Generated by JEB on 2019/08/01

PE: C:\Windows\System32\capiprovider.dll Base=0x180000000 SHA-256=62188A64FDE397072963A6C905A29226304874E11BE50B18A6E45625ABF0E814
PDB: capiprovider.pdb GUID={D72EC640-3D92-CAD3-D1F3A0AF0C5F2313} Age=1

497 located named symbols:
0x18000ADF0: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x18000A8A8: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800071BC: "__cdecl drr_GetCertificateInformation" _drr_GetCertificateInformation
0x1800087C0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000A6B0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000A738: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x180008B20: "__cdecl FindPESection" _FindPESection
0x18000A958: "__cdecl _imp__lfind_s" __imp__lfind_s
0x18000C17C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000C000: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x180001FD4: "long __cdecl ATL::AtlHresultFromLastError(void)" ?AtlHresultFromLastError@ATL@@YAJXZ
0x18000E060: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000A618: "__cdecl _imp_RaiseException" __imp_RaiseException
0x18000A970: "__cdecl _imp_wcsncpy_s" __imp_wcsncpy_s
0x18000B12C: "B" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x18000ABB0: "ForceRemove" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180004810: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::AddRef(void) __ptr64" ?AddRef@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x1800081EC: "__cdecl CRT_INIT" _CRT_INIT
0x18000A770: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001830: "public: virtual long __cdecl ATL::CAtlModule::Lock(void) __ptr64" ?Lock@CAtlModule@ATL@@UEAAJXZ
0x180004A1C: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180008154: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180001290: WppControlCallback
0x180008ED0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000A520: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x18000AC20: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x18000A6A8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000A568: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x18000BF60: "__cdecl _IMPORT_DESCRIPTOR_OLEAUT32" __IMPORT_DESCRIPTOR_OLEAUT32
0x18000AF60: "__cdecl GUID_435eb1b8_b681_4569_b862_551e13764315" _GUID_435eb1b8_b681_4569_b862_551e13764315
0x180003F60: "public: virtual long __cdecl CCCAPIProvider::HasBeenModified(struct DRR_PROV_VER_INFO * __ptr64,int * __ptr64) __ptr64" ?HasBeenModified@CCCAPIProvider@@UEAAJPEAUDRR_PROV_VER_INFO@@PEAH@Z
0x180007610: "__cdecl drr_BaseNameFilter_Dpapi" _drr_BaseNameFilter_Dpapi
0x18000B0F8: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18000A0D8: "const ATL::CComClassFactory::`vftable'" ??_7CComClassFactory@ATL@@6B@
0x18000B120: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x1800014F0: DllGetClassObject
0x180008160: "void * __ptr64 __cdecl operator new[](unsigned __int64)" ??_U@YAPEAX_K@Z
0x1800022F8: "void __cdecl ATL::_AtlRaiseException(unsigned long,unsigned long)" ?_AtlRaiseException@ATL@@YAXKK@Z
0x18000C08C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000BF74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x1800048E0: "public: virtual unsigned long __cdecl ATL::CComObject<class CCCAPIProvider>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCCCAPIProvider@@@ATL@@UEAAKXZ
0x180006B4C: "__cdecl drr_SecureZeroFile" _drr_SecureZeroFile
0x180003170: "public: virtual long __cdecl CCCAPIProvider::GetToken(struct DRR_ID * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64 * __ptr64) __ptr64" ?GetToken@CCCAPIProvider@@UEAAJPEAUDRR_ID@@PEAPEAUDRR_ROAMING_TOKEN@@@Z
0x18000A6D8: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18000BE98: "__cdecl _pobjMapEntryLast" __pobjMapEntryLast
0x18000B220: "TypeLib" ??_C@_1BA@JIHHIEDE@?$AAT?$AAy?$AAp?$AAe?$AAL?$AAi?$AAb?$AA?$AA@
0x18000E5F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUdrmxivwUxzkrUlyquivUznwGEUkivxlnkOlyq@capiprovider" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUdrmxivwUxzkrUlyquivUznwGEUkivxlnkOlyq@capiprovider
0x1800059F0: "long __cdecl ATL::AtlHresultFromWin32(unsigned long)" ?AtlHresultFromWin32@ATL@@YAJK@Z
0x18000A598: "__cdecl _imp_UnRegisterTypeLib" __imp_UnRegisterTypeLib
0x18000A4D8: "__cdecl _imp_CryptReleaseContext" __imp_CryptReleaseContext
0x18000ACB0: "API-MS-Win-Core-LocalRegistry-L1" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x18000A9E0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000A010: "__cdecl _imp__recalloc" __imp__recalloc
0x180006354: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEAGH@Z
0x18000A830: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180001FF8: "void __cdecl ATL::AtlThrowImpl(long)" ?AtlThrowImpl@ATL@@YAXJ@Z
0x18000AF40: WPP_86d082e9c8a830168c3abd6e7b38da29_Traceguids
0x180004FAC: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x180004FAC: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18000A678: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180001A60: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180004FE0: "public: int __cdecl ATL::CRegParser::CParseBuffer::Append(unsigned short const * __ptr64,int) __ptr64" ?Append@CParseBuffer@CRegParser@ATL@@QEAAHPEBGH@Z
0x180008B08: "__cdecl XcptFilter" _XcptFilter
0x18000A530: "__cdecl _imp_CertAddSerializedElementToStore" __imp_CertAddSerializedElementToStore
0x18000A9E8: "__cdecl _xc_a" __xc_a
0x18000AD18: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18000C064: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-timezone-l1-1-0
0x18000A648: "__cdecl _imp_FindClose" __imp_FindClose
0x18000A740: "__cdecl _imp_SetThreadLocale" __imp_SetThreadLocale
0x180001844: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x180008CEB: "__cdecl lock" _lock
0x18000A500: "__cdecl _imp_CryptHashData" __imp_CryptHashData
0x180004B40: "public: virtual long __cdecl ATL::CRegObject::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CRegObject@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180008AFC: "__cdecl callnewh" _callnewh
0x18000A670: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180004BA8: "public: long __cdecl ATL::CExpansionVector::ClearReplacements(void) __ptr64" ?ClearReplacements@CExpansionVector@ATL@@QEAAJXZ
0x18000AB58: "__cdecl _guard_iat_table" __guard_iat_table
0x18000A4F8: "__cdecl _imp_CryptAcquireContextW" __imp_CryptAcquireContextW
0x180008EA2: memcpy
0x18000A700: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18000A9B8: "__cdecl _imp_memset" __imp_memset
0x180008CDF: "__cdecl initterm" _initterm
0x18000A8B8: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18000C0F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000E7D0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000A858: "__cdecl _imp_Sleep" __imp_Sleep
0x18000AFB0: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x18000AA28: "__cdecl _xi_z" __xi_z
0x18000A608: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000A5C0: USERENV_NULL_THUNK_DATA
0x180001B1C: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x1800086F4: "__cdecl _C_specific_handler" __C_specific_handler
0x18000A8F0: "__cdecl _imp__onexit" __imp__onexit
0x18000E658: WPP_REGISTRATION_GUIDS
0x18000C140: "__cdecl _IMPORT_DESCRIPTOR_DSROLE" __IMPORT_DESCRIPTOR_DSROLE
0x180008A75: malloc
0x18000A6C0: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000AF80: "Module_Raw" ??_C@_1BG@JBACFMF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA_?$AAR?$AAa?$AAw?$AA?$AA@
0x18000A7C8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180008E2C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000B230: GUID_ATLVer70
0x180004050: "public: static struct ATL::_ATL_CATMAP_ENTRY const * __ptr64 __cdecl ATL::CComObjectRootBase::GetCategoryMap(void)" ?GetCategoryMap@CComObjectRootBase@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x1800014C0: DllCanUnloadNow
0x18000A7D0: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18000AB98: CLSID_StdComponentCategoriesMgr
0x18000B1F8: "SYSTEM" ??_C@_1O@GBFINDKL@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?$AA@
0x180001760: "public: virtual long __cdecl ATL::CAtlModuleT<class CCAPIProviderModule>::AddCommonRGSReplacements(struct IRegistrarBase * __ptr64) __ptr64" ?AddCommonRGSReplacements@?$CAtlModuleT@VCCAPIProviderModule@@@ATL@@UEAAJPEAUIRegistrarBase@@@Z
0x18000A818: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x18000E630: WPP_MAIN_CB
0x180002020: "long __cdecl ATL::AtlLoadTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,struct ITypeLib * __ptr64 * __ptr64)" ?AtlLoadTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBGPEAPEAGPEAPEAUITypeLib@@@Z
0x180004B70: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCRegObject@ATL@@UEAAPEAXI@Z
0x18000C03C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000A7A8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180008B14: "__cdecl amsg_exit" _amsg_exit
0x18000A938: "__cdecl _imp__callnewh" __imp__callnewh
0x18000AD38: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x18000A048: "const ATL::CComObject<class CCCAPIProvider>::`vftable'" ??_7?$CComObject@VCCCAPIProvider@@@ATL@@6B@
0x18000E7AC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUxivwilznfgroUlyquivUznwGEUkivxlnkOlyq@credroamutil" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUdrmDCUmgxibkglUpvbilznCUhgliztvkilerwvihUxivwilznfgroUlyquivUznwGEUkivxlnkOlyq@credroamutil
0x180004060: "public: virtual long __cdecl CCCAPIProvider::ValidateFilter(struct DRR_CRED_FILTER,int * __ptr64) __ptr64" ?ValidateFilter@CCCAPIProvider@@UEAAJUDRR_CRED_FILTER@@PEAH@Z
0x18000AC40: "\Required Categories" ??_C@_1CK@IFBKBFAA@?$AA?2?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000B124: "M" ??_C@_13LHMFKAAD@?$AAM?$AA?$AA@
0x18000A730: "__cdecl _imp_GetACP" __imp_GetACP
0x18000ABF0: GUID_NULL
0x18000A558: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18000A918: "__cdecl _imp__lock" __imp__lock
0x18000A5A0: OLEAUT32_NULL_THUNK_DATA
0x18000A588: "__cdecl _imp_LoadTypeLib" __imp_LoadTypeLib
0x180008794: atexit
0x18000E700: "class ATL::CAtlBaseModule ATL::_AtlBaseModule" ?_AtlBaseModule@ATL@@3VCAtlBaseModule@1@A
0x18000A698: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x180001320: "public: virtual void * __ptr64 __cdecl CCAPIProviderModule::`vector deleting destructor'(unsigned int) __ptr64" ??_ECCAPIProviderModule@@UEAAPEAXI@Z
0x18000A838: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180004FAC: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::AllocateHeap(unsigned __int64) __ptr64" ?AllocateHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAX_K@Z
0x18000A100: "const ATL::CComObjectCached<class ATL::CComClassFactory>::`vftable'" ??_7?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@6B@
0x180003050: "public: virtual long __cdecl CCCAPIProvider::DeleteToken(struct DRR_ID * __ptr64) __ptr64" ?DeleteToken@CCCAPIProvider@@UEAAJPEAUDRR_ID@@@Z
0x18000A7E8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18000A890: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x18000AB60: "Invalid parameter passed to C ru" ??_C@_0DB@OPDBMGNG@Invalid?5parameter?5passed?5to?5C?5ru@
0x18000A630: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000A8B0: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180007660: "__cdecl drr_BaseNameFilter_KeyContainer" _drr_BaseNameFilter_KeyContainer
0x1800024D0: "public: virtual long __cdecl CCCAPIProvider::OpenStore(struct DRR_CRED_FILTER_SET * __ptr64) __ptr64" ?OpenStore@CCCAPIProvider@@UEAAJPEAUDRR_CRED_FILTER_SET@@@Z
0x18000B368: "1.2.840.113556.1.5.284.2" ??_C@_0BJ@JHGLHABJ@1?42?4840?4113556?41?45?4284?42?$AA@
0x18000A750: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180008D03: "__cdecl _dllonexit" __dllonexit
0x18000A510: "__cdecl _imp_CryptHashCertificate" __imp_CryptHashCertificate
0x18000B018: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18000E7B0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001398: DllMain
0x180004050: "public: virtual long __cdecl CCCAPIProvider::ResolveConflict(struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64 * __ptr64) __ptr64" ?ResolveConflict@CCCAPIProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@0PEAPEAU2@@Z
0x18000A7C0: "__cdecl _imp_RegOpenCurrentUser" __imp_RegOpenCurrentUser
0x18000C014: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18000A9A8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000A988: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18000BFD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x18000A9A0: "__cdecl _imp_realloc" __imp_realloc
0x18000A900: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800023D0: "public: static long __cdecl CCCAPIProvider::UpdateRegistry(int)" ?UpdateRegistry@CCCAPIProvider@@SAJH@Z
0x18000A800: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000A728: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180002C30: "public: virtual long __cdecl CCCAPIProvider::AddToken(struct DRR_ROAMING_TOKEN * __ptr64) __ptr64" ?AddToken@CCCAPIProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@@Z
0x18000A560: KERNEL32_NULL_THUNK_DATA
0x180004A10: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18000A610: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000816C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000A8D8: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x18000A4E8: "__cdecl _imp_CryptDestroyHash" __imp_CryptDestroyHash
0x180008D0F: "__cdecl errno" _errno
0x18000E050: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180008E08: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000186C: "long __cdecl ATL::AtlRegisterTypeLib(struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64)" ?AtlRegisterTypeLib@ATL@@YAJPEAUHINSTANCE__@@PEBG@Z
0x18000AC10: "__cdecl GUID_00000146_0000_0000_c000_000000000046" _GUID_00000146_0000_0000_c000_000000000046
0x18000A9C8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180004060: "public: virtual long __cdecl CCCAPIProvider::GetSupportedFilters(struct DRR_SUPPORTED_FILTER_SET * __ptr64 * __ptr64) __ptr64" ?GetSupportedFilters@CCCAPIProvider@@UEAAJPEAPEAUDRR_SUPPORTED_FILTER_SET@@@Z
0x18000A978: "__cdecl _imp_memcmp" __imp_memcmp
0x1800077F0: DRR_SecureFreeRoamingToken
0x180007F8C: "__cdecl drr_AddGuidToList" _drr_AddGuidToList
0x180004B70: "public: virtual void * __ptr64 __cdecl ATL::CRegObject::`vector deleting destructor'(unsigned int) __ptr64" ??_ECRegObject@ATL@@UEAAPEAXI@Z
0x18000B470: "Microsoft\Crypto\RSA\" ??_C@_1CM@BBJNBFHL@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?2?$AAR?$AAS?$AAA?$AA?2?$AA?$AA@
0x18000A5F8: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x18000C154: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x18000B240: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18000ABE0: "Delete" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x18000A778: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000ABC8: "NoRemove" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180004F20: "public: virtual long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@UEAAJPEBG0@Z
0x18000A7B8: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180008BD0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006E2C: "__cdecl drr_DupStringN" _drr_DupStringN
0x18000A718: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x180008078: "__cdecl drr_ExtractDpapiKeyGuidsFromDpapiBlob" _drr_ExtractDpapiKeyGuidsFromDpapiBlob
0x18000A690: "__cdecl _imp_FlushFileBuffers" __imp_FlushFileBuffers
0x18000AFD0: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x18000BF88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180006D08: "__cdecl drr_FindFirstByType" _drr_FindFirstByType
0x1800023FC: WPP_SF_
0x18000C12C: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x180007E14: DRR_CreateDirectory
0x18000A720: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180001320: "public: virtual void * __ptr64 __cdecl CCAPIProviderModule::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCCAPIProviderModule@@UEAAPEAXI@Z
0x18000B448: "Microsoft\Protect\" ??_C@_1CG@MIMEPGDA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAP?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AA?2?$AA?$AA@
0x1800023E0: "public: virtual long __cdecl CCCAPIProvider::SetFilterOptions(struct DRR_FILTER_OPTIONS const * __ptr64) __ptr64" ?SetFilterOptions@CCCAPIProvider@@UEAAJPEBUDRR_FILTER_OPTIONS@@@Z
0x18000A828: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x180008430: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000A920: "__cdecl _imp__initterm" __imp__initterm
0x18000C104: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x1800053B4: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG@Z
0x18000A018: "const CCAPIProviderModule::`vftable'" ??_7CCAPIProviderModule@@6B@
0x18000A5C8: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18000A628: "__cdecl _imp_SetLastError" __imp_SetLastError
0x180005804: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x18000E660: "class CCAPIProviderModule _AtlModule" ?_AtlModule@@3VCCAPIProviderModule@@A
0x1800058B0: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180008A90: "__cdecl recalloc" _recalloc
0x18000B150: "Component Categories" ??_C@_1CK@OEKPKBNA@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000A6E0: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x1800033B0: "public: virtual long __cdecl CCCAPIProvider::GetTokens(unsigned long,unsigned long * __ptr64,struct DRR_ROAMING_TOKEN_SET * __ptr64 * __ptr64) __ptr64" ?GetTokens@CCCAPIProvider@@UEAAJKPEAKPEAPEAUDRR_ROAMING_TOKEN_SET@@@Z
0x18000BFEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000A538: CRYPT32_NULL_THUNK_DATA
0x1800049E0: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x180006F7C: "__cdecl drr_GetKeyContainerNameFromCertificate" _drr_GetKeyContainerNameFromCertificate
0x18000B1D8: "SAM" ??_C@_17OMAOINJK@?$AAS?$AAA?$AAM?$AA?$AA@
0x18000E7C0: "__cdecl _onexitend" __onexitend
0x18000AFE8: "HKPD" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x180001810: "public: virtual long __cdecl ATL::CAtlModule::Unlock(void) __ptr64" ?Unlock@CAtlModule@ATL@@UEAAJXZ
0x180008CF7: "__cdecl unlock" _unlock
0x180005A04: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x18000A9D8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000A638: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18000B24C: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18000A780: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000A5B0: USER32_NULL_THUNK_DATA
0x18000A9B0: "__cdecl _imp__lsearch_s" __imp__lsearch_s
0x18000A1C0: ?_entries@?1??_GetEntries@CCCAPIProvider@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x18000A8C8: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180004790: "public: virtual unsigned long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::Release(void) __ptr64" ?Release@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAKXZ
0x180004870: "public: virtual unsigned long __cdecl ATL::CComObject<class CCCAPIProvider>::Release(void) __ptr64" ?Release@?$CComObject@VCCCAPIProvider@@@ATL@@UEAAKXZ
0x18000A878: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000AA18: "__cdecl _xi_a" __xi_a
0x18000B0D8: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18000A868: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000A600: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180004970: "public: virtual long __cdecl ATL::CComClassFactory::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@CComClassFactory@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x18000A910: "__cdecl _imp__unlock" __imp__unlock
0x18000E600: "long (__cdecl* __ptr64 ATL::_pPerfRegFunc)(struct HINSTANCE__ * __ptr64)" ?_pPerfRegFunc@ATL@@3P6AJPEAUHINSTANCE__@@@ZEA
0x18000A8D0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18000B128: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x18000B1C8: "Mime" ??_C@_19HLLLM@?$AAM?$AAi?$AAm?$AAe?$AA?$AA@
0x18000B068: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x18000A5D8: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18000A5A8: "__cdecl _imp_UnregisterClassA" __imp_UnregisterClassA
0x180008D28: "__cdecl invoke_watson" _invoke_watson
0x180004770: "public: virtual long __cdecl ATL::CComObjectCached<class ATL::CComClassFactory>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000E048: WPP_GLOBAL_Control
0x18000AD54: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000C028: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180004634: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CCCAPIProvider> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCCCAPIProvider@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000E618: "public: static struct _GUID ATL::CAtlModule::m_libid" ?m_libid@CAtlModule@ATL@@2U_GUID@@A
0x18000AC70: "CLSID\" ??_C@_1O@FHBGLCIO@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?2?$AA?$AA@
0x18000AD78: WPP_ThisDir_CTLGUID_CtlGuid
0x180004050: ?GetObjectDescription@?$CComCoClass@VCCAPIProvider@@$1?CLSID_CCAPIProvider@@3U_GUID@@B@ATL@@SAPEBGXZ
0x180002420: WPP_SF_D
0x18000A708: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x180008978: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18000E7D8: "__cdecl pRawDllMain" _pRawDllMain
0x180001700: DllUnregisterServer
0x18000A908: "__cdecl _imp___dllonexit" __imp___dllonexit
0x18000E760: "class ATL::CAtlWinModule ATL::_AtlWinModule" ?_AtlWinModule@ATL@@3VCAtlWinModule@1@A
0x180004C60: "public: virtual long __cdecl ATL::CRegObject::ClearReplacements(void) __ptr64" ?ClearReplacements@CRegObject@ATL@@UEAAJXZ
0x180008148: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000A848: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800086D0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000E7A8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUvmwfhviUexPyrmzirvhUhixUzgoHBUzgohUivgzroUlyquivUznwGEUhgwzucOlyq@atls
0x18000AA10: "__cdecl _xc_z" __xc_z
0x18000A540: "__cdecl _imp_DsRoleGetPrimaryDomainInformation" __imp_DsRoleGetPrimaryDomainInformation
0x18000C118: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18000A788: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000AD68: LIBID_DIMSROAMLib
0x18000A6E8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1800044F0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CCCAPIProvider> >,class ATL::CComFailCreator<-2147221232> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCCCAPIProvider@@@ATL@@@ATL@@V?$CComFailCreator@$0?HPPLPOPA@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x180007CD0: "__cdecl drr_GetFileNameFromId" _drr_GetFileNameFromId
0x180007828: DRR_AddRoamingTokenToSet
0x18000A5B8: "__cdecl _imp_GetUserProfileDirectoryW" __imp_GetUserProfileDirectoryW
0x18000BE90: "__cdecl _pobjMap_CCCAPIProvider" __pobjMap_CCCAPIProvider
0x180002C00: "public: virtual long __cdecl CCCAPIProvider::GetDpapiMkGuids(struct GUID_LIST * __ptr64 * __ptr64) __ptr64" ?GetDpapiMkGuids@CCCAPIProvider@@UEAAJPEAPEAUGUID_LIST@@@Z
0x18000A4F0: "__cdecl _imp_CryptCreateHash" __imp_CryptCreateHash
0x18000A190: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x18000A5E8: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000A870: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004850: "public: virtual long __cdecl ATL::CComObject<class CCCAPIProvider>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCCCAPIProvider@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18000B008: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18000B040: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x18000A6C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180007F30: ComparePrivKeys
0x18000A4E0: "__cdecl _imp_CryptGetHashParam" __imp_CryptGetHashParam
0x180008EF0: "__cdecl _chkstk" __chkstk
0x18000A668: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x18000B1B0: "Hardware" ??_C@_1BC@MAICEHGI@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180004D34: "public: int __cdecl ATL::CExpansionVector::Add(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Add@CExpansionVector@ATL@@QEAAHPEBG0@Z
0x18000A8F8: "__cdecl _imp__errno" __imp__errno
0x180008D1C: "__cdecl invalid_parameter" _invalid_parameter
0x18000AF50: "__cdecl GUID_e5899c7c_0fc7_499e_a262_174fd692dc9f" _GUID_e5899c7c_0fc7_499e_a262_174fd692dc9f
0x180008DF1: realloc
0x18000B1E0: "SECURITY" ??_C@_1BC@IBECJAAI@?$AAS?$AAE?$AAC?$AAU?$AAR?$AAI?$AAT?$AAY?$AA?$AA@
0x18000A680: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18000E6B0: "class ATL::CAtlComModule ATL::_AtlComModule" ?_AtlComModule@ATL@@3VCAtlComModule@1@A
0x1800076C0: "__cdecl drr_BaseNameFilter_Certificate" _drr_BaseNameFilter_Certificate
0x18000A808: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180002310: "public: virtual __cdecl ATL::CAtlModule::~CAtlModule(void) __ptr64" ??1CAtlModule@ATL@@UEAA@XZ
0x18000A880: "__cdecl _imp_SystemTimeToFileTime" __imp_SystemTimeToFileTime
0x18000AFF8: "HKDD" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x1800023C0: "public: virtual long __cdecl ATL::CAtlModule::GetLockCount(void) __ptr64" ?GetLockCount@CAtlModule@ATL@@UEAAJXZ
0x18000A810: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18000C0C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18000A798: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000AA30: "__cdecl _guard_fids_table" __guard_fids_table
0x18000A998: "__cdecl _imp_wcscpy_s" __imp_wcscpy_s
0x18000A820: "__cdecl _imp_CharNextW" __imp_CharNextW
0x18000A9C0: msvcrt_NULL_THUNK_DATA
0x18000A3D0: "__cdecl load_config_used" _load_config_used
0x18000C050: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180004B60: "public: virtual unsigned long __cdecl ATL::CRegObject::AddRef(void) __ptr64" ?AddRef@CRegObject@ATL@@UEAAKXZ
0x18000C0A0: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180006DB4: "__cdecl drr_FindNextByType" _drr_FindNextByType
0x18000AD08: "RegDeleteKeyExW" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x180004050: "public: virtual long __cdecl CCCAPIProvider::CompareTokens(struct DRR_ROAMING_TOKEN * __ptr64,struct DRR_ROAMING_TOKEN * __ptr64,int * __ptr64) __ptr64" ?CompareTokens@CCCAPIProvider@@UEAAJPEAUDRR_ROAMING_TOKEN@@0PEAH@Z
0x18000C190: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x18000E610: "public: static bool ATL::CAtlBaseModule::m_bInitFailed" ?m_bInitFailed@CAtlBaseModule@ATL@@2_NA
0x18000B4D0: "Microsoft\SystemCertificates\My\" ??_C@_1FK@BDALGPPH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAs?$AA?2?$AAM?$AAy?$AA?2@
0x18000AFC0: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x18000B530: "Microsoft\SystemCertificates\Req" ??_C@_1GE@HAEGBHMC@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAC?$AAe?$AAr?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAe?$AAs?$AA?2?$AAR?$AAe?$AAq@
0x18000A928: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000AD58: "APPID" ??_C@_1M@PPPPCDEP@?$AAA?$AAP?$AAP?$AAI?$AAD?$AA?$AA@
0x180004CA4: "public: virtual __cdecl ATL::CRegObject::~CRegObject(void) __ptr64" ??1CRegObject@ATL@@UEAA@XZ
0x18000A6F0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180004F9C: "private: void __cdecl ATL::CTempBuffer<unsigned short,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x180004F9C: "private: void __cdecl ATL::CTempBuffer<unsigned char,256,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@E$0BAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000B260: "Microsoft Smart Card Key Storage" ??_C@_1FE@DJIHBEMA@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAm?$AAa?$AAr?$AAt?$AA?5?$AAC?$AAa?$AAr?$AAd?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe@
0x180005BBC: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x1800080D4: "long __cdecl _drr_ParseCapiKey(struct DRR_ROAMING_TOKEN const * __ptr64,struct _CAPIBLOB const * __ptr64 * __ptr64)" ?_drr_ParseCapiKey@@YAJPEBUDRR_ROAMING_TOKEN@@PEAPEBU_CAPIBLOB@@@Z
0x18000A7F8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000A790: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800087B1: free
0x18000A550: DSROLE_NULL_THUNK_DATA
0x18000A7F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800021C8: "public: long __cdecl ATL::CAtlComModule::UnregisterServer(int,struct _GUID const * __ptr64) __ptr64" ?UnregisterServer@CAtlComModule@ATL@@QEAAJHPEBU_GUID@@@Z
0x180008AF0: "__cdecl purecall" _purecall
0x18000A7E0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1800074E0: "__cdecl drr_IsGuidString" _drr_IsGuidString
0x18000AD90: "Microsoft Enhanced Cryptographic" ??_C@_1FO@GBKEFGLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAd?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc@
0x180002C20: "public: virtual long __cdecl CCCAPIProvider::SetDpapiMkGuids(struct GUID_LIST * __ptr64) __ptr64" ?SetDpapiMkGuids@CCCAPIProvider@@UEAAJPEAUGUID_LIST@@@Z
0x18000B208: "Software" ??_C@_1BC@EAHCMADO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x180004A10: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000A748: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180008E96: memcmp
0x180004520: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectCached<class ATL::CComClassFactory> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000AC30: "__cdecl GUID_0002e012_0000_0000_c000_000000000046" _GUID_0002e012_0000_0000_c000_000000000046
0x18000A948: "__cdecl _imp_bsearch_s" __imp_bsearch_s
0x18000B4A0: "Microsoft\Crypto\DSS\" ??_C@_1CM@HFDDEHEE@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?2?$AAD?$AAS?$AAS?$AA?2?$AA?$AA@
0x18000C078: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000A6F8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180004F9C: "private: void __cdecl ATL::CTempBuffer<unsigned short,1024,class ATL::CCRTAllocator>::FreeHeap(void) __ptr64" ?FreeHeap@?$CTempBuffer@G$0EAA@VCCRTAllocator@ATL@@@ATL@@AEAAXXZ
0x18000E608: "long (__cdecl* __ptr64 ATL::_pPerfUnRegFunc)(void)" ?_pPerfUnRegFunc@ATL@@3P6AJXZEA
0x180007DC0: DRR_GetUserAppDataPath
0x18000A570: "__cdecl _imp_RegisterTypeLib" __imp_RegisterTypeLib
0x18000A5D0: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x18000B598: WPP_95596e7e712e3fe1e6dccd93cce9e794_Traceguids
0x18000A8C0: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x180001790: "public: virtual long __cdecl ATL::CAtlModule::GetGITPtr(struct IGlobalInterfaceTable * __ptr64 * __ptr64) __ptr64" ?GetGITPtr@CAtlModule@ATL@@UEAAJPEAPEAUIGlobalInterfaceTable@@@Z
0x18000A590: "__cdecl _imp_SysStringLen" __imp_SysStringLen
0x18000A930: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000A980: "__cdecl _imp_strnlen" __imp_strnlen
0x18000A9D0: ntdll_NULL_THUNK_DATA
0x180007A24: "__cdecl drr_CreateRoamingToken" _drr_CreateRoamingToken
0x18000A8E8: "__cdecl _imp_memcpy" __imp_memcpy
0x18000A8A0: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x18000BFB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000245C: WPP_SF_DDDD
0x18000B2C0: "Microsoft Base Smart Card Crypto" ??_C@_1FE@NOLICOFB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAB?$AAa?$AAs?$AAe?$AA?5?$AAS?$AAm?$AAa?$AAr?$AAt?$AA?5?$AAC?$AAa?$AAr?$AAd?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo@
0x18000A518: "__cdecl _imp_CertFindExtension" __imp_CertFindExtension
0x18000A898: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x18000E058: "__cdecl _security_cookie" __security_cookie
0x18000A7A0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180008EF0: "__cdecl alloca_probe" _alloca_probe
0x18000A6B8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000406C: "private: unsigned long __cdecl CCCAPIProvider::GetLastChangeTime(struct _FILETIME * __ptr64,unsigned char * __ptr64) __ptr64" ?GetLastChangeTime@CCCAPIProvider@@AEAAKPEAU_FILETIME@@PEAE@Z
0x18000A6D0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180004900: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CCCAPIProvider>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$CComObject@VCCCAPIProvider@@@ATL@@UEAAPEAXI@Z
0x18000BFC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000A5F0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x18000E000: "__cdecl _objMap_CCCAPIProvider" __objMap_CCCAPIProvider
0x18000B320: "Microsoft Platform Crypto Provid" ??_C@_1EG@LKLLOCAK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd@
0x18000A548: "__cdecl _imp_DsRoleFreeMemory" __imp_DsRoleFreeMemory
0x18000A580: "__cdecl _imp_SysAllocString" __imp_SysAllocString
0x18000A7B0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18000E7C8: "__cdecl _onexitbegin" __onexitbegin
0x18000B090: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x18000AF70: "Module" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x180007F70: CompareGUIDs
0x18000B130: "AppID" ??_C@_1M@EJNEECMJ@?$AAA?$AAp?$AAp?$AAI?$AAD?$AA?$AA@
0x18000A620: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000A768: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x1800066C0: "public: long __cdecl ATL::CAtlModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CAtlModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18000B180: "FileType" ??_C@_1BC@NKMMNMGL@?$AAF?$AAi?$AAl?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x18000C168: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000A7D8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000AC00: CLSID_StdGlobalInterfaceTable
0x180008C04: "__cdecl _security_init_cookie" __security_init_cookie
0x18000AC80: "\Implemented Categories" ??_C@_1DA@BIHALFED@?$AA?2?$AAI?$AAm?$AAp?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AAe?$AAd?$AA?5?$AAC?$AAa?$AAt?$AAe?$AAg?$AAo?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000BF4C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000A8E0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18000A640: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x18000A2D0: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x18000A5E0: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18000B198: "Interface" ??_C@_1BE@EKPAFMCP@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x18000A968: "__cdecl _imp_malloc" __imp_malloc
0x18000A940: "__cdecl _imp__purecall" __imp__purecall
0x18000A508: ADVAPI32_NULL_THUNK_DATA
0x180002B80: "public: virtual long __cdecl CCCAPIProvider::CloseStore(void) __ptr64" ?CloseStore@CCCAPIProvider@@UEAAJXZ
0x18000A658: "__cdecl _imp_WriteFile" __imp_WriteFile
0x18000A6A0: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x18000A660: "__cdecl _imp_GetFileTime" __imp_GetFileTime
0x180005104: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEAGPEAPEAG@Z
0x180008800: "__cdecl _report_gsfailure" __report_gsfailure
0x18000A888: api-ms-win-core-timezone-l1-1-0_NULL_THUNK_DATA
0x18000A840: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180008700: "__cdecl onexit" _onexit
0x18000AF98: "REGISTRY" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x180006E9C: "int __cdecl _drr_ConvertSzToWsz(unsigned short * __ptr64 * __ptr64,char const * __ptr64,long)" ?_drr_ConvertSzToWsz@@YAHPEAPEAGPEBDJ@Z
0x18000A950: "__cdecl _imp_qsort_s" __imp_qsort_s
0x18000E7B8: "__cdecl _native_startup_state" __native_startup_state
0x18000790C: DRR_WriteFile
0x18000E5F8: "class ATL::CAtlModule * __ptr64 __ptr64 ATL::_pAtlModule" ?_pAtlModule@ATL@@3PEAVCAtlModule@1@EA
0x18000A128: "const ATL::CRegObject::`vftable'" ??_7CRegObject@ATL@@6B@
0x18000AFE0: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18000A710: "__cdecl _imp_LoadResource" __imp_LoadResource
0x18000A528: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x180004050: "public: virtual unsigned long __cdecl ATL::CRegObject::Release(void) __ptr64" ?Release@CRegObject@ATL@@UEAAKXZ
0x18000B0A8: "HKEY_PERFORMANCE_DATA" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x180004900: "public: virtual void * __ptr64 __cdecl ATL::CComObject<class CCCAPIProvider>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$CComObject@VCCCAPIProvider@@@ATL@@UEAAPEAXI@Z
0x18000ABA8: "Val" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x18000A760: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000B140: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180001620: DllRegisterServer
0x180006514: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x18000A578: "__cdecl _imp_SysFreeString" __imp_SysFreeString
0x18000A310: "protected: static unsigned short const * __ptr64 const * const ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1QBQEBGB
0x18000C0DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000A1F0: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x18000AD48: ".tlb" ??_C@_19ILOCMLCJ@?$AA?4?$AAt?$AAl?$AAb?$AA?$AA@
0x18000BE88: "__cdecl _pobjMapEntryFirst" __pobjMapEntryFirst
0x180006994: WPP_SF_SD
0x180006A1C: WPP_SF_sD
0x18000A990: "__cdecl _imp_free" __imp_free
0x180008B70: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000A860: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180006A94: WPP_SF_sS
0x180006C5C: "__cdecl drr_GetPathByType" _drr_GetPathByType
0x18000A960: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x18000A758: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x18000A650: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x18000BF9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18000A850: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180007700: DRR_InsertGrowableArray
0x18000C0B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180008EAE: memset
0x18000C1A4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180007998: DRR_ReadFile
0x18000A688: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]