Generated by JEB on 2019/08/01

PE: C:\Windows\System32\ci.dll Base=0x1C0000000 SHA-256=7BC6DABA61A63ECEF5BFBD73DD595707D881CDB9FD73C0998900BE3E0B24082F
PDB: ci.pdb GUID={16AFEAF1-0CE1-B5AD-CCB57F96B6FA2E4F} Age=1

2802 located named symbols:
0x1C002CCE8: CiCatalogLoadComplete
0x1C002B920: g_SiPolicyTypeInfo
0x1C002F670: "NoRevalidationUponRefreshValue" ??_C@_1DO@LPBBDPCN@?$AAN?$AAo?$AAR?$AAe?$AAv?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAo?$AAn?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AAV?$AAa?$AAl?$AAu?$AAe?$AA?$AA@
0x1C002D158: CiSetFileCacheStart
0x1C003657C: g_CiDeveloperMode
0x1C000A540: SymCryptSha512Result
0x1C0010EBC: SymCryptShortWeierstrassFillScratchSpaces
0x1C001E620: SymCryptFdefMontgomeryReduce1024Asm
0x1C000A660: SymCryptSha384Result
0x1C002E5A8: "1.3.6.1.4.1.311.10.3.37" ??_C@_0BI@GEJMFAEL@1?43?46?41?44?41?4311?410?43?437?$AA@
0x1C0001220: "__cdecl TlgDefineProvider_annotation__Tlgg_CiAuditTraceLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_CiAuditTraceLoggingProviderProv
0x1C00AEB50: SbLoadFile
0x1C0048C00: CipFileHashSearchCompareRoutineSHA1
0x1C00183A0: ext_ms_win_ci_xbox_l1_1_0_XciValidateImageHeader
0x1C002FBC0: "PackageStatus" ??_C@_1BM@KAKBJGDH@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C00418A0: CipPostBootWorker
0x1C003D528: "__cdecl _imp_ZwWriteFile" __imp_ZwWriteFile
0x1C0040450: CiInitializePhase2
0x1C0007BA4: KappxpFindSubString
0x1C003D2E0: "__cdecl _imp_ZwSetInformationThread" __imp_ZwSetInformationThread
0x1C0055DF8: CiLogSignatureInformation
0x1C00BBD50: "unsigned char const * const rgbTestRoot1_PubKeyInfo" ?rgbTestRoot1_PubKeyInfo@@3QBEB
0x1C003D148: "__cdecl _imp_KeExpandKernelStackAndCalloutEx" __imp_KeExpandKernelStackAndCalloutEx
0x1C002D250: "$Kernel.Purge.ESBCache" ??_C@_0BH@NDEOFKMF@$Kernel?4Purge?4ESBCache?$AA@
0x1C00BC920: "unsigned char const * const rgbTestRoot0_PubKeyInfo" ?rgbTestRoot0_PubKeyInfo@@3QBEB
0x1C002FED0: PEAUTH_BEGIN_INITIALIZATION
0x1C002A220: SymCryptParallelSha256Algorithm_default
0x1C0062784: I_MinCryptGetCommonName
0x1C005DAD0: CiHvciVerifyPageHashInCatalogs
0x1C0043A54: CipRegisterAcPolicySigners
0x1C0017C08: SymCryptScsTableLoadC
0x1C00B1069: g_MobilePlatform
0x1C002CF28: CiGetFileCacheComplete
0x1C000F7BC: SymCryptModElementSetValueUint32
0x1C004AC90: CipRegisterDeveloperDynamicSigners
0x1C0030868: " `�H
e" ??_C@_0O@JIHDKIPB@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AC?$AF?$AA?$AA@
0x1C003D1A0: "__cdecl _imp_FsRtlQueryKernelEaFile" __imp_FsRtlQueryKernelEaFile
0x1C002FBE0: "BinaryName" ??_C@_1BG@JLPNDPHA@?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C0030450: EfiCertRsa2048Guid
0x1C0036CA0: g_CiWimListLock
0x1C00088DC: PEAuthGetParameters
0x1C00010B0: RtlStringCchCatW
0x1C003D208: "__cdecl _imp_IoGetDeviceAttachmentBaseRef" __imp_IoGetDeviceAttachmentBaseRef
0x1C0009BD0: SbIsSupplementalPolicyBoundToDevice
0x1C0036540: g_CiParallelPageHashContextsAvailableMask
0x1C003D5B8: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C00B1068: g_IgnoreFlightSigningEKU
0x1C0015E70: SymCryptFdefModSetPostGeneric
0x1C0041840: CiGetPEInformation
0x1C0028AB0: SymCryptFdef369RawAddAsm
0x1C0028F45: "__cdecl local_unwind" _local_unwind
0x1C001817D: ZwOpenFile
0x1C003D4A0: "__cdecl _imp_RtlQueryPackageClaims" __imp_RtlQueryPackageClaims
0x1C006B6F8: SIPolicyVerifyPolicyIsWindowsSigned
0x1C000A6F4: SymCryptSha512AppendBlocks_ull
0x1C002C8A8: "DebugComponent" ??_C@_1BO@PGNFAIGC@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?$AA@
0x1C0017284: SymCryptFdefConditionalSwap
0x1C002EEB8: "RvkSi" ??_C@_1M@OOIIHGOB@?$AAR?$AAv?$AAk?$AAS?$AAi?$AA?$AA@
0x1C005819C: CipMinCryptToSigningLevel
0x1C002E118: "CI\Scenarios\14" ??_C@_1CA@JPOFBBMI@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA4?$AA?$AA@
0x1C002BCE0: g_AnyFileWildCardString
0x1C006BD78: KappxNotifyIntegrityFailureInPackagedProcess
0x1C0016AE0: SymCryptFdefModSquareMontgomeryMulx
0x1C002CE88: CiRevokedImageLoadedInDebugger
0x1C002CD98: SiPolicyPerformance
0x1C0050DC0: CipCalculateHeaderHash
0x1C00360B8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C003D238: "__cdecl _imp_RtlUnicodeToUTF8N" __imp_RtlUnicodeToUTF8N
0x1C002CCA8: CiValidateImageHeaderStart
0x1C002D4C8: rgbOID_KMOD_REVOCATION_LIST
0x1C0059DFC: CiSerializePolicyFileData
0x1C003D5C0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C002CFC8: WhqlEnforcementFailureExempted
0x1C005720C: CipValidateSigningPolicyForScenario
0x1C0060200: I_MinCryptFindSignerCertificateByIssuerAndSerialNumber
0x1C002CE48: CiImageFileHashSetCatalogHint
0x1C004FB48: CipBuildSigningInformation
0x1C0065298: SIPolicySysDevEvWhqlEnabled
0x1C00183B0: ext_ms_win_ci_xbox_l1_1_0_XciSupported
0x1C0051C0C: CiSanitizeFileName
0x1C003D300: "__cdecl _imp_PsGetCurrentServerSilo" __imp_PsGetCurrentServerSilo
0x1C004B8F8: CiInitializeParallelHashingContexts
0x1C005B670: CipWriteUnlockTokenToSystemPartition
0x1C002F760: "* %wZ violated SI policy, will " ??_C@_1IA@PCIJLLHG@?$AA?$CK?$AA?5?$AA?5?$AA?$CF?$AAw?$AAZ?$AA?5?$AAv?$AAi?$AAo?$AAl?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAS?$AAI?$AA?5?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?0?$AA?5?$AAw?$AAi?$AAl?$AAl?$AA?5@
0x1C003D448: "__cdecl _imp_ZwReadFile" __imp_ZwReadFile
0x1C0001258: CiInitializeGlobalState
0x1C002D9A0: "\Registry\Machine\OSBOOT\SYSTEM\" ??_C@_1MG@HNIFHIHF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAO?$AAS?$AAB?$AAO?$AAO?$AAT?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2@
0x1C0016FA0: SymCryptFdef369ModSubGeneric
0x1C0036B00: g_StoreLock
0x1C003D088: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x1C003D480: "__cdecl _imp_FsRtlReleaseFileNameInformation" __imp_FsRtlReleaseFileNameInformation
0x1C0036D50: g_CiSystemProcess
0x1C0036D28: g_CipIsPlatformManifestActive
0x1C003D3B0: "__cdecl _imp_ZwEnumerateValueKey" __imp_ZwEnumerateValueKey
0x1C002DB48: g_EnclaveEncodedOidBuffer
0x1C0028BB0: SymCryptFdef369RawMulAsm
0x1C002F488: "DriverSiPolicyVersion" ??_C@_1CM@FGGCIMGD@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00360D4: g_CiMinimumHashAlgorithm
0x1C003D598: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C002D2B8: "1.3.6.1.5.5.7.3.3" ??_C@_0BC@ECLGBJGA@1?43?46?41?45?45?47?43?43?$AA@
0x1C002F958: "OriginalFileName" ??_C@_1CC@GIEPEENO@?$AAO?$AAr?$AAi?$AAg?$AAi?$AAn?$AAa?$AAl?$AAF?$AAi?$AAl?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C006EEC0: I_PEProcessNotify
0x1C005B858: CiSetUnlockInformation
0x1C00430D0: CiSetInformation
0x1C003D7D0: "__cdecl _IMPORT_DESCRIPTOR_ext-ms-win-ntos-ksigningpolicy-l1-1-0" __IMPORT_DESCRIPTOR_ext-ms-win-ntos-ksigningpolicy-l1-1-0
0x1C002DD00: "* This break indicates this bina" ??_C@_0EB@JAAEHLNC@?$CK?5This?5break?5indicates?5this?5bina@
0x1C002D4A0: rgbPACKAGE_NAME_AUTHENTICATED_ATTRIBUTE
0x1C0052660: CiInstrumentHstiInfo
0x1C0029050: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C005EAB8: HashKComputeMemoryHash
0x1C002CA48: "TestFrameworks" ??_C@_1BO@OPDHLLEP@?$AAT?$AAe?$AAs?$AAt?$AAF?$AAr?$AAa?$AAm?$AAe?$AAw?$AAo?$AAr?$AAk?$AAs?$AA?$AA@
0x1C002CD68: CipLoadWeakCryptoPoliciesFailed
0x1C002EA10: "UnlockIDCopy" ??_C@_1BK@GOIOHIJD@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAI?$AAD?$AAC?$AAo?$AAp?$AAy?$AA?$AA@
0x1C0030410: EfiCertSha256Guid
0x1C0030790: SymCryptSha512InitialState
0x1C0054E94: CipGetEnterpriseUmciFileHash
0x1C0036DD8: g_CiHvciDisallowedImages
0x1C0030710: SymCryptSha384InitialState
0x1C005E6C0: CiHvciTransformStatusSuccess
0x1C002DA70: "\Registry\Machine\SYSTEM\Current" ??_C@_1LI@KEDGNAHL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C002E8B0: "$Kernel.Smartlocker.OriginClaim" ??_C@_0CA@NIOIDHGE@$Kernel?4Smartlocker?4OriginClaim?$AA@
0x1C00432F4: CipIsAcPolicy
0x1C0060F9C: MinCrypK_Initialize
0x1C002DFE8: "scrrun.dll" ??_C@_1BG@DFADLEPK@?$AAs?$AAc?$AAr?$AAr?$AAu?$AAn?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C002E250: "CI\Scenarios\2" ??_C@_1BO@FJCNABOH@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA2?$AA?$AA@
0x1C005FEF4: MinCryptGetHashAlgorithmFromWinCertificate
0x1C002CDC8: CiValidatePageHashStart
0x1C0041DC0: CipOpenFileOnCleanStackCallout
0x1C002E8D0: "SMARTLOCKER://ORIGINCLAIM" ??_C@_1DE@EPPICNLN@?$AAS?$AAM?$AAA?$AAR?$AAT?$AAL?$AAO?$AAC?$AAK?$AAE?$AAR?$AA?3?$AA?1?$AA?1?$AAO?$AAR?$AAI?$AAG?$AAI?$AAN?$AAC?$AAL?$AAA?$AAI?$AAM?$AA?$AA@
0x1C0030BB8: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x1C00B2048: "MSGRL" ??_C@_1M@MLBJDHEI@?$AAM?$AAS?$AAG?$AAR?$AAL?$AA?$AA@MBDGBPJL@
0x1C002E558: "1.3.6.1.4.1.311.10.3.21" ??_C@_0BI@DDAEJNPK@1?43?46?41?44?41?4311?410?43?421?$AA@
0x1C002E4F8: "1.3.6.1.4.1.311.10.3.5" ??_C@_0BH@BJBPIJJA@1?43?46?41?44?41?4311?410?43?45?$AA@
0x1C002FBB0: "Path" ??_C@_19NHABCBNP@?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1C003D700: "__cdecl _imp_PsTerminateSystemThread" __imp_PsTerminateSystemThread
0x1C005ABC8: CiRegisterSiloMonitor
0x1C002C730: "Kernel_FlightSignedNotBefore" ??_C@_1DK@ILEFDDAP@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAF?$AAl?$AAi?$AAg?$AAh?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AAN?$AAo?$AAt?$AAB?$AAe?$AAf?$AAo?$AAr?$AAe?$AA?$AA@
0x1C00BCC50: "unsigned char const * const rgbMFDMDTestRoot_PubKeyInfo" ?rgbMFDMDTestRoot_PubKeyInfo@@3QBEB
0x1C003D3D0: "__cdecl _imp_PsIsProtectedProcess" __imp_PsIsProtectedProcess
0x1C0049840: CiReloadCatalogsForHvci
0x1C0016D40: SymCryptFdefModPreGetMontgomery256
0x1C002C440: SymCryptSha384OidList
0x1C0030B20: "__stdcall _xmm" __xmm@00000009000000070000000100000003
0x1C004F3E4: CipValidateDataMappedFileWithContext
0x1C002C460: SymCryptSha512OidList
0x1C003D680: "__cdecl _imp_ZwEnumerateKey" __imp_ZwEnumerateKey
0x1C002FC10: "\Registry\Machine\Software\Micro" ??_C@_1KC@OALGIEOE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C003D1E0: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C003D090: "__cdecl _imp_RpcAsyncCancelCall" __imp_RpcAsyncCancelCall
0x1C0048C00: CipFileHashSortCompareRoutineSHA1
0x1C002CDA8: CiImagePageHashFoundInHintCatalog
0x1C002F2B0: "Kernel_WinSiStatus" ??_C@_1CG@BCEOPFOI@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAW?$AAi?$AAn?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C003D518: "__cdecl _imp_ZwUpdateWnfStateData" __imp_ZwUpdateWnfStateData
0x1C0013CE0: SymCryptTwistedEdwardsIsZero
0x1C002ED20: cpuidBitInfo
0x1C0040130: CiInitialize
0x1C0030750: SymCryptSha512KATAnswer
0x1C003D1F0: "__cdecl _imp_PsAttachSiloToCurrentThread" __imp_PsAttachSiloToCurrentThread
0x1C0062CB0: I_MincryptRebaseChainInfo
0x1C002D118: CiReloadCatalogsStart
0x1C006E760: I_PEVerifyCertificates
0x1C0061448: MincrypK_TestPKCS1SignVerify
0x1C003D468: "__cdecl _imp_FsRtlGetFileNameInformation" __imp_FsRtlGetFileNameInformation
0x1C000F1CC: SymCryptIntDivPow2
0x1C003D730: "__cdecl _imp_ExAllocateTimer" __imp_ExAllocateTimer
0x1C003D540: "__cdecl _imp_MmProbeAndLockPages" __imp_MmProbeAndLockPages
0x1C00110C0: SymCryptMontgomerySetDistinguished
0x1C00686F8: SIPolicyGetOptions
0x1C0016B80: SymCryptFdefModInvMontgomery
0x1C0053FF4: CiInstrumentWindowsLockdownModeChange
0x1C00BB550: "unsigned char const * const rgbMicrosoftThirdPartyMarketplaceRoot_Name" ?rgbMicrosoftThirdPartyMarketplaceRoot_Name@@3QBEB
0x1C002A920: IndirectDataEncodedOIDBlob
0x1C000BD3C: SymCryptSha1
0x1C003D4C0: "__cdecl _imp_PsGetPermanentSiloContext" __imp_PsGetPermanentSiloContext
0x1C002E330: "CI\Scenarios\13" ??_C@_1CA@CDCCJHB@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA?$AA@
0x1C0005E90: SymCryptSha256AppendBlocks
0x1C002EE40: "Si" ??_C@_15ICAJJMIM@?$AAS?$AAi?$AA?$AA@
0x1C003D210: "__cdecl _imp_IoGetDiskDeviceObject" __imp_IoGetDiskDeviceObject
0x1C0041E00: CipPolicyPromotionCallback
0x1C000E07C: SymCryptRsakeySetValue
0x1C00360F0: g_PEAuthStateVariables
0x1C002E910: "SMARTLOCKER://SMARTSCREENORIGINC" ??_C@_1EK@CPMNILBM@?$AAS?$AAM?$AAA?$AAR?$AAT?$AAL?$AAO?$AAC?$AAK?$AAE?$AAR?$AA?3?$AA?1?$AA?1?$AAS?$AAM?$AAA?$AAR?$AAT?$AAS?$AAC?$AAR?$AAE?$AAE?$AAN?$AAO?$AAR?$AAI?$AAG?$AAI?$AAN?$AAC@
0x1C005294C: CiLogCatalogReload
0x1C000EA30: SymCryptEcurveFree
0x1C0017050: SymCryptFdef369ModMulMontgomery
0x1C0036C70: g_SiSessionStore
0x1C00628AC: MincryptFreePolicyInfo
0x1C003D3A0: "__cdecl _imp_ExEnterCriticalRegionAndAcquireResourceExclusive" __imp_ExEnterCriticalRegionAndAcquireResourceExclusive
0x1C003D678: "__cdecl _imp_RtlUnicodeStringToAnsiString" __imp_RtlUnicodeStringToAnsiString
0x1C000D190: SymCryptMd5Result
0x1C003D388: "__cdecl _imp_ExReleaseResourceAndLeaveCriticalRegion" __imp_ExReleaseResourceAndLeaveCriticalRegion
0x1C0005ECC: SymCryptDetectCpuFeaturesByCpuid
0x1C0002C48: SymCryptFatalEnvWindowsKernelmodeWin8_1nLater
0x1C003D7BC: "__cdecl _IMPORT_DESCRIPTOR_HAL" __IMPORT_DESCRIPTOR_HAL
0x1C0045074: CipGetFileCache
0x1C003D380: "__cdecl _imp_ExEnterCriticalRegionAndAcquireResourceShared" __imp_ExEnterCriticalRegionAndAcquireResourceShared
0x1C000D160: SymCryptMd5Append
0x1C00361D4: g_CiMemoryTrimScheduled
0x1C0069B70: SIPolicySecureSettingSearchCompare
0x1C003D6E0: "__cdecl _imp_NtSetInformationThread" __imp_NtSetInformationThread
0x1C003D6C8: "__cdecl _imp_wcschr" __imp_wcschr
0x1C003D520: "__cdecl _imp_RtlDeleteRegistryValue" __imp_RtlDeleteRegistryValue
0x1C0068058: SIPolicyUnpackPolicySignersEx
0x1C002AAB0: PETrustedBlob
0x1C0042A2C: CipHasPerAppRules
0x1C00249E0: SymCryptFdefMontgomeryReduceMulx
0x1C0068D34: SIPolicyGetOriginalFilenameAndVersionFromImage
0x1C0028B50: SymCryptFdef369MaskedCopyAsm
0x1C003D330: "__cdecl _imp_ExConvertExclusiveToSharedLite" __imp_ExConvertExclusiveToSharedLite
0x1C0064E18: SIPolicyValidatePolicyEkuBuffer
0x1C002AB70: g_EnclaveEncodedOid
0x1C003D1C0: "__cdecl _imp_RtlEqualString" __imp_RtlEqualString
0x1C002F4B8: "DriverSiPolicyUpdateSigners" ??_C@_1DI@HBNNJEFM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C005AF6C: CipGetFileInfoFromSystemCodeIntegrityVerificationInformation
0x1C004C840: CiValidateDynamicCodePages
0x1C0001008: "__cdecl TlgWrite" _TlgWrite
0x1C00369F4: g_trustedOriginClaimId
0x1C003D6F8: "__cdecl _imp_KeSetPriorityThread" __imp_KeSetPriorityThread
0x1C0002D40: SymCryptParallelSha256Result2
0x1C0036CB0: g_CipRuntimeSignersList
0x1C003D7A0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0002CB0: SymCryptParallelSha256Result1
0x1C004F940: CiValidateFileAsImageType
0x1C00360C0: g_DbgComponent
0x1C002DEB8: "Error: Low Resources" ??_C@_1CK@FCAFFFMA@?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?5?$AAL?$AAo?$AAw?$AA?5?$AAR?$AAe?$AAs?$AAo?$AAu?$AAr?$AAc?$AAe?$AAs?$AA?$AA@
0x1C00160EC: SymCryptFdefModSetRandomGeneric
0x1C0036D00: g_CipRuntimeSignersLock
0x1C003D298: "__cdecl _imp_ZwQueryDirectoryObject" __imp_ZwQueryDirectoryObject
0x1C0056508: CipMitigatePPLBypassThroughInterpreters
0x1C003D780: "__cdecl _imp_ExDeletePagedLookasideList" __imp_ExDeletePagedLookasideList
0x1C006C748: I_PESaveCertificates
0x1C003D590: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C002D0E8: SiPolicyWinFailureAudit
0x1C00132A0: SymCryptMontgomeryDoubleAndAdd
0x1C002F548: "DriverSiPolicy.p7b" ??_C@_1CG@NDKNICDL@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C002C770: "\Registry\MACHINE\System\Current" ??_C@_1HI@KPKFFDCK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00482B8: I_LocateCatalogPageHashesBlob
0x1C003D250: "__cdecl _imp_FsRtlSetKernelEaFile" __imp_FsRtlSetKernelEaFile
0x1C002F218: "WinSiPolicyVersion" ??_C@_1CG@DAHIIJOI@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0025680: SymCryptFdefRawMulMulx1024
0x1C0065C9C: SIPolicyUninitialize
0x1C00BAF20: "1.3.6.1.5.5.7.3.3" ??_C@_0BC@ECLGBJGA@1?43?46?41?45?45?47?43?43?$AA@LBKOJDO@
0x1C0030898: " `�H
e" ??_C@_0M@DAKPPJGP@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AD?$AA@
0x1C003D108: "__cdecl _imp_ExAcquirePushLockSharedEx" __imp_ExAcquirePushLockSharedEx
0x1C00629CC: MincryptCopyPolicyInfo
0x1C0013FB0: SymCryptTwistedEdwardsDouble
0x1C0002DB0: SymCryptParallelSha256ResultDone
0x1C00BBA50: "unsigned char const * const rgbMicrosoftRoot5_PubKeyInfo" ?rgbMicrosoftRoot5_PubKeyInfo@@3QBEB
0x1C000959C: SbpFillPolicyDescriptor
0x1C002F980: "\VarFileInfo\Translation" ??_C@_1DC@HCLBMGIA@?$AA?2?$AAV?$AAa?$AAr?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AAT?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C002FF10: PEAUTH_END_COMPONENT_LOAD
0x1C00573E4: CiValidateAndSetRevocationList
0x1C006D60C: I_PECheckMincryptPolicy
0x1C003D2B0: "__cdecl _imp_ZwQueryInformationThread" __imp_ZwQueryInformationThread
0x1C002F9B8: "\StringFileInfo\%04x%04x\" ??_C@_1DE@JAJGJDNB@?$AA?2?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAF?$AAi?$AAl?$AAe?$AAI?$AAn?$AAf?$AAo?$AA?2?$AA?$CF?$AA0?$AA4?$AAx?$AA?$CF?$AA0?$AA4?$AAx?$AA?2?$AA?$AA@
0x1C002C4A0: SymCryptSha256OidList
0x1C003D120: "__cdecl _imp_PsGetProcessSectionBaseAddress" __imp_PsGetProcessSectionBaseAddress
0x1C0036AB8: g_pStore
0x1C0047420: I_FreeCatalogData
0x1C003D420: "__cdecl _imp_wcsstr" __imp_wcsstr
0x1C003D150: "__cdecl _imp_ExSystemExceptionFilter" __imp_ExSystemExceptionFilter
0x1C002F4F0: "System32\CodeIntegrity\DriverSiP" ??_C@_1FE@POMODNJE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP@
0x1C002F1A0: "\Boot\UpdateSkuSiPolicy.p7b" ??_C@_1DI@JIPOIAFC@?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C000F948: SymCryptModExp
0x1C005BA54: CiGetUnlockInformation
0x1C002EBD8: SymCryptSha256KATAnswer
0x1C0043D08: CipVerifyFileCache
0x1C0018111: DbgPrintEx
0x1C0018159: ExAllocatePoolWithTag
0x1C005569C: CiLogWhqlSettingsEvent
0x1C0042C30: CipCheckLicensing
0x1C00361D0: g_CiTestFlags
0x1C00630B0: MinAsn1ExtractContent
0x1C0036280: g_CiValidationLookasideList
0x1C005B5F0: CipGetSupplementalPolicyPathOnExpandedStackCallout
0x1C000F840: SymCryptModDivPow2
0x1C002D840: "AllowDevelopmentWithoutDevLicens" ??_C@_1EE@BPAKLPIP@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAD?$AAe?$AAv?$AAe?$AAl?$AAo?$AAp?$AAm?$AAe?$AAn?$AAt?$AAW?$AAi?$AAt?$AAh?$AAo?$AAu?$AAt?$AAD?$AAe?$AAv?$AAL?$AAi?$AAc?$AAe?$AAn?$AAs@
0x1C002CAB8: "EFI\Microsoft\Boot\" ??_C@_1CI@NDOHHHKA@?$AAE?$AAF?$AAI?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
0x1C002CE28: CiPolicyRefreshFinished
0x1C000FA6C: SymCryptEcDsaVerify
0x1C003D418: "__cdecl _imp_PsGetProcessSignatureLevel" __imp_PsGetProcessSignatureLevel
0x1C0016ED0: SymCryptFdefModSquareMontgomery1024
0x1C002E2B0: "CI\Scenarios\7" ??_C@_1BO@GOPDPBNF@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA7?$AA?$AA@
0x1C002DC08: "\WINDOWS\SYSTEM32\RUNDLL32.EXE" ??_C@_1DO@GKJHPJFA@?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAR?$AAU?$AAN?$AAD?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x1C003D018: "__cdecl _imp_XciQueryInformation" __imp_XciQueryInformation
0x1C00110C0: SymCryptTwistedEdwardsSetDistinguished
0x1C003D408: "__cdecl _imp_EtwActivityIdControl" __imp_EtwActivityIdControl
0x1C005B204: CipGetVerificationInformation
0x1C0063198: MinAsn1ExtractValues
0x1C003D350: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C003D278: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C002CC10: "ServicingStack-License-Support-M" ??_C@_1HI@BFDOGHE@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AAS?$AAt?$AAa?$AAc?$AAk?$AA?9?$AAL?$AAi?$AAc?$AAe?$AAn?$AAs?$AAe?$AA?9?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AA?9?$AAM@
0x1C00515A0: CiReleaseContext
0x1C002CE08: CiGetFileCacheStart
0x1C0001550: wil_details_SetPropertyCacheUsageCallback
0x1C000BDB0: SymCryptSha1Init
0x1C002CF38: CiImageFileHashNotFoundDebuggerAttached
0x1C0013260: SymCryptMontgomeryIsZero
0x1C002C6A8: "\program files" ??_C@_1BO@EKCMMNOJ@?$AA?2?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x1C00AE9F0: TlgUnregisterAggregateProvider
0x1C0016DC0: SymCryptFdefModulusInitMontgomery256
0x1C002EBC0: WNF_CI_SMODE_CHANGE
0x1C003D4F8: "__cdecl _imp_PsDereferenceSiloContext" __imp_PsDereferenceSiloContext
0x1C0036504: g_CatalogListModifierCount
0x1C004B830: CipComparePageHashes
0x1C000F18C: SymCryptIntSubUint32
0x1C003D658: "__cdecl _imp_isdigit" __imp_isdigit
0x1C002CC88: CiRevokedImageNotLoaded
0x1C0057C3C: CipUnregisterSigningInformationEx
0x1C005E6CC: CipCompareHvciNodes
0x1C0054904: CipQueryProcessName
0x1C004A1EC: CiReadFile
0x1C0057960: CiUnregisterSigningInformation
0x1C0054558: CiLogStatusEventWithCorrelationId
0x1C003D690: "__cdecl _imp_RtlGetPersistedStateLocation" __imp_RtlGetPersistedStateLocation
0x1C002CE38: CiSetFileCacheComplete
0x1C002A250: SymCryptSha256Algorithm_default
0x1C0060C98: MinCryptParseRevocationList
0x1C003D240: "__cdecl _imp_FsRtlKernelFsControlFile" __imp_FsRtlKernelFsControlFile
0x1C006C9F4: PEPerformInitializationChecks
0x1C0047DB0: I_ReloadCatalog
0x1C004969C: CipCompareCatalogListEntryByName
0x1C0036C68: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUzkknlwvoUpzkkcUoryUlyquivUznwGEUkxsOlyq@KAppxLib" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUzkknlwvoUpzkkcUoryUlyquivUznwGEUkxsOlyq@KAppxLib
0x1C005E350: CiHvciSetFileVersionInformation
0x1C00183A0: ext_ms_win_ci_xbox_l1_1_0_XciInitialize
0x1C002FF40: "\SystemRoot" ??_C@_1BI@OMNCDEIM@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1C0063424: MinAsn1FindExtensionMatchingValue
0x1C00BBC78: "unsigned char const * const rgbMFDMDTestRoot_Name" ?rgbMFDMDTestRoot_Name@@3QBEB
0x1C003D708: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x1C00410D8: CipCheckConfigOptions
0x1C0029080: memcpy
0x1C006CF34: PESetInitialState
0x1C000DBF4: SymCryptHashAppendInternal
0x1C0067220: SIPolicyValidateImageInternal
0x1C0036AA8: g_PEAuthConfigOptions
0x1C00617D0: MinCryptVerifyCertificateWithPolicy2
0x1C002CD48: CiUnsignedDriverLoaded
0x1C0006BD0: SIPolicyParseSigningScenarios
0x1C00072FC: SIPolicyConvertFromDeprecatedSignerToSigner
0x1C0011710: SymCryptShortWeierstrassDouble
0x1C003D5D0: "__cdecl _imp_KdDebuggerNotPresent" __imp_KdDebuggerNotPresent
0x1C0004690: SymCryptSha256Result
0x1C0017454: SymCryptFdefRawIsLessThan
0x1C003D600: "__cdecl _imp_ZwSetSystemEnvironmentValueEx" __imp_ZwSetSystemEnvironmentValueEx
0x1C0061620: I_MinCryptIsHashAlgPossiblyWeak
0x1C0063924: MinAsn1DecodeTime
0x1C0068E10: SIPolicyGetPolicyInfoFromType
0x1C0068380: SIPolicyVersion
0x1C000F02C: SymCryptIntWipe
0x1C002D078: SiPolicyRevokeFailureAudit
0x1C002D138: SiPolicyDrvRevokeFailure
0x1C005C574: CiGetNextSignatureVerification
0x1C0065EC4: SIPolicySetActivePolicy
0x1C0040EA0: CiQueryInformation
0x1C003D5F8: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C002DEB0: "10S" ??_C@_03CDNBFECA@10S?$AA@
0x1C003D440: "__cdecl _imp_RtlFindUnicodeSubstring" __imp_RtlFindUnicodeSubstring
0x1C0036AAC: g_fGRLLoadFailed
0x1C002CF18: CiReloadCatalogsComplete
0x1C00BBF80: "unsigned char const * const rgbMicrosoftRoot4_PubKeyInfo" ?rgbMicrosoftRoot4_PubKeyInfo@@3QBEB
0x1C002ED88: SymCryptTestMsg3
0x1C003D6D8: "__cdecl _imp_IoGetCurrentProcess" __imp_IoGetCurrentProcess
0x1C0002508: CipSetPlatformManifestFromPackageName
0x1C0028B00: SymCryptFdef369RawSubAsm
0x1C00576F0: CiCompareSigningLevels
0x1C0030430: EfiGlobalVariable
0x1C0018123: RtlEqualUnicodeString
0x1C003D398: "__cdecl _imp_PsSetCreateProcessNotifyRoutineEx" __imp_PsSetCreateProcessNotifyRoutineEx
0x1C0036508: g_ReloadInProgressCount
0x1C002EB20: "LockDownRestriction" ??_C@_1CI@HLCAOOAJ@?$AAL?$AAo?$AAc?$AAk?$AAD?$AAo?$AAw?$AAn?$AAR?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C002AFD0: g_CiTrustClaimEaName
0x1C00168F0: SymCryptFdefModulusCopyFixupMontgomery
0x1C003D168: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C0036B80: g_GRLContextLock
0x1C002E4C8: "1.3.6.1.4.1.311.10.3.25" ??_C@_0BI@FHGIFIPO@1?43?46?41?44?41?4311?410?43?425?$AA@
0x1C0053568: CiAuditDriverLoadSignature
0x1C002D188: WhqlEnforcementFailureAudit
0x1C0015F70: SymCryptFdefModAddGeneric
0x1C002D128: CiHvciAuditFailure
0x1C0067C04: SIPolicyValidateChainAgainstSigner
0x1C00508C8: CipReportSystemOptionsReprieve
0x1C002CFD8: SiPolicySkuFailureAudit
0x1C001231C: SymCryptShortWeierstrassAddSideChannelUnsafe
0x1C0009ECC: SbpParseSignatureDatabase
0x1C003D048: ext-ms-win-ntos-ksigningpolicy-l1-1-0_NULL_THUNK_DATA
0x1C00180ED: "__cdecl _C_specific_handler" __C_specific_handler
0x1C003D2F8: "__cdecl _imp_bsearch" __imp_bsearch
0x1C002E468: "1.3.6.1.4.1.311.10.3.22" ??_C@_0BI@BICJMODJ@1?43?46?41?44?41?4311?410?43?422?$AA@
0x1C0052B64: CiGetInstrumentSignatureInformation
0x1C004A1A0: MIDL_user_free
0x1C0041658: CipSetUmciExclusionPaths
0x1C005BDB0: CiVerifyFileHashSignedFile
0x1C0030820: "*�H�� " ??_C@_0L@CEBBPIKE@?$AG?$AI?$CK?$IGH?$IG?w?$AN?$AC?$AF?$AA@
0x1C003D078: "__cdecl _imp_RpcBindingUnbind" __imp_RpcBindingUnbind
0x1C0046134: I_FindFileOrHeaderHashInCatalogs
0x1C00360E8: g_SiPolicyDebuggingFlags
0x1C0036C98: CipHvciTreeLock
0x1C0016F20: SymCryptFdef369ModAddGeneric
0x1C0001150: SymCryptInit
0x1C002EE0C: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x1C0029080: memmove
0x1C006D320: PECheckComponentLoadEx
0x1C002F470: "DriverSi" ??_C@_1BC@INHEMONK@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AA?$AA@
0x1C002DFD0: "scrobj.dll" ??_C@_1BG@NKBHGFOO@?$AAs?$AAc?$AAr?$AAo?$AAb?$AAj?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C0017020: SymCryptFdef369ModulusInitMontgomery
0x1C0094E48: peauthvbn_GetBootDriversVerificationData
0x1C006BAD8: KappxDeriveCatalogPathFromPackageFile
0x1C0002B44: RtlUnicodeStringCatString
0x1C002F348: "ATPSi" ??_C@_1M@GABNFCL@?$AAA?$AAT?$AAP?$AAS?$AAi?$AA?$AA@
0x1C0049558: I_TruncatePageHashesBlob
0x1C0002AC8: CipForceImageRevalidation
0x1C0062A70: MincryptUnpackPolicy
0x1C002CEC8: CiHvciPageVerificationFailure
0x1C0048C40: CipV1PageHashSortCompareRoutine
0x1C005AD44: CipQueryOneEA
0x1C003D5E8: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C00454E4: CipGetFileCacheSimulation
0x1C0060BE4: MinCryptCheckSignedData
0x1C002D508: "keysvc" ??_C@_1O@IBDLKHPE@?$AAk?$AAe?$AAy?$AAs?$AAv?$AAc?$AA?$AA@
0x1C002F1D8: "UpdateSkuSiPolicy.p7b" ??_C@_1CM@DMNCPDFG@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C002FA20: "PowerShell" ??_C@_1BG@BILDPLMN@?$AAP?$AAo?$AAw?$AAe?$AAr?$AAS?$AAh?$AAe?$AAl?$AAl?$AA?$AA@
0x1C002FF90: "\Registry\Machine\System\Current" ??_C@_1HG@KGLMHNAM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C003D248: "__cdecl _imp_PsDetachSiloFromCurrentThread" __imp_PsDetachSiloFromCurrentThread
0x1C0030008: "Options" ??_C@_1BA@BBLONAFB@?$AAO?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x1C003D6F0: "__cdecl _imp_NtQueryInformationThread" __imp_NtQueryInformationThread
0x1C005E1A0: CiHvciTransferRelocationInformation
0x1C00BCA10: "unsigned char const * const rgbTestRoot0_Name" ?rgbTestRoot0_Name@@3QBEB
0x1C00BBCB0: "unsigned char const * const rgbTestRoot1_Name" ?rgbTestRoot1_Name@@3QBEB
0x1C002F3E0: "System32\CodeIntegrity\UpdateATP" ??_C@_1FK@FHCIHIPM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAT?$AAP@
0x1C000F410: SymCryptIntToDivisor
0x1C002E540: "1.3.6.1.4.1.311.76.8.1" ??_C@_0BH@BPPLBNLC@1?43?46?41?44?41?4311?476?48?41?$AA@
0x1C0028E40: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C003D710: "__cdecl _imp_KeIsExecutingDpc" __imp_KeIsExecutingDpc
0x1C006A300: SIPolicySetFileRuleTypesPresent
0x1C002EFA0: "Kernel_RvkSiStatus" ??_C@_1CG@KEIKIMIO@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAR?$AAv?$AAk?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C00BA190: RootTable
0x1C0011400: SymCryptShortWeierstrassIsZero
0x1C0006A70: RtlStringCbCatW
0x1C002CE68: CiValidatePageHashComplete
0x1C004A6C8: CiSetDebugAuthInformation
0x1C002F6B0: " ******************************" ??_C@_1LA@PGFIECNK@?$AA?6?$AA?6?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x1C0023920: SymCryptFdefRawMulMulx
0x1C005D2A0: CiHvciLockImageIfNotVerified
0x1C005211C: CiInstrumentSiPolicyInfo
0x1C0036D08: g_CiBlocklistUpdateTime
0x1C001BFE0: SymCryptFdefModMulMontgomery256Asm
0x1C00AE84C: TlgRegisterAggregateProvider
0x1C002BCF0: "struct _ROOT_INFO const * const RootTable" ?RootTable@@3QBU_ROOT_INFO@@B
0x1C0008C00: "void __cdecl TlgAggregateInternalFlushTimerCallbackKernelMode(struct _EX_TIMER * __ptr64,void * __ptr64)" ?TlgAggregateInternalFlushTimerCallbackKernelMode@@YAXPEAU_EX_TIMER@@PEAX@Z
0x1C003D3C8: "__cdecl _imp_KeQueryActiveProcessorCountEx" __imp_KeQueryActiveProcessorCountEx
0x1C002CDB8: SmartlockerOperationalFailure
0x1C0030420: EfiImageSecurityDatabaseVariable
0x1C000F600: SymCryptModElementToInt
0x1C00167D0: SymCryptFdefModulusInitMontgomery
0x1C005A614: CiUpdatePolicies
0x1C00045A0: SymCryptSha256Append
0x1C0036558: g_CiTotalPerfTime
0x1C000EA5C: SymCryptEckeyAllocate
0x1C003D6E8: "__cdecl _imp_PsInitialSystemProcess" __imp_PsInitialSystemProcess
0x1C0036C90: CipHvciTree
0x1C003D218: "__cdecl _imp_RtlUTF8ToUnicodeN" __imp_RtlUTF8ToUnicodeN
0x1C003D490: "__cdecl _imp_SeQuerySecureBootPolicyValue" __imp_SeQuerySecureBootPolicyValue
0x1C00BB5F0: "unsigned char const * const rgbMicrosoftRoot3_PubKeyInfo" ?rgbMicrosoftRoot3_PubKeyInfo@@3QBEB
0x1C003D288: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C0017E68: SymCryptScsTableLoad128Xmm
0x1C003D5D0: KdDebuggerNotPresent
0x1C003D010: "__cdecl _imp_XciValidateImageHeader" __imp_XciValidateImageHeader
0x1C003D4E8: "__cdecl _imp_PsStartSiloMonitor" __imp_PsStartSiloMonitor
0x1C002EEC8: "RvkSiPolicyVersion" ??_C@_1CG@JNJKGMLE@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00074D4: SIPolicyGetTrialMode
0x1C0048C20: CipFileHashSortCompareRoutineSHA256
0x1C003D178: "__cdecl _imp_KeUnstackDetachProcess" __imp_KeUnstackDetachProcess
0x1C0036568: g_CiWeakCryptoPolicies
0x1C002DEE8: "Code Integrity" ??_C@_1BO@PPANIDOK@?$AAC?$AAo?$AAd?$AAe?$AA?5?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C002AC10: g_CiSystemProcessText
0x1C0036538: g_CiParallelPageHashContexts
0x1C002DB30: "1.3.6.1.4.1.311.10.3.42" ??_C@_0BI@BMKELCIL@1?43?46?41?44?41?4311?410?43?442?$AA@
0x1C00101D8: SymCryptRsaCoreEnc
0x1C004B218: CiValidateImagePages
0x1C005ACA0: CiCreateSiloNotification
0x1C002CE18: CiPolicyRefreshNonRebootless
0x1C006B920: SIPolicyVerifySignedData
0x1C0002AD8: CiGetCurrentSiloState
0x1C0008A60: PEAuthGetBootDriversVerificationData
0x1C002D390: "System32\CatRoot\{F750E6C3-38EE-" ??_C@_1HC@MMOGMEKL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$HL?$AAF?$AA7?$AA5?$AA0?$AAE?$AA6?$AAC?$AA3?$AA?9?$AA3?$AA8?$AAE?$AAE?$AA?9@
0x1C0069CD0: SIPolicyVersionsMatched
0x1C0042960: CipScheduleWorkItem
0x1C005C9A8: CipFindWimIdentity
0x1C00181B3: ZwClose
0x1C003D510: "__cdecl _imp_IoConvertFileHandleToKernelHandle" __imp_IoConvertFileHandleToKernelHandle
0x1C00043D4: SymCryptParallelSha256Selftest
0x1C00369F8: g_CiWimListCount
0x1C0016C60: SymCryptFdefModInvMontgomery256
0x1C005C864: CiFreeImageVerificationInfo
0x1C002A320: SymCryptSha1Algorithm_default
0x1C003D028: "__cdecl _imp_XciSupported" __imp_XciSupported
0x1C0004500: SymCryptSha256
0x1C0011440: SymCryptShortWeierstrassOnCurve
0x1C0009DDC: SbValidateAndParseDebugAuthToken
0x1C003D358: MmSectionObjectType
0x1C0061534: MinCrypK_GetHashLength
0x1C00099E0: SbFreePolicy
0x1C002FDA0: "\nativeimages\" ??_C@_1BO@FILBLP@?$AA?2?$AAn?$AAa?$AAt?$AAi?$AAv?$AAe?$AAi?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?2?$AA?$AA@
0x1C002A780: SymCryptEcurveAllFunctionPointers
0x1C00603B0: I_MinCryptVerifyAuthenticodeTimeStamp
0x1C000A3C0: SymCryptSha512Init
0x1C00519A8: CiGetFileResourceInformation
0x1C0057624: CipGetHashAlgorithmForLegacyScenario
0x1C004323C: CipInitializeAcPolicy
0x1C0014AD0: SymCryptTwistedEdwardsSetZero
0x1C000A40C: SymCryptSha384Init
0x1C0036C80: g_SymCryptCpuid1
0x1C0018147: RtlInitUnicodeString
0x1C003D5E0: "__cdecl _imp_EtwSetInformation" __imp_EtwSetInformation
0x1C0036AB0: g_PERunOnce
0x1C002F3B8: "Kernel_ATPSiStatus" ??_C@_1CG@ONHIGBIO@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAA?$AAT?$AAP?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C0054480: CiLogFileAndCatalogEvent
0x1C00074A0: SIPolicyCompare
0x1C003D308: "__cdecl _imp_ZwQueryInformationFile" __imp_ZwQueryInformationFile
0x1C002EC00: SymCryptSha256K
0x1C0068E90: SIPolicyConvertChainInfo
0x1C002E510: "1.3.6.1.4.1.311.10.3.39" ??_C@_0BI@PKBPHNMF@1?43?46?41?44?41?4311?410?43?439?$AA@
0x1C0049730: CipInsertCatalogIntoTable
0x1C003D3F0: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x1C002E408: "CI\Signers\" ??_C@_1BI@CHOGEPIN@?$AAC?$AAI?$AA?2?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
0x1C006A1B4: SIPolicyMatchPerAppFileRefRule
0x1C002D480: rgbOID_CTL
0x1C003D100: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C006B614: SIPolicyGetPersistentVariable
0x1C004EFC0: CiValidateFileObject
0x1C002CAEC: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x1C002C920: "UMCINoDebugBreak" ??_C@_1CC@KAEMHGLA@?$AAU?$AAM?$AAC?$AAI?$AAN?$AAo?$AAD?$AAe?$AAb?$AAu?$AAg?$AAB?$AAr?$AAe?$AAa?$AAk?$AA?$AA@
0x1C0006938: MinCryptCheckCertsAndKeys
0x1C002E570: "1.3.6.1.4.1.311.10.3.24" ??_C@_0BI@EOHDGJLP@1?43?46?41?44?41?4311?410?43?424?$AA@
0x1C002E208: "CI\Scenarios\11" ??_C@_1CA@KIDLOBPK@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA1?$AA?$AA@
0x1C006B4DC: SIPolicySetPersistentVariable
0x1C005BD28: CipShouldLockdownPolicyBeActive
0x1C002E290: "CI\Scenarios\5" ??_C@_1BO@MEPKDJFO@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA5?$AA?$AA@
0x1C002C688: "\program files\" ??_C@_1CA@OLLCAMJO@?$AA?2?$AAp?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AA?5?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AA?$AA@
0x1C000F71C: SymCryptModElementGetValue
0x1C001749C: SymCryptFdefRawDivMod
0x1C0009C68: SbParseAndVerifySignedSupplementalPolicy
0x1C0001230: CipPostBootTimerRoutine
0x1C0056888: CipReadCustomSigningPolicy
0x1C00643FC: MinAsn1ParseExtensions
0x1C003D788: "__cdecl _imp__local_unwind" __imp__local_unwind
0x1C002DF88: "ID" ??_C@_15HCBMMKJC@?$AAI?$AAD?$AA?$AA@
0x1C003D508: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C0036D58: g_CiInitLock
0x1C00495C4: CiTrimCatalogs
0x1C002E0C0: "Levels" ??_C@_1O@JABJGAKP@?$AAL?$AAe?$AAv?$AAe?$AAl?$AAs?$AA?$AA@
0x1C004DEA0: CipValidateFileHash
0x1C001C470: SymCryptFdefRawMul512Asm
0x1C002D228: "Information" ??_C@_1BI@NIHBLACF@?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0036CA8: g_CiSiloMonitor
0x1C0007A1C: KappxpDetermineRepositoryPathForFile
0x1C0036520: g_wil_details_recordFeatureUsage
0x1C006E644: I_PELoadGRL
0x1C00BC460: "unsigned char const * const rgbMicrosoftRoot2_PubKeyInfo" ?rgbMicrosoftRoot2_PubKeyInfo@@3QBEB
0x1C000F2A0: SymCryptIntGetBits
0x1C00365A8: g_CipRuntimeSignersCount
0x1C002A0A0: g_CiProtectedContent
0x1C004A2D0: CiReadFileOpen
0x1C00468D8: MinCrypK_FindPageHashesInSignedCert
0x1C003D3D8: "__cdecl _imp__wcsupr" __imp__wcsupr
0x1C005D260: CiHvciReleaseResourcesInValidationContext
0x1C005FF78: MinCryptGetNextSignature
0x1C003D620: "__cdecl _imp_KeRestoreExtendedProcessorState" __imp_KeRestoreExtendedProcessorState
0x1C003D650: "__cdecl _imp_atoi" __imp_atoi
0x1C0007AA0: KappxpParsePackageFile
0x1C003D0C8: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C0036D40: g_CiExclusionList
0x1C002D4E8: rgbPE_AUTHENTICATED_ATTRIBUTE
0x1C0036D38: g_HvciCatalogLock
0x1C002CF98: CiImagePageHashFoundInCatalog
0x1C005FD9C: MinCryptGetHashAlgorithmFromSignature
0x1C004A5C0: CiDebugAuthInitRunOnce
0x1C0002C6C: SymCryptParallelSha256Init
0x1C00081AC: KappxpStoreNonPackageFileInformation
0x1C002F110: "System32\CodeIntegrity\UpdateRvk" ??_C@_1FK@DIOGDNAB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAR?$AAv?$AAk@
0x1C004B0DC: CiGetSortedImageSectionTable
0x1C0068800: SIPolicyQuerySubVerBlock
0x1C000F51C: SymCryptIntToModulus
0x1C0030888: " `�H
e" ??_C@_0O@CAMPMPJE@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AD?$AF?$AA?$AA@
0x1C00303F8: "dbx" ??_C@_17CFMLKIPF@?$AAd?$AAb?$AAx?$AA?$AA@
0x1C0047720: I_SortDirectoryInfoByFileId
0x1C005F274: HashpImageGetDigestStream
0x1C00B2018: "\Active.GRL" ??_C@_1BI@IFKHHNHE@?$AA?2?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?4?$AAG?$AAR?$AAL?$AA?$AA@MBDGBPJL@
0x1C003D0B8: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C0030440: EfiCertX509Guid
0x1C002E420: "1.3.6.1.4.1.311.10.3.19" ??_C@_0BI@PJJLKJKL@1?43?46?41?44?41?4311?410?43?419?$AA@
0x1C0030378: "PplDebugAuthorization" ??_C@_1CM@EHFGKAJH@?$AAP?$AAp?$AAl?$AAD?$AAe?$AAb?$AAu?$AAg?$AAA?$AAu?$AAt?$AAh?$AAo?$AAr?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00079D4: KappxpInitializeRepositoryPath
0x1C005D6F0: CiHvciVerifyFileHashSignedFile
0x1C00BB820: "unsigned char const * const rgb2005DMDRoot_PubKeyInfo" ?rgb2005DMDRoot_PubKeyInfo@@3QBEB
0x1C002CB90: "CodeIntegrity-AllowConfigurableP" ??_C@_1HE@EJHPAIKI@?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?9?$AAA?$AAl?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAb?$AAl?$AAe?$AAP@
0x1C006838C: SIPolicyFindScenarioExceptionRules
0x1C000EE8C: SymCryptRsaPkcs1VerifySignaturePadding
0x1C0014850: SymCryptTwistedEdwardsAddDiffNonZero
0x1C002E138: "CI\Scenarios\12" ??_C@_1CA@LKIOEOBE@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA2?$AA?$AA@
0x1C006270C: I_MinCryptCheckEKU
0x1C003D478: "__cdecl _imp_SeLocateProcessImageName" __imp_SeLocateProcessImageName
0x1C004B354: CiValidateFullImagePages
0x1C002CF78: CiImageSdlRequirementNotMet
0x1C0006020: SymCryptParallelHashProcess_serial
0x1C003D038: ext-ms-win-ci-xbox-l1-1-0_NULL_THUNK_DATA
0x1C002DE00: "* Please contact the binary owne" ??_C@_0EM@CGHCOKMK@?$CK?5Please?5contact?5the?5binary?5owne@
0x1C00445A4: CipSetFileCache
0x1C00B106C: g_ulPEFailedComponentsCount
0x1C0028EA8: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C005C394: CiEvaluatePolicyInfo
0x1C0059108: CipWhqlEnforcementEnabled
0x1C003D778: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C0018240: SymCryptWipeAsm
0x1C0010578: SymCryptEcpointTransform
0x1C0036D29: g_CipCheckedPlatformManifestActive
0x1C002CD78: WhqlEnforcementEnabled
0x1C002FDC0: "\ProgramData\Microsoft\Windows\A" ??_C@_1GO@PPMKMCEN@?$AA?2?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAA@
0x1C004F210: CipValidateDataMappedFile
0x1C0013D50: SymCryptTwistedEdwardsOnCurve
0x1C0030358: "Policy" ??_C@_1O@MPKBHDFA@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1C0036A00: g_CiWimList
0x1C0061118: MinCryptDecodeHashAlgorithmIdentifier
0x1C002AC20: g_CiLowResourceText
0x1C0036A0C: g_SymCryptCpuFeaturesPresentCheck
0x1C006AA44: SIPolicySetUEFIVariable
0x1C002D7A0: "\Registry\Machine\SOFTWARE\Micro" ??_C@_1JG@FCMCEFGE@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C003D328: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C0030460: EfiCertSha512Guid
0x1C0012E90: SymCryptShortWeierstrassAdd
0x1C0018135: RtlFreeUnicodeString
0x1C001818F: ZwQuerySystemEnvironmentValueEx
0x1C002F278: "Boot\EFI\WinSiPolicy.p7b" ??_C@_1DC@NIONHHFF@?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C003D7F8: "__cdecl _IMPORT_DESCRIPTOR_ext-ms-win-ci-xbox-l1-1-0" __IMPORT_DESCRIPTOR_ext-ms-win-ci-xbox-l1-1-0
0x1C004A49C: CiReadFileClose
0x1C002CE58: CiImageFileHashNotFound
0x1C0007F64: KappxpIncrementPackageStatusVersion
0x1C006ABA0: SIPolicyParsePolicyData
0x1C00360E4: g_SymCryptCpuFeaturesNotPresent
0x1C004D690: CipUpdateSePoolwithPageHashes
0x1C002C638: "\windows\system32" ??_C@_1CE@PACGGPGJ@?$AA?2?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?$AA@
0x1C0028E1C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0043544: CipUpdateAcPolicyHash
0x1C003D558: "__cdecl _imp_RtlInterlockedClearBitRun" __imp_RtlInterlockedClearBitRun
0x1C003D6D0: "__cdecl _imp_PsSetCreateProcessNotifyRoutine" __imp_PsSetCreateProcessNotifyRoutine
0x1C005F344: HashKComputeFirstPageHash
0x1C0054720: CiLogCacheEvent
0x1C0023F50: SymCryptFdefRawSquareMulx
0x1C0036620: g_CiSignersCount
0x1C005135C: CipProcessHashRetryReason
0x1C002F570: "Kernel_DriverSiStatus" ??_C@_1CM@LPNFHHGN@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C00510B0: CiVerifyPageHashInCatalogs
0x1C002FF58: g_rgEmptyHash
0x1C004F738: CipGetEmbeddedSignatureAndFindFirstMatch
0x1C002DF90: "Name" ??_C@_19DINFBLAK@?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C002E018: "jscript9.dll" ??_C@_1BK@GLLLFKHB@?$AAj?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AA9?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C00541A4: CiLogFileEvent
0x1C0036550: g_SiTotalPerfTime
0x1C00BAFE0: "unsigned char const * const rgbMicrosoftRoot1_PubKeyInfo" ?rgbMicrosoftRoot1_PubKeyInfo@@3QBEB
0x1C005E6E8: CipFindOrInsertImage
0x1C003D070: "__cdecl _imp_RpcBindingCreateW" __imp_RpcBindingCreateW
0x1C002C948: "TestFlags" ??_C@_1BE@JBKHAEB@?$AAT?$AAe?$AAs?$AAt?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1C006B810: SIPolicyVerifyPolicyIsUefiSigned
0x1C0001220: "__cdecl TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv" _TlgDefineProvider_annotation__TlgTlgAggregateInternalProviderProv
0x1C003D360: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C006A92C: SIPolicySetAndUpdateActivePolicy
0x1C0064D60: SIPolicyFileRuleSearchCompare
0x1C003D1B8: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C002D198: CiPolicyFailureIgnored
0x1C003D170: "__cdecl _imp_SeExports" __imp_SeExports
0x1C002CD08: CiPolicyFailure
0x1C003D1C8: "__cdecl _imp_ZwCreateFile" __imp_ZwCreateFile
0x1C0061254: MinCrypK_HashMemory
0x1C003D6B8: "__cdecl _imp_PsCreateSystemThread" __imp_PsCreateSystemThread
0x1C00B1090: g_FlightSignedNotBefore
0x1C000770C: KappxpQueryNormalizedPackageRepositoryDirPaths
0x1C000D140: SymCryptMd5Init
0x1C00181C5: RtlCompareUnicodeString
0x1C002F000: "SkuSiPolicyUpdateSigners" ??_C@_1DC@FBLHHCNL@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C001BC20: SymCryptFdefMontgomeryReduceAsm
0x1C002DFA0: "PolicyInfo" ??_C@_1BG@CLIFBBMA@?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x1C002CEA8: SiPolicyFailure
0x1C006DB80: PEWorkerThread
0x1C0008750: GetDR7Value
0x1C002A380: g_SymCryptModFns
0x1C0054C7C: CipProcessSIPolicyLogs
0x1C0006748: "long __cdecl MinCryptCopyAsn1IntToFixedBuffer(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long)" ?MinCryptCopyAsn1IntToFixedBuffer@@YAJPEBEKPEAEK@Z
0x1C002D0C8: SiPolicyWinFailure
0x1C0011010: SymCryptShortWeierstrassSetZero
0x1C002DF18: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C003D0A0: msrpc_NULL_THUNK_DATA
0x1C000751C: KappxpGeneratePackageRootDirectoryEntry
0x1C002DC88: ".NI.EXE" ??_C@_1BA@HPOPMLBD@?$AA?4?$AAN?$AAI?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x1C0036D30: g_CipPerfLock
0x1C0041AE0: CiFreePolicyInfo
0x1C000F044: SymCryptIntBitsizeOfValue
0x1C004A5F0: CiCreateProcessNotifyRoutine
0x1C002CCC8: CiInvalidCatalog
0x1C005C7A0: CiReleaseValidationContext
0x1C004D7CC: CipFixImageType
0x1C00592A8: CiIsSignatureTrustedForIum
0x1C0036560: g_CiPolicyState
0x1C005E8F0: CipReleaseImage
0x1C002FD80: "\ac\microsoft\" ??_C@_1BO@MDAHACGM@?$AA?2?$AAa?$AAc?$AA?2?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AA?$AA@
0x1C0006390: compareRequestSize
0x1C003D0E8: "__cdecl _imp_ExReleasePushLockSharedEx" __imp_ExReleasePushLockSharedEx
0x1C0016E30: SymCryptFdefModSquareMontgomery512
0x1C003D638: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x1C006B9E0: KappxIsPackageFile
0x1C0011D00: SymCryptShortWeierstrassAddDiffNonZero
0x1C005F5E8: MinCrypK_VerifySignedDataKModeEx
0x1C002E0A8: "TBS" ??_C@_17NAJJNGIB@?$AAT?$AAB?$AAS?$AA?$AA@
0x1C00183A0: ext_ms_win_ci_xbox_l1_1_0_XciQueryInformation
0x1C0048330: I_MapFileHashes
0x1C0005EB8: SymCryptWipe
0x1C0068D94: SIPolicyGetPolicyType
0x1C002E378: "CI\Scenarios\137" ??_C@_1CC@BJGKBCPB@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA7?$AA?$AA@
0x1C000F33C: SymCryptIntIsLessThan
0x1C002A1A0: g_HvciImageValidateInterface
0x1C005B3E0: CipGetSupplementalPolicyPathOnExpandedStack
0x1C002DEA8: "HVCI" ??_C@_04OMFPIMMB@HVCI?$AA@
0x1C00628F4: MincryptIsEKUInPolicy
0x1C003D020: "__cdecl _imp_XciInitialize" __imp_XciInitialize
0x1C002CF68: SiPolicyFailureAudit
0x1C00042C0: SymCryptParallelSha256Append
0x1C002FAC0: "\AppxMetadata\CodeIntegrity.cat" ??_C@_1EA@FCGIGBEI@?$AA?2?$AAA?$AAp?$AAp?$AAx?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?4?$AAc?$AAa?$AAt?$AA?$AA@
0x1C0030810: "*�H�� " ??_C@_0N@HPMGOFDJ@?$AG?$AI?$CK?$IGH?$IG?w?$AN?$AC?$AF?$AF?$AA?$AA@
0x1C002C900: "UMCIAuditMode" ??_C@_1BM@CAPIEOME@?$AAU?$AAM?$AAC?$AAI?$AAA?$AAu?$AAd?$AAi?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C002F940: "ProductName" ??_C@_1BI@CJGIOPAN@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C002F850: "********************************" ??_C@_1KO@JOCIJOBB@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$CK@
0x1C003D560: "__cdecl _imp_RtlInitializeBitMap" __imp_RtlInitializeBitMap
0x1C0015D20: SymCryptEcpointGenericSetRandom
0x1C006EAD8: I_PEUpdatePEHashBucket
0x1C0002E04: SymCryptParallelSha256Process
0x1C002D178: CiPolicyFailureAudit
0x1C002EE10: "Reserved.PlatformSigned" ??_C@_1DA@MLHAKDIL@?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAd?$AA?4?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AAS?$AAi?$AAg?$AAn?$AAe?$AAd?$AA?$AA@
0x1C000EB2C: SymCryptEckeyFree
0x1C006C828: I_PEVerifyAndLogPEAuthCerts
0x1C002E198: "CI\Scenarios\135" ??_C@_1CC@LDGDNKHK@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA5?$AA?$AA@
0x1C002DBB0: "\WINDOWS\SYSTEM32\SEARCHPROTOCOL" ??_C@_1FC@JOBHBDNC@?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAS?$AAE?$AAA?$AAR?$AAC?$AAH?$AAP?$AAR?$AAO?$AAT?$AAO?$AAC?$AAO?$AAL@
0x1C00360D8: g_CiSysDevWhqlEnforcementDateTime
0x1C000A340: SbFreeKeys
0x1C0057E6C: CipIsSigningLevelRuntimeCustomizable
0x1C002FEE0: PEAUTH_EVENT_GUID
0x1C0060AB4: I_Base64Decode
0x1C002EE98: "Kernel_SiStatus" ??_C@_1CA@DDIOBOG@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C002E450: "1.3.6.1.4.1.311.61.4.1" ??_C@_0BH@OOFPJJAG@1?43?46?41?44?41?4311?461?44?41?$AA@
0x1C00AE140: "void __cdecl TlgAggregateInternalFlushWorkItemRoutineKernelMode(void * __ptr64)" ?TlgAggregateInternalFlushWorkItemRoutineKernelMode@@YAXPEAX@Z
0x1C002FA18: "MSI" ??_C@_17EEEDJKEE@?$AAM?$AAS?$AAI?$AA?$AA@
0x1C000A300: SbParseKEK
0x1C002C600: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1C006BC90: KappxDerivePackageFullNameFromPackageFile
0x1C000A2C0: SbParsePK
0x1C00365C0: g_CiWeakCryptoPolicy
0x1C0036548: g_CiPerfFrequency
0x1C0048C94: I_ValidatePageHashesBlob
0x1C0061090: MinCryptDecodeOid
0x1C002C620: "\windows\" ??_C@_1BE@NMFIMKAA@?$AA?2?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AA?$AA@
0x1C00491B4: CiParseRevocationList
0x1C002D0F8: CiImageSdlRequirementNotMetAudit
0x1C002D038: SiPolicySkuFailure
0x1C000A458: SymCryptSha512Append
0x1C0048AD8: I_GetNamedCatalogAttributeValue
0x1C0036A10: g_NumberOfSiPolicies
0x1C0026CC0: SymCryptFdefRawSquareMulx1024
0x1C002C8E0: "BootCacheDelay" ??_C@_1BO@GFFLAMCJ@?$AAB?$AAo?$AAo?$AAt?$AAC?$AAa?$AAc?$AAh?$AAe?$AAD?$AAe?$AAl?$AAa?$AAy?$AA?$AA@
0x1C006689C: SIPolicyMatchOneFileRule
0x1C000A52C: SymCryptSha384Append
0x1C0046CC8: I_MapAndSizeDataFile
0x1C0017A60: SymCryptModExpSquareAndMultiply32
0x1C002DC98: ".NI.DLL" ??_C@_1BA@FGAKMEIK@?$AA?4?$AAN?$AAI?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x1C0041AA0: CiFindPageHashesInSignedFile
0x1C002D370: "\DriverStores" ??_C@_1BM@PNGDECLI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAt?$AAo?$AAr?$AAe?$AAs?$AA?$AA@
0x1C003D080: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x1C00061B8: SymCryptParallelHashSetNextWork
0x1C002D0D8: CiPolicyRefreshActivatePolicyFailed
0x1C00BCB20: "unsigned char const * const rgbMicrosoftRoot0_PubKeyInfo" ?rgbMicrosoftRoot0_PubKeyInfo@@3QBEB
0x1C0053C84: CiLogSignatureExpiryEvent
0x1C0015D4C: SymCryptEcpointDouble
0x1C005A064: CipSIPolicyUpdatePolicyFailedStatus
0x1C002E090: "KnownRoot" ??_C@_1BE@FJPJKHMN@?$AAK?$AAn?$AAo?$AAw?$AAn?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x1C002FBF8: "BinaryHash" ??_C@_1BG@FNFFPEAB@?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1C0048C20: CipFileHashSearchCompareRoutineSHA256
0x1C002F2D8: "Boot\EFI\UpdateWinSiPolicy.p7b" ??_C@_1DO@MLMGJHDE@?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C0058724: CipIsFileHashPossiblyWeak
0x1C00B107C: dwXOR
0x1C002D2D0: "\SystemRoot\System32\CatRoot\{F7" ??_C@_1IK@GKAHCNJE@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$HL?$AAF?$AA7@
0x1C0014380: SymCryptTwistedEdwardsAdd
0x1C00067E4: MinCryptIsCertPresent
0x1C002FD38: "\assembly\nativeimages" ??_C@_1CO@FKLDHPPO@?$AA?2?$AAa?$AAs?$AAs?$AAe?$AAm?$AAb?$AAl?$AAy?$AA?2?$AAn?$AAa?$AAt?$AAi?$AAv?$AAe?$AAi?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x1C006C1C0: PEProcessDispatch
0x1C00609EC: I_MinCryptCheckCertHashWeakCrypto
0x1C002E860: "System32\CodeIntegrity\ATPSiPoli" ??_C@_1EO@HBNPPGDM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi@
0x1C002CCD8: CiPolicyRefreshActivatePolicySucceded
0x1C006F81C: MFFreeGRL
0x1C006EE14: I_PEGetComponentListEx
0x1C00465A8: I_FindFileOrHeaderHashInLoadedCatalogs
0x1C006C48C: PEReturnComponentList
0x1C003D498: "__cdecl _imp__ultow_s" __imp__ultow_s
0x1C0049B3C: CipCatDbRpcConnect
0x1C006C37C: PEReturnState
0x1C0006B48: RtlStringCbPrintfW
0x1C002F900: "InternalName" ??_C@_1BK@OCJLMIBB@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x1C003D5C8: "__cdecl _imp_RtlCheckRegistryKey" __imp_RtlCheckRegistryKey
0x1C000F58C: SymCryptIntToModElement
0x1C0016130: SymCryptFdefModMulGeneric
0x1C0001748: wil_details_FeaturePropertyCache_ReportUsageToServiceDirect
0x1C0015FF0: SymCryptFdefModSubGeneric
0x1C002FA40: "WSH" ??_C@_17BBIENAMC@?$AAW?$AAS?$AAH?$AA?$AA@
0x1C004A52C: CiReadFileSetView
0x1C0065288: SIPolicySysDevWhqlEnabled
0x1C000F678: SymCryptModElementSetValue
0x1C004317C: CiSetPolicyInformation
0x1C002D0A8: CiImageSdlRequirementNotMetIgnored
0x1C0007378: SIPolicyQueryOnePolicyInformation
0x1C0040180: CiInitializePolicy
0x1C003D5D8: "__cdecl _imp_RtlEqualUnicodeString" __imp_RtlEqualUnicodeString
0x1C00365B0: g_CiSigners
0x1C000E06C: SymCryptRsakeySizeofModulus
0x1C003D5B0: "__cdecl _imp_FsRtlGetFileSize" __imp_FsRtlGetFileSize
0x1C0027B40: SymCryptFdefMontgomeryReduceMulx1024
0x1C000A354: SymCryptSha512
0x1C00A443C: peauthvbn_GetParameters
0x1C00085E8: IsNgenPackageFileOnDesktopOrServer
0x1C006542C: SIPolicyInitialize
0x1C002CC98: CiPolicyRefreshNoChange
0x1C000968C: SbpParsePolicy
0x1C00361C8: g_CiFlightSignedNotBefore
0x1C002E0B0: "EKUs" ??_C@_19DFNIBDOA@?$AAE?$AAK?$AAU?$AAs?$AA?$AA@
0x1C0064230: MinAsn1ParseCertificate
0x1C0004570: SymCryptSha256Init
0x1C00509B0: CipAllocateValidationContext
0x1C00067D4: MinCrypK_DisableEcdsa
0x1C000BF00: SymCryptSha1AppendBlocks
0x1C0052C7C: CiInstrumentSignatureFailures
0x1C002E1E8: "CI\Scenarios\4" ??_C@_1BO@HMEGFODL@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA4?$AA?$AA@
0x1C003D0C0: "__cdecl _imp_KeStackAttachProcess" __imp_KeStackAttachProcess
0x1C003D1D8: "__cdecl _imp_IoQueryVolumeInformation" __imp_IoQueryVolumeInformation
0x1C003D2D8: "__cdecl _imp_ZwMapViewOfSection" __imp_ZwMapViewOfSection
0x1C002DE98: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1C002EA70: "\EFI\Microsoft\Boot\Policies\Unl" ??_C@_1FK@PPMBIBMI@?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAU?$AAn?$AAl@
0x1C000DD10: SymCryptCallbackRandom
0x1C002CD88: CiImagePageHashFoundInImageCertificate
0x1C0014CA4: SymCryptPrecomputation
0x1C002D098: CiRevokedDriverLoadedInDebugger
0x1C002D890: "\REGISTRY\MACHINE\OSDATA\Softwar" ??_C@_1IE@ONKOIOMB@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAO?$AAS?$AAD?$AAA?$AAT?$AAA?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr@
0x1C006A014: SIPolicyHasPerAppPolicy
0x1C004E6A0: CipImageAppendRangeOfFileToHash
0x1C002EF30: "System32\CodeIntegrity\RvkSiPoli" ??_C@_1EO@BOBBLDMB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi@
0x1C0063E1C: MinAsn1DecodeGeneralizedTime
0x1C00642F0: MinAsn1ParseRSAPublicKey
0x1C00557B0: CiLogSIPolicyGetPolicyIDs
0x1C0030480: SymCryptSha512K
0x1C005E504: CiHvciValidateDynamicCodePages
0x1C0015650: SymCryptEcpointMultiScalarMulWnafWithInterleaving
0x1C002E7F0: "ATPSiPolicy.p7b" ??_C@_1CA@IJNICIBC@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C003D798: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C002E310: "CI\Scenarios\15" ??_C@_1CA@CHFJHGKN@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA5?$AA?$AA@
0x1C002C980: "HVCIDisallowedImages" ??_C@_1CK@OBMJDPBG@?$AAH?$AAV?$AAC?$AAI?$AAD?$AAi?$AAs?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAI?$AAm?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x1C002E2F0: "CI\Scenarios\10" ??_C@_1CA@BAIHIGJP@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA0?$AA?$AA@
0x1C0036D18: g_CiOptions
0x1C00602B8: I_MinCryptVerifySignerAuthenticatedAttributes
0x1C002B890: g_EmptyString
0x1C00586F8: CipInitializeSiPolicy
0x1C003D188: "__cdecl _imp_KeSetCoalescableTimer" __imp_KeSetCoalescableTimer
0x1C0064640: MinAsn1ParseSignedData
0x1C00086E8: IsNgenPackageFileOnPhoneSDCard
0x1C003D2D0: "__cdecl _imp_ZwQueryDirectoryFile" __imp_ZwQueryDirectoryFile
0x1C005BB78: CipIsUnlockTokenPresentAndValid
0x1C002CDF8: SiPolicyDrvRevokeFailureAudit
0x1C00180FF: ZwQuerySystemInformation
0x1C00AECC4: SbGetUnlockID
0x1C00029BC: CipDeserializeWeakCryptoPolicies
0x1C00B1080: g_KernelHashBucketList
0x1C003D280: "__cdecl _imp_RtlAppendUnicodeToString" __imp_RtlAppendUnicodeToString
0x1C00360D0: g_CatalogFileHashAlgorithm
0x1C00608B8: I_MinCryptGetHashAlgorithmFromSignature
0x1C0051820: CiAuditImageForHvci
0x1C003D230: "__cdecl _imp_IoQueryFileInformation" __imp_IoQueryFileInformation
0x1C003D228: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C00172F8: SymCryptFdefRawSetValue
0x1C00161D0: SymCryptFdefModSquareGeneric
0x1C003D4A8: "__cdecl _imp_RtlCapabilityCheck" __imp_RtlCapabilityCheck
0x1C003D548: "__cdecl _imp_MmSizeOfMdl" __imp_MmSizeOfMdl
0x1C00697B0: SIPolicyQueryOneSecurityPolicy
0x1C005ECD8: HashpPadHash
0x1C002E0D0: "Platform" ??_C@_1BC@POKDNDGF@?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?$AA@
0x1C002DE60: "\Device\" ??_C@_1BC@IDABLMPM@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$AA@
0x1C0006864: MinCryptIsKeyPresent
0x1C005E7BC: CipLockImagePages
0x1C0066400: SIPolicyConvertData
0x1C004E250: CipValidatePageHash
0x1C004A8D4: CiCheckProcessDebugAccessEnumCallback
0x1C002F208: "WinSi" ??_C@_1M@OIGONFPA@?$AAW?$AAi?$AAn?$AAS?$AAi?$AA?$AA@
0x1C002C608: "\windows" ??_C@_1BC@GPCOMFMF@?$AA?2?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?$AA@
0x1C004EE0C: CipValidateFileObjectByFileOrPageHash
0x1C0036CC0: g_CipCustomLevelComparisons
0x1C00BC690: "unsigned char const * const rgbMicrosoftThirdPartyMarketplaceRoot_PubKeyInfo" ?rgbMicrosoftThirdPartyMarketplaceRoot_PubKeyInfo@@3QBEB
0x1C002E780: g_IumEncodedOidBuffer
0x1C0055AE0: CiLogSIPolicyGetPolicyNameAndID
0x1C002F920: "FileDescription" ??_C@_1CA@JGBAIPOO@?$AAF?$AAi?$AAl?$AAe?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0013050: SymCryptShortWeierstrassNegate
0x1C0018370: xGetDPLForInterrupt
0x1C002D008: CiImageFileHashFoundInCatalog
0x1C00136A0: SymCryptMontgomeryPointScalarMul
0x1C003D4E0: "__cdecl _imp_PsCreateSiloContext" __imp_PsCreateSiloContext
0x1C003D6B0: "__cdecl _imp_RtlUnicodeStringToInteger" __imp_RtlUnicodeStringToInteger
0x1C0036AE8: "struct _SYMCRYPT_ECURVE * __ptr64 __ptr64 g_pEcurveP384" ?g_pEcurveP384@@3PEAU_SYMCRYPT_ECURVE@@EA
0x1C002E990: "\Registry\MACHINE\System\Current" ??_C@_1HK@EOMMKMKL@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C00548AC: CipQueryFileName
0x1C002C6D0: "\SystemRoot\System32\CodeIntegri" ??_C@_1FM@NIMCFCMN@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi@
0x1C00561F8: CiLogSIPolicyRefreshIgnored
0x1C0045F48: MinCrypK_VerifyHashInCatalog
0x1C005DC90: CiHvciUpdateSePoolForFileHashAndUnlockImage
0x1C0009798: SbParseSignedPolicy
0x1C004B83C: CiCalculateFirstPageHash
0x1C0016B30: SymCryptFdefModSquareMontgomeryMulx1024
0x1C00167F0: SymCryptFdefModSetPostMontgomery
0x1C004A9E4: CipIsDeveloperModeEnabled
0x1C00AE7D0: "void __cdecl TlgAggregateInternalRegisteredProviderEtwCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalRegisteredProviderEtwCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C0036E20: g_CiPrivateNtosApis
0x1C002D268: "$CI.CatalogHint" ??_C@_0BA@HFKAGJO@$CI?4CatalogHint?$AA@
0x1C003D458: "__cdecl _imp_SeReportSecurityEventWithSubCategory" __imp_SeReportSecurityEventWithSubCategory
0x1C002CD28: SiPolicyRevokeFailure
0x1C0045944: CipSignatureValidityPeriod
0x1C00BB290: "unsigned char const * const rgbMicrosoftFlightRoot1_PubKeyInfo" ?rgbMicrosoftFlightRoot1_PubKeyInfo@@3QBEB
0x1C002EEF0: "RvkSiPolicyUpdateSigners" ??_C@_1DC@EHMFLKGA@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C002D5A0: "\Registry\Machine\Software\Micro" ??_C@_1IE@GFIPFHFC@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C002EF80: "RvkSiPolicy.p7b" ??_C@_1CA@OGBGGNOP@?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C0036D20: g_CipPolicyLock
0x1C00360C4: g_BootCacheDelay
0x1C002CED8: SiPolicyATPFailure
0x1C00170E0: SymCryptFdef369ModSetPostMontgomery
0x1C00AA4EC: peauthvbn_SetDebugCredentialsData
0x1C003D340: "__cdecl _imp_RtlRunOnceExecuteOnce" __imp_RtlRunOnceExecuteOnce
0x1C002D048: CiNoEmbeddedSignatureDriverLoaded
0x1C0064934: MinAsn1ParseIndirectData
0x1C002F240: "WinSiPolicyUpdateSigners" ??_C@_1DC@OCKBKPP@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C003D390: PsProcessType
0x1C000760C: KappxpFreeRepositoryList
0x1C002FD68: "\packages\" ??_C@_1BG@NBBAGEGF@?$AA?2?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAs?$AA?2?$AA?$AA@
0x1C004C760: CiValidateImageData
0x1C004FD74: CipReportSharedSectionFailure
0x1C003D118: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C005EDE8: HashpEmitExcludeRange
0x1C002C604: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C0040010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x1C002D438: rgbPETrustedAttribute
0x1C001820D: KeBugCheckEx
0x1C006497C: MinAsn1ParseNestedSignature
0x1C0043C28: CiGetActionsForImage
0x1C0018350: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1C002D018: CiImagePageHashNotFound
0x1C002CAE0: "Boot\" ??_C@_1M@GADNACNI@?$AAB?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
0x1C0043810: CipApplyAcPolicy
0x1C0036E04: g_TrimBootCacheCatalogEntries
0x1C002FCF8: "\PackageList\" ??_C@_1BM@LMNMHOPK@?$AA?2?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAL?$AAi?$AAs?$AAt?$AA?2?$AA?$AA@
0x1C002CB10: "\Registry\MACHINE\System\Current" ??_C@_1IA@LOMNNMOO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0005AC4: SymCryptSha256AppendBlocks_shani
0x1C003D058: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x1C002D210: "AcPolicy" ??_C@_1BC@DMFHDKCO@?$AAA?$AAc?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x1C002CFF8: CiUnsignedImageLoaded
0x1C000E244: SymCryptEcurveAllocate
0x1C002DFB8: "Unknown" ??_C@_1BA@LEPJIIOK@?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?$AA@
0x1C0047754: I_ReloadCatalogs
0x1C003D508: MmUserProbeAddress
0x1C0001F98: CiLogSIPolicyEvent
0x1C0036D60: g_CiVslHvciInterface
0x1C0036DF0: g_BootDriverList
0x1C003D530: "__cdecl _imp_MmUnlockPages" __imp_MmUnlockPages
0x1C002E4B0: "1.3.6.1.4.1.311.76.5.1" ??_C@_0BH@ONJBMFGP@1?43?46?41?44?41?4311?476?45?41?$AA@
0x1C0055D2C: CiLogSIPolicyEvent2
0x1C003D1E8: "__cdecl _imp_ExInitializePagedLookasideList" __imp_ExInitializePagedLookasideList
0x1C002CCB8: CiValidateFileHashComplete
0x1C0045BB4: CiCleanupCatalogs
0x1C002FA60: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x1C002EAD0: "SkuPolicyRequired" ??_C@_1CE@EBBNLFGN@?$AAS?$AAk?$AAu?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAd?$AA?$AA@
0x1C0064760: I_MinAsn1ParseSingleAttribute
0x1C00BAF40: "unsigned char const * const rgbMicrosoftFlightRoot1_Name" ?rgbMicrosoftFlightRoot1_Name@@3QBEB
0x1C0054348: CiLogFileRequestedValidationEvent
0x1C0006A5C: MinAsn1ParseECCSignature
0x1C00636D8: MinAsn1StringToOid
0x1C0054800: CiAudit
0x1C003D260: "__cdecl _imp_RtlCompareUnicodeString" __imp_RtlCompareUnicodeString
0x1C0006728: MinCryptHashMemory
0x1C002AF80: g_IumEncodedOid
0x1C005DF10: CiHvciSetImageBaseAddress
0x1C005DA80: CiHvciVerifyFileHashInCatalogs
0x1C003D5A0: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x1C00425B4: CipPromoteUpdatePolicy
0x1C003D3A8: "__cdecl _imp_RtlCreateUnicodeString" __imp_RtlCreateUnicodeString
0x1C0018310: "__cdecl _security_check_cookie" __security_check_cookie
0x1C004A920: CiCheckProcessDebugAccessPolicy
0x1C0046074: MinCrypK_FindPageHashesInCatalog
0x1C002C820: "\Registry\MACHINE\System\Current" ??_C@_1GM@LPPJKOOI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C003D618: "__cdecl _imp_ZwQueryLicenseValue" __imp_ZwQueryLicenseValue
0x1C00B9C60: ulRoots
0x1C00AEB0C: SbeAlloc
0x1C00181E9: RtlCompareMemory
0x1C0016260: SymCryptFdefModInvGeneric
0x1C002F090: "System32\CodeIntegrity\UpdateSiP" ??_C@_1FE@IIJKIHJK@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAP@
0x1C0059368: CiIsFlightRootTrustDisabled
0x1C0014B90: SymCryptTwistedEdwardsNegate
0x1C00B2030: "1.3.6.1.4.1.311.10.5.4" ??_C@_0BH@CFGPOHAN@1?43?46?41?44?41?4311?410?45?44?$AA@MBDGBPJL@
0x1C0056874: CipIsCustomSigningPolicyActive
0x1C003D500: "__cdecl _imp_ZwQueryVolumeInformationFile" __imp_ZwQueryVolumeInformationFile
0x1C0069020: SIPolicyFreeSIChainInfo
0x1C00490DC: CipLoadAndValidateRevocationList
0x1C0008844: PEAuthStoreParameter
0x1C0065278: SIPolicyAuditModeEnabled
0x1C00661A4: SIPolicyFindScenarioFileRules
0x1C0049CF8: CiCatDbQueryFileHash
0x1C003D7A8: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0050690: CipReportAndReprieveDriverAndProtectedImageFailure
0x1C003D608: "__cdecl _imp_KdDebuggerEnabled" __imp_KdDebuggerEnabled
0x1C002E1C0: "CI\Scenarios\131" ??_C@_1CC@DMABENCN@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA1?$AA?$AA@
0x1C002DDB0: "* This is not a failure in CI, b" ??_C@_0EH@EJOGNGGH@?$CK?5This?5is?5not?5a?5failure?5in?5CI?0?5b@
0x1C002A350: SymCryptMd5Algorithm_default
0x1C00611A8: MinCryptDecodeSignatureAlgorithmIdentifier
0x1C0008768: GetDPLForInterrupt
0x1C002C420: SymCryptMd5OidList
0x1C006BEE0: KappxParseString
0x1C0036578: g_CiUpgradeInProgress
0x1C0043608: CipRefreshAcPolicy
0x1C00319FB: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1C0036530: g_wil_details_pfnFeatureLoggingHook
0x1C002FCD8: "AppxStateChange" ??_C@_1CA@JDAKIDNM@?$AAA?$AAp?$AAp?$AAx?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AA?$AA@
0x1C001BED0: SymCryptFdefModAdd256Asm
0x1C00360E0: g_CiSiloContextSlot
0x1C00691C4: SIPolicyParseSecureSettings
0x1C003D7E4: "__cdecl _IMPORT_DESCRIPTOR_msrpc" __IMPORT_DESCRIPTOR_msrpc
0x1C006F0C8: GetGRLFileName
0x1C0068728: SIPolicyCheckVerBlock
0x1C002E228: "CI\Scenarios\133" ??_C@_1CC@JGAIIFKG@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA3?$AA?$AA@
0x1C00497F0: CipRemoveCatalogFromTable
0x1C005D8BC: CipHvciVerifyHashInCatalogs
0x1C00418F0: CiVerifyHashInCatalog
0x1C002EE68: "SiPolicyUpdateSigners" ??_C@_1CM@NABDHEDK@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C002DC48: "\WINDOWS\SYSTEM32\SVCHOST.EXE" ??_C@_1DM@KMBEENJC@?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA3?$AA2?$AA?2?$AAS?$AAV?$AAC?$AAH?$AAO?$AAS?$AAT?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x1C0069D30: SIPolicyInitializeFromSerializedPolicies
0x1C00071FC: SIPolicySearchFileRules
0x1C0057F80: CipIsRuntimeSignerAlreadyRegistered
0x1C0036510: g_CatDbAlwaysUseResultsRunOnce
0x1C0016E80: SymCryptFdefModMulMontgomery1024
0x1C0009B30: SbGetRegistryDWordInPolicy
0x1C002DD70: "* The binary was attempted to be" ??_C@_0DN@OBFIIPJG@?$CK?5The?5binary?5was?5attempted?5to?5be@
0x1C003D190: "__cdecl _imp_PsIsProtectedProcessLight" __imp_PsIsProtectedProcessLight
0x1C0050BB8: CipAllocateLocalValidationContext
0x1C0028F33: "__cdecl _chkstk" __chkstk
0x1C00181D7: ZwQueryInformationFile
0x1C0036DD0: g_EtwEventHandle
0x1C0036584: g_CiSignerTypeMax
0x1C002CFA8: WhqlEnforcementDisabled
0x1C006E86C: I_PEUpdateHashCache
0x1C004EBC4: CipImageGetCertInfo
0x1C002D168: CiRevokedDriverLoaded
0x1C002E480: "1.3.6.1.4.1.311.10.3.23" ??_C@_0BI@BDCPPHI@1?43?46?41?44?41?4311?410?43?423?$AA@
0x1C003D6C0: "__cdecl _imp_RtlInitAnsiString" __imp_RtlInitAnsiString
0x1C004568C: CiGetCatalogHint
0x1C003D338: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C0013108: SymCryptMontgomeryFillScratchSpaces
0x1C002F358: "ATPSiPolicyVersion" ??_C@_1CG@HBJMKEGC@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0048DB0: I_AllocatePageHashes
0x1C003D400: "__cdecl _imp_PsIsCurrentThreadPrefetching" __imp_PsIsCurrentThreadPrefetching
0x1C003D140: "__cdecl _imp_ZwQuerySystemEnvironmentValueEx" __imp_ZwQuerySystemEnvironmentValueEx
0x1C00B9C40: "1.3.6.1.5.5.7.3.8" ??_C@_0BC@KBECMAKL@1?43?46?41?45?45?47?43?48?$AA@LBKOJDO@
0x1C0062630: MincrypK_ParseCertificateChainWithPolicy
0x1C005EC70: HashpFinalizeHash
0x1C003D368: "__cdecl _imp_MmUnmapViewInSystemSpace" __imp_MmUnmapViewInSystemSpace
0x1C00644D0: MinAsn1ParseSingleExtensionValue
0x1C0013B7C: SymCryptTwistedEdwardsFillScratchSpaces
0x1C004DA14: CipValidateImageHash
0x1C00171D0: SymCryptFdef369ModInvMontgomery
0x1C0064CE8: MincryptAlloc
0x1C0053DE0: CiInstrumentHVCIAudit
0x1C004B5A8: CipValidateFirstPage
0x1C00564D0: CipGetPolicyHash
0x1C00166A0: SymCryptFdefModulusInitMontgomeryInternal
0x1C00442E4: CipEnableJournalingAlways
0x1C004AEE0: CiGetBuildExpiryTime
0x1C0040090: TraceLoggingRegisterEx
0x1C003D748: "__cdecl _imp_ExReleaseSpinLockShared" __imp_ExReleaseSpinLockShared
0x1C003D450: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x1C006A5F0: SIPolicyQueryPolicyInformation
0x1C003D198: "__cdecl _imp_ZwFsControlFile" __imp_ZwFsControlFile
0x1C0036200: g_CiEaCacheLookasideList
0x1C002D088: CiIumPolicyFailure
0x1C002DB78: "\WINDOWS\EXPLORER.EXE" ??_C@_1CM@MDDFPPKB@?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?2?$AAE?$AAX?$AAP?$AAL?$AAO?$AAR?$AAE?$AAR?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x1C003D688: "__cdecl _imp_RtlCompareUnicodeStrings" __imp_RtlCompareUnicodeStrings
0x1C005EBF8: HashpHashBytes
0x1C00540A8: CiInstrumentPPLBypassBlocked
0x1C008F0F0: peauthvbn_GetDebugCredentialsData
0x1C0036A80: g_SiPolicyIsUefiSystem
0x1C0009D3C: SbValidateSkuUnlockToken
0x1C0015D90: SymCryptEqual
0x1C002FA38: "VBA" ??_C@_17GIKMEOOI@?$AAV?$AAB?$AAA?$AA?$AA@
0x1C001CC20: SymCryptFdefMontgomeryReduce512Asm
0x1C002C7E8: "HVCIEnabled" ??_C@_1BI@HPMFALKF@?$AAH?$AAV?$AAC?$AAI?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x1C00110F0: SymCryptShortWeierstrassIsEqual
0x1C004D8C4: CipValidateFileInCache
0x1C002DF30: "SYSTEM_INTEGRITY_POLICY_POLICYIN" ??_C@_1FG@BNCPAFK@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAI?$AAN?$AAT?$AAE?$AAG?$AAR?$AAI?$AAT?$AAY?$AA_?$AAP?$AAO?$AAL?$AAI?$AAC?$AAY?$AA_?$AAP?$AAO?$AAL?$AAI?$AAC?$AAY?$AAI?$AAN@
0x1C0001210: SymCryptFatal
0x1C0063B7C: MinAsn1DecodeUtcTime
0x1C0059788: CipRefreshPolicies
0x1C00183A0: ext_ms_win_ci_xbox_l1_1_0_XciValidateImageData
0x1C002EFD8: "SkuSiPolicyVersion" ??_C@_1CG@CNALLOMA@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00594A4: CipUpdateCiSettingsFromPolicies
0x1C003D5A8: "__cdecl _imp_RtlIsStateSeparationEnabled" __imp_RtlIsStateSeparationEnabled
0x1C003D4D0: "__cdecl _imp_PsGetSiloMonitorContextSlot" __imp_PsGetSiloMonitorContextSlot
0x1C003D4B0: "__cdecl _imp_SeQuerySecurityAttributesToken" __imp_SeQuerySecurityAttributesToken
0x1C00459E4: CipGetFileAttributes
0x1C003D158: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x1C0057EA0: CipValidateSigningPolicyForRuntimeSigners
0x1C003D0D0: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C006F284: VerifyCoreSignature
0x1C002E038: "vbscript.dll" ??_C@_1BK@DDAEFMGA@?$AAv?$AAb?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C00BE000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C003D2A8: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C00B1088: g_PEProcessList
0x1C0030368: "Merge" ??_C@_1M@OKFEOOIE@?$AAM?$AAe?$AAr?$AAg?$AAe?$AA?$AA@
0x1C006BF7C: KappxParseVersion
0x1C00B2000: "DataPath" ??_C@_1BC@DFKICBKN@?$AAD?$AAa?$AAt?$AAa?$AAP?$AAa?$AAt?$AAh?$AA?$AA@MBDGBPJL@
0x1C004C990: CipGetAppxCatalog
0x1C005CA58: CipLoadWimIdentities
0x1C002C4C0: "__cdecl load_config_used" _load_config_used
0x1C0030400: "PK" ??_C@_15OKGIJJH@?$AAP?$AAK?$AA?$AA@
0x1C0036580: g_CiIsWinPE
0x1C003D728: "__cdecl _imp_ExDeleteTimer" __imp_ExDeleteTimer
0x1C006A528: SIPolicyAlloc
0x1C0048694: I_MapPageHashes
0x1C0016A60: SymCryptFdefModSquareMontgomery
0x1C0059FA4: CiSetRuntimeUmciSigningLevel
0x1C003D6A8: "__cdecl _imp_PsDereferencePrimaryToken" __imp_PsDereferencePrimaryToken
0x1C0036D10: g_CipPolicyHashLock
0x1C0050D50: CipCalculateImageHash
0x1C0058920: CipApplySiPolicyEx
0x1C002D148: CiPPLRevokedImageNotLoaded
0x1C0018390: xGetDR7Value
0x1C001D230: SymCryptFdefRawSquare1024Asm
0x1C00421CC: CipGetPolicyPaths
0x1C002CF48: CiImageFileHashFoundInImageCertificate
0x1C00409B0: CipInitializeBootDriverState
0x1C00616C8: MincryptIsWeakCertHashAllowed
0x1C006D8E8: I_PEWriteComponentLoadExEvents
0x1C0058780: CipPackageGetInfoFromFullName
0x1C002DB58: "Code Integrity violation: %d " ??_C@_0BP@LLCPBAAL@Code?5Integrity?5violation?3?5?5?$CFd?6?$AA@
0x1C00063B4: SymCryptParallelHashProcess
0x1C000BDE0: SymCryptSha1Append
0x1C003D1B0: "__cdecl _imp_ObQueryNameString" __imp_ObQueryNameString
0x1C003D160: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C00076AC: KappxpDeriveVolumeRelativePathFromFileNameInformation
0x1C0045C3C: CipInitializeCatalogStores
0x1C002DD48: "* and does not meet the system p" ??_C@_0CI@EFEIOFHJ@?$CK?5and?5does?5not?5meet?5the?5system?5p@
0x1C003D0B0: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C002C9B0: "\Registry\MACHINE\System\Current" ??_C@_1HM@PLLBBJJF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C002E270: "CI\Scenarios\3" ??_C@_1BO@OBJBGGIC@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA3?$AA?$AA@
0x1C002F0E8: "UpdateSiPolicy.p7b" ??_C@_1CG@KFPJDIDF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C0064F40: SIPolicyParseAllowedSigners
0x1C001816B: ExFreePoolWithTag
0x1C0010530: SymCryptEcpointMaskedCopy
0x1C002CD18: CodeIntegrityEventProviderId
0x1C003D358: "__cdecl _imp_MmSectionObjectType" __imp_MmSectionObjectType
0x1C0042F60: CiQuerySecurityPolicy
0x1C0067DF0: SIPolicyPackagePolicySigners
0x1C0036E00: g_CiHvciDisallowedImagesCount
0x1C00110C0: SymCryptShortWeierstrassSetDistinguished
0x1C002D240: "Valid" ??_C@_1M@HFLCCCAA@?$AAV?$AAa?$AAl?$AAi?$AAd?$AA?$AA@
0x1C002D520: "{F750E6C3-38EE-11D1-85E5-00C04FC" ??_C@_1EO@NCDAAMAD@?$AA?$HL?$AAF?$AA7?$AA5?$AA0?$AAE?$AA6?$AAC?$AA3?$AA?9?$AA3?$AA8?$AAE?$AAE?$AA?9?$AA1?$AA1?$AAD?$AA1?$AA?9?$AA8?$AA5?$AAE?$AA5?$AA?9?$AA0?$AA0?$AAC?$AA0?$AA4?$AAF?$AAC@
0x1C003D268: "__cdecl _imp_ZwUnmapViewOfSection" __imp_ZwUnmapViewOfSection
0x1C003D098: "__cdecl _imp_Ndr64AsyncClientCall" __imp_Ndr64AsyncClientCall
0x1C002F038: "\Boot\SkuSiPolicy.p7b" ??_C@_1CM@PJNHIFEH@?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C0041B70: CipRegMultiSzToUnicodeStrings
0x1C005C180: CiVerifyPageHashSignedFile
0x1C00BB4C0: "unsigned char const * const rgbMicrosoftRoot4_Name" ?rgbMicrosoftRoot4_Name@@3QBEB
0x1C002FE30: "\NI\" ??_C@_19CKMGMKCO@?$AA?2?$AAN?$AAI?$AA?2?$AA?$AA@
0x1C003D2C8: "__cdecl _imp_qsort" __imp_qsort
0x1C006F980: MFKeyIsTrustedRootKey
0x1C00019D8: wil_details_FeaturePropertyCache_ReportUsageToService
0x1C005790C: CipUnregisterSigner
0x1C006A8F4: SIPolicyQueryBlob
0x1C004A14C: CiCatDbAlwaysUseResults
0x1C0043150: CiSetInformationProcess
0x1C003D6A0: "__cdecl _imp_RtlQueryPackageIdentity" __imp_RtlQueryPackageIdentity
0x1C0069FB4: SIPolicyIsPolicyPlatformSecured
0x1C0045A44: CipGetVolumeFlags
0x1C00099FC: SbpFindMatchingRegistryRule
0x1C003D4C8: "__cdecl _imp_PsUnregisterSiloMonitor" __imp_PsUnregisterSiloMonitor
0x1C00169B0: SymCryptFdefModMulMontgomeryMulx
0x1C0069EE8: SIPolicyGetSerializedPolicies
0x1C004813C: I_RemapCatalog
0x1C005BC08: CipQueryLockDownPolicyRestriction
0x1C002FF30: PEAUTH_BEGIN_COMPONENT_LOAD
0x1C00652C4: SIPolicyHashSizeToAlgorithm
0x1C00513D4: CipUpdateValidatationContextWithFileInfo
0x1C000ECA4: SymCryptRsaPkcs1ApplySignaturePadding
0x1C004A030: CipCatDbAlwaysUseResultsRunOnce
0x1C0048F64: I_FindPETrustedAttribute
0x1C0008564: KappxpNotifyNonPackagedFile
0x1C002CEF8: CiWritableExecutableSection
0x1C002EFC8: "SkuSi" ??_C@_1M@MOEMBDMP@?$AAS?$AAk?$AAu?$AAS?$AAi?$AA?$AA@
0x1C002CEE8: CiPolicyRefreshNotAllowed
0x1C00170B0: SymCryptFdef369ModSquareMontgomery
0x1C0014D60: SymCryptEcpointScalarMulFixedWindow
0x1C003D568: "__cdecl _imp_ExConvertPushLockExclusiveToShared" __imp_ExConvertPushLockExclusiveToShared
0x1C002E588: "runFullTrust" ??_C@_1BK@IGLNKAOH@?$AAr?$AAu?$AAn?$AAF?$AAu?$AAl?$AAl?$AAT?$AAr?$AAu?$AAs?$AAt?$AA?$AA@
0x1C003D220: IoFileObjectType
0x1C0030B30: "__cdecl _xmm@0c0d0e0f08090a0b0405060700010203" __xmm@0c0d0e0f08090a0b0405060700010203
0x1C005DF88: CipHvciFindDynamicRelocationTable
0x1C002D108: CiValidateImageHeaderComplete
0x1C002D360: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1C003D348: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C003D370: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C003D720: "__cdecl _imp_ExReleaseSpinLockExclusive" __imp_ExReleaseSpinLockExclusive
0x1C00AE760: "void __cdecl TlgAggregateInternalProviderCallback(struct _GUID const * __ptr64,unsigned long,unsigned char,unsigned __int64,unsigned __int64,struct _EVENT_FILTER_DESCRIPTOR * __ptr64,void * __ptr64)" ?TlgAggregateInternalProviderCallback@@YAXPEBU_GUID@@KE_K1PEAU_EVENT_FILTER_DESCRIPTOR@@PEAX@Z
0x1C00360CC: g_CatalogFileHashLength
0x1C005E984: HashKComputeImageHash
0x1C003D738: "__cdecl _imp_ExTryAcquirePushLockExclusiveEx" __imp_ExTryAcquirePushLockExclusiveEx
0x1C002D408: "*.cat" ??_C@_1M@FOCJHFAG@?$AA?$CK?$AA?4?$AAc?$AAa?$AAt?$AA?$AA@
0x1C0060F78: MinCryptIsFileRevoked
0x1C000F4E4: SymCryptModElementCreate
0x1C0045818: CiSetCatalogHint
0x1C002E660: g_MsitTestCodeSignCA3Hash
0x1C0057564: CipAllocateAndQuerySecureBootPolicyValue
0x1C002D570: "MinimizeFootprint" ??_C@_1CE@EDDHGNMH@?$AAM?$AAi?$AAn?$AAi?$AAm?$AAi?$AAz?$AAe?$AAF?$AAo?$AAo?$AAt?$AAp?$AAr?$AAi?$AAn?$AAt?$AA?$AA@
0x1C0008780: PEAuthInitStore
0x1C0036AF0: "struct _SYMCRYPT_ECURVE * __ptr64 __ptr64 g_pEcurveP256" ?g_pEcurveP256@@3PEAU_SYMCRYPT_ECURVE@@EA
0x1C0036A81: g_SIPolicyWinPolicyTrialMode
0x1C002FF70: "1.3.6.1.4.1.311.10.5.3" ??_C@_0BH@GKCOHBMK@1?43?46?41?44?41?4311?410?45?43?$AA@
0x1C001B5C0: SymCryptFdefMaskedCopyAsm
0x1C0061578: MinCryptVerifySignedFileKMode
0x1C003D460: "__cdecl _imp_IoGetActivityIdThread" __imp_IoGetActivityIdThread
0x1C000F9A4: SymCryptModSetRandom
0x1C001B560: SymCryptFdefRawSubAsm
0x1C001B620: SymCryptFdefRawMulAsm
0x1C003D660: "__cdecl _imp_RtlAnsiStringToUnicodeString" __imp_RtlAnsiStringToUnicodeString
0x1C002A000: FlightSignedNotBeforeVariableName
0x1C005B0A0: CiSetDynamicCodeTrustClaim
0x1C0054608: CiLogPolicyEvent
0x1C003D3E8: "__cdecl _imp_IoClearActivityIdThread" __imp_IoClearActivityIdThread
0x1C002E3E0: "TestsigningSigners" ??_C@_1CG@JLKGFBBD@?$AAT?$AAe?$AAs?$AAt?$AAs?$AAi?$AAg?$AAn?$AAi?$AAn?$AAg?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C003D428: "__cdecl _imp_IoSetActivityIdThread" __imp_IoSetActivityIdThread
0x1C003D570: "__cdecl _imp_ExReleasePushLockEx" __imp_ExReleasePushLockEx
0x1C002D1B0: "\SystemRoot\System32\CodeIntegri" ??_C@_1GA@BKJPMDFJ@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi@
0x1C003D1A8: "__cdecl _imp_PsGetProcessServerSilo" __imp_PsGetProcessServerSilo
0x1C000EFAC: SymCryptSizeofIntFromDigits
0x1C0036630: g_CiScenarios
0x1C002CCF8: CiRevokedImageLoaded
0x1C002CA70: "\SystemRoot\System32\CodeIntegri" ??_C@_1EI@KEPBEFEF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi@
0x1C00605B8: I_MinCryptVerifyRFC3161TimeStamp
0x1C0015E70: SymCryptFdefModulusCopyFixupGeneric
0x1C005A11C: CipSIPolicyGetPolicyExecutionStatus
0x1C001C660: SymCryptFdefRawSquare512Asm
0x1C002EB50: "Microsoft-Reserved-24C26ACC-DE62" ??_C@_1HA@KHACJHCN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAd?$AA?9?$AA2?$AA4?$AAC?$AA2?$AA6?$AAA?$AAC?$AAC?$AA?9?$AAD?$AAE?$AA6?$AA2@
0x1C005CEB4: CiAllocateImageDataForHvci
0x1C001B850: SymCryptFdefRawSquareAsm
0x1C002E790: "SkuSiPolicy.p7b" ??_C@_1CA@IBPJBCBI@?$AAS?$AAk?$AAu?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C002E058: "Hash" ??_C@_19POHNNAHL@?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1C0042F10: CipQueryPolicyInformation
0x1C006865C: SIPolicyIsPolicyActive
0x1C0048C70: CipV1PageHashSearchCompareRoutine
0x1C003D628: "__cdecl _imp_RtlGetEnabledExtendedFeatures" __imp_RtlGetEnabledExtendedFeatures
0x1C0052820: CiLogWhqlDriverExemption
0x1C002CEB8: CiCatalogLoadStart
0x1C005ED60: HashpAddExcludeRange
0x1C002CA30: "TestPath" ??_C@_1BC@DOEMABBO@?$AAT?$AAe?$AAs?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1C0047950: I_ReloadCatalogDirectory
0x1C003D760: "__cdecl _imp_ExAcquireSpinLockSharedAtDpcLevel" __imp_ExAcquireSpinLockSharedAtDpcLevel
0x1C004A1C0: MIDL_user_allocate
0x1C002DF08: "%hu.%hu.%hu.%hu" ??_C@_0BA@ELKGOGDA@?$CFhu?4?$CFhu?4?$CFhu?4?$CFhu?$AA@
0x1C0014880: SymCryptTwistedEdwardsIsEqual
0x1C0040AA4: CipInitialize
0x1C0015E70: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0010C2C: SymCryptEcpointSetValue
0x1C0028F70: memcmp
0x1C0064338: MinAsn1ParseOIDSequence
0x1C002E7D0: "WinSiPolicy.p7b" ??_C@_1CA@JMJMPADN@?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C006D150: PECheckComponentLoad
0x1C0049A68: I_TransferCatalogToHvci
0x1C0045984: CipImageValidityPeriod
0x1C0064A34: MincryptStringToUnicodeString
0x1C002CD58: CiValidateFileHashStart
0x1C004E764: CipImageGetImageHash
0x1C002FEF0: PEAUTH_END_INITIALIZATION
0x1C0036110: SymCryptModulusTypeSelections
0x1C00BCA90: "unsigned char const * const rgbMicrosoftRoot5_Name" ?rgbMicrosoftRoot5_Name@@3QBEB
0x1C003D698: "__cdecl _imp_PsReferencePrimaryToken" __imp_PsReferencePrimaryToken
0x1C003D0F0: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C002DE50: "\Users\" ??_C@_1BA@FJJFMPFO@?$AA?2?$AAU?$AAs?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
0x1C002F170: "UpdateRvkSiPolicy.p7b" ??_C@_1CM@FLDNIMKB@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAR?$AAv?$AAk?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C002A010: ProhibitedExclusions
0x1C006A58C: SIPolicyQueryWindowsLockdownMode
0x1C0062B2C: I_MinCryptBuildErrorPolicy
0x1C00693F4: SIPolicyParseV3Data
0x1C0069BC8: SIPolicyHashActiveCodeExecutionPolicies
0x1C004BA40: CiValidateImageHeader
0x1C002E438: "1.3.6.1.4.1.311.10.3.6" ??_C@_0BH@DCDCNKFD@1?43?46?41?44?41?4311?410?43?46?$AA@
0x1C0041AF4: CipFreeUnicodeStringList
0x1C003D640: "__cdecl _imp_bsearch_s" __imp_bsearch_s
0x1C003D4D8: "__cdecl _imp_PsRegisterSiloMonitor" __imp_PsRegisterSiloMonitor
0x1C0044B00: CiSetFileCache
0x1C0030470: EfiCertSha384Guid
0x1C0017370: SymCryptFdefRawGetValue
0x1C0066F04: SIPolicyMatchFileRules
0x1C002C8C8: "DebugLevel" ??_C@_1BG@CKNGENOP@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1C005EEB4: HashpParsePEHeader
0x1C002E4E0: "1.3.6.1.4.1.311.10.3.26" ??_C@_0BI@HMEFALDN@1?43?46?41?44?41?4311?410?43?426?$AA@
0x1C003D1D0: "__cdecl _imp_IoGetRelatedDeviceObject" __imp_IoGetRelatedDeviceObject
0x1C002AD60: g_BlockedDllsForPPL
0x1C002D700: "\Registry\Machine\SYSTEM\Current" ??_C@_1KA@MEAABKPK@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C003D050: "__cdecl _imp_RpcAsyncGetCallStatus" __imp_RpcAsyncGetCallStatus
0x1C00562B8: CiLogSIPolicyRefresh
0x1C006AAF4: SIPolicySetPersistentVariableWearingConscious
0x1C003D060: "__cdecl _imp_RpcBindingBind" __imp_RpcBindingBind
0x1C002CF58: CiImageFileHashFoundInHintCatalog
0x1C00601C0: MinCryptFreeSignature
0x1C003D610: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C00361C4: g_CiFirmwareType
0x1C003D2C0: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C00360C8: g_V1CatalogsSupported
0x1C00642A8: MinAsn1ParsePublicKeyInfo
0x1C003D410: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x1C0062B8C: I_MinCryptCheckEKURequirements
0x1C0059D58: CiUpdatePersistentVariablesAndUnregisterSigners
0x1C003D488: "__cdecl _imp_SeQuerySecureBootPlatformManifest" __imp_SeQuerySecureBootPlatformManifest
0x1C000F300: SymCryptIntIsEqualUint32
0x1C00B1070: g_PEProcessHashBucketList
0x1C003D310: "__cdecl _imp_RtlAvlRemoveNode" __imp_RtlAvlRemoveNode
0x1C006D890: I_PESetTrustState
0x1C003D4B8: "__cdecl _imp_KeBugCheckEx" __imp_KeBugCheckEx
0x1C002CDE8: SmartlockerVerbose
0x1C005D5E0: CiHvciCalculateHeaderHash
0x1C00038D4: SymCryptParallelSha256AppendBlocks_ymm
0x1C003D3B8: "__cdecl _imp_RtlImageNtHeaderEx" __imp_RtlImageNtHeaderEx
0x1C0066740: SIPolicyFindEkuBuffer
0x1C0036E58: g_HvciSupported
0x1C002C800: "Winload" ??_C@_1BA@HAPAKBIG@?$AAW?$AAi?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1C0036D48: g_CipPolicyStatusLock
0x1C000DCDC: SymCryptCallbackAlloc
0x1C00650E8: SIPolicyParseDeniedSigners
0x1C0041970: CiCheckSignedFile
0x1C004A60C: CiRemoveProcessDebugAuthEntries
0x1C003D390: "__cdecl _imp_PsProcessType" __imp_PsProcessType
0x1C0001B00: CipSetFileVersionInformation
0x1C003D718: "__cdecl _imp_ExSetTimer" __imp_ExSetTimer
0x1C0082048: peauthvbn_InitStore
0x1C002E2D0: "CI\Scenarios\9" ??_C@_1BO@IOCMIGOG@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA9?$AA?$AA@
0x1C00493A0: I_ParseCatalogAndMapHashes
0x1C005A2BC: CipGetPolicyFiles
0x1C00303A8: "Level" ??_C@_1M@MFHLECJA@?$AAL?$AAe?$AAv?$AAe?$AAl?$AA?$AA@
0x1C003D438: "__cdecl _imp_RtlTimeToTimeFields" __imp_RtlTimeToTimeFields
0x1C003D4F0: "__cdecl _imp_PsInsertPermanentSiloContext" __imp_PsInsertPermanentSiloContext
0x1C002FB00: "\Registry\Machine\Software\Micro" ??_C@_1KK@FIEODDBI@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C0007C24: KappxpSetPackageStatus
0x1C00181FB: ZwReadFile
0x1C003D000: "__cdecl _imp_KeQueryPerformanceCounter" __imp_KeQueryPerformanceCounter
0x1C003D0D8: "__cdecl _imp_ZwDeleteKey" __imp_ZwDeleteKey
0x1C00696E8: SIPolicyParseV5Data
0x1C003D2B8: "__cdecl _imp_ExIsResourceAcquiredExclusiveLite" __imp_ExIsResourceAcquiredExclusiveLite
0x1C002CDD8: SiPolicyATPFailureAudit
0x1C002E5C0: g_DebugPolicyPublisher
0x1C003D2E8: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C002CF08: CiRevokedCatalog
0x1C002F380: "ATPSiPolicyUpdateSigners" ??_C@_1DC@DODCOFOB@?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C005DC70: CiHvciUpdateSePoolWithPageHashesAndUnlockImage
0x1C001802C: SymCryptScsTableStore
0x1C00BC410: "unsigned char const * const rgb2005DMDPreviewReleaseRoot_Name" ?rgb2005DMDPreviewReleaseRoot_Name@@3QBEB
0x1C002C890: "DebugFlags" ??_C@_1BG@PDIFALE@?$AAD?$AAe?$AAb?$AAu?$AAg?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x1C00360B0: "__cdecl _security_cookie" __security_cookie
0x1C005D880: CiHvciVerifyPageHashSignedFile
0x1C00695E8: SIPolicyParseV4Data
0x1C0010314: SymCryptRsaPkcs1Verify
0x1C00579A8: CipRegisterSigningInformationEx
0x1C0015E80: SymCryptFdefModPreGetGeneric
0x1C00BB220: "unsigned char const * const rgbMicrosoftRoot2_Name" ?rgbMicrosoftRoot2_Name@@3QBEB
0x1C0064E70: SIPolicyParseFileRules
0x1C002D068: CiPolicyRefreshIgnored
0x1C003D608: KdDebuggerEnabled
0x1C0036B70: g_PEBootDriverList
0x1C005A880: CipCheckSmartlockerEAandProcessToken
0x1C002A940: CatNameValueOIDBlob
0x1C0067B48: SIPolicyValidateImage
0x1C005660C: CiUnpackPolicy
0x1C002CF88: SmartlockerOperationalAudit
0x1C0030858: " `�H
e
" ??_C@_0M@CJJJLON@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AB?$AA@
0x1C001049C: SymCryptEcpointCreateEx
0x1C006250C: I_MinCryptFindIssuerCertificateByName
0x1C002CD38: CiRevokedDriverNotLoaded
0x1C005DD7C: CiHvciAddNonSectionDataToFileHash
0x1C0043B3C: CipUnregisterAcPolicySigners
0x1C005AD30: CiCleanGlobalState
0x1C002FD18: "PackageVersion" ??_C@_1BO@BFCMHECJ@?$AAP?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00B1060: g_WeakCryptoPolicies
0x1C0030878: " `�H
e" ??_C@_0M@CJLEMICO@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AC?$AA@
0x1C0006710: MinCryptRevokePrereleaseWindowsPCA
0x1C0056EA0: CipValidateSigningPolicyForSigningLevel
0x1C0061278: MinCryptVerifySignedHash
0x1C003D320: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C003D2F0: "__cdecl _imp_ZwOpenDirectoryObject" __imp_ZwOpenDirectoryObject
0x1C003D580: "__cdecl _imp_RtlCheckTokenMembership" __imp_RtlCheckTokenMembership
0x1C0030320: "Authorization" ??_C@_1BM@OIILOKJL@?$AAA?$AAu?$AAt?$AAh?$AAo?$AAr?$AAi?$AAz?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00BC3D8: "unsigned char const * const rgb2005DMDRoot_Name" ?rgb2005DMDRoot_Name@@3QBEB
0x1C00652A8: SIPolicyUmciEnabled
0x1C002C960: "HvciAuditMode" ??_C@_1BM@MFNKDJKB@?$AAH?$AAv?$AAc?$AAi?$AAA?$AAu?$AAd?$AAi?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C0030B10: "__stdcall _xmm" __xmm@00000001000000010000000100000001
0x1C00083BC: KappxpNotifyPackagedFile
0x1C006074C: I_MinCryptGetSigningTime
0x1C003D258: "__cdecl _imp_ZwSetInformationVirtualMemory" __imp_ZwSetInformationVirtualMemory
0x1C006A3A8: SIPolicyStatusPrint
0x1C0056838: CipInitializePolicy
0x1C005AEFC: CipQueryDynamicCodeTrustClaim
0x1C002AC40: g_SiPolicyFailureEvents
0x1C0036300: g_IgnoreLifetimeSigningEKU
0x1C0016A10: SymCryptFdefModMulMontgomeryMulx1024
0x1C003D5F0: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x1C0030B40: "__cdecl _ymm@0c0d0e0f08090a0b04050607000102030c0d0e0f08090a0b0405060700010203" __ymm@0c0d0e0f08090a0b04050607000102030c0d0e0f08090a0b0405060700010203
0x1C0064680: MinAsn1ParseSignedDataCertificatesEx
0x1C002E080: "Count" ??_C@_1M@NBCIMFHI@?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1C002FF00: PEAUTH_USER_MODE_COMPONENT_LOAD_FAIL
0x1C003D3C0: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C002FA0C: "IE" ??_C@_15MKKAKNPH@?$AAI?$AAE?$AA?$AA@
0x1C002CFE8: ProtectionVendorGuid
0x1C000DDBC: SymCryptRsakeyCreate
0x1C00181A1: RtlDuplicateUnicodeString
0x1C0010124: SymCryptRsaCoreVerifyInput
0x1C0068980: SIPolicyGetOriginalFilenameAndVersionFromImageBase
0x1C00690B0: SIPolicyGetCiSigners
0x1C002FE80: "\SystemRoot\System32\Drivers\PEA" ??_C@_1FA@JEMFAIKA@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AAP?$AAE?$AAA@
0x1C00427D4: CipTryGetProcessAppID
0x1C006EF00: AllocAndReadStringFromRegistry
0x1C00AECFC: HashpVerifyPkcs1Signature
0x1C0016D10: SymCryptFdefModSetPostMontgomery256
0x1C002FE40: "\Wpsystem\AppRepository\" ??_C@_1DC@GIGGDGAJ@?$AA?2?$AAW?$AAp?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAA?$AAp?$AAp?$AAR?$AAe?$AAp?$AAo?$AAs?$AAi?$AAt?$AAo?$AAr?$AAy?$AA?2?$AA?$AA@
0x1C0054990: CipQueryAndLogFileNameForEvent
0x1C0015E70: SymCryptFdefModulusInitGeneric
0x1C0002F10: SymCryptParallelSha256AppendBlocks_xmm
0x1C003D470: "__cdecl _imp_EtwWrite" __imp_EtwWrite
0x1C002D920: "\REGISTRY\MACHINE\Software\Polic" ??_C@_1HG@BMLMKOHH@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc@
0x1C0015DF8: SymCryptFdefModulusCreate
0x1C001CEB0: SymCryptFdefRawMul1024Asm
0x1C003D668: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1C002CFB8: CiImagePageHashSetCatalogHint
0x1C00AEB30: SbeFree
0x1C002CE78: CiPolicyRefreshStarted
0x1C003D770: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x1C000EB90: SymCryptEckeySetValue
0x1C0017140: SymCryptFdef369ModPreGetMontgomery
0x1C0050CD8: CiFreeValidationContext
0x1C002C660: "\windows\system32\" ??_C@_1CG@OIOJOMBL@?$AA?2?$AAw?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AA?$AA@
0x1C0054A8C: CipProcessPerformanceLog
0x1C0065310: SIPolicyParseString
0x1C001BF70: SymCryptFdefModSub256Asm
0x1C005B618: CipGetSupplementalPolicyPath
0x1C0036528: Feature_WldpDeveloperMode__private_propertyCache
0x1C002D0B8: CiHvciUnalignedSection
0x1C002F638: "NoRevalidationUponRefresh" ??_C@_1DE@NKKELDJI@?$AAN?$AAo?$AAR?$AAe?$AAv?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAi?$AAo?$AAn?$AAU?$AAp?$AAo?$AAn?$AAR?$AAe?$AAf?$AAr?$AAe?$AAs?$AAh?$AA?$AA@
0x1C0001650: wil_details_SetPropertyCacheOpportunityCallback
0x1C0041A20: CiFindPageHashesInCatalog
0x1C0036C00: g_HashCacheLock
0x1C005EB50: HashpInitHash
0x1C002EE48: "SiPolicyVersion" ??_C@_1CA@JPCHJAPP@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000DD28: SymCryptSizeofRsakeyFromParams
0x1C00BD008: "__cdecl _security_init_cookie" __security_init_cookie
0x1C00089EC: PEAuthGetDebugCredentialsData
0x1C005D3D0: CiHvciCalculateImageHash
0x1C0041D10: CiHashMemory
0x1C003D578: "__cdecl _imp___chkstk" __imp___chkstk
0x1C000F16C: SymCryptIntSetValue
0x1C0001220: "__cdecl TlgDefineProvider_annotation__Tlgg_CiTraceLoggingProviderProv" _TlgDefineProvider_annotation__Tlgg_CiTraceLoggingProviderProv
0x1C003D430: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x1C003D110: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C00BB190: "unsigned char const * const rgbMicrosoftRoot3_Name" ?rgbMicrosoftRoot3_Name@@3QBEB
0x1C003D758: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00576AC: CipGetMinimumAlgorithmForAllScenarios
0x1C006D994: I_SetSecurityState
0x1C005A870: CiSetTrustedOriginClaimId
0x1C0046BC0: MinCrypK_FindPageHashesInSignedFile
0x1C006B3F8: SIPolicyComparePersistentEntry
0x1C002F9F0: "AllowAllHosts" ??_C@_1BM@EEMKGCJF@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAA?$AAl?$AAl?$AAH?$AAo?$AAs?$AAt?$AAs?$AA?$AA@
0x1C0009B74: SbGetRegistryBinaryInPolicy
0x1C002D028: CiSignatureInformationEvent
0x1C000129C: CiCatDbSmartlockerDefenderCheck
0x1C004CAF4: CipFindFileHash
0x1C002EA30: "\EFI\Microsoft\Boot\Policies" ??_C@_1DK@ODOLDNJA@?$AA?2?$AAE?$AAF?$AAI?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAB?$AAo?$AAo?$AAt?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?$AA@
0x1C0036A20: g_SiPolicyHandles
0x1C0002624: CiInitializePolicyFromPolicies
0x1C0054A00: CipQueryAndLogFileNameForCatalogEvent
0x1C0064D40: SIPolicyUnicodeStringSearchCompare
0x1C0058044: CipGetAcceptedRootKeys
0x1C003D030: "__cdecl _imp_XciValidateImageData" __imp_XciValidateImageData
0x1C005C5B8: CiCheckPolicyBits
0x1C006F210: ReadFromFile
0x1C000EFD8: SymCryptIntCreate
0x1C0059180: CipUnregisterSiPolicySigners
0x1C0054268: CiLogFileEventWithStatus
0x1C0063504: MinAsn1ExtractParsedCertificatesFromSignedData
0x1C005E880: CipUnlockImagePages
0x1C0051E7C: CiInstrumentInitialize
0x1C000D270: SymCryptMd5AppendBlocks
0x1C003D648: "__cdecl _imp_RtlTimeFieldsToTime" __imp_RtlTimeFieldsToTime
0x1C002C810: "MiniNT" ??_C@_1O@BMELCLLB@?$AAM?$AAi?$AAn?$AAi?$AAN?$AAT?$AA?$AA@
0x1C002E810: "System32\CodeIntegrity\SiPolicy." ??_C@_1EI@GICELIG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4@
0x1C002B880: g_PlatformSecureSettingProviderString
0x1C004C87C: CipCallPeauth
0x1C0006DC4: SIPolicyParsePolicySigners
0x1C0030830: "+" ??_C@_09GKOEPDAC@?$AG?$AF?$CL?$AO?$AD?$AC?$BK?$AF?$AA?$AA@
0x1C002CAF0: "Licensed" ??_C@_1BC@JLGLFHGG@?$AAL?$AAi?$AAc?$AAe?$AAn?$AAs?$AAe?$AAd?$AA?$AA@
0x1C006DC90: I_PEVerifyBootDrivers
0x1C002E498: "1.3.6.1.4.1.311.76.3.1" ??_C@_0BH@MIPKJKLD@1?43?46?41?44?41?4311?476?43?41?$AA@
0x1C002E7B0: "SiPolicy.p7b" ??_C@_1BK@FEAPKNHI@?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C00047A8: SymCryptSha256AppendBlocks_ul1
0x1C002E6F8: g_CipMinimumTimeOfTrustForDriverStl
0x1C0016870: SymCryptFdefModPreGetMontgomery
0x1C002FF20: PEAUTH_SET_KERNEL_STATE_UNTRUSTED
0x1C003D0A8: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C0046F60: I_MapCatalog
0x1C003D538: "__cdecl _imp_RtlImageDirectoryEntryToData" __imp_RtlImageDirectoryEntryToData
0x1C003D1F8: "__cdecl _imp_PsGetProcessProtection" __imp_PsGetProcessProtection
0x1C003D740: "__cdecl _imp_ExReleaseSpinLockSharedFromDpcLevel" __imp_ExReleaseSpinLockSharedFromDpcLevel
0x1C002F600: "UpdateDriverSiPolicy.p7b" ??_C@_1DC@EJPOECDE@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C000EDE4: SymCryptRsaPkcs1CheckSignaturePadding
0x1C00433C8: CipParseAcPolicyData
0x1C00570D4: CipValidateChainAgainstSigner
0x1C003D670: "__cdecl _imp_LdrResSearchResource" __imp_LdrResSearchResource
0x1C00515DC: CipApplySIPolicyUMCI
0x1C000EF6C: SymCryptDigitsFromBits
0x1C0016DE0: SymCryptFdefModMulMontgomery512
0x1C003D040: "__cdecl _imp_SeCodeIntegrityCacheExt" __imp_SeCodeIntegrityCacheExt
0x1C0054FE4: CipProcessSIPolicyFailure
0x1C002F5A0: "System32\CodeIntegrity\UpdateDri" ??_C@_1GA@MGIBDJJP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAo?$AAd?$AAe?$AAI?$AAn?$AAt?$AAe?$AAg?$AAr?$AAi?$AAt?$AAy?$AA?2?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAD?$AAr?$AAi@
0x1C0036DE0: g_CiExclusionListCount
0x1C0099E6C: peauthvbn_StoreParameter
0x1C0062DCC: I_MincryptAddChainInfo
0x1C004AEF0: CiValidateImageHeaderMapping
0x1C002CE98: SmartlockerOperationalSuccess
0x1C006F460: MFGetGRL
0x1C001C380: SymCryptFdefModSquareMontgomery256Asm
0x1C00699F4: SIPolicyQuerySecurityPolicy
0x1C0018340: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0036588: g_SiPolicyHash
0x1C003D750: "__cdecl _imp_ExAcquireSpinLockShared" __imp_ExAcquireSpinLockShared
0x1C002DCB0: "********************************" ??_C@_0EE@LHCJFAIO@?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK?$CK@
0x1C00453E0: CiGetFileCache
0x1C002E178: "CI\Scenarios\6" ??_C@_1BO@NGEPJGLA@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA6?$AA?$AA@
0x1C001C340: SymCryptFdefMontgomeryReduce256Asm
0x1C005DB34: CiHvciValidateImageData
0x1C006B430: SIPolicyDeletePersistentVariable
0x1C002E0E8: "DisableLifetimeSigning" ??_C@_1CO@JFPCPMII@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAL?$AAi?$AAf?$AAe?$AAt?$AAi?$AAm?$AAe?$AAS?$AAi?$AAg?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x1C0008680: IsNgenPackageFileOnPhone
0x1C006B354: SIPolicyUpdatePersistentVariable
0x1C0065FC8: SIPolicyFindScenarioAllowSigners
0x1C003D068: "__cdecl _imp_RpcAsyncInitializeHandle" __imp_RpcAsyncInitializeHandle
0x1C002E068: "CI\Signers" ??_C@_1BG@BGOGGINE@?$AAC?$AAI?$AA?2?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C002DE78: "%USERPROFILE%" ??_C@_1BM@LFINAEKG@?$AA?$CF?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$CF?$AA?$AA@
0x1C003D630: "__cdecl _imp_KeSaveExtendedProcessorState" __imp_KeSaveExtendedProcessorState
0x1C002E3C8: "TestSigners" ??_C@_1BI@DAOJINKM@?$AAT?$AAe?$AAs?$AAt?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C003D3E0: "__cdecl _imp_PsQueryProcessAttributesByToken" __imp_PsQueryProcessAttributesByToken
0x1C0066B48: SIPolicyMatchFileRefRule
0x1C004D1A8: CipGetPageHashesForFile
0x1C002E350: "CI\Scenarios\130" ??_C@_1CC@IELNCKEI@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA1?$AA3?$AA0?$AA?$AA@
0x1C00AF0D0: HashpHashMemory
0x1C0030408: "KEK" ??_C@_17PNKKLKMO@?$AAK?$AAE?$AAK?$AA?$AA@
0x1C003D200: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C003D588: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C00BC8C0: "unsigned char const * const rgbMicrosoftRoot0_Name" ?rgbMicrosoftRoot0_Name@@3QBEB
0x1C002F7E0: "* It is now allowed to load bec" ??_C@_1GM@HPGFNHEA@?$AA?$CK?$AA?5?$AA?5?$AAI?$AAt?$AA?5?$AAi?$AAs?$AA?5?$AAn?$AAo?$AAw?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAb?$AAe?$AAc@
0x1C00B106A: g_TrustFlightSigning
0x1C0001CE4: CiInstrumentSmartlockerInformation
0x1C00635A4: MinAsn1FindPageHashesAttribute
0x1C003D220: "__cdecl _imp_IoFileObjectType" __imp_IoFileObjectType
0x1C003D0E0: "__cdecl _imp_ZwSetInformationFile" __imp_ZwSetInformationFile
0x1C0065388: SIPolicyParseBinary
0x1C0030840: "+" ??_C@_07HNMNMMHJ@?$AG?$AF?$CL?$AO?$AD?$AC?$BK?$AA@
0x1C003D318: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C002C480: SymCryptSha1OidList
0x1C0048C20: I_HashSearchCompareRoutineSHA256
0x1C002E960: "ci.dll" ??_C@_1O@GAPAGAOL@?$AAc?$AAi?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C003D550: "__cdecl _imp_RtlInterlockedSetClearRun" __imp_RtlInterlockedSetClearRun
0x1C000E054: SymCryptRsakeyWipe
0x1C0062490: I_MinCryptFindRootByKey
0x1C006EC84: I_PEGetComponentList
0x1C005CE90: CiGetStrongImageReference
0x1C000F9B4: SymCryptEcDsaTruncateHash
0x1C002F318: "UpdateWinSiPolicy.p7b" ??_C@_1CM@CBLHBBHD@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAW?$AAi?$AAn?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C005C8CC: CiIsFileWimBacked
0x1C00593E0: CiRevalidateImage
0x1C0064C0C: MincryptGetOpusProgramNameFromAuthenticatedAttributes
0x1C0006644: HashpSelfTest
0x1C00BC1B0: "unsigned char const * const rgb2005DMDPreviewReleaseRoot_PubKeyInfo" ?rgb2005DMDPreviewReleaseRoot_PubKeyInfo@@3QBEB
0x1C0030848: " `�H
e
" ??_C@_0O@IKMGAHBP@?$AG?7?$GA?$IGH?$ABe?$AD?$AE?$AC?$AB?$AF?$AA?$AA@
0x1C001C142: SymCryptFdefMontgomerReduce256AsmInternal
0x1C003D790: ntoskrnl_NULL_THUNK_DATA
0x1C002DB28: Feature_WldpDeveloperMode_logged_traits
0x1C0009AD4: SbGetRegistryStringInPolicy
0x1C0001B74: RtlUnicodeStringCat
0x1C003D128: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00625A4: I_MinCryptGetCertificateEKUs
0x1C0050E90: CiVerifyFileHashInCatalogs
0x1C0009458: "__cdecl TlgWriteAgg" _TlgWriteAgg
0x1C000F780: SymCryptModElementIsEqual
0x1C003D290: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C00496D8: CipFindCatalogByName
0x1C0036070: g_CipWhichLevelComparisons
0x1C006A090: SIPolicyMatchPerAppFileRules
0x1C0028CC0: SymCryptFdef369MontgomeryReduceAsm
0x1C003D130: "__cdecl _imp_ZwOpenFile" __imp_ZwOpenFile
0x1C0064D14: MincryptFree
0x1C006C06C: KappxParsePackageFullNameFromToken
0x1C0016070: SymCryptFdefModNegGeneric
0x1C002D650: "\Registry\Machine\OSBOOT\SYSTEM\" ??_C@_1KO@MHEFHBJB@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAO?$AAS?$AAB?$AAO?$AAO?$AAT?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2@
0x1C00361C0: g_DbgLevel
0x1C006C5F8: PEReloadGRL
0x1C001774C: SymCryptModExpWindowed
0x1C002A930: PackageNameBlob
0x1C0008960: PEAuthSetDebugCredentialsData
0x1C0042E3C: CipCheckLicensingPhase2
0x1C005527C: CipReportSiPolicyFailure
0x1C00183A0: ext_ms_win_ntos_ksigningpolicy_l1_1_0_SeCodeIntegrityCacheExt
0x1C00AEFC8: HashpVerifyEcdsaSignature
0x1C0046A88: MinCrypK_CheckSignedFile
0x1C002E000: "jscript.dll" ??_C@_1BI@DDKHEFJH@?$AAj?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1C001B500: SymCryptFdefRawAddAsm
0x1C0030340: "UnlockID" ??_C@_1BC@IGGNHMCM@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAI?$AAD?$AA?$AA@
0x1C002F440: "UpdateATPSiPolicy.p7b" ??_C@_1CM@DEPDMJFM@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAA?$AAT?$AAP?$AAS?$AAi?$AAP?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?4?$AAp?$AA7?$AAb?$AA?$AA@
0x1C0053BF8: CiConvertRtlTimeToSystemTime
0x1C0016930: SymCryptFdefModMulMontgomery
0x1C00652B8: SIPolicyScriptEnforcementDisabled
0x1C000BE10: SymCryptSha1Result
0x1C003D0F8: "__cdecl _imp_PsReferenceProcessFilePointer" __imp_PsReferenceProcessFilePointer
0x1C003D138: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C003D270: "__cdecl _imp_RtlAvlInsertNodeEx" __imp_RtlAvlInsertNodeEx
0x1C002D058: CiImagePageHashNotFoundDebuggerAttached
0x1C0008AD4: SSCatDBEnumCatalogs
0x1C0036B68: g_PEAuthEtwHandle
0x1C005A218: CipSIPolicySetPolicyExecutionStatus
0x1C005D370: CiHvciFreeSecureImageAndUnlockImage
0x1C0041D48: CiOpenFileOnCleanStack
0x1C004FF70: CipReportAndReprieveUMCIFailure
0x1C003D3F8: "__cdecl _imp_LdrResFindResource" __imp_LdrResFindResource
0x1C0015E8C: SymCryptFdefIntToModulus
0x1C002E970: "$Kernel.Purge.TrustClaim" ??_C@_0BJ@OCLEKHKB@$Kernel?4Purge?4TrustClaim?$AA@
0x1C001046C: SymCryptSizeofEcpointFromCurve
0x1C005C648: CiInitializeValidationContext
0x1C002E3A0: "ProductionSigners" ??_C@_1CE@GMLFPMDI@?$AAP?$AAr?$AAo?$AAd?$AAu?$AAc?$AAt?$AAi?$AAo?$AAn?$AAS?$AAi?$AAg?$AAn?$AAe?$AAr?$AAs?$AA?$AA@
0x1C00413FC: CipGetRegistryParameters
0x1C004750C: I_ParseCatalog
0x1C006CBBC: PESetPhase1Initialization
0x1C003D180: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C002EAF8: "ManufacturingMode" ??_C@_1CE@MMCPOLJK@?$AAM?$AAa?$AAn?$AAu?$AAf?$AAa?$AAc?$AAt?$AAu?$AAr?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x1C006A570: SIPolicyFree
0x1C002E528: "1.3.6.1.4.1.311.10.3.20" ??_C@_0BI@CKBPKMLL@1?43?46?41?44?41?4311?410?43?420?$AA@
0x1C003D378: "__cdecl _imp_MmMapViewInSystemSpaceEx" __imp_MmMapViewInSystemSpaceEx
0x1C003D2A0: "__cdecl _imp_ZwCreateSection" __imp_ZwCreateSection
0x1C0001F18: RtlStringCchPrintfA
0x1C003D008: HAL_NULL_THUNK_DATA
0x1C0010DAC: SymCryptEcpointGetValue
0x1C0036A08: g_SymCryptFlags
0x1C002E158: "CI\Scenarios\8" ??_C@_1BO@DGJAOBID@?$AAC?$AAI?$AA?2?$AAS?$AAc?$AAe?$AAn?$AAa?$AAr?$AAi?$AAo?$AAs?$AA?2?$AA8?$AA?$AA@
0x1C00293C0: memset
0x1C003D80C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0057720: CiRegisterSigningInformation
0x1C003D768: "__cdecl _imp_ExAcquireSpinLockExclusive" __imp_ExAcquireSpinLockExclusive
0x1C002F068: "Kernel_SkuSiStatus" ??_C@_1CG@IHKMJCGK@?$AAK?$AAe?$AAr?$AAn?$AAe?$AAl?$AA_?$AAS?$AAk?$AAu?$AAS?$AAi?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1C00173F0: SymCryptFdefDivisorCreate
0x1C002FCB8: "TargetNtPath" ??_C@_1BK@CIGKBGGO@?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAN?$AAt?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x1C006F898: MFIsHashInGRL
0x1C00BB110: "unsigned char const * const rgbMicrosoftRoot1_Name" ?rgbMicrosoftRoot1_Name@@3QBEB
0x1C0055398: CiLogSIPolicySmartlockerEvent

[JEB Decompiler by PNF Software]