180024138: "__cdecl _imp_SamCreateUserInDomain" __imp_SamCreateUserInDomain
0x18001AD60: "SeDenyRemoteInteractiveLogonRigh" ??_C@_1EE@MIHNMCGB@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh@
0x180018AF8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x1800177E8: SHQualifyUsernameAsLocal
0x18000A199: "__cdecl _imp_load_PropVariantClear" __imp_load_PropVariantClear
0x1800241B0: "__cdecl _imp_PropVariantClear" __imp_PropVariantClear
0x18000E99C: "void __cdecl SafeRelease<struct IComputerAccounts>(struct IComputerAccounts * __ptr64 * __ptr64)" ??$SafeRelease@UIComputerAccounts@@@@YAXPEAPEAUIComputerAccounts@@@Z
0x180007290: "long __cdecl CLocalUsers_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CLocalUsers_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18000A76B: "__cdecl _imp_load_SamOpenDomain" __imp_load_SamOpenDomain
0x180024078: PROPSYS_NULL_THUNK_DATA_DLA
0x18001A320: "DefaultAccount" ??_C@_1BO@MECBFFNF@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x18001AF88: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000FAE0: "protected: virtual __cdecl CEnumLocalAccounts::~CEnumLocalAccounts(void) __ptr64" ??1CEnumLocalAccounts@@MEAA@XZ
0x18001A868: PKEY_SAM_BatchLogin
0x1800094E0: "public: virtual unsigned long __cdecl CLocalAccounts::AddRef(void) __ptr64" ?AddRef@CLocalAccounts@@UEAAKXZ
0x180008D00: "long __cdecl CConnectedAccounts_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CConnectedAccounts_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800192D0: "__cdecl GUID_3c708557_c99d_4fa3_9231_56518418b4e4" _GUID_3c708557_c99d_4fa3_9231_56518418b4e4
0x1800240D8: "__cdecl _imp_SamOpenUser" __imp_SamOpenUser
0x180024170: "__cdecl _imp_LsaDeregisterLogonProcess" __imp_LsaDeregisterLogonProcess
0x18001A820: PKEY_SAM_AccountIsDisabledForLogonUI
0x180007D90: DllGetClassObject
0x180006CF0: "private: long __cdecl CUserAccounts::_AddUsers(struct IComputerAccounts * __ptr64) __ptr64" ?_AddUsers@CUserAccounts@@AEAAJPEAUIComputerAccounts@@@Z
0x18001ADA8: "SeRemoteInteractiveLogonRight" ??_C@_1DM@NINDPFE@?$AAS?$AAe?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x1800094E0: "public: virtual unsigned long __cdecl CEnumProfileAccounts::AddRef(void) __ptr64" ?AddRef@CEnumProfileAccounts@@UEAAKXZ
0x18000A4E0: "__cdecl _imp_load_LsaConnectUntrusted" __imp_load_LsaConnectUntrusted
0x180024028: "__cdecl _imp_InitPropVariantFromCLSID" __imp_InitPropVariantFromCLSID
0x18001A958: PKEY_SAM_Domain
0x18001B2D0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18001DA70: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_0_dll
0x180012E74: CSGetGroupAccountInfoByRID
0x18000A303: "__cdecl _tailMerge_samcli_dll" __tailMerge_samcli_dll
0x180024280: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLA
0x180018BE8: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18001E860: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18001AE18: "SeDenyBatchLogonRight" ??_C@_1CM@GNGBHIMJ@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAB?$AAa?$AAt?$AAc?$AAh?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180014D20: "private: long __cdecl CLoggedOnPropStore::_InitLogonSessionData(void) __ptr64" ?_InitLogonSessionData@CLoggedOnPropStore@@AEAAJXZ
0x18000FEB0: "public: virtual long __cdecl CLocalAccounts::Advise(struct IComputerAccountNotify * __ptr64,unsigned long * __ptr64) __ptr64" ?Advise@CLocalAccounts@@UEAAJPEAUIComputerAccountNotify@@PEAK@Z
0x180018B60: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18001E480: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x18000668C: "public: int __cdecl CDPA_Base<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> >::Create(int) __ptr64" ?Create@?$CDPA_Base@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@QEAAHH@Z
0x180018DB8: "__cdecl _imp_wcschr" __imp_wcschr
0x180002C00: CSGetLogonPropertyStore
0x1800113C8: "long __cdecl FreeUserExtStructure(struct _USER_EXTENDED_INFORMATION * __ptr64,int)" ?FreeUserExtStructure@@YAJPEAU_USER_EXTENDED_INFORMATION@@H@Z
0x180014960: "private: long __cdecl CLoggedOnPropStore::_CloneLogonSessionData(struct _SECURITY_LOGON_SESSION_DATA * __ptr64,struct _SECURITY_LOGON_SESSION_DATA * __ptr64 * __ptr64) __ptr64" ?_CloneLogonSessionData@CLoggedOnPropStore@@AEAAJPEAU_SECURITY_LOGON_SESSION_DATA@@PEAPEAU2@@Z
0x18001A698: CLSID_ConnectedAccounts
0x18000A7A1: "__cdecl _imp_load_LsaEnumerateAccountRights" __imp_load_LsaEnumerateAccountRights
0x18000A13F: "__cdecl _imp_load_PropVariantToFileTime" __imp_load_PropVariantToFileTime
0x180003C20: "private: virtual long __cdecl CEnumLocalUsers::_GetAccountPropertyStore(void * __ptr64,unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?_GetAccountPropertyStore@CEnumLocalUsers@@EEAAJPEAXPEBGPEAPEAUIPropertyStore@@@Z
0x18000A151: "__cdecl _imp_load_PropVariantToString" __imp_load_PropVariantToString
0x180024260: "__cdecl _imp_WTSQuerySessionInformationW" __imp_WTSQuerySessionInformationW
0x1800218D8: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_2_dll" __hmod__api_ms_win_security_lsalookup_l1_1_2_dll
0x18000A78F: "__cdecl _imp_load_LsaLookupSids" __imp_load_LsaLookupSids
0x180009520: "public: virtual long __cdecl CConnectedAccounts::Unadvise(unsigned long) __ptr64" ?Unadvise@CConnectedAccounts@@UEAAJK@Z
0x18000F9C4: "__cdecl TlgWrite" _TlgWrite
0x180008F40: "public: virtual long __cdecl CLoggedOnAccounts::FindBySID(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindBySID@CLoggedOnAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180018E28: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18001A410: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1JO@FHFFLIEB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18001A808: PKEY_PROFILE_Path
0x180018C90: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180003388: "long __cdecl DupSID(void * __ptr64,void * __ptr64 * __ptr64)" ?DupSID@@YAJPEAXPEAPEAX@Z
0x18000FC08: "long __cdecl AddUserToGroup(struct _UNICODE_STRING * __ptr64,void * __ptr64,void * __ptr64,unsigned long)" ?AddUserToGroup@@YAJPEAU_UNICODE_STRING@@PEAX1K@Z
0x1800094E0: "public: virtual unsigned long __cdecl CConnectedAccounts::AddRef(void) __ptr64" ?AddRef@CConnectedAccounts@@UEAAKXZ
0x18001E3F8: PROPSYS_NULL_THUNK_DATA_DLB
0x18001E8B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x180018E10: "__cdecl _imp_RtlInitString" __imp_RtlInitString
0x18001DCA8: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLN
0x18000A516: "__cdecl _imp_load_LsaDeregisterLogonProcess" __imp_load_LsaDeregisterLogonProcess
0x18001DC98: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLN
0x1800241C8: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLA
0x18001E5F8: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLB
0x1800241D8: api-ms-win-security-lsalookup-l1-1-2_NULL_THUNK_DATA_DLA
0x18001E658: api-ms-win-security-lsalookup-l1-1-0_NULL_THUNK_DATA_DLB
0x180010D08: "long __cdecl CreateReadOnlyPropertyStore(void * __ptr64,struct _SID_INFO,struct IPropertyStore * __ptr64 * __ptr64)" ?CreateReadOnlyPropertyStore@@YAJPEAXU_SID_INFO@@PEAPEAUIPropertyStore@@@Z
0x180009B98: "__cdecl XcptFilter" _XcptFilter
0x18001AC40: PKEY_SAM_Workstations
0x180018E30: "__cdecl _xc_a" __xc_a
0x180008080: "public: virtual unsigned long __cdecl CEnumLogonAccounts::Release(void) __ptr64" ?Release@CEnumLogonAccounts@@UEAAKXZ
0x18000AB59: "__cdecl _imp_load_DsrIsDeviceJoined" __imp_load_DsrIsDeviceJoined
0x180011D70: "public: virtual long __cdecl CLocalAccounts::Reset(void) __ptr64" ?Reset@CLocalAccounts@@UEAAJXZ
0x180002590: "long __cdecl LookupNames(unsigned long,unsigned short const * __ptr64 const * __ptr64,void * __ptr64 * __ptr64 * __ptr64)" ?LookupNames@@YAJKPEBQEBGPEAPEAPEAX@Z
0x18001AEB0: "SeServiceLogonRight" ??_C@_1CI@LEDFFMOC@?$AAS?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180014640: "public: virtual long __cdecl CLoggedOnPropStore::GetAt(unsigned long,struct _tagpropertykey * __ptr64) __ptr64" ?GetAt@CLoggedOnPropStore@@UEAAJKPEAU_tagpropertykey@@@Z
0x18000A711: "__cdecl _imp_load_SamUnregisterObjectChangeNotification" __imp_load_SamUnregisterObjectChangeNotification
0x18001D910: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x18000AAAA: "__cdecl _imp_load_WTSFreeMemory" __imp_load_WTSFreeMemory
0x18000A224: "__cdecl _imp_load_CoTaskMemFree" __imp_load_CoTaskMemFree
0x18000F20C: "public: long __cdecl CEnumUserAccounts::Init(class CDPA<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> > * __ptr64,struct IComputerAccounts * __ptr64 * __ptr64,unsigned long,int) __ptr64" ?Init@CEnumUserAccounts@@QEAAJPEAV?$CDPA@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@PEAPEAUIComputerAccounts@@KH@Z
0x180013AA8: WPP_SF_D_sid_D
0x180013090: CSGetGroupRIDEnumeration
0x180024230: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x1800189F8: g_pfn_DPA_Search
0x180018CC0: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x18001E688: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLB
0x18001A970: PKEY_SAM_DontEnumerateForLogon
0x18001AC10: PKEY_SAM_UserPicture
0x180007370: "public: virtual void * __ptr64 __cdecl CLocalUsers::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLocalUsers@@UEAAPEAXI@Z
0x1800188D0: "const CEnumLocalGroups::`vftable'" ??_7CEnumLocalGroups@@6B@
0x18001A898: PKEY_SAM_CountryCode
0x180024010: "__cdecl _imp_PSCreateMemoryPropertyStore" __imp_PSCreateMemoryPropertyStore
0x180009570: "private: static int __cdecl CDPA_Base<struct _WTS_SESSION_INFOW,class CTContainer_PolicyUnOwned<struct _WTS_SESSION_INFOW> >::_StandardDestroyCB(struct _WTS_SESSION_INFOW * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@U_WTS_SESSION_INFOW@@V?$CTContainer_PolicyUnOwned@U_WTS_SESSION_INFOW@@@@@@CAHPEAU_WTS_SESSION_INFOW@@PEAX@Z
0x180013E08: WPP_SF_ZdD
0x18000FB90: "public: virtual void * __ptr64 __cdecl CEnumLocalGroups::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEnumLocalGroups@@UEAAPEAXI@Z
0x1800240E8: "__cdecl _imp_SamOpenDomain" __imp_SamOpenDomain
0x180018B48: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18001A3E0: "__cdecl GUID_40afa0b6_3b2f_4654_8c3f_161de85cf80e" _GUID_40afa0b6_3b2f_4654_8c3f_161de85cf80e
0x18001A730: PKEY_LOGON_DnsDomainName
0x180024240: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x18000A007: "__cdecl lock" _lock
0x1800170AC: CSGetAccountPropertyStoreByRID
0x180009520: "public: virtual long __cdecl CConnectedAccounts::Advise(struct IComputerAccountNotify * __ptr64,unsigned long * __ptr64) __ptr64" ?Advise@CConnectedAccounts@@UEAAJPEAUIComputerAccountNotify@@PEAK@Z
0x180009570: "protected: virtual enum _ACCOUNT_OBJECT_TYPE __cdecl CLocalUsers::_GetAccountType(void) __ptr64" ?_GetAccountType@CLocalUsers@@MEAA?AW4_ACCOUNT_OBJECT_TYPE@@XZ
0x180006580: CSGetAccountDomainSid
0x1800182B0: "const CLocalUsers::`vftable'" ??_7CLocalUsers@@6B@
0x18001235C: "bool __cdecl _IsBlockConnectedUserGPEnabled(void)" ?_IsBlockConnectedUserGPEnabled@@YA_NXZ
0x18001ACD8: WPP_3fce51de42db3e8a7a60a272a8e5e0dd_Traceguids
0x18000A7FB: "__cdecl _imp_load_SamQueryInformationUser" __imp_load_SamQueryInformationUser
0x180009B80: "__cdecl callnewh" _callnewh
0x180013EB0: WPP_SF_ZddD
0x18001AF68: "__cdecl GUID_6584ab60_75df_46ce_a8ca_fe0ea7882370" _GUID_6584ab60_75df_46ce_a8ca_fe0ea7882370
0x18001A7C0: PKEY_LOGON_UPN
0x1800191DC: "__cdecl _guard_iat_table" __guard_iat_table
0x180008890: "public: virtual long __cdecl CEnumLogonAccounts::Next(unsigned long,struct IPropertyStore * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Next@CEnumLogonAccounts@@UEAAJKPEAPEAUIPropertyStore@@PEAK@Z
0x180018B90: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180006498: CSGetBuiltInDomainSid
0x18000AD01: memcpy
0x180005780: CSGetAccountRights
0x180009520: "public: virtual long __cdecl CLoggedOnAccounts::Unadvise(unsigned long) __ptr64" ?Unadvise@CLoggedOnAccounts@@UEAAJK@Z
0x1800091B0: "public: virtual unsigned long __cdecl CLoggedOnAccounts::Release(void) __ptr64" ?Release@CLoggedOnAccounts@@UEAAKXZ
0x180018A08: g_pfn_DPA_Destroy
0x180014280: "public: virtual long __cdecl CLoggedOnAccounts::FindByName(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByName@CLoggedOnAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180019210: "ProfileImagePath" ??_C@_1CC@CGAFIBB@?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x18001D8F0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_PROPSYS_dll" __DELAY_IMPORT_DESCRIPTOR_PROPSYS_dll
0x180015090: "public: long __cdecl CEnumProfileAccounts::Init(class CDPA<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> > * __ptr64) __ptr64" ?Init@CEnumProfileAccounts@@QEAAJPEAV?$CDPA@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@@Z
0x18000A928: "__cdecl _imp_load_SamSetInformationUser" __imp_load_SamSetInformationUser
0x180018CF0: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x18000F3D0: "public: virtual long __cdecl CEnumProfileAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CEnumProfileAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800173A8: WPP_SF__guid_dddD
0x18001095C: "long __cdecl CopyUnicodeStringAlloc(struct _UNICODE_STRING * __ptr64 const,struct _UNICODE_STRING * __ptr64)" ?CopyUnicodeStringAlloc@@YAJQEAU_UNICODE_STRING@@PEAU1@@Z
0x180018DD8: "__cdecl _imp_memset" __imp_memset
0x18000A662: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x180018C68: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180009D6F: "__cdecl initterm" _initterm
0x18001A520: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x18000F500: "public: virtual long __cdecl CUserPropertyStore::SetFlags(int) __ptr64" ?SetFlags@CUserPropertyStore@@UEAAJH@Z
0x18001E7AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180021920: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000A12D: "__cdecl _imp_load_VariantToPropVariant" __imp_load_VariantToPropVariant
0x180018CA0: "__cdecl _imp_Sleep" __imp_Sleep
0x18001A9A0: PKEY_SAM_FullName
0x180018A18: g_pfn_DPA_EnumCallback
0x180018E08: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x180018EA8: "__cdecl _xi_z" __xi_z
0x180009520: "public: virtual long __cdecl CLoggedOnAccounts::Delete(struct IPropertyStore * __ptr64) __ptr64" ?Delete@CLoggedOnAccounts@@UEAAJPEAUIPropertyStore@@@Z
0x180018A10: "__cdecl _imp_DPA_Create" __imp_DPA_Create
0x180017E10: DPA_DeleteAllPtrs
0x180009500: "public: virtual unsigned long __cdecl CSamPropStore::AddRef(void) __ptr64" ?AddRef@CSamPropStore@@UEAAKXZ
0x180017340: WPP_SF__guid_ddd
0x180018AD0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180024088: "__cdecl _imp_SamQueryInformationAlias" __imp_SamQueryInformationAlias
0x180009D7B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800052C0: "long __cdecl CopyUserStructure(struct _USER_ALL_INFORMATION * __ptr64 const,struct _USER_ALL_INFORMATION * __ptr64 * __ptr64)" ?CopyUserStructure@@YAJQEAU_USER_ALL_INFORMATION@@PEAPEAU1@@Z
0x180007120: "public: virtual unsigned long __cdecl CProfileAccounts::Release(void) __ptr64" ?Release@CProfileAccounts@@UEAAKXZ
0x1800095B0: "public: virtual long __cdecl CLoggedOnPropStore::SetFlags(int) __ptr64" ?SetFlags@CLoggedOnPropStore@@UEAAJH@Z
0x180012498: "protected: long __cdecl CLocalAccounts::_RegisterSAMEvent(void) __ptr64" ?_RegisterSAMEvent@CLocalAccounts@@IEAAJXZ
0x18000A7C5: "__cdecl _imp_load_LsaRemoveAccountRights" __imp_load_LsaRemoveAccountRights
0x180009560: "public: virtual long __cdecl CEnumProfileAccounts::Skip(unsigned long) __ptr64" ?Skip@CEnumProfileAccounts@@UEAAJK@Z
0x18001A8E0: PKEY_SAM_DenyBatchLogin
0x18000A2F7: "__cdecl _imp_load_NetUserGetInfo" __imp_load_NetUserGetInfo
0x18001A550: "__cdecl _sz_api_ms_win_security_lsapolicy_l1_1_0_dll" __sz_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180024290: netutils_NULL_THUNK_DATA_DLA
0x18001E4B8: netutils_NULL_THUNK_DATA_DLB
0x180018D48: "__cdecl _imp__onexit" __imp__onexit
0x18001DD60: netutils_NULL_THUNK_DATA_DLN
0x18001AED8: "SeBatchLogonRight" ??_C@_1CE@JIKHJFFJ@?$AAS?$AAe?$AAB?$AAa?$AAt?$AAc?$AAh?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x18000AD0D: memmove
0x180009560: "public: virtual long __cdecl CEnumUserAccounts::Skip(unsigned long) __ptr64" ?Skip@CEnumUserAccounts@@UEAAJK@Z
0x180024068: "__cdecl _imp_PropVariantToUInt32" __imp_PropVariantToUInt32
0x180011F70: "public: virtual long __cdecl CLocalAccounts::Unadvise(unsigned long) __ptr64" ?Unadvise@CLocalAccounts@@UEAAJK@Z
0x180018B30: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180005FA0: "public: long __cdecl CKnownGroups::IsUserInAnyKnownGroup(struct IPropertyStore * __ptr64,bool * __ptr64)const __ptr64" ?IsUserInAnyKnownGroup@CKnownGroups@@QEBAJPEAUIPropertyStore@@PEA_N@Z
0x180018C30: api-ms-win-core-shlwapi-obsolete-l1-1-0_NULL_THUNK_DATA
0x1800094E0: "public: virtual unsigned long __cdecl CLoggedOnAccounts::AddRef(void) __ptr64" ?AddRef@CLoggedOnAccounts@@UEAAKXZ
0x18001AC70: "__cdecl _sz_dsreg_dll" __sz_dsreg_dll
0x180009B74: malloc
0x180018B20: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1800081FC: "public: int __cdecl CDPA_Base<struct _WTS_SESSION_INFOW,class CTContainer_PolicyUnOwned<struct _WTS_SESSION_INFOW> >::Destroy(void) __ptr64" ?Destroy@?$CDPA_Base@U_WTS_SESSION_INFOW@@V?$CTContainer_PolicyUnOwned@U_WTS_SESSION_INFOW@@@@@@QEAAHXZ
0x180018BD0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180009520: "public: virtual long __cdecl CProfileAccounts::Delete(struct IPropertyStore * __ptr64) __ptr64" ?Delete@CProfileAccounts@@UEAAJPEAUIPropertyStore@@@Z
0x18000F3D0: "public: virtual long __cdecl CEnumConnectedAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CEnumConnectedAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000ACA0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800218E0: "__cdecl _hmod__api_ms_win_security_lsalookup_l1_1_0_dll" __hmod__api_ms_win_security_lsalookup_l1_1_0_dll
0x18001AA48: PKEY_SAM_Name
0x1800094C0: DllCanUnloadNow
0x18000FB90: "protected: virtual void * __ptr64 __cdecl CEnumLocalAccounts::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEnumLocalAccounts@@MEAAPEAXI@Z
0x180024030: "__cdecl _imp_PSCreateMemoryPropertyStoreFromSerializedData" __imp_PSCreateMemoryPropertyStoreFromSerializedData
0x18000A528: "__cdecl _imp_load_VariantClear" __imp_load_VariantClear
0x18000A747: "__cdecl _imp_load_SamEnumerateAliasesInDomain" __imp_load_SamEnumerateAliasesInDomain
0x180011E34: "long __cdecl StringCbCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCbCopyNW@@YAJPEAG_KPEBG1@Z
0x180006730: "public: virtual long __cdecl CUserAccounts::GetAt(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?GetAt@CUserAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x180006BC0: "private: long __cdecl CUserAccounts::_Init(void) __ptr64" ?_Init@CUserAccounts@@AEAAJXZ
0x18000A982: "__cdecl _imp_load_SamDeleteAlias" __imp_load_SamDeleteAlias
0x180018C48: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18001E7E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180018248: "const CProfileAccounts::`vftable'" ??_7CProfileAccounts@@6B@
0x180014F50: "public: virtual long __cdecl CProfilePropStore::GetAt(unsigned long,struct _tagpropertykey * __ptr64) __ptr64" ?GetAt@CProfilePropStore@@UEAAJKPEAU_tagpropertykey@@@Z
0x180009BA4: "__cdecl amsg_exit" _amsg_exit
0x180018DC8: "__cdecl _imp__callnewh" __imp__callnewh
0x180024040: "__cdecl _imp_VariantToPropVariant" __imp_VariantToPropVariant
0x18000A0F7: "__cdecl _imp_load_InitPropVariantFromCLSID" __imp_load_InitPropVariantFromCLSID
0x180008EB0: DPA_Search
0x180007A40: "public: virtual long __cdecl CLocalAccounts::GetAt(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?GetAt@CLocalAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x18001A790: PKEY_LOGON_Status
0x180018C20: "__cdecl _imp_QISearch" __imp_QISearch
0x18001B2CC: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180024098: "__cdecl _imp_SamDeleteAlias" __imp_SamDeleteAlias
0x180021890: "__cdecl _hmod__PROPSYS_dll" __hmod__PROPSYS_dll
0x1800181C0: "const CUserAccounts::`vftable'{for `IComputerAccountsEnumerationOption'}" ??_7CUserAccounts@@6BIComputerAccountsEnumerationOption@@@
0x1800218E8: "__cdecl _hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll" __hmod__ext_ms_win_session_wtsapi32_l1_1_0_dll
0x180021898: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x180018340: "const CLocalAccounts::`vftable'" ??_7CLocalAccounts@@6B@
0x18001A4B0: "__cdecl _sz_PROPSYS_dll" __sz_PROPSYS_dll
0x18001A9E8: PKEY_SAM_HomeDirectory
0x18001A678: CLSID_LoggedOnAccounts
0x18000FA64: "public: __cdecl CLocalAccounts::CLocalAccounts(void) __ptr64" ??0CLocalAccounts@@QEAA@XZ
0x18001ACA8: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x1800218A0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x18000E900: "public: virtual long __cdecl CClassFactory::LockServer(int) __ptr64" ?LockServer@CClassFactory@@UEAAJH@Z
0x180006150: "public: long __cdecl CKnownGroups::Init(void) __ptr64" ?Init@CKnownGroups@@QEAAJXZ
0x180018C50: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x180018D70: "__cdecl _imp__lock" __imp__lock
0x180009E1C: atexit
0x1800127E4: CSGetAccountSIDByRID
0x180024298: "__cdecl _imp_NetUserGetInfo" __imp_NetUserGetInfo
0x1800112E4: "long __cdecl FreeAliasExtStructure(struct _ALIAS_EXTENDED_INFORMATION * __ptr64,int)" ?FreeAliasExtStructure@@YAJPEAU_ALIAS_EXTENDED_INFORMATION@@H@Z
0x180024158: "__cdecl _imp_LsaEnumerateLogonSessions" __imp_LsaEnumerateLogonSessions
0x180005C50: "bool __cdecl DontEnumerateForLogon(struct IPropertyStore * __ptr64)" ?DontEnumerateForLogon@@YA_NPEAUIPropertyStore@@@Z
0x180003420: "private: long __cdecl CLoggedOnPropStore::_CloneWTSInfo(struct _SHACCT_LOGON_INFO const * __ptr64,struct _SHACCT_LOGON_INFO * __ptr64 * __ptr64) __ptr64" ?_CloneWTSInfo@CLoggedOnPropStore@@AEAAJPEBU_SHACCT_LOGON_INFO@@PEAPEAU2@@Z
0x180009570: "private: static int __cdecl CDPA_Base<struct IPropertyStore,class CTContainer_PolicyUnOwned<struct IPropertyStore> >::_StandardDestroyCB(struct IPropertyStore * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@UIPropertyStore@@V?$CTContainer_PolicyUnOwned@UIPropertyStore@@@@@@CAHPEAUIPropertyStore@@PEAX@Z
0x180018C88: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180024268: "__cdecl _imp_WTSEnumerateSessionsW" __imp_WTSEnumerateSessionsW
0x180015150: "public: virtual long __cdecl CEnumProfileAccounts::Next(unsigned long,struct IPropertyStore * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Next@CEnumProfileAccounts@@UEAAJKPEAPEAUIPropertyStore@@PEAK@Z
0x180024150: "__cdecl _imp_LsaGetLogonSessionData" __imp_LsaGetLogonSessionData
0x180018BF8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180009540: "public: virtual long __cdecl CEnumProfileAccounts::Reset(void) __ptr64" ?Reset@CEnumProfileAccounts@@UEAAJXZ
0x180018AE8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180018B70: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180018A20: "__cdecl _imp_DPA_DestroyCallback" __imp_DPA_DestroyCallback
0x180011B40: "public: virtual long __cdecl CEnumLocalAccounts::Next(unsigned long,struct IPropertyStore * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Next@CEnumLocalAccounts@@UEAAJKPEAPEAUIPropertyStore@@PEAK@Z
0x18000AD90: "[thunk]:public: virtual long __cdecl CSamPropStore::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CSamPropStore@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180005A20: "public: long __cdecl CProfilePropStore::Init(void * __ptr64) __ptr64" ?Init@CProfilePropStore@@QEAAJPEAX@Z
0x180018BA0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000A01F: "__cdecl _dllonexit" __dllonexit
0x18000A843: "__cdecl _imp_load_SamGetMembersInAlias" __imp_load_SamGetMembersInAlias
0x180009540: "public: virtual long __cdecl CEnumLogonAccounts::Reset(void) __ptr64" ?Reset@CEnumLogonAccounts@@UEAAJXZ
0x180021970: "class CAccountFilter g_accountFilter" ?g_accountFilter@@3VCAccountFilter@@A
0x180002A20: "private: int __cdecl CLoggedOnPropStore::_ContainsPropKey(struct _tagpropertykey const & __ptr64) __ptr64" ?_ContainsPropKey@CLoggedOnPropStore@@AEAAHAEBU_tagpropertykey@@@Z
0x18000A80D: "__cdecl _imp_load_SamLookupNamesInDomain" __imp_load_SamLookupNamesInDomain
0x180019240: "Software\Microsoft\Windows NT\Cu" ??_C@_1HC@HGGIFEHH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180021910: "__cdecl _native_startup_lock" __native_startup_lock
0x180024250: dsreg_NULL_THUNK_DATA_DLA
0x18000A81F: "__cdecl _imp_load_SamOpenAlias" __imp_load_SamOpenAlias
0x18000AC34: DllMain
0x18001B154: "" ??_C@_13BLAPAIAM@?$AA?$AI?$AA?$AA@
0x18000A680: "__cdecl _tailMerge_samlib_dll" __tailMerge_samlib_dll
0x1800146C0: "public: virtual long __cdecl CLoggedOnPropStore::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CLoggedOnPropStore@@UEAAJPEAK@Z
0x180009530: "public: virtual long __cdecl CProfileAccounts::FindByName(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByName@CProfileAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x18000ED50: "public: virtual long __cdecl CUserAccounts::FindByRID(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByRID@CUserAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x180010820: "long __cdecl CopyAliasStructure(struct _ALIAS_GENERAL_INFORMATION * __ptr64 const,struct _ALIAS_GENERAL_INFORMATION * __ptr64)" ?CopyAliasStructure@@YAJQEAU_ALIAS_GENERAL_INFORMATION@@PEAU1@@Z
0x1800094E0: "public: virtual unsigned long __cdecl CProfilePropStore::AddRef(void) __ptr64" ?AddRef@CProfilePropStore@@UEAAKXZ
0x180024188: SspiCli_NULL_THUNK_DATA_DLA
0x18001E838: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180018D00: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x180018D78: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000A916: "__cdecl _imp_load_SamCreateUserInDomain" __imp_load_SamCreateUserInDomain
0x180015CE0: "public: virtual long __cdecl CSamPropStore::GetAt(unsigned long,struct _tagpropertykey * __ptr64) __ptr64" ?GetAt@CSamPropStore@@UEAAJKPEAU_tagpropertykey@@@Z
0x18001A400: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800219B4: "long g_cRefCount" ?g_cRefCount@@3JA
0x180018C08: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000A759: "__cdecl _imp_load_SamConnect" __imp_load_SamConnect
0x180018B80: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180014190: "public: virtual long __cdecl CEnumLogonAccounts::Clone(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?Clone@CEnumLogonAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x18000A5BF: "__cdecl _tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll" __tailMerge_api_ms_win_security_lsapolicy_l1_1_0_dll
0x180014AF4: "long __cdecl _CreatePWSTRFromUSTRAlloc(struct _UNICODE_STRING const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?_CreatePWSTRFromUSTRAlloc@@YAJPEBU_UNICODE_STRING@@PEAPEAG@Z
0x18001E734: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x18000EF20: "public: virtual long __cdecl CUserPropertyStore::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CUserPropertyStore@@UEAAJPEAK@Z
0x1800084F0: "private: long __cdecl CConnectedAccounts::_Init(void) __ptr64" ?_Init@CConnectedAccounts@@AEAAJXZ
0x1800039D0: "public: virtual long __cdecl CLocalAccounts::FindByRID(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByRID@CLocalAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x180019200: "Guid" ??_C@_19BPBMCKGC@?$AAG?$AAu?$AAi?$AAd?$AA?$AA@
0x180018AE0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800095E0: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x1800176F8: SHParseUserName
0x180024238: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x180018CF8: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18000FB90: "protected: virtual void * __ptr64 __cdecl CEnumLocalAccounts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEnumLocalAccounts@@MEAAPEAXI@Z
0x180020040: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000AC7C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18001B208: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x18000A6FF: "__cdecl _imp_load_SamRegisterObjectChangeNotification" __imp_load_SamRegisterObjectChangeNotification
0x180018C28: "__cdecl _imp_StrChrW" __imp_StrChrW
0x18001AB80: PKEY_SAM_SecurityID
0x18001A4C0: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x180018E00: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18000A41F: "__cdecl _imp_load_CoGetMalloc" __imp_load_CoGetMalloc
0x1800192B8: "CloudAP" ??_C@_07MGOOMLMO@CloudAP?$AA@
0x180009250: "public: virtual long __cdecl CClassFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CClassFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180003C20: "protected: virtual long __cdecl CLocalUsers::_GetPropertyStore(void * __ptr64,unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?_GetPropertyStore@CLocalUsers@@MEAAJPEAXPEBGPEAPEAUIPropertyStore@@@Z
0x180016FA4: "private: long __cdecl CSamPropStore::_PopulateAccountRights(void) __ptr64" ?_PopulateAccountRights@CSamPropStore@@AEAAJXZ
0x18001AF78: "__cdecl GUID_e318ad57_0aa0_450f_aca5_6fab7103d917" _GUID_e318ad57_0aa0_450f_aca5_6fab7103d917
0x180015D70: ?SetPropertyStorage@CSamPropStore@@UEAAJPEFBUtagSERIALIZEDPROPSTORAGE@@K@Z
0x180018D18: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180007420: "public: virtual long __cdecl CUserAccounts::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CUserAccounts@@UEAAJPEAK@Z
0x18001DC88: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x180020F50: ErrorMap
0x180015390: "public: virtual long __cdecl CConnectedAccounts::GetAt(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?GetAt@CConnectedAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x18001B148: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001B280: "Microsoft\User Account Pictures" ??_C@_1EA@MPLOLDGH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?5?$AAP?$AAi?$AAc?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x18001E468: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x1800241B8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x18001E8EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180018BB0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000F320: "public: virtual long __cdecl CEnumUserAccounts::Next(unsigned long,struct IPropertyStore * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Next@CEnumUserAccounts@@UEAAJKPEAPEAUIPropertyStore@@PEAK@Z
0x180018C60: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000A109: "__cdecl _imp_load_PSCreateMemoryPropertyStoreFromSerializedData" __imp_load_PSCreateMemoryPropertyStoreFromSerializedData
0x180015700: "public: virtual long __cdecl CSamPropStore::Commit(void) __ptr64" ?Commit@CSamPropStore@@UEAAJXZ
0x18000A95E: "__cdecl _imp_load_SamRemoveMemberFromAlias" __imp_load_SamRemoveMemberFromAlias
0x180002BE0: "public: virtual long __cdecl CLoggedOnPropStore::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLoggedOnPropStore@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009380: "public: virtual long __cdecl CEnumLogonAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CEnumLogonAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001E698: dsreg_NULL_THUNK_DATA_DLB
0x18001D9D0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsapolicy_l1_1_0_dll
0x18001B2CC: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180009C60: "__cdecl ValidateImageBase" _ValidateImageBase
0x180024208: "__cdecl _imp_LsaQueryInformationPolicy" __imp_LsaQueryInformationPolicy
0x18001E4D8: SspiCli_NULL_THUNK_DATA_DLB
0x180013D74: WPP_SF_ZD
0x18000A43D: "__cdecl _tailMerge_sspicli_dll" __tailMerge_sspicli_dll
0x1800095A0: "private: virtual enum _ACCOUNT_OBJECT_TYPE __cdecl CLocalGroups::_GetAccountType(void) __ptr64" ?_GetAccountType@CLocalGroups@@EEAA?AW4_ACCOUNT_OBJECT_TYPE@@XZ
0x18000ABE4: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180009100: "long __cdecl CLoggedOnAccounts_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CLoggedOnAccounts_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x180008330: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18001DA90: "__cdecl _DELAY_IMPORT_DESCRIPTOR_dsreg_dll" __DELAY_IMPORT_DESCRIPTOR_dsreg_dll
0x180011E90: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x180002D10: "public: virtual unsigned long __cdecl CLoggedOnPropStore::Release(void) __ptr64" ?Release@CLoggedOnPropStore@@UEAAKXZ
0x1800240F0: "__cdecl _imp_SamConnect" __imp_SamConnect
0x180009530: "public: virtual long __cdecl CProfileAccounts::Create(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?Create@CProfileAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x18000A0E5: "__cdecl _imp_load_PropVariantToUInt32WithDefault" __imp_load_PropVariantToUInt32WithDefault
0x18001E75C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180013CF8: WPP_SF_Z
0x18001014C: "long __cdecl CSSetAccountRights(void * __ptr64,unsigned long)" ?CSSetAccountRights@@YAJPEAXK@Z
0x180008DB0: "public: virtual unsigned long __cdecl CConnectedAccounts::Release(void) __ptr64" ?Release@CConnectedAccounts@@UEAAKXZ
0x18001B110: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1800175F0: IPropertyStore_GetUInt32
0x18000AB65: "__cdecl _tailMerge_dsreg_dll" __tailMerge_dsreg_dll
0x180013988: WPP_SF_
0x180008A80: "int __cdecl _DPACompareSids(struct _SID * __ptr64,struct _SID * __ptr64,__int64)" ?_DPACompareSids@@YAHPEAU_SID@@0_J@Z
0x180018B38: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000F4C0: "public: virtual long __cdecl CUserAccounts::Reset(void) __ptr64" ?Reset@CUserAccounts@@UEAAJXZ
0x180018D28: "__cdecl _imp_EqualDomainSid" __imp_EqualDomainSid
0x1800121C0: "private: virtual long __cdecl CLocalGroups::_GetPropertyStore(void * __ptr64,unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?_GetPropertyStore@CLocalGroups@@EEAAJPEAXPEBGPEAPEAUIPropertyStore@@@Z
0x180018C40: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x18000A2D3: "__cdecl _imp_load_CoTaskMemAlloc" __imp_load_CoTaskMemAlloc
0x18001DAB0: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180024018: "__cdecl _imp_InitPropVariantFromBuffer" __imp_InitPropVariantFromBuffer
0x1800036E0: CSGetUserRIDEnumeration
0x1800240C8: "__cdecl _imp_SamCreateAliasInDomain" __imp_SamCreateAliasInDomain
0x18000A187: "__cdecl _imp_load_PropVariantToUInt32" __imp_load_PropVariantToUInt32
0x180018C58: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180018D20: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x180007F20: "public: virtual unsigned long __cdecl CClassFactory::Release(void) __ptr64" ?Release@CClassFactory@@UEAAKXZ
0x1800098B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180018A00: "__cdecl _imp_DPA_DeleteAllPtrs" __imp_DPA_DeleteAllPtrs
0x180018DD0: "__cdecl _imp__initterm" __imp__initterm
0x180018A98: "__cdecl _imp_SHCreateThread" __imp_SHCreateThread
0x18000A63E: "__cdecl _imp_load_LsaQueryInformationPolicy" __imp_load_LsaQueryInformationPolicy
0x180018870: "const CClassFactory::`vftable'" ??_7CClassFactory@@6B@
0x180009270: DPA_Destroy
0x1800240B0: "__cdecl _imp_SamDeleteUser" __imp_SamDeleteUser
0x180024050: "__cdecl _imp_PropVariantToString" __imp_PropVariantToString
0x180017DE4: "long __cdecl CCv6s_HeapFree(void * __ptr64,void * __ptr64)" ?CCv6s_HeapFree@@YAJPEAX0@Z
0x180021930: "enum TRIBIT `bool __cdecl IsDomainMemberMode(void)'::`2'::s_tbDomainMemberMode" ?s_tbDomainMemberMode@?1??IsDomainMemberMode@@YA_NXZ@4W4TRIBIT@@A
0x180024278: "__cdecl _imp_SHChangeNotify" __imp_SHChangeNotify
0x18001E8D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000A4CE: "__cdecl _imp_load_LsaGetLogonSessionData" __imp_load_LsaGetLogonSessionData
0x1800155C0: "public: virtual long __cdecl CEnumConnectedAccounts::Next(unsigned long,struct IPropertyStore * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Next@CEnumConnectedAccounts@@UEAAJKPEAPEAUIPropertyStore@@PEAK@Z
0x1800218B0: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x180004010: "long __cdecl FreeUserStructure(struct _USER_ALL_INFORMATION * __ptr64,int)" ?FreeUserStructure@@YAJPEAU_USER_ALL_INFORMATION@@H@Z
0x18000A7D7: "__cdecl _imp_load_SamLookupNamesInDomain2" __imp_load_SamLookupNamesInDomain2
0x180018AA0: "__cdecl _imp_SHEnumKeyExW" __imp_SHEnumKeyExW
0x18001AB50: PKEY_SAM_ResidualID
0x18001A7D8: PKEY_LOGON_WinStationName
0x180009050: "public: virtual unsigned long __cdecl CLocalAccounts::Release(void) __ptr64" ?Release@CLocalAccounts@@UEAAKXZ
0x18001E84C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800032B0: "long __cdecl StringCchCopyNExW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long)" ?StringCchCopyNExW@@YAJPEAG_KPEBG1PEAPEAGPEA_KK@Z
0x18000AD40: "[thunk]:public: virtual unsigned long __cdecl CUserAccounts::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CUserAccounts@@W7EAAKXZ
0x18001167C: "long __cdecl LookupSids(unsigned long,void * __ptr64 * __ptr64,struct _SID_INFO * __ptr64 * __ptr64)" ?LookupSids@@YAJKPEAPEAXPEAPEAU_SID_INFO@@@Z
0x1800106F4: "int __cdecl ContainsSID(void * __ptr64 * __ptr64,unsigned long,void * __ptr64)" ?ContainsSID@@YAHPEAPEAXKPEAX@Z
0x1800218F0: "__cdecl _hmod__ext_ms_win_shell_shell32_l1_2_0_dll" __hmod__ext_ms_win_shell_shell32_l1_2_0_dll
0x18000F3F0: "public: virtual long __cdecl CUserPropertyStore::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUserPropertyStore@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000EFB0: "public: virtual long __cdecl CUserAccounts::GetEnumerator(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?GetEnumerator@CUserAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x180021900: "__cdecl _onexitend" __onexitend
0x180017A54: "long __cdecl SHAcctGetUserPicturePath(unsigned short * __ptr64,unsigned long)" ?SHAcctGetUserPicturePath@@YAJPEAGK@Z
0x18000A013: "__cdecl unlock" _unlock
0x18001AAF0: PKEY_SAM_PasswordLastSet
0x180008470: "public: virtual long __cdecl CConnectedAccounts::FindByRID(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByRID@CConnectedAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x18001AB08: PKEY_SAM_PasswordMustChange
0x180018E20: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18001ABC8: PKEY_SAM_Type
0x1800241F8: "__cdecl _imp_LsaLookupNames2" __imp_LsaLookupNames2
0x180018408: "const CConnectedAccounts::`vftable'" ??_7CConnectedAccounts@@6B@
0x180018A80: "__cdecl _imp_GUIDFromStringW" __imp_GUIDFromStringW
0x180002E30: "public: long __cdecl CLoggedOnPropStore::Init(struct _SHACCT_LOGON_INFO const * __ptr64,void * __ptr64) __ptr64" ?Init@CLoggedOnPropStore@@QEAAJPEBU_SHACCT_LOGON_INFO@@PEAX@Z
0x180018A28: g_pfn_DPA_InsertPtr
0x18001B158: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x180018B98: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000A38E: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x18001D9B0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll" __DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll
0x180007CA0: DPA_InsertPtr
0x1800180E0: "const CLoggedOnPropStore::`vftable'{for `IPersistSerializedPropStorage'}" ??_7CLoggedOnPropStore@@6BIPersistSerializedPropStorage@@@
0x180018A88: "__cdecl _imp_SHStrDupW" __imp_SHStrDupW
0x18001475C: "long __cdecl InitPropVariantFromString(unsigned short const * __ptr64,struct tagPROPVARIANT * __ptr64)" ?InitPropVariantFromString@@YAJPEBGPEAUtagPROPVARIANT@@@Z
0x180018DF8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000A2E5: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x1800067B0: "long __cdecl _GetPropertyStoreForUserSid(void * __ptr64,struct IComputerAccounts * __ptr64 * __ptr64,unsigned long,int,struct IPropertyStore * __ptr64 * __ptr64)" ?_GetPropertyStoreForUserSid@@YAJPEAXPEAPEAUIComputerAccounts@@KHPEAPEAUIPropertyStore@@@Z
0x1800241E8: "__cdecl _imp_LsaLookupSids" __imp_LsaLookupSids
0x180024090: "__cdecl _imp_SamRidToSid" __imp_SamRidToSid
0x180018CD0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180018E98: "__cdecl _xi_a" __xi_a
0x18001AA00: PKEY_SAM_HomeDirectoryDrive
0x180018CB8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180018AC0: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x18001769C: IPropertyStore_SetSecurityID
0x1800181E0: "const CUserAccounts::`vftable'{for `IComputerAccounts'}" ??_7CUserAccounts@@6BIComputerAccounts@@@
0x18000A674: "__cdecl _imp_load_SamFreeMemory" __imp_load_SamFreeMemory
0x18001AF28: "SeInteractiveLogonRight" ??_C@_1DA@HODMOLDJ@?$AAS?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x18001A910: PKEY_SAM_DenyNetworkLogin
0x180018D80: "__cdecl _imp__unlock" __imp__unlock
0x180024270: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLA
0x18001A350: "__cdecl GUID_50c852b0_c95f_4fee_be00_87dc18b2661b" _GUID_50c852b0_c95f_4fee_be00_87dc18b2661b
0x18001E668: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLB
0x18001DD40: ext-ms-win-session-wtsapi32-l1-1-0_NULL_THUNK_DATA_DLN
0x18000E99C: "void __cdecl SafeRelease<struct IPropertyStore>(struct IPropertyStore * __ptr64 * __ptr64)" ??$SafeRelease@UIPropertyStore@@@@YAXPEAPEAUIPropertyStore@@@Z
0x18000F0B0: "public: virtual long __cdecl CLoggedOnPropStore::GetPropertyStorage(struct tagSERIALIZEDPROPSTORAGE * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetPropertyStorage@CLoggedOnPropStore@@UEAAJPEAPEAUtagSERIALIZEDPROPSTORAGE@@PEAK@Z
0x1800218F8: "__cdecl _hmod__dsreg_dll" __hmod__dsreg_dll
0x18000FB24: "protected: virtual __cdecl CLocalAccounts::~CLocalAccounts(void) __ptr64" ??1CLocalAccounts@@MEAA@XZ
0x180014B84: "void __cdecl _FreeUnicodeString(struct _UNICODE_STRING * __ptr64)" ?_FreeUnicodeString@@YAXPEAU_UNICODE_STRING@@@Z
0x18001A668: CLSID_LocalGroups
0x1800121E8: "protected: long __cdecl CEnumLocalAccounts::_Init(class CLocalAccounts * __ptr64,unsigned long,struct _SAM_RID_ENUMERATION * __ptr64,unsigned long,struct _SAM_RID_ENUMERATION * __ptr64) __ptr64" ?_Init@CEnumLocalAccounts@@IEAAJPEAVCLocalAccounts@@KPEAU_SAM_RID_ENUMERATION@@K1@Z
0x180018D40: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800094E0: "public: virtual unsigned long __cdecl CEnumLocalAccounts::AddRef(void) __ptr64" ?AddRef@CEnumLocalAccounts@@UEAAKXZ
0x18001B160: "NoConnectedUser" ??_C@_1CA@BCMIDMDP@?$AAN?$AAo?$AAC?$AAo?$AAn?$AAn?$AAe?$AAc?$AAt?$AAe?$AAd?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x1800092A0: "int __cdecl DPA_ReleaseCB<struct IPropertyStore>(struct IPropertyStore * __ptr64,void * __ptr64)" ??$DPA_ReleaseCB@UIPropertyStore@@@@YAHPEAUIPropertyStore@@PEAX@Z
0x180024190: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180009520: "public: virtual long __cdecl CUserAccounts::Unadvise(unsigned long) __ptr64" ?Unadvise@CUserAccounts@@UEAAJK@Z
0x180009590: "public: virtual long __cdecl CEnumLocalAccounts::Skip(unsigned long) __ptr64" ?Skip@CEnumLocalAccounts@@UEAAJK@Z
0x180024288: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180014020: WPP_SF_dD
0x18000F964: WPP_SF_dd
0x1800094E0: "public: virtual unsigned long __cdecl CProfileAccounts::AddRef(void) __ptr64" ?AddRef@CProfileAccounts@@UEAAKXZ
0x180024140: "__cdecl _imp_SamFreeMemory" __imp_SamFreeMemory
0x180008700: "public: virtual long __cdecl CProfilePropStore::GetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64) __ptr64" ?GetValue@CProfilePropStore@@UEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@@Z
0x180009520: "public: virtual long __cdecl CProfileAccounts::Unadvise(unsigned long) __ptr64" ?Unadvise@CProfileAccounts@@UEAAJK@Z
0x18000A0D3: "__cdecl _imp_load_InitPropVariantFromBuffer" __imp_load_InitPropVariantFromBuffer
0x18000AADA: "__cdecl _tailMerge_ext_ms_win_shell_shell32_l1_2_0_dll" __tailMerge_ext_ms_win_shell_shell32_l1_2_0_dll
0x180015200: "public: virtual unsigned long __cdecl CEnumProfileAccounts::Release(void) __ptr64" ?Release@CEnumProfileAccounts@@UEAAKXZ
0x180020038: WPP_GLOBAL_Control
0x18000F5C0: ?SetPropertyStorage@CUserPropertyStore@@UEAAJPEFBUtagSERIALIZEDPROPSTORAGE@@K@Z
0x180017580: IPropertyStore_GetString
0x18001DA50: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x18001A3F0: "__cdecl GUID_9ec044bc_b01d_4c18_8634_59bd3ff5dcc1" _GUID_9ec044bc_b01d_4c18_8634_59bd3ff5dcc1
0x18001ACC0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001E798: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180009550: "public: virtual void __cdecl CUserAccounts::SetEnumerationOption(int) __ptr64" ?SetEnumerationOption@CUserAccounts@@UEAAXH@Z
0x18000E920: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1800027F0: "private: static unsigned __int64 __cdecl CTCoAllocPolicy::_CoTaskMemSize(void * __ptr64)" ?_CoTaskMemSize@CTCoAllocPolicy@@CA_KPEAX@Z
0x1800139B4: WPP_SF_D
0x1800139B4: WPP_SF_d
0x180024118: "__cdecl _imp_SamUnregisterObjectChangeNotification" __imp_SamUnregisterObjectChangeNotification
0x180021928: "__cdecl pRawDllMain" _pRawDllMain
0x180018898: "const CEnumUserAccounts::`vftable'" ??_7CEnumUserAccounts@@6B@
0x180024108: "__cdecl _imp_SamEnumerateUsersInDomain" __imp_SamEnumerateUsersInDomain
0x18001A5C0: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_0_dll" __sz_api_ms_win_security_lsalookup_l1_1_0_dll
0x18001A590: "__cdecl _sz_api_ms_win_security_lsalookup_l1_1_2_dll" __sz_api_ms_win_security_lsalookup_l1_1_2_dll
0x180006330: "private: long __cdecl CProfileAccounts::_Init(void) __ptr64" ?_Init@CProfileAccounts@@AEAAJXZ
0x1800242A0: "__cdecl _imp_NetUserGetLocalGroups" __imp_NetUserGetLocalGroups
0x18000ECD0: "public: virtual long __cdecl CUserAccounts::FindByName(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByName@CUserAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x18000A40D: "__cdecl _imp_load_NetUserGetLocalGroups" __imp_load_NetUserGetLocalGroups
0x180018D50: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180024000: "__cdecl _imp_VariantClear" __imp_VariantClear
0x18001A880: PKEY_SAM_CodePage
0x18001B1F8: "__cdecl GUID_f0009734_e8de_48e5_b603_bfa5966a8f7c" _GUID_f0009734_e8de_48e5_b603_bfa5966a8f7c
0x180011DB8: "long __cdecl ResultFromKnownLastError(void)" ?ResultFromKnownLastError@@YAJXZ
0x180024228: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLA
0x180009620: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18001E528: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLB
0x18001DCF8: api-ms-win-security-lsapolicy-l1-1-0_NULL_THUNK_DATA_DLN
0x1800241D0: "__cdecl _imp_LsaLookupUserAccountType" __imp_LsaLookupUserAccountType
0x18000F0B0: "public: virtual long __cdecl CUserPropertyStore::GetPropertyStorage(struct tagSERIALIZEDPROPSTORAGE * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetPropertyStorage@CUserPropertyStore@@UEAAJPEAPEAUtagSERIALIZEDPROPSTORAGE@@PEAK@Z
0x18001526C: "public: int __cdecl CDPA_Base<struct IPropertyStore,class CTContainer_PolicyRelease<struct IPropertyStore> >::Destroy(void) __ptr64" ?Destroy@?$CDPA_Base@UIPropertyStore@@V?$CTContainer_PolicyRelease@UIPropertyStore@@@@@@QEAAHXZ
0x18001E748: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000A2C1: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x180018C78: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180024220: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x18001D970: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180009B50: "__cdecl _security_check_cookie" __security_check_cookie
0x18000A504: "__cdecl _imp_load_LsaCallAuthenticationPackage" __imp_load_LsaCallAuthenticationPackage
0x1800090E0: "public: virtual long __cdecl CLocalAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLocalAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180018E90: "__cdecl _xc_z" __xc_z
0x180011CFC: "unsigned long __cdecl RIDFromSID(void * __ptr64 const)" ?RIDFromSID@@YAKQEAX@Z
0x180009520: "public: virtual long __cdecl CUserAccounts::Delete(struct IPropertyStore * __ptr64) __ptr64" ?Delete@CUserAccounts@@UEAAJPEAUIPropertyStore@@@Z
0x180012040: "private: virtual long __cdecl CLocalGroups::_CreateEnumerator(class CEnumLocalAccounts * __ptr64 * __ptr64) __ptr64" ?_CreateEnumerator@CLocalGroups@@EEAAJPEAPEAVCEnumLocalAccounts@@@Z
0x180018150: "const CUserPropertyStore::`vftable'{for `IPersistSerializedPropStorage'}" ??_7CUserPropertyStore@@6BIPersistSerializedPropStorage@@@
0x18001E7FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180018BB8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001A940: PKEY_SAM_DenyServiceLogin
0x18000FB90: "public: virtual void * __ptr64 __cdecl CEnumLocalUsers::`vector deleting destructor'(unsigned int) __ptr64" ??_ECEnumLocalUsers@@UEAAPEAXI@Z
0x18000FBD0: "public: virtual void * __ptr64 __cdecl CLocalGroups::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLocalGroups@@UEAAPEAXI@Z
0x180018CA8: "__cdecl _imp_InitOnceExecuteOnce" __imp_InitOnceExecuteOnce
0x1800095C0: "public: virtual long __cdecl CEnumConnectedAccounts::Clone(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?Clone@CEnumConnectedAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x180015400: "public: virtual long __cdecl CConnectedAccounts::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CConnectedAccounts@@UEAAJPEAK@Z
0x180020F48: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x18000EE10: "public: virtual long __cdecl CUserPropertyStore::GetAt(unsigned long,struct _tagpropertykey * __ptr64) __ptr64" ?GetAt@CUserPropertyStore@@UEAAJKPEAU_tagpropertykey@@@Z
0x180024128: "__cdecl _imp_SamOpenAlias" __imp_SamOpenAlias
0x180017910: "long __cdecl SHAcctAccountName2DataFileName(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?SHAcctAccountName2DataFileName@@YAJPEBGPEAGK@Z
0x18000A382: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x180014850: ?SetPropertyStorage@CLoggedOnPropStore@@UEAAJPEFBUtagSERIALIZEDPROPSTORAGE@@K@Z
0x180009090: "public: virtual long __cdecl CClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CClassFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x1800240A0: "__cdecl _imp_SamLookupNamesInDomain" __imp_SamLookupNamesInDomain
0x18001B10D: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1800241A8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180018CC8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180009500: "public: virtual unsigned long __cdecl CUserAccounts::AddRef(void) __ptr64" ?AddRef@CUserAccounts@@UEAAKXZ
0x1800140FC: "long __cdecl _AllocStringWorker<class CTCoAllocPolicy>(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned __int64,unsigned __int64,unsigned short * __ptr64 * __ptr64)" ??$_AllocStringWorker@VCTCoAllocPolicy@@@@YAJPEAXKPEBG_K2PEAPEAG@Z
0x180018B28: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x1800240E0: "__cdecl _imp_SamLookupNamesInDomain2" __imp_SamLookupNamesInDomain2
0x180009520: "public: virtual long __cdecl CConnectedAccounts::Delete(struct IPropertyStore * __ptr64) __ptr64" ?Delete@CConnectedAccounts@@UEAAJPEAUIPropertyStore@@@Z
0x180008240: "private: long __cdecl CLoggedOnAccounts::_CopySessionInfoAlloc(class CDPA<struct _WTS_SESSION_INFOW,class CTContainer_PolicyUnOwned<struct _WTS_SESSION_INFOW> > * __ptr64,struct _SHACCT_LOGON_INFO * __ptr64 * __ptr64) __ptr64" ?_CopySessionInfoAlloc@CLoggedOnAccounts@@AEAAJPEAV?$CDPA@U_WTS_SESSION_INFOW@@V?$CTContainer_PolicyUnOwned@U_WTS_SESSION_INFOW@@@@@@PEAPEAU_SHACCT_LOGON_INFO@@@Z
0x180018B58: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180007470: "private: long __cdecl CAccountFilter::_IterateAccounts(unsigned short const * __ptr64,unsigned long) __ptr64" ?_IterateAccounts@CAccountFilter@@AEAAJPEBGK@Z
0x1800218B8: "__cdecl _hmod__SspiCli_dll" __hmod__SspiCli_dll
0x180018AB0: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180009540: "public: virtual long __cdecl CEnumConnectedAccounts::Reset(void) __ptr64" ?Reset@CEnumConnectedAccounts@@UEAAJXZ
0x180018B40: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800035C0: "public: virtual long __cdecl CProfileAccounts::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CProfileAccounts@@UEAAJPEAK@Z
0x1800240C0: "__cdecl _imp_SamSetInformationAlias" __imp_SamSetInformationAlias
0x18000A970: "__cdecl _imp_load_SamDeleteUser" __imp_load_SamDeleteUser
0x1800241C0: "__cdecl _imp_LookupAccountSidLocalW" __imp_LookupAccountSidLocalW
0x18000F3D0: "public: virtual long __cdecl CEnumUserAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CEnumUserAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000A036: "__cdecl _imp_load_PropVariantToBoolean" __imp_load_PropVariantToBoolean
0x18001ACB0: WPP_fe670fae509c3ad053a17f8faae633a7_Traceguids
0x1800092C8: TraceLoggingRegisterEx
0x1800090E0: "public: virtual long __cdecl CConnectedAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CConnectedAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001B128: POLID_DontEnumerateConnectedUsers
0x18001A340: CLSID_ProfileNotificationHandler
0x18000E9C8: "int __cdecl operator==(struct _tagpropertykey const & __ptr64,struct _tagpropertykey const & __ptr64)" ??8@YAHAEBU_tagpropertykey@@0@Z
0x180009360: "public: virtual long __cdecl CLoggedOnAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLoggedOnAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180009530: "public: virtual long __cdecl CUserAccounts::Create(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?Create@CUserAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180018C18: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180016D0C: "private: long __cdecl CSamPropStore::_FindSamPropKey(struct _tagpropertykey const & __ptr64,struct _PROPMAP * __ptr64 * __ptr64) __ptr64" ?_FindSamPropKey@CSamPropStore@@AEAAJAEBU_tagpropertykey@@PEAPEAU_PROPMAP@@@Z
0x18000A904: "__cdecl _imp_load_SamAddMemberToAlias" __imp_load_SamAddMemberToAlias
0x18001A5F0: "__cdecl _sz_ext_ms_win_session_wtsapi32_l1_1_0_dll" __sz_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x18000A735: "__cdecl _imp_load_SamCloseHandle" __imp_load_SamCloseHandle
0x180012100: "protected: virtual long __cdecl CLocalUsers::_CreateEnumerator(class CEnumLocalAccounts * __ptr64 * __ptr64) __ptr64" ?_CreateEnumerator@CLocalUsers@@MEAAJPEAPEAVCEnumLocalAccounts@@@Z
0x1800092A0: "private: static int __cdecl CSamPropStore::_DPADestroyGroupMembers(void * __ptr64,void * __ptr64)" ?_DPADestroyGroupMembers@CSamPropStore@@CAHPEAX0@Z
0x180024120: "__cdecl _imp_SamLookupIdsInDomain" __imp_SamLookupIdsInDomain
0x18001E7C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18001254C: CSDeleteAccount
0x180017504: IPropertyStore_GetBool
0x180018BC8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800241F0: "__cdecl _imp_LsaClose" __imp_LsaClose
0x180018EB0: "__cdecl _guard_fids_table" __guard_fids_table
0x180009520: "public: virtual long __cdecl CLoggedOnAccounts::Advise(struct IComputerAccountNotify * __ptr64,unsigned long * __ptr64) __ptr64" ?Advise@CLoggedOnAccounts@@UEAAJPEAUIComputerAccountNotify@@PEAK@Z
0x18001E720: "__cdecl _IMPORT_DESCRIPTOR_SHCORE" __IMPORT_DESCRIPTOR_SHCORE
0x18001DD20: dsreg_NULL_THUNK_DATA_DLN
0x180024048: "__cdecl _imp_PropVariantToFileTime" __imp_PropVariantToFileTime
0x18000A175: "__cdecl _imp_load_PropVariantToStringAlloc" __imp_load_PropVariantToStringAlloc
0x180018D30: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x180012250: "private: virtual long __cdecl CLocalGroups::_Init(void) __ptr64" ?_Init@CLocalGroups@@EEAAJXZ
0x180018DE0: msvcrt_NULL_THUNK_DATA
0x18001569C: "public: __cdecl CSamPropStore::CSamPropStore(void) __ptr64" ??0CSamPropStore@@QEAA@XZ
0x1800186A0: "__cdecl load_config_used" _load_config_used
0x18000A4F2: "__cdecl _imp_load_LsaLookupAuthenticationPackage" __imp_load_LsaLookupAuthenticationPackage
0x18001A7F0: PKEY_PROFILE_GUID
0x180009520: "public: virtual long __cdecl CLoggedOnPropStore::Commit(void) __ptr64" ?Commit@CLoggedOnPropStore@@UEAAJXZ
0x1800038A0: "public: virtual long __cdecl CProfileAccounts::GetAt(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?GetAt@CProfileAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x18001AAD8: PKEY_SAM_PasswordIsEmpty
0x18001DC58: SspiCli_NULL_THUNK_DATA_DLN
0x18001ACC8: "__cdecl GUID_9d5f2149_de8c_45f2_b313_6587a04f771d" _GUID_9d5f2149_de8c_45f2_b313_6587a04f771d
0x18001A3C8: "OptionValue" ??_C@_1BI@CBOLNBDL@?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1800079B4: "long __cdecl LsaOpenLocalSystemPolicy(unsigned long,struct _SECURITY_QUALITY_OF_SERVICE * __ptr64,void * __ptr64 * __ptr64)" ?LsaOpenLocalSystemPolicy@@YAJKPEAU_SECURITY_QUALITY_OF_SERVICE@@PEAPEAX@Z
0x18001D930: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x1800218C8: "__cdecl _hmod__api_ms_win_security_lsapolicy_l1_1_0_dll" __hmod__api_ms_win_security_lsapolicy_l1_1_0_dll
0x1800189F8: "__cdecl _imp_DPA_Search" __imp_DPA_Search
0x180014BC4: "long __cdecl _GetPropertyStoreFromSessionInfo(struct _SHACCT_LOGON_INFO const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64)" ?_GetPropertyStoreFromSessionInfo@@YAJPEBU_SHACCT_LOGON_INFO@@PEAPEAUIPropertyStore@@@Z
0x18000F0B0: "public: virtual long __cdecl CSamPropStore::GetPropertyStorage(struct tagSERIALIZEDPROPSTORAGE * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetPropertyStorage@CSamPropStore@@UEAAJPEAPEAUtagSERIALIZEDPROPSTORAGE@@PEAK@Z
0x180018AC8: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180018AB8: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18001A9D0: PKEY_SAM_Groups
0x180002BE0: "public: virtual long __cdecl CSamPropStore::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CSamPropStore@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001AC28: PKEY_SAM_Version
0x1800240D0: "__cdecl _imp_SamSetInformationUser" __imp_SamSetInformationUser
0x18001A658: CLSID_LocalUserAccounts
0x18001D950: "__cdecl _DELAY_IMPORT_DESCRIPTOR_samcli_dll" __DELAY_IMPORT_DESCRIPTOR_samcli_dll
0x18001B2C0: ".dat" ??_C@_19DOLFOBJP@?$AA?4?$AAd?$AAa?$AAt?$AA?$AA@
0x18001AA60: PKEY_SAM_NetworkLogin
0x180009560: "public: virtual long __cdecl CEnumConnectedAccounts::Skip(unsigned long) __ptr64" ?Skip@CEnumConnectedAccounts@@UEAAJK@Z
0x1800090E0: "public: virtual long __cdecl CProfileAccounts::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CProfileAccounts@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180010EB0: "public: virtual long __cdecl CLocalAccounts::Delete(struct IPropertyStore * __ptr64) __ptr64" ?Delete@CLocalAccounts@@UEAAJPEAUIPropertyStore@@@Z
0x1800218D0: "__cdecl _hmod__SAMLIB_dll" __hmod__SAMLIB_dll
0x18001E874: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18001A988: PKEY_SAM_DontShowInLogonUI
0x180018920: "const CEnumLocalUsers::`vftable'" ??_7CEnumLocalUsers@@6B@
0x18000A042: "__cdecl _tailMerge_propsys_dll" __tailMerge_propsys_dll
0x1800100B0: "long __cdecl CLocalGroups_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CLocalGroups_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800092A0: "private: static int __cdecl CDPA_Base<struct IPropertyStore,class CTContainer_PolicyRelease<struct IPropertyStore> >::_StandardDestroyCB(struct IPropertyStore * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@UIPropertyStore@@V?$CTContainer_PolicyRelease@UIPropertyStore@@@@@@CAHPEAUIPropertyStore@@PEAX@Z
0x18000AD70: "[thunk]:public: virtual unsigned long __cdecl CUserAccounts::Release`adjustor{8}' (void) __ptr64" ?Release@CUserAccounts@@W7EAAKXZ
0x180018D88: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800034C0: "public: virtual long __cdecl CProfileAccounts::FindByRID(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByRID@CProfileAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x180009520: "public: virtual long __cdecl CLoggedOnPropStore::SetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT const & __ptr64) __ptr64" ?SetValue@CLoggedOnPropStore@@UEAAJAEBU_tagpropertykey@@AEBUtagPROPVARIANT@@@Z
0x18001AE48: "SeDenyNetworkLogonRight" ??_C@_1DA@JLBFLOOG@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180018490: "const CLoggedOnAccounts::`vftable'" ??_7CLoggedOnAccounts@@6B@
0x1800191F0: "__cdecl GUID_886d8eeb_8cf2_4446_8d02_cdba1dbdcf99" _GUID_886d8eeb_8cf2_4446_8d02_cdba1dbdcf99
0x180005DF0: "bool __cdecl IsUserAllowedLogon(struct IPropertyStore * __ptr64)" ?IsUserAllowedLogon@@YA_NPEAUIPropertyStore@@@Z
0x1800240F8: "__cdecl _imp_SamEnumerateAliasesInDomain" __imp_SamEnumerateAliasesInDomain
0x180018A08: "__cdecl _imp_DPA_Destroy" __imp_DPA_Destroy
0x180009450: "public: virtual long __cdecl CLocalAccounts::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CLocalAccounts@@UEAAJPEAK@Z
0x180018B78: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000A7E9: "__cdecl _imp_load_SamOpenUser" __imp_load_SamOpenUser
0x180010640: "public: virtual long __cdecl CEnumLocalAccounts::Clone(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?Clone@CEnumLocalAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x18001E89C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0
0x180024100: "__cdecl _imp_SamCloseHandle" __imp_SamCloseHandle
0x180002AC0: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18001DD78: samcli_NULL_THUNK_DATA_DLN
0x1800183D0: "const CEnumLogonAccounts::`vftable'" ??_7CEnumLogonAccounts@@6B@
0x18001E4A8: samcli_NULL_THUNK_DATA_DLB
0x1800242A8: samcli_NULL_THUNK_DATA_DLA
0x18000FB90: "public: virtual void * __ptr64 __cdecl CEnumLocalUsers::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEnumLocalUsers@@UEAAPEAXI@Z
0x1800185D0: "const CLocalGroups::`vftable'" ??_7CLocalGroups@@6B@
0x180015E80: "public: virtual long __cdecl CSamPropStore::SetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT const & __ptr64) __ptr64" ?SetValue@CSamPropStore@@UEAAJAEBU_tagpropertykey@@AEBUtagPROPVARIANT@@@Z
0x18001315C: CSUpdateOrCreateGroup
0x180018C10: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18001A700: PKEY_LOGON_AuthenticationPackage
0x18000F680: "public: virtual long __cdecl CUserPropertyStore::SetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT const & __ptr64) __ptr64" ?SetValue@CUserPropertyStore@@UEAAJAEBU_tagpropertykey@@AEBUtagPROPVARIANT@@@Z
0x180018BC0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000FBD0: "public: virtual void * __ptr64 __cdecl CLocalGroups::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLocalGroups@@UEAAPEAXI@Z
0x180018A10: g_pfn_DPA_Create
0x180018A18: "__cdecl _imp_DPA_EnumCallback" __imp_DPA_EnumCallback
0x18000A650: "__cdecl _imp_load_LsaFreeMemory" __imp_load_LsaFreeMemory
0x18001A510: "__cdecl _sz_samcli_dll" __sz_samcli_dll
0x18000AACE: "__cdecl _imp_load_SHChangeNotify" __imp_load_SHChangeNotify
0x1800240A8: "__cdecl _imp_SamQueryInformationUser" __imp_SamQueryInformationUser
0x180024200: "__cdecl _imp_LsaRemoveAccountRights" __imp_LsaRemoveAccountRights
0x180011A40: "private: virtual class CEnumLocalAccounts * __ptr64 __cdecl CEnumLocalGroups::NewSameType(void) __ptr64" ?NewSameType@CEnumLocalGroups@@EEAAPEAVCEnumLocalAccounts@@XZ
0x180007000: "public: virtual unsigned long __cdecl CUserAccounts::Release(void) __ptr64" ?Release@CUserAccounts@@UEAAKXZ
0x180014F90: "public: virtual long __cdecl CProfilePropStore::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CProfilePropStore@@UEAAJPEAK@Z
0x180024110: "__cdecl _imp_SamAddMemberToAlias" __imp_SamAddMemberToAlias
0x180014AD4: "long __cdecl _CopyUnicodeString(struct _UNICODE_STRING const * __ptr64,struct _UNICODE_STRING * __ptr64)" ?_CopyUnicodeString@@YAJPEBU_UNICODE_STRING@@PEAU1@@Z
0x180009B8C: free
0x180013C68: WPP_SF_SdD
0x180018C00: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000AC10: "__cdecl purecall" _purecall
0x180018BF0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800219C4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUslnvtilfkPhszxxgUlyquivUznwGEUkxsOlyq@homegroup_shacct_all" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUoryUslnvtilfkPhszxxgUlyquivUznwGEUkxsOlyq@homegroup_shacct_all
0x18001B2D0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x18001AB20: PKEY_SAM_ProfilePath
0x18000A242: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x18000AD80: "[thunk]:public: virtual unsigned long __cdecl CUserPropertyStore::Release`adjustor{8}' (void) __ptr64" ?Release@CUserPropertyStore@@W7EAAKXZ
0x180014FB0: "public: virtual long __cdecl CProfileAccounts::GetEnumerator(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?GetEnumerator@CProfileAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x18001723C: WPP_SF_SddD
0x18001AB98: PKEY_SAM_ServiceLogin
0x180009E40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180018B88: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1800094E0: "public: virtual unsigned long __cdecl CEnumConnectedAccounts::AddRef(void) __ptr64" ?AddRef@CEnumConnectedAccounts@@UEAAKXZ
0x18001B118: POLID_EnumerateLocalUsers
0x180009580: "public: virtual long __cdecl CEnumLocalAccounts::Reset(void) __ptr64" ?Reset@CEnumLocalAccounts@@UEAAJXZ
0x18000EC50: "public: virtual long __cdecl CUserPropertyStore::Commit(void) __ptr64" ?Commit@CUserPropertyStore@@UEAAJXZ
0x180024020: "__cdecl _imp_PropVariantToUInt32WithDefault" __imp_PropVariantToUInt32WithDefault
0x18000A1A5: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x18000AA2B: "__cdecl _tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll" __tailMerge_ext_ms_win_session_wtsapi32_l1_1_0_dll
0x1800083B0: DPA_DestroyCallback
0x180009520: "public: virtual long __cdecl CProfileAccounts::Advise(struct IComputerAccountNotify * __ptr64,unsigned long * __ptr64) __ptr64" ?Advise@CProfileAccounts@@UEAAJPEAUIComputerAccountNotify@@PEAK@Z
0x180004F80: CSGetUserAccountInfo
0x18001A7A8: PKEY_LOGON_TSSession
0x180011618: "long __cdecl LookupName(unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?LookupName@@YAJPEBGPEAPEAX@Z
0x1800071B0: "private: __cdecl CUserAccounts::~CUserAccounts(void) __ptr64" ??1CUserAccounts@@AEAA@XZ
0x18001A6A8: CLSID_UserAccounts
0x18000A723: "__cdecl _imp_load_SamEnumerateUsersInDomain" __imp_load_SamEnumerateUsersInDomain
0x18001A8B0: PKEY_SAM_DateAccountExpires
0x180011D30: "public: virtual unsigned long __cdecl CEnumLocalAccounts::Release(void) __ptr64" ?Release@CEnumLocalAccounts@@UEAAKXZ
0x180011AC0: "private: virtual class CEnumLocalAccounts * __ptr64 __cdecl CEnumLocalUsers::NewSameType(void) __ptr64" ?NewSameType@CEnumLocalUsers@@EEAAPEAVCEnumLocalAccounts@@XZ
0x18000A431: "__cdecl _imp_load_LsaFreeReturnBuffer" __imp_load_LsaFreeReturnBuffer
0x18000A831: "__cdecl _imp_load_SamQueryInformationAlias" __imp_load_SamQueryInformationAlias
0x18000AA1F: "__cdecl _imp_load_WTSQuerySessionInformationW" __imp_load_WTSQuerySessionInformationW
0x18000A11B: "__cdecl _imp_load_PropVariantCompareEx" __imp_load_PropVariantCompareEx
0x18001E824: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x1800093A0: "public: virtual long __cdecl CProfilePropStore::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CProfilePropStore@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000F720: "long __cdecl _CreateReadOnlyPropStoreForSid(void * __ptr64,struct IPropertyStore * __ptr64 * __ptr64)" ?_CreateReadOnlyPropStoreForSid@@YAJPEAXPEAPEAUIPropertyStore@@@Z
0x180014680: "public: virtual long __cdecl CLoggedOnAccounts::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CLoggedOnAccounts@@UEAAJPEAK@Z
0x1800241E0: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x180011470: "public: virtual long __cdecl CLocalAccounts::GetEnumerator(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?GetEnumerator@CLocalAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x1800219C8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUhvxfgroUlyquivUznwGEUkxsOlyq@secutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUoryUhvxfgroUlyquivUznwGEUkxsOlyq@secutil
0x180009430: "int __cdecl DPA_LocalFreeCB<struct _SID>(struct _SID * __ptr64,void * __ptr64)" ??$DPA_LocalFreeCB@U_SID@@@@YAHPEAU_SID@@PEAX@Z
0x1800066BC: "private: bool __cdecl CKnownGroups::_IsGroupInGroupList(unsigned short const * __ptr64,struct _LOCALGROUP_USERS_INFO_0 * __ptr64,unsigned long)const __ptr64" ?_IsGroupInGroupList@CKnownGroups@@AEBA_NPEBGPEAU_LOCALGROUP_USERS_INFO_0@@K@Z
0x1800241A0: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x18001B218: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x18000AC1C: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x180002B40: IPropertyStore_GetSecurityIDString
0x180013554: CSUpdateOrCreateUser
0x18001D990: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SspiCli_dll" __DELAY_IMPORT_DESCRIPTOR_SspiCli_dll
0x180011348: "long __cdecl FreeAliasStructure(struct _ALIAS_GENERAL_INFORMATION * __ptr64,int)" ?FreeAliasStructure@@YAJPEAU_ALIAS_GENERAL_INFORMATION@@H@Z
0x180017E60: DPA_EnumCallback
0x18001A360: "System\CurrentControlSet\Control" ??_C@_1GC@OPEDJIOF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180018D90: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000A77D: "__cdecl _imp_load_LsaLookupNames2" __imp_load_LsaLookupNames2
0x180015230: "public: virtual long __cdecl CProfileAccounts::Reset(void) __ptr64" ?Reset@CProfileAccounts@@UEAAJXZ
0x18001A928: PKEY_SAM_DenyRemoteInteractiveLogin
0x180018E18: ntdll_NULL_THUNK_DATA
0x180018D68: "__cdecl _imp_memcpy" __imp_memcpy
0x18000A9A0: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_0_dll
0x180017420: WPP_SF_ddd
0x180014068: WPP_SF_ddD
0x18001A778: PKEY_LOGON_LUID
0x18000A4BC: "__cdecl _imp_load_LsaEnumerateLogonSessions" __imp_load_LsaEnumerateLogonSessions
0x1800139F0: WPP_SF_DZD
0x18001DA10: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_2_dll
0x180018B68: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180014E60: "public: virtual long __cdecl CEnumProfileAccounts::Clone(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?Clone@CEnumProfileAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x180018D10: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x18001E810: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180018DC0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180020048: "__cdecl _security_cookie" __security_cookie
0x180016E08: "private: long __cdecl CSamPropStore::_HasValueChanged(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64) __ptr64" ?_HasValueChanged@CSamPropStore@@AEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@@Z
0x180003790: "long __cdecl SamHandleForDomain(void * __ptr64,unsigned long,unsigned long,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?SamHandleForDomain@@YAJPEAXKKPEAPEAX1@Z
0x180010A20: "public: virtual long __cdecl CLocalAccounts::Create(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?Create@CLocalAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180018A20: g_pfn_DPA_DestroyCallback
0x18001AA18: PKEY_SAM_InteractiveLogin
0x18001A6D0: PKEY_Identity_PrimarySid
0x180017AF0: SHGetPictureFromDataFileForUser
0x180018C70: "__cdecl _imp_ResetEvent" __imp_ResetEvent
0x180024038: "__cdecl _imp_PropVariantCompareEx" __imp_PropVariantCompareEx
0x180018B18: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800152B0: "public: virtual long __cdecl CConnectedAccounts::FindByName(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByName@CConnectedAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180024258: "__cdecl _imp_WTSFreeMemory" __imp_WTSFreeMemory
0x180017480: "private: int __cdecl CAccountFilter::_Compare(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?_Compare@CAccountFilter@@AEAAHPEBG0KK@Z
0x180013F68: WPP_SF__sid_D
0x180018B50: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180024160: "__cdecl _imp_LsaCallAuthenticationPackage" __imp_LsaCallAuthenticationPackage
0x1800180A0: "const CProfilePropStore::`vftable'" ??_7CProfilePropStore@@6B@
0x180018D38: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x18000AD40: "[thunk]:public: virtual unsigned long __cdecl CSamPropStore::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CSamPropStore@@W7EAAKXZ
0x18001E7D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180015640: "public: virtual unsigned long __cdecl CEnumConnectedAccounts::Release(void) __ptr64" ?Release@CEnumConnectedAccounts@@UEAAKXZ
0x180017008: "private: long __cdecl CSamPropStore::_QualifyName(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long) __ptr64" ?_QualifyName@CSamPropStore@@AEAAJPEBGPEAGK@Z
0x180018970: "const CEnumLocalAccounts::`vftable'" ??_7CEnumLocalAccounts@@6B@
0x180018D08: "__cdecl _imp_CopySid" __imp_CopySid
0x180007F60: "public: virtual long __cdecl CLoggedOnAccounts::GetEnumerator(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?GetEnumerator@CLoggedOnAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x1800041F0: "public: virtual long __cdecl CSamPropStore::GetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64) __ptr64" ?GetValue@CSamPropStore@@UEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@@Z
0x180024168: "__cdecl _imp_LsaConnectUntrusted" __imp_LsaConnectUntrusted
0x180021908: "__cdecl _onexitbegin" __onexitbegin
0x18000EB0C: "public: long __cdecl CDPA_Base<struct IPropertyStore,class CTContainer_PolicyRelease<struct IPropertyStore> >::AppendPtr(struct IPropertyStore * __ptr64,int * __ptr64) __ptr64" ?AppendPtr@?$CDPA_Base@UIPropertyStore@@V?$CTContainer_PolicyRelease@UIPropertyStore@@@@@@QEAAJPEAUIPropertyStore@@PEAH@Z
0x180003C50: CSGetAccountPropertyStore
0x18001ABE0: PKEY_SAM_UserAccountControl
0x1800189C0: "const CEnumProfileAccounts::`vftable'" ??_7CEnumProfileAccounts@@6B@
0x180024178: "__cdecl _imp_LsaLookupAuthenticationPackage" __imp_LsaLookupAuthenticationPackage
0x180018A90: "__cdecl _imp_SHWindowsPolicy" __imp_SHWindowsPolicy
0x1800095D0: "public: virtual long __cdecl CSamPropStore::SetFlags(int) __ptr64" ?SetFlags@CSamPropStore@@UEAAJH@Z
0x180008E8C: "void __cdecl SafeRelease<struct IConnectedUserStore>(struct IConnectedUserStore * __ptr64 * __ptr64)" ??$SafeRelease@UIConnectedUserStore@@@@YAXPEAPEAUIConnectedUserStore@@@Z
0x180016BAC: "private: long __cdecl CSamPropStore::_CopyPropertyValueIntoStruct(struct tagPROPVARIANT * __ptr64,void * __ptr64) __ptr64" ?_CopyPropertyValueIntoStruct@CSamPropStore@@AEAAJPEAUtagPROPVARIANT@@PEAX@Z
0x180018DA0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800166F0: "private: long __cdecl CSamPropStore::_CopyGroupMembersFromCache(unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,int * __ptr64) __ptr64" ?_CopyGroupMembersFromCache@CSamPropStore@@AEAAJPEAPEAPEAGPEAKPEAH@Z
0x180018060: "const CSamPropStore::`vftable'{for `IPropertyStore'}" ??_7CSamPropStore@@6BIPropertyStore@@@
0x180015524: "public: long __cdecl CEnumConnectedAccounts::Init(class CDPARelease<struct IPropertyStore,class CTContainer_PolicyRelease<struct IPropertyStore> > * __ptr64) __ptr64" ?Init@CEnumConnectedAccounts@@QEAAJPEAV?$CDPARelease@UIPropertyStore@@V?$CTContainer_PolicyRelease@UIPropertyStore@@@@@@@Z
0x180018AD8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18001A688: CLSID_ProfileAccounts
0x18001DD10: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x180014820: "public: virtual long __cdecl CLoggedOnAccounts::Reset(void) __ptr64" ?Reset@CLoggedOnAccounts@@UEAAJXZ
0x18001041C: "long __cdecl CSUpdateGroupMembers(void * __ptr64,unsigned short const * __ptr64 * __ptr64,unsigned long,int)" ?CSUpdateGroupMembers@@YAJPEAXPEAPEBGKH@Z
0x18000FBD0: "protected: virtual void * __ptr64 __cdecl CLocalAccounts::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLocalAccounts@@MEAAPEAXI@Z
0x1800219CC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUhsvooUxlnnlmUovtzxbUwkzPwhzUoryUlyquivUznwGEUkivxlnkOlyq@dpa_dsa
0x1800140BC: "long __cdecl _AllocArray<unsigned short,class CTCoAllocPolicy>(void * __ptr64,unsigned long,unsigned __int64,unsigned short * __ptr64 * __ptr64)" ??$_AllocArray@GVCTCoAllocPolicy@@@@YAJPEAXK_KPEAPEAG@Z
0x180018BD8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000A236: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x18001ABF8: PKEY_SAM_UserComment
0x180010768: "long __cdecl CopyAliasExtStructure(struct _ALIAS_EXTENDED_INFORMATION * __ptr64 const,struct _ALIAS_EXTENDED_INFORMATION * __ptr64)" ?CopyAliasExtStructure@@YAJQEAU_ALIAS_EXTENDED_INFORMATION@@PEAU1@@Z
0x180008B20: DPA_Create
0x18001AC58: CLSID_StdGlobalInterfaceTable
0x180009C94: "__cdecl _security_init_cookie" __security_init_cookie
0x180024080: "__cdecl _imp_SamGetMembersInAlias" __imp_SamGetMembersInAlias
0x180006B30: "public: virtual unsigned long __cdecl CUserPropertyStore::Release(void) __ptr64" ?Release@CUserPropertyStore@@UEAAKXZ
0x18001ADE8: "SeDenyServiceLogonRight" ??_C@_1DA@PIDIIIOO@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180018BE0: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x18000AD40: "[thunk]:public: virtual unsigned long __cdecl CLoggedOnPropStore::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CLoggedOnPropStore@@W7EAAKXZ
0x180018030: "const CSamPropStore::`vftable'{for `IPersistSerializedPropStorage'}" ??_7CSamPropStore@@6BIPersistSerializedPropStorage@@@
0x180011DE4: "long __cdecl SHRegGetDWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64)" ?SHRegGetDWORD@@YAJPEAUHKEY__@@PEBG1PEAK@Z
0x180003F00: "public: virtual unsigned long __cdecl CSamPropStore::Release(void) __ptr64" ?Release@CSamPropStore@@UEAAKXZ
0x180018110: "const CLoggedOnPropStore::`vftable'{for `IPropertyStore'}" ??_7CLoggedOnPropStore@@6BIPropertyStore@@@
0x18001E70C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180007050: "long __cdecl CUserAccounts_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CUserAccounts_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18001DB48: PROPSYS_NULL_THUNK_DATA_DLN
0x180018D58: "__cdecl _imp_memmove" __imp_memmove
0x180018B08: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x180006F50: "long __cdecl CProfileAccounts_CreateInstance(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CProfileAccounts_CreateInstance@@YAJAEBU_GUID@@PEAPEAX@Z
0x18001A620: "__cdecl _sz_ext_ms_win_shell_shell32_l1_2_0_dll" __sz_ext_ms_win_shell_shell32_l1_2_0_dll
0x18000A855: "__cdecl _imp_load_LsaLookupUserAccountType" __imp_load_LsaLookupUserAccountType
0x180018660: "const CEnumConnectedAccounts::`vftable'" ??_7CEnumConnectedAccounts@@6B@
0x18001AB38: PKEY_SAM_RemoteInteractiveLogin
0x18001B258: "%ProgramData%" ??_C@_1BM@BPCHLFEE@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?$AA@
0x1800093C0: "private: static int __cdecl CAccountFilter::s_InitializeOnce(union _RTL_RUN_ONCE * __ptr64,void * __ptr64,void * __ptr64 * __ptr64)" ?s_InitializeOnce@CAccountFilter@@CAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z
0x180008B80: "public: virtual long __cdecl CLocalAccounts::FindByName(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByName@CLocalAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180015D40: "public: virtual long __cdecl CSamPropStore::GetCount(unsigned long * __ptr64) __ptr64" ?GetCount@CSamPropStore@@UEAAJPEAK@Z
0x1800059B0: "public: virtual unsigned long __cdecl CProfilePropStore::Release(void) __ptr64" ?Release@CProfilePropStore@@UEAAKXZ
0x18001A748: PKEY_LOGON_LogonServer
0x180007860: "bool __cdecl DontEnumerateUser(bool,bool)" ?DontEnumerateUser@@YA_N_N0@Z
0x180018D60: "__cdecl _imp_malloc" __imp_malloc
0x180009530: "public: virtual long __cdecl CConnectedAccounts::Create(unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?Create@CConnectedAccounts@@UEAAJPEBGPEAPEAUIPropertyStore@@@Z
0x180018DA8: "__cdecl _imp__purecall" __imp__purecall
0x18001A718: PKEY_LOGON_ClientName
0x18000A994: "__cdecl _imp_load_LookupAccountSidLocalW" __imp_load_LookupAccountSidLocalW
0x1800219C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUvcgUhszxxgUoryUlmvxlivUlyquivUznwGEUkxsOlyq@shacct" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUhsvooUvcgUhszxxgUoryUlmvxlivUlyquivUznwGEUkxsOlyq@shacct
0x18001A6B8: PKEY_Identity_DisplayName
0x18001D9F0: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll" __DELAY_IMPORT_DESCRIPTOR_SAMLIB_dll
0x180018CE8: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x180017660: IPropertyStore_SetBool
0x180015450: "public: virtual long __cdecl CConnectedAccounts::GetEnumerator(struct IEnumAccounts * __ptr64 * __ptr64) __ptr64" ?GetEnumerator@CConnectedAccounts@@UEAAJPEAPEAUIEnumAccounts@@@Z
0x1800094E0: "public: virtual unsigned long __cdecl CEnumLogonAccounts::AddRef(void) __ptr64" ?AddRef@CEnumLogonAccounts@@UEAAKXZ
0x180009500: "public: virtual unsigned long __cdecl CLoggedOnPropStore::AddRef(void) __ptr64" ?AddRef@CLoggedOnPropStore@@UEAAKXZ
0x18001A9B8: PKEY_SAM_GroupMembers
0x18001A838: PKEY_SAM_AdminComment
0x180016060: "private: long __cdecl CSamPropStore::_CopyCacheIntoStruct(struct _USER_ALL_INFORMATION * __ptr64,struct _USER_EXTENDED_INFORMATION * __ptr64,struct _ALIAS_GENERAL_INFORMATION * __ptr64,struct _ALIAS_EXTENDED_INFORMATION * __ptr64,unsigned long * __ptr64) __ptr64" ?_CopyCacheIntoStruct@CSamPropStore@@AEAAJPEAU_USER_ALL_INFORMATION@@PEAU_USER_EXTENDED_INFORMATION@@PEAU_ALIAS_GENERAL_INFORMATION@@PEAU_ALIAS_EXTENDED_INFORMATION@@PEAK@Z
0x18001DD50: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLN
0x180018AF0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000ADB0: "[thunk]:public: virtual unsigned long __cdecl CSamPropStore::Release`adjustor{8}' (void) __ptr64" ?Release@CSamPropStore@@W7EAAKXZ
0x1800240B8: "__cdecl _imp_SamRemoveMemberFromAlias" __imp_SamRemoveMemberFromAlias
0x18000A861: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l1_1_2_dll" __tailMerge_api_ms_win_security_lsalookup_l1_1_2_dll
0x18000EB0C: "public: long __cdecl CDPA_Base<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> >::AppendPtr(struct _SID * __ptr64,int * __ptr64) __ptr64" ?AppendPtr@?$CDPA_Base@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@QEAAJPEAU_SID@@PEAH@Z
0x1800145D0: "public: virtual long __cdecl CLoggedOnAccounts::GetAt(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?GetAt@CLoggedOnAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x1800080E0: "private: long __cdecl CLoggedOnAccounts::_Init(void) __ptr64" ?_Init@CLoggedOnAccounts@@AEAAJXZ
0x18000A8F2: "__cdecl _imp_load_SamRidToSid" __imp_load_SamRidToSid
0x180012924: CSGetGroupAccountInfo
0x180009E90: "__cdecl _report_gsfailure" __report_gsfailure
0x180009520: "public: virtual long __cdecl CProfilePropStore::SetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT const & __ptr64) __ptr64" ?SetValue@CProfilePropStore@@UEAAJAEBU_tagpropertykey@@AEBUtagPROPVARIANT@@@Z
0x18001DA30: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l1_1_0_dll
0x180009540: "public: virtual long __cdecl CEnumUserAccounts::Reset(void) __ptr64" ?Reset@CEnumUserAccounts@@UEAAJXZ
0x180018C80: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18000A5B3: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x180009D88: "__cdecl onexit" _onexit
0x18000A94C: "__cdecl _imp_load_SamSetInformationAlias" __imp_load_SamSetInformationAlias
0x180021918: "__cdecl _native_startup_state" __native_startup_state
0x180024058: "__cdecl _imp_PropVariantToUInt64WithDefault" __imp_PropVariantToUInt64WithDefault
0x180024070: "__cdecl _imp_PropVariantToBoolean" __imp_PropVariantToBoolean
0x1800218A8: "__cdecl _hmod__samcli_dll" __hmod__samcli_dll
0x180009570: "private: static int __cdecl CDPA_Base<struct _SID,class CTContainer_PolicyUnOwned<struct _SID> >::_StandardDestroyCB(struct _SID * __ptr64,void * __ptr64)" ?_StandardDestroyCB@?$CDPA_Base@U_SID@@V?$CTContainer_PolicyUnOwned@U_SID@@@@@@CAHPEAU_SID@@PEAX@Z
0x18000AD60: "[thunk]:public: virtual long __cdecl CUserPropertyStore::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUserPropertyStore@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x18000A8E0: "__cdecl _imp_load_SamLookupIdsInDomain" __imp_load_SamLookupIdsInDomain
0x180018A00: g_pfn_DPA_DeleteAllPtrs
0x180024180: "__cdecl _imp_LsaFreeReturnBuffer" __imp_LsaFreeReturnBuffer
0x180024248: "__cdecl _imp_DsrIsDeviceJoined" __imp_DsrIsDeviceJoined
0x18001AF00: "SeNetworkLogonRight" ??_C@_1CI@NHBIGKOK@?$AAS?$AAe?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x18001AA78: PKEY_SAM_Password
0x1800144D0: "public: virtual long __cdecl CLoggedOnAccounts::FindByRID(unsigned long,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?FindByRID@CLoggedOnAccounts@@UEAAJKPEAPEAUIPropertyStore@@@Z
0x180014DEC: "private: void * __ptr64 __cdecl CEnumProfileAccounts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEnumProfileAccounts@@AEAAPEAXI@Z
0x18001A850: PKEY_SAM_AllowedLogon
0x180007600: "public: virtual long __cdecl CUserPropertyStore::GetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64) __ptr64" ?GetValue@CUserPropertyStore@@UEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@@Z
0x180024198: "__cdecl _imp_CoGetMalloc" __imp_CoGetMalloc
0x18001A580: "__cdecl _sz_SAMLIB_dll" __sz_SAMLIB_dll
0x18001B180: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x180002DC4: "private: void __cdecl CLoggedOnPropStore::_ClearLogonSessionData(struct _SECURITY_LOGON_SESSION_DATA * __ptr64) __ptr64" ?_ClearLogonSessionData@CLoggedOnPropStore@@AEAAXPEAU_SECURITY_LOGON_SESSION_DATA@@@Z
0x18000A93A: "__cdecl _imp_load_SamCreateAliasInDomain" __imp_load_SamCreateAliasInDomain
0x18001DC18: SAMLIB_NULL_THUNK_DATA_DLN
0x1800146DC: "public: long __cdecl CEnumLogonAccounts::Init(struct _SHACCT_LOGON_INFO * __ptr64,unsigned long) __ptr64" ?Init@CEnumLogonAccounts@@QEAAJPEAU_SHACCT_LOGON_INFO@@K@Z
0x18001E550: SAMLIB_NULL_THUNK_DATA_DLB
0x180024148: SAMLIB_NULL_THUNK_DATA_DLA
0x18000AD40: "[thunk]:public: virtual unsigned long __cdecl CUserPropertyStore::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CUserPropertyStore@@W7EAAKXZ
0x18001A4E0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x180009560: "public: virtual long __cdecl CEnumLogonAccounts::Skip(unsigned long) __ptr64" ?Skip@CEnumLogonAccounts@@UEAAJK@Z
0x18001DAD8: OLEAUT32_NULL_THUNK_DATA_DLN
0x180018180: "const CUserPropertyStore::`vftable'{for `IPropertyStore'}" ??_7CUserPropertyStore@@6BIPropertyStore@@@
0x180024008: OLEAUT32_NULL_THUNK_DATA_DLA
0x18001E518: OLEAUT32_NULL_THUNK_DATA_DLB
0x180002850: "public: virtual long __cdecl CLoggedOnPropStore::GetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64) __ptr64" ?GetValue@CLoggedOnPropStore@@UEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@@Z
0x18001B138: WPP_a94304ede2133375013f5f5008347661_Traceguids
0x18001AB68: PKEY_SAM_ScriptPath
0x180018DE8: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1800078C0: "bool __cdecl IsDomainMemberMode(void)" ?IsDomainMemberMode@@YA_NXZ
0x18000A0C1: "__cdecl _imp_load_PSCreateMemoryPropertyStore" __imp_load_PSCreateMemoryPropertyStore
0x180011F44: "long __cdecl ULongLongMult(unsigned __int64,unsigned __int64,unsigned __int64 * __ptr64)" ?ULongLongMult@@YAJ_K0PEA_K@Z
0x18001E784: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180004210: "private: long __cdecl CSamPropStore::_GetValue(struct _tagpropertykey const & __ptr64,struct tagPROPVARIANT * __ptr64,int) __ptr64" ?_GetValue@CSamPropStore@@AEAAJAEBU_tagpropertykey@@PEAUtagPROPVARIANT@@H@Z
0x18000EA84: "public: long __cdecl CUserPropertyStore::AddPropertyStore(struct IPropertyStore * __ptr64,enum PROPSTORE_INDEX) __ptr64" ?AddPropertyStore@CUserPropertyStore@@QEAAJPEAUIPropertyStore@@W4PROPSTORE_INDEX@@@Z
0x180024210: "__cdecl _imp_LsaAddAccountRights" __imp_LsaAddAccountRights
0x18001A8F8: PKEY_SAM_DenyInteractiveLogin
0x1800171B8: WPP_SF_Sd
0x180013BE8: WPP_SF_SD
0x180018D98: "__cdecl _imp_free" __imp_free
0x180009C00: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180018CB0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000AD50: "[thunk]:public: virtual long __cdecl CUserAccounts::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CUserAccounts@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x1800192C0: "__cdecl GUID_fde873d4_e2de_427c_89bd_c234b5f2dc43" _GUID_fde873d4_e2de_427c_89bd_c234b5f2dc43
0x180010058: "public: static long __cdecl CTCoAllocPolicy::Alloc(void * __ptr64,unsigned long,unsigned __int64,void * __ptr64 * __ptr64)" ?Alloc@CTCoAllocPolicy@@SAJPEAXK_KPEAPEAX@Z
0x18000AD90: "[thunk]:public: virtual long __cdecl CLoggedOnPropStore::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLoggedOnPropStore@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180018A28: "__cdecl _imp_DPA_InsertPtr" __imp_DPA_InsertPtr
0x180018DB0: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000FBD0: "protected: virtual void * __ptr64 __cdecl CLocalAccounts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLocalAccounts@@MEAAPEAXI@Z
0x18001ABB0: PKEY_SAM_ShellAdminObjectProps
0x18000E9F8: "private: void * __ptr64 __cdecl CEnumUserAccounts::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCEnumUserAccounts@@AEAAPEAXI@Z
0x180024130: "__cdecl _imp_SamRegisterObjectChangeNotification" __imp_SamRegisterObjectChangeNotification
0x180009500: "public: virtual unsigned long __cdecl CUserPropertyStore::AddRef(void) __ptr64" ?AddRef@CUserPropertyStore@@UEAAKXZ
0x1800172E4: WPP_SF__guid_dD
0x1800094E0: "public: virtual unsigned long __cdecl CClassFactory::AddRef(void) __ptr64" ?AddRef@CClassFactory@@UEAAKXZ
0x180018C98: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180012390: "protected: static unsigned long __cdecl CLocalAccounts::_NotifyThreadProc(void * __ptr64)" ?_NotifyThreadProc@CLocalAccounts@@KAKPEAX@Z
0x18001E770: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800109F4: "long __cdecl CopyUstrToPstr(struct _UNICODE_STRING * __ptr64 const,unsigned short * __ptr64,unsigned long)" ?CopyUstrToPstr@@YAJQEAU_UNICODE_STRING@@PEAGK@Z
0x1800121C0: "private: virtual long __cdecl CEnumLocalGroups::_GetAccountPropertyStore(void * __ptr64,unsigned short const * __ptr64,struct IPropertyStore * __ptr64 * __ptr64) __ptr64" ?_GetAccountPropertyStore@CEnumLocalGroups@@EEAAJPEAXPEBGPEAPEAUIPropertyStore@@@Z
0x180013B7C: WPP_SF_S
0x18000668C: "public: int __cdecl CDPA_Base<struct IPropertyStore,class CTContainer_PolicyRelease<struct IPropertyStore> >::Create(int) __ptr64" ?Create@?$CDPA_Base@UIPropertyStore@@V?$CTContainer_PolicyRelease@UIPropertyStore@@@@@@QEAAHH@Z
0x18000AD19: memset
0x18001E900: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800218C0: "__cdecl _hmod__OLEAUT32_dll" __hmod__OLEAUT32_dll
0x180018B00: "__cdecl _imp_ReadFile" __imp_ReadFile
0x18001AAA8: PKEY_SAM_PasswordExpired
0x18001A540: "__cdecl _sz_OLEAUT32_dll" __sz_OLEAUT32_dll
0x180003910: CSGetProfilePropertyStore

[JEB Decompiler by PNF Software]