Generated by JEB on 2019/08/01

PE: C:\Windows\System32\wpbcreds.dll Base=0x180000000 SHA-256=89CDDADB1135BE7688F674C53B63630DCD6AF453A3394D5AF06667A19CBA571D
PDB: wpbcreds.pdb GUID={87988F93-3FAF-D335-F84E833093EE16F8} Age=1

476 located named symbols:
0x180016360: "__cdecl _imp_RegDeleteKeyValueW" __imp_RegDeleteKeyValueW
0x180016418: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x1800107F4: "public: long __cdecl CDplServiceImpl::ApplyDplPolicy(struct _DPL_ACCOUNT_POLICY_INFO * __ptr64,unsigned long,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long) __ptr64" ?ApplyDplPolicy@CDplServiceImpl@@QEAAJPEAU_DPL_ACCOUNT_POLICY_INFO@@KP6AJKPEBEKK1KK@ZK@Z
0x180008190: "private: long __cdecl CDplKeyPair::Deserialize(unsigned char * __ptr64,unsigned long) __ptr64" ?Deserialize@CDplKeyPair@@AEAAJPEAEK@Z
0x180014A2C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180016428: "__cdecl _imp_EventRegister" __imp_EventRegister
0x18000C68C: "public: long __cdecl CDplAccount::Deserialize(unsigned char * __ptr64,unsigned long) __ptr64" ?Deserialize@CDplAccount@@QEAAJPEAEK@Z
0x18000DBCC: "public: long __cdecl CDplServiceImpl::SaveDuck(class CDplDuck * __ptr64) __ptr64" ?SaveDuck@CDplServiceImpl@@QEAAJPEAVCDplDuck@@@Z
0x180014840: "__cdecl FindPESection" _FindPESection
0x18001412C: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18001296C: "public: long __cdecl CDplService::EdpCredentialCreate(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?EdpCredentialCreate@CDplService@@QEAAJPEBG00PEAPEAG@Z
0x1800162F0: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x18000D2F8: "public: virtual __cdecl CDplServiceImpl::~CDplServiceImpl(void) __ptr64" ??1CDplServiceImpl@@UEAA@XZ
0x180016578: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x180016380: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x180018380: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180008D68: "public: virtual __cdecl CDplDuck::~CDplDuck(void) __ptr64" ??1CDplDuck@@UEAA@XZ
0x180016090: "public: static unsigned short const * __ptr64 * CDplAccount::SaveValueName" ?SaveValueName@CDplAccount@@2PAPEBGA
0x180016F40: gc_wszLapStateObjectType
0x180016080: "private: static unsigned short const * __ptr64 * CDplDuck::AltKeyName" ?AltKeyName@CDplDuck@@0PAPEBGA
0x18001A0D0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000D468: "public: int __cdecl CDplServiceImpl::IsCurrentLockOwner(void) __ptr64" ?IsCurrentLockOwner@CDplServiceImpl@@QEAAHXZ
0x180016C60: "A7B5A5B5-5635-4241-A7FD-272E0C1F" ??_C@_1EK@IBBECOAK@?$AAA?$AA7?$AAB?$AA5?$AAA?$AA5?$AAB?$AA5?$AA?9?$AA5?$AA6?$AA3?$AA5?$AA?9?$AA4?$AA2?$AA4?$AA1?$AA?9?$AAA?$AA7?$AAF?$AAD?$AA?9?$AA2?$AA7?$AA2?$AAE?$AA0?$AAC?$AA1?$AAF@
0x18000E850: "public: long __cdecl CDplServiceImpl::DeleteDplAccount(class CDplAccount * __ptr64) __ptr64" ?DeleteDplAccount@CDplServiceImpl@@QEAAJPEAVCDplAccount@@@Z
0x1800171A0: "MicrosoftWindowsDplKspKey1" ??_C@_1DG@MOBHAAMG@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAD?$AAp?$AAl?$AAK?$AAs?$AAp?$AAK?$AAe?$AAy?$AA1?$AA?$AA@
0x1800083A8: "private: long __cdecl CDplKeyPair::PostDeserialize(unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,struct CDplKeyPair::_DPL_KEY_PAIR_ID * __ptr64 const,int,unsigned short) __ptr64" ?PostDeserialize@CDplKeyPair@@AEAAJPEBEK0K0K0KQEAU_DPL_KEY_PAIR_ID@1@HG@Z
0x1800141F0: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x18000D3D0: "public: int __cdecl CDplServiceImpl::SvcLock(void) __ptr64" ?SvcLock@CDplServiceImpl@@QEAAHXZ
0x18001425C: "__cdecl CRT_INIT" _CRT_INIT
0x180001A18: "public: long __cdecl CCrypto::HashDataEx(unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,struct _DL_GENERIC_HASH_INFO * __ptr64) __ptr64" ?HashDataEx@CCrypto@@QEAAJPEBEK0KPEAEKPEAKPEAPEAEPEAU_DL_GENERIC_HASH_INFO@@@Z
0x1800162D8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180013A6C: "long __cdecl VlmAlloc(unsigned __int64,void * __ptr64 * __ptr64)" ?VlmAlloc@@YAJ_KPEAPEAX@Z
0x180013010: "long __cdecl VlmpAllocPageEntry(unsigned __int64,enum _VLM_ALLOC_QOS_LEVEL,int,struct _VLM_PAGE_ENTRY * __ptr64 * __ptr64)" ?VlmpAllocPageEntry@@YAJ_KW4_VLM_ALLOC_QOS_LEVEL@@HPEAPEAU_VLM_PAGE_ENTRY@@@Z
0x1800165B0: "__cdecl _imp__wcsrev" __imp__wcsrev
0x180014BE7: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x1800140F8: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x180014CC0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180008D30: "public: virtual void * __ptr64 __cdecl CDplDuck::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplDuck@@UEAAPEAXI@Z
0x180016648: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x180017488: "__cdecl TraceLoggingMetadata" _TraceLoggingMetadata
0x18000F410: "public: long __cdecl CDplServiceImpl::SaveDplAccountAndKeys(class CDplAccount * __ptr64,int) __ptr64" ?SaveDplAccountAndKeys@CDplServiceImpl@@QEAAJPEAVCDplAccount@@H@Z
0x180016500: "__cdecl _imp_BCryptDestroyKey" __imp_BCryptDestroyKey
0x180016268: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180016328: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x180016508: bcrypt_NULL_THUNK_DATA
0x180012F40: "long __cdecl VlmpIncreaseProcessWorkingSetLimits(unsigned __int64)" ?VlmpIncreaseProcessWorkingSetLimits@@YAJ_K@Z
0x180016260: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1800163C8: "__cdecl _imp_SetEvent" __imp_SetEvent
0x180016320: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x180012D5C: "long __cdecl VlmpInitialize(void)" ?VlmpInitialize@@YAJXZ
0x180001134: "__cdecl TlgWrite" _TlgWrite
0x180016678: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180016398: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000E064: "public: void __cdecl CDplServiceImpl::DeleteDuck(int,int,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long) __ptr64" ?DeleteDuck@CDplServiceImpl@@QEAAXHHP6AJKPEBEKK0KK@ZK@Z
0x1800134C8: "void __cdecl VlmpFreePageEntry(struct _VLM_PAGE_ENTRY * __ptr64)" ?VlmpFreePageEntry@@YAXPEAU_VLM_PAGE_ENTRY@@@Z
0x1800170A0: gc_wszCredHashName
0x18001A6A8: "public: static struct _RTL_CRITICAL_SECTION CDplService::m_sSvcLock" ?m_sSvcLock@CDplService@@2U_RTL_CRITICAL_SECTION@@A
0x1800164C8: "__cdecl _imp_BCryptResolveProviders" __imp_BCryptResolveProviders
0x180014826: "__cdecl XcptFilter" _XcptFilter
0x180016680: "__cdecl _xc_a" __xc_a
0x180001090: TraceLoggingRegister
0x18000381C: WpbcGetImpersonationCtxAndRevertToSelf
0x18000611C: "public: long __cdecl CDplKey::Release(void) __ptr64" ?Release@CDplKey@@QEAAJXZ
0x180016478: "__cdecl _imp_BCryptCreateHash" __imp_BCryptCreateHash
0x1800165F0: "__cdecl _imp_NCryptDecrypt" __imp_NCryptDecrypt
0x18001A6A0: "public: static long CDplService::m_sSvcRefCount" ?m_sSvcRefCount@CDplService@@2JA
0x180008D94: "private: void __cdecl CDplDuck::ReleaseKeyMaterial(void) __ptr64" ?ReleaseKeyMaterial@CDplDuck@@AEAAXXZ
0x180016460: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x180016750: "AES" ??_C@_17PJMHNJHG@?$AAA?$AAE?$AAS?$AA?$AA@
0x180016758: "ChainingModeCBC" ??_C@_1CA@NDPDKCGP@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AAC?$AAB?$AAC?$AA?$AA@
0x180016248: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180009958: "private: long __cdecl CDplDuck::Deserialize(unsigned char * __ptr64,unsigned long) __ptr64" ?Deserialize@CDplDuck@@AEAAJPEAEK@Z
0x180016610: "__cdecl _imp_NCryptOpenStorageProvider" __imp_NCryptOpenStorageProvider
0x1800147CC: "__cdecl callnewh" _callnewh
0x180012804: "public: static long __cdecl CDplService::ReadStoredPolicyEx(int,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?ReadStoredPolicyEx@CDplService@@SAJHPEAPEAGPEAK@Z
0x1800015A8: "public: long __cdecl CCrypto::Free(unsigned long,void * __ptr64) __ptr64" ?Free@CCrypto@@QEAAJKPEAX@Z
0x180014C89: memcpy
0x180016C10: "2a6da9bd-0093-4e28-a818-6236df1d" ??_C@_1EK@OMOFPCCH@?$AA2?$AAa?$AA6?$AAd?$AAa?$AA9?$AAb?$AAd?$AA?9?$AA0?$AA0?$AA9?$AA3?$AA?9?$AA4?$AAe?$AA2?$AA8?$AA?9?$AAa?$AA8?$AA1?$AA8?$AA?9?$AA6?$AA2?$AA3?$AA6?$AAd?$AAf?$AA1?$AAd@
0x180016038: "const CDplDuck::`vftable'" ??_7CDplDuck@@6B@
0x1800164D0: "__cdecl _imp_BCryptDecrypt" __imp_BCryptDecrypt
0x180008D30: "public: virtual void * __ptr64 __cdecl CDplDuck::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplDuck@@UEAAPEAXI@Z
0x1800015DC: "public: long __cdecl CCrypto::ValidateDecodeHash(struct _DL_GENERIC_HASH_INFO * __ptr64) __ptr64" ?ValidateDecodeHash@CCrypto@@QEAAJPEAU_DL_GENERIC_HASH_INFO@@@Z
0x180016410: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x1800161C8: "__cdecl _imp_CryptUnprotectMemory" __imp_CryptUnprotectMemory
0x180016510: "__cdecl _imp_memset" __imp_memset
0x18000D668: "public: long __cdecl CDplServiceImpl::MemFree(void * __ptr64) __ptr64" ?MemFree@CDplServiceImpl@@QEAAJPEAX@Z
0x18000CC00: "public: long __cdecl CDplAccount::OnDplPolicyDisabled(void) __ptr64" ?OnDplPolicyDisabled@CDplAccount@@QEAAJXZ
0x1800165F8: "__cdecl _imp_NCryptCreateProtectionDescriptor" __imp_NCryptCreateProtectionDescriptor
0x1800149FF: "__cdecl initterm" _initterm
0x1800140D0: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x1800184C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001A788: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800163E0: "__cdecl _imp_Sleep" __imp_Sleep
0x18001A6D8: "public: static void * __ptr64 __ptr64 CDplService::m_spvCrypto" ?m_spvCrypto@CDplService@@2PEAXEA
0x1800166A0: "__cdecl _xi_z" __xi_z
0x180016210: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180016658: "__cdecl _imp_RtlIsMultiSessionSku" __imp_RtlIsMultiSessionSku
0x180014A0B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800019C0: "public: long __cdecl CCrypto::ValidateHash(unsigned char const * __ptr64,unsigned long) __ptr64" ?ValidateHash@CCrypto@@QEAAJPEBEK@Z
0x1800163C0: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180014C95: memmove
0x180016230: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000FD1C: "public: long __cdecl CDplServiceImpl::LoadDplAccountsAndPolicies(long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long) __ptr64" ?LoadDplAccountsAndPolicies@CDplServiceImpl@@QEAAJP6AJKPEBEKK0KK@ZK@Z
0x180016228: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180016338: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180014C1C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180016EB0: gc_wszShellAeGuid
0x1800042E0: WpbcExportCredentials
0x180005EF8: "long __cdecl StringCbCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCbCopyNW@@YAJPEAG_KPEBG1@Z
0x180016368: api-ms-win-core-registry-l1-1-1_NULL_THUNK_DATA
0x180016E40: gc_wszTestHookPath
0x180017368: "LOCAL=user" ??_C@_1BG@KLHKLNOB@?$AAL?$AAO?$AAC?$AAA?$AAL?$AA?$DN?$AAu?$AAs?$AAe?$AAr?$AA?$AA@
0x180016390: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180016E20: gc_wszAeStateObjectType
0x180016CB0: "{2a6da9bd-0093-4e28-a818-6236df1" ??_C@_1EO@IEDCHIAM@?$AA?$HL?$AA2?$AAa?$AA6?$AAd?$AAa?$AA9?$AAb?$AAd?$AA?9?$AA0?$AA0?$AA9?$AA3?$AA?9?$AA4?$AAe?$AA2?$AA8?$AA?9?$AAa?$AA8?$AA1?$AA8?$AA?9?$AA6?$AA2?$AA3?$AA6?$AAd?$AAf?$AA1@
0x1800183D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x180014832: "__cdecl amsg_exit" _amsg_exit
0x180016568: "__cdecl _imp__callnewh" __imp__callnewh
0x1800140B4: MicrosoftTelemetryAssertTriggeredNoArgs
0x180009EB4: "private: long __cdecl CDplDuck::GetPinHash(void) __ptr64" ?GetPinHash@CDplDuck@@AEAAJXZ
0x1800170F0: "RSAPRIVATEBLOB" ??_C@_1BO@MGHJKOLO@?$AAR?$AAS?$AAA?$AAP?$AAR?$AAI?$AAV?$AAA?$AAT?$AAE?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180016600: "__cdecl _imp_NCryptProtectSecret" __imp_NCryptProtectSecret
0x1800062D8: "public: virtual __cdecl CDplKeyPair::~CDplKeyPair(void) __ptr64" ??1CDplKeyPair@@UEAA@XZ
0x180017420: "<unknown>" ??_C@_09EEKGDCPH@?$DMunknown?$DO?$AA@
0x180016D60: gc_wszDPLDuck0
0x1800113CC: "public: long __cdecl CDplServiceImpl::DplSetNewUserHash(unsigned char const * __ptr64,unsigned long,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long) __ptr64" ?DplSetNewUserHash@CDplServiceImpl@@QEAAJPEBEKP6AJK0KK0KK@ZK@Z
0x1800184AC: "__cdecl _IMPORT_DESCRIPTOR_ncrypt" __IMPORT_DESCRIPTOR_ncrypt
0x180016720: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x180018394: "__cdecl _IMPORT_DESCRIPTOR_bcrypt" __IMPORT_DESCRIPTOR_bcrypt
0x180011B84: "public: long __cdecl CDplServiceImpl::Base64Encode(unsigned char const * __ptr64,unsigned long,int,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Base64Encode@CDplServiceImpl@@QEAAJPEBEKHPEAPEAGPEAK@Z
0x1800167B8: "AlgorithmName" ??_C@_1BM@GMOELGKK@?$AAA?$AAl?$AAg?$AAo?$AAr?$AAi?$AAt?$AAh?$AAm?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x18000BF60: "public: long __cdecl CDplAccount::SerializeW10(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?SerializeW10@CDplAccount@@QEAAJPEAPEAEPEAK@Z
0x1800161C0: "__cdecl _imp_CryptProtectMemory" __imp_CryptProtectMemory
0x1800062A0: "public: virtual void * __ptr64 __cdecl CDplKeyPair::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplKeyPair@@UEAAPEAXI@Z
0x180012740: "public: static long __cdecl CDplService::MemAllocEx(unsigned __int64,int,int,void * __ptr64 * __ptr64)" ?MemAllocEx@CDplService@@SAJ_KHHPEAPEAX@Z
0x180008E18: "private: long __cdecl CDplDuck::GenerateKeyMaterial(unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long) __ptr64" ?GenerateKeyMaterial@CDplDuck@@AEAAJPEBEKK0KK@Z
0x180012A8C: "long __cdecl DplpCreateObject2<class CDplKeyPair,class CDplServiceImpl * __ptr64,class CDplAccount * __ptr64>(class CDplKeyPair * __ptr64 * __ptr64,class CDplServiceImpl * __ptr64,class CDplAccount * __ptr64)" ??$DplpCreateObject2@VCDplKeyPair@@PEAVCDplServiceImpl@@PEAVCDplAccount@@@@YAJPEAPEAVCDplKeyPair@@PEAVCDplServiceImpl@@PEAVCDplAccount@@@Z
0x180016D50: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x1800105C0: "public: long __cdecl CDplServiceImpl::IsDplPolicyEnabledInPolicyStore(unsigned short const * __ptr64,int * __ptr64) __ptr64" ?IsDplPolicyEnabledInPolicyStore@CDplServiceImpl@@QEAAJPEBGPEAH@Z
0x18000D534: "public: long __cdecl CDplServiceImpl::MemAllocEx(unsigned __int64,int,int,void * __ptr64 * __ptr64) __ptr64" ?MemAllocEx@CDplServiceImpl@@QEAAJ_KHHPEAPEAX@Z
0x18001A6D0: "public: static class CDplService * __ptr64 __ptr64 CDplService::m_spDplSvc" ?m_spDplSvc@CDplService@@2PEAV1@EA
0x180016D90: gc_wszDeviceLockRootPath
0x1800163A8: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180016350: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180016218: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180016280: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x180004848: DplGetTestHash
0x180016400: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x1800162C0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000B7B8: "public: virtual __cdecl CDplAccount::~CDplAccount(void) __ptr64" ??1CDplAccount@@UEAA@XZ
0x18001A778: "__cdecl _native_startup_lock" __native_startup_lock
0x180016490: "__cdecl _imp_BCryptHashData" __imp_BCryptHashData
0x18000E248: "public: long __cdecl CDplServiceImpl::GetCreateDplKeyPair(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned char const * __ptr64,unsigned long,class CDplKeyPair * __ptr64 * __ptr64,int * __ptr64) __ptr64" ?GetCreateDplKeyPair@CDplServiceImpl@@QEAAJPEBG0PEBEKPEAPEAVCDplKeyPair@@PEAH@Z
0x180003564: DllMain
0x1800060B0: "public: virtual void * __ptr64 __cdecl CDplKey::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplKey@@UEAAPEAXI@Z
0x180005D54: CheckCaller
0x180016D78: gc_wszDPLDuck1
0x180016370: "__cdecl _imp_RegOpenKeyW" __imp_RegOpenKeyW
0x180010AC4: "public: long __cdecl CDplServiceImpl::DplRemoveUserHash(int,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long) __ptr64" ?DplRemoveUserHash@CDplServiceImpl@@QEAAJHP6AJKPEBEKK0KK@ZK@Z
0x1800161E8: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x1800183A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180016448: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000F5A4: "public: long __cdecl CDplServiceImpl::SaveDplAccountsAndKeys(void) __ptr64" ?SaveDplAccountsAndKeys@CDplServiceImpl@@QEAAJXZ
0x180016530: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180016640: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180016048: "const CDplKey::`vftable'" ??_7CDplKey@@6B@
0x180016270: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18001854C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x180016208: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180014144: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180016438: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x18001A0C0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180014BF8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180016378: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x180016548: "__cdecl _imp_memcmp" __imp_memcmp
0x1800164F8: "__cdecl _imp_BCryptDeriveKeyPBKDF2" __imp_BCryptDeriveKeyPBKDF2
0x1800164A0: "__cdecl _imp_BCryptCloseAlgorithmProvider" __imp_BCryptCloseAlgorithmProvider
0x180016450: "__cdecl _imp_EqualSid" __imp_EqualSid
0x1800076C8: "private: long __cdecl CDplKeyPair::PreSerializeW10(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?PreSerializeW10@CDplKeyPair@@AEAAJPEAPEAEPEAK0101@Z
0x1800165C8: "__cdecl _imp_NCryptSetProperty" __imp_NCryptSetProperty
0x1800162D0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800173A0: "MS-ENTID:" ??_C@_1BE@ICGEFIMO@?$AAM?$AAS?$AA?9?$AAE?$AAN?$AAT?$AAI?$AAD?$AA?3?$AA?$AA@
0x180016340: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180016040: "const CDplKeyPair::`vftable'" ??_7CDplKeyPair@@6B@
0x1800148F0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004EE8: DplGetRawHash
0x180003DD0: WpbcGetPinInfo
0x180014764: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x1800147A3: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x1800062A0: "public: virtual void * __ptr64 __cdecl CDplKeyPair::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplKeyPair@@UEAAPEAXI@Z
0x180016070: gc_pwszValidPinGuids
0x180017168: "MicrosoftWindowsDplKspKey0" ??_C@_1DG@HGKLGHKD@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAD?$AAp?$AAl?$AAK?$AAs?$AAp?$AAK?$AAe?$AAy?$AA0?$AA?$AA@
0x180018538: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180017280: "SmartCardPin" ??_C@_1BK@BLOAFCAL@?$AAS?$AAm?$AAa?$AAr?$AAt?$AAC?$AAa?$AAr?$AAd?$AAP?$AAi?$AAn?$AA?$AA@
0x180016238: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180016388: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x1800163D0: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x1800163B0: "__cdecl _imp_TryEnterCriticalSection" __imp_TryEnterCriticalSection
0x1800144A0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800165A8: "__cdecl _imp_iswspace" __imp_iswspace
0x180016538: "__cdecl _imp__initterm" __imp__initterm
0x18000636C: "private: void __cdecl CDplKeyPair::ReleaseKeyMaterial(void) __ptr64" ?ReleaseKeyMaterial@CDplKeyPair@@AEAAXXZ
0x180018208: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1800147AF: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x1800060B0: "public: virtual void * __ptr64 __cdecl CDplKey::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplKey@@UEAAPEAXI@Z
0x1800023A4: "public: long __cdecl CCrypto::GenerateRandomBytes(unsigned char * __ptr64,unsigned long) __ptr64" ?GenerateRandomBytes@CCrypto@@QEAAJPEAEK@Z
0x180018420: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180018484: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-1
0x1800181E0: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x1800161D0: CRYPT32_NULL_THUNK_DATA
0x180018524: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x1800127B4: "public: static long __cdecl CDplService::MemFree(void * __ptr64)" ?MemFree@CDplService@@SAJPEAX@Z
0x18001A768: "__cdecl _onexitend" __onexitend
0x180012494: "public: static long __cdecl CDplService::GetCreateServiceInstance(class CDplService * __ptr64 * __ptr64)" ?GetCreateServiceInstance@CDplService@@SAJPEAPEAV1@@Z
0x180016480: "__cdecl _imp_BCryptSetProperty" __imp_BCryptSetProperty
0x180016670: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800164E0: "__cdecl _imp_BCryptGetProperty" __imp_BCryptGetProperty
0x180016558: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180017380: "DplAccount_" ??_C@_1BI@DNAAGNIP@?$AAD?$AAp?$AAl?$AAA?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA_?$AA?$AA@
0x1800034E4: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x180016348: "__cdecl _imp_RegGetValueA" __imp_RegGetValueA
0x1800147F0: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x1800164F0: "__cdecl _imp_BCryptEncrypt" __imp_BCryptEncrypt
0x1800162E0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800137D4: "void __cdecl VlmpFreeBlockEntry(struct _VLM_BLOCK_ENTRY * __ptr64)" ?VlmpFreeBlockEntry@@YAXPEAU_VLM_BLOCK_ENTRY@@@Z
0x180016440: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x18000D0B8: "public: long __cdecl CDplAccount::MakeAccountPersistanceName(unsigned __int64,unsigned short * __ptr64 * __ptr64) __ptr64" ?MakeAccountPersistanceName@CDplAccount@@QEAAJ_KPEAPEAG@Z
0x180016778: "ChainingMode" ??_C@_1BK@BCJKEJJO@?$AAC?$AAh?$AAa?$AAi?$AAn?$AAi?$AAn?$AAg?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180016650: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180016DF0: gc_wszDeviceLockObjTablePattern
0x18000979C: "private: long __cdecl CDplDuck::Serialize(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Serialize@CDplDuck@@AEAAJPEAPEAEPEAK@Z
0x180016498: "__cdecl _imp_BCryptDestroyHash" __imp_BCryptDestroyHash
0x18000AD6C: "private: long __cdecl CDplDuck::Protect(unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Protect@CDplDuck@@AEAAJPEBEKKPEAPEAEPEAK@Z
0x1800165E0: "__cdecl _imp_NCryptFreeObject" __imp_NCryptFreeObject
0x180005508: AddToDplPolicy
0x180016408: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180016690: "__cdecl _xi_a" __xi_a
0x180012298: "public: virtual __cdecl CDplService::~CDplService(void) __ptr64" ??1CDplService@@UEAA@XZ
0x1800163F0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180010680: "public: void __cdecl CDplServiceImpl::OnDeviceLockStateChange(int) __ptr64" ?OnDeviceLockStateChange@CDplServiceImpl@@QEAAXH@Z
0x180017320: "PCP_ALTERNATE_KEY_STORAGE_LOCATI" ??_C@_1EG@HAHIDIOJ@?$AAP?$AAC?$AAP?$AA_?$AAA?$AAL?$AAT?$AAE?$AAR?$AAN?$AAA?$AAT?$AAE?$AA_?$AAK?$AAE?$AAY?$AA_?$AAS?$AAT?$AAO?$AAR?$AAA?$AAG?$AAE?$AA_?$AAL?$AAO?$AAC?$AAA?$AAT?$AAI@
0x180016458: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1800035E0: WpbcInitialize
0x1800141B0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x180018240: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x180012114: "public: long __cdecl CDplServiceImpl::EdpCredentialDelete(unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?EdpCredentialDelete@CDplServiceImpl@@QEAAJKPEBG000@Z
0x1800170C0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001840C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000B8E4: "public: long __cdecl CDplAccount::Serialize(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Serialize@CDplAccount@@QEAAJPEAPEAEPEAK@Z
0x180001010: "__cdecl TlgEnableCallback" _TlgEnableCallback
0x180016288: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18001A790: "__cdecl pRawDllMain" _pRawDllMain
0x180016520: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x180016F60: gc_wszActiveLapGuid
0x180016030: "const CDplService::`vftable'" ??_7CDplService@@6B@
0x180014194: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180013C30: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertProv
0x180007A54: "private: long __cdecl CDplKeyPair::Serialize(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?Serialize@CDplKeyPair@@AEAAJPEAPEAEPEAK@Z
0x180016018: "const type_info::`vftable'" ??_7type_info@@6B@
0x1800183F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1800038E0: WpbcCreateTestPin
0x18000B780: "public: virtual void * __ptr64 __cdecl CDplAccount::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplAccount@@UEAAPEAXI@Z
0x1800163B8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x1800173E8: "SYSTEM\CurrentControlSet\Service" ??_C@_0DB@NAOFCFIK@SYSTEM?2CurrentControlSet?2Service@
0x180016618: "__cdecl _imp_NCryptCloseProtectionDescriptor" __imp_NCryptCloseProtectionDescriptor
0x180014740: "__cdecl _security_check_cookie" __security_check_cookie
0x180012260: "public: virtual void * __ptr64 __cdecl CDplService::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplService@@UEAAPEAXI@Z
0x180016688: "__cdecl _xc_z" __xc_z
0x180016488: "__cdecl _imp_BCryptExportKey" __imp_BCryptExportKey
0x180018434: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18001A758: "struct _RTL_SRWLOCK g_MicrosoftTelemetryAssertLock" ?g_MicrosoftTelemetryAssertLock@@3U_RTL_SRWLOCK@@A
0x1800162F8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800170C8: "RSA" ??_C@_17CEGMJBCM@?$AAR?$AAS?$AAA?$AA?$AA@
0x180007DF4: "private: long __cdecl CDplKeyPair::SerializeW10(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?SerializeW10@CDplKeyPair@@AEAAJPEAPEAEPEAK@Z
0x18000D910: "public: long __cdecl CDplServiceImpl::GetCreateDuckEx(int,unsigned char const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long,class CDplDuck * __ptr64 * __ptr64) __ptr64" ?GetCreateDuckEx@CDplServiceImpl@@QEAAJHPEBEKKP6AJK0KK0KK@ZKPEAPEAVCDplDuck@@@Z
0x1800165D8: "__cdecl _imp_NCryptEncrypt" __imp_NCryptEncrypt
0x180016050: "const CDplServiceImpl::`vftable'" ??_7CDplServiceImpl@@6B@
0x180017138: "LOCAL=machine" ??_C@_1BM@NIBLMJKB@?$AAL?$AAO?$AAC?$AAA?$AAL?$AA?$DN?$AAm?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
0x1800147D8: "__cdecl CxxThrowException" _CxxThrowException
0x18001757B: "__cdecl TraceLoggingMetadataEnd" _TraceLoggingMetadataEnd
0x1800163F8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18001A098: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x180016250: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18000D2C0: "public: virtual void * __ptr64 __cdecl CDplServiceImpl::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplServiceImpl@@UEAAPEAXI@Z
0x180016240: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1800162B0: api-ms-win-core-memory-l1-1-1_NULL_THUNK_DATA
0x180006198: "public: __cdecl CDplKeyPair::CDplKeyPair(class CDplServiceImpl * __ptr64,class CDplAccount * __ptr64) __ptr64" ??0CDplKeyPair@@QEAA@PEAVCDplServiceImpl@@PEAVCDplAccount@@@Z
0x1800165D0: "__cdecl _imp_NCryptUnprotectSecret" __imp_NCryptUnprotectSecret
0x1800147F0: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x180003C40: WpbcCreateRemoveTestCredentials
0x18001A698: "class CCrypto * __ptr64 __ptr64 g_pCrypto" ?g_pCrypto@@3PEAVCCrypto@@EA
0x1800123F4: "public: static void __cdecl CDplService::Cleanup(void)" ?Cleanup@CDplService@@SAXXZ
0x1800173D0: "VlmLockingAllowed" ??_C@_0BC@MDFLEDBP@VlmLockingAllowed?$AA@
0x1800164D8: "__cdecl _imp_BCryptFreeBuffer" __imp_BCryptFreeBuffer
0x18000A7A8: "private: long __cdecl CDplDuck::Unseal(void) __ptr64" ?Unseal@CDplDuck@@AEAAJXZ
0x18000D724: "public: long __cdecl CDplServiceImpl::GetTrimmedEntIdString(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?GetTrimmedEntIdString@CDplServiceImpl@@QEAAJPEBGPEAPEAGPEA_K@Z
0x1800161B8: "__cdecl _imp_CryptBinaryToStringW" __imp_CryptBinaryToStringW
0x1800135AC: "long __cdecl VlmpAllocBlockEntry(struct _VLM_PAGE_ENTRY * __ptr64,unsigned __int64,struct _VLM_BLOCK_ENTRY * __ptr64 * __ptr64)" ?VlmpAllocBlockEntry@@YAJPEAU_VLM_PAGE_ENTRY@@_KPEAPEAU_VLM_BLOCK_ENTRY@@@Z
0x18000A0BC: "private: long __cdecl CDplDuck::SoftSealUnseal(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int) __ptr64" ?SoftSealUnseal@CDplDuck@@AEAAJPEBEKPEAEKPEAPEAEPEAKH@Z
0x180016308: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800166A8: "__cdecl _guard_fids_table" __guard_fids_table
0x18000B868: "public: long __cdecl CDplAccount::Release(void) __ptr64" ?Release@CDplAccount@@QEAAJXZ
0x1800165C0: msvcrt_NULL_THUNK_DATA
0x1800160B0: "__cdecl load_config_used" _load_config_used
0x180016588: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x180010FF0: "public: long __cdecl CDplServiceImpl::DplVerifyUser(unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,int * __ptr64) __ptr64" ?DplVerifyUser@CDplServiceImpl@@QEAAJPEBEK0KKPEAH@Z
0x1800141B0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x180012AFC: "long __cdecl DplpCreateObject1<class CDplDuck,class CDplServiceImpl * __ptr64>(class CDplDuck * __ptr64 * __ptr64,class CDplServiceImpl * __ptr64)" ??$DplpCreateObject1@VCDplDuck@@PEAVCDplServiceImpl@@@@YAJPEAPEAVCDplDuck@@PEAVCDplServiceImpl@@@Z
0x18001845C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x1800165E8: "__cdecl _imp_NCryptCreatePersistedKey" __imp_NCryptCreatePersistedKey
0x18000AD18: "private: void __cdecl CDplDuck::OnDeviceLocked(void) __ptr64" ?OnDeviceLocked@CDplDuck@@AEAAXXZ
0x180018448: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x180016560: "__cdecl _imp_toupper" __imp_toupper
0x180013BC4: "long __cdecl VlmFree(void * __ptr64)" ?VlmFree@@YAJPEAX@Z
0x180016290: "__cdecl _imp_VirtualLock" __imp_VirtualLock
0x180016358: "__cdecl _imp_RegSetKeyValueW" __imp_RegSetKeyValueW
0x180016058: "const CDplAccount::`vftable'" ??_7CDplAccount@@6B@
0x1800132E0: "long __cdecl VlmpFindAndUnlockPageEntry(unsigned __int64)" ?VlmpFindAndUnlockPageEntry@@YAJ_K@Z
0x180005928: RemoveFromDplPolicy
0x180016540: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000FE08: "public: long __cdecl CDplServiceImpl::GetDplPolicy(struct _DPL_ACCOUNT_POLICY_INFO * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?GetDplPolicy@CDplServiceImpl@@QEAAJPEAPEAU_DPL_ACCOUNT_POLICY_INFO@@PEAK@Z
0x1800147C0: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x1800164C0: "__cdecl _imp_BCryptOpenAlgorithmProvider" __imp_BCryptOpenAlgorithmProvider
0x18000B780: "public: virtual void * __ptr64 __cdecl CDplAccount::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCDplAccount@@UEAAPEAXI@Z
0x180012260: "public: virtual void * __ptr64 __cdecl CDplService::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplService@@UEAAPEAXI@Z
0x180016638: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800164B8: "__cdecl _imp_BCryptGenRandom" __imp_BCryptGenRandom
0x180016470: "__cdecl _imp_BCryptGenerateSymmetricKey" __imp_BCryptGenerateSymmetricKey
0x180016300: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002C44: "public: long __cdecl CCrypto::DecryptHashData(unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?DecryptHashData@CCrypto@@QEAAJPEBEK0KPEAPEAEPEAK@Z
0x180016798: "ObjectLength" ??_C@_1BK@GPNIFMAA@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x180016278: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180016580: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18001A760: "struct MicrosoftTelemetryAssertTriggeredNode * __ptr64 __ptr64 g_MicrosoftTelemetryAssertsTriggeredList" ?g_MicrosoftTelemetryAssertsTriggeredList@@3PEAUMicrosoftTelemetryAssertTriggeredNode@@EA
0x180016000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x180016D00: "{A7B5A5B5-5635-4241-A7FD-272E0C1" ??_C@_1EO@CLHNNBON@?$AA?$HL?$AAA?$AA7?$AAB?$AA5?$AAA?$AA5?$AAB?$AA5?$AA?9?$AA5?$AA6?$AA3?$AA5?$AA?9?$AA4?$AA2?$AA4?$AA1?$AA?9?$AAA?$AA7?$AAF?$AAD?$AA?9?$AA2?$AA7?$AA2?$AAE?$AA0?$AAC?$AA1@
0x1800161E0: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180016660: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180016330: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180016F98: gc_wszCredActualLengthName
0x180002500: "public: long __cdecl CCrypto::EncryptHashData(unsigned char const * __ptr64,unsigned long,int,unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?EncryptHashData@CCrypto@@QEAAJPEBEKH0K0KPEAPEAEPEAK@Z
0x18000D2C0: "public: virtual void * __ptr64 __cdecl CDplServiceImpl::`vector deleting destructor'(unsigned int) __ptr64" ??_ECDplServiceImpl@@UEAAPEAXI@Z
0x180017030: gc_wszDPLAccount0
0x180016FC8: gc_wszDPLAccount1
0x180003458: "long __cdecl StringCbCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCbCopyW@@YAJPEAG_KPEBG@Z
0x180014A20: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180014C7D: memcmp
0x180003FA0: WpbcVerifyUser
0x180007168: "private: long __cdecl CDplKeyPair::PreSerialize(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?PreSerialize@CDplKeyPair@@AEAAJPEAPEAEPEAK0101@Z
0x180012BC8: "long __cdecl DplpCreateObject6<class CDplAccount,class CDplServiceImpl * __ptr64,struct _GUID,unsigned short * __ptr64,unsigned short * __ptr64,int,int>(class CDplAccount * __ptr64 * __ptr64,class CDplServiceImpl * __ptr64,struct _GUID,unsigned short * __ptr64,unsigned short * __ptr64,int,int)" ??$DplpCreateObject6@VCDplAccount@@PEAVCDplServiceImpl@@U_GUID@@PEAGPEAGHH@@YAJPEAPEAVCDplAccount@@PEAVCDplServiceImpl@@U_GUID@@PEAG3HH@Z
0x1800164E8: "__cdecl _imp_BCryptGenerateKeyPair" __imp_BCryptGenerateKeyPair
0x1800011D4: "public: long __cdecl CCrypto::Initialize(void) __ptr64" ?Initialize@CCrypto@@QEAAJXZ
0x180018498: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180011D04: "public: long __cdecl CDplServiceImpl::EdpCredentialIdMake(unsigned short const * __ptr64,struct _GUID * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?EdpCredentialIdMake@CDplServiceImpl@@QEAAJPEBGPEAU_GUID@@PEAPEAG@Z
0x18000A81C: "private: long __cdecl CDplDuck::UnsealEx(unsigned char const * __ptr64,unsigned long,unsigned long) __ptr64" ?UnsealEx@CDplDuck@@AEAAJPEBEKK@Z
0x18000D424: "public: int __cdecl CDplServiceImpl::SvcUnlock(void) __ptr64" ?SvcUnlock@CDplServiceImpl@@QEAAHXZ
0x180017110: "SP800_108_CTR_HMAC" ??_C@_1CG@GKFGHMMK@?$AAS?$AAP?$AA8?$AA0?$AA0?$AA_?$AA1?$AA0?$AA8?$AA_?$AAC?$AAT?$AAR?$AA_?$AAH?$AAM?$AAA?$AAC?$AA?$AA@
0x1800117AC: "public: long __cdecl CDplServiceImpl::DplGetSaltedHash(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?DplGetSaltedHash@CDplServiceImpl@@QEAAJPEBEKPEAPEAEPEAK2@Z
0x18001478C: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18001A6E0: "public: static int CDplService::m_sGlobalInit" ?m_sGlobalInit@CDplService@@2HA
0x18000B260: "private: long __cdecl CDplDuck::Unprotect(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64) __ptr64" ?Unprotect@CDplDuck@@AEAAJPEBEKPEAPEAEPEAK2@Z
0x18000F73C: "public: long __cdecl CDplServiceImpl::LoadDplAccountsAndKeys(void) __ptr64" ?LoadDplAccountsAndKeys@CDplServiceImpl@@QEAAJXZ
0x180013CE0: MicrosoftTelemetryAssertTriggeredWorker
0x180016550: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180016668: ntdll_NULL_THUNK_DATA
0x180016598: "__cdecl _imp_memcpy" __imp_memcpy
0x18001A078: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x1800103D8: "public: void __cdecl CDplServiceImpl::FreeDplPolicy(struct _DPL_ACCOUNT_POLICY_INFO * __ptr64,unsigned long) __ptr64" ?FreeDplPolicy@CDplServiceImpl@@QEAAXPEAU_DPL_ACCOUNT_POLICY_INFO@@K@Z
0x18001A000: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x180006498: "private: long __cdecl CDplKeyPair::GenerateKeyMaterial(unsigned __int64,struct _GUID const & __ptr64) __ptr64" ?GenerateKeyMaterial@CDplKeyPair@@AEAAJ_KAEBU_GUID@@@Z
0x1800183BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800126A8: "public: static long __cdecl CDplService::ReleaseServiceInstance(class CDplService * __ptr64)" ?ReleaseServiceInstance@CDplService@@SAJPEAV1@@Z
0x180016528: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x18001A0C8: "__cdecl _security_cookie" __security_cookie
0x180008CA4: "private: void __cdecl CDplKeySequence::ClearKdfCache(void) __ptr64" ?ClearKdfCache@CDplKeySequence@@AEAAXXZ
0x180016FE8: gc_wszDPLTestPinLengthValue
0x180011F90: "public: long __cdecl CDplServiceImpl::EdpCredentialQuery(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?EdpCredentialQuery@CDplServiceImpl@@QEAAJPEBG00PEAPEAG@Z
0x180010C28: "public: long __cdecl CDplServiceImpl::DplLogonUser(unsigned char const * __ptr64,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,long (__cdecl*)(unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long,unsigned char const * __ptr64,unsigned long,unsigned long),unsigned long,int * __ptr64) __ptr64" ?DplLogonUser@CDplServiceImpl@@QEAAJPEBEK0KKP6AJK0KK0KK@ZKPEAH@Z
0x180016220: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180016258: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180016628: "__cdecl _imp_NCryptDeleteKey" __imp_NCryptDeleteKey
0x180018470: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180017230: "Microsoft Software Key Storage P" ??_C@_1FA@OAAKELHB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?5?$AAP@
0x180016F80: gc_wszDeviceLockObjRootPattern
0x1800171E0: "Microsoft Platform Crypto Provid" ??_C@_1EG@LKLLOCAK@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAP?$AAl?$AAa?$AAt?$AAf?$AAo?$AAr?$AAm?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?5?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd@
0x1800173B8: "%s%s%s%s" ??_C@_1BC@GIKFGOCP@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x18001A770: "__cdecl _onexitbegin" __onexitbegin
0x180016060: gc_pwszValidPinGuidNames
0x180016430: "__cdecl _imp_EventProviderEnabled" __imp_EventProviderEnabled
0x1800060E8: "public: virtual __cdecl CDplKey::~CDplKey(void) __ptr64" ??1CDplKey@@UEAA@XZ
0x1800162A8: "__cdecl _imp_GetProcessWorkingSetSizeEx" __imp_GetProcessWorkingSetSizeEx
0x180016630: ncrypt_NULL_THUNK_DATA
0x1800165B8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180005070: DplUpdateRawHashes
0x180016570: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x180016200: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800162E8: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x1800164A8: "__cdecl _imp_BCryptFinalizeKeyPair" __imp_BCryptFinalizeKeyPair
0x180016318: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180014924: "__cdecl _security_init_cookie" __security_init_cookie
0x1800167D8: "HashDigestLength" ??_C@_1CC@DMMMEHOM@?$AAH?$AAa?$AAs?$AAh?$AAD?$AAi?$AAg?$AAe?$AAs?$AAt?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?$AA@
0x1800164B0: "__cdecl _imp_BCryptFinishHash" __imp_BCryptFinishHash
0x1800170D0: "RSAPUBLICBLOB" ??_C@_1BM@BJJGGDHH@?$AAR?$AAS?$AAA?$AAP?$AAU?$AAB?$AAL?$AAI?$AAC?$AAB?$AAL?$AAO?$AAB?$AA?$AA@
0x180016310: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180014797: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x18001836C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180016468: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x180016518: "__cdecl _imp_memmove" __imp_memmove
0x180016608: "__cdecl _imp_NCryptOpenKey" __imp_NCryptOpenKey
0x1800161D8: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x180016590: "__cdecl _imp_malloc" __imp_malloc
0x180016620: "__cdecl _imp_NCryptFinalizeKey" __imp_NCryptFinalizeKey
0x1800160A0: "private: static unsigned short const * __ptr64 * CDplDuck::SaveValueName" ?SaveValueName@CDplDuck@@0PAPEBGA
0x18001A670: "struct _RTL_CRITICAL_SECTION g_csLock" ?g_csLock@@3U_RTL_CRITICAL_SECTION@@A
0x180016420: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x1800183E4: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x1800161F8: RPCRT4_NULL_THUNK_DATA
0x180016F00: gc_wszDPLEnabledEnterpriseIDs
0x180014A70: "__cdecl _report_gsfailure" __report_gsfailure
0x180013C30: "__cdecl TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv" _TlgDefineProvider_annotation__Tlgmtaum_hTelemetryAssertDiagTrackProv
0x1800163A0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18000240C: "public: long __cdecl CCrypto::BuildCrc32(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?BuildCrc32@CCrypto@@QEAAJPEAEKPEAK@Z
0x1800049DC: DplGetHash
0x18000DD68: "public: long __cdecl CDplServiceImpl::LoadDuck(void) __ptr64" ?LoadDuck@CDplServiceImpl@@QEAAJXZ
0x180017398: "|" ??_C@_13PPFCDPMH@?$AA?$HM?$AA?$AA@
0x18001A780: "__cdecl _native_startup_state" __native_startup_state
0x18000D4D8: "public: long __cdecl CDplServiceImpl::Release(void) __ptr64" ?Release@CDplServiceImpl@@QEAAJXZ
0x180010460: "public: long __cdecl CDplServiceImpl::DoesDplPolicyApplyToAccount(struct _DPL_ACCOUNT_POLICY_INFO * __ptr64,unsigned short const * __ptr64,int * __ptr64) __ptr64" ?DoesDplPolicyApplyToAccount@CDplServiceImpl@@QEAAJPEAU_DPL_ACCOUNT_POLICY_INFO@@PEBGPEAH@Z
0x1800162A0: "__cdecl _imp_SetProcessWorkingSetSizeEx" __imp_SetProcessWorkingSetSizeEx
0x180012CA4: "void __cdecl VlmCleanup(void)" ?VlmCleanup@@YAXXZ
0x18000CE18: "public: long __cdecl CDplAccount::OnDplPolicyEnabled(void) __ptr64" ?OnDplPolicyEnabled@CDplAccount@@QEAAJXZ
0x180017158: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180018510: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800184FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-1
0x1800162C8: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180017010: gc_wszDPLTestPinHashValue
0x1800161F0: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x18000247C: "public: long __cdecl CCrypto::CheckCrc32(unsigned char * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?CheckCrc32@CCrypto@@QEAAJPEAEKPEAK@Z
0x180018228: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x1800172A0: "C:\Data\USERS\WPCRITICAL\APPDATA" ??_C@_1HO@DPLGLCFB@?$AAC?$AA?3?$AA?2?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?2?$AAW?$AAP?$AAC?$AAR?$AAI?$AAT?$AAI?$AAC?$AAA?$AAL?$AA?2?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA@
0x18000EC04: "public: long __cdecl CDplServiceImpl::EnumRefEnterpriseCredentials(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned char const * __ptr64,unsigned long,class CDplAccount * __ptr64 * __ptr64 * __ptr64,class CDplKeyPair * __ptr64 * __ptr64 * __ptr64,int * __ptr64 * __ptr64,unsigned __int64 * __ptr64) __ptr64" ?EnumRefEnterpriseCredentials@CDplServiceImpl@@QEAAJPEBG0PEAGPEBEKPEAPEAPEAVCDplAccount@@PEAPEAPEAVCDplKeyPair@@PEAPEAHPEA_K@Z
0x1800184E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180016298: "__cdecl _imp_VirtualUnlock" __imp_VirtualUnlock
0x180017050: gc_wszDeviceLockLastCommittedObjTableIndex
0x1800165A0: "__cdecl _imp_free" __imp_free
0x180014890: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800163E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800162B8: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1800163D8: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800184D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180003790: WpbcCleanup
0x180014CA1: memset
0x180018560: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]