Generated by JEB on 2019/08/01

PE: C:\Windows\System32\shgina.dll Base=0x180000000 SHA-256=5E9566151876F7E5461962DEDD68D843D6D626E44C07E2F3D0B49AB124EEC480
PDB: shgina.pdb GUID={2394F09F-01CF-89EC-45CFD9AD14EAF58F} Age=1

305 located named symbols:
0x180003144: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180002A30: "[thunk]:public: virtual long __cdecl CLocalMachine::QueryInterface`adjustor{40}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLocalMachine@@WCI@EAAJAEBU_GUID@@PEAPEAX@Z
0x180003310: "__cdecl FindPESection" _FindPESection
0x180003950: "__cdecl _tailMerge_cscapi_dll" __tailMerge_cscapi_dll
0x180002BC0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000536C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180003932: "__cdecl _imp_load_LsaAddAccountRights" __imp_load_LsaAddAccountRights
0x180005268: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x1800065D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhstrmzUlyquivUznwGEUkireOlyq@shgina" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUvcgUhstrmzUlyquivUznwGEUkireOlyq@shgina
0x180005344: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x180004048: "const CLocalMachine::`vftable'{for `ILocalMachine'}" ??_7CLocalMachine@@6BILocalMachine@@@
0x1800035D3: "__cdecl _tailMerge_oleaut32_dll" __tailMerge_oleaut32_dll
0x180004680: "SeDenyInteractiveLogonRight" ??_C@_1DI@FHICHPLG@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAI?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x180008000: "__cdecl _imp_LsaEnumerateAccountRights" __imp_LsaEnumerateAccountRights
0x180002770: "public: virtual long __cdecl CLocalMachine::get_isLUAEnabled(short * __ptr64) __ptr64" ?get_isLUAEnabled@CLocalMachine@@UEAAJPEAF@Z
0x180006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002C3C: "__cdecl CRT_INIT" _CRT_INIT
0x1800042F0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180003688: "__cdecl _imp_load_NetUserModalsGet" __imp_load_NetUserModalsGet
0x1800080A0: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x1800065C0: "__cdecl _hmod__api_ms_win_security_lsalookup_l2_1_0_dll" __hmod__api_ms_win_security_lsalookup_l2_1_0_dll
0x1800080C0: "__cdecl _imp_NetUserSetInfo" __imp_NetUserSetInfo
0x180003A70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000384D: "__cdecl _imp_load_NetUserSetInfo" __imp_load_NetUserSetInfo
0x1800043C8: "__cdecl _imp_GetSidIdentifierAuthority" __imp_GetSidIdentifierAuthority
0x180002A50: DllGetClassObject
0x1800047E0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003694: "__cdecl _tailMerge_samcli_dll" __tailMerge_samcli_dll
0x1800042A8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800038EA: "__cdecl _imp_load_LsaEnumerateAccountRights" __imp_load_LsaEnumerateAccountRights
0x1800035A3: "__cdecl _imp_load_QISearch" __imp_load_QISearch
0x180004430: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800047C8: "__cdecl GUID_291de1ae_393e_4244_885a_6233a0d7da21" _GUID_291de1ae_393e_4244_885a_6233a0d7da21
0x18000379E: "__cdecl _imp_load_LookupAccountSidW" __imp_load_LookupAccountSidW
0x180005358: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x180004F78: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLN
0x180005140: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLB
0x1800080A8: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA_DLA
0x1800032F7: "__cdecl XcptFilter" _XcptFilter
0x180004438: "__cdecl _xc_a" __xc_a
0x1800014D0: "public: virtual long __cdecl CSHGinaFactory::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CSHGinaFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180004290: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180004508: "__cdecl _guard_iat_table" __guard_iat_table
0x180004408: "__cdecl _imp_memset" __imp_memset
0x18000390E: "__cdecl _imp_load_LsaClose" __imp_load_LsaClose
0x1800034CF: "__cdecl initterm" _initterm
0x180004570: "__cdecl _sz_netutils_dll" __sz_netutils_dll
0x180005330: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180006628: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004378: "__cdecl _imp_Sleep" __imp_Sleep
0x1800080C8: "__cdecl _imp_NetUserModalsGet" __imp_NetUserModalsGet
0x180004458: "__cdecl _xi_z" __xi_z
0x1800065A0: "__cdecl _hmod__SHLWAPI_dll" __hmod__SHLWAPI_dll
0x180004268: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800034DB: "__cdecl _C_specific_handler" __C_specific_handler
0x180004368: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x180003920: "__cdecl _imp_load_LsaRemoveAccountRights" __imp_load_LsaRemoveAccountRights
0x18000199C: "unsigned long __cdecl GetGuestSid(void * __ptr64 * __ptr64)" ?GetGuestSid@@YAKPEAPEAX@Z
0x18000383B: "__cdecl _imp_load_NetUserGetInfo" __imp_load_NetUserGetInfo
0x1800080B8: netutils_NULL_THUNK_DATA_DLA
0x180005130: netutils_NULL_THUNK_DATA_DLB
0x180004F88: netutils_NULL_THUNK_DATA_DLN
0x180004288: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180004318: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800039F4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180002B30: DllCanUnloadNow
0x1800065F8: "struct HINSTANCE__ * __ptr64 __ptr64 g_hinst" ?g_hinst@@3PEAUHINSTANCE__@@EA
0x180004600: "ForceGuest" ??_C@_1BG@MNMCGGEG@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAG?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x180002080: "public: virtual long __cdecl CLocalMachine::DisableGuest(enum ILM_GUEST_FLAGS) __ptr64" ?DisableGuest@CLocalMachine@@UEAAJW4ILM_GUEST_FLAGS@@@Z
0x180004360: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000527C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180004328: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180003303: "__cdecl amsg_exit" _amsg_exit
0x180004F60: SHLWAPI_NULL_THUNK_DATA_DLN
0x1800045F0: IID_IClassFactory
0x180008070: "__cdecl _imp_QISearch" __imp_QISearch
0x1800047D8: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180001A3C: "unsigned short const * __ptr64 __cdecl GetGuestAccountName(void)" ?GetGuestAccountName@@YAPEBGXZ
0x1800045D0: GUID_NULL
0x180008048: "__cdecl _imp_LoadTypeLib" __imp_LoadTypeLib
0x1800080D0: "__cdecl _imp_NetUserGetInfo" __imp_NetUserGetInfo
0x1800043A0: "__cdecl _imp_GetSidLengthRequired" __imp_GetSidLengthRequired
0x180004330: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004DCC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll" __DELAY_IMPORT_DESCRIPTOR_SHLWAPI_dll
0x180004270: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800042B8: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x1800045B0: "__cdecl _sz_ADVAPI32_dll" __sz_ADVAPI32_dll
0x1800065F0: "void * __ptr64 __ptr64 g_pGuestSid" ?g_pGuestSid@@3PEAXEA
0x1800042E8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800043C0: "__cdecl _imp_InitializeSid" __imp_InitializeSid
0x1800015F0: "public: virtual long __cdecl CLocalMachine::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CLocalMachine@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180006618: "__cdecl _native_startup_lock" __native_startup_lock
0x180002B44: DllMain
0x1800052B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180002900: "private: virtual void * __ptr64 __cdecl CLocalMachine::`vector deleting destructor'(unsigned int) __ptr64" ??_ECLocalMachine@@EEAAPEAXI@Z
0x1800043D8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180004338: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800042D0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180004F00: ADVAPI32_NULL_THUNK_DATA_DLN
0x180005168: ADVAPI32_NULL_THUNK_DATA_DLB
0x180008060: "__cdecl _imp_LoadRegTypeLib" __imp_LoadRegTypeLib
0x180008030: ADVAPI32_NULL_THUNK_DATA_DLA
0x180004260: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002850: "public: virtual long __cdecl CLocalMachine::put_isLUAEnabled(short) __ptr64" ?put_isLUAEnabled@CLocalMachine@@UEAAJF@Z
0x1800039D0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800065E8: "unsigned short const * __ptr64 const __ptr64 g_pszGuestAccountName" ?g_pszGuestAccountName@@3PEBGEB
0x1800046E8: "Administrator" ??_C@_1BM@LGMDCJGP@?$AAA?$AAd?$AAm?$AAi?$AAn?$AAi?$AAs?$AAt?$AAr?$AAa?$AAt?$AAo?$AAr?$AA?$AA@
0x1800043B8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180005394: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800042E0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800047D8: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x1800033C0: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800015B0: "public: virtual unsigned long __cdecl CLocalMachine::Release(void) __ptr64" ?Release@CLocalMachine@@UEAAKXZ
0x1800045E0: IID_IUnknown
0x180005240: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180004280: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x1800047A8: "__cdecl GUID_00020400_0000_0000_c000_000000000046" _GUID_00020400_0000_0000_c000_000000000046
0x180004358: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x180004620: "SYSTEM\CurrentControlSet\Control" ??_C@_1EK@FDELPMPE@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl@
0x180004EAC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180004370: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1800043A8: "__cdecl _imp_GetSidSubAuthority" __imp_GetSidSubAuthority
0x180002E80: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800043E0: "__cdecl _imp__initterm" __imp__initterm
0x180003944: "__cdecl _imp_load_OfflineFilesQueryStatus" __imp_load_OfflineFilesQueryStatus
0x180004798: "__cdecl GUID_e93cf64b_c14d_4a1a_9572_adab3c2e9461" _GUID_e93cf64b_c14d_4a1a_9572_adab3c2e9461
0x180001008: "protected: long __cdecl CIDispatchHelper::_LoadTypeInfo(struct _GUID const * __ptr64,unsigned long,struct _GUID,struct ITypeInfo * __ptr64 * __ptr64) __ptr64" ?_LoadTypeInfo@CIDispatchHelper@@IEAAJPEBU_GUID@@KU2@PEAPEAUITypeInfo@@@Z
0x180005380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800065B8: "__cdecl _hmod__netutils_dll" __hmod__netutils_dll
0x1800042C8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180005254: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004530: IID_ILocalMachine
0x180002900: "private: virtual void * __ptr64 __cdecl CLocalMachine::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLocalMachine@@EEAAPEAXI@Z
0x180004540: CLSID_ShellLocalMachine
0x180001810: "public: virtual long __cdecl CLocalMachine::get_MachineName(struct tagVARIANT * __ptr64) __ptr64" ?get_MachineName@CLocalMachine@@UEAAJPEAUtagVARIANT@@@Z
0x1800017B0: "public: virtual long __cdecl CLocalMachine::Invoke(long,struct _GUID const & __ptr64,unsigned long,unsigned short,struct tagDISPPARAMS * __ptr64,struct tagVARIANT * __ptr64,struct tagEXCEPINFO * __ptr64,unsigned int * __ptr64) __ptr64" ?Invoke@CLocalMachine@@UEAAJJAEBU_GUID@@KGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAI@Z
0x180006608: "__cdecl _onexitend" __onexitend
0x180004428: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000386B: "__cdecl _tailMerge_advapi32_dll" __tailMerge_advapi32_dll
0x180008088: "__cdecl _imp_StrCmpICW" __imp_StrCmpICW
0x1800042D8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000371F: "__cdecl _tailMerge_netutils_dll" __tailMerge_netutils_dll
0x180004DEC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll" __DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll
0x180008078: "__cdecl _imp_SHGetValueW" __imp_SHGetValueW
0x180004418: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180004398: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004448: "__cdecl _xi_a" __xi_a
0x180004388: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800050D0: SHLWAPI_NULL_THUNK_DATA_DLB
0x180004248: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180008050: "__cdecl _imp_SetErrorInfo" __imp_SetErrorInfo
0x1800043D0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800065C8: "__cdecl _hmod__ADVAPI32_dll" __hmod__ADVAPI32_dll
0x1800080B0: "__cdecl _imp_NetApiBufferFree" __imp_NetApiBufferFree
0x180001590: "public: virtual long __cdecl CSHGinaFactory::LockServer(int) __ptr64" ?LockServer@CSHGinaFactory@@UEAAJH@Z
0x180004794: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x180005308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180006630: "__cdecl pRawDllMain" _pRawDllMain
0x180004580: "__cdecl _sz_api_ms_win_security_lsalookup_l2_1_0_dll" __sz_api_ms_win_security_lsalookup_l2_1_0_dll
0x1800052CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180008028: "__cdecl _imp_LsaFreeMemory" __imp_LsaFreeMemory
0x180004E2C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_netutils_dll" __DELAY_IMPORT_DESCRIPTOR_netutils_dll
0x180008080: "__cdecl _imp_IsOS" __imp_IsOS
0x180003120: "__cdecl _security_check_cookie" __security_check_cookie
0x1800011F8: "protected: long __cdecl CIDispatchHelper::Invoke(long,struct _GUID const & __ptr64,unsigned long,unsigned short,struct tagDISPPARAMS * __ptr64,struct tagVARIANT * __ptr64,struct tagEXCEPINFO * __ptr64,unsigned int * __ptr64) __ptr64" ?Invoke@CIDispatchHelper@@IEAAJJAEBU_GUID@@KGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAI@Z
0x180004440: "__cdecl _xc_z" __xc_z
0x180005290: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800042F8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003829: "__cdecl _imp_load_LookupAccountNameW" __imp_load_LookupAccountNameW
0x180003713: "__cdecl _imp_load_NetApiBufferFree" __imp_load_NetApiBufferFree
0x180004228: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x180004390: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004298: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180004238: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180004278: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180002350: "public: virtual long __cdecl CLocalMachine::put_isRemoteConnectionsEnabled(short) __ptr64" ?put_isRemoteConnectionsEnabled@CLocalMachine@@UEAAJF@Z
0x180004520: LIBID_SHGINALib
0x180002490: "public: virtual long __cdecl CLocalMachine::get_isOfflineFilesEnabled(short * __ptr64) __ptr64" ?get_isOfflineFilesEnabled@CLocalMachine@@UEAAJPEAF@Z
0x180001620: "public: virtual long __cdecl CLocalMachine::GetTypeInfo(unsigned int,unsigned long,struct ITypeInfo * __ptr64 * __ptr64) __ptr64" ?GetTypeInfo@CLocalMachine@@UEAAJIKPEAPEAUITypeInfo@@@Z
0x1800047B8: "__cdecl GUID_548968f5_17f7_4751_a581_ff0f1c732995" _GUID_548968f5_17f7_4751_a581_ff0f1c732995
0x180004708: "EnableLUA" ??_C@_1BE@PBGLAGDD@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAL?$AAU?$AAA?$AA?$AA@
0x180004350: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800052F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180004308: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180008020: "__cdecl _imp_LsaClose" __imp_LsaClose
0x180004460: "__cdecl _guard_fids_table" __guard_fids_table
0x180001470: "public: virtual unsigned long __cdecl CSHGinaFactory::AddRef(void) __ptr64" ?AddRef@CSHGinaFactory@@UEAAKXZ
0x180004410: msvcrt_NULL_THUNK_DATA
0x180004120: "__cdecl load_config_used" _load_config_used
0x180004250: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180004240: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180004E0C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_samcli_dll" __DELAY_IMPORT_DESCRIPTOR_samcli_dll
0x180001428: "protected: virtual __cdecl CIDispatchHelper::~CIDispatchHelper(void) __ptr64" ??1CIDispatchHelper@@MEAA@XZ
0x180001E60: "public: virtual long __cdecl CLocalMachine::EnableGuest(enum ILM_GUEST_FLAGS) __ptr64" ?EnableGuest@CLocalMachine@@UEAAJW4ILM_GUEST_FLAGS@@@Z
0x180004F10: CSCAPI_NULL_THUNK_DATA_DLN
0x180002960: "long __cdecl CLocalMachine_Create(struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CLocalMachine_Create@@YAJAEBU_GUID@@PEAPEAX@Z
0x1800051A0: CSCAPI_NULL_THUNK_DATA_DLB
0x180008040: CSCAPI_NULL_THUNK_DATA_DLA
0x1800043F8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800045C0: "__cdecl _sz_CSCAPI_dll" __sz_CSCAPI_dll
0x180003591: "__cdecl _imp_load_SHGetValueW" __imp_load_SHGetValueW
0x1800046B8: "SeDenyNetworkLogonRight" ??_C@_1DA@JLBFLOOG@?$AAS?$AAe?$AAD?$AAe?$AAn?$AAy?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAL?$AAo?$AAg?$AAo?$AAn?$AAR?$AAi?$AAg?$AAh?$AAt?$AA?$AA@
0x1800042C0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180004E8C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CSCAPI_dll" __DELAY_IMPORT_DESCRIPTOR_CSCAPI_dll
0x180004FA8: samcli_NULL_THUNK_DATA_DLN
0x1800035B5: "__cdecl _imp_load_StrCmpICW" __imp_load_StrCmpICW
0x180008098: "__cdecl _imp_LookupAccountNameW" __imp_LookupAccountNameW
0x180005120: samcli_NULL_THUNK_DATA_DLB
0x180008090: SHLWAPI_NULL_THUNK_DATA_DLA
0x1800080D8: samcli_NULL_THUNK_DATA_DLA
0x180004340: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180004300: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800038FC: "__cdecl _imp_load_LsaFreeMemory" __imp_load_LsaFreeMemory
0x180004560: "__cdecl _sz_samcli_dll" __sz_samcli_dll
0x180008010: "__cdecl _imp_LsaRemoveAccountRights" __imp_LsaRemoveAccountRights
0x180004348: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002A40: "__cdecl purecall" _purecall
0x1800047E0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x1800034F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800040D8: "const CLocalMachine::`vftable'{for `CIDispatchHelper'}" ??_7CLocalMachine@@6BCIDispatchHelper@@@
0x180001470: "public: virtual unsigned long __cdecl CLocalMachine::AddRef(void) __ptr64" ?AddRef@CLocalMachine@@UEAAKXZ
0x180003512: "__cdecl _tailMerge_shlwapi_dll" __tailMerge_shlwapi_dll
0x180008018: "__cdecl _imp_LsaOpenPolicy" __imp_LsaOpenPolicy
0x1800013E0: "protected: virtual void * __ptr64 __cdecl CIDispatchHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_ECIDispatchHelper@@MEAAPEAXI@Z
0x180004E6C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll" __DELAY_IMPORT_DESCRIPTOR_ADVAPI32_dll
0x180003676: "__cdecl _imp_load_SysAllocString" __imp_load_SysAllocString
0x180004400: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004420: ntdll_NULL_THUNK_DATA
0x1800042B0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180001540: "public: virtual long __cdecl CSHGinaFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CSHGinaFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x1800043B0: "__cdecl _imp_GetSidSubAuthorityCount" __imp_GetSidSubAuthorityCount
0x180006008: "__cdecl _security_cookie" __security_cookie
0x180004670: "Guest" ??_C@_1M@CBFBMPEI@?$AAG?$AAu?$AAe?$AAs?$AAt?$AA?$AA@
0x180006600: "long g_cRef" ?g_cRef@@3JA
0x1800042A0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800052A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180004230: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x180004010: "const CIDispatchHelper::`vftable'" ??_7CIDispatchHelper@@6B@
0x180008058: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x180004320: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180001104: "protected: long __cdecl CIDispatchHelper::GetTypeInfo(unsigned int,unsigned long,struct ITypeInfo * __ptr64 * __ptr64) __ptr64" ?GetTypeInfo@CIDispatchHelper@@IEAAJIKPEAPEAUITypeInfo@@@Z
0x180006610: "__cdecl _onexitbegin" __onexitbegin
0x1800022B0: "public: virtual long __cdecl CLocalMachine::get_isRemoteConnectionsEnabled(short * __ptr64) __ptr64" ?get_isRemoteConnectionsEnabled@CLocalMachine@@UEAAJPEAF@Z
0x180001610: "public: virtual long __cdecl CLocalMachine::GetTypeInfoCount(unsigned int * __ptr64) __ptr64" ?GetTypeInfoCount@CLocalMachine@@UEAAJPEAI@Z
0x180004258: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004E4C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_lsalookup_l2_1_0_dll
0x1800033F4: "__cdecl _security_init_cookie" __security_init_cookie
0x180001C40: "public: virtual long __cdecl CLocalMachine::get_isGuestEnabled(enum ILM_GUEST_FLAGS,short * __ptr64) __ptr64" ?get_isGuestEnabled@CLocalMachine@@UEAAJW4ILM_GUEST_FLAGS@@PEAF@Z
0x180004310: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180003652: "__cdecl _imp_load_LoadTypeLib" __imp_load_LoadTypeLib
0x18000522C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800024D8: "unsigned short const * __ptr64 __cdecl GetAdminAccountName(void)" ?GetAdminAccountName@@YAPEBGXZ
0x1800043E8: "__cdecl _imp_malloc" __imp_malloc
0x1800013E0: "protected: virtual void * __ptr64 __cdecl CIDispatchHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCIDispatchHelper@@MEAAPEAXI@Z
0x1800065E0: "unsigned short const * __ptr64 const __ptr64 g_pszAdminAccountName" ?g_pszAdminAccountName@@3PEBGEB
0x180001894: "unsigned long __cdecl BuildAccountSidFromRid(unsigned short const * __ptr64,unsigned long,void * __ptr64 * __ptr64)" ?BuildAccountSidFromRid@@YAKPEBGKPEAPEAX@Z
0x180003180: "__cdecl _report_gsfailure" __report_gsfailure
0x180003664: "__cdecl _imp_load_SetErrorInfo" __imp_load_SetErrorInfo
0x1800023D0: "public: virtual long __cdecl CLocalMachine::get_isGuestAccessMode(short * __ptr64) __ptr64" ?get_isGuestAccessMode@CLocalMachine@@UEAAJPEAF@Z
0x18000385F: "__cdecl _imp_load_LsaOpenPolicy" __imp_load_LsaOpenPolicy
0x180001480: "public: virtual unsigned long __cdecl CSHGinaFactory::Release(void) __ptr64" ?Release@CSHGinaFactory@@UEAAKXZ
0x180002690: "public: virtual long __cdecl CLocalMachine::get_AccountName(struct tagVARIANT,struct tagVARIANT * __ptr64) __ptr64" ?get_AccountName@CLocalMachine@@UEAAJUtagVARIANT@@PEAU2@@Z
0x180006620: "__cdecl _native_startup_state" __native_startup_state
0x180004510: "__cdecl _sz_SHLWAPI_dll" __sz_SHLWAPI_dll
0x1800065B0: "__cdecl _hmod__samcli_dll" __hmod__samcli_dll
0x180008038: "__cdecl _imp_OfflineFilesQueryStatus" __imp_OfflineFilesQueryStatus
0x180004720: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800065D0: "__cdecl _hmod__CSCAPI_dll" __hmod__CSCAPI_dll
0x180004F38: OLEAUT32_NULL_THUNK_DATA_DLN
0x180004020: "const CSHGinaFactory::`vftable'" ??_7CSHGinaFactory@@6B@
0x180003506: "__cdecl _imp_load_IsOS" __imp_load_IsOS
0x180008068: OLEAUT32_NULL_THUNK_DATA_DLA
0x1800050F8: OLEAUT32_NULL_THUNK_DATA_DLB
0x180001650: "public: virtual long __cdecl CLocalMachine::GetIDsOfNames(struct _GUID const & __ptr64,unsigned short * __ptr64 * __ptr64,unsigned int,unsigned long,long * __ptr64) __ptr64" ?GetIDsOfNames@CLocalMachine@@UEAAJAEBU_GUID@@PEAPEAGIKPEAJ@Z
0x1800035C7: "__cdecl _imp_load_LoadRegTypeLib" __imp_load_LoadRegTypeLib
0x18000531C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800037AA: "__cdecl _tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll" __tailMerge_api_ms_win_security_lsalookup_l2_1_0_dll
0x180008008: "__cdecl _imp_LsaAddAccountRights" __imp_LsaAddAccountRights
0x1800043F0: "__cdecl _imp_free" __imp_free
0x180003360: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004380: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800052E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180003A55: memset
0x1800053A8: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1800065A8: "__cdecl _hmod__OLEAUT32_dll" __hmod__OLEAUT32_dll
0x180004550: "__cdecl _sz_OLEAUT32_dll" __sz_OLEAUT32_dll

[JEB Decompiler by PNF Software]